feat(run-ops): dedicated run-ops database package + docker service + migration runner (#4113)

## What

The **dedicated run-ops database** foundation for the split: a
standalone Prisma package plus the infra to run and migrate it.

- **`internal-packages/run-ops-database`** — a new Prisma package
(`@internal/run-ops-database`) whose schema mirrors the run-execution
tables that will live on the dedicated DB, with its own generated
client, migrations, and migration runner.
- **`prisma/schema.parity.test.ts`** — a parity test that guards the
run-ops schema against drift from the control-plane schema for the
mirrored tables.
- **Docker** — a Postgres 17 service (`docker/Dockerfile.postgres17`,
`docker/docker-compose.yml`) so the dedicated DB is available locally
under the run-ops compose profile.
- **Testcontainers** — hetero fixtures (PG14 legacy + PG17 dedicated) so
later PRs can exercise cross-database behaviour with real containers
rather than mocks.

## Why

This is the **second PR in the run-ops split stack**, stacked on the
core primitives. It stands up the dedicated database and its tooling.
There is **no runtime wiring** into the webapp here — the app does not
read or write this DB yet; that arrives in later PRs. On its own this PR
only adds a package, a docker service, and test fixtures.

## Tests

Schema-parity test for the run-ops schema; hetero testcontainer fixture
smoke test.

## Notes

- Draft, **stacked on #4112** (`runops/pr01-core-residency`). Review
that one first; this diff is against it.
- Server-change / changeset note to be added at stack-assembly time.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: d-cs

.env.example

@@ -7,6 +7,10 @@ DATABASE_URL=postgresql://postgres:postgres@localhost:5432/postgres?schema=publi
 # This sets the URL used for direct connections to the database and should only be needed in limited circumstances
 # See: https://www.prisma.io/docs/reference/api-reference/prisma-schema-reference#fields:~:text=the%20shadow%20database.-,directUrl,-No
 DIRECT_URL=${DATABASE_URL}
+# Dedicated run-ops database (@internal/run-ops-database). Only needed to run prisma commands
+# against it or to enable the run-ops split; start it with `docker compose --profile runops up`.
+RUN_OPS_DATABASE_URL=postgresql://postgres:postgres@localhost:5434/postgres?schema=public
+RUN_OPS_DATABASE_DIRECT_URL=${RUN_OPS_DATABASE_URL}
 REMIX_APP_PORT=3030
 # Dev-only: stream the webapp's logs over a local telnet/TCP socket (nc localhost 6767). Uncomment to enable.
 # WEBAPP_TELNET_LOGS_PORT=6767

.github/workflows/unit-tests-internal.yml

@@ -95,6 +95,7 @@ jobs:
           }
           echo "Pre-pulling Docker images with authenticated session..."
           pull postgres:14
+          pull postgres:17 # for the heterogeneous PG14/17 test fixture gate (heteroPostgresTest)
           pull clickhouse/clickhouse-server:26.2.19.43-alpine@sha256:c6ad6a7eb2fb5999df3adfb8b69a0c7222c68fa9b8f6b04a088564ebbc959251
           pull redis:7.2
           pull testcontainers/ryuk:0.14.0

docker/Dockerfile.postgres17

@@ -0,0 +1,5 @@
+FROM postgres:17
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends postgresql-17-partman \
+    && rm -rf /var/lib/apt/lists/*

docker/docker-compose.yml

@@ -11,6 +11,7 @@ name: triggerdotdev-docker
 volumes:
   database-data:
   database-data-alt:
+  database-runops-data:
   database-replica-data:
   redis-data:
   minio-data:
@@ -51,6 +52,36 @@ services:
       - -c
       - max_connections=500
 
+  # Opt-in NEW run-ops database, PG17 (the `database` above is PG14) — a separate cluster
+  # so the run-ops split's distinct-DB sentinel passes. Start with:
+  #   COMPOSE_PROFILES=runops pnpm run docker
+  database-runops:
+    container_name: ${CONTAINER_PREFIX:-}database-runops
+    profiles: ["runops"]
+    build:
+      context: .
+      dockerfile: Dockerfile.postgres17
+    restart: always
+    volumes:
+      - ${DB_RUNOPS_VOLUME:-database-runops-data}:/var/lib/postgresql/data/
+    environment:
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: postgres
+      POSTGRES_DB: postgres
+    networks:
+      - app_network
+    ports:
+      - "${POSTGRES_RUNOPS_HOST_PORT:-5434}:5432"
+    command:
+      - -c
+      - listen_addresses=*
+      - -c
+      - wal_level=logical
+      - -c
+      - shared_preload_libraries=pg_partman_bgw
+      - -c
+      - max_connections=500
+
   # Opt-in streaming read replica with configurable apply lag — a dial-a-lag rig for
   # testing replica-race behavior (e.g. the realtime read-your-writes gate) locally.
   # Start with: COMPOSE_PROFILES=replica pnpm run docker

internal-packages/run-ops-database/.env

@@ -0,0 +1 @@
+../../.env

internal-packages/run-ops-database/.gitignore

@@ -0,0 +1,6 @@
+node_modules
+dist
+generated/run-ops
+
+# Ensure the .env symlink is not removed by accident
+!.env

internal-packages/run-ops-database/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@internal/run-ops-database",
+  "private": true,
+  "version": "0.0.1",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "@triggerdotdev/source": "./src/index.ts",
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    },
+    "./prisma/schema.prisma": "./prisma/schema.prisma",
+    "./prisma/*": "./prisma/*",
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@prisma/client": "6.14.0",
+    "prisma": "6.14.0"
+  },
+  "devDependencies": {
+    "rimraf": "6.0.1",
+    "vitest": "4.1.7"
+  },
+  "scripts": {
+    "clean": "rimraf dist",
+    "generate": "prisma generate",
+    "db:migrate:dev:create": "prisma migrate dev --create-only",
+    "db:migrate:deploy": "prisma migrate deploy",
+    "db:push": "prisma db push",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "build": "pnpm run clean && tsc --noEmit false --outDir dist --declaration",
+    "dev": "tsc --noEmit false --outDir dist --declaration --watch",
+    "db:studio": "prisma studio",
+    "db:reset": "prisma migrate reset"
+  }
+}