@aeolus-fleet/core 0.0.0 → 0.19.0

package/dist/domain/registry/ship.js

@@ -0,0 +1,334 @@
+import { FLEET_SCOPES, SCOPES, } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { refuseEndedLease } from './lease.js';
+import { shipName, shipType } from './ship-handle.js';
+import { shipNote } from './ship-note.js';
+/** The operator ship's name. Reserved: no other ship can take it. */
+export const OPERATOR_SHIP_NAME = 'argo';
+/** The operator ship's type label, the same word as its kind. */
+export const OPERATOR_SHIP_TYPE = 'operator';
+/** `argo`: the one ship of kind `operator`, holding every scope (ADR 0012). */
+export function operatorShip(input) {
+    return {
+        ...input,
+        name: OPERATOR_SHIP_NAME,
+        type: OPERATOR_SHIP_TYPE,
+        kind: 'operator',
+        scopes: [...SCOPES],
+        note: null,
+        retiredAt: null,
+        commission: null,
+    };
+}
+/** The viewer ship's name, reserved as argo's is (decision 0022). */
+export const VIEWER_SHIP_NAME = 'viewer';
+/** The viewer ship's type label, the same word as its kind. */
+export const VIEWER_SHIP_TYPE = 'viewer';
+/**
+ * The viewer ship: the fleet's read-only door into the console (decision
+ * 0022). It reads the fleet and nothing more, has no secret, and holds no
+ * lease: many people view through it at once, each with a console session.
+ */
+export function viewerShip(input) {
+    return {
+        ...input,
+        name: VIEWER_SHIP_NAME,
+        type: VIEWER_SHIP_TYPE,
+        kind: 'viewer',
+        scopes: ['fleet:read'],
+        note: null,
+        retiredAt: null,
+        commission: null,
+    };
+}
+/** The ships no session crews with a secret and no fleet action ends or renames, by kind, as their refusals name them. */
+const PERMANENT_SHIPS = { operator: 'the operator ship', viewer: 'the viewer ship' };
+/** The scopes every agent ship gets at creation: it sends and receives; commissioning may add fleet scopes (ADR 0002). */
+export const AGENT_SCOPES = ['messages:send', 'messages:receive'];
+/**
+ * A new agent ship, awaiting crew, and its ShipCommissioned event. The name is
+ * a handle, never `argo`, and unique among the fleet's active ships:
+ * `activeShipNamed` is the active ship that already holds it, if any, read
+ * while the name is locked.
+ */
+export function commissionAgentShip(input, fleet) {
+    const name = shipName(input.name);
+    if (!name.isOk) {
+        return name;
+    }
+    const notReserved = checkNameIsNotReserved(name.value);
+    if (!notReserved.isOk) {
+        return notReserved;
+    }
+    const type = shipType(input.type);
+    if (!type.isOk) {
+        return type;
+    }
+    const note = shipNote(input.note);
+    if (!note.isOk) {
+        return note;
+    }
+    if (fleet.activeShipNamed) {
+        return refuse('SHIP_NAME_TAKEN', `An active ship is already named ${name.value}`);
+    }
+    const { id, fleetId, at, actor } = input;
+    const ship = {
+        id,
+        fleetId,
+        name: name.value,
+        type: type.value,
+        kind: 'agent',
+        scopes: [...AGENT_SCOPES, ...FLEET_SCOPES.filter((scope) => input.fleetScopes?.includes(scope))],
+        note: note.value,
+        createdAt: at,
+        retiredAt: null,
+        commission: input.commission,
+    };
+    return ok({
+        ship,
+        events: [
+            {
+                fleetId,
+                type: 'ShipCommissioned',
+                occurredAt: at,
+                actor,
+                shipId: id,
+                details: { name: ship.name, type: ship.type, kind: ship.kind, scopes: ship.scopes.join(' ') },
+            },
+        ],
+    });
+}
+/**
+ * Awaiting crew, crewed or retired: derived from whether a session holds the
+ * ship's lease and whether the ship is retired, never set by hand.
+ */
+export function shipStatus(ship, lease) {
+    if (ship.retiredAt !== null) {
+        return 'retired';
+    }
+    // argo and the viewer ship are the console's own: argo's crew is the console, signed in or not
+    // (decision 0012), and the viewer ship is a door into it, always open (decision 0022).
+    return lease.isCrewed || ship.kind !== 'agent' ? 'crewed' : 'awaitingCrew';
+}
+const STATUS_WORDS = {
+    awaitingCrew: 'awaiting crew',
+    crewed: 'crewed',
+    retired: 'retired',
+};
+/**
+ * A starting prompt is issued only while the ship awaits crew. Never for `argo`:
+ * it has no secret, and only the operator's console sign-in crews it (ADR 0012).
+ */
+export function checkCanIssueStartingPrompt(ship, lease) {
+    if (ship.kind !== 'agent') {
