@owlmeans/server-job 0.1.18-rc.2 → 0.1.18-rc.21

package/build/actions/watch.js

@@ -1,12 +1,12 @@
-import { handleConnection } from '@owlmeans/server-socket';
+import { connection } from '@owlmeans/server-socket';
 import { MessageType } from '@owlmeans/socket';
-import { JOB_EVENT } from '../consts.js';
-import { jobViewer, jobsOf, owns } from '../utils/index.js';
+import { JOB_EVENT } from '@owlmeans/job';
+import { jobsOf } from '../utils/index.js';
 /**
  * Push this caller's job lifecycle events down a socket.
  *
- * The frames are `JobEvent`s exactly as the queue publishes them, under the {@link JOB_EVENT}
- * event name — no shape of this package's own, so a client applies them with the contract types.
+ * Broker events are resolved inside the caller's audience and mapped to {@link JobViewEvent}; raw
+ * queue ids, payloads, failures and ownership fields never cross the socket boundary.
  *
  * **A `JobEvent` carries no owner**, so each one is attributed by reading its job back, and the
  * ids that answered are remembered for the life of the connection. A queue configured with
@@ -14,26 +14,27 @@ import { jobViewer, jobsOf, owns } from '../utils/index.js';
  * attributed by is gone by the time the event arrives, and an unattributable event is dropped
  * rather than fanned out to everyone. Leave completed jobs in place on any queue that is watched.
  */
-export const watchJobs = (opts) => handleConnection(async (conn, ctx, req) => {
+export const watchJobs = (protocol, opts) => connection(protocol, async (conn, ctx, req) => {
     const resource = jobsOf(ctx, opts);
-    const viewer = await jobViewer(req, ctx, opts);
-    const mine = new Set();
-    const attributable = async (event) => {
-        if (viewer == null || mine.has(event.id)) {
-            return true;
+    const audience = await opts.policy.audience(req, ctx);
+    const publicIds = new Map();
+    const project = async (event) => {
+        const record = await resource.load({
+            $and: [{ id: event.id }, opts.policy.where(audience, {})],
+        });
+        if (record != null) {
+            const job = await opts.policy.map(record, audience);
+            publicIds.set(event.id, job.id);
+            return { type: 'upsert', job };
         }
-        const record = await resource.load(event.id);
-        if (record == null || !owns(record, viewer, opts)) {
-            return false;
-        }
-        mine.add(event.id);
-        return true;
+        const id = publicIds.get(event.id);
+        return id == null ? null : { type: 'remove', id };
     };
     const unsubscribe = await resource.subscribe(async (event) => {
         try {
-            if (await attributable(event)) {
-                await conn.notify(JOB_EVENT, event);
-            }
+            const projected = await project(event);
+            if (projected != null)
+                await conn.notify(JOB_EVENT, projected);
         }
         catch (e) {
             console.error('Job watch notify error:', e);

package/build/actions/watch.js.map

@@ -1 +1 @@
-{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/actions/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAI1D,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,IAAwB,EACuB,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5F,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9B,MAAM,YAAY,GAAG,KAAK,EAAE,KAAe,EAAoB,EAAE;QAC/D,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAElB,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QACzD,IAAI,CAAC;YACH,IAAI,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;QAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,OAA6B,CAAA;QACzC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,WAAW,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/actions/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAIzC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,QAAiC,EACjC,IAAuB,EACQ,EAAE,CAAC,UAAU,CAA2B,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1G,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE3C,MAAM,OAAO,GAAG,KAAK,EAAE,KAAe,EAAgC,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC1D,CAAC,CAAA;QACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACnD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;QAChC,CAAC;QACD,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAClC,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACnD,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,SAAS,IAAI,IAAI;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;QAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,OAA6B,CAAA;QACzC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,WAAW,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/build/entrypoints.d.ts

