@aeolus-fleet/core 0.26.1 → 0.27.1

package/dist/domain/registry/retire-ship.d.ts

@@ -5,18 +5,21 @@ import type { Clock } from '../shared/clock.js';
 import { type DomainError } from '../shared/errors.js';
 import { type Result } from '../shared/result.js';
 import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type CheckManageTx, type NotReachable } from './check-reach.js';
 import { type LeaseTx } from './leases.js';
-import type { ClearRequestRepository, CrewRequestRepository, DeclaredNetworkRulesRepository, LabelRepository, NetworkSettingsRepository, ShipRepository } from './ports.js';
+import type { ClearRequestRepository, CrewRequestRepository, DeclaredNetworkRulesRepository, LabelRepository, NetworkSettingsRepository, PluginConnectionRepository, ScopeNamespaceRepository, ShipRepository } from './ports.js';
 import { type RetireRefusal } from './ship.js';
-export interface RetireShipTx extends LeaseTx, CredentialTx {
+export interface RetireShipTx extends LeaseTx, CredentialTx, Omit<CheckManageTx, 'ships' | 'leases' | 'labels' | 'networkSettings'> {
     ships: ShipRepository;
+    pluginConnections: PluginConnectionRepository;
     crewRequests: CrewRequestRepository;
     clearRequests: ClearRequestRepository;
     labels: LabelRepository;
-    networkSettings: Pick<NetworkSettingsRepository, 'findForUpdate' | 'save'>;
+    networkSettings: Pick<NetworkSettingsRepository, 'find' | 'findForShare' | 'findForUpdate' | 'save'>;
     declaredNetworkRules: Pick<DeclaredNetworkRulesRepository, 'find' | 'save'>;
+    scopeNamespaces: Pick<ScopeNamespaceRepository, 'findByDeclarer' | 'lockNamespace' | 'remove'>;
 }
-export type RetireShipRefusal = DomainError<'SHIP_NOT_FOUND'> | RetireRefusal;
+export type RetireShipRefusal = DomainError<'SHIP_NOT_FOUND'> | NotReachable | RetireRefusal;
 export type RetireShip = (caller: Caller, input: {
     shipId: ShipId;
 }) => Promise<Result<{
@@ -36,9 +39,16 @@ export type RetireShip = (caller: Caller, input: {
  * assignment of it gone first (decision 0031). A retired trierarch clears
  * nothing: its pending clear requests go, one WorktreeClearRemoved each
  * (decision 0032). The network rules it declared go with its labels
- * (decision 0037). A retired networking plugin unregisters, its rules going
- * with it: all-to-all (decision 0035). The caller's scope (fleet:manage) is
- * checked before this runs.
+ * (decision 0037). Each active ship it owned falls to argo, one
+ * OwnerChanged each, locked after the ship as a set owner locks the owner
+ * first (decision 0045). A retired networking plugin unregisters, its rules going
+ * with it: all-to-all (decision 0035). A plugin namespace it declared goes,
+ * and its scopes leave every ship, one ScopesChanged each (decision 0046).
+ * The caller's scope (fleet:manage) is
+ * checked before this runs, and manage reach on the ship here (decision
+ * 0034), a refusal storing only its record. That check reads the network
+ * settings without a lock: retire takes them exclusively later, after the
+ * ships it owns, and a shared hold taken first would deadlock two retires.
  *
  * It locks the ship first, as a release does (FOR NO KEY UPDATE). A send to
  * the ship holds it FOR SHARE while it resolves the selector, so the two

