@aeolus-fleet/common 0.27.1 → 0.28.1

package/dist/schemas/network.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { idSchema } from '../ids/index.js';
+import { accountIdSchema } from './account-token.js';
 import { carriedLabelSchema } from './label.js';
 /**
  * Network rules (decision 0034): which ships may send to, read or manage
@@ -8,7 +9,7 @@ import { carriedLabelSchema } from './label.js';
  * holds for every ship). Allow-only. The limits are the decision's; the server
  * checks them, so every refusal names it.
  */
-/** The most rules of argo's one fleet may hold, beside the rules its ships declared (decision 0037). */
+/** The most rules of its own one fleet may hold, beside the rules its ships declared (decision 0037). */
 export const NETWORK_RULES_MAX = 200;
 /** The most rules one ship may declare (decision 0037). */
 export const DECLARED_NETWORK_RULES_MAX = 20;
@@ -39,62 +40,54 @@ export const labelSelectorSchema = z.array(selectorTermSchema);
 export const NETWORK_VERBS = ['send', 'read', 'manage'];
 /** One rule: the ships matching `from` may do its verb to the ships matching `to`. */
 export const networkRuleSchema = z.object({ verb: z.enum(NETWORK_VERBS), from: labelSelectorSchema, to: labelSelectorSchema });
-/** Input of `fleet.setNetworkRules` (fleet:network): every rule the fleet holds from now on beside the built-in ones. */
-export const setNetworkRulesInputSchema = z.object({ rules: z.array(networkRuleSchema) });
+/** The fleet's own rules: the whole list, or none for all-to-all, open on (decision 0034). */
+export const networkRulesSchema = z.array(networkRuleSchema).nullable();
+/** Input of `fleet.saveNetworkRulesDraft` (fleet:network): the draft of the fleet's own rules, a whole list or none for all-to-all. */
+export const saveNetworkRulesDraftInputSchema = z.object({ rules: networkRulesSchema });
+/** Output of `fleet.saveNetworkRulesDraft`: the settings version the draft was saved against, which its apply names. */
+export const saveNetworkRulesDraftOutputSchema = z.object({ savedAgainstVersion: z.int().min(0) });
+/** Input of `fleet.applyNetworkRules` (fleet:network): the settings version the caller saw the draft against; a moved one refuses the apply. */
+export const applyNetworkRulesInputSchema = z.object({ version: z.int().min(0) });
+/**
+ * Output of `fleet.networkRules` (fleet:network): the applied rules at the
+ * settings version, none for a fleet that never set any, and the draft, with
+ * when it was saved and against which version, or none.
+ */
+export const networkRulesOutputSchema = z.object({
+    applied: z.object({ rules: networkRulesSchema, version: z.int().min(0) }),
+    draft: z.object({ rules: networkRulesSchema, savedAt: z.iso.datetime(), savedAgainstVersion: z.int().min(0) }).nullable(),
+});
+/** Output of `fleet.discardNetworkRulesDraft`. */
+export const discardNetworkRulesDraftOutputSchema = z.object({});
 /**
  * The built-in rules, core's own (decision 0034): argo to and from every ship,
  * the owner's ship to the ships it owns, an answer to the sender of the
  * message it answers, and a connected plugin's ship reading every ship, which
  * are never off; the viewer reading every ship,
- * which argo turns off or on; and open, every ship to every ship, one per
- * verb, which the networking plugin turns off or on.
+ * which an actor holding fleet:network turns off or on; the installation
+ * managing person ships and the ships they own, never off (decision 0020); and
+ * open, every ship to every ship by every verb, on exactly while the fleet has
+ * no rules applied.
  */
-export const BUILT_IN_RULES = ['argo', 'owner', 'answer', 'pluginRead', 'viewerRead', 'open'];
+export const BUILT_IN_RULES = ['argo', 'owner', 'answer', 'pluginRead', 'viewerRead', 'installation', 'open'];
 /** The built-in rules that are never off. */
-export const FIXED_BUILT_IN_RULES = ['argo', 'owner', 'answer', 'pluginRead'];
-/** Input of `fleet.setBuiltInRule` (fleet:network): a built-in rule turned on or off, open for one verb, which it names and no other rule does. */
-export const setBuiltInRuleInputSchema = z
-    .object({ rule: z.enum(BUILT_IN_RULES), verb: z.enum(NETWORK_VERBS).optional(), isOn: z.boolean() })
-    .refine((input) => (input.rule === 'open') === (input.verb !== undefined), { message: 'open names its verb, and no other built-in rule names one', path: ['verb'] });
-/**
- * One built-in rule as it is now: open for one verb, which it names and no
