@aeolus-fleet/core 0.27.0 → 0.28.0

package/dist/domain/registry/explain-reach.d.ts

@@ -1,34 +1,42 @@
 import { type ExplainedReach, type ShipId } from '@aeolus-fleet/common';
 import type { Caller } from '../shared/caller.js';
-import type { Clock } from '../shared/clock.js';
 import { type DomainError } from '../shared/errors.js';
 import { type Result } from '../shared/result.js';
 import type { UnitOfWork } from '../shared/unit-of-work.js';
 import { type CheckReachTx } from './check-reach.js';
-import type { DeclaredNetworkRulesRepository, ShipRepository } from './ports.js';
+import { type NoNetworkRulesDraft } from './network-rules-draft.js';
+import { type RulesInForce } from './network-settings.js';
+import { type ReadReachOf } from './read-reach.js';
+import type { NetworkRulesDraftRepository, ShipRepository } from './ports.js';
 export interface ExplainReachTx {
     networkSettings: CheckReachTx['networkSettings'];
     ships: Pick<ShipRepository, 'find' | 'listActive'>;
     labels: CheckReachTx['labels'];
-    leases: CheckReachTx['leases'];
-    declaredNetworkRules: Pick<DeclaredNetworkRulesRepository, 'list'>;
+    pluginConnections: CheckReachTx['pluginConnections'];
+    declaredNetworkRules: CheckReachTx['declaredNetworkRules'];
+    networkRulesDrafts: Pick<NetworkRulesDraftRepository, 'find'>;
 }
-export type ExplainReachFailure = DomainError<'NOT_THE_OPERATOR_SHIP' | 'SHIP_NOT_FOUND'>;
+export type ExplainReachFailure = DomainError<'NOT_REACHABLE' | 'SHIP_NOT_FOUND'> | NoNetworkRulesDraft;
 export type ExplainReach = (caller: Caller, input: {
     fromShipId: ShipId;
     toShipId?: ShipId;
+    against?: 'applied' | 'draft';
 }) => Promise<Result<ExplainedReach, ExplainReachFailure>>;
 /**
- * Use case: argo asks which ships a ship reaches now, per verb, or whether it
- * reaches one ship (decision 0034). It answers as a send would be checked at
- * this moment: the rules in force, what the networking plugin declared while
- * it does not respond, the built-in rules. Each ship comes with the rule that
- * allows it: a built-in rule, a rule the plugin supplied, or a rule a ship
- * declared, named by its declarer, when the plugin supplied it as declared.
- * There is no message, so no answer to a sender. It records nothing: an
- * explain is not a send. Only argo.
+ * Use case: an actor asks which ships a ship reaches now, per verb, or
+ * whether it reaches one ship (decision 0034). It answers as a send would be
+ * checked at this moment: the built-in rules, the fleet's own rules and the
+ * declared ones; or, asked of the draft, as one would be checked once the
+ * draft is applied. Each ship comes with the rule that allows it: a built-in
+ * rule, one of the fleet's own by its place, or a declared rule by its
+ * declarer and place. There is no message, so no answer to a sender. It
+ * records nothing: an explain is not a send. Any actor holding fleet:explain
+ * asks, the scope checked before this runs, about the ships it reads
+ * (decision 0053).
  */
 export declare function createExplainReach(deps: {
     uow: UnitOfWork<ExplainReachTx>;
-    clock: Clock;
+    readReach: ReadReachOf;
 }): ExplainReach;
+/** The rules that would be in force once the fleet's draft is applied, with the declared ones as they are now; none without a draft. */
+export declare function draftInForce(tx: Pick<ExplainReachTx, 'networkSettings' | 'declaredNetworkRules' | 'networkRulesDrafts'>, fleetId: Caller['fleetId']): Promise<RulesInForce | undefined>;

