@happyvertical/smrt-core 0.30.0

package/dist/dispatch/collections/DispatchSubscriptions.d.ts

@@ -0,0 +1,79 @@
+import { DatabaseInterface } from '@happyvertical/sql';
+import { DispatchSubscription } from '../models/DispatchSubscription.js';
+import { DispatchTenantScope } from '../tenant-resolver.js';
+/**
+ * Storage operations for subscriptions in _smrt_dispatch_subscriptions table
+ */
+export declare class DispatchSubscriptionCollection {
+    /**
+     * Insert or update a subscription.
+     *
+     * Identity is tenant-scoped (S5 #1398): the conflict key is
+     * `(tenant_id, signal_type, subscriber)` so the same (signal_type, subscriber)
+     * pair can exist independently per tenant and one tenant cannot overwrite
+     * another's subscription. Global (NULL tenant_id) subscriptions are deduped by
+     * the NULL-aware upsert path in @happyvertical/sql.
+     */
+    static upsert(db: DatabaseInterface, subscription: DispatchSubscription): Promise<void>;
+    /**
+     * Get a subscription by ID
+     */
+    static get(db: DatabaseInterface, id: string): Promise<DispatchSubscription | null>;
+    /**
+     * Find subscription by signal type and subscriber
+     */
+    static find(db: DatabaseInterface, signalType: string, subscriber: string): Promise<DispatchSubscription | null>;
+    /**
+     * Get all subscriptions for a subscriber, scoped to the active tenant (S5 #1398).
+     */
+    static findBySubscriber(db: DatabaseInterface, subscriber: string, enabledOnly?: boolean, tenantScope?: DispatchTenantScope): Promise<DispatchSubscription[]>;
+    /**
+     * Get all subscriptions that match a signal type
+     *
+     * Uses SQL-level filtering for exact matches. Wildcard subscriptions
+     * (containing '*') are fetched separately and filtered in memory since
+     * pattern matching requires application-side regex evaluation.
+     */
+    static findMatchingSubscribers(db: DatabaseInterface, signalType: string, tenantScope?: DispatchTenantScope): Promise<DispatchSubscription[]>;
+    /**
+     * Find all enabled subscriptions matching a signal type
+     *
+     * Alias for findMatchingSubscribers — used by emit() to determine
+     * fan-out targets. Scoped to the active tenant (S5 #1398).
+     */
+    static findBySignalType(db: DatabaseInterface, signalType: string, tenantScope?: DispatchTenantScope): Promise<DispatchSubscription[]>;
+    /**
+     * Get all unique signal types that a subscriber is subscribed to
+     */
+    static getSignalTypes(db: DatabaseInterface, subscriber: string): Promise<string[]>;
+    /**
+     * List all subscriptions, scoped to the active tenant (S5 #1398).
+     */
+    static list(db: DatabaseInterface, enabledOnly?: boolean, tenantScope?: DispatchTenantScope): Promise<DispatchSubscription[]>;
+    /**
+     * Delete a subscription
+     */
+    static delete(db: DatabaseInterface, id: string): Promise<void>;
+    /**
+     * Delete subscription by signal type and subscriber, scoped to the active
+     * tenant (S5 #1398) so tenant B cannot delete tenant A's subscription.
+     */
+    static deleteByKey(db: DatabaseInterface, signalType: string, subscriber: string, tenantScope?: DispatchTenantScope): Promise<void>;
+    /**
+     * Delete all subscriptions for a subscriber
+     */
+    static deleteBySubscriber(db: DatabaseInterface, subscriber: string): Promise<void>;
+    /**
+     * Enable a subscription, scoped to the active tenant (S5 #1398).
+     */
+    static enable(db: DatabaseInterface, signalType: string, subscriber: string, tenantScope?: DispatchTenantScope): Promise<void>;
+    /**
+     * Disable a subscription, scoped to the active tenant (S5 #1398).
+     */
+    static disable(db: DatabaseInterface, signalType: string, subscriber: string, tenantScope?: DispatchTenantScope): Promise<void>;
+    /**
+     * Check if subscriptions table exists
+     */
+    static tableExists(db: DatabaseInterface): Promise<boolean>;
+}
+//# sourceMappingURL=DispatchSubscriptions.d.ts.map

package/dist/dispatch/collections/DispatchSubscriptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DispatchSubscriptions.d.ts","sourceRoot":"","sources":["../../../src/dispatch/collections/DispatchSubscriptions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EAErB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAkCjE;;GAEG;AACH,qBAAa,8BAA8B;IACzC;;;;;;;;OAQG;WACU,MAAM,CACjB,EAAE,EAAE,iBAAiB,EACrB,YAAY,EAAE,oBAAoB,GACjC,OAAO,CAAC,IAAI,CAAC;IAmBhB;;OAEG;WACU,GAAG,CACd,EAAE,EAAE,iBAAiB,EACrB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IASvC;;OAEG;WACU,IAAI,CACf,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAUvC;;OAEG;WACU,gBAAgB,CAC3B,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,GAAE,OAAc,EAC3B,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAqBlC;;;;;;OAMG;WACU,uBAAuB,CAClC,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,oBAAoB,EAAE,CAAC;IA8ClC;;;;;OAKG;WACU,gBAAgB,CAC3B,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAIlC;;OAEG;WACU,cAAc,CACzB,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,EAAE,CAAC;IAYpB;;OAEG;WACU,IAAI,CACf,EAAE,EAAE,iBAAiB,EACrB,WAAW,GAAE,OAAe,EAC5B,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAuBlC;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE;;;OAGG;WACU,WAAW,CACtB,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,IAAI,CAAC;IAUhB;;OAEG;WACU,kBAAkB,CAC7B,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;IAOhB;;OAEG;WACU,MAAM,CACjB,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,IAAI,CAAC;IAchB;;OAEG;WACU,OAAO,CAClB,EAAE,EAAE,iBAAiB,EACrB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,IAAI,CAAC;IAchB;;OAEG;WACU,WAAW,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;CAQlE"}

package/dist/dispatch/collections/DispatchSubscriptions.js

@@ -0,0 +1,243 @@
+import { DispatchSubscription } from "../models/DispatchSubscription.js";
+function subscriptionTenantClause(scope, params) {
+  if (!scope?.enforced) {
+    return null;
+  }
+  if (scope.tenantId !== null) {
+    params.push(scope.tenantId);
+    return "tenant_id = ?";
+  }
+  return "tenant_id IS NULL";
+}
+class DispatchSubscriptionCollection {
+  /**
+   * Insert or update a subscription.
