@pattern-stack/codegen 0.15.1 → 0.15.3

package/dist/runtime/subsystems/bridge/bridge-delivery.memory-backend.js

@@ -1,129 +1,8 @@
-// runtime/subsystems/bridge/bridge-delivery.memory-backend.ts
-import { randomUUID } from "crypto";
-
-// runtime/subsystems/bridge/bridge-errors.ts
-var UniqueConstraintError = class extends Error {
-  constructor(constraint, eventId, triggerId) {
-    super(
-      `UniqueConstraintError: duplicate insert into bridge_delivery for (event_id='${eventId}', trigger_id='${triggerId}') \u2014 violates constraint '${constraint}'.`
-    );
-    this.constraint = constraint;
-    this.eventId = eventId;
-    this.triggerId = triggerId;
-  }
-  constraint;
-  eventId;
-  triggerId;
-  name = "UniqueConstraintError";
-};
-
-// runtime/subsystems/bridge/bridge-delivery.memory-backend.ts
-var BRIDGE_DELIVERY_UNIQUE_CONSTRAINT = "uq_bridge_delivery_event_trigger";
-function key(eventId, triggerId) {
-  return `${eventId}::${triggerId}`;
-}
-var MemoryBridgeDeliveryRepo = class {
-  deliveries = /* @__PURE__ */ new Map();
-  async insertDelivery(row) {
-    const k = key(row.eventId, row.triggerId);
-    if (this.deliveries.has(k)) {
-      throw new UniqueConstraintError(
-        BRIDGE_DELIVERY_UNIQUE_CONSTRAINT,
-        row.eventId,
-        row.triggerId
-      );
-    }
-    const record = {
-      id: row.id ?? randomUUID(),
-      eventId: row.eventId,
-      triggerId: row.triggerId,
-      wrapperRunId: row.wrapperRunId ?? null,
-      userRunId: row.userRunId ?? null,
-      status: row.status ?? "pending",
-      skipReason: row.skipReason ?? null,
-      error: row.error ?? null,
-      tenantId: row.tenantId ?? null,
-      attemptedAt: row.attemptedAt instanceof Date ? row.attemptedAt : /* @__PURE__ */ new Date(),
-      deliveredAt: row.deliveredAt instanceof Date ? row.deliveredAt : null
-    };
-    this.deliveries.set(k, record);
-  }
-  async findDelivery(eventId, triggerId) {
-    return this.deliveries.get(key(eventId, triggerId)) ?? null;
-  }
-  async findDeliveryById(id) {
-    for (const record of this.deliveries.values()) {
-      if (record.id === id) return record;
-    }
-    return null;
-  }
-  async markDelivered(id, userRunId) {
-    const record = this.findById(id);
-    record.status = "delivered";
-    record.userRunId = userRunId;
-    record.deliveredAt = /* @__PURE__ */ new Date();
-  }
-  async markSkipped(id, reason) {
-    const record = this.findById(id);
-    record.status = "skipped";
-    record.skipReason = reason;
-  }
-  async markFailed(id, error) {
-    const record = this.findById(id);
-    record.status = "failed";
-    record.error = error;
-  }
-  /**
-   * Observability read — see `IJobBridge.getStatusHistogram` JSDoc for the
-   * tenant-filter and windowHours contract.
-   *
-   * Unlike `insertDelivery`, this read does NOT call `assertTenantId`:
-   * `tenantId === undefined` is the supported cross-tenant admin view.
-   */
-  async getStatusHistogram(windowHours, tenantId, nowMs = Date.now()) {
-    if (!Number.isFinite(windowHours) || windowHours <= 0) {
-      throw new RangeError("windowHours must be positive");
-    }
-    const cutoffMs = nowMs - windowHours * 36e5;
-    const histogram = {
-      pending: 0,
-      delivered: 0,
-      skipped: 0,
-      failed: 0
-    };
-    for (const record of this.deliveries.values()) {
-      if (record.attemptedAt.getTime() < cutoffMs) continue;
-      if (tenantId === null && record.tenantId !== null) continue;
-      if (typeof tenantId === "string" && record.tenantId !== tenantId) {
-        continue;
-      }
-      histogram[record.status] += 1;
-    }
-    return histogram;
-  }
-  // ─── Test helpers ────────────────────────────────────────────────────────
-  /** All deliveries for a given event (any status, declaration order). */
-  getDeliveriesForEvent(eventId) {
-    return [...this.deliveries.values()].filter((r) => r.eventId === eventId);
-  }
-  /** All deliveries currently in the given status. */
-  getByStatus(status) {
-    return [...this.deliveries.values()].filter((r) => r.status === status);
-  }
-  /** Reset the store. Tests use this in `beforeEach`. */
-  clear() {
-    this.deliveries.clear();
-  }
-  // ─── Internals ───────────────────────────────────────────────────────────
-  findById(id) {
-    for (const record of this.deliveries.values()) {
-      if (record.id === id) return record;
-    }
-    throw new Error(
-      `MemoryBridgeDeliveryRepo: no delivery with id '${id}' (transition methods may not be called for unknown rows; the framework handler should always findDelivery first or operate on a row it just inserted).`
-    );
-  }
-};
+import {
+  MemoryBridgeDeliveryRepo
+} from "../../../chunk-4DOJBQTP.js";
+import "../../../chunk-NXXDZ6ZF.js";
+import "../../../chunk-2E224ZSN.js";
 export {
   MemoryBridgeDeliveryRepo
 };

package/dist/runtime/subsystems/bridge/bridge-delivery.memory-backend.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../runtime/subsystems/bridge/bridge-delivery.memory-backend.ts","../../../../runtime/subsystems/bridge/bridge-errors.ts"],"sourcesContent":["/**\n * MemoryBridgeDeliveryRepo — in-memory `IJobBridge` (BRIDGE-3, ADR-023 Phase 2).\n *\n * Behavioral twin of the Drizzle backend (BRIDGE-4) for use in\n * `just test-unit`. No Docker, no Postgres, fully synchronous. Backs a\n * `Map<\"${eventId}::${triggerId}\", BridgeDeliveryRecord>` so the UNIQUE\n * `(event_id, trigger_id)` constraint can be simulated cheaply.\n *\n * Precedent: `MemoryEventBus` (EVT-5), `MemoryJobOrchestrator`\n * (jobs subsystem). Same shape — a class implementing the protocol plus\n * test-only helpers (`getDeliveriesForEvent`, `getByStatus`, `clear`) that\n * BRIDGE-5's framework-handler tests and BRIDGE-7's facade tests will\n * exercise.\n *\n * The synthetic `UniqueConstraintError` carries a `constraint` field equal\n * to the Drizzle constraint name (`uq_bridge_delivery_event_trigger`, set\n * in BRIDGE-1's schema) so consumers — including BRIDGE-4's\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING` path and\n * BRIDGE-7's Case B dedup tests — can branch on the same discriminator\n * regardless of which backend is wired up. ADR-023 explicitly relies on\n * this constraint as the dedup mechanism in two places (replay; facade-\n * vs-drain Case B); a typed error makes both call sites checkable.\n */\nimport { randomUUID } from 'node:crypto';\n\nimport type {\n  BridgeDeliveryInsert,\n  IJobBridge,\n  StatusHistogram,\n} from './bridge.protocol';\nimport type { BridgeDeliveryRecord } from './bridge-delivery.schema';\nimport { UniqueConstraintError } from './bridge-errors';\n\nconst BRIDGE_DELIVERY_UNIQUE_CONSTRAINT =\n  'uq_bridge_delivery_event_trigger' as const;\n\nfunction key(eventId: string, triggerId: string): string {\n  return `${eventId}::${triggerId}`;\n}\n\nexport class MemoryBridgeDeliveryRepo implements IJobBridge {\n  private readonly deliveries = new Map<string, BridgeDeliveryRecord>();\n\n  async insertDelivery(row: BridgeDeliveryInsert): Promise<void> {\n    const k = key(row.eventId, row.triggerId);\n    if (this.deliveries.has(k)) {\n      throw new UniqueConstraintError(\n        BRIDGE_DELIVERY_UNIQUE_CONSTRAINT,\n        row.eventId,\n        row.triggerId,\n      );\n    }\n    // Materialize a full BridgeDeliveryRecord — fill in DB defaults that\n    // the insert payload allowed to be omitted.\n    const record: BridgeDeliveryRecord = {\n      id: row.id ?? randomUUID(),\n      eventId: row.eventId,\n      triggerId: row.triggerId,\n      wrapperRunId: row.wrapperRunId ?? null,\n      userRunId: row.userRunId ?? null,\n      status: row.status ?? 'pending',\n      skipReason: row.skipReason ?? null,\n      error: (row.error as Record<string, unknown> | null | undefined) ?? null,\n      tenantId: row.tenantId ?? null,\n      attemptedAt:\n        row.attemptedAt instanceof Date ? row.attemptedAt : new Date(),\n      deliveredAt:\n        row.deliveredAt instanceof Date ? row.deliveredAt : null,\n    };\n    this.deliveries.set(k, record);\n  }\n\n  async findDelivery(\n    eventId: string,\n    triggerId: string,\n  ): Promise<BridgeDeliveryRecord | null> {\n    return this.deliveries.get(key(eventId, triggerId)) ?? null;\n  }\n\n  async findDeliveryById(id: string): Promise<BridgeDeliveryRecord | null> {\n    for (const record of this.deliveries.values()) {\n      if (record.id === id) return record;\n    }\n    return null;\n  }\n\n  async markDelivered(id: string, userRunId: string): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'delivered';\n    record.userRunId = userRunId;\n    record.deliveredAt = new Date();\n  }\n\n  async markSkipped(id: string, reason: string): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'skipped';\n    record.skipReason = reason;\n  }\n\n  async markFailed(\n    id: string,\n    error: Record<string, unknown>,\n  ): Promise<void> {\n    const record = this.findById(id);\n    record.status = 'failed';\n    record.error = error;\n  }\n\n  /**\n   * Observability read — see `IJobBridge.getStatusHistogram` JSDoc for the\n   * tenant-filter and windowHours contract.