@pattern-stack/codegen 0.15.1 → 0.15.2

package/dist/chunk-NXXDZ6ZF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/bridge/bridge-errors.ts"],"sourcesContent":["/**\n * Typed errors for the bridge subsystem (ADR-023 Phase 2, BRIDGE-2).\n *\n * All thrown by the three enforcement sites named in ADR-023 §Multi-tenancy:\n *   - `EventFlowService.publishAndStart` entry (BRIDGE-7)\n *   - `BridgeDeliveryHandler.handle` entry (BRIDGE-5)\n *   - `DrizzleBridgeDeliveryRepo.insertDelivery` pre-write (BRIDGE-4)\n *\n * Same shape as `runtime/subsystems/jobs/jobs-errors.ts` and\n * `runtime/subsystems/events/events-errors.ts` so consumers can catch them\n * with the same exception-filter pattern across all three subsystems.\n */\n\n/**\n * Thrown when `BridgeModule` was configured with `multiTenant: true` but\n * the caller did not pass a `tenantId` at one of the three enforcement\n * sites listed above.\n *\n * **Strict enforcement rationale (mirrors JOB-8 / SYNC-6 stance, locked\n * 2026-04-18 for jobs; same rationale applies here).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship;\n * surfacing the misuse loudly at the call site (rather than silently\n * defaulting to `null` or to \"the last tenant seen\") prevents both\n * accidental global writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   work (e.g. a system housekeeping event with no owning tenant). The\n *   `bridge_delivery` row is persisted with `tenant_id = NULL`.\n *\n * The `callSite` constructor argument names which of the three enforcement\n * sites threw — review reports and ops dashboards rely on a stable site\n * name, so use the canonical strings: `'EventFlowService.publishAndStart'`,\n * `'BridgeDeliveryHandler.handle'`,\n * `'DrizzleBridgeDeliveryRepo.insertDelivery'`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly callSite: string) {\n    super(\n      `MissingTenantIdError: BridgeModule was configured with ` +\n        `multiTenant=true but ${callSite} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Synthetic error thrown by `MemoryBridgeDeliveryRepo.insertDelivery` when\n * a duplicate `(event_id, trigger_id)` insert hits the simulated UNIQUE\n * constraint (BRIDGE-3).\n *\n * Carries a `constraint` field equal to the Drizzle constraint name\n * declared in BRIDGE-1's schema (`uq_bridge_delivery_event_trigger`) so\n * call sites can branch on the same discriminator regardless of which\n * backend is wired up. This matters because ADR-023 explicitly leans on\n * the constraint as the dedup mechanism in two places — outbox replay\n * and `publishAndStart` Case B — and BRIDGE-4 / BRIDGE-7 will share a\n * type-check path with BRIDGE-3-driven tests.\n *\n * The Drizzle backend (BRIDGE-4) does NOT throw this error: it uses\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING RETURNING id`\n * per the BRIDGE-4 spec recommendation, so collisions surface as an empty\n * result set rather than an exception. The error exists so the memory\n * backend can faithfully model the \"duplicate raises\" behaviour for tests\n * that want to assert the constraint actually fires.\n */\n/**\n * Thrown by `BridgeModule.onModuleInit` when `JobWorkerModule` is wired\n * alongside the bridge but its active `pools` list does not include one\n * or more of the three reserved bridge pools (`events_inbound`,\n * `events_change`, `events_outbound`).\n *\n * Without a worker polling those pools, the wrapper `job_run` rows the\n * outbox drain inserts (BRIDGE-4) sit `pending` forever — a silent\n * footgun where `eventFlow.publish(...)` returns success but no user\n * job ever spawns. The boot-time check converts that into a fail-fast.\n *\n * Operators can either (a) add `...BRIDGE_RESERVED_POOLS` to their\n * `JobWorkerModule.forRoot({ pools })` configuration so the same\n * process polls the reserved pools, or (b) run a separate worker\n * process per reserved pool for lane isolation (ADR-022 §Pool\n * isolation).\n */\nexport class BridgeReservedPoolsNotPolledError extends Error {\n  override readonly name = 'BridgeReservedPoolsNotPolledError';\n  constructor(public readonly missingPools: readonly string[]) {\n    super(\n      `BridgeModule loaded but JobWorkerModule is not polling reserved ` +\n        `pool '${missingPools[0]}'. Add ...BRIDGE_RESERVED_POOLS to your ` +\n        `JobWorkerModule.forRoot({ pools }) configuration. Missing pools: ` +\n        `${missingPools.join(', ')}. (Bridge-fanout wrappers will sit ` +\n        `pending forever without these pollers.)`,\n    );\n  }\n}\n\nexport class UniqueConstraintError extends Error {\n  override readonly name = 'UniqueConstraintError';\n  constructor(\n    public readonly constraint: string,\n    public readonly eventId: string,\n    public readonly triggerId: string,\n  ) {\n    super(\n      `UniqueConstraintError: duplicate insert into bridge_delivery for ` +\n        `(event_id='${eventId}', trigger_id='${triggerId}') — violates ` +\n        `constraint '${constraint}'.`,\n    );\n  }\n}\n"],"mappings":";AAoCO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,UAAkB;AAC5C;AAAA,MACE,+EAC0B,QAAQ;AAAA,IAGpC;AAN0B;AAAA,EAO5B;AAAA,EAP4B;AAAA,EADV,OAAO;AAS3B;AAuCO,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAE3D,YAA4B,cAAiC;AAC3D;AAAA,MACE,yEACW,aAAa,CAAC,CAAC,4GAErB,aAAa,KAAK,IAAI,CAAC;AAAA,IAE9B;AAP0B;AAAA,EAQ5B;AAAA,EAR4B;AAAA,EADV,OAAO;AAU3B;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAE/C,YACkB,YACA,SACA,WAChB;AACA;AAAA,MACE,+EACgB,OAAO,kBAAkB,SAAS,kCACjC,UAAU;AAAA,IAC7B;AARgB;AACA;AACA;AAAA,EAOlB;AAAA,EATkB;AAAA,EACA;AAAA,EACA;AAAA,EAJA,OAAO;AAY3B;","names":[]}

package/dist/chunk-NYBCQZC7.js

@@ -0,0 +1,11 @@
+import {
+  tokenKey
+} from "./chunk-GYGNEQSC.js";
+
+// runtime/subsystems/storage/storage.tokens.ts
+var STORAGE = Symbol.for(tokenKey("storage", "storage"));
+
+export {
+  STORAGE
+};
+//# sourceMappingURL=chunk-NYBCQZC7.js.map

package/dist/chunk-NYBCQZC7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/storage/storage.tokens.ts"],"sourcesContent":["/**\n * Injection token for the storage service.\n *\n * Usage in use cases:\n * ```typescript\n * constructor(@Inject(STORAGE) private readonly storage: IStorageService) {}\n * ```\n *\n * ADR-037: namespaced `Symbol.for(...)` key (via `tokenKey()`) so the token matches\n * by value across import boundaries (package vs vendored runtime copy).\n */\nimport { tokenKey } from '../token-key';\n\nexport const STORAGE = Symbol.for(tokenKey('storage', 'storage'));\n"],"mappings":";;;;;AAaO,IAAM,UAAU,OAAO,IAAI,SAAS,WAAW,SAAS,CAAC;","names":[]}

package/dist/chunk-OFRRBC7M.js

@@ -0,0 +1,78 @@
+// runtime/subsystems/events/domain-events.schema.ts
+import {
+  check,
+  index,
+  jsonb,
+  pgTable,
+  text,
+  timestamp,
+  uuid
+} from "drizzle-orm/pg-core";
+import { sql } from "drizzle-orm";
+var domainEvents = pgTable(
+  "domain_events",
+  {
+    id: uuid("id").primaryKey(),
+    type: text("type").notNull(),
+    aggregateId: text("aggregate_id").notNull(),
+    aggregateType: text("aggregate_type").notNull(),
+    payload: jsonb("payload").notNull().$type(),
+    occurredAt: timestamp("occurred_at", { withTimezone: true }).notNull(),
+    processedAt: timestamp("processed_at", { withTimezone: true }),
+    /** Lifecycle status: pending | processed | failed */
+    status: text("status").notNull().default("pending"),
+    /** Error message from the last failed dispatch attempt. */
+    error: text("error"),
+    metadata: jsonb("metadata").$type(),
+    /** Routing pool (e.g. `events_inbound`, `events_change`, `events_outbound`). Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */
+    pool: text("pool"),
+    /** Routing direction: `inbound` | `change` | `outbound`. Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */
+    direction: text("direction"),
+    /**
+     * Event tier: `'domain'` (default) or `'audit'`. Audit-tier rows are
+     * observability-only and have null `pool`/`direction` by construction —
+     * enforced by the `domain_events_tier_routing_check` CHECK constraint
+     * declared below. (AUDIT-1)
+     */
+    tier: text("tier").notNull().default("domain"),
+    // conditional: emitted only when events.multi_tenant: true
+    tenantId: text("tenant_id")
+  },
+  (t) => ({
+    /** Polling drain filter (existing — promoted from comment to declaration in EVT-1). */
+    idxDomainEventsStatusOccurredAt: index("idx_domain_events_status_occurred_at").on(
+      t.status,
+      t.occurredAt
+    ),
+    /** Event replay per aggregate (existing — promoted from comment to declaration in EVT-1). */
+    idxDomainEventsAggregate: index("idx_domain_events_aggregate").on(
+      t.aggregateId,
+      t.aggregateType
+    ),
+    /** Per-pool drain filter (EVT-1). Enables DrizzleEventBus to drain a single pool without scanning all events. */
+    idxDomainEventsPoolStatusOccurredAt: index(
+      "idx_domain_events_pool_status_occurred_at"
+    ).on(t.pool, t.status, t.occurredAt),
+    /** Per-tier filter (AUDIT-1). Backs the observability viewer's tier toggle. */
+    idxDomainEventsTierStatusOccurredAt: index(
+      "idx_domain_events_tier_status_occurred_at"
+    ).on(t.tier, t.status, t.occurredAt),
+    /**
+     * Tier ↔ routing-fields invariant (AUDIT-1):
+     *   - `tier` is one of `'domain' | 'audit'`.
