@owlmeans/server-job 0.1.18-rc.3 → 0.1.18-rc.30

package/README.md

@@ -1,10 +1,51 @@
 # @owlmeans/server-job
 
-Server entrypoints for a queue job protocol group: list, get, cancel and lifecycle watch.
+Server bridge from technical queue records to the sanitized `@owlmeans/job` domain contract.
+Every binding requires an application-owned `JobExposurePolicy`; there is no permissive default.
 
-Declare a group in shared code with `declareJobEntrypoints(root, options)`, then register
-`...serveJobEntrypoints(jobProtocols)` in the API runtime. The package returns local bindings and
-keeps the shared job declarations immutable.
+```typescript
+import { declareJobEntrypoints } from '@owlmeans/job'
+import { jobViewOf, serveJobEntrypoints } from '@owlmeans/server-job'
+
+export const reportJobs = declareJobEntrypoints('report-jobs', {
+  path: '/reports/jobs', parent: api.reports.base,
+})
+
+export const bindings = serveJobEntrypoints(reportJobs, {
+  queue: REPORT_QUEUE,
+  policy: {
+    audience: req => ({ userId: requireUserId(req) }),
+    where: (audience, query) => ({
+      $and: [
+        { 'data.ownerId': audience.userId },
+        ...(query.kind == null ? [] : [{ name: internalNameOf(query.kind) }]),
+      ],
+    }),
+    lookup: async (id, audience, resource) =>
+      resource.load({ publicId: id, 'data.ownerId': audience.userId }),
+    map: record => jobViewOf(record, {
+      id: publicIdOf(record),
+      kind: publicKindOf(record),
+      summary: publicSummaryOf(record),
+      metadata: allowlistedMetadataOf(record),
+      result: publicResultOf(record),
+    }),
+    cancel: (record, audience) => ownerIdOf(record) === audience.userId,
+  },
+})
+```
+
+The policy is the security boundary:
+
+- `audience` derives authenticated application scope.
+- `where` translates the closed public query into scoped technical criteria.
+- `lookup` resolves an opaque public id inside that scope.
+- `map` allowlists fields and returns only `JobView`; `jobViewOf` bounds and sanitizes JSON.
+- `cancel` is optional and cancellation is denied unless it explicitly approves.
+
+List, get, cancel and watch all apply the same policy. Watch frames are reloaded inside the
+audience scope and emitted as `JobViewEvent`; an unattributable event is dropped. Keep completed
+records long enough for watched completion events to be projected.
 
 <!-- owlmeans:agent-guidance:start -->
 ## Agent guidance
@@ -14,7 +55,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.15
+npx @owlmeans/agent-skills@^0.1.18-rc.45
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-job",
-  "version": "0.1.18-rc.3",
-  "generatedAt": "2026-09-12T08:39:52.731Z",
+  "version": "0.1.18-rc.30",
+  "generatedAt": "2026-10-01T23:27:48.744Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-job/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: server-job
-description: How to use @owlmeans/server-job — declaring and binding the list/get/cancel/watch entrypoints over a queue, the ownership rule that scopes them to the authenticated subject, the admin escape hatch, and the socket that pushes JobEvent frames. Auto-invoked when exposing queue jobs to an application's UI or importing job entrypoint helpers.
+description: How to expose technical queue work as sanitized application JobView data through a mandatory authenticated policy. Auto-invoked when binding @owlmeans/server-job or building UI-visible application job status.
 user-invocable: false
 ---
 <!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
@@ -8,134 +8,86 @@ user-invocable: false
 # @owlmeans/server-job
 
