@pattern-stack/codegen 0.15.0 → 0.15.2

package/dist/chunk-T4BIIU5E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/jobs/jobs-errors.ts"],"sourcesContent":["/**\n * Typed errors for the job orchestration domain (ADR-022, JOB-3).\n *\n * All thrown by the Drizzle orchestrator (and mirrored by the Memory\n * backend in JOB-4). They exist as classes so consumers can `instanceof`\n * them in catch blocks and exception filters can map them to HTTP codes.\n */\nimport type { JobRun } from './job-orchestrator.protocol';\n\n/**\n * `start(type, …)` was called for a job type that has no row in the `job`\n * table. At runtime this usually means the handler was not decorated or the\n * boot validator (JOB-5) has not registered it yet.\n */\nexport class JobTypeNotFoundError extends Error {\n  override readonly name = 'JobTypeNotFoundError';\n  constructor(public readonly jobType: string) {\n    super(`No job definition registered for type '${jobType}'.`);\n  }\n}\n\n/**\n * Thrown by `start` when `collision_mode === 'reject'` and a non-terminal\n * run with the same `concurrency_key` already exists. Carries the incumbent\n * so callers can surface its id or subscribe to its completion event.\n */\nexport class JobCollisionError extends Error {\n  override readonly name = 'JobCollisionError';\n  constructor(\n    public readonly jobType: string,\n    public readonly concurrencyKey: string,\n    public readonly incumbent: JobRun,\n  ) {\n    super(\n      `Job type '${jobType}' has an in-flight run with concurrency_key ` +\n        `'${concurrencyKey}' (incumbent ${incumbent.id}); collision_mode=reject.`,\n    );\n  }\n}\n\n/**\n * `replay` was called on a run that is not in a replayable terminal state\n * (i.e. still `pending` / `running` / `waiting`). Replay always spawns\n * fresh execution and therefore requires the source run to be settled.\n */\nexport class JobNotReplayableError extends Error {\n  override readonly name = 'JobNotReplayableError';\n  constructor(\n    public readonly runId: string,\n    public readonly currentStatus: string,\n  ) {\n    super(\n      `Run ${runId} is not replayable from status '${currentStatus}'. ` +\n        `Only 'completed', 'failed', 'timed_out', and 'canceled' are eligible.`,\n    );\n  }\n}\n\n/**\n * A `concurrency_key_template` or `dedupe_key_template` referenced a field\n * that is not present on the input payload. Caught at `start` time so the\n * caller sees the misconfiguration synchronously rather than at claim time.\n */\nexport class JobTemplateFieldMissingError extends Error {\n  override readonly name = 'JobTemplateFieldMissingError';\n  constructor(\n    public readonly template: string,\n    public readonly field: string,\n  ) {\n    super(\n      `Template '${template}' references input field '${field}' which is ` +\n        `missing or undefined on the payload.`,\n    );\n  }\n}\n\n/**\n * Thrown by the four multi-tenant-aware service-layer backends (JOB-8)\n * when `JobsDomainModule` was configured with `multiTenant: true` but the\n * caller did not pass a `tenantId` in the relevant options object.\n *\n * **Strict enforcement rationale (resolved 2026-04-18).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship; surfacing\n * the misuse loudly at the call site (rather than silently defaulting to\n * `null` or to the \"last tenant seen\") prevents both accidental global\n * writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   background work (e.g. a nightly housekeeping job that must scan all\n *   tenants). The row is persisted with `tenant_id = NULL`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly method: string) {\n    super(\n      `MissingTenantIdError: JobsDomainModule was configured with ` +\n        `multiTenant=true but ${method} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Thrown by `JobWorkerModule.onModuleInit` (Drizzle backend only) when the\n * `job` table contains type rows for which no `@JobHandler` is registered\n * in the running process. Surfaces every orphaned type at once so a single\n * boot tells the operator everything to clean up.\n *\n * Skipped entirely in memory mode (Q4 resolution 2026-04-19) — the memory\n * backend has no DB rows to validate; `MemoryJobOrchestrator.start()`\n * throws `JobTypeNotFoundError` synchronously for unknown types instead.\n */\nexport class BootValidationError extends Error {\n  override readonly name = 'BootValidationError';\n  constructor(public readonly missingHandlers: string[]) {\n    super(\n      `BootValidationError: ${missingHandlers.length} orphaned job type(s) ` +\n        `in 'job' table with no matching @JobHandler in the running process: ` +\n        `[${missingHandlers.join(', ')}]. Either register the handler(s) or ` +\n        `remove the rows.`,\n    );\n  }\n}\n\n/**\n * Thrown by `JobWorkerModule.onModuleInit` when one or more `@JobHandler`\n * classes target a `reserved: true` pool from the resolved pool config\n * (the three `events_*` pools are reserved for the events subsystem\n * outbox drain). Listing every offender on a single boot avoids the\n * fix-one-restart-fix-next loop.\n */\nexport class ReservedPoolViolationError extends Error {\n  override readonly name = 'ReservedPoolViolationError';\n  constructor(\n    public readonly offenders: ReadonlyArray<{\n      handlerClass: string;\n      pool: string;\n    }>,\n  ) {\n    super(\n      `ReservedPoolViolationError: ${offenders.length} @JobHandler(s) target ` +\n        `reserved pools — reserved pools are framework-only:\\n` +\n        offenders\n          .map((o) => `  - ${o.handlerClass} → pool='${o.pool}'`)\n          .join('\\n'),\n    );\n  }\n}\n"],"mappings":";AAcO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,SAAiB;AAC3C,UAAM,0CAA0C,OAAO,IAAI;AADjC;AAAA,EAE5B;AAAA,EAF4B;AAAA,EADV,OAAO;AAI3B;AAOO,IAAM,oBAAN,cAAgC,MAAM;AAAA,EAE3C,YACkB,SACA,gBACA,WAChB;AACA;AAAA,MACE,aAAa,OAAO,gDACd,cAAc,gBAAgB,UAAU,EAAE;AAAA,IAClD;AAPgB;AACA;AACA;AAAA,EAMlB;AAAA,EARkB;AAAA,EACA;AAAA,EACA;AAAA,EAJA,OAAO;AAW3B;AAOO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAE/C,YACkB,OACA,eAChB;AACA;AAAA,MACE,OAAO,KAAK,mCAAmC,aAAa;AAAA,IAE9D;AANgB;AACA;AAAA,EAMlB;AAAA,EAPkB;AAAA,EACA;AAAA,EAHA,OAAO;AAU3B;AAOO,IAAM,+BAAN,cAA2C,MAAM;AAAA,EAEtD,YACkB,UACA,OAChB;AACA;AAAA,MACE,aAAa,QAAQ,6BAA6B,KAAK;AAAA,IAEzD;AANgB;AACA;AAAA,EAMlB;AAAA,EAPkB;AAAA,EACA;AAAA,EAHA,OAAO;AAU3B;AAkBO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,QAAgB;AAC1C;AAAA,MACE,mFAC0B,MAAM;AAAA,IAGlC;AAN0B;AAAA,EAO5B;AAAA,EAP4B;AAAA,EADV,OAAO;AAS3B;AAYO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAE7C,YAA4B,iBAA2B;AACrD;AAAA,MACE,wBAAwB,gBAAgB,MAAM,8FAExC,gBAAgB,KAAK,IAAI,CAAC;AAAA,IAElC;AAN0B;AAAA,EAO5B;AAAA,EAP4B;AAAA,EADV,OAAO;AAS3B;AASO,IAAM,6BAAN,cAAyC,MAAM;AAAA,EAEpD,YACkB,WAIhB;AACA;AAAA,MACE,+BAA+B,UAAU,MAAM;AAAA,IAE7C,UACG,IAAI,CAAC,MAAM,OAAO,EAAE,YAAY,iBAAY,EAAE,IAAI,GAAG,EACrD,KAAK,IAAI;AAAA,IAChB;AAXgB;AAAA,EAYlB;AAAA,EAZkB;AAAA,EAFA,OAAO;AAe3B;","names":[]}

