@pattern-stack/codegen 0.16.0 → 0.16.1

package/CHANGELOG.md

@@ -4,6 +4,46 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.16.1] — 2026-06-04
+
+**`WebhookFetchCallback<T>` yields `{ record, eventId?, cursor? }`** —
+`WebhookChangeSource` now prefers a queue-yielded `eventId` for
+`Change<T>.dedupKey` (gap #6 follow-through, swe-brain ADR-0009 Amendment B
+§B5). swe-brain's Slack inbound drain documented an `eventIdField: 'externalId'`
+substitution — delivery dedup happens at the receiver, so record identity stood
+in for event identity. That substitution becomes genuinely unsafe once a message
+and its edit (same `externalId`, different vendor event) can share one drain
+batch — they'd collapse to a single `dedupKey`. Vendor delivery metadata (the
+event id) should never need a field on the vendor-neutral canonical record; the
+queue-yield is the right channel for it. Backward-compatible: callbacks that
+yield `{ record, cursor? }` and configs that set `webhook.eventIdField` are
+unchanged; opting into `eventId` is the only migration, and it's optional.
+
+### Changed
+
+- **`WebhookFetchCallback<T>` yield shape** is now `{ record: T; eventId?:
+  string; cursor?: WebhookCursor }` (was `{ record: T; cursor?: WebhookCursor }`)
+  — the new `eventId` is opt-in and additive; existing callbacks compile and run
+  unchanged.
+- **`WebhookChangeSource.dedupKey` precedence** is now **yielded `eventId` >
+  `webhook.eventIdField` record extraction > undefined**. A non-empty yielded
+  `eventId` always wins; otherwise the configured `eventIdField` is read off the
+  emitted record (and still throws if the field is configured but absent on the
+  record); with neither, `dedupKey` is `undefined` (the orchestrator simply has
+  no delivery-level dedup signal for that change).
+- **`detection-config.schema.ts`: `webhook.eventIdField` is now optional**
+  (`z.string().min(1).optional()`). A callback that always yields `eventId` need
+  not declare a record field for it. The `webhook` block itself stays
+  structurally required in webhook mode (an empty `{}` is valid; a missing block
+  is not), so the existing "webhook-mode missing webhook block" validation is
+  unaffected.
+
+### Docs
+
+- ADR-033 §1 amended (the `webhook: { eventIdField? }` shape + the yield channel
+  + dedupKey precedence), integration `SKILL.md` + consumer
+  `change-sources-and-sinks.md` updated to the yield-preferred precedence.
+
 ## [0.16.0] — 2026-06-04
 
 **Postgres LISTEN/NOTIFY wakeups** for the jobs worker + events outbox drainer

package/consumer-skills/integration/change-sources-and-sinks.md

@@ -75,7 +75,7 @@ interface Change<T> {
   record: T;                           // canonical shape — provider mapping happens in the adapter
   cursor: unknown;                     // typed internally; opaque at the seam
   source: 'poll' | 'cdc' | 'webhook';  // provenance for the run-log audit
-  dedupKey?: string;                   // CDC replay_id / webhook event_id when available
+  dedupKey?: string;                   // CDC replay_id / webhook event id when available (webhook: prefers the eventId yielded by WebhookFetchCallback, else webhook.eventIdField)
   providerChangedFields?: string[];    // CDC-only hint; lets the differ skip untouched fields
 }
 ```

package/dist/{chunk-32DOFN3T.js → chunk-2WDX6I7T.js}

@@ -1,6 +1,6 @@
 import {
   DetectionConfigSchema
-} from "./chunk-3NMCDN7L.js";
+} from "./chunk-5TK7MEN4.js";
 
 // src/parser/load-entities.ts
 import { resolve as resolve2 } from "path";
@@ -4039,4 +4039,4 @@ export {
   analyzeDomain,
   validateEntities
 };
-//# sourceMappingURL=chunk-32DOFN3T.js.map
+//# sourceMappingURL=chunk-2WDX6I7T.js.map

package/dist/{chunk-WWGYCIJX.js → chunk-43SBT72G.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-4MF3HKJA.js";
 import {
   WebhookChangeSource
-} from "./chunk-YLPAPPLW.js";
+} from "./chunk-TIZXQU26.js";
 
 // runtime/subsystems/integration/build-change-source.ts
 function buildChangeSource(cfg, fetch, middlewares = []) {
@@ -26,4 +26,4 @@ function buildChangeSource(cfg, fetch, middlewares = []) {
 export {
   buildChangeSource
 };
-//# sourceMappingURL=chunk-WWGYCIJX.js.map
+//# sourceMappingURL=chunk-43SBT72G.js.map

package/dist/{chunk-VNBC3VXM.js → chunk-5LXOJGO2.js}

@@ -1,19 +1,19 @@
-import {
-  MissingTenantIdError
-} from "./chunk-T4BIIU5E.js";
 import {
   clampLimit,
   decodeKeysetCursor,
   encodeKeysetCursor,
   toJobRunSummary
 } from "./chunk-L3LZWWSX.js";
+import {
+  jobRuns
+} from "./chunk-OKXZ63IA.js";
 import {
   JOBS_MULTI_TENANT,
   JOB_ORCHESTRATOR
 } from "./chunk-ZPL74UQN.js";
 import {
-  jobRuns
-} from "./chunk-OKXZ63IA.js";
+  MissingTenantIdError
+} from "./chunk-T4BIIU5E.js";
 import {
   DRIZZLE
 } from "./chunk-U64T4YZE.js";
@@ -198,4 +198,4 @@ DrizzleJobRunService = __decorateClass([
 export {
   DrizzleJobRunService
 };
-//# sourceMappingURL=chunk-VNBC3VXM.js.map
+//# sourceMappingURL=chunk-5LXOJGO2.js.map

package/dist/{chunk-3NMCDN7L.js → chunk-5TK7MEN4.js}

@@ -58,7 +58,7 @@ var PollDetectionSchema = z.object({
   provenance: z.enum(["poll", "cdc"]).optional()
 });
 var WebhookDetectionSchema = z.object({
-  eventIdField: z.string().min(1)
+  eventIdField: z.string().min(1).optional()
 });
 var PollModeSchema = z.object({
