@aeolus-fleet/gateway 0.0.0-stage → 0.0.0

package/dist/adapters/prisma/pending-requests.js

@@ -0,0 +1,122 @@
+import { idSchema } from '@aeolus-fleet/common';
+import { z } from 'zod';
+const requestersSchema = z.array(z.object({ accountId: z.string(), personShipId: idSchema('ship').nullable() }));
+const decidedBySchema = z.union([z.object({ kind: z.literal('ship'), shipId: idSchema('ship') }), z.object({ kind: z.enum(['operator', 'viewer']) })]).nullable();
+const toldAccountIdsSchema = z.array(z.string());
+const stateSchema = z.enum(['pending', 'approving', 'approved', 'denied', 'expired']);
+/** A row as the table holds it, whether read by Prisma or by the raw insert. */
+const rowSchema = z.object({
+    fleetId: idSchema('fleet'),
+    requestId: z.string(),
+    kind: z.enum(['client', 'server']),
+    clientId: z.string().nullable(),
+    clientName: z.string().nullable(),
+    url: z.string().nullable(),
+    requesters: z.unknown(),
+    askedAt: z.date(),
+    expiresAt: z.date(),
+    state: stateSchema,
+    decidedBy: z.unknown(),
+    decidedAt: z.date().nullable(),
+});
+/** What one open request is unique by in its fleet. */
+function subjectKeyOf(subject) {
+    return subject.kind === 'client' ? `client:${subject.clientId}` : `server:${subject.url}`;
+}
+/** A pending request from a row, whether read by Prisma or by raw SQL. */
+export function requestOf(raw) {
+    const row = rowSchema.parse(raw);
+    const subject = row.kind === 'client' ? { kind: 'client', clientId: z.string().parse(row.clientId), clientName: z.string().parse(row.clientName) } : { kind: 'server', url: z.string().parse(row.url) };
+    return {
+        fleetId: row.fleetId,
+        requestId: row.requestId,
+        subject,
+        requesters: requestersSchema.parse(row.requesters),
+        askedAt: row.askedAt,
+        expiresAt: row.expiresAt,
+        state: row.state,
+        decidedBy: decidedBySchema.parse(row.decidedBy),
+        decidedAt: row.decidedAt,
+    };
+}
+/** The outcomes to tell, as rows written with the step that ends their request. */
+function noticeRowsOf(notices, createdAt) {
+    return notices.map((notice) => ({ ...notice, createdAt }));
+}
+/**
+ * The pending requests in Postgres. Opening is one insert that joins the
+ * open request for the same client or server on the partial unique index,
+ * so two requesters asking at once share one request; every decision is a
+ * conditional update, so the first counts.
+ */
+export function createPrismaPendingRequests(db) {
+    return {
+        open: async ({ now, ...request }) => {
+            const subjectKey = subjectKeyOf(request.subject);
+            const { subject } = request;
+            const [requester] = request.requesters;
+            await db.pendingRequest.updateMany({ where: { fleetId: request.fleetId, subjectKey, state: 'pending', expiresAt: { lte: now } }, data: { state: 'expired' } });
+            const rows = await db.$queryRaw `
+        INSERT INTO "pending_requests" ("fleet_id", "request_id", "kind", "subject_key", "client_id", "client_name", "url", "requesters", "asked_at", "expires_at", "state")
+        VALUES (${request.fleetId}, ${request.requestId}, ${subject.kind}, ${subjectKey},
+          ${subject.kind === 'client' ? subject.clientId : null}, ${subject.kind === 'client' ? subject.clientName : null}, ${subject.kind === 'server' ? subject.url : null},
+          ${JSON.stringify(request.requesters)}::jsonb, ${request.askedAt}, ${request.expiresAt}, 'pending')
+        ON CONFLICT ("fleet_id", "subject_key") WHERE "state" IN ('pending', 'approving')
+        DO UPDATE SET "requesters" = CASE
+          WHEN "pending_requests"."requesters" @> jsonb_build_array(jsonb_build_object('accountId', ${requester?.accountId ?? ''}::text)) THEN "pending_requests"."requesters"
+          ELSE "pending_requests"."requesters" || ${JSON.stringify(request.requesters)}::jsonb
+        END
+        RETURNING "fleet_id" AS "fleetId", "request_id" AS "requestId", "kind", "client_id" AS "clientId", "client_name" AS "clientName", "url", "requesters",
+          "asked_at" AS "askedAt", "expires_at" AS "expiresAt", "state", "decided_by" AS "decidedBy", "decided_at" AS "decidedAt"`;
+            return requestOf(rows[0]);
+        },
+        latestAskedBy: async (fleetId, { subject, accountId }) => {
+            const row = await db.pendingRequest.findFirst({
+                where: { fleetId, subjectKey: subjectKeyOf(subject), requesters: { array_contains: [{ accountId }] } },
+                orderBy: { askedAt: 'desc' },
+            });
+            return row === null ? undefined : { request: requestOf(row), isTold: toldAccountIdsSchema.parse(row.toldAccountIds).includes(accountId) };
+        },
+        markTold: async (fleetId, { requestId, accountId }) => {
+            await db.$executeRaw `
+        UPDATE "pending_requests" SET "told_account_ids" = "told_account_ids" || jsonb_build_array(${accountId}::text)
+        WHERE "fleet_id" = ${fleetId} AND "request_id" = ${requestId} AND NOT "told_account_ids" @> jsonb_build_array(${accountId}::text)`;
+        },
+        find: async (fleetId, requestId) => {
+            const row = await db.pendingRequest.findUnique({ where: { fleetId_requestId: { fleetId, requestId } } });
+            return row === null ? undefined : requestOf(row);
+        },
+        listOpen: async (fleetId, now) => {
+            const rows = await db.pendingRequest.findMany({ where: { fleetId, state: { in: ['pending', 'approving'] }, expiresAt: { gt: now } }, orderBy: { askedAt: 'asc' } });
+            return rows.map(requestOf);
+        },
+        claim: async (fleetId, { requestId, now }) => {
+            const claimed = await db.pendingRequest.updateMany({ where: { fleetId, requestId, state: 'pending', expiresAt: { gt: now } }, data: { state: 'approving' } });
+            return claimed.count === 1;
+        },
+        release: async (fleetId, requestId) => {
+            await db.pendingRequest.updateMany({ where: { fleetId, requestId, state: 'approving' }, data: { state: 'pending' } });
+        },
+        decide: (fleetId, { requestId, from, decision, notices }) => db.$transaction(async (tx) => {
+            const decided = await tx.pendingRequest.updateMany({
+                where: { fleetId, requestId, state: { in: [...from] } },
+                data: { state: decision.outcome, decidedBy: decision.decidedBy, decidedAt: decision.decidedAt },
+            });
+            if (decided.count !== 1) {
+                return false;
+            }
+            await tx.requestOutcomeNotice.createMany({ data: noticeRowsOf(notices, decision.decidedAt), skipDuplicates: true });
+            return true;
+        }),
+        listDue: async (now) => (await db.pendingRequest.findMany({ where: { state: 'pending', expiresAt: { lte: now } }, orderBy: { expiresAt: 'asc' } })).map(requestOf),
+        expire: (fleetId, { requestId, now, notices }) => db.$transaction(async (tx) => {
+            const expired = await tx.pendingRequest.updateMany({ where: { fleetId, requestId, state: 'pending', expiresAt: { lte: now } }, data: { state: 'expired' } });
+            if (expired.count !== 1) {
+                return false;
+            }
+            await tx.requestOutcomeNotice.createMany({ data: noticeRowsOf(notices, now), skipDuplicates: true });
+            return true;
+        }),
+    };
+}
+//# sourceMappingURL=pending-requests.js.map