+   *
+   * Identity is tenant-scoped (S5 #1398): the conflict key is
+   * `(tenant_id, signal_type, subscriber)` so the same (signal_type, subscriber)
+   * pair can exist independently per tenant and one tenant cannot overwrite
+   * another's subscription. Global (NULL tenant_id) subscriptions are deduped by
+   * the NULL-aware upsert path in @happyvertical/sql.
+   */
+  static async upsert(db, subscription) {
+    const row = subscription.toRow();
+    await db.upsert(
+      "_smrt_dispatch_subscriptions",
+      ["tenant_id", "signal_type", "subscriber"],
+      {
+        id: row.id,
+        signal_type: row.signal_type,
+        subscriber: row.subscriber,
+        handler: row.handler,
+        delivery: row.delivery,
+        enabled: row.enabled,
+        tenant_id: row.tenant_id,
+        created_at: row.created_at,
+        updated_at: row.updated_at
+      }
+    );
+  }
+  /**
+   * Get a subscription by ID
+   */
+  static async get(db, id) {
+    const result = await db.single`
+      SELECT * FROM _smrt_dispatch_subscriptions WHERE id = ${id}
+    `;
+    if (!result) return null;
+    return DispatchSubscription.fromRow(result);
+  }
+  /**
+   * Find subscription by signal type and subscriber
+   */
+  static async find(db, signalType, subscriber) {
+    const result = await db.single`
+      SELECT * FROM _smrt_dispatch_subscriptions
+      WHERE signal_type = ${signalType} AND subscriber = ${subscriber}
+    `;
+    if (!result) return null;
+    return DispatchSubscription.fromRow(result);
+  }
+  /**
+   * Get all subscriptions for a subscriber, scoped to the active tenant (S5 #1398).
+   */
+  static async findBySubscriber(db, subscriber, enabledOnly = true, tenantScope) {
+    let sql = `SELECT * FROM _smrt_dispatch_subscriptions WHERE subscriber = ?`;
+    const params = [subscriber];
+    if (enabledOnly) {
+      sql += " AND enabled = 1";
+    }
+    const tenantClause = subscriptionTenantClause(tenantScope, params);
+    if (tenantClause) {
+      sql += ` AND ${tenantClause}`;
+    }
+    sql += " ORDER BY signal_type ASC";
+    const { rows } = await db.query(sql, ...params);
+    return rows.map(
+      (row) => DispatchSubscription.fromRow(row)
+    );
+  }
+  /**
+   * Get all subscriptions that match a signal type
+   *
+   * Uses SQL-level filtering for exact matches. Wildcard subscriptions
+   * (containing '*') are fetched separately and filtered in memory since
+   * pattern matching requires application-side regex evaluation.
+   */
+  static async findMatchingSubscribers(db, signalType, tenantScope) {
+    const exactParams = [signalType];
+    let exactSql = `SELECT * FROM _smrt_dispatch_subscriptions
+       WHERE enabled = 1 AND signal_type = ?`;
+    const exactTenantClause = subscriptionTenantClause(
+      tenantScope,
+      exactParams
+    );
+    if (exactTenantClause) {
+      exactSql += ` AND ${exactTenantClause}`;
+    }
+    const { rows: exactRows } = await db.query(exactSql, ...exactParams);
+    const exactSubs = exactRows.map(
+      (row) => DispatchSubscription.fromRow(row)
+    );
+    const wildcardParams = [];
+    let wildcardSql = `SELECT * FROM _smrt_dispatch_subscriptions
+       WHERE enabled = 1 AND signal_type LIKE '%*%'`;
+    const wildcardTenantClause = subscriptionTenantClause(
+      tenantScope,
+      wildcardParams
+    );
+    if (wildcardTenantClause) {
+      wildcardSql += ` AND ${wildcardTenantClause}`;
+    }
+    const { rows: wildcardRows } = await db.query(
+      wildcardSql,
+      ...wildcardParams
+    );
+    const wildcardSubs = wildcardRows.map(
+      (row) => DispatchSubscription.fromRow(
+        row
+      )
+    ).filter((sub) => sub.matches(signalType));
+    return [...exactSubs, ...wildcardSubs];
+  }
+  /**
+   * Find all enabled subscriptions matching a signal type
+   *
+   * Alias for findMatchingSubscribers — used by emit() to determine
+   * fan-out targets. Scoped to the active tenant (S5 #1398).
