@aeolus-fleet/gateway 0.0.0 → 0.28.1

package/dist/core/sign-in/sign-out.d.ts

@@ -0,0 +1,10 @@
+import type { AccountGrants, PageSession } from './ports.js';
+export type SignOut = (session: PageSession) => Promise<void>;
+/**
+ * Use case: a person signs out of the gateway's pages. The session's grant
+ * ends, so a page session cookie kept after it is signed out; the account's
+ * sign-ins from its MCP clients go on.
+ */
+export declare function createSignOut(deps: {
+    grants: Pick<AccountGrants, 'end'>;
+}): SignOut;

package/dist/core/sign-in/sign-out.js

@@ -0,0 +1,9 @@
+/**
+ * Use case: a person signs out of the gateway's pages. The session's grant
+ * ends, so a page session cookie kept after it is signed out; the account's
+ * sign-ins from its MCP clients go on.
+ */
+export function createSignOut(deps) {
+    return ({ fleetId, grantId }) => deps.grants.end(fleetId, grantId);
+}
+//# sourceMappingURL=sign-out.js.map

package/dist/core/sign-in/sign-out.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-out.js","sourceRoot":"","sources":["../../../src/core/sign-in/sign-out.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAA4C;IACxE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC"}

package/dist/core/sign-in/start-page-sign-in.d.ts

@@ -0,0 +1,25 @@
+import type { OAuthSecrets } from '../oauth/ports.js';
+import type { Clock } from '../shared/clock.js';
+import type { Pagasae, SignInSeals } from './ports.js';
+/** Where a person lands once signed in, when they asked for no page of the gateway's own. */
+export declare const FIRST_PAGE = "/overview";
+export type StartPageSignIn = (asked: {
+    returnTo?: string | undefined;
+}) => {
+    redirectTo: string;
+    browserSecret: string;
+};
+/**
+ * Use case: a person signs in to the gateway's own pages through pagasae
+ * (decision 0054), as from an MCP client: the page to go back to is sealed
+ * with the gateway's PKCE verifier into the state, and the person is sent to
+ * pagasae naming no fleet. Only a path of the gateway's own is kept, so a
+ * sign-in never sends the browser to another site. The browser is given a
+ * secret of its own, sealed too, so only it finishes the sign-in.
+ */
+export declare function createStartPageSignIn(deps: {
+    seals: SignInSeals;
+    pagasae: Pagasae;
+    secrets: OAuthSecrets;
+    clock: Clock;
+}): StartPageSignIn;

package/dist/core/sign-in/start-page-sign-in.js

@@ -0,0 +1,30 @@
+import { SIGN_IN_LIFETIME_MS } from './start-sign-in.js';
+/** Where a person lands once signed in, when they asked for no page of the gateway's own. */
+export const FIRST_PAGE = '/overview';
+/** Whether the path is one of the gateway's own: one slash, then no second slash or backslash a browser reads as another site. */
+function isOwnPath(path) {
+    return path.startsWith('/') && !path.startsWith('//') && !path.startsWith('/\\');
+}
+/**
+ * Use case: a person signs in to the gateway's own pages through pagasae
+ * (decision 0054), as from an MCP client: the page to go back to is sealed
+ * with the gateway's PKCE verifier into the state, and the person is sent to
+ * pagasae naming no fleet. Only a path of the gateway's own is kept, so a
+ * sign-in never sends the browser to another site. The browser is given a
+ * secret of its own, sealed too, so only it finishes the sign-in.
+ */
+export function createStartPageSignIn(deps) {
+    return ({ returnTo }) => {
+        const verifier = deps.secrets.newSecret();
+        const browserSecret = deps.secrets.newSecret();
+        const state = deps.seals.seal({
+            holder: 'page',
+            returnTo: returnTo !== undefined && isOwnPath(returnTo) ? returnTo : FIRST_PAGE,
+            verifier,
+            browserSecret,
+            expiresAt: new Date(deps.clock.now().getTime() + SIGN_IN_LIFETIME_MS),
+        });
+        return { redirectTo: deps.pagasae.authorizeUrl({ state, codeChallenge: deps.secrets.challengeOf(verifier) }), browserSecret };
+    };
+}
+//# sourceMappingURL=start-page-sign-in.js.map