@@ -1,5 +1,4 @@
-import type { CommonEntrypoint } from '@owlmeans/entrypoint';
-import type { JobEntrypointAliases, JobEntrypointOptions } from './types.js';
+import type { JobEntrypointAliases, JobEntrypoints, JobEntrypointOptions } from './types.js';
 /**
  * The aliases one job group answers under.
  *
@@ -11,11 +10,11 @@ export declare const jobEntrypointAliases: (root: string) => JobEntrypointAliase
  * Declare the list/get/cancel/watch entrypoints of one job group.
  *
  * It belongs in the SHARED package of a target app — the one both the API and the browser import —
- * so that the server elevates and the client calls the very declarations, and neither side ever
+ * so that the server binds and the client calls the very declarations, and neither side ever
  * writes a path. Declaring a second group is the same call with another root.
  *
  * The guard rides on the base alone: guards are inherited, so stating it once is what keeps the
  * four from drifting apart.
  */
-export declare const declareJobEntrypoints: (root: string, opts?: JobEntrypointOptions) => CommonEntrypoint[];
+export declare const declareJobEntrypoints: (root: string, opts?: JobEntrypointOptions) => JobEntrypoints;
 //# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAM5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AAE5E;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,SAAU,MAAM,KAAG,oBAMlD,CAAA;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,SAC1B,MAAM,SAAS,oBAAoB,KACxC,gBAAgB,EAoBlB,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAgB,MAAM,YAAY,CAAA;AAE1G;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,SAAU,MAAM,KAAG,oBAMlD,CAAA;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,SAC1B,MAAM,SAAS,oBAAoB,KACxC,cA0BF,CAAA"}

package/build/entrypoints.js

@@ -1,4 +1,4 @@
-import { entrypoint, filter, guard, query } from '@owlmeans/entrypoint';
+import { contract, openProtocol, protocol, typed } from '@owlmeans/entrypoint';
 import { backend, route, RouteMethod, socket } from '@owlmeans/route';
 import { DEFAULT_GUARD } from '@owlmeans/auth-common';
 import { DEFAULT_JOB_PATH } from './consts.js';
@@ -20,7 +20,7 @@ export const jobEntrypointAliases = (root) => ({
  * Declare the list/get/cancel/watch entrypoints of one job group.
  *
  * It belongs in the SHARED package of a target app — the one both the API and the browser import —
- * so that the server elevates and the client calls the very declarations, and neither side ever
+ * so that the server binds and the client calls the very declarations, and neither side ever
  * writes a path. Declaring a second group is the same call with another root.
  *
  * The guard rides on the base alone: guards are inherited, so stating it once is what keeps the
@@ -32,15 +32,15 @@ export const declareJobEntrypoints = (root, opts) => {
         ...(opts?.parent != null ? { parent: opts.parent } : {}),
         ...(opts?.service != null ? { service: opts.service } : {}),
     };
-    const guarded = opts?.guard === null ? undefined : guard(opts?.guard ?? DEFAULT_GUARD);
-    return [
-        entrypoint(route(aliases.base, opts?.path ?? DEFAULT_JOB_PATH, backend(base)), guarded),
-        entrypoint(route(aliases.list, '/', backend(aliases.base)), filter(query(JobListQuerySchema))),
+    const guarded = opts?.guard === null ? undefined : { guards: opts?.guard ?? DEFAULT_GUARD };
+    return {
+        base: openProtocol(route(aliases.base, opts?.path ?? DEFAULT_JOB_PATH, backend(base)), guarded),
+        list: protocol(route(aliases.list, '/', backend(aliases.base)), contract.request({ query: typed(JobListQuerySchema) }, typed())),
         // Static before parametric, so `/watch` is not swallowed by `/:id`. The router picks the
         // static branch on its own; the order here is for whoever reads the declaration.
-        entrypoint(route(aliases.watch, '/watch', socket(aliases.base))),
-        entrypoint(route(aliases.get, '/:id', backend(aliases.base))),
-        entrypoint(route(aliases.cancel, '/:id', backend(aliases.base, RouteMethod.DELETE))),
-    ];
+        watch: protocol(route(aliases.watch, '/watch', socket(aliases.base)), contract(typed())),
+        get: protocol(route(aliases.get, '/:id', backend(aliases.base)), contract.request({ params: typed() }, typed())),
+        cancel: protocol(route(aliases.cancel, '/:id', backend(aliases.base, RouteMethod.DELETE)), contract.request({ params: typed() }, typed())),
+    };
 };
 //# sourceMappingURL=entrypoints.js.map

