@aeolus-fleet/common 0.0.0 → 0.2.0

package/README.md

@@ -1,5 +1,5 @@
 # @aeolus-fleet/common
 
-Aeolus: shared schemas, prefixed ids and types.
+Shared schemas, prefixed ids and types for [Aeolus](https://github.com/ThomasHendrickx/aeolus-fleet), an agent fleet manager.
 
-This 0.0.0 release only reserves the name. Aeolus is under construction: https://github.com/ThomasHendrickx/aeolus-fleet
+Pre-v1: the API changes without notice until the v1 acceptance test passes.

package/dist/fleet/index.d.ts

@@ -0,0 +1,81 @@
+import { z } from 'zod';
+/**
+ * The fleet's shared vocabulary (docs/blueprint.md, "Ubiquitous language"):
+ * scopes, ship kinds, ship statuses, lease locations, selector kinds, delivery
+ * states and event types. Server and web use the same words.
+ */
+/** A permission of a ship, stored on the server with the ship and checked before every call. */
+export declare const SCOPES: readonly ["messages:send", "messages:receive", "fleet:read", "fleet:manage"];
+export declare const scopeSchema: z.ZodEnum<{
+    "messages:send": "messages:send";
+    "messages:receive": "messages:receive";
+    "fleet:read": "fleet:read";
+    "fleet:manage": "fleet:manage";
+}>;
+export type Scope = z.infer<typeof scopeSchema>;
+/** `argo` is the one ship of kind `operator` in a fleet; every other ship is an `agent`. */
+export declare const SHIP_KINDS: readonly ["operator", "agent"];
+export declare const shipKindSchema: z.ZodEnum<{
+    operator: "operator";
+    agent: "agent";
+}>;
+export type ShipKind = z.infer<typeof shipKindSchema>;
+/** Where the session crewing a ship runs. `OTHER` carries a short description. */
+export declare const LOCATION_KINDS: readonly ["DEVICE", "CLOUD", "SERVER", "OTHER"];
+export declare const locationKindSchema: z.ZodEnum<{
+    DEVICE: "DEVICE";
+    CLOUD: "CLOUD";
+    SERVER: "SERVER";
+    OTHER: "OTHER";
+}>;
+export type LocationKind = z.infer<typeof locationKindSchema>;
+/**
+ * Whether a ship awaits crew, is crewed or is retired. Derived from its lease
+ * and its retired date, never set by hand.
+ */
+export declare const SHIP_STATUSES: readonly ["awaitingCrew", "crewed", "retired"];
+export declare const shipStatusSchema: z.ZodEnum<{
+    awaitingCrew: "awaitingCrew";
+    crewed: "crewed";
+    retired: "retired";
+}>;
+export type ShipStatus = z.infer<typeof shipStatusSchema>;
+/** Who a message is for: one ship (by id or by name) or any ship of a type. Group and fleet come later. */
+export declare const SELECTOR_KINDS: readonly ["ship", "type"];
+export declare const selectorKindSchema: z.ZodEnum<{
+    ship: "ship";
+    type: "type";
+}>;
+export type SelectorKind = z.infer<typeof selectorKindSchema>;
+/**
+ * Where one delivery stands (docs/blueprint.md, "Key flows"): pending until a
+ * ship receives it, then delivered (claimed and in flight) until it is
+ * acknowledged or returns to pending.
+ */
+export declare const DELIVERY_STATES: readonly ["pending", "delivered", "acknowledged", "undeliverable", "dismissed", "abandoned"];
+export declare const deliveryStateSchema: z.ZodEnum<{
+    pending: "pending";
+    delivered: "delivered";
+    acknowledged: "acknowledged";
+    undeliverable: "undeliverable";
+    dismissed: "dismissed";
+    abandoned: "abandoned";
+}>;
+export type DeliveryState = z.infer<typeof deliveryStateSchema>;
+/** The event types written so far. Each later slice adds the ones it writes. */
+export declare const EVENT_TYPES: readonly ["FleetInitialised", "ShipCommissioned", "ShipClaimed", "LeaseRevoked", "CredentialRevoked", "StartingPromptIssued", "OperatorPasswordReset", "MessageAccepted", "DeliveryClaimed", "DeliveryAcknowledged", "DeliveryUndeliverable", "DeliveryReturned"];
+export declare const eventTypeSchema: z.ZodEnum<{
+    FleetInitialised: "FleetInitialised";
+    ShipCommissioned: "ShipCommissioned";
+    ShipClaimed: "ShipClaimed";
+    LeaseRevoked: "LeaseRevoked";
+    CredentialRevoked: "CredentialRevoked";
+    StartingPromptIssued: "StartingPromptIssued";
+    OperatorPasswordReset: "OperatorPasswordReset";
+    MessageAccepted: "MessageAccepted";
+    DeliveryClaimed: "DeliveryClaimed";
+    DeliveryAcknowledged: "DeliveryAcknowledged";
+    DeliveryUndeliverable: "DeliveryUndeliverable";
+    DeliveryReturned: "DeliveryReturned";
+}>;
+export type EventType = z.infer<typeof eventTypeSchema>;

package/dist/fleet/index.js

@@ -0,0 +1,48 @@
+import { z } from 'zod';
+/**
+ * The fleet's shared vocabulary (docs/blueprint.md, "Ubiquitous language"):
+ * scopes, ship kinds, ship statuses, lease locations, selector kinds, delivery
+ * states and event types. Server and web use the same words.
+ */
+/** A permission of a ship, stored on the server with the ship and checked before every call. */
+export const SCOPES = ['messages:send', 'messages:receive', 'fleet:read', 'fleet:manage'];
+export const scopeSchema = z.enum(SCOPES);
+/** `argo` is the one ship of kind `operator` in a fleet; every other ship is an `agent`. */
+export const SHIP_KINDS = ['operator', 'agent'];
+export const shipKindSchema = z.enum(SHIP_KINDS);
+/** Where the session crewing a ship runs. `OTHER` carries a short description. */
+export const LOCATION_KINDS = ['DEVICE', 'CLOUD', 'SERVER', 'OTHER'];
+export const locationKindSchema = z.enum(LOCATION_KINDS);
+/**
+ * Whether a ship awaits crew, is crewed or is retired. Derived from its lease
+ * and its retired date, never set by hand.
+ */
+export const SHIP_STATUSES = ['awaitingCrew', 'crewed', 'retired'];
+export const shipStatusSchema = z.enum(SHIP_STATUSES);
+/** Who a message is for: one ship (by id or by name) or any ship of a type. Group and fleet come later. */
+export const SELECTOR_KINDS = ['ship', 'type'];
+export const selectorKindSchema = z.enum(SELECTOR_KINDS);
+/**
+ * Where one delivery stands (docs/blueprint.md, "Key flows"): pending until a
+ * ship receives it, then delivered (claimed and in flight) until it is
+ * acknowledged or returns to pending.
+ */
+export const DELIVERY_STATES = ['pending', 'delivered', 'acknowledged', 'undeliverable', 'dismissed', 'abandoned'];
+export const deliveryStateSchema = z.enum(DELIVERY_STATES);
+/** The event types written so far. Each later slice adds the ones it writes. */
+export const EVENT_TYPES = [
+    'FleetInitialised',
+    'ShipCommissioned',
+    'ShipClaimed',
+    'LeaseRevoked',
+    'CredentialRevoked',
+    'StartingPromptIssued',
+    'OperatorPasswordReset',
+    'MessageAccepted',
+    'DeliveryClaimed',
+    'DeliveryAcknowledged',
+    'DeliveryUndeliverable',
+    'DeliveryReturned',
+];
+export const eventTypeSchema = z.enum(EVENT_TYPES);
+//# sourceMappingURL=index.js.map

