@catalyst-cloud/schema 0.1.33 → 0.1.35

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catalyst-cloud/schema",
-  "version": "0.1.33",
+  "version": "0.1.35",
   "type": "module",
   "description": "Typed Drizzle schema = single source of truth for the per-tenant Mirror DO SQLite store (CTC-13 / ADR-0002). Shared by the mirror Worker, the host-sync replica, and the browser OPFS replica.",
   "license": "MIT",

package/src/events/registry.ts

@@ -605,42 +605,42 @@ export const durableEventTypes = {
   },
   "phase.dispatch.claim-lost": {
     rationale:
-      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): a dispatch claim was lost to a concurrent race — a real coordination fact about who owns the work.",
+      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): a dispatch claim was lost to a concurrent race — a real coordination fact about who owns the work. PRODUCER (CTC-1365, ADR-0070): apps/mirror/src/do/MirrorDO.ts's handleWorkAcquire, on a lease_held refusal that reliably names the winning holder+generation.",
     ingestVerb: "coordination.publish",
     wakes: false,
     entity: "ticket",
   },
   "phase.dispatch.escalated": {
     rationale:
-      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): the phase escalated to a human.",
+      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): the phase escalated to a human. PRODUCER (CTC-1365, ADR-0070): apps/mirror/src/do/runner-start-dispatch.ts, once per failure episode, on the attempt where its backoff ladder saturates.",
     ingestVerb: "coordination.publish",
     wakes: { consumerClass: "host-channel" },
     entity: "ticket",
   },
   "phase.dispatch.failed": {
     rationale:
-      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): the phase reported failure.",
+      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): the phase reported failure. PRODUCER (CTC-1365, ADR-0070): both apps/mirror/src/do/runner-start-dispatch.ts (a container never came to exist, scope:'container') and MirrorDO.ts's handleWorkAcquire (a post-claim routing/slot failure, scope:'assignment').",
     ingestVerb: "coordination.publish",
     wakes: false,
     entity: "ticket",
   },
   "phase.dispatch.launched": {
     rationale:
-      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): the phase's worker actually started running.",
+      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): the phase's worker actually started running. PRODUCER (CTC-1365, ADR-0070): apps/mirror/src/do/MirrorDO.ts's handleWorkAcquire, on every successful POST /work/acquire claim — carries the SAME nonce the terminal phase.<p>.complete/.failed event carries.",
     ingestVerb: "coordination.publish",
     wakes: { consumerClass: "dispatcher" },
     entity: "ticket",
   },
   "phase.dispatch.requested": {
     rationale:
-      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): work became eligible for dispatch — the phase was requested.",
+      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): work became eligible for dispatch — the phase was requested. PRODUCER (CTC-1365, ADR-0070): apps/mirror/src/do/runner-start-dispatch.ts's createNextSupervisorEpisode, once per supervisor episode, attributed to the team's head-of-queue eligible unit with an explicit nonce: null — no lease exists yet.",
     ingestVerb: "coordination.publish",
     wakes: { consumerClass: "dispatcher" },
     entity: "ticket",
   },
   "phase.dispatch.runaway": {
     rationale:
-      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): a dispatch safety guard fired (runaway detection) — a real operational fact.",
+      "ADR-0039 durable-fact example ('a phase started, completed, failed, or was preempted'): a dispatch safety guard fired (runaway detection) — a real operational fact. PRODUCER (CTC-1365, ADR-0070): apps/mirror/src/do/runner-start-dispatch.ts, when a waiting/unknown supervisor is superseded past its start grace window with zero live leases held by its dispatch key.",
     ingestVerb: "coordination.publish",
     wakes: false,
     entity: "ticket",