package/dist/core/sign-in/start-page-sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-page-sign-in.js","sourceRoot":"","sources":["../../../src/core/sign-in/start-page-sign-in.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,UAAU,GAAG,WAAW,CAAC;AAItC,kIAAkI;AAClI,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmF;IACvH,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5B,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;YAC/E,QAAQ;YACR,aAAa;YACb,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC;SACtE,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC;IAChI,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeolus-fleet/gateway",
-  "version": "0.0.0",
+  "version": "0.28.1",
   "description": "Aeolus gateway: outside MCP servers and clients join a fleet as ships, through one gateway beside core.",
   "keywords": [
     "ai-agents",
@@ -40,7 +40,7 @@
     "db:migrate": "tsx --env-file-if-exists=.env src/bin/aeolus-gateway.ts migrate"
   },
   "dependencies": {
-    "@aeolus-fleet/common": "^0.27.0",
+    "@aeolus-fleet/common": "^0.28.0",
     "@fastify/websocket": "^11.3.4",
     "@modelcontextprotocol/client": "^2.3.1",
     "@modelcontextprotocol/server": "^2.3.1",
@@ -53,7 +53,7 @@
     "zod": "^4.6.5"
   },
   "devDependencies": {
-    "@aeolus-fleet/core": "0.27.0",
+    "@aeolus-fleet/core": "^0.28.0",
     "@eslint/js": "^10.0.1",
     "@modelcontextprotocol/ext-tasks": "0.2.2",
     "@testcontainers/postgresql": "^12.2.0",

package/src/adapters/prisma/migrations/20261020200000_account_grant_scopes/migration.sql

@@ -0,0 +1,2 @@
+-- The scopes a grant's account token carries: what the account may do on the gateway's pages.
+ALTER TABLE "account_grants" ADD COLUMN "scopes" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[];

package/src/adapters/prisma/migrations/20261020210000_party_owner_from_fleet/migration.sql

@@ -0,0 +1,2 @@
+-- A party's owner is the fleet's alone (decision 0056): the gateway names it at the commission and reads it after.
+ALTER TABLE "parties" DROP COLUMN "owner_ship_id";

package/src/adapters/prisma/migrations/20261020220000_client_call_deadline_optional/migration.sql

@@ -0,0 +1,2 @@
+-- A call fails at the deadline its capability states, and never by time when it states none (interop 3.4).
+ALTER TABLE "client_calls" ALTER COLUMN "deadline_at" DROP NOT NULL;

package/src/adapters/prisma/schema.prisma

@@ -80,7 +80,6 @@ model Party {
   concurrencyLimit Int?     @map("concurrency_limit")
   /// An MCP client's: its OAuth client id.
   clientId         String?  @map("client_id")
-  ownerShipId      String   @map("owner_ship_id")
   state            String
   proxyShipId      String?  @map("proxy_ship_id")
   /// Kept only from the proxy ship's commission until the gateway crews it.
@@ -182,7 +181,7 @@ model ClientCall {
   capability        String
   outputContentType String?  @map("output_content_type")
   sentAt            DateTime @map("sent_at")
-  deadlineAt        DateTime @map("deadline_at")
+  deadlineAt        DateTime? @map("deadline_at")
 
   @@id([fleetId, messageId])
   @@unique([fleetId, handle])
@@ -211,6 +210,8 @@ model AccountGrant {
   fleetId               String   @map("fleet_id")
   accountId             String   @map("account_id")
   personShipId          String?  @map("person_ship_id")
+  /// The scopes its account token carries.
+  scopes                String[] @default([])
   /// pagasae's refresh token, kept as crew tokens are.
   refreshToken          String   @map("refresh_token")
   accountToken          String   @map("account_token")