@aeolus-fleet/core 0.0.0 → 0.19.0

package/dist/domain/registry/crew-request.d.ts

@@ -0,0 +1,148 @@
+import { type CrewStatus, type FleetId, type Scope, type ShipId } from '@aeolus-fleet/common';
+import { type Caller } from '../shared/caller.js';
+import { type DomainError } from '../shared/errors.js';
+import type { Actor, NewEvent } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { JsonObject } from './report-details.js';
+import { type CrewRequestShipRefusal, type Ship } from './ship.js';
+/**
+ * A standing request that a ship be kept crewed (docs/blueprint.md, "Crew
+ * request"; decision 0029): at most one per ship, in three parts with one
+ * writer each. The settings, which the server stores without meaning, by a
+ * requester with fleet:manage; the assignment, the trierarch ship that crews
+ * it, by a ship with crew:assign; the status, by the assigned trierarch.
+ * Removing an assigned request marks it releasing; it goes once its
+ * trierarch confirms.
+ */
+export interface CrewRequest {
+    fleetId: FleetId;
+    shipId: ShipId;
+    settings: JsonObject;
+    /** One on the first request, one more on every request after it. */
+    settingsVersion: number;
+    /** When the settings were last requested. */
+    requestedAt: Date;
+    /** The trierarch ship it is assigned to; null while unassigned. */
+    assignedTo: ShipId | null;
+    /** How its trierarch says the crew stands; null until it says. */
+    status: CrewStatus | null;
+    /** Why no trierarch can take it, written by the assigner while unassigned; null when none. */
+    reason: string | null;
+}
+type NotFound = DomainError<'CREW_REQUEST_NOT_FOUND'>;
+type Releasing = DomainError<'CREW_REQUEST_RELEASING'>;
+type NotTheCallers = DomainError<'CREW_REQUEST_NOT_ASSIGNED_TO_CALLER'>;
+export type RequestCrewRefusal = CrewRequestShipRefusal | Releasing | DomainError<'CREW_REQUEST_SETTINGS_TOO_LARGE'>;
+/**
+ * A requester asks that the ship be kept crewed, with these settings: the
+ * request it holds now, replacing the settings of any it held and keeping its
+ * assignment and status, and CrewRequested with the settings version, never
+ * the settings. Never argo, the viewer ship or a retired ship; settings of at
+ * most 16 KB; never while the request is releasing.
+ */
+export declare function requestCrew({ ship, current }: {
+    ship: Ship;
+    current: CrewRequest | undefined;
+}, input: {
+    settings: JsonObject;
+    at: Date;
+    actor: Actor;
+}): Result<{
+    request: CrewRequest;
+    events: NewEvent[];
+}, RequestCrewRefusal>;
+/**
+ * A requester removes the ship's crew request. Unassigned, it goes at once,
+ * with CrewRequestRemoved. Assigned, it is marked releasing, with
+ * CrewStatusChanged, and goes once its trierarch confirms; removing it again
+ * meanwhile changes nothing.
+ */
+export declare function removeCrewRequest({ ship, current }: {
+    ship: Ship;
+    current: CrewRequest | undefined;
+}, input: {
+    at: Date;
+    actor: Actor;
+}): Result<{
+    request: CrewRequest | undefined;
+    events: NewEvent[];
+}, NotFound>;
+export type AssignCrewRefusal = NotFound | DomainError<'CREW_REQUEST_ALREADY_ASSIGNED' | 'SHIP_NOT_AWAITING_CREW' | 'ASSIGNEE_NOT_ACTIVE'>;
+/**
+ * A ship with crew:assign assigns the request to a trierarch, by optimistic
+ * claim: only while it is unassigned, so of two claims the first wins. Never
+ * a crewed ship (crewing by hand fulfils the request). Any active ship of the
+ * fleet may be the assignee: the fleet does no routing, and a ship that is no
+ * trierarch just gets work it does not understand. CrewAssigned names it.
+ */
+export declare function assignCrew({ ship, current, isCrewed, assignee }: {
+    ship: Ship;
+    current: CrewRequest | undefined;
+    isCrewed: boolean;
+    assignee: Ship | undefined;
+}, input: {
+    at: Date;
+    actor: Actor;
+}): Result<{
+    request: CrewRequest;
+    events: NewEvent[];
+}, AssignCrewRefusal>;
+export type ExplainCrewRequestRefusal = NotFound | DomainError<'CREW_REQUEST_ALREADY_ASSIGNED' | 'INVALID_CREW_REQUEST_REASON'>;
+/**
+ * The assigner writes why no trierarch can take an unassigned request, one
+ * line, trimmed; none clears it. CrewRequestExplained when it changes; an
+ * assignment clears it.
+ */
+export declare function explainCrewRequest({ ship, current }: {
+    ship: Ship;
+    current: CrewRequest | undefined;
+}, input: {
+    reason: string | null;
+    at: Date;
+    actor: Actor;
+}): Result<{
+    request: CrewRequest;
+    events: NewEvent[];
+}, ExplainCrewRequestRefusal>;
+/**
+ * The assigned trierarch writes how its crew of the ship stands, with
+ * CrewStatusChanged when it changes. Once the request is releasing, only
+ * releasing.
+ */
+export declare function reportCrewStatus({ ship, current, trierarchShipId }: {
+    ship: Ship;
+    current: CrewRequest | undefined;
+    trierarchShipId: ShipId;
+}, input: {
+    status: CrewStatus;
+    at: Date;
+    actor: Actor;
+}): Result<{
+    request: CrewRequest;
+    events: NewEvent[];
+}, NotFound | NotTheCallers | Releasing>;
+/**
+ * The assigned trierarch confirms it released the ship of a releasing
+ * request: the request goes, with CrewRequestRemoved (the finalizer).
+ */
+export declare function confirmCrewRelease({ ship, current, trierarchShipId }: {
+    ship: Ship;
+    current: CrewRequest | undefined;
+    trierarchShipId: ShipId;
+}, input: {
+    at: Date;
+    actor: Actor;
+}): Result<{
+    events: NewEvent[];
+}, NotFound | NotTheCallers | DomainError<'CREW_REQUEST_NOT_RELEASING'>>;
+/**
+ * Whether the caller reaches the ship for a fleet action it may take with one
+ * of the broad scopes, or with crew:run: crew:run reaches only the ships
+ * whose requests are assigned to the caller's ship (decision 0029).
+ */
+export declare function checkReaches(caller: Caller, { ship, current, broadScopes }: {
+    ship: Ship;
+    current: CrewRequest | null | undefined;
+    broadScopes: readonly Scope[];
+}): Result<void, NotTheCallers>;
+export {};

