@aeolus-fleet/core 0.27.0 → 0.28.0

package/dist/adapters/trpc/fleet.d.ts

@@ -30,7 +30,9 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
             idempotencyKey: string;
             kind?: "agent" | "person" | "app" | undefined;
             scopes?: string[] | undefined;
+            valueIds?: unknown[] | undefined;
             ownerOf?: unknown;
+            owner?: unknown;
             note?: string | undefined;
         };
         output: {
@@ -235,7 +237,7 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         output: Record<string, never>;
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** Gives a ship a new owner, an active person's ship or argo: argo's alone, by its kind, no scope (decisions 0045, 0046). */
+    /** Gives a ship within the caller's manage reach a new owner, an active person's ship or argo (decisions 0045, 0053). */
     setOwner: import("@trpc/server").TRPCMutationProcedure<{
         input: {
             shipId: unknown;
@@ -244,6 +246,14 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         output: Record<string, never>;
         meta: import("./trpc.js").ProcedureMeta;
     }>;
+    /** Connects a ship as a plugin, which then reads every ship until a release or retire ends it (decisions 0034, 0053). */
+    connectPlugin: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            shipId: unknown;
+        };
+        output: Record<string, never>;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
     /**
      * A new crew for a crewed ship whose session is gone: a release and a new
      * starting prompt in one transaction. Its prompt, crew lines and secret are shown once.
@@ -352,6 +362,7 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
             }[];
             awaitingCrewSince: string | null;
             retiredAt: string | null;
+            ownerShipId: `shp_${string}` | null;
         } | {
             id: `shp_${string}`;
             name: string;
@@ -372,8 +383,11 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                 value: string;
             }[];
             owner: {
+                kind: "ship";
                 id: `shp_${string}`;
                 name: string;
+            } | {
+                kind: "installation";
             };
         }[];
         meta: import("./trpc.js").ProcedureMeta;
@@ -424,6 +438,22 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         };
         meta: import("./trpc.js").ProcedureMeta;
     }>;
+    /** Sets the caller's verified facts about a ship within its manage reach, whole (decision 0059). */
+    setVerifiedFacts: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            shipId: unknown;
+            facts: ({
+                checked: "clientIdDocumentDomain" | "tlsHost" | "a2aCardDomain";
+                value: string;
+            } | {
+                checked: "oauthSubject";
+                issuer: string;
+                value: string;
+            })[];
+        };
+        output: Record<string, never>;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
     /** Defines a label the caller's ship then owns (decision 0031). */
     defineLabel: import("@trpc/server").TRPCMutationProcedure<{
         input: {
@@ -491,45 +521,200 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         };
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** Sets the fleet's network rules beside the built-in ones, the whole list (decision 0034). */
-    setNetworkRules: import("@trpc/server").TRPCMutationProcedure<{
+    /** The fleet's own rules as applied, and the draft beside them (decision 0034). */
+    networkRules: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
+        output: {
+            applied: {
+                rules: {
+                    verb: "send" | "read" | "manage";
+                    from: (`lbv_${string}` | {
+                        labelId: `lbl_${string}`;
+                        value: "*" | "#";
+                    } | {
+                        owner: `shp_${string}` | "*" | "#";
+                    })[];
+                    to: (`lbv_${string}` | {
+                        labelId: `lbl_${string}`;
+                        value: "*" | "#";
+                    } | {
+                        owner: `shp_${string}` | "*" | "#";
+                    })[];
+                }[] | null;
+                version: number;
+            };
+            draft: {
+                rules: {
+                    verb: "send" | "read" | "manage";
+                    from: (`lbv_${string}` | {
+                        labelId: `lbl_${string}`;
+                        value: "*" | "#";
+                    } | {
+                        owner: `shp_${string}` | "*" | "#";
+                    })[];
