feat: jpa, messaging, notification, mongo, graphql 어댑터터 구현체 추가

2026-08-15 13:01:58 +09:00
parent ac874e49e6
commit 2f5d2fc219
909 changed files with 62510 additions and 6354 deletions
@@ -24,15 +24,15 @@ readonly EXPECTED_WORKFLOW_LOCK=(
  '58e28f3358d794ca08f4aa8df4516e03f50a9ee58488b3f0d2619998e069ef14  .github/workflows/httpclient-contract.yml'
  '823bc346e58a58b2c0814cd1e3e55ec90d360c138419ec3d8f05deb59c62c7eb  .github/workflows/httpclient-nightly.yml'
  'ad84000efc438ee7439517b8f85819e62b13dab0aa4f94066c2905060f3bb581  .github/workflows/httpclient-release.yml'
-  'e0cb998969b8f4b8531f50d38413ee4640931839be7ad50509e1d0e1a84f919e  .github/workflows/jpa-next-hibernate8.yml'
-  '6f577e71cd10d74facdf76353f211132d2e2ba04363b8025affb45873f349d9f  .github/workflows/jpa-next-jpa4.yml'
-  'f69e174cd0e5a2451078ea23d52efefc13fb27d2c120f5fe30dc93ffc4d532aa  .github/workflows/jpa-next-postgresql19.yml'
-  '053593c3f1b5acdc98f01f1986ffbe74163d61c58384d16e27949b879757bef1  .github/workflows/jpa-nightly.yml'
+  '3be84c9f15fa3b2ac5a085f8d725ec6d05e7007ae0b433da9e79b3bf340d57ea  .github/workflows/jpa-next-hibernate8.yml'
+  'a2b74bfb3af12d6d03cd2ea8a5e48490dd131afb89b79694d498c5798387ac53  .github/workflows/jpa-next-jpa4.yml'
+  'cd955ef4af895df477896dad9577810f010b2beea8570b09b008f9e94e928bd0  .github/workflows/jpa-next-postgresql19.yml'
+  'b56b548a867b74eaeccb42e7df4f4e52cf7ce657ab27f91e2c8d7ea9944d64af  .github/workflows/jpa-nightly.yml'
  '04851f44ba94533bfbc8fabe2b3a2b408726a9996e86ed3864986d1499d16b50  .github/workflows/jpa-pr.yml'
  '59cb3a0ffc687a15eefe96bc5e3a70d42be78e1cc85d2e7f7880dac6124ca4c7  .github/workflows/jpa-r2-evidence.yml'
-  'ea7f8214a3cc9ec3e7ba3183a2201fd26a05a61f0b0fdcb1f041b71efca3e81c  .github/workflows/jpa-release.yml'
+  '4748f2ba0a0b77dc1a858ebcfa7db6e41627d97843df5f0aa978bc2facccaad2  .github/workflows/jpa-release.yml'
  '5be7e931db749029d89787da042d6d7cf8e683d60698bd8a2993c29db26355fb  .github/workflows/link-check.yml'
-  '3d5afcef6bf1c65dcd8cad3d1687f07c2cfbb15d360f41251e46f9eb8950baac  .github/workflows/notification-platform.yml'
+  '4e4ccfa267ecd63b9369803d49f2dbdb2fa899517ad4cf23ab11d29104557a91  .github/workflows/notification-platform.yml'
  '64245586cd5936f1a5647b57f2cd9acd316f96fd75f713b1890decb812e7d5fe  .github/workflows/object-storage-qualification.yml'
  'cbc104ea486c746229895e804e3be7716e056a02cce0588c537bce9f442f8b38  .github/workflows/redis-sdk-topology.yml'
 )
@@ -41,3 +41,24 @@ jobs:
          :adapter:outbound:persistence-jpa:test --tests '*HibernateCompatibilityPolicyTest'
          --no-daemon
          --stacktrace
+      - name: Record what this lane did and did not execute
+        if: always()
+        run: |
+          mkdir -p compatibility-evidence
+          {
+            echo "target=Hibernate 8"
+            echo "target-coordinate=org.hibernate.orm:hibernate-core:8.x"
+            echo "status=NOT_EXECUTABLE"
+            echo "reason=Hibernate 8 is not resolvable from this build, so nothing has been compiled or run against it"
+            echo "what-ran=the current runtime's own policy and lane-definition tests"
+            echo "sha=${{ github.sha }}"
+          } > compatibility-evidence/status.properties
+          echo "::notice::Hibernate 8 compatibility is NOT_EXECUTABLE: Hibernate 8 is not resolvable from this build, so nothing has been compiled or run against it"
+      - name: Upload the compatibility status
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # actions/upload-artifact@v4.6.2
+        with:
+          name: compatibility-status-hibernate-8