package/dist/chunk-T6C4LFLC.js

@@ -0,0 +1,112 @@
+import {
+  cacheEntries
+} from "./chunk-FASRXRX5.js";
+import {
+  CACHE_DEFAULT_TTL
+} from "./chunk-L6FTY45T.js";
+import {
+  DRIZZLE
+} from "./chunk-U64T4YZE.js";
+import {
+  __decorateClass,
+  __decorateParam
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/cache/cache.drizzle-backend.ts
+import { Injectable, Inject, Optional } from "@nestjs/common";
+import { gt, or, like, sql, eq } from "drizzle-orm";
+var CLEANUP_INTERVAL_MS = 5 * 60 * 1e3;
+var DrizzleCacheService = class {
+  constructor(db, defaultTtl = null) {
+    this.db = db;
+    this.defaultTtl = defaultTtl;
+  }
+  db;
+  defaultTtl;
+  cleanupTimer = null;
+  /** In-flight getOrSet promises — keyed by cache key to deduplicate stampedes. */
+  inflight = /* @__PURE__ */ new Map();
+  async onModuleInit() {
+    this.cleanupTimer = setInterval(() => {
+      void this.deleteExpired();
+    }, CLEANUP_INTERVAL_MS);
+  }
+  async onModuleDestroy() {
+    if (this.cleanupTimer !== null) {
+      clearInterval(this.cleanupTimer);
+      this.cleanupTimer = null;
+    }
+  }
+  async get(key) {
+    try {
+      const rows = await this.db.select().from(cacheEntries).where(
+        sql`${cacheEntries.key} = ${key} AND (${cacheEntries.expiresAt} IS NULL OR ${cacheEntries.expiresAt} > now())`
+      ).limit(1);
+      if (rows.length === 0) return null;
+      return rows[0].value;
+    } catch {
+      return null;
+    }
+  }
+  async set(key, value, ttlSeconds) {
+    const effectiveTtl = ttlSeconds ?? this.defaultTtl ?? null;
+    const expiresAt = effectiveTtl !== null ? new Date(Date.now() + effectiveTtl * 1e3) : null;
+    const jsonValue = value;
+    await this.db.insert(cacheEntries).values({ key, value: jsonValue, expiresAt }).onConflictDoUpdate({
+      target: cacheEntries.key,
+      set: { value: jsonValue, expiresAt }
+    });
+  }
+  async delete(key) {
+    await this.db.delete(cacheEntries).where(eq(cacheEntries.key, key));
+  }
+  async invalidateByPrefix(prefix) {
+    const escaped = prefix.replace(/%/g, "\\%").replace(/_/g, "\\_");
+    const result = await this.db.delete(cacheEntries).where(like(cacheEntries.key, `${escaped}%`)).returning({ key: cacheEntries.key });
+    return result.length;
+  }
+  async has(key) {
+    try {
+      const result = await this.get(key);
+      return result !== null;
+    } catch {
+      return false;
+    }
+  }
+  async getOrSet(key, factory, ttlSeconds) {
+    const cached = await this.get(key);
+    if (cached !== null) return cached;
+    const existing = this.inflight.get(key);
+    if (existing !== void 0) return existing;
+    const promise = factory().then(async (value) => {
+      await this.set(key, value, ttlSeconds);
+      return value;
+    }).finally(() => {
+      this.inflight.delete(key);
+    });
+    this.inflight.set(key, promise);
+    return promise;
+  }
+  /** Remove all expired entries. Called by the cleanup timer. */
+  async deleteExpired() {
+    try {
+      await this.db.delete(cacheEntries).where(
+        or(
+          gt(sql`now()`, cacheEntries.expiresAt)
+        )
+      );
+    } catch {
+    }
+  }
+};
+DrizzleCacheService = __decorateClass([
+  Injectable(),
+  __decorateParam(0, Inject(DRIZZLE)),
+  __decorateParam(1, Optional()),
+  __decorateParam(1, Inject(CACHE_DEFAULT_TTL))
+], DrizzleCacheService);
+
+export {
+  DrizzleCacheService
+};
+//# sourceMappingURL=chunk-T6C4LFLC.js.map