 **Layer:** Server
-**Install:** `"@owlmeans/server-job": "^0.1.18-rc.3"` in `dependencies`
-
-The READ side of a queue. `@owlmeans/queue` and its driver enqueue and process; this package turns
-what they leave behind into four entrypoints an application binds, so that "a long job reports
-progress to the user's screen" is wiring rather than code.
-
-## Key Exports
-
-| Export | Description |
-|--------|-------------|
-| `declareJobEntrypoints(root, opts?)` | The four declarations of one job group, for the SHARED package |
-| `jobEntrypointAliases(root)` | `{ base, list, get, cancel, watch }` — the alias shape both halves use |
-| `serveJobEntrypoints(jobProtocols, opts?)` | Return the local bindings for one declared job protocol group |
-| `listJobs(opts?)` / `getJob(opts?)` / `cancelJob(opts?)` | The HTTP handlers, for binding by hand |
-| `watchJobs(opts?)` | The socket handler — pushes `JobEvent` frames under `JOB_EVENT` |
-| `jobOwnerOf(req)` / `requireJobOwner(req)` / `jobViewer(req, ctx, opts?)` | Who a request reads as |
-| `jobScope(viewer, opts?)` / `owns(record, viewer, opts?)` / `readOwnedJob(...)` | Applying that to records |
-| `ownerFieldOf(opts?)` / `ownerOf(record, opts?)` | The configured owner field, and what one record says its owner is |
-| `jobsOf(ctx, opts?)` | The `QueueResource` a group reads |
-| `JobListQuerySchema` | The list query's ajv schema, for a filter of your own |
-| `JobEntrypointAliases` / `JobEntrypointOptions` / `JobHandlerOptions` / `JobAdminCheck` / `JobListQuery` | The alias and option shapes |
-| Constants | `DEFAULT_JOB_ROOT` (`jobs`), `DEFAULT_JOB_PATH` (`/jobs`), `DEFAULT_OWNER_FIELD` (`owner`), `DEFAULT_JOB_SORT` (`createdAt`), `JOB_EVENT` (`job-event`) |
-
-## Declaring, once, in the shared package
-
-A group is a root alias plus a path. Everything under it is derived, so a target app declares it in
-the package its API and its browser both import, and neither side ever writes a path:
+**Install:** `"@owlmeans/server-job": "^0.1.18-rc.30"` in `dependencies`
 
-```typescript
-import { declareJobEntrypoints } from '@owlmeans/server-job'
-
-export const REPORTS = 'reports'
-export const protocols = {
-  jobs: declareJobEntrypoints(REPORTS, { path: '/reports/jobs', parent: app.api.base }),
-}
-```
-
-Aliases are `<root>`, `<root>:list`, `<root>:get`, `<root>:cancel`, `<root>:watch`. **That shape,
-and the `job-event` frame name, are the whole contract with `@owlmeans/client-job`** — the two
-packages restate them instead of sharing a module, because this one pulls fastify in and a browser
-bundle must not.
+This package is the boundary between technical `@owlmeans/queue` records and the safe
+`@owlmeans/job` contract. `serveJobEntrypoints` requires a `JobExposurePolicy`; there is no default
+owner field, administrator bypass or raw-record response.
 
-The guard rides on the base alone and the other four inherit it. It defaults to `DEFAULT_GUARD`
-because ownership is derived from the authenticated subject, and an unguarded group has no subject
-to derive it from — `guard: null` is for a group scoped some other way, and its handlers then
-answer `AuthorizationError`. `service` points the group at another app's route; `path` moves it.
+## Declare the public contract
 
-`/watch` is declared before `/:id` so the static branch reads first. Declaring a second group is
-the same call with another root.
-
-## Serving
+Declare routes with `@owlmeans/job`, in the narrow package shared by this API and its client:
 
 ```typescript
-import { serveJobEntrypoints } from '@owlmeans/server-job'
-import { appendRedisQueue } from '@owlmeans/redis-queue'
-
-appendRedisQueue(context)
-export const appEntrypoints = [
-  ...serveJobEntrypoints(protocols.jobs, { queue: REPORT_QUEUE }),
-]
-context.registerEntrypoints(appEntrypoints)
-```
-
-Pass the declared protocol group, never a flattened or materialized entrypoint list. `serveJobEntrypoints()`
-returns only local bindings; an app wanting a custom handler binds the same protocol afterwards.
-`queue` names which declared queue the group reads; omitted, `ctx.jobs()` answers with the sole
-declared queue and refuses to guess once there are two.
+import { declareJobEntrypoints } from '@owlmeans/job'
 
-## The ownership rule
-
-**A caller sees only the jobs it owns**, and ownership lives in the job's own payload — a
-`JobRecord` has no owner column, so the producer writes it:
-
-```typescript
-await context.jobs(REPORT_QUEUE).create({
-  name: 'report:build',
-  data: { owner: req.auth!.profileId ?? req.auth!.userId, target: id },
+export const reportJobs = declareJobEntrypoints('report-jobs', {
+  path: '/reports/jobs', parent: api.reports.base,
 })
 ```
 
