3b5cf7a7d9
Comutator accounts.auto_send_enabled per cont: Auto OFF (default) tine randurile
la ingestie (submissions.held=1), worker-ul (claim_one AND held=0) le sare pana la
eliberare umana (per rand/bulk/auto-release OFF->ON). Snapshot held prin chokepoint
unic held_for_account pe toate caile de ingestie (API, import, reresolve, reactivare).
- schema/migrare: coloana held + index partial idx_submissions_held; auto_send_enabled
- API: echo onest held+motiv (US-010), ruta /prezentari/{id}/trimite-acum
- web: toggle header, modal confirmare tipata, buton Trimite per rand + Trimite toate,
banner coada tinuta imbatranita (L.142), contor "In asteptare (manual)"
- worker: expire_held (US-008, inchide gaura retentie PII), metrics held gauges
- ops: tools/carantina_held + runbook rollback (R4)
Nota review (/code-review high): re-snapshot held lipseste pe caile repune/corectie
(requeue_submission, post_corectie, bulk-fix) — de aliniat separat cu create_prezentari.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
78 lines
2.6 KiB
Python
78 lines
2.6 KiB
Python
#!/usr/bin/env python3
|
|
"""CLI carantina randuri tinute — atenuare hazard de rollback (PRD 5.19 Riscul R4).
|
|
|
|
Daca se face revert pe cod DUPA ce randuri au primit `held=1`, worker-ul pierde
|
|
filtrul `AND held=0` din `claim_one` -> ar trimite TOATE randurile tinute la RAR
|
|
(FINALIZATA e IREVERSIBILA). Acest helper carantineaza randurile tinute INAINTE
|
|
de un asemenea revert: le scoate din coada (`queued` -> `error`) cu mesajul
|
|
`ROLLBACK_QUARANTINE`, ca sa nu poata fi preluate de un worker fara filtrul held.
|
|
|
|
Adminul ruleaza pe masina gateway — nicio suprafata HTTP. Vezi runbook-ul
|
|
`docs/runbook-rollback-5.19.md` pentru procedura completa (inainte/dupa revert).
|
|
|
|
Utilizare:
|
|
python -m tools.carantina_held # carantineaza (scrie)
|
|
python -m tools.carantina_held --dry-run # doar numara, NU scrie
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
import sqlite3
|
|
import sys
|
|
|
|
from app.db import get_connection, init_db
|
|
|
|
# Randurile vizate: tinute manual, inca in coada. `sending`/`sent` NU se ating
|
|
# (FINALIZATA e terminal la RAR), iar `error`/`needs_*` nu pleaca oricum.
|
|
_WHERE = "held=1 AND status='queued'"
|
|
|
|
|
|
def _count(conn: sqlite3.Connection) -> int:
|
|
return int(conn.execute(f"SELECT COUNT(*) AS n FROM submissions WHERE {_WHERE}").fetchone()["n"])
|
|
|
|
|
|
def carantina(conn: sqlite3.Connection, dry_run: bool = False) -> int:
|
|
"""Carantineaza randurile tinute. Intoarce numarul de randuri afectate.
|
|
|
|
Cu `dry_run=True` doar numara (nu modifica nimic).
|
|
"""
|
|
n = _count(conn)
|
|
if dry_run or n == 0:
|
|
return n
|
|
conn.execute(
|
|
"UPDATE submissions SET status='error', rar_error='ROLLBACK_QUARANTINE', "
|
|
f"updated_at=datetime('now') WHERE {_WHERE}"
|
|
)
|
|
return n
|
|
|
|
|
|
def main(argv: list[str] | None = None) -> int:
|
|
parser = argparse.ArgumentParser(
|
|
description="Carantineaza randurile tinute (queued AND held=1) inainte de un revert de cod (PRD 5.19 R4)."
|
|
)
|
|
parser.add_argument(
|
|
"--dry-run", action="store_true",
|
|
help="doar numara randurile tinute, fara sa scrie in DB"
|
|
)
|
|
args = parser.parse_args(argv)
|
|
|
|
init_db() # asigura schema (submissions.held)
|
|
conn = get_connection()
|
|
try:
|
|
n = carantina(conn, dry_run=args.dry_run)
|
|
finally:
|
|
conn.close()
|
|
|
|
if args.dry_run:
|
|
print(f"[dry-run] {n} randuri tinute (queued AND held=1) ar fi carantinate. Nimic scris.")
|
|
elif n == 0:
|
|
print("Niciun rand tinut de carantinat (queued AND held=1).")
|
|
else:
|
|
print(f"{n} randuri carantinate: status='error', rar_error='ROLLBACK_QUARANTINE'.")
|
|
return 0
|
|
|
|
|
|
if __name__ == "__main__":
|
|
sys.exit(main())
|