cursedbelt 0.0.0 → 2.3.0

package/dist/server/index.d.ts

@@ -1,23 +1,26 @@
 export { ChunkStore, type ChunkStoreOpts, CTGR_WIRE_VERSION, type CtgrDecoded, type CtgrMethod, decodeRequest, type EncodedRequest, type EncodeOpts, encodeRequest, type UploadedFile, } from '../ctgr';
 export { type CreateAppOpts, createApp, type ServeBunOpts, serveBun } from './app';
-export { type AppJwtPayload, AUTH_COOKIE_NAME, type AuthEnv, type AuthUser, type AuthVariables, type CreateSessionInput, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type CsrfOptions, clearAuthCookie, createAuthMiddleware, createCsrfMiddleware, createLoginThrottle, createSessionStore, DEFAULT_TOTP_ISSUER, decryptVaultItem, deriveVaultKey, encryptVaultItem, generateRecoveryCodes, generateTotpSecret, getOnlyEnforcement, getTotpUri, hashPassword, isGetOnlyViolation, type LoginThrottle, type LoginThrottleOptions, needsRehash, type Session, type SessionStore, type SessionStoreOptions, signToken, type TokenPurpose, verifyPassword, verifyPurposeToken, verifyRecoveryCode, verifyToken, verifyTotpCode, } from './auth';
+export { type AppJwtPayload, AUTH_COOKIE_NAME, type AuthEnv, type AuthUser, type AuthVariables, type CreateSessionInput, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, type CsrfOptions, clearAuthCookie, createAuthMiddleware, createCsrfMiddleware, clientKeyOf, clientKeyOfContext, createLoginThrottle, createSessionStore, createRs256FileTokenSigner, DEFAULT_TOTP_ISSUER, decryptVaultItem, deriveVaultKey, encryptVaultItem, generateRecoveryCodes, generateTotpSecret, getOnlyEnforcement, getTotpUri, hashPassword, isGetOnlyViolation, type LoginThrottle, type LoginThrottleOptions, type ThrottleVerdict, needsRehash, type Rs256FileTokenSignerOptions, type Session, type SessionStore, type SessionStoreOptions, signToken, type TokenPurpose, verifyPassword, verifyPurposeToken, verifyRecoveryCode, verifyToken, verifyTotpCode, } from './auth';
 export type { CursedbeltEnv, CursedbeltVariables } from './context';
 export { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr';
 export { createKysely, type PlumbingDb } from './db/kysely';
 export type { AppConfigRow, AuthSessionRow, EmailFailureRow, EventLogRow, JobRunRow, JobStateRow, MigrationRow, PlumbingSchema, RequestMetricRow, SystemSampleRow, } from './db/plumbingTypes';
-export { ApiError, type ApiErrorOptions, type ErrorEnvelope, isApiError, toErrorEnvelope, } from './errors';
+export { ApiError, type ApiErrorOptions, type ErrorEnvelope, isApiError, toErrorEnvelope, toValidationIssues, VALIDATION_ERROR_CODE, type ValidationIssue, validationEnvelope, } from './errors';
 export { type CreateJobRunnerOptions, createFireQueue, createJobRunner, createPollingJob, DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, defaultJobLogger, type FireQueue, type FireQueueOpts, type JobContext, type JobDef, type JobLogger, type JobRunner, type JobRunRecord, JobTimeoutError, type PollingJob, type PollingJobOpts, } from './jobs';
 export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, extractThumbnail, ffmpegTimeToSeconds, isFfmpegAvailable, isFfprobeAvailable, type ProbeResult, parseFfmpegProgress, parseFfprobe, probeMedia, renderImage, trimVideo, type VideoCodecPlan, videoCodecPlan, } from './media-bun';
 export { createMetricsBuffer, type MetricRow, type MetricsBuffer, type MetricsBufferOptions, } from './metrics/metricsBuffer';
 export { normalizeRoute } from './metrics/normalizeRoute';
 export { correlationId } from './middleware/correlationId';
+export { type CorsOpts, corsAllowlist, corsOptsFromEnv } from './middleware/corsAllowlist';
 export { errorEnvelope } from './middleware/errorEnvelope';
+export { crossOriginRefusal } from './middleware/localOrigin';
 export { clientIp, createRateLimiter, type RateLimitOpts } from './middleware/rateLimit';
 export { type RequestLoggerOpts, requestLogger } from './middleware/requestLogger';
 export { type CspDirectives, type SecurityHeadersOpts, securityHeaders, } from './middleware/securityHeaders';
-export { type FieldError, toFieldErrors, VALIDATION_ERROR_CODE, validationEnvelope, type ZValidatorTarget, zValidator, } from './middleware/zValidator';
-export { addColumnIfMissing, applyRecommendedPragmas, columnExists, type PragmaOptions, runMigrations, } from './migration/runner';
+export { type ZValidatorTarget, zValidator } from './middleware/zValidator';
+export { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './migration/runner';
 export type { Migration } from './migration/types';
-export { applyFtsSchema, type BackupInfo, buildFtsSchema, createFts5Search, createSqliteBackupService, createSqliteHealthChecks, createSqliteViewerMiddleware, type Fts5Search, type FtsHighlightOpts, type FtsResult, type FtsSearchOpts, type FtsSnippetOpts, type FtsTableSpec, isReadOnlySql, type SqliteBackupOpts, type SqliteBackupS3Opts, type SqliteBackupService, type SqliteHealthCheck, type SqliteHealthOpts, type SqliteHealthResult, type SqliteHealthStatus, sanitizeFtsQuery, } from './sqlite';
+export { AUDIT_LOG_MIGRATIONS, auditStateAt, auditStateAtVersion, auditStep, createSqliteAuditSink, } from './audit';
+export { applyFtsSchema, type BackupInfo, buildFtsSchema, clampLimit, clampOffset, collectSqliteStats, createFts5Search, createSqliteBackupService, createSqliteHealthChecks, createSqliteViewerMiddleware, type DbStats, exportSqliteSnapshot, exportSqliteTable, type Fts5Search, type FtsHighlightOpts, type FtsResult, type FtsSearchOpts, type FtsSnippetOpts, type FtsTableSpec, type ImportMode, type ImportResult, importRowsIntoSqliteTable, isKnownTable, isReadOnlySql, listSqliteTables, NotReadOnlyError, quoteIdent, type RestoreResult, readSqliteTable, restoreSqliteSnapshot, runReadonlySqlite, type SnapshotExport, type SqliteBackupOpts, type SqliteBackupS3Opts, type SqliteBackupService, type SqliteHealthCheck, type SqliteHealthOpts, type SqliteHealthResult, type SqliteHealthStatus, type SqliteTableInfo, type SqliteTablePage, sanitizeFtsQuery, snapshotSqlite, type TableExport, type TableExportFormat, type TableStat, UnknownTableError, } from './sqlite';
 export { computePresence, createEventBus, createWsHub, type EventBus, type EventBusData, joinRoom, leaveRoom, type PresenceEntry, type PresenceState, ROOM_META_KEY, roomOf, type WsChannel, type WsClient, type WsData, type WsHandshake, type WsHub, type WsHubOpts, type WsMessage, } from './ws';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,aAAa,EACb,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,KAAK,YAAY,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAGnF,OAAO,EACL,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,WAAW,EAChB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,WAAW,EACX,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,SAAS,EACT,KAAK,YAAY,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEnF,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EACV,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,SAAS,EACT,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,QAAQ,EACR,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,KAAK,sBAAsB,EAC3B,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,eAAe,EACf,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,QAAQ,CAAC;AAKhB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,WAAW,EAChB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,oBAAoB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,KAAK,iBAAiB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACL,KAAK,UAAU,EACf,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,gBAAgB,EACrB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAGnD,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,aAAa,EACb,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,eAAe,EACf,cAAc,EACd,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,QAAQ,EACR,SAAS,EACT,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,aAAa,EACb,MAAM,EACN,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,UAAU,EACV,KAAK,cAAc,EACnB,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,aAAa,EACb,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,KAAK,aAAa,EAAE,SAAS,EAAE,KAAK,YAAY,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAGnF,OAAO,EACL,KAAK,aAAa,EAClB,gBAAgB,EAChB,KAAK,OAAO,EACZ,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,gBAAgB,EAChB,KAAK,WAAW,EAChB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAClB,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,eAAe,EACpB,WAAW,EACX,KAAK,2BAA2B,EAChC,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,SAAS,EACT,KAAK,YAAY,EACjB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,cAAc,GACf,MAAM,QAAQ,CAAC;AAChB,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEnF,OAAO,EAAE,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EACV,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,SAAS,EACT,WAAW,EACX,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,QAAQ,EACR,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,eAAe,EACpB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,KAAK,sBAAsB,EAC3B,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,eAAe,EACf,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,QAAQ,CAAC;AAKhB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,KAAK,WAAW,EAChB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,KAAK,cAAc,EACnB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,mBAAmB,EACnB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,oBAAoB,GAC1B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,KAAK,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAAE,KAAK,iBAAiB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,eAAe,GAChB,MAAM,8BAA8B,CAAC;AAItC,OAAO,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE5E,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC9G,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAInD,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,qBAAqB,GACtB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,cAAc,EACd,KAAK,UAAU,EACf,cAAc,EACd,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAC5B,KAAK,OAAO,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,yBAAyB,EACzB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,KAAK,aAAa,EAClB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,gBAAgB,EAChB,cAAc,EACd,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,SAAS,EACd,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAGlB,OAAO,EACL,eAAe,EACf,cAAc,EACd,WAAW,EACX,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,QAAQ,EACR,SAAS,EACT,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,aAAa,EACb,MAAM,EACN,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,KAAK,EACV,KAAK,SAAS,EACd,KAAK,SAAS,GACf,MAAM,MAAM,CAAC"}

