@aeolus-fleet/core 0.0.0 → 0.19.0

package/dist/domain/registry/leases.d.ts

@@ -0,0 +1,66 @@
+import type { FleetId, IdGenerator, LeaseId, ShipId, ShipKind } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Actor, type EventLog } from '../shared/events.js';
+import type { Notifier } from '../shared/notifier.js';
+import { type Result } from '../shared/result.js';
+import { type LeaseEnded, type LeaseEndReason, type Location } from './lease.js';
+import type { InFlightDeliveries, LeaseRepository, ShipRepository } from './ports.js';
+import type { Ship } from './ship.js';
+/** The ports the lease operations need, inside the caller's unit of work. */
+export interface LeaseTx {
+    leases: LeaseRepository;
+    inFlightDeliveries: InFlightDeliveries;
+    events: EventLog;
+    notifier: Notifier;
+}
+/** What the lease operations work with: the caller's unit of work and its id generator. */
+export interface LeaseDeps {
+    tx: LeaseTx;
+    ids: IdGenerator;
+}
+/**
+ * Starts a new lease on the operator ship, ending the one it holds. Only `argo`
+ * is taken over this way; any other ship fails a second claim instead
+ * (ADR 0010). Writes LeaseRevoked for the old lease and ShipClaimed for the new.
+ */
+export declare function takeOverOperatorLease(deps: LeaseDeps, input: {
+    fleetId: FleetId;
+    shipId: ShipId;
+    kind: ShipKind;
+    location: Location;
+    actor: Actor;
+    at: Date;
+}): Promise<Result<LeaseId, DomainError<'NOT_THE_OPERATOR_SHIP'>>>;
+/**
+ * Ends a lease if it is still open, and with it the crew token it holds: the
+ * ship awaits a new crew, and the deliveries the lease held in flight return
+ * to pending, to the ship's inbox or its type's queue, their attempts kept.
+ * Writes LeaseRevoked, then DeliveryReturned for each returned delivery, all
+ * caused by whoever ended the lease, and wakes whoever waits for each, as a
+ * send does: another ship of the type takes a returned type delivery at once.
+ * The wake-up reaches them only once the unit of work commits. Returns false
+ * when the lease had already ended.
+ */
+export declare function endLease(deps: LeaseDeps, input: {
+    fleetId: FleetId;
+    leaseId: LeaseId;
+    actor: Actor;
+    at: Date;
+    reason: LeaseEndReason;
+}): Promise<boolean>;
+/** The ports holding a crew's lease reads, inside the caller's unit of work. */
+export interface HoldLeaseTx {
+    leases: Pick<LeaseRepository, 'findOpenByIdForShare'>;
+    ships: Pick<ShipRepository, 'find'>;
+}
+/**
+ * Holds a crew's lease open until the unit of work ends and returns the ship
+ * it crews: Messaging's question when a crew receives. A release or a takeover
+ * ending the lease meanwhile waits, then returns to pending whatever the unit
+ * of work claimed, so nothing stays claimed by an ended lease. Refused when
+ * the lease has already ended.
+ */
+export declare function holdLease(tx: HoldLeaseTx, crew: {
+    fleetId: FleetId;
+    leaseId: LeaseId;
+}): Promise<Result<Ship, LeaseEnded>>;