+          path: compatibility-evidence/status.properties
+          retention-days: 30
+          if-no-files-found: error
@@ -41,3 +41,24 @@ jobs:
          :adapter:outbound:persistence-jpa:test --tests '*CompatibilityLaneDefinitionTest'
          --no-daemon
          --stacktrace
+      - name: Record what this lane did and did not execute
+        if: always()
+        run: |
+          mkdir -p compatibility-evidence
+          {
+            echo "target=Jakarta Persistence 4"
+            echo "target-coordinate=jakarta.persistence:jakarta.persistence-api:4.x"
+            echo "status=NOT_EXECUTABLE"
+            echo "reason=the JPA 4 API is not on any configuration this build resolves, so nothing has been compiled against it"
+            echo "what-ran=the current runtime's own policy and lane-definition tests"
+            echo "sha=${{ github.sha }}"
+          } > compatibility-evidence/status.properties
+          echo "::notice::Jakarta Persistence 4 compatibility is NOT_EXECUTABLE: the JPA 4 API is not on any configuration this build resolves, so nothing has been compiled against it"
+      - name: Upload the compatibility status
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # actions/upload-artifact@v4.6.2
+        with:
+          name: compatibility-status-jakarta-persistence-4
+          path: compatibility-evidence/status.properties
+          retention-days: 30
+          if-no-files-found: error
@@ -2,6 +2,13 @@ name: jpa-next-postgresql19

 # PostgreSQL 19 compatibility lane (experimental plan Task 9).
 #
+# This lane is NOT_EXECUTABLE against its target.
+#
+# It runs the current runtime's policy and lane-definition tests; it does not resolve the target
+# dependency or start a container of the target version. A green run therefore says "the target is
+# absent from this build", which is not the same claim as "we are compatible with the target" — and
+# the workflow's name reads as the second one. The status artifact says which it is.
+#
 # Promotion needs evidence, not availability. Two supported patch runs with no unresolved semantic
 # regression, plus a reviewed ADR, before the Stable support matrix changes — which is what
 # ExperimentalPromotionGate encodes.
@@ -40,3 +47,24 @@ jobs:
          :adapter:outbound:persistence-jpa:test --tests '*ExperimentalPromotionGateTest'
          --no-daemon
          --stacktrace
+      - name: Record what this lane did and did not execute
+        if: always()
+        run: |
+          mkdir -p compatibility-evidence
+          {
+            echo "target=PostgreSQL 19"
+            echo "target-coordinate=postgres:19-alpine"
+            echo "status=NOT_EXECUTABLE"
+            echo "reason=no PostgreSQL 19 image is published yet, so no container of that major has ever been started by this lane"
+            echo "what-ran=the current runtime's own policy and lane-definition tests"
+            echo "sha=${{ github.sha }}"
+          } > compatibility-evidence/status.properties
+          echo "::notice::PostgreSQL 19 compatibility is NOT_EXECUTABLE: no PostgreSQL 19 image is published yet, so no container of that major has ever been started by this lane"
+      - name: Upload the compatibility status
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # actions/upload-artifact@v4.6.2
+        with:
+          name: compatibility-status-postgresql-19
+          path: compatibility-evidence/status.properties
+          retention-days: 30
+          if-no-files-found: error
@@ -125,7 +125,6 @@ jobs:
