@pattern-stack/codegen 0.14.0 → 0.14.1

package/dist/runtime/subsystems/bridge/bridge-delivery.memory-backend.d.ts

@@ -22,7 +22,7 @@ declare class MemoryBridgeDeliveryRepo implements IJobBridge {
      * Unlike `insertDelivery`, this read does NOT call `assertTenantId`:
      * `tenantId === undefined` is the supported cross-tenant admin view.
      */
-    getStatusHistogram(windowHours: number, tenantId?: string | null): Promise<StatusHistogram>;
+    getStatusHistogram(windowHours: number, tenantId?: string | null, nowMs?: number): Promise<StatusHistogram>;
     /** All deliveries for a given event (any status, declaration order). */
     getDeliveriesForEvent(eventId: string): BridgeDeliveryRecord[];
     /** All deliveries currently in the given status. */

package/dist/runtime/subsystems/bridge/bridge-delivery.memory-backend.js

@@ -80,11 +80,11 @@ var MemoryBridgeDeliveryRepo = class {
    * Unlike `insertDelivery`, this read does NOT call `assertTenantId`:
    * `tenantId === undefined` is the supported cross-tenant admin view.
    */
-  async getStatusHistogram(windowHours, tenantId) {
+  async getStatusHistogram(windowHours, tenantId, nowMs = Date.now()) {
     if (!Number.isFinite(windowHours) || windowHours <= 0) {
       throw new RangeError("windowHours must be positive");
     }
-    const cutoffMs = Date.now() - windowHours * 36e5;
+    const cutoffMs = nowMs - windowHours * 36e5;
     const histogram = {
       pending: 0,
       delivered: 0,

