@aeolus-fleet/core 0.0.0 → 0.18.0

package/dist/domain/messaging/receive-deliveries.js

@@ -0,0 +1,119 @@
+import { findShip, holdLease } from '../registry/public.js';
+import { recordEvent } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { claimDelivery } from './delivery.js';
+import { receiveMax } from './receive-max.js';
+/** How long a receive waits for a delivery when none is there: about 25 seconds, then it returns empty. */
+export const RECEIVE_WAIT_MS = 25_000;
+/**
+ * Claims up to `max` deliveries for the crew in one unit of work: holds its
+ * lease, then takes its own deliveries in flight, then the oldest pending ones
+ * for its ship or its type. One that turns undeliverable is handed to no one,
+ * and the next one claimable takes its place. Each one handed over names its
+ * sender as Registry holds it now.
+ */
+async function claimForCrew(deps, claim) {
+    const { tx, ids, at } = deps;
+    const { crew, max } = claim;
+    const ship = await holdLease(tx, crew);
+    if (!ship.isOk) {
+        return ship;
+    }
+    const handedOut = [];
+    const claimed = [];
+    let hasMore = true;
+    while (hasMore && handedOut.length < max) {
+        const limit = max - handedOut.length;
+        const claimable = await tx.deliveries.findClaimableForUpdate({
+            fleetId: crew.fleetId,
+            shipId: crew.shipId,
+            type: ship.value.type,
+            leaseId: crew.leaseId,
+            limit,
+            excluding: claimed,
+        });
+        hasMore = claimable.length === limit;
+        for (const { delivery, message } of claimable) {
+            claimed.push(delivery.id);
+            const { outcome, delivery: changed, events } = claimDelivery(delivery, { crew, at });
+            await tx.deliveries.update(changed);
+            for (const event of events) {
+                await recordEvent({ events: tx.events, ids }, event);
+            }
+            if (outcome === 'claimed') {
+                const sender = await findShip(tx, { fleetId: crew.fleetId, shipId: message.senderShipId });
+                if (!sender.isOk) {
+                    // A message's sender always exists: ships are never deleted, and the foreign key keeps the sender in its fleet.
+                    return sender;
+                }
+                handedOut.push({
+                    deliveryId: changed.id,
+                    messageId: message.id,
+                    senderShipId: message.senderShipId,
+                    senderName: sender.value.name,
+                    senderType: sender.value.type,
+                    recipient: changed.recipient,
+                    payload: message.payload,
+                    contentType: message.contentType,
+                    model: message.model,
+                    inReplyTo: message.inReplyToMessageId,
+                    sentAt: message.createdAt,
+                    attempts: changed.attempts,
+                });
+            }
+        }
+    }
+    return ok({ ship: ship.value, deliveries: handedOut });
+}
+/**
+ * Use case: a crew receives its deliveries (`receive`), up to `max`, 1 to 10,
+ * one by default. Its scope (messages:receive) is checked before this runs.
+ * Each attempt is one unit of work (see `claimForCrew`): every delivery it
+ * returns is in flight, claimed by the crew's ship and lease, until the ship
+ * acknowledges it or the lease ends, and the crew's next receive returns it
+ * again, counted as another claim, so a lost reply loses nothing. Its fifth
+ * claim makes it undeliverable instead. Each delivery names its sender by id,
+ * and by the name and type the sender has now, so the crew can answer by name.
+ *
+ * When nothing is there it waits, about 25 seconds, for a wake-up for its ship
+ * or its type (ADR 0003: LISTEN/NOTIFY after commit), then returns empty. It
+ * starts watching before it looks a second time, so a delivery that commits
+ * between its first look and its watch is found by that second look. A
+ * wake-up that brings nothing for it, a type delivery another ship took,
+ * leaves it waiting for the rest of its time.
+ */
+export function createReceiveDeliveries(deps) {
+    const waitMs = deps.waitMs ?? RECEIVE_WAIT_MS;
+    return async (crew, input) => {
+        const max = receiveMax(input.max);
+        if (!max.isOk) {
+            return max;
+        }
+        const until = deps.clock.now().getTime() + waitMs;
+        let watch;
+        try {
+            for (;;) {
+                const attempt = await deps.uow.run((tx) => claimForCrew({ tx, ids: deps.ids, at: deps.clock.now() }, { crew, max: max.value }));
+                if (!attempt.isOk) {
+                    return attempt;
+                }
+                const { ship, deliveries } = attempt.value;
+                if (deliveries.length > 0) {
+                    return ok({ deliveries });
+                }
+                if (watch === undefined) {
+                    watch = deps.wakeups.watch({ fleetId: crew.fleetId, shipId: crew.shipId, type: ship.type });
+                    continue;
+                }
+                const remainingMs = until - deps.clock.now().getTime();
+                if (remainingMs <= 0 || (await watch.next(remainingMs)) === 'timedOut') {
+                    return ok({ deliveries: [] });
+                }
+            }
+        }
+        finally {
+            watch?.stop();
+        }
+    };
+}
+//# sourceMappingURL=receive-deliveries.js.map