+   */
+  static async findBySignalType(db, signalType, tenantScope) {
+    return this.findMatchingSubscribers(db, signalType, tenantScope);
+  }
+  /**
+   * Get all unique signal types that a subscriber is subscribed to
+   */
+  static async getSignalTypes(db, subscriber) {
+    const { rows } = await db.query(
+      `SELECT DISTINCT signal_type FROM _smrt_dispatch_subscriptions
+       WHERE subscriber = ? AND enabled = 1`,
+      subscriber
+    );
+    return rows.map(
+      (row) => row.signal_type
+    );
+  }
+  /**
+   * List all subscriptions, scoped to the active tenant (S5 #1398).
+   */
+  static async list(db, enabledOnly = false, tenantScope) {
+    const conditions = [];
+    const params = [];
+    if (enabledOnly) {
+      conditions.push("enabled = 1");
+    }
+    const tenantClause = subscriptionTenantClause(tenantScope, params);
+    if (tenantClause) {
+      conditions.push(tenantClause);
+    }
+    let sql = "SELECT * FROM _smrt_dispatch_subscriptions";
+    if (conditions.length > 0) {
+      sql += ` WHERE ${conditions.join(" AND ")}`;
+    }
+    sql += " ORDER BY subscriber ASC, signal_type ASC";
+    const { rows } = await db.query(sql, ...params);
+    return rows.map(
+      (row) => DispatchSubscription.fromRow(row)
+    );
+  }
+  /**
+   * Delete a subscription
+   */
+  static async delete(db, id) {
+    await db.query(`DELETE FROM _smrt_dispatch_subscriptions WHERE id = ?`, id);
+  }
+  /**
+   * Delete subscription by signal type and subscriber, scoped to the active
+   * tenant (S5 #1398) so tenant B cannot delete tenant A's subscription.
+   */
+  static async deleteByKey(db, signalType, subscriber, tenantScope) {
+    const params = [signalType, subscriber];
+    let sql = `DELETE FROM _smrt_dispatch_subscriptions WHERE signal_type = ? AND subscriber = ?`;
+    const tenantClause = subscriptionTenantClause(tenantScope, params);
+    if (tenantClause) {
+      sql += ` AND ${tenantClause}`;
+    }
+    await db.query(sql, ...params);
+  }
+  /**
+   * Delete all subscriptions for a subscriber
+   */
+  static async deleteBySubscriber(db, subscriber) {
+    await db.query(
+      `DELETE FROM _smrt_dispatch_subscriptions WHERE subscriber = ?`,
+      subscriber
+    );
+  }
+  /**
+   * Enable a subscription, scoped to the active tenant (S5 #1398).
+   */
+  static async enable(db, signalType, subscriber, tenantScope) {
+    const params = [
+      (/* @__PURE__ */ new Date()).toISOString(),
+      signalType,
+      subscriber
+    ];
+    let sql = `UPDATE _smrt_dispatch_subscriptions SET enabled = 1, updated_at = ? WHERE signal_type = ? AND subscriber = ?`;
+    const tenantClause = subscriptionTenantClause(tenantScope, params);
+    if (tenantClause) {
+      sql += ` AND ${tenantClause}`;
+    }
+    await db.query(sql, ...params);
+  }
+  /**
+   * Disable a subscription, scoped to the active tenant (S5 #1398).
+   */
+  static async disable(db, signalType, subscriber, tenantScope) {
+    const params = [
+      (/* @__PURE__ */ new Date()).toISOString(),
+      signalType,
+      subscriber
+    ];
+    let sql = `UPDATE _smrt_dispatch_subscriptions SET enabled = 0, updated_at = ? WHERE signal_type = ? AND subscriber = ?`;
+    const tenantClause = subscriptionTenantClause(tenantScope, params);
+    if (tenantClause) {
+      sql += ` AND ${tenantClause}`;
+    }
+    await db.query(sql, ...params);
+  }
+  /**
+   * Check if subscriptions table exists
+   */
+  static async tableExists(db) {
+    try {
+      await db.query(`SELECT 1 FROM _smrt_dispatch_subscriptions LIMIT 1`);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+}
+export {
+  DispatchSubscriptionCollection
+};
+//# sourceMappingURL=DispatchSubscriptions.js.map

