@ever-works/activepieces-plugin 1.0.14 → 1.0.16

package/dist/index.cjs

@@ -491,7 +491,11 @@ var TASK_RESERVED_LABELS = Object.freeze([
   "release:promotion",
   "release:revert"
 ]);
-var TASK_RESERVED_LABEL_PREFIXES = Object.freeze(["release:", "provision-attempt-", "fleet:"]);
+var TASK_RESERVED_LABEL_PREFIXES = Object.freeze([
+  "release:",
+  "provision-attempt-",
+  "fleet:"
+]);
 var PLATFORM_DEFAULT_MERGE_POLICY = Object.freeze({
   allowAgentMerge: false,
   requireGreenGate: true,
@@ -1261,7 +1265,18 @@ var FLEET_JOB_DEFAULT_QUEUED_MAX_AGE_SEC = Object.freeze({
   // fails closed to), so an older reader's "unknown kind" answer is unchanged.
   // A control the owner no longer wants is cancelled with its child's row.
   "vm-create": 2 * 60 * 60,
-  "vm-control": 2 * 60 * 60
+  "vm-control": 2 * 60 * 60,
+  // Usage scan (FL-20). The plan proposed 15 minutes (one scan interval); like
+  // the kinds above it does NOT undercut the shortest existing default (the
+  // fallback an unknown kind fails closed to). A scan nobody leased is simply
+  // superseded: the dispatcher never enqueues a second while one is queued.
+  "usage-scan": 2 * 60 * 60,
+  // Actions runners on computers (FL-18). The plan proposed an hour for an
+  // install and ten minutes for a control; like FL-16's kinds they do NOT
+  // undercut the shortest existing default (the fallback an unknown kind fails
+  // closed to), so an older reader's answer for an unknown kind is unchanged.
+  "runner-install": 2 * 60 * 60,
+  "runner-control": 2 * 60 * 60
 });
 var FLEET_JOB_MAX_QUEUED_MAX_AGE_SEC = 7 * 24 * 60 * 60;
 var FLEET_AGENT_EXECUTION_MAX_INSTRUCTIONS_BYTES = 160 * 1024;
@@ -1603,7 +1618,7 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     route: GET("/api/fleet/nodes/{id}/desktop/screenshot"),
     cli: "fleet desktop screenshot"
   }),
-  read("fleet_desktop_displays", "desktop", "FL-07", "FLEET_DESKTOP_ENABLED", "planned", {
+  read("fleet_desktop_displays", "desktop", "FL-07", "FLEET_DESKTOP_ENABLED", "live", {
     route: GET("/api/fleet/nodes/{id}/desktop/displays"),
     cli: "fleet desktop displays"
   }),
@@ -1877,6 +1892,9 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     route: GET("/api/fleet/checkouts/{id}/changes"),
     cli: "fleet checkouts changes"
   }),
+  read("fleet_checkouts_pull_request_get", "checkouts", "FL-06", "FLEET_CHECKOUTS_ENABLED", "planned", {
+    route: GET("/api/fleet/checkouts/{id}/pull-request")
+  }),
   act("fleet_checkouts_create", "checkouts", "FL-14", "FLEET_CHECKOUTS_ENABLED", "live", plain("machine.run"), {
     route: POST("/api/fleet/checkouts"),
     cli: "fleet checkouts create",
@@ -1957,9 +1975,9 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     waitable: true,
     alwaysHeld: true
   }),
-  // ── cloud (FL-17) ── P1 shipped: providers, create, power, destroy, usage. A create, a power
-  // change and a destroy are held for the owner's approval by the Agent tools
-  // (`agent-fleet-cloud-tools.ts`); the idle policy arrives with P2.
+  // ── cloud (FL-17) ── P1 shipped providers, create, power, destroy, usage; P2 the idle policy
+  // (`PUT` answers the same as `PATCH`). A create, a power change and a destroy are held for the
+  // owner's approval by the Agent tools (`agent-fleet-cloud-tools.ts`).
   read("fleet_cloud_list", "view", "FL-17", "FLEET_CLOUD_ENABLED", "live", {
     phase: "P3",
     route: GET("/api/fleet/cloud"),
@@ -1998,18 +2016,20 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     waitable: true,
     alwaysHeld: true
   }),
-  act("fleet_cloud_idle_policy", "machines", "FL-17", "FLEET_CLOUD_ENABLED", "planned", plain("machine.admin"), {
+  act("fleet_cloud_idle_policy", "machines", "FL-17", "FLEET_CLOUD_ENABLED", "live", plain("machine.admin"), {
     phase: "P3",
     route: PATCH("/api/fleet/cloud/{id}/idle-policy"),
     cli: "fleet cloud idle-policy"
   }),
-  // ── runners (FL-18) ──
-  read("fleet_runners_list", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "planned", {
+  // ── runners (FL-18) ── P1 shipped: list, install, start / stop / restart, remove. An install, a
+  // stop, a restart and a remove asked by an Agent are held for the owner's approval
+  // (`agent-fleet-runners-tools.ts`). P2: the Actions jobs read and Cancel workflow run (always held for an Agent).
