@pattern-stack/codegen 0.8.1 → 0.9.1

package/dist/runtime/subsystems/jobs/job-run-service.memory-backend.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../runtime/subsystems/jobs/job-run-service.memory-backend.ts","../../../../runtime/subsystems/jobs/jobs-domain.tokens.ts","../../../../runtime/subsystems/jobs/jobs-errors.ts"],"sourcesContent":["/**\n * MemoryJobRunService — scope-oriented queries and bulk ops over the\n * in-memory run store (ADR-022, JOB-4).\n *\n * Mirrors `DrizzleJobRunService` but scans `MemoryJobStore.runs.values()`.\n * Cancel delegates back to the orchestrator so cascade semantics stay in\n * one place.\n */\nimport { Inject, Injectable } from '@nestjs/common';\nimport type { JobRunRow } from './job-orchestration.schema';\nimport type { JobRun } from './job-orchestrator.protocol';\nimport type {\n  IJobRunService,\n  ListForScopeOptions,\n  CancelForScopeOptions,\n  RescheduleForScopeOptions,\n  PoolStatusCount,\n  JobRunFailure,\n} from './job-run-service.protocol';\nimport type { IJobOrchestrator } from './job-orchestrator.protocol';\nimport { JOB_ORCHESTRATOR, JOBS_MULTI_TENANT } from './jobs-domain.tokens';\nimport { MissingTenantIdError } from './jobs-errors';\nimport { MemoryJobStore } from './memory-job-store';\n\nconst NON_TERMINAL_STATUSES: JobRunRow['status'][] = [\n  'pending',\n  'running',\n  'waiting',\n];\n\n@Injectable()\nexport class MemoryJobRunService implements IJobRunService {\n  constructor(\n    private readonly store: MemoryJobStore,\n    @Inject(JOB_ORCHESTRATOR) private readonly orchestrator: IJobOrchestrator,\n    @Inject(JOBS_MULTI_TENANT) private readonly multiTenant: boolean,\n  ) {}\n\n  /**\n   * JOB-8 — produce a per-row predicate for the tenant gate.\n   * Returns `null` when multi-tenancy is off (caller doesn't check).\n   * Throws when on + `undefined`; matches `tenant_id IS NULL` on explicit\n   * `null` to support cross-tenant background work.\n   */\n  private tenantPredicate(\n    method: string,\n    tenantId: string | null | undefined,\n  ): ((r: JobRunRow) => boolean) | null {\n    if (!this.multiTenant) return null;\n    if (tenantId === undefined) throw new MissingTenantIdError(method);\n    return (r) => r.tenantId === tenantId;\n  }\n\n  async listForScope(\n    entityType: string,\n    entityId: string,\n    opts: ListForScopeOptions = {},\n  ): Promise<JobRun[]> {\n    const statusFilter = opts.status\n      ? Array.isArray(opts.status)\n        ? new Set(opts.status)\n        : new Set([opts.status])\n      : null;\n    const tenantCheck = this.tenantPredicate('listForScope', opts.tenantId);\n\n    const rows: JobRunRow[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.scopeEntityType !== entityType) continue;\n      if (r.scopeEntityId !== entityId) continue;\n      if (statusFilter && !statusFilter.has(r.status)) continue;\n      if (opts.jobType && r.jobType !== opts.jobType) continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      rows.push(r);\n    }\n\n    const orderBy = opts.orderBy ?? 'created_at desc';\n    rows.sort((a, b) => compareBy(a, b, orderBy));\n\n    const offset = opts.offset ?? 0;\n    const limit = opts.limit;\n    const sliced =\n      typeof limit === 'number' ? rows.slice(offset, offset + limit) : rows.slice(offset);\n    return sliced as JobRun[];\n  }\n\n  async cancelForScope(\n    entityType: string,\n    entityId: string,\n    opts: CancelForScopeOptions = {},\n  ): Promise<void> {\n    const tenantCheck = this.tenantPredicate('cancelForScope', opts.tenantId);\n\n    const ids: string[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.scopeEntityType !== entityType) continue;\n      if (r.scopeEntityId !== entityId) continue;\n      if (!NON_TERMINAL_STATUSES.includes(r.status)) continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      ids.push(r.id);\n    }\n    for (const id of ids) {\n      // Propagate the tenant gate through the orchestrator's cancel so the\n      // internal per-row guard passes (no surprise MissingTenantIdError\n      // once the scope query has already narrowed to this tenant).\n      await this.orchestrator.cancel(id, {\n        cascade: true,\n        tenantId: opts.tenantId,\n      });\n    }\n  }\n\n  async rescheduleForScope(\n    entityType: string,\n    entityId: string,\n    newRunAt: Date,\n    opts: RescheduleForScopeOptions = {},\n  ): Promise<void> {\n    const tenantCheck = this.tenantPredicate('rescheduleForScope', opts.tenantId);\n    for (const r of this.store.runs.values()) {\n      if (r.scopeEntityType !== entityType) continue;\n      if (r.scopeEntityId !== entityId) continue;\n      if (r.status !== 'pending') continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      this.store.runs.set(r.id, {\n        ...r,\n        runAt: newRunAt,\n        updatedAt: new Date(),\n      });\n    }\n  }\n\n  async countByPoolAndStatus(\n    tenantId?: string | null,\n  ): Promise<PoolStatusCount[]> {\n    const tenantCheck = this.tenantPredicate('countByPoolAndStatus', tenantId);\n    const map = new Map<string, PoolStatusCount>();\n    for (const r of this.store.runs.values()) {\n      if (tenantCheck && !tenantCheck(r)) continue;\n      const key = `${r.pool}\\0${r.status}`;\n      const cur = map.get(key);\n      if (cur) {\n        cur.count += 1;\n      } else {\n        map.set(key, { pool: r.pool, status: r.status, count: 1 });\n      }\n    }\n    return Array.from(map.values());\n  }\n\n  async listRecentFailed(\n    limit: number,\n    tenantId?: string | null,\n  ): Promise<JobRunFailure[]> {\n    const tenantCheck = this.tenantPredicate('listRecentFailed', tenantId);\n    const failed: JobRunRow[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.status !== 'failed') continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      failed.push(r);\n    }\n    failed.sort((a, b) => {\n      const at = (a.finishedAt ?? a.updatedAt).getTime();\n      const bt = (b.finishedAt ?? b.updatedAt).getTime();\n      return bt - at;\n    });\n    return failed.slice(0, limit).map((r) => ({\n      runId: r.id,\n      jobType: r.jobType,\n      pool: r.pool,\n      scopeEntityType: r.scopeEntityType,\n      scopeEntityId: r.scopeEntityId,\n      tenantId: r.tenantId,\n      attempts: r.attempts,\n      errorMessage: r.error?.message ?? null,\n      failedAt: r.finishedAt ?? r.updatedAt,\n      createdAt: r.createdAt,\n    }));\n  }\n\n  /**\n   * Direct lookup. Not on the protocol — concrete-class convenience for\n   * tests. Matches `DrizzleJobRunService.findByRootRunId` in spirit; both\n   * are debug / test helpers that sidestep the orchestrator.\n   */\n  findById(runId: string): JobRun | null {\n    return (this.store.runs.get(runId) ?? null) as JobRun | null;\n  }\n\n  /** Public counterpart to the Drizzle backend's `findByRootRunId` helper. */\n  findByRootRunId(rootRunId: string): JobRun[] {\n    const out: JobRunRow[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.rootRunId === rootRunId) out.push(r);\n    }\n    return out as JobRun[];\n  }\n}\n\nfunction compareBy(\n  a: JobRunRow,\n  b: JobRunRow,\n  order: Exclude<ListForScopeOptions['orderBy'], undefined>,\n): number {\n  switch (order) {\n    case 'created_at asc':\n      return a.createdAt.getTime() - b.createdAt.getTime();\n    case 'run_at desc':\n      return b.runAt.getTime() - a.runAt.getTime();\n    case 'run_at asc':\n      return a.runAt.getTime() - b.runAt.getTime();\n    case 'created_at desc':\n    default:\n      return b.createdAt.getTime() - a.createdAt.getTime();\n  }\n}\n","/**\n * Injection tokens for the job orchestration domain layer (ADR-022, JOB-2).\n *\n * Consumer code injects these symbols via `@Inject(JOB_ORCHESTRATOR)` etc.;\n * concrete backends (JOB-3 Drizzle, JOB-4 Memory) provide the implementations\n * through `JobsDomainModule.forRoot({ backend })` in JOB-5.