@pattern-stack/codegen 0.15.1 → 0.15.3

package/dist/chunk-4H3PETLM.js

@@ -0,0 +1,290 @@
+import {
+  JobWorker
+} from "./chunk-RC23QROE.js";
+import {
+  JobsDomainModule
+} from "./chunk-O37C3YE6.js";
+import {
+  BULLMQ_CONNECTION,
+  BULLMQ_RESOLVED_CONFIG,
+  resolvePoolQueueName
+} from "./chunk-I6MVCB5A.js";
+import {
+  allNonReservedPoolNames,
+  allPoolNames,
+  loadPoolConfig
+} from "./chunk-RHVN6NA7.js";
+import {
+  BootValidationError,
+  ReservedPoolViolationError
+} from "./chunk-T4BIIU5E.js";
+import {
+  HandlerRegistry
+} from "./chunk-CO6LUM72.js";
+import {
+  JOB_ORCHESTRATOR,
+  JOB_RUN_SERVICE,
+  JOB_STEP_SERVICE
+} from "./chunk-BIO6F7YI.js";
+import {
+  tokenKey
+} from "./chunk-GYGNEQSC.js";
+import {
+  DRIZZLE
+} from "./chunk-U64T4YZE.js";
+import {
+  __decorateClass,
+  __decorateParam
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/jobs/job-worker.module.ts
+import {
+  Inject,
+  Injectable,
+  Logger,
+  Module,
+  Optional
+} from "@nestjs/common";
+import { ModuleRef } from "@nestjs/core";
+var DEFAULT_SHUTDOWN_TIMEOUT_MS = 3e4;
+var JOB_WORKER_MODULE_OPTIONS = Symbol.for(tokenKey("jobs", "worker-module-options"));
+var JobWorkerOrchestrator = class {
+  constructor(orchestrator, runService, stepService, options, db = null, moduleRef, bullConnection = null, bullConfig = null) {
+    this.orchestrator = orchestrator;
+    this.runService = runService;
+    this.stepService = stepService;
+    this.options = options;
+    this.db = db;
+    this.moduleRef = moduleRef;
+    this.bullConnection = bullConnection;
+    this.bullConfig = bullConfig;
+  }
+  orchestrator;
+  runService;
+  stepService;
+  options;
+  db;
+  moduleRef;
+  bullConnection;
+  bullConfig;
+  logger = new Logger(JobWorkerOrchestrator.name);
+  workers = [];
+  // ============================================================================
+  // Lifecycle
+  // ============================================================================
+  async onModuleInit() {
+    const backend = this.options.backend ?? "drizzle";
+    const poolConfig = loadPoolConfig(this.options.configPath);
+    const entries = HandlerRegistry.getAll();
+    this.assertNoReservedPoolHandlers(entries, poolConfig);
+    const { orphaned } = await this.orchestrator.upsertJobRows(
+      entries,
+      poolConfig
+    );
+    if (backend !== "memory" && orphaned.length > 0) {
+      throw new BootValidationError(orphaned);
+    }
+    const activePools = this.options.pools ? this.options.pools : this.options.allPools ? allPoolNames(poolConfig) : allNonReservedPoolNames(poolConfig);
+    for (const poolName of activePools) {
+      const def = poolConfig.get(poolName);
+      if (!def) {
+        throw new Error(
+          `JobWorkerModule: active pool '${poolName}' is not defined in the resolved pool config. Configured pools: [${[...poolConfig.keys()].join(", ")}].`
+        );
+      }
+      const workerOptions = {
+        pool: poolName,
+        concurrency: def.concurrency,
+        shutdownTimeoutMs: this.options.shutdownTimeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS
+      };
+      const worker = this.options.workerFactory ? this.options.workerFactory(workerOptions) : backend === "bullmq" ? await this.spawnBullMQWorker(poolName, def.queue, def.concurrency, poolConfig) : this.spawnWorker(workerOptions);
+      await worker.onModuleInit();
+      this.workers.push(worker);
+      this.logger.log(
+        `JobWorker started: pool='${poolName}' (queue='${def.queue}') concurrency=${def.concurrency} backend='${backend}'`
+      );
+    }
+  }
+  async onModuleDestroy() {
+    for (let i = this.workers.length - 1; i >= 0; i--) {
+      const worker = this.workers[i];
+      if (!worker) continue;
+      try {
+        await worker.onModuleDestroy();
+      } catch (err) {
+        this.logger.error(
+          `JobWorker shutdown failed: ${err.message}`
+        );
+      }
+    }
+    this.workers.length = 0;
+    const orch = this.orchestrator;
+    if (typeof orch.closeConnections === "function") {
+      try {
+        await orch.closeConnections();
+      } catch (err) {
+        this.logger.error(
+          `BullMQ orchestrator connection close failed: ${err.message}`
+        );
+      }
+    }
+  }
+  // ============================================================================
+  // Internals
+  // ============================================================================
+  /**
+   * Walk every registered handler; collect any whose declared `pool`
+   * targets a reserved pool from the resolved config. If non-empty,
+   * throw `ReservedPoolViolationError` with the offender list so the
+   * operator sees every violating class on a single boot.
+   */
+  assertNoReservedPoolHandlers(entries, poolConfig) {
+    const offenders = [];
+    for (const entry of entries) {
+      if (entry.type.startsWith("@framework/")) continue;
+      const declaredPool = entry.meta.pool ?? "batch";
+      const def = poolConfig.get(declaredPool);
+      if (def?.reserved) {
+        offenders.push({
+          handlerClass: entry.handlerClass.name,
+          pool: declaredPool
+        });
+      }
+    }
+    if (offenders.length > 0) {
+      throw new ReservedPoolViolationError(offenders);
+    }
+  }
+  /**
+   * Production worker spawn. `JobWorker` requires `DRIZZLE` so this only
+   * succeeds when the module was booted with `backend: 'drizzle'`. Memory
+   * mode tests must supply `workerFactory` — the memory backend has no
+   * polling loop equivalent (`MemoryJobOrchestrator` is direct-invocation
+   * only).
+   *
+   * We instantiate outside the Nest container because the module spawns
+   * N workers from a single options shape, which doesn't fit Nest's
+   * "one provider per token" model. The dependencies are passed
+   * positionally; the constructor's `@Inject` decorators are unused on
+   * this path (Nest still uses them when `JobWorker` is a provider — e.g.
+   * in JOB-6's standalone `worker.ts` entrypoint).
