@aeolus-fleet/gateway 0.0.0-stage → 0.0.0

package/dist/core/people/crew-person-ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crew-person-ship.js","sourceRoot":"","sources":["../../../src/core/people/crew-person-ship.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAI3D,mGAAmG;AACnG,MAAM,WAAW,GAAG,UAAU,CAAC;AAY/B;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAMpC;IACC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyE,CAAC;IAEjG,MAAM,IAAI,GAAG,KAAK,EAAE,IAAgE,EAAiE,EAAE;QACrJ,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;QACzE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9G,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;QAC3D,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7H,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClF,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/done-delivery.d.ts

@@ -0,0 +1,16 @@
+import type { Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type Dealt, type DealtError } from './opened-of.js';
+import type { PersonCaller } from './person-crew.js';
+import type { OpenedDeliveries, PersonCrews, PersonShipDoor } from './ports.js';
+export type DoneDelivery = (input: {
+    caller: PersonCaller;
+    deliveryId: string;
+}) => Promise<Result<Dealt, DealtError>>;
+/** Use case: a person is done with a delivery they opened, with no answer (Q20): it is handled. */
+export declare function createDoneDelivery(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+    opened: OpenedDeliveries;
+}): DoneDelivery;

package/dist/core/people/done-delivery.js

@@ -0,0 +1,9 @@
+import { handledOf, openedOf } from './opened-of.js';
+/** Use case: a person is done with a delivery they opened, with no answer (Q20): it is handled. */
+export function createDoneDelivery(deps) {
+    return async (asked) => {
+        const opened = await openedOf(deps, asked);
+        return opened.isOk ? handledOf(deps, { caller: asked.caller, delivery: opened.value }) : opened;
+    };
+}
+//# sourceMappingURL=done-delivery.js.map

package/dist/core/people/done-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"done-delivery.js","sourceRoot":"","sources":["../../../src/core/people/done-delivery.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAA+B,MAAM,gBAAgB,CAAC;AAMlF,mGAAmG;AACnG,MAAM,UAAU,kBAAkB,CAAC,IAA4G;IAC7I,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClG,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/inbox-entry.d.ts

@@ -0,0 +1,14 @@
+import type { DeliveryId } from '@aeolus-fleet/common';
+import type { PersonDelivery } from './ports.js';
+/** The longest title an inbox shows, as a message's headline is at most 80 characters. */
+export declare const TITLE_MAX_LENGTH = 80;
+/** A delivery as a person's inbox lists it: by titles only, so no payload leaves the fleet unopened (Q20). */
+export interface InboxEntry {
+    readonly deliveryId: DeliveryId;
+    readonly from: string;
+    readonly title: string;
+    readonly sentAt: string;
+}
+/** A question's own title; any other message's first line, cut to the longest title. */
+export declare function titleOf(delivery: PersonDelivery): string;
+export declare function inboxEntryOf(delivery: PersonDelivery): InboxEntry;

package/dist/core/people/inbox-entry.js

@@ -0,0 +1,11 @@
+/** The longest title an inbox shows, as a message's headline is at most 80 characters. */
+export const TITLE_MAX_LENGTH = 80;
+/** A question's own title; any other message's first line, cut to the longest title. */
+export function titleOf(delivery) {
+    const title = delivery.questionTitle ?? delivery.payload.split('\n', 1)[0] ?? '';
+    return title.length > TITLE_MAX_LENGTH ? `${title.slice(0, TITLE_MAX_LENGTH - 1)}…` : title;
+}
+export function inboxEntryOf(delivery) {
+    return { deliveryId: delivery.deliveryId, from: delivery.senderName, title: titleOf(delivery), sentAt: delivery.sentAt.toISOString() };
+}
+//# sourceMappingURL=inbox-entry.js.map

