@aeolus-fleet/gateway 0.0.0-stage → 0.28.0

package/dist/adapters/http/add-server-page.d.ts

@@ -0,0 +1,7 @@
+import type { FastifyInstance } from 'fastify';
+import { type Context } from '../trpc/router.js';
+import { type SignInWay } from './signal.js';
+export declare function registerAddServerPage(server: FastifyInstance, deps: {
+    contextFor: (cookie: string | undefined) => Context;
+    signIn: SignInWay;
+}): void;

package/dist/adapters/http/add-server-page.js

@@ -0,0 +1,175 @@
+/**
+ * Adding an outside MCP server (design B, Signal, screen 7; flow F10), for
+ * an actor holding fleet:manage, in three steps: its address and
+ * credential, the gateway's check of the tools it answers with, then its
+ * owner, when it is approved. The check keeps nothing, so the owner step
+ * carries the address and credential on in its form, on a page no cache
+ * keeps. Each step calls the gateway's own API as the caller, so the pages
+ * check nothing the API does not; they refuse a form sent from another
+ * origin.
+ */
+import { randomUUID } from 'node:crypto';
+import { idSchema } from '@aeolus-fleet/common';
+import { TRPCError } from '@trpc/server';
+import { getHTTPStatusCodeFromError } from '@trpc/server/http';
+import { z } from 'zod';
+import { gatewayRouter } from '../trpc/router.js';
+import { acceptForms, escaped, isSameOrigin } from './html.js';
+import { icon, ring, signalPage, signInPrompt, statusBadge } from './signal.js';
+const HTTP_FORBIDDEN = 403;
+const HTTP_SEE_OTHER = 303;
+const HTTP_INTERNAL_ERROR = 500;
+const LIST = '/outside-parties';
+const PAGE = `${LIST}/add`;
+const TITLE = 'Add MCP server';
+const CONCURRENCY_LIMIT_DEFAULT = 4;
+const formSchema = z.record(z.string(), z.string());
+/** The credential fields a form sends, in the order the address step asks for them. */
+const CREDENTIAL_FIELDS = ['credentialKind', 'token', 'clientId', 'clientSecret', 'issuer', 'scope'];
+/** The steps of adding a server, as the design numbers them. */
+const STEPS = ['Address', 'Check', 'Owner'];
+function field(form, name) {
+    return form[name] ?? '';
+}
+function steps(current) {
+    const at = STEPS.indexOf(current);
+    const items = STEPS.map((step, index) => `<li class="${index <= at ? 'done' : ''}"${index === at ? ' aria-current="step"' : ''}>${String(index + 1)} ${step}</li>`).join('');
+    return `<ol class="steps">${items}</ol>`;
+}
+function head(current) {
+    return `<a class="back" href="${LIST}">${icon('arrowLeft', 14)}Outside parties</a><div class="lead"><h1>${TITLE}</h1></div>${steps(current)}`;
+}
+function alert(message) {
+    return message === undefined ? '' : `<section class="card alert tone-attention" role="alert"><p>${escaped(message)}</p></section>`;
+}
+function credentialOf(form) {
+    if (field(form, 'credentialKind') === 'clientCredentials') {
+        const scope = field(form, 'scope');
+        return { kind: 'clientCredentials', clientId: field(form, 'clientId'), clientSecret: field(form, 'clientSecret'), issuer: field(form, 'issuer'), ...(scope === '' ? {} : { scope }) };
+    }
+    return { kind: 'bearer', token: field(form, 'token') };
+}
+function addressBody(form, refusal) {
+    const isClient = field(form, 'credentialKind') === 'clientCredentials';
+    return `${head('Address')}${alert(refusal)}<section class="card"><form method="post" action="${PAGE}/check" style="display:grid;gap:12px">
+<label class="field"><span>Streamable HTTP address</span><input type="url" name="url" value="${escaped(field(form, 'url'))}" placeholder="https://mcp.example.com/mcp" required></label>
+<fieldset><legend>The server's credential</legend>
+<label class="field"><span>Credential</span><select name="credentialKind"><option value="bearer">Bearer token</option><option value="clientCredentials"${isClient ? ' selected' : ''}>OAuth client credentials</option></select></label>
+<label class="field"><span>Bearer token</span><input type="password" name="token"></label>
+<label class="field"><span>Client id</span><input type="text" name="clientId" value="${escaped(field(form, 'clientId'))}"></label>
+<label class="field"><span>Client secret</span><input type="password" name="clientSecret"></label>
+<label class="field"><span>Issuer</span><input type="url" name="issuer" value="${escaped(field(form, 'issuer'))}"></label>
+<label class="field"><span>Scope</span><input type="text" name="scope" value="${escaped(field(form, 'scope'))}"></label>
+</fieldset>
+<div class="actions"><button class="primary">${icon('check', 14)}Check the server</button></div></form></section>`;
+}
+/** A proxy ship's name offered from the server's address: its host's first name that says whose it is. */
+function suggestedName(url) {
+    try {
+        const labels = new URL(url).hostname.split('.').filter((label) => label !== 'mcp' && label !== 'www');
+        return (labels[0] ?? '').toLowerCase().replaceAll(/[^a-z0-9]+/g, '-').replaceAll(/^-+|-+$/g, '');
+    }
+    catch {
+        return '';
+    }
+}
+/** The address and credential, carried on in the owner step's form. */
+function carried(form) {
+    return ['url', ...CREDENTIAL_FIELDS].map((name) => `<input type="hidden" name="${name}" value="${escaped(field(form, name))}">`).join('');
+}
+function toolsCard(tools) {
+    const count = tools.length;
+    const rows = tools.map((tool) => `<li><span class="mono">${escaped(tool.name)}</span>${tool.description === undefined ? '' : `<span class="muted">${escaped(tool.description)}</span>`}</li>`).join('');
+    return `<section class="card" style="justify-items:center;text-align:center">${ring({ tone: 'ok', center: { count }, label: `${String(count)} ${count === 1 ? 'tool' : 'tools'}` })}${statusBadge({ tone: 'ok', icon: 'check', label: 'Server answers' })}<ul class="tool-rows">${rows}</ul></section>`;
