@aeolus-fleet/gateway 0.33.0 → 0.35.0

package/dist/core/slack/take-slack-event.js

@@ -1,5 +1,6 @@
 import { err, ok } from '../shared/result.js';
 import { isRemovedEvent, personMessageOf } from './slack-event.js';
+import { isAwaitingSlackIn } from './slack-post.js';
 import { markdownOf } from './slack-markdown.js';
 import { isSignedBy } from './slack-request.js';
 /** What the gateway answers a person whose disabled account's link stopped (gateway scopes 9.3). */
@@ -17,7 +18,9 @@ export const STOPPED_LINK_TEXT = 'Your account cannot message the fleet now';
  * as, and sent now (9.4 step 3); a retry of a kept one changes nothing.
  * One in the thread under a delivery the gateway posted answers it: it goes
  * to that delivery's sender in reply to its message (9.5 step 4). Through
- * the gateway's own bot, only such an answer is sent.
+ * the gateway's own bot, only such an answer is sent. One in a thread that
+ * matches no post, while a delivery in that conversation is not yet in
+ * Slack, may be under it: it is kept, and matched as it is sent.
  */
 export function createTakeSlackEvent(deps) {
     return async ({ appId, event, isRetry, body, timestamp, signature }) => {
@@ -37,9 +40,12 @@ export function createTakeSlackEvent(deps) {
         const link = await deps.links.find(app.fleetId, { teamId: message.teamId, userId: message.userId });
         if (link?.stoppedAt === null) {
             const { eventId, channel, ts, threadTs, text, files } = message;
+            // Awaiting is read before the thread: a post Slack answers between the two reads is then found in the thread, never missed by both.
+            const isAwaiting = threadTs !== null && (await deps.posts.unfinished(app.fleetId, link.personShipId)).some((post) => isAwaitingSlackIn(post, { appId, channel }));
             const answered = threadTs === null ? undefined : await deps.posts.lastInThread(app.fleetId, { personShipId: link.personShipId, appId, channel, threadTs });
             const shipId = answered?.senderShipId ?? app.shipId;
-            if (shipId === null) {
+            const isToMatch = isAwaiting && answered === undefined;
+            if (shipId === null && !isToMatch) {
                 return ok({ kind: 'ignored' });
             }
             const kept = await deps.events.keep({

package/dist/core/slack/take-slack-event.js.map

@@ -1 +1 @@
-{"version":3,"file":"take-slack-event.js","sourceRoot":"","sources":["../../../src/core/slack/take-slack-event.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAyB,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,oGAAoG;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,2CAA2C,CAAC;AAY7E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAYpC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YAClH,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAChE,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3J,MAAM,MAAM,GAAG,QAAQ,EAAE,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC;YACpD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO;gBACP,KAAK;gBACL,MAAM;gBACN,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI;gBACtC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI;gBACxC,OAAO;gBACP,EAAE;gBACF,QAAQ;gBACR,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAChE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,sCAAsC,GAAG,CAAC,IAAI,yDAAyD,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE;gBACzO,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;YAChC,sGAAsG;YACtG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"take-slack-event.js","sourceRoot":"","sources":["../../../src/core/slack/take-slack-event.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,eAAe,EAAyB,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,oGAAoG;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,2CAA2C,CAAC;AAY7E;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAYpC;IACC,OAAO,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YAClH,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACpG,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAChE,oIAAoI;YACpI,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAClK,MAAM,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3J,MAAM,MAAM,GAAG,QAAQ,EAAE,YAAY,IAAI,GAAG,CAAC,MAAM,CAAC;YACpD,MAAM,SAAS,GAAG,UAAU,IAAI,QAAQ,KAAK,SAAS,CAAC;YACvD,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBAClC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;gBAClC,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,OAAO;gBACP,KAAK;gBACL,MAAM;gBACN,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI;gBACtC,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,IAAI;gBACxC,OAAO;gBACP,EAAE;gBACF,QAAQ;gBACR,QAAQ,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC;gBAChE,UAAU,EAAE,GAAG;gBACf,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,sCAAsC,GAAG,CAAC,IAAI,yDAAyD,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE;gBACzO,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;YAChC,sGAAsG;YACtG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;AACJ,CAAC"}