package/dist/domain/registry/leases.js

@@ -0,0 +1,80 @@
+import { refuse } from '../shared/errors.js';
+import { recordEvent } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { refuseEndedLease } from './lease.js';
+/**
+ * Starts a new lease on the operator ship, ending the one it holds. Only `argo`
+ * is taken over this way; any other ship fails a second claim instead
+ * (ADR 0010). Writes LeaseRevoked for the old lease and ShipClaimed for the new.
+ */
+export async function takeOverOperatorLease(deps, input) {
+    const { tx, ids } = deps;
+    const { fleetId, shipId, location, actor, at } = input;
+    if (input.kind !== 'operator') {
+        return refuse('NOT_THE_OPERATOR_SHIP', 'Only the operator ship can be taken over');
+    }
+    const held = await tx.leases.findOpenForUpdate(fleetId, shipId);
+    if (held) {
+        await endLease(deps, { fleetId, leaseId: held.id, actor, at, reason: 'takenOver' });
+    }
+    const leaseId = ids('lease');
+    await tx.leases.open({ id: leaseId, fleetId, shipId, location, harness: null, crewTokenHash: null, startedAt: at, endedAt: null });
+    await recordEvent({ events: tx.events, ids }, {
+        fleetId,
+        type: 'ShipClaimed',
+        occurredAt: at,
+        actor,
+        shipId,
+        details: { leaseId, location: location.kind, locationDescription: location.description, harness: null },
+    });
+    return ok(leaseId);
+}
+/**
+ * Ends a lease if it is still open, and with it the crew token it holds: the
+ * ship awaits a new crew, and the deliveries the lease held in flight return
+ * to pending, to the ship's inbox or its type's queue, their attempts kept.
+ * Writes LeaseRevoked, then DeliveryReturned for each returned delivery, all
+ * caused by whoever ended the lease, and wakes whoever waits for each, as a
+ * send does: another ship of the type takes a returned type delivery at once.
+ * The wake-up reaches them only once the unit of work commits. Returns false
+ * when the lease had already ended.
+ */
+export async function endLease(deps, input) {
+    const { tx, ids } = deps;
+    const { fleetId, leaseId, actor, at, reason } = input;
+    const ended = await tx.leases.end({ fleetId, leaseId, endedAt: at });
+    if (!ended) {
+        return false;
+    }
+    const returned = await tx.inFlightDeliveries.returnToPending(fleetId, leaseId);
+    const concerns = { fleetId, occurredAt: at, actor, shipId: ended.shipId };
+    await recordEvent({ events: tx.events, ids }, {
+        ...concerns,
+        type: 'LeaseRevoked',
+        details: { leaseId, reason, returnedDeliveries: returned.length },
+    });
+    for (const { deliveryId, messageId, recipient, attempts } of returned) {
+        await recordEvent({ events: tx.events, ids }, {
+            ...concerns,
+            type: 'DeliveryReturned',
+            messageId,
+            deliveryId,
+            details: { leaseId, attempts },
+        });
+        await tx.notifier.deliveryPending({ fleetId, deliveryId, recipient });
+    }
+    return true;
+}
+/**
+ * Holds a crew's lease open until the unit of work ends and returns the ship
+ * it crews: Messaging's question when a crew receives. A release or a takeover
+ * ending the lease meanwhile waits, then returns to pending whatever the unit
+ * of work claimed, so nothing stays claimed by an ended lease. Refused when
+ * the lease has already ended.
+ */
+export async function holdLease(tx, crew) {
+    const lease = await tx.leases.findOpenByIdForShare(crew.fleetId, crew.leaseId);
+    const ship = lease && (await tx.ships.find(crew.fleetId, lease.shipId));
+    return ship ? ok(ship) : refuseEndedLease();
+}
+//# sourceMappingURL=leases.js.map

package/dist/domain/registry/leases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leases.js","sourceRoot":"","sources":["../../../src/domain/registry/leases.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAA6B,MAAM,qBAAqB,CAAC;AAE7E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAuD,MAAM,YAAY,CAAC;AAkBnG;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAe,EACf,KAAuG;IAEvG,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACvD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,uBAAuB,EAAE,0CAA0C,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnI,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,OAAO;QACP,IAAI,EAAE,aAAa;QACnB,UAAU,EAAE,EAAE;QACd,KAAK;QACL,MAAM;QACN,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;KACxG,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAe,EACf,KAA6F;IAE7F,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAEtD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC1E,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC5C,GAAG,QAAQ;QACX,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,CAAC,MAAM,EAAE;KAClE,CAAC,CAAC;IACH,KAAK,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;QACtE,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YAC5C,GAAG,QAAQ;YACX,IAAI,EAAE,kBAAkB;YACxB,SAAS;YACT,UAAU;YACV,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAe,EACf,IAA4C;IAE5C,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;AAC9C,CAAC"}

