@aeolus-fleet/gateway 0.32.2 → 0.34.0

package/dist/core/party-grants/refresh-grant.js

@@ -0,0 +1,58 @@
+import { err, ok } from '../shared/result.js';
+import { accessTokenEndsAtOf } from './party-grant.js';
+/** The OAuth error a refresh token the authorization server will not refresh again is refused with (RFC 6749 5.2). */
+const INVALID_GRANT = 'invalid_grant';
+/**
+ * Use case: a person's grant is refreshed with its party's client (decision
+ * 0067, Q7), one refresh at a time per grant: the grant is held while its
+ * refresh runs, and the new tokens are kept before they are used (L19). A
+ * grant whose access token is no longer the one asked for was refreshed, or
+ * signed in again, meanwhile: it is answered as held, refreshing nothing, so
+ * a rotated refresh token is never used twice. A server that issues no new
+ * refresh token leaves the one held. A refresh answered `invalid_grant`
+ * loses the grant, kept with when and why, and tells the person once (Q5,
+ * Q6); any other refusal keeps it as it was.
+ */
+export function createRefreshGrant(deps) {
+    return async ({ client, grant }) => {
+        let failure;
+        const losing = { lost: null };
+        const refreshed = async (held) => {
+            if (held.lost !== null) {
+                failure = { kind: 'lost', lost: held.lost };
+                return held;
+            }
+            if (held.accessToken !== grant.accessToken) {
+                return held;
+            }
+            if (held.refreshToken === null) {
+                failure = { kind: 'noRefreshToken' };
+                return held;
+            }
+            const answered = await deps.signIns.refresh(client, held.refreshToken);
+            if (!answered.isOk) {
+                if (answered.error.kind === 'refused' && answered.error.error === INVALID_GRANT) {
+                    const lost = { at: deps.clock.now(), why: answered.error.reason };
+                    failure = { kind: 'lost', lost };
+                    losing.lost = lost;
+                    return { ...held, lost };
+                }
+                failure = answered.error;
+                return held;
+            }
+            const { accessToken, refreshToken, expiresInSeconds } = answered.value;
+            const now = deps.clock.now();
+            return { ...held, accessToken, refreshToken: refreshToken ?? held.refreshToken, accessTokenEndsAt: accessTokenEndsAtOf(now, expiresInSeconds), refreshedAt: now };
+        };
+        const kept = await deps.grants.change(grant, refreshed);
+        if (kept === undefined) {
+            return err({ kind: 'removed' });
+        }
+        if (losing.lost !== null) {
+            // Told once the loss is kept, never while the grant is held.
+            await deps.tellSignInNeeded({ fleetId: kept.fleetId, party: kept.party, personShipId: kept.personShipId, lost: losing.lost });
+        }
+        return failure === undefined ? ok(kept) : err(failure);
+    };
+}
+//# sourceMappingURL=refresh-grant.js.map

package/dist/core/party-grants/refresh-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-grant.js","sourceRoot":"","sources":["../../../src/core/party-grants/refresh-grant.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,mBAAmB,EAAmC,MAAM,kBAAkB,CAAC;AAIxF,sHAAsH;AACtH,MAAM,aAAa,GAAG,eAAe,CAAC;AAYtC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuI;IACxK,OAAO,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE;QACjC,IAAI,OAAmC,CAAC;QACxC,MAAM,MAAM,GAA+B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,KAAK,EAAE,IAAgB,EAAuB,EAAE;YAChE,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;gBACrC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACvE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnB,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;oBAChF,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAClE,OAAO,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;oBACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;oBACnB,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC3B,CAAC;gBACD,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;YACvE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAC7B,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QACpK,CAAC,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACzB,6DAA6D;YAC7D,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChI,CAAC;QACD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/party-grants/remove-grant.d.ts

@@ -0,0 +1,21 @@
+import type { ShipId } from '@aeolus-fleet/common';
+import type { ApprovingDeps, CheckApproving } from '../parties/check-approving.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import { type ApprovedSignInPartyRefusal } from './approved-sign-in-party.js';
+import type { PartyGrants, PartySignIns } from './ports.js';
+export type RemoveGrant = (input: Parameters<CheckApproving>[0] & {
+    personShipId: ShipId;
+}) => Promise<Result<{
+    isRevoked: boolean;
+}, ApprovedSignInPartyRefusal | DomainError<'NOT_SIGNED_IN'>>>;
+/**
+ * Use case: an actor holding gateway:approve within manage reach of an
+ * outside MCP server's proxy ship removes any person's sign-in to it
+ * (decision 0067, Q6), so the party is cut off for that person without
+ * retiring it. It ends as every grant ends.
+ */
+export declare function createRemoveGrant(deps: ApprovingDeps & {
+    grants: Pick<PartyGrants, 'ofPerson' | 'remove'>;
+    signIns: Pick<PartySignIns, 'revoke'>;
+}): RemoveGrant;

