@pattern-stack/codegen 0.15.1 → 0.15.3

package/dist/chunk-YPWODKD5.js

@@ -0,0 +1,184 @@
+import {
+  JOB_RUN_SERVICE
+} from "./chunk-BIO6F7YI.js";
+import {
+  EVENT_READ_PORT
+} from "./chunk-H5NH7KPE.js";
+import {
+  BRIDGE_DELIVERY_REPO
+} from "./chunk-4LH67P4U.js";
+import {
+  INTEGRATION_CURSOR_STORE,
+  INTEGRATION_RUN_RECORDER
+} from "./chunk-S7C6TIIF.js";
+import {
+  __decorateClass,
+  __decorateParam,
+  __publicField
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/observability/observability.service.ts
+import { Inject, Injectable, Optional } from "@nestjs/common";
+var MAX_TIMELINE_PAGES = 50;
+var ObservabilityService = class {
+  constructor(jobRuns, bridge, integrationRuns, cursors, events) {
+    this.jobRuns = jobRuns;
+    this.bridge = bridge;
+    this.integrationRuns = integrationRuns;
+    this.cursors = cursors;
+    this.events = events;
+  }
+  jobRuns;
+  bridge;
+  integrationRuns;
+  cursors;
+  events;
+  async getPoolDepths(tenantId) {
+    if (!this.jobRuns) return [];
+    return this.jobRuns.countByPoolAndStatus(tenantId);
+  }
+  async getRecentFailedJobs(limit, tenantId) {
+    if (!this.jobRuns) return [];
+    return this.jobRuns.listRecentFailed(limit, tenantId);
+  }
+  async getBridgeDeliveryHistogram(windowHours, tenantId) {
+    if (!this.bridge) return { ...ObservabilityService.EMPTY_HISTOGRAM };
+    return this.bridge.getStatusHistogram(windowHours, tenantId);
+  }
+  async getRecentIntegrationRuns(limit, subscriptionId, tenantId) {
+    if (!this.integrationRuns) return [];
+    return this.integrationRuns.listRecent(limit, subscriptionId, tenantId);
+  }
+  async getCursors(tenantId) {
+    if (!this.cursors) return [];
+    return this.cursors.listAll(tenantId);
+  }
+  async listJobRuns(query) {
+    if (!this.jobRuns) {
+      return { ...ObservabilityService.EMPTY_JOB_RUN_PAGE };
+    }
+    return this.jobRuns.listJobRuns(query);
+  }
+  async listEvents(query) {
+    if (!this.events) {
+      return { ...ObservabilityService.EMPTY_EVENT_PAGE };
+    }
+    return this.events.listEvents(query);
+  }
+  async getCorrelationTimeline(rootRunId, tenantId) {
+    const runs = await this.collectRuns(rootRunId, tenantId);
+    const events = await this.collectEvents(rootRunId, tenantId);
+    const entries = [
+      ...runs.map(
+        (run) => ({
+          kind: "job_run",
+          at: run.createdAt,
+          run
+        })
+      ),
+      ...events.map(
+        (event) => ({
+          kind: "event",
+          at: event.occurredAt,
+          event
+        })
+      )
+    ];
+    entries.sort((a, b) => {
+      const dt = a.at.getTime() - b.at.getTime();
+      if (dt !== 0) return dt;
+      if (a.kind === b.kind) return 0;
+      return a.kind === "job_run" ? -1 : 1;
+    });
+    const startedAt = entries.length > 0 ? entries[0].at : null;
+    const lastActivityAt = entries.length > 0 ? entries[entries.length - 1].at : null;
+    return {
+      rootRunId,
+      entries,
+      summary: {
+        runCount: runs.length,
+        eventCount: events.length,
+        startedAt,
+        lastActivityAt
+      }
+    };
+  }
+  /**
+   * Drain every `job_run` sharing `rootRunId` by walking the keyset cursor.
+   * Empty when the jobs subsystem is absent.
+   */
+  async collectRuns(rootRunId, tenantId) {
+    if (!this.jobRuns) return [];
+    const out = [];
+    let cursor;
+    for (let page = 0; page < MAX_TIMELINE_PAGES; page += 1) {
+      const result = await this.jobRuns.listJobRuns({
+        rootRunId,
+        tenantId,
+        cursor
+      });
+      out.push(...result.items);
+      if (!result.nextCursor) break;
+      cursor = result.nextCursor;
+    }
+    return out;
+  }
+  /**
+   * Drain every `domain_event` whose `metadata.rootRunId` matches by walking
+   * the keyset cursor. Empty when the events read port is absent.
+   */
+  async collectEvents(rootRunId, tenantId) {
+    if (!this.events) return [];
+    const out = [];
+    let cursor;
+    for (let page = 0; page < MAX_TIMELINE_PAGES; page += 1) {
+      const result = await this.events.listEvents({
+        rootRunId,
+        tenantId,
+        cursor
+      });
+      out.push(...result.items);
+      if (!result.nextCursor) break;
+      cursor = result.nextCursor;
+    }
+    return out;
+  }
+};
+/**
+ * All-zero histogram used when the bridge subsystem is absent. Matches
+ * the bridge protocol's "fixed keys, zero-filled" contract so consumers
+ * never branch on presence.
+ */
+__publicField(ObservabilityService, "EMPTY_HISTOGRAM", {
+  pending: 0,
+  delivered: 0,
+  skipped: 0,
+  failed: 0
+});
+/** Empty page used when a sibling read port is absent. */
+__publicField(ObservabilityService, "EMPTY_JOB_RUN_PAGE", {
+  items: [],
+  nextCursor: null
+});
+__publicField(ObservabilityService, "EMPTY_EVENT_PAGE", {
+  items: [],
+  nextCursor: null
+});
+ObservabilityService = __decorateClass([
+  Injectable(),
+  __decorateParam(0, Optional()),
+  __decorateParam(0, Inject(JOB_RUN_SERVICE)),
+  __decorateParam(1, Optional()),
+  __decorateParam(1, Inject(BRIDGE_DELIVERY_REPO)),
+  __decorateParam(2, Optional()),
+  __decorateParam(2, Inject(INTEGRATION_RUN_RECORDER)),
+  __decorateParam(3, Optional()),
+  __decorateParam(3, Inject(INTEGRATION_CURSOR_STORE)),
+  __decorateParam(4, Optional()),
+  __decorateParam(4, Inject(EVENT_READ_PORT))
+], ObservabilityService);
+
+export {
+  ObservabilityService
+};
+//# sourceMappingURL=chunk-YPWODKD5.js.map

package/dist/chunk-YPWODKD5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/observability/observability.service.ts"],"sourcesContent":["/**\n * ObservabilityService — `IObservability` combiner implementation\n * (ADR-025, OBS-5).\n *\n * Composes read methods across the jobs, bridge, and integration subsystems via\n * DI. Owns no state, no schema, no SQL. Every method is a one-line\n * delegation to the sibling port that already encodes the semantics.\n *\n * # Missing-port degradation\n *\n * Every sibling is injected with `@Optional()`. When the consumer's app\n * has not wired a given subsystem, the corresponding field is `undefined`\n * and the delegating method returns an empty shape:\n *   - array methods return `[]`\n *   - `getBridgeDeliveryHistogram` returns `{ pending: 0, delivered: 0,\n *     skipped: 0, failed: 0 }` (matches the bridge protocol's fixed-keys\n *     contract so consumers can render a 4-row chart unconditionally).\n *\n * Graceful absence is the whole point of the combiner pattern (ADR-025\n * §Shape, constraint 3) — a consumer that only installed the jobs\n * subsystem can still inject `OBSERVABILITY` and get useful job reads\n * without wiring the rest.\n *\n * # Multi-tenancy\n *\n * `tenantId` passes VERBATIM from the public method to the owning port.\n * `ObservabilityService` never re-implements tenant filtering. See\n * `.claude/skills/observability/SKILL.md` §3 and ADR-025.\n */\nimport { Inject, Injectable, Optional } from '@nestjs/common';\n\nimport { JOB_RUN_SERVICE } from '../jobs/jobs-domain.tokens';\nimport type {\n  IJobRunService,\n  JobRunFailure,\n  JobRunPage,\n  JobRunSummary,\n  ListJobRunsQuery,\n  PoolStatusCount,\n} from '../jobs/job-run-service.protocol';\n\nimport { EVENT_READ_PORT } from '../events/events.tokens';\nimport type {\n  EventPage,\n  EventSummary,\n  IEventReadPort,\n  ListEventsQuery,\n} from '../events/event-read.protocol';\n\nimport { BRIDGE_DELIVERY_REPO } from '../bridge/bridge.tokens';\nimport type { IJobBridge, StatusHistogram } from '../bridge/bridge.protocol';\n\nimport { INTEGRATION_CURSOR_STORE, INTEGRATION_RUN_RECORDER } from '../integration/integration.tokens';\nimport type {\n  IIntegrationRunRecorder,\n  IntegrationRunSummary,\n} from '../integration/integration-run-recorder.protocol';\nimport type {\n  CursorSnapshot,\n  ICursorStore,\n} from '../integration/integration-cursor-store.protocol';\n\nimport type {\n  CorrelationTimeline,\n  CorrelationTimelineEntry,\n  IObservability,\n} from './observability.protocol';\n\n/**\n * Safety bound on how many pages the correlation timeline will walk when\n * draining a sibling port. A single run tree producing more than\n * 50 pages × default page size of correlated rows is pathological; cap to\n * keep the stitch bounded rather than unbounded-loop on bad data.