@aeolus-fleet/common 0.33.0 → 0.35.0

package/dist/schemas/network.d.ts

@@ -262,9 +262,9 @@ export declare const FIXED_BUILT_IN_RULES: readonly ["argo", "owner", "answer",
 export declare const setBuiltInRuleInputSchema: z.ZodObject<{
     rule: z.ZodEnum<{
         meeting: "meeting";
+        owner: "owner";
         argo: "argo";
         installation: "installation";
-        owner: "owner";
         open: "open";
         answer: "answer";
         pluginRead: "pluginRead";
@@ -277,9 +277,9 @@ export type SetBuiltInRuleInput = z.infer<typeof setBuiltInRuleInputSchema>;
 export declare const builtInRuleStateSchema: z.ZodObject<{
     rule: z.ZodEnum<{
         meeting: "meeting";
+        owner: "owner";
         argo: "argo";
         installation: "installation";
-        owner: "owner";
         open: "open";
         answer: "answer";
         pluginRead: "pluginRead";
@@ -292,9 +292,9 @@ export type BuiltInRuleState = z.infer<typeof builtInRuleStateSchema>;
 export declare const builtInRulesOutputSchema: z.ZodArray<z.ZodObject<{
     rule: z.ZodEnum<{
         meeting: "meeting";
+        owner: "owner";
         argo: "argo";
         installation: "installation";
-        owner: "owner";
         open: "open";
         answer: "answer";
         pluginRead: "pluginRead";
@@ -603,9 +603,9 @@ export declare const explainReachInputSchema: z.ZodObject<{
 export declare const reachRuleSchema: z.ZodUnion<readonly [z.ZodObject<{
     builtIn: z.ZodEnum<{
         meeting: "meeting";
+        owner: "owner";
         argo: "argo";
         installation: "installation";
-        owner: "owner";
         open: "open";
         answer: "answer";
         pluginRead: "pluginRead";
@@ -630,9 +630,9 @@ export declare const explainReachOutputSchema: z.ZodObject<{
         rule: z.ZodUnion<readonly [z.ZodObject<{
             builtIn: z.ZodEnum<{
                 meeting: "meeting";
+                owner: "owner";
                 argo: "argo";
                 installation: "installation";
-                owner: "owner";
                 open: "open";
                 answer: "answer";
                 pluginRead: "pluginRead";
@@ -655,9 +655,9 @@ export declare const explainReachOutputSchema: z.ZodObject<{
         rule: z.ZodUnion<readonly [z.ZodObject<{
             builtIn: z.ZodEnum<{
                 meeting: "meeting";
+                owner: "owner";
                 argo: "argo";
                 installation: "installation";
-                owner: "owner";
                 open: "open";
                 answer: "answer";
                 pluginRead: "pluginRead";
@@ -680,9 +680,9 @@ export declare const explainReachOutputSchema: z.ZodObject<{
         rule: z.ZodUnion<readonly [z.ZodObject<{
             builtIn: z.ZodEnum<{
                 meeting: "meeting";
+                owner: "owner";
                 argo: "argo";
                 installation: "installation";
-                owner: "owner";
                 open: "open";
                 answer: "answer";
                 pluginRead: "pluginRead";
@@ -716,9 +716,9 @@ export declare const networkRulesDraftChangesOutputSchema: z.ZodObject<{
             rule: z.ZodUnion<readonly [z.ZodObject<{
                 builtIn: z.ZodEnum<{
                     meeting: "meeting";
+                    owner: "owner";
                     argo: "argo";
                     installation: "installation";
-                    owner: "owner";
                     open: "open";
                     answer: "answer";
                     pluginRead: "pluginRead";
@@ -742,9 +742,9 @@ export declare const networkRulesDraftChangesOutputSchema: z.ZodObject<{
             rule: z.ZodUnion<readonly [z.ZodObject<{
                 builtIn: z.ZodEnum<{
                     meeting: "meeting";
+                    owner: "owner";
                     argo: "argo";
                     installation: "installation";
-                    owner: "owner";
                     open: "open";
                     answer: "answer";
                     pluginRead: "pluginRead";
@@ -770,9 +770,9 @@ export declare const networkRulesDraftChangesOutputSchema: z.ZodObject<{
             rule: z.ZodUnion<readonly [z.ZodObject<{
                 builtIn: z.ZodEnum<{
                     meeting: "meeting";
+                    owner: "owner";
                     argo: "argo";
                     installation: "installation";
-                    owner: "owner";
                     open: "open";
                     answer: "answer";
                     pluginRead: "pluginRead";
@@ -796,9 +796,9 @@ export declare const networkRulesDraftChangesOutputSchema: z.ZodObject<{
             rule: z.ZodUnion<readonly [z.ZodObject<{
                 builtIn: z.ZodEnum<{
                     meeting: "meeting";
+                    owner: "owner";
                     argo: "argo";
                     installation: "installation";
-                    owner: "owner";
                     open: "open";
                     answer: "answer";
                     pluginRead: "pluginRead";
@@ -824,9 +824,9 @@ export declare const networkRulesDraftChangesOutputSchema: z.ZodObject<{
             rule: z.ZodUnion<readonly [z.ZodObject<{
                 builtIn: z.ZodEnum<{
                     meeting: "meeting";
+                    owner: "owner";
                     argo: "argo";
                     installation: "installation";
-                    owner: "owner";
                     open: "open";
                     answer: "answer";
                     pluginRead: "pluginRead";
@@ -850,9 +850,9 @@ export declare const networkRulesDraftChangesOutputSchema: z.ZodObject<{
             rule: z.ZodUnion<readonly [z.ZodObject<{
                 builtIn: z.ZodEnum<{
                     meeting: "meeting";
+                    owner: "owner";
                     argo: "argo";
                     installation: "installation";
-                    owner: "owner";
                     open: "open";
                     answer: "answer";
                     pluginRead: "pluginRead";