\n *\n * Each token is a unique `Symbol` — guaranteed distinct from every other\n * Symbol at runtime, which is exactly the uniqueness guarantee Nest's DI\n * container relies on for token-based lookup.\n */\nexport const JOB_ORCHESTRATOR = Symbol('JOB_ORCHESTRATOR');\nexport const JOB_RUN_SERVICE = Symbol('JOB_RUN_SERVICE');\nexport const JOB_STEP_SERVICE = Symbol('JOB_STEP_SERVICE');\n\n/**\n * Multi-tenancy opt-in flag (JOB-8). Bound to the boolean passed in via\n * `JobsDomainModule.forRoot({ multiTenant })`, defaulting to `false`.\n *\n * When `true`, the four service-layer backends (Drizzle + Memory orchestrator\n * and run-service) enforce `tenantId` on every mutating / targeted-read call:\n * `start`, `cancel`, `listForScope`, `cancelForScope`, `rescheduleForScope`.\n * Missing (`undefined`) `tenantId` throws `MissingTenantIdError`; explicit\n * `null` opts into cross-tenant background work and passes through.\n *\n * The JobWorker claim loop is **cross-tenant by design** — the worker has no\n * tenant context; `tenantId` is populated at write time and enforced on\n * targeted reads. See docs/specs/JOB-8.md.\n */\nexport const JOBS_MULTI_TENANT = Symbol('JOBS_MULTI_TENANT');\n","/**\n * Typed errors for the job orchestration domain (ADR-022, JOB-3).\n *\n * All thrown by the Drizzle orchestrator (and mirrored by the Memory\n * backend in JOB-4). They exist as classes so consumers can `instanceof`\n * them in catch blocks and exception filters can map them to HTTP codes.\n */\nimport type { JobRun } from './job-orchestrator.protocol';\n\n/**\n * `start(type, …)` was called for a job type that has no row in the `job`\n * table. At runtime this usually means the handler was not decorated or the\n * boot validator (JOB-5) has not registered it yet.\n */\nexport class JobTypeNotFoundError extends Error {\n  override readonly name = 'JobTypeNotFoundError';\n  constructor(public readonly jobType: string) {\n    super(`No job definition registered for type '${jobType}'.`);\n  }\n}\n\n/**\n * Thrown by `start` when `collision_mode === 'reject'` and a non-terminal\n * run with the same `concurrency_key` already exists. Carries the incumbent\n * so callers can surface its id or subscribe to its completion event.\n */\nexport class JobCollisionError extends Error {\n  override readonly name = 'JobCollisionError';\n  constructor(\n    public readonly jobType: string,\n    public readonly concurrencyKey: string,\n    public readonly incumbent: JobRun,\n  ) {\n    super(\n      `Job type '${jobType}' has an in-flight run with concurrency_key ` +\n        `'${concurrencyKey}' (incumbent ${incumbent.id}); collision_mode=reject.`,\n    );\n  }\n}\n\n/**\n * `replay` was called on a run that is not in a replayable terminal state\n * (i.e. still `pending` / `running` / `waiting`). Replay always spawns\n * fresh execution and therefore requires the source run to be settled.\n */\nexport class JobNotReplayableError extends Error {\n  override readonly name = 'JobNotReplayableError';\n  constructor(\n    public readonly runId: string,\n    public readonly currentStatus: string,\n  ) {\n    super(\n      `Run ${runId} is not replayable from status '${currentStatus}'. ` +\n        `Only 'completed', 'failed', 'timed_out', and 'canceled' are eligible.`,\n    );\n  }\n}\n\n/**\n * A `concurrency_key_template` or `dedupe_key_template` referenced a field\n * that is not present on the input payload. Caught at `start` time so the\n * caller sees the misconfiguration synchronously rather than at claim time.\n */\nexport class JobTemplateFieldMissingError extends Error {\n  override readonly name = 'JobTemplateFieldMissingError';\n  constructor(\n    public readonly template: string,\n    public readonly field: string,\n  ) {\n    super(\n      `Template '${template}' references input field '${field}' which is ` +\n        `missing or undefined on the payload.`,\n    );\n  }\n}\n\n/**\n * Thrown by the four multi-tenant-aware service-layer backends (JOB-8)\n * when `JobsDomainModule` was configured with `multiTenant: true` but the\n * caller did not pass a `tenantId` in the relevant options object.\n *\n * **Strict enforcement rationale (resolved 2026-04-18).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship; surfacing\n * the misuse loudly at the call site (rather than silently defaulting to\n * `null` or to the \"last tenant seen\") prevents both accidental global\n * writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   background work (e.g. a nightly housekeeping job that must scan all\n *   tenants). The row is persisted with `tenant_id = NULL`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly method: string) {\n    super(\n      `MissingTenantIdError: JobsDomainModule was configured with ` +\n        `multiTenant=true but ${method} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Thrown by `JobWorkerModule.onModuleInit` (Drizzle backend only) when the\n * `job` table contains type rows for which no `@JobHandler` is registered\n * in the running process. Surfaces every orphaned type at once so a single\n * boot tells the operator everything to clean up.\n *\n * Skipped entirely in memory mode (Q4 resolution 2026-04-19) — the memory\n * backend has no DB rows to validate; `MemoryJobOrchestrator.start()`\n * throws `JobTypeNotFoundError` synchronously for unknown types instead.\n */\nexport class BootValidationError extends Error {\n  override readonly name = 'BootValidationError';\n  constructor(public readonly missingHandlers: string[]) {\n    super(\n      `BootValidationError: ${missingHandlers.length} orphaned job type(s) ` +\n        `in 'job' table with no matching @JobHandler in the running process: ` +\n        `[${missingHandlers.join(', ')}]. Either register the handler(s) or ` +\n        `remove the rows.`,\n    );\n  }\n}\n\n/**\n * Thrown by `JobWorkerModule.onModuleInit` when one or more `@JobHandler`\n * classes target a `reserved: true` pool from the resolved pool config\n * (the three `events_*` pools are reserved for the events subsystem\n * outbox drain). Listing every offender on a single boot avoids the\n * fix-one-restart-fix-next loop.\n */\nexport class ReservedPoolViolationError extends Error {\n  override readonly name = 'ReservedPoolViolationError';\n  constructor(\n    public readonly offenders: ReadonlyArray<{\n      handlerClass: string;\n      pool: string;\n    }>,\n  ) {\n    super(\n      `ReservedPoolViolationError: ${offenders.length} @JobHandler(s) target ` +\n        `reserved pools — reserved pools are framework-only:\\n` +\n        offenders\n          .map((o) => `  - ${o.handlerClass} → pool='${o.pool}'`)\n          .join('\\n'),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAQA,SAAS,QAAQ,kBAAkB;;;ACG5B,IAAM,mBAAmB,uBAAO,kBAAkB;AAkBlD,IAAM,oBAAoB,uBAAO,mBAAmB;;;AC+DpD,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,QAAgB;AAC1C;AAAA,MACE,mFAC0B,MAAM;AAAA,IAGlC;AAN0B;AAAA,EAO5B;AAAA,EAP4B;AAAA,EADV,OAAO;AAS3B;;;AF9EA,IAAM,wBAA+C;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,sBAAN,MAAoD;AAAA,EACzD,YACmB,OAC0B,cACC,aAC5C;AAHiB;AAC0B;AACC;AAAA,EAC3C;AAAA,EAHgB;AAAA,EAC0B;AAAA,EACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAStC,gBACN,QACA,UACoC;AACpC,QAAI,CAAC,KAAK,YAAa,QAAO;AAC9B,QAAI,aAAa,OAAW,OAAM,IAAI,qBAAqB,MAAM;AACjE,WAAO,CAAC,MAAM,EAAE,aAAa;AAAA,EAC/B;AAAA,EAEA,MAAM,aACJ,YACA,UACA,OAA4B,CAAC,GACV;AACnB,UAAM,eAAe,KAAK,SACtB,MAAM,QAAQ,KAAK,MAAM,IACvB,IAAI,IAAI,KAAK,MAAM,IACnB,oBAAI,IAAI,CAAC,KAAK,MAAM,CAAC,IACvB;AACJ,UAAM,cAAc,KAAK,gBAAgB,gBAAgB,KAAK,QAAQ;AAEtE,UAAM,OAAoB,CAAC;AAC3B,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,oBAAoB,WAAY;AACtC,UAAI,EAAE,kBAAkB,SAAU;AAClC,UAAI,gBAAgB,CAAC,aAAa,IAAI,EAAE,MAAM,EAAG;AACjD,UAAI,KAAK,WAAW,EAAE,YAAY,KAAK,QAAS;AAChD,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,WAAK,KAAK,CAAC;AAAA,IACb;AAEA,UAAM,UAAU,KAAK,WAAW;AAChC,SAAK,KAAK,CAAC,GAAG,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC;AAE5C,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,QAAQ,KAAK;AACnB,UAAM,SACJ,OAAO,UAAU,WAAW,KAAK,MAAM,QAAQ,SAAS,KAAK,IAAI,KAAK,MAAM,MAAM;AACpF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eACJ,YACA,UACA,OAA8B,CAAC,GAChB;AACf,UAAM,cAAc,KAAK,gBAAgB,kBAAkB,KAAK,QAAQ;AAExE,UAAM,MAAgB,CAAC;AACvB,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,oBAAoB,WAAY;AACtC,UAAI,EAAE,kBAAkB,SAAU;AAClC,UAAI,CAAC,sBAAsB,SAAS,EAAE,MAAM,EAAG;AAC/C,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,UAAI,KAAK,EAAE,EAAE;AAAA,IACf;AACA,eAAW,MAAM,KAAK;AAIpB,YAAM,KAAK,aAAa,OAAO,IAAI;AAAA,QACjC,SAAS;AAAA,QACT,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,YACA,UACA,UACA,OAAkC,CAAC,GACpB;AACf,UAAM,cAAc,KAAK,gBAAgB,sBAAsB,KAAK,QAAQ;AAC5E,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,oBAAoB,WAAY;AACtC,UAAI,EAAE,kBAAkB,SAAU;AAClC,UAAI,EAAE,WAAW,UAAW;AAC5B,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,WAAK,MAAM,KAAK,IAAI,EAAE,IAAI;AAAA,QACxB,GAAG;AAAA,QACH,OAAO;AAAA,QACP,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,UAC4B;AAC5B,UAAM,cAAc,KAAK,gBAAgB,wBAAwB,QAAQ;AACzE,UAAM,MAAM,oBAAI,IAA6B;AAC7C,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,YAAM,MAAM,GAAG,EAAE,IAAI,KAAK,EAAE,MAAM;AAClC,YAAM,MAAM,IAAI,IAAI,GAAG;AACvB,UAAI,KAAK;AACP,YAAI,SAAS;AAAA,MACf,OAAO;AACL,YAAI,IAAI,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,EAAE,QAAQ,OAAO,EAAE,CAAC;AAAA,MAC3D;AAAA,IACF;AACA,WAAO,MAAM,KAAK,IAAI,OAAO,CAAC;AAAA,EAChC;AAAA,EAEA,MAAM,iBACJ,OACA,UAC0B;AAC1B,UAAM,cAAc,KAAK,gBAAgB,oBAAoB,QAAQ;AACrE,UAAM,SAAsB,CAAC;AAC7B,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,WAAW,SAAU;AAC3B,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,aAAO,KAAK,CAAC;AAAA,IACf;AACA,WAAO,KAAK,CAAC,GAAG,MAAM;AACpB,YAAM,MAAM,EAAE,cAAc,EAAE,WAAW,QAAQ;AACjD,YAAM,MAAM,EAAE,cAAc,EAAE,WAAW,QAAQ;AACjD,aAAO,KAAK;AAAA,IACd,CAAC;AACD,WAAO,OAAO,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,OAAO;AAAA,MACxC,OAAO,EAAE;AAAA,MACT,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,MACR,iBAAiB,EAAE;AAAA,MACnB,eAAe,EAAE;AAAA,MACjB,UAAU,EAAE;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,cAAc,EAAE,OAAO,WAAW;AAAA,MAClC,UAAU,EAAE,cAAc,EAAE;AAAA,MAC5B,WAAW,EAAE;AAAA,IACf,EAAE;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAS,OAA8B;AACrC,WAAQ,KAAK,MAAM,KAAK,IAAI,KAAK,KAAK;AAAA,EACxC;AAAA;AAAA,EAGA,gBAAgB,WAA6B;AAC3C,UAAM,MAAmB,CAAC;AAC1B,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,cAAc,UAAW,KAAI,KAAK,CAAC;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AACF;AArKa,sBAAN;AAAA,EADN,WAAW;AAAA,EAIP,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,iBAAiB;AAAA,GAJhB;AAuKb,SAAS,UACP,GACA,GACA,OACQ;AACR,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ;AAAA,IACrD,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,QAAQ;AAAA,IAC7C,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,QAAQ;AAAA,IAC7C,KAAK;AAAA,IACL;AACE,aAAO,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ;AAAA,EACvD;AACF;","names":[]}
+{"version":3,"sources":["../../../../runtime/subsystems/jobs/job-run-service.memory-backend.ts","../../../../runtime/subsystems/jobs/job-run-keyset-cursor.ts","../../../../runtime/subsystems/jobs/jobs-domain.tokens.ts","../../../../runtime/subsystems/jobs/jobs-errors.ts"],"sourcesContent":["/**\n * MemoryJobRunService — scope-oriented queries and bulk ops over the\n * in-memory run store (ADR-022, JOB-4).\n *\n * Mirrors `DrizzleJobRunService` but scans `MemoryJobStore.runs.values()`.\n * Cancel delegates back to the orchestrator so cascade semantics stay in\n * one place.\n */\nimport { Inject, Injectable } from '@nestjs/common';\nimport type { JobRunRow } from './job-orchestration.schema';\nimport type { JobRun } from './job-orchestrator.protocol';\nimport type {\n  IJobRunService,\n  ListForScopeOptions,\n  CancelForScopeOptions,\n  RescheduleForScopeOptions,\n  PoolStatusCount,\n  JobRunFailure,\n  ListJobRunsQuery,\n  JobRunPage,\n} from './job-run-service.protocol';\nimport {\n  clampLimit,\n  decodeKeysetCursor,\n  encodeKeysetCursor,\n  toJobRunSummary,\n} from './job-run-keyset-cursor';\nimport type { IJobOrchestrator } from './job-orchestrator.protocol';\nimport { JOB_ORCHESTRATOR, JOBS_MULTI_TENANT } from './jobs-domain.tokens';\nimport { MissingTenantIdError } from './jobs-errors';\nimport { MemoryJobStore } from './memory-job-store';\n\nconst NON_TERMINAL_STATUSES: JobRunRow['status'][] = [\n  'pending',\n  'running',\n  'waiting',\n];\n\n@Injectable()\nexport class MemoryJobRunService implements IJobRunService {\n  constructor(\n    private readonly store: MemoryJobStore,\n    @Inject(JOB_ORCHESTRATOR) private readonly orchestrator: IJobOrchestrator,\n    @Inject(JOBS_MULTI_TENANT) private readonly multiTenant: boolean,\n  ) {}\n\n  /**\n   * JOB-8 — produce a per-row predicate for the tenant gate.\n   * Returns `null` when multi-tenancy is off (caller doesn't check).\n   * Throws when on + `undefined`; matches `tenant_id IS NULL` on explicit\n   * `null` to support cross-tenant background work.\n   */\n  private tenantPredicate(\n    method: string,\n    tenantId: string | null | undefined,\n  ): ((r: JobRunRow) => boolean) | null {\n    if (!this.multiTenant) return null;\n    if (tenantId === undefined) throw new MissingTenantIdError(method);\n    return (r) => r.tenantId === tenantId;\n  }\n\n  async listForScope(\n    entityType: string,\n    entityId: string,\n    opts: ListForScopeOptions = {},\n  ): Promise<JobRun[]> {\n    const statusFilter = opts.status\n      ? Array.isArray(opts.status)\n        ? new Set(opts.status)\n        : new Set([opts.status])\n      : null;\n    const tenantCheck = this.tenantPredicate('listForScope', opts.tenantId);\n\n    const rows: JobRunRow[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.scopeEntityType !== entityType) continue;\n      if (r.scopeEntityId !== entityId) continue;\n      if (statusFilter && !statusFilter.has(r.status)) continue;\n      if (opts.jobType && r.jobType !== opts.jobType) continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      rows.push(r);\n    }\n\n    const orderBy = opts.orderBy ?? 'created_at desc';\n    rows.sort((a, b) => compareBy(a, b, orderBy));\n\n    const offset = opts.offset ?? 0;\n    const limit = opts.limit;\n    const sliced =\n      typeof limit === 'number' ? rows.slice(offset, offset + limit) : rows.slice(offset);\n    return sliced as JobRun[];\n  }\n\n  async cancelForScope(\n    entityType: string,\n    entityId: string,\n    opts: CancelForScopeOptions = {},\n  ): Promise<void> {\n    const tenantCheck = this.tenantPredicate('cancelForScope', opts.tenantId);\n\n    const ids: string[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.scopeEntityType !== entityType) continue;\n      if (r.scopeEntityId !== entityId) continue;\n      if (!NON_TERMINAL_STATUSES.includes(r.status)) continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      ids.push(r.id);\n    }\n    for (const id of ids) {\n      // Propagate the tenant gate through the orchestrator's cancel so the\n      // internal per-row guard passes (no surprise MissingTenantIdError\n      // once the scope query has already narrowed to this tenant).\n      await this.orchestrator.cancel(id, {\n        cascade: true,\n        tenantId: opts.tenantId,\n      });\n    }\n  }\n\n  async rescheduleForScope(\n    entityType: string,\n    entityId: string,\n    newRunAt: Date,\n    opts: RescheduleForScopeOptions = {},\n  ): Promise<void> {\n    const tenantCheck = this.tenantPredicate('rescheduleForScope', opts.tenantId);\n    for (const r of this.store.runs.values()) {\n      if (r.scopeEntityType !