package/dist/core/party-grants/remove-grant.js

@@ -0,0 +1,25 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { approvedSignInParty } from './approved-sign-in-party.js';
+import { endGrant } from './end-grant.js';
+/**
+ * Use case: an actor holding gateway:approve within manage reach of an
+ * outside MCP server's proxy ship removes any person's sign-in to it
+ * (decision 0067, Q6), so the party is cut off for that person without
+ * retiring it. It ends as every grant ends.
+ */
+export function createRemoveGrant(deps) {
+    return async ({ personShipId, ...asked }) => {
+        const approved = await approvedSignInParty(deps, asked);
+        if (!approved.isOk) {
+            return approved;
+        }
+        const { name, client } = approved.value;
+        const grant = await deps.grants.ofPerson(asked.actor.fleetId, { party: name, personShipId });
+        if (grant === undefined) {
+            return refuse('NOT_SIGNED_IN', `${personShipId} is not signed in to ${name}`);
+        }
+        return ok({ isRevoked: await endGrant(deps, { client, grant }) });
+    };
+}
+//# sourceMappingURL=remove-grant.js.map

package/dist/core/party-grants/remove-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-grant.js","sourceRoot":"","sources":["../../../src/core/party-grants/remove-grant.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAmC,MAAM,6BAA6B,CAAC;AACnG,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAO1C;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAiH;IACjJ,OAAO,KAAK,EAAE,EAAE,YAAY,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE;QAC1C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,YAAY,wBAAwB,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/party-grants/remove-own-grant.d.ts

@@ -0,0 +1,17 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { PartyGrants, PartySignIns, SignInServers } from './ports.js';
+import { type SignInPartyRefusal } from './sign-in-party.js';
+export type RemoveOwnGrant = (input: {
+    actor: Actor;
+    name: string;
+}) => Promise<Result<{
+    isRevoked: boolean;
+}, SignInPartyRefusal | DomainError<'NOT_SIGNED_IN'>>>;
+/** Use case: a person removes their own sign-in to an outside MCP server (decision 0067, Q6), ended as every grant ends. */
+export declare function createRemoveOwnGrant(deps: {
+    servers: SignInServers;
+    grants: Pick<PartyGrants, 'ofPerson' | 'remove'>;
+    signIns: Pick<PartySignIns, 'revoke'>;
+}): RemoveOwnGrant;

package/dist/core/party-grants/remove-own-grant.js

@@ -0,0 +1,21 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { endGrant } from './end-grant.js';
+import { signInPartyOf } from './sign-in-party.js';
+/** Use case: a person removes their own sign-in to an outside MCP server (decision 0067, Q6), ended as every grant ends. */
+export function createRemoveOwnGrant(deps) {
+    return async (input) => {
+        const signingIn = await signInPartyOf(deps.servers, input);
+        if (!signingIn.isOk) {
+            return signingIn;
+        }
+        const { server, client, personShipId } = signingIn.value;
+        const grant = await deps.grants.ofPerson(server.fleetId, { party: server.name, personShipId });
+        if (grant === undefined) {
+            return refuse('NOT_SIGNED_IN', `You are not signed in to ${server.name}`);
+        }
+        const isRevoked = await endGrant(deps, { client, grant });
+        return ok({ isRevoked });
+    };
+}
+//# sourceMappingURL=remove-own-grant.js.map

package/dist/core/party-grants/remove-own-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remove-own-grant.js","sourceRoot":"","sources":["../../../src/core/party-grants/remove-own-grant.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EAAE,aAAa,EAA2B,MAAM,oBAAoB,CAAC;AAI5E,4HAA4H;AAC5H,MAAM,UAAU,oBAAoB,CAAC,IAAyH;IAC5J,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,MAAM,CAAC,eAAe,EAAE,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/party-grants/sign-in-party.d.ts

@@ -0,0 +1,23 @@
+import type { ShipId } from '@aeolus-fleet/common';
+import type { Actor } from '../actors/authenticate-actor.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { SignInClient } from '../vault/credential.js';
+import type { SignInServer, SignInServers } from './ports.js';
+export type SignInPartyRefusal = DomainError<'NOT_A_PERSON' | 'NO_SUCH_PARTY' | 'NO_SIGN_IN'>;
+/** A person acting on their own sign-in to a party, and the party's client. */
+export interface SignInParty {
+    readonly server: SignInServer;
+    readonly client: SignInClient;
+    readonly accountId: string;
+    readonly personShipId: ShipId;
+}
+/**
+ * The party an account signs in to for itself (decision 0067, Q16): only an
+ * account with a person ship in the fleet, and only an outside MCP server
+ * where each person signs in.
+ */
+export declare function signInPartyOf(servers: SignInServers, asked: {
+    actor: Actor;
+    name: string;
+}): Promise<Result<SignInParty, SignInPartyRefusal>>;

package/dist/core/party-grants/sign-in-party.js

@@ -0,0 +1,22 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/**
+ * The party an account signs in to for itself (decision 0067, Q16): only an
+ * account with a person ship in the fleet, and only an outside MCP server
+ * where each person signs in.
+ */
+export async function signInPartyOf(servers, asked) {
+    const { actor, name } = asked;
+    if (actor.kind !== 'account' || actor.personShipId === null) {
+        return refuse('NOT_A_PERSON', 'Only a person signs in to an outside server, and your account has no person ship in this fleet');
+    }
+    const server = await servers.find(actor.fleetId, name);
+    if (server === undefined) {
+        return refuse('NO_SUCH_PARTY', `There is no outside MCP server ${name}`);
+    }
+    if (server.client === null) {
+        return refuse('NO_SIGN_IN', `Nobody signs in to ${name} for themselves: the gateway calls it with its own credential`);
+    }
+    return ok({ server, client: server.client, accountId: actor.accountId, personShipId: actor.personShipId });
+}
+//# sourceMappingURL=sign-in-party.js.map

