@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.4

package/dist/jobs/job-admin.controller.js

@@ -0,0 +1,347 @@
+"use strict";
+// =============================================================================
+// The queue's admin routes (issue #264, epic #254)
+// =============================================================================
+//
+// Eight routes over two services, mounted at `/api/admin/jobs`: six from #264
+// over `JobAdminService`, and #265's `insights` pair over
+// `JobInsightsService`. The controller does nothing but bind, document and
+// authorize; every decision about what a request means lives in a service, and
+// every decision about what "stuck" means lives further down still, in
+// `job-stuck.service.ts`.
+//
+// TWO SERVICES BEHIND ONE CONTROLLER, and that is deliberate rather than
+// accidental: these are one admin surface to the operator holding it — the
+// same `/api/admin/jobs` prefix, the same two permissions, the same route
+// table whose ORDER is the load-bearing property below. A second controller
+// mounted on the same path would put half of that ordering constraint in a
+// file that cannot see the other half, which is precisely how a `:id` route
+// ends up shadowing a literal one. What is split is the WORK: `insights` is a
+// read-only analytical surface with its own lock-safety contract (see
+// `job-insights.service.ts`), and folding it into `JobAdminService` — which
+// exists to retry, reset and delete rows — would put that contract in a file
+// whose other half writes.
+//
+// -----------------------------------------------------------------------------
+// ⚠ LITERAL ROUTES ARE DECLARED BEFORE `:id`, AND THE ORDER IS LOAD-BEARING
+// -----------------------------------------------------------------------------
+//
+// Nest matches routes in DECLARATION ORDER, not by specificity. Move
+// `@Post(':id/retry')` above `@Post('retry-failed')` and the second route
+// becomes unreachable: `POST /admin/jobs/retry-failed` would match `:id/retry`
+// with `id = 'retry-failed'`... except it would not even get that far, because
+// `retry-failed` has no `/retry` segment — it would instead be `POST :id` if
+// one existed, and `reset-stuck` genuinely WOULD be swallowed by a `:id`
+// route.
+//
+// The failure this prevents is the nastiest kind: no error at boot, no warning
+// in the log, just an operator pressing "reset stuck jobs" and getting a 400
+// about a malformed UUID — or, in a version of this file where `:id` took a
+// plain string, a 404 for a job whose id is the literal text `reset-stuck`.
+// `test/jobs/job-admin.integration.spec.ts` asserts the order by driving
+// `POST /api/admin/jobs/reset-stuck` through the real router and checking that
+// the sweep ran, so re-ordering these methods fails a test rather than a
+// production incident.
+//
+// The declaration order below is therefore: `stats`, `insights`,
+// `insights/reset-history`, `retry-failed`, `reset-stuck`, `/`, then
+// `:id/retry` and `:id`. Keep every literal above every parameterised route.
+//
+// `insights/reset-history` is two segments deep, so today it could not be
+// captured by `:id` (one segment) or by `:id/retry` (whose second segment is
+// literal) whatever the order — but it is declared with the other literals
+// anyway. The rule that survives is "every literal above every parameterised
+// route", not "every literal that would currently break"; a future `:id/:action`
+// route would swallow it silently, and by then nobody is re-deriving which
+// literals were safe by accident.
+//
+// -----------------------------------------------------------------------------
+// TWO PERMISSIONS, SPLIT ON READ VERSUS WRITE
+// -----------------------------------------------------------------------------
+//
+// `jobs:read` for `stats`, `insights` and the list; `jobs:write` for the five
+// routes that change something. Both are seeded to ADMIN ONLY (`prisma/seed-data.ts`), and
+// `@Auth({ roles: [ROLES.ADMIN], permissions: [...] })` states both — the role
+// admits, the permission is what the guard checks. The pair is what a settings
+// card's `permission` field must mirror byte-for-byte (CLAUDE.md, Settings UI
+// Pattern rule 3), so the strings here are the API's half of that contract and
+// must not be approximated on the other side.
+//
+// The split is not decoration. A read of this surface exposes job payload
+// metadata, subject ids and the shape of a deployment's workload; a write can
+// requeue every failed job in the queue or discard the lifetime rollup.
+// `insights/reset-history` sits on the WRITE side even though it deletes no
+// job and changes no job's state, because what it destroys — accumulators
+// summarising rows that have already been purged — is unrecoverable by any
+// other means: the evidence needed to rebuild it is exactly what the purge
+// deleted. A later issue that wants to give an
+// operations role visibility without control has a permission to hand out that
+// does not also hand out the reset button.