package/dist/schemas/operator-inbox.d.ts

@@ -38,6 +38,7 @@ export declare const inboxMessageSchema: z.ZodObject<{
         id: z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>;
         contentType: z.ZodString;
         payload: z.ZodString;
+        isPayloadUnreadable: z.ZodBoolean;
         sentAt: z.ZodISODateTime;
     }, z.core.$strip>>;
     message: z.ZodObject<{
@@ -51,6 +52,8 @@ export declare const inboxMessageSchema: z.ZodObject<{
         contentType: z.ZodString;
         model: z.ZodNullable<z.ZodString>;
         payload: z.ZodString;
+        isPayloadUnreadable: z.ZodBoolean;
+        isPayloadSealed: z.ZodBoolean;
     }, z.core.$strip>;
 }, z.core.$strip>;
 export type InboxMessage = z.infer<typeof inboxMessageSchema>;
@@ -76,6 +79,7 @@ export declare const operatorInboxOutputSchema: z.ZodObject<{
             id: z.ZodType<`msg_${string}`, unknown, z.core.$ZodTypeInternals<`msg_${string}`, unknown>>;
             contentType: z.ZodString;
             payload: z.ZodString;
+            isPayloadUnreadable: z.ZodBoolean;
             sentAt: z.ZodISODateTime;
         }, z.core.$strip>>;
         message: z.ZodObject<{
@@ -89,6 +93,8 @@ export declare const operatorInboxOutputSchema: z.ZodObject<{
             contentType: z.ZodString;
             model: z.ZodNullable<z.ZodString>;
             payload: z.ZodString;
+            isPayloadUnreadable: z.ZodBoolean;
+            isPayloadSealed: z.ZodBoolean;
         }, z.core.$strip>;
     }, z.core.$strip>>;
     nextCursor: z.ZodNullable<z.ZodType<`dlv_${string}`, unknown, z.core.$ZodTypeInternals<`dlv_${string}`, unknown>>>;

package/dist/schemas/operator-inbox.js

@@ -27,7 +27,7 @@ export const inboxMessageSchema = z.object({
     /** The reply that acknowledged it, when a reply did. */
     repliedWith: idSchema('message').nullable(),
     /** Every reply argo sent to it, oldest first: what a console reads an answer from (decision 0038). */
-    replies: z.array(z.object({ id: idSchema('message'), contentType: z.string(), payload: z.string(), sentAt: isoTime })),
+    replies: z.array(z.object({ id: idSchema('message'), contentType: z.string(), payload: z.string(), isPayloadUnreadable: z.boolean(), sentAt: isoTime })),
     message: z.object({
         id: idSchema('message'),
         sender: partySchema,
@@ -37,6 +37,10 @@ export const inboxMessageSchema = z.object({
         /** The model the sender's session stated it runs. */
         model: z.string().nullable(),
         payload: z.string(),
+        /** Its payload is sealed under a data key that cannot be had now, or does not open: the payload is empty (decision 0068, B9). */
+        isPayloadUnreadable: z.boolean(),
+        /** Its payload is stored sealed: the console marks it (decision 0068, N1). */
+        isPayloadSealed: z.boolean(),
     }),
 });
 /** Output of `fleet.inbox`: a page of the messages to argo the filter keeps, newest first. */

