@aeolus-fleet/gateway 0.0.0-stage → 0.28.0

package/dist/adapters/trpc/router.js

@@ -0,0 +1,519 @@
+/**
+ * The gateway's API: one tRPC router, which the console's server and the
+ * gateway's page call with the console's session cookie, as the other
+ * plugins' (decision 0043), and any ship with its own crew token (decision
+ * 0057). Every procedure but the installation's is an actor's: argo or a
+ * viewer by a console session of a fleet at the fleet's URL, or a ship of a
+ * fleet the gateway is connected to, and the procedure works on that fleet.
+ * What it may call is the scopes the fleet holds for it. A fleet the gateway
+ * does not serve (switched off) gets only `connection.status`. The
+ * installation procedures take the installation token instead (decision 0021).
+ */
+import { timingSafeEqual } from 'node:crypto';
+import { idempotencyKeySchema, idSchema, shipHandleSchema } from '@aeolus-fleet/common';
+import { initTRPC, TRPCError } from '@trpc/server';
+import { z } from 'zod';
+/** What a caller reads of a failure: nothing of it, so no crew token, secret or query ever leaves; the log holds it whole. */
+export const INTERNAL_ERROR_MESSAGE = 'Internal error';
+const t = initTRPC.context().create({
+    isDev: false,
+    errorFormatter: ({ shape, error }) => (error.code === 'INTERNAL_SERVER_ERROR' ? { ...shape, message: INTERNAL_ERROR_MESSAGE } : shape),
+});
+const actorProcedure = t.procedure.use(async ({ ctx, next }) => {
+    const actor = await ctx.authenticateActor({ cookie: ctx.cookie, crewToken: ctx.crewToken });
+    if (!actor.isOk) {
+        throw new TRPCError({ code: 'UNAUTHORIZED', message: actor.error.message });
+    }
+    return next({ ctx: { actor: actor.value, fleetId: actor.value.fleetId, scopes: actor.value.scopes } });
+});
+/**
+ * What changes the fleet needs the actor to hold fleet:manage: argo does, a
+ * viewer session (fleet:read only, decision 0022) does not, so it is served
+ * reads only; a ship as its scopes say. Checked before the input is read.
+ */
+function managing(procedure) {
+    return procedure.use(({ ctx, next }) => {
+        if (!ctx.scopes.includes('fleet:manage')) {
+            throw new TRPCError({ code: 'FORBIDDEN', message: 'Needs fleet:manage' });
+        }
+        return next();
+    });
+}
+/** Whether the token sent is the installation token, compared in constant time. */
+function isInstallationToken(sent, token) {
+    const expected = Buffer.from(token);
+    const given = Buffer.from(sent ?? '');
+    return given.length === expected.length && timingSafeEqual(given, expected);
+}
+/**
+ * The installation's procedures (decision 0021): with no installation token
+ * configured they do not exist (NOT_FOUND); with one, the caller presents it
+ * in `x-aeolus-installation-token` or is refused (UNAUTHORIZED).
+ */
+const installationProcedure = t.procedure.use(async ({ ctx, next }) => {
+    if (ctx.installation.mode === 'open' || ctx.installation.token === undefined) {
+        throw new TRPCError({ code: 'NOT_FOUND', message: 'No such procedure' });
+    }
+    if (!isInstallationToken(ctx.installationTokenSent, ctx.installation.token)) {
+        throw new TRPCError({ code: 'UNAUTHORIZED', message: 'The installation token is missing or wrong' });
+    }
+    return next();
+});
+/** Refuses a fleet the gateway does not serve: while it is off, FORBIDDEN. */
+async function refuseUnlessServed(ctx) {
+    if (!(await ctx.isServed(ctx.fleetId))) {
+        throw new TRPCError({ code: 'FORBIDDEN', message: 'The gateway is off for this fleet' });
+    }
+}
+/** The operator's procedures that need the gateway to serve their fleet. */
+const servedProcedure = actorProcedure.use(async ({ ctx, next }) => {
+    await refuseUnlessServed(ctx);
+    return next();
+});
+/** The refusals of connecting, as the API states them. */
+const CONNECT_CODES = {
+    ALREADY_CONNECTED: 'CONFLICT',
+    SECRET_REFUSED: 'BAD_REQUEST',
+    OTHER_FLEET: 'BAD_REQUEST',
+    MISSING_SCOPES: 'BAD_REQUEST',
+    SCOPE_REFUSED: 'CONFLICT',
+    FLEET_UNAVAILABLE: 'BAD_GATEWAY',
+};
+/** The refusals of switching a fleet, as the API states them: a fleet that does not answer is tried again with the same request id. */
+const SET_ENABLED_CODES = {
+    REQUEST_ID_USED: 'CONFLICT',
+};
+/** The refusals of approving a party, as the API states them: a fleet that does not answer is tried again with the same request id. */
+const APPROVE_CODES = {
+    OUTSIDE_PARTIES_OFF: 'PRECONDITION_FAILED',
+    NOT_CONNECTED: 'PRECONDITION_FAILED',
+    PARTY_EXISTS: 'CONFLICT',
+    COMMISSION_REFUSED: 'BAD_REQUEST',
+    FLEET_UNAVAILABLE: 'BAD_GATEWAY',
