@aeolus-fleet/gateway 0.32.2 → 0.34.0

package/dist/adapters/trpc/router.d.ts

@@ -16,6 +16,13 @@ import type { ListReachedShips } from '../../core/a2a-in/list-reached-ships.js';
 import type { AddA2aClient } from '../../core/parties/add-a2a-client.js';
 import type { AddA2aAgent } from '../../core/parties/add-a2a-agent.js';
 import type { MarkA2aAgent } from '../../core/a2a-out/mark-a2a-agent.js';
+import type { AddSignInServer } from '../../core/parties/add-sign-in-server.js';
+import type { EndAccountGrants } from '../../core/party-grants/end-account-grants.js';
+import type { ListGrants } from '../../core/party-grants/list-grants.js';
+import type { ReadOwnGrant } from '../../core/party-grants/read-own-grant.js';
+import type { RemoveGrant } from '../../core/party-grants/remove-grant.js';
+import type { RemoveOwnGrant } from '../../core/party-grants/remove-own-grant.js';
+import type { StartPartySignIn } from '../../core/party-grants/start-party-sign-in.js';
 import type { ApproveParty } from '../../core/parties/approve-party.js';
 import type { CrewParty } from '../../core/parties/crew-party.js';
 import type { ListOwnerChoices } from '../../core/parties/list-owner-choices.js';
@@ -50,6 +57,18 @@ import type { TurnOnWebPush } from '../../core/people/turn-on-web-push.js';
 import type { TurnEmailChannel } from '../../core/people/turn-email-channel.js';
 import type { ReadAuthorization } from '../../core/oauth/read-authorization.js';
 import type { WatchWaiting } from '../../core/requests/watch-waiting.js';
+import { type ConnectSlack } from '../../core/slack/connect-slack.js';
+import type { DisconnectSlack } from '../../core/slack/disconnect-slack.js';
+import type { ExposeShip } from '../../core/slack/expose-ship.js';
+import type { ListExposable } from '../../core/slack/list-exposable.js';
+import type { RemoveBot } from '../../core/slack/remove-bot.js';
+import type { ReadSlack } from '../../core/slack/read-slack.js';
+import type { ReadSlackLink } from '../../core/slack/read-slack-link.js';
+import type { ShowAllInSlack } from '../../core/slack/show-all-in-slack.js';
+import type { StartLink } from '../../core/slack/start-link.js';
+import type { StopSlackLink } from '../../core/slack/stop-slack-link.js';
+import type { UnlinkSlack } from '../../core/slack/unlink-slack.js';
+import type { StartInstall } from '../../core/slack/start-install.js';
 /** The header the web app's waiting page sends its browser's secret in (web/lib/gateway-api/gateway-api.ts names the same). */
 export declare const WAITING_SECRET_HEADER = "aeolus-waiting-secret";
 export interface Context {
@@ -81,9 +100,20 @@ export interface Context {
     readFleet: ReadFleet;
     deleteFleet: DeleteFleet;
     endSignIns: EndSignIns;
+    endAccountGrants: EndAccountGrants;
+    stopSlackLink: StopSlackLink;
     readConnection: ReadConnection;
     connect: Connect;
     approveParty: ApproveParty;
+    addSignInServer: AddSignInServer;
+    /** A person's own sign-in to an outside MCP server where each person signs in (decision 0067). */
+    partySignIn: {
+        start: StartPartySignIn;
+        readOwn: ReadOwnGrant;
+        removeOwn: RemoveOwnGrant;
+        list: ListGrants;
+        remove: RemoveGrant;
+    };
     addClientParty: AddClientParty;
     crewParty: CrewParty;
     listParties: ListParties;
@@ -133,6 +163,20 @@ export interface Context {
         readMeeting: ReadMeeting;
         changeOwnMic: ChangeOwnMic;
     };
+    /** The fleet's Slack workspace and the gateway's bot (gateway scopes, part B). */
+    slack: {
+        readSlack: ReadSlack;
+        connectSlack: ConnectSlack;
+        startInstall: StartInstall;
+        disconnectSlack: DisconnectSlack;
+        listExposable: ListExposable;
+        exposeShip: ExposeShip;
+        removeBot: RemoveBot;
+        readSlackLink: ReadSlackLink;
+        startLink: StartLink;
+        unlinkSlack: UnlinkSlack;
+        showAllInSlack: ShowAllInSlack;
+    };
     readOutsideParties: ReadOutsideParties;
     setOutsideParties: SetOutsideParties;
 }
@@ -261,7 +305,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             output: ({
                 kind: "mcpServer";
                 url: string;
-                credentialKind: "none" | "bearer" | "clientCredentials";
+                credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                 concurrencyLimit: number;
                 proxyShipName: string | null;
                 ownerShipId: string | null;
@@ -322,7 +366,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             output: {
                 kind: "mcpServer";
                 url: string;
-                credentialKind: "none" | "bearer" | "clientCredentials";
+                credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                 concurrencyLimit: number;
                 proxyShipName: string | null;
                 ownerShipId: string | null;
@@ -417,7 +461,8 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
         /**
          * argo approves an outside MCP server as a party: the gateway commissions
          * its app proxy ship owned by the owner argo picked, crews it, and keeps
-         * the credential in its vault (interop I-5). A repeat with the same
+         * the credential in its vault (interop I-5); for a server where each
+         * person signs in, the client it registered for the party (0067). A repeat with the same
          * request id picks up where the last one stopped.