package/dist/domain/messaging/receive-deliveries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive-deliveries.js","sourceRoot":"","sources":["../../../src/domain/messaging/receive-deliveries.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAgD,MAAM,uBAAuB,CAAC;AAI1G,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAuC9C,2GAA2G;AAC3G,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AAQtC;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,IAAe,EACf,KAAkC;IAElC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC;YAC3D,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK;YACL,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,OAAO,GAAG,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC;QACrC,KAAK,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,SAAS,EAAE,CAAC;YAC9C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;YACrF,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC3F,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjB,gHAAgH;oBAChH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC;oBACb,UAAU,EAAE,OAAO,CAAC,EAAE;oBACtB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBAC7B,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBAC7B,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,SAAS,EAAE,OAAO,CAAC,kBAAkB;oBACrC,MAAM,EAAE,OAAO,CAAC,SAAS;oBACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAOvC;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,eAAe,CAAC;IAC9C,OAAO,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,GAAG,CAAC;QACb,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC;QAClD,IAAI,KAAgC,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CACxC,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CACpF,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;oBAClB,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;gBAC3C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5B,CAAC;gBACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC5F,SAAS;gBACX,CAAC;gBACD,MAAM,WAAW,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;gBACvD,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;oBACvE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/messaging/receive-max.d.ts

@@ -0,0 +1,8 @@
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+/**
+ * How many deliveries a receive returns at most: the ship chooses, 1 to 10,
+ * and gets one when it does not say (ADR 0016: the fleet does not decide for
+ * the ship).
+ */
+export declare function receiveMax(max: number | undefined): Result<number, DomainError<'INVALID_RECEIVE_MAX'>>;

package/dist/domain/messaging/receive-max.js

@@ -0,0 +1,17 @@
+import { RECEIVE_MAX_DEFAULT, RECEIVE_MAX_UPPER_BOUND } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/**
+ * How many deliveries a receive returns at most: the ship chooses, 1 to 10,
+ * and gets one when it does not say (ADR 0016: the fleet does not decide for
+ * the ship).
+ */
+export function receiveMax(max) {
+    if (max === undefined) {
+        return ok(RECEIVE_MAX_DEFAULT);
+    }
+    return Number.isInteger(max) && max >= 1 && max <= RECEIVE_MAX_UPPER_BOUND
+        ? ok(max)
+        : refuse('INVALID_RECEIVE_MAX', `A receive returns 1 to ${RECEIVE_MAX_UPPER_BOUND} deliveries at once`);
+}
+//# sourceMappingURL=receive-max.js.map

package/dist/domain/messaging/receive-max.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receive-max.js","sourceRoot":"","sources":["../../../src/domain/messaging/receive-max.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,uBAAuB;QACxE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;QACT,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,0BAA0B,uBAAuB,qBAAqB,CAAC,CAAC;AAC5G,CAAC"}

