@crowdsource.you/core 1.2.0

package/dist/outbox/postgres/store/reports.js

@@ -0,0 +1,234 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.postgresReportStore = postgresReportStore;
+const drizzle_orm_1 = require("drizzle-orm");
+const OPTIONAL_REPORT_FIELDS = [
+    'details',
+    'localStatusReason',
+    'crowdSourceReportId',
+    'crowdSourceCaseId',
+    'crowdSourceMerged',
+    'contentSnapshotHash',
+    'submittedAt',
+    'lastDeliveryError',
+    'decisionId',
+    'decisionRevision',
+    'decisionOutcome',
+    'decisionStatus',
+    'decidedAt',
+    'enforcedAction',
+    'enforcedAt',
+];
+/** Drop the package's own optional fields when the column is NULL. */
+function absentWhereNull(row) {
+    const normalised = { ...row };
+    for (const field of OPTIONAL_REPORT_FIELDS) {
+        if (normalised[field] === null)
+            delete normalised[field];
+    }
+    return normalised;
+}
+/**
+ * The row, as the port declares it.
+ *
+ * An unchecked declaration, not a conversion — the same escape the Mongoose store
+ * takes with `.lean<TReport>()`, and for the same reason: a driver cannot know an
+ * adopter's row type, and `ModerationReportTable` deliberately erases column types
+ * so that any adopter's table is accepted.
+ *
+ * What bounds it is that both halves are checked elsewhere. Column PRESENCE is a
+ * compile error, gated by `scripts/test-report-table-type.mjs`. Column VALUES are
+ * asserted by round-trips against a real database in
+ * `postgresReportStore.test.ts`. What remains unchecked is a column declared with
+ * the wrong TYPE, which the migration and the schema test cover instead.
+ */
+function asReport(row) {
+    return absentWhereNull(row);
+}
+function postgresReportStore(input) {
+    const { db } = input;
+    const reports = input.reportTable;
+    /**
+     * `count(*)::int`, and the cast is load-bearing.
+     *
+     * `count(*)` is `bigint`, which postgres.js hands back as a STRING to avoid
+     * losing precision — so `sql<number>` without the cast is an assertion that
+     * quietly lies, and the caller's `number` is `'3'`. The `::int` makes the
+     * database do the conversion.
+     */
+    const total = (0, drizzle_orm_1.sql) `count(*)::int`;
+    return {
+        async findDuplicate({ reporter, reportedId, reportedType }, tx) {
+            const rows = await tx
+                .select()
+                .from(reports)
+                .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(reports.reporter, reporter), (0, drizzle_orm_1.eq)(reports.reportedId, reportedId), (0, drizzle_orm_1.eq)(reports.reportedType, reportedType)))
+                .limit(1);
+            const [row] = rows;
+            return row === undefined ? null : asReport(row);
+        },
+        async insert(report, tx) {
+            const rows = await tx
+                .insert(reports)
+                .values({
+                /**
+                 * The application's own columns FIRST, so a field this package owns can
+                 * never be overwritten by one it knows nothing about. A report whose
+                 * `localStatus` came from `extra` would be queued with nothing to
+                 * deliver it, or received with a delivery event that tries anyway.
+                 *
+                 * A key that is not a column raises here — Postgres has no silent
+                 * discard. Mongoose strict mode drops an undeclared path with no throw
+                 * and no warning, which is why the Mongo half needs a standing test
+                 * that every DTO field resolves to a schema path.