package/dist/domain/registry/explain-reach.js

@@ -1,65 +1,65 @@
 import { NETWORK_VERBS } from '@aeolus-fleet/common';
 import { refuse } from '../shared/errors.js';
 import { ok } from '../shared/result.js';
-import { reaching, rulesInForceAt, shipAsItIs } from './check-reach.js';
-import { reachRuleOf } from './network-settings.js';
+import { reaching, rulesInForceOf, shipAsItIs } from './check-reach.js';
+import { refuseNoDraft } from './network-rules-draft.js';
+import { reachRuleOf, rulesInForce } from './network-settings.js';
+import { readsShip } from './read-reach.js';
 /**
- * Use case: argo asks which ships a ship reaches now, per verb, or whether it
- * reaches one ship (decision 0034). It answers as a send would be checked at
- * this moment: the rules in force, what the networking plugin declared while
- * it does not respond, the built-in rules. Each ship comes with the rule that
- * allows it: a built-in rule, a rule the plugin supplied, or a rule a ship
- * declared, named by its declarer, when the plugin supplied it as declared.
- * There is no message, so no answer to a sender. It records nothing: an
- * explain is not a send. Only argo.
+ * Use case: an actor asks which ships a ship reaches now, per verb, or
+ * whether it reaches one ship (decision 0034). It answers as a send would be
+ * checked at this moment: the built-in rules, the fleet's own rules and the
+ * declared ones; or, asked of the draft, as one would be checked once the
+ * draft is applied. Each ship comes with the rule that allows it: a built-in
+ * rule, one of the fleet's own by its place, or a declared rule by its
+ * declarer and place. There is no message, so no answer to a sender. It
+ * records nothing: an explain is not a send. Any actor holding fleet:explain
+ * asks, the scope checked before this runs, about the ships it reads
+ * (decision 0053).
  */
 export function createExplainReach(deps) {
-    return (caller, input) => deps.uow.run(async (tx) => {
-        if (caller.kind !== 'operator') {
-            return refuse('NOT_THE_OPERATOR_SHIP', 'Only argo explains reach');
-        }
-        const { fleetId } = caller;
-        const from = await tx.ships.find(fleetId, input.fromShipId);
-        if (from?.retiredAt !== null) {
-            return refuse('SHIP_NOT_FOUND', 'The fleet has no active ship with this id to explain from');
-        }
-        const active = await tx.ships.listActive(fleetId);
-        const others = active.filter((ship) => ship.id !== from.id && (input.toShipId === undefined || ship.id === input.toShipId));
-        if (input.toShipId !== undefined && others.length === 0 && input.toShipId !== from.id) {
-            return refuse('SHIP_NOT_FOUND', 'The fleet has no active ship with this id to explain reach to');
-        }
-        const settings = await tx.networkSettings.findForShare(fleetId);
-        const inForce = await rulesInForceAt(tx, { settings, now: deps.clock.now() });
-        const declared = await tx.declaredNetworkRules.list(fleetId);
-        const sender = reaching(await shipAsItIs(tx, from));
-        const explained = { send: [], read: [], manage: [] };
-        for (const ship of others) {
-            const recipient = reaching(await shipAsItIs(tx, ship));
-            for (const verb of NETWORK_VERBS) {
-                const rule = reachRuleOf(inForce, { verb, sender, recipient, isAnswerToSender: false });
-                if (rule !== undefined) {
-                    explained[verb].push({ shipId: ship.id, rule: namedRule(rule, { rules: inForce.rules, declared }) });
+    return async (caller, input) => {
+        const reads = await deps.readReach(caller);
+        return deps.uow.run(async (tx) => {
+            const { fleetId } = caller;
+            const from = await tx.ships.find(fleetId, input.fromShipId);
+            if (from?.retiredAt !== null) {
+                return refuse('SHIP_NOT_FOUND', 'The fleet has no active ship with this id to explain from');
+            }
+            if (!readsShip(reads, from.id)) {
+                return refuse('NOT_REACHABLE', 'The network rules do not let you read the ship to explain from');
+            }
+            const active = await tx.ships.listActive(fleetId);
+            const others = active.filter((ship) => ship.id !== from.id && readsShip(reads, ship.id) && (input.toShipId === undefined || ship.id === input.toShipId));
+            if (input.toShipId !== undefined && others.length === 0 && input.toShipId !== from.id) {
+                return refuse('SHIP_NOT_FOUND', 'The fleet has no active ship with this id to explain reach to');
+            }
+            const inForce = input.against === 'draft' ? await draftInForce(tx, fleetId) : await rulesInForceOf(tx, await tx.networkSettings.findForShare(fleetId));
+            if (inForce === undefined) {
+                return refuseNoDraft();
+            }
+            const sender = reaching(await shipAsItIs(tx, from));
+            const explained = { send: [], read: [], manage: [] };
+            for (const ship of others) {
+                const recipient = reaching(await shipAsItIs(tx, ship));
+                for (const verb of NETWORK_VERBS) {
+                    const rule = reachRuleOf(inForce, { verb, sender, recipient, isAnswerToSender: false });
+                    if (rule !== undefined) {
+                        explained[verb].push({ shipId: ship.id, rule });
+                    }
                 }
             }
-        }
-        return ok(explained);
-    });
+            return ok(explained);
+        });
+    };
 }
-/** A rule of the settings named as argo reads it: a declared one by its declarer and its place in that ship's list, any other as the plugin's. */
-function namedRule(rule, held) {
-    if ('builtIn' in rule) {
-        return rule;
-    }
-    const text = ruleText(held.rules[rule.index]);
-    for (const { shipId, rules } of held.declared) {
-        const index = rules.findIndex((each) => ruleText(each) === text);
-        if (index !== -1) {
-            return { declared: shipId, index };
-        }
+/** The rules that would be in force once the fleet's draft is applied, with the declared ones as they are now; none without a draft. */
+export async function draftInForce(tx, fleetId) {
+    const settings = await tx.networkSettings.findForShare(fleetId);
+    const draft = await tx.networkRulesDrafts.find(fleetId);
+    if (draft === undefined) {
+        return undefined;
     }
-    return { plugin: rule.index };
-}
-function ruleText(rule) {
-    return JSON.stringify(rule === undefined ? null : [rule.verb, rule.from, rule.to]);
+    return rulesInForce({ rules: draft.rules, isViewerReadOn: settings.isViewerReadOn }, await tx.declaredNetworkRules.list(fleetId));
 }
 //# sourceMappingURL=explain-reach.js.map