\n   *\n   * Unlike `insertDelivery`, this read does NOT call `assertTenantId`:\n   * `tenantId === undefined` is the supported cross-tenant admin view.\n   */\n  async getStatusHistogram(\n    windowHours: number,\n    tenantId?: string | null,\n    // Reference instant for the window cutoff. Defaults to the wall clock; exposed\n    // as a test-injection seam so a caller can pin the cutoff to the same `now` it\n    // positioned a boundary row from. Without it the cutoff is re-sampled here a few\n    // ms later, pushing an \"exactly at the boundary\" row just below the window\n    // (the OBS-3 boundary test flake). The drizzle backend has no analogue — it\n    // evaluates the cutoff once in SQL via `now()`.\n    nowMs: number = Date.now(),\n  ): Promise<StatusHistogram> {\n    if (!Number.isFinite(windowHours) || windowHours <= 0) {\n      throw new RangeError('windowHours must be positive');\n    }\n\n    const cutoffMs = nowMs - windowHours * 3_600_000;\n    const histogram: StatusHistogram = {\n      pending: 0,\n      delivered: 0,\n      skipped: 0,\n      failed: 0,\n    };\n\n    for (const record of this.deliveries.values()) {\n      if (record.attemptedAt.getTime() < cutoffMs) continue;\n      if (tenantId === null && record.tenantId !== null) continue;\n      if (typeof tenantId === 'string' && record.tenantId !== tenantId) {\n        continue;\n      }\n      // tenantId === undefined → no tenant filter.\n      histogram[record.status] += 1;\n    }\n\n    return histogram;\n  }\n\n  // ─── Test helpers ────────────────────────────────────────────────────────\n\n  /** All deliveries for a given event (any status, declaration order). */\n  getDeliveriesForEvent(eventId: string): BridgeDeliveryRecord[] {\n    return [...this.deliveries.values()].filter((r) => r.eventId === eventId);\n  }\n\n  /** All deliveries currently in the given status. */\n  getByStatus(\n    status: BridgeDeliveryRecord['status'],\n  ): BridgeDeliveryRecord[] {\n    return [...this.deliveries.values()].filter((r) => r.status === status);\n  }\n\n  /** Reset the store. Tests use this in `beforeEach`. */\n  clear(): void {\n    this.deliveries.clear();\n  }\n\n  // ─── Internals ───────────────────────────────────────────────────────────\n\n  private findById(id: string): BridgeDeliveryRecord {\n    for (const record of this.deliveries.values()) {\n      if (record.id === id) return record;\n    }\n    throw new Error(\n      `MemoryBridgeDeliveryRepo: no delivery with id '${id}' (transition ` +\n        `methods may not be called for unknown rows; the framework handler ` +\n        `should always findDelivery first or operate on a row it just ` +\n        `inserted).`,\n    );\n  }\n}\n","/**\n * Typed errors for the bridge subsystem (ADR-023 Phase 2, BRIDGE-2).\n *\n * All thrown by the three enforcement sites named in ADR-023 §Multi-tenancy:\n *   - `EventFlowService.publishAndStart` entry (BRIDGE-7)\n *   - `BridgeDeliveryHandler.handle` entry (BRIDGE-5)\n *   - `DrizzleBridgeDeliveryRepo.insertDelivery` pre-write (BRIDGE-4)\n *\n * Same shape as `runtime/subsystems/jobs/jobs-errors.ts` and\n * `runtime/subsystems/events/events-errors.ts` so consumers can catch them\n * with the same exception-filter pattern across all three subsystems.\n */\n\n/**\n * Thrown when `BridgeModule` was configured with `multiTenant: true` but\n * the caller did not pass a `tenantId` at one of the three enforcement\n * sites listed above.\n *\n * **Strict enforcement rationale (mirrors JOB-8 / SYNC-6 stance, locked\n * 2026-04-18 for jobs; same rationale applies here).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship;\n * surfacing the misuse loudly at the call site (rather than silently\n * defaulting to `null` or to \"the last tenant seen\") prevents both\n * accidental global writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   work (e.g. a system housekeeping event with no owning tenant). The\n *   `bridge_delivery` row is persisted with `tenant_id = NULL`.\n *\n * The `callSite` constructor argument names which of the three enforcement\n * sites threw — review reports and ops dashboards rely on a stable site\n * name, so use the canonical strings: `'EventFlowService.publishAndStart'`,\n * `'BridgeDeliveryHandler.handle'`,\n * `'DrizzleBridgeDeliveryRepo.insertDelivery'`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly callSite: string) {\n    super(\n      `MissingTenantIdError: BridgeModule was configured with ` +\n        `multiTenant=true but ${callSite} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Synthetic error thrown by `MemoryBridgeDeliveryRepo.insertDelivery` when\n * a duplicate `(event_id, trigger_id)` insert hits the simulated UNIQUE\n * constraint (BRIDGE-3).\n *\n * Carries a `constraint` field equal to the Drizzle constraint name\n * declared in BRIDGE-1's schema (`uq_bridge_delivery_event_trigger`) so\n * call sites can branch on the same discriminator regardless of which\n * backend is wired up. This matters because ADR-023 explicitly leans on\n * the constraint as the dedup mechanism in two places — outbox replay\n * and `publishAndStart` Case B — and BRIDGE-4 / BRIDGE-7 will share a\n * type-check path with BRIDGE-3-driven tests.\n *\n * The Drizzle backend (BRIDGE-4) does NOT throw this error: it uses\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING RETURNING id`\n * per the BRIDGE-4 spec recommendation, so collisions surface as an empty\n * result set rather than an exception. The error exists so the memory\n * backend can faithfully model the \"duplicate raises\" behaviour for tests\n * that want to assert the constraint actually fires.\n */\n/**\n * Thrown by `BridgeModule.onModuleInit` when `JobWorkerModule` is wired\n * alongside the bridge but its active `pools` list does not include one\n * or more of the three reserved bridge pools (`events_inbound`,\n * `events_change`, `events_outbound`).\n *\n * Without a worker polling those pools, the wrapper `job_run` rows the\n * outbox drain inserts (BRIDGE-4) sit `pending` forever — a silent\n * footgun where `eventFlow.publish(...)` returns success but no user\n * job ever spawns. The boot-time check converts that into a fail-fast.\n *\n * Operators can either (a) add `...BRIDGE_RESERVED_POOLS` to their\n * `JobWorkerModule.forRoot({ pools })` configuration so the same\n * process polls the reserved pools, or (b) run a separate worker\n * process per reserved pool for lane isolation (ADR-022 §Pool\n * isolation).\n */\nexport class BridgeReservedPoolsNotPolledError extends Error {\n  override readonly name = 'BridgeReservedPoolsNotPolledError';\n  constructor(public readonly missingPools: readonly string[]) {\n    super(\n      `BridgeModule loaded but JobWorkerModule is not polling reserved ` +\n        `pool '${missingPools[0]}'. Add ...BRIDGE_RESERVED_POOLS to your ` +\n        `JobWorkerModule.forRoot({ pools }) configuration. Missing pools: ` +\n        `${missingPools.join(', ')}. (Bridge-fanout wrappers will sit ` +\n        `pending forever without these pollers.)`,\n    );\n  }\n}\n\nexport class UniqueConstraintError extends Error {\n  override readonly name = 'UniqueConstraintError';\n  constructor(\n    public readonly constraint: string,\n    public readonly eventId: string,\n    public readonly triggerId: string,\n  ) {\n    super(\n      `UniqueConstraintError: duplicate insert into bridge_delivery for ` +\n        `(event_id='${eventId}', trigger_id='${triggerId}') — violates ` +\n        `constraint '${constraint}'.