@aeolus-fleet/core 0.0.0 → 0.19.0

package/dist/adapters/rest/rest-api.js

@@ -0,0 +1,61 @@
+/**
+ * `/api/v1`: the ship contract as REST, for ships that are not TypeScript or
+ * not MCP-capable (ADR 0004). One route per ship procedure and fleet action, each a call
+ * through the router (see trpc/ship-contract.ts), and the OpenAPI spec
+ * generated from the same procedures at `/api/v1/openapi.json`, rendered for
+ * people at `/api/v1/docs`.
+ *
+ * A ship says who it is with the crew token as `Authorization: Bearer`
+ * (ADR 0015); `register` takes the ship secret in its body instead. The
+ * console session cookie is never read here: REST is a door for ships.
+ */
+import fastifyApiReference from '@scalar/fastify-api-reference';
+import { readBearer } from '../http/request-credentials.js';
+import { callShip, refusalBody, SHIP_CALLS, unexpectedFailure } from '../trpc/ship-contract.js';
+import { API_TITLE, openApiDocument } from './openapi.js';
+const PREFIX = '/api/v1';
+const OPENAPI_PATH = `${PREFIX}/openapi.json`;
+const OPENAPI_DOCUMENT = openApiDocument(SHIP_CALLS);
+/** Mounts `/api/v1` on the HTTP server: a query without input as GET, the others as POST with a JSON body. */
+export function registerRestApi(server, options) {
+    server.get(OPENAPI_PATH, () => OPENAPI_DOCUMENT);
+    // The viewer reads the spec above, and the server serves its script itself.
+    // The page talks only to the fleet: Scalar's fonts would come from its CDN,
+    // and its agent and developer tools call Scalar's services. With no request
+    // proxy set, "Try it" calls the fleet directly.
+    void server.register(fastifyApiReference, {
+        routePrefix: `${PREFIX}/docs`,
+        configuration: {
+            url: OPENAPI_PATH,
+            pageTitle: API_TITLE,
+            withDefaultFonts: false,
+            agent: { disabled: true },
+            showDeveloperTools: 'never',
+            telemetry: false,
+        },
+    });
+    for (const call of SHIP_CALLS) {
+        server.route({
+            method: call.method,
+            url: `${PREFIX}${call.route}`,
+            handler: async (request, reply) => {
+                try {
+                    const result = await callShip(call, {
+                        ctx: options.contextFor(request, { bearer: readBearer(request.headers.authorization) }),
+                        input: request.body,
+                        log: request.log,
+                    });
+                    if (result.isOk) {
+                        return result.output;
+                    }
+                    return await reply.code(result.refusal.httpStatus).send(refusalBody(result.refusal));
+                }
+                catch (thrown) {
+                    const refusal = unexpectedFailure(thrown, { log: request.log, requestId: request.id });
+                    return await reply.code(refusal.httpStatus).send(refusalBody(refusal));
+                }
+            },
+        });
+    }
+}
+//# sourceMappingURL=rest-api.js.map

package/dist/adapters/rest/rest-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-api.js","sourceRoot":"","sources":["../../../src/adapters/rest/rest-api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,mBAAmB,MAAM,+BAA+B,CAAC;AAGhE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAE5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAChG,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,MAAM,GAAG,SAAS,CAAC;AAEzB,MAAM,YAAY,GAAG,GAAG,MAAM,eAAe,CAAC;AAE9C,MAAM,gBAAgB,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;AAOrD,8GAA8G;AAC9G,MAAM,UAAU,eAAe,CAAC,MAAuB,EAAE,OAAuB;IAC9E,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAC;IAEjD,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,gDAAgD;IAChD,KAAK,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE;QACxC,WAAW,EAAE,GAAG,MAAM,OAAO;QAC7B,aAAa,EAAE;YACb,GAAG,EAAE,YAAY;YACjB,SAAS,EAAE,SAAS;YACpB,gBAAgB,EAAE,KAAK;YACvB,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;YACzB,kBAAkB,EAAE,OAAO;YAC3B,SAAS,EAAE,KAAK;SACjB;KACF,CAAC,CAAC;IAEH,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC;YACX,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE;YAC7B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;gBAChC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;wBAClC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;wBACvF,KAAK,EAAE,OAAO,CAAC,IAAI;wBACnB,GAAG,EAAE,OAAO,CAAC,GAAG;qBACjB,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;wBAChB,OAAO,MAAM,CAAC,MAAM,CAAC;oBACvB,CAAC;oBACD,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvF,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBAChB,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;oBACvF,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/adapters/trpc/console.d.ts

@@ -0,0 +1,150 @@
+/**
+ * Console procedures: the only ones that exist for the web app alone. They take
+ * the operator's email and password once and work with the session cookie,
+ * which crews `argo`, from then on. Both change state, so both come only from
+ * the console's origin.
