chore: sync upstream cella v0.13.0 (d84e7e13)

[flipvh]

Syncs upstream cellajs/cella to d84e7e1 (v0.13.0).

42 upstream commits since last sync (compare):

• db6dfdb refactor(sdk): one schema resolver, docs types owned by the sdk, config factory (refactor(sdk): one schema resolver, docs types owned by the sdk, config factory cella#1217)
• fc4c737 refactor: tier 2 loc reduction with route helpers, shared table pieces and one prose engine (refactor: tier 2 loc reduction with route helpers, shared table pieces and one prose engine cella#1218)
• bfead59 chore: remove unused report scripts and the custom node loader (chore: remove unused report scripts and the custom node loader cella#1219)
• f9bef0f ci: run storybook tests on the release pr only (ci: run storybook tests on the release pr only cella#1221)
• a81e335 refactor(style): one style command over one finding shape (refactor(style): one style command over one finding shape cella#1220)
• eba8255 refactor(emails): one layout and one message body for every template (refactor(emails): one layout and one message body for every template cella#1223)
• 622e0ad fix: tier 2 follow-ups and app sync feedback (tenants table, table export, notifications, dev:single mcp) (fix: tier 2 follow-ups and app sync feedback (tenants table, table export, notifications, dev:single mcp) cella#1224)
• 5c0cb0a refactor(routes): gates in xGuard, xTool runs the route handler, revokeSessions (refactor(routes): gates in xGuard, xTool runs the route handler, revokeSessions cella#1226)
• 8cd9986 fix(blocknote): checklist shortcuts create the app's checklist block (fix(blocknote): checklist shortcuts create the app's checklist block cella#1227)
• 991458e refactor(blocknote): title documents as a template, not enforced (refactor(blocknote): title documents as a template, not enforced cella#1222)
• cd1c98c fix: a taken slug no longer reports the organization limit, plus dense-line cleanups (fix: a taken slug no longer reports the organization limit, plus dense-line cleanups cella#1228)
• 59d163e fix: one write per mention edit, comment emails, filter-aware list refetch and test db lock (fix: one write per mention edit, comment emails, filter-aware list refetch and test db lock cella#1225)
• dac8ba9 fix(ui): base ui wiring bugs found in the shadcn alignment audit (fix(ui): base ui wiring bugs found in the shadcn alignment audit cella#1230)
• 25d1833 style: line width 150 with shallow objects collapsed (style: line width 150 with shallow objects collapsed cella#1229)
• fe807b2 style: readability fixes for lines the 150 reformat made long (style: readability fixes for lines the 150 reformat made long cella#1231)
• 03a9d50 chore(ui): let upstream shadcn base ui classes port unchanged (chore(ui): let upstream shadcn base ui classes port unchanged cella#1232)
• 619f79b refactor(ui): build render props on base ui useRender and remove Slot (refactor(ui): build render props on base ui useRender and remove Slot cella#1233)
• d695224 perf(test): run backend tests in parallel on per-worker databases (perf(test): run backend tests in parallel on per-worker databases cella#1237)
• dd10bb3 fix(ui): alignment follow-ups for kit boundary, atoms, overlay exits, row confirm and hover card (fix(ui): alignment follow-ups for kit boundary, atoms, overlay exits, row confirm and hover card cella#1239)
