@pattern-stack/codegen 0.15.3 → 0.16.1

package/dist/chunk-JM3T27ZW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/jobs/job-worker.ts"],"sourcesContent":["/**\n * JobWorker — backend-agnostic tick loop for the job orchestration domain\n * (ADR-022, JOB-3).\n *\n * One worker instance per active pool. On `onModuleInit` it starts two\n * intervals: the poll loop (claim → process → repeat) and the stale-claim\n * sweeper. On `onModuleDestroy` / SIGTERM it drains in-flight work and\n * releases still-`running` rows back to `pending` so a replacement worker\n * can resume with step memoization intact.\n *\n * The claim query is the beating heart: `SELECT … FOR UPDATE SKIP LOCKED`\n * inside a single transaction. Multiple worker processes share the table\n * without serialising on row locks.\n */\n// TODO(logging-subsystem): swap to ILogger once ADR-028 lands\nimport { Inject, Injectable, Logger, type OnModuleDestroy, type OnModuleInit } from '@nestjs/common';\nimport { ModuleRef } from '@nestjs/core';\nimport { and, asc, desc, eq, inArray, lt, lte, sql } from 'drizzle-orm';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport { tokenKey } from '../token-key';\nimport { DRIZZLE } from '../../constants/tokens';\nimport { jobRuns, type JobRunRow } from './job-orchestration.schema';\nimport type { IJobOrchestrator, JobRun } from './job-orchestrator.protocol';\nimport type { IJobRunService } from './job-run-service.protocol';\nimport type { IJobStepService } from './job-step-service.protocol';\nimport {\n  JOB_ORCHESTRATOR,\n  JOB_RUN_SERVICE,\n  JOB_STEP_SERVICE,\n} from './jobs-domain.tokens';\nimport {\n  JOB_HANDLER_REGISTRY,\n  JobHandlerBase,\n  type JobContext,\n  type JobHandlerMeta,\n  type RetryPolicy,\n  type SpawnChildOptions,\n  type StepOptions,\n} from './job-handler.base';\nimport { JOBS_WAKE_CHANNEL, PgNotifyListener } from './pg-notify';\n\n/**\n * Options accepted by `JobWorker`. JOB-5 threads these through module\n * `.forRoot()` config; supplied here as a plain DI-constructor argument\n * so the worker compiles standalone.\n */\nexport interface JobWorkerOptions {\n  /** Pool name this worker claims from. Matches `job.pool`. */\n  pool: string;\n  /** Max concurrent in-flight `processRun` calls. */\n  concurrency: number;\n  /** Poll interval in ms. Default 1000. */\n  pollIntervalMs?: number;\n  /** Stale sweep interval in ms. Default 60_000. */\n  staleSweeperIntervalMs?: number;\n  /**\n   * Threshold beyond which a `running` row is presumed stranded by a\n   * crashed worker. Default 5 min. Must be >= 2× max handler duration.\n   */\n  staleThresholdMs?: number;\n  /** Max ms to wait for in-flight drain on SIGTERM. Default 30_000. */\n  shutdownTimeoutMs?: number;\n  /**\n   * LISTEN-NOTIFY-1 — when true, hold a dedicated listener connection and\n   * LISTEN on `codegen_jobs_wake`. A notification naming this worker's `pool`\n   * triggers an immediate (debounced) claim cycle, so an enqueue is claimed in\n   * milliseconds instead of waiting for the next `pollIntervalMs` tick. Polling\n   * continues unchanged as the fallback heartbeat. Default false.\n   */\n  listenNotify?: boolean;\n}\n\n// ADR-037: namespaced `Symbol.for(...)` (via `tokenKey()`) — matches by value\n// across runtime copies.\nexport const JOB_WORKER_OPTIONS = Symbol.for(tokenKey('jobs', 'worker-options'));\n\nconst DEFAULT_POLL_INTERVAL_MS = 1_000;\nconst DEFAULT_STALE_SWEEPER_INTERVAL_MS = 60_000;\nconst DEFAULT_STALE_THRESHOLD_MS = 5 * 60_000;\nconst DEFAULT_SHUTDOWN_TIMEOUT_MS = 30_000;\n\nconst TERMINAL_STATUSES: JobRunRow['status'][] = [\n  'completed',\n  'failed',\n  'timed_out',\n  'canceled',\n];\n\n// ─── Pure helpers (exported for unit tests) ────────────────────────────────\n\n/**\n * Backoff delay in ms for the Nth attempt (1-indexed). Supports both\n * policy modes. Exponential is capped at `Number.MAX_SAFE_INTEGER` so\n * pathological attempt counts don't overflow.\n */\nexport function computeBackoff(policy: RetryPolicy, attempts: number): number {\n  const base = Math.max(policy.baseMs, 0);\n  if (policy.backoff === 'fixed') {\n    return base;\n  }\n  // exponential: baseMs * 2^(attempts-1)\n  const exponent = Math.max(attempts - 1, 0);\n  if (exponent >= 53) return Number.MAX_SAFE_INTEGER; // 2^53 overflow guard\n  const raw = base * Math.pow(2, exponent);\n  if (!Number.isFinite(raw) || raw >= Number.MAX_SAFE_INTEGER) {\n    return Number.MAX_SAFE_INTEGER;\n  }\n  return raw;\n}\n\n/**\n * Decide whether an error should be retried under the given policy.\n * Matches `nonRetryableErrors` by `.name` OR `.code`. Returns\n *   - `'retry'` if attempts remain and the error isn't blacklisted,\n *   - `'fail'` otherwise (terminal failure).\n */\nexport function classifyError(\n  err: unknown,\n  policy: RetryPolicy | undefined,\n  currentAttempts: number,\n): 'retry' | 'fail' {\n  if (!policy) return 'fail';\n  const errObj = err as { name?: string; code?: string } | undefined;\n  const name = errObj?.name;\n  const code = errObj?.code;\n  const nonRetryable = policy.nonRetryableErrors ?? [];\n  if (nonRetryable.some((n) => n === name || n === code)) return 'fail';\n  if (currentAttempts + 1 >= policy.attempts) return 'fail';\n  return 'retry';\n}\n\n/**\n * Build the raw claim-candidate select. Exported so tests can inspect\n * `.toSQL()` without spinning up the full worker. Matches JOB-3 §4 and\n * ADR-022 \"Claim query (Drizzle backend)\".\n */\nexport function buildClaimQuery(db: DrizzleClient, pool: string) {\n  return db\n    .select({ id: jobRuns.id })\n    .from(jobRuns)\n    .where(\n      and(\n        eq(jobRuns.status, 'pending'),\n        eq(jobRuns.pool, pool),\n        lte(jobRuns.runAt, new Date()),\n      ),\n    )\n    .orderBy(desc(jobRuns.priority), asc(jobRuns.runAt))\n    .limit(1)\n    .for('update', { skipLocked: true });\n}\n\n/**\n * Build the stale-claim sweep candidate select. `FOR UPDATE SKIP LOCKED`\n * per OQ-2 resolution (2026-04-19): per-worker sweeper, safe without\n * leader election because the update is self-gating.\n */\nexport function buildStaleSweepQuery(\n  db: DrizzleClient,\n  staleThresholdMs: number,\n) {\n  const threshold = new Date(Date.now() - staleThresholdMs);\n  return db\n    .select({ id: jobRuns.id })\n    .from(jobRuns)\n    .where(\n      and(\n        eq(jobRuns.status, 'running'),\n        lt(jobRuns.claimedAt, threshold),\n      ),\n    )\n    .for('update', { skipLocked: true });\n}\n\n// ─── Error serialisation ───────────────────────────────────────────────────\n\nfunction serialiseError(err: unknown, attempt: number, retryable: boolean) {\n  const e = err as { message?: string; stack?: string; code?: string } | undefined;\n  return {\n    message: (e?.message ?? String(err)) as string,\n    stack: e?.stack,\n    retryable,\n    attempt,\n  };\n}\n\n// ─── JobWorker ─────────────────────────────────────────────────────────────\n\n@Injectable()\nexport class JobWorker implements OnModuleInit, OnModuleDestroy {\n  private readonly logger = new Logger(JobWorker.name);\n  private shuttingDown = false;\n  private readonly inFlight = new Set<Promise<void>>();\n  private pollTimer: ReturnType<typeof setInterval> | null = null;\n  private sweeperTimer: ReturnType<typeof setInterval> | null = null;\n  private sigtermHandled = false;\n  private readonly sigtermHandler: () => void;\n\n  private readonly pollIntervalMs: number;\n  private readonly staleSweeperIntervalMs: number;\n  private readonly staleThresholdMs: number;\n  private readonly shutdownTimeoutMs: number;\n\n  // LISTEN-NOTIFY-1 — dedicated listener + debounce state. `null` when\n  // `listenNotify` is off (the common case); polling is the only driver then.\n  private readonly listenNotifyEnabled: boolean;\n  private notifyListener: PgNotifyListener | null = null;\n  /** True while a wake-driven claim cycle is in flight (debounce gate). */\n  private wakeDraining = false;\n  /** A notify arrived mid-cycle → re-check once when the cycle ends. */\n  private wakeRecheckPending = false;\n\n  constructor(\n    @Inject(DRIZZLE) private readonly db: DrizzleClient,\n    @Inject(JOB_ORCHESTRATOR) private readonly orchestrator: IJobOrchestrator,\n    @Inject(JOB_RUN_SERVICE) private readonly runService: IJobRunService,\n    @Inject(JOB_STEP_SERVICE) private readonly stepService: IJobStepService,\n    @Inject(JOB_WORKER_OPTIONS) private readonly options: JobWorkerOptions,\n    private readonly moduleRef: ModuleRef,\n  ) {\n    this.pollIntervalMs = options.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;\n    this.staleSweeperIntervalMs =\n      options.staleSweeperIntervalMs ?? DEFAULT_STALE_SWEEPER_INTERVAL_MS;\n    this.staleThresholdMs = options.staleThresholdMs ?? DEFAULT_STALE_THRESHOLD_MS;\n    this.shutdownTimeoutMs =\n      options.shutdownTimeoutMs ?? DEFAULT_SHUTDOWN_TIMEOUT_MS;\n    this.listenNotifyEnabled = options.listenNotify ?? false;\n\n    this.sigtermHandler = () => {\n      if (this.sigtermHandled) return;\n      this.sigtermHandled = true;\n      void this.onModuleDestroy();\n    };\n    void this.runService; // reserved for future scope-aware cancellation paths\n  }\n\n  // ============================================================================\n  // Lifecycle\n  // ============================================================================\n\n  onModuleInit(): void {\n    this.pollTimer = setInterval(() => {\n      void this.pollAndProcess();\n    }, this.pollIntervalMs);\n    this.sweeperTimer = setInterval(() => {\n      void this.sweepStaleClaims();\n    }, this.staleSweeperIntervalMs);\n    process.on('SIGTERM', this.sigtermHandler);\n\n    // LISTEN-NOTIFY-1 — start the wake listener ALONGSIDE the poll timer (never\n    // instead). A notify for this worker's pool drives an immediate claim cycle;\n    // the interval timer above stays the durability heartbeat. Listener startup\n    // is fire-and-forget: a connect failure self-heals via the listener's own\n    // backoff, and until it's up the poll loop is the sole driver.\n    if (this.listenNotifyEnabled) {\n      // The DRIZZLE provider wraps a `pg.Pool`, exposed by drizzle as `$client`.\n      const pool = (this.db as unknown as { $client?: unknown }).$client;\n      if (!pool || typeof (pool as { connect?: unknown }).connect !== 'function') {\n        this.logger.warn(\n          `listen_notify enabled but the Drizzle client exposes no pg Pool ` +\n            `($client.connect missing) — falling back to interval polling only.`,\n        );\n      } else {\n        this.notifyListener = new PgNotifyListener({\n          channel: JOBS_WAKE_CHANNEL,\n          pool: pool as { connect(): Promise<never> },\n          label: `jobs:${this.options.pool}`,\n          onNotify: (payload) => this.onWake(payload),\n        });\n        void this.notifyListener.start();\n      }\n    }\n  }\n\n  /**\n   * Wake handler — a `codegen_jobs_wake` notification arrived. Only payloads\n   * naming THIS worker's pool are relevant (other pools have their own workers).\n   * Debounced: if a claim cycle is already running we just flag a re-check so a\n   * burst of N enqueues collapses to at most one extra cycle (D3).\n   */\n  private onWake(payload: string): void {\n    if (this.shuttingDown) return;\n    if (payload !== this.options.pool) return;\n    if (this.wakeDraining) {\n      this.wakeRecheckPending = true;\n      return;\n    }\n    void this.drainOnWake();\n  }\n\n  /**\n   * Claim-until-empty on a wake. Unlike the interval `pollAndProcess` (one\n   * claim per tick), a wake drains greedily up to the concurrency ceiling so a\n   * burst that arrived together is dispatched without waiting for N ticks. The\n   * `wakeRecheckPending` flag coalesces notifies that land mid-drain.\n   */\n  private async drainOnWake(): Promise<void> {\n    this.wakeDraining = true;\n    try {\n      do {\n        this.wakeRecheckPending = false;\n        // Claim while there's capacity; pollAndProcess no-ops at the ceiling.\n        let progressed = true;\n        while (\n          progressed &&\n          !this.shuttingDown &&\n          this.inFlight.size < this.options.concurrency\n        ) {\n          const before = this.inFlight.size;\n          await this.pollAndProcess();\n          progressed = this.inFlight.size > before;\n        }\n      } while (this.wakeRecheckPending && !this.shuttingDown);\n    } finally {\n      this.wakeDraining = false;\n    }\n  }\n\n  async onModuleDestroy(): Promise<void> {\n    if (this.shuttingDown) {\n      // Still drain, but don't tear intervals down twice.