@aeolus-fleet/gateway 0.28.0 → 0.29.0

package/dist/core/people/ports.d.ts

@@ -3,8 +3,9 @@
  * messaging (decisions 0054, 0057): the fleet's calls it makes as their
  * account, and the one crew every client of the person shares.
  */
-import type { DeliveryId, FleetId, MessageId, ShipId } from '@aeolus-fleet/common';
+import type { DeliveryId, FleetId, MessageId, ShipId, ShipKind } from '@aeolus-fleet/common';
 import type { FleetRefusal } from '../connection/ports.js';
+import type { DiscoveredStatement } from '../mcp-in/ports.js';
 import type { Result } from '../shared/result.js';
 /** A call the gateway makes for an account: the account's token beside the gateway's own crew token, so the account acts through the gateway's ship. */
 export interface AccountCall {
@@ -47,6 +48,27 @@ export interface PersonDelivery {
     readonly sentAt: Date;
     readonly inReplyTo: MessageId | null;
 }
+/** What a person ship may send to now, as the fleet's discover answers it: each ship by name, with what it offers, and each type. */
+export interface PersonDiscovery {
+    readonly ships: readonly {
+        readonly name: string;
+        readonly type: string;
+        readonly kind: ShipKind;
+        readonly statement: DiscoveredStatement;
+    }[];
+    readonly types: readonly {
+        readonly type: string;
+        readonly reachable: number;
+    }[];
+}
+/** Who a person's message is for: one ship by its name, or any ship of a type. */
+export type PersonSelector = {
+    readonly kind: 'ship';
+    readonly name: string;
+} | {
+    readonly kind: 'type';
+    readonly type: string;
+};
 /** Outbound port: the fleet's calls the gateway makes as the crew of a person ship. */
 export interface PersonShipDoor {
     /** How many deliveries wait for the ship, without waiting. */
@@ -59,6 +81,8 @@ export interface PersonShipDoor {
     }): Promise<Result<PersonDelivery[], FleetRefusal>>;
     /** Acknowledges a delivery the person opened: their own act confirms it (interop 5.1). */
     ack(crewToken: string, deliveryId: DeliveryId): Promise<Result<undefined, FleetRefusal>>;
+    /** Reads a delivery the ship acknowledged again, whole, while it is not handled, recording nothing (decision 0040). */
+    delivery(crewToken: string, deliveryId: DeliveryId): Promise<Result<PersonDelivery, FleetRefusal>>;
     /** Sends the person's answer to the sender, in reply to its message, once under its key. */
     reply(crewToken: string, reply: {
         to: ShipId;
@@ -69,12 +93,24 @@ export interface PersonShipDoor {
     }): Promise<Result<undefined, FleetRefusal>>;
     /** Reports the person dealt with the delivery. */
     handled(crewToken: string, deliveryId: DeliveryId): Promise<Result<undefined, FleetRefusal>>;
+    /** The ships and types the ship may send to now: the fleet checks its scopes and the network rules. */
+    discover(crewToken: string): Promise<Result<PersonDiscovery, FleetRefusal>>;
+    /** Sends the person's own message, once under its key. */
+    send(crewToken: string, message: {
+        to: PersonSelector;
+        contentType: string;
+        payload: string;
+        idempotencyKey: string;
+    }): Promise<Result<{
+        messageId: MessageId;
+    }, FleetRefusal>>;
 }
 /**
  * A delivery a person opened, as the gateway keeps it until they deal with
  * it (Q28 (a)): what their answer needs once the delivery is acknowledged,
- * its message and sender, and its title, never its payload. It is the person
- * ship's, so every client of the person finds it.
+ * its message and sender, and what their inbox lists, its title and when it
+ * was sent, never its payload. It is the person ship's, so every client of
+ * the person finds it.
  */
 export interface OpenedDelivery {
     readonly fleetId: FleetId;
@@ -84,6 +120,7 @@ export interface OpenedDelivery {
     readonly senderShipId: ShipId;
     readonly from: string;
     readonly title: string;
+    readonly sentAt: Date;
     readonly openedAt: Date;
 }
 /** Outbound port: the deliveries people opened, by fleet, person ship and delivery. */
@@ -94,6 +131,8 @@ export interface OpenedDeliveries {
         shipId: ShipId;
         deliveryId: string;
     }): Promise<OpenedDelivery | undefined>;
+    /** The person ship's, oldest opened first. */
+    list(fleetId: FleetId, shipId: ShipId): Promise<OpenedDelivery[]>;
     /** Forgets it once the person dealt with it. */
     remove(fleetId: FleetId, opened: {
         shipId: ShipId;

