@aeolus-fleet/core 0.0.0 → 0.19.0

package/dist/domain/messaging/send-request.js

@@ -0,0 +1,18 @@
+/**
+ * The request as one text, the same for the same request whatever order its
+ * fields came in: the selector as sent (one ship by id and by name are two
+ * requests), the payload, the content type and the message it replies to.
+ * Its hash is kept with the message to tell a repeat from a reused key.
+ */
+export function sendRequestText(request) {
+    return JSON.stringify([selectorFields(request.selector), request.payload, request.contentType, request.inReplyTo ?? null]);
+}
+function selectorFields(selector) {
+    switch (selector.kind) {
+        case 'ship':
+            return 'shipId' in selector ? ['ship', 'id', selector.shipId] : ['ship', 'name', selector.name];
+        case 'type':
+            return ['type', selector.type];
+    }
+}
+//# sourceMappingURL=send-request.js.map

package/dist/domain/messaging/send-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send-request.js","sourceRoot":"","sources":["../../../src/domain/messaging/send-request.ts"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAoB;IAClD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB;IACxC,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM;YACT,OAAO,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClG,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/domain/registry/applied-limits.d.ts

@@ -0,0 +1,15 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { FleetRepository, InstallationSettingsRepository } from './ports.js';
+export interface AppliedLimitsTx {
+    fleets: Pick<FleetRepository, 'limitSettings'>;
+    installationSettings: InstallationSettingsRepository;
+}
+/**
+ * The ship and daily message limits that apply to the fleet now, in the
+ * caller's unit of work: its own where it set one, else the installation's
+ * default; null where none applies.
+ */
+export declare function appliedLimits(tx: AppliedLimitsTx, fleetId: FleetId): Promise<{
+    ships: number | null;
+    dailyMessages: number | null;
+}>;

package/dist/domain/registry/applied-limits.js

@@ -0,0 +1,15 @@
+import { appliedLimit, FOLLOWING_DEFAULTS } from './limits.js';
+/**
+ * The ship and daily message limits that apply to the fleet now, in the
+ * caller's unit of work: its own where it set one, else the installation's
+ * default; null where none applies.
+ */
+export async function appliedLimits(tx, fleetId) {
+    const settings = (await tx.fleets.limitSettings(fleetId)) ?? FOLLOWING_DEFAULTS;
+    const installation = await tx.installationSettings.read();
+    return {
+        ships: appliedLimit(settings.ships, installation.defaultShipLimit),
+        dailyMessages: appliedLimit(settings.dailyMessages, installation.defaultDailyMessageLimit),
+    };
+}
+//# sourceMappingURL=applied-limits.js.map

package/dist/domain/registry/applied-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applied-limits.js","sourceRoot":"","sources":["../../../src/domain/registry/applied-limits.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAQ/D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAmB,EAAE,OAAgB;IACvE,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,kBAAkB,CAAC;IAChF,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IAC1D,OAAO;QACL,KAAK,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,gBAAgB,CAAC;QAClE,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,wBAAwB,CAAC;KAC3F,CAAC;AACJ,CAAC"}

package/dist/domain/registry/assign-crew.d.ts

@@ -0,0 +1,31 @@
+import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type AssignCrewRefusal } from './crew-request.js';
+import type { CrewRequestRepository, LeaseRepository, ShipRepository } from './ports.js';
+export interface AssignCrewTx {
+    ships: Pick<ShipRepository, 'findForUpdate' | 'find'>;
+    leases: Pick<LeaseRepository, 'findOpenForShare'>;
+    crewRequests: CrewRequestRepository;
+    events: EventLog;
+}
+export type AssignCrew = (caller: Caller, input: {
+    shipId: ShipId;
+    trierarchShipId: ShipId;
+}) => Promise<Result<undefined, DomainError<'SHIP_NOT_FOUND'> | AssignCrewRefusal>>;
+/**
+ * Use case: a ship with crew:assign (the trierarch plugin) assigns a ship's
+ * crew request to a trierarch. Its scope is checked before this runs. In one
+ * unit of work, locking the ship first, so of two claims on one request the
+ * second finds it assigned (optimistic claim); its lease is held as a release
+ * holds it, so a claim and a crew coming aboard never cross.
+ */
+export declare function createAssignCrew(deps: {
+    uow: UnitOfWork<AssignCrewTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): AssignCrew;