package/dist/chunk-T6C4LFLC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/cache/cache.drizzle-backend.ts"],"sourcesContent":["/**\n * DrizzleCacheService — Postgres-backed ICacheService via Drizzle ORM.\n *\n * Storage: `cache_entries` table with key (text pk), value (jsonb), expiresAt (timestamp).\n * TTL enforcement: reads filter by `expiresAt > now() OR expiresAt IS NULL`.\n * Prefix invalidation: `DELETE WHERE key LIKE 'escaped_prefix%'`.\n *\n * Lifecycle:\n * - OnModuleInit: starts periodic cleanup of expired entries.\n *   Uses the Jobs subsystem if available (optional injection); falls back to setInterval.\n * - OnModuleDestroy: clears the setInterval timer if used.\n *\n * Error behavior per ADR-008:\n * - get() / has() return null/false on any error (never throw for reads).\n * - set() / delete() / invalidateByPrefix() throw on failure.\n */\nimport { Injectable, Inject, Optional, type OnModuleInit, type OnModuleDestroy } from '@nestjs/common';\nimport { gt, or, like, sql, eq } from 'drizzle-orm';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport type { ICacheService } from './cache.protocol';\nimport { cacheEntries } from './cache.schema';\nimport { DRIZZLE } from '../../constants/tokens';\nimport { CACHE_DEFAULT_TTL } from './cache.tokens';\n\n// Re-export for backward compatibility\nexport { CACHE_DEFAULT_TTL } from './cache.tokens';\n\n/** Cleanup interval in milliseconds when jobs subsystem is unavailable. */\nconst CLEANUP_INTERVAL_MS = 5 * 60 * 1000; // 5 minutes\n\n@Injectable()\nexport class DrizzleCacheService implements ICacheService, OnModuleInit, OnModuleDestroy {\n  private cleanupTimer: ReturnType<typeof setInterval> | null = null;\n  /** In-flight getOrSet promises — keyed by cache key to deduplicate stampedes. */\n  private readonly inflight = new Map<string, Promise<unknown>>();\n\n  constructor(\n    @Inject(DRIZZLE) private readonly db: DrizzleClient,\n    @Optional() @Inject(CACHE_DEFAULT_TTL) private readonly defaultTtl: number | null = null,\n  ) {}\n\n  async onModuleInit(): Promise<void> {\n    this.cleanupTimer = setInterval(() => {\n      void this.deleteExpired();\n    }, CLEANUP_INTERVAL_MS);\n  }\n\n  async onModuleDestroy(): Promise<void> {\n    if (this.cleanupTimer !== null) {\n      clearInterval(this.cleanupTimer);\n      this.cleanupTimer = null;\n    }\n  }\n\n  async get<T = unknown>(key: string): Promise<T | null> {\n    try {\n      const rows = await this.db\n        .select()\n        .from(cacheEntries)\n        .where(\n          sql`${cacheEntries.key} = ${key} AND (${cacheEntries.expiresAt} IS NULL OR ${cacheEntries.expiresAt} > now())`,\n        )\n        .limit(1);\n\n      if (rows.length === 0) return null;\n      return rows[0]!.value as T;\n    } catch {\n      return null;\n    }\n  }\n\n  async set<T = unknown>(key: string, value: T, ttlSeconds?: number): Promise<void> {\n    const effectiveTtl = ttlSeconds ?? this.defaultTtl ?? null;\n    const expiresAt =\n      effectiveTtl !== null\n        ? new Date(Date.now() + effectiveTtl * 1000)\n        : null;\n\n    const jsonValue = value as Parameters<typeof cacheEntries.value.mapFromDriverValue>[0];\n    await this.db\n      .insert(cacheEntries)\n      .values({ key, value: jsonValue, expiresAt })\n      .onConflictDoUpdate({\n        target: cacheEntries.key,\n        set: { value: jsonValue, expiresAt },\n      });\n  }\n\n  async delete(key: string): Promise<void> {\n    await this.db.delete(cacheEntries).where(eq(cacheEntries.key, key));\n  }\n\n  async invalidateByPrefix(prefix: string): Promise<number> {\n    // Escape LIKE wildcards to prevent prefix characters from matching unintended entries\n    const escaped = prefix.replace(/%/g, '\\\\%').replace(/_/g, '\\\\_');\n    const result = await this.db\n      .delete(cacheEntries)\n      .where(like(cacheEntries.key, `${escaped}%`))\n      .returning({ key: cacheEntries.key });\n    return result.length;\n  }\n\n  async has(key: string): Promise<boolean> {\n    try {\n      const result = await this.get(key);\n      return result !== null;\n    } catch {\n      return false;\n    }\n  }\n\n  async getOrSet<T = unknown>(\n    key: string,\n    factory: () => Promise<T>,\n    ttlSeconds?: number,\n  ): Promise<T> {\n    // Fast path: cache hit\n    const cached = await this.get<T>(key);\n    if (cached !== null) return cached;\n\n    // Stampede protection: if another call is already computing this key, reuse its promise\n    const existing = this.inflight.get(key) as Promise<T> | undefined;\n    if (existing !== undefined) return existing;\n\n    const promise = factory().then(async (value) => {\n      await this.set(key, value, ttlSeconds);\n      return value;\n    }).finally(() => {\n      this.inflight.delete(key);\n    });\n\n    this.inflight.set(key, promise as Promise<unknown>);\n    return promise;\n  }\n\n  /** Remove all expired entries. Called by the cleanup timer. */\n  private async deleteExpired(): Promise<void> {\n    try {\n      await this.db\n        .delete(cacheEntries)\n        .where(\n          or(\n            gt(sql`now()`, cacheEntries.expiresAt),\n          ),\n        );\n    } catch {\n      // Cleanup failures are non-fatal — stale rows are filtered at read time\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAgBA,SAAS,YAAY,QAAQ,gBAAyD;AACtF,SAAS,IAAI,IAAI,MAAM,KAAK,UAAU;AAWtC,IAAM,sBAAsB,IAAI,KAAK;AAG9B,IAAM,sBAAN,MAAkF;AAAA,EAKvF,YACoC,IACsB,aAA4B,MACpF;AAFkC;AACsB;AAAA,EACvD;AAAA,EAFiC;AAAA,EACsB;AAAA,EANlD,eAAsD;AAAA;AAAA,EAE7C,WAAW,oBAAI,IAA8B;AAAA,EAO9D,MAAM,eAA8B;AAClC,SAAK,eAAe,YAAY,MAAM;AACpC,WAAK,KAAK,cAAc;AAAA,IAC1B,GAAG,mBAAmB;AAAA,EACxB;AAAA,EAEA,MAAM,kBAAiC;AACrC,QAAI,KAAK,iBAAiB,MAAM;AAC9B,oBAAc,KAAK,YAAY;AAC/B,WAAK,eAAe;AAAA,IACtB;AAAA,EACF;AAAA,EAEA,MAAM,IAAiB,KAAgC;AACrD,QAAI;AACF,YAAM,OAAO,MAAM,KAAK,GACrB,OAAO,EACP,KAAK,YAAY,EACjB;AAAA,QACC,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,aAAa,SAAS,eAAe,aAAa,SAAS;AAAA,MACrG,EACC,MAAM,CAAC;AAEV,UAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,aAAO,KAAK,CAAC,EAAG;AAAA,IAClB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,IAAiB,KAAa,OAAU,YAAoC;AAChF,UAAM,eAAe,cAAc,KAAK,cAAc;AACtD,UAAM,YACJ,iBAAiB,OACb,IAAI,KAAK,KAAK,IAAI,IAAI,eAAe,GAAI,IACzC;AAEN,UAAM,YAAY;AAClB,UAAM,KAAK,GACR,OAAO,YAAY,EACnB,OAAO,EAAE,KAAK,OAAO,WAAW,UAAU,CAAC,EAC3C,mBAAmB;AAAA,MAClB,QAAQ,aAAa;AAAA,MACrB,KAAK,EAAE,OAAO,WAAW,UAAU;AAAA,IACrC,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAO,KAA4B;AACvC,UAAM,KAAK,GAAG,OAAO,YAAY,EAAE,MAAM,GAAG,aAAa,KAAK,GAAG,CAAC;AAAA,EACpE;AAAA,EAEA,MAAM,mBAAmB,QAAiC;AAExD,UAAM,UAAU,OAAO,QAAQ,MAAM,KAAK,EAAE,QAAQ,MAAM,KAAK;AAC/D,UAAM,SAAS,MAAM,KAAK,GACvB,OAAO,YAAY,EACnB,MAAM,KAAK,aAAa,KAAK,GAAG,OAAO,GAAG,CAAC,EAC3C,UAAU,EAAE,KAAK,aAAa,IAAI,CAAC;AACtC,WAAO,OAAO;AAAA,EAChB;AAAA,EAEA,MAAM,IAAI,KAA+B;AACvC,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,IAAI,GAAG;AACjC,aAAO,WAAW;AAAA,IACpB,QAAQ;AACN,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,SACJ,KACA,SACA,YACY;AAEZ,UAAM,SAAS,MAAM,KAAK,IAAO,GAAG;AACpC,QAAI,WAAW,KAAM,QAAO;AAG5B,UAAM,WAAW,KAAK,SAAS,IAAI,GAAG;AACtC,QAAI,aAAa,OAAW,QAAO;AAEnC,UAAM,UAAU,QAAQ,EAAE,KAAK,OAAO,UAAU;AAC9C,YAAM,KAAK,IAAI,KAAK,OAAO,UAAU;AACrC,aAAO;AAAA,IACT,CAAC,EAAE,QAAQ,MAAM;AACf,WAAK,SAAS,OAAO,GAAG;AAAA,IAC1B,CAAC;AAED,SAAK,SAAS,IAAI,KAAK,OAA2B;AAClD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAc,gBAA+B;AAC3C,QAAI;AACF,YAAM,KAAK,GACR,OAAO,YAAY,EACnB;AAAA,QACC;AAAA,UACE,GAAG,YAAY,aAAa,SAAS;AAAA,QACvC;AAAA,MACF;AAAA,IACJ,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAtHa,sBAAN;AAAA,EADN,WAAW;AAAA,EAOP,0BAAO,OAAO;AAAA,EACd,4BAAS;AAAA,EAAG,0BAAO,iBAAiB;AAAA,GAP5B;","names":[]}

package/dist/chunk-TNXH7BJS.js

@@ -0,0 +1,48 @@
+import {
+  BridgeMetricsReporter
+} from "./chunk-AQFQ4BYM.js";
+import {
+  ObservabilityService
+} from "./chunk-YPWODKD5.js";
+import {
+  OBSERVABILITY,
+  OBSERVABILITY_MODULE_OPTIONS
+} from "./chunk-Y7RRSEOC.js";
+import {
+  __decorateClass
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/observability/observability.module.ts
+import { Module } from "@nestjs/common";
+var ObservabilityModule = class {
+  static forRoot(options = {}) {
+    const providers = [
+      // Expose the resolved options so internal reporters can read their
+      // own config via `OBSERVABILITY_MODULE_OPTIONS`.
+      { provide: OBSERVABILITY_MODULE_OPTIONS, useValue: options },
+      // Register the concrete class as the canonical instance.
+      ObservabilityService,
+      // OBSERVABILITY token points at the same instance — consumers inject
+      // the token, not the class, per ADR-025 §Shape (index.ts does NOT
+      // export `ObservabilityService`).
+      { provide: OBSERVABILITY, useExisting: ObservabilityService }
+    ];
+    if (options.reporters?.bridgeMetrics?.enabled === true) {
+      providers.push(BridgeMetricsReporter);
+    }
+    return {
+      module: ObservabilityModule,
+      global: true,
+      providers,
+      exports: [OBSERVABILITY, OBSERVABILITY_MODULE_OPTIONS]
+    };
+  }
+};
+ObservabilityModule = __decorateClass([
+  Module({})
+], ObservabilityModule);
+
+export {
+  ObservabilityModule
+};
+//# sourceMappingURL=chunk-TNXH7BJS.js.map

