@aeolus-fleet/gateway 0.28.1 → 0.29.1

package/dist/core/people/read-inbox.js

@@ -1,5 +1,5 @@
 import { ok } from '../shared/result.js';
-import { inboxEntryOf } from './inbox-entry.js';
+import { inboxEntryOf, openedEntryOf } from './inbox-entry.js';
 import { asPersonCrew } from './person-crew.js';
 /** The most deliveries an inbox lists at once: as many as one receive takes. */
 export const INBOX_LIST_MAX = 10;
@@ -22,15 +22,26 @@ export async function waitingFor(deps, caller) {
     return taken.isOk ? ok({ crew: taken.value.crew, waiting: value.waiting, deliveries: taken.value.value }) : taken;
 }
 /**
- * Use case: a person reads their own person ship's inbox (Q20): what waits,
- * by titles only. The gateway takes the waiting deliveries as the ship's
- * crew, so nothing is stored in the gateway, and a delivery listed is listed
- * again until the person deals with it.
+ * Use case: a person reads their own person ship's inbox (Q20), by titles
+ * only, in two groups (aeolus-fleet #1046): what waits, which the gateway
+ * takes as the ship's crew, and what any client of the person opened and
+ * they have not answered or done yet. A delivery the fleet still holds as
+ * waiting, as when it did not take its acknowledgement, is listed waiting
+ * only.
  */
 export function createReadInbox(deps) {
     return async (caller) => {
         const waiting = await waitingFor(deps, caller);
-        return waiting.isOk ? ok({ waiting: waiting.value.waiting, deliveries: waiting.value.deliveries.map(inboxEntryOf) }) : waiting;
+        if (!waiting.isOk) {
+            return waiting;
+        }
+        const isWaiting = new Set(waiting.value.deliveries.map(({ deliveryId }) => deliveryId));
+        const opened = await deps.opened.list(caller.fleetId, waiting.value.crew.shipId);
+        return ok({
+            waiting: waiting.value.waiting,
+            deliveries: waiting.value.deliveries.map(inboxEntryOf),
+            opened: opened.filter(({ deliveryId }) => !isWaiting.has(deliveryId)).map(openedEntryOf),
+        });
     };
 }
 //# sourceMappingURL=read-inbox.js.map

package/dist/core/people/read-inbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"read-inbox.js","sourceRoot":"","sources":["../../../src/core/people/read-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAiE,MAAM,kBAAkB,CAAC;AAG/G,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAIjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkF,EAClF,MAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAkF;IAChH,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACjI,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"read-inbox.js","sourceRoot":"","sources":["../../../src/core/people/read-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,aAAa,EAAmB,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAiE,MAAM,kBAAkB,CAAC;AAG/G,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAWjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAkF,EAClF,MAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IAClI,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACpH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAA4G;IAC1I,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjF,OAAO,EAAE,CAAC;YACR,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;YAC9B,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC;YACtD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;SACzF,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/send-message.d.ts

@@ -0,0 +1,32 @@
+import type { MessageId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type PersonCaller, type PersonCrewError } from './person-crew.js';
+import type { PersonCrews, PersonSelector, PersonShipDoor } from './ports.js';
+/** Outbound port: a new key for a message the person gave none. */
+export interface SendKeys {
+    newIdempotencyKey(): string;
+}
+export type SendMessage = (input: {
+    caller: PersonCaller;
+    to: PersonSelector;
+    contentType: string;
+    payload: string;
+    idempotencyKey?: string;
+}) => Promise<Result<{
+    messageId: MessageId;
+}, PersonCrewError | DomainError<'SEND_REFUSED'>>>;
+/**
+ * Use case: a person starts a message as their person ship (aeolus-fleet
+ * #1046), to a ship by its name or any ship of a type. The fleet checks the
+ * ship's scopes and the network rules at send time, so the gateway adds no
+ * rule of its own and passes the fleet's reason on when it refuses. The
+ * person's own key, when given, makes a send tried again go once.
+ */
+export declare function createSendMessage(deps: {
+    crewPersonShip: CrewPersonShip;
+    crews: PersonCrews;
+    door: PersonShipDoor;
+    keys: SendKeys;
+}): SendMessage;

