@orkestrel/worker 0.0.4 → 0.0.6

package/dist/src/core/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["#queue","#pool","#emitter","#handler","#handle","#bridge","#destroyed"],"sources":["../../../src/core/Worker.ts","../../../src/core/factories.ts"],"sourcesContent":["import type { EmitterInterface } from '@orkestrel/emitter'\nimport type { QueueEntryOptions, QueueExecution } from '@orkestrel/queue'\nimport type { WorkerEventMap, WorkerHandler, WorkerInterface, WorkerOptions } from './types.js'\nimport { Emitter } from '@orkestrel/emitter'\nimport { Pool } from '@orkestrel/pool'\nimport { Queue } from '@orkestrel/queue'\n\n/**\n * A resource-backed job worker — a thin facade composing a `Queue` (`@orkestrel/queue`)\n * with a `Pool` (`@orkestrel/pool`).\n *\n * @remarks\n * - **Composition, not reimplementation.** The Worker owns a `Pool` (built from\n *   `options.pool`) and a `Queue` whose handler ACQUIRES a pooled resource, runs the\n *   user handler against it, and RELEASES it in a `finally`. All concurrency, retries,\n *   timeout, and lifecycle are the Queue's — the Worker adds only the resource pairing.\n * - **Resource ↔ concurrency.** The pool's `max` defaults to the worker's\n *   `concurrency` (default `1`), so at most one resource exists per in-flight job and\n *   idle resources are reused across jobs.\n * - **Acquire over the attempt signal.** Each job acquires using the attempt's\n *   `execution.signal`, so an `abort` / `timeout` while waiting for a resource rejects\n *   the acquire — the Queue then handles retry / rejection, and there is no token to\n *   release (the resource was never leased).\n * - **Lifecycle (§10).** `enqueue` / `restore` / `start` / `stop` / `pause` / `resume` /\n *   `abort` / `clear` delegate to the queue; `count` / `active` / `paused` / `stopped`\n *   read it. `destroy` destroys the queue then tears the pool down, idempotently.\n * - **Durability.** An optional `store` is passed straight through to the queue, so the\n *   worker's outstanding jobs persist; `restore` re-runs them (delegated to the queue).\n * - **Observable (§13).** The owned {@link emitter} ({@link WorkerEventMap}) RE-EXPOSES the\n *   underlying queue's job lifecycle (`enqueue` / `start` / `retry` / `success` / `failure` /\n *   `abort` / `drain`) as the worker's OWN events — bridged from the inner queue's emitter at\n *   construction — so a consumer observes the worker without reaching through to internals.\n *   The bridge re-emits directly on the worker's own emitter; the worker emitter isolates a\n *   listener throw and routes it to its `error` handler (the `error` option), so a buggy\n *   worker observer can never corrupt the inner queue or pool — the bridge listener never\n *   throws, so the inner queue's own emit stays balanced. The pool's create / acquire /\n *   release events stay the pool's internal concern (a Worker manages its own resources);\n *   observe a `Pool` directly for those.\n */\nexport class Worker<TInput, TResource, TResult> implements WorkerInterface<TInput, TResult> {\n\treadonly #queue: Queue<TInput, TResult>\n\treadonly #pool: Pool<TResource>\n\t// The PUSH observation surface (§13) — the worker's OWN emitter, fed by the queue→worker\n\t// bridge. The emitter isolates a worker observer's throw (routing it to the `error`\n\t// handler), so it never escapes into queue or pool.\n\treadonly #emitter: Emitter<WorkerEventMap<TResult>>\n\treadonly #handler: WorkerHandler<TInput, TResource, TResult>\n\t#destroyed = false\n\n\tconstructor(options: WorkerOptions<TInput, TResource, TResult>) {\n\t\tconst concurrency = Math.max(1, options.concurrency ?? 1)\n\t\tthis.#handler = options.handler\n\t\tthis.#emitter = new Emitter<WorkerEventMap<TResult>>({\n\t\t\t...(options.on !== undefined ? { on: options.on } : {}),\n\t\t\t...(options.error !== undefined ? { error: options.error } : {}),\n\t\t})\n\t\tthis.#pool = new Pool<TResource>({\n\t\t\t...options.pool,\n\t\t\tmax: options.pool.max ?? concurrency,\n\t\t})\n\t\tthis.#queue = new Queue<TInput, TResult>({\n\t\t\thandler: this.#handle.bind(this),\n\t\t\tconcurrency,\n\t\t\t...(options.retries !== undefined ? { retries: options.retries } : {}),\n\t\t\t...(options.timeout !== undefined ? { timeout: options.timeout } : {}),\n\t\t\t...(options.store !== undefined ? { store: options.store } : {}),\n\t\t})\n\t\tthis.#bridge()\n\t}\n\n\tget emitter(): EmitterInterface<WorkerEventMap<TResult>> {\n\t\treturn this.#emitter\n\t}\n\n\tget count(): number {\n\t\treturn this.#queue.count\n\t}\n\n\tget active(): number {\n\t\treturn this.#queue.active\n\t}\n\n\tget paused(): boolean {\n\t\treturn this.#queue.paused\n\t}\n\n\tget stopped(): boolean {\n\t\treturn this.#queue.stopped\n\t}\n\n\tenqueue(input: TInput, options?: QueueEntryOptions): Promise<TResult> {\n\t\treturn this.#queue.enqueue(input, options)\n\t}\n\n\trestore(): Promise<void> {\n\t\treturn this.#queue.restore()\n\t}\n\n\tstart(): void {\n\t\tthis.#queue.start()\n\t}\n\n\tstop(): void {\n\t\tthis.