+                    to: (`lbv_${string}` | {
+                        labelId: `lbl_${string}`;
+                        value: "*" | "#";
+                    } | {
+                        owner: `shp_${string}` | "*" | "#";
+                    })[];
+                }[] | null;
+                savedAt: string;
+                savedAgainstVersion: number;
+            } | null;
+        };
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** Saves the draft of the fleet's own rules, the whole list or none (decision 0034). */
+    saveNetworkRulesDraft: import("@trpc/server").TRPCMutationProcedure<{
         input: {
             rules: {
                 verb: "send" | "read" | "manage";
                 from: unknown[];
                 to: unknown[];
-            }[];
+            }[] | null;
         };
         output: {
-            version: number;
+            savedAgainstVersion: number;
         };
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** The caller's ship becomes the fleet's networking plugin, with what it declared (decision 0035). */
-    registerNetworkPlugin: import("@trpc/server").TRPCMutationProcedure<{
-        input: {
-            whileUnavailable: "block-all" | "open-all" | "keep-latest";
-            notRespondingAfterSeconds: number;
-        };
+    /** The draft goes, the applied rules staying as they are (decision 0034). */
+    discardNetworkRulesDraft: import("@trpc/server").TRPCMutationProcedure<{
+        input: void;
+        output: Record<string, never>;
+        meta: import("./trpc.js").ProcedureMeta;
+    }>;
+    /** What applying the draft would change: per verb, the reach it gains and loses (decision 0034). */
+    networkRulesDraftChanges: import("@trpc/server").TRPCQueryProcedure<{
+        input: void;
         output: {
-            version: number;
+            send: {
+                gained: {
+                    fromShipId: `shp_${string}`;
+                    toShipId: `shp_${string}`;
+                    rule: {
+                        builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
+                    } | {
+                        rule: number;
+                    } | {
+                        declared: {
+                            kind: "ship";
+                            shipId: `shp_${string}`;
+                        } | {
+                            kind: "installation";
+                        };
+                        index: number;
+                    };
+                }[];
+                lost: {
+                    fromShipId: `shp_${string}`;
+                    toShipId: `shp_${string}`;
+                    rule: {
+                        builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
+                    } | {
+                        rule: number;
+                    } | {
+                        declared: {
+                            kind: "ship";
+                            shipId: `shp_${string}`;
+                        } | {
+                            kind: "installation";
+                        };
+                        index: number;
+                    };
+                }[];
+            };
+            read: {
+                gained: {
+                    fromShipId: `shp_${string}`;
+                    toShipId: `shp_${string}`;
+                    rule: {
+                        builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
+                    } | {
+                        rule: number;
+                    } | {
+                        declared: {
+                            kind: "ship";
+                            shipId: `shp_${string}`;
+                        } | {
+                            kind: "installation";
+                        };
+                        index: number;
+                    };
+                }[];
+                lost: {
+                    fromShipId: `shp_${string}`;
+                    toShipId: `shp_${string}`;
+                    rule: {
+                        builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
+                    } | {
+                        rule: number;
+                    } | {
+                        declared: {
+                            kind: "ship";
+                            shipId: `shp_${string}`;
+                        } | {
+                            kind: "installation";
+                        };
+                        index: number;
+                    };
+                }[];
+            };
+            manage: {
+                gained: {
+                    fromShipId: `shp_${string}`;
+                    toShipId: `shp_${string}`;
+                    rule: {
+                        builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
