@aeolus-fleet/gateway 0.0.0-stage → 0.28.0

package/dist/adapters/http/mcp-endpoint.js

@@ -0,0 +1,164 @@
+/**
+ * The gateway's MCP endpoint for outside MCP clients (interop 3.3), over
+ * Streamable HTTP and stateless: each request is served by a fresh server for
+ * the client its access token names. No token, or one the gateway did not
+ * issue for this endpoint, gets 401 with where to sign in (RFC 9728). A
+ * client party gets 403 while its fleet's outside parties are off (interop I-3).
+ */
+import { CLIENT_CAPABILITIES_META_KEY, createMcpHandler, isCallToolResult, McpServer, ProtocolError, ProtocolErrorCode } from '@modelcontextprotocol/server';
+import { z } from 'zod';
+import { isToolResultType } from '../../core/mcp-out/content-types.js';
+import { createdTaskOf, DEADLINE_PASSED, taskOf, TASKS_EXTENSION } from './mcp-task.js';
+import { personServerFor } from './person-tools.js';
+import { runningVersion } from './version.js';
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_FORBIDDEN = 403;
+/** The gateway's own tool: the answer to a call that answered a handle. */
+const RESULT_TOOL = {
+    name: 'aeolus_result',
+    title: 'Read a call',
+    description: "A call's state and, once it is answered, its answer. Call it with the handle a tool answered, and again later while the call is not answered.",
+    inputSchema: { type: 'object', properties: { handle: { type: 'string' } }, required: ['handle'] },
+};
+const argumentsSchema = z.record(z.string(), z.unknown()).default({});
+const resultArgumentsSchema = z.object({ handle: z.string() });
+const taskParamsSchema = z.looseObject({ taskId: z.string() });
+/** The capabilities a client declares on each request (2026-07-28), as far as the gateway reads them. */
+const envelopeSchema = z.object({ [CLIENT_CAPABILITIES_META_KEY]: z.object({ extensions: z.record(z.string(), z.unknown()).optional() }).optional() });
+/** Whether the client declared the Tasks extension on this request: only then may it be answered a task. */
+const isTaskClient = (envelope) => envelopeSchema.safeParse(envelope).data?.[CLIENT_CAPABILITIES_META_KEY]?.extensions?.[TASKS_EXTENSION] !== undefined;
+/** tools/call's params, as the gateway reads them: its result may be a task, which the SDK's own tools/call does not type. */
+const callParamsSchema = z.looseObject({ name: z.string(), arguments: z.unknown().optional() });
+/** A tool's answer as one text block of JSON. */
+const answered = (value, isError = false) => ({ content: [{ type: 'text', text: JSON.stringify(value) }], ...(isError ? { isError } : {}) });
+/** A tool error the client's model reads: what went wrong, never a fleet's reasons. */
+const toolError = (message) => ({ content: [{ type: 'text', text: message }], isError: true });
+/** An answer that is an outside tool's result, as MCP out replies one, if it parses as one. */
+function toolResultOf(payload) {
+    try {
+        const parsed = JSON.parse(payload);
+        return isCallToolResult(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/** What aeolus_result answers: the call's answer once completed, as the tool's own result where it is one; else its state. */
+function resultOf(read) {
+    switch (read.state) {
+        case 'completed':
+            return (isToolResultType(read.answer.contentType) ? toolResultOf(read.answer.payload) : undefined) ?? { content: [{ type: 'text', text: read.answer.payload }] };
+        case 'failed':
+            return toolError(DEADLINE_PASSED);
+        case 'submitted':
+        case 'working':
+            return answered({ handle: read.handle, state: read.state });
+    }
+}
+/** The request as the SDK's web-standard handler takes it. Fastify has read the JSON body already. */
+function webRequestOf(request) {
+    const headers = new Headers();
+    for (const [name, value] of Object.entries(request.headers)) {
+        for (const each of Array.isArray(value) ? value : [value]) {
+            if (each !== undefined) {
+                headers.append(name, each);
+            }
+        }
+    }
+    return new Request(new URL(request.url, `${request.protocol}://${request.host}`), { method: request.method, headers });
+}
+/** A JSON Schema of an object, as MCP's tool takes one. */
+const objectSchema = z.object({ type: z.literal('object') }).catchall(z.json());
+/** The MCP server one request of one client is served by. Its tools are known per request, from the fleet, so it lists them itself. */
+function serverFor(holder, deps) {
+    const mcp = new McpServer({ name: 'aeolus-gateway', version: runningVersion() }, { capabilities: { tools: {}, extensions: { [TASKS_EXTENSION]: {} } } });