package/dist/domain/registry/retire-ship.js

@@ -2,13 +2,16 @@ import { revokeShipSecret } from '../identity/public.js';
 import { refuse } from '../shared/errors.js';
 import { recordEvent, shipActor } from '../shared/events.js';
 import { ok } from '../shared/result.js';
+import { checkManage, keepingReachRefusal } from './check-reach.js';
 import { removeClearRequestsOf } from './clear-request.js';
 import { removeCrewRequest } from './crew-request.js';
 import { retireLabelsWith } from './label.js';
 import { endLease } from './leases.js';
 import { withdrawWithRetiredShip } from './declared-network-rules.js';
 import { unregisterNetworkPlugin } from './network-settings.js';
-import { checkCanRetire } from './ship.js';
+import { endPluginConnection } from './plugin-connection.js';
+import { changeOwner, checkCanRetire } from './ship.js';
+import { releaseWithDeclarer } from './scope-namespace.js';
 /**
  * Use case: the caller retires a ship of its fleet for good (Retire): any ship
  * but argo, crewed or not. In one unit of work: its secret stops working; a
@@ -23,9 +26,16 @@ import { checkCanRetire } from './ship.js';
  * assignment of it gone first (decision 0031). A retired trierarch clears
  * nothing: its pending clear requests go, one WorktreeClearRemoved each
  * (decision 0032). The network rules it declared go with its labels
- * (decision 0037). A retired networking plugin unregisters, its rules going
- * with it: all-to-all (decision 0035). The caller's scope (fleet:manage) is
- * checked before this runs.
+ * (decision 0037). Each active ship it owned falls to argo, one
+ * OwnerChanged each, locked after the ship as a set owner locks the owner
+ * first (decision 0045). A retired networking plugin unregisters, its rules going
+ * with it: all-to-all (decision 0035). A plugin namespace it declared goes,
+ * and its scopes leave every ship, one ScopesChanged each (decision 0046).
+ * The caller's scope (fleet:manage) is
+ * checked before this runs, and manage reach on the ship here (decision
+ * 0034), a refusal storing only its record. That check reads the network
+ * settings without a lock: retire takes them exclusively later, after the
+ * ships it owns, and a shared hold taken first would deadlock two retires.
  *
  * It locks the ship first, as a release does (FOR NO KEY UPDATE). A send to
  * the ship holds it FOR SHARE while it resolves the selector, so the two
@@ -34,12 +44,16 @@ import { checkCanRetire } from './ship.js';
  * network settings exclusively, after the ship as every send takes them.
  */
 export function createRetireShip(deps) {
-    return (caller, { shipId }) => deps.uow.run(async (tx) => {
+    return (caller, { shipId }) => keepingReachRefusal(deps.uow, async (tx) => {
         const { fleetId } = caller;
         const ship = await tx.ships.findForUpdate(fleetId, shipId);
         if (!ship) {
             return refuse('SHIP_NOT_FOUND', `Ship ${shipId} does not exist`);
         }
+        const managed = await checkManage({ tx, ids: deps.ids }, { fleetId, managerShipId: caller.shipId, shipId, at: deps.clock.now(), settings: await tx.networkSettings.find(fleetId) });
+        if (!managed.isOk) {
+            return managed;
+        }
         const retirable = checkCanRetire(ship);
         if (!retirable.isOk) {
             return retirable;
@@ -54,6 +68,7 @@ export function createRetireShip(deps) {
         }
         const abandoned = await tx.inFlightDeliveries.abandonPendingTo(fleetId, shipId);
         await tx.ships.retire({ fleetId, shipId, at });
+        await endPluginConnection({ tx, ids: deps.ids }, { fleetId, shipId, why: 'retired', at, actor });
         await recordEvent(recorded, {
             fleetId,
             type: 'ShipRetired',
@@ -65,6 +80,17 @@ export function createRetireShip(deps) {
         for (const { deliveryId, messageId } of abandoned) {
             await recordEvent(recorded, { fleetId, type: 'DeliveryAbandoned', occurredAt: at, actor, shipId, messageId, deliveryId });
         }
+        const argo = await tx.ships.findOperatorShip(fleetId);
+        for (const ownedShip of await tx.ships.listActiveOwnedByForUpdate(fleetId, shipId)) {
+            // Never refused: an owned ship is active and never argo's own, and argo is always active.
+            const changed = changeOwner(ownedShip, { owner: argo, why: 'ownerRetired', at, actor });
+            if (changed.isOk && changed.value.ship.owner !== null && changed.value.ship.owner !== ownedShip.owner) {
+                await tx.ships.setOwner({ fleetId, shipId: ownedShip.id, ownerShipId: changed.value.ship.owner });
+                for (const event of changed.value.events) {
+                    await recordEvent(recorded, event);
+                }
+            }
+        }
         // A ship without a crew request has none to remove: nothing to do.
         const removed = removeCrewRequest({ ship, current: await tx.crewRequests.find(fleetId, shipId) }, { at, actor });
         if (removed.isOk) {
@@ -107,6 +133,23 @@ export function createRetireShip(deps) {
                 await recordEvent(recorded, event);
             }
         }
+        const declared = await tx.scopeNamespaces.findByDeclarer(fleetId, shipId);
+        if (declared !== undefined) {
+            // The holders first, as every grant locks its ship before the
+            // namespace; then the namespace, so no grant of its scopes commits
+            // in between; then the holders again: a grant that did commit before
+            // the namespace lock holds no lock any more.
+            await tx.ships.listActiveHoldingInForUpdate(fleetId, declared.namespace);
+            await tx.scopeNamespaces.lockNamespace(fleetId, declared.namespace);
+            const released = releaseWithDeclarer(declared, { holders: await tx.ships.listActiveHoldingInForUpdate(fleetId, declared.namespace), at, actor });
+            for (const changed of released.ships) {
+                await tx.ships.setScopes({ fleetId, shipId: changed.id, scopes: changed.scopes });
+            }
+            await tx.scopeNamespaces.remove(fleetId, declared.namespace);
+            for (const event of released.events) {
+                await recordEvent(recorded, event);
+            }
+        }
         return ok({ abandonedDeliveries: abandoned.length });
     });
 }