package/dist/domain/messaging/reply-to-message.d.ts

@@ -0,0 +1,35 @@
+import type { DeliveryId, IdGenerator, MessageId } from '@aeolus-fleet/common';
+import type { Crew } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type MarkDoneTx, type MarkDoneUseCaseRefusal } from './mark-done.js';
+import type { RequestHasher } from './ports.js';
+import { type SendMessageRefusal, type SendMessageTx } from './send-message.js';
+export type ReplyToMessageTx = SendMessageTx & MarkDoneTx;
+export type ReplyToMessageRefusal = DomainError<'DELIVERY_NOT_FOUND' | 'NOT_THE_OPERATOR_SHIP'> | SendMessageRefusal | MarkDoneUseCaseRefusal;
+export type ReplyToMessage = (crew: Crew, input: {
+    deliveryId: DeliveryId;
+    payload: string;
+    idempotencyKey: string;
+}) => Promise<Result<{
+    messageId: MessageId;
+}, ReplyToMessageRefusal>>;
+/**
+ * Use case: argo replies to a message to it from the operator inbox
+ * (docs/blueprint.md, "Inbox"). Its scopes (messages:send and
+ * messages:receive) are checked before this runs. One unit of work: the reply
+ * as plain text from argo to the message's sender, naming the message, as a
+ * send would store it, and the message marked done, its acknowledgement
+ * naming the reply. A message already done stays done; the reply is a new
+ * message all the same. A repeat of the key answers the same reply. Any
+ * refusal, a retired sender included, sends nothing and leaves the message
+ * open.
+ */
+export declare function createReplyToMessage(deps: {
+    uow: UnitOfWork<ReplyToMessageTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    hasher: RequestHasher;
+}): ReplyToMessage;

package/dist/domain/messaging/reply-to-message.js

@@ -0,0 +1,49 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { isInInboxOf } from './delivery.js';
+import { markDoneWithin } from './mark-done.js';
+import { checkedSend, sendWithin } from './send-message.js';
+/**
+ * Use case: argo replies to a message to it from the operator inbox
+ * (docs/blueprint.md, "Inbox"). Its scopes (messages:send and
+ * messages:receive) are checked before this runs. One unit of work: the reply
+ * as plain text from argo to the message's sender, naming the message, as a
+ * send would store it, and the message marked done, its acknowledgement
+ * naming the reply. A message already done stays done; the reply is a new
+ * message all the same. A repeat of the key answers the same reply. Any
+ * refusal, a retired sender included, sends nothing and leaves the message
+ * open.
+ */
+export function createReplyToMessage(deps) {
+    return async (crew, input) => {
+        if (crew.kind !== 'operator') {
+            return refuse('NOT_THE_OPERATOR_SHIP', 'Only argo replies from the operator inbox; a ship sends its answer');
+        }
+        return deps.uow.run(async (tx) => {
+            const { fleetId } = crew;
+            const delivery = await tx.deliveries.findForUpdate(fleetId, input.deliveryId);
+            const asked = delivery && (await tx.messages.find(fleetId, delivery.messageId));
+            if (!isInInboxOf(delivery, crew.shipId) || !asked) {
+                return refuse('DELIVERY_NOT_FOUND', `Delivery ${input.deliveryId} is not in your inbox`);
+            }
+            const request = checkedSend({
+                selector: { kind: 'ship', shipId: asked.senderShipId },
+                payload: input.payload,
+                contentType: 'text/plain',
+                idempotencyKey: input.idempotencyKey,
+                inReplyTo: asked.id,
+            }, deps.hasher);
+            if (!request.isOk) {
+                return request;
+            }
+            const inTx = { tx, clock: deps.clock, ids: deps.ids };
+            const sent = await sendWithin(inTx, { caller: crew, request: request.value });
+            if (!sent.isOk) {
+                return sent;
+            }
+            const done = await markDoneWithin(inTx, { crew, deliveryId: delivery.id, reply: sent.value.messageId });
+            return done.isOk ? ok(sent.value) : done;
+        });
+    };
+}
+//# sourceMappingURL=reply-to-message.js.map

package/dist/domain/messaging/reply-to-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reply-to-message.js","sourceRoot":"","sources":["../../../src/domain/messaging/reply-to-message.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAgD,MAAM,gBAAgB,CAAC;AAE9F,OAAO,EAAE,WAAW,EAAE,UAAU,EAA+C,MAAM,mBAAmB,CAAC;AAWzG;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,OAAO,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,uBAAuB,EAAE,oEAAoE,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAoE,EAAE;YACjG,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC9E,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YAChF,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClD,OAAO,MAAM,CAAC,oBAAoB,EAAE,YAAY,KAAK,CAAC,UAAU,uBAAuB,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,OAAO,GAAG,WAAW,CACzB;gBACE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE;gBACtD,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,YAAY;gBACzB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,SAAS,EAAE,KAAK,CAAC,EAAE;aACpB,EACD,IAAI,CAAC,MAAM,CACZ,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,OAAO,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;YAC9E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACxG,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/messaging/resend-delivery.d.ts

