@aeolus-fleet/gateway 0.0.0-stage → 0.28.0

package/dist/outcome-worker.js

@@ -0,0 +1,60 @@
+export function createOutcomeWorker(deps) {
+    const stopping = new AbortController();
+    let running = Promise.resolve();
+    /** Whether a round runs, and how many were asked for since it started. */
+    const rounds = { isRunning: false, asked: 0 };
+    const round = async () => {
+        try {
+            const expired = await deps.expireRequests();
+            const { told, kept, refused } = await deps.tellOutcomes();
+            if (refused > 0) {
+                deps.log.warn({ refused }, "the fleet refused some request outcomes: their people see them on the gateway's page");
+            }
+            if (expired + told + kept > 0) {
+                deps.log.info({ expired, told, kept }, 'request outcomes');
+            }
+            const questions = await deps.askOwners();
+            if (questions.refused > 0) {
+                deps.log.warn({ refused: questions.refused }, "the fleet refused some questions to the gateway's owner");
+            }
+        }
+        catch (error) {
+            deps.log.error({ err: error }, 'request outcomes round failed');
+        }
+    };
+    const runRound = () => {
+        rounds.asked += 1;
+        if (rounds.isRunning) {
+            return;
+        }
+        rounds.isRunning = true;
+        running = (async () => {
+            while (rounds.asked > 0 && !stopping.signal.aborted) {
+                rounds.asked = 0;
+                await round();
+            }
+            rounds.isRunning = false;
+        })();
+    };
+    return {
+        start: () => {
+            void (async () => {
+                while (!stopping.signal.aborted) {
+                    runRound();
+                    await running;
+                    await deps.sleep(deps.intervalMs, stopping.signal);
+                }
+            })();
+        },
+        tellNow: () => {
+            if (!stopping.signal.aborted) {
+                runRound();
+            }
+        },
+        stop: async () => {
+            stopping.abort();
+            await running;
+        },
+    };
+}
+//# sourceMappingURL=outcome-worker.js.map

package/dist/outcome-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outcome-worker.js","sourceRoot":"","sources":["../src/outcome-worker.ts"],"names":[],"mappings":"AAwBA,MAAM,UAAU,mBAAmB,CAAC,IAAoJ;IACtL,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,0EAA0E;IAC1E,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAE9C,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1D,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,sFAAsF,CAAC,CAAC;YACrH,CAAC;YACD,IAAI,OAAO,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,yDAAyD,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,GAAS,EAAE;QAC1B,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YACpB,OAAO,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpD,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC;gBACjB,MAAM,KAAK,EAAE,CAAC;YAChB,CAAC;YACD,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3B,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChC,QAAQ,EAAE,CAAC;oBACX,MAAM,OAAO,CAAC;oBACd,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,EAAE,GAAG,EAAE;YACZ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC7B,QAAQ,EAAE,CAAC;YACb,CAAC;QACH,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/party-workers.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The gateway's workers, one per crewed party, each until the gateway stops
+ * or the fleet refuses its crew token: an outside server's states its proxy
+ * ship, then takes its calls (interop 5.2); an outside client's takes the
+ * replies to its calls (Q9 a). A fleet's workers work only while its outside
+ * parties are on (interop I-3).
+ */
+import type { FleetId } from '@aeolus-fleet/common';
+import type { FastifyBaseLogger } from 'fastify';
+import type { CollectReplies } from './core/mcp-in/collect-replies.js';
+import type { RunParty } from './core/mcp-out/run-party.js';
+import type { StateParty } from './core/mcp-out/state-party.js';
+import type { PartyStore } from './core/parties/ports.js';
+export interface PartyWorkers {
+    /** Starts the party's worker, unless it is not crewed or its worker runs already. */
+    start(party: {
+        fleetId: FleetId;
+        name: string;
+    }): Promise<void>;
+    /** Stops the fleet's workers, once their calls in flight ended, as when its outside parties go off. */
+    stopFleet(fleetId: FleetId): Promise<void>;
+    /** Stops every worker, once its calls in flight ended. */
+    stop(): Promise<void>;
+}
+export declare function createPartyWorkers(deps: {
+    parties: PartyStore;
+    stateParty: StateParty;
+    runParty: RunParty;
+    collectReplies: CollectReplies;
+    servesOutsideParties: (fleetId: FleetId) => Promise<boolean>;
+    log: FastifyBaseLogger;
+}): PartyWorkers;

