@highstate/backend-api 0.9.18 → 0.9.20

package/dist/highstate.manifest.json

@@ -1,5 +1,5 @@
 {
   "sourceHashes": {
-    "./dist/index.js": 1898191380
+    "./dist/index.js": 1156633087
   }
 }

package/dist/index.js

@@ -1,12 +1,12 @@
 import { rm } from 'node:fs/promises';
 import { createServer } from 'nice-grpc';
-import '@highstate/backend';
 import { InstanceServiceDefinition } from '@highstate/api/instance.v1';
 import { SecretServiceDefinition } from '@highstate/api/secret.v1';
 import { WorkerServiceDefinition } from '@highstate/api/worker.v1';
 import { ServerError, Status } from 'nice-grpc-common';
+import { AccessError, instanceCustomStatusInputSchema } from '@highstate/backend/shared';
 import { isAbortError } from 'abort-controller-x';
-import { AccessError, workerSchema, instanceCustomStatusSchema } from '@highstate/backend/shared';
+import { z, commonObjectMetaSchema } from '@highstate/contract';
 
 // src/index.ts
 async function authenticate(services, context) {
@@ -51,21 +51,27 @@ function parseArgument(request, argumentName, schema) {
 function createInstanceService(services) {
   return {
     async updateCustomStatus(request, context) {
-      const [projectId] = await authenticate(services, context);
-      const customStatus = parseArgument(request, "status", instanceCustomStatusSchema);
+      const [projectId, apiKey] = await authenticate(services, context);
+      const stateId = parseArgument(request, "stateId", z.cuid2());
+      const customStatus = parseArgument(request, "status", instanceCustomStatusInputSchema);
       await services.instanceStateService.updateCustomStatus(
         projectId,
-        request.instanceId,
+        stateId,
+        apiKey.serviceAccountId,
         customStatus
       );
       return {};
     },
-    async removeCustomStatus(request, _context) {
+    async removeCustomStatus(request, context) {
+      const [projectId, apiKey] = await authenticate(services, context);
+      const stateId = parseArgument(request, "stateId", z.cuid2());
       await services.instanceStateService.removeCustomStatus(
-        "",
-        request.instanceId,
+        projectId,
+        stateId,
+        apiKey.serviceAccountId,
         request.statusName
       );
+      return {};
     }
   };
 }
@@ -86,37 +92,58 @@ function createWorkerService(services) {
   return {
     async *connect(request, context) {
       const [projectId] = await authenticate(services, context);
-      const workerId = parseArgument(request, "workerId", workerSchema.shape.id);
-      const registrationStream = services.pubsubManager.subscribe([
-        "worker-unit-registration",
-        projectId,
-        workerId
-      ]);
-      await services.workerManager.setWorkerRunning(projectId, workerId);
-      await services.workerManager.writeSystemMessage(projectId, workerId, "worker connected");
-      const registrations = await services.stateManager.getWorkerRegistrationIndexRepository(projectId, workerId).getAllItems();
-      for (const registration of registrations) {
+      const workerVersionId = parseArgument(request, "workerVersionId", z.cuid2());
+      services.workerManager.setWorkerRunning(projectId, workerVersionId);
+      const database = await services.database.forProject(projectId);
+      const existingRegistrations = await database.workerUnitRegistration.findMany({
+        where: { workerVersionId },
+        select: { stateId: true, params: true }
+      });
+      for (const registration of existingRegistrations) {
         yield {
           event: {
             $case: "unitRegistration",
             value: {
-              instanceId: registration.id,
+              stateId: registration.stateId,
               params: registration.params
             }
           }
         };
       }
+      const registrationStream = await services.pubsubManager.subscribe([
+        "worker-unit-registration",
+        projectId,
+        workerVersionId
+      ]);
       for await (const event of registrationStream) {
-        yield {
-          event: {
-            $case: "unitRegistration",
-            value: {
-              instanceId: event.instanceId,
-              params: event.params
+        if (event.type === "registered") {
+          yield {
+            event: {
+              $case: "unitRegistration",
+              value: {
+                instanceId: event.instanceId,
+                params: event.params
+              }
             }
-          }
-        };
+          };
+        } else if (event.type === "deregistered") {
+          yield {
+            event: {
+              $case: "unitDeregistration",
+              value: {
+                instanceId: event.instanceId
+              }
+            }
+          };
