@aeolus-fleet/gateway 0.0.0-stage → 0.28.0

package/dist/adapters/http/signal.js

@@ -0,0 +1,263 @@
+/**
+ * The gateway's pages in direction B, Signal (design/gateway-pages), drawn
+ * with the operator console's tokens: one large shape leads each page, a
+ * ring for a state or a count. The tokens are the console's own
+ * (aeolus-fleet packages/console/app/tokens.css), light by default and dark
+ * where the browser asks for it, as the pages have no theme switch.
+ */
+import { escaped } from './html.js';
+const LIGHT_TOKENS = `--background:oklch(0.99 0.002 247);--card:oklch(1 0 0);--muted:oklch(0.967 0.005 247);--secondary:oklch(0.955 0.007 247);--accent:oklch(0.95 0.009 247);
+--foreground:oklch(0.22 0.02 257);--muted-foreground:oklch(0.5 0.02 257);--border:oklch(0.912 0.008 247);--input:oklch(0.885 0.01 247);--ring:oklch(0.56 0.12 257);
+--primary:oklch(0.34 0.08 257);--primary-hover:oklch(0.29 0.075 257);--primary-foreground:oklch(0.985 0.003 247);--destructive:oklch(0.53 0.2 27);--destructive-foreground:oklch(0.99 0 0);
+--tone-waiting-bg:oklch(0.965 0.045 85);--tone-waiting-fg:oklch(0.47 0.1 62);--tone-waiting-border:oklch(0.87 0.08 80);
+--tone-active-bg:oklch(0.955 0.03 250);--tone-active-fg:oklch(0.45 0.14 257);--tone-active-border:oklch(0.86 0.06 252);
+--tone-ok-bg:oklch(0.96 0.04 155);--tone-ok-fg:oklch(0.44 0.1 155);--tone-ok-border:oklch(0.86 0.07 155);
+--tone-attention-bg:oklch(0.957 0.028 25);--tone-attention-fg:oklch(0.5 0.19 27);--tone-attention-border:oklch(0.86 0.07 25);
+--tone-ended-bg:oklch(0.957 0.005 247);--tone-ended-fg:oklch(0.47 0.015 257);--tone-ended-border:oklch(0.87 0.01 247);
+--shadow-sm:0 1px 2px oklch(0.2 0.02 257 / 0.06);`;
+const DARK_TOKENS = `color-scheme:dark;--background:oklch(0.172 0.012 257);--card:oklch(0.2 0.013 257);--muted:oklch(0.228 0.012 257);--secondary:oklch(0.255 0.013 257);--accent:oklch(0.26 0.014 257);
+--foreground:oklch(0.955 0.005 247);--muted-foreground:oklch(0.72 0.016 257);--border:oklch(0.29 0.014 257);--input:oklch(0.34 0.015 257);--ring:oklch(0.7 0.1 252);
+--primary:oklch(0.86 0.055 250);--primary-hover:oklch(0.92 0.035 250);--primary-foreground:oklch(0.21 0.035 257);--destructive:oklch(0.56 0.19 25);--destructive-foreground:oklch(0.99 0 0);
+--tone-waiting-bg:oklch(0.29 0.055 72);--tone-waiting-fg:oklch(0.87 0.11 82);--tone-waiting-border:oklch(0.41 0.075 72);
+--tone-active-bg:oklch(0.29 0.06 257);--tone-active-fg:oklch(0.85 0.08 252);--tone-active-border:oklch(0.42 0.09 257);
+--tone-ok-bg:oklch(0.29 0.05 155);--tone-ok-fg:oklch(0.86 0.1 155);--tone-ok-border:oklch(0.41 0.07 155);
+--tone-attention-bg:oklch(0.3 0.07 25);--tone-attention-fg:oklch(0.84 0.09 25);--tone-attention-border:oklch(0.45 0.11 25);
+--tone-ended-bg:oklch(0.255 0.01 257);--tone-ended-fg:oklch(0.78 0.015 257);--tone-ended-border:oklch(0.36 0.012 257);
+--shadow-sm:0 1px 2px oklch(0 0 0 / 0.3);`;
+const STYLE = `
+:root { color-scheme: light; ${LIGHT_TOKENS} --font-sans: "Geist", ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif; --font-mono: "Geist Mono", ui-monospace, "SF Mono", Menlo, Consolas, monospace; --radius-sm: 6px; --radius-md: 8px; --radius-lg: 10px; }
+@media (prefers-color-scheme: dark) { :root { ${DARK_TOKENS} } }
+* { box-sizing: border-box; }
+body { margin: 0; font: 14px/20px var(--font-sans); color: var(--foreground); background: var(--background); }
+a { color: inherit; }
+.top { display: flex; align-items: center; gap: 16px; height: 56px; padding: 0 16px; border-bottom: 1px solid var(--border); }
+.mark { display: flex; align-items: center; gap: 8px; font-weight: 600; text-decoration: none; }
+.tabs { display: flex; gap: 4px; }
+.tab { display: flex; align-items: center; gap: 6px; height: 32px; padding: 0 10px; border-radius: var(--radius-sm); color: var(--muted-foreground); text-decoration: none; }
+.tab[aria-current="page"] { color: var(--foreground); background: var(--secondary); }
+main { max-width: 720px; margin: 0 auto; padding: 32px 16px; display: grid; gap: 24px; }
+.lead { display: flex; align-items: center; gap: 20px; }
+.lead h1 { margin: 0; font-size: 22px; line-height: 28px; font-weight: 600; }
+.ring { flex: none; }
+.card { display: grid; gap: 12px; padding: 16px; border: 1px solid var(--border); border-radius: var(--radius-lg); background: var(--card); box-shadow: var(--shadow-sm); }
+.card h2 { margin: 0; font-size: 15px; line-height: 20px; font-weight: 600; }
+.card p { margin: 0; }
+.muted { color: var(--muted-foreground); }
+.badge { display: inline-flex; align-items: center; gap: 4px; padding: 0 6px; height: 20px; border: 1px solid; border-radius: var(--radius-sm); font-size: 12px; font-weight: 500; }
+.tone-waiting { color: var(--tone-waiting-fg); background: var(--tone-waiting-bg); border-color: var(--tone-waiting-border); }
+.tone-active { color: var(--tone-active-fg); background: var(--tone-active-bg); border-color: var(--tone-active-border); }
