@aeolus-fleet/gateway 0.0.0-stage → 0.28.0

package/dist/core/parties/change-party.js

@@ -0,0 +1,49 @@
+import { refuse } from '../shared/errors.js';
+import { err, ok } from '../shared/result.js';
+/** The scope that changes an outside party's owner (0053). */
+export const OWNING_SCOPE = 'fleet:owner';
+/** The scope that grants and revokes an outside party's scopes (0046). */
+export const GRANTING_SCOPE = 'scopes:grant';
+/** The party's proxy ship and the credential to call the fleet on it with as the actor, who holds the call's scope. */
+async function proxyShipFor(deps, call) {
+    const { actor, as, name, scope } = call;
+    if (!actor.scopes.includes(scope)) {
+        return refuse('SCOPE_NOT_HELD', `Changing an outside party this way needs ${scope}`);
+    }
+    const party = await deps.parties.find(actor.fleetId, name);
+    if (party === undefined) {
+        return refuse('NO_SUCH_PARTY', `There is no outside party ${name}`);
+    }
+    if (party.proxyShipId === null) {
+        return refuse('PARTY_NOT_COMMISSIONED', `${name}'s proxy ship is not commissioned yet`);
+    }
+    const credential = await deps.credentialOf(actor, as);
+    return credential.isOk ? ok({ shipId: party.proxyShipId, credential: credential.value }) : credential;
+}
+/** The fleet's refusal of a change, as the gateway states it. */
+function refusalOf(refusal) {
+    return refusal.code === 'UNAVAILABLE' ? { kind: 'FLEET_UNAVAILABLE', message: `The fleet did not answer: ${refusal.message}` } : { kind: 'CHANGE_REFUSED', message: refusal.message };
+}
+/** Use case: an actor holding fleet:owner sets the owner of an outside party's proxy ship, as itself. */
+export function createChangePartyOwner(deps) {
+    return async ({ ownerShipId, ...call }) => {
+        const target = await proxyShipFor(deps, { ...call, scope: OWNING_SCOPE });
+        if (!target.isOk) {
+            return target;
+        }
+        const set = await deps.fleet.setOwner(target.value.credential, { shipId: target.value.shipId, ownerShipId });
+        return set.isOk ? ok(undefined) : err(refusalOf(set.error));
+    };
+}
+/** Use case: an actor holding scopes:grant grants and revokes scopes on an outside party's proxy ship, as itself: every scope it holds now. */
+export function createChangePartyScopes(deps) {
+    return async ({ grant, revoke, ...call }) => {
+        const target = await proxyShipFor(deps, { ...call, scope: GRANTING_SCOPE });
+        if (!target.isOk) {
+            return target;
+        }
+        const changed = await deps.fleet.grantScopes(target.value.credential, { shipId: target.value.shipId, grant, revoke });
+        return changed.isOk ? ok(changed.value) : err(refusalOf(changed.error));
+    };
+}
+//# sourceMappingURL=change-party.js.map

package/dist/core/parties/change-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-party.js","sourceRoot":"","sources":["../../../src/core/parties/change-party.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAG3D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAC;AAE1C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC;AAoB7C,uHAAuH;AACvH,KAAK,UAAU,YAAY,CAAC,IAAgB,EAAE,IAAoC;IAChF,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,gBAAgB,EAAE,4CAA4C,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,eAAe,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,wBAAwB,EAAE,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AACxG,CAAC;AAED,iEAAiE;AACjE,SAAS,SAAS,CAAC,OAAqB;IACtC,OAAO,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,6BAA6B,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AACxL,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,sBAAsB,CAAC,IAAgB;IACrD,OAAO,KAAK,EAAE,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;QACxC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAC7G,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC;AACJ,CAAC;AAED,+IAA+I;AAC/I,MAAM,UAAU,uBAAuB,CAAC,IAAgB;IACtD,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACtH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/parties/check-server.d.ts