package/dist/runtime/subsystems/bridge/bridge-delivery.memory-backend.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../runtime/subsystems/bridge/bridge-delivery.memory-backend.ts","../../../../runtime/subsystems/bridge/bridge-errors.ts"],"sourcesContent":["/**\n * MemoryBridgeDeliveryRepo — in-memory `IJobBridge` (BRIDGE-3, ADR-023 Phase 2).\n *\n * Behavioral twin of the Drizzle backend (BRIDGE-4) for use in\n * `just test-unit`. No Docker, no Postgres, fully synchronous. Backs a\n * `Map<\"${eventId}::${triggerId}\", BridgeDeliveryRecord>` so the UNIQUE\n * `(event_id, trigger_id)` constraint can be simulated cheaply.\n *\n * Precedent: `MemoryEventBus` (EVT-5), `MemoryJobOrchestrator`\n * (jobs subsystem). Same shape — a class implementing the protocol plus\n * test-only helpers (`getDeliveriesForEvent`, `getByStatus`, `clear`) that\n * BRIDGE-5's framework-handler tests and BRIDGE-7's facade tests will\n * exercise.\n *\n * The synthetic `UniqueConstraintError` carries a `constraint` field equal\n * to the Drizzle constraint name (`uq_bridge_delivery_event_trigger`, set\n * in BRIDGE-1's schema) so consumers — including BRIDGE-4's\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING` path and\n * BRIDGE-7's Case B dedup tests — can branch on the same discriminator\n * regardless of which backend is wired up. ADR-023 explicitly relies on\n * this constraint as the dedup mechanism in two places (replay; facade-\n * vs-drain Case B); a typed error makes both call sites checkable.\n */\nimport { randomUUID } from 'node:crypto';\n\nimport type {\n  BridgeDeliveryInsert,\n  IJobBridge,\n  StatusHistogram,\n} from './bridge.protocol';\nimport type { BridgeDeliveryRecord } from './bridge-delivery.schema';\nimport { UniqueConstraintError } from './bridge-errors';\n\nconst BRIDGE_DELIVERY_UNIQUE_CONSTRAINT =\n  'uq_bridge_delivery_event_trigger' as const;\n\nfunction key(eventId: string, triggerId: string): string {\n  return `${eventId}::${triggerId}`;\n}\n\nexport class MemoryBridgeDeliveryRepo implements IJobBridge {\n  private readonly deliveries = new Map<string, BridgeDeliveryRecord>();\n\n  async insertDelivery(row: BridgeDeliveryInsert): Promise<void> {\n    const k = key(row.eventId, row.triggerId);\n    if (this.deliveries.has(k)) {\n      throw new UniqueConstraintError(\n        BRIDGE_DELIVERY_UNIQUE_CONSTRAINT,\n        row.eventId,\n        row.triggerId,\n      );\n    }\n    // Materialize a full BridgeDeliveryRecord — fill in DB defaults that\n    // the insert payload allowed to be omitted.\n    const record: BridgeDeliveryRecord = {\n      id: row.id ?? randomUUID(),\n      eventId: row.eventId,\n      triggerId: row.triggerId,\n      wrapperRunId: row.wrapperRunId ?? null,\n      userRunId: row.userRunId ?? null,\n      status: row.status ?? 'pending',\n      skipReason: row.skipReason ?? null,\n      error: (row.error as Record<string, unknown> | null | undefined) ?? null,\n      tenantId: row.tenantId ?? null,\n      attemptedAt:\n        row.attemptedAt instanceof Date ? row.attemptedAt : new Date(),\n      deliveredAt:\n        row.deliveredAt instanceof Date ? row.deliveredAt : null,\n    };\n    this.deliveries.set(k, record);\n  }\n\n  async findDelivery(\n    eventId: string,\n    triggerId: string,\n  ): Promise<BridgeDeliveryRecord | null> {\n    return this.deliveries.get(key(eventId, triggerId)) ?? null;\n  }\n\n  async findDeliveryById(id: string): Promise<BridgeDeliveryRecord | null> {\n    for (const record of this.deliveries.values()) {\n      if (record.id === id) return record;\n    }\n    return null;\n  }\n\n  async markDelivered(id: string, userRunId: string): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'delivered';\n    record.userRunId = userRunId;\n    record.deliveredAt = new Date();\n  }\n\n  async markSkipped(id: string, reason: string): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'skipped';\n    record.skipReason = reason;\n  }\n\n  async markFailed(\n    id: string,\n    error: Record<string, unknown>,\n  ): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'failed';\n    record.error = error;\n  }\n\n  /**\n   * Observability read — see `IJobBridge.getStatusHistogram` JSDoc for the\n   * tenant-filter and windowHours contract.\n   *\n   * Unlike `insertDelivery`, this read does NOT call `assertTenantId`:\n   * `tenantId === undefined` is the supported cross-tenant admin view.\n   */\n  async getStatusHistogram(\n    windowHours: number,\n    tenantId?: string | null,\n  ): Promise<StatusHistogram> {\n    if (!Number.isFinite(windowHours) || windowHours <= 0) {\n      throw new RangeError('windowHours must be positive');\n    }\n\n    const cutoffMs = Date.now() - windowHours * 3_600_000;\n    const histogram: StatusHistogram = {\n      pending: 0,\n      delivered: 0,\n      skipped: 0,\n      failed: 0,\n    };\n\n    for (const record of this.deliveries.values()) {\n      if (record.attemptedAt.getTime() < cutoffMs) continue;\n      if (tenantId === null && record.tenantId !== null) continue;\n      if (typeof tenantId === 'string' && record.tenantId !== tenantId) {\n        continue;\n      }\n      // tenantId === undefined → no tenant filter.\n      histogram[record.status] += 1;\n    }\n\n    return histogram;\n  }\n\n  // ─── Test helpers ────────────────────────────────────────────────────────\n\n  /** All deliveries for a given event (any status, declaration order). */\n  getDeliveriesForEvent(eventId: string): BridgeDeliveryRecord[] {\n    return [...this.deliveries.values()].filter((r) => r.eventId === eventId);\n  }\n\n  /** All deliveries currently in the given status. */\n  getByStatus(\n    status: BridgeDeliveryRecord['status'],\n  ): BridgeDeliveryRecord[] {\n    return [...this.deliveries.values()].filter((r) => r.status === status);\n  }\n\n  /** Reset the store. Tests use this in `beforeEach`. */\n  clear(): void {\n    this.deliveries.clear();\n  }\n\n  // ─── Internals ───────────────────────────────────────────────────────────\n\n  private findById(id: string): BridgeDeliveryRecord {\n    for (const record of this.deliveries.values()) {\n      if (record.id === id) return record;\n    }\n    throw new Error(\n      `MemoryBridgeDeliveryRepo: no delivery with id '${id}' (transition ` +\n        `methods may not be called for unknown rows; the framework handler ` +\n        `should always findDelivery first or operate on a row it just ` +\n        `inserted).`,\n    );\n  }\n}\n","/**\n * Typed errors for the bridge subsystem (ADR-023 Phase 2, BRIDGE-2).\n *\n * All thrown by the three enforcement sites named in ADR-023 §Multi-tenancy:\n *   - `EventFlowService.publishAndStart` entry (BRIDGE-7)\n *   - `BridgeDeliveryHandler.handle` entry (BRIDGE-5)\n *   - `DrizzleBridgeDeliveryRepo.insertDelivery` pre-write (BRIDGE-4)\n *\n * Same shape as `runtime/subsystems/jobs/jobs-errors.ts` and\n * `runtime/subsystems/events/events-errors.ts` so consumers can catch them\n * with the same exception-filter pattern across all three subsystems.