@aeolus-fleet/gateway 0.0.0-stage → 0.28.0

package/dist/adapters/http/parties-page.js

@@ -0,0 +1,139 @@
+/**
+ * The gateway's page of parties: one small server-rendered page where a
+ * person signed in to the pages, holding fleet:manage, approves outside MCP
+ * servers, hands over a secret, states a party and marks its tools. Each
+ * form calls the gateway's own API as that account, so the page checks
+ * nothing the API does not; it only refuses a form sent from another origin.
+ */
+import { randomUUID } from 'node:crypto';
+import { idSchema } from '@aeolus-fleet/common';
+import { TRPCError } from '@trpc/server';
+import { getHTTPStatusCodeFromError } from '@trpc/server/http';
+import { z } from 'zod';
+import { gatewayRouter } from '../trpc/router.js';
+import { acceptForms, escaped, isSameOrigin, layout, refusalMessage } from './html.js';
+import { signInPrompt } from './signal.js';
+const HTTP_FORBIDDEN = 403;
+const HTTP_SEE_OTHER = 303;
+const HTTP_INTERNAL_ERROR = 500;
+const PAGE = '/parties';
+const formSchema = z.record(z.string(), z.string());
+function field(form, name) {
+    return form[name] ?? '';
+}
+function partyRow(party, canManage) {
+    const name = escaped(party.name);
+    const forms = canManage
+        ? [
+            party.state === 'awaitingCrew'
+                ? `<form class="inline" method="post" action="${PAGE}/crew"><input type="hidden" name="name" value="${name}"><input name="secret" placeholder="secret from a new starting prompt" required><button>Crew</button></form>`
+                : '',
+            party.kind === 'mcpServer' && party.state === 'crewed'
+                ? `<form class="inline" method="post" action="${PAGE}/state"><input type="hidden" name="name" value="${name}"><button>State its tools</button></form>` +
+                    `<form class="inline" method="post" action="${PAGE}/mark"><input type="hidden" name="name" value="${name}"><input name="tool" placeholder="tool" required maxlength="128"><label><span><input type="checkbox" name="isRepeatable"> repeatable</span></label><button>Mark</button></form>`
+                : '',
+        ].join('')
+        : '';
+    // A server shows where it is and how the gateway signs in; a client, its OAuth client id.
+    const outside = party.kind === 'mcpServer' ? `${escaped(party.url)}</td><td>${escaped(party.credentialKind)}` : `${escaped(party.clientId)}</td><td>MCP client`;
+    return `<tr><td>${name}</td><td>${outside}</td><td>${escaped(party.state)}</td><td>${escaped(party.proxyShipId ?? '')}</td><td>${forms}</td></tr>`;
+}
+const APPROVE_FORM = (requestId) => `<h2>Approve an MCP server</h2>
+<form method="post" action="${PAGE}/approve">
+<input type="hidden" name="requestId" value="${requestId}">
+<label>Name, the proxy ship's<input name="name" required></label>
+<label>Streamable HTTP URL<input name="url" type="url" required></label>
+<label>Credential<select name="credentialKind"><option value="bearer">Bearer token</option><option value="clientCredentials">OAuth client credentials</option></select></label>
+<label>Bearer token<input name="token" type="password"></label>
+<label>Client id<input name="clientId"></label>
+<label>Client secret<input name="clientSecret" type="password"></label>
+<label>Issuer<input name="issuer" type="url"></label>
+<label>Scope<input name="scope"></label>
+<label>Owner's ship id (a person's ship, or argo)<input name="ownerShipId" required></label>
+<label>Calls at once<input name="concurrencyLimit" type="number" min="1" max="10" value="4"></label>
+<button>Approve</button>
+</form>`;
+async function renderPage(reply, page) {
+    const { context, failure } = page;
+    const caller = gatewayRouter.createCaller(context);
+    const actor = await context.authenticateActor({ cookie: context.cookie });
+    const parties = await caller.parties.list();
+    const canManage = actor.isOk && actor.value.scopes.includes('fleet:manage');
+    const body = [
+        '<h1>Parties</h1>',
