@aeolus-fleet/gateway 0.0.0-stage → 0.0.0

package/dist/adapters/http/mcp-endpoint.js

@@ -0,0 +1,164 @@
+/**
+ * The gateway's MCP endpoint for outside MCP clients (interop 3.3), over
+ * Streamable HTTP and stateless: each request is served by a fresh server for
+ * the client its access token names. No token, or one the gateway did not
+ * issue for this endpoint, gets 401 with where to sign in (RFC 9728). A
+ * client party gets 403 while its fleet's outside parties are off (interop I-3).
+ */
+import { CLIENT_CAPABILITIES_META_KEY, createMcpHandler, isCallToolResult, McpServer, ProtocolError, ProtocolErrorCode } from '@modelcontextprotocol/server';
+import { z } from 'zod';
+import { isToolResultType } from '../../core/mcp-out/content-types.js';
+import { createdTaskOf, DEADLINE_PASSED, taskOf, TASKS_EXTENSION } from './mcp-task.js';
+import { personServerFor } from './person-tools.js';
+import { runningVersion } from './version.js';
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_FORBIDDEN = 403;
+/** The gateway's own tool: the answer to a call that answered a handle. */
+const RESULT_TOOL = {
+    name: 'aeolus_result',
+    title: 'Read a call',
+    description: "A call's state and, once it is answered, its answer. Call it with the handle a tool answered, and again later while the call is not answered.",
+    inputSchema: { type: 'object', properties: { handle: { type: 'string' } }, required: ['handle'] },
+};
+const argumentsSchema = z.record(z.string(), z.unknown()).default({});
+const resultArgumentsSchema = z.object({ handle: z.string() });
+const taskParamsSchema = z.looseObject({ taskId: z.string() });
+/** The capabilities a client declares on each request (2026-07-28), as far as the gateway reads them. */
+const envelopeSchema = z.object({ [CLIENT_CAPABILITIES_META_KEY]: z.object({ extensions: z.record(z.string(), z.unknown()).optional() }).optional() });
+/** Whether the client declared the Tasks extension on this request: only then may it be answered a task. */
+const isTaskClient = (envelope) => envelopeSchema.safeParse(envelope).data?.[CLIENT_CAPABILITIES_META_KEY]?.extensions?.[TASKS_EXTENSION] !== undefined;
+/** tools/call's params, as the gateway reads them: its result may be a task, which the SDK's own tools/call does not type. */
+const callParamsSchema = z.looseObject({ name: z.string(), arguments: z.unknown().optional() });
+/** A tool's answer as one text block of JSON. */
+const answered = (value, isError = false) => ({ content: [{ type: 'text', text: JSON.stringify(value) }], ...(isError ? { isError } : {}) });
+/** A tool error the client's model reads: what went wrong, never a fleet's reasons. */
+const toolError = (message) => ({ content: [{ type: 'text', text: message }], isError: true });
+/** An answer that is an outside tool's result, as MCP out replies one, if it parses as one. */
+function toolResultOf(payload) {
+    try {
+        const parsed = JSON.parse(payload);
+        return isCallToolResult(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** What aeolus_result answers: the call's answer once completed, as the tool's own result where it is one; else its state. */
+function resultOf(read) {
+    switch (read.state) {
+        case 'completed':
+            return (isToolResultType(read.answer.contentType) ? toolResultOf(read.answer.payload) : undefined) ?? { content: [{ type: 'text', text: read.answer.payload }] };
+        case 'failed':
+            return toolError(DEADLINE_PASSED);
+        case 'submitted':
+        case 'working':
+            return answered({ handle: read.handle, state: read.state });
+    }
+}
+/** The request as the SDK's web-standard handler takes it. Fastify has read the JSON body already. */
+function webRequestOf(request) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(request.headers)) {
+        for (const each of Array.isArray(value) ? value : [value]) {
+            if (each !== undefined) {
+                headers.append(name, each);
+            }
+        }
+    }
+    return new Request(new URL(request.url, `${request.protocol}://${request.host}`), { method: request.method, headers });
+}
+/** A JSON Schema of an object, as MCP's tool takes one. */
+const objectSchema = z.object({ type: z.literal('object') }).catchall(z.json());
+/** The MCP server one request of one client is served by. Its tools are known per request, from the fleet, so it lists them itself. */
+function serverFor(holder, deps) {
+    const mcp = new McpServer({ name: 'aeolus-gateway', version: runningVersion() }, { capabilities: { tools: {}, extensions: { [TASKS_EXTENSION]: {} } } });
+    mcp.server.setRequestHandler('tools/list', async () => {
+        const listed = await deps.listTools({ fleetId: holder.fleetId, party: holder.party });
+        if (!listed.isOk) {
+            throw new Error(listed.error.message);
+        }
+        // Where each call goes stays with the gateway: the client sees aliases only.