   mode: z.literal("poll"),
@@ -87,4 +87,4 @@ export {
   WebhookDetectionSchema,
   DetectionConfigSchema
 };
-//# sourceMappingURL=chunk-3NMCDN7L.js.map
+//# sourceMappingURL=chunk-5TK7MEN4.js.map

package/dist/chunk-5TK7MEN4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/integration/detection-config.schema.ts"],"sourcesContent":["/**\n * Integration subsystem — DetectionConfig schema (#226-1)\n *\n * Canonical Zod schema for per-entity integration detection config. The schema is\n * the single source of truth for filter/mapping shape and is consumed by:\n *\n *   1. Runtime primitives — `PollChangeSource<T>`, `WebhookChangeSource<T>`\n *      (#226-3, #226-4) accept a parsed `DetectionConfig` at construction.\n *   2. Codegen — `src/schema/entity-definition.schema.ts` (#226-6) imports\n *      this schema so per-entity YAML `detection:` blocks validate against\n *      the same shape the runtime enforces.\n *\n * Locked decisions (see ADR-033 + decision memo Q1–Q6):\n *   - Filter vocabulary is flat AND of `{ field, op, value }` triples; richer\n *     boolean expressions (OR / NOT / nested) are deferred per epic open Q3.\n *   - Cursor strategy is a tagged union over the four shapes the three modes\n *     need (`systemModstamp`, `replayId`, `timestamp`, `eventId`). Each\n *     strategy types its cursor internally; the orchestrator persists what\n *     the iterator last yielded (integration skill rule 2).\n *   - `mode: 'poll'` may opt into `provenance: 'cdc'` so Stripe-style event\n *     endpoints (mechanically a poll, semantically CDC) reuse the poll\n *     primitive while emitting `Change<T>.source = 'cdc'`. Long-lived\n *     streaming CDC (SFDC Pub-Sub, Debezium) is a separate primitive\n *     deferred to #226-8.\n *   - `webhook` mode's `eventIdField` is optional: `WebhookChangeSource<T>`\n *     prefers an `eventId` yielded by the queue iterator and falls back to the\n *     `eventIdField` record extraction (precedence: yielded eventId >\n *     eventIdField extraction > undefined dedupKey).\n */\nimport { z } from \"zod\";\n\n// ============================================================================\n// Field mapping — provider field → canonical target\n// ============================================================================\n\n/**\n * Maps a single provider field onto the canonical record. `transform` is an\n * opt-in tag the adapter callback may inspect (`date-iso`, `decimal-string`,\n * etc.); the schema does not enumerate transforms — adapters interpret them.\n */\nexport const FieldMappingSchema = z.object({\n\tsource: z.string().min(1),\n\ttarget: z.string().min(1),\n\ttransform: z.string().min(1).optional(),\n});\n\nexport type FieldMapping = z.infer<typeof FieldMappingSchema>;\n\n// ============================================================================\n// Resolved filter — flat-AND triple\n// ============================================================================\n\n/**\n * A single resolved filter clause applied at fetch time. `value` is `unknown`\n * to admit primitives, arrays (for `in` / `nin`), and dates as ISO strings —\n * adapters interpret per provider.\n */\nexport const ResolvedFilterSchema = z.object({\n\tfield: z.string().min(1),\n\top: z.enum([\"eq\", \"neq\", \"in\", \"nin\", \"gt\", \"gte\", \"lt\", \"lte\"]),\n\tvalue: z.unknown(),\n});\n\nexport type ResolvedFilter = z.infer<typeof ResolvedFilterSchema>;\n\n// ============================================================================\n// Cursor strategy — tagged union over the four shapes the modes need\n// ============================================================================\n\nconst SystemModstampCursorSchema = z.object({\n\tkind: z.literal(\"systemModstamp\"),\n\tfield: z.string().min(1),\n});\n\nconst ReplayIdCursorSchema = z.object({\n\tkind: z.literal(\"replayId\"),\n\tfield: z.string().min(1),\n});\n\nconst TimestampCursorSchema = z.object({\n\tkind: z.literal(\"timestamp\"),\n\tfield: z.string().min(1),\n});\n\nconst EventIdCursorSchema = z.object({\n\tkind: z.literal(\"eventId\"),\n\tfield: z.string().min(1),\n});\n\n/**\n * Gmail `historyId` (RFC-0003 §3) — an opaque, atomic vendor token. The next\n * watermark only exists at end-of-walk; there is no resumable mid-walk value.\n * `field` is metadata for codegen/adapters (the response key the token lives on).\n */\nconst HistoryIdCursorSchema = z.object({\n\tkind: z.literal(\"historyId\"),\n\tfield: z.string().min(1),\n});\n\n/**\n * Google Calendar `syncToken` (RFC-0003 §3) — an opaque, atomic sync token,\n * same divisibility profile as `historyId`.\n */\nconst SyncTokenCursorSchema = z.object({\n\tkind: z.literal(\"syncToken\"),\n\tfield: z.string().min(1),\n});\n\nexport const CursorStrategySchema = z.discriminatedUnion(\"kind\", [\n\tSystemModstampCursorSchema,\n\tReplayIdCursorSchema,\n\tTimestampCursorSchema,\n\tEventIdCursorSchema,\n\tHistoryIdCursorSchema,\n\tSyncTokenCursorSchema,\n]);\n\nexport type CursorStrategy = z.infer<typeof CursorStrategySchema>;\n\n// ============================================================================\n// Cursor divisibility (RFC-0003 §3)\n// ============================================================================\n\n/**\n * Whether a cursor strategy is *divisible* — a property of the strategy, not\n * the read primitive. Divisible cursors are sortable/monotonic watermarks whose\n * value is meaningful AS OF any single record (HubSpot `systemModstamp`, a\n * `timestamp` field, a Salesforce CDC `replayId`); the read primitive may\n * checkpoint per-ref mid-walk, so a crash resumes from the last delivered ref.