+        '<p class="muted">Outside MCP servers argo approved for this fleet, each behind its proxy ship.</p>',
+        failure ? `<p class="error">${escaped(failure.message)}</p>` : '',
+        parties.length === 0
+            ? '<p class="muted">No party yet.</p>'
+            : `<table><thead><tr><th>Name</th><th>URL</th><th>Credential</th><th>State</th><th>Proxy ship</th><th></th></tr></thead><tbody>${parties.map((party) => partyRow(party, canManage)).join('')}</tbody></table>`,
+        canManage ? APPROVE_FORM(randomUUID()) : '',
+    ].join('');
+    return reply.code(failure?.status ?? 200).type('text/html; charset=utf-8').send(layout('Gateway parties', body));
+}
+function signInPage(reply, refusal) {
+    const body = signInPrompt({ message: refusalMessage(refusal.error), way: refusal.way, returnTo: PAGE });
+    return reply.code(getHTTPStatusCodeFromError(refusal.error)).type('text/html; charset=utf-8').send(layout('Gateway parties', `<h1>Parties</h1>${body}`));
+}
+/** The calls each form makes, as argo, from its fields. */
+const ACTIONS = {
+    approve: (caller, form) => {
+        const ownerShipId = idSchema('ship').safeParse(field(form, 'ownerShipId'));
+        if (!ownerShipId.success) {
+            return Promise.reject(new TRPCError({ code: 'BAD_REQUEST', message: "The owner's ship id is not a ship id (shp_...)" }));
+        }
+        const scope = field(form, 'scope');
+        return caller.parties.approve({
+            requestId: field(form, 'requestId'),
+            name: field(form, 'name'),
+            url: field(form, 'url'),
+            credential: field(form, 'credentialKind') === 'clientCredentials'
+                ? { kind: 'clientCredentials', clientId: field(form, 'clientId'), clientSecret: field(form, 'clientSecret'), issuer: field(form, 'issuer'), ...(scope === '' ? {} : { scope }) }
+                : { kind: 'bearer', token: field(form, 'token') },
+            ownerShipId: ownerShipId.data,
+            concurrencyLimit: Number(field(form, 'concurrencyLimit')),
+        });
+    },
+    crew: (caller, form) => caller.parties.crew({ name: field(form, 'name'), secret: field(form, 'secret') }),
+    state: (caller, form) => caller.parties.state({ name: field(form, 'name') }),
+    mark: (caller, form) => caller.parties.markTool({ name: field(form, 'name'), tool: field(form, 'tool'), isRepeatable: form.isRepeatable === 'on' }),
+};
+export function registerPartiesPage(server, deps) {
+    acceptForms(server);
+    const answer = async (exchange, act) => {
+        const { request, reply } = exchange;
+        const context = deps.contextFor(request.headers.cookie);
+        try {
+            if (act) {
+                await act(gatewayRouter.createCaller(context));
+                return await reply.code(HTTP_SEE_OTHER).header('location', PAGE).send();
+            }
+            return await renderPage(reply, { context });
+        }
+        catch (error) {
+            if (!(error instanceof TRPCError)) {
+                throw error;
+            }
+            if (error.code === 'UNAUTHORIZED') {
+                return signInPage(reply, { way: deps.signIn, error });
+            }
+            const failure = { status: error.code === 'INTERNAL_SERVER_ERROR' ? HTTP_INTERNAL_ERROR : getHTTPStatusCodeFromError(error), message: refusalMessage(error) };
+            try {
+                return await renderPage(reply, { context, failure });
+            }
+            catch {
+                return reply.code(failure.status).type('text/html; charset=utf-8').send(layout('Gateway parties', `<h1>Parties</h1><p class="error">${escaped(failure.message)}</p>`));
+            }
+        }
+    };
+    server.get(PAGE, (request, reply) => answer({ request, reply }));
+    for (const [action, call] of Object.entries(ACTIONS)) {
+        server.post(`${PAGE}/${action}`, (request, reply) => {
+            if (!isSameOrigin(request)) {
+                return reply.code(HTTP_FORBIDDEN).type('text/plain; charset=utf-8').send('A form for this page is sent only from this page.');
