feat: operator schema accept command for curated FK review (P5)

backend/src/workspaces/preprocessing-service.ts

@@ -10,6 +10,7 @@ import {
   type SessionInventoryRow,
 } from "./preprocessing-state.js";
 import type { DeterministicRuntimeConfigLease } from "./runtime-config-lease.js";
+import { readAnnotationsSync } from "./annotations-sync.js";
 
 export interface WorkspaceOperationResult {
   schemaVersion: 1;
@@ -262,6 +263,62 @@ export class WorkspacePreprocessingService {
     });
   }
 
+  async acceptSchema(options: { workspaceId: string; runId: string; yes?: boolean }): Promise<WorkspaceOperationResult> {
+    const runtime = await this.deps.acquireActiveRuntime(options.workspaceId);
+    const state = this.state(runtime.workspaceId);
+    if (options.yes !== true) {
+      return baseResult(runtime, "schema accept", "failed", "annotation_invalid", {
+        runId: options.runId,
+        warnings: ["accept requires --yes"],
+      });
+    }
+    if (!/^[0-9a-f]{32}$/.test(options.runId)) {
+      return baseResult(runtime, "schema accept", "failed", "annotation_invalid");
+    }
+    const candidate = state.readFkCandidates(options.runId);
+    if (candidate === undefined) {
+      return baseResult(runtime, "schema accept", "failed", "annotation_invalid", {
+        runId: options.runId,
+        warnings: ["candidate run is unavailable"],
+      });
+    }
+    const synced = readAnnotationsSync(this.deps.dataRoot, runtime.workspaceId, runtime.workspaceRevision);
+    if (synced === undefined || synced.contents.toString("utf8").trim() === "") {
+      return baseResult(runtime, "schema accept", "failed", "annotation_invalid", {
+        runId: options.runId,
+        warnings: ["curated annotations are not synchronized"],
+      });
+    }
+    // The harness parser validates the curated blob against the physical schema; the recorded
+    // candidate digest must round-trip and the blob digest must match the synced destination.
+    const payload = await this.runJsonStage(runtime, [
+      "schema", "check", "--reviewed-candidates", candidate.digest, "--json", "-c", "/dev/fd/3",
+    ]);
+    if (payload.annotations_digest !== synced.contentDigest
+      || payload.reviewed_candidates_digest !== candidate.digest
+      || Number(payload.orphan_count ?? 0) !== 0) {
+      return baseResult(runtime, "schema accept", "failed", "annotation_invalid", { runId: options.runId });
+    }
+    const review = state.writeFkReview(options.runId, {
+      reviewedCandidatesDigest: candidate.digest,
+      annotationsDigest: synced.contentDigest,
+      workspaceRevision: runtime.workspaceRevision,
+      blobId: synced.blobId,
+    });
+    const job = state.readJob(options.runId);
+    job.reviewDigest = review.digest;
+    if (!job.completedStages.includes("fk_review")) job.completedStages.push("fk_review");
+    state.writeJob(job);
+    return baseResult(runtime, "schema accept", "succeeded", "ok", {
+      runId: options.runId,
+      completedStages: [...job.completedStages],
+      artifactIdentities: [
+        { kind: "fk_review", digest: review.digest },
+        { kind: "annotations", digest: synced.contentDigest },
+      ],
+    });
+  }
+
   async indexSchema(options: { workspaceId: string; resumeRunId?: string }): Promise<WorkspaceOperationResult> {
     const scope = await this.startRun(options.workspaceId, "index-schema", options.resumeRunId);
     const semantic = await this.deps.semanticPreflight(scope.runtime.workspace);