+};
+/** The refusals of crewing a party's proxy ship with a new secret, as the API states them. */
+/** The refusals of retiring a party, as the API states them. */
+/** The refusals of changing a party's owner or scopes, as the API states them. */
+const CHANGE_CODES = {
+    SCOPE_NOT_HELD: 'FORBIDDEN',
+    NO_SUCH_PARTY: 'NOT_FOUND',
+    PARTY_NOT_COMMISSIONED: 'PRECONDITION_FAILED',
+    CHANGE_REFUSED: 'FORBIDDEN',
+    FLEET_UNAVAILABLE: 'BAD_GATEWAY',
+    NOT_AN_ACTOR: 'UNAUTHORIZED',
+};
+const RETIRE_CODES = {
+    NOT_A_MANAGER: 'FORBIDDEN',
+    NO_SUCH_PARTY: 'NOT_FOUND',
+    RETIRE_REFUSED: 'FORBIDDEN',
+    FLEET_UNAVAILABLE: 'BAD_GATEWAY',
+    NOT_AN_ACTOR: 'UNAUTHORIZED',
+};
+const CREW_CODES = {
+    NO_SUCH_PARTY: 'NOT_FOUND',
+    NOT_AWAITING_CREW: 'CONFLICT',
+    SECRET_REFUSED: 'BAD_REQUEST',
+};
+/** The refusals of reading an outside MCP server's tools, as the API states them. */
+const TOOLS_CODES = {
+    NO_SUCH_PARTY: 'NOT_FOUND',
+    SERVER_UNREACHABLE: 'BAD_GATEWAY',
+};
+/** The refusals of checking an outside MCP server, as the API states them. */
+const CHECK_CODES = {
+    OUTSIDE_PARTIES_OFF: 'PRECONDITION_FAILED',
+    SERVER_UNREACHABLE: 'BAD_GATEWAY',
+};
+/** The refusals of stating a party's proxy ship, as the API states them. */
+const STATE_CODES = {
+    NO_SUCH_PARTY: 'NOT_FOUND',
+    NOT_CREWED: 'CONFLICT',
+    SERVER_UNREACHABLE: 'BAD_GATEWAY',
+    STATEMENT_REFUSED: 'BAD_REQUEST',
+};
+/** The longest name argo gives an MCP client. */
+const CLIENT_NAME_MAX_LENGTH = 200;
+/** The longest tool name MCP allows (2026-07-28), as a capability's name is capped too. */
+const TOOL_NAME_MAX_LENGTH = 128;
+/** What stating a party answers: the names of the capabilities its proxy ship now offers. */
+const statedOutputSchema = z.object({ capabilities: z.array(z.string()) });
+/** The fewest and most calls the gateway has in flight to one party at once, and the default. */
+const CONCURRENCY_LIMIT_MIN = 1;
+// The most core 0.27's pushReceive hands at once, own deliveries in flight first (orchestrator-1 on aeolus-fleet#876, Q8).
+const CONCURRENCY_LIMIT_MAX = 10;
+const CONCURRENCY_LIMIT_DEFAULT = 4;
+/** The credential argo gives the vault for a party: a static bearer, or OAuth client credentials. */
+const credentialInputSchema = z.discriminatedUnion('kind', [
+    z.strictObject({ kind: z.literal('bearer'), token: z.string().min(1) }),
+    z.strictObject({
+        kind: z.literal('clientCredentials'),
+        clientId: z.string().min(1),
+        clientSecret: z.string().min(1),
+        issuer: z.url({ protocol: /^https?$/ }),
+        scope: z.string().min(1).optional(),
+    }),
+]);
+/** A party as any actor reads it: never its credential or its crew token. */
+const shownPartyBase = { name: z.string(), state: z.enum(['commissioning', 'awaitingCrew', 'crewed']), proxyShipId: z.string().nullable() };
+const shownPartySchema = z.discriminatedUnion('kind', [
+    z.object({ ...shownPartyBase, kind: z.literal('mcpServer'), url: z.string(), credentialKind: z.enum(['bearer', 'clientCredentials']), concurrencyLimit: z.int() }),
+    z.object({ ...shownPartyBase, kind: z.literal('mcpClient'), clientId: z.string() }),
+]);
+/** A party with its proxy ship's owner and scopes, read from the fleet (decision 0056): null while unknown. */
+const fromFleet = { ownerShipId: z.string().nullable(), scopes: z.array(z.string()).nullable() };
+const listedPartySchema = z.discriminatedUnion('kind', [
+    z.object({ ...shownPartyBase, ...fromFleet, kind: z.literal('mcpServer'), url: z.string(), credentialKind: z.enum(['bearer', 'clientCredentials']), concurrencyLimit: z.int() }),
+    z.object({ ...shownPartyBase, ...fromFleet, kind: z.literal('mcpClient'), clientId: z.string() }),
+]);
+/** The connection as the console reads it: whether the gateway serves the fleet, and its connection. */
+const connectionStatusOutputSchema = z.object({
+    enabled: z.boolean(),
+    state: z.enum(['not-connected', 'connected']),
+    ship: z.object({ shipId: z.string(), name: z.string() }).nullable(),
+    lastShipId: z.string().nullable(),
+});
+/** The refusals of deciding a request, as the API states them. */
+const DECIDE_CODES = {
+    NOT_AN_APPROVER: 'FORBIDDEN',
+    SCOPE_NOT_HELD: 'FORBIDDEN',
+    NO_SUCH_REQUEST: 'NOT_FOUND',
+    ALREADY_DECIDED: 'CONFLICT',
+    EXPIRED: 'CONFLICT',
+    CLIENT_HAS_PARTY: 'CONFLICT',
+    PARTY_EXISTS: 'CONFLICT',
+    SERVER_DETAILS_MISSING: 'BAD_REQUEST',
+    COMMISSION_REFUSED: 'BAD_REQUEST',
+    OUTSIDE_PARTIES_OFF: 'PRECONDITION_FAILED',
+    NOT_CONNECTED: 'PRECONDITION_FAILED',
+    FLEET_UNAVAILABLE: 'BAD_GATEWAY',