== entityType) continue;\n      if (r.scopeEntityId !== entityId) continue;\n      if (r.status !== 'pending') continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      this.store.runs.set(r.id, {\n        ...r,\n        runAt: newRunAt,\n        updatedAt: new Date(),\n      });\n    }\n  }\n\n  async countByPoolAndStatus(\n    tenantId?: string | null,\n  ): Promise<PoolStatusCount[]> {\n    const tenantCheck = this.tenantPredicate('countByPoolAndStatus', tenantId);\n    const map = new Map<string, PoolStatusCount>();\n    for (const r of this.store.runs.values()) {\n      if (tenantCheck && !tenantCheck(r)) continue;\n      const key = `${r.pool}\\0${r.status}`;\n      const cur = map.get(key);\n      if (cur) {\n        cur.count += 1;\n      } else {\n        map.set(key, { pool: r.pool, status: r.status, count: 1 });\n      }\n    }\n    return Array.from(map.values());\n  }\n\n  async listRecentFailed(\n    limit: number,\n    tenantId?: string | null,\n  ): Promise<JobRunFailure[]> {\n    const tenantCheck = this.tenantPredicate('listRecentFailed', tenantId);\n    const failed: JobRunRow[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.status !== 'failed') continue;\n      if (tenantCheck && !tenantCheck(r)) continue;\n      failed.push(r);\n    }\n    failed.sort((a, b) => {\n      const at = (a.finishedAt ?? a.updatedAt).getTime();\n      const bt = (b.finishedAt ?? b.updatedAt).getTime();\n      return bt - at;\n    });\n    return failed.slice(0, limit).map((r) => ({\n      runId: r.id,\n      jobType: r.jobType,\n      pool: r.pool,\n      scopeEntityType: r.scopeEntityType,\n      scopeEntityId: r.scopeEntityId,\n      tenantId: r.tenantId,\n      attempts: r.attempts,\n      errorMessage: r.error?.message ?? null,\n      failedAt: r.finishedAt ?? r.updatedAt,\n      createdAt: r.createdAt,\n    }));\n  }\n\n  async listJobRuns(query: ListJobRunsQuery = {}): Promise<JobRunPage> {\n    const limit = clampLimit(query.limit);\n    const tenantCheck = this.tenantPredicate('listJobRuns', query.tenantId);\n    const keyset = query.cursor ? decodeKeysetCursor(query.cursor) : null;\n\n    const matched: JobRunRow[] = [];\n    for (const r of this.store.runs.values()) {\n      if (tenantCheck && !tenantCheck(r)) continue;\n      if (query.poolId && r.pool !== query.poolId) continue;\n      if (query.rootRunId && r.rootRunId !== query.rootRunId) continue;\n      if (query.status && r.status !== query.status) continue;\n      if (query.since && r.createdAt.getTime() < query.since.getTime()) continue;\n      matched.push(r);\n    }\n\n    // Order created_at DESC, id DESC to match the Drizzle backend's keyset.\n    matched.sort((a, b) => {\n      const dt = b.createdAt.getTime() - a.createdAt.getTime();\n      if (dt !== 0) return dt;\n      return a.id < b.id ? 1 : a.id > b.id ? -1 : 0;\n    });\n\n    // Keyset seek: drop everything at/after the cursor's (created_at, id).\n    const seeked = keyset\n      ? matched.filter((r) => {\n          const ct = r.createdAt.getTime();\n          const kt = keyset.createdAt.getTime();\n          if (ct < kt) return true;\n          if (ct > kt) return false;\n          return r.id < keyset.id;\n        })\n      : matched;\n\n    const hasMore = seeked.length > limit;\n    const page = hasMore ? seeked.slice(0, limit) : seeked;\n    const items = page.map(toJobRunSummary);\n    const last = page[page.length - 1];\n    const nextCursor =\n      hasMore && last\n        ? encodeKeysetCursor({ createdAt: last.createdAt, id: last.id })\n        : null;\n\n    return { items, nextCursor };\n  }\n\n  /**\n   * Direct lookup. Not on the protocol — concrete-class convenience for\n   * tests. Matches `DrizzleJobRunService.findByRootRunId` in spirit; both\n   * are debug / test helpers that sidestep the orchestrator.\n   */\n  findById(runId: string): JobRun | null {\n    return (this.store.runs.get(runId) ?? null) as JobRun | null;\n  }\n\n  /** Public counterpart to the Drizzle backend's `findByRootRunId` helper. */\n  findByRootRunId(rootRunId: string): JobRun[] {\n    const out: JobRunRow[] = [];\n    for (const r of this.store.runs.values()) {\n      if (r.rootRunId === rootRunId) out.push(r);\n    }\n    return out as JobRun[];\n  }\n}\n\nfunction compareBy(\n  a: JobRunRow,\n  b: JobRunRow,\n  order: Exclude<ListForScopeOptions['orderBy'], undefined>,\n): number {\n  switch (order) {\n    case 'created_at asc':\n      return a.createdAt.getTime() - b.createdAt.getTime();\n    case 'run_at desc':\n      return b.runAt.getTime() - a.runAt.getTime();\n    case 'run_at asc':\n      return a.runAt.getTime() - b.runAt.getTime();\n    case 'created_at desc':\n    default:\n      return b.createdAt.getTime() - a.createdAt.getTime();\n  }\n}\n","/**\n * Keyset (seek) cursor codec for `IJobRunService.listJobRuns` (OBS-LIST-1).\n *\n * The list is ordered `created_at DESC, id DESC`. The cursor encodes the\n * `(createdAt, id)` of the last row on the previous page so the next page\n * can seek with `WHERE (created_at, id) < (cursorCreatedAt, cursorId)`\n * rather than an `OFFSET`. Keyset pagination stays O(log n) on deep pages\n * and is stable as new rows arrive at the head.\n *\n * The cursor is opaque to consumers: a base64url-encoded JSON tuple. Shape\n * is an implementation detail — never parse it outside this module.\n *\n * Also hosts `toJobRunSummary`, the single `JobRunRow → JobRunSummary`\n * projection shared by both backends so the narrow shape stays in sync.\n */\nimport type { JobRunRow } from './job-orchestration.schema';\nimport type { JobRunSummary } from './job-run-service.protocol';\n\nexport interface JobRunKeyset {\n  /** `created_at` of the last row on the previous page. */\n  createdAt: Date;\n  /** `id` (UUID) tie-break of the last row on the previous page. */\n  id: string;\n}\n\n/** Default page size when `limit` is omitted. */\nexport const DEFAULT_LIST_LIMIT = 50;\n/** Hard upper bound on page size to keep a single read bounded. */\nexport const MAX_LIST_LIMIT = 200;\n\n/** Clamp a caller-supplied `limit` into `[1, MAX_LIST_LIMIT]`. */\nexport function clampLimit(limit: number | undefined): number {\n  if (typeof limit !== 'number' || !Number.isFinite(limit)) {\n    return DEFAULT_LIST_LIMIT;\n  }\n  const floored = Math.floor(limit);\n  if (floored < 1) return 1;\n  if (floored > MAX_LIST_LIMIT) return MAX_LIST_LIMIT;\n  return floored;\n}\n\nexport function encodeKeysetCursor(keyset: JobRunKeyset): string {\n  const tuple = [keyset.createdAt.toISOString(), keyset.id];\n  return Buffer.from(JSON.stringify(tuple), 'utf8').toString('base64url');\n}\n\n/**\n * Decode an opaque cursor back into its `(createdAt, id)` keyset. Returns\n * `null` for a malformed cursor so callers can treat garbage input as\n * \"start from the beginning\" rather than throwing on user-supplied data.\n */\nexport function decodeKeysetCursor(cursor: string): JobRunKeyset | null {\n  try {\n    const json = Buffer.from(cursor, 'base64url').toString('utf8');\n    const parsed = JSON.parse(json) as unknown;\n    if (!Array.isArray(parsed) || parsed.length !== 2) return null;\n    const [iso, id] = parsed;\n    if (typeof iso !== 'string' || typeof id !== 'string') return null;\n    const createdAt = new Date(iso);\n    if (Number.isNaN(createdAt.getTime())) return null;\n    return { createdAt, id };\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Project a raw `job_run` row into the narrow `JobRunSummary` shape exposed\n * by `listJobRuns`. `errorMessage` is pulled from the jsonb `error.message`.