`,\n    );\n  }\n}\n"],"mappings":";AAuBA,SAAS,kBAAkB;;;AC2EpB,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAE/C,YACkB,YACA,SACA,WAChB;AACA;AAAA,MACE,+EACgB,OAAO,kBAAkB,SAAS,kCACjC,UAAU;AAAA,IAC7B;AARgB;AACA;AACA;AAAA,EAOlB;AAAA,EATkB;AAAA,EACA;AAAA,EACA;AAAA,EAJA,OAAO;AAY3B;;;AD9EA,IAAM,oCACJ;AAEF,SAAS,IAAI,SAAiB,WAA2B;AACvD,SAAO,GAAG,OAAO,KAAK,SAAS;AACjC;AAEO,IAAM,2BAAN,MAAqD;AAAA,EACzC,aAAa,oBAAI,IAAkC;AAAA,EAEpE,MAAM,eAAe,KAA0C;AAC7D,UAAM,IAAI,IAAI,IAAI,SAAS,IAAI,SAAS;AACxC,QAAI,KAAK,WAAW,IAAI,CAAC,GAAG;AAC1B,YAAM,IAAI;AAAA,QACR;AAAA,QACA,IAAI;AAAA,QACJ,IAAI;AAAA,MACN;AAAA,IACF;AAGA,UAAM,SAA+B;AAAA,MACnC,IAAI,IAAI,MAAM,WAAW;AAAA,MACzB,SAAS,IAAI;AAAA,MACb,WAAW,IAAI;AAAA,MACf,cAAc,IAAI,gBAAgB;AAAA,MAClC,WAAW,IAAI,aAAa;AAAA,MAC5B,QAAQ,IAAI,UAAU;AAAA,MACtB,YAAY,IAAI,cAAc;AAAA,MAC9B,OAAQ,IAAI,SAAwD;AAAA,MACpE,UAAU,IAAI,YAAY;AAAA,MAC1B,aACE,IAAI,uBAAuB,OAAO,IAAI,cAAc,oBAAI,KAAK;AAAA,MAC/D,aACE,IAAI,uBAAuB,OAAO,IAAI,cAAc;AAAA,IACxD;AACA,SAAK,WAAW,IAAI,GAAG,MAAM;AAAA,EAC/B;AAAA,EAEA,MAAM,aACJ,SACA,WACsC;AACtC,WAAO,KAAK,WAAW,IAAI,IAAI,SAAS,SAAS,CAAC,KAAK;AAAA,EACzD;AAAA,EAEA,MAAM,iBAAiB,IAAkD;AACvE,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,OAAO,GAAI,QAAO;AAAA,IAC/B;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cAAc,IAAY,WAAkC;AAChE,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,YAAY;AACnB,WAAO,cAAc,oBAAI,KAAK;AAAA,EAChC;AAAA,EAEA,MAAM,YAAY,IAAY,QAA+B;AAC3D,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,aAAa;AAAA,EACtB;AAAA,EAEA,MAAM,WACJ,IACA,OACe;AACf,UAAM,SAAS,KAAK,SAAS,EAAE;AAC/B,WAAO,SAAS;AAChB,WAAO,QAAQ;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,mBACJ,aACA,UAOA,QAAgB,KAAK,IAAI,GACC;AAC1B,QAAI,CAAC,OAAO,SAAS,WAAW,KAAK,eAAe,GAAG;AACrD,YAAM,IAAI,WAAW,8BAA8B;AAAA,IACrD;AAEA,UAAM,WAAW,QAAQ,cAAc;AACvC,UAAM,YAA6B;AAAA,MACjC,SAAS;AAAA,MACT,WAAW;AAAA,MACX,SAAS;AAAA,MACT,QAAQ;AAAA,IACV;AAEA,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,YAAY,QAAQ,IAAI,SAAU;AAC7C,UAAI,aAAa,QAAQ,OAAO,aAAa,KAAM;AACnD,UAAI,OAAO,aAAa,YAAY,OAAO,aAAa,UAAU;AAChE;AAAA,MACF;AAEA,gBAAU,OAAO,MAAM,KAAK;AAAA,IAC9B;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAKA,sBAAsB,SAAyC;AAC7D,WAAO,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,OAAO;AAAA,EAC1E;AAAA;AAAA,EAGA,YACE,QACwB;AACxB,WAAO,CAAC,GAAG,KAAK,WAAW,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,MAAM;AAAA,EACxE;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,WAAW,MAAM;AAAA,EACxB;AAAA;AAAA,EAIQ,SAAS,IAAkC;AACjD,eAAW,UAAU,KAAK,WAAW,OAAO,GAAG;AAC7C,UAAI,OAAO,OAAO,GAAI,QAAO;AAAA,IAC/B;AACA,UAAM,IAAI;AAAA,MACR,kDAAkD,EAAE;AAAA,IAItD;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/runtime/subsystems/bridge/bridge-delivery.schema.js

@@ -1,312 +1,10 @@
-// runtime/subsystems/bridge/bridge-delivery.schema.ts
 import {
-  index as index3,
-  jsonb as jsonb3,
-  pgEnum as pgEnum2,
-  pgTable as pgTable3,
-  text as text3,
-  timestamp as timestamp3,
-  unique,
-  uuid as uuid3
-} from "drizzle-orm/pg-core";
-import { sql as sql3 } from "drizzle-orm";
-
-// runtime/subsystems/events/domain-events.schema.ts
-import {
-  check,
-  index,
-  jsonb,
-  pgTable,
-  text,
-  timestamp,
-  uuid
-} from "drizzle-orm/pg-core";
-import { sql } from "drizzle-orm";
-var domainEvents = pgTable(
-  "domain_events",
-  {
-    id: uuid("id").primaryKey(),
-    type: text("type").notNull(),
-    aggregateId: text("aggregate_id").notNull(),
-    aggregateType: text("aggregate_type").notNull(),
-    payload: jsonb("payload").notNull().$type(),
-    occurredAt: timestamp("occurred_at", { withTimezone: true }).notNull(),
-    processedAt: timestamp("processed_at", { withTimezone: true }),
-    /** Lifecycle status: pending | processed | failed */
-    status: text("status").notNull().default("pending"),
-    /** Error message from the last failed dispatch attempt. */
-    error: text("error"),
-    metadata: jsonb("metadata").$type(),
-    /** Routing pool (e.g. `events_inbound`, `events_change`, `events_outbound`). Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */
-    pool: text("pool"),
-    /** Routing direction: `inbound` | `change` | `outbound`. Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */
-    direction: text("direction"),
-    /**
-     * Event tier: `'domain'` (default) or `'audit'`. Audit-tier rows are
-     * observability-only and have null `pool`/`direction` by construction —
-     * enforced by the `domain_events_tier_routing_check` CHECK constraint
-     * declared below. (AUDIT-1)
-     */
-    tier: text("tier").notNull().default("domain"),
-    // conditional: emitted only when events.multi_tenant: true
-    tenantId: text("tenant_id")
-  },
-  (t) => ({
-    /** Polling drain filter (existing — promoted from comment to declaration in EVT-1). */
-    idxDomainEventsStatusOccurredAt: index("idx_domain_events_status_occurred_at").on(
-      t.status,
-      t.occurredAt
-    ),
-    /** Event replay per aggregate (existing — promoted from comment to declaration in EVT-1). */
-    idxDomainEventsAggregate: index("idx_domain_events_aggregate").on(
-      t.aggregateId,
-      t.aggregateType
-    ),
-    /** Per-pool drain filter (EVT-1). Enables DrizzleEventBus to drain a single pool without scanning all events. */
-    idxDomainEventsPoolStatusOccurredAt: index(
-      "idx_domain_events_pool_status_occurred_at"
-    ).on(t.pool, t.status, t.occurredAt),
-    /** Per-tier filter (AUDIT-1). Backs the observability viewer's tier toggle. */
-    idxDomainEventsTierStatusOccurredAt: index(
-      "idx_domain_events_tier_status_occurred_at"
-    ).on(t.tier, t.status, t.occurredAt),
-    /**
-     * Tier ↔ routing-fields invariant (AUDIT-1):
-     *   - `tier` is one of `'domain' | 'audit'`.
-     *   - `tier='audit'` ⇔ `pool IS NULL AND direction IS NULL`.
-     *   - `tier='domain'` ⇒ `pool` and `direction` are populated (the
-     *     DrizzleEventBus inserts always supply them; the bus stamps them
-     *     in AUDIT-3).
-     */
-    tierRoutingCheck: check(
-      "domain_events_tier_routing_check",
-      sql`${t.tier} in ('domain','audit') AND ((${t.tier} = 'audit') = (${t.pool} is null and ${t.direction} is null))`
-    )
-  })
-);
-
-// runtime/subsystems/jobs/job-orchestration.schema.ts
-import {
-  pgEnum,
-  pgTable as pgTable2,
-  uuid as uuid2,
-  text as text2,
-  jsonb as jsonb2,
-  integer,
-  timestamp as timestamp2,
-  index as index2,
-  uniqueIndex
-} from "drizzle-orm/pg-core";
-import { sql as sql2 } from "drizzle-orm";
-var jobRunStatusEnum = pgEnum("job_run_status", [
-  "pending",
-  "running",
-  "waiting",
-  "completed",
-  "failed",
-  "timed_out",
-  "canceled"
-]);
-var jobStepKindEnum = pgEnum("job_step_kind", ["task"]);
-var jobStepStatusEnum = pgEnum("job_step_status", [
-  "pending",
-  "running",
-  "completed",
-  "failed",
-  "skipped"
-]);
-var collisionModeEnum = pgEnum("job_collision_mode", [
-  "queue",
-  "reject",
-  "replace"
-]);
-var replayFromEnum = pgEnum("job_replay_from", [
-  "scratch",
-  "last_step",
-  "last_checkpoint"
-]);
-var parentClosePolicyEnum = pgEnum("job_parent_close_policy", [
-  "terminate",
-  "cancel",
-  "abandon"
-]);
-var waitKindEnum = pgEnum("job_wait_kind", ["signal"]);
-var triggerSourceEnum = pgEnum("job_trigger_source", [
-  "manual",
-  "schedule",
-  "event",
-  "parent"
-]);
-var jobs = pgTable2("job", {
-  type: text2("type").primaryKey(),
-  version: integer("version").notNull().default(1),
-  pool: text2("pool").notNull(),
-  scopeEntityType: text2("scope_entity_type"),
-  retryPolicy: jsonb2("retry_policy").notNull().$type(),
-  timeoutMs: integer("timeout_ms"),
-  concurrencyKeyTemplate: text2("concurrency_key_template"),
-  collisionMode: collisionModeEnum("collision_mode").notNull().default("queue"),
-  dedupeKeyTemplate: text2("dedupe_key_template"),
-  dedupeWindowMs: integer("dedupe_window_ms"),
-  priorityDefault: integer("priority_default").notNull().default(0),
-  replayFrom: replayFromEnum("replay_from").notNull().default("last_checkpoint"),
-  createdAt: timestamp2("created_at", { withTimezone: true }).notNull().defaultNow(),
-  updatedAt: timestamp2("updated_at", { withTimezone: true }).notNull().defaultNow()
-});
-var jobRuns = pgTable2(
-  "job_run",
-  {
-    id: uuid2("id").primaryKey().defaultRandom(),
-    jobType: text2("job_type").notNull().references(() => jobs.type),
-    jobVersion: integer("job_version").notNull(),
-    parentRunId: uuid2("parent_run_id").references(() => jobRuns.id),
-    /**
-     * Service generates `id` client-side via randomUUID() and sets
-     * root_run_id = id for root runs (single INSERT, no self-FK race).