package/dist/party-workers.js

@@ -0,0 +1,57 @@
+export function createPartyWorkers(deps) {
+    const stop = new AbortController();
+    /** Each running worker, by fleet and party, with what stops it. */
+    const running = new Map();
+    const work = async ({ fleetId, name }, signal) => {
+        if (!(await deps.servesOutsideParties(fleetId))) {
+            return;
+        }
+        const party = await deps.parties.find(fleetId, name);
+        if (party?.state !== 'crewed' || signal.aborted) {
+            return;
+        }
+        if (party.kind === 'mcpClient') {
+            const { ended } = await deps.collectReplies({ party, signal });
+            if (ended === 'crewRefused') {
+                deps.log.warn({ fleetId, party: name }, "the fleet refused the proxy ship's crew token: its calls get no replies");
+            }
+            return;
+        }
+        const stated = await deps.stateParty({ fleetId, name });
+        if (!stated.isOk) {
+            // Its calls are taken all the same; the next statement states it.
+            deps.log.warn({ fleetId, party: name, reason: stated.error.message }, 'proxy ship not stated');
+        }
+        const { ended } = await deps.runParty({ party, signal });
+        if (ended === 'crewRefused') {
+            deps.log.warn({ fleetId, party: name }, 'the fleet refused the proxy ship\'s crew token: its calls are not taken');
+        }
+    };
+    return {
+        start: (party) => {
+            const key = JSON.stringify([party.fleetId, party.name]);
+            if (!running.has(key) && !stop.signal.aborted) {
+                const stopFleet = new AbortController();
+                const done = work(party, AbortSignal.any([stop.signal, stopFleet.signal]))
+                    .catch((error) => {
+                    deps.log.error({ err: error, fleetId: party.fleetId, party: party.name }, 'party worker failed');
+                })
+                    .finally(() => running.delete(key));
+                running.set(key, { fleetId: party.fleetId, done, stopFleet });
+            }
+            return Promise.resolve();
+        },
+        stopFleet: async (fleetId) => {
+            const fleetWorkers = [...running.values()].filter((worker) => worker.fleetId === fleetId);
+            for (const worker of fleetWorkers) {
+                worker.stopFleet.abort();
+            }
+            await Promise.all(fleetWorkers.map((worker) => worker.done));
+        },
+        stop: async () => {
+            stop.abort();
+            await Promise.all([...running.values()].map((worker) => worker.done));
+        },
+    };
+}
+//# sourceMappingURL=party-workers.js.map

package/dist/party-workers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"party-workers.js","sourceRoot":"","sources":["../src/party-workers.ts"],"names":[],"mappings":"AAwBA,MAAM,UAAU,kBAAkB,CAAC,IAOlC;IACC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,mEAAmE;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiF,CAAC;IAEzG,MAAM,IAAI,GAAG,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAsC,EAAE,MAAmB,EAAiB,EAAE;QAC/G,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,EAAE,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,yEAAyE,CAAC,CAAC;YACrH,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,kEAAkE;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,yEAAyE,CAAC,CAAC;QACrH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9C,MAAM,SAAS,GAAG,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;qBACvE,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACxB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAC;gBACnG,CAAC,CAAC;qBACD,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC3B,MAAM,YAAY,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YAC1F,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;gBAClC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YAC3B,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,72 @@
 {
   "name": "@aeolus-fleet/gateway",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.28.0",
+  "description": "Aeolus gateway: outside MCP servers and clients join a fleet as ships, through one gateway beside core.",
+  "keywords": [
+    "ai-agents",
+    "mcp",
+    "model-context-protocol",
+    "gateway"
+  ],
+  "license": "Apache-2.0",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ThomasHendrickx/aeolus-fleet-gateway.git"
+  },
+  "packageManager": "npm@11.19.1",
+  "engines": {
+    "node": ">=26"
+  },
+  "bin": {
+    "aeolus-gateway": "dist/bin/aeolus-gateway.js"
+  },
+  "files": [
+    "dist",
+    "prisma.config.ts",
+    "src/adapters/prisma/schema.prisma",
+    "src/adapters/prisma/migrations"
+  ],
+  "scripts": {
+    "postinstall": "prisma generate",
+    "generate": "prisma generate",
+    "build": "tsc --project tsconfig.build.json",
+    "typecheck": "tsc --project tsconfig.json",
+    "lint": "eslint --max-warnings 0 .",
+    "test": "vitest run",
+    "test:unit": "vitest run --project '*:unit'",
+    "test:integration": "vitest run --project '*:integration'",
+    "start": "node dist/bin/aeolus-gateway.js start",
+    "db:migrate": "tsx --env-file-if-exists=.env src/bin/aeolus-gateway.ts migrate"
+  },
+  "dependencies": {
+    "@aeolus-fleet/common": "^0.28.0",
+    "@fastify/websocket": "^11.3.4",
+    "@modelcontextprotocol/client": "^2.3.1",
+    "@modelcontextprotocol/server": "^2.3.1",
+    "@prisma/adapter-pg": "^7.10.1",
+    "@prisma/client": "^7.10.1",
+    "@trpc/server": "^11.19.0",
+    "fastify": "^5.12.7",
+    "pg": "^8.23.1",
+    "prisma": "^7.10.1",
+    "zod": "^4.6.5"
+  },
+  "devDependencies": {
+    "@aeolus-fleet/core": "^0.28.0",
+    "@eslint/js": "^10.0.1",
+    "@modelcontextprotocol/ext-tasks": "0.2.2",
+    "@testcontainers/postgresql": "^12.2.0",
+    "@types/node": "^26.6.3",
+    "@types/pg": "^8.23.1",
+    "@types/ws": "^8.18.2",
+    "eslint": "^10.11.0",
+    "eslint-plugin-check-file": "^3.3.2",
+    "testcontainers": "^12.2.0",
+    "tsx": "^4.23.15",
+    "typescript": "~6.0.3",
+    "typescript-eslint": "^8.71.0",
+    "vitest": "^5.0.3",
+    "ws": "^8.22.0"
+  }
+}