+ */
+export declare const consoleRouter: import("@trpc/server").TRPCBuiltRouter<{
+    ctx: import("./context.js").Context;
+    meta: import("./trpc.js").ProcedureMeta;
+    errorShape: import("@trpc/server").TRPCDefaultErrorShape | {
+        message: string;
+        data: {
+            requestId: string | undefined;
+            code: import("@trpc/server").TRPC_ERROR_CODE_KEY;
+            httpStatus: number;
+            path?: string;
+            stack?: string;
+        };
+        code: import("@trpc/server").TRPC_ERROR_CODE_NUMBER;
+    };
+    transformer: false;
+}, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+    /** Exchanges the email and password for a session cookie. A mutation, so the password travels in the body, never the URL. */
+    signIn: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            email: string;
+            password: string;
+        };
+        output: void;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /**
+     * Exchanges a sign-in ticket a hosting installation issued for a session
+     * cookie, as a password sign-in does (docs/blueprint.md, "Installation"). The
+     * console's own server calls it with the browser's ticket and passes the
+     * cookie on, so it takes no console origin: the ticket is the credential,
+     * and it signs in once.
+     */
+    redeemSignInTicket: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            ticket: string;
+        };
+        output: void;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** The signed-in operator: email, theme, and this console session's device and start; a viewer's session alone. */
+    account: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
+        output: {
+            kind: "operator";
+            email: string;
+            theme: "system" | "light" | "dark";
+            session: {
+                device: string;
+                since: string;
+            };
+        } | {
+            kind: "viewer";
+            session: {
+                device: string;
+                since: string;
+            };
+        };
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /**
+     * Whether the request carries a signed-in console session: for another
+     * service the operator uses beside the console (decision 0012), which
+     * forwards the browser's cookie from its own server and serves its pages
+     * without a login of its own. Only the cookie counts, never a crew token:
+     * a ship is no operator. Says whose session it is, the operator's or a
+     * viewer's, and its ship's scopes, so that service serves a viewer reads
+     * only. Counts as console use, so the session's expiry moves as on any
+     * console call. A query: it comes from any origin.