        # noisy shared runner does not produce a red build that means nothing.
        run: >-
          ./gradlew
-          :adapter:outbound:persistence-jpa:jpaPlatformPerformanceTest
-          -Pperformance.assertions.enabled=false
+          :adapter:outbound:persistence-jpa:jpaPlatformPoolContractTest
          --no-daemon
          --stacktrace
@@ -18,9 +18,24 @@ concurrency:
  cancel-in-progress: false

 jobs:
+  # One job per PostgreSQL major, because one job for three majors was one job for one major.
+  #
+  # `-Pjpa.matrix.versions=16,17,18` reached JpaPlatformContractSupport.start(), which started
+  # selectedVersions().get(0) — so twenty-eight integration classes ran against PG16 and nothing
+  # ran against 17 or 18, while docs/jpa/support-matrix.md recorded all three as "full contract
+  # suite, release lane". A JSONB mapping, a Hibernate dialect difference or a Flyway upgrade that
+  # only breaks on 18 shipped with a green release.
+  #
+  # start() now fails closed on a multi-version selection, so the fan-out is not optional: the
+  # matrix is the only way the three majors get covered, and removing a major from it removes the
+  # evidence rather than quietly reusing another major's.
  jpa-release-gate:
    runs-on: ubuntu-latest
    timeout-minutes: 90
+    strategy:
+      fail-fast: false
+      matrix:
+        postgresql: ["16", "17", "18"]
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
      - name: Validate Gradle wrapper
@@ -35,14 +50,71 @@ jobs:
            src/**/*.gradle
            src/**/gradle-wrapper.properties
            src/**/gradle.lockfile
-      - name: Run the full JPA release gate
+      - name: Run the full JPA release gate on PostgreSQL ${{ matrix.postgresql }}
        working-directory: src
        run: >-
          ./gradlew
          jpaReleaseGate
-          -Pjpa.matrix.versions=16,17,18
+          -Pjpa.matrix.versions=${{ matrix.postgresql }}
          --no-daemon
          --stacktrace
+      - name: Record which major this evidence covers
+        if: always()
+        working-directory: src
+        run: |
+          mkdir -p build/jpa-release-evidence
+          {
+            echo "sha=${{ github.sha }}"
+            echo "ref=${{ github.ref }}"
+            echo "postgresql-major=${{ matrix.postgresql }}"
+            echo "task=jpaReleaseGate"
+          } > "build/jpa-release-evidence/manifest-${{ matrix.postgresql }}.properties"
+      - name: Upload the release evidence
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # actions/upload-artifact@v4.6.2
+        with:
+          name: jpa-release-evidence-pg${{ matrix.postgresql }}
+          path: |
+            src/build/jpa-release-evidence/manifest-${{ matrix.postgresql }}.properties
+            src/adapter/outbound/persistence-jpa/build/test-results/**/*.xml
+          retention-days: 30
+          if-no-files-found: error
+
+  # The promotion decision. Three majors' evidence, and all three must come from this SHA — an
+  # aggregate that accepted a re-run artifact from another commit would promote a release on
+  # evidence produced by different code.
+  jpa-release-promotion:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    needs: jpa-release-gate
+    steps:
+      - name: Download every major's evidence
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # actions/download-artifact@v4.3.0
+        with:
+          pattern: jpa-release-evidence-pg*
+          path: evidence
+      - name: Require all three majors, all from this SHA
+        run: |
+          set -euo pipefail
+          missing=0
+          for major in 16 17 18; do
+            manifest=$(find evidence -name "manifest-${major}.properties" -print -quit)
+            if [ -z "${manifest}" ]; then
+              echo "::error::no release evidence for PostgreSQL ${major}"
+              missing=1
+              continue
+            fi
+            sha=$(sed -n 's/^sha=//p' "${manifest}")
+            if [ "${sha}" != "${{ github.sha }}" ]; then
+              echo "::error::PostgreSQL ${major} evidence is from ${sha}, not ${{ github.sha }}"
+              missing=1
+            fi
+          done
+          if [ "${missing}" -ne 0 ]; then
+            echo "::error::the release gate covers three PostgreSQL majors; promotion needs all three"
+            exit 1
+          fi
+          echo "PostgreSQL 16, 17 and 18 evidence all present and all from ${{ github.sha }}."