-     */
-    rootRunId: uuid2("root_run_id").notNull(),
-    parentClosePolicy: parentClosePolicyEnum("parent_close_policy").notNull().default("terminate"),
-    scopeEntityType: text2("scope_entity_type"),
-    scopeEntityId: text2("scope_entity_id"),
-    tenantId: text2("tenant_id"),
-    tags: jsonb2("tags").notNull().default({}).$type(),
-    pool: text2("pool").notNull(),
-    priority: integer("priority").notNull().default(0),
-    concurrencyKey: text2("concurrency_key"),
-    dedupeKey: text2("dedupe_key"),
-    status: jobRunStatusEnum("status").notNull().default("pending"),
-    input: jsonb2("input").notNull().$type(),
-    output: jsonb2("output").$type(),
-    error: jsonb2("error").$type(),
-    triggerSource: triggerSourceEnum("trigger_source").notNull(),
-    triggerRef: text2("trigger_ref"),
-    runAt: timestamp2("run_at", { withTimezone: true }).notNull().defaultNow(),
-    startedAt: timestamp2("started_at", { withTimezone: true }),
-    finishedAt: timestamp2("finished_at", { withTimezone: true }),
-    claimedAt: timestamp2("claimed_at", { withTimezone: true }),
-    attempts: integer("attempts").notNull().default(0),
-    // Phase 3 placeholder — see ADR-025
-    waitKind: waitKindEnum("wait_kind"),
-    // Phase 3 placeholder — see ADR-025
-    resumeToken: text2("resume_token"),
-    // Phase 3 placeholder — see ADR-025
-    waitDeadline: timestamp2("wait_deadline", { withTimezone: true }),
-    createdAt: timestamp2("created_at", { withTimezone: true }).notNull().defaultNow(),
-    updatedAt: timestamp2("updated_at", { withTimezone: true }).notNull().defaultNow()
-  },
-  (t) => ({
-    /** Claim query: ORDER BY priority DESC, run_at ASC. */
-    idxJobRunClaim: index2("idx_job_run_claim").on(t.status, t.pool, t.runAt),
-    /** Tree traversal / cascade cancel. */
-    idxJobRunRoot: index2("idx_job_run_root").on(t.rootRunId),
-    /** listForScope query. */
-    idxJobRunScope: index2("idx_job_run_scope").on(t.scopeEntityType, t.scopeEntityId),
-    /** Idempotency collapse — partial index. */
-    idxJobRunDedupe: index2("idx_job_run_dedupe").on(t.jobType, t.dedupeKey).where(sql2`${t.dedupeKey} IS NOT NULL`),
-    /** Collision check — partial index. */
-    idxJobRunConcurrency: index2("idx_job_run_concurrency").on(t.concurrencyKey).where(
-      sql2`${t.concurrencyKey} IS NOT NULL AND ${t.status} IN ('pending','running')`
-    )
-  })
-);
-var jobSteps = pgTable2(
-  "job_step",
-  {
-    id: uuid2("id").primaryKey().defaultRandom(),
-    jobRunId: uuid2("job_run_id").notNull().references(() => jobRuns.id),
-    stepId: text2("step_id").notNull(),
-    kind: jobStepKindEnum("kind").notNull().default("task"),
-    /**
-     * Monotonic within run. integer (max ~2B per run) is sufficient —
-     * downgraded from ADR-022's bigint; revisit only if a single run
-     * ever exceeds 2 billion steps.
-     */
-    seq: integer("seq").notNull(),
-    status: jobStepStatusEnum("status").notNull().default("pending"),
-    input: jsonb2("input").$type(),
-    /** Memoised on success for replay. */
-    output: jsonb2("output").$type(),
-    error: jsonb2("error").$type(),
-    attempts: integer("attempts").notNull().default(0),
-    startedAt: timestamp2("started_at", { withTimezone: true }),
-    finishedAt: timestamp2("finished_at", { withTimezone: true })
-  },
-  (t) => ({
-    /** No duplicate step IDs per run. */
-    idxJobStepRunStep: uniqueIndex("idx_job_step_run_step").on(t.jobRunId, t.stepId),
-    /** Ordered timeline reads. */
-    idxJobStepTimeline: index2("idx_job_step_timeline").on(t.jobRunId, t.seq)
-  })
-);
-
-// runtime/subsystems/bridge/bridge-delivery.schema.ts
-var bridgeDeliveryStatusEnum = pgEnum2("bridge_delivery_status", [
-  "pending",
-  "delivered",
-  "skipped",
-  "failed"
-]);
-var bridgeDelivery = pgTable3(
-  "bridge_delivery",
-  {
-    id: uuid3("id").primaryKey().defaultRandom(),
-    /** FK to the source event in the outbox. */
-    eventId: uuid3("event_id").notNull().references(() => domainEvents.id),
-    /**
-     * Stable codegen-emitted identifier for the (job, trigger) pair, of the
-     * form `<job_type>#<triggerIndex>` (BRIDGE-6). Forms the second half of
-     * the UNIQUE idempotency key.
-     */
-    triggerId: text3("trigger_id").notNull(),
-    /**
-     * Wrapper `job_run.id` (the framework `@framework/bridge_delivery` run
-     * that drove this delivery). Nullable: the facade-eager path
-     * (`publishAndStart` Case B) pre-writes a delivered row with no wrapper.
-     */
-    wrapperRunId: uuid3("wrapper_run_id").references(() => jobRuns.id),
-    /**
-     * Spawned user `job_run.id`. Null until status is `delivered`; remains
-     * null for `skipped` and `failed` deliveries.
-     */
-    userRunId: uuid3("user_run_id").references(() => jobRuns.id),
-    status: bridgeDeliveryStatusEnum("status").notNull().default("pending"),
-    /** Populated when status=`skipped` (e.g. `'when_returned_false'`, `'trigger_unregistered'`). */
-    skipReason: text3("skip_reason"),
-    /** Populated when status=`failed`. Mirrors `job_run.error` shape. */
-    error: jsonb3("error").$type(),
-    /**
-     * Emitted unconditionally and nullable (JOB-8 / SYNC-6 precedent).
-     * Enforcement gated on `BRIDGE_MULTI_TENANT` at the service layer
-     * (BRIDGE-8); no DB constraint.
-     */
-    tenantId: text3("tenant_id"),
-    attemptedAt: timestamp3("attempted_at", { withTimezone: true }).notNull().defaultNow(),
-    deliveredAt: timestamp3("delivered_at", { withTimezone: true })
-  },
-  (t) => ({
-    /**
-     * Idempotency ledger. Outbox replays and facade-vs-drain collisions both
-     * dedup through this constraint.
-     */
-    uqBridgeDeliveryEventTrigger: unique("uq_bridge_delivery_event_trigger").on(
-      t.eventId,
-      t.triggerId
-    ),
-    /** Lookup all deliveries for an event (fanout report, debugging). */
-    idxBridgeDeliveryEvent: index3("idx_bridge_delivery_event").on(t.eventId),
-    /**
-     * Ops dashboard filter — only the actionable states. Partial index keeps
-     * it small at scale (the bulk of rows will be `delivered`).
-     */
-    idxBridgeDeliveryStatus: index3("idx_bridge_delivery_status").on(t.status).where(sql3`${t.status} IN ('pending','failed')`),
-    /**
-     * Reverse lookup from a spawned user run back to its delivery row.
-     * Partial — most rows in the bridge ledger but only successful
-     * deliveries have a `user_run_id`.