package/dist/core/vault/credential.d.ts

@@ -20,3 +20,37 @@ export type McpServerCredential =
     /** The OAuth scope to ask the authorization server for, if the server needs one. */
     readonly scope?: string;
 };
+/**
+ * The OAuth client the gateway registered for one party with the outside
+ * authorization server, by dynamic registration (decision 0067): every
+ * person's grant for the party is under it, and it goes to no issuer but its
+ * own.
+ */
+export interface SignInClient {
+    readonly issuer: string;
+    readonly authorizationEndpoint: string;
+    readonly tokenEndpoint: string;
+    /** Where a grant is revoked, when the authorization server offers it. */
+    readonly revocationEndpoint: string | null;
+    /** Whether the authorization server states its issuer in each authorization response (RFC 9207): a response without it is then refused. */
+    readonly isIssuerInResponse: boolean;
+    readonly clientId: string;
+    /** None when the authorization server registered a public client. */
+    readonly clientSecret: string | null;
+    /** Where the client is read or deleted, and with what (RFC 7592), when the authorization server answered them; only registration answers them. */
+    readonly registrationClientUri: string | null;
+    readonly registrationAccessToken: string | null;
+    /** The server's resource indicator (RFC 8707), as its protected resource metadata names it. */
+    readonly resource: string;
+    /** The outside scopes each person's sign-in asks for. */
+    readonly scope: string;
+}
+/**
+ * An outside MCP server's credential: one of the gateway's own, or, for a
+ * server that takes only an OAuth sign-in, the party's client, under which
+ * each person signs in for themselves (decision 0067).
+ */
+export type McpServerPartyCredential = McpServerCredential | {
+    readonly kind: 'personSignIn';
+    readonly client: SignInClient;
+};

package/dist/grant-worker.d.ts

@@ -0,0 +1,20 @@
+/**
+ * The gateway's rounds over grants (decision 0067): every interval, until
+ * it stops, a round refreshes the grants that are idle or near their end
+ * (Q7) and ends the grants of retired person ships (Q6). Every gateway
+ * instance runs one; the grant's row lock keeps their refreshes of one
+ * grant one at a time.
+ */
+import type { FastifyBaseLogger } from 'fastify';
+import type { Sleep } from './core/mcp-out/run-party.js';
+export interface GrantWorker {
+    start(): void;
+    /** Stops, once the round under way ended. */
+    stop(): Promise<void>;
+}
+export declare function createGrantWorker(deps: {
+    round: () => Promise<void>;
+    sleep: Sleep;
+    intervalMs: number;
+    log: FastifyBaseLogger;
+}): GrantWorker;

package/dist/grant-worker.js

@@ -0,0 +1,24 @@
+export function createGrantWorker(deps) {
+    const stopping = new AbortController();
+    let running = Promise.resolve();
+    return {
+        start: () => {
+            running = (async () => {
+                while (!stopping.signal.aborted) {
+                    try {
+                        await deps.round();
+                    }
+                    catch (error) {
+                        deps.log.error({ err: error }, 'grant round failed');
+                    }
+                    await deps.sleep(deps.intervalMs, stopping.signal);
+                }
+            })();
+        },
+        stop: async () => {
+            stopping.abort();
+            await running;
+        },
+    };
+}
+//# sourceMappingURL=grant-worker.js.map

package/dist/grant-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-worker.js","sourceRoot":"","sources":["../src/grant-worker.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,iBAAiB,CAAC,IAA8F;IAC9H,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IACvC,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,OAAO;QACL,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;gBACpB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAChC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;oBACrB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;oBACvD,CAAC;oBACD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,IAAI,EAAE,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,OAAO,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeolus-fleet/gateway",
-  "version": "0.33.0",
+  "version": "0.35.0",
   "description": "Aeolus gateway: outside MCP servers and clients join a fleet as ships, through one gateway beside core.",
   "keywords": [
     "ai-agents",