+        return refuse('OPERATOR_SHIP_GETS_NO_STARTING_PROMPT', `${ship.name} has no secret: only the operator's console sign-in crews it, so it gets no starting prompt`);
+    }
+    const status = shipStatus(ship, lease);
+    return status === 'awaitingCrew'
+        ? ok(undefined)
+        : refuse('SHIP_NOT_AWAITING_CREW', `${ship.name} is ${STATUS_WORDS[status]}: a starting prompt is issued only while a ship awaits crew`);
+}
+/**
+ * A ping goes only to a crewed ship: a session must be there to answer it.
+ * Never to `argo`: the console is no session that answers with pong.
+ */
+export function checkCanBePinged(ship, lease) {
+    if (ship.kind === 'operator') {
+        return refuse('OPERATOR_SHIP_IS_NOT_PINGED', `${ship.name} is the console: only a ship a session crews is pinged`);
+    }
+    if (ship.kind === 'viewer') {
+        return refuse('OPERATOR_SHIP_IS_NOT_PINGED', `${ship.name} is the viewer ship: only a ship a session crews is pinged`);
+    }
+    switch (shipStatus(ship, lease)) {
+        case 'crewed':
+            return ok(undefined);
+        case 'retired':
+            return refuse('SHIP_ALREADY_RETIRED', `${ship.name} is retired: only a ship a session crews is pinged`);
+        case 'awaitingCrew':
+            return refuse('SHIP_NOT_CREWED', `${ship.name} is awaiting crew: no session would answer a ping`);
+    }
+}
+/**
+ * A session claims the ship with its secret (`register`): a new lease at the
+ * location the session reports, holding the hash of its crew token, and
+ * ShipClaimed, caused by the ship itself. Only while the ship awaits crew: a
+ * second claim fails while a lease is held, and the operator frees the ship
+ * with Release (ADR 0010); a retired ship is never claimed again. Never
+ * `argo`: it has no secret, and only the operator's console sign-in crews it
+ * (ADR 0012).
+ */
+export function claimShip(crew, claim) {
+    const { ship, heldLease } = crew;
+    if (ship.kind === 'operator') {
+        return refuse('OPERATOR_SHIP_HAS_NO_SECRET', `${ship.name} has no secret: only the operator's console sign-in crews it`);
+    }
+    if (ship.kind === 'viewer') {
+        return refuse('OPERATOR_SHIP_HAS_NO_SECRET', `${ship.name} has no secret: it is viewed through console sessions the installation hands out`);
+    }
+    const status = shipStatus(ship, { isCrewed: heldLease !== undefined });
+    if (status !== 'awaitingCrew') {
+        return refuse('SHIP_NOT_AWAITING_CREW', `${ship.name} is ${STATUS_WORDS[status]}: a session claims a ship only while it awaits crew`);
+    }
+    const { leaseId, location, crewTokenHash, at } = claim;
+    const lease = {
+        id: leaseId,
+        fleetId: ship.fleetId,
+        shipId: ship.id,
+        location,
+        harness: claim.harness,
+        crewTokenHash,
+        startedAt: at,
+        endedAt: null,
+    };
+    return ok({
+        lease,
+        events: [
+            {
+                fleetId: ship.fleetId,
+                type: 'ShipClaimed',
+                occurredAt: at,
+                actor: shipActor(ship.id),
+                shipId: ship.id,
+                details: { leaseId, location: location.kind, locationDescription: location.description, harness: claim.harness },
+            },
+        ],
+    });
+}
+/**
+ * A message can be addressed to any ship of the fleet, `argo` included, as long
+ * as it is not retired: a retired ship's id can never be addressed again, so a
+ * message to it could never be delivered. Never the viewer ship, which
+ * receives nothing (decision 0022).
+ */
+export function addressShip(ship) {
+    if (ship.kind === 'viewer') {
+        return refuse('UNRESOLVABLE_SELECTOR', `${ship.name} is the viewer ship: it receives nothing, so nothing is sent to it`);
+    }
+    return ship.retiredAt === null
+        ? ok({ kind: 'ship', shipId: ship.id })
+        : refuse('UNRESOLVABLE_SELECTOR', `${ship.name} is retired: a retired ship is never addressed again`);
+}
+/** The reserved names, each with the ship it is kept for. */
+const RESERVED_NAMES = new Map([
+    [OPERATOR_SHIP_NAME, 'the operator ship'],
+    [VIEWER_SHIP_NAME, 'the viewer ship'],
+]);
+export function isReservedShipName(name) {
+    return RESERVED_NAMES.has(name);
+}
+/** Commissioning and renaming call this: no ship but the operator ship may be called `argo`. */
+export function checkNameIsNotReserved(name) {
+    const keptFor = RESERVED_NAMES.get(name);
+    return keptFor === undefined ? ok(undefined) : refuse('SHIP_NAME_RESERVED', `The name ${name} is reserved for ${keptFor}`);
+}
+/**
+ * The operator ends a ship for good (Retire): any ship but argo, crewed or
+ * not, unless it is retired already.
+ */