-     */
-    idxBridgeDeliveryUserRun: index3("idx_bridge_delivery_user_run").on(t.userRunId).where(sql3`${t.userRunId} IS NOT NULL`)
-  })
-);
+  bridgeDelivery,
+  bridgeDeliveryStatusEnum
+} from "../../../chunk-2TVVBC53.js";
+import "../../../chunk-OKXZ63IA.js";
+import "../../../chunk-OFRRBC7M.js";
+import "../../../chunk-2E224ZSN.js";
 export {
   bridgeDelivery,
   bridgeDeliveryStatusEnum

package/dist/runtime/subsystems/bridge/bridge-delivery.schema.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../runtime/subsystems/bridge/bridge-delivery.schema.ts","../../../../runtime/subsystems/events/domain-events.schema.ts","../../../../runtime/subsystems/jobs/job-orchestration.schema.ts"],"sourcesContent":["/**\n * Drizzle schema for the `bridge_delivery` ledger (ADR-023 Phase 2, BRIDGE-1).\n *\n * The `bridge_delivery` table is the idempotency ledger for the event-to-job\n * bridge. Every (event, trigger) pair the bridge is asked to spawn produces\n * exactly one row; the `UNIQUE (event_id, trigger_id)` constraint guarantees\n * that:\n *\n *   1. Outbox replays of an event do not double-spawn user job runs — the\n *      drain attempts to insert the duplicate, the constraint trips, and the\n *      drain skips that trigger.\n *   2. The `IEventFlow.publishAndStart` facade can pre-write a\n *      `(status='delivered')` row before the drain runs (Case B from ADR-023\n *      §`publishAndStart` + existing `triggers:` collision); the drain then\n *      hits UNIQUE on that trigger and skips it while still spawning any\n *      other triggers for the same event normally.\n *\n * Status values:\n *   - `pending`   — wrapper run exists; user job not yet started.\n *   - `delivered` — user job started; `user_run_id` populated.\n *   - `skipped`   — intentional no-op (`when:` returned false, or\n *                   facade-eager path pre-empted the bridge spawn).\n *   - `failed`    — wrapper exhausted retry policy; no auto-retry past that\n *                   (mirrors events outbox stance — ops eyes only).\n *\n * `wrapper_run_id` is **nullable**: the facade-eager path (Case B) pre-writes\n * `bridge_delivery` with no wrapper. The bridge-drain path always populates\n * it.\n *\n * `tenant_id` is emitted **unconditionally and nullable** (per JOB-8\n * 2026-04-20 reversal); enforcement is service-layer (BRIDGE-8) gated on the\n * `BRIDGE_MULTI_TENANT` DI token, not a DB constraint.\n *\n * Indexes:\n *   - `bridge_delivery_event_idx` — lookup all deliveries for an event.\n *   - `bridge_delivery_status_idx` — partial; ops dashboards filter by\n *     `pending | failed`.\n *   - `bridge_delivery_user_run_idx` — partial; reverse lookup from a\n *     spawned user run back to its delivery row.\n *\n * No service logic, no DI wiring — this is the schema foundation. Backends\n * (memory + drizzle) and the framework handler land in BRIDGE-3 / BRIDGE-4 /\n * BRIDGE-5.\n */\nimport {\n  index,\n  jsonb,\n  pgEnum,\n  pgTable,\n  text,\n  timestamp,\n  unique,\n  uuid,\n} from 'drizzle-orm/pg-core';\nimport { sql } from 'drizzle-orm';\nimport type { InferSelectModel } from 'drizzle-orm';\n\nimport { domainEvents } from '../events/domain-events.schema';\nimport { jobRuns } from '../jobs/job-orchestration.schema';\n\n// ─── Enum ───────────────────────────────────────────────────────────────────\n\nexport const bridgeDeliveryStatusEnum = pgEnum('bridge_delivery_status', [\n  'pending',\n  'delivered',\n  'skipped',\n  'failed',\n]);\n\n// ─── Table ──────────────────────────────────────────────────────────────────\n\nexport const bridgeDelivery = pgTable(\n  'bridge_delivery',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    /** FK to the source event in the outbox. */\n    eventId: uuid('event_id')\n      .notNull()\n      .references(() => domainEvents.id),\n    /**\n     * Stable codegen-emitted identifier for the (job, trigger) pair, of the\n     * form `<job_type>#<triggerIndex>` (BRIDGE-6). Forms the second half of\n     * the UNIQUE idempotency key.\n     */\n    triggerId: text('trigger_id').notNull(),\n    /**\n     * Wrapper `job_run.id` (the framework `@framework/bridge_delivery` run\n     * that drove this delivery). Nullable: the facade-eager path\n     * (`publishAndStart` Case B) pre-writes a delivered row with no wrapper.\n     */\n    wrapperRunId: uuid('wrapper_run_id').references(() => jobRuns.id),\n    /**\n     * Spawned user `job_run.id`. Null until status is `delivered`; remains\n     * null for `skipped` and `failed` deliveries.\n     */\n    userRunId: uuid('user_run_id').references(() => jobRuns.id),\n    status: bridgeDeliveryStatusEnum('status').notNull().default('pending'),\n    /** Populated when status=`skipped` (e.g. `'when_returned_false'`, `'trigger_unregistered'`). */\n    skipReason: text('skip_reason'),\n    /** Populated when status=`failed`. Mirrors `job_run.error` shape. */\n    error: jsonb('error').$type<Record<string, unknown>>(),\n    /**\n     * Emitted unconditionally and nullable (JOB-8 / SYNC-6 precedent).\n     * Enforcement gated on `BRIDGE_MULTI_TENANT` at the service layer\n     * (BRIDGE-8); no DB constraint.\n     */\n    tenantId: text('tenant_id'),\n    attemptedAt: timestamp('attempted_at', { withTimezone: true })\n      .notNull()\n      .defaultNow(),\n    deliveredAt: timestamp('delivered_at', { withTimezone: true }),\n  },\n  (t) => ({\n    /**\n     * Idempotency ledger. Outbox replays and facade-vs-drain collisions both\n     * dedup through this constraint.\n     */\n    uqBridgeDeliveryEventTrigger: unique('uq_bridge_delivery_event_trigger').on(\n      t.eventId,\n      t.triggerId,\n    ),\n    /** Lookup all deliveries for an event (fanout report, debugging). */\n    idxBridgeDeliveryEvent: index('idx_bridge_delivery_event').on(t.eventId),\n    /**\n     * Ops dashboard filter — only the actionable states. Partial index keeps\n     * it small at scale (the bulk of rows will be `delivered`).\n     */\n    idxBridgeDeliveryStatus: index('idx_bridge_delivery_status')\n      .on(t.status)\n      .where(sql`${t.status} IN ('pending','failed')`),\n    /**\n     * Reverse lookup from a spawned user run back to its delivery row.\n     * Partial — most rows in the bridge ledger but only successful\n     * deliveries have a `user_run_id`.\n     */\n    idxBridgeDeliveryUserRun: index('idx_bridge_delivery_user_run')\n      .on(t.userRunId)\n      .where(sql`${t.userRunId} IS NOT NULL`),\n  }),\n);\n\nexport type BridgeDeliveryRecord = InferSelectModel<typeof bridgeDelivery>;\n","/**\n * Drizzle schema for the domain_events outbox table.\n *\n * This table backs the DrizzleEventBus. Events are inserted within the\n * same database transaction as the domain write (outbox pattern). A\n * polling process reads unprocessed rows and dispatches to subscribers.\n *\n * First-class routing columns (EVT-1):\n *   - `pool`       — populated by DrizzleEventBus.publish() (EVT-4); enables\n *                    pool-filtered drain queries without unpacking metadata JSON.\n *                    NULL when `tier='audit'` (audit events are not routed).\n *   - `direction`  — `inbound` | `change` | `outbound`; mirrors the routing\n *                    dimension used by jobs' reserved `events_inbound` /\n *                    `events_change` / `events_outbound` pools.\n *                    NULL when `tier='audit'`.\n *   - `tenant_id`  — conditional: emitted only when `events.multi_tenant: true`\n *                    in `codegen.config.yaml`. The runtime source declares it\n *                    unconditionally; EVT-8's scaffold template handles the\n *                    config-driven include/exclude.\n *\n * Audit-tier column (AUDIT-1):\n *   - `tier`       — `'domain'` | `'audit'`. Defaults to `'domain'`. Audit-tier\n *                    rows are observability-only (subscribers may observe but\n *                    the bridge MUST NOT spawn jobs from them); they have null\n *                    `pool` and `direction` by construction. The CHECK\n *                    constraint `domain_events_tier_routing_check` enforces\n *                    `tier='audit' ⇔ (pool IS NULL AND direction IS NULL)`.\n *\n * The `metadata` JSON column continues to carry these values for protocol\n * stability; the first-class columns are an optimization for drain filtering.\n *\n * Indexes (declared below in the index callback):\n *   - (status, occurred_at)             — polling drain filter\n *   - (aggregate_id, aggregate_type)    — event replay per aggregate\n *   - (pool, status, occurred_at)       — per-pool drain filter (EVT-1)\n *   - (tier, status, occurred_at)       — per-tier filter for the observability\n *                                          viewer's tier toggle (AUDIT-1).