package/dist/fleet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/fleet/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AAEH,gGAAgG;AAChG,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,CAAU,CAAC;AACnG,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAG1C,4FAA4F;AAC5F,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,OAAO,CAAU,CAAC;AACzD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAGjD,kFAAkF;AAClF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,cAAc,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGtD,2GAA2G;AAC3G,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,CAAU,CAAC;AACxD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAGzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAC5H,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAG3D,gFAAgF;AAChF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,kBAAkB;IAClB,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,sBAAsB;IACtB,uBAAuB;IACvB,iBAAiB;IACjB,iBAAiB;IACjB,sBAAsB;IACtB,uBAAuB;IACvB,kBAAkB;CACV,CAAC;AACX,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC"}

package/dist/ids/index.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Prefixed, time-ordered ids (ADR 0005).
+ *
+ * An id is `<prefix>_<body>`. The body is a lowercase ULID: 26 Crockford base32
+ * characters holding a 48-bit Unix millisecond timestamp followed by 80 random
+ * bits. Because the alphabet is in ASCII order and the body has a fixed length,
+ * ids of one kind sort as plain text in creation order. Within one millisecond a
+ * generator increments the random part instead of drawing a new one, so the ids it
+ * hands out stay strictly ordered.
+ */
+import { z } from 'zod';
+export declare const ID_PREFIXES: {
+    readonly fleet: "flt";
+    readonly ship: "shp";
+    readonly message: "msg";
+    readonly delivery: "dlv";
+    readonly event: "evt";
+    readonly lease: "lse";
+    readonly credential: "crd";
+    readonly operator: "opr";
+    readonly consoleSession: "ses";
+};
+export type IdKind = keyof typeof ID_PREFIXES;
+/** Every kind of id, in the order of ID_PREFIXES. */
+export declare const ID_KINDS: readonly IdKind[];
+export type IdPrefix = (typeof ID_PREFIXES)[IdKind];
+export type Id<K extends IdKind> = `${(typeof ID_PREFIXES)[K]}_${string}`;
+export type FleetId = Id<'fleet'>;
+export type ShipId = Id<'ship'>;
+export type MessageId = Id<'message'>;
+export type DeliveryId = Id<'delivery'>;
+export type EventId = Id<'event'>;
+export type LeaseId = Id<'lease'>;
+export type CredentialId = Id<'credential'>;
+export type OperatorId = Id<'operator'>;
+export type ConsoleSessionId = Id<'consoleSession'>;
+export interface IdGeneratorOptions {
+    /** Milliseconds since the Unix epoch. Defaults to `Date.now`. */
+    now?: () => number;
+    /** Fills the given array with random bytes. Defaults to Web Crypto. */
+    fillRandom?: (bytes: Uint8Array<ArrayBuffer>) => void;
+}
+export type IdGenerator = <K extends IdKind>(kind: K) => Id<K>;
+/**
+ * Creates an id generator. Each generator keeps its own monotonic state, so ids
+ * from one generator never go backwards, even within a millisecond or when the
+ * clock steps back.
+ */
+export declare function createIdGenerator(options?: IdGeneratorOptions): IdGenerator;
+export interface ParsedId {
+    kind: IdKind;
+    /** The millisecond the id was created, taken from its body. */
+    timestamp: Date;
+}
+/** Parses an id of any known kind. Returns undefined when the value is not a well-formed id. */
+export declare function parseId(value: string): ParsedId | undefined;
+/** True when the value is a well-formed id of the given kind. */
+export declare function isId<K extends IdKind>(value: unknown, kind: K): value is Id<K>;
+/**
+ * Parses an id of one kind arriving from outside (a request, the database) into
+ * its typed id. A template literal rather than a custom check, so the schema
+ * also describes itself in JSON Schema: a string of the prefix and a body,
+ * named by its kind, for the REST and MCP doors that explain themselves.
+ */
+export declare function idSchema<K extends IdKind>(kind: K): z.ZodType<Id<K>>;