+   */
+  spawnWorker(workerOptions) {
+    if (!this.db) {
+      throw new Error(
+        `JobWorkerModule: in-process worker spawning requires the Drizzle backend (no DRIZZLE provider available). Memory-mode tests must pass 'workerFactory' to inject a stub.`
+      );
+    }
+    if (!this.moduleRef) {
+      throw new Error(
+        `JobWorkerModule: ModuleRef not available \u2014 cannot construct JobWorker with handler DI support. Ensure the orchestrator is resolved through the Nest container (not instantiated manually in tests).`
+      );
+    }
+    return new JobWorker(
+      this.db,
+      this.orchestrator,
+      this.runService,
+      this.stepService,
+      workerOptions,
+      this.moduleRef
+    );
+  }
+  /**
+   * BULLMQ-1 — spawn a per-pool `BullMQJobWorker`. Requires the Drizzle
+   * client (the worker drives `job_run` as the source of truth) AND the
+   * resolved BullMQ connection (bound by `JobsDomainModule` when
+   * `backend: 'bullmq'`). The queue name is derived identically to the
+   * orchestrator's `dispatch` via `resolvePoolQueueName(pool, …)` so producer
+   * and consumer agree.
+   */
+  /**
+   * #6 — async + dynamic-import. The `job-worker.bullmq-backend.ts` file is
+   * filtered out of the vendor set for drizzle/memory installs (no `bullmq`
+   * peer dep needed). The non-literal import specifier makes TS treat the
+   * module as `any` so the consumer's tsc never tries to resolve an absent
+   * file. This method is only entered when `backend === 'bullmq'` — at which
+   * point the file IS vendored.
+   */
+  async spawnBullMQWorker(pool, _queueAlias, concurrency, poolConfig) {
+    if (!this.db) {
+      throw new Error(
+        `JobWorkerModule: BullMQ worker spawning requires the Drizzle client (no DRIZZLE provider available) \u2014 job_run remains the source of truth.`
+      );
+    }
+    if (!this.bullConnection) {
+      throw new Error(
+        `JobWorkerModule: BullMQ worker spawning requires a resolved BULLMQ_CONNECTION. Ensure JobsDomainModule was booted with backend: 'bullmq'.`
+      );
+    }
+    if (!this.moduleRef) {
+      throw new Error(
+        `JobWorkerModule: ModuleRef not available \u2014 cannot construct BullMQJobWorker with handler DI support.`
+      );
+    }
+    const queueName = resolvePoolQueueName(pool, this.bullConfig, poolConfig);
+    const specifier = "./job-worker.bullmq-backend";
+    const mod = await import(specifier);
+    return new mod.BullMQJobWorker(
+      this.db,
+      this.orchestrator,
+      this.stepService,
+      {
+        pool,
+        queueName,
+        concurrency,
+        connection: this.bullConnection
+      },
+      this.moduleRef
+    );
+  }
+};
+JobWorkerOrchestrator = __decorateClass([
+  Injectable(),
+  __decorateParam(0, Inject(JOB_ORCHESTRATOR)),
+  __decorateParam(1, Inject(JOB_RUN_SERVICE)),
+  __decorateParam(2, Inject(JOB_STEP_SERVICE)),
+  __decorateParam(3, Inject(JOB_WORKER_MODULE_OPTIONS)),
+  __decorateParam(4, Optional()),
+  __decorateParam(4, Inject(DRIZZLE)),
+  __decorateParam(5, Inject(ModuleRef)),
+  __decorateParam(6, Optional()),
+  __decorateParam(6, Inject(BULLMQ_CONNECTION)),
+  __decorateParam(7, Optional()),
+  __decorateParam(7, Inject(BULLMQ_RESOLVED_CONFIG))
+], JobWorkerOrchestrator);
+var JobWorkerModule = class {
+  static forRoot(opts) {
+    return {
+      module: JobWorkerModule,
+      imports: [
+        JobsDomainModule.forRoot({
+          backend: opts.backend ?? "drizzle",
+          extensions: opts.domainModuleExtensions,
+          multiTenant: opts.multiTenant
+        })
+      ],
+      providers: [
+        { provide: JOB_WORKER_MODULE_OPTIONS, useValue: opts },
+        JobWorkerOrchestrator
+      ],
+      // BULLMQ-1 Phase 1 — export the options token so `BridgeModule`'s
+      // reserved-pool guard (`onModuleInit`) can actually inject it.
+      // Previously `exports: []` left the `@Optional()` inject resolving to
+      // `undefined` and the guard silently no-opped (a dead check). With the
+      // token exported the guard fires for real; consumers that omit the
+      // reserved pools (and don't set `allPools`) now fail fast with
+      // `BridgeReservedPoolsNotPolledError` — which is correct.