          */
         approve: import("@trpc/server").TRPCMutationProcedure<{
@@ -436,6 +481,8 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
                     clientSecret: string;
                     issuer: string;
                     scope?: string | undefined;
+                } | {
+                    kind: "personSignIn";
                 };
                 ownerShipId: unknown;
                 concurrencyLimit?: number | undefined;
@@ -447,7 +494,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             output: {
                 kind: "mcpServer";
                 url: string;
-                credentialKind: "none" | "bearer" | "clientCredentials";
+                credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                 concurrencyLimit: number;
                 name: string;
                 state: "awaitingCrew" | "crewed" | "commissioning";
@@ -494,7 +541,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
                 party: {
                     kind: "mcpServer";
                     url: string;
-                    credentialKind: "none" | "bearer" | "clientCredentials";
+                    credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                     concurrencyLimit: number;
                     name: string;
                     state: "awaitingCrew" | "crewed" | "commissioning";
@@ -543,7 +590,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
                 party: {
                     kind: "mcpServer";
                     url: string;
-                    credentialKind: "none" | "bearer" | "clientCredentials";
+                    credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                     concurrencyLimit: number;
                     name: string;
                     state: "awaitingCrew" | "crewed" | "commissioning";
@@ -604,7 +651,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             output: {
                 kind: "mcpServer";
                 url: string;
-                credentialKind: "none" | "bearer" | "clientCredentials";
+                credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                 concurrencyLimit: number;
                 name: string;
                 state: "awaitingCrew" | "crewed" | "commissioning";
@@ -701,7 +748,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             output: ({
                 kind: "mcpServer";
                 url: string;
-                credentialKind: "none" | "bearer" | "clientCredentials";
+                credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                 concurrencyLimit: number;
                 name: string;
                 state: "awaitingCrew" | "crewed" | "commissioning";
@@ -731,6 +778,114 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             };
             meta: object;
         }>;
+        /**
+         * A person presses Sign in on an outside MCP server's page, for
+         * themselves (decision 0067): the address of the party's authorization
+         * server to send their browser to. Every account of the fleet with a
+         * person ship may.
+         */
+        startSignIn: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                name: string;
+            };
+            output: {
+                url: string;
+            };
+            meta: object;
+        }>;
+        /** A person's own sign-in to an outside MCP server where each person signs in: the outside account it names, when, last used, and whether it was lost (Q12). */
+        ownSignIn: import("@trpc/server").TRPCQueryProcedure<{
+            input: {
+                name: string;
+            };
+            output: {
+                state: "notSignedIn";
+            } | {
+                outsideAccount: {
+                    subject: string | null;
+                    name: string | null;
+                };
+                signedInAt: string;
+                lastUsedAt: string | null;
+                state: "signedIn";
+            } | {
+                lost: {
+                    at: string;
+                    why: string;
+                };
+                outsideAccount: {
+                    subject: string | null;
+                    name: string | null;
+                };
+                signedInAt: string;
+                lastUsedAt: string | null;
+                state: "lost";
+            };
+            meta: object;
+        }>;
+        /** A person removes their own sign-in to an outside MCP server: revoked where the server offers it, then dropped (Q6). */
+        removeOwnSignIn: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                name: string;
+            };
+            output: {
+                isRevoked: boolean;
+            };
+            meta: object;
+        }>;
+        /**
+         * Every person's sign-in to an outside MCP server where each person
+         * signs in, 20 a page by person ship, for an actor holding
+         * gateway:approve within manage reach of its proxy ship (Q12).