+            }
+            const form = formSchema.safeParse(request.body);
+            return answer({ request, reply }, (caller) => call(caller, form.success ? form.data : {}));
+        });
+    }
+}
+//# sourceMappingURL=parties-page.js.map

package/dist/adapters/http/parties-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parties-page.js","sourceRoot":"","sources":["../../../src/adapters/http/parties-page.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,aAAa,EAAoC,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EAAE,YAAY,EAAkB,MAAM,aAAa,CAAC;AAK3D,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,MAAM,IAAI,GAAG,UAAU,CAAC;AAExB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AAKpD,SAAS,KAAK,CAAC,IAAU,EAAE,IAAY;IACrC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC1B,CAAC;AAGD,SAAS,QAAQ,CAAC,KAAiB,EAAE,SAAkB;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,SAAS;QACrB,CAAC,CAAC;YACE,KAAK,CAAC,KAAK,KAAK,cAAc;gBAC5B,CAAC,CAAC,8CAA8C,IAAI,kDAAkD,IAAI,8GAA8G;gBACxN,CAAC,CAAC,EAAE;YACN,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;gBACpD,CAAC,CAAC,8CAA8C,IAAI,mDAAmD,IAAI,2CAA2C;oBACpJ,8CAA8C,IAAI,kDAAkD,IAAI,iLAAiL;gBAC3R,CAAC,CAAC,EAAE;SACP,CAAC,IAAI,CAAC,EAAE,CAAC;QACZ,CAAC,CAAC,EAAE,CAAC;IACP,0FAA0F;IAC1F,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAChK,OAAO,WAAW,IAAI,YAAY,OAAO,YAAY,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,YAAY,KAAK,YAAY,CAAC;AACrJ,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,EAAE,CAAC;8BACd,IAAI;+CACa,SAAS;;;;;;;;;;;;QAYhD,CAAC;AAET,KAAK,UAAU,UAAU,CAAC,KAAmB,EAAE,IAAyE;IACtH,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAClC,MAAM,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG;QACX,kBAAkB;QAClB,oGAAoG;QACpG,OAAO,CAAC,CAAC,CAAC,oBAAoB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QACjE,OAAO,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,oCAAoC;YACtC,CAAC,CAAC,+HAA+H,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB;QAChN,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;KAC5C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,UAAU,CAAC,KAAmB,EAAE,OAA6C;IACpF,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,OAAO,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3J,CAAC;AAGD,2DAA2D;AAC3D,MAAM,OAAO,GAA4G;IACvH,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;QACxB,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5B,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC;YACzB,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;YACvB,UAAU,EACR,KAAK,CAAC,IAAI,EAAE,gBAAgB,CAAC,KAAK,mBAAmB;gBACnD,CAAC,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;gBAChL,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;YACrD,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;IACzG,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IAC5E,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;CACpJ,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,MAAuB,EAAE,IAAgF;IAC3I,WAAW,CAAC,MAAM,CAAC,CAAC;IAEpB,MAAM,MAAM,GAAG,KAAK,EAAE,QAA0D,EAAE,GAAiF,EAAE,EAAE;QACrK,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;gBAC/C,OAAO,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1E,CAAC;YACD,OAAO,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,EAAE,CAAC;gBAClC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAClC,OAAO,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7J,IAAI,CAAC;gBACH,OAAO,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,oCAAoC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACzK,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;YAClD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YAChI,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/adapters/http/person-tools.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The tools a signed-in person's MCP client is served (Q20, decision 0057):
+ * their person ship's calls, which the gateway makes as the ship's crew, so
+ * the chat holds no crew token; and asking for an outside MCP server as
+ * their account (decision 0056).