\n */\nconst MAX_TIMELINE_PAGES = 50;\n\n@Injectable()\nexport class ObservabilityService implements IObservability {\n  /**\n   * All-zero histogram used when the bridge subsystem is absent. Matches\n   * the bridge protocol's \"fixed keys, zero-filled\" contract so consumers\n   * never branch on presence.\n   */\n  private static readonly EMPTY_HISTOGRAM: StatusHistogram = {\n    pending: 0,\n    delivered: 0,\n    skipped: 0,\n    failed: 0,\n  };\n\n  /** Empty page used when a sibling read port is absent. */\n  private static readonly EMPTY_JOB_RUN_PAGE: JobRunPage = {\n    items: [],\n    nextCursor: null,\n  };\n  private static readonly EMPTY_EVENT_PAGE: EventPage = {\n    items: [],\n    nextCursor: null,\n  };\n\n  constructor(\n    @Optional()\n    @Inject(JOB_RUN_SERVICE)\n    private readonly jobRuns?: IJobRunService,\n    @Optional()\n    @Inject(BRIDGE_DELIVERY_REPO)\n    private readonly bridge?: IJobBridge,\n    @Optional()\n    @Inject(INTEGRATION_RUN_RECORDER)\n    private readonly integrationRuns?: IIntegrationRunRecorder,\n    @Optional()\n    @Inject(INTEGRATION_CURSOR_STORE)\n    private readonly cursors?: ICursorStore,\n    @Optional()\n    @Inject(EVENT_READ_PORT)\n    private readonly events?: IEventReadPort | null,\n  ) {}\n\n  async getPoolDepths(tenantId?: string | null): Promise<PoolStatusCount[]> {\n    if (!this.jobRuns) return [];\n    return this.jobRuns.countByPoolAndStatus(tenantId);\n  }\n\n  async getRecentFailedJobs(\n    limit: number,\n    tenantId?: string | null,\n  ): Promise<JobRunFailure[]> {\n    if (!this.jobRuns) return [];\n    return this.jobRuns.listRecentFailed(limit, tenantId);\n  }\n\n  async getBridgeDeliveryHistogram(\n    windowHours: number,\n    tenantId?: string | null,\n  ): Promise<StatusHistogram> {\n    if (!this.bridge) return { ...ObservabilityService.EMPTY_HISTOGRAM };\n    return this.bridge.getStatusHistogram(windowHours, tenantId);\n  }\n\n  async getRecentIntegrationRuns(\n    limit: number,\n    subscriptionId?: string,\n    tenantId?: string | null,\n  ): Promise<IntegrationRunSummary[]> {\n    if (!this.integrationRuns) return [];\n    return this.integrationRuns.listRecent(limit, subscriptionId, tenantId);\n  }\n\n  async getCursors(tenantId?: string | null): Promise<CursorSnapshot[]> {\n    if (!this.cursors) return [];\n    return this.cursors.listAll(tenantId);\n  }\n\n  async listJobRuns(query?: ListJobRunsQuery): Promise<JobRunPage> {\n    if (!this.jobRuns) {\n      return { ...ObservabilityService.EMPTY_JOB_RUN_PAGE };\n    }\n    return this.jobRuns.listJobRuns(query);\n  }\n\n  async listEvents(query?: ListEventsQuery): Promise<EventPage> {\n    if (!this.events) {\n      return { ...ObservabilityService.EMPTY_EVENT_PAGE };\n    }\n    return this.events.listEvents(query);\n  }\n\n  async getCorrelationTimeline(\n    rootRunId: string,\n    tenantId?: string | null,\n  ): Promise<CorrelationTimeline> {\n    const runs = await this.collectRuns(rootRunId, tenantId);\n    const events = await this.collectEvents(rootRunId, tenantId);\n\n    const entries: CorrelationTimelineEntry[] = [\n      ...runs.map(\n        (run): CorrelationTimelineEntry => ({\n          kind: 'job_run',\n          at: run.createdAt,\n          run,\n        }),\n      ),\n      ...events.map(\n        (event): CorrelationTimelineEntry => ({\n          kind: 'event',\n          at: event.occurredAt,\n          event,\n        }),\n      ),\n    ];\n\n    // Ascending chronological order. Stable tie-break: job runs before\n    // events at the same instant (the run that emits an event precedes it).\n    entries.sort((a, b) => {\n      const dt = a.at.getTime() - b.at.getTime();\n      if (dt !== 0) return dt;\n      if (a.kind === b.kind) return 0;\n      return a.kind === 'job_run' ? -1 : 1;\n    });\n\n    const startedAt = entries.length > 0 ? entries[0]!.at : null;\n    const lastActivityAt =\n      entries.length > 0 ? entries[entries.length - 1]!.at : null;\n\n    return {\n      rootRunId,\n      entries,\n      summary: {\n        runCount: runs.length,\n        eventCount: events.length,\n        startedAt,\n        lastActivityAt,\n      },\n    };\n  }\n\n  /**\n   * Drain every `job_run` sharing `rootRunId` by walking the keyset cursor.\n   * Empty when the jobs subsystem is absent.\n   */\n  private async collectRuns(\n    rootRunId: string,\n    tenantId?: string | null,\n  ): Promise<JobRunSummary[]> {\n    if (!this.jobRuns) return [];\n    const out: JobRunSummary[] = [];\n    let cursor: string | undefined;\n    for (let page = 0; page < MAX_TIMELINE_PAGES; page += 1) {\n      const result = await this.jobRuns.listJobRuns({\n        rootRunId,\n        tenantId,\n        cursor,\n      });\n      out.push(...result.items);\n      if (!result.nextCursor) break;\n      cursor = result.nextCursor;\n    }\n    return out;\n  }\n\n  /**\n   * Drain every `domain_event` whose `metadata.rootRunId` matches by walking\n   * the keyset cursor. Empty when the events read port is absent.\n   */\n  private async collectEvents(\n    rootRunId: string,\n    tenantId?: string | null,\n  ): Promise<EventSummary[]> {\n    if (!this.events) return [];\n    const out: EventSummary[] = [];\n    let cursor: string | undefined;\n    for (let page = 0; page < MAX_TIMELINE_PAGES; page += 1) {\n      const result = await this.events.listEvents({\n        rootRunId,\n        tenantId,\n        cursor,\n      });\n      out.push(...result.items);\n      if (!result.nextCursor) break;\n      cursor = result.nextCursor;\n    }\n    return out;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA6BA,SAAS,QAAQ,YAAY,gBAAgB;AA6C7C,IAAM,qBAAqB;AAGpB,IAAM,uBAAN,MAAqD;AAAA,EAuB1D,YAGmB,SAGA,QAGA,iBAGA,SAGA,QACjB;AAbiB;AAGA;AAGA;AAGA;AAGA;AAAA,EAChB;AAAA,EAbgB;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGA;AAAA,EAGnB,MAAM,cAAc,UAAsD;AACxE,QAAI,CAAC,KAAK,QAAS,QAAO,CAAC;AAC3B,WAAO,KAAK,QAAQ,qBAAqB,QAAQ;AAAA,EACnD;AAAA,EAEA,MAAM,oBACJ,OACA,UAC0B;AAC1B,QAAI,CAAC,KAAK,QAAS,QAAO,CAAC;AAC3B,WAAO,KAAK,QAAQ,iBAAiB,OAAO,QAAQ;AAAA,EACtD;AAAA,EAEA,MAAM,2BACJ,aACA,UAC0B;AAC1B,QAAI,CAAC,KAAK,OAAQ,QAAO,EAAE,GAAG,qBAAqB,gBAAgB;AACnE,WAAO,KAAK,OAAO,mBAAmB,aAAa,QAAQ;AAAA,EAC7D;AAAA,EAEA,MAAM,yBACJ,OACA,gBACA,UACkC;AAClC,QAAI,CAAC,KAAK,gBAAiB,QAAO,CAAC;AACnC,WAAO,KAAK,gBAAgB,WAAW,OAAO,gBAAgB,QAAQ;AAAA,EACxE;AAAA,EAEA,MAAM,WAAW,UAAqD;AACpE,QAAI,CAAC,KAAK,QAAS,QAAO,CAAC;AAC3B,WAAO,KAAK,QAAQ,QAAQ,QAAQ;AAAA,EACtC;AAAA,EAEA,MAAM,YAAY,OAA+C;AAC/D,QAAI,CAAC,KAAK,SAAS;AACjB,aAAO,EAAE,GAAG,qBAAqB,mBAAmB;AAAA,IACtD;AACA,WAAO,KAAK,QAAQ,YAAY,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,WAAW,OAA6C;AAC5D,QAAI,CAAC,KAAK,QAAQ;AAChB,aAAO,EAAE,GAAG,qBAAqB,iBAAiB;AAAA,IACpD;AACA,WAAO,KAAK,OAAO,WAAW,KAAK;AAAA,EACrC;AAAA,EAEA,MAAM,uBACJ,WACA,UAC8B;AAC9B,UAAM,OAAO,MAAM,KAAK,YAAY,WAAW,QAAQ;AACvD,UAAM,SAAS,MAAM,KAAK,cAAc,WAAW,QAAQ;AAE3D,UAAM,UAAsC;AAAA,MAC1C,GAAG,KAAK;AAAA,QACN,CAAC,SAAmC;AAAA,UAClC,MAAM;AAAA,UACN,IAAI,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