@owlmeans/server-job 0.1.18-rc.21 → 0.1.18-rc.23

package/README.md

@@ -55,7 +55,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.34
+npx @owlmeans/agent-skills@^0.1.18-rc.36
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-job",
-  "version": "0.1.18-rc.21",
-  "generatedAt": "2026-09-22T20:45:24.062Z",
+  "version": "0.1.18-rc.23",
+  "generatedAt": "2026-09-22T22:22:19.444Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-job/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/server-job
 
 **Layer:** Server
-**Install:** `"@owlmeans/server-job": "^0.1.18-rc.21"` in `dependencies`
+**Install:** `"@owlmeans/server-job": "^0.1.18-rc.23"` in `dependencies`
 
 This package is the boundary between technical `@owlmeans/queue` records and the safe
 `@owlmeans/job` contract. `serveJobEntrypoints` requires a `JobExposurePolicy`; there is no default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-job",
-  "version": "0.1.18-rc.21",
+  "version": "0.1.18-rc.23",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -32,18 +32,18 @@
     "access": "public"
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.32",
-    "@owlmeans/auth-common": "^0.1.18-rc.34",
-    "@owlmeans/context": "^0.1.18-rc.30",
-    "@owlmeans/entrypoint": "^0.1.18-rc.33",
-    "@owlmeans/job": "^0.1.18-rc.4",
-    "@owlmeans/queue": "^0.1.18-rc.28",
-    "@owlmeans/resource": "^0.1.18-rc.32",
-    "@owlmeans/route": "^0.1.18-rc.31",
-    "@owlmeans/server-api": "^0.1.18-rc.38",
-    "@owlmeans/server-context": "^0.1.18-rc.33",
-    "@owlmeans/server-entrypoint": "^0.1.18-rc.32",
-    "@owlmeans/server-socket": "^0.1.18-rc.41",
-    "@owlmeans/socket": "^0.1.18-rc.30"
+    "@owlmeans/auth": "^0.1.18-rc.34",
+    "@owlmeans/auth-common": "^0.1.18-rc.36",
+    "@owlmeans/context": "^0.1.18-rc.32",
+    "@owlmeans/entrypoint": "^0.1.18-rc.35",
+    "@owlmeans/job": "^0.1.18-rc.6",
+    "@owlmeans/queue": "^0.1.18-rc.30",
+    "@owlmeans/resource": "^0.1.18-rc.34",
+    "@owlmeans/route": "^0.1.18-rc.33",
+    "@owlmeans/server-api": "^0.1.18-rc.40",
+    "@owlmeans/server-context": "^0.1.18-rc.35",
+    "@owlmeans/server-entrypoint": "^0.1.18-rc.34",
+    "@owlmeans/server-socket": "^0.1.18-rc.43",
+    "@owlmeans/socket": "^0.1.18-rc.32"
   }
 }

package/build/consts.d.ts

@@ -1,26 +0,0 @@
-/**
- * The alias root a target app gets when its declaration names none, and the path segment the
- * group answers under.
- */
-export declare const DEFAULT_JOB_ROOT = "jobs";
-export declare const DEFAULT_JOB_PATH = "/jobs";
-/**
- * Where the owner is recorded inside a job's payload.
- *
- * A `JobRecord` has no owner column — the broker keeps only what the contract declares — so the
- * producer writes the subject into the job's own `data`, and every read here filters on
- * `data.<field>`. Change it per declaration when the app's payloads already name the subject
- * something else.
- */
-export declare const DEFAULT_OWNER_FIELD = "owner";
-/**
- * The socket event a `JobEvent` frame is pushed under.
- *
- * This name, and the `<root>:<verb>` alias shape in `entrypoints.ts`, are the whole contract
- * between this package and `@owlmeans/client-job` — the two halves cannot share a module without
- * dragging fastify into a browser bundle, so they each state it and the skills pin it.
- */
-export declare const JOB_EVENT = "job-event";
-/** Newest first: a job list is read to see what is happening now. */
-export declare const DEFAULT_JOB_SORT = "createdAt";
-//# sourceMappingURL=consts.d.ts.map