+     *   - `tier='audit'` ⇔ `pool IS NULL AND direction IS NULL`.
+     *   - `tier='domain'` ⇒ `pool` and `direction` are populated (the
+     *     DrizzleEventBus inserts always supply them; the bus stamps them
+     *     in AUDIT-3).
+     */
+    tierRoutingCheck: check(
+      "domain_events_tier_routing_check",
+      sql`${t.tier} in ('domain','audit') AND ((${t.tier} = 'audit') = (${t.pool} is null and ${t.direction} is null))`
+    )
+  })
+);
+
+export {
+  domainEvents
+};
+//# sourceMappingURL=chunk-OFRRBC7M.js.map

package/dist/chunk-OFRRBC7M.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/events/domain-events.schema.ts"],"sourcesContent":["/**\n * Drizzle schema for the domain_events outbox table.\n *\n * This table backs the DrizzleEventBus. Events are inserted within the\n * same database transaction as the domain write (outbox pattern). A\n * polling process reads unprocessed rows and dispatches to subscribers.\n *\n * First-class routing columns (EVT-1):\n *   - `pool`       — populated by DrizzleEventBus.publish() (EVT-4); enables\n *                    pool-filtered drain queries without unpacking metadata JSON.\n *                    NULL when `tier='audit'` (audit events are not routed).\n *   - `direction`  — `inbound` | `change` | `outbound`; mirrors the routing\n *                    dimension used by jobs' reserved `events_inbound` /\n *                    `events_change` / `events_outbound` pools.\n *                    NULL when `tier='audit'`.\n *   - `tenant_id`  — conditional: emitted only when `events.multi_tenant: true`\n *                    in `codegen.config.yaml`. The runtime source declares it\n *                    unconditionally; EVT-8's scaffold template handles the\n *                    config-driven include/exclude.\n *\n * Audit-tier column (AUDIT-1):\n *   - `tier`       — `'domain'` | `'audit'`. Defaults to `'domain'`. Audit-tier\n *                    rows are observability-only (subscribers may observe but\n *                    the bridge MUST NOT spawn jobs from them); they have null\n *                    `pool` and `direction` by construction. The CHECK\n *                    constraint `domain_events_tier_routing_check` enforces\n *                    `tier='audit' ⇔ (pool IS NULL AND direction IS NULL)`.\n *\n * The `metadata` JSON column continues to carry these values for protocol\n * stability; the first-class columns are an optimization for drain filtering.\n *\n * Indexes (declared below in the index callback):\n *   - (status, occurred_at)             — polling drain filter\n *   - (aggregate_id, aggregate_type)    — event replay per aggregate\n *   - (pool, status, occurred_at)       — per-pool drain filter (EVT-1)\n *   - (tier, status, occurred_at)       — per-tier filter for the observability\n *                                          viewer's tier toggle (AUDIT-1).\n */\nimport {\n  check,\n  index,\n  jsonb,\n  pgTable,\n  text,\n  timestamp,\n  uuid,\n} from 'drizzle-orm/pg-core';\nimport { sql } from 'drizzle-orm';\nimport type { InferSelectModel } from 'drizzle-orm';\n\nexport const domainEvents = pgTable(\n  'domain_events',\n  {\n    id: uuid('id').primaryKey(),\n    type: text('type').notNull(),\n    aggregateId: text('aggregate_id').notNull(),\n    aggregateType: text('aggregate_type').notNull(),\n    payload: jsonb('payload').notNull().$type<Record<string, unknown>>(),\n    occurredAt: timestamp('occurred_at', { withTimezone: true }).notNull(),\n    processedAt: timestamp('processed_at', { withTimezone: true }),\n    /** Lifecycle status: pending | processed | failed */\n    status: text('status').notNull().default('pending'),\n    /** Error message from the last failed dispatch attempt. */\n    error: text('error'),\n    metadata: jsonb('metadata').$type<Record<string, unknown>>(),\n    /** Routing pool (e.g. `events_inbound`, `events_change`, `events_outbound`). Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */\n    pool: text('pool'),\n    /** Routing direction: `inbound` | `change` | `outbound`. Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */\n    direction: text('direction'),\n    /**\n     * Event tier: `'domain'` (default) or `'audit'`. Audit-tier rows are\n     * observability-only and have null `pool`/`direction` by construction —\n     * enforced by the `domain_events_tier_routing_check` CHECK constraint\n     * declared below. (AUDIT-1)\n     */\n    tier: text('tier').notNull().default('domain'),\n    // conditional: emitted only when events.multi_tenant: true\n    tenantId: text('tenant_id'),\n  },\n  (t) => ({\n    /** Polling drain filter (existing — promoted from comment to declaration in EVT-1). */\n    idxDomainEventsStatusOccurredAt: index('idx_domain_events_status_occurred_at').on(\n      t.status,\n      t.occurredAt,\n    ),\n    /** Event replay per aggregate (existing — promoted from comment to declaration in EVT-1). */\n    idxDomainEventsAggregate: index('idx_domain_events_aggregate').on(\n      t.aggregateId,\n      t.aggregateType,\n    ),\n    /** Per-pool drain filter (EVT-1). Enables DrizzleEventBus to drain a single pool without scanning all events. */\n    idxDomainEventsPoolStatusOccurredAt: index(\n      'idx_domain_events_pool_status_occurred_at',\n    ).on(t.pool, t.status, t.occurredAt),\n    /** Per-tier filter (AUDIT-1). Backs the observability viewer's tier toggle. */\n    idxDomainEventsTierStatusOccurredAt: index(\n      'idx_domain_events_tier_status_occurred_at',\n    ).on(t.tier, t.status, t.occurredAt),\n    /**\n     * Tier ↔ routing-fields invariant (AUDIT-1):\n     *   - `tier` is one of `'domain' | 'audit'`.\n     *   - `tier='audit'` ⇔ `pool IS NULL AND direction IS NULL`.\n     *   - `tier='domain'` ⇒ `pool` and `direction` are populated (the\n     *     DrizzleEventBus inserts always supply them; the bus stamps them\n     *     in AUDIT-3).\n     */\n    tierRoutingCheck: check(\n      'domain_events_tier_routing_check',\n      sql`${t.tier} in ('domain','audit') AND ((${t.tier} = 'audit') = (${t.pool} is null and ${t.direction} is null))`,\n    ),\n  }),\n);\n\nexport type DomainEventRecord = InferSelectModel<typeof domainEvents>;\n"],"mappings":";AAsCA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW;AAGb,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW;AAAA,IAC1B,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA,IAC1C,eAAe,KAAK,gBAAgB,EAAE,QAAQ;AAAA,IAC9C,SAAS,MAAM,SAAS,EAAE,QAAQ,EAAE,MAA+B;AAAA,IACnE,YAAY,UAAU,eAAe,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ;AAAA,IACrE,aAAa,UAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;AAAA;AAAA,IAE7D,QAAQ,KAAK,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA;AAAA,IAElD,OAAO,KAAK,OAAO;AAAA,IACnB,UAAU,MAAM,UAAU,EAAE,MAA+B;AAAA;AAAA,IAE3D,MAAM,KAAK,MAAM;AAAA;AAAA,IAEjB,WAAW,KAAK,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO3B,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,QAAQ,QAAQ;AAAA;AAAA,IAE7C,UAAU,KAAK,WAAW;AAAA,EAC5B;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,iCAAiC,MAAM,sCAAsC,EAAE;AAAA,MAC7E,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,0BAA0B,MAAM,6BAA6B,EAAE;AAAA,MAC7D,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,qCAAqC;AAAA,MACnC;AAAA,IACF,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;AAAA;AAAA,IAEnC,qCAAqC;AAAA,MACnC;AAAA,IACF,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASnC,kBAAkB;AAAA,MAChB;AAAA,MACA,MAAM,EAAE,IAAI,gCAAgC,EAAE,IAAI,kBAAkB,EAAE,IAAI,gBAAgB,EAAE,SAAS;AAAA,IACvG;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-OGIZXGPY.js

