@aeolus-fleet/core 0.0.0 → 0.19.0

package/dist/domain/registry/found-fleet.js

@@ -0,0 +1,43 @@
+import { recordEvent, SYSTEM } from '../shared/events.js';
+import { operatorShip, viewerShip } from './ship.js';
+/**
+ * Writes a new fleet, its operator ship `argo` and the operator account, with
+ * FleetInitialised and ShipCommissioned, in the caller's unit of work. argo
+ * gets no secret: the operator's sign-in is the only way to crew it (ADR
+ * 0012). With `hasViewer`, the viewer ship comes too, with its own
+ * ShipCommissioned (decision 0022). The caller has validated the name and email.
+ */
+export async function foundFleet(deps, input) {
+    const { tx, ids } = deps;
+    const { name, email, passwordHash, at } = input;
+    const fleetId = ids('fleet');
+    await tx.fleets.create({ id: fleetId, name, createdAt: at });
+    const argo = operatorShip({ id: ids('ship'), fleetId, createdAt: at });
+    await tx.ships.create(argo);
+    const operatorId = ids('operator');
+    await tx.operatorAccounts.create({ id: operatorId, fleetId, email, passwordHash, theme: 'system', createdAt: at });
+    await recordEvent({ events: tx.events, ids }, { fleetId, type: 'FleetInitialised', occurredAt: at, actor: SYSTEM, details: { name, operatorId } });
+    await recordEvent({ events: tx.events, ids }, {
+        fleetId,
+        type: 'ShipCommissioned',
+        occurredAt: at,
+        actor: SYSTEM,
+        shipId: argo.id,
+        details: { name: argo.name, type: argo.type, kind: argo.kind },
+    });
+    if (input.hasViewer !== true) {
+        return { fleetId, operatorShipId: argo.id, operatorId };
+    }
+    const viewer = viewerShip({ id: ids('ship'), fleetId, createdAt: at });
+    await tx.ships.create(viewer);
+    await recordEvent({ events: tx.events, ids }, {
+        fleetId,
+        type: 'ShipCommissioned',
+        occurredAt: at,
+        actor: SYSTEM,
+        shipId: viewer.id,
+        details: { name: viewer.name, type: viewer.type, kind: viewer.kind, scopes: viewer.scopes.join(' ') },
+    });
+    return { fleetId, operatorShipId: argo.id, operatorId };
+}
+//# sourceMappingURL=found-fleet.js.map

package/dist/domain/registry/found-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"found-fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/found-fleet.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAiB,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAerD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAA4C,EAC5C,KAAkG;IAElG,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAEhD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAE7D,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE5B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,EAAE,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAEnH,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACnJ,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,OAAO;QACP,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;KAC/D,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,OAAO;QACP,IAAI,EAAE,kBAAkB;QACxB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,MAAM,CAAC,EAAE;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;KACtG,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC;AAC1D,CAAC"}

package/dist/domain/registry/get-fleet-limits.d.ts

@@ -0,0 +1,17 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type FleetLimits } from './limits.js';
+import type { FleetRepository, InstallationSettingsRepository } from './ports.js';
+export interface GetFleetLimitsTx {
+    fleets: FleetRepository;
+    installationSettings: InstallationSettingsRepository;
+}
+export type GetFleetLimits = (input: {
+    fleetId: FleetId;
+}) => Promise<Result<FleetLimits, DomainError<'FLEET_NOT_FOUND'>>>;
+/** Use case: a fleet's ship and daily message limits, how each is set and the limit that applies. */
+export declare function createGetFleetLimits(deps: {
+    uow: UnitOfWork<GetFleetLimitsTx>;
+}): GetFleetLimits;

package/dist/domain/registry/get-fleet-limits.js

@@ -0,0 +1,14 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { fleetLimitsOf } from './limits.js';
+/** Use case: a fleet's ship and daily message limits, how each is set and the limit that applies. */
+export function createGetFleetLimits(deps) {
+    return ({ fleetId }) => deps.uow.run(async (tx) => {
+        const settings = await tx.fleets.limitSettings(fleetId);
+        if (!settings) {
+            return refuse('FLEET_NOT_FOUND', `The installation hosts no fleet ${fleetId}`);
+        }
+        return ok(fleetLimitsOf({ fleetId, settings, installation: await tx.installationSettings.read() }));
+    });
+}
+//# sourceMappingURL=get-fleet-limits.js.map

package/dist/domain/registry/get-fleet-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-fleet-limits.js","sourceRoot":"","sources":["../../../src/domain/registry/get-fleet-limits.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAoB,MAAM,aAAa,CAAC;AAU9D,qGAAqG;AACrG,MAAM,UAAU,oBAAoB,CAAC,IAA2C;IAC9E,OAAO,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CACrB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAgE,EAAE;QACtF,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/get-installation-fleet.d.ts