package/build/consts.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,gBAAgB,SAAS,CAAA;AACtC,eAAO,MAAM,gBAAgB,UAAU,CAAA;AAEvC;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,UAAU,CAAA;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,SAAS,cAAc,CAAA;AAEpC,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,cAAc,CAAA"}

package/build/consts.js

@@ -1,26 +0,0 @@
-/**
- * The alias root a target app gets when its declaration names none, and the path segment the
- * group answers under.
- */
-export const DEFAULT_JOB_ROOT = 'jobs';
-export const DEFAULT_JOB_PATH = '/jobs';
-/**
- * Where the owner is recorded inside a job's payload.
- *
- * A `JobRecord` has no owner column — the broker keeps only what the contract declares — so the
- * producer writes the subject into the job's own `data`, and every read here filters on
- * `data.<field>`. Change it per declaration when the app's payloads already name the subject
- * something else.
- */
-export const DEFAULT_OWNER_FIELD = 'owner';
-/**
- * The socket event a `JobEvent` frame is pushed under.
- *
- * This name, and the `<root>:<verb>` alias shape in `entrypoints.ts`, are the whole contract
- * between this package and `@owlmeans/client-job` — the two halves cannot share a module without
- * dragging fastify into a browser bundle, so they each state it and the skills pin it.
- */
-export const JOB_EVENT = 'job-event';
-/** Newest first: a job list is read to see what is happening now. */
-export const DEFAULT_JOB_SORT = 'createdAt';
-//# sourceMappingURL=consts.js.map

package/build/consts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAA;AACtC,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAA;AAEvC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAA;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAA;AAEpC,qEAAqE;AACrE,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAA"}

package/build/entrypoints.d.ts

@@ -1,20 +0,0 @@
-import type { JobEntrypointAliases, JobEntrypoints, JobEntrypointOptions } from './types.js';
-/**
- * The aliases one job group answers under.
- *
- * The shape — `<root>` and `<root>:<verb>` — is the contract `@owlmeans/client-job` addresses the
- * same group by, so a group renamed here is renamed there by passing the same root.
- */
-export declare const jobEntrypointAliases: (root: string) => JobEntrypointAliases;
-/**
- * Declare the list/get/cancel/watch entrypoints of one job group.
- *
- * It belongs in the SHARED package of a target app — the one both the API and the browser import —
- * so that the server binds and the client calls the very declarations, and neither side ever
- * writes a path. Declaring a second group is the same call with another root.
- *
- * The guard rides on the base alone: guards are inherited, so stating it once is what keeps the
- * four from drifting apart.
- */
-export declare const declareJobEntrypoints: (root: string, opts?: JobEntrypointOptions) => JobEntrypoints;
-//# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,oBAAoB,EAAgB,MAAM,YAAY,CAAA;AAE1G;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,SAAU,MAAM,KAAG,oBAMlD,CAAA;AAEF;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,SAC1B,MAAM,SAAS,oBAAoB,KACxC,cA0BF,CAAA"}