\n */\nexport function toJobRunSummary(r: JobRunRow): JobRunSummary {\n  return {\n    runId: r.id,\n    rootRunId: r.rootRunId,\n    jobType: r.jobType,\n    pool: r.pool,\n    status: r.status,\n    scopeEntityType: r.scopeEntityType,\n    scopeEntityId: r.scopeEntityId,\n    tenantId: r.tenantId,\n    attempts: r.attempts,\n    errorMessage: r.error?.message ?? null,\n    runAt: r.runAt,\n    startedAt: r.startedAt,\n    finishedAt: r.finishedAt,\n    createdAt: r.createdAt,\n  };\n}\n","/**\n * Injection tokens for the job orchestration domain layer (ADR-022, JOB-2).\n *\n * Consumer code injects these symbols via `@Inject(JOB_ORCHESTRATOR)` etc.;\n * concrete backends (JOB-3 Drizzle, JOB-4 Memory) provide the implementations\n * through `JobsDomainModule.forRoot({ backend })` in JOB-5.\n *\n * Each token is a unique `Symbol` — guaranteed distinct from every other\n * Symbol at runtime, which is exactly the uniqueness guarantee Nest's DI\n * container relies on for token-based lookup.\n */\nexport const JOB_ORCHESTRATOR = Symbol('JOB_ORCHESTRATOR');\nexport const JOB_RUN_SERVICE = Symbol('JOB_RUN_SERVICE');\nexport const JOB_STEP_SERVICE = Symbol('JOB_STEP_SERVICE');\n\n/**\n * Multi-tenancy opt-in flag (JOB-8). Bound to the boolean passed in via\n * `JobsDomainModule.forRoot({ multiTenant })`, defaulting to `false`.\n *\n * When `true`, the four service-layer backends (Drizzle + Memory orchestrator\n * and run-service) enforce `tenantId` on every mutating / targeted-read call:\n * `start`, `cancel`, `listForScope`, `cancelForScope`, `rescheduleForScope`.\n * Missing (`undefined`) `tenantId` throws `MissingTenantIdError`; explicit\n * `null` opts into cross-tenant background work and passes through.\n *\n * The JobWorker claim loop is **cross-tenant by design** — the worker has no\n * tenant context; `tenantId` is populated at write time and enforced on\n * targeted reads. See docs/specs/JOB-8.md.\n */\nexport const JOBS_MULTI_TENANT = Symbol('JOBS_MULTI_TENANT');\n","/**\n * Typed errors for the job orchestration domain (ADR-022, JOB-3).\n *\n * All thrown by the Drizzle orchestrator (and mirrored by the Memory\n * backend in JOB-4). They exist as classes so consumers can `instanceof`\n * them in catch blocks and exception filters can map them to HTTP codes.\n */\nimport type { JobRun } from './job-orchestrator.protocol';\n\n/**\n * `start(type, …)` was called for a job type that has no row in the `job`\n * table. At runtime this usually means the handler was not decorated or the\n * boot validator (JOB-5) has not registered it yet.\n */\nexport class JobTypeNotFoundError extends Error {\n  override readonly name = 'JobTypeNotFoundError';\n  constructor(public readonly jobType: string) {\n    super(`No job definition registered for type '${jobType}'.`);\n  }\n}\n\n/**\n * Thrown by `start` when `collision_mode === 'reject'` and a non-terminal\n * run with the same `concurrency_key` already exists. Carries the incumbent\n * so callers can surface its id or subscribe to its completion event.\n */\nexport class JobCollisionError extends Error {\n  override readonly name = 'JobCollisionError';\n  constructor(\n    public readonly jobType: string,\n    public readonly concurrencyKey: string,\n    public readonly incumbent: JobRun,\n  ) {\n    super(\n      `Job type '${jobType}' has an in-flight run with concurrency_key ` +\n        `'${concurrencyKey}' (incumbent ${incumbent.id}); collision_mode=reject.`,\n    );\n  }\n}\n\n/**\n * `replay` was called on a run that is not in a replayable terminal state\n * (i.e. still `pending` / `running` / `waiting`). Replay always spawns\n * fresh execution and therefore requires the source run to be settled.\n */\nexport class JobNotReplayableError extends Error {\n  override readonly name = 'JobNotReplayableError';\n  constructor(\n    public readonly runId: string,\n    public readonly currentStatus: string,\n  ) {\n    super(\n      `Run ${runId} is not replayable from status '${currentStatus}'. ` +\n        `Only 'completed', 'failed', 'timed_out', and 'canceled' are eligible.`,\n    );\n  }\n}\n\n/**\n * A `concurrency_key_template` or `dedupe_key_template` referenced a field\n * that is not present on the input payload. Caught at `start` time so the\n * caller sees the misconfiguration synchronously rather than at claim time.\n */\nexport class JobTemplateFieldMissingError extends Error {\n  override readonly name = 'JobTemplateFieldMissingError';\n  constructor(\n    public readonly template: string,\n    public readonly field: string,\n  ) {\n    super(\n      `Template '${template}' references input field '${field}' which is ` +\n        `missing or undefined on the payload.`,\n    );\n  }\n}\n\n/**\n * Thrown by the four multi-tenant-aware service-layer backends (JOB-8)\n * when `JobsDomainModule` was configured with `multiTenant: true` but the\n * caller did not pass a `tenantId` in the relevant options object.\n *\n * **Strict enforcement rationale (resolved 2026-04-18).** Cross-tenant data\n * leakage is the worst class of bug a multi-tenant system can ship; surfacing\n * the misuse loudly at the call site (rather than silently defaulting to\n * `null` or to the \"last tenant seen\") prevents both accidental global\n * writes and sneaky reads that return a union of tenants.\n *\n * - `undefined` `tenantId` → throw this error.\n * - Explicit `null` `tenantId` → passes; opts the call into cross-tenant\n *   background work (e.g. a nightly housekeeping job that must scan all\n *   tenants). The row is persisted with `tenant_id = NULL`.\n */\nexport class MissingTenantIdError extends Error {\n  override readonly name = 'MissingTenantIdError';\n  constructor(public readonly method: string) {\n    super(\n      `MissingTenantIdError: JobsDomainModule was configured with ` +\n        `multiTenant=true but ${method} was called without tenantId ` +\n        `(undefined). Pass an explicit tenantId, or pass null for ` +\n        `cross-tenant work.`,\n    );\n  }\n}\n\n/**\n * Thrown by `JobWorkerModule.onModuleInit` (Drizzle backend only) when the\n * `job` table contains type rows for which no `@JobHandler` is registered\n * in the running process. Surfaces every orphaned type at once so a single\n * boot tells the operator everything to clean up.\n *\n * Skipped entirely in memory mode (Q4 resolution 2026-04-19) — the memory\n * backend has no DB rows to validate; `MemoryJobOrchestrator.start()`\n * throws `JobTypeNotFoundError` synchronously for unknown types instead.\n */\nexport class BootValidationError extends Error {\n  override readonly name = 'BootValidationError';\n  constructor(public readonly missingHandlers: string[]) {\n    super(\n      `BootValidationError: ${missingHandlers.length} orphaned job type(s) ` +\n        `in 'job' table with no matching @JobHandler in the running process: ` +\n        `[${missingHandlers.join(', ')}]. Either register the handler(s) or ` +\n        `remove the rows.`,\n    );\n  }\n}\n\n/**\n * Thrown by `JobWorkerModule.onModuleInit` when one or more `@JobHandler`\n * classes target a `reserved: true` pool from the resolved pool config\n * (the three `events_*` pools are reserved for the events subsystem\n * outbox drain). Listing every offender on a single boot avoids the\n * fix-one-restart-fix-next loop.