feat: enable configured multitable synchronization

internal/config/config.go

@@ -137,14 +137,6 @@ func Load(options LoadOptions) (Config, error) {
 	if environment != "" {
 		cfg.App.Env = environment
 	}
-	if cfg.App.Env == "prod" {
-		if strings.TrimSpace(os.Getenv("APP_DATABASE_PASSWORD")) == "" {
-			return Config{}, errors.New("APP_DATABASE_PASSWORD must be set in production")
-		}
-		if strings.TrimSpace(os.Getenv("APP_AUTH_JWT_SECRET")) == "" {
-			return Config{}, errors.New("APP_AUTH_JWT_SECRET must be set in production")
-		}
-	}
 	if err := cfg.Validate(); err != nil {
 		return Config{}, err
 	}
@@ -187,7 +179,7 @@ func (c Config) Validate() error {
 			return errors.New("multitable.base_url must use https when multitable is enabled")
 		}
 		if strings.TrimSpace(c.MultiTable.APIKey) == "" {
-			return errors.New("APP_MULTITABLE_API_KEY is required when multitable is enabled")
+			return errors.New("multitable.api_key is required when multitable is enabled")
 		}
 		if c.MultiTable.SyncInterval <= 0 || c.MultiTable.RequestTimeout <= 0 || c.MultiTable.BatchSize < 1 || c.MultiTable.MaxAttempts < 1 {
 			return errors.New("multitable retry and timeout settings must be positive")

internal/config/config_test.go

@@ -3,7 +3,6 @@ package config
 import (
 	"os"
 	"path/filepath"
-	"strings"
 	"testing"
 )
 
@@ -69,24 +68,14 @@ database:
 	}
 }
 
-func TestLoadProductionRequiresEnvironmentSecrets(t *testing.T) {
-	dir := writeConfigs(t, "app:\n  env: production\n")
-	t.Setenv("APP_DATABASE_PASSWORD", "")
-	t.Setenv("APP_AUTH_JWT_SECRET", "")
-
-	_, err := Load(LoadOptions{Environment: "prod", ConfigDir: dir})
-	if err == nil || !strings.Contains(err.Error(), "APP_DATABASE_PASSWORD") {
-		t.Fatalf("Load() error = %v, want production password requirement", err)
-	}
-
-	t.Setenv("APP_DATABASE_PASSWORD", "production-password")
-	t.Setenv("APP_AUTH_JWT_SECRET", "production-jwt-secret")
+func TestLoadProductionSecretsFromConfig(t *testing.T) {
+	dir := writeConfigs(t, "app:\n  env: production\ndatabase:\n  password: production-password\nauth:\n  jwt_secret: production-jwt-secret\n")
 	cfg, err := Load(LoadOptions{Environment: "prod", ConfigDir: dir})
 	if err != nil {
-		t.Fatalf("Load() with environment secrets error = %v", err)
+		t.Fatalf("Load() with config secrets error = %v", err)
 	}
 	if cfg.Database.Password != "production-password" || cfg.Auth.JWTSecret != "production-jwt-secret" {
-		t.Fatalf("environment secrets were not applied")
+		t.Fatalf("config secrets were not applied")
 	}
 }
 

internal/multitable/worker.go

@@ -2,6 +2,7 @@ package multitable
 
 import (
 	"context"
+	"errors"
 	"fmt"
 	"time"
 
@@ -75,7 +76,9 @@ func (w *Worker) claim() []model.MultiTableOutbox {
 func (w *Worker) retry(event model.MultiTableOutbox, cause error) {
 	status := "pending"
 	availableAt := time.Now().Add(backoff(event.Attempts))
-	if event.Attempts >= w.config.MaxAttempts {
+	// A missing source row cannot be repaired by retrying. This commonly occurs
+	// for audit events created before a source record was deleted.
+	if errors.Is(cause, gorm.ErrRecordNotFound) || event.Attempts >= w.config.MaxAttempts {
 		status = "failed"
 	}
 	message := truncate(cause.Error(), 1024)