,MACA,GAAG,OAAO;AAAA,QACR,CAAC,WAAqC;AAAA,UACpC,MAAM;AAAA,UACN,IAAI,MAAM;AAAA,UACV;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAIA,YAAQ,KAAK,CAAC,GAAG,MAAM;AACrB,YAAM,KAAK,EAAE,GAAG,QAAQ,IAAI,EAAE,GAAG,QAAQ;AACzC,UAAI,OAAO,EAAG,QAAO;AACrB,UAAI,EAAE,SAAS,EAAE,KAAM,QAAO;AAC9B,aAAO,EAAE,SAAS,YAAY,KAAK;AAAA,IACrC,CAAC;AAED,UAAM,YAAY,QAAQ,SAAS,IAAI,QAAQ,CAAC,EAAG,KAAK;AACxD,UAAM,iBACJ,QAAQ,SAAS,IAAI,QAAQ,QAAQ,SAAS,CAAC,EAAG,KAAK;AAEzD,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,SAAS;AAAA,QACP,UAAU,KAAK;AAAA,QACf,YAAY,OAAO;AAAA,QACnB;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,YACZ,WACA,UAC0B;AAC1B,QAAI,CAAC,KAAK,QAAS,QAAO,CAAC;AAC3B,UAAM,MAAuB,CAAC;AAC9B,QAAI;AACJ,aAAS,OAAO,GAAG,OAAO,oBAAoB,QAAQ,GAAG;AACvD,YAAM,SAAS,MAAM,KAAK,QAAQ,YAAY;AAAA,QAC5C;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,KAAK,GAAG,OAAO,KAAK;AACxB,UAAI,CAAC,OAAO,WAAY;AACxB,eAAS,OAAO;AAAA,IAClB;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,cACZ,WACA,UACyB;AACzB,QAAI,CAAC,KAAK,OAAQ,QAAO,CAAC;AAC1B,UAAM,MAAsB,CAAC;AAC7B,QAAI;AACJ,aAAS,OAAO,GAAG,OAAO,oBAAoB,QAAQ,GAAG;AACvD,YAAM,SAAS,MAAM,KAAK,OAAO,WAAW;AAAA,QAC1C;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACD,UAAI,KAAK,GAAG,OAAO,KAAK;AACxB,UAAI,CAAC,OAAO,WAAY;AACxB,eAAS,OAAO;AAAA,IAClB;AACA,WAAO;AAAA,EACT;AACF;AAAA;AAAA;AAAA;AAAA;AAAA;AApLE,cANW,sBAMa,mBAAmC;AAAA,EACzD,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,QAAQ;AACV;AAAA;AAGA,cAdW,sBAca,sBAAiC;AAAA,EACvD,OAAO,CAAC;AAAA,EACR,YAAY;AACd;AACA,cAlBW,sBAkBa,oBAA8B;AAAA,EACpD,OAAO,CAAC;AAAA,EACR,YAAY;AACd;AArBW,uBAAN;AAAA,EADN,WAAW;AAAA,EAyBP,4BAAS;AAAA,EACT,0BAAO,eAAe;AAAA,EAEtB,4BAAS;AAAA,EACT,0BAAO,oBAAoB;AAAA,EAE3B,4BAAS;AAAA,EACT,0BAAO,wBAAwB;AAAA,EAE/B,4BAAS;AAAA,EACT,0BAAO,wBAAwB;AAAA,EAE/B,4BAAS;AAAA,EACT,0BAAO,eAAe;AAAA,GArCd;","names":[]}

package/dist/chunk-YSLTTQLC.js

@@ -0,0 +1,25 @@
+// runtime/shared/openapi/errors.ts
+var OpenApiPeerDepMissingError = class extends Error {
+  name = "OpenApiPeerDepMissingError";
+  constructor(message) {
+    super(
+      message ?? "OpenApiRegistry requires @anatine/zod-openapi. Install it: bun add @anatine/zod-openapi"
+    );
+  }
+};
+var DuplicateSchemaError = class extends Error {
+  constructor(schemaName) {
+    super(
+      `DuplicateSchemaError: schema '${schemaName}' is already registered. Each schema name must be unique within the OpenApiRegistry.`
+    );
+    this.schemaName = schemaName;
+  }
+  schemaName;
+  name = "DuplicateSchemaError";
+};
+
+export {
+  OpenApiPeerDepMissingError,
+  DuplicateSchemaError
+};
+//# sourceMappingURL=chunk-YSLTTQLC.js.map

package/dist/chunk-YSLTTQLC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/shared/openapi/errors.ts"],"sourcesContent":["/**\n * Typed errors for the OpenAPI registry (OPENAPI-1).\n *\n * Same shape as `runtime/subsystems/bridge/bridge-errors.ts` so consumers\n * can catch them with the same exception-filter pattern used elsewhere.\n */\n\n/**\n * Thrown by `OpenApiRegistry.build()` when `@anatine/zod-openapi` is not\n * resolvable. The peer is declared optional (`peerDependenciesMeta`) so\n * consumer apps that don't care about OpenAPI still boot; the cost is a\n * deferred failure here on first `build()`.\n */\nexport class OpenApiPeerDepMissingError extends Error {\n  override readonly name = 'OpenApiPeerDepMissingError';\n  constructor(message?: string) {\n    super(\n      message ??\n        'OpenApiRegistry requires @anatine/zod-openapi. Install it: bun add @anatine/zod-openapi',\n    );\n  }\n}\n\n/**\n * Thrown by `OpenApiRegistry.registerSchema(name, ...)` when `name` is\n * already registered. Silent overwrite would make debugging\n * double-registration bugs (e.g. two entity pipelines both emitting a\n * `User` DTO) painful; loud failure lets the mismatch surface at module\n * init where the stack trace is clear.\n */\nexport class DuplicateSchemaError extends Error {\n  override readonly name = 'DuplicateSchemaError';\n  constructor(public readonly schemaName: string) {\n    super(\n      `DuplicateSchemaError: schema '${schemaName}' is already registered. ` +\n        `Each schema name must be unique within the OpenApiRegistry.`,\n    );\n  }\n}\n"],"mappings":";AAaO,IAAM,6BAAN,cAAyC,MAAM;AAAA,EAClC,OAAO;AAAA,EACzB,YAAY,SAAkB;AAC5B;AAAA,MACE,WACE;AAAA,IACJ;AAAA,EACF;AACF;AASO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,YAAoB;AAC9C;AAAA,MACE,iCAAiC,UAAU;AAAA,IAE7C;AAJ0B;AAAA,EAK5B;AAAA,EAL4B;AAAA,EADV,OAAO;AAO3B;","names":[]}

package/dist/chunk-YTN6BKWA.js

@@ -0,0 +1,121 @@
+import {
+  assertTenantId
+} from "./chunk-6DWFJNIK.js";
+import {
+  JobHandler,
+  JobHandlerBase
+} from "./chunk-CO6LUM72.js";
+import {
+  JOB_ORCHESTRATOR
+} from "./chunk-BIO6F7YI.js";
+import {
+  EVENT_BUS
+} from "./chunk-H5NH7KPE.js";
+import {
+  BRIDGE_DELIVERY_REPO,
+  BRIDGE_MULTI_TENANT,
+  BRIDGE_REGISTRY
+} from "./chunk-4LH67P4U.js";
+import {
+  __decorateClass,
+  __decorateParam
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/bridge/bridge-delivery-handler.ts
+import { Inject, Injectable, Logger, Optional } from "@nestjs/common";
+var BRIDGE_DELIVERY_JOB_TYPE = "@framework/bridge_delivery";
+var SPAWN_USER_RUN_STEP = "spawn_user_run";
+var BridgeDeliveryHandler = class extends JobHandlerBase {
+  constructor(repo, orchestrator, events, registry, multiTenant = false) {
+    super();
+    this.repo = repo;
+    this.orchestrator = orchestrator;
+    this.events = events;
+    this.registry = registry;
+    this.multiTenant = multiTenant;
+  }
+  repo;
+  orchestrator;
+  events;
+  registry;
+  multiTenant;
+  classLogger = new Logger(BridgeDeliveryHandler.name);
+  async run(ctx) {
+    const { deliveryId } = ctx.input;
+    const delivery = await this.repo.findDeliveryById(deliveryId);
+    if (!delivery) {
+      this.classLogger.warn(
+        `bridge_delivery row '${deliveryId}' not found; wrapper completes without spawning a user job.`
+      );
+      return { skipped: true, reason: "delivery_row_missing" };
+    }
+    assertTenantId(
+      "BridgeDeliveryHandler.run",
+      this.multiTenant,
+      delivery.tenantId
+    );
+    const event = await this.events.findById(delivery.eventId);
+    if (!event) {
+      this.classLogger.warn(
+        `domain_events row '${delivery.eventId}' missing for delivery '${deliveryId}'; marking skipped.`
+      );
+      await this.repo.markSkipped(delivery.id, "event_row_missing");
+      return { skipped: true, reason: "event_row_missing" };
+    }
+    const entry = this.findRegistryEntry(event.type, delivery.triggerId);
+    if (!entry) {
+      await this.repo.markSkipped(delivery.id, "trigger_unregistered");
+      return { skipped: true, reason: "trigger_unregistered" };
+    }
+    if (entry.when && !entry.when(event)) {
+      await this.repo.markSkipped(delivery.id, "predicate_false");
+      return { skipped: true, reason: "predicate_false" };
+    }
+    const input = entry.map(event);
+    const { runId } = await ctx.step(
+      SPAWN_USER_RUN_STEP,
+      async () => {
+        const run = await this.orchestrator.start(entry.jobType, input, {
+          parentRunId: ctx.run.id,
+          triggerSource: "event",
+          triggerRef: delivery.eventId,
+          tenantId: delivery.tenantId
+        });
+        return { runId: run.id };
+      }
+    );
+    await this.repo.markDelivered(delivery.id, runId);
+    return { runId };
+  }
+  /**
+   * Locate the registry entry for `(eventType, triggerId)`. Linear scan
+   * over the per-event-type array — N is the number of triggers declared
+   * for one event, typically 1–5; the table is not big enough to warrant
+   * a secondary index.