\n *\n * Atomic cursors are opaque vendor tokens (Gmail `historyId`, Calendar\n * `syncToken`, a generic `eventId`) whose next value only exists at end-of-walk.\n * The primitive must withhold per-ref cursors and emit the token only at a safe\n * boundary, so an interrupted run never persists an unresumable mid-walk token\n * (it resumes all-or-nothing from the prior token — see `IncrementalReadBase`).\n *\n * `eventId` is classified atomic conservatively: a generic opaque id is treated\n * all-or-nothing unless a concrete strategy proves it monotonically resumable.\n */\nexport const CURSOR_DIVISIBILITY: Readonly<\n\tRecord<CursorStrategy[\"kind\"], boolean>\n> = {\n\tsystemModstamp: true,\n\ttimestamp: true,\n\treplayId: true,\n\teventId: false,\n\thistoryId: false,\n\tsyncToken: false,\n};\n\n/** Predicate form of {@link CURSOR_DIVISIBILITY}. */\nexport function isDivisibleCursor(kind: CursorStrategy[\"kind\"]): boolean {\n\treturn CURSOR_DIVISIBILITY[kind];\n}\n\n// ============================================================================\n// Mode-specific blocks\n// ============================================================================\n\n/**\n * Poll-mode block. `provenance: 'cdc'` opts the poll primitive into stamping\n * `Change<T>.source = 'cdc'` and populating `dedupKey` from the cursor's\n * `field` — used for Stripe-style event endpoints. Defaults to `'poll'`.\n */\nexport const PollDetectionSchema = z.object({\n\tcursor: CursorStrategySchema,\n\tprovenance: z.enum([\"poll\", \"cdc\"]).optional(),\n});\n\nexport type PollDetection = z.infer<typeof PollDetectionSchema>;\n\n/**\n * Webhook-mode block. `eventIdField`, when present, names the field on the\n * emitted canonical record that `WebhookChangeSource<T>` reads to set\n * `Change<T>.dedupKey` — used only as the fallback when the queue iterator\n * does NOT yield an `eventId` alongside the record.\n *\n * `eventIdField` is **optional**: a queue iterator that always yields an\n * `eventId` (vendor delivery metadata, the preferred channel) need not declare\n * a record field for it. dedupKey precedence is: yielded `eventId` >\n * `eventIdField` record extraction > undefined.\n */\nexport const WebhookDetectionSchema = z.object({\n\teventIdField: z.string().min(1).optional(),\n});\n\nexport type WebhookDetection = z.infer<typeof WebhookDetectionSchema>;\n\n// ============================================================================\n// DetectionConfig — top-level discriminated union over `mode`\n// ============================================================================\n\nconst PollModeSchema = z.object({\n\tmode: z.literal(\"poll\"),\n\tpoll: PollDetectionSchema,\n\tmapping: z.array(FieldMappingSchema).min(1),\n\tfilters: z.array(ResolvedFilterSchema).default([]),\n});\n\nconst WebhookModeSchema = z.object({\n\tmode: z.literal(\"webhook\"),\n\twebhook: WebhookDetectionSchema,\n\tmapping: z.array(FieldMappingSchema).min(1),\n\tfilters: z.array(ResolvedFilterSchema).default([]),\n});\n\n/**\n * Top-level detection config. Discriminated on `mode` so the relevant\n * mode-block (poll/webhook) is structurally required for that mode. CDC as a\n * long-lived streaming primitive is deferred (#226-8); CDC-as-provenance\n * (Stripe-style event endpoints) is expressed via `mode: 'poll'` with\n * `poll.provenance: 'cdc'`.\n */\nexport const DetectionConfigSchema = z.discriminatedUnion(\"mode\", [\n\tPollModeSchema,\n\tWebhookModeSchema,\n]);\n\nexport type DetectionConfig = z.infer<typeof DetectionConfigSchema>;\n"],"mappings":";AA6BA,SAAS,SAAS;AAWX,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAC1C,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACvC,CAAC;AAaM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC5C,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,IAAI,EAAE,KAAK,CAAC,MAAM,OAAO,MAAM,OAAO,MAAM,OAAO,MAAM,KAAK,CAAC;AAAA,EAC/D,OAAO,EAAE,QAAQ;AAClB,CAAC;AAQD,IAAM,6BAA6B,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,QAAQ,gBAAgB;AAAA,EAChC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAED,IAAM,uBAAuB,EAAE,OAAO;AAAA,EACrC,MAAM,EAAE,QAAQ,UAAU;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAED,IAAM,wBAAwB,EAAE,OAAO;AAAA,EACtC,MAAM,EAAE,QAAQ,WAAW;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAED,IAAM,sBAAsB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAOD,IAAM,wBAAwB,EAAE,OAAO;AAAA,EACtC,MAAM,EAAE,QAAQ,WAAW;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAMD,IAAM,wBAAwB,EAAE,OAAO;AAAA,EACtC,MAAM,EAAE,QAAQ,WAAW;AAAA,EAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AACxB,CAAC;AAEM,IAAM,uBAAuB,EAAE,mBAAmB,QAAQ;AAAA,EAChE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD,CAAC;AAwBM,IAAM,sBAET;AAAA,EACH,gBAAgB;AAAA,EAChB,WAAW;AAAA,EACX,UAAU;AAAA,EACV,SAAS;AAAA,EACT,WAAW;AAAA,EACX,WAAW;AACZ;AAGO,SAAS,kBAAkB,MAAuC;AACxE,SAAO,oBAAoB,IAAI;AAChC;AAWO,IAAM,sBAAsB,EAAE,OAAO;AAAA,EAC3C,QAAQ;AAAA,EACR,YAAY,EAAE,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,SAAS;AAC9C,CAAC;AAeM,IAAM,yBAAyB,EAAE,OAAO;AAAA,EAC9C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAC1C,CAAC;AAQD,IAAM,iBAAiB,EAAE,OAAO;AAAA,EAC/B,MAAM,EAAE,QAAQ,MAAM;AAAA,EACtB,MAAM;AAAA,EACN,SAAS,EAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;AAAA,EAC1C,SAAS,EAAE,MAAM,oBAAoB,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AAED,IAAM,oBAAoB,EAAE,OAAO;AAAA,EAClC,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,SAAS;AAAA,EACT,SAAS,EAAE,MAAM,kBAAkB,EAAE,IAAI,CAAC;AAAA,EAC1C,SAAS,EAAE,MAAM,oBAAoB,EAAE,QAAQ,CAAC,CAAC;AAClD,CAAC;AASM,IAAM,wBAAwB,EAAE,mBAAmB,QAAQ;AAAA,EACjE;AAAA,EACA;AACD,CAAC;","names":[]}