package/dist/domain/registry/assign-crew.js

@@ -0,0 +1,35 @@
+import { refuse } from '../shared/errors.js';
+import { recordEvent, shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { assignCrew } from './crew-request.js';
+/**
+ * Use case: a ship with crew:assign (the trierarch plugin) assigns a ship's
+ * crew request to a trierarch. Its scope is checked before this runs. In one
+ * unit of work, locking the ship first, so of two claims on one request the
+ * second finds it assigned (optimistic claim); its lease is held as a release
+ * holds it, so a claim and a crew coming aboard never cross.
+ */
+export function createAssignCrew(deps) {
+    return (caller, input) => deps.uow.run(async (tx) => {
+        const { fleetId } = caller;
+        const ship = await tx.ships.findForUpdate(fleetId, input.shipId);
+        if (!ship) {
+            return refuse('SHIP_NOT_FOUND', `Ship ${input.shipId} does not exist`);
+        }
+        const assigned = assignCrew({
+            ship,
+            current: await tx.crewRequests.find(fleetId, ship.id),
+            isCrewed: (await tx.leases.findOpenForShare(fleetId, ship.id)) !== undefined,
+            assignee: await tx.ships.find(fleetId, input.trierarchShipId),
+        }, { at: deps.clock.now(), actor: shipActor(caller.shipId) });
+        if (!assigned.isOk) {
+            return assigned;
+        }
+        await tx.crewRequests.save(assigned.value.request);
+        for (const event of assigned.value.events) {
+            await recordEvent({ events: tx.events, ids: deps.ids }, event);
+        }
+        return ok(undefined);
+    });
+}
+//# sourceMappingURL=assign-crew.js.map

package/dist/domain/registry/assign-crew.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-crew.js","sourceRoot":"","sources":["../../../src/domain/registry/assign-crew.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAiB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,UAAU,EAA0B,MAAM,mBAAmB,CAAC;AAevE;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAuE;IACtG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAiF,EAAE;QACvG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CACzB;YACE,IAAI;YACJ,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YACrD,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS;YAC5E,QAAQ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC;SAC9D,EACD,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAC1D,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1C,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/claim-ship.d.ts

@@ -0,0 +1,49 @@
+import type { IdGenerator, LocationKind, ShipId } from '@aeolus-fleet/common';
+import { type CredentialTx, type SecretTools } from '../identity/public.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import type { LeaseRepository, ShipRepository } from './ports.js';
+import { type ClaimRefusal } from './ship.js';
+export interface ClaimShipTx extends CredentialTx {
+    /** Read only: a claim never locks the ship (see the lock order below). */
+    ships: Pick<ShipRepository, 'find'>;
+    leases: LeaseRepository;
+    events: EventLog;
+}
+export interface ShipCrewed {
+    /** The crew token every later ship call carries, in plain text only here (ADR 0015). */
+    crewToken: string;
+}
+export type ClaimShipRefusal = DomainError<'INVALID_LOCATION' | 'INVALID_HARNESS' | 'WRONG_SHIP_ID_OR_SECRET'> | ClaimRefusal;
+export type ClaimShip = (input: {
+    shipId: ShipId;
+    secret: string;
+    location: {
+        kind: LocationKind;
+        description?: string;
+    };
+    harness: string;
+}) => Promise<Result<ShipCrewed, ClaimShipRefusal>>;
+/**
+ * Use case: a session claims a ship with the id and secret from its starting
+ * prompt (`register`), reports where it runs and in which harness, and
+ * becomes the ship's crew. The
+ * ship's own secret is the credential, so no caller is resolved first.
+ *
+ * Lock order: the secret first, then the lease. The ship is read, never locked:
+ * a starting prompt holds it `FOR NO KEY UPDATE` while it waits for the same
+ * secret, so the two serialise on the secret. A claim that holds it first
+ * crews the ship, and the prompt then finds the lease and is refused; a prompt
+ * that holds it first invalidates it, and the claim then finds no valid
+ * secret. Two claims with one secret serialise the same way: the second finds
+ * the first one's lease.
+ */
+export declare function createClaimShip(deps: {
+    uow: UnitOfWork<ClaimShipTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    secrets: Omit<SecretTools, 'ids'>;
+}): ClaimShip;