+   */
+  findRegistryEntry(eventType, triggerId) {
+    const candidates = this.registry[eventType] ?? void 0;
+    if (!candidates) return void 0;
+    return candidates.find((c) => c.triggerId === triggerId);
+  }
+};
+BridgeDeliveryHandler = __decorateClass([
+  Injectable(),
+  JobHandler(BRIDGE_DELIVERY_JOB_TYPE, {
+    pool: "events_change",
+    retry: { attempts: 3, backoff: "exponential", baseMs: 250 },
+    replayFrom: "last_step"
+  }),
+  __decorateParam(0, Inject(BRIDGE_DELIVERY_REPO)),
+  __decorateParam(1, Inject(JOB_ORCHESTRATOR)),
+  __decorateParam(2, Inject(EVENT_BUS)),
+  __decorateParam(3, Inject(BRIDGE_REGISTRY)),
+  __decorateParam(4, Optional()),
+  __decorateParam(4, Inject(BRIDGE_MULTI_TENANT))
+], BridgeDeliveryHandler);
+
+export {
+  BRIDGE_DELIVERY_JOB_TYPE,
+  BridgeDeliveryHandler
+};
+//# sourceMappingURL=chunk-YTN6BKWA.js.map

package/dist/chunk-YTN6BKWA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/bridge/bridge-delivery-handler.ts"],"sourcesContent":["/**\n * BridgeDeliveryHandler — the framework `@JobHandler` that runs every\n * bridge-fanout wrapper on the reserved `events_*` pools (BRIDGE-5,\n * ADR-023 §Decision 2 flow diagram).\n *\n * Role: when the outbox drain (BRIDGE-4) inserts a `bridge_delivery + wrapper\n * job_run` pair, the worker that polls the wrapper's pool claims that\n * wrapper and dispatches it to this handler. The handler:\n *\n *   1. Loads the `bridge_delivery` row by `ctx.input.deliveryId`.\n *   2. Looks up the trigger entry in the codegen-emitted `bridgeRegistry`\n *      (`runtime/subsystems/bridge/generated/registry.ts`, BRIDGE-6).\n *      A missing entry means the trigger was renamed or removed since the\n *      delivery row was written; mark `skipped` with\n *      `skip_reason='trigger_unregistered'` per ADR-023 §Trigger rename\n *      or removal.\n *   3. Re-fetches the authoritative `domain_events` row (`IEventBus.findById`)\n *      so `when:` / `map:` callbacks see the committed payload — never a\n *      copy that drifted between drain and claim time.\n *   4. Evaluates `entry.when?.(event)`. False ⇒ mark `skipped` with\n *      `skip_reason='predicate_false'`.\n *   5. Calls `IJobOrchestrator.start(entry.jobType, entry.map(event), …)`\n *      INSIDE `ctx.step('spawn_user_run', …)`. The step memoization is\n *      what makes wrapper retries (BRIDGE-1 ledger says no auto-retry past\n *      the wrapper's own retry policy, but Phase 1 wrappers DO retry per\n *      JOB-3) idempotent — a successful spawn followed by a transient\n *      ledger-update failure would otherwise re-spawn on the next attempt.\n *   6. Marks `delivered` with the spawned `runId`.\n *\n * Pool registration: BRIDGE-5 ships ONE `@JobHandler` registration with\n * `pool: 'events_change'` (the default). The wrapper rows the drain\n * inserts carry `pool: events_<direction>` per row, so workers polling\n * `events_inbound` / `events_outbound` claim and dispatch to this same\n * handler class regardless of the metadata pool — the worker filter is on\n * `job_run.pool`, not on `@JobHandler.meta.pool`. BRIDGE-8 confirms the\n * three pools are active and registered at module init. The\n * `@framework/*` job-type prefix exempts this registration from the\n * reserved-pool validator (BRIDGE-5 added that exemption to\n * `job-worker.module.ts`).\n *\n * Tenant threading: when `BRIDGE_MULTI_TENANT=true`, the handler asserts\n * `delivery.tenantId !== undefined` before the spawn (the column is\n * nullable, so explicit `null` is allowed for cross-tenant work — same\n * contract as JOB-8). BRIDGE-8 wires the assertion via the\n * `BRIDGE_MULTI_TENANT` token.\n *\n * Failure path: any throw inside the handler propagates up; the worker's\n * normal retry policy (declared on the `@JobHandler` here as `attempts:\n * 3, backoff: exponential, baseMs: 250`) absorbs transient infra blips.\n * After exhaustion, the wrapper transitions to `failed`; the outer error\n * handler catches and calls `repo.markFailed(...)` so the delivery row\n * reflects the final state. Operators see `bridge_delivery.status='failed'`\n * surface via the `idx_bridge_delivery_status` partial index (BRIDGE-1).\n */\nimport { Inject, Injectable, Logger, Optional } from '@nestjs/common';\n\nimport { JOB_ORCHESTRATOR } from '../jobs/jobs-domain.tokens';\nimport type { IJobOrchestrator } from '../jobs/job-orchestrator.protocol';\nimport {\n  JobHandler,\n  JobHandlerBase,\n  type JobContext,\n} from '../jobs/job-handler.base';\n\nimport { EVENT_BUS } from '../events/events.tokens';\nimport type { IEventBus, DomainEvent } from '../events/event-bus.protocol';\nimport type { EventTypeName } from '../events/event-registry';\n\nimport {\n  BRIDGE_DELIVERY_REPO,\n  BRIDGE_MULTI_TENANT,\n  BRIDGE_REGISTRY,\n} from './bridge.tokens';\nimport type {\n  BridgeRegistry,\n  BridgeTriggerEntry,\n  IJobBridge,\n} from './bridge.protocol';\nimport { assertTenantId } from './assert-tenant-id';\n\n/** Stable canonical job type — referenced by BRIDGE-4 wrapper inserts. */\nexport const BRIDGE_DELIVERY_JOB_TYPE = '@framework/bridge_delivery' as const;\n\n/** Stable canonical step id — referenced for memoization across attempts. */\nconst SPAWN_USER_RUN_STEP = 'spawn_user_run' as const;\n\nexport interface BridgeDeliveryInput {\n  /** PK of the `bridge_delivery` row this wrapper services. */\n  deliveryId: string;\n}\n\n@Injectable()\n@JobHandler<BridgeDeliveryInput>(BRIDGE_DELIVERY_JOB_TYPE, {\n  pool: 'events_change',\n  retry: { attempts: 3, backoff: 'exponential', baseMs: 250 },\n  replayFrom: 'last_step',\n})\nexport class BridgeDeliveryHandler extends JobHandlerBase<\n  BridgeDeliveryInput,\n  { runId: string } | { skipped: true; reason: string }\n> {\n  private readonly classLogger = new Logger(BridgeDeliveryHandler.name);\n\n  constructor(\n    @Inject(BRIDGE_DELIVERY_REPO) private readonly repo: IJobBridge,\n    @Inject(JOB_ORCHESTRATOR) private readonly orchestrator: IJobOrchestrator,\n    @Inject(EVENT_BUS) private readonly events: IEventBus,\n    @Inject(BRIDGE_REGISTRY) private readonly registry: BridgeRegistry,\n    @Optional()\n    @Inject(BRIDGE_MULTI_TENANT)\n    private readonly multiTenant: boolean = false,\n  ) {\n    super();\n  }\n\n  async run(\n    ctx: JobContext<BridgeDeliveryInput>,\n  ): Promise<{ runId: string } | { skipped: true; reason: string }> {\n    const { deliveryId } = ctx.input;\n\n    // Step 1 — locate the delivery row by primary key.\n    const delivery = await this.repo.findDeliveryById(deliveryId);\n    if (!delivery) {\n      // The drain wrote a wrapper job_run but the delivery row is gone\n      // (manual ops cleanup, or delete-cascade from the parent event).\n      // No row → no work; return without throwing so the wrapper marks\n      // completed cleanly.\n      this.classLogger.warn(\n        `bridge_delivery row '${deliveryId}' not found; wrapper completes ` +\n          `without spawning a user job.