@aeolus-fleet/core 0.0.0 → 0.19.0

package/dist/domain/messaging/check-inbox.js

@@ -0,0 +1,61 @@
+import { holdLease } from '../registry/public.js';
+import { ok } from '../shared/result.js';
+import { inboxWait } from './inbox-wait.js';
+/**
+ * Use case: how many deliveries wait for the crew (`inbox`): what its next
+ * receive would hand it, its own in flight and those pending for its ship or
+ * its type. It claims nothing, so a watcher can ask as often as it likes and
+ * leave every delivery for the receive. Its scope (messages:receive) is
+ * checked before this runs.
+ *
+ * With a wait, and nothing waiting, it watches the same wake-ups as a
+ * receive and looks again on each, until something waits or the wait has
+ * passed. It starts watching before it looks a second time, so a delivery
+ * that commits in between is counted.
+ */
+export function createCheckInbox(deps) {
+    return async (crew, input) => {
+        const waitMs = inboxWait(input.waitSeconds);
+        if (!waitMs.isOk) {
+            return waitMs;
+        }
+        const until = deps.clock.now().getTime() + waitMs.value;
+        let watch;
+        try {
+            for (;;) {
+                const look = await deps.uow.run(async (tx) => {
+                    const ship = await holdLease(tx, crew);
+                    if (!ship.isOk) {
+                        return ship;
+                    }
+                    const waiting = await tx.deliveries.countReceivable({
+                        fleetId: crew.fleetId,
+                        shipId: crew.shipId,
+                        type: ship.value.type,
+                        leaseId: crew.leaseId,
+                    });
+                    return ok({ type: ship.value.type, waiting });
+                });
+                if (!look.isOk) {
+                    return look;
+                }
+                const { type, waiting } = look.value;
+                const remainingMs = until - deps.clock.now().getTime();
+                if (waiting > 0 || remainingMs <= 0) {
+                    return ok({ waiting });
+                }
+                if (watch === undefined) {
+                    watch = deps.wakeups.watch({ fleetId: crew.fleetId, shipId: crew.shipId, type });
+                    continue;
+                }
+                if ((await watch.next(remainingMs)) === 'timedOut') {
+                    return ok({ waiting: 0 });
+                }
+            }
+        }
+        finally {
+            watch?.stop();
+        }
+    };
+}
+//# sourceMappingURL=check-inbox.js.map

package/dist/domain/messaging/check-inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-inbox.js","sourceRoot":"","sources":["../../../src/domain/messaging/check-inbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAqC,MAAM,uBAAuB,CAAC;AAIrF,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAc5C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,OAAO,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;QACxD,IAAI,KAAgC,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBAC3C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;oBACvC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;wBACf,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC;wBAClD,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI;wBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;qBACtB,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;gBACrC,MAAM,WAAW,GAAG,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;gBACvD,IAAI,OAAO,GAAG,CAAC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;oBACpC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzB,CAAC;gBACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;oBACnD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,IAAI,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/messaging/content-type.d.ts

@@ -0,0 +1,9 @@
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+/**
+ * What a payload's text is, as its sender says: any well-formed media type,
+ * taken exactly as given and passed on untouched, and text/plain when the
+ * sender does not say. The fleet never reads the payload by it and allows no
+ * list of its own (ADR 0016). The rule is shared with the common schema.
+ */
+export declare function contentType(raw: string | undefined): Result<string, DomainError<'INVALID_CONTENT_TYPE'>>;

package/dist/domain/messaging/content-type.js

@@ -0,0 +1,18 @@
+import { CONTENT_TYPE_DEFAULT, CONTENT_TYPE_MAX_LENGTH, isMediaType } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/**
+ * What a payload's text is, as its sender says: any well-formed media type,
+ * taken exactly as given and passed on untouched, and text/plain when the
+ * sender does not say. The fleet never reads the payload by it and allows no
+ * list of its own (ADR 0016). The rule is shared with the common schema.
+ */
+export function contentType(raw) {
+    if (raw === undefined) {
+        return ok(CONTENT_TYPE_DEFAULT);
+    }
+    return raw.length <= CONTENT_TYPE_MAX_LENGTH && isMediaType(raw)
+        ? ok(raw)
+        : refuse('INVALID_CONTENT_TYPE', `A content type is a media type such as text/plain or application/json; charset=utf-8, of at most ${CONTENT_TYPE_MAX_LENGTH} characters`);
+}
+//# sourceMappingURL=content-type.js.map