package/dist/core/people/inbox-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-entry.js","sourceRoot":"","sources":["../../../src/core/people/inbox-entry.ts"],"names":[],"mappings":"AAIA,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAUnC,wFAAwF;AACxF,MAAM,UAAU,OAAO,CAAC,QAAwB;IAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,OAAO,KAAK,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAwB;IACnD,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;AACzI,CAAC"}

package/dist/core/people/open-delivery.d.ts

@@ -0,0 +1,30 @@
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type InboxEntry } from './inbox-entry.js';
+import { type PersonCaller, type PersonCrewError } from './person-crew.js';
+import type { OpenedDeliveries, PersonCrews, PersonShipDoor } from './ports.js';
+/** A delivery as a person opens it: whole. */
+export interface OpenedView extends InboxEntry {
+    readonly contentType: string;
+    readonly payload: string;
+}
+export type OpenDelivery = (input: {
+    caller: PersonCaller;
+    deliveryId: string;
+}) => Promise<Result<OpenedView, PersonCrewError | DomainError<'NO_SUCH_DELIVERY'>>>;
+/**
+ * Use case: a person opens one delivery that waits for their person ship
+ * (Q20). Opening is their own act, so the gateway, as the ship's crew,
+ * acknowledges it for them (interop 5.1). What their answer needs is kept
+ * before the acknowledgement, so a crash between the two loses nothing: the
+ * delivery then still waits, and opening it again keeps it once.
+ */
+export declare function createOpenDelivery(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+    opened: OpenedDeliveries;
+    clock: Clock;
+}): OpenDelivery;

package/dist/core/people/open-delivery.js

@@ -0,0 +1,40 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { inboxEntryOf, titleOf } from './inbox-entry.js';
+import { asPersonCrew } from './person-crew.js';
+import { waitingFor } from './read-inbox.js';
+/**
+ * Use case: a person opens one delivery that waits for their person ship
+ * (Q20). Opening is their own act, so the gateway, as the ship's crew,
+ * acknowledges it for them (interop 5.1). What their answer needs is kept
+ * before the acknowledgement, so a crash between the two loses nothing: the
+ * delivery then still waits, and opening it again keeps it once.
+ */
+export function createOpenDelivery(deps) {
+    return async ({ caller, deliveryId }) => {
+        const waiting = await waitingFor(deps, caller);
+        if (!waiting.isOk) {
+            return waiting;
+        }
+        const delivery = waiting.value.deliveries.find((each) => each.deliveryId === deliveryId);
+        if (!delivery) {
+            return refuse('NO_SUCH_DELIVERY', `No delivery ${deliveryId} waits for you: read your inbox again`);
+        }
+        await deps.opened.save({
+            fleetId: caller.fleetId,
+            shipId: waiting.value.crew.shipId,
+            deliveryId: delivery.deliveryId,
+            messageId: delivery.messageId,
+            senderShipId: delivery.senderShipId,
+            from: delivery.senderName,
+            title: titleOf(delivery),
+            openedAt: deps.clock.now(),
+        });
+        const acknowledged = await asPersonCrew(deps, { caller, run: (crew) => deps.door.ack(crew.crewToken, delivery.deliveryId) });
+        if (!acknowledged.isOk) {
+            return acknowledged;
+        }
+        return ok({ ...inboxEntryOf(delivery), contentType: delivery.contentType, payload: delivery.payload });
+    };
+}
+//# sourceMappingURL=open-delivery.js.map

package/dist/core/people/open-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-delivery.js","sourceRoot":"","sources":["../../../src/core/people/open-delivery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAmB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAA2C,MAAM,kBAAkB,CAAC;AAEzF,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAU7C;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA0H;IAC3J,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;QACtC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACzF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,kBAAkB,EAAE,eAAe,UAAU,uCAAuC,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM;YACjC,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,IAAI,EAAE,QAAQ,CAAC,UAAU;YACzB,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC;YACxB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC3B,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7H,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,GAAG,YAAY,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACzG,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/opened-of.d.ts