\n      await this.drainInFlight();\n      return;\n    }\n    this.shuttingDown = true;\n    if (this.pollTimer) {\n      clearInterval(this.pollTimer);\n      this.pollTimer = null;\n    }\n    if (this.sweeperTimer) {\n      clearInterval(this.sweeperTimer);\n      this.sweeperTimer = null;\n    }\n    process.removeListener('SIGTERM', this.sigtermHandler);\n\n    // LISTEN-NOTIFY-1 — release the listener connection so the process can exit\n    // cleanly. Best-effort; a failure here doesn't block the drain.\n    if (this.notifyListener) {\n      try {\n        await this.notifyListener.stop();\n      } catch (err) {\n        this.logger.error(`notify listener stop failed: ${(err as Error).message}`);\n      }\n      this.notifyListener = null;\n    }\n\n    await this.drainInFlight();\n\n    // Any rows still `running` past timeout → release back to pending.\n    try {\n      await this.db\n        .update(jobRuns)\n        .set({ status: 'pending', claimedAt: null, startedAt: null })\n        .where(\n          and(eq(jobRuns.status, 'running'), eq(jobRuns.pool, this.options.pool)),\n        );\n    } catch (err) {\n      this.logger.error(`shutdown reset failed: ${(err as Error).message}`);\n    }\n  }\n\n  private async drainInFlight(): Promise<void> {\n    if (this.inFlight.size === 0) return;\n    const timeout = new Promise<void>((resolve) =>\n      setTimeout(resolve, this.shutdownTimeoutMs),\n    );\n    await Promise.race([\n      Promise.allSettled([...this.inFlight]).then(() => undefined),\n      timeout,\n    ]);\n  }\n\n  // ============================================================================\n  // Poll loop\n  // ============================================================================\n\n  async pollAndProcess(): Promise<void> {\n    if (this.shuttingDown) return;\n    if (this.inFlight.size >= this.options.concurrency) return;\n\n    let claimed: JobRunRow | null;\n    try {\n      claimed = await this.claimNext(this.options.pool);\n    } catch (err) {\n      this.logger.error(`claimNext failed: ${(err as Error).message}`);\n      return;\n    }\n    if (!claimed) return;\n\n    const run = claimed;\n    const promise = this.processRun(run).catch((err) => {\n      this.logger.error(\n        `processRun(${run.id}) unhandled: ${(err as Error).message}`,\n      );\n    });\n    this.inFlight.add(promise);\n    promise.finally(() => {\n      this.inFlight.delete(promise);\n    });\n  }\n\n  /**\n   * Claim the next runnable row from the pool. Transaction ensures the\n   * select-candidate + update-to-running pair is atomic; FOR UPDATE SKIP\n   * LOCKED lets multiple workers share the table without serialising.\n   */\n  async claimNext(pool: string): Promise<JobRunRow | null> {\n    return this.db.transaction(async (tx) => {\n      const candidates = await tx\n        .select({ id: jobRuns.id })\n        .from(jobRuns)\n        .where(\n          and(\n            eq(jobRuns.status, 'pending'),\n            eq(jobRuns.pool, pool),\n            lte(jobRuns.runAt, new Date()),\n          ),\n        )\n        .orderBy(desc(jobRuns.priority), asc(jobRuns.runAt))\n        .limit(1)\n        .for('update', { skipLocked: true });\n      const candidate = candidates[0];\n      if (!candidate) return null;\n\n      const [claimed] = await tx\n        .update(jobRuns)\n        .set({\n          status: 'running',\n          claimedAt: new Date(),\n          startedAt: new Date(),\n          updatedAt: new Date(),\n        })\n        .where(eq(jobRuns.id, candidate.id))\n        .returning();\n      return (claimed ?? null) as JobRunRow | null;\n    });\n  }\n\n  // ============================================================================\n  // Stale claim sweeper\n  // ============================================================================\n\n  /**\n   * Release rows whose `claimed_at` is older than the threshold. Safe to\n   * run concurrently across workers — the two-phase tx (select-for-update\n   * then update) guarantees each stranded row is only reset once.\n   */\n  async sweepStaleClaims(): Promise<void> {\n    if (this.shuttingDown) return;\n    try {\n      await this.db.transaction(async (tx) => {\n        const threshold = new Date(Date.now() - this.staleThresholdMs);\n        const stale = await tx\n          .select({ id: jobRuns.id })\n          .from(jobRuns)\n          .where(\n            and(eq(jobRuns.status, 'running'), lt(jobRuns.claimedAt, threshold)),\n          )\n          .for('update', { skipLocked: true });\n        if (stale.length === 0) return;\n        const ids = stale.map((r) => r.id);\n        await tx\n          .update(jobRuns)\n          .set({ status: 'pending', claimedAt: null, startedAt: null })\n          .where(inArray(jobRuns.id, ids));\n        for (const id of ids) {\n          this.logger.warn(`Recovered stale claim on run ${id}`);\n        }\n      });\n    } catch (err) {\n      this.logger.error(`sweepStaleClaims failed: ${(err as Error).message}`);\n    }\n  }\n\n  // ============================================================================\n  // processRun\n  // ============================================================================\n\n  private async processRun(claimed: JobRunRow): Promise<void> {\n    const registryEntry = JOB_HANDLER_REGISTRY.get(claimed.jobType);\n\n    // (a) Missing handler — defensive; JOB-5 boot validator should have caught.\n    if (!registryEntry) {\n      this.logger.error(\n        `No handler registered for jobType='${claimed.jobType}' (run ${claimed.id})`,\n      );\n      await this.markFailed(\n        claimed,\n        new Error(`No handler registered for jobType='${claimed.jobType}'`),\n        /*finalAttempts*/ (claimed.attempts ?? 0) + 1,\n      );\n      return;\n    }\n\n    // (b) Concurrency-queue release gate — defer if another run with the\n    //     same key is already `running`.\n    if (claimed.concurrencyKey) {\n      const inflight = await this.db\n        .select({ id: jobRuns.id })\n        .from(jobRuns)\n        .where(\n          and(\n            eq(jobRuns.concurrencyKey, claimed.concurrencyKey),\n            eq(jobRuns.status, 'running'),\n          ),\n        );\n      const other = inflight.find((r) => r.id !== claimed.id);\n      if (other) {\n        await this.db\n          .update(jobRuns)\n          .set({\n            status: 'pending',\n            claimedAt: null,\n            startedAt: null,\n            updatedAt: new Date(),\n          })\n          .where(eq(jobRuns.id, claimed.id));\n        return;\n      }\n    }\n\n    const meta = registryEntry.meta as JobHandlerMeta<unknown>;\n    const HandlerClass = registryEntry.handlerClass;\n\n    // (c) Build JobContext. Resolve the handler instance from Nest's DI\n    //     graph so its `@Inject` constructor params (which may come from\n    //     any module in the app graph) are satisfied. `moduleRef.create()`\n    //     would otherwise instantiate a fresh class within JobWorkerModule's\n    //     scope only — which blows up with \"not a provider of the current\n    //     module\" for any handler that consumes a service from a peer\n    //     module (e.g. CrmSyncJob injecting CrmSyncFactory from CrmModule).\n    //     Consequence: handlers MUST be registered as providers in their\n    //     owning module (@Injectable + `providers: [HandlerClass]`). The\n    //     @JobHandler decorator handles registry registration only, not DI.\n    //     See the jobs skill's handler-authoring.md for the registration\n    //     rule.\n    const handler = this.moduleRef.get(\n      HandlerClass as unknown as new (...args: unknown[]) => unknown,\n      { strict: false },\n    ) as JobHandlerBase<unknown>;\n    const ctx: JobContext<unknown> = {\n      input: claimed.input,\n      run: claimed as JobRun,\n      step: this.makeStepFn(claimed),\n      spawnChild: this.makeSpawnFn(claimed),\n      logger: new Logger(`JobRun:${claimed.id}`),\n    };\n\n    const attemptsBefore = claimed.attempts ?? 0;\n    try {\n      // (d) Run the handler.\n      const output = (await handler.run(ctx)) as Record<string, unknown> | undefined;\n      // (e) Success.\n      await this.db\n        .update(jobRuns)\n        .set({\n          status: 'completed',\n          output: (output ?? {}) as Record<string, unknown>,\n          finishedAt: new Date(),\n          updatedAt: new Date(),\n          attempts: attemptsBefore + 1,\n        })\n        .where(eq(jobRuns.id, claimed.id));\n    } catch (err) {\n      // (f) Error classification + retry/fail.\n      const policy = meta.retry;\n      const decision = classifyError(err, policy, attemptsBefore);\n      const nextAttempts = attemptsBefore + 1;\n      if (decision === 'retry' && policy) {\n        const delay = computeBackoff(policy, nextAttempts);\n        await this.db\n          .update(jobRuns)\n          .set({\n            status: 'pending',\n            attempts: nextAttempts,\n            runAt: new Date(Date.now() + delay),\n            startedAt: null,\n            claimedAt: null,\n            error: serialiseError(err, nextAttempts, true),\n            updatedAt: new Date(),\n          })\n          .where(eq(jobRuns.id, claimed.id));\n      } else {\n        await this.markFailed(claimed, err, nextAttempts);\n      }\n    }\n  }\n\n  private async markFailed(\n    claimed: JobRunRow,\n    err: unknown,\n    finalAttempts: number,\n  ): Promise<void> {\n    await this.db\n      .update(jobRuns)\n      .set({\n        status: 'failed',\n        attempts: finalAttempts,\n        finishedAt: new Date(),\n        error: serialiseError(err, finalAttempts, false),\n        updatedAt: new Date(),\n      })\n      .where(eq(jobRuns.id, claimed.id));\n\n    // Parent-close-policy cascade: if this run has children under the same\n    // root_run_id and this run's own parentClosePolicy is 'terminate', cascade.\n    if (claimed.parentClosePolicy === 'terminate') {\n      try {\n        // JOB-8 — thread the run's own tenantId so the orchestrator's\n        // multi-tenant gate passes. Without this, every terminate-policy\n        // cascade throws MissingTenantIdError under multiTenant=true and\n        // the outer catch silently swallows it — children never cancel.\n        await this.orchestrator.cancel(claimed.id, {\n          cascade: true,\n          reason: 'parent-failed',\n          tenantId: claimed.tenantId,\n        });\n      } catch (cascadeErr) {\n        // cancel is idempotent; failure here is unusual but not fatal.\n        this.logger.warn(\n          `cascade on failed run ${claimed.id}: ${(cascadeErr as Error).message}`,\n        );\n      }\n    }\n  }\n\n  // ============================================================================\n  // ctx.step / ctx.spawnChild builders\n  // ============================================================================\n\n  private makeStepFn(run: JobRunRow) {\n    return async <TOutput>(\n      stepId: string,\n      fn: () => Promise<TOutput>,\n      _opts?: StepOptions,\n    ): Promise<TOutput> => {\n      void _opts;\n      const existing = await this.stepService.findStep(run.id, stepId);\n      if (existing?.status === 'completed') {\n        return existing.output as TOutput;\n      }\n\n      const seq = await this.nextStepSeq(run.id);\n      const startedAt = new Date();\n      const nextAttempts = (existing?.attempts ?? 0) + 1;\n      await this.stepService.recordStep({\n        jobRunId: run.id,\n        stepId,\n        kind: 'task',\n        seq,\n        status: 'running',\n        startedAt,\n        attempts: nextAttempts,\n      });\n      try {\n        const output = await fn();\n        await this.stepService.recordStep({\n          jobRunId: run.id,\n          stepId,\n          kind: 'task',\n          seq,\n          status: 'completed',\n          output: output as Record<string, unknown> | undefined,\n          finishedAt: new Date(),\n          attempts: nextAttempts,\n        });\n        return output;\n      } catch (err) {\n        await this.stepService.recordStep({\n          jobRunId: run.id,\n          stepId,\n          kind: 'task',\n          seq,\n          status: 'failed',\n          error: serialiseError(err, nextAttempts, false),\n          finishedAt: new Date(),\n          attempts: nextAttempts,\n        });\n        throw err;\n      }\n    };\n  }\n\n  private makeSpawnFn(run: JobRunRow) {\n    return async (\n      type: string,\n      input: unknown,\n      opts?: SpawnChildOptions,\n    ): Promise<JobRun> => {\n      return this.orchestrator.start(type, input, {\n        parentRunId: run.id,\n        parentClosePolicy: opts?.closePolicy,\n        runAt: opts?.runAt,\n        priority: opts?.priority,\n        tags: opts?.tags,\n        triggerSource: 'parent',\n        triggerRef: run.id,\n      });\n    };\n  }\n\n  /**\n   * Allocate the next `seq` for a given run. SELECT-max approach — runs\n   * typically have <100 steps so the scan is cheap, and correctness across\n   * retries is more important than the microseconds saved by an in-memory\n   * counter (which would drift if the worker crashes mid-run and another\n   * worker resumes via stale-claim sweep).