package/dist/{chunk-RUYLXR5F.js → chunk-AYC2HEAL.js}

@@ -1,13 +1,9 @@
 import {
   JobWorker
-} from "./chunk-XDIIVIIK.js";
+} from "./chunk-JM3T27ZW.js";
 import {
   JobsDomainModule
-} from "./chunk-3RWMQC3K.js";
-import {
-  BootValidationError,
-  ReservedPoolViolationError
-} from "./chunk-T4BIIU5E.js";
+} from "./chunk-DGYTSCKN.js";
 import {
   BULLMQ_CONNECTION,
   BULLMQ_RESOLVED_CONFIG,
@@ -18,14 +14,18 @@ import {
   allPoolNames,
   loadPoolConfig
 } from "./chunk-RHVN6NA7.js";
+import {
+  HandlerRegistry
+} from "./chunk-CO6LUM72.js";
 import {
   JOB_ORCHESTRATOR,
   JOB_RUN_SERVICE,
   JOB_STEP_SERVICE
 } from "./chunk-ZPL74UQN.js";
 import {
-  HandlerRegistry
-} from "./chunk-CO6LUM72.js";
+  BootValidationError,
+  ReservedPoolViolationError
+} from "./chunk-T4BIIU5E.js";
 import {
   tokenKey
 } from "./chunk-GYGNEQSC.js";
@@ -290,4 +290,4 @@ export {
   JobWorkerOrchestrator,
   JobWorkerModule
 };
-//# sourceMappingURL=chunk-RUYLXR5F.js.map
+//# sourceMappingURL=chunk-AYC2HEAL.js.map

package/dist/{chunk-CEWLVVAH.js → chunk-CRBVI4GE.js}

@@ -9,22 +9,22 @@ import {
 } from "./chunk-EDKJU5BO.js";
 import {
   DrizzleBridgeDeliveryRepo
-} from "./chunk-KSTZIULO.js";
+} from "./chunk-K2I6XIK5.js";
 import {
   MemoryBridgeDeliveryRepo
 } from "./chunk-4DOJBQTP.js";
 import {
   BridgeOutboxDrainHook
-} from "./chunk-EBKVKN75.js";
+} from "./chunk-DLG62MQY.js";
 import {
   BridgeDeliveryHandler
-} from "./chunk-DRCLNYH7.js";
+} from "./chunk-NXNVTXKG.js";
 import {
   BridgeReservedPoolsNotPolledError
 } from "./chunk-NXXDZ6ZF.js";
 import {
   JOB_WORKER_MODULE_OPTIONS
-} from "./chunk-RUYLXR5F.js";
+} from "./chunk-AYC2HEAL.js";
 import {
   BRIDGE_DELIVERY_REPO,
   BRIDGE_MODULE_OPTIONS,
@@ -119,4 +119,4 @@ BridgeModule = __decorateClass([
 export {
   BridgeModule
 };
-//# sourceMappingURL=chunk-CEWLVVAH.js.map
+//# sourceMappingURL=chunk-CRBVI4GE.js.map

package/dist/{chunk-DKKFTHHI.js → chunk-CZQUOIDY.js}

@@ -1,6 +1,3 @@
-import {
-  NoopAnalyticsBackend
-} from "./chunk-J37YWU7Y.js";
 import {
   CubeAnalyticsBackend
 } from "./chunk-7B3RYX45.js";
@@ -9,6 +6,9 @@ import {
   CUBE_API_SECRET,
   CUBE_API_URL
 } from "./chunk-6I7ULIN6.js";
+import {
+  NoopAnalyticsBackend
+} from "./chunk-J37YWU7Y.js";
 import {
   __decorateClass
 } from "./chunk-2E224ZSN.js";
@@ -50,4 +50,4 @@ AnalyticsModule = __decorateClass([
 export {
   AnalyticsModule
 };
-//# sourceMappingURL=chunk-DKKFTHHI.js.map
+//# sourceMappingURL=chunk-CZQUOIDY.js.map

package/dist/{chunk-3RWMQC3K.js → chunk-DGYTSCKN.js}

@@ -1,29 +1,29 @@
+import {
+  DrizzleJobRunService
+} from "./chunk-5LXOJGO2.js";
+import {
+  MemoryJobRunService
+} from "./chunk-QSJ3J4HE.js";
 import {
   DrizzleJobStepService
 } from "./chunk-DV4RV2DC.js";
+import {
+  BULLMQ_CONNECTION,
+  BULLMQ_RESOLVED_CONFIG,
+  resolveBullMqConfig
+} from "./chunk-I6MVCB5A.js";
 import {
   DrizzleJobOrchestrator
-} from "./chunk-OTR44OH6.js";
+} from "./chunk-IT6FRTEW.js";
 import {
   MemoryJobOrchestrator
-} from "./chunk-BULPAAD3.js";
+} from "./chunk-T4YJRD22.js";
 import {
   MemoryJobStepService
 } from "./chunk-PNZSGAB2.js";
-import {
-  DrizzleJobRunService
-} from "./chunk-VNBC3VXM.js";
-import {
-  MemoryJobRunService
-} from "./chunk-BHZP6LOV.js";
 import {
   MemoryJobStore
 } from "./chunk-SNQ3TOWP.js";
-import {
-  BULLMQ_CONNECTION,
-  BULLMQ_RESOLVED_CONFIG,
-  resolveBullMqConfig
-} from "./chunk-I6MVCB5A.js";
 import {
   JOBS_LISTEN_NOTIFY,
   JOBS_MULTI_TENANT,
@@ -114,4 +114,4 @@ JobsDomainModule = __decorateClass([
 export {
   JobsDomainModule
 };
-//# sourceMappingURL=chunk-3RWMQC3K.js.map
+//# sourceMappingURL=chunk-DGYTSCKN.js.map

package/dist/{chunk-EBKVKN75.js → chunk-DLG62MQY.js}

@@ -1,22 +1,22 @@
 import {
   BRIDGE_DELIVERY_JOB_TYPE
-} from "./chunk-DRCLNYH7.js";
+} from "./chunk-NXNVTXKG.js";
 import {
   bridgeDelivery
 } from "./chunk-2TVVBC53.js";
+import {
+  jobRuns
+} from "./chunk-OKXZ63IA.js";
 import {
   JOBS_LISTEN_NOTIFY
 } from "./chunk-ZPL74UQN.js";
 import {
-  jobRuns
-} from "./chunk-OKXZ63IA.js";
+  BRIDGE_REGISTRY
+} from "./chunk-4LH67P4U.js";
 import {
   JOBS_WAKE_CHANNEL,
   pgNotify
 } from "./chunk-MYQIQ27N.js";
-import {
-  BRIDGE_REGISTRY
-} from "./chunk-4LH67P4U.js";
 import {
   __decorateClass,
   __decorateParam
@@ -151,4 +151,4 @@ BridgeOutboxDrainHook = __decorateClass([
 export {
   BridgeOutboxDrainHook
 };
-//# sourceMappingURL=chunk-EBKVKN75.js.map
+//# sourceMappingURL=chunk-DLG62MQY.js.map

package/dist/{chunk-4PFF3ED4.js → chunk-H6FO2ZDJ.js}

@@ -1,11 +1,11 @@
+import {
+  BRIDGE_OUTBOX_DRAIN_HOOK