\n */\nimport {\n  check,\n  index,\n  jsonb,\n  pgTable,\n  text,\n  timestamp,\n  uuid,\n} from 'drizzle-orm/pg-core';\nimport { sql } from 'drizzle-orm';\nimport type { InferSelectModel } from 'drizzle-orm';\n\nexport const domainEvents = pgTable(\n  'domain_events',\n  {\n    id: uuid('id').primaryKey(),\n    type: text('type').notNull(),\n    aggregateId: text('aggregate_id').notNull(),\n    aggregateType: text('aggregate_type').notNull(),\n    payload: jsonb('payload').notNull().$type<Record<string, unknown>>(),\n    occurredAt: timestamp('occurred_at', { withTimezone: true }).notNull(),\n    processedAt: timestamp('processed_at', { withTimezone: true }),\n    /** Lifecycle status: pending | processed | failed */\n    status: text('status').notNull().default('pending'),\n    /** Error message from the last failed dispatch attempt. */\n    error: text('error'),\n    metadata: jsonb('metadata').$type<Record<string, unknown>>(),\n    /** Routing pool (e.g. `events_inbound`, `events_change`, `events_outbound`). Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */\n    pool: text('pool'),\n    /** Routing direction: `inbound` | `change` | `outbound`. Populated by DrizzleEventBus.publish() in EVT-4. NULL when `tier='audit'`. */\n    direction: text('direction'),\n    /**\n     * Event tier: `'domain'` (default) or `'audit'`. Audit-tier rows are\n     * observability-only and have null `pool`/`direction` by construction —\n     * enforced by the `domain_events_tier_routing_check` CHECK constraint\n     * declared below. (AUDIT-1)\n     */\n    tier: text('tier').notNull().default('domain'),\n    // conditional: emitted only when events.multi_tenant: true\n    tenantId: text('tenant_id'),\n  },\n  (t) => ({\n    /** Polling drain filter (existing — promoted from comment to declaration in EVT-1). */\n    idxDomainEventsStatusOccurredAt: index('idx_domain_events_status_occurred_at').on(\n      t.status,\n      t.occurredAt,\n    ),\n    /** Event replay per aggregate (existing — promoted from comment to declaration in EVT-1). */\n    idxDomainEventsAggregate: index('idx_domain_events_aggregate').on(\n      t.aggregateId,\n      t.aggregateType,\n    ),\n    /** Per-pool drain filter (EVT-1). Enables DrizzleEventBus to drain a single pool without scanning all events. */\n    idxDomainEventsPoolStatusOccurredAt: index(\n      'idx_domain_events_pool_status_occurred_at',\n    ).on(t.pool, t.status, t.occurredAt),\n    /** Per-tier filter (AUDIT-1). Backs the observability viewer's tier toggle. */\n    idxDomainEventsTierStatusOccurredAt: index(\n      'idx_domain_events_tier_status_occurred_at',\n    ).on(t.tier, t.status, t.occurredAt),\n    /**\n     * Tier ↔ routing-fields invariant (AUDIT-1):\n     *   - `tier` is one of `'domain' | 'audit'`.\n     *   - `tier='audit'` ⇔ `pool IS NULL AND direction IS NULL`.\n     *   - `tier='domain'` ⇒ `pool` and `direction` are populated (the\n     *     DrizzleEventBus inserts always supply them; the bus stamps them\n     *     in AUDIT-3).\n     */\n    tierRoutingCheck: check(\n      'domain_events_tier_routing_check',\n      sql`${t.tier} in ('domain','audit') AND ((${t.tier} = 'audit') = (${t.pool} is null and ${t.direction} is null))`,\n    ),\n  }),\n);\n\nexport type DomainEventRecord = InferSelectModel<typeof domainEvents>;\n","/**\n * Drizzle schema for the job orchestration domain (ADR-022).\n *\n * Three tables model the lifecycle of a durable job:\n *   - `job`       — definitions keyed by handler type (e.g. 'onboarding').\n *   - `job_run`   — one row per attempt to execute a job; worker claims\n *                   rows directly via SELECT ... FOR UPDATE SKIP LOCKED.\n *   - `job_step`  — individual steps within a run; memoises output for replay.\n *\n * Phase 1 ships only this layer. There is no `job_queue` table, no executor\n * port — see ADR-022 and `.claude/skills/jobs/SKILL.md` for the rationale.\n */\nimport {\n  pgEnum,\n  pgTable,\n  uuid,\n  text,\n  jsonb,\n  integer,\n  timestamp,\n  index,\n  uniqueIndex,\n} from 'drizzle-orm/pg-core';\nimport { sql } from 'drizzle-orm';\nimport type { InferSelectModel } from 'drizzle-orm';\n\n// ─── Internal $type<> helpers ───────────────────────────────────────────────\n// Annotation types for jsonb columns only. JOB-2 defines the public protocol\n// types; these remain private to this file.\n\ntype RetryPolicy = {\n  attempts: number;\n  backoff: 'fixed' | 'exponential';\n  baseMs: number;\n  nonRetryableErrors?: string[];\n};\n\ntype JobRunError = {\n  message: string;\n  stack?: string;\n  retryable: boolean;\n  attempt: number;\n};\n\n// ─── Enums ──────────────────────────────────────────────────────────────────\n\nexport const jobRunStatusEnum = pgEnum('job_run_status', [\n  'pending',\n  'running',\n  'waiting',\n  'completed',\n  'failed',\n  'timed_out',\n  'canceled',\n]);\n\n// extended in ADR-027: tool_call | llm_call | wait | checkpoint | message\nexport const jobStepKindEnum = pgEnum('job_step_kind', ['task']);\n\nexport const jobStepStatusEnum = pgEnum('job_step_status', [\n  'pending',\n  'running',\n  'completed',\n  'failed',\n  'skipped',\n]);\n\nexport const collisionModeEnum = pgEnum('job_collision_mode', [\n  'queue',\n  'reject',\n  'replace',\n]);\n\nexport const replayFromEnum = pgEnum('job_replay_from', [\n  'scratch',\n  'last_step',\n  'last_checkpoint',\n]);\n\nexport const parentClosePolicyEnum = pgEnum('job_parent_close_policy', [\n  'terminate',\n  'cancel',\n  'abandon',\n]);\n\n// Phase 3 placeholder — see ADR-025\nexport const waitKindEnum = pgEnum('job_wait_kind', ['signal']);\n\n// Phase 2 may add more sources; requires Atlas migration\nexport const triggerSourceEnum = pgEnum('job_trigger_source', [\n  'manual',\n  'schedule',\n  'event',\n  'parent',\n]);\n\n// ─── job ────────────────────────────────────────────────────────────────────\n\nexport const jobs = pgTable('job', {\n  type: text('type').primaryKey(),\n  version: integer('version').notNull().default(1),\n  pool: text('pool').notNull(),\n  scopeEntityType: text('scope_entity_type'),\n  retryPolicy: jsonb('retry_policy').notNull().$type<RetryPolicy>(),\n  timeoutMs: integer('timeout_ms'),\n  concurrencyKeyTemplate: text('concurrency_key_template'),\n  collisionMode: collisionModeEnum('collision_mode').notNull().default('queue'),\n  dedupeKeyTemplate: text('dedupe_key_template'),\n  dedupeWindowMs: integer('dedupe_window_ms'),\n  priorityDefault: integer('priority_default').notNull().default(0),\n  replayFrom: replayFromEnum('replay_from').notNull().default('last_checkpoint'),\n  createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n  updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n});\n\nexport type JobDefinitionRow = InferSelectModel<typeof jobs>;\n\n// ─── job_run ────────────────────────────────────────────────────────────────\n\nexport const jobRuns = pgTable(\n  'job_run',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    jobType: text('job_type').notNull().references(() => jobs.type),\n    jobVersion: integer('job_version').notNull(),\n    parentRunId: uuid('parent_run_id').references((): any => jobRuns.id),\n    /**\n     * Service generates `id` client-side via randomUUID() and sets\n     * root_run_id = id for root runs (single INSERT, no self-FK race).\n     */\n    rootRunId: uuid('root_run_id').notNull(),\n    parentClosePolicy: parentClosePolicyEnum('parent_close_policy')\n      .notNull()\n      .default('terminate'),\n    scopeEntityType: text('scope_entity_type'),\n    scopeEntityId: text('scope_entity_id'),\n    tenantId: text('tenant_id'),\n    tags: jsonb('tags').notNull().default({}).$type<Record<string, string>>(),\n    pool: text('pool').notNull(),\n    priority: integer('priority').notNull().default(0),\n    concurrencyKey: text('concurrency_key'),\n    dedupeKey: text('dedupe_key'),\n    status: jobRunStatusEnum('status').notNull().default('pending'),\n    input: jsonb('input').notNull().$type<Record<string, unknown>>(),\n    output: jsonb('output').$type<Record<string, unknown>>(),\n    error: jsonb('error').