@aeolus-fleet/gateway 0.32.1 → 0.33.0

package/dist/core/slack/take-slack-event.d.ts

@@ -0,0 +1,47 @@
+import type { Clock } from '../shared/clock.js';
+import { type Result } from '../shared/result.js';
+import type { SlackApps, SlackEvents, SlackLinks, SlackMessages, SlackPosts, SlackSignatures } from './ports.js';
+import { type SlackEventFields } from './slack-event.js';
+/** What the gateway answers a person whose disabled account's link stopped (gateway scopes 9.3). */
+export declare const STOPPED_LINK_TEXT = "Your account cannot message the fleet now";
+export type TakeSlackEvent = (event: {
+    appId: string;
+    event: SlackEventFields;
+    /** Whether Slack sends the event again, as it does when no answer came within 3 seconds. */
+    isRetry: boolean;
+    body: string;
+    timestamp: string;
+    signature: string;
+}) => Promise<Result<{
+    kind: 'taken' | 'kept' | 'known' | 'notLinked' | 'ignored';
+}, {
+    kind: 'notSigned';
+}>>;
+/**
+ * Use case: an event Slack sends the gateway for one of its apps. It is
+ * taken only signed with that app's signing secret, its timestamp within 5
+ * minutes of now. An app uninstalled or its tokens revoked is Removed in
+ * Slack, its bot token forgotten. A person who messages or mentions a bot
+ * unlinked gets an answer only they see, with a button to link, and their
+ * message is not stored, since it has no sender yet (gateway scopes 9.3);
+ * a disabled account's Slack user is told it cannot message the fleet now.
+ * Slack's retry of an event is answered once, the first time. A linked
+ * person's message is kept by Slack's event id, as the Markdown it is sent
+ * as, and sent now (9.4 step 3); a retry of a kept one changes nothing.
+ * One in the thread under a delivery the gateway posted answers it: it goes
+ * to that delivery's sender in reply to its message (9.5 step 4). Through
+ * the gateway's own bot, only such an answer is sent.
+ */
+export declare function createTakeSlackEvent(deps: {
+    apps: Pick<SlackApps, 'findByAppId' | 'save'>;
+    links: Pick<SlackLinks, 'find'>;
+    events: Pick<SlackEvents, 'keep'>;
+    posts: Pick<SlackPosts, 'lastInThread'>;
+    /** Sends the kept events now, not at the next round. */
+    sendNow: () => void;
+    slack: Pick<SlackMessages, 'postOnlyTo'>;
+    signatures: SlackSignatures;
+    clock: Clock;
+    /** The web app's page that starts a link, by the fleet named. */
+    linkPageUrl: string;
+}): TakeSlackEvent;