package/dist/schemas/operator-inbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"operator-inbox.js","sourceRoot":"","sources":["../../src/schemas/operator-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEtD;;;;GAIG;AAEH,uBAAuB;AACvB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAEjC,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGvD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAE5H,gJAAgJ;AAChJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;IAChC,KAAK,EAAE,mBAAmB;IAC1B,sDAAsD;IACtD,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC1B,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC1B,wDAAwD;IACxD,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC3C,sGAAsG;IACtG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACtH,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC;QACvB,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;QACzC,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,qDAAqD;QACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC;CACH,CAAC,CAAC;AAIH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAC,kBAAkB,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAEhG,iHAAiH;AACjH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAEtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAE1H,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAEvG,iHAAiH;AACjH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAEhF,sFAAsF;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAE1D,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;IAChC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO;IACtC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,eAAe,CAAC,KAAK,CAAC,cAAc;CACrD,CAAC,CAAC;AAEH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC"}
+{"version":3,"file":"operator-inbox.js","sourceRoot":"","sources":["../../src/schemas/operator-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEtD;;;;GAIG;AAEH,uBAAuB;AACvB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;AAEjC,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAU,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGvD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAE5H,gJAAgJ;AAChJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;IAChC,KAAK,EAAE,mBAAmB;IAC1B,sDAAsD;IACtD,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC1B,iDAAiD;IACjD,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC1B,wDAAwD;IACxD,WAAW,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAC3C,sGAAsG;IACtG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACxJ,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC;QACvB,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;QACzC,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,qDAAqD;QACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,iIAAiI;QACjI,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;QAChC,8EAA8E;QAC9E,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;KAC7B,CAAC;CACH,CAAC,CAAC;AAIH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAC,kBAAkB,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AAEhG,iHAAiH;AACjH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAEtF;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAE1H,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAEvG,iHAAiH;AACjH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAEhF,sFAAsF;AACtF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAE1D,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;AAElF;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;IAChC,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO;IACtC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,eAAe,CAAC,KAAK,CAAC,cAAc;CACrD,CAAC,CAAC;AAEH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC"}