+     */
+    session: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
+        output: {
+            fleetId: `flt_${string}`;
+            expiresAt: string;
+            kind: "operator" | "viewer";
+            scopes: ("messages:send" | "messages:receive" | "fleet:read" | "fleet:manage" | "crew:assign" | "crew:run")[];
+        };
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** Stores the operator's theme on their account, so it follows them to any browser. */
+    setTheme: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            theme: "system" | "light" | "dark";
+        };
+        output: Record<string, never>;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** The notices this console session shows above every page (decision 0023): those of its audience it has not dismissed. */
+    notices: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
+        output: {
+            id: string;
+            audience: "everyone" | "operators" | "viewers";
+            text: string;
+            links: {
+                label: string;
+                url?: string | undefined;
+                isSignOut?: boolean | undefined;
+            }[];
+            isDismissible: boolean;
+        }[];
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** The guide this console session shows (decision 0024), with where it is in it; null when no guide is for its audience. */
+    guide: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
+        output: {
+            steps: {
+                path: string;
+                title: string;
+                text: string;
+                anchor?: string | undefined;
+            }[];
+            progress: {
+                step: number;
+                state: "open" | "skipped" | "finished";
+            };
+        } | null;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** Records where this console session is in the guide, for itself only. */
+    recordGuideProgress: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            step: number;
+            state: "open" | "skipped" | "finished";
+        };
+        output: void;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** Dismisses a dismissible notice for this console session only. */
+    dismissNotice: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            noticeId: string;
+        };
+        output: void;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** Ends the console session in the cookie and releases argo's lease. Always clears the cookie. */
+    signOut: import("@trpc/server").TRPCMutationProcedure<{
+        input: void;
+        output: void;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+}>>;

package/dist/adapters/trpc/console.js

@@ -0,0 +1,102 @@
+import { accountOutputSchema, consoleGuideOutputSchema, consoleNoticesOutputSchema, consoleSessionOutputSchema, dismissNoticeInputSchema, setGuideProgressInputSchema, setThemeInputSchema, setThemeOutputSchema, redeemSignInTicketInputSchema, signInInputSchema, } from '@aeolus-fleet/common';
+import { TRPCError } from '@trpc/server';
+import { deviceLabelOf } from '../http/device-label.js';
+import { guideStepsOutputOf, noticeOutputOf } from './installation.js';
+import { authenticatedProcedure, ConsoleRefusalDetails, consoleProcedure, okOrThrow, publicProcedure, router } from './trpc.js';
+/**
+ * Console procedures: the only ones that exist for the web app alone. They take
+ * the operator's email and password once and work with the session cookie,
+ * which crews `argo`, from then on. Both change state, so both come only from
+ * the console's origin.
+ */
+export const consoleRouter = router({
+    /** Exchanges the email and password for a session cookie. A mutation, so the password travels in the body, never the URL. */
+    signIn: consoleProcedure
+        .use(({ ctx, next }) => {
+        if (!ctx.takeSignInAttempt(ctx.clientKey)) {
+            throw new TRPCError({
+                code: 'TOO_MANY_REQUESTS',
+                message: 'Too many sign-in attempts. Wait a minute.',
+                cause: new ConsoleRefusalDetails({ retryAt: ctx.signInRetryAt(ctx.clientKey).toISOString() }),
+            });
+        }
+        return next();
+    })
+        .input(signInInputSchema)
+        .mutation(async ({ ctx, input }) => {
+        const { token, expiresAt } = okOrThrow(await ctx.useCases.signIn({ ...input, device: deviceLabelOf(ctx.userAgent) }));
+        ctx.sessionCookie.set(token, expiresAt);
+    }),
+    /**
+     * Exchanges a sign-in ticket a hosting installation issued for a session
+     * cookie, as a password sign-in does (docs/blueprint.md, "Installation"). The
+     * console's own server calls it with the browser's ticket and passes the
+     * cookie on, so it takes no console origin: the ticket is the credential,
+     * and it signs in once.
+     */
+    redeemSignInTicket: publicProcedure.input(redeemSignInTicketInputSchema).mutation(async ({ ctx, input }) => {
+        const { token, expiresAt } = okOrThrow(await ctx.useCases.redeemSignInTicket({ ...input, device: deviceLabelOf(ctx.userAgent) }));
+        ctx.sessionCookie.set(token, expiresAt);
+    }),
+    /** The signed-in operator: email, theme, and this console session's device and start; a viewer's session alone. */
+    account: authenticatedProcedure.output(accountOutputSchema).query(async ({ ctx }) => {
+        const account = okOrThrow(await ctx.useCases.readAccount(ctx.caller));
+        return { ...account, session: { ...account.session, since: account.session.since.toISOString() } };
+    }),
+    /**
+     * Whether the request carries a signed-in console session: for another
+     * service the operator uses beside the console (decision 0012), which
+     * forwards the browser's cookie from its own server and serves its pages
+     * without a login of its own. Only the cookie counts, never a crew token:
+     * a ship is no operator. Says whose session it is, the operator's or a
+     * viewer's, and its ship's scopes, so that service serves a viewer reads
+     * only. Counts as console use, so the session's expiry moves as on any
+     * console call. A query: it comes from any origin.
