@aeolus-fleet/gateway 0.29.1 → 0.30.0

package/src/adapters/prisma/migrations/20261024090000_a2a_pushes/migration.sql

@@ -0,0 +1,37 @@
+-- A2A in, push to the client's webhook (slice 4): each task's push configs, and the pushes still to make.
+CREATE TABLE "a2a_push_configs" (
+    "fleet_id" TEXT NOT NULL,
+    "task_id" TEXT NOT NULL,
+    "id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "url" TEXT NOT NULL,
+    "token" TEXT,
+    "authentication" JSONB,
+    "created_at" TIMESTAMP(3) NOT NULL,
+    "noticed_mark" TEXT NOT NULL,
+    "is_following" BOOLEAN NOT NULL,
+
+    CONSTRAINT "a2a_push_configs_pkey" PRIMARY KEY ("fleet_id","task_id","id")
+);
+
+CREATE INDEX "a2a_push_configs_fleet_id_party_is_following_idx" ON "a2a_push_configs"("fleet_id", "party", "is_following");
+
+CREATE TABLE "a2a_pushes" (
+    "push_id" SERIAL NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "task_id" TEXT NOT NULL,
+    "config_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "body" TEXT NOT NULL,
+    "attempts" INTEGER NOT NULL,
+    "next_at" TIMESTAMP(3) NOT NULL,
+    "state" TEXT NOT NULL,
+    "reason" TEXT,
+    "settled_at" TIMESTAMP(3),
+
+    CONSTRAINT "a2a_pushes_pkey" PRIMARY KEY ("push_id")
+);
+
+CREATE INDEX "a2a_pushes_fleet_id_party_state_task_id_config_id_push_id_idx" ON "a2a_pushes"("fleet_id", "party", "state", "task_id", "config_id", "push_id");
+
+ALTER TABLE "a2a_pushes" ADD CONSTRAINT "a2a_pushes_fleet_id_task_id_config_id_fkey" FOREIGN KEY ("fleet_id", "task_id", "config_id") REFERENCES "a2a_push_configs"("fleet_id", "task_id", "id") ON DELETE CASCADE ON UPDATE CASCADE;

package/src/adapters/prisma/migrations/20261024100000_party_is_repeatable/migration.sql

@@ -0,0 +1,2 @@
+-- An A2A agent's mark (A9): whether a message that died unconfirmed may be handed again.
+ALTER TABLE "parties" ADD COLUMN "is_repeatable" BOOLEAN;

package/src/adapters/prisma/migrations/20261024110000_a2a_agent_calls/migration.sql

@@ -0,0 +1,29 @@
+-- The gateway's messages to outside A2A agents, by delivery, and which task each reply tells of (slice 6).
+CREATE TABLE "a2a_agent_calls" (
+    "delivery_id" TEXT NOT NULL,
+    "fleet_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "sender_ship_id" TEXT NOT NULL,
+    "state" TEXT NOT NULL,
+    "task_id" TEXT,
+    "context_id" TEXT,
+    "deadline_at" TIMESTAMPTZ(3) NOT NULL,
+    "answer" JSONB,
+    "replied" TEXT[] DEFAULT ARRAY[]::TEXT[],
+    "chunk_places" JSONB NOT NULL DEFAULT '{}',
+
+    CONSTRAINT "a2a_agent_calls_pkey" PRIMARY KEY ("fleet_id", "delivery_id")
+);
+
+CREATE INDEX "a2a_agent_calls_fleet_id_party_state_idx" ON "a2a_agent_calls"("fleet_id", "party", "state");
+
+CREATE TABLE "a2a_agent_replies" (
+    "fleet_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "task_id" TEXT NOT NULL,
+    "context_id" TEXT NOT NULL,
+
+    CONSTRAINT "a2a_agent_replies_pkey" PRIMARY KEY ("fleet_id", "party", "message_id")
+);

package/src/adapters/prisma/migrations/20261024115000_wakes/migration.sql

@@ -0,0 +1,17 @@
+-- What wakes a person (wake a person, W3, W8): the email channel they turned on, and when each channel last woke their person ship.
+CREATE TABLE "email_channels" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "turned_on_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "email_channels_pkey" PRIMARY KEY ("fleet_id","ship_id")
+);
+
+CREATE TABLE "wakes_sent" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "channel" TEXT NOT NULL,
+    "sent_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "wakes_sent_pkey" PRIMARY KEY ("fleet_id","ship_id","channel")
+);

package/src/adapters/prisma/migrations/20261024120000_focused_pages/migration.sql

