@catalyst-cloud/schema 0.1.36 → 0.1.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catalyst-cloud/schema",
-  "version": "0.1.36",
+  "version": "0.1.38",
   "type": "module",
   "description": "Typed Drizzle schema = single source of truth for the per-tenant Mirror DO SQLite store (CTC-13 / ADR-0002). Shared by the mirror Worker, the host-sync replica, and the browser OPFS replica.",
   "license": "MIT",

package/src/events/registry.ts

@@ -85,7 +85,18 @@ export const durableEventTypes = {
   "ask.replied": {
     rationale:
       "A human answered — or tried to answer — an ask in its own thread, and the mirror's ask-decision trigger reached a named outcome. ADR-0039's own durable-fact example ('a human answer was received'), applied to the customer-facing ask loop (CTC-1326). Wake-eligible because the operator learning about it LATE is the defect CTC-1326 exists to close: before this, the only surface was a 15-minute Linear read poll.",
-    ingestVerb: "webhook.ingest",
+    // ⛔ NOT `webhook.ingest`, THOUGH A COMMENT WEBHOOK IS WHAT SETS IT OFF (CTC-1049 review). That verb
+    // carries a hard invariant this fact cannot satisfy: `test/webhook-event-types.test.ts` asserts the
+    // mapping is SURJECTIVE over the webhook.ingest slice — every type in it must be reachable from a
+    // raw (source, eventType, action) tuple — and the CTC-1049 gate enforces the same coverage from the
+    // other side. This type is not a mapping of a delivery; it is MINTED INSIDE the mirror DO after the
+    // ask-decision trigger runs (which itself calls Linear), so no fixture could ever produce it and
+    // declaring it webhook.ingest silently broke both checks the moment it was added.
+    // ⚠️ `coordination.publish` is the closest TRUE verb, not a perfect one: the operator copy really
+    // does arrive over a cross-DO publish, but the origin copy is appended in place. The registry has
+    // no verb for "minted by the mirror itself", which is a real gap worth a follow-up rather than a
+    // reason to mislabel this one.
+    ingestVerb: "coordination.publish",
     wakes: { consumerClass: "host-channel" },
     entity: "ticket",
   },

package/src/migrations.generated.ts

@@ -249,6 +249,13 @@ export const MIRROR_MIGRATIONS = {
         tag: "0033_lethal_electro",
         breakpoints: true,
       },
+      {
+        idx: 34,
+        version: "6",
+        when: 1788312053951,
+        tag: "0034_special_onslaught",
+        breakpoints: true,
+      },
     ],
   },
   migrations: {
@@ -317,5 +324,7 @@ export const MIRROR_MIGRATIONS = {
       "ALTER TABLE `issues` ADD `creator_id` text;--> statement-breakpoint\nALTER TABLE `issues` ADD `creator_name` text;--> statement-breakpoint\nALTER TABLE `issues` ADD `creator_avatar_url` text;",
     "0033_lethal_electro":
       "ALTER TABLE `labels` ADD `team_id` text;--> statement-breakpoint\nCREATE INDEX `idx_labels_team` ON `labels` (`team_id`);",
+    "0034_special_onslaught":
+      "CREATE INDEX `idx_processed_events_source_received` ON `processed_events` (`source`,`received_at`);",
   },
 } as const;

package/src/mirror.ts

@@ -1070,12 +1070,31 @@ export const pr_review_threads = sqliteTable(
 
 // ── Mirror infra (not domain entities — never ride the change-feed) ─────────────────────────────────
 
-export const processed_events = sqliteTable("processed_events", {
-  delivery_id: text("delivery_id").primaryKey(),
-  source: text("source"),
-  event_type: text("event_type"),
-  received_at: integer("received_at"),
-});
+/**
+ * CTC-1441 — the webhook dedup marker, one row per provider delivery. DELIBERATELY NEVER PRUNED (see
+ * `linearPurgeStatements`' doc in apps/mirror/src/do/MirrorDO.ts: old markers must never collide with
+ * a new workspace's deliveries), so this table only ever grows — 762,190 rows on tenant-0 as of
+ * 2026-09-02, climbing ~53,000 a day.
+ *
+ * ⭐ THE INDEX IS LOAD-BEARING, AND ITS COLUMN ORDER IS THE WHOLE POINT. `computeFreshness`
+ * (apps/mirror/src/do/changefeed.ts) runs `SELECT max(received_at) ... WHERE source = ?` once per
+ * source on EVERY reconcile pass, which is every alarm tick. With only the `delivery_id` primary key
+ * that predicate was a full table scan, twice per alarm — measured at 2.21 BILLION rows read a day on
+ * tenant-0, 93-100% of the account's entire Durable Objects rows-read bill. `(source, received_at)`
+ * lets SQLite's max() optimization seek to the end of the source group and read ONE index entry;
+ * `(source)` alone would only narrow the scan to that source's ~half of the table, which is not the
+ * fix. Pinned by apps/mirror/test/processed-events-query-plan.test.ts.
+ */
+export const processed_events = sqliteTable(
+  "processed_events",
+  {
+    delivery_id: text("delivery_id").primaryKey(),
+    source: text("source"),
+    event_type: text("event_type"),
+    received_at: integer("received_at"),
+  },
+  (t) => [index("idx_processed_events_source_received").on(t.source, t.received_at)],
+);
 
 export const change_log = sqliteTable("change_log", {
   seq: integer("seq").primaryKey({ autoIncrement: true }),