package/dist/domain/registry/claim-ship.js

@@ -0,0 +1,59 @@
+import { findValidShipSecret, markShipSecretClaimed, } from '../identity/public.js';
+import { refuse } from '../shared/errors.js';
+import { recordEvent } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { CREW_TOKEN_PREFIX, harness, location } from './lease.js';
+import { claimShip } from './ship.js';
+/**
+ * Use case: a session claims a ship with the id and secret from its starting
+ * prompt (`register`), reports where it runs and in which harness, and
+ * becomes the ship's crew. The
+ * ship's own secret is the credential, so no caller is resolved first.
+ *
+ * Lock order: the secret first, then the lease. The ship is read, never locked:
+ * a starting prompt holds it `FOR NO KEY UPDATE` while it waits for the same
+ * secret, so the two serialise on the secret. A claim that holds it first
+ * crews the ship, and the prompt then finds the lease and is refused; a prompt
+ * that holds it first invalidates it, and the claim then finds no valid
+ * secret. Two claims with one secret serialise the same way: the second finds
+ * the first one's lease.
+ */
+export function createClaimShip(deps) {
+    const { hasher, random } = deps.secrets;
+    return async (input) => {
+        const reported = location(input.location.kind, input.location.description);
+        if (!reported.isOk) {
+            return reported;
+        }
+        const stated = harness(input.harness);
+        if (!stated.isOk) {
+            return stated;
+        }
+        return deps.uow.run(async (tx) => {
+            const secret = await findValidShipSecret({ tx, hasher }, { shipId: input.shipId, secret: input.secret });
+            if (!secret.isOk) {
+                return secret;
+            }
+            const { fleetId, shipId } = secret.value;
+            const ship = await tx.ships.find(fleetId, shipId);
+            if (!ship) {
+                // A secret always belongs to a ship of its fleet; the foreign key keeps it so.
+                return refuse('WRONG_SHIP_ID_OR_SECRET', 'Wrong ship id or secret');
+            }
+            const heldLease = await tx.leases.findOpenForUpdate(fleetId, shipId);
+            const crewToken = CREW_TOKEN_PREFIX + random.next();
+            const at = deps.clock.now();
+            const claimed = claimShip({ ship, heldLease }, { leaseId: deps.ids('lease'), location: reported.value, harness: stated.value, crewTokenHash: hasher.hash(crewToken), at });
+            if (!claimed.isOk) {
+                return claimed;
+            }
+            await tx.leases.open(claimed.value.lease);
+            await markShipSecretClaimed(tx, { credential: secret.value, at });
+            for (const event of claimed.value.events) {
+                await recordEvent({ events: tx.events, ids: deps.ids }, event);
+            }
+            return ok({ crewToken });
+        });
+    };
+}
+//# sourceMappingURL=claim-ship.js.map

package/dist/domain/registry/claim-ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-ship.js","sourceRoot":"","sources":["../../../src/domain/registry/claim-ship.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,GAGtB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAElE,OAAO,EAAE,SAAS,EAAqB,MAAM,WAAW,CAAC;AAuBzD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,IAK/B;IACC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;IACxC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3E,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAiD,EAAE;YAC9E,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YACzG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;YACzC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,+EAA+E;gBAC/E,OAAO,MAAM,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;YACtE,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAErE,MAAM,SAAS,GAAG,iBAAiB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,SAAS,CACvB,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,CAC3H,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,qBAAqB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAClE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzC,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/registry/commission-ship.d.ts