+      exports: [JOB_WORKER_MODULE_OPTIONS]
+    };
+  }
+};
+JobWorkerModule = __decorateClass([
+  Module({})
+], JobWorkerModule);
+
+export {
+  JOB_WORKER_MODULE_OPTIONS,
+  JobWorkerOrchestrator,
+  JobWorkerModule
+};
+//# sourceMappingURL=chunk-4H3PETLM.js.map

package/dist/chunk-4H3PETLM.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/jobs/job-worker.module.ts"],"sourcesContent":["/**\n * JobWorkerModule — `DynamicModule.forRoot({ mode, pools? })` factory that\n * boots one `JobWorker` per active pool and runs the boot-time validator\n * (Drizzle only) (ADR-022, JOB-5).\n *\n * Imports `JobsDomainModule` internally so call sites only need to add\n * `JobWorkerModule.forRoot(...)` to `AppModule.imports` — the protocol\n * tokens become available transitively via `global: true`.\n *\n * Lifecycle (`onModuleInit`, **order-critical** per JOB-5 spec):\n *   1. `loadPoolConfig()`                        → resolved `PoolConfig`\n *   2. `HandlerRegistry.getAll()`                → registered entries\n *   3. Reserved-pool validation                  → throws `ReservedPoolViolationError`\n *   4. `orchestrator.upsertJobRows(entries, …)`  → persist `job` definitions\n *   5. Boot validator (Drizzle only)             → throws `BootValidationError`\n *      (skipped entirely in memory mode — Q4 resolution 2026-04-19)\n *   6. Spawn one `JobWorker` per active pool     → start polling loops\n *\n * `onModuleDestroy` calls `gracefulStop` on each worker (drains in-flight,\n * resets `running` rows, removes SIGTERM handler).\n */\nimport {\n  Inject,\n  Injectable,\n  Logger,\n  Module,\n  Optional,\n  type DynamicModule,\n  type OnModuleDestroy,\n  type OnModuleInit,\n} from '@nestjs/common';\nimport { ModuleRef } from '@nestjs/core';\nimport { tokenKey } from '../token-key';\nimport { DRIZZLE } from '../../constants/tokens';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport { HandlerRegistry, type HandlerRegistryEntry } from './job-handler.base';\nimport {\n  JobsDomainModule,\n  type JobsDomainModuleOptions,\n} from './jobs-domain.module';\nimport {\n  JOB_ORCHESTRATOR,\n  JOB_RUN_SERVICE,\n  JOB_STEP_SERVICE,\n} from './jobs-domain.tokens';\nimport type { IJobOrchestrator } from './job-orchestrator.protocol';\nimport type { IJobRunService } from './job-run-service.protocol';\nimport type { IJobStepService } from './job-step-service.protocol';\nimport {\n  allNonReservedPoolNames,\n  allPoolNames,\n  loadPoolConfig,\n  type PoolConfig,\n} from './pool-config.loader';\nimport { JobWorker, type JobWorkerOptions } from './job-worker';\n// #6 — `BullMQJobWorker` is lazy-loaded only when `backend: 'bullmq'` is\n// selected (`spawnBullMQWorker` below). The file is filtered out of drizzle/\n// memory installs (see `backendFileFilter`). The `ConnectionOptions` type\n// previously imported from `'bullmq'` is replaced by `BullMqConnectionOptions`\n// from `./bullmq.config` (a self-contained structural mirror that does NOT\n// require the `bullmq` peer dep to type-check).\nimport {\n  BULLMQ_CONNECTION,\n  BULLMQ_RESOLVED_CONFIG,\n  resolvePoolQueueName,\n  type BullMqConnectionOptions,\n  type BullMqResolvedConfig,\n} from './bullmq.config';\nimport {\n  BootValidationError,\n  ReservedPoolViolationError,\n} from './jobs-errors';\n\nconst DEFAULT_SHUTDOWN_TIMEOUT_MS = 30_000;\n\nexport interface JobWorkerModuleOptions {\n  mode: 'embedded' | 'standalone';\n  /**\n   * Threads into the internal `JobsDomainModule.forRoot({ backend })`\n   * import. Default `'drizzle'`. The boot-time validator runs for both\n   * `'drizzle'` and `'bullmq'` (both persist `job` rows to Postgres);\n   * `'memory'` skips it.\n   */\n  backend?: 'drizzle' | 'memory' | 'bullmq';\n  /**\n   * Active pool names. Defaults to every non-reserved pool in the resolved\n   * config (i.e. `interactive`, `batch`, plus any user-defined pools).\n   * Operators reduce this to one or two pools per worker process to scale\n   * horizontally.\n   */\n  pools?: string[];\n  /**\n   * BULLMQ-1 Phase 1 — when `true`, `onModuleInit` activates **every** pool\n   * in the resolved config, including the reserved `events_*` lanes. This is\n   * how the standalone worker (`worker.ts`) drains bridge wrappers without\n   * the consumer hand-listing `...BRIDGE_RESERVED_POOLS`. Mutually exclusive\n   * with an explicit `pools` list — when both are set, `pools` wins (explicit\n   * beats blanket) and `allPools` is ignored.\n   *\n   * `BridgeModule`'s reserved-pool guard short-circuits to \"pass\" when this\n   * is `true`, since every reserved pool is provably being polled.\n   */\n  allPools?: boolean;\n  /** SIGTERM drain budget. Default 30_000 ms. */\n  shutdownTimeoutMs?: number;\n  /**\n   * Test-only — point the pool config loader at a specific YAML file.\n   * Production code reads `${process.cwd()}/codegen.config.yaml`.\n   */\n  configPath?: string;\n  /**\n   * Forwarded into the inner `JobsDomainModule.forRoot()` call so the\n   * worker module's caller can configure backend extensions in one place.\n   */\n  domainModuleExtensions?: JobsDomainModuleOptions['extensions'];\n  /** Forwarded into `JobsDomainModule.forRoot()`. JOB-8 wires this. */\n  multiTenant?: boolean;\n  /**\n   * Test-only escape hatch — when set, the module uses this factory\n   * instead of `new JobWorker(...)` so unit tests can stub the worker\n   * without spinning up the polling loop.\n   */\n  workerFactory?: (options: JobWorkerOptions) => Pick<JobWorker, 'onModuleInit' | 'onModuleDestroy'>;\n}\n\n/**\n * DI token for the resolved `JobWorkerModuleOptions`. Exported so other\n * subsystems can inject it `@Optional()` and inspect the active\n * configuration — e.g. `BridgeModule.onModuleInit` checks\n * `options.pools` against `BRIDGE_RESERVED_POOLS` to fail fast when a\n * reserved pool isn't being polled (BRIDGE-8).\n *\n * ADR-037: namespaced `Symbol.for(...)` (via `tokenKey()`) — matches by value\n * across runtime copies.\n */\nexport const JOB_WORKER_MODULE_OPTIONS = Symbol.for(tokenKey('jobs', 'worker-module-options'));\n\n/**\n * The lifecycle holder. Named `JobWorkerOrchestrator` in the spec to avoid\n * collision with `JobWorker` and `IJobOrchestrator`. Registered as a\n * provider on `JobWorkerModule`; Nest invokes `onModuleInit` /\n * `onModuleDestroy` automatically.