package/dist/domain/messaging/content-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-type.js","sourceRoot":"","sources":["../../../src/domain/messaging/content-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAElG,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,IAAI,uBAAuB,IAAI,WAAW,CAAC,GAAG,CAAC;QAC9D,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;QACT,CAAC,CAAC,MAAM,CACJ,sBAAsB,EACtB,oGAAoG,uBAAuB,aAAa,CACzI,CAAC;AACR,CAAC"}

package/dist/domain/messaging/daily-message-limit.d.ts

@@ -0,0 +1,19 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import { type AppliedLimitsTx } from '../registry/public.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { MessageRepository } from './ports.js';
+export interface DailyMessageLimitTx extends AppliedLimitsTx {
+    messages: Pick<MessageRepository, 'lockDailyCount' | 'countCreatedSince'>;
+}
+/**
+ * Whether the fleet may store one more message today, in the caller's unit of
+ * work, before it stores it: every message the fleet stored since 00:00 UTC
+ * counts, whatever its kind or sender. With a limit, the count is taken under
+ * the fleet's lock, held until the message is stored, so sends at the limit
+ * never overshoot it. Without one, nothing is counted or locked.
+ */
+export declare function withinDailyMessageLimit(tx: DailyMessageLimitTx, at: {
+    fleetId: FleetId;
+    time: Date;
+}): Promise<Result<undefined, DomainError<'MESSAGE_LIMIT_REACHED'>>>;

package/dist/domain/messaging/daily-message-limit.js

@@ -0,0 +1,24 @@
+import { appliedLimits } from '../registry/public.js';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { utcDayStart } from '../shared/utc-day.js';
+/**
+ * Whether the fleet may store one more message today, in the caller's unit of
+ * work, before it stores it: every message the fleet stored since 00:00 UTC
+ * counts, whatever its kind or sender. With a limit, the count is taken under
+ * the fleet's lock, held until the message is stored, so sends at the limit
+ * never overshoot it. Without one, nothing is counted or locked.
+ */
+export async function withinDailyMessageLimit(tx, at) {
+    const { fleetId, time } = at;
+    const { dailyMessages } = await appliedLimits(tx, fleetId);
+    if (dailyMessages === null) {
+        return ok(undefined);
+    }
+    await tx.messages.lockDailyCount(fleetId);
+    if ((await tx.messages.countCreatedSince(fleetId, utcDayStart(time))) < dailyMessages) {
+        return ok(undefined);
+    }
+    return refuse('MESSAGE_LIMIT_REACHED', `The fleet reached its limit of ${String(dailyMessages)} messages today (UTC), so nothing was stored. Sending works again after 00:00 UTC.`);
+}
+//# sourceMappingURL=daily-message-limit.js.map

package/dist/domain/messaging/daily-message-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daily-message-limit.js","sourceRoot":"","sources":["../../../src/domain/messaging/daily-message-limit.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAwB,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAOnD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,EAAuB,EACvB,EAAoC;IAEpC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IACD,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,aAAa,EAAE,CAAC;QACtF,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CACX,uBAAuB,EACvB,kCAAkC,MAAM,CAAC,aAAa,CAAC,oFAAoF,CAC5I,CAAC;AACJ,CAAC"}