package/dist/core/party-grants/sign-in-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-in-party.js","sourceRoot":"","sources":["../../../src/core/party-grants/sign-in-party.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AActD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAsB,EAAE,KAAqC;IAC/F,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,cAAc,EAAE,gGAAgG,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,eAAe,EAAE,kCAAkC,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,YAAY,EAAE,sBAAsB,IAAI,+DAA+D,CAAC,CAAC;IACzH,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;AAC7G,CAAC"}

package/dist/core/party-grants/start-party-sign-in.d.ts

@@ -0,0 +1,31 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { OAuthSecrets } from '../oauth/ports.js';
+import type { Clock } from '../shared/clock.js';
+import { type Result } from '../shared/result.js';
+import type { PartySignIns, PartySignInSeals, SignInServers } from './ports.js';
+import { type SignInPartyRefusal } from './sign-in-party.js';
+/** How long a sign-in the gateway started may take to come back from the outside authorization server. */
+export declare const PARTY_SIGN_IN_MS: number;
+export type StartPartySignInRefusal = SignInPartyRefusal;
+export type StartPartySignIn = (input: {
+    actor: Actor;
+    name: string;
+}) => Promise<Result<{
+    url: string;
+}, StartPartySignInRefusal>>;
+/**
+ * Use case: a person presses Sign in on an outside MCP server's page, for
+ * themselves (decision 0067, Q16): every account of the fleet with a person
+ * ship may. The gateway seals whose sign-in it is and its PKCE verifier into
+ * the state, for ten minutes, and sends the person to the party's
+ * authorization server under the party's client.
+ */
+export declare function createStartPartySignIn(deps: {
+    servers: SignInServers;
+    seals: PartySignInSeals;
+    signIns: Pick<PartySignIns, 'authorizeUrl'>;
+    secrets: Pick<OAuthSecrets, 'newSecret' | 'challengeOf'>;
+    clock: Clock;
+    /** Where the authorization server sends the person back: the redirect URI the party's client was registered with. */
+    redirectUri: string;
+}): StartPartySignIn;

package/dist/core/party-grants/start-party-sign-in.js

@@ -0,0 +1,31 @@
+import { ok } from '../shared/result.js';
+import { signInPartyOf } from './sign-in-party.js';
+/** How long a sign-in the gateway started may take to come back from the outside authorization server. */
+export const PARTY_SIGN_IN_MS = 10 * 60 * 1000;
+/**
+ * Use case: a person presses Sign in on an outside MCP server's page, for
+ * themselves (decision 0067, Q16): every account of the fleet with a person
+ * ship may. The gateway seals whose sign-in it is and its PKCE verifier into
+ * the state, for ten minutes, and sends the person to the party's
+ * authorization server under the party's client.
+ */
+export function createStartPartySignIn(deps) {
+    return async ({ actor, name }) => {
+        const signingIn = await signInPartyOf(deps.servers, { actor, name });
+        if (!signingIn.isOk) {
+            return signingIn;
+        }
+        const { client, accountId, personShipId } = signingIn.value;
+        const verifier = deps.secrets.newSecret();
+        const state = deps.seals.seal({
+            fleetId: actor.fleetId,
+            party: name,
+            accountId,
+            personShipId,
+            verifier,
+            expiresAt: new Date(deps.clock.now().getTime() + PARTY_SIGN_IN_MS),
+        });
+        return ok({ url: deps.signIns.authorizeUrl(client, { state, codeChallenge: deps.secrets.challengeOf(verifier), redirectUri: deps.redirectUri }) });
+    };
+}
+//# sourceMappingURL=start-party-sign-in.js.map

package/dist/core/party-grants/start-party-sign-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start-party-sign-in.js","sourceRoot":"","sources":["../../../src/core/party-grants/start-party-sign-in.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAA2B,MAAM,oBAAoB,CAAC;AAE5E,0GAA0G;AAC1G,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAM/C;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAQtC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QAC/B,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,IAAI;YACX,SAAS;YACT,YAAY;YACZ,QAAQ;YACR,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,gBAAgB,CAAC;SACnE,CAAC,CAAC;QACH,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IACrJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/party-grants/tell-sign-in-needed.d.ts

@@ -0,0 +1,29 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+import type { ConnectionStore } from '../connection/ports.js';
+import type { CallSender } from '../mcp-in/ports.js';
+import type { GrantLost } from './party-grant.js';
+import type { SignInNotices } from './ports.js';
+/** Tells a person a call needs their sign-in to a party, or that their grant of it was lost, unless they were told since their last sign-in. */
+export type TellSignInNeeded = (input: {
+    fleetId: FleetId;
+    party: string;
+    personShipId: ShipId;
+    lost: GrantLost | null;
+}) => Promise<void>;
+/** The page a person signs in to a party on, in a fleet. */
+export type PageUrlOf = (fleetId: FleetId, party: string) => string;
+/**
+ * Use case: the gateway's ship tells a person, by a text message to their
+ * person ship, that a call needs their sign-in to a party, or that their
+ * grant of it was lost, with the page to sign in on (decision 0067, Q6, Q9): once per party, and again only after a
+ * sign-in in between closes the notice. The notice's id keys the message, so
+ * one the fleet did not answer is sent again at the next call and stored
+ * once; one it refused is not tried again.
+ */
+export declare function createTellSignInNeeded(deps: {
+    notices: SignInNotices;
+    connections: Pick<ConnectionStore, 'find'>;
+    sender: CallSender;
+    newNoticeId: () => string;
+    pageUrlOf: PageUrlOf;
+}): TellSignInNeeded;