+};
+/** The refusals of switching outside parties, as the API states them: an open network's warning is confirmed by calling again. */
+const OUTSIDE_PARTIES_CODES = {
+    NOT_A_NETWORKER: 'FORBIDDEN',
+    OPEN_NETWORK: 'PRECONDITION_FAILED',
+    FLEET_UNAVAILABLE: 'BAD_GATEWAY',
+    NOT_AN_ACTOR: 'UNAUTHORIZED',
+};
+/** A pending request as the API answers it: its times as ISO text. */
+const pendingRequestSchema = z.object({
+    fleetId: z.string(),
+    requestId: z.string(),
+    subject: z.discriminatedUnion('kind', [z.object({ kind: z.literal('client'), clientId: z.string(), clientName: z.string() }), z.object({ kind: z.literal('server'), url: z.string() })]),
+    requesters: z.array(z.object({ accountId: z.string(), personShipId: z.string().nullable() })),
+    askedAt: z.string(),
+    expiresAt: z.string(),
+    state: z.enum(['pending', 'approving', 'approved', 'denied', 'expired']),
+    decidedBy: z.union([z.object({ kind: z.literal('ship'), shipId: z.string() }), z.object({ kind: z.literal('account'), accountId: z.string() }), z.object({ kind: z.enum(['operator', 'viewer']) })]).nullable(),
+    decidedAt: z.string().nullable(),
+});
+function shownRequestOf(request) {
+    return { ...request, requesters: [...request.requesters], askedAt: request.askedAt.toISOString(), expiresAt: request.expiresAt.toISOString(), decidedAt: request.decidedAt?.toISOString() ?? null };
+}
+/** A decision as the API takes it: deny, or approve naming the proxy ship, its owner and its scopes, and for a server its credential. */
+const decisionSchema = z.discriminatedUnion('kind', [
+    z.strictObject({ kind: z.literal('deny') }),
+    z.strictObject({
+        kind: z.literal('approve'),
+        party: z.strictObject({ name: shipHandleSchema, ownerShipId: idSchema('ship'), scopes: z.array(z.string()) }),
+        server: z.strictObject({ credential: credentialInputSchema, concurrencyLimit: z.int().min(CONCURRENCY_LIMIT_MIN).max(CONCURRENCY_LIMIT_MAX) }).optional(),
+    }),
+]);
+/** The largest payload a message carries. */
+const PAYLOAD_MAX_BYTES = 64 * 1024;
+/** The refusals of a person's own deliveries, as the API states them. */
+const PERSON_CODES = {
+    NOT_A_PERSON: 'FORBIDDEN',
+    SIGNED_OUT: 'UNAUTHORIZED',
+    FLEET_UNAVAILABLE: 'BAD_GATEWAY',
+    NO_SUCH_DELIVERY: 'NOT_FOUND',
+    SEND_REFUSED: 'BAD_REQUEST',
+};
+function personAnswerOf(answered) {
+    if (!answered.isOk) {
+        throw new TRPCError({ code: PERSON_CODES[answered.error.kind], message: answered.error.message });
+    }
+    return answered.value;
+}
+/** A person signed in to the pages, acting on their own person ship: only an account has one. */
+const personProcedure = actorProcedure.use(({ ctx, next }) => {
+    if (ctx.actor.kind !== 'account' || ctx.person === undefined) {
+        throw new TRPCError({ code: 'FORBIDDEN', message: "Only a person signed in to the gateway's pages has a person ship's deliveries here" });
+    }
+    return next({ ctx: { person: ctx.person, caller: { fleetId: ctx.actor.fleetId, grantId: ctx.actor.grantId } } });
+});
+export const gatewayRouter = t.router({
+    connection: t.router({
+        /** Whether the gateway is connected to the operator's fleet, as which ship, and the ship it was last connected as. */
+        status: actorProcedure.output(connectionStatusOutputSchema).query(async ({ ctx }) => {
+            // A fleet that is off is read from what the gateway holds: it asks its fleet nothing then.
+            const isServed = await ctx.isServed(ctx.fleetId);
+            const connection = isServed ? await ctx.readConnection(ctx.fleetId) : await ctx.heldConnection(ctx.fleetId);
+            return { enabled: isServed, ...connection };
+        }),
+        /**
+         * Connects the gateway with its ship's secret, which the console's server
+         * hands over server to server: it registers with it and keeps only the
+         * crew token. Only while not connected, and while the gateway serves the
+         * fleet.
+         */
+        connect: managing(servedProcedure)
+            .input(z.object({ shipId: idSchema('ship'), secret: z.string().min(1) }))
+            .output(connectionStatusOutputSchema)
+            .mutation(async ({ ctx, input }) => {
+            const connected = await ctx.connect({ operatorFleetId: ctx.fleetId, ...input });
+            if (!connected.isOk) {
+                throw new TRPCError({ code: CONNECT_CODES[connected.error.kind], message: connected.error.message });
+            }
+            // Answered as connection.status answers: connect works only while the gateway serves the fleet.