+     */
+    session: publicProcedure.output(consoleSessionOutputSchema).query(async ({ ctx }) => {
+        const { sessionToken } = ctx.credentials;
+        const use = sessionToken === undefined ? undefined : await ctx.useCases.authenticate.byConsoleSession(sessionToken);
+        if (!use) {
+            throw new TRPCError({ code: 'UNAUTHORIZED', message: 'No signed-in console session' });
+        }
+        const { fleetId, kind, scopes } = use.caller;
+        if (kind === 'agent') {
+            // A console session is the operator's or a viewer's; no agent ever signs in to the console.
+            throw new TRPCError({ code: 'UNAUTHORIZED', message: 'No signed-in console session' });
+        }
+        return { fleetId, expiresAt: use.expiresAt.toISOString(), kind, scopes: [...scopes] };
+    }),
+    /** Stores the operator's theme on their account, so it follows them to any browser. */
+    setTheme: authenticatedProcedure
+        .input(setThemeInputSchema)
+        .output(setThemeOutputSchema)
+        .mutation(async ({ ctx, input }) => {
+        okOrThrow(await ctx.useCases.setTheme(ctx.caller, input));
+        return {};
+    }),
+    /** The notices this console session shows above every page (decision 0023): those of its audience it has not dismissed. */
+    notices: authenticatedProcedure.output(consoleNoticesOutputSchema).query(async ({ ctx }) => (await ctx.useCases.readNotices(ctx.caller)).map(noticeOutputOf)),
+    /** The guide this console session shows (decision 0024), with where it is in it; null when no guide is for its audience. */
+    guide: authenticatedProcedure.output(consoleGuideOutputSchema).query(async ({ ctx }) => {
+        const guide = await ctx.useCases.readGuide(ctx.caller);
+        return guide === null ? null : { steps: guideStepsOutputOf(guide.steps), progress: guide.progress };
+    }),
+    /** Records where this console session is in the guide, for itself only. */
+    recordGuideProgress: authenticatedProcedure.input(setGuideProgressInputSchema).mutation(async ({ ctx, input }) => {
+        okOrThrow(await ctx.useCases.recordGuideProgress(ctx.caller, input));
+    }),
+    /** Dismisses a dismissible notice for this console session only. */
+    dismissNotice: authenticatedProcedure.input(dismissNoticeInputSchema).mutation(async ({ ctx, input }) => {
+        okOrThrow(await ctx.useCases.dismissNotice(ctx.caller, input));
+    }),
+    /** Ends the console session in the cookie and releases argo's lease. Always clears the cookie. */
+    signOut: consoleProcedure.mutation(async ({ ctx }) => {
+        const { sessionToken } = ctx.credentials;
+        const use = sessionToken === undefined ? undefined : await ctx.useCases.authenticate.byConsoleSession(sessionToken);
+        if (use) {
+            await ctx.useCases.signOut(use.caller);
+        }
+        ctx.sessionCookie.clear();
+    }),
+});
+//# sourceMappingURL=console.js.map

package/dist/adapters/trpc/console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.js","sourceRoot":"","sources":["../../../src/adapters/trpc/console.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,2BAA2B,EAC3B,mBAAmB,EACnB,oBAAoB,EACpB,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEhI;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;IAClC,6HAA6H;IAC7H,MAAM,EAAE,gBAAgB;SACrB,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;QACrB,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAAC;gBAClB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,2CAA2C;gBACpD,KAAK,EAAE,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;aAC9F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;SACD,KAAK,CAAC,iBAAiB,CAAC;SACxB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QACtH,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEJ;;;;;;OAMG;IACH,kBAAkB,EAAE,eAAe,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACzG,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAClI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEF,mHAAmH;IACnH,