package/dist/dispatch/collections/DispatchSubscriptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DispatchSubscriptions.js","sources":["../../../src/dispatch/collections/DispatchSubscriptions.ts"],"sourcesContent":["/**\n * DispatchSubscriptionCollection - Storage operations for dispatch subscriptions\n *\n * CRUD operations for the _smrt_dispatch_subscriptions system table.\n */\n\nimport type { DatabaseInterface } from '@happyvertical/sql';\nimport {\n  DispatchSubscription,\n  type DispatchSubscriptionData,\n} from '../models/DispatchSubscription.js';\nimport type { DispatchTenantScope } from '../tenant-resolver.js';\n\n/**\n * Build a SQL tenant predicate fragment for subscription queries (S5 #1398).\n *\n * Mirrors the dispatch-row scoping, but subscription identity is *per tenant* —\n * a subscription belongs to exactly one scope, so an active tenant sees only its\n * own subscriptions (not also globals), preventing tenant B from finding/\n * mutating tenant A's (or a shared global) subscription row. Semantics:\n *\n *  - tenancy off / no scope → no predicate.\n *  - active tenant T → `tenant_id = ?`.\n *  - tenancy on, no active tenant → `tenant_id IS NULL` (global subs only).\n *\n * Uses `?` positional placeholders (these collection queries bind via the\n * sqlite-style `?` convention used elsewhere in this file).\n *\n * @returns The SQL fragment (without a leading `AND`), or `null` when no\n *   predicate applies. When a value is bound it is pushed onto `params`.\n */\nfunction subscriptionTenantClause(\n  scope: DispatchTenantScope | undefined,\n  params: unknown[],\n): string | null {\n  if (!scope?.enforced) {\n    return null;\n  }\n  if (scope.tenantId !== null) {\n    params.push(scope.tenantId);\n    return 'tenant_id = ?';\n  }\n  return 'tenant_id IS NULL';\n}\n\n/**\n * Storage operations for subscriptions in _smrt_dispatch_subscriptions table\n */\nexport class DispatchSubscriptionCollection {\n  /**\n   * Insert or update a subscription.\n   *\n   * Identity is tenant-scoped (S5 #1398): the conflict key is\n   * `(tenant_id, signal_type, subscriber)` so the same (signal_type, subscriber)\n   * pair can exist independently per tenant and one tenant cannot overwrite\n   * another's subscription. Global (NULL tenant_id) subscriptions are deduped by\n   * the NULL-aware upsert path in @happyvertical/sql.\n   */\n  static async upsert(\n    db: DatabaseInterface,\n    subscription: DispatchSubscription,\n  ): Promise<void> {\n    const row = subscription.toRow();\n    await db.upsert(\n      '_smrt_dispatch_subscriptions',\n      ['tenant_id', 'signal_type', 'subscriber'],\n      {\n        id: row.id,\n        signal_type: row.signal_type,\n        subscriber: row.subscriber,\n        handler: row.handler,\n        delivery: row.delivery,\n        enabled: row.enabled,\n        tenant_id: row.tenant_id,\n        created_at: row.created_at,\n        updated_at: row.updated_at,\n      },\n    );\n  }\n\n  /**\n   * Get a subscription by ID\n   */\n  static async get(\n    db: DatabaseInterface,\n    id: string,\n  ): Promise<DispatchSubscription | null> {\n    const result = await db.single`\n      SELECT * FROM _smrt_dispatch_subscriptions WHERE id = ${id}\n    `;\n\n    if (!result) return null;\n    return DispatchSubscription.fromRow(result as DispatchSubscriptionData);\n  }\n\n  /**\n   * Find subscription by signal type and subscriber\n   */\n  static async find(\n    db: DatabaseInterface,\n    signalType: string,\n    subscriber: string,\n  ): Promise<DispatchSubscription | null> {\n    const result = await db.single`\n      SELECT * FROM _smrt_dispatch_subscriptions\n      WHERE signal_type = ${signalType} AND subscriber = ${subscriber}\n    `;\n\n    if (!result) return null;\n    return DispatchSubscription.fromRow(result as DispatchSubscriptionData);\n  }\n\n  /**\n   * Get all subscriptions for a subscriber, scoped to the active tenant (S5 #1398).\n   */\n  static async findBySubscriber(\n    db: DatabaseInterface,\n    subscriber: string,\n    enabledOnly: boolean = true,\n    tenantScope?: DispatchTenantScope,\n  ): Promise<DispatchSubscription[]> {\n    let sql = `SELECT * FROM _smrt_dispatch_subscriptions WHERE subscriber = ?`;\n    const params: unknown[] = [subscriber];\n\n    if (enabledOnly) {\n      sql += ' AND enabled = 1';\n    }\n\n    const tenantClause = subscriptionTenantClause(tenantScope, params);\n    if (tenantClause) {\n      sql += ` AND ${tenantClause}`;\n    }\n\n    sql += ' ORDER BY signal_type ASC';\n\n    const { rows } = await db.query(sql, ...params);\n    return rows.map((row: Record<string, unknown>) =>\n      DispatchSubscription.fromRow(row as unknown as DispatchSubscriptionData),\n    );\n  }\n\n  /**\n   * Get all subscriptions that match a signal type\n   *\n   * Uses SQL-level filtering for exact matches. Wildcard subscriptions\n   * (containing '*') are fetched separately and filtered in memory since\n   * pattern matching requires application-side regex evaluation.