@moretea-labs/forge 1.7.2 → 1.8.0

package/src/runtime/control-plane/facade/work-admission-policy.ts

@@ -1,30 +1,15 @@
+import { readControlPlaneRecord, writeControlPlaneRecord } from '../persistence/sqlite-store';
+import { touchSchedulerWakeSignal } from '../global-scheduler/wake-signal';
 import {
-  readControlPlaneRecord,
-  writeControlPlaneRecord,
-} from '../persistence/sqlite-store';
-
-export interface WorkAdmissionPolicy {
-  schemaVersion: 1;
-  mode: 'normal' | 'exclusive_work';
-  allowedWorkId?: string;
-  allowReadOnlyDiagnostics: true;
-  reason?: string;
-  activatedAt?: string;
-  updatedAt: string;
-}
-
-const NAMESPACE = 'runtime_policy';
-const SCOPE = 'global';
-const KEY = 'work_admission';
-
-function normalPolicy(now = new Date().toISOString()): WorkAdmissionPolicy {
-  return {
-    schemaVersion: 1,
-    mode: 'normal',
-    allowReadOnlyDiagnostics: true,
-    updatedAt: now,
-  };
-}
+  WORK_ADMISSION_POLICY_KEY as KEY,
+  WORK_ADMISSION_POLICY_NAMESPACE as NAMESPACE,
+  WORK_ADMISSION_POLICY_SCOPE as SCOPE,
+  assertWorkAdmissionPolicyAllows,
+  normalWorkAdmissionPolicy as normalPolicy,
+  schedulerDispatchPolicyAllowed,
+  type WorkAdmissionPolicy,
+} from '../../../../packages/kernel/work/api/index';
+export type { WorkAdmissionPolicy } from '../../../../packages/kernel/work/api/index';
 
 export function readWorkAdmissionPolicy(controllerHome: string): WorkAdmissionPolicy {
   return readControlPlaneRecord<WorkAdmissionPolicy>(controllerHome, NAMESPACE, SCOPE, KEY)?.value
@@ -51,7 +36,7 @@ export function activateExclusiveWorkAdmission(
       : at,
     updatedAt: at,
   };
-  return writeControlPlaneRecord(controllerHome, {
+  const written = writeControlPlaneRecord(controllerHome, {
     namespace: NAMESPACE,
     scope: SCOPE,
     key: KEY,
@@ -60,12 +45,79 @@ export function activateExclusiveWorkAdmission(
     action: 'work_admission_exclusive',
     expectedRevision: current?.revision ?? null,
   }).value;
+  touchSchedulerWakeSignal(controllerHome, 'work-admission-policy');
+  return written;
+}
+
+export function activateConvergenceWorkAdmission(
+  controllerHome: string,
+  input: { reason: string; now?: string },
+): WorkAdmissionPolicy {
+  const at = input.now ?? new Date().toISOString();
+  const current = readControlPlaneRecord<WorkAdmissionPolicy>(controllerHome, NAMESPACE, SCOPE, KEY);
+  const value: WorkAdmissionPolicy = {
+    schemaVersion: 1,
+    mode: 'convergence',
+    allowReadOnlyDiagnostics: true,
+    reason: input.reason.slice(0, 500),
+    activatedAt: current?.value.mode === 'convergence'
+      ? current.value.activatedAt ?? at
+      : at,
+    updatedAt: at,
+  };
+  const written = writeControlPlaneRecord(controllerHome, {
+    namespace: NAMESPACE,
+    scope: SCOPE,
+    key: KEY,
+    schemaVersion: 1,
+    value,
+    action: 'work_admission_convergence',
+    expectedRevision: current?.revision ?? null,
+  }).value;
+  touchSchedulerWakeSignal(controllerHome, 'work-admission-policy');
+  return written;
+}
+
+export function transitionConvergenceToExclusiveWorkAdmission(
+  controllerHome: string,
+  input: { allowedWorkId: string; reason: string; now?: string },
+): WorkAdmissionPolicy {
+  const allowedWorkId = input.allowedWorkId.trim();
+  if (!allowedWorkId) throw new Error('WORK_ADMISSION_POLICY_INVALID: allowedWorkId is required');
+  const current = readControlPlaneRecord<WorkAdmissionPolicy>(controllerHome, NAMESPACE, SCOPE, KEY);
+  if (current?.value.mode === 'exclusive_work' && current.value.allowedWorkId === allowedWorkId) {
+    return current.value;
+  }
+  if (current?.value.mode !== 'convergence') {
+    throw new Error(`WORK_ADMISSION_TRANSITION_REQUIRES_CONVERGENCE:current=${current?.value.mode ?? 'normal'}`);
+  }
+  const at = input.now ?? new Date().toISOString();
+  const value: WorkAdmissionPolicy = {
+    schemaVersion: 1,
+    mode: 'exclusive_work',
+    allowedWorkId,
+    allowReadOnlyDiagnostics: true,
+    reason: input.reason.slice(0, 500),
+    activatedAt: at,
+    updatedAt: at,
+  };
+  const written = writeControlPlaneRecord(controllerHome, {
+    namespace: NAMESPACE,
+    scope: SCOPE,
+    key: KEY,
+    schemaVersion: 1,
+    value,
+    action: 'work_admission_convergence_to_exclusive',
+    expectedRevision: current.revision,
+  }).value;
+  touchSchedulerWakeSignal(controllerHome, 'work-admission-policy');
+  return written;
 }
 
 export function restoreNormalWorkAdmission(controllerHome: string, now = new Date().toISOString()): WorkAdmissionPolicy {
   const current = readControlPlaneRecord<WorkAdmissionPolicy>(controllerHome, NAMESPACE, SCOPE, KEY);
   const value = normalPolicy(now);
-  return writeControlPlaneRecord(controllerHome, {
+  const written = writeControlPlaneRecord(controllerHome, {
     namespace: NAMESPACE,
     scope: SCOPE,
     key: KEY,
@@ -74,20 +126,17 @@ export function restoreNormalWorkAdmission(controllerHome: string, now = new Dat
     action: 'work_admission_normal',
     expectedRevision: current?.revision ?? null,
   }).value;
+  touchSchedulerWakeSignal(controllerHome, 'work-admission-policy');
+  return written;
 }
 
 export function assertWorkAdmissionAllowed(
   controllerHome: string,
   input: { operation: 'create' | 'continue' | 'maintenance'; workId?: string },
 ): WorkAdmissionPolicy {
-  const policy = readWorkAdmissionPolicy(controllerHome);
-  if (policy.mode === 'normal' || input.operation === 'maintenance') return policy;
-  if (input.workId?.trim() === policy.allowedWorkId) return policy;
-  throw new Error(
-    `WORK_ADMISSION_BLOCKED:P0_EXCLUSIVE_WORK:operation=${input.operation}:allowed=${policy.allowedWorkId ?? 'none'}`,
-  );
+  return assertWorkAdmissionPolicyAllows(readWorkAdmissionPolicy(controllerHome), input);
 }
 
 export function schedulerDispatchAllowed(controllerHome: string): boolean {
-  return readWorkAdmissionPolicy(controllerHome).mode === 'normal';
+  return schedulerDispatchPolicyAllowed(readWorkAdmissionPolicy(controllerHome));
 }