package/dist/core/people/read-inbox.d.ts

@@ -2,13 +2,16 @@ import { type Result } from '../shared/result.js';
 import type { CrewPersonShip } from './crew-person-ship.js';
 import { type InboxEntry } from './inbox-entry.js';
 import { type PersonCaller, type PersonCrewError, type PersonCrewToken } from './person-crew.js';
-import type { PersonCrews, PersonDelivery, PersonShipDoor } from './ports.js';
+import type { OpenedDeliveries, PersonCrews, PersonDelivery, PersonShipDoor } from './ports.js';
 /** The most deliveries an inbox lists at once: as many as one receive takes. */
 export declare const INBOX_LIST_MAX = 10;
-export type ReadInbox = (caller: PersonCaller) => Promise<Result<{
-    waiting: number;
-    deliveries: InboxEntry[];
-}, PersonCrewError>>;
+/** A person's inbox: how many deliveries wait and the first of them, and the ones they opened and have not answered or done yet. */
+export interface Inbox {
+    readonly waiting: number;
+    readonly deliveries: InboxEntry[];
+    readonly opened: InboxEntry[];
+}
+export type ReadInbox = (caller: PersonCaller) => Promise<Result<Inbox, PersonCrewError>>;
 /**
  * What waits for the caller's person ship: how many, and up to the most an
  * inbox lists, taken as received, the crew's own held ones again first. It
@@ -25,13 +28,16 @@ export declare function waitingFor(deps: {
     deliveries: PersonDelivery[];
 }, PersonCrewError>>;
 /**
- * Use case: a person reads their own person ship's inbox (Q20): what waits,
- * by titles only. The gateway takes the waiting deliveries as the ship's
- * crew, so nothing is stored in the gateway, and a delivery listed is listed
- * again until the person deals with it.
+ * Use case: a person reads their own person ship's inbox (Q20), by titles
+ * only, in two groups (aeolus-fleet #1046): what waits, which the gateway
+ * takes as the ship's crew, and what any client of the person opened and
+ * they have not answered or done yet. A delivery the fleet still holds as
+ * waiting, as when it did not take its acknowledgement, is listed waiting
+ * only.
  */
 export declare function createReadInbox(deps: {
     crewPersonShip: CrewPersonShip;
     crews: PersonCrews;
     door: PersonShipDoor;
+    opened: OpenedDeliveries;
 }): ReadInbox;