@@ -0,0 +1,54 @@
+import { type FleetScope, type IdGenerator, type ShipId } from '@aeolus-fleet/common';
+import type { SecretTools } from '../identity/public.js';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type AppliedLimitsTx } from './applied-limits.js';
+import type { ShipRepository } from './ports.js';
+import { type CommissionRefusal } from './ship.js';
+import { type StartingPromptTx } from './starting-prompt.js';
+export interface CommissionShipTx extends StartingPromptTx, AppliedLimitsTx {
+    ships: ShipRepository;
+}
+export interface CommissionShipInput {
+    name: string;
+    type: string;
+    note?: string;
+    fleetScopes?: readonly FleetScope[];
+    /** The caller's own key for this commission, so a retry never commissions twice. */
+    idempotencyKey: string;
+}
+/**
+ * The commissioned ship. On the first commission, the secret of its starting
+ * prompt, shown once; on a repeat under the same key, none (the secret exists
+ * in plain text only once), and the state of its starting prompt.
+ */
+export interface CommissionedShip {
+    shipId: ShipId;
+    secret: string | null;
+    /** When its valid secret was issued and whether a session claimed it; null when it has none. */
+    startingPrompt: {
+        issuedAt: Date;
+        isClaimed: boolean;
+    } | null;
+}
+export type CommissionShipRefusal = CommissionRefusal | DomainError<'INVALID_IDEMPOTENCY_KEY' | 'IDEMPOTENCY_KEY_REUSED' | 'SHIP_LIMIT_REACHED'>;
+export type CommissionShip = (caller: Caller, input: CommissionShipInput) => Promise<Result<CommissionedShip, CommissionShipRefusal>>;
+/**
+ * Use case: the caller commissions an agent ship in its own fleet. The ship
+ * awaits crew and gets its first starting prompt, all in one transaction. The
+ * caller's scope (fleet:manage) is checked before this runs. The ship gets
+ * the agent scopes and any fleet scopes asked for; any caller with
+ * fleet:manage may give them (ADR 0016). The caller's idempotency key makes
+ * a retry safe: the same key with the same request answers the ship it
+ * commissioned, with no secret, and changes nothing; the same key with another
+ * request is refused.
+ */
+export declare function createCommissionShip(deps: {
+    uow: UnitOfWork<CommissionShipTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    secrets: Omit<SecretTools, 'ids'>;
+}): CommissionShip;