package/src/adapters/prisma/migrations/20261028230000_party_grants/migration.sql

@@ -0,0 +1,18 @@
+-- Decision 0067: a person's grant of an outside MCP server where each person signs in, one per person and party, and one per outside account and party where the server named it.
+CREATE TABLE "party_grants" (
+    "fleet_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "person_ship_id" TEXT NOT NULL,
+    "account_id" TEXT NOT NULL,
+    "subject" TEXT,
+    "outside_account_name" TEXT,
+    "access_token" TEXT NOT NULL,
+    "refresh_token" TEXT,
+    "access_token_ends_at" TIMESTAMPTZ(3),
+    "signed_in_at" TIMESTAMPTZ(3) NOT NULL,
+    "last_used_at" TIMESTAMPTZ(3),
+
+    CONSTRAINT "party_grants_pkey" PRIMARY KEY ("fleet_id","party","person_ship_id")
+);
+
+CREATE UNIQUE INDEX "party_grants_fleet_id_party_subject_key" ON "party_grants"("fleet_id", "party", "subject");

package/src/adapters/prisma/migrations/20261029080000_party_sign_in_notices/migration.sql

@@ -0,0 +1,10 @@
+-- Decision 0067, Q6: the notice that told a person a call needed their sign-in to a party, one per person and party while open.
+CREATE TABLE "party_sign_in_notices" (
+    "fleet_id" TEXT NOT NULL,
+    "party" TEXT NOT NULL,
+    "person_ship_id" TEXT NOT NULL,
+    "notice_id" TEXT NOT NULL,
+    "is_told" BOOLEAN NOT NULL DEFAULT false,
+
+    CONSTRAINT "party_sign_in_notices_pkey" PRIMARY KEY ("fleet_id","party","person_ship_id")
+);

package/src/adapters/prisma/migrations/20261029120000_party_grants_lost/migration.sql

@@ -0,0 +1,3 @@
+-- Decision 0067, Q5: a grant a refresh answered invalid_grant is lost, kept with when and why until the person signs in again.
+ALTER TABLE "party_grants" ADD COLUMN "lost_at" TIMESTAMPTZ(3),
+ADD COLUMN "lost_why" TEXT;

package/src/adapters/prisma/migrations/20261029130000_party_grants_refreshed/migration.sql

@@ -0,0 +1,6 @@
+-- Decision 0067, Q7: when a grant was last refreshed, and the indexes of the schedule that refreshes grants near their end and idle ones.
+ALTER TABLE "party_grants" ADD COLUMN "refreshed_at" TIMESTAMPTZ(3);
+
+CREATE INDEX "party_grants_access_token_ends_at_idx" ON "party_grants"("access_token_ends_at");
+
+CREATE INDEX "party_grants_refreshed_at_signed_in_at_idx" ON "party_grants"("refreshed_at", "signed_in_at");

package/src/adapters/prisma/migrations/20261030090000_party_grants_of_account/migration.sql

@@ -0,0 +1,2 @@
+-- Decision 0067, Q14: a disabled account's grants, read by account.
+CREATE INDEX "party_grants_fleet_id_account_id_idx" ON "party_grants"("fleet_id", "account_id");

package/src/adapters/prisma/migrations/20261030100000_slack_events_unmatched_answers/migration.sql

@@ -0,0 +1,2 @@
+-- Gateway scopes 9.5 step 4: an answer in a thread through the gateway's own bot, kept before the delivery it answers is in Slack, goes to no ship until it is matched.
+ALTER TABLE "slack_events" ALTER COLUMN "ship_id" DROP NOT NULL;