package/build/entrypoints.js.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAEvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAGjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC;IAC3E,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,GAAG,IAAI,OAAO;IACpB,GAAG,EAAE,GAAG,IAAI,MAAM;IAClB,MAAM,EAAE,GAAG,IAAI,SAAS;IACxB,KAAK,EAAE,GAAG,IAAI,QAAQ;CACvB,CAAC,CAAA;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,IAAY,EAAE,IAA2B,EACrB,EAAE;IACtB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAA0B;QAClC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,IAAI,aAAa,CAAC,CAAA;IAEtF,OAAO;QACL,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;QACvF,UAAU,CACR,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAC/C,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAClC;QACD,yFAAyF;QACzF,iFAAiF;QACjF,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;KACrF,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAGjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC;IAC3E,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,GAAG,IAAI,OAAO;IACpB,GAAG,EAAE,GAAG,IAAI,MAAM;IAClB,MAAM,EAAE,GAAG,IAAI,SAAS;IACxB,KAAK,EAAE,GAAG,IAAI,QAAQ;CACvB,CAAC,CAAA;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,IAAY,EAAE,IAA2B,EACzB,EAAE;IAClB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAA0B;QAClC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,aAAa,EAAE,CAAA;IAE3F,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;QAC/F,IAAI,EAAE,QAAQ,CACZ,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAe,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAC9E;QACD,yFAAyF;QACzF,iFAAiF;QACjF,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAQ,CAAC,CAAC;QAC9F,GAAG,EAAE,QAAQ,CACX,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAC/D;QACD,MAAM,EAAE,QAAQ,CACd,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,EACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAC/D;KACF,CAAA;AACH,CAAC,CAAA"}

package/build/helper.d.ts

@@ -1,14 +1,12 @@
-import type { ServerEntrypoint } from '@owlmeans/server-entrypoint';
-import type { CommonEntrypoint } from '@owlmeans/entrypoint';
-import type { JobHandlerOptions } from './types.js';
+import type { JobEntrypoints, JobHandlerOptions } from './types.js';
 /**
  * Attach this package's handlers to a group declared by {@link declareJobEntrypoints}.
  *
  * The whole server half of "a long job reports progress to the user's screen" is this call plus
  * the queue driver an app already wires — nothing is subclassed, and an app that wants one
- * handler of its own elevates that alias itself afterwards, since `elevate` replaces in place.
+ * handler of its own binds that alias itself afterwards.
  *
  * @throws {SyntaxError} when the array carries no group under that root.
  */
-export declare const serveJobEntrypoints: <R>(entrypoints: (CommonEntrypoint | ServerEntrypoint<R>)[], root: string, opts?: JobHandlerOptions) => ServerEntrypoint<R>[];
+export declare const serveJobEntrypoints: (entrypoints: JobEntrypoints, opts: JobHandlerOptions) => import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocolDeclaration>[];
 //# sourceMappingURL=helper.d.ts.map

package/build/helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAG5D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnD;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,GAAI,CAAC,eACtB,CAAC,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,MAAM,SAAS,iBAAiB,KAC9F,gBAAgB,CAAC,CAAC,CAAC,EASrB,CAAA"}
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnE;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,gBAAiB,cAAc,QAAQ,iBAAiB,mIAMvF,CAAA"}

package/build/helper.js

@@ -1,21 +1,19 @@
-import { elevate } from '@owlmeans/server-entrypoint';
-import { jobEntrypointAliases } from './entrypoints.js';
+import { bind } from '@owlmeans/server-entrypoint';
 import { cancelJob, getJob, listJobs, watchJobs } from './actions/index.js';
 /**
  * Attach this package's handlers to a group declared by {@link declareJobEntrypoints}.
  *
  * The whole server half of "a long job reports progress to the user's screen" is this call plus
  * the queue driver an app already wires — nothing is subclassed, and an app that wants one
- * handler of its own elevates that alias itself afterwards, since `elevate` replaces in place.
+ * handler of its own binds that alias itself afterwards.
  *
  * @throws {SyntaxError} when the array carries no group under that root.
  */
-export const serveJobEntrypoints = (entrypoints, root, opts) => {
-    const aliases = jobEntrypointAliases(root);
-    elevate(entrypoints, aliases.base);
-    elevate(entrypoints, aliases.list, listJobs(opts));
-    elevate(entrypoints, aliases.watch, watchJobs(opts));
-    elevate(entrypoints, aliases.get, getJob(opts));
-    return elevate(entrypoints, aliases.cancel, cancelJob(opts));
-};
+export const serveJobEntrypoints = (entrypoints, opts) => [
+    bind(entrypoints.base),
+    bind(entrypoints.list, listJobs(entrypoints.list, opts)),
+    bind(entrypoints.watch, watchJobs(entrypoints.watch, opts)),
+    bind(entrypoints.get, getJob(entrypoints.get, opts)),
+    bind(entrypoints.cancel, cancelJob(entrypoints.cancel, opts)),
+];
 //# sourceMappingURL=helper.js.map

