@aeolus-fleet/gateway 0.0.0-stage → 0.0.0

package/dist/adapters/mcp/mcp-servers.js

@@ -0,0 +1,154 @@
+/**
+ * The outside MCP servers, over Streamable HTTP with the official SDK. One
+ * connection per listing or call, as MCP 2026-07-28 keeps no session. A
+ * failure reads as where it happened: before the call left the gateway
+ * (notSent, nothing ran) or after (unanswered, it may have run), so the core
+ * decides whether it may hand the call again (interop 5.2).
+ */
+import { Client, ClientCredentialsProvider, ProtocolError, SdkError, SdkErrorCode, SdkHttpError, StreamableHTTPClientTransport, UnauthorizedError, } from '@modelcontextprotocol/client';
+import { z } from 'zod';
+import { err, ok } from '../../core/shared/result.js';
+/** How the gateway names itself to outside MCP servers. */
+const CLIENT_INFO = { name: 'aeolus-gateway', version: '1' };
+/** HTTP statuses that refuse the gateway's credential: the server ran nothing. */
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_FORBIDDEN = 403;
+const jsonObject = z.record(z.string(), z.unknown());
+const toolAnnotations = z.object({
+    title: z.string().optional(),
+    readOnlyHint: z.boolean().optional(),
+    destructiveHint: z.boolean().optional(),
+    idempotentHint: z.boolean().optional(),
+    openWorldHint: z.boolean().optional(),
+});
+const listedTool = z.object({
+    name: z.string(),
+    title: z.string().optional(),
+    description: z.string().optional(),
+    inputSchema: jsonObject,
+    outputSchema: jsonObject.optional(),
+    annotations: toolAnnotations.optional(),
+});
+const callResult = z.object({
+    content: z.array(z.unknown()).default([]),
+    structuredContent: jsonObject.optional(),
+    isError: z.boolean().optional(),
+});
+function transportFor(connection) {
+    const url = new URL(connection.url);
+    const { credential } = connection;
+    switch (credential.kind) {
+        case 'bearer':
+            return new StreamableHTTPClientTransport(url, { requestInit: { headers: { authorization: `Bearer ${credential.token}` } } });
+        case 'clientCredentials':
+            return new StreamableHTTPClientTransport(url, {
+                authProvider: new ClientCredentialsProvider({
+                    clientId: credential.clientId,
+                    clientSecret: credential.clientSecret,
+                    expectedIssuer: credential.issuer,
+                    ...(credential.scope === undefined ? {} : { scope: credential.scope }),
+                }),
+            });
+    }
+}
+async function connected(connection) {
+    const client = new Client(CLIENT_INFO, { versionNegotiation: { mode: 'auto' } });
+    await client.connect(transportFor(connection));
+    return client;
+}
+function reasonOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** The server refused the gateway's credential, or could not be reached: the request did not run. */
+function isNotSent(error) {
+    if (error instanceof UnauthorizedError) {
+        return true;
+    }
+    if (error instanceof SdkHttpError) {
+        return error.status === HTTP_UNAUTHORIZED || error.status === HTTP_FORBIDDEN;
+    }
+    if (error instanceof SdkError) {
+        return error.code === SdkErrorCode.SendFailed && isConnectionRefused(error.cause);
+    }
+    return error instanceof TypeError && isConnectionRefused(error.cause);
+}
+const systemError = z.object({ code: z.string() });
+/** No connection was made, so nothing was sent. */
+function isConnectionRefused(cause) {
+    const failure = systemError.safeParse(cause);
+    return failure.success && ['ECONNREFUSED', 'ENOTFOUND', 'EHOSTUNREACH'].includes(failure.data.code);
+}
+/** A JSON-RPC error the server answered with: an answer, so the call is over, and it ran nothing. */
+function protocolErrorResult(error) {
+    return { content: [{ type: 'text', text: `MCP error ${String(error.code)}: ${error.message}` }], isError: true };
+}
+function toolOf(tool) {
+    return {
+        name: tool.name,
+        ...(tool.title === undefined ? {} : { title: tool.title }),
+        ...(tool.description === undefined ? {} : { description: tool.description }),
+        inputSchema: tool.inputSchema,
+        ...(tool.outputSchema === undefined ? {} : { outputSchema: tool.outputSchema }),
+        ...(tool.annotations === undefined ? {} : { annotations: tool.annotations }),
+    };
+}
+async function listEveryTool(client) {
+    const tools = [];
+    let cursor;
+    do {
+        const page = await client.listTools(cursor === undefined ? {} : { cursor });
+        tools.push(...page.tools.map((tool) => toolOf(listedTool.parse(tool))));
+        cursor = page.nextCursor;
+    } while (cursor !== undefined);
+    return tools;
+}
+async function callOnce(client, call) {
+    const answer = callResult.parse(await client.callTool({ name: call.name, arguments: { ...call.arguments } }, { timeout: call.timeoutMs }));
+    return {
+        kind: 'answered',
+        result: {
+            content: answer.content,
+            ...(answer.structuredContent === undefined ? {} : { structuredContent: answer.structuredContent }),
+            isError: answer.isError ?? false,
+        },
+    };
+}
+export function createMcpServers() {
+    return {
+        async listTools(connection) {
+            let client;
+            try {
+                client = await connected(connection);
+                return ok(await listEveryTool(client));
+            }
+            catch (error) {
+                return err({ kind: 'unreachable', reason: reasonOf(error) });
+            }
+            finally {
+                await client?.close();
+            }
+        },
+        async callTool(connection, call) {
+            let client;
+            try {
+                client = await connected(connection);
+            }
+            catch (error) {
+                return { kind: 'notSent', reason: reasonOf(error) };
+            }
+            try {
+                return await callOnce(client, call);
+            }
+            catch (error) {
+                if (error instanceof ProtocolError) {
+                    return { kind: 'answered', result: protocolErrorResult(error) };
+                }
+                return isNotSent(error) ? { kind: 'notSent', reason: reasonOf(error) } : { kind: 'unanswered', reason: reasonOf(error) };
+            }
+            finally {
+                await client.close();
+            }
+        },
+    };
+}
+//# sourceMappingURL=mcp-servers.js.map