package/dist/server/index.js

@@ -10,18 +10,18 @@ export { ChunkStore, CTGR_WIRE_VERSION, decodeRequest, encodeRequest, } from '..
 export { createApp, serveBun } from './app';
 // ── Auth toolkit (task 26): jose JWT, cookies, CSRF, getOnly, session store, ──
 //    login throttle, argon2id passwords, TOTP, vault crypto, the composed middleware.
-export { AUTH_COOKIE_NAME, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, clearAuthCookie, createAuthMiddleware, createCsrfMiddleware, createLoginThrottle, createSessionStore, DEFAULT_TOTP_ISSUER, decryptVaultItem, deriveVaultKey, encryptVaultItem, generateRecoveryCodes, generateTotpSecret, getOnlyEnforcement, getTotpUri, hashPassword, isGetOnlyViolation, needsRehash, signToken, verifyPassword, verifyPurposeToken, verifyRecoveryCode, verifyToken, verifyTotpCode, } from './auth';
+export { AUTH_COOKIE_NAME, CSRF_COOKIE_NAME, CSRF_HEADER_NAME, clearAuthCookie, createAuthMiddleware, createCsrfMiddleware, clientKeyOf, clientKeyOfContext, createLoginThrottle, createSessionStore, createRs256FileTokenSigner, DEFAULT_TOTP_ISSUER, decryptVaultItem, deriveVaultKey, encryptVaultItem, generateRecoveryCodes, generateTotpSecret, getOnlyEnforcement, getTotpUri, hashPassword, isGetOnlyViolation, needsRehash, signToken, verifyPassword, verifyPurposeToken, verifyRecoveryCode, verifyToken, verifyTotpCode, } from './auth';
 export { buildRoutes, CTGR_ROUTE_PATTERN, getCtgrDecoded, unGETify } from './ctgr';
 // ── Kysely-typed plumbing tables ────────────────────────────────────────────
 export { createKysely } from './db/kysely';
 // ── Errors ──────────────────────────────────────────────────────────────────
-export { ApiError, isApiError, toErrorEnvelope, } from './errors';
+export { ApiError, isApiError, toErrorEnvelope, toValidationIssues, VALIDATION_ERROR_CODE, validationEnvelope, } from './errors';
 // ── Jobs & scheduler (task 29): plainjob-backed cron runner + restart-aware ───
 //    pollers + the due-row fire queue. App job *definitions* stay business.
 export { createFireQueue, createJobRunner, createPollingJob, DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, defaultJobLogger, JobTimeoutError, } from './jobs';
 // ── Media adapter (task 19): image rendering via sharp (lazy/optional peer) + ──
 //    video trim / probe / thumbnail via native ffmpeg. Also at the dedicated
-//    `cursedbelt/server/media` entry; sharp is imported lazily inside renderImage,
+//    media-bun entry below; sharp is imported lazily inside renderImage,
 //    so importing this barrel never loads the native binary.
 export { buildProbeArgs, buildThumbnailArgs, buildTrimArgs, extractThumbnail, ffmpegTimeToSeconds, isFfmpegAvailable, isFfprobeAvailable, parseFfmpegProgress, parseFfprobe, probeMedia, renderImage, trimVideo, videoCodecPlan, } from './media-bun';
 // ── Metrics ───────────────────────────────────────────────────────────────────
@@ -29,17 +29,25 @@ export { createMetricsBuffer, } from './metrics/metricsBuffer';
 export { normalizeRoute } from './metrics/normalizeRoute';
 // ── Middleware ────────────────────────────────────────────────────────────────
 export { correlationId } from './middleware/correlationId';
+export { corsAllowlist, corsOptsFromEnv } from './middleware/corsAllowlist';
 export { errorEnvelope } from './middleware/errorEnvelope';
+export { crossOriginRefusal } from './middleware/localOrigin';
 export { clientIp, createRateLimiter } from './middleware/rateLimit';
 export { requestLogger } from './middleware/requestLogger';
 export { securityHeaders, } from './middleware/securityHeaders';
 // ── zod validation toolkit ────────────────────────────────────────────────────
-export { toFieldErrors, VALIDATION_ERROR_CODE, validationEnvelope, zValidator, } from './middleware/zValidator';
+//    (the `validationEnvelope`/`toValidationIssues`/`ValidationIssue` builders now
+//     live with the canonical envelope in `./errors`, re-exported above.)
+export { zValidator } from './middleware/zValidator';
 // ── Migration runner ──────────────────────────────────────────────────────────
-export { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations, } from './migration/runner';
+export { addColumnIfMissing, applyRecommendedPragmas, columnExists, runMigrations } from './migration/runner';
+// ── Audit log: the SQLite-backed AuditSink cursedshell's service dispatch ─────
+//    writes to (see `cwip/audit` for the storage-agnostic contract + the
+//    zero-config in-memory default).
+export { AUDIT_LOG_MIGRATIONS, auditStateAt, auditStateAtVersion, auditStep, createSqliteAuditSink, } from './audit';
 // ── SQLite toolkit extras (task 30): FTS5 ranked search + DDL generator, the ───
 //    read-only DB viewer middleware, the VACUUM-INTO backup service, DB health probes.
-export { applyFtsSchema, buildFtsSchema, createFts5Search, createSqliteBackupService, createSqliteHealthChecks, createSqliteViewerMiddleware, isReadOnlySql, sanitizeFtsQuery, } from './sqlite';
+export { applyFtsSchema, buildFtsSchema, clampLimit, clampOffset, collectSqliteStats, createFts5Search, createSqliteBackupService, createSqliteHealthChecks, createSqliteViewerMiddleware, exportSqliteSnapshot, exportSqliteTable, importRowsIntoSqliteTable, isKnownTable, isReadOnlySql, listSqliteTables, NotReadOnlyError, quoteIdent, readSqliteTable, restoreSqliteSnapshot, runReadonlySqlite, sanitizeFtsQuery, snapshotSqlite, UnknownTableError, } from './sqlite';
 // ── WebSocket hub (task 28): Bun-native upgrade, channel registry, heartbeat, ──
 //    presence-as-a-view, room helpers, and the push-only event-bus subset (ru).
 export { computePresence, createEventBus, createWsHub, joinRoom, leaveRoom, ROOM_META_KEY, roomOf, } from './ws';