package/prisma.config.ts

@@ -0,0 +1,18 @@
+import { existsSync } from 'node:fs';
+
+import { defineConfig } from 'prisma/config';
+
+if (existsSync('.env')) {
+  process.loadEnvFile('.env');
+}
+
+export default defineConfig({
+  schema: 'src/adapters/prisma/schema.prisma',
+  migrations: {
+    path: 'src/adapters/prisma/migrations',
+  },
+  datasource: {
+    // Only migrate commands need the URL; `prisma generate` runs without one.
+    url: process.env.DATABASE_URL,
+  },
+});

package/src/adapters/prisma/migrations/20261018200000_init/migration.sql

@@ -0,0 +1,35 @@
+-- CreateTable
+CREATE TABLE "connections" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "ship_name" TEXT NOT NULL,
+    "crew_token" TEXT,
+    "crewed_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "connections_pkey" PRIMARY KEY ("fleet_id")
+);
+
+-- CreateTable
+CREATE TABLE "fleet_switches" (
+    "fleet_id" TEXT NOT NULL,
+    "enabled" BOOLEAN NOT NULL,
+    "changed_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "fleet_switches_pkey" PRIMARY KEY ("fleet_id")
+);
+
+-- CreateTable
+CREATE TABLE "installation_requests" (
+    "request_id" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "request_hash" TEXT NOT NULL,
+    "fleet_id" TEXT,
+    "enabled" BOOLEAN,
+    "at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "installation_requests_pkey" PRIMARY KEY ("request_id")
+);
+
+-- CreateIndex
+CREATE INDEX "installation_requests_fleet_id_idx" ON "installation_requests"("fleet_id");
+

package/src/adapters/prisma/migrations/20261018210000_parties/migration.sql

@@ -0,0 +1,19 @@
+-- CreateTable
+CREATE TABLE "parties" (
+    "fleet_id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "url" TEXT NOT NULL,
+    "credential" JSONB NOT NULL,
+    "owner_ship_id" TEXT NOT NULL,
+    "concurrency_limit" INTEGER NOT NULL,
+    "state" TEXT NOT NULL,
+    "proxy_ship_id" TEXT,
+    "secret" TEXT,
+    "crew_token" TEXT,
+    "request_id" TEXT NOT NULL,
+    "request_hash" TEXT NOT NULL,
+    "approved_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "parties_pkey" PRIMARY KEY ("fleet_id","name")
+);

package/src/adapters/prisma/migrations/20261018220000_tool_marks/migration.sql

@@ -0,0 +1,8 @@
+-- CreateTable
+CREATE TABLE "tool_marks" (
+    "fleet_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "tool" TEXT NOT NULL,
+
+    CONSTRAINT "tool_marks_pkey" PRIMARY KEY ("fleet_id","party","tool")
+);