package/dist/domain/messaging/delivery.d.ts

@@ -0,0 +1,116 @@
+import { type LeaseId, type MessageId, type ShipId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type NewEvent } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { Delivery, Message } from './message.js';
+/**
+ * The Delivery's rules once it is stored (docs/blueprint.md, "Key flows"): a
+ * receive claims it, the claiming ship acknowledges it, and a delivery that
+ * keeps being claimed without an acknowledgement stops, undeliverable, where
+ * the operator sees it.
+ */
+/**
+ * The claim at which a delivery never acknowledged becomes undeliverable
+ * instead of being handed out again: the fifth. A poison message stops there
+ * rather than looping forever.
+ */
+export declare const UNDELIVERABLE_AT_CLAIM = 5;
+/** The crew a receive or an ack comes from: its ship and the lease it crews it under. */
+export interface CrewOfShip {
+    shipId: ShipId;
+    leaseId: LeaseId;
+}
+export interface DeliveryClaim {
+    /** Claimed: handed to the crew. Undeliverable: this was the fifth claim, so it is not handed out. */
+    outcome: 'claimed' | 'undeliverable';
+    delivery: Delivery;
+    events: NewEvent[];
+}
+/**
+ * A crew claims a delivery it may take: one pending for its ship or its type,
+ * or one of its own in flight, returned again after a lost reply. Every claim
+ * counts. The claim that reaches the fifth makes the delivery undeliverable
+ * and hands it to no one; before that, the delivery is in flight with the
+ * crew's ship and lease. Either change is caused by the receiving ship.
+ */
+export declare function claimDelivery(delivery: Delivery, claim: {
+    crew: CrewOfShip;
+    at: Date;
+}): DeliveryClaim;
+export type AcknowledgeRefusal = DomainError<'DELIVERY_NOT_IN_FLIGHT' | 'DELIVERY_HELD_BY_ANOTHER_SHIP'>;
+/**
+ * The ship takes responsibility for a delivery it received (ADR 0001): only a
+ * delivery in flight with that ship moves to acknowledged, keeping who claimed
+ * it. Acknowledging it again is harmless: OK, and nothing changes. A delivery
+ * another ship holds or acknowledged, or one that is not in flight, is refused.
+ */
+export declare function acknowledgeDelivery(delivery: Delivery, ack: {
+    crew: CrewOfShip;
+    at: Date;
+}): Result<{
+    delivery: Delivery;
+    events: NewEvent[];
+}, AcknowledgeRefusal>;
+export type AnswerPingRefusal = DomainError<'DELIVERY_NOT_A_PING'> | AcknowledgeRefusal;
+/**
+ * The ship answers a ping with pong: the ping's delivery is acknowledged as
+ * an ack would, and DeliveryAcknowledged says pong answered it. Pong answers
+ * only a ping. Answering again, or after a plain ack, is harmless: OK, and
+ * nothing changes, so the first answer stands.
+ */
+export declare function answerPing(delivery: Delivery, pong: {
+    message: Message;
+    crew: CrewOfShip;
+    at: Date;
+}): Result<{
+    delivery: Delivery;
+    events: NewEvent[];
+}, AnswerPingRefusal>;
+export type DismissRefusal = DomainError<'DELIVERY_NOT_UNDELIVERABLE'>;
+/**
+ * The operator lets an undeliverable delivery go (docs/blueprint.md,
+ * "DeliveryUndeliverable"): it becomes dismissed, kept in history with its
+ * claims, and leaves Needs attention. The event names the ship it was for; a
+ * delivery to a type names none. Dismissing it again is harmless: OK, and
+ * nothing changes. Any other delivery is refused: only an undeliverable one
+ * waits for the operator.
+ */
+export declare function dismissDelivery(delivery: Delivery, dismiss: {
+    by: ShipId;
+    at: Date;
+}): Result<{
+    delivery: Delivery;
+    events: NewEvent[];
+}, DismissRefusal>;
+/**
+ * A resend dismisses the delivery it resends, which must be undeliverable:
+ * one already dismissed has nothing left to resend.
+ */
+export declare function dismissForResend(delivery: Delivery, dismiss: {
+    by: ShipId;
+    at: Date;
+}): Result<{
+    delivery: Delivery;
+    events: NewEvent[];
+}, DismissRefusal>;
+export type MarkDoneRefusal = DomainError<'DELIVERY_NOT_FOUND' | 'DELIVERY_NOT_OPEN' | 'DELIVERY_HELD_BY_ANOTHER_SHIP'>;
+/**
+ * argo marks a message to it done (docs/blueprint.md, "Inbox"): the console
+ * never receives, so an open delivery is claimed and acknowledged at once
+ * under the console session's lease, one claim counted, and its two events
+ * written as a receive and an ack would write them. One the session already
+ * holds in flight is only acknowledged. The acknowledgement names the reply
+ * that made it done, when a reply did. Marking it done again is harmless: OK,
+ * and nothing changes. A delivery to another ship is not in argo's inbox; one
+ * undeliverable, dismissed or abandoned is no longer open.
+ */
+export declare function markDone(delivery: Delivery, done: {
+    crew: CrewOfShip;
+    at: Date;
+    reply?: MessageId;
+}): Result<{
+    delivery: Delivery;
+    events: NewEvent[];
+}, MarkDoneRefusal>;
+/** Whether the delivery is addressed to the ship itself: in its inbox, not its type's queue. */
+export declare function isInInboxOf(delivery: Delivery | undefined, shipId: ShipId): delivery is Delivery;