+        }
       }
+    },
+    async updateWorkerVersionMeta(request, context) {
+      const [projectId] = await authenticate(services, context);
+      const workerVersionId = parseArgument(request, "workerVersionId", z.string());
+      const meta = parseArgument(request, "meta", commonObjectMetaSchema);
+      await services.workerService.updateWorkerVersionMeta(projectId, workerVersionId, meta);
+      return {};
     }
   };
 }
@@ -128,7 +155,7 @@ async function startBackedApi(services) {
   server.add(InstanceServiceDefinition, createInstanceService(services));
   server.add(SecretServiceDefinition, createSecretService(services));
   server.add(WorkerServiceDefinition, createWorkerService(services));
-  const uid = process.geteuid();
+  const uid = process.geteuid?.();
   const sockPath = `/run/user/${uid}/highstate.sock`;
   try {
     await rm(sockPath, { force: true });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/authentication.ts","../src/shared/error-handling.ts","../src/shared/validation.ts","../src/handlers/instance.ts","../src/handlers/secret.ts","../src/handlers/worker.ts","../src/index.ts"],"names":["ServerError","Status"],"mappings":";;;;;;;;;;;AAIA,eAAsB,YAAA,CACpB,UACA,OAAA,EACqD;AACrD,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AAC5C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,WAAA,CAAY,MAAA,CAAO,eAAA,EAAiB,qBAAqB,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,YAAY,CAAA;AACnD,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,MAAM,IAAI,WAAA,CAAY,MAAA,CAAO,eAAA,EAAiB,wBAAwB,CAAA;AAAA,EACxE;AAEA,EAAA,MAAM,SAAS,MAAM,QAAA,CAAS,aAAA,CAAc,gBAAA,CAAiB,WAAW,KAAK,CAAA;AAE7E,EAAA,OAAO,CAAC,WAAW,MAAM,CAAA;AAC3B;AChBO,SAAS,8BAA8B,QAAA,EAAoB;AAChE,EAAA,OAAO,gBAAgB,uBAAA,CACrB,IAAA,EACA,OAAA,EACA;AACA,IAAA,IAAI;AACF,MAAA,OAAO,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,OAAO,CAAA;AAAA,IAC/C,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,KAAA,YAAiBA,WAAAA,IAAe,YAAA,CAAa,KAAK,CAAA,EAAG;AACvD,QAAA,MAAM,KAAA;AAAA,MACR;AAEA,MAAA,IAAI,iBAAiB,WAAA,EAAa;AAChC,QAAA,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,IAAS,eAAe,CAAA;AAC/C,QAAA,MAAM,IAAIA,WAAAA,CAAYC,MAAAA,CAAO,eAAA,EAAiB,eAAe,CAAA;AAAA,MAC/D;AAEA,MAAA,QAAA,CAAS,MAAA,CAAO,KAAA,CAAM,EAAE,KAAA,IAAS,kBAAkB,CAAA;AACnD,MAAA,MAAM,IAAID,WAAAA,CAAYC,MAAAA,CAAO,QAAA,EAAU,8BAA8B,CAAA;AAAA,IACvE;AAAA,EACF,CAAA;AACF;ACvBO,SAAS,aAAA,CAId,OAAA,EAAmB,YAAA,EAA6B,MAAA,EAAmC;AACnF,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,YAAY,CAAC,CAAA;AACrD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAID,WAAAA;AAAA,MACRC,MAAAA,CAAO,gBAAA;AAAA,MACP,CAAA,kBAAA,EAAqB,YAAY,CAAA,GAAA,EAAM,MAAA,CAAO,MAAM,OAAO,CAAA;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,OAAO,MAAA,CAAO,IAAA;AAChB;ACZO,SAAS,sBAAsB,QAAA,EAAmD;AACvF,EAAA,OAAO;AAAA,IACL,MAAM,kBAAA,CAAmB,OAAA,EAAS,OAAA,EAAS;AACzC,MAAA,MAAM,CAAC,SAAS,CAAA,GAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAIxD,MAAA,MAAM,YAAA,GAAe,aAAA,CAAc,OAAA,EAAS,QAAA,EAAU,0BAA0B,CAAA;AAEhF,MAAA,MAAM,SAAS,oBAAA,CAAqB,kBAAA;AAAA,QAClC,SAAA;AAAA,QACA,OAAA,CAAQ,UAAA;AAAA,QACR;AAAA,OACF;AAEA,MAAA,OAAO,EAAC;AAAA,IACV,CAAA;AAAA,IAEA,MAAM,kBAAA,CAAmB,OAAA,EAAS,QAAA,EAAU;AAC1C,MAAA,MAAM,SAAS,oBAAA,CAAqB,kBAAA;AAAA,QAClC,EAAA;AAAA,QACA,OAAA,CAAQ,UAAA;AAAA,QACR,OAAA,CAAQ;AAAA,OACV;AAAA,IACF;AAAA,GACF;AACF;;;AC3BO,SAAS,oBAAoB,QAAA,EAAiD;AACnF,EAAA,OAAO;AAAA,IACL,MAAM,gBAAA,CAAiB,OAAA,EAAS,OAAA,EAAS;AACvC,MAAA,MAAM,CAAC,SAAS,CAAA,GAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAIxD,MAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,YAAA,CAC5B,2BAA2B,SAAS,CAAA,CACpC,GAAA,CAAI,OAAA,CAAQ,QAAQ,CAAA;AAEvB,MAAA,OAAO;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAAA,GACF;AACF;ACfO,SAAS,oBAAoB,QAAA,EAAiD;AACnF,EAAA,OAAO;AAAA,IACL,OAAO,OAAA,CAAQ,OAAA,EAAS,OAAA,EAAS;AAC/B,MAAA,MAAM,CAAC,SAAS,CAAA,GAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAGxD,MAAA,MAAM,WAAW,aAAA,CAAc,OAAA,EAAS,UAAA,EAAY,YAAA,CAAa,MAAM,EAAE,CAAA;AAEzE,MAAA,MAAM,kBAAA,GAAqB,QAAA,CAAS,aAAA,CAAc,SAAA,CAAU;AAAA,QAC1D,0BAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AAGD,MAAA,MAAM,QAAA,CAAS,aAAA,CAAc,gBAAA,CAAiB,SAAA,EAAW,QAAQ,CAAA;AACjE,MAAA,MAAM,QAAA,CAAS,aAAA,CAAc,kBAAA,CAAmB,SAAA,EAAW,UAAU,kBAAkB,CAAA;AAGvF,MAAA,MAAM,aAAA,GAAgB,MAAM,QAAA,CAAS,YAAA,CAClC,qCAAqC,SAAA,EAAW,QAAQ,EACxD,WAAA,EAAY;AAEf,MAAA,KAAA,MAAW,gBAAgB,aAAA,EAAe;AACxC,QAAA,MAAM;AAAA,UACJ,KAAA,EAAO;AAAA,YACL,KAAA,EAAO,kBAAA;AAAA,YACP,KAAA,EAAO;AAAA,cACL,YAAY,YAAA,CAAa,EAAA;AAAA,cACzB,QAAQ,YAAA,CAAa;AAAA;AACvB;AACF,SACF;AAAA,MACF;AAGA,MAAA,WAAA,MAAiB,SAAS,kBAAA,EAAoB;AAC5C,QAAA,MAAM;AAAA,UACJ,KAAA,EAAO;AAAA,YACL,KAAA,EAAO,kBAAA;AAAA,YACP,KAAA,EAAO;AAAA,cACL,YAAY,KAAA,CAAM,UAAA;AAAA,cAClB,QAAQ,KAAA,CAAM;AAAA;AAChB;AACF,SACF;AAAA,MACF;AAAA,IACF;AAAA,GACF;AACF;;;AC3CA,eAAsB,eAAe,QAAA,EAAoB;AACvD,EAAA,MAAM,SAAS,YAAA,EAAa;AAC5B,EAAA,MAAA,CAAO,GAAA,CAAI,6BAAA,CAA8B,QAAQ,CAAC,CAAA;AAElD,EAAA,MAAA,CAAO,GAAA,CAAI,yBAAA,EAA2B,qBAAA,CAAsB,QAAQ,CAAC,CAAA;AACrE,EAAA,MAAA,CAAO,GAAA,CAAI,uBAAA,EAAyB,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AACjE,EAAA,MAAA,CAAO,GAAA,CAAI,uBAAA,EAAyB,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAEjE,EAAA,MAAM,GAAA,GAAM,QAAQ,OAAA,EAAS;AAC7B,EAAA,MAAM,QAAA,GAAW,aAAa,GAAG,CAAA,eAAA,CAAA;AAEjC,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,CAAG,QAAA,EAAU,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,EACpC,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,EAAE,KAAA,YAAiB,KAAA,IAAS,UAAU,KAAA,IAAS,KAAA,CAAM,SAAS,QAAA,CAAA,EAAW;AAC3E,MAAA,QAAA,CAAS,MAAA,CAAO,KAAA,CAAM,EAAE,KAAA,IAAS,uCAAuC,CAAA;AAAA,IAC1E;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,CAAO,MAAA,CAAO,CAAA,KAAA,EAAQ,QAAQ,CAAA,CAAE,CAAA;AAEtC,EAAA,QAAA,CAAS,aAAA,CAAc,OAAO,yBAAA,GAA4B,QAAA;AAC1D,EAAA,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,CAAA,mBAAA,CAAA,EAAuB,QAAQ,CAAA;AACtD","file":"index.js","sourcesContent":["import type { Services } from \"@highstate/backend\"\nimport type { ProjectApiKey } from \"@highstate/backend/shared\"\nimport { ServerError, Status, type CallContext } from \"nice-grpc-common\"\n\nexport async function authenticate(\n  services: Services,\n  context: CallContext,\n): Promise<[projectId: string, apiKey: ProjectApiKey]> {\n  const token = context.metadata.get(\"api-key\")\n  if (!token) {\n    throw new ServerError(Status.UNAUTHENTICATED, \"No API key provided\")\n  }\n\n  const projectId = context.metadata.get(\"project-id\")\n  if (!projectId) {\n    throw new ServerError(Status.UNAUTHENTICATED, \"No project ID provided\")\n  }\n\n  const apiKey = await services.apiKeyService.getApiKeyByToken(projectId, token)\n\n  return [projectId, apiKey]\n}\n","import type { Services } from \"@highstate/backend\"\nimport { ServerError, Status, type CallContext, type ServerMiddlewareCall } from \"nice-grpc-common\"\nimport { isAbortError } from \"abort-controller-x\"\nimport { AccessError } from \"@highstate/backend/shared\"\n\nexport function createErrorHandlingMiddleware(services: Services) {\n  return async function* errorHandlingMiddleware<TRequest, TResponse>(\n    call: ServerMiddlewareCall<TRequest, TResponse>,\n    context: CallContext,\n  ) {\n    try {\n      return yield* call.next(call.request, context)\n    } catch (error) {\n      if (error instanceof ServerError || isAbortError(error)) {\n        throw error\n      }\n\n      if (error instanceof AccessError) {\n        services.logger.info({ error }, \"access denied\")\n        throw new ServerError(Status.UNAUTHENTICATED, \"Access denied\")\n      }\n\n      services.logger.error({ error }, \"unexpected error\")\n      throw new ServerError(Status.INTERNAL, \"An unexpected error occurred\")\n    }\n  }\n}\n","import type { z } from \"zod\"\nimport { ServerError, Status } from \"nice-grpc-common\"\n\nexport function parseArgument<\n  TRequest,\n  TArgumentName extends string & keyof TRequest,\n  TSchema extends z.ZodType,\n>(request: TRequest, argumentName: TArgumentName, schema: TSchema): z.infer<TSchema> {\n  const result = schema.safeParse(request[argumentName])\n  if (!result.success) {\n    throw new ServerError(\n      Status.INVALID_ARGUMENT,\n      `Invalid argument \"${argumentName}\": ${result.error.message}`,\n    )\n  }\n\n  return result.data\n}\n","import type { Services } from \"@highstate/backend\"\nimport type { InstanceServiceImplementation } from \"@highstate/api/instance.v1\"\nimport { instanceCustomStatusSchema } from \"@highstate/backend/shared\"\nimport { authenticate, parseArgument } from \"../shared\"\n\nexport function createInstanceService(services: Services): InstanceServiceImplementation {\n  return {\n    async updateCustomStatus(request, context) {\n      const [projectId] = await authenticate(services, context)\n\n      // TODO: validate instance access\n\n      const customStatus = parseArgument(request, \"status\", instanceCustomStatusSchema)\n\n      await services.instanceStateService.updateCustomStatus(\n        projectId,\n        request.instanceId,\n        customStatus,\n      )\n\n      return {}\n    },\n\n    async removeCustomStatus(request, _context) {\n      await services.instanceStateService.removeCustomStatus(\n        \"\",\n        request.instanceId,\n        request.statusName,\n      )\n    },\n  }\n}\n","import type { SecretServiceImplementation } from \"@highstate/api/secret.v1\"\nimport type { Services } from \"@highstate/backend\"\nimport { authenticate } from \"../shared\"\n\nexport function createSecretService(services: Services): SecretServiceImplementation {\n  return {\n    async getSecretContent(request, context) {\n      