package/dist/adapters/mcp/mcp-servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-servers.js","sourceRoot":"","sources":["../../../src/adapters/mcp/mcp-servers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,MAAM,EACN,yBAAyB,EACzB,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAEtD,2DAA2D;AAC3D,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAE7D,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAErD,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,iBAAiB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,UAA+B;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;IAClC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,IAAI,6BAA6B,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/H,KAAK,mBAAmB;YACtB,OAAO,IAAI,6BAA6B,CAAC,GAAG,EAAE;gBAC5C,YAAY,EAAE,IAAI,yBAAyB,CAAC;oBAC1C,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,cAAc,EAAE,UAAU,CAAC,MAAM;oBACjC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;iBACvE,CAAC;aACH,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAA+B;IACtD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,qGAAqG;AACrG,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,MAAM,KAAK,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,UAAU,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,YAAY,SAAS,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD,mDAAmD;AACnD,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,qGAAqG;AACrG,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,MAAM,CAAC,IAAgC;IAC9C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc;IACzC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,MAA0B,CAAC;IAC/B,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC,QAAQ,MAAM,KAAK,SAAS,EAAE;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAc;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3I,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClG,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;SACjC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,UAAU;YACxB,IAAI,MAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;gBACrC,OAAO,EAAE,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI;YAC7B,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;oBACnC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClE,CAAC;gBACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3H,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/oauth/client-metadata-documents.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Clients' metadata documents (CIMD), fetched from their client id URLs: a
+ * small JSON document, read with a short timeout and no redirect followed,
+ * since the URL is the client's identity.
+ */
+import type { ClientMetadataDocuments } from '../../core/oauth/ports.js';
+export declare function createClientMetadataDocuments(options: {
+    timeoutMs: number;
+}): ClientMetadataDocuments;