package/dist/core/people/read-inbox.js

@@ -1,5 +1,5 @@
 import { ok } from '../shared/result.js';
-import { inboxEntryOf } from './inbox-entry.js';
+import { inboxEntryOf, openedEntryOf } from './inbox-entry.js';
 import { asPersonCrew } from './person-crew.js';
 /** The most deliveries an inbox lists at once: as many as one receive takes. */
 export const INBOX_LIST_MAX = 10;
@@ -22,15 +22,26 @@ export async function waitingFor(deps, caller) {
     return taken.isOk ? ok({ crew: taken.value.crew, waiting: value.waiting, deliveries: taken.value.value }) : taken;
 }
 /**
- * Use case: a person reads their own person ship's inbox (Q20): what waits,
- * by titles only. The gateway takes the waiting deliveries as the ship's
- * crew, so nothing is stored in the gateway, and a delivery listed is listed
- * again until the person deals with it.
+ * Use case: a person reads their own person ship's inbox (Q20), by titles
+ * only, in two groups (aeolus-fleet #1046): what waits, which the gateway
+ * takes as the ship's crew, and what any client of the person opened and
+ * they have not answered or done yet. A delivery the fleet still holds as
+ * waiting, as when it did not take its acknowledgement, is listed waiting
+ * only.
  */
 export function createReadInbox(deps) {
     return async (caller) => {
         const waiting = await waitingFor(deps, caller);
-        return waiting.isOk ? ok({ waiting: waiting.value.waiting, deliveries: waiting.value.deliveries.map(inboxEntryOf) }) : waiting;
+        if (!waiting.isOk) {
+            return waiting;
+        }
+        const isWaiting = new Set(waiting.value.deliveries.map(({ deliveryId }) => deliveryId));
+        const opened = await deps.opened.list(caller.fleetId, waiting.value.crew.shipId);
+        return ok({
+            waiting: waiting.value.waiting,
+            deliveries: waiting.value.deliveries.map(inboxEntryOf),
+            opened: opened.filter(({ deliveryId }) => !isWaiting.has(deliveryId)).map(openedEntryOf),
+        });
     };
 }
 //# sourceMappingURL=read-inbox.js.map

package/dist/core/people/read-inbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"read-inbox.js","sourceRoot":"","sources":["../../../src/core/people/read-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAiE,MAAM,kBAAkB,CAAC;AAG/G,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAIjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkF,EAClF,MAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkF;IAChH,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjI,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"read-inbox.js","sourceRoot":"","sources":["../../../src/core/people/read-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAmB,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAiE,MAAM,kBAAkB,CAAC;AAG/G,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAWjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkF,EAClF,MAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAA4G;IAC1I,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO,EAAE,CAAC;YACR,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;YACtD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;SACzF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/send-message.d.ts

@@ -0,0 +1,32 @@
+import type { MessageId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type PersonCaller, type PersonCrewError } from './person-crew.js';
+import type { PersonCrews, PersonSelector, PersonShipDoor } from './ports.js';
+/** Outbound port: a new key for a message the person gave none. */
+export interface SendKeys {
+    newIdempotencyKey(): string;
+}
+export type SendMessage = (input: {
+    caller: PersonCaller;
+    to: PersonSelector;
+    contentType: string;
+    payload: string;
+    idempotencyKey?: string;
+}) => Promise<Result<{
+    messageId: MessageId;
+}, PersonCrewError | DomainError<'SEND_REFUSED'>>>;
+/**
+ * Use case: a person starts a message as their person ship (aeolus-fleet
+ * #1046), to a ship by its name or any ship of a type. The fleet checks the
+ * ship's scopes and the network rules at send time, so the gateway adds no
+ * rule of its own and passes the fleet's reason on when it refuses. The
+ * person's own key, when given, makes a send tried again go once.
+ */
+export declare function createSendMessage(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+    keys: SendKeys;
+}): SendMessage;

package/dist/core/people/send-message.js

@@ -0,0 +1,22 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { asPersonCrew, withOwnRefusal } from './person-crew.js';
+/**
+ * Use case: a person starts a message as their person ship (aeolus-fleet
+ * #1046), to a ship by its name or any ship of a type. The fleet checks the
+ * ship's scopes and the network rules at send time, so the gateway adds no
+ * rule of its own and passes the fleet's reason on when it refuses. The
+ * person's own key, when given, makes a send tried again go once.
+ */
+export function createSendMessage(deps) {
+    return async ({ caller, to, contentType, payload, idempotencyKey }) => {
+        const message = { to, contentType, payload, idempotencyKey: idempotencyKey ?? deps.keys.newIdempotencyKey() };
+        const sent = await asPersonCrew(deps, { caller, run: (crew) => withOwnRefusal(deps.door.send(crew.crewToken, message)) });
+        if (!sent.isOk) {
+            return sent;
+        }
+        const taken = sent.value.value;
+        return taken.isOk ? ok(taken.value) : refuse('SEND_REFUSED', `The fleet did not take your message: ${taken.error.message}`);
+    };
+}
+//# sourceMappingURL=send-message.js.map

package/dist/core/people/send-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-message.js","sourceRoot":"","sources":["../../../src/core/people/send-message.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,cAAc,EAA2C,MAAM,kBAAkB,CAAC;AAgBzG;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkG;IAClI,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;QACpE,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC9G,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1H,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,wCAAwC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9H,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/requests/ask-for-server.d.ts