package/dist/schemas/report.d.ts

@@ -22,11 +22,33 @@ export declare function reportDetailsBytes(details: ReportDetails): number;
 /** A report's details: one JSON object, whose meaning lives outside the server (decision 0028). */
 export declare const reportDetailsSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
 export type ReportDetails = z.infer<typeof reportDetailsSchema>;
+/** The longest a url task's URL may be. */
+export declare const REPORT_TASK_URL_MAX_LENGTH = 512;
+/** The most steps a report's step may count. */
+export declare const REPORT_STEP_MAX = 1000;
+/**
+ * What a crew works on, as a typed reference to where the work lives, never
+ * its content: a `kind` and that kind's fields (docs/design/monitoring,
+ * 4.2). Core checks the kinds it knows: `url` (`url`, an absolute https URL)
+ * and `message` (`fleetId`, `messageId`); a kind it does not know is taken
+ * unchecked, so a newer ship never blocks on an older core.
+ */
+export declare const reportTaskSchema: z.ZodObject<{
+    kind: z.ZodString;
+}, z.core.$catchall<z.ZodJSONSchema>>;
+export type ReportTask = z.infer<typeof reportTaskSchema>;
+/** Where a crew is in its task: step `at` of `of`, whole numbers with 1 <= at <= of <= 1000. */
+export declare const reportStepSchema: z.ZodObject<{
+    at: z.ZodNumber;
+    of: z.ZodNumber;
+}, z.core.$strip>;
+export type ReportStep = z.infer<typeof reportStepSchema>;
 /**
  * Input of `report`: the crew's state and a short note on what it is doing,
  * trimmed, and optionally its details. `details` sets them whole, null clears
  * them; `detailsPatch` applies a JSON Merge Patch (RFC 7386) to them; never
- * both. Left out, the details stay as they are. Calling it is a check-in.
+ * both. Left out, the details stay as they are. `task` and `step` likewise:
+ * left out they stay, null clears them. Calling it is a check-in.
  */
 export declare const reportInputSchema: z.ZodObject<{
     state: z.ZodEnum<{
@@ -37,14 +59,22 @@ export declare const reportInputSchema: z.ZodObject<{
     note: z.ZodOptional<z.ZodString>;
     details: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>>;
     detailsPatch: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>>;
+    task: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        kind: z.ZodString;
+    }, z.core.$catchall<z.ZodJSONSchema>>>>;
+    step: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        at: z.ZodNumber;
+        of: z.ZodNumber;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type ReportInput = z.infer<typeof reportInputSchema>;
 /** Output of `report`: nothing; the OK is the answer. */
 export declare const reportOutputSchema: z.ZodObject<{}, z.core.$strict>;
 /**
  * A crew's report as the fleet list shows it (ISO 8601 in UTC): its state,
- * its note, when it last reported, and the version of its details, which
- * moves each time they change (0 before any).
+ * its note, its task and step, when it last reported, when the report last
+ * changed (state, note, task or step; details do not count), and the version
+ * of its details, which moves each time they change (0 before any).
  */
 export declare const listedReportSchema: z.ZodObject<{
     state: z.ZodEnum<{
@@ -53,7 +83,19 @@ export declare const listedReportSchema: z.ZodObject<{
         idle: "idle";
     }>;
     note: z.ZodNullable<z.ZodString>;
+    task: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodString;
+    }, z.core.$catchall<z.ZodJSONSchema>>>;
+    taskView: z.ZodOptional<z.ZodObject<{
+        canOpen: z.ZodBoolean;
+        fleetName: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    step: z.ZodNullable<z.ZodObject<{
+        at: z.ZodNumber;
+        of: z.ZodNumber;
+    }, z.core.$strip>>;
     reportedAt: z.ZodISODateTime;
+    reportChangedAt: z.ZodISODateTime;
     detailsVersion: z.ZodInt;
 }, z.core.$strip>;
 /** A crew's report whole: as the fleet list shows it, with its details; null when it has none. */
@@ -64,7 +106,19 @@ export declare const reportSchema: z.ZodObject<{
         idle: "idle";
     }>;
     note: z.ZodNullable<z.ZodString>;
+    task: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodString;
+    }, z.core.$catchall<z.ZodJSONSchema>>>;
+    taskView: z.ZodOptional<z.ZodObject<{
+        canOpen: z.ZodBoolean;
+        fleetName: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    step: z.ZodNullable<z.ZodObject<{
+        at: z.ZodNumber;
+        of: z.ZodNumber;
+    }, z.core.$strip>>;
     reportedAt: z.ZodISODateTime;
+    reportChangedAt: z.ZodISODateTime;
     detailsVersion: z.ZodInt;
     details: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
 }, z.core.$strip>;
@@ -82,7 +136,19 @@ export declare const reportLogOutputSchema: z.ZodObject<{
             idle: "idle";
         }>;
         note: z.ZodNullable<z.ZodString>;
+        task: z.ZodNullable<z.ZodObject<{
+            kind: z.ZodString;
+        }, z.core.$catchall<z.ZodJSONSchema>>>;
+        taskView: z.ZodOptional<z.ZodObject<{
+            canOpen: z.ZodBoolean;
+            fleetName: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        step: z.ZodNullable<z.ZodObject<{
+            at: z.ZodNumber;
+            of: z.ZodNumber;
+        }, z.core.$strip>>;
         reportedAt: z.ZodISODateTime;
+        reportChangedAt: z.ZodISODateTime;
         detailsVersion: z.ZodInt;
         details: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
     }, z.core.$strip>>;
@@ -93,7 +159,19 @@ export declare const reportLogOutputSchema: z.ZodObject<{
             idle: "idle";
         }>;
         note: z.ZodNullable<z.ZodString>;
+        task: z.ZodNullable<z.ZodObject<{
+            kind: z.ZodString;
+        }, z.core.$catchall<z.ZodJSONSchema>>>;
+        taskView: z.ZodOptional<z.ZodObject<{
+            canOpen: z.ZodBoolean;
+            fleetName: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+        step: z.ZodNullable<z.ZodObject<{
+            at: z.ZodNumber;
+            of: z.ZodNumber;
+        }, z.core.$strip>>;
         reportedAt: z.ZodISODateTime;
+        reportChangedAt: z.ZodISODateTime;
         detailsVersion: z.ZodInt;
         details: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
     }, z.core.$strip>>;