@@ -0,0 +1,24 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { McpServerConnection, McpServers } from '../mcp-out/ports.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+/** A tool as the check shows it: its name, and its short description when the server gives one. */
+export interface CheckedTool {
+    name: string;
+    description?: string;
+}
+export type CheckServer = (input: {
+    fleetId: FleetId;
+} & McpServerConnection) => Promise<Result<{
+    tools: CheckedTool[];
+}, DomainError<'OUTSIDE_PARTIES_OFF' | 'SERVER_UNREACHABLE'>>>;
+/**
+ * Use case: the gateway checks an outside MCP server before it is added
+ * (flow F10): the tools its server lists, with the credential the approver
+ * typed. It keeps nothing and commissions nothing; approving does that.
+ * Only while the fleet's outside parties are on, as approving.
+ */
+export declare function createCheckServer(deps: {
+    servers: McpServers;
+    servesOutsideParties: (fleetId: FleetId) => Promise<boolean>;
+}): CheckServer;

package/dist/core/parties/check-server.js

@@ -0,0 +1,21 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/**
+ * Use case: the gateway checks an outside MCP server before it is added
+ * (flow F10): the tools its server lists, with the credential the approver
+ * typed. It keeps nothing and commissions nothing; approving does that.
+ * Only while the fleet's outside parties are on, as approving.
+ */
+export function createCheckServer(deps) {
+    return async ({ fleetId, url, credential }) => {
+        if (!(await deps.servesOutsideParties(fleetId))) {
+            return refuse('OUTSIDE_PARTIES_OFF', "This fleet's outside parties are off: turn them on first");
+        }
+        const listed = await deps.servers.listTools({ url, credential });
+        if (!listed.isOk) {
+            return refuse('SERVER_UNREACHABLE', `The MCP server could not be listed: ${listed.error.reason}`);
+        }
+        return ok({ tools: listed.value.map(({ name, description }) => ({ name, ...(description === undefined ? {} : { description }) })) });
+    };
+}
+//# sourceMappingURL=check-server.js.map

package/dist/core/parties/check-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-server.js","sourceRoot":"","sources":["../../../src/core/parties/check-server.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAUtD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2F;IAC3H,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;QAC5C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChD,OAAO,MAAM,CAAC,qBAAqB,EAAE,0DAA0D,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,oBAAoB,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/parties/crew-party.d.ts

@@ -0,0 +1,21 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import { type ShownParty } from './shown-party.js';
+import type { PartyStore, ProxyShipDoor } from './ports.js';
+export type CrewParty = (input: {
+    operatorFleetId: FleetId;
+    name: string;
+    secret: string;
+}) => Promise<Result<ShownParty, DomainError<'NO_SUCH_PARTY' | 'NOT_AWAITING_CREW' | 'SECRET_REFUSED'>>>;
+/**
+ * Use case: argo hands over a new secret for a party's proxy ship that awaits
+ * crew, taken from a new starting prompt in the console: the commission's
+ * answer was lost, and its secret with it, and the gateway's ship may not ask
+ * for a new one (orchestrator-1 on aeolus-fleet#876, Q6). The gateway crews
+ * the ship with it and keeps the crew token; the secret is never kept.
+ */
+export declare function createCrewParty(deps: {
+    parties: PartyStore;
+    door: ProxyShipDoor;
+}): CrewParty;

package/dist/core/parties/crew-party.js

@@ -0,0 +1,29 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { shownPartyOf } from './shown-party.js';
+/**
+ * Use case: argo hands over a new secret for a party's proxy ship that awaits
+ * crew, taken from a new starting prompt in the console: the commission's
+ * answer was lost, and its secret with it, and the gateway's ship may not ask
+ * for a new one (orchestrator-1 on aeolus-fleet#876, Q6). The gateway crews
+ * the ship with it and keeps the crew token; the secret is never kept.
+ */
+export function createCrewParty(deps) {
+    return async ({ operatorFleetId, name, secret }) => {
+        const party = await deps.parties.find(operatorFleetId, name);
+        if (!party) {
+            return refuse('NO_SUCH_PARTY', `No party named ${name}`);
+        }
+        if (party.state !== 'awaitingCrew' || party.proxyShipId === null) {
+            return refuse('NOT_AWAITING_CREW', `The proxy ship of ${name} does not await crew`);
+        }
+        const registered = await deps.door.register({ shipId: party.proxyShipId, secret });
+        if (!registered.isOk) {
+            return refuse('SECRET_REFUSED', `The fleet refused the secret: ${registered.error.message}`);
+        }
+        const crewed = { ...party, state: 'crewed', secret: null, crewToken: registered.value.crewToken };
+        await deps.parties.save(crewed);
+        return ok(shownPartyOf(crewed));
+    };
+}
+//# sourceMappingURL=crew-party.js.map

package/dist/core/parties/crew-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crew-party.js","sourceRoot":"","sources":["../../../src/core/parties/crew-party.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AAQjE;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkD;IAChF,OAAO,KAAK,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACjD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,eAAe,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,cAAc,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YACjE,OAAO,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,IAAI,sBAAsB,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,MAAM,CAAC,gBAAgB,EAAE,iCAAiC,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,MAAM,GAAU,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACzG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,OAAO,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/parties/list-parties.d.ts