package/dist/ids/index.js

@@ -0,0 +1,151 @@
+/**
+ * Prefixed, time-ordered ids (ADR 0005).
+ *
+ * An id is `<prefix>_<body>`. The body is a lowercase ULID: 26 Crockford base32
+ * characters holding a 48-bit Unix millisecond timestamp followed by 80 random
+ * bits. Because the alphabet is in ASCII order and the body has a fixed length,
+ * ids of one kind sort as plain text in creation order. Within one millisecond a
+ * generator increments the random part instead of drawing a new one, so the ids it
+ * hands out stay strictly ordered.
+ */
+import { z } from 'zod';
+export const ID_PREFIXES = {
+    fleet: 'flt',
+    ship: 'shp',
+    message: 'msg',
+    delivery: 'dlv',
+    event: 'evt',
+    lease: 'lse',
+    credential: 'crd',
+    operator: 'opr',
+    consoleSession: 'ses',
+};
+function isIdKind(value) {
+    return value in ID_PREFIXES;
+}
+/** Every kind of id, in the order of ID_PREFIXES. */
+export const ID_KINDS = Object.keys(ID_PREFIXES).filter(isIdKind);
+/** Crockford base32, lowercase. Leaves out i, l, o and u. */
+const ALPHABET = '0123456789abcdefghjkmnpqrstvwxyz';
+const TIME_LENGTH = 10;
+const RANDOM_BYTES = 10;
+const MAX_TIME = 2 ** 48 - 1;
+const BODY_PATTERN = /^[0-7][0-9a-hjkmnp-tv-z]{25}$/;
+const KIND_BY_PREFIX = new Map(ID_KINDS.map((kind) => [ID_PREFIXES[kind], kind]));
+/**
+ * Creates an id generator. Each generator keeps its own monotonic state, so ids
+ * from one generator never go backwards, even within a millisecond or when the
+ * clock steps back.
+ */
+export function createIdGenerator(options = {}) {
+    const now = options.now ?? Date.now;
+    const fillRandom = options.fillRandom ??
+        ((bytes) => {
+            globalThis.crypto.getRandomValues(bytes);
+        });
+    let lastTime = -1;
+    const random = new Uint8Array(RANDOM_BYTES);
+    return (kind) => {
+        const time = now();
+        if (!Number.isInteger(time) || time < 0 || time > MAX_TIME) {
+            throw new RangeError(`Id time must be an integer between 0 and ${String(MAX_TIME)}, got ${String(time)}`);
+        }
+        if (time > lastTime) {
+            lastTime = time;
+            fillRandom(random);
+        }
+        else {
+            increment(random);
+        }
+        const body = encodeTime(lastTime) + encodeRandom(random);
+        return `${ID_PREFIXES[kind]}_${body}`;
+    };
+}
+/** Parses an id of any known kind. Returns undefined when the value is not a well-formed id. */
+export function parseId(value) {
+    const separator = value.indexOf('_');
+    if (separator === -1) {
+        return undefined;
+    }
+    const kind = KIND_BY_PREFIX.get(value.slice(0, separator));
+    const body = value.slice(separator + 1);
+    if (kind === undefined || !BODY_PATTERN.test(body)) {
+        return undefined;
+    }
+    return { kind, timestamp: new Date(decodeTime(body.slice(0, TIME_LENGTH))) };
+}
+/** True when the value is a well-formed id of the given kind. */
+export function isId(value, kind) {
+    return typeof value === 'string' && parseId(value)?.kind === kind;
+}
+/**
+ * Parses an id of one kind arriving from outside (a request, the database) into
+ * its typed id. A template literal rather than a custom check, so the schema
+ * also describes itself in JSON Schema: a string of the prefix and a body,
+ * named by its kind, for the REST and MCP doors that explain themselves.
+ */
+export function idSchema(kind) {
+    const named = `${kind} id (${ID_PREFIXES[kind]}_...)`;
+    return z
+        .templateLiteral([ID_PREFIXES[kind], '_', z.string().regex(BODY_PATTERN)], { error: `must be a ${named}` })
+        .meta({ description: `A ${named}` });
+}
+function encodeTime(time) {
+    let remaining = time;
+    let encoded = '';
+    for (let index = 0; index < TIME_LENGTH; index += 1) {
+        const digit = remaining % 32;
+        encoded = charAt(digit) + encoded;
+        remaining = (remaining - digit) / 32;
+    }
+    return encoded;
+}
+function decodeTime(encoded) {
+    let time = 0;
+    for (const char of encoded) {
+        time = time * 32 + ALPHABET.indexOf(char);
+    }
+    return time;
+}
+/** Encodes 80 bits as 16 base32 characters, most significant bits first. */
+function encodeRandom(bytes) {
+    let encoded = '';
+    let buffer = 0;
+    let bits = 0;
+    for (const byte of bytes) {
+        buffer = (buffer << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            bits -= 5;
+            encoded += charAt((buffer >> bits) & 31);
+        }
+        buffer &= (1 << bits) - 1;
+    }
+    return encoded;
+}
+/**
+ * Adds one to the random part, big-endian. Running out of room within one
+ * millisecond is an error, and leaves the bytes as they were so a later call
+ * can never hand out a smaller id.
+ */
+function increment(bytes) {
+    if (bytes.every((byte) => byte === 255)) {
+        throw new RangeError('Id random part overflowed within one millisecond');
+    }
+    for (let index = bytes.length - 1; index >= 0; index -= 1) {
+        const byte = bytes[index] ?? 0;
+        if (byte < 255) {
+            bytes[index] = byte + 1;
+            return;
+        }
+        bytes[index] = 0;
+    }
+}
+function charAt(digit) {
+    const char = ALPHABET[digit];
+    if (char === undefined) {
+        throw new RangeError(`Not a base32 digit: ${String(digit)}`);
+    }
+    return char;
+}
+//# sourceMappingURL=index.js.map

package/dist/ids/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ids/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,KAAK;IACX,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,KAAK;IACZ,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;IACf,cAAc,EAAE,KAAK;CACb,CAAC;AAIX,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,IAAI,WAAW,CAAC;AAC9B,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,MAAM,QAAQ,GAAsB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAcrF,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,kCAAkC,CAAC;AACpD,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC7B,MAAM,YAAY,GAAG,+BAA+B,CAAC;AAErD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAiB,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAWlG;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAA8B,EAAE;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;QAClB,CAAC,CAAC,KAA8B,EAAE,EAAE;YAClC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IAEL,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IAE5C,OAAO,CAAmB,IAAO,EAAS,EAAE;QAC1C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,UAAU,CAAC,4CAA4C,MAAM,CAAC,QAAQ,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QAED,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;YACpB,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IACxC,CAAC,CAAC;AACJ,CAAC;AAQD,gGAAgG;AAChG,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,IAAI,CAAmB,KAAc,EAAE,IAAO;IAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,IAAI,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAmB,IAAO;IAChD,MAAM,KAAK,GAAG,GAAG,IAAI,QAAQ,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;IACtD,OAAO,CAAC;SACL,eAAe,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,aAAa,KAAK,EAAE,EAAE,CAAC;SAC1G,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,KAAK,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,WAAW,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,SAAS,GAAG,EAAE,CAAC;QAC7B,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;QAClC,SAAS,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,GAAG,IAAI,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4EAA4E;AAC5E,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC9B,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,CAAC;YACV,OAAO,IAAI,MAAM,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAiB;IAClC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,UAAU,CAAC,kDAAkD,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;YACf,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,UAAU,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './fleet/index.js';
+export * from './ids/index.js';
+export * from './schemas/index.js';

package/dist/index.js

@@ -0,0 +1,4 @@
+export * from './fleet/index.js';
+export * from './ids/index.js';
+export * from './schemas/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC"}

package/dist/schemas/console.d.ts

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+/** The operator's email: at most 254 characters, the longest address mail carries. */
+export declare const OPERATOR_EMAIL_MAX_LENGTH = 254;
+/** One @ with something on each side, and no whitespace. */
+export declare const OPERATOR_EMAIL_PATTERN: RegExp;
+/**
+ * Any operator password up to this length: no strength rules (ADR 0016). The
+ * bound only keeps an absurd input from reaching the password hash.
+ */
+export declare const OPERATOR_PASSWORD_MAX_LENGTH = 1024;
+/**
+ * Input of `console.signIn`: the operator's email and password. Whitespace
+ * around the email is dropped; the password is taken exactly as typed. The
+ * email's shape is not checked here: an email the server does not know is
+ * simply wrong, like a wrong password.
+ */
+export declare const signInInputSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+}, z.core.$strip>;
+export type SignInInput = z.infer<typeof signInInputSchema>;

