fix(news): preserve recoverable reads and verify publication against real services

src/lib/services/news-scheduler.ts

@@ -9,9 +9,11 @@ import { invalidateNewsCache } from "./news-cache";
 
 /** Publish a bounded batch and persist its refresh work before committing. */
 export async function publishDueArticles(now = new Date()): Promise<number> {
+	// Match Drizzle's TIMESTAMP writes; raw Date parameters use the host timezone.
+	const utcNow = now.toISOString().slice(0, -1).replace("T", " ");
 	const published = await db.transaction(async (tx) => {
 		const [rows] = await tx.execute(
-			sql`SELECT CAST(id AS CHAR) AS id,user_id AS userId,publish_at AS publishAt FROM website_articles WHERE status='scheduled' AND publish_at<=${now} ORDER BY publish_at,id LIMIT 100 FOR UPDATE`,
+			sql`SELECT CAST(id AS CHAR) AS id,user_id AS userId,publish_at AS publishAt FROM website_articles WHERE status='scheduled' AND publish_at<=${utcNow} ORDER BY publish_at,id LIMIT 100 FOR UPDATE`,
 		);
 		let published = 0;
 		for (const article of rows as unknown as Array<{
@@ -20,7 +22,7 @@ export async function publishDueArticles(now = new Date()): Promise<number> {
 			publishAt: Date | string;
 		}>) {
 			const [result] = await tx.execute(
-				sql`UPDATE website_articles SET status='published',published_at=${now},updated_at=${now} WHERE id=${article.id} AND status='scheduled' AND publish_at<=${now}`,
+				sql`UPDATE website_articles SET status='published',published_at=${utcNow},updated_at=${utcNow} WHERE id=${article.id} AND status='scheduled' AND publish_at<=${utcNow}`,
 			);
 			if ((result as unknown as { affectedRows: number }).affectedRows !== 1)
 				continue;