- * other rule does, and whether it is on; the fixed ones always are.
- */
-export const builtInRuleStateSchema = z.union([
-    z.object({ rule: z.enum(['argo', 'owner', 'answer', 'pluginRead', 'viewerRead']), isOn: z.boolean() }),
-    z.object({ rule: z.literal('open'), verb: z.enum(NETWORK_VERBS), isOn: z.boolean() }),
-]);
+export const FIXED_BUILT_IN_RULES = ['argo', 'owner', 'answer', 'pluginRead', 'installation'];
+/** Input of `fleet.setBuiltInRule` (fleet:network): a built-in rule turned on or off; the server turns only the viewer reading. */
+export const setBuiltInRuleInputSchema = z.object({ rule: z.enum(BUILT_IN_RULES), isOn: z.boolean() });
+/** One built-in rule as it is now, and whether it is on; the fixed ones always are. */
+export const builtInRuleStateSchema = z.object({ rule: z.enum(BUILT_IN_RULES), isOn: z.boolean() });
 /** Output of `fleet.builtInRules` (fleet:network): every built-in rule as it is now, in the order the rule list shows them, first (decision 0034). */
 export const builtInRulesOutputSchema = z.array(builtInRuleStateSchema);
-/**
- * Output of `fleet.networkPlugin` (fleet:read): the fleet's networking plugin,
- * its ship and when it registered, or null without one (decision 0035). The
- * gateway reads it before it switches on for a fleet (interop I-3).
- */
-export const networkPluginOutputSchema = z.object({ shipId: idSchema('ship'), registeredAt: z.iso.datetime() }).nullable();
-/** Output of `fleet.setNetworkRules`: the version the fleet's network settings have now. */
-export const setNetworkRulesOutputSchema = z.object({ version: z.int().min(1) });
+/** Output of `fleet.applyNetworkRules` and `fleet.setBuiltInRule`: the version the fleet's network settings have now. */
+export const networkVersionOutputSchema = z.object({ version: z.int().min(0) });
 /** Input of `fleet.declareNetworkRules` (labels:define): every rule the ship declares from now on, on labels it owns; an empty list withdraws them (decision 0037). */
 export const declareNetworkRulesInputSchema = z.object({ rules: z.array(networkRuleSchema) });
 /** Output of `fleet.declareNetworkRules`: how many rules the ship declares now. */
 export const declareNetworkRulesOutputSchema = z.object({ rules: z.int().min(0) });
-/** Output of `fleet.declaredNetworkRules` (fleet:network): each ship that declared rules, with its whole list. */
-export const declaredNetworkRulesOutputSchema = z.array(z.object({ shipId: idSchema('ship'), rules: z.array(networkRuleSchema) }));
-/**
- * What happens to sends while a fleet's networking plugin is unavailable
- * (decision 0035): every send refused but the fixed exceptions, every send
- * allowed, or the rules it supplied last kept.
- */
-export const WHILE_UNAVAILABLE = ['block-all', 'open-all', 'keep-latest'];
-/** The least time without a call from its ship after which a networking plugin is not responding: longer than a receive waits. */
-export const NETWORK_PLUGIN_NOT_RESPONDING_AFTER_MIN_SECONDS = 60;
-/** The most: a day. */
-export const NETWORK_PLUGIN_NOT_RESPONDING_AFTER_MAX_SECONDS = 86_400;
-/** Input of `fleet.registerNetworkPlugin` (fleet:network): what happens while the plugin is unavailable, and after how long without a call it is not responding. */
-export const registerNetworkPluginInputSchema = z.object({
-    whileUnavailable: z.enum(WHILE_UNAVAILABLE),
-    notRespondingAfterSeconds: z.int().min(NETWORK_PLUGIN_NOT_RESPONDING_AFTER_MIN_SECONDS).max(NETWORK_PLUGIN_NOT_RESPONDING_AFTER_MAX_SECONDS),
-});
+/** Who declared network rules (decisions 0037, 0052): a ship, or the installation on the labels it owns. */
+export const declarerSchema = z.discriminatedUnion('kind', [z.object({ kind: z.literal('ship'), shipId: idSchema('ship') }), z.object({ kind: z.literal('installation') })]);
+/** Output of `fleet.declaredNetworkRules` (fleet:network): each declarer of rules, with its whole list. */
+export const declaredNetworkRulesOutputSchema = z.array(z.object({ declarer: declarerSchema, rules: z.array(networkRuleSchema) }));
 /** A ship as a reach refusal saw it: its id, its name, the label values it carried then and its owner's ship then, none for argo and the viewer (decision 0045). */
 const refusedShipSchema = z.object({
     id: idSchema('ship'),
@@ -108,11 +101,26 @@ const refusedShipSchema = z.object({
  * (decision 0034). Any other call refuses it.
  */
 export const ON_BEHALF_OF_HEADER = 'aeolus-on-behalf-of';