+    mcp.server.setRequestHandler('tools/list', async () => {
+        const listed = await deps.listTools({ fleetId: holder.fleetId, party: holder.party });
+        if (!listed.isOk) {
+            throw new Error(listed.error.message);
+        }
+        // Where each call goes stays with the gateway: the client sees aliases only.
+        return {
+            tools: listed.value.map(({ name, title, description, inputSchema }) => ({
+                name,
+                ...(title === undefined ? {} : { title }),
+                description,
+                inputSchema: objectSchema.parse(inputSchema),
+            })).concat(RESULT_TOOL),
+        };
+    });
+    mcp.server.setRequestHandler('tools/call', { params: callParamsSchema }, async (params, ctx) => {
+        const caller = { fleetId: holder.fleetId, party: holder.party };
+        if (params.name === RESULT_TOOL.name) {
+            const sent = resultArgumentsSchema.safeParse(params.arguments);
+            if (!sent.success) {
+                return toolError('aeolus_result takes the handle a tool answered');
+            }
+            const read = await deps.readClientCall(caller, sent.data.handle);
+            return read.isOk ? resultOf(read.value) : toolError(read.error.message);
+        }
+        const values = argumentsSchema.safeParse(params.arguments);
+        if (!values.success) {
+            return toolError('A tool takes its arguments as an object');
+        }
+        const called = await deps.callTool(caller, { name: params.name, arguments: values.data });
+        if (!called.isOk) {
+            return toolError(called.error.message);
+        }
+        const isUnanswered = called.value.state === 'submitted' || called.value.state === 'working';
+        return isUnanswered && isTaskClient(ctx.mcpReq.envelope) ? createdTaskOf(called.value) : resultOf(called.value);
+    });
+    /** The party's own call by its task id; another party's or none is an error. */
+    const readTask = async (taskId) => {
+        const read = await deps.readClientCall({ fleetId: holder.fleetId, party: holder.party }, taskId);
+        if (!read.isOk) {
+            throw new ProtocolError(ProtocolErrorCode.InvalidParams, `No task ${taskId} of this party`);
+        }
+        return read.value;
+    };
+    mcp.server.setRequestHandler('tasks/get', { params: taskParamsSchema }, async ({ taskId }) => taskOf(await readTask(taskId), resultOf));
+    // Acknowledged and nothing changes: a sent call cannot be unsent, and no call asks for input yet.
+    for (const method of ['tasks/cancel', 'tasks/update']) {
+        mcp.server.setRequestHandler(method, { params: taskParamsSchema }, async ({ taskId }) => {
+            await readTask(taskId);
+            return {};
+        });
+    }
+    return mcp;
+}
+export function registerMcpEndpoint(server, deps) {
+    const resourceMetadata = `${new URL(deps.resource).origin}/.well-known/oauth-protected-resource${new URL(deps.resource).pathname}`;
+    const unauthorized = (reply, error) => reply
+        .code(HTTP_UNAUTHORIZED)
+        .header('www-authenticate', `Bearer ${error === undefined ? '' : `error="${error}", `}resource_metadata="${resourceMetadata}"`)
+        .send({ error: error ?? 'unauthorized' });
+    server.all(new URL(deps.resource).pathname, async (request, reply) => {
+        const authorization = request.headers.authorization;
+        if (authorization?.startsWith('Bearer ') !== true) {
+            return unauthorized(reply, undefined);
+        }
+        const holder = await deps.authenticateAccessToken(authorization.slice('Bearer '.length));
+        if (!holder.isOk) {
+            return unauthorized(reply, 'invalid_token');
+        }
+        const held = holder.value;
+        const { person } = deps;
+        let serve;
+        if (held.kind === 'party') {
+            if (!(await deps.servesOutsideParties(held.fleetId))) {
+                return reply.code(HTTP_FORBIDDEN).send({ error: 'outside_parties_off', error_description: "This fleet's outside parties are off" });
+            }
+            serve = () => serverFor({ fleetId: held.fleetId, party: held.party }, deps);
+        }
+        else if (person === undefined) {
+            // An account's token is issued only where people sign in, so it finds their tools.
+            return unauthorized(reply, 'invalid_token');
+        }
+        else {
+            serve = () => personServerFor({ fleetId: held.fleetId, grantId: held.grantId }, person);
+        }
+        const handler = createMcpHandler(serve);
+        return handler.fetch(webRequestOf(request), { parsedBody: request.body });
+    });
+}
+//# sourceMappingURL=mcp-endpoint.js.map