package/dist/adapters/prisma/pending-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pending-requests.js","sourceRoot":"","sources":["../../../src/adapters/prisma/pending-requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAgB,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;AACjH,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClK,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACjD,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtF,gFAAgF;AAChF,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,KAAK,EAAE,WAAW;IAClB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,uDAAuD;AACvD,SAAS,YAAY,CAAC,OAAuB;IAC3C,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,GAAG,EAAE,CAAC;AAC5F,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,OAAO,GACX,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1L,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,OAAO;QACP,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAClD,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;QAC/C,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,YAAY,CAAC,OAAiC,EAAE,SAAe;IACtE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,EAAgB;IAC1D,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;YAC5B,MAAM,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;YACvC,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/J,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,SAAS,CAAW;;kBAE9B,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,IAAI,KAAK,UAAU;YAC3E,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;YAChK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,SAAS;;;sGAGO,SAAS,EAAE,SAAS,IAAI,EAAE;oDAC5E,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC;;;kIAG4C,CAAC;YAC7H,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE;YACvD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;gBAC5C,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE;gBACtG,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;aAC7B,CAAC,CAAC;YACH,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5I,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;YACpD,MAAM,EAAE,CAAC,WAAW,CAAA;qGAC2E,SAAS;6BACjF,OAAO,uBAAuB,SAAS,oDAAoD,SAAS,SAAS,CAAC;QACvI,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,OAAgB,EAAE,SAAS,EAAE,EAAE;YAC1C,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACzG,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE;YAC/B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YACpK,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE;YAC3C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;YAC9J,OAAO,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;YACpC,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAC1D,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;gBACjD,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE;gBACvD,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;aAChG,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YACpH,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACJ,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAClK,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAC/C,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YAC7J,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,EAAE,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;YACrG,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/adapters/prisma/person-crews.d.ts