package/build/helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,6BAA6B,CAAA;AAGrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAG3E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,WAAuD,EAAE,IAAY,EAAE,IAAwB,EACxE,EAAE;IACzB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAE1C,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IAClC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAClD,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAE/C,OAAO,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;AAC9D,CAAC,CAAA"}
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAG3E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,WAA2B,EAAE,IAAuB,EAAE,EAAE,CAAC;IAC3F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAC9D,CAAA"}

package/build/index.d.ts

@@ -1,7 +1,4 @@
 export type * from './types.js';
-export * from './consts.js';
-export * from './schemas.js';
-export * from './entrypoints.js';
 export * from './helper.js';
 export * from './actions/index.js';
 export * from './utils/index.js';

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAE/B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAE/B,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}

package/build/index.js

@@ -1,6 +1,3 @@
-export * from './consts.js';
-export * from './schemas.js';
-export * from './entrypoints.js';
 export * from './helper.js';
 export * from './actions/index.js';
 export * from './utils/index.js';

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}

package/build/types.d.ts

@@ -1,6 +1,8 @@
 import type { BasicConfig, BasicContext } from '@owlmeans/context';
 import type { AbstractRequest } from '@owlmeans/entrypoint';
-import type { QueueAppend, QueueConfig } from '@owlmeans/queue';
+import type { JobEntrypoints, JobListQuery, JobView } from '@owlmeans/job';
+import type { JobRecord, QueueAppend, QueueConfig, QueueResource } from '@owlmeans/queue';
+import type { Criteria } from '@owlmeans/resource';
 import type { ApiServerAppend } from '@owlmeans/server-api';
 import type { ServerConfig, ServerContext } from '@owlmeans/server-context';
 export interface Config extends ServerConfig {
@@ -8,53 +10,23 @@ export interface Config extends ServerConfig {
 }
 export interface Context<C extends Config = Config> extends ServerContext<C>, ApiServerAppend, QueueAppend {
 }
-/** The alias every entrypoint of one job group answers under, derived from the group's root. */
-export interface JobEntrypointAliases {
-    base: string;
-    list: string;
-    get: string;
-    cancel: string;
-    watch: string;
+export type JobAudience = Record<string, unknown>;
+/** Required application policy at the raw-broker to public-domain boundary. */
+export interface JobExposurePolicy<A extends JobAudience = JobAudience> {
+    audience: (req: AbstractRequest, ctx: BasicContext<BasicConfig>) => A | Promise<A>;
+    /** Translate public filters and authenticated scope into broker criteria. */
+    where: (audience: A, query: JobListQuery) => Criteria<JobRecord>;
+    /** Resolve an opaque public id within the authenticated scope. */
+    lookup: (id: string, audience: A, resource: QueueResource) => Promise<JobRecord | null>;
+    /** Allowlist and map a scoped broker record into its public representation. */
+    map: (record: JobRecord, audience: A) => JobView | Promise<JobView>;
+    /** Cancellation is unavailable unless this callback is present and approves the record. */
+    cancel?: (record: JobRecord, audience: A) => boolean | Promise<boolean>;
 }
-export interface JobEntrypointOptions {
-    /** The path segment the group answers under. Defaults to `/jobs`. */
-    path?: string;
-    /** The entrypoint the group hangs under — an app's API base. Top level when omitted. */
-    parent?: string;
-    /** The service route the group answers on, when it is not this app's own. */
-    service?: string;
-    /**
-     * The guard the group's base carries, and every entrypoint under it inherits.
-     *
-     * `DEFAULT_GUARD` unless told otherwise, because ownership is derived from the authenticated
-     * subject and an unguarded declaration has no subject to derive it from. Pass `null` only for a
-     * group that is scoped some other way — its handlers then answer `AuthorizationError`.
-     */
-    guard?: string | null;
-}
-/** The list entrypoint's query, as it travels on the wire. */
-export interface JobListQuery {
-    state?: string;
-    name?: string;
-    page?: number;
-    size?: number;
-}
-/**
- * A request that may read the queue unscoped.
- *
- * A predicate rather than a permission name: which permission, gate or role means "operator" is
- * the application's decision, and hardcoding one here would make every deployment that names it
- * differently patch this package.
- */
-export interface JobAdminCheck {
-    (req: AbstractRequest, ctx: BasicContext<BasicConfig>): boolean | Promise<boolean>;
-}
-export interface JobHandlerOptions {
+export interface JobHandlerOptions<A extends JobAudience = JobAudience> {
     /** Which declared queue these handlers read. The context's sole queue when omitted. */
     queue?: string;
-    /** The field inside `JobRecord.data` that names the owner. Defaults to `owner`. */
-    ownerField?: string;
-    /** The escape hatch — see {@link JobAdminCheck}. Nothing is unscoped without one. */
-    admin?: JobAdminCheck;
+    policy: JobExposurePolicy<A>;
 }
+export type { JobEntrypoints, JobListQuery };
 //# sourceMappingURL=types.d.ts.map