package/dist/core/people/send-message.js

@@ -0,0 +1,22 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { asPersonCrew, withOwnRefusal } from './person-crew.js';
+/**
+ * Use case: a person starts a message as their person ship (aeolus-fleet
+ * #1046), to a ship by its name or any ship of a type. The fleet checks the
+ * ship's scopes and the network rules at send time, so the gateway adds no
+ * rule of its own and passes the fleet's reason on when it refuses. The
+ * person's own key, when given, makes a send tried again go once.
+ */
+export function createSendMessage(deps) {
+    return async ({ caller, to, contentType, payload, idempotencyKey }) => {
+        const message = { to, contentType, payload, idempotencyKey: idempotencyKey ?? deps.keys.newIdempotencyKey() };
+        const sent = await asPersonCrew(deps, { caller, run: (crew) => withOwnRefusal(deps.door.send(crew.crewToken, message)) });
+        if (!sent.isOk) {
+            return sent;
+        }
+        const taken = sent.value.value;
+        return taken.isOk ? ok(taken.value) : refuse('SEND_REFUSED', `The fleet did not take your message: ${taken.error.message}`);
+    };
+}
+//# sourceMappingURL=send-message.js.map

package/dist/core/people/send-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-message.js","sourceRoot":"","sources":["../../../src/core/people/send-message.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,cAAc,EAA2C,MAAM,kBAAkB,CAAC;AAgBzG;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkG;IAClI,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,EAAE,EAAE;QACpE,MAAM,OAAO,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QAC9G,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1H,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,wCAAwC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9H,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/requests/ask-for-server.d.ts

@@ -1,6 +1,6 @@
 import type { FleetId } from '@aeolus-fleet/common';
 import type { PartyStore } from '../parties/ports.js';
-import type { PersonCaller } from '../people/person-crew.js';
+import type { GrantCaller } from '../people/person-crew.js';
 import { type DomainError } from '../shared/errors.js';
 import { type Result } from '../shared/result.js';
 import type { AccountGrants } from '../sign-in/ports.js';
@@ -14,7 +14,7 @@ export interface AskedServer {
     readonly expiresAt: Date;
 }
 export type AskForServer = (asked: {
-    caller: PersonCaller;
+    caller: GrantCaller;
     url: string;
 }) => Promise<Result<AskedServer, DomainError<'INVALID_SERVER_URL' | 'OUTSIDE_PARTIES_OFF' | 'SIGNED_OUT' | 'PARTY_EXISTS'>>>;
 /**

package/dist/core/requests/watch-waiting.d.ts

@@ -3,9 +3,10 @@ import type { PartyStore } from '../parties/ports.js';
 import type { Clock } from '../shared/clock.js';
 import { type Result } from '../shared/result.js';
 import type { PendingRequests, WaitingSeals } from './ports.js';
-/** Whether the browser that asked still waits, the fleet its request is in, and when the request expires. */
+/** Whether the browser that asked still waits, the fleet its request is in, the client asked for, and when the request expires. */
 export interface WatchedWaiting {
     readonly fleetId: FleetId;
+    readonly clientName: string;
     readonly isWaiting: boolean;
     readonly expiresAt: Date;
 }

package/dist/core/requests/watch-waiting.js

@@ -19,11 +19,11 @@ export function createWatchWaiting(deps) {
         if (request === undefined) {
             return err({ kind: 'unknownWaiting' });
         }
-        const watched = { fleetId: request.fleetId, expiresAt: request.expiresAt };
+        const clientId = waiting.request.client_id ?? '';
+        const watched = { fleetId: request.fleetId, clientName: request.subject.kind === 'client' ? request.subject.clientName : clientId, expiresAt: request.expiresAt };
         if (isRefused(request, deps.clock.now())) {
             return ok({ ...watched, isWaiting: false });
         }
-        const clientId = waiting.request.client_id ?? '';
         const party = request.state === 'approved' ? await deps.parties.findByClient(request.fleetId, clientId) : undefined;
         return ok({ ...watched, isWaiting: party?.state !== 'crewed' });
     };