@@ -0,0 +1,29 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { ActorCredential, CredentialOf } from '../actors/credential-of.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import { type ListedParty } from './shown-party.js';
+import type { PartyStore, ProxyShipReads } from './ports.js';
+interface ReadCall {
+    actor: Actor;
+    as: ActorCredential;
+}
+export type ListParties = (call: ReadCall) => Promise<ListedParty[]>;
+export type ReadParty = (call: ReadCall & {
+    name: string;
+}) => Promise<Result<ListedParty, DomainError<'NO_SUCH_PARTY'>>>;
+interface ReadDeps {
+    parties: PartyStore;
+    fleet: ProxyShipReads;
+    credentialOf: CredentialOf;
+}
+/**
+ * Use case: the actor's fleet's outside parties, by name: never a credential
+ * or a crew token. Each proxy ship's owner and scopes are the fleet's alone
+ * (decision 0056), read as the actor, so the fleet answers within its read
+ * reach.
+ */
+export declare function createListParties(deps: ReadDeps): ListParties;
+/** Use case: one outside party by name, as the list shows it. */
+export declare function createReadParty(deps: ReadDeps): ReadParty;
+export {};

package/dist/core/parties/list-parties.js

@@ -0,0 +1,39 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { shownPartyOf } from './shown-party.js';
+const UNKNOWN = { ownerShipId: null, scopes: null };
+/** The parties with what the fleet holds for each proxy ship, read as the actor; unknown outside its read reach, or while it cannot be read. */
+async function listed(deps, call) {
+    const credential = await deps.credentialOf(call.actor, call.as);
+    return Promise.all(call.parties.map(async (party) => {
+        if (party.proxyShipId === null || !credential.isOk) {
+            return { ...shownPartyOf(party), ...UNKNOWN };
+        }
+        const read = await deps.fleet.read(credential.value, { shipId: party.proxyShipId });
+        return { ...shownPartyOf(party), ...(read.isOk ? read.value : UNKNOWN) };
+    }));
+}
+/**
+ * Use case: the actor's fleet's outside parties, by name: never a credential
+ * or a crew token. Each proxy ship's owner and scopes are the fleet's alone
+ * (decision 0056), read as the actor, so the fleet answers within its read
+ * reach.
+ */
+export function createListParties(deps) {
+    return async ({ actor, as }) => {
+        const parties = (await deps.parties.list(actor.fleetId)).sort((left, right) => left.name.localeCompare(right.name));
+        return listed(deps, { actor, as, parties });
+    };
+}
+/** Use case: one outside party by name, as the list shows it. */
+export function createReadParty(deps) {
+    return async ({ actor, as, name }) => {
+        const party = await deps.parties.find(actor.fleetId, name);
+        if (party === undefined) {
+            return refuse('NO_SUCH_PARTY', `There is no outside party ${name}`);
+        }
+        const [shown] = await listed(deps, { actor, as, parties: [party] });
+        return shown === undefined ? refuse('NO_SUCH_PARTY', `There is no outside party ${name}`) : ok(shown);
+    };
+}
+//# sourceMappingURL=list-parties.js.map

package/dist/core/parties/list-parties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-parties.js","sourceRoot":"","sources":["../../../src/core/parties/list-parties.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAoC,MAAM,kBAAkB,CAAC;AAkBlF,MAAM,OAAO,GAAc,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAE/D,gJAAgJ;AAChJ,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,IAAqC;IACzE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,OAAO,OAAO,CAAC,GAAG,CAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC/B,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACnD,OAAO,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3E,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE;QAC7B,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACpH,OAAO,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,eAAe,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IACxG,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/parties/party.d.ts

