@voyant-travel/db 0.108.0

package/dist/links.js

@@ -0,0 +1,281 @@
+/**
+ * Runtime link service backed by Drizzle — executes raw SQL against the
+ * dynamically-named pivot tables materialised from {@link LinkDefinition}s.
+ */
+import { generateLinkTableSql, resolveLinkFromSpec } from "@voyant-travel/core";
+import { sql } from "drizzle-orm";
+import { newIdFromPrefix } from "./lib/typeid.js";
+/**
+ * TypeID prefix used for link row IDs.
+ * Short, fixed, and outside the module-owned prefix list in lib/typeid.ts.
+ */
+const LINK_ID_PREFIX = "lnk";
+function toDate(v) {
+    return v instanceof Date ? v : new Date(v);
+}
+function toNullableDate(v) {
+    if (v === null)
+        return null;
+    return v instanceof Date ? v : new Date(v);
+}
+function unique(ids) {
+    return Array.from(new Set(ids));
+}
+/**
+ * Collapse the singular + plural ID filters for one side into a single
+ * constraint:
+ *
+ * - `undefined` — the side is unconstrained.
+ * - `null` — the filter can never match (empty array, or a singular ID that
+ *   isn't in the plural set); callers short-circuit to `[]` without querying.
+ * - `string[]` — match any of these (deduped) IDs.
+ *
+ * Falsy singular IDs are ignored, matching the historical truthy check.
+ */
+function normalizeIdFilter(single, many) {
+    if (single && many) {
+        return many.includes(single) ? [single] : null;
+    }
+    if (single)
+        return [single];
+    if (many) {
+        const ids = unique(many);
+        return ids.length === 0 ? null : ids;
+    }
+    return undefined;
+}
+/**
+ * Resolve a (possibly batched) list filter against a read-only link.
+ *
+ * Read-only resolvers only understand singular `leftId`/`rightId` filters,
+ * so a batched filter fans out one resolver call per ID on one side and
+ * applies any remaining ID-set constraint locally.
+ */
+async function listReadOnly(ro, leftIds, rightIds) {
+    const singleLeft = leftIds && leftIds.length === 1 ? leftIds[0] : undefined;
+    const singleRight = rightIds && rightIds.length === 1 ? rightIds[0] : undefined;
+    // At most one ID per side — the resolver's native filter shape.
+    if ((!leftIds || singleLeft !== undefined) && (!rightIds || singleRight !== undefined)) {
+        const filter = {};
+        if (singleLeft !== undefined)
+            filter.leftId = singleLeft;
+        if (singleRight !== undefined)
+            filter.rightId = singleRight;
+        return ro.list(filter);
+    }
+    const fanLeft = leftIds !== undefined && singleLeft === undefined;
+    const fanIds = (fanLeft ? leftIds : rightIds);
+    const batches = await Promise.all(fanIds.map((id) => {
+        const filter = fanLeft
+            ? { leftId: id }
+            : { rightId: id };
+        if (fanLeft && singleRight !== undefined)
+            filter.rightId = singleRight;
+        if (!fanLeft && singleLeft !== undefined)
+            filter.leftId = singleLeft;
+        return ro.list(filter);
+    }));
+    let rows = batches.flat();
+    // Both sides batched — the right-side set couldn't be pushed into the
+    // resolver calls, so apply it here.
+    if (fanLeft && rightIds && singleRight === undefined) {
+        const allowed = new Set(rightIds);
+        rows = rows.filter((row) => allowed.has(row.rightId));
+    }
+    return rows;
+}
+/**
+ * Create a runtime {@link LinkService} for the given set of link definitions.
+ *
+ * The service supports both a positional API (`create(linkKey, leftId, rightId)`)
+ * and a Medusa-style spec API (`create({ moduleA: { a_id }, moduleB: { b_id } })`)
+ * resolved against the provided definitions.
+ */
+export function createLinkService(getDb, definitions) {
+    const byKey = new Map();
+    for (const def of definitions) {
+        if (byKey.has(def.tableName)) {
+            throw new Error(`createLinkService: duplicate link definition for table "${def.tableName}"`);
+        }
+        byKey.set(def.tableName, def);
+    }
+    function lookupByKey(linkKey) {
+        const def = byKey.get(linkKey);
+        if (!def) {
+            throw new Error(`createLinkService: unknown link key "${linkKey}"`);
+        }
+        return def;
+    }
+    function resolveArgs(keyOrSpec, leftId, rightId) {
+        if (typeof keyOrSpec === "string") {
+            if (leftId === undefined || rightId === undefined) {
+                throw new Error("createLinkService: positional API requires linkKey, leftId, and rightId");
+            }
+            return { definition: lookupByKey(keyOrSpec), leftId, rightId };
+        }
+        return resolveLinkFromSpec(keyOrSpec, definitions);
+    }
+    function rowFromRaw(def, raw) {
+        const leftId = raw[def.leftColumn];
+        const rightId = raw[def.rightColumn];
+        if (typeof leftId !== "string" || typeof rightId !== "string") {
+            throw new Error(`createLinkService: malformed row returned from "${def.tableName}"`);
+        }
+        return {
+            id: raw.id,
+            leftId,
+            rightId,
+            createdAt: toDate(raw.created_at),
+            updatedAt: toDate(raw.updated_at),
+            deletedAt: toNullableDate(raw.deleted_at),
+        };
+    }
+    async function executeRows(query) {
+        // biome-ignore lint/suspicious/noExplicitAny: drizzle's execute() return type varies by adapter -- owner: db; existing suppression is intentional pending typed cleanup.