package/dist/chunk-TNXH7BJS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/observability/observability.module.ts"],"sourcesContent":["/**\n * ObservabilityModule — combiner subsystem (ADR-025, OBS-5, OBS-6).\n *\n * Composes the jobs, bridge, and integration read ports into a single\n * `IObservability` facade. Owned by no sibling subsystem; it consumes\n * their tokens via DI, which the consumer app wires by registering the\n * sibling modules in the right order (like BridgeModule — the named\n * precedent in ADR-025).\n *\n * Consumer wiring (register AFTER the composed sibling modules):\n * ```ts\n * @Module({\n *   imports: [\n *     EventsModule.forRoot({ backend: 'drizzle' }),\n *     JobsDomainModule.forRoot({ backend: 'drizzle' }),\n *     BridgeModule.forRoot({ backend: 'drizzle' }),\n *     IntegrationModule.forRoot({ backend: 'drizzle' }),\n *     ObservabilityModule.forRoot({\n *       reporters: {\n *         bridgeMetrics: {\n *           enabled: true,\n *           intervalMs: 60_000,\n *           windowHours: 1,\n *         },\n *       },\n *     }),\n *   ],\n * })\n * class AppModule {}\n * ```\n *\n * # No `backend` option — intentional\n *\n * Unlike ADR-008 infrastructure subsystems (events / jobs / cache /\n * storage), observability is a combiner per ADR-025 and owns no durable\n * state. The \"backend\" is whichever backends the composed subsystems are\n * running — portability is inherited, not declared. See ADR-025 §4 (when\n * to pick combiner vs. infrastructure) and\n * `.claude/skills/observability/SKILL.md` §1.\n *\n * # Graceful sibling absence\n *\n * The consumed sibling tokens are `@Optional()` inside\n * `ObservabilityService`. An app that only installed a subset of the\n * composed subsystems can still register `ObservabilityModule`; the\n * methods whose sibling is missing return empty shapes.\n *\n * # Reporters (OBS-6)\n *\n * Internal consumers of the `OBSERVABILITY` facade — auto-registered\n * when the matching `reporters.*` key is present and enabled. Reporters\n * are NOT added to `exports`; they are a module-internal concern.\n * Consumers configure them via options; they never import the reporter\n * classes directly.\n */\nimport { Module, type DynamicModule, type Provider } from '@nestjs/common';\n\nimport {\n  OBSERVABILITY,\n  OBSERVABILITY_MODULE_OPTIONS,\n} from './observability.tokens';\nimport { ObservabilityService } from './observability.service';\nimport { BridgeMetricsReporter } from './reporters/bridge-metrics.reporter';\n\n/**\n * Config for the bridge-delivery sampler (OBS-6). All fields are required\n * when `enabled: true` — the config is declarative and explicit; there\n * are no hidden defaults. Lives on the module (not the reporter file) so\n * the module's options type stays the single authoritative schema for\n * everything `forRoot` accepts.\n */\nexport interface BridgeMetricsReporterConfig {\n  /** Master switch. Reporter is only registered as a provider when this\n   *  is `true` (see `forRoot`). */\n  enabled: boolean;\n  /** Sampling period in ms. Must be `> 0` when `enabled: true`. */\n  intervalMs: number;\n  /** Trailing window (hours) passed to `getBridgeDeliveryHistogram`.\n   *  Must be `> 0` when `enabled: true`. */\n  windowHours: number;\n  /** Forwarded verbatim to `IObservability.getBridgeDeliveryHistogram`.\n   *   - `undefined` — sibling default semantics\n   *   - `null`      — explicit cross-tenant match\n   *   - `string`    — filter to that single tenant */\n  tenantId?: string | null;\n}\n\n/**\n * Named-map of reporter configs. Named, not array, so consumers can toggle\n * individual reporters by key without juggling order and so future reporters\n * can be added without breaking existing configs.\n */\nexport interface ObservabilityReportersOptions {\n  bridgeMetrics?: BridgeMetricsReporterConfig;\n}\n\n/**\n * Options for `ObservabilityModule.forRoot()`. Currently only `reporters`;\n * room to grow (sampling, exporters) without changing the module signature.\n */\nexport interface ObservabilityModuleOptions {\n  reporters?: ObservabilityReportersOptions;\n}\n\n@Module({})\nexport class ObservabilityModule {\n  static forRoot(options: ObservabilityModuleOptions = {}): DynamicModule {\n    const providers: Provider[] = [\n      // Expose the resolved options so internal reporters can read their\n      // own config via `OBSERVABILITY_MODULE_OPTIONS`.\n      { provide: OBSERVABILITY_MODULE_OPTIONS, useValue: options },\n      // Register the concrete class as the canonical instance.\n      ObservabilityService,\n      // OBSERVABILITY token points at the same instance — consumers inject\n      // the token, not the class, per ADR-025 §Shape (index.ts does NOT\n      // export `ObservabilityService`).\n      { provide: OBSERVABILITY, useExisting: ObservabilityService },\n    ];\n\n    // Reporters: auto-registered when enabled, not added to `exports`.\n    // They are internal consumers of OBSERVABILITY; consumers configure\n    // them via options rather than importing the classes.\n    if (options.reporters?.bridgeMetrics?.enabled === true) {\n      providers.push(BridgeMetricsReporter);\n    }\n\n    return {\n      module: ObservabilityModule,\n      global: true,\n      providers,\n      exports: [OBSERVABILITY, OBSERVABILITY_MODULE_OPTIONS],\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAuDA,SAAS,cAAiD;AAkDnD,IAAM,sBAAN,MAA0B;AAAA,EAC/B,OAAO,QAAQ,UAAsC,CAAC,GAAkB;AACtE,UAAM,YAAwB;AAAA;AAAA;AAAA,MAG5B,EAAE,SAAS,8BAA8B,UAAU,QAAQ;AAAA;AAAA,MAE3D;AAAA;AAAA;AAAA;AAAA,MAIA,EAAE,SAAS,eAAe,aAAa,qBAAqB;AAAA,IAC9D;AAKA,QAAI,QAAQ,WAAW,eAAe,YAAY,MAAM;AACtD,gBAAU,KAAK,qBAAqB;AAAA,IACtC;AAEA,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR;AAAA,MACA,SAAS,CAAC,eAAe,4BAA4B;AAAA,IACvD;AAAA,EACF;AACF;AA5Ba,sBAAN;AAAA,EADN,OAAO,CAAC,CAAC;AAAA,GACG;","names":[]}

package/dist/chunk-U64T4YZE.js

@@ -0,0 +1,9 @@
+// runtime/constants/tokens.ts
+var DRIZZLE = "DRIZZLE";
+var EVENT_BUS = "EVENT_BUS";
+
+export {
+  DRIZZLE,
+  EVENT_BUS
+};
+//# sourceMappingURL=chunk-U64T4YZE.js.map

package/dist/chunk-U64T4YZE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/constants/tokens.ts"],"sourcesContent":["/**\n * NestJS injection tokens\n *\n * Used with @Inject() decorator in concrete repository constructors.\n */\n\n/**\n * Injection token for the Drizzle ORM database client.\n *\n * Usage in concrete repositories:\n * ```typescript\n * constructor(@Inject(DRIZZLE) db: DrizzleClient) { super(db); }\n * ```\n */\nexport const DRIZZLE = 'DRIZZLE' as const;\n\n/**\n * Injection token for the event bus (IEventBus).\n *\n * Optional — only resolved when EventsModule.forRoot() is registered.\n * BaseService uses this with @Optional() to emit lifecycle events\n * without requiring the events subsystem to be installed.\n *\n * Usage in services/use cases:\n * ```typescript\n * @Optional() @Inject(EVENT_BUS) eventBus?: IEventBus\n * ```\n */\nexport const EVENT_BUS = 'EVENT_BUS' as const;\n"],"mappings":";AAcO,IAAM,UAAU;AAchB,IAAM,YAAY;","names":[]}

package/dist/chunk-UQ5EHOH2.js

@@ -0,0 +1,39 @@
+// runtime/subsystems/events/event-keyset-cursor.ts
+var DEFAULT_EVENT_LIST_LIMIT = 50;
+var MAX_EVENT_LIST_LIMIT = 200;
+function clampEventLimit(limit) {
+  if (typeof limit !== "number" || !Number.isFinite(limit)) {
+    return DEFAULT_EVENT_LIST_LIMIT;
+  }
+  const floored = Math.floor(limit);
+  if (floored < 1) return 1;
+  if (floored > MAX_EVENT_LIST_LIMIT) return MAX_EVENT_LIST_LIMIT;
+  return floored;
+}
+function encodeEventCursor(keyset) {
+  const tuple = [keyset.occurredAt.toISOString(), keyset.id];
+  return Buffer.from(JSON.stringify(tuple), "utf8").toString("base64url");
+}
+function decodeEventCursor(cursor) {
+  try {
+    const json = Buffer.from(cursor, "base64url").toString("utf8");
+    const parsed = JSON.parse(json);
+    if (!Array.isArray(parsed) || parsed.length !== 2) return null;
+    const [iso, id] = parsed;
+    if (typeof iso !== "string" || typeof id !== "string") return null;
+    const occurredAt = new Date(iso);
+    if (Number.isNaN(occurredAt.getTime())) return null;
+    return { occurredAt, id };
+  } catch {
+    return null;
+  }
+}
+
+export {
+  DEFAULT_EVENT_LIST_LIMIT,
+  MAX_EVENT_LIST_LIMIT,
+  clampEventLimit,
+  encodeEventCursor,
+  decodeEventCursor
+};
+//# sourceMappingURL=chunk-UQ5EHOH2.js.map