+  read("fleet_runners_list", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "live", {
     phase: "P3",
     route: GET("/api/fleet/nodes/{id}/runners"),
     cli: "fleet runners list"
   }),
-  read("fleet_runners_jobs", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "planned", {
+  read("fleet_runners_jobs", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "live", {
     phase: "P3",
     route: GET("/api/fleet/runners/jobs"),
     cli: "fleet runners jobs"
@@ -2019,23 +2039,29 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     confirm("machine.admin"),
-    { phase: "P3", route: POST("/api/fleet/nodes/{id}/runners"), cli: "fleet runners install", waitable: true }
+    {
+      phase: "P3",
+      route: POST("/api/fleet/nodes/{id}/runners"),
+      cli: "fleet runners install",
+      waitable: true,
+      alwaysHeld: true
+    }
   ),
   act(
     "fleet_runners_action",
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     confirm("machine.admin"),
     {
       phase: "P3",
       route: POST("/api/fleet/nodes/{id}/runners/{runnerId}/{action}"),
       cli: "fleet runners action",
       waitable: true,
-      confirmationNote: "plain to start; confirm to stop and restart"
+      confirmationNote: "plain to start; confirm to stop and restart (an Agent's stop or restart is held for the owner)"
     }
   ),
   act(
@@ -2043,21 +2069,34 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     typed("write.destructive"),
-    { phase: "P3", route: DELETE("/api/fleet/nodes/{id}/runners/{runnerId}"), cli: "fleet runners remove" }
+    {
+      phase: "P3",
+      route: POST("/api/fleet/nodes/{id}/runners/{runnerId}/remove"),
+      cli: "fleet runners remove",
+      waitable: true,
+      alwaysHeld: true
+    }
   ),
   act(
     "fleet_runners_cancel_run",
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     confirm("machine.admin"),
-    { phase: "P3", route: POST("/api/fleet/runners/jobs/{jobId}/cancel"), cli: "fleet runners cancel-run" }
+    {
+      phase: "P3",
+      route: POST("/api/fleet/runners/jobs/cancel"),
+      cli: "fleet runners cancel-run",
+      alwaysHeld: true
+    }
   ),
-  // ── usage (FL-20) ──
-  read("fleet_usage_get", "view", "FL-20", "FLEET_USAGE_SCAN_ENABLED", "planned", {
+  // ── usage (FL-20) ── P1 shipped: the Usage object (totals, by model, by computer, busiest
+  // checkouts, sessions) every surface renders, read-only, with the payer sentence in `note`.
+  read("fleet_usage_get", "view", "FL-20", "FLEET_USAGE_SCAN_ENABLED", "live", {
+    phase: "P3",
     route: GET("/api/fleet/usage"),
     cli: "fleet usage"
   }),
@@ -2228,10 +2267,74 @@ var FLEET_VIRTUAL_SYSTEMS = [
     approxDownloadGiB: 0.7
   }
 ];
-var FLEET_VIRTUAL_SYSTEM_IDS = FLEET_VIRTUAL_SYSTEMS.map((system) => system.id);
+var FLEET_VIRTUAL_SYSTEM_IDS = FLEET_VIRTUAL_SYSTEMS.map(
+  (system) => system.id
+);
 var FLEET_VIRTUAL_ENROLL_TIMEOUT_MS = 20 * 60 * 1e3;
 var FLEET_CLOUD_OPTIONS_CACHE_MS = 10 * 60 * 1e3;
 var HOUR_MS2 = 60 * 60 * 1e3;
+var FLEET_CLOUD_USAGE_FRESH_MS = 5 * 60 * 1e3;
+var FLEET_USAGE_SCAN_INTERVAL_MS = 15 * 60 * 1e3;
+var FLEET_USAGE_REPORT_MAX_BYTES = 192 * 1024;
+var FLEET_USAGE_ZERO_TOKENS = Object.freeze({
+  in: 0,
+  out: 0,
+  cacheRead: 0,
+  cacheWrite: 0
+});
+var FLEET_ACTIONS_RUNNERS_CLOSED_REFRESH_MS = 5 * 6e4;
+var FLEET_ACTIONS_RUNNER_DOWNLOADS_CACHE_MS = 60 * 6e4;
+var FLEET_DESKTOP_CONTROL_REASON_FIXES = Object.freeze({
+  "control-not-allowed": { command: "ever-works-node helper control allow" },
+  "permission-accessibility": { settingsPath: "System Settings \u2192 Privacy & Security \u2192 Accessibility" },
+  "input-unavailable": {}
+});
+var FLEET_DESKTOP_REASONS = [
+  "kind-unsupported",
+  "wayland-unsupported",
+  "helper-missing",
+  "helper-unadmitted",
+  "helper-untrusted",
+  "no-display-session",
+  "permission-screen-recording",
+  "permission-accessibility"
+];
+var FLEET_DESKTOP_WATCH_REASONS = FLEET_DESKTOP_REASONS.filter(
+  (reason) => reason !== "permission-accessibility"
+);
+var FLEET_DESKTOP_MAX_REASONS = FLEET_DESKTOP_REASONS.length;
+var FLEET_DESKTOP_REASON_FIXES = Object.freeze({
+  "kind-unsupported": Object.freeze({}),
+  "wayland-unsupported": Object.freeze({}),
+  "helper-missing": Object.freeze({ command: "ever-works-node helper install" }),
+  "helper-unadmitted": Object.freeze({ command: "ever-works-node helper admit" }),
+  "helper-untrusted": Object.freeze({ command: "ever-works-node helper status" }),
+  "no-display-session": Object.freeze({}),