package/dist/core/slack/take-slack-event.js

@@ -0,0 +1,75 @@
+import { err, ok } from '../shared/result.js';
+import { isRemovedEvent, personMessageOf } from './slack-event.js';
+import { markdownOf } from './slack-markdown.js';
+import { isSignedBy } from './slack-request.js';
+/** What the gateway answers a person whose disabled account's link stopped (gateway scopes 9.3). */
+export const STOPPED_LINK_TEXT = 'Your account cannot message the fleet now';
+/**
+ * Use case: an event Slack sends the gateway for one of its apps. It is
+ * taken only signed with that app's signing secret, its timestamp within 5
+ * minutes of now. An app uninstalled or its tokens revoked is Removed in
+ * Slack, its bot token forgotten. A person who messages or mentions a bot
+ * unlinked gets an answer only they see, with a button to link, and their
+ * message is not stored, since it has no sender yet (gateway scopes 9.3);
+ * a disabled account's Slack user is told it cannot message the fleet now.
+ * Slack's retry of an event is answered once, the first time. A linked
+ * person's message is kept by Slack's event id, as the Markdown it is sent
+ * as, and sent now (9.4 step 3); a retry of a kept one changes nothing.
+ * One in the thread under a delivery the gateway posted answers it: it goes
+ * to that delivery's sender in reply to its message (9.5 step 4). Through
+ * the gateway's own bot, only such an answer is sent.
+ */
+export function createTakeSlackEvent(deps) {
+    return async ({ appId, event, isRetry, body, timestamp, signature }) => {
+        const app = await deps.apps.findByAppId(appId);
+        const now = deps.clock.now();
+        if (!isSignedBy(app, { request: { body, timestamp, signature }, signatures: deps.signatures, clock: deps.clock })) {
+            return err({ kind: 'notSigned' });
+        }
+        if (isRemovedEvent(event)) {
+            await deps.apps.save({ ...app, bot: null, removedInSlackAt: now });
+            return ok({ kind: 'taken' });
+        }
+        const message = personMessageOf(event);
+        if (message === undefined || app.bot === null) {
+            return ok({ kind: 'ignored' });
+        }
+        const link = await deps.links.find(app.fleetId, { teamId: message.teamId, userId: message.userId });
+        if (link?.stoppedAt === null) {
+            const { eventId, channel, ts, threadTs, text, files } = message;
+            const answered = threadTs === null ? undefined : await deps.posts.lastInThread(app.fleetId, { personShipId: link.personShipId, appId, channel, threadTs });
+            const shipId = answered?.senderShipId ?? app.shipId;
+            if (shipId === null) {
+                return ok({ kind: 'ignored' });
+            }
+            const kept = await deps.events.keep({
+                fleetId: app.fleetId,
+                eventId,
+                appId,
+                shipId,
+                personShipId: link.personShipId,
+                inReplyTo: answered?.messageId ?? null,
+                deliveryId: answered?.deliveryId ?? null,
+                channel,
+                ts,
+                threadTs,
+                markdown: markdownOf({ text, botUserId: app.bot.userId, files }),
+                receivedAt: now,
+                takenAt: null,
+            });
+            if (kept === 'kept') {
+                deps.sendNow();
+            }
+            return ok({ kind: kept });
+        }
+        if (!isRetry) {
+            const answer = link === undefined
+                ? { text: `Link your Slack account to talk to ${app.name}. Your message was not kept: send it again once linked.`, button: { text: 'Link Slack', url: `${deps.linkPageUrl}?${new URLSearchParams({ fleet: app.fleetId }).toString()}` } }
+                : { text: STOPPED_LINK_TEXT };
+            // Slack's refusal leaves nothing to undo: the message was never kept, and the person may write again.
+            await deps.slack.postOnlyTo(app.bot.token, { channel: message.channel, user: message.userId, ...answer });
+        }
+        return ok({ kind: link === undefined ? 'notLinked' : 'ignored' });
+    };
+}
+//# sourceMappingURL=take-slack-event.js.map

package/dist/core/slack/take-slack-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"take-slack-event.js","sourceRoot":"","sources":["../../../src/core/slack/take-slack-event.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAyB,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,oGAAoG;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,2CAA2C,CAAC;AAY7E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAYpC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YAClH,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAChE,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3J,MAAM,MAAM,GAAG,QAAQ,EAAE,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC;YACpD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO;gBACP,KAAK;gBACL,MAAM;gBACN,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI;gBACtC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI;gBACxC,OAAO;gBACP,EAAE;gBACF,QAAQ;gBACR,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAChE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,sCAAsC,GAAG,CAAC,IAAI,yDAAyD,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE;gBACzO,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;YAChC,sGAAsG;YACtG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/slack/unlink-slack.d.ts

@@ -0,0 +1,9 @@
+import type { Actor } from '../actors/authenticate-actor.js';
+import type { SlackLinks } from './ports.js';
+export type UnlinkSlack = (input: {
+    actor: Actor;
+}) => Promise<void>;
+/** Use case: Unlink on the Overview (gateway scopes 9.3): the account's own link goes, and its Slack user may link again. */
+export declare function createUnlinkSlack(deps: {
+    links: Pick<SlackLinks, 'remove'>;
+}): UnlinkSlack;

package/dist/core/slack/unlink-slack.js

@@ -0,0 +1,9 @@
+/** Use case: Unlink on the Overview (gateway scopes 9.3): the account's own link goes, and its Slack user may link again. */
+export function createUnlinkSlack(deps) {
+    return async ({ actor }) => {
+        if (actor.kind === 'account') {
+            await deps.links.remove(actor.fleetId, actor.accountId);
+        }
+    };
+}
+//# sourceMappingURL=unlink-slack.js.map

