@catalyst-cloud/schema 0.1.23 → 0.1.24

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catalyst-cloud/schema",
-  "version": "0.1.23",
+  "version": "0.1.24",
   "type": "module",
   "description": "Typed Drizzle schema = single source of truth for the per-tenant Mirror DO SQLite store (CTC-13 / ADR-0002). Shared by the mirror Worker, the host-sync replica, and the browser OPFS replica.",
   "license": "MIT",

package/src/events/registry.ts

@@ -1607,6 +1607,13 @@ export const durableEventTypes = {
     wakes: { consumerClass: "dispatcher" },
     entity: "ticket",
   },
+  "runner.container.stopped": {
+    rationale:
+      "CTC-1118 D4 — RunnerDispatchDO observed its own Container stop (activity expiry, a platform rollout SIGTERM, or an orderly exit) and reported it to the tenant DO. A positive observation ('a container stopped'), never an inferred absence — the entitlement plane's epistemic rule (entitlement.ts's RevokeRequest.observation). NOT wake-eligible: the report only collapses a held lease's deadline (existence-plane, never ownership — ADR-0037 Amendment 7), it does not itself create new eligible work for the dispatcher.",
+    ingestVerb: "coordination.publish",
+    wakes: false,
+    entity: "runner",
+  },
   "runner.start.failed": {
     rationale:
       "CTC-951 — the MirrorDO alarm's existence-push (ADR-0037 Amendment 7) tried to start a tenant runner and the platform refused it. ADR-0039 durable-fact example ('a runner reported an outcome'): the first failure of a backoff episode. NOT wake-eligible — a start failure must never itself trigger the dispatcher, or the dispatch plane would wake on its own retry clock.",
@@ -1621,6 +1628,13 @@ export const durableEventTypes = {
     wakes: false,
     entity: "runner",
   },
+  "runner.work.reclaimable": {
+    rationale:
+      "CTC-1118 D5 — the MirrorDO alarm's existence-push found eligible work whose lease row still records a holder with a PAST deadline: a tenure that died without releasing, now being re-driven. ADR-0039 durable-fact example ('work became eligible'/'a runner reported an outcome') and the ticket's own Gherkin acceptance signal — a positive observation (a deadline verifiably passed while a holder was recorded), deduped per lapsed tenure via (ticket, phase, generation) so a unit that stays eligible across several alarm passes does not re-emit. NOT wake-eligible: the existence-push that discovers this already proceeds with its own /ensure call in the same pass, so nothing needs to wake on this event alone.",
+    ingestVerb: "coordination.publish",
+    wakes: false,
+    entity: "ticket",
+  },
   "session.ended": {
     rationale: "An agent session ended — a real lifecycle boundary fact.",
     ingestVerb: "coordination.publish",