package/dist/domain/registry/retire-ship.js.map

@@ -1 +1 @@
-{"version":3,"file":"retire-ship.js","sourceRoot":"","sources":["../../../src/domain/registry/retire-ship.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,uBAAuB,CAAC;AAG5E,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAgB,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,cAAc,EAAsB,MAAM,WAAW,CAAC;AAkB/D;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAuE,EAAE;QAC7F,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,MAAM,iBAAiB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAEtD,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAE/C,MAAM,WAAW,CAAC,QAAQ,EAAE;YAC1B,OAAO;YACP,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,EAAE;YACd,KAAK;YACL,MAAM;YACN,OAAO,EAAE,EAAE,mBAAmB,EAAE,SAAS,CAAC,MAAM,EAAE;SACnD,CAAC,CAAC;QACH,KAAK,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,SAAS,EAAE,CAAC;YAClD,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,mEAAmE;QACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtE,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACvG,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CACnJ,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CACnJ,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAC7B,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EACtG,EAAE,EAAE,EAAE,KAAK,EAAE,CACd,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9G,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACvD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;gBACrC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,8EAA8E;QAC9E,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrH,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC9C,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"retire-ship.js","sourceRoot":"","sources":["../../../src/domain/registry/retire-ship.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,uBAAuB,CAAC;AAG5E,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAyC,MAAM,kBAAkB,CAAC;AAC3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAgB,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAsB,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAoB3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAuE,EAAE;QAC9G,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,MAAM,iBAAiB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EACrB,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAC1H,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAEtD,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtG,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAEjG,MAAM,WAAW,CAAC,QAAQ,EAAE;YAC1B,OAAO;YACP,IAAI,EAAE,aAAa;YACnB,UAAU,EAAE,EAAE;YACd,KAAK;YACL,MAAM;YACN,OAAO,EAAE,EAAE,mBAAmB,EAAE,SAAS,CAAC,MAAM,EAAE;SACnD,CAAC,CAAC;QACH,KAAK,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,SAAS,EAAE,CAAC;YAClD,MAAM,WAAW,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtD,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YACnF,0FAA0F;YAC1F,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACxF,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,EAAE,CAAC;gBACtG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBAClG,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBACzC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACjH,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACzC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtE,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACpC,MAAM,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,qBAAqB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACvG,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAC7B,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CACnJ,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CACnJ,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAC7B,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EACtG,EAAE,EAAE,EAAE,KAAK,EAAE,CACd,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9G,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACvD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;gBACrC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,8EAA8E;QAC9E,MAAM,YAAY,GAAG,uBAAuB,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrH,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC9C,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,8DAA8D;YAC9D,mEAAmE;YACnE,qEAAqE;YACrE,6CAA6C;YAC7C,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACzE,MAAM,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACjJ,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACrC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC7D,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,mBAAmB,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/scope-grant.d.ts