@@ -0,0 +1,11 @@
+-- Wake a person (W6): a person's pages in focus, on any gateway instance.
+CREATE TABLE "focused_pages" (
+    "fleet_id" TEXT NOT NULL,
+    "page_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "seen_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "focused_pages_pkey" PRIMARY KEY ("fleet_id","page_id")
+);
+
+CREATE INDEX "focused_pages_fleet_id_ship_id_seen_at_idx" ON "focused_pages"("fleet_id", "ship_id", "seen_at");

package/src/adapters/prisma/migrations/20261024130000_web_push_subscriptions/migration.sql

@@ -0,0 +1,14 @@
+-- Wake a person (W8): the browsers a person turned web push on in.
+CREATE TABLE "web_push_subscriptions" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "endpoint" TEXT NOT NULL,
+    "p256dh" TEXT NOT NULL,
+    "auth" TEXT NOT NULL,
+    "browser" TEXT NOT NULL,
+    "fleet_name" TEXT NOT NULL,
+    "added_at" TIMESTAMPTZ(3) NOT NULL,
+    "gone_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "web_push_subscriptions_pkey" PRIMARY KEY ("fleet_id","ship_id","endpoint")
+);

package/src/adapters/prisma/schema.prisma

@@ -74,12 +74,18 @@ model Party {
   fleetId          String   @map("fleet_id")
   name             String
   kind             String
-  /// An MCP server's: its URL, its credential as JSON (a static bearer, or OAuth client credentials), and its calls at once.
+  /// An MCP server's: its URL, its credential as JSON (none, a static bearer, or OAuth client credentials), and its calls at once. An A2A agent's too, its card address as the URL.
   url              String?
   credential       Json?
   concurrencyLimit Int?     @map("concurrency_limit")
+  /// An MCP server's tool switches, by tool name (aeolus-fleet#1151); none kept yet means every tool it lists is on.
+  toolSwitches     Json?    @map("tool_switches")
   /// An MCP client's: its OAuth client id.
   clientId         String?  @map("client_id")
+  /// An A2A client's: the hash of the bearer it was shown once, which names it on every call; unique across fleets, as the bearer alone names the party (decision 0060).
+  bearerHash       String?  @unique @map("bearer_hash")
+  /// An A2A agent's: whether a message that died unconfirmed may be handed again, until an approver marks it not (A9).
+  isRepeatable     Boolean? @map("is_repeatable")
   state            String
   proxyShipId      String?  @map("proxy_ship_id")
   /// Kept only from the proxy ship's commission until the gateway crews it.
@@ -117,6 +123,41 @@ model Call {
   @@map("calls")
 }
 
+/// The gateway's messages to outside A2A agents, by delivery (slice 6): so a restart sends nothing again that may have run, and follows on each task the agent took.
+model A2aAgentCall {
+  deliveryId   String   @map("delivery_id")
+  fleetId      String   @map("fleet_id")
+  party        String
+  messageId    String   @map("message_id")
+  senderShipId String   @map("sender_ship_id")
+  state        String
+  taskId       String?  @map("task_id")
+  contextId    String?  @map("context_id")
+  deadlineAt   DateTime @map("deadline_at") @db.Timestamptz(3)
+  /// The reply to the agent's message answer or refusal, kept before the ack.
+  answer       Json?
+  /// The identity of each event the follow replied, so a restart replies none again.
+  replied      String[] @default([])
+  /// Where the next chunk of each artifact goes, as the replies so far leave it.
+  chunkPlaces  Json     @default("{}") @map("chunk_places")
+
+  @@id([fleetId, deliveryId])
+  @@index([fleetId, party, state])
+  @@map("a2a_agent_calls")
+}
+
+/// Which task each reply the gateway sent for an outside A2A agent tells of, by the reply's message id: an answer to it continues the task (slice 6).
+model A2aAgentReply {
+  fleetId   String @map("fleet_id")
+  party     String
+  messageId String @map("message_id")
+  taskId    String @map("task_id")
+  contextId String @map("context_id")
+
+  @@id([fleetId, party, messageId])
+  @@map("a2a_agent_replies")
+}
+
 /// MCP clients argo pre-registered; a confidential one's secret kept only as its hash.
 model OAuthClient {
   clientId     String   @id @map("client_id")
@@ -124,6 +165,8 @@ model OAuthClient {
   name         String
   redirectUris String[] @map("redirect_uris")
   secretHash   String?  @map("secret_hash")
+  /// How it signs in: authorizationCode, or clientCredentials with no redirect URI (vendor platforms V4).
+  grant        String   @default("authorizationCode")
 
