Remove dry-run and create-only autoscaling modes

src/lib/server/autoscaling/schema.ts

@@ -34,4 +34,16 @@ export function ensureAutoscalingSchema(handle: Database.Database): void {
         );
         CREATE INDEX IF NOT EXISTS autoscaling_sample_retention ON autoscaling_samples(sampled_at);
     `);
+    // Removed modes must not silently gain permission to destroy lobbies.
+    // Keep ownership while delivered work settles through normal reconciliation.
+    handle.transaction(() => {
+        handle.prepare(`UPDATE autoscaling_authorizations SET revoked_at=?
+            WHERE claimed_at IS NULL AND revoked_at IS NULL AND policy_id IN
+                (SELECT id FROM autoscaling_policies WHERE mode IN ('dry-run','create-only'))`).run(Date.now());
+        handle.prepare(`UPDATE autoscaling_policies SET mode='off', settings=json_set(settings,'$.mode','off'),
+            revision=revision+1, paused_reason='This autoscaling mode was removed. Review and enable Create and destroy to resume.',
+            owns_map=CASE WHEN EXISTS (SELECT 1 FROM autoscaling_decisions WHERE policy_id=autoscaling_policies.id AND resolved=0)
+                THEN owns_map ELSE 0 END, updated_at=?
+            WHERE mode IN ('dry-run','create-only')`).run(new Date().toISOString());
+    })();
 }