+                    } | {
+                        rule: number;
+                    } | {
+                        declared: {
+                            kind: "ship";
+                            shipId: `shp_${string}`;
+                        } | {
+                            kind: "installation";
+                        };
+                        index: number;
+                    };
+                }[];
+                lost: {
+                    fromShipId: `shp_${string}`;
+                    toShipId: `shp_${string}`;
+                    rule: {
+                        builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
+                    } | {
+                        rule: number;
+                    } | {
+                        declared: {
+                            kind: "ship";
+                            shipId: `shp_${string}`;
+                        } | {
+                            kind: "installation";
+                        };
+                        index: number;
+                    };
+                }[];
+            };
         };
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** The fleet's networking plugin unregisters, its rules going with it (decision 0035). */
-    unregisterNetworkPlugin: import("@trpc/server").TRPCMutationProcedure<{
-        input: void;
+    /** Applies the draft: its rules are in force from now on (decision 0034). */
+    applyNetworkRules: import("@trpc/server").TRPCMutationProcedure<{
+        input: {
+            version: number;
+        };
         output: {
             version: number;
         };
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** A built-in rule turned on or off: the viewer reading by argo, open for one verb by the networking plugin (decision 0034). */
+    /** A built-in rule turned on or off: the viewer reading, by any actor holding fleet:network (decision 0034). */
     setBuiltInRule: import("@trpc/server").TRPCMutationProcedure<{
         input: {
-            rule: "argo" | "owner" | "open" | "answer" | "viewerRead";
+            rule: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
             isOn: boolean;
-            verb?: "send" | "read" | "manage" | undefined;
         };
         output: {
             version: number;
@@ -539,14 +724,10 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
     /** Every built-in rule as it is now, for argo's rule list, which shows them first (decision 0034). */
     builtInRules: import("@trpc/server").TRPCQueryProcedure<{
         input: void;
-        output: ({
-            rule: "argo" | "owner" | "answer" | "viewerRead";
-            isOn: boolean;
-        } | {
-            rule: "open";
-            verb: "send" | "read" | "manage";
+        output: {
+            rule: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
             isOn: boolean;
-        })[];
+        }[];
         meta: import("./trpc.js").ProcedureMeta;
     }>;
     /** The caller declares the network rules it needs on the labels it owns, its whole list (decision 0037). */
@@ -563,11 +744,16 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         };
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** Every ship's declared rules, for the networking plugin to add to argo's (decision 0037). */
+    /** Every declarer's declared rules, in force beside the fleet's own (decisions 0037, 0052). */
     declaredNetworkRules: import("@trpc/server").TRPCQueryProcedure<{
         input: void;
         output: {
-            shipId: `shp_${string}`;
+            declarer: {
+                kind: "ship";
+                shipId: `shp_${string}`;
+            } | {
+                kind: "installation";
+            };
             rules: {
                 verb: "send" | "read" | "manage";
                 from: (`lbv_${string}` | {
@@ -586,7 +772,7 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         }[];
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** The sends the network rules refused, newest first: argo's only (decision 0034). */
+    /** The sends the network rules refused, newest first, of the ships the caller reads (decisions 0034, 0053). */
     reachRefusals: import("@trpc/server").TRPCQueryProcedure<{
         input: void;
         output: {
@@ -605,6 +791,22 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                     id: `shp_${string}`;
                     name: string;
                 } | null;
+                kind: "ship";
+            } | {
+                kind: "account";
+                accountId: string & import("zod").$brand<"AccountId">;
+                labels: {
+                    labelId: `lbl_${string}`;
+                    key: string;