+            return { enabled: true, ...connected.value };
+        }),
+    }),
+    parties: t.router({
+        /** The fleet's outside parties, by name, each with its proxy ship's owner and scopes from the fleet, read as the actor. Any actor reads them. */
+        list: servedProcedure.output(z.array(listedPartySchema)).query(({ ctx }) => ctx.listParties({ actor: ctx.actor, as: { cookie: ctx.cookie, crewToken: ctx.crewToken } })),
+        /** One outside party, as the list shows it. */
+        get: servedProcedure
+            .input(z.strictObject({ name: shipHandleSchema }))
+            .output(listedPartySchema)
+            .query(async ({ ctx, input }) => {
+            const read = await ctx.readParty({ actor: ctx.actor, as: { cookie: ctx.cookie, crewToken: ctx.crewToken }, ...input });
+            if (!read.isOk) {
+                throw new TRPCError({ code: 'NOT_FOUND', message: read.error.message });
+            }
+            return read.value;
+        }),
+        /** An outside MCP server's tools, as the server lists them now, asked with the credential the gateway keeps. Any actor reads them. */
+        tools: servedProcedure
+            .input(z.strictObject({ name: shipHandleSchema }))
+            .output(z.object({ tools: z.array(z.object({ name: z.string(), description: z.string().optional() })) }))
+            .query(async ({ ctx, input }) => {
+            const read = await ctx.readPartyTools({ fleetId: ctx.fleetId, ...input });
+            if (!read.isOk) {
+                throw new TRPCError({ code: TOOLS_CODES[read.error.kind], message: read.error.message });
+            }
+            return read.value;
+        }),
+        /**
+         * An actor holding fleet:manage checks an outside MCP server before
+         * approving it (F10): the tools it lists with the credential sent. The
+         * gateway keeps nothing and commissions nothing. A mutation, so the
+         * credential travels in the body, never in a URL.
+         */
+        check: managing(servedProcedure)
+            .input(z.strictObject({ url: z.url({ protocol: /^https?$/ }), credential: credentialInputSchema }))
+            .output(z.object({ tools: z.array(z.object({ name: z.string(), description: z.string().optional() })) }))
+            .mutation(async ({ ctx, input }) => {
+            const checked = await ctx.checkServer({ fleetId: ctx.fleetId, ...input });
+            if (!checked.isOk) {
+                throw new TRPCError({ code: CHECK_CODES[checked.error.kind], message: checked.error.message });
+            }
+            return checked.value;
+        }),
+        /**
+         * argo approves an outside MCP server as a party: the gateway commissions
+         * its app proxy ship owned by the owner argo picked, crews it, and keeps
+         * the credential in its vault (interop I-5). A repeat with the same
+         * request id picks up where the last one stopped.
+         */
+        approve: managing(servedProcedure)
+            .input(z.strictObject({
+            requestId: idempotencyKeySchema,
+            name: shipHandleSchema,
+            url: z.url({ protocol: /^https?$/ }),
+            credential: credentialInputSchema,
+            ownerShipId: idSchema('ship'),
+            concurrencyLimit: z.int().min(CONCURRENCY_LIMIT_MIN).max(CONCURRENCY_LIMIT_MAX).default(CONCURRENCY_LIMIT_DEFAULT),
+        }))
+            .output(shownPartySchema)
+            .mutation(async ({ ctx, input }) => {
+            const approved = await ctx.approveParty({ operatorFleetId: ctx.fleetId, ...input, scopes: [] });
+            if (!approved.isOk) {
+                throw new TRPCError({ code: APPROVE_CODES[approved.error.kind], message: approved.error.message });
+            }
+            return approved.value;
+        }),
+        /**
+         * An actor holding fleet:manage retires a party (decision 0056): its proxy
+         * ship is retired in the fleet as the actor, within its manage reach, and
+         * the gateway forgets the party. Adding it again is a new request.