@@ -0,0 +1,4 @@
+import type { PersonCrews } from '../../core/people/ports.js';
+import type { Db } from './client.js';
+/** The crews the gateway holds for person ships, one per ship in its fleet (decision 0054). */
+export declare function createPrismaPersonCrews(db: Db): PersonCrews;

package/dist/adapters/prisma/person-crews.js

@@ -0,0 +1,18 @@
+import { idSchema } from '@aeolus-fleet/common';
+/** The crews the gateway holds for person ships, one per ship in its fleet (decision 0054). */
+export function createPrismaPersonCrews(db) {
+    return {
+        find: async (fleetId, shipId) => {
+            const row = await db.personCrew.findUnique({ where: { fleetId_shipId: { fleetId, shipId } } });
+            return row ? { fleetId: idSchema('fleet').parse(row.fleetId), shipId: idSchema('ship').parse(row.shipId), crewToken: row.crewToken, crewedAt: row.crewedAt } : undefined;
+        },
+        save: async (crew) => {
+            const { fleetId, shipId, crewToken, crewedAt } = crew;
+            await db.personCrew.upsert({ where: { fleetId_shipId: { fleetId, shipId } }, create: { fleetId, shipId, crewToken, crewedAt }, update: { crewToken, crewedAt } });
+        },
+        drop: async (fleetId, shipId) => {
+            await db.personCrew.deleteMany({ where: { fleetId, shipId } });
+        },
+    };
+}
+//# sourceMappingURL=person-crews.js.map

package/dist/adapters/prisma/person-crews.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"person-crews.js","sourceRoot":"","sources":["../../../src/adapters/prisma/person-crews.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKhD,+FAA+F;AAC/F,MAAM,UAAU,uBAAuB,CAAC,EAAM;IAC5C,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAC/F,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3K,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;YACtD,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpK,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9B,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/prisma/tool-marks.d.ts

@@ -0,0 +1,4 @@
+import type { ToolMarks } from '../../core/mcp-out/state-party.js';
+import type { Db } from './client.js';
+/** argo's repeatable marks, one row per marked tool: taking a mark off removes its row. */
+export declare function createPrismaToolMarks(db: Db): ToolMarks;

package/dist/adapters/prisma/tool-marks.js

@@ -0,0 +1,15 @@
+/** argo's repeatable marks, one row per marked tool: taking a mark off removes its row. */
+export function createPrismaToolMarks(db) {
+    return {
+        repeatable: async (fleetId, party) => new Set((await db.toolMark.findMany({ where: { fleetId, party }, select: { tool: true } })).map(({ tool }) => tool)),
+        mark: async (fleetId, { party, tool, isRepeatable }) => {
+            if (isRepeatable) {
+                await db.toolMark.upsert({ where: { fleetId_party_tool: { fleetId, party, tool } }, create: { fleetId, party, tool }, update: {} });
+            }
+            else {
+                await db.toolMark.deleteMany({ where: { fleetId, party, tool } });
+            }
+        },
+    };
+}
+//# sourceMappingURL=tool-marks.js.map

package/dist/adapters/prisma/tool-marks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-marks.js","sourceRoot":"","sources":["../../../src/adapters/prisma/tool-marks.ts"],"names":[],"mappings":"AAGA,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,EAAM;IAC1C,OAAO;QACL,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QAC1J,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE;YACrD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACtI,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/timers/sleep.d.ts