package/dist/domain/registry/limits.d.ts

@@ -0,0 +1,50 @@
+import type { FleetId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+/**
+ * The installation's settings (docs/blueprint.md, "Installation"): the ship
+ * and daily message limits a fleet follows unless set for it, and the cap on
+ * the number of fleets. Null is no limit. Aeolus sets none of its own: these
+ * are whoever runs the installation's (decision 0016).
+ */
+export interface InstallationSettings {
+    defaultShipLimit: number | null;
+    defaultDailyMessageLimit: number | null;
+    fleetCap: number | null;
+}
+/** An installation that has set nothing: no limit anywhere, as a self-hosted server runs. */
+export declare const NO_INSTALLATION_SETTINGS: InstallationSettings;
+/** How one of a fleet's limits is set: it follows the installation default, or is set for the fleet to a number or to no limit. */
+export type FleetLimitSetting = {
+    kind: 'default';
+} | {
+    kind: 'fleet';
+    limit: number | null;
+};
+/** How a fleet's ship and daily message limits are set. */
+export interface FleetLimitSettings {
+    ships: FleetLimitSetting;
+    dailyMessages: FleetLimitSetting;
+}
+/** A fleet that has set nothing for itself: both limits follow the installation defaults. */
+export declare const FOLLOWING_DEFAULTS: FleetLimitSettings;
+/** One of a fleet's limits: how it is set, and the limit that applies (null: none). */
+export interface FleetLimit {
+    setting: FleetLimitSetting;
+    applies: number | null;
+}
+export interface FleetLimits {
+    fleetId: FleetId;
+    ships: FleetLimit;
+    dailyMessages: FleetLimit;
+}
+/** A limit as configured: a whole number of at least 0, or null for no limit. */
+export declare function limit(raw: number | null): Result<number | null, DomainError<'INVALID_LIMIT'>>;
+/** The limit a setting gives: its own when set for the fleet, else the installation default. */
+export declare function appliedLimit(setting: FleetLimitSetting, defaultLimit: number | null): number | null;
+/** A fleet's limits from how it set them and the installation's defaults. */
+export declare function fleetLimitsOf(of: {
+    fleetId: FleetId;
+    settings: FleetLimitSettings;
+    installation: InstallationSettings;
+}): FleetLimits;

package/dist/domain/registry/limits.js

@@ -0,0 +1,24 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/** An installation that has set nothing: no limit anywhere, as a self-hosted server runs. */
+export const NO_INSTALLATION_SETTINGS = { defaultShipLimit: null, defaultDailyMessageLimit: null, fleetCap: null };
+/** A fleet that has set nothing for itself: both limits follow the installation defaults. */
+export const FOLLOWING_DEFAULTS = { ships: { kind: 'default' }, dailyMessages: { kind: 'default' } };
+/** A limit as configured: a whole number of at least 0, or null for no limit. */
+export function limit(raw) {
+    return raw === null || (Number.isInteger(raw) && raw >= 0) ? ok(raw) : refuse('INVALID_LIMIT', 'A limit is a whole number of at least 0, or none');
+}
+/** The limit a setting gives: its own when set for the fleet, else the installation default. */
+export function appliedLimit(setting, defaultLimit) {
+    return setting.kind === 'fleet' ? setting.limit : defaultLimit;
+}
+/** A fleet's limits from how it set them and the installation's defaults. */
+export function fleetLimitsOf(of) {
+    const { fleetId, settings, installation } = of;
+    return {
+        fleetId,
+        ships: { setting: settings.ships, applies: appliedLimit(settings.ships, installation.defaultShipLimit) },
+        dailyMessages: { setting: settings.dailyMessages, applies: appliedLimit(settings.dailyMessages, installation.defaultDailyMessageLimit) },
+    };
+}
+//# sourceMappingURL=limits.js.map