+        return {
+            tools: listed.value.map(({ name, title, description, inputSchema }) => ({
+                name,
+                ...(title === undefined ? {} : { title }),
+                description,
+                inputSchema: objectSchema.parse(inputSchema),
+            })).concat(RESULT_TOOL),
+        };
+    });
+    mcp.server.setRequestHandler('tools/call', { params: callParamsSchema }, async (params, ctx) => {
+        const caller = { fleetId: holder.fleetId, party: holder.party };
+        if (params.name === RESULT_TOOL.name) {
+            const sent = resultArgumentsSchema.safeParse(params.arguments);
+            if (!sent.success) {
+                return toolError('aeolus_result takes the handle a tool answered');
+            }
+            const read = await deps.readClientCall(caller, sent.data.handle);
+            return read.isOk ? resultOf(read.value) : toolError(read.error.message);
+        }
+        const values = argumentsSchema.safeParse(params.arguments);
+        if (!values.success) {
+            return toolError('A tool takes its arguments as an object');
+        }
+        const called = await deps.callTool(caller, { name: params.name, arguments: values.data });
+        if (!called.isOk) {
+            return toolError(called.error.message);
+        }
+        const isUnanswered = called.value.state === 'submitted' || called.value.state === 'working';
+        return isUnanswered && isTaskClient(ctx.mcpReq.envelope) ? createdTaskOf(called.value) : resultOf(called.value);
+    });
+    /** The party's own call by its task id; another party's or none is an error. */
+    const readTask = async (taskId) => {
+        const read = await deps.readClientCall({ fleetId: holder.fleetId, party: holder.party }, taskId);
+        if (!read.isOk) {
+            throw new ProtocolError(ProtocolErrorCode.InvalidParams, `No task ${taskId} of this party`);
+        }
+        return read.value;
+    };
+    mcp.server.setRequestHandler('tasks/get', { params: taskParamsSchema }, async ({ taskId }) => taskOf(await readTask(taskId), resultOf));
+    // Acknowledged and nothing changes: a sent call cannot be unsent, and no call asks for input yet.
+    for (const method of ['tasks/cancel', 'tasks/update']) {
+        mcp.server.setRequestHandler(method, { params: taskParamsSchema }, async ({ taskId }) => {
+            await readTask(taskId);
+            return {};
+        });
+    }
+    return mcp;
+}
+export function registerMcpEndpoint(server, deps) {
+    const resourceMetadata = `${new URL(deps.resource).origin}/.well-known/oauth-protected-resource${new URL(deps.resource).pathname}`;
+    const unauthorized = (reply, error) => reply
+        .code(HTTP_UNAUTHORIZED)
+        .header('www-authenticate', `Bearer ${error === undefined ? '' : `error="${error}", `}resource_metadata="${resourceMetadata}"`)
+        .send({ error: error ?? 'unauthorized' });
+    server.all(new URL(deps.resource).pathname, async (request, reply) => {
+        const authorization = request.headers.authorization;
+        if (authorization?.startsWith('Bearer ') !== true) {
+            return unauthorized(reply, undefined);
+        }
+        const holder = await deps.authenticateAccessToken(authorization.slice('Bearer '.length));
+        if (!holder.isOk) {
+            return unauthorized(reply, 'invalid_token');
+        }
+        const held = holder.value;
+        const { person } = deps;
+        let serve;
+        if (held.kind === 'party') {
+            if (!(await deps.servesOutsideParties(held.fleetId))) {
+                return reply.code(HTTP_FORBIDDEN).send({ error: 'outside_parties_off', error_description: "This fleet's outside parties are off" });
+            }
+            serve = () => serverFor({ fleetId: held.fleetId, party: held.party }, deps);
+        }
+        else if (person === undefined) {
+            // An account's token is issued only where people sign in, so it finds their tools.