+.tone-ok { color: var(--tone-ok-fg); background: var(--tone-ok-bg); border-color: var(--tone-ok-border); }
+.tone-attention { color: var(--tone-attention-fg); background: var(--tone-attention-bg); border-color: var(--tone-attention-border); }
+.tone-ended { color: var(--tone-ended-fg); background: var(--tone-ended-bg); border-color: var(--tone-ended-border); }
+.actions { display: flex; flex-wrap: wrap; gap: 8px; }
+form { margin: 0; }
+button, .button { display: inline-flex; align-items: center; justify-content: center; gap: 6px; height: 36px; padding: 0 14px; border: 1px solid var(--input); border-radius: var(--radius-md); font: inherit; font-weight: 500; color: var(--foreground); background: var(--card); text-decoration: none; cursor: pointer; }
+button.primary, .button.primary { color: var(--primary-foreground); background: var(--primary); border-color: var(--primary); }
+button.primary:hover, .button.primary:hover { background: var(--primary-hover); }
+button.destructive { color: var(--destructive-foreground); background: var(--destructive); border-color: var(--destructive); }
+button:focus-visible, .button:focus-visible, .tab:focus-visible { outline: 2px solid var(--ring); outline-offset: 2px; }
+.alert { border-width: 1px; border-style: solid; }
+.party-mark { display: inline-flex; align-items: center; justify-content: center; flex: none; width: 40px; height: 40px; border-radius: var(--radius-md); background: var(--secondary); border: 1px solid var(--border); font: 600 13px/1 var(--font-mono); }
+.handshake { display: flex; align-items: center; justify-content: center; gap: 12px; }
+.handshake figure { margin: 0; display: grid; justify-items: center; gap: 4px; font-size: 12px; }
+.fleet-mark { display: inline-flex; }
+.split { display: grid; gap: 24px; grid-template-columns: minmax(0, 1fr); }
+@media (min-width: 900px) { main.wide { max-width: 1040px; } .split { grid-template-columns: minmax(0, 1fr) 280px; } }
+.queue { display: grid; gap: 8px; align-content: start; }
+.queue h2 { margin: 0; font-size: 12px; font-weight: 500; color: var(--muted-foreground); }
+.item { display: flex; align-items: center; gap: 12px; padding: 10px 12px; border: 1px solid var(--border); border-radius: var(--radius-lg); background: var(--card); text-decoration: none; }
+.item[aria-current="true"] { border-color: var(--primary); }
+.item .text { display: grid; min-width: 0; flex: 1; } .item .text span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.tag { display: inline-flex; align-items: center; gap: 4px; font-size: 12px; color: var(--muted-foreground); }
+.mono { font-family: var(--font-mono); font-size: 12px; }
+.field { display: grid; gap: 4px; } .field > span { font-size: 13px; font-weight: 500; }
+input[type="text"], input[type="password"], input[type="number"], input[type="url"], select { height: 36px; padding: 0 10px; border: 1px solid var(--input); border-radius: var(--radius-md); background: var(--background); color: var(--foreground); font: inherit; }
+.scope { display: flex; align-items: center; gap: 10px; padding: 8px 10px; border: 1px solid var(--border); border-radius: var(--radius-md); }
+.scope .label { flex: 1; }
+.scopes { display: grid; gap: 6px; }
+fieldset { border: 0; margin: 0; padding: 0; display: grid; gap: 8px; }
+legend { font-size: 13px; font-weight: 500; padding: 0; margin-bottom: 4px; }
+main.centred { max-width: 440px; min-height: 100vh; align-content: center; justify-items: center; text-align: center; }
+main.centred > * { width: 100%; } main.centred p, main.centred h1 { margin: 0; } main.centred { gap: 16px; }
+main.centred > .mark, main.centred > .ring, main.centred > .badge { width: auto; }
+.tiles { display: grid; gap: 12px; grid-template-columns: 1fr 1fr; }
+@media (max-width: 480px) { .tiles { grid-template-columns: 1fr; } }
+.tile { display: grid; gap: 4px; justify-items: center; align-content: center; height: auto; min-height: 112px; padding: 16px; border-radius: var(--radius-lg); text-align: center; }
+.tile:hover { border-color: var(--primary); }
+.going-on { display: inline-flex; align-items: center; gap: 6px; font-size: 12px; color: var(--muted-foreground); }
+.going-on::before { content: ""; width: 8px; height: 8px; border-radius: 50%; background: var(--tone-ok-fg); }
+.tab { white-space: nowrap; }
+@media (max-width: 480px) { .top .label { display: none; } .top { gap: 8px; } }
+.sign-out { margin-left: auto; } .sign-out button { height: 32px; border: 0; background: transparent; color: var(--muted-foreground); }
+.answers { display: grid; gap: 8px; } .answers button { height: 44px; }
+button.pick { outline: 2px dashed var(--ring); outline-offset: 2px; }
+.payload { margin: 0; white-space: pre-wrap; overflow-wrap: anywhere; font: inherit; }
+textarea { padding: 8px 10px; border: 1px solid var(--input); border-radius: var(--radius-md); background: var(--background); color: var(--foreground); font: inherit; resize: vertical; }