+export function checkCanRetire(ship) {
+    const permanent = checkNotOperatorShip(ship, 'retired');
+    if (!permanent.isOk) {
+        return permanent;
+    }
+    return ship.retiredAt === null
+        ? ok(undefined)
+        : refuse('SHIP_ALREADY_RETIRED', `${ship.name} is retired already: a retired ship stays retired`);
+}
+/**
+ * The operator frees a ship from the session crewing it (Release), and the
+ * ship awaits a new crew: `heldLease` is its open lease, if any, read while
+ * locked. Only a crewed ship is released, never argo (ADR 0012). A ship
+ * awaiting crew has no session to free: an unclaimed prompt is replaced with
+ * a new prompt instead. Returns the lease to end.
+ */
+export function checkCanRelease(ship, heldLease) {
+    const permanent = checkNotOperatorShip(ship, 'released');
+    if (!permanent.isOk) {
+        return permanent;
+    }
+    const status = shipStatus(ship, { isCrewed: heldLease !== undefined });
+    if (heldLease === undefined || status !== 'crewed') {
+        const instead = status === 'awaitingCrew' ? '. A new starting prompt replaces an unclaimed one' : '';
+        return refuse('SHIP_NOT_CREWED', `${ship.name} is ${STATUS_WORDS[status]}: only a crewed ship is released${instead}`);
+    }
+    return ok(heldLease);
+}
+/**
+ * The session crewing a ship ends its own lease (`deregister`), and the ship
+ * awaits a new crew: `heldLease` is the ship's open lease, if any, read while
+ * locked. Only while it is the crew's own lease: once that lease has ended,
+ * released or deregistered, the crew has nothing left to end, and a new
+ * crew's lease is never its to end. Never argo, which is never released
+ * (ADR 0012). Returns the lease to end.
+ */
+export function checkCanDeregister(ship, crew) {
+    const permanent = checkNotOperatorShip(ship, 'released');
+    if (!permanent.isOk) {
+        return permanent;
+    }
+    const { leaseId, heldLease } = crew;
+    return heldLease?.id === leaseId ? ok(heldLease) : refuseEndedLease();
+}
+export function checkCanRename(ship, newName) {
+    const permanent = checkNotOperatorShip(ship, 'renamed');
+    return permanent.isOk ? checkNameIsNotReserved(newName) : permanent;
+}
+/**
+ * The operator gives a ship a new name (docs/blueprint.md, "Ship"): any ship
+ * but argo, crewed or not, never a retired one, which keeps the name it had.
+ * The name is a handle, never `argo`, and unique among the fleet's active
+ * ships: `activeShipNamed` is the active ship that holds it, if any, read
+ * while the name is locked. Messages store ids, so nothing sent is
+ * redirected; a sender addressing the old name no longer reaches it. The
+ * name it already has is OK, and nothing changes.
+ */
+export function renameShip(ship, rename) {
+    const name = shipName(rename.name);
+    if (!name.isOk) {
+        return name;
+    }
+    const allowed = checkCanRename(ship, name.value);
+    if (!allowed.isOk) {
+        return allowed;
+    }
+    if (ship.retiredAt !== null) {
+        return refuse('SHIP_ALREADY_RETIRED', `${ship.name} is retired: a retired ship keeps the name it had`);
+    }
+    if (name.value === ship.name) {
+        return ok({ ship, events: [] });
+    }
+    if (rename.activeShipNamed && rename.activeShipNamed.id !== ship.id) {
+        return refuse('SHIP_NAME_TAKEN', `An active ship is already named ${name.value}`);
+    }
+    return ok({
+        ship: { ...ship, name: name.value },
+        events: [
+            {
+                fleetId: ship.fleetId,
+                type: 'ShipRenamed',
+                occurredAt: rename.at,
+                actor: rename.actor,
+                shipId: ship.id,
+                details: { from: ship.name, to: name.value },
+            },
+        ],
+    });
+}
+/** A crew request asks that a ship be kept crewed: any ship a session can crew, never argo, the viewer ship or a retired ship. */
+export function checkCanBeRequestedCrew(ship) {
+    const permanent = checkNotOperatorShip(ship, 'crewed by request');
+    if (!permanent.isOk) {
+        return permanent;
+    }
+    return ship.retiredAt === null
+        ? ok(undefined)
+        : refuse('SHIP_ALREADY_RETIRED', `${ship.name} is retired: no session crews it again`);
+}
+/** argo and the viewer ship are permanent: no fleet action retires, releases or renames them (ADR 0012, decision 0022). */
+function checkNotOperatorShip(ship, action) {
+    const permanent = PERMANENT_SHIPS[ship.kind];
+    return permanent === undefined ? ok(undefined) : refuse('OPERATOR_SHIP_IS_PERMANENT', `${ship.name} is ${permanent} and can never be ${action}`);
+}
+//# sourceMappingURL=ship.js.map