package/dist/core/slack/unlink-slack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unlink-slack.js","sourceRoot":"","sources":["../../../src/core/slack/unlink-slack.ts"],"names":[],"mappings":"AAKA,6HAA6H;AAC7H,MAAM,UAAU,iBAAiB,CAAC,IAA2C;IAC3E,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QACzB,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/slack-event-worker.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The gateway's sends from Slack into the fleet (gateway scopes 9.4): a
+ * round every interval, and one at once when a person's message is kept,
+ * one round at a time, until it stops.
+ */
+import type { FastifyBaseLogger } from 'fastify';
+import type { Sleep } from './core/mcp-out/run-party.js';
+import type { SendSlackEvents } from './core/slack/send-slack-events.js';
+export interface SlackEventWorker {
+    start(): void;
+    /** Runs the next round now, not at the next interval. */
+    wake(): void;
+    /** Stops, once the round under way ended. */
+    stop(): Promise<void>;
+}
+export declare function createSlackEventWorker(deps: {
+    send: SendSlackEvents;
+    sleep: Sleep;
+    intervalMs: number;
+    log: FastifyBaseLogger;
+}): SlackEventWorker;

package/dist/slack-event-worker.js

@@ -0,0 +1,38 @@
+export function createSlackEventWorker(deps) {
+    const stopping = new AbortController();
+    let waking = new AbortController();
+    /** Whether a wake came during a round: the next round runs at once. */
+    let isWoken = false;
+    let running = Promise.resolve();
+    // Read after a round: a wake or a stop may have come while it ran.
+    const isToGoOn = () => isWoken || stopping.signal.aborted;
+    return {
+        start: () => {
+            running = (async () => {
+                while (!stopping.signal.aborted) {
+                    isWoken = false;
+                    try {
+                        await deps.send();
+                    }
+                    catch (error) {
+                        deps.log.error({ err: error }, 'Slack event round failed');
+                    }
+                    if (isToGoOn()) {
+                        continue;
+                    }
+                    waking = new AbortController();
+                    await deps.sleep(deps.intervalMs, AbortSignal.any([stopping.signal, waking.signal]));
+                }
+            })();
+        },
+        wake: () => {
+            isWoken = true;
+            waking.abort();
+        },
+        stop: async () => {
+            stopping.abort();
+            await running;
+        },
+    };
+}
+//# sourceMappingURL=slack-event-worker.js.map

package/dist/slack-event-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-event-worker.js","sourceRoot":"","sources":["../src/slack-event-worker.ts"],"names":[],"mappings":"AAkBA,MAAM,UAAU,sBAAsB,CAAC,IAAyF;IAC9H,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,uEAAuE;IACvE,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,mEAAmE;IACnE,MAAM,QAAQ,GAAG,GAAY,EAAE,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACnE,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChC,OAAO,GAAG,KAAK,CAAC;oBAChB,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBACpB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;oBAC7D,CAAC;oBACD,IAAI,QAAQ,EAAE,EAAE,CAAC;wBACf,SAAS;oBACX,CAAC;oBACD,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;oBAC/B,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,IAAI,EAAE,GAAG,EAAE;YACT,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/slack-token-worker.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The gateway keeping each fleet's Slack configuration token alive (gateway
+ * scopes 9.1): a rotation pass every interval, well within the hour before
+ * a token ends, until it stops.
+ */
+import type { FastifyBaseLogger } from 'fastify';
+import type { Sleep } from './core/mcp-out/run-party.js';
+import type { RotateConfigurationTokens } from './core/slack/rotate-configuration-tokens.js';
+export interface SlackTokenWorker {
+    start(): void;
+    /** Stops, once the pass under way ended. */
+    stop(): Promise<void>;
+}
+export declare function createSlackTokenWorker(deps: {
+    rotate: RotateConfigurationTokens;
+    sleep: Sleep;
+    intervalMs: number;
+    log: FastifyBaseLogger;
+}): SlackTokenWorker;