package/dist/adapters/http/mcp-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-endpoint.js","sourceRoot":"","sources":["../../../src/adapters/http/mcp-endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,4BAA4B,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAE7J,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,eAAe,EAAwB,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAe3B,2EAA2E;AAC3E,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,+IAA+I;IAC5J,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE;CAC3G,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACtE,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/D,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/D,yGAAyG;AACzG,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEvJ,4GAA4G;AAC5G,MAAM,YAAY,GAAG,CAAC,QAAiB,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,UAAU,EAAE,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC;AAEjK,8HAA8H;AAC9H,MAAM,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEhG,iDAAiD;AACjD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,OAAO,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAE/J,uFAAuF;AACvF,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhH,+FAA+F;AAC/F,SAAS,YAAY,CAAC,OAAe;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8HAA8H;AAC9H,SAAS,QAAQ,CAAC,IAAc;IAC9B,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC5K,KAAK,QAAQ;YACX,OAAO,SAAS,CAAC,eAAe,CAAC,CAAC;QACpC,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,SAAS,YAAY,CAAC,OAAuB;IAC3C,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,QAAQ,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AACzH,CAAC;AAED,2DAA2D;AAC3D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAEhF,uIAAuI;AACvI,SAAS,SAAS,CAAC,MAA2C,EAAE,IAAqB;IACnF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzJ,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,6EAA6E;QAC7E,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBACtE,IAAI;gBACJ,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;gBACzC,WAAW;gBACX,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC;aAC7C,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE;QAC7F,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAChE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,OAAO,SAAS,CAAC,gDAAgD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC,yCAAyC,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;QAC5F,OAAO,YAAY,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;IACH,gFAAgF;IAChF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QACjG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,aAAa,EAAE,WAAW,MAAM,gBAAgB,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;IACF,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxI,kGAAkG;IAClG,KAAK,MAAM,MAAM,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACtF,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAuB,EAAE,IAAqB;IAChF,MAAM,gBAAgB,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,wCAAwC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnI,MAAM,YAAY,GAAG,CAAC,KAAmB,EAAE,KAAyB,EAAE,EAAE,CACtE,KAAK;SACF,IAAI,CAAC,iBAAiB,CAAC;SACvB,MAAM,CAAC,kBAAkB,EAAE,UAAU,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,KAAK,sBAAsB,gBAAgB,GAAG,CAAC;SAC9H,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI,cAAc,EAAE,CAAC,CAAC;IAE9C,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACnE,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;QACpD,IAAI,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAClD,OAAO,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACxB,IAAI,KAAsB,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACrD,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,sCAAsC,EAAE,CAAC,CAAC;YACtI,CAAC;YACD,KAAK,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9E,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,mFAAmF;YACnF,OAAO,YAAY,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/http/mcp-task.d.ts