#queue.stop()\n\t}\n\n\tpause(): void {\n\t\tthis.#queue.pause()\n\t}\n\n\tresume(): void {\n\t\tthis.#queue.resume()\n\t}\n\n\tabort(reason?: unknown): void {\n\t\tthis.#queue.abort(reason)\n\t}\n\n\tclear(): void {\n\t\tthis.#queue.clear()\n\t}\n\n\tdestroy(): void {\n\t\tif (this.#destroyed) return\n\t\tthis.#destroyed = true\n\t\tthis.#queue.destroy()\n\t\tvoid this.#pool.destroy()\n\t}\n\n\tasync #handle(input: TInput, execution: QueueExecution): Promise<TResult> {\n\t\tconst token = await this.#pool.acquire(execution.signal)\n\t\ttry {\n\t\t\treturn await this.#handler(input, token.value, execution)\n\t\t} finally {\n\t\t\ttoken.release()\n\t\t}\n\t}\n\n\t// Bridge the inner queue's lifecycle onto the worker's OWN emitter, once at construction.\n\t// Each listener re-emits the queue event directly on the worker's emitter, which isolates a\n\t// worker observer's throw (routing it to the worker's `error` handler). Because the bridge\n\t// listener itself never throws, the queue's own `#emitter.emit` — which invoked this\n\t// listener — sees no throw, so the inner queue's engine stays balanced regardless of what a\n\t// worker observer does. The events are already post-transition (they fire from the queue's\n\t// own post-settle / post-wake emits), so this stays observation.\n\t#bridge(): void {\n\t\tconst queue = this.#queue.emitter\n\t\tqueue.on('enqueue', (id) => this.#emitter.emit('enqueue', id))\n\t\tqueue.on('start', (id) => this.#emitter.emit('start', id))\n\t\tqueue.on('retry', (id, attempt) => this.#emitter.emit('retry', id, attempt))\n\t\tqueue.on('success', (id, result) => this.#emitter.emit('success', id, result))\n\t\tqueue.on('failure', (id, error) => this.#emitter.emit('failure', id, error))\n\t\tqueue.on('abort', (reason) => this.#emitter.emit('abort', reason))\n\t\tqueue.on('drain', () => this.#emitter.emit('drain'))\n\t}\n}\n","import type { WorkerInterface, WorkerOptions } from './types.js'\nimport { Worker } from './Worker.js'\n\n/**\n * Create a resource-backed job worker — a `Queue` (`@orkestrel/queue`) marrying a `Pool`\n * (`@orkestrel/pool`). Each enqueued input runs through the handler against an\n * automatically acquired pooled resource (released when the job settles), with the\n * queue's bounded concurrency, retries, and per-attempt timeout / abort.\n *\n * @remarks\n * The pool's `max` defaults to `concurrency`, so resources match the jobs in flight and\n * are reused across jobs. A handler that throws still releases its resource (the\n * acquire/release pair brackets the call in a `finally`), so a later job reuses it. The\n * lifecycle (`start` / `stop` / `pause` / `resume` / `abort` / `clear` / `destroy`)\n * delegates to the queue; `destroy` also tears the pool down. Observable (§13): a typed\n * `emitter` surfaces the queue lifecycle (`enqueue` / `start` / `success` / `failure` / …).\n *\n * @typeParam TInput - The work input each job carries\n * @typeParam TResource - The pooled resource each job runs against\n * @typeParam TResult - The value the handler resolves for a job\n * @param options - The `handler` and `pool` plus optional `concurrency` (default `1`),\n *   `retries` (default `0`), and a default per-attempt `timeout` in milliseconds\n * @returns A working {@link WorkerInterface}\n *\n * @example\n * ```ts\n * import { createWorker } from '@src/core'\n *\n * const worker = createWorker<Query, Connection, Rows>({\n * \tpool: { create: () => connect(), destroy: (connection) => connection.close() },\n * \thandler: (query, connection, { signal }) => connection.run(query, signal),\n * \tconcurrency: 4,\n * \tretries: 1,\n * })\n *\n * const rows = await worker.enqueue(query)\n * ```\n */\nexport function createWorker<TInput, TResource, TResult>(\n\toptions: WorkerOptions<TInput, TResource, TResult>,\n): WorkerInterface<TInput, TResult> {\n\treturn new Worker(options)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,IAAa,SAAb,MAA4F;CAC3F;CACA;CAIA;CACA;CACA,aAAa;CAEb,YAAY,SAAoD;EAC/D,MAAM,cAAc,KAAK,IAAI,GAAG,QAAQ,eAAe,CAAC;EACxD,KAAKG,WAAW,QAAQ;EACxB,KAAKD,WAAW,IAAI,QAAiC;GACpD,GAAI,QAAQ,OAAO,KAAA,IAAY,EAAE,IAAI,QAAQ,GAAG,IAAI,CAAC;GACrD,GAAI,QAAQ,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EAC/D,CAAC;EACD,KAAKD,QAAQ,IAAI,KAAgB;GAChC,GAAG,QAAQ;GACX,KAAK,QAAQ,KAAK,OAAO;EAC1B,CAAC;EACD,KAAKD,SAAS,IAAI,MAAuB;GACxC,SAAS,KAAKI,QAAQ,KAAK,IAAI;GAC/B;GACA,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;GACpE,GAAI,QAAQ,YAAY,KAAA,IAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;GACpE,GAAI,QAAQ,UAAU,KAAA,IAAY,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;EAC/D,CAAC;EACD,KAAKC,QAAQ;CACd;CAEA,IAAI,UAAqD;EACxD,OAAO,KAAKH;CACb;CAEA,IAAI,QAAgB;EACnB,OAAO,KAAKF,OAAO;CACpB;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAKA,OAAO;CACpB;CAEA,IAAI,SAAkB;EACrB,OAAO,KAAKA,OAAO;CACpB;CAEA,IAAI,UAAmB;EACtB,OAAO,KAAKA,OAAO;CACpB;CAEA,QAAQ,OAAe,SAA+C;EACrE,OAAO,KAAKA,OAAO,QAAQ,OAAO,OAAO;CAC1C;CAEA,UAAyB;EACxB,OAAO,KAAKA,OAAO,QAAQ;CAC5B;CAEA,QAAc;EACb,KAAKA,OAAO,MAAM;CACnB;CAEA,OAAa;EACZ,KAAKA,OAAO,KAAK;CAClB;CAEA,QAAc;EACb,KAAKA,OAAO,MAAM;CACnB;CAEA,SAAe;EACd,KAAKA,OAAO,OAAO;CACpB;CAEA,MAAM,QAAwB;EAC7B,KAAKA,OAAO,MAAM,MAAM;CACzB;CAEA,QAAc;EACb,KAAKA,OAAO,MAAM;CACnB;CAEA,UAAgB;EACf,IAAI,KAAKM,YAAY;EACrB,KAAKA,aAAa;EAClB,KAAKN,OAAO,QAAQ;EACpB,KAAUC,MAAM,QAAQ;CACzB;CAEA,MAAMG,QAAQ,OAAe,WAA6C;EACzE,MAAM,QAAQ,MAAM,KAAKH,MAAM,QAAQ,UAAU,MAAM;EACvD,IAAI;GACH,OAAO,MAAM,KAAKE,SAAS,OAAO,MAAM,OAAO,SAAS;EACzD,UAAU;GACT,MAAM,QAAQ;EACf;CACD;CASA,UAAgB;EACf,MAAM,QAAQ,KAAKH,OAAO;EAC1B,MAAM,GAAG,YAAY,OAAO,KAAKE,SAAS,KAAK,WAAW,EAAE,CAAC;EAC7D,MAAM,GAAG,UAAU,OAAO,KAAKA,SAAS,KAAK,SAAS,EAAE,CAAC;EACzD,MAAM,GAAG,UAAU,IAAI,YAAY,KAAKA,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC;EAC3E,MAAM,GAAG,YAAY,IAAI,WAAW,KAAKA,SAAS,KAAK,WAAW,IAAI,MAAM,CAAC;EAC7E,MAAM,GAAG,YAAY,IAAI,UAAU,KAAKA,SAAS,KAAK,WAAW,IAAI,KAAK,CAAC;EAC3E,MAAM,GAAG,UAAU,WAAW,KAAKA,SAAS,KAAK,SAAS,MAAM,CAAC;EACjE,MAAM,GAAG,eAAe,KAAKA,SAAS,KAAK,OAAO,CAAC;CACpD;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACrHA,SAAgB,aACf,SACmC;CACnC,OAAO,IAAI,OAAO,OAAO;AAC1B"}
+{"version":3,"file":"index.js","names":["#queue","#pool","#emitter","#handler","#handle","#bridge","#ending","#teardown"],"sources":["../../../src/core/Worker.ts","../../../src/core/factories.ts"],"sourcesContent":["import type { EmitterInterface } from '@orkestrel/emitter'\nimport type { QueueEntryOptions, QueueExecution } from '@orkestrel/queue'\nimport type { WorkerEventMap, WorkerHandler, WorkerInterface, WorkerOptions } from './types.js'\nimport { Emitter } from '@orkestrel/emitter'\nimport { Pool } from '@orkestrel/pool'\nimport { Queue } from '@orkestrel/queue'\n\n/**\n * A resource-backed job worker — a thin facade composing a `Queue` (`@orkestrel/queue`)\n * with a `Pool` (`@orkestrel/pool`).\n *\n * @remarks\n * - **Composition, not reimplementation.** The Worker owns a `Pool` (built from\n *   `options.pool`) and a `Queue` whose handler ACQUIRES a pooled resource, runs the\n *   user handler against it, and RELEASES it in a `finally`. All concurrency, retries,\n *   timeout, and lifecycle are the Queue's — the Worker adds only the resource pairing.\n * - **Resource ↔ concurrency.** The queue strictly validates `concurrency` as a positive\n *   safe integer after caller options are captured once. Only `undefined` defaults\n *   `concurrency` to `1` or pool `max` to that value; runtime `null` reaches the owning\n *   validator. The queue validates before the pool option is read; every declared pool member\n *   is then captured once by direct access, preserving inherited and non-enumerable structural\n *   options. At most one resource exists per in-flight job by default, and idle resources are\n *   reused across jobs.\n * - **Acquire over the attempt signal.** Each job acquires using the attempt's\n *   `execution.signal`, so an `abort` / `timeout` while waiting for a resource rejects\n *   the acquire — the Queue then handles retry / rejection, and there is no token to\n *   release (the resource was never leased).\n * - **Lifecycle (§10).** `enqueue` / `restore` / `start` / `stop` / `pause` / `resume` /\n *   `abort` / `clear` delegate to the queue; `count` / `active` / `paused` / `stopped`\n *   read it. `stop` / `abort` / `clear` return the queue's own cleanup barriers.\n *   `destroy` returns one stable barrier while it tears down the queue, then the pool,\n *   and destroys the worker emitter last. A sole cleanup failure is preserved by\n *   identity; failures from both layers become an ordered `AggregateError`.\n * - **Durability.** An optional `store` is passed straight through to the queue, so the\n *   worker's outstanding jobs persist; `restore` re-runs them (delegated to the queue).\n * - **Observable (§13).** The owned {@link emitter} ({@link WorkerEventMap}) RE-EXPOSES the\n *   underlying queue's job lifecycle (`enqueue` / `start` / `retry` / `success` / `failure` /\n *   `abort` / `drain`) as the worker's OWN events — bridged from the inner queue's emitter at\n *   construction — so a consumer observes the worker without reaching through to internals.\n *   The bridge re-emits directly on the worker's own emitter; the worker emitter isolates a\n *   listener throw and routes it to its `error` handler (the `error` option), so a buggy\n *   worker observer can never corrupt the inner queue or pool — the bridge listener never\n *   throws, so the inner queue's own emit stays balanced. The pool's create / acquire /\n *   release events stay the pool's internal concern (a Worker manages its own resources);\n *   observe a `Pool` directly for those.\n */\nexport class Worker<TInput, TResource, TResult> implements WorkerInterface<TInput, TResult> {\n\treadonly #queue: Queue<TInput, TResult>\n\treadonly #pool: Pool<TResource>\n\t// The PUSH observation surface (§13) — the worker's OWN emitter, fed by the queue→worker\n\t// bridge. The emitter isolates a worker observer's throw (routing it to the `error`\n\t// handler), so it never escapes into queue or pool.