package/dist/core/requests/watch-waiting.js.map

@@ -1 +1 @@
-{"version":3,"file":"watch-waiting.js","sourceRoot":"","sources":["../../../src/core/requests/watch-waiting.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAa/C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA8F;IAC/H,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3E,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"watch-waiting.js","sourceRoot":"","sources":["../../../src/core/requests/watch-waiting.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAc/C;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA8F;IAC/H,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;YAC5C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QAClK,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpH,OAAO,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/sign-in/complete-sign-in.d.ts

@@ -4,7 +4,7 @@ import type { AuthorizationRefusal, ReadAuthorization } from '../oauth/read-auth
 import type { AskForClient, ClientAnswer } from '../requests/ask-for-client.js';
 import type { Clock } from '../shared/clock.js';
 import { type Result } from '../shared/result.js';
-import type { AccountGrants, Pagasae, PageSessions, SignInSeals } from './ports.js';
+import type { AccountGrants, Pagasae, SignInSeals } from './ports.js';
 /**
  * Why a sign-in gave the client no code, beside the request's own refusals:
  * - unknownSignIn: the gateway sealed no sign-in into this state, or its 10 minutes passed;
@@ -25,12 +25,8 @@ export type SignInRefusal = AuthorizationRefusal | {
 } | {
     readonly kind: 'outsidePartiesOff';
 };
-/** What a sign-in answers: the client's answer, or, for the gateway's pages, the page session to hold and the page to go back to. */
-export type SignInAnswer = ClientAnswer | {
-    readonly kind: 'signedIn';
-    readonly session: string;
-    readonly redirectTo: string;
-};
+/** What a sign-in answers: the client's answer. */
+export type SignInAnswer = ClientAnswer;
 interface Back {
     state?: string | undefined;
     code?: string | undefined;
@@ -45,9 +41,7 @@ export type CompleteSignIn = (back: Back) => Promise<Result<SignInAnswer, SignIn
  * picked: the account's grant is kept, and the client is sent back with the
  * gateway's own code for it, acting in the fleet as the account with no
  * approval (orchestrator-1, slice 7 Q1); or the account asks for access for
- * the client, as an outside party (decision 0056). A sign-in to the
- * gateway's pages keeps the account's grant too, and answers a page session
- * naming it, so the pages act as the account.
+ * the client, as an outside party (decision 0056).
  */
 export declare function createCompleteSignIn(deps: {
     readAuthorization: ReadAuthorization;
@@ -61,6 +55,5 @@ export declare function createCompleteSignIn(deps: {
     /** Whether the gateway serves the fleet: connected to it, and switched on where an installation switches fleets (decision 0021). */
     servesFleet: (fleetId: FleetId) => Promise<boolean>;
     askForClient: AskForClient;
-    sessions: PageSessions;
 }): CompleteSignIn;
 export {};