const [projectId] = await authenticate(services, context)\n\n      // TODO: validate secret access\n\n      const content = await services.stateManager\n        .getSecretContentRepository(projectId)\n        .get(request.secretId)\n\n      return {\n        content,\n      }\n    },\n  }\n}\n","import type { Services } from \"@highstate/backend\"\nimport type { WorkerServiceImplementation } from \"@highstate/api/worker.v1\"\nimport { workerSchema } from \"@highstate/backend/shared\"\nimport { authenticate, parseArgument } from \"../shared\"\n\nexport function createWorkerService(services: Services): WorkerServiceImplementation {\n  return {\n    async *connect(request, context) {\n      const [projectId] = await authenticate(services, context)\n\n      // TODO: check worker access\n      const workerId = parseArgument(request, \"workerId\", workerSchema.shape.id)\n\n      const registrationStream = services.pubsubManager.subscribe([\n        \"worker-unit-registration\",\n        projectId,\n        workerId,\n      ])\n\n      // update worker status\n      await services.workerManager.setWorkerRunning(projectId, workerId)\n      await services.workerManager.writeSystemMessage(projectId, workerId, \"worker connected\")\n\n      // emit existing registrations\n      const registrations = await services.stateManager\n        .getWorkerRegistrationIndexRepository(projectId, workerId)\n        .getAllItems()\n\n      for (const registration of registrations) {\n        yield {\n          event: {\n            $case: \"unitRegistration\",\n            value: {\n              instanceId: registration.id,\n              params: registration.params,\n            },\n          },\n        }\n      }\n\n      // emit new registrations\n      for await (const event of registrationStream) {\n        yield {\n          event: {\n            $case: \"unitRegistration\",\n            value: {\n              instanceId: event.instanceId,\n              params: event.params,\n            },\n          },\n        }\n      }\n    },\n  }\n}\n","import { rm } from \"node:fs/promises\"\nimport { createServer } from \"nice-grpc\"\nimport { type Services } from \"@highstate/backend\"\nimport { InstanceServiceDefinition } from \"@highstate/api/instance.v1\"\nimport { SecretServiceDefinition } from \"@highstate/api/secret.v1\"\nimport { WorkerServiceDefinition } from \"@highstate/api/worker.v1\"\nimport { createErrorHandlingMiddleware } from \"./shared\"\nimport { createInstanceService } from \"./handlers/instance\"\nimport { createSecretService } from \"./handlers/secret\"\nimport { createWorkerService } from \"./handlers/worker\"\n\nexport async function startBackedApi(services: Services) {\n  const server = createServer()\n  server.use(createErrorHandlingMiddleware(services))\n\n  server.add(InstanceServiceDefinition, createInstanceService(services))\n  server.add(SecretServiceDefinition, createSecretService(services))\n  server.add(WorkerServiceDefinition, createWorkerService(services))\n\n  const uid = process.geteuid!()\n  const sockPath = `/run/user/${uid}/highstate.sock`\n\n  try {\n    await rm(sockPath, { force: true })\n  } catch (error) {\n    if (!(error instanceof Error && \"code\" in error && error.code === \"ENOENT\")) {\n      services.logger.error({ error }, \"failed to remove existing socket file\")\n    }\n  }\n\n  await server.listen(`unix:${sockPath}`)\n\n  services.workerManager.config.HIGHSTATE_WORKER_API_PATH = sockPath\n  services.logger.info(`api listening at %s`, sockPath)\n}\n"]}
+{"version":3,"sources":["../src/shared/authentication.ts","../src/shared/error-handling.ts","../src/shared/validation.ts","../src/handlers/instance.ts","../src/handlers/secret.ts","../src/handlers/worker.ts","../src/index.ts"],"names":["ServerError","Status","z"],"mappings":";;;;;;;;;;;AAGA,eAAsB,YAAA,CACpB,UACA,OAAA,EAC8C;AAC9C,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,SAAS,CAAA;AAC5C,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,WAAA,CAAY,MAAA,CAAO,eAAA,EAAiB,qBAAqB,CAAA;AAAA,EACrE;AAEA,EAAA,MAAM,SAAA,GAAY,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,YAAY,CAAA;AACnD,EAAA,IAAI,CAAC,SAAA,EAAW;AACd,IAAA,MAAM,IAAI,WAAA,CAAY,MAAA,CAAO,eAAA,EAAiB,wBAAwB,CAAA;AAAA,EACxE;AAEA,EAAA,MAAM,SAAS,MAAM,QAAA,CAAS,aAAA,CAAc,gBAAA,CAAiB,WAAW,KAAK,CAAA;AAE7E,EAAA,OAAO,CAAC,WAAW,MAAM,CAAA;AAC3B;ACfO,SAAS,8BAA8B,QAAA,EAAoB;AAChE,EAAA,OAAO,gBAAgB,uBAAA,CACrB,IAAA,EACA,OAAA,EACA;AACA,IAAA,IAAI;AACF,MAAA,OAAO,OAAO,IAAA,CAAK,IAAA,CAAK,IAAA,CAAK,SAAS,OAAO,CAAA;AAAA,IAC/C,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,KAAA,YAAiBA,WAAAA,IAAe,YAAA,CAAa,KAAK,CAAA,EAAG;AACvD,QAAA,MAAM,KAAA;AAAA,MACR;AAEA,MAAA,IAAI,iBAAiB,WAAA,EAAa;AAChC,QAAA,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,IAAS,eAAe,CAAA;AAC/C,QAAA,MAAM,IAAIA,WAAAA,CAAYC,MAAAA,CAAO,eAAA,EAAiB,eAAe,CAAA;AAAA,MAC/D;AAEA,MAAA,QAAA,CAAS,MAAA,CAAO,KAAA,CAAM,EAAE,KAAA,IAAS,kBAAkB,CAAA;AACnD,MAAA,MAAM,IAAID,WAAAA,CAAYC,MAAAA,CAAO,QAAA,EAAU,8BAA8B,CAAA;AAAA,IACvE;AAAA,EACF,CAAA;AACF;ACvBO,SAAS,aAAA,CAId,OAAA,EAAmB,YAAA,EAA6B,MAAA,EAAmC;AACnF,EAAA,MAAM,MAAA,GAAS,MAAA,CAAO,SAAA,CAAU,OAAA,CAAQ,YAAY,CAAC,CAAA;AACrD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAID,WAAAA;AAAA,MACRC,MAAAA,CAAO,gBAAA;AAAA,MACP,CAAA,kBAAA,EAAqB,YAAY,CAAA,GAAA,EAAM,MAAA,CAAO,MAAM,OAAO,CAAA;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,OAAO,MAAA,CAAO,IAAA;AAChB;ACXO,SAAS,sBAAsB,QAAA,EAAmD;AACvF,EAAA,OAAO;AAAA,IACL,MAAM,kBAAA,CAAmB,OAAA,EAAS,OAAA,EAAS;AACzC,MAAA,MAAM,CAAC,SAAA,EAAW,MAAM,IAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAIhE,MAAA,MAAM,UAAU,aAAA,CAAc,OAAA,EAAS,SAAA,EAAW,CAAA,CAAE,OAAO,CAAA;AAC3D,MAAA,MAAM,YAAA,GAAe,aAAA,CAAc,OAAA,EAAS,QAAA,EAAU,+BAA+B,CAAA;AAErF,MAAA,MAAM,SAAS,oBAAA,CAAqB,kBAAA;AAAA,QAClC,SAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAA,CAAO,gBAAA;AAAA,QACP;AAAA,OACF;AAEA,MAAA,OAAO,EAAC;AAAA,IACV,CAAA;AAAA,IAEA,MAAM,kBAAA,CAAmB,OAAA,EAAS,OAAA,EAAS;AACzC,MAAA,MAAM,CAAC,SAAA,EAAW,MAAM,IAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAIhE,MAAA,MAAM,UAAU,aAAA,CAAc,OAAA,EAAS,SAAA,EAAW,CAAA,CAAE,OAAO,CAAA;AAE3D,MAAA,MAAM,SAAS,oBAAA,CAAqB,kBAAA;AAAA,QAClC,SAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAA,CAAO,gBAAA;AAAA,QACP,OAAA,CAAQ;AAAA,OACV;AAEA,MAAA,OAAO,EAAC;AAAA,IACV;AAAA,GACF;AACF;;;ACvCO,SAAS,oBAAoB,QAAA,EAAiD;AACnF,EAAA,OAAO;AAAA,IACL,MAAM,gBAAA,CAAiB,OAAA,EAAS,OAAA,EAAS;AACvC,MAAA,MAAM,CAAC,SAAS,CAAA,GAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAIxD,MAAA,MAAM,OAAA,GAAU,MAAM,QAAA,CAAS,YAAA,CAC5B,2BAA2B,SAAS,CAAA,CACpC,GAAA,CAAI,OAAA,CAAQ,QAAQ,CAAA;AAEvB,MAAA,OAAO;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAAA,GACF;AACF;ACfO,SAAS,oBAAoB,QAAA,EAAiD;AACnF,EAAA,OAAO;AAAA,IACL,OAAO,OAAA,CAAQ,OAAA,EAAS,OAAA,EAAS;AAC/B,MAAA,MAAM,CAAC,SAAS,CAAA,GAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAExD,MAAA,MAAM,kBAAkB,aAAA,CAAc,OAAA,EAAS,iBAAA,EAAmBC,CAAAA,CAAE,OAAO,CAAA;AAG3E,MAAA,QAAA,CAAS,aAAA,CAAc,gBAAA,CAAiB,SAAA,EAAW,eAAe,CAAA;AAGlE,MAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAAS,QAAA,CAAS,WAAW,SAAS,CAAA;AAC7D,MAAA,MAAM,qBAAA,GAAwB,MAAM,QAAA,CAAS,sBAAA,CAAuB,QAAA,CAAS;AAAA,QAC3E,KAAA,EAAO,EAAE,eAAA,EAAgB;AAAA,QACzB,MAAA,EAAQ,EAAE,OAAA,EAAS,IAAA,EAAM,QAAQ,IAAA;AAAK,OACvC,CAAA;AAGD,MAAA,KAAA,MAAW,gBAAgB,qBAAA,EAAuB;AAChD,QAAA,MAAM;AAAA,UACJ,KAAA,EAAO;AAAA,YACL,KAAA,EAAO,kBAAA;AAAA,YACP,KAAA,EAAO;AAAA,cACL,SAAS,YAAA,CAAa,OAAA;AAAA,cACtB,QAAQ,YAAA,CAAa;AAAA;AACvB;AACF,SACF;AAAA,MACF;AAGA,MAAA,MAAM,kBAAA,GAAqB,MAAM,QAAA,CAAS,aAAA,CAAc,SAAA,CAAU;AAAA,QAChE,0BAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AAGD,MAAA,WAAA,MAAiB,SAAS,kBAAA,EAAoB;AAC5C,QAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAC/B,UAAA,MAAM;AAAA,YACJ,KAAA,EAAO;AAAA,cACL,KAAA,EAAO,kBAAA;AAAA,cACP,KAAA,EAAO;AAAA,gBACL,YAAY,KAAA,CAAM,UAAA;AAAA,gBAClB,QAAQ,KAAA,CAAM;AAAA;AAChB;AACF,WACF;AAAA,QACF,CAAA,MAAA,IAAW,KAAA,CAAM,IAAA,KAAS,cAAA,EAAgB;AACxC,UAAA,MAAM;AAAA,YACJ,KAAA,EAAO;AAAA,cACL,KAAA,EAAO,oBAAA;AAAA,cACP,KAAA,EAAO;AAAA,gBACL,YAAY,KAAA,CAAM;AAAA;AACpB;AACF,WACF;AAAA,QACF;AAAA,MACF;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,uBAAA,CAAwB,OAAA,EAAS,OAAA,EAAS;AAC9C,MAAA,MAAM,CAAC,SAAS,CAAA,GAAI,MAAM,YAAA,CAAa,UAAU,OAAO,CAAA;AAExD,MAAA,MAAM,kBAAkB,aAAA,CAAc,OAAA,EAAS,iBAAA,EAAmBA,CAAAA,CAAE,QAAQ,CAAA;AAC5E,MAAA,MAAM,IAAA,GAAO,aAAA,CAAc,OAAA,EAAS,MAAA,EAAQ,sBAAsB,CAAA;AAElE,MAAA,MAAM,QAAA,CAAS,aAAA,CAAc,uBAAA,CAAwB,SAAA,EAAW,iBAAiB,IAAI,CAAA;AAErF,MAAA,OAAO,EAAC;AAAA,IACV;AAAA,GACF;AACF;;;ACnEA,eAAsB,eAAe,QAAA,EAAoB;AACvD,EAAA,MAAM,SAAS,YAAA,EAAa;AAC5B,EAAA,MAAA,CAAO,GAAA,CAAI,6BAAA,CAA8B,QAAQ,CAAC,CAAA;AAElD,EAAA,MAAA,CAAO,GAAA,CAAI,yBAAA,EAA2B,qBAAA,CAAsB,QAAQ,CAAC,CAAA;AACrE,EAAA,MAAA,CAAO,GAAA,CAAI,uBAAA,EAAyB,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AACjE,EAAA,MAAA,CAAO,GAAA,CAAI,uBAAA,EAAyB,mBAAA,CAAoB,QAAQ,CAAC,CAAA;AAEjE,EAAA,MAAM,GAAA,GAAM,QAAQ,OAAA,IAAU;AAC9B,EAAA,MAAM,QAAA,GAAW,aAAa,GAAG,CAAA,eAAA,CAAA;AAEjC,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,CAAG,QAAA,EAAU,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,EACpC,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,EAAE,KAAA,YAAiB,KAAA,IAAS,UAAU,KAAA,IAAS,KAAA,CAAM,SAAS,QAAA,CAAA,EAAW;AAC3E,MAAA,QAAA,CAAS,MAAA,CAAO,KAAA,CAAM,EAAE,KAAA,IAAS,uCAAuC,CAAA;AAAA,IAC1E;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,CAAO,MAAA,CAAO,CAAA,KAAA,EAAQ,QAAQ,CAAA,CAAE,CAAA;AAEtC,EAAA,QAAA,CAAS,aAAA,CAAc,OAAO,yBAAA,GAA4B,QAAA;AAC1D,EAAA,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,CAAA,mBAAA,CAAA,EAAuB,QAAQ,CAAA;AACtD","file":"index.js","sourcesContent":["import