\n\treadonly #emitter: Emitter<WorkerEventMap<TResult>>\n\treadonly #handler: WorkerHandler<TInput, TResource, TResult>\n\t#ending: PromiseWithResolvers<void> | undefined\n\n\tconstructor(options: WorkerOptions<TInput, TResource, TResult>) {\n\t\tconst {\n\t\t\tconcurrency: capturedConcurrency,\n\t\t\thandler,\n\t\t\ton,\n\t\t\terror,\n\t\t\tretries,\n\t\t\ttimeout,\n\t\t\tstore,\n\t\t} = options\n\t\tconst concurrency = capturedConcurrency === undefined ? 1 : capturedConcurrency\n\t\tthis.#handler = handler\n\t\tthis.#emitter = new Emitter<WorkerEventMap<TResult>>({\n\t\t\t...(on !== undefined ? { on } : {}),\n\t\t\t...(error !== undefined ? { error } : {}),\n\t\t})\n\t\tthis.#queue = new Queue<TInput, TResult>({\n\t\t\thandler: this.#handle.bind(this),\n\t\t\tconcurrency,\n\t\t\t...(retries !== undefined ? { retries } : {}),\n\t\t\t...(timeout !== undefined ? { timeout } : {}),\n\t\t\t...(store !== undefined ? { store } : {}),\n\t\t})\n\t\tconst pool = options.pool\n\t\tconst { max, on: poolOn, error: poolError, create, destroy, validate } = pool\n\t\tthis.#pool = new Pool<TResource>({\n\t\t\tcreate,\n\t\t\tmax: max === undefined ? concurrency : max,\n\t\t\t...(poolOn !== undefined ? { on: poolOn } : {}),\n\t\t\t...(poolError !== undefined ? { error: poolError } : {}),\n\t\t\t...(destroy !== undefined ? { destroy } : {}),\n\t\t\t...(validate !== undefined ? { validate } : {}),\n\t\t})\n\t\tthis.#bridge()\n\t}\n\n\tget emitter(): EmitterInterface<WorkerEventMap<TResult>> {\n\t\treturn this.#emitter\n\t}\n\n\tget count(): number {\n\t\treturn this.#queue.count\n\t}\n\n\tget active(): number {\n\t\treturn this.#queue.active\n\t}\n\n\tget paused(): boolean {\n\t\treturn this.#queue.paused\n\t}\n\n\tget stopped(): boolean {\n\t\treturn this.#queue.stopped\n\t}\n\n\tenqueue(input: TInput, options?: QueueEntryOptions): Promise<TResult> {\n\t\treturn this.#queue.enqueue(input, options)\n\t}\n\n\trestore(): Promise<void> {\n\t\treturn this.#queue.restore()\n\t}\n\n\tstart(): void {\n\t\tthis.#queue.start()\n\t}\n\n\tstop(): Promise<void> {\n\t\treturn this.#queue.stop()\n\t}\n\n\tpause(): void {\n\t\tthis.#queue.pause()\n\t}\n\n\tresume(): void {\n\t\tthis.#queue.resume()\n\t}\n\n\tabort(reason?: unknown): Promise<void> {\n\t\treturn this.#queue.abort(reason)\n\t}\n\n\tclear(): Promise<void> {\n\t\treturn this.#queue.clear()\n\t}\n\n\tdestroy(): Promise<void> {\n\t\tif (this.#ending !== undefined) return this.#ending.promise\n\t\tconst ending = Promise.withResolvers<void>()\n\t\tthis.#ending = ending\n\t\tvoid this.#teardown(ending)\n\t\treturn ending.promise\n\t}\n\n\tasync #handle(input: TInput, execution: QueueExecution): Promise<TResult> {\n\t\tconst token = await this.#pool.acquire(execution.signal)\n\t\ttry {\n\t\t\treturn await this.#handler(input, token.value, execution)\n\t\t} finally {\n\t\t\ttoken.release()\n\t\t}\n\t}\n\n\tasync #teardown(ending: PromiseWithResolvers<void>): Promise<void> {\n\t\tconst failures: unknown[] = []\n\t\ttry {\n\t\t\tawait this.#queue.destroy()\n\t\t} catch (error) {\n\t\t\tfailures.push(error)\n\t\t}\n\t\ttry {\n\t\t\tawait this.#pool.destroy()\n\t\t} catch (error) {\n\t\t\tfailures.push(error)\n\t\t}\n\t\tthis.#emitter.destroy()\n\t\tif (failures.length === 0) ending.resolve()\n\t\telse if (failures.length === 1) ending.reject(failures[0])\n\t\telse ending.reject(new AggregateError(failures, 'worker destroy cleanup failed'))\n\t}\n\n\t// Bridge the inner queue's lifecycle onto the worker's OWN emitter, once at construction.\n\t// Each listener re-emits the queue event directly on the worker's emitter, which isolates a\n\t// worker observer's throw (routing it to the worker's `error` handler). Because the bridge\n\t// listener itself never throws, the queue's own `#emitter.emit` — which invoked this\n\t// listener — sees no throw, so the inner queue's engine stays balanced regardless of what a\n\t// worker observer does. The events are already post-transition (they fire from the queue's\n\t// own post-settle / post-wake emits), so this stays observation.\n\t#bridge(): void {\n\t\tconst queue = this.#queue.emitter\n\t\tqueue.on('enqueue', (id) => this.#emitter.emit('enqueue', id))\n\t\tqueue.on('start', (id) => this.#emitter.emit('start', id))\n\t\tqueue.on('retry', (id, attempt) => this.#emitter.emit('retry', id, attempt))\n\t\tqueue.on('success', (id, result) => this.#emitter.emit('success', id, result))\n\t\tqueue.on('failure', (id, error) => this.#emitter.emit('failure', id, error))\n\t\tqueue.on('abort', (reason) => this.#emitter.emit('abort', reason))\n\t\tqueue.on('drain', () => this.#emitter.emit('drain'))\n\t}\n}\n","import type { WorkerInterface, WorkerOptions } from './types.js'\nimport { Worker } from './Worker.js'\n\n/**\n * Create a resource-backed job worker — a `Queue` (`@orkestrel/queue`) marrying a `Pool`\n * (`@orkestrel/pool`). Each enqueued input runs through the handler against an\n * automatically acquired pooled resource (released when the job settles), with the\n * queue's bounded concurrency, retries, and per-attempt timeout / abort.