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAClF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;IACrG,CAAC,CAAC;IAEF;;;;;;;;;OASG;IACH,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QAClF,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;QACzC,MAAM,GAAG,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpH,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;QAC7C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,4FAA4F;YAC5F,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;IACxF,CAAC,CAAC;IAEF,uFAAuF;IACvF,QAAQ,EAAE,sBAAsB;SAC7B,KAAK,CAAC,mBAAmB,CAAC;SAC1B,MAAM,CAAC,oBAAoB,CAAC;SAC5B,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEJ,2HAA2H;IAC3H,OAAO,EAAE,sBAAsB,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE7J,4HAA4H;IAC5H,KAAK,EAAE,sBAAsB,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACrF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;IACtG,CAAC,CAAC;IAEF,2EAA2E;IAC3E,mBAAmB,EAAE,sBAAsB,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QAC/G,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC;IAEF,oEAAoE;IACpE,aAAa,EAAE,sBAAsB,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;QACtG,SAAS,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,kGAAkG;IAClG,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACnD,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC;QACzC,MAAM,GAAG,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACpH,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC;CACH,CAAC,CAAC"}

package/dist/adapters/trpc/context.d.ts

@@ -0,0 +1,201 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { Authenticate } from '../../domain/identity/authenticate.js';
+import type { ReadAccount } from '../../domain/identity/read-account.js';
+import type { SetTheme } from '../../domain/identity/set-theme.js';
+import type { SignIn } from '../../domain/identity/sign-in.js';
+import type { SignOut } from '../../domain/identity/sign-out.js';
+import type { AcknowledgeDelivery } from '../../domain/messaging/acknowledge-delivery.js';
+import type { AnswerPing } from '../../domain/messaging/answer-ping.js';
+import type { CheckInbox } from '../../domain/messaging/check-inbox.js';
+import type { DismissDelivery } from '../../domain/messaging/dismiss-delivery.js';
+import type { MarkDone } from '../../domain/messaging/mark-done.js';
+import type { MarkRead } from '../../domain/messaging/mark-read.js';
+import type { ReceiveDeliveries } from '../../domain/messaging/receive-deliveries.js';
+import type { ReplyToMessage } from '../../domain/messaging/reply-to-message.js';
+import type { PingShip } from '../../domain/messaging/ping-ship.js';
+import type { ResendDelivery } from '../../domain/messaging/resend-delivery.js';
+import type { SendMessage } from '../../domain/messaging/send-message.js';
+import type { ClaimShip } from '../../domain/registry/claim-ship.js';
+import type { IssueSignInTicket } from '../../domain/identity/issue-sign-in-ticket.js';
+import type { RedeemSignInTicket } from '../../domain/identity/redeem-sign-in-ticket.js';
+import type { GetFleetLimits } from '../../domain/registry/get-fleet-limits.js';
+import type { DismissNotice } from '../../domain/identity/dismiss-notice.js';
+import type { GetGuide } from '../../domain/identity/get-guide.js';
+import type { GetNotices } from '../../domain/identity/get-notices.js';
+import type { ReadGuide } from '../../domain/identity/read-guide.js';
+import type { ReadNotices } from '../../domain/identity/read-notices.js';
+import type { RecordGuideProgress } from '../../domain/identity/record-guide-progress.js';
+import type { SetGuide } from '../../domain/identity/set-guide.js';
+import type { SetNotices } from '../../domain/identity/set-notices.js';
+import type { GetInstallationSettings } from '../../domain/registry/get-installation-settings.js';
+import type { SetFleetLimits } from '../../domain/registry/set-fleet-limits.js';
+import type { SetInstallationSettings } from '../../domain/registry/set-installation-settings.js';
+import type { ReadFleetLimits } from '../../domain/shared/read-fleet-limits.js';