+}
+function ownerBody(form, shown) {
+    const requestId = field(form, 'requestId') === '' ? randomUUID() : field(form, 'requestId');
+    const name = field(form, 'name') === '' ? suggestedName(field(form, 'url')) : field(form, 'name');
+    const limit = field(form, 'concurrencyLimit') === '' ? String(CONCURRENCY_LIMIT_DEFAULT) : field(form, 'concurrencyLimit');
+    return `${head(shown.tools === undefined ? 'Owner' : 'Check')}${alert(shown.refusal)}${shown.tools === undefined ? '' : toolsCard(shown.tools)}<section class="card"><h2>Its owner</h2>
+<form method="post" action="${PAGE}" style="display:grid;gap:12px"><input type="hidden" name="requestId" value="${escaped(requestId)}">${carried(form)}
+<p class="muted mono">${escaped(field(form, 'url'))}</p>
+<label class="field"><span>Proxy ship's name</span><input type="text" name="name" value="${escaped(name)}" required></label>
+<label class="field"><span>Owner</span><input type="text" name="ownerShipId" value="${escaped(field(form, 'ownerShipId'))}" placeholder="shp_..." required><span class="muted">A person ship. It answers for this server.</span></label>
+<label class="field"><span>Calls at once</span><input type="number" name="concurrencyLimit" min="1" max="10" value="${escaped(limit)}"></label>
+<div class="actions"><button class="primary">${icon('check', 14)}Add ${escaped(name === '' ? 'server' : name)}</button><a class="button" href="${PAGE}">Back to the address</a></div></form></section>`;
+}
+function html(reply, page) {
+    return reply
+        .code(page.status)
+        .type('text/html; charset=utf-8')
+        .header('cache-control', 'no-store')
+        .send(signalPage({ title: TITLE, tab: 'outsideParties', body: page.body, isSignedIn: page.isSignedIn }));
+}
+export function registerAddServerPage(server, deps) {
+    acceptForms(server);
+    /** Renders a step as the caller; a refusal shows the step it came from again, with why, or asks to sign in. */
+    const answer = async (exchange, step) => {
+        const { request, reply } = exchange;
+        const context = deps.contextFor(request.headers.cookie);
+        const actor = await context.authenticateActor({ cookie: context.cookie, crewToken: context.crewToken });
+        const isSignedIn = actor.isOk && actor.value.kind === 'account';
+        try {
+            if (!actor.isOk) {
+                throw new TRPCError({ code: 'UNAUTHORIZED', message: actor.error.message });
+            }
+            return await step.render(gatewayRouter.createCaller(context));
+        }
+        catch (error) {
+            if (!(error instanceof TRPCError)) {
+                throw error;
+            }
+            if (error.code === 'UNAUTHORIZED') {
+                return reply.code(getHTTPStatusCodeFromError(error)).type('text/html; charset=utf-8').send(signalPage({ title: TITLE, body: signInPrompt({ message: error.message, way: deps.signIn, returnTo: PAGE }) }));
+            }
+            const isInternal = error.code === 'INTERNAL_SERVER_ERROR';
+            return html(reply, { status: isInternal ? HTTP_INTERNAL_ERROR : getHTTPStatusCodeFromError(error), body: step.refused(isInternal ? 'Internal error' : error.message), isSignedIn });
+        }
+    };
+    const formOf = (request) => {
+        const form = formSchema.safeParse(request.body);
+        return form.success ? form.data : {};
+    };
+    server.get(PAGE, (request, reply) => answer({ request, reply }, {
+        render: () => html(reply, { status: 200, body: addressBody({}), isSignedIn: true }),
+        refused: (message) => addressBody({}, message),
+    }));
+    server.post(`${PAGE}/check`, (request, reply) => {
+        if (!isSameOrigin(request)) {
+            return reply.code(HTTP_FORBIDDEN).type('text/plain; charset=utf-8').send('A form for this page is sent only from this page.');
+        }
+        const form = formOf(request);
+        return answer({ request, reply }, {
+            render: async (caller) => {
+                const { tools } = await caller.parties.check({ url: field(form, 'url'), credential: credentialOf(form) });
+                return html(reply, { status: 200, body: ownerBody(form, { tools }), isSignedIn: true });
+            },
+            refused: (message) => addressBody(form, message),
+        });
+    });
+    server.post(PAGE, (request, reply) => {
+        if (!isSameOrigin(request)) {
+            return reply.code(HTTP_FORBIDDEN).type('text/plain; charset=utf-8').send('A form for this page is sent only from this page.');
+        }
+        const form = formOf(request);
+        return answer({ request, reply }, {
+            render: async (caller) => {
+                const ownerShipId = idSchema('ship').safeParse(field(form, 'ownerShipId').trim());
+                if (!ownerShipId.success) {
+                    throw new TRPCError({ code: 'BAD_REQUEST', message: "The owner's ship id is not a ship id (shp_...)" });
+                }
+                const approved = await caller.parties.approve({
+                    requestId: field(form, 'requestId'),
+                    name: field(form, 'name'),
+                    url: field(form, 'url'),
+                    credential: credentialOf(form),
+                    ownerShipId: ownerShipId.data,
+                    concurrencyLimit: Number(field(form, 'concurrencyLimit')),
+                });
+                return reply.code(HTTP_SEE_OTHER).header('location', `${LIST}/${encodeURIComponent(approved.name)}`).send();
+            },
+            refused: (message) => ownerBody(form, { refusal: message }),
+        });
+    });
+}
+//# sourceMappingURL=add-server-page.js.map

