@krizaka/outbox 0.1.4 → 0.1.5

package/README.md

@@ -1,8 +1,8 @@
 # @krizaka/outbox
 
-The transactional outbox of every Krizaka product. An event is **written in the caller's transaction**, so it exists exactly when the work committed, and is **delivered after the commit, at least once**, by workers that lease a batch. No broker: PostgreSQL and `FOR UPDATE SKIP LOCKED` share the work between instances. It replaces Akinaza's `mail_outbox` (whose `flushOutbox` nobody called) and the analytics outboxes the products carried; it is the TypeScript twin of `krizaka-messaging`'s `krizaka_outbox` (the envelope is `id`, `type`, `occurredAt`, `payload`).
+The transactional outbox of every Krizaka product. An event is **written in the caller's transaction**, so it exists exactly when the work committed, and is **delivered after the commit, at least once**, by workers that lease a batch. No broker: PostgreSQL and `FOR UPDATE SKIP LOCKED` share the work between instances. It replaces Folioviv's `mail_outbox` (whose `flushOutbox` nobody called) and the analytics outboxes the products carried; it is the TypeScript twin of `krizaka-messaging`'s `krizaka_outbox` (the envelope is `id`, `type`, `occurredAt`, `payload`).
 
-> **The guarantee is *at least once*. Consumers must be idempotent on the message id.** A claim is exclusive while its lease is valid. A worker that delivers and then crashes before `complete` lets the lease expire, and the message is delivered **again**. The outbox never promises « exactly once ».
+> **The guarantee is _at least once_. Consumers must be idempotent on the message id.** A claim is exclusive while its lease is valid. A worker that delivers and then crashes before `complete` lets the lease expire, and the message is delivered **again**. The outbox never promises « exactly once ».
 
 ```ts
 import { emitMigration, transaction } from "@krizaka/db";
@@ -32,7 +32,7 @@ await transaction(connect, (tx) => consumeOnce(tx, "credits", message.id, clock.
 ```
 
 - **`append(tx, { topic, type, payload, id?, availableAt? })`** takes the transaction's `Query` first. A given `id` makes the append idempotent (the same fact twice is one message). `type` is a routing key, `evt.<module>.<fact>.v1` like Java's.
-- **`claim(query, { owner, topic? })`** is `UPDATE … WHERE id IN (SELECT … FOR UPDATE SKIP LOCKED)` and sets the lease. **`complete`** and **`fail(error)`** act only for the lease's owner (a worker that lost its lease cannot overwrite the new holder). `fail` backs off — `availableAt = now + backoffSeconds × 2^(attempts−1)`, capped — and after `maxAttempts` the message is **dead** (kept, with its last error; `retryDead` gives it another life). A message whose *last* allowed attempt's lease expired with no answer is dead too, not delivered a ninth time.
+- **`claim(query, { owner, topic? })`** is `UPDATE … WHERE id IN (SELECT … FOR UPDATE SKIP LOCKED)` and sets the lease. **`complete`** and **`fail(error)`** act only for the lease's owner (a worker that lost its lease cannot overwrite the new holder). `fail` backs off — `availableAt = now + backoffSeconds × 2^(attempts−1)`, capped — and after `maxAttempts` the message is **dead** (kept, with its last error; `retryDead` gives it another life). A message whose _last_ allowed attempt's lease expired with no answer is dead too, not delivered a ninth time.
 - **`runWorker`** loops `drainOnce` (claim a batch, deliver in order, record each outcome), sleeps through the `sleep` you pass when a round found nothing, and ends when the signal is aborted. Run `drainOnce` from a scheduler instead if you prefer cron to a loop.
 - **Settings** (`@krizaka/outbox/settings`, needs `@krizaka/settings` and `zod`): `outbox.batchSize` (50, 1–500), `outbox.leaseSeconds` (60, 10–3600: longer than your slowest delivery), `outbox.maxAttempts` (8, 1–50), `outbox.backoffSeconds` (30, 1–3600), `outbox.backoffMaxSeconds` (3600), `outbox.retentionDays` (7). `purge` removes delivered and dead messages older than the retention: call it from the product's job.
 - **Tables** (`outboxSchema`, Postgres schema `outbox`): `message` (id, topic, event_type, payload, created_at, available_at, attempts, leased_until, lease_owner, delivered_at, dead_at, last_error) and `processed` (consumer, message_id), which `consumeOnce` uses: the marker and the effect commit in the same transaction, so a crash leaves neither and a redelivery finds the marker.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@krizaka/outbox",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "The transactional outbox of every Krizaka product: an event written in the caller's transaction, delivered after the commit at least once by leased workers, with doubling retries, dead letters and an idempotent-consumer helper. No broker, no database client, no wall clock.",
   "keywords": [
     "krizaka",
@@ -55,12 +55,12 @@
     "typescript": "^5.9.3",
     "vitest": "^4.1.11",
     "zod": "^4.6.7",
-    "@krizaka/config": "^0.20.0"
+    "@krizaka/config": "^0.21.0"
   },
   "dependencies": {
-    "@krizaka/db": "^0.3.1",
-    "@krizaka/settings": "^0.6.0",
-    "@krizaka/time": "^0.2.0"
+    "@krizaka/settings": "^0.7.0",
+    "@krizaka/time": "^0.2.0",
+    "@krizaka/db": "^0.3.1"
   },
   "peerDependencies": {
     "vitest": ">=4",