@remit/mailbox-service 0.0.111 → 0.0.112

package/src/refusal.ts

@@ -0,0 +1,29 @@
+import type { MailboxItem } from "@remit/data-ports";
+
+export type AccessMode = "read" | "act";
+
+export type Refusal =
+	| { kind: "Invalid"; message: string }
+	| { kind: "Forbidden"; message: string }
+	| { kind: "NotFound"; message: string }
+	| { kind: "Conflict"; message: string }
+	| {
+			kind: "NotSettled";
+			message: string;
+			mailboxId: string;
+			syncStatus: MailboxItem["syncStatus"];
+	  };
+
+export interface Refused {
+	ok: false;
+	refusal: Refusal;
+}
+
+export type Refusable<T> = { ok: true; value: T } | Refused;
+
+export const accept = <T>(value: T): Refusable<T> => ({ ok: true, value });
+
+export const refuse = (refusal: Refusal): Refused => ({ ok: false, refusal });
+
+export const invalid = (message: string): Refused =>
+	refuse({ kind: "Invalid", message });

package/src/restore-source-placement.ts

@@ -67,10 +67,6 @@ export interface RestoreSourcePlacementInput {
  * has since left is the corruption this predicate exists to refuse. The loser
  * writes nothing at all, listing rows included, and answers `superseded`.
  *
- * No `message.moved` outbox row: nothing here moved. The optimistic write that
- * pointed the row at the destination never enqueued one either, so the search
- * index still holds the source and a revert has nothing to correct.
- *
  * The caller must have evidence, not an inference: this writes a placement, and
  * a placement written on a guess binds live mail to a uid that names somebody
  * else's message. Two kinds of caller qualify, and nothing else does.