@pattern-stack/codegen 0.7.1 → 0.7.3

package/dist/runtime/subsystems/sync/sync.module.js

@@ -561,6 +561,10 @@ var DEFAULT_IGNORE_FIELDS = /* @__PURE__ */ new Set([
   "type",
   "lastModifiedAt",
   "fields",
+  "external_id",
+  "externalId",
+  "provider",
+  "provider_metadata",
   "providerMetadata"
 ]);
 var DeepEqualDiffer = class {

package/dist/runtime/subsystems/sync/sync.module.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../runtime/subsystems/sync/sync.module.ts","../../../../runtime/subsystems/sync/sync.tokens.ts","../../../../runtime/subsystems/sync/sync-cursor-store.memory-backend.ts","../../../../runtime/subsystems/sync/sync-run-recorder.memory-backend.ts","../../../../runtime/subsystems/sync/sync-field-diff.protocol.ts","../../../../runtime/subsystems/sync/sync-cursor-store.drizzle-backend.ts","../../../../runtime/constants/tokens.ts","../../../../runtime/subsystems/sync/sync-audit.schema.ts","../../../../runtime/subsystems/sync/sync-errors.ts","../../../../runtime/subsystems/sync/sync-run-recorder.drizzle-backend.ts","../../../../runtime/subsystems/sync/deep-equal.differ.ts"],"sourcesContent":["/**\n * SyncModule — `DynamicModule.forRoot({ backend, multiTenant? })` factory\n * wiring the sync subsystem's substrate (SYNC-6, ADR-008 subsystem pattern).\n *\n * ## What this module provides\n *\n *   - `SYNC_CURSOR_STORE`    — Drizzle or Memory cursor store\n *   - `SYNC_RUN_RECORDER`    — Drizzle or Memory run recorder\n *   - `SYNC_FIELD_DIFFER`    — default `DeepEqualDiffer`\n *   - `SYNC_MULTI_TENANT`    — resolved boolean flag (defaults to false)\n *   - `SYNC_MODULE_OPTIONS`  — the options object itself, for backends\n *     that need to inspect config at construction time\n *\n * ## What this module does NOT provide\n *\n *   - `SYNC_CHANGE_SOURCE` — per-provider per-entity; consumer binds in\n *     their feature module (e.g. `OpportunitySyncModule` provides a\n *     `SalesforceOpportunityChangeSource`). Loopback suppression — when\n *     needed — is composed into the primitive's middleware chain via\n *     `createLoopbackMiddleware(store)` (#226-5 / ADR-033); the\n *     orchestrator no longer accepts a fingerprint store directly.\n *   - `SYNC_SINK` — per canonical entity; consumer binds in their feature\n *     module.\n *   - `ExecuteSyncUseCase` — registered by the feature module alongside\n *     its source + sink bindings. Providing the orchestrator here would\n *     force Nest to resolve SYNC_CHANGE_SOURCE + SYNC_SINK at module\n *     compile time, which fails when the feature module hasn't been\n *     imported yet. Consumers register `ExecuteSyncUseCase` in the same\n *     `providers` array as their source + sink so resolution is local\n *     to where all three are bound.\n *\n * Same shape as `EventsModule.forRoot` — the module wires the bus; you\n * bring your own handlers. Here: the module wires the substrate; you\n * bring your own source + sink.\n *\n * ## Usage\n *\n * ```ts\n * // AppModule — single source of truth for backend + multi-tenancy.\n * @Module({\n *   imports: [SyncModule.forRoot({ backend: 'drizzle' })],\n * })\n * export class AppModule {}\n *\n * // Per-entity feature module — binds source + sink, gets the\n * // orchestrator for free.\n * @Module({\n *   providers: [\n *     { provide: SYNC_CHANGE_SOURCE, useClass: SalesforceOpportunitySource },\n *     { provide: SYNC_SINK,          useClass: OpportunitySyncSink },\n *     ExecuteSyncUseCase,\n *   ],\n * })\n * export class OpportunitySyncModule {\n *   constructor(\n *     private readonly execute: ExecuteSyncUseCase<CanonicalOpportunity>,\n *   ) {}\n * }\n * ```\n *\n * `global: true` means feature modules do not need to re-import\n * `SyncModule` — the substrate tokens are available project-wide.\n */\nimport { Module, type DynamicModule, type Provider } from '@nestjs/common';\nimport {\n  SYNC_CURSOR_STORE,\n  SYNC_FIELD_DIFFER,\n  SYNC_MODULE_OPTIONS,\n  SYNC_MULTI_TENANT,\n  SYNC_RUN_RECORDER,\n} from './sync.tokens';\nimport { MemoryCursorStore } from './sync-cursor-store.memory-backend';\nimport { MemoryRunRecorder } from './sync-run-recorder.memory-backend';\nimport { PostgresCursorStore } from './sync-cursor-store.drizzle-backend';\nimport { DrizzleSyncRunRecorder } from './sync-run-recorder.drizzle-backend';\nimport { DeepEqualDiffer } from './deep-equal.differ';\n\nexport interface SyncModuleOptions {\n  /**\n   * Backend selection. `drizzle` wires the Postgres cursor store +\n   * run-log recorder; `memory` wires in-memory doubles suitable for\n   * tests + local dev.\n   */\n  backend: 'drizzle' | 'memory';\n\n  /**\n   * Multi-tenancy opt-in (SYNC-6).\n   *\n   * When `true`, every call to the orchestrator + both Drizzle backends\n   * must supply a non-null `tenantId`; missing values throw\n   * `MissingTenantIdError`. Defense-in-depth: the orchestrator rejects\n   * at entry (no dangling `status=running` rows) AND the Drizzle\n   * backends reject at their write boundary (belt-and-braces for any\n   * path that bypasses the orchestrator). Both sites use the shared\n   * `assertTenantId` helper so error messages match.\n   *\n   * Memory backends accept `tenantId` unconditionally — their state is\n   * process-local; cross-tenant isolation there is not meaningful.\n   *\n   * Defaults to `false`.\n   */\n  multiTenant?: boolean;\n}\n\n@Module({})\nexport class SyncModule {\n  static forRoot(options: SyncModuleOptions): DynamicModule {\n    const multiTenant = options.multiTenant ?? false;\n\n    const sharedProviders: Provider[] = [\n      { provide: SYNC_MODULE_OPTIONS, useValue: options },\n      { provide: SYNC_MULTI_TENANT, useValue: multiTenant },\n      // Default differ — consumers can override by binding a different\n      // `IFieldDiffer<T>` to `SYNC_FIELD_DIFFER` in their feature module.\n      { provide: SYNC_FIELD_DIFFER, useValue: new DeepEqualDiffer() },\n    ];\n\n    const backendProviders: Provider[] =\n      options.backend === 'memory'\n        ? [\n            // Wired as singletons via `useValue` so tests can pull\n            // them out via `moduleRef.get(MemoryCursorStore)` for\n            // direct assertions. Matches JOB-4 / MemoryJobStore shape.\n            { provide: MemoryCursorStore, useValue: new MemoryCursorStore() },\n            {\n              provide: SYNC_CURSOR_STORE,\n              useExisting: MemoryCursorStore,\n            },\n            { provide: MemoryRunRecorder, useValue: new MemoryRunRecorder() },\n            {\n              provide: SYNC_RUN_RECORDER,\n              useExisting: MemoryRunRecorder,\n            },\n          ]\n        : [\n            // Drizzle backends — injected with DRIZZLE (provided by the\n            // consumer's DrizzleModule) + the SYNC_MULTI_TENANT flag\n            // we bound above.\n            { provide: SYNC_CURSOR_STORE, useClass: PostgresCursorStore },\n            { provide: SYNC_RUN_RECORDER, useClass: DrizzleSyncRunRecorder },\n          ];\n\n    return {\n      module: SyncModule,\n      global: true,\n      providers: [...sharedProviders, ...backendProviders],\n      exports: [\n        SYNC_MODULE_OPTIONS,\n        SYNC_MULTI_TENANT,\n        SYNC_FIELD_DIFFER,\n        SYNC_CURSOR_STORE,\n        SYNC_RUN_RECORDER,\n      ],\n    };\n  }\n}\n","/**\n * Sync subsystem — DI tokens\n *\n * String constants (not Symbols) so they match by value across import\n * boundaries — same convention as the events subsystem (`EVENT_BUS`). The\n * jobs subsystem uses Symbols for its analogous tokens; events and sync\n * stay internally consistent with strings.\n *\n * Usage in use cases:\n * ```ts\n * constructor(\n *   @Inject(SYNC_CHANGE_SOURCE) private readonly source: IChangeSource<CanonicalOpportunity>,\n *   @Inject(SYNC_CURSOR_STORE)  private readonly cursors: ICursorStore,\n *   @Inject(SYNC_FIELD_DIFFER)  private readonly differ: IFieldDiffer<CanonicalOpportunity>,\n *   @Inject(SYNC_SINK)          private readonly sink: ISyncSink<CanonicalOpportunity>,\n *   @Inject(SYNC_RUN_RECORDER)  private readonly recorder: ISyncRunRecorder,\n * ) {}\n * ```\n *\n * Concrete bindings are registered by `SyncModule.forRoot(...)` (SYNC-6).\n */\n\nexport const SYNC_CHANGE_SOURCE = 'SYNC_CHANGE_SOURCE' as const;\nexport const SYNC_CURSOR_STORE = 'SYNC_CURSOR_STORE' as const;\nexport const SYNC_FIELD_DIFFER = 'SYNC_FIELD_DIFFER' as const;\nexport const SYNC_SINK = 'SYNC_SINK' as const;\n\n/**\n * Run-recorder token (SYNC-5). Backed by `ISyncRunRecorder`. Drizzle impl\n * lands in SYNC-4; tests provide inline fakes.\n */\nexport const SYNC_RUN_RECORDER = 'SYNC_RUN_RECORDER' as const;\n\n/**\n * Injection token for the resolved `SyncModuleOptions` object (SYNC-6).\n *\n * Backends that need to observe module configuration (e.g. `multiTenant`\n * flag, pool filters) inject via this token. Provided automatically by\n * `SyncModule.forRoot(...)` / `SyncModule.forRootAsync(...)`.\n */\nexport const SYNC_MODULE_OPTIONS = 'SYNC_MODULE_OPTIONS' as const;\n\n/**\n * Injection token for the resolved multi-tenancy flag (SYNC-6).\n *\n * Provided by `SyncModule.forRoot(...)` as `options.multiTenant ?? false`.\n * Consumed by `ExecuteSyncUseCase` to enforce the tenantId-is-required rule.\n */\nexport const SYNC_MULTI_TENANT = 'SYNC_MULTI_TENANT' as const;\n","/**\n * MemoryCursorStore — in-memory backend for `ICursorStore` (SYNC-3).\n *\n * Test double that lets consumers exercise `ExecuteSyncUseCase` (SYNC-5) and\n * other cursor-consuming code paths without Postgres. Mirrors the role of\n * `MemoryEventBus` and `MemoryJobStore`: plain keyed state, tests take a\n * direct reference for `beforeEach` resets.\n *\n * Cursor values are stored by reference — the port's `get`/`put` contract\n * treats them as opaque `unknown`. Callers that want durable value-equality\n * semantics should snapshot via JSON before `put` and reparse after `get`;\n * this is what the Drizzle backend (SYNC-4) does implicitly via jsonb\n * round-trip. The memory backend intentionally does not simulate the\n * serialize/deserialize cycle — consumers who care should test against\n * Postgres.\n *\n * ## Multi-tenancy\n *\n * `tenantId` is accepted but ignored. The memory backend's state is\n * process-local — there's no durable storage where a cross-tenant leak\n * could occur. Tests that want to assert per-tenant isolation should\n * target the Drizzle backend.\n *\n * Not shipped in the upstream consumer; this is a subsystem-first addition for the\n * test surface. Consumed by:\n *   - SYNC-5 unit tests (`ExecuteSyncUseCase` against synthetic sources)\n *   - SYNC-6 module tests (`SyncModule.forRoot({ backend: 'memory' })`)\n */\nimport { Injectable } from '@nestjs/common';\nimport type {\n  CursorSnapshot,\n  ICursorStore,\n} from './sync-cursor-store.protocol';\nimport type { MemorySyncSubscription } from './sync-run-recorder.memory-backend';\n\n@Injectable()\nexport class MemoryCursorStore implements ICursorStore {\n  /**\n   * Subscription-id → last persisted cursor. Public so tests can inspect\n   * or pre-seed state; production callers MUST go through `get`/`put`.\n   */\n  readonly cursors: Map<string, unknown> = new Map();\n\n  /**\n   * Seedable subscription metadata for `listAll` — the memory backend\n   * stores only `subscriptionId → cursor` in its write path, so the\n   * snapshot shape (`integrationId`, `adapter`, `domain`, `externalRef`,\n   * timestamps) has no natural source without test seeding. Tests populate\n   * this map; unseeded entries get empty-string metadata and `new Date(0)`\n   * timestamps so the shape stays stable. Production paths go through the\n   * Drizzle backend.\n   */\n  readonly subscriptions: Map<string, MemorySyncSubscription> = new Map();\n\n  async get(\n    subscriptionId: string,\n    _tenantId?: string | null,\n  ): Promise<unknown | null> {\n    // `Map.get` returns `undefined` for missing keys; the port contract\n    // returns `null`. Normalize here so callers can `=== null`-check.\n    const value = this.cursors.get(subscriptionId);\n    return value === undefined ? null : value;\n  }\n\n  async put(\n    subscriptionId: string,\n    cursor: unknown,\n    _tenantId?: string | null,\n  ): Promise<void> {\n    // Overwrite semantics — matches the port contract and the Drizzle\n    // backend's `ON CONFLICT DO UPDATE` behavior.\n    this.cursors.set(subscriptionId, cursor);\n  }\n\n  async listAll(_tenantId?: string | null): Promise<CursorSnapshot[]> {\n    // Accepts tenantId for contract symmetry but does not filter on it —\n    // the memory backend never enforces tenancy (see class-level comment).\n    const snapshots: CursorSnapshot[] = [];\n    for (const [subscriptionId, cursor] of this.cursors.entries()) {\n      const meta = this.subscriptions.get(subscriptionId);\n      snapshots.push({\n        subscriptionId,\n        integrationId: meta?.integrationId ?? '',\n        adapter: meta?.adapter ?? '',\n        domain: meta?.domain ?? '',\n        externalRef: meta?.externalRef ?? null,\n        cursor: cursor ?? null,\n        lastSyncAt: meta?.lastSyncAt ?? null,\n        updatedAt: meta?.updatedAt ?? new Date(0),\n        tenantId: null,\n      });\n    }\n    return snapshots.sort(\n      (a, b) => b.updatedAt.getTime() - a.updatedAt.getTime(),\n    );\n  }\n\n  /** Reset state. Tests call this in `beforeEach`. */\n  clear(): void {\n    this.cursors.clear();\n    this.subscriptions.clear();\n  }\n}\n","/**\n * MemoryRunRecorder — in-memory backend for `ISyncRunRecorder` (SYNC-6).\n *\n * Test double so `SyncModule.forRoot({ backend: 'memory' })` is genuinely\n * end-to-end runnable without Postgres. Mirrors the role of\n * `MemoryCursorStore`: plain keyed state, `clear()` helper for\n * `beforeEach` resets, public inspection surface so tests can assert on\n * the recorded run + item timeline without scraping logs.\n *\n * Validates `changedFields` through `FieldDiffSchema.parse` on every\n * `recordItem` call — same ADR-0003 contract as the Drizzle backend. An\n * in-memory recorder that skipped the validation would be a silently\n * weaker contract than production.\n *\n * `startRun` generates a uuid via `crypto.randomUUID()` (Node 19+ / Bun).\n * We don't import `uuid` because the subsystem has no other use for it.\n *\n * ## Multi-tenancy\n *\n * `tenantId` is accepted (and recorded on the in-memory row so tests can\n * assert it) but enforcement lives at the module boundary. The memory\n * backend intentionally does not throw on missing `tenantId` — that's\n * the orchestrator's job when `multiTenant=true` (SYNC-6). A permissive\n * memory recorder lets tests exercise error paths where the orchestrator\n * short-circuits before ever reaching the recorder.\n */\nimport { Injectable } from '@nestjs/common';\nimport type {\n  CompleteRunInput,\n  ISyncRunRecorder,\n  RecordItemInput,\n  StartRunInput,\n  SyncRunSummary,\n} from './sync-run-recorder.protocol';\nimport { FieldDiffSchema } from './sync-field-diff.protocol';\n\n/**\n * Optional per-subscription metadata a test can seed on the memory backend\n * so `listRecent` can surface `integrationId`. The memory recorder's write\n * path never persists subscription rows (it only stores runs + items), so\n * `listRecent` has no way to derive `integrationId` on its own. Tests that\n * care about the field should populate `subscriptions` before calling\n * `listRecent`; calls that don't seed get an empty string and a stable\n * shape (see `listRecent` below).\n */\nexport interface MemorySyncSubscription {\n  integrationId: string;\n  adapter: string;\n  domain: string;\n  externalRef: string | null;\n  lastSyncAt?: Date | null;\n  updatedAt: Date;\n}\n\n/**\n * Concrete run row as held in memory. Shape mirrors the interesting\n * columns on `sync_runs` so assertions read like DB queries.\n */\nexport interface MemoryRunRecord {\n  id: string;\n  subscriptionId: string;\n  direction: 'inbound' | 'outbound';\n  action: 'poll' | 'cdc' | 'webhook' | 'manual' | 'writeback';\n  status: 'running' | 'success' | 'no_changes' | 'failed';\n  cursorBefore: unknown | null;\n  cursorAfter: unknown | null;\n  recordsFound: number;\n  recordsProcessed: number;\n  durationMs: number | null;\n  error: string | null;\n  tenantId: string | null;\n  startedAt: Date;\n  completedAt: Date | null;\n}\n\n@Injectable()\nexport class MemoryRunRecorder implements ISyncRunRecorder {\n  /**\n   * All started runs keyed by id. Public so tests can inspect lifecycle\n   * transitions without poking through recording methods.\n   */\n  readonly runs: Map<string, MemoryRunRecord> = new Map();\n\n  /**\n   * Items keyed by `sync_run_id`, array order matches insertion order —\n   * mirrors the timeline the `(sync_run_id, created_at)` index produces\n   * in Postgres.\n   */\n  readonly items: Map<string, RecordItemInput[]> = new Map();\n\n  /**\n   * Seedable subscription metadata — tests populate this to make\n   * `listRecent` return meaningful `integrationId` values. The memory\n   * backend doesn't track subscriptions on its own (only runs + items), so\n   * this map is the intentional extension point: tests write entries for\n   * the subscription ids they use, production code never touches it.\n   */\n  readonly subscriptions: Map<string, MemorySyncSubscription> = new Map();\n\n  async startRun(input: StartRunInput): Promise<{ id: string }> {\n    const id = crypto.randomUUID();\n    this.runs.set(id, {\n      id,\n      subscriptionId: input.subscriptionId,\n      direction: input.direction,\n      action: input.action,\n      status: 'running',\n      cursorBefore: input.cursorBefore ?? null,\n      cursorAfter: null,\n      recordsFound: 0,\n      recordsProcessed: 0,\n      durationMs: null,\n      error: null,\n      tenantId: input.tenantId ?? null,\n      startedAt: new Date(),\n      completedAt: null,\n    });\n    this.items.set(id, []);\n    return { id };\n  }\n\n  async recordItem(input: RecordItemInput): Promise<void> {\n    // Same ADR-0003 contract as the Drizzle backend.