@@ -0,0 +1,29 @@
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type PersonCaller, type PersonCrewError } from './person-crew.js';
+import type { OpenedDeliveries, OpenedDelivery, PersonCrews, PersonShipDoor } from './ports.js';
+/** What a person dealt with a delivery as: answered, or done with it. */
+export interface Dealt {
+    readonly deliveryId: string;
+    readonly isHandled: true;
+}
+export type DealtError = PersonCrewError | DomainError<'NO_SUCH_DELIVERY'>;
+/** A delivery the caller opened on their person ship. */
+export declare function openedOf(deps: {
+    crewPersonShip: CrewPersonShip;
+    opened: OpenedDeliveries;
+}, asked: {
+    caller: PersonCaller;
+    deliveryId: string;
+}): Promise<Result<OpenedDelivery, DealtError>>;
+/** Reports the delivery handled, then forgets it; kept while the fleet does not take it, so the person can go on again. */
+export declare function handledOf(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+    opened: OpenedDeliveries;
+}, dealt: {
+    caller: PersonCaller;
+    delivery: OpenedDelivery;
+}): Promise<Result<Dealt, DealtError>>;

package/dist/core/people/opened-of.js

@@ -0,0 +1,30 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { asPersonCrew, personCrewOf, withOwnRefusal } from './person-crew.js';
+/** A delivery the caller opened on their person ship. */
+export async function openedOf(deps, asked) {
+    const { caller, deliveryId } = asked;
+    const crew = await personCrewOf(deps.crewPersonShip, caller);
+    if (!crew.isOk) {
+        return crew;
+    }
+    const delivery = await deps.opened.find(caller.fleetId, { shipId: crew.value.shipId, deliveryId });
+    if (!delivery) {
+        return refuse('NO_SUCH_DELIVERY', `You have no opened delivery ${deliveryId}: open it from your inbox first`);
+    }
+    return ok(delivery);
+}
+/** Reports the delivery handled, then forgets it; kept while the fleet does not take it, so the person can go on again. */
+export async function handledOf(deps, dealt) {
+    const { caller, delivery } = dealt;
+    const handled = await asPersonCrew(deps, { caller, run: (crew) => withOwnRefusal(deps.door.handled(crew.crewToken, delivery.deliveryId)) });
+    if (!handled.isOk) {
+        return handled;
+    }
+    if (!handled.value.value.isOk) {
+        return refuse('FLEET_UNAVAILABLE', `The fleet did not take that you dealt with it: ${handled.value.value.error.message}. Try again`);
+    }
+    await deps.opened.remove(delivery.fleetId, { shipId: delivery.shipId, deliveryId: delivery.deliveryId });
+    return ok({ deliveryId: delivery.deliveryId, isHandled: true });
+}
+//# sourceMappingURL=opened-of.js.map

package/dist/core/people/opened-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opened-of.js","sourceRoot":"","sources":["../../../src/core/people/opened-of.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAA2C,MAAM,kBAAkB,CAAC;AAWvH,yDAAyD;AACzD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAkE,EAClE,KAAmD;IAEnD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,MAAM,CAAC,kBAAkB,EAAE,+BAA+B,UAAU,iCAAiC,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;AACtB,CAAC;AAED,2HAA2H;AAC3H,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAA4G,EAC5G,KAAyD;IAEzD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5I,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,mBAAmB,EAAE,kDAAkD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IACzG,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/core/people/person-crew.d.ts