package/dist/adapters/oauth/client-metadata-documents.js

@@ -0,0 +1,25 @@
+import { err, ok } from '../../core/shared/result.js';
+/** The largest document the gateway reads (CIMD recommends at most 5 KB). */
+const DOCUMENT_MAX_BYTES = 5 * 1024;
+export function createClientMetadataDocuments(options) {
+    return {
+        fetch: async (url) => {
+            try {
+                const response = await fetch(url, { redirect: 'manual', signal: AbortSignal.timeout(options.timeoutMs), headers: { accept: 'application/json' } });
+                if (response.status !== 200) {
+                    return err({ reason: `it answered ${String(response.status)}` });
+                }
+                const body = await response.arrayBuffer();
+                if (body.byteLength > DOCUMENT_MAX_BYTES) {
+                    return err({ reason: `it is over ${String(DOCUMENT_MAX_BYTES)} bytes` });
+                }
+                const document = JSON.parse(new TextDecoder().decode(body));
+                return ok(document);
+            }
+            catch (error) {
+                return err({ reason: error instanceof Error ? error.message : String(error) });
+            }
+        },
+    };
+}
+//# sourceMappingURL=client-metadata-documents.js.map

package/dist/adapters/oauth/client-metadata-documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-metadata-documents.js","sourceRoot":"","sources":["../../../src/adapters/oauth/client-metadata-documents.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAEtD,6EAA6E;AAC7E,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,CAAC;AAEpC,MAAM,UAAU,6BAA6B,CAAC,OAA8B;IAC1E,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;gBACnJ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,IAAI,CAAC,UAAU,GAAG,kBAAkB,EAAE,CAAC;oBACzC,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,cAAc,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrE,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/pagasae/pagasae-client.d.ts

@@ -0,0 +1,8 @@
+import type { Pagasae } from '../../core/sign-in/ports.js';
+export declare function createPagasae(options: {
+    url: string;
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    timeoutMs: number;
+}): Pagasae;