\n    FieldDiffSchema.parse(input.changedFields);\n\n    const bucket = this.items.get(input.syncRunId);\n    if (!bucket) {\n      throw new Error(\n        `MemoryRunRecorder.recordItem: no run started for id '${input.syncRunId}'. ` +\n          `Call startRun(...) first.`,\n      );\n    }\n    bucket.push(input);\n  }\n\n  async completeRun(runId: string, input: CompleteRunInput): Promise<void> {\n    const run = this.runs.get(runId);\n    if (!run) {\n      throw new Error(\n        `MemoryRunRecorder.completeRun: no run started for id '${runId}'.`,\n      );\n    }\n    run.status = input.status;\n    run.recordsFound = input.recordsFound;\n    run.recordsProcessed = input.recordsProcessed;\n    run.cursorAfter = input.cursorAfter ?? null;\n    run.durationMs = input.durationMs;\n    run.error = input.error ?? null;\n    run.completedAt = new Date();\n  }\n\n  async listRecent(\n    limit: number,\n    subscriptionId?: string,\n    _tenantId?: string | null,\n  ): Promise<SyncRunSummary[]> {\n    // Memory backend accepts tenantId for contract symmetry but does not\n    // filter on it — state is process-local and cross-tenant isolation is\n    // not meaningful here (matches MemoryCursorStore behavior).\n    const all = Array.from(this.runs.values());\n    const filtered =\n      subscriptionId === undefined\n        ? all\n        : all.filter((r) => r.subscriptionId === subscriptionId);\n    return filtered\n      .sort((a, b) => b.startedAt.getTime() - a.startedAt.getTime())\n      .slice(0, limit)\n      .map((r) => ({\n        id: r.id,\n        subscriptionId: r.subscriptionId,\n        // integrationId is only knowable if the test seeded subscriptions\n        // metadata; empty string otherwise. The Drizzle backend resolves\n        // it via JOIN, which is the production path.\n        integrationId:\n          this.subscriptions.get(r.subscriptionId)?.integrationId ?? '',\n        status: r.status,\n        startedAt: r.startedAt,\n        completedAt: r.completedAt,\n        recordsProcessed: r.recordsProcessed,\n        tenantId: r.tenantId,\n      }));\n  }\n\n  /** Reset state. Tests call this in `beforeEach`. */\n  clear(): void {\n    this.runs.clear();\n    this.items.clear();\n    this.subscriptions.clear();\n  }\n\n  // ─── test ergonomics ─────────────────────────────────────────────────\n\n  /** All runs for a subscription, newest first. Timeline reads. */\n  getRunsForSubscription(subscriptionId: string): MemoryRunRecord[] {\n    return Array.from(this.runs.values())\n      .filter((r) => r.subscriptionId === subscriptionId)\n      .sort((a, b) => b.startedAt.getTime() - a.startedAt.getTime());\n  }\n\n  /** All item rows for a run, insertion-ordered. */\n  getItemsForRun(runId: string): RecordItemInput[] {\n    return this.items.get(runId) ?? [];\n  }\n}\n","/**\n * Sync subsystem — field-diff protocol (port)\n *\n * `IFieldDiffer<T>` is the pluggable differ seam. The default implementation\n * (`DeepEqualDiffer`, ships in SYNC-5) walks every field except an ignore\n * list; CDC-aware differs can skip comparison for fields the provider didn't\n * flag as changed.\n *\n * `FieldDiffSchema` is the structural enforcement of the `changed_fields`\n * column per ADR-0003 — enforced at write time by the recorder service so\n * consumers can rely on the shape in downstream queries.\n */\nimport { z } from 'zod';\n\n// ============================================================================\n// FieldDiff shape — the ADR-0003 contract\n// ============================================================================\n\n/**\n * Structured per-field change. Enforced shape for `sync_run_items.changed_fields`.\n *\n * `created` items set `from: null, to: <value>` for every non-null field.\n * `deleted` items set `from: <value>, to: null`.\n * `noop` items carry `{}`.\n */\nexport const FieldDiffValueSchema = z.object({\n  from: z.unknown(),\n  to: z.unknown(),\n});\n\nexport const FieldDiffSchema = z.record(z.string(), FieldDiffValueSchema);\n\nexport type FieldDiffValue = z.infer<typeof FieldDiffValueSchema>;\nexport type FieldDiff = z.infer<typeof FieldDiffSchema>;\n\n/** Result of comparing a new record against its existing local state. */\nexport type DiffResult = FieldDiff | 'noop';\n\n// ============================================================================\n// IFieldDiffer\n// ============================================================================\n\n/**\n * Pluggable differ. Default ships in SYNC-5 as `DeepEqualDiffer<T>` —\n * deep-equal over every field except an ignore list (`updated_at` and other\n * row metadata). CDC-aware differs restrict comparison to\n * `providerChangedFields` when supplied.\n */\nexport interface IFieldDiffer<T> {\n  /**\n   * @param existing — current local state, or `null` when the record is new\n   * @param incoming — the canonical record coming from the adapter\n   * @param providerChangedFields — optional hint from CDC-capable sources;\n   *   when present, differ may restrict the comparison to these fields\n   */\n  diff(\n    existing: T | null,\n    incoming: T,\n    providerChangedFields?: string[],\n  ): DiffResult;\n}\n","/**\n * PostgresCursorStore — Drizzle-backed `ICursorStore` (SYNC-4).\n *\n * Reads/writes `sync_subscriptions.cursor` directly — no service\n * composition. Consumers that want a service layer around subscriptions\n * wire it themselves; the port's contract is just cursor persistence.\n *\n * ## What `put` stamps\n *\n * `put` writes three columns in one statement: `cursor`, `last_sync_at`,\n * and `updated_at`. Rationale: SYNC-1's scheduling index\n * `(enabled, last_sync_at)` is useless if `last_sync_at` doesn't advance\n * with every cursor put. Every real consumer needs this stamped, so\n * bundling it here avoids every consumer wrapping the port in a service\n * layer just to stamp a timestamp.\n *\n * ## Multi-tenancy\n *\n * When `SYNC_MULTI_TENANT` is true (SYNC-6):\n *   - every read/write is scoped by `AND tenant_id = $tenantId`\n *   - a null/missing `tenantId` throws `MissingTenantIdError` via the\n *     shared `assertTenantId` helper (one message shape across the\n *     orchestrator + both backends, SYNC-6)\n *   - explicit `null` also throws — matches JOB-8 / EVT-6 strict-enforcement\n *\n * When the flag is off, `tenantId` is ignored. Cross-tenant isolation is\n * the caller's problem in single-tenant deployments.\n */\nimport { Inject, Injectable, Optional } from '@nestjs/common';\nimport { and, desc, eq, type SQL } from 'drizzle-orm';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport { DRIZZLE } from '../../constants/tokens';\nimport type {\n  CursorSnapshot,\n  ICursorStore,\n} from './sync-cursor-store.protocol';\nimport { syncSubscriptions } from './sync-audit.schema';\nimport { SYNC_MULTI_TENANT } from './sync.tokens';\nimport { assertTenantId } from './sync-errors';\n\n@Injectable()\nexport class PostgresCursorStore implements ICursorStore {\n  private readonly multiTenant: boolean;\n\n  constructor(\n    @Inject(DRIZZLE) private readonly db: DrizzleClient,\n    @Optional() @Inject(SYNC_MULTI_TENANT) multiTenant?: boolean,\n  ) {\n    this.multiTenant = multiTenant ?? false;\n  }\n\n  async get(\n    subscriptionId: string,\n    tenantId?: string | null,\n  ): Promise<unknown | null> {\n    const where = this.buildWhere(subscriptionId, tenantId, 'cursor.get');\n\n    const rows = await this.db\n      .select({ cursor: syncSubscriptions.cursor })\n      .from(syncSubscriptions)\n      .where(where)\n      .limit(1);\n\n    if (rows.length === 0) return null;\n    return rows[0]?.cursor ?? null;\n  }\n\n  async put(\n    subscriptionId: string,\n    cursor: unknown,\n    tenantId?: string | null,\n  ): Promise<void> {\n    const where = this.buildWhere(subscriptionId, tenantId, 'cursor.put');\n\n    await this.db\n      .update(syncSubscriptions)\n      .set({\n        cursor,\n        lastSyncAt: new Date(),\n        updatedAt: new Date(),\n      })\n      .where(where);\n  }\n\n  async listAll(tenantId?: string | null): Promise<CursorSnapshot[]> {\n    assertTenantId(tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'cursor.listAll',\n    });\n\n    const where = this.multiTenant\n      ? eq(syncSubscriptions.tenantId, tenantId as string)\n      : undefined;\n\n    const rows = await this.db\n      .select({\n        id: syncSubscriptions.id,\n        integrationId: syncSubscriptions.integrationId,\n        adapter: syncSubscriptions.adapter,\n        domain: syncSubscriptions.domain,\n        externalRef: syncSubscriptions.externalRef,\n        cursor: syncSubscriptions.cursor,\n        lastSyncAt: syncSubscriptions.lastSyncAt,\n        updatedAt: syncSubscriptions.updatedAt,\n        tenantId: syncSubscriptions.tenantId,\n      })\n      .from(syncSubscriptions)\n      .where(where)\n      .orderBy(desc(syncSubscriptions.updatedAt));\n\n    return rows.map((row) => ({\n      subscriptionId: row.id,\n      integrationId: row.integrationId,\n      adapter: row.adapter,\n      domain: row.domain,\n      externalRef: row.externalRef,\n      cursor: row.cursor ?? null,\n      lastSyncAt: row.lastSyncAt,\n      updatedAt: row.updatedAt,\n      tenantId: row.tenantId,\n    }));\n  }\n\n  /**\n   * Centralized WHERE clause — `get` and `put` share identical semantics.\n   * Drift here would let a caller read under one tenancy rule and write\n   * under another.\n   */\n  private buildWhere(\n    subscriptionId: string,\n    tenantId: string | null | undefined,\n    operation: string,\n  ): SQL | undefined {\n    assertTenantId(tenantId, {\n      multiTenant: this.multiTenant,\n      operation,\n    });\n    if (this.multiTenant) {\n      return and(\n        eq(syncSubscriptions.id, subscriptionId),\n        eq(syncSubscriptions.tenantId, tenantId as string),\n      );\n    }\n    return eq(syncSubscriptions.id, subscriptionId);\n  }\n}\n","/**\n * NestJS injection tokens\n *\n * Used with @Inject() decorator in concrete repository constructors.\n */\n\n/**\n * Injection token for the Drizzle ORM database client.\n *\n * Usage in concrete repositories:\n * ```typescript\n * constructor(@Inject(DRIZZLE) db: DrizzleClient) { super(db); }\n * ```\n */\nexport const DRIZZLE = 'DRIZZLE' as const;\n\n/**\n * Injection token for the event bus (IEventBus).\n *\n * Optional — only resolved when EventsModule.forRoot() is registered.\n * BaseService uses this with @Optional() to emit lifecycle events\n * without requiring the events subsystem to be installed.\n *\n * Usage in services/use cases:\n * ```typescript\n * @Optional() @Inject(EVENT_BUS) eventBus?: IEventBus\n * ```\n */\nexport const EVENT_BUS = 'EVENT_BUS' as const;\n","/**\n * Drizzle schema for the sync subsystem audit/observability tables (SYNC-1).\n *\n * Three tables model end-to-end sync observability, keyed by the single port\n * every sync adapter implements (`IChangeSource<T>` from SYNC-2):\n *\n *   - `sync_subscriptions` — owns the cursor per\n *       `(integration_id, adapter, domain, external_ref)` tuple. Addressed\n *       by id by `ICursorStore` (SYNC-3/SYNC-4).\n *   - `sync_runs`          — per-run audit log: start/complete, status,\n *       cursor before/after, counts, direction (inbound|outbound),\n *       action (poll|cdc|webhook|manual|writeback).\n *   - `sync_run_items`     — per-record change log with structured\n *       `changed_fields` jsonb enforced by the Zod `FieldDiffSchema`\n *       contract (ADR-0003; protocol lives in SYNC-2's\n *       sync-field-diff.protocol.ts).\n *\n * Design calls (vs. issue #126 open questions):\n *\n *   - `sync_subscriptions` ships in the subsystem (not consumer-owned).\n *     Rationale: SYNC-4's `PostgresCursorStore` needs to read/write this\n *     table directly; making it consumer-owned would require consumers to\n *     hand-wire a shape the backend already knows. The row is addressable\n *     by id and scoped by the uniqueness tuple; consumers can still\n *     query/list it freely. Same stance as `job_run` being subsystem-\n *     owned while remaining consumer-queryable.\n *\n *   - `tenant_id` is always emitted on the three tables as nullable text.\n *     The `SYNC_MULTI_TENANT` DI flag (SYNC-6) is what enforces the\n *     non-null + cross-tenant-isolation contract at the service/orchestrator\n *     boundary. This mirrors JOB-1/JOB-8's final shape — runtime guard, not\n *     a scaffold-time conditional column. Keeps the schema file uniform\n *     across single-tenant and multi-tenant deployments.\n *\n *   - `changed_fields` on `sync_run_items` is typed via the Zod-inferred\n *     `FieldDiff` shape from SYNC-2 (`{ [fieldName]: { from, to } }`). The\n *     recorder service (SYNC-5) validates every write against\n *     `FieldDiffSchema.parse` so consumers can rely on the shape.\n */\nimport {\n  pgEnum,\n  pgTable,\n  uuid,\n  text,\n  jsonb,\n  integer,\n  boolean,\n  timestamp,\n  index,\n  uniqueIndex,\n} from 'drizzle-orm/pg-core';\nimport type { InferSelectModel } from 'drizzle-orm';\n\nimport type { FieldDiff } from './sync-field-diff.protocol';\n\n// ─── Enums ──────────────────────────────────────────────────────────────────\n\n/**\n * Direction of a sync run relative to local state.\n *\n *   - `inbound`  — external → local (the common case: SFDC poll → local DB).\n *   - `outbound` — local → external (writeback; deferred per epic but the\n *     column shape is reserved so future writeback runs share the audit log).\n */\nexport const syncRunDirectionEnum = pgEnum('sync_run_direction', [\n  'inbound',\n  'outbound',\n]);\n\n/**\n * How the run detected upstream changes. Maps 1:1 to the `Change.source`\n * provenance on inbound runs; `manual` captures operator-triggered re-syncs\n * and `writeback` captures outbound runs.\n */\nexport const syncRunActionEnum = pgEnum('sync_run_action', [\n  'poll',\n  'cdc',\n  'webhook',\n  'manual',\n  'writeback',\n]);\n\n/**\n * Lifecycle status of a sync run.\n *\n *   - `running`     — in-flight; recorder has started but not completed.\n *   - `success`     — completed with at least one change processed.\n *   - `no_changes`  — completed cleanly, no upstream changes found.\n *   - `failed`      — errored before completion; `error` column carries the\n *     message. `records_processed` may be non-zero (partial progress).\n */\nexport const syncRunStatusEnum = pgEnum('sync_run_status', [\n  'running',\n  'success',\n  'no_changes',\n  'failed',\n]);\n\n/**\n * Operation applied per record. Mirrors `Change<T>.operation` from SYNC-2,\n * plus the recorder's own `'noop'` for changes that matched existing state.\n */\nexport const syncRunItemOperationEnum = pgEnum('sync_run_item_operation', [\n  'created',\n  'updated',\n  'deleted',\n  'noop',\n]);\n\n/**\n * Per-record status within a run. `skipped` captures loopback-detected echoes\n * of the local system's own writes (see `ILoopbackFingerprintStore` in the\n * epic), which record the external_id but intentionally do not touch local\n * state.\n */\nexport const syncRunItemStatusEnum = pgEnum('sync_run_item_status', [\n  'success',\n  'failed',\n  'skipped',\n]);\n\n// ─── sync_subscriptions ─────────────────────────────────────────────────────\n\n/**\n * One cursor owner per (integration, adapter, domain, external_ref).\n *\n *   - `integration_id` — opaque id of the connected account/instance. E.g.\n *     the SFDC org id for polling strategies, the GitHub installation id\n *     for webhook strategies.\n *   - `adapter`        — short adapter label, e.g. `'salesforce'`, `'hubspot'`.\n *   - `domain`         — canonical entity domain this subscription tracks,\n *     e.g. `'opportunity'`, `'contact'`.\n *   - `external_ref`   — optional upstream scope (e.g. a filter id, a\n *     webhook subscription id). NULL when the subscription covers the\n *     entire domain.\n *\n * The cursor shape is opaque jsonb — strategies type it internally (poll:\n * `{ systemModstamp }`, cdc: `{ replayId }`, webhook: `{ ts }`). Overwritten\n * by `ICursorStore.put(id, cursor)`.\n */\nexport const syncSubscriptions = pgTable(\n  'sync_subscriptions',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    integrationId: text('integration_id').notNull(),\n    adapter: text('adapter').notNull(),\n    domain: text('domain').notNull(),\n    externalRef: text('external_ref'),\n    enabled: boolean('enabled').notNull().default(true),\n    /**\n     * Per-subscription configuration bag. Strategies type it internally;\n     * e.g. polling strategies stash `{ batchSize, highWatermark }` here.\n     */\n    config: jsonb('config').notNull().default({}).$type<Record<string, unknown>>(),\n    /**\n     * Opaque cursor persisted by `ICursorStore.put()`. NULL until the first\n     * successful run advances it.\n     */\n    cursor: jsonb('cursor').$type<unknown>(),\n    lastSyncAt: timestamp('last_sync_at', { withTimezone: true }),\n    /** Runtime-enforced when `SYNC_MULTI_TENANT` is true; see SYNC-6. */\n    tenantId: text('tenant_id'),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n  },\n  (t) => ({\n    /**\n     * Composite uniqueness per the epic shape. `external_ref` is nullable;\n     * Postgres treats NULLs as distinct in a UNIQUE constraint, which means\n     * two rows with the same `(integration_id, adapter, domain)` and NULL\n     * external_ref are allowed. That's intentional — a subscription with\n     * NULL external_ref covers the full domain, and duplicates there would\n     * be a consumer-layer modeling issue, not a schema concern.