@@ -0,0 +1,52 @@
+import type { FleetId, ShipId, VerifiedFact } from '@aeolus-fleet/common';
+import type { McpServerCredential } from '../vault/credential.js';
+/**
+ * Where an approved party's proxy ship stands (interop I-5):
+ * - commissioning: argo approved it; the gateway has not seen the fleet commission its ship yet;
+ * - awaitingCrew: its ship is commissioned, and the gateway does not hold its crew token;
+ * - crewed: the gateway crews its ship.
+ */
+export type PartyState = 'commissioning' | 'awaitingCrew' | 'crewed';
+/**
+ * What every party has: one app proxy ship (decision 0044), crewed by the
+ * gateway. Known by its ship's name, unique in the fleet. Its owner, the
+ * person inside who answers for it (0045), is the fleet's alone: the gateway
+ * names it at the commission and reads it after (decision 0056).
+ */
+interface PartyBase {
+    readonly fleetId: FleetId;
+    readonly name: string;
+    readonly state: PartyState;
+    readonly proxyShipId: ShipId | null;
+    /** The proxy ship's secret, kept only from its commission until the gateway crews it, so a crash between them loses nothing. */
+    readonly secret: string | null;
+    readonly crewToken: string | null;
+    /** argo's request id for the approval: the commission's idempotency key, and how a repeat is told from another approval. */
+    readonly requestId: string;
+    readonly requestHash: string;
+    readonly approvedAt: Date;
+}
+/** An outside MCP server argo approved for its fleet: fleet ships call its tools through its proxy ship (MCP out). */
+export interface McpServerParty extends PartyBase {
+    readonly kind: 'mcpServer';
+    /** The server's Streamable HTTP endpoint. */
+    readonly url: string;
+    readonly credential: McpServerCredential;
+    /** The most calls the gateway has in flight to the server at once. */
+    readonly concurrencyLimit: number;
+}
+/** An outside MCP client argo approved at /authorize: it calls fleet ships as its proxy ship (MCP in). */
+export interface McpClientParty extends PartyBase {
+    readonly kind: 'mcpClient';
+    /** Its OAuth client id: pre-registered, or its metadata document's URL. */
+    readonly clientId: string;
+}
+export type Party = McpServerParty | McpClientParty;
+/**
+ * What the gateway checked about the party behind a proxy ship (decision
+ * 0059): the host it reached an MCP server at over TLS, and the domain of the
+ * metadata document it read an MCP client's id from over TLS. A client argo
+ * registered has no document, and an address without TLS proves no host.
+ */
+export declare function verifiedFactsOf(party: Party): VerifiedFact[];
+export {};

package/dist/core/parties/party.js

@@ -0,0 +1,24 @@
+/** The host of an https address, or none: only an address reached over TLS shows who answers it. */
+function tlsHostOf(address) {
+    try {
+        const url = new URL(address);
+        return url.protocol === 'https:' ? url.hostname : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * What the gateway checked about the party behind a proxy ship (decision
+ * 0059): the host it reached an MCP server at over TLS, and the domain of the
+ * metadata document it read an MCP client's id from over TLS. A client argo
+ * registered has no document, and an address without TLS proves no host.
+ */
+export function verifiedFactsOf(party) {
+    const host = tlsHostOf(party.kind === 'mcpServer' ? party.url : party.clientId);
+    if (host === undefined) {
+        return [];
+    }
+    return [party.kind === 'mcpServer' ? { checked: 'tlsHost', value: host } : { checked: 'clientIdDocumentDomain', value: host }];
+}
+//# sourceMappingURL=party.js.map

package/dist/core/parties/party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"party.js","sourceRoot":"","sources":["../../../src/core/parties/party.ts"],"names":[],"mappings":"AAmDA,oGAAoG;AACpG,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAY;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACjI,CAAC"}