+  "permission-screen-recording": Object.freeze({
+    settingsPath: "System Settings \u2192 Privacy & Security \u2192 Screen Recording"
+  }),
+  "permission-accessibility": Object.freeze({ settingsPath: "System Settings \u2192 Privacy & Security \u2192 Accessibility" })
+});
+var FLEET_DESKTOP_BLOCKER_CODES = Object.freeze({
+  "kill-switch": "kill_switch",
+  "kind-unsupported": "unsupported_on_node",
+  offline: "unreachable",
+  "consent-missing": "consent_missing",
+  "permission-denied": "permission_denied",
+  "wayland-unsupported": "unsupported_on_node",
+  "helper-missing": "unsupported_on_node",
+  "helper-unadmitted": "unsupported_on_node",
+  "helper-untrusted": "unsupported_on_node",
+  "no-display-session": "unsupported_on_node",
+  "permission-screen-recording": "unsupported_on_node",
+  "link-unavailable": "unreachable"
+});
+var FLEET_DESKTOP_VIEW_CEILING_MS = 4 * 60 * 6e4;
+var FLEET_DESKTOP_MAX_PUBLISH_BYTES = 512 * 1024;
+var FLEET_DESKTOP_RECORDING_MAX_BYTES = 200 * 1024 * 1024;
+var FLEET_DESKTOP_RECORDING_MAX_MS = 4 * 60 * 6e4;
+var FLEET_DESKTOP_RECORDING_MAGIC = new Uint8Array([69, 87, 82, 49]);
+var FLEET_DESKTOP_RECORDING_MAX_CHUNK_BYTES = 64 * 1024 * 1024;
 var EMAIL_INBOX_DEFAULT_DAILY_CAP = 100;
 var EMAIL_INBOX_BURST_SENDS = 10;
 var EMAIL_INBOX_BURST_RECIPIENTS = 20;
@@ -2950,7 +3053,14 @@ var PLUGIN_CAPABILITIES = {
   // `capabilities/machine-provider.interface.ts`. Appended **last**, so every
   // existing constant keeps its value and its position, and landed in the same
   // change as the `machine-provider` category in `plugin-manifest.types.ts`.
-  MACHINE_PROVIDER: "machine-provider"
+  MACHINE_PROVIDER: "machine-provider",
+  // Actions runners on computers (FL-18, CONTRACTS R-14) — GitHub's self-hosted
+  // runner API through the Ever Works GitHub App (`github-actions-runners`),
+  // consumed only through `ActionsRunnersFacadeService`; see
+  // `capabilities/actions-runners.interface.ts`. Appended last, so every
+  // existing constant keeps its value and its position; no category is added
+  // (the plugin is an `integration`, which exists).
+  ACTIONS_RUNNERS: "actions-runners"
 };
 var ALL_PLUGIN_CAPABILITIES = Object.values(PLUGIN_CAPABILITIES);
 function initializePipelineState(stepDefinitions) {
@@ -3205,6 +3315,161 @@ function buildErrorPipelineResult(error, base) {
 function buildCancelledPipelineResult(base) {
   return buildErrorPipelineResult("Pipeline cancelled", base);
 }
+function zod3ParsedType(data) {
+  switch (typeof data) {
+    case "undefined":
+      return "undefined";
+    case "string":
+      return "string";
+    case "number":
+      return Number.isNaN(data) ? "nan" : "number";
+    case "boolean":
+      return "boolean";
+    case "function":
+      return "function";
+    case "bigint":
+      return "bigint";
+    case "symbol":
+      return "symbol";
+    case "object": {
+      if (Array.isArray(data)) return "array";
+      if (data === null) return "null";
+      const thenable = data;
+      if (typeof thenable.then === "function" && typeof thenable.catch === "function") return "promise";
+      if (data instanceof Map) return "map";
+      if (data instanceof Set) return "set";
+      if (data instanceof Date) return "date";
+      return "object";
+    }
+    default:
+      return "unknown";
+  }
+}
+function joinValues(values, separator = " | ") {
+  return values.map((value) => typeof value === "string" ? `'${value}'` : value).join(separator);
+}
+function bigIntSafe(_key, value) {
+  return typeof value === "bigint" ? value.toString() : value;
+}
+function schemaType(issue) {
+  return issue.inst?._zod?.def?.type;
+}
+var ZOD3_EXPECTED = {
+  record: "object",
+  tuple: "array"
+};
+var ZOD3_FORMAT = {
+  guid: "uuid",
+  ipv4: "ip",
+  ipv6: "ip",
+  cidrv4: "cidr",
+  cidrv6: "cidr"
+};
+var ZOD4_ONLY_FORMATS = /* @__PURE__ */ new Set(["lowercase", "uppercase", "e164", "ksuid", "xid", "mac", "hex", "hash"]);
+function invalidType(issue) {
+  if (issue.input === void 0) return "Required";
+  if (issue.expected === "date" && issue.input instanceof Date) return "Invalid date";
+  const received = zod3ParsedType(issue.input);
+  if (issue.expected === "int") {
+    return typeof issue.input === "number" ? "Expected integer, received float" : `Expected number, received ${received}`;
+  }
+  const expected = ZOD3_EXPECTED[issue.expected ?? ""] ?? issue.expected;
+  return `Expected ${expected}, received ${received}`;
+}
+function invalidValue(issue) {
+  const values = issue.values ?? [];