  jpa-architecture-and-docs:
    runs-on: ubuntu-latest
@@ -14,10 +14,20 @@ name: notification-platform
 on:
  pull_request:
    paths:
-      - 'src/application-core/src/**/notification/platform/**'
+      # The filter used to stop at the four notification source trees, so a change to the
+      # composition root, the settings binding, the schema migrations, or the evidence manifest
+      # ran none of this — and those are exactly the surfaces that decide whether the platform
+      # assembles, binds and migrates at all.
+      - 'src/application-core/src/**/notification/**'
      - 'src/adapter/outbound/notification/**'
      - 'src/adapter/outbound/persistence-jpa/src/**/notification/**'
+      - 'src/adapter/outbound/persistence-jpa/src/main/resources/db/migration/jpa/notification-platform/**'
      - 'src/adapter/inbound/web/src/**/notification/**'
+      - 'src/app-bootstrap/src/**/notification/**'
+      - 'src/app-bootstrap/src/main/resources/application*.yml'
+      - 'src/gradle/notification-*.gradle'
+      - 'src/config/architecture/modules.json'
+      - 'src/.env'
      - 'docs/notification/**'
      - 'infra/notification/**'
      - '.github/workflows/notification-platform.yml'
@@ -66,6 +76,16 @@ jobs:
      - name: Persistence and web
        working-directory: src
        run: ./gradlew :adapter:outbound:persistence-jpa:test :adapter:inbound:web:test --console=plain
+      # The PR tier never touched a database, so every claim about migrations, claim atomicity and
+      # lease fencing rested on a fake. Docker is available on this runner; the lane fails closed
+      # when the container cannot start, because a skipped contract reports success for a database
+      # nobody tested.
+      - name: Notification schema and claim contracts (real PostgreSQL)
+        working-directory: src
+        run: ./gradlew :adapter:outbound:persistence-jpa:jpaPlatformContractTest --console=plain
+      - name: Notification migration upgrade (real PostgreSQL)
+        working-directory: src
+        run: ./gradlew :adapter:outbound:persistence-jpa:jpaPlatformMigrationTest --console=plain
      - name: Architecture gates
        working-directory: src
        run: |
@@ -73,7 +93,15 @@ jobs:
          ./gradlew :app-bootstrap:test --tests '*CleanArchitectureTest' --tests '*NotificationArchitectureTest' --console=plain
      - name: Configuration surface
        working-directory: src
-        run: ./gradlew verifyEnvKeys verifyPublicPathSnapshot --console=plain
+        run: |
+          ./gradlew verifyEnvKeys verifyPublicPathSnapshot --console=plain
+          ./gradlew verifyNotificationApiSurface verifyNotificationConfiguration --console=plain
+      # A support grade is a promise about production behaviour. This refuses one the pipeline
+      # cannot back — the check that would have caught five channels reading "Stable" while no
+      # request had ever left the process.
+      - name: Evidence manifest
+        working-directory: src
+        run: ./gradlew verifyNotificationEvidence --console=plain
      - name: Static analysis
        working-directory: src
        run: ./gradlew :adapter:outbound:notification:check -x test --console=plain
@@ -97,12 +125,33 @@ jobs:
            src/**/*.gradle
            src/**/gradle-wrapper.properties
            src/**/gradle.lockfile
+      # This job is named for ambiguity, restart recovery and callback burst. It used to run a
+      # unit-test filter and then `test` — neither of which restarts anything or bursts anything —
+      # so the job name was the only place those three properties existed.