package/dist/domain/registry/explain-reach.js.map

@@ -1 +1 @@
-{"version":3,"file":"explain-reach.js","sourceRoot":"","sources":["../../../src/domain/registry/explain-reach.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoD,MAAM,sBAAsB,CAAC;AAIvG,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AAE3F,OAAO,EAAE,WAAW,EAAoD,MAAM,uBAAuB,CAAC;AAetG;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAuD;IACxF,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAwD,EAAE;QAC9E,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,gBAAgB,EAAE,2DAA2D,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5H,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;YACtF,OAAO,MAAM,CAAC,gBAAgB,EAAE,+DAA+D,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;QACpD,MAAM,SAAS,GAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACrE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YACvD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;gBACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,kJAAkJ;AAClJ,SAAS,SAAS,CAAC,IAAkB,EAAE,IAAkF;IACvH,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;QACjE,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,IAA6B;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC"}
+{"version":3,"file":"explain-reach.js","sourceRoot":"","sources":["../../../src/domain/registry/explain-reach.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAoC,MAAM,sBAAsB,CAAC;AAGvF,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAqB,MAAM,kBAAkB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAA4B,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAqB,MAAM,uBAAuB,CAAC;AACrF,OAAO,EAAE,SAAS,EAAoB,MAAM,iBAAiB,CAAC;AAgB9D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAiE;IAClG,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAwD,EAAE;YACrF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,IAAI,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;gBAC7B,OAAO,MAAM,CAAC,gBAAgB,EAAE,2DAA2D,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,eAAe,EAAE,gEAAgE,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzJ,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;gBACtF,OAAO,MAAM,CAAC,gBAAgB,EAAE,+DAA+D,CAAC,CAAC;YACnG,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACvJ,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,aAAa,EAAE,CAAC;YACzB,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,MAAM,SAAS,GAAmB,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACrE,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;gBACvD,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;oBACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;oBACxF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;wBACvB,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,wIAAwI;AACxI,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAA2F,EAC3F,OAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACpI,CAAC"}