package/build/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAE3E,MAAM,WAAW,MAAO,SAAQ,YAAY;IAC1C,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC,EAC1E,eAAe,EAAE,WAAW;CAAI;AAElC,gGAAgG;AAChG,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,wFAAwF;IACxF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB;AAED,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACnF;AAED,MAAM,WAAW,iBAAiB;IAChC,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qFAAqF;IACrF,KAAK,CAAC,EAAE,aAAa,CAAA;CACtB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACzF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAE3E,MAAM,WAAW,MAAO,SAAQ,YAAY;IAC1C,KAAK,CAAC,EAAE,WAAW,CAAA;CACpB;AAED,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,aAAa,CAAC,CAAC,CAAC,EAC1E,eAAe,EAAE,WAAW;CAAI;AAElC,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEjD,+EAA+E;AAC/E,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;IACpE,QAAQ,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,YAAY,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;IAClF,6EAA6E;IAC7E,KAAK,EAAE,CAAC,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,YAAY,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAA;IAChE,kEAAkE;IAClE,MAAM,EAAE,CACN,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,aAAa,KAC7C,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAC9B,+EAA+E;IAC/E,GAAG,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,2FAA2F;IAC3F,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACxE;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,WAAW,GAAG,WAAW;IACpE,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAA;CAC7B;AAED,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,CAAA"}

package/build/utils/index.d.ts

@@ -1,3 +1,3 @@
-export * from './owner.js';
-export * from './resource.js';
+export * from './policy.js';
+export * from './view.js';
 //# sourceMappingURL=index.d.ts.map

package/build/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA"}

package/build/utils/index.js

@@ -1,3 +1,3 @@
-export * from './owner.js';
-export * from './resource.js';
+export * from './policy.js';
+export * from './view.js';
 //# sourceMappingURL=index.js.map

package/build/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAA;AAC1B,cAAc,eAAe,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAA;AAC3B,cAAc,WAAW,CAAA"}

package/build/utils/policy.d.ts

@@ -0,0 +1,7 @@
+import type { BasicConfig, BasicContext } from '@owlmeans/context';
+import type { JobRecord, QueueResource } from '@owlmeans/queue';
+import type { JobAudience, JobHandlerOptions } from '../types.js';
+export declare const jobsOf: <D = unknown, R = unknown>(ctx: BasicContext<BasicConfig>, opts: JobHandlerOptions) => QueueResource<D, R>;
+/** Resolve an opaque id without revealing whether it exists outside the current audience. */
+export declare const readExposedJob: <A extends JobAudience>(resource: QueueResource, id: string, audience: A, opts: JobHandlerOptions<A>) => Promise<JobRecord>;
+//# sourceMappingURL=policy.d.ts.map