package/dist/schemas/console.js

@@ -0,0 +1,21 @@
+import { z } from 'zod';
+/** The operator's email: at most 254 characters, the longest address mail carries. */
+export const OPERATOR_EMAIL_MAX_LENGTH = 254;
+/** One @ with something on each side, and no whitespace. */
+export const OPERATOR_EMAIL_PATTERN = /^[^\s@]+@[^\s@]+$/;
+/**
+ * Any operator password up to this length: no strength rules (ADR 0016). The
+ * bound only keeps an absurd input from reaching the password hash.
+ */
+export const OPERATOR_PASSWORD_MAX_LENGTH = 1024;
+/**
+ * Input of `console.signIn`: the operator's email and password. Whitespace
+ * around the email is dropped; the password is taken exactly as typed. The
+ * email's shape is not checked here: an email the server does not know is
+ * simply wrong, like a wrong password.
+ */
+export const signInInputSchema = z.object({
+    email: z.string().trim().min(1, 'Enter your email').max(OPERATOR_EMAIL_MAX_LENGTH),
+    password: z.string().min(1, 'Enter your password').max(OPERATOR_PASSWORD_MAX_LENGTH),
+});
+//# sourceMappingURL=console.js.map

package/dist/schemas/console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.js","sourceRoot":"","sources":["../../src/schemas/console.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sFAAsF;AACtF,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,4DAA4D;AAC5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAClF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;CACrF,CAAC,CAAC"}

package/dist/schemas/delivery.d.ts

@@ -0,0 +1,85 @@
+import { z } from 'zod';
+/**
+ * Inputs and outputs of receiving and acknowledging deliveries (`ship.receive`
+ * and `ship.ack`): how many deliveries a ship takes at once, what it gets for
+ * each, and which one it acknowledges.
+ */
+/** How many deliveries a receive returns when the ship does not say. */
+export declare const RECEIVE_MAX_DEFAULT = 1;
+/**
+ * The most deliveries one receive returns. The ship chooses up to this many
+ * (ADR 0016); the bound keeps one answer at ten 64 KB payloads.
+ */
+export declare const RECEIVE_MAX_UPPER_BOUND = 10;
+/** Input of `ship.receive`: at most how many deliveries to return, 1 to 10. Without it, one. */
+export declare const receiveInputSchema: z.ZodOptional<z.ZodObject<{
+    max: z.ZodOptional<z.ZodInt>;
+}, z.core.$strip>>;
+export type ReceiveInput = z.infer<typeof receiveInputSchema>;
+/**
+ * Who a delivery is for, as its message's selector resolved at send time: one
+ * ship by its id, or the queue of a type.
+ */
+export declare const recipientSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"ship">;
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"type">;
+    type: z.ZodString;
+}, z.core.$strip>], "kind">;
+/**
+ * One delivery a receive hands the ship, with its message. It stays in flight
+ * until the ship acknowledges it; the same crew's next receive returns it
+ * again, so the delivery id is the ship's idempotency key.
+ */
+export declare const receivedDeliverySchema: z.ZodObject<{
+    deliveryId: z.ZodType<`dlv_${string}`, unknown, z.core.$ZodTypeInternals<`dlv_${string}`, unknown>>;
+    messageId: z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>;
+    senderShipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    senderName: z.ZodString;
+    senderType: z.ZodString;
+    recipient: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ship">;
+        shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"type">;
+        type: z.ZodString;
+    }, z.core.$strip>], "kind">;
+    payload: z.ZodString;
+    contentType: z.ZodString;
+    inReplyTo: z.ZodNullable<z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>>;
+    sentAt: z.ZodISODateTime;
+    attempts: z.ZodInt;
+}, z.core.$strip>;
+export type ReceivedDelivery = z.infer<typeof receivedDeliverySchema>;
+/** Output of `ship.receive`: the deliveries claimed, none when the wait ended without one. */
+export declare const receiveOutputSchema: z.ZodObject<{
+    deliveries: z.ZodArray<z.ZodObject<{
+        deliveryId: z.ZodType<`dlv_${string}`, unknown, z.core.$ZodTypeInternals<`dlv_${string}`, unknown>>;
+        messageId: z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>;
+        senderShipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+        senderName: z.ZodString;
+        senderType: z.ZodString;
+        recipient: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ship">;
+            shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"type">;
+            type: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        payload: z.ZodString;
+        contentType: z.ZodString;
+        inReplyTo: z.ZodNullable<z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>>;
+        sentAt: z.ZodISODateTime;
+        attempts: z.ZodInt;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ReceiveOutput = z.infer<typeof receiveOutputSchema>;
+/** Input of `ship.ack`: the delivery the calling ship received and takes responsibility for. */
+export declare const ackInputSchema: z.ZodObject<{
+    deliveryId: z.ZodType<`dlv_${string}`, unknown, z.core.$ZodTypeInternals<`dlv_${string}`, unknown>>;
+}, z.core.$strip>;
+export type AckInput = z.infer<typeof ackInputSchema>;
+/** Output of `ship.ack`: nothing; the OK is the answer. */
+export declare const ackOutputSchema: z.ZodObject<{}, z.core.$strict>;
+export type AckOutput = z.infer<typeof ackOutputSchema>;