@@ -0,0 +1,48 @@
+import { type DeliveryId, type IdGenerator, type MessageId } from '@aeolus-fleet/common';
+import { type ResolveSelectorTx, type UnresolvableSelector } from '../registry/public.js';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import type { Notifier } from '../shared/notifier.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type DailyMessageLimitTx } from './daily-message-limit.js';
+import { type DismissRefusal } from './delivery.js';
+import { type AcceptRefusal, type RepeatRefusal } from './message.js';
+import type { DeliveryRepository, MessageRepository, RequestHasher } from './ports.js';
+export interface ResendDeliveryTx extends ResolveSelectorTx, DailyMessageLimitTx {
+    messages: MessageRepository;
+    deliveries: DeliveryRepository;
+    events: EventLog;
+    notifier: Notifier;
+}
+export type ResendDeliveryRefusal = DomainError<'DELIVERY_NOT_FOUND' | 'PING_NOT_RESENT'> | DismissRefusal | DomainError<'MESSAGE_LIMIT_REACHED'> | RepeatRefusal | UnresolvableSelector | AcceptRefusal;
+export type ResendDelivery = (caller: Caller, input: {
+    deliveryId: DeliveryId;
+}) => Promise<Result<{
+    messageId: MessageId;
+}, ResendDeliveryRefusal>>;
+/**
+ * Use case: the operator resends an undeliverable delivery from Needs
+ * attention (docs/blueprint.md, "DeliveryUndeliverable"). Its scope
+ * (fleet:manage) is checked before this runs. A resend is a retry of the same
+ * delivery: a new message with the original's sender, selector, payload,
+ * content type and reply, naming the message it resends, so an answer goes
+ * back to whoever asked. In one unit of work it stores the message and its
+ * pending delivery, MessageAccepted and DeliveryDismissed (both caused by the
+ * operator), dismisses the original and wakes the receivers.
+ *
+ * A second resend of the delivery answers the first one's message and stores
+ * nothing. When the selector no longer resolves, a retired ship or no ship of
+ * the type left, the resend is refused and the original stays undeliverable,
+ * for the operator to dismiss. A ping is never resent: it is dismissed, and
+ * the ship pinged again through ping, so pings never stack. Locks, in this order: the original delivery,
+ * then the resend's key, then the ship the message is addressed to.
+ */
+export declare function createResendDelivery(deps: {
+    uow: UnitOfWork<ResendDeliveryTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    hasher: RequestHasher;
+}): ResendDelivery;