package/dist/core/parties/ports.d.ts

@@ -0,0 +1,74 @@
+import type { FleetId, ShipId, VerifiedFact } from '@aeolus-fleet/common';
+import type { ActorCredential } from '../actors/credential-of.js';
+import type { FleetRefusal } from '../connection/ports.js';
+import type { Result } from '../shared/result.js';
+import type { Party } from './party.js';
+/** Outbound port: the parties argo approved, one per proxy ship name in a fleet. */
+export interface PartyStore {
+    find(fleetId: FleetId, name: string): Promise<Party | undefined>;
+    list(fleetId: FleetId): Promise<Party[]>;
+    /** The party an MCP client is in the fleet, if argo approved it. */
+    findByClient(fleetId: FleetId, clientId: string): Promise<Party | undefined>;
+    save(party: Party): Promise<void>;
+    remove(fleetId: FleetId, name: string): Promise<void>;
+}
+/** Outbound port: the fleet's calls the gateway makes for a party's proxy ship. */
+export interface ProxyShipDoor {
+    /**
+     * Commissions an app ship as the gateway's ship (fleet:commission and
+     * fleet:on-behalf, decision 0044), owned by the owner argo picked (0045),
+     * with the scopes granted, only ones the gateway's ship holds (0053),
+     * under the gateway's idempotency key: its id, and on the first commission
+     * its secret. A repeat under the same key answers the same ship without one.
+     */
+    commissionAppShip(crewToken: string, ship: {
+        name: string;
+        type: string;
+        owner: ShipId;
+        idempotencyKey: string;
+        scopes: readonly string[];
+    }): Promise<Result<{
+        shipId: ShipId;
+        secret: string | null;
+    }, FleetRefusal>>;
+    register(claim: {
+        shipId: ShipId;
+        secret: string;
+    }): Promise<Result<{
+        crewToken: string;
+    }, FleetRefusal>>;
+    /** Sets the gateway's facts about the proxy ship whole (fleet.setVerifiedFacts, fleet:verify, decision 0059). */
+    setVerifiedFacts(crewToken: string, written: {
+        shipId: ShipId;
+        facts: readonly VerifiedFact[];
+    }): Promise<Result<undefined, FleetRefusal>>;
+}
+/** Outbound port: the fleet's calls on a party's proxy ship made as the actor (decision 0057), so the fleet checks its scopes and reach. */
+export interface ProxyShipsAsActor {
+    /** Retires the proxy ship (fleet.retire); a ship retired already is refused with CONFLICT. */
+    retire(as: ActorCredential, ship: {
+        shipId: ShipId;
+    }): Promise<Result<undefined, FleetRefusal>>;
+    /** Sets the proxy ship's owner (fleet.setOwner, fleet:owner). */
+    setOwner(as: ActorCredential, ship: {
+        shipId: ShipId;
+        ownerShipId: ShipId;
+    }): Promise<Result<undefined, FleetRefusal>>;
+    /** Grants and revokes the proxy ship's scopes (fleet.grantScopes, scopes:grant): every scope it holds now. */
+    grantScopes(as: ActorCredential, change: {
+        shipId: ShipId;
+        grant: readonly string[];
+        revoke: readonly string[];
+    }): Promise<Result<{
+        scopes: string[];
+    }, FleetRefusal>>;
+}
+/** Outbound port: what the fleet holds for a proxy ship, read as the actor (fleet:read): its owner and scopes, neither outside the actor's read reach. */
+export interface ProxyShipReads {
+    read(as: ActorCredential, ship: {
+        shipId: ShipId;
+    }): Promise<Result<{
+        ownerShipId: ShipId | null;
+        scopes: string[] | null;
+    }, FleetRefusal>>;
+}

package/dist/core/parties/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/core/parties/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../../src/core/parties/ports.ts"],"names":[],"mappings":""}

package/dist/core/parties/read-party-tools.d.ts

@@ -0,0 +1,22 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { McpServers } from '../mcp-out/ports.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { CheckedTool } from './check-server.js';
+import type { PartyStore } from './ports.js';
+export type ReadPartyTools = (party: {
+    fleetId: FleetId;
+    name: string;
+}) => Promise<Result<{
+    tools: CheckedTool[];
+}, DomainError<'NO_SUCH_PARTY' | 'SERVER_UNREACHABLE'>>>;
+/**
+ * Use case: an outside MCP server's tools, as the server lists them now,
+ * asked with the credential the gateway keeps for it. It keeps nothing:
+ * the proxy ship's statement in the fleet is where the tools live, and
+ * core does not answer a statement to a reader yet, so the server is asked.
+ */
+export declare function createReadPartyTools(deps: {
+    parties: PartyStore;
+    servers: McpServers;
+}): ReadPartyTools;