+  if (schemaType(issue) === "literal") {
+    return `Invalid literal value, expected ${JSON.stringify(values.length === 1 ? values[0] : values, bigIntSafe)}`;
+  }
+  if (issue.input === void 0) return "Required";
+  const stringEnum = values.every((value) => typeof value === "string");
+  const input = issue.input;
+  if (stringEnum && typeof input !== "string" || typeof input !== "string" && typeof input !== "number") {
+    return `Expected ${joinValues(values)}, received ${zod3ParsedType(input)}`;
+  }
+  return `Invalid enum value. Expected ${joinValues(values)}, received '${String(input)}'`;
+}
+function invalidFormat(issue) {
+  const format = issue.format ?? "";
+  switch (format) {
+    case "regex":
+      return "Invalid";
+    case "starts_with":
+      return `Invalid input: must start with "${issue.prefix}"`;
+    case "ends_with":
+      return `Invalid input: must end with "${issue.suffix}"`;
+    case "includes":
+      return `Invalid input: must include "${issue.includes}"`;
+    default:
+      if (!format || ZOD4_ONLY_FORMATS.has(format)) return void 0;
+      return `Invalid ${ZOD3_FORMAT[format] ?? format}`;
+  }
+}
+function tooSmall(issue) {
+  const { exact, inclusive, minimum } = issue;
+  switch (issue.origin) {
+    case "array":
+      return `Array must contain ${exact ? "exactly" : inclusive ? "at least" : "more than"} ${minimum} element(s)`;
+    case "string":
+      return `String must contain ${exact ? "exactly" : inclusive ? "at least" : "over"} ${minimum} character(s)`;
+    case "number":
+    case "int":
+    case "bigint":
+      return `Number must be ${exact ? "exactly equal to " : inclusive ? "greater than or equal to " : "greater than "}${minimum}`;
+    case "date":
+      return `Date must be ${exact ? "exactly equal to " : inclusive ? "greater than or equal to " : "greater than "}${new Date(Number(minimum))}`;
+    default:
+      return "Invalid input";
+  }
+}
+function tooBig(issue) {
+  const { exact, inclusive, maximum } = issue;
+  switch (issue.origin) {
+    case "array":
+      return `Array must contain ${exact ? "exactly" : inclusive ? "at most" : "less than"} ${maximum} element(s)`;
+    case "string":
+      return `String must contain ${exact ? "exactly" : inclusive ? "at most" : "under"} ${maximum} character(s)`;
+    case "number":
+    case "int":
+      return `Number must be ${exact ? "exactly" : inclusive ? "less than or equal to" : "less than"} ${maximum}`;
+    case "bigint":
+      return `BigInt must be ${exact ? "exactly" : inclusive ? "less than or equal to" : "less than"} ${maximum}`;
+    case "date":
+      return `Date must be ${exact ? "exactly" : inclusive ? "smaller than or equal to" : "smaller than"} ${new Date(Number(maximum))}`;
+    default:
+      return "Invalid input";
+  }
+}
+function zod3ErrorMessage(issue) {
+  switch (issue.code) {
+    case "invalid_type":
+      return invalidType(issue);
+    case "invalid_value":
+      return invalidValue(issue);
+    case "unrecognized_keys":
+      return `Unrecognized key(s) in object: ${joinValues(issue.keys ?? [], ", ")}`;
+    case "invalid_union":
+      if (issue.discriminator !== void 0 && issue.options) {
+        return `Invalid discriminator value. Expected ${joinValues(issue.options)}`;
+      }
+      return "Invalid input";
+    case "invalid_format":
+      return invalidFormat(issue);
+    case "too_small":
+      return tooSmall(issue);
+    case "too_big":
+      return tooBig(issue);
+    case "not_multiple_of":
+      return `Number must be a multiple of ${issue.divisor}`;
+    case "custom":
+      return "Invalid input";
+    case "invalid_key":
+      return issue.issues?.[0]?.message;
+    default:
+      return void 0;
+  }
+}
+var ZOD3_ERROR_MESSAGES = Object.freeze({ error: zod3ErrorMessage });
 
 // src/types.ts
 var ACTIVEPIECES_STEP_IDS = [

package/dist/index.js

@@ -464,7 +464,11 @@ var TASK_RESERVED_LABELS = Object.freeze([
   "release:promotion",
   "release:revert"
 ]);
-var TASK_RESERVED_LABEL_PREFIXES = Object.freeze(["release:", "provision-attempt-", "fleet:"]);
+var TASK_RESERVED_LABEL_PREFIXES = Object.freeze([
+  "release:",
+  "provision-attempt-",
+  "fleet:"
+]);
 var PLATFORM_DEFAULT_MERGE_POLICY = Object.freeze({
   allowAgentMerge: false,
   requireGreenGate: true,
@@ -1234,7 +1238,18 @@ var FLEET_JOB_DEFAULT_QUEUED_MAX_AGE_SEC = Object.freeze({
   // fails closed to), so an older reader's "unknown kind" answer is unchanged.
   // A control the owner no longer wants is cancelled with its child's row.