+            return unauthorized(reply, 'invalid_token');
+        }
+        else {
+            serve = () => personServerFor({ fleetId: held.fleetId, grantId: held.grantId }, person);
+        }
+        const handler = createMcpHandler(serve);
+        return handler.fetch(webRequestOf(request), { parsedBody: request.body });
+    });
+}
+//# sourceMappingURL=mcp-endpoint.js.map

package/dist/adapters/http/mcp-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-endpoint.js","sourceRoot":"","sources":["../../../src/adapters/http/mcp-endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAE7J,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,eAAe,EAAwB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAe3B,2EAA2E;AAC3E,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,+IAA+I;IAC5J,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE;CAC3G,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACtE,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/D,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/D,yGAAyG;AACzG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEvJ,4GAA4G;AAC5G,MAAM,YAAY,GAAG,CAAC,QAAiB,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,UAAU,EAAE,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEjK,8HAA8H;AAC9H,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEhG,iDAAiD;AACjD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAE/J,uFAAuF;AACvF,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhH,+FAA+F;AAC/F,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8HAA8H;AAC9H,SAAS,QAAQ,CAAC,IAAc;IAC9B,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC5K,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,eAAe,CAAC,CAAC;QACpC,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAS,YAAY,CAAC,OAAuB;IAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACzH,CAAC;AAED,2DAA2D;AAC3D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAEhF,uIAAuI;AACvI,SAAS,SAAS,CAAC,MAA2C,EAAE,IAAqB;IACnF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzJ,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,6EAA6E;QAC7E,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACtE,IAAI;gBACJ,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzC,WAAW;gBACX,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;aAC7C,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC7F,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,SAAS,CAAC,gDAAgD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC,yCAAyC,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QAC5F,OAAO,YAAY,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;IACH,gFAAgF;IAChF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACjG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,aAAa,EAAE,WAAW,MAAM,gBAAgB,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxI,kGAAkG;IAClG,KAAK,MAAM,MAAM,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACtF,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAuB,EAAE,IAAqB;IAChF,MAAM,gBAAgB,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,wCAAwC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnI,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAE,KAAyB,EAAE,EAAE,CACtE,KAAK;SACF,IAAI,CAAC,iBAAiB,CAAC;SACvB,MAAM,CAAC,kBAAkB,EAAE,UAAU,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,sBAAsB,gBAAgB,GAAG,CAAC;SAC9H,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,cAAc,EAAE,CAAC,CAAC;IAE9C,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnE,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACpD,IAAI,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACxB,IAAI,KAAsB,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACtI,CAAC;YACD,KAAK,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,mFAAmF;YACnF,OAAO,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/http/mcp-task.d.ts

@@ -0,0 +1,45 @@
+import type { ReadCall } from '../../core/mcp-in/read-client-call.js';
+export declare const TASKS_EXTENSION = "io.modelcontextprotocol/tasks";
+/** What a failed call's task says: the ship never answered, and it may have run. */
+export declare const DEADLINE_PASSED = "The call got no answer before its deadline. It may have run all the same.";
+/** The task tools/call answers in place of its result, for a call not answered within its wait. */
+export declare function createdTaskOf(read: ReadCall): {
+    status: "working";
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "task";
+};
+/** The task tasks/get answers: a completed call carries its answer as the tool's result, which resultOf gives. */
+export declare function taskOf(read: ReadCall, resultOf: (read: ReadCall) => Record<string, unknown>): {
+    status: "working";
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "complete";
+} | {
+    status: "completed";
+    result: Record<string, unknown>;
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "complete";
+} | {
+    status: "failed";
+    error: {
+        code: number;
+        message: string;
+    };
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "complete";
+};

package/dist/adapters/http/mcp-task.js

@@ -0,0 +1,35 @@
+/**
+ * An outside client's call as an MCP task (the Tasks extension,
+ * io.modelcontextprotocol/tasks, 2026-07-28). The task id is the call's
+ * handle, already an HMAC of its message id; the call store is the task's
+ * durable state, so the task exists once the call was kept (interop 3.3).
+ * Submitted and working are both MCP's working (interop 3.4).