\n */\nexport class ReservedPoolViolationError extends Error {\n  override readonly name = 'ReservedPoolViolationError';\n  constructor(\n    public readonly offenders: ReadonlyArray<{\n      handlerClass: string;\n      pool: string;\n    }>,\n  ) {\n    super(\n      `ReservedPoolViolationError: ${offenders.length} @JobHandler(s) target ` +\n        `reserved pools — reserved pools are framework-only:\\n` +\n        offenders\n          .map((o) => `  - ${o.handlerClass} → pool='${o.pool}'`)\n          .join('\\n'),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AAQA,SAAS,QAAQ,kBAAkB;;;ACkB5B,IAAM,qBAAqB;AAE3B,IAAM,iBAAiB;AAGvB,SAAS,WAAW,OAAmC;AAC5D,MAAI,OAAO,UAAU,YAAY,CAAC,OAAO,SAAS,KAAK,GAAG;AACxD,WAAO;AAAA,EACT;AACA,QAAM,UAAU,KAAK,MAAM,KAAK;AAChC,MAAI,UAAU,EAAG,QAAO;AACxB,MAAI,UAAU,eAAgB,QAAO;AACrC,SAAO;AACT;AAEO,SAAS,mBAAmB,QAA8B;AAC/D,QAAM,QAAQ,CAAC,OAAO,UAAU,YAAY,GAAG,OAAO,EAAE;AACxD,SAAO,OAAO,KAAK,KAAK,UAAU,KAAK,GAAG,MAAM,EAAE,SAAS,WAAW;AACxE;AAOO,SAAS,mBAAmB,QAAqC;AACtE,MAAI;AACF,UAAM,OAAO,OAAO,KAAK,QAAQ,WAAW,EAAE,SAAS,MAAM;AAC7D,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,EAAG,QAAO;AAC1D,UAAM,CAAC,KAAK,EAAE,IAAI;AAClB,QAAI,OAAO,QAAQ,YAAY,OAAO,OAAO,SAAU,QAAO;AAC9D,UAAM,YAAY,IAAI,KAAK,GAAG;AAC9B,QAAI,OAAO,MAAM,UAAU,QAAQ,CAAC,EAAG,QAAO;AAC9C,WAAO,EAAE,WAAW,GAAG;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMO,SAAS,gBAAgB,GAA6B;AAC3D,SAAO;AAAA,IACL,OAAO,EAAE;AAAA,IACT,WAAW,EAAE;AAAA,IACb,SAAS,EAAE;AAAA,IACX,MAAM,EAAE;AAAA,IACR,QAAQ,EAAE;AAAA,IACV,iBAAiB,EAAE;AAAA,IACnB,eAAe,EAAE;AAAA,IACjB,UAAU,EAAE;AAAA,IACZ,UAAU,EAAE;AAAA,IACZ,cAAc,EAAE,OAAO,WAAW;AAAA,IAClC,OAAO,EAAE;AAAA,IACT,WAAW,EAAE;AAAA,IACb,YAAY,EAAE;AAAA,IACd,WAAW,EAAE;AAAA,EACf;AACF;;;AC5EO,IAAM,mBAAmB,uBAAO,kBAAkB;AAkBlD,IAAM,oBAAoB,uBAAO,mBAAmB;;;AC+DpD,IAAM,uBAAN,cAAmC,MAAM;AAAA,EAE9C,YAA4B,QAAgB;AAC1C;AAAA,MACE,mFAC0B,MAAM;AAAA,IAGlC;AAN0B;AAAA,EAO5B;AAAA,EAP4B;AAAA,EADV,OAAO;AAS3B;;;AHtEA,IAAM,wBAA+C;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AACF;AAGO,IAAM,sBAAN,MAAoD;AAAA,EACzD,YACmB,OAC0B,cACC,aAC5C;AAHiB;AAC0B;AACC;AAAA,EAC3C;AAAA,EAHgB;AAAA,EAC0B;AAAA,EACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAStC,gBACN,QACA,UACoC;AACpC,QAAI,CAAC,KAAK,YAAa,QAAO;AAC9B,QAAI,aAAa,OAAW,OAAM,IAAI,qBAAqB,MAAM;AACjE,WAAO,CAAC,MAAM,EAAE,aAAa;AAAA,EAC/B;AAAA,EAEA,MAAM,aACJ,YACA,UACA,OAA4B,CAAC,GACV;AACnB,UAAM,eAAe,KAAK,SACtB,MAAM,QAAQ,KAAK,MAAM,IACvB,IAAI,IAAI,KAAK,MAAM,IACnB,oBAAI,IAAI,CAAC,KAAK,MAAM,CAAC,IACvB;AACJ,UAAM,cAAc,KAAK,gBAAgB,gBAAgB,KAAK,QAAQ;AAEtE,UAAM,OAAoB,CAAC;AAC3B,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,oBAAoB,WAAY;AACtC,UAAI,EAAE,kBAAkB,SAAU;AAClC,UAAI,gBAAgB,CAAC,aAAa,IAAI,EAAE,MAAM,EAAG;AACjD,UAAI,KAAK,WAAW,EAAE,YAAY,KAAK,QAAS;AAChD,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,WAAK,KAAK,CAAC;AAAA,IACb;AAEA,UAAM,UAAU,KAAK,WAAW;AAChC,SAAK,KAAK,CAAC,GAAG,MAAM,UAAU,GAAG,GAAG,OAAO,CAAC;AAE5C,UAAM,SAAS,KAAK,UAAU;AAC9B,UAAM,QAAQ,KAAK;AACnB,UAAM,SACJ,OAAO,UAAU,WAAW,KAAK,MAAM,QAAQ,SAAS,KAAK,IAAI,KAAK,MAAM,MAAM;AACpF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eACJ,YACA,UACA,OAA8B,CAAC,GAChB;AACf,UAAM,cAAc,KAAK,gBAAgB,kBAAkB,KAAK,QAAQ;AAExE,UAAM,MAAgB,CAAC;AACvB,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,oBAAoB,WAAY;AACtC,UAAI,EAAE,kBAAkB,SAAU;AAClC,UAAI,CAAC,sBAAsB,SAAS,EAAE,MAAM,EAAG;AAC/C,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,UAAI,KAAK,EAAE,EAAE;AAAA,IACf;AACA,eAAW,MAAM,KAAK;AAIpB,YAAM,KAAK,aAAa,OAAO,IAAI;AAAA,QACjC,SAAS;AAAA,QACT,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAM,mBACJ,YACA,UACA,UACA,OAAkC,CAAC,GACpB;AACf,UAAM,cAAc,KAAK,gBAAgB,sBAAsB,KAAK,QAAQ;AAC5E,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,oBAAoB,WAAY;AACtC,UAAI,EAAE,kBAAkB,SAAU;AAClC,UAAI,EAAE,WAAW,UAAW;AAC5B,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,WAAK,MAAM,KAAK,IAAI,EAAE,IAAI;AAAA,QACxB,GAAG;AAAA,QACH,OAAO;AAAA,QACP,WAAW,oBAAI,KAAK;AAAA,MACtB,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,UAC4B;AAC5B,UAAM,cAAc,KAAK,gBAAgB,wBAAwB,QAAQ;AACzE,UAAM,MAAM,oBAAI,IAA6B;AAC7C,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,YAAM,MAAM,GAAG,EAAE,IAAI,KAAK,EAAE,MAAM;AAClC,YAAM,MAAM,IAAI,IAAI,GAAG;AACvB,UAAI,KAAK;AACP,YAAI,SAAS;AAAA,MACf,OAAO;AACL,YAAI,IAAI,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,EAAE,QAAQ,OAAO,EAAE,CAAC;AAAA,MAC3D;AAAA,IACF;AACA,WAAO,MAAM,KAAK,IAAI,OAAO,CAAC;AAAA,EAChC;AAAA,EAEA,MAAM,iBACJ,OACA,UAC0B;AAC1B,UAAM,cAAc,KAAK,gBAAgB,oBAAoB,QAAQ;AACrE,UAAM,SAAsB,CAAC;AAC7B,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,WAAW,SAAU;AAC3B,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,aAAO,KAAK,CAAC;AAAA,IACf;AACA,WAAO,KAAK,CAAC,GAAG,MAAM;AACpB,YAAM,MAAM,EAAE,cAAc,EAAE,WAAW,QAAQ;AACjD,YAAM,MAAM,EAAE,cAAc,EAAE,WAAW,QAAQ;AACjD,aAAO,KAAK;AAAA,IACd,CAAC;AACD,WAAO,OAAO,MAAM,GAAG,KAAK,EAAE,IAAI,CAAC,OAAO;AAAA,MACxC,OAAO,EAAE;AAAA,MACT,SAAS,EAAE;AAAA,MACX,MAAM,EAAE;AAAA,MACR,iBAAiB,EAAE;AAAA,MACnB,eAAe,EAAE;AAAA,MACjB,UAAU,EAAE;AAAA,MACZ,UAAU,EAAE;AAAA,MACZ,cAAc,EAAE,OAAO,WAAW;AAAA,MAClC,UAAU,EAAE,cAAc,EAAE;AAAA,MAC5B,WAAW,EAAE;AAAA,IACf,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,YAAY,QAA0B,CAAC,GAAwB;AACnE,UAAM,QAAQ,WAAW,MAAM,KAAK;AACpC,UAAM,cAAc,KAAK,gBAAgB,eAAe,MAAM,QAAQ;AACtE,UAAM,SAAS,MAAM,SAAS,mBAAmB,MAAM,MAAM,IAAI;AAEjE,UAAM,UAAuB,CAAC;AAC9B,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,eAAe,CAAC,YAAY,CAAC,EAAG;AACpC,UAAI,MAAM,UAAU,EAAE,SAAS,MAAM,OAAQ;AAC7C,UAAI,MAAM,aAAa,EAAE,cAAc,MAAM,UAAW;AACxD,UAAI,MAAM,UAAU,EAAE,WAAW,MAAM,OAAQ;AAC/C,UAAI,MAAM,SAAS,EAAE,UAAU,QAAQ,IAAI,MAAM,MAAM,QAAQ,EAAG;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAGA,YAAQ,KAAK,CAAC,GAAG,MAAM;AACrB,YAAM,KAAK,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ;AACvD,UAAI,OAAO,EAAG,QAAO;AACrB,aAAO,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,KAAK,EAAE,KAAK,KAAK;AAAA,IAC9C,CAAC;AAGD,UAAM,SAAS,SACX,QAAQ,OAAO,CAAC,MAAM;AACpB,YAAM,KAAK,EAAE,UAAU,QAAQ;AAC/B,YAAM,KAAK,OAAO,UAAU,QAAQ;AACpC,UAAI,KAAK,GAAI,QAAO;AACpB,UAAI,KAAK,GAAI,QAAO;AACpB,aAAO,EAAE,KAAK,OAAO;AAAA,IACvB,CAAC,IACD;AAEJ,UAAM,UAAU,OAAO,SAAS;AAChC,UAAM,OAAO,UAAU,OAAO,MAAM,GAAG,KAAK,IAAI;AAChD,UAAM,QAAQ,KAAK,IAAI,eAAe;AACtC,UAAM,OAAO,KAAK,KAAK,SAAS,CAAC;AACjC,UAAM,aACJ,WAAW,OACP,mBAAmB,EAAE,WAAW,KAAK,WAAW,IAAI,KAAK,GAAG,CAAC,IAC7D;AAEN,WAAO,EAAE,OAAO,WAAW;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,SAAS,OAA8B;AACrC,WAAQ,KAAK,MAAM,KAAK,IAAI,KAAK,KAAK;AAAA,EACxC;AAAA;AAAA,EAGA,gBAAgB,WAA6B;AAC3C,UAAM,MAAmB,CAAC;AAC1B,eAAW,KAAK,KAAK,MAAM,KAAK,OAAO,GAAG;AACxC,UAAI,EAAE,cAAc,UAAW,KAAI,KAAK,CAAC;AAAA,IAC3C;AACA,WAAO;AAAA,EACT;AACF;AAlNa,sBAAN;AAAA,EADN,WAAW;AAAA,EAIP,0BAAO,gBAAgB;AAAA,EACvB,0BAAO,iBAAiB;AAAA,GAJhB;AAoNb,SAAS,UACP,GACA,GACA,OACQ;AACR,UAAQ,OAAO;AAAA,IACb,KAAK;AACH,aAAO,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ;AAAA,IACrD,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,QAAQ;AAAA,IAC7C,KAAK;AACH,aAAO,EAAE,MAAM,QAAQ,IAAI,EAAE,MAAM,QAAQ;AAAA,IAC7C,KAAK;AAAA,IACL;AACE,aAAO,EAAE,UAAU,QAAQ,IAAI,EAAE,UAAU,QAAQ;AAAA,EACvD;AACF;","names":[]}

package/dist/runtime/subsystems/jobs/job-run-service.protocol.d.ts

@@ -1,4 +1,4 @@
-import { i as JobRun } from '../../../job-orchestrator.protocol-BwsBd37o.js';
+import { i as JobRun } from '../../../job-orchestrator.protocol-CHOEqBDk.js';
 import '../events/event-bus.protocol.js';
 import '../../types/drizzle.js';
 import 'drizzle-orm/node-postgres';
@@ -6,6 +6,7 @@ import './job-orchestration.schema.js';
 import 'drizzle-orm/pg-core';
 import 'drizzle-orm';
 import '@nestjs/common';
+import '../events/generated/types.js';
 
 /**
  * IJobRunService — scope-oriented queries and bulk operations over
@@ -53,6 +54,72 @@ interface PoolStatusCount {
     status: JobRun['status'];
     count: number;
 }
+/**
+ * Filter + keyset-pagination input for `IJobRunService.listJobRuns`
+ * (OBS-LIST-1). The combiner's `listJobRuns` forwards this verbatim.
+ *
+ * Pagination is keyset (a.k.a. seek) on `created_at` descending: pass the
+ * previous page's `nextCursor` as `cursor` to fetch the following page.
+ * Keyset (not offset) so deep pages stay O(log n) and don't drift as new
+ * rows arrive at the head.
+ */
+interface ListJobRunsQuery {
+    /** Filter to a single `pool`. */
+    poolId?: string;
+    /**
+     * Filter to a single run tree by `root_run_id`. Used by the correlation
+     * timeline to gather every run sharing a root.
