@catalyst-cloud/schema 0.1.57 → 0.1.59

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@catalyst-cloud/schema",
-  "version": "0.1.57",
+  "version": "0.1.59",
   "type": "module",
   "description": "Typed Drizzle schema = single source of truth for the per-tenant Mirror DO SQLite store (CTC-13 / ADR-0002). Shared by the mirror Worker, the host-sync replica, and the browser OPFS replica.",
   "license": "MIT",

package/src/events/registry.ts

@@ -2121,6 +2121,15 @@ export interface TelemetryEventSpec {
  * time CTC-1510 read it — re-measure before citing it, don't re-derive it from this text.
  */
 export const telemetryEventTypes = {
+  "telemetry.ingest.tenant-forged": {
+    reason:
+      "CTC-2788 — a gateway payload named a tenant other than its token's on `account_id` or " +
+      "`catalyst.tenant`, and the gateway overwrote it. Rare by construction: a current runner image " +
+      "emits `catalyst.tenant` equal to its own tenant, so this fires only on a stale or wrong token, " +
+      "or on a deliberate forgery. Each occurrence is independently actionable (which tenant held the " +
+      "token, which tenant was claimed, which signal), so it is never sampled away.",
+    sampling: { kind: "always" },
+  },
   "account.ratelimit.sampled": {
     reason: "A periodic provider rate-limit budget reading — a gauge, not a state transition.",
   },

package/src/index.ts

@@ -358,3 +358,92 @@ export function tableMeta(table: SQLiteTable): TableMeta {
 export const MIRROR_TABLE_META: Record<MirrorEntityName, TableMeta> = Object.fromEntries(
   Object.entries(mirrorEntityTables).map(([name, table]) => [name, tableMeta(table)]),
 ) as Record<MirrorEntityName, TableMeta>;
+
+// ── CTC-151 — THE ONE entity→provider partition ────────────────────────────────────────────────────
+//
+// ⭐ Buckets are keyed off `feedEntityTables` (CTC-671 doctrine: feed membership has exactly one
+// definition), NOT off apps/mirror's SNAPSHOT_TABLES (which omits `push_events`, a real feed
+// entity) and NOT off the SDK's four-name `entitySource` map — measured wrong for 9 of the
+// mirror's 13 GitHub snapshot entities (a `pr_review_comments` apply event arrives labeled
+// `source:"linear"`), which is why host-sync relabels through THIS partition and never trusts the
+// SDK's field. Consumers: apps/mirror's rebroadcast scope (derived from GITHUB_FEED_ENTITIES) and
+// apps/host-sync's per-provider freshness observations (folded through feedEntitySource).
+
+/** The upstream provider a feed entity originates from. Catalyst/registry-plane entities have NO
+ *  provider — see NON_PROVIDER_FEED_ENTITIES. */
+export type FeedEntitySource = "linear" | "github";
+
+/** The GitHub-sourced feed entities (14). */
+export const GITHUB_FEED_ENTITIES: readonly FeedEntityName[] = [
+  "pull_requests",
+  "check_runs",
+  "commit_statuses",
+  "reviews",
+  // CTC-575/577 — inline review comments, PR conversation comments, PR commits, PR timeline events.
+  "pr_review_comments",
+  "pr_conversation_comments",
+  "pr_commits",
+  "pr_events",
+  // CTC-667 — the pushed git ref head, deployments + their status history, PR review thread
+  // resolution state.
+  "pushes",
+  "deployments",
+  "deployment_statuses",
+  "pr_review_threads",
+  // CTC-667 item 4 / CTC-704 — GitHub's own check-suite rollup and the per-DELIVERY push log.
+  "check_suites",
+  "push_events",
+];
+
+/** The Linear-sourced feed entities (14). `users` is mixed-provider at the row level; callers
+ * needing provider-specific timestamps must filter its `source` column. */
+export const LINEAR_FEED_ENTITIES: readonly FeedEntityName[] = [
+  "issues",
+  "labels",
+  "users",
+  "issue_labels",
+  "relations",
+  "issue_history",
+  "projects",
+  "cycles",
+  "workflow_states",
+  "initiatives",
+  "project_initiatives",
+  "comments",
+  // CTC-524 — populated from Linear session/activity reconciliation.
+  "agent_sessions",
+  "agent_activities",
+];
+
+/**
+ * The feed entities with NO provider (4). ⛔ Never file these under a provider bucket: filing
+ * catalyst-plane activity under Linear would manufacture Linear freshness from non-Linear rows —
+ * "answering one source's question with the other's data is the failure mode this whole surface
+ * exists to expose" (apps/mirror/src/do/changefeed.ts, the github-deferrals rule).
+ */
+export const NON_PROVIDER_FEED_ENTITIES: readonly FeedEntityName[] = [
+  // CTC-624 — the per-team workflow decision, projected from the D1 registry (ADR-0033). (The
+  // mirror's rebroadcast scope deliberately keeps it on the Linear SIDE so a mapping travels with
+  // the workflow_states rows it resolves against; that is a purge-scope choice, not attribution.)
+  "team_workflow_mapping",
+  // CTC-350 — fleet coordination current-state.
+  "fleet_activity",
+  // CTC-355 — per-host fleet liveness + open anomaly signals.
+  "fleet_host_liveness",
+  "fleet_anomalies",
+];
+
+const GITHUB_ENTITY_SET: ReadonlySet<string> = new Set(GITHUB_FEED_ENTITIES);
+const LINEAR_ENTITY_SET: ReadonlySet<string> = new Set(LINEAR_FEED_ENTITIES);
+
+/**
+ * Runtime lookup: the provider a wire `entity` name originates from. Typed string in, TRI-STATE
+ * out — a non-provider feed entity, an infra table, or an unknown/future name yields `null`, never
+ * a defaulted bucket (the SDK's "everything else is linear" default is the defect this replaces).
+ * Exhaustiveness over FEED_ENTITY_NAMES is pinned by test/entity-sources.test.ts.
+ */
+export function feedEntitySource(entity: string): FeedEntitySource | null {
+  if (GITHUB_ENTITY_SET.has(entity)) return "github";
+  if (LINEAR_ENTITY_SET.has(entity)) return "linear";
+  return null;
+}