package/dist/adapters/pagasae/pagasae-client.js

@@ -0,0 +1,90 @@
+/**
+ * pagasae, the one identity provider (decision 0054), as the gateway's
+ * OpenID Connect provider: its authorize address, and its token endpoint,
+ * where the gateway redeems a code and refreshes tokens with its own secret
+ * (client_secret_post).
+ * The access token pagasae answers is the account token for the fleet the
+ * person picked; the gateway reads what it names, and core checks its
+ * signature on every call it is presented to.
+ */
+import { idSchema } from '@aeolus-fleet/common';
+import { z } from 'zod';
+import { err, ok } from '../../core/shared/result.js';
+const MILLISECONDS_PER_SECOND = 1000;
+const HTTP_SERVER_ERROR = 500;
+const tokenAnswerSchema = z.object({ access_token: z.string(), refresh_token: z.string() });
+const errorAnswerSchema = z.object({ error: z.string() });
+/** What the gateway reads of an account token: its fleet (the audience), its account, its person ship there, and its end; common's accountTokenClaimsSchema replaces it once published (aeolus-fleet#991). */
+const accountTokenSchema = z.object({ aud: idSchema('fleet'), sub: z.string().min(1), person_ship: idSchema('ship').optional(), exp: z.number() });
+function claimsOf(accountToken) {
+    const payload = accountToken.split('.')[1];
+    if (payload === undefined) {
+        return undefined;
+    }
+    try {
+        return JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+export function createPagasae(options) {
+    /** One call of pagasae's token endpoint with the gateway's secret: the tokens, or why not, refused only when pagasae said so. */
+    const tokenEndpoint = async (grant) => {
+        let response;
+        try {
+            response = await fetch(`${options.url}/oauth/token`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },
+                body: new URLSearchParams({ ...grant, client_id: options.clientId, client_secret: options.clientSecret }).toString(),
+                redirect: 'manual',
+                signal: AbortSignal.timeout(options.timeoutMs),
+            });
+        }
+        catch {
+            return err({ kind: 'unavailable', reason: 'pagasae did not answer' });
+        }
+        const body = await response.json().catch(() => undefined);
+        if (response.status >= HTTP_SERVER_ERROR) {
+            return err({ kind: 'unavailable', reason: `pagasae answered ${String(response.status)}` });
+        }
+        if (!response.ok) {
+            const refusal = errorAnswerSchema.safeParse(body);
+            return err({ kind: 'refused', reason: refusal.success ? refusal.data.error : `pagasae answered ${String(response.status)}` });
+        }
+        const answer = tokenAnswerSchema.safeParse(body);
+        const claims = accountTokenSchema.safeParse(answer.success ? claimsOf(answer.data.access_token) : undefined);
+        if (!answer.success || !claims.success) {
+            return err({ kind: 'refused', reason: 'pagasae answered no account token the gateway can read' });
+        }
+        return ok({
+            accountToken: answer.data.access_token,
+            accountTokenExpiresAt: new Date(claims.data.exp * MILLISECONDS_PER_SECOND),
+            refreshToken: answer.data.refresh_token,
+            fleetId: claims.data.aud,
+            accountId: claims.data.sub,
+            personShipId: claims.data.person_ship ?? null,
+        });
+    };
+    return {
+        authorizeUrl: ({ state, codeChallenge }) => {
+            const url = new URL(`${options.url}/oauth/authorize`);
+            url.search = new URLSearchParams({
+                response_type: 'code',
+                client_id: options.clientId,
+                redirect_uri: options.redirectUri,
+                code_challenge: codeChallenge,
+                code_challenge_method: 'S256',
+                state,
+                scope: 'openid',
+            }).toString();
+            return url.toString();
+        },
+        redeemCode: async ({ code, verifier }) => {
+            const answered = await tokenEndpoint({ grant_type: 'authorization_code', code, redirect_uri: options.redirectUri, code_verifier: verifier });
+            return answered.isOk ? answered : err({ reason: answered.error.reason });
+        },
+        refresh: (refreshToken) => tokenEndpoint({ grant_type: 'refresh_token', refresh_token: refreshToken }),
+    };
+}
+//# sourceMappingURL=pagasae-client.js.map

package/dist/adapters/pagasae/pagasae-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagasae-client.js","sourceRoot":"","sources":["../../../src/adapters/pagasae/pagasae-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,6BAA6B,CAAC;AAGnE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5F,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE1D,8MAA8M;AAC9M,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnJ,SAAS,QAAQ,CAAC,YAAoB;IACpC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAwG;IACpI,iIAAiI;IACjI,MAAM,aAAa,GAAG,KAAK,EAAE,KAA6B,EAAuF,EAAE;QACjJ,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,CAAC,GAAG,cAAc,EAAE;gBACnD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC5F,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE;gBACpH,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;QAChI,CAAC;QACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7G,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,EAAE,CAAC;YACR,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;YACtC,qBAAqB,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,uBAAuB,CAAC;YAC1E,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;YACvC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;YACxB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG;YAC1B,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI;SAC9C,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE;YACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,kBAAkB,CAAC,CAAC;YACtD,GAAG,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;gBAC/B,aAAa,EAAE,MAAM;gBACrB,SAAS,EAAE,OAAO,CAAC,QAAQ;gBAC3B,YAAY,EAAE,OAAO,CAAC,WAAW;gBACjC,cAAc,EAAE,aAAa;gBAC7B,qBAAqB,EAAE,MAAM;gBAC7B,KAAK;gBACL,KAAK,EAAE,QAAQ;aAChB,CAAC,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;QACxB,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE;YACvC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7I,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;KACvG,CAAC;AACJ,CAAC"}