\n */\n@Injectable()\nexport class JobWorkerOrchestrator implements OnModuleInit, OnModuleDestroy {\n  private readonly logger = new Logger(JobWorkerOrchestrator.name);\n  private readonly workers: Array<Pick<JobWorker, 'onModuleInit' | 'onModuleDestroy'>> = [];\n\n  constructor(\n    @Inject(JOB_ORCHESTRATOR) private readonly orchestrator: IJobOrchestrator,\n    @Inject(JOB_RUN_SERVICE) private readonly runService: IJobRunService,\n    @Inject(JOB_STEP_SERVICE) private readonly stepService: IJobStepService,\n    @Inject(JOB_WORKER_MODULE_OPTIONS)\n    private readonly options: JobWorkerModuleOptions,\n    /**\n     * Drizzle client is only required when `backend === 'drizzle'`. Made\n     * `@Optional()` so memory-mode boots in `Test.createTestingModule`\n     * without supplying a `DRIZZLE` provider.\n     */\n    @Optional() @Inject(DRIZZLE) private readonly db: DrizzleClient | null = null,\n    /**\n     * ADR-037 (package-mode DI): inject `ModuleRef` EXPLICITLY via `@Inject`\n     * rather than relying on `design:paramtypes` reflection. The published\n     * package bundle is built without `emitDecoratorMetadata` (tsup/esbuild\n     * default), so a by-type injection here would resolve to `undefined` at\n     * boot in package mode — breaking the worker entirely (the\n     * `ModuleRef not available` throw). Vendored mode happened to work only\n     * because the consumer's own `tsc` (emitDecoratorMetadata: true)\n     * recompiled the source and emitted the metadata. The explicit token is\n     * mode-agnostic. `ModuleRef` is always provided by `@nestjs/core`, so no\n     * `@Optional()` is needed (it's a hard dependency of the worker path).\n     */\n    @Inject(ModuleRef) private readonly moduleRef?: ModuleRef,\n    /**\n     * BULLMQ-1 — resolved BullMQ connection + config, only bound when the\n     * inner `JobsDomainModule` was booted with `backend: 'bullmq'`. `@Optional()`\n     * so drizzle/memory boots see `null`.\n     */\n    @Optional()\n    @Inject(BULLMQ_CONNECTION)\n    private readonly bullConnection: BullMqConnectionOptions | null = null,\n    @Optional()\n    @Inject(BULLMQ_RESOLVED_CONFIG)\n    private readonly bullConfig: BullMqResolvedConfig | null = null,\n  ) {}\n\n  // ============================================================================\n  // Lifecycle\n  // ============================================================================\n\n  async onModuleInit(): Promise<void> {\n    const backend = this.options.backend ?? 'drizzle';\n\n    // (1) Pool config first — every later step needs the resolved map.\n    const poolConfig = loadPoolConfig(this.options.configPath);\n\n    // (2) Snapshot the registry. Decorators run at class-load time so the\n    //     map is fully populated before any module init fires.\n    const entries = HandlerRegistry.getAll();\n\n    // (3) Reserved-pool validation BEFORE the upsert. Persisting a\n    //     reserved-pool handler row would leave the DB in a bad state for\n    //     the next boot to clean up.\n    this.assertNoReservedPoolHandlers(entries, poolConfig);\n\n    // (4) Upsert `job` definitions. Drizzle: hash-gated `ON CONFLICT DO\n    //     UPDATE`. Memory: populates `MemoryJobStore.jobs` + handler-class\n    //     registry.\n    const { orphaned } = await this.orchestrator.upsertJobRows(\n      entries,\n      poolConfig,\n    );\n\n    // (5) Boot validator — Drizzle only. Memory mode never has DB rows\n    //     to validate (Q4 resolution 2026-04-19); the equivalent\n    //     protection is `MemoryJobOrchestrator.start()` throwing\n    //     `JobTypeNotFoundError` synchronously for unknown types.\n    if (backend !== 'memory' && orphaned.length > 0) {\n      throw new BootValidationError(orphaned);\n    }\n\n    // (6) Resolve active pool list and spawn one worker per pool.\n    //     Precedence: explicit `pools` > `allPools` (incl. reserved) >\n    //     non-reserved default. BULLMQ-1 Phase 1 adds the `allPools` rung so\n    //     the standalone worker drains the reserved `events_*` bridge lanes.\n    const activePools = this.options.pools\n      ? this.options.pools\n      : this.options.allPools\n        ? allPoolNames(poolConfig)\n        : allNonReservedPoolNames(poolConfig);\n\n    for (const poolName of activePools) {\n      const def = poolConfig.get(poolName);\n      if (!def) {\n        throw new Error(\n          `JobWorkerModule: active pool '${poolName}' is not defined in ` +\n            `the resolved pool config. Configured pools: [${[...poolConfig.keys()].join(', ')}].`,\n        );\n      }\n      // `pool` here is the logical pool name (e.g. 'crm_sync') — the same\n      // value the orchestrator persists into `job_run.pool` from\n      // `@JobHandler.meta.pool`, and therefore the value the worker's\n      // claim query filters on. `def.queue` is a display/routing alias\n      // (e.g. 'jobs-crm-sync') used by BullMQ-style backends for queue\n      // naming; it MUST NOT be passed as the claim-filter pool, or the\n      // worker will never match any row and the pool silently never\n      // drains. See v0.4.4 fix notes.\n      const workerOptions: JobWorkerOptions = {\n        pool: poolName,\n        concurrency: def.concurrency,\n        shutdownTimeoutMs:\n          this.options.shutdownTimeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS,\n      };\n      const worker = this.options.workerFactory\n        ? this.options.workerFactory(workerOptions)\n        : backend === 'bullmq'\n          ? await this.spawnBullMQWorker(poolName, def.queue, def.concurrency, poolConfig)\n          : this.spawnWorker(workerOptions);\n      // `JobWorker` extends Nest's lifecycle hooks but the worker isn't\n      // a Nest provider here (we manage the array ourselves). Call\n      // `onModuleInit` to start the loop. The Drizzle/stub workers return\n      // void; `BullMQJobWorker.onModuleInit` is async (it lazily loads the\n      // optional `bullmq` package), so we `await` — awaiting a `void` is a\n      // harmless no-op for the synchronous workers.