refactor: migrate eventsourced to codeberg and go-messaging-amqp

Move eventsourced modules from gitlab.com/unboundsoftware to codeberg.org/eventsourced.
The Codeberg amqp publisher is built on go-messaging-amqp, so the service
switches from sparetimecoders/goamqp as well:

- routing keys are mapped on the eventsourced publisher (newEventPublisher)
- cache consumers are typed handlers; Cache.Update drops the goamqp shape
- publishes detach from the request context (uncancelledPublisher)
- closeEvents is buffered and the receiver also watches rootCtx
- WithPrefetchLimit dropped (no-op, 20 is the default)
- amqp091-go v1.15.0 (GO-2026-6372)
- renovate groups codeberg.org/messaging with eventsourced

Only transient consumer queues are used, so no queue cutover is needed.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Dpb7Y47dPz246oY9bCzh7k

cmd/service/service.go

@@ -13,6 +13,11 @@ import (
 	"syscall"
 	"time"
 
+	"codeberg.org/eventsourced/amqp"
+	"codeberg.org/eventsourced/eventsourced"
+	"codeberg.org/eventsourced/pg/v2"
+	goamqp "codeberg.org/messaging/go-messaging-amqp"
+	spec "codeberg.org/messaging/messaging"
 	"github.com/99designs/gqlgen/graphql/handler"
 	"github.com/99designs/gqlgen/graphql/handler/extension"
 	"github.com/99designs/gqlgen/graphql/handler/lru"
@@ -20,11 +25,7 @@ import (
 	"github.com/99designs/gqlgen/graphql/playground"
 	"github.com/alecthomas/kong"
 	"github.com/rs/cors"
-	"github.com/sparetimecoders/goamqp"
 	"github.com/vektah/gqlparser/v2/ast"
-	"gitlab.com/unboundsoftware/eventsourced/amqp"
-	"gitlab.com/unboundsoftware/eventsourced/eventsourced"
-	"gitlab.com/unboundsoftware/eventsourced/pg/v2"
 
 	"gitea.unbound.se/unboundsoftware/schemas/cache"
 	"gitea.unbound.se/unboundsoftware/schemas/domain"
@@ -57,7 +58,8 @@ func main() {
 	var cli CLI
 	_ = kong.Parse(&cli)
 	logger := logging.SetupLogger(cli.LogLevel, cli.LogFormat, serviceName, buildVersion)
-	closeEvents := make(chan error)
+	// buffered: go-messaging-amqp reports a lost connection without blocking
+	closeEvents := make(chan error, 1)
 
 	if err := start(
 		closeEvents,
@@ -114,7 +116,7 @@ func start(closeEvents chan error, logger *slog.Logger, connectToAmqpFunc func(u
 	}
 
 	publisher := goamqp.NewPublisher()
-	eventPublisher, err := amqp.New(publisher)
+	eventPublisher, err := newEventPublisher(uncancelledPublisher{publisher})
 	if err != nil {
 		return fmt.Errorf("failed to create event publisher: %v", err)
 	}
@@ -130,25 +132,7 @@ func start(closeEvents chan error, logger *slog.Logger, connectToAmqpFunc func(u
 	if err := loadSubGraphs(rootCtx, eventStore, serviceCache); err != nil {
 		return fmt.Errorf("caching subgraphs: %w", err)
 	}
-	setups := []goamqp.Setup{
-		goamqp.UseLogger(func(s string) { logger.Error(s) }),
-		goamqp.CloseListener(closeEvents),
-		goamqp.WithPrefetchLimit(20),
-		goamqp.EventStreamPublisher(publisher),
-		goamqp.TransientEventStreamConsumer("SubGraph.Updated", serviceCache.Update, domain.SubGraphUpdated{}),
-		goamqp.TransientEventStreamConsumer("Organization.Added", serviceCache.Update, domain.OrganizationAdded{}),
-		goamqp.TransientEventStreamConsumer("Organization.UserAdded", serviceCache.Update, domain.UserAddedToOrganization{}),
-		goamqp.TransientEventStreamConsumer("Organization.APIKeyAdded", serviceCache.Update, domain.APIKeyAdded{}),
-		goamqp.TransientEventStreamConsumer("Organization.APIKeyRemoved", serviceCache.Update, domain.APIKeyRemoved{}),
-		goamqp.TransientEventStreamConsumer("Organization.Removed", serviceCache.Update, domain.OrganizationRemoved{}),
-		goamqp.WithTypeMapping("SubGraph.Updated", domain.SubGraphUpdated{}),
-		goamqp.WithTypeMapping("Organization.Added", domain.OrganizationAdded{}),
-		goamqp.WithTypeMapping("Organization.UserAdded", domain.UserAddedToOrganization{}),
-		goamqp.WithTypeMapping("Organization.APIKeyAdded", domain.APIKeyAdded{}),
-		goamqp.WithTypeMapping("Organization.APIKeyRemoved", domain.APIKeyRemoved{}),
-		goamqp.WithTypeMapping("Organization.Removed", domain.OrganizationRemoved{}),
-	}
-	if err := conn.Start(rootCtx, setups...); err != nil {
+	if err := conn.Start(rootCtx, amqpSetups(logger, closeEvents, publisher, serviceCache)...); err != nil {
 		return fmt.Errorf("failed to setup AMQP: %v", err)
 	}
 