+        const result = await getDb().execute(query);
+        if (Array.isArray(result))
+            return result;
+        if (result && Array.isArray(result.rows))
+            return result.rows;
+        return [];
+    }
+    async function createImpl(spec) {
+        const { definition: def, leftId, rightId } = spec;
+        const table = sql.identifier(def.tableName);
+        const leftCol = sql.identifier(def.leftColumn);
+        const rightCol = sql.identifier(def.rightColumn);
+        const id = newIdFromPrefix(LINK_ID_PREFIX);
+        // Resurrect any soft-deleted pair first — otherwise the partial unique
+        // index would prevent the INSERT, and we'd fail the "idempotent" contract.
+        // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        const restoreQuery = sql `UPDATE ${table}
+      SET "deleted_at" = NULL, "updated_at" = now()
+      WHERE ${leftCol} = ${leftId} AND ${rightCol} = ${rightId} AND "deleted_at" IS NOT NULL
+      RETURNING *`;
+        const restored = await executeRows(restoreQuery);
+        if (restored.length > 0 && restored[0]) {
+            return rowFromRaw(def, restored[0]);
+        }
+        // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        const insertQuery = sql `INSERT INTO ${table}
+      ("id", ${leftCol}, ${rightCol}, "created_at", "updated_at", "deleted_at")
+      VALUES (${id}, ${leftId}, ${rightId}, now(), now(), NULL)
+      ON CONFLICT DO NOTHING
+      RETURNING *`;
+        const inserted = await executeRows(insertQuery);
+        if (inserted.length > 0 && inserted[0]) {
+            return rowFromRaw(def, inserted[0]);
+        }
+        // Conflict — a row (or matching pair) already exists. Fetch the active one.
+        // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        const fetchQuery = sql `SELECT * FROM ${table}
+      WHERE ${leftCol} = ${leftId} AND ${rightCol} = ${rightId} AND "deleted_at" IS NULL
+      LIMIT 1`;
+        const existing = await executeRows(fetchQuery);
+        if (existing.length > 0 && existing[0]) {
+            return rowFromRaw(def, existing[0]);
+        }
+        throw new Error(`createLinkService: could not create or find link row in "${def.tableName}"`);
+    }
+    async function dismissImpl(spec) {
+        const { definition: def, leftId, rightId } = spec;
+        if (def.readOnly) {
+            throw new Error(`createLinkService: read-only link "${def.tableName}" cannot be dismissed`);
+        }
+        const table = sql.identifier(def.tableName);
+        const leftCol = sql.identifier(def.leftColumn);
+        const rightCol = sql.identifier(def.rightColumn);
+        // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        const query = sql `UPDATE ${table}
+      SET "deleted_at" = now(), "updated_at" = now()
+      WHERE ${leftCol} = ${leftId} AND ${rightCol} = ${rightId} AND "deleted_at" IS NULL`;
+        await executeRows(query);
+    }
+    async function deleteImpl(spec) {
+        const { definition: def, leftId, rightId } = spec;
+        if (def.readOnly) {
+            throw new Error(`createLinkService: read-only link "${def.tableName}" cannot be deleted`);
+        }
+        const table = sql.identifier(def.tableName);
+        const leftCol = sql.identifier(def.leftColumn);
+        const rightCol = sql.identifier(def.rightColumn);
+        // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        const query = sql `DELETE FROM ${table}
+      WHERE ${leftCol} = ${leftId} AND ${rightCol} = ${rightId}`;
+        await executeRows(query);
+    }
+    async function list(linkKey, filter = {}) {
+        const def = lookupByKey(linkKey);
+        const leftIds = normalizeIdFilter(filter.leftId, filter.leftIds);
+        const rightIds = normalizeIdFilter(filter.rightId, filter.rightIds);
+        // A provably-empty filter (e.g. `leftIds: []`) can never match — skip the
+        // query (and on Workers, the subrequest) entirely.
+        if (leftIds === null || rightIds === null)
+            return [];
+        if (def.readOnly) {
+            return listReadOnly(def.readOnly, leftIds, rightIds);
+        }
+        const table = sql.identifier(def.tableName);
+        const leftCol = sql.identifier(def.leftColumn);
+        const rightCol = sql.identifier(def.rightColumn);
+        // NOTE: a plain array embedded in a drizzle sql template is flattened
+        // into per-element chunks; sql.param() binds it as ONE array parameter,
+        // so a batched filter stays a single `col = ANY($1)` query.