@@ -0,0 +1,222 @@
+import {
+  assertTenantId
+} from "./chunk-MZ6GV4YF.js";
+import {
+  INTEGRATION_CHANGE_SOURCE,
+  INTEGRATION_CURSOR_STORE,
+  INTEGRATION_FIELD_DIFFER,
+  INTEGRATION_MULTI_TENANT,
+  INTEGRATION_RUN_RECORDER,
+  INTEGRATION_SINK
+} from "./chunk-S7C6TIIF.js";
+import {
+  __decorateClass,
+  __decorateParam
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/integration/execute-integration.use-case.ts
+import { Inject, Injectable, Logger, Optional } from "@nestjs/common";
+var ExecuteIntegrationUseCase = class {
+  constructor(source, cursors, differ, sink, recorder, multiTenant = false) {
+    this.source = source;
+    this.cursors = cursors;
+    this.differ = differ;
+    this.sink = sink;
+    this.recorder = recorder;
+    this.multiTenant = multiTenant;
+  }
+  source;
+  cursors;
+  differ;
+  sink;
+  recorder;
+  multiTenant;
+  logger = new Logger(ExecuteIntegrationUseCase.name);
+  async execute(input) {
+    assertTenantId(input.tenantId, {
+      multiTenant: this.multiTenant,
+      operation: "execute"
+    });
+    const source = input.sourceOverride ?? this.source;
+    const startedAt = Date.now();
+    const cursorBefore = await this.cursors.get(input.subscription.id, input.tenantId);
+    const { id: runId } = await this.recorder.startRun({
+      subscriptionId: input.subscription.id,
+      direction: input.direction,
+      action: input.action,
+      cursorBefore,
+      tenantId: input.tenantId
+    });
+    let recordsFound = 0;
+    let recordsProcessed = 0;
+    let recordsFailed = 0;
+    let latestCursor = cursorBefore;
+    let cursorAdvanced = false;
+    let runError = null;
+    let status = "no_changes";
+    try {
+      for await (const change of source.listChanges(input.subscription, cursorBefore)) {
+        recordsFound++;
+        latestCursor = change.cursor;
+        cursorAdvanced = true;
+        try {
+          await this.processChange(runId, input, change);
+          recordsProcessed++;
+        } catch (err) {
+          recordsFailed++;
+          const message = err instanceof Error ? err.message : String(err);
+          this.logger.warn(
+            `integration item failed: subscription=${input.subscription.id} externalId=${change.externalId}: ${message}`
+          );
+          await this.recorder.recordItem({
+            integrationRunId: runId,
+            entityType: input.subscription.domain,
+            externalId: change.externalId,
+            operation: change.operation === "deleted" ? "deleted" : "updated",
+            status: "failed",
+            changedFields: {},
+            error: message,
+            tenantId: input.tenantId
+          });
+        }
+      }
+      if (recordsFailed > 0 && recordsProcessed === 0 && recordsFound > 0) {
+        status = "failed";
+        runError = `all ${recordsFailed} records failed`;
+      } else if (recordsFound === 0) {
+        status = "no_changes";
+      } else {
+        status = "success";
+      }
+    } catch (err) {
+      status = "failed";
+      runError = err instanceof Error ? err.message : String(err);
+      this.logger.error(
+        `integration source failed: subscription=${input.subscription.id}: ${runError}`
+      );
+    }
+    if (cursorAdvanced && latestCursor !== null && latestCursor !== void 0) {
+      try {
+        await this.cursors.put(input.subscription.id, latestCursor, input.tenantId);
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        this.logger.error(
+          `cursor put failed: subscription=${input.subscription.id}: ${message}`
+        );
+        if (status !== "failed") {
+          status = "failed";
+          runError = `cursor put failed: ${message}`;
+        }
+      }
+    }
+    const durationMs = Date.now() - startedAt;
+    await this.recorder.completeRun(runId, {
+      status,
+      recordsFound,
+      recordsProcessed,
+      cursorAfter: cursorAdvanced ? latestCursor : cursorBefore,
+      durationMs,
+      error: runError
+    });
+    return {
+      runId,
+      status,
+      recordsFound,
+      recordsProcessed,
+      recordsFailed,
+      cursorBefore,
+      cursorAfter: cursorAdvanced ? latestCursor : cursorBefore,
+      durationMs,
+      error: runError
+    };
+  }
+  async processChange(runId, input, change) {
+    if (change.operation === "deleted") {
+      const result = await this.sink.softDeleteByExternalId(
+        input.userId,
+        change.externalId
+      );
+      await this.recorder.recordItem({
+        integrationRunId: runId,
+        entityType: input.subscription.domain,
+        externalId: change.externalId,
+        localId: result?.id ?? null,
+        operation: result ? "deleted" : "noop",
+        status: "success",
+        changedFields: {},
+        tenantId: input.tenantId
+      });
+      return;
+    }
+    const existing = await this.sink.findByExternalId(
+      input.userId,
+      change.externalId
+    );
+    const diff = this.differ.diff(
+      existing,
+      change.record,
+      change.providerChangedFields
+    );
+    if (diff === "noop") {
+      if (!this.sink.reprojectsOnNoop) {
+        await this.recorder.recordItem({
+          integrationRunId: runId,
+          entityType: input.subscription.domain,
+          externalId: change.externalId,
+          localId: null,
+          operation: "noop",
+          status: "success",
+          changedFields: {},
+          tenantId: input.tenantId
+        });
+        return;
+      }
+      const { id: noopLocalId } = await this.sink.upsertByExternalId(
+        input.userId,
+        change.record,
+        input.provider
+      );
+      await this.recorder.recordItem({
+        integrationRunId: runId,
+        entityType: input.subscription.domain,
+        externalId: change.externalId,
+        localId: noopLocalId,
+        operation: "noop",
+        status: "success",
+        changedFields: {},
+        tenantId: input.tenantId
+      });
+      return;
+    }
+    const { id: localId } = await this.sink.upsertByExternalId(
+      input.userId,
+      change.record,
+      input.provider
+    );
+    await this.recorder.recordItem({
+      integrationRunId: runId,
+      entityType: input.subscription.domain,
+      externalId: change.externalId,
+      localId,
+      operation: existing === null ? "created" : "updated",
+      status: "success",
+      changedFields: diff,
+      tenantId: input.tenantId
+    });
+  }
+};
+ExecuteIntegrationUseCase = __decorateClass([
+  Injectable(),
+  __decorateParam(0, Inject(INTEGRATION_CHANGE_SOURCE)),
+  __decorateParam(1, Inject(INTEGRATION_CURSOR_STORE)),
+  __decorateParam(2, Inject(INTEGRATION_FIELD_DIFFER)),
+  __decorateParam(3, Inject(INTEGRATION_SINK)),
+  __decorateParam(4, Inject(INTEGRATION_RUN_RECORDER)),
+  __decorateParam(5, Optional()),
+  __decorateParam(5, Inject(INTEGRATION_MULTI_TENANT))
+], ExecuteIntegrationUseCase);
+
+export {
+  ExecuteIntegrationUseCase
+};
+//# sourceMappingURL=chunk-OGIZXGPY.js.map