package/dist/core/parties/read-party-tools.js

@@ -0,0 +1,22 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/**
+ * Use case: an outside MCP server's tools, as the server lists them now,
+ * asked with the credential the gateway keeps for it. It keeps nothing:
+ * the proxy ship's statement in the fleet is where the tools live, and
+ * core does not answer a statement to a reader yet, so the server is asked.
+ */
+export function createReadPartyTools(deps) {
+    return async ({ fleetId, name }) => {
+        const party = await deps.parties.find(fleetId, name);
+        if (party?.kind !== 'mcpServer') {
+            return refuse('NO_SUCH_PARTY', `There is no outside MCP server ${name}`);
+        }
+        const listed = await deps.servers.listTools({ url: party.url, credential: party.credential });
+        if (!listed.isOk) {
+            return refuse('SERVER_UNREACHABLE', `The MCP server of ${name} could not be listed: ${listed.error.reason}`);
+        }
+        return ok({ tools: listed.value.map(({ name: tool, description }) => ({ name: tool, ...(description === undefined ? {} : { description }) })) });
+    };
+}
+//# sourceMappingURL=read-party-tools.js.map

package/dist/core/parties/read-party-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-party-tools.js","sourceRoot":"","sources":["../../../src/core/parties/read-party-tools.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAMtD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAkD;IACrF,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,eAAe,EAAE,kCAAkC,IAAI,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,oBAAoB,EAAE,qBAAqB,IAAI,yBAAyB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACnJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/parties/retire-party.d.ts

@@ -0,0 +1,29 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { ActorCredential, CredentialOf } from '../actors/credential-of.js';
+import type { IssuedTokens } from '../oauth/ports.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { PartyStore, ProxyShipsAsActor } from './ports.js';
+/** The scope that retires an outside party, as it retires any ship (decision 0056). */
+export declare const RETIRING_SCOPE = "fleet:manage";
+export type RetirePartyRefusal = DomainError<'NOT_A_MANAGER' | 'NO_SUCH_PARTY' | 'RETIRE_REFUSED' | 'FLEET_UNAVAILABLE' | 'NOT_AN_ACTOR'>;
+export type RetireParty = (input: {
+    actor: Actor;
+    as: ActorCredential;
+    name: string;
+}) => Promise<Result<undefined, RetirePartyRefusal>>;
+/**
+ * Use case: an actor holding fleet:manage retires an outside party (decision
+ * 0056). Its proxy ship is retired in the fleet as the actor, so the fleet
+ * checks its manage reach, and only then does the gateway forget the party
+ * and revoke its client's tokens; its worker ends as the fleet ends the
+ * proxy ship's crew. A proxy ship retired already is retired. A party whose
+ * ship the gateway never learned asks the fleet nothing. Adding it again is
+ * a new request.
+ */
+export declare function createRetireParty(deps: {
+    parties: PartyStore;
+    fleet: ProxyShipsAsActor;
+    tokens: Pick<IssuedTokens, 'revokeParty'>;
+    credentialOf: CredentialOf;
+}): RetireParty;

package/dist/core/parties/retire-party.js

@@ -0,0 +1,43 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/** The scope that retires an outside party, as it retires any ship (decision 0056). */
+export const RETIRING_SCOPE = 'fleet:manage';
+/** The fleet's code for a ship retired already: the only conflict a retire answers. */
+const RETIRED_ALREADY = 'CONFLICT';
+/**
+ * Use case: an actor holding fleet:manage retires an outside party (decision
+ * 0056). Its proxy ship is retired in the fleet as the actor, so the fleet
+ * checks its manage reach, and only then does the gateway forget the party
+ * and revoke its client's tokens; its worker ends as the fleet ends the
+ * proxy ship's crew. A proxy ship retired already is retired. A party whose
+ * ship the gateway never learned asks the fleet nothing. Adding it again is
+ * a new request.
+ */
+export function createRetireParty(deps) {
+    return async ({ actor, as, name }) => {
+        if (!actor.scopes.includes(RETIRING_SCOPE)) {
+            return refuse('NOT_A_MANAGER', `Retiring an outside party needs ${RETIRING_SCOPE}`);
+        }
+        const party = await deps.parties.find(actor.fleetId, name);
+        if (party === undefined) {
+            return refuse('NO_SUCH_PARTY', `There is no outside party ${name}`);
+        }
+        if (party.proxyShipId !== null) {
+            const credential = await deps.credentialOf(actor, as);
+            if (!credential.isOk) {
+                return credential;
+            }
+            const retired = await deps.fleet.retire(credential.value, { shipId: party.proxyShipId });
+            if (!retired.isOk && retired.error.code === 'UNAVAILABLE') {
+                return refuse('FLEET_UNAVAILABLE', `The fleet did not retire ${name}'s proxy ship: ${retired.error.message}`);
+            }
+            if (!retired.isOk && retired.error.code !== RETIRED_ALREADY) {
+                return refuse('RETIRE_REFUSED', retired.error.message);
+            }
+        }
+        await deps.parties.remove(actor.fleetId, name);
+        await deps.tokens.revokeParty(actor.fleetId, name);
+        return ok(undefined);
+    };
+}
+//# sourceMappingURL=retire-party.js.map