+        const idClause = (col, ids) => 
+        // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        ids.length === 1 ? sql `${col} = ${ids[0]}` : sql `${col} = ANY(${sql.param(ids)})`;
+        const whereClauses = [sql `"deleted_at" IS NULL`];
+        if (leftIds)
+            whereClauses.push(idClause(leftCol, leftIds));
+        if (rightIds)
+            whereClauses.push(idClause(rightCol, rightIds));
+        // Manually join clauses with AND.
+        let whereSql = whereClauses[0];
+        for (let i = 1; i < whereClauses.length; i++) {
+            // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+            whereSql = sql `${whereSql} AND ${whereClauses[i]}`;
+        }
+        // agent-quality: raw-sql reviewed -- owner: db; dynamic SQL interpolation uses Drizzle parameter binding or vetted SQL identifiers.
+        const query = sql `SELECT * FROM ${table}
+      WHERE ${whereSql}
+      ORDER BY "created_at" ASC`;
+        const rows = await executeRows(query);
+        return rows.map((r) => rowFromRaw(def, r));
+    }
+    return {
+        async create(keyOrSpec, leftId, rightId) {
+            const spec = resolveArgs(keyOrSpec, leftId, rightId);
+            if (spec.definition.readOnly) {
+                throw new Error(`createLinkService: read-only link "${spec.definition.tableName}" cannot be created`);
+            }
+            return createImpl(spec);
+        },
+        async dismiss(keyOrSpec, leftId, rightId) {
+            return dismissImpl(resolveArgs(keyOrSpec, leftId, rightId));
+        },
+        async delete(keyOrSpec, leftId, rightId) {
+            return deleteImpl(resolveArgs(keyOrSpec, leftId, rightId));
+        },
+        list,
+    };
+}
+/**
+ * Materialise every link definition's pivot table (CREATE TABLE + indexes).
+ * Intended for use by a `db:sync-links` CLI command in templates.
+ *
+ * Runs each DDL statement individually against the provided Drizzle client.
+ */
+export async function syncLinks(db, definitions) {
+    for (const def of definitions) {
+        if (def.readOnly)
+            continue;
+        const { createTable, indexes } = generateLinkTableSql(def);
+        // biome-ignore lint/suspicious/noExplicitAny: drizzle adapter execute typing varies -- owner: db; existing suppression is intentional pending typed cleanup.
+        await db.execute(sql.raw(createTable));
+        for (const idx of indexes) {
+            // biome-ignore lint/suspicious/noExplicitAny: drizzle adapter execute typing varies -- owner: db; existing suppression is intentional pending typed cleanup.
+            await db.execute(sql.raw(idx));
+        }
+    }
+}
+//# sourceMappingURL=links.js.map

package/dist/links.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"links.js","sourceRoot":"","sources":["../src/links.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AAC/E,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AAGjD;;;GAGG;AACH,MAAM,cAAc,GAAG,KAAK,CAAA;AAU5B,SAAS,MAAM,CAAC,CAAgB;IAC9B,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,SAAS,cAAc,CAAC,CAAuB;IAC7C,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,GAAa;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AACjC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CACxB,MAA0B,EAC1B,IAA0B;IAE1B,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;IAChD,CAAC;IACD,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;QACxB,OAAO,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAA;IACtC,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAID;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,EAAoB,EACpB,OAA6B,EAC7B,QAA8B;IAE9B,MAAM,UAAU,GAAG,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3E,MAAM,WAAW,GAAG,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAE/E,gEAAgE;IAChE,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,WAAW,KAAK,SAAS,CAAC,EAAE,CAAC;QACvF,MAAM,MAAM,GAA0C,EAAE,CAAA;QACxD,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,GAAG,UAAU,CAAA;QACxD,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,WAAW,CAAA;QAC3D,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,CAAA;IACjE,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAa,CAAA;IACzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAChB,MAAM,MAAM,GAA0C,OAAO;YAC3D,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;YAChB,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QACnB,IAAI,OAAO,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,WAAW,CAAA;QACtE,IAAI,CAAC,OAAO,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,GAAG,UAAU,CAAA;QACpE,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACxB,CAAC,CAAC,CACH,CAAA;IACD,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAA;IACzB,sEAAsE;IACtE,oCAAoC;IACpC,IAAI,OAAO,IAAI,QAAQ,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;QACjC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;IACvD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA0B,EAC1B,WAA6B;IAE7B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAA;IAC/C,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,SAAS,GAAG,CAAC,CAAA;QAC9F,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC/B,CAAC;IAED,SAAS,WAAW,CAAC,OAAe;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CAAC,wCAAwC,OAAO,GAAG,CAAC,CAAA;QACrE,