package/dist/domain/messaging/resend-delivery.js

@@ -0,0 +1,97 @@
+import { isPingContentType } from '@aeolus-fleet/common';
+import { resolveSelector } from '../registry/public.js';
+import { refuse } from '../shared/errors.js';
+import { recordEvent } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { withinDailyMessageLimit } from './daily-message-limit.js';
+import { dismissForResend } from './delivery.js';
+import { acceptMessage, repeatOf } from './message.js';
+import { sendRequestText } from './send-request.js';
+/**
+ * The idempotency key of a delivery's resend, the original sender's: one
+ * resend per delivery, so a second one finds the first one's message.
+ */
+function resendKey(deliveryId) {
+    return `resend-${deliveryId}`;
+}
+/**
+ * Use case: the operator resends an undeliverable delivery from Needs
+ * attention (docs/blueprint.md, "DeliveryUndeliverable"). Its scope
+ * (fleet:manage) is checked before this runs. A resend is a retry of the same
+ * delivery: a new message with the original's sender, selector, payload,
+ * content type and reply, naming the message it resends, so an answer goes
+ * back to whoever asked. In one unit of work it stores the message and its
+ * pending delivery, MessageAccepted and DeliveryDismissed (both caused by the
+ * operator), dismisses the original and wakes the receivers.
+ *
+ * A second resend of the delivery answers the first one's message and stores
+ * nothing. When the selector no longer resolves, a retired ship or no ship of
+ * the type left, the resend is refused and the original stays undeliverable,
+ * for the operator to dismiss. A ping is never resent: it is dismissed, and
+ * the ship pinged again through ping, so pings never stack. Locks, in this order: the original delivery,
+ * then the resend's key, then the ship the message is addressed to.
+ */
+export function createResendDelivery(deps) {
+    return (caller, input) => deps.uow.run(async (tx) => {
+        const { fleetId } = caller;
+        const delivery = await tx.deliveries.findForUpdate(fleetId, input.deliveryId);
+        const original = delivery && (await tx.messages.find(fleetId, delivery.messageId));
+        if (!delivery || !original) {
+            return refuse('DELIVERY_NOT_FOUND', `Delivery ${input.deliveryId} does not exist`);
+        }
+        if (isPingContentType(original.contentType)) {
+            return refuse('PING_NOT_RESENT', 'A ping is not resent: dismiss it, and ping the ship again');
+        }
+        const selector = original.selector;
+        const inReplyTo = original.inReplyToMessageId ?? undefined;
+        const requestHash = deps.hasher.hash(sendRequestText({ selector, payload: original.payload, contentType: original.contentType, inReplyTo }));
+        const senderKey = { fleetId, senderShipId: original.senderShipId, idempotencyKey: resendKey(delivery.id) };
+        await tx.messages.lockIdempotencyKey(senderKey);
+        const earlier = await tx.messages.findByIdempotencyKey(senderKey);
+        if (earlier) {
+            const repeat = repeatOf(earlier, requestHash);
+            return repeat.isOk ? ok({ messageId: repeat.value }) : repeat;
+        }
+        const at = deps.clock.now();
+        const dismissed = dismissForResend(delivery, { by: caller.shipId, at });
+        if (!dismissed.isOk) {
+            return dismissed;
+        }
+        const recipient = await resolveSelector(tx, { fleetId, selector });
+        if (!recipient.isOk) {
+            return recipient;
+        }
+        const withinLimit = await withinDailyMessageLimit(tx, { fleetId, time: at });
+        if (!withinLimit.isOk) {
+            return withinLimit;
+        }
+        const repliedTo = inReplyTo === undefined ? undefined : await tx.messages.find(fleetId, inReplyTo);
+        const accepted = acceptMessage({ recipient: recipient.value, repliedTo }, {
+            messageId: deps.ids('message'),
+            deliveryId: deps.ids('delivery'),
+            fleetId,
+            senderShipId: original.senderShipId,
+            payload: original.payload,
+            contentType: original.contentType,
+            model: original.model ?? undefined,
+            idempotencyKey: senderKey.idempotencyKey,
+            requestHash,
+            inReplyTo,
+            resendOf: { messageId: original.id, by: caller.shipId },
+            at,
+        });
+        if (!accepted.isOk) {
+            return accepted;
+        }
+        const { message, delivery: resent, events } = accepted.value;
+        await tx.messages.create(message);
+        await tx.deliveries.create(resent);
+        await tx.deliveries.update(dismissed.value.delivery);
+        for (const event of [...events, ...dismissed.value.events]) {
+            await recordEvent({ events: tx.events, ids: deps.ids }, event);
+        }
+        await tx.notifier.deliveryPending({ fleetId, deliveryId: resent.id, recipient: resent.recipient });
+        return ok({ messageId: message.id });
+    });
+}
+//# sourceMappingURL=resend-delivery.js.map