package/dist/domain/registry/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../../src/domain/registry/limits.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AActD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,wBAAwB,GAAyB,EAAE,gBAAgB,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAWzI,6FAA6F;AAC7F,MAAM,CAAC,MAAM,kBAAkB,GAAuB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;AAczH,iFAAiF;AACjF,MAAM,UAAU,KAAK,CAAC,GAAkB;IACtC,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,kDAAkD,CAAC,CAAC;AACrJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,YAAY,CAAC,OAA0B,EAAE,YAA2B;IAClF,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;AACjE,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,EAA0F;IACtH,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;IAC/C,OAAO;QACL,OAAO;QACP,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,gBAAgB,CAAC,EAAE;QACxG,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC,wBAAwB,CAAC,EAAE;KACzI,CAAC;AACJ,CAAC"}

package/dist/domain/registry/list-fleet.d.ts

@@ -0,0 +1,70 @@
+import type { Scope, ShipId, ShipKind, ShipStatus } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import type { Location } from './lease.js';
+import { type PingStatus } from './ping-status.js';
+import type { CrewRequest } from './crew-request.js';
+import type { FleetListing, ShipFacts } from './ports.js';
+import type { ShipReport } from './ship-report.js';
+/** A ship as the fleet snapshot shows it. */
+export interface ListedShip {
+    id: ShipId;
+    name: string;
+    type: string;
+    /** `operator` for `argo`, which is never released, renamed or retired; `agent` for every other ship. */
+    kind: ShipKind;
+    status: ShipStatus;
+    /**
+     * The starting prompt holding the ship's valid secret: when it was issued
+     * and whether a session has claimed the ship with it. Null when no secret is
+     * valid. An unclaimed one is outstanding: a new prompt would stop it working.
+     */
+    startingPrompt: {
+        issuedAt: Date;
+        isClaimed: boolean;
+    } | null;
+    /** Where the session crewing the ship runs, as it reported on claim; null while no session crews it. */
+    location: Location | null;
+    /** The last call of the session crewing it; null while no session crews it. Observation only. */
+    lastSeenAt: Date | null;
+    /** The ship's last ping and how it stands; null before any ping. Observation only. */
+    ping: PingStatus | null;
+    /** What the ship may do: every agent ship sends and receives, and may hold fleet scopes; argo has all. */
+    scopes: readonly Scope[];
+    /** The crew's last report with the version of its details, never the details; null until it reports, and while no session crews the ship. */
+    report: Omit<ShipReport, 'details'> | null;
+    /** The ship's crew request by its settings version and when it was requested, never its settings; null when it holds none. */
+    crewRequest: (Pick<CrewRequest, 'settingsVersion' | 'requestedAt' | 'status' | 'reason'> & {
+        /** The trierarch ship it is assigned to, by id and name; null while unassigned. */
+        assignedTo: {
+            id: ShipId;
+            name: string;
+        } | null;
+        /** The ship that got the starting prompt its crew claimed with: argo for a hand crew, or its trierarch; null while not crewed. */
+        crewedBy: {
+            id: ShipId;
+            name: string;
+        } | null;
+    }) | null;
+    /** The harness the crewing session stated, read together with its location; null while no session crews the ship. */
+    harness: string | null;
+    /** The ship's current model: the last its sessions stated on a send, and when; null before any. */
+    model: {
+        id: string;
+        statedAt: Date;
+    } | null;
+    /** Since when the ship awaits crew: its commission, or when its last session ended (a release or deregister). Null unless it awaits crew. */
+    awaitingCrewSince: Date | null;
+    /** When the operator retired the ship; null while it is active. */
+    retiredAt: Date | null;
+}
+export type ListFleet = (caller: Caller) => Promise<ListedShip[]>;
+/**
+ * Use case: every ship of the caller's fleet, `argo` included, oldest first.
+ * Never a secret, a crew token or their hashes. The caller's scope
+ * (fleet:read) is checked before this runs.
+ */
+export declare function createListFleet(deps: {
+    listing: FleetListing;
+}): ListFleet;
+/** A ship as the fleet snapshot shows it, from what the listing read about it. */
+export declare function listedShipOf({ ship, openLease, validSecret, crewRequest, crewRequestAssignee, crewedBy, lastPing, lastModel, lastViewedAt, lastLeaseEndedAt, }: ShipFacts): ListedShip;