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,SAAS,WAAW,CAClB,SAA4B,EAC5B,MAAe,EACf,OAAgB;QAEhB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAC5F,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAChE,CAAC;QACD,OAAO,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IACpD,CAAC;IAED,SAAS,UAAU,CAAC,GAAmB,EAAE,GAAe;QACtD,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAClC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,mDAAmD,GAAG,CAAC,SAAS,GAAG,CAAC,CAAA;QACtF,CAAC;QACD,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,MAAM;YACN,OAAO;YACP,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YACjC,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;SAC1C,CAAA;IACH,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,KAA6B;QACtD,yKAAyK;QACzK,MAAM,MAAM,GAAQ,MAAO,KAAK,EAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACzD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,MAAsB,CAAA;QACxD,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,IAAoB,CAAA;QAC5E,OAAO,EAAE,CAAA;IACX,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,IAAsB;QAC9C,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAChD,MAAM,EAAE,GAAG,eAAe,CAAC,cAAc,CAAC,CAAA;QAE1C,uEAAuE;QACvE,2EAA2E;QAC3E,oIAAoI;QACpI,MAAM,YAAY,GAAG,GAAG,CAAA,UAAU,KAAK;;cAE7B,OAAO,MAAM,MAAM,QAAQ,QAAQ,MAAM,OAAO;kBAC5C,CAAA;QACd,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,CAAA;QAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACrC,CAAC;QAED,oIAAoI;QACpI,MAAM,WAAW,GAAG,GAAG,CAAA,eAAe,KAAK;eAChC,OAAO,KAAK,QAAQ;gBACnB,EAAE,KAAK,MAAM,KAAK,OAAO;;kBAEvB,CAAA;QACd,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAA;QAC/C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACrC,CAAC;QAED,4EAA4E;QAC5E,oIAAoI;QACpI,MAAM,UAAU,GAAG,GAAG,CAAA,iBAAiB,KAAK;cAClC,OAAO,MAAM,MAAM,QAAQ,QAAQ,MAAM,OAAO;cAChD,CAAA;QACV,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAA;QAC9C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;QACrC,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,4DAA4D,GAAG,CAAC,SAAS,GAAG,CAAC,CAAA;IAC/F,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,IAAsB;QAC/C,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QACjD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,CAAC,SAAS,uBAAuB,CAAC,CAAA;QAC7F,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAChD,oIAAoI;QACpI,MAAM,KAAK,GAAG,GAAG,CAAA,UAAU,KAAK;;cAEtB,OAAO,MAAM,MAAM,QAAQ,QAAQ,MAAM,OAAO,2BAA2B,CAAA;QACrF,MAAM,WAAW,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,UAAU,UAAU,CAAC,IAAsB;QAC9C,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;QACjD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,CAAC,SAAS,qBAAqB,CAAC,CAAA;QAC3F,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAChD,oIAAoI;QACpI,MAAM,KAAK,GAAG,GAAG,CAAA,eAAe,KAAK;cAC3B,OAAO,MAAM,MAAM,QAAQ,QAAQ,MAAM,OAAO,EAAE,CAAA;QAC5D,MAAM,WAAW,CAAC,KAAK,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK,UAAU,IAAI,CAAC,OAAe,EAAE,SAAyB,EAAE;QAC9D,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;QAEhC,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;QAChE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnE,0EAA0E;QAC1E,mDAAmD;QACnD,IAAI,OAAO,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,EAAE,CAAA;QAEpD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;QACtD,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAEhD,sEAAsE;QACtE,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,CAAC,GAAsC,EAAE,GAAa,EAAE,EAAE;QACzE,oIAAoI;QACpI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA,GAAG,GAAG,UAAU,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAA;QAEnF,MAAM,YAAY,GAAG,CAAC,GAAG,CAAA,sBAAsB,CAAC,CAAA;QAChD,IAAI,OAAO;YAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;QAC1D,IAAI,QAAQ;YAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QAE7D,kCAAkC;QAClC,IAAI,QAAQ,GAAG,YAAY,CAAC,CAAC,CAA2B,CAAA;QACxD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,oIAAoI;YACpI,QAAQ,GAAG,GAAG,CAAA,GAAG,QAAQ,QAAQ,YAAY,CAAC,CAAC,CAAC,EAAE,CAAA;QACpD,CAAC;QAED,oIAAoI;QACpI,MAAM,KAAK,GAAG,GAAG,CAAA,iBAAiB,KAAK;cAC7B,QAAQ;gCACU,CAAA;QAC5B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,CAAA;QACrC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,SAA4B,EAAE,MAAe,EAAE,OAAgB;YAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;YACpD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,UAAU,CAAC,SAAS,qBAAqB,CACrF,CAAA;YACH,CAAC;YACD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAA4B,EAAE,MAAe,EAAE,OAAgB;YAC3E,OAAO,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QAC7D,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAA4B,EAAE,MAAe,EAAE,OAAgB;YAC1E,OAAO,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5D,CAAC;QACD,IAAI;KACU,CAAA;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,EAAiB,EAAE,WAA6B;IAC9E,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,QAAQ;YAAE,SAAQ;QAC1B,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAA;QAC1D,6JAA6J;QAC7J,MAAO,EAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAA;QAC/C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,6JAA6J;YAC7J,MAAO,EAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/operators.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Re-export drizzle-orm operators to ensure type compatibility
+ * when used with tables from this package.