+                    valueId: `lbv_${string}`;
+                    value: string;
+                }[];
+                personShip: {
+                    id: `shp_${string}`;
+                    name: string;
+                } | null;
+            } | {
+                kind: "installation";
             };
             askedBy: {
                 id: `shp_${string}`;
@@ -656,47 +858,62 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
             };
             verb: "send" | "read" | "manage";
             settingsVersion: number;
-            whilePluginUnavailable: "block-all" | "keep-latest" | null;
         }[];
         meta: import("./trpc.js").ProcedureMeta;
     }>;
-    /** Which ships a ship reaches now, or whether it reaches one: argo's only, and never why (design on #260). */
+    /** Which ships a ship the caller reads reaches now, or whether it reaches one (design on #260, decision 0053). */
     explainReach: import("@trpc/server").TRPCQueryProcedure<{
         input: {
             fromShipId: unknown;
             toShipId?: unknown;
+            against?: "applied" | "draft" | undefined;
         };
         output: {
             send: {
                 shipId: `shp_${string}`;
                 rule: {
-                    builtIn: "argo" | "owner" | "open" | "answer" | "viewerRead";
+                    builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
                 } | {
-                    plugin: number;
+                    rule: number;
                 } | {
-                    declared: `shp_${string}`;
+                    declared: {
+                        kind: "ship";
+                        shipId: `shp_${string}`;
+                    } | {
+                        kind: "installation";
+                    };
                     index: number;
                 };
             }[];
             read: {
                 shipId: `shp_${string}`;
                 rule: {
-                    builtIn: "argo" | "owner" | "open" | "answer" | "viewerRead";
+                    builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
                 } | {
-                    plugin: number;
+                    rule: number;
                 } | {
-                    declared: `shp_${string}`;
+                    declared: {
+                        kind: "ship";
+                        shipId: `shp_${string}`;
+                    } | {
+                        kind: "installation";
+                    };
                     index: number;
                 };
             }[];
             manage: {
                 shipId: `shp_${string}`;
                 rule: {
-                    builtIn: "argo" | "owner" | "open" | "answer" | "viewerRead";
+                    builtIn: "installation" | "argo" | "owner" | "open" | "answer" | "pluginRead" | "viewerRead";
                 } | {
-                    plugin: number;
+                    rule: number;
                 } | {
-                    declared: `shp_${string}`;
+                    declared: {
+                        kind: "ship";
+                        shipId: `shp_${string}`;
+                    } | {
+                        kind: "installation";
+                    };
                     index: number;
                 };
             }[];
@@ -742,6 +959,7 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
             }[];
             awaitingCrewSince: string | null;
             retiredAt: string | null;
+            ownerShipId: `shp_${string}` | null;
             report: {
                 state: "working" | "blocked" | "idle";
                 note: string | null;
@@ -801,12 +1019,13 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         output: {
             seq: number;
             id: `evt_${string}`;
-            type: "FleetInitialised" | "ShipCommissioned" | "OwnerSet" | "OwnerChanged" | "ShipClaimed" | "LeaseRevoked" | "CredentialRevoked" | "StartingPromptIssued" | "OperatorPasswordReset" | "MessageAccepted" | "LeasePushed" | "DeliveryReceived" | "DeliveryHanded" | "DeliveryAcknowledged" | "DeliveryHandled" | "DeliveryNotHandled" | "DeliveryOverdue" | "DeliveryUndeliverable" | "DeliveryReturned" | "ShipRetired" | "DeliveryAbandoned" | "DeliveryDismissed" | "ShipRenamed" | "ShipReported" | "StatementSet" | "TurnReported" | "SignInTicketIssued" | "FleetLimitsChanged" | "ViewerSessionStarted" | "CrewRequested" | "CrewRequestRemoved" | "CrewAssigned" | "CrewStatusChanged" | "CrewRequestExplained" | "CrewRequestGivenBack" | "LabelDefined" | "LabelValuesChanged" | "LabelRetired" | "LabelAssigned" | "LabelUnassigned" | "LabelDeleted" | "WorktreeClearRequested" | "WorktreeCleared" | "WorktreeClearRemoved" | "NetworkRulesSet" | "NetworkRulesDeclared" | "NetworkPluginRegistered" | "NetworkPluginUnregistered" | "BuiltInRuleChanged" | "ScopesDeclared" | "ScopesChanged";