-/** One refused send: who tried to reach whom by which verb, both ships as they were with their owners, the settings version that refused it and when. */
+/**
+ * Who a refusal refused (decision 0057): a ship as it was; an account by
+ * its id only, never an email, with the `group` values its token carried
+ * that the fleet defines and its person ship then; or the installation.
+ */
+const refusedActorSchema = z.discriminatedUnion('kind', [
+    refusedShipSchema.extend({ kind: z.literal('ship') }),
+    z.object({
+        kind: z.literal('account'),
+        accountId: accountIdSchema,
+        labels: z.array(carriedLabelSchema),
+        personShip: z.object({ id: idSchema('ship'), name: z.string() }).nullable(),
+    }),
+    z.object({ kind: z.literal('installation') }),
+]);
+/** One refused call: who tried to reach whom by which verb, the actor and the ship as they were with their owners, the settings version that refused it and when. */
 export const reachRefusalSchema = z.object({
     id: idSchema('reachRefusal'),
     at: z.iso.datetime(),
-    sender: refusedShipSchema,
+    sender: refusedActorSchema,
     /** The plugin ship that read on behalf of the sender (decision 0034), as it was then; null for the sender's own call. */
     askedBy: refusedShipSchema.nullable(),
     recipient: z.discriminatedUnion('kind', [
@@ -123,25 +131,35 @@ export const reachRefusalSchema = z.object({
     /** What the sender tried to do: send, the one verb checked so far. */
     verb: z.enum(NETWORK_VERBS),
     settingsVersion: z.int().min(1),
-    /** What the plugin declared for while it is unavailable, when it refused because the plugin was not responding (decision 0035); null otherwise. */
-    whilePluginUnavailable: z.enum(['block-all', 'keep-latest']).nullable(),
 });
 /** Output of `fleet.reachRefusals` (argo only): the fleet's latest refusals, newest first, at most REACH_REFUSALS_READ_MAX. */
 export const reachRefusalsOutputSchema = z.array(reachRefusalSchema);
-/** Input of `fleet.explainReach` (argo only): the ship to explain from, and the one ship asked about, or none for every ship. */
-export const explainReachInputSchema = z.object({ fromShipId: idSchema('ship'), toShipId: idSchema('ship').optional() });
+/** Input of `fleet.explainReach` (fleet:explain): the ship to explain from, the one ship asked about or none for every ship, and the rules to explain against: the applied ones, or the draft. */
+export const explainReachInputSchema = z.object({ fromShipId: idSchema('ship'), toShipId: idSchema('ship').optional(), against: z.enum(['applied', 'draft']).optional() });
 /**
  * The rule that lets one ship reach another (decision 0034): a built-in rule;
- * a rule the networking plugin supplied, by its place in the fleet's list;
- * or a rule a ship declared, by its declarer and its place in that ship's
- * list (decision 0037).
+ * one of the fleet's own rules, by its place in the fleet's list;
+ * or a declared rule, by its declarer, a ship or the installation, and its
+ * place in that declarer's list (decision 0037).
  */
 export const reachRuleSchema = z.union([
     z.object({ builtIn: z.enum(BUILT_IN_RULES) }),
-    z.object({ plugin: z.int().min(0) }),
-    z.object({ declared: idSchema('ship'), index: z.int().min(0) }),
+    z.object({ rule: z.int().min(0) }),
+    z.object({ declared: declarerSchema, index: z.int().min(0) }),
 ]);
 const reachedShipsSchema = z.array(z.object({ shipId: idSchema('ship'), rule: reachRuleSchema }));
 /** Output of `fleet.explainReach`: per verb, the ships it reaches now, each with the rule that allows it. */
 export const explainReachOutputSchema = z.object({ send: reachedShipsSchema, read: reachedShipsSchema, manage: reachedShipsSchema });
+const reachChangesSchema = z.array(z.object({ fromShipId: idSchema('ship'), toShipId: idSchema('ship'), rule: reachRuleSchema }));
+/**
+ * Output of `fleet.networkRulesDraftChanges` (fleet:network): per verb, the
+ * pairs of ships the caller reads whose reach the draft gains, each with the
+ * draft's rule that allows it, and loses, each with the applied rule that
+ * allows it now (decision 0034).
+ */
+export const networkRulesDraftChangesOutputSchema = z.object({
+    send: z.object({ gained: reachChangesSchema, lost: reachChangesSchema }),
+    read: z.object({ gained: reachChangesSchema, lost: reachChangesSchema }),
+    manage: z.object({ gained: reachChangesSchema, lost: reachChangesSchema }),
+});
 //# sourceMappingURL=network.js.map