package/build/entrypoints.js

@@ -1,46 +0,0 @@
-import { contract, openProtocol, protocol, typed } from '@owlmeans/entrypoint';
-import { backend, route, RouteMethod, socket } from '@owlmeans/route';
-import { DEFAULT_GUARD } from '@owlmeans/auth-common';
-import { DEFAULT_JOB_PATH } from './consts.js';
-import { JobListQuerySchema } from './schemas.js';
-/**
- * The aliases one job group answers under.
- *
- * The shape — `<root>` and `<root>:<verb>` — is the contract `@owlmeans/client-job` addresses the
- * same group by, so a group renamed here is renamed there by passing the same root.
- */
-export const jobEntrypointAliases = (root) => ({
-    base: root,
-    list: `${root}:list`,
-    get: `${root}:get`,
-    cancel: `${root}:cancel`,
-    watch: `${root}:watch`,
-});
-/**
- * Declare the list/get/cancel/watch entrypoints of one job group.
- *
- * It belongs in the SHARED package of a target app — the one both the API and the browser import —
- * so that the server binds and the client calls the very declarations, and neither side ever
- * writes a path. Declaring a second group is the same call with another root.
- *
- * The guard rides on the base alone: guards are inherited, so stating it once is what keeps the
- * four from drifting apart.
- */
-export const declareJobEntrypoints = (root, opts) => {
-    const aliases = jobEntrypointAliases(root);
-    const base = {
-        ...(opts?.parent != null ? { parent: opts.parent } : {}),
-        ...(opts?.service != null ? { service: opts.service } : {}),
-    };
-    const guarded = opts?.guard === null ? undefined : { guards: opts?.guard ?? DEFAULT_GUARD };
-    return {
-        base: openProtocol(route(aliases.base, opts?.path ?? DEFAULT_JOB_PATH, backend(base)), guarded),
-        list: protocol(route(aliases.list, '/', backend(aliases.base)), contract.request({ query: typed(JobListQuerySchema) }, typed())),
-        // Static before parametric, so `/watch` is not swallowed by `/:id`. The router picks the
-        // static branch on its own; the order here is for whoever reads the declaration.
-        watch: protocol(route(aliases.watch, '/watch', socket(aliases.base)), contract(typed())),
-        get: protocol(route(aliases.get, '/:id', backend(aliases.base)), contract.request({ params: typed() }, typed())),
-        cancel: protocol(route(aliases.cancel, '/:id', backend(aliases.base, RouteMethod.DELETE)), contract.request({ params: typed() }, typed())),
-    };
-};
-//# sourceMappingURL=entrypoints.js.map

package/build/entrypoints.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAGjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,IAAY,EAAwB,EAAE,CAAC,CAAC;IAC3E,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,GAAG,IAAI,OAAO;IACpB,GAAG,EAAE,GAAG,IAAI,MAAM;IAClB,MAAM,EAAE,GAAG,IAAI,SAAS;IACxB,KAAK,EAAE,GAAG,IAAI,QAAQ;CACvB,CAAC,CAAA;AAEF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,IAAY,EAAE,IAA2B,EACzB,EAAE;IAClB,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;IAC1C,MAAM,IAAI,GAA0B;QAClC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,IAAI,aAAa,EAAE,CAAA;IAE3F,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC;QAC/F,IAAI,EAAE,QAAQ,CACZ,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAe,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAC9E;QACD,yFAAyF;QACzF,iFAAiF;QACjF,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAQ,CAAC,CAAC;QAC9F,GAAG,EAAE,QAAQ,CACX,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAC/D;QACD,MAAM,EAAE,QAAQ,CACd,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,EACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAkB,EAAE,EAAE,KAAK,EAAE,CAAC,CAC/D;KACF,CAAA;AACH,CAAC,CAAA"}

package/build/schemas.d.ts

@@ -1,10 +0,0 @@
-import type { JSONSchemaType } from 'ajv';
-import type { JobListQuery } from './types.js';
-/**
- * Every field is optional: a list screen opens before it has a filter, and a caller that knows
- * nothing about jobs must still get the page it is allowed to see. `state` and `name` are left as
- * plain strings rather than enums so that a driver reporting a state this line does not know
- * narrows the list instead of failing the request.
- */
-export declare const JobListQuerySchema: JSONSchemaType<JobListQuery>;
-//# sourceMappingURL=schemas.d.ts.map

package/build/schemas.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,KAAK,CAAA;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAE9C;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,cAAc,CAAC,YAAY,CAS3D,CAAA"}