package/dist/adapters/prisma/account-grants.d.ts

@@ -0,0 +1,4 @@
+import type { AccountGrants } from '../../core/sign-in/ports.js';
+import type { Db } from './client.js';
+/** Signed-in accounts' grants, each in its fleet (decision 0054). */
+export declare function createPrismaAccountGrants(db: Db): AccountGrants;

package/dist/adapters/prisma/account-grants.js

@@ -0,0 +1,27 @@
+import { idSchema } from '@aeolus-fleet/common';
+function grantOf(row) {
+    return { ...row, fleetId: idSchema('fleet').parse(row.fleetId), personShipId: row.personShipId === null ? null : idSchema('ship').parse(row.personShipId) };
+}
+/** Signed-in accounts' grants, each in its fleet (decision 0054). */
+export function createPrismaAccountGrants(db) {
+    return {
+        save: async (grant) => {
+            await db.accountGrant.create({ data: { ...grant } });
+        },
+        find: async (fleetId, grantId) => {
+            const row = await db.accountGrant.findFirst({ where: { fleetId, grantId } });
+            return row ? grantOf(row) : undefined;
+        },
+        ofAccount: async (fleetId, accountId) => {
+            const rows = await db.accountGrant.findMany({ where: { fleetId, accountId } });
+            return rows.map(grantOf);
+        },
+        renew: async ({ fleetId, grantId }, tokens) => {
+            await db.accountGrant.updateMany({ where: { fleetId, grantId }, data: { ...tokens } });
+        },
+        end: async (fleetId, grantId) => {
+            await db.accountGrant.deleteMany({ where: { fleetId, grantId } });
+        },
+    };
+}
+//# sourceMappingURL=account-grants.js.map

package/dist/adapters/prisma/account-grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-grants.js","sourceRoot":"","sources":["../../../src/adapters/prisma/account-grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKhD,SAAS,OAAO,CAAC,GAAkK;IACjL,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;AAC9J,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,yBAAyB,CAAC,EAAM;IAC9C,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACpB,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YAC/B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC7E,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACxC,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;YAC/E,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YAC9B,MAAM,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/prisma/calls.d.ts

@@ -0,0 +1,4 @@
+import type { CallStore } from '../../core/mcp-out/hand-call.js';
+import type { Db } from './client.js';
+/** The gateway's calls, one row per delivery. */
+export declare function createPrismaCalls(db: Db): CallStore;

package/dist/adapters/prisma/calls.js

@@ -0,0 +1,35 @@
+import { idSchema } from '@aeolus-fleet/common';
+import { Prisma } from './generated/client.js';
+import { z } from 'zod';
+const replySchema = z.object({
+    to: idSchema('ship'),
+    inReplyTo: idSchema('message'),
+    contentType: z.string(),
+    payload: z.string(),
+    idempotencyKey: z.string(),
+});
+const stateSchema = z.enum(['calling', 'notSent', 'answered', 'mayHaveRun', 'done']);
+/** The gateway's calls, one row per delivery. */
+export function createPrismaCalls(db) {
+    return {
+        find: async (deliveryId) => {
+            const row = await db.call.findUnique({ where: { deliveryId } });
+            if (!row) {
+                return undefined;
+            }
+            const call = {
+                deliveryId: idSchema('delivery').parse(row.deliveryId),
+                fleetId: idSchema('fleet').parse(row.fleetId),
+                party: row.party,
+                state: stateSchema.parse(row.state),
+                reply: row.reply === null ? null : replySchema.parse(row.reply),
+            };
+            return call;
+        },
+        save: async (call) => {
+            const columns = { fleetId: call.fleetId, party: call.party, state: call.state, reply: call.reply === null ? Prisma.DbNull : { ...call.reply } };
+            await db.call.upsert({ where: { deliveryId: call.deliveryId }, create: { deliveryId: call.deliveryId, ...columns }, update: columns });
+        },
+    };
+}
+//# sourceMappingURL=calls.js.map