+            type: "FleetInitialised" | "ShipCommissioned" | "OwnerSet" | "OwnerChanged" | "ShipClaimed" | "LeaseRevoked" | "CredentialRevoked" | "StartingPromptIssued" | "OperatorPasswordReset" | "MessageAccepted" | "LeasePushed" | "DeliveryReceived" | "DeliveryHanded" | "DeliveryAcknowledged" | "DeliveryHandled" | "DeliveryNotHandled" | "DeliveryOverdue" | "DeliveryUndeliverable" | "DeliveryReturned" | "ShipRetired" | "DeliveryAbandoned" | "DeliveryDismissed" | "ShipRenamed" | "ShipReported" | "StatementSet" | "TurnReported" | "SignInTicketIssued" | "FleetLimitsChanged" | "ViewerSessionStarted" | "CrewRequested" | "CrewRequestRemoved" | "CrewAssigned" | "CrewStatusChanged" | "CrewRequestExplained" | "CrewRequestGivenBack" | "LabelDefined" | "LabelValuesChanged" | "LabelRetired" | "LabelAssigned" | "LabelUnassigned" | "LabelDeleted" | "WorktreeClearRequested" | "WorktreeCleared" | "WorktreeClearRemoved" | "NetworkRulesSet" | "NetworkRulesDeclared" | "NetworkRulesDraftSaved" | "NetworkRulesDraftDiscarded" | "NetworkPluginRegistered" | "NetworkPluginUnregistered" | "BuiltInRuleChanged" | "ScopesDeclared" | "ScopesChanged" | "PluginConnected" | "PluginDisconnected" | "VerifiedFactsSet" | "VerifiedFactsRemoved";
             occurredAt: string;
             actor: {
                 id: `shp_${string}`;
                 name: string;
             } | null;
+            signedInAccountId: (string & import("zod").$brand<"AccountId">) | null;
             ship: {
                 id: `shp_${string}`;
                 name: string;
@@ -880,6 +1099,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
         };
         output: {
             id: `msg_${string}`;
+            sentAt: string;
+            model: string | null;
+            sender: {
+                id: `shp_${string}`;
+                name: string;
+            };
             recipient: {
                 kind: "ship";
                 ship: {
@@ -891,13 +1116,7 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                 type: string;
             };
             contentType: string;
-            model: string | null;
             inReplyTo: `msg_${string}` | null;
-            sentAt: string;
-            sender: {
-                id: `shp_${string}`;
-                name: string;
-            };
             payload: string;
             replies: {
                 id: `msg_${string}`;
@@ -926,6 +1145,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                         };
                     } | {
                         kind: "pluginWatcher";
+                    } | {
+                        kind: "personApp";
+                    } | {
+                        kind: "gateway";
+                    } | {
+                        kind: "adapter";
                     } | {
                         kind: "agent";
                     } | null;
@@ -945,6 +1170,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                             };
                         } | {
                             kind: "pluginWatcher";
+                        } | {
+                            kind: "personApp";
+                        } | {
+                            kind: "gateway";
+                        } | {
+                            kind: "adapter";
                         } | null;
                         isEnded: boolean;
                         turn: {
@@ -980,15 +1211,22 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                         };
                     } | {
                         kind: "pluginWatcher";
+                    } | {
+                        kind: "personApp";
+                    } | {
+                        kind: "gateway";
+                    } | {
+                        kind: "adapter";
                     } | null;
                     handOverNumber: number | null;
+                    channel: string | null;
                     isAgain: boolean;
                     isOnceMore: boolean;
                     overdue: {
                         clock: "idle" | "busy" | "notConfirmed";
                         minutes: number;
                     } | null;
-                    leaseEnd: "released" | "retired" | "deregistered" | "takenOver" | "signedOut" | "passwordReset" | null;
+                    leaseEnd: "released" | "retired" | "deregistered" | "takenOver" | "signedOut" | "passwordReset" | "accountCutOff" | null;
                 }[];
             };
         };
@@ -1009,6 +1247,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                     };
                 } | {
                     kind: "pluginWatcher";