+form > button.item { width: 100%; height: auto; justify-content: flex-start; text-align: left; font-weight: 400; }
+.live-status { position: fixed; right: 16px; bottom: 16px; margin: 0; }
+.party-cards { display: grid; gap: 12px; grid-template-columns: repeat(auto-fill, minmax(260px, 1fr)); }
+.party-card { color: inherit; text-decoration: none; display: grid; grid-template-columns: auto minmax(0, 1fr); gap: 8px 12px; padding: 12px; border: 1px solid var(--border); border-radius: var(--radius-lg); background: var(--card); }
+.party-card:hover { border-color: var(--ring, var(--primary)); }
+.party-card .text { display: grid; min-width: 0; } .party-card .text > span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.party-card .facts { grid-column: 1 / -1; display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
+.tag.protocol { padding: 0 4px; border: 1px solid var(--border); border-radius: var(--radius-sm); font: 600 10px/16px var(--font-mono); color: var(--foreground); }
+.back { display: inline-flex; align-items: center; gap: 6px; color: var(--primary); text-decoration: none; font-size: 14px; }
+.party-head { display: grid; justify-items: center; gap: 8px; }
+.party-head .facts { display: flex; flex-wrap: wrap; justify-content: center; gap: 8px; }
+.fact-rows { margin: 0; padding: 0; border: 1px solid var(--border); border-radius: var(--radius-lg); background: var(--card); }
+.fact-rows > div { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 8px; padding: 12px 16px; border-top: 1px solid var(--border); }
+.fact-rows > div:first-child { border-top: 0; }
+.fact-rows dt { display: inline-flex; align-items: center; gap: 8px; color: var(--muted-foreground); font-size: 13px; }
+.fact-rows dd { margin: 0; display: flex; flex-wrap: wrap; justify-content: flex-end; gap: 4px; min-width: 0; overflow-wrap: anywhere; text-align: right; }
+.fact-rows dd a { margin-left: 8px; color: var(--primary); font-size: 13px; font-weight: 500; text-decoration: none; }
+.steps { margin: 0; padding: 0; list-style: none; display: grid; grid-template-columns: repeat(3, 1fr); gap: 8px; font-size: 12px; color: var(--muted-foreground); }
+.steps li { padding-top: 8px; border-top: 4px solid var(--border); }
+.steps li.done { border-top-color: var(--primary); color: var(--foreground); }
+.split-heading { display: flex; align-items: center; justify-content: space-between; gap: 8px; }
+.split-heading > span:first-child { display: inline-flex; align-items: center; gap: 8px; }
+.count { color: var(--muted-foreground); font-weight: 500; }
+.tool-rows { margin: 0; padding: 0; list-style: none; display: grid; gap: 8px; width: 100%; text-align: left; }
+.tool-rows li { display: grid; gap: 2px; padding: 8px 0; border-top: 1px solid var(--border); }
+.consequences { margin: 0; padding: 0; list-style: none; display: grid; gap: 8px; }
+.consequences li { display: flex; align-items: center; gap: 8px; }
+.counts { display: flex; flex-wrap: wrap; gap: 4px; align-items: center; margin: 4px 0 0; }
+@media (max-width: 640px) { .actions > * { flex: 1; } button, .button { height: 44px; width: 100%; } }
+`;
+const ICON_PATHS = {
+    plug: '<path d="M12 22v-5"/><path d="M9 8V2"/><path d="M15 8V2"/><path d="M18 8v5a4 4 0 0 1-4 4h-4a4 4 0 0 1-4-4V8Z"/>',
+    power: '<path d="M12 2v10"/><path d="M18.4 6.6a9 9 0 1 1-12.77.04"/>',
+    powerOff: '<path d="M18.36 6.64A9 9 0 0 1 20.77 15"/><path d="M6.16 6.16a9 9 0 1 0 12.68 12.68"/><path d="M12 2v4"/><path d="m2 2 20 20"/>',
+    alert: '<path d="m21.73 18-8-14a2 2 0 0 0-3.48 0l-8 14A2 2 0 0 0 4 21h16a2 2 0 0 0 1.73-3"/><path d="M12 9v4"/><path d="M12 17h.01"/>',
+    signIn: '<path d="M15 3h4a2 2 0 0 1 2 2v14a2 2 0 0 1-2 2h-4"/><path d="m10 17 5-5-5-5"/><path d="M15 12H3"/>',
+    house: '<path d="M15 21v-8a1 1 0 0 0-1-1h-4a1 1 0 0 0-1 1v8"/><path d="M3 10a2 2 0 0 1 .709-1.528l7-5.999a2 2 0 0 1 2.582 0l7 5.999A2 2 0 0 1 21 10v9a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/>',
+    hourglass: '<path d="M5 22h14"/><path d="M5 2h14"/><path d="M17 22v-4.172a2 2 0 0 0-.586-1.414L12 12l-4.414 4.414A2 2 0 0 0 7 17.828V22"/><path d="M7 2v4.172a2 2 0 0 0 .586 1.414L12 12l4.414-4.414A2 2 0 0 0 17 6.172V2"/>',
+    check: '<path d="M20 6 9 17l-5-5"/>',
+    x: '<path d="M18 6 6 18"/><path d="m6 6 12 12"/>',
+    ban: '<circle cx="12" cy="12" r="10"/><path d="m4.9 4.9 14.2 14.2"/>',
+    lock: '<rect width="18" height="11" x="3" y="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/>',
+    server: '<rect width="20" height="8" x="2" y="2" rx="2" ry="2"/><rect width="20" height="8" x="2" y="14" rx="2" ry="2"/><path d="M6 6h.01"/><path d="M6 18h.01"/>',
+    laptop: '<path d="M18 5a2 2 0 0 1 2 2v8.526a2 2 0 0 0 .212.897l1.068 2.127a1 1 0 0 1-.9 1.45H3.62a1 1 0 0 1-.9-1.45l1.068-2.127A2 2 0 0 0 4 15.526V7a2 2 0 0 1 2-2z"/><path d="M20.054 15.987H3.946"/>',
+    arrowLeftRight: '<path d="M8 3 4 7l4 4"/><path d="M4 7h16"/><path d="m16 21 4-4-4-4"/><path d="M20 17H4"/>',