+// =============================================================================
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JobAdminController = void 0;
+const common_1 = require("@nestjs/common");
+const swagger_1 = require("@nestjs/swagger");
+const index_1 = require("../identity/index");
+const jobs_constants_1 = require("./jobs.constants");
+const index_2 = require("../core/index");
+const job_admin_service_1 = require("./job-admin.service");
+const job_insights_service_1 = require("./job-insights.service");
+const job_actions_dto_1 = require("./dto/job-actions.dto");
+const job_list_query_dto_1 = require("./dto/job-list-query.dto");
+const job_response_dto_1 = require("./dto/job-response.dto");
+const job_insights_dto_1 = require("./dto/job-insights.dto");
+const job_stats_dto_1 = require("./dto/job-stats.dto");
+let JobAdminController = class JobAdminController {
+    jobs;
+    insights;
+    constructor(jobs, insights) {
+        this.jobs = jobs;
+        this.insights = insights;
+    }
+    // -------------------------------------------------------------------------
+    // Literal routes. These MUST stay above `:id` — see the file header.
+    // -------------------------------------------------------------------------
+    async stats() {
+        return this.jobs.stats();
+    }
+    async getInsights(query) {
+        return this.insights.insights(query);
+    }
+    async resetInsightsHistory() {
+        return this.insights.resetHistory();
+    }
+    async retryFailed(dto) {
+        return this.jobs.retryFailed(dto.type);
+    }
+    async resetStuck(dto) {
+        return this.jobs.resetStuck(dto.olderThanMinutes);
+    }
+    async list(query) {
+        return this.jobs.list(query);
+    }
+    // -------------------------------------------------------------------------
+    // Parameterised routes. Nothing literal may be declared below this line.
+    // -------------------------------------------------------------------------
+    async retry(id) {
+        return this.jobs.retry(id);
+    }
+    async remove(id) {
+        await this.jobs.remove(id);
+    }
+};
+exports.JobAdminController = JobAdminController;
+__decorate([
+    (0, common_1.Get)('stats'),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Summarize the job queue',
+        description: 'Totals, a per-status breakdown, a per-type breakdown with display labels, how many ' +
+            'pending jobs are waiting out a backoff, and how many running jobs the lease reaper ' +
+            'would reclaim right now. `stuckRunning` is counted with the reaper\'s own predicate, ' +
+            'against the threshold reported as `stuckThresholdMinutes`, so the number here and the ' +
+            'rows a reset would touch can never disagree. Cached in-process for about two seconds — ' +
+            'shorter than any sensible dashboard poll, so a deliberate refresh always sees fresh counts.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Queue summary', type: job_stats_dto_1.JobStatsDto }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "stats", null);
+__decorate([
+    (0, common_1.Get)('insights'),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Analyse queue throughput and estimate completion',
+        description: 'Answers the two questions the summary cannot: how long the outstanding work will take, ' +
+            'and whether the queue is getting faster or slower. Returns live counts (including how ' +
+            'many jobs are scheduled, rate-limited or retried), duration percentiles over succeeded ' +
+            'jobs in the window, a per-type completion estimate, and all-time totals merged from the ' +
+            'lifetime rollup. Computed on demand from pure `SELECT`s, so it never blocks the worker ' +
+            'pool it reports on — there is no snapshot table and no background refresh. Each ' +
+            'estimate carries a `basis` saying whether it used that type\'s own history (`live`), ' +
+            'the overall average (`partial`), or no history at all (`none`). Lifetime figures are ' +
+            'counts and averages only: percentiles cannot be reconstructed from purged history.',
+    }),
+    (0, swagger_1.ApiQuery)({
+        name: 'windowDays',
+        required: false,
+        type: Number,
+        description: `Days of history the percentiles cover. Default 7, max ${job_insights_dto_1.MAX_INSIGHTS_WINDOW_DAYS}.`,
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Queue insights', type: job_insights_dto_1.JobInsightsDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'windowDays out of range' }),