\n      await worker.onModuleInit();\n      this.workers.push(worker);\n      this.logger.log(\n        `JobWorker started: pool='${poolName}' (queue='${def.queue}') ` +\n          `concurrency=${def.concurrency} backend='${backend}'`,\n      );\n    }\n  }\n\n  async onModuleDestroy(): Promise<void> {\n    // Tear down in reverse order so the most recently started worker\n    // drains first — keeps the SIGTERM handler graph predictable.\n    for (let i = this.workers.length - 1; i >= 0; i--) {\n      const worker = this.workers[i];\n      if (!worker) continue;\n      try {\n        await worker.onModuleDestroy();\n      } catch (err) {\n        this.logger.error(\n          `JobWorker shutdown failed: ${(err as Error).message}`,\n        );\n      }\n    }\n    this.workers.length = 0;\n\n    // BULLMQ-1 — close the orchestrator's producer-side Queue/FlowProducer\n    // connections so the process can exit cleanly. The orchestrator is the\n    // BullMQ producer; workers are the consumers (closed above).\n    const orch = this.orchestrator as { closeConnections?: () => Promise<void> };\n    if (typeof orch.closeConnections === 'function') {\n      try {\n        await orch.closeConnections();\n      } catch (err) {\n        this.logger.error(\n          `BullMQ orchestrator connection close failed: ${(err as Error).message}`,\n        );\n      }\n    }\n  }\n\n  // ============================================================================\n  // Internals\n  // ============================================================================\n\n  /**\n   * Walk every registered handler; collect any whose declared `pool`\n   * targets a reserved pool from the resolved config. If non-empty,\n   * throw `ReservedPoolViolationError` with the offender list so the\n   * operator sees every violating class on a single boot.\n   */\n  private assertNoReservedPoolHandlers(\n    entries: HandlerRegistryEntry[],\n    poolConfig: PoolConfig,\n  ): void {\n    const offenders: Array<{ handlerClass: string; pool: string }> = [];\n    for (const entry of entries) {\n      // Framework-owned handlers (`@framework/*` job types) are allowed in\n      // reserved pools — that is in fact the entire point of the reserved\n      // `events_*` pools (ADR-022 + ADR-023). The reserved-pool guard\n      // exists to keep USER handlers out, not the framework's own\n      // bridge-delivery handler. BRIDGE-5 introduced this exemption.\n      if (entry.type.startsWith('@framework/')) continue;\n      const declaredPool = entry.meta.pool ?? 'batch';\n      const def = poolConfig.get(declaredPool);\n      if (def?.reserved) {\n        offenders.push({\n          handlerClass: entry.handlerClass.name,\n          pool: declaredPool,\n        });\n      }\n    }\n    if (offenders.length > 0) {\n      throw new ReservedPoolViolationError(offenders);\n    }\n  }\n\n  /**\n   * Production worker spawn. `JobWorker` requires `DRIZZLE` so this only\n   * succeeds when the module was booted with `backend: 'drizzle'`. Memory\n   * mode tests must supply `workerFactory` — the memory backend has no\n   * polling loop equivalent (`MemoryJobOrchestrator` is direct-invocation\n   * only).\n   *\n   * We instantiate outside the Nest container because the module spawns\n   * N workers from a single options shape, which doesn't fit Nest's\n   * \"one provider per token\" model. The dependencies are passed\n   * positionally; the constructor's `@Inject` decorators are unused on\n   * this path (Nest still uses them when `JobWorker` is a provider — e.g.\n   * in JOB-6's standalone `worker.ts` entrypoint).\n   */\n  private spawnWorker(workerOptions: JobWorkerOptions): JobWorker {\n    if (!this.db) {\n      throw new Error(\n        `JobWorkerModule: in-process worker spawning requires the Drizzle ` +\n          `backend (no DRIZZLE provider available). Memory-mode tests must ` +\n          `pass 'workerFactory' to inject a stub.`,\n      );\n    }\n    if (!this.moduleRef) {\n      throw new Error(\n        `JobWorkerModule: ModuleRef not available — cannot construct JobWorker ` +\n          `with handler DI support. Ensure the orchestrator is resolved through ` +\n          `the Nest container (not instantiated manually in tests).`,\n      );\n    }\n    return new JobWorker(\n      this.db,\n      this.orchestrator,\n      this.runService,\n      this.stepService,\n      workerOptions,\n      this.moduleRef,\n    );\n  }\n\n  /**\n   * BULLMQ-1 — spawn a per-pool `BullMQJobWorker`. Requires the Drizzle\n   * client (the worker drives `job_run` as the source of truth) AND the\n   * resolved BullMQ connection (bound by `JobsDomainModule` when\n   * `backend: 'bullmq'`). The queue name is derived identically to the\n   * orchestrator's `dispatch` via `resolvePoolQueueName(pool, …)` so producer\n   * and consumer agree.\n   */\n  /**\n   * #6 — async + dynamic-import. The `job-worker.bullmq-backend.ts` file is\n   * filtered out of the vendor set for drizzle/memory installs (no `bullmq`\n   * peer dep needed). The non-literal import specifier makes TS treat the\n   * module as `any` so the consumer's tsc never tries to resolve an absent\n   * file. This method is only entered when `backend === 'bullmq'` — at which\n   * point the file IS vendored.\n   */\n  private async spawnBullMQWorker(\n    pool: string,\n    _queueAlias: string,\n    concurrency: number,\n    poolConfig: PoolConfig,\n  ): Promise<Pick<JobWorker, 'onModuleInit' | 'onModuleDestroy'>> {\n    if (!this.db) {\n      throw new Error(\n        `JobWorkerModule: BullMQ worker spawning requires the Drizzle client ` +\n          `(no DRIZZLE provider available) — job_run remains the source of truth.`,\n      );\n    }\n    if (!this.bullConnection) {\n      throw new Error(\n        `JobWorkerModule: BullMQ worker spawning requires a resolved ` +\n          `BULLMQ_CONNECTION. Ensure JobsDomainModule was booted with ` +\n          `backend: 'bullmq'.`,\n      );\n    }\n    if (!this.moduleRef) {\n      throw new Error(\n        `JobWorkerModule: ModuleRef not available — cannot construct ` +\n          `BullMQJobWorker with handler DI support.