package/dist/core/sign-in/complete-sign-in.js

@@ -7,28 +7,9 @@ import { err, ok } from '../shared/result.js';
  * picked: the account's grant is kept, and the client is sent back with the
  * gateway's own code for it, acting in the fleet as the account with no
  * approval (orchestrator-1, slice 7 Q1); or the account asks for access for
- * the client, as an outside party (decision 0056). A sign-in to the
- * gateway's pages keeps the account's grant too, and answers a page session
- * naming it, so the pages act as the account.
+ * the client, as an outside party (decision 0056).
  */
 export function createCompleteSignIn(deps) {
-    /** A sign-in to the pages: the grant kept, and the session naming it; no client to send back, so pagasae's error is said. */
-    const signInToPages = async (signIn, { code, error }) => {
-        if (error !== undefined || code === undefined) {
-            return err({ kind: 'pagasaeRefused', message: error ?? 'pagasae sent no code' });
-        }
-        const redeemed = await deps.pagasae.redeemCode({ code, verifier: signIn.verifier });
-        if (!redeemed.isOk) {
-            return err({ kind: 'pagasaeRefused', message: redeemed.error.reason });
-        }
-        const { fleetId, accountId, personShipId, scopes, refreshToken, accountToken, accountTokenExpiresAt } = redeemed.value;
-        if (!(await deps.servesFleet(fleetId))) {
-            return err({ kind: 'fleetNotServed' });
-        }
-        const grantId = deps.secrets.newSecret();
-        await deps.grants.save({ grantId, fleetId, accountId, personShipId, scopes, refreshToken, accountToken, accountTokenExpiresAt });
-        return ok({ kind: 'signedIn', session: deps.sessions.seal({ fleetId, grantId }), redirectTo: signIn.returnTo });
-    };
     return async (back) => {
         const { state, code, error, browserSecret } = back;
         const signIn = state === undefined ? undefined : deps.seals.open(state);
@@ -38,9 +19,6 @@ export function createCompleteSignIn(deps) {
         if (browserSecret !== signIn.browserSecret) {
             return err({ kind: 'otherBrowser' });
         }
-        if (signIn.holder === 'page') {
-            return signInToPages(signIn, back);
-        }
         const read = await deps.readAuthorization(signIn.request);
         if (!read.isOk) {
             return read;

package/dist/core/sign-in/complete-sign-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"complete-sign-in.js","sourceRoot":"","sources":["../../../src/core/sign-in/complete-sign-in.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKjE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAyB3D;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAapC;IACC,6HAA6H;IAC7H,MAAM,aAAa,GAAG,KAAK,EAAE,MAAkB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAQ,EAAgD,EAAE;QACtH,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,IAAI,sBAAsB,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;QACvH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjI,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClH,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACrF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjK,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,aAAa,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3F,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,UAAU,kCAAkC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;QAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YACxK,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjI,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"complete-sign-in.js","sourceRoot":"","sources":["../../../src/core/sign-in/complete-sign-in.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAKjE,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAyB3D;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAYpC;IACC,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACrF,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC3C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACjK,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,aAAa,CAAC,aAAa,KAAK,IAAI,IAAI,aAAa,CAAC,aAAa,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;YAC3F,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC,UAAU,kCAAkC,EAAE,CAAC,CAAC;QAChH,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;QAC/G,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;YACxK,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,CAAC,CAAC;QACjI,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/sign-in/own-page.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The page of the gateway's own a sign-in's way back names, for both page
+ * sign-ins, so the check exists once. A browser resolves the way back:
+ * it drops tabs and newlines, reads a backslash as a slash and removes dot
+ * segments, so `/a/..//evil.example` ends as `//evil.example`, another
+ * site. The way back is kept only when, so resolved, it is a path of the
+ * gateway's own, and resolving it again keeps it there.
+ */
+/** The page of the gateway's own with its path, query and hash; undefined for anything else. */
+export declare function ownPageOf(returnTo: string): string | undefined;