package/dist/schemas/network.js.map

@@ -1 +1 @@
-{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/schemas/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;GAMG;AAEH,wGAAwG;AACxG,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAY,CAAC;AAE5C,wGAAwG;AACxG,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAY,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC;IACtB,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;IAC5F,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;CAC9F,CAAC,CAAC;AAUH,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC;AACrD,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAE/D,iGAAiG;AACjG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAIjE,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAI/H,yHAAyH;AACzH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAU,CAAC;AAIvG,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAA2C,CAAC;AAExH,mJAAmJ;AACnJ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;KACnG,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,2DAA2D,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAIvK;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC5C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IACtG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;CACtF,CAAC,CAAC;AAIH,sJAAsJ;AACtJ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAE3H,4FAA4F;AAC5F,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEjF,uKAAuK;AACvK,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AAE9F,mFAAmF;AACnF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEnF,kHAAkH;AAClH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;AAEnI;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,CAAU,CAAC;AAInF,kIAAkI;AAClI,MAAM,CAAC,MAAM,+CAA+C,GAAG,EAAE,CAAC;AAElE,uBAAuB;AACvB,MAAM,CAAC,MAAM,+CAA+C,GAAG,MAAM,CAAC;AAEtE,oKAAoK;AACpK,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC3C,yBAAyB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,+CAA+C,CAAC;CAC7I,CAAC,CAAC;AAIH,oKAAoK;AACpK,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAEzD,yJAAyJ;AACzJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,QAAQ,CAAC,cAAc,CAAC;IAC5B,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACpB,MAAM,EAAE,iBAAiB;IACzB,yHAAyH;IACzH,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACtC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC9D,0FAA0F;QAC1F,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;KAC3F,CAAC;IACF,sEAAsE;IACtE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;IAC3B,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,mJAAmJ;IACnJ,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxE,CAAC,CAAC;AAIH,+HAA+H;AAC/H,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAErE,iIAAiI;AACjI,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEzH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC;IACrC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC;AAIH,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;AAElG,6GAA6G;AAC7G,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC"}
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/schemas/network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;;;GAMG;AAEH,yGAAyG;AACzG,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC,2DAA2D;AAC3D,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C,iFAAiF;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,GAAY,CAAC;AAE5C,wGAAwG;AACxG,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAY,CAAC;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC;IACxC,QAAQ,CAAC,YAAY,CAAC;IACtB,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;IAC5F,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;CAC9F,CAAC,CAAC;AAUH,MAAM,UAAU,WAAW,CAAC,IAAkB;IAC5C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC;AACrD,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAE/D,iGAAiG;AACjG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAIjE,sFAAsF;AACtF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC;AAI/H,8FAA8F;AAC9F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC;AAExE,uIAAuI;AACvI,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAExF,wHAAwH;AACxH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEnG,gJAAgJ;AAChJ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1H,CAAC,CAAC;AAIH,kDAAkD;AAClD,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,CAAU,CAAC;AAIvH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,CAA2C,CAAC;AAExI,mIAAmI;AACnI,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAIvG,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAIpG,sJAAsJ;AACtJ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;AAExE,yHAAyH;AACzH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEhF,uKAAuK;AACvK,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;AAE9F,mFAAmF;AACnF,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEnF,4GAA4G;AAC5G,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAI7K,2GAA2G;AAC3G,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;AAEnI,oKAAoK;AACpK,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvE,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,iBAAiB,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACrD,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC5E,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,qKAAqK;AACrK,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,QAAQ,CAAC,cAAc,CAAC;IAC5B,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACpB,MAAM,EAAE,kBAAkB;IAC1B,yHAAyH;IACzH,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACtC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC9D,0FAA0F;QAC1F,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;KAC3F,CAAC;IACF,sEAAsE;IACtE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;IAC3B,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC;AAIH,+HAA+H;AAC/H,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAErE,kMAAkM;AAClM,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAE3K;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC;IACrC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;CAC9D,CAAC,CAAC;AAIH,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;AAElG,6GAA6G;AAC7G,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAIrI,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;AAElI;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACxE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IACxE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;CAC3E,CAAC,CAAC"}

