Struct Outbox 

pub struct Outbox { /* private fields */ }

A durable work queue over the Database port. Construct it with the table the owning module declares (e.g. "<module>_outbox").

Implementations

impl Outbox

pub fn new(table: impl Into<String>) -> Self

pub fn create_table_sql(&self) -> String

The portable DDL for the outbox table. The owning module ships this as a forward-only migration.

pub fn enqueue_statement( &self, id: &str, topic: &str, payload: &str, subject: Option<&str>, at: &str, ) -> Statement

The INSERT that enqueues one unit of work. Return it into the module’s own db.batch_atomic(..) alongside the state change, so the row is durable exactly when the change is. id is a caller-supplied ULID; at is an RFC 3339 timestamp used for both created_at and the initial next_attempt_at (deliver as soon as possible).

subject is the person the work is for — an account id, a waitlist entry id — or None for work that names nobody. Writing it is what makes the queued row reachable for export and erasure (issue #266): the payload JSON is the module’s own dialect and no predicate can match into it. Pass it for every per-person job even when it feels redundant with the payload; None rows drain identically but are returned for nobody’s subject, so a forgotten Some is a silent hole in the erasure catalogue rather than an error.

pub async fn claim_due( &self, db: &dyn Database, now: &str, lease_until: &str, limit: u64, ) -> Result<Vec<OutboxRecord>, DbError>

Leases up to limit records that are due (next_attempt_at <= now) and not already leased, marking each locked_until = lease_until so a concurrent drainer skips it. Returns only the rows this caller won.

Errors

Returns DbError if a read or lease write fails.

pub async fn complete(&self, db: &dyn Database, id: &str) -> Result<(), DbError>

Removes a record after successful delivery.

Errors

Returns DbError if the delete fails.

pub async fn retry_later( &self, db: &dyn Database, id: &str, next_attempt_at: &str, ) -> Result<(), DbError>

Reschedules a record after a failed delivery: increments attempts, sets the next attempt time (the caller applies its own backoff), and clears the lease so a drainer can pick it up again.

Errors

Returns DbError if the update fails.

Trait Implementations

impl Clone for Outbox

fn clone(&self) -> Outbox

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Outbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.