package/build/schemas.js

@@ -1,17 +0,0 @@
-/**
- * Every field is optional: a list screen opens before it has a filter, and a caller that knows
- * nothing about jobs must still get the page it is allowed to see. `state` and `name` are left as
- * plain strings rather than enums so that a driver reporting a state this line does not know
- * narrows the list instead of failing the request.
- */
-export const JobListQuerySchema = {
-    type: 'object',
-    properties: {
-        state: { type: 'string', maxLength: 32, nullable: true },
-        name: { type: 'string', maxLength: 256, nullable: true },
-        page: { type: 'integer', minimum: 0, nullable: true },
-        size: { type: 'integer', minimum: 1, maximum: 200, nullable: true },
-    },
-    additionalProperties: true,
-};
-//# sourceMappingURL=schemas.js.map

package/build/schemas.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAiC;IAC9D,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxD,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QACxD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrD,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;KACpE;IACD,oBAAoB,EAAE,IAAI;CAC3B,CAAA"}

package/build/utils/owner.d.ts

@@ -1,33 +0,0 @@
-import type { BasicConfig, BasicContext } from '@owlmeans/context';
-import type { AbstractRequest } from '@owlmeans/entrypoint';
-import type { Criteria } from '@owlmeans/resource';
-import type { JobRecord } from '@owlmeans/queue';
-import type { JobHandlerOptions } from '../types.js';
-/**
- * The subject a job is attributed to.
- *
- * Profile first, user second — the same pair `@owlmeans/server-socket` addresses a connection by,
- * so a job enqueued for one profile of a multi-profile account is not visible to the others.
- */
-export declare const jobOwnerOf: (req: AbstractRequest) => string | undefined;
-/**
- * @throws {AuthorizationError} when the request carries no authenticated subject.
- */
-export declare const requireJobOwner: (req: AbstractRequest) => string;
-export declare const ownerFieldOf: (opts?: JobHandlerOptions) => string;
-/** What one record says its owner is — the payload's own field, never a broker one. */
-export declare const ownerOf: (record: JobRecord, opts?: JobHandlerOptions) => unknown;
-/**
- * Who this request reads the queue as: the owner every record must name, or `undefined` for a
- * request that reads it unscoped.
- *
- * `undefined` is reachable only through {@link JobHandlerOptions.admin}. Absent an admin check
- * every read is narrowed to the caller's own jobs and an anonymous request is refused, so a group
- * wired with no options at all is scoped rather than open.
- *
- * @throws {AuthorizationError}
- */
-export declare const jobViewer: <C extends BasicConfig, T extends BasicContext<C>>(req: AbstractRequest, ctx: T, opts?: JobHandlerOptions) => Promise<string | undefined>;
-/** The criteria one viewer reads the queue through; nothing to add when they read it unscoped. */
-export declare const jobScope: (viewer: string | undefined, opts?: JobHandlerOptions) => Criteria<JobRecord>;
-//# sourceMappingURL=owner.d.ts.map

package/build/utils/owner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner.d.ts","sourceRoot":"","sources":["../../src/utils/owner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAE3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAEhD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,UAAU,QAAS,eAAe,KAAG,MAAM,GAAG,SAClB,CAAA;AAEzC;;GAEG;AACH,eAAO,MAAM,eAAe,QAAS,eAAe,KAAG,MAOtD,CAAA;AAED,eAAO,MAAM,YAAY,UAAW,iBAAiB,KAAG,MACf,CAAA;AAEzC,uFAAuF;AACvF,eAAO,MAAM,OAAO,WAAY,SAAS,SAAS,iBAAiB,KAAG,OACM,CAAA;AAE5E;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,GAAU,CAAC,SAAS,WAAW,EAAE,CAAC,SAAS,YAAY,CAAC,CAAC,CAAC,OACzE,eAAe,OAAO,CAAC,SAAS,iBAAiB,KACrD,OAAO,CAAC,MAAM,GAAG,SAAS,CAM5B,CAAA;AAED,kGAAkG;AAClG,eAAO,MAAM,QAAQ,WACX,MAAM,GAAG,SAAS,SAAS,iBAAiB,KACnD,QAAQ,CAAC,SAAS,CAAqE,CAAA"}