\n   */\n  private async nextStepSeq(runId: string): Promise<number> {\n    const result = await this.db.execute(\n      sql`SELECT COALESCE(MAX(seq), 0) + 1 AS next FROM job_step WHERE job_run_id = ${runId}`,\n    );\n    // Driver shape varies and is NOT uniformly array-iterable, so we must\n    // never array-destructure the raw result (that throws `{} is not iterable`\n    // on the node-postgres `Result` object, which exposes `.rows` instead of\n    // being an array — first hit by package-mode bridge deliveries on\n    // `drizzle-orm/node-postgres`). Normalise to a row array first, then read.\n    //   - node-postgres `db.execute(sql)` → `{ rows: [{ next }], ... }`\n    //   - some drivers / future shapes → a plain `[{ next }]` array\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any\n    const raw = result as any;\n    const rows: Array<{ next?: unknown }> = Array.isArray(raw)\n      ? raw\n      : Array.isArray(raw?.rows)\n        ? raw.rows\n        : [];\n    const next = rows[0]?.next;\n    return typeof next === 'undefined' ? 1 : Number(next);\n  }\n\n  // ============================================================================\n  // (suppress unused-import noise)\n  // ============================================================================\n}\n\n// Terminal statuses re-exported for JOB-4 parity imports.\nexport { TERMINAL_STATUSES };\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,SAAS,QAAQ,YAAY,cAAuD;AAEpF,SAAS,KAAK,KAAK,MAAM,IAAI,SAAS,IAAI,KAAK,WAAW;AAyDnD,IAAM,qBAAqB,OAAO,IAAI,SAAS,QAAQ,gBAAgB,CAAC;AAE/E,IAAM,2BAA2B;AACjC,IAAM,oCAAoC;AAC1C,IAAM,6BAA6B,IAAI;AACvC,IAAM,8BAA8B;AAEpC,IAAM,oBAA2C;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AASO,SAAS,eAAe,QAAqB,UAA0B;AAC5E,QAAM,OAAO,KAAK,IAAI,OAAO,QAAQ,CAAC;AACtC,MAAI,OAAO,YAAY,SAAS;AAC9B,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,IAAI,WAAW,GAAG,CAAC;AACzC,MAAI,YAAY,GAAI,QAAO,OAAO;AAClC,QAAM,MAAM,OAAO,KAAK,IAAI,GAAG,QAAQ;AACvC,MAAI,CAAC,OAAO,SAAS,GAAG,KAAK,OAAO,OAAO,kBAAkB;AAC3D,WAAO,OAAO;AAAA,EAChB;AACA,SAAO;AACT;AAQO,SAAS,cACd,KACA,QACA,iBACkB;AAClB,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,SAAS;AACf,QAAM,OAAO,QAAQ;AACrB,QAAM,OAAO,QAAQ;AACrB,QAAM,eAAe,OAAO,sBAAsB,CAAC;AACnD,MAAI,aAAa,KAAK,CAAC,MAAM,MAAM,QAAQ,MAAM,IAAI,EAAG,QAAO;AAC/D,MAAI,kBAAkB,KAAK,OAAO,SAAU,QAAO;AACnD,SAAO;AACT;AAOO,SAAS,gBAAgB,IAAmB,MAAc;AAC/D,SAAO,GACJ,OAAO,EAAE,IAAI,QAAQ,GAAG,CAAC,EACzB,KAAK,OAAO,EACZ;AAAA,IACC;AAAA,MACE,GAAG,QAAQ,QAAQ,SAAS;AAAA,MAC5B,GAAG,QAAQ,MAAM,IAAI;AAAA,MACrB,IAAI,QAAQ,OAAO,oBAAI,KAAK,CAAC;AAAA,IAC/B;AAAA,EACF,EACC,QAAQ,KAAK,QAAQ,QAAQ,GAAG,IAAI,QAAQ,KAAK,CAAC,EAClD,MAAM,CAAC,EACP,IAAI,UAAU,EAAE,YAAY,KAAK,CAAC;AACvC;AAOO,SAAS,qBACd,IACA,kBACA;AACA,QAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,gBAAgB;AACxD,SAAO,GACJ,OAAO,EAAE,IAAI,QAAQ,GAAG,CAAC,EACzB,KAAK,OAAO,EACZ;AAAA,IACC;AAAA,MACE,GAAG,QAAQ,QAAQ,SAAS;AAAA,MAC5B,GAAG,QAAQ,WAAW,SAAS;AAAA,IACjC;AAAA,EACF,EACC,IAAI,UAAU,EAAE,YAAY,KAAK,CAAC;AACvC;AAIA,SAAS,eAAe,KAAc,SAAiB,WAAoB;AACzE,QAAM,IAAI;AACV,SAAO;AAAA,IACL,SAAU,GAAG,WAAW,OAAO,GAAG;AAAA,IAClC,OAAO,GAAG;AAAA,IACV;AAAA,IACA;AAAA,EACF;AACF;AAKO,IAAM,YAAN,MAAyD;AAAA,EAuB9D,YACoC,IACS,cACD,YACC,aACE,SAC5B,WACjB;AANkC;AACS;AACD;AACC;AACE;AAC5B;AAEjB,SAAK,iBAAiB,QAAQ,kBAAkB;AAChD,SAAK,yBACH,QAAQ,0BAA0B;AACpC,SAAK,mBAAmB,QAAQ,oBAAoB;AACpD,SAAK,oBACH,QAAQ,qBAAqB;AAC/B,SAAK,sBAAsB,QAAQ,gBAAgB;AAEnD,SAAK,iBAAiB,MAAM;AAC1B,UAAI,KAAK,eAAgB;AACzB,WAAK,iBAAiB;AACtB,WAAK,KAAK,gBAAgB;AAAA,IAC5B;AACA,SAAK,KAAK;AAAA,EACZ;AAAA,EArBoC;AAAA,EACS;AAAA,EACD;AAAA,EACC;AAAA,EACE;AAAA,EAC5B;AAAA,EA5BF,SAAS,IAAI,OAAO,UAAU,IAAI;AAAA,EAC3C,eAAe;AAAA,EACN,WAAW,oBAAI,IAAmB;AAAA,EAC3C,YAAmD;AAAA,EACnD,eAAsD;AAAA,EACtD,iBAAiB;AAAA,EACR;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA;AAAA,EAIA;AAAA,EACT,iBAA0C;AAAA;AAAA,EAE1C,eAAe;AAAA;AAAA,EAEf,qBAAqB;AAAA;AAAA;AAAA;AAAA,EA8B7B,eAAqB;AACnB,SAAK,YAAY,YAAY,MAAM;AACjC,WAAK,KAAK,eAAe;AAAA,IAC3B,GAAG,KAAK,cAAc;AACtB,SAAK,eAAe,YAAY,MAAM;AACpC,WAAK,KAAK,iBAAiB;AAAA,IAC7B,GAAG,KAAK,sBAAsB;AAC9B,YAAQ,GAAG,WAAW,KAAK,cAAc;AAOzC,QAAI,KAAK,qBAAqB;AAE5B,YAAM,OAAQ,KAAK,GAAwC;AAC3D,UAAI,CAAC,QAAQ,OAAQ,KAA+B,YAAY,YAAY;AAC1E,aAAK,OAAO;AAAA,UACV;AAAA,QAEF;AAAA,MACF,OAAO;AACL,aAAK,iBAAiB,IAAI,iBAAiB;AAAA,UACzC,SAAS;AAAA,UACT;AAAA,UACA,OAAO,QAAQ,KAAK,QAAQ,IAAI;AAAA,UAChC,UAAU,CAAC,YAAY,KAAK,OAAO,OAAO;AAAA,QAC5C,CAAC;AACD,aAAK,KAAK,eAAe,MAAM;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQQ,OAAO,SAAuB;AACpC,QAAI,KAAK,aAAc;AACvB,QAAI,YAAY,KAAK,QAAQ,KAAM;AACnC,QAAI,KAAK,cAAc;AACrB,WAAK,qBAAqB;AAC1B;AAAA,IACF;AACA,SAAK,KAAK,YAAY;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAc,cAA6B;AACzC,SAAK,eAAe;AACpB,QAAI;AACF,SAAG;AACD,aAAK,qBAAqB;AAE1B,YAAI,aAAa;AACjB,eACE,cACA,CAAC,KAAK,gBACN,KAAK,SAAS,OAAO,KAAK,QAAQ,aAClC;AACA,gBAAM,SAAS,KAAK,SAAS;AAC7B,gBAAM,KAAK,eAAe;AAC1B,uBAAa,KAAK,SAAS,OAAO;AAAA,QACpC;AAAA,MACF,SAAS,KAAK,sBAAsB,CAAC,KAAK;AAAA,IAC5C,UAAE;AACA,WAAK,eAAe;AAAA,IACtB;AAAA,EACF;AAAA,EAEA,MAAM,kBAAiC;AACrC,QAAI,KAAK,cAAc;AAErB,YAAM,KAAK,cAAc;AACzB;AAAA,IACF;AACA,SAAK,eAAe;AACpB,QAAI,KAAK,WAAW;AAClB,oBAAc,KAAK,SAAS;AAC5B,WAAK,YAAY;AAAA,IACnB;AACA,QAAI,KAAK,cAAc;AACrB,oBAAc,KAAK,YAAY;AAC/B,WAAK,eAAe;AAAA,IACtB;AACA,YAAQ,eAAe,WAAW,KAAK,cAAc;AAIrD,QAAI,KAAK,gBAAgB;AACvB,UAAI;AACF,cAAM,KAAK,eAAe,KAAK;AAAA,MACjC,SAAS,KAAK;AACZ,aAAK,OAAO,MAAM,gCAAiC,IAAc,OAAO,EAAE;AAAA,MAC5E;AACA,WAAK,iBAAiB;AAAA,IACxB;AAEA,UAAM,KAAK,cAAc;AAGzB,QAAI;AACF,YAAM,KAAK,GACR,OAAO,OAAO,EACd,IAAI,EAAE,QAAQ,WAAW,WAAW,MAAM,WAAW,KAAK,CAAC,EAC3D;AAAA,QACC,IAAI,GAAG,QAAQ,QAAQ,SAAS,GAAG,GAAG,QAAQ,MAAM,KAAK,QAAQ,IAAI,CAAC;AAAA,MACxE;AAAA,IACJ,SAAS,KAAK;AACZ,WAAK,OAAO,MAAM,0BAA2B,IAAc,OAAO,EAAE;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAc,gBAA+B;AAC3C,QAAI,KAAK,SAAS,SAAS,EAAG;AAC9B,UAAM,UAAU,IAAI;AAAA,MAAc,CAAC,YACjC,WAAW,SAAS,KAAK,iBAAiB;AAAA,IAC5C;AACA,UAAM,QAAQ,KAAK;AAAA,MACjB,QAAQ,WAAW,CAAC,GAAG,KAAK,QAAQ,CAAC,EAAE,KAAK,MAAM,MAAS;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iBAAgC;AACpC,QAAI,KAAK,aAAc;AACvB,QAAI,KAAK,SAAS,QAAQ,KAAK,QAAQ,YAAa;AAEpD,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,KAAK,UAAU,KAAK,QAAQ,IAAI;AAAA,IAClD,SAAS,KAAK;AACZ,WAAK,OAAO,MAAM,qBAAsB,IAAc,OAAO,EAAE;AAC/D;AAAA,IACF;AACA,QAAI,CAAC,QAAS;AAEd,UAAM,MAAM;AACZ,UAAM,UAAU,KAAK,WAAW,GAAG,EAAE,MAAM,CAAC,QAAQ;AAClD,WAAK,OAAO;AAAA,QACV,cAAc,IAAI,EAAE,gBAAiB,IAAc,OAAO;AAAA,MAC5D;AAAA,IACF,CAAC;AACD,SAAK,SAAS,IAAI,OAAO;AACzB,YAAQ,QAAQ,MAAM;AACpB,WAAK,SAAS,OAAO,OAAO;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,UAAU,MAAyC;AACvD,WAAO,KAAK,GAAG,YAAY,OAAO,OAAO;AACvC,YAAM,aAAa,MAAM,GACtB,OAAO,EAAE,IAAI,QAAQ,GAAG,CAAC,EACzB,KAAK,OAAO,EACZ;AAAA,QACC;AAAA,UACE,GAAG,QAAQ,QAAQ,SAAS;AAAA,UAC5B,GAAG,QAAQ,MAAM,IAAI;AAAA,UACrB,IAAI,QAAQ,OAAO,oBAAI,KAAK,CAAC;AAAA,QAC/B;AAAA,MACF,EACC,QAAQ,KAAK,QAAQ,QAAQ,GAAG,IAAI,QAAQ,KAAK,CAAC,EAClD,MAAM,CAAC,EACP,IAAI,UAAU,EAAE,YAAY,KAAK,CAAC;AACrC,YAAM,YAAY,WAAW,CAAC;AAC9B,UAAI,CAAC,UAAW,QAAO;AAEvB,YAAM,CAAC,OAAO,IAAI,MAAM,GACrB,OAAO,OAAO,EACd,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,QACpB,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC,EACA,MAAM,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC,EAClC,UAAU;AACb,aAAQ,WAAW;AAAA,IACrB,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,MAAM,mBAAkC;AACtC,QAAI,KAAK,aAAc;AACvB,QAAI;AACF,YAAM,KAAK,GAAG,YAAY,OAAO,OAAO;AACtC,cAAM,YAAY,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,gBAAgB;AAC7D,cAAM,QAAQ,MAAM,GACjB,OAAO,EAAE,IAAI,QAAQ,GAAG,CAAC,EACzB,KAAK,OAAO,EACZ;AAAA,UACC,IAAI,GAAG,QAAQ,QAAQ,SAAS,GAAG,GAAG,QAAQ,WAAW,SAAS,CAAC;AAAA,QACrE,EACC,IAAI,UAAU,EAAE,YAAY,KAAK,CAAC;AACrC,YAAI,MAAM,WAAW,EAAG;AACxB,cAAM,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;AACjC,cAAM,GACH,OAAO,OAAO,EACd,IAAI,EAAE,QAAQ,WAAW,WAAW,MAAM,WAAW,KAAK,CAAC,EAC3D,MAAM,QAAQ,QAAQ,IAAI,GAAG,CAAC;AACjC,mBAAW,MAAM,KAAK;AACpB,eAAK,OAAO,KAAK,gCAAgC,EAAE,EAAE;AAAA,QACvD;AAAA,MACF,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,WAAK,OAAO,MAAM,4BAA6B,IAAc,OAAO,EAAE;AAAA,IACxE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,WAAW,SAAmC;AAC1D,UAAM,gBAAgB,qBAAqB,IAAI,QAAQ,OAAO;AAG9D,QAAI,CAAC,eAAe;AAClB,WAAK,OAAO;AAAA,QACV,sCAAsC,QAAQ,OAAO,UAAU,QAAQ,EAAE;AAAA,MAC3E;AACA,YAAM,KAAK;AAAA,QACT;AAAA,QACA,IAAI,MAAM,sCAAsC,QAAQ,OAAO,GAAG;AAAA;AAAA,SAC/C,QAAQ,YAAY,KAAK;AAAA,MAC9C;AACA;AAAA,IACF;AAIA,QAAI,QAAQ,gBAAgB;AAC1B,YAAM,WAAW,MAAM,KAAK,GACzB,OAAO,EAAE,IAAI,QAAQ,GAAG,CAAC,EACzB,KAAK,OAAO,EACZ;AAAA,QACC;AAAA,UACE,GAAG,QAAQ,gBAAgB,QAAQ,cAAc;AAAA,UACjD,GAAG,QAAQ,QAAQ,SAAS;AAAA,QAC9B;AAAA,MACF;AACF,YAAM,QAAQ,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,EAAE;AACtD,UAAI,OAAO;AACT,cAAM,KAAK,GACR,OAAO,OAAO,EACd,IAAI;AAAA,UACH,QAAQ;AAAA,UACR,WAAW;AAAA,UACX,WAAW;AAAA,UACX,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAC,EACA,MAAM,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;AACnC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAO,cAAc;AAC3B,UAAM,eAAe,cAAc;AAcnC,UAAM,UAAU,KAAK,UAAU;AAAA,MAC7B;AAAA,MACA,EAAE,QAAQ,MAAM;AAAA,IAClB;AACA,UAAM,MAA2B;AAAA,MAC/B,OAAO,QAAQ;AAAA,MACf,KAAK;AAAA,MACL,MAAM,KAAK,WAAW,OAAO;AAAA,MAC7B,YAAY,KAAK,YAAY,OAAO;AAAA,MACpC,QAAQ,IAAI,OAAO,UAAU,QAAQ,EAAE,EAAE;AAAA,IAC3C;AAEA,UAAM,iBAAiB,QAAQ,YAAY;AAC3C,QAAI;AAEF,YAAM,SAAU,MAAM,QAAQ,IAAI,GAAG;AAErC,YAAM,KAAK,GACR,OAAO,OAAO,EACd,IAAI;AAAA,QACH,QAAQ;AAAA,QACR,QAAS,UAAU,CAAC;AAAA,QACpB,YAAY,oBAAI,KAAK;AAAA,QACrB,WAAW,oBAAI,KAAK;AAAA,QACpB,UAAU,iBAAiB;AAAA,MAC7B,CAAC,EACA,MAAM,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;AAAA,IACrC,SAAS,KAAK;AAEZ,YAAM,SAAS,KAAK;AACpB,YAAM,WAAW,cAAc,KAAK,QAAQ,cAAc;AAC1D,YAAM,eAAe,iBAAiB;AACtC,UAAI,aAAa,WAAW,QAAQ;AAClC,cAAM,QAAQ,eAAe,QAAQ,YAAY;AACjD,cAAM,KAAK,GACR,OAAO,OAAO,EACd,IAAI;AAAA,UACH,QAAQ;AAAA,UACR,UAAU;AAAA,UACV,OAAO,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK;AAAA,UAClC,WAAW;AAAA,UACX,WAAW;AAAA,UACX,OAAO,eAAe,KAAK,cAAc,IAAI;AAAA,UAC7C,WAAW,oBAAI,KAAK;AAAA,QACtB,CAAC,EACA,MAAM,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;AAAA,MACrC,OAAO;AACL,cAAM,KAAK,WAAW,SAAS,KAAK,YAAY;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,WACZ,SACA,KACA,eACe;AACf,UAAM,KAAK,GACR,OAAO,OAAO,EACd,IAAI;AAAA,MACH,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,YAAY,oBAAI,KAAK;AAAA,MACrB,OAAO,eAAe,KAAK,eAAe,KAAK;AAAA,MAC/C,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC,EACA,MAAM,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC;AAInC,QAAI,QAAQ,sBAAsB,aAAa;AAC7C,UAAI;AAKF,cAAM,KAAK,aAAa,OAAO,QAAQ,IAAI;AAAA,UACzC,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,UAAU,QAAQ;AAAA,QACpB,CAAC;AAAA,MACH,SAAS,YAAY;AAEnB,aAAK,OAAO;AAAA,UACV,yBAAyB,QAAQ,EAAE,KAAM,WAAqB,OAAO;AAAA,QACvE;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMQ,WAAW,KAAgB;AACjC,WAAO,OACL,QACA,IACA,UACqB;AACrB,WAAK;AACL,YAAM,WAAW,MAAM,KAAK,YAAY,SAAS,IAAI,IAAI,MAAM;AAC/D,UAAI,UAAU,WAAW,aAAa;AACpC,eAAO,SAAS;AAAA,MAClB;AAEA,YAAM,MAAM,MAAM,KAAK,YAAY,IAAI,EAAE;AACzC,YAAM,YAAY,oBAAI,KAAK;AAC3B,YAAM,gBAAgB,UAAU,YAAY,KAAK;AACjD,YAAM,KAAK,YAAY,WAAW;AAAA,QAChC,UAAU,IAAI;AAAA,QACd;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AACD,UAAI;AACF,cAAM,SAAS,MAAM,GAAG;AACxB,cAAM,KAAK,YAAY,WAAW;AAAA,UAChC,UAAU,IAAI;AAAA,UACd;AAAA,UACA,MAAM;AAAA,UACN;AAAA,UACA,QAAQ;AAAA,UACR;AAAA,UACA,YAAY,oBAAI,KAAK;AAAA,UACrB,UAAU;AAAA,QACZ,CAAC;AACD,eAAO;AAAA,MACT,SAAS,KAAK;AACZ,cAAM,KAAK,YAAY,WAAW;AAAA,UAChC,UAAU,IAAI;AAAA,UACd;AAAA,UACA,MAAM;AAAA,UACN;AAAA,UACA,QAAQ;AAAA,UACR,OAAO,eAAe,KAAK,cAAc,KAAK;AAAA,UAC9C,YAAY,oBAAI,KAAK;AAAA,UACrB,UAAU;AAAA,QACZ,CAAC;AACD,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,YAAY,KAAgB;AAClC,WAAO,OACL,MACA,OACA,SACoB;AACpB,aAAO,KAAK,aAAa,MAAM,MAAM,OAAO;AAAA,QAC1C,aAAa,IAAI;AAAA,QACjB,mBAAmB,MAAM;AAAA,QACzB,OAAO,MAAM;AAAA,QACb,UAAU,MAAM;AAAA,QAChB,MAAM,MAAM;AAAA,QACZ,eAAe;AAAA,QACf,YAAY,IAAI;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,YAAY,OAAgC;AACxD,UAAM,SAAS,MAAM,KAAK,GAAG;AAAA,MAC3B,gFAAgF,KAAK;AAAA,IACvF;AASA,UAAM,MAAM;AACZ,UAAM,OAAkC,MAAM,QAAQ,GAAG,IACrD,MACA,MAAM,QAAQ,KAAK,IAAI,IACrB,IAAI,OACJ,CAAC;AACP,UAAM,OAAO,KAAK,CAAC,GAAG;AACtB,WAAO,OAAO,SAAS,cAAc,IAAI,OAAO,IAAI;AAAA,EACtD;AAAA;AAAA;AAAA;AAKF;AAhiBa,YAAN;AAAA,EADN,WAAW;AAAA,EAyBP,0BAAO,OAAO;AAAA,EACd,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,eAAe;AAAA,EACtB,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,kBAAkB;AAAA,GA5BjB;","names":[]}