\n */\n\n/**\n * Thrown when `BridgeModule` was configured with `multiTenant: true` but\n * the caller did not pass a `tenantId` at one of the three enforcement\n * sites listed above.\n *\n * **Strict enforcement rationale (mirrors JOB-8 / SYNC-6 stance, locked\n * 2026-04-18 for jobs; same rationale applies here).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship;\n * surfacing the misuse loudly at the call site (rather than silently\n * defaulting to `null` or to \"the last tenant seen\") prevents both\n * accidental global writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   work (e.g. a system housekeeping event with no owning tenant). The\n *   `bridge_delivery` row is persisted with `tenant_id = NULL`.\n *\n * The `callSite` constructor argument names which of the three enforcement\n * sites threw — review reports and ops dashboards rely on a stable site\n * name, so use the canonical strings: `'EventFlowService.publishAndStart'`,\n * `'BridgeDeliveryHandler.handle'`,\n * `'DrizzleBridgeDeliveryRepo.insertDelivery'`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly callSite: string) {\n    super(\n      `MissingTenantIdError: BridgeModule was configured with ` +\n        `multiTenant=true but ${callSite} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Synthetic error thrown by `MemoryBridgeDeliveryRepo.insertDelivery` when\n * a duplicate `(event_id, trigger_id)` insert hits the simulated UNIQUE\n * constraint (BRIDGE-3).\n *\n * Carries a `constraint` field equal to the Drizzle constraint name\n * declared in BRIDGE-1's schema (`uq_bridge_delivery_event_trigger`) so\n * call sites can branch on the same discriminator regardless of which\n * backend is wired up. This matters because ADR-023 explicitly leans on\n * the constraint as the dedup mechanism in two places — outbox replay\n * and `publishAndStart` Case B — and BRIDGE-4 / BRIDGE-7 will share a\n * type-check path with BRIDGE-3-driven tests.\n *\n * The Drizzle backend (BRIDGE-4) does NOT throw this error: it uses\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING RETURNING id`\n * per the BRIDGE-4 spec recommendation, so collisions surface as an empty\n * result set rather than an exception. The error exists so the memory\n * backend can faithfully model the \"duplicate raises\" behaviour for tests\n * that want to assert the constraint actually fires.\n */\n/**\n * Thrown by `BridgeModule.onModuleInit` when `JobWorkerModule` is wired\n * alongside the bridge but its active `pools` list does not include one\n * or more of the three reserved bridge pools (`events_inbound`,\n * `events_change`, `events_outbound`).\n *\n * Without a worker polling those pools, the wrapper `job_run` rows the\n * outbox drain inserts (BRIDGE-4) sit `pending` forever — a silent\n * footgun where `eventFlow.publish(...)` returns success but no user\n * job ever spawns. The boot-time check converts that into a fail-fast.\n *\n * Operators can either (a) add `...BRIDGE_RESERVED_POOLS` to their\n * `JobWorkerModule.forRoot({ pools })` configuration so the same\n * process polls the reserved pools, or (b) run a separate worker\n * process per reserved pool for lane isolation (ADR-022 §Pool\n * isolation).\n */\nexport class BridgeReservedPoolsNotPolledError extends Error {\n  override readonly name = 'BridgeReservedPoolsNotPolledError';\n  constructor(public readonly missingPools: readonly string[]) {\n    super(\n      `BridgeModule loaded but JobWorkerModule is not polling reserved ` +\n        `pool '${missingPools[0]}'. Add ...BRIDGE_RESERVED_POOLS to your ` +\n        `JobWorkerModule.forRoot({ pools }) configuration. Missing pools: ` +\n        `${missingPools.join(', ')}. (Bridge-fanout wrappers will sit ` +\n        `pending forever without these pollers.)`,\n    );\n  }\n}\n\nexport class UniqueConstraintError extends Error {\n  override readonly name = 'UniqueConstraintError';\n  constructor(\n    public readonly constraint: string,\n    public readonly eventId: string,\n    public readonly triggerId: string,\n  ) {\n    super(\n      `UniqueConstraintError: duplicate insert into bridge_delivery for ` +\n        `(event_id='${eventId}', trigger_id='${triggerId}') — violates ` +\n        `constraint '${constraint}'.`,\n    );\n  }\n}\n"],"mappings":";AAuBA,SAAS,kBAAkB;;;AC2EpB,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAE/C,YACkB,YACA,SACA,WAChB;AACA;AAAA,MACE,+EACgB,OAAO,kBAAkB,SAAS,kCACjC,UAAU;AAAA,IAC7B;AARgB;AACA;AACA;AAAA,EAOlB;AAAA,EATkB;AAAA,EACA;AAAA,EACA;AAAA,EAJA,OAAO;AAY3B;;;AD9EA,IAAM,oCACJ;AAEF,SAAS,IAAI,SAAiB,WAA2B;AACvD,SAAO,GAAG,OAAO,KAAK,SAAS;AACjC;AAEO,IAAM,2BAAN,MAAqD;AAAA,EACzC,aAAa,oBAAI,IAAkC;AAAA,EAEpE,MAAM,eAAe,KAA0C;AAC7D,UAAM,IAAI,IAAI,IAAI,SAAS,IAAI,SAAS;AACxC,QAAI,KAAK,WAAW,IAAI,CAAC,GAAG;AAC1B,YAAM,IAAI;AAAA,QACR;AAAA,QACA,IAAI;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,IACF;AAGA,UAAM,SAA+B;AAAA,MACnC,IAAI,IAAI,MAAM,WAAW;AAAA,MACzB,SAAS,IAAI;AAAA,MACb,WAAW,IAAI;AAAA,MACf,cAAc,IAAI,gBAAgB;AAAA,MAClC,WAAW,IAAI,aAAa;AAAA,MAC5B,QAAQ,IAAI,UAAU;AAAA,MACtB,YAAY,IAAI,cAAc;AAAA,MAC9B,OAAQ,IAAI,SAAwD;AAAA,MACpE,UAAU,IAAI,YAAY;AAAA,MAC1B,aACE,IAAI,uBAAuB,OAAO,IAAI,cAAc,oBAAI,KAAK;AAAA,MAC/D,aACE,IAAI,uBAAuB,OAAO,IAAI,cAAc;AAAA,IACxD;AACA,SAAK,WAAW,IAAI,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,MAAM,aACJ,SACA,WACsC;AACtC,WAAO,KAAK,WAAW,IAAI,IAAI,SAAS,SAAS,CAAC,KAAK;AAAA,EACzD;AAAA,EAEA,MAAM,iBAAiB,IAAkD;AACvE,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,OAAO,GAAI,QAAO;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,IAAY,WAAkC;AAChE,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,YAAY;AACnB,WAAO,cAAc,oBAAI,KAAK;AAAA,EAChC;AAAA,EAEA,MAAM,YAAY,IAAY,QAA+B;AAC3D,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,WACJ,IACA,OACe;AACf,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,QAAQ;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,mBACJ,aACA,UAC0B;AAC1B,QAAI,CAAC,OAAO,SAAS,WAAW,KAAK,eAAe,GAAG;AACrD,YAAM,IAAI,WAAW,8BAA8B;AAAA,IACrD;AAEA,UAAM,WAAW,KAAK,IAAI,IAAI,cAAc;AAC5C,UAAM,YAA6B;AAAA,MACjC,SAAS;AAAA,MACT,WAAW;AAAA,MACX,SAAS;AAAA,MACT,QAAQ;AAAA,IACV;AAEA,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,YAAY,QAAQ,IAAI,SAAU;AAC7C,UAAI,aAAa,QAAQ,OAAO,aAAa,KAAM;AACnD,UAAI,OAAO,aAAa,YAAY,OAAO,aAAa,UAAU;AAChE;AAAA,MACF;AAEA,gBAAU,OAAO,MAAM,KAAK;AAAA,IAC9B;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAKA,sBAAsB,SAAyC;AAC7D,WAAO,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,OAAO;AAAA,EAC1E;AAAA;AAAA,EAGA,YACE,QACwB;AACxB,WAAO,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM;AAAA,EACxE;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,WAAW,MAAM;AAAA,EACxB;AAAA;AAAA,EAIQ,SAAS,IAAkC;AACjD,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,OAAO,GAAI,QAAO;AAAA,IAC/B;AACA,UAAM,IAAI;AAAA,MACR,kDAAkD,EAAE;AAAA,IAItD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../../../runtime/subsystems/bridge/bridge-delivery.memory-backend.ts","../../../../runtime/subsystems/bridge/bridge-errors.ts"],"sourcesContent":["/**\n * MemoryBridgeDeliveryRepo — in-memory `IJobBridge` (BRIDGE-3, ADR-023 Phase 2).