package/dist/domain/registry/list-fleet.js

@@ -0,0 +1,47 @@
+import { pingStatusOf } from './ping-status.js';
+import { shipStatus } from './ship.js';
+/**
+ * Use case: every ship of the caller's fleet, `argo` included, oldest first.
+ * Never a secret, a crew token or their hashes. The caller's scope
+ * (fleet:read) is checked before this runs.
+ */
+export function createListFleet(deps) {
+    return async (caller) => (await deps.listing.ships(caller.fleetId)).map(listedShipOf);
+}
+/** A ship as the fleet snapshot shows it, from what the listing read about it. */
+export function listedShipOf({ ship, openLease, validSecret, crewRequest, crewRequestAssignee, crewedBy, lastPing, lastModel, lastViewedAt, lastLeaseEndedAt, }) {
+    const status = shipStatus(ship, { isCrewed: openLease !== null });
+    return {
+        id: ship.id,
+        name: ship.name,
+        type: ship.type,
+        kind: ship.kind,
+        status,
+        startingPrompt: validSecret && { issuedAt: validSecret.issuedAt, isClaimed: validSecret.claimedAt !== null },
+        location: openLease?.location ?? null,
+        // The viewer ship holds no lease: it was last seen when its most recent viewer session was used.
+        lastSeenAt: openLease?.lastSeenAt ?? lastViewedAt,
+        ping: pingStatusOf(lastPing),
+        scopes: ship.scopes,
+        report: openLease?.report ? listedReportOf(openLease.report) : null,
+        crewRequest: crewRequest && {
+            settingsVersion: crewRequest.settingsVersion,
+            requestedAt: crewRequest.requestedAt,
+            assignedTo: crewRequestAssignee,
+            status: crewRequest.status,
+            reason: crewRequest.reason,
+            crewedBy,
+        },
+        harness: openLease?.harness ?? null,
+        model: lastModel,
+        awaitingCrewSince: status === 'awaitingCrew' ? latestOf(ship.createdAt, lastLeaseEndedAt) : null,
+        retiredAt: ship.retiredAt,
+    };
+}
+function listedReportOf({ state, note, reportedAt, detailsVersion }) {
+    return { state, note, reportedAt, detailsVersion };
+}
+function latestOf(first, second) {
+    return second !== null && second > first ? second : first;
+}
+//# sourceMappingURL=list-fleet.js.map

package/dist/domain/registry/list-fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-fleet.js","sourceRoot":"","sources":["../../../src/domain/registry/list-fleet.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,YAAY,EAAmB,MAAM,kBAAkB,CAAC;AAIjE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA+CvC;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAA+B;IAC7D,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACxF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,EAC3B,IAAI,EACJ,SAAS,EACT,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,gBAAgB,GACN;IACV,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM;QACN,cAAc,EAAE,WAAW,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,KAAK,IAAI,EAAE;QAC5G,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI,IAAI;QACrC,iGAAiG;QACjG,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,YAAY;QACjD,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QACnE,WAAW,EAAE,WAAW,IAAI;YAC1B,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,UAAU,EAAE,mBAAmB;YAC/B,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,QAAQ;SACT;QACD,OAAO,EAAE,SAAS,EAAE,OAAO,IAAI,IAAI;QACnC,KAAK,EAAE,SAAS;QAChB,iBAAiB,EAAE,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI;QAChG,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAc;IAC7E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAW,EAAE,MAAmB;IAChD,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5D,CAAC"}

package/dist/domain/registry/list-fleets.d.ts

@@ -0,0 +1,11 @@
+import type { Fleet } from './fleet.js';
+import type { FleetRepository } from './ports.js';
+export type ListFleets = () => Promise<Fleet[]>;
+/**
+ * Use case: the fleets this installation hosts, for server commands that act
+ * on one of them. Not reachable through the API: listing fleets reads across
+ * tenants.
+ */
+export declare function createListFleets(deps: {
+    fleets: Pick<FleetRepository, 'list'>;
+}): ListFleets;