package/dist/schemas/statement.d.ts

@@ -126,7 +126,7 @@ export declare const discoveredStatementSchema: z.ZodNullable<z.ZodDiscriminated
 export type DiscoveredStatement = z.infer<typeof discoveredStatementSchema>;
 /**
  * Output of `discover` (messages:send): the ships the caller may send to now,
- * each with its name, type, kind, status and statement, and each type with
+ * each with its name, type, kind, status, statement and verified facts, and each type with
  * how many of its ships it reaches (decision 0047). Ships, never rules.
  */
 export declare const discoverOutputSchema: z.ZodObject<{
@@ -173,6 +173,40 @@ export declare const discoverOutputSchema: z.ZodObject<{
             by: z.ZodLiteral<"commission">;
             note: z.ZodString;
         }, z.core.$strip>], "by">>;
+        verified: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            checked: z.ZodEnum<{
+                clientIdDocumentDomain: "clientIdDocumentDomain";
+                tlsHost: "tlsHost";
+                a2aCardDomain: "a2aCardDomain";
+            }>;
+            value: z.ZodString;
+            by: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"ship">;
+                id: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"account">;
+                id: z.core.$ZodBranded<z.ZodString, "AccountId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"installation">;
+            }, z.core.$strict>], "kind">;
+            at: z.ZodISODateTime;
+        }, z.core.$strict>, z.ZodObject<{
+            checked: z.ZodLiteral<"oauthSubject">;
+            issuer: z.ZodString;
+            value: z.ZodString;
+            by: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"ship">;
+                id: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+                name: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"account">;
+                id: z.core.$ZodBranded<z.ZodString, "AccountId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"installation">;
+            }, z.core.$strict>], "kind">;
+            at: z.ZodISODateTime;
+        }, z.core.$strict>], "checked">>;
     }, z.core.$strip>>;
     types: z.ZodArray<z.ZodObject<{
         type: z.ZodString;

package/dist/schemas/statement.js

@@ -2,6 +2,7 @@ import { z } from 'zod';
 import { shipKindSchema, shipStatusSchema } from '../fleet/index.js';
 import { idSchema } from '../ids/index.js';
 import { contentTypeSchema } from './message.js';
+import { discoveredVerifiedFactSchema } from './verified-fact.js';
 /**
  * A ship's statement (decision 0047): what it is and what it offers, stated
  * by its crew and read by the ships that can send to it. A short summary and
@@ -97,7 +98,7 @@ export const discoveredStatementSchema = z
     .nullable();
 /**
  * Output of `discover` (messages:send): the ships the caller may send to now,
- * each with its name, type, kind, status and statement, and each type with
+ * each with its name, type, kind, status, statement and verified facts, and each type with
  * how many of its ships it reaches (decision 0047). Ships, never rules.
  */
 export const discoverOutputSchema = z.object({
@@ -108,6 +109,8 @@ export const discoverOutputSchema = z.object({
         kind: shipKindSchema,
         status: shipStatusSchema,
         statement: discoveredStatementSchema,
+        /** The facts actors checked about it, oldest first, each naming its writer (decision 0059). */
+        verified: z.array(discoveredVerifiedFactSchema),
     })),
     types: z.array(z.object({ type: z.string(), reachable: z.int().min(1) })),
 });

package/dist/schemas/statement.js.map

@@ -1 +1 @@
-{"version":3,"file":"statement.js","sourceRoot":"","sources":["../../src/schemas/statement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD;;;;;;;;;GASG;AAEH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,gDAAgD;AAChD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,0FAA0F;AAC1F,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAElD,MAAM,uBAAuB,GAAG,+EAA+E,CAAC;AAEhH,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAExD,mHAAmH;AACnH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,oFAAoF;AACpF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElE,oGAAoG;AACpG,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAC;AAEtF,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,uBAAuB,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACzC,qFAAqF;IACrF,UAAU,EAAE,WAAW,CAAC,QAAQ,EAAE;IAClC,6FAA6F;IAC7F,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC7D,gHAAgH;IAChH,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;IACrE,uGAAuG;IACvG,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,+DAA+D;IAC/D,WAAW,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAIH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,SAAkB;IAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAC3D,CAAC;AAED,MAAM,sBAAsB,GAAG,0BAA0B,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,CAAC;AAEtH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,YAAY,CAAC;IACZ,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;SACnC,GAAG,CAAC,4BAA4B,EAAE,wBAAwB,MAAM,CAAC,4BAA4B,CAAC,aAAa,CAAC;IAC/G,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACxC,CAAC;KACD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE;IAClI,OAAO,EAAE,wCAAwC;IACjD,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CAAC;KACD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,mBAAmB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAIhH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC;AAEvD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,kBAAkB,CAAC,IAAI,EAAE;IACxB,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC1H,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC5D,CAAC;KACD,QAAQ,EAAE,CAAC;AAId;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,yBAAyB;KACrC,CAAC,CACH;IACD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;CAC1E,CAAC,CAAC"}
+{"version":3,"file":"statement.js","sourceRoot":"","sources":["../../src/schemas/statement.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAElE;;;;;;;;;GASG;AAEH,2GAA2G;AAC3G,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,gDAAgD;AAChD,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD,0FAA0F;AAC1F,MAAM,eAAe,GAAG,yBAAyB,CAAC;AAElD,MAAM,uBAAuB,GAAG,+EAA+E,CAAC;AAEhH,qFAAqF;AACrF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAExD,mHAAmH;AACnH,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,oFAAoF;AACpF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAElE,oGAAoG;AACpG,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,sFAAsF;AACtF,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC,CAAC;AAEtF,mFAAmF;AACnF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,YAAY,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,uBAAuB,CAAC;IAChE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACzC,qFAAqF;IACrF,UAAU,EAAE,WAAW,CAAC,QAAQ,EAAE;IAClC,6FAA6F;IAC7F,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE;IAC7D,gHAAgH;IAChH,UAAU,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,QAAQ,EAAE;IACrE,uGAAuG;IACvG,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,+DAA+D;IAC/D,WAAW,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAIH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B,4DAA4D;AAC5D,MAAM,UAAU,cAAc,CAAC,SAAkB;IAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;AAC3D,CAAC;AAED,MAAM,sBAAsB,GAAG,0BAA0B,MAAM,CAAC,mBAAmB,CAAC,iCAAiC,CAAC;AAEtH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,YAAY,CAAC;IACZ,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,2BAA2B,CAAC;SACnC,GAAG,CAAC,4BAA4B,EAAE,wBAAwB,MAAM,CAAC,4BAA4B,CAAC,aAAa,CAAC;IAC/G,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACxC,CAAC;KACD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE;IAClI,OAAO,EAAE,wCAAwC;IACjD,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CAAC;KACD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,mBAAmB,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AAIhH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,eAAe,CAAC;AAEvD,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,kBAAkB,CAAC,IAAI,EAAE;IACxB,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC1H,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC5D,CAAC;KACD,QAAQ,EAAE,CAAC;AAId;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gBAAgB;QACxB,SAAS,EAAE,yBAAyB;QACpC,+FAA+F;QAC/F,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;KAChD,CAAC,CACH;IACD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;CAC1E,CAAC,CAAC"}