package/dist/schemas/delivery.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+import { idSchema } from '../ids/index.js';
+/**
+ * Inputs and outputs of receiving and acknowledging deliveries (`ship.receive`
+ * and `ship.ack`): how many deliveries a ship takes at once, what it gets for
+ * each, and which one it acknowledges.
+ */
+/** How many deliveries a receive returns when the ship does not say. */
+export const RECEIVE_MAX_DEFAULT = 1;
+/**
+ * The most deliveries one receive returns. The ship chooses up to this many
+ * (ADR 0016); the bound keeps one answer at ten 64 KB payloads.
+ */
+export const RECEIVE_MAX_UPPER_BOUND = 10;
+/** Input of `ship.receive`: at most how many deliveries to return, 1 to 10. Without it, one. */
+export const receiveInputSchema = z
+    .object({ max: z.int().min(1).max(RECEIVE_MAX_UPPER_BOUND).optional() })
+    .optional();
+/**
+ * Who a delivery is for, as its message's selector resolved at send time: one
+ * ship by its id, or the queue of a type.
+ */
+export const recipientSchema = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('ship'), shipId: idSchema('ship') }),
+    z.object({ kind: z.literal('type'), type: z.string() }),
+]);
+/**
+ * One delivery a receive hands the ship, with its message. It stays in flight
+ * until the ship acknowledges it; the same crew's next receive returns it
+ * again, so the delivery id is the ship's idempotency key.
+ */
+export const receivedDeliverySchema = z.object({
+    deliveryId: idSchema('delivery'),
+    messageId: idSchema('message'),
+    senderShipId: idSchema('ship'),
+    /** The sender's name and type as they are when the delivery is received: a renamed sender goes by its new name. */
+    senderName: z.string(),
+    senderType: z.string(),
+    recipient: recipientSchema,
+    payload: z.string(),
+    contentType: z.string(),
+    /** The message this one replies to, if any. */
+    inReplyTo: idSchema('message').nullable(),
+    /** When the message was sent. ISO 8601 in UTC. */
+    sentAt: z.iso.datetime(),
+    /** How many times the delivery has been claimed, this receive included. */
+    attempts: z.int().positive(),
+});
+/** Output of `ship.receive`: the deliveries claimed, none when the wait ended without one. */
+export const receiveOutputSchema = z.object({
+    deliveries: z.array(receivedDeliverySchema).max(RECEIVE_MAX_UPPER_BOUND),
+});
+/** Input of `ship.ack`: the delivery the calling ship received and takes responsibility for. */
+export const ackInputSchema = z.object({ deliveryId: idSchema('delivery') });
+/** Output of `ship.ack`: nothing; the OK is the answer. */
+export const ackOutputSchema = z.strictObject({});
+//# sourceMappingURL=delivery.js.map

package/dist/schemas/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../src/schemas/delivery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;GAIG;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAE1C,gGAAgG;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;KACvE,QAAQ,EAAE,CAAC;AAId;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC1D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;IAChC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;IAC9B,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC;IAC9B,mHAAmH;IACnH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,eAAe;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,+CAA+C;IAC/C,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IACzC,kDAAkD;IAClD,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACxB,2EAA2E;IAC3E,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC;AAIH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;CACzE,CAAC,CAAC;AAIH,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAI7E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC"}

package/dist/schemas/fleet.d.ts

@@ -0,0 +1,100 @@
+import { z } from 'zod';
+/**
+ * Inputs and outputs of the fleet procedures: commission a ship, get its
+ * starting prompt, release it, list the fleet.
+ */
+/** A ship's name and its type are handles (docs/blueprint.md, "Ship"). */
+export declare const SHIP_HANDLE_MAX_LENGTH = 48;
+export declare const SHIP_HANDLE_PATTERN: RegExp;
+export declare const shipHandleSchema: z.ZodString;
+export declare const SHIP_NOTE_MAX_LENGTH = 500;
+/** Input of `fleet.commission`. The note is free text for the operator; whitespace around it is dropped. */
+export declare const commissionShipInputSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodString;
+    note: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CommissionShipInput = z.infer<typeof commissionShipInputSchema>;
+/** Input of `fleet.getStartingPrompt`. */
+export declare const getStartingPromptInputSchema: z.ZodObject<{
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+}, z.core.$strip>;
+/**
+ * Output of `fleet.commission` and `fleet.getStartingPrompt`: the starting
+ * prompt, holding the ship's new secret. Shown once; the secret is never
+ * readable again.
+ */
+export declare const startingPromptOutputSchema: z.ZodObject<{
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    prompt: z.ZodString;
+}, z.core.$strip>;
+export type StartingPromptOutput = z.infer<typeof startingPromptOutputSchema>;
+/** Input of `fleet.release`: the crewed ship whose session loses it. */
+export declare const releaseShipInputSchema: z.ZodObject<{
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+}, z.core.$strip>;
+export type ReleaseShipInput = z.infer<typeof releaseShipInputSchema>;
+/** Output of `fleet.release`: nothing; the OK is the answer. */
+export declare const releaseShipOutputSchema: z.ZodObject<{}, z.core.$strict>;
+/**
+ * One ship in `fleet.list`. `startingPrompt` is the prompt holding the ship's
+ * valid secret, when there is one: when it was issued and whether a session
+ * has claimed the ship with it. `location` is where the session crewing the
+ * ship runs, as it reported on claim; null while no session crews it.
+ */
+export declare const listedShipSchema: z.ZodObject<{
+    id: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    name: z.ZodString;
+    type: z.ZodString;
+    kind: z.ZodEnum<{
+        operator: "operator";
+        agent: "agent";
+    }>;
+    status: z.ZodEnum<{
+        awaitingCrew: "awaitingCrew";
+        crewed: "crewed";
+        retired: "retired";
+    }>;
+    startingPrompt: z.ZodNullable<z.ZodObject<{
+        issuedAt: z.ZodISODateTime;
+        isClaimed: z.ZodBoolean;
+    }, z.core.$strip>>;
+    location: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            DEVICE: "DEVICE";
+            CLOUD: "CLOUD";
+            SERVER: "SERVER";
+            OTHER: "OTHER";
+        }>;
+        description: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ListedShip = z.infer<typeof listedShipSchema>;
+/** Output of `fleet.list`: every ship in the caller's fleet, `argo` included. */
+export declare const fleetListOutputSchema: z.ZodArray<z.ZodObject<{
+    id: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    name: z.ZodString;
+    type: z.ZodString;
+    kind: z.ZodEnum<{
+        operator: "operator";
+        agent: "agent";
+    }>;
+    status: z.ZodEnum<{
+        awaitingCrew: "awaitingCrew";
+        crewed: "crewed";
+        retired: "retired";
+    }>;
+    startingPrompt: z.ZodNullable<z.ZodObject<{
+        issuedAt: z.ZodISODateTime;
+        isClaimed: z.ZodBoolean;
+    }, z.core.$strip>>;
+    location: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            DEVICE: "DEVICE";
+            CLOUD: "CLOUD";
+            SERVER: "SERVER";
+            OTHER: "OTHER";
+        }>;
+        description: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;