   "vm-create": 2 * 60 * 60,
-  "vm-control": 2 * 60 * 60
+  "vm-control": 2 * 60 * 60,
+  // Usage scan (FL-20). The plan proposed 15 minutes (one scan interval); like
+  // the kinds above it does NOT undercut the shortest existing default (the
+  // fallback an unknown kind fails closed to). A scan nobody leased is simply
+  // superseded: the dispatcher never enqueues a second while one is queued.
+  "usage-scan": 2 * 60 * 60,
+  // Actions runners on computers (FL-18). The plan proposed an hour for an
+  // install and ten minutes for a control; like FL-16's kinds they do NOT
+  // undercut the shortest existing default (the fallback an unknown kind fails
+  // closed to), so an older reader's answer for an unknown kind is unchanged.
+  "runner-install": 2 * 60 * 60,
+  "runner-control": 2 * 60 * 60
 });
 var FLEET_JOB_MAX_QUEUED_MAX_AGE_SEC = 7 * 24 * 60 * 60;
 var FLEET_AGENT_EXECUTION_MAX_INSTRUCTIONS_BYTES = 160 * 1024;
@@ -1576,7 +1591,7 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     route: GET("/api/fleet/nodes/{id}/desktop/screenshot"),
     cli: "fleet desktop screenshot"
   }),
-  read("fleet_desktop_displays", "desktop", "FL-07", "FLEET_DESKTOP_ENABLED", "planned", {
+  read("fleet_desktop_displays", "desktop", "FL-07", "FLEET_DESKTOP_ENABLED", "live", {
     route: GET("/api/fleet/nodes/{id}/desktop/displays"),
     cli: "fleet desktop displays"
   }),
@@ -1850,6 +1865,9 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     route: GET("/api/fleet/checkouts/{id}/changes"),
     cli: "fleet checkouts changes"
   }),
+  read("fleet_checkouts_pull_request_get", "checkouts", "FL-06", "FLEET_CHECKOUTS_ENABLED", "planned", {
+    route: GET("/api/fleet/checkouts/{id}/pull-request")
+  }),
   act("fleet_checkouts_create", "checkouts", "FL-14", "FLEET_CHECKOUTS_ENABLED", "live", plain("machine.run"), {
     route: POST("/api/fleet/checkouts"),
     cli: "fleet checkouts create",
@@ -1930,9 +1948,9 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     waitable: true,
     alwaysHeld: true
   }),
-  // ── cloud (FL-17) ── P1 shipped: providers, create, power, destroy, usage. A create, a power
-  // change and a destroy are held for the owner's approval by the Agent tools
-  // (`agent-fleet-cloud-tools.ts`); the idle policy arrives with P2.
+  // ── cloud (FL-17) ── P1 shipped providers, create, power, destroy, usage; P2 the idle policy
+  // (`PUT` answers the same as `PATCH`). A create, a power change and a destroy are held for the
+  // owner's approval by the Agent tools (`agent-fleet-cloud-tools.ts`).
   read("fleet_cloud_list", "view", "FL-17", "FLEET_CLOUD_ENABLED", "live", {
     phase: "P3",
     route: GET("/api/fleet/cloud"),
@@ -1971,18 +1989,20 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     waitable: true,
     alwaysHeld: true
   }),
-  act("fleet_cloud_idle_policy", "machines", "FL-17", "FLEET_CLOUD_ENABLED", "planned", plain("machine.admin"), {
+  act("fleet_cloud_idle_policy", "machines", "FL-17", "FLEET_CLOUD_ENABLED", "live", plain("machine.admin"), {
     phase: "P3",
     route: PATCH("/api/fleet/cloud/{id}/idle-policy"),
     cli: "fleet cloud idle-policy"
   }),
-  // ── runners (FL-18) ──
-  read("fleet_runners_list", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "planned", {
+  // ── runners (FL-18) ── P1 shipped: list, install, start / stop / restart, remove. An install, a
+  // stop, a restart and a remove asked by an Agent are held for the owner's approval
+  // (`agent-fleet-runners-tools.ts`). P2: the Actions jobs read and Cancel workflow run (always held for an Agent).