package/dist/core/party-grants/tell-sign-in-needed.js

@@ -0,0 +1,27 @@
+function textOf({ party, lost }, pageUrl) {
+    return lost === null
+        ? `A ship of yours called ${party}, which calls under each person's own sign-in, and you are not signed in to it. Sign in on ${pageUrl}; until then your ships' calls to ${party} are refused.`
+        : `Your sign-in to ${party} ended: ${party} refused to refresh it (${lost.why}). Sign in again on ${pageUrl}; until then your ships' calls to ${party} are refused.`;
+}
+/**
+ * Use case: the gateway's ship tells a person, by a text message to their
+ * person ship, that a call needs their sign-in to a party, or that their
+ * grant of it was lost, with the page to sign in on (decision 0067, Q6, Q9): once per party, and again only after a
+ * sign-in in between closes the notice. The notice's id keys the message, so
+ * one the fleet did not answer is sent again at the next call and stored
+ * once; one it refused is not tried again.
+ */
+export function createTellSignInNeeded(deps) {
+    return async ({ fleetId, party, personShipId, lost }) => {
+        const notice = await deps.notices.open(fleetId, { party, personShipId, noticeId: deps.newNoticeId() });
+        const gateway = await deps.connections.find(fleetId);
+        if (notice.isTold || gateway === undefined) {
+            return;
+        }
+        const sent = await deps.sender.send(gateway.crewToken, { to: personShipId, contentType: 'text/plain', payload: textOf({ party, lost }, deps.pageUrlOf(fleetId, party)), idempotencyKey: `party-sign-in:${notice.noticeId}` });
+        if (sent.isOk || sent.error.code !== 'UNAVAILABLE') {
+            await deps.notices.markTold(fleetId, { party, personShipId });
+        }
+    };
+}
+//# sourceMappingURL=tell-sign-in-needed.js.map

package/dist/core/party-grants/tell-sign-in-needed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tell-sign-in-needed.js","sourceRoot":"","sources":["../../../src/core/party-grants/tell-sign-in-needed.ts"],"names":[],"mappings":"AAaA,SAAS,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAA6C,EAAE,OAAe;IACzF,OAAO,IAAI,KAAK,IAAI;QAClB,CAAC,CAAC,0BAA0B,KAAK,8FAA8F,OAAO,qCAAqC,KAAK,eAAe;QAC/L,CAAC,CAAC,mBAAmB,KAAK,WAAW,KAAK,2BAA2B,IAAI,CAAC,GAAG,uBAAuB,OAAO,qCAAqC,KAAK,eAAe,CAAC;AACzK,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAiJ;IACtL,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,cAAc,EAAE,iBAAiB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9N,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACnD,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/people/ports.d.ts

@@ -196,8 +196,29 @@ export interface OpenedDeliveries {
 }
 /** The channels a person may turn on to be woken (wake a person, W1), as a hand-over names them. */
 export type WakeChannelName = 'email' | 'web-push';
-/** What a delivery is handed to the person through: a wake's channel, or a page of theirs in focus, which shows it (W6). */
-export type HandOverChannel = WakeChannelName | 'page';
+/**
+ * Outbound port: a place beyond the gateway's pages that shows the person's
+ * deliveries itself, as Slack does for a linked person (gateway scopes
+ * 9.5): it hands each one it shows, so no channel wakes for it (W3).
+ */
+export interface ShownElsewhere {
+    /**
+     * Finishes what an earlier wake left unfinished, then shows what it shows
+     * of the fresh deliveries: the ones it showed, and whether any is left
+     * unfinished, so the wake is tried again.
+     */
+    show(ship: PersonShip, wake: {
+        crewToken: string;
+        fresh: readonly PushedPersonDelivery[];
+    }): Promise<Result<ShownThere, FleetRefusal>>;
+}
+/** What a place beyond the pages showed at a wake. */
+export interface ShownThere {
+    readonly shown: ReadonlySet<DeliveryId>;
+    readonly isAnyUnfinished: boolean;
+}
+/** What a delivery is handed to the person through: a wake's channel, a page of theirs in focus, which shows it (W6), or Slack, which shows it (gateway scopes 9.5). */
+export type HandOverChannel = WakeChannelName | 'page' | 'slack';
 /**
  * Outbound port: one way to wake a person (wake a person, W1, W4): it says
  * only that something waits in the fleet, with the overview's link, and