package/dist/schemas/fleet.js

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+import { locationKindSchema, shipKindSchema, shipStatusSchema } from '../fleet/index.js';
+import { idSchema } from '../ids/index.js';
+/**
+ * Inputs and outputs of the fleet procedures: commission a ship, get its
+ * starting prompt, release it, list the fleet.
+ */
+/** A ship's name and its type are handles (docs/blueprint.md, "Ship"). */
+export const SHIP_HANDLE_MAX_LENGTH = 48;
+export const SHIP_HANDLE_PATTERN = /^[a-z0-9-]+$/;
+const HANDLE_MESSAGE = `Use 1 to ${SHIP_HANDLE_MAX_LENGTH} lowercase letters, digits or hyphens`;
+export const shipHandleSchema = z
+    .string()
+    .max(SHIP_HANDLE_MAX_LENGTH, HANDLE_MESSAGE)
+    .regex(SHIP_HANDLE_PATTERN, HANDLE_MESSAGE);
+export const SHIP_NOTE_MAX_LENGTH = 500;
+/** Input of `fleet.commission`. The note is free text for the operator; whitespace around it is dropped. */
+export const commissionShipInputSchema = z.object({
+    name: shipHandleSchema,
+    type: shipHandleSchema,
+    note: z
+        .string()
+        .trim()
+        .max(SHIP_NOTE_MAX_LENGTH, `A note is at most ${SHIP_NOTE_MAX_LENGTH} characters`)
+        .optional(),
+});
+/** Input of `fleet.getStartingPrompt`. */
+export const getStartingPromptInputSchema = z.object({ shipId: idSchema('ship') });
+/**
+ * Output of `fleet.commission` and `fleet.getStartingPrompt`: the starting
+ * prompt, holding the ship's new secret. Shown once; the secret is never
+ * readable again.
+ */
+export const startingPromptOutputSchema = z.object({
+    shipId: idSchema('ship'),
+    prompt: z.string(),
+});
+/** Input of `fleet.release`: the crewed ship whose session loses it. */
+export const releaseShipInputSchema = z.object({ shipId: idSchema('ship') });
+/** Output of `fleet.release`: nothing; the OK is the answer. */
+export const releaseShipOutputSchema = z.strictObject({});
+/**
+ * One ship in `fleet.list`. `startingPrompt` is the prompt holding the ship's
+ * valid secret, when there is one: when it was issued and whether a session
+ * has claimed the ship with it. `location` is where the session crewing the
+ * ship runs, as it reported on claim; null while no session crews it.
+ */
+export const listedShipSchema = z.object({
+    id: idSchema('ship'),
+    name: z.string(),
+    type: z.string(),
+    /** `operator` for `argo`, `agent` for every other ship. */
+    kind: shipKindSchema,
+    status: shipStatusSchema,
+    startingPrompt: z
+        .object({
+        /** ISO 8601 in UTC. */
+        issuedAt: z.iso.datetime(),
+        isClaimed: z.boolean(),
+    })
+        .nullable(),
+    location: z
+        .object({
+        kind: locationKindSchema,
+        /** Set for OTHER only. */
+        description: z.string().nullable(),
+    })
+        .nullable(),
+});
+/** Output of `fleet.list`: every ship in the caller's fleet, `argo` included. */
+export const fleetListOutputSchema = z.array(listedShipSchema);
+//# sourceMappingURL=fleet.js.map

package/dist/schemas/fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../src/schemas/fleet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;GAGG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC;AAClD,MAAM,cAAc,GAAG,YAAY,sBAAsB,uCAAuC,CAAC;AAEjG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,GAAG,CAAC,sBAAsB,EAAE,cAAc,CAAC;KAC3C,KAAK,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;AAE9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,4GAA4G;AAC5G,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,gBAAgB;IACtB,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,oBAAoB,EAAE,qBAAqB,oBAAoB,aAAa,CAAC;SACjF,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEnF;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAIH,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAI7E,gEAAgE;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,2DAA2D;IAC3D,IAAI,EAAE,cAAc;IACpB,MAAM,EAAE,gBAAgB;IACxB,cAAc,EAAE,CAAC;SACd,MAAM,CAAC;QACN,uBAAuB;QACvB,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC1B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;KACvB,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,IAAI,EAAE,kBAAkB;QACxB,0BAA0B;QAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC,CAAC;AAIH,iFAAiF;AACjF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/schemas/index.d.ts

@@ -0,0 +1,6 @@
+export * from './console.js';
+export * from './delivery.js';
+export * from './fleet.js';
+export * from './message.js';
+export * from './ship.js';
+export * from './system.js';

package/dist/schemas/index.js

@@ -0,0 +1,7 @@
+export * from './console.js';
+export * from './delivery.js';
+export * from './fleet.js';
+export * from './message.js';
+export * from './ship.js';
+export * from './system.js';
+//# sourceMappingURL=index.js.map

package/dist/schemas/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/schemas/message.d.ts

@@ -0,0 +1,68 @@
+import { z } from 'zod';
+/**
+ * Inputs and outputs of sending a message (`ship.send`): who it is for, its
+ * payload and content type, the sender's idempotency key, and the message it
+ * replies to.
+ */
+/**
+ * A payload is at most 64 KB (ADR 0006): a message carries a reference and an
+ * instruction, not the content itself.
+ */
+export declare const PAYLOAD_MAX_BYTES: number;
+/**
+ * The size of a payload serialized: the bytes of its text in UTF-8, as the
+ * database stores it and counts it.
+ */
+export declare function payloadBytes(payload: string): number;
+/** The longest content type a sender may give, parameters included. */
+export declare const CONTENT_TYPE_MAX_LENGTH = 256;
+/** A payload's content type when its sender does not say. */
+export declare const CONTENT_TYPE_DEFAULT = "text/plain";
+/** Whether the value is a well-formed media type: type/subtype with optional parameters (RFC 9110). */
+export declare function isMediaType(value: string): boolean;
+/**
+ * A payload's content type: any well-formed media type, taken and passed on
+ * exactly as sent, case and parameters included. The fleet never reads the
+ * payload by it (ADR 0016: no policy).
+ */
+export declare const contentTypeSchema: z.ZodString;
+/** The longest idempotency key a sender may give. It is opaque: any text of 1 to this many characters. */
+export declare const IDEMPOTENCY_KEY_MAX_LENGTH = 256;
+/**
+ * Who a message is for (docs/blueprint.md, "Selector"): one ship, by id or by
+ * name, or any ship of a type. A name is resolved to the ship's id at send time.
+ */
+export declare const selectorSchema: z.ZodUnion<readonly [z.ZodObject<{
+    kind: z.ZodLiteral<"ship">;
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"ship">;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"type">;
+    type: z.ZodString;
+}, z.core.$strict>]>;
+export type SelectorInput = z.infer<typeof selectorSchema>;
+/** Input of `ship.send`. The sender is the calling ship, never named in the input. */
+export declare const sendInputSchema: z.ZodObject<{
+    selector: z.ZodUnion<readonly [z.ZodObject<{
+        kind: z.ZodLiteral<"ship">;
+        shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"ship">;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"type">;
+        type: z.ZodString;
+    }, z.core.$strict>]>;
+    payload: z.ZodString;
+    contentType: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodString;
+    inReplyTo: z.ZodOptional<z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>>;
+}, z.core.$strip>;
+export type SendInput = z.infer<typeof sendInputSchema>;
+/** Output of `ship.send`: the message's id, the original one when the idempotency key was used before. */
+export declare const sendOutputSchema: z.ZodObject<{
+    messageId: z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>;
+}, z.core.$strip>;
+export type SendOutput = z.infer<typeof sendOutputSchema>;