`,\n      );\n      return { skipped: true, reason: 'delivery_row_missing' };\n    }\n\n    // Step 2 — multi-tenancy gate. Site (b) of the three ADR-023\n    // §Multi-tenancy enforcement sites; shared helper from BRIDGE-8.\n    // The DB always returns string|null, never undefined; this branch\n    // exists for the in-memory backend's older test fixtures and to\n    // pin the contract in shape-typed tests.\n    assertTenantId(\n      'BridgeDeliveryHandler.run',\n      this.multiTenant,\n      delivery.tenantId,\n    );\n\n    // Step 3 — load the typed event row.\n    const event = await this.events.findById(delivery.eventId);\n    if (!event) {\n      // FK from bridge_delivery.event_id → domain_events.id should make\n      // this impossible at the DB layer, but defensive: if the row is\n      // missing we mark skipped, not failed (no work the bridge can do).\n      this.classLogger.warn(\n        `domain_events row '${delivery.eventId}' missing for delivery ` +\n          `'${deliveryId}'; marking skipped.`,\n      );\n      await this.repo.markSkipped(delivery.id, 'event_row_missing');\n      return { skipped: true, reason: 'event_row_missing' };\n    }\n\n    // Step 4 — registry lookup. Handles trigger rename/removal cleanly.\n    const entry = this.findRegistryEntry(event.type, delivery.triggerId);\n    if (!entry) {\n      await this.repo.markSkipped(delivery.id, 'trigger_unregistered');\n      return { skipped: true, reason: 'trigger_unregistered' };\n    }\n\n    // Step 5 — `when:` predicate.\n    if (entry.when && !entry.when(event as never)) {\n      await this.repo.markSkipped(delivery.id, 'predicate_false');\n      return { skipped: true, reason: 'predicate_false' };\n    }\n\n    // Step 6 — memoized spawn. `ctx.step` records the result in\n    // `job_step` and on retry returns the cached `{ runId }` so a\n    // transient failure between `orchestrator.start` and `markDelivered`\n    // doesn't double-spawn the user job.\n    const input = entry.map(event as never);\n    const { runId } = await ctx.step<{ runId: string }>(\n      SPAWN_USER_RUN_STEP,\n      async () => {\n        const run = await this.orchestrator.start(entry.jobType, input, {\n          parentRunId: ctx.run.id,\n          triggerSource: 'event',\n          triggerRef: delivery.eventId,\n          tenantId: delivery.tenantId,\n        });\n        return { runId: run.id };\n      },\n    );\n\n    // Step 7 — ledger transition.\n    await this.repo.markDelivered(delivery.id, runId);\n    return { runId };\n  }\n\n  /**\n   * Locate the registry entry for `(eventType, triggerId)`. Linear scan\n   * over the per-event-type array — N is the number of triggers declared\n   * for one event, typically 1–5; the table is not big enough to warrant\n   * a secondary index.\n   */\n  private findRegistryEntry(\n    eventType: string,\n    triggerId: string,\n  ): BridgeTriggerEntry | undefined {\n    const candidates =\n      this.registry[eventType as EventTypeName] ?? undefined;\n    if (!candidates) return undefined;\n    return candidates.find((c) => c.triggerId === triggerId) as\n      | BridgeTriggerEntry\n      | undefined;\n  }\n}\n\n/**\n * Re-export for BRIDGE-7 facade Case B and BRIDGE-4 wrapper insert.\n * Single source of truth for the canonical type string keeps refactors\n * in one place.\n */\nexport { BRIDGE_DELIVERY_JOB_TYPE as BridgeDeliveryJobType };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAsDA,SAAS,QAAQ,YAAY,QAAQ,gBAAgB;AA2B9C,IAAM,2BAA2B;AAGxC,IAAM,sBAAsB;AAarB,IAAM,wBAAN,cAAoC,eAGzC;AAAA,EAGA,YACiD,MACJ,cACP,QACM,UAGzB,cAAuB,OACxC;AACA,UAAM;AARyC;AACJ;AACP;AACM;AAGzB;AAAA,EAGnB;AAAA,EATiD;AAAA,EACJ;AAAA,EACP;AAAA,EACM;AAAA,EAGzB;AAAA,EATF,cAAc,IAAI,OAAO,sBAAsB,IAAI;AAAA,EAcpE,MAAM,IACJ,KACgE;AAChE,UAAM,EAAE,WAAW,IAAI,IAAI;AAG3B,UAAM,WAAW,MAAM,KAAK,KAAK,iBAAiB,UAAU;AAC5D,QAAI,CAAC,UAAU;AAKb,WAAK,YAAY;AAAA,QACf,wBAAwB,UAAU;AAAA,MAEpC;AACA,aAAO,EAAE,SAAS,MAAM,QAAQ,uBAAuB;AAAA,IACzD;AAOA;AAAA,MACE;AAAA,MACA,KAAK;AAAA,MACL,SAAS;AAAA,IACX;AAGA,UAAM,QAAQ,MAAM,KAAK,OAAO,SAAS,SAAS,OAAO;AACzD,QAAI,CAAC,OAAO;AAIV,WAAK,YAAY;AAAA,QACf,sBAAsB,SAAS,OAAO,2BAChC,UAAU;AAAA,MAClB;AACA,YAAM,KAAK,KAAK,YAAY,SAAS,IAAI,mBAAmB;AAC5D,aAAO,EAAE,SAAS,MAAM,QAAQ,oBAAoB;AAAA,IACtD;AAGA,UAAM,QAAQ,KAAK,kBAAkB,MAAM,MAAM,SAAS,SAAS;AACnE,QAAI,CAAC,OAAO;AACV,YAAM,KAAK,KAAK,YAAY,SAAS,IAAI,sBAAsB;AAC/D,aAAO,EAAE,SAAS,MAAM,QAAQ,uBAAuB;AAAA,IACzD;AAGA,QAAI,MAAM,QAAQ,CAAC,MAAM,KAAK,KAAc,GAAG;AAC7C,YAAM,KAAK,KAAK,YAAY,SAAS,IAAI,iBAAiB;AAC1D,aAAO,EAAE,SAAS,MAAM,QAAQ,kBAAkB;AAAA,IACpD;AAMA,UAAM,QAAQ,MAAM,IAAI,KAAc;AACtC,UAAM,EAAE,MAAM,IAAI,MAAM,IAAI;AAAA,MAC1B;AAAA,MACA,YAAY;AACV,cAAM,MAAM,MAAM,KAAK,aAAa,MAAM,MAAM,SAAS,OAAO;AAAA,UAC9D,aAAa,IAAI,IAAI;AAAA,UACrB,eAAe;AAAA,UACf,YAAY,SAAS;AAAA,UACrB,UAAU,SAAS;AAAA,QACrB,CAAC;AACD,eAAO,EAAE,OAAO,IAAI,GAAG;AAAA,MACzB;AAAA,IACF;AAGA,UAAM,KAAK,KAAK,cAAc,SAAS,IAAI,KAAK;AAChD,WAAO,EAAE,MAAM;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,kBACN,WACA,WACgC;AAChC,UAAM,aACJ,KAAK,SAAS,SAA0B,KAAK;AAC/C,QAAI,CAAC,WAAY,QAAO;AACxB,WAAO,WAAW,KAAK,CAAC,MAAM,EAAE,cAAc,SAAS;AAAA,EAGzD;AACF;AAnHa,wBAAN;AAAA,EANN,WAAW;AAAA,EACX,WAAgC,0BAA0B;AAAA,IACzD,MAAM;AAAA,IACN,OAAO,EAAE,UAAU,GAAG,SAAS,eAAe,QAAQ,IAAI;AAAA,IAC1D,YAAY;AAAA,EACd,CAAC;AAAA,EAQI,0BAAO,oBAAoB;AAAA,EAC3B,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,SAAS;AAAA,EAChB,0BAAO,eAAe;AAAA,EACtB,4BAAS;AAAA,EACT,0BAAO,mBAAmB;AAAA,GAZlB;","names":[]}

package/dist/chunk-Z7PQCAVK.js

@@ -0,0 +1,200 @@
+import {
+  clampEventLimit,
+  decodeEventCursor,
+  encodeEventCursor
+} from "./chunk-UQ5EHOH2.js";
+import {
+  EVENTS_MODULE_OPTIONS
+} from "./chunk-H5NH7KPE.js";
+import {
+  __decorateClass,
+  __decorateParam
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/events/event-bus.memory-backend.ts
+import { Inject, Injectable, Logger, Optional } from "@nestjs/common";
+function toEventSummary(event) {
+  const metadata = event.metadata;
+  const str = (key) => {
+    const v = metadata?.[key];
+    return typeof v === "string" ? v : null;
+  };
+  return {
+    id: event.id,
+    type: event.type,
+    aggregateId: event.aggregateId,
+    aggregateType: event.aggregateType,
+    status: "processed",
+    pool: str("pool"),
+    direction: str("direction"),
+    tier: str("tier") ?? "domain",
+    rootRunId: str("rootRunId"),
+    tenantId: str("tenantId"),
+    occurredAt: event.occurredAt,
+    processedAt: event.occurredAt
+  };
+}
+var MemoryEventBus = class {
+  logger = new Logger(MemoryEventBus.name);
+  /** All events published since construction (or last clear). */
+  publishedEvents = [];
+  handlers = /* @__PURE__ */ new Map();
+  opts;
+  constructor(opts) {
+    this.opts = opts ?? { backend: "memory" };
+  }
+  async publish(event) {
+    this.assertTierRouting(event);
+    this.publishedEvents.push(event);
+    if (this.shouldDispatch(event)) {
+      await this.dispatch(event);
+    }
+  }
+  async publishMany(events) {
+    for (const event of events) {
+      await this.publish(event);
+    }
+  }
+  async findById(eventId) {