@@ -0,0 +1,53 @@
+import { type ScopeName, type ShipId, type ShipKind } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import type { Actor, NewEvent } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { ScopeNamespace } from './scope-namespace.js';
+import type { Ship } from './ship.js';
+export type GrantScopesRefusal = DomainError<'INVALID_SCOPE' | 'BASE_SCOPE' | 'SCOPE_NOT_DECLARED' | 'SCOPE_NOT_HELD' | 'PLUGIN_SCOPE_NOT_YOURS' | 'SHIP_SCOPES_FIXED' | 'OWN_SHIP_SCOPES' | 'SHIP_ALREADY_RETIRED'>;
+/**
+ * A granter grants and revokes scopes on a live ship (decision 0046), each
+ * within what it may grant: a core scope it holds (argo holds every one), or
+ * a declared scope of a plugin namespace when it is argo or that namespace's
+ * declarer. Revoking follows the same rule. Refused: a malformed or unknown
+ * scope, one both granted and revoked, revoking sending or receiving, argo's
+ * and the viewer's scopes, the granter's own ship and a retired ship. Writes
+ * ScopesChanged when anything changes.
+ */
+export declare function grantScopes(input: {
+    ship: Ship;
+    granter: {
+        shipId: ShipId;
+        kind: ShipKind;
+        scopes: readonly ScopeName[];
+    };
+    grant: readonly string[];
+    revoke: readonly string[];
+    at: Date;
+    actor: Actor;
+}, fleet: {
+    /** The plugin namespaces the granted and revoked scopes name, with their declarers' names, by namespace. */
+    namespaces: ReadonlyMap<string, {
+        namespace: ScopeNamespace;
+        declarerName: string;
+    }>;
+}): Result<{
+    ship: Ship;
+    events: NewEvent[];
+}, GrantScopesRefusal>;
+/**
+ * Whether the granter may grant or revoke the scope, at commission or on a
+ * live ship: a core scope it holds, or a declared plugin scope when it is
+ * argo or the declarer.
+ */
+export declare function mayGrant(scope: string, at: {
+    granter: {
+        shipId: ShipId;
+        kind: ShipKind;
+        scopes: readonly ScopeName[];
+    };
+    namespaces: ReadonlyMap<string, {
+        namespace: ScopeNamespace;
+        declarerName: string;
+    }>;
+}): Result<null, DomainError<'INVALID_SCOPE' | 'SCOPE_NOT_DECLARED' | 'SCOPE_NOT_HELD' | 'PLUGIN_SCOPE_NOT_YOURS'>>;

package/dist/domain/registry/scope-grant.js

@@ -0,0 +1,74 @@
+import { scopeNameSchema, scopeSchema } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/** The scopes every agent, person and app ship holds: never revoked (decision 0046). */
+const BASE_SCOPES = ['messages:send', 'messages:receive'];
+/**
+ * A granter grants and revokes scopes on a live ship (decision 0046), each
+ * within what it may grant: a core scope it holds (argo holds every one), or
+ * a declared scope of a plugin namespace when it is argo or that namespace's
+ * declarer. Revoking follows the same rule. Refused: a malformed or unknown
+ * scope, one both granted and revoked, revoking sending or receiving, argo's
+ * and the viewer's scopes, the granter's own ship and a retired ship. Writes
+ * ScopesChanged when anything changes.
+ */
+export function grantScopes(input, fleet) {
+    const { ship, granter, at, actor } = input;
+    if (ship.kind === 'operator' || ship.kind === 'viewer') {
+        return refuse('SHIP_SCOPES_FIXED', `${ship.name}'s scopes are its own: argo holds every scope and the viewer reads`);
+    }
+    if (ship.id === granter.shipId) {
+        return refuse('OWN_SHIP_SCOPES', 'A ship never changes its own scopes');
+    }
+    if (ship.retiredAt !== null) {
+        return refuse('SHIP_ALREADY_RETIRED', `${ship.name} is retired: its scopes stay as they were`);
+    }
+    for (const scope of [...input.grant, ...input.revoke]) {
+        const allowed = mayGrant(scope, { granter, namespaces: fleet.namespaces });
+        if (!allowed.isOk) {
+            return allowed;
+        }
+    }
+    const both = input.grant.find((scope) => input.revoke.includes(scope));
+    if (both !== undefined) {
+        return refuse('INVALID_SCOPE', `${both} is both granted and revoked`);
+    }
+    const base = input.revoke.find((scope) => BASE_SCOPES.includes(scope));
+    if (base !== undefined) {
+        return refuse('BASE_SCOPE', `Every ship holds ${base}: it is never revoked`);
+    }
+    const added = [...new Set(input.grant)].filter((scope) => !ship.scopes.includes(scope));
+    const removed = ship.scopes.filter((scope) => input.revoke.includes(scope));
+    if (added.length === 0 && removed.length === 0) {
+        return ok({ ship, events: [] });
+    }
+    const changed = { ...ship, scopes: [...ship.scopes.filter((scope) => !removed.includes(scope)), ...added] };
+    return ok({
+        ship: changed,
+        events: [{ fleetId: ship.fleetId, type: 'ScopesChanged', occurredAt: at, actor, shipId: ship.id, details: { added: added.join(' '), removed: removed.join(' ') } }],
+    });
+}
+/**
+ * Whether the granter may grant or revoke the scope, at commission or on a
+ * live ship: a core scope it holds, or a declared plugin scope when it is
+ * argo or the declarer.
+ */
+export function mayGrant(scope, at) {
+    const { granter, namespaces } = at;
+    if (!scopeNameSchema.safeParse(scope).success) {
+        return refuse('INVALID_SCOPE', `${scope} is no scope: a core scope, or a plugin's <namespace>:<action>`);
+    }
+    if (scopeSchema.safeParse(scope).success) {
+        return granter.kind === 'operator' || granter.scopes.includes(scope) ? ok(null) : refuse('SCOPE_NOT_HELD', `Your ship does not hold ${scope}, so it cannot grant it`);
+    }
+    const namespace = scope.slice(0, scope.indexOf(':'));
+    const declared = namespaces.get(namespace);
+    if (declared?.namespace.scopes.some((each) => each.scope === scope) !== true) {
+        return refuse('SCOPE_NOT_DECLARED', `No plugin declared ${scope}`);
+    }
+    if (granter.kind !== 'operator' && declared.namespace.declaredBy !== granter.shipId) {
+        return refuse('PLUGIN_SCOPE_NOT_YOURS', `Only argo and ${declared.declarerName}, which declared ${namespace}, grant ${scope}`);
+    }
+    return ok(null);
+}
+//# sourceMappingURL=scope-grant.js.map