+                 */
+                ...report.extra,
+                reportedType: report.reportedType,
+                reportedId: report.reportedId,
+                reporter: report.reporter,
+                categories: [...report.categories],
+                ...(report.details === undefined ? {} : { details: report.details }),
+                localStatus: report.localStatus,
+                ...(report.localStatusReason === undefined
+                    ? {}
+                    : { localStatusReason: report.localStatusReason }),
+            })
+                .returning();
+            const [row] = rows;
+            if (row === undefined) {
+                throw new Error('The moderation report insert returned no row.');
+            }
+            return asReport(row);
+        },
+        async findById(reportId) {
+            const rows = await db.select().from(reports).where((0, drizzle_orm_1.eq)(reports.id, reportId)).limit(1);
+            const [row] = rows;
+            return row === undefined ? null : asReport(row);
+        },
+        async findByCaseId(caseId) {
+            const rows = await db
+                .select({
+                id: reports.id,
+                reportedType: reports.reportedType,
+                reportedId: reports.reportedId,
+            })
+                .from(reports)
+                .where((0, drizzle_orm_1.eq)(reports.crowdSourceCaseId, caseId));
+            return rows.map((row) => ({
+                id: String(row.id),
+                reportedType: String(row.reportedType),
+                reportedId: String(row.reportedId),
+            }));
+        },
+        async applyDecision(reportId, update, maxRevision) {
+            const rows = await db
+                .update(reports)
+                .set(decisionSet(update))
+                .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(reports.id, reportId), 
+            /**
+             * The revision guard, in the WHERE clause. It is the DATABASE that
+             * refuses a stale write rather than a read-then-write in this
+             * process: deliveries overlap — CrowdSource retries for 24 hours, and
+             * a correction can arrive while the decision it supersedes is still
+             * being applied — and an older revision landing last would otherwise
+             * overwrite the current answer.
+             *
+             * `IS NULL` is the port of Mongo's `$exists: false`, because a report
+             * with no decision yet stores NULL rather than omitting the column.
+             * `<=` rather than `<` is deliberate: a redelivery of the SAME
+             * revision rewrites, which is harmless and keeps a partially-applied
+             * decision converging.
+             */
+            (0, drizzle_orm_1.or)((0, drizzle_orm_1.isNull)(reports.decisionRevision), (0, drizzle_orm_1.lte)(reports.decisionRevision, maxRevision))))
+                .returning({ id: reports.id });
+            return rows.length === 1;
+        },
+        async markSubmitted(reportId, submission) {
+            await db
+                .update(reports)
+                .set({
+                localStatus: 'submitted',
+                crowdSourceReportId: submission.crowdSourceReportId,
+                crowdSourceCaseId: submission.crowdSourceCaseId,
+                crowdSourceMerged: submission.crowdSourceMerged,
+                contentSnapshotHash: submission.contentSnapshotHash,
+                submittedAt: submission.submittedAt,
+                // A report that has landed carries no failure and no reason it was
+                // going nowhere. `null` CLEARS in drizzle; `undefined` would leave the
+                // stale value in place, which is the port of Mongo's `$unset`.
+                lastDeliveryError: null,
+                localStatusReason: null,
+            })
+                .where((0, drizzle_orm_1.eq)(reports.id, reportId));
+        },
+        async markDeliveryFailed(reportId, lastDeliveryError) {
+            await db
+                .update(reports)
+                .set({ localStatus: 'delivery_failed', lastDeliveryError })
+                .where((0, drizzle_orm_1.eq)(reports.id, reportId));
+        },
+        async close(reportId, localStatusReason) {
+            await db
+                .update(reports)
+                .set({ localStatus: 'closed', localStatusReason })
+                .where((0, drizzle_orm_1.eq)(reports.id, reportId));
+        },
+        async findPendingOldestFirst(limit) {
+            /**
+             * `queued` and `delivery_failed` only. `received` is excluded deliberately
+             * and the omission is the safety property, not an oversight: those reports
+             * have no subject provider, so an event re-derived for one would fail on
+             * its first attempt and dead-letter.
+             *
+             * Oldest first, and ASC needs no explicit NULLS placement: both drizzle and
+             * Postgres default ascending to NULLS LAST, so this matches the
+             * `(local_status, created_at)` index. A DESCENDING order would need the
+             * placement spelled out — see the enforcement store's reversal lookup for
+             * what that costs when it is not.