package/dist/adapters/http/add-server-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-server-page.js","sourceRoot":"","sources":["../../../src/adapters/http/add-server-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAmD,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAoC,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AAQhG,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,IAAI,GAAG,kBAAkB,CAAC;AAChC,MAAM,IAAI,GAAG,GAAG,IAAI,MAAM,CAAC;AAC3B,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAGpD,uFAAuF;AACvF,MAAM,iBAAiB,GAAG,CAAC,gBAAgB,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAE9G,gEAAgE;AAChE,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AAIrD,SAAS,KAAK,CAAC,IAAU,EAAE,IAAY;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED,SAAS,KAAK,CAAC,OAAa;IAC1B,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7K,OAAO,qBAAqB,KAAK,OAAO,CAAC;AAC3C,CAAC;AAED,SAAS,IAAI,CAAC,OAAa;IACzB,OAAO,yBAAyB,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,4CAA4C,KAAK,cAAc,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;AAChJ,CAAC;AAED,SAAS,KAAK,CAAC,OAA2B;IACxC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,8DAA8D,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;AACrI,CAAC;AAED,SAAS,YAAY,CAAC,IAAU;IAC9B,IAAI,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,mBAAmB,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACxL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,IAAU,EAAE,OAAgB;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,mBAAmB,CAAC;IACvE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,qDAAqD,IAAI;+FACN,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;;yJAE+B,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;;uFAE7F,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;;iFAEtC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gFAC/B,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;;+CAE9D,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,kDAAkD,CAAC;AACnH,CAAC;AAED,0GAA0G;AAC1G,SAAS,aAAa,CAAC,GAAW;IAChC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC;QACtG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACnG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAS,OAAO,CAAC,IAAU;IACzB,OAAO,CAAC,KAAK,EAAE,GAAG,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,IAAI,YAAY,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5I,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxM,OAAO,wEAAwE,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,yBAAyB,IAAI,iBAAiB,CAAC;AAC1S,CAAC;AAED,SAAS,SAAS,CAAC,IAAU,EAAE,KAAiD;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClG,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC3H,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;8BAClH,IAAI,gFAAgF,OAAO,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC;wBAC9H,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;2FACwC,OAAO,CAAC,IAAI,CAAC;sFAClB,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;sHACH,OAAO,CAAC,KAAK,CAAC;+CACrF,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,IAAI,kDAAkD,CAAC;AACxM,CAAC;AAED,SAAS,IAAI,CAAC,KAAmB,EAAE,IAA2D;IAC5F,OAAO,KAAK;SACT,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;SACjB,IAAI,CAAC,0BAA0B,CAAC;SAChC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC;SACnC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAuB,EAAE,IAAgF;IAC7I,WAAW,CAAC,MAAM,CAAC,CAAC;IAEpB,+GAA+G;IAC/G,MAAM,MAAM,GAAG,KAAK,EAClB,QAA0D,EAC1D,IAAuJ,EACvJ,EAAE;QACF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QACxG,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;QAChE,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7M,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC;YAC1D,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACtL,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAQ,EAAE;QAC/C,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAClC,MAAM,CACJ,EAAE,OAAO,EAAE,KAAK,EAAE,EAClB;QACE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACnF,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC;KAC/C,CACF,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAC9C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CACX,EAAE,OAAO,EAAE,KAAK,EAAE,EAClB;YACE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACvB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC1G,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;SACjD,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QACnC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAChI,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,MAAM,CACX,EAAE,OAAO,EAAE,KAAK,EAAE,EAClB;YACE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClF,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;gBAC1G,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;oBAC5C,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;oBACnC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;oBACzB,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;oBACvB,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC;oBAC9B,WAAW,EAAE,WAAW,CAAC,IAAI;oBAC7B,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;iBAC1D,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9G,CAAC;YACD,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;SAC5D,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/http/delivery-page.d.ts