      - name: Ambiguity and fault harness
        working-directory: src
        run: ./gradlew :adapter:outbound:notification:test --tests '*ChaosSecurity*' --tests '*CrossProviderContractSuite*' --console=plain
+      - name: Concurrency and rotation races
+        working-directory: src
+        run: ./gradlew :adapter:outbound:notification:test --tests '*ConcurrencyTest' --tests '*ProviderRuntimeStateTest' --console=plain
+      - name: Restart recovery and lease fencing (real PostgreSQL)
+        working-directory: src
+        run: ./gradlew :adapter:outbound:persistence-jpa:jpaPlatformContractTest :adapter:outbound:persistence-jpa:jpaPlatformFailureTest --console=plain
      - name: Full suite
        working-directory: src
        run: ./gradlew test --console=plain
+      # A filter that matches nothing passes. Each --tests filter above names a class that exists
+      # today; if one is renamed the job must fail rather than quietly stop covering it.
+      - name: Every named suite actually ran
+        working-directory: src
+        run: |
+          set -euo pipefail
+          for suite in ChaosSecurity CrossProviderContractSuite ConcurrencyTest ProviderRuntimeStateTest; do
+            if ! find . -path '*/build/test-results/*' -name "*${suite}*.xml" | grep -q .; then
+              echo "no test results for ${suite}: the filter matched nothing and the job passed vacuously" >&2
+              exit 1
+            fi
+          done

  provider-sandbox:
    name: provider sandbox smoke (secret-protected, non-blocking)
@@ -110,12 +159,44 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 30
    environment: notification-provider-sandbox
-    continue-on-error: true
+    # Not a required check: an external outage must not block a merge. But not continue-on-error
+    # either — a job that cannot fail produces no evidence, and this job's entire previous body was
+    # two echo statements, which is what let five channels be graded Stable on nothing.
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # actions/checkout@v4.2.2
+      - name: Validate Gradle wrapper
+        id: gradle-wrapper-validation
+        uses: gradle/actions/wrapper-validation@3f131e8634966bd73d06cc69884922b02e6faf92 # gradle/actions@v6
+      - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # actions/setup-java@v4.7.1
+        with:
+          distribution: temurin
+          java-version: "21.0.11+10"
+          cache: gradle
+          cache-dependency-path: |
+            src/**/*.gradle
+            src/**/gradle-wrapper.properties
+            src/**/gradle.lockfile
+      - name: Refuse to report a pass with no credentials
+        env:
+          NOTIFICATION_SANDBOX_CREDENTIALS: ${{ secrets.NOTIFICATION_SANDBOX_CREDENTIALS }}
+        run: |
+          set -euo pipefail
+          if [ -z "${NOTIFICATION_SANDBOX_CREDENTIALS:-}" ]; then
+            echo "provider sandbox credentials are not configured for this environment." >&2
+            echo "The job stops here rather than reporting a green run that called nothing." >&2
+            exit 1
+          fi
      - name: Smoke test against real provider sandboxes
+        working-directory: src
        env:
          NOTIFICATION_SANDBOX_ENABLED: 'true'
-        run: |
-          echo "Runs only where provider sandbox credentials are configured."
-          echo "Never a required check: an external outage must not block a merge."
+          NOTIFICATION_SANDBOX_CREDENTIALS: ${{ secrets.NOTIFICATION_SANDBOX_CREDENTIALS }}
+        run: ./gradlew :adapter:outbound:notification:test --tests '*ProviderSandbox*' --console=plain
+      - name: Upload the wire evidence
+        if: always()
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # actions/upload-artifact@v4.6.2
+        with:
+          name: notification-provider-sandbox-evidence
+          path: src/adapter/outbound/notification/build/test-results/test/
+          if-no-files-found: error
+          retention-days: 90