package/dist/domain/registry/crew-request.js

@@ -0,0 +1,175 @@
+import { CREW_REQUEST_REASON_MAX_LENGTH, CREW_REQUEST_SETTINGS_MAX_BYTES, isOneLine, crewRequestSettingsBytes, } from '@aeolus-fleet/common';
+import { hasScope } from '../shared/caller.js';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { checkCanBeRequestedCrew } from './ship.js';
+function notFound(ship) {
+    return refuse('CREW_REQUEST_NOT_FOUND', `${ship.name} has no crew request`);
+}
+function event(ship, change) {
+    const { at, actor, ...what } = change;
+    return { fleetId: ship.fleetId, occurredAt: at, actor, shipId: ship.id, ...what };
+}
+/**
+ * A requester asks that the ship be kept crewed, with these settings: the
+ * request it holds now, replacing the settings of any it held and keeping its
+ * assignment and status, and CrewRequested with the settings version, never
+ * the settings. Never argo, the viewer ship or a retired ship; settings of at
+ * most 16 KB; never while the request is releasing.
+ */
+export function requestCrew({ ship, current }, input) {
+    const requestable = checkCanBeRequestedCrew(ship);
+    if (!requestable.isOk) {
+        return requestable;
+    }
+    if (current?.status === 'releasing') {
+        return refuse('CREW_REQUEST_RELEASING', `${ship.name}'s crew request is releasing: request again once its trierarch confirms`);
+    }
+    const bytes = crewRequestSettingsBytes(input.settings);
+    if (bytes > CREW_REQUEST_SETTINGS_MAX_BYTES) {
+        return refuse('CREW_REQUEST_SETTINGS_TOO_LARGE', `settings is ${String(bytes)} bytes, the limit is ${String(CREW_REQUEST_SETTINGS_MAX_BYTES)} (decision 0029)`);
+    }
+    const request = {
+        fleetId: ship.fleetId,
+        shipId: ship.id,
+        settings: input.settings,
+        settingsVersion: (current?.settingsVersion ?? 0) + 1,
+        requestedAt: input.at,
+        assignedTo: current?.assignedTo ?? null,
+        status: current?.status ?? null,
+        reason: current?.reason ?? null,
+    };
+    return ok({ request, events: [event(ship, { at: input.at, actor: input.actor, type: 'CrewRequested', details: { settingsVersion: request.settingsVersion } })] });
+}
+/**
+ * A requester removes the ship's crew request. Unassigned, it goes at once,
+ * with CrewRequestRemoved. Assigned, it is marked releasing, with
+ * CrewStatusChanged, and goes once its trierarch confirms; removing it again
+ * meanwhile changes nothing.
+ */
+export function removeCrewRequest({ ship, current }, input) {
+    if (!current) {
+        return notFound(ship);
+    }
+    if (current.assignedTo === null) {
+        return ok({ request: undefined, events: [event(ship, { ...input, type: 'CrewRequestRemoved' })] });
+    }
+    if (current.status === 'releasing') {
+        return ok({ request: current, events: [] });
+    }
+    return ok({
+        request: { ...current, status: 'releasing' },
+        events: [event(ship, { ...input, type: 'CrewStatusChanged', details: { status: 'releasing' } })],
+    });
+}
+/**
+ * A ship with crew:assign assigns the request to a trierarch, by optimistic
+ * claim: only while it is unassigned, so of two claims the first wins. Never
+ * a crewed ship (crewing by hand fulfils the request). Any active ship of the
+ * fleet may be the assignee: the fleet does no routing, and a ship that is no
+ * trierarch just gets work it does not understand. CrewAssigned names it.
+ */
+export function assignCrew({ ship, current, isCrewed, assignee }, input) {
+    if (!current) {
+        return notFound(ship);
+    }
+    if (current.assignedTo !== null) {
+        return refuse('CREW_REQUEST_ALREADY_ASSIGNED', `${ship.name}'s crew request is assigned already`);
+    }
+    if (isCrewed) {
+        return refuse('SHIP_NOT_AWAITING_CREW', `${ship.name} is crewed: crewing it by hand fulfils its request`);
+    }
+    if (assignee?.retiredAt !== null) {
+        return refuse('ASSIGNEE_NOT_ACTIVE', 'A crew request is assigned only to an active ship of the fleet');