+    __param(0, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [job_insights_dto_1.JobInsightsQueryDto]),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "getInsights", null);
+__decorate([
+    (0, common_1.Post)('insights/reset-history'),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Clear the lifetime statistics rollup',
+        description: 'Deletes every `JobStatsRollup` row — the accumulators that preserve counts and durations ' +
+            'for jobs the history purge has already deleted — and returns how many were removed (one ' +
+            'per job type, not one per job). Live job rows are NOT touched: no job is deleted, no ' +
+            'job changes state, and every live-derived number in the insights response is identical ' +
+            'afterwards. Lifetime totals simply restart from the rows still in the table. Intended ' +
+            'for a rollup that has been corrupted or seeded with fictional history, which nothing ' +
+            'else can correct because the rows that would disprove it were purged.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'Rollup rows deleted', type: job_insights_dto_1.ResetHistoryResultDto }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "resetInsightsHistory", null);
+__decorate([
+    (0, common_1.Post)('retry-failed'),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Retry every failed job',
+        description: 'Moves failed jobs back to `pending` with their attempt and rate-limit budgets reset. ' +
+            'Pass `type` to restrict the sweep to one job type. Idempotent: a job it retries is no ' +
+            'longer failed, so calling it twice is harmless. A job whose deduplication key is already ' +
+            'held by a pending or running job is counted in `skipped` rather than retried — the work ' +
+            'it describes is already queued. At most 500 rows per call; check `remaining`.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'What the sweep did', type: job_actions_dto_1.RetryFailedResultDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error' }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [job_actions_dto_1.RetryFailedDto]),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "retryFailed", null);
+__decorate([
+    (0, common_1.Post)('reset-stuck'),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Reclaim jobs abandoned by their executor',
+        description: 'Runs the lease reaper on demand: running jobs whose claim has aged out, whose lease has ' +
+            'expired, or that were never stamped at all are requeued, and those that have already ' +
+            'spent their attempt budget are failed permanently. Send an empty body to use the ' +
+            '`jobs.stuckThresholdMinutes` system setting — the same threshold the scheduled sweep ' +
+            'uses. `olderThanMinutes` overrides it for this call only, and is echoed back as ' +
+            '`thresholdMinutes`.',
+    }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'What the sweep did', type: job_actions_dto_1.ResetStuckResultDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'Validation error' }),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [job_actions_dto_1.ResetStuckDto]),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "resetStuck", null);
+__decorate([
+    (0, common_1.Get)(),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_READ] }),
+    (0, swagger_1.ApiOperation)({
+        summary: 'List jobs',
+        description: 'Newest first, filterable and paginated. `scheduled=true` selects pending jobs waiting ' +
+            'out a backoff and OVERRIDES any `status` sent with it, because a job in backoff is ' +
+            'pending by definition. `processedWithin` filters on when a job last did something — ' +
+            '`finishedAt`, falling back to `createdAt` — so a job enqueued days ago that failed a ' +
+            'minute ago still appears in the 4-hour window. Job payloads are not included.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'page', required: false, type: Number }),
+    (0, swagger_1.ApiQuery)({ name: 'pageSize', required: false, type: Number, description: 'Max 100.' }),
+    (0, swagger_1.ApiQuery)({ name: 'status', required: false, enum: job_response_dto_1.JOB_STATUSES }),
+    (0, swagger_1.ApiQuery)({ name: 'type', required: false, type: String }),
+    (0, swagger_1.ApiQuery)({ name: 'subjectType', required: false, type: String }),
+    (0, swagger_1.ApiQuery)({ name: 'subjectId', required: false, type: String }),
+    (0, swagger_1.ApiQuery)({
+        name: 'scheduled',
+        required: false,
+        enum: ['true', 'false'],
+        description: 'true selects pending jobs in backoff and overrides `status`.',