package/build/utils/owner.js

@@ -1,41 +0,0 @@
-import { AuthorizationError } from '@owlmeans/auth';
-import { DEFAULT_OWNER_FIELD } from '../consts.js';
-/**
- * The subject a job is attributed to.
- *
- * Profile first, user second — the same pair `@owlmeans/server-socket` addresses a connection by,
- * so a job enqueued for one profile of a multi-profile account is not visible to the others.
- */
-export const jobOwnerOf = (req) => req.auth?.profileId ?? req.auth?.userId;
-/**
- * @throws {AuthorizationError} when the request carries no authenticated subject.
- */
-export const requireJobOwner = (req) => {
-    const owner = jobOwnerOf(req);
-    if (owner == null || owner === '') {
-        throw new AuthorizationError();
-    }
-    return owner;
-};
-export const ownerFieldOf = (opts) => opts?.ownerField ?? DEFAULT_OWNER_FIELD;
-/** What one record says its owner is — the payload's own field, never a broker one. */
-export const ownerOf = (record, opts) => record.data?.[ownerFieldOf(opts)];
-/**
- * Who this request reads the queue as: the owner every record must name, or `undefined` for a
- * request that reads it unscoped.
- *
- * `undefined` is reachable only through {@link JobHandlerOptions.admin}. Absent an admin check
- * every read is narrowed to the caller's own jobs and an anonymous request is refused, so a group
- * wired with no options at all is scoped rather than open.
- *
- * @throws {AuthorizationError}
- */
-export const jobViewer = async (req, ctx, opts) => {
-    if (opts?.admin != null && await opts.admin(req, ctx)) {
-        return undefined;
-    }
-    return requireJobOwner(req);
-};
-/** The criteria one viewer reads the queue through; nothing to add when they read it unscoped. */
-export const jobScope = (viewer, opts) => viewer == null ? {} : { [`data.${ownerFieldOf(opts)}`]: viewer };
-//# sourceMappingURL=owner.js.map

package/build/utils/owner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"owner.js","sourceRoot":"","sources":["../../src/utils/owner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAGnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAGlD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAoB,EAAsB,EAAE,CACrE,GAAG,CAAC,IAAI,EAAE,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,MAAM,CAAA;AAEzC;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAoB,EAAU,EAAE;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,kBAAkB,EAAE,CAAA;IAChC,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,IAAwB,EAAU,EAAE,CAC/D,IAAI,EAAE,UAAU,IAAI,mBAAmB,CAAA;AAEzC,uFAAuF;AACvF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAiB,EAAE,IAAwB,EAAW,EAAE,CAC7E,MAAM,CAAC,IAA4C,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;AAE5E;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAC5B,GAAoB,EAAE,GAAM,EAAE,IAAwB,EACzB,EAAE;IAC/B,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgC,CAAC,EAAE,CAAC;QACnF,OAAO,SAAS,CAAA;IAClB,CAAC;IAED,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;AAC7B,CAAC,CAAA;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,MAA0B,EAAE,IAAwB,EAC/B,EAAE,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAA"}