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,4EAA4E;AAC5E,mFAAmF;AACnF,iFAAiF;AACjF,qBAAqB;AAErB,gFAAgF;AAChF,OAAO,EACL,UAAU,EAEV,iBAAiB,EAGjB,aAAa,EAGb,aAAa,GAEd,MAAM,SAAS,CAAC;AACjB,+EAA+E;AAC/E,OAAO,EAAsB,SAAS,EAAqB,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnF,iFAAiF;AACjF,sFAAsF;AACtF,OAAO,EAEL,gBAAgB,EAKhB,gBAAgB,EAChB,gBAAgB,EAEhB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAGlB,WAAW,EAIX,SAAS,EAET,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,cAAc,GACf,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnF,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAmB,MAAM,aAAa,CAAC;AAa5D,+EAA+E;AAC/E,OAAO,EACL,QAAQ,EAGR,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,iFAAiF;AACjF,4EAA4E;AAC5E,OAAO,EAEL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAQhB,eAAe,GAGhB,MAAM,QAAQ,CAAC;AAChB,kFAAkF;AAClF,6EAA6E;AAC7E,mFAAmF;AACnF,6DAA6D;AAC7D,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAElB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EAET,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,iFAAiF;AACjF,OAAO,EACL,mBAAmB,GAIpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,iFAAiF;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAsB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAA0B,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAGL,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,iFAAiF;AACjF,OAAO,EAEL,aAAa,EACb,qBAAqB,EACrB,kBAAkB,EAElB,UAAU,GACX,MAAM,yBAAyB,CAAC;AACjC,iFAAiF;AACjF,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EAEZ,aAAa,GACd,MAAM,oBAAoB,CAAC;AAE5B,kFAAkF;AAClF,uFAAuF;AACvF,OAAO,EACL,cAAc,EAEd,cAAc,EACd,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAO5B,aAAa,EAQb,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAClB,kFAAkF;AAClF,gFAAgF;AAChF,OAAO,EACL,eAAe,EACf,cAAc,EACd,WAAW,EAGX,QAAQ,EACR,SAAS,EAGT,aAAa,EACb,MAAM,GAQP,MAAM,MAAM,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,EAAE;AACF,4EAA4E;AAC5E,mFAAmF;AACnF,iFAAiF;AACjF,qBAAqB;AAErB,gFAAgF;AAChF,OAAO,EACL,UAAU,EAEV,iBAAiB,EAGjB,aAAa,EAGb,aAAa,GAEd,MAAM,SAAS,CAAC;AACjB,+EAA+E;AAC/E,OAAO,EAAsB,SAAS,EAAqB,QAAQ,EAAE,MAAM,OAAO,CAAC;AACnF,iFAAiF;AACjF,sFAAsF;AACtF,OAAO,EAEL,gBAAgB,EAKhB,gBAAgB,EAChB,gBAAgB,EAEhB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,0BAA0B,EAC1B,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,UAAU,EACV,YAAY,EACZ,kBAAkB,EAIlB,WAAW,EAKX,SAAS,EAET,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,WAAW,EACX,cAAc,GACf,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnF,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAmB,MAAM,aAAa,CAAC;AAa5D,+EAA+E;AAC/E,OAAO,EACL,QAAQ,EAGR,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,qBAAqB,EAErB,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAClB,iFAAiF;AACjF,4EAA4E;AAC5E,OAAO,EAEL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAQhB,eAAe,GAGhB,MAAM,QAAQ,CAAC;AAChB,kFAAkF;AAClF,6EAA6E;AAC7E,yEAAyE;AACzE,6DAA6D;AAC7D,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAElB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EAET,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,iFAAiF;AACjF,OAAO,EACL,mBAAmB,GAIpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,iFAAiF;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAiB,aAAa,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAsB,MAAM,wBAAwB,CAAC;AACzF,OAAO,EAA0B,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAGL,eAAe,GAChB,MAAM,8BAA8B,CAAC;AACtC,iFAAiF;AACjF,mFAAmF;AACnF,0EAA0E;AAC1E,OAAO,EAAyB,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC5E,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAE9G,iFAAiF;AACjF,yEAAyE;AACzE,qCAAqC;AACrC,OAAO,EACL,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,SAAS,EACT,qBAAqB,GACtB,MAAM,SAAS,CAAC;AACjB,kFAAkF;AAClF,uFAAuF;AACvF,OAAO,EACL,cAAc,EAEd,cAAc,EACd,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,EAE5B,oBAAoB,EACpB,iBAAiB,EASjB,yBAAyB,EACzB,YAAY,EACZ,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EAEV,eAAe,EACf,qBAAqB,EACrB,iBAAiB,EAWjB,gBAAgB,EAChB,cAAc,EAId,iBAAiB,GAClB,MAAM,UAAU,CAAC;AAClB,kFAAkF;AAClF,gFAAgF;AAChF,OAAO,EACL,eAAe,EACf,cAAc,EACd,WAAW,EAGX,QAAQ,EACR,SAAS,EAGT,aAAa,EACb,MAAM,GAQP,MAAM,MAAM,CAAC"}

package/dist/server/jobs/index.d.ts

@@ -3,5 +3,5 @@ export { defaultJobLogger } from './logger';
 export { createPollingJob } from './polling';
 export { createJobRunner } from './runner';
 export { JobTimeoutError } from './timeout';
-export { type CreateJobRunnerOptions, DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, type FireQueue, type FireQueueOpts, type JobContext, type JobDef, type JobLogger, type JobRunner, type JobRunRecord, type PollingJob, type PollingJobOpts, } from './types';
+export { type CreateJobRunnerOptions, DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_RETENTION, DEFAULT_JOB_TIMEOUT_MS, type FireQueue, type FireQueueOpts, type JobContext, type JobDef, type JobLogger, type JobRetentionOptions, type JobRunner, type JobRunRecord, type PollingJob, type PollingJobOpts, } from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/server/jobs/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,KAAK,sBAAsB,EAC3B,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,EACtB,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,MAAM,EACX,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,UAAU,EACf,KAAK,cAAc,GACpB,MAAM,SAAS,CAAC"}

package/dist/server/jobs/index.js

@@ -7,5 +7,5 @@ export { defaultJobLogger } from './logger';
 export { createPollingJob } from './polling';
 export { createJobRunner } from './runner';
 export { JobTimeoutError } from './timeout';
-export { DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_TIMEOUT_MS, } from './types';
+export { DEFAULT_FIRE_INTERVAL_MS, DEFAULT_JOB_RETENTION, DEFAULT_JOB_TIMEOUT_MS, } from './types';
 //# sourceMappingURL=index.js.map

package/dist/server/jobs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/jobs/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,wEAAwE;AACxE,4DAA4D;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAEL,wBAAwB,EACxB,sBAAsB,GAUvB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/jobs/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,gFAAgF;AAChF,wEAAwE;AACxE,4DAA4D;AAE5D,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAEL,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,GAWvB,MAAM,SAAS,CAAC"}

package/dist/server/jobs/polling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"polling.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/polling.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAc,UAAU,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,CA8CjE"}
+{"version":3,"file":"polling.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/polling.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAc,UAAU,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEtE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,CA8DjE"}