+ *
+ * Always import operators from this file (or @voyant-travel/db/operators)
+ * when using them with @voyant-travel/db tables to avoid type conflicts.
+ */
+export { and, arrayContained, arrayContains, arrayOverlaps, asc, avg, avgDistinct, between, count, countDistinct, desc, eq, exists, gt, gte, ilike, inArray, isNotNull, isNull, like, lt, lte, max, min, ne, not, notBetween, notExists, notIlike, notInArray, notLike, or, sql, sum, sumDistinct, } from "drizzle-orm";
+//# sourceMappingURL=operators.d.ts.map

package/dist/operators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operators.d.ts","sourceRoot":"","sources":["../src/operators.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,GAAG,EACH,cAAc,EACd,aAAa,EACb,aAAa,EACb,GAAG,EACH,GAAG,EACH,WAAW,EACX,OAAO,EACP,KAAK,EACL,aAAa,EACb,IAAI,EACJ,EAAE,EACF,MAAM,EACN,EAAE,EACF,GAAG,EACH,KAAK,EACL,OAAO,EACP,SAAS,EACT,MAAM,EACN,IAAI,EACJ,EAAE,EACF,GAAG,EACH,GAAG,EACH,GAAG,EACH,EAAE,EACF,GAAG,EACH,UAAU,EACV,SAAS,EACT,QAAQ,EACR,UAAU,EACV,OAAO,EACP,EAAE,EACF,GAAG,EACH,GAAG,EACH,WAAW,GACZ,MAAM,aAAa,CAAA"}

package/dist/operators.js

@@ -0,0 +1,9 @@
+/**
+ * Re-export drizzle-orm operators to ensure type compatibility
+ * when used with tables from this package.
+ *
+ * Always import operators from this file (or @voyant-travel/db/operators)
+ * when using them with @voyant-travel/db tables to avoid type conflicts.
+ */
+export { and, arrayContained, arrayContains, arrayOverlaps, asc, avg, avgDistinct, between, count, countDistinct, desc, eq, exists, gt, gte, ilike, inArray, isNotNull, isNull, like, lt, lte, max, min, ne, not, notBetween, notExists, notIlike, notInArray, notLike, or, sql, sum, sumDistinct, } from "drizzle-orm";
+//# sourceMappingURL=operators.js.map

package/dist/operators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operators.js","sourceRoot":"","sources":["../src/operators.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,GAAG,EACH,cAAc,EACd,aAAa,EACb,aAAa,EACb,GAAG,EACH,GAAG,EACH,WAAW,EACX,OAAO,EACP,KAAK,EACL,aAAa,EACb,IAAI,EACJ,EAAE,EACF,MAAM,EACN,EAAE,EACF,GAAG,EACH,KAAK,EACL,OAAO,EACP,SAAS,EACT,MAAM,EACN,IAAI,EACJ,EAAE,EACF,GAAG,EACH,GAAG,EACH,GAAG,EACH,EAAE,EACF,GAAG,EACH,UAAU,EACV,SAAS,EACT,QAAQ,EACR,UAAU,EACV,OAAO,EACP,EAAE,EACF,GAAG,EACH,GAAG,EACH,WAAW,GACZ,MAAM,aAAa,CAAA"}

package/dist/outbox.d.ts

@@ -0,0 +1,87 @@
+import type { EventBus, EventEnvelope, EventMetadata, OutboxEventStore } from "@voyant-travel/core";
+import { type EventOutboxRow } from "./schema/infra/event_outbox.js";
+import type { DrizzleClient } from "./types.js";
+export interface DrainOutboxOptions {
+    /** Max rows claimed per drain pass. Default 25. */
+    limit?: number;
+    /**
+     * How long a claimed row stays invisible to other drains. Must exceed
+     * the worst-case delivery time of one event (all subscribers, each
+     * bounded by the bus's per-handler timeout). A crashed claimer's rows
+     * simply become due again after this window. Default 120s.
+     */
+    visibilityTimeoutMs?: number;
+}
+export interface DrainOutboxResult {
+    claimed: number;
+    delivered: number;
+    retried: number;
+    deadLettered: number;
+}
+/**
+ * Postgres-backed {@link OutboxEventStore} for `createEventBus`'s durable
+ * emit path. `getDb` is called per operation so the store can be bound
+ * to a per-request client (Workers) or a long-lived one (Node).