package/dist/chunk-UQ5EHOH2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/events/event-keyset-cursor.ts"],"sourcesContent":["/**\n * Keyset (seek) cursor codec for `IEventReadPort.listEvents` (OBS-LIST-1).\n *\n * The list is ordered `occurred_at DESC, id DESC`. The cursor encodes the\n * `(occurredAt, id)` of the last row on the previous page so the next page\n * seeks with `WHERE (occurred_at, id) < (cursorOccurredAt, cursorId)`.\n *\n * The cursor is opaque to consumers: a base64url-encoded JSON tuple. Shape\n * is an implementation detail — never parse it outside this module.\n *\n * Mirrors the jobs keyset codec; kept separate because the events subsystem\n * must not depend on `runtime/subsystems/jobs/`.\n */\n\nexport interface EventKeyset {\n  occurredAt: Date;\n  id: string;\n}\n\n/** Default page size when `limit` is omitted. */\nexport const DEFAULT_EVENT_LIST_LIMIT = 50;\n/** Hard upper bound on page size. */\nexport const MAX_EVENT_LIST_LIMIT = 200;\n\n/** Clamp a caller-supplied `limit` into `[1, MAX_EVENT_LIST_LIMIT]`. */\nexport function clampEventLimit(limit: number | undefined): number {\n  if (typeof limit !== 'number' || !Number.isFinite(limit)) {\n    return DEFAULT_EVENT_LIST_LIMIT;\n  }\n  const floored = Math.floor(limit);\n  if (floored < 1) return 1;\n  if (floored > MAX_EVENT_LIST_LIMIT) return MAX_EVENT_LIST_LIMIT;\n  return floored;\n}\n\nexport function encodeEventCursor(keyset: EventKeyset): string {\n  const tuple = [keyset.occurredAt.toISOString(), keyset.id];\n  return Buffer.from(JSON.stringify(tuple), 'utf8').toString('base64url');\n}\n\n/**\n * Decode an opaque cursor back into its `(occurredAt, id)` keyset. Returns\n * `null` for malformed input so user-supplied garbage is treated as \"start\n * from the beginning\" rather than throwing.\n */\nexport function decodeEventCursor(cursor: string): EventKeyset | null {\n  try {\n    const json = Buffer.from(cursor, 'base64url').toString('utf8');\n    const parsed = JSON.parse(json) as unknown;\n    if (!Array.isArray(parsed) || parsed.length !== 2) return null;\n    const [iso, id] = parsed;\n    if (typeof iso !== 'string' || typeof id !== 'string') return null;\n    const occurredAt = new Date(iso);\n    if (Number.isNaN(occurredAt.getTime())) return null;\n    return { occurredAt, id };\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAoBO,IAAM,2BAA2B;AAEjC,IAAM,uBAAuB;AAG7B,SAAS,gBAAgB,OAAmC;AACjE,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,WAAO;AAAA,EACT;AACA,QAAM,UAAU,KAAK,MAAM,KAAK;AAChC,MAAI,UAAU,EAAG,QAAO;AACxB,MAAI,UAAU,qBAAsB,QAAO;AAC3C,SAAO;AACT;AAEO,SAAS,kBAAkB,QAA6B;AAC7D,QAAM,QAAQ,CAAC,OAAO,WAAW,YAAY,GAAG,OAAO,EAAE;AACzD,SAAO,OAAO,KAAK,KAAK,UAAU,KAAK,GAAG,MAAM,EAAE,SAAS,WAAW;AACxE;AAOO,SAAS,kBAAkB,QAAoC;AACpE,MAAI;AACF,UAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,EAAE,SAAS,MAAM;AAC7D,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,EAAG,QAAO;AAC1D,UAAM,CAAC,KAAK,EAAE,IAAI;AAClB,QAAI,OAAO,QAAQ,YAAY,OAAO,OAAO,SAAU,QAAO;AAC9D,UAAM,aAAa,IAAI,KAAK,GAAG;AAC/B,QAAI,OAAO,MAAM,WAAW,QAAQ,CAAC,EAAG,QAAO;AAC/C,WAAO,EAAE,YAAY,GAAG;AAAA,EAC1B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-UTN4GBPQ.js

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-UTN4GBPQ.js.map

package/dist/chunk-UTN4GBPQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-V4AF6DI4.js

@@ -0,0 +1,16 @@
+// runtime/subsystems/events/events-errors.ts
+var MissingTenantIdError = class extends Error {
+  constructor(eventType) {
+    super(
+      `Missing tenantId for event '${eventType}'. EventsModule is configured with multiTenant: true \u2014 every publish must include opts.metadata.tenantId. Either pass the tenantId or disable multi-tenancy on the module.`
+    );
+    this.eventType = eventType;
+  }
+  eventType;
+  name = "MissingTenantIdError";
+};
+
+export {
+  MissingTenantIdError
+};
+//# sourceMappingURL=chunk-V4AF6DI4.js.map

package/dist/chunk-V4AF6DI4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/events/events-errors.ts"],"sourcesContent":["/**\n * Typed errors for the events subsystem (ADR-024, EVT-6).\n *\n * All thrown from the publish path of `TypedEventBus`. They exist as\n * classes so consumers can `instanceof` them in catch blocks and\n * exception filters can map them to HTTP codes.\n */\n\n/**\n * Thrown by `TypedEventBus.publish()` when the EventsModule is configured\n * with `multiTenant: true` and the caller did not supply\n * `opts.metadata.tenantId`. Multi-tenant mode requires every outbox row to\n * be attributable to a tenant — the `domain_events.tenant_id` column is\n * populated from this value and the drain loop uses it for future\n * tenant-scoped filtering (deferred — see ADR-024 §Multi-tenancy).\n *\n * Disable multi-tenancy at the module level (`multiTenant: false`, the\n * default) to opt out of the requirement entirely.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly eventType: string) {\n    super(\n      `Missing tenantId for event '${eventType}'. EventsModule is configured ` +\n        `with multiTenant: true — every publish must include ` +\n        `opts.metadata.tenantId. Either pass the tenantId or disable ` +\n        `multi-tenancy on the module.`,\n    );\n  }\n}\n"],"mappings":";AAmBO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,WAAmB;AAC7C;AAAA,MACE,+BAA+B,SAAS;AAAA,IAI1C;AAN0B;AAAA,EAO5B;AAAA,EAP4B;AAAA,EADV,OAAO;AAS3B;","names":[]}

package/dist/chunk-W72PRNJY.js

@@ -0,0 +1,126 @@
+import {
+  buildChangeEvents,
+  buildLifecycleEvent,
+  diffSnapshots,
+  emitSafely,
+  entitySnapshot
+} from "./chunk-KYR3B3OW.js";
+
+// runtime/base-classes/base-service.ts
+var BaseService = class {
+  constructor(repository) {
+    this.repository = repository;
+  }
+  repository;
+  /**
+   * Entity name for event types (e.g., 'account' → 'account.created').
+   * Set by generated services. If empty, lifecycle events are skipped.
+   */
+  entityName;
+  /**
+   * Event bus for lifecycle/change event emission.
+   * Injected via @Inject(EVENT_BUS) @Optional() on generated services.
+   * If undefined (no events subsystem installed), emission is silently skipped.
+   */
+  eventBus;
+  /**
+   * Whether to emit lifecycle events. Default: true.
+   * Override to false in entity YAML via behaviors or in the service class.
+   */
+  emitLifecycleEvents = true;
+  /**
+   * Find a single entity by its primary key.
+   * Returns null if not found.
+   */
+  findById(id) {
+    return this.repository.findById(id);
+  }
+  /**
+   * Find multiple entities by their primary keys.
+   */
+  findByIds(ids) {
+    return this.repository.findByIds(ids);
+  }
+  /**
+   * List entities with optional filtering/pagination options.
+   */
+  list(options) {
+    return this.repository.list(options);
+  }
+  /**
+   * Count entities matching an optional filter.
+   */
+  count(where) {
+    return this.repository.count(where);
+  }
+  /**
+   * Check whether an entity with the given id exists.
+   */
+  exists(id) {
+    return this.repository.exists(id);
+  }
+  /**
+   * Insert a new entity.
+   * Emits a LIFECYCLE 'created' event with entity snapshot.
+   */
+  async create(input, tx) {
+    const result = await this.repository.create(input, tx);
+    if (this._shouldEmit()) {
+      const snap = entitySnapshot(result);
+      const id = result.id;
+      const event = buildLifecycleEvent(this.entityName, "created", id, snap);
+      void emitSafely(this.eventBus, [event]);
+    }
+    return result;
+  }
+  /**
+   * Update an existing entity by id.
+   * Emits a LIFECYCLE 'updated' event + CHANGE events for each modified field.
+   */
+  async update(id, input, tx) {
+    let before;
+    if (this._shouldEmit()) {
+      const existing = await this.repository.findById(id);
+      if (existing) {
+        before = entitySnapshot(existing);
+      }
+    }
+    const result = await this.repository.update(id, input, tx);
+    if (this._shouldEmit()) {
+      const after = entitySnapshot(result);
+      const events = [
+        buildLifecycleEvent(this.entityName, "updated", id, after)
+      ];
+      if (before) {
+        const changes = diffSnapshots(before, after);
+        if (changes.length > 0) {
+          events.push(...buildChangeEvents(this.entityName, id, changes));
+        }
+      }
+      void emitSafely(this.eventBus, events);
+    }
+    return result;
+  }
+  /**
+   * Delete an entity by id.
+   * Emits a LIFECYCLE 'deleted' event.
+   */
+  async delete(id, tx) {
+    await this.repository.delete(id, tx);
+    if (this._shouldEmit()) {
+      const event = buildLifecycleEvent(this.entityName, "deleted", id);
+      void emitSafely(this.eventBus, [event]);
+    }
+  }
+  /** Check whether lifecycle event emission is active. */
+  _shouldEmit() {
+    return Boolean(
+      this.emitLifecycleEvents && this.entityName && this.eventBus
+    );
+  }
+};
+
+export {
+  BaseService
+};
+//# sourceMappingURL=chunk-W72PRNJY.js.map