   @@index([fleetId])
   @@map("oauth_clients")
@@ -151,9 +194,11 @@ model AuthorizationCode {
 /// The access and refresh tokens the gateway issued, kept only as hashes, a pair per row.
 model IssuedToken {
   accessHash       String   @id @map("access_hash")
-  refreshHash      String   @unique @map("refresh_hash")
+  /// None for a client signed in by client credentials, which asks again.
+  refreshHash      String?  @unique @map("refresh_hash")
   familyId         String   @map("family_id")
-  codeHash         String   @map("code_hash")
+  /// None for a token issued from client credentials.
+  codeHash         String?  @map("code_hash")
   fleetId          String   @map("fleet_id")
   clientId         String   @map("client_id")
   resource         String
@@ -162,7 +207,7 @@ model IssuedToken {
   party            String?
   grantId          String?  @map("grant_id")
   accessExpiresAt  DateTime @map("access_expires_at") @db.Timestamptz(3)
-  refreshExpiresAt DateTime @map("refresh_expires_at") @db.Timestamptz(3)
+  refreshExpiresAt DateTime? @map("refresh_expires_at") @db.Timestamptz(3)
   state            String
 
   @@index([fleetId])
@@ -178,16 +223,76 @@ model ClientCall {
   party      String
   handle     String
   shipId     String   @map("ship_id")
-  capability        String
+  /// None when an A2A message matched no capability, and then its first reply answers it (decision 0060).
+  capability        String?
   outputContentType String?  @map("output_content_type")
   sentAt            DateTime @map("sent_at")
   deadlineAt        DateTime? @map("deadline_at")
+  /// Where its delivery stands, as the gateway last read it from the fleet's sentMessage.
+  deliveryState     String?   @map("delivery_state")
+  deliverySince     DateTime? @map("delivery_since")
+  /// An A2A call's task, and the client's message as A2A JSON; none for an MCP call.
+  taskId            String?   @map("task_id")
+  taskMessage       String?   @map("task_message")
 
   @@id([fleetId, messageId])
   @@unique([fleetId, handle])
+  @@index([fleetId, taskId])
   @@map("client_calls")
 }
 
+/// An outside A2A client's task (decision 0060): its id, the HMAC of its first message, its party and its context.
+model A2aTask {
+  fleetId   String   @map("fleet_id")
+  taskId    String   @map("task_id")
+  party     String
+  contextId String   @map("context_id")
+  createdAt DateTime @map("created_at")
+
+  @@id([fleetId, taskId])
+  @@index([fleetId, party, createdAt(sort: Desc), taskId(sort: Desc)])
+  @@map("a2a_tasks")
+}
+
+/// A push config of an outside A2A client's task (slice 4): its webhook, and the vault of its token and authentication, never answered back; with the task as last noticed.
+model A2aPushConfig {
+  fleetId        String   @map("fleet_id")
+  taskId         String   @map("task_id")
+  id             String
+  party          String
+  url            String
+  token          String?
+  /// The scheme and credentials the webhook is called with, as JSON.
+  authentication Json?
+  createdAt      DateTime @map("created_at")
+  noticedMark    String   @map("noticed_mark")
+  isFollowing    Boolean  @map("is_following")
+  pushes         A2aPush[]
+
+  @@id([fleetId, taskId, id])
+  @@index([fleetId, party, isFollowing])
+  @@map("a2a_push_configs")
+}
+
+/// A push of one event of a config's task to its webhook (slice 4): pending until delivered or given up, kept over a restart; its id is its order.
+model A2aPush {
+  pushId    Int           @id @default(autoincrement()) @map("push_id")
+  fleetId   String        @map("fleet_id")
+  taskId    String        @map("task_id")
+  configId  String        @map("config_id")
+  party     String
+  body      String
+  attempts  Int
+  nextAt    DateTime      @map("next_at")
+  state     String
+  reason    String?
+  settledAt DateTime?     @map("settled_at")
+  config    A2aPushConfig @relation(fields: [fleetId, taskId, configId], references: [fleetId, taskId, id], onDelete: Cascade)
+
+  @@index([fleetId, party, state, taskId, configId, pushId])
+  @@map("a2a_pushes")
+}
+
 /// The replies naming an outside client's call, each kept once per delivery before it is acknowledged.
 model ClientCallReply {
   deliveryId     String   @id @map("delivery_id")
@@ -232,6 +337,27 @@ model PersonCrew {
   @@map("person_crews")
 }
 