+         */
+        /** An actor holding fleet:owner sets a party's owner: its proxy ship's, in the fleet, as the actor (decision 0056). */
+        changeOwner: servedProcedure
+            .input(z.strictObject({ name: shipHandleSchema, ownerShipId: idSchema('ship') }))
+            .output(z.object({}))
+            .mutation(async ({ ctx, input }) => {
+            const changed = await ctx.changePartyOwner({ actor: ctx.actor, as: { cookie: ctx.cookie, crewToken: ctx.crewToken }, ...input });
+            if (!changed.isOk) {
+                throw new TRPCError({ code: CHANGE_CODES[changed.error.kind], message: changed.error.message });
+            }
+            return {};
+        }),
+        /** An actor holding scopes:grant grants and revokes a party's scopes, only scopes it holds: every scope its proxy ship holds now (decision 0056). */
+        changeScopes: servedProcedure
+            .input(z.strictObject({ name: shipHandleSchema, grant: z.array(z.string()), revoke: z.array(z.string()) }))
+            .output(z.object({ scopes: z.array(z.string()) }))
+            .mutation(async ({ ctx, input }) => {
+            const changed = await ctx.changePartyScopes({ actor: ctx.actor, as: { cookie: ctx.cookie, crewToken: ctx.crewToken }, ...input });
+            if (!changed.isOk) {
+                throw new TRPCError({ code: CHANGE_CODES[changed.error.kind], message: changed.error.message });
+            }
+            return changed.value;
+        }),
+        retire: servedProcedure
+            .input(z.strictObject({ name: shipHandleSchema }))
+            .output(z.object({}))
+            .mutation(async ({ ctx, input }) => {
+            const retired = await ctx.retireParty({ actor: ctx.actor, as: { cookie: ctx.cookie, crewToken: ctx.crewToken }, ...input });
+            if (!retired.isOk) {
+                throw new TRPCError({ code: RETIRE_CODES[retired.error.kind], message: retired.error.message });
+            }
+            return {};
+        }),
+        /** argo hands over a new secret, from a new starting prompt in the console, for a proxy ship that awaits crew. */
+        crew: managing(servedProcedure)
+            .input(z.strictObject({ name: shipHandleSchema, secret: z.string().min(1) }))
+            .output(shownPartySchema)
+            .mutation(async ({ ctx, input }) => {
+            const crewed = await ctx.crewParty({ operatorFleetId: ctx.fleetId, ...input });
+            if (!crewed.isOk) {
+                throw new TRPCError({ code: CREW_CODES[crewed.error.kind], message: crewed.error.message });
+            }
+            return crewed.value;
+        }),
+        /** The gateway states the party's proxy ship anew, from what its server lists now, with argo's marks. */
+        state: managing(servedProcedure)
+            .input(z.strictObject({ name: shipHandleSchema }))
+            .output(statedOutputSchema)
+            .mutation(async ({ ctx, input }) => {
+            const stated = await ctx.stateParty({ fleetId: ctx.fleetId, ...input });
+            if (!stated.isOk) {
+                throw new TRPCError({ code: STATE_CODES[stated.error.kind], message: stated.error.message });
+            }
+            return stated.value;
+        }),
+        /** argo marks a party's tool repeatable, or takes the mark off (interop 5.2): kept, then stated at once. */
+        markTool: managing(servedProcedure)
+            .input(z.strictObject({ name: shipHandleSchema, tool: z.string().min(1).max(TOOL_NAME_MAX_LENGTH), isRepeatable: z.boolean() }))
+            .output(statedOutputSchema)
+            .mutation(async ({ ctx, input }) => {
+            const stated = await ctx.markTool({ fleetId: ctx.fleetId, ...input });
+            if (!stated.isOk) {
+                throw new TRPCError({ code: STATE_CODES[stated.error.kind], message: stated.error.message });
+            }
+            return stated.value;
+        }),
+    }),
+    people: t.router({
+        /** What waits for the person's own ship, by titles only (Q20). */
+        inbox: personProcedure.query(async ({ ctx }) => personAnswerOf(await ctx.person.readInbox(ctx.caller))),
+        /** Opens one delivery, whole; the gateway acknowledges it for them. */
+        open: personProcedure.input(z.strictObject({ deliveryId: z.string().min(1) })).mutation(async ({ ctx, input }) => personAnswerOf(await ctx.person.openDelivery({ caller: ctx.caller, ...input }))),
+        /** Answers a delivery they opened, to its sender. */
+        answer: personProcedure
+            .input(z.strictObject({ deliveryId: z.string().min(1), contentType: z.string().min(1), payload: z.string().max(PAYLOAD_MAX_BYTES) }))
+            .mutation(async ({ ctx, input }) => personAnswerOf(await ctx.person.answerDelivery({ caller: ctx.caller, ...input }))),
+        /** Is done with a delivery they opened, with no answer. */
+        done: personProcedure.input(z.strictObject({ deliveryId: z.string().min(1) })).mutation(async ({ ctx, input }) => personAnswerOf(await ctx.person.doneDelivery({ caller: ctx.caller, ...input }))),
+    }),
+    requests: t.router({
+        /** The requests the account asked, in any state, the newest first (decision 0056: Your requests). */
+        mine: actorProcedure.output(z.array(pendingRequestSchema)).query(async ({ ctx }) => {
+            const listed = await ctx.listMine(ctx.actor);
+            if (!listed.isOk) {
+                throw new TRPCError({ code: 'FORBIDDEN', message: listed.error.message });
+            }
+            return listed.value.map(shownRequestOf);
+        }),
+        /** Every open request of the fleet, for an actor holding gateway:approve (decision 0056). */
+        toDecide: servedProcedure.output(z.array(pendingRequestSchema)).query(async ({ ctx }) => {
+            const listed = await ctx.listToDecide(ctx.actor);
+            if (!listed.isOk) {
+                throw new TRPCError({ code: 'FORBIDDEN', message: listed.error.message });
+            }
+            return listed.value.map(shownRequestOf);
+        }),
+        /** Decides a pending request as the actor: the first decision counts. */
+        decide: servedProcedure
+            .input(z.strictObject({ requestId: z.string().min(1), decision: decisionSchema }))
+            .output(z.object({ state: z.enum(['approved', 'denied']), party: shownPartySchema.nullable() }))
+            .mutation(async ({ ctx, input }) => {
+            const decided = await ctx.decideRequest({ actor: ctx.actor, ...input });
+            if (!decided.isOk) {
+                throw new TRPCError({ code: DECIDE_CODES[decided.error.kind], message: decided.error.message });
+            }
+            return decided.value;
+        }),
+    }),
+    outsideParties: t.router({
+        /** Whether the fleet's outside parties are on (interop I-3). */
+        status: servedProcedure.output(z.object({ isOn: z.boolean() })).query(({ ctx }) => ctx.readOutsideParties(ctx.actor)),
+        /** Turns them on or off as an actor holding fleet:network; on in an open network needs its warning confirmed. */
+        set: servedProcedure
+            .input(z.strictObject({ isOn: z.boolean(), isOpenNetworkConfirmed: z.boolean() }))
+            .output(z.object({ isOn: z.boolean() }))
+            .mutation(async ({ ctx, input }) => {
+            const set = await ctx.setOutsideParties({ actor: ctx.actor, as: { cookie: ctx.cookie, crewToken: ctx.crewToken }, ...input });
+            if (!set.isOk) {
+                throw new TRPCError({ code: OUTSIDE_PARTIES_CODES[set.error.kind], message: set.error.message });
+            }
+            return set.value;
+        }),
+    }),
+    oauth: t.router({
+        /**
+         * argo pre-registers an MCP client for its fleet: its name and redirect
+         * URIs, and whether it keeps a secret. The secret is answered this once.