package/dist/slack-token-worker.js

@@ -0,0 +1,24 @@
+export function createSlackTokenWorker(deps) {
+    const stopping = new AbortController();
+    let running = Promise.resolve();
+    return {
+        start: () => {
+            running = (async () => {
+                while (!stopping.signal.aborted) {
+                    try {
+                        await deps.rotate();
+                    }
+                    catch (error) {
+                        deps.log.error({ err: error }, 'Slack configuration token pass failed');
+                    }
+                    await deps.sleep(deps.intervalMs, stopping.signal);
+                }
+            })();
+        },
+        stop: async () => {
+            stopping.abort();
+            await running;
+        },
+    };
+}
+//# sourceMappingURL=slack-token-worker.js.map

package/dist/slack-token-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slack-token-worker.js","sourceRoot":"","sources":["../src/slack-token-worker.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,sBAAsB,CAAC,IAAqG;IAC1I,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;oBACtB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,uCAAuC,CAAC,CAAC;oBAC1E,CAAC;oBACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeolus-fleet/gateway",
-  "version": "0.32.1",
+  "version": "0.33.0",
   "description": "Aeolus gateway: outside MCP servers and clients join a fleet as ships, through one gateway beside core.",
   "keywords": [
     "ai-agents",
@@ -42,7 +42,8 @@
     "test:unit": "vitest run --project '*:unit'",
     "test:integration": "vitest run --project '*:integration'",
     "start": "node dist/bin/aeolus-gateway.js start",
-    "db:migrate": "tsx --env-file-if-exists=.env src/bin/aeolus-gateway.ts migrate"
+    "db:migrate": "tsx --env-file-if-exists=.env src/bin/aeolus-gateway.ts migrate",
+    "plugin:build": "tsx scripts/plugin-build.ts"
   },
   "dependencies": {
     "@a2a-js/sdk": "1.3.0",

package/src/adapters/prisma/migrations/20261027090000_slack_workspaces/migration.sql

@@ -0,0 +1,30 @@
+-- Gateway scopes (9.1): each fleet's Slack workspace with its configuration token, and the apps the gateway made in it.
+CREATE TABLE "slack_workspaces" (
+    "fleet_id" TEXT NOT NULL,
+    "team_id" TEXT NOT NULL,
+    "team_name" TEXT,
+    "connected_by_ship_id" TEXT NOT NULL,
+    "connected_by_name" TEXT NOT NULL,
+    "connected_at" TIMESTAMPTZ(3) NOT NULL,
+    "config_access_token" TEXT NOT NULL,
+    "config_refresh_token" TEXT NOT NULL,
+    "config_expires_at" TIMESTAMPTZ(3) NOT NULL,
+    "is_config_refused" BOOLEAN NOT NULL,
+
+    CONSTRAINT "slack_workspaces_pkey" PRIMARY KEY ("fleet_id")
+);
+
+CREATE TABLE "slack_apps" (
+    "fleet_id" TEXT NOT NULL,
+    "app_id" TEXT NOT NULL,
+    "ship_id" TEXT,
+    "client_id" TEXT NOT NULL,
+    "client_secret" TEXT NOT NULL,
+    "signing_secret" TEXT NOT NULL,
+    "install_url" TEXT NOT NULL,
+    "made_at" TIMESTAMPTZ(3) NOT NULL,
+    "bot_token" TEXT,
+    "bot_user_id" TEXT,
+
+    CONSTRAINT "slack_apps_pkey" PRIMARY KEY ("fleet_id","app_id")
+);

package/src/adapters/prisma/migrations/20261027150000_slack_bots/migration.sql

@@ -0,0 +1,6 @@
+-- Gateway scopes (9.2): a Slack app's bot name, its install opened from the gateway, and its removal in Slack; an app id names one app across fleets.
+ALTER TABLE "slack_apps" ADD COLUMN "name" TEXT NOT NULL DEFAULT '';
+ALTER TABLE "slack_apps" ALTER COLUMN "name" DROP DEFAULT;
+ALTER TABLE "slack_apps" ADD COLUMN "install_started_at" TIMESTAMPTZ(3);
+ALTER TABLE "slack_apps" ADD COLUMN "removed_in_slack_at" TIMESTAMPTZ(3);
+CREATE UNIQUE INDEX "slack_apps_app_id_key" ON "slack_apps"("app_id");