+ */
+export declare function createOutboxEventStore(getDb: () => DrizzleClient): OutboxEventStore;
+/**
+ * Persist envelopes as pending outbox rows. Pass a transaction handle to
+ * capture events atomically with the domain write ("transactional
+ * outbox" proper):
+ *
+ *     await db.transaction(async (tx) => {
+ *       await tx.insert(bookings).values(...)
+ *       await insertOutboxEvents(tx, [{ name: "booking.created", data, metadata }])
+ *     })
+ *     // post-commit: the drain (or a waitUntil kick) delivers.
+ *
+ * Duplicate `metadata.eventId`s are skipped (ON CONFLICT DO NOTHING) —
+ * re-emits and webhook redeliveries capture once. Envelopes without an
+ * eventId get one stamped here.
+ */
+export declare function insertOutboxEvents(db: DrizzleClient, envelopes: ReadonlyArray<Pick<EventEnvelope, "name" | "data"> & {
+    metadata?: EventMetadata;
+    emittedAt?: string;
+}>): Promise<EventOutboxRow[]>;
+/** Mark a row delivered. */
+export declare function completeOutboxEvent(db: DrizzleClient, id: string): Promise<void>;
+/**
+ * Record a failed delivery: reschedules with exponential backoff
+ * (5s · 2^attempts, capped at 15min, ±20% jitter) or dead-letters as
+ * `failed` once `max_attempts` is exhausted. Single statement — safe on
+ * neon-http. Returns the resulting status when the row exists.
+ */
+export declare function failOutboxEvent(db: DrizzleClient, id: string, error: string): Promise<"pending" | "failed" | null>;
+/**
+ * Atomically claim due pending rows: bumps `attempts` and pushes
+ * `next_attempt_at` past the visibility timeout so concurrent drains
+ * (and a crashed claimer's successor) never double-claim. One statement
+ * (`FOR UPDATE SKIP LOCKED` inside the subquery) — safe on neon-http.
+ */
+export declare function claimDueOutboxEvents(db: DrizzleClient, options?: DrainOutboxOptions): Promise<EventOutboxRow[]>;
+/** Rebuild the bus envelope from a stored row. */
+export declare function outboxRowToEnvelope(row: EventOutboxRow): EventEnvelope;
+/**
+ * One drain pass: claim due rows, redeliver each through the bus, mark
+ * delivered / reschedule / dead-letter. Call from a scheduled handler
+ * (cron), a `waitUntil` kick after emit, or a long-running Node loop.
+ * Safe to run concurrently from multiple isolates (SKIP LOCKED claim).
+ */
+export declare function drainOutbox(db: DrizzleClient, bus: EventBus, options?: DrainOutboxOptions): Promise<DrainOutboxResult>;
+/**
+ * Delete delivered rows past the retention window (delivered rows are
+ * receipts, not a log sink — long-term archival belongs elsewhere).
+ * Dead-lettered (`failed`) rows are NOT pruned: they represent lost
+ * deliveries until a human resolves them. Returns the deleted count.
+ */
+export declare function pruneDeliveredOutboxEvents(db: DrizzleClient, options?: {
+    olderThanDays?: number;
+}): Promise<number>;
+/** Row counts by status — observability for dashboards/health checks. */
+export declare function getOutboxStats(db: DrizzleClient): Promise<{
+    pending: number;
+    delivered: number;
+    failed: number;
+    dueNow: number;
+}>;
+//# sourceMappingURL=outbox.d.ts.map

package/dist/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../src/outbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAInG,OAAO,EAAE,KAAK,cAAc,EAAoB,MAAM,gCAAgC,CAAA;AACtF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAU/C,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,aAAa,GAAG,gBAAgB,CAcnF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,EAAE,EAAE,aAAa,EACjB,SAAS,EAAE,aAAa,CACtB,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG;IAAE,QAAQ,CAAC,EAAE,aAAa,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CACxF,GACA,OAAO,CAAC,cAAc,EAAE,CAAC,CAoB3B;AAED,4BAA4B;AAC5B,wBAAsB,mBAAmB,CAAC,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKtF;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,EAAE,EAAE,aAAa,EACjB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,CAoBtC;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,EAAE,EAAE,aAAa,EACjB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,cAAc,EAAE,CAAC,CAmB3B;AA+BD,kDAAkD;AAClD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,aAAa,CAOtE;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,EAAE,EAAE,aAAa,EACjB,GAAG,EAAE,QAAQ,EACb,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CA0C5B;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,EAAE,EAAE,aAAa,EACjB,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,yEAAyE;AACzE,wBAAsB,cAAc,CAClC,EAAE,EAAE,aAAa,GAChB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAiBjF"}

package/dist/outbox.js

@@ -0,0 +1,245 @@
+import { generateEventId } from "@voyant-travel/core";
+import { eq, sql } from "drizzle-orm";
+import { eventOutboxTable } from "./schema/infra/event_outbox.js";
+/** Base delay before the first retry; doubles per attempt. */
+const BACKOFF_BASE_MS = 5_000;
+/** Retry delay ceiling. */
+const BACKOFF_CAP_MS = 15 * 60 * 1000;
+/**
+ * Postgres-backed {@link OutboxEventStore} for `createEventBus`'s durable
+ * emit path. `getDb` is called per operation so the store can be bound
+ * to a per-request client (Workers) or a long-lived one (Node).
