@aeolus-fleet/core 0.26.1 → 0.27.1

package/src/adapters/prisma/migrations/20261019100000_on_behalf_scope/migration.sql

@@ -0,0 +1,61 @@
+-- fleet:on-behalf joins the core scopes (decision 0046): a ship reads on behalf of a named ship with it (decision 0034).
+CREATE OR REPLACE FUNCTION "ships_scopes_are_known"("scopes" TEXT[]) RETURNS BOOLEAN IMMUTABLE LANGUAGE SQL AS $$
+  SELECT "scopes" IS NOT NULL AND NOT EXISTS (
+    SELECT 1 FROM unnest("scopes") AS "scope"
+    WHERE NOT (
+      "scope" = ANY(ARRAY['messages:send', 'messages:receive', 'messages:force', 'messages:resend', 'fleet:read', 'fleet:commission', 'fleet:manage', 'crew:assign', 'crew:run', 'labels:define', 'labels:assign', 'fleet:network', 'fleet:on-behalf', 'scopes:declare', 'scopes:grant']::TEXT[])
+      OR ("scope" ~ '^[a-z][a-z0-9-]{0,31}:[a-z][a-z0-9-]{0,31}$' AND split_part("scope", ':', 1) <> ALL(ARRAY['messages', 'fleet', 'crew', 'labels', 'scopes']::TEXT[]))
+    )
+  )
+$$;
+
+-- argo holds every scope, and squadrons reads on behalf of a person's ship (decision 0017): every argo and every
+-- active squadrons ship gets fleet:on-behalf, its scopes kept in catalogue order, a plugin's own after them.
+-- Squadrons' ship is known by its name and type together, as the console connects it: types are not reserved,
+-- so another ship of type squadrons keeps what it holds.
+-- Every state change writes its event: each ship it changes gets
+-- ScopesChanged, by the system, taking the next number of its fleet's stream. Its id is an evt_ id as
+-- common/src/ids makes them: the time in milliseconds, then 80 random bits, in lowercase Crockford base32.
+DO $$
+DECLARE
+  alphabet CONSTANT text := '0123456789abcdefghjkmnpqrstvwxyz';
+  catalogue CONSTANT text[] := ARRAY['messages:send', 'messages:receive', 'messages:force', 'messages:resend', 'fleet:read', 'fleet:commission', 'fleet:manage', 'crew:assign', 'crew:run', 'labels:define', 'labels:assign', 'fleet:network', 'fleet:on-behalf', 'scopes:declare', 'scopes:grant'];
+  changed record;
+  at timestamptz;
+  millis bigint;
+  body text;
+  next_seq bigint;
+BEGIN
+  FOR changed IN
+    UPDATE "ships" SET "scopes" = (
+      SELECT array_agg("scope" ORDER BY coalesce(array_position(catalogue, "scope"), cardinality(catalogue) + 1), "place")
+      FROM unnest(array_append("ships"."scopes", 'fleet:on-behalf')) WITH ORDINALITY AS u("scope", "place")
+    )
+    WHERE ("kind" = 'operator' OR ("name" = 'squadrons' AND "type" = 'squadrons')) AND "retired_at" IS NULL AND NOT ('fleet:on-behalf' = ANY("scopes"))
+    RETURNING "fleet_id", "id"
+  LOOP
+    at := clock_timestamp();
+    millis := floor(extract(epoch FROM at) * 1000)::bigint;
+    body := '';
+    FOR position IN REVERSE 9..0 LOOP
+      body := body || substr(alphabet, ((millis >> (position * 5)) & 31)::integer + 1, 1);
+    END LOOP;
+    FOR position IN 1..16 LOOP
+      body := body || substr(alphabet, floor(random() * 32)::integer + 1, 1);
+    END LOOP;
+
+    UPDATE "fleets" SET "last_event_seq" = "last_event_seq" + 1 WHERE "id" = changed."fleet_id"
+      RETURNING "last_event_seq" INTO next_seq;
+    INSERT INTO "events" ("id", "fleet_id", "type", "occurred_at", "ship_id", "details", "seq")
+    VALUES (
+      'evt_' || body,
+      changed."fleet_id",
+      'ScopesChanged',
+      at,
+      changed."id",
+      jsonb_build_object('added', 'fleet:on-behalf', 'removed', ''),
+      next_seq
+    );
+  END LOOP;
+END;
+$$;

package/src/adapters/prisma/migrations/20261019110000_events_fleet_id_occurred_at/migration.sql