+import type { CommissionShip } from '../../domain/registry/commission-ship.js';
+import type { CreateFleet } from '../../domain/registry/create-fleet.js';
+import type { DeleteFleet } from '../../domain/registry/delete-fleet.js';
+import type { GetInstallationFleet } from '../../domain/registry/get-installation-fleet.js';
+import type { ListInstallationFleets } from '../../domain/registry/list-installation-fleets.js';
+import type { Deregister } from '../../domain/registry/deregister.js';
+import type { GetShip } from '../../domain/registry/get-ship.js';
+import type { GetStartingPrompt } from '../../domain/registry/get-starting-prompt.js';
+import type { ListFleet } from '../../domain/registry/list-fleet.js';
+import type { RecrewShip } from '../../domain/registry/recrew-ship.js';
+import type { ReleaseShip } from '../../domain/registry/release-ship.js';
+import type { RenameShip } from '../../domain/registry/rename-ship.js';
+import type { RetireShip } from '../../domain/registry/retire-ship.js';
+import type { Report } from '../../domain/registry/report.js';
+import type { Whoami } from '../../domain/registry/whoami.js';
+import type { ReadReportLog } from '../../domain/registry/report-log.js';
+import type { RequestCrew } from '../../domain/registry/request-crew.js';
+import type { RemoveCrewRequest } from '../../domain/registry/remove-crew-request.js';
+import type { AssignCrew } from '../../domain/registry/assign-crew.js';
+import type { ReportCrewStatus } from '../../domain/registry/report-crew-status.js';
+import type { ConfirmCrewRelease } from '../../domain/registry/confirm-crew-release.js';
+import type { ReadAssignedCrewRequests } from '../../domain/registry/read-assigned-crew-requests.js';
+import type { ExplainCrewRequest } from '../../domain/registry/explain-crew-request.js';
+import type { Ping } from '../../domain/shared/ping.js';
+import type { ReadFleetEvents } from '../../domain/shared/read-fleet-events.js';
+import type { FollowFleet } from '../../domain/shared/follow-fleet.js';
+import type { ReadInbox } from '../../domain/shared/read-inbox.js';
+import type { ReadMessage } from '../../domain/shared/read-message.js';
+import type { ReadNeedsAttention } from '../../domain/shared/read-needs-attention.js';
+import type { ReadShipMessages } from '../../domain/shared/read-ship-messages.js';
+import type { ReadShipTimeline } from '../../domain/shared/read-ship-timeline.js';
+/** The use cases procedures can call. Wired once at startup. */
+export interface UseCases {
+    ping: Ping;
+    signIn: SignIn;
+    signOut: SignOut;
+    readAccount: ReadAccount;
+    setTheme: SetTheme;
+    setNotices: SetNotices;
+    getNotices: GetNotices;
+    readNotices: ReadNotices;
+    dismissNotice: DismissNotice;
+    setGuide: SetGuide;
+    getGuide: GetGuide;
+    readGuide: ReadGuide;
+    recordGuideProgress: RecordGuideProgress;
+    authenticate: Authenticate;
+    commissionShip: CommissionShip;
+    getStartingPrompt: GetStartingPrompt;
+    releaseShip: ReleaseShip;
+    retireShip: RetireShip;
+    renameShip: RenameShip;
+    recrewShip: RecrewShip;
+    listFleet: ListFleet;
+    getShip: GetShip;
+    claimShip: ClaimShip;
+    whoami: Whoami;
+    report: Report;
+    reportLog: ReadReportLog;
+    requestCrew: RequestCrew;
+    removeCrewRequest: RemoveCrewRequest;
+    assignCrew: AssignCrew;
+    reportCrewStatus: ReportCrewStatus;
+    confirmCrewRelease: ConfirmCrewRelease;
+    readAssignedCrewRequests: ReadAssignedCrewRequests;
+    explainCrewRequest: ExplainCrewRequest;
+    deregister: Deregister;
+    sendMessage: SendMessage;
+    receiveDeliveries: ReceiveDeliveries;
+    acknowledgeDelivery: AcknowledgeDelivery;
+    answerPing: AnswerPing;
+    pingShip: PingShip;
+    checkInbox: CheckInbox;
+    dismissDelivery: DismissDelivery;
+    resendDelivery: ResendDelivery;
+    markRead: MarkRead;
+    markDone: MarkDone;
+    replyToMessage: ReplyToMessage;
+    readFleetEvents: ReadFleetEvents;