@@ -0,0 +1,24 @@
+import type { FastifyInstance, FastifyReply, FastifyRequest } from 'fastify';
+import { type Context } from '../trpc/router.js';
+/** Where the person goes once a delivery is dealt with, or when it no longer waits. */
+export declare const OVERVIEW = "/overview";
+/** A delivery the inbox lists, as the Overview shows it: opening it is a form, as it acknowledges the delivery. */
+export declare function waitingItem(entry: {
+    deliveryId: string;
+    from: string;
+    title: string;
+}): string;
+/** How the Overview answers a page of its own: it renders as the caller, and says why the API refused, or asks to sign in. */
+export type PageAnswer = (exchange: {
+    request: FastifyRequest;
+    reply: FastifyReply;
+    render: (context: Context) => Promise<FastifyReply>;
+    onRefused?: (context: Context, refused: {
+        status: number;
+        message: string;
+    }) => FastifyReply | Promise<FastifyReply>;
+}) => Promise<FastifyReply>;
+/** The delivery forms, posted from the Overview, answered as the Overview answers its own pages. */
+export declare function registerDeliveryPages(server: FastifyInstance, deps: {
+    answer: PageAnswer;
+}): void;

package/dist/adapters/http/delivery-page.js

@@ -0,0 +1,115 @@
+/**
+ * A delivery that waits on a person, opened from the Overview (design B,
+ * Signal): one item in focus. Opening is the person's own act, so it is a
+ * form, never a link: the gateway acknowledges the delivery for them, and
+ * the page shows it whole once. A question is answered with one tap on a
+ * button that names the option it sends, the asker's pick on a dashed edge;
+ * any delivery may get a note as its answer, or be done with. Each form
+ * calls the gateway's own API as the person.
+ */
+import { ANSWER_CONTENT_TYPE, answerSchema, isQuestionContentType, questionSchema } from '@aeolus-fleet/common';
+import { TRPCError } from '@trpc/server';
+import { z } from 'zod';
+import { gatewayRouter } from '../trpc/router.js';
+import { escaped, isSameOrigin } from './html.js';
+import { icon, signalPage } from './signal.js';
+/** Where the person goes once a delivery is dealt with, or when it no longer waits. */
+export const OVERVIEW = '/overview';
+const HTTP_FORBIDDEN = 403;
+const HTTP_SEE_OTHER = 303;
+const TITLE = 'Overview';
+const formSchema = z.record(z.string(), z.string());
+function deliveryPath(deliveryId, action) {
+    return `${OVERVIEW}/deliveries/${encodeURIComponent(deliveryId)}/${action}`;
+}
+/** A delivery the inbox lists, as the Overview shows it: opening it is a form, as it acknowledges the delivery. */
+export function waitingItem(entry) {
+    return `<form method="post" action="${deliveryPath(entry.deliveryId, 'open')}"><button class="item"><span class="text"><span>${escaped(entry.title)}</span><span class="tag">${icon('users', 12)}${escaped(entry.from)}</span></span></button></form>`;
+}
+function parsedQuestion(opened) {
+    if (!isQuestionContentType(opened.contentType)) {
+        return undefined;
+    }
+    try {
+        const question = questionSchema.safeParse(JSON.parse(opened.payload));
+        return question.success ? question.data : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+const NOTE_FIELD = '<label class="field"><span>Note</span><textarea name="note" rows="2" placeholder="Optional, sent with your answer"></textarea></label>';
+function questionCard(opened, question) {
+    const picked = question.options.find((option) => option.key === question.pick.option);
+    const buttons = question.options
+        .map((option) => {
+        const isPick = option.key === question.pick.option;
+        return `<button class="${isPick ? 'primary pick' : ''}" name="option" value="${String(option.key)}" title="${escaped(option.detail)}">${icon(isPick ? 'check' : 'x', 14)}${escaped(option.label)}</button>`;
+    })
+        .join('');
+    const pickLine = picked === undefined ? '' : `<p class="muted">${escaped(picked.label)} is the pick of ${escaped(opened.from)}: ${escaped(question.pick.why)}</p>`;
+    return `<form method="post" action="${deliveryPath(opened.deliveryId, 'answer')}" style="display:grid;gap:12px"><input type="hidden" name="questionId" value="${escaped(question.id)}">