-Reads filter on `data.owner` (`ownerField` renames it) against `auth.profileId ?? auth.userId` —
-profile first, the same subject `@owlmeans/server-socket` addresses a connection by, so one profile
-of a multi-profile account does not see another's work.
+These are ordinary guarded HTTP/WS declarations. They carry no queue name or broker option.
 
-A job that exists but belongs to someone else answers **`UnknownJob`, exactly as an absent one
-does**. Telling the two apart is what turns a broker id space into an enumeration oracle.
-
-The escape hatch is a predicate, never a permission name — which permission, gate or role means
-"operator" is the application's decision:
+## Bind the bridge
 
 ```typescript
-serveJobEntrypoints(protocols.jobs, {
+import { jobViewOf, serveJobEntrypoints } from '@owlmeans/server-job'
+
+export const reportJobBindings = serveJobEntrypoints(reportJobs, {
   queue: REPORT_QUEUE,
-  admin: req => req.auth?.scopes?.includes('ops') === true,
+  policy: {
+    audience: req => ({ userId: requireUserId(req) }),
+    where: (audience, query) => ({
+      $and: [
+        { 'data.ownerId': audience.userId },
+        ...(query.kind == null ? [] : [{ name: internalNameOf(query.kind) }]),
+      ],
+    }),
+    lookup: async (id, audience, resource) =>
+      resource.load({ publicId: id, 'data.ownerId': audience.userId }),
+    map: record => jobViewOf(record, {
+      id: publicIdOf(record),
+      kind: publicKindOf(record),
+      summary: publicSummaryOf(record),
+      metadata: allowlistedMetadataOf(record),
+      result: publicResultOf(record),
+    }),
+    cancel: (record, audience) => ownerIdOf(record) === audience.userId,
+  },
 })
 ```
 
-Absent an `admin` check every read is scoped and an anonymous request is refused, so a group wired
-with no options at all is closed rather than open.
-
-## What each handler answers
+Every policy part is load-bearing:
 
-| Alias | Method | Answers |
-|---|---|---|
-| `<root>:list` | GET `/` | `ListResult<JobRecord>`, newest first by `createdAt`. `state`, `name`, `page`, `size` in the query. Paging is opt-in and driven by `size` (1–200): without one the whole scoped list comes back and a `page` alone counts for nothing, since a broker has no default page size. `state` and `name` are plain strings, so a driver state this package does not know still narrows the list |
-| `<root>:get` | GET `/:id` | One `JobRecord`, or `UnknownJob` |
-| `<root>:cancel` | DELETE `/:id` | The record that was removed. Cancellation IS deletion in the queue contract; it does not interrupt a processor mid-run |
-| `<root>:watch` | SOCKET `/watch` | `JobEvent` frames under `job-event`, as the queue publishes them. The subscription is released on the socket's system `close` frame, so a dropped browser stops the queue subscription behind it |
+| Part | Rule |
+|---|---|
+| `audience` | Derive authenticated application scope; never trust a body owner id |
+| `where` | Translate the closed public query into criteria that always include that scope |
+| `lookup` | Resolve an opaque public id only inside the same scope |
+| `map` | Explicitly allowlist public fields and return `JobView` |
+| `cancel` | Optional; absence or `false` denies cancellation |
 
-## The one gotcha
+`jobViewOf` maps technical states and timestamps, copies only fields the application supplies,
+bounds JSON depth/item/string size, strips prototype keys and non-JSON values, and never copies a
+raw failure. Use `publicJobError()` unless an application-safe message is explicitly available.
 