+    }),
+    (0, swagger_1.ApiQuery)({ name: 'processedWithin', required: false, enum: job_list_query_dto_1.PROCESSED_WITHIN_VALUES }),
+    (0, swagger_1.ApiQuery)({
+        name: 'orgId',
+        required: false,
+        type: String,
+        format: 'uuid',
+        description: "Only this organization's jobs. Omitted, every job is listed, system jobs (`orgId: null`) included.",
+    }),
+    (0, index_2.ApiDataResponse)(job_response_dto_1.JobDto, { pagination: 'flat', description: 'Paginated job list' }),
+    __param(0, (0, common_1.Query)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [job_list_query_dto_1.JobListQueryDto]),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "list", null);
+__decorate([
+    (0, common_1.Post)(':id/retry'),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.OK),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Retry one job',
+        description: 'Resets the job to `pending` with its attempt count, error, schedule, rate-limit counters ' +
+            'and claim all cleared, so any worker may take it immediately. Refused for a running job: ' +
+            'an executor may still be working on it, and resetting the row would let a second worker ' +
+            'take the same job. Use reset-stuck for a job whose executor is gone — it checks the lease.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 200, description: 'The job as it now stands', type: job_response_dto_1.JobDto }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'The job is running and cannot be retried' }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Job not found' }),
+    (0, swagger_1.ApiResponse)({
+        status: 409,
+        description: 'Another pending or running job already holds this job\'s deduplication key',
+    }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "retry", null);
+__decorate([
+    (0, common_1.Delete)(':id'),
+    (0, index_1.Auth)({ roles: [jobs_constants_1.ROLES.ADMIN], permissions: [jobs_constants_1.PERMISSIONS.JOBS_WRITE] }),
+    (0, common_1.HttpCode)(common_1.HttpStatus.NO_CONTENT),
+    (0, swagger_1.ApiOperation)({
+        summary: 'Delete one job',
+        description: 'Removes the row. Refused for a running job: deleting it would not stop its executor, ' +
+            'which would then finish, find no row to write to, and leave work that ran with no record ' +
+            'that it existed — while its freed deduplication key let a duplicate be enqueued. Also ' +
+            'refused (409) when the feature that owns the job vetoes it: a pending broadcast start or ' +
+            'chunk job whose broadcast is still `scheduled` or `sending` is what advances that ' +
+            'broadcast, and deleting it would strand it — cancel the broadcast instead. Terminal ' +
+            '(succeeded/failed) jobs are never vetoed.',
+    }),
+    (0, swagger_1.ApiParam)({ name: 'id', type: String, format: 'uuid' }),
+    (0, swagger_1.ApiResponse)({ status: 204, description: 'Job deleted' }),
+    (0, swagger_1.ApiResponse)({ status: 400, description: 'The job is running and cannot be deleted' }),
+    (0, swagger_1.ApiResponse)({ status: 404, description: 'Job not found' }),
+    (0, swagger_1.ApiResponse)({
+        status: 409,
+        description: 'The job\'s owning feature refused the delete. `message` is the owner\'s reason, written ' +
+            'for the operator; `details` is `{ jobId, status, reason }` where `reason` is ' +
+            '`owner_refused` (the owner said no — e.g. the job\'s broadcast is still scheduled or ' +
+            'sending) or `owner_check_failed` (the owner could not answer, so the delete is refused ' +
+            'rather than risked; retry later).',
+    }),
+    __param(0, (0, common_1.Param)('id', common_1.ParseUUIDPipe)),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], JobAdminController.prototype, "remove", null);
+exports.JobAdminController = JobAdminController = __decorate([
+    (0, swagger_1.ApiTags)('Jobs'),
+    (0, common_1.Controller)('admin/jobs'),
+    __metadata("design:paramtypes", [job_admin_service_1.JobAdminService,
+        job_insights_service_1.JobInsightsService])
+], JobAdminController);
+//# sourceMappingURL=job-admin.controller.js.map