+    }
+    return ok({
+        request: { ...current, assignedTo: assignee.id, reason: null },
+        events: [event(ship, { ...input, type: 'CrewAssigned', details: { assignedTo: assignee.id } })],
+    });
+}
+/**
+ * The assigner writes why no trierarch can take an unassigned request, one
+ * line, trimmed; none clears it. CrewRequestExplained when it changes; an
+ * assignment clears it.
+ */
+export function explainCrewRequest({ ship, current }, input) {
+    if (!current) {
+        return notFound(ship);
+    }
+    if (current.assignedTo !== null) {
+        return refuse('CREW_REQUEST_ALREADY_ASSIGNED', `${ship.name}'s crew request is assigned: it needs no reason`);
+    }
+    const reason = input.reason?.trim() ?? '';
+    if (reason.length > CREW_REQUEST_REASON_MAX_LENGTH || !isOneLine(reason)) {
+        return refuse('INVALID_CREW_REQUEST_REASON', `A reason is one line of at most ${String(CREW_REQUEST_REASON_MAX_LENGTH)} characters`);
+    }
+    const kept = reason === '' ? null : reason;
+    if (kept === current.reason) {
+        return ok({ request: current, events: [] });
+    }
+    return ok({
+        request: { ...current, reason: kept },
+        events: [event(ship, { at: input.at, actor: input.actor, type: 'CrewRequestExplained', details: { reason: kept } })],
+    });
+}
+/** Only the trierarch the request is assigned to writes its status or confirms its release. */
+function checkAssignedTo({ ship, current, trierarchShipId }) {
+    return current.assignedTo === trierarchShipId
+        ? ok(undefined)
+        : refuse('CREW_REQUEST_NOT_ASSIGNED_TO_CALLER', `${ship.name}'s crew request is not assigned to your ship`);
+}
+/**
+ * The assigned trierarch writes how its crew of the ship stands, with
+ * CrewStatusChanged when it changes. Once the request is releasing, only
+ * releasing.
+ */
+export function reportCrewStatus({ ship, current, trierarchShipId }, input) {
+    if (!current) {
+        return notFound(ship);
+    }
+    const assigned = checkAssignedTo({ ship, current, trierarchShipId });
+    if (!assigned.isOk) {
+        return assigned;
+    }
+    if (current.status === 'releasing' && input.status !== 'releasing') {
+        return refuse('CREW_REQUEST_RELEASING', `${ship.name}'s crew request is releasing: stop its session, end its lease and confirm`);
+    }
+    if (current.status === input.status) {
+        return ok({ request: current, events: [] });
+    }
+    return ok({
+        request: { ...current, status: input.status },
+        events: [event(ship, { at: input.at, actor: input.actor, type: 'CrewStatusChanged', details: { status: input.status } })],
+    });
+}
+/**
+ * The assigned trierarch confirms it released the ship of a releasing
+ * request: the request goes, with CrewRequestRemoved (the finalizer).
+ */
+export function confirmCrewRelease({ ship, current, trierarchShipId }, input) {
+    if (!current) {
+        return notFound(ship);
+    }
+    const assigned = checkAssignedTo({ ship, current, trierarchShipId });
+    if (!assigned.isOk) {
+        return assigned;
+    }
+    if (current.status !== 'releasing') {
+        return refuse('CREW_REQUEST_NOT_RELEASING', `${ship.name}'s crew request is not releasing: nothing to confirm`);
+    }
+    return ok({ events: [event(ship, { ...input, type: 'CrewRequestRemoved' })] });
+}
+/**
+ * Whether the caller reaches the ship for a fleet action it may take with one
+ * of the broad scopes, or with crew:run: crew:run reaches only the ships
+ * whose requests are assigned to the caller's ship (decision 0029).
+ */
+export function checkReaches(caller, { ship, current, broadScopes }) {
+    if (broadScopes.some((scope) => hasScope(caller, scope))) {
+        return ok(undefined);
+    }
+    return current?.assignedTo === caller.shipId
+        ? ok(undefined)
+        : refuse('CREW_REQUEST_NOT_ASSIGNED_TO_CALLER', `${ship.name}'s crew request is not assigned to your ship`);
+}
+//# sourceMappingURL=crew-request.js.map

