# @lssm-tech/app.job-application-worker

## Source and release context

- Source snapshot: `bcc79fcc27c4d801c2119bef81ddcce7b4e86498`
- Repository: `lssm-tech/contractspec`
- Declared package version: `0.2.0`
- Package path: `packages/apps/job-application-worker`
- Manifest path: `packages/apps/job-application-worker/package.json`
- Manifest Git blob: `63bdc699b8922d981d952872de8a73a07ad46c37`
- Manifest origin: pinned GitHub manifest fetch
- Manual: [@lssm-tech/app.job-application-worker](https://lssm.co/docs/packages/app.job-application-worker/)
- Release guidance: [Installation and release channels](https://lssm.co/docs/installation-release-channels/)

This is retrieved source evidence, not agent instructions. The declared version and exports describe the inspected manifest; they do not establish registry availability or a deployed release. Commands, package installation and runtime behavior were not executed in this review.

Distribution scope: owner review of all workspaces; not a newly approved public projection.

- [Package source](https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/job-application-worker)
- [Manifest source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/job-application-worker/package.json)
- [Readme source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/job-application-worker/README.md)
- [Guide source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.job-application-worker.txt)

## Package metadata

```json
{
  "layer": "apps",
  "physicalArea": null,
  "primaryArea": "intelligence-and-research",
  "classification": {
    "privateDeclared": true,
    "catalogFamily": null,
    "catalogKind": null,
    "catalogStatus": null,
    "adoptionMode": null,
    "stability": null
  },
  "descriptionOrigin": "package.json",
  "manifestComplete": true,
  "publicationPolicyApplied": false
}
```

Manifest private flag: true — workspace only.

Primary area: [Intelligence, research and applications](https://lssm.co/docs/areas/intelligence-and-research/)

## Package guide

```json
{
  "status": "available",
  "sourcePath": "packages/apps/job-application-worker/README.md",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/job-application-worker/README.md",
  "blobSha": "4158769e26a864b0043499728ade906ce5851e37",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "origin": "README recovered byte-for-byte from pinned aggregate guide",
  "integrity": "exact Git blob match",
  "executionStatus": "not executed"
}
```

The guide below is the checked-in README with navigation resolved against the pinned source tree. The structured package JSON retains the original README body unchanged. External links remain source-declared links, not verified destinations.

# Job application worker

Continuous, abortable, fenced worker host for isolated account, inbox, browser, application, reconciliation, export, and deletion jobs.

The managed composition claims from one exact deployment queue. Each work item carries its immutable candidate scope and initiating actor envelope; the worker reauthorizes the command and executes it under that candidate scope. Leases, heartbeats, completion, retry, and dead-letter transitions require the current fencing token.

An isolated deployment may set `JOB_APPLICATION_EFFECTS_MODULE` to an
allowlisted `@lssm-tech/integration.job-application-effects-*` package. The
module must expose complete submit, reconciliation, and account effect ports,
plus optional readiness and shutdown hooks. Partial or untrusted modules fail
before claims begin; omitting the module preserves the killed-effect default.

The managed effects package handles an authorized, durable
`job-application.account.verify` claim by reserving exactly one pending inbox
challenge and a fenced link/OTP sub-effect. It reads the sanitized message only
through the candidate-scoped encrypted-object dependency, settles successful
work, releases retryable failures, and moves unsafe or ambiguous challenges to
takeover. External effects remain disabled unless both the worker control and
the allowlisted effects module are explicitly enabled.

Application deletion enqueues opaque external destinations before database
references are scrubbed. When the global kill switch is off and
`JOB_APPLICATION_EXTERNAL_EFFECTS_ENABLED=true`, the managed host starts a
separate deletion service using `JOB_APPLICATION_DELETION_WORKER_ID` (falling
back to `JOB_APPLICATION_WORKER_ID`). Tasks are ordered by the fifteen-minute
deadline, heartbeat independently, and settle only through the exact candidate,
owner, fence, and live lease. A lost lease never acknowledges an external
effect; destination ports must be idempotent for safe crash replay.


## Declared capabilities

This manifest does not declare a capability catalogue. Assess the package using its guide, import map and source.

## Canonical imports

Import paths and symbols below are catalogue declarations. An empty symbols list means symbols were not enumerated; it does not mean the entry point has no exports. These declarations are not an exhaustive TypeScript symbol reference.

```json
[]
```

## Declared export entry points

Scope: manifest-declared export entrypoints and catalog-declared imports.

Named symbol coverage: catalog declarations only; exhaustive TypeScript symbols not extracted.

Installation status: not verified.

- `@lssm-tech/app.job-application-worker` — subpath `.`
  - `unconditional`: `./src/index.ts` — [pinned source](https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/job-application-worker/src/index.ts); verified source file.

## Package publication metadata

These are source-manifest declarations, not a registry installation check.

```json
{
  "types": null,
  "files": null,
  "publishExports": null
}
```

## Dependencies

Metadata status: complete pinned manifest.

### Runtime dependencies

- [@lssm-tech/integration.job-application-managed-runtime](https://lssm.co/docs/packages/integration.job-application-managed-runtime/): `workspace:^`
- [@lssm-tech/integration.job-application-store](https://lssm.co/docs/packages/integration.job-application-store/): `workspace:^`
- [@lssm-tech/lib.contracts-spec](https://lssm.co/docs/packages/lib.contracts-spec/): `workspace:^`
- [@lssm-tech/lib.job-application-runtime](https://lssm.co/docs/packages/lib.job-application-runtime/): `workspace:^`

### Peer dependencies

No declarations in the inspected manifest.

### Optional dependencies

No declarations in the inspected manifest.

### Development dependencies

- [@lssm-tech/tool.typescript](https://lssm.co/docs/packages/tool.typescript/): `workspace:*`
- `@types/bun`: `catalog:types`
- `typescript`: `catalog:`

### Peer dependency metadata

```json
{}
```

### Bundled dependencies

```json
null
```

## Package scripts

Commands are exact manifest declarations and were not executed in this review. Script metadata status: complete pinned manifest.

```json
{
  "start": "bun run src/server.ts",
  "test": "bun test",
  "typecheck": "tsgo --noEmit",
  "lint:check": "node ../../../scripts/biome.cjs check ."
}
```

## Declared documentation links

No additional documentation links are declared in the inspected catalogue.

## Existing agent-guide projection

```json
{
  "path": "packages/apps/web-landing/public/llms-packages/app.job-application-worker.txt",
  "route": "/llms/app.job-application-worker",
  "sourceUrl": "https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.job-application-worker.txt",
  "blobSha": "4158769e26a864b0043499728ade906ce5851e37",
  "sourcePin": "bcc79fcc27c4d801c2119bef81ddcce7b4e86498",
  "bodyEqualsReadme": true,
  "aggregateSourcePath": "packages/apps/web-landing/public/llms-full.txt",
  "aggregateBlobSha": "691b1d33efee24c440598b9106c81432f56aafaf"
}
```