package/dist/jobs/job-admin.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-admin.controller.js","sourceRoot":"","sources":["../../src/jobs/job-admin.controller.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,mDAAmD;AACnD,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,0DAA0D;AAC1D,2EAA2E;AAC3E,+EAA+E;AAC/E,uEAAuE;AACvE,0BAA0B;AAC1B,EAAE;AACF,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,8EAA8E;AAC9E,sEAAsE;AACtE,4EAA4E;AAC5E,6EAA6E;AAC7E,2BAA2B;AAC3B,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,qEAAqE;AACrE,0EAA0E;AAC1E,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,yEAAyE;AACzE,SAAS;AACT,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,+EAA+E;AAC/E,yEAAyE;AACzE,uBAAuB;AACvB,EAAE;AACF,iEAAiE;AACjE,qEAAqE;AACrE,6EAA6E;AAC7E,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,6EAA6E;AAC7E,iFAAiF;AACjF,2EAA2E;AAC3E,kCAAkC;AAClC,EAAE;AACF,gFAAgF;AAChF,8CAA8C;AAC9C,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,2FAA2F;AAC3F,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,+CAA+C;AAC/C,+EAA+E;AAC/E,2CAA2C;AAC3C,gFAAgF;;;;;;;;;;;;;;;AAEhF,2CAWwB;AACxB,6CAAyF;AAEzF,6CAAyC;AACzC,qDAAsD;AACtD,yCAAgD;AAChD,2DAAsD;AACtD,iEAA4D;AAC5D,2DAK+B;AAC/B,iEAAoF;AACpF,6DAA8D;AAC9D,6DAKgC;AAChC,uDAAkD;AAI3C,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAEV;IACA;IAFnB,YACmB,IAAqB,EACrB,QAA4B;QAD5B,SAAI,GAAJ,IAAI,CAAiB;QACrB,aAAQ,GAAR,QAAQ,CAAoB;IAC5C,CAAC;IAEJ,4EAA4E;IAC5E,qEAAqE;IACrE,4EAA4E;IAetE,AAAN,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAyBK,AAAN,KAAK,CAAC,WAAW,CAAU,KAA0B;QACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAiBK,AAAN,KAAK,CAAC,oBAAoB;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC;IAgBK,AAAN,KAAK,CAAC,WAAW,CAAS,GAAmB;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAiBK,AAAN,KAAK,CAAC,UAAU,CAAS,GAAkB;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACpD,CAAC;IAkCK,AAAN,KAAK,CAAC,IAAI,CAAU,KAAsB;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,4EAA4E;IAqBtE,AAAN,KAAK,CAAC,KAAK,CAA6B,EAAU;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IA6BK,AAAN,KAAK,CAAC,MAAM,CAA6B,EAAU;QACjD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;CACF,CAAA;AA3MY,gDAAkB;AAuBvB;IAbL,IAAA,YAAG,EAAC,OAAO,CAAC;IACZ,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,SAAS,CAAC,EAAE,CAAC;IACpE,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,yBAAyB;QAClC,WAAW,EACT,qFAAqF;YACrF,qFAAqF;YACrF,uFAAuF;YACvF,wFAAwF;YACxF,yFAAyF;YACzF,6FAA6F;KAChG,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,2BAAW,EAAE,CAAC;;;;+CAG7E;AAyBK;IAvBL,IAAA,YAAG,EAAC,UAAU,CAAC;IACf,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,SAAS,CAAC,EAAE,CAAC;IACpE,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACT,yFAAyF;YACzF,wFAAwF;YACxF,yFAAyF;YACzF,0FAA0F;YAC1F,yFAAyF;YACzF,kFAAkF;YAClF,uFAAuF;YACvF,uFAAuF;YACvF,oFAAoF;KACvF,CAAC;IACD,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,yDAAyD,2CAAwB,GAAG;KAClG,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,gBAAgB,EAAE,IAAI,EAAE,iCAAc,EAAE,CAAC;IACjF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,yBAAyB,EAAE,CAAC;IAClD,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAQ,sCAAmB;;qDAEpD;AAiBK;IAfL,IAAA,aAAI,EAAC,wBAAwB,CAAC;IAC9B,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IACrE,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EACT,2FAA2F;YAC3F,0FAA0F;YAC1F,uFAAuF;YACvF,yFAAyF;YACzF,wFAAwF;YACxF,uFAAuF;YACvF,uEAAuE;KAC1E,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,qBAAqB,EAAE,IAAI,EAAE,wCAAqB,EAAE,CAAC;;;;8DAG7F;AAgBK;IAdL,IAAA,aAAI,EAAC,cAAc,CAAC;IACpB,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IACrE,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACT,uFAAuF;YACvF,wFAAwF;YACxF,2FAA2F;YAC3F,0FAA0F;YAC1F,+EAA+E;KAClF,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,sCAAoB,EAAE,CAAC;IAC3F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC3C,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,gCAAc;;qDAE5C;AAiBK;IAfL,IAAA,aAAI,EAAC,aAAa,CAAC;IACnB,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IACrE,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,0CAA0C;QACnD,WAAW,EACT,0FAA0F;YAC1F,uFAAuF;YACvF,mFAAmF;YACnF,uFAAuF;YACvF,kFAAkF;YAClF,qBAAqB;KACxB,CAAC;IACD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,qCAAmB,EAAE,CAAC;IAC1F,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;IAC5C,WAAA,IAAA,aAAI,GAAE,CAAA;;qCAAM,+BAAa;;oDAE1C;AAkCK;IAhCL,IAAA,YAAG,GAAE;IACL,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,SAAS,CAAC,EAAE,CAAC;IACpE,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,WAAW;QACpB,WAAW,EACT,wFAAwF;YACxF,qFAAqF;YACrF,sFAAsF;YACtF,uFAAuF;YACvF,+EAA+E;KAClF,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACtF,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,+BAAY,EAAE,CAAC;IACjE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACzD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChE,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9D,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QACvB,WAAW,EAAE,8DAA8D;KAC5E,