+    followFleet: FollowFleet;
+    readShipTimeline: ReadShipTimeline;
+    readShipMessages: ReadShipMessages;
+    readMessage: ReadMessage;
+    readNeedsAttention: ReadNeedsAttention;
+    readInbox: ReadInbox;
+    createFleet: CreateFleet;
+    deleteFleet: DeleteFleet;
+    listInstallationFleets: ListInstallationFleets;
+    getInstallationFleet: GetInstallationFleet;
+    issueSignInTicket: IssueSignInTicket;
+    redeemSignInTicket: RedeemSignInTicket;
+    getInstallationSettings: GetInstallationSettings;
+    setInstallationSettings: SetInstallationSettings;
+    getFleetLimits: GetFleetLimits;
+    setFleetLimits: SetFleetLimits;
+    readFleetLimits: ReadFleetLimits;
+}
+/** What the request carried to say who it is. Neither is trusted until a use case checks it. */
+export interface RequestCredentials {
+    /** A crew token from `Authorization: Bearer`. */
+    bearer?: string;
+    /** A console session token from the session cookie. */
+    sessionToken?: string;
+}
+/** Writes the console session cookie on the response. */
+export interface SessionCookie {
+    set(token: string, expiresAt: Date): void;
+    clear(): void;
+}
+/** Wakes a live subscription when its fleet has committed events. */
+export interface FleetEventWatches {
+    watch(fleetId: FleetId): {
+        /** True when woken; false when the subscription ended or the server stops. */
+        next(signal: AbortSignal): Promise<boolean>;
+        stop(): void;
+    };
+}
+/**
+ * The installation token (docs/architecture.md, "Installation"): the one the
+ * server is configured with, none when the installation procedures are off,
+ * and the one the request presented in x-aeolus-installation-token.
+ */
+export interface InstallationCredential {
+    configured: string | undefined;
+    presented: string | undefined;
+}
+/** Where a procedure writes what the server must keep a record of, such as a deleted fleet. */
+export interface ProcedureLog {
+    info(details: Record<string, unknown>, message: string): void;
+}
+export interface Context {
+    useCases: UseCases;
+    installation: InstallationCredential;
+    log: ProcedureLog;
+    /** Where ships reach the fleet, the public URL: what starting prompts and crew lines carry. */
+    fleetUrl: string;
+    fleetEvents: FleetEventWatches;
+    credentials: RequestCredentials;
+    /**
+     * Whether the door takes the console session: `/trpc` does. The doors for
+     * ships (REST, MCP) take the crew token alone, so a refusal there names only
+     * the crew token; a ship has no console to sign in to.
+     */
+    canUseConsoleSession: boolean;
+    sessionCookie: SessionCookie;
+    /** The User-Agent header the request carried, if any: what a console sign-in names its device by. */
+    userAgent: string | undefined;
+    /** The Origin header the request carried, if any. A browser sends one with every POST. */
+    origin: string | undefined;
+    /** The console's origin: the only one state-changing console calls may come from. */
+    consoleOrigin: string;
+    /** Who is asking, for rate limits: the client address. */
+    clientKey: string;
+    /** This request's own id: a server failure answers with it, and its log line carries it. */
+    requestId: string;
+    /** Counts sign-in attempts per client; false when over the limit. */
+    takeSignInAttempt: (clientKey: string) => boolean;
+    /** When a client over the sign-in limit may try again. */
+    signInRetryAt: (clientKey: string) => Date;
+    /**
+     * Failed register attempts per client, apart from sign-in attempts: only a
+     * wrong ship id or secret counts, never a successful claim (ADR 0015).
+     */
+    registerFailures: {
+        hasRoom(clientKey: string): boolean;
+        count(clientKey: string): void;
+    };
+}

package/dist/adapters/trpc/context.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=context.js.map

package/dist/adapters/trpc/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../src/adapters/trpc/context.ts"],"names":[],"mappings":""}