refactor(run-ops): migrate on a single RUN_OPS_DATABASE_URL

Drop the separate directUrl / RUN_OPS_DATABASE_DIRECT_URL. It was only consumed by
`prisma migrate` (never the app runtime) to bypass a pooler for advisory locks — but the
run-ops connection isn't wired to the app yet and the migration only needs one endpoint.
Point RUN_OPS_DATABASE_URL at the direct DB endpoint and it's fully covered. A pooled/
direct split can be reintroduced with directUrl if the app ever connects via a pooler.

Removes directUrl from the schema, the env.server.ts declaration, the .env.example line,
the migrate runner's direct resolution, and the testcontainer helper's dead env var.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: d-cs

.env.example

@@ -10,7 +10,6 @@ DIRECT_URL=${DATABASE_URL}
 # Dedicated run-ops database (@internal/run-ops-database). Only needed to run prisma commands
 # against it or to enable the run-ops split; start it with `docker compose --profile runops up`.
 RUN_OPS_DATABASE_URL=postgresql://postgres:postgres@localhost:5434/postgres?schema=public
-RUN_OPS_DATABASE_DIRECT_URL=${RUN_OPS_DATABASE_URL}
 REMIX_APP_PORT=3030
 # Dev-only: stream the webapp's logs over a local telnet/TCP socket (nc localhost 6767). Uncomment to enable.
 # WEBAPP_TELNET_LOGS_PORT=6767

apps/webapp/app/env.server.ts

@@ -139,12 +139,6 @@ const EnvironmentSchema = z
       .string()
       .refine(isValidDatabaseUrl, "RUN_OPS_DATABASE_URL is invalid")
       .optional(),
-    // Direct/unpooled endpoint for the run-ops DB, consumed by the migration runner (poolers break
-    // Prisma's advisory locks). Falls back to TASK_RUN_DATABASE_DIRECT_URL then the pooled URL.
-    RUN_OPS_DATABASE_DIRECT_URL: z
-      .string()
-      .refine(isValidDatabaseUrl, "RUN_OPS_DATABASE_DIRECT_URL is invalid")
-      .optional(),
     // The NEW dedicated run-ops DB writer. Optional so single-DB installs never set it.
     TASK_RUN_DATABASE_URL: z
       .string()

internal-packages/run-ops-database/prisma/schema.prisma

@@ -1,7 +1,6 @@
 datasource db {
-  provider  = "postgresql"
-  url       = env("RUN_OPS_DATABASE_URL")
-  directUrl = env("RUN_OPS_DATABASE_DIRECT_URL")
+  provider = "postgresql"
+  url      = env("RUN_OPS_DATABASE_URL")
 }
 
 generator client {

internal-packages/run-ops-database/scripts/migrate.mjs

@@ -36,8 +36,8 @@ function readFromEnvFiles(key) {
   return undefined;
 }
 
-// Expand `${VAR}` refs (e.g. the repo .env's RUN_OPS_DATABASE_DIRECT_URL=${RUN_OPS_DATABASE_URL});
-// our manual .env reader loads them literally, unlike Prisma's dotenv-expand.
+// Expand `${VAR}` refs in env-file values (our manual reader loads them literally, unlike Prisma's
+// dotenv-expand), so a `.env` like RUN_OPS_DATABASE_URL=${DATABASE_URL} still resolves.
 const expand = (value) =>
   value?.replace(/\$\{(\w+)\}/g, (_, k) => process.env[k] ?? readFromEnvFiles(k) ?? "");
 const resolveVar = (key) => expand(process.env[key] || readFromEnvFiles(key));
@@ -46,11 +46,6 @@ const redact = (url) => url.replace(/:\/\/[^@]*@/, "://***@");
 const subcommand = process.argv[2] === "status" ? "status" : "deploy";
 
 const databaseUrl = resolveVar("RUN_OPS_DATABASE_URL") || resolveVar("TASK_RUN_DATABASE_URL");
-// Prefer the direct/unpooled endpoint for migrations (poolers break Prisma's advisory locks).
-const directUrl =
-  resolveVar("RUN_OPS_DATABASE_DIRECT_URL") ||
-  resolveVar("TASK_RUN_DATABASE_DIRECT_URL") ||
-  databaseUrl;
 
 if (!databaseUrl) {
   // Single-DB installs never set these — safe no-op. A genuinely-expected DB is gated on by the caller.
@@ -71,7 +66,6 @@ const result = spawnSync("prisma", ["migrate", subcommand, "--schema", "prisma/s
   env: {
     ...process.env,
     RUN_OPS_DATABASE_URL: databaseUrl,
-    RUN_OPS_DATABASE_DIRECT_URL: directUrl,
   },
 });
 

internal-packages/testcontainers/src/utils.ts

@@ -37,8 +37,8 @@ export async function pushDatabaseSchema(databaseUrl: string) {
 
 /**
  * Pushes the DEDICATED run-ops subset schema (@internal/run-ops-database) into the database at
- * `databaseUrl`. The run-ops datasource reads RUN_OPS_DATABASE_URL/RUN_OPS_DATABASE_DIRECT_URL, and
- * its schema is a subset of the control-plane schema (run-ops tables, no Organization/Project/etc).
+ * `databaseUrl`. The run-ops datasource reads RUN_OPS_DATABASE_URL, and its schema is a subset of
+ * the control-plane schema (run-ops tables, no Organization/Project/etc).
  */
 export async function pushRunOpsSchema(databaseUrl: string) {
   // Resolve the schema (and the package's own prisma binary) through the @internal/run-ops-database
@@ -49,7 +49,7 @@ export async function pushRunOpsSchema(databaseUrl: string) {
   const result = await pushPrismaSchema({
     prismaBin: `${runOpsPackagePath}/node_modules/.bin/prisma`,
     schemaPath,
-    env: { RUN_OPS_DATABASE_URL: databaseUrl, RUN_OPS_DATABASE_DIRECT_URL: databaseUrl },
+    env: { RUN_OPS_DATABASE_URL: databaseUrl },
   });
 
   // `db push` derives DDL from the schema datamodel and so cannot create the SQL-only partial unique