\n     */\n    uqSyncSubscriptionTuple: uniqueIndex('uq_sync_subscriptions_tuple').on(\n      t.integrationId,\n      t.adapter,\n      t.domain,\n      t.externalRef,\n    ),\n    /** Scheduling query: list enabled subscriptions ordered by staleness. */\n    idxSyncSubscriptionsEnabledLastSync: index(\n      'idx_sync_subscriptions_enabled_last_sync',\n    ).on(t.enabled, t.lastSyncAt),\n  }),\n);\n\nexport type SyncSubscriptionRow = InferSelectModel<typeof syncSubscriptions>;\n\n// ─── sync_runs ──────────────────────────────────────────────────────────────\n\n/**\n * One row per invocation of `ExecuteSyncUseCase`. `started_at` is set when\n * the recorder opens the run; `completed_at`, `status`, `records_*`,\n * `cursor_after`, and `duration_ms` are filled on completion.\n *\n * `cursor_before` / `cursor_after` carry the opaque cursor snapshots so the\n * run log is fully self-describing — given a run id, an operator can reason\n * about exactly what window was scanned without cross-referencing another\n * table.\n */\nexport const syncRuns = pgTable(\n  'sync_runs',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    subscriptionId: uuid('subscription_id')\n      .notNull()\n      .references(() => syncSubscriptions.id, { onDelete: 'cascade' }),\n    direction: syncRunDirectionEnum('direction').notNull(),\n    action: syncRunActionEnum('action').notNull(),\n    status: syncRunStatusEnum('status').notNull().default('running'),\n    recordsFound: integer('records_found').notNull().default(0),\n    recordsProcessed: integer('records_processed').notNull().default(0),\n    cursorBefore: jsonb('cursor_before').$type<unknown>(),\n    cursorAfter: jsonb('cursor_after').$type<unknown>(),\n    durationMs: integer('duration_ms'),\n    error: text('error'),\n    startedAt: timestamp('started_at', { withTimezone: true })\n      .notNull()\n      .defaultNow(),\n    completedAt: timestamp('completed_at', { withTimezone: true }),\n    /** Runtime-enforced when `SYNC_MULTI_TENANT` is true; see SYNC-6. */\n    tenantId: text('tenant_id'),\n  },\n  (t) => ({\n    /** Timeline read: \"most recent runs for this subscription\". */\n    idxSyncRunsSubscriptionStartedAt: index(\n      'idx_sync_runs_subscription_started_at',\n    ).on(t.subscriptionId, t.startedAt),\n    /** Stale-run sweeper: \"runs that started > N minutes ago and are still running\". */\n    idxSyncRunsStatusStartedAt: index('idx_sync_runs_status_started_at').on(\n      t.status,\n      t.startedAt,\n    ),\n  }),\n);\n\nexport type SyncRunRow = InferSelectModel<typeof syncRuns>;\n\n// ─── sync_run_items ─────────────────────────────────────────────────────────\n\n/**\n * One row per upstream change processed within a run. Captures the canonical\n * decision the orchestrator made (`operation` + `status`), the structured\n * per-field diff (`changed_fields`, ADR-0003), and the local row id\n * (`local_id`) for drill-down joins.\n *\n * `changed_fields` is validated at the recorder layer via `FieldDiffSchema`\n * (SYNC-2) — the $type<FieldDiff> annotation here only documents the shape\n * for Drizzle consumers. The runtime enforcement is non-negotiable: downstream\n * drift-detection queries rely on the `{from, to}` shape per field.\n *\n * `title` is an optional human-readable label captured at write time (e.g.\n * `\"Pinnacle opportunity\"`) so run-log UIs don't need to re-hydrate the\n * canonical record.\n */\nexport const syncRunItems = pgTable(\n  'sync_run_items',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    syncRunId: uuid('sync_run_id')\n      .notNull()\n      .references(() => syncRuns.id, { onDelete: 'cascade' }),\n    entityType: text('entity_type').notNull(),\n    externalId: text('external_id').notNull(),\n    localId: text('local_id'),\n    operation: syncRunItemOperationEnum('operation').notNull(),\n    status: syncRunItemStatusEnum('status').notNull(),\n    /**\n     * Structured per-field diff — ADR-0003 shape enforced by\n     * `FieldDiffSchema.parse` at the recorder service layer.\n     *\n     * Shape: `{ [fieldName]: { from: unknown, to: unknown } }`.\n     * Empty `{}` for `noop` items; `{ [field]: { from: null, to: <value> } }`\n     * for created items; `{ [field]: { from: <value>, to: null } }` for\n     * deleted items.\n     */\n    changedFields: jsonb('changed_fields').notNull().default({}).$type<FieldDiff>(),\n    title: text('title'),\n    error: text('error'),\n    createdAt: timestamp('created_at', { withTimezone: true })\n      .notNull()\n      .defaultNow(),\n    /** Runtime-enforced when `SYNC_MULTI_TENANT` is true; see SYNC-6. */\n    tenantId: text('tenant_id'),\n  },\n  (t) => ({\n    /** Ordered timeline within a run. */\n    idxSyncRunItemsRunCreatedAt: index('idx_sync_run_items_run_created_at').on(\n      t.syncRunId,\n      t.createdAt,\n    ),\n    /** Per-record history: \"every sync that touched opportunity/$extId\". */\n    idxSyncRunItemsEntityExternal: index(\n      'idx_sync_run_items_entity_external',\n    ).on(t.entityType, t.externalId),\n  }),\n);\n\nexport type SyncRunItemRow = InferSelectModel<typeof syncRunItems>;\n","/**\n * Typed errors + shared boundary helpers for the sync subsystem.\n *\n * Classes (not bare Error) so consumers can `instanceof` them in catch\n * blocks and exception filters can map them to HTTP codes.\n *\n * Mirrors the shape of `events-errors.ts` and `jobs-errors.ts`.\n */\n\n/**\n * Thrown by the Drizzle cursor-store / run-recorder backends AND by the\n * orchestrator entry point when `SYNC_MULTI_TENANT` is enabled but the\n * caller did not supply a non-null `tenantId`. Strict enforcement at the\n * boundary — explicit `null` still throws.\n *\n * Disable multi-tenancy on the module (`multiTenant: false`, the default)\n * to opt out of the requirement entirely.\n *\n * `operation` identifies the call site (e.g. `'cursor.put'`,\n * `'startRun'`, `'execute'`) so the stack-trace message points at the\n * specific boundary that rejected the input.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(operation: string) {\n    super(\n      `Missing tenantId for sync operation '${operation}'. SyncModule is ` +\n        `configured with multiTenant: true — every call must include a ` +\n        `non-null tenantId. Either pass the tenantId or disable multi-` +\n        `tenancy on the module.`,\n    );\n  }\n}\n\n/**\n * Shared boundary guard — used at the orchestrator entry AND inside the\n * Drizzle backends. Keeping the check in one function guarantees every\n * `MissingTenantIdError` carries the same message shape regardless of the\n * site that raised it, which makes it easier for consumers to pattern-\n * match on the error in logs/metrics.\n *\n * When `multiTenant` is false, the function is a no-op — `tenantId` may\n * be anything (including `undefined`). When true, `undefined` or `null`\n * throws.\n */\nexport function assertTenantId(\n  tenantId: string | null | undefined,\n  options: { multiTenant: boolean; operation: string },\n): asserts tenantId is string {\n  if (!options.multiTenant) return;\n  if (tenantId === undefined || tenantId === null) {\n    throw new MissingTenantIdError(options.operation);\n  }\n}\n","/**\n * DrizzleSyncRunRecorder — Drizzle-backed `ISyncRunRecorder` (SYNC-4).\n *\n * Generic write path only — extracted from the source app's\n * `SyncRunRecorderService`, minus CRM-specific convenience methods. Those\n * stay consumer-owned; the subsystem ships the substrate.\n *\n * ## Responsibilities\n *\n *   - `startRun`     — INSERT sync_runs row in status='running', returns id.\n *   - `recordItem`   — validates `changedFields` via `FieldDiffSchema.parse`\n *                      BEFORE the INSERT; a malformed shape throws before\n *                      any DB call fires. Enforces the ADR-0003 contract at\n *                      the write boundary.\n *   - `completeRun`  — UPDATE sync_runs with terminal status, counts,\n *                      cursor_after, duration_ms, completed_at.\n *\n * ## Multi-tenancy\n *\n * When `SYNC_MULTI_TENANT` is true (SYNC-6):\n *   - `startRun` and `recordItem` require non-null `tenantId` on input.\n *     Enforcement goes through the shared `assertTenantId` helper so the\n *     error message shape matches the orchestrator entry point + the\n *     cursor-store backends.\n *   - `completeRun` does NOT re-check tenancy — the run id was returned\n *     by `startRun` which already enforced it, and run ids are uuids that\n *     aren't guessable cross-tenant. Matches JOB-3's pattern of trusting\n *     the run-id for downstream mutations.\n */\nimport { Inject, Injectable, Optional } from '@nestjs/common';\nimport { and, desc, eq, type SQL } from 'drizzle-orm';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport { DRIZZLE } from '../../constants/tokens';\nimport type {\n  CompleteRunInput,\n  ISyncRunRecorder,\n  RecordItemInput,\n  StartRunInput,\n  SyncRunSummary,\n} from './sync-run-recorder.protocol';\nimport { syncRuns, syncRunItems, syncSubscriptions } from './sync-audit.schema';\nimport { FieldDiffSchema } from './sync-field-diff.protocol';\nimport { SYNC_MULTI_TENANT } from './sync.tokens';\nimport { assertTenantId } from './sync-errors';\n\n@Injectable()\nexport class DrizzleSyncRunRecorder implements ISyncRunRecorder {\n  private readonly multiTenant: boolean;\n\n  constructor(\n    @Inject(DRIZZLE) private readonly db: DrizzleClient,\n    @Optional() @Inject(SYNC_MULTI_TENANT) multiTenant?: boolean,\n  ) {\n    this.multiTenant = multiTenant ?? false;\n  }\n\n  async startRun(input: StartRunInput): Promise<{ id: string }> {\n    assertTenantId(input.tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'startRun',\n    });\n\n    const rows = await this.db\n      .insert(syncRuns)\n      .values({\n        subscriptionId: input.subscriptionId,\n        direction: input.direction,\n        action: input.action,\n        status: 'running',\n        cursorBefore: input.cursorBefore ?? null,\n        tenantId: input.tenantId ?? null,\n      })\n      .returning({ id: syncRuns.id });\n\n    const id = rows[0]?.id;\n    if (!id) {\n      // Drizzle's insert().returning() contract: at least one row is\n      // returned for every successful INSERT. A missing id would indicate\n      // a driver misbehavior; throw loudly rather than return bogus data.\n      throw new Error('DrizzleSyncRunRecorder: INSERT RETURNING produced no id');\n    }\n    return { id };\n  }\n\n  async recordItem(input: RecordItemInput): Promise<void> {\n    assertTenantId(input.tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'recordItem',\n    });\n\n    // ADR-0003 contract enforcement — reject malformed changedFields\n    // before the DB call fires. `parse` throws a ZodError; callers see\n    // the validation failure, not a DB constraint error.\n    FieldDiffSchema.parse(input.changedFields);\n\n    await this.db.insert(syncRunItems).values({\n      syncRunId: input.syncRunId,\n      entityType: input.entityType,\n      externalId: input.externalId,\n      localId: input.localId ?? null,\n      operation: input.operation,\n      status: input.status,\n      changedFields: input.changedFields,\n      title: input.title ?? null,\n      error: input.error ?? null,\n      tenantId: input.tenantId ?? null,\n    });\n  }\n\n  async listRecent(\n    limit: number,\n    subscriptionId?: string,\n    tenantId?: string | null,\n  ): Promise<SyncRunSummary[]> {\n    assertTenantId(tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'listRecent',\n    });\n\n    // JOIN against sync_subscriptions to resolve `integration_id` per run.\n    // `sync_runs.subscription_id` is a non-null FK so INNER JOIN is correct;\n    // there should be no orphaned runs.\n    const conditions: SQL[] = [];\n    if (subscriptionId !== undefined) {\n      conditions.push(eq(syncRuns.subscriptionId, subscriptionId));\n    }\n    if (this.multiTenant) {\n      conditions.push(eq(syncRuns.tenantId, tenantId as string));\n    }\n    const where =\n      conditions.length === 0\n        ? undefined\n        : conditions.length === 1\n          ? conditions[0]\n          : and(...conditions);\n\n    const rows = await this.db\n      .select({\n        id: syncRuns.id,\n        subscriptionId: syncRuns.subscriptionId,\n        integrationId: syncSubscriptions.integrationId,\n        status: syncRuns.status,\n        startedAt: syncRuns.startedAt,\n        completedAt: syncRuns.completedAt,\n        recordsProcessed: syncRuns.recordsProcessed,\n        tenantId: syncRuns.tenantId,\n      })\n      .from(syncRuns)\n      .innerJoin(\n        syncSubscriptions,\n        eq(syncRuns.subscriptionId, syncSubscriptions.id),\n      )\n      .where(where)\n      .orderBy(desc(syncRuns.startedAt))\n      .limit(limit);\n\n    return rows.map((row) => ({\n      id: row.id,\n      subscriptionId: row.subscriptionId,\n      integrationId: row.integrationId,\n      status: row.status,\n      startedAt: row.startedAt,\n      completedAt: row.completedAt,\n      recordsProcessed: row.recordsProcessed,\n      tenantId: row.tenantId,\n    }));\n  }\n\n  async completeRun(runId: string, input: CompleteRunInput): Promise<void> {\n    await this.db\n      .update(syncRuns)\n      .set({\n        status: input.status,\n        recordsFound: input.recordsFound,\n        recordsProcessed: input.recordsProcessed,\n        cursorAfter: input.cursorAfter ?? null,\n        durationMs: input.durationMs,\n        error: input.error ?? null,\n        completedAt: new Date(),\n      })\n      .where(eq(syncRuns.id, runId));\n  }\n}\n","/**\n * DeepEqualDiffer — default `IFieldDiffer<T>` for the sync subsystem (SYNC-5).\n *\n * Walks every field of `incoming` against `existing`, emitting a structured\n * per-field diff (`{ from, to }`) for every field whose value changed.\n * Returns `'noop'` when the record is unchanged.\n *\n * Design decisions (extracted from the upstream consumer + HS-9 findings):\n *\n * 1. **Ignore list** — row metadata that sinks/services stamp unconditionally\n *    so upstream cannot reasonably disagree:\n *      `id`, `createdAt`, `updatedAt`, `deletedAt`, `type`,\n *      `lastModifiedAt`, `fields`, `providerMetadata`\n *    (`fields` is the EAV bag — it's diffed by the sink's EAV dual-write\n *    path, not at the canonical-record layer.)\n *\n * 2. **`providerChangedFields` hint (CDC)** — when present, restricts the\n *    comparison to the hinted field set. The hint is advisory; fields in\n *    the ignore list are still filtered out even when hinted. Provider\n *    hints are field-NAME-level; they don't override the ignore rules.\n *\n * 3. **Date → ISO string** — `Date` instances are normalized to\n *    `toISOString()` before comparison. Sinks return `Date` from the DB\n *    driver; adapters typically deliver strings. Direct `===` would\n *    always say \"changed.\"\n *\n * 4. **Decimal-string vs number** — Postgres `numeric` columns return as\n *    strings through Drizzle; adapters deliver numbers. When one side is a\n *    number and the other is a numeric string that parses to the same\n *    number, they're equal. The normalizer does NOT coerce non-numeric\n *    strings, and it preserves zero-vs-null distinction.\n *\n * 5. **null-existing path** — `diff(null, incoming)` produces a full\n *    created-shape diff (`{from: null, to: <value>}` for every non-ignored\n *    field). Orchestrator sees this and records `operation: 'created'`.\n */\nimport { Injectable } from '@nestjs/common';\nimport type {\n  DiffResult,\n  FieldDiff,\n  IFieldDiffer,\n} from './sync-field-diff.protocol';\n\n/**\n * Default ignore list. Keep in sync with consumer canonical-record shapes —\n * adding a row-metadata field here means no sync will ever mark it changed.\n */\nconst DEFAULT_IGNORE_FIELDS: ReadonlySet<string> = new Set([\n  'id',\n  'createdAt',\n  'updatedAt',\n  'deletedAt',\n  'type',\n  'lastModifiedAt',\n  'fields',\n  'providerMetadata',\n]);\n\nexport interface DeepEqualDifferOptions {\n  /**\n   * Extra field names to ignore in addition to the defaults. Consumers can\n   * pass `['sync_version']` etc. to augment the base list; values here are\n   * merged (not replaced) with `DEFAULT_IGNORE_FIELDS`.\n   */\n  readonly ignore?: readonly string[];\n}\n\n@Injectable()\nexport class DeepEqualDiffer<T extends Record<string, unknown>>\n  implements IFieldDiffer<T>\n{\n  private readonly ignore: ReadonlySet<string>;\n\n  constructor(opts: DeepEqualDifferOptions = {}) {\n    if (opts.ignore && opts.ignore.length > 0) {\n      this.ignore = new Set([...DEFAULT_IGNORE_FIELDS, ...opts.ignore]);\n    } else {\n      this.ignore = DEFAULT_IGNORE_FIELDS;\n    }\n  }\n\n  diff(\n    existing: T | null,\n    incoming: T,\n    providerChangedFields?: string[],\n  ): DiffResult {\n    // Created-shape: every non-ignored field becomes `{from: null, to}`.\n    if (existing === null) {\n      const out: FieldDiff = {};\n      for (const key of Object.keys(incoming)) {\n        if (this.ignore.has(key)) continue;\n        const value = (incoming as Record<string, unknown>)[key];\n        // Skip fields that are themselves null/undefined — a created record\n        // doesn't need to declare \"this field is null now\" for every\n        // untouched column.\n        if (value === null || value === undefined) continue;\n        out[key] = { from: null, to: value };\n      }\n      return Object.keys(out).length === 0 ? 'noop' : out;\n    }\n\n    // Field set to compare. `providerChangedFields` narrows to a hint set;\n    // ignored fields are filtered out regardless of hint.\n    const candidates = new Set<string>();\n    if (providerChangedFields && providerChangedFields.length > 0) {\n      for (const key of providerChangedFields) {\n        if (!this.ignore.has(key)) candidates.add(key);\n      }\n    } else {\n      for (const key of Object.keys(incoming)) {\n        if (!this.ignore.has(key)) candidates.add(key);\n      }\n      // Also include keys that exist on existing but not on incoming —\n      // e.g. a field that was cleared. This would otherwise be missed when\n      // incoming carries an undefined column we drop from the iteration.