package/dist/domain/registry/scope-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-grant.js","sourceRoot":"","sources":["../../../src/domain/registry/scope-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,WAAW,EAA8C,MAAM,sBAAsB,CAAC;AAEhH,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAItD,wFAAwF;AACxF,MAAM,WAAW,GAAyB,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;AAMhF;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CACzB,KAOC,EACD,KAGC;IAED,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,IAAI,oEAAoE,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,iBAAiB,EAAE,qCAAqC,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,IAAI,2CAA2C,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,YAAY,EAAE,oBAAoB,IAAI,uBAAuB,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,OAAO,GAAS,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IAClH,OAAO,EAAE,CAAC;QACR,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;KACpK,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CACtB,KAAa,EACb,EAAuK;IAEvK,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACnC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,KAAK,gEAAgE,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,2BAA2B,KAAK,yBAAyB,CAAC,CAAC;IACxK,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7E,OAAO,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,QAAQ,CAAC,SAAS,CAAC,UAAU,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpF,OAAO,MAAM,CAAC,wBAAwB,EAAE,iBAAiB,QAAQ,CAAC,YAAY,oBAAoB,SAAS,WAAW,KAAK,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;AAClB,CAAC"}

package/dist/domain/registry/scope-namespace.d.ts

@@ -0,0 +1,68 @@
+import { type FleetId, type ScopeName, type ShipId } from '@aeolus-fleet/common';
+import { type DomainError } from '../shared/errors.js';
+import type { Actor, NewEvent } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { Ship } from './ship.js';
+/** One scope a plugin declared, with its one-line description. */
+export interface DeclaredScope {
+    scope: ScopeName;
+    description: string;
+}
+/**
+ * A plugin's namespace (decision 0046): taken up for good by the ship that
+ * declared it, one per ship and unique in the fleet, with its whole list of
+ * scopes. Core stores and answers them and never checks them; the plugin
+ * enforces them. It goes when its declarer retires.
+ */
+export interface ScopeNamespace {
+    fleetId: FleetId;
+    namespace: string;
+    declaredBy: ShipId;
+    /** In the order the declarer gave them, each once. */
+    scopes: readonly DeclaredScope[];
+}
+export type DeclareScopesRefusal = DomainError<'INVALID_SCOPE' | 'INVALID_SCOPE_DESCRIPTION' | 'CORE_NAMESPACE' | 'NAMESPACE_TAKEN' | 'SECOND_NAMESPACE' | 'TOO_MANY_SCOPES' | 'SCOPE_HELD'>;
+/**
+ * A ship declares its namespace with its whole list of scopes, the first
+ * time or again (decision 0046). Refused: a malformed namespace or scope, a
+ * scope of another namespace or twice, a description not on one line, a core
+ * namespace, a namespace another ship took, a second namespace, more than 20
+ * scopes, and removing a scope an active ship holds. Writes ScopesDeclared.
+ */
+export declare function declareScopes(input: {
+    fleetId: FleetId;
+    declarer: ShipId;
+    namespace: string;
+    scopes: readonly {
+        scope: string;
+        description: string;
+    }[];
+    at: Date;
+    actor: Actor;
+}, fleet: {
+    /** The namespace as the fleet holds it, with its declarer's name, if anyone took it. */
+    taken: {
+        namespace: ScopeNamespace;
+        declarerName: string;
+    } | undefined;
+    /** The namespace the declaring ship took, if any. */
+    ofDeclarer: ScopeNamespace | undefined;
+    /** The scopes of this namespace an active ship holds. */
+    held: readonly ScopeName[];
+}): Result<{
+    namespace: ScopeNamespace;
+    events: NewEvent[];
+}, DeclareScopesRefusal>;
+/**
+ * The namespace goes with its retiring declarer (decision 0046): each active
+ * ship that holds any of its scopes loses them, keeping its other scopes, one
+ * ScopesChanged each.
+ */
+export declare function releaseWithDeclarer(namespace: ScopeNamespace, at: {
+    holders: readonly Ship[];
+    at: Date;
+    actor: Actor;
+}): {
+    ships: Ship[];
+    events: NewEvent[];
+};