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,4CAAuB,EAAE,CAAC;IACrF,IAAA,kBAAQ,EAAC;QACR,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,oGAAoG;KAClH,CAAC;IACD,IAAA,uBAAe,EAAC,yBAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC;IACvE,WAAA,IAAA,cAAK,GAAE,CAAA;;qCAAQ,oCAAe;;8CAEzC;AAyBK;IAnBL,IAAA,aAAI,EAAC,WAAW,CAAC;IACjB,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IACrE,IAAA,iBAAQ,EAAC,mBAAU,CAAC,EAAE,CAAC;IACvB,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,eAAe;QACxB,WAAW,EACT,2FAA2F;YAC3F,2FAA2F;YAC3F,0FAA0F;YAC1F,4FAA4F;KAC/F,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0BAA0B,EAAE,IAAI,EAAE,yBAAM,EAAE,CAAC;IACnF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;IACrF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAC1D,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,4EAA4E;KAC1F,CAAC;IACW,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;+CAEtC;AA6BK;IA3BL,IAAA,eAAM,EAAC,KAAK,CAAC;IACb,IAAA,YAAI,EAAC,EAAE,KAAK,EAAE,CAAC,sBAAK,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC,4BAAW,CAAC,UAAU,CAAC,EAAE,CAAC;IACrE,IAAA,iBAAQ,EAAC,mBAAU,CAAC,UAAU,CAAC;IAC/B,IAAA,sBAAY,EAAC;QACZ,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACT,uFAAuF;YACvF,2FAA2F;YAC3F,wFAAwF;YACxF,2FAA2F;YAC3F,oFAAoF;YACpF,sFAAsF;YACtF,2CAA2C;KAC9C,CAAC;IACD,IAAA,kBAAQ,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACtD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IACxD,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;IACrF,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;IAC1D,IAAA,qBAAW,EAAC;QACX,MAAM,EAAE,GAAG;QACX,WAAW,EACT,0FAA0F;YAC1F,+EAA+E;YAC/E,uFAAuF;YACvF,yFAAyF;YACzF,mCAAmC;KACtC,CAAC;IACY,WAAA,IAAA,cAAK,EAAC,IAAI,EAAE,sBAAa,CAAC,CAAA;;;;gDAEvC;6BA1MU,kBAAkB;IAF9B,IAAA,iBAAO,EAAC,MAAM,CAAC;IACf,IAAA,mBAAU,EAAC,YAAY,CAAC;qCAGE,mCAAe;QACX,yCAAkB;GAHpC,kBAAkB,CA2M9B"}

package/dist/jobs/job-admin.service.d.ts

@@ -0,0 +1,228 @@
+import { type Job, type JobsPrisma } from './data/jobs-db';
+import { JobClock } from './job-clock';
+import { JobHandlerRegistry } from './job-handler.registry';
+import { JobStuckService } from './job-stuck.service';
+import { JobListQuery } from './dto/job-list-query.dto';
+import { JobStatsResult } from './dto/job-stats.dto';
+/** How long a stats roll-up may be reused. See the file header for the sizing. */
+export declare const STATS_CACHE_TTL_MS = 2000;
+/**
+ * The most failed rows one `retry-failed` call will touch.
+ *
+ * A cap exists because the sweep is a loop of single-row updates (header), so
+ * its cost is linear in the number of failed jobs — and "how many jobs failed"
+ * is not a number this code gets to bound. Without a cap, one click against a
+ * queue that has been failing all weekend would hold a request open for
+ * minutes and time out somewhere in the middle, having done an unknown amount
+ * of work.
+ *
+ * The response reports `remaining`, so the honest answer to a queue with more
+ * failures than this is "press it again", which is safe: the sweep is
+ * idempotent, and a row it already retried is no longer `failed` and is no
+ * longer a candidate.
+ */
+export declare const RETRY_FAILED_BATCH_LIMIT = 500;
+/**
+ * The list's page, in the flat shape every paginated list in this API uses.
+ *
+ * @stability experimental
+ */
+export interface JobListResult {
+    /** The page's rows, newest first. */
+    items: JobListItem[];
+    /** Rows matching the filters, across every page. */
+    total: number;
+    /** The 1-based page returned. */
+    page: number;
+    /** Rows per page. */
+    pageSize: number;
+    /** Pages at this page size. */
+    totalPages: number;
+}
+/**
+ * A row as the list publishes it: the projection below, plus `typeLabel` and `reasonLabel`.
+ *
+ * The omission list must match `JOB_LIST_SELECT`'s — see that constant for why
+ * `payload` and `claimToken` are the two columns this API does not publish.
+  *
+  * @stability experimental
+ */
+export type JobListItem = Omit<Job, 'payload' | 'claimToken' | 'traceContext'> & {
+    /** `type` through `jobTypeLabel()`; equal to `type` when unlabelled. */
+    typeLabel: string;
+    /** `reason` through `jobReasonLabel()`; equal to `reason` when unregistered. */
+    reasonLabel: string;
+};
+/**
+ * What a retry-failed sweep did.
+ *
+ * @stability experimental
+ */
+export interface RetryFailedResult {
+    /** Rows moved back to `pending`. */
+    retried: number;
+    /** Rows left `failed` because an active job already holds their dedup key. */
+    skipped: number;
+    /** Failed rows still matching the scope after the sweep. */
+    remaining: number;
+}
+/**
+ * What an admin reset-stuck sweep did.