\n      for (const key of Object.keys(existing)) {\n        if (this.ignore.has(key)) continue;\n        if (!(key in (incoming as Record<string, unknown>))) continue;\n        candidates.add(key);\n      }\n    }\n\n    const out: FieldDiff = {};\n    for (const key of candidates) {\n      const before = (existing as Record<string, unknown>)[key];\n      const after = (incoming as Record<string, unknown>)[key];\n      if (!isEqual(before, after)) {\n        out[key] = { from: before ?? null, to: after ?? null };\n      }\n    }\n\n    return Object.keys(out).length === 0 ? 'noop' : out;\n  }\n}\n\n// ─── equality helpers ───────────────────────────────────────────────────────\n\n/**\n * Field-level equality with the canonical-sync normalizations:\n *   - Date → toISOString (adapters deliver strings)\n *   - numeric-string vs number → numeric equality when both parse\n *   - deep equality for plain objects/arrays (single-level is enough for\n *     canonical records; nested records travel as jsonb columns where the\n *     sink already owns the comparison)\n */\nfunction isEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n\n  const na = normalize(a);\n  const nb = normalize(b);\n  if (na === nb) return true;\n\n  // After normalization: both may still be non-primitive objects.\n  if (\n    typeof na === 'object' &&\n    typeof nb === 'object' &&\n    na !== null &&\n    nb !== null\n  ) {\n    return deepEqualObject(na as Record<string, unknown>, nb as Record<string, unknown>);\n  }\n\n  // Numeric string ↔ number: when one side is a number and the other is a\n  // string that parses to the same finite number.\n  const numericEqual = maybeNumericEqual(na, nb) || maybeNumericEqual(nb, na);\n  return numericEqual;\n}\n\nfunction normalize(value: unknown): unknown {\n  if (value instanceof Date) return value.toISOString();\n  return value;\n}\n\nfunction maybeNumericEqual(a: unknown, b: unknown): boolean {\n  // a is string-shape, b is number — parse a and compare. Only when the\n  // string looks numeric AND the parse round-trips (no silent NaN pass-\n  // through on non-numeric strings).\n  if (typeof a !== 'string' || typeof b !== 'number') return false;\n  if (a.trim() === '') return false;\n  const parsed = Number(a);\n  if (!Number.isFinite(parsed)) return false;\n  return parsed === b;\n}\n\nfunction deepEqualObject(\n  a: Record<string, unknown>,\n  b: Record<string, unknown>,\n): boolean {\n  if (Array.isArray(a) !== Array.isArray(b)) return false;\n  const aKeys = Object.keys(a);\n  const bKeys = Object.keys(b);\n  if (aKeys.length !== bKeys.length) return false;\n  for (const key of aKeys) {\n    if (!(key in b)) return false;\n    if (!isEqual(a[key], b[key])) return false;\n  }\n  return true;\n}\n"],"mappings":";;;;;;;;;;;;;AA+DA,SAAS,cAAiD;;;ACxCnD,IAAM,oBAAoB;AAC1B,IAAM,oBAAoB;AAO1B,IAAM,oBAAoB;AAS1B,IAAM,sBAAsB;AAQ5B,IAAM,oBAAoB;;;ACpBjC,SAAS,kBAAkB;AAQpB,IAAM,oBAAN,MAAgD;AAAA;AAAA;AAAA;AAAA;AAAA,EAK5C,UAAgC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWxC,gBAAqD,oBAAI,IAAI;AAAA,EAEtE,MAAM,IACJ,gBACA,WACyB;AAGzB,UAAM,QAAQ,KAAK,QAAQ,IAAI,cAAc;AAC7C,WAAO,UAAU,SAAY,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,IACJ,gBACA,QACA,WACe;AAGf,SAAK,QAAQ,IAAI,gBAAgB,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,QAAQ,WAAsD;AAGlE,UAAM,YAA8B,CAAC;AACrC,eAAW,CAAC,gBAAgB,MAAM,KAAK,KAAK,QAAQ,QAAQ,GAAG;AAC7D,YAAM,OAAO,KAAK,cAAc,IAAI,cAAc;AAClD,gBAAU,KAAK;AAAA,QACb;AAAA,QACA,eAAe,MAAM,iBAAiB;AAAA,QACtC,SAAS,MAAM,WAAW;AAAA,QAC1B,QAAQ,MAAM,UAAU;AAAA,QACxB,aAAa,MAAM,eAAe;AAAA,QAClC,QAAQ,UAAU;AAAA,QAClB,YAAY,MAAM,cAAc;AAAA,QAChC,WAAW,MAAM,aAAa,oBAAI,KAAK,CAAC;AAAA,QACxC,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,WAAO,UAAU;AAAA,MACf,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ;AAAA,IACxD;AAAA,EACF;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,QAAQ,MAAM;AACnB,SAAK,cAAc,MAAM;AAAA,EAC3B;AACF;AAlEa,oBAAN;AAAA,EADN,WAAW;AAAA,GACC;;;ACVb,SAAS,cAAAA,mBAAkB;;;ACd3B,SAAS,SAAS;AAaX,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,QAAQ;AAAA,EAChB,IAAI,EAAE,QAAQ;AAChB,CAAC;AAEM,IAAM,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,oBAAoB;;;AD8CjE,IAAM,oBAAN,MAAoD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhD,OAAqC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,QAAwC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAShD,gBAAqD,oBAAI,IAAI;AAAA,EAEtE,MAAM,SAAS,OAA+C;AAC5D,UAAM,KAAK,OAAO,WAAW;AAC7B,SAAK,KAAK,IAAI,IAAI;AAAA,MAChB;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,MACR,cAAc,MAAM,gBAAgB;AAAA,MACpC,aAAa;AAAA,MACb,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,OAAO;AAAA,MACP,UAAU,MAAM,YAAY;AAAA,MAC5B,WAAW,oBAAI,KAAK;AAAA,MACpB,aAAa;AAAA,IACf,CAAC;AACD,SAAK,MAAM,IAAI,IAAI,CAAC,CAAC;AACrB,WAAO,EAAE,GAAG;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,OAAuC;AAEtD,oBAAgB,MAAM,MAAM,aAAa;AAEzC,UAAM,SAAS,KAAK,MAAM,IAAI,MAAM,SAAS;AAC7C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR,wDAAwD,MAAM,SAAS;AAAA,MAEzE;AAAA,IACF;AACA,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,MAAM,YAAY,OAAe,OAAwC;AACvE,UAAM,MAAM,KAAK,KAAK,IAAI,KAAK;AAC/B,QAAI,CAAC,KAAK;AACR,YAAM,IAAI;AAAA,QACR,yDAAyD,KAAK;AAAA,MAChE;AAAA,IACF;AACA,QAAI,SAAS,MAAM;AACnB,QAAI,eAAe,MAAM;AACzB,QAAI,mBAAmB,MAAM;AAC7B,QAAI,cAAc,MAAM,eAAe;AACvC,QAAI,aAAa,MAAM;AACvB,QAAI,QAAQ,MAAM,SAAS;AAC3B,QAAI,cAAc,oBAAI,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,WACJ,OACA,gBACA,WAC2B;AAI3B,UAAM,MAAM,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC;AACzC,UAAM,WACJ,mBAAmB,SACf,MACA,IAAI,OAAO,CAAC,MAAM,EAAE,mBAAmB,cAAc;AAC3D,WAAO,SACJ,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC,EAC5D,MAAM,GAAG,KAAK,EACd,IAAI,CAAC,OAAO;AAAA,MACX,IAAI,EAAE;AAAA,MACN,gBAAgB,EAAE;AAAA;AAAA;AAAA;AAAA,MAIlB,eACE,KAAK,cAAc,IAAI,EAAE,cAAc,GAAG,iBAAiB;AAAA,MAC7D,QAAQ,EAAE;AAAA,MACV,WAAW,EAAE;AAAA,MACb,aAAa,EAAE;AAAA,MACf,kBAAkB,EAAE;AAAA,MACpB,UAAU,EAAE;AAAA,IACd,EAAE;AAAA,EACN;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,KAAK,MAAM;AAChB,SAAK,MAAM,MAAM;AACjB,SAAK,cAAc,MAAM;AAAA,EAC3B;AAAA;AAAA;AAAA,EAKA,uBAAuB,gBAA2C;AAChE,WAAO,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC,EACjC,OAAO,CAAC,MAAM,EAAE,mBAAmB,cAAc,EACjD,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC;AAAA,EACjE;AAAA;AAAA,EAGA,eAAe,OAAkC;AAC/C,WAAO,KAAK,MAAM,IAAI,KAAK,KAAK,CAAC;AAAA,EACnC;AACF;AA/Ha,oBAAN;AAAA,EADNC,YAAW;AAAA,GACC;;;AEhDb,SAAS,QAAQ,cAAAC,aAAY,gBAAgB;AAC7C,SAAS,KAAK,MAAM,UAAoB;;;ACfjC,IAAM,UAAU;;;ACyBvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcA,IAAM,uBAAuB,OAAO,sBAAsB;AAAA,EAC/D;AAAA,EACA;AACF,CAAC;AAOM,IAAM,oBAAoB,OAAO,mBAAmB;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAWM,IAAM,oBAAoB,OAAO,mBAAmB;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,2BAA2B,OAAO,2BAA2B;AAAA,EACxE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,IAAM,wBAAwB,OAAO,wBAAwB;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAqBM,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,eAAe,KAAK,gBAAgB,EAAE,QAAQ;AAAA,IAC9C,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA,IAC/B,aAAa,KAAK,cAAc;AAAA,IAChC,SAAS,QAAQ,SAAS,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,IAKlD,QAAQ,MAAM,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,MAA+B;AAAA;AAAA;AAAA;AAAA;AAAA,IAK7E,QAAQ,MAAM,QAAQ,EAAE,MAAe;AAAA,IACvC,YAAY,UAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;AAAA;AAAA,IAE5D,UAAU,KAAK,WAAW;AAAA,IAC1B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,IAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,EAClF;AAAA,EACA,CAAC,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASN,yBAAyB,YAAY,6BAA6B,EAAE;AAAA,MAClE,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,qCAAqC;AAAA,MACnC;AAAA,IACF,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU;AAAA,EAC9B;AACF;AAgBO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,QAAQ,EACR,WAAW,MAAM,kBAAkB,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IACjE,WAAW,qBAAqB,WAAW,EAAE,QAAQ;AAAA,IACrD,QAAQ,kBAAkB,QAAQ,EAAE,QAAQ;AAAA,IAC5C,QAAQ,kBAAkB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC/D,cAAc,QAAQ,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IAC1D,kBAAkB,QAAQ,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IAClE,cAAc,MAAM,eAAe,EAAE,MAAe;AAAA,IACpD,aAAa,MAAM,cAAc,EAAE,MAAe;AAAA,IAClD,YAAY,QAAQ,aAAa;AAAA,IACjC,OAAO,KAAK,OAAO;AAAA,IACnB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EACtD,QAAQ,EACR,WAAW;AAAA,IACd,aAAa,UAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;AAAA;AAAA,IAE7D,UAAU,KAAK,WAAW;AAAA,EAC5B;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,kCAAkC;AAAA,MAChC;AAAA,IACF,EAAE,GAAG,EAAE,gBAAgB,EAAE,SAAS;AAAA;AAAA,IAElC,4BAA4B,MAAM,iCAAiC,EAAE;AAAA,MACnE,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,EACF;AACF;AAqBO,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,WAAW,KAAK,aAAa,EAC1B,QAAQ,EACR,WAAW,MAAM,SAAS,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,SAAS,KAAK,UAAU;AAAA,IACxB,WAAW,yBAAyB,WAAW,EAAE,QAAQ;AAAA,IACzD,QAAQ,sBAAsB,QAAQ,EAAE,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUhD,eAAe,MAAM,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAiB;AAAA,IAC9E,OAAO,KAAK,OAAO;AAAA,IACnB,OAAO,KAAK,OAAO;AAAA,IACnB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EACtD,QAAQ,EACR,WAAW;AAAA;AAAA,IAEd,UAAU,KAAK,WAAW;AAAA,EAC5B;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,6BAA6B,MAAM,mCAAmC,EAAE;AAAA,MACtE,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,+BAA+B;AAAA,MAC7B;AAAA,IACF,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU;AAAA,EACjC;AACF;;;ACnRO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC5B,OAAO;AAAA,EACzB,YAAY,WAAmB;AAC7B;AAAA,MACE,wCAAwC,SAAS;AAAA,IAInD;AAAA,EACF;AACF;AAaO,SAAS,eACd,UACA,SAC4B;AAC5B,MAAI,CAAC,QAAQ,YAAa;AAC1B,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,UAAM,IAAI,qBAAqB,QAAQ,SAAS;AAAA,EAClD;AACF;;;AHZO,IAAM,sBAAN,MAAkD;AAAA,EAGvD,YACoC,IACK,aACvC;AAFkC;AAGlC,SAAK,cAAc,eAAe;AAAA,EACpC;AAAA,EAJoC;AAAA,EAHnB;AAAA,EASjB,MAAM,IACJ,gBACA,UACyB;AACzB,UAAM,QAAQ,KAAK,WAAW,gBAAgB,UAAU,YAAY;AAEpE,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO,EAAE,QAAQ,kBAAkB,OAAO,CAAC,EAC3C,KAAK,iBAAiB,EACtB,MAAM,KAAK,EACX,MAAM,CAAC;AAEV,QAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,WAAO,KAAK,CAAC,GAAG,UAAU;AAAA,EAC5B;AAAA,EAEA,MAAM,IACJ,gBACA,QACA,UACe;AACf,UAAM,QAAQ,KAAK,WAAW,gBAAgB,UAAU,YAAY;AAEpE,UAAM,KAAK,GACR,OAAO,iBAAiB,EACxB,IAAI;AAAA,MACH;AAAA,MACA,YAAY,oBAAI,KAAK;AAAA,MACrB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC,EACA,MAAM,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,QAAQ,UAAqD;AACjE,mBAAe,UAAU;AAAA,MACvB,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,QAAQ,KAAK,cACf,GAAG,kBAAkB,UAAU,QAAkB,IACjD;AAEJ,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO;AAAA,MACN,IAAI,kBAAkB;AAAA,MACtB,eAAe,kBAAkB;AAAA,MACjC,SAAS,kBAAkB;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,aAAa,kBAAkB;AAAA,MAC/B,QAAQ,kBAAkB;AAAA,MAC1B,YAAY,kBAAkB;AAAA,MAC9B,WAAW,kBAAkB;AAAA,MAC7B,UAAU,kBAAkB;AAAA,IAC9B,CAAC,EACA,KAAK,iBAAiB,EACtB,MAAM,KAAK,EACX,QAAQ,KAAK,kBAAkB,SAAS,CAAC;AAE5C,WAAO,KAAK,IAAI,CAAC,SAAS;AAAA,MACxB,gBAAgB,IAAI;AAAA,MACpB,eAAe,IAAI;AAAA,MACnB,SAAS,IAAI;AAAA,MACb,QAAQ,IAAI;AAAA,MACZ,aAAa,IAAI;AAAA,MACjB,QAAQ,IAAI,UAAU;AAAA,MACtB,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,WACN,gBACA,UACA,WACiB;AACjB,mBAAe,UAAU;AAAA,MACvB,aAAa,KAAK;AAAA,MAClB;AAAA,IACF,CAAC;AACD,QAAI,KAAK,aAAa;AACpB,aAAO;AAAA,QACL,GAAG,kBAAkB,IAAI,cAAc;AAAA,QACvC,GAAG,kBAAkB,UAAU,QAAkB;AAAA,MACnD;AAAA,IACF;AACA,WAAO,GAAG,kBAAkB,IAAI,cAAc;AAAA,EAChD;AACF;AAxGa,sBAAN;AAAA,EADNC,YAAW;AAAA,EAKP,0BAAO,OAAO;AAAA,EACd,4BAAS;AAAA,EAAG,0BAAO,iBAAiB;AAAA,GAL5B;;;AIZb,SAAS,UAAAC,SAAQ,cAAAC,aAAY,YAAAC,iBAAgB;AAC7C,SAAS,OAAAC,MAAK,QAAAC,OAAM,MAAAC,WAAoB;AAgBjC,IAAM,yBAAN,MAAyD;AAAA,EAG9D,YACoC,IACK,aACvC;AAFkC;AAGlC,SAAK,cAAc,eAAe;AAAA,EACpC;AAAA,EAJoC;AAAA,EAHnB;AAAA,EASjB,MAAM,SAAS,OAA+C;AAC5D,mBAAe,MAAM,UAAU;AAAA,MAC7B,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO,QAAQ,EACf,OAAO;AAAA,MACN,gBAAgB,MAAM;AAAA,MACtB,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,MACR,cAAc,MAAM,gBAAgB;AAAA,MACpC,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC,EACA,UAAU,EAAE,IAAI,SAAS,GAAG,CAAC;AAEhC,UAAM,KAAK,KAAK,CAAC,GAAG;AACpB,QAAI,CAAC,IAAI;AAIP,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AACA,WAAO,EAAE,GAAG;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,OAAuC;AACtD,mBAAe,MAAM,UAAU;AAAA,MAC7B,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAKD,oBAAgB,MAAM,MAAM,aAAa;AAEzC,UAAM,KAAK,GAAG,OAAO,YAAY,EAAE,OAAO;AAAA,MACxC,WAAW,MAAM;AAAA,MACjB,YAAY,MAAM;AAAA,MAClB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM,WAAW;AAAA,MAC1B,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,eAAe,MAAM;AAAA,MACrB,OAAO,MAAM,SAAS;AAAA,MACtB,OAAO,MAAM,SAAS;AAAA,MACtB,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WACJ,OACA,gBACA,UAC2B;AAC3B,mBAAe,UAAU;AAAA,MACvB,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAKD,UAAM,aAAoB,CAAC;AAC3B,QAAI,mBAAmB,QAAW;AAChC,iBAAW,KAAKC,IAAG,SAAS,gBAAgB,cAAc,CAAC;AAAA,IAC7D;AACA,QAAI,KAAK,aAAa;AACpB,iBAAW,KAAKA,IAAG,SAAS,UAAU,QAAkB,CAAC;AAAA,IAC3D;AACA,UAAM,QACJ,WAAW,WAAW,IAClB,SACA,WAAW,WAAW,IACpB,WAAW,CAAC,IACZC,KAAI,GAAG,UAAU;AAEzB,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO;AAAA,MACN,IAAI,SAAS;AAAA,MACb,gBAAgB,SAAS;AAAA,MACzB,eAAe,kBAAkB;AAAA,MACjC,QAAQ,SAAS;AAAA,MACjB,WAAW,SAAS;AAAA,MACpB,aAAa,SAAS;AAAA,MACtB,kBAAkB,SAAS;AAAA,MAC3B,UAAU,SAAS;AAAA,IACrB,CAAC,EACA,KAAK,QAAQ,EACb;AAAA,MACC;AAAA,MACAD,IAAG,SAAS,gBAAgB,kBAAkB,EAAE;AAAA,IAClD,EACC,MAAM,KAAK,EACX,QAAQE,MAAK,SAAS,SAAS,CAAC,EAChC,MAAM,KAAK;AAEd,WAAO,KAAK,IAAI,CAAC,SAAS;AAAA,MACxB,IAAI,IAAI;AAAA,MACR,gBAAgB,IAAI;AAAA,MACpB,eAAe,IAAI;AAAA,MACnB,QAAQ,IAAI;AAAA,MACZ,WAAW,IAAI;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,kBAAkB,IAAI;AAAA,MACtB,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,YAAY,OAAe,OAAwC;AACvE,UAAM,KAAK,GACR,OAAO,QAAQ,EACf,IAAI;AAAA,MACH,QAAQ,MAAM;AAAA,MACd,cAAc,MAAM;AAAA,MACpB,kBAAkB,MAAM;AAAA,MACxB,aAAa,MAAM,eAAe;AAAA,MAClC,YAAY,MAAM;AAAA,MAClB,OAAO,MAAM,SAAS;AAAA,MACtB,aAAa,oBAAI,KAAK;AAAA,IACxB,CAAC,EACA,MAAMF,IAAG,SAAS,IAAI,KAAK,CAAC;AAAA,EACjC;AACF;AAxIa,yBAAN;AAAA,EADNG,YAAW;AAAA,EAKP,mBAAAC,QAAO,OAAO;AAAA,EACd,mBAAAC,UAAS;AAAA,EAAG,mBAAAD,QAAO,iBAAiB;AAAA,GAL5B;;;ACVb,SAAS,cAAAE,mBAAkB;AAW3B,IAAM,wBAA6C,oBAAI,IAAI;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAYM,IAAM,kBAAN,MAEP;AAAA,EACmB;AAAA,EAEjB,YAAY,OAA+B,CAAC,GAAG;AAC7C,QAAI,KAAK,UAAU,KAAK,OAAO,SAAS,GAAG;AACzC,WAAK,SAAS,oBAAI,IAAI,CAAC,GAAG,uBAAuB,GAAG,KAAK,MAAM,CAAC;AAAA,IAClE,OAAO;AACL,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,KACE,UACA,UACA,uBACY;AAEZ,QAAI,aAAa,MAAM;AACrB,YAAMC,OAAiB,CAAC;AACxB,iBAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,YAAI,KAAK,OAAO,IAAI,GAAG,EAAG;AAC1B,cAAM,QAAS,SAAqC,GAAG;AAIvD,YAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,QAAAA,KAAI,GAAG,IAAI,EAAE,MAAM,MAAM,IAAI,MAAM;AAAA,MACrC;AACA,aAAO,OAAO,KAAKA,IAAG,EAAE,WAAW,IAAI,SAASA;AAAA,IAClD;AAIA,UAAM,aAAa,oBAAI,IAAY;AACnC,QAAI,yBAAyB,sBAAsB,SAAS,GAAG;AAC7D,iBAAW,OAAO,uBAAuB;AACvC,YAAI,CAAC,KAAK,OAAO,IAAI,GAAG,EAAG,YAAW,IAAI,GAAG;AAAA,MAC/C;AAAA,IACF,OAAO;AACL,iBAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,YAAI,CAAC,KAAK,OAAO,IAAI,GAAG,EAAG,YAAW,IAAI,GAAG;AAAA,MAC/C;AAIA,iBAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,YAAI,KAAK,OAAO,IAAI,GAAG,EAAG;AAC1B,YAAI,EAAE,OAAQ,UAAuC;AACrD,mBAAW,IAAI,GAAG;AAAA,MACpB;AAAA,IACF;AAEA,UAAM,MAAiB,CAAC;AACxB,eAAW,OAAO,YAAY;AAC5B,YAAM,SAAU,SAAqC,GAAG;AACxD,YAAM,QAAS,SAAqC,GAAG;AACvD,UAAI,CAAC,QAAQ,QAAQ,KAAK,GAAG;AAC3B,YAAI,GAAG,IAAI,EAAE,MAAM,UAAU,MAAM,IAAI,SAAS,KAAK;AAAA,MACvD;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,GAAG,EAAE,WAAW,IAAI,SAAS;AAAA,EAClD;AACF;AAjEa,kBAAN;AAAA,EADNC,YAAW;AAAA,GACC;AA6Eb,SAAS,QAAQ,GAAY,GAAqB;AAChD,MAAI,MAAM,EAAG,QAAO;AAEpB,QAAM,KAAK,UAAU,CAAC;AACtB,QAAM,KAAK,UAAU,CAAC;AACtB,MAAI,OAAO,GAAI,QAAO;AAGtB,MACE,OAAO,OAAO,YACd,OAAO,OAAO,YACd,OAAO,QACP,OAAO,MACP;AACA,WAAO,gBAAgB,IAA+B,EAA6B;AAAA,EACrF;AAIA,QAAM,eAAe,kBAAkB,IAAI,EAAE,KAAK,kBAAkB,IAAI,EAAE;AAC1E,SAAO;AACT;AAEA,SAAS,UAAU,OAAyB;AAC1C,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,SAAO;AACT;AAEA,SAAS,kBAAkB,GAAY,GAAqB;AAI1D,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,EAAE,KAAK,MAAM,GAAI,QAAO;AAC5B,QAAM,SAAS,OAAO,CAAC;AACvB,MAAI,CAAC,OAAO,SAAS,MAAM,EAAG,QAAO;AACrC,SAAO,WAAW;AACpB;AAEA,SAAS,gBACP,GACA,GACS;AACT,MAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAClD,QAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,QAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,MAAI,MAAM,WAAW,MAAM,OAAQ,QAAO;AAC1C,aAAW,OAAO,OAAO;AACvB,QAAI,EAAE,OAAO,GAAI,QAAO;AACxB,QAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,EAAG,QAAO;AAAA,EACvC;AACA,SAAO;AACT;;;AV5FO,IAAM,aAAN,MAAiB;AAAA,EACtB,OAAO,QAAQ,SAA2C;AACxD,UAAM,cAAc,QAAQ,eAAe;AAE3C,UAAM,kBAA8B;AAAA,MAClC,EAAE,SAAS,qBAAqB,UAAU,QAAQ;AAAA,MAClD,EAAE,SAAS,mBAAmB,UAAU,YAAY;AAAA;AAAA;AAAA,MAGpD,EAAE,SAAS,mBAAmB,UAAU,IAAI,gBAAgB,EAAE;AAAA,IAChE;AAEA,UAAM,mBACJ,QAAQ,YAAY,WAChB;AAAA;AAAA;AAAA;AAAA,MAIE,EAAE,SAAS,mBAAmB,UAAU,IAAI,kBAAkB,EAAE;AAAA,MAChE;AAAA,QACE,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,MACA,EAAE,SAAS,mBAAmB,UAAU,IAAI,kBAAkB,EAAE;AAAA,MAChE;AAAA,QACE,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,IACF,IACA;AAAA;AAAA;AAAA;AAAA,MAIE,EAAE,SAAS,mBAAmB,UAAU,oBAAoB;AAAA,MAC5D,EAAE,SAAS,mBAAmB,UAAU,uBAAuB;AAAA,IACjE;AAEN,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,GAAG,iBAAiB,GAAG,gBAAgB;AAAA,MACnD,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAlDa,aAAN;AAAA,EADN,OAAO,CAAC,CAAC;AAAA,GACG;","names":["Injectable","Injectable","Injectable","Injectable","Inject","Injectable","Optional","and","desc","eq","eq","and","desc","Injectable","Inject","Optional","Injectable","out","Injectable"]}