@@ -0,0 +1,2 @@
+-- The health trend replay reads a fleet's events since a time (decision 0042), not its whole history (#865).
+CREATE INDEX "events_fleet_id_occurred_at_idx" ON "events"("fleet_id", "occurred_at");

package/src/adapters/prisma/migrations/20261019130000_plugin_connections/migration.sql

@@ -0,0 +1,54 @@
+-- A plugin argo connected (decision 0034): its ship reads every ship of the fleet, whatever the rules, until a
+-- release or a retire of the ship ends it.
+-- CreateTable
+CREATE TABLE "plugin_connections" (
+    "fleet_id" TEXT NOT NULL,
+    "ship_id" TEXT NOT NULL,
+    "connected_at" TIMESTAMPTZ(3) NOT NULL,
+
+    CONSTRAINT "plugin_connections_pkey" PRIMARY KEY ("fleet_id","ship_id")
+);
+
+-- AddForeignKey
+ALTER TABLE "plugin_connections" ADD CONSTRAINT "plugin_connections_fleet_id_fkey" FOREIGN KEY ("fleet_id") REFERENCES "fleets"("id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- AddForeignKey
+ALTER TABLE "plugin_connections" ADD CONSTRAINT "plugin_connections_fleet_id_ship_id_fkey" FOREIGN KEY ("fleet_id", "ship_id") REFERENCES "ships"("fleet_id", "id") ON DELETE RESTRICT ON UPDATE CASCADE;
+
+-- The plugins argo connected before: every active ship the console connects a plugin as, known by its name and type
+-- together (squadrons, the trierarch plugin, the networking plugin), is connected now. Each gets PluginConnected, by
+-- the system, at the next number of its fleet's stream, with an evt_ id as common/src/ids makes them (the time in
+-- milliseconds, then 80 random bits, in lowercase Crockford base32).
+DO $$
+DECLARE
+  alphabet CONSTANT text := '0123456789abcdefghjkmnpqrstvwxyz';
+  plugin record;
+  at timestamptz;
+  millis bigint;
+  body text;
+  next_seq bigint;
+BEGIN
+  FOR plugin IN
+    SELECT "id", "fleet_id" FROM "ships"
+    WHERE "retired_at" IS NULL AND "name" = "type" AND "type" IN ('squadrons', 'trierarch-plugin', 'networking-plugin')
+    ORDER BY "fleet_id", "id"
+  LOOP
+    at := clock_timestamp();
+    INSERT INTO "plugin_connections" ("fleet_id", "ship_id", "connected_at") VALUES (plugin."fleet_id", plugin."id", at);
+
+    millis := floor(extract(epoch FROM at) * 1000)::bigint;
+    body := '';
+    FOR position IN REVERSE 9..0 LOOP
+      body := body || substr(alphabet, ((millis >> (position * 5)) & 31)::integer + 1, 1);
+    END LOOP;
+    FOR position IN 1..16 LOOP
+      body := body || substr(alphabet, floor(random() * 32)::integer + 1, 1);
+    END LOOP;
+
+    UPDATE "fleets" SET "last_event_seq" = "last_event_seq" + 1 WHERE "id" = plugin."fleet_id"
+      RETURNING "last_event_seq" INTO next_seq;
+    INSERT INTO "events" ("id", "fleet_id", "type", "occurred_at", "ship_id", "details", "seq")
+    VALUES ('evt_' || body, plugin."fleet_id", 'PluginConnected', at, plugin."id", '{}'::jsonb, next_seq);
+  END LOOP;
+END;
+$$;

package/src/adapters/prisma/migrations/20261019150000_network_plugin_registered_at/migration.sql

@@ -0,0 +1,23 @@
+-- When the fleet's networking plugin first registered (decision 0035), set
+-- with its ship and declaration, all four or none. A plugin registered before
+-- this column takes the time of its first NetworkPluginRegistered event since
+-- the fleet's latest NetworkPluginUnregistered (a retirement writes one too).
+ALTER TABLE "network_settings" ADD COLUMN "plugin_registered_at" TIMESTAMPTZ(3);
+
+UPDATE "network_settings" AS s
+SET "plugin_registered_at" = COALESCE(
+    (SELECT min(e."occurred_at") FROM "events" e
+     WHERE e."fleet_id" = s."fleet_id" AND e."type" = 'NetworkPluginRegistered' AND e."ship_id" = s."plugin_ship_id"
+       AND e."occurred_at" > COALESCE(
+           (SELECT max(u."occurred_at") FROM "events" u WHERE u."fleet_id" = s."fleet_id" AND u."type" = 'NetworkPluginUnregistered'),
+           '-infinity')),
+    now())
+WHERE s."plugin_ship_id" IS NOT NULL;
+
+ALTER TABLE "network_settings"
+    DROP CONSTRAINT "network_settings_plugin_whole",
+    ADD CONSTRAINT "network_settings_plugin_whole" CHECK (
+        ("plugin_ship_id" IS NULL) = ("plugin_while_unavailable" IS NULL)
+        AND ("plugin_ship_id" IS NULL) = ("plugin_not_responding_after_seconds" IS NULL)
+        AND ("plugin_ship_id" IS NULL) = ("plugin_registered_at" IS NULL)
+    );