package/dist/server/jobs/polling.js

@@ -27,9 +27,26 @@ export function createPollingJob(opts) {
         if (inFlight || !controller)
             return;
         inFlight = true;
-        const context = { db: opts.db, signal: controller.signal, logger };
+        // Captured, not re-read: `stop()` nulls `controller` and a later `start()`
+        // installs a fresh one, so the identity check below is what tells "still the
+        // run I began" from "stopped, and possibly restarted, while I was awaiting".
+        const mine = controller;
+        const context = { db: opts.db, signal: mine.signal, logger };
         try {
             await opts.run(context);
+            // 🔴 STOPPED while this run was in flight — do not stamp a completion.
+            //
+            // Two reasons, and the second is the one that showed up. Semantically, a
+            // job whose owner pulled the plug mid-run did not finish on its own terms,
+            // so recording `last_run_at` would make the next boot skip work that never
+            // happened. Practically, `stop()` is what a host or a test calls just
+            // before closing the database — so this statement ran against a closed
+            // handle and threw "Database has closed" out of a timer callback, after
+            // the test that owned it had ended. That surfaced as an unhandled error
+            // reddening cursed-satellites' orch-engine suite roughly one run in three,
+            // with a stack pointing here and nothing to do with the test that failed.
+            if (controller !== mine)
+                return;
             upsertState.run(opts.name, new Date().toISOString());
         }
         catch (err) {

package/dist/server/jobs/polling.js.map

@@ -1 +1 @@
-{"version":3,"file":"polling.js","sourceRoot":"","sources":["../../../src/server/jobs/polling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAG5C;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;IAE3C,0EAA0E;IAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACjC;0EACsE,CACvE,CAAC;IAEF,IAAI,KAAK,GAA0C,IAAI,CAAC;IACxD,IAAI,UAAU,GAA2B,IAAI,CAAC;IAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,QAAQ,IAAI,CAAC,UAAU;YAAE,OAAO;QACpC,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,OAAO,GAAe,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;YACH,IAAI,KAAK;gBAAE,OAAO;YAClB,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,SAAS;gBAAE,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACxD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,UAAU,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;YACnE,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"polling.js","sourceRoot":"","sources":["../../../src/server/jobs/polling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAG5C;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACnD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;IAE3C,0EAA0E;IAC1E,MAAM,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CACjC;0EACsE,CACvE,CAAC;IAEF,IAAI,KAAK,GAA0C,IAAI,CAAC;IACxD,IAAI,UAAU,GAA2B,IAAI,CAAC;IAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,QAAQ,IAAI,CAAC,UAAU;YAAE,OAAO;QACpC,QAAQ,GAAG,IAAI,CAAC;QAChB,2EAA2E;QAC3E,6EAA6E;QAC7E,6EAA6E;QAC7E,MAAM,IAAI,GAAG,UAAU,CAAC;QACxB,MAAM,OAAO,GAAe,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,uEAAuE;YACvE,EAAE;YACF,yEAAyE;YACzE,2EAA2E;YAC3E,2EAA2E;YAC3E,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,wEAAwE;YACxE,2EAA2E;YAC3E,0EAA0E;YAC1E,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO;YAChC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK;YACH,IAAI,KAAK;gBAAE,OAAO;YAClB,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,IAAI,SAAS;gBAAE,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACxD,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC;QACD,IAAI;YACF,IAAI,KAAK,EAAE,CAAC;gBACV,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,UAAU,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;YACnE,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/jobs/runner.d.ts

@@ -13,6 +13,12 @@ import { type CreateJobRunnerOptions, type JobRunner } from './types';
  * `job_runs`/`job_state` plumbing tables (task 22) are this wrapper's audit view
  * and never collide with them.
  *
+ * History is bounded by default ({@link DEFAULT_JOB_RETENTION}): `job_runs` is
+ * pruned lazily (age window + per-job row cap, at most once per prune interval),
+ * and plainjob's maintenance timer removes its internal done/failed rows on the
+ * configured horizons — so a sub-minute cron can run for months without the DB
+ * growing without bound.
+ *
  * The `job_runs` table must already exist (the app's migration runner builds it).
  */
 export declare function createJobRunner(db: Database, opts?: CreateJobRunnerOptions): JobRunner;

package/dist/server/jobs/runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM3C,OAAO,EACL,KAAK,sBAAsB,EAK3B,KAAK,SAAS,EAEf,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAE,sBAA2B,GAAG,SAAS,CAiI1F"}
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM3C,OAAO,EACL,KAAK,sBAAsB,EAM3B,KAAK,SAAS,EAEf,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,GAAE,sBAA2B,GAAG,SAAS,CA8K1F"}