+{"version":3,"sources":["../../../../runtime/subsystems/sync/sync.module.ts","../../../../runtime/subsystems/sync/sync.tokens.ts","../../../../runtime/subsystems/sync/sync-cursor-store.memory-backend.ts","../../../../runtime/subsystems/sync/sync-run-recorder.memory-backend.ts","../../../../runtime/subsystems/sync/sync-field-diff.protocol.ts","../../../../runtime/subsystems/sync/sync-cursor-store.drizzle-backend.ts","../../../../runtime/constants/tokens.ts","../../../../runtime/subsystems/sync/sync-audit.schema.ts","../../../../runtime/subsystems/sync/sync-errors.ts","../../../../runtime/subsystems/sync/sync-run-recorder.drizzle-backend.ts","../../../../runtime/subsystems/sync/deep-equal.differ.ts"],"sourcesContent":["/**\n * SyncModule — `DynamicModule.forRoot({ backend, multiTenant? })` factory\n * wiring the sync subsystem's substrate (SYNC-6, ADR-008 subsystem pattern).\n *\n * ## What this module provides\n *\n *   - `SYNC_CURSOR_STORE`    — Drizzle or Memory cursor store\n *   - `SYNC_RUN_RECORDER`    — Drizzle or Memory run recorder\n *   - `SYNC_FIELD_DIFFER`    — default `DeepEqualDiffer`\n *   - `SYNC_MULTI_TENANT`    — resolved boolean flag (defaults to false)\n *   - `SYNC_MODULE_OPTIONS`  — the options object itself, for backends\n *     that need to inspect config at construction time\n *\n * ## What this module does NOT provide\n *\n *   - `SYNC_CHANGE_SOURCE` — per-provider per-entity; consumer binds in\n *     their feature module (e.g. `OpportunitySyncModule` provides a\n *     `SalesforceOpportunityChangeSource`). Loopback suppression — when\n *     needed — is composed into the primitive's middleware chain via\n *     `createLoopbackMiddleware(store)` (#226-5 / ADR-033); the\n *     orchestrator no longer accepts a fingerprint store directly.\n *   - `SYNC_SINK` — per canonical entity; consumer binds in their feature\n *     module.\n *   - `ExecuteSyncUseCase` — registered by the feature module alongside\n *     its source + sink bindings. Providing the orchestrator here would\n *     force Nest to resolve SYNC_CHANGE_SOURCE + SYNC_SINK at module\n *     compile time, which fails when the feature module hasn't been\n *     imported yet. Consumers register `ExecuteSyncUseCase` in the same\n *     `providers` array as their source + sink so resolution is local\n *     to where all three are bound.\n *\n * Same shape as `EventsModule.forRoot` — the module wires the bus; you\n * bring your own handlers. Here: the module wires the substrate; you\n * bring your own source + sink.\n *\n * ## Usage\n *\n * ```ts\n * // AppModule — single source of truth for backend + multi-tenancy.\n * @Module({\n *   imports: [SyncModule.forRoot({ backend: 'drizzle' })],\n * })\n * export class AppModule {}\n *\n * // Per-entity feature module — binds source + sink, gets the\n * // orchestrator for free.\n * @Module({\n *   providers: [\n *     { provide: SYNC_CHANGE_SOURCE, useClass: SalesforceOpportunitySource },\n *     { provide: SYNC_SINK,          useClass: OpportunitySyncSink },\n *     ExecuteSyncUseCase,\n *   ],\n * })\n * export class OpportunitySyncModule {\n *   constructor(\n *     private readonly execute: ExecuteSyncUseCase<CanonicalOpportunity>,\n *   ) {}\n * }\n * ```\n *\n * `global: true` means feature modules do not need to re-import\n * `SyncModule` — the substrate tokens are available project-wide.\n */\nimport { Module, type DynamicModule, type Provider } from '@nestjs/common';\nimport {\n  SYNC_CURSOR_STORE,\n  SYNC_FIELD_DIFFER,\n  SYNC_MODULE_OPTIONS,\n  SYNC_MULTI_TENANT,\n  SYNC_RUN_RECORDER,\n} from './sync.tokens';\nimport { MemoryCursorStore } from './sync-cursor-store.memory-backend';\nimport { MemoryRunRecorder } from './sync-run-recorder.memory-backend';\nimport { PostgresCursorStore } from './sync-cursor-store.drizzle-backend';\nimport { DrizzleSyncRunRecorder } from './sync-run-recorder.drizzle-backend';\nimport { DeepEqualDiffer } from './deep-equal.differ';\n\nexport interface SyncModuleOptions {\n  /**\n   * Backend selection. `drizzle` wires the Postgres cursor store +\n   * run-log recorder; `memory` wires in-memory doubles suitable for\n   * tests + local dev.\n   */\n  backend: 'drizzle' | 'memory';\n\n  /**\n   * Multi-tenancy opt-in (SYNC-6).\n   *\n   * When `true`, every call to the orchestrator + both Drizzle backends\n   * must supply a non-null `tenantId`; missing values throw\n   * `MissingTenantIdError`. Defense-in-depth: the orchestrator rejects\n   * at entry (no dangling `status=running` rows) AND the Drizzle\n   * backends reject at their write boundary (belt-and-braces for any\n   * path that bypasses the orchestrator). Both sites use the shared\n   * `assertTenantId` helper so error messages match.\n   *\n   * Memory backends accept `tenantId` unconditionally — their state is\n   * process-local; cross-tenant isolation there is not meaningful.\n   *\n   * Defaults to `false`.\n   */\n  multiTenant?: boolean;\n}\n\n@Module({})\nexport class SyncModule {\n  static forRoot(options: SyncModuleOptions): DynamicModule {\n    const multiTenant = options.multiTenant ?? false;\n\n    const sharedProviders: Provider[] = [\n      { provide: SYNC_MODULE_OPTIONS, useValue: options },\n      { provide: SYNC_MULTI_TENANT, useValue: multiTenant },\n      // Default differ — consumers can override by binding a different\n      // `IFieldDiffer<T>` to `SYNC_FIELD_DIFFER` in their feature module.\n      { provide: SYNC_FIELD_DIFFER, useValue: new DeepEqualDiffer() },\n    ];\n\n    const backendProviders: Provider[] =\n      options.backend === 'memory'\n        ? [\n            // Wired as singletons via `useValue` so tests can pull\n            // them out via `moduleRef.get(MemoryCursorStore)` for\n            // direct assertions. Matches JOB-4 / MemoryJobStore shape.\n            { provide: MemoryCursorStore, useValue: new MemoryCursorStore() },\n            {\n              provide: SYNC_CURSOR_STORE,\n              useExisting: MemoryCursorStore,\n            },\n            { provide: MemoryRunRecorder, useValue: new MemoryRunRecorder() },\n            {\n              provide: SYNC_RUN_RECORDER,\n              useExisting: MemoryRunRecorder,\n            },\n          ]\n        : [\n            // Drizzle backends — injected with DRIZZLE (provided by the\n            // consumer's DrizzleModule) + the SYNC_MULTI_TENANT flag\n            // we bound above.\n            { provide: SYNC_CURSOR_STORE, useClass: PostgresCursorStore },\n            { provide: SYNC_RUN_RECORDER, useClass: DrizzleSyncRunRecorder },\n          ];\n\n    return {\n      module: SyncModule,\n      global: true,\n      providers: [...sharedProviders, ...backendProviders],\n      exports: [\n        SYNC_MODULE_OPTIONS,\n        SYNC_MULTI_TENANT,\n        SYNC_FIELD_DIFFER,\n        SYNC_CURSOR_STORE,\n        SYNC_RUN_RECORDER,\n      ],\n    };\n  }\n}\n","/**\n * Sync subsystem — DI tokens\n *\n * String constants (not Symbols) so they match by value across import\n * boundaries — same convention as the events subsystem (`EVENT_BUS`). The\n * jobs subsystem uses Symbols for its analogous tokens; events and sync\n * stay internally consistent with strings.\n *\n * Usage in use cases:\n * ```ts\n * constructor(\n *   @Inject(SYNC_CHANGE_SOURCE) private readonly source: IChangeSource<CanonicalOpportunity>,\n *   @Inject(SYNC_CURSOR_STORE)  private readonly cursors: ICursorStore,\n *   @Inject(SYNC_FIELD_DIFFER)  private readonly differ: IFieldDiffer<CanonicalOpportunity>,\n *   @Inject(SYNC_SINK)          private readonly sink: ISyncSink<CanonicalOpportunity>,\n *   @Inject(SYNC_RUN_RECORDER)  private readonly recorder: ISyncRunRecorder,\n * ) {}\n * ```\n *\n * Concrete bindings are registered by `SyncModule.forRoot(...)` (SYNC-6).\n */\n\nexport const SYNC_CHANGE_SOURCE = 'SYNC_CHANGE_SOURCE' as const;\nexport const SYNC_CURSOR_STORE = 'SYNC_CURSOR_STORE' as const;\nexport const SYNC_FIELD_DIFFER = 'SYNC_FIELD_DIFFER' as const;\nexport const SYNC_SINK = 'SYNC_SINK' as const;\n\n/**\n * Run-recorder token (SYNC-5). Backed by `ISyncRunRecorder`. Drizzle impl\n * lands in SYNC-4; tests provide inline fakes.\n */\nexport const SYNC_RUN_RECORDER = 'SYNC_RUN_RECORDER' as const;\n\n/**\n * Injection token for the resolved `SyncModuleOptions` object (SYNC-6).\n *\n * Backends that need to observe module configuration (e.g. `multiTenant`\n * flag, pool filters) inject via this token. Provided automatically by\n * `SyncModule.forRoot(...)` / `SyncModule.forRootAsync(...)`.\n */\nexport const SYNC_MODULE_OPTIONS = 'SYNC_MODULE_OPTIONS' as const;\n\n/**\n * Injection token for the resolved multi-tenancy flag (SYNC-6).\n *\n * Provided by `SyncModule.forRoot(...)` as `options.multiTenant ?? false`.\n * Consumed by `ExecuteSyncUseCase` to enforce the tenantId-is-required rule.\n */\nexport const SYNC_MULTI_TENANT = 'SYNC_MULTI_TENANT' as const;\n","/**\n * MemoryCursorStore — in-memory backend for `ICursorStore` (SYNC-3).\n *\n * Test double that lets consumers exercise `ExecuteSyncUseCase` (SYNC-5) and\n * other cursor-consuming code paths without Postgres. Mirrors the role of\n * `MemoryEventBus` and `MemoryJobStore`: plain keyed state, tests take a\n * direct reference for `beforeEach` resets.\n *\n * Cursor values are stored by reference — the port's `get`/`put` contract\n * treats them as opaque `unknown`. Callers that want durable value-equality\n * semantics should snapshot via JSON before `put` and reparse after `get`;\n * this is what the Drizzle backend (SYNC-4) does implicitly via jsonb\n * round-trip. The memory backend intentionally does not simulate the\n * serialize/deserialize cycle — consumers who care should test against\n * Postgres.\n *\n * ## Multi-tenancy\n *\n * `tenantId` is accepted but ignored. The memory backend's state is\n * process-local — there's no durable storage where a cross-tenant leak\n * could occur. Tests that want to assert per-tenant isolation should\n * target the Drizzle backend.\n *\n * Not shipped in the upstream consumer; this is a subsystem-first addition for the\n * test surface. Consumed by:\n *   - SYNC-5 unit tests (`ExecuteSyncUseCase` against synthetic sources)\n *   - SYNC-6 module tests (`SyncModule.forRoot({ backend: 'memory' })`)\n */\nimport { Injectable } from '@nestjs/common';\nimport type {\n  CursorSnapshot,\n  ICursorStore,\n} from './sync-cursor-store.protocol';\nimport type { MemorySyncSubscription } from './sync-run-recorder.memory-backend';\n\n@Injectable()\nexport class MemoryCursorStore implements ICursorStore {\n  /**\n   * Subscription-id → last persisted cursor. Public so tests can inspect\n   * or pre-seed state; production callers MUST go through `get`/`put`.\n   */\n  readonly cursors: Map<string, unknown> = new Map();\n\n  /**\n   * Seedable subscription metadata for `listAll` — the memory backend\n   * stores only `subscriptionId → cursor` in its write path, so the\n   * snapshot shape (`integrationId`, `adapter`, `domain`, `externalRef`,\n   * timestamps) has no natural source without test seeding. Tests populate\n   * this map; unseeded entries get empty-string metadata and `new Date(0)`\n   * timestamps so the shape stays stable. Production paths go through the\n   * Drizzle backend.\n   */\n  readonly subscriptions: Map<string, MemorySyncSubscription> = new Map();\n\n  async get(\n    subscriptionId: string,\n    _tenantId?: string | null,\n  ): Promise<unknown | null> {\n    // `Map.get` returns `undefined` for missing keys; the port contract\n    // returns `null`. Normalize here so callers can `=== null`-check.\n    const value = this.cursors.get(subscriptionId);\n    return value === undefined ? null : value;\n  }\n\n  async put(\n    subscriptionId: string,\n    cursor: unknown,\n    _tenantId?: string | null,\n  ): Promise<void> {\n    // Overwrite semantics — matches the port contract and the Drizzle\n    // backend's `ON CONFLICT DO UPDATE` behavior.\n    this.cursors.set(subscriptionId, cursor);\n  }\n\n  async listAll(_tenantId?: string | null): Promise<CursorSnapshot[]> {\n    // Accepts tenantId for contract symmetry but does not filter on it —\n    // the memory backend never enforces tenancy (see class-level comment).\n    const snapshots: CursorSnapshot[] = [];\n    for (const [subscriptionId, cursor] of this.cursors.entries()) {\n      const meta = this.subscriptions.get(subscriptionId);\n      snapshots.push({\n        subscriptionId,\n        integrationId: meta?.integrationId ?? '',\n        adapter: meta?.adapter ?? '',\n        domain: meta?.domain ?? '',\n        externalRef: meta?.externalRef ?? null,\n        cursor: cursor ?? null,\n        lastSyncAt: meta?.lastSyncAt ?? null,\n        updatedAt: meta?.updatedAt ?? new Date(0),\n        tenantId: null,\n      });\n    }\n    return snapshots.sort(\n      (a, b) => b.updatedAt.getTime() - a.updatedAt.getTime(),\n    );\n  }\n\n  /** Reset state. Tests call this in `beforeEach`. */\n  clear(): void {\n    this.cursors.clear();\n    this.subscriptions.clear();\n  }\n}\n","/**\n * MemoryRunRecorder — in-memory backend for `ISyncRunRecorder` (SYNC-6).\n *\n * Test double so `SyncModule.forRoot({ backend: 'memory' })` is genuinely\n * end-to-end runnable without Postgres. Mirrors the role of\n * `MemoryCursorStore`: plain keyed state, `clear()` helper for\n * `beforeEach` resets, public inspection surface so tests can assert on\n * the recorded run + item timeline without scraping logs.\n *\n * Validates `changedFields` through `FieldDiffSchema.parse` on every\n * `recordItem` call — same ADR-0003 contract as the Drizzle backend. An\n * in-memory recorder that skipped the validation would be a silently\n * weaker contract than production.\n *\n * `startRun` generates a uuid via `crypto.randomUUID()` (Node 19+ / Bun).\n * We don't import `uuid` because the subsystem has no other use for it.\n *\n * ## Multi-tenancy\n *\n * `tenantId` is accepted (and recorded on the in-memory row so tests can\n * assert it) but enforcement lives at the module boundary. The memory\n * backend intentionally does not throw on missing `tenantId` — that's\n * the orchestrator's job when `multiTenant=true` (SYNC-6). A permissive\n * memory recorder lets tests exercise error paths where the orchestrator\n * short-circuits before ever reaching the recorder.\n */\nimport { Injectable } from '@nestjs/common';\nimport type {\n  CompleteRunInput,\n  ISyncRunRecorder,\n  RecordItemInput,\n  StartRunInput,\n  SyncRunSummary,\n} from './sync-run-recorder.protocol';\nimport { FieldDiffSchema } from './sync-field-diff.protocol';\n\n/**\n * Optional per-subscription metadata a test can seed on the memory backend\n * so `listRecent` can surface `integrationId`. The memory recorder's write\n * path never persists subscription rows (it only stores runs + items), so\n * `listRecent` has no way to derive `integrationId` on its own. Tests that\n * care about the field should populate `subscriptions` before calling\n * `listRecent`; calls that don't seed get an empty string and a stable\n * shape (see `listRecent` below).\n */\nexport interface MemorySyncSubscription {\n  integrationId: string;\n  adapter: string;\n  domain: string;\n  externalRef: string | null;\n  lastSyncAt?: Date | null;\n  updatedAt: Date;\n}\n\n/**\n * Concrete run row as held in memory. Shape mirrors the interesting\n * columns on `sync_runs` so assertions read like DB queries.\n */\nexport interface MemoryRunRecord {\n  id: string;\n  subscriptionId: string;\n  direction: 'inbound' | 'outbound';\n  action: 'poll' | 'cdc' | 'webhook' | 'manual' | 'writeback';\n  status: 'running' | 'success' | 'no_changes' | 'failed';\n  cursorBefore: unknown | null;\n  cursorAfter: unknown | null;\n  recordsFound: number;\n  recordsProcessed: number;\n  durationMs: number | null;\n  error: string | null;\n  tenantId: string | null;\n  startedAt: Date;\n  completedAt: Date | null;\n}\n\n@Injectable()\nexport class MemoryRunRecorder implements ISyncRunRecorder {\n  /**\n   * All started runs keyed by id. Public so tests can inspect lifecycle\n   * transitions without poking through recording methods.\n   */\n  readonly runs: Map<string, MemoryRunRecord> = new Map();\n\n  /**\n   * Items keyed by `sync_run_id`, array order matches insertion order —\n   * mirrors the timeline the `(sync_run_id, created_at)` index produces\n   * in Postgres.\n   */\n  readonly items: Map<string, RecordItemInput[]> = new Map();\n\n  /**\n   * Seedable subscription metadata — tests populate this to make\n   * `listRecent` return meaningful `integrationId` values. The memory\n   * backend doesn't track subscriptions on its own (only runs + items), so\n   * this map is the intentional extension point: tests write entries for\n   * the subscription ids they use, production code never touches it.\n   */\n  readonly subscriptions: Map<string, MemorySyncSubscription> = new Map();\n\n  async startRun(input: StartRunInput): Promise<{ id: string }> {\n    const id = crypto.randomUUID();\n    this.runs.set(id, {\n      id,\n      subscriptionId: input.subscriptionId,\n      direction: input.direction,\n      action: input.action,\n      status: 'running',\n      cursorBefore: input.cursorBefore ?? null,\n      cursorAfter: null,\n      recordsFound: 0,\n      recordsProcessed: 0,\n      durationMs: null,\n      error: null,\n      tenantId: input.tenantId ?? null,\n      startedAt: new Date(),\n      completedAt: null,\n    });\n    this.items.set(id, []);\n    return { id };\n  }\n\n  async recordItem(input: RecordItemInput): Promise<void> {\n    // Same ADR-0003 contract as the Drizzle backend.\n    FieldDiffSchema.parse(input.changedFields);\n\n    const bucket = this.items.get(input.syncRunId);\n    if (!bucket) {\n      throw new Error(\n        `MemoryRunRecorder.recordItem: no run started for id '${input.syncRunId}'. ` +\n          `Call startRun(...) first.