+ */
+import { INTERNAL_ERROR } from '@modelcontextprotocol/server';
+export const TASKS_EXTENSION = 'io.modelcontextprotocol/tasks';
+/** How often a client reads a task: the fleet answers in seconds, not milliseconds. */
+const POLL_INTERVAL_MS = 2000;
+/** What a failed call's task says: the ship never answered, and it may have run. */
+export const DEADLINE_PASSED = 'The call got no answer before its deadline. It may have run all the same.';
+/** The fields every task carries. The gateway keeps every call, so no task expires. */
+function taskFieldsOf(read) {
+    return { taskId: read.handle, createdAt: read.createdAt.toISOString(), lastUpdatedAt: read.updatedAt.toISOString(), ttlMs: null, pollIntervalMs: POLL_INTERVAL_MS };
+}
+/** The task tools/call answers in place of its result, for a call not answered within its wait. */
+export function createdTaskOf(read) {
+    return { resultType: 'task', ...taskFieldsOf(read), status: 'working' };
+}
+/** The task tasks/get answers: a completed call carries its answer as the tool's result, which resultOf gives. */
+export function taskOf(read, resultOf) {
+    const task = { resultType: 'complete', ...taskFieldsOf(read) };
+    switch (read.state) {
+        case 'submitted':
+        case 'working':
+            return { ...task, status: 'working' };
+        case 'completed':
+            return { ...task, status: 'completed', result: resultOf(read) };
+        case 'failed':
+            return { ...task, status: 'failed', error: { code: INTERNAL_ERROR, message: DEADLINE_PASSED } };
+    }
+}
+//# sourceMappingURL=mcp-task.js.map

package/dist/adapters/http/mcp-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-task.js","sourceRoot":"","sources":["../../../src/adapters/http/mcp-task.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAI9D,MAAM,CAAC,MAAM,eAAe,GAAG,+BAA+B,CAAC;AAE/D,uFAAuF;AACvF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,2EAA2E,CAAC;AAE3G,uFAAuF;AACvF,SAAS,YAAY,CAAC,IAAc;IAClC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AACtK,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,EAAE,UAAU,EAAE,MAAe,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC;AAC5F,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,MAAM,CAAC,IAAc,EAAE,QAAqD;IAC1F,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,UAAmB,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IACxE,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC;QACjD,KAAK,WAAW;YACd,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,KAAK,QAAQ;YACX,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC;IAC7G,CAAC;AACH,CAAC"}

package/dist/adapters/http/oauth-routes.d.ts

@@ -0,0 +1,35 @@
+/**
+ * The gateway's OAuth 2.1 authorization server over HTTP, for outside MCP
+ * clients (MCP 2026-07-28 authorization): the metadata of RFC 9728 and RFC
+ * 8414; /authorize, where a person picks what the client acts as (Q1 a) and
+ * is sent to pagasae to sign in; /pagasae/callback, where pagasae sends them
+ * back; the waiting page, where a client asked for waits for an approver
+ * (decision 0056); and /token. Each route parses the request and calls one
+ * use case. Only a signed-in account asks for a client, so a gateway where
+ * no pagasae is set answers no client (Thomas's question A).
+ */
+import type { FastifyInstance } from 'fastify';
+import type { ExchangeToken } from '../../core/oauth/exchange-token.js';
+import type { ReadAuthorization } from '../../core/oauth/read-authorization.js';
+import type { ReadWaiting } from '../../core/requests/read-waiting.js';
+import type { WatchWaiting } from '../../core/requests/watch-waiting.js';
+import type { Clock } from '../../core/shared/clock.js';
+import type { CompleteSignIn } from '../../core/sign-in/complete-sign-in.js';
+import { type StartSignIn } from '../../core/sign-in/start-sign-in.js';
+import { type ChangeHub } from './live.js';
+export interface OAuthRoutesDeps {
+    issuer: string;
+    resource: string;
+    readAuthorization: ReadAuthorization;
+    exchangeToken: ExchangeToken;
+    /** Signing people in through pagasae (decision 0054) and their clients' waits, followed live; unset where no pagasae is set. */
+    signIn?: {
+        start: StartSignIn;
+        complete: CompleteSignIn;
+        readWaiting: ReadWaiting;
+        watchWaiting: WatchWaiting;
+        hub: ChangeHub;
+        clock: Clock;
+    };
+}
+export declare function registerOAuthRoutes(server: FastifyInstance, deps: OAuthRoutesDeps): void;

package/dist/adapters/http/oauth-routes.js

@@ -0,0 +1,305 @@
+import { z } from 'zod';
+import { REQUEST_LIFETIME_MS } from '../../core/requests/open-request.js';
+import { SIGN_IN_LIFETIME_MS } from '../../core/sign-in/start-sign-in.js';
+import { acceptForms, escaped, isSameOrigin } from './html.js';
+import { acceptWebsockets } from './live.js';
+import { handshake, icon, ring, signInPage, statusBadge } from './signal.js';
+const HTTP_FOUND = 302;
+const HTTP_BAD_REQUEST = 400;
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_FORBIDDEN = 403;
+const HTTP_NOT_FOUND = 404;
+const HTTP_BAD_GATEWAY = 502;
+const MS_PER_SECOND = 1000;
+/** Why the waiting page's live channel was closed: it does not open again. */
+const CLOSE_OTHER_ORIGIN = 4403;
+/** Whether the gateway is served over HTTPS, so its cookies go over HTTPS only. */
+const isHttps = (issuer) => new URL(issuer).protocol === 'https:';
+/** The parameters of an authorization request the page carries from its query to its form. */