+ *
+ * @stability experimental
+ */
+export interface ResetStuckAdminResult {
+    /** Rows requeued as `pending`. */
+    reset: number;
+    /** Rows failed permanently because their attempt budget was spent. */
+    failed: number;
+    /** The threshold applied, from the body or the settings. */
+    thresholdMinutes: number;
+}
+/**
+ * The `/api/admin/jobs` read and repair side: list, stats, retry, retry-failed, reset-stuck, delete.
+ *
+ * @stability experimental
+ */
+export declare class JobAdminService {
+    private readonly prisma;
+    private readonly stuck;
+    private readonly registry;
+    private readonly clock;
+    private readonly logger;
+    /** The last roll-up and the millisecond it was taken. `null` until the first. */
+    private statsCache;
+    constructor(prisma: JobsPrisma, stuck: JobStuckService, registry: JobHandlerRegistry, clock?: JobClock);
+    /**
+     * The queue summary, from cache when it is younger than
+     * `STATS_CACHE_TTL_MS`.
+     *
+     * FOUR QUERIES, and the shape of each is chosen for the index it can use:
+     *
+     *   1. `groupBy(['status'])` and
+     *   2. `groupBy(['type', 'status'])` are both UNCONDITIONAL — no `where` at
+     *      all — so Postgres can answer them with an index-only scan of
+     *      `jobs(status, type, id)`, the covering index added for exactly this
+     *      pair in `schema.prisma`. Adding a filter to either (a date window,
+     *      say) would push them onto the heap and turn the cheapest part of this
+     *      response into the most expensive.
+     *   3. the `scheduled` count uses
+     * `jobs(status, scheduled_for, priority, created_at)` — the same index the claim query walks.
+     *   4. the `stuckRunning` count uses `jobs(status, lease_expires_at)` for the
+     *      lease signals — which since #347 are three of the predicate's four
+     *      clauses, so this count leans on that index harder than it used to.
+     *
+     * `total` is SUMMED FROM (1) rather than asked for as a fifth `count()`:
+     * a separate count would be taken at a different instant from the breakdown
+     * it heads, so on a busy queue the tile would not equal the sum of the tiles
+     * beneath it — the one arithmetic error a person reading a dashboard always
+     * notices and never forgives.
+     */
+    stats(): Promise<JobStatsResult>;
+    /**
+     * One page of rows, newest first.
+     *
+     * `orderBy: { createdAt: 'desc' }` is served by the dedicated
+     * `jobs(created_at DESC)` index, and it is the only ordering offered: the
+     * question this table answers is "what has been happening", and a sortable
+     * column set would need an index per column to stay usable at the sizes a
+     * queue reaches.
+     */
+    list(query: JobListQuery): Promise<JobListResult>;
+    /**
+     * Translates the query parameters into one `where`.
+     *
+     * Extracted from `list` so that the precedence rule below is stated once and
+     * can be asserted directly by a test, rather than only through a query the
+     * test has to reconstruct.
+     */
+    private buildListWhere;
+    /**
+     * Puts every failed job (optionally of one type) back to `pending`.
+     *
+     * A LOOP OF SINGLE-ROW UPDATES, not one `updateMany`, and the header says
+     * why: a dedup collision anywhere in a bulk statement aborts all of it, so a
+     * single duplicate would block the retry of every other failed row. Here a
+     * collision is one `skipped`, counted and stepped over.
+     *
+     * Each update re-asserts `status: 'failed'` alongside the id rather than
+     * updating by id alone. Between the `findMany` that produced the candidate
+     * list and the write, another admin's click or a concurrent enqueue may
+     * already have moved the row; re-asserting makes that a no-op instead of
+     * resetting `attempts` on a job that is now happily running — the same
+     * defensive shape `JobStuckService`'s give-up phase uses.
+     *
+     * Idempotent: nothing is `failed` after a successful sweep, so an immediate
+     * second call finds no candidates and reports zeroes.
+     */
+    retryFailed(type?: string): Promise<RetryFailedResult>;
+    /**
+     * Reclaims abandoned `running` jobs, by DELEGATING to
+     * `JobStuckService.resetStuck` — the same two-phase sweep the lease reaper's
+     * cron runs, reached through the same method.
+     *
+     * The threshold is resolved HERE, once, so that the response can report the
+     * number that was actually applied. Resolving it means calling
+     * `getStuckThresholdMinutes()` when the body omitted `olderThanMinutes` —
+     * the single read path for that setting — and then handing the resolved
+     * value down. That is not a second default: the value still comes from
+     * settings, it is just observed on the way past. Letting `resetStuck` read it
+     * again instead would leave this method with no honest number to publish, and
+     * a re-read could in principle return a different one.