+    return this.publishedEvents.find((e) => e.id === eventId) ?? null;
+  }
+  subscribe(eventType, handler) {
+    if (!this.handlers.has(eventType)) {
+      this.handlers.set(eventType, /* @__PURE__ */ new Set());
+    }
+    const set = this.handlers.get(eventType);
+    const h = handler;
+    set.add(h);
+    return () => {
+      set.delete(h);
+    };
+  }
+  // ============================================================================
+  // IEventReadPort (OBS-LIST-1)
+  // ============================================================================
+  async listEvents(query = {}) {
+    const limit = clampEventLimit(query.limit);
+    const keyset = query.cursor ? decodeEventCursor(query.cursor) : null;
+    const str = (e, key) => {
+      const v = e.metadata?.[key];
+      return typeof v === "string" ? v : null;
+    };
+    const matched = this.publishedEvents.filter((e) => {
+      if (query.poolId && str(e, "pool") !== query.poolId) return false;
+      if (query.direction && str(e, "direction") !== query.direction)
+        return false;
+      if (query.rootRunId && str(e, "rootRunId") !== query.rootRunId)
+        return false;
+      if (query.since && e.occurredAt.getTime() < query.since.getTime())
+        return false;
+      if (query.tenantId !== void 0) {
+        const t = str(e, "tenantId");
+        if (query.tenantId === null) {
+          if (t !== null) return false;
+        } else if (t !== query.tenantId) {
+          return false;
+        }
+      }
+      return true;
+    });
+    matched.sort((a, b) => {
+      const dt = b.occurredAt.getTime() - a.occurredAt.getTime();
+      if (dt !== 0) return dt;
+      return a.id < b.id ? 1 : a.id > b.id ? -1 : 0;
+    });
+    const seeked = keyset ? matched.filter((e) => {
+      const ct = e.occurredAt.getTime();
+      const kt = keyset.occurredAt.getTime();
+      if (ct < kt) return true;
+      if (ct > kt) return false;
+      return e.id < keyset.id;
+    }) : matched;
+    const hasMore = seeked.length > limit;
+    const page = hasMore ? seeked.slice(0, limit) : seeked;
+    const items = page.map(toEventSummary);
+    const last = page[page.length - 1];
+    const nextCursor = hasMore && last ? encodeEventCursor({ occurredAt: last.occurredAt, id: last.id }) : null;
+    return { items, nextCursor };
+  }
+  /** Remove all published events and subscriptions. Useful in beforeEach. */
+  clear() {
+    this.publishedEvents.length = 0;
+    this.handlers.clear();
+  }
+  /** Filter published events by `metadata.pool`. */
+  publishedEventsForPool(pool) {
+    return this.publishedEvents.filter((e) => e.metadata?.["pool"] === pool);
+  }
+  /** Filter published events by `metadata.direction`. */
+  publishedEventsForDirection(direction) {
+    return this.publishedEvents.filter((e) => e.metadata?.["direction"] === direction);
+  }
+  /**
+   * Decide whether `event` should be dispatched to handlers given the
+   * current pool filter.
+   *
+   * Semantics (mirroring `DrizzleEventBus.processBatch`):
+   * - `opts.pools` undefined  → dispatch everything (no filter).
+   * - `opts.pools` empty array → treated as "no filter" to match the
+   *   Drizzle backend, where `pools && pools.length > 0` is the gate on
+   *   the `inArray` WHERE clause. Empty arrays dispatch everything.
+   * - `opts.pools` non-empty  → dispatch only when `event.metadata.pool`
+   *   is in the list. Events without `metadata.pool` do NOT match — they
+   *   are out of all configured pools by definition.
+   */
+  shouldDispatch(event) {
+    const pools = this.opts.pools;
+    if (!pools || pools.length === 0) return true;
+    const eventPool = event.metadata?.["pool"];
+    return typeof eventPool === "string" && pools.includes(eventPool);
+  }
+  /**
+   * Mirror the `domain_events_tier_routing_check` DB CHECK at the memory
+   * backend (AUDIT-1). Audit-tier events MUST have null/undefined
+   * `pool` and `direction` in metadata; the bridge dispatcher relies on
+   * this invariant.
+   */
+  assertTierRouting(event) {
+    const tier = event.metadata?.["tier"];
+    if (tier !== "audit") return;
+    const pool = event.metadata?.["pool"];
+    const direction = event.metadata?.["direction"];
+    const poolIsNull = pool === null || pool === void 0;
+    const directionIsNull = direction === null || direction === void 0;
+    if (!poolIsNull || !directionIsNull) {
+      throw new Error(
+        `MemoryEventBus: tier='audit' events must have null pool and direction (got pool=${String(pool)}, direction=${String(direction)}). This mirrors the domain_events CHECK constraint.`
+      );
+    }
+  }
+  async dispatch(event) {
+    const set = this.handlers.get(event.type);
+    if (!set) return;
+    let firstError;
+    for (const handler of set) {
+      try {
+        await handler(event);
+      } catch (err) {
+        this.logger.error(
+          `Handler error for event type "${event.type}" (id: ${event.id}): ${err}`
+        );
+        if (firstError === void 0) {
+          firstError = err;
+        }
+      }
+    }
+    if (firstError !== void 0) {
+      throw firstError;
+    }
+  }
+};
+MemoryEventBus = __decorateClass([
+  Injectable(),
+  __decorateParam(0, Optional()),
+  __decorateParam(0, Inject(EVENTS_MODULE_OPTIONS))
+], MemoryEventBus);
+
+export {
+  MemoryEventBus
+};
+//# sourceMappingURL=chunk-Z7PQCAVK.js.map

package/dist/chunk-Z7PQCAVK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/events/event-bus.memory-backend.ts"],"sourcesContent":["/**\n * MemoryEventBus — in-memory backend for the event bus.\n *\n * Dispatches events synchronously to registered subscribers. The `tx`\n * parameter is ignored — all events are dispatched immediately.\n *\n * Use this backend in tests to assert event publication without a database.\n * Swap via EventsModule.forRoot({ backend: 'memory' }).\n *\n * Pool awareness (EVT-5):\n * - Mirrors the `DrizzleEventBus` per-process restriction (EVT-4). When\n *   `opts.pools` is set, `publish`/`publishMany` still push the event into\n *   `publishedEvents` (so test code can assert the full set of emitted\n *   events regardless of pool filter), but handlers are NOT invoked for\n *   events whose `metadata.pool` is outside the configured pools.\n * - `publishedEventsForPool(pool)` and `publishedEventsForDirection(dir)`\n *   helpers are provided for targeted assertions.\n * - Shares the `EventsModuleOptions` shape (same token as Drizzle) rather\n *   than introducing a memory-only options type — the surface is the same\n *   and keeping them unified avoids drift between backends.\n */\nimport { Inject, Injectable, Logger, Optional } from '@nestjs/common';\nimport type { DomainEvent, IEventBus } from './event-bus.protocol';\nimport type {\n  EventPage,\n  EventSummary,\n  IEventReadPort,\n  ListEventsQuery,\n} from './event-read.protocol';\nimport {\n  clampEventLimit,\n  decodeEventCursor,\n  encodeEventCursor,\n} from './event-keyset-cursor';\nimport { EVENTS_MODULE_OPTIONS } from './events.tokens';\nimport type { EventsModuleOptions } from './events.module';\n\n/**\n * Project an in-memory `DomainEvent` into the narrow `EventSummary` shape.