package/dist/domain/registry/scope-namespace.js

@@ -0,0 +1,82 @@
+import { isCoreNamespace, NAMESPACE_SCOPES_MAX, SCOPE_DESCRIPTION_MAX_LENGTH, SCOPE_NAME_PATTERN, SCOPE_NAMESPACE_PATTERN, } from '@aeolus-fleet/common';
+import { refuse } from '../shared/errors.js';
+import { ok } from '../shared/result.js';
+/**
+ * A ship declares its namespace with its whole list of scopes, the first
+ * time or again (decision 0046). Refused: a malformed namespace or scope, a
+ * scope of another namespace or twice, a description not on one line, a core
+ * namespace, a namespace another ship took, a second namespace, more than 20
+ * scopes, and removing a scope an active ship holds. Writes ScopesDeclared.
+ */
+export function declareScopes(input, fleet) {
+    const { fleetId, declarer, namespace, at, actor } = input;
+    if (!SCOPE_NAMESPACE_PATTERN.test(namespace)) {
+        return refuse('INVALID_SCOPE', `${namespace} is no namespace: lowercase letters, digits and hyphens, starting with a letter, at most 32 characters`);
+    }
+    if (isCoreNamespace(namespace)) {
+        return refuse('CORE_NAMESPACE', `${namespace} is a core namespace: core alone declares its scopes`);
+    }
+    if (input.scopes.length > NAMESPACE_SCOPES_MAX) {
+        return refuse('TOO_MANY_SCOPES', `A namespace has at most ${String(NAMESPACE_SCOPES_MAX)} scopes`);
+    }
+    const scopes = declaredScopes(namespace, input.scopes);
+    if (!scopes.isOk) {
+        return scopes;
+    }
+    if (fleet.taken !== undefined && fleet.taken.namespace.declaredBy !== declarer) {
+        return refuse('NAMESPACE_TAKEN', `The namespace ${namespace} is taken, by ${fleet.taken.declarerName}`);
+    }
+    if (fleet.ofDeclarer !== undefined && fleet.ofDeclarer.namespace !== namespace) {
+        return refuse('SECOND_NAMESPACE', `This ship declared the namespace ${fleet.ofDeclarer.namespace}: a ship takes up one namespace`);
+    }
+    const kept = new Set(scopes.value.map(({ scope }) => scope));
+    const removedHeld = fleet.held.filter((scope) => !kept.has(scope));
+    if (removedHeld.length > 0) {
+        return refuse('SCOPE_HELD', `Ships hold ${removedHeld.join(', ')}: revoke it from them first`);
+    }
+    const declared = { fleetId, namespace, declaredBy: declarer, scopes: scopes.value };
+    return ok({
+        namespace: declared,
+        events: [{ fleetId, type: 'ScopesDeclared', occurredAt: at, actor, shipId: declarer, details: { namespace, scopes: declared.scopes.length } }],
+    });
+}
+/** The scopes as declared, each of the namespace, once, with a description on one line. */
+function declaredScopes(namespace, scopes) {
+    const seen = new Set();
+    const declared = [];
+    for (const { scope, description } of scopes) {
+        if (!SCOPE_NAME_PATTERN.test(scope) || !scope.startsWith(`${namespace}:`)) {
+            return refuse('INVALID_SCOPE', `${scope} is no scope of ${namespace}: ${namespace}:<action>`);
+        }
+        if (seen.has(scope)) {
+            return refuse('INVALID_SCOPE', `${scope} is declared twice`);
+        }
+        if (description.trim() === '' || description.includes('\n') || description.length > SCOPE_DESCRIPTION_MAX_LENGTH) {
+            return refuse('INVALID_SCOPE_DESCRIPTION', `The description of ${scope} is one line of 1 to ${String(SCOPE_DESCRIPTION_MAX_LENGTH)} characters`);
+        }
+        seen.add(scope);
+        declared.push({ scope, description });
+    }
+    return ok(declared);
+}
+/**
+ * The namespace goes with its retiring declarer (decision 0046): each active
+ * ship that holds any of its scopes loses them, keeping its other scopes, one
+ * ScopesChanged each.
+ */
+export function releaseWithDeclarer(namespace, at) {
+    const isOfNamespace = (scope) => scope.startsWith(`${namespace.namespace}:`);
+    const changed = at.holders.filter((ship) => ship.id !== namespace.declaredBy && ship.scopes.some(isOfNamespace));
+    return {
+        ships: changed.map((ship) => ({ ...ship, scopes: ship.scopes.filter((scope) => !isOfNamespace(scope)) })),
+        events: changed.map((ship) => ({
+            fleetId: ship.fleetId,
+            type: 'ScopesChanged',
+            occurredAt: at.at,
+            actor: at.actor,
+            shipId: ship.id,
+            details: { added: '', removed: ship.scopes.filter(isOfNamespace).join(' ') },
+        })),
+    };
+}
+//# sourceMappingURL=scope-namespace.js.map