`,\n      );\n    }\n    bucket.push(input);\n  }\n\n  async completeRun(runId: string, input: CompleteRunInput): Promise<void> {\n    const run = this.runs.get(runId);\n    if (!run) {\n      throw new Error(\n        `MemoryRunRecorder.completeRun: no run started for id '${runId}'.`,\n      );\n    }\n    run.status = input.status;\n    run.recordsFound = input.recordsFound;\n    run.recordsProcessed = input.recordsProcessed;\n    run.cursorAfter = input.cursorAfter ?? null;\n    run.durationMs = input.durationMs;\n    run.error = input.error ?? null;\n    run.completedAt = new Date();\n  }\n\n  async listRecent(\n    limit: number,\n    subscriptionId?: string,\n    _tenantId?: string | null,\n  ): Promise<SyncRunSummary[]> {\n    // Memory backend accepts tenantId for contract symmetry but does not\n    // filter on it — state is process-local and cross-tenant isolation is\n    // not meaningful here (matches MemoryCursorStore behavior).\n    const all = Array.from(this.runs.values());\n    const filtered =\n      subscriptionId === undefined\n        ? all\n        : all.filter((r) => r.subscriptionId === subscriptionId);\n    return filtered\n      .sort((a, b) => b.startedAt.getTime() - a.startedAt.getTime())\n      .slice(0, limit)\n      .map((r) => ({\n        id: r.id,\n        subscriptionId: r.subscriptionId,\n        // integrationId is only knowable if the test seeded subscriptions\n        // metadata; empty string otherwise. The Drizzle backend resolves\n        // it via JOIN, which is the production path.\n        integrationId:\n          this.subscriptions.get(r.subscriptionId)?.integrationId ?? '',\n        status: r.status,\n        startedAt: r.startedAt,\n        completedAt: r.completedAt,\n        recordsProcessed: r.recordsProcessed,\n        tenantId: r.tenantId,\n      }));\n  }\n\n  /** Reset state. Tests call this in `beforeEach`. */\n  clear(): void {\n    this.runs.clear();\n    this.items.clear();\n    this.subscriptions.clear();\n  }\n\n  // ─── test ergonomics ─────────────────────────────────────────────────\n\n  /** All runs for a subscription, newest first. Timeline reads. */\n  getRunsForSubscription(subscriptionId: string): MemoryRunRecord[] {\n    return Array.from(this.runs.values())\n      .filter((r) => r.subscriptionId === subscriptionId)\n      .sort((a, b) => b.startedAt.getTime() - a.startedAt.getTime());\n  }\n\n  /** All item rows for a run, insertion-ordered. */\n  getItemsForRun(runId: string): RecordItemInput[] {\n    return this.items.get(runId) ?? [];\n  }\n}\n","/**\n * Sync subsystem — field-diff protocol (port)\n *\n * `IFieldDiffer<T>` is the pluggable differ seam. The default implementation\n * (`DeepEqualDiffer`, ships in SYNC-5) walks every field except an ignore\n * list; CDC-aware differs can skip comparison for fields the provider didn't\n * flag as changed.\n *\n * `FieldDiffSchema` is the structural enforcement of the `changed_fields`\n * column per ADR-0003 — enforced at write time by the recorder service so\n * consumers can rely on the shape in downstream queries.\n */\nimport { z } from 'zod';\n\n// ============================================================================\n// FieldDiff shape — the ADR-0003 contract\n// ============================================================================\n\n/**\n * Structured per-field change. Enforced shape for `sync_run_items.changed_fields`.\n *\n * `created` items set `from: null, to: <value>` for every non-null field.\n * `deleted` items set `from: <value>, to: null`.\n * `noop` items carry `{}`.\n */\nexport const FieldDiffValueSchema = z.object({\n  from: z.unknown(),\n  to: z.unknown(),\n});\n\nexport const FieldDiffSchema = z.record(z.string(), FieldDiffValueSchema);\n\nexport type FieldDiffValue = z.infer<typeof FieldDiffValueSchema>;\nexport type FieldDiff = z.infer<typeof FieldDiffSchema>;\n\n/** Result of comparing a new record against its existing local state. */\nexport type DiffResult = FieldDiff | 'noop';\n\n// ============================================================================\n// IFieldDiffer\n// ============================================================================\n\n/**\n * Pluggable differ. Default ships in SYNC-5 as `DeepEqualDiffer<T>` —\n * deep-equal over every field except an ignore list (`updated_at` and other\n * row metadata). CDC-aware differs restrict comparison to\n * `providerChangedFields` when supplied.\n */\nexport interface IFieldDiffer<T> {\n  /**\n   * @param existing — current local state, or `null` when the record is new\n   * @param incoming — the canonical record coming from the adapter\n   * @param providerChangedFields — optional hint from CDC-capable sources;\n   *   when present, differ may restrict the comparison to these fields\n   */\n  diff(\n    existing: T | null,\n    incoming: T,\n    providerChangedFields?: string[],\n  ): DiffResult;\n}\n","/**\n * PostgresCursorStore — Drizzle-backed `ICursorStore` (SYNC-4).\n *\n * Reads/writes `sync_subscriptions.cursor` directly — no service\n * composition. Consumers that want a service layer around subscriptions\n * wire it themselves; the port's contract is just cursor persistence.\n *\n * ## What `put` stamps\n *\n * `put` writes three columns in one statement: `cursor`, `last_sync_at`,\n * and `updated_at`. Rationale: SYNC-1's scheduling index\n * `(enabled, last_sync_at)` is useless if `last_sync_at` doesn't advance\n * with every cursor put. Every real consumer needs this stamped, so\n * bundling it here avoids every consumer wrapping the port in a service\n * layer just to stamp a timestamp.\n *\n * ## Multi-tenancy\n *\n * When `SYNC_MULTI_TENANT` is true (SYNC-6):\n *   - every read/write is scoped by `AND tenant_id = $tenantId`\n *   - a null/missing `tenantId` throws `MissingTenantIdError` via the\n *     shared `assertTenantId` helper (one message shape across the\n *     orchestrator + both backends, SYNC-6)\n *   - explicit `null` also throws — matches JOB-8 / EVT-6 strict-enforcement\n *\n * When the flag is off, `tenantId` is ignored. Cross-tenant isolation is\n * the caller's problem in single-tenant deployments.\n */\nimport { Inject, Injectable, Optional } from '@nestjs/common';\nimport { and, desc, eq, type SQL } from 'drizzle-orm';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport { DRIZZLE } from '../../constants/tokens';\nimport type {\n  CursorSnapshot,\n  ICursorStore,\n} from './sync-cursor-store.protocol';\nimport { syncSubscriptions } from './sync-audit.schema';\nimport { SYNC_MULTI_TENANT } from './sync.tokens';\nimport { assertTenantId } from './sync-errors';\n\n@Injectable()\nexport class PostgresCursorStore implements ICursorStore {\n  private readonly multiTenant: boolean;\n\n  constructor(\n    @Inject(DRIZZLE) private readonly db: DrizzleClient,\n    @Optional() @Inject(SYNC_MULTI_TENANT) multiTenant?: boolean,\n  ) {\n    this.multiTenant = multiTenant ?? false;\n  }\n\n  async get(\n    subscriptionId: string,\n    tenantId?: string | null,\n  ): Promise<unknown | null> {\n    const where = this.buildWhere(subscriptionId, tenantId, 'cursor.get');\n\n    const rows = await this.db\n      .select({ cursor: syncSubscriptions.cursor })\n      .from(syncSubscriptions)\n      .where(where)\n      .limit(1);\n\n    if (rows.length === 0) return null;\n    return rows[0]?.cursor ?? null;\n  }\n\n  async put(\n    subscriptionId: string,\n    cursor: unknown,\n    tenantId?: string | null,\n  ): Promise<void> {\n    const where = this.buildWhere(subscriptionId, tenantId, 'cursor.put');\n\n    await this.db\n      .update(syncSubscriptions)\n      .set({\n        cursor,\n        lastSyncAt: new Date(),\n        updatedAt: new Date(),\n      })\n      .where(where);\n  }\n\n  async listAll(tenantId?: string | null): Promise<CursorSnapshot[]> {\n    assertTenantId(tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'cursor.listAll',\n    });\n\n    const where = this.multiTenant\n      ? eq(syncSubscriptions.tenantId, tenantId as string)\n      : undefined;\n\n    const rows = await this.db\n      .select({\n        id: syncSubscriptions.id,\n        integrationId: syncSubscriptions.integrationId,\n        adapter: syncSubscriptions.adapter,\n        domain: syncSubscriptions.domain,\n        externalRef: syncSubscriptions.externalRef,\n        cursor: syncSubscriptions.cursor,\n        lastSyncAt: syncSubscriptions.lastSyncAt,\n        updatedAt: syncSubscriptions.updatedAt,\n        tenantId: syncSubscriptions.tenantId,\n      })\n      .from(syncSubscriptions)\n      .where(where)\n      .orderBy(desc(syncSubscriptions.updatedAt));\n\n    return rows.map((row) => ({\n      subscriptionId: row.id,\n      integrationId: row.integrationId,\n      adapter: row.adapter,\n      domain: row.domain,\n      externalRef: row.externalRef,\n      cursor: row.cursor ?? null,\n      lastSyncAt: row.lastSyncAt,\n      updatedAt: row.updatedAt,\n      tenantId: row.tenantId,\n    }));\n  }\n\n  /**\n   * Centralized WHERE clause — `get` and `put` share identical semantics.\n   * Drift here would let a caller read under one tenancy rule and write\n   * under another.\n   */\n  private buildWhere(\n    subscriptionId: string,\n    tenantId: string | null | undefined,\n    operation: string,\n  ): SQL | undefined {\n    assertTenantId(tenantId, {\n      multiTenant: this.multiTenant,\n      operation,\n    });\n    if (this.multiTenant) {\n      return and(\n        eq(syncSubscriptions.id, subscriptionId),\n        eq(syncSubscriptions.tenantId, tenantId as string),\n      );\n    }\n    return eq(syncSubscriptions.id, subscriptionId);\n  }\n}\n","/**\n * NestJS injection tokens\n *\n * Used with @Inject() decorator in concrete repository constructors.\n */\n\n/**\n * Injection token for the Drizzle ORM database client.\n *\n * Usage in concrete repositories:\n * ```typescript\n * constructor(@Inject(DRIZZLE) db: DrizzleClient) { super(db); }\n * ```\n */\nexport const DRIZZLE = 'DRIZZLE' as const;\n\n/**\n * Injection token for the event bus (IEventBus).\n *\n * Optional — only resolved when EventsModule.forRoot() is registered.\n * BaseService uses this with @Optional() to emit lifecycle events\n * without requiring the events subsystem to be installed.\n *\n * Usage in services/use cases:\n * ```typescript\n * @Optional() @Inject(EVENT_BUS) eventBus?: IEventBus\n * ```\n */\nexport const EVENT_BUS = 'EVENT_BUS' as const;\n","/**\n * Drizzle schema for the sync subsystem audit/observability tables (SYNC-1).\n *\n * Three tables model end-to-end sync observability, keyed by the single port\n * every sync adapter implements (`IChangeSource<T>` from SYNC-2):\n *\n *   - `sync_subscriptions` — owns the cursor per\n *       `(integration_id, adapter, domain, external_ref)` tuple. Addressed\n *       by id by `ICursorStore` (SYNC-3/SYNC-4).\n *   - `sync_runs`          — per-run audit log: start/complete, status,\n *       cursor before/after, counts, direction (inbound|outbound),\n *       action (poll|cdc|webhook|manual|writeback).\n *   - `sync_run_items`     — per-record change log with structured\n *       `changed_fields` jsonb enforced by the Zod `FieldDiffSchema`\n *       contract (ADR-0003; protocol lives in SYNC-2's\n *       sync-field-diff.protocol.ts).\n *\n * Design calls (vs. issue #126 open questions):\n *\n *   - `sync_subscriptions` ships in the subsystem (not consumer-owned).\n *     Rationale: SYNC-4's `PostgresCursorStore` needs to read/write this\n *     table directly; making it consumer-owned would require consumers to\n *     hand-wire a shape the backend already knows. The row is addressable\n *     by id and scoped by the uniqueness tuple; consumers can still\n *     query/list it freely. Same stance as `job_run` being subsystem-\n *     owned while remaining consumer-queryable.\n *\n *   - `tenant_id` is always emitted on the three tables as nullable text.\n *     The `SYNC_MULTI_TENANT` DI flag (SYNC-6) is what enforces the\n *     non-null + cross-tenant-isolation contract at the service/orchestrator\n *     boundary. This mirrors JOB-1/JOB-8's final shape — runtime guard, not\n *     a scaffold-time conditional column. Keeps the schema file uniform\n *     across single-tenant and multi-tenant deployments.\n *\n *   - `changed_fields` on `sync_run_items` is typed via the Zod-inferred\n *     `FieldDiff` shape from SYNC-2 (`{ [fieldName]: { from, to } }`). The\n *     recorder service (SYNC-5) validates every write against\n *     `FieldDiffSchema.parse` so consumers can rely on the shape.\n */\nimport {\n  pgEnum,\n  pgTable,\n  uuid,\n  text,\n  jsonb,\n  integer,\n  boolean,\n  timestamp,\n  index,\n  uniqueIndex,\n} from 'drizzle-orm/pg-core';\nimport type { InferSelectModel } from 'drizzle-orm';\n\nimport type { FieldDiff } from './sync-field-diff.protocol';\n\n// ─── Enums ──────────────────────────────────────────────────────────────────\n\n/**\n * Direction of a sync run relative to local state.\n *\n *   - `inbound`  — external → local (the common case: SFDC poll → local DB).\n *   - `outbound` — local → external (writeback; deferred per epic but the\n *     column shape is reserved so future writeback runs share the audit log).\n */\nexport const syncRunDirectionEnum = pgEnum('sync_run_direction', [\n  'inbound',\n  'outbound',\n]);\n\n/**\n * How the run detected upstream changes. Maps 1:1 to the `Change.source`\n * provenance on inbound runs; `manual` captures operator-triggered re-syncs\n * and `writeback` captures outbound runs.\n */\nexport const syncRunActionEnum = pgEnum('sync_run_action', [\n  'poll',\n  'cdc',\n  'webhook',\n  'manual',\n  'writeback',\n]);\n\n/**\n * Lifecycle status of a sync run.\n *\n *   - `running`     — in-flight; recorder has started but not completed.\n *   - `success`     — completed with at least one change processed.\n *   - `no_changes`  — completed cleanly, no upstream changes found.\n *   - `failed`      — errored before completion; `error` column carries the\n *     message. `records_processed` may be non-zero (partial progress).\n */\nexport const syncRunStatusEnum = pgEnum('sync_run_status', [\n  'running',\n  'success',\n  'no_changes',\n  'failed',\n]);\n\n/**\n * Operation applied per record. Mirrors `Change<T>.operation` from SYNC-2,\n * plus the recorder's own `'noop'` for changes that matched existing state.\n */\nexport const syncRunItemOperationEnum = pgEnum('sync_run_item_operation', [\n  'created',\n  'updated',\n  'deleted',\n  'noop',\n]);\n\n/**\n * Per-record status within a run. `skipped` captures loopback-detected echoes\n * of the local system's own writes (see `ILoopbackFingerprintStore` in the\n * epic), which record the external_id but intentionally do not touch local\n * state.\n */\nexport const syncRunItemStatusEnum = pgEnum('sync_run_item_status', [\n  'success',\n  'failed',\n  'skipped',\n]);\n\n// ─── sync_subscriptions ─────────────────────────────────────────────────────\n\n/**\n * One cursor owner per (integration, adapter, domain, external_ref).\n *\n *   - `integration_id` — opaque id of the connected account/instance. E.g.\n *     the SFDC org id for polling strategies, the GitHub installation id\n *     for webhook strategies.\n *   - `adapter`        — short adapter label, e.g. `'salesforce'`, `'hubspot'`.\n *   - `domain`         — canonical entity domain this subscription tracks,\n *     e.g. `'opportunity'`, `'contact'`.\n *   - `external_ref`   — optional upstream scope (e.g. a filter id, a\n *     webhook subscription id). NULL when the subscription covers the\n *     entire domain.\n *\n * The cursor shape is opaque jsonb — strategies type it internally (poll:\n * `{ systemModstamp }`, cdc: `{ replayId }`, webhook: `{ ts }`). Overwritten\n * by `ICursorStore.put(id, cursor)`.\n */\nexport const syncSubscriptions = pgTable(\n  'sync_subscriptions',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    integrationId: text('integration_id').notNull(),\n    adapter: text('adapter').notNull(),\n    domain: text('domain').notNull(),\n    externalRef: text('external_ref'),\n    enabled: boolean('enabled').notNull().default(true),\n    /**\n     * Per-subscription configuration bag. Strategies type it internally;\n     * e.g. polling strategies stash `{ batchSize, highWatermark }` here.\n     */\n    config: jsonb('config').notNull().default({}).$type<Record<string, unknown>>(),\n    /**\n     * Opaque cursor persisted by `ICursorStore.put()`. NULL until the first\n     * successful run advances it.\n     */\n    cursor: jsonb('cursor').$type<unknown>(),\n    lastSyncAt: timestamp('last_sync_at', { withTimezone: true }),\n    /** Runtime-enforced when `SYNC_MULTI_TENANT` is true; see SYNC-6. */\n    tenantId: text('tenant_id'),\n    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),\n  },\n  (t) => ({\n    /**\n     * Composite uniqueness per the epic shape. `external_ref` is nullable;\n     * Postgres treats NULLs as distinct in a UNIQUE constraint, which means\n     * two rows with the same `(integration_id, adapter, domain)` and NULL\n     * external_ref are allowed. That's intentional — a subscription with\n     * NULL external_ref covers the full domain, and duplicates there would\n     * be a consumer-layer modeling issue, not a schema concern.\n     */\n    uqSyncSubscriptionTuple: uniqueIndex('uq_sync_subscriptions_tuple').on(\n      t.integrationId,\n      t.adapter,\n      t.domain,\n      t.externalRef,\n    ),\n    /** Scheduling query: list enabled subscriptions ordered by staleness. */\n    idxSyncSubscriptionsEnabledLastSync: index(\n      'idx_sync_subscriptions_enabled_last_sync',\n    ).on(t.enabled, t.lastSyncAt),\n  }),\n);\n\nexport type SyncSubscriptionRow = InferSelectModel<typeof syncSubscriptions>;\n\n// ─── sync_runs ──────────────────────────────────────────────────────────────\n\n/**\n * One row per invocation of `ExecuteSyncUseCase`. `started_at` is set when\n * the recorder opens the run; `completed_at`, `status`, `records_*`,\n * `cursor_after`, and `duration_ms` are filled on completion.