@aeolus-fleet/gateway 0.29.2 → 0.30.0

package/dist/core/people/turn-off-web-push.d.ts

@@ -0,0 +1,13 @@
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type PersonCaller, type PersonCrewError } from './person-crew.js';
+import type { WebPushSubscriptions } from './ports.js';
+export type TurnOffWebPush = (input: {
+    caller: PersonCaller;
+    endpoint: string;
+}) => Promise<Result<undefined, PersonCrewError>>;
+/** Use case: a person removes a browser they turned web push on in (wake a person, W8): it takes no wake again. */
+export declare function createTurnOffWebPush(deps: {
+    crewPersonShip: CrewPersonShip;
+    subscriptions: WebPushSubscriptions;
+}): TurnOffWebPush;

package/dist/core/people/turn-off-web-push.js

@@ -0,0 +1,14 @@
+import { ok } from '../shared/result.js';
+import { personCrewOf } from './person-crew.js';
+/** Use case: a person removes a browser they turned web push on in (wake a person, W8): it takes no wake again. */
+export function createTurnOffWebPush(deps) {
+    return async ({ caller, endpoint }) => {
+        const crew = await personCrewOf(deps.crewPersonShip, caller);
+        if (!crew.isOk) {
+            return crew;
+        }
+        await deps.subscriptions.remove(caller.fleetId, { shipId: crew.value.shipId, endpoint });
+        return ok(undefined);
+    };
+}
+//# sourceMappingURL=turn-off-web-push.js.map

package/dist/core/people/turn-off-web-push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-off-web-push.js","sourceRoot":"","sources":["../../../src/core/people/turn-off-web-push.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAA2C,MAAM,kBAAkB,CAAC;AAKzF,mHAAmH;AACnH,MAAM,UAAU,oBAAoB,CAAC,IAA6E;IAChH,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzF,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/turn-on-web-push.d.ts

@@ -0,0 +1,35 @@
+import type { HostResolver } from '../a2a-in/ports.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { CrewPersonShip } from './crew-person-ship.js';
+import { type PersonCaller, type PersonCrewError } from './person-crew.js';
+import type { WebPushSubscriptions } from './ports.js';
+export interface WebPushTurnedOn {
+    readonly caller: PersonCaller;
+    /** The fleet's name its wakes say, as the person's sign-in names it. */
+    readonly fleetName: string;
+    readonly endpoint: string;
+    readonly keys: {
+        readonly p256dh: string;
+        readonly auth: string;
+    };
+    readonly browser: string;
+}
+export type TurnOnWebPush = (input: WebPushTurnedOn) => Promise<Result<undefined, PersonCrewError | DomainError<'CHANNEL_NOT_OFFERED' | 'INVALID_SUBSCRIPTION'>>>;
+/**
+ * Use case: a person turns web push on for a browser (wake a person, W8),
+ * with the subscription the browser's push service gave it: kept for their
+ * person ship, a browser turned on again kept anew. A push service is
+ * reached over https at public addresses only, as A2A webhooks are: an
+ * endpoint whose host is, or resolves to, any private, loopback or
+ * link-local address is refused. Refused where the gateway holds no push
+ * keys.
+ */
+export declare function createTurnOnWebPush(deps: {
+    crewPersonShip: CrewPersonShip;
+    subscriptions: WebPushSubscriptions;
+    resolver: HostResolver;
+    isWebPushOffered: boolean;
+    clock: Clock;
+}): TurnOnWebPush;