package/src/adapters/prisma/migrations/20261018230000_calls/migration.sql

@@ -0,0 +1,13 @@
+-- CreateTable
+CREATE TABLE "calls" (
+    "delivery_id" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "state" TEXT NOT NULL,
+    "reply" JSONB,
+
+    CONSTRAINT "calls_pkey" PRIMARY KEY ("delivery_id")
+);
+
+-- CreateIndex
+CREATE INDEX "calls_fleet_id_idx" ON "calls"("fleet_id");

package/src/adapters/prisma/migrations/20261019090000_oauth/migration.sql

@@ -0,0 +1,60 @@
+-- CreateTable
+CREATE TABLE "oauth_clients" (
+    "client_id" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "redirect_uris" TEXT[],
+    "secret_hash" TEXT,
+
+    CONSTRAINT "oauth_clients_pkey" PRIMARY KEY ("client_id")
+);
+
+-- CreateTable
+CREATE TABLE "authorization_codes" (
+    "code_hash" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "client_id" TEXT NOT NULL,
+    "redirect_uri" TEXT NOT NULL,
+    "code_challenge" TEXT NOT NULL,
+    "resource" TEXT NOT NULL,
+    "scope" TEXT,
+    "expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "used_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "authorization_codes_pkey" PRIMARY KEY ("code_hash")
+);
+
+-- CreateTable
+CREATE TABLE "issued_tokens" (
+    "access_hash" TEXT NOT NULL,
+    "refresh_hash" TEXT NOT NULL,
+    "family_id" TEXT NOT NULL,
+    "code_hash" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "client_id" TEXT NOT NULL,
+    "resource" TEXT NOT NULL,
+    "scope" TEXT,
+    "access_expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "refresh_expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "state" TEXT NOT NULL,
+
+    CONSTRAINT "issued_tokens_pkey" PRIMARY KEY ("access_hash")
+);
+
+-- CreateIndex
+CREATE INDEX "oauth_clients_fleet_id_idx" ON "oauth_clients"("fleet_id");
+
+-- CreateIndex
+CREATE INDEX "authorization_codes_fleet_id_idx" ON "authorization_codes"("fleet_id");
+
+-- CreateIndex
+CREATE UNIQUE INDEX "issued_tokens_refresh_hash_key" ON "issued_tokens"("refresh_hash");
+
+-- CreateIndex
+CREATE INDEX "issued_tokens_fleet_id_idx" ON "issued_tokens"("fleet_id");
+
+-- CreateIndex
+CREATE INDEX "issued_tokens_family_id_idx" ON "issued_tokens"("family_id");
+
+-- CreateIndex
+CREATE INDEX "issued_tokens_code_hash_idx" ON "issued_tokens"("code_hash");

package/src/adapters/prisma/migrations/20261019100000_client_parties/migration.sql

@@ -0,0 +1,8 @@
+-- AlterTable
+ALTER TABLE "parties" ADD COLUMN     "client_id" TEXT,
+ALTER COLUMN "url" DROP NOT NULL,
+ALTER COLUMN "credential" DROP NOT NULL,
+ALTER COLUMN "concurrency_limit" DROP NOT NULL;
+
+-- CreateIndex
+CREATE UNIQUE INDEX "parties_fleet_id_client_id_key" ON "parties"("fleet_id", "client_id");

package/src/adapters/prisma/migrations/20261019110000_oauth_parties/migration.sql

@@ -0,0 +1,5 @@
+-- AlterTable
+ALTER TABLE "authorization_codes" ADD COLUMN     "party" TEXT NOT NULL;
+
+-- AlterTable
+ALTER TABLE "issued_tokens" ADD COLUMN     "party" TEXT NOT NULL;

package/src/adapters/prisma/migrations/20261019120000_client_calls/migration.sql

@@ -0,0 +1,15 @@
+-- CreateTable
+CREATE TABLE "client_calls" (
+    "fleet_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "handle" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "capability" TEXT NOT NULL,
+    "sent_at" TIMESTAMP(3) NOT NULL,
+
+    CONSTRAINT "client_calls_pkey" PRIMARY KEY ("fleet_id","message_id")
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "client_calls_fleet_id_handle_key" ON "client_calls"("fleet_id", "handle");

package/src/adapters/prisma/migrations/20261019130000_client_call_replies/migration.sql