package/dist/schemas/message.js

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+import { idSchema } from '../ids/index.js';
+import { shipHandleSchema } from './fleet.js';
+/**
+ * Inputs and outputs of sending a message (`ship.send`): who it is for, its
+ * payload and content type, the sender's idempotency key, and the message it
+ * replies to.
+ */
+/**
+ * A payload is at most 64 KB (ADR 0006): a message carries a reference and an
+ * instruction, not the content itself.
+ */
+export const PAYLOAD_MAX_BYTES = 64 * 1024;
+const utf8 = new TextEncoder();
+/**
+ * The size of a payload serialized: the bytes of its text in UTF-8, as the
+ * database stores it and counts it.
+ */
+export function payloadBytes(payload) {
+    return utf8.encode(payload).byteLength;
+}
+/** The longest content type a sender may give, parameters included. */
+export const CONTENT_TYPE_MAX_LENGTH = 256;
+/** A payload's content type when its sender does not say. */
+export const CONTENT_TYPE_DEFAULT = 'text/plain';
+// A media type as RFC 9110 defines it ("Media Type"): type "/" subtype, then
+// parameters, each `;` name `=` a token or a quoted string, with optional
+// spaces or tabs around the `;`. Empty parameters are allowed, as there.
+const TOKEN = "[!#$%&'*+\\-.^_`|~0-9A-Za-z]+";
+const QUOTED_STRING = '"(?:[\\t \\x21\\x23-\\x5B\\x5D-\\x7E\\x80-\\xFF]|\\\\[\\t \\x21-\\x7E\\x80-\\xFF])*"';
+const SPACE = '[ \\t]*';
+const MEDIA_TYPE = new RegExp(`^${TOKEN}/${TOKEN}(?:${SPACE};${SPACE}(?:${TOKEN}=(?:${TOKEN}|${QUOTED_STRING}))?)*$`);
+/** Whether the value is a well-formed media type: type/subtype with optional parameters (RFC 9110). */
+export function isMediaType(value) {
+    return MEDIA_TYPE.test(value);
+}
+const CONTENT_TYPE_MESSAGE = `A content type is a media type such as text/plain or application/json; charset=utf-8, of at most ${CONTENT_TYPE_MAX_LENGTH} characters`;
+/**
+ * A payload's content type: any well-formed media type, taken and passed on
+ * exactly as sent, case and parameters included. The fleet never reads the
+ * payload by it (ADR 0016: no policy).
+ */
+export const contentTypeSchema = z
+    .string()
+    .max(CONTENT_TYPE_MAX_LENGTH, CONTENT_TYPE_MESSAGE)
+    .refine(isMediaType, CONTENT_TYPE_MESSAGE);
+/** The longest idempotency key a sender may give. It is opaque: any text of 1 to this many characters. */
+export const IDEMPOTENCY_KEY_MAX_LENGTH = 256;
+/**
+ * Who a message is for (docs/blueprint.md, "Selector"): one ship, by id or by
+ * name, or any ship of a type. A name is resolved to the ship's id at send time.
+ */
+export const selectorSchema = z.union([
+    z.strictObject({ kind: z.literal('ship'), shipId: idSchema('ship') }),
+    z.strictObject({ kind: z.literal('ship'), name: shipHandleSchema }),
+    z.strictObject({ kind: z.literal('type'), type: shipHandleSchema }),
+]);
+/** Input of `ship.send`. The sender is the calling ship, never named in the input. */
+export const sendInputSchema = z.object({
+    selector: selectorSchema,
+    payload: z
+        .string()
+        .refine((payload) => payloadBytes(payload) <= PAYLOAD_MAX_BYTES, `A payload is at most ${PAYLOAD_MAX_BYTES} bytes (64 KB) in UTF-8`),
+    /** Without it, the payload is text/plain. */
+    contentType: contentTypeSchema.optional(),
+    idempotencyKey: z.string().min(1).max(IDEMPOTENCY_KEY_MAX_LENGTH),
+    /** The id of the message, in the same fleet, that this one replies to. */
+    inReplyTo: idSchema('message').optional(),
+});
+/** Output of `ship.send`: the message's id, the original one when the idempotency key was used before. */
+export const sendOutputSchema = z.object({ messageId: idSchema('message') });
+//# sourceMappingURL=message.js.map

package/dist/schemas/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../../src/schemas/message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC;AACzC,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAEjD,6EAA6E;AAC7E,0EAA0E;AAC1E,yEAAyE;AACzE,MAAM,KAAK,GAAG,+BAA+B,CAAC;AAC9C,MAAM,aAAa,GAAG,sFAAsF,CAAC;AAC7G,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,IAAI,KAAK,MAAM,KAAK,OAAO,KAAK,IAAI,aAAa,QAAQ,CAAC,CAAC;AAEtH,uGAAuG;AACvG,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,oBAAoB,GAAG,oGAAoG,uBAAuB,aAAa,CAAC;AAEtK;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,uBAAuB,EAAE,oBAAoB,CAAC;KAClD,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;AAE7C,0GAA0G;AAC1G,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC;IACpC,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IACrE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACnE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;CACpE,CAAC,CAAC;AAIH,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,cAAc;IACxB,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,MAAM,CACL,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,iBAAiB,EACvD,wBAAwB,iBAAiB,yBAAyB,CACnE;IACH,6CAA6C;IAC7C,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACjE,0EAA0E;IAC1E,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAIH,0GAA0G;AAC1G,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC"}