+         */
+        registerClient: managing(actorProcedure)
+            .input(z.strictObject({ name: z.string().min(1).max(CLIENT_NAME_MAX_LENGTH), redirectUris: z.array(z.string()), isConfidential: z.boolean() }))
+            .output(z.object({ clientId: z.string(), clientSecret: z.string().nullable() }))
+            .mutation(async ({ ctx, input }) => {
+            const registered = await ctx.registerClient({ fleetId: ctx.fleetId, ...input });
+            if (!registered.isOk) {
+                throw new TRPCError({ code: 'BAD_REQUEST', message: registered.error.message });
+            }
+            return registered.value;
+        }),
+    }),
+    installation: t.router({
+        /** Switches the gateway on or off for a fleet; off keeps everything of it. A replayed request id answers its first answer. */
+        setEnabled: installationProcedure
+            .input(z.strictObject({ requestId: idempotencyKeySchema, fleetId: idSchema('fleet'), enabled: z.boolean() }))
+            .output(z.object({ fleetId: z.string(), enabled: z.boolean() }))
+            .mutation(async ({ ctx, input }) => {
+            const set = await ctx.setFleetEnabled({ requestId: input.requestId, fleetId: input.fleetId, isEnabled: input.enabled });
+            if (!set.isOk) {
+                throw new TRPCError({ code: SET_ENABLED_CODES[set.error.kind], message: set.error.message });
+            }
+            return { fleetId: set.value.fleetId, enabled: set.value.isEnabled };
+        }),
+        /** Whether the gateway serves the fleet, and whether it is connected to it. */
+        get: installationProcedure
+            .input(z.strictObject({ fleetId: idSchema('fleet') }))
+            .output(z.object({ enabled: z.boolean(), connected: z.boolean() }))
+            .query(async ({ ctx, input }) => {
+            const fleet = await ctx.readFleet({ fleetId: input.fleetId });
+            return { enabled: fleet.isEnabled, connected: fleet.isConnected };
+        }),
+        /** Forgets everything the gateway holds of the fleet, telling the fleet nothing. A replayed request id answers its first answer. */
+        delete: installationProcedure
+            .input(z.strictObject({ requestId: idempotencyKeySchema, fleetId: idSchema('fleet') }))
+            .output(z.strictObject({}))
+            .mutation(async ({ ctx, input }) => {
+            const deleted = await ctx.deleteFleet(input);
+            if (!deleted.isOk) {
+                throw new TRPCError({ code: 'CONFLICT', message: deleted.error.message });
+            }
+            return {};
+        }),
+        /** pagasae disabled the account (decision 0055): every sign-in of it in the fleet ends, and its clients' tokens are revoked. Told again, it ends nothing more. */
+        accountDisabled: installationProcedure
+            .input(z.strictObject({ fleetId: idSchema('fleet'), accountId: z.string().min(1) }))
+            .output(z.strictObject({}))
+            .mutation(async ({ ctx, input }) => {
+            await ctx.endSignIns(input);
+            return {};
+        }),
+    }),
+});
+//# sourceMappingURL=router.js.map

package/dist/adapters/trpc/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../../src/adapters/trpc/router.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,gBAAgB,EAAgB,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuExB,8HAA8H;AAC9H,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAEvD,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAW,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,KAAK;IACZ,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;CACvI,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;IAC7D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAS,QAAQ,CAAC,SAAgC;IAChD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,SAAS,mBAAmB,CAAC,IAAwB,EAAE,KAAa;IAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;IACpE,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7E,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,KAAK,UAAU,kBAAkB,CAAC,GAA6C;IAC7E,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;IACjE,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,aAAa,GAAG;IACpB,iBAAiB,EAAE,UAAU;IAC7B,cAAc,EAAE,aAAa;IAC7B,WAAW,EAAE,aAAa;IAC1B,cAAc,EAAE,aAAa;IAC7B,aAAa,EAAE,UAAU;IACzB,iBAAiB,EAAE,aAAa;CACoB,CAAC;AAEvD,uIAAuI;AACvI,MAAM,iBAAiB,GAAG;IACxB,eAAe,EAAE,UAAU;CACyB,CAAC;AAEvD,uIAAuI;AACvI,MAAM,aAAa,GAAG;IACpB,mBAAmB,EAAE,qBAAqB;IAC1C,aAAa,EAAE,qBAAqB;IACpC,YAAY,EAAE,UAAU;IACxB,kBAAkB,EAAE,aAAa;IACjC,iBAAiB,EAAE,aAAa;CACoB,CAAC;AAEvD,8FAA8F;AAC9F,gEAAgE;AAChE,kFAAkF;AAClF,MAAM,YAAY,GAAG;IACnB,cAAc,EAAE,WAAW;IAC3B,aAAa,EAAE,WAAW;IAC1B,sBAAsB,EAAE,qBAAqB;IAC7C,cAAc,EAAE,WAAW;IAC3B,iBAAiB,EAAE,aAAa;IAChC,YAAY,EAAE,cAAc;CAC4C,CAAC;AAE3E,MAAM,YAAY,GAAG;IACnB,aAAa,EAAE,WAAW;IAC1B,aAAa,EAAE,WAAW;IAC1B,cAAc,EAAE,WAAW;IAC3B,iBAAiB,EAAE,aAAa;IAChC,YAAY,EAAE,cAAc;CAC4C,CAAC;AAE3E,MAAM,UAAU,GAAG;IACjB,aAAa,EAAE,WAAW;IAC1B,iBAAiB,EAAE,UAAU;IAC7B,cAAc,EAAE,aAAa;CACuB,CAAC;AAEvD,qFAAqF;AACrF,MAAM,WAAW,GAAG;IAClB,aAAa,EAAE,WAAW;IAC1B,kBAAkB,EAAE,aAAa;CACmD,CAAC;AAEvF,8EAA8E;AAC9E,MAAM,WAAW,GAAG;IAClB,mBAAmB,EAAE,qBAAqB;IAC1C,kBAAkB,EAAE,aAAa;CACyD,CAAC;AAE7F,4EAA4E;AAC5E,MAAM,WAAW,GAAG;IAClB,aAAa,EAAE,WAAW;IAC1B,UAAU,EAAE,UAAU;IACtB,kBAAkB,EAAE,aAAa;IACjC,iBAAiB,EAAE,aAAa;CACoB,CAAC;AAEvD,iDAAiD;AACjD,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,2FAA2F;AAC3F,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,6FAA6F;AAC7F,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