fix(outbox): start a pass from the oldest row when its stored cursor names no real time

A cursor whose JSON parsed but whose creation time was not a calendar time
reached the batch's ::timestamp cast and failed the run, which stopped every
later type's prune until the cursor expired. The cursor's creation time is now
checked as PostgreSQL's ISO text with a calendar round trip, so such a cursor
is dropped like an unreadable one and the pass starts from the oldest row.

Author: waleedlatif1

apps/sim/lib/core/outbox/retention.integration.ts

@@ -260,6 +260,20 @@ describe('completed outbox retention in PostgreSQL', () => {
         },
         0,
       ],
+      [
+        'the cursor names no real creation time',
+        async (client: Redis) => {
+          await client.set(
+            `outbox-prune-cursor:v1:${RECOVER}`,
+            JSON.stringify({
+              createdAt: '2026-02-30 00:00:00',
+              id: 'row:1',
+              passStartedAt: Date.now(),
+            })
+          )
+        },
+        0,
+      ],
     ])('starts again from the oldest row when %s', async (_, corrupt, laterMs) => {
       const client = resumeThroughRedis()
       await seedFullBatchPlusOne(RECOVER)

apps/sim/lib/core/outbox/retention.ts

@@ -67,11 +67,22 @@ const PRUNABLE_OUTBOX_EVENT_TYPES = [
  */
 export const OUTBOX_PRUNE_PASS_MAX_MS = 60 * 60_000
 
+/**
+ * `created_at::text` under PostgreSQL's ISO date style, to the microsecond. A stored value that is
+ * not a real calendar time fails the round trip here instead of the batch's `::timestamp` cast.
+ */
+const postgresTimestampSchema = z.string().refine((value) => {
+  if (!/^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}(\.\d{1,6})?$/.test(value)) return false
+  const seconds = value.slice(0, 19).replace(' ', 'T')
+  const parsed = new Date(`${seconds}Z`)
+  return !Number.isNaN(parsed.getTime()) && parsed.toISOString().startsWith(seconds)
+})
+
 /**
  * Where a type's pass resumes: the creation time, as PostgreSQL prints it so no microseconds are
  * lost, and id of the last row the previous batch deleted.
  */
-const resumePointSchema = z.object({ createdAt: z.string(), id: z.string() })
+const resumePointSchema = z.object({ createdAt: postgresTimestampSchema, id: z.string() })
 const pruneCursorSchema = resumePointSchema.extend({ passStartedAt: z.number() })
 
 type ResumePoint = z.infer<typeof resumePointSchema>