worker-api-server.py

#!/usr/bin/env python3
"""Runner-only mTLS journal API; no command or infrastructure adapter routes."""

from __future__ import annotations

import argparse
import signal
import sys
import threading
from pathlib import Path

PACKAGE_ROOT = Path(__file__).resolve().parents[1]
sys.path.insert(0, str(PACKAGE_ROOT / "src"))

from control_plane_core.worker_api_service import (  # noqa: E402
    build_worker_api_service,
    validate_worker_api_configuration,
)


def main() -> int:
    parser = argparse.ArgumentParser(description="A2Z worker-only mTLS control API")
    parser.add_argument("--config", default="/etc/a2z-control-plane/worker-api.json")
    parser.add_argument("--check-config", action="store_true",
                        help="validate trust/configuration without opening the journal or listener")
    args = parser.parse_args()
    if args.check_config:
        validate_worker_api_configuration(args.config)
        print("ALLOW: worker API configuration and trust files are valid; no listener started")
        return 0
    server, store = build_worker_api_service(args.config)
    stopping = threading.Event()

    def request_stop(_signum, _frame) -> None:
        stopping.set()

    signal.signal(signal.SIGTERM, request_stop)
    signal.signal(signal.SIGINT, request_stop)
    failures: list[BaseException] = []

    def serve() -> None:
        try:
            server.serve_forever(poll_interval=0.5)
        except BaseException as exc:
            failures.append(exc)

    thread = threading.Thread(target=serve, name="a2z-worker-api", daemon=False)
    thread.start()
    try:
        while thread.is_alive() and not stopping.wait(0.25):
            pass
    finally:
        server.shutdown()
        thread.join(timeout=10)
        server.server_close()
        store.close()
    if thread.is_alive():
        raise RuntimeError("worker API server did not stop cleanly")
    if failures:
        raise RuntimeError("worker API server failed") from failures[0]
    return 0


if __name__ == "__main__":
    raise SystemExit(main())