package/dist/server/jobs/runner.js

@@ -3,7 +3,7 @@ import { ApiError } from '../errors';
 import { defaultJobLogger } from './logger';
 import { createPlainjobConnection } from './plainjobAdapter';
 import { withTimeout } from './timeout';
-import { DEFAULT_JOB_TIMEOUT_MS, } from './types';
+import { DEFAULT_JOB_RETENTION, DEFAULT_JOB_TIMEOUT_MS, } from './types';
 /**
  * Create the durable cron job runner — a thin facade over **plainjob** (MIT,
  * SQLite-backed, no Redis). It generalizes ca's scattered `setInterval` cron-ish
@@ -17,11 +17,18 @@ import { DEFAULT_JOB_TIMEOUT_MS, } from './types';
  * `job_runs`/`job_state` plumbing tables (task 22) are this wrapper's audit view
  * and never collide with them.
  *
+ * History is bounded by default ({@link DEFAULT_JOB_RETENTION}): `job_runs` is
+ * pruned lazily (age window + per-job row cap, at most once per prune interval),
+ * and plainjob's maintenance timer removes its internal done/failed rows on the
+ * configured horizons — so a sub-minute cron can run for months without the DB
+ * growing without bound.
+ *
  * The `job_runs` table must already exist (the app's migration runner builds it).
  */
 export function createJobRunner(db, opts = {}) {
     const logger = opts.logger ?? defaultJobLogger;
     const pollIntervalMs = opts.pollIntervalMs ?? 1000;
+    const retention = { ...DEFAULT_JOB_RETENTION, ...opts.retention };
     const defs = new Map();
     const workers = new Map();
     let queue = null;
@@ -33,11 +40,48 @@ export function createJobRunner(db, opts = {}) {
     const finishRun = db.prepare('UPDATE job_runs SET ended_at = ?, status = ?, error = ? WHERE id = ?');
     const lastRunQuery = db.query(`SELECT started_at AS startedAt, ended_at AS endedAt, status, error
        FROM job_runs WHERE job_name = ? ORDER BY started_at DESC, rowid DESC LIMIT 1`);
+    let lastPruneAt = 0;
+    /**
+     * Lazily bound the `job_runs` audit table: an age window (ISO-8601 strings
+     * compare lexicographically, so plain `<` is correct) plus a newest-N cap per
+     * job name. Runs at most once per `pruneIntervalMs`, after a run finishes, and
+     * never lets a prune failure disturb the run that triggered it.
+     */
+    function maybePruneAudit() {
+        const now = Date.now();
+        if (now - lastPruneAt < retention.pruneIntervalMs)
+            return;
+        lastPruneAt = now;
+        try {
+            if (retention.auditMaxAgeMs > 0) {
+                db.query('DELETE FROM job_runs WHERE started_at < ?').run(new Date(now - retention.auditMaxAgeMs).toISOString());
+            }
+            if (retention.auditMaxRowsPerJob > 0) {
+                db.query(`DELETE FROM job_runs WHERE id IN (
+             SELECT id FROM (
+               SELECT id, ROW_NUMBER() OVER (
+                 PARTITION BY job_name ORDER BY started_at DESC, rowid DESC
+               ) AS rn FROM job_runs
+             ) WHERE rn > ?
+           )`).run(retention.auditMaxRowsPerJob);
+            }
+        }
+        catch (err) {
+            logger.warn('[jobs] audit prune failed (non-fatal)', err);
+        }
+    }
     // plainjob's queue (and its maintenance timer) is created lazily — a runner with
-    // only manual (`runOnce`) jobs never touches plainjob at all.
+    // only manual (`runOnce`) jobs never touches plainjob at all. A retention field
+    // of 0 means "never remove"; plainjob has no explicit off switch, so it maps to
+    // an effectively-infinite horizon.
     function ensureQueue() {
         if (!queue) {
-            queue = defineQueue({ connection: createPlainjobConnection(db), logger });
+            queue = defineQueue({
+                connection: createPlainjobConnection(db),
+                logger,
+                removeDoneJobsOlderThan: retention.doneJobsMaxAgeMs > 0 ? retention.doneJobsMaxAgeMs : Number.MAX_SAFE_INTEGER,
+                removeFailedJobsOlderThan: retention.failedJobsMaxAgeMs > 0 ? retention.failedJobsMaxAgeMs : Number.MAX_SAFE_INTEGER,
+            });
         }
         return queue;
     }
@@ -70,6 +114,7 @@ export function createJobRunner(db, opts = {}) {
         }
         finally {
             stopController.signal.removeEventListener('abort', propagateStop);
+            maybePruneAudit();
         }
     }
     function startWorker(def) {

package/dist/server/jobs/runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/server/jobs/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAA2B,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAEL,sBAAsB,GAMvB,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,eAAe,CAAC,EAAY,EAAE,OAA+B,EAAE;IAC7E,MAAM,MAAM,GAAc,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;IAEnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,KAAK,GAAiB,IAAI,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,uEAAuE;IACvE,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;IAE7C,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAC1B,qFAAqF,CACtF,CAAC;IACF,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAC1B,sEAAsE,CACvE,CAAC;IACF,MAAM,YAAY,GAAG,EAAE,CAAC,KAAK,CAC3B;qFACiF,CAClF,CAAC;IAEF,iFAAiF;IACjF,8DAA8D;IAC9D,SAAS,WAAW;QAClB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,WAAW,CAAC,EAAE,UAAU,EAAE,wBAAwB,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,OAAgB;QACrD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9E,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,aAAa,EAAE,CAAC;;YAC9C,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpF,MAAM,OAAO,GAAe,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,WAAW,CACf,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EACjC,GAAG,CAAC,OAAO,IAAI,sBAAsB,EACrC