package/dist/domain/registry/commission-ship.js

@@ -0,0 +1,70 @@
+import { FLEET_SCOPES } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { recordEvent, shipActor } from '../shared/events.js';
+import { idempotencyKey } from '../shared/idempotency-key.js';
+import { ok } from '../shared/result.js';
+import { appliedLimits } from './applied-limits.js';
+import { commissionAgentShip } from './ship.js';
+import { issueStartingPrompt } from './starting-prompt.js';
+/** The request as one text, so a repeat is known by its hash: the fleet scopes in a fixed order, each once. */
+function commissionRequestText(input) {
+    const fleetScopes = FLEET_SCOPES.filter((scope) => input.fleetScopes?.includes(scope));
+    return JSON.stringify({ name: input.name, type: input.type, note: input.note ?? null, fleetScopes });
+}
+/**
+ * Use case: the caller commissions an agent ship in its own fleet. The ship
+ * awaits crew and gets its first starting prompt, all in one transaction. The
+ * caller's scope (fleet:manage) is checked before this runs. The ship gets
+ * the agent scopes and any fleet scopes asked for; any caller with
+ * fleet:manage may give them (ADR 0016). The caller's idempotency key makes
+ * a retry safe: the same key with the same request answers the ship it
+ * commissioned, with no secret, and changes nothing; the same key with another
+ * request is refused.
+ */
+export function createCommissionShip(deps) {
+    return (caller, input) => deps.uow.run(async (tx) => {
+        const { fleetId } = caller;
+        const actor = shipActor(caller.shipId);
+        const at = deps.clock.now();
+        const key = idempotencyKey(input.idempotencyKey);
+        if (!key.isOk) {
+            return key;
+        }
+        const requestHash = deps.secrets.hasher.hash(commissionRequestText(input));
+        const commissionKey = { fleetId, by: caller.shipId, idempotencyKey: key.value };
+        await tx.ships.lockCommissionKey(commissionKey);
+        const original = await tx.ships.findByCommissionKey(commissionKey);
+        if (original) {
+            if (original.commission?.requestHash !== requestHash) {
+                return refuse('IDEMPOTENCY_KEY_REUSED', 'This idempotency key was already used for another commission: commission with a new key');
+            }
+            const secret = await tx.credentials.findValidForShipForUpdate(fleetId, original.id);
+            return ok({
+                shipId: original.id,
+                secret: null,
+                startingPrompt: secret ? { issuedAt: secret.issuedAt, isClaimed: secret.claimedAt !== null } : null,
+            });
+        }
+        const { ships: shipLimit } = await appliedLimits(tx, fleetId);
+        if (shipLimit !== null) {
+            // Counted under the fleet's lock, held until the ship is stored: commissions at the limit never overshoot it.
+            await tx.ships.lockShipCount(fleetId);
+            if ((await tx.ships.countActive(fleetId)) >= shipLimit) {
+                return refuse('SHIP_LIMIT_REACHED', `The fleet is at its limit of ${String(shipLimit)} ships, so it takes no new one.`);
+            }
+        }
+        await tx.ships.lockName(fleetId, input.name);
+        const commissioned = commissionAgentShip({ ...input, id: deps.ids('ship'), fleetId, at, actor, commission: { by: caller.shipId, idempotencyKey: key.value, requestHash } }, { activeShipNamed: await tx.ships.findActiveByName(fleetId, input.name) });
+        if (!commissioned.isOk) {
+            return commissioned;
+        }
+        const { ship, events } = commissioned.value;
+        await tx.ships.create(ship);
+        for (const event of events) {
+            await recordEvent({ events: tx.events, ids: deps.ids }, event);
+        }
+        const issued = await issueStartingPrompt({ tx, secrets: { ...deps.secrets, ids: deps.ids } }, { fleetId, shipId: ship.id, actor, at });
+        return ok({ ...issued, startingPrompt: { issuedAt: at, isClaimed: false } });
+    });
+}
+//# sourceMappingURL=commission-ship.js.map

package/dist/domain/registry/commission-ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commission-ship.js","sourceRoot":"","sources":["../../../src/domain/registry/commission-ship.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAkD,MAAM,sBAAsB,CAAC;AAKpG,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAwB,MAAM,qBAAqB,CAAC;AAE1E,OAAO,EAAE,mBAAmB,EAA0B,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAyB,MAAM,sBAAsB,CAAC;AA+BlF,+GAA+G;AAC/G,SAAS,qBAAqB,CAAC,KAA0B;IACvD,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACvF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;AACvG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAKpC;IACC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAA4D,EAAE;QAClF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3E,MAAM,aAAa,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;QAEhF,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QACnE,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,UAAU,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;gBACrD,OAAO,MAAM,CAAC,wBAAwB,EAAE,yFAAyF,CAAC,CAAC;YACrI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,WAAW,CAAC,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,CAAC;gBACR,MAAM,EAAE,QAAQ,CAAC,EAAE;gBACnB,MAAM,EAAE,IAAI;gBACZ,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;aACpG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAC9D,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,8GAA8G;YAC9G,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC;gBACvD,OAAO,MAAM,CAAC,oBAAoB,EAAE,gCAAgC,MAAM,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC;YAC1H,CAAC;QACH,CAAC;QAED,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,mBAAmB,CACtC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,EACjI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAC1E,CAAC;QACF,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC;QAE5C,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EACnD,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CACxC,CAAC;QACF,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/confirm-crew-release.d.ts