+const AUTHORIZATION_PARAMETERS = ['response_type', 'client_id', 'redirect_uri', 'code_challenge', 'code_challenge_method', 'resource', 'state', 'scope'];
+const fieldsSchema = z.record(z.string(), z.unknown()).transform((fields) => Object.fromEntries(Object.entries(fields).flatMap(([name, value]) => (typeof value === 'string' ? [[name, value]] : []))));
+/** What the person may pick the client to act as. */
+const holderSchema = z.enum(['account', 'party']);
+function fieldsOf(value) {
+    const fields = fieldsSchema.safeParse(value);
+    return fields.success ? fields.data : {};
+}
+function authorizationRequestOf(fields) {
+    return Object.fromEntries(AUTHORIZATION_PARAMETERS.map((name) => [name, fields[name]]));
+}
+/** A page of the gateway, never cached. */
+function htmlPage(reply, page) {
+    return reply.code(page.status).type('text/html; charset=utf-8').header('cache-control', 'no-store').send(signInPage({ title: page.title, body: page.body }));
+}
+/** How an error page leads (design B): one ring in its tone around one icon, dashed for what ended, and one title. */
+const ERROR_LOOKS = {
+    invalidClient: { tone: 'attention', icon: 'alert', heading: 'This client cannot connect' },
+    noPick: { tone: 'attention', icon: 'alert', heading: 'Pick how to connect' },
+    signInEnded: { tone: 'ended', icon: 'timerOff', heading: 'Sign-in ended', isDashed: true },
+    otherBrowser: { tone: 'attention', icon: 'shieldX', heading: 'Not this browser' },
+    noFleet: { tone: 'attention', icon: 'shieldX', heading: 'No fleet for you' },
+    outsidePartiesOff: { tone: 'ended', icon: 'powerOff', heading: 'Outside parties are off' },
+    signInFailed: { tone: 'attention', icon: 'alert', heading: 'Sign-in did not go through' },
+    requestEnded: { tone: 'ended', icon: 'timerOff', heading: 'Request ended', isDashed: true },
+    noSignIn: { tone: 'ended', icon: 'ban', heading: 'No sign-in here' },
+};
+/** A page that tells a person why their client got nothing, sending them nowhere. */
+function errorPage(reply, page) {
+    const look = ERROR_LOOKS[page.look];
+    const lead = ring({ tone: look.tone, center: { icon: look.icon }, label: look.heading, size: 144, ...(look.isDashed === undefined ? {} : { isDashed: look.isDashed }) });
+    return htmlPage(reply, { status: page.status, title: page.title, body: `${lead}<h1>${escaped(look.heading)}</h1><p class="muted">${escaped(page.message)}</p>` });
+}
+/** The cookie the browser that started a sign-in holds its secret in, sent back to the callback only. */
+const SIGN_IN_COOKIE = { name: 'aeolus_sign_in', path: '/pagasae/callback' };
+/** The cookie the browser that asked for a client holds the same secret in, sent back to the waiting page only. */
+const WAITING_COOKIE = { name: 'aeolus_waiting', path: '/authorize/waiting' };
+function cookieHeader(cookie, set) {
+    return `${cookie.name}=${set.value}; Path=${cookie.path}; Max-Age=${String(set.maxAgeSeconds)}; HttpOnly;${set.isSecure ? ' Secure;' : ''} SameSite=Lax`;
+}
+/** The cookie's value from a Cookie header, if the browser sent it. */
+function cookieValue(cookie, header) {
+    const prefix = `${cookie.name}=`;
+    return header
+        ?.split(';')
+        .map((part) => part.trim())
+        .find((part) => part.startsWith(prefix))
+        ?.slice(prefix.length);
+}
+function sendBack(reply, answer) {
+    const { refusal, issuer } = answer;
+    if (refusal.kind === 'invalidClient') {
+        return errorPage(reply, { status: HTTP_BAD_REQUEST, title: 'Connect an MCP client', look: 'invalidClient', message: refusal.message });
+    }
+    const url = new URL(refusal.redirectUri);
+    url.searchParams.append('error', refusal.error);
+    url.searchParams.append('error_description', refusal.description);
+    if (refusal.state !== null) {
+        url.searchParams.append('state', refusal.state);
+    }
+    url.searchParams.append('iss', issuer);
+    return reply.code(HTTP_FOUND).header('location', url.toString()).send();
+}
+/** The page at /authorize: the client, and the two picks (Q1 a), each starting a sign-in through pagasae. */
+function pickPage(request, authorization) {
+    const hidden = Object.entries(request)
+        .flatMap(([name, value]) => (value === undefined ? [] : [`<input type="hidden" name="${escaped(name)}" value="${escaped(value)}">`]))
+        .join('');
+    return `${handshake({ name: authorization.clientName, fleet: 'Aeolus' })}
+<h1>Connect an MCP client</h1>
+<p><strong>${escaped(authorization.clientName)}</strong> asks to call your fleet's ships through the gateway.</p>
+<form method="get" action="/authorize/sign-in">${hidden}<div class="tiles">
+<button class="tile" name="holder" value="account">${icon('signIn', 20)}<strong>Sign in as yourself</strong><span class="muted">The client acts as you.</span></button>
+<button class="tile" name="holder" value="party">${icon('hourglass', 20)}<strong>Ask for access for this client</strong><span class="muted">An approver of your fleet decides; the client then acts as its own party.</span></button>
+</div></form>
+<p class="muted">Client ${escaped(authorization.clientId)}, sent back to ${escaped(authorization.redirectUri)}.</p>`;
+}
+/**
+ * What the waiting page runs: it follows its request on the live channel
+ * and goes to its own address again once told to, there to be sent on; it
+ * goes there too when the request expires. A dropped socket opens again
+ * with backoff. It never reloads on a timer.