package/dist/domain/messaging/delivery.js

@@ -0,0 +1,201 @@
+import { isPingContentType } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+/**
+ * The Delivery's rules once it is stored (docs/blueprint.md, "Key flows"): a
+ * receive claims it, the claiming ship acknowledges it, and a delivery that
+ * keeps being claimed without an acknowledgement stops, undeliverable, where
+ * the operator sees it.
+ */
+/**
+ * The claim at which a delivery never acknowledged becomes undeliverable
+ * instead of being handed out again: the fifth. A poison message stops there
+ * rather than looping forever.
+ */
+export const UNDELIVERABLE_AT_CLAIM = 5;
+/**
+ * A crew claims a delivery it may take: one pending for its ship or its type,
+ * or one of its own in flight, returned again after a lost reply. Every claim
+ * counts. The claim that reaches the fifth makes the delivery undeliverable
+ * and hands it to no one; before that, the delivery is in flight with the
+ * crew's ship and lease. Either change is caused by the receiving ship.
+ */
+export function claimDelivery(delivery, claim) {
+    const { crew, at } = claim;
+    const attempts = delivery.attempts + 1;
+    const concerns = {
+        fleetId: delivery.fleetId,
+        occurredAt: at,
+        actor: shipActor(crew.shipId),
+        shipId: crew.shipId,
+        messageId: delivery.messageId,
+        deliveryId: delivery.id,
+        details: { leaseId: crew.leaseId, attempts },
+    };
+    if (attempts >= UNDELIVERABLE_AT_CLAIM) {
+        return {
+            outcome: 'undeliverable',
+            delivery: { ...delivery, state: 'undeliverable', claimedByShipId: null, claimedByLeaseId: null, attempts },
+            events: [{ ...concerns, type: 'DeliveryUndeliverable' }],
+        };
+    }
+    return {
+        outcome: 'claimed',
+        delivery: { ...delivery, state: 'delivered', claimedByShipId: crew.shipId, claimedByLeaseId: crew.leaseId, attempts },
+        events: [{ ...concerns, type: 'DeliveryClaimed' }],
+    };
+}
+/**
+ * The ship takes responsibility for a delivery it received (ADR 0001): only a
+ * delivery in flight with that ship moves to acknowledged, keeping who claimed
+ * it. Acknowledging it again is harmless: OK, and nothing changes. A delivery
+ * another ship holds or acknowledged, or one that is not in flight, is refused.
+ */
+export function acknowledgeDelivery(delivery, ack) {
+    const { crew, at } = ack;
+    switch (delivery.state) {
+        case 'delivered':
+        case 'acknowledged':
+            if (delivery.claimedByShipId !== crew.shipId) {
+                return refuse('DELIVERY_HELD_BY_ANOTHER_SHIP', `Delivery ${delivery.id} is held by another ship: only the ship that received it acknowledges it`);
+            }
+            if (delivery.state === 'acknowledged') {
+                return ok({ delivery, events: [] });
+            }
+            return ok({
+                delivery: { ...delivery, state: 'acknowledged' },
+                events: [
+                    {
+                        fleetId: delivery.fleetId,
+                        type: 'DeliveryAcknowledged',
+                        occurredAt: at,
+                        actor: shipActor(crew.shipId),
+                        shipId: crew.shipId,
+                        messageId: delivery.messageId,
+                        deliveryId: delivery.id,
+                        details: { leaseId: crew.leaseId },
+                    },
+                ],
+            });
+        case 'pending':
+        case 'undeliverable':
+        case 'dismissed':
+        case 'abandoned':
+            return refuse('DELIVERY_NOT_IN_FLIGHT', `Delivery ${delivery.id} is ${delivery.state}, not in flight: acknowledge a delivery once a receive hands it over`);
+    }
+}
+/**
+ * The ship answers a ping with pong: the ping's delivery is acknowledged as
+ * an ack would, and DeliveryAcknowledged says pong answered it. Pong answers
+ * only a ping. Answering again, or after a plain ack, is harmless: OK, and
+ * nothing changes, so the first answer stands.
+ */
+export function answerPing(delivery, pong) {
+    if (!isPingContentType(pong.message.contentType)) {
+        return refuse('DELIVERY_NOT_A_PING', `Delivery ${delivery.id} is not a ping: pong answers only a ping, ack the others`);
+    }
+    const acknowledged = acknowledgeDelivery(delivery, pong);
+    if (!acknowledged.isOk) {
+        return acknowledged;
+    }
+    const events = acknowledged.value.events.map((event) => ({ ...event, details: { ...event.details, answer: 'pong' } }));
+    return ok({ delivery: acknowledged.value.delivery, events });