@@ -0,0 +1,15 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import { type InstallationFleet } from './installation-fleet.js';
+import type { InstallationFleets, InstallationSettingsRepository } from './ports.js';
+export type GetInstallationFleet = (input: {
+    fleetId: FleetId;
+}) => Promise<Result<InstallationFleet, DomainError<'FLEET_NOT_FOUND'>>>;
+/** Use case: one fleet of the installation, described as the list describes it. */
+export declare function createGetInstallationFleet(deps: {
+    fleets: InstallationFleets;
+    settings: InstallationSettingsRepository;
+    clock: Clock;
+}): GetInstallationFleet;

package/dist/domain/registry/get-installation-fleet.js

@@ -0,0 +1,12 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { installationFleet, messageWindow } from './installation-fleet.js';
+/** Use case: one fleet of the installation, described as the list describes it. */
+export function createGetInstallationFleet(deps) {
+    return async ({ fleetId }) => {
+        const now = deps.clock.now();
+        const facts = await deps.fleets.find(fleetId, messageWindow(now));
+        return facts ? ok(installationFleet(facts, { now, installation: await deps.settings.read() })) : refuse('FLEET_NOT_FOUND', `The installation hosts no fleet ${fleetId}`);
+    };
+}
+//# sourceMappingURL=get-installation-fleet.js.map

package/dist/domain/registry/get-installation-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-installation-fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/get-installation-fleet.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAA0B,MAAM,yBAAyB,CAAC;AAKnG,mFAAmF;AACnF,MAAM,UAAU,0BAA0B,CAAC,IAA4F;IACrI,OAAO,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,OAAO,EAAE,CAAC,CAAC;IAC3K,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/registry/get-installation-settings.d.ts

@@ -0,0 +1,7 @@
+import type { InstallationSettings } from './limits.js';
+import type { InstallationSettingsRepository } from './ports.js';
+export type GetInstallationSettings = () => Promise<InstallationSettings>;
+/** Use case: the installation's default limits for its fleets and its cap on fleets; no limit for any it has not set. */
+export declare function createGetInstallationSettings(deps: {
+    settings: InstallationSettingsRepository;
+}): GetInstallationSettings;

package/dist/domain/registry/get-installation-settings.js

@@ -0,0 +1,5 @@
+/** Use case: the installation's default limits for its fleets and its cap on fleets; no limit for any it has not set. */
+export function createGetInstallationSettings(deps) {
+    return () => deps.settings.read();
+}
+//# sourceMappingURL=get-installation-settings.js.map

package/dist/domain/registry/get-installation-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-installation-settings.js","sourceRoot":"","sources":["../../../src/domain/registry/get-installation-settings.ts"],"names":[],"mappings":"AAKA,yHAAyH;AACzH,MAAM,UAAU,6BAA6B,CAAC,IAAkD;IAC9F,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC"}

package/dist/domain/registry/get-ship.d.ts

@@ -0,0 +1,34 @@
+import type { ShipId } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import { type ListedShip } from './list-fleet.js';
+import { type CrewRequest } from './crew-request.js';
+import type { FleetListing } from './ports.js';
+import type { ShipReport } from './ship-report.js';
+/** One ship for its page: as the fleet lists it, with its crew's report whole, when it was commissioned and since when it is crewed. */
+export interface ShipDetail extends Omit<ListedShip, 'report' | 'crewRequest'> {
+    /** The ship's crew request, settings included; null when it holds none. */
+    crewRequest: (NonNullable<ListedShip['crewRequest']> & Pick<CrewRequest, 'settings'>) | null;
+    /** The crew's last report, details included; null until it reports, and while no session crews the ship. */
+    report: ShipReport | null;
+    commissionedAt: Date;
+    /** Since when the session crewing it has held it; null while no session does. */
+    crewedSince: Date | null;
+    /** What its crew holds in flight: what a release or a re-crew returns to pending. */
+    inFlightDeliveries: number;
+    /** Its direct deliveries pending or in flight: what a retire abandons. */
+    openDeliveries: number;
+}
+export type GetShip = (caller: Caller, input: {
+    shipId: ShipId;
+}) => Promise<Result<ShipDetail, DomainError<'SHIP_NOT_FOUND' | 'CREW_REQUEST_NOT_ASSIGNED_TO_CALLER'>>>;
+/**
+ * Use case: one ship of the caller's fleet, retired ships included: they keep
+ * their page. The caller's scope (fleet:read or crew:run) is
+ * checked before this runs; crew:run reads only the ships whose crew requests
+ * are assigned to the caller's ship.
+ */
+export declare function createGetShip(deps: {
+    listing: FleetListing;
+}): GetShip;