package/dist/domain/registry/list-fleets.js

@@ -0,0 +1,9 @@
+/**
+ * Use case: the fleets this installation hosts, for server commands that act
+ * on one of them. Not reachable through the API: listing fleets reads across
+ * tenants.
+ */
+export function createListFleets(deps) {
+    return () => deps.fleets.list();
+}
+//# sourceMappingURL=list-fleets.js.map

package/dist/domain/registry/list-fleets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-fleets.js","sourceRoot":"","sources":["../../../src/domain/registry/list-fleets.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA+C;IAC9E,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAClC,CAAC"}

package/dist/domain/registry/list-installation-fleets.d.ts

@@ -0,0 +1,15 @@
+import type { Clock } from '../shared/clock.js';
+import { type InstallationFleet } from './installation-fleet.js';
+import type { InstallationFleets, InstallationSettingsRepository } from './ports.js';
+export type ListInstallationFleets = () => Promise<InstallationFleet[]>;
+/**
+ * Use case: every fleet the installation hosts, oldest first, with its
+ * operator, its measures, its messages per UTC day of the last 7 days and the
+ * limits that apply to it (docs/blueprint.md, "Installation"). It reads across
+ * fleets, so only the installation token reaches it.
+ */
+export declare function createListInstallationFleets(deps: {
+    fleets: InstallationFleets;
+    settings: InstallationSettingsRepository;
+    clock: Clock;
+}): ListInstallationFleets;

package/dist/domain/registry/list-installation-fleets.js

@@ -0,0 +1,15 @@
+import { installationFleet, messageWindow } from './installation-fleet.js';
+/**
+ * Use case: every fleet the installation hosts, oldest first, with its
+ * operator, its measures, its messages per UTC day of the last 7 days and the
+ * limits that apply to it (docs/blueprint.md, "Installation"). It reads across
+ * fleets, so only the installation token reaches it.
+ */
+export function createListInstallationFleets(deps) {
+    return async () => {
+        const now = deps.clock.now();
+        const installation = await deps.settings.read();
+        return (await deps.fleets.list(messageWindow(now))).map((facts) => installationFleet(facts, { now, installation }));
+    };
+}
+//# sourceMappingURL=list-installation-fleets.js.map

package/dist/domain/registry/list-installation-fleets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-installation-fleets.js","sourceRoot":"","sources":["../../../src/domain/registry/list-installation-fleets.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAA0B,MAAM,yBAAyB,CAAC;AAKnG;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAA4F;IACvI,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACtH,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/registry/ping-status.d.ts

@@ -0,0 +1,17 @@
+import type { PingState } from '@aeolus-fleet/common';
+import type { ShipFacts } from './ports.js';
+/** How a ship's last ping stands, as the console shows it. Observation only (ADR 0016). */
+export interface PingStatus {
+    state: PingState;
+    sentAt: Date;
+    /** When pong answered it; null until then, and for a ping acknowledged with a plain ack. */
+    answeredAt: Date | null;
+}
+/**
+ * The status of a ship's last ping: waiting while its delivery is pending or
+ * in flight, answered once pong acknowledged it, received when a plain ack
+ * did, and undeliverable once it was handed out again and again and never
+ * acknowledged (it is in Needs attention too). A ping the operator dismissed,
+ * or one abandoned with a retired ship, shows none.
+ */
+export declare function pingStatusOf(lastPing: ShipFacts['lastPing']): PingStatus | null;

