Run a worker pool: a dispatcher and its worker threads.

Name a pool from its payload's registry entry.

A single-stripe pool sized at twice the enabled worker count plus one for the listener, with a minimum size of three.

Run only named pools. A pool that exits winds down its peers. The first failure among them is rethrown after every peer has been joined.

Run the pools selected by ARBITER_ENABLED_QUEUES, or every configured pool when it is unset.

Signal graceful shutdown to every pool atomically.

A worker pool paired with its registry-derived queue name.

A requested queue has no configured pool, or selection is empty.

The comma-separated queue names an environment variable asks for, every one of them checked against the registry. Unset or blank gives the registry's whole queue set, and a name outside it throws.

A rollup parent's immediate child results, keyed by child id, and its DLQ errors, keyed by DLQ row id for retryFromDLQ. A decode failure is returned as Left.

childResults with successfully decoded values combined through Monoid.

Combine successful child results, treating decode failures as mempty.

Store a job's result for its parent rollup, if it has one.

storeJobResult on an already-encoded result. Nothing stores nothing.

Create a new worker state initialized to Running.

Signal graceful shutdown. The pool stops claiming, finishes what it holds, and exits.

A worker pool's effective state, read off the shutdown and pause flags on its WorkerConfig. Shutdown wins, then pause, then running.

One pass of the maintenance the reaper runs, with each operation independently gated across all callers. An operation whose window has not elapsed is skipped. Returns the operations that failed. A failure does not stop the pass.

Gaps a caller holds between runs of each kind of work. A zero gap runs it every pass.

Run one gated maintenance operation. Database statement timeouts bound individual statements. Failures are logged and do not stop the loop.

A cron schedule. Built with cronJob, or cronJobInTimezone for a non-UTC one.

How overlapping cron ticks are deduplicated.

Bound on replay of missed ticks. Applies at startup and mid-flight.

Whether a tick is for the current minute or a replay of a past minute.

Build a CronJob. A bad expression returns Left. The expression is evaluated in UTC. cronJobInTimezone is the local-time form. Set backfill by record update.

cronJob "nightly-report" "0 3 * * *" SkipOverlap
  (\_kind _tick -> defaultJob (GenerateReport "nightly"))

Like cronJob but evaluated in a specific timezone. The tz name is validated eagerly against the bundled tzdata database.

Upsert default expression and overlap for each CronJob into the cron_schedules table. Preserves any user overrides and enabled state.

Convert an OverlapPolicy to its text representation.

Parse an OverlapPolicy from text.

Check a cron patch before it is written. At tick time a bad override stops firing or falls back to the default.

updateCronScheduleUnchecked behind validateCronScheduleUpdate. Returns rows affected (0 = not found).