package/dist/chunk-W72PRNJY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/base-classes/base-service.ts"],"sourcesContent":["/**\n * BaseService<TRepo, TEntity>\n *\n * Abstract base class providing 8 CRUD pass-through methods delegating to\n * an injected repository. Every generated service extends this class.\n *\n * Lifecycle event emission (LIFECYCLE + CHANGE categories) is built into\n * create/update/delete — matching pattern-stack's BaseService. Events are\n * fire-and-forget: emission never fails the CRUD operation. If no IEventBus\n * is injected (eventBus is undefined), emission is silently skipped.\n *\n * Generated services set `entityName` and optionally inject `eventBus` via\n * NestJS property injection (@Inject(EVENT_BUS) @Optional()).\n *\n * Note: @Injectable() is applied on concrete services (not here) so that\n * NestJS DI metadata is emitted at the concrete class level. This matches\n * the pattern established by BaseRepository.\n */\n\nimport type { IEventBus } from '../subsystems/events/event-bus.protocol';\nimport {\n  entitySnapshot,\n  diffSnapshots,\n  buildLifecycleEvent,\n  buildChangeEvents,\n  emitSafely,\n} from './lifecycle-events';\n\n// ============================================================================\n// IBaseRepository interface\n// ============================================================================\n\n/**\n * Structural interface that BaseRepository satisfies.\n * Use this as the TRepo constraint so BaseService is not coupled to the\n * concrete Drizzle-backed BaseRepository.\n */\nexport interface IBaseRepository<TEntity> {\n  findById(id: string): Promise<TEntity | null>;\n  findByIds(ids: string[]): Promise<TEntity[]>;\n  list(options?: unknown): Promise<TEntity[]>;\n  count(where?: unknown): Promise<number>;\n  exists(id: string): Promise<boolean>;\n  create(input: Partial<TEntity>, tx?: unknown): Promise<TEntity>;\n  update(id: string, input: Partial<TEntity>, tx?: unknown): Promise<TEntity>;\n  delete(id: string, tx?: unknown): Promise<void>;\n}\n\n// ============================================================================\n// BaseService\n// ============================================================================\n\nexport abstract class BaseService<TRepo extends IBaseRepository<TEntity>, TEntity> {\n  /**\n   * Entity name for event types (e.g., 'account' → 'account.created').\n   * Set by generated services. If empty, lifecycle events are skipped.\n   */\n  protected entityName?: string;\n\n  /**\n   * Event bus for lifecycle/change event emission.\n   * Injected via @Inject(EVENT_BUS) @Optional() on generated services.\n   * If undefined (no events subsystem installed), emission is silently skipped.\n   */\n  protected eventBus?: IEventBus;\n\n  /**\n   * Whether to emit lifecycle events. Default: true.\n   * Override to false in entity YAML via behaviors or in the service class.\n   */\n  protected emitLifecycleEvents = true;\n\n  constructor(protected readonly repository: TRepo) {}\n\n  /**\n   * Find a single entity by its primary key.\n   * Returns null if not found.\n   */\n  findById(id: string): Promise<TEntity | null> {\n    return this.repository.findById(id);\n  }\n\n  /**\n   * Find multiple entities by their primary keys.\n   */\n  findByIds(ids: string[]): Promise<TEntity[]> {\n    return this.repository.findByIds(ids);\n  }\n\n  /**\n   * List entities with optional filtering/pagination options.\n   */\n  list(options?: unknown): Promise<TEntity[]> {\n    return this.repository.list(options);\n  }\n\n  /**\n   * Count entities matching an optional filter.\n   */\n  count(where?: unknown): Promise<number> {\n    return this.repository.count(where);\n  }\n\n  /**\n   * Check whether an entity with the given id exists.\n   */\n  exists(id: string): Promise<boolean> {\n    return this.repository.exists(id);\n  }\n\n  /**\n   * Insert a new entity.\n   * Emits a LIFECYCLE 'created' event with entity snapshot.\n   */\n  async create(input: Partial<TEntity>, tx?: unknown): Promise<TEntity> {\n    const result = await this.repository.create(input, tx);\n\n    if (this._shouldEmit()) {\n      const snap = entitySnapshot(result as Record<string, unknown>);\n      const id = (result as Record<string, unknown>).id as string;\n      const event = buildLifecycleEvent(this.entityName!, 'created', id, snap);\n      void emitSafely(this.eventBus, [event]);\n    }\n\n    return result;\n  }\n\n  /**\n   * Update an existing entity by id.\n   * Emits a LIFECYCLE 'updated' event + CHANGE events for each modified field.\n   */\n  async update(id: string, input: Partial<TEntity>, tx?: unknown): Promise<TEntity> {\n    // Snapshot before for change diffing\n    let before: Record<string, unknown> | undefined;\n    if (this._shouldEmit()) {\n      const existing = await this.repository.findById(id);\n      if (existing) {\n        before = entitySnapshot(existing as Record<string, unknown>);\n      }\n    }\n\n    const result = await this.repository.update(id, input, tx);\n\n    if (this._shouldEmit()) {\n      const after = entitySnapshot(result as Record<string, unknown>);\n      const events = [\n        buildLifecycleEvent(this.entityName!, 'updated', id, after),\n      ];\n      // Append per-field CHANGE events\n      if (before) {\n        const changes = diffSnapshots(before, after);\n        if (changes.length > 0) {\n          events.push(...buildChangeEvents(this.entityName!, id, changes));\n        }\n      }\n      void emitSafely(this.eventBus, events);\n    }\n\n    return result;\n  }\n\n  /**\n   * Delete an entity by id.\n   * Emits a LIFECYCLE 'deleted' event.\n   */\n  async delete(id: string, tx?: unknown): Promise<void> {\n    await this.repository.delete(id, tx);\n\n    if (this._shouldEmit()) {\n      const event = buildLifecycleEvent(this.entityName!, 'deleted', id);\n      void emitSafely(this.eventBus, [event]);\n    }\n  }\n\n  /** Check whether lifecycle event emission is active. */\n  private _shouldEmit(): boolean {\n    return Boolean(\n      this.emitLifecycleEvents &&\n      this.entityName &&\n      this.eventBus,\n    );\n  }\n}\n"],"mappings":";;;;;;;;;AAoDO,IAAe,cAAf,MAA4E;AAAA,EAoBjF,YAA+B,YAAmB;AAAnB;AAAA,EAAoB;AAAA,EAApB;AAAA;AAAA;AAAA;AAAA;AAAA,EAfrB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA,EAQhC,SAAS,IAAqC;AAC5C,WAAO,KAAK,WAAW,SAAS,EAAE;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,KAAmC;AAC3C,WAAO,KAAK,WAAW,UAAU,GAAG;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,KAAK,SAAuC;AAC1C,WAAO,KAAK,WAAW,KAAK,OAAO;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAkC;AACtC,WAAO,KAAK,WAAW,MAAM,KAAK;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAA8B;AACnC,WAAO,KAAK,WAAW,OAAO,EAAE;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAO,OAAyB,IAAgC;AACpE,UAAM,SAAS,MAAM,KAAK,WAAW,OAAO,OAAO,EAAE;AAErD,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,OAAO,eAAe,MAAiC;AAC7D,YAAM,KAAM,OAAmC;AAC/C,YAAM,QAAQ,oBAAoB,KAAK,YAAa,WAAW,IAAI,IAAI;AACvE,WAAK,WAAW,KAAK,UAAU,CAAC,KAAK,CAAC;AAAA,IACxC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAO,IAAY,OAAyB,IAAgC;AAEhF,QAAI;AACJ,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,WAAW,MAAM,KAAK,WAAW,SAAS,EAAE;AAClD,UAAI,UAAU;AACZ,iBAAS,eAAe,QAAmC;AAAA,MAC7D;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,KAAK,WAAW,OAAO,IAAI,OAAO,EAAE;AAEzD,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,QAAQ,eAAe,MAAiC;AAC9D,YAAM,SAAS;AAAA,QACb,oBAAoB,KAAK,YAAa,WAAW,IAAI,KAAK;AAAA,MAC5D;AAEA,UAAI,QAAQ;AACV,cAAM,UAAU,cAAc,QAAQ,KAAK;AAC3C,YAAI,QAAQ,SAAS,GAAG;AACtB,iBAAO,KAAK,GAAG,kBAAkB,KAAK,YAAa,IAAI,OAAO,CAAC;AAAA,QACjE;AAAA,MACF;AACA,WAAK,WAAW,KAAK,UAAU,MAAM;AAAA,IACvC;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAO,IAAY,IAA6B;AACpD,UAAM,KAAK,WAAW,OAAO,IAAI,EAAE;AAEnC,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,QAAQ,oBAAoB,KAAK,YAAa,WAAW,EAAE;AACjE,WAAK,WAAW,KAAK,UAAU,CAAC,KAAK,CAAC;AAAA,IACxC;AAAA,EACF;AAAA;AAAA,EAGQ,cAAuB;AAC7B,WAAO;AAAA,MACL,KAAK,uBACL,KAAK,cACL,KAAK;AAAA,IACP;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-WEVWJKOW.js