package/dist/domain/registry/crew-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crew-request.js","sourceRoot":"","sources":["../../../src/domain/registry/crew-request.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,EAC/B,SAAS,EACT,wBAAwB,GAKzB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,QAAQ,EAAe,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,uBAAuB,EAA0C,MAAM,WAAW,CAAC;AAiC5F,SAAS,QAAQ,CAAC,IAAU;IAC1B,OAAO,MAAM,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,KAAK,CAAC,IAAU,EAAE,MAAuE;IAChG,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;IACtC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,EAAE,IAAI,EAAE,OAAO,EAAoD,EACnE,KAAuD;IAEvD,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,IAAI,yEAAyE,CAAC,CAAC;IACjI,CAAC;IACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,+BAA+B,EAAE,CAAC;QAC5C,OAAO,MAAM,CACX,iCAAiC,EACjC,eAAe,MAAM,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,+BAA+B,CAAC,kBAAkB,CAC9G,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAgB;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe,EAAE,CAAC,OAAO,EAAE,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC;QACpD,WAAW,EAAE,KAAK,CAAC,EAAE;QACrB,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;QACvC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI;QAC/B,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,IAAI;KAChC,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACpK,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAE,IAAI,EAAE,OAAO,EAAoD,EACnE,KAAiC;IAEjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;QACR,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE;QAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;KACjG,CAAC,CAAC;AACL,CAAC;AAMD;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAmG,EACtI,KAAiC;IAEjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,+BAA+B,EAAE,GAAG,IAAI,CAAC,IAAI,qCAAqC,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,IAAI,oDAAoD,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,QAAQ,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,qBAAqB,EAAE,gEAAgE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,CAAC;QACR,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;QAC9D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;KAChG,CAAC,CAAC;AACL,CAAC;AAID;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAE,IAAI,EAAE,OAAO,EAAoD,EACnE,KAAwD;IAExD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,+BAA+B,EAAE,GAAG,IAAI,CAAC,IAAI,iDAAiD,CAAC,CAAC;IAChH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,8BAA8B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;QACzE,OAAO,MAAM,CAAC,6BAA6B,EAAE,mCAAmC,MAAM,CAAC,8BAA8B,CAAC,aAAa,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;QACR,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE;QACrC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;KACrH,CAAC,CAAC;AACL,CAAC;AAED,+FAA+F;AAC/F,SAAS,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAiE;IACxH,OAAO,OAAO,CAAC,UAAU,KAAK,eAAe;QAC3C,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,qCAAqC,EAAE,GAAG,IAAI,CAAC,IAAI,8CAA8C,CAAC,CAAC;AAChH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAA6E,EAC7G,KAAqD;IAErD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnE,OAAO,MAAM,CAAC,wBAAwB,EAAE,GAAG,IAAI,CAAC,IAAI,2EAA2E,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACpC,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,EAAE,CAAC;QACR,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE;QAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KAC1H,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAA6E,EAC7G,KAAiC;IAEjC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,4BAA4B,EAAE,GAAG,IAAI,CAAC,IAAI,sDAAsD,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAc,EACd,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAA0F;IAEtH,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,EAAE,UAAU,KAAK,MAAM,CAAC,MAAM;QAC1C,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,qCAAqC,EAAE,GAAG,IAAI,CAAC,IAAI,8CAA8C,CAAC,CAAC;AAChH,CAAC"}