package/dist/core/sign-in/own-page.js

@@ -0,0 +1,35 @@
+/**
+ * The page of the gateway's own a sign-in's way back names, for both page
+ * sign-ins, so the check exists once. A browser resolves the way back:
+ * it drops tabs and newlines, reads a backslash as a slash and removes dot
+ * segments, so `/a/..//evil.example` ends as `//evil.example`, another
+ * site. The way back is kept only when, so resolved, it is a path of the
+ * gateway's own, and resolving it again keeps it there.
+ */
+/** An origin no address is at: a way back resolved against it that keeps it is the gateway's own, wherever the gateway is. */
+const OWN_ORIGIN = 'https://gateway.invalid';
+/** The way back resolved as a browser resolves it, if it stays at the gateway's own origin. */
+function resolvedOf(returnTo) {
+    if (!URL.canParse(returnTo, OWN_ORIGIN)) {
+        return undefined;
+    }
+    const page = new URL(returnTo, OWN_ORIGIN);
+    return page.origin === OWN_ORIGIN ? `${page.pathname}${page.search}${page.hash}` : undefined;
+}
+/** Whether a path begins as a browser reads another site: two slashes, or a slash and a backslash. */
+function isAnotherSite(path) {
+    return path.startsWith('//') || path.startsWith('/\\');
+}
+/** The page of the gateway's own with its path, query and hash; undefined for anything else. */
+export function ownPageOf(returnTo) {
+    if (!returnTo.startsWith('/')) {
+        return undefined;
+    }
+    const resolved = resolvedOf(returnTo);
+    if (resolved === undefined || isAnotherSite(resolved)) {
+        return undefined;
+    }
+    // Belt and braces: the value kept, resolved once more, is still the gateway's own and unchanged.
+    return resolvedOf(resolved) === resolved ? resolved : undefined;
+}
+//# sourceMappingURL=own-page.js.map

package/dist/core/sign-in/own-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"own-page.js","sourceRoot":"","sources":["../../../src/core/sign-in/own-page.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,8HAA8H;AAC9H,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,+FAA+F;AAC/F,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/F,CAAC;AAED,sGAAsG;AACtG,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,iGAAiG;IACjG,OAAO,UAAU,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC"}

package/dist/core/sign-in/ports.d.ts

@@ -2,16 +2,12 @@
  * A person signs in to the gateway through pagasae, the one identity
  * provider (decision 0054): the gateway is its OpenID Connect client, and
  * the person acts in the fleet as their account, by its account token, from
- * their MCP client or on the gateway's own pages.
+ * their MCP client.
  */
 import type { FleetId, ShipId } from '@aeolus-fleet/common';
 import type { Result } from '../shared/result.js';
-/**
- * A person's sign-in at pagasae under way, with the gateway's PKCE verifier:
- * for an MCP client, its authorization request; for the gateway's pages, the
- * page to go back to.
- */
-export type PendingSignIn = ClientSignIn | PageSignIn;
+/** A person's sign-in at pagasae under way for an MCP client, with the gateway's PKCE verifier and the client's authorization request. */
+export type PendingSignIn = ClientSignIn;
 interface SignInUnderWay {
     readonly verifier: string;
     /** The secret the browser that started the sign-in holds, so no other browser finishes it (login CSRF). */
@@ -23,11 +19,6 @@ export interface ClientSignIn extends SignInUnderWay {
     /** What the person picked the client to act as: their account, or a party they ask access for (Q1 a). */
     readonly holder: SignInHolder;
 }
-export interface PageSignIn extends SignInUnderWay {
-    readonly holder: 'page';
-    /** The gateway's own path the browser goes back to once signed in. */
-    readonly returnTo: string;
-}
 /** What a client acts as once its person signed in: the account itself, or an outside party (decision 0056). */
 export type SignInHolder = 'account' | 'party';
 /**
@@ -100,16 +91,4 @@ export interface AccountGrants {
     }, tokens: Partial<Pick<AccountGrant, 'refreshToken' | 'accountToken' | 'accountTokenExpiresAt' | 'personShipId' | 'scopes'>>): Promise<void>;
     end(fleetId: FleetId, grantId: string): Promise<void>;
 }
-/** A browser signed in to the gateway's pages: the account's grant it acts by. */
-export interface PageSession {
-    readonly fleetId: FleetId;
-    readonly grantId: string;
-}
-/** Outbound port: the page session a browser holds in the gateway's own cookie, sealed so no one forges or reads it. */
-export interface PageSessions {
-    /** The cookie's value for the session. */
-    seal(session: PageSession): string;
-    /** The session a Cookie header carries; none when it carries none the gateway sealed. */
-    inCookie(cookie: string): PageSession | undefined;
-}
 export {};