+         */
+        signIns: import("@trpc/server").TRPCQueryProcedure<{
+            input: {
+                name: string;
+                after: unknown;
+            };
+            output: {
+                grants: ({
+                    outsideAccount: {
+                        subject: string | null;
+                        name: string | null;
+                    };
+                    signedInAt: string;
+                    lastUsedAt: string | null;
+                    state: "signedIn";
+                    personShipId: string;
+                    personName: string | null;
+                    isYours: boolean;
+                } | {
+                    lost: {
+                        at: string;
+                        why: string;
+                    };
+                    outsideAccount: {
+                        subject: string | null;
+                        name: string | null;
+                    };
+                    signedInAt: string;
+                    lastUsedAt: string | null;
+                    state: "lost";
+                    personShipId: string;
+                    personName: string | null;
+                    isYours: boolean;
+                })[];
+                next: string | null;
+            };
+            meta: object;
+        }>;
+        /** An actor holding gateway:approve within manage reach of the proxy ship removes any person's sign-in: revoked where the server offers it, then dropped (Q6). */
+        removeSignIn: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                name: string;
+                personShipId: unknown;
+            };
+            output: {
+                isRevoked: boolean;
+            };
+            meta: object;
+        }>;
         /** The gateway states the party's proxy ship anew, from what its server lists now, with argo's marks. */
         state: import("@trpc/server").TRPCMutationProcedure<{
             input: {
@@ -1118,7 +1273,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
                 party: {
                     kind: "mcpServer";
                     url: string;
-                    credentialKind: "none" | "bearer" | "clientCredentials";
+                    credentialKind: "none" | "bearer" | "clientCredentials" | "personSignIn";
                     concurrencyLimit: number;
                     name: string;
                     state: "awaitingCrew" | "crewed" | "commissioning";
@@ -1148,6 +1303,127 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             meta: object;
         }>;
     }>>;
+    slack: import("@trpc/server").TRPCBuiltRouter<{
+        ctx: Context;
+        meta: object;
+        errorShape: import("@trpc/server").TRPCDefaultErrorShape;
+        transformer: false;
+    }, import("@trpc/server").TRPCDecorateCreateRouterOptions<{
+        /** The fleet's Slack as the Slack page shows it (gateway scopes 9.6), to any actor; canChange says whether it holds gateway:slack. */
+        view: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                state: "notConnected";
+                canChange: boolean;
+            } | {
+                state: "connected";
+                workspace: {
+                    teamId: string;
+                    name: string | null;
+                };
+                connectedBy: string;
+                connectedAt: string;
+                tokenState: "refused" | "fresh";
+                gatewayBot: "made" | "notMade" | "installed";
+                bots: {
+                    appId: string;
+                    shipId: string;
+                    shipName: string;
+                    botName: string;
+                    state: "made" | "waitingForInstall" | "inSlack" | "removedInSlack";
+                }[];
+                canChange: boolean;
+            };
+            meta: object;
+        }>;
+        /** Connects the fleet to a workspace by an app configuration refresh token, and makes the gateway's bot, named after the fleet (9.1). */
+        connect: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                refreshToken: string;
+            };
+            output: {
+                isGatewayBotMade: boolean;
+            };
+            meta: object;
+        }>;
+        /** Slack's install screen for the gateway's bot, made first if Slack did not make it at connect; with an app id, for a ship's bot. */
+        install: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                appId?: string | undefined;
+            };
+            output: {
+                url: string;
+            };
+            meta: object;
+        }>;
+        /** The agent ships and outside A2A agents' proxy ships Expose a ship… offers (9.2). */
+        exposable: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                shipId: string;
+                name: string;
+            }[];
+            meta: object;
+        }>;
+        /** Exposes a ship as a Slack bot, within manage reach of it: its app made from a manifest, to install next (9.2). */
+        expose: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                shipId: unknown;
+            };
+            output: {
+                appId: string;
+            };
+            meta: object;
+        }>;
+        /** Deletes a ship's bot in Slack, after the page's confirm (9.2). */
+        remove: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                appId: string;
+            };
+            output: Record<string, never>;
+            meta: object;
+        }>;
+        /** The person's Slack link as the Overview shows it (9.6): the workspace and the Slack name linked; none while the fleet's own bot is not in Slack. */
+        link: import("@trpc/server").TRPCQueryProcedure<{
+            input: void;
+            output: {
+                workspaceName: string;
+                link: {
+                    slackName: string;
+                    isShowingAll: boolean;
+                } | null;
+            } | null;
+            meta: object;
+        }>;
+        /** Sign in with Slack to link the person's Slack account, from the Overview or Slack's answer to an unlinked person (9.3). */
+        startLink: import("@trpc/server").TRPCMutationProcedure<{
+            input: void;
+            output: {
+                url: string;
+            };
+            meta: object;
+        }>;
+        /** Turns Show everything that waits in Slack on or off for the person's own link (9.6, B5). */
+        showAll: import("@trpc/server").TRPCMutationProcedure<{
+            input: {
+                isOn: boolean;
+            };
+            output: Record<string, never>;
+            meta: object;
+        }>;
+        /** Unlinks the person's own Slack account (9.3). */
+        unlink: import("@trpc/server").TRPCMutationProcedure<{
+            input: void;
+            output: Record<string, never>;
+            meta: object;
+        }>;
+        /** Removes every bot the gateway made in Slack, then forgets the workspace (after the page's confirm). */
+        disconnect: import("@trpc/server").TRPCMutationProcedure<{
+            input: void;
+            output: Record<string, never>;
+            meta: object;
+        }>;
+    }>>;
     outsideParties: import("@trpc/server").TRPCBuiltRouter<{
         ctx: Context;
         meta: object;
@@ -1265,7 +1541,7 @@ export declare const gatewayRouter: import("@trpc/server").TRPCBuiltRouter<{
             output: Record<string, never>;
             meta: object;
         }>;
-        /** pagasae disabled the account (decision 0055): every sign-in of it in the fleet ends, and its clients' tokens are revoked. Told again, it ends nothing more. */
+        /** pagasae disabled the account (decision 0055): every sign-in of it in the fleet ends, its clients' tokens are revoked, its Slack link stops, and its grants of outside servers end (decision 0067, Q14). Told again, it ends nothing more. */
         accountDisabled: import("@trpc/server").TRPCMutationProcedure<{
             input: {
                 fleetId: unknown;