-**A `JobEvent` carries no owner.** `watchJobs` attributes each frame by reading its job back and
-remembers the ids that answered for the life of the connection. A queue configured with
-`removeOnComplete` therefore loses its completion events here — the record they would be
-attributed by is gone by the time the event arrives, and an unattributable frame is dropped rather
-than fanned out to everyone. **Leave completed jobs in place on any queue that is watched.**
+List, get, cancel and watch all use the same policy. A foreign id answers the same as an absent
+one. Watch reloads each event inside the audience scope and emits only `JobViewEvent`; an event that
+cannot be attributed is dropped. Keep completed records long enough for their completion event to
+be projected.
 
-## Depends On
+## Key exports
 
-- `@owlmeans/queue` — `ctx.jobs(queue)`, `JobRecord`, `JobEvent`, `JobState`, `UnknownJob`
-- `@owlmeans/server-api` — `handlers`
-- `@owlmeans/server-socket` — `connection(protocol, callback)` and guard enforcement that fills `req.auth`
-- `@owlmeans/server-entrypoint` — `bind`
-- `@owlmeans/auth-common` — `DEFAULT_GUARD`
+| Export | Purpose |
+|---|---|
+| `serveJobEntrypoints` | Bind list/get/cancel/watch using a mandatory policy |
+| `listJobs` / `getJob` / `cancelJob` / `watchJobs` | Bind one handler manually |
+| `jobViewOf` | Safe record-to-view mapper |
+| `sanitizeJobJson` / `publicJobError` | Bounded JSON and safe failure helpers |
+| `JobExposurePolicy` / `JobHandlerOptions` | Application policy contracts |
 
 ## Related
 
-- `queue` — declaring queues, writing processors, and `job.progress()` (there is nothing to watch
-  without it)
-- `redis-queue` — the driver, its shutdown rule and its retention options
-- `client-job` — the browser half; `web-panel` — `./jobs` renders what it collects
+- `job` — the safe shared contract
+- `client-job` — browser state over `JobView`
+- `queue` and `redis-queue` — backend-only execution and storage

package/build/actions/cancel.d.ts

@@ -10,5 +10,5 @@ import type { Context, JobEntrypoints, JobHandlerOptions } from '../types.js';
  *
  * @throws {UnknownJob}
  */
-export declare const cancelJob: (protocol: JobEntrypoints['cancel'], opts?: JobHandlerOptions) => ReturnType<ReturnType<typeof handlers<Context>>['params']>;
+export declare const cancelJob: (protocol: JobEntrypoints['cancel'], opts: JobHandlerOptions) => ReturnType<ReturnType<typeof handlers<Context>>['params']>;
 //# sourceMappingURL=cancel.d.ts.map

package/build/actions/cancel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cancel.d.ts","sourceRoot":"","sources":["../../src/actions/cancel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG7E;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,aACV,cAAc,CAAC,QAAQ,CAAC,SAC3B,iBAAiB,KACvB,UAAU,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAOxD,CAAA"}
+{"version":3,"file":"cancel.d.ts","sourceRoot":"","sources":["../../src/actions/cancel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAE/C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG7E;;;;;;;;;GASG;AACH,eAAO,MAAM,SAAS,aACV,cAAc,CAAC,QAAQ,CAAC,QAC5B,iBAAiB,KACtB,UAAU,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAUxD,CAAA"}