package/src/adapters/prisma/migrations/20261027200000_slack_links/migration.sql

@@ -0,0 +1,15 @@
+-- Gateway scopes (9.3): a person's Slack account linked to their account in a fleet, one Slack user to one account and one Slack user per account in each fleet.
+CREATE TABLE "slack_links" (
+    "fleet_id" TEXT NOT NULL,
+    "team_id" TEXT NOT NULL,
+    "slack_user_id" TEXT NOT NULL,
+    "slack_name" TEXT NOT NULL,
+    "account_id" TEXT NOT NULL,
+    "person_ship_id" TEXT NOT NULL,
+    "linked_at" TIMESTAMPTZ(3) NOT NULL,
+    "stopped_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "slack_links_pkey" PRIMARY KEY ("fleet_id","team_id","slack_user_id")
+);
+
+CREATE UNIQUE INDEX "slack_links_fleet_id_account_id_key" ON "slack_links"("fleet_id", "account_id");

package/src/adapters/prisma/migrations/20261028090000_slack_events/migration.sql

@@ -0,0 +1,18 @@
+-- Gateway scopes (9.4 step 3, P-B2): a linked person's Slack message, kept by Slack's event id until core takes it; then only its id, for an hour.
+CREATE TABLE "slack_events" (
+    "fleet_id" TEXT NOT NULL,
+    "event_id" TEXT NOT NULL,
+    "app_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "person_ship_id" TEXT NOT NULL,
+    "channel" TEXT NOT NULL,
+    "ts" TEXT NOT NULL,
+    "thread_ts" TEXT,
+    "markdown" TEXT NOT NULL,
+    "received_at" TIMESTAMPTZ(3) NOT NULL,
+    "taken_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "slack_events_pkey" PRIMARY KEY ("fleet_id","event_id")
+);
+
+CREATE INDEX "slack_events_taken_at_received_at_idx" ON "slack_events"("taken_at", "received_at");

package/src/adapters/prisma/migrations/20261028150000_slack_posts/migration.sql

@@ -0,0 +1,25 @@
+-- Gateway scopes (9.5): Show everything that waits in Slack per link; an answer in a thread kept with what it answers; the fleet messages in Slack, by person ship.
+ALTER TABLE "slack_links" ADD COLUMN "is_showing_all" BOOLEAN NOT NULL DEFAULT false;
+ALTER TABLE "slack_events" ADD COLUMN "in_reply_to" TEXT;
+ALTER TABLE "slack_events" ADD COLUMN "delivery_id" TEXT;
+
+CREATE TABLE "slack_posts" (
+    "fleet_id" TEXT NOT NULL,
+    "person_ship_id" TEXT NOT NULL,
+    "message_id" TEXT NOT NULL,
+    "delivery_id" TEXT,
+    "sender_ship_id" TEXT,
+    "app_id" TEXT NOT NULL,
+    "channel" TEXT NOT NULL,
+    "ts" TEXT,
+    "thread_ts" TEXT,
+    "is_link_only" BOOLEAN NOT NULL,
+    "acked_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "slack_posts_pkey" PRIMARY KEY ("fleet_id","person_ship_id","message_id")
+);
+
+CREATE INDEX "slack_posts_fleet_id_app_id_channel_ts_idx" ON "slack_posts"("fleet_id", "app_id", "channel", "ts");
+CREATE INDEX "slack_posts_fleet_id_app_id_channel_thread_ts_idx" ON "slack_posts"("fleet_id", "app_id", "channel", "thread_ts");
+
+CREATE INDEX "slack_links_fleet_id_person_ship_id_idx" ON "slack_links"("fleet_id", "person_ship_id");