\n *\n * `cursor_before` / `cursor_after` carry the opaque cursor snapshots so the\n * run log is fully self-describing — given a run id, an operator can reason\n * about exactly what window was scanned without cross-referencing another\n * table.\n */\nexport const syncRuns = pgTable(\n  'sync_runs',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    subscriptionId: uuid('subscription_id')\n      .notNull()\n      .references(() => syncSubscriptions.id, { onDelete: 'cascade' }),\n    direction: syncRunDirectionEnum('direction').notNull(),\n    action: syncRunActionEnum('action').notNull(),\n    status: syncRunStatusEnum('status').notNull().default('running'),\n    recordsFound: integer('records_found').notNull().default(0),\n    recordsProcessed: integer('records_processed').notNull().default(0),\n    cursorBefore: jsonb('cursor_before').$type<unknown>(),\n    cursorAfter: jsonb('cursor_after').$type<unknown>(),\n    durationMs: integer('duration_ms'),\n    error: text('error'),\n    startedAt: timestamp('started_at', { withTimezone: true })\n      .notNull()\n      .defaultNow(),\n    completedAt: timestamp('completed_at', { withTimezone: true }),\n    /** Runtime-enforced when `SYNC_MULTI_TENANT` is true; see SYNC-6. */\n    tenantId: text('tenant_id'),\n  },\n  (t) => ({\n    /** Timeline read: \"most recent runs for this subscription\". */\n    idxSyncRunsSubscriptionStartedAt: index(\n      'idx_sync_runs_subscription_started_at',\n    ).on(t.subscriptionId, t.startedAt),\n    /** Stale-run sweeper: \"runs that started > N minutes ago and are still running\". */\n    idxSyncRunsStatusStartedAt: index('idx_sync_runs_status_started_at').on(\n      t.status,\n      t.startedAt,\n    ),\n  }),\n);\n\nexport type SyncRunRow = InferSelectModel<typeof syncRuns>;\n\n// ─── sync_run_items ─────────────────────────────────────────────────────────\n\n/**\n * One row per upstream change processed within a run. Captures the canonical\n * decision the orchestrator made (`operation` + `status`), the structured\n * per-field diff (`changed_fields`, ADR-0003), and the local row id\n * (`local_id`) for drill-down joins.\n *\n * `changed_fields` is validated at the recorder layer via `FieldDiffSchema`\n * (SYNC-2) — the $type<FieldDiff> annotation here only documents the shape\n * for Drizzle consumers. The runtime enforcement is non-negotiable: downstream\n * drift-detection queries rely on the `{from, to}` shape per field.\n *\n * `title` is an optional human-readable label captured at write time (e.g.\n * `\"Pinnacle opportunity\"`) so run-log UIs don't need to re-hydrate the\n * canonical record.\n */\nexport const syncRunItems = pgTable(\n  'sync_run_items',\n  {\n    id: uuid('id').primaryKey().defaultRandom(),\n    syncRunId: uuid('sync_run_id')\n      .notNull()\n      .references(() => syncRuns.id, { onDelete: 'cascade' }),\n    entityType: text('entity_type').notNull(),\n    externalId: text('external_id').notNull(),\n    localId: text('local_id'),\n    operation: syncRunItemOperationEnum('operation').notNull(),\n    status: syncRunItemStatusEnum('status').notNull(),\n    /**\n     * Structured per-field diff — ADR-0003 shape enforced by\n     * `FieldDiffSchema.parse` at the recorder service layer.\n     *\n     * Shape: `{ [fieldName]: { from: unknown, to: unknown } }`.\n     * Empty `{}` for `noop` items; `{ [field]: { from: null, to: <value> } }`\n     * for created items; `{ [field]: { from: <value>, to: null } }` for\n     * deleted items.\n     */\n    changedFields: jsonb('changed_fields').notNull().default({}).$type<FieldDiff>(),\n    title: text('title'),\n    error: text('error'),\n    createdAt: timestamp('created_at', { withTimezone: true })\n      .notNull()\n      .defaultNow(),\n    /** Runtime-enforced when `SYNC_MULTI_TENANT` is true; see SYNC-6. */\n    tenantId: text('tenant_id'),\n  },\n  (t) => ({\n    /** Ordered timeline within a run. */\n    idxSyncRunItemsRunCreatedAt: index('idx_sync_run_items_run_created_at').on(\n      t.syncRunId,\n      t.createdAt,\n    ),\n    /** Per-record history: \"every sync that touched opportunity/$extId\". */\n    idxSyncRunItemsEntityExternal: index(\n      'idx_sync_run_items_entity_external',\n    ).on(t.entityType, t.externalId),\n  }),\n);\n\nexport type SyncRunItemRow = InferSelectModel<typeof syncRunItems>;\n","/**\n * Typed errors + shared boundary helpers for the sync subsystem.\n *\n * Classes (not bare Error) so consumers can `instanceof` them in catch\n * blocks and exception filters can map them to HTTP codes.\n *\n * Mirrors the shape of `events-errors.ts` and `jobs-errors.ts`.\n */\n\n/**\n * Thrown by the Drizzle cursor-store / run-recorder backends AND by the\n * orchestrator entry point when `SYNC_MULTI_TENANT` is enabled but the\n * caller did not supply a non-null `tenantId`. Strict enforcement at the\n * boundary — explicit `null` still throws.\n *\n * Disable multi-tenancy on the module (`multiTenant: false`, the default)\n * to opt out of the requirement entirely.\n *\n * `operation` identifies the call site (e.g. `'cursor.put'`,\n * `'startRun'`, `'execute'`) so the stack-trace message points at the\n * specific boundary that rejected the input.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(operation: string) {\n    super(\n      `Missing tenantId for sync operation '${operation}'. SyncModule is ` +\n        `configured with multiTenant: true — every call must include a ` +\n        `non-null tenantId. Either pass the tenantId or disable multi-` +\n        `tenancy on the module.`,\n    );\n  }\n}\n\n/**\n * Shared boundary guard — used at the orchestrator entry AND inside the\n * Drizzle backends. Keeping the check in one function guarantees every\n * `MissingTenantIdError` carries the same message shape regardless of the\n * site that raised it, which makes it easier for consumers to pattern-\n * match on the error in logs/metrics.\n *\n * When `multiTenant` is false, the function is a no-op — `tenantId` may\n * be anything (including `undefined`). When true, `undefined` or `null`\n * throws.\n */\nexport function assertTenantId(\n  tenantId: string | null | undefined,\n  options: { multiTenant: boolean; operation: string },\n): asserts tenantId is string {\n  if (!options.multiTenant) return;\n  if (tenantId === undefined || tenantId === null) {\n    throw new MissingTenantIdError(options.operation);\n  }\n}\n","/**\n * DrizzleSyncRunRecorder — Drizzle-backed `ISyncRunRecorder` (SYNC-4).\n *\n * Generic write path only — extracted from the source app's\n * `SyncRunRecorderService`, minus CRM-specific convenience methods. Those\n * stay consumer-owned; the subsystem ships the substrate.\n *\n * ## Responsibilities\n *\n *   - `startRun`     — INSERT sync_runs row in status='running', returns id.\n *   - `recordItem`   — validates `changedFields` via `FieldDiffSchema.parse`\n *                      BEFORE the INSERT; a malformed shape throws before\n *                      any DB call fires. Enforces the ADR-0003 contract at\n *                      the write boundary.\n *   - `completeRun`  — UPDATE sync_runs with terminal status, counts,\n *                      cursor_after, duration_ms, completed_at.\n *\n * ## Multi-tenancy\n *\n * When `SYNC_MULTI_TENANT` is true (SYNC-6):\n *   - `startRun` and `recordItem` require non-null `tenantId` on input.\n *     Enforcement goes through the shared `assertTenantId` helper so the\n *     error message shape matches the orchestrator entry point + the\n *     cursor-store backends.\n *   - `completeRun` does NOT re-check tenancy — the run id was returned\n *     by `startRun` which already enforced it, and run ids are uuids that\n *     aren't guessable cross-tenant. Matches JOB-3's pattern of trusting\n *     the run-id for downstream mutations.\n */\nimport { Inject, Injectable, Optional } from '@nestjs/common';\nimport { and, desc, eq, type SQL } from 'drizzle-orm';\nimport type { DrizzleClient } from '../../types/drizzle';\nimport { DRIZZLE } from '../../constants/tokens';\nimport type {\n  CompleteRunInput,\n  ISyncRunRecorder,\n  RecordItemInput,\n  StartRunInput,\n  SyncRunSummary,\n} from './sync-run-recorder.protocol';\nimport { syncRuns, syncRunItems, syncSubscriptions } from './sync-audit.schema';\nimport { FieldDiffSchema } from './sync-field-diff.protocol';\nimport { SYNC_MULTI_TENANT } from './sync.tokens';\nimport { assertTenantId } from './sync-errors';\n\n@Injectable()\nexport class DrizzleSyncRunRecorder implements ISyncRunRecorder {\n  private readonly multiTenant: boolean;\n\n  constructor(\n    @Inject(DRIZZLE) private readonly db: DrizzleClient,\n    @Optional() @Inject(SYNC_MULTI_TENANT) multiTenant?: boolean,\n  ) {\n    this.multiTenant = multiTenant ?? false;\n  }\n\n  async startRun(input: StartRunInput): Promise<{ id: string }> {\n    assertTenantId(input.tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'startRun',\n    });\n\n    const rows = await this.db\n      .insert(syncRuns)\n      .values({\n        subscriptionId: input.subscriptionId,\n        direction: input.direction,\n        action: input.action,\n        status: 'running',\n        cursorBefore: input.cursorBefore ?? null,\n        tenantId: input.tenantId ?? null,\n      })\n      .returning({ id: syncRuns.id });\n\n    const id = rows[0]?.id;\n    if (!id) {\n      // Drizzle's insert().returning() contract: at least one row is\n      // returned for every successful INSERT. A missing id would indicate\n      // a driver misbehavior; throw loudly rather than return bogus data.\n      throw new Error('DrizzleSyncRunRecorder: INSERT RETURNING produced no id');\n    }\n    return { id };\n  }\n\n  async recordItem(input: RecordItemInput): Promise<void> {\n    assertTenantId(input.tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'recordItem',\n    });\n\n    // ADR-0003 contract enforcement — reject malformed changedFields\n    // before the DB call fires. `parse` throws a ZodError; callers see\n    // the validation failure, not a DB constraint error.\n    FieldDiffSchema.parse(input.changedFields);\n\n    await this.db.insert(syncRunItems).values({\n      syncRunId: input.syncRunId,\n      entityType: input.entityType,\n      externalId: input.externalId,\n      localId: input.localId ?? null,\n      operation: input.operation,\n      status: input.status,\n      changedFields: input.changedFields,\n      title: input.title ?? null,\n      error: input.error ?? null,\n      tenantId: input.tenantId ?? null,\n    });\n  }\n\n  async listRecent(\n    limit: number,\n    subscriptionId?: string,\n    tenantId?: string | null,\n  ): Promise<SyncRunSummary[]> {\n    assertTenantId(tenantId, {\n      multiTenant: this.multiTenant,\n      operation: 'listRecent',\n    });\n\n    // JOIN against sync_subscriptions to resolve `integration_id` per run.\n    // `sync_runs.subscription_id` is a non-null FK so INNER JOIN is correct;\n    // there should be no orphaned runs.\n    const conditions: SQL[] = [];\n    if (subscriptionId !== undefined) {\n      conditions.push(eq(syncRuns.subscriptionId, subscriptionId));\n    }\n    if (this.multiTenant) {\n      conditions.push(eq(syncRuns.tenantId, tenantId as string));\n    }\n    const where =\n      conditions.length === 0\n        ? undefined\n        : conditions.length === 1\n          ? conditions[0]\n          : and(...conditions);\n\n    const rows = await this.db\n      .select({\n        id: syncRuns.id,\n        subscriptionId: syncRuns.subscriptionId,\n        integrationId: syncSubscriptions.integrationId,\n        status: syncRuns.status,\n        startedAt: syncRuns.startedAt,\n        completedAt: syncRuns.completedAt,\n        recordsProcessed: syncRuns.recordsProcessed,\n        tenantId: syncRuns.tenantId,\n      })\n      .from(syncRuns)\n      .innerJoin(\n        syncSubscriptions,\n        eq(syncRuns.subscriptionId, syncSubscriptions.id),\n      )\n      .where(where)\n      .orderBy(desc(syncRuns.startedAt))\n      .limit(limit);\n\n    return rows.map((row) => ({\n      id: row.id,\n      subscriptionId: row.subscriptionId,\n      integrationId: row.integrationId,\n      status: row.status,\n      startedAt: row.startedAt,\n      completedAt: row.completedAt,\n      recordsProcessed: row.recordsProcessed,\n      tenantId: row.tenantId,\n    }));\n  }\n\n  async completeRun(runId: string, input: CompleteRunInput): Promise<void> {\n    await this.db\n      .update(syncRuns)\n      .set({\n        status: input.status,\n        recordsFound: input.recordsFound,\n        recordsProcessed: input.recordsProcessed,\n        cursorAfter: input.cursorAfter ?? null,\n        durationMs: input.durationMs,\n        error: input.error ?? null,\n        completedAt: new Date(),\n      })\n      .where(eq(syncRuns.id, runId));\n  }\n}\n","/**\n * DeepEqualDiffer — default `IFieldDiffer<T>` for the sync subsystem (SYNC-5).\n *\n * Walks every field of `incoming` against `existing`, emitting a structured\n * per-field diff (`{ from, to }`) for every field whose value changed.\n * Returns `'noop'` when the record is unchanged.\n *\n * Design decisions (extracted from the upstream consumer + HS-9 findings):\n *\n * 1. **Ignore list** — row metadata that sinks/services stamp unconditionally\n *    so upstream cannot reasonably disagree:\n *      `id`, `createdAt`, `updatedAt`, `deletedAt`, `type`,\n *      `lastModifiedAt`, `fields`, `providerMetadata`\n *    (`fields` is the EAV bag — it's diffed by the sink's EAV dual-write\n *    path, not at the canonical-record layer.)\n *\n * 2. **`providerChangedFields` hint (CDC)** — when present, restricts the\n *    comparison to the hinted field set. The hint is advisory; fields in\n *    the ignore list are still filtered out even when hinted. Provider\n *    hints are field-NAME-level; they don't override the ignore rules.\n *\n * 3. **Date → ISO string** — `Date` instances are normalized to\n *    `toISOString()` before comparison. Sinks return `Date` from the DB\n *    driver; adapters typically deliver strings. Direct `===` would\n *    always say \"changed.\"\n *\n * 4. **Decimal-string vs number** — Postgres `numeric` columns return as\n *    strings through Drizzle; adapters deliver numbers. When one side is a\n *    number and the other is a numeric string that parses to the same\n *    number, they're equal. The normalizer does NOT coerce non-numeric\n *    strings, and it preserves zero-vs-null distinction.\n *\n * 5. **null-existing path** — `diff(null, incoming)` produces a full\n *    created-shape diff (`{from: null, to: <value>}` for every non-ignored\n *    field). Orchestrator sees this and records `operation: 'created'`.\n */\nimport { Injectable } from '@nestjs/common';\nimport type {\n  DiffResult,\n  FieldDiff,\n  IFieldDiffer,\n} from './sync-field-diff.protocol';\n\n/**\n * Default ignore list. Keep in sync with consumer canonical-record shapes —\n * adding a row-metadata field here means no sync will ever mark it changed.\n *\n * Includes the columns contributed by the `external_id_tracking` behavior\n * (`external_id`/`externalId`, `provider`, `provider_metadata`/`providerMetadata`).\n * These are sync-tracking metadata, not domain attributes: they ride on the\n * canonical record but must never register as a field change (the external id\n * is the record's identity, not a mutable value). Listed in both snake_case\n * and camelCase so the differ ignores them regardless of the consumer's\n * canonical projection casing.\n */\nconst DEFAULT_IGNORE_FIELDS: ReadonlySet<string> = new Set([\n  'id',\n  'createdAt',\n  'updatedAt',\n  'deletedAt',\n  'type',\n  'lastModifiedAt',\n  'fields',\n  'external_id',\n  'externalId',\n  'provider',\n  'provider_metadata',\n  'providerMetadata',\n]);\n\nexport interface DeepEqualDifferOptions {\n  /**\n   * Extra field names to ignore in addition to the defaults. Consumers can\n   * pass `['sync_version']` etc. to augment the base list; values here are\n   * merged (not replaced) with `DEFAULT_IGNORE_FIELDS`.\n   */\n  readonly ignore?: readonly string[];\n}\n\n@Injectable()\nexport class DeepEqualDiffer<T extends Record<string, unknown>>\n  implements IFieldDiffer<T>\n{\n  private readonly ignore: ReadonlySet<string>;\n\n  constructor(opts: DeepEqualDifferOptions = {}) {\n    if (opts.ignore && opts.ignore.length > 0) {\n      this.ignore = new Set([...DEFAULT_IGNORE_FIELDS, ...opts.ignore]);\n    } else {\n      this.ignore = DEFAULT_IGNORE_FIELDS;\n    }\n  }\n\n  diff(\n    existing: T | null,\n    incoming: T,\n    providerChangedFields?: string[],\n  ): DiffResult {\n    // Created-shape: every non-ignored field becomes `{from: null, to}`.\n    if (existing === null) {\n      const out: FieldDiff = {};\n      for (const key of Object.keys(incoming)) {\n        if (this.ignore.has(key)) continue;\n        const value = (incoming as Record<string, unknown>)[key];\n        // Skip fields that are themselves null/undefined — a created record\n        // doesn't need to declare \"this field is null now\" for every\n        // untouched column.\n        if (value === null || value === undefined) continue;\n        out[key] = { from: null, to: value };\n      }\n      return Object.keys(out).length === 0 ? 'noop' : out;\n    }\n\n    // Field set to compare. `providerChangedFields` narrows to a hint set;\n    // ignored fields are filtered out regardless of hint.\n    const candidates = new Set<string>();\n    if (providerChangedFields && providerChangedFields.length > 0) {\n      for (const key of providerChangedFields) {\n        if (!this.ignore.has(key)) candidates.add(key);\n      }\n    } else {\n      for (const key of Object.keys(incoming)) {\n        if (!this.ignore.has(key)) candidates.add(key);\n      }\n      // Also include keys that exist on existing but not on incoming —\n      // e.g. a field that was cleared. This would otherwise be missed when\n      // incoming carries an undefined column we drop from the iteration.