@@ -0,0 +1,39 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+import type { FleetRefusal } from '../connection/ports.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import type { PersonCrews } from './ports.js';
+/** Who calls from a signed-in person's MCP client: the account grant its token stands for. */
+export interface PersonCaller {
+    readonly fleetId: FleetId;
+    readonly grantId: string;
+}
+/** The person ship the gateway crews for the caller, and its crew token. */
+export interface PersonCrewToken {
+    readonly shipId: ShipId;
+    readonly crewToken: string;
+}
+export type PersonCrewError = DomainError<'NOT_A_PERSON' | 'SIGNED_OUT' | 'FLEET_UNAVAILABLE'>;
+/** The crew of the caller's person ship, or why there is none, said so the person's model can tell them. */
+export declare function personCrewOf(crewPersonShip: CrewPersonShip, caller: PersonCaller): Promise<Result<PersonCrewToken, PersonCrewError>>;
+/**
+ * Makes a call as the crew of the caller's person ship. A crew that no
+ * longer works, as when its lease ended, is forgotten and the ship crewed
+ * again, once, so the person never deals with a lease.
+ */
+export declare function asPersonCrew<T>(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+}, call: {
+    caller: PersonCaller;
+    run: (crew: PersonCrewToken) => Promise<Result<T, FleetRefusal>>;
+}): Promise<Result<{
+    crew: PersonCrewToken;
+    value: T;
+}, PersonCrewError>>;
+/**
+ * A fleet call whose refusal the caller says itself, as a value: only a crew
+ * that no longer works stays a refusal, so asPersonCrew crews again.
+ */
+export declare function withOwnRefusal<T>(called: Promise<Result<T, FleetRefusal>>): Promise<Result<Result<T, FleetRefusal>, FleetRefusal>>;

package/dist/core/people/person-crew.js

@@ -0,0 +1,61 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/** The fleet's codes for a crew token that no longer works: its lease ended, or it is unknown. */
+const ENDED_CREW = new Set(['LEASE_ENDED', 'UNAUTHORIZED']);
+/** The crew of the caller's person ship, or why there is none, said so the person's model can tell them. */
+export async function personCrewOf(crewPersonShip, caller) {
+    const crewed = await crewPersonShip(caller);
+    if (crewed.isOk) {
+        return crewed;
+    }
+    switch (crewed.error.kind) {
+        case 'noPersonShip':
+            return refuse('NOT_A_PERSON', 'You have no person ship in this fleet: your rights there do not let you message');
+        case 'signedOut':
+            return refuse('SIGNED_OUT', 'Your sign-in ended: sign in again from your MCP client');
+        case 'pagasaeUnavailable':
+            return refuse('FLEET_UNAVAILABLE', 'The sign-in service did not answer: try again');
+        case 'notConnected':
+            return refuse('FLEET_UNAVAILABLE', 'The gateway is not connected to this fleet now: try again later');
+        case 'fleetRefused':
+            return refuse('FLEET_UNAVAILABLE', `The fleet did not crew your person ship: ${crewed.error.message}`);
+    }
+}
+/**
+ * Makes a call as the crew of the caller's person ship. A crew that no
+ * longer works, as when its lease ended, is forgotten and the ship crewed
+ * again, once, so the person never deals with a lease.
+ */
+export async function asPersonCrew(deps, call) {
+    const { caller, run } = call;
+    const crew = await personCrewOf(deps.crewPersonShip, caller);
+    if (!crew.isOk) {
+        return crew;
+    }
+    const answered = await run(crew.value);
+    if (answered.isOk) {
+        return ok({ crew: crew.value, value: answered.value });
+    }
+    if (!ENDED_CREW.has(answered.error.code)) {
+        return fleetDidNotAnswer(answered.error);
+    }
+    await deps.crews.drop(caller.fleetId, crew.value.shipId);
+    const again = await personCrewOf(deps.crewPersonShip, caller);
+    if (!again.isOk) {
+        return again;
+    }
+    const retried = await run(again.value);
+    return retried.isOk ? ok({ crew: again.value, value: retried.value }) : fleetDidNotAnswer(retried.error);
+}
+function fleetDidNotAnswer(refusal) {
+    return refuse('FLEET_UNAVAILABLE', `The fleet did not answer: ${refusal.message}`);
+}
+/**
+ * A fleet call whose refusal the caller says itself, as a value: only a crew
+ * that no longer works stays a refusal, so asPersonCrew crews again.
+ */
+export async function withOwnRefusal(called) {
+    const answered = await called;
+    return !answered.isOk && ENDED_CREW.has(answered.error.code) ? answered : ok(answered);
+}
+//# sourceMappingURL=person-crew.js.map