package/dist/domain/messaging/resend-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resend-delivery.js","sourceRoot":"","sources":["../../../src/domain/messaging/resend-delivery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAqD,MAAM,sBAAsB,CAAC;AAE5G,OAAO,EAAE,eAAe,EAAqD,MAAM,uBAAuB,CAAC;AAG3G,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,uBAAuB,EAA4B,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAuB,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAA0C,MAAM,cAAc,CAAC;AAE/F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAsBpD;;;GAGG;AACH,SAAS,SAAS,CAAC,UAAsB;IACvC,OAAO,UAAU,UAAU,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAoE,EAAE;QAC1F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,MAAM,CAAC,oBAAoB,EAAE,YAAY,KAAK,CAAC,UAAU,iBAAiB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,kBAAkB,IAAI,SAAS,CAAC;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAClC,eAAe,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CACvG,CAAC;QACF,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3G,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAChE,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACnG,MAAM,QAAQ,GAAG,aAAa,CAC5B,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,EACzC;YACE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAC9B,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YAChC,OAAO;YACP,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,SAAS;YAClC,cAAc,EAAE,SAAS,CAAC,cAAc;YACxC,WAAW;YACX,SAAS;YACT,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE;YACvD,EAAE;SACH,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC7D,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/messaging/send-message.d.ts

@@ -0,0 +1,88 @@
+import { type IdGenerator, type MessageId } from '@aeolus-fleet/common';
+import { type ResolveSelectorTx, type UnresolvableSelector } from '../registry/public.js';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import type { Notifier } from '../shared/notifier.js';
+import { type Result } from '../shared/result.js';
+import type { Selector } from '../shared/selector.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type DailyMessageLimitTx } from './daily-message-limit.js';
+import { type AcceptRefusal, type RepeatRefusal } from './message.js';
+import type { DeliveryRepository, MessageRepository, RequestHasher } from './ports.js';
+export interface SendMessageTx extends ResolveSelectorTx, DailyMessageLimitTx {
+    messages: MessageRepository;
+    deliveries: DeliveryRepository;
+    events: EventLog;
+    notifier: Notifier;
+}
+export interface MessageToSend {
+    selector: Selector;
+    payload: string;
+    /** Any well-formed media type, passed on untouched; text/plain when the sender gives none. */
+    contentType?: string;
+    /** The exact model the sender's session runs: every ship but argo states it. */
+    model?: string;
+    idempotencyKey: string;
+    /** The id of the message, in the same fleet, this one replies to. */
+    inReplyTo?: MessageId;
+}
+export interface MessageSent {
+    /** The message's id: the original one when the sender used the idempotency key before. */
+    messageId: MessageId;
+}
+export type SendMessageRefusal = DomainError<'PAYLOAD_TOO_LARGE' | 'INVALID_CONTENT_TYPE' | 'INVALID_IDEMPOTENCY_KEY' | 'RESERVED_CONTENT_TYPE'> | RepeatRefusal | UnresolvableSelector | AcceptRefusal | DomainError<'MESSAGE_LIMIT_REACHED'>;
+export type SendMessage = (caller: Caller, input: MessageToSend) => Promise<Result<MessageSent, SendMessageRefusal>>;
+/**
+ * Use case: the calling ship sends a message (`send`). The sender is always
+ * the caller, `argo` included; its scope (messages:send) is checked before
+ * this runs. The message, its delivery, MessageAccepted and the notice that
+ * wakes its receivers are one unit of work: the sender gets its id only once
+ * all of it is committed (ADR 0003). A payload over 64 KB, a content type that
+ * is no media type or a bad key is refused before the unit of work starts, so
+ * nothing is stored. Without a content type the message is text/plain: the
+ * same request as one that names text/plain. The ping content type is
+ * reserved: only the ping call sends one, so pings never stack. Every ship but
+ * argo states its model; the model is no part of the request, so a retry
+ * after the session switched model is still a repeat.
+ *
+ * A repeat, the same sender with the same idempotency key and the same
+ * request, returns the original message's id and stores nothing; the same key
+ * with another request is refused. The key is checked before the selector, so
+ * a retry still gets its OK after the recipient was retired. Locks, in this
+ * order: the sender's key, so two sends with one key take turns and the second
+ * finds the first one's message; then the ship the message is addressed to,
+ * held against a retire.
+ */
+export declare function createSendMessage(deps: {
+    uow: UnitOfWork<SendMessageTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    hasher: RequestHasher;
+}): SendMessage;
+/** A send whose payload, content type and key were checked, with the hash of its request. */
+export interface CheckedSend {
+    selector: Selector;
+    payload: string;
+    contentType: string;
+    model: string | undefined;
+    idempotencyKey: string;
+    inReplyTo: MessageId | undefined;
+    requestHash: string;
+}
+/**
+ * Checks what a send asks for before any unit of work starts, so a refusal
+ * stores nothing: the payload, the content type (text/plain when none is
+ * given) and the key; and hashes the request.
+ */
+export declare function checkedSend(input: MessageToSend, hasher: RequestHasher): Result<CheckedSend, SendMessageRefusal>;
+/** Sends a checked request inside the caller's unit of work, as {@link createSendMessage} describes. */
+export declare function sendWithin(deps: {
+    tx: SendMessageTx;
+    clock: Clock;
+    ids: IdGenerator;
+}, send: {
+    caller: Caller;
+    request: CheckedSend;
+}): Promise<Result<MessageSent, SendMessageRefusal>>;