+} from "./chunk-4LH67P4U.js";
 import {
   EVENTS_WAKE_CHANNEL,
   PgNotifyListener,
   pgNotify
 } from "./chunk-MYQIQ27N.js";
-import {
-  BRIDGE_OUTBOX_DRAIN_HOOK
-} from "./chunk-4LH67P4U.js";
 import {
   domainEvents
 } from "./chunk-OFRRBC7M.js";
@@ -393,4 +393,4 @@ DrizzleEventBus = __decorateClass([
 export {
   DrizzleEventBus
 };
-//# sourceMappingURL=chunk-4PFF3ED4.js.map
+//# sourceMappingURL=chunk-H6FO2ZDJ.js.map

package/dist/{chunk-OTR44OH6.js → chunk-IT6FRTEW.js}

@@ -1,3 +1,12 @@
+import {
+  jobRuns,
+  jobSteps,
+  jobs
+} from "./chunk-OKXZ63IA.js";
+import {
+  JOBS_LISTEN_NOTIFY,
+  JOBS_MULTI_TENANT
+} from "./chunk-ZPL74UQN.js";
 import {
   JobCollisionError,
   JobNotReplayableError,
@@ -5,15 +14,6 @@ import {
   JobTypeNotFoundError,
   MissingTenantIdError
 } from "./chunk-T4BIIU5E.js";
-import {
-  JOBS_LISTEN_NOTIFY,
-  JOBS_MULTI_TENANT
-} from "./chunk-ZPL74UQN.js";
-import {
-  jobRuns,
-  jobSteps,
-  jobs
-} from "./chunk-OKXZ63IA.js";
 import {
   JOBS_WAKE_CHANNEL,
   pgNotify
@@ -372,4 +372,4 @@ export {
   evaluateKeyTemplate,
   DrizzleJobOrchestrator
 };
-//# sourceMappingURL=chunk-OTR44OH6.js.map
+//# sourceMappingURL=chunk-IT6FRTEW.js.map

package/dist/{chunk-XDIIVIIK.js → chunk-JM3T27ZW.js}

@@ -1,14 +1,14 @@
 import {
-  JOB_ORCHESTRATOR,
-  JOB_RUN_SERVICE,
-  JOB_STEP_SERVICE
-} from "./chunk-ZPL74UQN.js";
+  jobRuns
+} from "./chunk-OKXZ63IA.js";
 import {
   JOB_HANDLER_REGISTRY
 } from "./chunk-CO6LUM72.js";
 import {
-  jobRuns
-} from "./chunk-OKXZ63IA.js";
+  JOB_ORCHESTRATOR,
+  JOB_RUN_SERVICE,
+  JOB_STEP_SERVICE
+} from "./chunk-ZPL74UQN.js";
 import {
   JOBS_WAKE_CHANNEL,
   PgNotifyListener
@@ -518,4 +518,4 @@ export {
   buildStaleSweepQuery,
   JobWorker
 };
-//# sourceMappingURL=chunk-XDIIVIIK.js.map
+//# sourceMappingURL=chunk-JM3T27ZW.js.map

package/dist/{chunk-KSTZIULO.js → chunk-K2I6XIK5.js}

@@ -1,9 +1,9 @@
-import {
-  bridgeDelivery
-} from "./chunk-2TVVBC53.js";
 import {
   assertTenantId
 } from "./chunk-6DWFJNIK.js";
+import {
+  bridgeDelivery
+} from "./chunk-2TVVBC53.js";
 import {
   BRIDGE_MULTI_TENANT
 } from "./chunk-4LH67P4U.js";
@@ -119,4 +119,4 @@ DrizzleBridgeDeliveryRepo = __decorateClass([
 export {
   DrizzleBridgeDeliveryRepo
 };
-//# sourceMappingURL=chunk-KSTZIULO.js.map
+//# sourceMappingURL=chunk-K2I6XIK5.js.map

package/dist/{chunk-DRCLNYH7.js → chunk-NXNVTXKG.js}

@@ -1,13 +1,13 @@
 import {
   assertTenantId
 } from "./chunk-6DWFJNIK.js";
-import {
-  JOB_ORCHESTRATOR
-} from "./chunk-ZPL74UQN.js";
 import {
   JobHandler,
   JobHandlerBase
 } from "./chunk-CO6LUM72.js";
+import {
+  JOB_ORCHESTRATOR
+} from "./chunk-ZPL74UQN.js";
 import {
   BRIDGE_DELIVERY_REPO,
   BRIDGE_MULTI_TENANT,
@@ -118,4 +118,4 @@ export {
   BRIDGE_DELIVERY_JOB_TYPE,
   BridgeDeliveryHandler
 };
-//# sourceMappingURL=chunk-DRCLNYH7.js.map
+//# sourceMappingURL=chunk-NXNVTXKG.js.map

package/dist/{chunk-BHZP6LOV.js → chunk-QSJ3J4HE.js}

@@ -1,19 +1,19 @@
-import {
-  MemoryJobStore
-} from "./chunk-SNQ3TOWP.js";
-import {
-  MissingTenantIdError
-} from "./chunk-T4BIIU5E.js";
 import {
   clampLimit,
   decodeKeysetCursor,
   encodeKeysetCursor,
   toJobRunSummary
 } from "./chunk-L3LZWWSX.js";
+import {
+  MemoryJobStore
+} from "./chunk-SNQ3TOWP.js";
 import {
   JOBS_MULTI_TENANT,
   JOB_ORCHESTRATOR
 } from "./chunk-ZPL74UQN.js";
+import {
+  MissingTenantIdError
+} from "./chunk-T4BIIU5E.js";
 import {
   __decorateClass,
   __decorateParam
@@ -209,4 +209,4 @@ function compareBy(a, b, order) {
 export {
   MemoryJobRunService
 };
-//# sourceMappingURL=chunk-BHZP6LOV.js.map
+//# sourceMappingURL=chunk-QSJ3J4HE.js.map

package/dist/{chunk-BK5ICA2F.js → chunk-RUSUZZAF.js}

@@ -1,12 +1,12 @@
+import {
+  MemoryStorageBackend
+} from "./chunk-3SZFUTXE.js";
 import {
   STORAGE
 } from "./chunk-NYBCQZC7.js";
 import {
   LocalStorageBackend
 } from "./chunk-JWNHNUYL.js";
-import {
-  MemoryStorageBackend
-} from "./chunk-3SZFUTXE.js";
 import {
   __decorateClass
 } from "./chunk-2E224ZSN.js";
@@ -37,4 +37,4 @@ StorageModule = __decorateClass([
 export {
   StorageModule
 };
-//# sourceMappingURL=chunk-BK5ICA2F.js.map
+//# sourceMappingURL=chunk-RUSUZZAF.js.map

package/dist/{chunk-BULPAAD3.js → chunk-T4YJRD22.js}

@@ -4,6 +4,9 @@ import {
 import {
   MemoryJobStore
 } from "./chunk-SNQ3TOWP.js";
+import {
+  JOBS_MULTI_TENANT
+} from "./chunk-ZPL74UQN.js";
 import {
   JobCollisionError,
   JobNotReplayableError,
@@ -11,9 +14,6 @@ import {
   JobTypeNotFoundError,
   MissingTenantIdError
 } from "./chunk-T4BIIU5E.js";
-import {
-  JOBS_MULTI_TENANT
-} from "./chunk-ZPL74UQN.js";
 import {
   __decorateClass,
   __decorateParam
@@ -632,4 +632,4 @@ function serialiseError(err, attempt, retryable) {
 export {
   MemoryJobOrchestrator
 };
-//# sourceMappingURL=chunk-BULPAAD3.js.map
+//# sourceMappingURL=chunk-T4YJRD22.js.map

package/dist/{chunk-YLPAPPLW.js → chunk-TIZXQU26.js}

@@ -3,6 +3,11 @@ var WebhookChangeSource = class {
   label;
   queue;
   externalIdSourceField;
+  /**
+   * Record field carrying the event id, when `webhook.eventIdField` is
+   * configured. Used only as the fallback when the queue iterator does NOT
+   * yield an `eventId` — see {@link WebhookFetchCallback} for the precedence.