+    signOut: '<path d="m16 17 5-5-5-5"/><path d="M21 12H9"/><path d="M9 21H5a2 2 0 0 1-2-2V5a2 2 0 0 1 2-2h4"/>',
+    shieldX: '<path d="M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z"/><path d="m14.5 9.5-5 5"/><path d="m9.5 9.5 5 5"/>',
+    timerOff: '<path d="M10 2h4"/><path d="M4.6 11a8 8 0 0 0 1.7 8.7 8 8 0 0 0 8.7 1.7"/><path d="M7.4 7.4a8 8 0 0 1 10.3 1 8 8 0 0 1 .9 10.2"/><path d="m2 2 20 20"/><path d="M12 12v-2"/>',
+    archive: '<rect width="20" height="5" x="2" y="3" rx="1"/><path d="M4 8v11a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8"/><path d="M10 12h4"/>',
+    arrowLeft: '<path d="m12 19-7-7 7-7"/><path d="M19 12H5"/>',
+    ship: '<path d="M12 10.189V14"/><path d="M12 2v3"/><path d="M19 13V7a2 2 0 0 0-2-2H7a2 2 0 0 0-2 2v6"/><path d="M19.38 20A11.6 11.6 0 0 0 21 14l-8.188-3.639a2 2 0 0 0-1.624 0L3 14a11.6 11.6 0 0 0 2.81 7.76"/><path d="M2 21c.6.5 1.2 1 2.5 1 2.5 0 2.5-2 5-2 1.3 0 1.9.5 2.5 1s1.2 1 2.5 1c2.5 0 2.5-2 5-2 1.3 0 1.9.5 2.5 1"/>',
+    shield: '<path d="M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z"/>',
+    users: '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.87"/><path d="M16 3.13a4 4 0 0 1 0 7.75"/>',
+};
+export function icon(name, size = 16) {
+    return `<svg width="${size}" height="${size}" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">${ICON_PATHS[name]}</svg>`;
+}
+/** A status as the console shows it: its tone, an icon and a label, never colour alone. */
+export function statusBadge(status) {
+    return `<span class="badge tone-${status.tone}">${icon(status.icon, 12)}${escaped(status.label)}</span>`;
+}
+/** The app mark from aeolus-fleet brand/aeolus-mark.svg: the Ship glyph on a tile in --primary, its stroke in --primary-foreground. */
+const MARK = `<svg width="24" height="24" viewBox="0 0 32 32" aria-hidden="true"><rect width="32" height="32" rx="7" fill="var(--primary)"/><g fill="none" stroke="var(--primary-foreground)" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" transform="translate(6 6) scale(0.8333)"><path d="M12 2v2"/><path d="M12 9.189V13"/><path d="M19 12V6a2 2 0 00-2-2H7a2 2 0 00-2 2v6"/><path d="M19.38 19A11.6 11.6 0 0021 13l-8.188-3.639a2 2 0 00-1.624 0L3 13.001a11.6 11.6 0 002.81 7.76"/><path d="M2 20c.6.5 1.2 1 2.5 1 2.5 0 2.5-2 5-2 1.3 0 1.9.5 2.5 1s1.2 1 2.5 1c2.5 0 2.5-2 5-2 1.3 0 1.9.5 2.5 1"/></g></svg>`;
+const MARK_LARGE = MARK.replace('width="24" height="24"', 'width="40" height="40"');
+const RING_SIZE = 96;
+const RING_STROKE = 6;
+/** The large shape that leads a page: a full ring in a tone, dashed for a state that ended, around an icon or a number. */
+export function ring(shown) {
+    const size = shown.size ?? RING_SIZE;
+    const radius = (size - RING_STROKE) / 2;
+    const middle = size / 2;
+    const dash = shown.isDashed === true ? ' stroke-dasharray="4 6"' : '';
+    const iconSize = Math.round(size * 0.3);
+    let center;
+    if ('count' in shown.center) {
+        center = `<text x="${middle}" y="${middle}" text-anchor="middle" dominant-baseline="central" font-size="28" font-weight="600" fill="currentColor">${shown.center.count}</text>`;
+    }
+    else if ('text' in shown.center) {
+        // An icon above a short text, such as the time left; the page may update the text.
+        center = `<foreignObject x="${middle - 14}" y="${middle - 34}" width="28" height="28"><div xmlns="http://www.w3.org/1999/xhtml" style="color:var(--tone-${shown.tone}-fg)">${icon(shown.center.icon, 24)}</div></foreignObject><text x="${middle}" y="${middle + 10}" text-anchor="middle" dominant-baseline="central" font-size="22" font-weight="600" fill="currentColor" data-time-left>${escaped(shown.center.text)}</text><text x="${middle}" y="${middle + 34}" text-anchor="middle" font-size="12" fill="var(--muted-foreground)">left</text>`;
+    }
+    else {
+        center = `<foreignObject x="${middle - iconSize / 2}" y="${middle - iconSize / 2}" width="${iconSize}" height="${iconSize}"><div xmlns="http://www.w3.org/1999/xhtml" style="color:var(--tone-${shown.tone}-fg)">${icon(shown.center.icon, iconSize)}</div></foreignObject>`;
+    }
+    return `<svg class="ring" width="${size}" height="${size}" viewBox="0 0 ${size} ${size}" role="img" aria-label="${escaped(shown.label)}"><circle cx="${middle}" cy="${middle}" r="${radius}" fill="none" stroke="var(--tone-${shown.tone}-fg)" stroke-width="${RING_STROKE}"${dash}/>${center}</svg>`;
+}
+/** An outside party's mark: the first two letters of its name on a tile, as the console's Avatar draws a ship. */
+export function partyMark(name) {
+    return `<span class="party-mark" aria-hidden="true">${escaped(name.replaceAll(/[^\p{L}\p{N}]/gu, '').slice(0, 2).toUpperCase())}</span>`;
+}
+/** Who meets whom: the outside party's mark and the fleet's, side by side. */
+export function handshake(party) {