+             */
+            const rows = await db
+                .select({ id: reports.id })
+                .from(reports)
+                .where((0, drizzle_orm_1.inArray)(reports.localStatus, ['queued', 'delivery_failed']))
+                .orderBy((0, drizzle_orm_1.asc)(reports.createdAt))
+                .limit(limit);
+            return rows.map((row) => String(row.id));
+        },
+        async countAwaitingDecision(submittedBefore) {
+            const rows = await db
+                .select({ total })
+                .from(reports)
+                .where((0, drizzle_orm_1.and)((0, drizzle_orm_1.eq)(reports.localStatus, 'submitted'), (0, drizzle_orm_1.lt)(reports.submittedAt, submittedBefore)));
+            return rows[0]?.total ?? 0;
+        },
+        async countLocalOnly() {
+            const rows = await db
+                .select({ total })
+                .from(reports)
+                .where((0, drizzle_orm_1.eq)(reports.localStatus, 'received'));
+            return rows[0]?.total ?? 0;
+        },
+    };
+}
+/**
+ * The `$set` a decision writes, as one object.
+ *
+ * `extra` FIRST, for the same reason it is first on insert: it is the adopter's
+ * legacy verdict field, and this package's own fields must win.
+ */
+function decisionSet(update) {
+    return {
+        ...update.extra,
+        localStatus: update.localStatus,
+        decisionId: update.decisionId,
+        decisionRevision: update.decisionRevision,
+        decisionOutcome: update.decisionOutcome,
+        decisionStatus: update.decisionStatus,
+        decidedAt: update.decidedAt,
+        ...(update.enforcedAction === undefined
+            ? {}
+            : { enforcedAction: update.enforcedAction }),
+        ...(update.enforcedAt === undefined ? {} : { enforcedAt: update.enforcedAt }),
+    };
+}
+//# sourceMappingURL=reports.js.map

package/dist/outbox/postgres/store/reports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reports.js","sourceRoot":"","sources":["../../../../src/outbox/postgres/store/reports.ts"],"names":[],"mappings":";;AA2HA,kDA2MC;AAtUD,6CAA8E;AAgE9E,MAAM,sBAAsB,GAAG;IAC7B,SAAS;IACT,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,mBAAmB;IACnB,qBAAqB;IACrB,aAAa;IACb,mBAAmB;IACnB,YAAY;IACZ,kBAAkB;IAClB,iBAAiB;IACjB,gBAAgB;IAChB,WAAW;IACX,gBAAgB;IAChB,YAAY;CACqC,CAAC;AAcpD,sEAAsE;AACtE,SAAS,eAAe,CAAC,GAA4B;IACnD,MAAM,UAAU,GAA4B,EAAE,GAAG,GAAG,EAAE,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,CAAC;QAC3C,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,QAAQ,CACf,GAA4B;IAE5B,OAAO,eAAe,CAAC,GAAG,CAAY,CAAC;AACzC,CAAC;AAED,SAAgB,mBAAmB,CAAyC,KAG3E;IACC,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IACrB,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC;IAElC;;;;;;;OAOG;IACH,MAAM,KAAK,GAAG,IAAA,iBAAG,EAAQ,eAAe,CAAC;IAEzC,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,EAAE;YAC5D,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,EAAE;iBACR,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC9B,IAAA,gBAAE,EAAC,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,EAClC,IAAA,gBAAE,EAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CACvC,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAC;YACZ,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACnB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAU,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE;YACrB,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,MAAM,CAAC;gBACN;;;;;;;;;;mBAUG;gBACH,GAAG,MAAM,CAAC,KAAK;gBACf,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;gBAClC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpE,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC;aACrD,CAAC;iBACD,SAAS,EAAE,CAAC;YAEf,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACnB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,QAAQ,CAAU,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,QAAQ;YACrB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAA,gBAAE,EAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACtF,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACnB,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAU,GAAG,CAAC,