package/dist/{chunk-Z7PQCAVK.js → chunk-LQ6PYFU6.js}

@@ -1,11 +1,11 @@
+import {
+  EVENTS_MODULE_OPTIONS
+} from "./chunk-H5NH7KPE.js";
 import {
   clampEventLimit,
   decodeEventCursor,
   encodeEventCursor
 } from "./chunk-UQ5EHOH2.js";
-import {
-  EVENTS_MODULE_OPTIONS
-} from "./chunk-H5NH7KPE.js";
 import {
   __decorateClass,
   __decorateParam
@@ -197,4 +197,4 @@ MemoryEventBus = __decorateClass([
 export {
   MemoryEventBus
 };
-//# sourceMappingURL=chunk-Z7PQCAVK.js.map
+//# sourceMappingURL=chunk-LQ6PYFU6.js.map

package/dist/chunk-MYQIQ27N.js

@@ -0,0 +1,118 @@
+// runtime/subsystems/jobs/pg-notify.ts
+import { Logger } from "@nestjs/common";
+import { sql } from "drizzle-orm";
+var JOBS_WAKE_CHANNEL = "codegen_jobs_wake";
+var EVENTS_WAKE_CHANNEL = "codegen_events_wake";
+async function pgNotify(tx, channel, payload) {
+  const client = tx;
+  await client.execute(sql`select pg_notify(${channel}, ${payload})`);
+}
+var DEFAULT_BACKOFF_MIN_MS = 100;
+var DEFAULT_BACKOFF_MAX_MS = 5e3;
+var PgNotifyListener = class {
+  constructor(opts) {
+    this.opts = opts;
+    this.logger = new Logger(`PgNotifyListener(${opts.label})`);
+    this.backoffMinMs = opts.backoffMinMs ?? DEFAULT_BACKOFF_MIN_MS;
+    this.backoffMaxMs = opts.backoffMaxMs ?? DEFAULT_BACKOFF_MAX_MS;
+    this.backoffMs = this.backoffMinMs;
+  }
+  opts;
+  logger;
+  client = null;
+  stopped = false;
+  reconnectTimer = null;
+  backoffMs;
+  backoffMinMs;
+  backoffMaxMs;
+  /** WARN-once gate so a flapping listener doesn't spam the log. */
+  warnedDown = false;
+  /** Begin listening. Idempotent-ish: a second call while connected is a no-op. */
+  async start() {
+    this.stopped = false;
+    await this.connect();
+  }
+  /** Stop listening + release the connection. Safe to call repeatedly. */
+  async stop() {
+    this.stopped = true;
+    if (this.reconnectTimer) {
+      clearTimeout(this.reconnectTimer);
+      this.reconnectTimer = null;
+    }
+    await this.releaseClient();
+  }
+  async connect() {
+    if (this.stopped) return;
+    try {
+      const client = await this.opts.pool.connect();
+      client.on("notification", (msg) => {
+        if (msg.channel !== this.opts.channel) return;
+        try {
+          this.opts.onNotify(msg.payload ?? "");
+        } catch (err) {
+          this.logger.error(`onNotify threw: ${err.message}`);
+        }
+      });
+      client.on("error", (err) => {
+        this.logger.debug?.(`listener connection error: ${err.message}`);
+        this.handleDrop();
+      });
+      await client.query(`LISTEN ${this.opts.channel}`);
+      this.client = client;
+      if (this.warnedDown) {
+        this.logger.log(
+          `listener reconnected; LISTEN ${this.opts.channel} re-established`
+        );
+        this.warnedDown = false;
+      }
+      this.backoffMs = this.backoffMinMs;
+    } catch (err) {
+      this.handleConnectFailure(err);
+    }
+  }
+  /** Connection dropped after being established → reconnect. */
+  handleDrop() {
+    if (this.stopped) return;
+    void this.releaseClient().finally(() => this.scheduleReconnect());
+  }
+  /** Initial / reconnect `connect()` threw. */
+  handleConnectFailure(err) {
+    this.scheduleReconnect(err);
+  }
+  scheduleReconnect(err) {
+    if (this.stopped) return;
+    if (!this.warnedDown) {
+      this.warnedDown = true;
+      this.logger.warn(
+        `listener down \u2014 falling back to interval polling until reconnect. Cause: ${err instanceof Error ? err.message : "connection lost"}. (This degrades latency, not durability \u2014 polling still drives all work.)`
+      );
+    }
+    if (this.reconnectTimer) clearTimeout(this.reconnectTimer);
+    const delay = this.backoffMs;
+    this.backoffMs = Math.min(this.backoffMs * 2, this.backoffMaxMs);
+    this.reconnectTimer = setTimeout(() => {
+      this.reconnectTimer = null;
+      void this.connect();
+    }, delay);
+  }
+  async releaseClient() {
+    const client = this.client;
+    this.client = null;
+    if (!client) return;
+    try {
+      client.removeAllListeners?.("notification");
+      client.removeAllListeners?.("error");
+      if (client.release) client.release(true);
+      else if (client.end) await client.end();
+    } catch {
+    }
+  }
+};
+
+export {
+  JOBS_WAKE_CHANNEL,
+  EVENTS_WAKE_CHANNEL,
+  pgNotify,
+  PgNotifyListener
+};
+//# sourceMappingURL=chunk-MYQIQ27N.js.map

