@pattern-stack/codegen 0.22.0 → 0.23.0

package/CHANGELOG.md

@@ -4,6 +4,39 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+### Fixed
+
+- **Jobs: claim heartbeat (CLAIM-HB-1) — long-running handlers are no longer
+  swept mid-flight.** The drizzle `JobWorker` stamped `claimed_at` once at claim
+  and never renewed it, while `sweepStaleClaims` reset any `running` row whose
+  `claimed_at` aged past `staleThresholdMs` (default 5 min) back to `pending`.
+  Consequence: ANY handler that legitimately ran longer than the threshold was
+  silently re-queued and re-claimed by a second worker, running CONCURRENTLY
+  with the still-live (uncancellable) original. Discovered by the swe-brain
+  dogfood: a 365-day Gmail backfill could never finish inside 5 min, so it
+  re-spawned a fresh concurrent mailbox walk every ~6 min for 5 days (writes
+  were idempotent upserts, so no corruption — but a non-idempotent handler would
+  have corrupted). Fix: a live worker now tracks its in-flight run IDs and bumps
+  `claimed_at = now()` for them every `claimHeartbeatIntervalMs` (new
+  `JobWorkerOptions` knob, default `staleThresholdMs / 3`). The sweeper now
+  fires only for genuinely dead workers (renewal stopped) — its documented
+  "stranded by a crashed worker" intent.
+
+### Added
+
+- **Jobs: consumer-threadable lease tuning.** `jobs.extensions.drizzle` now
+  accepts `stale_threshold_ms`, `stale_sweeper_interval_ms`, and
+  `claim_heartbeat_interval_ms`, threaded through the subsystem barrel generator
+  into both `JobsDomainModule.forRoot` and `JobWorkerModule.forRoot` (camelCase
+  runtime keys). All optional; the worker defaults the heartbeat to a third of
+  the stale threshold.
+
+> **Deferred (CLAIM-HB-1 follow-up):** fencing — a claim token on `job_run` so a
+> swept-and-reclaimed run cannot be double-completed by a zombie attempt that
+> finishes after the sweep. Needs a schema/migration change + write-site guards;
+> tracked as issue #501. The heartbeat closes the practical
+> re-claim-loop bug; fencing hardens the residual crash-recovery race.
+
 ## [0.21.0] — 2026-06-06
 
 **FieldMeta enrichment (ADR-040, Phase A of type-aware rendering).** The

package/dist/{chunk-NR7QQ6ZI.js → chunk-42763UEE.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-DUUCU77W.js";
 import {
   DrizzleEventBus
-} from "./chunk-DB5UXJC3.js";
+} from "./chunk-PNCOUFFI.js";
 import {
   MemoryEventBus
 } from "./chunk-GOO5ZMYO.js";
@@ -200,4 +200,4 @@ export {
   EventSchedulerLifecycle,
   EventsModule
 };
-//# sourceMappingURL=chunk-NR7QQ6ZI.js.map
+//# sourceMappingURL=chunk-42763UEE.js.map

package/dist/{chunk-6ECCJVYW.js → chunk-4M66MQYA.js}

@@ -396,9 +396,15 @@ var ProviderIntegrationSchema = z.object({
   field_mapping: z.record(z.string(), z.string()).optional(),
   read_only_fields: z.array(z.string()).optional()
 });
+var SinkPolicySchema = z.object({
+  delete: z.enum(["soft", "tombstone", "noop"]).optional(),
+  // NO .default() — see default fence in spec §Goal
+  exclude_fields: z.array(z.string()).optional()
+}).strict();
 var IntegrationConfigSchema = z.object({
   electric: z.boolean().optional().default(false),
-  providers: z.record(z.string(), ProviderIntegrationSchema).optional()
+  providers: z.record(z.string(), ProviderIntegrationSchema).optional(),
+  sink: SinkPolicySchema.optional()
 });
 var EventDeclarationSchema = z.object({
   name: z.string().regex(/^[a-z][a-z0-9_]*$/, "Event name must be snake_case"),
@@ -567,6 +573,42 @@ var EntityDefinitionSchema = z.object({
       });
     }
   }
+}).superRefine((entity, ctx) => {
+  const excludeFields = entity.integration?.sink?.exclude_fields;
+  if (!excludeFields || excludeFields.length === 0) return;
+  const declaredFields = new Set(Object.keys(entity.fields ?? {}));
+  const fkColumns = /* @__PURE__ */ new Set();
+  for (const rel of Object.values(entity.relationships ?? {})) {
+    if (rel.type === "belongs_to" && typeof rel.foreign_key === "string") {
+      fkColumns.add(rel.foreign_key);
+    }
+  }
+  for (let i = 0; i < excludeFields.length; i++) {
+    const name = excludeFields[i];
+    if (!declaredFields.has(name)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["integration", "sink", "exclude_fields", i],
+        message: `exclude_fields: '${name}' is not a declared field. Declared fields: ${[...declaredFields].join(", ")}`
+      });
+      continue;
+    }
+    if (fkColumns.has(name)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["integration", "sink", "exclude_fields", i],
+        message: `exclude_fields: '${name}' is a FK column (belongs_to foreign_key). Excluding FK columns corrupts the FK-resolver path \u2014 exclude FK columns is not supported. Declare it in exclude_fields only for copy-through scalars.`
+      });
+      continue;
+    }
+    if (name === "user_id") {
+      ctx.addIssue({
+        code: "custom",
+        path: ["integration", "sink", "exclude_fields", i],
+        message: `exclude_fields: 'user_id' cannot be excluded. It is used for user-scoping and EAV dual-write; excluding it would break those mechanisms.`
+      });
+    }
+  }
 });
 
 // src/schema/event-definition.schema.ts
@@ -4305,4 +4347,4 @@ export {
   analyzeDomain,
   validateEntities
 };
-//# sourceMappingURL=chunk-6ECCJVYW.js.map
+//# sourceMappingURL=chunk-4M66MQYA.js.map