package/dist/domain/registry/ship.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ship.js","sourceRoot":"","sources":["../../../src/domain/registry/ship.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,MAAM,GAQP,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAA6B,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAA8C,MAAM,YAAY,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAqB1C,qEAAqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,iEAAiE;AACjE,MAAM,CAAC,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,KAAwD;IACnF,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;QACnB,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAEzC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC;AAEzC;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAwD;IACjF,OAAO;QACL,GAAG,KAAK;QACR,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,CAAC,YAAY,CAAC;QACtB,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,0HAA0H;AAC1H,MAAM,eAAe,GAAsC,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;AAExH,0HAA0H;AAC1H,MAAM,CAAC,MAAM,YAAY,GAAqB,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;AAMpF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAWC,EACD,KAA4C;IAE5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,IAAI,GAAS;QACjB,EAAE;QACF,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,KAAK;QAChB,IAAI,EAAE,IAAI,CAAC,KAAK;QAChB,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAChG,IAAI,EAAE,IAAI,CAAC,KAAK;QAChB,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC;IACF,OAAO,EAAE,CAAC;QACR,IAAI;QACJ,MAAM,EAAE;YACN;gBACE,OAAO;gBACP,IAAI,EAAE,kBAAkB;gBACxB,UAAU,EAAE,EAAE;gBACd,KAAK;gBACL,MAAM,EAAE,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;aAC9F;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,IAAU,EAAE,KAA4B;IACjE,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,+FAA+F;IAC/F,uFAAuF;IACvF,OAAO,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;AAC7E,CAAC;AAED,MAAM,YAAY,GAA+B;IAC/C,YAAY,EAAE,eAAe;IAC7B,MAAM,EAAE,QAAQ;IAChB,OAAO,EAAE,SAAS;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAU,EACV,KAA4B;IAE5B,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,MAAM,CACX,uCAAuC,EACvC,GAAG,IAAI,CAAC,IAAI,6FAA6F,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,MAAM,KAAK,cAAc;QAC9B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;QACf,CAAC,CAAC,MAAM,CACJ,wBAAwB,EACxB,GAAG,IAAI,CAAC,IAAI,OAAO,YAAY,CAAC,MAAM,CAAC,6DAA6D,CACrG,CAAC;AACR,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,KAA4B;IACvE,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,6BAA6B,EAAE,GAAG,IAAI,CAAC,IAAI,wDAAwD,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,6BAA6B,EAAE,GAAG,IAAI,CAAC,IAAI,4DAA4D,CAAC,CAAC;IACzH,CAAC;IACD,QAAQ,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAChC,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,MAAM,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,IAAI,oDAAoD,CAAC,CAAC;QAC1G,KAAK,cAAc;YACjB,OAAO,MAAM,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,IAAI,mDAAmD,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAID;;;;;;;;GAQG;AACH,MAAM,UAAU,SAAS,CACvB,IAAkD,EAClD,KAAiG;IAEjG,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACjC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,6BAA6B,EAAE,GAAG,IAAI,CAAC,IAAI,8DAA8D,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,6BAA6B,EAAE,GAAG,IAAI,CAAC,IAAI,kFAAkF,CAAC,CAAC;IAC/I,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;QAC9B,OAAO,MAAM,CACX,wBAAwB,EACxB,GAAG,IAAI,CAAC,IAAI,OAAO,YAAY,CAAC,MAAM,CAAC,qDAAqD,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACvD,MAAM,KAAK,GAAU;QACnB,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,aAAa;QACb,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,IAAI;KACd,CAAC;IACF,OAAO,EAAE,CAAC;QACR,KAAK;QACL,MAAM,EAAE;YACN;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,EAAE;gBACd,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aACjH;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAU;IACpC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,uBAAuB,EAAE,GAAG,IAAI,CAAC,IAAI,oEAAoE,CAAC,CAAC;IAC3H,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI;QAC5B,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACvC,CAAC,CAAC,MAAM,CAAC,uBAAuB,EAAE,GAAG,IAAI,CAAC,IAAI,sDAAsD,CAAC,CAAC;AAC1G,CAAC;AAED,6DAA6D;AAC7D,MAAM,cAAc,GAAgC,IAAI,GAAG,CAAC;IAC1D,CAAC,kBAAkB,EAAE,mBAAmB,CAAC;IACzC,CAAC,gBAAgB,EAAE,iBAAiB,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAKD,gGAAgG;AAChG,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,EAAE,YAAY,IAAI,oBAAoB,OAAO,EAAE,CAAC,CAAC;AAC7H,CAAC;AAMD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI;QAC5B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,IAAI,mDAAmD,CAAC,CAAC;AACtG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAAU,EAAE,SAA4B;IACtE,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC;IACvE,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,mDAAmD,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,OAAO,MAAM,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,YAAY,CAAC,MAAM,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;IACxH,CAAC;IACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAU,EACV,IAAwD;IAExD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACpC,OAAO,SAAS,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAU,EAAE,OAAe;IACxD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAOD;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CACxB,IAAU,EACV,MAAmF;IAEnF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,IAAI,mDAAmD,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;QACpE,OAAO,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,CAAC;QACR,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE;QACnC,MAAM,EAAE;YACN;gBACE,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE;aAC7C;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAID,kIAAkI;AAClI,MAAM,UAAU,uBAAuB,CAAC,IAAU;IAChD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,KAAK,IAAI;QAC5B,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,IAAI,wCAAwC,CAAC,CAAC;AAC3F,CAAC;AAED,2HAA2H;AAC3H,SAAS,oBAAoB,CAAC,IAAU,EAAE,MAAgE;IACxG,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,4BAA4B,EAAE,GAAG,IAAI,CAAC,IAAI,OAAO,SAAS,qBAAqB,MAAM,EAAE,CAAC,CAAC;AACnJ,CAAC"}