package/dist/domain/registry/get-ship.js

@@ -0,0 +1,36 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { listedShipOf } from './list-fleet.js';
+import { checkReaches } from './crew-request.js';
+/** The scopes that read every ship; crew:run reads only the ships assigned to the caller's ship. */
+const READ_SCOPES = ['fleet:read'];
+/**
+ * Use case: one ship of the caller's fleet, retired ships included: they keep
+ * their page. The caller's scope (fleet:read or crew:run) is
+ * checked before this runs; crew:run reads only the ships whose crew requests
+ * are assigned to the caller's ship.
+ */
+export function createGetShip(deps) {
+    return async (caller, { shipId }) => {
+        const facts = await deps.listing.ship(caller.fleetId, shipId);
+        if (!facts) {
+            return refuse('SHIP_NOT_FOUND', `No ship ${shipId} in this fleet`);
+        }
+        const reaches = checkReaches(caller, { ship: facts.ship, current: facts.crewRequest, broadScopes: READ_SCOPES });
+        if (!reaches.isOk) {
+            return reaches;
+        }
+        const listed = listedShipOf(facts);
+        const counts = await deps.listing.deliveryCounts(caller.fleetId, shipId);
+        return ok({
+            ...listed,
+            report: facts.openLease?.report ?? null,
+            crewRequest: listed.crewRequest && facts.crewRequest && { ...listed.crewRequest, settings: facts.crewRequest.settings },
+            inFlightDeliveries: counts.inFlight,
+            openDeliveries: counts.open,
+            commissionedAt: facts.ship.createdAt,
+            crewedSince: facts.openLease?.startedAt ?? null,
+        });
+    };
+}
+//# sourceMappingURL=get-ship.js.map

package/dist/domain/registry/get-ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-ship.js","sourceRoot":"","sources":["../../../src/domain/registry/get-ship.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAmB,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAoB,MAAM,mBAAmB,CAAC;AAwBnE,oGAAoG;AACpG,MAAM,WAAW,GAAG,CAAC,YAAY,CAAU,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAA+B;IAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,gBAAgB,EAAE,WAAW,MAAM,gBAAgB,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QACjH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzE,OAAO,EAAE,CAAC;YACR,GAAG,MAAM;YACT,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,IAAI;YACvC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,GAAG,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE;YACvH,kBAAkB,EAAE,MAAM,CAAC,QAAQ;YACnC,cAAc,EAAE,MAAM,CAAC,IAAI;YAC3B,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;YACpC,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,IAAI,IAAI;SAChD,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/registry/get-starting-prompt.d.ts

@@ -0,0 +1,24 @@
+import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
+import { type SecretTools } from '../identity/public.js';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import type { CrewRequestRepository, LeaseRepository, ShipRepository } from './ports.js';
+import { type IssuedStartingPrompt, type StartingPromptTx } from './starting-prompt.js';
+export interface GetStartingPromptTx extends StartingPromptTx {
+    ships: ShipRepository;
+    leases: LeaseRepository;
+    crewRequests: Pick<CrewRequestRepository, 'find'>;
+}
+export type GetStartingPromptRefusal = DomainError<'SHIP_NOT_FOUND' | 'OPERATOR_SHIP_GETS_NO_STARTING_PROMPT' | 'SHIP_NOT_AWAITING_CREW' | 'CREW_REQUEST_NOT_ASSIGNED_TO_CALLER'>;
+export type GetStartingPrompt = (caller: Caller, input: {
+    shipId: ShipId;
+}) => Promise<Result<IssuedStartingPrompt, GetStartingPromptRefusal>>;
+export declare function createGetStartingPrompt(deps: {
+    uow: UnitOfWork<GetStartingPromptTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    secrets: Omit<SecretTools, 'ids'>;
+}): GetStartingPrompt;