package/src/adapters/prisma/migrations/20261019160000_lease_waker/migration.sql

@@ -0,0 +1,4 @@
+-- What wakes a pushed ship, as its first push receive states it (interop 5.1).
+CREATE TYPE "lease_waker" AS ENUM ('trierarch', 'pluginWatcher', 'personApp', 'gateway', 'adapter');
+
+ALTER TABLE "leases" ADD COLUMN "waker" "lease_waker";

package/src/adapters/prisma/schema.prisma

@@ -53,6 +53,8 @@ model Fleet {
   shipLabels       ShipLabel[]
   networkSettings  NetworkSettings?
   declaredNetworkRules DeclaredNetworkRules[]
+  scopeNamespaces  ScopeNamespace[]
+  pluginConnections PluginConnection[]
   reachRefusals    ReachRefusal[]
   credentials      Credential[]
   messages         Message[]
@@ -68,11 +70,13 @@ model Fleet {
   @@map("fleets")
 }
 
-/// `argo` is the one operator ship of a fleet; every other ship is an agent.
+/// What a ship is (decision 0044): argo the one operator, the viewer, an agent session, a person's ship or an app's.
 enum ShipKind {
   operator
   agent
   viewer
+  person
+  app
 
   @@map("ship_kind")
 }
@@ -93,8 +97,12 @@ model Ship {
   commissionedBy        String?   @map("commissioned_by")
   commissionKey         String?   @map("commission_key")
   commissionRequestHash String?   @map("commission_request_hash")
+  /// The ship that answers for it, a person's ship or argo (decision 0045); null for argo and the viewer.
+  ownerShipId           String?   @map("owner_ship_id")
 
   fleet             Fleet            @relation(fields: [fleetId], references: [id])
+  owner             Ship?            @relation("ShipOwner", fields: [fleetId, ownerShipId], references: [fleetId, id], onDelete: Restrict)
+  ownedShips        Ship[]           @relation("ShipOwner")
   leases            Lease[]
   credentials       Credential[]
   sentMessages      Message[]        @relation("MessageSender")
@@ -114,6 +122,8 @@ model Ship {
   ownedLabels       Label[]          @relation("LabelOwner")
   labels            ShipLabel[]      @relation("ShipLabelShip")
   declaredNetworkRules DeclaredNetworkRules[]
+  declaredNamespace ScopeNamespace?
+  pluginConnection  PluginConnection?
 
   @@unique([fleetId, id])
   /// An idempotency key is used once per commissioning ship.
@@ -124,6 +134,7 @@ model Ship {
   @@unique([fleetId], map: "ships_fleet_id_operator_key", where: raw("kind = 'operator'::ship_kind"))
   /// At most one viewer ship per fleet (decision 0022).
   @@unique([fleetId], map: "ships_fleet_id_viewer_key", where: raw("kind = 'viewer'::ship_kind"))
+  @@index([fleetId, ownerShipId])
   @@map("ships")
 }
 