package/dist/core/people/turn-on-web-push.js

@@ -0,0 +1,49 @@
+import { reachOf } from '../a2a-in/webhook-address.js';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { personCrewOf } from './person-crew.js';
+/** The longest push service endpoint the gateway keeps. */
+const ENDPOINT_MAX_LENGTH = 2048;
+/** The longest browser name, as the page names it. */
+const BROWSER_MAX_LENGTH = 100;
+/** A browser's P-256 public key (65 bytes) and auth secret (16 bytes), base64url as its PushSubscription states them, padded or not. */
+const P256DH = /^[A-Za-z0-9_-]{87}=?$/;
+const AUTH = /^[A-Za-z0-9_-]{22}(==)?$/;
+function isHttpsUrl(text) {
+    return URL.canParse(text) && new URL(text).protocol === 'https:';
+}
+/**
+ * Use case: a person turns web push on for a browser (wake a person, W8),
+ * with the subscription the browser's push service gave it: kept for their
+ * person ship, a browser turned on again kept anew. A push service is
+ * reached over https at public addresses only, as A2A webhooks are: an
+ * endpoint whose host is, or resolves to, any private, loopback or
+ * link-local address is refused. Refused where the gateway holds no push
+ * keys.
+ */
+export function createTurnOnWebPush(deps) {
+    return async ({ caller, fleetName, endpoint, keys, browser }) => {
+        if (!deps.isWebPushOffered) {
+            return refuse('CHANNEL_NOT_OFFERED', 'This gateway sends no web push');
+        }
+        if (endpoint.length > ENDPOINT_MAX_LENGTH || !isHttpsUrl(endpoint)) {
+            return refuse('INVALID_SUBSCRIPTION', `The push service's endpoint must be an https URL of at most ${String(ENDPOINT_MAX_LENGTH)} characters`);
+        }
+        if (!P256DH.test(keys.p256dh) || !AUTH.test(keys.auth)) {
+            return refuse('INVALID_SUBSCRIPTION', "The browser's push keys are not a P-256 public key and an auth secret of 16 bytes");
+        }
+        if (browser.length === 0 || browser.length > BROWSER_MAX_LENGTH) {
+            return refuse('INVALID_SUBSCRIPTION', `The browser's name must hold 1 to ${String(BROWSER_MAX_LENGTH)} characters`);
+        }
+        if ((await reachOf(deps.resolver, new URL(endpoint))) !== 'public') {
+            return refuse('INVALID_SUBSCRIPTION', "The push service's endpoint must resolve to public addresses only");
+        }
+        const crew = await personCrewOf(deps.crewPersonShip, caller);
+        if (!crew.isOk) {
+            return crew;
+        }
+        await deps.subscriptions.save({ fleetId: caller.fleetId, shipId: crew.value.shipId, endpoint, keys, browser, fleetName, addedAt: deps.clock.now(), goneAt: null });
+        return ok(undefined);
+    };
+}
+//# sourceMappingURL=turn-on-web-push.js.map

package/dist/core/people/turn-on-web-push.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-on-web-push.js","sourceRoot":"","sources":["../../../src/core/people/turn-on-web-push.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AAEvD,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAA2C,MAAM,kBAAkB,CAAC;AAGzF,2DAA2D;AAC3D,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,sDAAsD;AACtD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,wIAAwI;AACxI,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,IAAI,GAAG,0BAA0B,CAAC;AAaxC,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAA8I;IAChL,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;QAC9D,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,qBAAqB,EAAE,gCAAgC,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnE,OAAO,MAAM,CAAC,sBAAsB,EAAE,+DAA+D,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACjJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC,sBAAsB,EAAE,mFAAmF,CAAC,CAAC;QAC7H,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAChE,OAAO,MAAM,CAAC,sBAAsB,EAAE,qCAAqC,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnE,OAAO,MAAM,CAAC,sBAAsB,EAAE,mEAAmE,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnK,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/wait-on-person-ship.d.ts

@@ -0,0 +1,44 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+import type { Sleep } from '../mcp-out/run-party.js';
+import type { Clock } from '../shared/clock.js';
+import type { InboxChanges, PersonCrews, PersonShipDoor } from './ports.js';
+import type { WakePerson } from './wake-person.js';
+/**
+ * Why a waiter ended: the ship's crew no longer works and was dropped, the
+ * gateway holds no crew for the ship, or it was stopped.
+ */
+export type WaiterEnd = {
+    readonly reason: 'crewEnded';
+} | {
+    readonly reason: 'noCrew';
+} | {
+    readonly reason: 'stopped';
+};
+export type WaitOnPersonShip = (ship: {
+    fleetId: FleetId;
+    shipId: ShipId;
+}, signal: AbortSignal) => Promise<WaiterEnd>;
+/**
+ * Use case: the waiter of a person ship the gateway crews (wake a person,
+ * W5, W7). It looks once at the ship's inbox, then asks the fleet to wait
+ * while the count is the one it knows, and tells the person's pages at its
+ * first look and each time the count changed. When something waits at its
+ * first look, and each time the count rose, it wakes the person (W3); a
+ * wake a window held back is asked for again once the window ends, and one
+ * that failed after a wait, longer each time. It reads the crew it holds anew for every call, so
+ * a ship crewed again goes on with its new crew; a crew that no longer works
+ * is dropped, so the next sign-in crews again, and the waiter ends. While
+ * the fleet does not answer, it waits longer each time.
+ */
+export declare function createWaitOnPersonShip(deps: {
+    crews: PersonCrews;
+    door: Pick<PersonShipDoor, 'inbox'>;
+    changes: InboxChanges;
+    wakePerson: WakePerson;
+    clock: Clock;
+    sleep: Sleep;
+    /** How long to wait after each refusal in a row; the last repeats. */
+    againWaitsMs: readonly number[];
+    /** How long to wait before a wake that failed is tried again, each in a row; the last repeats. */
+    wakeAgainWaitsMs: readonly number[];
+}): WaitOnPersonShip;