package/dist/adapters/prisma/calls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calls.js","sourceRoot":"","sources":["../../../src/adapters/prisma/calls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,WAAW,GAAqB,CAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;IACpB,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;AAErF,iDAAiD;AACjD,MAAM,UAAU,iBAAiB,CAAC,EAAM;IACtC,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YACzB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAS;gBACjB,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;gBACtD,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;gBACnC,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;aAChE,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YAChJ,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACzI,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/prisma/changes.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The changes the pages' live channel hears from Postgres. A trigger
+ * announces each committed change to a fleet's pending requests on the
+ * `gateway_changes` channel, naming only the fleet and the topic, so every
+ * gateway instance hears a decision made on any of them. One connection per
+ * instance listens; when it is lost, or the database does not answer at
+ * start, it connects again and asks its listener to read everything anew,
+ * as changes made meanwhile were not heard.
+ */
+import { type FleetId } from '@aeolus-fleet/common';
+/** A change a page may show: which fleet, and what changed in it. */
+export interface Change {
+    readonly fleetId: FleetId;
+    readonly topic: 'requests';
+}
+export declare function listenToChanges(databaseUrl: string, listener: {
+    onChange: (change: Change) => void;
+    onResync: () => void;
+}): Promise<{
+    close(): Promise<void>;
+}>;

package/dist/adapters/prisma/changes.js

@@ -0,0 +1,86 @@
+/**
+ * The changes the pages' live channel hears from Postgres. A trigger
+ * announces each committed change to a fleet's pending requests on the
+ * `gateway_changes` channel, naming only the fleet and the topic, so every
+ * gateway instance hears a decision made on any of them. One connection per
+ * instance listens; when it is lost, or the database does not answer at
+ * start, it connects again and asks its listener to read everything anew,
+ * as changes made meanwhile were not heard.
+ */
+import { idSchema } from '@aeolus-fleet/common';
+import pg from 'pg';
+import { z } from 'zod';
+const CHANNEL = 'gateway_changes';
+/** How the listening connection names itself, so Postgres and its operators can tell it apart. */
+const APPLICATION_NAME = 'aeolus-gateway-changes';
+const RECONNECT_FIRST_MS = 100;
+const RECONNECT_MOST_MS = 5000;
+const changeSchema = z.object({ fleetId: idSchema('fleet'), topic: z.literal('requests') });
+function parsedJson(text) {
+    try {
+        return JSON.parse(text ?? 'null');
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function listenToChanges(databaseUrl, listener) {
+    let client;
+    let isClosed = false;
+    let wait = RECONNECT_FIRST_MS;
+    let retry;
+    const connect = async () => {
+        const connecting = new pg.Client({ connectionString: databaseUrl, application_name: APPLICATION_NAME });
+        connecting.on('notification', (notification) => {
+            const change = changeSchema.safeParse(parsedJson(notification.payload));
+            if (change.success) {
+                listener.onChange(change.data);
+            }
+        });
+        // A lost connection is connected again; its 'end' follows any 'error'.
+        connecting.on('error', () => undefined);
+        connecting.on('end', () => {
+            if (!isClosed && client === connecting) {
+                client = undefined;
+                reconnect();
+            }
+        });
+        try {
+            await connecting.connect();
+            await connecting.query(`LISTEN ${CHANNEL}`);
+        }
+        catch (error) {
+            await connecting.end().catch(() => undefined);
+            throw error;
+        }
+        if (isClosed) {
+            // Closed while it was connecting: it is not kept.
+            await connecting.end();
+            return;
+        }
+        client = connecting;
+        wait = RECONNECT_FIRST_MS;
+    };
+    const reconnect = () => {
+        retry = setTimeout(() => {
+            connect().then(() => {
+                listener.onResync();
+            }, () => {
+                wait = Math.min(wait * 2, RECONNECT_MOST_MS);
+                if (!isClosed) {
+                    reconnect();
+                }
+            });
+        }, wait);
+    };
+    // A database that does not answer yet keeps the gateway starting: the listener connects once it does.
+    await connect().catch(reconnect);
+    return {
+        close: async () => {
+            isClosed = true;
+            clearTimeout(retry);
+            await client?.end();
+        },
+    };
+}
+//# sourceMappingURL=changes.js.map