+<p class="payload">${escaped(question.context)}</p>
+<div class="answers">${buttons}</div>${pickLine}${NOTE_FIELD}<div class="actions"><button name="option" value="">Send the note alone</button></div></form>`;
+}
+function messageCard(opened) {
+    return `<pre class="payload">${escaped(opened.payload)}</pre>
+<form method="post" action="${deliveryPath(opened.deliveryId, 'answer')}" style="display:grid;gap:12px">${NOTE_FIELD.replace('Optional, sent with your answer', 'Your answer')}<div class="actions"><button class="primary">Answer</button></div></form>
+<form method="post" action="${deliveryPath(opened.deliveryId, 'done')}"><div class="actions"><button>${icon('check', 14)}Done</button></div></form>`;
+}
+function deliveryBody(opened) {
+    const question = parsedQuestion(opened);
+    const card = question === undefined ? messageCard(opened) : questionCard(opened, question);
+    return `<section class="card"><span class="tag">${icon('users', 12)}${escaped(opened.from)} · ${escaped(new Date(opened.sentAt).toUTCString())}</span><h2>${escaped(question?.title ?? opened.title)}</h2>${card}</section>`;
+}
+/** The answer a form sends: an option and a note, or a note alone, for a question; a note as plain text otherwise. */
+function answerOf(form) {
+    const note = (form.note ?? '').trim();
+    const questionId = form.questionId;
+    if (questionId === undefined) {
+        if (note === '') {
+            throw new TRPCError({ code: 'BAD_REQUEST', message: 'Write your answer first' });
+        }
+        return { contentType: 'text/plain', payload: note };
+    }
+    const option = form.option ?? '';
+    const answer = answerSchema.safeParse({ questionId, ...(option === '' ? {} : { option: Number(option) }), ...(note === '' ? {} : { note }) });
+    if (!answer.success) {
+        throw new TRPCError({ code: 'BAD_REQUEST', message: 'Tap an option, or write a note' });
+    }
+    return { contentType: ANSWER_CONTENT_TYPE, payload: JSON.stringify(answer.data) };
+}
+function html(reply, page) {
+    return reply.code(page.status).type('text/html; charset=utf-8').header('cache-control', 'no-store').send(signalPage({ title: TITLE, tab: 'overview', body: page.body, isSignedIn: true }));
+}
+const HTTP_NOT_FOUND = 404;
+function noLongerWaits(refused) {
+    return `<section class="card"><h2>This no longer waits for you</h2><p class="muted">${escaped(refused.message)}</p><div class="actions"><a class="button" href="${OVERVIEW}">Back to the overview</a></div></section>`;
+}
+/** The delivery forms, posted from the Overview, answered as the Overview answers its own pages. */
+export function registerDeliveryPages(server, deps) {
+    const act = (action, run) => {
+        server.post(`${OVERVIEW}/deliveries/:deliveryId/${action}`, (request, reply) => {
+            if (!isSameOrigin(request)) {
+                return reply.code(HTTP_FORBIDDEN).type('text/plain; charset=utf-8').send('A form for this page is sent only from this page.');
+            }
+            const form = formSchema.safeParse(request.body);
+            return deps.answer({
+                request,
+                reply,
+                render: (context) => run({ caller: gatewayRouter.createCaller(context), deliveryId: request.params.deliveryId, form: form.success ? form.data : {}, reply }),
+                onRefused: (_context, refused) => html(reply, refused.status === HTTP_NOT_FOUND ? { status: refused.status, body: noLongerWaits(refused) } : { status: refused.status, body: `<section class="card alert tone-attention" role="alert"><p>${escaped(refused.message)}</p></section>` }),
+            });
+        });
+    };
+    act('open', async ({ caller, deliveryId, reply }) => html(reply, { status: 200, body: deliveryBody(await caller.people.open({ deliveryId })) }));
+    act('answer', async ({ caller, deliveryId, form, reply }) => {
+        await caller.people.answer({ deliveryId, ...answerOf(form) });
+        return reply.code(HTTP_SEE_OTHER).header('location', OVERVIEW).send();
+    });
+    act('done', async ({ caller, deliveryId, reply }) => {
+        await caller.people.done({ deliveryId });
+        return reply.code(HTTP_SEE_OTHER).header('location', OVERVIEW).send();
+    });
+}
+//# sourceMappingURL=delivery-page.js.map