package/build/utils/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/utils/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,KAAK,EAAW,WAAW,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAE1E,eAAO,MAAM,MAAM,GAAI,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,OACxC,YAAY,CAAC,WAAW,CAAC,QAAQ,iBAAiB,KACtD,aAAa,CAAC,CAAC,EAAE,CAAC,CAAuD,CAAA;AAE5E,6FAA6F;AAC7F,eAAO,MAAM,cAAc,GAAU,CAAC,SAAS,WAAW,YAC9C,aAAa,MACnB,MAAM,YACA,CAAC,QACL,iBAAiB,CAAC,CAAC,CAAC,KACzB,OAAO,CAAC,SAAS,CAInB,CAAA"}

package/build/utils/policy.js

@@ -0,0 +1,10 @@
+import { UnknownJob } from '@owlmeans/queue';
+export const jobsOf = (ctx, opts) => ctx.jobs(opts.queue);
+/** Resolve an opaque id without revealing whether it exists outside the current audience. */
+export const readExposedJob = async (resource, id, audience, opts) => {
+    const record = await opts.policy.lookup(id, audience, resource);
+    if (record == null)
+        throw new UnknownJob('job');
+    return record;
+};
+//# sourceMappingURL=policy.js.map

package/build/utils/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/utils/policy.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAG5C,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,GAA8B,EAAE,IAAuB,EAClC,EAAE,CAAE,GAA0B,CAAC,IAAI,CAAO,IAAI,CAAC,KAAK,CAAC,CAAA;AAE5E,6FAA6F;AAC7F,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,QAAuB,EACvB,EAAU,EACV,QAAW,EACX,IAA0B,EACN,EAAE;IACtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC/D,IAAI,MAAM,IAAI,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IAC/C,OAAO,MAAM,CAAA;AACf,CAAC,CAAA"}

package/build/utils/view.d.ts

@@ -0,0 +1,18 @@
+import type { JobJson, JobView, PublicJobError } from '@owlmeans/job';
+import type { JobRecord } from '@owlmeans/queue';
+export interface JobViewFields {
+    id: string;
+    kind: string;
+    summary?: string;
+    metadata?: Record<string, JobJson>;
+    result?: JobJson;
+    error?: PublicJobError;
+    cancellable?: boolean;
+}
+/** Copy JSON through bounded, prototype-free containers and discard every non-JSON value. */
+export declare const sanitizeJobJson: (value: unknown, depth?: number) => JobJson | undefined;
+/** Build a public view from fields an application explicitly allowlisted. */
+export declare const jobViewOf: (record: JobRecord, fields: JobViewFields) => JobView;
+/** Safe default for a broker failure; raw reasons and stacks never cross the boundary. */
+export declare const publicJobError: (type?: string) => PublicJobError;
+//# sourceMappingURL=view.d.ts.map

package/build/utils/view.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.d.ts","sourceRoot":"","sources":["../../src/utils/view.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAmB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,cAAc,CAAA;IACtB,WAAW,CAAC,EAAE,OAAO,CAAA;CACtB;AAOD,6FAA6F;AAC7F,eAAO,MAAM,eAAe,UAAW,OAAO,UAAS,MAAM,KAAO,OAAO,GAAG,SAoB7E,CAAA;AA8BD,6EAA6E;AAC7E,eAAO,MAAM,SAAS,WAAY,SAAS,UAAU,aAAa,KAAG,OAuBpE,CAAA;AAED,0FAA0F;AAC1F,eAAO,MAAM,cAAc,UAAU,MAAM,KAAkB,cAG3D,CAAA"}