+    return `<div class="handshake"><figure>${partyMark(party.name)}<figcaption>${escaped(party.name)}</figcaption></figure><span class="muted">${icon('arrowLeftRight', 16)}</span><figure><span class="fleet-mark">${MARK_LARGE}</span><figcaption>${escaped(party.fleet ?? 'Fleet')}</figcaption></figure></div>`;
+}
+const TABS = {
+    overview: { label: 'Overview', icon: 'house', href: '/overview' },
+    outsideParties: { label: 'Outside parties', icon: 'plug', href: '/outside-parties' },
+};
+function topBar(current, isSignedIn) {
+    const tabs = Object.entries(TABS)
+        .map(([tab, shown]) => `<a class="tab" href="${shown.href}" aria-label="${escaped(shown.label)}"${tab === current ? ' aria-current="page"' : ''}>${icon(shown.icon, 14)}<span class="label">${escaped(shown.label)}</span></a>`)
+        .join('');
+    // A person signed in to the pages signs out here; a console session signs out in the console.
+    const signOut = isSignedIn ? `<form method="post" action="/sign-out" class="sign-out"><button aria-label="Sign out">${icon('signOut', 14)}<span class="label">Sign out</span></button></form>` : '';
+    return `<header class="top"><a class="mark" href="/overview">${MARK}Aeolus</a><nav class="tabs">${tabs}</nav>${signOut}</header>`;
+}
+/** What a signed-out caller is shown: why, and the one way to sign in, coming back to the page they asked for. */
+export function signInPrompt(shown) {
+    if (shown.way === 'none') {
+        return `<section class="card"><h2>This gateway signs no one in</h2><p class="muted">Its pages are for people signed in through pagasae, which its operator has not set.</p></section>`;
+    }
+    const link = `<a class="button" href="/sign-in?${new URLSearchParams({ return_to: shown.returnTo }).toString().replaceAll('&', '&amp;')}">${icon('signIn', 14)}Sign in</a>`;
+    return `<section class="card"><h2>${escaped(shown.message)}</h2><div class="actions">${link}</div></section>`;
+}
+/**
+ * What a live page runs: it opens /live for itself and swaps in each section
+ * it is sent; when the socket drops it shows Reconnecting and opens again
+ * with backoff, never for a refusal (4401 to 4404). Every minute it counts
+ * each days left down from its expiry, with no call to the gateway.
+ */
+const LIVE_SCRIPT = `(function (query) {
+  var DAY = 86400000, wait = 500, status = document.querySelector('[data-live-status]');
+  function countDown() {
+    document.querySelectorAll('[data-expires-at]').forEach(function (holder) {
+      var badge = holder.querySelector('.badge'), label = badge && badge.lastChild;
+      if (!label) return;
+      var days = Math.ceil((Date.parse(holder.getAttribute('data-expires-at')) - Date.now()) / DAY);
+      badge.className = 'badge ' + (days <= 0 ? 'tone-ended' : days <= 1 ? 'tone-attention' : 'tone-waiting');
+      label.textContent = days <= 0 ? 'Expired' : days <= 1 ? 'Last day' : days + ' d left';
+    });
+  }
+  function open() {
+    var socket = new WebSocket((location.protocol === 'https:' ? 'wss://' : 'ws://') + location.host + '/live?' + query);
+    socket.onopen = function () { wait = 500; status.hidden = true; };
+    socket.onmessage = function (event) {
+      var sections = JSON.parse(event.data).sections;
+      Object.keys(sections).forEach(function (name) {
+        var section = document.querySelector('[data-live="' + name + '"]');
+        if (section) section.innerHTML = sections[name];
+      });
+      countDown();
+    };
+    socket.onclose = function (event) {
+      if (event.code >= 4401 && event.code <= 4404) return;
+      status.hidden = false;
+      setTimeout(open, wait);
+      wait = Math.min(wait * 2, 10000);
+    };
+  }
+  open();
+  setInterval(countDown, 60000);
+})(document.currentScript.getAttribute('data-live-query'));`;
+/**
+ * A page a person meets on their way in, from an outside MCP client: the
+ * mark and its name above one centred column, no tabs. Its own script, if
+ * any, comes with its body.
+ */
+export function signInPage(page) {
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escaped(page.title)}</title><style>${STYLE}</style></head><body><main class="centred"><div class="mark">${MARK}Aeolus</div>${page.body}</main></body></html>`;
+}
+/** A whole Signal page: the top bar with its tabs, then the page's own body; a live page names itself to the live channel. */
+export function signalPage(page) {
+    const live = page.live === undefined
+        ? ''
+        : `<p data-live-status hidden class="live-status">${statusBadge({ tone: 'waiting', icon: 'hourglass', label: 'Reconnecting' })}</p><script data-live-query="${escaped(page.live)}">${LIVE_SCRIPT}</script>`;
+    return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${escaped(page.title)}</title><style>${STYLE}</style></head><body>${topBar(page.tab, page.isSignedIn === true)}<main${page.isWide === true ? ' class="wide"' : ''}>${page.body}</main>${live}</body></html>`;
+}
+//# sourceMappingURL=signal.js.map