@@ -1,6 +1,6 @@
 import type { FleetId } from '@aeolus-fleet/common';
 import type { PartyStore } from '../parties/ports.js';
-import type { PersonCaller } from '../people/person-crew.js';
+import type { GrantCaller } from '../people/person-crew.js';
 import { type DomainError } from '../shared/errors.js';
 import { type Result } from '../shared/result.js';
 import type { AccountGrants } from '../sign-in/ports.js';
@@ -14,7 +14,7 @@ export interface AskedServer {
     readonly expiresAt: Date;
 }
 export type AskForServer = (asked: {
-    caller: PersonCaller;
+    caller: GrantCaller;
     url: string;
 }) => Promise<Result<AskedServer, DomainError<'INVALID_SERVER_URL' | 'OUTSIDE_PARTIES_OFF' | 'SIGNED_OUT' | 'PARTY_EXISTS'>>>;
 /**

package/dist/core/requests/watch-waiting.d.ts

@@ -3,9 +3,10 @@ import type { PartyStore } from '../parties/ports.js';
 import type { Clock } from '../shared/clock.js';
 import { type Result } from '../shared/result.js';
 import type { PendingRequests, WaitingSeals } from './ports.js';
-/** Whether the browser that asked still waits, the fleet its request is in, and when the request expires. */
+/** Whether the browser that asked still waits, the fleet its request is in, the client asked for, and when the request expires. */
 export interface WatchedWaiting {
     readonly fleetId: FleetId;
+    readonly clientName: string;
     readonly isWaiting: boolean;
     readonly expiresAt: Date;
 }

package/dist/core/requests/watch-waiting.js

@@ -19,11 +19,11 @@ export function createWatchWaiting(deps) {
         if (request === undefined) {
             return err({ kind: 'unknownWaiting' });
         }
-        const watched = { fleetId: request.fleetId, expiresAt: request.expiresAt };
+        const clientId = waiting.request.client_id ?? '';
+        const watched = { fleetId: request.fleetId, clientName: request.subject.kind === 'client' ? request.subject.clientName : clientId, expiresAt: request.expiresAt };
         if (isRefused(request, deps.clock.now())) {
             return ok({ ...watched, isWaiting: false });
         }
-        const clientId = waiting.request.client_id ?? '';
         const party = request.state === 'approved' ? await deps.parties.findByClient(request.fleetId, clientId) : undefined;
         return ok({ ...watched, isWaiting: party?.state !== 'crewed' });
     };

package/dist/core/requests/watch-waiting.js.map

@@ -1 +1 @@
-{"version":3,"file":"watch-waiting.js","sourceRoot":"","sources":["../../../src/core/requests/watch-waiting.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAa/C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA8F;IAC/H,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3E,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"watch-waiting.js","sourceRoot":"","sources":["../../../src/core/requests/watch-waiting.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAc/C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA8F;IAC/H,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAClK,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/sign-in/complete-sign-in.d.ts