\n   */\n  static async findMatchingSubscribers(\n    db: DatabaseInterface,\n    signalType: string,\n    tenantScope?: DispatchTenantScope,\n  ): Promise<DispatchSubscription[]> {\n    // SQL-level: exact match subscriptions (scoped to the active tenant).\n    const exactParams: unknown[] = [signalType];\n    let exactSql = `SELECT * FROM _smrt_dispatch_subscriptions\n       WHERE enabled = 1 AND signal_type = ?`;\n    const exactTenantClause = subscriptionTenantClause(\n      tenantScope,\n      exactParams,\n    );\n    if (exactTenantClause) {\n      exactSql += ` AND ${exactTenantClause}`;\n    }\n    const { rows: exactRows } = await db.query(exactSql, ...exactParams);\n\n    const exactSubs = exactRows.map((row: Record<string, unknown>) =>\n      DispatchSubscription.fromRow(row as unknown as DispatchSubscriptionData),\n    );\n\n    // SQL-level: wildcard subscriptions (contain '*'), scoped to the tenant.\n    // Must be filtered in memory for pattern matching.\n    const wildcardParams: unknown[] = [];\n    let wildcardSql = `SELECT * FROM _smrt_dispatch_subscriptions\n       WHERE enabled = 1 AND signal_type LIKE '%*%'`;\n    const wildcardTenantClause = subscriptionTenantClause(\n      tenantScope,\n      wildcardParams,\n    );\n    if (wildcardTenantClause) {\n      wildcardSql += ` AND ${wildcardTenantClause}`;\n    }\n    const { rows: wildcardRows } = await db.query(\n      wildcardSql,\n      ...wildcardParams,\n    );\n\n    const wildcardSubs = wildcardRows\n      .map((row: Record<string, unknown>) =>\n        DispatchSubscription.fromRow(\n          row as unknown as DispatchSubscriptionData,\n        ),\n      )\n      .filter((sub) => sub.matches(signalType));\n\n    return [...exactSubs, ...wildcardSubs];\n  }\n\n  /**\n   * Find all enabled subscriptions matching a signal type\n   *\n   * Alias for findMatchingSubscribers — used by emit() to determine\n   * fan-out targets. Scoped to the active tenant (S5 #1398).\n   */\n  static async findBySignalType(\n    db: DatabaseInterface,\n    signalType: string,\n    tenantScope?: DispatchTenantScope,\n  ): Promise<DispatchSubscription[]> {\n    return this.findMatchingSubscribers(db, signalType, tenantScope);\n  }\n\n  /**\n   * Get all unique signal types that a subscriber is subscribed to\n   */\n  static async getSignalTypes(\n    db: DatabaseInterface,\n    subscriber: string,\n  ): Promise<string[]> {\n    const { rows } = await db.query(\n      `SELECT DISTINCT signal_type FROM _smrt_dispatch_subscriptions\n       WHERE subscriber = ? AND enabled = 1`,\n      subscriber,\n    );\n\n    return rows.map(\n      (row: Record<string, unknown>) => row.signal_type as string,\n    );\n  }\n\n  /**\n   * List all subscriptions, scoped to the active tenant (S5 #1398).\n   */\n  static async list(\n    db: DatabaseInterface,\n    enabledOnly: boolean = false,\n    tenantScope?: DispatchTenantScope,\n  ): Promise<DispatchSubscription[]> {\n    const conditions: string[] = [];\n    const params: unknown[] = [];\n    if (enabledOnly) {\n      conditions.push('enabled = 1');\n    }\n    const tenantClause = subscriptionTenantClause(tenantScope, params);\n    if (tenantClause) {\n      conditions.push(tenantClause);\n    }\n\n    let sql = 'SELECT * FROM _smrt_dispatch_subscriptions';\n    if (conditions.length > 0) {\n      sql += ` WHERE ${conditions.join(' AND ')}`;\n    }\n    sql += ' ORDER BY subscriber ASC, signal_type ASC';\n\n    const { rows } = await db.query(sql, ...params);\n    return rows.map((row: Record<string, unknown>) =>\n      DispatchSubscription.fromRow(row as unknown as DispatchSubscriptionData),\n    );\n  }\n\n  /**\n   * Delete a subscription\n   */\n  static async delete(db: DatabaseInterface, id: string): Promise<void> {\n    await db.query(`DELETE FROM _smrt_dispatch_subscriptions WHERE id = ?`, id);\n  }\n\n  /**\n   * Delete subscription by signal type and subscriber, scoped to the active\n   * tenant (S5 #1398) so tenant B cannot delete tenant A's subscription.\n   */\n  static async deleteByKey(\n    db: DatabaseInterface,\n    signalType: string,\n    subscriber: string,\n    tenantScope?: DispatchTenantScope,\n  ): Promise<void> {\n    const params: unknown[] = [signalType, subscriber];\n    let sql = `DELETE FROM _smrt_dispatch_subscriptions WHERE signal_type = ? AND subscriber = ?