package/dist/adapters/http/signal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal.js","sourceRoot":"","sources":["../../../src/adapters/http/signal.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,YAAY,GAAG;;;;;;;;kDAQ6B,CAAC;AAEnD,MAAM,WAAW,GAAG;;;;;;;;0CAQsB,CAAC;AAE3C,MAAM,KAAK,GAAG;+BACiB,YAAY;gDACK,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgG1D,CAAC;AAQF,MAAM,UAAU,GAAyB;IACvC,IAAI,EAAE,iHAAiH;IACvH,KAAK,EAAE,8DAA8D;IACrE,QAAQ,EAAE,iIAAiI;IAC3I,KAAK,EAAE,+HAA+H;IACtI,MAAM,EAAE,qGAAqG;IAC7G,KAAK,EAAE,iLAAiL;IACxL,SAAS,EAAE,kNAAkN;IAC7N,KAAK,EAAE,6BAA6B;IACpC,CAAC,EAAE,8CAA8C;IACjD,GAAG,EAAE,gEAAgE;IACrE,IAAI,EAAE,+FAA+F;IACrG,MAAM,EAAE,0JAA0J;IAClK,MAAM,EAAE,+LAA+L;IACvM,cAAc,EAAE,2FAA2F;IAC3G,OAAO,EAAE,mGAAmG;IAC5G,OAAO,EAAE,iOAAiO;IAC1O,QAAQ,EAAE,8KAA8K;IACxL,OAAO,EAAE,0HAA0H;IACnI,SAAS,EAAE,gDAAgD;IAC3D,IAAI,EAAE,6TAA6T;IACnU,MAAM,EAAE,gLAAgL;IACxL,KAAK,EAAE,+JAA+J;CACvK,CAAC;AAEF,MAAM,UAAU,IAAI,CAAC,IAAU,EAAE,IAAI,GAAG,EAAE;IACxC,OAAO,eAAe,IAAI,aAAa,IAAI,8IAA8I,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;AACpN,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,MAAiD;IAC3E,OAAO,2BAA2B,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;AAC3G,CAAC;AAED,uIAAuI;AACvI,MAAM,IAAI,GAAG,8lBAA8lB,CAAC;AAE5mB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,wBAAwB,CAAC,CAAC;AAEpF,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,2HAA2H;AAC3H,MAAM,UAAU,IAAI,CAAC,KAAkJ;IACrK,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,SAAS,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IACxC,IAAI,MAAc,CAAC;IACnB,IAAI,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,GAAG,YAAY,MAAM,QAAQ,MAAM,2GAA2G,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;IAClL,CAAC;SAAM,IAAI,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAClC,mFAAmF;QACnF,MAAM,GAAG,qBAAqB,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,EAAE,8FAA8F,KAAK,CAAC,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,kCAAkC,MAAM,QAAQ,MAAM,GAAG,EAAE,0HAA0H,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,MAAM,QAAQ,MAAM,GAAG,EAAE,kFAAkF,CAAC;IACxhB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,qBAAqB,MAAM,GAAG,QAAQ,GAAG,CAAC,QAAQ,MAAM,GAAG,QAAQ,GAAG,CAAC,YAAY,QAAQ,aAAa,QAAQ,uEAAuE,KAAK,CAAC,IAAI,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,wBAAwB,CAAC;IAC/Q,CAAC;IACD,OAAO,4BAA4B,IAAI,aAAa,IAAI,kBAAkB,IAAI,IAAI,IAAI,4BAA4B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,iBAAiB,MAAM,SAAS,MAAM,QAAQ,MAAM,oCAAoC,KAAK,CAAC,IAAI,uBAAuB,WAAW,IAAI,IAAI,KAAK,MAAM,QAAQ,CAAC;AACxS,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,+CAA+C,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC;AAC3I,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,SAAS,CAAC,KAAuC;IAC/D,OAAO,kCAAkC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC,2CAA2C,UAAU,sBAAsB,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,8BAA8B,CAAC;AAClT,CAAC;AAKD,MAAM,IAAI,GAA6D;IACrE,QAAQ,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE;IACjE,cAAc,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE;CACrF,CAAC;AAEF,SAAS,MAAM,CAAC,OAAwB,EAAE,UAAmB;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,wBAAwB,KAAK,CAAC,IAAI,iBAAiB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,uBAAuB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC;SAC/N,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,8FAA8F;IAC9F,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,yFAAyF,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,qDAAqD,CAAC,CAAC,CAAC,EAAE,CAAC;IACpM,OAAO,wDAAwD,IAAI,+BAA+B,IAAI,SAAS,OAAO,WAAW,CAAC;AACpI,CAAC;AAKD,kHAAkH;AAClH,MAAM,UAAU,YAAY,CAAC,KAA4D;IACvF,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,+KAA+K,CAAC;IACzL,CAAC;IACD,MAAM,IAAI,GAAG,oCAAoC,IAAI,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC;IAC5K,OAAO,6BAA6B,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,6BAA6B,IAAI,kBAAkB,CAAC;AAChH,CAAC;AAED;;;;;GAKG;AACH,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4DA+BwC,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAqC;IAC9D,OAAO,yIAAyI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,gEAAgE,IAAI,eAAe,IAAI,CAAC,IAAI,uBAAuB,CAAC;AAChT,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,UAAU,CAAC,IAAuG;IAChI,MAAM,IAAI,GACR,IAAI,CAAC,IAAI,KAAK,SAAS;QACrB,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,kDAAkD,WAAW,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,gCAAgC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,WAAW,WAAW,CAAC;IAChN,OAAO,yIAAyI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,wBAAwB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,UAAU,IAAI,gBAAgB,CAAC;AAC7V,CAAC"}