package/dist/core/people/wait-on-person-ship.js

@@ -0,0 +1,92 @@
+import { isEndedCrew } from './person-crew.js';
+/**
+ * Use case: the waiter of a person ship the gateway crews (wake a person,
+ * W5, W7). It looks once at the ship's inbox, then asks the fleet to wait
+ * while the count is the one it knows, and tells the person's pages at its
+ * first look and each time the count changed. When something waits at its
+ * first look, and each time the count rose, it wakes the person (W3); a
+ * wake a window held back is asked for again once the window ends, and one
+ * that failed after a wait, longer each time. It reads the crew it holds anew for every call, so
+ * a ship crewed again goes on with its new crew; a crew that no longer works
+ * is dropped, so the next sign-in crews again, and the waiter ends. While
+ * the fleet does not answer, it waits longer each time.
+ */
+export function createWaitOnPersonShip(deps) {
+    return async (ship, signal) => {
+        const { fleetId, shipId } = ship;
+        let knownWaiting;
+        let refusedInARow = 0;
+        /** When to ask for a wake again though the count did not rise: a window ended, or a failed wake waited out. */
+        let wakeAgainAt;
+        let failedWakesInARow = 0;
+        // Read as a call, as the signal aborts between awaits.
+        const isStopped = () => signal.aborted;
+        /** Drops the crew that no longer works, unless the ship was crewed again meanwhile: whether it was dropped. */
+        const isDropped = async (crewToken) => {
+            const held = await deps.crews.find(fleetId, shipId);
+            if (held?.crewToken !== crewToken) {
+                return false;
+            }
+            await deps.crews.drop(fleetId, shipId);
+            return true;
+        };
+        const waitOf = (waitsMs, inARow) => waitsMs[Math.min(inARow, waitsMs.length - 1)] ?? 0;
+        while (!isStopped()) {
+            const crew = await deps.crews.find(fleetId, shipId);
+            if (crew === undefined) {
+                return { reason: 'noCrew' };
+            }
+            // A wake held back is asked for again once due, so the wait ends by then.
+            const atMostMs = wakeAgainAt === undefined ? undefined : Math.max(0, wakeAgainAt.getTime() - deps.clock.now().getTime());
+            const answered = await deps.door.inbox(crew.crewToken, knownWaiting === undefined ? undefined : { knownWaiting, signal, ...(atMostMs === undefined ? {} : { atMostMs }) });
+            if (isStopped()) {
+                break;
+            }
+            if (!answered.isOk) {
+                if (isEndedCrew(answered.error)) {
+                    if (await isDropped(crew.crewToken)) {
+                        return { reason: 'crewEnded' };
+                    }
+                    continue;
+                }
+                await deps.sleep(waitOf(deps.againWaitsMs, refusedInARow), signal);
+                refusedInARow += 1;
+                continue;
+            }
+            refusedInARow = 0;
+            const { waiting } = answered.value;
+            // The first look tells too: a page may have read the inbox before the waiter started.
+            if (waiting !== knownWaiting) {
+                await deps.changes.tell(ship);
+            }
+            const hasRisen = waiting > (knownWaiting ?? 0);
+            knownWaiting = waiting;
+            const isWakeDue = wakeAgainAt !== undefined && wakeAgainAt.getTime() <= deps.clock.now().getTime();
+            if (!hasRisen && !isWakeDue) {
+                continue;
+            }
+            const woken = await deps.wakePerson(ship, crew.crewToken);
+            if (!woken.isOk && isEndedCrew(woken.error) && (await isDropped(crew.crewToken))) {
+                return { reason: 'crewEnded' };
+            }
+            // A wake the fleet refused counts as one that failed: tried again after a wait.
+            const outcome = woken.isOk ? woken.value : { kind: 'failed' };
+            switch (outcome.kind) {
+                case 'settled':
+                    wakeAgainAt = undefined;
+                    failedWakesInARow = 0;
+                    break;
+                case 'inWindow':
+                    wakeAgainAt = outcome.until;
+                    failedWakesInARow = 0;
+                    break;
+                case 'failed':
+                    wakeAgainAt = new Date(deps.clock.now().getTime() + waitOf(deps.wakeAgainWaitsMs, failedWakesInARow));
+                    failedWakesInARow += 1;
+                    break;
+            }
+        }
+        return { reason: 'stopped' };
+    };
+}
+//# sourceMappingURL=wait-on-person-ship.js.map