package/dist/core/people/wake-person.d.ts

@@ -1,7 +1,7 @@
 import type { FleetRefusal } from "../connection/ports.js";
 import type { Clock } from "../shared/clock.js";
 import { type Result } from "../shared/result.js";
-import type { FocusedPages, PersonShip, PersonShipDoor, WakeChannel, WakeChannelName, WakesSent } from "./ports.js";
+import type { FocusedPages, PersonShip, PersonShipDoor, ShownElsewhere, WakeChannel, WakeChannelName, WakesSent } from "./ports.js";
 /**
  * What a wake came to: nothing left to wake (settled), a wake held back
  * until the earliest window of a channel turned on ends (inWindow), or no
@@ -33,10 +33,17 @@ export type WakePerson = (ship: PersonShip, crewToken: string) => Promise<Result
  * told, as asking again cannot help; while another channel's wake fails and is
  * tried again, that channel is not asked again. While a page of the person is in focus, the page
  * shows what arrives (W6): each fresh delivery is handed through it and no
- * wake goes out.
+ * wake goes out. Before all that, a place beyond the pages that shows
+ * deliveries itself, as Slack does for a linked person, shows what it
+ * shows, even while a page is in focus; nothing wakes for those
+ * (gateway scopes 9.5 step 5). It is asked at every wake, fresh deliveries
+ * or none, so what it left unfinished is finished, and while anything is
+ * left the wake counts as failed, so it is tried again.
  */
 export declare function createWakePerson(deps: {
     door: Pick<PersonShipDoor, "pushReceive" | "handed">;
+    /** Slack, where the person linked it; none where nothing beyond the pages shows deliveries. */
+    shownElsewhere?: ShownElsewhere;
     channels: readonly WakeChannel[];
     wakesSent: WakesSent;
     focused: FocusedPages;

package/dist/core/people/wake-person.js

@@ -17,13 +17,45 @@ import { err, ok } from "../shared/result.js";
  * told, as asking again cannot help; while another channel's wake fails and is
  * tried again, that channel is not asked again. While a page of the person is in focus, the page
  * shows what arrives (W6): each fresh delivery is handed through it and no
- * wake goes out.
+ * wake goes out. Before all that, a place beyond the pages that shows
+ * deliveries itself, as Slack does for a linked person, shows what it
+ * shows, even while a page is in focus; nothing wakes for those
+ * (gateway scopes 9.5 step 5). It is asked at every wake, fresh deliveries
+ * or none, so what it left unfinished is finished, and while anything is
+ * left the wake counts as failed, so it is tried again.
  */
 export function createWakePerson(deps) {
     /** Channels that refused for good during an attempt still failing, by person ship: a retry of that attempt does not ask them again. */
     const refusedInAttempt = new Map();
     const attemptKey = (ship) => `${ship.fleetId}/${ship.shipId}`;
     const wakePerson = async (ship, crewToken) => {
+        const taken = await deps.door.pushReceive(crewToken, {
+            max: RECEIVE_MAX_UPPER_BOUND,
+            shouldSkipHanded: true,
+        });
+        if (!taken.isOk) {
+            return taken;
+        }
+        const everyFresh = taken.value.filter(({ handOverNumber }) => handOverNumber === null);
+        // Asked even with nothing fresh: it finishes what an earlier wake left unfinished, as after a restart.
+        const shownElsewhere = deps.shownElsewhere === undefined
+            ? ok({ shown: new Set(), isAnyUnfinished: false })
+            : await deps.shownElsewhere.show(ship, { crewToken, fresh: everyFresh });
+        if (!shownElsewhere.isOk) {
+            return shownElsewhere;
+        }
+        const { shown, isAnyUnfinished } = shownElsewhere.value;
+        const woken = await wakeFor(ship, {
+            crewToken,
+            allFresh: everyFresh.filter(({ deliveryId }) => !shown.has(deliveryId)),
+        });
+        // What it left unfinished is finished at a wake tried again.
+        return isAnyUnfinished && woken.isOk && woken.value.kind === "settled"
+            ? ok({ kind: "failed" })
+            : woken;
+    };
+    /** Wakes the person for the fresh deliveries nothing beyond the pages showed. */
+    const wakeFor = async (ship, { crewToken, allFresh }) => {
         /** Hands each fresh delivery no. 1 through the channel, up to the first refusal: that refusal, or none. */
         const handEach = async (fresh, channel) => {
             for (const { deliveryId } of fresh) {
@@ -38,14 +70,6 @@ export function createWakePerson(deps) {
             }
             return undefined;
         };
-        const taken = await deps.door.pushReceive(crewToken, {
-            max: RECEIVE_MAX_UPPER_BOUND,
-            shouldSkipHanded: true,
-        });
-        if (!taken.isOk) {
-            return taken;
-        }
-        const allFresh = taken.value.filter(({ handOverNumber }) => handOverNumber === null);
         if (allFresh.length === 0) {
             return ok({ kind: "settled" });
         }