AAE3E,iGAAiG;AACjG,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,2HAA2H;AAC3H,MAAM,qBAAqB,GAAG,EAAE,CAAC;AACjC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC,qGAAqG;AACrG,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzD,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;QACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACpC,CAAC;CACH,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5I,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACpD,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IAClK,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACpF,CAAC,CAAC;AAEH,+GAA+G;AAC/G,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;AACjG,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC;IAChL,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAClG,CAAC,CAAC;AAEH,wGAAwG;AACxG,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,kEAAkE;AAClE,MAAM,YAAY,GAAG;IACnB,eAAe,EAAE,WAAW;IAC5B,cAAc,EAAE,WAAW;IAC3B,eAAe,EAAE,WAAW;IAC5B,eAAe,EAAE,UAAU;IAC3B,OAAO,EAAE,UAAU;IACnB,gBAAgB,EAAE,UAAU;IAC5B,YAAY,EAAE,UAAU;IACxB,sBAAsB,EAAE,aAAa;IACrC,kBAAkB,EAAE,aAAa;IACjC,mBAAmB,EAAE,qBAAqB;IAC1C,aAAa,EAAE,qBAAqB;IACpC,iBAAiB,EAAE,aAAa;CACmC,CAAC;AAEtE,kIAAkI;AAClI,MAAM,qBAAqB,GAAG;IAC5B,eAAe,EAAE,WAAW;IAC5B,YAAY,EAAE,qBAAqB;IACnC,iBAAiB,EAAE,aAAa;IAChC,YAAY,EAAE,cAAc;CACwB,CAAC;AAEvD,sEAAsE;AACtE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACxL,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7F,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/M,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,OAAuB;IAC7C,OAAO,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AACtM,CAAC;AAED,yIAAyI;AACzI,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClD,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3C,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;QAC7G,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC1J,CAAC;CACH,CAAC,CAAC;AAEH,6CAA6C;AAC7C,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC,yEAAyE;AACzE,MAAM,YAAY,GAAG;IACnB,YAAY,EAAE,WAAW;IACzB,UAAU,EAAE,cAAc;IAC1B,iBAAiB,EAAE,aAAa;IAChC,gBAAgB,EAAE,WAAW;IAC7B,YAAY,EAAE,aAAa;CACyB,CAAC;AAEvD,SAAS,cAAc,CAAI,QAAyE;IAClG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC;AACxB,CAAC;AAED,iGAAiG;AACjG,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE;IAC3D,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oFAAoF,EAAE,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AACnH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,sHAAsH;QACtH,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAClF,2FAA2F;YAC3F,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5G,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,CAAC;QAC9C,CAAC,CAAC;QACF;;;;;WAKG;QACH,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC;aAC/B,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACxE,MAAM,CAAC,4BAA4B,CAAC;aACpC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACpB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,gGAAgG;YAChG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC;QAC/C,CAAC,CAAC;KACL,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,iJAAiJ;QACjJ,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxK,+CAA+C;QAC/C,GAAG,EAAE,eAAe;aACjB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,iBAAiB,CAAC;aACzB,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACvH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC;QACJ,sIAAsI;QACtI,KAAK,EAAE,eAAe;aACnB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;aACxG,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC;QACJ;;;;;WAKG;QACH,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC;aAC7B,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC,CAAC;aAClG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;aACxG,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC;QACJ;;;;;WAKG;QACH,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC;aAC/B,KAAK,CACJ,CAAC,CAAC,YAAY,CAAC;YACb,SAAS,EAAE,oBAAoB;YAC/B,IAAI,EAAE,gBAAgB;YACtB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;YACpC,UAAU,EAAE,qBAAqB;YACjC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC7B,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;SACnH,CAAC,CACH;aACA,MAAM,CAAC,gBAAgB,CAAC;aACxB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAChG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACrG,CAAC;YACD,OAAO,QAAQ,CAAC,KAAK,CAAC;QACxB,CAAC,CAAC;QACJ;;;;WAIG;QACH,uHAAuH;QACvH,WAAW,EAAE,eAAe;aACzB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aAChF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aACpB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACjI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACJ,qJAAqJ;QACrJ,YAAY,EAAE,eAAe;aAC1B,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;aAC1G,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;aACjD,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAClI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC;QACJ,MAAM,EAAE,eAAe;aACpB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aACpB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC5H,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACJ,kHAAkH;QAClH,IAAI,EAAE,QAAQ,CAAC,eAAe,CAAC;aAC5B,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC5E,MAAM,CAAC,gBAAgB,CAAC;aACxB,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;QACJ,yGAAyG;QACzG,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC;aAC7B,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;aACjD,MAAM,CAAC,kBAAkB,CAAC;aAC1B,