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAM;YACvB,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC;gBACN,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC;iBACD,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,IAAA,gBAAE,EAAC,OAAO,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC;YAEhD,OAAO,IAAI,CAAC,GAAG,CACb,CAAC,GAAG,EAAuB,EAAE,CAAC,CAAC;gBAC7B,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;gBACtC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;aACnC,CAAC,CACH,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW;YAC/C,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;iBACxB,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC;YACxB;;;;;;;;;;;;;eAaG;YACH,IAAA,gBAAE,EACA,IAAA,oBAAM,EAAC,OAAO,CAAC,gBAAgB,CAAC,EAChC,IAAA,iBAAG,EAAC,OAAO,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAC3C,CACF,CACF;iBACA,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAEjC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QAC3B,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU;YACtC,MAAM,EAAE;iBACL,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC;gBACH,WAAW,EAAE,WAAW;gBACxB,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;gBACnD,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;gBACnD,WAAW,EAAE,UAAU,CAAC,WAAW;gBACnC,mEAAmE;gBACnE,uEAAuE;gBACvE,+DAA+D;gBAC/D,iBAAiB,EAAE,IAAI;gBACvB,iBAAiB,EAAE,IAAI;aACxB,CAAC;iBACD,KAAK,CAAC,IAAA,gBAAE,EAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,QAAQ,EAAE,iBAAiB;YAClD,MAAM,EAAE;iBACL,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAC;iBAC1D,KAAK,CAAC,IAAA,gBAAE,EAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,iBAAiB;YACrC,MAAM,EAAE;iBACL,MAAM,CAAC,OAAO,CAAC;iBACf,GAAG,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;iBACjD,KAAK,CAAC,IAAA,gBAAE,EAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QACrC,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,KAAK;YAChC;;;;;;;;;;;eAWG;YACH,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;iBAC1B,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,IAAA,qBAAO,EAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;iBAClE,OAAO,CAAC,IAAA,iBAAG,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;iBAC/B,KAAK,CAAC,KAAK,CAAC,CAAC;YAEhB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,eAAe;YACzC,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;iBACjB,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CACJ,IAAA,iBAAG,EACD,IAAA,gBAAE,EAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,EACpC,IAAA,gBAAE,EAAC,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CACzC,CACF,CAAC;YACJ,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,MAAM,IAAI,GAAG,MAAM,EAAE;iBAClB,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;iBACjB,IAAI,CAAC,OAAO,CAAC;iBACb,KAAK,CAAC,IAAA,gBAAE,EAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9C,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,MAAsC;IACzD,OAAO;QACL,GAAG,MAAM,CAAC,KAAK;QACf,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS;YACrC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9C,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;KAC9E,CAAC;AACJ,CAAC"}

package/dist/outbox/postgres/store/transaction.d.ts

@@ -0,0 +1,49 @@
+import type { TablesRelationalConfig } from 'drizzle-orm';
+import type { PgDatabase, PgQueryResultHKT } from 'drizzle-orm/pg-core';
+import type { ModerationTransactionRunner } from '../../store/types.js';
+/**
+ * The drizzle handle this package's Postgres stores talk to.
+ *
+ * Deliberately the BASE `PgDatabase` rather than a `PostgresJsDatabase`: the
+ * stores must accept both the pool handle an adopter builds and the `tx` handed
+ * to a `db.transaction` callback, and those are different types. Written this
+ * way, one signature serves both and no store needs to know which it holds.
+ *
+ * ## The generic that has to be `Record<string, unknown>`, and the error you get
+ *
+ * `TablesRelationalConfig` and `Record<string, unknown>` are the only spellings
+ * that accept both. The narrow one a reader reaches for first —
+ * `Record<string, never>` for the schema — accepts NEITHER (`TS2345`, the schema
+ * generic is invariant).