type { ApiKey, Services } from \"@highstate/backend\"\nimport { type CallContext, ServerError, Status } from \"nice-grpc-common\"\n\nexport async function authenticate(\n  services: Services,\n  context: CallContext,\n): Promise<[projectId: string, apiKey: ApiKey]> {\n  const token = context.metadata.get(\"api-key\")\n  if (!token) {\n    throw new ServerError(Status.UNAUTHENTICATED, \"No API key provided\")\n  }\n\n  const projectId = context.metadata.get(\"project-id\")\n  if (!projectId) {\n    throw new ServerError(Status.UNAUTHENTICATED, \"No project ID provided\")\n  }\n\n  const apiKey = await services.apiKeyService.getApiKeyByToken(projectId, token)\n\n  return [projectId, apiKey]\n}\n","import type { Services } from \"@highstate/backend\"\nimport { AccessError } from \"@highstate/backend/shared\"\nimport { isAbortError } from \"abort-controller-x\"\nimport { type CallContext, ServerError, type ServerMiddlewareCall, Status } from \"nice-grpc-common\"\n\nexport function createErrorHandlingMiddleware(services: Services) {\n  return async function* errorHandlingMiddleware<TRequest, TResponse>(\n    call: ServerMiddlewareCall<TRequest, TResponse>,\n    context: CallContext,\n  ) {\n    try {\n      return yield* call.next(call.request, context)\n    } catch (error) {\n      if (error instanceof ServerError || isAbortError(error)) {\n        throw error\n      }\n\n      if (error instanceof AccessError) {\n        services.logger.info({ error }, \"access denied\")\n        throw new ServerError(Status.UNAUTHENTICATED, \"Access denied\")\n      }\n\n      services.logger.error({ error }, \"unexpected error\")\n      throw new ServerError(Status.INTERNAL, \"An unexpected error occurred\")\n    }\n  }\n}\n","import type { z } from \"zod\"\nimport { ServerError, Status } from \"nice-grpc-common\"\n\nexport function parseArgument<\n  TRequest,\n  TArgumentName extends string & keyof TRequest,\n  TSchema extends z.ZodType,\n>(request: TRequest, argumentName: TArgumentName, schema: TSchema): z.infer<TSchema> {\n  const result = schema.safeParse(request[argumentName])\n  if (!result.success) {\n    throw new ServerError(\n      Status.INVALID_ARGUMENT,\n      `Invalid argument \"${argumentName}\": ${result.error.message}`,\n    )\n  }\n\n  return result.data\n}\n","import type { InstanceServiceImplementation } from \"@highstate/api/instance.v1\"\nimport type { Services } from \"@highstate/backend\"\nimport { instanceCustomStatusInputSchema } from \"@highstate/backend/shared\"\nimport { z } from \"@highstate/contract\"\nimport { authenticate, parseArgument } from \"../shared\"\n\nexport function createInstanceService(services: Services): InstanceServiceImplementation {\n  return {\n    async updateCustomStatus(request, context) {\n      const [projectId, apiKey] = await authenticate(services, context)\n\n      // TODO: validate instance access\n\n      const stateId = parseArgument(request, \"stateId\", z.cuid2())\n      const customStatus = parseArgument(request, \"status\", instanceCustomStatusInputSchema)\n\n      await services.instanceStateService.updateCustomStatus(\n        projectId,\n        stateId,\n        apiKey.serviceAccountId,\n        customStatus,\n      )\n\n      return {}\n    },\n\n    async removeCustomStatus(request, context) {\n      const [projectId, apiKey] = await authenticate(services, context)\n\n      // TODO: validate instance access\n\n      const stateId = parseArgument(request, \"stateId\", z.cuid2())\n\n      await services.instanceStateService.removeCustomStatus(\n        projectId,\n        stateId,\n        apiKey.serviceAccountId,\n        request.statusName,\n      )\n\n      return {}\n    },\n  }\n}\n","import type { SecretServiceImplementation } from \"@highstate/api/secret.v1\"\nimport type { Services } from \"@highstate/backend\"\nimport { authenticate } from \"../shared\"\n\nexport function createSecretService(services: Services): SecretServiceImplementation {\n  return {\n    async getSecretContent(request, context) {\n      const [projectId] = await authenticate(services, context)\n\n      // TODO: validate secret access\n\n      const content = await services.stateManager\n        .getSecretContentRepository(projectId)\n        .get(request.secretId)\n\n      return {\n        content,\n      }\n    },\n  }\n}\n","import type { WorkerServiceImplementation } from \"@highstate/api/worker.v1\"\nimport type { Services } from \"@highstate/backend\"\nimport { commonObjectMetaSchema, z } from \"@highstate/contract\"\nimport { authenticate, parseArgument } from \"../shared\"\n\nexport function createWorkerService(services: Services): WorkerServiceImplementation {\n  return {\n    async *connect(request, context) {\n      const [projectId] = await