@@ -0,0 +1,3 @@
+import type { Sleep } from '../../core/mcp-out/run-party.js';
+/** Waits the given time, or less once the signal aborts. */
+export declare const sleep: Sleep;

package/dist/adapters/timers/sleep.js

@@ -0,0 +1,11 @@
+import { setTimeout as wait } from 'node:timers/promises';
+/** Waits the given time, or less once the signal aborts. */
+export const sleep = async (ms, signal) => {
+    try {
+        await wait(ms, undefined, { signal });
+    }
+    catch {
+        // Aborted: the wait ends early, as the port says.
+    }
+};
+//# sourceMappingURL=sleep.js.map

package/dist/adapters/timers/sleep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sleep.js","sourceRoot":"","sources":["../../../src/adapters/timers/sleep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAI1D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,KAAK,GAAU,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;AACH,CAAC,CAAC"}

package/dist/adapters/trpc/router.d.ts

@@ -0,0 +1,408 @@
+import type { Connect } from '../../core/connection/connect.js';
+import type { ReadConnection } from '../../core/connection/read-connection.js';
+import type { DeleteFleet } from '../../core/installation/delete-fleet.js';
+import type { InstallationMode } from '../../core/installation/ports.js';
+import type { ReadFleet } from '../../core/installation/read-fleet.js';
+import type { IsServed } from '../../core/installation/served.js';
+import type { SetFleetEnabled } from '../../core/installation/set-fleet-enabled.js';
+import type { AuthenticateActor } from '../../core/actors/authenticate-actor.js';
+import type { ReadOutsideParties, SetOutsideParties } from '../../core/outside-parties/set-outside-parties.js';
+import type { ApproveParty } from '../../core/parties/approve-party.js';
+import type { CrewParty } from '../../core/parties/crew-party.js';
+import type { ListParties } from '../../core/parties/list-parties.js';
+import type { MarkTool } from '../../core/mcp-out/mark-tool.js';
+import type { StateParty } from '../../core/mcp-out/state-party.js';
+import type { RegisterClient } from '../../core/oauth/register-client.js';
+import type { DecideRequest } from '../../core/requests/decide-request.js';
+import type { ListToDecide } from '../../core/requests/list-to-decide.js';
+import type { EndSignIns } from '../../core/sign-in/end-sign-ins.js';
+export interface Context {
+    /** The Cookie header the console's server or the gateway's page forwarded. */
+    cookie: string | undefined;
+    /** The crew token a ship sent as its bearer token, if any. */
+    crewToken: string | undefined;
+    authenticateActor: AuthenticateActor;
+    isServed: IsServed;
+    /** The fleet's connection as the gateway holds it, without asking the fleet: what a fleet that is off reads. */
+    heldConnection: ReadConnection;
+    /** The installation token header the caller sent, if any. */
+    installationTokenSent: string | undefined;
+    installation: {
+        mode: InstallationMode;
+        token: string | undefined;
+    };
+    setFleetEnabled: SetFleetEnabled;
+    readFleet: ReadFleet;
+    deleteFleet: DeleteFleet;
+    endSignIns: EndSignIns;
+    readConnection: ReadConnection;
+    connect: Connect;
+    approveParty: ApproveParty;
+    crewParty: CrewParty;
+    listParties: ListParties;
+    stateParty: StateParty;
+    markTool: MarkTool;
+    registerClient: RegisterClient;
+    listToDecide: ListToDecide;
+    decideRequest: DecideRequest;
+    readOutsideParties: ReadOutsideParties;
+    setOutsideParties: SetOutsideParties;
+}
+/** What a caller reads of a failure: nothing of it, so no crew token, secret or query ever leaves; the log holds it whole. */
+export declare const INTERNAL_ERROR_MESSAGE = "Internal error";
+export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
+    ctx: Context;
+    meta: object;
+    errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+    transformer: false;
+}, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+    connection: import("@trpc/server").TRPCBuiltRouter<{
+        ctx: Context;
+        meta: object;
+        errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+        transformer: false;
+    }, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+        /** Whether the gateway is connected to the operator's fleet, as which ship, and the ship it was last connected as. */
+        status: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                enabled: boolean;
+                state: "not-connected" | "connected";
+                ship: {
+                    shipId: string;
+                    name: string;
+                } | null;
+                lastShipId: string | null;
+            };
+            meta: object;
+        }>;
+        /**
+         * Connects the gateway with its ship's secret, which the console's server
+         * hands over server to server: it registers with it and keeps only the
+         * crew token. Only while not connected, while the gateway serves the
+         * fleet, and in a fleet with a registered networking plugin (interop I-3).
+         */
+        connect: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                shipId: unknown;
+                secret: string;
+            };
+            output: {
+                enabled: boolean;
+                state: "not-connected" | "connected";
+                ship: {
+                    shipId: string;
+                    name: string;
+                } | null;
+                lastShipId: string | null;
+            };
+            meta: object;
+        }>;
+    }>>;
+    parties: import("@trpc/server").TRPCBuiltRouter<{
+        ctx: Context;
+        meta: object;
