fix(run-ops split): invalidate control-plane cache on writes; route auth-env through the cache-first resolver

The ControlPlaneCache served env/org data with no invalidation, so admin/control-plane
writes were only reflected after the TTL. Add two invalidation scopes to the cache
(invalidateEnvironment for one env's slots; invalidateOrganization via a per-org epoch that
env/authEnv values are stamped with, so all of an org's cached rows drop with no reverse
index), expose them on the resolver, and call them at every write site that mutates
cache-served data: pause/resume, archive, env/org concurrency + burst-factor, API-key
regeneration, feature flags, API/batch rate limits, runs enable/disable, org + project
delete, and stream-basin provisioning.

Also extend the resolver's authenticated-env slot to carry `git` and make the run-engine
adapter's resolveAuthenticatedEnv delegate to the cache-first, split-aware resolver instead
of issuing its own $replica.findFirst, so it honors splitEnabled() and the cache like its
siblings while still returning `git` and the deleted-project guard.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: d-cs

.server-changes/run-ops-split-webapp-foundation.md

@@ -3,4 +3,4 @@ area: webapp
 type: feature
 ---
 
-Add the webapp foundation for the run-ops database split: topology/flag wiring, split-mode gating, a distinct-DB boot sentinel, and control-plane resolver read-through (all inert until `RUN_OPS_SPLIT_ENABLED`).
+Add the webapp foundation for the run-ops database split: topology/flag wiring, split-mode gating, a distinct-DB boot sentinel, and control-plane resolver read-through (all inert until `RUN_OPS_SPLIT_ENABLED`). The control-plane cache is now invalidated at env/org write sites (pause/resume, archive, concurrency/burst-factor, API-key regen, feature flags, rate limits, runs enable/disable, org/project delete, stream-basin provisioning) so admin/control-plane changes are reflected immediately rather than after the cache TTL, and the run-engine authenticated-env resolution goes through the cache-first, split-aware resolver.

apps/webapp/app/components/admin/backOffice/ApiRateLimitSection.server.ts

@@ -2,6 +2,7 @@ import { prisma } from "~/db.server";
 import { env } from "~/env.server";
 import { logger } from "~/services/logger.server";
 import { type Duration } from "~/services/rateLimiter.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { API_RATE_LIMIT_INTENT } from "./ApiRateLimitSection";
 import {
   handleRateLimitAction,
@@ -31,6 +32,8 @@ export const apiRateLimitDomain: RateLimitDomain = {
       where: { id: orgId },
       data: { apiRateLimiterConfig: next as any },
     });
+    // apiRateLimiterConfig is embedded in every env of the org; drop all its cached env rows.
+    controlPlaneResolver.invalidateOrganization(orgId);
     logger.info("admin.backOffice.apiRateLimit", {
       adminUserId,
       orgId,

apps/webapp/app/components/admin/backOffice/BatchRateLimitSection.server.ts

@@ -2,6 +2,7 @@ import { prisma } from "~/db.server";
 import { env } from "~/env.server";
 import { logger } from "~/services/logger.server";
 import { type Duration } from "~/services/rateLimiter.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { BATCH_RATE_LIMIT_INTENT } from "./BatchRateLimitSection";
 import {
   handleRateLimitAction,
@@ -31,6 +32,8 @@ export const batchRateLimitDomain: RateLimitDomain = {
       where: { id: orgId },
       data: { batchRateLimitConfig: next as any },
     });
+    // batchRateLimitConfig is embedded in every env of the org; drop all its cached env rows.
+    controlPlaneResolver.invalidateOrganization(orgId);
     logger.info("admin.backOffice.batchRateLimit", {
       adminUserId,
       orgId,

apps/webapp/app/models/api-key.server.ts

@@ -2,6 +2,7 @@ import type { RuntimeEnvironment } from "@trigger.dev/database";
 import { prisma } from "~/db.server";
 import { customAlphabet } from "nanoid";
 import { RuntimeEnvironmentType } from "~/database-types";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 
 const apiKeyId = customAlphabet(
   "1234567890abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ",
@@ -87,6 +88,9 @@ export async function regenerateApiKey({ userId, environmentId }: RegenerateAPIK
     });
   });
 
+  // The env's apiKey changed in the control-plane; drop any cached copy.
+  controlPlaneResolver.invalidateEnvironment(environmentId);
+
   return updatedEnviroment;
 }
 

apps/webapp/app/routes/admin.api.v1.environments.$environmentId.burst-factor.ts

@@ -2,6 +2,7 @@ import { type ActionFunctionArgs, json } from "@remix-run/server-runtime";
 import { z } from "zod";
 import { prisma } from "~/db.server";
 import { requireAdminApiRequest } from "~/services/personalAccessToken.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { updateEnvConcurrencyLimits } from "~/v3/runQueue.server";
 
 const ParamsSchema = z.object({
@@ -26,5 +27,7 @@ export async function action({ request, params }: ActionFunctionArgs) {
 
   await updateEnvConcurrencyLimits(environment);
 