+     */
+    resetStuck(olderThanMinutes?: number): Promise<ResetStuckAdminResult>;
+    /**
+     * Retries ONE job.
+     *
+     * 404 when there is no such row, 400 when it is `running`. The running case
+     * is a refusal rather than a force-reset because there may be an executor
+     * alive on the other end of that claim: resetting the row would give a
+     * second worker the same job while the first is still working on it, and the
+     * dedup index cannot stop that — the row's key moves with the row. An
+     * operator who believes the executor is gone has a correct tool for exactly
+     * that, `reset-stuck`, which checks the lease before it acts.
+     *
+     * The guard is a re-read followed by a conditional write rather than a
+     * check-then-update by id, so a job that starts running in between is
+     * refused by the WRITE (count 0) instead of being reset under a live
+     * executor. Both paths answer 400, so the race is invisible to the caller.
+     */
+    retry(id: string): Promise<JobListItem>;
+    /**
+     * Deletes ONE job.
+     *
+     * The same 404/400 pair as {@link retry}, and the running refusal matters
+     * more here: deleting a claimed row does not stop the executor that holds it.
+     * The work carries on, and its terminal write then matches no row and is
+     * answered `claim-lost` by `safeTerminalUpdate` (#477: every terminal write
+     * is conditional on the claim, so a deleted row is simply one that claim no
+     * longer holds) — so the job runs to completion with no record that it ever
+     * existed, and its dedup key is freed while it is still running, letting a
+     * duplicate be enqueued underneath it.
+     *
+     * THE OWNER'S VETO (#480). A non-running row can still be load-bearing for
+     * state a feature keeps outside `jobs` — the pending `admin.broadcast.start`
+     * that will fire a `scheduled` broadcast, or the pending
+     * `admin.broadcast.chunk` that advances a `sending` one. A delete is not a
+     * settlement: no `job.settled` fires, so no listener ever learns the row is
+     * gone, and the feature's state is stranded. So before deleting, the row's
+     * handler is asked through the optional `JobHandler.canDelete`; a non-null
+     * answer is a 409 (`details.reason: 'owner_refused'`) carrying the handler's
+     * reason as the message. A handler that THROWS refuses too (fail closed,
+     * `details.reason: 'owner_check_failed'`): the delete is irreversible and the
+     * refusal is not. A type with no registered handler (a fork removed it) or
+     * a handler without `canDelete` keeps the pre-#480 behaviour — allowed.
+     *
+     * The veto is advisory against a concurrent change in the feature's state
+     * (the handler's read and the delete are not one transaction); the
+     * conditional `deleteMany` still closes the race that matters to the queue
+     * itself, a row becoming `running` in between.
+     */
+    remove(id: string): Promise<void>;
+    /**
+     * Asks the row's handler whether it may be deleted (#480), throwing the 409
+     * when it says no or cannot answer. See {@link remove}.
+     */
+    private assertOwnerAllowsDelete;
+}
+//# sourceMappingURL=job-admin.service.d.ts.map

package/dist/jobs/job-admin.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-admin.service.d.ts","sourceRoot":"","sources":["../../src/jobs/job-admin.service.ts"],"names":[],"mappings":"AAmGA,OAAO,EAAE,KAAK,GAAG,EAAyB,KAAK,UAAU,EAAuC,MAAM,gBAAgB,CAAC;AAIvH,OAAO,EAAa,QAAQ,EAAkB,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AAGzE,OAAO,EACL,YAAY,EAEb,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAExC;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAE5C;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,qCAAqC;IACrC,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,GAAG,YAAY,GAAG,cAAc,CAAC,GAAG;IAC/E,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AA0HD;;;;GAIG;AACH,qBACa,eAAe;IAOC,OAAO,CAAC,QAAQ,CAAC,MAAM;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACM,OAAO,CAAC,QAAQ,CAAC,KAAK;IATvD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;IAE3D,iFAAiF;IACjF,OAAO,CAAC,UAAU,CAAsD;gBAG5B,MAAM,EAAE,UAAU,EAC3C,KAAK,EAAE,eAAe,EACtB,QAAQ,EAAE,kBAAkB,EACG,KAAK,GAAE,QAAyB;IAOlF;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACG,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC;IAqEtC;;;;;;;;OAQG;IACG,IAAI,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAwBvD;;;;;;OAMG;IACH,OAAO,CAAC,cAAc;IAqCtB;;;;;;;;;;;;;;;;;OAiBG;IACG,WAAW,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA4C5D;;;;;;;;;;;;;OAaG;IACG,UAAU,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAW3E;;;;;;;;;;;;;;;OAeG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAwC7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBvC;;;OAGG;YACW,uBAAuB;CA6BtC"}