+        errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+        transformer: false;
+    }, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+        /** The parties argo approved for its fleet, by name. A viewer reads them too. */
+        list: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: ({
+                kind: "mcpServer";
+                url: string;
+                credentialKind: "bearer" | "clientCredentials";
+                concurrencyLimit: number;
+                name: string;
+                ownerShipId: string;
+                state: "awaitingCrew" | "crewed" | "commissioning";
+                proxyShipId: string | null;
+            } | {
+                kind: "mcpClient";
+                clientId: string;
+                name: string;
+                ownerShipId: string;
+                state: "awaitingCrew" | "crewed" | "commissioning";
+                proxyShipId: string | null;
+            })[];
+            meta: object;
+        }>;
+        /**
+         * argo approves an outside MCP server as a party: the gateway commissions
+         * its app proxy ship owned by the owner argo picked, crews it, and keeps
+         * the credential in its vault (interop I-5). A repeat with the same
+         * request id picks up where the last one stopped.
+         */
+        approve: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                requestId: string;
+                name: string;
+                url: string;
+                credential: {
+                    kind: "bearer";
+                    token: string;
+                } | {
+                    kind: "clientCredentials";
+                    clientId: string;
+                    clientSecret: string;
+                    issuer: string;
+                    scope?: string | undefined;
+                };
+                ownerShipId: unknown;
+                concurrencyLimit?: number | undefined;
+            };
+            output: {
+                kind: "mcpServer";
+                url: string;
+                credentialKind: "bearer" | "clientCredentials";
+                concurrencyLimit: number;
+                name: string;
+                ownerShipId: string;
+                state: "awaitingCrew" | "crewed" | "commissioning";
+                proxyShipId: string | null;
+            } | {
+                kind: "mcpClient";
+                clientId: string;
+                name: string;
+                ownerShipId: string;
+                state: "awaitingCrew" | "crewed" | "commissioning";
+                proxyShipId: string | null;
+            };
+            meta: object;
+        }>;
+        /** argo hands over a new secret, from a new starting prompt in the console, for a proxy ship that awaits crew. */
+        crew: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                name: string;
+                secret: string;
+            };
+            output: {
+                kind: "mcpServer";
+                url: string;
+                credentialKind: "bearer" | "clientCredentials";
+                concurrencyLimit: number;
+                name: string;
+                ownerShipId: string;
+                state: "awaitingCrew" | "crewed" | "commissioning";
+                proxyShipId: string | null;
+            } | {
+                kind: "mcpClient";
+                clientId: string;
+                name: string;
+                ownerShipId: string;
+                state: "awaitingCrew" | "crewed" | "commissioning";
+                proxyShipId: string | null;
+            };
+            meta: object;
+        }>;
+        /** The gateway states the party's proxy ship anew, from what its server lists now, with argo's marks. */
+        state: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                name: string;
+            };
+            output: {
+                capabilities: string[];
+            };
+            meta: object;
+        }>;
+        /** argo marks a party's tool repeatable, or takes the mark off (interop 5.2): kept, then stated at once. */
+        markTool: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                name: string;
+                tool: string;
+                isRepeatable: boolean;
+            };
+            output: {
+                capabilities: string[];
+            };
+            meta: object;
+        }>;
+    }>>;
+    requests: import("@trpc/server").TRPCBuiltRouter<{
+        ctx: Context;
+        meta: object;
+        errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+        transformer: false;
+    }, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+        /** Every open request of the fleet, for an actor holding gateway:approve (decision 0056). */
+        toDecide: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                fleetId: string;
+                requestId: string;
+                subject: {
+                    kind: "client";
+                    clientId: string;
+                    clientName: string;
+                } | {
+                    kind: "server";
+                    url: string;
+                };
+                requesters: {
+                    accountId: string;
+                    personShipId: string | null;
+                }[];
+                askedAt: string;
+                expiresAt: string;
+                state: "pending" | "approving" | "approved" | "denied" | "expired";
+                decidedBy: {
+                    kind: "ship";
+                    shipId: string;
+                } | {
+                    kind: "operator" | "viewer";
+                } | null;
+                decidedAt: string | null;