@@ -137,6 +148,16 @@ enum ReportState {
 }
 
 /// A pushed session's turn, as its hooks report it (decision 0040).
+enum LeaseWaker {
+  trierarch
+  pluginWatcher
+  personApp
+  gateway
+  adapter
+
+  @@map("lease_waker")
+}
+
 enum TurnState {
   idle
   busy
@@ -178,8 +199,14 @@ model Lease {
   reportDetails        Json?        @map("report_details")
   /// Moves by one each time the details change; 0 before any.
   reportDetailsVersion Int          @default(0) @map("report_details_version")
+  /// The crew's statement: what its ship is and offers, at most 64 KB, its shape common's; null until it states one (decision 0047).
+  statement            Json?
+  /// Moves by one each time the statement changes; 0 before any.
+  statementVersion     Int          @default(0) @map("statement_version")
   /// From the lease's first push receive: the computer side takes its deliveries, and the agent's plain receive answers nothing (decision 0040).
   pushedAt             DateTime?    @map("pushed_at") @db.Timestamptz(3)
+  /// What wakes the ship, as its first push receive stated it; null when it stated none (interop 5.1).
+  waker                LeaseWaker?
   /// The session's turn as its hooks last reported it, and when they saw it change; null until they report (decision 0040).
   turn                 TurnState?
   turnAt               DateTime?    @map("turn_at") @db.Timestamptz(3)
@@ -350,13 +377,20 @@ model ShipLabel {
 /// set take turns on an advisory lock on them (network.ts).
 model NetworkSettings {
   fleetId                         String  @id @map("fleet_id")
-  rules                           Json?
+  rules                           Json    @default("[]")
+  /// The built-in rules that can be off (decision 0034): the viewer reading,
+  /// argo's, and open per verb, the networking plugin's. On at fleet create.
+  builtInViewerRead               Boolean @default(true) @map("built_in_viewer_read")
+  builtInOpenSend                 Boolean @default(true) @map("built_in_open_send")
+  builtInOpenRead                 Boolean @default(true) @map("built_in_open_read")
+  builtInOpenManage               Boolean @default(true) @map("built_in_open_manage")
   version                         Int
-  /// The fleet's networking plugin (decision 0035): its ship and what it
-  /// declared, all three set or none.
-  pluginShipId                    String? @map("plugin_ship_id")
-  pluginWhileUnavailable          String? @map("plugin_while_unavailable")
-  pluginNotRespondingAfterSeconds Int?    @map("plugin_not_responding_after_seconds")
+  /// The fleet's networking plugin (decision 0035): its ship, what it
+  /// declared and when it first registered, all four set or none.
+  pluginShipId                    String?   @map("plugin_ship_id")
+  pluginWhileUnavailable          String?   @map("plugin_while_unavailable")
+  pluginNotRespondingAfterSeconds Int?      @map("plugin_not_responding_after_seconds")
+  pluginRegisteredAt              DateTime? @map("plugin_registered_at") @db.Timestamptz(3)
 
   fleet Fleet @relation(fields: [fleetId], references: [id])
 
@@ -378,6 +412,38 @@ model DeclaredNetworkRules {
   @@map("declared_network_rules")
 }
 
+/// A plugin's namespace (decision 0046): taken up for good by the ship that
+/// declared it, one per ship and unique in the fleet, with its whole list of
+/// scopes and their descriptions as JSON, in order. It goes when its declarer
+/// retires.
+model ScopeNamespace {
+  fleetId    String @map("fleet_id")
+  namespace  String
+  declaredBy String @map("declared_by")
+  scopes     Json
+
+  fleet    Fleet @relation(fields: [fleetId], references: [id])
+  declarer Ship  @relation(fields: [fleetId, declaredBy], references: [fleetId, id])
+
+  @@id([fleetId, namespace])
+  @@unique([fleetId, declaredBy])
+  @@map("scope_namespaces")
+}
+
+/// A plugin argo connected (decision 0034): its ship reads every ship of the
+/// fleet, whatever the rules, until a release or a retire of the ship ends it.
+model PluginConnection {
+  fleetId     String   @map("fleet_id")
+  shipId      String   @map("ship_id")
+  connectedAt DateTime @map("connected_at") @db.Timestamptz(3)
+
+  fleet Fleet @relation(fields: [fleetId], references: [id])
+  ship  Ship  @relation(fields: [fleetId, shipId], references: [fleetId, id])
+
+  @@id([fleetId, shipId])
+  @@map("plugin_connections")
+}
+
 /// A send the network rules refused (decision 0034), recorded in the
 /// transaction that refused it. Ids start with rfs_. Sender and recipient are
 /// as they were then: ids, names and the label values they carried, as JSON,
@@ -387,7 +453,11 @@ model ReachRefusal {
   fleetId         String   @map("fleet_id")
   at              DateTime @db.Timestamptz(3)
   sender          Json
+  /// The plugin ship that read on behalf of the sender (decision 0034); null for the sender's own call.
+  askedBy         Json?    @map("asked_by")
   recipient       Json
+  /// What the sender tried to do: send, read or manage (decision 0034).
+  verb            String
   settingsVersion Int      @map("settings_version")
   /// What the networking plugin declared, when it refused while the plugin
   /// was not responding (decision 0035): block-all or keep-latest.
@@ -513,6 +583,8 @@ model Delivery {
   handOverNumber   Int?          @map("hand_over_number")
   /// When its crew handed it once more after the turn that took it died; only once (decision 0040).
   handedOnceMoreAt DateTime?     @map("handed_once_more_at") @db.Timestamptz(3)
+  /// Whether its message was forced: it comes first in receive and push receive (decision 0040).
+  isForced         Boolean       @default(false) @map("is_forced")
   reachableShipIds String[]      @default([]) @map("reachable_ship_ids")
   readAt           DateTime?     @map("read_at") @db.Timestamptz(3)
   createdAt        DateTime      @map("created_at") @db.Timestamptz(3)
@@ -609,6 +681,8 @@ model Event {
   @@index([fleetId, shipId])
   @@index([fleetId, messageId])
   @@index([fleetId, deliveryId])
+  /// The health reads take a fleet's events since a time (decision 0042).
+  @@index([fleetId, occurredAt])
   @@map("events")
 }
 