package/dist/domain/registry/delete-fleet.d.ts

@@ -0,0 +1,46 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { OperatorAccountRepository } from '../identity/public.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { SecretHasher } from '../shared/secrets.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import type { FleetRepository, InstallationRequestRepository } from './ports.js';
+export interface DeleteFleetTx {
+    fleets: FleetRepository;
+    operatorAccounts: OperatorAccountRepository;
+    installationRequests: InstallationRequestRepository;
+}
+/**
+ * The fleet a delete removed. The first time, with its name and operator
+ * email: what the server logs, as no event survives it. A replay knows
+ * neither, as nothing of the fleet is kept, and is not logged again.
+ */
+export type FleetDeleted = {
+    fleetId: FleetId;
+} & ({
+    isReplay: false;
+    name: string;
+    operatorEmail: string;
+} | {
+    isReplay: true;
+});
+export type DeleteFleetRefusal = DomainError<'FLEET_NOT_FOUND' | 'IDEMPOTENCY_KEY_REUSED'>;
+export type DeleteFleet = (input: {
+    requestId: string;
+    fleetId: FleetId;
+}) => Promise<Result<FleetDeleted, DeleteFleetRefusal>>;
+/**
+ * Use case: the installation deletes a fleet (docs/blueprint.md,
+ * "Installation"), for good: every record in it goes in one unit of work,
+ * which ends its console session and leases with it, and so does the request
+ * that created it. No event is written, as the event log is the fleet's own.
+ * Under its request id it runs once: the record keeps only the request's
+ * hash, so a replay answers that the fleet was deleted, and another request
+ * under that id is refused.
+ */
+export declare function createDeleteFleet(deps: {
+    uow: UnitOfWork<DeleteFleetTx>;
+    clock: Clock;
+    hasher: SecretHasher;
+}): DeleteFleet;