@@ -4,7 +4,7 @@ import type { AuthorizationRefusal, ReadAuthorization } from '../oauth/read-auth
 import type { AskForClient, ClientAnswer } from '../requests/ask-for-client.js';
 import type { Clock } from '../shared/clock.js';
 import { type Result } from '../shared/result.js';
-import type { AccountGrants, Pagasae, PageSessions, SignInSeals } from './ports.js';
+import type { AccountGrants, Pagasae, SignInSeals } from './ports.js';
 /**
  * Why a sign-in gave the client no code, beside the request's own refusals:
  * - unknownSignIn: the gateway sealed no sign-in into this state, or its 10 minutes passed;
@@ -25,12 +25,8 @@ export type SignInRefusal = AuthorizationRefusal | {
 } | {
     readonly kind: 'outsidePartiesOff';
 };
-/** What a sign-in answers: the client's answer, or, for the gateway's pages, the page session to hold and the page to go back to. */
-export type SignInAnswer = ClientAnswer | {
-    readonly kind: 'signedIn';
-    readonly session: string;
-    readonly redirectTo: string;
-};
+/** What a sign-in answers: the client's answer. */
+export type SignInAnswer = ClientAnswer;
 interface Back {
     state?: string | undefined;
     code?: string | undefined;
@@ -45,9 +41,7 @@ export type CompleteSignIn = (back: Back) => Promise<Result<SignInAnswer, SignIn
  * picked: the account's grant is kept, and the client is sent back with the
  * gateway's own code for it, acting in the fleet as the account with no
  * approval (orchestrator-1, slice 7 Q1); or the account asks for access for
- * the client, as an outside party (decision 0056). A sign-in to the
- * gateway's pages keeps the account's grant too, and answers a page session
- * naming it, so the pages act as the account.
+ * the client, as an outside party (decision 0056).
  */
 export declare function createCompleteSignIn(deps: {
     readAuthorization: ReadAuthorization;
@@ -61,6 +55,5 @@ export declare function createCompleteSignIn(deps: {
     /** Whether the gateway serves the fleet: connected to it, and switched on where an installation switches fleets (decision 0021). */
     servesFleet: (fleetId: FleetId) => Promise<boolean>;
     askForClient: AskForClient;
-    sessions: PageSessions;
 }): CompleteSignIn;
 export {};

package/dist/core/sign-in/complete-sign-in.js

@@ -7,28 +7,9 @@ import { err, ok } from '../shared/result.js';
  * picked: the account's grant is kept, and the client is sent back with the
  * gateway's own code for it, acting in the fleet as the account with no
  * approval (orchestrator-1, slice 7 Q1); or the account asks for access for
- * the client, as an outside party (decision 0056). A sign-in to the
- * gateway's pages keeps the account's grant too, and answers a page session
- * naming it, so the pages act as the account.
+ * the client, as an outside party (decision 0056).
  */
 export function createCompleteSignIn(deps) {
-    /** A sign-in to the pages: the grant kept, and the session naming it; no client to send back, so pagasae's error is said. */
-    const signInToPages = async (signIn, { code, error }) => {
-        if (error !== undefined || code === undefined) {
-            return err({ kind: 'pagasaeRefused', message: error ?? 'pagasae sent no code' });
-        }
-        const redeemed = await deps.pagasae.redeemCode({ code, verifier: signIn.verifier });
-        if (!redeemed.isOk) {
-            return err({ kind: 'pagasaeRefused', message: redeemed.error.reason });
-        }
-        const { fleetId, accountId, personShipId, scopes, refreshToken, accountToken, accountTokenExpiresAt } = redeemed.value;
-        if (!(await deps.servesFleet(fleetId))) {
-            return err({ kind: 'fleetNotServed' });
-        }
-        const grantId = deps.secrets.newSecret();
-        await deps.grants.save({ grantId, fleetId, accountId, personShipId, scopes, refreshToken, accountToken, accountTokenExpiresAt });
-        return ok({ kind: 'signedIn', session: deps.sessions.seal({ fleetId, grantId }), redirectTo: signIn.returnTo });
-    };
     return async (back) => {
         const { state, code, error, browserSecret } = back;
         const signIn = state === undefined ? undefined : deps.seals.open(state);
@@ -38,9 +19,6 @@ export function createCompleteSignIn(deps) {
         if (browserSecret !== signIn.browserSecret) {
             return err({ kind: 'otherBrowser' });
         }
-        if (signIn.holder === 'page') {
-            return signInToPages(signIn, back);
-        }
         const read = await deps.readAuthorization(signIn.request);
         if (!read.isOk) {
             return read;

