feat: atomic social local writes, remote review enrichment

SocialCommand methods take events. Local follow ops = one FollowCommand::apply
tx (rows + events). k_ap path (remote, block/unblock): best-effort publish in
CompositeSocialAdapter after k_ap write; not atomic, k_ap owns tx.
save_remote_review takes events, enqueued in same tx via
sqlite::persistence::enqueue_events. Deps drop event_publisher: social
command, ReviewObjectHandler.

Remaining .publish( sites:
announce-only: users/delete_account UserDeleted, person/get + get_credits
PersonEnrichmentRequested, jobs/enrichment_staleness, http-axum search,
ImageStored (sync_poster, poster_sync_handler, image-converter backfill,
update_profile; object storage), federation_event_bridge (handler reaction),
nats relay (transport).
non-atomic by necessity: CompositeSocialAdapter::announce (k_ap-owned write).
Everything else rides its write.

crates/adapters/sqlite/tests/cascade_test.rs

@@ -11,7 +11,8 @@ use domain::models::{
     WatchEvent, WatchEventSource, WatchlistEntry, WebhookToken,
 };
 use domain::ports::{
-    FollowCommand, UserProfileFieldsRepository, WatchEventCommand, WebhookTokenRepository,
+    FollowCommand, FollowWrite, UserProfileFieldsRepository, WatchEventCommand,
+    WebhookTokenRepository,
 };
 use domain::testing::{
     MOVIE_CASCADE_TABLES, USER_CASCADE_TABLES, USER_CASCADE_TABLES_OUTSIDE_STORE, test_goal,
@@ -184,11 +185,21 @@ async fn seed_user_with_dependents(
         domain::value_objects::InstanceIdentity::new("https://md.example"),
     );
     social
-        .add_follow(user_id.value(), REMOTE_ACTOR, FollowStatus::Accepted)
-        .await
-        .unwrap();
-    social
-        .add_follower(user_id.value(), REMOTE_ACTOR, FollowStatus::Accepted)
+        .apply(
+            &[
+                FollowWrite::AddFollow {
+                    follower_id: user_id.value(),
+                    target_actor_url: REMOTE_ACTOR.into(),
+                    status: FollowStatus::Accepted,
+                },
+                FollowWrite::AddFollower {
+                    local_user_id: user_id.value(),
+                    follower_actor_url: REMOTE_ACTOR.into(),
+                    status: FollowStatus::Accepted,
+                },
+            ],
+            &[],
+        )
         .await
         .unwrap();
     // No repository in this crate owns these two tables (federation crate).

crates/adapters/sqlite/tests/repositories/outbox_writes_test.rs

@@ -712,3 +712,85 @@ async fn a_failing_enqueue_rolls_back_the_watch_event_save() {
     assert!(result.is_err());
     assert_eq!(count(&pool, "watch_events").await, 0);
 }
+
+fn follow_writes(user_id: &UserId) -> Vec<domain::ports::FollowWrite> {
+    use domain::{ports::FollowWrite, value_objects::FollowStatus};
+    vec![
+        FollowWrite::AddFollower {
+            local_user_id: user_id.value(),
+            follower_actor_url: "https://md.example/users/other".into(),
+            status: FollowStatus::Pending,
+        },
+        FollowWrite::AddFollow {
+            follower_id: user_id.value(),
+            target_actor_url: "https://md.example/users/other".into(),
+            status: FollowStatus::Pending,
+        },
+    ]
+}
+
+fn follow_requested(user_id: &UserId) -> DomainEvent {
+    DomainEvent::FollowRequested {
+        follower: user_id.clone(),
+        target: domain::value_objects::FollowTarget::Handle("@other@md.example".into()),
+    }
+}
+
+fn social_repo(pool: &SqlitePool) -> sqlite::SqliteSocialRepository {
+    sqlite::SqliteSocialRepository::new(
+        pool.clone(),
+        domain::value_objects::InstanceIdentity::new("https://md.example"),
+    )
+}
+
+#[tokio::test]
+async fn a_local_follow_writes_both_rows_and_its_event_in_one_commit() {
+    use domain::ports::FollowCommand;
+    let (pool, user) = pool_with_user().await;
+
+    social_repo(&pool)
+        .apply(&follow_writes(user.id()), &[follow_requested(user.id())])
+        .await
+        .unwrap();
+
+    assert_eq!(count(&pool, "ap_followers").await, 1);
+    assert_eq!(count(&pool, "ap_following").await, 1);
+    assert_eq!(count(&pool, "event_queue").await, 1);
+}
+
+#[tokio::test]
+async fn a_failing_enqueue_rolls_back_both_follow_rows() {
+    use domain::ports::FollowCommand;
+    let (pool, user) = pool_with_user().await;
+    fail_event_inserts(&pool).await;
+
+    let result = social_repo(&pool)
+        .apply(&follow_writes(user.id()), &[follow_requested(user.id())])
+        .await;
+
+    assert!(result.is_err());
+    assert_eq!(count(&pool, "ap_followers").await, 0);
+    assert_eq!(count(&pool, "ap_following").await, 0);
+}
+
+#[tokio::test]
+async fn a_failing_follow_write_rolls_back_the_rows_already_applied() {
+    use domain::ports::{FollowCommand, FollowWrite};
+    let (pool, user) = pool_with_user().await;
+    let mut writes = follow_writes(user.id());
+    // An unknown local user violates the ap_following foreign key after the
+    // follower row was already written.
+    writes.push(FollowWrite::AddFollow {
+        follower_id: uuid::Uuid::new_v4(),
+        target_actor_url: "https://md.example/users/other".into(),
+        status: domain::value_objects::FollowStatus::Pending,
+    });
+
+    let result = social_repo(&pool)
+        .apply(&writes, &[follow_requested(user.id())])
+        .await;
+
+    assert!(result.is_err());
+    assert_eq!(count(&pool, "ap_followers").await, 0);
+    assert_eq!(count(&pool, "event_queue").await, 0);
+}