package/dist/ping-worker.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The gateway's own ship taking what waits for it, one round at a time: each
+ * receive waits while the fleet waits for a delivery, so argo's ping is
+ * answered as it comes (blueprint, "Ping"); stopping ends the wait.
+ */
+import type { FastifyBaseLogger } from 'fastify';
+import type { AnswerPings } from './core/connection/answer-pings.js';
+import type { Sleep } from './core/mcp-out/run-party.js';
+export interface PingWorker {
+    /** Runs a round every interval until it stops. */
+    start(): void;
+    /** Stops, once the round under way ended. */
+    stop(): Promise<void>;
+}
+export declare function createPingWorker(deps: {
+    answerPings: AnswerPings;
+    sleep: Sleep;
+    intervalMs: number;
+    log: FastifyBaseLogger;
+}): PingWorker;

package/dist/ping-worker.js

@@ -0,0 +1,33 @@
+export function createPingWorker(deps) {
+    const stopping = new AbortController();
+    let running = Promise.resolve();
+    const round = async () => {
+        try {
+            const { acked, refused } = await deps.answerPings(stopping.signal);
+            for (const { contentType, senderShipId } of acked) {
+                deps.log.info({ contentType, senderShipId }, "the gateway's ship acked a message it does not handle");
+            }
+            if (refused > 0) {
+                deps.log.debug({ refused }, "the fleet refused some calls of the gateway's ship's inbox");
+            }
+        }
+        catch (error) {
+            deps.log.error({ err: error }, 'ping round failed');
+        }
+    };
+    return {
+        start: () => {
+            running = (async () => {
+                while (!stopping.signal.aborted) {
+                    await round();
+                    await deps.sleep(deps.intervalMs, stopping.signal);
+                }
+            })();
+        },
+        stop: async () => {
+            stopping.abort();
+            await running;
+        },
+    };
+}
+//# sourceMappingURL=ping-worker.js.map

package/dist/ping-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping-worker.js","sourceRoot":"","sources":["../src/ping-worker.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,gBAAgB,CAAC,IAA4F;IAC3H,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE/C,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnE,KAAK,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,KAAK,EAAE,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,uDAAuD,CAAC,CAAC;YACxG,CAAC;YACD,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,4DAA4D,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChC,MAAM,KAAK,EAAE,CAAC;oBACd,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeolus-fleet/gateway",
-  "version": "0.28.1",
+  "version": "0.29.1",
   "description": "Aeolus gateway: outside MCP servers and clients join a fleet as ships, through one gateway beside core.",
   "keywords": [
     "ai-agents",
@@ -23,6 +23,10 @@
   },
   "files": [
     "dist",
+    "web/.next",
+    "!web/.next/cache",
+    "!web/.next/dev",
+    "web/next.config.ts",
     "prisma.config.ts",
     "src/adapters/prisma/schema.prisma",
     "src/adapters/prisma/migrations"
@@ -30,8 +34,8 @@
   "scripts": {
     "postinstall": "prisma generate",
     "generate": "prisma generate",
-    "build": "tsc --project tsconfig.build.json",
-    "typecheck": "tsc --project tsconfig.json",
+    "build": "tsc --project tsconfig.build.json && next build web",
+    "typecheck": "tsc --project tsconfig.json && next typegen web && tsc --project web/tsconfig.json",
     "lint": "eslint --max-warnings 0 .",
     "test": "vitest run",
     "test:unit": "vitest run --project '*:unit'",
@@ -40,30 +44,44 @@
     "db:migrate": "tsx --env-file-if-exists=.env src/bin/aeolus-gateway.ts migrate"
   },
   "dependencies": {
-    "@aeolus-fleet/common": "^0.28.0",
+    "@aeolus-fleet/common": "^0.29.1",
+    "@base-ui/react": "^1.9.0",
     "@fastify/websocket": "^11.3.4",
     "@modelcontextprotocol/client": "^2.3.1",
     "@modelcontextprotocol/server": "^2.3.1",
     "@prisma/adapter-pg": "^7.10.1",
     "@prisma/client": "^7.10.1",
+    "@trpc/client": "^11.19.0",
     "@trpc/server": "^11.19.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
     "fastify": "^5.12.7",
+    "lucide-react": "^1.61.0",
+    "next": "^16.4.2",
     "pg": "^8.23.1",
     "prisma": "^7.10.1",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
+    "tailwind-merge": "^3.7.0",
     "zod": "^4.6.5"
   },
   "devDependencies": {
-    "@aeolus-fleet/core": "^0.28.0",
+    "@aeolus-fleet/core": "^0.29.1",
     "@eslint/js": "^10.0.1",
     "@modelcontextprotocol/ext-tasks": "0.2.2",
+    "@tailwindcss/postcss": "^4.3.3",
     "@testcontainers/postgresql": "^12.2.0",
     "@types/node": "^26.6.3",
     "@types/pg": "^8.23.1",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
     "@types/ws": "^8.18.2",
     "eslint": "^10.11.0",
     "eslint-plugin-check-file": "^3.3.2",
+    "tailwindcss": "^4.3.3",
     "testcontainers": "^12.2.0",
     "tsx": "^4.23.15",
+    "tw-animate-css": "^1.4.0",
     "typescript": "~6.0.3",
     "typescript-eslint": "^8.71.0",
     "vitest": "^5.0.3",