package/dist/core/people/wait-on-person-ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wait-on-person-ship.js","sourceRoot":"","sources":["../../../src/core/people/wait-on-person-ship.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAY/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAWtC;IACC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;QAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QACjC,IAAI,YAAgC,CAAC;QACrC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,+GAA+G;QAC/G,IAAI,WAA6B,CAAC;QAClC,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,uDAAuD;QACvD,MAAM,SAAS,GAAG,GAAY,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;QAChD,+GAA+G;QAC/G,MAAM,SAAS,GAAG,KAAK,EAAE,SAAiB,EAAoB,EAAE;YAC9D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,OAA0B,EAAE,MAAc,EAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1H,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC9B,CAAC;YACD,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACzH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3K,IAAI,SAAS,EAAE,EAAE,CAAC;gBAChB,MAAM;YACR,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChC,IAAI,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;wBACpC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;oBACjC,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;gBACnE,aAAa,IAAI,CAAC,CAAC;gBACnB,SAAS;YACX,CAAC;YACD,aAAa,GAAG,CAAC,CAAC;YAClB,MAAM,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;YACnC,sFAAsF;YACtF,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;YAC/C,YAAY,GAAG,OAAO,CAAC;YACvB,MAAM,SAAS,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACnG,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;gBACjF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;YACjC,CAAC;YACD,gFAAgF;YAChF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,QAAQ,EAAY,CAAC;YACzE,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,SAAS;oBACZ,WAAW,GAAG,SAAS,CAAC;oBACxB,iBAAiB,GAAG,CAAC,CAAC;oBACtB,MAAM;gBACR,KAAK,UAAU;oBACb,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;oBAC5B,iBAAiB,GAAG,CAAC,CAAC;oBACtB,MAAM;gBACR,KAAK,QAAQ;oBACX,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC,CAAC;oBACtG,iBAAiB,IAAI,CAAC,CAAC;oBACvB,MAAM;YACV,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/wake-person.d.ts

@@ -0,0 +1,40 @@
+import type { FleetRefusal } from '../connection/ports.js';
+import type { Clock } from '../shared/clock.js';
+import { type Result } from '../shared/result.js';
+import type { FocusedPages, PersonShip, PersonShipDoor, WakeChannel, WakesSent } from './ports.js';
+/**
+ * What a wake came to: nothing left to wake (settled), a wake held back
+ * until the earliest window of a channel turned on ends (inWindow), or no
+ * channel sent it, so it is tried again (failed).
+ */
+export type WakeOutcome = {
+    readonly kind: 'settled';
+} | {
+    readonly kind: 'inWindow';
+    readonly until: Date;
+} | {
+    readonly kind: 'failed';
+};
+export type WakePerson = (ship: PersonShip, crewToken: string) => Promise<Result<WakeOutcome, FleetRefusal>>;
+/**
+ * Use case: wakes a person for what waits on their person ship (wake a
+ * person, W3, W8). It takes the ship's deliveries with the gateway as their
+ * waker; those never handed are fresh. Each channel the person turned on
+ * whose window has passed sends one wake for all of them; each fresh
+ * delivery is then handed no. 1, naming the first channel that went out, so
+ * a delivery is woken once. A wake held back by a window, or that no
+ * channel sent, hands nothing. Each channel's window is kept after the
+ * hand-overs, so a gateway that stopped in between wakes again: one wake
+ * more, nothing lost. While a page of the person is in focus, the page
+ * shows what arrives (W6): each fresh delivery is handed through it and no
+ * wake goes out.
+ */
+export declare function createWakePerson(deps: {
+    door: Pick<PersonShipDoor, 'pushReceive' | 'handed'>;
+    channels: readonly WakeChannel[];
+    wakesSent: WakesSent;
+    focused: FocusedPages;
+    /** How long a page counts in focus since it was last seen so. */
+    focusFreshMs: number;
+    clock: Clock;
+}): WakePerson;