+  read("fleet_runners_list", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "live", {
     phase: "P3",
     route: GET("/api/fleet/nodes/{id}/runners"),
     cli: "fleet runners list"
   }),
-  read("fleet_runners_jobs", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "planned", {
+  read("fleet_runners_jobs", "view", "FL-18", "FLEET_ACTIONS_RUNNERS_ENABLED", "live", {
     phase: "P3",
     route: GET("/api/fleet/runners/jobs"),
     cli: "fleet runners jobs"
@@ -1992,23 +2012,29 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     confirm("machine.admin"),
-    { phase: "P3", route: POST("/api/fleet/nodes/{id}/runners"), cli: "fleet runners install", waitable: true }
+    {
+      phase: "P3",
+      route: POST("/api/fleet/nodes/{id}/runners"),
+      cli: "fleet runners install",
+      waitable: true,
+      alwaysHeld: true
+    }
   ),
   act(
     "fleet_runners_action",
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     confirm("machine.admin"),
     {
       phase: "P3",
       route: POST("/api/fleet/nodes/{id}/runners/{runnerId}/{action}"),
       cli: "fleet runners action",
       waitable: true,
-      confirmationNote: "plain to start; confirm to stop and restart"
+      confirmationNote: "plain to start; confirm to stop and restart (an Agent's stop or restart is held for the owner)"
     }
   ),
   act(
@@ -2016,21 +2042,34 @@ var FLEET_TOOL_CATALOGUE = Object.freeze([
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     typed("write.destructive"),
-    { phase: "P3", route: DELETE("/api/fleet/nodes/{id}/runners/{runnerId}"), cli: "fleet runners remove" }
+    {
+      phase: "P3",
+      route: POST("/api/fleet/nodes/{id}/runners/{runnerId}/remove"),
+      cli: "fleet runners remove",
+      waitable: true,
+      alwaysHeld: true
+    }
   ),
   act(
     "fleet_runners_cancel_run",
     "machines",
     "FL-18",
     "FLEET_ACTIONS_RUNNERS_ENABLED",
-    "planned",
+    "live",
     confirm("machine.admin"),
-    { phase: "P3", route: POST("/api/fleet/runners/jobs/{jobId}/cancel"), cli: "fleet runners cancel-run" }
+    {
+      phase: "P3",
+      route: POST("/api/fleet/runners/jobs/cancel"),
+      cli: "fleet runners cancel-run",
+      alwaysHeld: true
+    }
   ),
-  // ── usage (FL-20) ──
-  read("fleet_usage_get", "view", "FL-20", "FLEET_USAGE_SCAN_ENABLED", "planned", {
+  // ── usage (FL-20) ── P1 shipped: the Usage object (totals, by model, by computer, busiest
+  // checkouts, sessions) every surface renders, read-only, with the payer sentence in `note`.
+  read("fleet_usage_get", "view", "FL-20", "FLEET_USAGE_SCAN_ENABLED", "live", {
+    phase: "P3",
     route: GET("/api/fleet/usage"),
     cli: "fleet usage"
   }),
@@ -2201,10 +2240,74 @@ var FLEET_VIRTUAL_SYSTEMS = [
     approxDownloadGiB: 0.7
   }
 ];
-var FLEET_VIRTUAL_SYSTEM_IDS = FLEET_VIRTUAL_SYSTEMS.map((system) => system.id);
+var FLEET_VIRTUAL_SYSTEM_IDS = FLEET_VIRTUAL_SYSTEMS.map(
+  (system) => system.id
+);
 var FLEET_VIRTUAL_ENROLL_TIMEOUT_MS = 20 * 60 * 1e3;
 var FLEET_CLOUD_OPTIONS_CACHE_MS = 10 * 60 * 1e3;
 var HOUR_MS2 = 60 * 60 * 1e3;
+var FLEET_CLOUD_USAGE_FRESH_MS = 5 * 60 * 1e3;
+var FLEET_USAGE_SCAN_INTERVAL_MS = 15 * 60 * 1e3;
+var FLEET_USAGE_REPORT_MAX_BYTES = 192 * 1024;
+var FLEET_USAGE_ZERO_TOKENS = Object.freeze({
+  in: 0,
+  out: 0,
+  cacheRead: 0,
+  cacheWrite: 0
+});
+var FLEET_ACTIONS_RUNNERS_CLOSED_REFRESH_MS = 5 * 6e4;
+var FLEET_ACTIONS_RUNNER_DOWNLOADS_CACHE_MS = 60 * 6e4;
+var FLEET_DESKTOP_CONTROL_REASON_FIXES = Object.freeze({
+  "control-not-allowed": { command: "ever-works-node helper control allow" },
+  "permission-accessibility": { settingsPath: "System Settings \u2192 Privacy & Security \u2192 Accessibility" },
+  "input-unavailable": {}
+});
+var FLEET_DESKTOP_REASONS = [
+  "kind-unsupported",
+  "wayland-unsupported",
+  "helper-missing",
+  "helper-unadmitted",
+  "helper-untrusted",
+  "no-display-session",
+  "permission-screen-recording",
+  "permission-accessibility"
+];
+var FLEET_DESKTOP_WATCH_REASONS = FLEET_DESKTOP_REASONS.filter(
+  (reason) => reason !== "permission-accessibility"
+);
+var FLEET_DESKTOP_MAX_REASONS = FLEET_DESKTOP_REASONS.length;
+var FLEET_DESKTOP_REASON_FIXES = Object.freeze({
+  "kind-unsupported": Object.freeze({}),
+  "wayland-unsupported": Object.freeze({}),
+  "helper-missing": Object.freeze({ command: "ever-works-node helper install" }),
+  "helper-unadmitted": Object.freeze({ command: "ever-works-node helper admit" }),
+  "helper-untrusted": Object.freeze({ command: "ever-works-node helper status" }),
+  "no-display-session": Object.freeze({}),
+  "permission-screen-recording": Object.freeze({
+    settingsPath: "System Settings \u2192 Privacy & Security \u2192 Screen Recording"
+  }),
+  "permission-accessibility": Object.freeze({ settingsPath: "System Settings \u2192 Privacy & Security \u2192 Accessibility" })
+});
+var FLEET_DESKTOP_BLOCKER_CODES = Object.freeze({
+  "kill-switch": "kill_switch",
+  "kind-unsupported": "unsupported_on_node",
+  offline: "unreachable",
+  "consent-missing": "consent_missing",
+  "permission-denied": "permission_denied",
+  "wayland-unsupported": "unsupported_on_node",
+  "helper-missing": "unsupported_on_node",
+  "helper-unadmitted": "unsupported_on_node",
+  "helper-untrusted": "unsupported_on_node",
+  "no-display-session": "unsupported_on_node",
+  "permission-screen-recording": "unsupported_on_node",
+  "link-unavailable": "unreachable"
+});
+var FLEET_DESKTOP_VIEW_CEILING_MS = 4 * 60 * 6e4;
+var FLEET_DESKTOP_MAX_PUBLISH_BYTES = 512 * 1024;
+var FLEET_DESKTOP_RECORDING_MAX_BYTES = 200 * 1024 * 1024;
+var FLEET_DESKTOP_RECORDING_MAX_MS = 4 * 60 * 6e4;
+var FLEET_DESKTOP_RECORDING_MAGIC = new Uint8Array([69, 87, 82, 49]);
+var FLEET_DESKTOP_RECORDING_MAX_CHUNK_BYTES = 64 * 1024 * 1024;
 var EMAIL_INBOX_DEFAULT_DAILY_CAP = 100;
 var EMAIL_INBOX_BURST_SENDS = 10;
 var EMAIL_INBOX_BURST_RECIPIENTS = 20;
@@ -2923,7 +3026,14 @@ var PLUGIN_CAPABILITIES = {
   // `capabilities/machine-provider.interface.ts`. Appended **last**, so every
   // existing constant keeps its value and its position, and landed in the same
   // change as the `machine-provider` category in `plugin-manifest.types.ts`.