+}
+/**
+ * The operator lets an undeliverable delivery go (docs/blueprint.md,
+ * "DeliveryUndeliverable"): it becomes dismissed, kept in history with its
+ * claims, and leaves Needs attention. The event names the ship it was for; a
+ * delivery to a type names none. Dismissing it again is harmless: OK, and
+ * nothing changes. Any other delivery is refused: only an undeliverable one
+ * waits for the operator.
+ */
+export function dismissDelivery(delivery, dismiss) {
+    switch (delivery.state) {
+        case 'dismissed':
+            return ok({ delivery, events: [] });
+        case 'undeliverable':
+            return ok({
+                delivery: { ...delivery, state: 'dismissed' },
+                events: [
+                    {
+                        fleetId: delivery.fleetId,
+                        type: 'DeliveryDismissed',
+                        occurredAt: dismiss.at,
+                        actor: shipActor(dismiss.by),
+                        shipId: delivery.recipient.kind === 'ship' ? delivery.recipient.shipId : undefined,
+                        messageId: delivery.messageId,
+                        deliveryId: delivery.id,
+                    },
+                ],
+            });
+        case 'pending':
+        case 'delivered':
+        case 'acknowledged':
+        case 'abandoned':
+            return refuse('DELIVERY_NOT_UNDELIVERABLE', `Delivery ${delivery.id} is ${delivery.state}, not undeliverable: only an undeliverable delivery is dismissed`);
+    }
+}
+/**
+ * A resend dismisses the delivery it resends, which must be undeliverable:
+ * one already dismissed has nothing left to resend.
+ */
+export function dismissForResend(delivery, dismiss) {
+    return delivery.state === 'undeliverable'
+        ? dismissDelivery(delivery, dismiss)
+        : refuse('DELIVERY_NOT_UNDELIVERABLE', `Delivery ${delivery.id} is ${delivery.state}, not undeliverable: only an undeliverable delivery is resent`);
+}
+/**
+ * argo marks a message to it done (docs/blueprint.md, "Inbox"): the console
+ * never receives, so an open delivery is claimed and acknowledged at once
+ * under the console session's lease, one claim counted, and its two events
+ * written as a receive and an ack would write them. One the session already
+ * holds in flight is only acknowledged. The acknowledgement names the reply
+ * that made it done, when a reply did. Marking it done again is harmless: OK,
+ * and nothing changes. A delivery to another ship is not in argo's inbox; one
+ * undeliverable, dismissed or abandoned is no longer open.
+ */
+export function markDone(delivery, done) {
+    const { crew, at, reply } = done;
+    const { recipient } = delivery;
+    if (recipient.kind !== 'ship' || recipient.shipId !== crew.shipId) {
+        return refuse('DELIVERY_NOT_FOUND', `Delivery ${delivery.id} is not in your inbox`);
+    }
+    const concerns = {
+        fleetId: delivery.fleetId,
+        occurredAt: at,
+        actor: shipActor(crew.shipId),
+        shipId: crew.shipId,
+        messageId: delivery.messageId,
+        deliveryId: delivery.id,
+    };
+    const acknowledged = {
+        ...concerns,
+        type: 'DeliveryAcknowledged',
+        details: { leaseId: crew.leaseId, ...(reply && { reply }) },
+    };
+    switch (delivery.state) {
+        case 'acknowledged':
+            return ok({ delivery, events: [] });
+        case 'pending': {
+            const attempts = delivery.attempts + 1;
+            return ok({
+                delivery: { ...delivery, state: 'acknowledged', claimedByShipId: crew.shipId, claimedByLeaseId: crew.leaseId, attempts },
+                events: [{ ...concerns, type: 'DeliveryClaimed', details: { leaseId: crew.leaseId, attempts } }, acknowledged],
+            });
+        }
+        case 'delivered':
+            return delivery.claimedByLeaseId === crew.leaseId
+                ? ok({ delivery: { ...delivery, state: 'acknowledged' }, events: [acknowledged] })
+                : refuse('DELIVERY_HELD_BY_ANOTHER_SHIP', `Delivery ${delivery.id} is held by another session`);
+        case 'undeliverable':
+        case 'dismissed':
+        case 'abandoned':
+            return refuse('DELIVERY_NOT_OPEN', `Delivery ${delivery.id} is ${delivery.state}: only an open message is marked done`);
+    }
+}
+/** Whether the delivery is addressed to the ship itself: in its inbox, not its type's queue. */
+export function isInInboxOf(delivery, shipId) {
+    return delivery?.recipient.kind === 'ship' && delivery.recipient.shipId === shipId;
+}
+//# sourceMappingURL=delivery.js.map