+     */
+    rootRunId?: string;
+    /** Filter to a single status. Accepts any `JobRun['status']`. */
+    status?: JobRun['status'];
+    /** Lower bound on `created_at` (inclusive). */
+    since?: Date;
+    /**
+     * Opaque keyset cursor returned as `nextCursor` from a previous page.
+     * Encodes the `(createdAt, id)` of the last row seen.
+     */
+    cursor?: string;
+    /** Page size. Backend clamps to a sane default + max. */
+    limit?: number;
+    /**
+     * Multi-tenancy gate, same semantics as `countByPoolAndStatus`:
+     *   - `multiTenant` off → ignored.
+     *   - on + string → filters `tenant_id = :tenantId`.
+     *   - on + null   → filters `tenant_id IS NULL`.
+     *   - on + undefined → throws `MissingTenantIdError`.
+     */
+    tenantId?: string | null;
+}
+/**
+ * Summary row for the `job_run` list (OBS-LIST-1). A narrow projection over
+ * `JobRun` carrying the columns a runs viewer renders. `rootRunId` is
+ * included so the correlation timeline can stitch runs to events.
+ */
+interface JobRunSummary {
+    runId: string;
+    rootRunId: string;
+    jobType: string;
+    pool: string;
+    status: JobRun['status'];
+    scopeEntityType: string | null;
+    scopeEntityId: string | null;
+    tenantId: string | null;
+    attempts: number;
+    errorMessage: string | null;
+    runAt: Date;
+    startedAt: Date | null;
+    finishedAt: Date | null;
+    createdAt: Date;
+}
+/**
+ * One page of `listJobRuns` results. `nextCursor` is `null` when there are
+ * no more rows; otherwise pass it back as `query.cursor` for the next page.
+ */
+interface JobRunPage {
+    items: JobRunSummary[];
+    nextCursor: string | null;
+}
 /**
  * Summary row for the "recent failed runs" observability widget (OBS-2). A
  * narrow projection over `JobRun` — just the fields a dashboard needs.
@@ -100,6 +167,13 @@ interface IJobRunService {
      * Tenant gate follows `countByPoolAndStatus`.
      */
     listRecentFailed(limit: number, tenantId?: string | null): Promise<JobRunFailure[]>;
+    /**
+     * Paginated, filterable list of `job_run` rows for the observability runs
+     * viewer (OBS-LIST-1). Newest first (`created_at` desc, `id` desc as the
+     * keyset tie-break). Returns a `JobRunPage` with an opaque `nextCursor`
+     * for keyset pagination. Tenant gate follows `countByPoolAndStatus`.
+     */
+    listJobRuns(query?: ListJobRunsQuery): Promise<JobRunPage>;
 }
 
-export type { CancelForScopeOptions, IJobRunService, JobRunFailure, ListForScopeOptions, PoolStatusCount, RescheduleForScopeOptions };
+export type { CancelForScopeOptions, IJobRunService, JobRunFailure, JobRunPage, JobRunSummary, ListForScopeOptions, ListJobRunsQuery, PoolStatusCount, RescheduleForScopeOptions };

package/dist/runtime/subsystems/jobs/job-worker.bullmq-backend.d.ts

@@ -0,0 +1,49 @@
+import { ModuleRef } from '@nestjs/core';
+import { ConnectionOptions } from 'bullmq';
+import { DrizzleClient } from '../../types/drizzle.js';
+import { I as IJobOrchestrator } from '../../../job-orchestrator.protocol-CHOEqBDk.js';
+import { IJobStepService } from './job-step-service.protocol.js';
+import 'drizzle-orm/node-postgres';
+import '../events/event-bus.protocol.js';
+import './job-orchestration.schema.js';
+import 'drizzle-orm/pg-core';
+import 'drizzle-orm';
+import '@nestjs/common';
+import '../events/generated/types.js';
+
+/**
+ * Options for a single per-pool BullMQ worker.
+ */
+interface BullMQJobWorkerOptions {
+    /** Logical pool name (matches `job_run.pool`). */
+    pool: string;
+    /** Fully-resolved BullMQ queue name to consume. */
+    queueName: string;
+    /** Max concurrent in-flight processors. */
+    concurrency: number;
+    /** ioredis-compatible connection. */
+    connection: ConnectionOptions;
+}
+declare class BullMQJobWorker {
+    private readonly db;
+    private readonly orchestrator;
+    private readonly stepService;
+    private readonly options;
+    private readonly moduleRef;
+    private readonly logger;
+    private worker;
+    constructor(db: DrizzleClient, orchestrator: IJobOrchestrator, stepService: IJobStepService, options: BullMQJobWorkerOptions, moduleRef: ModuleRef);
+    onModuleInit(): Promise<void>;
+    onModuleDestroy(): Promise<void>;
+    /**
+     * Process one BullMQ job. Returns the handler output (stored by BullMQ as
+     * the job return value AND written to `job_run.output`). Throws on handler
+     * failure so BullMQ applies the retry policy.
+     */
+    private process;
+    private markFailed;
+    private makeStepFn;
+    private makeSpawnFn;
+}
+
+export { BullMQJobWorker, type BullMQJobWorkerOptions };

package/dist/runtime/subsystems/jobs/job-worker.bullmq-backend.js

@@ -0,0 +1,374 @@
+// runtime/subsystems/jobs/job-worker.bullmq-backend.ts
+import { Logger } from "@nestjs/common";
+import { eq } from "drizzle-orm";
+
+// runtime/subsystems/jobs/job-orchestration.schema.ts
+import {
+  pgEnum,
+  pgTable,
+  uuid,
+  text,
+  jsonb,
+  integer,
+  timestamp,
+  index,
+  uniqueIndex
+} from "drizzle-orm/pg-core";
+import { sql } from "drizzle-orm";
+var jobRunStatusEnum = pgEnum("job_run_status", [
+  "pending",
+  "running",
+  "waiting",
+  "completed",
+  "failed",
+  "timed_out",
+  "canceled"
+]);
+var jobStepKindEnum = pgEnum("job_step_kind", ["task"]);
+var jobStepStatusEnum = pgEnum("job_step_status", [
+  "pending",
+  "running",
+  "completed",
+  "failed",
+  "skipped"
+]);
+var collisionModeEnum = pgEnum("job_collision_mode", [
+  "queue",
+  "reject",
+  "replace"
+]);
+var replayFromEnum = pgEnum("job_replay_from", [
+  "scratch",
+  "last_step",
+  "last_checkpoint"
+]);
+var parentClosePolicyEnum = pgEnum("job_parent_close_policy", [
+  "terminate",
+  "cancel",
+  "abandon"
+]);
+var waitKindEnum = pgEnum("job_wait_kind", ["signal"]);
+var triggerSourceEnum = pgEnum("job_trigger_source", [
+  "manual",
+  "schedule",
+  "event",
+  "parent"
+]);
+var jobs = pgTable("job", {
+  type: text("type").primaryKey(),
+  version: integer("version").notNull().default(1),
+  pool: text("pool").notNull(),
+  scopeEntityType: text("scope_entity_type"),
+  retryPolicy: jsonb("retry_policy").notNull().$type(),
+  timeoutMs: integer("timeout_ms"),
+  concurrencyKeyTemplate: text("concurrency_key_template"),
+  collisionMode: collisionModeEnum("collision_mode").notNull().default("queue"),
+  dedupeKeyTemplate: text("dedupe_key_template"),
+  dedupeWindowMs: integer("dedupe_window_ms"),
+  priorityDefault: integer("priority_default").notNull().default(0),
+  replayFrom: replayFromEnum("replay_from").notNull().default("last_checkpoint"),
+  createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+  updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+});
+var jobRuns = pgTable(
+  "job_run",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    jobType: text("job_type").notNull().references(() => jobs.type),
+    jobVersion: integer("job_version").notNull(),
+    parentRunId: uuid("parent_run_id").references(() => jobRuns.id),
+    /**
+     * Service generates `id` client-side via randomUUID() and sets
+     * root_run_id = id for root runs (single INSERT, no self-FK race).
