Admit a workspace data export
What It Does
A permitted workspace administrator requests an immediate complete data export. Entitlement, reservation, minimum-interval and cluster-admission protections remain later design work.
The Flow
Authorize the customer execute action and enter admission; system staff access does not use this customer route. Check live non-sandbox eligibility, lock settings and reject suspension or an existing unfinished execution. Copy settings and cutoff into a queued execution and record allowance-use metadata and its access-widening audit event. The registered future job design describes planning, extraction, collection, assembly, verification and publication, but no generation dispatcher starts it.
When Something Fails
Return the route authorization refusal. No execution is admitted by an authorization refusal. Return the eligibility or conflict code and roll back admission. The prior workspace export state remains. Rollback execution and audit on write failure. A committed queued row occupies the active slot.
Idempotency and Concurrency
A repeat request is refused while a queued or running execution occupies the workspace’s single active slot; admission is not a reusable request-token operation. Admission locks the settings row and relies on the active-execution unique index as its database backstop.