package/dist/domain/registry/ships.d.ts

@@ -0,0 +1,25 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { ShipRepository } from './ports.js';
+import type { Ship } from './ship.js';
+export interface ShipTx {
+    ships: ShipRepository;
+}
+/** The fleet's operator ship, `argo`. Refuses when the fleet does not exist. */
+export declare function findOperatorShip(tx: ShipTx, fleetId: FleetId): Promise<Result<Ship, DomainError<'FLEET_NOT_FOUND'>>>;
+/** The fleet's viewer ship (decision 0022). Refuses when the fleet has none. */
+export declare function findViewerShip(tx: ShipTx, fleetId: FleetId): Promise<Result<Ship, DomainError<'FLEET_HAS_NO_VIEWER'>>>;
+/** The ports finding a ship reads, inside the caller's unit of work. */
+export interface FindShipTx {
+    ships: Pick<ShipRepository, 'find'>;
+}
+/**
+ * A ship of the fleet as it is now, retired or not: its current name and
+ * type. Messaging's question when it hands a crew a delivery, so the crew can
+ * answer the sender by name. Read without a lock.
+ */
+export declare function findShip(tx: FindShipTx, input: {
+    fleetId: FleetId;
+    shipId: ShipId;
+}): Promise<Result<Ship, DomainError<'SHIP_NOT_FOUND'>>>;