+   */
   eventIdSourceField;
   composed;
   constructor(opts) {
@@ -39,19 +44,18 @@ var WebhookChangeSource = class {
       subscription,
       cursor
     };
-    for await (const { record, cursor: nextCursor } of this.queue(ctx)) {
+    for await (const {
+      record,
+      eventId: yieldedEventId,
+      cursor: nextCursor
+    } of this.queue(ctx)) {
       const externalIdRaw = record[this.externalIdSourceField];
       if (typeof externalIdRaw !== "string" || externalIdRaw.length === 0) {
         throw new Error(
           `WebhookChangeSource: record missing string '${this.externalIdSourceField}' \u2014 emitted records MUST carry the canonical external id keyed by the mapping source`
         );
       }
-      const eventIdRaw = record[this.eventIdSourceField];
-      if (typeof eventIdRaw !== "string" || eventIdRaw.length === 0) {
-        throw new Error(
-          `WebhookChangeSource: record missing string '${this.eventIdSourceField}' \u2014 webhook records MUST carry the event id (DetectionConfig.webhook.eventIdField) so Change<T>.dedupKey can be populated`
-        );
-      }
+      const dedupKey = this.deriveDedupKey(yieldedEventId, record);
       const change = {
         externalId: externalIdRaw,
         // Webhook mode cannot distinguish create vs. update vs. delete on
@@ -62,14 +66,37 @@ var WebhookChangeSource = class {
         record,
         cursor: nextCursor ?? null,
         source: "webhook",
-        dedupKey: eventIdRaw
+        dedupKey
       };
       yield change;
     }
   }
+  /**
+   * Resolve `Change<T>.dedupKey` with the precedence: yielded `eventId` >
+   * `webhook.eventIdField` record extraction > `undefined`. A non-empty
+   * yielded `eventId` always wins; otherwise the configured field is read off
+   * the record (and must be a non-empty string when the field is configured);
+   * with neither, `dedupKey` is `undefined` (the orchestrator then has no
+   * delivery-level dedup signal for this change).
+   */
+  deriveDedupKey(yieldedEventId, record) {
+    if (yieldedEventId !== void 0 && yieldedEventId.length > 0) {
+      return yieldedEventId;
+    }
+    if (this.eventIdSourceField === void 0) {
+      return void 0;
+    }
+    const eventIdRaw = record[this.eventIdSourceField];
+    if (typeof eventIdRaw !== "string" || eventIdRaw.length === 0) {
+      throw new Error(
+        `WebhookChangeSource: record missing string '${this.eventIdSourceField}' \u2014 a webhook record MUST carry the event id (DetectionConfig.webhook.eventIdField) so Change<T>.dedupKey can be populated, unless the queue iterator yields an 'eventId' alongside the record`
+      );
+    }
+    return eventIdRaw;
+  }
 };
 
 export {
   WebhookChangeSource
 };
-//# sourceMappingURL=chunk-YLPAPPLW.js.map
+//# sourceMappingURL=chunk-TIZXQU26.js.map

package/dist/chunk-TIZXQU26.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../runtime/subsystems/integration/webhook-change-source.ts"],"sourcesContent":["/**\n * Integration subsystem — `WebhookChangeSource<T>` primitive (#226-4, ADR-033).\n *\n * Generic webhook-mode `IChangeSource<T>` implementation parameterized by a\n * parsed `DetectionConfig` (webhook mode) and a consumer-supplied\n * `WebhookFetchCallback<T>` that iterates a consumer-owned inbound staging\n * queue. The primitive owns:\n *\n *   - canonical `Change<T>.source = 'webhook'` stamping;\n *   - `dedupKey` derivation, preferring the `eventId` yielded alongside the\n *     record by the queue iterator, and falling back to the configured\n *     `webhook.eventIdField` on the emitted record when no `eventId` is yielded\n *     (precedence: yielded `eventId` > `eventIdField` record extraction >\n *     undefined `dedupKey`);\n *   - `externalId` derivation: the mapping entry whose `target === 'external_id'`\n *     names — via its `source` — the field on the emitted record that carries\n *     the canonical external id (mirrors `PollChangeSource`);\n *   - middleware-chain composition via the locked `ChangeMiddleware<T>` shape\n *     (#226-1) — same composition seam as the poll primitive.\n *\n * The primitive is **passive**: it iterates whatever the consumer-owned\n * queue yields. It does NOT synchronously drive the orchestrator, does NOT\n * own a transport, and does NOT manage acks. The inbound staging table\n * schema is consumer-owned and deferred per ADR-0002 §Phase 4 — the\n * `WebhookFetchCallback<T>` is the queue contract the consumer injects.\n *\n * Shape locks (decision memo Q5, mirrored from poll primitive):\n *   - `WebhookFetchContext = { subscription, cursor }` — explicitly NO\n *     `userId` / `tenantId`. Run-scope identity is closed over by the\n *     consumer at queue construction or resolved inside the callback via\n *     consumer services. There are no `filters` on the webhook context —\n *     filtering is done at registration / on the staging row, not at the\n *     port seam (the queue is already filtered by the time the primitive\n *     iterates).\n *\n * Long-lived streaming CDC primitives (SFDC Pub-Sub gRPC, Debezium/Kafka,\n * Postgres logical replication) are deferred to `#226-8` — they need a\n * fundamentally different lifecycle (`subscribe(onChange, onError)`,\n * server-paced backpressure, ack-on-yield) and shouldn't be retrofitted\n * into either this primitive or the poll primitive.