+ */
+const WAITING_SCRIPT = `(function () {
+  var wait = 500, expiry, HOUR = 3600000;
+  function goOn() { location.replace(location.href); }
+  function countDown() {
+    var holder = document.querySelector('[data-expires-at]'), text = document.querySelector('[data-time-left]');
+    if (!holder || !text) return;
+    var hours = Math.max(0, Math.floor((Date.parse(holder.getAttribute('data-expires-at')) - Date.now()) / HOUR));
+    text.textContent = Math.floor(hours / 24) + ' d ' + (hours % 24) + ' h';
+  }
+  setInterval(countDown, 60000);
+  function open() {
+    var socket = new WebSocket((location.protocol === 'https:' ? 'wss://' : 'ws://') + location.host + '${WAITING_COOKIE.path}/live' + location.search);
+    socket.onopen = function () { wait = 500; };
+    socket.onmessage = function (event) {
+      var told = JSON.parse(event.data);
+      if (told.go) return goOn();
+      if (told.expiresAt) { clearTimeout(expiry); expiry = setTimeout(goOn, Math.max(0, Date.parse(told.expiresAt) - Date.now())); }
+    };
+    socket.onclose = function (event) {
+      if (event.code === ${String(CLOSE_OTHER_ORIGIN)}) return;
+      setTimeout(open, wait);
+      wait = Math.min(wait * 2, 10000);
+    };
+  }
+  open();
+})();`;
+const MS_PER_HOUR = 3_600_000;
+const HOURS_PER_DAY = 24;
+/** The time left of a request, in days and hours, as the waiting page's ring shows it. */
+function timeLeft(expiresAt, now) {
+    const hours = Math.max(0, Math.floor((expiresAt.getTime() - now.getTime()) / MS_PER_HOUR));
+    return `${String(Math.floor(hours / HOURS_PER_DAY))} d ${String(hours % HOURS_PER_DAY)} h`;
+}
+/** The waiting page: the client waits for approval, the ring counting its time left, and the page goes on by itself once it is decided. */
+function waitingPage(waiting) {
+    const left = timeLeft(waiting.expiresAt, waiting.now);
+    return `${handshake({ name: waiting.clientName, fleet: 'Aeolus' })}
+<div data-expires-at="${waiting.expiresAt.toISOString()}">${ring({ tone: 'waiting', center: { text: left, icon: 'hourglass' }, label: `${left} left`, size: 176 })}</div>
+${statusBadge({ tone: 'waiting', icon: 'hourglass', label: 'Waiting for approval' })}
+<p><strong>${escaped(waiting.clientName)}</strong> waits for an approver of your fleet.</p>
+<p><span class="going-on">Goes on by itself</span></p>
+<p class="muted">Closed this page? Connect again later.</p>
+<script>${WAITING_SCRIPT}</script>`;
+}
+/** Client credentials in an HTTP Basic header (RFC 6749, 2.3.1): each part form-urlencoded. */
+function basicCredentials(header) {
+    if (header?.startsWith('Basic ') !== true) {
+        return {};
+    }
+    const decoded = Buffer.from(header.slice('Basic '.length), 'base64').toString('utf8');
+    const separator = decoded.indexOf(':');
+    if (separator < 0) {
+        return {};
+    }
+    const decode = (part) => decodeURIComponent(part.replaceAll('+', ' '));
+    return { client_id: decode(decoded.slice(0, separator)), client_secret: decode(decoded.slice(separator + 1)) };
+}
+/** Signing people in through pagasae, and the waiting page (decisions 0054, 0056). */
+function registerSignIn(server, deps) {
+    const { issuer, signIn } = deps;
+    const isSecure = isHttps(issuer);
+    server.get('/authorize/sign-in', async (request, reply) => {
+        const fields = fieldsOf(request.query);
+        const holder = holderSchema.safeParse(fields.holder);
+        if (!holder.success) {
+            return errorPage(reply, { status: HTTP_BAD_REQUEST, title: 'Connect an MCP client', look: 'noPick', message: 'Pick on the page whether to sign in as yourself or to ask for access for the client.' });
+        }
+        const started = await signIn.start({ request: authorizationRequestOf(fields), holder: holder.data });
+        if (!started.isOk) {
+            return sendBack(reply, { refusal: started.error, issuer });
+        }
+        const cookie = cookieHeader(SIGN_IN_COOKIE, { value: started.value.browserSecret, maxAgeSeconds: SIGN_IN_LIFETIME_MS / MS_PER_SECOND, isSecure });
+        return reply.code(HTTP_FOUND).header('location', started.value.redirectTo).header('set-cookie', cookie).send();
+    });
+    /** Where the browser goes next: back to the client, or, holding the secret in its waiting cookie, to the waiting page. */