package/dist/schemas/report.js

@@ -22,11 +22,26 @@ export function reportDetailsBytes(details) {
 }
 /** A report's details: one JSON object, whose meaning lives outside the server (decision 0028). */
 export const reportDetailsSchema = z.record(z.string(), z.json());
+/** The longest a url task's URL may be. */
+export const REPORT_TASK_URL_MAX_LENGTH = 512;
+/** The most steps a report's step may count. */
+export const REPORT_STEP_MAX = 1000;
+/**
+ * What a crew works on, as a typed reference to where the work lives, never
+ * its content: a `kind` and that kind's fields (docs/design/monitoring,
+ * 4.2). Core checks the kinds it knows: `url` (`url`, an absolute https URL)
+ * and `message` (`fleetId`, `messageId`); a kind it does not know is taken
+ * unchecked, so a newer ship never blocks on an older core.
+ */
+export const reportTaskSchema = z.object({ kind: z.string() }).catchall(z.json());
+/** Where a crew is in its task: step `at` of `of`, whole numbers with 1 <= at <= of <= 1000. */
+export const reportStepSchema = z.object({ at: z.number(), of: z.number() });
 /**
  * Input of `report`: the crew's state and a short note on what it is doing,
  * trimmed, and optionally its details. `details` sets them whole, null clears
  * them; `detailsPatch` applies a JSON Merge Patch (RFC 7386) to them; never
- * both. Left out, the details stay as they are. Calling it is a check-in.
+ * both. Left out, the details stay as they are. `task` and `step` likewise:
+ * left out they stay, null clears them. Calling it is a check-in.
  */
 export const reportInputSchema = z
     .object({
@@ -34,6 +49,8 @@ export const reportInputSchema = z
     note: z.string().trim().max(REPORT_NOTE_MAX_LENGTH, NOTE_MESSAGE).refine(isOneLine, NOTE_MESSAGE).optional(),
     details: reportDetailsSchema.nullable().optional(),
     detailsPatch: reportDetailsSchema.nullable().optional(),
+    task: reportTaskSchema.nullable().optional(),
+    step: reportStepSchema.nullable().optional(),
 })
     .refine((input) => input.details === undefined || input.detailsPatch === undefined, {
     message: 'Give details or detailsPatch, not both',
@@ -43,13 +60,19 @@ export const reportInputSchema = z
 export const reportOutputSchema = z.strictObject({});
 /**
  * A crew's report as the fleet list shows it (ISO 8601 in UTC): its state,
- * its note, when it last reported, and the version of its details, which
- * moves each time they change (0 before any).
+ * its note, its task and step, when it last reported, when the report last
+ * changed (state, note, task or step; details do not count), and the version
+ * of its details, which moves each time they change (0 before any).
  */
 export const listedReportSchema = z.object({
     state: reportStateSchema,
     note: z.string().nullable(),
+    task: reportTaskSchema.nullable(),
+    /** Viewer-specific read metadata, kept apart from the canonical task reference. */
+    taskView: z.object({ canOpen: z.boolean(), fleetName: z.string().nullable() }).optional(),
+    step: reportStepSchema.nullable(),
     reportedAt: z.iso.datetime(),
+    reportChangedAt: z.iso.datetime(),
     detailsVersion: z.int().min(0),
 });
 /** A crew's report whole: as the fleet list shows it, with its details; null when it has none. */

package/dist/schemas/report.js.map

@@ -1 +1 @@
-{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/schemas/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8FAA8F;AAC9F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGvD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,MAAM,YAAY,GAAG,iCAAiC,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC;AAElG,uCAAuC;AACvC,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,OAAsB;IACvD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AACzD,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAIlE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,iBAAiB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,EAAE;IAC5G,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxD,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE;IAClF,OAAO,EAAE,wCAAwC;IACjD,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CAAC,CAAC;AAIL,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,iBAAiB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC5B,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH,kGAAkG;AAClG,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAInG;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC"}
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/schemas/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,8FAA8F;AAC9F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AACrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAGvD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,MAAM,YAAY,GAAG,iCAAiC,MAAM,CAAC,sBAAsB,CAAC,aAAa,CAAC;AAElG,uCAAuC;AACvC,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAElD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAE/B,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,OAAsB;IACvD,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;AACzD,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAIlE,2CAA2C;AAC3C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAE9C,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAIlF,gGAAgG;AAChG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAI7E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,iBAAiB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,QAAQ,EAAE;IAC5G,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,YAAY,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE;IAClF,OAAO,EAAE,wCAAwC;IACjD,IAAI,EAAE,CAAC,cAAc,CAAC;CACvB,CAAC,CAAC;AAIL,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAErD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,iBAAiB;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,mFAAmF;IACnF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzF,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC5B,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH,kGAAkG;AAClG,MAAM,CAAC,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAInG;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC"}