package/dist/core/people/person-crew.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"person-crew.js","sourceRoot":"","sources":["../../../src/core/people/person-crew.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAkBtD,kGAAkG;AAClG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;AAE5D,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,cAA8B,EAAE,MAAoB;IACrF,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,QAAQ,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1B,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,cAAc,EAAE,iFAAiF,CAAC,CAAC;QACnH,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,YAAY,EAAE,wDAAwD,CAAC,CAAC;QACxF,KAAK,oBAAoB;YACvB,OAAO,MAAM,CAAC,mBAAmB,EAAE,+CAA+C,CAAC,CAAC;QACtF,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,mBAAmB,EAAE,iEAAiE,CAAC,CAAC;QACxG,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,mBAAmB,EAAE,4CAA4C,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAA4D,EAC5D,IAAgG;IAEhG,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC3G,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAqB;IAC9C,OAAO,MAAM,CAAC,mBAAmB,EAAE,6BAA6B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAI,MAAwC;IAC9E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;AACzF,CAAC"}

package/dist/core/people/ports.d.ts

@@ -0,0 +1,102 @@
+/**
+ * A signed-in person's person ship, which the gateway crews for their
+ * messaging (decisions 0054, 0057): the fleet's calls it makes as their
+ * account, and the one crew every client of the person shares.
+ */
+import type { DeliveryId, FleetId, MessageId, ShipId } from '@aeolus-fleet/common';
+import type { FleetRefusal } from '../connection/ports.js';
+import type { Result } from '../shared/result.js';
+/** A call the gateway makes for an account: the account's token beside the gateway's own crew token, so the account acts through the gateway's ship. */
+export interface AccountCall {
+    readonly crewToken: string;
+    readonly accountToken: string;
+    readonly shipId: ShipId;
+}
+/** Outbound port: the fleet's calls for an account's own person ship (aeolus-fleet #990). */
+export interface AccountDoor {
+    /** A new starting prompt for the ship while it awaits crew: its secret. */
+    startingPrompt(call: AccountCall): Promise<Result<{
+        secret: string;
+    }, FleetRefusal>>;
+    /** Frees the ship from the crew that has it, so it can be crewed again. */
+    release(call: AccountCall): Promise<Result<undefined, FleetRefusal>>;
+}
+/** The crew token the gateway holds for a person ship: one crew, shared by every client of its person. */
+export interface PersonCrew {
+    readonly fleetId: FleetId;
+    readonly shipId: ShipId;
+    readonly crewToken: string;
+    readonly crewedAt: Date;
+}
+export interface PersonCrews {
+    find(fleetId: FleetId, shipId: ShipId): Promise<PersonCrew | undefined>;
+    save(crew: PersonCrew): Promise<void>;
+    /** Forgets a crew that no longer works, as when its lease ended, so the ship is crewed again. */
+    drop(fleetId: FleetId, shipId: ShipId): Promise<void>;
+}
+/** A delivery to the person ship, as the fleet's push receive hands it. */
+export interface PersonDelivery {
+    readonly deliveryId: DeliveryId;
+    readonly messageId: MessageId;
+    readonly senderShipId: ShipId;
+    readonly senderName: string;
+    readonly contentType: string;
+    readonly payload: string;
+    /** The title of a question (the question content type), read at the edge; none for any other message. */
+    readonly questionTitle: string | null;
+    readonly sentAt: Date;
+    readonly inReplyTo: MessageId | null;
+}
+/** Outbound port: the fleet's calls the gateway makes as the crew of a person ship. */
+export interface PersonShipDoor {
+    /** How many deliveries wait for the ship, without waiting. */
+    inbox(crewToken: string): Promise<Result<{
+        waiting: number;
+    }, FleetRefusal>>;
+    /** The ship's deliveries, up to max, its own held ones again first. */
+    pushReceive(crewToken: string, take: {
+        max: number;
+    }): Promise<Result<PersonDelivery[], FleetRefusal>>;
+    /** Acknowledges a delivery the person opened: their own act confirms it (interop 5.1). */
+    ack(crewToken: string, deliveryId: DeliveryId): Promise<Result<undefined, FleetRefusal>>;
+    /** Sends the person's answer to the sender, in reply to its message, once under its key. */
+    reply(crewToken: string, reply: {
+        to: ShipId;
+        inReplyTo: MessageId;
+        contentType: string;
+        payload: string;
+        idempotencyKey: string;
+    }): Promise<Result<undefined, FleetRefusal>>;
+    /** Reports the person dealt with the delivery. */
+    handled(crewToken: string, deliveryId: DeliveryId): Promise<Result<undefined, FleetRefusal>>;
+}
+/**
+ * A delivery a person opened, as the gateway keeps it until they deal with
+ * it (Q28 (a)): what their answer needs once the delivery is acknowledged,
+ * its message and sender, and its title, never its payload. It is the person
+ * ship's, so every client of the person finds it.
+ */
+export interface OpenedDelivery {
+    readonly fleetId: FleetId;
+    readonly shipId: ShipId;
+    readonly deliveryId: DeliveryId;
+    readonly messageId: MessageId;
+    readonly senderShipId: ShipId;
+    readonly from: string;
+    readonly title: string;
+    readonly openedAt: Date;
+}
+/** Outbound port: the deliveries people opened, by fleet, person ship and delivery. */
+export interface OpenedDeliveries {
+    /** Keeps it, or keeps it as last opened when it was opened before. */
+    save(opened: OpenedDelivery): Promise<void>;
+    find(fleetId: FleetId, opened: {
+        shipId: ShipId;
+        deliveryId: string;
+    }): Promise<OpenedDelivery | undefined>;
+    /** Forgets it once the person dealt with it. */
+    remove(fleetId: FleetId, opened: {
+        shipId: ShipId;
+        deliveryId: string;
+    }): Promise<void>;
+}