+/// A person who turned email on to be woken for their person ship (wake a person, W8): a row while it is on; nothing is on by default.
+model EmailChannel {
+  fleetId    String   @map("fleet_id")
+  shipId     String   @map("ship_id")
+  turnedOnAt DateTime @map("turned_on_at") @db.Timestamptz(3)
+
+  @@id([fleetId, shipId])
+  @@map("email_channels")
+}
+
+/// When a channel last woke a person ship, so it sends at most one wake per its window (wake a person, W3).
+model WakeSent {
+  fleetId String   @map("fleet_id")
+  shipId  String   @map("ship_id")
+  channel String
+  sentAt  DateTime @map("sent_at") @db.Timestamptz(3)
+
+  @@id([fleetId, shipId, channel])
+  @@map("wakes_sent")
+}
+
 /// A delivery a person opened, kept until they deal with it, so their answer finds its message and sender and their inbox lists it (Q28 (a)).
 model OpenedDelivery {
   fleetId      String   @map("fleet_id")
@@ -311,3 +437,31 @@ model OwnerQuestion {
   @@id([fleetId, requestId])
   @@map("owner_questions")
 }
+
+/// A page of a person in focus, on any gateway instance, with when it was last seen so (wake a person, W6).
+model FocusedPage {
+  fleetId String   @map("fleet_id")
+  pageId  String   @map("page_id")
+  shipId  String   @map("ship_id")
+  seenAt  DateTime @map("seen_at") @db.Timestamptz(3)
+
+  @@id([fleetId, pageId])
+  @@index([fleetId, shipId, seenAt])
+  @@map("focused_pages")
+}
+
+/// A browser a person turned web push on in (wake a person, W8): its push service's endpoint and keys, and the fleet's name its wakes say. Gone once its push service answered 404 or 410.
+model WebPushSubscription {
+  fleetId   String    @map("fleet_id")
+  shipId    String    @map("ship_id")
+  endpoint  String
+  p256dh    String
+  auth      String
+  browser   String
+  fleetName String    @map("fleet_name")
+  addedAt   DateTime  @map("added_at") @db.Timestamptz(3)
+  goneAt    DateTime? @map("gone_at") @db.Timestamptz(3)
+
+  @@id([fleetId, shipId, endpoint])
+  @@map("web_push_subscriptions")
+}

package/web/.next/BUILD_ID

@@ -1 +1 @@
-MLIzjhz2u5r5gyyuciHvf
+Az1CqrzgGHMZVR4nw9717

package/web/.next/app-path-routes-manifest.json

@@ -1,17 +1,20 @@
 {
+  "/(console)/outside-parties/[name]/change/page": "/outside-parties/[name]/change",
+  "/(console)/outside-parties/[name]/page": "/outside-parties/[name]",
+  "/(console)/outside-parties/[name]/retire/page": "/outside-parties/[name]/retire",
+  "/(console)/outside-parties/add-a2a-agent/page": "/outside-parties/add-a2a-agent",
+  "/(console)/outside-parties/add-a2a-client/page": "/outside-parties/add-a2a-client",
+  "/(console)/outside-parties/add/page": "/outside-parties/add",
+  "/(console)/outside-parties/page": "/outside-parties",
+  "/(console)/overview/changes/route": "/overview/changes",
+  "/(console)/overview/focus/route": "/overview/focus",
+  "/(console)/overview/page": "/overview",
+  "/(console)/overview/requests/[requestId]/page": "/overview/requests/[requestId]",
+  "/(console)/parties/page": "/parties",
+  "/(console)/sign-in/failed/page": "/sign-in/failed",
   "/_global-error/page": "/_global-error",
   "/_not-found/page": "/_not-found",
   "/authorize/failed/page": "/authorize/failed",
   "/authorize/pick/page": "/authorize/pick",
-  "/authorize/waiting/approval/page": "/authorize/waiting/approval",
-  "/outside-parties/[name]/change/page": "/outside-parties/[name]/change",
-  "/outside-parties/[name]/page": "/outside-parties/[name]",
-  "/outside-parties/[name]/retire/page": "/outside-parties/[name]/retire",
-  "/outside-parties/add/page": "/outside-parties/add",
-  "/outside-parties/page": "/outside-parties",
-  "/overview/changes/route": "/overview/changes",
-  "/overview/page": "/overview",
-  "/overview/requests/[requestId]/page": "/overview/requests/[requestId]",
-  "/parties/page": "/parties",
-  "/sign-in/failed/page": "/sign-in/failed"
+  "/authorize/waiting/approval/page": "/authorize/waiting/approval"
 }