package/build/utils/view.js

@@ -0,0 +1,94 @@
+import { JobViewStatus } from '@owlmeans/job';
+import { JobState } from '@owlmeans/queue';
+const MAX_JSON_DEPTH = 8;
+const MAX_JSON_ITEMS = 100;
+const MAX_JSON_STRING = 16_384;
+const FORBIDDEN_KEYS = new Set(['__proto__', 'prototype', 'constructor']);
+/** Copy JSON through bounded, prototype-free containers and discard every non-JSON value. */
+export const sanitizeJobJson = (value, depth = 0) => {
+    if (depth > MAX_JSON_DEPTH)
+        return undefined;
+    if (value == null || typeof value === 'boolean' || typeof value === 'string') {
+        return typeof value === 'string' ? value.slice(0, MAX_JSON_STRING) : value;
+    }
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : undefined;
+    if (Array.isArray(value)) {
+        return value.slice(0, MAX_JSON_ITEMS)
+            .map(item => sanitizeJobJson(item, depth + 1))
+            .filter((item) => item !== undefined);
+    }
+    if (typeof value !== 'object')
+        return undefined;
+    const result = Object.create(null);
+    for (const [key, item] of Object.entries(value).slice(0, MAX_JSON_ITEMS)) {
+        if (FORBIDDEN_KEYS.has(key))
+            continue;
+        const safe = sanitizeJobJson(item, depth + 1);
+        if (safe !== undefined)
+            result[key] = safe;
+    }
+    return result;
+};
+const sanitizeError = (error) => error == null
+    ? undefined
+    : {
+        type: error.type.slice(0, 128),
+        message: error.message.slice(0, 2048),
+    };
+const statusOf = (state) => {
+    switch (state) {
+        case JobState.Active: return JobViewStatus.Running;
+        case JobState.Completed: return JobViewStatus.Succeeded;
+        case JobState.Failed: return JobViewStatus.Failed;
+        default: return JobViewStatus.Queued;
+    }
+};
+const progressOf = (value) => {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return { percent: value };
+    if (value == null || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const raw = value;
+    const progress = {};
+    if (typeof raw.percent === 'number' && Number.isFinite(raw.percent))
+        progress.percent = raw.percent;
+    if (typeof raw.done === 'number' && Number.isFinite(raw.done))
+        progress.done = raw.done;
+    if (typeof raw.total === 'number' && Number.isFinite(raw.total))
+        progress.total = raw.total;
+    if (typeof raw.message === 'string')
+        progress.message = raw.message.slice(0, 512);
+    return Object.keys(progress).length === 0 ? undefined : progress;
+};
+/** Build a public view from fields an application explicitly allowlisted. */
+export const jobViewOf = (record, fields) => {
+    const createdAt = record.createdAt ?? new Date(0).toISOString();
+    const updatedAt = record.finishedAt ?? record.startedAt ?? createdAt;
+    const progress = progressOf(record.progress);
+    const metadata = sanitizeJobJson(fields.metadata);
+    const result = sanitizeJobJson(fields.result);
+    const error = sanitizeError(fields.error);
+    return {
+        id: fields.id,
+        kind: fields.kind.slice(0, 128),
+        status: statusOf(record.state),
+        ...(progress == null ? {} : { progress }),
+        ...(fields.summary == null ? {} : { summary: fields.summary.slice(0, 2048) }),
+        ...(metadata == null || Array.isArray(metadata) || typeof metadata !== 'object'
+            ? {} : { metadata }),
+        ...(result === undefined ? {} : { result }),
+        ...(error == null ? {} : { error }),
+        cancellable: fields.cancellable ?? false,
+        createdAt,
+        updatedAt,
+        ...(record.startedAt == null ? {} : { startedAt: record.startedAt }),
+        ...(record.finishedAt == null ? {} : { finishedAt: record.finishedAt }),
+    };
+};
+/** Safe default for a broker failure; raw reasons and stacks never cross the boundary. */
+export const publicJobError = (type = 'job-failed') => ({
+    type,
+    message: 'The background operation failed.',
+});
+//# sourceMappingURL=view.js.map