package/dist/core/people/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/core/people/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../../src/core/people/ports.ts"],"names":[],"mappings":""}

package/dist/core/people/read-inbox.d.ts

@@ -0,0 +1,37 @@
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type InboxEntry } from './inbox-entry.js';
+import { type PersonCaller, type PersonCrewError, type PersonCrewToken } from './person-crew.js';
+import type { PersonCrews, PersonDelivery, PersonShipDoor } from './ports.js';
+/** The most deliveries an inbox lists at once: as many as one receive takes. */
+export declare const INBOX_LIST_MAX = 10;
+export type ReadInbox = (caller: PersonCaller) => Promise<Result<{
+    waiting: number;
+    deliveries: InboxEntry[];
+}, PersonCrewError>>;
+/**
+ * What waits for the caller's person ship: how many, and up to the most an
+ * inbox lists, taken as received, the crew's own held ones again first. It
+ * asks how many wait first, so the person is never kept waiting while none
+ * does.
+ */
+export declare function waitingFor(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+}, caller: PersonCaller): Promise<Result<{
+    crew: PersonCrewToken;
+    waiting: number;
+    deliveries: PersonDelivery[];
+}, PersonCrewError>>;
+/**
+ * Use case: a person reads their own person ship's inbox (Q20): what waits,
+ * by titles only. The gateway takes the waiting deliveries as the ship's
+ * crew, so nothing is stored in the gateway, and a delivery listed is listed
+ * again until the person deals with it.
+ */
+export declare function createReadInbox(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+}): ReadInbox;

