@catalyst-cloud/schema 0.1.56 → 0.1.58

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catalyst-cloud/schema",
-  "version": "0.1.56",
+  "version": "0.1.58",
   "type": "module",
   "description": "Typed Drizzle schema = single source of truth for the per-tenant Mirror DO SQLite store (CTC-13 / ADR-0002). Shared by the mirror Worker, the host-sync replica, and the browser OPFS replica.",
   "license": "MIT",

package/src/events/registry.ts

@@ -2121,6 +2121,15 @@ export interface TelemetryEventSpec {
  * time CTC-1510 read it — re-measure before citing it, don't re-derive it from this text.
  */
 export const telemetryEventTypes = {
+  "telemetry.ingest.tenant-forged": {
+    reason:
+      "CTC-2788 — a gateway payload named a tenant other than its token's on `account_id` or " +
+      "`catalyst.tenant`, and the gateway overwrote it. Rare by construction: a current runner image " +
+      "emits `catalyst.tenant` equal to its own tenant, so this fires only on a stale or wrong token, " +
+      "or on a deliberate forgery. Each occurrence is independently actionable (which tenant held the " +
+      "token, which tenant was claimed, which signal), so it is never sampled away.",
+    sampling: { kind: "always" },
+  },
   "account.ratelimit.sampled": {
     reason: "A periodic provider rate-limit budget reading — a gauge, not a state transition.",
   },
@@ -2158,6 +2167,11 @@ export const telemetryEventTypes = {
       "CTC-1346 AC3 — the INDEPENDENT fleet-wide observer's own verdict that one tenant's board-health sweep has gone quiet (or its probe failed outright — a failed probe is a gap, never a pass). Distinct from board-health.sweep.gap: that one is self-detected by the sweep itself; this one survives the sweep's OWN process/DO going fully unresponsive.",
     sampling: { kind: "always" },
   },
+  "watchdog.job.silent": {
+    reason:
+      "CTC-2797 — a scheduled watchdog job on the mirror Worker's cron whose last SUCCESSFUL run is older than 3x its declared cadence (including one that has never succeeded — duration then measured from its registration — and one whose mode flag could not be resolved). A red GitHub run used to be free visibility for these jobs; a silently dead Worker job has none. Rare and high-value, never sampled away.",
+    sampling: { kind: "always" },
+  },
   "board-health.verdict.sampled": {
     reason:
       "CTC-1346 — a per-verdict count from the recurring board-health sweep (do/board-health-classify.ts). Gauge-shaped: only the collapsed count matters. Every verdict bucket is emitted every pass, zeros included, so a bucket falling to zero is distinguishable from the sweep having stopped.",