package/src/adapters/prisma/migrations/20261021120000_opened_deliveries_sent_at/migration.sql

@@ -0,0 +1,4 @@
+-- A person's inbox lists what they opened with when it was sent. A row opened before has only when it was opened.
+ALTER TABLE "opened_deliveries" ADD COLUMN "sent_at" TIMESTAMPTZ(3);
+UPDATE "opened_deliveries" SET "sent_at" = "opened_at";
+ALTER TABLE "opened_deliveries" ALTER COLUMN "sent_at" SET NOT NULL;

package/src/adapters/prisma/schema.prisma

@@ -232,7 +232,7 @@ model PersonCrew {
   @@map("person_crews")
 }
 
-/// A delivery a person opened, kept until they deal with it, so their answer finds its message and sender (Q28 (a)).
+/// A delivery a person opened, kept until they deal with it, so their answer finds its message and sender and their inbox lists it (Q28 (a)).
 model OpenedDelivery {
   fleetId      String   @map("fleet_id")
   shipId       String   @map("ship_id")
@@ -241,6 +241,7 @@ model OpenedDelivery {
   senderShipId String   @map("sender_ship_id")
   from         String
   title        String
+  sentAt       DateTime @map("sent_at") @db.Timestamptz(3)
   openedAt     DateTime @map("opened_at") @db.Timestamptz(3)
 
   @@id([fleetId, shipId, deliveryId])

package/web/.next/BUILD_ID

@@ -0,0 +1 @@
+MLIzjhz2u5r5gyyuciHvf

package/web/.next/app-path-routes-manifest.json

@@ -0,0 +1,17 @@
+{
+  "/_global-error/page": "/_global-error",
+  "/_not-found/page": "/_not-found",
+  "/authorize/failed/page": "/authorize/failed",
+  "/authorize/pick/page": "/authorize/pick",
+  "/authorize/waiting/approval/page": "/authorize/waiting/approval",
+  "/outside-parties/[name]/change/page": "/outside-parties/[name]/change",
+  "/outside-parties/[name]/page": "/outside-parties/[name]",
+  "/outside-parties/[name]/retire/page": "/outside-parties/[name]/retire",
+  "/outside-parties/add/page": "/outside-parties/add",
+  "/outside-parties/page": "/outside-parties",
+  "/overview/changes/route": "/overview/changes",
+  "/overview/page": "/overview",
+  "/overview/requests/[requestId]/page": "/overview/requests/[requestId]",
+  "/parties/page": "/parties",
+  "/sign-in/failed/page": "/sign-in/failed"
+}