package/src/adapters/prisma/schema.prisma

@@ -535,7 +535,8 @@ model SlackEvent {
   fleetId      String    @map("fleet_id")
   eventId      String    @map("event_id")
   appId        String    @map("app_id")
-  shipId       String    @map("ship_id")
+  /// None through the gateway's own bot for an answer in a thread not matched yet.
+  shipId       String?   @map("ship_id")
   personShipId String    @map("person_ship_id")
   channel      String
   ts           String
@@ -572,3 +573,47 @@ model SlackPost {
   @@index([fleetId, appId, channel, threadTs])
   @@map("slack_posts")
 }
+
+/// A person's grant of an outside MCP server where each person signs in (decision 0067): their sign-in under the party's client, naming their outside account, with its tokens. One per person and party; one per outside account and party where the server named it (Q13).
+model PartyGrant {
+  fleetId            String    @map("fleet_id")
+  party              String
+  personShipId       String    @map("person_ship_id")
+  accountId          String    @map("account_id")
+  /// The outside account's OpenID Connect subject; none where the server gave no ID token.
+  subject            String?
+  /// The outside account's email or name, as its ID token stated it.
+  outsideAccountName String?   @map("outside_account_name")
+  accessToken        String    @map("access_token")
+  refreshToken       String?   @map("refresh_token")
+  accessTokenEndsAt  DateTime? @map("access_token_ends_at") @db.Timestamptz(3)
+  signedInAt         DateTime  @map("signed_in_at") @db.Timestamptz(3)
+  /// When it was last refreshed; none until its first refresh.
+  refreshedAt        DateTime? @map("refreshed_at") @db.Timestamptz(3)
+  lastUsedAt         DateTime? @map("last_used_at") @db.Timestamptz(3)
+  /// When a refresh answered invalid_grant lost the grant (Q5); none while it holds.
+  lostAt             DateTime? @map("lost_at") @db.Timestamptz(3)
+  /// Why it was lost, as the authorization server said it.
+  lostWhy            String?   @map("lost_why")
+
+  @@id([fleetId, party, personShipId])
+  @@unique([fleetId, party, subject])
+  // The schedule's round across fleets (Q7): grants near their end, and grants idle since their last refresh or sign-in.
+  @@index([accessTokenEndsAt])
+  @@index([refreshedAt, signedInAt])
+  // A disabled account's grants (Q14).
+  @@index([fleetId, accountId])
+  @@map("party_grants")
+}
+
+/// The notice that told a person a call needed their sign-in to a party where each person signs in (decision 0067, Q6): one per person and party while open, its id keying the message; a sign-in closes it.
+model PartySignInNotice {
+  fleetId      String    @map("fleet_id")
+  party        String
+  personShipId String    @map("person_ship_id")
+  noticeId     String    @map("notice_id")
+  isTold       Boolean   @default(false) @map("is_told")
+
+  @@id([fleetId, party, personShipId])
+  @@map("party_sign_in_notices")
+}

package/web/.next/BUILD_ID

@@ -1 +1 @@
-87vMFs_KGRcFD40WWRkFR
+R_nPUtDcDp1BPV3QHhaMZ

package/web/.next/app-path-routes-manifest.json

@@ -21,7 +21,9 @@
   "/(console)/slack/remove/page": "/slack/remove",
   "/_global-error/page": "/_global-error",
   "/_not-found/page": "/_not-found",
+  "/apple-icon.png/route": "/apple-icon.png",
   "/authorize/failed/page": "/authorize/failed",
   "/authorize/pick/page": "/authorize/pick",
-  "/authorize/waiting/approval/page": "/authorize/waiting/approval"
+  "/authorize/waiting/approval/page": "/authorize/waiting/approval",
+  "/icon.svg/route": "/icon.svg"
 }

package/web/.next/build-manifest.json

@@ -7,9 +7,9 @@
     "static/chunks/0cz1d0mv5g_q7.js"
   ],
   "lowPriorityFiles": [
-    "static/87vMFs_KGRcFD40WWRkFR/_buildManifest.js",
-    "static/87vMFs_KGRcFD40WWRkFR/_ssgManifest.js",
-    "static/87vMFs_KGRcFD40WWRkFR/_clientMiddlewareManifest.js"
+    "static/R_nPUtDcDp1BPV3QHhaMZ/_buildManifest.js",
+    "static/R_nPUtDcDp1BPV3QHhaMZ/_ssgManifest.js",
+    "static/R_nPUtDcDp1BPV3QHhaMZ/_clientMiddlewareManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/2hz8yws_wswjz.js",