package/dist/chunk-MYQIQ27N.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/jobs/pg-notify.ts"],"sourcesContent":["/**\n * PgNotifyListener + pgNotify — Postgres LISTEN/NOTIFY wakeups\n * (LISTEN-NOTIFY-1, dogfood gap #7).\n *\n * The drizzle jobs worker and events outbox drainer poll on an interval today\n * (default 1 s/hop). With `listen_notify` enabled, a row write that makes work\n * claimable emits an in-transaction `pg_notify(...)`; a dedicated listener\n * connection wakes the polling loop the moment the writing transaction commits.\n *\n * Two halves:\n *   - `pgNotify(tx, channel, payload)` — fire an in-tx `pg_notify`. MUST be\n *     called with the SAME transaction handle as the row write it announces, so\n *     Postgres delivers it only on commit (the transactional-outbox guarantee).\n *   - `PgNotifyListener` — owns a single long-lived `pg.PoolClient`, issues\n *     `LISTEN <channel>`, forwards each notification's payload to an owner\n *     callback, debounces bursts, and reconnects with capped backoff on drop.\n *\n * **Polling never stops.** This is a wake-early optimisation layered ON TOP of\n * interval polling. A lost notification (listener down, pooler eats the LISTEN,\n * etc.) degrades to today's poll latency, never to lost work — the claim/drain\n * query remains the source of truth.\n *\n * **PgBouncer caveat:** session-scoped `LISTEN` does not survive a\n * transaction-mode pooler. `listen_notify` requires a direct (or session-mode)\n * connection; behind a transaction pooler notifies are simply never received and\n * the system degrades to polling. See the jobs config block / skill.\n */\n// TODO(logging-subsystem): swap to ILogger once ADR-028 lands\nimport { Logger } from '@nestjs/common';\nimport { sql } from 'drizzle-orm';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport type { DrizzleTransaction } from '../events/event-bus.protocol';\n\n/** Channel the jobs worker LISTENs on; payload = pool name. */\nexport const JOBS_WAKE_CHANNEL = 'codegen_jobs_wake';\n/** Channel the events drainer LISTENs on; payload = event pool (or ''). */\nexport const EVENTS_WAKE_CHANNEL = 'codegen_events_wake';\n\n/**\n * Emit an in-transaction `pg_notify`. Call with the SAME `tx`/client handle as\n * the row write being announced so delivery is gated on commit. `payload` is a\n * short plain string (a pool name); it is NOT JSON — the wake is a hint and the\n * subsequent claim/drain query is authoritative. Channel names are framework\n * constants (never user input), so the `set_config`-free literal-channel form is\n * safe; the payload is bound as a parameter.\n */\nexport async function pgNotify(\n  tx: DrizzleClient | DrizzleTransaction,\n  channel: string,\n  payload: string,\n): Promise<void> {\n  const client = tx as DrizzleClient;\n  // `pg_notify(channel, payload)` is the function form (vs the `NOTIFY chan,\n  // 'payload'` statement form) precisely because it accepts bound parameters —\n  // the payload is parameterised, never string-concatenated.\n  await client.execute(sql`select pg_notify(${channel}, ${payload})`);\n}\n\n/** Minimal structural view of the `pg` Client/PoolClient surface we touch. */\ninterface PgListenClient {\n  query(text: string): Promise<unknown>;\n  on(event: 'notification', cb: (msg: { channel: string; payload?: string }) => void): void;\n  on(event: 'error', cb: (err: Error) => void): void;\n  removeAllListeners?: (event?: string) => void;\n  release?: (err?: boolean) => void;\n  end?: () => Promise<void>;\n}\n\n/** Minimal structural view of the `pg` Pool's `connect()`. */\ninterface PgPoolish {\n  connect(): Promise<PgListenClient>;\n}\n\nconst DEFAULT_BACKOFF_MIN_MS = 100;\nconst DEFAULT_BACKOFF_MAX_MS = 5_000;\n\nexport interface PgNotifyListenerOptions {\n  /** Channel to LISTEN on. */\n  channel: string;\n  /**\n   * The underlying `pg.Pool` — obtained from `drizzleClient.$client`. A\n   * dedicated `PoolClient` is checked out and held for the listener's lifetime\n   * (separate from the query pool so a slow query never delays a wake).\n   */\n  pool: PgPoolish;\n  /**\n   * Called for every notification on `channel`, with the raw payload string\n   * (`''` when Postgres delivers an empty payload). The owner decides whether\n   * the payload is relevant (e.g. \"is this one of my pools?\") and debounces its\n   * own claim cycle.\n   */\n  onNotify: (payload: string) => void;\n  /** Label used in log lines (e.g. 'jobs:interactive', 'events'). */\n  label: string;\n  backoffMinMs?: number;\n  backoffMaxMs?: number;\n}\n\n/**\n * Holds a dedicated listener connection and forwards notifications to `onNotify`.\n * Reconnects with capped exponential backoff on drop; logs the first failure +\n * the recovery exactly once each so a flapping connection doesn't flood logs.\n */\nexport class PgNotifyListener {\n  private readonly logger: Logger;\n  private client: PgListenClient | null = null;\n  private stopped = false;\n  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;\n  private backoffMs: number;\n  private readonly backoffMinMs: number;\n  private readonly backoffMaxMs: number;\n  /** WARN-once gate so a flapping listener doesn't spam the log. */\n  private warnedDown = false;\n\n  constructor(private readonly opts: PgNotifyListenerOptions) {\n    this.logger = new Logger(`PgNotifyListener(${opts.label})`);\n    this.backoffMinMs = opts.backoffMinMs ?? DEFAULT_BACKOFF_MIN_MS;\n    this.backoffMaxMs = opts.backoffMaxMs ?? DEFAULT_BACKOFF_MAX_MS;\n    this.backoffMs = this.backoffMinMs;\n  }\n\n  /** Begin listening. Idempotent-ish: a second call while connected is a no-op. */\n  async start(): Promise<void> {\n    this.stopped = false;\n    await this.connect();\n  }\n\n  /** Stop listening + release the connection. Safe to call repeatedly. */\n  async stop(): Promise<void> {\n    this.stopped = true;\n    if (this.reconnectTimer) {\n      clearTimeout(this.reconnectTimer);\n      this.reconnectTimer = null;\n    }\n    await this.releaseClient();\n  }\n\n  private async connect(): Promise<void> {\n    if (this.stopped) return;\n    try {\n      const client = await this.opts.pool.connect();\n      client.on('notification', (msg) => {\n        if (msg.channel !== this.opts.channel) return;\n        try {\n          this.opts.onNotify(msg.payload ?? '');\n        } catch (err) {\n          this.logger.error(`onNotify threw: ${(err as Error).message}`);\n        }\n      });\n      client.on('error', (err) => {\n        // A connection-level error is the signal to reconnect. Don't double-log\n        // here — scheduleReconnect owns the WARN-once.\n        this.logger.debug?.(`listener connection error: ${err.message}`);\n        this.handleDrop();\n      });\n      await client.query(`LISTEN ${this.opts.channel}`);\n      this.client = client;\n      // Recovery: only announce if we had previously warned about being down.\n      if (this.warnedDown) {\n        this.logger.log(\n          `listener reconnected; LISTEN ${this.opts.channel} re-established`,\n        );\n        this.warnedDown = false;\n      }\n      this.backoffMs = this.backoffMinMs;\n    } catch (err) {\n      this.handleConnectFailure(err);\n    }\n  }\n\n  /** Connection dropped after being established → reconnect. */\n  private handleDrop(): void {\n    if (this.stopped) return;\n    void this.releaseClient().finally(() => this.scheduleReconnect());\n  }\n\n  /** Initial / reconnect `connect()` threw. */\n  private handleConnectFailure(err: unknown): void {\n    this.scheduleReconnect(err);\n  }\n\n  private scheduleReconnect(err?: unknown): void {\n    if (this.stopped) return;\n    if (!this.warnedDown) {\n      this.warnedDown = true;\n      this.logger.warn(\n        `listener down — falling back to interval polling until reconnect. ` +\n          `Cause: ${err instanceof Error ? err.message : 'connection lost'}. ` +\n          `(This degrades latency, not durability — polling still drives all work.)`,\n      );\n    }\n    if (this.reconnectTimer) clearTimeout(this.reconnectTimer);\n    const delay = this.backoffMs;\n    this.backoffMs = Math.min(this.backoffMs * 2, this.backoffMaxMs);\n    this.reconnectTimer = setTimeout(() => {\n      this.reconnectTimer = null;\n      void this.connect();\n    }, delay);\n  }\n\n  private async releaseClient(): Promise<void> {\n    const client = this.client;\n    this.client = null;\n    if (!client) return;\n    try {\n      client.removeAllListeners?.('notification');\n      client.removeAllListeners?.('error');\n      // A listener client is a checked-out pool connection; release it back\n      // with `release(true)` (destroy) so a half-broken socket isn't reused.\n      if (client.release) client.release(true);\n      else if (client.end) await client.end();\n    } catch {\n      // best-effort teardown\n    }\n  }\n}\n"],"mappings":";AA4BA,SAAS,cAAc;AACvB,SAAS,WAAW;AAKb,IAAM,oBAAoB;AAE1B,IAAM,sBAAsB;AAUnC,eAAsB,SACpB,IACA,SACA,SACe;AACf,QAAM,SAAS;AAIf,QAAM,OAAO,QAAQ,uBAAuB,OAAO,KAAK,OAAO,GAAG;AACpE;AAiBA,IAAM,yBAAyB;AAC/B,IAAM,yBAAyB;AA6BxB,IAAM,mBAAN,MAAuB;AAAA,EAW5B,YAA6B,MAA+B;AAA/B;AAC3B,SAAK,SAAS,IAAI,OAAO,oBAAoB,KAAK,KAAK,GAAG;AAC1D,SAAK,eAAe,KAAK,gBAAgB;AACzC,SAAK,eAAe,KAAK,gBAAgB;AACzC,SAAK,YAAY,KAAK;AAAA,EACxB;AAAA,EAL6B;AAAA,EAVZ;AAAA,EACT,SAAgC;AAAA,EAChC,UAAU;AAAA,EACV,iBAAuD;AAAA,EACvD;AAAA,EACS;AAAA,EACA;AAAA;AAAA,EAET,aAAa;AAAA;AAAA,EAUrB,MAAM,QAAuB;AAC3B,SAAK,UAAU;AACf,UAAM,KAAK,QAAQ;AAAA,EACrB;AAAA;AAAA,EAGA,MAAM,OAAsB;AAC1B,SAAK,UAAU;AACf,QAAI,KAAK,gBAAgB;AACvB,mBAAa,KAAK,cAAc;AAChC,WAAK,iBAAiB;AAAA,IACxB;AACA,UAAM,KAAK,cAAc;AAAA,EAC3B;AAAA,EAEA,MAAc,UAAyB;AACrC,QAAI,KAAK,QAAS;AAClB,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,KAAK,KAAK,QAAQ;AAC5C,aAAO,GAAG,gBAAgB,CAAC,QAAQ;AACjC,YAAI,IAAI,YAAY,KAAK,KAAK,QAAS;AACvC,YAAI;AACF,eAAK,KAAK,SAAS,IAAI,WAAW,EAAE;AAAA,QACtC,SAAS,KAAK;AACZ,eAAK,OAAO,MAAM,mBAAoB,IAAc,OAAO,EAAE;AAAA,QAC/D;AAAA,MACF,CAAC;AACD,aAAO,GAAG,SAAS,CAAC,QAAQ;AAG1B,aAAK,OAAO,QAAQ,8BAA8B,IAAI,OAAO,EAAE;AAC/D,aAAK,WAAW;AAAA,MAClB,CAAC;AACD,YAAM,OAAO,MAAM,UAAU,KAAK,KAAK,OAAO,EAAE;AAChD,WAAK,SAAS;AAEd,UAAI,KAAK,YAAY;AACnB,aAAK,OAAO;AAAA,UACV,gCAAgC,KAAK,KAAK,OAAO;AAAA,QACnD;AACA,aAAK,aAAa;AAAA,MACpB;AACA,WAAK,YAAY,KAAK;AAAA,IACxB,SAAS,KAAK;AACZ,WAAK,qBAAqB,GAAG;AAAA,IAC/B;AAAA,EACF;AAAA;AAAA,EAGQ,aAAmB;AACzB,QAAI,KAAK,QAAS;AAClB,SAAK,KAAK,cAAc,EAAE,QAAQ,MAAM,KAAK,kBAAkB,CAAC;AAAA,EAClE;AAAA;AAAA,EAGQ,qBAAqB,KAAoB;AAC/C,SAAK,kBAAkB,GAAG;AAAA,EAC5B;AAAA,EAEQ,kBAAkB,KAAqB;AAC7C,QAAI,KAAK,QAAS;AAClB,QAAI,CAAC,KAAK,YAAY;AACpB,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,QACV,iFACY,eAAe,QAAQ,IAAI,UAAU,iBAAiB;AAAA,MAEpE;AAAA,IACF;AACA,QAAI,KAAK,eAAgB,cAAa,KAAK,cAAc;AACzD,UAAM,QAAQ,KAAK;AACnB,SAAK,YAAY,KAAK,IAAI,KAAK,YAAY,GAAG,KAAK,YAAY;AAC/D,SAAK,iBAAiB,WAAW,MAAM;AACrC,WAAK,iBAAiB;AACtB,WAAK,KAAK,QAAQ;AAAA,IACpB,GAAG,KAAK;AAAA,EACV;AAAA,EAEA,MAAc,gBAA+B;AAC3C,UAAM,SAAS,KAAK;AACpB,SAAK,SAAS;AACd,QAAI,CAAC,OAAQ;AACb,QAAI;AACF,aAAO,qBAAqB,cAAc;AAC1C,aAAO,qBAAqB,OAAO;AAGnC,UAAI,OAAO,QAAS,QAAO,QAAQ,IAAI;AAAA,eAC9B,OAAO,IAAK,OAAM,OAAO,IAAI;AAAA,IACxC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;","names":[]}

package/dist/{chunk-YTN6BKWA.js → chunk-NXNVTXKG.js}

@@ -7,15 +7,15 @@ import {
 } from "./chunk-CO6LUM72.js";
 import {
   JOB_ORCHESTRATOR
-} from "./chunk-BIO6F7YI.js";
-import {
-  EVENT_BUS
-} from "./chunk-H5NH7KPE.js";
+} from "./chunk-ZPL74UQN.js";
 import {
   BRIDGE_DELIVERY_REPO,
   BRIDGE_MULTI_TENANT,
   BRIDGE_REGISTRY
 } from "./chunk-4LH67P4U.js";
+import {
+  EVENT_BUS
+} from "./chunk-H5NH7KPE.js";
 import {
   __decorateClass,
   __decorateParam
@@ -118,4 +118,4 @@ export {
   BRIDGE_DELIVERY_JOB_TYPE,
   BridgeDeliveryHandler
 };
-//# sourceMappingURL=chunk-YTN6BKWA.js.map
+//# sourceMappingURL=chunk-NXNVTXKG.js.map

package/dist/{chunk-RDVTWIYY.js → chunk-QSJ3J4HE.js}

@@ -7,13 +7,13 @@ import {
 import {
   MemoryJobStore
 } from "./chunk-SNQ3TOWP.js";
-import {
-  MissingTenantIdError
-} from "./chunk-T4BIIU5E.js";
 import {
   JOBS_MULTI_TENANT,
   JOB_ORCHESTRATOR
-} from "./chunk-BIO6F7YI.js";
+} from "./chunk-ZPL74UQN.js";
+import {
+  MissingTenantIdError
+} from "./chunk-T4BIIU5E.js";
 import {
   __decorateClass,
   __decorateParam
@@ -209,4 +209,4 @@ function compareBy(a, b, order) {
 export {
   MemoryJobRunService
 };
-//# sourceMappingURL=chunk-RDVTWIYY.js.map
+//# sourceMappingURL=chunk-QSJ3J4HE.js.map

package/dist/{chunk-4MVGAMUA.js → chunk-RUSUZZAF.js}

@@ -1,12 +1,12 @@
-import {
-  LocalStorageBackend
-} from "./chunk-JWNHNUYL.js";
 import {
   MemoryStorageBackend
 } from "./chunk-3SZFUTXE.js";
 import {
   STORAGE
 } from "./chunk-NYBCQZC7.js";
+import {
+  LocalStorageBackend
+} from "./chunk-JWNHNUYL.js";
 import {
   __decorateClass
 } from "./chunk-2E224ZSN.js";
@@ -37,4 +37,4 @@ StorageModule = __decorateClass([
 export {
   StorageModule
 };
-//# sourceMappingURL=chunk-4MVGAMUA.js.map
+//# sourceMappingURL=chunk-RUSUZZAF.js.map

package/dist/{chunk-4RFHUZXU.js → chunk-T4YJRD22.js}

@@ -4,6 +4,9 @@ import {
 import {
   MemoryJobStore
 } from "./chunk-SNQ3TOWP.js";
+import {
+  JOBS_MULTI_TENANT
+} from "./chunk-ZPL74UQN.js";
 import {
   JobCollisionError,
   JobNotReplayableError,
@@ -11,9 +14,6 @@ import {
   JobTypeNotFoundError,
   MissingTenantIdError
 } from "./chunk-T4BIIU5E.js";
-import {
-  JOBS_MULTI_TENANT
-} from "./chunk-BIO6F7YI.js";
 import {
   __decorateClass,
   __decorateParam
@@ -632,4 +632,4 @@ function serialiseError(err, attempt, retryable) {
 export {
   MemoryJobOrchestrator
 };
-//# sourceMappingURL=chunk-4RFHUZXU.js.map
+//# sourceMappingURL=chunk-T4YJRD22.js.map

package/dist/{chunk-7YGORYZD.js → chunk-T6C4LFLC.js}

@@ -1,9 +1,9 @@
-import {
-  CACHE_DEFAULT_TTL
-} from "./chunk-L6FTY45T.js";
 import {
   cacheEntries
 } from "./chunk-FASRXRX5.js";
+import {
+  CACHE_DEFAULT_TTL
+} from "./chunk-L6FTY45T.js";
 import {
   DRIZZLE
 } from "./chunk-U64T4YZE.js";
@@ -109,4 +109,4 @@ DrizzleCacheService = __decorateClass([
 export {
   DrizzleCacheService
 };
-//# sourceMappingURL=chunk-7YGORYZD.js.map
+//# sourceMappingURL=chunk-T6C4LFLC.js.map