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC,CACpE,CAAC;YACF,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,OAAO;gBAAE,MAAM,GAAG,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAAC,GAAW;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE;YAClE,KAAK,EAAE,WAAW,EAAE;YACpB,aAAa,EAAE,cAAc;YAC7B,MAAM;SACP,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,gEAAgE;QAChE,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,QAAQ,CAAC,GAAG;YACV,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,qEAAqE;gBACrE,+DAA+D;gBAC/D,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,IAAI,OAAO;oBAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,KAAK;YACH,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACpE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,IAAI,GAAG,CAAC,IAAI;oBAAE,WAAW,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,KAAK,CAAC,IAAI;YACR,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,KAAK,CAAC;YAChB,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACtD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,4EAA4E;YAC5E,2CAA2C;YAC3C,KAAK,EAAE,KAAK,EAAE,CAAC;YACf,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,UAAU,CAAC,IAAI;YACb,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAKzB,CAAC;YACT,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YAC9E,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACvD,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;gBAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/server/jobs/runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,YAAY,EAA2B,MAAM,UAAU,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAEL,qBAAqB,EACrB,sBAAsB,GAMvB,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,eAAe,CAAC,EAAY,EAAE,OAA+B,EAAE;IAC7E,MAAM,MAAM,GAAc,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC;IAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,EAAE,GAAG,qBAAqB,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAElE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,KAAK,GAAiB,IAAI,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,uEAAuE;IACvE,MAAM,cAAc,GAAG,IAAI,eAAe,EAAE,CAAC;IAE7C,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAC1B,qFAAqF,CACtF,CAAC;IACF,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAC1B,sEAAsE,CACvE,CAAC;IACF,MAAM,YAAY,GAAG,EAAE,CAAC,KAAK,CAC3B;qFACiF,CAClF,CAAC;IAEF,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB;;;;;OAKG;IACH,SAAS,eAAe;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,WAAW,GAAG,SAAS,CAAC,eAAe;YAAE,OAAO;QAC1D,WAAW,GAAG,GAAG,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,SAAS,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;gBAChC,EAAE,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC,GAAG,CACvD,IAAI,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CACtD,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;gBACrC,EAAE,CAAC,KAAK,CACN;;;;;;aAMG,CACJ,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,gFAAgF;IAChF,gFAAgF;IAChF,mCAAmC;IACnC,SAAS,WAAW;QAClB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,WAAW,CAAC;gBAClB,UAAU,EAAE,wBAAwB,CAAC,EAAE,CAAC;gBACxC,MAAM;gBACN,uBAAuB,EACrB,SAAS,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB;gBACvF,yBAAyB,EACvB,SAAS,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;OAMG;IACH,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,OAAgB;QACrD,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;QAC5C,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9E,IAAI,cAAc,CAAC,MAAM,CAAC,OAAO;YAAE,aAAa,EAAE,CAAC;;YAC9C,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEpF,MAAM,OAAO,GAAe,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,WAAW,CACf,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EACjC,GAAG,CAAC,OAAO,IAAI,sBAAsB,EACrC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,aAAa,CAAC,CAAC,CACpE,CAAC;YACF,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;YAC/C,IAAI,OAAO;gBAAE,MAAM,GAAG,CAAC;QACzB,CAAC;gBAAS,CAAC;YACT,cAAc,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAClE,eAAe,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,SAAS,WAAW,CAAC,GAAW;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE;YAClE,KAAK,EAAE,WAAW,EAAE;YACpB,aAAa,EAAE,cAAc;YAC7B,MAAM;SACP,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,gEAAgE;QAChE,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,IAAI,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,QAAQ,CAAC,GAAG;YACV,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACxE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,qEAAqE;gBACrE,+DAA+D;gBAC/D,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;gBACrD,IAAI,OAAO;oBAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,KAAK;YACH,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACpE,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE;gBAAE,IAAI,GAAG,CAAC,IAAI;oBAAE,WAAW,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,KAAK,CAAC,IAAI;YACR,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,GAAG,KAAK,CAAC;YAChB,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACtD,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,4EAA4E;YAC5E,2CAA2C;YAC3C,KAAK,EAAE,KAAK,EAAE,CAAC;YACf,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;YAC1D,MAAM,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,UAAU,CAAC,IAAI;YACb,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAKzB,CAAC;YACT,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;YAC9E,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;gBAAE,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YACvD,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI;gBAAE,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACjD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/jobs/types.d.ts