package/src/adapters/prisma/schema.prisma

@@ -469,3 +469,106 @@ model WebPushSubscription {
   @@id([fleetId, shipId, endpoint])
   @@map("web_push_subscriptions")
 }
+
+/// A fleet's Slack workspace (gateway scopes 9.1): one per fleet, with Slack's app configuration token, which the gateway rotates before its 12 hours end.
+model SlackWorkspace {
+  fleetId            String   @id @map("fleet_id")
+  teamId             String   @map("team_id")
+  /// Known once Slack named the workspace, at the gateway's bot's install.
+  teamName           String?  @map("team_name")
+  connectedByShipId  String   @map("connected_by_ship_id")
+  connectedByName    String   @map("connected_by_name")
+  connectedAt        DateTime @map("connected_at") @db.Timestamptz(3)
+  configAccessToken  String   @map("config_access_token")
+  /// Single use: each rotation spends it for the next.
+  configRefreshToken String   @map("config_refresh_token")
+  configExpiresAt    DateTime @map("config_expires_at") @db.Timestamptz(3)
+  isConfigRefused    Boolean  @map("is_config_refused")
+
+  @@map("slack_workspaces")
+}
+
+/// A Slack app the gateway made in a fleet's workspace, with its secrets, and its bot token once installed; no ship for the gateway's own bot.
+model SlackApp {
+  fleetId       String   @map("fleet_id")
+  appId         String   @map("app_id")
+  shipId        String?  @map("ship_id")
+  clientId      String   @map("client_id")
+  clientSecret  String   @map("client_secret")
+  signingSecret String   @map("signing_secret")
+  installUrl       String    @map("install_url")
+  /// The bot's name in Slack as last made or renamed.
+  name             String
+  madeAt           DateTime  @map("made_at") @db.Timestamptz(3)
+  installStartedAt DateTime? @map("install_started_at") @db.Timestamptz(3)
+  botToken         String?   @map("bot_token")
+  botUserId        String?   @map("bot_user_id")
+  removedInSlackAt DateTime? @map("removed_in_slack_at") @db.Timestamptz(3)
+
+  @@id([fleetId, appId])
+  @@unique([appId])
+  @@map("slack_apps")
+}
+
+/// A person's Slack account linked to their account in a fleet (gateway scopes 9.3): one Slack user to one account, one Slack user per account.
+model SlackLink {
+  fleetId      String    @map("fleet_id")
+  teamId       String    @map("team_id")
+  slackUserId  String    @map("slack_user_id")
+  slackName    String    @map("slack_name")
+  accountId    String    @map("account_id")
+  personShipId String    @map("person_ship_id")
+  linkedAt     DateTime  @map("linked_at") @db.Timestamptz(3)
+  /// When the account was disabled (0055), its link stopped.
+  stoppedAt    DateTime? @map("stopped_at") @db.Timestamptz(3)
+  /// Show everything that waits in Slack (B5), off until turned on.
+  isShowingAll Boolean   @default(false) @map("is_showing_all")
+
+  @@id([fleetId, teamId, slackUserId])
+  @@unique([fleetId, accountId])
+  @@index([fleetId, personShipId])
+  @@map("slack_links")
+}
+
+/// A linked person's Slack message, kept by Slack's event id until core takes it (gateway scopes 9.4 step 3); then only its id, for an hour.
+model SlackEvent {
+  fleetId      String    @map("fleet_id")
+  eventId      String    @map("event_id")
+  appId        String    @map("app_id")
+  shipId       String    @map("ship_id")
+  personShipId String    @map("person_ship_id")
+  channel      String
+  ts           String
+  threadTs     String?   @map("thread_ts")
+  /// What is sent to the fleet; emptied once core took it.
+  markdown     String
+  inReplyTo    String?   @map("in_reply_to")
+  deliveryId   String?   @map("delivery_id")
+  receivedAt   DateTime  @map("received_at") @db.Timestamptz(3)
+  takenAt      DateTime? @map("taken_at") @db.Timestamptz(3)
+
+  @@id([fleetId, eventId])
+  @@index([takenAt, receivedAt])
+  @@map("slack_events")
+}
+
+/// A fleet message as it is in Slack, for a person ship (gateway scopes 9.5): a delivery posted there, or the person's own message sent from there.
+model SlackPost {
+  fleetId      String    @map("fleet_id")
+  personShipId String    @map("person_ship_id")
+  messageId    String    @map("message_id")
+  deliveryId   String?   @map("delivery_id")
+  senderShipId String?   @map("sender_ship_id")
+  appId        String    @map("app_id")
+  channel      String
+  /// The Slack message, once Slack accepted the post.
+  ts           String?
+  threadTs     String?   @map("thread_ts")
+  isLinkOnly   Boolean   @map("is_link_only")
+  ackedAt      DateTime? @map("acked_at") @db.Timestamptz(3)
+
+  @@id([fleetId, personShipId, messageId])
+  @@index([fleetId, appId, channel, ts])
+  @@index([fleetId, appId, channel, threadTs])
+  @@map("slack_posts")
+}