package/dist/domain/registry/get-starting-prompt.js

@@ -0,0 +1,46 @@
+import { revokeShipSecret } from '../identity/public.js';
+import { refuse } from '../shared/errors.js';
+import { shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { checkReaches } from './crew-request.js';
+import { checkCanIssueStartingPrompt } from './ship.js';
+import { issueStartingPrompt } from './starting-prompt.js';
+/**
+ * Use case: a new starting prompt for a ship of the caller's fleet that awaits
+ * crew. Its new secret invalidates any earlier one, so at most one is valid; a
+ * prompt lost before use costs nothing. The caller's scope (fleet:manage or
+ * crew:run) is checked before this runs; crew:run reaches only
+ * the ships whose crew requests are assigned to the caller's ship.
+ *
+ * Locks in the fleet's order: the ship first, so concurrent prompts for one
+ * ship take turns and the last one issued is the valid one; then its secret;
+ * then its lease. The lease is read last, so a session that claimed the ship
+ * with the old secret meanwhile is seen, and the refusal rolls the revocation
+ * back.
+ */
+/** The scopes that reach every ship for a starting prompt; crew:run reaches only assigned ones. */
+const PROMPT_SCOPES = ['fleet:manage'];
+export function createGetStartingPrompt(deps) {
+    return (caller, { shipId }) => deps.uow.run(async (tx) => {
+        const { fleetId } = caller;
+        const ship = await tx.ships.findForUpdate(fleetId, shipId);
+        if (!ship) {
+            return refuse('SHIP_NOT_FOUND', `Ship ${shipId} does not exist`);
+        }
+        const reaches = checkReaches(caller, { ship, current: await tx.crewRequests.find(fleetId, shipId), broadScopes: PROMPT_SCOPES });
+        if (!reaches.isOk) {
+            return reaches;
+        }
+        const actor = shipActor(caller.shipId);
+        const at = deps.clock.now();
+        await revokeShipSecret({ tx, ids: deps.ids }, { fleetId, shipId, actor, at });
+        const lease = await tx.leases.findOpenForUpdate(fleetId, shipId);
+        const allowed = checkCanIssueStartingPrompt(ship, { isCrewed: lease !== undefined });
+        if (!allowed.isOk) {
+            return allowed;
+        }
+        const issued = await issueStartingPrompt({ tx, secrets: { ...deps.secrets, ids: deps.ids } }, { fleetId, shipId, actor, at });
+        return ok(issued);
+    });
+}
+//# sourceMappingURL=get-starting-prompt.js.map

package/dist/domain/registry/get-starting-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-starting-prompt.js","sourceRoot":"","sources":["../../../src/domain/registry/get-starting-prompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAoB,MAAM,uBAAuB,CAAC;AAG3E,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAoD,MAAM,sBAAsB,CAAC;AAiB7G;;;;;;;;;;;;GAYG;AACH,mGAAmG;AACnG,MAAM,aAAa,GAAG,CAAC,cAAc,CAAU,CAAC;AAEhD,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAmE,EAAE;QACzF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,MAAM,iBAAiB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC;QACjI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAC/B,CAAC;QACF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/initialise-fleet.d.ts

@@ -0,0 +1,28 @@
+import type { IdGenerator } from '@aeolus-fleet/common';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { PasswordHasher } from '../shared/secrets.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type FleetFounded, type FoundFleetTx } from './found-fleet.js';
+export type InitialiseFleetTx = FoundFleetTx;
+export type FleetInitialised = FleetFounded;
+export type InitialiseFleetRefusal = DomainError<'INVALID_FLEET_NAME' | 'INVALID_EMAIL' | 'INVALID_PASSWORD' | 'FLEET_ALREADY_EXISTS'>;
+export type InitialiseFleet = (input: {
+    name: string;
+    email: string;
+    password: string;
+}) => Promise<Result<FleetInitialised, InitialiseFleetRefusal>>;
+/**
+ * Use case: creates the fleet, its operator ship `argo` and the operator
+ * account the console signs in with, in one transaction. argo gets no secret:
+ * that sign-in is the only way to crew it. Runs once per installation: it
+ * refuses when any fleet exists. A server command, never a public page
+ * (ADR 0012).
+ */
+export declare function createInitialiseFleet(deps: {
+    uow: UnitOfWork<InitialiseFleetTx>;
+    clock: Clock;
+    ids: IdGenerator;
+    passwords: PasswordHasher;
+}): InitialiseFleet;