package/dist/domain/messaging/send-message.js

@@ -0,0 +1,115 @@
+import { isPingContentType, PING_CONTENT_TYPE } from '@aeolus-fleet/common';
+import { resolveSelector } from '../registry/public.js';
+import { refuse } from '../shared/errors.js';
+import { recordEvent } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { contentType } from './content-type.js';
+import { withinDailyMessageLimit } from './daily-message-limit.js';
+import { idempotencyKey } from '../shared/idempotency-key.js';
+import { acceptMessage, repeatOf } from './message.js';
+import { payload } from './payload.js';
+import { sendRequestText } from './send-request.js';
+/**
+ * Use case: the calling ship sends a message (`send`). The sender is always
+ * the caller, `argo` included; its scope (messages:send) is checked before
+ * this runs. The message, its delivery, MessageAccepted and the notice that
+ * wakes its receivers are one unit of work: the sender gets its id only once
+ * all of it is committed (ADR 0003). A payload over 64 KB, a content type that
+ * is no media type or a bad key is refused before the unit of work starts, so
+ * nothing is stored. Without a content type the message is text/plain: the
+ * same request as one that names text/plain. The ping content type is
+ * reserved: only the ping call sends one, so pings never stack. Every ship but
+ * argo states its model; the model is no part of the request, so a retry
+ * after the session switched model is still a repeat.
+ *
+ * A repeat, the same sender with the same idempotency key and the same
+ * request, returns the original message's id and stores nothing; the same key
+ * with another request is refused. The key is checked before the selector, so
+ * a retry still gets its OK after the recipient was retired. Locks, in this
+ * order: the sender's key, so two sends with one key take turns and the second
+ * finds the first one's message; then the ship the message is addressed to,
+ * held against a retire.
+ */
+export function createSendMessage(deps) {
+    return async (caller, input) => {
+        if (input.contentType !== undefined && isPingContentType(input.contentType)) {
+            return refuse('RESERVED_CONTENT_TYPE', `${PING_CONTENT_TYPE} is reserved for pings: ping a ship from the console`);
+        }
+        const request = checkedSend(input, deps.hasher);
+        if (!request.isOk) {
+            return request;
+        }
+        return deps.uow.run((tx) => sendWithin({ tx, clock: deps.clock, ids: deps.ids }, { caller, request: request.value }));
+    };
+}
+/**
+ * Checks what a send asks for before any unit of work starts, so a refusal
+ * stores nothing: the payload, the content type (text/plain when none is
+ * given) and the key; and hashes the request.
+ */
+export function checkedSend(input, hasher) {
+    const text = payload(input.payload);
+    if (!text.isOk) {
+        return text;
+    }
+    const mediaType = contentType(input.contentType);
+    if (!mediaType.isOk) {
+        return mediaType;
+    }
+    const key = idempotencyKey(input.idempotencyKey);
+    if (!key.isOk) {
+        return key;
+    }
+    const { selector, inReplyTo } = input;
+    const requestHash = hasher.hash(sendRequestText({ selector, payload: text.value, contentType: mediaType.value, inReplyTo }));
+    return ok({ selector, payload: text.value, contentType: mediaType.value, model: input.model, idempotencyKey: key.value, inReplyTo, requestHash });
+}
+/** Sends a checked request inside the caller's unit of work, as {@link createSendMessage} describes. */
+export async function sendWithin(deps, send) {
+    const { tx, clock, ids } = deps;
+    const { fleetId, shipId: senderShipId } = send.caller;
+    const { selector, inReplyTo, requestHash } = send.request;
+    const senderKey = { fleetId, senderShipId, idempotencyKey: send.request.idempotencyKey };
+    await tx.messages.lockIdempotencyKey(senderKey);
+    const original = await tx.messages.findByIdempotencyKey(senderKey);
+    if (original) {
+        const repeat = repeatOf(original, requestHash);
+        return repeat.isOk ? ok({ messageId: repeat.value }) : repeat;
+    }
+    const recipient = await resolveSelector(tx, { fleetId, selector });
+    if (!recipient.isOk) {
+        return recipient;
+    }
+    const at = clock.now();
+    const withinLimit = await withinDailyMessageLimit(tx, { fleetId, time: at });
+    if (!withinLimit.isOk) {
+        return withinLimit;
+    }
+    const repliedTo = inReplyTo === undefined ? undefined : await tx.messages.find(fleetId, inReplyTo);
+    const accepted = acceptMessage({ recipient: recipient.value, repliedTo }, {
+        messageId: ids('message'),
+        deliveryId: ids('delivery'),
+        fleetId,
+        senderShipId,
+        payload: send.request.payload,
+        contentType: send.request.contentType,
+        model: send.request.model,
+        senderKind: send.caller.kind,
+        idempotencyKey: send.request.idempotencyKey,
+        requestHash,
+        inReplyTo,
+        at,
+    });
+    if (!accepted.isOk) {
+        return accepted;
+    }
+    const { message, delivery, events } = accepted.value;
+    await tx.messages.create(message);
+    await tx.deliveries.create(delivery);
+    for (const event of events) {
+        await recordEvent({ events: tx.events, ids }, event);
+    }
+    await tx.notifier.deliveryPending({ fleetId, deliveryId: delivery.id, recipient: delivery.recipient });
+    return ok({ messageId: message.id });
+}
+//# sourceMappingURL=send-message.js.map

