feat(api): jobs routes (list/get/retry/delete, owner-only)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

lib/api/index.js

@@ -20,6 +20,7 @@ import { router as linksRouter } from './routes/links.js';
 import { router as pendingChangesRouter } from './routes/pending_changes.js';
 import { router as auditRouter } from './routes/audit.js';
 import { router as searchRouter } from './routes/search.js';
+import { router as jobsRouter } from './routes/jobs.js';
 
 export function mountApi(app) {
   const api = Router();
@@ -47,6 +48,7 @@ export function mountApi(app) {
   api.use('/pending-changes', pendingChangesRouter);
   api.use('/audit', auditRouter);
   api.use('/search', searchRouter);
+  api.use('/jobs', jobsRouter);
   api.use('/:entity_type/:entity_id/tags', tagsByEntityRouter);
 
   api.use((_req, _res, next) => next(new NotFoundError('route not found')));

lib/api/routes/jobs.js

@@ -0,0 +1,59 @@
+import { Router } from 'express';
+import { z } from 'zod';
+import * as repo from '../../db/repos/jobs.js';
+import { validate } from '../validate.js';
+import { requireOwner } from '../cap.js';
+import { NotFoundError, asyncWrap } from '../errors.js';
+import { parsePagination } from '../pagination.js';
+
+const STATES = ['created','retry','active','completed','expired','cancelled','failed'];
+
+const listQuery = z.object({
+  state: z.enum(STATES).optional(),
+  name: z.string().optional(),
+  limit: z.string().optional(),
+  offset: z.string().optional()
+});
+
+const idParams = z.object({ id: z.string().uuid() });
+
+export const router = Router();
+router.use(requireOwner);
+
+router.get('/',
+  validate({ query: listQuery }),
+  asyncWrap(async (req, res) => {
+    const { limit } = parsePagination(req);
+    res.json(await repo.list({
+      state: req.validatedQuery.state,
+      name: req.validatedQuery.name,
+      limit
+    }));
+  })
+);
+
+router.get('/:id',
+  validate({ params: idParams }),
+  asyncWrap(async (req, res) => {
+    const row = await repo.getById(req.params.id);
+    if (!row) throw new NotFoundError('job not found');
+    res.json(row);
+  })
+);
+
+router.post('/:id/retry',
+  validate({ params: idParams }),
+  asyncWrap(async (req, res) => {
+    const row = await repo.retry(req.params.id);
+    if (!row) throw new NotFoundError('job not found');
+    res.json(row);
+  })
+);
+
+router.delete('/:id',
+  validate({ params: idParams }),
+  asyncWrap(async (req, res) => {
+    await repo.remove(req.params.id);
+    res.status(204).end();
+  })
+);