+  controlPlaneResolver.invalidateEnvironment(environmentId);
+
   return json({ success: true });
 }

apps/webapp/app/routes/admin.api.v1.environments.$environmentId.ts

@@ -2,6 +2,7 @@ import { ActionFunctionArgs, json, LoaderFunctionArgs } from "@remix-run/server-
 import { z } from "zod";
 import { prisma } from "~/db.server";
 import { requireAdminApiRequest } from "~/services/personalAccessToken.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { engine } from "~/v3/runEngine.server";
 import { updateEnvConcurrencyLimits } from "~/v3/runQueue.server";
 
@@ -44,6 +45,10 @@ export async function action({ request, params }: ActionFunctionArgs) {
 
   await updateEnvConcurrencyLimits(environment);
 
+  // Org max-concurrency changed too, which is embedded in every env of the org; invalidating
+  // the org drops the env/authEnv rows for all of them (including this env).
+  controlPlaneResolver.invalidateOrganization(environment.organizationId);
+
   return json({ success: true });
 }
 

apps/webapp/app/routes/admin.api.v1.orgs.$organizationId.concurrency.ts

@@ -2,6 +2,7 @@ import { ActionFunctionArgs, json } from "@remix-run/server-runtime";
 import { z } from "zod";
 import { prisma } from "~/db.server";
 import { requireAdminApiRequest } from "~/services/personalAccessToken.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { marqs } from "~/v3/marqs/index.server";
 import { updateEnvConcurrencyLimits } from "~/v3/runQueue.server";
 
@@ -83,5 +84,8 @@ export async function action({ request, params }: ActionFunctionArgs) {
     await updateEnvConcurrencyLimits({ ...modifiedEnvironment, organization });
   }
 
+  // Org + every affected env's concurrency changed; one org invalidation covers them all.
+  controlPlaneResolver.invalidateOrganization(organizationId);
+
   return json({ success: true });
 }

apps/webapp/app/routes/admin.api.v1.orgs.$organizationId.feature-flags.ts

@@ -2,6 +2,7 @@ import { ActionFunctionArgs, LoaderFunctionArgs, json } from "@remix-run/server-
 import { z } from "zod";
 import { prisma } from "~/db.server";
 import { requireAdminApiRequest } from "~/services/personalAccessToken.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { validatePartialFeatureFlags } from "~/v3/featureFlags";
 
 const ParamsSchema = z.object({
@@ -100,6 +101,9 @@ export async function action({ request, params }: ActionFunctionArgs) {
       },
     });
 
+    // Org feature flags are embedded in every env of the org; drop all its cached env rows.
+    controlPlaneResolver.invalidateOrganization(organizationId);
+
     const updatedFlagsResult = updatedOrganization.featureFlags
       ? validatePartialFeatureFlags(updatedOrganization.featureFlags as Record<string, unknown>)
       : { success: false as const };

apps/webapp/app/routes/admin.api.v1.orgs.$organizationId.runs.enable.ts

@@ -10,6 +10,7 @@ import { z } from "zod";
 import { prisma } from "~/db.server";
 import { createEnvironment } from "~/models/organization.server";
 import { requireAdminApiRequest } from "~/services/personalAccessToken.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { updateEnvConcurrencyLimits } from "~/v3/runQueue.server";
 import { PauseEnvironmentService } from "~/v3/services/pauseEnvironment.server";
 
@@ -51,6 +52,10 @@ export async function action({ request, params }: ActionFunctionArgs) {
     return json({ error: "Organization not found" }, { status: 404 });
   }
 
+  // `runsEnabled` is embedded in every env of the org; drop all its cached env rows. The
+  // per-env pause writes below invalidate their own envs via PauseEnvironmentService.
+  controlPlaneResolver.invalidateOrganization(organizationId);
+
   const environments = await prisma.runtimeEnvironment.findMany({
     where: {
       organizationId,

apps/webapp/app/routes/admin.api.v2.orgs.$organizationId.feature-flags.ts

@@ -4,6 +4,7 @@ import { Prisma } from "@trigger.dev/database";
 import { z } from "zod";
 import { prisma } from "~/db.server";
 import { requireUser } from "~/services/session.server";
+import { controlPlaneResolver } from "~/v3/runOpsMigration/controlPlaneResolver.server";
 import { flags as getGlobalFlags } from "~/v3/featureFlags.server";
 import {
   FEATURE_FLAG,
@@ -132,5 +133,8 @@ export async function action({ request, params }: ActionFunctionArgs) {
     throw e;
   }
 
+  // Org feature flags are embedded in every env of the org; drop all its cached env rows.
+  controlPlaneResolver.invalidateOrganization(organizationId);
+
   return json({ success: true });
 }