package/dist/chunk-OGIZXGPY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/integration/execute-integration.use-case.ts"],"sourcesContent":["/**\n * ExecuteIntegrationUseCase — the generic integration orchestrator (SYNC-5).\n *\n * One class. Reused across every `(provider, detection-mode, canonical-entity)`\n * tuple. Parameterized over `T` so canonical records stay typed end-to-end.\n *\n * Flow per run:\n *\n *   1. `recorder.startRun(...)` — opens a `integration_runs` row in 'running'.\n *   2. for each change yielded by `source.listChanges(subscription, cursorBefore)`:\n *        a. differ.diff(existing, incoming) → 'noop' short-circuits to\n *           a noop audit row (no sink write).\n *        b. sink.upsertByExternalId / softDeleteByExternalId → records\n *           the local id on the audit row.\n *        c. per-item try/catch — a failed item increments the failed\n *           counter and records `status: 'failed'` with `error`, but\n *           does NOT abort the run.\n *        d. advance `latestCursor = change.cursor` as the iterator moves.\n *   3. `cursors.put(subscription.id, latestCursor)` when the loop completes\n *      AND at least one cursor advance happened. On exceptions from the\n *      source iterator (auth expiry, network error), we persist the\n *      last-good cursor so the next run resumes from the last known\n *      successful position.\n *   4. `finally { recorder.completeRun(...) }` — always terminates the run.\n *\n * Loopback suppression — when a consumer's writes echo back on the next\n * inbound poll/CDC/webhook — is composed into the source's middleware\n * chain via `createLoopbackMiddleware(store)` (#226-5 / ADR-033). The\n * orchestrator no longer special-cases echoes: middleware drops them\n * before they reach this loop. Consumers that don't have outbound\n * writeback paths simply omit the middleware.\n *\n * ## Generics\n *\n * - `T` = canonical record shape from the adapter side. Same `T` flows\n *   through `IChangeSource<T>`, `IFieldDiffer<T>`, `IIntegrationSink<T>`.\n *\n * ## No CRM bleed\n *\n * Per the SYNC-5 issue's extraction notes (HS-9 finding), this orchestrator\n * is strictly provider-agnostic:\n *   - `entityType` is `string` throughout; no `'opportunity' | 'account' | ...`\n *     narrowing leaks into the use case\n *   - the upstream consumer's `IntegrationRunRecorderService` class injection replaced with the\n *     `IIntegrationRunRecorder` protocol (backend lands in SYNC-4)\n */\nimport { Inject, Injectable, Logger, Optional } from '@nestjs/common';\nimport type { IChangeSource, Change } from './integration-change-source.protocol';\nimport type { ICursorStore } from './integration-cursor-store.protocol';\nimport type { IFieldDiffer, FieldDiff } from './integration-field-diff.protocol';\nimport type { IIntegrationSink } from './integration-sink.protocol';\nimport type { IIntegrationRunRecorder } from './integration-run-recorder.protocol';\nimport { assertTenantId } from './integration-errors';\nimport {\n  INTEGRATION_CHANGE_SOURCE,\n  INTEGRATION_CURSOR_STORE,\n  INTEGRATION_FIELD_DIFFER,\n  INTEGRATION_MULTI_TENANT,\n  INTEGRATION_RUN_RECORDER,\n  INTEGRATION_SINK,\n} from './integration.tokens';\n\n// ============================================================================\n// Inputs + result\n// ============================================================================\n\nexport interface ExecuteIntegrationInput<T> {\n  /** The subscription whose cursor/identity frames this run. */\n  readonly subscription: {\n    readonly id: string;\n    readonly domain: string; // entityType — used on audit rows\n    readonly externalRef?: string | null;\n  };\n  /** Per-run user context; threaded through sink writes. */\n  readonly userId: string;\n  /** Provider label persisted on saved rows, e.g. `'salesforce-crm'`. */\n  readonly provider: string;\n  /** Run direction — almost always `'inbound'`. Reserved for writeback. */\n  readonly direction: 'inbound' | 'outbound';\n  /** Detection mode — maps 1:1 to `integration_runs.action`. */\n  readonly action: 'poll' | 'cdc' | 'webhook' | 'manual' | 'writeback';\n  /** Multi-tenant deployments pass the tenant id through. */\n  readonly tenantId?: string | null;\n  /**\n   * Optional override — inject a specific change source for this run when\n   * the DI-bound source is not the one to use (e.g. manual backfill with\n   * a custom cursor). Defaults to the DI-resolved `INTEGRATION_CHANGE_SOURCE`.\n   */\n  readonly sourceOverride?: IChangeSource<T>;\n}\n\nexport interface ExecuteIntegrationResult {\n  readonly runId: string;\n  readonly status: 'success' | 'no_changes' | 'failed';\n  readonly recordsFound: number;\n  readonly recordsProcessed: number;\n  readonly recordsFailed: number;\n  readonly cursorBefore: unknown | null;\n  readonly cursorAfter: unknown | null;\n  readonly durationMs: number;\n  readonly error?: string | null;\n}\n\n// ============================================================================\n// ExecuteIntegrationUseCase\n// ============================================================================\n\n@Injectable()\nexport class ExecuteIntegrationUseCase<T extends Record<string, unknown>> {\n  private readonly logger = new Logger(ExecuteIntegrationUseCase.name);\n\n  constructor(\n    @Inject(INTEGRATION_CHANGE_SOURCE) private readonly source: IChangeSource<T>,\n    @Inject(INTEGRATION_CURSOR_STORE) private readonly cursors: ICursorStore,\n    @Inject(INTEGRATION_FIELD_DIFFER) private readonly differ: IFieldDiffer<T>,\n    @Inject(INTEGRATION_SINK) private readonly sink: IIntegrationSink<T>,\n    @Inject(INTEGRATION_RUN_RECORDER) private readonly recorder: IIntegrationRunRecorder,\n    @Optional()\n    @Inject(INTEGRATION_MULTI_TENANT)\n    private readonly multiTenant: boolean = false,\n  ) {}\n\n  async execute(input: ExecuteIntegrationInput<T>): Promise<ExecuteIntegrationResult> {\n    // Defense-in-depth tenancy guard — fire BEFORE startRun so a rejected\n    // input never leaves a dangling `status=running` row. Backends also\n    // enforce (SYNC-4), but failing fast at the orchestrator boundary is\n    // cheaper for observability, metrics, and manual cleanup.\n    assertTenantId(input.tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'execute',\n    });\n\n    const source = input.sourceOverride ?? this.source;\n    const startedAt = Date.now();\n    const cursorBefore = await this.cursors.get(input.subscription.id, input.tenantId);\n\n    const { id: runId } = await this.recorder.startRun({\n      subscriptionId: input.subscription.id,\n      direction: input.direction,\n      action: input.action,\n      cursorBefore,\n      tenantId: input.tenantId,\n    });\n\n    let recordsFound = 0;\n    let recordsProcessed = 0;\n    let recordsFailed = 0;\n    let latestCursor: unknown | null = cursorBefore;\n    let cursorAdvanced = false;\n    let runError: string | null = null;\n    let status: 'success' | 'no_changes' | 'failed' = 'no_changes';\n\n    try {\n      for await (const change of source.listChanges(input.subscription, cursorBefore)) {\n        recordsFound++;\n        latestCursor = change.cursor;\n        cursorAdvanced = true;\n\n        try {\n          await this.processChange(runId, input, change);\n          recordsProcessed++;\n        } catch (err) {\n          recordsFailed++;\n          const message = err instanceof Error ? err.message : String(err);\n          this.logger.warn(\n            `integration item failed: subscription=${input.subscription.id} externalId=${change.externalId}: ${message}`,\n          );\n          await this.recorder.recordItem({\n            integrationRunId: runId,\n            entityType: input.subscription.domain,\n            externalId: change.externalId,\n            operation: change.operation === 'deleted' ? 