package/dist/core/people/wake-person.js

@@ -0,0 +1,74 @@
+import { RECEIVE_MAX_UPPER_BOUND } from '@aeolus-fleet/common';
+import { err, ok } from '../shared/result.js';
+/**
+ * Use case: wakes a person for what waits on their person ship (wake a
+ * person, W3, W8). It takes the ship's deliveries with the gateway as their
+ * waker; those never handed are fresh. Each channel the person turned on
+ * whose window has passed sends one wake for all of them; each fresh
+ * delivery is then handed no. 1, naming the first channel that went out, so
+ * a delivery is woken once. A wake held back by a window, or that no
+ * channel sent, hands nothing. Each channel's window is kept after the
+ * hand-overs, so a gateway that stopped in between wakes again: one wake
+ * more, nothing lost. While a page of the person is in focus, the page
+ * shows what arrives (W6): each fresh delivery is handed through it and no
+ * wake goes out.
+ */
+export function createWakePerson(deps) {
+    return async (ship, crewToken) => {
+        /** Hands each fresh delivery no. 1 through the channel, up to the first refusal: that refusal, or none. */
+        const handEach = async (fresh, channel) => {
+            for (const { deliveryId } of fresh) {
+                const handed = await deps.door.handed(crewToken, { deliveryId, handOverNumber: 1, channel });
+                if (!handed.isOk) {
+                    return handed.error;
+                }
+            }
+            return undefined;
+        };
+        const taken = await deps.door.pushReceive(crewToken, { max: RECEIVE_MAX_UPPER_BOUND });
+        if (!taken.isOk) {
+            return taken;
+        }
+        const fresh = taken.value.filter(({ handOverNumber }) => handOverNumber === null);
+        if (fresh.length === 0) {
+            return ok({ kind: 'settled' });
+        }
+        if (await deps.focused.isAnyInFocus(ship, new Date(deps.clock.now().getTime() - deps.focusFreshMs))) {
+            const refused = await handEach(fresh, 'page');
+            return refused === undefined ? ok({ kind: 'settled' }) : err(refused);
+        }
+        const turnedOn = (await Promise.all(deps.channels.map(async (channel) => ((await channel.isOn(ship)) ? [channel] : [])))).flat();
+        if (turnedOn.length === 0) {
+            return ok({ kind: 'settled' });
+        }
+        const now = deps.clock.now();
+        const windows = await Promise.all(turnedOn.map(async (channel) => {
+            const lastSentAt = await deps.wakesSent.lastSentAt(ship, channel.name);
+            return { channel, endsAt: lastSentAt === undefined ? now : new Date(lastSentAt.getTime() + channel.windowMs) };
+        }));
+        const due = windows.filter(({ endsAt }) => endsAt.getTime() <= now.getTime()).map(({ channel }) => channel);
+        if (due.length === 0) {
+            return ok({ kind: 'inWindow', until: new Date(Math.min(...windows.map(({ endsAt }) => endsAt.getTime()))) });
+        }
+        const wentOut = [];
+        for (const channel of due) {
+            if ((await channel.wake(ship)).isOk) {
+                wentOut.push(channel.name);
+            }
+        }
+        const [firstOut] = wentOut;
+        if (firstOut === undefined) {
+            return ok({ kind: 'failed' });
+        }
+        const refused = await handEach(fresh, firstOut);
+        // The window is kept only after the hand-overs: a gateway that stopped in between wakes again, as the design says. A refusal keeps it, so no second email follows at once.
+        for (const channel of wentOut) {
+            await deps.wakesSent.record({ ship, channel, sentAt: now });
+        }
+        if (refused !== undefined) {
+            return err(refused);
+        }
+        return ok({ kind: 'settled' });
+    };
+}
+//# sourceMappingURL=wake-person.js.map

package/dist/core/people/wake-person.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wake-person.js","sourceRoot":"","sources":["../../../src/core/people/wake-person.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAI/D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAY3D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAQhC;IACC,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QAC/B,2GAA2G;QAC3G,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAsC,EAAE,OAAwB,EAAqC,EAAE;YAC7H,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC7F,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC;QAClF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9C,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjI,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjH,CAAC,CAAC,CACH,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QAC5G,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/G,CAAC;QACD,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChD,2KAA2K;QAC3K,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/web-push-channel.d.ts

@@ -0,0 +1,17 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import type { WakeChannel, WebPush, WebPushSubscriptions } from './ports.js';
+/**
+ * Web push, a channel that wakes a person (wake a person, W1, W4, W8). It is
+ * on while a browser they turned it on in still takes wakes. A wake goes to
+ * each such browser, saying only the fleet by its name and the overview
+ * link; it went out once one push service took it. A subscription its push
+ * service says is gone takes no wake again.
+ */
+export declare function createWebPushChannel(deps: {
+    subscriptions: WebPushSubscriptions;
+    webPush: WebPush;
+    clock: Clock;
+    windowMs: number;
+    overviewUrlOf: (fleetId: FleetId) => string;
+}): WakeChannel;

package/dist/core/people/web-push-channel.js

@@ -0,0 +1,35 @@
+import { err, ok } from '../shared/result.js';
+/**
+ * Web push, a channel that wakes a person (wake a person, W1, W4, W8). It is
+ * on while a browser they turned it on in still takes wakes. A wake goes to
+ * each such browser, saying only the fleet by its name and the overview
+ * link; it went out once one push service took it. A subscription its push
+ * service says is gone takes no wake again.
+ */
+export function createWebPushChannel(deps) {
+    const takingWakes = async ({ fleetId, shipId }) => (await deps.subscriptions.list(fleetId, shipId)).filter(({ goneAt }) => goneAt === null);
+    return {
+        name: 'web-push',
+        windowMs: deps.windowMs,
+        isOn: async (ship) => (await takingWakes(ship)).length > 0,
+        wake: async (ship) => {
+            const overviewUrl = deps.overviewUrlOf(ship.fleetId);
+            let isTaken = false;
+            for (const subscription of await takingWakes(ship)) {
+                const sent = await deps.webPush.send(subscription, { fleetName: subscription.fleetName, overviewUrl });
+                switch (sent) {
+                    case 'sent':
+                        isTaken = true;
+                        break;
+                    case 'gone':
+                        await deps.subscriptions.markGone(ship.fleetId, { shipId: ship.shipId, endpoint: subscription.endpoint, goneAt: deps.clock.now() });
+                        break;
+                    case 'failed':
+                        break;
+                }
+            }
+            return isTaken ? ok(undefined) : err({ reason: 'no push service took the wake' });
+        },
+    };
+}
+//# sourceMappingURL=web-push-channel.js.map