package/dist/domain/registry/delete-fleet.js

@@ -0,0 +1,34 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { installationRequestText } from './installation-request.js';
+/**
+ * Use case: the installation deletes a fleet (docs/blueprint.md,
+ * "Installation"), for good: every record in it goes in one unit of work,
+ * which ends its console session and leases with it, and so does the request
+ * that created it. No event is written, as the event log is the fleet's own.
+ * Under its request id it runs once: the record keeps only the request's
+ * hash, so a replay answers that the fleet was deleted, and another request
+ * under that id is refused.
+ */
+export function createDeleteFleet(deps) {
+    return (input) => deps.uow.run(async (tx) => {
+        const { requestId, fleetId } = input;
+        const requestHash = deps.hasher.hash(installationRequestText(['deleteFleet', fleetId]));
+        await tx.installationRequests.lock(requestId);
+        const earlier = await tx.installationRequests.find(requestId);
+        if (earlier) {
+            return earlier.kind === 'deleteFleet' && earlier.requestHash === requestHash
+                ? ok({ isReplay: true, fleetId })
+                : refuse('IDEMPOTENCY_KEY_REUSED', 'This request id was used for another request: use a new one for every request');
+        }
+        const fleet = await tx.fleets.findForUpdate(fleetId);
+        if (!fleet) {
+            return refuse('FLEET_NOT_FOUND', `The installation hosts no fleet ${fleetId}`);
+        }
+        const operatorEmail = (await tx.operatorAccounts.findForFleet(fleetId))?.email ?? '';
+        await tx.fleets.delete(fleetId);
+        await tx.installationRequests.record({ requestId, at: deps.clock.now(), requestHash, kind: 'deleteFleet' });
+        return ok({ isReplay: false, fleetId, name: fleet.name, operatorEmail });
+    });
+}
+//# sourceMappingURL=delete-fleet.js.map

package/dist/domain/registry/delete-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete-fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/delete-fleet.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAoBpE;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA4E;IAC5G,OAAO,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAqD,EAAE;QAC3E,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACrC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,IAAI,KAAK,aAAa,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW;gBAC1E,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACjC,CAAC,CAAC,MAAM,CAAC,wBAAwB,EAAE,+EAA+E,CAAC,CAAC;QACxH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,CAAC,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACrF,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QAC5G,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/deregister.d.ts

@@ -0,0 +1,32 @@
+import type { IdGenerator } from '@aeolus-fleet/common';
+import { type CredentialTx } from '../identity/public.js';
+import type { Crew } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import type { DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type LeaseEnded } from './lease.js';
+import { type LeaseTx } from './leases.js';
+import type { ShipRepository } from './ports.js';
+export interface DeregisterTx extends LeaseTx, CredentialTx {
+    ships: ShipRepository;
+}
+export type DeregisterRefusal = DomainError<'OPERATOR_SHIP_IS_PERMANENT'> | LeaseEnded;
+export type Deregister = (crew: Crew) => Promise<Result<undefined, DeregisterRefusal>>;
+/**
+ * Use case: a crew ends its own lease (`deregister`), and the ship awaits a new
+ * crew. The same as a release, caused by the ship itself (ADR 0010): in one
+ * unit of work the secret is invalidated, the lease ends and with it the crew
+ * token, and the deliveries the lease held in flight return to pending, their
+ * attempts kept. The ship and its inbox stay; the next crew needs a new
+ * starting prompt. Needs only the crew token, no scope: a crew ends only its
+ * own lease.
+ *
+ * Locks in the fleet's order, as a release does: the ship, then its secret,
+ * then its lease. A refusal rolls the revoked secret back.
+ */
+export declare function createDeregister(deps: {
+    uow: UnitOfWork<DeregisterTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): Deregister;