`;\n    const tenantClause = subscriptionTenantClause(tenantScope, params);\n    if (tenantClause) {\n      sql += ` AND ${tenantClause}`;\n    }\n    await db.query(sql, ...params);\n  }\n\n  /**\n   * Delete all subscriptions for a subscriber\n   */\n  static async deleteBySubscriber(\n    db: DatabaseInterface,\n    subscriber: string,\n  ): Promise<void> {\n    await db.query(\n      `DELETE FROM _smrt_dispatch_subscriptions WHERE subscriber = ?`,\n      subscriber,\n    );\n  }\n\n  /**\n   * Enable a subscription, scoped to the active tenant (S5 #1398).\n   */\n  static async enable(\n    db: DatabaseInterface,\n    signalType: string,\n    subscriber: string,\n    tenantScope?: DispatchTenantScope,\n  ): Promise<void> {\n    const params: unknown[] = [\n      new Date().toISOString(),\n      signalType,\n      subscriber,\n    ];\n    let sql = `UPDATE _smrt_dispatch_subscriptions SET enabled = 1, updated_at = ? WHERE signal_type = ? AND subscriber = ?`;\n    const tenantClause = subscriptionTenantClause(tenantScope, params);\n    if (tenantClause) {\n      sql += ` AND ${tenantClause}`;\n    }\n    await db.query(sql, ...params);\n  }\n\n  /**\n   * Disable a subscription, scoped to the active tenant (S5 #1398).\n   */\n  static async disable(\n    db: DatabaseInterface,\n    signalType: string,\n    subscriber: string,\n    tenantScope?: DispatchTenantScope,\n  ): Promise<void> {\n    const params: unknown[] = [\n      new Date().toISOString(),\n      signalType,\n      subscriber,\n    ];\n    let sql = `UPDATE _smrt_dispatch_subscriptions SET enabled = 0, updated_at = ? WHERE signal_type = ? AND subscriber = ?`;\n    const tenantClause = subscriptionTenantClause(tenantScope, params);\n    if (tenantClause) {\n      sql += ` AND ${tenantClause}`;\n    }\n    await db.query(sql, ...params);\n  }\n\n  /**\n   * Check if subscriptions table exists\n   */\n  static async tableExists(db: DatabaseInterface): Promise<boolean> {\n    try {\n      await db.query(`SELECT 1 FROM _smrt_dispatch_subscriptions LIMIT 1`);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n}\n"],"names":[],"mappings":";AA+BA,SAAS,yBACP,OACA,QACe;AACf,MAAI,CAAC,OAAO,UAAU;AACpB,WAAO;AAAA,EACT;AACA,MAAI,MAAM,aAAa,MAAM;AAC3B,WAAO,KAAK,MAAM,QAAQ;AAC1B,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAKO,MAAM,+BAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAU1C,aAAa,OACX,IACA,cACe;AACf,UAAM,MAAM,aAAa,MAAA;AACzB,UAAM,GAAG;AAAA,MACP;AAAA,MACA,CAAC,aAAa,eAAe,YAAY;AAAA,MACzC;AAAA,QACE,IAAI,IAAI;AAAA,QACR,aAAa,IAAI;AAAA,QACjB,YAAY,IAAI;AAAA,QAChB,SAAS,IAAI;AAAA,QACb,UAAU,IAAI;AAAA,QACd,SAAS,IAAI;AAAA,QACb,WAAW,IAAI;AAAA,QACf,YAAY,IAAI;AAAA,QAChB,YAAY,IAAI;AAAA,MAAA;AAAA,IAClB;AAAA,EAEJ;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,IACX,IACA,IACsC;AACtC,UAAM,SAAS,MAAM,GAAG;AAAA,8DACkC,EAAE;AAAA;AAG5D,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO,qBAAqB,QAAQ,MAAkC;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,KACX,IACA,YACA,YACsC;AACtC,UAAM,SAAS,MAAM,GAAG;AAAA;AAAA,4BAEA,UAAU,qBAAqB,UAAU;AAAA;AAGjE,QAAI,CAAC,OAAQ,QAAO;AACpB,WAAO,qBAAqB,QAAQ,MAAkC;AAAA,EACxE;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,iBACX,IACA,YACA,cAAuB,MACvB,aACiC;AACjC,QAAI,MAAM;AACV,UAAM,SAAoB,CAAC,UAAU;AAErC,QAAI,aAAa;AACf,aAAO;AAAA,IACT;AAEA,UAAM,eAAe,yBAAyB,aAAa,MAAM;AACjE,QAAI,cAAc;AAChB,aAAO,QAAQ,YAAY;AAAA,IAC7B;AAEA,WAAO;AAEP,UAAM,EAAE,SAAS,MAAM,GAAG,MAAM,KAAK,GAAG,MAAM;AAC9C,WAAO,KAAK;AAAA,MAAI,CAAC,QACf,qBAAqB,QAAQ,GAA0C;AAAA,IAAA;AAAA,EAE3E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,wBACX,IACA,YACA,aACiC;AAEjC,UAAM,cAAyB,CAAC,UAAU;AAC1C,QAAI,WAAW;AAAA;AAEf,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA;AAAA,IAAA;AAEF,QAAI,mBAAmB;AACrB,kBAAY,QAAQ,iBAAiB;AAAA,IACvC;AACA,UAAM,EAAE,MAAM,cAAc,MAAM,GAAG,MAAM,UAAU,GAAG,WAAW;AAEnE,UAAM,YAAY,UAAU;AAAA,MAAI,CAAC,QAC/B,qBAAqB,QAAQ,GAA0C;AAAA,IAAA;AAKzE,UAAM,iBAA4B,CAAA;AAClC,QAAI,cAAc;AAAA;AAElB,UAAM,uBAAuB;AAAA,MAC3B;AAAA,MACA;AAAA,IAAA;AAEF,QAAI,sBAAsB;AACxB,qBAAe,QAAQ,oBAAoB;AAAA,IAC7C;AACA,UAAM,EAAE,MAAM,iBAAiB,MAAM,GAAG;AAAA,MACtC;AAAA,MACA,GAAG;AAAA,IAAA;AAGL,UAAM,eAAe,aAClB;AAAA,MAAI,CAAC,QACJ,qBAAqB;AAAA,QACnB;AAAA,MAAA;AAAA,IACF,EAED,OAAO,CAAC,QAAQ,IAAI,QAAQ,UAAU,CAAC;AAE1C,WAAO,CAAC,GAAG,WAAW,GAAG,YAAY;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,aAAa,iBACX,IACA,YACA,aACiC;AACjC,WAAO,KAAK,wBAAwB,IAAI,YAAY,WAAW;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,eACX,IACA,YACmB;AACnB,UAAM,EAAE,KAAA,IAAS,MAAM,GAAG;AAAA,MACxB;AAAA;AAAA,MAEA;AAAA,IAAA;AAGF,WAAO,KAAK;AAAA,MACV,CAAC,QAAiC,IAAI;AAAA,IAAA;AAAA,EAE1C;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,KACX,IACA,cAAuB,OACvB,aACiC;AACjC,UAAM,aAAuB,CAAA;AAC7B,UAAM,SAAoB,CAAA;AAC1B,QAAI,aAAa;AACf,iBAAW,KAAK,aAAa;AAAA,IAC/B;AACA,UAAM,eAAe,yBAAyB,aAAa,MAAM;AACjE,QAAI,cAAc;AAChB,iBAAW,KAAK,YAAY;AAAA,IAC9B;AAEA,QAAI,MAAM;AACV,QAAI,WAAW,SAAS,GAAG;AACzB,aAAO,UAAU,WAAW,KAAK,OAAO,CAAC;AAAA,IAC3C;AACA,WAAO;AAEP,UAAM,EAAE,SAAS,MAAM,GAAG,MAAM,KAAK,GAAG,MAAM;AAC9C,WAAO,KAAK;AAAA,MAAI,CAAC,QACf,qBAAqB,QAAQ,GAA0C;AAAA,IAAA;AAAA,EAE3E;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,OAAO,IAAuB,IAA2B;AACpE,UAAM,GAAG,MAAM,yDAAyD,EAAE;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,aAAa,YACX,IACA,YACA,YACA,aACe;AACf,UAAM,SAAoB,CAAC,YAAY,UAAU;AACjD,QAAI,MAAM;AACV,UAAM,eAAe,yBAAyB,aAAa,MAAM;AACjE,QAAI,cAAc;AAChB,aAAO,QAAQ,YAAY;AAAA,IAC7B;AACA,UAAM,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,mBACX,IACA,YACe;AACf,UAAM,GAAG;AAAA,MACP;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,OACX,IACA,YACA,YACA,aACe;AACf,UAAM,SAAoB;AAAA,OACxB,oBAAI,KAAA,GAAO,YAAA;AAAA,MACX;AAAA,MACA;AAAA,IAAA;AAEF,QAAI,MAAM;AACV,UAAM,eAAe,yBAAyB,aAAa,MAAM;AACjE,QAAI,cAAc;AAChB,aAAO,QAAQ,YAAY;AAAA,IAC7B;AACA,UAAM,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,QACX,IACA,YACA,YACA,aACe;AACf,UAAM,SAAoB;AAAA,OACxB,oBAAI,KAAA,GAAO,YAAA;AAAA,MACX;AAAA,MACA;AAAA,IAAA;AAEF,QAAI,MAAM;AACV,UAAM,eAAe,yBAAyB,aAAa,MAAM;AACjE,QAAI,cAAc;AAChB,aAAO,QAAQ,YAAY;AAAA,IAC7B;AACA,UAAM,GAAG,MAAM,KAAK,GAAG,MAAM;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,aAAa,YAAY,IAAyC;AAChE,QAAI;AACF,YAAM,GAAG,MAAM,oDAAoD;AACnE,aAAO;AAAA,IACT,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AACF;"}

package/dist/dispatch/collections/Dispatches.d.ts

@@ -0,0 +1,98 @@
+import { DatabaseInterface } from '@happyvertical/sql';
+import { Dispatch } from '../models/Dispatch.js';
+import { DispatchTenantScope } from '../tenant-resolver.js';
+import { DispatchCleanupOptions, DispatchCleanupResult, DispatchListOptions, DispatchRetryOptions, DispatchStatus } from '../types.js';
+/**
+ * Storage operations for dispatches in _smrt_dispatch table
+ */
+export declare class DispatchCollection {
+    /**
+     * Insert a new dispatch
+     */
+    static insert(db: DatabaseInterface, dispatch: Dispatch): Promise<void>;
+    /**
+     * Update an existing dispatch
+     */
+    static update(db: DatabaseInterface, dispatch: Dispatch): Promise<void>;
+    /**
+     * Get a dispatch by ID (unscoped).
+     *
+     * Internal/system use only — applies no tenant filter. Public reads go
+     * through the DispatchBus, which uses {@link getScoped} so a caller cannot
+     * fetch another tenant's dispatch by id (S5 #1398).
+     */
+    static get(db: DatabaseInterface, id: string): Promise<Dispatch | null>;
+    /**
+     * Get a dispatch by ID, enforcing the active tenant scope (S5 #1398).
+     *
+     * Applies the same tenant predicate as {@link list}/{@link findPending}, so a
+     * cross-tenant or out-of-scope id lookup returns `null` rather than leaking
+     * the row. The scope is derived server-side by the DispatchBus.
+     */
+    static getScoped(db: DatabaseInterface, id: string, tenantScope?: DispatchTenantScope): Promise<Dispatch | null>;
+    /**
+     * List dispatches with filtering
+     */
+    static list(db: DatabaseInterface, options?: DispatchListOptions): Promise<Dispatch[]>;
+    /**
+     * Find pending dispatches for a set of signal types
+     *
+     * @param subscriber - When provided, filters to dispatches with no target
+     *   or targeted specifically at this subscriber (for fan-out delivery)
+     * @param tenantScope - Active tenant scope (S5 #1398). Derived server-side by
+     *   the bus; restricts results so a subscriber in one tenant cannot see
+     *   another tenant's dispatch. See {@link pushTenantPredicate} for the exact
+     *   semantics (off → no filter; active tenant → that tenant + global; on but
+     *   no tenant → global only).