package/dist/core/people/web-push-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-push-channel.js","sourceRoot":"","sources":["../../../src/core/people/web-push-channel.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,qBAAqB,CAAC;AAG9C;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA4I;IAC/K,MAAM,WAAW,GAAG,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAc,EAAkC,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;IACxL,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;QAC1D,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACnB,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,KAAK,MAAM,YAAY,IAAI,MAAM,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;gBACvG,QAAQ,IAAI,EAAE,CAAC;oBACb,KAAK,MAAM;wBACT,OAAO,GAAG,IAAI,CAAC;wBACf,MAAM;oBACR,KAAK,MAAM;wBACT,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;wBACpI,MAAM;oBACR,KAAK,QAAQ;wBACX,MAAM;gBACV,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC,CAAC;QACpF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/requests/decide-request.d.ts

@@ -7,8 +7,6 @@ import { type DomainError } from '../shared/errors.js';
 import { type Result } from '../shared/result.js';
 import type { McpServerCredential } from '../vault/credential.js';
 import type { PendingRequests } from './ports.js';
-/** The scope the gateway declares for approving outside parties (decision 0056). */
-export declare const APPROVING_SCOPE = "gateway:approve";
 /** An approval: the proxy ship's name, its owner (a person ship) and its scopes; for a server, its credential and how many calls it takes at once. */
 export interface Approval {
     readonly kind: 'approve';

package/dist/core/requests/decide-request.js

@@ -1,10 +1,7 @@
+import { APPROVING_SCOPE, EVERY_APP_SHIP_SCOPES, scopeNotHeld } from '../parties/approver.js';
 import { refuse } from '../shared/errors.js';
 import { ok } from '../shared/result.js';
 import { noticesOf } from './outcome-notice.js';
-/** The scope the gateway declares for approving outside parties (decision 0056). */
-export const APPROVING_SCOPE = 'gateway:approve';
-/** The scopes every app ship gets (decision 0046), so an approver need not hold them to grant them. */
-const EVERY_APP_SHIP_SCOPES = new Set(['messages:send', 'messages:receive']);
 function decidedByOf(actor) {
     switch (actor.kind) {
         case 'ship':
@@ -37,7 +34,7 @@ export function createDecideRequest(deps) {
         }
         return approval.server === undefined
             ? Promise.resolve(refuse('SERVER_DETAILS_MISSING', 'Adding an outside MCP server needs its credential and how many calls it takes at once'))
-            : deps.approveParty({ ...party, url: request.subject.url, ...approval.server });
+            : deps.approveParty({ ...party, url: request.subject.url, ...approval.server, toolSwitches: null });
     };
     return async ({ actor, requestId, decision }) => {
         if (!actor.scopes.includes(APPROVING_SCOPE)) {
@@ -59,7 +56,7 @@ export function createDecideRequest(deps) {
             const isDenied = await deps.requests.decide(actor.fleetId, { requestId, from: ['pending'], decision: decided, notices: noticesOf(request, { outcome: 'denied', partyName: null }) });
             return isDenied ? ok({ state: 'denied', party: null }) : refuse('ALREADY_DECIDED', 'This request is decided already');
         }
-        const notHeld = decision.party.scopes.find((scope) => !EVERY_APP_SHIP_SCOPES.has(scope) && !actor.scopes.includes(scope));
+        const notHeld = scopeNotHeld(actor, decision.party.scopes);
         if (notHeld !== undefined) {
             return refuse('SCOPE_NOT_HELD', `You may grant only scopes you hold: not ${notHeld}`);
         }

package/dist/core/requests/decide-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"decide-request.js","sourceRoot":"","sources":["../../../src/core/requests/decide-request.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAEjD,uGAAuG;AACvG,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAiB7E,SAAS,WAAW,CAAC,KAAY;IAC/B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAChD,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACzD,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAqH;IACvJ,MAAM,OAAO,GAAG,CAAC,OAAuB,EAAE,QAAkB,EAAE,EAAE;QAC9D,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrH,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,uFAAuF,CAAC,CAAC;YAC5I,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,eAAe,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,iBAAiB,EAAE,cAAc,SAAS,gBAAgB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;YAC7F,OAAO,MAAM,CAAC,SAAS,EAAE,4DAA4D,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,UAAoB,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACnJ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACrL,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1H,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,gBAAgB,EAAE,2CAA2C,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACvE,OAAO,MAAM,CAAC,wBAAwB,EAAE,uFAAuF,CAAC,CAAC;QACnI,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YACnG,OAAO,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpL,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"decide-request.js","sourceRoot":"","sources":["../../../src/core/requests/decide-request.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG9F,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAkBhD,SAAS,WAAW,CAAC,KAAY;IAC/B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAChD,KAAK,SAAS;YACZ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACzD,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAqH;IACvJ,MAAM,OAAO,GAAG,CAAC,OAAuB,EAAE,QAAkB,EAAE,EAAE;QAC9D,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;QACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrH,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,uFAAuF,CAAC,CAAC;YAC5I,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC;IAEF,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC9C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,eAAe,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,iBAAiB,EAAE,cAAc,SAAS,gBAAgB,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/D,OAAO,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC;YAC7F,OAAO,MAAM,CAAC,SAAS,EAAE,4DAA4D,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAE,QAAkB,CAAC,CAAC,CAAE,UAAoB,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACnJ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACrL,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACxH,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,gBAAgB,EAAE,2CAA2C,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACvE,OAAO,MAAM,CAAC,wBAAwB,EAAE,uFAAuF,CAAC,CAAC;QACnI,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;YACnG,OAAO,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YACxD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACpL,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/requests/list-to-decide.js