$type<JobRunError>(),\n    triggerSource: triggerSourceEnum('trigger_source').notNull(),\n    triggerRef: text('trigger_ref'),\n    runAt: timestamp('run_at', { withTimezone: true }).notNull().defaultNow(),\n    startedAt: timestamp('started_at', { withTimezone: true }),\n    finishedAt: timestamp('finished_at', { withTimezone: true }),\n    claimedAt: timestamp('claimed_at', { withTimezone: true }),\n    attempts: integer('attempts').notNull().default(0),\n    // Phase 3 placeholder — see ADR-025\n    waitKind: waitKindEnum('wait_kind'),\n    // Phase 3 placeholder — see ADR-025\n    resumeToken: text('resume_token'),\n    // Phase 3 placeholder — see ADR-025\n    waitDeadline: timestamp('wait_deadline', { withTimezone: true }),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n  },\n  (t) => ({\n    /** Claim query: ORDER BY priority DESC, run_at ASC. */\n    idxJobRunClaim: index('idx_job_run_claim').on(t.status, t.pool, t.runAt),\n    /** Tree traversal / cascade cancel. */\n    idxJobRunRoot: index('idx_job_run_root').on(t.rootRunId),\n    /** listForScope query. */\n    idxJobRunScope: index('idx_job_run_scope').on(t.scopeEntityType, t.scopeEntityId),\n    /** Idempotency collapse — partial index. */\n    idxJobRunDedupe: index('idx_job_run_dedupe')\n      .on(t.jobType, t.dedupeKey)\n      .where(sql`${t.dedupeKey} IS NOT NULL`),\n    /** Collision check — partial index. */\n    idxJobRunConcurrency: index('idx_job_run_concurrency')\n      .on(t.concurrencyKey)\n      .where(\n        sql`${t.concurrencyKey} IS NOT NULL AND ${t.status} IN ('pending','running')`,\n      ),\n  }),\n);\n\nexport type JobRunRow = InferSelectModel<typeof jobRuns>;\n\n// ─── job_step ───────────────────────────────────────────────────────────────\n\nexport const jobSteps = pgTable(\n  'job_step',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    jobRunId: uuid('job_run_id').notNull().references(() => jobRuns.id),\n    stepId: text('step_id').notNull(),\n    kind: jobStepKindEnum('kind').notNull().default('task'),\n    /**\n     * Monotonic within run. integer (max ~2B per run) is sufficient —\n     * downgraded from ADR-022's bigint; revisit only if a single run\n     * ever exceeds 2 billion steps.\n     */\n    seq: integer('seq').notNull(),\n    status: jobStepStatusEnum('status').notNull().default('pending'),\n    input: jsonb('input').$type<Record<string, unknown>>(),\n    /** Memoised on success for replay. */\n    output: jsonb('output').$type<Record<string, unknown>>(),\n    error: jsonb('error').$type<JobRunError>(),\n    attempts: integer('attempts').notNull().default(0),\n    startedAt: timestamp('started_at', { withTimezone: true }),\n    finishedAt: timestamp('finished_at', { withTimezone: true }),\n  },\n  (t) => ({\n    /** No duplicate step IDs per run. */\n    idxJobStepRunStep: uniqueIndex('idx_job_step_run_step').on(t.jobRunId, t.stepId),\n    /** Ordered timeline reads. */\n    idxJobStepTimeline: index('idx_job_step_timeline').on(t.jobRunId, t.seq),\n  }),\n);\n\nexport type JobStepRow = InferSelectModel<typeof jobSteps>;\n"],"mappings":";AA4CA;AAAA,EACE,SAAAA;AAAA,EACA,SAAAC;AAAA,EACA,UAAAC;AAAA,EACA,WAAAC;AAAA,EACA,QAAAC;AAAA,EACA,aAAAC;AAAA,EACA;AAAA,EACA,QAAAC;AAAA,OACK;AACP,SAAS,OAAAC,YAAW;;;AChBpB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,WAAW;AAGb,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW;AAAA,IAC1B,MAAM,KAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,aAAa,KAAK,cAAc,EAAE,QAAQ;AAAA,IAC1C,eAAe,KAAK,gBAAgB,EAAE,QAAQ;AAAA,IAC9C,SAAS,MAAM,SAAS,EAAE,QAAQ,EAAE,MAA+B;AAAA,IACnE,YAAY,UAAU,eAAe,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ;AAAA,IACrE,aAAa,UAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;AAAA;AAAA,IAE7D,QAAQ,KAAK,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA;AAAA,IAElD,OAAO,KAAK,OAAO;AAAA,IACnB,UAAU,MAAM,UAAU,EAAE,MAA+B;AAAA;AAAA,IAE3D,MAAM,KAAK,MAAM;AAAA;AAAA,IAEjB,WAAW,KAAK,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAO3B,MAAM,KAAK,MAAM,EAAE,QAAQ,EAAE,QAAQ,QAAQ;AAAA;AAAA,IAE7C,UAAU,KAAK,WAAW;AAAA,EAC5B;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,iCAAiC,MAAM,sCAAsC,EAAE;AAAA,MAC7E,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,0BAA0B,MAAM,6BAA6B,EAAE;AAAA,MAC7D,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,qCAAqC;AAAA,MACnC;AAAA,IACF,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;AAAA;AAAA,IAEnC,qCAAqC;AAAA,MACnC;AAAA,IACF,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASnC,kBAAkB;AAAA,MAChB;AAAA,MACA,MAAM,EAAE,IAAI,gCAAgC,EAAE,IAAI,kBAAkB,EAAE,IAAI,gBAAgB,EAAE,SAAS;AAAA,IACvG;AAAA,EACF;AACF;;;ACnGA;AAAA,EACE;AAAA,EACA,WAAAC;AAAA,EACA,QAAAC;AAAA,EACA,QAAAC;AAAA,EACA,SAAAC;AAAA,EACA;AAAA,EACA,aAAAC;AAAA,EACA,SAAAC;AAAA,EACA;AAAA,OACK;AACP,SAAS,OAAAC,YAAW;AAuBb,IAAM,mBAAmB,OAAO,kBAAkB;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,kBAAkB,OAAO,iBAAiB,CAAC,MAAM,CAAC;AAExD,IAAM,oBAAoB,OAAO,mBAAmB;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,oBAAoB,OAAO,sBAAsB;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,iBAAiB,OAAO,mBAAmB;AAAA,EACtD;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,wBAAwB,OAAO,2BAA2B;AAAA,EACrE;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,eAAe,OAAO,iBAAiB,CAAC,QAAQ,CAAC;AAGvD,IAAM,oBAAoB,OAAO,sBAAsB;AAAA,EAC5D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,IAAM,OAAON,SAAQ,OAAO;AAAA,EACjC,MAAME,MAAK,MAAM,EAAE,WAAW;AAAA,EAC9B,SAAS,QAAQ,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,EAC/C,MAAMA,MAAK,MAAM,EAAE,QAAQ;AAAA,EAC3B,iBAAiBA,MAAK,mBAAmB;AAAA,EACzC,aAAaC,OAAM,cAAc,EAAE,QAAQ,EAAE,MAAmB;AAAA,EAChE,WAAW,QAAQ,YAAY;AAAA,EAC/B,wBAAwBD,MAAK,0BAA0B;AAAA,EACvD,eAAe,kBAAkB,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,OAAO;AAAA,EAC5E,mBAAmBA,MAAK,qBAAqB;AAAA,EAC7C,gBAAgB,QAAQ,kBAAkB;AAAA,EAC1C,iBAAiB,QAAQ,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,EAChE,YAAY,eAAe,aAAa,EAAE,QAAQ,EAAE,QAAQ,iBAAiB;AAAA,EAC7E,WAAWE,WAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,EAChF,WAAWA,WAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAClF,CAAC;AAMM,IAAM,UAAUJ;AAAA,EACrB;AAAA,EACA;AAAA,IACE,IAAIC,MAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,SAASC,MAAK,UAAU,EAAE,QAAQ,EAAE,WAAW,MAAM,KAAK,IAAI;AAAA,IAC9D,YAAY,QAAQ,aAAa,EAAE,QAAQ;AAAA,IAC3C,aAAaD,MAAK,eAAe,EAAE,WAAW,MAAW,QAAQ,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKnE,WAAWA,MAAK,aAAa,EAAE,QAAQ;AAAA,IACvC,mBAAmB,sBAAsB,qBAAqB,EAC3D,QAAQ,EACR,QAAQ,WAAW;AAAA,IACtB,iBAAiBC,MAAK,mBAAmB;AAAA,IACzC,eAAeA,MAAK,iBAAiB;AAAA,IACrC,UAAUA,MAAK,WAAW;AAAA,IAC1B,MAAMC,OAAM,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,MAA8B;AAAA,IACxE,MAAMD,MAAK,MAAM,EAAE,QAAQ;AAAA,IAC3B,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IACjD,gBAAgBA,MAAK,iBAAiB;AAAA,IACtC,WAAWA,MAAK,YAAY;AAAA,IAC5B,QAAQ,iBAAiB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC9D,OAAOC,OAAM,OAAO,EAAE,QAAQ,EAAE,MAA+B;AAAA,IAC/D,QAAQA,OAAM,QAAQ,EAAE,MAA+B;AAAA,IACvD,OAAOA,OAAM,OAAO,EAAE,MAAmB;AAAA,IACzC,eAAe,kBAAkB,gBAAgB,EAAE,QAAQ;AAAA,IAC3D,YAAYD,MAAK,aAAa;AAAA,IAC9B,OAAOE,WAAU,UAAU,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,IACxE,WAAWA,WAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAAA,IACzD,YAAYA,WAAU,eAAe,EAAE,cAAc,KAAK,CAAC;AAAA,IAC3D,WAAWA,WAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAAA,IACzD,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA;AAAA,IAEjD,UAAU,aAAa,WAAW;AAAA;AAAA,IAElC,aAAaF,MAAK,cAAc;AAAA;AAAA,IAEhC,cAAcE,WAAU,iBAAiB,EAAE,cAAc,KAAK,CAAC;AAAA,IAC/D,WAAWA,WAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,IAChF,WAAWA,WAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,EAClF;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,gBAAgBC,OAAM,mBAAmB,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK;AAAA;AAAA,IAEvE,eAAeA,OAAM,kBAAkB,EAAE,GAAG,EAAE,SAAS;AAAA;AAAA,IAEvD,gBAAgBA,OAAM,mBAAmB,EAAE,GAAG,EAAE,iBAAiB,EAAE,aAAa;AAAA;AAAA,IAEhF,iBAAiBA,OAAM,oBAAoB,EACxC,GAAG,EAAE,SAAS,EAAE,SAAS,EACzB,MAAMC,OAAM,EAAE,SAAS,cAAc;AAAA;AAAA,IAExC,sBAAsBD,OAAM,yBAAyB,EAClD,GAAG,EAAE,cAAc,EACnB;AAAA,MACCC,OAAM,EAAE,cAAc,oBAAoB,EAAE,MAAM;AAAA,IACpD;AAAA,EACJ;AACF;AAMO,IAAM,WAAWN;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAIC,MAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,UAAUA,MAAK,YAAY,EAAE,QAAQ,EAAE,WAAW,MAAM,QAAQ,EAAE;AAAA,IAClE,QAAQC,MAAK,SAAS,EAAE,QAAQ;AAAA,IAChC,MAAM,gBAAgB,MAAM,EAAE,QAAQ,EAAE,QAAQ,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMtD,KAAK,QAAQ,KAAK,EAAE,QAAQ;AAAA,IAC5B,QAAQ,kBAAkB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC/D,OAAOC,OAAM,OAAO,EAAE,MAA+B;AAAA;AAAA,IAErD,QAAQA,OAAM,QAAQ,EAAE,MAA+B;AAAA,IACvD,OAAOA,OAAM,OAAO,EAAE,MAAmB;AAAA,IACzC,UAAU,QAAQ,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IACjD,WAAWC,WAAU,cAAc,EAAE,cAAc,KAAK,CAAC;AAAA,IACzD,YAAYA,WAAU,eAAe,EAAE,cAAc,KAAK,CAAC;AAAA,EAC7D;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,mBAAmB,YAAY,uBAAuB,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM;AAAA;AAAA,IAE/E,oBAAoBC,OAAM,uBAAuB,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG;AAAA,EACzE;AACF;;;AFxJO,IAAM,2BAA2BE,QAAO,0BAA0B;AAAA,EACvE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAIM,IAAM,iBAAiBC;AAAA,EAC5B;AAAA,EACA;AAAA,IACE,IAAIC,MAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA;AAAA,IAE1C,SAASA,MAAK,UAAU,EACrB,QAAQ,EACR,WAAW,MAAM,aAAa,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMnC,WAAWC,MAAK,YAAY,EAAE,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMtC,cAAcD,MAAK,gBAAgB,EAAE,WAAW,MAAM,QAAQ,EAAE;AAAA;AAAA;AAAA;AAAA;AAAA,IAKhE,WAAWA,MAAK,aAAa,EAAE,WAAW,MAAM,QAAQ,EAAE;AAAA,IAC1D,QAAQ,yBAAyB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA;AAAA,IAEtE,YAAYC,MAAK,aAAa;AAAA;AAAA,IAE9B,OAAOC,OAAM,OAAO,EAAE,MAA+B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMrD,UAAUD,MAAK,WAAW;AAAA,IAC1B,aAAaE,WAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC,EAC1D,QAAQ,EACR,WAAW;AAAA,IACd,aAAaA,WAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;AAAA,EAC/D;AAAA,EACA,CAAC,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKN,8BAA8B,OAAO,kCAAkC,EAAE;AAAA,MACvE,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,wBAAwBC,OAAM,2BAA2B,EAAE,GAAG,EAAE,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA,IAKvE,yBAAyBA,OAAM,4BAA4B,EACxD,GAAG,EAAE,MAAM,EACX,MAAMC,OAAM,EAAE,MAAM,0BAA0B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMjD,0BAA0BD,OAAM,8BAA8B,EAC3D,GAAG,EAAE,SAAS,EACd,MAAMC,OAAM,EAAE,SAAS,cAAc;AAAA,EAC1C;AACF;","names":["index","jsonb","pgEnum","pgTable","text","timestamp","uuid","sql","pgTable","uuid","text","jsonb","timestamp","index","sql","pgEnum","pgTable","uuid","text","jsonb","timestamp","index","sql"]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/runtime/subsystems/bridge/bridge-errors.js

@@ -1,38 +1,9 @@
-// runtime/subsystems/bridge/bridge-errors.ts
-var MissingTenantIdError = class extends Error {
-  constructor(callSite) {
-    super(
-      `MissingTenantIdError: BridgeModule was configured with multiTenant=true but ${callSite} was called without tenantId (undefined). Pass an explicit tenantId, or pass null for cross-tenant work.`
-    );
-    this.callSite = callSite;
-  }
-  callSite;
-  name = "MissingTenantIdError";
-};
-var BridgeReservedPoolsNotPolledError = class extends Error {
-  constructor(missingPools) {
-    super(
-      `BridgeModule loaded but JobWorkerModule is not polling reserved pool '${missingPools[0]}'. Add ...BRIDGE_RESERVED_POOLS to your JobWorkerModule.forRoot({ pools }) configuration. Missing pools: ${missingPools.join(", ")}. (Bridge-fanout wrappers will sit pending forever without these pollers.)`
-    );
-    this.missingPools = missingPools;
-  }
-  missingPools;
-  name = "BridgeReservedPoolsNotPolledError";
-};
-var UniqueConstraintError = class extends Error {
-  constructor(constraint, eventId, triggerId) {
-    super(
-      `UniqueConstraintError: duplicate insert into bridge_delivery for (event_id='${eventId}', trigger_id='${triggerId}') \u2014 violates constraint '${constraint}'.`
-    );
-    this.constraint = constraint;
-    this.eventId = eventId;
-    this.triggerId = triggerId;
-  }
-  constraint;
-  eventId;
-  triggerId;
-  name = "UniqueConstraintError";
-};
+import {
+  BridgeReservedPoolsNotPolledError,
+  MissingTenantIdError,
+  UniqueConstraintError
+} from "../../../chunk-NXXDZ6ZF.js";
+import "../../../chunk-2E224ZSN.js";
 export {
   BridgeReservedPoolsNotPolledError,
   MissingTenantIdError,

package/dist/runtime/subsystems/bridge/bridge-errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../runtime/subsystems/bridge/bridge-errors.ts"],"sourcesContent":["/**\n * Typed errors for the bridge subsystem (ADR-023 Phase 2, BRIDGE-2).\n *\n * All thrown by the three enforcement sites named in ADR-023 §Multi-tenancy:\n *   - `EventFlowService.publishAndStart` entry (BRIDGE-7)\n *   - `BridgeDeliveryHandler.handle` entry (BRIDGE-5)\n *   - `DrizzleBridgeDeliveryRepo.insertDelivery` pre-write (BRIDGE-4)\n *\n * Same shape as `runtime/subsystems/jobs/jobs-errors.ts` and\n * `runtime/subsystems/events/events-errors.ts` so consumers can catch them\n * with the same exception-filter pattern across all three subsystems.\n */\n\n/**\n * Thrown when `BridgeModule` was configured with `multiTenant: true` but\n * the caller did not pass a `tenantId` at one of the three enforcement\n * sites listed above.\n *\n * **Strict enforcement rationale (mirrors JOB-8 / SYNC-6 stance, locked\n * 2026-04-18 for jobs; same rationale applies here).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship;\n * surfacing the misuse loudly at the call site (rather than silently\n * defaulting to `null` or to \"the last tenant seen\") prevents both\n * accidental global writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   work (e.g. a system housekeeping event with no owning tenant). The\n *   `bridge_delivery` row is persisted with `tenant_id = NULL`.\n *\n * The `callSite` constructor argument names which of the three enforcement\n * sites threw — review reports and ops dashboards rely on a stable site\n * name, so use the canonical strings: `'EventFlowService.publishAndStart'`,\n * `'BridgeDeliveryHandler.handle'`,\n * `'DrizzleBridgeDeliveryRepo.insertDelivery'`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly callSite: string) {\n    super(\n      `MissingTenantIdError: BridgeModule was configured with ` +\n        `multiTenant=true but ${callSite} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Synthetic error thrown by `MemoryBridgeDeliveryRepo.insertDelivery` when\n * a duplicate `(event_id, trigger_id)` insert hits the simulated UNIQUE\n * constraint (BRIDGE-3).\n *\n * Carries a `constraint` field equal to the Drizzle constraint name\n * declared in BRIDGE-1's schema (`uq_bridge_delivery_event_trigger`) so\n * call sites can branch on the same discriminator regardless of which\n * backend is wired up. This matters because ADR-023 explicitly leans on\n * the constraint as the dedup mechanism in two places — outbox replay\n * and `publishAndStart` Case B — and BRIDGE-4 / BRIDGE-7 will share a\n * type-check path with BRIDGE-3-driven tests.\n *\n * The Drizzle backend (BRIDGE-4) does NOT throw this error: it uses\n * `INSERT … ON CONFLICT (event_id, trigger_id) DO NOTHING RETURNING id`\n * per the BRIDGE-4 spec recommendation, so collisions surface as an empty\n * result set rather than an exception. The error exists so the memory\n * backend can faithfully model the \"duplicate raises\" behaviour for tests\n * that want to assert the constraint actually fires.\n */\n/**\n * Thrown by `BridgeModule.onModuleInit` when `JobWorkerModule` is wired\n * alongside the bridge but its active `pools` list does not include one\n * or more of the three reserved bridge pools (`events_inbound`,\n * `events_change`, `events_outbound`).\n *\n * Without a worker polling those pools, the wrapper `job_run` rows the\n * outbox drain inserts (BRIDGE-4) sit `pending` forever — a silent\n * footgun where `eventFlow.publish(...)` returns success but no user\n * job ever spawns. The boot-time check converts that into a fail-fast.\n *\n * Operators can either (a) add `...BRIDGE_RESERVED_POOLS` to their\n * `JobWorkerModule.forRoot({ pools })` configuration so the same\n * process polls the reserved pools, or (b) run a separate worker\n * process per reserved pool for lane isolation (ADR-022 §Pool\n * isolation).\n */\nexport class BridgeReservedPoolsNotPolledError extends Error {\n  override readonly name = 'BridgeReservedPoolsNotPolledError';\n  constructor(public readonly missingPools: readonly string[]) {\n    super(\n      `BridgeModule loaded but JobWorkerModule is not polling reserved ` +\n        `pool '${missingPools[0]}'. Add ...BRIDGE_RESERVED_POOLS to your ` +\n        `JobWorkerModule.forRoot({ pools }) configuration. Missing pools: ` +\n        `${missingPools.join(', ')}. (Bridge-fanout wrappers will sit ` +\n        `pending forever without these pollers.)`,\n    );\n  }\n}\n\nexport class UniqueConstraintError extends Error {\n  override readonly name = 'UniqueConstraintError';\n  constructor(\n    public readonly constraint: string,\n    public readonly eventId: string,\n    public readonly triggerId: string,\n  ) {\n    super(\n      `UniqueConstraintError: duplicate insert into bridge_delivery for ` +\n        `(event_id='${eventId}', trigger_id='${triggerId}') — violates ` +\n        `constraint '${constraint}'.`,\n    );\n  }\n}\n"],"mappings":";AAoCO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,UAAkB;AAC5C;AAAA,MACE,+EAC0B,QAAQ;AAAA,IAGpC;AAN0B;AAAA,EAO5B;AAAA,EAP4B;AAAA,EADV,OAAO;AAS3B;AAuCO,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAE3D,YAA4B,cAAiC;AAC3D;AAAA,MACE,yEACW,aAAa,CAAC,CAAC,4GAErB,aAAa,KAAK,IAAI,CAAC;AAAA,IAE9B;AAP0B;AAAA,EAQ5B;AAAA,EAR4B;AAAA,EADV,OAAO;AAU3B;AAEO,IAAM,wBAAN,cAAoC,MAAM;AAAA,EAE/C,YACkB,YACA,SACA,WAChB;AACA;AAAA,MACE,+EACgB,OAAO,kBAAkB,SAAS,kCACjC,UAAU;AAAA,IAC7B;AARgB;AACA;AACA;AAAA,EAOlB;AAAA,EATkB;AAAA,EACA;AAAA,EACA;AAAA,EAJA,OAAO;AAY3B;","names":[]}
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}