+ */
+import { McpServer } from '@modelcontextprotocol/server';
+import type { AnswerDelivery } from '../../core/people/answer-delivery.js';
+import type { DoneDelivery } from '../../core/people/done-delivery.js';
+import type { OpenDelivery } from '../../core/people/open-delivery.js';
+import type { PersonCaller } from '../../core/people/person-crew.js';
+import type { ReadInbox } from '../../core/people/read-inbox.js';
+import type { AskForServer } from '../../core/requests/ask-for-server.js';
+export interface PersonToolsDeps {
+    readInbox: ReadInbox;
+    openDelivery: OpenDelivery;
+    answerDelivery: AnswerDelivery;
+    doneDelivery: DoneDelivery;
+    askForServer: AskForServer;
+}
+/** The MCP server one request of a person's client is served by. */
+export declare function personServerFor(caller: PersonCaller, deps: PersonToolsDeps): McpServer;

package/dist/adapters/http/person-tools.js

@@ -0,0 +1,98 @@
+/**
+ * The tools a signed-in person's MCP client is served (Q20, decision 0057):
+ * their person ship's calls, which the gateway makes as the ship's crew, so
+ * the chat holds no crew token; and asking for an outside MCP server as
+ * their account (decision 0056).
+ */
+import { McpServer } from '@modelcontextprotocol/server';
+import { z } from 'zod';
+import { runningVersion } from './version.js';
+const INBOX_TOOL = {
+    name: 'aeolus_inbox',
+    title: 'Read your inbox',
+    description: 'What waits for you in your person ship: who sent each delivery, when, and its title, without its content. Lists at most 10, with how many wait in all.',
+    inputSchema: { type: 'object', properties: {} },
+};
+const OPEN_TOOL = {
+    name: 'aeolus_open',
+    title: 'Open a delivery',
+    description: 'Opens one delivery your inbox lists, by its deliveryId: who sent it, when, its title, content type and content. Opening it confirms you got it, so it waits no more.',
+    inputSchema: { type: 'object', properties: { deliveryId: { type: 'string' } }, required: ['deliveryId'] },
+};
+const ANSWER_TOOL = {
+    name: 'aeolus_answer',
+    title: 'Answer a delivery',
+    description: [
+        'Answers a delivery you opened, by its deliveryId: your answer goes to its sender, in reply to it, and the delivery is dealt with.',
+        'Give the payload and its content type, such as text/plain. A question (application/vnd.aeolus.question+json) is answered with',
+        'application/vnd.aeolus.answer+json and the payload {"questionId":"<its id>","option":<a key>,"note":"..."}, or a note alone. At most 64 KB.',
+    ].join(' '),
+    inputSchema: {
+        type: 'object',
+        properties: { deliveryId: { type: 'string' }, contentType: { type: 'string' }, payload: { type: 'string' } },
+        required: ['deliveryId', 'contentType', 'payload'],
+    },
+};
+const DONE_TOOL = {
+    name: 'aeolus_done',
+    title: 'Be done with a delivery',
+    description: 'Says you dealt with a delivery you opened, by its deliveryId, with no answer.',
+    inputSchema: { type: 'object', properties: { deliveryId: { type: 'string' } }, required: ['deliveryId'] },
+};
+const ASK_FOR_SERVER_TOOL = {
+    name: 'aeolus_ask_for_server',
+    title: 'Ask for an outside MCP server',
+    description: 'Asks an approver of your fleet to add an outside MCP server, by its https address, so its tools reach the fleet. The approver gives its credential. A request waits 7 days for a decision; another person asking for the same server joins it.',
+    inputSchema: { type: 'object', properties: { url: { type: 'string' } }, required: ['url'] },
+};
+const PERSON_TOOLS = [INBOX_TOOL, OPEN_TOOL, ANSWER_TOOL, DONE_TOOL, ASK_FOR_SERVER_TOOL];
+const deliveryArgumentsSchema = z.object({ deliveryId: z.string() });
+const askForServerArgumentsSchema = z.object({ url: z.string() });
+const answerArgumentsSchema = z.object({ deliveryId: z.string(), contentType: z.string(), payload: z.string() });