package/dist/domain/registry/initialise-fleet.js

@@ -0,0 +1,39 @@
+import { operatorEmail, operatorPassword } from '../identity/public.js';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { fleetName } from './fleet.js';
+import { foundFleet } from './found-fleet.js';
+/**
+ * Use case: creates the fleet, its operator ship `argo` and the operator
+ * account the console signs in with, in one transaction. argo gets no secret:
+ * that sign-in is the only way to crew it. Runs once per installation: it
+ * refuses when any fleet exists. A server command, never a public page
+ * (ADR 0012).
+ */
+export function createInitialiseFleet(deps) {
+    return async (input) => {
+        const named = fleetName(input.name);
+        if (!named.isOk) {
+            return named;
+        }
+        const email = operatorEmail(input.email);
+        if (!email.isOk) {
+            return email;
+        }
+        const password = operatorPassword(input.password);
+        if (!password.isOk) {
+            return password;
+        }
+        const name = named.value;
+        // Hashed before the transaction: Argon2 takes its time on purpose.
+        const passwordHash = await deps.passwords.hash(password.value);
+        return deps.uow.run(async (tx) => {
+            await tx.fleets.lockInitialisation();
+            if ((await tx.fleets.count()) > 0) {
+                return refuse('FLEET_ALREADY_EXISTS', 'A fleet already exists: a fleet is initialised only once');
+            }
+            return ok(await foundFleet({ tx, ids: deps.ids }, { name, email: email.value, passwordHash, at: deps.clock.now() }));
+        });
+    };
+}
+//# sourceMappingURL=initialise-fleet.js.map

package/dist/domain/registry/initialise-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initialise-fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/initialise-fleet.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAExE,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,UAAU,EAAwC,MAAM,kBAAkB,CAAC;AAgBpF;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAKrC;IACC,OAAO,KAAK,EAAE,KAAK,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACzB,mEAAmE;QACnE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE/D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAC/B,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO,MAAM,CAAC,sBAAsB,EAAE,0DAA0D,CAAC,CAAC;YACpG,CAAC;YAED,OAAO,EAAE,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACvH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/registry/installation-fleet.d.ts

@@ -0,0 +1,36 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import { type FleetLimit, type InstallationSettings } from './limits.js';
+import type { InstallationFleetFacts, InstallationFleetWindow } from './ports.js';
+/** How far back an installation's fleet counts its messages, and over how many UTC days. */
+export declare const MESSAGE_WINDOW_DAYS = 7;
+export declare const MESSAGE_WINDOW_MS: number;
+/**
+ * A fleet as the installation describes it (docs/blueprint.md,
+ * "Installation"): its facts and measures, its messages today and per UTC day
+ * of the last 7 days, today last, and the limits that apply to it.
+ */
+export interface InstallationFleet {
+    fleetId: FleetId;
+    name: string;
+    operatorEmail: string;
+    createdAt: Date;
+    shipCount: number;
+    messagesLast7Days: number;
+    lastActivityAt: Date | null;
+    storage: number;
+    messagesToday: number;
+    messagesPerDay: {
+        date: string;
+        count: number;
+    }[];
+    limits: {
+        ships: FleetLimit;
+        dailyMessages: FleetLimit;
+    };
+}
+/** What a read at `now` counts over: the last 7 times 24 hours, and the last 7 UTC days from the first one's start. */
+export declare function messageWindow(now: Date): InstallationFleetWindow;
+export declare function installationFleet(facts: InstallationFleetFacts, read: {
+    now: Date;
+    installation: InstallationSettings;
+}): InstallationFleet;