`,\n      );\n    }\n    const queueName = resolvePoolQueueName(pool, this.bullConfig, poolConfig);\n    const specifier = './job-worker.bullmq-backend';\n    const mod = (await import(specifier)) as {\n      BullMQJobWorker: new (...args: unknown[]) => Pick<\n        JobWorker,\n        'onModuleInit' | 'onModuleDestroy'\n      >;\n    };\n    return new mod.BullMQJobWorker(\n      this.db,\n      this.orchestrator,\n      this.stepService,\n      {\n        pool,\n        queueName,\n        concurrency,\n        connection: this.bullConnection,\n      },\n      this.moduleRef,\n    );\n  }\n}\n\n@Module({})\nexport class JobWorkerModule {\n  static forRoot(opts: JobWorkerModuleOptions): DynamicModule {\n    return {\n      module: JobWorkerModule,\n      imports: [\n        JobsDomainModule.forRoot({\n          backend: opts.backend ?? 'drizzle',\n          extensions: opts.domainModuleExtensions,\n          multiTenant: opts.multiTenant,\n        }),\n      ],\n      providers: [\n        { provide: JOB_WORKER_MODULE_OPTIONS, useValue: opts },\n        JobWorkerOrchestrator,\n      ],\n      // BULLMQ-1 Phase 1 — export the options token so `BridgeModule`'s\n      // reserved-pool guard (`onModuleInit`) can actually inject it.\n      // Previously `exports: []` left the `@Optional()` inject resolving to\n      // `undefined` and the guard silently no-opped (a dead check). With the\n      // token exported the guard fires for real; consumers that omit the\n      // reserved pools (and don't set `allPools`) now fail fast with\n      // `BridgeReservedPoolsNotPolledError` — which is correct.\n      exports: [JOB_WORKER_MODULE_OPTIONS],\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AACP,SAAS,iBAAiB;AA0C1B,IAAM,8BAA8B;AA8D7B,IAAM,4BAA4B,OAAO,IAAI,SAAS,QAAQ,uBAAuB,CAAC;AAStF,IAAM,wBAAN,MAAqE;AAAA,EAI1E,YAC6C,cACD,YACC,aAE1B,SAM6B,KAA2B,MAarC,WAQnB,iBAAiD,MAGjD,aAA0C,MAC3D;AAnC2C;AACD;AACC;AAE1B;AAM6B;AAaV;AAQnB;AAGA;AAAA,EAChB;AAAA,EAnC0C;AAAA,EACD;AAAA,EACC;AAAA,EAE1B;AAAA,EAM6B;AAAA,EAaV;AAAA,EAQnB;AAAA,EAGA;AAAA,EAtCF,SAAS,IAAI,OAAO,sBAAsB,IAAI;AAAA,EAC9C,UAAsE,CAAC;AAAA;AAAA;AAAA;AAAA,EA4CxF,MAAM,eAA8B;AAClC,UAAM,UAAU,KAAK,QAAQ,WAAW;AAGxC,UAAM,aAAa,eAAe,KAAK,QAAQ,UAAU;AAIzD,UAAM,UAAU,gBAAgB,OAAO;AAKvC,SAAK,6BAA6B,SAAS,UAAU;AAKrD,UAAM,EAAE,SAAS,IAAI,MAAM,KAAK,aAAa;AAAA,MAC3C;AAAA,MACA;AAAA,IACF;AAMA,QAAI,YAAY,YAAY,SAAS,SAAS,GAAG;AAC/C,YAAM,IAAI,oBAAoB,QAAQ;AAAA,IACxC;AAMA,UAAM,cAAc,KAAK,QAAQ,QAC7B,KAAK,QAAQ,QACb,KAAK,QAAQ,WACX,aAAa,UAAU,IACvB,wBAAwB,UAAU;AAExC,eAAW,YAAY,aAAa;AAClC,YAAM,MAAM,WAAW,IAAI,QAAQ;AACnC,UAAI,CAAC,KAAK;AACR,cAAM,IAAI;AAAA,UACR,iCAAiC,QAAQ,oEACS,CAAC,GAAG,WAAW,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC;AAAA,QACrF;AAAA,MACF;AASA,YAAM,gBAAkC;AAAA,QACtC,MAAM;AAAA,QACN,aAAa,IAAI;AAAA,QACjB,mBACE,KAAK,QAAQ,qBAAqB;AAAA,MACtC;AACA,YAAM,SAAS,KAAK,QAAQ,gBACxB,KAAK,QAAQ,cAAc,aAAa,IACxC,YAAY,WACV,MAAM,KAAK,kBAAkB,UAAU,IAAI,OAAO,IAAI,aAAa,UAAU,IAC7E,KAAK,YAAY,aAAa;AAOpC,YAAM,OAAO,aAAa;AAC1B,WAAK,QAAQ,KAAK,MAAM;AACxB,WAAK,OAAO;AAAA,QACV,4BAA4B,QAAQ,aAAa,IAAI,KAAK,kBACzC,IAAI,WAAW,aAAa,OAAO;AAAA,MACtD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,kBAAiC;AAGrC,aAAS,IAAI,KAAK,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AACjD,YAAM,SAAS,KAAK,QAAQ,CAAC;AAC7B,UAAI,CAAC,OAAQ;AACb,UAAI;AACF,cAAM,OAAO,gBAAgB;AAAA,MAC/B,SAAS,KAAK;AACZ,aAAK,OAAO;AAAA,UACV,8BAA+B,IAAc,OAAO;AAAA,QACtD;AAAA,MACF;AAAA,IACF;AACA,SAAK,QAAQ,SAAS;AAKtB,UAAM,OAAO,KAAK;AAClB,QAAI,OAAO,KAAK,qBAAqB,YAAY;AAC/C,UAAI;AACF,cAAM,KAAK,iBAAiB;AAAA,MAC9B,SAAS,KAAK;AACZ,aAAK,OAAO;AAAA,UACV,gDAAiD,IAAc,OAAO;AAAA,QACxE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYQ,6BACN,SACA,YACM;AACN,UAAM,YAA2D,CAAC;AAClE,eAAW,SAAS,SAAS;AAM3B,UAAI,MAAM,KAAK,WAAW,aAAa,EAAG;AAC1C,YAAM,eAAe,MAAM,KAAK,QAAQ;AACxC,YAAM,MAAM,WAAW,IAAI,YAAY;AACvC,UAAI,KAAK,UAAU;AACjB,kBAAU,KAAK;AAAA,UACb,cAAc,MAAM,aAAa;AAAA,UACjC,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,UAAU,SAAS,GAAG;AACxB,YAAM,IAAI,2BAA2B,SAAS;AAAA,IAChD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBQ,YAAY,eAA4C;AAC9D,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,IAAI;AAAA,QACR;AAAA,MAGF;AAAA,IACF;AACA,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MAGF;AAAA,IACF;AACA,WAAO,IAAI;AAAA,MACT,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,IACP;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAkBA,MAAc,kBACZ,MACA,aACA,aACA,YAC8D;AAC9D,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,QAAI,CAAC,KAAK,gBAAgB;AACxB,YAAM,IAAI;AAAA,QACR;AAAA,MAGF;AAAA,IACF;AACA,QAAI,CAAC,KAAK,WAAW;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,UAAM,YAAY,qBAAqB,MAAM,KAAK,YAAY,UAAU;AACxE,UAAM,YAAY;AAClB,UAAM,MAAO,MAAM,OAAO;AAM1B,WAAO,IAAI,IAAI;AAAA,MACb,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,KAAK;AAAA,MACnB;AAAA,MACA,KAAK;AAAA,IACP;AAAA,EACF;AACF;AAzSa,wBAAN;AAAA,EADN,WAAW;AAAA,EAMP,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,eAAe;AAAA,EACtB,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,yBAAyB;AAAA,EAOhC,4BAAS;AAAA,EAAG,0BAAO,OAAO;AAAA,EAa1B,0BAAO,SAAS;AAAA,EAMhB,4BAAS;AAAA,EACT,0BAAO,iBAAiB;AAAA,EAExB,4BAAS;AAAA,EACT,0BAAO,sBAAsB;AAAA,GAtCrB;AA4SN,IAAM,kBAAN,MAAsB;AAAA,EAC3B,OAAO,QAAQ,MAA6C;AAC1D,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,iBAAiB,QAAQ;AAAA,UACvB,SAAS,KAAK,WAAW;AAAA,UACzB,YAAY,KAAK;AAAA,UACjB,aAAa,KAAK;AAAA,QACpB,CAAC;AAAA,MACH;AAAA,MACA,WAAW;AAAA,QACT,EAAE,SAAS,2BAA2B,UAAU,KAAK;AAAA,QACrD;AAAA,MACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,SAAS,CAAC,yBAAyB;AAAA,IACrC;AAAA,EACF;AACF;AAzBa,kBAAN;AAAA,EADN,OAAO,CAAC,CAAC;AAAA,GACG;","names":[]}

package/dist/chunk-4JLJYWJC.js

@@ -0,0 +1,308 @@
+import {
+  clampEventLimit,
+  decodeEventCursor,
+  encodeEventCursor
+} from "./chunk-UQ5EHOH2.js";
+import {
+  EVENTS_MODULE_OPTIONS
+} from "./chunk-H5NH7KPE.js";
+import {
+  BRIDGE_OUTBOX_DRAIN_HOOK
+} from "./chunk-4LH67P4U.js";
+import {
+  domainEvents
+} from "./chunk-OFRRBC7M.js";
+import {
+  DRIZZLE
+} from "./chunk-U64T4YZE.js";
+import {
+  __decorateClass,
+  __decorateParam
+} from "./chunk-2E224ZSN.js";
+
+// runtime/subsystems/events/event-bus.drizzle-backend.ts
+import { Injectable, Inject, Logger, Optional } from "@nestjs/common";