package/dist/domain/registry/scope-namespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-namespace.js","sourceRoot":"","sources":["../../../src/domain/registry/scope-namespace.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,4BAA4B,EAC5B,kBAAkB,EAClB,uBAAuB,GAIxB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AA2BtD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAmJ,EACnJ,KAOC;IAED,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC1D,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,SAAS,wGAAwG,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,gBAAgB,EAAE,GAAG,SAAS,sDAAsD,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/E,OAAO,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,SAAS,iBAAiB,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,MAAM,CAAC,kBAAkB,EAAE,oCAAoC,KAAK,CAAC,UAAU,CAAC,SAAS,iCAAiC,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,YAAY,EAAE,cAAc,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,QAAQ,GAAmB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IACpG,OAAO,EAAE,CAAC;QACR,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;KAC/I,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,SAAS,cAAc,CACrB,SAAiB,EACjB,MAAyD;IAEzD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,CAAC;YAC1E,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,KAAK,mBAAmB,SAAS,KAAK,SAAS,WAAW,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,eAAe,EAAE,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;YACjH,OAAO,MAAM,CAAC,2BAA2B,EAAE,sBAAsB,KAAK,wBAAwB,MAAM,CAAC,4BAA4B,CAAC,aAAa,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAyB,EAAE,EAAwD;IACrH,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC;IACrF,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACjH,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACzG,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,eAAe;YACrB,UAAU,EAAE,EAAE,CAAC,EAAE;YACjB,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC7E,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC"}

package/dist/domain/registry/set-built-in-rule.d.ts

@@ -0,0 +1,28 @@
+import type { IdGenerator, SetBuiltInRuleInput } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type SetBuiltInRuleRefusal } from './network-settings.js';
+import type { NetworkSettingsRepository } from './ports.js';
+export interface SetBuiltInRuleTx {
+    networkSettings: Pick<NetworkSettingsRepository, 'findForUpdate' | 'save'>;
+    events: EventLog;
+}
+export type SetBuiltInRule = (caller: Caller, input: SetBuiltInRuleInput) => Promise<Result<{
+    version: number;
+}, SetBuiltInRuleRefusal>>;
+/**
+ * Use case: a built-in rule turned on or off (decision 0034): the viewer
+ * reading by argo, open for one verb by the fleet's networking plugin. Its
+ * scope (fleet:network, which argo holds) is checked before this runs. In one
+ * unit of work, holding the settings exclusively so no send is checked
+ * halfway: the settings at their next version, and BuiltInRuleChanged. A rule
+ * already as asked answers the version it has.
+ */
+export declare function createSetBuiltInRule(deps: {
+    uow: UnitOfWork<SetBuiltInRuleTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): SetBuiltInRule;