@@ -181,10 +165,13 @@ func start(closeEvents chan error, logger *slog.Logger, connectToAmqpFunc func(u
 	wg.Add(1)
 	go func() {
 		defer wg.Done()
-		err := <-closeEvents
-		if err != nil {
-			logger.With("error", err).Error("received close from AMQP")
-			rootCancel()
+		select {
+		case err := <-closeEvents:
+			if err != nil {
+				logger.With("error", err).Error("received close from AMQP")
+				rootCancel()
+			}
+		case <-rootCtx.Done():
 		}
 	}()
 
@@ -200,7 +187,6 @@ func start(closeEvents chan error, logger *slog.Logger, connectToAmqpFunc func(u
 			logger.With("error", err).Error("close http server")
 		}
 		close(sigint)
-		close(closeEvents)
 	}()
 	wg.Add(1)
 	go func() {
@@ -300,7 +286,7 @@ func loadOrganizations(ctx context.Context, eventStore eventsourced.EventStore,
 		if _, err := eventsourced.NewHandler(ctx, organization, eventStore); err != nil {
 			return err
 		}
-		_, err := serviceCache.Update(organization, nil)
+		err := serviceCache.Update(organization)
 		if err != nil {
 			return err
 		}
@@ -318,7 +304,7 @@ func loadSubGraphs(ctx context.Context, eventStore eventsourced.EventStore, serv
 		if _, err := eventsourced.NewHandler(ctx, subGraph, eventStore); err != nil {
 			return err
 		}
-		_, err := serviceCache.Update(subGraph, nil)
+		err := serviceCache.Update(subGraph)
 		if err != nil {
 			return err
 		}
@@ -326,6 +312,49 @@ func loadSubGraphs(ctx context.Context, eventStore eventsourced.EventStore, serv
 	return nil
 }
 
+func newEventPublisher(p amqp.BackingPublisher) (*amqp.Amqp, error) {
+	return amqp.New(
+		p,
+		amqp.WithTypeMapping("SubGraph.Updated", domain.SubGraphUpdated{}),
+		amqp.WithTypeMapping("Organization.Added", domain.OrganizationAdded{}),
+		amqp.WithTypeMapping("Organization.UserAdded", domain.UserAddedToOrganization{}),
+		amqp.WithTypeMapping("Organization.APIKeyAdded", domain.APIKeyAdded{}),
+		amqp.WithTypeMapping("Organization.APIKeyRemoved", domain.APIKeyRemoved{}),
+		amqp.WithTypeMapping("Organization.Removed", domain.OrganizationRemoved{}),
+	)
+}
+
+func amqpSetups(logger *slog.Logger, closeEvents chan error, publisher *goamqp.Publisher, serviceCache *cache.Cache) []goamqp.Setup {
+	return []goamqp.Setup{
+		goamqp.WithLogger(logger),
+		goamqp.CloseListener(closeEvents),
+		goamqp.EventStreamPublisher(publisher),
+		goamqp.TransientEventStreamConsumer("SubGraph.Updated", cacheUpdater[domain.SubGraphUpdated](serviceCache)),
+		goamqp.TransientEventStreamConsumer("Organization.Added", cacheUpdater[domain.OrganizationAdded](serviceCache)),
+		goamqp.TransientEventStreamConsumer("Organization.UserAdded", cacheUpdater[domain.UserAddedToOrganization](serviceCache)),
+		goamqp.TransientEventStreamConsumer("Organization.APIKeyAdded", cacheUpdater[domain.APIKeyAdded](serviceCache)),
+		goamqp.TransientEventStreamConsumer("Organization.APIKeyRemoved", cacheUpdater[domain.APIKeyRemoved](serviceCache)),
+		goamqp.TransientEventStreamConsumer("Organization.Removed", cacheUpdater[domain.OrganizationRemoved](serviceCache)),
+	}
+}
+
+// uncancelledPublisher detaches publishes from the request context: eventsourced publishes
+// right after storing an event, and a stored event must be published even if the client left.
+type uncancelledPublisher struct {
+	amqp.BackingPublisher
+}
+
+func (p uncancelledPublisher) Publish(ctx context.Context, routingKey string, msg any, headers ...goamqp.Header) error {
+	return p.BackingPublisher.Publish(context.WithoutCancel(ctx), routingKey, msg, headers...)
+}
+
+// cacheUpdater passes the payload as a pointer, which is what Cache.Update switches on
+func cacheUpdater[T any](c *cache.Cache) spec.EventHandler[T] {
+	return func(_ context.Context, e spec.ConsumableEvent[T]) error {
+		return c.Update(&e.Payload)
+	}
+}
+
 func ConnectAMQP(url string) (Connection, error) {
 	return goamqp.NewFromURL(serviceName, url)
 }