\n *\n * @remarks\n * The pool's `max` defaults to `concurrency`, so resources match the jobs in flight and\n * are reused across jobs. A handler that throws still releases its resource (the\n * acquire/release pair brackets the call in a `finally`), so a later job reuses it. The\n * lifecycle (`start` / `stop` / `pause` / `resume` / `abort` / `clear` / `destroy`)\n * delegates to the queue; `destroy` also tears the pool down. Observable (§13): a typed\n * `emitter` surfaces the queue lifecycle (`enqueue` / `start` / `success` / `failure` / …).\n *\n * @typeParam TInput - The work input each job carries\n * @typeParam TResource - The pooled resource each job runs against\n * @typeParam TResult - The value the handler resolves for a job\n * @param options - The `handler` and `pool` plus optional `concurrency` (default `1`),\n *   `retries` (default `0`), and a default per-attempt `timeout` in milliseconds\n * @returns A working {@link WorkerInterface}\n *\n * @example\n * ```ts\n * import { createWorker } from '@orkestrel/worker'\n *\n * const worker = createWorker<Query, Connection, Rows>({\n * \tpool: { create: () => connect(), destroy: (connection) => connection.close() },\n * \thandler: (query, connection, { signal }) => connection.run(query, signal),\n * \tconcurrency: 4,\n * \tretries: 1,\n * })\n *\n * const rows = await worker.enqueue(query)\n * ```\n */\nexport function createWorker<TInput, TResource, TResult>(\n\toptions: WorkerOptions<TInput, TResource, TResult>,\n): WorkerInterface<TInput, TResult> {\n\treturn new Worker(options)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,IAAa,SAAb,MAA4F;CAC3F;CACA;CAIA;CACA;CACA;CAEA,YAAY,SAAoD;EAC/D,MAAM,EACL,aAAa,qBACb,SACA,IACA,OACA,SACA,SACA,UACG;EACJ,MAAM,cAAc,wBAAwB,KAAA,IAAY,IAAI;EAC5D,KAAKG,WAAW;EAChB,KAAKD,WAAW,IAAI,QAAiC;GACpD,GAAI,OAAO,KAAA,IAAY,EAAE,GAAG,IAAI,CAAC;GACjC,GAAI,UAAU,KAAA,IAAY,EAAE,MAAM,IAAI,CAAC;EACxC,CAAC;EACD,KAAKF,SAAS,IAAI,MAAuB;GACxC,SAAS,KAAKI,QAAQ,KAAK,IAAI;GAC/B;GACA,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;GAC3C,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;GAC3C,GAAI,UAAU,KAAA,IAAY,EAAE,MAAM,IAAI,CAAC;EACxC,CAAC;EAED,MAAM,EAAE,KAAK,IAAI,QAAQ,OAAO,WAAW,QAAQ,SAAS,aAD/C,QAAQ;EAErB,KAAKH,QAAQ,IAAI,KAAgB;GAChC;GACA,KAAK,QAAQ,KAAA,IAAY,cAAc;GACvC,GAAI,WAAW,KAAA,IAAY,EAAE,IAAI,OAAO,IAAI,CAAC;GAC7C,GAAI,cAAc,KAAA,IAAY,EAAE,OAAO,UAAU,IAAI,CAAC;GACtD,GAAI,YAAY,KAAA,IAAY,EAAE,QAAQ,IAAI,CAAC;GAC3C,GAAI,aAAa,KAAA,IAAY,EAAE,SAAS,IAAI,CAAC;EAC9C,CAAC;EACD,KAAKI,QAAQ;CACd;CAEA,IAAI,UAAqD;EACxD,OAAO,KAAKH;CACb;CAEA,IAAI,QAAgB;EACnB,OAAO,KAAKF,OAAO;CACpB;CAEA,IAAI,SAAiB;EACpB,OAAO,KAAKA,OAAO;CACpB;CAEA,IAAI,SAAkB;EACrB,OAAO,KAAKA,OAAO;CACpB;CAEA,IAAI,UAAmB;EACtB,OAAO,KAAKA,OAAO;CACpB;CAEA,QAAQ,OAAe,SAA+C;EACrE,OAAO,KAAKA,OAAO,QAAQ,OAAO,OAAO;CAC1C;CAEA,UAAyB;EACxB,OAAO,KAAKA,OAAO,QAAQ;CAC5B;CAEA,QAAc;EACb,KAAKA,OAAO,MAAM;CACnB;CAEA,OAAsB;EACrB,OAAO,KAAKA,OAAO,KAAK;CACzB;CAEA,QAAc;EACb,KAAKA,OAAO,MAAM;CACnB;CAEA,SAAe;EACd,KAAKA,OAAO,OAAO;CACpB;CAEA,MAAM,QAAiC;EACtC,OAAO,KAAKA,OAAO,MAAM,MAAM;CAChC;CAEA,QAAuB;EACtB,OAAO,KAAKA,OAAO,MAAM;CAC1B;CAEA,UAAyB;EACxB,IAAI,KAAKM,YAAY,KAAA,GAAW,OAAO,KAAKA,QAAQ;EACpD,MAAM,SAAS,QAAQ,cAAoB;EAC3C,KAAKA,UAAU;EACf,KAAUC,UAAU,MAAM;EAC1B,OAAO,OAAO;CACf;CAEA,MAAMH,QAAQ,OAAe,WAA6C;EACzE,MAAM,QAAQ,MAAM,KAAKH,MAAM,QAAQ,UAAU,MAAM;EACvD,IAAI;GACH,OAAO,MAAM,KAAKE,SAAS,OAAO,MAAM,OAAO,SAAS;EACzD,UAAU;GACT,MAAM,QAAQ;EACf;CACD;CAEA,MAAMI,UAAU,QAAmD;EAClE,MAAM,WAAsB,CAAC;EAC7B,IAAI;GACH,MAAM,KAAKP,OAAO,QAAQ;EAC3B,SAAS,OAAO;GACf,SAAS,KAAK,KAAK;EACpB;EACA,IAAI;GACH,MAAM,KAAKC,MAAM,QAAQ;EAC1B,SAAS,OAAO;GACf,SAAS,KAAK,KAAK;EACpB;EACA,KAAKC,SAAS,QAAQ;EACtB,IAAI,SAAS,WAAW,GAAG,OAAO,QAAQ;OACrC,IAAI,SAAS,WAAW,GAAG,OAAO,OAAO,SAAS,EAAE;OACpD,OAAO,OAAO,IAAI,eAAe,UAAU,+BAA+B,CAAC;CACjF;CASA,UAAgB;EACf,MAAM,QAAQ,KAAKF,OAAO;EAC1B,MAAM,GAAG,YAAY,OAAO,KAAKE,SAAS,KAAK,WAAW,EAAE,CAAC;EAC7D,MAAM,GAAG,UAAU,OAAO,KAAKA,SAAS,KAAK,SAAS,EAAE,CAAC;EACzD,MAAM,GAAG,UAAU,IAAI,YAAY,KAAKA,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC;EAC3E,MAAM,GAAG,YAAY,IAAI,WAAW,KAAKA,SAAS,KAAK,WAAW,IAAI,MAAM,CAAC;EAC7E,MAAM,GAAG,YAAY,IAAI,UAAU,KAAKA,SAAS,KAAK,WAAW,IAAI,KAAK,CAAC;EAC3E,MAAM,GAAG,UAAU,WAAW,KAAKA,SAAS,KAAK,SAAS,MAAM,CAAC;EACjE,MAAM,GAAG,eAAe,KAAKA,SAAS,KAAK,OAAO,CAAC;CACpD;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC9JA,SAAgB,aACf,SACmC;CACnC,OAAO,IAAI,OAAO,OAAO;AAC1B"}

package/dist/src/server/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-let node_worker_threads = require("node:worker_threads");
 let _orkestrel_contract = require("@orkestrel/contract");
+let node_worker_threads = require("node:worker_threads");
 let _orkestrel_database_server = require("@orkestrel/database/server");
 let _orkestrel_queue = require("@orkestrel/queue");
 let _src_core = require("../core/index.cjs");
@@ -9,16 +9,16 @@ let _src_core = require("../core/index.cjs");
 * Internal mutable implementation of the readonly {@link NodeThread} observation contract.