package/build/actions/cancel.js

@@ -1,5 +1,6 @@
 import { handlers } from '@owlmeans/server-api';
-import { jobViewer, jobsOf, readOwnedJob } from '../utils/index.js';
+import { UnknownJob } from '@owlmeans/queue';
+import { jobsOf, readExposedJob } from '../utils/index.js';
 /**
  * Cancel a job and answer with what was cancelled.
  *
@@ -12,8 +13,12 @@ import { jobViewer, jobsOf, readOwnedJob } from '../utils/index.js';
  */
 export const cancelJob = (protocol, opts) => handlers().params(protocol, async ({ id }, ctx, req) => {
     const resource = jobsOf(ctx, opts);
-    // Read first: `take` cannot tell whose job it removed, so ownership is settled before it.
-    await readOwnedJob(resource, id, await jobViewer(req, ctx, opts), opts);
-    return await resource.take(id);
+    const audience = await opts.policy.audience(req, ctx);
+    const record = await readExposedJob(resource, id, audience, opts);
+    if (opts.policy.cancel == null || !await opts.policy.cancel(record, audience)) {
+        throw new UnknownJob('job');
+    }
+    const removed = await resource.take(record.id);
+    return await opts.policy.map(removed, audience);
 });
 //# sourceMappingURL=cancel.js.map

package/build/actions/cancel.js.map

@@ -1 +1 @@
-{"version":3,"file":"cancel.js","sourceRoot":"","sources":["../../src/actions/cancel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEnE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,QAAkC,EAClC,IAAwB,EACoC,EAAE,CAC9D,QAAQ,EAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,0FAA0F;IAC1F,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IAEvE,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAChC,CAAC,CAAC,CAAA"}
+{"version":3,"file":"cancel.js","sourceRoot":"","sources":["../../src/actions/cancel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAE5C,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAE1D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,QAAkC,EAClC,IAAuB,EACqC,EAAE,CAC9D,QAAQ,EAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACjE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAY,CAAC,CAAA;IACxD,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AACjD,CAAC,CAAC,CAAA"}

package/build/actions/get.d.ts

@@ -5,5 +5,5 @@ import type { Context, JobEntrypoints, JobHandlerOptions } from '../types.js';
  *
  * @throws {UnknownJob} for an id that is absent AND for one that belongs to someone else.
  */
-export declare const getJob: (protocol: JobEntrypoints['get'], opts?: JobHandlerOptions) => ReturnType<ReturnType<typeof handlers<Context>>['params']>;
+export declare const getJob: (protocol: JobEntrypoints['get'], opts: JobHandlerOptions) => ReturnType<ReturnType<typeof handlers<Context>>['params']>;
 //# sourceMappingURL=get.d.ts.map

package/build/actions/get.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../src/actions/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG7E;;;;GAIG;AACH,eAAO,MAAM,MAAM,aACP,cAAc,CAAC,KAAK,CAAC,SACxB,iBAAiB,KACvB,UAAU,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAKxD,CAAA"}
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../src/actions/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG7E;;;;GAIG;AACH,eAAO,MAAM,MAAM,aACP,cAAc,CAAC,KAAK,CAAC,QACzB,iBAAiB,KACtB,UAAU,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAMxD,CAAA"}

package/build/actions/get.js

@@ -1,5 +1,5 @@
 import { handlers } from '@owlmeans/server-api';
-import { jobViewer, jobsOf, readOwnedJob } from '../utils/index.js';
+import { jobsOf, readExposedJob } from '../utils/index.js';
 /**
  * One job.
  *
@@ -7,6 +7,8 @@ import { jobViewer, jobsOf, readOwnedJob } from '../utils/index.js';
  */
 export const getJob = (protocol, opts) => handlers().params(protocol, async ({ id }, ctx, req) => {
     const resource = jobsOf(ctx, opts);
-    return await readOwnedJob(resource, id, await jobViewer(req, ctx, opts), opts);
+    const audience = await opts.policy.audience(req, ctx);
+    const record = await readExposedJob(resource, id, audience, opts);
+    return await opts.policy.map(record, audience);
 });
 //# sourceMappingURL=get.js.map