package/dist/adapters/http/delivery-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-page.js","sourceRoot":"","sources":["../../../src/adapters/http/delivery-page.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAiB,MAAM,sBAAsB,CAAC;AAC/H,OAAO,EAAE,SAAS,EAA2B,MAAM,cAAc,CAAC;AAElE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAoC,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAK/C,uFAAuF;AACvF,MAAM,CAAC,MAAM,QAAQ,GAAG,WAAW,CAAC;AAEpC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,KAAK,GAAG,UAAU,CAAC;AAEzB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAEpD,SAAS,YAAY,CAAC,UAAkB,EAAE,MAAkC;IAC1E,OAAO,GAAG,QAAQ,eAAe,kBAAkB,CAAC,UAAU,CAAC,IAAI,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,WAAW,CAAC,KAA0D;IACpF,OAAO,+BAA+B,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,mDAAmD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC;AACzP,CAAC;AAED,SAAS,cAAc,CAAC,MAAkB;IACxC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,wIAAwI,CAAC;AAE5J,SAAS,YAAY,CAAC,MAAkB,EAAE,QAAkB;IAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO;SAC7B,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;QACnD,OAAO,kBAAkB,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,0BAA0B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9M,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IACnK,OAAO,+BAA+B,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,iFAAiF,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;qBACjK,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;uBACvB,OAAO,SAAS,QAAQ,GAAG,UAAU,+FAA+F,CAAC;AAC5J,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB;IACrC,OAAO,wBAAwB,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;8BAC1B,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,mCAAmC,UAAU,CAAC,OAAO,CAAC,iCAAiC,EAAE,aAAa,CAAC;8BAChJ,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,kCAAkC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,4BAA4B,CAAC;AACrJ,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB;IACtC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC3F,OAAO,2CAA2C,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,cAAc,OAAO,CAAC,QAAQ,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC;AAC/N,CAAC;AAED,sHAAsH;AACtH,SAAS,QAAQ,CAAC,IAA4B;IAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACnC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9I,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,IAAI,CAAC,KAAmB,EAAE,IAAsC;IACvE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7L,CAAC;AAUD,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,SAAS,aAAa,CAAC,OAA4B;IACjD,OAAO,+EAA+E,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,oDAAoD,QAAQ,4CAA4C,CAAC;AACzN,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,qBAAqB,CAAC,MAAuB,EAAE,IAA4B;IACzF,MAAM,GAAG,GAAG,CAAC,MAAkC,EAAE,GAA0K,EAAE,EAAE;QAC7N,MAAM,CAAC,IAAI,CAAqC,GAAG,QAAQ,2BAA2B,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YACjH,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAChI,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,MAAM,CAAC;gBACjB,OAAO;gBACP,KAAK;gBACL,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;gBAC5J,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAC/B,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,8DAA8D,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;aACvP,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjJ,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QAC1D,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE;QAClD,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/http/html.d.ts

@@ -0,0 +1,15 @@
+/**
+ * What the gateway's server-rendered pages share: escaping, the page
+ * layout and its style, forms, and the check that a form came from them.
+ */
+import type { TRPCError } from '@trpc/server';
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+export declare function escaped(text: string): string;
+/** A whole page of the gateway's: its title, its body, and the shared style. */
+export declare function layout(title: string, body: string): string;
+/** A form from the gateway's own pages: its Origin is the gateway's, so no other site can send one with argo's cookie. */
+export declare function isSameOrigin(request: FastifyRequest): boolean;
+/** Parses form posts into their fields, once per server whichever page asks first. */
+export declare function acceptForms(server: FastifyInstance): void;
+/** Why the API refused, as a page says it: the form's fields that are not valid, or the API's message. */
+export declare function refusalMessage(error: TRPCError): string;

package/dist/adapters/http/html.js

@@ -0,0 +1,53 @@
+import { z } from 'zod';
+export function escaped(text) {
+    return text.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;').replaceAll("'", '&#39;');
+}
+const STYLE = `
+:root { color-scheme: light dark; --ink: #1b1f24; --muted: #5b6470; --line: #d5dae0; --paper: #ffffff; --accent: #0b5cad; --warn: #a3261b; }
+@media (prefers-color-scheme: dark) { :root { --ink: #e6e9ed; --muted: #9aa3ad; --line: #39414a; --paper: #14181c; --accent: #6aa8ec; --warn: #f08a7e; } }
+body { margin: 0 auto; max-width: 960px; padding: 24px 16px; font: 15px/1.5 system-ui, sans-serif; color: var(--ink); background: var(--paper); }
+h1 { font-size: 22px; } h2 { font-size: 17px; margin-top: 32px; }
+table { width: 100%; border-collapse: collapse; } th, td { text-align: left; padding: 8px; border-bottom: 1px solid var(--line); vertical-align: top; overflow-wrap: anywhere; }
+form { display: grid; gap: 8px; margin: 8px 0; } form.inline { display: flex; flex-wrap: wrap; gap: 8px; align-items: center; }
+label { display: grid; gap: 2px; color: var(--muted); } input, select, button { font: inherit; padding: 6px 8px; }
+button { color: var(--paper); background: var(--accent); border: 0; border-radius: 4px; cursor: pointer; }
+.error { color: var(--warn); border: 1px solid var(--warn); padding: 8px 12px; border-radius: 4px; } .muted { color: var(--muted); }
+`;
+/** A whole page of the gateway's: its title, its body, and the shared style. */
+export function layout(title, body) {
+    return documentOf({ title, head: '', body });
+}
+/** A page of the gateway: its title, its head and its body, with the shared style. */
+function documentOf(page) {
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">${page.head}<title>${escaped(page.title)}</title><style>${STYLE}</style></head><body>${page.body}</body></html>`;
+}
+/** A form from the gateway's own pages: its Origin is the gateway's, so no other site can send one with argo's cookie. */
+export function isSameOrigin(request) {
+    const origin = request.headers.origin;
+    if (origin === undefined) {
+        return false;
+    }
+    try {
+        return new URL(origin).host === request.headers.host;
+    }
+    catch {
+        return false;
+    }
+}
+/** Parses form posts into their fields, once per server whichever page asks first. */
+export function acceptForms(server) {
+    if (!server.hasContentTypeParser('application/x-www-form-urlencoded')) {
+        // eslint-disable-next-line @typescript-eslint/max-params -- Fastify's parser signature.
+        server.addContentTypeParser('application/x-www-form-urlencoded', { parseAs: 'string' }, (_request, body, done) => {
+            done(null, Object.fromEntries(new URLSearchParams(String(body))));
+        });
+    }
+}
+/** Why the API refused, as a page says it: the form's fields that are not valid, or the API's message. */
+export function refusalMessage(error) {
+    if (error.cause instanceof z.ZodError) {
+        return `The form is not valid: ${error.cause.issues.map((issue) => `${issue.path.join('.') || 'form'}: ${issue.message}`).join('; ')}`;
+    }
+    return error.code === 'INTERNAL_SERVER_ERROR' ? 'Internal error' : error.message;
+}
+//# sourceMappingURL=html.js.map