package/dist/domain/registry/ping-status.js

@@ -0,0 +1,28 @@
+/**
+ * The status of a ship's last ping: waiting while its delivery is pending or
+ * in flight, answered once pong acknowledged it, received when a plain ack
+ * did, and undeliverable once it was handed out again and again and never
+ * acknowledged (it is in Needs attention too). A ping the operator dismissed,
+ * or one abandoned with a retired ship, shows none.
+ */
+export function pingStatusOf(lastPing) {
+    if (lastPing === null) {
+        return null;
+    }
+    const { sentAt, deliveryState, answeredWithPongAt } = lastPing;
+    switch (deliveryState) {
+        case 'pending':
+        case 'delivered':
+            return { state: 'waiting', sentAt, answeredAt: null };
+        case 'acknowledged':
+            return answeredWithPongAt === null
+                ? { state: 'received', sentAt, answeredAt: null }
+                : { state: 'answered', sentAt, answeredAt: answeredWithPongAt };
+        case 'undeliverable':
+            return { state: 'undeliverable', sentAt, answeredAt: null };
+        case 'dismissed':
+        case 'abandoned':
+            return null;
+    }
+}
+//# sourceMappingURL=ping-status.js.map

package/dist/domain/registry/ping-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ping-status.js","sourceRoot":"","sources":["../../../src/domain/registry/ping-status.ts"],"names":[],"mappings":"AAYA;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,QAA+B;IAC1D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,QAAQ,CAAC;IAC/D,QAAQ,aAAa,EAAE,CAAC;QACtB,KAAK,SAAS,CAAC;QACf,KAAK,WAAW;YACd,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACxD,KAAK,cAAc;YACjB,OAAO,kBAAkB,KAAK,IAAI;gBAChC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE;gBACjD,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACpE,KAAK,eAAe;YAClB,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9D,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/domain/registry/pingable-ship.d.ts

@@ -0,0 +1,22 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { LeaseRepository, ShipRepository } from './ports.js';
+import { type PingRefusal, type Ship } from './ship.js';
+/** The ports finding a ship to ping reads, inside the caller's unit of work. */
+export interface PingableShipTx {
+    ships: Pick<ShipRepository, 'findForUpdate'>;
+    leases: Pick<LeaseRepository, 'findOpenForShare'>;
+}
+export type UnpingableShip = DomainError<'SHIP_NOT_FOUND'> | PingRefusal;
+/**
+ * The ship a ping goes to, if it can be pinged: Messaging's question before
+ * it pings. The ship stays locked until the unit of work ends, so two pings
+ * of one ship take turns and the second finds the first one's ping: pings
+ * never stack. Its open lease is held against a release meanwhile. Lock
+ * order as everywhere: the ship, then its lease.
+ */
+export declare function findPingableShip(tx: PingableShipTx, input: {
+    fleetId: FleetId;
+    shipId: ShipId;
+}): Promise<Result<Ship, UnpingableShip>>;

package/dist/domain/registry/pingable-ship.js

@@ -0,0 +1,21 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+import { checkCanBePinged } from './ship.js';
+/**
+ * The ship a ping goes to, if it can be pinged: Messaging's question before
+ * it pings. The ship stays locked until the unit of work ends, so two pings
+ * of one ship take turns and the second finds the first one's ping: pings
+ * never stack. Its open lease is held against a release meanwhile. Lock
+ * order as everywhere: the ship, then its lease.
+ */
+export async function findPingableShip(tx, input) {
+    const { fleetId, shipId } = input;
+    const ship = await tx.ships.findForUpdate(fleetId, shipId);
+    if (!ship) {
+        return refuse('SHIP_NOT_FOUND', `Ship ${shipId} does not exist`);
+    }
+    const lease = await tx.leases.findOpenForShare(fleetId, shipId);
+    const pingable = checkCanBePinged(ship, { isCrewed: lease !== undefined });
+    return pingable.isOk ? ok(ship) : pingable;
+}
+//# sourceMappingURL=pingable-ship.js.map

package/dist/domain/registry/pingable-ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pingable-ship.js","sourceRoot":"","sources":["../../../src/domain/registry/pingable-ship.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAA+B,MAAM,WAAW,CAAC;AAU1E;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAkB,EAClB,KAA2C;IAE3C,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,MAAM,iBAAiB,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC,CAAC;IAC3E,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC7C,CAAC"}