prisma-risk / tsoracle / 26431025468

95%

Build Type

push

github

Committed by web-flow

Commit Message

feat(driver-openraft): format-migration observability and runbook (#467)

Adds opt-in observability and operator-facing documentation for the
zero-downtime format-migration activation path delivered by earlier
phases. No control-plane behavior changes: this commit only emits
signals at points the activation path already produces and documents
the rollout / no-downgrade contract.

**Observability module** (`crates/tsoracle-driver-openraft/src/observability.rs`).

A new `metrics` Cargo feature on `tsoracle-driver-openraft` (off by
default, mirroring `tsoracle-server`) plus a single module that owns
every `tsoracle.schema.*` metric name as a `const` and exposes one
emit helper per signal. The helpers compile to no-ops when the
feature is off, so call sites in the apply arm and the gate compile
unconditionally and embedders that do not want the `metrics`
dependency are unaffected.

Four gauges:
- `tsoracle.schema.active_write_version` — the node's current durable
  active write version. Set on boot/recovery and on a successful
  activation flip.
- `tsoracle.schema.min_readable_version` / `.max_readable_version` —
  the compile-time read-range constants, set once at boot.
- `tsoracle.schema.min_member_read_capability` — the lowest
  `max_readable_version` observed across all current members at the
  most recent gate run (the binding constraint on activation).

Five counters:
- `.format_version.proposed.total` — gate passed and a
  `SetFormatVersion` entry was proposed.
- `.committed.total` — the proposed entry was observed committed.
- `.applied.total` — apply succeeded: subset check passed, the cell
  flipped to `target`.
- `.noop_membership_subset.total` — apply was a no-op: the membership
  at the entry's log position was not a subset of its gated set.
- `.rejected_by_gate.total` — an activation was rejected before
  proposal because a member's `max_readable_version` was below the
  target.

**Emission sites** (`state_machine.rs`, `standalone.rs`).

The... (continued)

Coverage Stats

76 of 79 new or added lines in 3 files covered. (96.2%)

1 existing line in 1 file now uncovered.

12951 of 13564 relevant lines covered (95.48%)

383658.21 hits per line