package/dist/core/people/read-inbox.js

@@ -0,0 +1,36 @@
+import { ok } from '../shared/result.js';
+import { inboxEntryOf } from './inbox-entry.js';
+import { asPersonCrew } from './person-crew.js';
+/** The most deliveries an inbox lists at once: as many as one receive takes. */
+export const INBOX_LIST_MAX = 10;
+/**
+ * What waits for the caller's person ship: how many, and up to the most an
+ * inbox lists, taken as received, the crew's own held ones again first. It
+ * asks how many wait first, so the person is never kept waiting while none
+ * does.
+ */
+export async function waitingFor(deps, caller) {
+    const counted = await asPersonCrew(deps, { caller, run: (crew) => deps.door.inbox(crew.crewToken) });
+    if (!counted.isOk) {
+        return counted;
+    }
+    const { crew, value } = counted.value;
+    if (value.waiting === 0) {
+        return ok({ crew, waiting: 0, deliveries: [] });
+    }
+    const taken = await asPersonCrew(deps, { caller, run: (held) => deps.door.pushReceive(held.crewToken, { max: INBOX_LIST_MAX }) });
+    return taken.isOk ? ok({ crew: taken.value.crew, waiting: value.waiting, deliveries: taken.value.value }) : taken;
+}
+/**
+ * Use case: a person reads their own person ship's inbox (Q20): what waits,
+ * by titles only. The gateway takes the waiting deliveries as the ship's
+ * crew, so nothing is stored in the gateway, and a delivery listed is listed
+ * again until the person deals with it.
+ */
+export function createReadInbox(deps) {
+    return async (caller) => {
+        const waiting = await waitingFor(deps, caller);
+        return waiting.isOk ? ok({ waiting: waiting.value.waiting, deliveries: waiting.value.deliveries.map(inboxEntryOf) }) : waiting;
+    };
+}
+//# sourceMappingURL=read-inbox.js.map

package/dist/core/people/read-inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-inbox.js","sourceRoot":"","sources":["../../../src/core/people/read-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAiE,MAAM,kBAAkB,CAAC;AAG/G,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAIjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkF,EAClF,MAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkF;IAChH,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjI,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/requests/ask-for-client.d.ts

@@ -0,0 +1,45 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { AuthorizationCodes, OAuthSecrets } from '../oauth/ports.js';
+import type { AuthorizationRequest } from '../oauth/read-authorization.js';
+import type { PartyStore } from '../parties/ports.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { OpenRequest } from './open-request.js';
+import type { PendingRequests, Requester, WaitingSeals } from './ports.js';
+/** What asking answers: where the client is sent back now, or the sealed waiting the browser waits on. */
+export type ClientAnswer = {
+    readonly kind: 'answered';
+    readonly redirectTo: string;
+} | {
+    readonly kind: 'waiting';
+    readonly waiting: string;
+};
+export type AskForClient = (asked: {
+    fleetId: FleetId;
+    requester: Requester;
+    authorization: AuthorizationRequest;
+    /** The client's request as it came, read again while the browser waits. */
+    request: Readonly<Record<string, string | undefined>>;
+    browserSecret: string;
+}) => Promise<Result<ClientAnswer, DomainError<'OUTSIDE_PARTIES_OFF'>>>;
+/**
+ * Use case: an account of the fleet, signed in, asks for access for an
+ * outside MCP client (decision 0056, Thomas's question A). A client that is
+ * a party already gets its party's code at once. A deny or an expired
+ * request the account asked for ends its next try with access_denied, once;
+ * otherwise the account opens a request, or joins the one pending, and its
+ * browser waits for the decision. While the fleet's outside parties are off,
+ * nobody asks (interop I-3).
+ */
+export declare function createAskForClient(deps: {
+    parties: PartyStore;
+    requests: PendingRequests;
+    openRequest: OpenRequest;
+    servesOutsideParties: (fleetId: FleetId) => Promise<boolean>;
+    waitings: WaitingSeals;
+    codes: AuthorizationCodes;
+    secrets: OAuthSecrets;
+    clock: Clock;
+    issuer: string;
+}): AskForClient;