'deleted' : 'updated',\n            status: 'failed',\n            changedFields: {},\n            error: message,\n            tenantId: input.tenantId,\n          });\n        }\n      }\n\n      if (recordsFailed > 0 && recordsProcessed === 0 && recordsFound > 0) {\n        // Every record we saw failed — call the run a failure, not a\n        // success. Partial success (some processed, some failed) still\n        // counts as 'success' so the cursor advances.\n        status = 'failed';\n        runError = `all ${recordsFailed} records failed`;\n      } else if (recordsFound === 0) {\n        status = 'no_changes';\n      } else {\n        status = 'success';\n      }\n    } catch (err) {\n      // Source iterator itself threw — cursor DOES NOT advance past the\n      // last-successful cursor. `latestCursor` still holds the last\n      // `change.cursor` we observed, which is the furthest we know to\n      // have delivered. Persist it (below) so next run resumes there.\n      status = 'failed';\n      runError = err instanceof Error ? err.message : String(err);\n      this.logger.error(\n        `integration source failed: subscription=${input.subscription.id}: ${runError}`,\n      );\n    }\n\n    // Persist cursor advance only when something actually moved. Never\n    // overwrite a valid cursor with `null` on a no-change run.\n    if (cursorAdvanced && latestCursor !== null && latestCursor !== undefined) {\n      try {\n        await this.cursors.put(input.subscription.id, latestCursor, input.tenantId);\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        this.logger.error(\n          `cursor put failed: subscription=${input.subscription.id}: ${message}`,\n        );\n        if (status !== 'failed') {\n          status = 'failed';\n          runError = `cursor put failed: ${message}`;\n        }\n      }\n    }\n\n    const durationMs = Date.now() - startedAt;\n\n    await this.recorder.completeRun(runId, {\n      status,\n      recordsFound,\n      recordsProcessed,\n      cursorAfter: cursorAdvanced ? latestCursor : cursorBefore,\n      durationMs,\n      error: runError,\n    });\n\n    return {\n      runId,\n      status,\n      recordsFound,\n      recordsProcessed,\n      recordsFailed,\n      cursorBefore,\n      cursorAfter: cursorAdvanced ? latestCursor : cursorBefore,\n      durationMs,\n      error: runError,\n    };\n  }\n\n  private async processChange(\n    runId: string,\n    input: ExecuteIntegrationInput<T>,\n    change: Change<T>,\n  ): Promise<void> {\n    // Deletion branch — no diff, no upsert; soft-delete via sink.\n    if (change.operation === 'deleted') {\n      const result = await this.sink.softDeleteByExternalId(\n        input.userId,\n        change.externalId,\n      );\n      await this.recorder.recordItem({\n        integrationRunId: runId,\n        entityType: input.subscription.domain,\n        externalId: change.externalId,\n        localId: result?.id ?? null,\n        operation: result ? 'deleted' : 'noop',\n        status: 'success',\n        changedFields: {},\n        tenantId: input.tenantId,\n      });\n      return;\n    }\n\n    // Create/update path — diff against local state, short-circuit on noop.\n    const existing = await this.sink.findByExternalId(\n      input.userId,\n      change.externalId,\n    );\n    const diff = this.differ.diff(\n      existing,\n      change.record,\n      change.providerChangedFields,\n    );\n\n    if (diff === 'noop') {\n      // Sinks that declare `reprojectsOnNoop` reproject side data the differ\n      // can't see (e.g. EAV field_values) — so fall through to the idempotent\n      // upsert instead of short-circuiting. The canonical state is unchanged,\n      // so the audit `operation` stays `'noop'`, but we capture the local id\n      // returned by the upsert. Sinks without the flag keep today's behavior.\n      if (!this.sink.reprojectsOnNoop) {\n        await this.recorder.recordItem({\n          integrationRunId: runId,\n          entityType: input.subscription.domain,\n          externalId: change.externalId,\n          localId: null,\n          operation: 'noop',\n          status: 'success',\n          changedFields: {},\n          tenantId: input.tenantId,\n        });\n        return;\n      }\n\n      const { id: noopLocalId } = await this.sink.upsertByExternalId(\n        input.userId,\n        change.record,\n        input.provider,\n      );\n      await this.recorder.recordItem({\n        integrationRunId: runId,\n        entityType: input.subscription.domain,\n        externalId: change.externalId,\n        localId: noopLocalId,\n        operation: 'noop',\n        status: 'success',\n        changedFields: {},\n        tenantId: input.tenantId,\n      });\n      return;\n    }\n\n    const { id: localId } = await this.sink.upsertByExternalId(\n      input.userId,\n      change.record,\n      input.provider,\n    );\n\n    await this.recorder.recordItem({\n      integrationRunId: runId,\n      entityType: input.subscription.domain,\n      externalId: change.externalId,\n      localId,\n      operation: existing === null ? 'created' : 'updated',\n      status: 'success',\n      changedFields: diff as FieldDiff,\n      tenantId: input.tenantId,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA8CA,SAAS,QAAQ,YAAY,QAAQ,gBAAgB;AA8D9C,IAAM,4BAAN,MAAmE;AAAA,EAGxE,YACsD,QACD,SACA,QACR,MACQ,UAGlC,cAAuB,OACxC;AARoD;AACD;AACA;AACR;AACQ;AAGlC;AAAA,EAChB;AAAA,EARmD;AAAA,EACD;AAAA,EACA;AAAA,EACR;AAAA,EACQ;AAAA,EAGlC;AAAA,EAVF,SAAS,IAAI,OAAO,0BAA0B,IAAI;AAAA,EAanE,MAAM,QAAQ,OAAsE;AAKlF,mBAAe,MAAM,UAAU;AAAA,MAC7B,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,SAAS,MAAM,kBAAkB,KAAK;AAC5C,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,eAAe,MAAM,KAAK,QAAQ,IAAI,MAAM,aAAa,IAAI,MAAM,QAAQ;AAEjF,UAAM,EAAE,IAAI,MAAM,IAAI,MAAM,KAAK,SAAS,SAAS;AAAA,MACjD,gBAAgB,MAAM,aAAa;AAAA,MACnC,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,UAAU,MAAM;AAAA,IAClB,CAAC;AAED,QAAI,eAAe;AACnB,QAAI,mBAAmB;AACvB,QAAI,gBAAgB;AACpB,QAAI,eAA+B;AACnC,QAAI,iBAAiB;AACrB,QAAI,WAA0B;AAC9B,QAAI,SAA8C;AAElD,QAAI;AACF,uBAAiB,UAAU,OAAO,YAAY,MAAM,cAAc,YAAY,GAAG;AAC/E;AACA,uBAAe,OAAO;AACtB,yBAAiB;AAEjB,YAAI;AACF,gBAAM,KAAK,cAAc,OAAO,OAAO,MAAM;AAC7C;AAAA,QACF,SAAS,KAAK;AACZ;AACA,gBAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,eAAK,OAAO;AAAA,YACV,yCAAyC,MAAM,aAAa,EAAE,eAAe,OAAO,UAAU,KAAK,OAAO;AAAA,UAC5G;AACA,gBAAM,KAAK,SAAS,WAAW;AAAA,YAC7B,kBAAkB;AAAA,YAClB,YAAY,MAAM,aAAa;AAAA,YAC/B,YAAY,OAAO;AAAA,YACnB,WAAW,OAAO,cAAc,YAAY,YAAY;AAAA,YACxD,QAAQ;AAAA,YACR,eAAe,CAAC;AAAA,YAChB,OAAO;AAAA,YACP,UAAU,MAAM;AAAA,UAClB,CAAC;AAAA,QACH;AAAA,MACF;AAEA,UAAI,gBAAgB,KAAK,qBAAqB,KAAK,eAAe,GAAG;AAInE,iBAAS;AACT,mBAAW,OAAO,aAAa;AAAA,MACjC,WAAW,iBAAiB,GAAG;AAC7B,iBAAS;AAAA,MACX,OAAO;AACL,iBAAS;AAAA,MACX;AAAA,IACF,SAAS,KAAK;AAKZ,eAAS;AACT,iBAAW,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC1D,WAAK,OAAO;AAAA,QACV,2CAA2C,MAAM,aAAa,EAAE,KAAK,QAAQ;AAAA,MAC/E;AAAA,IACF;AAIA,QAAI,kBAAkB,iBAAiB,QAAQ,iBAAiB,QAAW;AACzE,UAAI;AACF,cAAM,KAAK,QAAQ,IAAI,MAAM,aAAa,IAAI,cAAc,MAAM,QAAQ;AAAA,MAC5E,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,aAAK,OAAO;AAAA,UACV,mCAAmC,MAAM,aAAa,EAAE,KAAK,OAAO;AAAA,QACtE;AACA,YAAI,WAAW,UAAU;AACvB,mBAAS;AACT,qBAAW,sBAAsB,OAAO;AAAA,QAC1C;AAAA,MACF;AAAA,IACF;AAEA,UAAM,aAAa,KAAK,IAAI,IAAI;AAEhC,UAAM,KAAK,SAAS,YAAY,OAAO;AAAA,MACrC;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,iBAAiB,eAAe;AAAA,MAC7C;AAAA,MACA,OAAO;AAAA,IACT,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,aAAa,iBAAiB,eAAe;AAAA,MAC7C;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAc,cACZ,OACA,OACA,QACe;AAEf,QAAI,OAAO,cAAc,WAAW;AAClC,YAAM,SAAS,MAAM,KAAK,KAAK;AAAA,QAC7B,MAAM;AAAA,QACN,OAAO;AAAA,MACT;AACA,YAAM,KAAK,SAAS,WAAW;AAAA,QAC7B,kBAAkB;AAAA,QAClB,YAAY,MAAM,aAAa;AAAA,QAC/B,YAAY,OAAO;AAAA,QACnB,SAAS,QAAQ,MAAM;AAAA,QACvB,WAAW,SAAS,YAAY;AAAA,QAChC,QAAQ;AAAA,QACR,eAAe,CAAC;AAAA,QAChB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD;AAAA,IACF;AAGA,UAAM,WAAW,MAAM,KAAK,KAAK;AAAA,MAC/B,MAAM;AAAA,MACN,OAAO;AAAA,IACT;AACA,UAAM,OAAO,KAAK,OAAO;AAAA,MACvB;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,IACT;AAEA,QAAI,SAAS,QAAQ;AAMnB,UAAI,CAAC,KAAK,KAAK,kBAAkB;AAC/B,cAAM,KAAK,SAAS,WAAW;AAAA,UAC7B,kBAAkB;AAAA,UAClB,YAAY,MAAM,aAAa;AAAA,UAC/B,YAAY,OAAO;AAAA,UACnB,SAAS;AAAA,UACT,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,eAAe,CAAC;AAAA,UAChB,UAAU,MAAM;AAAA,QAClB,CAAC;AACD;AAAA,MACF;AAEA,YAAM,EAAE,IAAI,YAAY,IAAI,MAAM,KAAK,KAAK;AAAA,QAC1C,MAAM;AAAA,QACN,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AACA,YAAM,KAAK,SAAS,WAAW;AAAA,QAC7B,kBAAkB;AAAA,QAClB,YAAY,MAAM,aAAa;AAAA,QAC/B,YAAY,OAAO;AAAA,QACnB,SAAS;AAAA,QACT,WAAW;AAAA,QACX,QAAQ;AAAA,QACR,eAAe,CAAC;AAAA,QAChB,UAAU,MAAM;AAAA,MAClB,CAAC;AACD;AAAA,IACF;AAEA,UAAM,EAAE,IAAI,QAAQ,IAAI,MAAM,KAAK,KAAK;AAAA,MACtC,MAAM;AAAA,MACN,OAAO;AAAA,MACP,MAAM;AAAA,IACR;AAEA,UAAM,KAAK,SAAS,WAAW;AAAA,MAC7B,kBAAkB;AAAA,MAClB,YAAY,MAAM,aAAa;AAAA,MAC/B,YAAY,OAAO;AAAA,MACnB;AAAA,MACA,WAAW,aAAa,OAAO,YAAY;AAAA,MAC3C,QAAQ;AAAA,MACR,eAAe;AAAA,MACf,UAAU,MAAM;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAlOa,4BAAN;AAAA,EADN,WAAW;AAAA,EAKP,0BAAO,yBAAyB;AAAA,EAChC,0BAAO,wBAAwB;AAAA,EAC/B,0BAAO,wBAAwB;AAAA,EAC/B,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,wBAAwB;AAAA,EAC/B,4BAAS;AAAA,EACT,0BAAO,wBAAwB;AAAA,GAVvB;","names":[]}

package/dist/chunk-OKXZ63IA.js

@@ -0,0 +1,168 @@
+// runtime/subsystems/jobs/job-orchestration.schema.ts
+import {
+  pgEnum,
+  pgTable,
+  uuid,
+  text,
+  jsonb,
+  integer,
+  timestamp,
+  index,
+  uniqueIndex
+} from "drizzle-orm/pg-core";
+import { sql } from "drizzle-orm";
+var jobRunStatusEnum = pgEnum("job_run_status", [
+  "pending",
+  "running",
+  "waiting",
+  "completed",
+  "failed",
+  "timed_out",
+  "canceled"
+]);
+var jobStepKindEnum = pgEnum("job_step_kind", ["task"]);
+var jobStepStatusEnum = pgEnum("job_step_status", [
+  "pending",
+  "running",
+  "completed",
+  "failed",
+  "skipped"
+]);
+var collisionModeEnum = pgEnum("job_collision_mode", [
+  "queue",
+  "reject",
+  "replace"
+]);
+var replayFromEnum = pgEnum("job_replay_from", [
+  "scratch",
+  "last_step",
+  "last_checkpoint"
+]);
+var parentClosePolicyEnum = pgEnum("job_parent_close_policy", [
+  "terminate",
+  "cancel",
+  "abandon"
+]);
+var waitKindEnum = pgEnum("job_wait_kind", ["signal"]);
+var triggerSourceEnum = pgEnum("job_trigger_source", [
+  "manual",
+  "schedule",
+  "event",
+  "parent"
+]);
+var jobs = pgTable("job", {
+  type: text("type").primaryKey(),
+  version: integer("version").notNull().default(1),
+  pool: text("pool").notNull(),
+  scopeEntityType: text("scope_entity_type"),
+  retryPolicy: jsonb("retry_policy").notNull().$type(),
+  timeoutMs: integer("timeout_ms"),
+  concurrencyKeyTemplate: text("concurrency_key_template"),
+  collisionMode: collisionModeEnum("collision_mode").notNull().default("queue"),
+  dedupeKeyTemplate: text("dedupe_key_template"),
+  dedupeWindowMs: integer("dedupe_window_ms"),
+  priorityDefault: integer("priority_default").notNull().default(0),
+  replayFrom: replayFromEnum("replay_from").notNull().default("last_checkpoint"),
+  createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+});
+var jobRuns = pgTable(
+  "job_run",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    jobType: text("job_type").notNull().references(() => jobs.type),
+    jobVersion: integer("job_version").notNull(),
+    parentRunId: uuid("parent_run_id").references(() => jobRuns.id),
+    /**
+     * Service generates `id` client-side via randomUUID() and sets
+     * root_run_id = id for root runs (single INSERT, no self-FK race).
+     */
+    rootRunId: uuid("root_run_id").notNull(),
+    parentClosePolicy: parentClosePolicyEnum("parent_close_policy").notNull().default("terminate"),
+    scopeEntityType: text("scope_entity_type"),
+    scopeEntityId: text("scope_entity_id"),
+    tenantId: text("tenant_id"),
+    tags: jsonb("tags").notNull().default({}).$type(),
+    pool: text("pool").notNull(),
+    priority: integer("priority").notNull().default(0),
+    concurrencyKey: text("concurrency_key"),
+    dedupeKey: text("dedupe_key"),
+    status: jobRunStatusEnum("status").notNull().default("pending"),
+    input: jsonb("input").notNull().$type(),
+    output: jsonb("output").$type(),
+    error: jsonb("error").$type(),
+    triggerSource: triggerSourceEnum("trigger_source").notNull(),
+    triggerRef: text("trigger_ref"),
+    runAt: timestamp("run_at", { withTimezone: true }).notNull().defaultNow(),
+    startedAt: timestamp("started_at", { withTimezone: true }),
+    finishedAt: timestamp("finished_at", { withTimezone: true }),
+    claimedAt: timestamp("claimed_at", { withTimezone: true }),
+    attempts: integer("attempts").notNull().default(0),
+    // Phase 3 placeholder — see ADR-025
+    waitKind: waitKindEnum("wait_kind"),
+    // Phase 3 placeholder — see ADR-025
+    resumeToken: text("resume_token"),
+    // Phase 3 placeholder — see ADR-025
+    waitDeadline: timestamp("wait_deadline", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (t) => ({
+    /** Claim query: ORDER BY priority DESC, run_at ASC. */
+    idxJobRunClaim: index("idx_job_run_claim").on(t.status, t.pool, t.runAt),
+    /** Tree traversal / cascade cancel. */
+    idxJobRunRoot: index("idx_job_run_root").on(t.rootRunId),
+    /** listForScope query. */
+    idxJobRunScope: index("idx_job_run_scope").on(t.scopeEntityType, t.scopeEntityId),
+    /** Idempotency collapse — partial index. */
+    idxJobRunDedupe: index("idx_job_run_dedupe").on(t.jobType, t.dedupeKey).where(sql`${t.dedupeKey} IS NOT NULL`),
+    /** Collision check — partial index. */
+    idxJobRunConcurrency: index("idx_job_run_concurrency").on(t.concurrencyKey).where(
+      sql`${t.concurrencyKey} IS NOT NULL AND ${t.status} IN ('pending','running')`
+    )
+  })
+);
+var jobSteps = pgTable(
+  "job_step",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    jobRunId: uuid("job_run_id").notNull().references(() => jobRuns.id),
+    stepId: text("step_id").notNull(),
+    kind: jobStepKindEnum("kind").notNull().default("task"),
+    /**
+     * Monotonic within run. integer (max ~2B per run) is sufficient —
+     * downgraded from ADR-022's bigint; revisit only if a single run
+     * ever exceeds 2 billion steps.