@@ -0,0 +1,20 @@
+-- AlterTable
+ALTER TABLE "client_calls" ADD COLUMN "output_content_type" TEXT,
+ADD COLUMN "deadline_at" TIMESTAMP(3) NOT NULL;
+
+-- CreateTable
+CREATE TABLE "client_call_replies" (
+    "delivery_id" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "call_message_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "content_type" TEXT NOT NULL,
+    "payload" TEXT NOT NULL,
+    "received_at" TIMESTAMP(3) NOT NULL,
+    "sequence" SERIAL NOT NULL,
+
+    CONSTRAINT "client_call_replies_pkey" PRIMARY KEY ("delivery_id")
+);
+
+-- CreateIndex
+CREATE INDEX "client_call_replies_fleet_id_call_message_id_idx" ON "client_call_replies"("fleet_id", "call_message_id");

package/src/adapters/prisma/migrations/20261019140000_identity_providers/migration.sql

@@ -0,0 +1,10 @@
+-- CreateTable
+CREATE TABLE "identity_providers" (
+    "fleet_id" TEXT NOT NULL,
+    "issuer" TEXT NOT NULL,
+    "client_id" TEXT NOT NULL,
+    "client_secret" TEXT NOT NULL,
+    "set_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "identity_providers_pkey" PRIMARY KEY ("fleet_id")
+);

package/src/adapters/prisma/migrations/20261020090000_no_identity_providers/migration.sql

@@ -0,0 +1,2 @@
+-- pagasae signs people in for every fleet (decision 0054): no identity provider per fleet.
+DROP TABLE "identity_providers";

package/src/adapters/prisma/migrations/20261020100000_account_grants_in_tokens/migration.sql

@@ -0,0 +1,5 @@
+-- A code and its tokens stand for a party or for a signed-in account's grant (decision 0054): exactly one of the two.
+ALTER TABLE "authorization_codes" ALTER COLUMN "party" DROP NOT NULL, ADD COLUMN "grant_id" TEXT;
+ALTER TABLE "authorization_codes" ADD CONSTRAINT "authorization_codes_one_holder" CHECK (("party" IS NULL) <> ("grant_id" IS NULL));
+ALTER TABLE "issued_tokens" ALTER COLUMN "party" DROP NOT NULL, ADD COLUMN "grant_id" TEXT;
+ALTER TABLE "issued_tokens" ADD CONSTRAINT "issued_tokens_one_holder" CHECK (("party" IS NULL) <> ("grant_id" IS NULL));

package/src/adapters/prisma/migrations/20261020110000_account_grants/migration.sql

@@ -0,0 +1,15 @@
+-- CreateTable
+CREATE TABLE "account_grants" (
+    "grant_id" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "account_id" TEXT NOT NULL,
+    "person_ship_id" TEXT,
+    "refresh_token" TEXT NOT NULL,
+    "account_token" TEXT NOT NULL,
+    "account_token_expires_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "account_grants_pkey" PRIMARY KEY ("grant_id")
+);
+
+-- CreateIndex
+CREATE INDEX "account_grants_fleet_id_idx" ON "account_grants"("fleet_id");

package/src/adapters/prisma/migrations/20261020120000_person_crews/migration.sql

@@ -0,0 +1,9 @@
+-- CreateTable
+CREATE TABLE "person_crews" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "crew_token" TEXT NOT NULL,
+    "crewed_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "person_crews_pkey" PRIMARY KEY ("fleet_id","ship_id")
+);

package/src/adapters/prisma/migrations/20261020130000_opened_deliveries/migration.sql

@@ -0,0 +1,13 @@
+-- CreateTable
+CREATE TABLE "opened_deliveries" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "delivery_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "sender_ship_id" TEXT NOT NULL,
+    "from" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "opened_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "opened_deliveries_pkey" PRIMARY KEY ("fleet_id","ship_id","delivery_id")
+);

package/src/adapters/prisma/migrations/20261020140000_pending_requests/migration.sql

@@ -0,0 +1,26 @@
+-- CreateTable
+CREATE TABLE "pending_requests" (
+    "fleet_id" TEXT NOT NULL,
+    "request_id" TEXT NOT NULL,
+    "kind" TEXT NOT NULL,
+    "subject_key" TEXT NOT NULL,
+    "client_id" TEXT,
+    "client_name" TEXT,
+    "url" TEXT,
+    "requesters" JSONB NOT NULL,
+    "asked_at" TIMESTAMPTZ(3) NOT NULL,
+    "expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "state" TEXT NOT NULL,
+    "decided_by" JSONB,
+    "decided_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "pending_requests_pkey" PRIMARY KEY ("fleet_id","request_id"),
+    CONSTRAINT "pending_requests_kind_check" CHECK ("kind" IN ('client', 'server')),
+    CONSTRAINT "pending_requests_state_check" CHECK ("state" IN ('pending', 'approving', 'approved', 'denied', 'expired'))
+);
+
+-- One open request per client or server in a fleet: a second requester joins it (decision 0056).
+CREATE UNIQUE INDEX "pending_requests_one_open" ON "pending_requests" ("fleet_id", "subject_key") WHERE "state" IN ('pending', 'approving');
+
+-- The open requests of a fleet, the oldest first.
+CREATE INDEX "pending_requests_fleet_asked" ON "pending_requests" ("fleet_id", "asked_at");