package/dist/domain/registry/get-ship.d.ts

@@ -1,5 +1,5 @@
 import type { ShipId } from '@aeolus-fleet/common';
-import type { Caller } from '../shared/caller.js';
+import type { ShipCaller } from '../shared/caller.js';
 import { type DomainError } from '../shared/errors.js';
 import { type Result } from '../shared/result.js';
 import { type ListedShip, type ShipOutsideReadReach } from './list-fleet.js';
@@ -26,7 +26,7 @@ export interface ShipDetail extends Omit<ListedShip, 'report' | 'crewRequest'> {
         name: string;
     } | null;
 }
-export type GetShip = (caller: Caller, input: {
+export type GetShip = (caller: ShipCaller, input: {
     shipId: ShipId;
 }) => Promise<Result<ShipDetail | ShipOutsideReadReach, DomainError<'SHIP_NOT_FOUND' | 'CREW_REQUEST_NOT_ASSIGNED_TO_CALLER'>>>;
 /**

package/dist/domain/registry/get-starting-prompt.d.ts

@@ -1,6 +1,6 @@
 import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
 import { type SecretTools } from '../identity/public.js';
-import type { Caller } from '../shared/caller.js';
+import { type Caller } from '../shared/caller.js';
 import type { Clock } from '../shared/clock.js';
 import { type DomainError } from '../shared/errors.js';
 import { type Result } from '../shared/result.js';
@@ -24,7 +24,9 @@ export type GetStartingPrompt = (caller: Caller, input: {
  * prompt lost before use costs nothing. The caller's scope (fleet:manage or
  * crew:run) is checked before this runs; crew:run reaches only
  * the ships whose crew requests are assigned to the caller's ship, and
- * fleet:manage the ships in its manage reach (decision 0034).
+ * fleet:manage the ships in its manage reach (decision 0034). An account gets
+ * one only for its own person ship, with no scope for it, so the app it uses
+ * crews it (decision 0052).
  *
  * Locks in the fleet's order: the ship first, so concurrent prompts for one
  * ship take turns and the last one issued is the valid one; then its secret;

package/dist/domain/registry/get-starting-prompt.js

@@ -1,9 +1,9 @@
 import { revokeShipSecret } from '../identity/public.js';
+import { actorOf } from '../shared/caller.js';
 import { refuse } from '../shared/errors.js';
-import { shipActor } from '../shared/events.js';
 import { ok } from '../shared/result.js';
 import { keepingReachRefusal } from './check-reach.js';
-import { checkManagedOrAssigned } from './managed-or-assigned.js';
+import { checkManagedOrAssigned, checkOwnPersonShip } from './managed-or-assigned.js';
 import { checkCanIssueStartingPrompt } from './ship.js';
 import { issueStartingPrompt } from './starting-prompt.js';
 /**
@@ -12,7 +12,9 @@ import { issueStartingPrompt } from './starting-prompt.js';
  * prompt lost before use costs nothing. The caller's scope (fleet:manage or
  * crew:run) is checked before this runs; crew:run reaches only
  * the ships whose crew requests are assigned to the caller's ship, and
- * fleet:manage the ships in its manage reach (decision 0034).
+ * fleet:manage the ships in its manage reach (decision 0034). An account gets
+ * one only for its own person ship, with no scope for it, so the app it uses
+ * crews it (decision 0052).
  *
  * Locks in the fleet's order: the ship first, so concurrent prompts for one
  * ship take turns and the last one issued is the valid one; then its secret;
@@ -28,11 +30,11 @@ export function createGetStartingPrompt(deps) {
             return refuse('SHIP_NOT_FOUND', `Ship ${shipId} does not exist`);
         }
         const at = deps.clock.now();
-        const reaches = await checkManagedOrAssigned({ tx, ids: deps.ids }, { caller, ship, at });
+        const reaches = caller.kind === 'account' ? checkOwnPersonShip(caller, ship) : await checkManagedOrAssigned({ tx, ids: deps.ids }, { caller, ship, at });
         if (!reaches.isOk) {
             return reaches;
         }
-        const actor = shipActor(caller.shipId);
+        const actor = actorOf(caller);
         await revokeShipSecret({ tx, ids: deps.ids }, { fleetId, shipId, actor, at });
         const lease = await tx.leases.findOpenForUpdate(fleetId, shipId);
         const allowed = checkCanIssueStartingPrompt(ship, { isCrewed: lease !== undefined });