+ *
+ * The consequence lands on the ADOPTER, so it is worth stating: a handle built
+ * with NO schema (`drizzle(client)`, or `PostgresJsDatabase<Record<string, never>>`)
+ * is not assignable either, and the compiler explains it as
+ * `Seems like the schema generic is missing - did you forget to add it to your DB
+ * type?` — an error about `query`, on a store call that never touches the
+ * relational query builder. Pass your schema to `drizzle()` (or use
+ * `createDatabase({ databaseUrl, schema })` from `@oxy.so/db`) and it resolves.
+ * Both directions are verified in this package's own type-check.
+ */
+export type ModerationPgHandle = PgDatabase<PgQueryResultHKT, Record<string, unknown>, TablesRelationalConfig>;
+/**
+ * The transaction runner, in Postgres.
+ *
+ * READ COMMITTED, explicitly, and not `repeatable read`. Neither multi-statement
+ * transaction this package runs — a report insert plus an outbox upsert, an event
+ * update plus an outbox upsert — reads-then-decides in a way snapshot isolation
+ * protects, so `repeatable read` would import `40001` serialization failures and
+ * a retry loop for no benefit.
+ *
+ * What it deliberately does NOT promise: intake's duplicate-check-then-insert is
+ * not serialized at READ COMMITTED, and the "one report per reporter per object"
+ * unique index is explicitly the application's responsibility.
+ *
+ * The failure this runner exists to make impossible is subtler than Mongo's. A
+ * store call given `db` instead of `tx` inside the callback runs on a DIFFERENT
+ * pooled connection and commits on its own — no error, no warning, and the
+ * atomicity the outbox exists for is simply gone. `postgresOutboxStore.enqueue`
+ * refuses a handle that is not a transaction for exactly that reason.
+ */
+export declare function postgresTransactionRunner(db: ModerationPgHandle): ModerationTransactionRunner<ModerationPgHandle>;
+//# sourceMappingURL=transaction.d.ts.map

package/dist/outbox/postgres/store/transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../../../src/outbox/postgres/store/transaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,kBAAkB,GAAG,UAAU,CACzC,gBAAgB,EAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvB,sBAAsB,CACvB,CAAC;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,kBAAkB,GACrB,2BAA2B,CAAC,kBAAkB,CAAC,CAQjD"}

package/dist/outbox/postgres/store/transaction.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.postgresTransactionRunner = postgresTransactionRunner;
+/**
+ * The transaction runner, in Postgres.
+ *
+ * READ COMMITTED, explicitly, and not `repeatable read`. Neither multi-statement
+ * transaction this package runs — a report insert plus an outbox upsert, an event
+ * update plus an outbox upsert — reads-then-decides in a way snapshot isolation
+ * protects, so `repeatable read` would import `40001` serialization failures and
+ * a retry loop for no benefit.
+ *
+ * What it deliberately does NOT promise: intake's duplicate-check-then-insert is
+ * not serialized at READ COMMITTED, and the "one report per reporter per object"
+ * unique index is explicitly the application's responsibility.
+ *
+ * The failure this runner exists to make impossible is subtler than Mongo's. A
+ * store call given `db` instead of `tx` inside the callback runs on a DIFFERENT
+ * pooled connection and commits on its own — no error, no warning, and the
+ * atomicity the outbox exists for is simply gone. `postgresOutboxStore.enqueue`
+ * refuses a handle that is not a transaction for exactly that reason.
+ */
+function postgresTransactionRunner(db) {
+    return {
+        async run(operation) {
+            return await db.transaction(async (tx) => await operation(tx), {
+                isolationLevel: 'read committed',
+            });
+        },
+    };
+}
+//# sourceMappingURL=transaction.js.map

package/dist/outbox/postgres/store/transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../../../src/outbox/postgres/store/transaction.ts"],"names":[],"mappings":";;AAqDA,8DAUC;AA7BD;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,yBAAyB,CACvC,EAAsB;IAEtB,OAAO;QACL,KAAK,CAAC,GAAG,CAAI,SAAiD;YAC5D,OAAO,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,SAAS,CAAC,EAAE,CAAC,EAAE;gBAC7D,cAAc,EAAE,gBAAgB;aACjC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}