package/dist/domain/registry/ships.js

@@ -0,0 +1,22 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/** The fleet's operator ship, `argo`. Refuses when the fleet does not exist. */
+export async function findOperatorShip(tx, fleetId) {
+    const ship = await tx.ships.findOperatorShip(fleetId);
+    return ship ? ok(ship) : refuse('FLEET_NOT_FOUND', `Fleet ${fleetId} does not exist`);
+}
+/** The fleet's viewer ship (decision 0022). Refuses when the fleet has none. */
+export async function findViewerShip(tx, fleetId) {
+    const ship = await tx.ships.findViewerShip(fleetId);
+    return ship ? ok(ship) : refuse('FLEET_HAS_NO_VIEWER', `Fleet ${fleetId} has no viewer ship: create it with one to hand out viewer tickets`);
+}
+/**
+ * A ship of the fleet as it is now, retired or not: its current name and
+ * type. Messaging's question when it hands a crew a delivery, so the crew can
+ * answer the sender by name. Read without a lock.
+ */
+export async function findShip(tx, input) {
+    const ship = await tx.ships.find(input.fleetId, input.shipId);
+    return ship ? ok(ship) : refuse('SHIP_NOT_FOUND', `Ship ${input.shipId} does not exist`);
+}
+//# sourceMappingURL=ships.js.map

package/dist/domain/registry/ships.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ships.js","sourceRoot":"","sources":["../../../src/domain/registry/ships.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAQtD,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,EAAU,EACV,OAAgB;IAEhB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,SAAS,OAAO,iBAAiB,CAAC,CAAC;AACxF,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAU,EAAE,OAAgB;IAC/D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,qBAAqB,EAAE,SAAS,OAAO,oEAAoE,CAAC,CAAC;AAC/I,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,EAAc,EACd,KAA2C;IAE3C,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;AAC3F,CAAC"}

package/dist/domain/registry/starting-prompt.d.ts

@@ -0,0 +1,32 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+import { type CredentialTx, type SecretTools } from '../identity/public.js';
+import { type Actor, type EventLog } from '../shared/events.js';
+/**
+ * A starting prompt as a use case hands it out: the ship and its new secret,
+ * in plain text only here and once. How it reads (the prompt text, one crew
+ * line per harness) is presentation, done by the adapters
+ * (adapters/trpc/starting-prompt-text.ts); core never formats it.
+ */
+export interface IssuedStartingPrompt {
+    shipId: ShipId;
+    secret: string;
+}
+export interface StartingPromptTx extends CredentialTx {
+    events: EventLog;
+}
+/** What issuing a starting prompt works with: the caller's unit of work and the secret tools. */
+export interface StartingPromptDeps {
+    tx: StartingPromptTx;
+    secrets: SecretTools;
+}
+/**
+ * Issues a new secret for the ship and writes StartingPromptIssued. The caller
+ * invalidates any earlier secret first. Returns the secret: the one moment it
+ * exists in plain text.
+ */
+export declare function issueStartingPrompt(deps: StartingPromptDeps, input: {
+    fleetId: FleetId;
+    shipId: ShipId;
+    actor: Actor;
+    at: Date;
+}): Promise<IssuedStartingPrompt>;

package/dist/domain/registry/starting-prompt.js

@@ -0,0 +1,22 @@
+import { issueShipSecret } from '../identity/public.js';
+import { recordEvent } from '../shared/events.js';
+/**
+ * Issues a new secret for the ship and writes StartingPromptIssued. The caller
+ * invalidates any earlier secret first. Returns the secret: the one moment it
+ * exists in plain text.
+ */
+export async function issueStartingPrompt(deps, input) {
+    const { tx, secrets } = deps;
+    const { fleetId, shipId, actor, at } = input;
+    const { secret, credentialId } = await issueShipSecret({ tx, ...secrets }, { fleetId, shipId, at });
+    await recordEvent({ events: tx.events, ids: secrets.ids }, {
+        fleetId,
+        type: 'StartingPromptIssued',
+        occurredAt: at,
+        actor,
+        shipId,
+        details: { credentialId },
+    });
+    return { shipId, secret };
+}
+//# sourceMappingURL=starting-prompt.js.map

package/dist/domain/registry/starting-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"starting-prompt.js","sourceRoot":"","sources":["../../../src/domain/registry/starting-prompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAuC,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,WAAW,EAA6B,MAAM,qBAAqB,CAAC;AAuB7E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAwB,EACxB,KAAmE;IAEnE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAE7C,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,eAAe,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACpG,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;QACzD,OAAO;QACP,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,EAAE;QACd,KAAK;QACL,MAAM;QACN,OAAO,EAAE,EAAE,YAAY,EAAE;KAC1B,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC"}