+/** A tool's answer as one text block of JSON. */
+const answered = (value) => ({ content: [{ type: 'text', text: JSON.stringify(value) }] });
+/** A tool error the person's model reads. */
+const toolError = (message) => ({ content: [{ type: 'text', text: message }], isError: true });
+/** The MCP server one request of a person's client is served by. */
+export function personServerFor(caller, deps) {
+    const mcp = new McpServer({ name: 'aeolus-gateway', version: runningVersion() }, { capabilities: { tools: {} } });
+    mcp.server.setRequestHandler('tools/list', () => ({ tools: PERSON_TOOLS }));
+    mcp.server.setRequestHandler('tools/call', async ({ params }) => {
+        switch (params.name) {
+            case INBOX_TOOL.name: {
+                const read = await deps.readInbox(caller);
+                return read.isOk ? answered(read.value) : toolError(read.error.message);
+            }
+            case OPEN_TOOL.name:
+            case DONE_TOOL.name: {
+                const sent = deliveryArgumentsSchema.safeParse(params.arguments);
+                if (!sent.success) {
+                    return toolError(`${params.name} takes the deliveryId your inbox lists`);
+                }
+                const asked = { caller, deliveryId: sent.data.deliveryId };
+                const dealt = params.name === OPEN_TOOL.name ? await deps.openDelivery(asked) : await deps.doneDelivery(asked);
+                return dealt.isOk ? answered(dealt.value) : toolError(dealt.error.message);
+            }
+            case ANSWER_TOOL.name: {
+                const sent = answerArgumentsSchema.safeParse(params.arguments);
+                if (!sent.success) {
+                    return toolError(`${ANSWER_TOOL.name} takes the deliveryId, a contentType and a payload`);
+                }
+                const dealt = await deps.answerDelivery({ caller, ...sent.data });
+                return dealt.isOk ? answered(dealt.value) : toolError(dealt.error.message);
+            }
+            case ASK_FOR_SERVER_TOOL.name: {
+                const sent = askForServerArgumentsSchema.safeParse(params.arguments);
+                if (!sent.success) {
+                    return toolError(`${ASK_FOR_SERVER_TOOL.name} takes the server's url`);
+                }
+                const asked = await deps.askForServer({ caller, url: sent.data.url });
+                return asked.isOk ? answered({ ...asked.value, expiresAt: asked.value.expiresAt.toISOString() }) : toolError(asked.error.message);
+            }
+            default:
+                return toolError(`No tool ${params.name}: your person ship has ${PERSON_TOOLS.map(({ name }) => name).join(', ')}`);
+        }
+    });
+    return mcp;
+}
+//# sourceMappingURL=person-tools.js.map

package/dist/adapters/http/person-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"person-tools.js","sourceRoot":"","sources":["../../../src/adapters/http/person-tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAQxB,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAU9C,MAAM,UAAU,GAAG;IACjB,IAAI,EAAE,cAAc;IACpB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EAAE,wJAAwJ;IACrK,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,EAAE;CACzD,CAAC;AAEF,MAAM,SAAS,GAAG;IAChB,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,iBAAiB;IACxB,WAAW,EAAE,sKAAsK;IACnL,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE;CACnH,CAAC;AAEF,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,eAAe;IACrB,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE;QACX,mIAAmI;QACnI,+HAA+H;QAC/H,6IAA6I;KAC9I,CAAC,IAAI,CAAC,GAAG,CAAC;IACX,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;QAC5G,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,EAAE,SAAS,CAAC;KACnD;CACF,CAAC;AAEF,MAAM,SAAS,GAAG;IAChB,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,yBAAyB;IAChC,WAAW,EAAE,+EAA+E;IAC5F,