package/dist/domain/registry/set-built-in-rule.js

@@ -0,0 +1,33 @@
+import { recordEvent, shipActor } from '../shared/events.js';
+import { ok } from '../shared/result.js';
+import { setBuiltInRule } from './network-settings.js';
+/**
+ * Use case: a built-in rule turned on or off (decision 0034): the viewer
+ * reading by argo, open for one verb by the fleet's networking plugin. Its
+ * scope (fleet:network, which argo holds) is checked before this runs. In one
+ * unit of work, holding the settings exclusively so no send is checked
+ * halfway: the settings at their next version, and BuiltInRuleChanged. A rule
+ * already as asked answers the version it has.
+ */
+export function createSetBuiltInRule(deps) {
+    return (caller, input) => deps.uow.run(async (tx) => {
+        const current = await tx.networkSettings.findForUpdate(caller.fleetId);
+        const set = setBuiltInRule(current, {
+            input,
+            caller: { shipId: caller.shipId, isOperator: caller.kind === 'operator' },
+            at: deps.clock.now(),
+            actor: shipActor(caller.shipId),
+        });
+        if (!set.isOk) {
+            return set;
+        }
+        if (set.value.events.length > 0) {
+            await tx.networkSettings.save(set.value.settings);
+        }
+        for (const event of set.value.events) {
+            await recordEvent({ events: tx.events, ids: deps.ids }, event);
+        }
+        return ok({ version: set.value.settings.version });
+    });
+}
+//# sourceMappingURL=set-built-in-rule.js.map

package/dist/domain/registry/set-built-in-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-built-in-rule.js","sourceRoot":"","sources":["../../../src/domain/registry/set-built-in-rule.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAiB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,cAAc,EAA8B,MAAM,uBAAuB,CAAC;AAUnF;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA2E;IAC9G,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAA+D,EAAE;QACrF,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,EAAE;YAClC,KAAK;YACL,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE;YACzE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YACpB,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpD,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/set-network-rules.d.ts

@@ -12,13 +12,13 @@ export interface SetNetworkRulesTx {
     events: EventLog;
 }
 export type SetNetworkRules = (caller: Caller, input: {
-    rules: readonly NetworkRule[] | null;
+    rules: readonly NetworkRule[];
 }) => Promise<Result<{
     version: number;
 }, SetNetworkRulesRefusal>>;
 /**
- * Use case: the caller sets the fleet's network rules, the whole list, or
- * none for all-to-all (decision 0034), argo's with the rules the fleet's
+ * Use case: the caller sets the fleet's network rules, the whole list beside
+ * the built-in ones (decision 0034), argo's with the rules the fleet's
  * ships declared added (decision 0037), which the limit counts. Its scope (fleet:network, which argo
  * holds) is checked before this runs. In one unit of work, holding the
  * settings exclusively so no send is checked halfway: the settings at their

package/dist/domain/registry/set-network-rules.js

@@ -2,8 +2,8 @@ import { recordEvent, shipActor } from '../shared/events.js';
 import { ok } from '../shared/result.js';
 import { setNetworkRules } from './network-settings.js';
 /**
- * Use case: the caller sets the fleet's network rules, the whole list, or
- * none for all-to-all (decision 0034), argo's with the rules the fleet's
+ * Use case: the caller sets the fleet's network rules, the whole list beside
+ * the built-in ones (decision 0034), argo's with the rules the fleet's
  * ships declared added (decision 0037), which the limit counts. Its scope (fleet:network, which argo
  * holds) is checked before this runs. In one unit of work, holding the
  * settings exclusively so no send is checked halfway: the settings at their

package/dist/domain/registry/set-owner.d.ts

@@ -0,0 +1,30 @@
+import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
+import type { Clock } from '../shared/clock.js';
+import { type DomainError } from '../shared/errors.js';
+import { type EventLog } from '../shared/events.js';
+import { type Result } from '../shared/result.js';
+import type { UnitOfWork } from '../shared/unit-of-work.js';
+import type { ShipRepository } from './ports.js';
+import { type ChangeOwnerRefusal } from './ship.js';
+export interface SetOwnerTx {
+    ships: Pick<ShipRepository, 'findForUpdate' | 'setOwner'>;
+    events: EventLog;
+}
+export type SetOwnerRefusal = DomainError<'NOT_THE_OPERATOR_SHIP' | 'SHIP_NOT_FOUND'> | ChangeOwnerRefusal;
+export type SetOwner = (caller: Caller, input: {
+    shipId: ShipId;
+    ownerShipId: ShipId;
+}) => Promise<Result<undefined, SetOwnerRefusal>>;
+/**
+ * Use case: argo, and only argo, gives a ship a new owner, an active person's
+ * ship or argo (decision 0045), with OwnerChanged in the same unit of work.
+ * It locks the owner first, then the ship, as a retire of the owner locks it
+ * before the ships it owns, so the two never wait on each other: the new
+ * owner is never one a retire already passed by.
+ */
+export declare function createSetOwner(deps: {
+    uow: UnitOfWork<SetOwnerTx>;
+    clock: Clock;
+    ids: IdGenerator;
+}): SetOwner;