\n */\n\nimport type { DetectionConfig } from \"./detection-config.schema\";\nimport type {\n\tChange,\n\tIChangeSource,\n\tIntegrationSubscriptionView,\n} from \"./integration-change-source.protocol\";\nimport type {\n\tChangeIterator,\n\tChangeMiddleware,\n} from \"./integration-middleware.protocol\";\n\n// ============================================================================\n// Cursor + queue callback shapes\n// ============================================================================\n\n/**\n * Opaque webhook cursor shape. Webhook mode typically has a cursor of\n * `{ ts: ISO-string }` (last drained staging-row timestamp) but the\n * primitive treats it as opaque. Consumer-owned queue iterators interpret\n * it however the staging schema needs.\n */\nexport type WebhookCursor = unknown;\n\n/**\n * Context the primitive forwards to the queue iterator. Locked to exactly\n * two fields per the same Q5 reasoning that locks `PollFetchContext` — no\n * `userId` / `tenantId`.\n */\nexport interface WebhookFetchContext {\n\treadonly subscription: IntegrationSubscriptionView;\n\treadonly cursor: WebhookCursor | null;\n}\n\n/**\n * Consumer-supplied queue iterator. Returns an async iterable of\n * `{ record, eventId?, cursor? }` tuples — the consumer drains the inbound\n * staging queue and emits already-mapped canonical records `T`. The primitive\n * stamps `source: 'webhook'` and derives `dedupKey` with this precedence:\n *\n *   1. the yielded `eventId` (vendor delivery metadata — the queue is the\n *      right channel for it: a vendor's event id should never need a field\n *      on the vendor-neutral canonical record);\n *   2. else the record field named by `webhook.eventIdField`, when configured;\n *   3. else `undefined`.\n *\n * Yielding `eventId` is the safe channel when one canonical record identity\n * (the `external_id`) can recur across distinct vendor events in a single\n * drain batch — e.g. a message create and its later edit share an\n * `external_id` but are different events. Reading dedup identity off the\n * record (`eventIdField`) collapses those into one `dedupKey`; the yielded\n * `eventId` keeps them distinct. The consumer is the one who decided when a\n * staging row is \"ready\" to drain.\n *\n * Webhook mode has no per-record cursor advance — the staging-row drain\n * order is consumer policy (FIFO by ingestion timestamp, by event id, etc.)\n * and is opaque to the primitive. The orchestrator's last-yielded cursor\n * is whatever the consumer chooses to surface, if anything.\n */\nexport type WebhookFetchCallback<T> = (\n\tctx: WebhookFetchContext,\n) => AsyncIterable<{ record: T; eventId?: string; cursor?: WebhookCursor }>;\n\n// ============================================================================\n// Constructor options\n// ============================================================================\n\nexport interface WebhookChangeSourceOptions<T> {\n\t/** Consumer-supplied inbound queue iterator. */\n\treadonly queue: WebhookFetchCallback<T>;\n\t/**\n\t * Parsed detection config. MUST be `mode: 'webhook'`; the constructor\n\t * throws if a poll config is supplied. Codegen-emitted factories call\n\t * `DetectionConfigSchema.parse(...)` upstream so this is a safety net,\n\t * not the primary validation point.\n\t */\n\treadonly config: DetectionConfig;\n\t/**\n\t * Optional middleware chain. Same shape and composition rules as\n\t * `PollChangeSource` — first element is the outermost layer.\n\t */\n\treadonly middlewares?: ReadonlyArray<ChangeMiddleware<T>>;\n\t/**\n\t * Optional human label for run logs (e.g. `'stripe-webhook-charge'`).\n\t * Defaults to a derived label based on the mapping at construction.\n\t */\n\treadonly label?: string;\n}\n\n// ============================================================================\n// WebhookChangeSource<T>\n// ============================================================================\n\nexport class WebhookChangeSource<T> implements IChangeSource<T> {\n\tpublic readonly label: string;\n\n\tprivate readonly queue: WebhookFetchCallback<T>;\n\tprivate readonly externalIdSourceField: string;\n\t/**\n\t * Record field carrying the event id, when `webhook.eventIdField` is\n\t * configured. Used only as the fallback when the queue iterator does NOT\n\t * yield an `eventId` — see {@link WebhookFetchCallback} for the precedence.\n\t */\n\tprivate readonly eventIdSourceField: string | undefined;\n\tprivate readonly composed: ChangeIterator<T>;\n\n\tconstructor(opts: WebhookChangeSourceOptions<T>) {\n\t\tif (opts.config.mode !== \"webhook\") {\n\t\t\tthrow new Error(\n\t\t\t\t`WebhookChangeSource requires DetectionConfig.mode === 'webhook'; got '${(opts.config as { mode: string }).mode}'`,\n\t\t\t);\n\t\t}\n\t\tconst config = opts.config;\n\n\t\t// Field mapping: locate the entry whose canonical `target` is `external_id`\n\t\t// — mirrors the poll primitive's contract. Adapters emit records\n\t\t// already-mapped; the primitive needs to know which key on T carries the\n\t\t// external id so it can stamp `Change.externalId`. That key is the\n\t\t// mapping's `source` (the field on the emitted record), NOT its `target`\n\t\t// (the canonical column) — they differ whenever the canonical record is\n\t\t// vendor-neutral camelCase (e.g. `source: 'externalId'` → `target: 'external_id'`).\n\t\tconst externalIdMapping = config.mapping.find(\n\t\t\t(m) => m.target === \"external_id\",\n\t\t);\n\t\tif (!externalIdMapping) {\n\t\t\tthrow new Error(\n\t\t\t\t\"WebhookChangeSource: DetectionConfig.mapping must include an entry with target 'external_id' so emitted Change<T>.externalId can be populated\",\n\t\t\t);\n\t\t}\n\t\tthis.externalIdSourceField = externalIdMapping.source;\n\t\tthis.eventIdSourceField = config.webhook.eventIdField;\n\t\t// `eventIdField` is optional (a callback that always yields `eventId` need\n\t\t// not declare one); `undefined` here just disables the fallback extraction.