package/dist/domain/registry/get-starting-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-starting-prompt.js","sourceRoot":"","sources":["../../../src/domain/registry/get-starting-prompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAoB,MAAM,uBAAuB,CAAC;AAG3E,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAA4B,MAAM,0BAA0B,CAAC;AAE5F,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAoD,MAAM,sBAAsB,CAAC;AAiB7G;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAmE,EAAE;QAC1G,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,MAAM,iBAAiB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAC/B,CAAC;QACF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"get-starting-prompt.js","sourceRoot":"","sources":["../../../src/domain/registry/get-starting-prompt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAoB,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAe,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAA4B,MAAM,0BAA0B,CAAC;AAEhH,OAAO,EAAE,2BAA2B,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAoD,MAAM,sBAAsB,CAAC;AAiB7G;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAKvC;IACC,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAC5B,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAAmE,EAAE;QAC1G,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,MAAM,iBAAiB,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,sBAAsB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACzJ,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,2BAA2B,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EACnD,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAC/B,CAAC;QACF,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/give-back-crew-request.d.ts

@@ -1,6 +1,6 @@
 import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
 import { type CredentialTx } from '../identity/public.js';
-import type { Caller } from '../shared/caller.js';
+import { type ShipCaller } from '../shared/caller.js';
 import type { Clock } from '../shared/clock.js';
 import { type DomainError } from '../shared/errors.js';
 import { type EventLog } from '../shared/events.js';
@@ -14,7 +14,7 @@ export interface GiveBackCrewRequestTx extends LeaseTx, CredentialTx {
     crewRequests: CrewRequestRepository;
     events: EventLog;
 }
-export type GiveBack = (caller: Caller, input: {
+export type GiveBack = (caller: ShipCaller, input: {
     shipId: ShipId;
     settingsVersion: number;
     reason: string;

package/dist/domain/registry/give-back-crew-request.js

@@ -1,6 +1,7 @@
 import { revokeShipSecret } from '../identity/public.js';
+import { actorOf } from '../shared/caller.js';
 import { refuse } from '../shared/errors.js';
-import { recordEvent, shipActor } from '../shared/events.js';
+import { recordEvent } from '../shared/events.js';
 import { ok } from '../shared/result.js';
 import { giveBackCrewRequest } from './crew-request.js';
 import { endLease } from './leases.js';
@@ -21,7 +22,7 @@ export function createGiveBackCrewRequest(deps) {
             return refuse('SHIP_NOT_FOUND', `Ship ${input.shipId} does not exist`);
         }
         const at = deps.clock.now();
-        const actor = shipActor(caller.shipId);
+        const actor = actorOf(caller);
         const given = giveBackCrewRequest({ ship, current: await tx.crewRequests.find(fleetId, ship.id), trierarchShipId: caller.shipId }, { settingsVersion: input.settingsVersion, reason: input.reason, at, actor });
         if (!given.isOk) {
             return given;

package/dist/domain/registry/give-back-crew-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"give-back-crew-request.js","sourceRoot":"","sources":["../../../src/domain/registry/give-back-crew-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,uBAAuB,CAAC;AAG5E,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAiB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAmC,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAgB,MAAM,aAAa,CAAC;AAcrD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAgF;IACxH,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAA0F,EAAE;QAChH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,mBAAmB,CAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,EAC/F,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAC5E,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"give-back-crew-request.js","sourceRoot":"","sources":["../../../src/domain/registry/give-back-crew-request.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAqB,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAmB,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAmC,MAAM,mBAAmB,CAAC;AACzF,OAAO,EAAE,QAAQ,EAAgB,MAAM,aAAa,CAAC;AAcrD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAgF;IACxH,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAA0F,EAAE;QAChH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,mBAAmB,CAC/B,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,EAC/F,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAC5E,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,gBAAgB,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/grant-scopes.d.ts