+import { eq, and, inArray, asc, desc, gte, lt, or, sql } from "drizzle-orm";
+var POLL_INTERVAL_MS = 1e3;
+var POLL_BATCH_SIZE = 50;
+function toInsertValues(event, multiTenant) {
+  const metadata = event.metadata ?? void 0;
+  const pool = metadata?.["pool"] ?? null;
+  const direction = metadata?.["direction"] ?? null;
+  const tier = metadata?.["tier"] ?? "domain";
+  const base = {
+    id: event.id,
+    type: event.type,
+    aggregateId: event.aggregateId,
+    aggregateType: event.aggregateType,
+    payload: event.payload,
+    occurredAt: event.occurredAt,
+    processedAt: null,
+    status: "pending",
+    metadata: event.metadata,
+    pool,
+    direction,
+    tier
+  };
+  if (!multiTenant) return base;
+  const tenantId = metadata?.["tenantId"] ?? null;
+  return { ...base, tenantId };
+}
+function toEventSummary(r) {
+  const metadata = r.metadata ?? void 0;
+  const rootRunId = metadata?.["rootRunId"];
+  return {
+    id: r.id,
+    type: r.type,
+    aggregateId: r.aggregateId,
+    aggregateType: r.aggregateType,
+    status: r.status,
+    pool: r.pool,
+    direction: r.direction,
+    tier: r.tier,
+    rootRunId: typeof rootRunId === "string" ? rootRunId : null,
+    // EVT-8: `tenant_id` is a scaffold-time conditional column. Read it
+    // structurally so this projection typechecks against both the
+    // multi-tenant schema (column present) and the single-tenant schema
+    // (column absent → undefined → null).
+    tenantId: r.tenantId ?? null,
+    occurredAt: r.occurredAt instanceof Date ? r.occurredAt : new Date(r.occurredAt),
+    processedAt: r.processedAt == null ? null : r.processedAt instanceof Date ? r.processedAt : new Date(r.processedAt)
+  };
+}
+var DrizzleEventBus = class {
+  constructor(db, opts, bridgeHook = null) {
+    this.db = db;
+    this.bridgeHook = bridgeHook;
+    this.opts = opts ?? { backend: "drizzle" };
+  }
+  db;
+  bridgeHook;
+  logger = new Logger(DrizzleEventBus.name);
+  polling = false;
+  pollTimer = null;
+  handlers = /* @__PURE__ */ new Map();
+  opts;
+  // ============================================================================
+  // Lifecycle
+  // ============================================================================
+  async onModuleInit() {
+    this.polling = true;
+    this.schedulePoll();
+  }
+  async onModuleDestroy() {
+    this.polling = false;
+    if (this.pollTimer) {
+      clearTimeout(this.pollTimer);
+      this.pollTimer = null;
+    }
+  }
+  // ============================================================================
+  // IEventBus
+  // ============================================================================
+  async publish(event, tx) {
+    const client = tx ?? this.db;
+    const multiTenant = this.opts.multiTenant ?? false;
+    await client.insert(domainEvents).values(toInsertValues(event, multiTenant));
+  }
+  async publishMany(events, tx) {
+    if (events.length === 0) return;
+    const client = tx ?? this.db;
+    const multiTenant = this.opts.multiTenant ?? false;
+    await client.insert(domainEvents).values(events.map((e) => toInsertValues(e, multiTenant)));
+  }
+  async findById(eventId) {
+    const rows = await this.db.select().from(domainEvents).where(eq(domainEvents.id, eventId)).limit(1);
+    const row = rows[0];
+    if (!row) return null;
+    return {
+      id: row.id,
+      type: row.type,
+      aggregateId: row.aggregateId,
+      aggregateType: row.aggregateType,
+      payload: row.payload,
+      occurredAt: row.occurredAt instanceof Date ? row.occurredAt : new Date(row.occurredAt),
+      metadata: row.metadata ?? void 0
+    };
+  }
+  subscribe(eventType, handler) {
+    if (!this.handlers.has(eventType)) {
+      this.handlers.set(eventType, /* @__PURE__ */ new Set());
+    }
+    const set = this.handlers.get(eventType);
+    const h = handler;
+    set.add(h);
+    return () => {
+      set.delete(h);
+    };
+  }
+  // ============================================================================
+  // IEventReadPort (OBS-LIST-1)
+  // ============================================================================
+  async listEvents(query = {}) {
+    const limit = clampEventLimit(query.limit);
+    const conditions = [];
+    if (query.poolId) conditions.push(eq(domainEvents.pool, query.poolId));
+    if (query.direction)
+      conditions.push(eq(domainEvents.direction, query.direction));
+    if (query.since) conditions.push(gte(domainEvents.occurredAt, query.since));
+    if (query.rootRunId) {
+      conditions.push(
+        sql`${domainEvents.metadata}->>'rootRunId' = ${query.rootRunId}`
+      );
+    }
+    if (this.opts.multiTenant && query.tenantId !== void 0) {
+      const tenantIdColumn = domainEvents.tenantId;
+      conditions.push(
+        query.tenantId === null ? sql`${tenantIdColumn} is null` : eq(tenantIdColumn, query.tenantId)
+      );
+    }
+    if (query.cursor) {
+      const keyset = decodeEventCursor(query.cursor);
+      if (keyset) {
+        conditions.push(
+          or(
+            lt(domainEvents.occurredAt, keyset.occurredAt),
+            and(
+              eq(domainEvents.occurredAt, keyset.occurredAt),
+              lt(domainEvents.id, keyset.id)
+            )
+          )
+        );
+      }
+    }
+    const rows = await this.db.select().from(domainEvents).where(conditions.length > 0 ? and(...conditions) : void 0).orderBy(desc(domainEvents.occurredAt), desc(domainEvents.id)).limit(limit + 1);
+    const hasMore = rows.length > limit;
+    const page = hasMore ? rows.slice(0, limit) : rows;
+    const items = page.map(toEventSummary);
+    const last = page[page.length - 1];
+    const nextCursor = hasMore && last ? encodeEventCursor({ occurredAt: last.occurredAt, id: last.id }) : null;
+    return { items, nextCursor };
+  }
+  // ============================================================================
+  // Polling
+  // ============================================================================
+  /**
+   * Test-only hook. Runs exactly one drain cycle and returns. Production
+   * code goes through `onModuleInit` → `schedulePoll`, which calls the
+   * same `processBatch` under a timer.