package/dist/schemas/sealing.d.ts

@@ -0,0 +1,126 @@
+import { z } from 'zod';
+/** Input of `fleet.turnOnSealing` (decision 0068): the company key, by its reference in the company's own KMS, and optionally a recovery key. */
+export declare const turnOnSealingInputSchema: z.ZodObject<{
+    companyKey: z.ZodString;
+    recoveryKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Output of `fleet.turnOnSealing`: sealing while payloads stored plain before wait for the sealing pass, else sealed; the recovery key's fingerprint when one was given. */
+export declare const turnOnSealingOutputSchema: z.ZodObject<{
+    state: z.ZodEnum<{
+        sealing: "sealing";
+        sealed: "sealed";
+    }>;
+    companyKey: z.ZodString;
+    recoveryKeyFingerprint: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Input of `fleet.changeCompanyKey` (decision 0068, B13c): the new company key, by its reference in the company's own KMS. */
+export declare const changeCompanyKeyInputSchema: z.ZodObject<{
+    companyKey: z.ZodString;
+}, z.core.$strict>;
+/** Output of `fleet.changeCompanyKey`: the company key that wraps every data key of the fleet now. */
+export declare const changeCompanyKeyOutputSchema: z.ZodObject<{
+    companyKey: z.ZodString;
+}, z.core.$strip>;
+/** Input of `fleet.changeRecoveryKey` (decision 0068, B13d): the new recovery key, the public half of an `age` X25519 key pair. */
+export declare const changeRecoveryKeyInputSchema: z.ZodObject<{
+    recoveryKey: z.ZodString;
+}, z.core.$strict>;
+/** Output of `fleet.changeRecoveryKey`: the fingerprint of the recovery key every data key of the fleet is wrapped to now. */
+export declare const changeRecoveryKeyOutputSchema: z.ZodObject<{
+    recoveryKeyFingerprint: z.ZodString;
+}, z.core.$strip>;
+/** Why the company key vault refused a sealed fleet's company key (decision 0068, B11). */
+export declare const companyKeyUnavailableReasonSchema: z.ZodEnum<{
+    accessDenied: "accessDenied";
+    disabled: "disabled";
+    notFound: "notFound";
+    unreachable: "unreachable";
+}>;
+/** Whether the company key answered the fleet's last unwrap, and since when; the key vault's reason while it refuses. */
+export declare const keyAvailabilitySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    isAvailable: z.ZodLiteral<true>;
+    since: z.ZodISODateTime;
+}, z.core.$strip>, z.ZodObject<{
+    isAvailable: z.ZodLiteral<false>;
+    reason: z.ZodEnum<{
+        accessDenied: "accessDenied";
+        disabled: "disabled";
+        notFound: "notFound";
+        unreachable: "unreachable";
+    }>;
+    since: z.ZodISODateTime;
+}, z.core.$strip>], "isAvailable">;
+/**
+ * Output of `fleet.sealing` (decision 0068, B5): none for a fleet that is not
+ * sealed; else its state and since when (turned on, or sealed), while sealing
+ * how many of the payloads stored plain before are sealed, its company key by reference, its recovery key by
+ * fingerprint (none when the company set none), the key's availability and its data keys oldest first, each with when it was made and
+ * whether it seals now. Never a key, wrapped or not.
+ */
+export declare const sealingOutputSchema: z.ZodUnion<readonly [z.ZodObject<{
+    state: z.ZodLiteral<"none">;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodEnum<{
+        sealing: "sealing";
+        sealed: "sealed";
+    }>;
+    since: z.ZodISODateTime;
+    progress: z.ZodNullable<z.ZodObject<{
+        sealed: z.ZodNumber;
+        total: z.ZodNumber;
+    }, z.core.$strip>>;
+    companyKey: z.ZodString;
+    recoveryKeyFingerprint: z.ZodNullable<z.ZodString>;
+    keyAvailability: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        isAvailable: z.ZodLiteral<true>;
+        since: z.ZodISODateTime;
+    }, z.core.$strip>, z.ZodObject<{
+        isAvailable: z.ZodLiteral<false>;
+        reason: z.ZodEnum<{
+            accessDenied: "accessDenied";
+            disabled: "disabled";
+            notFound: "notFound";
+            unreachable: "unreachable";
+        }>;
+        since: z.ZodISODateTime;
+    }, z.core.$strip>], "isAvailable">;
+    dataKeys: z.ZodArray<z.ZodObject<{
+        id: z.ZodType<`dky_${string}`, unknown, z.core.$ZodTypeInternals<`dky_${string}`, unknown>>;
+        createdAt: z.ZodISODateTime;
+        isCurrent: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>]>;
+/**
+ * Output of `fleet.recoverySet` (decision 0068, B15): the fleet whose
+ * encryption context the new wraps name, its recovery key by fingerprint, and
+ * each data key oldest first, wrapped to the recovery key alone (an age file,
+ * base64) with its check value (HMAC-SHA-256, base64). Only the company's
+ * offline private half opens it.
+ */
+export declare const recoverySetOutputSchema: z.ZodObject<{
+    fleetId: z.ZodType<`flt_${string}`, unknown, z.core.$ZodTypeInternals<`flt_${string}`, unknown>>;
+    recoveryKeyFingerprint: z.ZodString;
+    dataKeys: z.ZodArray<z.ZodObject<{
+        id: z.ZodType<`dky_${string}`, unknown, z.core.$ZodTypeInternals<`dky_${string}`, unknown>>;
+        wrappedByRecoveryKey: z.ZodBase64;
+        checkValue: z.ZodBase64;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * Input of `fleet.recoverKeys` (decision 0068, B15): the new company key, by
+ * its reference in the company's own KMS, and each of the fleet's data keys
+ * wrapped under it for this fleet's context (an AWS KMS ciphertext blob,
+ * base64), as the recovery command made them on the company's computer.
+ */
+export declare const recoverKeysInputSchema: z.ZodObject<{
+    companyKey: z.ZodString;
+    dataKeys: z.ZodArray<z.ZodObject<{
+        id: z.ZodType<`dky_${string}`, unknown, z.core.$ZodTypeInternals<`dky_${string}`, unknown>>;
+        wrappedByCompanyKey: z.ZodBase64;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Output of `fleet.recoverKeys`: the company key that wraps every data key of the fleet now. */
+export declare const recoverKeysOutputSchema: z.ZodObject<{
+    companyKey: z.ZodString;
+}, z.core.$strip>;
+export type SealingOutput = z.infer<typeof sealingOutputSchema>;