package/web/.next/BUILD_ID

@@ -1 +1 @@
-wnr2MrrQvcto8MOm16D8r
+87vMFs_KGRcFD40WWRkFR

package/web/.next/app-path-routes-manifest.json

@@ -14,6 +14,11 @@
   "/(console)/overview/requests/[requestId]/page": "/overview/requests/[requestId]",
   "/(console)/parties/page": "/parties",
   "/(console)/sign-in/failed/page": "/sign-in/failed",
+  "/(console)/slack/disconnect/page": "/slack/disconnect",
+  "/(console)/slack/expose/page": "/slack/expose",
+  "/(console)/slack/link/route": "/slack/link",
+  "/(console)/slack/page": "/slack",
+  "/(console)/slack/remove/page": "/slack/remove",
   "/_global-error/page": "/_global-error",
   "/_not-found/page": "/_not-found",
   "/authorize/failed/page": "/authorize/failed",

package/web/.next/build-manifest.json

@@ -7,9 +7,9 @@
     "static/chunks/0cz1d0mv5g_q7.js"
   ],
   "lowPriorityFiles": [
-    "static/wnr2MrrQvcto8MOm16D8r/_buildManifest.js",
-    "static/wnr2MrrQvcto8MOm16D8r/_ssgManifest.js",
-    "static/wnr2MrrQvcto8MOm16D8r/_clientMiddlewareManifest.js"
+    "static/87vMFs_KGRcFD40WWRkFR/_buildManifest.js",
+    "static/87vMFs_KGRcFD40WWRkFR/_ssgManifest.js",
+    "static/87vMFs_KGRcFD40WWRkFR/_clientMiddlewareManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/2hz8yws_wswjz.js",
@@ -201,6 +201,54 @@
         94553
       ]
     },
+    "/(console)/slack/page": {
+      "otherChunks": [
+        "static/chunks/2hz8yws_wswjz.js",
+        "static/chunks/3knqujtrdi225.js",
+        "static/chunks/0lzisjsmhlhjf.js",
+        "static/chunks/41rcj9-d-7p_4.js",
+        "static/chunks/2ewacyhp73due.js"
+      ],
+      "runtimeModuleIds": [
+        94553
+      ]
+    },
+    "/(console)/slack/disconnect/page": {
+      "otherChunks": [
+        "static/chunks/2hz8yws_wswjz.js",
+        "static/chunks/3knqujtrdi225.js",
+        "static/chunks/0lzisjsmhlhjf.js",
+        "static/chunks/41rcj9-d-7p_4.js",
+        "static/chunks/2ewacyhp73due.js"
+      ],
+      "runtimeModuleIds": [
+        94553
+      ]
+    },
+    "/(console)/slack/expose/page": {
+      "otherChunks": [
+        "static/chunks/2hz8yws_wswjz.js",
+        "static/chunks/3knqujtrdi225.js",
+        "static/chunks/0lzisjsmhlhjf.js",
+        "static/chunks/41rcj9-d-7p_4.js",
+        "static/chunks/2ewacyhp73due.js"
+      ],
+      "runtimeModuleIds": [
+        94553
+      ]
+    },
+    "/(console)/slack/remove/page": {
+      "otherChunks": [
+        "static/chunks/2hz8yws_wswjz.js",
+        "static/chunks/3knqujtrdi225.js",
+        "static/chunks/0lzisjsmhlhjf.js",
+        "static/chunks/41rcj9-d-7p_4.js",
+        "static/chunks/2ewacyhp73due.js"
+      ],
+      "runtimeModuleIds": [
+        94553
+      ]
+    },
     "/authorize/failed/page": {
       "otherChunks": [
         "static/chunks/2hz8yws_wswjz.js",