+   */
+  async drainOnce() {
+    await this.processBatch();
+  }
+  schedulePoll() {
+    if (!this.polling) return;
+    this.pollTimer = setTimeout(async () => {
+      try {
+        await this.processBatch();
+      } catch (err) {
+        this.logger.error(`Poll cycle error: ${err}`);
+      } finally {
+        this.schedulePoll();
+      }
+    }, POLL_INTERVAL_MS);
+  }
+  /**
+   * Drain one batch (BRIDGE-4 restructure of EVT-4).
+   *
+   * Two-phase per drained event:
+   *
+   *   1. **Per-event transaction** — bridge fanout (`bridgeHook.processEvent`)
+   *      + `processed_at` stamp. Both write through the same `tx`. A throw
+   *      inside the tx (only infra-level failures should reach here, since
+   *      the hook tolerates null direction and registry misses inline)
+   *      rolls back the bridge inserts AND the `processed_at` stamp; the
+   *      event re-claims on the next drain cycle. Bridge `UNIQUE
+   *      (event_id, trigger_id)` makes the retry idempotent.
+   *
+   *   2. **After commit** — dispatch in-process subscribers (`IEventBus.subscribe`
+   *      handlers). This deliberately runs OUTSIDE the per-event tx (lead
+   *      decision 2026-04-22): subscribers are best-effort and must not
+   *      gate forward progress or roll back bridge fanout. Subscriber
+   *      errors are caught + logged; `processed_at` is already committed.
+   *      The old `MAX_RETRIES=3` in-process retry loop and the
+   *      `failed`-stamping path were removed in BRIDGE-4 along with their
+   *      coupling.
+   *
+   * The `processed_at` UPDATE carries `AND status='pending'` (BRIDGE-4
+   * tightening — without it, a hypothetical double-claim could double-stamp
+   * the timestamp). The per-event tx + `FOR UPDATE SKIP LOCKED` claim
+   * make this defensive belt-and-suspenders.
+   */
+  async processBatch() {
+    const pools = this.opts.pools;
+    const whereClause = pools && pools.length > 0 ? and(eq(domainEvents.status, "pending"), inArray(domainEvents.pool, pools)) : eq(domainEvents.status, "pending");
+    const rows = await this.db.transaction(async (tx) => {
+      return tx.select().from(domainEvents).where(whereClause).orderBy(asc(domainEvents.occurredAt)).limit(POLL_BATCH_SIZE).for("update", { skipLocked: true });
+    });
+    for (const row of rows) {
+      const event = {
+        id: row.id,
+        type: row.type,
+        aggregateId: row.aggregateId,
+        aggregateType: row.aggregateType,
+        payload: row.payload,
+        occurredAt: row.occurredAt instanceof Date ? row.occurredAt : new Date(row.occurredAt),
+        metadata: row.metadata ?? void 0
+      };
+      try {
+        await this.db.transaction(async (tx) => {
+          if (this.bridgeHook) {
+            await this.bridgeHook.processEvent(event, tx);
+          }
+          await tx.update(domainEvents).set({ status: "processed", processedAt: /* @__PURE__ */ new Date() }).where(
+            and(
+              eq(domainEvents.id, event.id),
+              eq(domainEvents.status, "pending")
+            )
+          );
+        });
+      } catch (err) {
+        this.logger.error(
+          `Per-event tx failed for event id=${event.id} type=${event.type}: ${err}`
+        );
+        continue;
+      }
+      try {
+        await this.dispatch(event);
+      } catch (err) {
+        this.logger.error(
+          `Subscriber dispatch failed for event id=${event.id} type=${event.type} (processed_at already committed; failure does not retry): ${err}`
+        );
+      }
+    }
+  }
+  async dispatch(event) {
+    const set = this.handlers.get(event.type);
+    if (!set) return;
+    let firstError;
+    for (const handler of set) {
+      try {
+        await handler(event);
+      } catch (err) {
+        this.logger.error(
+          `Handler error for event type "${event.type}" (id: ${event.id}): ${err}`
+        );
+        if (firstError === void 0) {
+          firstError = err;
+        }
+      }
+    }
+    if (firstError !== void 0) {
+      throw firstError;
+    }
+  }
+};
+DrizzleEventBus = __decorateClass([
+  Injectable(),
+  __decorateParam(0, Inject(DRIZZLE)),
+  __decorateParam(1, Optional()),
+  __decorateParam(1, Inject(EVENTS_MODULE_OPTIONS)),
+  __decorateParam(2, Optional()),
+  __decorateParam(2, Inject(BRIDGE_OUTBOX_DRAIN_HOOK))
+], DrizzleEventBus);
+
+export {
+  DrizzleEventBus
+};
+//# sourceMappingURL=chunk-4JLJYWJC.js.map