package/dist/adapters/prisma/changes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changes.js","sourceRoot":"","sources":["../../../src/adapters/prisma/changes.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAgB,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,MAAM,OAAO,GAAG,iBAAiB,CAAC;AAElC,kGAAkG;AAClG,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAElD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAE5F,SAAS,UAAU,CAAC,IAAwB;IAC1C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,WAAmB,EAAE,QAAsE;IAC/H,IAAI,MAA6B,CAAC;IAClC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,IAAI,GAAG,kBAAkB,CAAC;IAC9B,IAAI,KAAiC,CAAC;IAEtC,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,MAAM,UAAU,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxG,UAAU,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,YAAY,EAAE,EAAE;YAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACxE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,uEAAuE;QACvE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,QAAQ,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;gBACvC,MAAM,GAAG,SAAS,CAAC;gBACnB,SAAS,EAAE,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;YAC3B,MAAM,UAAU,CAAC,KAAK,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC9C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,QAAQ,EAAE,CAAC;YACb,kDAAkD;YAClD,MAAM,UAAU,CAAC,GAAG,EAAE,CAAC;YACvB,OAAO;QACT,CAAC;QACD,MAAM,GAAG,UAAU,CAAC;QACpB,IAAI,GAAG,kBAAkB,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,GAAS,EAAE;QAC3B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,CAAC,IAAI,CACZ,GAAG,EAAE;gBACH,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,CAAC,EACD,GAAG,EAAE;gBACH,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,SAAS,EAAE,CAAC;gBACd,CAAC;YACH,CAAC,CACF,CAAC;QACJ,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,sGAAsG;IACtG,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,OAAO;QACL,KAAK,EAAE,KAAK,IAAI,EAAE;YAChB,QAAQ,GAAG,IAAI,CAAC;YAChB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,MAAM,EAAE,GAAG,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/prisma/client-calls.d.ts

@@ -0,0 +1,4 @@
+import type { ClientCalls } from '../../core/mcp-in/ports.js';
+import type { Db } from './client.js';
+/** Outside clients' calls, one row per message in a fleet, and their replies, one row per delivery. */
+export declare function createPrismaClientCalls(db: Db): ClientCalls;

package/dist/adapters/prisma/client-calls.js

@@ -0,0 +1,50 @@
+import { idSchema } from '@aeolus-fleet/common';
+/** Outside clients' calls, one row per message in a fleet, and their replies, one row per delivery. */
+export function createPrismaClientCalls(db) {
+    const read = async (where) => {
+        const row = await db.clientCall.findUnique({ where });
+        if (!row) {
+            return undefined;
+        }
+        const replies = await db.clientCallReply.findMany({ where: { fleetId: row.fleetId, callMessageId: row.messageId }, orderBy: { sequence: 'asc' } });
+        return {
+            fleetId: idSchema('fleet').parse(row.fleetId),
+            party: row.party,
+            messageId: idSchema('message').parse(row.messageId),
+            handle: row.handle,
+            shipId: idSchema('ship').parse(row.shipId),
+            capability: row.capability,
+            outputContentType: row.outputContentType,
+            sentAt: row.sentAt,
+            deadlineAt: row.deadlineAt,
+            replies: replies.map((reply) => ({
+                deliveryId: idSchema('delivery').parse(reply.deliveryId),
+                messageId: idSchema('message').parse(reply.messageId),
+                contentType: reply.contentType,
+                payload: reply.payload,
+                receivedAt: reply.receivedAt,
+            })),
+        };
+    };
+    return {
+        save: async ({ fleetId, party, messageId, handle, shipId, capability, outputContentType, sentAt, deadlineAt }) => {
+            // The same send again answers the same message: the call kept first stays.
+            await db.clientCall.upsert({
+                where: { fleetId_messageId: { fleetId, messageId } },
+                create: { fleetId, party, messageId, handle, shipId, capability, outputContentType, sentAt, deadlineAt },
+                update: {},
+            });
+        },
+        addReply: async ({ fleetId, messageId }, reply) => {
+            // A delivery handed again after a lost acknowledgement is kept once.
+            const { deliveryId, contentType, payload, receivedAt } = reply;
+            await db.clientCallReply.upsert({ where: { deliveryId }, create: { deliveryId, fleetId, callMessageId: messageId, messageId: reply.messageId, contentType, payload, receivedAt }, update: {} });
+        },
+        findByMessage: (fleetId, messageId) => read({ fleetId_messageId: { fleetId, messageId } }),
+        findByHandle: async ({ fleetId, party }, handle) => {
+            const call = await read({ fleetId_handle: { fleetId, handle } });
+            return call?.party === party ? call : undefined;
+        },
+    };
+}
+//# sourceMappingURL=client-calls.js.map

