fix(firstleg): expose event bridge relay failures

firstleg/src/test/java/com/baiyue/firstleg/client/EventBridgeClientDeploymentContractTest.java

@@ -0,0 +1,32 @@
+package com.baiyue.firstleg.client;
+
+import org.junit.jupiter.api.Test;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+class EventBridgeClientDeploymentContractTest {
+    private static final Path REPOSITORY_ROOT = Path.of("..").toAbsolutePath().normalize();
+
+    @Test
+    void firstlegBridgeTargetComesFromEnvironmentWithoutLoopbackFallback() throws Exception {
+        String application = Files.readString(REPOSITORY_ROOT.resolve("firstleg/src/main/resources/application.yml"));
+        String nacos = Files.readString(REPOSITORY_ROOT.resolve("config/nacos/cn/firstleg-service.yml"));
+
+        assertTrue(application.contains("event-bridge-url: ${LASTLEG_EVENT_BRIDGE_URL:}"));
+        assertFalse(application.contains("LASTLEG_EVENT_BRIDGE_URL:http://127.0.0.1"));
+        assertTrue(nacos.contains("event-bridge-url: ${LASTLEG_EVENT_BRIDGE_URL}"));
+    }
+
+    @Test
+    void cnComposeForwardsTargetAndPublishesStableNetworkAlias() throws Exception {
+        String compose = Files.readString(REPOSITORY_ROOT.resolve("deploy/docker-compose.yml"));
+
+        assertTrue(compose.contains("LASTLEG_EVENT_BRIDGE_URL: ${LASTLEG_EVENT_BRIDGE_URL}"));
+        assertTrue(compose.contains("SERVER_PORT: 9312"));
+        assertTrue(compose.contains("aliases: [event-bridge-cn]"));
+    }
+}

firstleg/src/test/java/com/baiyue/firstleg/service/LoadingCompletedOutboxRelayTest.java

@@ -1,6 +1,7 @@
 package com.baiyue.firstleg.service;
 
 import com.baiyue.common.core.api.ApiResponse;
+import com.baiyue.common.core.api.ResultCode;
 import com.baiyue.common.event.EventEnvelope;
 import com.baiyue.common.event.EventPayloadCanonicalizer;
 import com.baiyue.common.event.EventPayloadHash;
@@ -18,6 +19,7 @@ import org.junit.jupiter.api.extension.ExtendWith;
 import org.mockito.Mock;
 import org.mockito.junit.jupiter.MockitoExtension;
 import org.springframework.test.util.ReflectionTestUtils;
+import org.springframework.cloud.client.circuitbreaker.NoFallbackAvailableException;
 
 import java.time.Instant;
 import java.time.LocalDateTime;
@@ -73,7 +75,44 @@ class LoadingCompletedOutboxRelayTest {
 
         relay.relay();
 
-        verify(repository).retry(eq(9001L), anyString(), any(LocalDateTime.class), eq("failed *** remote"));
+        verify(repository).retry(eq(9001L), anyString(), any(LocalDateTime.class),
+            eq("IllegalStateException: failed *** remote"));
+    }
+
+    @Test
+    void persistsRootCauseWhenCircuitBreakerWrapsBridgeFailure() throws Exception {
+        EventEnvelope event = event();
+        InboundOutboxEntity row = row(event);
+        when(repository.pending(eq(50), any(), any())).thenReturn(List.of(row));
+        when(repository.claim(eq(9001L), anyString(), any(), any())).thenReturn(true);
+        when(repository.claimed(eq(9001L), anyString())).thenReturn(row);
+        when(client.receive(eq("internal-token"), any(EventEnvelope.class))).thenThrow(
+            new NoFallbackAvailableException("No fallback available.",
+                new IllegalStateException("Connection refused: event-bridge-cn:9312")));
+
+        relay.relay();
+
+        verify(repository).retry(eq(9001L), anyString(), any(LocalDateTime.class),
+            eq("IllegalStateException: Connection refused: event-bridge-cn:9312"));
+        verify(repository, never()).published(anyLong(), anyString(), any());
+    }
+
+    @Test
+    void persistsDownstreamCodeAndRequestEvidenceWhenBridgeRejectsEvent() throws Exception {
+        EventEnvelope event = event();
+        InboundOutboxEntity row = row(event);
+        when(repository.pending(eq(50), any(), any())).thenReturn(List.of(row));
+        when(repository.claim(eq(9001L), anyString(), any(), any())).thenReturn(true);
+        when(repository.claimed(eq(9001L), anyString())).thenReturn(row);
+        when(client.receive(eq("internal-token"), any(EventEnvelope.class))).thenReturn(ApiResponse.failure(
+            ResultCode.SERVICE_UNAVAILABLE, "bridge inbox unavailable", "request-123", "trace-456"));
+
+        relay.relay();
+
+        verify(repository).retry(eq(9001L), anyString(), any(LocalDateTime.class), eq(
+            "IllegalStateException: 事件桥拒绝头程跨区事件: code=S0503, message=bridge inbox unavailable, "
+                + "requestId=request-123, traceId=trace-456"));
+        verify(repository, never()).published(anyLong(), anyString(), any());
     }
 
     private InboundOutboxEntity row(EventEnvelope event) throws Exception {