package/web/.next/diagnostics/route-bundle-stats.json

@@ -1,14 +1,14 @@
 [
   {
     "route": "/outside-parties/add",
-    "firstLoadUncompressedJsBytes": 818006,
+    "firstLoadUncompressedJsBytes": 827508,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/1-suv9wttlxqo.js",
-      ".next/static/chunks/1a2-hkn-7471k.js",
+      ".next/static/chunks/3l5jtag3-fukc.js",
+      ".next/static/chunks/34kulpk3a-cka.js",
       ".next/static/chunks/0zbcy0_3jemrv.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
@@ -20,14 +20,14 @@
   },
   {
     "route": "/outside-parties/[name]/change",
-    "firstLoadUncompressedJsBytes": 809966,
+    "firstLoadUncompressedJsBytes": 817622,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/3_pwm8b3mf4mf.js",
-      ".next/static/chunks/1a2-hkn-7471k.js",
+      ".next/static/chunks/3rxg2mdhxd6yt.js",
+      ".next/static/chunks/34kulpk3a-cka.js",
       ".next/static/chunks/0zbcy0_3jemrv.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
@@ -39,14 +39,14 @@
   },
   {
     "route": "/outside-parties/[name]/retire",
-    "firstLoadUncompressedJsBytes": 809966,
+    "firstLoadUncompressedJsBytes": 817622,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/3_pwm8b3mf4mf.js",
-      ".next/static/chunks/1a2-hkn-7471k.js",
+      ".next/static/chunks/3rxg2mdhxd6yt.js",
+      ".next/static/chunks/34kulpk3a-cka.js",
       ".next/static/chunks/0zbcy0_3jemrv.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
@@ -58,14 +58,14 @@
   },
   {
     "route": "/outside-parties/[name]",
-    "firstLoadUncompressedJsBytes": 808682,
+    "firstLoadUncompressedJsBytes": 817127,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/2riya89_i0je8.js",
-      ".next/static/chunks/1a2-hkn-7471k.js",
+      ".next/static/chunks/0vlawcs6_kjs1.js",
+      ".next/static/chunks/34kulpk3a-cka.js",
       ".next/static/chunks/0zbcy0_3jemrv.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
@@ -77,13 +77,13 @@
   },
   {
     "route": "/slack/expose",
-    "firstLoadUncompressedJsBytes": 737860,
+    "firstLoadUncompressedJsBytes": 737866,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/2l92bozm8dcmo.js",
+      ".next/static/chunks/2gghdkr64z9f9.js",
       ".next/static/chunks/0zbcy0_3jemrv.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
@@ -98,11 +98,11 @@
     "firstLoadUncompressedJsBytes": 715965,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/0nhopjmnw_dqt.js",
-      ".next/static/chunks/3dhy3jady0w6a.js",
+      ".next/static/chunks/0p_kl57bddsiy.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -116,11 +116,11 @@
     "firstLoadUncompressedJsBytes": 715200,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/0nhopjmnw_dqt.js",
-      ".next/static/chunks/3d_sjtxh_vkr6.js",
+      ".next/static/chunks/07j7jnfe13wx6.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -134,7 +134,7 @@
     "firstLoadUncompressedJsBytes": 712888,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/0nhopjmnw_dqt.js",
@@ -151,11 +151,11 @@
     "firstLoadUncompressedJsBytes": 706403,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/3v6tr952p9dba.js",
-      ".next/static/chunks/3rbzp0tdc1te-.js",
+      ".next/static/chunks/3fd167c0-ot3u.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -166,14 +166,14 @@
   },
   {
     "route": "/overview/requests/[requestId]",
-    "firstLoadUncompressedJsBytes": 699140,
+    "firstLoadUncompressedJsBytes": 699288,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/3v6tr952p9dba.js",
-      ".next/static/chunks/310mio1zd_mw7.js",
+      ".next/static/chunks/1se0j0htjyep6.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -184,13 +184,13 @@
   },
   {
     "route": "/outside-parties/add-a2a-agent",