@@ -0,0 +1,28 @@
+import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import type { CrewRequestRepository, ShipRepository } from './ports.js';
+export interface ConfirmCrewReleaseTx {
+    ships: Pick<ShipRepository, 'findForUpdate'>;
+    crewRequests: CrewRequestRepository;
+    events: EventLog;
+}
+export type ConfirmCrewReleaseRefusal = DomainError<'SHIP_NOT_FOUND' | 'CREW_REQUEST_NOT_FOUND' | 'CREW_REQUEST_NOT_ASSIGNED_TO_CALLER' | 'CREW_REQUEST_NOT_RELEASING'>;
+export type ConfirmCrewRelease = (caller: Caller, input: {
+    shipId: ShipId;
+}) => Promise<Result<undefined, ConfirmCrewReleaseRefusal>>;
+/**
+ * Use case: the trierarch a releasing crew request is assigned to confirms it
+ * stopped the session, ended the lease and cleaned its workspace. Its scope
+ * (crew:run) is checked before this runs. In one unit of work, locking the
+ * ship first: the request goes, with CrewRequestRemoved.
+ */
+export declare function createConfirmCrewRelease(deps: {
+    uow: UnitOfWork<ConfirmCrewReleaseTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): ConfirmCrewRelease;

package/dist/domain/registry/confirm-crew-release.js

@@ -0,0 +1,28 @@
+import { refuse } from '../shared/errors.js';
+import { recordEvent, shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { confirmCrewRelease } from './crew-request.js';
+/**
+ * Use case: the trierarch a releasing crew request is assigned to confirms it
+ * stopped the session, ended the lease and cleaned its workspace. Its scope
+ * (crew:run) is checked before this runs. In one unit of work, locking the
+ * ship first: the request goes, with CrewRequestRemoved.
+ */
+export function createConfirmCrewRelease(deps) {
+    return (caller, input) => deps.uow.run(async (tx) => {
+        const ship = await tx.ships.findForUpdate(caller.fleetId, input.shipId);
+        if (!ship) {
+            return refuse('SHIP_NOT_FOUND', `Ship ${input.shipId} does not exist`);
+        }
+        const confirmed = confirmCrewRelease({ ship, current: await tx.crewRequests.find(caller.fleetId, ship.id), trierarchShipId: caller.shipId }, { at: deps.clock.now(), actor: shipActor(caller.shipId) });
+        if (!confirmed.isOk) {
+            return confirmed;
+        }
+        await tx.crewRequests.remove(caller.fleetId, ship.id);
+        for (const event of confirmed.value.events) {
+            await recordEvent({ events: tx.events, ids: deps.ids }, event);
+        }
+        return ok(undefined);
+    });
+}
+//# sourceMappingURL=confirm-crew-release.js.map

package/dist/domain/registry/confirm-crew-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirm-crew-release.js","sourceRoot":"","sources":["../../../src/domain/registry/confirm-crew-release.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAiB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAevD;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA+E;IACtH,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAyD,EAAE;QAC/E,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,EACtG,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAC1D,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/create-fleet.d.ts

@@ -0,0 +1,39 @@
+import type { FleetId, IdGenerator, ShipId } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { SecretHasher } from '../shared/secrets.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type FoundFleetTx } from './found-fleet.js';
+import type { InstallationRequestRepository, InstallationSettingsRepository } from './ports.js';
+export interface CreateFleetTx extends FoundFleetTx {
+    installationRequests: InstallationRequestRepository;
+    installationSettings: InstallationSettingsRepository;
+}
+export interface FleetCreated {
+    fleetId: FleetId;
+    operatorShipId: ShipId;
+}
+export type CreateFleetRefusal = DomainError<'INVALID_FLEET_NAME' | 'INVALID_EMAIL' | 'OPERATOR_EMAIL_TAKEN' | 'IDEMPOTENCY_KEY_REUSED' | 'FLEET_LIMIT_REACHED'>;
+export type CreateFleet = (input: {
+    requestId: string;
+    name: string;
+    operatorEmail: string;
+    /** Whether the fleet gets a viewer ship, its read-only door into the console (decision 0022). */
+    hasViewer?: boolean;
+}) => Promise<Result<FleetCreated, CreateFleetRefusal>>;
+/**
+ * Use case: the installation creates a fleet (docs/blueprint.md,
+ * "Installation"), with its argo and its operator account, who has no
+ * password: a password sign-in for that operator fails like a wrong password.
+ * Unlike fleet:init it creates a fleet beside others. The operator email stays
+ * unique across the installation. Asked for, the viewer ship comes with it
+ * (decision 0022). Under its request id it runs once: a replay
+ * answers the same fleet, and a different create under that id is refused.
+ */
+export declare function createCreateFleet(deps: {
+    uow: UnitOfWork<CreateFleetTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    hasher: SecretHasher;
+}): CreateFleet;