\n      for (const key of Object.keys(existing)) {\n        if (this.ignore.has(key)) continue;\n        if (!(key in (incoming as Record<string, unknown>))) continue;\n        candidates.add(key);\n      }\n    }\n\n    const out: FieldDiff = {};\n    for (const key of candidates) {\n      const before = (existing as Record<string, unknown>)[key];\n      const after = (incoming as Record<string, unknown>)[key];\n      if (!isEqual(before, after)) {\n        out[key] = { from: before ?? null, to: after ?? null };\n      }\n    }\n\n    return Object.keys(out).length === 0 ? 'noop' : out;\n  }\n}\n\n// ─── equality helpers ───────────────────────────────────────────────────────\n\n/**\n * Field-level equality with the canonical-sync normalizations:\n *   - Date → toISOString (adapters deliver strings)\n *   - numeric-string vs number → numeric equality when both parse\n *   - deep equality for plain objects/arrays (single-level is enough for\n *     canonical records; nested records travel as jsonb columns where the\n *     sink already owns the comparison)\n */\nfunction isEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n\n  const na = normalize(a);\n  const nb = normalize(b);\n  if (na === nb) return true;\n\n  // After normalization: both may still be non-primitive objects.\n  if (\n    typeof na === 'object' &&\n    typeof nb === 'object' &&\n    na !== null &&\n    nb !== null\n  ) {\n    return deepEqualObject(na as Record<string, unknown>, nb as Record<string, unknown>);\n  }\n\n  // Numeric string ↔ number: when one side is a number and the other is a\n  // string that parses to the same finite number.\n  const numericEqual = maybeNumericEqual(na, nb) || maybeNumericEqual(nb, na);\n  return numericEqual;\n}\n\nfunction normalize(value: unknown): unknown {\n  if (value instanceof Date) return value.toISOString();\n  return value;\n}\n\nfunction maybeNumericEqual(a: unknown, b: unknown): boolean {\n  // a is string-shape, b is number — parse a and compare. Only when the\n  // string looks numeric AND the parse round-trips (no silent NaN pass-\n  // through on non-numeric strings).\n  if (typeof a !== 'string' || typeof b !== 'number') return false;\n  if (a.trim() === '') return false;\n  const parsed = Number(a);\n  if (!Number.isFinite(parsed)) return false;\n  return parsed === b;\n}\n\nfunction deepEqualObject(\n  a: Record<string, unknown>,\n  b: Record<string, unknown>,\n): boolean {\n  if (Array.isArray(a) !== Array.isArray(b)) return false;\n  const aKeys = Object.keys(a);\n  const bKeys = Object.keys(b);\n  if (aKeys.length !== bKeys.length) return false;\n  for (const key of aKeys) {\n    if (!(key in b)) return false;\n    if (!isEqual(a[key], b[key])) return false;\n  }\n  return true;\n}\n"],"mappings":";;;;;;;;;;;;;AA+DA,SAAS,cAAiD;;;ACxCnD,IAAM,oBAAoB;AAC1B,IAAM,oBAAoB;AAO1B,IAAM,oBAAoB;AAS1B,IAAM,sBAAsB;AAQ5B,IAAM,oBAAoB;;;ACpBjC,SAAS,kBAAkB;AAQpB,IAAM,oBAAN,MAAgD;AAAA;AAAA;AAAA;AAAA;AAAA,EAK5C,UAAgC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWxC,gBAAqD,oBAAI,IAAI;AAAA,EAEtE,MAAM,IACJ,gBACA,WACyB;AAGzB,UAAM,QAAQ,KAAK,QAAQ,IAAI,cAAc;AAC7C,WAAO,UAAU,SAAY,OAAO;AAAA,EACtC;AAAA,EAEA,MAAM,IACJ,gBACA,QACA,WACe;AAGf,SAAK,QAAQ,IAAI,gBAAgB,MAAM;AAAA,EACzC;AAAA,EAEA,MAAM,QAAQ,WAAsD;AAGlE,UAAM,YAA8B,CAAC;AACrC,eAAW,CAAC,gBAAgB,MAAM,KAAK,KAAK,QAAQ,QAAQ,GAAG;AAC7D,YAAM,OAAO,KAAK,cAAc,IAAI,cAAc;AAClD,gBAAU,KAAK;AAAA,QACb;AAAA,QACA,eAAe,MAAM,iBAAiB;AAAA,QACtC,SAAS,MAAM,WAAW;AAAA,QAC1B,QAAQ,MAAM,UAAU;AAAA,QACxB,aAAa,MAAM,eAAe;AAAA,QAClC,QAAQ,UAAU;AAAA,QAClB,YAAY,MAAM,cAAc;AAAA,QAChC,WAAW,MAAM,aAAa,oBAAI,KAAK,CAAC;AAAA,QACxC,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,WAAO,UAAU;AAAA,MACf,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ;AAAA,IACxD;AAAA,EACF;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,QAAQ,MAAM;AACnB,SAAK,cAAc,MAAM;AAAA,EAC3B;AACF;AAlEa,oBAAN;AAAA,EADN,WAAW;AAAA,GACC;;;ACVb,SAAS,cAAAA,mBAAkB;;;ACd3B,SAAS,SAAS;AAaX,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,QAAQ;AAAA,EAChB,IAAI,EAAE,QAAQ;AAChB,CAAC;AAEM,IAAM,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,oBAAoB;;;AD8CjE,IAAM,oBAAN,MAAoD;AAAA;AAAA;AAAA;AAAA;AAAA,EAKhD,OAAqC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7C,QAAwC,oBAAI,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAShD,gBAAqD,oBAAI,IAAI;AAAA,EAEtE,MAAM,SAAS,OAA+C;AAC5D,UAAM,KAAK,OAAO,WAAW;AAC7B,SAAK,KAAK,IAAI,IAAI;AAAA,MAChB;AAAA,MACA,gBAAgB,MAAM;AAAA,MACtB,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,MACR,cAAc,MAAM,gBAAgB;AAAA,MACpC,aAAa;AAAA,MACb,cAAc;AAAA,MACd,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,OAAO;AAAA,MACP,UAAU,MAAM,YAAY;AAAA,MAC5B,WAAW,oBAAI,KAAK;AAAA,MACpB,aAAa;AAAA,IACf,CAAC;AACD,SAAK,MAAM,IAAI,IAAI,CAAC,CAAC;AACrB,WAAO,EAAE,GAAG;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,OAAuC;AAEtD,oBAAgB,MAAM,MAAM,aAAa;AAEzC,UAAM,SAAS,KAAK,MAAM,IAAI,MAAM,SAAS;AAC7C,QAAI,CAAC,QAAQ;AACX,YAAM,IAAI;AAAA,QACR,wDAAwD,MAAM,SAAS;AAAA,MAEzE;AAAA,IACF;AACA,WAAO,KAAK,KAAK;AAAA,EACnB;AAAA,EAEA,MAAM,YAAY,OAAe,OAAwC;AACvE,UAAM,MAAM,KAAK,KAAK,IAAI,KAAK;AAC/B,QAAI,CAAC,KAAK;AACR,YAAM,IAAI;AAAA,QACR,yDAAyD,KAAK;AAAA,MAChE;AAAA,IACF;AACA,QAAI,SAAS,MAAM;AACnB,QAAI,eAAe,MAAM;AACzB,QAAI,mBAAmB,MAAM;AAC7B,QAAI,cAAc,MAAM,eAAe;AACvC,QAAI,aAAa,MAAM;AACvB,QAAI,QAAQ,MAAM,SAAS;AAC3B,QAAI,cAAc,oBAAI,KAAK;AAAA,EAC7B;AAAA,EAEA,MAAM,WACJ,OACA,gBACA,WAC2B;AAI3B,UAAM,MAAM,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC;AACzC,UAAM,WACJ,mBAAmB,SACf,MACA,IAAI,OAAO,CAAC,MAAM,EAAE,mBAAmB,cAAc;AAC3D,WAAO,SACJ,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC,EAC5D,MAAM,GAAG,KAAK,EACd,IAAI,CAAC,OAAO;AAAA,MACX,IAAI,EAAE;AAAA,MACN,gBAAgB,EAAE;AAAA;AAAA;AAAA;AAAA,MAIlB,eACE,KAAK,cAAc,IAAI,EAAE,cAAc,GAAG,iBAAiB;AAAA,MAC7D,QAAQ,EAAE;AAAA,MACV,WAAW,EAAE;AAAA,MACb,aAAa,EAAE;AAAA,MACf,kBAAkB,EAAE;AAAA,MACpB,UAAU,EAAE;AAAA,IACd,EAAE;AAAA,EACN;AAAA;AAAA,EAGA,QAAc;AACZ,SAAK,KAAK,MAAM;AAChB,SAAK,MAAM,MAAM;AACjB,SAAK,cAAc,MAAM;AAAA,EAC3B;AAAA;AAAA;AAAA,EAKA,uBAAuB,gBAA2C;AAChE,WAAO,MAAM,KAAK,KAAK,KAAK,OAAO,CAAC,EACjC,OAAO,CAAC,MAAM,EAAE,mBAAmB,cAAc,EACjD,KAAK,CAAC,GAAG,MAAM,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ,CAAC;AAAA,EACjE;AAAA;AAAA,EAGA,eAAe,OAAkC;AAC/C,WAAO,KAAK,MAAM,IAAI,KAAK,KAAK,CAAC;AAAA,EACnC;AACF;AA/Ha,oBAAN;AAAA,EADNC,YAAW;AAAA,GACC;;;AEhDb,SAAS,QAAQ,cAAAC,aAAY,gBAAgB;AAC7C,SAAS,KAAK,MAAM,UAAoB;;;ACfjC,IAAM,UAAU;;;ACyBvB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAcA,IAAM,uBAAuB,OAAO,sBAAsB;AAAA,EAC/D;AAAA,EACA;AACF,CAAC;AAOM,IAAM,oBAAoB,OAAO,mBAAmB;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAWM,IAAM,oBAAoB,OAAO,mBAAmB;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAMM,IAAM,2BAA2B,OAAO,2BAA2B;AAAA,EACxE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAQM,IAAM,wBAAwB,OAAO,wBAAwB;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAqBM,IAAM,oBAAoB;AAAA,EAC/B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,eAAe,KAAK,gBAAgB,EAAE,QAAQ;AAAA,IAC9C,SAAS,KAAK,SAAS,EAAE,QAAQ;AAAA,IACjC,QAAQ,KAAK,QAAQ,EAAE,QAAQ;AAAA,IAC/B,aAAa,KAAK,cAAc;AAAA,IAChC,SAAS,QAAQ,SAAS,EAAE,QAAQ,EAAE,QAAQ,IAAI;AAAA;AAAA;AAAA;AAAA;AAAA,IAKlD,QAAQ,MAAM,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,MAA+B;AAAA;AAAA;AAAA;AAAA;AAAA,IAK7E,QAAQ,MAAM,QAAQ,EAAE,MAAe;AAAA,IACvC,YAAY,UAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;AAAA;AAAA,IAE5D,UAAU,KAAK,WAAW;AAAA,IAC1B,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,IAChF,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EAAE,QAAQ,EAAE,WAAW;AAAA,EAClF;AAAA,EACA,CAAC,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IASN,yBAAyB,YAAY,6BAA6B,EAAE;AAAA,MAClE,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,qCAAqC;AAAA,MACnC;AAAA,IACF,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU;AAAA,EAC9B;AACF;AAgBO,IAAM,WAAW;AAAA,EACtB;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,gBAAgB,KAAK,iBAAiB,EACnC,QAAQ,EACR,WAAW,MAAM,kBAAkB,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IACjE,WAAW,qBAAqB,WAAW,EAAE,QAAQ;AAAA,IACrD,QAAQ,kBAAkB,QAAQ,EAAE,QAAQ;AAAA,IAC5C,QAAQ,kBAAkB,QAAQ,EAAE,QAAQ,EAAE,QAAQ,SAAS;AAAA,IAC/D,cAAc,QAAQ,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IAC1D,kBAAkB,QAAQ,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,IAClE,cAAc,MAAM,eAAe,EAAE,MAAe;AAAA,IACpD,aAAa,MAAM,cAAc,EAAE,MAAe;AAAA,IAClD,YAAY,QAAQ,aAAa;AAAA,IACjC,OAAO,KAAK,OAAO;AAAA,IACnB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EACtD,QAAQ,EACR,WAAW;AAAA,IACd,aAAa,UAAU,gBAAgB,EAAE,cAAc,KAAK,CAAC;AAAA;AAAA,IAE7D,UAAU,KAAK,WAAW;AAAA,EAC5B;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,kCAAkC;AAAA,MAChC;AAAA,IACF,EAAE,GAAG,EAAE,gBAAgB,EAAE,SAAS;AAAA;AAAA,IAElC,4BAA4B,MAAM,iCAAiC,EAAE;AAAA,MACnE,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,EACF;AACF;AAqBO,IAAM,eAAe;AAAA,EAC1B;AAAA,EACA;AAAA,IACE,IAAI,KAAK,IAAI,EAAE,WAAW,EAAE,cAAc;AAAA,IAC1C,WAAW,KAAK,aAAa,EAC1B,QAAQ,EACR,WAAW,MAAM,SAAS,IAAI,EAAE,UAAU,UAAU,CAAC;AAAA,IACxD,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,YAAY,KAAK,aAAa,EAAE,QAAQ;AAAA,IACxC,SAAS,KAAK,UAAU;AAAA,IACxB,WAAW,yBAAyB,WAAW,EAAE,QAAQ;AAAA,IACzD,QAAQ,sBAAsB,QAAQ,EAAE,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAUhD,eAAe,MAAM,gBAAgB,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAiB;AAAA,IAC9E,OAAO,KAAK,OAAO;AAAA,IACnB,OAAO,KAAK,OAAO;AAAA,IACnB,WAAW,UAAU,cAAc,EAAE,cAAc,KAAK,CAAC,EACtD,QAAQ,EACR,WAAW;AAAA;AAAA,IAEd,UAAU,KAAK,WAAW;AAAA,EAC5B;AAAA,EACA,CAAC,OAAO;AAAA;AAAA,IAEN,6BAA6B,MAAM,mCAAmC,EAAE;AAAA,MACtE,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA;AAAA,IAEA,+BAA+B;AAAA,MAC7B;AAAA,IACF,EAAE,GAAG,EAAE,YAAY,EAAE,UAAU;AAAA,EACjC;AACF;;;ACnRO,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAC5B,OAAO;AAAA,EACzB,YAAY,WAAmB;AAC7B;AAAA,MACE,wCAAwC,SAAS;AAAA,IAInD;AAAA,EACF;AACF;AAaO,SAAS,eACd,UACA,SAC4B;AAC5B,MAAI,CAAC,QAAQ,YAAa;AAC1B,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,UAAM,IAAI,qBAAqB,QAAQ,SAAS;AAAA,EAClD;AACF;;;AHZO,IAAM,sBAAN,MAAkD;AAAA,EAGvD,YACoC,IACK,aACvC;AAFkC;AAGlC,SAAK,cAAc,eAAe;AAAA,EACpC;AAAA,EAJoC;AAAA,EAHnB;AAAA,EASjB,MAAM,IACJ,gBACA,UACyB;AACzB,UAAM,QAAQ,KAAK,WAAW,gBAAgB,UAAU,YAAY;AAEpE,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO,EAAE,QAAQ,kBAAkB,OAAO,CAAC,EAC3C,KAAK,iBAAiB,EACtB,MAAM,KAAK,EACX,MAAM,CAAC;AAEV,QAAI,KAAK,WAAW,EAAG,QAAO;AAC9B,WAAO,KAAK,CAAC,GAAG,UAAU;AAAA,EAC5B;AAAA,EAEA,MAAM,IACJ,gBACA,QACA,UACe;AACf,UAAM,QAAQ,KAAK,WAAW,gBAAgB,UAAU,YAAY;AAEpE,UAAM,KAAK,GACR,OAAO,iBAAiB,EACxB,IAAI;AAAA,MACH;AAAA,MACA,YAAY,oBAAI,KAAK;AAAA,MACrB,WAAW,oBAAI,KAAK;AAAA,IACtB,CAAC,EACA,MAAM,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,QAAQ,UAAqD;AACjE,mBAAe,UAAU;AAAA,MACvB,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,QAAQ,KAAK,cACf,GAAG,kBAAkB,UAAU,QAAkB,IACjD;AAEJ,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO;AAAA,MACN,IAAI,kBAAkB;AAAA,MACtB,eAAe,kBAAkB;AAAA,MACjC,SAAS,kBAAkB;AAAA,MAC3B,QAAQ,kBAAkB;AAAA,MAC1B,aAAa,kBAAkB;AAAA,MAC/B,QAAQ,kBAAkB;AAAA,MAC1B,YAAY,kBAAkB;AAAA,MAC9B,WAAW,kBAAkB;AAAA,MAC7B,UAAU,kBAAkB;AAAA,IAC9B,CAAC,EACA,KAAK,iBAAiB,EACtB,MAAM,KAAK,EACX,QAAQ,KAAK,kBAAkB,SAAS,CAAC;AAE5C,WAAO,KAAK,IAAI,CAAC,SAAS;AAAA,MACxB,gBAAgB,IAAI;AAAA,MACpB,eAAe,IAAI;AAAA,MACnB,SAAS,IAAI;AAAA,MACb,QAAQ,IAAI;AAAA,MACZ,aAAa,IAAI;AAAA,MACjB,QAAQ,IAAI,UAAU;AAAA,MACtB,YAAY,IAAI;AAAA,MAChB,WAAW,IAAI;AAAA,MACf,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,WACN,gBACA,UACA,WACiB;AACjB,mBAAe,UAAU;AAAA,MACvB,aAAa,KAAK;AAAA,MAClB;AAAA,IACF,CAAC;AACD,QAAI,KAAK,aAAa;AACpB,aAAO;AAAA,QACL,GAAG,kBAAkB,IAAI,cAAc;AAAA,QACvC,GAAG,kBAAkB,UAAU,QAAkB;AAAA,MACnD;AAAA,IACF;AACA,WAAO,GAAG,kBAAkB,IAAI,cAAc;AAAA,EAChD;AACF;AAxGa,sBAAN;AAAA,EADNC,YAAW;AAAA,EAKP,0BAAO,OAAO;AAAA,EACd,4BAAS;AAAA,EAAG,0BAAO,iBAAiB;AAAA,GAL5B;;;AIZb,SAAS,UAAAC,SAAQ,cAAAC,aAAY,YAAAC,iBAAgB;AAC7C,SAAS,OAAAC,MAAK,QAAAC,OAAM,MAAAC,WAAoB;AAgBjC,IAAM,yBAAN,MAAyD;AAAA,EAG9D,YACoC,IACK,aACvC;AAFkC;AAGlC,SAAK,cAAc,eAAe;AAAA,EACpC;AAAA,EAJoC;AAAA,EAHnB;AAAA,EASjB,MAAM,SAAS,OAA+C;AAC5D,mBAAe,MAAM,UAAU;AAAA,MAC7B,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAED,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO,QAAQ,EACf,OAAO;AAAA,MACN,gBAAgB,MAAM;AAAA,MACtB,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,QAAQ;AAAA,MACR,cAAc,MAAM,gBAAgB;AAAA,MACpC,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC,EACA,UAAU,EAAE,IAAI,SAAS,GAAG,CAAC;AAEhC,UAAM,KAAK,KAAK,CAAC,GAAG;AACpB,QAAI,CAAC,IAAI;AAIP,YAAM,IAAI,MAAM,yDAAyD;AAAA,IAC3E;AACA,WAAO,EAAE,GAAG;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,OAAuC;AACtD,mBAAe,MAAM,UAAU;AAAA,MAC7B,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAKD,oBAAgB,MAAM,MAAM,aAAa;AAEzC,UAAM,KAAK,GAAG,OAAO,YAAY,EAAE,OAAO;AAAA,MACxC,WAAW,MAAM;AAAA,MACjB,YAAY,MAAM;AAAA,MAClB,YAAY,MAAM;AAAA,MAClB,SAAS,MAAM,WAAW;AAAA,MAC1B,WAAW,MAAM;AAAA,MACjB,QAAQ,MAAM;AAAA,MACd,eAAe,MAAM;AAAA,MACrB,OAAO,MAAM,SAAS;AAAA,MACtB,OAAO,MAAM,SAAS;AAAA,MACtB,UAAU,MAAM,YAAY;AAAA,IAC9B,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,WACJ,OACA,gBACA,UAC2B;AAC3B,mBAAe,UAAU;AAAA,MACvB,aAAa,KAAK;AAAA,MAClB,WAAW;AAAA,IACb,CAAC;AAKD,UAAM,aAAoB,CAAC;AAC3B,QAAI,mBAAmB,QAAW;AAChC,iBAAW,KAAKC,IAAG,SAAS,gBAAgB,cAAc,CAAC;AAAA,IAC7D;AACA,QAAI,KAAK,aAAa;AACpB,iBAAW,KAAKA,IAAG,SAAS,UAAU,QAAkB,CAAC;AAAA,IAC3D;AACA,UAAM,QACJ,WAAW,WAAW,IAClB,SACA,WAAW,WAAW,IACpB,WAAW,CAAC,IACZC,KAAI,GAAG,UAAU;AAEzB,UAAM,OAAO,MAAM,KAAK,GACrB,OAAO;AAAA,MACN,IAAI,SAAS;AAAA,MACb,gBAAgB,SAAS;AAAA,MACzB,eAAe,kBAAkB;AAAA,MACjC,QAAQ,SAAS;AAAA,MACjB,WAAW,SAAS;AAAA,MACpB,aAAa,SAAS;AAAA,MACtB,kBAAkB,SAAS;AAAA,MAC3B,UAAU,SAAS;AAAA,IACrB,CAAC,EACA,KAAK,QAAQ,EACb;AAAA,MACC;AAAA,MACAD,IAAG,SAAS,gBAAgB,kBAAkB,EAAE;AAAA,IAClD,EACC,MAAM,KAAK,EACX,QAAQE,MAAK,SAAS,SAAS,CAAC,EAChC,MAAM,KAAK;AAEd,WAAO,KAAK,IAAI,CAAC,SAAS;AAAA,MACxB,IAAI,IAAI;AAAA,MACR,gBAAgB,IAAI;AAAA,MACpB,eAAe,IAAI;AAAA,MACnB,QAAQ,IAAI;AAAA,MACZ,WAAW,IAAI;AAAA,MACf,aAAa,IAAI;AAAA,MACjB,kBAAkB,IAAI;AAAA,MACtB,UAAU,IAAI;AAAA,IAChB,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,YAAY,OAAe,OAAwC;AACvE,UAAM,KAAK,GACR,OAAO,QAAQ,EACf,IAAI;AAAA,MACH,QAAQ,MAAM;AAAA,MACd,cAAc,MAAM;AAAA,MACpB,kBAAkB,MAAM;AAAA,MACxB,aAAa,MAAM,eAAe;AAAA,MAClC,YAAY,MAAM;AAAA,MAClB,OAAO,MAAM,SAAS;AAAA,MACtB,aAAa,oBAAI,KAAK;AAAA,IACxB,CAAC,EACA,MAAMF,IAAG,SAAS,IAAI,KAAK,CAAC;AAAA,EACjC;AACF;AAxIa,yBAAN;AAAA,EADNG,YAAW;AAAA,EAKP,mBAAAC,QAAO,OAAO;AAAA,EACd,mBAAAC,UAAS;AAAA,EAAG,mBAAAD,QAAO,iBAAiB;AAAA,GAL5B;;;ACVb,SAAS,cAAAE,mBAAkB;AAmB3B,IAAM,wBAA6C,oBAAI,IAAI;AAAA,EACzD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAYM,IAAM,kBAAN,MAEP;AAAA,EACmB;AAAA,EAEjB,YAAY,OAA+B,CAAC,GAAG;AAC7C,QAAI,KAAK,UAAU,KAAK,OAAO,SAAS,GAAG;AACzC,WAAK,SAAS,oBAAI,IAAI,CAAC,GAAG,uBAAuB,GAAG,KAAK,MAAM,CAAC;AAAA,IAClE,OAAO;AACL,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,KACE,UACA,UACA,uBACY;AAEZ,QAAI,aAAa,MAAM;AACrB,YAAMC,OAAiB,CAAC;AACxB,iBAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,YAAI,KAAK,OAAO,IAAI,GAAG,EAAG;AAC1B,cAAM,QAAS,SAAqC,GAAG;AAIvD,YAAI,UAAU,QAAQ,UAAU,OAAW;AAC3C,QAAAA,KAAI,GAAG,IAAI,EAAE,MAAM,MAAM,IAAI,MAAM;AAAA,MACrC;AACA,aAAO,OAAO,KAAKA,IAAG,EAAE,WAAW,IAAI,SAASA;AAAA,IAClD;AAIA,UAAM,aAAa,oBAAI,IAAY;AACnC,QAAI,yBAAyB,sBAAsB,SAAS,GAAG;AAC7D,iBAAW,OAAO,uBAAuB;AACvC,YAAI,CAAC,KAAK,OAAO,IAAI,GAAG,EAAG,YAAW,IAAI,GAAG;AAAA,MAC/C;AAAA,IACF,OAAO;AACL,iBAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,YAAI,CAAC,KAAK,OAAO,IAAI,GAAG,EAAG,YAAW,IAAI,GAAG;AAAA,MAC/C;AAIA,iBAAW,OAAO,OAAO,KAAK,QAAQ,GAAG;AACvC,YAAI,KAAK,OAAO,IAAI,GAAG,EAAG;AAC1B,YAAI,EAAE,OAAQ,UAAuC;AACrD,mBAAW,IAAI,GAAG;AAAA,MACpB;AAAA,IACF;AAEA,UAAM,MAAiB,CAAC;AACxB,eAAW,OAAO,YAAY;AAC5B,YAAM,SAAU,SAAqC,GAAG;AACxD,YAAM,QAAS,SAAqC,GAAG;AACvD,UAAI,CAAC,QAAQ,QAAQ,KAAK,GAAG;AAC3B,YAAI,GAAG,IAAI,EAAE,MAAM,UAAU,MAAM,IAAI,SAAS,KAAK;AAAA,MACvD;AAAA,IACF;AAEA,WAAO,OAAO,KAAK,GAAG,EAAE,WAAW,IAAI,SAAS;AAAA,EAClD;AACF;AAjEa,kBAAN;AAAA,EADNC,YAAW;AAAA,GACC;AA6Eb,SAAS,QAAQ,GAAY,GAAqB;AAChD,MAAI,MAAM,EAAG,QAAO;AAEpB,QAAM,KAAK,UAAU,CAAC;AACtB,QAAM,KAAK,UAAU,CAAC;AACtB,MAAI,OAAO,GAAI,QAAO;AAGtB,MACE,OAAO,OAAO,YACd,OAAO,OAAO,YACd,OAAO,QACP,OAAO,MACP;AACA,WAAO,gBAAgB,IAA+B,EAA6B;AAAA,EACrF;AAIA,QAAM,eAAe,kBAAkB,IAAI,EAAE,KAAK,kBAAkB,IAAI,EAAE;AAC1E,SAAO;AACT;AAEA,SAAS,UAAU,OAAyB;AAC1C,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,SAAO;AACT;AAEA,SAAS,kBAAkB,GAAY,GAAqB;AAI1D,MAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO;AAC3D,MAAI,EAAE,KAAK,MAAM,GAAI,QAAO;AAC5B,QAAM,SAAS,OAAO,CAAC;AACvB,MAAI,CAAC,OAAO,SAAS,MAAM,EAAG,QAAO;AACrC,SAAO,WAAW;AACpB;AAEA,SAAS,gBACP,GACA,GACS;AACT,MAAI,MAAM,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,EAAG,QAAO;AAClD,QAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,QAAM,QAAQ,OAAO,KAAK,CAAC;AAC3B,MAAI,MAAM,WAAW,MAAM,OAAQ,QAAO;AAC1C,aAAW,OAAO,OAAO;AACvB,QAAI,EAAE,OAAO,GAAI,QAAO;AACxB,QAAI,CAAC,QAAQ,EAAE,GAAG,GAAG,EAAE,GAAG,CAAC,EAAG,QAAO;AAAA,EACvC;AACA,SAAO;AACT;;;AVxGO,IAAM,aAAN,MAAiB;AAAA,EACtB,OAAO,QAAQ,SAA2C;AACxD,UAAM,cAAc,QAAQ,eAAe;AAE3C,UAAM,kBAA8B;AAAA,MAClC,EAAE,SAAS,qBAAqB,UAAU,QAAQ;AAAA,MAClD,EAAE,SAAS,mBAAmB,UAAU,YAAY;AAAA;AAAA;AAAA,MAGpD,EAAE,SAAS,mBAAmB,UAAU,IAAI,gBAAgB,EAAE;AAAA,IAChE;AAEA,UAAM,mBACJ,QAAQ,YAAY,WAChB;AAAA;AAAA;AAAA;AAAA,MAIE,EAAE,SAAS,mBAAmB,UAAU,IAAI,kBAAkB,EAAE;AAAA,MAChE;AAAA,QACE,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,MACA,EAAE,SAAS,mBAAmB,UAAU,IAAI,kBAAkB,EAAE;AAAA,MAChE;AAAA,QACE,SAAS;AAAA,QACT,aAAa;AAAA,MACf;AAAA,IACF,IACA;AAAA;AAAA;AAAA;AAAA,MAIE,EAAE,SAAS,mBAAmB,UAAU,oBAAoB;AAAA,MAC5D,EAAE,SAAS,mBAAmB,UAAU,uBAAuB;AAAA,IACjE;AAEN,WAAO;AAAA,MACL,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,WAAW,CAAC,GAAG,iBAAiB,GAAG,gBAAgB;AAAA,MACnD,SAAS;AAAA,QACP;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAlDa,aAAN;AAAA,EADN,OAAO,CAAC,CAAC;AAAA,GACG;","names":["Injectable","Injectable","Injectable","Injectable","Inject","Injectable","Optional","and","desc","eq","eq","and","desc","Injectable","Inject","Optional","Injectable","out","Injectable"]}