-  MACHINE_PROVIDER: "machine-provider"
+  MACHINE_PROVIDER: "machine-provider",
+  // Actions runners on computers (FL-18, CONTRACTS R-14) — GitHub's self-hosted
+  // runner API through the Ever Works GitHub App (`github-actions-runners`),
+  // consumed only through `ActionsRunnersFacadeService`; see
+  // `capabilities/actions-runners.interface.ts`. Appended last, so every
+  // existing constant keeps its value and its position; no category is added
+  // (the plugin is an `integration`, which exists).
+  ACTIONS_RUNNERS: "actions-runners"
 };
 var ALL_PLUGIN_CAPABILITIES = Object.values(PLUGIN_CAPABILITIES);
 function initializePipelineState(stepDefinitions) {
@@ -3178,6 +3288,161 @@ function buildErrorPipelineResult(error, base) {
 function buildCancelledPipelineResult(base) {
   return buildErrorPipelineResult("Pipeline cancelled", base);
 }
+function zod3ParsedType(data) {
+  switch (typeof data) {
+    case "undefined":
+      return "undefined";
+    case "string":
+      return "string";
+    case "number":
+      return Number.isNaN(data) ? "nan" : "number";
+    case "boolean":
+      return "boolean";
+    case "function":
+      return "function";
+    case "bigint":
+      return "bigint";
+    case "symbol":
+      return "symbol";
+    case "object": {
+      if (Array.isArray(data)) return "array";
+      if (data === null) return "null";
+      const thenable = data;
+      if (typeof thenable.then === "function" && typeof thenable.catch === "function") return "promise";
+      if (data instanceof Map) return "map";
+      if (data instanceof Set) return "set";
+      if (data instanceof Date) return "date";
+      return "object";
+    }
+    default:
+      return "unknown";
+  }
+}
+function joinValues(values, separator = " | ") {
+  return values.map((value) => typeof value === "string" ? `'${value}'` : value).join(separator);
+}
+function bigIntSafe(_key, value) {
+  return typeof value === "bigint" ? value.toString() : value;
+}
+function schemaType(issue) {
+  return issue.inst?._zod?.def?.type;
+}
+var ZOD3_EXPECTED = {
+  record: "object",
+  tuple: "array"
+};
+var ZOD3_FORMAT = {
+  guid: "uuid",
+  ipv4: "ip",
+  ipv6: "ip",
+  cidrv4: "cidr",
+  cidrv6: "cidr"
+};
+var ZOD4_ONLY_FORMATS = /* @__PURE__ */ new Set(["lowercase", "uppercase", "e164", "ksuid", "xid", "mac", "hex", "hash"]);
+function invalidType(issue) {
+  if (issue.input === void 0) return "Required";
+  if (issue.expected === "date" && issue.input instanceof Date) return "Invalid date";
+  const received = zod3ParsedType(issue.input);
+  if (issue.expected === "int") {
+    return typeof issue.input === "number" ? "Expected integer, received float" : `Expected number, received ${received}`;
+  }
+  const expected = ZOD3_EXPECTED[issue.expected ?? ""] ?? issue.expected;
+  return `Expected ${expected}, received ${received}`;
+}
+function invalidValue(issue) {
+  const values = issue.values ?? [];
+  if (schemaType(issue) === "literal") {
+    return `Invalid literal value, expected ${JSON.stringify(values.length === 1 ? values[0] : values, bigIntSafe)}`;
+  }
+  if (issue.input === void 0) return "Required";
+  const stringEnum = values.every((value) => typeof value === "string");
+  const input = issue.input;
+  if (stringEnum && typeof input !== "string" || typeof input !== "string" && typeof input !== "number") {
+    return `Expected ${joinValues(values)}, received ${zod3ParsedType(input)}`;
+  }
+  return `Invalid enum value. Expected ${joinValues(values)}, received '${String(input)}'`;
+}
+function invalidFormat(issue) {
+  const format = issue.format ?? "";
+  switch (format) {
+    case "regex":
+      return "Invalid";
+    case "starts_with":
+      return `Invalid input: must start with "${issue.prefix}"`;
+    case "ends_with":
+      return `Invalid input: must end with "${issue.suffix}"`;
+    case "includes":
+      return `Invalid input: must include "${issue.includes}"`;
+    default:
+      if (!format || ZOD4_ONLY_FORMATS.has(format)) return void 0;