+    const goOn = (reply, { answer, browserSecret }) => {
+        const cleared = cookieHeader(SIGN_IN_COOKIE, { value: '', maxAgeSeconds: 0, isSecure });
+        if (answer.kind === 'answered') {
+            return reply.code(HTTP_FOUND).header('location', answer.redirectTo).header('set-cookie', cleared).send();
+        }
+        const waiting = cookieHeader(WAITING_COOKIE, { value: browserSecret ?? '', maxAgeSeconds: REQUEST_LIFETIME_MS / MS_PER_SECOND, isSecure });
+        return reply.code(HTTP_FOUND).header('location', `${WAITING_COOKIE.path}?${new URLSearchParams({ waiting: answer.waiting }).toString()}`).header('set-cookie', [cleared, waiting]).send();
+    };
+    server.get(SIGN_IN_COOKIE.path, async (request, reply) => {
+        const { state, code, error } = fieldsOf(request.query);
+        const browserSecret = cookieValue(SIGN_IN_COOKIE, request.headers.cookie);
+        const completed = await signIn.complete({ state, code, error, browserSecret });
+        if (completed.isOk) {
+            return goOn(reply, { answer: completed.value, browserSecret });
+        }
+        void reply.header('set-cookie', cookieHeader(SIGN_IN_COOKIE, { value: '', maxAgeSeconds: 0, isSecure }));
+        const refusal = completed.error;
+        const title = 'Sign in';
+        switch (refusal.kind) {
+            case 'invalidClient':
+            case 'redirect':
+                return sendBack(reply, { refusal, issuer });
+            case 'unknownSignIn':
+                return errorPage(reply, { status: HTTP_BAD_REQUEST, title, look: 'signInEnded', message: 'This sign-in is unknown, or took over 10 minutes. Start again from your MCP client.' });
+            case 'otherBrowser':
+                return errorPage(reply, { status: HTTP_BAD_REQUEST, title, look: 'otherBrowser', message: 'This sign-in was started in another browser, so it is not yours to finish. Start again from your MCP client.' });
+            case 'fleetNotServed':
+                return errorPage(reply, { status: HTTP_FORBIDDEN, title, look: 'noFleet', message: 'This gateway does not serve the fleet you signed in to.' });
+            case 'outsidePartiesOff':
+                return errorPage(reply, { status: HTTP_FORBIDDEN, title, look: 'outsidePartiesOff', message: "Your fleet's outside parties are off, so no MCP client can ask for access. Sign in as yourself instead, or ask whoever runs your fleet." });
+            case 'pagasaeRefused':
+                return errorPage(reply, { status: HTTP_BAD_GATEWAY, title, look: 'signInFailed', message: `The sign-in did not go through: ${refusal.message}. Start again from your MCP client.` });
+        }
+    });
+    // The sealed waiting goes in the query, as it is longer than a path parameter may be.
+    server.get(WAITING_COOKIE.path, async (request, reply) => {
+        const { waiting = '' } = fieldsOf(request.query);
+        const read = await signIn.readWaiting({ waiting, browserSecret: cookieValue(WAITING_COOKIE, request.headers.cookie) });
+        const title = 'Waiting for approval';
+        if (read.isOk) {
+            if (read.value.kind === 'waiting') {
+                return htmlPage(reply, { status: 200, title, body: waitingPage({ ...read.value, now: signIn.clock.now() }) });
+            }
+            const cleared = cookieHeader(WAITING_COOKIE, { value: '', maxAgeSeconds: 0, isSecure });
+            return reply.code(HTTP_FOUND).header('location', read.value.redirectTo).header('set-cookie', cleared).send();
+        }
+        const refusal = read.error;
+        switch (refusal.kind) {
+            case 'invalidClient':
+            case 'redirect':
+                return sendBack(reply, { refusal, issuer });
+            case 'unknownWaiting':
+                return errorPage(reply, { status: HTTP_NOT_FOUND, title, look: 'requestEnded', message: 'This request is unknown, or ended long ago. Start again from your MCP client.' });
+            case 'otherBrowser':
+                return errorPage(reply, { status: HTTP_BAD_REQUEST, title, look: 'otherBrowser', message: 'This request was made in another browser, so it is not yours to follow. Start again from your MCP client.' });
+        }
+    });
+    // The waiting page's live channel: told when its request expires, and to go on once the request no longer waits.