package/dist/domain/messaging/send-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-message.js","sourceRoot":"","sources":["../../../src/domain/messaging/send-message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAoC,MAAM,sBAAsB,CAAC;AAE9G,OAAO,EAAE,eAAe,EAAqD,MAAM,uBAAuB,CAAC;AAG3G,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AAEjE,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,uBAAuB,EAA4B,MAAM,0BAA0B,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,QAAQ,EAA0C,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAmCpD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAKjC;IACC,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;QAC7B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC,uBAAuB,EAAE,GAAG,iBAAiB,sDAAsD,CAAC,CAAC;QACrH,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxH,CAAC,CAAC;AACJ,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAoB,EAAE,MAAqB;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAC7B,eAAe,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAC5F,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;AACpJ,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAA2D,EAC3D,IAA8C;IAE9C,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;IACtD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;IAC1D,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;IACzF,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,aAAa,CAC5B,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,EACzC;QACE,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC;QACzB,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC;QAC3B,OAAO;QACP,YAAY;QACZ,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;QAC7B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW;QACrC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;QACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QAC5B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc;QAC3C,WAAW;QACX,SAAS;QACT,EAAE;KACH,CACF,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IACrD,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IACvG,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;AACvC,CAAC"}

package/dist/domain/messaging/send-request.d.ts

@@ -0,0 +1,16 @@
+import type { MessageId } from '@aeolus-fleet/common';
+import type { Selector } from '../shared/selector.js';
+/** What a send asks for, its key aside: what a repeat of the key must ask for too. */
+export interface SendRequest {
+    selector: Selector;
+    payload: string;
+    contentType: string;
+    inReplyTo: MessageId | undefined;
+}
+/**
+ * The request as one text, the same for the same request whatever order its
+ * fields came in: the selector as sent (one ship by id and by name are two
+ * requests), the payload, the content type and the message it replies to.
+ * Its hash is kept with the message to tell a repeat from a reused key.
+ */
+export declare function sendRequestText(request: SendRequest): string;