package/dist/domain/registry/installation-fleet.js

@@ -0,0 +1,22 @@
+import { fleetLimitsOf } from './limits.js';
+/** How far back an installation's fleet counts its messages, and over how many UTC days. */
+export const MESSAGE_WINDOW_DAYS = 7;
+const DAY_MS = 24 * 60 * 60 * 1000;
+export const MESSAGE_WINDOW_MS = MESSAGE_WINDOW_DAYS * DAY_MS;
+/** The UTC days a read at `now` counts messages over: the last 7, today last, as YYYY-MM-DD. */
+function utcDays(now) {
+    const today = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate());
+    return Array.from({ length: MESSAGE_WINDOW_DAYS }, (_unused, index) => new Date(today - (MESSAGE_WINDOW_DAYS - 1 - index) * DAY_MS).toISOString().slice(0, 10));
+}
+/** What a read at `now` counts over: the last 7 times 24 hours, and the last 7 UTC days from the first one's start. */
+export function messageWindow(now) {
+    const [firstDay = now.toISOString().slice(0, 10)] = utcDays(now);
+    return { since: new Date(now.getTime() - MESSAGE_WINDOW_MS), firstDay: new Date(`${firstDay}T00:00:00.000Z`) };
+}
+export function installationFleet(facts, read) {
+    const { messagesSince, messagesPerUtcDay, limitSettings, ...rest } = facts;
+    const messagesPerDay = utcDays(read.now).map((date) => ({ date, count: messagesPerUtcDay.find((day) => day.date === date)?.count ?? 0 }));
+    const { ships, dailyMessages } = fleetLimitsOf({ fleetId: facts.fleetId, settings: limitSettings, installation: read.installation });
+    return { ...rest, messagesLast7Days: messagesSince, messagesToday: messagesPerDay.at(-1)?.count ?? 0, messagesPerDay, limits: { ships, dailyMessages } };
+}
+//# sourceMappingURL=installation-fleet.js.map

package/dist/domain/registry/installation-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/installation-fleet.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAA8C,MAAM,aAAa,CAAC;AAGxF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,MAAM,CAAC;AAqB9D,gGAAgG;AAChG,SAAS,OAAO,CAAC,GAAS;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,mBAAmB,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAClK,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,aAAa,CAAC,GAAS;IACrC,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,QAAQ,gBAAgB,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAA6B,EAAE,IAAuD;IACtH,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1I,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACrI,OAAO,EAAE,GAAG,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,CAAC;AAC3J,CAAC"}

package/dist/domain/registry/installation-request.d.ts

@@ -0,0 +1,23 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+/**
+ * A create or delete the installation carried out, under the caller's own
+ * request id, so a replay answers what the first call answered (decision
+ * 0020). It belongs to the installation, not to a fleet. It keeps the request
+ * as a hash only: a delete record names nothing of the fleet it deleted, and a
+ * create record, which holds the fleet and argo it answers with, goes with
+ * that fleet.
+ */
+export type InstallationRequest = {
+    requestId: string;
+    at: Date;
+    /** The hash of the request it carried out: a replay under its id must hash the same. */
+    requestHash: string;
+} & ({
+    kind: 'createFleet';
+    fleetId: FleetId;
+    operatorShipId: ShipId;
+} | {
+    kind: 'deleteFleet';
+});
+/** A request as hashed for its record: its kind and what it names, in a fixed order. */
+export declare function installationRequestText(request: readonly string[]): string;

package/dist/domain/registry/installation-request.js

@@ -0,0 +1,5 @@
+/** A request as hashed for its record: its kind and what it names, in a fixed order. */
+export function installationRequestText(request) {
+    return JSON.stringify(request);
+}
+//# sourceMappingURL=installation-request.js.map

package/dist/domain/registry/installation-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installation-request.js","sourceRoot":"","sources":["../../../src/domain/registry/installation-request.ts"],"names":[],"mappings":"AAiBA,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CAAC,OAA0B;IAChE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC"}