package/dist/core/parties/retire-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retire-party.js","sourceRoot":"","sources":["../../../src/core/parties/retire-party.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,uFAAuF;AACvF,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC;AAE7C,uFAAuF;AACvF,MAAM,eAAe,GAAG,UAAU,CAAC;AAMnC;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8H;IAC9J,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,eAAe,EAAE,mCAAmC,cAAc,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,eAAe,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACrB,OAAO,UAAU,CAAC;YACpB,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC1D,OAAO,MAAM,CAAC,mBAAmB,EAAE,4BAA4B,IAAI,kBAAkB,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC5D,OAAO,MAAM,CAAC,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/parties/shown-party.d.ts

@@ -0,0 +1,27 @@
+import type { ShipId } from '@aeolus-fleet/common';
+import type { McpServerCredential } from '../vault/credential.js';
+import type { Party, PartyState } from './party.js';
+interface ShownPartyBase {
+    name: string;
+    state: PartyState;
+    proxyShipId: ShipId | null;
+}
+/** A party as the gateway keeps it, for any actor to read: never its credential, secret or crew token. */
+export type ShownParty = (ShownPartyBase & {
+    kind: 'mcpServer';
+    url: string;
+    credentialKind: McpServerCredential['kind'];
+    concurrencyLimit: number;
+}) | (ShownPartyBase & {
+    kind: 'mcpClient';
+    clientId: string;
+});
+/** What the fleet holds for a party's proxy ship (decision 0056): none while it has no proxy ship, or the fleet does not answer. */
+export interface FromFleet {
+    ownerShipId: ShipId | null;
+    scopes: string[] | null;
+}
+/** A party with its proxy ship's owner and scopes, read from the fleet. */
+export type ListedParty = ShownParty & FromFleet;
+export declare function shownPartyOf(party: Party): ShownParty;
+export {};

package/dist/core/parties/shown-party.js

@@ -0,0 +1,10 @@
+export function shownPartyOf(party) {
+    const { name, state, proxyShipId } = party;
+    switch (party.kind) {
+        case 'mcpServer':
+            return { name, kind: party.kind, url: party.url, credentialKind: party.credential.kind, concurrencyLimit: party.concurrencyLimit, state, proxyShipId };
+        case 'mcpClient':
+            return { name, kind: party.kind, clientId: party.clientId, state, proxyShipId };
+    }
+}
+//# sourceMappingURL=shown-party.js.map

package/dist/core/parties/shown-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shown-party.js","sourceRoot":"","sources":["../../../src/core/parties/shown-party.ts"],"names":[],"mappings":"AAyBA,MAAM,UAAU,YAAY,CAAC,KAAY;IACvC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC3C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACzJ,KAAK,WAAW;YACd,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACpF,CAAC;AACH,CAAC"}

package/dist/core/people/answer-delivery.d.ts

@@ -0,0 +1,24 @@
+import { type DomainError } from '../shared/errors.js';
+import type { Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type Dealt, type DealtError } from './opened-of.js';
+import { type PersonCaller } from './person-crew.js';
+import type { OpenedDeliveries, PersonCrews, PersonShipDoor } from './ports.js';
+export type AnswerDelivery = (input: {
+    caller: PersonCaller;
+    deliveryId: string;
+    contentType: string;
+    payload: string;
+}) => Promise<Result<Dealt, DealtError | DomainError<'SEND_REFUSED'>>>;
+/**
+ * Use case: a person answers a delivery they opened (Q20): a reply to its
+ * sender, in reply to its message, then it is handled. The reply's key is
+ * the delivery's, so an answer tried again after the fleet did not take
+ * handled is sent once.
+ */
+export declare function createAnswerDelivery(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+    opened: OpenedDeliveries;
+}): AnswerDelivery;