authenticate(services, context)\n\n      const workerVersionId = parseArgument(request, \"workerVersionId\", z.cuid2())\n\n      // set worker as running\n      services.workerManager.setWorkerRunning(projectId, workerVersionId)\n\n      // get existing registrations for this worker version\n      const database = await services.database.forProject(projectId)\n      const existingRegistrations = await database.workerUnitRegistration.findMany({\n        where: { workerVersionId },\n        select: { stateId: true, params: true },\n      })\n\n      // emit existing registrations\n      for (const registration of existingRegistrations) {\n        yield {\n          event: {\n            $case: \"unitRegistration\",\n            value: {\n              stateId: registration.stateId,\n              params: registration.params,\n            },\n          },\n        }\n      }\n\n      // subscribe to new registration events for this worker version\n      const registrationStream = await services.pubsubManager.subscribe([\n        \"worker-unit-registration\",\n        projectId,\n        workerVersionId,\n      ])\n\n      // emit new registration/deregistration events\n      for await (const event of registrationStream) {\n        if (event.type === \"registered\") {\n          yield {\n            event: {\n              $case: \"unitRegistration\",\n              value: {\n                instanceId: event.instanceId,\n                params: event.params,\n              },\n            },\n          }\n        } else if (event.type === \"deregistered\") {\n          yield {\n            event: {\n              $case: \"unitDeregistration\",\n              value: {\n                instanceId: event.instanceId,\n              },\n            },\n          }\n        }\n      }\n    },\n\n    async updateWorkerVersionMeta(request, context) {\n      const [projectId] = await authenticate(services, context)\n\n      const workerVersionId = parseArgument(request, \"workerVersionId\", z.string())\n      const meta = parseArgument(request, \"meta\", commonObjectMetaSchema)\n\n      await services.workerService.updateWorkerVersionMeta(projectId, workerVersionId, meta)\n\n      return {}\n    },\n  }\n}\n","import { rm } from \"node:fs/promises\"\nimport { createServer } from \"nice-grpc\"\nimport type { Services } from \"@highstate/backend\"\nimport { InstanceServiceDefinition } from \"@highstate/api/instance.v1\"\nimport { SecretServiceDefinition } from \"@highstate/api/secret.v1\"\nimport { WorkerServiceDefinition } from \"@highstate/api/worker.v1\"\nimport { createErrorHandlingMiddleware } from \"./shared\"\nimport { createInstanceService } from \"./handlers/instance\"\nimport { createSecretService } from \"./handlers/secret\"\nimport { createWorkerService } from \"./handlers/worker\"\n\nexport async function startBackedApi(services: Services) {\n  const server = createServer()\n  server.use(createErrorHandlingMiddleware(services))\n\n  server.add(InstanceServiceDefinition, createInstanceService(services))\n  server.add(SecretServiceDefinition, createSecretService(services))\n  server.add(WorkerServiceDefinition, createWorkerService(services))\n\n  const uid = process.geteuid?.()\n  const sockPath = `/run/user/${uid}/highstate.sock`\n\n  try {\n    await rm(sockPath, { force: true })\n  } catch (error) {\n    if (!(error instanceof Error && \"code\" in error && error.code === \"ENOENT\")) {\n      services.logger.error({ error }, \"failed to remove existing socket file\")\n    }\n  }\n\n  await server.listen(`unix:${sockPath}`)\n\n  services.workerManager.config.HIGHSTATE_WORKER_API_PATH = sockPath\n  services.logger.info(`api listening at %s`, sockPath)\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highstate/backend-api",
-  "version": "0.9.18",
+  "version": "0.9.20",
   "type": "module",
   "files": [
     "dist",
@@ -17,8 +17,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "highstate build",
-    "generate-sdk": "./scripts/generate-sdk.sh"
+    "build": "highstate build"
   },
   "peerDependencies": {
     "@pulumi/pulumi": "^3.163.0",
@@ -32,18 +31,16 @@
       "optional": true
     }
   },
-  "devDependencies": {
-    "ts-proto": "^2.7.5"
-  },
   "dependencies": {
     "@bufbuild/protobuf": "^2.6.1",
-    "@highstate/api": "^0.9.18",
-    "@highstate/backend": "^0.9.18",
-    "@highstate/cli": "^0.9.18",
+    "@highstate/api": "^0.9.20",
+    "@highstate/backend": "^0.9.20",
+    "@highstate/cli": "^0.9.20",
+    "@highstate/contract": "^0.9.20",
     "abort-controller-x": "^0.4.3",
     "nice-grpc": "^2.1.12",
     "nice-grpc-common": "^2.0.2",
     "zod": "^4.0.5"
   },
-  "gitHead": "9ebcd7da56b00b8ca08bf52cc8438f527338cd64"
+  "gitHead": "4bf9183450c2c6f51d6a99d77efc379ff5c7b7ef"
 }