package/dist/domain/messaging/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../../src/domain/messaging/delivery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAA6C,MAAM,sBAAsB,CAAC;AAEpG,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAiB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAexC;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAkB,EAAE,KAAqC;IACrF,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE;KAC7C,CAAC;IAEF,IAAI,QAAQ,IAAI,sBAAsB,EAAE,CAAC;QACvC,OAAO;YACL,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE;YAC1G,MAAM,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE;QACrH,MAAM,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAkB,EAClB,GAAmC;IAEnC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;IACzB,QAAQ,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc;YACjB,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC7C,OAAO,MAAM,CACX,+BAA+B,EAC/B,YAAY,QAAQ,CAAC,EAAE,0EAA0E,CAClG,CAAC;YACJ,CAAC;YACD,IAAI,QAAQ,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,EAAE,CAAC;gBACR,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE;gBAChD,MAAM,EAAE;oBACN;wBACE,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,IAAI,EAAE,sBAAsB;wBAC5B,UAAU,EAAE,EAAE;wBACd,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;wBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;qBACnC;iBACF;aACF,CAAC,CAAC;QACL,KAAK,SAAS,CAAC;QACf,KAAK,eAAe,CAAC;QACrB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,MAAM,CACX,wBAAwB,EACxB,YAAY,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC,KAAK,sEAAsE,CACnH,CAAC;IACN,CAAC;AACH,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CACxB,QAAkB,EAClB,IAAsD;IAEtD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,OAAO,MAAM,CAAC,qBAAqB,EAAE,YAAY,QAAQ,CAAC,EAAE,0DAA0D,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IACvH,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AAC/D,CAAC;AAID;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAkB,EAClB,OAAiC;IAEjC,QAAQ,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,WAAW;YACd,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,eAAe;YAClB,OAAO,EAAE,CAAC;gBACR,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE;gBAC7C,MAAM,EAAE;oBACN;wBACE,OAAO,EAAE,QAAQ,CAAC,OAAO;wBACzB,IAAI,EAAE,mBAAmB;wBACzB,UAAU,EAAE,OAAO,CAAC,EAAE;wBACtB,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC5B,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBAClF,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,UAAU,EAAE,QAAQ,CAAC,EAAE;qBACxB;iBACF;aACF,CAAC,CAAC;QACL,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,WAAW;YACd,OAAO,MAAM,CACX,4BAA4B,EAC5B,YAAY,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC,KAAK,kEAAkE,CAC/G,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAkB,EAClB,OAAiC;IAEjC,OAAO,QAAQ,CAAC,KAAK,KAAK,eAAe;QACvC,CAAC,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC;QACpC,CAAC,CAAC,MAAM,CACJ,4BAA4B,EAC5B,YAAY,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC,KAAK,+DAA+D,CAC5G,CAAC;AACR,CAAC;AAID;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CACtB,QAAkB,EAClB,IAAuD;IAEvD,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;IAC/B,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,oBAAoB,EAAE,YAAY,QAAQ,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,EAAE;KACxB,CAAC;IACF,MAAM,YAAY,GAAa;QAC7B,GAAG,QAAQ;QACX,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE;KAC5D,CAAC;IAEF,QAAQ,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,KAAK,cAAc;YACjB,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvC,OAAO,EAAE,CAAC;gBACR,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE;gBACxH,MAAM,EAAE,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,CAAC;aAC/G,CAAC,CAAC;QACL,CAAC;QACD,KAAK,WAAW;YACd,OAAO,QAAQ,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO;gBAC/C,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClF,CAAC,CAAC,MAAM,CAAC,+BAA+B,EAAE,YAAY,QAAQ,CAAC,EAAE,6BAA6B,CAAC,CAAC;QACpG,KAAK,eAAe,CAAC;QACrB,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,mBAAmB,EAAE,YAAY,QAAQ,CAAC,EAAE,OAAO,QAAQ,CAAC,KAAK,uCAAuC,CAAC,CAAC;IAC5H,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,QAA8B,EAAE,MAAc;IACxE,OAAO,QAAQ,EAAE,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC;AACrF,CAAC"}