package/build/actions/get.js.map

@@ -1 +1 @@
-{"version":3,"file":"get.js","sourceRoot":"","sources":["../../src/actions/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAE/C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,QAA+B,EAC/B,IAAwB,EACoC,EAAE,CAC9D,QAAQ,EAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAElC,OAAO,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;AAChF,CAAC,CAAC,CAAA"}
+{"version":3,"file":"get.js","sourceRoot":"","sources":["../../src/actions/get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAE/C,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,QAA+B,EAC/B,IAAuB,EACqC,EAAE,CAC9D,QAAQ,EAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IACjE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AAChD,CAAC,CAAC,CAAA"}

package/build/actions/list.d.ts

@@ -8,5 +8,5 @@ import type { Context, JobEntrypoints, JobHandlerOptions } from '../types.js';
  * name filters go through the same criteria language as every other resource, so a filter written
  * for this list means the same thing applied to the store the browser holds.
  */
-export declare const listJobs: (protocol: JobEntrypoints['list'], opts?: JobHandlerOptions) => ReturnType<ReturnType<typeof handlers<Context>>['request']>;
+export declare const listJobs: (protocol: JobEntrypoints['list'], opts: JobHandlerOptions) => ReturnType<ReturnType<typeof handlers<Context>>['request']>;
 //# sourceMappingURL=list.d.ts.map

package/build/actions/list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/actions/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAK/C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAgB,MAAM,aAAa,CAAA;AAG3F;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,aACT,cAAc,CAAC,MAAM,CAAC,SACzB,iBAAiB,KACvB,UAAU,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAe3D,CAAA"}
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/actions/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAG/C,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAgB,MAAM,aAAa,CAAA;AAG3F;;;;;;;GAOG;AACH,eAAO,MAAM,QAAQ,aACT,cAAc,CAAC,MAAM,CAAC,QAC1B,iBAAiB,KACtB,UAAU,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAY3D,CAAA"}

package/build/actions/list.js

@@ -1,6 +1,5 @@
 import { handlers } from '@owlmeans/server-api';
-import { DEFAULT_JOB_SORT } from '../consts.js';
-import { jobScope, jobViewer, jobsOf } from '../utils/index.js';
+import { jobsOf } from '../utils/index.js';
 /**
  * The caller's jobs, newest first.
  *
@@ -11,16 +10,15 @@ import { jobScope, jobViewer, jobsOf } from '../utils/index.js';
  */
 export const listJobs = (protocol, opts) => handlers().request(protocol, async (req, ctx) => {
     const resource = jobsOf(ctx, opts);
-    const viewer = await jobViewer(req, ctx, opts);
+    const audience = await opts.policy.audience(req, ctx);
     const query = (req.query ?? {});
-    const where = {
-        ...jobScope(viewer, opts),
-        ...(query.state != null ? { state: query.state } : {}),
-        ...(query.name != null ? { name: query.name } : {}),
-    };
-    return await resource.list(where, {
-        sort: [{ field: DEFAULT_JOB_SORT, order: 'desc' }],
+    const listed = await resource.list(opts.policy.where(audience, query), {
+        sort: [{ field: 'createdAt', order: 'desc' }],
         ...(query.size != null ? { size: query.size, page: query.page ?? 0 } : {}),
     });
+    return {
+        ...listed,
+        items: await Promise.all(listed.items.map(record => opts.policy.map(record, audience))),
+    };
 });
 //# sourceMappingURL=list.js.map

package/build/actions/list.js.map

@@ -1 +1 @@
-{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/actions/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAI/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAE/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,QAAgC,EAChC,IAAwB,EACqC,EAAE,CAAC,QAAQ,EAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACzH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAiB,CAAA;IAE/C,MAAM,KAAK,GAAwB;QACjC,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAA;IAED,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE;QAChC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAClD,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/actions/list.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAI/C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,QAAgC,EAChC,IAAuB,EACsC,EAAE,CAAC,QAAQ,EAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IACzH,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAiB,CAAA;IAC/C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;QACrE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC7C,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC,CAAA;IACF,OAAO;QACL,GAAG,MAAM;QACT,KAAK,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;KAC1D,CAAA;AACjC,CAAC,CAAC,CAAA"}