\n * The memory backend has no first-class columns, so `pool` / `direction` /\n * `tier` / `tenantId` / `rootRunId` are read from `metadata` (mirroring how\n * the Drizzle backend stamps them onto columns at publish time). `status`\n * is reported as `'processed'` — the memory bus dispatches synchronously,\n * so once an event is in `publishedEvents` it has been handled.\n */\nfunction toEventSummary(event: DomainEvent): EventSummary {\n  const metadata = event.metadata;\n  const str = (key: string): string | null => {\n    const v = metadata?.[key];\n    return typeof v === 'string' ? v : null;\n  };\n  return {\n    id: event.id,\n    type: event.type,\n    aggregateId: event.aggregateId,\n    aggregateType: event.aggregateType,\n    status: 'processed',\n    pool: str('pool'),\n    direction: str('direction'),\n    tier: str('tier') ?? 'domain',\n    rootRunId: str('rootRunId'),\n    tenantId: str('tenantId'),\n    occurredAt: event.occurredAt,\n    processedAt: event.occurredAt,\n  };\n}\n\n@Injectable()\nexport class MemoryEventBus implements IEventBus, IEventReadPort {\n  private readonly logger = new Logger(MemoryEventBus.name);\n\n  /** All events published since construction (or last clear). */\n  readonly publishedEvents: DomainEvent[] = [];\n\n  private readonly handlers = new Map<string, Set<(event: DomainEvent) => Promise<void>>>();\n  private readonly opts: EventsModuleOptions;\n\n  constructor(\n    @Optional() @Inject(EVENTS_MODULE_OPTIONS) opts?: EventsModuleOptions,\n  ) {\n    // Default so direct construction (e.g. `new MemoryEventBus()` from a\n    // unit test outside NestJS DI) keeps working without an explicit\n    // options object.\n    this.opts = opts ?? { backend: 'memory' };\n  }\n\n  async publish(event: DomainEvent): Promise<void> {\n    // Mirror the `domain_events_tier_routing_check` DB constraint at the\n    // memory backend boundary so misuse fails the same way regardless of\n    // backend (AUDIT-1).\n    this.assertTierRouting(event);\n\n    // Always record the event — even if this process is configured with a\n    // pool filter that excludes it. Test code relies on `publishedEvents`\n    // being a complete log of what was published, not a filtered view.\n    this.publishedEvents.push(event);\n\n    if (this.shouldDispatch(event)) {\n      await this.dispatch(event);\n    }\n  }\n\n  async publishMany(events: DomainEvent[]): Promise<void> {\n    for (const event of events) {\n      await this.publish(event);\n    }\n  }\n\n  async findById(eventId: string): Promise<DomainEvent | null> {\n    return this.publishedEvents.find((e) => e.id === eventId) ?? null;\n  }\n\n  subscribe<T extends DomainEvent = DomainEvent>(\n    eventType: string,\n    handler: (event: T) => Promise<void>,\n  ): () => void {\n    if (!this.handlers.has(eventType)) {\n      this.handlers.set(eventType, new Set());\n    }\n    // Cast is safe — callers pass a typed handler; we store as the base type\n    const set = this.handlers.get(eventType)!;\n    const h = handler as (event: DomainEvent) => Promise<void>;\n    set.add(h);\n\n    return () => {\n      set.delete(h);\n    };\n  }\n\n  // ============================================================================\n  // IEventReadPort (OBS-LIST-1)\n  // ============================================================================\n\n  async listEvents(query: ListEventsQuery = {}): Promise<EventPage> {\n    const limit = clampEventLimit(query.limit);\n    const keyset = query.cursor ? decodeEventCursor(query.cursor) : null;\n\n    const str = (e: DomainEvent, key: string): string | null => {\n      const v = e.metadata?.[key];\n      return typeof v === 'string' ? v : null;\n    };\n\n    const matched = this.publishedEvents.filter((e) => {\n      if (query.poolId && str(e, 'pool') !== query.poolId) return false;\n      if (query.direction && str(e, 'direction') !== query.direction)\n        return false;\n      if (query.rootRunId && str(e, 'rootRunId') !== query.rootRunId)\n        return false;\n      if (query.since && e.occurredAt.getTime() < query.since.getTime())\n        return false;\n      if (query.tenantId !== undefined) {\n        const t = str(e, 'tenantId');\n        if (query.tenantId === null) {\n          if (t !== null) return false;\n        } else if (t !== query.tenantId) {\n          return false;\n        }\n      }\n      return true;\n    });\n\n    // Order occurred_at DESC, id DESC to match the Drizzle backend keyset.\n    matched.sort((a, b) => {\n      const dt = b.occurredAt.getTime() - a.occurredAt.getTime();\n      if (dt !== 0) return dt;\n      return a.id < b.id ? 1 : a.id > b.id ? -1 : 0;\n    });\n\n    const seeked = keyset\n      ? matched.filter((e) => {\n          const ct = e.occurredAt.getTime();\n          const kt = keyset.occurredAt.getTime();\n          if (ct < kt) return true;\n          if (ct > kt) return false;\n          return e.id < keyset.id;\n        })\n      : matched;\n\n    const hasMore = seeked.length > limit;\n    const page = hasMore ? seeked.slice(0, limit) : seeked;\n    const items = page.map(toEventSummary);\n    const last = page[page.length - 1];\n    const nextCursor =\n      hasMore && last\n        ? encodeEventCursor({ occurredAt: last.occurredAt, id: last.id })\n        : null;\n\n    return { items, nextCursor };\n  }\n\n  /** Remove all published events and subscriptions. Useful in beforeEach. */\n  clear(): void {\n    this.publishedEvents.length = 0;\n    this.handlers.clear();\n  }\n\n  /** Filter published events by `metadata.pool`. */\n  publishedEventsForPool(pool: string): DomainEvent[] {\n    return this.publishedEvents.filter((e) => e.metadata?.['pool'] === pool);\n  }\n\n  /** Filter published events by `metadata.direction`. */\n  publishedEventsForDirection(direction: string): DomainEvent[] {\n    return this.publishedEvents.filter((e) => e.metadata?.['direction'] === direction);\n  }\n\n  /**\n   * Decide whether `event` should be dispatched to handlers given the\n   * current pool filter.\n   *\n   * Semantics (mirroring `DrizzleEventBus.processBatch`):\n   * - `opts.pools` undefined  → dispatch everything (no filter).\n   * - `opts.pools` empty array → treated as \"no filter\" to match the\n   *   Drizzle backend, where `pools && pools.length > 0` is the gate on\n   *   the `inArray` WHERE clause. Empty arrays dispatch everything.\n   * - `opts.pools` non-empty  → dispatch only when `event.metadata.pool`\n   *   is in the list. Events without `metadata.pool` do NOT match — they\n   *   are out of all configured pools by definition.\n   */\n  private shouldDispatch(event: DomainEvent): boolean {\n    const pools = this.opts.pools;\n    if (!pools || pools.length === 0) return true;\n    const eventPool = event.metadata?.