\n *\n * Behavioral twin of the Drizzle backend (BRIDGE-4) for use in\n * `just test-unit`. No Docker, no Postgres, fully synchronous. Backs a\n * `Map<\"${eventId}::${triggerId}\", BridgeDeliveryRecord>` so the UNIQUE\n * `(event_id, trigger_id)` constraint can be simulated cheaply.\n *\n * Precedent: `MemoryEventBus` (EVT-5), `MemoryJobOrchestrator`\n * (jobs subsystem). Same shape — a class implementing the protocol plus\n * test-only helpers (`getDeliveriesForEvent`, `getByStatus`, `clear`) that\n * BRIDGE-5's framework-handler tests and BRIDGE-7's facade tests will\n * exercise.\n *\n * The synthetic `UniqueConstraintError` carries a `constraint` field equal\n * to the Drizzle constraint name (`uq_bridge_delivery_event_trigger`, set\n * in BRIDGE-1's schema) so consumers — including BRIDGE-4's\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING` path and\n * BRIDGE-7's Case B dedup tests — can branch on the same discriminator\n * regardless of which backend is wired up. ADR-023 explicitly relies on\n * this constraint as the dedup mechanism in two places (replay; facade-\n * vs-drain Case B); a typed error makes both call sites checkable.\n */\nimport { randomUUID } from 'node:crypto';\n\nimport type {\n  BridgeDeliveryInsert,\n  IJobBridge,\n  StatusHistogram,\n} from './bridge.protocol';\nimport type { BridgeDeliveryRecord } from './bridge-delivery.schema';\nimport { UniqueConstraintError } from './bridge-errors';\n\nconst BRIDGE_DELIVERY_UNIQUE_CONSTRAINT =\n  'uq_bridge_delivery_event_trigger' as const;\n\nfunction key(eventId: string, triggerId: string): string {\n  return `${eventId}::${triggerId}`;\n}\n\nexport class MemoryBridgeDeliveryRepo implements IJobBridge {\n  private readonly deliveries = new Map<string, BridgeDeliveryRecord>();\n\n  async insertDelivery(row: BridgeDeliveryInsert): Promise<void> {\n    const k = key(row.eventId, row.triggerId);\n    if (this.deliveries.has(k)) {\n      throw new UniqueConstraintError(\n        BRIDGE_DELIVERY_UNIQUE_CONSTRAINT,\n        row.eventId,\n        row.triggerId,\n      );\n    }\n    // Materialize a full BridgeDeliveryRecord — fill in DB defaults that\n    // the insert payload allowed to be omitted.\n    const record: BridgeDeliveryRecord = {\n      id: row.id ?? randomUUID(),\n      eventId: row.eventId,\n      triggerId: row.triggerId,\n      wrapperRunId: row.wrapperRunId ?? null,\n      userRunId: row.userRunId ?? null,\n      status: row.status ?? 'pending',\n      skipReason: row.skipReason ?? null,\n      error: (row.error as Record<string, unknown> | null | undefined) ?? null,\n      tenantId: row.tenantId ?? null,\n      attemptedAt:\n        row.attemptedAt instanceof Date ? row.attemptedAt : new Date(),\n      deliveredAt:\n        row.deliveredAt instanceof Date ? row.deliveredAt : null,\n    };\n    this.deliveries.set(k, record);\n  }\n\n  async findDelivery(\n    eventId: string,\n    triggerId: string,\n  ): Promise<BridgeDeliveryRecord | null> {\n    return this.deliveries.get(key(eventId, triggerId)) ?? null;\n  }\n\n  async findDeliveryById(id: string): Promise<BridgeDeliveryRecord | null> {\n    for (const record of this.deliveries.values()) {\n      if (record.id === id) return record;\n    }\n    return null;\n  }\n\n  async markDelivered(id: string, userRunId: string): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'delivered';\n    record.userRunId = userRunId;\n    record.deliveredAt = new Date();\n  }\n\n  async markSkipped(id: string, reason: string): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'skipped';\n    record.skipReason = reason;\n  }\n\n  async markFailed(\n    id: string,\n    error: Record<string, unknown>,\n  ): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'failed';\n    record.error = error;\n  }\n\n  /**\n   * Observability read — see `IJobBridge.getStatusHistogram` JSDoc for the\n   * tenant-filter and windowHours contract.\n   *\n   * Unlike `insertDelivery`, this read does NOT call `assertTenantId`:\n   * `tenantId === undefined` is the supported cross-tenant admin view.\n   */\n  async getStatusHistogram(\n    windowHours: number,\n    tenantId?: string | null,\n    // Reference instant for the window cutoff. Defaults to the wall clock; exposed\n    // as a test-injection seam so a caller can pin the cutoff to the same `now` it\n    // positioned a boundary row from. Without it the cutoff is re-sampled here a few\n    // ms later, pushing an \"exactly at the boundary\" row just below the window\n    // (the OBS-3 boundary test flake). The drizzle backend has no analogue — it\n    // evaluates the cutoff once in SQL via `now()`.\n    nowMs: number = Date.now(),\n  ): Promise<StatusHistogram> {\n    if (!Number.isFinite(windowHours) || windowHours <= 0) {\n      throw new RangeError('windowHours must be positive');\n    }\n\n    const cutoffMs = nowMs - windowHours * 3_600_000;\n    const histogram: StatusHistogram = {\n      pending: 0,\n      delivered: 0,\n      skipped: 0,\n      failed: 0,\n    };\n\n    for (const record of this.deliveries.values()) {\n      if (record.attemptedAt.getTime() < cutoffMs) continue;\n      if (tenantId === null && record.tenantId !== null) continue;\n      if (typeof tenantId === 'string' && record.tenantId !== tenantId) {\n        continue;\n      }\n      // tenantId === undefined → no tenant filter.\n      histogram[record.status] += 1;\n    }\n\n    return histogram;\n  }\n\n  // ─── Test helpers ────────────────────────────────────────────────────────\n\n  /** All deliveries for a given event (any status, declaration order). */\n  getDeliveriesForEvent(eventId: string): BridgeDeliveryRecord[] {\n    return [...this.deliveries.values()].filter((r) => r.eventId === eventId);\n  }\n\n  /** All deliveries currently in the given status. */\n  getByStatus(\n    status: BridgeDeliveryRecord['status'],\n  ): BridgeDeliveryRecord[] {\n    return [...this.deliveries.values()].filter((r) => r.status === status);\n  }\n\n  /** Reset the store. Tests use this in `beforeEach`. */\n  clear(): void {\n    this.deliveries.clear();\n  }\n\n  // ─── Internals ───────────────────────────────────────────────────────────\n\n  private findById(id: string): BridgeDeliveryRecord {\n    for (const record of this.deliveries.values()) {\n      if (record.id === id) return record;\n    }\n    throw new Error(\n      `MemoryBridgeDeliveryRepo: no delivery with id '${id}' (transition ` +\n        `methods may not be called for unknown rows; the framework handler ` +\n        `should always findDelivery first or operate on a row it just ` +\n        `inserted).`,\n    );\n  }\n}\n","/**\n * Typed errors for the bridge subsystem (ADR-023 Phase 2, BRIDGE-2).\n *\n * All thrown by the three enforcement sites named in ADR-023 §Multi-tenancy:\n *   - `EventFlowService.publishAndStart` entry (BRIDGE-7)\n *   - `BridgeDeliveryHandler.handle` entry (BRIDGE-5)\n *   - `DrizzleBridgeDeliveryRepo.insertDelivery` pre-write (BRIDGE-4)\n *\n * Same shape as `runtime/subsystems/jobs/jobs-errors.ts` and\n * `runtime/subsystems/events/events-errors.ts` so consumers can catch them\n * with the same exception-filter pattern across all three subsystems.