+                } | {
+                    kind: "personApp";
+                } | {
+                    kind: "gateway";
+                } | {
+                    kind: "adapter";
                 } | null;
                 turn: {
                     turn: "idle" | "busy";
@@ -1035,6 +1279,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                             };
                         } | {
                             kind: "pluginWatcher";
+                        } | {
+                            kind: "personApp";
+                        } | {
+                            kind: "gateway";
+                        } | {
+                            kind: "adapter";
                         } | {
                             kind: "agent";
                         } | null;
@@ -1054,6 +1304,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
                                 };
                             } | {
                                 kind: "pluginWatcher";
+                            } | {
+                                kind: "personApp";
+                            } | {
+                                kind: "gateway";
+                            } | {
+                                kind: "adapter";
                             } | null;
                             isEnded: boolean;
                             turn: {
@@ -1255,9 +1511,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
             events: {
                 seq: number;
                 id: `evt_${string}`;
-                type: "FleetInitialised" | "ShipCommissioned" | "OwnerSet" | "OwnerChanged" | "ShipClaimed" | "LeaseRevoked" | "CredentialRevoked" | "StartingPromptIssued" | "OperatorPasswordReset" | "MessageAccepted" | "LeasePushed" | "DeliveryReceived" | "DeliveryHanded" | "DeliveryAcknowledged" | "DeliveryHandled" | "DeliveryNotHandled" | "DeliveryOverdue" | "DeliveryUndeliverable" | "DeliveryReturned" | "ShipRetired" | "DeliveryAbandoned" | "DeliveryDismissed" | "ShipRenamed" | "ShipReported" | "StatementSet" | "TurnReported" | "SignInTicketIssued" | "FleetLimitsChanged" | "ViewerSessionStarted" | "CrewRequested" | "CrewRequestRemoved" | "CrewAssigned" | "CrewStatusChanged" | "CrewRequestExplained" | "CrewRequestGivenBack" | "LabelDefined" | "LabelValuesChanged" | "LabelRetired" | "LabelAssigned" | "LabelUnassigned" | "LabelDeleted" | "WorktreeClearRequested" | "WorktreeCleared" | "WorktreeClearRemoved" | "NetworkRulesSet" | "NetworkRulesDeclared" | "NetworkPluginRegistered" | "NetworkPluginUnregistered" | "BuiltInRuleChanged" | "ScopesDeclared" | "ScopesChanged";
+                type: "FleetInitialised" | "ShipCommissioned" | "OwnerSet" | "OwnerChanged" | "ShipClaimed" | "LeaseRevoked" | "CredentialRevoked" | "StartingPromptIssued" | "OperatorPasswordReset" | "MessageAccepted" | "LeasePushed" | "DeliveryReceived" | "DeliveryHanded" | "DeliveryAcknowledged" | "DeliveryHandled" | "DeliveryNotHandled" | "DeliveryOverdue" | "DeliveryUndeliverable" | "DeliveryReturned" | "ShipRetired" | "DeliveryAbandoned" | "DeliveryDismissed" | "ShipRenamed" | "ShipReported" | "StatementSet" | "TurnReported" | "SignInTicketIssued" | "FleetLimitsChanged" | "ViewerSessionStarted" | "CrewRequested" | "CrewRequestRemoved" | "CrewAssigned" | "CrewStatusChanged" | "CrewRequestExplained" | "CrewRequestGivenBack" | "LabelDefined" | "LabelValuesChanged" | "LabelRetired" | "LabelAssigned" | "LabelUnassigned" | "LabelDeleted" | "WorktreeClearRequested" | "WorktreeCleared" | "WorktreeClearRemoved" | "NetworkRulesSet" | "NetworkRulesDeclared" | "NetworkRulesDraftSaved" | "NetworkRulesDraftDiscarded" | "NetworkPluginRegistered" | "NetworkPluginUnregistered" | "BuiltInRuleChanged" | "ScopesDeclared" | "ScopesChanged" | "PluginConnected" | "PluginDisconnected" | "VerifiedFactsSet" | "VerifiedFactsRemoved";
                 occurredAt: string;
+                actorKind: "ship" | "account" | "installation" | "system";
                 actorShipId: `shp_${string}` | null;
+                actorAccountId: (string & import("zod").$brand<"AccountId">) | null;
+                actorSignedInAccountId: (string & import("zod").$brand<"AccountId">) | null;
                 shipId: `shp_${string}` | null;
                 messageId: `msg_${string}` | null;
                 deliveryId: `dlv_${string}` | null;
@@ -1271,8 +1530,9 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
      * number, which tRPC sends back as `lastEventId` when the browser
      * reconnects, so it misses none. Without a number, or too far behind, the
      * browser is told to load the fleet again first (`resync`). Each wake-up
-     * asks again whether the caller still holds, so a console session that ended
-     * hears no more.