package/dist/domain/messaging/dismiss-delivery.d.ts

@@ -0,0 +1,28 @@
+import type { DeliveryId, IdGenerator } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type DismissRefusal } from './delivery.js';
+import type { DeliveryRepository } from './ports.js';
+export interface DismissDeliveryTx {
+    deliveries: Pick<DeliveryRepository, 'findForUpdate' | 'update'>;
+    events: EventLog;
+}
+export type DismissDeliveryRefusal = DomainError<'DELIVERY_NOT_FOUND'> | DismissRefusal;
+export type DismissDelivery = (caller: Caller, input: {
+    deliveryId: DeliveryId;
+}) => Promise<Result<undefined, DismissDeliveryRefusal>>;
+/**
+ * Use case: the operator dismisses an undeliverable delivery from Needs
+ * attention. Its scope (fleet:manage) is checked before this runs. The
+ * delivery, locked, becomes dismissed with DeliveryDismissed in one unit of
+ * work, so a resend of the same delivery waits and then finds it dismissed.
+ */
+export declare function createDismissDelivery(deps: {
+    uow: UnitOfWork<DismissDeliveryTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): DismissDelivery;

package/dist/domain/messaging/dismiss-delivery.js

@@ -0,0 +1,29 @@
+import { refuse } from '../shared/errors.js';
+import { recordEvent } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { dismissDelivery } from './delivery.js';
+/**
+ * Use case: the operator dismisses an undeliverable delivery from Needs
+ * attention. Its scope (fleet:manage) is checked before this runs. The
+ * delivery, locked, becomes dismissed with DeliveryDismissed in one unit of
+ * work, so a resend of the same delivery waits and then finds it dismissed.
+ */
+export function createDismissDelivery(deps) {
+    return (caller, input) => deps.uow.run(async (tx) => {
+        const delivery = await tx.deliveries.findForUpdate(caller.fleetId, input.deliveryId);
+        if (!delivery) {
+            return refuse('DELIVERY_NOT_FOUND', `Delivery ${input.deliveryId} does not exist`);
+        }
+        const dismissed = dismissDelivery(delivery, { by: caller.shipId, at: deps.clock.now() });
+        if (!dismissed.isOk) {
+            return dismissed;
+        }
+        const { delivery: changed, events } = dismissed.value;
+        await tx.deliveries.update(changed);
+        for (const event of events) {
+            await recordEvent({ events: tx.events, ids: deps.ids }, event);
+        }
+        return ok(undefined);
+    });
+}
+//# sourceMappingURL=dismiss-delivery.js.map

package/dist/domain/messaging/dismiss-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dismiss-delivery.js","sourceRoot":"","sources":["../../../src/domain/messaging/dismiss-delivery.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAuB,MAAM,eAAe,CAAC;AAerE;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAIrC;IACC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAsD,EAAE;QAC5E,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,oBAAoB,EAAE,YAAY,KAAK,CAAC,UAAU,iBAAiB,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC;QACtD,MAAM,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/messaging/inbox-wait.d.ts