package/dist/domain/registry/lease.d.ts

@@ -0,0 +1,51 @@
+import { type FleetId, type LeaseId, type LocationKind, type ShipId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Err, type Result } from '../shared/result.js';
+/**
+ * Where the session crewing a ship runs, reported when it claims the ship.
+ * Metadata only: never interpreted. `OTHER` carries a short description; the
+ * other kinds carry none.
+ */
+export interface Location {
+    kind: LocationKind;
+    description: string | null;
+}
+export declare function location(kind: LocationKind, description?: string): Result<Location, DomainError<'INVALID_LOCATION'>>;
+/**
+ * The harness the session crewing a ship runs in (docs/blueprint.md,
+ * "Harness"), stated when it claims the ship: free text such as claude-code,
+ * claude-chat or codex, trimmed and in lower case. Read together with the
+ * location; never interpreted.
+ */
+export declare function harness(value: string): Result<string, DomainError<'INVALID_HARNESS'>>;
+/** Versioned prefix of every crew token (ADR 0015). */
+export declare const CREW_TOKEN_PREFIX = "aeolus_ct_v1_";
+/** The exclusive right of one session to crew a ship. Open until `endedAt` is set. */
+export interface Lease {
+    id: LeaseId;
+    fleetId: FleetId;
+    shipId: ShipId;
+    location: Location;
+    /** The harness the session stated; none for argo's console lease and for leases from before harnesses were stated. */
+    harness: string | null;
+    /**
+     * The hash of the crew token `register` gave the session: every later ship
+     * call carries the token (ADR 0015). Null for a console session's lease on
+     * argo, whose token lives with the console session.
+     */
+    crewTokenHash: string | null;
+    startedAt: Date;
+    endedAt: Date | null;
+}
+/**
+ * Why a lease ended; recorded on its LeaseRevoked event. The operator released
+ * or retired the ship, its crew deregistered, or, for argo, a sign-in took it
+ * over, the operator signed out or the password was reset.
+ */
+export type LeaseEndReason = 'released' | 'retired' | 'deregistered' | 'takenOver' | 'signedOut' | 'passwordReset';
+export type LeaseEnded = DomainError<'LEASE_ENDED'>;
+/**
+ * The refusal for a crew whose lease has ended: its crew token no longer
+ * crews the ship, which needs a new crew with a new starting prompt.
+ */
+export declare function refuseEndedLease(): Err<LeaseEnded>;

package/dist/domain/registry/lease.js

@@ -0,0 +1,39 @@
+import { HARNESS_MAX_LENGTH, LOCATION_DESCRIPTION_MAX_LENGTH, } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+export function location(kind, description) {
+    if (kind !== 'OTHER') {
+        if (description !== undefined) {
+            return refuse('INVALID_LOCATION', `Only an OTHER location carries a description, not ${kind}`);
+        }
+        return ok({ kind, description: null });
+    }
+    const trimmed = description?.trim() ?? '';
+    if (trimmed.length === 0 || trimmed.length > LOCATION_DESCRIPTION_MAX_LENGTH) {
+        return refuse('INVALID_LOCATION', `An OTHER location needs a description of 1 to ${LOCATION_DESCRIPTION_MAX_LENGTH} characters`);
+    }
+    return ok({ kind, description: trimmed });
+}
+/**
+ * The harness the session crewing a ship runs in (docs/blueprint.md,
+ * "Harness"), stated when it claims the ship: free text such as claude-code,
+ * claude-chat or codex, trimmed and in lower case. Read together with the
+ * location; never interpreted.
+ */
+export function harness(value) {
+    const stated = value.trim().toLowerCase();
+    if (stated.length === 0 || stated.length > HARNESS_MAX_LENGTH) {
+        return refuse('INVALID_HARNESS', `A harness names what the session runs in, such as claude-code, in 1 to ${String(HARNESS_MAX_LENGTH)} characters`);
+    }
+    return ok(stated);
+}
+/** Versioned prefix of every crew token (ADR 0015). */
+export const CREW_TOKEN_PREFIX = 'aeolus_ct_v1_';
+/**
+ * The refusal for a crew whose lease has ended: its crew token no longer
+ * crews the ship, which needs a new crew with a new starting prompt.
+ */
+export function refuseEndedLease() {
+    return refuse('LEASE_ENDED', 'This ship was released; this session no longer crews it.');
+}
+//# sourceMappingURL=lease.js.map

package/dist/domain/registry/lease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lease.js","sourceRoot":"","sources":["../../../src/domain/registry/lease.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,+BAA+B,GAKhC,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAyB,MAAM,qBAAqB,CAAC;AAYhE,MAAM,UAAU,QAAQ,CAAC,IAAkB,EAAE,WAAoB;IAC/D,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,IAAI,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;QAC7E,OAAO,MAAM,CACX,kBAAkB,EAClB,iDAAiD,+BAA+B,aAAa,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAC9D,OAAO,MAAM,CAAC,iBAAiB,EAAE,0EAA0E,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACtJ,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;AACpB,CAAC;AAED,uDAAuD;AACvD,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AA6BjD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,MAAM,CAAC,aAAa,EAAE,0DAA0D,CAAC,CAAC;AAC3F,CAAC"}