@@ -77,7 +77,34 @@ export interface CreateJobRunnerOptions {
      * per worker per interval.
      */
     pollIntervalMs?: number;
+    /**
+     * Bounds on the runner's persisted history. Without bounds a high-frequency
+     * cron (e.g. a 5s engine janitor) grows `job_runs` and plainjob's internal
+     * `plainjob_jobs` forever — thousands of rows per day on a completely idle
+     * daemon. Retention is ON by default ({@link DEFAULT_JOB_RETENTION});
+     * override a field to tune it, or set a field to `0` to disable that bound.
+     */
+    retention?: JobRetentionOptions;
+}
+/** Retention bounds for {@link JobRunner} history. `0` disables that bound. */
+export interface JobRetentionOptions {
+    /** Delete `job_runs` audit rows older than this. Default 7 days. */
+    auditMaxAgeMs?: number;
+    /**
+     * Keep at most this many newest `job_runs` rows PER job name — the bound that
+     * matters for sub-minute crons, where an age window alone still admits tens of
+     * thousands of rows. Default 2000.
+     */
+    auditMaxRowsPerJob?: number;
+    /** Minimum gap between prune passes (pruning is lazy, after a run finishes). Default 1 hour. */
+    pruneIntervalMs?: number;
+    /** plainjob maintenance: remove its internal done-job rows older than this. Default 6 hours. */
+    doneJobsMaxAgeMs?: number;
+    /** plainjob maintenance: remove its internal failed-job rows older than this. Default 7 days. */
+    failedJobsMaxAgeMs?: number;
 }
+/** Default {@link JobRetentionOptions} — bounded history out of the box. */
+export declare const DEFAULT_JOB_RETENTION: Required<JobRetentionOptions>;
 /**
  * The durable cron job runner — a thin facade over plainjob (SQLite-backed, no
  * Redis). Schedules persist in the shared DB, so a registered cron survives a
@@ -89,7 +116,7 @@ export interface JobRunner {
     register(job: JobDef): void;
     /** Begin processing: one worker per cron job starts polling. Idempotent. */
     start(): void;
-    /** Stop all workers (signalling in-flight handlers) and release the queue. Does NOT close the shared DB. */
+    /** Stop all workers (signaling in-flight handlers) and release the queue. Does NOT close the shared DB. */
     stop(): Promise<void>;
     /** Run a registered job once, right now (admin/manual trigger). Bypasses the schedule; still audited. Throws ApiError(404) if unknown. */
     runOnce(name: string): Promise<void>;

package/dist/server/jobs/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClD;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,iEAAiE;IACjE,EAAE,EAAE,QAAQ,CAAC;IACb;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,SAAS,CAAC;CACnB;AAED,yEAAyE;AACzE,MAAM,WAAW,MAAM;IACrB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/C;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,iHAAiH;IACjH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4EAA4E;IAC5E,KAAK,IAAI,IAAI,CAAC;IACd,4GAA4G;IAC5G,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,0IAA0I;IAC1I,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,kEAAkE;IAClE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;CAC/C;AAED,oGAAoG;AACpG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,KAAK,IAAI,IAAI,CAAC;IACd,wEAAwE;IACxE,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mGAAmG;IACnG,EAAE,EAAE,QAAQ,CAAC;IACb,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC;AAEnC,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,QAAQ,CAAC;IACb,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kDAAkD;IAClD,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC;IAC1B,6GAA6G;IAC7G,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtC,yEAAyE;IACzE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,QAAS,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/server/jobs/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;;;;;;;;;GAeG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClD;AAED,uDAAuD;AACvD,MAAM,WAAW,UAAU;IACzB,iEAAiE;IACjE,EAAE,EAAE,QAAQ,CAAC;IACb;;;;OAIG;IACH,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,SAAS,CAAC;CACnB;AAED,yEAAyE;AACzE,MAAM,WAAW,MAAM;IACrB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/C;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAC;CACjC;AAED,+EAA+E;AAC/E,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iGAAiG;IACjG,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,mBAAmB,CAM/D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,iHAAiH;IACjH,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4EAA4E;IAC5E,KAAK,IAAI,IAAI,CAAC;IACd,2GAA2G;IAC3G,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,0IAA0I;IAC1I,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,kEAAkE;IAClE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;CAC/C;AAED,oGAAoG;AACpG,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,KAAK,IAAI,IAAI,CAAC;IACd,wEAAwE;IACxE,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,mGAAmG;IACnG,EAAE,EAAE,QAAQ,CAAC;IACb,GAAG,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/C,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,gFAAgF;AAChF,MAAM,MAAM,SAAS,GAAG,UAAU,CAAC;AAEnC,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,QAAQ,CAAC;IACb,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oDAAoD;IACpD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kDAAkD;IAClD,MAAM,CAAC,EAAE,EAAE,QAAQ,GAAG,CAAC,EAAE,CAAC;IAC1B,6GAA6G;IAC7G,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACrD,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtC,yEAAyE;IACzE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IACtC,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,QAAS,CAAC"}