+      return `Invalid ${ZOD3_FORMAT[format] ?? format}`;
+  }
+}
+function tooSmall(issue) {
+  const { exact, inclusive, minimum } = issue;
+  switch (issue.origin) {
+    case "array":
+      return `Array must contain ${exact ? "exactly" : inclusive ? "at least" : "more than"} ${minimum} element(s)`;
+    case "string":
+      return `String must contain ${exact ? "exactly" : inclusive ? "at least" : "over"} ${minimum} character(s)`;
+    case "number":
+    case "int":
+    case "bigint":
+      return `Number must be ${exact ? "exactly equal to " : inclusive ? "greater than or equal to " : "greater than "}${minimum}`;
+    case "date":
+      return `Date must be ${exact ? "exactly equal to " : inclusive ? "greater than or equal to " : "greater than "}${new Date(Number(minimum))}`;
+    default:
+      return "Invalid input";
+  }
+}
+function tooBig(issue) {
+  const { exact, inclusive, maximum } = issue;
+  switch (issue.origin) {
+    case "array":
+      return `Array must contain ${exact ? "exactly" : inclusive ? "at most" : "less than"} ${maximum} element(s)`;
+    case "string":
+      return `String must contain ${exact ? "exactly" : inclusive ? "at most" : "under"} ${maximum} character(s)`;
+    case "number":
+    case "int":
+      return `Number must be ${exact ? "exactly" : inclusive ? "less than or equal to" : "less than"} ${maximum}`;
+    case "bigint":
+      return `BigInt must be ${exact ? "exactly" : inclusive ? "less than or equal to" : "less than"} ${maximum}`;
+    case "date":
+      return `Date must be ${exact ? "exactly" : inclusive ? "smaller than or equal to" : "smaller than"} ${new Date(Number(maximum))}`;
+    default:
+      return "Invalid input";
+  }
+}
+function zod3ErrorMessage(issue) {
+  switch (issue.code) {
+    case "invalid_type":
+      return invalidType(issue);
+    case "invalid_value":
+      return invalidValue(issue);
+    case "unrecognized_keys":
+      return `Unrecognized key(s) in object: ${joinValues(issue.keys ?? [], ", ")}`;
+    case "invalid_union":
+      if (issue.discriminator !== void 0 && issue.options) {
+        return `Invalid discriminator value. Expected ${joinValues(issue.options)}`;
+      }
+      return "Invalid input";
+    case "invalid_format":
+      return invalidFormat(issue);
+    case "too_small":
+      return tooSmall(issue);
+    case "too_big":
+      return tooBig(issue);
+    case "not_multiple_of":
+      return `Number must be a multiple of ${issue.divisor}`;
+    case "custom":
+      return "Invalid input";
+    case "invalid_key":
+      return issue.issues?.[0]?.message;
+    default:
+      return void 0;
+  }
+}
+var ZOD3_ERROR_MESSAGES = Object.freeze({ error: zod3ErrorMessage });
 
 // src/types.ts
 var ACTIVEPIECES_STEP_IDS = [

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@ever-works/activepieces-plugin",
-	"version": "1.0.14",
+	"version": "1.0.16",
 	"description": "Activepieces Automation Pipeline Plugin - Delegates Work generation steps to Activepieces flows",
 	"author": {
 		"name": "Ever Co. LTD",
@@ -33,10 +33,10 @@
 		"test:coverage": "vitest run --coverage"
 	},
 	"peerDependencies": {
-		"@ever-works/plugin": "^1.2.10"
+		"@ever-works/plugin": "^1.2.12"
 	},
 	"devDependencies": {
-		"@ever-works/plugin": "^1.2.10",
+		"@ever-works/plugin": "^1.2.12",
 		"@types/node": "^26.6.4",
 		"tsup": "^8.0.0",
 		"typescript": "^5.9.3",
@@ -76,8 +76,8 @@
 		"url": "https://github.com/ever-works/ever-works/issues"
 	},
 	"everworksRelease": {
-		"contentHash": "sha256:cf23bfd74244f03c0c2005928420855623bd57934e6bd5a0f1430db827b3f8fe",
-		"commit": "f5cb0350637a564ce68449b6607a6f8f83ccce9c",
-		"source": "https://github.com/ever-works/ever-works/tree/f5cb0350637a564ce68449b6607a6f8f83ccce9c/packages/plugins/activepieces"
+		"contentHash": "sha256:f5de9e2aca3e2ad0467b789a22ad06e6d8877f3491b5a5abcb7d8fa575227926",
+		"commit": "4b0b642a5bf671c9b0480d49307c2c4442730f28",
+		"source": "https://github.com/ever-works/ever-works/tree/4b0b642a5bf671c9b0480d49307c2c4442730f28/packages/plugins/activepieces"
 	}
 }