+ */
+export function createOutboxEventStore(getDb) {
+    return {
+        async insert(envelope) {
+            const rows = (await insertOutboxEvents(getDb(), [envelope]));
+            const row = rows[0];
+            return row ? { id: row.id } : null;
+        },
+        async complete(id) {
+            await completeOutboxEvent(getDb(), id);
+        },
+        async fail(id, error) {
+            await failOutboxEvent(getDb(), id, error);
+        },
+    };
+}
+/**
+ * Persist envelopes as pending outbox rows. Pass a transaction handle to
+ * capture events atomically with the domain write ("transactional
+ * outbox" proper):
+ *
+ *     await db.transaction(async (tx) => {
+ *       await tx.insert(bookings).values(...)
+ *       await insertOutboxEvents(tx, [{ name: "booking.created", data, metadata }])
+ *     })
+ *     // post-commit: the drain (or a waitUntil kick) delivers.
+ *
+ * Duplicate `metadata.eventId`s are skipped (ON CONFLICT DO NOTHING) —
+ * re-emits and webhook redeliveries capture once. Envelopes without an
+ * eventId get one stamped here.
+ */
+export async function insertOutboxEvents(db, envelopes) {
+    if (envelopes.length === 0)
+        return [];
+    const values = envelopes.map((envelope) => {
+        const metadata = { ...(envelope.metadata ?? {}) };
+        if (typeof metadata.eventId !== "string" || metadata.eventId.length === 0) {
+            metadata.eventId = generateEventId();
+        }
+        return {
+            eventId: metadata.eventId,
+            name: envelope.name,
+            payload: envelope.data,
+            metadata,
+        };
+    });
+    const rows = await db
+        .insert(eventOutboxTable)
+        .values(values)
+        .onConflictDoNothing({ target: eventOutboxTable.eventId })
+        .returning();
+    return rows;
+}
+/** Mark a row delivered. */
+export async function completeOutboxEvent(db, id) {
+    await db
+        .update(eventOutboxTable)
+        .set({ status: "delivered", deliveredAt: new Date(), lastError: null })
+        .where(eq(eventOutboxTable.id, id));
+}
+/**
+ * Record a failed delivery: reschedules with exponential backoff
+ * (5s · 2^attempts, capped at 15min, ±20% jitter) or dead-letters as
+ * `failed` once `max_attempts` is exhausted. Single statement — safe on
+ * neon-http. Returns the resulting status when the row exists.
+ */
+export async function failOutboxEvent(db, id, error) {
+    // Truncate pathological error strings — this is a diagnostic, not a log sink.
+    const lastError = error.length > 2000 ? `${error.slice(0, 2000)}…` : error;
+    const rows = (await db.execute(sql `
+    UPDATE ${eventOutboxTable}
+    SET
+      "last_error" = ${lastError},
+      "status" = CASE WHEN "attempts" >= "max_attempts" THEN 'failed' ELSE "status" END,
+      "next_attempt_at" = CASE
+        WHEN "attempts" >= "max_attempts" THEN "next_attempt_at"
+        ELSE now() + (
+          least(${BACKOFF_BASE_MS} * power(2, "attempts"), ${BACKOFF_CAP_MS})
+          * (0.8 + random() * 0.4)
+        ) * interval '1 millisecond'
+      END
+    WHERE ${eventOutboxTable.id} = ${id}
+    RETURNING "status"
+  `));
+    const list = Array.isArray(rows) ? rows : rows.rows;
+    return list[0]?.status ?? null;
+}
+/**
+ * Atomically claim due pending rows: bumps `attempts` and pushes
+ * `next_attempt_at` past the visibility timeout so concurrent drains
+ * (and a crashed claimer's successor) never double-claim. One statement
+ * (`FOR UPDATE SKIP LOCKED` inside the subquery) — safe on neon-http.
+ */
+export async function claimDueOutboxEvents(db, options = {}) {
+    const limit = options.limit ?? 25;
+    const visibilityMs = options.visibilityTimeoutMs ?? 120_000;
+    const result = (await db.execute(sql `
+    UPDATE ${eventOutboxTable}
+    SET
+      "attempts" = "attempts" + 1,
+      "next_attempt_at" = now() + (${visibilityMs} * interval '1 millisecond')
+    WHERE "id" IN (
+      SELECT "id" FROM ${eventOutboxTable}
+      WHERE "status" = 'pending' AND "next_attempt_at" <= now()
+      ORDER BY "next_attempt_at" ASC
+      LIMIT ${limit}
+      FOR UPDATE SKIP LOCKED
+    )
+    RETURNING *
+  `));
+    const rows = Array.isArray(result) ? result : (result.rows ?? []);
+    return rows.map(normalizeClaimedRow);
+}
+/**
+ * `db.execute` returns snake_case column names (raw SQL bypasses
+ * drizzle's column mapping) — normalize to the drizzle row shape.
