Files
buzz/deploy/charts
Logan Johnson 646ef8abf9 Stop requiring the 0032 roster trigger at relay startup (#8611)
🤖
## Summary

When a relay starts, it checks that a database trigger from migration
0032 is installed and works. If the trigger is missing, the relay
refuses to start. This PR removes that startup check, so a later
migration can drop the trigger.

The trigger blocks a stale channel member list from being saved. Since
#8316, the relay runs the same check in Rust before every save of a
member list. The trigger is now only a duplicate backstop. Removing it
lets #8494 compute the `member`/`bot` label when it reads members,
instead of storing `bot` in the database.

This PR does not drop the trigger. The trigger stays installed and keeps
working. Only the requirement that it exists at startup is removed.

### Related issue

Prepares the trigger retirement that #8494 needs (review thread on #8494
about storing `bot`). No duplicate PRs found.

### Rollout

`docs/database.md` requires this sequence for retiring a trigger:

1. Ship the replacement in the app. This was #8316.
2. Fully deploy a release in which no relay requires the trigger. **This
PR.**
3. Drop the trigger in a separate migration, and name the step-2 release
as a required stop in its release notes.

A relay from before this PR refuses to start after the trigger is
dropped. So every environment, staging included, must run this release
before the drop ships.

## Details

- Removed the startup step `channel_roster_fence`, which ran the catalog
check and a behavior probe (a test insert that must be rejected, then
rolled back).
- Removed the catalog check that ran after migrations in
`run_migrations_locked`.
- The catalog check function stays, but only tests use it.
- Removed four tests about the startup gate. Added
`migrations_run_without_the_roster_trigger`: it drops the trigger in a
scratch database and runs the migrations. If the post-migration check
comes back, the test fails.
- `observability_source` lists the event writers that may skip the
guard. The probe was one of them, so it is removed from those lists, and
the expected writer count goes from 9 to 8.
- The Helm chart README now says that newer relays do not require the
trigger.

### Testing

- `cargo clippy -p buzz-db -p buzz-relay --all-targets -D warnings` and
`cargo fmt --check` pass.
- `observability_source` (21) and `startup_steps` (6) pass.
- `migrations_run_without_the_roster_trigger` passes. With the
post-migration catalog check restored, it fails with "channel roster
fence trigger missing".

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: Logan Johnson <loganj@squareup.com>
Co-authored-by: Larry <627498bd4bd1f281a16431e3c6cce3b5c25b6692798c78672298aefbf2f8f8b5@buzz.block.builderlab.xyz>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-28 11:42:49 -04:00
..