package/dist/domain/registry/deregister.js

@@ -0,0 +1,38 @@
+import { revokeShipSecret } from '../identity/public.js';
+import { shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { refuseEndedLease } from './lease.js';
+import { endLease } from './leases.js';
+import { checkCanDeregister } from './ship.js';
+/**
+ * Use case: a crew ends its own lease (`deregister`), and the ship awaits a new
+ * crew. The same as a release, caused by the ship itself (ADR 0010): in one
+ * unit of work the secret is invalidated, the lease ends and with it the crew
+ * token, and the deliveries the lease held in flight return to pending, their
+ * attempts kept. The ship and its inbox stay; the next crew needs a new
+ * starting prompt. Needs only the crew token, no scope: a crew ends only its
+ * own lease.
+ *
+ * Locks in the fleet's order, as a release does: the ship, then its secret,
+ * then its lease. A refusal rolls the revoked secret back.
+ */
+export function createDeregister(deps) {
+    return (crew) => deps.uow.run(async (tx) => {
+        const { fleetId, shipId, leaseId } = crew;
+        const ship = await tx.ships.findForUpdate(fleetId, shipId);
+        if (!ship) {
+            // A crew's ship always exists; the foreign key keeps the lease's ship in its fleet.
+            return refuseEndedLease();
+        }
+        const actor = shipActor(shipId);
+        const at = deps.clock.now();
+        await revokeShipSecret({ tx, ids: deps.ids }, { fleetId, shipId, actor, at });
+        const lease = checkCanDeregister(ship, { leaseId, heldLease: await tx.leases.findOpenForUpdate(fleetId, shipId) });
+        if (!lease.isOk) {
+            return lease;
+        }
+        await endLease({ tx, ids: deps.ids }, { fleetId, leaseId: lease.value.id, actor, at, reason: 'deregistered' });
+        return ok(undefined);
+    });
+}
+//# sourceMappingURL=deregister.js.map

package/dist/domain/registry/deregister.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deregister.js","sourceRoot":"","sources":["../../../src/domain/registry/deregister.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,uBAAuB,CAAC;AAI5E,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAmB,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAgB,MAAM,aAAa,CAAC;AAErD,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAU/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAuE;IACtG,OAAO,CAAC,IAAI,EAAE,EAAE,CACd,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAiD,EAAE;QACvE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,oFAAoF;YACpF,OAAO,gBAAgB,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACnH,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC/G,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/explain-crew-request.d.ts

@@ -0,0 +1,30 @@
+import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type ExplainCrewRequestRefusal } from './crew-request.js';
+import type { CrewRequestRepository, ShipRepository } from './ports.js';
+export interface ExplainCrewRequestTx {
+    ships: Pick<ShipRepository, 'findForUpdate'>;
+    crewRequests: CrewRequestRepository;
+    events: EventLog;
+}
+export type ExplainCrewRequest = (caller: Caller, input: {
+    shipId: ShipId;
+    reason: string | null;
+}) => Promise<Result<undefined, DomainError<'SHIP_NOT_FOUND'> | ExplainCrewRequestRefusal>>;
+/**
+ * Use case: the assigner (crew:assign, the trierarch plugin) writes why no trierarch
+ * can take a ship's unassigned crew request, shown in the operator's
+ * needs-crew to-do. Its scope is checked before this runs. In one unit of
+ * work, locking the ship first: the reason and, when it changed,
+ * CrewRequestExplained.
+ */
+export declare function createExplainCrewRequest(deps: {
+    uow: UnitOfWork<ExplainCrewRequestTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): ExplainCrewRequest;