package/dist/schemas/verified-fact.d.ts

@@ -0,0 +1,109 @@
+import { z } from 'zod';
+/**
+ * A verified fact (decision 0059): what an actor checked about a ship, stored
+ * as its writer wrote it and shown beside the ship's statement in discovery,
+ * naming the writer. One fixed shape: what was checked, from a closed list,
+ * the value the check found, and the issuer only where a value means
+ * something under one. Core checks the shape and acts on none of it.
+ */
+/**
+ * What a writer may have checked: the domain a client id document came from,
+ * the host a TLS certificate was valid for, the domain an A2A card came from,
+ * and the subject an OAuth issuer issued a credential to.
+ */
+export declare const VERIFIED_CHECKS: readonly ["clientIdDocumentDomain", "tlsHost", "a2aCardDomain", "oauthSubject"];
+export declare const verifiedCheckSchema: z.ZodEnum<{
+    clientIdDocumentDomain: "clientIdDocumentDomain";
+    tlsHost: "tlsHost";
+    a2aCardDomain: "a2aCardDomain";
+    oauthSubject: "oauthSubject";
+}>;
+export type VerifiedCheck = z.infer<typeof verifiedCheckSchema>;
+/** The longest value a fact holds: a domain, a host or a subject. */
+export declare const VERIFIED_FACT_VALUE_MAX_LENGTH = 255;
+/** The longest issuer a fact names. */
+export declare const VERIFIED_FACT_ISSUER_MAX_LENGTH = 2048;
+/** The most facts one writer holds about one ship. */
+export declare const VERIFIED_FACTS_MAX = 10;
+/** One fact as its writer writes it: an OAuth subject with its issuer, every other check without one. */
+export declare const verifiedFactSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    checked: z.ZodEnum<{
+        clientIdDocumentDomain: "clientIdDocumentDomain";
+        tlsHost: "tlsHost";
+        a2aCardDomain: "a2aCardDomain";
+    }>;
+    value: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    checked: z.ZodLiteral<"oauthSubject">;
+    issuer: z.ZodString;
+    value: z.ZodString;
+}, z.core.$strict>], "checked">;
+export type VerifiedFact = z.infer<typeof verifiedFactSchema>;
+/**
+ * Input of `fleet.setVerifiedFacts` (fleet:verify): the ship written about
+ * and the caller's facts about it, whole, each fact once; none withdraws
+ * them.
+ */
+export declare const setVerifiedFactsInputSchema: z.ZodObject<{
+    shipId: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    facts: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        checked: z.ZodEnum<{
+            clientIdDocumentDomain: "clientIdDocumentDomain";
+            tlsHost: "tlsHost";
+            a2aCardDomain: "a2aCardDomain";
+        }>;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        checked: z.ZodLiteral<"oauthSubject">;
+        issuer: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>], "checked">>;
+}, z.core.$strip>;
+/** Output of `fleet.setVerifiedFacts`: nothing; the OK is the answer. */
+export declare const setVerifiedFactsOutputSchema: z.ZodObject<{}, z.core.$strict>;
+/** Who wrote a fact, as discovery names an actor (decision 0057): a ship by id and name, an account by its id only, or the installation. */
+export declare const factWriterSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"ship">;
+    id: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+    name: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"account">;
+    id: z.core.$ZodBranded<z.ZodString, "AccountId", "out">;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"installation">;
+}, z.core.$strict>], "kind">;
+export declare const discoveredVerifiedFactSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    checked: z.ZodEnum<{
+        clientIdDocumentDomain: "clientIdDocumentDomain";
+        tlsHost: "tlsHost";
+        a2aCardDomain: "a2aCardDomain";
+    }>;
+    value: z.ZodString;
+    by: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ship">;
+        id: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"account">;
+        id: z.core.$ZodBranded<z.ZodString, "AccountId", "out">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"installation">;
+    }, z.core.$strict>], "kind">;
+    at: z.ZodISODateTime;
+}, z.core.$strict>, z.ZodObject<{
+    checked: z.ZodLiteral<"oauthSubject">;
+    issuer: z.ZodString;
+    value: z.ZodString;
+    by: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ship">;
+        id: z.ZodType<`shp_${string}`, unknown, z.core.$ZodTypeInternals<`shp_${string}`, unknown>>;
+        name: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"account">;
+        id: z.core.$ZodBranded<z.ZodString, "AccountId", "out">;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"installation">;
+    }, z.core.$strict>], "kind">;
+    at: z.ZodISODateTime;
+}, z.core.$strict>], "checked">;
+export type DiscoveredVerifiedFact = z.infer<typeof discoveredVerifiedFactSchema>;