@@ -0,0 +1,8 @@
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+/**
+ * How long an inbox check waits while nothing waits, in milliseconds: the
+ * crew chooses 0 to 25 whole seconds, as long as a receive at most, and gets
+ * no wait when it does not say.
+ */
+export declare function inboxWait(waitSeconds: number | undefined): Result<number, DomainError<'INVALID_INBOX_WAIT'>>;

package/dist/domain/messaging/inbox-wait.js

@@ -0,0 +1,19 @@
+import { INBOX_WAIT_MAX_SECONDS } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/** A second, in the milliseconds the wake-ups wait. */
+const SECOND_MS = 1000;
+/**
+ * How long an inbox check waits while nothing waits, in milliseconds: the
+ * crew chooses 0 to 25 whole seconds, as long as a receive at most, and gets
+ * no wait when it does not say.
+ */
+export function inboxWait(waitSeconds) {
+    if (waitSeconds === undefined) {
+        return ok(0);
+    }
+    return Number.isInteger(waitSeconds) && waitSeconds >= 0 && waitSeconds <= INBOX_WAIT_MAX_SECONDS
+        ? ok(waitSeconds * SECOND_MS)
+        : refuse('INVALID_INBOX_WAIT', `An inbox check waits 0 to ${INBOX_WAIT_MAX_SECONDS} whole seconds`);
+}
+//# sourceMappingURL=inbox-wait.js.map

package/dist/domain/messaging/inbox-wait.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox-wait.js","sourceRoot":"","sources":["../../../src/domain/messaging/inbox-wait.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,uDAAuD;AACvD,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,WAA+B;IACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,IAAI,WAAW,IAAI,sBAAsB;QAC/F,CAAC,CAAC,EAAE,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,CAAC,CAAC,MAAM,CAAC,oBAAoB,EAAE,6BAA6B,sBAAsB,gBAAgB,CAAC,CAAC;AACxG,CAAC"}

package/dist/domain/messaging/mark-done.d.ts

@@ -0,0 +1,45 @@
+import type { DeliveryId, IdGenerator, MessageId } from '@aeolus-fleet/common';
+import { type HoldLeaseTx, type LeaseEnded } from '../registry/public.js';
+import type { Crew } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type MarkDoneRefusal } from './delivery.js';
+import type { DeliveryRepository } from './ports.js';
+export interface MarkDoneTx extends HoldLeaseTx {
+    deliveries: Pick<DeliveryRepository, 'findForUpdate' | 'update'>;
+    events: EventLog;
+}
+export type MarkDoneUseCaseRefusal = DomainError<'DELIVERY_NOT_FOUND' | 'NOT_THE_OPERATOR_SHIP'> | LeaseEnded | MarkDoneRefusal;
+export type MarkDone = (crew: Crew, input: {
+    deliveryId: DeliveryId;
+}) => Promise<Result<undefined, MarkDoneUseCaseRefusal>>;
+/**
+ * Marks a delivery to argo done inside the caller's unit of work, under the
+ * console session's lease, held until the unit of work ends: a sign-in
+ * elsewhere ending it waits, then returns nothing this marked. `reply` names
+ * the reply that made it done. Only argo: an agent acknowledges what it
+ * receives.
+ */
+export declare function markDoneWithin(deps: {
+    tx: MarkDoneTx;
+    clock: Clock;
+    ids: IdGenerator;
+}, done: {
+    crew: Crew;
+    deliveryId: DeliveryId;
+    reply?: MessageId;
+}): Promise<Result<undefined, MarkDoneUseCaseRefusal>>;
+/**
+ * Use case: argo marks a message to it done from the operator inbox, without
+ * a reply (docs/blueprint.md, "Inbox"). Its scope (messages:receive) is
+ * checked before this runs. One unit of work: the claim, the acknowledgement
+ * and their events.
+ */
+export declare function createMarkDone(deps: {
+    uow: UnitOfWork<MarkDoneTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): MarkDone;