package/dist/domain/registry/create-fleet.js

@@ -0,0 +1,56 @@
+import { operatorEmail } from '../identity/public.js';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { fleetName } from './fleet.js';
+import { foundFleet } from './found-fleet.js';
+import { installationRequestText } from './installation-request.js';
+/**
+ * Use case: the installation creates a fleet (docs/blueprint.md,
+ * "Installation"), with its argo and its operator account, who has no
+ * password: a password sign-in for that operator fails like a wrong password.
+ * Unlike fleet:init it creates a fleet beside others. The operator email stays
+ * unique across the installation. Asked for, the viewer ship comes with it
+ * (decision 0022). Under its request id it runs once: a replay
+ * answers the same fleet, and a different create under that id is refused.
+ */
+export function createCreateFleet(deps) {
+    return async (input) => {
+        const named = fleetName(input.name);
+        if (!named.isOk) {
+            return named;
+        }
+        const email = operatorEmail(input.operatorEmail);
+        if (!email.isOk) {
+            return email;
+        }
+        const name = named.value;
+        const hasViewer = input.hasViewer === true;
+        const requestHash = deps.hasher.hash(installationRequestText(hasViewer ? ['createFleet', name, email.value, 'viewer'] : ['createFleet', name, email.value]));
+        return deps.uow.run(async (tx) => {
+            await tx.installationRequests.lock(input.requestId);
+            const earlier = await tx.installationRequests.find(input.requestId);
+            if (earlier) {
+                return earlier.kind === 'createFleet' && earlier.requestHash === requestHash
+                    ? ok({ fleetId: earlier.fleetId, operatorShipId: earlier.operatorShipId })
+                    : refuse('IDEMPOTENCY_KEY_REUSED', 'This request id was used for another request: use a new one for every request');
+            }
+            const { fleetCap } = await tx.installationSettings.read();
+            if (fleetCap !== null) {
+                // Counted under the installation-wide lock, held until the fleet is stored: creates at the cap never overshoot it.
+                await tx.fleets.lockInitialisation();
+                if ((await tx.fleets.count()) >= fleetCap) {
+                    return refuse('FLEET_LIMIT_REACHED', `The installation is at its cap of ${String(fleetCap)} fleets, so it creates no new one.`);
+                }
+            }
+            await tx.operatorAccounts.lockEmail(email.value);
+            if (await tx.operatorAccounts.findByEmailForUpdate(email.value)) {
+                return refuse('OPERATOR_EMAIL_TAKEN', `An operator already signs in with ${email.value}`);
+            }
+            const at = deps.clock.now();
+            const { fleetId, operatorShipId } = await foundFleet({ tx, ids: deps.ids }, { name, email: email.value, passwordHash: null, at, hasViewer });
+            await tx.installationRequests.record({ requestId: input.requestId, at, requestHash, kind: 'createFleet', fleetId, operatorShipId });
+            return ok({ fleetId, operatorShipId });
+        });
+    };
+}
+//# sourceMappingURL=create-fleet.js.map

package/dist/domain/registry/create-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/create-fleet.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAuBpE;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8F;IAC9H,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE7J,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAqD,EAAE;YAClF,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACpE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW;oBAC1E,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;oBAC1E,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,+EAA+E,CAAC,CAAC;YACxH,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,mHAAmH;gBACnH,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBACrC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC;oBAC1C,OAAO,MAAM,CAAC,qBAAqB,EAAE,qCAAqC,MAAM,CAAC,QAAQ,CAAC,oCAAoC,CAAC,CAAC;gBAClI,CAAC;YACH,CAAC;YAED,MAAM,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,MAAM,EAAE,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO,MAAM,CAAC,sBAAsB,EAAE,qCAAqC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5F,CAAC;YAED,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YAC5B,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7I,MAAM,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;YACpI,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}