\n */\n\n/**\n * Thrown when `BridgeModule` was configured with `multiTenant: true` but\n * the caller did not pass a `tenantId` at one of the three enforcement\n * sites listed above.\n *\n * **Strict enforcement rationale (mirrors JOB-8 / SYNC-6 stance, locked\n * 2026-04-18 for jobs; same rationale applies here).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship;\n * surfacing the misuse loudly at the call site (rather than silently\n * defaulting to `null` or to \"the last tenant seen\") prevents both\n * accidental global writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   work (e.g. a system housekeeping event with no owning tenant). The\n *   `bridge_delivery` row is persisted with `tenant_id = NULL`.\n *\n * The `callSite` constructor argument names which of the three enforcement\n * sites threw — review reports and ops dashboards rely on a stable site\n * name, so use the canonical strings: `'EventFlowService.publishAndStart'`,\n * `'BridgeDeliveryHandler.handle'`,\n * `'DrizzleBridgeDeliveryRepo.insertDelivery'`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly callSite: string) {\n    super(\n      `MissingTenantIdError: BridgeModule was configured with ` +\n        `multiTenant=true but ${callSite} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Synthetic error thrown by `MemoryBridgeDeliveryRepo.insertDelivery` when\n * a duplicate `(event_id, trigger_id)` insert hits the simulated UNIQUE\n * constraint (BRIDGE-3).\n *\n * Carries a `constraint` field equal to the Drizzle constraint name\n * declared in BRIDGE-1's schema (`uq_bridge_delivery_event_trigger`) so\n * call sites can branch on the same discriminator regardless of which\n * backend is wired up. This matters because ADR-023 explicitly leans on\n * the constraint as the dedup mechanism in two places — outbox replay\n * and `publishAndStart` Case B — and BRIDGE-4 / BRIDGE-7 will share a\n * type-check path with BRIDGE-3-driven tests.\n *\n * The Drizzle backend (BRIDGE-4) does NOT throw this error: it uses\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING RETURNING id`\n * per the BRIDGE-4 spec recommendation, so collisions surface as an empty\n * result set rather than an exception. The error exists so the memory\n * backend can faithfully model the \"duplicate raises\" behaviour for tests\n * that want to assert the constraint actually fires.\n */\n/**\n * Thrown by `BridgeModule.onModuleInit` when `JobWorkerModule` is wired\n * alongside the bridge but its active `pools` list does not include one\n * or more of the three reserved bridge pools (`events_inbound`,\n * `events_change`, `events_outbound`).\n *\n * Without a worker polling those pools, the wrapper `job_run` rows the\n * outbox drain inserts (BRIDGE-4) sit `pending` forever — a silent\n * footgun where `eventFlow.publish(...)` returns success but no user\n * job ever spawns. The boot-time check converts that into a fail-fast.\n *\n * Operators can either (a) add `...BRIDGE_RESERVED_POOLS` to their\n * `JobWorkerModule.forRoot({ pools })` configuration so the same\n * process polls the reserved pools, or (b) run a separate worker\n * process per reserved pool for lane isolation (ADR-022 §Pool\n * isolation).\n */\nexport class BridgeReservedPoolsNotPolledError extends Error {\n  override readonly name = 'BridgeReservedPoolsNotPolledError';\n  constructor(public readonly missingPools: readonly string[]) {\n    super(\n      `BridgeModule loaded but JobWorkerModule is not polling reserved ` +\n        `pool '${missingPools[0]}'. Add ...BRIDGE_RESERVED_POOLS to your ` +\n        `JobWorkerModule.forRoot({ pools }) configuration. Missing pools: ` +\n        `${missingPools.join(', ')}. (Bridge-fanout wrappers will sit ` +\n        `pending forever without these pollers.)`,\n    );\n  }\n}\n\nexport class UniqueConstraintError extends Error {\n  override readonly name = 'UniqueConstraintError';\n  constructor(\n    public readonly constraint: string,\n    public readonly eventId: string,\n    public readonly triggerId: string,\n  ) {\n    super(\n      `UniqueConstraintError: duplicate insert into bridge_delivery for ` +\n        `(event_id='${eventId}', trigger_id='${triggerId}') — violates ` +\n        `constraint '${constraint}'.`,\n    );\n  }\n}\n"],"mappings":";AAuBA,SAAS,kBAAkB;;;AC2EpB,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAE/C,YACkB,YACA,SACA,WAChB;AACA;AAAA,MACE,+EACgB,OAAO,kBAAkB,SAAS,kCACjC,UAAU;AAAA,IAC7B;AARgB;AACA;AACA;AAAA,EAOlB;AAAA,EATkB;AAAA,EACA;AAAA,EACA;AAAA,EAJA,OAAO;AAY3B;;;AD9EA,IAAM,oCACJ;AAEF,SAAS,IAAI,SAAiB,WAA2B;AACvD,SAAO,GAAG,OAAO,KAAK,SAAS;AACjC;AAEO,IAAM,2BAAN,MAAqD;AAAA,EACzC,aAAa,oBAAI,IAAkC;AAAA,EAEpE,MAAM,eAAe,KAA0C;AAC7D,UAAM,IAAI,IAAI,IAAI,SAAS,IAAI,SAAS;AACxC,QAAI,KAAK,WAAW,IAAI,CAAC,GAAG;AAC1B,YAAM,IAAI;AAAA,QACR;AAAA,QACA,IAAI;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,IACF;AAGA,UAAM,SAA+B;AAAA,MACnC,IAAI,IAAI,MAAM,WAAW;AAAA,MACzB,SAAS,IAAI;AAAA,MACb,WAAW,IAAI;AAAA,MACf,cAAc,IAAI,gBAAgB;AAAA,MAClC,WAAW,IAAI,aAAa;AAAA,MAC5B,QAAQ,IAAI,UAAU;AAAA,MACtB,YAAY,IAAI,cAAc;AAAA,MAC9B,OAAQ,IAAI,SAAwD;AAAA,MACpE,UAAU,IAAI,YAAY;AAAA,MAC1B,aACE,IAAI,uBAAuB,OAAO,IAAI,cAAc,oBAAI,KAAK;AAAA,MAC/D,aACE,IAAI,uBAAuB,OAAO,IAAI,cAAc;AAAA,IACxD;AACA,SAAK,WAAW,IAAI,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,MAAM,aACJ,SACA,WACsC;AACtC,WAAO,KAAK,WAAW,IAAI,IAAI,SAAS,SAAS,CAAC,KAAK;AAAA,EACzD;AAAA,EAEA,MAAM,iBAAiB,IAAkD;AACvE,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,OAAO,GAAI,QAAO;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,IAAY,WAAkC;AAChE,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,YAAY;AACnB,WAAO,cAAc,oBAAI,KAAK;AAAA,EAChC;AAAA,EAEA,MAAM,YAAY,IAAY,QAA+B;AAC3D,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,WACJ,IACA,OACe;AACf,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,QAAQ;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,mBACJ,aACA,UAOA,QAAgB,KAAK,IAAI,GACC;AAC1B,QAAI,CAAC,OAAO,SAAS,WAAW,KAAK,eAAe,GAAG;AACrD,YAAM,IAAI,WAAW,8BAA8B;AAAA,IACrD;AAEA,UAAM,WAAW,QAAQ,cAAc;AACvC,UAAM,YAA6B;AAAA,MACjC,SAAS;AAAA,MACT,WAAW;AAAA,MACX,SAAS;AAAA,MACT,QAAQ;AAAA,IACV;AAEA,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,YAAY,QAAQ,IAAI,SAAU;AAC7C,UAAI,aAAa,QAAQ,OAAO,aAAa,KAAM;AACnD,UAAI,OAAO,aAAa,YAAY,OAAO,aAAa,UAAU;AAChE;AAAA,MACF;AAEA,gBAAU,OAAO,MAAM,KAAK;AAAA,IAC9B;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAKA,sBAAsB,SAAyC;AAC7D,WAAO,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,OAAO;AAAA,EAC1E;AAAA;AAAA,EAGA,YACE,QACwB;AACxB,WAAO,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM;AAAA,EACxE;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,WAAW,MAAM;AAAA,EACxB;AAAA;AAAA,EAIQ,SAAS,IAAkC;AACjD,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,OAAO,GAAI,QAAO;AAAA,IAC/B;AACA,UAAM,IAAI;AAAA,MACR,kDAAkD,EAAE;AAAA,IAItD;AAAA,EACF;AACF;","names":[]}