package/src/migrations.generated.ts

@@ -242,6 +242,13 @@ export const MIRROR_MIGRATIONS = {
         tag: "0032_elite_donald_blake",
         breakpoints: true,
       },
+      {
+        idx: 33,
+        version: "6",
+        when: 1788282183348,
+        tag: "0033_lethal_electro",
+        breakpoints: true,
+      },
     ],
   },
   migrations: {
@@ -308,5 +315,7 @@ export const MIRROR_MIGRATIONS = {
       "-- CTC-851 — backfill comment parents + quarantine the pre-fix empty-issue_id orphans.\n--\n-- 0030 adds the parent_type/parent_entity_id columns and fixes both WRITE legs (webhook normalizer +\n-- reconcile) so new/re-swept comments carry a real parent, but that alone converges only rows the\n-- reconcile re-sweeps — and it walks OPEN issues, so a non-issue comment (or a comment on a closed\n-- issue) keeps its corrupt shape forever. This backfill is what makes the CORPUS canonical rather\n-- than just the new writes.\n--\n-- ⭐ Deliberately a DATA migration in the SHARED bundle (the 0014 pattern): the DO and every host /\n-- OPFS replica apply the same MIRROR_MIGRATIONS through the same runner, so each side repairs its OWN\n-- rows locally. That converges every replica WITHOUT emitting a change_log delta per row (migrations\n-- bypass appendChange), so no ring-buffer flood (the CTC-279 concern).\n--\n-- (a) Healthy rows (a real issue_id) → parent_type='issue', parent_entity_id=issue_id.\n-- (b) Orphans (issue_id empty-string — the measured shape — or NULL, defensively) cannot be repaired\n--     from row data: the replica comments table has no `raw` column and no parent signal beyond the\n--     comment-reply parent_id. A pure in-bundle DML migration cannot call Linear, so it QUARANTINES\n--     them: parent_type='unresolved', issue_id nulled — MARKED with a stated reason, never deleted\n--     (the AC explicitly permits quarantine-with-reason). CTC-851 measured 54 such rows live.\n--\n-- Idempotent by the `parent_type IS NULL` guard: once a row is stamped it is skipped on replay, so a\n-- crash between a statement succeeding and its tag being recorded (execReplaySafe) is safe.\nUPDATE `comments`\n  SET `parent_type` = 'issue', `parent_entity_id` = `issue_id`\n  WHERE `parent_type` IS NULL AND `issue_id` IS NOT NULL AND `issue_id` <> '';\n--> statement-breakpoint\nUPDATE `comments`\n  SET `parent_type` = 'unresolved', `issue_id` = NULL\n  WHERE `parent_type` IS NULL AND (`issue_id` = '' OR `issue_id` IS NULL);\n",
     "0032_elite_donald_blake":
       "ALTER TABLE `issues` ADD `creator_id` text;--> statement-breakpoint\nALTER TABLE `issues` ADD `creator_name` text;--> statement-breakpoint\nALTER TABLE `issues` ADD `creator_avatar_url` text;",
+    "0033_lethal_electro":
+      "ALTER TABLE `labels` ADD `team_id` text;--> statement-breakpoint\nCREATE INDEX `idx_labels_team` ON `labels` (`team_id`);",
   },
 } as const;

package/src/mirror.ts

@@ -101,13 +101,24 @@ export const issues = sqliteTable(
   ],
 );
 
-export const labels = sqliteTable("labels", {
-  id: text("id").primaryKey(),
-  name: text("name"),
-  color: text("color"),
-  updated_at: integer("updated_at"),
-  removed_at: integer("removed_at"),
-});
+// CTC-1088: `team_id` is nullable and ADVISORY, never a gate — NULL means "workspace-scoped, or not
+// yet stamped by the authoritative sweep" (an ambiguity the org-wide reconcile leg bounds to one pass,
+// since it fetches `team { id }` and re-stamps every label every sweep — ADR-0022). Written UNCONDITIONALLY
+// only by that reconcile leg; a webhook or issue-nested label upsert OMITS the column entirely rather
+// than writing null over a real value — the SAME `users.email` precedent this file already documents
+// (see users, above), made safe by `upsertRow`'s `Object.keys(row)` column derivation (do/upsert.ts).
+export const labels = sqliteTable(
+  "labels",
+  {
+    id: text("id").primaryKey(),
+    team_id: text("team_id"),
+    name: text("name"),
+    color: text("color"),
+    updated_at: integer("updated_at"),
+    removed_at: integer("removed_at"),
+  },
+  (t) => [index("idx_labels_team").on(t.team_id)],
+);
 
 // Teammate identities (CTC-USERS): resolves issue assignees + delegate AGENTS (and comment/PR
 // authors/reviewers) to a name + avatar so the UI never renders a gray "Unknown" chip. AGENT