@@ -0,0 +1,81 @@
+import {
+  MemoryCursorStore
+} from "./chunk-AHV4GDYM.js";
+import {
+  DrizzleIntegrationRunRecorder
+} from "./chunk-SR7F3TJY.js";
+import {
+  MemoryRunRecorder
+} from "./chunk-EO2QPOKH.js";
+import {
+  PostgresCursorStore
+} from "./chunk-DCCZB4UC.js";
+import {
+  DeepEqualDiffer
+} from "./chunk-36U5UGIO.js";
+import {
+  INTEGRATION_CURSOR_STORE,
+  INTEGRATION_FIELD_DIFFER,
+  INTEGRATION_MODULE_OPTIONS,
+  INTEGRATION_MULTI_TENANT,
+  INTEGRATION_RUN_RECORDER
+} from "./chunk-S7C6TIIF.js";
+import {
+  __decorateClass
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/integration/integration.module.ts
+import { Module } from "@nestjs/common";
+var IntegrationModule = class {
+  static forRoot(options) {
+    const multiTenant = options.multiTenant ?? false;
+    const sharedProviders = [
+      { provide: INTEGRATION_MODULE_OPTIONS, useValue: options },
+      { provide: INTEGRATION_MULTI_TENANT, useValue: multiTenant },
+      // Default differ — consumers can override by binding a different
+      // `IFieldDiffer<T>` to `INTEGRATION_FIELD_DIFFER` in their feature module.
+      { provide: INTEGRATION_FIELD_DIFFER, useValue: new DeepEqualDiffer() }
+    ];
+    const backendProviders = options.backend === "memory" ? [
+      // Wired as singletons via `useValue` so tests can pull
+      // them out via `moduleRef.get(MemoryCursorStore)` for
+      // direct assertions. Matches JOB-4 / MemoryJobStore shape.
+      { provide: MemoryCursorStore, useValue: new MemoryCursorStore() },
+      {
+        provide: INTEGRATION_CURSOR_STORE,
+        useExisting: MemoryCursorStore
+      },
+      { provide: MemoryRunRecorder, useValue: new MemoryRunRecorder() },
+      {
+        provide: INTEGRATION_RUN_RECORDER,
+        useExisting: MemoryRunRecorder
+      }
+    ] : [
+      // Drizzle backends — injected with DRIZZLE (provided by the
+      // consumer's DrizzleModule) + the INTEGRATION_MULTI_TENANT flag
+      // we bound above.
+      { provide: INTEGRATION_CURSOR_STORE, useClass: PostgresCursorStore },
+      { provide: INTEGRATION_RUN_RECORDER, useClass: DrizzleIntegrationRunRecorder }
+    ];
+    return {
+      module: IntegrationModule,
+      global: true,
+      providers: [...sharedProviders, ...backendProviders],
+      exports: [
+        INTEGRATION_MODULE_OPTIONS,
+        INTEGRATION_MULTI_TENANT,
+        INTEGRATION_FIELD_DIFFER,
+        INTEGRATION_CURSOR_STORE,
+        INTEGRATION_RUN_RECORDER
+      ]
+    };
+  }
+};
+IntegrationModule = __decorateClass([
+  Module({})
+], IntegrationModule);
+
+export {
+  IntegrationModule
+};
+//# sourceMappingURL=chunk-WEVWJKOW.js.map