package/dist/runtime/subsystems/bridge/bridge.module.js

@@ -12,19 +12,20 @@ var __decorateParam = (index4, decorator) => (target, key2) => decorator(target,
 
 // runtime/subsystems/bridge/bridge.module.ts
 import {
-  Inject as Inject12,
+  Inject as Inject13,
   Module as Module3,
   Optional as Optional7
 } from "@nestjs/common";
 
 // runtime/subsystems/jobs/job-worker.module.ts
 import {
-  Inject as Inject7,
+  Inject as Inject8,
   Injectable as Injectable8,
   Logger as Logger4,
   Module as Module2,
   Optional as Optional2
 } from "@nestjs/common";
+import { ModuleRef as ModuleRef2 } from "@nestjs/core";
 
 // runtime/subsystems/token-key.ts
 var PKG = "@pattern-stack/codegen";
@@ -916,8 +917,129 @@ DrizzleJobStepService = __decorateClass([
 ], DrizzleJobStepService);
 
 // runtime/subsystems/jobs/job-orchestrator.memory-backend.ts
+import { randomUUID as randomUUID3 } from "crypto";
+import { Inject as Inject5, Injectable as Injectable5, Logger as Logger2, Optional } from "@nestjs/common";
+import { ModuleRef } from "@nestjs/core";
+
+// runtime/subsystems/jobs/memory-job-store.ts
+var MemoryJobStore = class {
+  /** Runs keyed by `id` (single source of truth for status/scope/lineage). */
+  runs = /* @__PURE__ */ new Map();
+  /** Steps keyed by `job_run_id`; array order matches insertion order. */
+  steps = /* @__PURE__ */ new Map();
+  /** Job definitions keyed by `type` — memory mirror of the `job` table. */
+  jobs = /* @__PURE__ */ new Map();
+  /** Reset everything. Tests call this in `beforeEach`. */
+  clear() {
+    this.runs.clear();
+    this.steps.clear();
+    this.jobs.clear();
+  }
+};
+
+// runtime/subsystems/jobs/job-step-service.memory-backend.ts
 import { randomUUID as randomUUID2 } from "crypto";
-import { Inject as Inject4, Injectable as Injectable4, Logger as Logger2, Optional } from "@nestjs/common";
+import { Inject as Inject4, Injectable as Injectable4 } from "@nestjs/common";
+var MemoryJobStepService = class {
+  // ADR-037 (package-mode DI): explicit `@Inject(MemoryJobStore)` — the
+  // published bundle carries no `design:paramtypes`, so a by-type inject
+  // would resolve to `undefined` in package mode.
+  constructor(store) {
+    this.store = store;
+  }
+  store;
+  async findStep(runId, stepId) {
+    const rows = this.store.steps.get(runId);
+    if (!rows) return null;
+    const match = rows.find(
+      (r) => r.stepId === stepId && r.status === "completed"
+    );
+    return match ?? null;
+  }
+  async recordStep(input) {
+    const rows = this.getOrCreateRows(input.jobRunId);
+    const existingIdx = rows.findIndex((r) => r.stepId === input.stepId);
+    const normalisedInput = input.input ?? null;
+    const normalisedOutput = input.output ?? null;
+    if (existingIdx >= 0) {
+      const prev = rows[existingIdx];
+      const next = {
+        ...prev,
+        status: input.status,
+        input: normalisedInput ?? prev.input,
+        output: normalisedOutput ?? prev.output,
+        error: input.error ?? prev.error,
+        attempts: input.attempts ?? prev.attempts,
+        startedAt: input.startedAt ?? prev.startedAt,
+        finishedAt: input.finishedAt ?? prev.finishedAt
+      };
+      rows[existingIdx] = next;
+      return next;
+    }
+    const seq = input.seq ?? this.nextSeq(rows);
+    const row = {
+      id: randomUUID2(),
+      jobRunId: input.jobRunId,
+      stepId: input.stepId,
+      kind: input.kind,
+      seq,
+      status: input.status,
+      input: normalisedInput,
+      output: normalisedOutput,
+      error: input.error ?? null,
+      attempts: input.attempts ?? 0,
+      startedAt: input.startedAt ?? null,
+      finishedAt: input.finishedAt ?? null
+    };
+    rows.push(row);
+    return row;
+  }
+  /**
+   * Replay helper — wipe every step row for a run. Mirrors the `scratch`
+   * replay mode of the Drizzle backend (`DELETE FROM job_step WHERE job_run_id = …`).
+   */
+  clearStepsForRun(runId) {
+    this.store.steps.delete(runId);
+  }
+  /**
+   * Remove every non-`completed` row for the run. Memoized (`completed`)
+   * rows are preserved — this is the `last_checkpoint` / `last_step`
+   * semantics the Drizzle backend implements via
+   * `DELETE … WHERE status != 'completed'`. Both replay modes route here
+   * (Phase 1 collapses `last_step` onto this behaviour; see JOB-3 notes).
+   */
+  clearIncompleteSteps(runId) {
+    const rows = this.store.steps.get(runId);
+    if (!rows) return;
+    const kept = rows.filter((r) => r.status === "completed");
+    if (kept.length === 0) {
+      this.store.steps.delete(runId);
+    } else {
+      this.store.steps.set(runId, kept);
+    }
+  }
+  getOrCreateRows(runId) {
+    let rows = this.store.steps.get(runId);
+    if (!rows) {
+      rows = [];
+      this.store.steps.set(runId, rows);
+    }
+    return rows;
+  }
+  nextSeq(rows) {
+    let max = 0;
+    for (const r of rows) {
+      if (r.seq > max) max = r.seq;
+    }
+    return max + 1;
+  }
+};
+MemoryJobStepService = __decorateClass([
+  Injectable4(),
+  __decorateParam(0, Inject4(MemoryJobStore))
+], MemoryJobStepService);
+
+// runtime/subsystems/jobs/job-orchestrator.memory-backend.ts
 var QUEUED_RUN_AT = /* @__PURE__ */ new Date(864e13);
 var TERMINAL_STATUSES2 = [
   "completed",
@@ -1088,7 +1210,7 @@ var MemoryJobOrchestrator = class {
           }
         }
       }
-      const newId = randomUUID2();
+      const newId = randomUUID3();
       let rootRunId = newId;
       if (opts.parentRunId) {
         const parent = this.store.runs.get(opts.parentRunId);
@@ -1486,9 +1608,12 @@ var MemoryJobOrchestrator = class {
   }
 };
 MemoryJobOrchestrator = __decorateClass([
-  Injectable4(),
-  __decorateParam(2, Inject4(JOBS_MULTI_TENANT)),
-  __decorateParam(3, Optional())
+  Injectable5(),
+  __decorateParam(0, Inject5(MemoryJobStore)),
+  __decorateParam(1, Inject5(MemoryJobStepService)),
+  __decorateParam(2, Inject5(JOBS_MULTI_TENANT)),
+  __decorateParam(3, Optional()),
+  __decorateParam(3, Inject5(ModuleRef))
 ], MemoryJobOrchestrator);
 function classifyError(err, policy, currentAttempts) {
   if (!policy) return "fail";
@@ -1522,7 +1647,7 @@ function serialiseError(err, attempt, retryable) {
 }
 
 // runtime/subsystems/jobs/job-run-service.memory-backend.ts
-import { Inject as Inject5, Injectable as Injectable5 } from "@nestjs/common";
+import { Inject as Inject6, Injectable as Injectable6 } from "@nestjs/common";
 var NON_TERMINAL_STATUSES2 = [
   "pending",
   "running",
@@ -1689,9 +1814,10 @@ var MemoryJobRunService = class {
   }
 };
 MemoryJobRunService = __decorateClass([
-  Injectable5(),
-  __decorateParam(1, Inject5(JOB_ORCHESTRATOR)),
-  __decorateParam(2, Inject5(JOBS_MULTI_TENANT))
+  Injectable6(),
+  __decorateParam(0, Inject6(MemoryJobStore)),
+  __decorateParam(1, Inject6(JOB_ORCHESTRATOR)),
+  __decorateParam(2, Inject6(JOBS_MULTI_TENANT))
 ], MemoryJobRunService);
 function compareBy(a, b, order) {
   switch (order) {
@@ -1707,120 +1833,6 @@ function compareBy(a, b, order) {
   }
 }
 