@@ -1,6 +1,6 @@
 import { refuse } from '../shared/errors.js';
 import { ok } from '../shared/result.js';
-import { APPROVING_SCOPE } from './decide-request.js';
+import { APPROVING_SCOPE } from '../parties/approver.js';
 /** Use case: every open request of the fleet, for an actor holding gateway:approve (decision 0056: To decide on the overview). */
 export function createListToDecide(deps) {
     return async (actor) => {

package/dist/core/requests/list-to-decide.js.map

@@ -1 +1 @@
-{"version":3,"file":"list-to-decide.js","sourceRoot":"","sources":["../../../src/core/requests/list-to-decide.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAKtD,kIAAkI;AAClI,MAAM,UAAU,kBAAkB,CAAC,IAAiD;IAClF,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,eAAe,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"list-to-decide.js","sourceRoot":"","sources":["../../../src/core/requests/list-to-decide.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAKzD,kIAAkI;AAClI,MAAM,UAAU,kBAAkB,CAAC,IAAiD;IAClF,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,eAAe,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/shared/errors.d.ts

@@ -1,6 +1,6 @@
 import { type Err } from './result.js';
 /** Every reason the gateway's core refuses a request. */
-export type DomainErrorKind = 'ALREADY_CONNECTED' | 'SECRET_REFUSED' | 'OTHER_FLEET' | 'MISSING_SCOPES' | 'SCOPE_REFUSED' | 'NOT_THE_OPERATOR' | 'NOT_AN_ACTOR' | 'NOT_AN_APPROVER' | 'NO_SUCH_REQUEST' | 'ALREADY_DECIDED' | 'EXPIRED' | 'SCOPE_NOT_HELD' | 'SERVER_DETAILS_MISSING' | 'REQUEST_ID_USED' | 'FLEET_UNAVAILABLE' | 'NOT_CONNECTED' | 'PARTY_EXISTS' | 'COMMISSION_REFUSED' | 'NO_SUCH_PARTY' | 'NOT_AWAITING_CREW' | 'NOT_CREWED' | 'SERVER_UNREACHABLE' | 'STATEMENT_REFUSED' | 'INVALID_REDIRECT_URIS' | 'CLIENT_HAS_PARTY' | 'PARTY_NOT_CREWED' | 'NO_SUCH_TOOL' | 'INVALID_ARGUMENTS' | 'NOT_REACHABLE' | 'SEND_REFUSED' | 'NO_SUCH_CALL' | 'NOT_A_PERSON' | 'SIGNED_OUT' | 'NO_SUCH_DELIVERY' | 'NOT_A_NETWORKER' | 'OPEN_NETWORK' | 'OUTSIDE_PARTIES_OFF' | 'INVALID_SERVER_URL' | 'NOT_A_MANAGER' | 'RETIRE_REFUSED' | 'NOT_AN_ACCOUNT' | 'PARTY_NOT_COMMISSIONED' | 'CHANGE_REFUSED';
+export type DomainErrorKind = 'ALREADY_CONNECTED' | 'SECRET_REFUSED' | 'OTHER_FLEET' | 'MISSING_SCOPES' | 'SCOPE_REFUSED' | 'NOT_THE_OPERATOR' | 'NOT_AN_ACTOR' | 'NOT_AN_APPROVER' | 'NO_SUCH_REQUEST' | 'ALREADY_DECIDED' | 'EXPIRED' | 'SCOPE_NOT_HELD' | 'SERVER_DETAILS_MISSING' | 'REQUEST_ID_USED' | 'FLEET_UNAVAILABLE' | 'NOT_CONNECTED' | 'PARTY_EXISTS' | 'COMMISSION_REFUSED' | 'NO_SUCH_PARTY' | 'NOT_AWAITING_CREW' | 'NOT_CREWED' | 'SERVER_UNREACHABLE' | 'STATEMENT_REFUSED' | 'INVALID_REDIRECT_URIS' | 'CLIENT_HAS_PARTY' | 'PARTY_NOT_CREWED' | 'NO_SUCH_TOOL' | 'INVALID_ARGUMENTS' | 'NOT_REACHABLE' | 'SEND_REFUSED' | 'NO_SUCH_CALL' | 'NOT_A_PERSON' | 'SIGNED_OUT' | 'NO_SUCH_DELIVERY' | 'NOT_A_NETWORKER' | 'OPEN_NETWORK' | 'OUTSIDE_PARTIES_OFF' | 'INVALID_SERVER_URL' | 'NOT_A_MANAGER' | 'RETIRE_REFUSED' | 'NOT_AN_ACCOUNT' | 'PARTY_NOT_COMMISSIONED' | 'CHANGE_REFUSED' | 'UNKNOWN_ALIAS' | 'PAYLOAD_TOO_LARGE' | 'TASK_NOT_FOUND' | 'TASK_TERMINAL' | 'WEBHOOK_REFUSED' | 'PUSH_CONFIG_NOT_FOUND' | 'CONTEXT_MISMATCH' | 'CARD_UNREACHABLE' | 'CARD_INVALID' | 'NOT_A_MESSAGE' | 'CHANNEL_NOT_OFFERED' | 'INVALID_SUBSCRIPTION';
 /** Why the core refused a request. Adapters map the kind to their own error shape; the message is safe to show. */
 export interface DomainError<K extends DomainErrorKind = DomainErrorKind> {
     readonly kind: K;