package/dist/core/people/wake-person.js.map

@@ -1 +1 @@
-{"version":3,"file":"wake-person.js","sourceRoot":"","sources":["../../../src/core/people/wake-person.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAI/D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AA2B3D;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAchC;IACC,uIAAuI;IACvI,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;IACjE,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAU,EAAE,CAC9C,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,MAAM,UAAU,GAAe,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QACvD,2GAA2G;QAC3G,MAAM,QAAQ,GAAG,KAAK,EACpB,KAAsC,EACtC,OAAwB,EACW,EAAE;YACrC,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;oBAC/C,UAAU;oBACV,cAAc,EAAE,CAAC;oBACjB,OAAO;iBACR,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE;YACnD,GAAG,EAAE,uBAAuB;YAC5B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CACjC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,KAAK,IAAI,CAChD,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IACE,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAC7B,IAAI,EACJ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CACzD,EACD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,CACf,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAClC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAC5C,CACF,CACF,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvE,OAAO;gBACL,OAAO;gBACP,UAAU;gBACV,MAAM,EACJ,UAAU,KAAK,SAAS;oBACtB,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;aACxD,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QACF,2GAA2G;QAC3G,IAAI,KAAK,GAAG,QAAQ,CAAC;QACrB,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACtD,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAC1B,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,EAAE,CACzD,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,aAAa,GACjB,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,EAAmB,CAAC;QACvE,MAAM,GAAG,GAAG,OAAO;aAChB,MAAM,CACL,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CACtB,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CACxE;aACA,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAC5B,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAClD,CAAC;YACF,OAAO,EAAE,CACP,OAAO,CAAC,MAAM,KAAK,CAAC;gBAClB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrB,CAAC,CAAC;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,IAAI,IAAI,CACb,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAC3D;iBACF,CACN,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1C,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;gBACtD,IAAI,CAAC,YAAY,CAAC;oBAChB,IAAI;oBACJ,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;iBAC3B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChD,2KAA2K;QAC3K,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjD,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"wake-person.js","sourceRoot":"","sources":["../../../src/core/people/wake-person.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAmB,MAAM,sBAAsB,CAAC;AAIhF,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AA4B3D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAgBhC;IACC,uIAAuI;IACvI,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;IACjE,MAAM,UAAU,GAAG,CAAC,IAAgB,EAAU,EAAE,CAC9C,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IACnC,MAAM,UAAU,GAAe,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE;YACnD,GAAG,EAAE,uBAAuB;YAC5B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CACnC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,KAAK,IAAI,CAChD,CAAC;QACF,uGAAuG;QACvG,MAAM,cAAc,GAClB,IAAI,CAAC,cAAc,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,EAAc,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YAC9D,CAAC,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,cAAc,CAAC,KAAK,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;YAChC,SAAS;YACT,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;SACxE,CAAC,CAAC;QACH,6DAA6D;QAC7D,OAAO,eAAe,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YACpE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;YACxB,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC,CAAC;IACF,iFAAiF;IACjF,MAAM,OAAO,GAAG,KAAK,EACnB,IAAgB,EAChB,EAAE,SAAS,EAAE,QAAQ,EAAoE,EAC7C,EAAE;QAC9C,2GAA2G;QAC3G,MAAM,QAAQ,GAAG,KAAK,EACpB,KAAsC,EACtC,OAAwB,EACW,EAAE;YACrC,KAAK,MAAM,EAAE,UAAU,EAAE,IAAI,KAAK,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;oBAC/C,UAAU;oBACV,cAAc,EAAE,CAAC;oBACjB,OAAO;iBACR,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,KAAK,CAAC;gBACtB,CAAC;YACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IACE,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAC7B,IAAI,EACJ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,CACzD,EACD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,CACf,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAClC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAC5C,CACF,CACF,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAC7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACvE,OAAO;gBACL,OAAO;gBACP,UAAU;gBACV,MAAM,EACJ,UAAU,KAAK,SAAS;oBACtB,CAAC,CAAC,GAAG;oBACL,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;aACxD,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QACF,2GAA2G;QAC3G,IAAI,KAAK,GAAG,QAAQ,CAAC;QACrB,KAAK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;YACtD,IAAI,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClE,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAC1B,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,EAAE,CACzD,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,aAAa,GACjB,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,EAAmB,CAAC;QACvE,MAAM,GAAG,GAAG,OAAO;aAChB,MAAM,CACL,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CACtB,MAAM,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CACxE;aACA,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAC5B,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAClD,CAAC;YACF,OAAO,EAAE,CACP,OAAO,CAAC,MAAM,KAAK,CAAC;gBAClB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;gBACrB,CAAC,CAAC;oBACE,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,IAAI,IAAI,CACb,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAC3D;iBACF,CACN,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;iBAAM,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1C,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;gBACtD,IAAI,CAAC,YAAY,CAAC;oBAChB,IAAI;oBACJ,OAAO,EAAE,OAAO,CAAC,IAAI;oBACrB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;iBAC3B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAChD,2KAA2K;QAC3K,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QAC/B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjD,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/shared/errors.d.ts