package/dist/server/jobs/types.js

@@ -1,3 +1,11 @@
+/** Default {@link JobRetentionOptions} — bounded history out of the box. */
+export const DEFAULT_JOB_RETENTION = {
+    auditMaxAgeMs: 7 * 24 * 60 * 60 * 1000,
+    auditMaxRowsPerJob: 2000,
+    pruneIntervalMs: 60 * 60 * 1000,
+    doneJobsMaxAgeMs: 6 * 60 * 60 * 1000,
+    failedJobsMaxAgeMs: 7 * 24 * 60 * 60 * 1000,
+};
 /** Default per-run timeout for a cron {@link JobDef} (1 minute). */
 export const DEFAULT_JOB_TIMEOUT_MS = 60_000;
 /** Default poll cadence for a {@link FireQueue} (30 seconds). */

package/dist/server/jobs/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/server/jobs/types.ts"],"names":[],"mappings":"AAoJA,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/server/jobs/types.ts"],"names":[],"mappings":"AAiHA,4EAA4E;AAC5E,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAClE,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACtC,kBAAkB,EAAE,IAAI;IACxB,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IAC/B,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;IACpC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;CAC5C,CAAC;AA+DF,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC"}

package/dist/server/master-lock/guard.d.ts

@@ -0,0 +1,54 @@
+import { type LockPageOptions } from "./lockPage";
+import type { MasterLock } from "./masterLock";
+export interface MasterLockGuardOptions extends LockPageOptions {
+    /**
+     * The lock this guard enforces.
+     *
+     * A {@link MasterLock} for an app with one app-wide password (collections, the
+     * binary-server inspector). A FUNCTION for an app where each person has their own
+     * (`principals.ts`): it is handed the request and returns that caller's lock.
+     *
+     * 🔴 The function must resolve the principal from the request's own verified session
+     * and NOTHING else. A resolver that reads a header, a query parameter or a body field
+     * hands the caller the choice of whose lock to be measured against, which is the one
+     * way this feature can be turned inside out. Returning `null` means "no principal" —
+     * the guard then stands aside for ordinary paths (the app's own sign-in owns the
+     * request) and refuses `/__lock/*` outright, since there is nobody to unlock for.
+     */
+    lock: MasterLock | ((req: Request) => MasterLock | null);
+    /**
+     * Paths that stay reachable while locked, beyond `/__lock/*`.
+     *
+     * 🔴 This is where a MACHINE surface is kept out of the lock, and getting it wrong is
+     * the one way this feature can break something else. binary-server's inspector is a
+     * UI and is locked whole; binary-server's STORE serves the fleet's bytes and is a
+     * different process that never mounts this at all. Within one process, a health check
+     * or a token-authenticated ingest route belongs here — a page does not.
+     */
+    allow?: (url: URL, req: Request) => boolean;
+    /**
+     * What makes this app's unlock cookie ITS OWN — `master_lock_<appKey>`.
+     *
+     * 🔴 Set it on every app that can ever share a hostname with another locked app, which
+     * on this fleet means every app: they are all `localhost:<port>` on the owner's Mac, and
+     * a cookie is scoped by HOST, not by origin. Left unset the cookie is the bare
+     * `master_lock`, and two such apps overwrite each other's token — see
+     * `masterLockCookieName` for what that silently breaks. Defaults to {@link appLabel},
+     * so an app that already names itself is fixed without being changed.
+     */
+    appKey?: string;
+    /**
+     * Is this connection HTTPS, so the cookie may carry `Secure`?
+     *
+     * Defaults to reading `x-forwarded-proto` then the URL — right for both a satellite
+     * behind nginx and a loopback daemon speaking plain http, where a `Secure` cookie would
+     * simply never be stored and the site could never be unlocked.
+     */
+    secure?: (url: URL, req: Request) => boolean;
+}
+export interface MasterLockGuard {
+    /** `Response` when handled, `null` when the app should serve the request. */
+    handle(req: Request): Promise<Response | null>;
+}
+export declare function createMasterLockGuard(options: MasterLockGuardOptions): MasterLockGuard;
+//# sourceMappingURL=guard.d.ts.map

package/dist/server/master-lock/guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/server/master-lock/guard.ts"],"names":[],"mappings":"AAmBA,OAAO,EAA2B,KAAK,eAAe,EAAgB,MAAM,YAAY,CAAC;AACzF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,MAAM,WAAW,sBAAuB,SAAQ,eAAe;IAC9D;;;;;;;;;;;;;OAaG;IACH,IAAI,EAAE,UAAU,GAAG,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,UAAU,GAAG,IAAI,CAAC,CAAC;IACzD;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;IAC5C;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC;CAC7C;AAaD,MAAM,WAAW,eAAe;IAC/B,6EAA6E;IAC7E,MAAM,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CAC/C;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CAoKtF"}