package/build/utils/view.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view.js","sourceRoot":"","sources":["../../src/utils/view.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE7C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAa1C,MAAM,cAAc,GAAG,CAAC,CAAA;AACxB,MAAM,cAAc,GAAG,GAAG,CAAA;AAC1B,MAAM,eAAe,GAAG,MAAM,CAAA;AAC9B,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAA;AAEzE,6FAA6F;AAC7F,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAAE,KAAK,GAAW,CAAC,EAAuB,EAAE;IACxF,IAAI,KAAK,GAAG,cAAc;QAAE,OAAO,SAAS,CAAA;IAC5C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;IAC5E,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;IAChF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC;aAClC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;aAC7C,MAAM,CAAC,CAAC,IAAI,EAAmB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAE/C,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAA;IACtF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;QACzE,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAQ;QACrC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QAC7C,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;IAC5C,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,KAAiC,EAA8B,EAAE,CAAC,KAAK,IAAI,IAAI;IACpG,CAAC,CAAC,SAAS;IACX,CAAC,CAAC;QACE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC;KACtC,CAAA;AAEL,MAAM,QAAQ,GAAG,CAAC,KAAgB,EAAiB,EAAE;IACnD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,QAAQ,CAAC,MAAM,EAAE,OAAO,aAAa,CAAC,OAAO,CAAA;QAClD,KAAK,QAAQ,CAAC,SAAS,EAAE,OAAO,aAAa,CAAC,SAAS,CAAA;QACvD,KAAK,QAAQ,CAAC,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,CAAA;QACjD,SAAS,OAAO,aAAa,CAAC,MAAM,CAAA;IACtC,CAAC;AACH,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,KAAc,EAA+B,EAAE;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAClF,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACxF,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,MAAM,QAAQ,GAAoB,EAAE,CAAA;IACpC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IACnG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;IACvF,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAA;IAC3F,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;QAAE,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjF,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;AAClE,CAAC,CAAA;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,MAAiB,EAAE,MAAqB,EAAW,EAAE;IAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,IAAI,SAAS,CAAA;IACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IACjD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACzC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9B,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QACzC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,QAAQ,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAC7E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;QACtB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;QACnC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,KAAK;QACxC,SAAS;QACT,SAAS;QACT,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;KACxE,CAAA;AACH,CAAC,CAAA;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAI,GAAW,YAAY,EAAkB,EAAE,CAAC,CAAC;IAC9E,IAAI;IACJ,OAAO,EAAE,kCAAkC;CAC5C,CAAC,CAAA"}

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@owlmeans/server-job",
-  "version": "0.1.18-rc.2",
+  "version": "0.1.18-rc.21",
   "license": "MIT",
   "type": "module",
   "scripts": {
     "build": "tsc -b",
     "dev": "sleep 354 && nodemon -e ts,tsx,json --watch src --exec \"tsc -p ./tsconfig.json\"",
-    "watch": "tsc -b -w --preserveWatchOutput --pretty"
+    "watch": "tsc -b -w --preserveWatchOutput --pretty",
+    "test": "bun test ./tests"
   },
   "main": "build/index.js",
   "module": "build/index.js",
@@ -22,6 +23,7 @@
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
+    "@types/bun": "^1.4.0",
     "@types/node": "^26.1.0",
     "nodemon": "^3.1.14",
     "typescript": "^7.0.2"
@@ -30,17 +32,18 @@
     "access": "public"
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.11",
-    "@owlmeans/auth-common": "^0.1.18-rc.15",
-    "@owlmeans/context": "^0.1.18-rc.10",
-    "@owlmeans/entrypoint": "^0.1.18-rc.13",
-    "@owlmeans/queue": "^0.1.18-rc.11",
-    "@owlmeans/resource": "^0.1.18-rc.11",
-    "@owlmeans/route": "^0.1.18-rc.11",
-    "@owlmeans/server-api": "^0.1.18-rc.19",
-    "@owlmeans/server-context": "^0.1.18-rc.14",
-    "@owlmeans/server-entrypoint": "^0.1.18-rc.13",
-    "@owlmeans/server-socket": "^0.1.18-rc.20",
-    "@owlmeans/socket": "^0.1.18-rc.11"
+    "@owlmeans/auth": "^0.1.18-rc.32",
+    "@owlmeans/auth-common": "^0.1.18-rc.34",
+    "@owlmeans/context": "^0.1.18-rc.30",
+    "@owlmeans/entrypoint": "^0.1.18-rc.33",
+    "@owlmeans/job": "^0.1.18-rc.4",
+    "@owlmeans/queue": "^0.1.18-rc.28",
+    "@owlmeans/resource": "^0.1.18-rc.32",
+    "@owlmeans/route": "^0.1.18-rc.31",
+    "@owlmeans/server-api": "^0.1.18-rc.38",
+    "@owlmeans/server-context": "^0.1.18-rc.33",
+    "@owlmeans/server-entrypoint": "^0.1.18-rc.32",
+    "@owlmeans/server-socket": "^0.1.18-rc.41",
+    "@owlmeans/socket": "^0.1.18-rc.30"
   }
 }