-// runtime/subsystems/jobs/job-step-service.memory-backend.ts
-import { randomUUID as randomUUID3 } from "crypto";
-import { Injectable as Injectable6 } from "@nestjs/common";
-var MemoryJobStepService = class {
-  constructor(store) {
-    this.store = store;
-  }
-  store;
-  async findStep(runId, stepId) {
-    const rows = this.store.steps.get(runId);
-    if (!rows) return null;
-    const match = rows.find(
-      (r) => r.stepId === stepId && r.status === "completed"
-    );
-    return match ?? null;
-  }
-  async recordStep(input) {
-    const rows = this.getOrCreateRows(input.jobRunId);
-    const existingIdx = rows.findIndex((r) => r.stepId === input.stepId);
-    const normalisedInput = input.input ?? null;
-    const normalisedOutput = input.output ?? null;
-    if (existingIdx >= 0) {
-      const prev = rows[existingIdx];
-      const next = {
-        ...prev,
-        status: input.status,
-        input: normalisedInput ?? prev.input,
-        output: normalisedOutput ?? prev.output,
-        error: input.error ?? prev.error,
-        attempts: input.attempts ?? prev.attempts,
-        startedAt: input.startedAt ?? prev.startedAt,
-        finishedAt: input.finishedAt ?? prev.finishedAt
-      };
-      rows[existingIdx] = next;
-      return next;
-    }
-    const seq = input.seq ?? this.nextSeq(rows);
-    const row = {
-      id: randomUUID3(),
-      jobRunId: input.jobRunId,
-      stepId: input.stepId,
-      kind: input.kind,
-      seq,
-      status: input.status,
-      input: normalisedInput,
-      output: normalisedOutput,
-      error: input.error ?? null,
-      attempts: input.attempts ?? 0,
-      startedAt: input.startedAt ?? null,
-      finishedAt: input.finishedAt ?? null
-    };
-    rows.push(row);
-    return row;
-  }
-  /**
-   * Replay helper — wipe every step row for a run. Mirrors the `scratch`
-   * replay mode of the Drizzle backend (`DELETE FROM job_step WHERE job_run_id = …`).
-   */
-  clearStepsForRun(runId) {
-    this.store.steps.delete(runId);
-  }
-  /**
-   * Remove every non-`completed` row for the run. Memoized (`completed`)
-   * rows are preserved — this is the `last_checkpoint` / `last_step`
-   * semantics the Drizzle backend implements via
-   * `DELETE … WHERE status != 'completed'`. Both replay modes route here
-   * (Phase 1 collapses `last_step` onto this behaviour; see JOB-3 notes).
-   */
-  clearIncompleteSteps(runId) {
-    const rows = this.store.steps.get(runId);
-    if (!rows) return;
-    const kept = rows.filter((r) => r.status === "completed");
-    if (kept.length === 0) {
-      this.store.steps.delete(runId);
-    } else {
-      this.store.steps.set(runId, kept);
-    }
-  }
-  getOrCreateRows(runId) {
-    let rows = this.store.steps.get(runId);
-    if (!rows) {
-      rows = [];
-      this.store.steps.set(runId, rows);
-    }
-    return rows;
-  }
-  nextSeq(rows) {
-    let max = 0;
-    for (const r of rows) {
-      if (r.seq > max) max = r.seq;
-    }
-    return max + 1;
-  }
-};
-MemoryJobStepService = __decorateClass([
-  Injectable6()
-], MemoryJobStepService);
-
-// runtime/subsystems/jobs/memory-job-store.ts
-var MemoryJobStore = class {
-  /** Runs keyed by `id` (single source of truth for status/scope/lineage). */
-  runs = /* @__PURE__ */ new Map();
-  /** Steps keyed by `job_run_id`; array order matches insertion order. */
-  steps = /* @__PURE__ */ new Map();
-  /** Job definitions keyed by `type` — memory mirror of the `job` table. */
-  jobs = /* @__PURE__ */ new Map();
-  /** Reset everything. Tests call this in `beforeEach`. */
-  clear() {
-    this.runs.clear();
-    this.steps.clear();
-    this.jobs.clear();
-  }
-};
-
 // runtime/subsystems/jobs/pool-config.loader.ts
 import { existsSync, readFileSync } from "fs";
 import { resolve } from "path";
@@ -2036,7 +2048,7 @@ JobsDomainModule = __decorateClass([
 ], JobsDomainModule);
 
 // runtime/subsystems/jobs/job-worker.ts
-import { Inject as Inject6, Injectable as Injectable7, Logger as Logger3 } from "@nestjs/common";
+import { Inject as Inject7, Injectable as Injectable7, Logger as Logger3 } from "@nestjs/common";
 import { and as and4, asc as asc2, desc as desc3, eq as eq4, inArray as inArray3, lt as lt2, lte, sql as sql4 } from "drizzle-orm";
 var JOB_WORKER_OPTIONS = Symbol.for(tokenKey("jobs", "worker-options"));
 var DEFAULT_POLL_INTERVAL_MS = 1e3;
@@ -2423,11 +2435,11 @@ var JobWorker = class {
 };
 JobWorker = __decorateClass([
   Injectable7(),
-  __decorateParam(0, Inject6(DRIZZLE)),
-  __decorateParam(1, Inject6(JOB_ORCHESTRATOR)),
-  __decorateParam(2, Inject6(JOB_RUN_SERVICE)),
-  __decorateParam(3, Inject6(JOB_STEP_SERVICE)),
-  __decorateParam(4, Inject6(JOB_WORKER_OPTIONS))
+  __decorateParam(0, Inject7(DRIZZLE)),
+  __decorateParam(1, Inject7(JOB_ORCHESTRATOR)),
+  __decorateParam(2, Inject7(JOB_RUN_SERVICE)),
+  __decorateParam(3, Inject7(JOB_STEP_SERVICE)),
+  __decorateParam(4, Inject7(JOB_WORKER_OPTIONS))
 ], JobWorker);
 