['pool'];\n    return typeof eventPool === 'string' && pools.includes(eventPool);\n  }\n\n  /**\n   * Mirror the `domain_events_tier_routing_check` DB CHECK at the memory\n   * backend (AUDIT-1). Audit-tier events MUST have null/undefined\n   * `pool` and `direction` in metadata; the bridge dispatcher relies on\n   * this invariant.\n   */\n  private assertTierRouting(event: DomainEvent): void {\n    const tier = event.metadata?.['tier'];\n    if (tier !== 'audit') return;\n    const pool = event.metadata?.['pool'];\n    const direction = event.metadata?.['direction'];\n    const poolIsNull = pool === null || pool === undefined;\n    const directionIsNull = direction === null || direction === undefined;\n    if (!poolIsNull || !directionIsNull) {\n      throw new Error(\n        `MemoryEventBus: tier='audit' events must have null pool and direction ` +\n          `(got pool=${String(pool)}, direction=${String(direction)}). ` +\n          `This mirrors the domain_events CHECK constraint.`,\n      );\n    }\n  }\n\n  private async dispatch(event: DomainEvent): Promise<void> {\n    const set = this.handlers.get(event.type);\n    if (!set) return;\n\n    let firstError: unknown;\n    for (const handler of set) {\n      try {\n        await handler(event);\n      } catch (err) {\n        this.logger.error(\n          `Handler error for event type \"${event.type}\" (id: ${event.id}): ${err}`,\n        );\n        if (firstError === undefined) {\n          firstError = err;\n        }\n      }\n    }\n\n    if (firstError !== undefined) {\n      throw firstError;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAqBA,SAAS,QAAQ,YAAY,QAAQ,gBAAgB;AAwBrD,SAAS,eAAe,OAAkC;AACxD,QAAM,WAAW,MAAM;AACvB,QAAM,MAAM,CAAC,QAA+B;AAC1C,UAAM,IAAI,WAAW,GAAG;AACxB,WAAO,OAAO,MAAM,WAAW,IAAI;AAAA,EACrC;AACA,SAAO;AAAA,IACL,IAAI,MAAM;AAAA,IACV,MAAM,MAAM;AAAA,IACZ,aAAa,MAAM;AAAA,IACnB,eAAe,MAAM;AAAA,IACrB,QAAQ;AAAA,IACR,MAAM,IAAI,MAAM;AAAA,IAChB,WAAW,IAAI,WAAW;AAAA,IAC1B,MAAM,IAAI,MAAM,KAAK;AAAA,IACrB,WAAW,IAAI,WAAW;AAAA,IAC1B,UAAU,IAAI,UAAU;AAAA,IACxB,YAAY,MAAM;AAAA,IAClB,aAAa,MAAM;AAAA,EACrB;AACF;AAGO,IAAM,iBAAN,MAA0D;AAAA,EAC9C,SAAS,IAAI,OAAO,eAAe,IAAI;AAAA;AAAA,EAG/C,kBAAiC,CAAC;AAAA,EAE1B,WAAW,oBAAI,IAAwD;AAAA,EACvE;AAAA,EAEjB,YAC6C,MAC3C;AAIA,SAAK,OAAO,QAAQ,EAAE,SAAS,SAAS;AAAA,EAC1C;AAAA,EAEA,MAAM,QAAQ,OAAmC;AAI/C,SAAK,kBAAkB,KAAK;AAK5B,SAAK,gBAAgB,KAAK,KAAK;AAE/B,QAAI,KAAK,eAAe,KAAK,GAAG;AAC9B,YAAM,KAAK,SAAS,KAAK;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,QAAsC;AACtD,eAAW,SAAS,QAAQ;AAC1B,YAAM,KAAK,QAAQ,KAAK;AAAA,IAC1B;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,SAA8C;AAC3D,WAAO,KAAK,gBAAgB,KAAK,CAAC,MAAM,EAAE,OAAO,OAAO,KAAK;AAAA,EAC/D;AAAA,EAEA,UACE,WACA,SACY;AACZ,QAAI,CAAC,KAAK,SAAS,IAAI,SAAS,GAAG;AACjC,WAAK,SAAS,IAAI,WAAW,oBAAI,IAAI,CAAC;AAAA,IACxC;AAEA,UAAM,MAAM,KAAK,SAAS,IAAI,SAAS;AACvC,UAAM,IAAI;AACV,QAAI,IAAI,CAAC;AAET,WAAO,MAAM;AACX,UAAI,OAAO,CAAC;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAW,QAAyB,CAAC,GAAuB;AAChE,UAAM,QAAQ,gBAAgB,MAAM,KAAK;AACzC,UAAM,SAAS,MAAM,SAAS,kBAAkB,MAAM,MAAM,IAAI;AAEhE,UAAM,MAAM,CAAC,GAAgB,QAA+B;AAC1D,YAAM,IAAI,EAAE,WAAW,GAAG;AAC1B,aAAO,OAAO,MAAM,WAAW,IAAI;AAAA,IACrC;AAEA,UAAM,UAAU,KAAK,gBAAgB,OAAO,CAAC,MAAM;AACjD,UAAI,MAAM,UAAU,IAAI,GAAG,MAAM,MAAM,MAAM,OAAQ,QAAO;AAC5D,UAAI,MAAM,aAAa,IAAI,GAAG,WAAW,MAAM,MAAM;AACnD,eAAO;AACT,UAAI,MAAM,aAAa,IAAI,GAAG,WAAW,MAAM,MAAM;AACnD,eAAO;AACT,UAAI,MAAM,SAAS,EAAE,WAAW,QAAQ,IAAI,MAAM,MAAM,QAAQ;AAC9D,eAAO;AACT,UAAI,MAAM,aAAa,QAAW;AAChC,cAAM,IAAI,IAAI,GAAG,UAAU;AAC3B,YAAI,MAAM,aAAa,MAAM;AAC3B,cAAI,MAAM,KAAM,QAAO;AAAA,QACzB,WAAW,MAAM,MAAM,UAAU;AAC/B,iBAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO;AAAA,IACT,CAAC;AAGD,YAAQ,KAAK,CAAC,GAAG,MAAM;AACrB,YAAM,KAAK,EAAE,WAAW,QAAQ,IAAI,EAAE,WAAW,QAAQ;AACzD,UAAI,OAAO,EAAG,QAAO;AACrB,aAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK;AAAA,IAC9C,CAAC;AAED,UAAM,SAAS,SACX,QAAQ,OAAO,CAAC,MAAM;AACpB,YAAM,KAAK,EAAE,WAAW,QAAQ;AAChC,YAAM,KAAK,OAAO,WAAW,QAAQ;AACrC,UAAI,KAAK,GAAI,QAAO;AACpB,UAAI,KAAK,GAAI,QAAO;AACpB,aAAO,EAAE,KAAK,OAAO;AAAA,IACvB,CAAC,IACD;AAEJ,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,OAAO,UAAU,OAAO,MAAM,GAAG,KAAK,IAAI;AAChD,UAAM,QAAQ,KAAK,IAAI,cAAc;AACrC,UAAM,OAAO,KAAK,KAAK,SAAS,CAAC;AACjC,UAAM,aACJ,WAAW,OACP,kBAAkB,EAAE,YAAY,KAAK,YAAY,IAAI,KAAK,GAAG,CAAC,IAC9D;AAEN,WAAO,EAAE,OAAO,WAAW;AAAA,EAC7B;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,gBAAgB,SAAS;AAC9B,SAAK,SAAS,MAAM;AAAA,EACtB;AAAA;AAAA,EAGA,uBAAuB,MAA6B;AAClD,WAAO,KAAK,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM,MAAM,IAAI;AAAA,EACzE;AAAA;AAAA,EAGA,4BAA4B,WAAkC;AAC5D,WAAO,KAAK,gBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,WAAW,MAAM,SAAS;AAAA,EACnF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeQ,eAAe,OAA6B;AAClD,UAAM,QAAQ,KAAK,KAAK;AACxB,QAAI,CAAC,SAAS,MAAM,WAAW,EAAG,QAAO;AACzC,UAAM,YAAY,MAAM,WAAW,MAAM;AACzC,WAAO,OAAO,cAAc,YAAY,MAAM,SAAS,SAAS;AAAA,EAClE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,kBAAkB,OAA0B;AAClD,UAAM,OAAO,MAAM,WAAW,MAAM;AACpC,QAAI,SAAS,QAAS;AACtB,UAAM,OAAO,MAAM,WAAW,MAAM;AACpC,UAAM,YAAY,MAAM,WAAW,WAAW;AAC9C,UAAM,aAAa,SAAS,QAAQ,SAAS;AAC7C,UAAM,kBAAkB,cAAc,QAAQ,cAAc;AAC5D,QAAI,CAAC,cAAc,CAAC,iBAAiB;AACnC,YAAM,IAAI;AAAA,QACR,mFACe,OAAO,IAAI,CAAC,eAAe,OAAO,SAAS,CAAC;AAAA,MAE7D;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,SAAS,OAAmC;AACxD,UAAM,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI;AACxC,QAAI,CAAC,IAAK;AAEV,QAAI;AACJ,eAAW,WAAW,KAAK;AACzB,UAAI;AACF,cAAM,QAAQ,KAAK;AAAA,MACrB,SAAS,KAAK;AACZ,aAAK,OAAO;AAAA,UACV,iCAAiC,MAAM,IAAI,UAAU,MAAM,EAAE,MAAM,GAAG;AAAA,QACxE;AACA,YAAI,eAAe,QAAW;AAC5B,uBAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAEA,QAAI,eAAe,QAAW;AAC5B,YAAM;AAAA,IACR;AAAA,EACF;AACF;AA1Ma,iBAAN;AAAA,EADN,WAAW;AAAA,EAWP,4BAAS;AAAA,EAAG,0BAAO,qBAAqB;AAAA,GAVhC;","names":[]}

package/dist/chunk-ZUKFQL6E.js

@@ -0,0 +1,47 @@
+// runtime/base-classes/tenant-context.ts
+import { AsyncLocalStorage } from "async_hooks";
+var als = new AsyncLocalStorage();
+function withRequester(ctx, fn) {
+  return als.run(ctx, fn);
+}
+function requireRequester() {
+  const ctx = als.getStore();
+  if (!ctx) {
+    throw new Error(
+      "No requester context active. Wrap the entry point in withRequester({ userId, organizationId }, fn). See tenant-context.ts."
+    );
+  }
+  return ctx;
+}
+function tryGetRequester() {
+  return als.getStore();
+}
+function requireRequesterScope() {
+  return requireRequester().scope ?? "user";
+}
+function withUserScope(userId, organizationId, fn) {
+  return withRequester({ userId, organizationId, scope: "user" }, fn);
+}
+function withOrgScope(userId, organizationId, orgUserIds, fn) {
+  return withRequester(
+    { userId, organizationId, scope: "org", orgUserIds },
+    fn
+  );
+}
+function withSuperuserScope(userId, fn) {
+  return withRequester(
+    { userId, organizationId: null, scope: "superuser" },
+    fn
+  );
+}
+
+export {
+  withRequester,
+  requireRequester,
+  tryGetRequester,
+  requireRequesterScope,
+  withUserScope,
+  withOrgScope,
+  withSuperuserScope
+};
+//# sourceMappingURL=chunk-ZUKFQL6E.js.map