package/dist/adapters/http/html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.js","sourceRoot":"","sources":["../../../src/adapters/http/html.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC1I,CAAC;AAED,MAAM,KAAK,GAAG;;;;;;;;;;CAUb,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,IAAY;IAChD,OAAO,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,sFAAsF;AACtF,SAAS,UAAU,CAAC,IAAmD;IACrE,OAAO,kIAAkI,IAAI,CAAC,IAAI,UAAU,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,IAAI,CAAC,IAAI,gBAAgB,CAAC;AAC1P,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,WAAW,CAAC,MAAuB;IACjD,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACtE,wFAAwF;QACxF,MAAM,CAAC,oBAAoB,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC/G,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,IAAI,KAAK,CAAC,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,0BAA0B,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACzI,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;AACnF,CAAC"}

package/dist/adapters/http/live.d.ts

@@ -0,0 +1,29 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { FastifyInstance } from 'fastify';
+import type { Change } from '../prisma/changes.js';
+import type { Context } from '../trpc/router.js';
+/** A page the live channel serves: its sections' HTML by name, read as the caller, from the page's query. */
+export interface LivePage {
+    render(context: Context, params: URLSearchParams): Promise<Record<string, string>>;
+}
+interface Listener {
+    readonly fleetId: FleetId;
+    readonly read: () => void;
+}
+/** Hands each change to the sockets of its fleet, on this gateway. */
+export interface ChangeHub {
+    publish: (change: Change) => void;
+    /** Every socket reads its page again: changes may have been missed. */
+    resync: () => void;
+    subscribe: (listener: Listener) => () => void;
+    listeners: () => number;
+}
+export declare function createChangeHub(): ChangeHub;
+/** Serves websockets on the server, once whichever route asks first; its routes register once it is loaded. */
+export declare function acceptWebsockets(server: FastifyInstance, routes: () => void): void;
+export declare function registerLive(server: FastifyInstance, deps: {
+    contextFor: (cookie: string | undefined) => Context;
+    hub: ChangeHub;
+    pages: Record<string, LivePage>;
+}): void;
+export {};