 // runtime/subsystems/jobs/job-worker.module.ts
@@ -2625,16 +2637,17 @@ var JobWorkerOrchestrator = class {
 };
 JobWorkerOrchestrator = __decorateClass([
   Injectable8(),
-  __decorateParam(0, Inject7(JOB_ORCHESTRATOR)),
-  __decorateParam(1, Inject7(JOB_RUN_SERVICE)),
-  __decorateParam(2, Inject7(JOB_STEP_SERVICE)),
-  __decorateParam(3, Inject7(JOB_WORKER_MODULE_OPTIONS)),
+  __decorateParam(0, Inject8(JOB_ORCHESTRATOR)),
+  __decorateParam(1, Inject8(JOB_RUN_SERVICE)),
+  __decorateParam(2, Inject8(JOB_STEP_SERVICE)),
+  __decorateParam(3, Inject8(JOB_WORKER_MODULE_OPTIONS)),
   __decorateParam(4, Optional2()),
-  __decorateParam(4, Inject7(DRIZZLE)),
+  __decorateParam(4, Inject8(DRIZZLE)),
+  __decorateParam(5, Inject8(ModuleRef2)),
   __decorateParam(6, Optional2()),
-  __decorateParam(6, Inject7(BULLMQ_CONNECTION)),
+  __decorateParam(6, Inject8(BULLMQ_CONNECTION)),
   __decorateParam(7, Optional2()),
-  __decorateParam(7, Inject7(BULLMQ_RESOLVED_CONFIG))
+  __decorateParam(7, Inject8(BULLMQ_RESOLVED_CONFIG))
 ], JobWorkerOrchestrator);
 var JobWorkerModule = class {
   static forRoot(opts) {
@@ -2774,11 +2787,11 @@ var MemoryBridgeDeliveryRepo = class {
    * Unlike `insertDelivery`, this read does NOT call `assertTenantId`:
    * `tenantId === undefined` is the supported cross-tenant admin view.
    */
-  async getStatusHistogram(windowHours, tenantId) {
+  async getStatusHistogram(windowHours, tenantId, nowMs = Date.now()) {
     if (!Number.isFinite(windowHours) || windowHours <= 0) {
       throw new RangeError("windowHours must be positive");
     }
-    const cutoffMs = Date.now() - windowHours * 36e5;
+    const cutoffMs = nowMs - windowHours * 36e5;
     const histogram = {
       pending: 0,
       delivered: 0,
@@ -2820,7 +2833,7 @@ var MemoryBridgeDeliveryRepo = class {
 };
 
 // runtime/subsystems/bridge/bridge-delivery.drizzle-backend.ts
-import { Inject as Inject8, Injectable as Injectable9, Optional as Optional3 } from "@nestjs/common";
+import { Inject as Inject9, Injectable as Injectable9, Optional as Optional3 } from "@nestjs/common";
 import { eq as eq5, and as and5, gte as gte2, isNull as isNull2, sql as sql7 } from "drizzle-orm";
 
 // runtime/subsystems/bridge/bridge-delivery.schema.ts
@@ -3080,17 +3093,17 @@ var DrizzleBridgeDeliveryRepo = class {
 };
 DrizzleBridgeDeliveryRepo = __decorateClass([
   Injectable9(),
-  __decorateParam(0, Inject8(DRIZZLE)),
+  __decorateParam(0, Inject9(DRIZZLE)),
   __decorateParam(1, Optional3()),
-  __decorateParam(1, Inject8(BRIDGE_MULTI_TENANT))
+  __decorateParam(1, Inject9(BRIDGE_MULTI_TENANT))
 ], DrizzleBridgeDeliveryRepo);
 
 // runtime/subsystems/bridge/bridge-outbox-drain-hook.ts
-import { Inject as Inject10, Injectable as Injectable11, Logger as Logger6, Optional as Optional5 } from "@nestjs/common";
+import { Inject as Inject11, Injectable as Injectable11, Logger as Logger6, Optional as Optional5 } from "@nestjs/common";
 import { randomUUID as randomUUID5 } from "crypto";
 
 // runtime/subsystems/bridge/bridge-delivery-handler.ts
-import { Inject as Inject9, Injectable as Injectable10, Logger as Logger5, Optional as Optional4 } from "@nestjs/common";
+import { Inject as Inject10, Injectable as Injectable10, Logger as Logger5, Optional as Optional4 } from "@nestjs/common";
 
 // runtime/subsystems/events/events.tokens.ts
 var EVENT_BUS = "EVENT_BUS";
@@ -3180,12 +3193,12 @@ BridgeDeliveryHandler = __decorateClass([
     retry: { attempts: 3, backoff: "exponential", baseMs: 250 },
     replayFrom: "last_step"
   }),
-  __decorateParam(0, Inject9(BRIDGE_DELIVERY_REPO)),
-  __decorateParam(1, Inject9(JOB_ORCHESTRATOR)),
-  __decorateParam(2, Inject9(EVENT_BUS)),
-  __decorateParam(3, Inject9(BRIDGE_REGISTRY)),
+  __decorateParam(0, Inject10(BRIDGE_DELIVERY_REPO)),
+  __decorateParam(1, Inject10(JOB_ORCHESTRATOR)),
+  __decorateParam(2, Inject10(EVENT_BUS)),
+  __decorateParam(3, Inject10(BRIDGE_REGISTRY)),
   __decorateParam(4, Optional4()),
-  __decorateParam(4, Inject9(BRIDGE_MULTI_TENANT))
+  __decorateParam(4, Inject10(BRIDGE_MULTI_TENANT))
 ], BridgeDeliveryHandler);
 
 // runtime/subsystems/bridge/bridge-outbox-drain-hook.ts
@@ -3294,11 +3307,11 @@ var BridgeOutboxDrainHook = class {
 BridgeOutboxDrainHook = __decorateClass([
   Injectable11(),
   __decorateParam(0, Optional5()),
-  __decorateParam(0, Inject10(BRIDGE_REGISTRY))
+  __decorateParam(0, Inject11(BRIDGE_REGISTRY))
 ], BridgeOutboxDrainHook);
 
 // runtime/subsystems/bridge/event-flow.service.ts
-import { Inject as Inject11, Injectable as Injectable12, Optional as Optional6 } from "@nestjs/common";
+import { Inject as Inject12, Injectable as Injectable12, Optional as Optional6 } from "@nestjs/common";
 var EventFlowService = class {
   constructor(db, eventBus, orchestrator, bridgeRepo, registry = {}, multiTenant = false) {
     this.db = db;
@@ -3370,14 +3383,14 @@ var EventFlowService = class {
 };
 EventFlowService = __decorateClass([
   Injectable12(),
-  __decorateParam(0, Inject11(DRIZZLE)),
-  __decorateParam(1, Inject11(EVENT_BUS)),
-  __decorateParam(2, Inject11(JOB_ORCHESTRATOR)),
-  __decorateParam(3, Inject11(BRIDGE_DELIVERY_REPO)),
+  __decorateParam(0, Inject12(DRIZZLE)),
+  __decorateParam(1, Inject12(EVENT_BUS)),
+  __decorateParam(2, Inject12(JOB_ORCHESTRATOR)),
+  __decorateParam(3, Inject12(BRIDGE_DELIVERY_REPO)),
   __decorateParam(4, Optional6()),
-  __decorateParam(4, Inject11(BRIDGE_REGISTRY)),
+  __decorateParam(4, Inject12(BRIDGE_REGISTRY)),
   __decorateParam(5, Optional6()),
-  __decorateParam(5, Inject11(BRIDGE_MULTI_TENANT))
+  __decorateParam(5, Inject12(BRIDGE_MULTI_TENANT))
 ], EventFlowService);
 
 // runtime/subsystems/bridge/generated/registry.ts
@@ -3456,7 +3469,7 @@ var BridgeModule = class {
 BridgeModule = __decorateClass([
   Module3({}),
   __decorateParam(0, Optional7()),
-  __decorateParam(0, Inject12(JOB_WORKER_MODULE_OPTIONS))
+  __decorateParam(0, Inject13(JOB_WORKER_MODULE_OPTIONS))
 ], BridgeModule);
 export {
   BridgeModule