diff --git a/apps/api/src/broker/outboxWorker.ts b/apps/api/src/broker/outboxWorker.ts
index 2b9a2a7..608167e 100644
--- a/apps/api/src/broker/outboxWorker.ts
+++ b/apps/api/src/broker/outboxWorker.ts
@@ -268,7 +268,7 @@ const RESYNC_TIMEOUT_MS = 10_000;
  *
  * T-03-13: decrypted password is never logged.
  */
-async function loadClientForUser(userId: number): Promise<FastmailClient> {
+export async function loadClientForUser(userId: number): Promise<FastmailClient> {
   const rows = await db
     .select()
     .from(memberCredentials)
@@ -299,7 +299,7 @@ async function loadClientForUser(userId: number): Promise<FastmailClient> {
  * widening the window the decrypted app password lives in memory (T-03-13). When a cache
  * is supplied, the decrypted client is built at most once per userId per drain cycle.
  */
-async function triggerTargetedResync(
+export async function triggerTargetedResync(
   calendarUrl: string,
   userId: number,
   clientCache?: Map<number, FastmailClient>,