package/src/adapters/prisma/migrations/20261020150000_outside_party_switches/migration.sql

@@ -0,0 +1,8 @@
+-- CreateTable
+CREATE TABLE "outside_party_switches" (
+    "fleet_id" TEXT NOT NULL,
+    "is_on" BOOLEAN NOT NULL,
+    "changed_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "outside_party_switches_pkey" PRIMARY KEY ("fleet_id")
+);

package/src/adapters/prisma/migrations/20261020160000_pending_requests_told/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "pending_requests" ADD COLUMN "told_account_ids" JSONB NOT NULL DEFAULT '[]';

package/src/adapters/prisma/migrations/20261020170000_request_outcome_notices/migration.sql

@@ -0,0 +1,17 @@
+-- CreateTable
+CREATE TABLE "request_outcome_notices" (
+    "fleet_id" TEXT NOT NULL,
+    "request_id" TEXT NOT NULL,
+    "account_id" TEXT NOT NULL,
+    "person_ship_id" TEXT NOT NULL,
+    "url" TEXT NOT NULL,
+    "outcome" TEXT NOT NULL,
+    "party_name" TEXT,
+    "created_at" TIMESTAMPTZ(3) NOT NULL,
+    "ended_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "request_outcome_notices_pkey" PRIMARY KEY ("fleet_id","request_id","account_id")
+);
+
+-- CreateIndex
+CREATE INDEX "request_outcome_notices_unended" ON "request_outcome_notices"("ended_at", "created_at");

package/src/adapters/prisma/migrations/20261020180000_owner_questions/migration.sql

@@ -0,0 +1,11 @@
+-- CreateTable
+CREATE TABLE "owner_questions" (
+    "fleet_id" TEXT NOT NULL,
+    "request_id" TEXT NOT NULL,
+    "question_id" TEXT NOT NULL,
+    "asked_ship_id" TEXT,
+    "asked_at" TIMESTAMPTZ(3),
+    "withdrawn_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "owner_questions_pkey" PRIMARY KEY ("fleet_id","request_id")
+);

package/src/adapters/prisma/migrations/20261020190000_request_changes/migration.sql

@@ -0,0 +1,12 @@
+-- The pages' live channel: every change to a fleet's pending requests is
+-- announced on commit, naming only its fleet and topic, never content.
+CREATE FUNCTION "notify_request_change"() RETURNS trigger AS $$
+BEGIN
+  PERFORM pg_notify('gateway_changes', json_build_object('fleetId', NEW."fleet_id", 'topic', 'requests')::text);
+  RETURN NULL;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER "pending_requests_changed"
+AFTER INSERT OR UPDATE ON "pending_requests"
+FOR EACH ROW EXECUTE FUNCTION "notify_request_change"();

package/src/adapters/prisma/migrations/20261020200000_account_grant_scopes/migration.sql

@@ -0,0 +1,2 @@
+-- The scopes a grant's account token carries: what the account may do on the gateway's pages.
+ALTER TABLE "account_grants" ADD COLUMN "scopes" TEXT[] NOT NULL DEFAULT ARRAY[]::TEXT[];

package/src/adapters/prisma/migrations/20261020210000_party_owner_from_fleet/migration.sql

@@ -0,0 +1,2 @@
+-- A party's owner is the fleet's alone (decision 0056): the gateway names it at the commission and reads it after.
+ALTER TABLE "parties" DROP COLUMN "owner_ship_id";

package/src/adapters/prisma/migrations/20261020220000_client_call_deadline_optional/migration.sql

@@ -0,0 +1,2 @@
+-- A call fails at the deadline its capability states, and never by time when it states none (interop 3.4).
+ALTER TABLE "client_calls" ALTER COLUMN "deadline_at" DROP NOT NULL;

package/src/adapters/prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "postgresql"