+     */
+    seq: integer("seq").notNull(),
+    status: jobStepStatusEnum("status").notNull().default("pending"),
+    input: jsonb("input").$type(),
+    /** Memoised on success for replay. */
+    output: jsonb("output").$type(),
+    error: jsonb("error").$type(),
+    attempts: integer("attempts").notNull().default(0),
+    startedAt: timestamp("started_at", { withTimezone: true }),
+    finishedAt: timestamp("finished_at", { withTimezone: true })
+  },
+  (t) => ({
+    /** No duplicate step IDs per run. */
+    idxJobStepRunStep: uniqueIndex("idx_job_step_run_step").on(t.jobRunId, t.stepId),
+    /** Ordered timeline reads. */
+    idxJobStepTimeline: index("idx_job_step_timeline").on(t.jobRunId, t.seq)
+  })
+);
+
+export {
+  jobRunStatusEnum,
+  jobStepKindEnum,
+  jobStepStatusEnum,
+  collisionModeEnum,
+  replayFromEnum,
+  parentClosePolicyEnum,
+  waitKindEnum,
+  triggerSourceEnum,
+  jobs,
+  jobRuns,
+  jobSteps
+};
+//# sourceMappingURL=chunk-OKXZ63IA.js.map

package/dist/chunk-OKXZ63IA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/jobs/job-orchestration.schema.ts"],"sourcesContent":["/**\n * Drizzle schema for the job orchestration domain (ADR-022).\n *\n * Three tables model the lifecycle of a durable job:\n *   - `job`       — definitions keyed by handler type (e.g. 'onboarding').\n *   - `job_run`   — one row per attempt to execute a job; worker claims\n *                   rows directly via SELECT ... FOR UPDATE SKIP LOCKED.\n *   - `job_step`  — individual steps within a run; memoises output for replay.\n *\n * Phase 1 ships only this layer. There is no `job_queue` table, no executor\n * port — see ADR-022 and `.claude/skills/jobs/SKILL.md` for the rationale.\n */\nimport {\n  pgEnum,\n  pgTable,\n  uuid,\n  text,\n  jsonb,\n  integer,\n  timestamp,\n  index,\n  uniqueIndex,\n} from 'drizzle-orm/pg-core';\nimport { sql } from 'drizzle-orm';\nimport type { InferSelectModel } from 'drizzle-orm';\n\n// ─── Internal $type<> helpers ───────────────────────────────────────────────\n// Annotation types for jsonb columns only. JOB-2 defines the public protocol\n// types; these remain private to this file.\n\ntype RetryPolicy = {\n  attempts: number;\n  backoff: 'fixed' | 'exponential';\n  baseMs: number;\n  nonRetryableErrors?: string[];\n};\n\ntype JobRunError = {\n  message: string;\n  stack?: string;\n  retryable: boolean;\n  attempt: number;\n};\n\n// ─── Enums ──────────────────────────────────────────────────────────────────\n\nexport const jobRunStatusEnum = pgEnum('job_run_status', [\n  'pending',\n  'running',\n  'waiting',\n  'completed',\n  'failed',\n  'timed_out',\n  'canceled',\n]);\n\n// extended in ADR-027: tool_call | llm_call | wait | checkpoint | message\nexport const jobStepKindEnum = pgEnum('job_step_kind', ['task']);\n\nexport const jobStepStatusEnum = pgEnum('job_step_status', [\n  'pending',\n  'running',\n  'completed',\n  'failed',\n  'skipped',\n]);\n\nexport const collisionModeEnum = pgEnum('job_collision_mode', [\n  'queue',\n  'reject',\n  'replace',\n]);\n\nexport const replayFromEnum = pgEnum('job_replay_from', [\n  'scratch',\n  'last_step',\n  'last_checkpoint',\n]);\n\nexport const parentClosePolicyEnum = pgEnum('job_parent_close_policy', [\n  'terminate',\n  'cancel',\n  'abandon',\n]);\n\n// Phase 3 placeholder — see ADR-025\nexport const waitKindEnum = pgEnum('job_wait_kind', ['signal']);\n\n// Phase 2 may add more sources; requires Atlas migration\nexport const triggerSourceEnum = pgEnum('job_trigger_source', [\n  'manual',\n  'schedule',\n  'event',\n  'parent',\n]);\n\n// ─── job ────────────────────────────────────────────────────────────────────\n\nexport const jobs = pgTable('job', {\n  type: text('type').primaryKey(),\n  version: integer('version').notNull().default(1),\n  pool: text('pool').notNull(),\n  scopeEntityType: text('scope_entity_type'),\n  retryPolicy: jsonb('retry_policy').notNull().$type<RetryPolicy>(),\n  timeoutMs: integer('timeout_ms'),\n  concurrencyKeyTemplate: text('concurrency_key_template'),\n  collisionMode: collisionModeEnum('collision_mode').notNull().default('queue'),\n  dedupeKeyTemplate: text('dedupe_key_template'),\n  dedupeWindowMs: integer('dedupe_window_ms'),\n  priorityDefault: integer('priority_default').notNull().default(0),\n  replayFrom: replayFromEnum('replay_from').notNull().default('last_checkpoint'),\n  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n});\n\nexport type JobDefinitionRow = InferSelectModel<typeof jobs>;\n\n// ─── job_run ────────────────────────────────────────────────────────────────\n\nexport const jobRuns = pgTable(\n  'job_run',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    jobType: text('job_type').notNull().references(() => jobs.type),\n    jobVersion: integer('job_version').notNull(),\n    parentRunId: uuid('parent_run_id').references((): any => jobRuns.id),\n    /**\n     * Service generates `id` client-side via randomUUID() and sets\n     * root_run_id = id for root runs (single INSERT, no self-FK race).\n     */\n    rootRunId: uuid('root_run_id').notNull(),\n    parentClosePolicy: parentClosePolicyEnum('parent_close_policy')\n      .notNull()\n      .default('terminate'),\n    scopeEntityType: text('scope_entity_type'),\n    scopeEntityId: text('scope_entity_id'),\n    tenantId: text('tenant_id'),\n    tags: jsonb('tags').notNull().default({}).$type<Record<string, string>>(),\n    pool: text('pool').notNull(),\n    priority: integer('priority').notNull().default(0),\n    concurrencyKey: text('concurrency_key'),\n    dedupeKey: text('dedupe_key'),\n    status: jobRunStatusEnum('status').notNull().default('pending'),\n    input: jsonb('input').notNull().$type<Record<string, unknown>>(),\n    output: jsonb('output').$type<Record<string, unknown>>(),\n    error: jsonb('error').$type<JobRunError>(),\n    triggerSource: triggerSourceEnum('trigger_source').notNull(),\n    triggerRef: text('trigger_ref'),\n    runAt: timestamp('run_at', { withTimezone: true }).notNull().defaultNow(),\n    startedAt: timestamp('started_at', { withTimezone: true }),\n    finishedAt: timestamp('finished_at', { withTimezone: true }),\n    claimedAt: timestamp('claimed_at', { withTimezone: true }),\n    attempts: integer('attempts').notNull().default(0),\n    // Phase 3 placeholder — see ADR-025\n    waitKind: waitKindEnum('wait_kind'),\n    // Phase 3 placeholder — see ADR-025\n    resumeToken: text('resume_token'),\n    // Phase 3 placeholder — see ADR-025\n    waitDeadline: timestamp('wait_deadline', { withTimezone: true }),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n  },\n  (t) => ({\n    /** Claim query: ORDER BY priority DESC, run_at ASC. */\n    idxJobRunClaim: index('idx_job_run_claim').on(t.status, t.pool, t.runAt),\n    /** Tree traversal / cascade cancel. */\n    idxJobRunRoot: index('idx_job_run_root').on(t.rootRunId),\n    /** listForScope query. */\n    idxJobRunScope: index('idx_job_run_scope').on(t.scopeEntityType, t.scopeEntityId),\n    /** Idempotency collapse — partial index. */\n    idxJobRunDedupe: index('idx_job_run_dedupe')\n      .on(t.jobType, t.dedupeKey)\n      .where(sql`${t.dedupeKey} IS NOT NULL`),\n    /** Collision check — partial index. */\n    idxJobRunConcurrency: index('idx_job_run_concurrency')\n      .on(t.concurrencyKey)\n      .where(\n        sql`${t.concurrencyKey} IS NOT NULL AND ${t.status} IN ('pending','running')`,\n      ),\n  }),\n);\n\nexport type JobRunRow = InferSelectModel<typeof jobRuns>;\n\n// ─── job_step ───────────────────────────────────────────────────────────────\n\nexport const jobSteps = pgTable(\n  'job_step',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    jobRunId: uuid('job_run_id').notNull().references(() => jobRuns.id),\n    stepId: text('step_id').notNull(),\n    kind: jobStepKindEnum('kind').notNull().default('task'),\n    /**\n     * Monotonic within run. integer (max ~2B per run) is sufficient —\n     * downgraded from ADR-022's bigint; revisit only if a single run\n     * ever exceeds 2 billion steps.