package/dist/core/requests/ask-for-client.js

@@ -0,0 +1,33 @@
+import { issueCode, redirectWith } from '../oauth/issue-code.js';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { isRefused } from './request-state.js';
+/**
+ * Use case: an account of the fleet, signed in, asks for access for an
+ * outside MCP client (decision 0056, Thomas's question A). A client that is
+ * a party already gets its party's code at once. A deny or an expired
+ * request the account asked for ends its next try with access_denied, once;
+ * otherwise the account opens a request, or joins the one pending, and its
+ * browser waits for the decision. While the fleet's outside parties are off,
+ * nobody asks (interop I-3).
+ */
+export function createAskForClient(deps) {
+    return async ({ fleetId, requester, authorization, request, browserSecret }) => {
+        if (!(await deps.servesOutsideParties(fleetId))) {
+            return refuse('OUTSIDE_PARTIES_OFF', "This fleet's outside parties are off: nobody asks for an outside MCP client");
+        }
+        const party = await deps.parties.findByClient(fleetId, authorization.clientId);
+        if (party?.state === 'crewed') {
+            return ok({ kind: 'answered', redirectTo: await issueCode(deps, { fleetId, authorization, holder: { kind: 'party', party: party.name } }) });
+        }
+        const subject = { kind: 'client', clientId: authorization.clientId, clientName: authorization.clientName };
+        const latest = await deps.requests.latestAskedBy(fleetId, { subject, accountId: requester.accountId });
+        if (latest !== undefined && !latest.isTold && isRefused(latest.request, deps.clock.now())) {
+            await deps.requests.markTold(fleetId, { requestId: latest.request.requestId, accountId: requester.accountId });
+            return ok({ kind: 'answered', redirectTo: redirectWith(authorization.redirectUri, { error: 'access_denied', state: authorization.state, iss: deps.issuer }) });
+        }
+        const opened = await deps.openRequest({ fleetId, subject, requester });
+        return ok({ kind: 'waiting', waiting: deps.waitings.seal({ fleetId, requestId: opened.requestId, accountId: requester.accountId, browserSecret, request }) });
+    };
+}
+//# sourceMappingURL=ask-for-client.js.map

package/dist/core/requests/ask-for-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask-for-client.js","sourceRoot":"","sources":["../../../src/core/requests/ask-for-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKjE,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAc/C;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAUlC;IACC,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE;QAC7E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,qBAAqB,EAAE,6EAA6E,CAAC,CAAC;QACtH,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC/E,IAAI,KAAK,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/I,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,EAAW,CAAC;QACpH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;QACvG,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;YAC/G,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjK,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QACvE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAChK,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/requests/ask-for-server.d.ts

@@ -0,0 +1,32 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { PartyStore } from '../parties/ports.js';
+import type { PersonCaller } from '../people/person-crew.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { AccountGrants } from '../sign-in/ports.js';
+import type { OpenRequest } from './open-request.js';
+import type { RequestState } from './ports.js';
+/** What asking answers the person: their request, by its id, and until when it waits. */
+export interface AskedServer {
+    readonly requestId: string;
+    readonly url: string;
+    readonly state: RequestState;
+    readonly expiresAt: Date;
+}
+export type AskForServer = (asked: {
+    caller: PersonCaller;
+    url: string;
+}) => Promise<Result<AskedServer, DomainError<'INVALID_SERVER_URL' | 'OUTSIDE_PARTIES_OFF' | 'SIGNED_OUT' | 'PARTY_EXISTS'>>>;
+/**
+ * Use case: a signed-in person asks for an outside MCP server, as their
+ * account (decision 0056). An outside MCP server never asks itself: an
+ * approver adds it, giving its credential. A second person asking for the
+ * same server joins the request pending. While the fleet's outside parties
+ * are off, nobody asks (interop I-3).
+ */
+export declare function createAskForServer(deps: {
+    grants: AccountGrants;
+    parties: PartyStore;
+    openRequest: OpenRequest;
+    servesOutsideParties: (fleetId: FleetId) => Promise<boolean>;
+}): AskForServer;