package/web/.next/build-manifest.json

@@ -7,9 +7,9 @@
     "static/chunks/0cz1d0mv5g_q7.js"
   ],
   "lowPriorityFiles": [
-    "static/MLIzjhz2u5r5gyyuciHvf/_buildManifest.js",
-    "static/MLIzjhz2u5r5gyyuciHvf/_ssgManifest.js",
-    "static/MLIzjhz2u5r5gyyuciHvf/_clientMiddlewareManifest.js"
+    "static/Az1CqrzgGHMZVR4nw9717/_buildManifest.js",
+    "static/Az1CqrzgGHMZVR4nw9717/_ssgManifest.js",
+    "static/Az1CqrzgGHMZVR4nw9717/_clientMiddlewareManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/2hz8yws_wswjz.js",
@@ -45,7 +45,7 @@
         94553
       ]
     },
-    "/authorize/failed/page": {
+    "/(console)/outside-parties/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -57,7 +57,7 @@
         94553
       ]
     },
-    "/authorize/pick/page": {
+    "/(console)/outside-parties/[name]/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -69,7 +69,19 @@
         94553
       ]
     },
-    "/authorize/waiting/approval/page": {
+    "/(console)/outside-parties/[name]/change/page": {
+      "otherChunks": [
+        "static/chunks/2hz8yws_wswjz.js",
+        "static/chunks/3knqujtrdi225.js",
+        "static/chunks/0lzisjsmhlhjf.js",
+        "static/chunks/41rcj9-d-7p_4.js",
+        "static/chunks/2ewacyhp73due.js"
+      ],
+      "runtimeModuleIds": [
+        94553
+      ]
+    },
+    "/(console)/outside-parties/[name]/retire/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -81,7 +93,7 @@
         94553
       ]
     },
-    "/outside-parties/page": {
+    "/(console)/outside-parties/add/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -93,7 +105,7 @@
         94553
       ]
     },
-    "/outside-parties/[name]/page": {
+    "/(console)/outside-parties/add-a2a-agent/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -105,7 +117,7 @@
         94553
       ]
     },
-    "/outside-parties/[name]/change/page": {
+    "/(console)/outside-parties/add-a2a-client/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -117,7 +129,7 @@
         94553
       ]
     },
-    "/outside-parties/[name]/retire/page": {
+    "/(console)/overview/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -129,7 +141,7 @@
         94553
       ]
     },
-    "/outside-parties/add/page": {
+    "/(console)/overview/requests/[requestId]/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -141,7 +153,7 @@
         94553
       ]
     },
-    "/overview/page": {
+    "/(console)/parties/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -153,7 +165,7 @@
         94553
       ]
     },
-    "/overview/requests/[requestId]/page": {
+    "/(console)/sign-in/failed/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -165,7 +177,19 @@
         94553
       ]
     },
-    "/parties/page": {
+    "/authorize/failed/page": {
+      "otherChunks": [
+        "static/chunks/2hz8yws_wswjz.js",
+        "static/chunks/3knqujtrdi225.js",
+        "static/chunks/0lzisjsmhlhjf.js",
+        "static/chunks/41rcj9-d-7p_4.js",
+        "static/chunks/2ewacyhp73due.js"
+      ],
+      "runtimeModuleIds": [
+        94553
+      ]
+    },
+    "/authorize/pick/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",
@@ -177,7 +201,7 @@
         94553
       ]
     },
-    "/sign-in/failed/page": {
+    "/authorize/waiting/approval/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",
         "static/chunks/3knqujtrdi225.js",