package/dist/domain/shared/read-no-ship-can-take.d.ts

@@ -1,13 +0,0 @@
-import type { Caller } from './caller.js';
-import { type ShipHistory, type ShownNoShipCanTakeEntry } from './history.js';
-export type ReadNoShipCanTake = (caller: Caller) => Promise<ShownNoShipCanTakeEntry[]>;
-/**
- * Use case: the pending deliveries of the caller's fleet to a type no active
- * ship can take (decision 0041), oldest sent first, for Needs attention. Each
- * clears by itself once a ship of the type can take it; there is nothing to
- * resend or dismiss. The caller's scope (fleet:read) is checked before this
- * runs.
- */
-export declare function createReadNoShipCanTake(deps: {
-    history: ShipHistory;
-}): ReadNoShipCanTake;

package/dist/domain/shared/read-no-ship-can-take.js

@@ -1,12 +0,0 @@
-import { withPing } from './history.js';
-/**
- * Use case: the pending deliveries of the caller's fleet to a type no active
- * ship can take (decision 0041), oldest sent first, for Needs attention. Each
- * clears by itself once a ship of the type can take it; there is nothing to
- * resend or dismiss. The caller's scope (fleet:read) is checked before this
- * runs.
- */
-export function createReadNoShipCanTake(deps) {
-    return async (caller) => (await deps.history.noShipCanTake(caller.fleetId)).map((entry) => ({ ...entry, message: withPing(entry.message) }));
-}
-//# sourceMappingURL=read-no-ship-can-take.js.map

package/dist/domain/shared/read-no-ship-can-take.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-no-ship-can-take.js","sourceRoot":"","sources":["../../../src/domain/shared/read-no-ship-can-take.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAkD,MAAM,cAAc,CAAC;AAIxF;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAA8B;IACpE,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/I,CAAC"}

package/dist/domain/shared/read-overdue.d.ts

@@ -1,13 +0,0 @@
-import type { Caller } from './caller.js';
-import { type ShipHistory, type ShownOverdueEntry } from './history.js';
-export type ReadOverdue = (caller: Caller) => Promise<ShownOverdueEntry[]>;
-/**
- * Use case: the deliveries of the caller's fleet argo was told are overdue by
- * the 10 and 60 minute clocks (decision 0040), oldest told first, for Needs
- * attention. Each clears by itself once its delivery leaves the state it was
- * told in or its lease ends; there is nothing to resend or dismiss. The
- * caller's scope (fleet:read) is checked before this runs.
- */
-export declare function createReadOverdue(deps: {
-    history: ShipHistory;
-}): ReadOverdue;

package/dist/domain/shared/read-overdue.js

@@ -1,12 +0,0 @@
-import { withPing } from './history.js';
-/**
- * Use case: the deliveries of the caller's fleet argo was told are overdue by
- * the 10 and 60 minute clocks (decision 0040), oldest told first, for Needs
- * attention. Each clears by itself once its delivery leaves the state it was
- * told in or its lease ends; there is nothing to resend or dismiss. The
- * caller's scope (fleet:read) is checked before this runs.
- */
-export function createReadOverdue(deps) {
-    return async (caller) => (await deps.history.overdue(caller.fleetId)).map((entry) => ({ ...entry, message: withPing(entry.message) }));
-}
-//# sourceMappingURL=read-overdue.js.map

package/dist/domain/shared/read-overdue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"read-overdue.js","sourceRoot":"","sources":["../../../src/domain/shared/read-overdue.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAA4C,MAAM,cAAc,CAAC;AAIlF;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA8B;IAC9D,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AACzI,CAAC"}