@@ -1,6 +1,6 @@
 import { type Err } from './result.js';
 /** Every reason the gateway's core refuses a request. */
-export type DomainErrorKind = 'ALREADY_CONNECTED' | 'SECRET_REFUSED' | 'OTHER_FLEET' | 'MISSING_SCOPES' | 'SCOPE_REFUSED' | 'NOT_THE_OPERATOR' | 'NOT_AN_ACTOR' | 'NOT_AN_APPROVER' | 'NO_SUCH_REQUEST' | 'ALREADY_DECIDED' | 'EXPIRED' | 'SCOPE_NOT_HELD' | 'SERVER_DETAILS_MISSING' | 'REQUEST_ID_USED' | 'FLEET_UNAVAILABLE' | 'NOT_CONNECTED' | 'PARTY_EXISTS' | 'COMMISSION_REFUSED' | 'NO_SUCH_PARTY' | 'NOT_AWAITING_CREW' | 'NOT_CREWED' | 'SERVER_UNREACHABLE' | 'STATEMENT_REFUSED' | 'INVALID_REDIRECT_URIS' | 'CLIENT_HAS_PARTY' | 'PARTY_NOT_CREWED' | 'NO_SUCH_TOOL' | 'INVALID_ARGUMENTS' | 'NOT_REACHABLE' | 'SEND_REFUSED' | 'NO_SUCH_CALL' | 'NOT_A_PERSON' | 'SIGNED_OUT' | 'NO_SUCH_DELIVERY' | 'NOT_A_NETWORKER' | 'OPEN_NETWORK' | 'OUTSIDE_PARTIES_OFF' | 'INVALID_SERVER_URL' | 'NOT_A_MANAGER' | 'RETIRE_REFUSED' | 'NOT_AN_ACCOUNT' | 'PARTY_NOT_COMMISSIONED' | 'CHANGE_REFUSED' | 'UNKNOWN_ALIAS' | 'PAYLOAD_TOO_LARGE' | 'TASK_NOT_FOUND' | 'TASK_TERMINAL' | 'WEBHOOK_REFUSED' | 'PUSH_CONFIG_NOT_FOUND' | 'CONTEXT_MISMATCH' | 'CARD_UNREACHABLE' | 'CARD_INVALID' | 'NOT_A_MESSAGE' | 'CHANNEL_NOT_OFFERED' | 'INVALID_SUBSCRIPTION' | 'NO_SUCH_MEETING' | 'MIC_REFUSED' | 'SCOPE_NOT_LISTED' | 'CONFLICT';
+export type DomainErrorKind = 'ALREADY_CONNECTED' | 'SECRET_REFUSED' | 'OTHER_FLEET' | 'MISSING_SCOPES' | 'SCOPE_REFUSED' | 'NOT_THE_OPERATOR' | 'NOT_AN_ACTOR' | 'NOT_AN_APPROVER' | 'NO_SUCH_REQUEST' | 'ALREADY_DECIDED' | 'EXPIRED' | 'SCOPE_NOT_HELD' | 'SERVER_DETAILS_MISSING' | 'REQUEST_ID_USED' | 'FLEET_UNAVAILABLE' | 'NOT_CONNECTED' | 'PARTY_EXISTS' | 'COMMISSION_REFUSED' | 'NO_SUCH_PARTY' | 'NOT_AWAITING_CREW' | 'NOT_CREWED' | 'SERVER_UNREACHABLE' | 'NO_AUTHORIZATION_SERVER' | 'SIGN_IN_CHECK_FAILED' | 'NOT_SIGNED_IN' | 'NO_SIGN_IN' | 'SIGN_IN_FAILED' | 'TURNED_AWAY' | 'AUTHORIZATION_SERVER_UNREACHABLE' | 'NO_DYNAMIC_REGISTRATION' | 'REGISTRATION_REFUSED' | 'STATEMENT_REFUSED' | 'INVALID_REDIRECT_URIS' | 'CLIENT_HAS_PARTY' | 'PARTY_NOT_CREWED' | 'NO_SUCH_TOOL' | 'INVALID_ARGUMENTS' | 'NOT_REACHABLE' | 'SEND_REFUSED' | 'NO_SUCH_CALL' | 'NOT_A_PERSON' | 'SIGNED_OUT' | 'NO_SUCH_DELIVERY' | 'NOT_A_NETWORKER' | 'OPEN_NETWORK' | 'OUTSIDE_PARTIES_OFF' | 'INVALID_SERVER_URL' | 'NOT_A_MANAGER' | 'RETIRE_REFUSED' | 'NOT_AN_ACCOUNT' | 'PARTY_NOT_COMMISSIONED' | 'CHANGE_REFUSED' | 'UNKNOWN_ALIAS' | 'PAYLOAD_TOO_LARGE' | 'TASK_NOT_FOUND' | 'TASK_TERMINAL' | 'WEBHOOK_REFUSED' | 'PUSH_CONFIG_NOT_FOUND' | 'CONTEXT_MISMATCH' | 'CARD_UNREACHABLE' | 'CARD_INVALID' | 'NOT_A_MESSAGE' | 'CHANNEL_NOT_OFFERED' | 'INVALID_SUBSCRIPTION' | 'NO_SUCH_MEETING' | 'MIC_REFUSED' | 'SCOPE_NOT_LISTED' | 'SLACK_SCOPE_NOT_HELD' | 'SLACK_NOT_CONNECTED' | 'SLACK_TOKEN_REFUSED' | 'SLACK_UNAVAILABLE' | 'OTHER_WORKSPACE' | 'INSTALL_REFUSED' | 'NOT_EXPOSABLE' | 'NO_SUCH_BOT' | 'LINK_REFUSED' | 'SLACK_USER_LINKED' | 'ACCOUNT_LINKED' | 'NOT_LINKED' | 'CONFLICT';
 /** Why the core refused a request. Adapters map the kind to their own error shape; the message is safe to show. */
 export interface DomainError<K extends DomainErrorKind = DomainErrorKind> {
     readonly kind: K;