package/dist/adapters/prisma/client-calls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-calls.js","sourceRoot":"","sources":["../../../src/adapters/prisma/client-calls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAgC,MAAM,sBAAsB,CAAC;AAM9E,uGAAuG;AACvG,MAAM,UAAU,uBAAuB,CAAC,EAAM;IAC5C,MAAM,IAAI,GAAG,KAAK,EAAE,KAAmI,EAAmC,EAAE;QAC1L,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnJ,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;YAC7C,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YACnD,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1C,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;gBACxD,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;gBACrD,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;YAC/G,2EAA2E;YAC3E,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;gBACzB,KAAK,EAAE,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;gBACpD,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE;gBACxG,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE;YAChD,qEAAqE;YACrE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;YAC/D,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAClM,CAAC;QACD,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC1F,YAAY,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE;YACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjE,OAAO,IAAI,EAAE,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/prisma/client.d.ts

@@ -0,0 +1,8 @@
+import { PrismaClient, type Prisma } from './generated/client.js';
+export type { PrismaClient } from './generated/client.js';
+/** The client itself, or the client of one interactive transaction. Repositories take either. */
+export type Db = PrismaClient | Prisma.TransactionClient;
+/** Creates a Prisma client on a pg connection pool for the given database. */
+export declare function createPrismaClient(databaseUrl: string): PrismaClient;
+/** Throws when the database cannot answer a trivial query. */
+export declare function checkDatabase(prisma: PrismaClient): Promise<void>;

package/dist/adapters/prisma/client.js

@@ -0,0 +1,11 @@
+import { PrismaPg } from '@prisma/adapter-pg';
+import { PrismaClient } from './generated/client.js';
+/** Creates a Prisma client on a pg connection pool for the given database. */
+export function createPrismaClient(databaseUrl) {
+    return new PrismaClient({ adapter: new PrismaPg({ connectionString: databaseUrl }) });
+}
+/** Throws when the database cannot answer a trivial query. */
+export async function checkDatabase(prisma) {
+    await prisma.$queryRaw `SELECT 1`;
+}
+//# sourceMappingURL=client.js.map

package/dist/adapters/prisma/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/adapters/prisma/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAe,MAAM,uBAAuB,CAAC;AAOlE,8EAA8E;AAC9E,MAAM,UAAU,kBAAkB,CAAC,WAAmB;IACpD,OAAO,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,IAAI,QAAQ,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAoB;IACtD,MAAM,MAAM,CAAC,SAAS,CAAA,UAAU,CAAC;AACnC,CAAC"}

package/dist/adapters/prisma/connection-store.d.ts

@@ -0,0 +1,4 @@
+import type { ConnectionStore } from '../../core/connection/ports.js';
+import type { Db } from './client.js';
+/** Each fleet's connection, one row per fleet. */
+export declare function createPrismaConnectionStore(db: Db): ConnectionStore;