• 34f8654 refactor: sheet exits, status panel, oauth sign-up mail and dependency bumps (refactor: sheet exits, status panel, oauth sign-up mail and dependency bumps cella#1240)
• 4bd8a42 perf(docs): smoother mobile docs sidebar, scrolling and navigation (perf(docs): smoother mobile docs sidebar, scrolling and navigation cella#1241)
• 4402741 refactor(auth): guard caches without broadcast, memberships versioned (refactor(auth): guard caches without broadcast, memberships versioned cella#1242)
• 9e71aa6 refactor(errors): one request id in error bodies, headers and logs (refactor(errors): one request id in error bodies, headers and logs cella#1243)
• 588b5e1 refactor(tenants): fold the held organization into Tenant (refactor(tenants): fold the held organization into Tenant cella#1244)
• d5f44e7 chore: general improvements (chore: general improvements cella#1245)
• 2fb4512 perf(frontend): narrower subscriptions, data-grid hot paths and compositor-only animations (perf(frontend): narrower subscriptions, data-grid hot paths and compositor-only animations cella#1246)
• 97a307c docs(openapi): one shape for every named schema (docs(openapi): one shape for every named schema cella#1249)
• f2c2a75 perf(frontend): enable the React Compiler (perf(frontend): enable the React Compiler cella#1247)
• fc2a4ac chore(deps): service dependencies are what the bundle loads from disk (chore(deps): service dependencies are what the bundle loads from disk cella#1254)
• 64b00aa refactor(guards): drop crossTenantGuard and noImpersonationGuard (refactor(guards): drop crossTenantGuard and noImpersonationGuard cella#1250)
• ced4c7d fix(sync): act on projectcampus's 2026-10-01 sync feedback (fix(sync): act on projectcampus's 2026-10-01 sync feedback cella#1252)
• 6e224e0 fix(frontend): css fixes (fix(frontend): css fixes cella#1248)
• adc4c11 refactor(backend)!: database helpers move into query files (refactor(backend)!: database helpers move into query files cella#1251)
• 3eaa9b5 refactor(auth): parse the device from the User-Agent without ua-parser-js (refactor(auth): parse the device from the User-Agent without ua-parser-js cella#1255)
• 7b90881 refactor(auth)!: second factors move to queries and operations (refactor(auth)!: second factors move to queries and operations cella#1253)
• 69d1350 refactor(routes): config switches leave xGuard as xEnabledBy (refactor(routes): config switches leave xGuard as xEnabledBy cella#1256)
• 3022b75 fix(frontend): api keys card no longer hijacks its settings section scroll (fix(frontend): api keys card no longer hijacks its settings section scroll cella#1257)
• 84b7e22 chore(main): release 0.13.0 (chore(main): release 0.13.0 cella#1208)
• 6249c8a refactor(migrations)!: notes describe themselves and stay upstream (refactor(migrations)!: notes describe themselves and stay upstream cella#1261)
• bdb66b2 fix(yjs): echo awareness to its sender so a lone editor stays connected (fix(yjs): echo awareness to its sender so a lone editor stays connected cella#1258)
• 0a5924d test(frontend): pin how descriptions move between the editor and the cache (test(frontend): pin how descriptions move between the editor and the cache cella#1259)
• d84e7e1 chore(deps): update dependencies, pin typescript to 6.0.3 (chore(deps): update dependencies, pin typescript to 6.0.3 cella#1263)