 *
 * @remarks
-* Liveness and the first terminal error live behind runtime-private fields. Consumers observe
-* their current values through readonly getters, while the worker lifecycle records transitions
-* through bound instance methods without exposing writable contract properties.
+* Liveness and the first terminal error live behind runtime-private fields. Thread `error`,
+* `messageerror`, and `exit` all latch death, so pool validation cannot reuse a thread whose
+* inbound message could not be deserialized.
 */
 var Thread = class {
 	#worker;
 	#promise;
 	#resolve;
 	#reject;
-	#recordErrorHandler;
+	#recordHandler;
 	#recordExitHandler;
 	#onlineHandler;
 	#spawnErrorHandler;
@@ -31,12 +31,13 @@ var Thread = class {
 		this.#promise = readiness.promise;
 		this.#resolve = readiness.resolve;
 		this.#reject = readiness.reject;
-		this.#recordErrorHandler = this.#recordError.bind(this);
+		this.#recordHandler = this.#record.bind(this);
 		this.#recordExitHandler = this.#recordExit.bind(this);
 		this.#onlineHandler = this.#online.bind(this);
 		this.#spawnErrorHandler = this.#spawnError.bind(this);
 		this.#spawnExitHandler = this.#spawnExit.bind(this);
-		this.#worker.on("error", this.#recordErrorHandler);
+		this.#worker.on("error", this.#recordHandler);
+		this.#worker.on("messageerror", this.#recordHandler);
 		this.#worker.on("exit", this.#recordExitHandler);
 		this.#worker.once("online", this.#onlineHandler);
 		this.#worker.once("error", this.#spawnErrorHandler);
@@ -57,7 +58,7 @@ var Thread = class {
 	evict() {
 		this.#alive = false;
 	}
-	#recordError(error) {
+	#record(error) {
 		this.#alive = false;
 		if (this.#death === void 0) this.#death = error;
 	}
@@ -109,9 +110,10 @@ function isReply(value, id) {
 * Internal lifecycle entity for one dispatched worker-thread job.
 *
 * @remarks
-* Owns the stable listener identities, settlement guard, cleanup, result narrowing, and abort
-* eviction for one dispatch. The public {@link dispatch} helper constructs this entity and returns
-* its promise.
+* Owns stable `message` / `messageerror` / death listener identities, settlement, result-guard
+* containment, and abort eviction for one dispatch. Deserialization failure, a matching-id
+* malformed reply, and abort each evict and terminate the thread before rejecting, with
+* termination failure preserved. Non-record, id-less, hostile-id, and foreign-id chatter is ignored.
 */
 var Dispatch = class {
 	#thread;
@@ -124,6 +126,7 @@ var Dispatch = class {
 	#fulfill;
 	#reject;
 	#messageHandler;
+	#messageErrorHandler;
 	#errorHandler;
 	#exitHandler;
 	#abortHandler;
@@ -139,6 +142,7 @@ var Dispatch = class {
 		this.#fulfill = settlement.resolve;
 		this.#reject = settlement.reject;
 		this.#messageHandler = this.#message.bind(this);
+		this.#messageErrorHandler = this.#messageError.bind(this);
 		this.#errorHandler = this.#error.bind(this);
 		this.#exitHandler = this.#exit.bind(this);
 		this.#abortHandler = this.#abort.bind(this);
@@ -153,6 +157,7 @@ var Dispatch = class {
 			return;
 		}
 		this.#worker.on("message", this.#messageHandler);
+		this.#worker.on("messageerror", this.#messageErrorHandler);
 		this.#worker.on("error", this.#errorHandler);
 		this.#worker.on("exit", this.#exitHandler);
 		if (this.#execution.signal.aborted) {
@@ -163,6 +168,7 @@ var Dispatch = class {
 		try {
 			this.#worker.postMessage({
 				id: this.#id,
+				job: this.#execution.id,
 				command: "run",
 				input: this.#input
 			});
@@ -171,29 +177,70 @@ var Dispatch = class {
 		}
 	}
 	#message(value) {
-		if (!isReply(value, this.#id)) return;
+		if (!(0, _orkestrel_contract.isRecord)(value)) return;
+		const id = (0, _orkestrel_contract.attempt)(() => value.id);
+		if (!id.success || id.value !== this.#id) return;
+		if (!isReply(value, this.#id)) {
+			this.#terminate(/* @__PURE__ */ new Error("worker reply was malformed"));
+			return;
+		}
 		if (value.ok) {
 			const reply = value.value;
-			if (this.#result(reply)) this.#succeed(reply);
-			else this.#fail(/* @__PURE__ */ new Error("reply did not satisfy result guard"));
+			try {
+				if (this.#result(reply)) this.#succeed(reply);
+				else this.#fail(/* @__PURE__ */ new Error("reply did not satisfy result guard"));
+			} catch (error) {
+				this.#fail(error);
+			}
 			return;
 		}
 		this.#fail(new Error(value.error));
 	}
+	#messageError(error) {
+		this.#terminate(error);
+	}
 	#error(error) {
 		this.#fail(error);
 	}
 	#exit() {
-		this.#fail(/* @__PURE__ */ new Error("worker thread exited"));
+		this.#fail(this.#thread.death ?? /* @__PURE__ */ new Error("worker thread exited"));
 	}
 	#abort() {
-		this.#worker.postMessage({
-			id: this.#id,
-			command: "abort"
-		});
+		const notification = [];
+		try {
+			this.#worker.postMessage({
+				id: this.#id,
+				command: "abort"
+			});
+		} catch (cause) {
+			notification.push(cause);
+		}
+		this.#terminate(this.#execution.signal.reason, notification);
+	}
+	#terminate(error, notification = []) {
+		if (this.#settled) return;
+		this.#settled = true;
+		this.#detach();
 		if (this.#thread instanceof Thread) this.#thread.evict();
-		this.#worker.terminate();
-		this.#fail(/* @__PURE__ */ new Error("job aborted"));
+		let termination;
+		try {
+			termination = this.#worker.terminate();
+		} catch (cause) {
+			this.#reject(new AggregateError([
+				error,
+				...notification,
+				cause
+			], "worker termination failed"));
+			return;
+		}
+		termination.then(() => {
+			if (notification.length === 0) this.#reject(error);
+			else this.#reject(new AggregateError([error, ...notification], "worker abort notification failed"));
+		}, (cause) => this.#reject(new AggregateError([
+			error,
+			...notification,
+			cause
+		], "worker termination failed")));
 	}
 	#succeed(value) {
 		if (this.#settled) return;
@@ -209,6 +256,7 @@ var Dispatch = class {
 	}
 	#detach() {
 		this.#worker.off("message", this.#messageHandler);
+		this.#worker.off("messageerror", this.#messageErrorHandler);
 		this.#worker.off("error", this.#errorHandler);
 		this.#worker.off("exit", this.#exitHandler);
 		this.#execution.signal.removeEventListener("abort", this.#abortHandler);
@@ -227,11 +275,11 @@ var Dispatch = class {
 * listeners that flip `alive` to `false` AND latch the first terminal event on
 * {@link NodeThread.death}: a crash is observable to an in-flight {@link dispatch} (via
 * its own listeners), to the pool's `validate` (via `alive`), and — crucially — to a
-* dispatch that attaches AFTER the death (via the latch). The latch closes a real race:
-* under event-loop pressure a dead thread's `online` + `error` + `exit` are delivered in
-* ONE synchronous exit-drain batch, so every death event fires before the microtask chain
-* resolving this spawn can hand the thread to `dispatch` — without the latch that job
-* would await events that already fired, forever. The pool's `create` hook calls this.