package/dist/core/shared/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/core/shared/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAsE5C,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAA4B,IAAO,EAAE,OAAe;IACxE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/core/shared/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AA2F5C,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAA4B,IAAO,EAAE,OAAe;IACxE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAChC,CAAC"}

package/dist/core/sign-in/start-sign-in.d.ts

@@ -19,10 +19,13 @@ export type StartSignIn = (picked: {
  * gateway's own PKCE verifier into the state, and the person is sent to
  * pagasae naming no fleet, so pagasae answers their only fleet or asks
  * which (decision 0054). The browser is given a secret of its own, sealed
- * too, so only it finishes the sign-in.
+ * too, so only it finishes the sign-in. The plugin's address signs the
+ * person in as themselves only: no one asks for access for a client there
+ * (chatgpt-plugin design, 6).
  */
 export declare function createStartSignIn(deps: {
     readAuthorization: ReadAuthorization;
+    pluginResource: string;
     seals: SignInSeals;
     pagasae: Pagasae;
     secrets: OAuthSecrets;

package/dist/core/sign-in/start-sign-in.js

@@ -1,4 +1,4 @@
-import { ok } from '../shared/result.js';
+import { err, ok } from '../shared/result.js';
 /** How long a person has to sign in at pagasae and come back. */
 export const SIGN_IN_LIFETIME_MS = 10 * 60_000;
 /**
@@ -8,7 +8,9 @@ export const SIGN_IN_LIFETIME_MS = 10 * 60_000;
  * gateway's own PKCE verifier into the state, and the person is sent to
  * pagasae naming no fleet, so pagasae answers their only fleet or asks
  * which (decision 0054). The browser is given a secret of its own, sealed
- * too, so only it finishes the sign-in.
+ * too, so only it finishes the sign-in. The plugin's address signs the
+ * person in as themselves only: no one asks for access for a client there
+ * (chatgpt-plugin design, 6).
  */
 export function createStartSignIn(deps) {
     return async ({ request, holder }) => {
@@ -16,6 +18,10 @@ export function createStartSignIn(deps) {
         if (!read.isOk) {
             return read;
         }
+        if (holder === 'party' && read.value.resource === deps.pluginResource) {
+            const { redirectUri, state } = read.value;
+            return err({ kind: 'redirect', redirectUri, error: 'invalid_request', description: 'The plugin address signs in as yourself only', state });
+        }
         const verifier = deps.secrets.newSecret();
         const browserSecret = deps.secrets.newSecret();
         const state = deps.seals.seal({ verifier, browserSecret, request, holder, expiresAt: new Date(deps.clock.now().getTime() + SIGN_IN_LIFETIME_MS) });

package/dist/core/sign-in/start-sign-in.js.map

@@ -1 +1 @@
-{"version":3,"file":"start-sign-in.js","sourceRoot":"","sources":["../../../src/core/sign-in/start-sign-in.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAI/C;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAyH;IACzJ,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACnJ,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACpI,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"start-sign-in.js","sourceRoot":"","sources":["../../../src/core/sign-in/start-sign-in.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAG3D,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAI/C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAiJ;IACjL,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;YACtE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;YAC1C,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,8CAA8C,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9I,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACnJ,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC;IACpI,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/answer-in-slack.d.ts

@@ -0,0 +1,41 @@
+import { type MessageId } from '@aeolus-fleet/common';
+import type { PersonCrews, PersonShipDoor } from '../people/ports.js';
+import type { Clock } from '../shared/clock.js';
+import { type Result } from '../shared/result.js';
+import type { SlackApps, SlackLinks, SlackMessages, SlackPosts, SlackSignatures } from './ports.js';
+import { type SignedRequest } from './slack-request.js';
+export type AnswerInSlack = (press: SignedRequest & {
+    appId: string;
+    teamId: string;
+    userId: string;
+    channel: string;
+    messageTs: string;
+    messageId: MessageId;
+    option: number;
+}) => Promise<Result<{
+    kind: 'answered' | 'refused' | 'ignored';
+}, {
+    kind: 'notSigned';
+}>>;
+/**
+ * Use case: the person presses an option's button under a question the
+ * gateway posted to them in Slack (gateway scopes 9.5 step 2). Signed as an
+ * event is, by the person the question was posted to, the press sends the
+ * answer as their person ship, to the question's sender in reply to it,
+ * keyed as an answer on the gateway's page is; then the delivery is handled
+ * and the question reacted to, as a message core stored is. Core's refusal
+ * is said in the question's thread. The press names the question's fleet
+ * message, as its button carries it, so a press that comes before the
+ * gateway kept the post's Slack message is answered too; the delivery not
+ * acknowledged yet, the press, the person's own act, acknowledges it.
+ */
+export declare function createAnswerInSlack(deps: {
+    apps: Pick<SlackApps, 'findByAppId'>;
+    links: Pick<SlackLinks, 'find'>;
+    posts: Pick<SlackPosts, 'ofMessage'>;
+    crews: Pick<PersonCrews, 'find'>;
+    door: Pick<PersonShipDoor, 'ack' | 'delivery' | 'reply' | 'handled'>;
+    slack: Pick<SlackMessages, 'react' | 'postInThread'>;
+    signatures: SlackSignatures;
+    clock: Clock;
+}): AnswerInSlack;