package/dist/core/shared/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/core/shared/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAsD5C,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAA4B,IAAO,EAAE,OAAe;IACxE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/core/shared/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAkE5C,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAA4B,IAAO,EAAE,OAAe;IACxE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAChC,CAAC"}

package/dist/core/sign-in/ports.d.ts

@@ -66,6 +66,19 @@ export interface Pagasae {
         kind: 'refused' | 'unavailable';
         reason: string;
     }>>;
+    /**
+     * The account's grant for an ID-JAG a client of the gateway brought
+     * (aeolus-fleet company sign-in design, slice 6): pagasae checks it against
+     * the organisation's identity provider, for the gateway and that client,
+     * once; refused as for any refusal there, unavailable when it did not answer.
+     */
+    exchangeIdJag(handed: {
+        idJag: string;
+        clientId: string;
+    }): Promise<Result<PagasaeTokens, {
+        kind: 'refused' | 'unavailable';
+        reason: string;
+    }>>;
 }
 /** A person's sign-in kept for their MCP client or the gateway's pages: the account in the fleet, and pagasae's tokens to act as it. */
 export interface AccountGrant {

package/dist/core/vault/credential.d.ts

@@ -1,10 +1,14 @@
 /**
- * The credential the gateway calls an outside MCP server with, kept in the
+ * The credential the gateway calls an outside MCP server or A2A agent with, kept in the
  * vault, the gateway's own database (as squadrons keeps crew tokens). The
  * server sees the gateway's credential, never the asker's: no rights travel
  * with a message.
  */
-export type McpServerCredential = {
+export type McpServerCredential = 
+/** A server that asks for none, as one reached only on a private network: the gateway sends no Authorization header. */
+{
+    readonly kind: 'none';
+} | {
     readonly kind: 'bearer';
     readonly token: string;
 } | {

package/dist/party-workers.d.ts

@@ -2,11 +2,16 @@
  * The gateway's workers, one per crewed party, each until the gateway stops
  * or the fleet refuses its crew token: an outside server's states its proxy
  * ship, then takes its calls (interop 5.2); an outside client's takes the
- * replies to its calls (Q9 a). A fleet's workers work only while its outside
+ * replies to its calls (Q9 a), and an A2A client's pushes its tasks' changes
+ * to its webhooks meanwhile (slice 4); an outside A2A agent's states its
+ * proxy ship from its card (slice 5), then takes its messages (slice 6). A fleet's workers work only while its outside
  * parties are on (interop I-3).
  */
 import type { FleetId } from '@aeolus-fleet/common';
 import type { FastifyBaseLogger } from 'fastify';
+import type { PushToWebhooks } from './core/a2a-in/push-to-webhooks.js';
+import type { RunA2aAgent } from './core/a2a-out/run-a2a-agent.js';
+import type { StateA2aAgent } from './core/a2a-out/state-a2a-agent.js';
 import type { CollectReplies } from './core/mcp-in/collect-replies.js';
 import type { RunParty } from './core/mcp-out/run-party.js';
 import type { StateParty } from './core/mcp-out/state-party.js';
@@ -25,8 +30,11 @@ export interface PartyWorkers {
 export declare function createPartyWorkers(deps: {
     parties: PartyStore;
     stateParty: StateParty;
+    stateA2aAgent: StateA2aAgent;
     runParty: RunParty;
+    runA2aAgent: RunA2aAgent;
     collectReplies: CollectReplies;
+    pushToWebhooks: PushToWebhooks;
     servesOutsideParties: (fleetId: FleetId) => Promise<boolean>;
     log: FastifyBaseLogger;
 }): PartyWorkers;