@@ -1,13 +1,14 @@
 import type { IdGenerator, ShipId } from '@aeolus-fleet/common';
-import type { Caller } from '../shared/caller.js';
+import { type Caller } from '../shared/caller.js';
 import type { Clock } from '../shared/clock.js';
 import { type DomainError } from '../shared/errors.js';
 import { type EventLog } from '../shared/events.js';
 import { type Result } from '../shared/result.js';
 import type { UnitOfWork } from '../shared/unit-of-work.js';
+import { type CheckManageTx, type NotReachable } from './check-reach.js';
 import type { ScopeNamespaceRepository, ShipRepository } from './ports.js';
 import { type GrantScopesRefusal } from './scope-grant.js';
-export interface GrantScopesTx {
+export interface GrantScopesTx extends Omit<CheckManageTx, 'ships'> {
     ships: Pick<ShipRepository, 'find' | 'findForUpdate' | 'setScopes'>;
     scopeNamespaces: Pick<ScopeNamespaceRepository, 'lockNamespace' | 'find'>;
     events: EventLog;
@@ -18,10 +19,12 @@ export type GrantScopes = (caller: Caller, input: {
     revoke: readonly string[];
 }) => Promise<Result<{
     scopes: readonly string[];
-}, GrantScopesRefusal | DomainError<'SHIP_NOT_FOUND'>>>;
+}, GrantScopesUseCaseRefusal>>;
+export type GrantScopesUseCaseRefusal = GrantScopesRefusal | NotReachable | DomainError<'SHIP_NOT_FOUND'>;
 /**
- * Use case: the caller grants and revokes scopes on a live ship of its fleet
- * (decision 0046), within what its ship may grant, read from the server.
+ * Use case: any actor grants and revokes scopes on a live ship of its fleet
+ * within its manage reach (decisions 0046, 0053), within what it may grant,
+ * read from the server or its checked token. A refused reach keeps its record.
  * Its scope (scopes:grant) is checked before this runs. In one unit of work,
  * holding the ship, then each plugin namespace the scopes name, so a
  * declaration that removes a scope waits: the ship's scopes and

package/dist/domain/registry/grant-scopes.js

@@ -1,25 +1,34 @@
+import { actorOf, isShipCaller } from '../shared/caller.js';
 import { refuse } from '../shared/errors.js';
-import { recordEvent, shipActor } from '../shared/events.js';
+import { recordEvent } from '../shared/events.js';
 import { ok } from '../shared/result.js';
+import { checkManage, keepingReachRefusal } from './check-reach.js';
 import { grantScopes } from './scope-grant.js';
 import { lockNamedNamespaces } from './named-namespaces.js';
 /**
- * Use case: the caller grants and revokes scopes on a live ship of its fleet
- * (decision 0046), within what its ship may grant, read from the server.
+ * Use case: any actor grants and revokes scopes on a live ship of its fleet
+ * within its manage reach (decisions 0046, 0053), within what it may grant,
+ * read from the server or its checked token. A refused reach keeps its record.
  * Its scope (scopes:grant) is checked before this runs. In one unit of work,
  * holding the ship, then each plugin namespace the scopes name, so a
  * declaration that removes a scope waits: the ship's scopes and
  * ScopesChanged. The ship's crew holds them from its next call.
  */
 export function createGrantScopes(deps) {
-    return (caller, input) => deps.uow.run(async (tx) => {
+    return (caller, input) => keepingReachRefusal(deps.uow, async (tx) => {
         const { fleetId } = caller;
         const ship = await tx.ships.findForUpdate(fleetId, input.shipId);
         if (!ship) {
             return refuse('SHIP_NOT_FOUND', `Ship ${input.shipId} does not exist`);
         }
+        const at = deps.clock.now();
+        const managed = await checkManage({ tx, ids: deps.ids }, { manager: caller, shipId: ship.id, at });
+        if (!managed.isOk) {
+            return managed;
+        }
         const namespaces = await lockNamedNamespaces(tx, { fleetId, scopes: [...input.grant, ...input.revoke] });
-        const granted = grantScopes({ ship, granter: caller, grant: input.grant, revoke: input.revoke, at: deps.clock.now(), actor: shipActor(caller.shipId) }, { namespaces });
+        const granter = { shipId: isShipCaller(caller) ? caller.shipId : null, isOperator: caller.kind === 'operator', scopes: caller.scopes };
+        const granted = grantScopes({ ship, granter, grant: input.grant, revoke: input.revoke, at, actor: actorOf(caller) }, { namespaces });
         if (!granted.isOk) {
             return granted;
         }