package/build/actions/watch.d.ts

@@ -3,8 +3,8 @@ import type { JobEntrypoints, JobHandlerOptions } from '../types.js';
 /**
  * Push this caller's job lifecycle events down a socket.
  *
- * The frames are `JobEvent`s exactly as the queue publishes them, under the {@link JOB_EVENT}
- * event name — no shape of this package's own, so a client applies them with the contract types.
+ * Broker events are resolved inside the caller's audience and mapped to {@link JobViewEvent}; raw
+ * queue ids, payloads, failures and ownership fields never cross the socket boundary.
  *
  * **A `JobEvent` carries no owner**, so each one is attributed by reading its job back, and the
  * ids that answered are remembered for the life of the connection. A queue configured with
@@ -12,5 +12,5 @@ import type { JobEntrypoints, JobHandlerOptions } from '../types.js';
  * attributed by is gone by the time the event arrives, and an unattributable event is dropped
  * rather than fanned out to everyone. Leave completed jobs in place on any queue that is watched.
  */
-export declare const watchJobs: (protocol: JobEntrypoints['watch'], opts?: JobHandlerOptions) => ReturnType<typeof connection>;
+export declare const watchJobs: (protocol: JobEntrypoints['watch'], opts: JobHandlerOptions) => ReturnType<typeof connection>;
 //# sourceMappingURL=watch.d.ts.map

package/build/actions/watch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/actions/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAKpD,OAAO,KAAK,EAAW,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG7E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS,aACV,cAAc,CAAC,OAAO,CAAC,SAC1B,iBAAiB,KACvB,UAAU,CAAC,OAAO,UAAU,CAyC7B,CAAA"}
+{"version":3,"file":"watch.d.ts","sourceRoot":"","sources":["../../src/actions/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAMpD,OAAO,KAAK,EAAW,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAG7E;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,SAAS,aACV,cAAc,CAAC,OAAO,CAAC,QAC3B,iBAAiB,KACtB,UAAU,CAAC,OAAO,UAAU,CAwC7B,CAAA"}

package/build/actions/watch.js

@@ -1,12 +1,12 @@
 import { connection } from '@owlmeans/server-socket';
 import { MessageType } from '@owlmeans/socket';
-import { JOB_EVENT } from '../consts.js';
-import { jobViewer, jobsOf, owns } from '../utils/index.js';
+import { JOB_EVENT } from '@owlmeans/job';
+import { jobsOf } from '../utils/index.js';
 /**
  * Push this caller's job lifecycle events down a socket.
  *
- * The frames are `JobEvent`s exactly as the queue publishes them, under the {@link JOB_EVENT}
- * event name — no shape of this package's own, so a client applies them with the contract types.
+ * Broker events are resolved inside the caller's audience and mapped to {@link JobViewEvent}; raw
+ * queue ids, payloads, failures and ownership fields never cross the socket boundary.
  *
  * **A `JobEvent` carries no owner**, so each one is attributed by reading its job back, and the
  * ids that answered are remembered for the life of the connection. A queue configured with
@@ -16,24 +16,25 @@ import { jobViewer, jobsOf, owns } from '../utils/index.js';
  */
 export const watchJobs = (protocol, opts) => connection(protocol, async (conn, ctx, req) => {
     const resource = jobsOf(ctx, opts);
-    const viewer = await jobViewer(req, ctx, opts);
-    const mine = new Set();
-    const attributable = async (event) => {
-        if (viewer == null || mine.has(event.id)) {
-            return true;
+    const audience = await opts.policy.audience(req, ctx);
+    const publicIds = new Map();
+    const project = async (event) => {
+        const record = await resource.load({
+            $and: [{ id: event.id }, opts.policy.where(audience, {})],
+        });
+        if (record != null) {
+            const job = await opts.policy.map(record, audience);
+            publicIds.set(event.id, job.id);
+            return { type: 'upsert', job };
         }
-        const record = await resource.load(event.id);
-        if (record == null || !owns(record, viewer, opts)) {
-            return false;
-        }
-        mine.add(event.id);
-        return true;
+        const id = publicIds.get(event.id);
+        return id == null ? null : { type: 'remove', id };
     };
     const unsubscribe = await resource.subscribe(async (event) => {
         try {
-            if (await attributable(event)) {
-                await conn.notify(JOB_EVENT, event);
-            }
+            const projected = await project(event);
+            if (projected != null)
+                await conn.notify(JOB_EVENT, projected);
         }
         catch (e) {
             console.error('Job watch notify error:', e);