package/dist/{chunk-OGIZXGPY.js → chunk-TDEHU73T.js}

@@ -1,6 +1,3 @@
-import {
-  assertTenantId
-} from "./chunk-MZ6GV4YF.js";
 import {
   INTEGRATION_CHANGE_SOURCE,
   INTEGRATION_CURSOR_STORE,
@@ -9,6 +6,9 @@ import {
   INTEGRATION_RUN_RECORDER,
   INTEGRATION_SINK
 } from "./chunk-S7C6TIIF.js";
+import {
+  assertTenantId
+} from "./chunk-MZ6GV4YF.js";
 import {
   __decorateClass,
   __decorateParam
@@ -219,4 +219,4 @@ ExecuteIntegrationUseCase = __decorateClass([
 export {
   ExecuteIntegrationUseCase
 };
-//# sourceMappingURL=chunk-OGIZXGPY.js.map
+//# sourceMappingURL=chunk-TDEHU73T.js.map

package/dist/{chunk-YLPAPPLW.js → chunk-TIZXQU26.js}

@@ -3,6 +3,11 @@ var WebhookChangeSource = class {
   label;
   queue;
   externalIdSourceField;
+  /**
+   * Record field carrying the event id, when `webhook.eventIdField` is
+   * configured. Used only as the fallback when the queue iterator does NOT
+   * yield an `eventId` — see {@link WebhookFetchCallback} for the precedence.
+   */
   eventIdSourceField;
   composed;
   constructor(opts) {
@@ -39,19 +44,18 @@ var WebhookChangeSource = class {
       subscription,
       cursor
     };
-    for await (const { record, cursor: nextCursor } of this.queue(ctx)) {
+    for await (const {
+      record,
+      eventId: yieldedEventId,
+      cursor: nextCursor
+    } of this.queue(ctx)) {
       const externalIdRaw = record[this.externalIdSourceField];
       if (typeof externalIdRaw !== "string" || externalIdRaw.length === 0) {
         throw new Error(
           `WebhookChangeSource: record missing string '${this.externalIdSourceField}' \u2014 emitted records MUST carry the canonical external id keyed by the mapping source`
         );
       }
-      const eventIdRaw = record[this.eventIdSourceField];
-      if (typeof eventIdRaw !== "string" || eventIdRaw.length === 0) {
-        throw new Error(
-          `WebhookChangeSource: record missing string '${this.eventIdSourceField}' \u2014 webhook records MUST carry the event id (DetectionConfig.webhook.eventIdField) so Change<T>.dedupKey can be populated`
-        );
-      }
+      const dedupKey = this.deriveDedupKey(yieldedEventId, record);
       const change = {
         externalId: externalIdRaw,
         // Webhook mode cannot distinguish create vs. update vs. delete on
@@ -62,14 +66,37 @@ var WebhookChangeSource = class {
         record,
         cursor: nextCursor ?? null,
         source: "webhook",
-        dedupKey: eventIdRaw
+        dedupKey
       };
       yield change;
     }
   }
+  /**
+   * Resolve `Change<T>.dedupKey` with the precedence: yielded `eventId` >
+   * `webhook.eventIdField` record extraction > `undefined`. A non-empty
+   * yielded `eventId` always wins; otherwise the configured field is read off
+   * the record (and must be a non-empty string when the field is configured);
+   * with neither, `dedupKey` is `undefined` (the orchestrator then has no
+   * delivery-level dedup signal for this change).
+   */
+  deriveDedupKey(yieldedEventId, record) {
+    if (yieldedEventId !== void 0 && yieldedEventId.length > 0) {
+      return yieldedEventId;
+    }
+    if (this.eventIdSourceField === void 0) {
+      return void 0;
+    }
+    const eventIdRaw = record[this.eventIdSourceField];
+    if (typeof eventIdRaw !== "string" || eventIdRaw.length === 0) {
+      throw new Error(
+        `WebhookChangeSource: record missing string '${this.eventIdSourceField}' \u2014 a webhook record MUST carry the event id (DetectionConfig.webhook.eventIdField) so Change<T>.dedupKey can be populated, unless the queue iterator yields an 'eventId' alongside the record`
+      );
+    }
+    return eventIdRaw;
+  }
 };
 
 export {
   WebhookChangeSource
 };
-//# sourceMappingURL=chunk-YLPAPPLW.js.map
+//# sourceMappingURL=chunk-TIZXQU26.js.map

package/dist/chunk-TIZXQU26.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/integration/webhook-change-source.ts"],"sourcesContent":["/**\n * Integration subsystem — `WebhookChangeSource<T>` primitive (#226-4, ADR-033).\n *\n * Generic webhook-mode `IChangeSource<T>` implementation parameterized by a\n * parsed `DetectionConfig` (webhook mode) and a consumer-supplied\n * `WebhookFetchCallback<T>` that iterates a consumer-owned inbound staging\n * queue. The primitive owns:\n *\n *   - canonical `Change<T>.source = 'webhook'` stamping;\n *   - `dedupKey` derivation, preferring the `eventId` yielded alongside the\n *     record by the queue iterator, and falling back to the configured\n *     `webhook.eventIdField` on the emitted record when no `eventId` is yielded\n *     (precedence: yielded `eventId` > `eventIdField` record extraction >\n *     undefined `dedupKey`);\n *   - `externalId` derivation: the mapping entry whose `target === 'external_id'`\n *     names — via its `source` — the field on the emitted record that carries\n *     the canonical external id (mirrors `PollChangeSource`);\n *   - middleware-chain composition via the locked `ChangeMiddleware<T>` shape\n *     (#226-1) — same composition seam as the poll primitive.\n *\n * The primitive is **passive**: it iterates whatever the consumer-owned\n * queue yields. It does NOT synchronously drive the orchestrator, does NOT\n * own a transport, and does NOT manage acks. The inbound staging table\n * schema is consumer-owned and deferred per ADR-0002 §Phase 4 — the\n * `WebhookFetchCallback<T>` is the queue contract the consumer injects.\n *\n * Shape locks (decision memo Q5, mirrored from poll primitive):\n *   - `WebhookFetchContext = { subscription, cursor }` — explicitly NO\n *     `userId` / `tenantId`. Run-scope identity is closed over by the\n *     consumer at queue construction or resolved inside the callback via\n *     consumer services. There are no `filters` on the webhook context —\n *     filtering is done at registration / on the staging row, not at the\n *     port seam (the queue is already filtered by the time the primitive\n *     iterates).\n *\n * Long-lived streaming CDC primitives (SFDC Pub-Sub gRPC, Debezium/Kafka,\n * Postgres logical replication) are deferred to `#226-8` — they need a\n * fundamentally different lifecycle (`subscribe(onChange, onError)`,\n * server-paced backpressure, ack-on-yield) and shouldn't be retrofitted\n * into either this primitive or the poll primitive.\n */\n\nimport type { DetectionConfig } from \"./detection-config.schema\";\nimport type {\n\tChange,\n\tIChangeSource,\n\tIntegrationSubscriptionView,\n} from \"./integration-change-source.protocol\";\nimport type {\n\tChangeIterator,\n\tChangeMiddleware,\n} from \"./integration-middleware.protocol\";\n\n// ============================================================================\n// Cursor + queue callback shapes\n// ============================================================================\n\n/**\n * Opaque webhook cursor shape. Webhook mode typically has a cursor of\n * `{ ts: ISO-string }` (last drained staging-row timestamp) but the\n * primitive treats it as opaque. Consumer-owned queue iterators interpret\n * it however the staging schema needs.\n */\nexport type WebhookCursor = unknown;\n\n/**\n * Context the primitive forwards to the queue iterator. Locked to exactly\n * two fields per the same Q5 reasoning that locks `PollFetchContext` — no\n * `userId` / `tenantId`.\n */\nexport interface WebhookFetchContext {\n\treadonly subscription: IntegrationSubscriptionView;\n\treadonly cursor: WebhookCursor | null;\n}\n\n/**\n * Consumer-supplied queue iterator. Returns an async iterable of\n * `{ record, eventId?, cursor? }` tuples — the consumer drains the inbound\n * staging queue and emits already-mapped canonical records `T`. The primitive\n * stamps `source: 'webhook'` and derives `dedupKey` with this precedence:\n *\n *   1. the yielded `eventId` (vendor delivery metadata — the queue is the\n *      right channel for it: a vendor's event id should never need a field\n *      on the vendor-neutral canonical record);\n *   2. else the record field named by `webhook.eventIdField`, when configured;\n *   3. else `undefined`.\n *\n * Yielding `eventId` is the safe channel when one canonical record identity\n * (the `external_id`) can recur across distinct vendor events in a single\n * drain batch — e.g. a message create and its later edit share an\n * `external_id` but are different events. Reading dedup identity off the\n * record (`eventIdField`) collapses those into one `dedupKey`; the yielded\n * `eventId` keeps them distinct. The consumer is the one who decided when a\n * staging row is \"ready\" to drain.\n *\n * Webhook mode has no per-record cursor advance — the staging-row drain\n * order is consumer policy (FIFO by ingestion timestamp, by event id, etc.)\n * and is opaque to the primitive. The orchestrator's last-yielded cursor\n * is whatever the consumer chooses to surface, if anything.\n */\nexport type WebhookFetchCallback<T> = (\n\tctx: WebhookFetchContext,\n) => AsyncIterable<{ record: T; eventId?: string; cursor?: WebhookCursor }>;\n\n// ============================================================================\n// Constructor options\n// ============================================================================\n\nexport interface WebhookChangeSourceOptions<T> {\n\t/** Consumer-supplied inbound queue iterator. */\n\treadonly queue: WebhookFetchCallback<T>;\n\t/**\n\t * Parsed detection config. MUST be `mode: 'webhook'`; the constructor\n\t * throws if a poll config is supplied. Codegen-emitted factories call\n\t * `DetectionConfigSchema.parse(...)` upstream so this is a safety net,\n\t * not the primary validation point.\n\t */\n\treadonly config: DetectionConfig;\n\t/**\n\t * Optional middleware chain. Same shape and composition rules as\n\t * `PollChangeSource` — first element is the outermost layer.\n\t */\n\treadonly middlewares?: ReadonlyArray<ChangeMiddleware<T>>;\n\t/**\n\t * Optional human label for run logs (e.g. `'stripe-webhook-charge'`).\n\t * Defaults to a derived label based on the mapping at construction.\n\t */\n\treadonly label?: string;\n}\n\n// ============================================================================\n// WebhookChangeSource<T>\n// ============================================================================\n\nexport class WebhookChangeSource<T> implements IChangeSource<T> {\n\tpublic readonly label: string;\n\n\tprivate readonly queue: WebhookFetchCallback<T>;\n\tprivate readonly externalIdSourceField: string;\n\t/**\n\t * Record field carrying the event id, when `webhook.eventIdField` is\n\t * configured. Used only as the fallback when the queue iterator does NOT\n\t * yield an `eventId` — see {@link WebhookFetchCallback} for the precedence.\n\t */\n\tprivate readonly eventIdSourceField: string | undefined;\n\tprivate readonly composed: ChangeIterator<T>;\n\n\tconstructor(opts: WebhookChangeSourceOptions<T>) {\n\t\tif (opts.config.mode !== \"webhook\") {\n\t\t\tthrow new Error(\n\t\t\t\t`WebhookChangeSource requires DetectionConfig.mode === 'webhook'; got '${(opts.config as { mode: string }).mode}'`,\n\t\t\t);\n\t\t}\n\t\tconst config = opts.config;\n\n\t\t// Field mapping: locate the entry whose canonical `target` is `external_id`\n\t\t// — mirrors the poll primitive's contract. Adapters emit records\n\t\t// already-mapped; the primitive needs to know which key on T carries the\n\t\t// external id so it can stamp `Change.externalId`. That key is the\n\t\t// mapping's `source` (the field on the emitted record), NOT its `target`\n\t\t// (the canonical column) — they differ whenever the canonical record is\n\t\t// vendor-neutral camelCase (e.g. `source: 'externalId'` → `target: 'external_id'`).\n\t\tconst externalIdMapping = config.mapping.find(\n\t\t\t(m) => m.target === \"external_id\",\n\t\t);\n\t\tif (!externalIdMapping) {\n\t\t\tthrow new Error(\n\t\t\t\t\"WebhookChangeSource: DetectionConfig.mapping must include an entry with target 'external_id' so emitted Change<T>.externalId can be populated\",\n\t\t\t);\n\t\t}\n\t\tthis.externalIdSourceField = externalIdMapping.source;\n\t\tthis.eventIdSourceField = config.webhook.eventIdField;\n\t\t// `eventIdField` is optional (a callback that always yields `eventId` need\n\t\t// not declare one); `undefined` here just disables the fallback extraction.\n\n\t\tthis.queue = opts.queue;\n\n\t\tthis.label =\n\t\t\topts.label ?? `webhook-change-source:${externalIdMapping.source}`;\n\n\t\t// Compose middleware chain — same shape as PollChangeSource.\n\t\tconst inner: ChangeIterator<T> = (sub, cur) => this.fetch(sub, cur);\n\t\tconst middlewares = opts.middlewares ?? [];\n\t\tthis.composed = middlewares.reduceRight<ChangeIterator<T>>(\n\t\t\t(next, mw) => mw(next),\n\t\t\tinner,\n\t\t);\n\t}\n\n\tlistChanges(\n\t\tsubscription: IntegrationSubscriptionView,\n\t\tcursor: unknown | null,\n\t): AsyncIterable<Change<T>> {\n\t\treturn this.composed(subscription, cursor);\n\t}\n\n\tprivate async *fetch(\n\t\tsubscription: IntegrationSubscriptionView,\n\t\tcursor: unknown | null,\n\t): AsyncIterable<Change<T>> {\n\t\tconst ctx: WebhookFetchContext = {\n\t\t\tsubscription,\n\t\t\tcursor: cursor as WebhookCursor | null,\n\t\t};\n\n\t\tfor await (const {\n\t\t\trecord,\n\t\t\teventId: yieldedEventId,\n\t\t\tcursor: nextCursor,\n\t\t} of this.queue(ctx)) {\n\t\t\tconst externalIdRaw = (record as Record<string, unknown>)[\n\t\t\t\tthis.externalIdSourceField\n\t\t\t];\n\t\t\tif (typeof externalIdRaw !== \"string\" || externalIdRaw.length === 0) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`WebhookChangeSource: record missing string '${this.externalIdSourceField}' — emitted records MUST carry the canonical external id keyed by the mapping source`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// dedupKey precedence: yielded `eventId` > `eventIdField` record\n\t\t\t// extraction > undefined. The yielded id is vendor delivery metadata\n\t\t\t// (the right channel for it), and keeps distinct vendor events for the\n\t\t\t// same `external_id` (e.g. a message and its edit) from collapsing to\n\t\t\t// one dedupKey — which a record-field extraction would do.\n\t\t\tconst dedupKey = this.deriveDedupKey(yieldedEventId, record);\n\n\t\t\tconst change: Change<T> = {\n\t\t\t\texternalId: externalIdRaw,\n\t\t\t\t// Webhook mode cannot distinguish create vs. update vs. delete on\n\t\t\t\t// its own — the orchestrator's diff stage handles classification.\n\t\t\t\t// Tombstone / soft-delete detection is consumer-driven (same as\n\t\t\t\t// poll mode — see ADR-033).\n\t\t\t\toperation: \"updated\",\n\t\t\t\trecord,\n\t\t\t\tcursor: nextCursor ?? null,\n\t\t\t\tsource: \"webhook\",\n\t\t\t\tdedupKey,\n\t\t\t};\n\t\t\tyield change;\n\t\t}\n\t}\n\n\t/**\n\t * Resolve `Change<T>.dedupKey` with the precedence: yielded `eventId` >\n\t * `webhook.eventIdField` record extraction > `undefined`. A non-empty\n\t * yielded `eventId` always wins; otherwise the configured field is read off\n\t * the record (and must be a non-empty string when the field is configured);\n\t * with neither, `dedupKey` is `undefined` (the orchestrator then has no\n\t * delivery-level dedup signal for this change).\n\t */\n\tprivate deriveDedupKey(\n\t\tyieldedEventId: string | undefined,\n\t\trecord: T,\n\t): string | undefined {\n\t\tif (yieldedEventId !== undefined && yieldedEventId.length > 0) {\n\t\t\treturn yieldedEventId;\n\t\t}\n\t\tif (this.eventIdSourceField === undefined) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst eventIdRaw = (record as Record<string, unknown>)[\n\t\t\tthis.eventIdSourceField\n\t\t];\n\t\tif (typeof eventIdRaw !== \"string\" || eventIdRaw.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t`WebhookChangeSource: record missing string '${this.eventIdSourceField}' — a webhook record MUST carry the event id (DetectionConfig.webhook.eventIdField) so Change<T>.dedupKey can be populated, unless the queue iterator yields an 'eventId' alongside the record`,\n\t\t\t);\n\t\t}\n\t\treturn eventIdRaw;\n\t}\n}\n"],"mappings":";AAsIO,IAAM,sBAAN,MAAyD;AAAA,EAC/C;AAAA,EAEC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAqC;AAChD,QAAI,KAAK,OAAO,SAAS,WAAW;AACnC,YAAM,IAAI;AAAA,QACT,yEAA0E,KAAK,OAA4B,IAAI;AAAA,MAChH;AAAA,IACD;AACA,UAAM,SAAS,KAAK;AASpB,UAAM,oBAAoB,OAAO,QAAQ;AAAA,MACxC,CAAC,MAAM,EAAE,WAAW;AAAA,IACrB;AACA,QAAI,CAAC,mBAAmB;AACvB,YAAM,IAAI;AAAA,QACT;AAAA,MACD;AAAA,IACD;AACA,SAAK,wBAAwB,kBAAkB;AAC/C,SAAK,qBAAqB,OAAO,QAAQ;AAIzC,SAAK,QAAQ,KAAK;AAElB,SAAK,QACJ,KAAK,SAAS,yBAAyB,kBAAkB,MAAM;AAGhE,UAAM,QAA2B,CAAC,KAAK,QAAQ,KAAK,MAAM,KAAK,GAAG;AAClE,UAAM,cAAc,KAAK,eAAe,CAAC;AACzC,SAAK,WAAW,YAAY;AAAA,MAC3B,CAAC,MAAM,OAAO,GAAG,IAAI;AAAA,MACrB;AAAA,IACD;AAAA,EACD;AAAA,EAEA,YACC,cACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,cAAc,MAAM;AAAA,EAC1C;AAAA,EAEA,OAAe,MACd,cACA,QAC2B;AAC3B,UAAM,MAA2B;AAAA,MAChC;AAAA,MACA;AAAA,IACD;AAEA,qBAAiB;AAAA,MAChB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACT,KAAK,KAAK,MAAM,GAAG,GAAG;AACrB,YAAM,gBAAiB,OACtB,KAAK,qBACN;AACA,UAAI,OAAO,kBAAkB,YAAY,cAAc,WAAW,GAAG;AACpE,cAAM,IAAI;AAAA,UACT,+CAA+C,KAAK,qBAAqB;AAAA,QAC1E;AAAA,MACD;AAOA,YAAM,WAAW,KAAK,eAAe,gBAAgB,MAAM;AAE3D,YAAM,SAAoB;AAAA,QACzB,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,QAKZ,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,cAAc;AAAA,QACtB,QAAQ;AAAA,QACR;AAAA,MACD;AACA,YAAM;AAAA,IACP;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,eACP,gBACA,QACqB;AACrB,QAAI,mBAAmB,UAAa,eAAe,SAAS,GAAG;AAC9D,aAAO;AAAA,IACR;AACA,QAAI,KAAK,uBAAuB,QAAW;AAC1C,aAAO;AAAA,IACR;AACA,UAAM,aAAc,OACnB,KAAK,kBACN;AACA,QAAI,OAAO,eAAe,YAAY,WAAW,WAAW,GAAG;AAC9D,YAAM,IAAI;AAAA,QACT,+CAA+C,KAAK,kBAAkB;AAAA,MACvE;AAAA,IACD;AACA,WAAO;AAAA,EACR;AACD;","names":[]}