package/dist/schemas/sealing.js

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+import { idSchema } from '../ids/index.js';
+/** The longest company key reference taken: an AWS KMS key ARN or alias ARN fits well within it. */
+const COMPANY_KEY_MAX_LENGTH = 2048;
+/** The longest recovery key taken: an age X25519 recipient is 62 characters. */
+const RECOVERY_KEY_MAX_LENGTH = 256;
+/** A recovery key as the company gives it: the public half of an `age` X25519 key pair (`age1...`), checked whole by core. */
+const recoveryKeySchema = z.string().min(1).max(RECOVERY_KEY_MAX_LENGTH);
+/** Input of `fleet.turnOnSealing` (decision 0068): the company key, by its reference in the company's own KMS, and optionally a recovery key. */
+export const turnOnSealingInputSchema = z.strictObject({ companyKey: z.string().min(1).max(COMPANY_KEY_MAX_LENGTH), recoveryKey: recoveryKeySchema.optional() });
+/** Output of `fleet.turnOnSealing`: sealing while payloads stored plain before wait for the sealing pass, else sealed; the recovery key's fingerprint when one was given. */
+export const turnOnSealingOutputSchema = z.object({ state: z.enum(['sealing', 'sealed']), companyKey: z.string(), recoveryKeyFingerprint: z.string().optional() });
+/** Input of `fleet.changeCompanyKey` (decision 0068, B13c): the new company key, by its reference in the company's own KMS. */
+export const changeCompanyKeyInputSchema = z.strictObject({ companyKey: z.string().min(1).max(COMPANY_KEY_MAX_LENGTH) });
+/** Output of `fleet.changeCompanyKey`: the company key that wraps every data key of the fleet now. */
+export const changeCompanyKeyOutputSchema = z.object({ companyKey: z.string() });
+/** Input of `fleet.changeRecoveryKey` (decision 0068, B13d): the new recovery key, the public half of an `age` X25519 key pair. */
+export const changeRecoveryKeyInputSchema = z.strictObject({ recoveryKey: recoveryKeySchema });
+/** Output of `fleet.changeRecoveryKey`: the fingerprint of the recovery key every data key of the fleet is wrapped to now. */
+export const changeRecoveryKeyOutputSchema = z.object({ recoveryKeyFingerprint: z.string() });
+/** Why the company key vault refused a sealed fleet's company key (decision 0068, B11). */
+export const companyKeyUnavailableReasonSchema = z.enum(['accessDenied', 'disabled', 'notFound', 'unreachable']);
+/** Whether the company key answered the fleet's last unwrap, and since when; the key vault's reason while it refuses. */
+export const keyAvailabilitySchema = z.discriminatedUnion('isAvailable', [
+    z.object({ isAvailable: z.literal(true), since: z.iso.datetime() }),
+    z.object({ isAvailable: z.literal(false), reason: companyKeyUnavailableReasonSchema, since: z.iso.datetime() }),
+]);
+/**
+ * Output of `fleet.sealing` (decision 0068, B5): none for a fleet that is not
+ * sealed; else its state and since when (turned on, or sealed), while sealing
+ * how many of the payloads stored plain before are sealed, its company key by reference, its recovery key by
+ * fingerprint (none when the company set none), the key's availability and its data keys oldest first, each with when it was made and
+ * whether it seals now. Never a key, wrapped or not.
+ */
+export const sealingOutputSchema = z.union([
+    z.object({ state: z.literal('none') }),
+    z.object({
+        state: z.enum(['sealing', 'sealed']),
+        since: z.iso.datetime(),
+        progress: z.object({ sealed: z.number().int().nonnegative(), total: z.number().int().nonnegative() }).nullable(),
+        companyKey: z.string(),
+        recoveryKeyFingerprint: z.string().nullable(),
+        keyAvailability: keyAvailabilitySchema,
+        dataKeys: z.array(z.object({ id: idSchema('dataKey'), createdAt: z.iso.datetime(), isCurrent: z.boolean() })),