package/dist/chunk-WEVWJKOW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/integration/integration.module.ts"],"sourcesContent":["/**\n * IntegrationModule — `DynamicModule.forRoot({ backend, multiTenant? })` factory\n * wiring the integration subsystem's substrate (SYNC-6, ADR-008 subsystem pattern).\n *\n * ## What this module provides\n *\n *   - `INTEGRATION_CURSOR_STORE`    — Drizzle or Memory cursor store\n *   - `INTEGRATION_RUN_RECORDER`    — Drizzle or Memory run recorder\n *   - `INTEGRATION_FIELD_DIFFER`    — default `DeepEqualDiffer`\n *   - `INTEGRATION_MULTI_TENANT`    — resolved boolean flag (defaults to false)\n *   - `INTEGRATION_MODULE_OPTIONS`  — the options object itself, for backends\n *     that need to inspect config at construction time\n *\n * ## What this module does NOT provide\n *\n *   - `INTEGRATION_CHANGE_SOURCE` — per-provider per-entity; consumer binds in\n *     their feature module (e.g. `OpportunityIntegrationModule` provides a\n *     `SalesforceOpportunityChangeSource`). Loopback suppression — when\n *     needed — is composed into the primitive's middleware chain via\n *     `createLoopbackMiddleware(store)` (#226-5 / ADR-033); the\n *     orchestrator no longer accepts a fingerprint store directly.\n *   - `INTEGRATION_SINK` — per canonical entity; consumer binds in their feature\n *     module.\n *   - `ExecuteIntegrationUseCase` — registered by the feature module alongside\n *     its source + sink bindings. Providing the orchestrator here would\n *     force Nest to resolve INTEGRATION_CHANGE_SOURCE + INTEGRATION_SINK at module\n *     compile time, which fails when the feature module hasn't been\n *     imported yet. Consumers register `ExecuteIntegrationUseCase` in the same\n *     `providers` array as their source + sink so resolution is local\n *     to where all three are bound.\n *\n * Same shape as `EventsModule.forRoot` — the module wires the bus; you\n * bring your own handlers. Here: the module wires the substrate; you\n * bring your own source + sink.\n *\n * ## Usage\n *\n * ```ts\n * // AppModule — single source of truth for backend + multi-tenancy.\n * @Module({\n *   imports: [IntegrationModule.forRoot({ backend: 'drizzle' })],\n * })\n * export class AppModule {}\n *\n * // Per-entity feature module — binds source + sink, gets the\n * // orchestrator for free.\n * @Module({\n *   providers: [\n *     { provide: INTEGRATION_CHANGE_SOURCE, useClass: SalesforceOpportunitySource },\n *     { provide: INTEGRATION_SINK,          useClass: OpportunityIntegrationSink },\n *     ExecuteIntegrationUseCase,\n *   ],\n * })\n * export class OpportunityIntegrationModule {\n *   constructor(\n *     private readonly execute: ExecuteIntegrationUseCase<CanonicalOpportunity>,\n *   ) {}\n * }\n * ```\n *\n * `global: true` means feature modules do not need to re-import\n * `IntegrationModule` — the substrate tokens are available project-wide.\n */\nimport { Module, type DynamicModule, type Provider } from '@nestjs/common';\nimport {\n  INTEGRATION_CURSOR_STORE,\n  INTEGRATION_FIELD_DIFFER,\n  INTEGRATION_MODULE_OPTIONS,\n  INTEGRATION_MULTI_TENANT,\n  INTEGRATION_RUN_RECORDER,\n} from './integration.tokens';\nimport { MemoryCursorStore } from './integration-cursor-store.memory-backend';\nimport { MemoryRunRecorder } from './integration-run-recorder.memory-backend';\nimport { PostgresCursorStore } from './integration-cursor-store.drizzle-backend';\nimport { DrizzleIntegrationRunRecorder } from './integration-run-recorder.drizzle-backend';\nimport { DeepEqualDiffer } from './deep-equal.differ';\n\nexport interface IntegrationModuleOptions {\n  /**\n   * Backend selection. `drizzle` wires the Postgres cursor store +\n   * run-log recorder; `memory` wires in-memory doubles suitable for\n   * tests + local dev.\n   */\n  backend: 'drizzle' | 'memory';\n\n  /**\n   * Multi-tenancy opt-in (SYNC-6).\n   *\n   * When `true`, every call to the orchestrator + both Drizzle backends\n   * must supply a non-null `tenantId`; missing values throw\n   * `MissingTenantIdError`. Defense-in-depth: the orchestrator rejects\n   * at entry (no dangling `status=running` rows) AND the Drizzle\n   * backends reject at their write boundary (belt-and-braces for any\n   * path that bypasses the orchestrator). Both sites use the shared\n   * `assertTenantId` helper so error messages match.\n   *\n   * Memory backends accept `tenantId` unconditionally — their state is\n   * process-local; cross-tenant isolation there is not meaningful.\n   *\n   * Defaults to `false`.\n   */\n  multiTenant?: boolean;\n}\n\n@Module({})\nexport class IntegrationModule {\n  static forRoot(options: IntegrationModuleOptions): DynamicModule {\n    const multiTenant = options.multiTenant ?? false;\n\n    const sharedProviders: Provider[] = [\n      { provide: INTEGRATION_MODULE_OPTIONS, useValue: options },\n      { provide: INTEGRATION_MULTI_TENANT, useValue: multiTenant },\n      // Default differ — consumers can override by binding a different\n      // `IFieldDiffer<T>` to `INTEGRATION_FIELD_DIFFER` in their feature module.\n      { provide: INTEGRATION_FIELD_DIFFER, useValue: new DeepEqualDiffer() },\n    ];\n\n    const backendProviders: Provider[] =\n      options.backend === 'memory'\n        ? [\n            // Wired as singletons via `useValue` so tests can pull\n            // them out via `moduleRef.get(MemoryCursorStore)` for\n            // direct assertions. Matches JOB-4 / MemoryJobStore shape.\n            { provide: MemoryCursorStore, useValue: new MemoryCursorStore() },\n            {\n              provide: INTEGRATION_CURSOR_STORE,\n              useExisting: MemoryCursorStore,\n            },\n            { provide: MemoryRunRecorder, useValue: new MemoryRunRecorder() },\n            {\n              provide: INTEGRATION_RUN_RECORDER,\n              useExisting: MemoryRunRecorder,\n            },\n          ]\n        : [\n            // Drizzle backends — injected with DRIZZLE (provided by the\n            // consumer's DrizzleModule) + the INTEGRATION_MULTI_TENANT flag\n            // we bound above.\n            { provide: INTEGRATION_CURSOR_STORE, useClass: PostgresCursorStore },\n            { provide: INTEGRATION_RUN_RECORDER, useClass: DrizzleIntegrationRunRecorder },\n          ];\n\n    return {\n      module: IntegrationModule,\n      global: true,\n      providers: [...sharedProviders, ...backendProviders],\n      exports: [\n        INTEGRATION_MODULE_OPTIONS,\n        INTEGRATION_MULTI_TENANT,\n        INTEGRATION_FIELD_DIFFER,\n        INTEGRATION_CURSOR_STORE,\n        INTEGRATION_RUN_RECORDER,\n      ],\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AA+DA,SAAS,cAAiD;AA0CnD,IAAM,oBAAN,MAAwB;AAAA,EAC7B,OAAO,QAAQ,SAAkD;AAC/D,UAAM,cAAc,QAAQ,eAAe;AAE3C,UAAM,kBAA8B;AAAA,MAClC,EAAE,SAAS,4BAA4B,UAAU,QAAQ;AAAA,MACzD,EAAE,SAAS,0BAA0B,UAAU,YAAY;AAAA;AAAA;AAAA,MAG3D,EAAE,SAAS,0BAA0B,UAAU,IAAI,gBAAgB,EAAE;AAAA,IACvE;AAEA,UAAM,mBACJ,QAAQ,YAAY,WAChB;AAAA;AAAA;AAAA;AAAA,MAIE,EAAE,SAAS,mBAAmB,UAAU,IAAI,kBAAkB,EAAE;AAAA,MAChE;AAAA,QACE,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,MACA,EAAE,SAAS,mBAAmB,UAAU,IAAI,kBAAkB,EAAE;AAAA,MAChE;AAAA,QACE,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,IACF,IACA;AAAA;AAAA;AAAA;AAAA,MAIE,EAAE,SAAS,0BAA0B,UAAU,oBAAoB;AAAA,MACnE,EAAE,SAAS,0BAA0B,UAAU,8BAA8B;AAAA,IAC/E;AAEN,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,GAAG,iBAAiB,GAAG,gBAAgB;AAAA,MACnD,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAlDa,oBAAN;AAAA,EADN,OAAO,CAAC,CAAC;AAAA,GACG;","names":[]}

package/dist/chunk-WL67FZGF.js

@@ -0,0 +1,21 @@
+import {
+  isSessionExpiredError
+} from "./chunk-7RELQJIN.js";
+
+// runtime/subsystems/auth/runtime/with-auth-retry.ts
+async function withAuthRetry(authStrategy, connectionId, op, options = {}) {
+  const classify = options.isSessionExpired ?? isSessionExpiredError;
+  let creds = await authStrategy.resolve(connectionId);
+  try {
+    return await op(creds);
+  } catch (e) {
+    if (!classify(e)) throw e;
+    creds = await authStrategy.resolve(connectionId, { forceRefresh: true });
+    return op(creds);
+  }
+}
+
+export {
+  withAuthRetry
+};
+//# sourceMappingURL=chunk-WL67FZGF.js.map

package/dist/chunk-WL67FZGF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/auth/runtime/with-auth-retry.ts"],"sourcesContent":["/**\n * Run `op` with auth-aware retry-once on session-expired errors.\n *\n * Pattern: resolve creds → run op → if `isSessionExpired(e)` → resolve with\n * `forceRefresh: true` → retry → propagate. A second session-expired error\n * on the refreshed token propagates rather than looping, so transient\n * adapter bugs can't hang the caller.\n *\n * Generalisation over the extraction source's SFDC-specific original: the\n * session-expired classifier is injected. Providers mark their session-\n * expired errors (via `instanceof` of a marker class, or by setting a known\n * property) and pass a classifier matching that shape.\n *\n * Default classifier recognises the marker interface `SessionExpiredError`\n * shipped in `session-expired.error.ts` — concrete provider errors that\n * extend it (or set `isSessionExpired === true`) get retried without any\n * further wiring.\n */\nimport type {\n  AuthCredentials,\n  IAuthStrategy,\n} from '../protocols/auth-strategy';\nimport { isSessionExpiredError } from './session-expired.error';\n\nexport interface WithAuthRetryOptions {\n  /**\n   * Classifier that decides whether a thrown error is a session-expired\n   * signal worth retrying once with a fresh token. Defaults to the marker-\n   * interface check in `session-expired.error.ts`.\n   */\n  isSessionExpired?: (err: unknown) => boolean;\n}\n\nexport async function withAuthRetry<T>(\n  authStrategy: IAuthStrategy,\n  connectionId: string,\n  op: (credentials: AuthCredentials) => Promise<T>,\n  options: WithAuthRetryOptions = {},\n): Promise<T> {\n  const classify = options.isSessionExpired ?? isSessionExpiredError;\n\n  let creds = await authStrategy.resolve(connectionId);\n  try {\n    return await op(creds);\n  } catch (e) {\n    if (!classify(e)) throw e;\n    creds = await authStrategy.resolve(connectionId, { forceRefresh: true });\n    return op(creds);\n  }\n}\n"],"mappings":";;;;;AAiCA,eAAsB,cACpB,cACA,cACA,IACA,UAAgC,CAAC,GACrB;AACZ,QAAM,WAAW,QAAQ,oBAAoB;AAE7C,MAAI,QAAQ,MAAM,aAAa,QAAQ,YAAY;AACnD,MAAI;AACF,WAAO,MAAM,GAAG,KAAK;AAAA,EACvB,SAAS,GAAG;AACV,QAAI,CAAC,SAAS,CAAC,EAAG,OAAM;AACxB,YAAQ,MAAM,aAAa,QAAQ,cAAc,EAAE,cAAc,KAAK,CAAC;AACvE,WAAO,GAAG,KAAK;AAAA,EACjB;AACF;","names":[]}