@@ -0,0 +1,45 @@
+import type { ReadCall } from '../../core/mcp-in/read-client-call.js';
+export declare const TASKS_EXTENSION = "io.modelcontextprotocol/tasks";
+/** What a failed call's task says: the ship never answered, and it may have run. */
+export declare const DEADLINE_PASSED = "The call got no answer before its deadline. It may have run all the same.";
+/** The task tools/call answers in place of its result, for a call not answered within its wait. */
+export declare function createdTaskOf(read: ReadCall): {
+    status: "working";
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "task";
+};
+/** The task tasks/get answers: a completed call carries its answer as the tool's result, which resultOf gives. */
+export declare function taskOf(read: ReadCall, resultOf: (read: ReadCall) => Record<string, unknown>): {
+    status: "working";
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "complete";
+} | {
+    status: "completed";
+    result: Record<string, unknown>;
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "complete";
+} | {
+    status: "failed";
+    error: {
+        code: number;
+        message: string;
+    };
+    taskId: string;
+    createdAt: string;
+    lastUpdatedAt: string;
+    ttlMs: null;
+    pollIntervalMs: number;
+    resultType: "complete";
+};

package/dist/adapters/http/mcp-task.js

@@ -0,0 +1,35 @@
+/**
+ * An outside client's call as an MCP task (the Tasks extension,
+ * io.modelcontextprotocol/tasks, 2026-07-28). The task id is the call's
+ * handle, already an HMAC of its message id; the call store is the task's
+ * durable state, so the task exists once the call was kept (interop 3.3).
+ * Submitted and working are both MCP's working (interop 3.4).
+ */
+import { INTERNAL_ERROR } from '@modelcontextprotocol/server';
+export const TASKS_EXTENSION = 'io.modelcontextprotocol/tasks';
+/** How often a client reads a task: the fleet answers in seconds, not milliseconds. */
+const POLL_INTERVAL_MS = 2000;
+/** What a failed call's task says: the ship never answered, and it may have run. */
+export const DEADLINE_PASSED = 'The call got no answer before its deadline. It may have run all the same.';
+/** The fields every task carries. The gateway keeps every call, so no task expires. */
+function taskFieldsOf(read) {
+    return { taskId: read.handle, createdAt: read.createdAt.toISOString(), lastUpdatedAt: read.updatedAt.toISOString(), ttlMs: null, pollIntervalMs: POLL_INTERVAL_MS };
+}
+/** The task tools/call answers in place of its result, for a call not answered within its wait. */
+export function createdTaskOf(read) {
+    return { resultType: 'task', ...taskFieldsOf(read), status: 'working' };
+}
+/** The task tasks/get answers: a completed call carries its answer as the tool's result, which resultOf gives. */
+export function taskOf(read, resultOf) {
+    const task = { resultType: 'complete', ...taskFieldsOf(read) };
+    switch (read.state) {
+        case 'submitted':
+        case 'working':
+            return { ...task, status: 'working' };
+        case 'completed':
+            return { ...task, status: 'completed', result: resultOf(read) };
+        case 'failed':
+            return { ...task, status: 'failed', error: { code: INTERNAL_ERROR, message: DEADLINE_PASSED } };
+    }
+}
+//# sourceMappingURL=mcp-task.js.map

package/dist/adapters/http/mcp-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-task.js","sourceRoot":"","sources":["../../../src/adapters/http/mcp-task.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAI9D,MAAM,CAAC,MAAM,eAAe,GAAG,+BAA+B,CAAC;AAE/D,uFAAuF;AACvF,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAE9B,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,2EAA2E,CAAC;AAE3G,uFAAuF;AACvF,SAAS,YAAY,CAAC,IAAc;IAClC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AACtK,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,OAAO,EAAE,UAAU,EAAE,MAAe,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC;AAC5F,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,MAAM,CAAC,IAAc,EAAE,QAAqD;IAC1F,MAAM,IAAI,GAAG,EAAE,UAAU,EAAE,UAAmB,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;IACxE,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC;QACjD,KAAK,WAAW;YACd,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAoB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,KAAK,QAAQ;YACX,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE,CAAC;IAC7G,CAAC;AACH,CAAC"}

package/dist/adapters/http/oauth-routes.d.ts

@@ -0,0 +1,47 @@
+/**
+ * The gateway's OAuth 2.1 authorization server over HTTP, for outside MCP
+ * clients (MCP 2026-07-28 authorization): the metadata of RFC 9728 and RFC
+ * 8414; /authorize, where a person picks what the client acts as (Q1 a) and
+ * is sent to pagasae to sign in; /pagasae/callback, where pagasae sends them
+ * back; the waiting page, where a client asked for waits for an approver
+ * (decision 0056); and /token. /sign-in and /sign-out sign a person in to
+ * the gateway's own pages through pagasae too, the browser holding a page
+ * session. Each route parses the request and calls one use case. Only a
+ * signed-in account asks for a client, so a gateway where no pagasae is set
+ * answers no client (Thomas's question A), and signs no one in to its pages.
+ */
+import type { FastifyInstance } from 'fastify';
+import type { ExchangeToken } from '../../core/oauth/exchange-token.js';
+import type { ReadAuthorization } from '../../core/oauth/read-authorization.js';
+import type { ReadWaiting } from '../../core/requests/read-waiting.js';
+import type { WatchWaiting } from '../../core/requests/watch-waiting.js';
+import type { Clock } from '../../core/shared/clock.js';
+import type { CompleteSignIn } from '../../core/sign-in/complete-sign-in.js';
+import type { PageSessions } from '../../core/sign-in/ports.js';
+import type { SignOut } from '../../core/sign-in/sign-out.js';
+import { type StartPageSignIn } from '../../core/sign-in/start-page-sign-in.js';
+import { type StartSignIn } from '../../core/sign-in/start-sign-in.js';
+import { type ChangeHub } from './live.js';
+export interface OAuthRoutesDeps {
+    issuer: string;
+    resource: string;
+    readAuthorization: ReadAuthorization;
+    exchangeToken: ExchangeToken;
+    /** Signing people in through pagasae (decision 0054) and their clients' waits, followed live; unset where no pagasae is set. */
+    signIn?: {
+        start: StartSignIn;
+        complete: CompleteSignIn;
+        readWaiting: ReadWaiting;
+        watchWaiting: WatchWaiting;
+        hub: ChangeHub;
+        clock: Clock;
+        pages: PageSignInDeps;
+    };
+}
+/** Signing a person in to the gateway's own pages, and out again. */
+export interface PageSignInDeps {
+    start: StartPageSignIn;
+    signOut: SignOut;
+    sessions: PageSessions;
+}
+export declare function registerOAuthRoutes(server: FastifyInstance, deps: OAuthRoutesDeps): void;