package/dist/domain/registry/whoami.d.ts

@@ -0,0 +1,20 @@
+import type { FleetId, ShipId } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import { type DomainError } from '../shared/errors.js';
+import { type Result } from '../shared/result.js';
+import type { ShipRepository } from './ports.js';
+/** The caller's ship, as `whoami` tells it. */
+export interface ShipIdentity {
+    shipId: ShipId;
+    fleetId: FleetId;
+    name: string;
+    type: string;
+}
+export type Whoami = (caller: Caller) => Promise<Result<ShipIdentity, DomainError<'SHIP_NOT_FOUND'>>>;
+/**
+ * Use case: tells the caller which ship it crews: id, fleet, name and type.
+ * Any caller may ask, whatever its scopes: it learns only about itself.
+ */
+export declare function createWhoami(deps: {
+    ships: Pick<ShipRepository, 'find'>;
+}): Whoami;

package/dist/domain/registry/whoami.js

@@ -0,0 +1,15 @@
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/**
+ * Use case: tells the caller which ship it crews: id, fleet, name and type.
+ * Any caller may ask, whatever its scopes: it learns only about itself.
+ */
+export function createWhoami(deps) {
+    return async (caller) => {
+        const ship = await deps.ships.find(caller.fleetId, caller.shipId);
+        return ship
+            ? ok({ shipId: ship.id, fleetId: ship.fleetId, name: ship.name, type: ship.type })
+            : refuse('SHIP_NOT_FOUND', `Ship ${caller.shipId} does not exist`);
+    };
+}
+//# sourceMappingURL=whoami.js.map

package/dist/domain/registry/whoami.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"whoami.js","sourceRoot":"","sources":["../../../src/domain/registry/whoami.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAatD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAA6C;IACxE,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO,IAAI;YACT,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YAClF,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,MAAM,CAAC,MAAM,iBAAiB,CAAC,CAAC;IACvE,CAAC,CAAC;AACJ,CAAC"}

package/dist/domain/shared/caller.d.ts

@@ -0,0 +1,25 @@
+import type { ConsoleSessionId, FleetId, LeaseId, Scope, ShipId, ShipKind } from '@aeolus-fleet/common';
+/**
+ * Who is calling. Every caller is a ship (ADR 0012), resolved from its crew
+ * token or from a console session. Kind and scopes come from the server, never
+ * from the request.
+ */
+export interface Caller {
+    shipId: ShipId;
+    fleetId: FleetId;
+    kind: ShipKind;
+    scopes: readonly Scope[];
+    /** Set when the caller signed in through the console rather than calling with a crew token. */
+    consoleSessionId?: ConsoleSessionId;
+}
+/**
+ * A caller that came with the crew token `register` gave it: one session
+ * crewing one ship under one lease (ADR 0015). A receive claims deliveries
+ * for that lease, so they are the crew's, not merely the ship's.
+ */
+export interface Crew extends Caller {
+    leaseId: LeaseId;
+}
+export declare function hasScope(caller: Caller, scope: Scope): boolean;
+/** Whether the caller crews its ship under a lease: a crew token's crew, or argo's console session. */
+export declare function isCrew(caller: Caller): caller is Crew;

package/dist/domain/shared/caller.js

@@ -0,0 +1,8 @@
+export function hasScope(caller, scope) {
+    return caller.scopes.includes(scope);
+}
+/** Whether the caller crews its ship under a lease: a crew token's crew, or argo's console session. */
+export function isCrew(caller) {
+    return 'leaseId' in caller;
+}
+//# sourceMappingURL=caller.js.map

package/dist/domain/shared/caller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller.js","sourceRoot":"","sources":["../../../src/domain/shared/caller.ts"],"names":[],"mappings":"AAyBA,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAY;IACnD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,MAAM,CAAC,MAAc;IACnC,OAAO,SAAS,IAAI,MAAM,CAAC;AAC7B,CAAC"}

package/dist/domain/shared/clock.d.ts

@@ -0,0 +1,4 @@
+/** Outbound port: the current time. Injected so tests control it. */
+export interface Clock {
+    now(): Date;
+}

package/dist/domain/shared/clock.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=clock.js.map

package/dist/domain/shared/clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clock.js","sourceRoot":"","sources":["../../../src/domain/shared/clock.ts"],"names":[],"mappings":""}