+* dispatch that attaches AFTER the death (via the latch). A `messageerror` is terminal too,
+* so a thread whose inbound payload could not be deserialized is never reused. The latch
+* closes a real race: a thread can become terminal before the readiness promise continuation
+* hands it to `dispatch`, leaving no future death event for that dispatch to observe. Without
+* the latch, that job would wait forever. The pool's `create` hook calls this.
 *
 * @param script - The worker module each thread runs (must call `serveWorker`)
 * @param workerData - Opaque, structured-cloneable data handed to the thread at spawn
@@ -244,19 +292,23 @@ function spawnThread(script, workerData) {
 * Dispatch one job to a leased {@link NodeThread} and await its narrowed reply.
 *
 * @remarks
-* Mints a fresh `id`, posts a `run` envelope, and resolves when the thread replies for
-* that id: a success `value` is narrowed through `result` (a value that fails the guard
+* Mints a fresh per-dispatch correlation `id`, posts it with `job: execution.id`, and
+* resolves when the thread replies for that correlation id. The stable Queue job id reaches
+* the worker handler for idempotency across retries and restore; it is not caller identity or
+* authentication / authorization evidence. Per-job consumer context remains explicit,
+* structured-cloneable `input`; ambient context is not worker-thread transport. A success
+* `value` is narrowed through `result` (a value that fails the guard
 * rejects — the zero-`as` type bridge), a failure rejects with the thread's error string.
 * A thread that ALREADY died rejects synchronously at entry from the latched
-* {@link NodeThread.death} — its death events fired before this dispatch existed (under
-* load they arrive in one batched exit drain) and will never fire again, so waiting on
-* the listeners below would dangle forever; the latch makes the death total across every
-* event ordering. If the thread `error`s / `exit`s mid-flight it is marked dead and the
-* job rejects. On `execution.signal` abort it posts an `abort` envelope (cooperative) AND
-* evicts the thread — `alive = false` + `terminate()` — because CPU-bound work cannot
-* honour the signal; the freed pool slot then gets a fresh thread. Every listener (the
-* thread's `message` / `error` / `exit` and the signal's `abort`) is removed on settle,
-* and a `settled` guard prevents a double-settle.
+* {@link NodeThread.death} — its death events fired before this dispatch existed and will
+* never fire again, so waiting on the listeners below would dangle forever; the latch makes
+* death total across every event ordering. If the thread `error`s / `exit`s mid-flight it is
+* marked dead and the
+* job rejects. An inbound `messageerror` also evicts and terminates the thread before
+* rejection. On `execution.signal` abort it contains the cooperative `abort` post,
+* evicts the thread, and observes `terminate()` settlement because CPU-bound work cannot
+* honour the signal; the freed pool slot then gets a fresh thread. Every per-job listener
+* (`message` / `messageerror` / `error` / `exit` / `abort`) is removed on settle.
 *
 * @typeParam TResult - The reply type the `result` guard narrows to
 * @param thread - The leased thread to run the job on
@@ -271,13 +323,25 @@ function dispatch(thread, input, execution, result) {
 //#endregion
 //#region src/server/serve.ts
 function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
+	try {
+		return typeof value === "object" && value !== null && !Array.isArray(value);
+	} catch {
+		return false;
+	}
 }
 function isRun(value) {
-	return isRecord(value) && typeof value.id === "string" && value.command === "run" && "input" in value;
+	try {
+		return isRecord(value) && typeof value.id === "string" && typeof value.job === "string" && value.command === "run" && "input" in value;
+	} catch {
+		return false;
+	}
 }
 function isAbort(value) {
-	return isRecord(value) && typeof value.id === "string" && value.command === "abort";
+	try {
+		return isRecord(value) && typeof value.id === "string" && value.command === "abort";
+	} catch {
+		return false;
+	}
 }
 /**
 * Register a worker-thread handler — the worker-side half of {@link createNodeWorker}.
@@ -286,9 +350,15 @@ function isAbort(value) {
 * Must be the spawned thread's module entry. It listens on the parent port for the
 * run/abort protocol: a `run` message narrows its `input` through `options.input` (an
 * invalid payload replies with an error envelope, never running the handler), then runs
-* `options.handler(input, { signal })` and replies `{ id, ok: true, value }` on success or
-* `{ id, ok: false, error }` on throw. Each in-flight job has its own `AbortController`,
-* so an `abort` message for that id fires the handler's `signal` (cooperative — the main
+* `options.handler(input, { id: job, signal })` and replies `{ id, ok: true, value }` on success or
+* `{ id, ok: false, error }` on throw. Input-guard throws use the same failure envelope. If a
+* success value cannot be cloned, the post is retried as a clone-safe failure; if that post also
+* fails, the parent port closes so the main side observes thread exit instead of waiting forever.