package/dist/schemas/ship.d.ts

@@ -0,0 +1,63 @@
+import { z } from 'zod';
+/**
+ * Inputs and outputs of the ship procedures: `register` claims a ship with its
+ * secret and returns a crew token; `whoami` tells the caller which ship it is;
+ * `deregister` ends the caller's own lease.
+ */
+/** The longest description an OTHER location carries, not counting whitespace around it. */
+export declare const LOCATION_DESCRIPTION_MAX_LENGTH = 100;
+/**
+ * The longest ship secret `register` takes. A real one is much shorter; the
+ * bound only keeps an absurd input from reaching the hash.
+ */
+export declare const SHIP_SECRET_MAX_LENGTH = 256;
+/**
+ * Where the session claiming a ship runs (docs/blueprint.md, "Location"):
+ * DEVICE, CLOUD or SERVER, or OTHER with a short description. Stored with the
+ * lease, never interpreted.
+ */
+export declare const locationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodEnum<{
+        DEVICE: "DEVICE";
+        CLOUD: "CLOUD";
+        SERVER: "SERVER";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"OTHER">;
+    description: z.ZodString;
+}, z.core.$strict>], "kind">;
+export type LocationInput = z.infer<typeof locationSchema>;
+/** Input of `ship.register`: the ship id and secret from the starting prompt, and where the session runs. */
+export declare const registerInputSchema: z.ZodObject<{
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    secret: z.ZodString;
+    location: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodEnum<{
+            DEVICE: "DEVICE";
+            CLOUD: "CLOUD";
+            SERVER: "SERVER";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"OTHER">;
+        description: z.ZodString;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strip>;
+export type RegisterInput = z.infer<typeof registerInputSchema>;
+/**
+ * Output of `ship.register`: the crew token every later ship call carries
+ * (ADR 0015). Returned once; only its hash is stored.
+ */
+export declare const registerOutputSchema: z.ZodObject<{
+    crewToken: z.ZodString;
+}, z.core.$strip>;
+export type RegisterOutput = z.infer<typeof registerOutputSchema>;
+/** Output of `ship.whoami`: the caller's ship. */
+export declare const whoamiOutputSchema: z.ZodObject<{
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    fleetId: z.ZodType<`flt_${string}`, unknown, z.core.$ZodTypeInternals<`flt_${string}`, unknown>>;
+    name: z.ZodString;
+    type: z.ZodString;
+}, z.core.$strip>;
+export type WhoamiOutput = z.infer<typeof whoamiOutputSchema>;
+/** Output of `ship.deregister`: nothing; the OK is the answer. */
+export declare const deregisterOutputSchema: z.ZodObject<{}, z.core.$strict>;

package/dist/schemas/ship.js

@@ -0,0 +1,51 @@
+import { z } from 'zod';
+import { idSchema } from '../ids/index.js';
+/**
+ * Inputs and outputs of the ship procedures: `register` claims a ship with its
+ * secret and returns a crew token; `whoami` tells the caller which ship it is;
+ * `deregister` ends the caller's own lease.
+ */
+/** The longest description an OTHER location carries, not counting whitespace around it. */
+export const LOCATION_DESCRIPTION_MAX_LENGTH = 100;
+/**
+ * The longest ship secret `register` takes. A real one is much shorter; the
+ * bound only keeps an absurd input from reaching the hash.
+ */
+export const SHIP_SECRET_MAX_LENGTH = 256;
+/**
+ * Where the session claiming a ship runs (docs/blueprint.md, "Location"):
+ * DEVICE, CLOUD or SERVER, or OTHER with a short description. Stored with the
+ * lease, never interpreted.
+ */
+export const locationSchema = z.discriminatedUnion('kind', [
+    z.strictObject({ kind: z.enum(['DEVICE', 'CLOUD', 'SERVER']) }),
+    z.strictObject({
+        kind: z.literal('OTHER'),
+        description: z
+            .string()
+            .trim()
+            .min(1, 'An OTHER location needs a description')
+            .max(LOCATION_DESCRIPTION_MAX_LENGTH, `A description is at most ${LOCATION_DESCRIPTION_MAX_LENGTH} characters`),
+    }),
+]);
+/** Input of `ship.register`: the ship id and secret from the starting prompt, and where the session runs. */
+export const registerInputSchema = z.object({
+    shipId: idSchema('ship'),
+    secret: z.string().min(1).max(SHIP_SECRET_MAX_LENGTH),
+    location: locationSchema,
+});
+/**
+ * Output of `ship.register`: the crew token every later ship call carries
+ * (ADR 0015). Returned once; only its hash is stored.
+ */
+export const registerOutputSchema = z.object({ crewToken: z.string() });
+/** Output of `ship.whoami`: the caller's ship. */
+export const whoamiOutputSchema = z.object({
+    shipId: idSchema('ship'),
+    fleetId: idSchema('fleet'),
+    name: z.string(),
+    type: z.string(),
+});
+/** Output of `ship.deregister`: nothing; the OK is the answer. */
+export const deregisterOutputSchema = z.strictObject({});
+//# sourceMappingURL=ship.js.map

package/dist/schemas/ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship.js","sourceRoot":"","sources":["../../src/schemas/ship.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;;GAIG;AAEH,4FAA4F;AAC5F,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AAEnD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzD,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,YAAY,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,WAAW,EAAE,CAAC;aACX,MAAM,EAAE;aACR,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,EAAE,uCAAuC,CAAC;aAC/C,GAAG,CAAC,+BAA+B,EAAE,4BAA4B,+BAA+B,aAAa,CAAC;KAClH,CAAC;CACH,CAAC,CAAC;AAIH,6GAA6G;AAC7G,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACrD,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAIxE,kDAAkD;AAClD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAIH,kEAAkE;AAClE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC"}

package/dist/schemas/system.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+/** Output of `system.ping`: the server's clock and how many fleets its database holds. */
+export declare const pingOutputSchema: z.ZodObject<{
+    serverTime: z.ZodISODateTime;
+    fleetCount: z.ZodInt;
+}, z.core.$strip>;
+export type PingOutput = z.infer<typeof pingOutputSchema>;

package/dist/schemas/system.js

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+/** Output of `system.ping`: the server's clock and how many fleets its database holds. */
+export const pingOutputSchema = z.object({
+    /** ISO 8601 in UTC. */
+    serverTime: z.iso.datetime(),
+    fleetCount: z.int().nonnegative(),
+});
+//# sourceMappingURL=system.js.map

package/dist/schemas/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../src/schemas/system.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,uBAAuB;IACvB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAClC,CAAC,CAAC"}

package/package.json

@@ -1,28 +1,32 @@
 {
   "name": "@aeolus-fleet/common",
-  "version": "0.0.0",
-  "description": "Aeolus: shared schemas, prefixed ids and types. Placeholder release, not usable yet.",
+  "version": "0.2.0",
+  "description": "Aeolus shared schemas, prefixed ids and types.",
   "license": "Apache-2.0",
-  "author": "Thomas Hendrickx",
-  "homepage": "https://github.com/ThomasHendrickx/aeolus-fleet#readme",
+  "type": "module",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ThomasHendrickx/aeolus-fleet.git",
     "directory": "packages/common"
   },
-  "bugs": {
-    "url": "https://github.com/ThomasHendrickx/aeolus-fleet/issues"
+  "engines": {
+    "node": ">=26"
+  },
+  "exports": {
+    ".": {
+      "@aeolus-fleet/source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
   },
-  "keywords": [
-    "aeolus",
-    "agents",
-    "fleet",
-    "message-broker"
-  ],
   "files": [
-    "README.md"
+    "dist"
   ],
-  "publishConfig": {
-    "access": "public"
+  "scripts": {
+    "build": "tsc --project tsconfig.build.json",
+    "typecheck": "tsc --project tsconfig.json"
+  },
+  "dependencies": {
+    "zod": "^4.6.5"
   }
 }