package/dist/{chunk-EOLLMEAH.js → chunk-TKVTEUBD.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-GM3RMJIJ.js";
 import {
   DrizzleEventBus
-} from "./chunk-4JLJYWJC.js";
+} from "./chunk-H6FO2ZDJ.js";
 import {
   MemoryEventBus
-} from "./chunk-Z7PQCAVK.js";
+} from "./chunk-LQ6PYFU6.js";
 import {
   EVENTS_MODULE_OPTIONS,
   EVENTS_MULTI_TENANT,
@@ -152,4 +152,4 @@ EventsModule = __decorateClass([
 export {
   EventsModule
 };
-//# sourceMappingURL=chunk-EOLLMEAH.js.map
+//# sourceMappingURL=chunk-TKVTEUBD.js.map

package/dist/chunk-TKVTEUBD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/events/events.module.ts"],"sourcesContent":["/**\n * EventsModule — DynamicModule factory for the event bus subsystem.\n *\n * Register once in AppModule:\n * ```typescript\n * @Module({\n *   imports: [\n *     EventsModule.forRoot({ backend: 'drizzle' }),\n *   ],\n * })\n * export class AppModule {}\n * ```\n *\n * Tests swap to the memory backend without touching application code:\n * ```typescript\n * Test.createTestingModule({\n *   imports: [EventsModule.forRoot({ backend: 'memory' })],\n * });\n * ```\n *\n * Per-pool drain isolation (EVT-4):\n * ```typescript\n * EventsModule.forRoot({ backend: 'drizzle', pools: ['events_change'] });\n * ```\n * Each process restricts its drain loop to the pools listed here. `pools`\n * is undefined by default → drain all pending rows (backwards-compatible).\n *\n * Typed facade + multi-tenancy (EVT-6):\n * - `TYPED_EVENT_BUS` resolves to the generated `TypedEventBus` wrapping\n *   whichever backend is selected.\n * - `multiTenant: true` makes `TypedEventBus.publish` throw\n *   `MissingTenantIdError` when the caller forgets `metadata.tenantId`.\n *\n * `global: true` means entity modules do not need to import EventsModule\n * individually — the EVENT_BUS and TYPED_EVENT_BUS tokens are available\n * project-wide.\n *\n * Async configuration (`forRootAsync`):\n * The async factory returns `EventsModuleOptions`; the EVENT_BUS provider\n * then receives its backend dependencies — DRIZZLE for the drizzle\n * backend, REDIS_URL for the redis backend, the resolved options for the\n * memory backend — through a proper `useFactory` so Nest DI wires them\n * correctly. Earlier revisions hand-constructed backends with\n * `new Class()` which silently left `db` / `redisUrl` undefined\n * (issue #108).\n */\nimport { Module, type DynamicModule, type Provider, type Type } from '@nestjs/common';\nimport {\n  EVENT_BUS,\n  EVENT_READ_PORT,\n  EVENTS_MODULE_OPTIONS,\n  EVENTS_MULTI_TENANT,\n  REDIS_URL,\n  TYPED_EVENT_BUS,\n} from './events.tokens';\nimport { DRIZZLE } from '../../constants/tokens';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport { DrizzleEventBus } from './event-bus.drizzle-backend';\nimport { MemoryEventBus } from './event-bus.memory-backend';\n// #6 — `RedisEventBus` is lazy-loaded only when `backend: 'redis'` is selected.\n// The file is filtered out of the vendor set for non-redis installs (see\n// `backendFileFilter` in src/cli/commands/subsystem.ts); the dynamic-string\n// import below makes TS treat the specifier as `any` so the consumer's tsc\n// never tries to resolve the absent file.\nimport { TypedEventBus } from './generated/bus';\n\n/**\n * Lazy-load the Redis backend. Routed through a non-literal specifier so\n * the consumer's `tsc` doesn't resolve `./event-bus.redis-backend` at type\n * check time — important because that file is filtered out of drizzle/\n * memory installs (#6).\n */\nasync function loadRedisEventBus(): Promise<new (url: string) => object> {\n  // Non-literal specifier — TS gives this an `any` module type, sidestepping\n  // resolution of a file that may not be vendored.\n  const specifier = './event-bus.redis-backend';\n  const mod = (await import(specifier)) as { RedisEventBus: new (url: string) => object };\n  return mod.RedisEventBus;\n}\n\nexport interface EventsModuleOptions {\n  backend: 'drizzle' | 'memory' | 'redis';\n  /**\n   * Redis connection URL used when `backend` is `'redis'`.\n   * Falls back to the REDIS_URL environment variable, then\n   * `redis://localhost:6379` if neither is set.\n   */\n  redisUrl?: string;\n  /**\n   * Restrict the drain loop to these pools. Each pool name matches the\n   * `domain_events.pool` column (populated from `event.metadata.pool` at\n   * publish time). Leave undefined to drain all pending rows.\n   *\n   * Typical lane split: one process per `events_inbound` /\n   * `events_change` / `events_outbound` so a slow outbound handler\n   * cannot stall change-event propagation (see ADR-022).\n   */\n  pools?: string[];\n  /**\n   * LISTEN-NOTIFY-1 — when `true` (drizzle backend only), the drainer holds a\n   * dedicated listener connection and LISTENs on `codegen_events_wake`. Each\n   * `publish`/`publishMany` emits an in-tx `pg_notify(codegen_events_wake,\n   * <pool>)` so the drainer wakes the moment the publishing transaction commits,\n   * instead of waiting for the next poll tick. Polling continues unchanged as\n   * the fallback heartbeat; a lost notify degrades to poll latency, never to\n   * lost work. Defaults to `false`.\n   *\n   * Ignored by the memory + redis backends (memory dispatches inline; redis has\n   * its own fan-out). Requires a direct (non-transaction-pooler) connection —\n   * see the events/jobs config block re: PgBouncer.\n   */\n  listenNotify?: boolean;\n  /**\n   * Multi-tenancy opt-in (EVT-6).\n   *\n   * When `true`, every `TypedEventBus.publish()` call must supply\n   * `opts.metadata.tenantId` — otherwise it throws `MissingTenantIdError`.\n   * The tenantId is preserved on `event.metadata` and, for the Drizzle\n   * backend, written to `domain_events.tenant_id` (EVT-4).\n   *\n   * Drain-side tenant filtering is deferred — the tenant-context model\n   * (per-process vs. per-request vs. async-local-storage) is still\n   * unsettled; see ADR-024 §Multi-tenancy. Only the publish-side\n   * requirement ships here.\n   *\n   * Defaults to `false`.\n   */\n  multiTenant?: boolean;\n  /**\n   * The generated `TypedEventBus` class to bind to `TYPED_EVENT_BUS`.\n   *\n   * **Package mode (ADR-037).** When the runtime is imported from\n   * `@pattern-stack/codegen` (not vendored), the bundled `./generated/bus`\n   * `TypedEventBus` is typed to an EMPTY event union and reads the bundled\n   * empty `eventRegistry` — a consumer's `events/*.yaml` are scanned into\n   * `src/generated/events/bus.ts` (typed to THEIR union, reading THEIR\n   * registry), which the package can't import. The generated subsystem barrel\n   * therefore threads that class in here:\n   * `EventsModule.forRoot({ ..., typedBus: TypedEventBus })`. Nest constructs\n   * it with this module's `EVENT_BUS` + `EVENTS_MULTI_TENANT` providers (the\n   * generated class injects the same string-valued tokens, which match across\n   * the package boundary).\n   *\n   * Omitted (vendored mode / tests) ⇒ falls back to the bundled\n   * `./generated/bus`, which in a vendored tree IS the consumer's generated\n   * file. Without this, a package-mode consumer's typed `publish<'…'>()` calls\n   * resolve against the empty union and their events never get the right\n   * `pool` / `direction` stamped.\n   *\n   * Only consulted by `forRoot` (the path the barrel emits); `forRootAsync`\n   * keeps the bundled bus.\n   */\n  typedBus?: Type<unknown>;\n}\n\nexport interface EventsModuleAsyncOptions {\n  useFactory: (...args: unknown[]) => Promise<EventsModuleOptions> | EventsModuleOptions;\n  inject?: unknown[];\n  imports?: unknown[];\n}\n\n/**\n * Shared provider set: `TypedEventBus` itself, the `TYPED_EVENT_BUS` token\n * binding, and the resolved `EVENTS_MULTI_TENANT` flag. Returned from one\n * place so every `forRoot` branch and `forRootAsync` agree.\n */\nfunction buildTypedBusProviders(\n  multiTenant: boolean,\n  typedBus?: Type<unknown>,\n): Provider[] {\n  // Package mode threads the consumer's generated `TypedEventBus` (typed to\n  // their event union, reading their registry) via `typedBus`; vendored mode\n  // omits it and we fall back to the bundled `./generated/bus` (which IS the\n  // consumer's generated file in a vendored tree). See `EventsModuleOptions.typedBus`.\n  const BusClass = typedBus ?? TypedEventBus;\n  return [\n    BusClass,\n    { provide: TYPED_EVENT_BUS, useExisting: BusClass },\n    { provide: EVENTS_MULTI_TENANT, useValue: multiTenant },\n  ];\n}\n\n/**\n * Construct the backend instance for the async path, routing constructor\n * arguments through Nest-resolved dependencies.\n *\n * DRIZZLE is declared optional at inject time so that memory-backend\n * consumers aren't required to also import `DatabaseModule`. If the\n * drizzle backend is selected but no DRIZZLE provider is registered, we\n * throw a clear error instead of silently constructing a broken bus.\n */\nasync function buildEventBusAsync(\n  options: EventsModuleOptions,\n  db: DrizzleClient | null,\n  redisUrl: string,\n): Promise<unknown> {\n  if (options.backend === 'drizzle') {\n    if (!db) {\n      throw new Error(\n        \"EventsModule.forRootAsync: backend: 'drizzle' selected but DRIZZLE provider is not available. \" +\n          'Ensure DatabaseModule (or another provider exposing DRIZZLE) is imported before EventsModule.forRootAsync.',\n      );\n    }\n    return new DrizzleEventBus(db, options);\n  }\n  if (options.backend === 'redis') {\n    // #6: lazy import — the redis backend ships only with `--backend redis`\n    // installs; drizzle/memory consumers never touch the file.