package/dist/schemas/verified-fact.js

@@ -0,0 +1,57 @@
+import { z } from 'zod';
+import { idSchema } from '../ids/index.js';
+import { accountIdSchema } from './account-token.js';
+/**
+ * A verified fact (decision 0059): what an actor checked about a ship, stored
+ * as its writer wrote it and shown beside the ship's statement in discovery,
+ * naming the writer. One fixed shape: what was checked, from a closed list,
+ * the value the check found, and the issuer only where a value means
+ * something under one. Core checks the shape and acts on none of it.
+ */
+/**
+ * What a writer may have checked: the domain a client id document came from,
+ * the host a TLS certificate was valid for, the domain an A2A card came from,
+ * and the subject an OAuth issuer issued a credential to.
+ */
+export const VERIFIED_CHECKS = ['clientIdDocumentDomain', 'tlsHost', 'a2aCardDomain', 'oauthSubject'];
+export const verifiedCheckSchema = z.enum(VERIFIED_CHECKS);
+/** The longest value a fact holds: a domain, a host or a subject. */
+export const VERIFIED_FACT_VALUE_MAX_LENGTH = 255;
+/** The longest issuer a fact names. */
+export const VERIFIED_FACT_ISSUER_MAX_LENGTH = 2048;
+/** The most facts one writer holds about one ship. */
+export const VERIFIED_FACTS_MAX = 10;
+const valueSchema = z.string().min(1).max(VERIFIED_FACT_VALUE_MAX_LENGTH);
+/** One fact as its writer writes it: an OAuth subject with its issuer, every other check without one. */
+export const verifiedFactSchema = z.discriminatedUnion('checked', [
+    z.strictObject({ checked: z.enum(['clientIdDocumentDomain', 'tlsHost', 'a2aCardDomain']), value: valueSchema }),
+    z.strictObject({ checked: z.literal('oauthSubject'), issuer: z.string().min(1).max(VERIFIED_FACT_ISSUER_MAX_LENGTH), value: valueSchema }),
+]);
+/** The same fact twice is the same check, issuer and value. */
+function factKey(fact) {
+    return JSON.stringify([fact.checked, 'issuer' in fact ? fact.issuer : null, fact.value]);
+}
+/**
+ * Input of `fleet.setVerifiedFacts` (fleet:verify): the ship written about
+ * and the caller's facts about it, whole, each fact once; none withdraws
+ * them.
+ */
+export const setVerifiedFactsInputSchema = z.object({
+    shipId: idSchema('ship'),
+    facts: z
+        .array(verifiedFactSchema)
+        .max(VERIFIED_FACTS_MAX, `A writer holds at most ${String(VERIFIED_FACTS_MAX)} facts about a ship`)
+        .refine((facts) => new Set(facts.map(factKey)).size === facts.length, 'Each fact once'),
+});
+/** Output of `fleet.setVerifiedFacts`: nothing; the OK is the answer. */
+export const setVerifiedFactsOutputSchema = z.strictObject({});
+/** Who wrote a fact, as discovery names an actor (decision 0057): a ship by id and name, an account by its id only, or the installation. */
+export const factWriterSchema = z.discriminatedUnion('kind', [
+    z.strictObject({ kind: z.literal('ship'), id: idSchema('ship'), name: z.string() }),
+    z.strictObject({ kind: z.literal('account'), id: accountIdSchema }),
+    z.strictObject({ kind: z.literal('installation') }),
+]);
+/** A fact as discovery shows it: as written, with its writer and when it was written. */
+const writtenBy = { by: factWriterSchema, at: z.iso.datetime() };
+export const discoveredVerifiedFactSchema = z.discriminatedUnion('checked', [verifiedFactSchema.options[0].extend(writtenBy), verifiedFactSchema.options[1].extend(writtenBy)]);
+//# sourceMappingURL=verified-fact.js.map