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,YAAY,CAAC,EAAE;CACnH,CAAC;AAEF,MAAM,mBAAmB,GAAG;IAC1B,IAAI,EAAE,uBAAuB;IAC7B,KAAK,EAAE,+BAA+B;IACtC,WAAW,EACT,gPAAgP;IAClP,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE;CACrG,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;AAE1F,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrE,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClE,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEjH,iDAAiD;AACjD,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAE7G,6CAA6C;AAC7C,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhH,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,IAAqB;IACzE,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClH,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAC5E,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC9D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1E,CAAC;YACD,KAAK,SAAS,CAAC,IAAI,CAAC;YACpB,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBACpB,MAAM,IAAI,GAAG,uBAAuB,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,SAAS,CAAC,GAAG,MAAM,CAAC,IAAI,wCAAwC,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,KAAK,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/G,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7E,CAAC;YACD,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,SAAS,CAAC,GAAG,WAAW,CAAC,IAAI,oDAAoD,CAAC,CAAC;gBAC5F,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAClE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7E,CAAC;YACD,KAAK,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC9B,MAAM,IAAI,GAAG,2BAA2B,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACrE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,SAAS,CAAC,GAAG,mBAAmB,CAAC,IAAI,yBAAyB,CAAC,CAAC;gBACzE,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACpI,CAAC;YACD;gBACE,OAAO,SAAS,CAAC,WAAW,MAAM,CAAC,IAAI,0BAA0B,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/adapters/http/scope-rows.d.ts

@@ -0,0 +1,10 @@
+/** The scopes every app ship gets (0046): shown locked on, and always sent. */
+export declare const EVERY_APP_SHIP_SCOPES: readonly string[];
+/** A form field that ticks a scope: `scope:<scope>`, one field per scope, as a form posts each name once. */
+export declare const SCOPE_FIELD_PREFIX = "scope:";
+/** One scope row: a locked row shows the scope ticked or not and sends nothing. */
+export declare function scopeRow(row: {
+    scope: string;
+    isLocked?: boolean;
+    isChecked?: boolean;
+}): string;

package/dist/adapters/http/scope-rows.js

@@ -0,0 +1,30 @@
+/**
+ * The scope rows a decision or a change shows (design B): each scope with
+ * its plain label and the scope itself in mono, messages:send and
+ * messages:receive locked on, as every app ship gets them (0046).
+ */
+import { escaped } from './html.js';
+import { icon } from './signal.js';
+/** The scopes every app ship gets (0046): shown locked on, and always sent. */
+export const EVERY_APP_SHIP_SCOPES = ['messages:send', 'messages:receive'];
+/** A scope's plain label, as the scope rows show it beside the scope itself. */
+const SCOPE_LABELS = {
+    'messages:send': 'Send',
+    'messages:receive': 'Receive',
+    'fleet:read': 'Read the fleet',
+};
+/** A form field that ticks a scope: `scope:<scope>`, one field per scope, as a form posts each name once. */
+export const SCOPE_FIELD_PREFIX = 'scope:';
+/** One scope row: a locked row shows the scope ticked or not and sends nothing. */
+export function scopeRow(row) {
+    const { scope } = row;
+    const isLocked = row.isLocked === true;
+    const isChecked = isLocked ? row.isChecked !== false : row.isChecked === true;
+    const label = escaped(SCOPE_LABELS[scope] ?? scope);
+    const checked = isChecked ? ' checked' : '';
+    const box = isLocked
+        ? `<input type="checkbox"${checked} disabled aria-label="${label}">`
+        : `<input type="checkbox" name="${SCOPE_FIELD_PREFIX}${escaped(scope)}"${checked} aria-label="${label}">`;