+    }),
+]);
+/** The longest wrapped data key taken, in base64: an AWS KMS ciphertext blob or an age file holding a 256-bit key fits well within it. */
+const WRAPPED_DATA_KEY_MAX_LENGTH = 8192;
+/** The most data keys a recovery names: a fleet makes one per 30 days, so this lasts it 80 years. */
+const RECOVERY_DATA_KEYS_MAX = 1000;
+/**
+ * Output of `fleet.recoverySet` (decision 0068, B15): the fleet whose
+ * encryption context the new wraps name, its recovery key by fingerprint, and
+ * each data key oldest first, wrapped to the recovery key alone (an age file,
+ * base64) with its check value (HMAC-SHA-256, base64). Only the company's
+ * offline private half opens it.
+ */
+export const recoverySetOutputSchema = z.object({
+    fleetId: idSchema('fleet'),
+    recoveryKeyFingerprint: z.string(),
+    dataKeys: z.array(z.object({ id: idSchema('dataKey'), wrappedByRecoveryKey: z.base64(), checkValue: z.base64() })),
+});
+/**
+ * Input of `fleet.recoverKeys` (decision 0068, B15): the new company key, by
+ * its reference in the company's own KMS, and each of the fleet's data keys
+ * wrapped under it for this fleet's context (an AWS KMS ciphertext blob,
+ * base64), as the recovery command made them on the company's computer.
+ */
+export const recoverKeysInputSchema = z.strictObject({
+    companyKey: z.string().min(1).max(COMPANY_KEY_MAX_LENGTH),
+    dataKeys: z.array(z.strictObject({ id: idSchema('dataKey'), wrappedByCompanyKey: z.base64().min(1).max(WRAPPED_DATA_KEY_MAX_LENGTH) })).max(RECOVERY_DATA_KEYS_MAX),
+});
+/** Output of `fleet.recoverKeys`: the company key that wraps every data key of the fleet now. */
+export const recoverKeysOutputSchema = z.object({ companyKey: z.string() });
+//# sourceMappingURL=sealing.js.map

package/dist/schemas/sealing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sealing.js","sourceRoot":"","sources":["../../src/schemas/sealing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,oGAAoG;AACpG,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC,gFAAgF;AAChF,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEpC,8HAA8H;AAC9H,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAEzE,iJAAiJ;AACjJ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEjK,6KAA6K;AAC7K,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEnK,+HAA+H;AAC/H,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;AAEzH,sGAAsG;AACtG,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEjF,mIAAmI;AACnI,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAE/F,8HAA8H;AAC9H,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE9F,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;AAEjH,yHAAyH;AACzH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,kBAAkB,CAAC,aAAa,EAAE;IACvE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;IACnE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;CAChH,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC;IACzC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACtC,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;QACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;QAChH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7C,eAAe,EAAE,qBAAqB;QACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;KAC9G,CAAC;CACH,CAAC,CAAC;AAEH,0IAA0I;AAC1I,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAEzC,qGAAqG;AACrG,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;IAC1B,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE;IAClC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CACnH,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC;CACpK,CAAC,CAAC;AAEH,iGAAiG;AACjG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC"}