package/dist/adapters/http/version.d.ts

@@ -0,0 +1,6 @@
+/**
+ * The version this gateway process runs, read from its package.json: what
+ * runs, not what a deploy meant to ship. This file sits at src/adapters/http
+ * or dist/adapters/http: the package root is three levels up.
+ */
+export declare function runningVersion(): string;

package/dist/adapters/http/version.js

@@ -0,0 +1,12 @@
+import { readFileSync } from 'node:fs';
+import { z } from 'zod';
+const packageJson = z.object({ version: z.string() });
+/**
+ * The version this gateway process runs, read from its package.json: what
+ * runs, not what a deploy meant to ship. This file sits at src/adapters/http
+ * or dist/adapters/http: the package root is three levels up.
+ */
+export function runningVersion() {
+    return packageJson.parse(JSON.parse(readFileSync(new URL('../../../package.json', import.meta.url), 'utf8'))).version;
+}
+//# sourceMappingURL=version.js.map

package/dist/adapters/http/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../../src/adapters/http/version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxH,CAAC"}

package/dist/adapters/mcp/mcp-servers.d.ts

@@ -0,0 +1,2 @@
+import type { McpServers } from '../../core/mcp-out/ports.js';
+export declare function createMcpServers(): McpServers;

package/dist/adapters/mcp/mcp-servers.js

@@ -0,0 +1,154 @@
+/**
+ * The outside MCP servers, over Streamable HTTP with the official SDK. One
+ * connection per listing or call, as MCP 2026-07-28 keeps no session. A
+ * failure reads as where it happened: before the call left the gateway
+ * (notSent, nothing ran) or after (unanswered, it may have run), so the core
+ * decides whether it may hand the call again (interop 5.2).
+ */
+import { Client, ClientCredentialsProvider, ProtocolError, SdkError, SdkErrorCode, SdkHttpError, StreamableHTTPClientTransport, UnauthorizedError, } from '@modelcontextprotocol/client';
+import { z } from 'zod';
+import { err, ok } from '../../core/shared/result.js';
+/** How the gateway names itself to outside MCP servers. */
+const CLIENT_INFO = { name: 'aeolus-gateway', version: '1' };
+/** HTTP statuses that refuse the gateway's credential: the server ran nothing. */
+const HTTP_UNAUTHORIZED = 401;
+const HTTP_FORBIDDEN = 403;
+const jsonObject = z.record(z.string(), z.unknown());
+const toolAnnotations = z.object({
+    title: z.string().optional(),
+    readOnlyHint: z.boolean().optional(),
+    destructiveHint: z.boolean().optional(),
+    idempotentHint: z.boolean().optional(),
+    openWorldHint: z.boolean().optional(),
+});
+const listedTool = z.object({
+    name: z.string(),
+    title: z.string().optional(),
+    description: z.string().optional(),
+    inputSchema: jsonObject,
+    outputSchema: jsonObject.optional(),
+    annotations: toolAnnotations.optional(),
+});
+const callResult = z.object({
+    content: z.array(z.unknown()).default([]),
+    structuredContent: jsonObject.optional(),
+    isError: z.boolean().optional(),
+});
+function transportFor(connection) {
+    const url = new URL(connection.url);
+    const { credential } = connection;
+    switch (credential.kind) {
+        case 'bearer':
+            return new StreamableHTTPClientTransport(url, { requestInit: { headers: { authorization: `Bearer ${credential.token}` } } });
+        case 'clientCredentials':
+            return new StreamableHTTPClientTransport(url, {
+                authProvider: new ClientCredentialsProvider({
+                    clientId: credential.clientId,
+                    clientSecret: credential.clientSecret,
+                    expectedIssuer: credential.issuer,
+                    ...(credential.scope === undefined ? {} : { scope: credential.scope }),
+                }),
+            });
+    }
+}
+async function connected(connection) {
+    const client = new Client(CLIENT_INFO, { versionNegotiation: { mode: 'auto' } });
+    await client.connect(transportFor(connection));
+    return client;
+}
+function reasonOf(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** The server refused the gateway's credential, or could not be reached: the request did not run. */
+function isNotSent(error) {
+    if (error instanceof UnauthorizedError) {
+        return true;
+    }
+    if (error instanceof SdkHttpError) {
+        return error.status === HTTP_UNAUTHORIZED || error.status === HTTP_FORBIDDEN;
+    }
+    if (error instanceof SdkError) {
+        return error.code === SdkErrorCode.SendFailed && isConnectionRefused(error.cause);
+    }
+    return error instanceof TypeError && isConnectionRefused(error.cause);
+}
+const systemError = z.object({ code: z.string() });
+/** No connection was made, so nothing was sent. */
+function isConnectionRefused(cause) {
+    const failure = systemError.safeParse(cause);
+    return failure.success && ['ECONNREFUSED', 'ENOTFOUND', 'EHOSTUNREACH'].includes(failure.data.code);
+}
+/** A JSON-RPC error the server answered with: an answer, so the call is over, and it ran nothing. */
+function protocolErrorResult(error) {
+    return { content: [{ type: 'text', text: `MCP error ${String(error.code)}: ${error.message}` }], isError: true };
+}
+function toolOf(tool) {
+    return {
+        name: tool.name,
+        ...(tool.title === undefined ? {} : { title: tool.title }),
+        ...(tool.description === undefined ? {} : { description: tool.description }),
+        inputSchema: tool.inputSchema,
+        ...(tool.outputSchema === undefined ? {} : { outputSchema: tool.outputSchema }),
+        ...(tool.annotations === undefined ? {} : { annotations: tool.annotations }),
+    };
+}
+async function listEveryTool(client) {
+    const tools = [];
+    let cursor;
+    do {
+        const page = await client.listTools(cursor === undefined ? {} : { cursor });
+        tools.push(...page.tools.map((tool) => toolOf(listedTool.parse(tool))));
+        cursor = page.nextCursor;
+    } while (cursor !== undefined);
+    return tools;
+}
+async function callOnce(client, call) {
+    const answer = callResult.parse(await client.callTool({ name: call.name, arguments: { ...call.arguments } }, { timeout: call.timeoutMs }));
+    return {
+        kind: 'answered',
+        result: {
+            content: answer.content,
+            ...(answer.structuredContent === undefined ? {} : { structuredContent: answer.structuredContent }),
+            isError: answer.isError ?? false,
+        },
+    };
+}
+export function createMcpServers() {
+    return {
+        async listTools(connection) {
+            let client;
+            try {
+                client = await connected(connection);
+                return ok(await listEveryTool(client));
+            }
+            catch (error) {
+                return err({ kind: 'unreachable', reason: reasonOf(error) });
+            }
+            finally {
+                await client?.close();
+            }
+        },
+        async callTool(connection, call) {
+            let client;
+            try {
+                client = await connected(connection);
+            }
+            catch (error) {
+                return { kind: 'notSent', reason: reasonOf(error) };
+            }
+            try {
+                return await callOnce(client, call);
+            }
+            catch (error) {
+                if (error instanceof ProtocolError) {
+                    return { kind: 'answered', result: protocolErrorResult(error) };
+                }
+                return isNotSent(error) ? { kind: 'notSent', reason: reasonOf(error) } : { kind: 'unanswered', reason: reasonOf(error) };
+            }
+            finally {
+                await client.close();
+            }
+        },
+    };
+}
+//# sourceMappingURL=mcp-servers.js.map

package/dist/adapters/mcp/mcp-servers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-servers.js","sourceRoot":"","sources":["../../../src/adapters/mcp/mcp-servers.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,MAAM,EACN,yBAAyB,EACzB,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,6BAA6B,EAC7B,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAEtD,2DAA2D;AAC3D,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAE7D,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,CAAC;AAE3B,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAErD,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE;IACnC,WAAW,EAAE,eAAe,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,iBAAiB,EAAE,UAAU,CAAC,QAAQ,EAAE;IACxC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,UAA+B;IACnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;IAClC,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,IAAI,6BAA6B,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/H,KAAK,mBAAmB;YACtB,OAAO,IAAI,6BAA6B,CAAC,GAAG,EAAE;gBAC5C,YAAY,EAAE,IAAI,yBAAyB,CAAC;oBAC1C,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,cAAc,EAAE,UAAU,CAAC,MAAM;oBACjC,GAAG,CAAC,UAAU,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;iBACvE,CAAC;aACH,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,UAA+B;IACtD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,qGAAqG;AACrG,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,MAAM,KAAK,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc,CAAC;IAC/E,CAAC;IACD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,UAAU,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,KAAK,YAAY,SAAS,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEnD,mDAAmD;AACnD,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,qGAAqG;AACrG,SAAS,mBAAmB,CAAC,KAAoB;IAC/C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,MAAM,CAAC,IAAgC;IAC9C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5E,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAc;IACzC,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,MAA0B,CAAC;IAC/B,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC,QAAQ,MAAM,KAAK,SAAS,EAAE;IAC/B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,IAAc;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3I,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE;YACN,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClG,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,KAAK;SACjC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,UAAU;YACxB,IAAI,MAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;gBACrC,OAAO,EAAE,CAAC,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;YACxB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI;YAC7B,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;oBACnC,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClE,CAAC;gBACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3H,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/oauth/client-metadata-documents.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Clients' metadata documents (CIMD), fetched from their client id URLs: a
+ * small JSON document, read with a short timeout and no redirect followed,
+ * since the URL is the client's identity.
+ */
+import type { ClientMetadataDocuments } from '../../core/oauth/ports.js';
+export declare function createClientMetadataDocuments(options: {
+    timeoutMs: number;
+}): ClientMetadataDocuments;