+            }[];
+            meta: object;
+        }>;
+        /** Decides a pending request as the actor: the first decision counts. */
+        decide: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                requestId: string;
+                decision: {
+                    kind: "deny";
+                } | {
+                    kind: "approve";
+                    party: {
+                        name: string;
+                        ownerShipId: unknown;
+                        scopes: string[];
+                    };
+                    server?: {
+                        credential: {
+                            kind: "bearer";
+                            token: string;
+                        } | {
+                            kind: "clientCredentials";
+                            clientId: string;
+                            clientSecret: string;
+                            issuer: string;
+                            scope?: string | undefined;
+                        };
+                        concurrencyLimit: number;
+                    } | undefined;
+                };
+            };
+            output: {
+                state: "approved" | "denied";
+                party: {
+                    kind: "mcpServer";
+                    url: string;
+                    credentialKind: "bearer" | "clientCredentials";
+                    concurrencyLimit: number;
+                    name: string;
+                    ownerShipId: string;
+                    state: "awaitingCrew" | "crewed" | "commissioning";
+                    proxyShipId: string | null;
+                } | {
+                    kind: "mcpClient";
+                    clientId: string;
+                    name: string;
+                    ownerShipId: string;
+                    state: "awaitingCrew" | "crewed" | "commissioning";
+                    proxyShipId: string | null;
+                } | null;
+            };
+            meta: object;
+        }>;
+    }>>;
+    outsideParties: import("@trpc/server").TRPCBuiltRouter<{
+        ctx: Context;
+        meta: object;
+        errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+        transformer: false;
+    }, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+        /** Whether the fleet's outside parties are on (interop I-3). */
+        status: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                isOn: boolean;
+            };
+            meta: object;
+        }>;
+        /** Turns them on or off as an actor holding fleet:network; on in an open network needs its warning confirmed. */
+        set: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                isOn: boolean;
+                isOpenNetworkConfirmed: boolean;
+            };
+            output: {
+                isOn: boolean;
+            };
+            meta: object;
+        }>;
+    }>>;
+    oauth: import("@trpc/server").TRPCBuiltRouter<{
+        ctx: Context;
+        meta: object;
+        errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+        transformer: false;
+    }, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+        /**
+         * argo pre-registers an MCP client for its fleet: its name and redirect
+         * URIs, and whether it keeps a secret. The secret is answered this once.
+         */
+        registerClient: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                name: string;
+                redirectUris: string[];
+                isConfidential: boolean;
+            };
+            output: {
+                clientId: string;
+                clientSecret: string | null;
+            };
+            meta: object;
+        }>;
+    }>>;
+    installation: import("@trpc/server").TRPCBuiltRouter<{
+        ctx: Context;
+        meta: object;
+        errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+        transformer: false;
+    }, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+        /** Switches the gateway on or off for a fleet; off keeps everything of it. A replayed request id answers its first answer. */
+        setEnabled: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                requestId: string;
+                fleetId: unknown;
+                enabled: boolean;
+            };
+            output: {
+                fleetId: string;
+                enabled: boolean;
+            };
+            meta: object;
+        }>;
+        /** Whether the gateway serves the fleet, and whether it is connected to it. */
+        get: import("@trpc/server").TRPCQueryProcedure<{
+            input: {
+                fleetId: unknown;
+            };
+            output: {
+                enabled: boolean;
+                connected: boolean;
+            };
+            meta: object;
+        }>;
+        /** Forgets everything the gateway holds of the fleet, telling the fleet nothing. A replayed request id answers its first answer. */
+        delete: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                requestId: string;
+                fleetId: unknown;
+            };
+            output: Record<string, never>;
+            meta: object;
+        }>;
+        /** pagasae disabled the account (decision 0055): every sign-in of it in the fleet ends, and its clients' tokens are revoked. Told again, it ends nothing more. */
+        accountDisabled: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                fleetId: unknown;
+                accountId: string;
+            };
+            output: Record<string, never>;
+            meta: object;
+        }>;
+    }>>;
+}>>;
+export type GatewayRouter = typeof gatewayRouter;