from datetime import timedelta from typing import Any from uuid import uuid4 from fastapi import HTTPException, status from sqlalchemy import or_, select from app.application.events.handlers import EventHandlerMixin from app.core.config import get_settings from app.core.constants import ActorValue from app.core.http.pagination import bounded_limit from app.core.utils.time import utc_now from app.modules.audit.constants import ( AuditAction, AuditRiskLevel, AuditSource, AuditTargetType, ) from app.modules.audit.schemas import AuditLogCreate from app.modules.audit.service import AuditService from app.modules.events.constants import ( EventErrorDetail, EventPayloadKey, EventStatus, ) from app.modules.events.models import DomainEvent from app.modules.events.services import EventService from app.modules.events.services.serialization import _serialize_event class EventDispatchService(EventHandlerMixin): """Claim and dispatch outbox events at the application boundary.""" def __init__(self, db: Any): self.db = db self.events = EventService(db) def get_event(self, event_id: str) -> DomainEvent: return self.events.get_event(event_id) def dispatch_event( self, event_id: str, worker_id: str | None = None, preclaimed: bool = False, ) -> DomainEvent: lock_owner = worker_id or f"api:{uuid4().hex}" record = ( self.get_event(event_id) if preclaimed else self._claim_event(event_id, lock_owner) ) if record.status == EventStatus.PROCESSED: return record if preclaimed and record.locked_by != lock_owner: raise HTTPException( status_code=status.HTTP_409_CONFLICT, detail=EventErrorDetail.EVENT_LOCKED, ) if not preclaimed and record.locked_by != lock_owner: return record settings = get_settings() try: self._handle_event(record) except Exception as exc: retryable = record.attempts < self._max_attempts(record) record.status = EventStatus.PENDING if retryable else EventStatus.FAILED record.last_error = str(exc) record.next_attempt_at = ( utc_now() + timedelta(seconds=settings.event_dispatch_retry_delay_seconds) if retryable else None ) record.locked_by = None record.locked_until = None self.db.commit() self.db.refresh(record) self._audit_dispatch(record) return record record.status = EventStatus.PROCESSED record.last_error = None record.processed_at = utc_now() record.next_attempt_at = None record.locked_by = None record.locked_until = None self.db.commit() self.db.refresh(record) self._audit_dispatch(record) return record def dispatch_pending( self, limit: int = 100, worker_id: str | None = None, ) -> list[dict[str, Any]]: now = utc_now() stmt = ( select(DomainEvent) .where( DomainEvent.status == EventStatus.PENDING, or_( DomainEvent.next_attempt_at.is_(None), DomainEvent.next_attempt_at <= now, ), or_( DomainEvent.locked_until.is_(None), DomainEvent.locked_until <= now, ), or_( DomainEvent.max_attempts.is_(None), DomainEvent.attempts < DomainEvent.max_attempts, ), ) .order_by(DomainEvent.id.asc()) .limit(bounded_limit(limit)) .with_for_update(skip_locked=True) ) records = list(self.db.execute(stmt).scalars()) lock_owner = worker_id or f"worker:{uuid4().hex}" locked_until = now + timedelta( seconds=get_settings().event_dispatch_lock_seconds ) for record in records: record.locked_by = lock_owner record.locked_until = locked_until record.attempts += 1 self.db.commit() return [ _serialize_event( self.dispatch_event( record.event_id, worker_id=lock_owner, preclaimed=True, ) ) for record in records ] def retry_event(self, event_id: str, actor: str = ActorValue.API) -> DomainEvent: record = self.get_event(event_id) if record.status == EventStatus.PROCESSED: raise HTTPException( status_code=status.HTTP_409_CONFLICT, detail=EventErrorDetail.EVENT_NOT_RETRYABLE, ) record.status = EventStatus.PENDING record.actor = actor record.attempts = 0 record.max_attempts = record.max_attempts or get_settings().event_dispatch_max_attempts record.last_error = None record.locked_by = None record.locked_until = None record.next_attempt_at = utc_now() self.db.commit() self.db.refresh(record) return record def _audit_dispatch(self, record: DomainEvent) -> None: AuditService(self.db).log( AuditLogCreate( actor=record.actor, source=AuditSource.EVENTS, action=AuditAction.EVENT_DISPATCH, target_type=AuditTargetType.DOMAIN_EVENT, target_id=record.event_id, risk_level=AuditRiskLevel.LOW, response_payload={ EventPayloadKey.STATUS: record.status, EventPayloadKey.ATTEMPTS: record.attempts, EventPayloadKey.ERROR_MESSAGE: record.last_error, }, ) ) def _can_attempt(self, record: DomainEvent) -> bool: return record.attempts < self._max_attempts(record) def _claim_event(self, event_id: str, lock_owner: str) -> DomainEvent: now = utc_now() record = self.db.execute( select(DomainEvent) .where(DomainEvent.event_id == event_id) .with_for_update(skip_locked=True) ).scalar_one_or_none() if record is None: self.db.rollback() raise HTTPException( status_code=status.HTTP_409_CONFLICT, detail=EventErrorDetail.EVENT_LOCKED, ) if record.status == EventStatus.PROCESSED or not self._can_attempt(record): self.db.commit() return record if record.locked_until is not None and record.locked_until > now: self.db.commit() raise HTTPException( status_code=status.HTTP_409_CONFLICT, detail=EventErrorDetail.EVENT_LOCKED, ) record.locked_by = lock_owner record.locked_until = now + timedelta( seconds=get_settings().event_dispatch_lock_seconds ) record.status = EventStatus.PENDING record.attempts += 1 self.db.commit() self.db.refresh(record) return record @staticmethod def _max_attempts(record: DomainEvent) -> int: return record.max_attempts or get_settings().event_dispatch_max_attempts