+     */
+    static findPending(db: DatabaseInterface, signalTypes: string[], limit?: number, subscriber?: string, tenantScope?: DispatchTenantScope): Promise<Dispatch[]>;
+    /**
+     * Atomically claim a pending dispatch for processing (S5 #1398).
+     *
+     * Performs a conditional `UPDATE ... WHERE id = ? AND status = 'pending'`
+     * (plus the tenant predicate for the active scope) and reports whether the
+     * row was claimed by THIS call. Only the caller whose update affected a row
+     * may run the handler, which closes the claim TOCTOU window where a `process`
+     * filter-then-update could let two workers (or a tenant-scoped and a
+     * system-scoped processor) both pick up the same compete/global dispatch.
+     *
+     * On a successful claim the dispatch's status/attempts/updated_at are
+     * advanced in the DB; the in-memory `dispatch` instance is updated to match
+     * so the caller can proceed to `update()` it to completed/failed.
+     *
+     * @returns `true` if this call claimed the dispatch, `false` if another
+     *   worker already moved it out of `pending` (or it is not visible in scope).
+     */
+    static claim(db: DatabaseInterface, dispatch: Dispatch, tenantScope?: DispatchTenantScope): Promise<boolean>;
+    /**
+     * Find failed dispatches eligible for retry.
+     *
+     * @param tenantScope - Active tenant scope (S5 #1398). Derived server-side by
+     *   the bus; restricts retryable rows to the active tenant (plus global) so a
+     *   tenant's `retry()` cannot reset another tenant's failed dispatches. See
+     *   {@link pushTenantPredicate} for the exact semantics.
+     */
+    static findRetryable(db: DatabaseInterface, options?: DispatchRetryOptions, tenantScope?: DispatchTenantScope): Promise<Dispatch[]>;
+    /**
+     * Count dispatches by status
+     */
+    static countByStatus(db: DatabaseInterface, status: DispatchStatus): Promise<number>;
+    /**
+     * Delete a dispatch
+     */
+    static delete(db: DatabaseInterface, id: string): Promise<void>;
+    /**
+     * Cleanup old dispatches.
+     *
+     * @param tenantScope - Active tenant scope (S5 #1398). Derived server-side by
+     *   the bus; restricts deletions to the active tenant (plus global) so a
+     *   tenant's `cleanup()` cannot delete another tenant's dispatches. See
+     *   {@link pushTenantPredicate} for the exact semantics.
+     */
+    static cleanup(db: DatabaseInterface, options?: DispatchCleanupOptions, tenantScope?: DispatchTenantScope): Promise<DispatchCleanupResult>;
+    /**
+     * Check if dispatch table exists
+     */
+    static tableExists(db: DatabaseInterface): Promise<boolean>;
+}
+//# sourceMappingURL=Dispatches.d.ts.map

package/dist/dispatch/collections/Dispatches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Dispatches.d.ts","sourceRoot":"","sources":["../../../src/dispatch/collections/Dispatches.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAqB,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACf,MAAM,aAAa,CAAC;AAmCrB;;GAEG;AACH,qBAAa,kBAAkB;IAC7B;;OAEG;WACU,MAAM,CACjB,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,IAAI,CAAC;IA0BhB;;OAEG;WACU,MAAM,CACjB,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,IAAI,CAAC;IAyBhB;;;;;;OAMG;WACU,GAAG,CACd,EAAE,EAAE,iBAAiB,EACrB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAS3B;;;;;;OAMG;WACU,SAAS,CACpB,EAAE,EAAE,iBAAiB,EACrB,EAAE,EAAE,MAAM,EACV,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAe3B;;OAEG;WACU,IAAI,CACf,EAAE,EAAE,iBAAiB,EACrB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAuFtB;;;;;;;;;;OAUG;WACU,WAAW,CACtB,EAAE,EAAE,iBAAiB,EACrB,WAAW,EAAE,MAAM,EAAE,EACrB,KAAK,GAAE,MAAY,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAsCtB;;;;;;;;;;;;;;;;OAgBG;WACU,KAAK,CAChB,EAAE,EAAE,iBAAiB,EACrB,QAAQ,EAAE,QAAQ,EAClB,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,OAAO,CAAC;IA6BnB;;;;;;;OAOG;WACU,aAAa,CACxB,EAAE,EAAE,iBAAiB,EACrB,OAAO,GAAE,oBAAyB,EAClC,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAuCtB;;OAEG;WACU,aAAa,CACxB,EAAE,EAAE,iBAAiB,EACrB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,MAAM,CAAC;IAOlB;;OAEG;WACU,MAAM,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrE;;;;;;;OAOG;WACU,OAAO,CAClB,EAAE,EAAE,iBAAiB,EACrB,OAAO,GAAE,sBAA2B,EACpC,WAAW,CAAC,EAAE,mBAAmB,GAChC,OAAO,CAAC,qBAAqB,CAAC;IA0CjC;;OAEG;WACU,WAAW,CAAC,EAAE,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC;CAQlE"}