\n    const RedisEventBus = await loadRedisEventBus();\n    return new RedisEventBus(redisUrl);\n  }\n  return new MemoryEventBus(options);\n}\n\n@Module({})\nexport class EventsModule {\n  static forRootAsync(asyncOptions: EventsModuleAsyncOptions): DynamicModule {\n    return {\n      module: EventsModule,\n      global: true,\n      imports: (asyncOptions.imports ?? []) as Parameters<typeof Module>[0]['imports'],\n      providers: [\n        {\n          provide: EVENTS_MODULE_OPTIONS,\n          useFactory: asyncOptions.useFactory,\n          inject: (asyncOptions.inject ?? []) as (string | symbol | Function)[],\n        },\n        {\n          provide: EVENTS_MULTI_TENANT,\n          useFactory: (options: EventsModuleOptions) => options.multiTenant ?? false,\n          inject: [EVENTS_MODULE_OPTIONS],\n        },\n        {\n          provide: REDIS_URL,\n          useFactory: (options: EventsModuleOptions) =>\n            options.redisUrl ?? process.env['REDIS_URL'] ?? 'redis://localhost:6379',\n          inject: [EVENTS_MODULE_OPTIONS],\n        },\n        {\n          provide: EVENT_BUS,\n          useFactory: (\n            options: EventsModuleOptions,\n            db: DrizzleClient | null,\n            redisUrl: string,\n          ) => buildEventBusAsync(options, db, redisUrl),\n          inject: [\n            EVENTS_MODULE_OPTIONS,\n            { token: DRIZZLE, optional: true },\n            REDIS_URL,\n          ],\n        },\n        {\n          // Read port (OBS-LIST-1). Drizzle + memory backends implement\n          // IEventReadPort on the EVENT_BUS instance; the redis backend\n          // retains no history, so EVENT_READ_PORT resolves to `null` and\n          // optional consumers (the observability combiner) degrade to\n          // empty results.\n          provide: EVENT_READ_PORT,\n          useFactory: (options: EventsModuleOptions, bus: unknown) =>\n            options.backend === 'redis' ? null : bus,\n          inject: [EVENTS_MODULE_OPTIONS, EVENT_BUS],\n        },\n        TypedEventBus,\n        { provide: TYPED_EVENT_BUS, useExisting: TypedEventBus },\n      ],\n      exports: [EVENT_BUS, EVENT_READ_PORT, TYPED_EVENT_BUS, EVENTS_MULTI_TENANT],\n    };\n  }\n\n  static forRoot(\n    options: EventsModuleOptions = { backend: 'drizzle' },\n  ): DynamicModule {\n    const multiTenant = options.multiTenant ?? false;\n\n    if (options.backend === 'redis') {\n      const resolvedUrl =\n        options.redisUrl ?? process.env['REDIS_URL'] ?? 'redis://localhost:6379';\n\n      return {\n        module: EventsModule,\n        global: true,\n        providers: [\n          { provide: EVENTS_MODULE_OPTIONS, useValue: options },\n          { provide: REDIS_URL, useValue: resolvedUrl },\n          {\n            // #6: useFactory + dynamic import so the consumer's tsc never\n            // needs to resolve `event-bus.redis-backend.ts` for drizzle/\n            // memory installs (the file is filtered out by\n            // `backendFileFilter`). Nest awaits async factories + manages\n            // lifecycle on the returned instance, so we drop the old bare\n            // `RedisEventBus` provider entry.\n            provide: EVENT_BUS,\n            useFactory: async (url: string): Promise<object> => {\n              const RedisEventBus = await loadRedisEventBus();\n              return new RedisEventBus(url);\n            },\n            inject: [REDIS_URL],\n          },\n          ...buildTypedBusProviders(multiTenant, options.typedBus),\n        ],\n        exports: [EVENT_BUS, TYPED_EVENT_BUS, EVENTS_MULTI_TENANT],\n      };\n    }\n\n    const provider =\n      options.backend === 'drizzle'\n        ? { provide: EVENT_BUS, useClass: DrizzleEventBus }\n        : { provide: EVENT_BUS, useClass: MemoryEventBus };\n\n    return {\n      module: EventsModule,\n      global: true,\n      providers: [\n        { provide: EVENTS_MODULE_OPTIONS, useValue: options },\n        provider,\n        // Read port (OBS-LIST-1): drizzle + memory backends implement\n        // IEventReadPort on the same instance as EVENT_BUS. The redis\n        // backend retains no history and does not provide this token.\n        { provide: EVENT_READ_PORT, useExisting: EVENT_BUS },\n        ...buildTypedBusProviders(multiTenant, options.typedBus),\n      ],\n      exports: [EVENT_BUS, EVENT_READ_PORT, TYPED_EVENT_BUS, EVENTS_MULTI_TENANT],\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,SAAS,cAA4D;AA0BrE,eAAe,oBAA0D;AAGvE,QAAM,YAAY;AAClB,QAAM,MAAO,MAAM,OAAO;AAC1B,SAAO,IAAI;AACb;AAwFA,SAAS,uBACP,aACA,UACY;AAKZ,QAAM,WAAW,YAAY;AAC7B,SAAO;AAAA,IACL;AAAA,IACA,EAAE,SAAS,iBAAiB,aAAa,SAAS;AAAA,IAClD,EAAE,SAAS,qBAAqB,UAAU,YAAY;AAAA,EACxD;AACF;AAWA,eAAe,mBACb,SACA,IACA,UACkB;AAClB,MAAI,QAAQ,YAAY,WAAW;AACjC,QAAI,CAAC,IAAI;AACP,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,WAAO,IAAI,gBAAgB,IAAI,OAAO;AAAA,EACxC;AACA,MAAI,QAAQ,YAAY,SAAS;AAG/B,UAAM,gBAAgB,MAAM,kBAAkB;AAC9C,WAAO,IAAI,cAAc,QAAQ;AAAA,EACnC;AACA,SAAO,IAAI,eAAe,OAAO;AACnC;AAGO,IAAM,eAAN,MAAmB;AAAA,EACxB,OAAO,aAAa,cAAuD;AACzE,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,SAAU,aAAa,WAAW,CAAC;AAAA,MACnC,WAAW;AAAA,QACT;AAAA,UACE,SAAS;AAAA,UACT,YAAY,aAAa;AAAA,UACzB,QAAS,aAAa,UAAU,CAAC;AAAA,QACnC;AAAA,QACA;AAAA,UACE,SAAS;AAAA,UACT,YAAY,CAAC,YAAiC,QAAQ,eAAe;AAAA,UACrE,QAAQ,CAAC,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,UACE,SAAS;AAAA,UACT,YAAY,CAAC,YACX,QAAQ,YAAY,QAAQ,IAAI,WAAW,KAAK;AAAA,UAClD,QAAQ,CAAC,qBAAqB;AAAA,QAChC;AAAA,QACA;AAAA,UACE,SAAS;AAAA,UACT,YAAY,CACV,SACA,IACA,aACG,mBAAmB,SAAS,IAAI,QAAQ;AAAA,UAC7C,QAAQ;AAAA,YACN;AAAA,YACA,EAAE,OAAO,SAAS,UAAU,KAAK;AAAA,YACjC;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAME,SAAS;AAAA,UACT,YAAY,CAAC,SAA8B,QACzC,QAAQ,YAAY,UAAU,OAAO;AAAA,UACvC,QAAQ,CAAC,uBAAuB,SAAS;AAAA,QAC3C;AAAA,QACA;AAAA,QACA,EAAE,SAAS,iBAAiB,aAAa,cAAc;AAAA,MACzD;AAAA,MACA,SAAS,CAAC,WAAW,iBAAiB,iBAAiB,mBAAmB;AAAA,IAC5E;AAAA,EACF;AAAA,EAEA,OAAO,QACL,UAA+B,EAAE,SAAS,UAAU,GACrC;AACf,UAAM,cAAc,QAAQ,eAAe;AAE3C,QAAI,QAAQ,YAAY,SAAS;AAC/B,YAAM,cACJ,QAAQ,YAAY,QAAQ,IAAI,WAAW,KAAK;AAElD,aAAO;AAAA,QACL,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,WAAW;AAAA,UACT,EAAE,SAAS,uBAAuB,UAAU,QAAQ;AAAA,UACpD,EAAE,SAAS,WAAW,UAAU,YAAY;AAAA,UAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,YAOE,SAAS;AAAA,YACT,YAAY,OAAO,QAAiC;AAClD,oBAAM,gBAAgB,MAAM,kBAAkB;AAC9C,qBAAO,IAAI,cAAc,GAAG;AAAA,YAC9B;AAAA,YACA,QAAQ,CAAC,SAAS;AAAA,UACpB;AAAA,UACA,GAAG,uBAAuB,aAAa,QAAQ,QAAQ;AAAA,QACzD;AAAA,QACA,SAAS,CAAC,WAAW,iBAAiB,mBAAmB;AAAA,MAC3D;AAAA,IACF;AAEA,UAAM,WACJ,QAAQ,YAAY,YAChB,EAAE,SAAS,WAAW,UAAU,gBAAgB,IAChD,EAAE,SAAS,WAAW,UAAU,eAAe;AAErD,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW;AAAA,QACT,EAAE,SAAS,uBAAuB,UAAU,QAAQ;AAAA,QACpD;AAAA;AAAA;AAAA;AAAA,QAIA,EAAE,SAAS,iBAAiB,aAAa,UAAU;AAAA,QACnD,GAAG,uBAAuB,aAAa,QAAQ,QAAQ;AAAA,MACzD;AAAA,MACA,SAAS,CAAC,WAAW,iBAAiB,iBAAiB,mBAAmB;AAAA,IAC5E;AAAA,EACF;AACF;AA7Ga,eAAN;AAAA,EADN,OAAO,CAAC,CAAC;AAAA,GACG;","names":[]}

package/dist/{chunk-YPWODKD5.js → chunk-W2UIDI3R.js}

@@ -1,12 +1,12 @@
 import {
   JOB_RUN_SERVICE
-} from "./chunk-BIO6F7YI.js";
-import {
-  EVENT_READ_PORT
-} from "./chunk-H5NH7KPE.js";
+} from "./chunk-ZPL74UQN.js";
 import {
   BRIDGE_DELIVERY_REPO
 } from "./chunk-4LH67P4U.js";
+import {
+  EVENT_READ_PORT
+} from "./chunk-H5NH7KPE.js";
 import {
   INTEGRATION_CURSOR_STORE,
   INTEGRATION_RUN_RECORDER
@@ -181,4 +181,4 @@ ObservabilityService = __decorateClass([
 export {
   ObservabilityService
 };
-//# sourceMappingURL=chunk-YPWODKD5.js.map
+//# sourceMappingURL=chunk-W2UIDI3R.js.map

package/dist/chunk-W4HOHZVF.js

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-W4HOHZVF.js.map

package/dist/{chunk-DCCZB4UC.js → chunk-XWBK3XJK.js}

@@ -1,12 +1,12 @@
+import {
+  INTEGRATION_MULTI_TENANT
+} from "./chunk-S7C6TIIF.js";
 import {
   assertTenantId
 } from "./chunk-MZ6GV4YF.js";
 import {
   integrationSubscriptions
 } from "./chunk-HNWZFNKP.js";
-import {
-  INTEGRATION_MULTI_TENANT
-} from "./chunk-S7C6TIIF.js";
 import {
   DRIZZLE
 } from "./chunk-U64T4YZE.js";
@@ -97,4 +97,4 @@ PostgresCursorStore = __decorateClass([
 export {
   PostgresCursorStore
 };
-//# sourceMappingURL=chunk-DCCZB4UC.js.map
+//# sourceMappingURL=chunk-XWBK3XJK.js.map

package/dist/{chunk-SR7F3TJY.js → chunk-YK5JEVLX.js}

@@ -1,6 +1,9 @@
 import {
   FieldDiffSchema
 } from "./chunk-SQDOBLBP.js";
+import {
+  INTEGRATION_MULTI_TENANT
+} from "./chunk-S7C6TIIF.js";
 import {
   assertTenantId
 } from "./chunk-MZ6GV4YF.js";
@@ -9,9 +12,6 @@ import {
   integrationRuns,
   integrationSubscriptions
 } from "./chunk-HNWZFNKP.js";
-import {
-  INTEGRATION_MULTI_TENANT
-} from "./chunk-S7C6TIIF.js";
 import {
   DRIZZLE
 } from "./chunk-U64T4YZE.js";
@@ -127,4 +127,4 @@ DrizzleIntegrationRunRecorder = __decorateClass([
 export {
   DrizzleIntegrationRunRecorder
 };
-//# sourceMappingURL=chunk-SR7F3TJY.js.map
+//# sourceMappingURL=chunk-YK5JEVLX.js.map