package/dist/core/sign-in/complete-sign-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"complete-sign-in.js","sourceRoot":"","sources":["../../../src/core/sign-in/complete-sign-in.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKjE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAyB3D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAapC;IACC,6HAA6H;IAC7H,MAAM,aAAa,GAAG,KAAK,EAAE,MAAkB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAQ,EAAgD,EAAE;QACtH,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,IAAI,sBAAsB,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;QACvH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjI,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClH,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACrF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjK,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,aAAa,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3F,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,UAAU,kCAAkC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;QAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YACxK,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjI,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"complete-sign-in.js","sourceRoot":"","sources":["../../../src/core/sign-in/complete-sign-in.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKjE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAyB3D;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAYpC;IACC,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACrF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjK,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,aAAa,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3F,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,UAAU,kCAAkC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;QAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YACxK,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjI,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/sign-in/own-page.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The page of the gateway's own a sign-in's way back names, for both page
+ * sign-ins, so the check exists once. A browser resolves the way back:
+ * it drops tabs and newlines, reads a backslash as a slash and removes dot
+ * segments, so `/a/..//evil.example` ends as `//evil.example`, another
+ * site. The way back is kept only when, so resolved, it is a path of the
+ * gateway's own, and resolving it again keeps it there.
+ */
+/** The page of the gateway's own with its path, query and hash; undefined for anything else. */
+export declare function ownPageOf(returnTo: string): string | undefined;

package/dist/core/sign-in/own-page.js

@@ -0,0 +1,35 @@
+/**
+ * The page of the gateway's own a sign-in's way back names, for both page
+ * sign-ins, so the check exists once. A browser resolves the way back:
+ * it drops tabs and newlines, reads a backslash as a slash and removes dot
+ * segments, so `/a/..//evil.example` ends as `//evil.example`, another
+ * site. The way back is kept only when, so resolved, it is a path of the
+ * gateway's own, and resolving it again keeps it there.
+ */
+/** An origin no address is at: a way back resolved against it that keeps it is the gateway's own, wherever the gateway is. */
+const OWN_ORIGIN = 'https://gateway.invalid';
+/** The way back resolved as a browser resolves it, if it stays at the gateway's own origin. */
+function resolvedOf(returnTo) {
+    if (!URL.canParse(returnTo, OWN_ORIGIN)) {
+        return undefined;
+    }
+    const page = new URL(returnTo, OWN_ORIGIN);
+    return page.origin === OWN_ORIGIN ? `${page.pathname}${page.search}${page.hash}` : undefined;
+}
+/** Whether a path begins as a browser reads another site: two slashes, or a slash and a backslash. */
+function isAnotherSite(path) {
+    return path.startsWith('//') || path.startsWith('/\\');
+}
+/** The page of the gateway's own with its path, query and hash; undefined for anything else. */
+export function ownPageOf(returnTo) {
+    if (!returnTo.startsWith('/')) {
+        return undefined;
+    }
+    const resolved = resolvedOf(returnTo);
+    if (resolved === undefined || isAnotherSite(resolved)) {
+        return undefined;
+    }
+    // Belt and braces: the value kept, resolved once more, is still the gateway's own and unchanged.
+    return resolvedOf(resolved) === resolved ? resolved : undefined;
+}
+//# sourceMappingURL=own-page.js.map

package/dist/core/sign-in/own-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-page.js","sourceRoot":"","sources":["../../../src/core/sign-in/own-page.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8HAA8H;AAC9H,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,+FAA+F;AAC/F,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED,sGAAsG;AACtG,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,iGAAiG;IACjG,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC"}