\n     */\n    seq: integer('seq').notNull(),\n    status: jobStepStatusEnum('status').notNull().default('pending'),\n    input: jsonb('input').$type<Record<string, unknown>>(),\n    /** Memoised on success for replay. */\n    output: jsonb('output').$type<Record<string, unknown>>(),\n    error: jsonb('error').$type<JobRunError>(),\n    attempts: integer('attempts').notNull().default(0),\n    startedAt: timestamp('started_at', { withTimezone: true }),\n    finishedAt: timestamp('finished_at', { withTimezone: true }),\n  },\n  (t) => ({\n    /** No duplicate step IDs per run. */\n    idxJobStepRunStep: uniqueIndex('idx_job_step_run_step').on(t.jobRunId, t.stepId),\n    /** Ordered timeline reads. */\n    idxJobStepTimeline: index('idx_job_step_timeline').on(t.jobRunId, t.seq),\n  }),\n);\n\nexport type JobStepRow = InferSelectModel<typeof jobSteps>;\n"],"mappings":";AAYA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW;AAuBb,IAAM,mBAAmB,OAAO,kBAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,kBAAkB,OAAO,iBAAiB,CAAC,MAAM,CAAC;AAExD,IAAM,oBAAoB,OAAO,mBAAmB;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,oBAAoB,OAAO,sBAAsB;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,iBAAiB,OAAO,mBAAmB;AAAA,EACtD;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,wBAAwB,OAAO,2BAA2B;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,eAAe,OAAO,iBAAiB,CAAC,QAAQ,CAAC;AAGvD,IAAM,oBAAoB,OAAO,sBAAsB;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,IAAM,OAAO,QAAQ,OAAO;AAAA,EACjC,MAAM,KAAK,MAAM,EAAE,WAAW;AAAA,EAC9B,SAAS,QAAQ,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,EAC/C,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,iBAAiB,KAAK,mBAAmB;AAAA,EACzC,aAAa,MAAM,cAAc,EAAE,QAAQ,EAAE,MAAmB;AAAA,EAChE,WAAW,QAAQ,YAAY;AAAA,EAC/B,wBAAwB,KAAK,0BAA0B;AAAA,EACvD,eAAe,kBAAkB,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,OAAO;AAAA,EAC5E,mBAAmB,KAAK,qBAAqB;AAAA,EAC7C,gBAAgB,QAAQ,kBAAkB;AAAA,EAC1C,iBAAiB,QAAQ,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,EAChE,YAAY,eAAe,aAAa,EAAE,QAAQ,EAAE,QAAQ,iBAAiB;AAAA,EAC7E,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,EAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAClF,CAAC;AAMM,IAAM,UAAU;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAAS,KAAK,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,KAAK,IAAI;AAAA,IAC9D,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,aAAa,KAAK,eAAe,EAAE,WAAW,MAAW,QAAQ,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKnE,WAAW,KAAK,aAAa,EAAE,QAAQ;AAAA,IACvC,mBAAmB,sBAAsB,qBAAqB,EAC3D,QAAQ,EACR,QAAQ,WAAW;AAAA,IACtB,iBAAiB,KAAK,mBAAmB;AAAA,IACzC,eAAe,KAAK,iBAAiB;AAAA,IACrC,UAAU,KAAK,WAAW;AAAA,IAC1B,MAAM,MAAM,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,MAA8B;AAAA,IACxE,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IACjD,gBAAgB,KAAK,iBAAiB;AAAA,IACtC,WAAW,KAAK,YAAY;AAAA,IAC5B,QAAQ,iBAAiB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC9D,OAAO,MAAM,OAAO,EAAE,QAAQ,EAAE,MAA+B;AAAA,IAC/D,QAAQ,MAAM,QAAQ,EAAE,MAA+B;AAAA,IACvD,OAAO,MAAM,OAAO,EAAE,MAAmB;AAAA,IACzC,eAAe,kBAAkB,gBAAgB,EAAE,QAAQ;AAAA,IAC3D,YAAY,KAAK,aAAa;AAAA,IAC9B,OAAO,UAAU,UAAU,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,IACxE,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAAA,IACzD,YAAY,UAAU,eAAe,EAAE,cAAc,KAAK,CAAC;AAAA,IAC3D,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAAA,IACzD,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA;AAAA,IAEjD,UAAU,aAAa,WAAW;AAAA;AAAA,IAElC,aAAa,KAAK,cAAc;AAAA;AAAA,IAEhC,cAAc,UAAU,iBAAiB,EAAE,cAAc,KAAK,CAAC;AAAA,IAC/D,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,IAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,EAClF;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,gBAAgB,MAAM,mBAAmB,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK;AAAA;AAAA,IAEvE,eAAe,MAAM,kBAAkB,EAAE,GAAG,EAAE,SAAS;AAAA;AAAA,IAEvD,gBAAgB,MAAM,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,aAAa;AAAA;AAAA,IAEhF,iBAAiB,MAAM,oBAAoB,EACxC,GAAG,EAAE,SAAS,EAAE,SAAS,EACzB,MAAM,MAAM,EAAE,SAAS,cAAc;AAAA;AAAA,IAExC,sBAAsB,MAAM,yBAAyB,EAClD,GAAG,EAAE,cAAc,EACnB;AAAA,MACC,MAAM,EAAE,cAAc,oBAAoB,EAAE,MAAM;AAAA,IACpD;AAAA,EACJ;AACF;AAMO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,UAAU,KAAK,YAAY,EAAE,QAAQ,EAAE,WAAW,MAAM,QAAQ,EAAE;AAAA,IAClE,QAAQ,KAAK,SAAS,EAAE,QAAQ;AAAA,IAChC,MAAM,gBAAgB,MAAM,EAAE,QAAQ,EAAE,QAAQ,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMtD,KAAK,QAAQ,KAAK,EAAE,QAAQ;AAAA,IAC5B,QAAQ,kBAAkB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC/D,OAAO,MAAM,OAAO,EAAE,MAA+B;AAAA;AAAA,IAErD,QAAQ,MAAM,QAAQ,EAAE,MAA+B;AAAA,IACvD,OAAO,MAAM,OAAO,EAAE,MAAmB;AAAA,IACzC,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IACjD,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAAA,IACzD,YAAY,UAAU,eAAe,EAAE,cAAc,KAAK,CAAC;AAAA,EAC7D;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,mBAAmB,YAAY,uBAAuB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM;AAAA;AAAA,IAE/E,oBAAoB,MAAM,uBAAuB,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;AAAA,EACzE;AACF;","names":[]}

package/dist/chunk-OSQRXVG2.js

@@ -0,0 +1,58 @@
+import {
+  AUTH_USER_CONTEXT
+} from "./chunk-6XY6ZMMD.js";
+import {
+  withRequester
+} from "./chunk-ZUKFQL6E.js";
+
+// runtime/subsystems/auth/middleware/requester-context.ts
+async function resolveRequesterContext(userContext, req) {
+  if (typeof userContext.resolveRequester === "function") {
+    const ctx = await userContext.resolveRequester(req);
+    return ctx?.userId ? ctx : void 0;
+  }
+  const userId = await userContext.getCurrentUserId(req);
+  return userId ? { userId, organizationId: null } : void 0;
+}
+function makeRequesterContextMiddleware(userContext, options = {}) {
+  const onUnresolved = options.onUnresolved ?? "unscoped";
+  return (req, _res, next) => {
+    resolveRequesterContext(userContext, req).then(
+      (ctx) => {
+        if (!ctx) {
+          next();
+          return;
+        }
+        withRequester(ctx, async () => {
+          next();
+        });
+      },
+      (err) => {
+        if (onUnresolved === "reject") {
+          next(err);
+          return;
+        }
+        next();
+      }
+    );
+  };
+}
+function installRequesterContext(app, options = {}) {
+  const userContext = app.get(AUTH_USER_CONTEXT, {
+    strict: false
+  });
+  if (!userContext) {
+    console.warn(
+      "[auth] installRequesterContext: AUTH_USER_CONTEXT is not bound \u2014 request scoping NOT installed. Provide an IUserContext under AUTH_USER_CONTEXT in your AppModule to enable ambient tenant scoping."
+    );
+    return;
+  }
+  app.use(makeRequesterContextMiddleware(userContext, options));
+}
+
+export {
+  resolveRequesterContext,
+  makeRequesterContextMiddleware,
+  installRequesterContext
+};
+//# sourceMappingURL=chunk-OSQRXVG2.js.map