package/dist/domain/registry/grant-scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"grant-scopes.js","sourceRoot":"","sources":["../../../src/domain/registry/grant-scopes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,SAAS,EAAiB,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAAE,WAAW,EAA2B,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAa5D;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAwE;IACxG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAsG,EAAE;QAC5H,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzG,MAAM,OAAO,GAAG,WAAW,CACzB,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAC1H,EAAE,UAAU,EAAE,CACf,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"grant-scopes.js","sourceRoot":"","sources":["../../../src/domain/registry/grant-scopes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,YAAY,EAAe,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAE,MAAM,EAAoB,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAiB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,EAAE,EAAe,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAyC,MAAM,kBAAkB,CAAC;AAE3G,OAAO,EAAE,WAAW,EAA2B,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAe5D;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAwE;IACxG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACvB,mBAAmB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,EAA6E,EAAE;QACpH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,MAAM,CAAC,gBAAgB,EAAE,QAAQ,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACnG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzG,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACvI,MAAM,OAAO,GAAG,WAAW,CACzB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,EACvF,EAAE,UAAU,EAAE,CACf,CAAC;QACF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzC,MAAM,WAAW,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/domain/registry/label.d.ts

@@ -1,4 +1,5 @@
-import { type FleetId, type LabelId, type LabelValueId, type ShipId, type ShipKind } from '@aeolus-fleet/common';
+import { type FleetId, type LabelId, type LabelValueId, type ShipId } from '@aeolus-fleet/common';
+import type { Caller } from '../shared/caller.js';
 import { type DomainError } from '../shared/errors.js';
 import type { Actor, NewEvent } from '../shared/events.js';
 import { type Result } from '../shared/result.js';
@@ -8,9 +9,23 @@ export interface LabelValue {
     id: LabelValueId;
     value: string;
 }
+/** Who owns a label (decision 0031): the ship that defined it, or the installation; never an account. */
+export type LabelOwner = {
+    kind: 'ship';
+    shipId: ShipId;
+} | {
+    kind: 'installation';
+};
+/** The owner an actor defines a label as: none for an account, which owns no label (decision 0031). */
+export declare function labelOwnerOf(caller: Caller): LabelOwner | undefined;
+/** The owner as a refusal names it: a ship by its name, or the installation. */
+export declare function ownerNameOf(owner: LabelOwner, shipNameOf: (shipId: ShipId) => Promise<string | undefined>): Promise<string>;
+/** Whether the other is the same owner: none, an account, is no owner. */
+export declare function isSameOwner(owner: LabelOwner, other: LabelOwner | undefined): boolean;
 /**
  * A label (docs/blueprint.md, "Label"; decision 0031): a key with a defined
- * set of values, each with its own id, owned by the ship that defined it.
+ * set of values, each with its own id, owned by the ship or the installation
+ * that defined it.
  * Ids are for machines, key and value texts for people. Only its owner
  * changes its values and assigns them, to any ship, its own included. It
  * retires with its owner.
@@ -22,16 +37,19 @@ export interface Label {
     key: string;
     /** In the order the owner gave them, each once. */
     values: readonly LabelValue[];
-    ownerShipId: ShipId;
+    owner: LabelOwner;
 }
-/** A label as the fleet lists it: its id, key and values, and its owner by id and name. */
+/** A label as the fleet lists it: its id, key and values, and its owner: a ship by id and name, or the installation. */
 export interface ListedLabel {
     id: LabelId;
     key: string;
     values: readonly LabelValue[];
     owner: {
+        kind: 'ship';
         id: ShipId;
         name: string;
+    } | {
+        kind: 'installation';
     };
 }
 /** One value a ship carries, with its label: ids and texts. */
@@ -64,15 +82,17 @@ type InvalidValue = DomainError<'INVALID_LABEL_VALUE'>;
 type InvalidValues = DomainError<'INVALID_LABEL_VALUES'>;