+    acceptWebsockets(server, () => {
+        server.get(`${WAITING_COOKIE.path}/live`, { websocket: true }, async (socket, request) => {
+            if (!isSameOrigin(request)) {
+                socket.close(CLOSE_OTHER_ORIGIN, 'Opened only from the waiting page');
+                return;
+            }
+            const opened = { waiting: fieldsOf(request.query).waiting ?? '', browserSecret: cookieValue(WAITING_COOKIE, request.headers.cookie) };
+            const watched = await signIn.watchWaiting(opened);
+            // Whatever does not wait, refused or decided, the page's own address says.
+            if (!watched.isOk || !watched.value.isWaiting) {
+                socket.send(JSON.stringify({ go: true }));
+                return;
+            }
+            socket.send(JSON.stringify({ expiresAt: watched.value.expiresAt.toISOString() }));
+            const unsubscribe = signIn.hub.subscribe({
+                fleetId: watched.value.fleetId,
+                read: () => {
+                    void signIn.watchWaiting(opened).then((again) => {
+                        if (!again.isOk || !again.value.isWaiting) {
+                            socket.send(JSON.stringify({ go: true }));
+                            unsubscribe();
+                        }
+                    });
+                },
+            });
+            socket.on('close', unsubscribe);
+        });
+    });
+}
+export function registerOAuthRoutes(server, deps) {
+    acceptForms(server);
+    const protectedResource = { resource: deps.resource, authorization_servers: [deps.issuer], bearer_methods_supported: ['header'] };
+    server.get('/.well-known/oauth-protected-resource', () => protectedResource);
+    server.get(`/.well-known/oauth-protected-resource${new URL(deps.resource).pathname}`, () => protectedResource);
+    server.get('/.well-known/oauth-authorization-server', () => ({
+        issuer: deps.issuer,
+        authorization_endpoint: `${deps.issuer}/authorize`,
+        token_endpoint: `${deps.issuer}/token`,
+        response_types_supported: ['code'],
+        grant_types_supported: ['authorization_code', 'refresh_token'],
+        code_challenge_methods_supported: ['S256'],
+        token_endpoint_auth_methods_supported: ['none', 'client_secret_basic', 'client_secret_post'],
+        client_id_metadata_document_supported: true,
+        authorization_response_iss_parameter_supported: true,
+    }));
+    server.get('/authorize', async (request, reply) => {
+        if (deps.signIn === undefined) {
+            return errorPage(reply, { status: HTTP_FORBIDDEN, title: 'Connect an MCP client', look: 'noSignIn', message: 'This gateway signs no one in, so no MCP client can connect to it: its operator sets pagasae first.' });
+        }
+        const parameters = authorizationRequestOf(fieldsOf(request.query));
+        const read = await deps.readAuthorization(parameters);
+        if (!read.isOk) {
+            return sendBack(reply, { refusal: read.error, issuer: deps.issuer });
+        }
+        return htmlPage(reply, { status: 200, title: 'Connect an MCP client', body: pickPage(parameters, read.value) });
+    });
+    if (deps.signIn !== undefined) {
+        registerSignIn(server, { issuer: deps.issuer, signIn: deps.signIn });
+    }
+    server.post('/token', async (request, reply) => {
+        const exchanged = await deps.exchangeToken({ ...fieldsOf(request.body), ...basicCredentials(request.headers.authorization) });
+        void reply.header('cache-control', 'no-store').header('pragma', 'no-cache');
+        if (!exchanged.isOk) {
+            const status = exchanged.error.error === 'invalid_client' ? HTTP_UNAUTHORIZED : HTTP_BAD_REQUEST;
+            return reply.code(status).send({ error: exchanged.error.error, error_description: exchanged.error.description });
+        }
+        const { accessToken, refreshToken, expiresInSeconds, scope } = exchanged.value;
+        return { access_token: accessToken, token_type: 'Bearer', expires_in: expiresInSeconds, refresh_token: refreshToken, ...(scope === null ? {} : { scope }) };
+    });
+}
+//# sourceMappingURL=oauth-routes.js.map