package/dist/adapters/http/live.js

@@ -0,0 +1,100 @@
+/**
+ * The pages' live channel: a page whose content changes opens a websocket
+ * on /live naming itself, and is sent its sections again whenever its
+ * fleet's requests change, so it never reloads itself or polls. A change
+ * carries no content: each socket reads its page again through the
+ * gateway's API as its own caller, so it is never sent what its actor may
+ * not see. Only the gateway's own pages open it: a socket from another
+ * origin, with no session, or for a page that is not live is closed.
+ */
+import websocket from '@fastify/websocket';
+import { isSameOrigin } from './html.js';
+/** Why a socket was closed, as the page reads it: it does not open again for these. */
+const CLOSE_NO_SESSION = 4401;
+const CLOSE_OTHER_ORIGIN = 4403;
+const CLOSE_NOT_LIVE = 4404;
+export function createChangeHub() {
+    const listening = new Set();
+    return {
+        publish: (change) => {
+            for (const listener of listening) {
+                if (listener.fleetId === change.fleetId) {
+                    listener.read();
+                }
+            }
+        },
+        resync: () => {
+            for (const listener of listening) {
+                listener.read();
+            }
+        },
+        subscribe: (listener) => {
+            listening.add(listener);
+            return () => listening.delete(listener);
+        },
+        listeners: () => listening.size,
+    };
+}
+/** Reads a page again and sends it, one read at a time per socket, so an older read never lands after a newer one. */
+function reader(send) {
+    let isReading = false;
+    let isWanted = false;
+    const run = async () => {
+        isReading = true;
+        while (isWanted) {
+            isWanted = false;
+            try {
+                const sections = await send.read();
+                if (send.socket.readyState === send.socket.OPEN) {
+                    send.socket.send(JSON.stringify({ sections }));
+                }
+            }
+            catch {
+                // A read that failed leaves the page as it was; the next change reads it again.
+            }
+        }
+        isReading = false;
+    };
+    return () => {
+        isWanted = true;
+        if (!isReading) {
+            void run();
+        }
+    };
+}
+const servingWebsockets = new WeakSet();
+/** Serves websockets on the server, once whichever route asks first; its routes register once it is loaded. */
+export function acceptWebsockets(server, routes) {
+    if (!servingWebsockets.has(server)) {
+        servingWebsockets.add(server);
+        void server.register(websocket);
+    }
+    void server.after(routes);
+}
+export function registerLive(server, deps) {
+    acceptWebsockets(server, () => {
+        server.get('/live', { websocket: true }, async (socket, request) => {
+            if (!isSameOrigin(request)) {
+                socket.close(CLOSE_OTHER_ORIGIN, 'Opened only from the gateway pages');
+                return;
+            }
+            const params = new URLSearchParams(request.url.slice(request.url.indexOf('?') + 1));
+            const page = deps.pages[params.get('page') ?? ''];
+            if (page === undefined) {
+                socket.close(CLOSE_NOT_LIVE, 'No such live page');
+                return;
+            }
+            const context = deps.contextFor(request.headers.cookie);
+            const actor = await context.authenticateActor({ cookie: context.cookie, crewToken: context.crewToken });
+            if (!actor.isOk) {
+                socket.close(CLOSE_NO_SESSION, 'Sign in again');
+                return;
+            }
+            const read = reader({ socket, read: () => page.render(context, params) });
+            const unsubscribe = deps.hub.subscribe({ fleetId: actor.value.fleetId, read });
+            socket.on('close', unsubscribe);
+            read();
+        });
+    });
+}
+//# sourceMappingURL=live.js.map

package/dist/adapters/http/live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"live.js","sourceRoot":"","sources":["../../../src/adapters/http/live.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,SAAS,MAAM,oBAAoB,CAAC;AAO3C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAOzC,uFAAuF;AACvF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,cAAc,GAAG,IAAI,CAAC;AAgB5B,MAAM,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAY,CAAC;IACtC,OAAO;QACL,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;YAClB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;oBACxC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,EAAE;YACX,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QACD,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI;KAChC,CAAC;AACJ,CAAC;AAED,sHAAsH;AACtH,SAAS,MAAM,CAAC,IAAwE;IACtF,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,GAAG,GAAG,KAAK,IAAmB,EAAE;QACpC,SAAS,GAAG,IAAI,CAAC;QACjB,OAAO,QAAQ,EAAE,CAAC;YAChB,QAAQ,GAAG,KAAK,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gFAAgF;YAClF,CAAC;QACH,CAAC;QACD,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC,CAAC;IACF,OAAO,GAAG,EAAE;QACV,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAAmB,CAAC;AAEzD,+GAA+G;AAC/G,MAAM,UAAU,gBAAgB,CAAC,MAAuB,EAAE,MAAkB;IAC1E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAuB,EAAE,IAA8G;IAClK,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;YACjE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACpF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;YACxG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;gBAChB,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;YAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAChC,IAAI,EAAE,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/http/mcp-endpoint.d.ts

@@ -0,0 +1,20 @@
+import type { FastifyInstance } from 'fastify';
+import type { FleetId } from '@aeolus-fleet/common';
+import type { AuthenticateAccessToken } from '../../core/oauth/authenticate-access-token.js';
+import type { CallTool } from '../../core/mcp-in/call-tool.js';
+import type { ListTools } from '../../core/mcp-in/list-tools.js';
+import type { ReadClientCall } from '../../core/mcp-in/read-client-call.js';
+import { type PersonToolsDeps } from './person-tools.js';
+export interface McpEndpointDeps {
+    /** The MCP endpoint's URL, as tokens are bound to it. */
+    resource: string;
+    authenticateAccessToken: AuthenticateAccessToken;
+    listTools: ListTools;
+    callTool: CallTool;
+    readClientCall: ReadClientCall;
+    /** Whether the fleet's outside parties are on (interop I-3). */
+    servesOutsideParties: (fleetId: FleetId) => Promise<boolean>;
+    /** A signed-in person's tools, where people sign in (decision 0054). */
+    person?: PersonToolsDeps;
+}
+export declare function registerMcpEndpoint(server: FastifyInstance, deps: McpEndpointDeps): void;