+* The run envelope's `id` is fresh per dispatch and keys controllers, aborts, and replies;
+* its `job` is the stable Queue idempotency key exposed as `execution.id` across retries
+* and restore. That job id identifies work, not a caller, and is not authentication or
+* authorization evidence. Each attempt has its own `AbortController`, so an `abort`
+* message for the correlation id fires the handler's `signal` (cooperative — the main
 * side ALSO terminates the thread, so a handler that ignores its signal is still stopped).
 * Every inbound message is narrowed with the inlined guards — no `as`. On the main thread
 * (`parentPort === null`) it is a no-op.
@@ -300,7 +370,7 @@ function isAbort(value) {
 * @example
 * ```ts
 * // double.ts — a worker script
-* import { serveWorker } from '@src/server'
+* import { serveWorker } from '@orkestrel/worker/server'
 *
 * serveWorker<number, number>({
 * 	input: (value): value is number => typeof value === 'number',
@@ -311,6 +381,8 @@ function isAbort(value) {
 function serveWorker(options) {
 	const port = node_worker_threads.parentPort;
 	if (port === null) return;
+	const input = options.input;
+	const handler = options.handler;
 	const controllers = /* @__PURE__ */ new Map();
 	port.on("message", (raw) => {
 		if (isAbort(raw)) {
@@ -319,31 +391,39 @@ function serveWorker(options) {
 		}
 		if (!isRun(raw)) return;
 		const id = raw.id;
-		if (!options.input(raw.input)) {
-			port.postMessage({
-				id,
-				ok: false,
-				error: "input did not satisfy input guard"
-			});
-			return;
-		}
-		const input = raw.input;
 		const controller = new AbortController();
 		controllers.set(id, controller);
-		Promise.resolve().then(() => options.handler(input, { signal: controller.signal })).then((value) => {
+		Promise.resolve().then(() => {
+			if (!input(raw.input)) throw new Error("input did not satisfy input guard");
+			const value = raw.input;
+			return handler(value, {
+				id: raw.job,
+				signal: controller.signal
+			});
+		}).then((value) => {
 			controllers.delete(id);
 			port.postMessage({
 				id,
 				ok: true,
 				value
 			});
-		}, (error) => {
+		}).catch((error) => {
 			controllers.delete(id);
-			port.postMessage({
-				id,
-				ok: false,
-				error: error instanceof Error ? error.message : String(error)
-			});
+			let message = "worker operation failed";
+			try {
+				message = error instanceof Error ? error.message : String(error);
+			} catch {}
+			try {
+				port.postMessage({
+					id,
+					ok: false,
+					error: message
+				});
+			} catch {
+				try {
+					port.close();
+				} catch {}
+			}
 		});
 	});
 }
@@ -357,9 +437,23 @@ function serveWorker(options) {
 * public entity remains the plain core {@link WorkerInterface}.
 */
 var NodeWorker = class {
-	#options;
+	#script;
+	#input;
+	#result;
+	#workerData;
+	#concurrency;
+	#retries;
+	#timeout;
+	#store;
 	constructor(options) {
-		this.#options = options;
+		this.#script = options.script;
+		this.#input = options.input;
+		this.#result = options.result;
+		this.#workerData = options.workerData;
+		this.#concurrency = options.concurrency;
+		this.#retries = options.retries;
+		this.#timeout = options.timeout;
+		this.#store = options.store;
 	}
 	build() {
 		return (0, _src_core.createWorker)({
@@ -367,17 +461,17 @@ var NodeWorker = class {
 				create: this.#create.bind(this),
 				destroy: this.#destroy.bind(this),
 				validate: this.#validate.bind(this),
-				...this.#options.concurrency !== void 0 ? { max: this.#options.concurrency } : {}
+				...this.#concurrency !== void 0 ? { max: this.#concurrency } : {}
 			},
 			handler: this.#handle.bind(this),
-			...this.#options.concurrency !== void 0 ? { concurrency: this.#options.concurrency } : {},
-			...this.#options.retries !== void 0 ? { retries: this.#options.retries } : {},
-			...this.#options.timeout !== void 0 ? { timeout: this.#options.timeout } : {},
-			...this.#options.store !== void 0 ? { store: this.#options.store } : {}
+			...this.#concurrency !== void 0 ? { concurrency: this.#concurrency } : {},
+			...this.#retries !== void 0 ? { retries: this.#retries } : {},
+			...this.#timeout !== void 0 ? { timeout: this.#timeout } : {},
+			...this.#store !== void 0 ? { store: this.#store } : {}
 		});
 	}
 	#create() {
-		return spawnThread(this.#options.script, this.#options.workerData);
+		return spawnThread(this.#script, this.#workerData);
 	}
 	async #destroy(thread) {
 		await thread.worker.terminate();
@@ -386,8 +480,10 @@ var NodeWorker = class {
 		return thread.alive && thread.worker.threadId > 0;
 	}
 	#handle(input, thread, execution) {
-		if (!this.#options.input(input)) return Promise.reject(/* @__PURE__ */ new Error("input did not satisfy input guard"));
-		return dispatch(thread, input, execution, this.#options.result);
+		const outcome = (0, _orkestrel_contract.attempt)(() => this.#input(input));
+		if (!outcome.success) return Promise.reject(outcome.error);
+		if (!outcome.value) return Promise.reject(/* @__PURE__ */ new Error("input did not satisfy input guard"));
+		return dispatch(thread, input, execution, this.#result);
 	}
 };
 //#endregion
@@ -412,8 +508,8 @@ var NodeWorker = class {
 *
 * @example
 * ```ts
-* import { stringShape } from '@src/core'
-* import { createJSONQueueStore } from '@src/server'
+* import { stringShape } from '@orkestrel/contract'
+* import { createJSONQueueStore } from '@orkestrel/worker/server'
 *
 * const store = createJSONQueueStore('data/queue.json', stringShape())
 * await store.save({ id: 'job-1', input: 'https://example.com', attempts: 0 })
@@ -453,7 +549,7 @@ function createJSONQueueStore(path, input) {
 *
 * @example
 * ```ts
-* import { createNodeWorker } from '@src/server'
+* import { createNodeWorker } from '@orkestrel/worker/server'
 *
 * const worker = createNodeWorker({
 * 	script: new URL('./double.js', import.meta.url),
@@ -463,7 +559,7 @@ function createJSONQueueStore(path, input) {
 * })
 *
 * const doubled = await worker.enqueue(21) // 42, computed on a worker thread
-* worker.destroy() // terminates every thread
+* await worker.destroy() // terminates every thread
 * ```
 */
 function createNodeWorker(options) {