-    "firstLoadUncompressedJsBytes": 696134,
+    "firstLoadUncompressedJsBytes": 696504,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/455eobei0t6t9.js",
+      ".next/static/chunks/2_e-puldye2do.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -201,13 +201,13 @@
   },
   {
     "route": "/outside-parties/add-a2a-client",
-    "firstLoadUncompressedJsBytes": 694236,
+    "firstLoadUncompressedJsBytes": 694335,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/19kfx4qlur25a.js",
+      ".next/static/chunks/0tmvd_zw45u96.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -218,13 +218,13 @@
   },
   {
     "route": "/outside-parties",
-    "firstLoadUncompressedJsBytes": 694184,
+    "firstLoadUncompressedJsBytes": 694190,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/2-kh9nbonee6w.js",
+      ".next/static/chunks/3ceatffqhpgpu.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -238,10 +238,10 @@
     "firstLoadUncompressedJsBytes": 693115,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/1msggkwsn7vyq.js",
+      ".next/static/chunks/287ofedoj_6xl.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -252,13 +252,13 @@
   },
   {
     "route": "/parties",
-    "firstLoadUncompressedJsBytes": 691781,
+    "firstLoadUncompressedJsBytes": 691787,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/1jvae6c-4jwji.js",
+      ".next/static/chunks/2x86i673xcv4t.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -269,13 +269,13 @@
   },
   {
     "route": "/slack",
-    "firstLoadUncompressedJsBytes": 691781,
+    "firstLoadUncompressedJsBytes": 691787,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/1jvae6c-4jwji.js",
+      ".next/static/chunks/2x86i673xcv4t.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -286,13 +286,13 @@
   },
   {
     "route": "/slack/disconnect",
-    "firstLoadUncompressedJsBytes": 691781,
+    "firstLoadUncompressedJsBytes": 691787,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/1jvae6c-4jwji.js",
+      ".next/static/chunks/2x86i673xcv4t.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -303,13 +303,13 @@
   },
   {
     "route": "/slack/remove",
-    "firstLoadUncompressedJsBytes": 691781,
+    "firstLoadUncompressedJsBytes": 691787,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
-      ".next/static/chunks/1jvae6c-4jwji.js",
+      ".next/static/chunks/2x86i673xcv4t.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
       ".next/static/chunks/3knqujtrdi225.js",
       ".next/static/chunks/0lzisjsmhlhjf.js",
@@ -323,7 +323,7 @@
     "firstLoadUncompressedJsBytes": 689784,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
@@ -339,7 +339,7 @@
     "firstLoadUncompressedJsBytes": 689784,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/2hz8yws_wswjz.js",
@@ -355,7 +355,7 @@
     "firstLoadUncompressedJsBytes": 689784,
     "firstLoadChunkPaths": [
       ".next/static/chunks/0umf92h1sb77c.js",
-      ".next/static/chunks/3efghx8whwnok.js",
+      ".next/static/chunks/03239gtej3tj0.js",
       ".next/static/chunks/3hvo3apdq-ckk.js",
       ".next/static/chunks/2cd4e71s711ad.js",
       ".next/static/chunks/2hz8yws_wswjz.js",

package/web/.next/fallback-build-manifest.json

@@ -5,9 +5,9 @@
   "devFiles": [],
   "polyfillFiles": [],
   "lowPriorityFiles": [
-    "static/87vMFs_KGRcFD40WWRkFR/_buildManifest.js",
-    "static/87vMFs_KGRcFD40WWRkFR/_ssgManifest.js",
-    "static/87vMFs_KGRcFD40WWRkFR/_clientMiddlewareManifest.js"
+    "static/R_nPUtDcDp1BPV3QHhaMZ/_buildManifest.js",
+    "static/R_nPUtDcDp1BPV3QHhaMZ/_ssgManifest.js",
+    "static/R_nPUtDcDp1BPV3QHhaMZ/_clientMiddlewareManifest.js"
   ],
   "rootMainFiles": [],
   "rootMainFilesTree": {},