+    return `<label class="scope">${box}<span class="label">${label}</span><span class="mono">${escaped(scope)}</span>${isLocked ? `<span class="muted">${icon('lock', 12)}</span>` : ''}</label>`;
+}
+//# sourceMappingURL=scope-rows.js.map

package/dist/adapters/http/scope-rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-rows.js","sourceRoot":"","sources":["../../../src/adapters/http/scope-rows.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAEnC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAsB,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;AAE9F,gFAAgF;AAChF,MAAM,YAAY,GAA2B;IAC3C,eAAe,EAAE,MAAM;IACvB,kBAAkB,EAAE,SAAS;IAC7B,YAAY,EAAE,gBAAgB;CAC/B,CAAC;AAEF,6GAA6G;AAC7G,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AAE3C,mFAAmF;AACnF,MAAM,UAAU,QAAQ,CAAC,GAA+D;IACtF,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;IACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,QAAQ;QAClB,CAAC,CAAC,yBAAyB,OAAO,yBAAyB,KAAK,IAAI;QACpE,CAAC,CAAC,gCAAgC,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,gBAAgB,KAAK,IAAI,CAAC;IAC5G,OAAO,wBAAwB,GAAG,uBAAuB,KAAK,6BAA6B,OAAO,CAAC,KAAK,CAAC,UAAU,QAAQ,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC;AAChM,CAAC"}

package/dist/adapters/http/signal.d.ts

@@ -0,0 +1,61 @@
+/** A tone family of the console: every state shows in exactly one. */
+export type Tone = 'waiting' | 'active' | 'ok' | 'attention' | 'ended';
+/** An icon the pages draw, from the console's icon set (Lucide), as inline SVG paths. */
+export type Icon = 'plug' | 'power' | 'powerOff' | 'alert' | 'signIn' | 'house' | 'hourglass' | 'check' | 'x' | 'ban' | 'lock' | 'server' | 'laptop' | 'arrowLeftRight' | 'users' | 'shieldX' | 'timerOff' | 'signOut' | 'archive' | 'arrowLeft' | 'ship' | 'shield';
+export declare function icon(name: Icon, size?: number): string;
+/** A status as the console shows it: its tone, an icon and a label, never colour alone. */
+export declare function statusBadge(status: {
+    tone: Tone;
+    icon: Icon;
+    label: string;
+}): string;
+/** The large shape that leads a page: a full ring in a tone, dashed for a state that ended, around an icon or a number. */
+export declare function ring(shown: {
+    tone: Tone;
+    center: {
+        icon: Icon;
+    } | {
+        count: number;
+    } | {
+        text: string;
+        icon: Icon;
+    };
+    label: string;
+    isDashed?: boolean;
+    size?: number;
+}): string;
+/** An outside party's mark: the first two letters of its name on a tile, as the console's Avatar draws a ship. */
+export declare function partyMark(name: string): string;
+/** Who meets whom: the outside party's mark and the fleet's, side by side. */
+export declare function handshake(party: {
+    name: string;
+    fleet?: string;
+}): string;
+/** A tab of the pages' top bar. */
+export type Tab = 'overview' | 'outsideParties';
+/** Where a signed-out caller signs in: the gateway's own sign-in through pagasae, or nowhere, on a gateway that signs no one in. */
+export type SignInWay = 'pages' | 'none';
+/** What a signed-out caller is shown: why, and the one way to sign in, coming back to the page they asked for. */
+export declare function signInPrompt(shown: {
+    message: string;
+    way: SignInWay;
+    returnTo: string;
+}): string;
+/**
+ * A page a person meets on their way in, from an outside MCP client: the
+ * mark and its name above one centred column, no tabs. Its own script, if
+ * any, comes with its body.
+ */
+export declare function signInPage(page: {
+    title: string;
+    body: string;
+}): string;
+/** A whole Signal page: the top bar with its tabs, then the page's own body; a live page names itself to the live channel. */
+export declare function signalPage(page: {
+    title: string;
+    tab?: Tab;
+    body: string;
+    isWide?: boolean;
+    live?: string;
+    isSignedIn?: boolean;
+}): string;