+     */
+    rootRunId: uuid("root_run_id").notNull(),
+    parentClosePolicy: parentClosePolicyEnum("parent_close_policy").notNull().default("terminate"),
+    scopeEntityType: text("scope_entity_type"),
+    scopeEntityId: text("scope_entity_id"),
+    tenantId: text("tenant_id"),
+    tags: jsonb("tags").notNull().default({}).$type(),
+    pool: text("pool").notNull(),
+    priority: integer("priority").notNull().default(0),
+    concurrencyKey: text("concurrency_key"),
+    dedupeKey: text("dedupe_key"),
+    status: jobRunStatusEnum("status").notNull().default("pending"),
+    input: jsonb("input").notNull().$type(),
+    output: jsonb("output").$type(),
+    error: jsonb("error").$type(),
+    triggerSource: triggerSourceEnum("trigger_source").notNull(),
+    triggerRef: text("trigger_ref"),
+    runAt: timestamp("run_at", { withTimezone: true }).notNull().defaultNow(),
+    startedAt: timestamp("started_at", { withTimezone: true }),
+    finishedAt: timestamp("finished_at", { withTimezone: true }),
+    claimedAt: timestamp("claimed_at", { withTimezone: true }),
+    attempts: integer("attempts").notNull().default(0),
+    // Phase 3 placeholder — see ADR-025
+    waitKind: waitKindEnum("wait_kind"),
+    // Phase 3 placeholder — see ADR-025
+    resumeToken: text("resume_token"),
+    // Phase 3 placeholder — see ADR-025
+    waitDeadline: timestamp("wait_deadline", { withTimezone: true }),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
+  },
+  (t) => ({
+    /** Claim query: ORDER BY priority DESC, run_at ASC. */
+    idxJobRunClaim: index("idx_job_run_claim").on(t.status, t.pool, t.runAt),
+    /** Tree traversal / cascade cancel. */
+    idxJobRunRoot: index("idx_job_run_root").on(t.rootRunId),
+    /** listForScope query. */
+    idxJobRunScope: index("idx_job_run_scope").on(t.scopeEntityType, t.scopeEntityId),
+    /** Idempotency collapse — partial index. */
+    idxJobRunDedupe: index("idx_job_run_dedupe").on(t.jobType, t.dedupeKey).where(sql`${t.dedupeKey} IS NOT NULL`),
+    /** Collision check — partial index. */
+    idxJobRunConcurrency: index("idx_job_run_concurrency").on(t.concurrencyKey).where(
+      sql`${t.concurrencyKey} IS NOT NULL AND ${t.status} IN ('pending','running')`
+    )
+  })
+);
+var jobSteps = pgTable(
+  "job_step",
+  {
+    id: uuid("id").primaryKey().defaultRandom(),
+    jobRunId: uuid("job_run_id").notNull().references(() => jobRuns.id),
+    stepId: text("step_id").notNull(),
+    kind: jobStepKindEnum("kind").notNull().default("task"),
+    /**
+     * Monotonic within run. integer (max ~2B per run) is sufficient —
+     * downgraded from ADR-022's bigint; revisit only if a single run
+     * ever exceeds 2 billion steps.
+     */
+    seq: integer("seq").notNull(),
+    status: jobStepStatusEnum("status").notNull().default("pending"),
+    input: jsonb("input").$type(),
+    /** Memoised on success for replay. */
+    output: jsonb("output").$type(),
+    error: jsonb("error").$type(),
+    attempts: integer("attempts").notNull().default(0),
+    startedAt: timestamp("started_at", { withTimezone: true }),
+    finishedAt: timestamp("finished_at", { withTimezone: true })
+  },
+  (t) => ({
+    /** No duplicate step IDs per run. */
+    idxJobStepRunStep: uniqueIndex("idx_job_step_run_step").on(t.jobRunId, t.stepId),
+    /** Ordered timeline reads. */
+    idxJobStepTimeline: index("idx_job_step_timeline").on(t.jobRunId, t.seq)
+  })
+);
+
+// runtime/subsystems/jobs/job-handler.base.ts
+var JOB_HANDLER_REGISTRY = /* @__PURE__ */ new Map();
+var HandlerRegistry;
+((HandlerRegistry2) => {
+  function getAll() {
+    return Array.from(JOB_HANDLER_REGISTRY.values());
+  }
+  HandlerRegistry2.getAll = getAll;
+  function get(type) {
+    return JOB_HANDLER_REGISTRY.get(type);
+  }
+  HandlerRegistry2.get = get;
+})(HandlerRegistry || (HandlerRegistry = {}));
+
+// runtime/subsystems/jobs/job-worker.bullmq-backend.ts
+function serialiseError(err, attempt, retryable) {
+  const e = err;
+  return {
+    message: e?.message ?? String(err),
+    stack: e?.stack,
+    retryable,
+    attempt
+  };
+}
+var BullMQJobWorker = class _BullMQJobWorker {
+  constructor(db, orchestrator, stepService, options, moduleRef) {
+    this.db = db;
+    this.orchestrator = orchestrator;
+    this.stepService = stepService;
+    this.options = options;
+    this.moduleRef = moduleRef;
+  }
+  db;
+  orchestrator;
+  stepService;
+  options;
+  moduleRef;
+  logger = new Logger(_BullMQJobWorker.name);
+  worker = null;
+  async onModuleInit() {
+    let WorkerCtor;
+    try {
+      const mod = await import("bullmq");
+      WorkerCtor = mod.Worker;
+    } catch {
+      throw new Error(
+        'BullMQ backend requires the "bullmq" package. Install it with: npm install bullmq'
+      );
+    }
+    this.worker = new WorkerCtor(
+      this.options.queueName,
+      (job) => this.process(job),
+      {
+        connection: this.options.connection,
+        concurrency: this.options.concurrency
+      }
+    );
+    this.worker.on("failed", (job, err) => {
+      if (!job) return;
+      const attemptsMade = job.attemptsMade;
+      const maxAttempts = job.opts.attempts ?? 1;
+      if (attemptsMade >= maxAttempts) {
+        void this.markFailed(job.data.runId, err, attemptsMade);
+      }
+    });
+    this.logger.log(
+      `BullMQ worker started: pool='${this.options.pool}' queue='${this.options.queueName}' concurrency=${this.options.concurrency}`
+    );
+  }
+  async onModuleDestroy() {
+    if (this.worker) {
+      await this.worker.close();
+      this.worker = null;
+    }
+  }
+  /**
+   * Process one BullMQ job. Returns the handler output (stored by BullMQ as
+   * the job return value AND written to `job_run.output`). Throws on handler
+   * failure so BullMQ applies the retry policy.
+   */
+  async process(job) {
+    const { runId } = job.data;
+    const [row] = await this.db.select().from(jobRuns).where(eq(jobRuns.id, runId)).limit(1);
+    if (!row) {
+      this.logger.warn(`process: job_run ${runId} not found; skipping`);
+      return {};
+    }
+    const run = row;
+    if (run.status === "canceled") {
+      return {};
+    }
+    const registryEntry = JOB_HANDLER_REGISTRY.get(run.jobType);
+    if (!registryEntry) {
+      throw new Error(
+        `No handler registered for jobType='${run.jobType}' (run ${run.id})`
+      );
+    }
+    await this.db.update(jobRuns).set({
+      status: "running",
+      claimedAt: /* @__PURE__ */ new Date(),
+      startedAt: /* @__PURE__ */ new Date(),
+      attempts: job.attemptsMade + 1,
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq(jobRuns.id, run.id));
+    const HandlerClass = registryEntry.handlerClass;
+    const handler = this.moduleRef.get(
+      HandlerClass,
+      { strict: false }
+    );
+    const ctx = {
+      input: run.input,
+      run,
+      step: this.makeStepFn(run),
+      spawnChild: this.makeSpawnFn(run),
+      logger: new Logger(`JobRun:${run.id}`)
+    };
+    const output = await handler.run(ctx);
+    await this.db.update(jobRuns).set({
+      status: "completed",
+      output: output ?? {},
+      finishedAt: /* @__PURE__ */ new Date(),
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq(jobRuns.id, run.id));
+    return output ?? {};
+  }
+  async markFailed(runId, err, finalAttempts) {
+    const [row] = await this.db.select().from(jobRuns).where(eq(jobRuns.id, runId)).limit(1);
+    if (!row) return;
+    const run = row;
+    await this.db.update(jobRuns).set({
+      status: "failed",
+      attempts: finalAttempts,
+      finishedAt: /* @__PURE__ */ new Date(),
+      error: serialiseError(err, finalAttempts, false),
+      updatedAt: /* @__PURE__ */ new Date()
+    }).where(eq(jobRuns.id, runId));
+    if (run.parentClosePolicy === "terminate") {
+      try {
+        await this.orchestrator.cancel(run.id, {
+          cascade: true,
+          reason: "parent-failed",
+          tenantId: run.tenantId
+        });
+      } catch (cascadeErr) {
+        this.logger.warn(
+          `cascade on failed run ${run.id}: ${cascadeErr.message}`
+        );
+      }
+    }
+  }
+  // ── ctx.step / ctx.spawnChild (mirror JobWorker) ──────────────────────────
+  makeStepFn(run) {
+    return async (stepId, fn, _opts) => {
+      void _opts;
+      const existing = await this.stepService.findStep(run.id, stepId);
+      if (existing?.status === "completed") {
+        return existing.output;
+      }
+      const nextAttempts = (existing?.attempts ?? 0) + 1;
+      const seq = nextAttempts;
+      await this.stepService.recordStep({
+        jobRunId: run.id,
+        stepId,
+        kind: "task",
+        seq,
+        status: "running",
+        startedAt: /* @__PURE__ */ new Date(),
+        attempts: nextAttempts
+      });
+      try {
+        const output = await fn();
+        await this.stepService.recordStep({
+          jobRunId: run.id,
+          stepId,
+          kind: "task",
+          seq,
+          status: "completed",
+          output,
+          finishedAt: /* @__PURE__ */ new Date(),
+          attempts: nextAttempts
+        });
+        return output;
+      } catch (err) {
+        await this.stepService.recordStep({
+          jobRunId: run.id,
+          stepId,
+          kind: "task",
+          seq,
+          status: "failed",
+          error: serialiseError(err, nextAttempts, false),
+          finishedAt: /* @__PURE__ */ new Date(),
+          attempts: nextAttempts
+        });
+        throw err;
+      }
+    };
+  }
+  makeSpawnFn(run) {
+    return async (type, input, opts) => {
+      return this.orchestrator.start(type, input, {
+        parentRunId: run.id,
+        parentClosePolicy: opts?.closePolicy,
+        runAt: opts?.runAt,
+        priority: opts?.priority,
+        tags: opts?.tags,
+        triggerSource: "parent",
+        triggerRef: run.id,
+        tenantId: run.tenantId
+      });
+    };
+  }
+};
+export {
+  BullMQJobWorker
+};
+//# sourceMappingURL=job-worker.bullmq-backend.js.map