package/dist/adapters/oauth/client-metadata-documents.js

@@ -0,0 +1,25 @@
+import { err, ok } from '../../core/shared/result.js';
+/** The largest document the gateway reads (CIMD recommends at most 5 KB). */
+const DOCUMENT_MAX_BYTES = 5 * 1024;
+export function createClientMetadataDocuments(options) {
+    return {
+        fetch: async (url) => {
+            try {
+                const response = await fetch(url, { redirect: 'manual', signal: AbortSignal.timeout(options.timeoutMs), headers: { accept: 'application/json' } });
+                if (response.status !== 200) {
+                    return err({ reason: `it answered ${String(response.status)}` });
+                }
+                const body = await response.arrayBuffer();
+                if (body.byteLength > DOCUMENT_MAX_BYTES) {
+                    return err({ reason: `it is over ${String(DOCUMENT_MAX_BYTES)} bytes` });
+                }
+                const document = JSON.parse(new TextDecoder().decode(body));
+                return ok(document);
+            }
+            catch (error) {
+                return err({ reason: error instanceof Error ? error.message : String(error) });
+            }
+        },
+    };
+}
+//# sourceMappingURL=client-metadata-documents.js.map

package/dist/adapters/oauth/client-metadata-documents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-metadata-documents.js","sourceRoot":"","sources":["../../../src/adapters/oauth/client-metadata-documents.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,6BAA6B,CAAC;AAEtD,6EAA6E;AAC7E,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,CAAC;AAEpC,MAAM,UAAU,6BAA6B,CAAC,OAA8B;IAC1E,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;gBACnJ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,eAAe,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1C,IAAI,IAAI,CAAC,UAAU,GAAG,kBAAkB,EAAE,CAAC;oBACzC,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,cAAc,MAAM,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrE,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/adapters/pagasae/pagasae-client.d.ts

@@ -0,0 +1,8 @@
+import type { Pagasae } from '../../core/sign-in/ports.js';
+export declare function createPagasae(options: {
+    url: string;
+    clientId: string;
+    clientSecret: string;
+    redirectUri: string;
+    timeoutMs: number;
+}): Pagasae;

package/dist/adapters/pagasae/pagasae-client.js

@@ -0,0 +1,88 @@
+/**
+ * pagasae, the one identity provider (decision 0054), as the gateway's
+ * OpenID Connect provider: its authorize address, and its token endpoint,
+ * where the gateway redeems a code and refreshes tokens with its own secret
+ * (client_secret_post).
+ * The access token pagasae answers is the account token for the fleet the
+ * person picked; the gateway reads what it names, and core checks its
+ * signature on every call it is presented to.
+ */
+import { accountTokenClaimsSchema } from '@aeolus-fleet/common';
+import { z } from 'zod';
+import { err, ok } from '../../core/shared/result.js';
+const HTTP_SERVER_ERROR = 500;
+const tokenAnswerSchema = z.object({ access_token: z.string(), refresh_token: z.string() });
+const errorAnswerSchema = z.object({ error: z.string() });
+function claimsOf(accountToken) {
+    const payload = accountToken.split('.')[1];
+    if (payload === undefined) {
+        return undefined;
+    }
+    try {
+        return JSON.parse(Buffer.from(payload, 'base64url').toString('utf8'));
+    }
+    catch {
+        return undefined;
+    }
+}
+export function createPagasae(options) {
+    /** One call of pagasae's token endpoint with the gateway's secret: the tokens, or why not, refused only when pagasae said so. */
+    const tokenEndpoint = async (grant) => {
+        let response;
+        try {
+            response = await fetch(`${options.url}/oauth/token`, {
+                method: 'POST',
+                headers: { 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },
+                body: new URLSearchParams({ ...grant, client_id: options.clientId, client_secret: options.clientSecret }).toString(),
+                redirect: 'manual',
+                signal: AbortSignal.timeout(options.timeoutMs),
+            });
+        }
+        catch {
+            return err({ kind: 'unavailable', reason: 'pagasae did not answer' });
+        }
+        const body = await response.json().catch(() => undefined);
+        if (response.status >= HTTP_SERVER_ERROR) {
+            return err({ kind: 'unavailable', reason: `pagasae answered ${String(response.status)}` });
+        }
+        if (!response.ok) {
+            const refusal = errorAnswerSchema.safeParse(body);
+            return err({ kind: 'refused', reason: refusal.success ? refusal.data.error : `pagasae answered ${String(response.status)}` });
+        }
+        const answer = tokenAnswerSchema.safeParse(body);
+        const claims = accountTokenClaimsSchema.safeParse(answer.success ? claimsOf(answer.data.access_token) : undefined);
+        if (!answer.success || !claims.success) {
+            return err({ kind: 'refused', reason: 'pagasae answered no account token the gateway can read' });
+        }
+        return ok({
+            accountToken: answer.data.access_token,
+            accountTokenExpiresAt: claims.data.endsAt,
+            refreshToken: answer.data.refresh_token,
+            fleetId: claims.data.fleetId,
+            accountId: claims.data.accountId,
+            personShipId: claims.data.personShipId,
+            scopes: claims.data.scopes,
+        });
+    };
+    return {
+        authorizeUrl: ({ state, codeChallenge }) => {
+            const url = new URL(`${options.url}/oauth/authorize`);
+            url.search = new URLSearchParams({
+                response_type: 'code',
+                client_id: options.clientId,
+                redirect_uri: options.redirectUri,
+                code_challenge: codeChallenge,
+                code_challenge_method: 'S256',
+                state,
+                scope: 'openid',
+            }).toString();
+            return url.toString();
+        },
+        redeemCode: async ({ code, verifier }) => {
+            const answered = await tokenEndpoint({ grant_type: 'authorization_code', code, redirect_uri: options.redirectUri, code_verifier: verifier });
+            return answered.isOk ? answered : err({ reason: answered.error.reason });
+        },
+        refresh: (refreshToken) => tokenEndpoint({ grant_type: 'refresh_token', refresh_token: refreshToken }),
+    };
+}
+//# sourceMappingURL=pagasae-client.js.map