feat(webapp): add RUN_REPLICATION_RUN_OPS_DATABASE_URL for the runs-replication source

The run-ops runs-replication source now takes its connection URL from RUN_REPLICATION_RUN_OPS_DATABASE_URL, falling back to RUN_OPS_DATABASE_URL when unset.

The runs replicator speaks the Postgres streaming replication protocol, which cannot run through a transaction pooler. A dedicated URL lets the replication connection use a direct endpoint even when RUN_OPS_DATABASE_URL points at a pooler. Unset preserves existing behaviour (self-host, where RUN_OPS_DATABASE_URL is a direct connection).

Author: d-cs

apps/webapp/app/env.server.ts

@@ -1713,9 +1713,14 @@ const EnvironmentSchema = z
 
     // --- Run-ops DB split — second replication source (the NEW dedicated run-ops DB). ---
     // Cloud-only; only consulted when isSplitEnabled() is true. Self-host never sets these.
-    // The NEW source's connection URL is RUN_OPS_DATABASE_URL; these add the NEW source's replication
-    // slot/publication and an explicit per-source enable so it can be brought up independently of the
-    // legacy source during the transition.
+    // Connection URL for the run-ops DB used by the NEW runs-replication source: if set, else
+    // RUN_OPS_DATABASE_URL. Separate from the app's RUN_OPS_DATABASE_URL because the replication
+    // protocol can't run over a transaction pooler, so it needs a direct endpoint even when the app's
+    // URL is pooled; unset → RUN_OPS_DATABASE_URL (direct on self-host).
+    RUN_REPLICATION_RUN_OPS_DATABASE_URL: z
+      .string()
+      .refine(isValidDatabaseUrl, "RUN_REPLICATION_RUN_OPS_DATABASE_URL is invalid")
+      .optional(),
     RUN_REPLICATION_NEW_SLOT_NAME: z.string().default("task_runs_to_clickhouse_v2"),
     RUN_REPLICATION_NEW_PUBLICATION_NAME: z
       .string()

apps/webapp/app/services/runsReplicationInstance.server.ts

@@ -71,7 +71,8 @@ export class SplitReplicationMisconfiguredError extends Error {
       'RUN_OPS_SPLIT_ENABLED is on but the runs-replication sources[] has no "new" source: ' +
         "run-ops runs on the new DB would not replicate to ClickHouse, under-counting every " +
         "ClickHouse-fronted aggregate. Enable the new replication source " +
-        "(RUN_REPLICATION_NEW_ENABLED / RUN_OPS_DATABASE_URL) or turn the split off."
+        "(RUN_REPLICATION_NEW_ENABLED / RUN_REPLICATION_RUN_OPS_DATABASE_URL or RUN_OPS_DATABASE_URL) " +
+        "or turn the split off."
     );
     this.name = "SplitReplicationMisconfiguredError";
   }
@@ -172,7 +173,7 @@ function initializeRunsReplicationInstance() {
         const sources = buildReplicationSources({
           splitEnabled,
           legacyUrl: DATABASE_URL,
-          newUrl: env.RUN_OPS_DATABASE_URL,
+          newUrl: env.RUN_REPLICATION_RUN_OPS_DATABASE_URL ?? env.RUN_OPS_DATABASE_URL,
           newSourceOverride: env.RUN_REPLICATION_NEW_ENABLED === "disabled" ? false : undefined,
           legacySlotName: env.RUN_REPLICATION_SLOT_NAME,
           legacyPublicationName: env.RUN_REPLICATION_PUBLICATION_NAME,