package/build/actions/watch.js.map

@@ -1 +1 @@
-{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/actions/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAE3D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,QAAiC,EACjC,IAAwB,EACO,EAAE,CAAC,UAAU,CAA2B,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1G,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC9C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9B,MAAM,YAAY,GAAG,KAAK,EAAE,KAAe,EAAoB,EAAE;QAC/D,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5C,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAElB,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QACzD,IAAI,CAAC;YACH,IAAI,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACrC,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;QAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,OAA6B,CAAA;QACzC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,WAAW,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}
+{"version":3,"file":"watch.js","sourceRoot":"","sources":["../../src/actions/watch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAA;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAIzC,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,QAAiC,EACjC,IAAuB,EACQ,EAAE,CAAC,UAAU,CAA2B,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1G,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACrD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE3C,MAAM,OAAO,GAAG,KAAK,EAAE,KAAe,EAAgC,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YACjC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC1D,CAAC,CAAA;QACF,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACnD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;YAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAA;QAChC,CAAC;QACD,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAClC,OAAO,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;IACnD,CAAC,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,SAAS,IAAI,IAAI;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,EAAC,EAAE;QAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,OAA6B,CAAA;QACzC,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,WAAW,EAAE,CAAA;YACrB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC,CAAC,CAAA;YAClD,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/build/helper.d.ts

@@ -8,5 +8,5 @@ import type { JobEntrypoints, JobHandlerOptions } from './types.js';
  *
  * @throws {SyntaxError} when the array carries no group under that root.
  */
-export declare const serveJobEntrypoints: (entrypoints: JobEntrypoints, opts?: JobHandlerOptions) => import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocolDeclaration>[];
+export declare const serveJobEntrypoints: (entrypoints: JobEntrypoints, opts: JobHandlerOptions) => import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocolDeclaration>[];
 //# sourceMappingURL=helper.d.ts.map

package/build/helper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnE;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,gBAAiB,cAAc,SAAS,iBAAiB,mIAMxF,CAAA"}
+{"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnE;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,gBAAiB,cAAc,QAAQ,iBAAiB,mIAMvF,CAAA"}

package/build/helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAG3E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,WAA2B,EAAE,IAAwB,EAAE,EAAE,CAAC;IAC5F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAC9D,CAAA"}
+{"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAG3E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,WAA2B,EAAE,IAAuB,EAAE,EAAE,CAAC;IAC3F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAC9D,CAAA"}

package/build/index.d.ts

@@ -1,7 +1,4 @@
 export type * from './types.js';
-export * from './consts.js';
-export * from './schemas.js';
-export * from './entrypoints.js';
 export * from './helper.js';
 export * from './actions/index.js';
 export * from './utils/index.js';

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAE/B,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAE/B,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}

package/build/index.js

@@ -1,6 +1,3 @@
-export * from './consts.js';
-export * from './schemas.js';
-export * from './entrypoints.js';
 export * from './helper.js';
 export * from './actions/index.js';
 export * from './utils/index.js';

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAA;AAC3B,cAAc,cAAc,CAAA;AAC5B,cAAc,kBAAkB,CAAA;AAChC,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAA;AAC3B,cAAc,oBAAoB,CAAA;AAClC,cAAc,kBAAkB,CAAA"}