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;QACJ,4GAA4G;QAC5G,QAAQ,EAAE,QAAQ,CAAC,eAAe,CAAC;aAChC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aAC/H,MAAM,CAAC,kBAAkB,CAAC;aAC1B,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;KACL,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,kEAAkE;QAClE,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QACvG,uEAAuE;QACvE,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;QAClM,qDAAqD;QACrD,MAAM,EAAE,eAAe;aACpB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;aACpI,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;QACxH,2DAA2D;QAC3D,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;KACnM,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,qGAAqG;QACrG,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACjF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,6FAA6F;QAC7F,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACtF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC,CAAC;QACF,yEAAyE;QACzE,MAAM,EAAE,eAAe;aACpB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;aACjF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aAC/F,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClG,CAAC;YACD,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC;KACL,CAAC;IACF,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC;QACvB,gEAAgE;QAChE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrH,iHAAiH;QACjH,GAAG,EAAE,eAAe;aACjB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aACjF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aACvC,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAC9H,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,GAAG,CAAC,KAAK,CAAC;QACnB,CAAC,CAAC;KACL,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd;;;WAGG;QACH,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC;aACrC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aAC9I,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aAC/E,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACrB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,OAAO,UAAU,CAAC,KAAK,CAAC;QAC1B,CAAC,CAAC;KACL,CAAC;IACF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,8HAA8H;QAC9H,UAAU,EAAE,qBAAqB;aAC9B,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aAC5G,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aAC/D,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACtE,CAAC,CAAC;QACJ,+EAA+E;QAC/E,GAAG,EAAE,qBAAqB;aACvB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aACrD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aAClE,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YAC9B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9D,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACpE,CAAC,CAAC;QACJ,oIAAoI;QACpI,MAAM,EAAE,qBAAqB;aAC1B,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aACtF,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;aAC1B,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,MAAM,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5E,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACJ,kKAAkK;QAClK,eAAe,EAAE,qBAAqB;aACnC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACnF,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;aAC1B,QAAQ,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE;YACjC,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;KACL,CAAC;CACH,CAAC,CAAC"}

package/dist/app.d.ts

@@ -0,0 +1,43 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import { type FastifyInstance, type FastifyServerOptions } from 'fastify';
+import type { Clock } from './core/shared/clock.js';
+export declare const systemClock: Clock;
+export interface GatewayAppOptions {
+    databaseUrl: string;
+    fleetUrl: string;
+    clock?: Clock;
+    logger?: FastifyServerOptions['logger'];
+    /** The installation token (decision 0021): unset, the installation is open and every fleet is served. */
+    installationToken?: string;
+    /** Where outside MCP clients reach the gateway: the OAuth issuer, with the MCP endpoint at /mcp. */
+    publicUrl?: string;
+    /** Keys ship aliases, result handles and idempotency keys: the same secret keeps every ship's alias across restarts. */
+    gatewaySecret: string;
+    /** How long an outside MCP client's call waits for its answer before it is answered its handle: 10 seconds unless set. */
+    mcpWaitMaxMs?: number;
+    /** How long the gateway waits for an outside tool's answer before the call counts as unanswered: 5 minutes unless set. */
+    toolCallTimeoutMs?: number;
+    /** pagasae, where people sign in, and the gateway's client there (decision 0054): unset, people do not sign in. */
+    pagasae?: {
+        url: string;
+        clientId: string;
+        clientSecret: string;
+    };
+}
+export interface GatewayApp {
+    /** The HTTP server: `/api/health` and `/api/version` for whoever operates the installation, and `/trpc`. */
+    server: FastifyInstance;
+    /**
+     * At start: reads every served fleet's kept connection, dropping a crew
+     * token its fleet no longer takes, and starts taking the calls of each
+     * crewed party of a served fleet; answers each fleet still connected, as
+     * which ship.
+     */
+    restoreConnections: () => Promise<{
+        fleetId: FleetId;
+        ship: string;
+    }[]>;
+    /** Stops taking calls, once those in flight ended, then stops the server and disconnects the database. */
+    close(): Promise<void>;
+}
+export declare function createGatewayApp(options: GatewayAppOptions): GatewayApp;