+     * asks again whether the caller still holds, with fleet:read and, reading on
+     * behalf, fleet:on-behalf, so a session that ended or a revoked scope hears
+     * no more.
      */
     events: import("@trpc/server").TRPCSubscriptionProcedure<{
         input: {
@@ -1283,9 +1543,12 @@ export declare const fleetRouter: import("@trpc/server").TRPCBuiltRouter<{
             event: {
                 seq: number;
                 id: `evt_${string}`;
-                type: "FleetInitialised" | "ShipCommissioned" | "OwnerSet" | "OwnerChanged" | "ShipClaimed" | "LeaseRevoked" | "CredentialRevoked" | "StartingPromptIssued" | "OperatorPasswordReset" | "MessageAccepted" | "LeasePushed" | "DeliveryReceived" | "DeliveryHanded" | "DeliveryAcknowledged" | "DeliveryHandled" | "DeliveryNotHandled" | "DeliveryOverdue" | "DeliveryUndeliverable" | "DeliveryReturned" | "ShipRetired" | "DeliveryAbandoned" | "DeliveryDismissed" | "ShipRenamed" | "ShipReported" | "StatementSet" | "TurnReported" | "SignInTicketIssued" | "FleetLimitsChanged" | "ViewerSessionStarted" | "CrewRequested" | "CrewRequestRemoved" | "CrewAssigned" | "CrewStatusChanged" | "CrewRequestExplained" | "CrewRequestGivenBack" | "LabelDefined" | "LabelValuesChanged" | "LabelRetired" | "LabelAssigned" | "LabelUnassigned" | "LabelDeleted" | "WorktreeClearRequested" | "WorktreeCleared" | "WorktreeClearRemoved" | "NetworkRulesSet" | "NetworkRulesDeclared" | "NetworkPluginRegistered" | "NetworkPluginUnregistered" | "BuiltInRuleChanged" | "ScopesDeclared" | "ScopesChanged";
+                type: "FleetInitialised" | "ShipCommissioned" | "OwnerSet" | "OwnerChanged" | "ShipClaimed" | "LeaseRevoked" | "CredentialRevoked" | "StartingPromptIssued" | "OperatorPasswordReset" | "MessageAccepted" | "LeasePushed" | "DeliveryReceived" | "DeliveryHanded" | "DeliveryAcknowledged" | "DeliveryHandled" | "DeliveryNotHandled" | "DeliveryOverdue" | "DeliveryUndeliverable" | "DeliveryReturned" | "ShipRetired" | "DeliveryAbandoned" | "DeliveryDismissed" | "ShipRenamed" | "ShipReported" | "StatementSet" | "TurnReported" | "SignInTicketIssued" | "FleetLimitsChanged" | "ViewerSessionStarted" | "CrewRequested" | "CrewRequestRemoved" | "CrewAssigned" | "CrewStatusChanged" | "CrewRequestExplained" | "CrewRequestGivenBack" | "LabelDefined" | "LabelValuesChanged" | "LabelRetired" | "LabelAssigned" | "LabelUnassigned" | "LabelDeleted" | "WorktreeClearRequested" | "WorktreeCleared" | "WorktreeClearRemoved" | "NetworkRulesSet" | "NetworkRulesDeclared" | "NetworkRulesDraftSaved" | "NetworkRulesDraftDiscarded" | "NetworkPluginRegistered" | "NetworkPluginUnregistered" | "BuiltInRuleChanged" | "ScopesDeclared" | "ScopesChanged" | "PluginConnected" | "PluginDisconnected" | "VerifiedFactsSet" | "VerifiedFactsRemoved";
                 occurredAt: string;
+                actorKind: "ship" | "account" | "installation" | "system";
                 actorShipId: `shp_${string}` | null;
+                actorAccountId: (string & import("zod").$brand<"AccountId">) | null;
+                actorSignedInAccountId: (string & import("zod").$brand<"AccountId">) | null;
                 shipId: `shp_${string}` | null;
                 messageId: `msg_${string}` | null;
                 deliveryId: `dlv_${string}` | null;