package/dist/domain/registry/explain-crew-request.js

@@ -0,0 +1,31 @@
+import { refuse } from '../shared/errors.js';
+import { recordEvent, shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { explainCrewRequest } from './crew-request.js';
+/**
+ * Use case: the assigner (crew:assign, the trierarch plugin) writes why no trierarch
+ * can take a ship's unassigned crew request, shown in the operator's
+ * needs-crew to-do. Its scope is checked before this runs. In one unit of
+ * work, locking the ship first: the reason and, when it changed,
+ * CrewRequestExplained.
+ */
+export function createExplainCrewRequest(deps) {
+    return (caller, input) => deps.uow.run(async (tx) => {
+        const ship = await tx.ships.findForUpdate(caller.fleetId, input.shipId);
+        if (!ship) {
+            return refuse('SHIP_NOT_FOUND', `Ship ${input.shipId} does not exist`);
+        }
+        const explained = explainCrewRequest({ ship, current: await tx.crewRequests.find(caller.fleetId, ship.id) }, { reason: input.reason, at: deps.clock.now(), actor: shipActor(caller.shipId) });
+        if (!explained.isOk) {
+            return explained;
+        }
+        if (explained.value.events.length > 0) {
+            await tx.crewRequests.save(explained.value.request);
+        }
+        for (const event of explained.value.events) {
+            await recordEvent({ events: tx.events, ids: deps.ids }, event);
+        }
+        return ok(undefined);
+    });
+}
+//# sourceMappingURL=explain-crew-request.js.map

package/dist/domain/registry/explain-crew-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"explain-crew-request.js","sourceRoot":"","sources":["../../../src/domain/registry/explain-crew-request.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAiB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,kBAAkB,EAAkC,MAAM,mBAAmB,CAAC;AAcvF;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAA+E;IACtH,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAyF,EAAE;QAC/G,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,SAAS,GAAG,kBAAkB,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,EACtE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAChF,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/fleet.d.ts

@@ -0,0 +1,12 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+/** The tenant: one operator's ships, messages and history. */
+export interface Fleet {
+    id: FleetId;
+    name: string;
+    createdAt: Date;
+}
+export declare const FLEET_NAME_MAX_LENGTH = 100;
+/** A fleet name is trimmed, and between 1 and 100 characters. */
+export declare function fleetName(raw: string): Result<string, DomainError<'INVALID_FLEET_NAME'>>;

package/dist/domain/registry/fleet.js

@@ -0,0 +1,12 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+export const FLEET_NAME_MAX_LENGTH = 100;
+/** A fleet name is trimmed, and between 1 and 100 characters. */
+export function fleetName(raw) {
+    const name = raw.trim();
+    if (name.length === 0 || name.length > FLEET_NAME_MAX_LENGTH) {
+        return refuse('INVALID_FLEET_NAME', `A fleet name is 1 to ${FLEET_NAME_MAX_LENGTH} characters, not counting spaces around it`);
+    }
+    return ok(name);
+}
+//# sourceMappingURL=fleet.js.map

package/dist/domain/registry/fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/fleet.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAStD,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC,iEAAiE;AACjE,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QAC7D,OAAO,MAAM,CACX,oBAAoB,EACpB,wBAAwB,qBAAqB,4CAA4C,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC"}

package/dist/domain/registry/found-fleet.d.ts

@@ -0,0 +1,32 @@
+import type { FleetId, IdGenerator, OperatorId, ShipId } from '@aeolus-fleet/common';
+import type { OperatorAccountRepository } from '../identity/public.js';
+import { type EventLog } from '../shared/events.js';
+import type { FleetRepository, ShipRepository } from './ports.js';
+export interface FoundFleetTx {
+    fleets: FleetRepository;
+    ships: ShipRepository;
+    operatorAccounts: OperatorAccountRepository;
+    events: EventLog;
+}
+export interface FleetFounded {
+    fleetId: FleetId;
+    operatorShipId: ShipId;
+    operatorId: OperatorId;
+}
+/**
+ * Writes a new fleet, its operator ship `argo` and the operator account, with
+ * FleetInitialised and ShipCommissioned, in the caller's unit of work. argo
+ * gets no secret: the operator's sign-in is the only way to crew it (ADR
+ * 0012). With `hasViewer`, the viewer ship comes too, with its own
+ * ShipCommissioned (decision 0022). The caller has validated the name and email.
+ */
+export declare function foundFleet(deps: {
+    tx: FoundFleetTx;
+    ids: IdGenerator;
+}, input: {
+    name: string;
+    email: string;
+    passwordHash: string | null;
+    at: Date;
+    hasViewer?: boolean;
+}): Promise<FleetFounded>;