package/dist/core/sign-in/ports.d.ts

@@ -2,16 +2,12 @@
  * A person signs in to the gateway through pagasae, the one identity
  * provider (decision 0054): the gateway is its OpenID Connect client, and
  * the person acts in the fleet as their account, by its account token, from
- * their MCP client or on the gateway's own pages.
+ * their MCP client.
  */
 import type { FleetId, ShipId } from '@aeolus-fleet/common';
 import type { Result } from '../shared/result.js';
-/**
- * A person's sign-in at pagasae under way, with the gateway's PKCE verifier:
- * for an MCP client, its authorization request; for the gateway's pages, the
- * page to go back to.
- */
-export type PendingSignIn = ClientSignIn | PageSignIn;
+/** A person's sign-in at pagasae under way for an MCP client, with the gateway's PKCE verifier and the client's authorization request. */
+export type PendingSignIn = ClientSignIn;
 interface SignInUnderWay {
     readonly verifier: string;
     /** The secret the browser that started the sign-in holds, so no other browser finishes it (login CSRF). */
@@ -23,11 +19,6 @@ export interface ClientSignIn extends SignInUnderWay {
     /** What the person picked the client to act as: their account, or a party they ask access for (Q1 a). */
     readonly holder: SignInHolder;
 }
-export interface PageSignIn extends SignInUnderWay {
-    readonly holder: 'page';
-    /** The gateway's own path the browser goes back to once signed in. */
-    readonly returnTo: string;
-}
 /** What a client acts as once its person signed in: the account itself, or an outside party (decision 0056). */
 export type SignInHolder = 'account' | 'party';
 /**
@@ -100,16 +91,4 @@ export interface AccountGrants {
     }, tokens: Partial<Pick<AccountGrant, 'refreshToken' | 'accountToken' | 'accountTokenExpiresAt' | 'personShipId' | 'scopes'>>): Promise<void>;
     end(fleetId: FleetId, grantId: string): Promise<void>;
 }
-/** A browser signed in to the gateway's pages: the account's grant it acts by. */
-export interface PageSession {
-    readonly fleetId: FleetId;
-    readonly grantId: string;
-}
-/** Outbound port: the page session a browser holds in the gateway's own cookie, sealed so no one forges or reads it. */
-export interface PageSessions {
-    /** The cookie's value for the session. */
-    seal(session: PageSession): string;
-    /** The session a Cookie header carries; none when it carries none the gateway sealed. */
-    inCookie(cookie: string): PageSession | undefined;
-}
 export {};

package/dist/ping-worker.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The gateway's own ship taking what waits for it, one round at a time: each
+ * receive waits while the fleet waits for a delivery, so argo's ping is
+ * answered as it comes (blueprint, "Ping"); stopping ends the wait.
+ */
+import type { FastifyBaseLogger } from 'fastify';
+import type { AnswerPings } from './core/connection/answer-pings.js';
+import type { Sleep } from './core/mcp-out/run-party.js';
+export interface PingWorker {
+    /** Runs a round every interval until it stops. */
+    start(): void;
+    /** Stops, once the round under way ended. */
+    stop(): Promise<void>;
+}
+export declare function createPingWorker(deps: {
+    answerPings: AnswerPings;
+    sleep: Sleep;
+    intervalMs: number;
+    log: FastifyBaseLogger;
+}): PingWorker;

package/dist/ping-worker.js

@@ -0,0 +1,33 @@
+export function createPingWorker(deps) {
+    const stopping = new AbortController();
+    let running = Promise.resolve();
+    const round = async () => {
+        try {
+            const { acked, refused } = await deps.answerPings(stopping.signal);
+            for (const { contentType, senderShipId } of acked) {
+                deps.log.info({ contentType, senderShipId }, "the gateway's ship acked a message it does not handle");
+            }
+            if (refused > 0) {
+                deps.log.debug({ refused }, "the fleet refused some calls of the gateway's ship's inbox");
+            }
+        }
+        catch (error) {
+            deps.log.error({ err: error }, 'ping round failed');
+        }
+    };
+    return {
+        start: () => {
+            running = (async () => {
+                while (!stopping.signal.aborted) {
+                    await round();
+                    await deps.sleep(deps.intervalMs, stopping.signal);
+                }
+            })();
+        },
+        stop: async () => {
+            stopping.abort();
+            await running;
+        },
+    };
+}
+//# sourceMappingURL=ping-worker.js.map

package/dist/ping-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping-worker.js","sourceRoot":"","sources":["../src/ping-worker.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,gBAAgB,CAAC,IAA4F;IAC3H,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE/C,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnE,KAAK,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,KAAK,EAAE,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,uDAAuD,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,4DAA4D,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChC,MAAM,KAAK,EAAE,CAAC;oBACd,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}