package/build/utils/resource.d.ts

@@ -1,23 +0,0 @@
-import type { BasicConfig, BasicContext } from '@owlmeans/context';
-import type { JobRecord, QueueResource } from '@owlmeans/queue';
-import type { JobHandlerOptions } from '../types.js';
-/**
- * The queue these handlers read.
- *
- * Named by the declaration or, with nothing named, the context's sole declared queue — which
- * `ctx.jobs()` refuses to guess once a second queue exists, so an app that grows one is told to
- * name it rather than quietly served the wrong backlog.
- */
-export declare const jobsOf: <D = unknown, R = unknown>(ctx: BasicContext<BasicConfig>, opts?: JobHandlerOptions) => QueueResource<D, R>;
-/** Does this viewer own that record? An unscoped viewer (`undefined`) owns everything. */
-export declare const owns: (record: JobRecord, viewer: string | undefined, opts?: JobHandlerOptions) => boolean;
-/**
- * One job, as this viewer is allowed to see it.
- *
- * A job that exists but belongs to someone else answers exactly as an absent one does: telling an
- * unauthorized caller apart from a wrong id is what turns an id space into an enumeration oracle.
- *
- * @throws {UnknownJob}
- */
-export declare const readOwnedJob: <D = unknown, R = unknown>(resource: QueueResource<D, R>, id: string, viewer: string | undefined, opts?: JobHandlerOptions) => Promise<JobRecord<D, R>>;
-//# sourceMappingURL=resource.d.ts.map

package/build/utils/resource.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource.d.ts","sourceRoot":"","sources":["../../src/utils/resource.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAE/D,OAAO,KAAK,EAAW,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG7D;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,GAAI,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,OACxC,YAAY,CAAC,WAAW,CAAC,SAAS,iBAAiB,KACvD,aAAa,CAAC,CAAC,EAAE,CAAC,CAAwD,CAAA;AAE7E,0FAA0F;AAC1F,eAAO,MAAM,IAAI,WACP,SAAS,UAAU,MAAM,GAAG,SAAS,SAAS,iBAAiB,KACtE,OAA6D,CAAA;AAEhE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,GAAU,CAAC,GAAG,OAAO,EAAE,CAAC,GAAG,OAAO,YAC/C,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,MAAM,UAAU,MAAM,GAAG,SAAS,SAAS,iBAAiB,KAC9F,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAOzB,CAAA"}

package/build/utils/resource.js

@@ -1,28 +0,0 @@
-import { UnknownJob } from '@owlmeans/queue';
-import { ownerOf } from './owner.js';
-/**
- * The queue these handlers read.
- *
- * Named by the declaration or, with nothing named, the context's sole declared queue — which
- * `ctx.jobs()` refuses to guess once a second queue exists, so an app that grows one is told to
- * name it rather than quietly served the wrong backlog.
- */
-export const jobsOf = (ctx, opts) => ctx.jobs(opts?.queue);
-/** Does this viewer own that record? An unscoped viewer (`undefined`) owns everything. */
-export const owns = (record, viewer, opts) => viewer == null || ownerOf(record, opts) === viewer;
-/**
- * One job, as this viewer is allowed to see it.
- *
- * A job that exists but belongs to someone else answers exactly as an absent one does: telling an
- * unauthorized caller apart from a wrong id is what turns an id space into an enumeration oracle.
- *
- * @throws {UnknownJob}
- */
-export const readOwnedJob = async (resource, id, viewer, opts) => {
-    const record = await resource.load(id);
-    if (record == null || !owns(record, viewer, opts)) {
-        throw new UnknownJob(`${resource.queue}:${id}`);
-    }
-    return record;
-};
-//# sourceMappingURL=resource.js.map

package/build/utils/resource.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resource.js","sourceRoot":"","sources":["../../src/utils/resource.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,GAA8B,EAAE,IAAwB,EACnC,EAAE,CAAE,GAA0B,CAAC,IAAI,CAAO,IAAI,EAAE,KAAK,CAAC,CAAA;AAE7E,0FAA0F;AAC1F,MAAM,CAAC,MAAM,IAAI,GAAG,CAClB,MAAiB,EAAE,MAA0B,EAAE,IAAwB,EAC9D,EAAE,CAAC,MAAM,IAAI,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,MAAM,CAAA;AAEhE;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,QAA6B,EAAE,EAAU,EAAE,MAA0B,EAAE,IAAwB,EACrE,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtC,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAA;IACjD,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC,CAAA"}