package/dist/schemas/verified-fact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verified-fact.js","sourceRoot":"","sources":["../../src/schemas/verified-fact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD;;;;;;GAMG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,wBAAwB,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,CAAU,CAAC;AAC/G,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AAG3D,qEAAqE;AACrE,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAElD,uCAAuC;AACvC,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAEpD,sDAAsD;AACtD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;AAE1E,yGAAyG;AACzG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IAChE,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,wBAAwB,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC/G,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;CAC3I,CAAC,CAAC;AAGH,+DAA+D;AAC/D,SAAS,OAAO,CAAC,IAAkB;IACjC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;IACxB,KAAK,EAAE,CAAC;SACL,KAAK,CAAC,kBAAkB,CAAC;SACzB,GAAG,CAAC,kBAAkB,EAAE,0BAA0B,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC;SAClG,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC;CAC1F,CAAC,CAAC;AAEH,yEAAyE;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAE/D,4IAA4I;AAC5I,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACnF,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC;IACnE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;CACpD,CAAC,CAAC;AAEH,yFAAyF;AACzF,MAAM,SAAS,GAAG,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;AACjE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC"}

package/dist/trierarch/crew-settings.js

@@ -37,7 +37,7 @@ export const crewSettingsSchema = z.strictObject({
     options: z.record(z.string(), z.json()),
     /**
      * The label values a machine carries every one of for the request to go to
-     * it (#102; docs/trierarch.md, "Machine labels"): exact matches, AND. A
+     * it (#102; aeolus-fleet-trierarch's docs/trierarch.md, "Machine labels"): exact matches, AND. A
      * machine carries at most 20, so no more can match. None: any machine.
      */
     machineLabels: z.array(idSchema('labelValue')).max(SHIP_LABELS_MAX).optional(),

package/dist/trierarch/report-details.js

@@ -9,7 +9,7 @@ export const MACHINE_ARCH = ['arm64', 'amd64'];
 /** Where a trierarch runs its sessions: on the host or each in a container of its own (decision 0039). */
 export const SESSION_RUNTIMES = ['host', 'container'];
 /**
- * The details of a trierarch's report (docs/trierarch.md, "What a trierarch
+ * The details of a trierarch's report (aeolus-fleet-trierarch's docs/trierarch.md, "What a trierarch
  * reports"; decision 0028): what its machine can do, read from its local
  * configuration and what runs. The trierarch plugin places crew requests
  * from them. No entry per ship: each crew request carries its own status.
@@ -48,7 +48,7 @@ export const trierarchReportDetailsSchema = z.strictObject({
     orphans: z.array(z.strictObject({ repository: worktreeFolderNameSchema, name: worktreeFolderNameSchema })),
     /**
      * The machine it runs on, for the trierarch plugin to label its ship by
-     * (docs/trierarch.md, "Machine labels"): an os or arch outside the known
+     * (aeolus-fleet-trierarch's docs/trierarch.md, "Machine labels"): an os or arch outside the known
      * ones is left out. None from a trierarch before 0.20.0.
      */
     machine: z.strictObject({ os: z.enum(MACHINE_OS).optional(), arch: z.enum(MACHINE_ARCH).optional() }).optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeolus-fleet/common",
-  "version": "0.27.1",
+  "version": "0.28.1",
   "description": "Shared schemas and ids for Aeolus packages.",
   "keywords": [
     "aeolus"
@@ -18,12 +18,10 @@
   },
   "exports": {
     ".": {
-      "@aeolus-fleet/source": "./src/index.ts",
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
     "./rules": {
-      "@aeolus-fleet/source": "./src/rules/index.ts",
       "types": "./dist/rules/index.d.ts",
       "default": "./dist/rules/index.js"
     }