package/dist/domain/shared/errors.d.ts

@@ -0,0 +1,13 @@
+import { type Err } from './result.js';
+/** Every reason the domain refuses a request. */
+export type DomainErrorKind = 'ASSIGNEE_NOT_ACTIVE' | 'CREW_REQUEST_ALREADY_ASSIGNED' | 'CREW_REQUEST_NOT_ASSIGNED_TO_CALLER' | 'CREW_REQUEST_NOT_FOUND' | 'CREW_REQUEST_NOT_RELEASING' | 'CREW_REQUEST_RELEASING' | 'CREW_REQUEST_SETTINGS_TOO_LARGE' | 'DELIVERY_HELD_BY_ANOTHER_SHIP' | 'DELIVERY_NOT_FOUND' | 'DELIVERY_NOT_A_PING' | 'DELIVERY_NOT_IN_FLIGHT' | 'DELIVERY_NOT_OPEN' | 'DELIVERY_NOT_UNDELIVERABLE' | 'FLEET_ALREADY_EXISTS' | 'FLEET_LIMIT_REACHED' | 'FLEET_NOT_FOUND' | 'FLEET_HAS_NO_VIEWER' | 'NOTICE_NOT_FOUND' | 'NOTICE_NOT_DISMISSIBLE' | 'GUIDE_NOT_FOUND' | 'GUIDE_STEP_NOT_FOUND' | 'IDEMPOTENCY_KEY_REUSED' | 'IN_REPLY_TO_NOT_FOUND' | 'MESSAGE_LIMIT_REACHED' | 'MODEL_REQUIRED' | 'INVALID_HARNESS' | 'MODEL_FROM_ARGO' | 'INVALID_CONTENT_TYPE' | 'INVALID_EMAIL' | 'INVALID_FLEET_NAME' | 'INVALID_FOLLOW_MAX' | 'INVALID_FOLLOW_WAIT' | 'INVALID_IDEMPOTENCY_KEY' | 'INVALID_INBOX_WAIT' | 'INVALID_LIMIT' | 'INVALID_LOCATION' | 'INVALID_PASSWORD' | 'INVALID_RECEIVE_MAX' | 'INVALID_CREW_REQUEST_REASON' | 'INVALID_REPORT_DETAILS' | 'INVALID_REPORT_NOTE' | 'INVALID_REPORT_STATE' | 'INVALID_SHIP_NAME' | 'INVALID_SHIP_NOTE' | 'INVALID_SHIP_TYPE' | 'LEASE_ENDED' | 'MESSAGE_NOT_FOUND' | 'NOT_THE_OPERATOR_SHIP' | 'OPERATOR_EMAIL_TAKEN' | 'OPERATOR_HAS_NO_PASSWORD' | 'OPERATOR_SHIP_GETS_NO_STARTING_PROMPT' | 'OPERATOR_SHIP_HAS_NO_SECRET' | 'OPERATOR_SHIP_IS_NOT_PINGED' | 'OPERATOR_SHIP_IS_PERMANENT' | 'PAYLOAD_TOO_LARGE' | 'PING_NOT_RESENT' | 'REPORT_DETAILS_TOO_LARGE' | 'RESERVED_CONTENT_TYPE' | 'SHIP_ALREADY_RETIRED' | 'SHIP_NAME_RESERVED' | 'SHIP_NAME_TAKEN' | 'SHIP_NOT_AWAITING_CREW' | 'SHIP_NOT_CREWED' | 'SHIP_LIMIT_REACHED' | 'SHIP_NOT_FOUND' | 'SIGN_IN_TICKET_INVALID' | 'UNKNOWN_CREW_TOKEN' | 'UNRESOLVABLE_SELECTOR' | 'WRONG_EMAIL_OR_PASSWORD' | 'WRONG_SHIP_ID_OR_SECRET';
+/**
+ * Why the domain refused a request. Adapters map the kind to their own error
+ * shape (a tRPC code, an exit code); the message is safe to show a caller.
+ */
+export interface DomainError<K extends DomainErrorKind = DomainErrorKind> {
+    readonly kind: K;
+    readonly message: string;
+}
+/** A refusal: the error result of the given kind. */
+export declare function refuse<K extends DomainErrorKind>(kind: K, message: string): Err<DomainError<K>>;

package/dist/domain/shared/errors.js

@@ -0,0 +1,6 @@
+import { err } from './result.js';
+/** A refusal: the error result of the given kind. */
+export function refuse(kind, message) {
+    return err({ kind, message });
+}
+//# sourceMappingURL=errors.js.map

package/dist/domain/shared/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/domain/shared/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAY,MAAM,aAAa,CAAC;AAoF5C,qDAAqD;AACrD,MAAM,UAAU,MAAM,CAA4B,IAAO,EAAE,OAAe;IACxE,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAChC,CAAC"}