\n\n\t\tthis.queue = opts.queue;\n\n\t\tthis.label =\n\t\t\topts.label ?? `webhook-change-source:${externalIdMapping.source}`;\n\n\t\t// Compose middleware chain — same shape as PollChangeSource.\n\t\tconst inner: ChangeIterator<T> = (sub, cur) => this.fetch(sub, cur);\n\t\tconst middlewares = opts.middlewares ?? [];\n\t\tthis.composed = middlewares.reduceRight<ChangeIterator<T>>(\n\t\t\t(next, mw) => mw(next),\n\t\t\tinner,\n\t\t);\n\t}\n\n\tlistChanges(\n\t\tsubscription: IntegrationSubscriptionView,\n\t\tcursor: unknown | null,\n\t): AsyncIterable<Change<T>> {\n\t\treturn this.composed(subscription, cursor);\n\t}\n\n\tprivate async *fetch(\n\t\tsubscription: IntegrationSubscriptionView,\n\t\tcursor: unknown | null,\n\t): AsyncIterable<Change<T>> {\n\t\tconst ctx: WebhookFetchContext = {\n\t\t\tsubscription,\n\t\t\tcursor: cursor as WebhookCursor | null,\n\t\t};\n\n\t\tfor await (const {\n\t\t\trecord,\n\t\t\teventId: yieldedEventId,\n\t\t\tcursor: nextCursor,\n\t\t} of this.queue(ctx)) {\n\t\t\tconst externalIdRaw = (record as Record<string, unknown>)[\n\t\t\t\tthis.externalIdSourceField\n\t\t\t];\n\t\t\tif (typeof externalIdRaw !== \"string\" || externalIdRaw.length === 0) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`WebhookChangeSource: record missing string '${this.externalIdSourceField}' — emitted records MUST carry the canonical external id keyed by the mapping source`,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\t// dedupKey precedence: yielded `eventId` > `eventIdField` record\n\t\t\t// extraction > undefined. The yielded id is vendor delivery metadata\n\t\t\t// (the right channel for it), and keeps distinct vendor events for the\n\t\t\t// same `external_id` (e.g. a message and its edit) from collapsing to\n\t\t\t// one dedupKey — which a record-field extraction would do.\n\t\t\tconst dedupKey = this.deriveDedupKey(yieldedEventId, record);\n\n\t\t\tconst change: Change<T> = {\n\t\t\t\texternalId: externalIdRaw,\n\t\t\t\t// Webhook mode cannot distinguish create vs. update vs. delete on\n\t\t\t\t// its own — the orchestrator's diff stage handles classification.\n\t\t\t\t// Tombstone / soft-delete detection is consumer-driven (same as\n\t\t\t\t// poll mode — see ADR-033).\n\t\t\t\toperation: \"updated\",\n\t\t\t\trecord,\n\t\t\t\tcursor: nextCursor ?? null,\n\t\t\t\tsource: \"webhook\",\n\t\t\t\tdedupKey,\n\t\t\t};\n\t\t\tyield change;\n\t\t}\n\t}\n\n\t/**\n\t * Resolve `Change<T>.dedupKey` with the precedence: yielded `eventId` >\n\t * `webhook.eventIdField` record extraction > `undefined`. A non-empty\n\t * yielded `eventId` always wins; otherwise the configured field is read off\n\t * the record (and must be a non-empty string when the field is configured);\n\t * with neither, `dedupKey` is `undefined` (the orchestrator then has no\n\t * delivery-level dedup signal for this change).\n\t */\n\tprivate deriveDedupKey(\n\t\tyieldedEventId: string | undefined,\n\t\trecord: T,\n\t): string | undefined {\n\t\tif (yieldedEventId !== undefined && yieldedEventId.length > 0) {\n\t\t\treturn yieldedEventId;\n\t\t}\n\t\tif (this.eventIdSourceField === undefined) {\n\t\t\treturn undefined;\n\t\t}\n\t\tconst eventIdRaw = (record as Record<string, unknown>)[\n\t\t\tthis.eventIdSourceField\n\t\t];\n\t\tif (typeof eventIdRaw !== \"string\" || eventIdRaw.length === 0) {\n\t\t\tthrow new Error(\n\t\t\t\t`WebhookChangeSource: record missing string '${this.eventIdSourceField}' — a webhook record MUST carry the event id (DetectionConfig.webhook.eventIdField) so Change<T>.dedupKey can be populated, unless the queue iterator yields an 'eventId' alongside the record`,\n\t\t\t);\n\t\t}\n\t\treturn eventIdRaw;\n\t}\n}\n"],"mappings":";AAsIO,IAAM,sBAAN,MAAyD;AAAA,EAC/C;AAAA,EAEC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA;AAAA,EACA;AAAA,EAEjB,YAAY,MAAqC;AAChD,QAAI,KAAK,OAAO,SAAS,WAAW;AACnC,YAAM,IAAI;AAAA,QACT,yEAA0E,KAAK,OAA4B,IAAI;AAAA,MAChH;AAAA,IACD;AACA,UAAM,SAAS,KAAK;AASpB,UAAM,oBAAoB,OAAO,QAAQ;AAAA,MACxC,CAAC,MAAM,EAAE,WAAW;AAAA,IACrB;AACA,QAAI,CAAC,mBAAmB;AACvB,YAAM,IAAI;AAAA,QACT;AAAA,MACD;AAAA,IACD;AACA,SAAK,wBAAwB,kBAAkB;AAC/C,SAAK,qBAAqB,OAAO,QAAQ;AAIzC,SAAK,QAAQ,KAAK;AAElB,SAAK,QACJ,KAAK,SAAS,yBAAyB,kBAAkB,MAAM;AAGhE,UAAM,QAA2B,CAAC,KAAK,QAAQ,KAAK,MAAM,KAAK,GAAG;AAClE,UAAM,cAAc,KAAK,eAAe,CAAC;AACzC,SAAK,WAAW,YAAY;AAAA,MAC3B,CAAC,MAAM,OAAO,GAAG,IAAI;AAAA,MACrB;AAAA,IACD;AAAA,EACD;AAAA,EAEA,YACC,cACA,QAC2B;AAC3B,WAAO,KAAK,SAAS,cAAc,MAAM;AAAA,EAC1C;AAAA,EAEA,OAAe,MACd,cACA,QAC2B;AAC3B,UAAM,MAA2B;AAAA,MAChC;AAAA,MACA;AAAA,IACD;AAEA,qBAAiB;AAAA,MAChB;AAAA,MACA,SAAS;AAAA,MACT,QAAQ;AAAA,IACT,KAAK,KAAK,MAAM,GAAG,GAAG;AACrB,YAAM,gBAAiB,OACtB,KAAK,qBACN;AACA,UAAI,OAAO,kBAAkB,YAAY,cAAc,WAAW,GAAG;AACpE,cAAM,IAAI;AAAA,UACT,+CAA+C,KAAK,qBAAqB;AAAA,QAC1E;AAAA,MACD;AAOA,YAAM,WAAW,KAAK,eAAe,gBAAgB,MAAM;AAE3D,YAAM,SAAoB;AAAA,QACzB,YAAY;AAAA;AAAA;AAAA;AAAA;AAAA,QAKZ,WAAW;AAAA,QACX;AAAA,QACA,QAAQ,cAAc;AAAA,QACtB,QAAQ;AAAA,QACR;AAAA,MACD;AACA,YAAM;AAAA,IACP;AAAA,EACD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUQ,eACP,gBACA,QACqB;AACrB,QAAI,mBAAmB,UAAa,eAAe,SAAS,GAAG;AAC9D,aAAO;AAAA,IACR;AACA,QAAI,KAAK,uBAAuB,QAAW;AAC1C,aAAO;AAAA,IACR;AACA,UAAM,aAAc,OACnB,KAAK,kBACN;AACA,QAAI,OAAO,eAAe,YAAY,WAAW,WAAW,GAAG;AAC9D,YAAM,IAAI;AAAA,QACT,+CAA+C,KAAK,kBAAkB;AAAA,MACvE;AAAA,IACD;AACA,WAAO;AAAA,EACR;AACD;","names":[]}