Migration notes: all 94 handled.

Scope

Step 1 of .todos/CELLA_SYNC_BRIEF_20261002.md. It stops at d84e7e1, the commit before cellajs/cella#1260 (description sync redesign), which merged after the brief was written. #1260 and its note 20261002T0831-description-sync are step 2, a separate PR. Three commits: the CLI bump to @cellajs/cli 0.3.0, the sync, and the clientCacheVersion bump.

Conflicts (5)

• service-accounts-schema.ts, create-service-account.ts, tests/service-accounts.test.ts, query/tests/query-client-env.ts: upstream adopted raak's fixes. Took upstream and dropped the four // fork: markers (followup-fixes step 4).
• bench/src/seeds/attachment.bench.ts: took upstream and re-applied raak's two marked deltas (project home, order 115). pgArrayColumns: ['mentions'] is gone.

Silent-damage sweep: one auto-merged file, utils/data-encryption.ts. Its fork marker and pre-0.11 TOTP salt survived.

App-side changes (all 19 notes handled)

• Config (ignored paths): has.commentEmail: false; proseExclude and markerClasses in the vocabulary allowlist. Marketing pages and legal-config.ts 3-way merged from upstream, keeping raak's content.
• Routes: the four task 'x-tool' blocks become xTool. The MCP layer now stamps a server stx, so update-task no longer needs serverOrigin: true. crossTenantGuard is dropped from the project and workspace routes.
• Cache invalidation: invalidateCache.user(id) is now synchronous and takes no db. generateUniqueSlug, removed upstream as unused, moves into create-workspaces.ts.
• Mentions from body: ...mentionableColumns is removed from task-db.ts, and mentions from the task mock and bench seed. task-mentions-derivation.test.ts becomes task-mention-notifications.test.ts, which asserts on the fan-out instead of the dropped column.
• Drizzle: 20261002100738_bindings_version_drop_mentions adds actors.bindings_version and drops attachments.mentions and tasks.mentions. The side-effect set adds the memberships_bump_bindings_version trigger. The SQL matches upstream plus raak's tables, and a second pnpm generate reports no changes.
• Frontend:
  • Codemods: ui-kit-boundary (11 files) and tailwind-class-conventions (19 files).
  • Line-width-150: codemod plus biome format.
  • Organization context: nine call sites move to organizationId, because useOrganizationLayoutContext now returns ids only (perf(frontend): narrower subscriptions, data-grid hot paths and compositor-only animations cella#1246). The explainer panel and project actions read the organization through organizationQueryOptions.
  • setTriggerRef calls removed.
  • Task date columns set exportValue.
  • Dead class names that pnpm style now flags are removed: space-between, align-center, font-xs, scrollable, task-card, is-collapsed, focus-visible:is-focused.
• Pinned tailwind.css: rebuilt on upstream's CSS-first theme, plus raak's board offsets and sticky-stack @propertys. overflow-x-clip (fix(mobile): docs render-mode labels, dialog overflow, breakpoint flip, floating nav inset cella#1139) is still left out pending a phone check of the board; it now carries a fork: marker.
• Scripts: root check, lint and lint:fix take the upstream bodies; prose:check, frontend:comments, frontend:style, docs:style and comments:language are removed. bench gets "type": "module".
• Overrides: frontend/src/members-config.ts is unpinned; it matched upstream.

Drift (analyze, before → after)

	before	after
diverged	6	0
behind	1858	0
drifted	0	3
pinned list	19	18

The three drifted files all carry markers: data-encryption.ts (TOTP salt), attachment.bench.ts (project-homed), and entity-columns.test.tsx. That last one is the upstream csv-export test, generalized over the hierarchy instead of the template's attachment-only counts; it should go upstream.

Verification

• pnpm check is clean, and a rerun reports no fixes. Service and frontend bundles build.
• pnpm test:core: 3752 passed after the fixes above, with two exceptions:
  • The bench scenario test runs against whatever dev stack holds the default ports (here the main checkout's, on the old schema), so its result says nothing about this branch. The bench seeds pass against a throwaway DB migrated from this branch.
  • oauth-metadata-fetch-limit timed out under full parallel load and passes alone.
• pnpm test:storybook: 465 passed.
• pnpm deps:unused flags three things that predate this sync: @opentelemetry/exporter-trace-otlp-http, nanoid and lucide-static, which gen:icons uses by path.
• Board, on a separate stack (ports +200, throwaway DB migrated and seeded from this branch):
  • renders in light and dark with the CSS-first tokens;
  • a single click opens the collaborative editor (Yjs connected), and typed text persists to the task description through the relay;
  • Escape hands back;
  • the table view, Export and the task sheet render;
  • no console errors.

Deploy notes

• The migration drops tasks.mentions and attachments.mentions. Old pods still write mentions, so run migrate and cut over in one release. ADD COLUMN bindings_version … DEFAULT gen_random_uuid() rewrites actors, a small table.
• /health?depth=full no longer reports authInvalidation.
• clientCacheVersion goes to v13-mentions-from-body: task responses drop the required mentions field, which the schema-bust gate counts as breaking. Clients wipe their persisted entity cache once. The cookie version is unchanged.

🤖 Generated with Claude Code