+ */
+function normalizeClaimedRow(raw) {
+    const row = raw;
+    return {
+        id: row.id,
+        eventId: row.event_id ?? row.eventId,
+        name: row.name,
+        payload: row.payload,
+        metadata: row.metadata,
+        status: row.status,
+        attempts: row.attempts,
+        maxAttempts: row.max_attempts ?? row.maxAttempts,
+        nextAttemptAt: coerceDate(row.next_attempt_at ?? row.nextAttemptAt),
+        lastError: (row.last_error ?? row.lastError ?? null),
+        createdAt: coerceDate(row.created_at ?? row.createdAt),
+        deliveredAt: (row.delivered_at ?? row.deliveredAt) == null
+            ? null
+            : coerceDate(row.delivered_at ?? row.deliveredAt),
+    };
+}
+function coerceDate(value) {
+    return value instanceof Date ? value : new Date(String(value));
+}
+/** Rebuild the bus envelope from a stored row. */
+export function outboxRowToEnvelope(row) {
+    return {
+        name: row.name,
+        data: row.payload,
+        metadata: { ...(row.metadata ?? {}), eventId: row.eventId },
+        emittedAt: row.createdAt.toISOString(),
+    };
+}
+/**
+ * One drain pass: claim due rows, redeliver each through the bus, mark
+ * delivered / reschedule / dead-letter. Call from a scheduled handler
+ * (cron), a `waitUntil` kick after emit, or a long-running Node loop.
+ * Safe to run concurrently from multiple isolates (SKIP LOCKED claim).
+ */
+export async function drainOutbox(db, bus, options = {}) {
+    const claimed = await claimDueOutboxEvents(db, options);
+    const result = {
+        claimed: claimed.length,
+        delivered: 0,
+        retried: 0,
+        deadLettered: 0,
+    };
+    if (claimed.length === 0)
+        return result;
+    await Promise.all(claimed.map(async (row) => {
+        const envelope = outboxRowToEnvelope(row);
+        let failedCount = 0;
+        let errors = [];
+        try {
+            if (bus.deliver) {
+                const delivery = await bus.deliver(envelope);
+                failedCount = delivery.failed;
+                errors = delivery.errors;
+            }
+            else {
+                // Third-party bus without failure reporting: emit is
+                // fire-and-forget; count as success.
+                await bus.emit(envelope.name, envelope.data, envelope.metadata);
+            }
+        }
+        catch (err) {
+            failedCount = 1;
+            errors = [err instanceof Error ? err.message : String(err)];
+        }
+        if (failedCount === 0) {
+            await completeOutboxEvent(db, row.id);
+            result.delivered += 1;
+            return;
+        }
+        const status = await failOutboxEvent(db, row.id, errors.join("; "));
+        if (status === "failed")
+            result.deadLettered += 1;
+        else
+            result.retried += 1;
+    }));
+    return result;
+}
+/**
+ * Delete delivered rows past the retention window (delivered rows are
+ * receipts, not a log sink — long-term archival belongs elsewhere).
+ * Dead-lettered (`failed`) rows are NOT pruned: they represent lost
+ * deliveries until a human resolves them. Returns the deleted count.
+ */
+export async function pruneDeliveredOutboxEvents(db, options = {}) {
+    const days = options.olderThanDays ?? 14;
+    const result = (await db.execute(sql `
+    DELETE FROM ${eventOutboxTable}
+    WHERE "status" = 'delivered'
+      AND "delivered_at" < now() - (${days} * interval '1 day')
+    RETURNING "id"
+  `));
+    const rows = Array.isArray(result) ? result : (result.rows ?? []);
+    return rows.length;
+}
+/** Row counts by status — observability for dashboards/health checks. */
+export async function getOutboxStats(db) {
+    const result = (await db.execute(sql `
+    SELECT
+      count(*) FILTER (WHERE "status" = 'pending')::int AS pending,
+      count(*) FILTER (WHERE "status" = 'delivered')::int AS delivered,
+      count(*) FILTER (WHERE "status" = 'failed')::int AS failed,
+      count(*) FILTER (WHERE "status" = 'pending' AND "next_attempt_at" <= now())::int AS due_now
+    FROM ${eventOutboxTable}
+  `));
+    const rows = Array.isArray(result) ? result : (result.rows ?? []);
+    const row = (rows[0] ?? {});
+    return {
+        pending: row.pending ?? 0,
+        delivered: row.delivered ?? 0,
+        failed: row.failed ?? 0,
+        dueNow: row.due_now ?? 0,
+    };
+}
+//# sourceMappingURL=outbox.js.map