 /** A label's key, checked against the limits. */
 export declare function labelKey(key: string): Result<string, InvalidKey>;
-export type DefineLabelRefusal = InvalidKey | InvalidValue | InvalidValues | DomainError<'LABEL_KEY_TAKEN'>;
+export type DefineLabelRefusal = InvalidKey | InvalidValue | InvalidValues | DomainError<'LABEL_KEY_TAKEN' | 'ACCOUNT_OWNS_NO_LABEL'>;
 /**
- * A ship defines a label, owning it: a key unique in the fleet and its values,
- * the label and each value with its new id. A key the fleet has is refused,
- * naming its owner. LabelDefined names the owner, with the label and its
- * values.
+ * A ship or the installation defines a label, owning it: a key unique in the
+ * fleet and its values, the label and each value with its new id. An account
+ * owns no label, so it defines none (decision 0031). A key the fleet has is
+ * refused, naming its owner. LabelDefined names the owning ship, if a ship
+ * owns it, with the label and its values.
  */
-export declare function defineLabel({ owner, existing, }: {
-    owner: Pick<Ship, 'fleetId' | 'id'>;
+export declare function defineLabel({ fleetId, owner, existing, }: {
+    fleetId: FleetId;
+    owner: LabelOwner | undefined;
     existing: {
         label: Label;
         ownerName: string;
@@ -103,7 +123,7 @@ export declare function changeLabelValues({ label, ownerName, carriers, }: {
         shipName: string;
     }[];
 }, input: {
-    callerShipId: ShipId;
+    caller: LabelOwner | undefined;
     values: readonly NewLabelValue[];
     at: Date;
     actor: Actor;
@@ -122,14 +142,24 @@ export declare function deleteLabel({ label, ownerName, carrierNames }: {
     ownerName: string;
     carrierNames: readonly string[];
 }, input: {
-    callerShipId: ShipId;
+    caller: LabelOwner | undefined;
     at: Date;
     actor: Actor;
 }): Result<{
     events: NewEvent[];
 }, DeleteLabelRefusal>;
-/** A ship the caller may not label: neither its own nor one it commissioned, and the caller is not argo. */
+/** A ship the caller may not label: neither its own nor one it commissioned, and the caller holds no labels:any. */
 export type NotYourShipToLabel = DomainError<'NOT_YOUR_SHIP_TO_LABEL'>;
+/**
+ * Who labels a ship: the label's owner on its own ship and the ships it
+ * commissioned, or an actor holding labels:any, whose manage reach the use
+ * case checks, on any ship (decisions 0031, 0053).
+ */
+export interface Labeller {
+    owner: LabelOwner | undefined;
+    shipId: ShipId | null;
+    canLabelAnyShip: boolean;
+}
 export type AssignLabelRefusal = NotTheOwner | NotYourShipToLabel | DomainError<'SHIP_ALREADY_RETIRED' | 'SHIP_LABEL_LIMIT_REACHED'>;
 /**
  * The owner gives a ship one of its label's values, by its id: the ship
@@ -144,8 +174,7 @@ export declare function assignLabel({ label, ownerName, ship, carried, }: {
     ship: Ship;
     carried: readonly ShipLabel[];
 }, input: {
-    callerShipId: ShipId;
-    callerKind: ShipKind;
+    caller: Labeller;
     valueId: LabelValueId;
     at: Date;
     actor: Actor;
@@ -153,6 +182,29 @@ export declare function assignLabel({ label, ownerName, ship, carried, }: {
     assignment: ShipLabel | undefined;
     events: NewEvent[];
 }, AssignLabelRefusal>;
+/** A label value a commission gives the new ship, with its label as the fleet holds it now and its owner's name. */
+export interface GivenValue {
+    label: Label;
+    valueId: LabelValueId;
+    ownerName: string;
+}
+/**
+ * The values a commission gives the new ship (decision 0053), each once: a
+ * value of a label the commissioner owns, or a value it carries itself, a
+ * ship's labels or an account's token, so a new ship never reaches further
+ * than its commissioner can make it. Argo is no exception. LabelAssigned
+ * names the new ship for each.
+ */
+export declare function labelsAtCommission(given: readonly GivenValue[], commission: {
+    ship: Ship;
+    owner: LabelOwner | undefined;
+    carried: readonly LabelValueId[];
+    at: Date;
+    actor: Actor;
+}): Result<{
+    assignments: ShipLabel[];
+    events: NewEvent[];
+}, NotTheOwner>;
 export type UnassignLabelRefusal = NotTheOwner | NotYourShipToLabel;
 /**
  * The owner takes one value of its label off a ship. A ship that does not
@@ -165,8 +217,7 @@ export declare function unassignLabel({ label, ownerName, ship, carried, }: {
     ship: Ship;
     carried: readonly ShipLabel[];
 }, input: {
-    callerShipId: ShipId;
-    callerKind: ShipKind;
+    caller: Labeller;
     valueId: LabelValueId;
     at: Date;
     actor: Actor;