package/src/handlers/instance.ts

@@ -1,32 +1,44 @@
-import type { Services } from "@highstate/backend"
 import type { InstanceServiceImplementation } from "@highstate/api/instance.v1"
-import { instanceCustomStatusSchema } from "@highstate/backend/shared"
+import type { Services } from "@highstate/backend"
+import { instanceCustomStatusInputSchema } from "@highstate/backend/shared"
+import { z } from "@highstate/contract"
 import { authenticate, parseArgument } from "../shared"
 
 export function createInstanceService(services: Services): InstanceServiceImplementation {
   return {
     async updateCustomStatus(request, context) {
-      const [projectId] = await authenticate(services, context)
+      const [projectId, apiKey] = await authenticate(services, context)
 
       // TODO: validate instance access
 
-      const customStatus = parseArgument(request, "status", instanceCustomStatusSchema)
+      const stateId = parseArgument(request, "stateId", z.cuid2())
+      const customStatus = parseArgument(request, "status", instanceCustomStatusInputSchema)
 
       await services.instanceStateService.updateCustomStatus(
         projectId,
-        request.instanceId,
+        stateId,
+        apiKey.serviceAccountId,
         customStatus,
       )
 
       return {}
     },
 
-    async removeCustomStatus(request, _context) {
+    async removeCustomStatus(request, context) {
+      const [projectId, apiKey] = await authenticate(services, context)
+
+      // TODO: validate instance access
+
+      const stateId = parseArgument(request, "stateId", z.cuid2())
+
       await services.instanceStateService.removeCustomStatus(
-        "",
-        request.instanceId,
+        projectId,
+        stateId,
+        apiKey.serviceAccountId,
         request.statusName,
       )
+
+      return {}
     },
   }
 }

package/src/handlers/worker.ts

@@ -1,6 +1,6 @@
-import type { Services } from "@highstate/backend"
 import type { WorkerServiceImplementation } from "@highstate/api/worker.v1"
-import { workerSchema } from "@highstate/backend/shared"
+import type { Services } from "@highstate/backend"
+import { commonObjectMetaSchema, z } from "@highstate/contract"
 import { authenticate, parseArgument } from "../shared"
 
 export function createWorkerService(services: Services): WorkerServiceImplementation {
@@ -8,48 +8,72 @@ export function createWorkerService(services: Services): WorkerServiceImplementa
     async *connect(request, context) {
       const [projectId] = await authenticate(services, context)
 
-      // TODO: check worker access
-      const workerId = parseArgument(request, "workerId", workerSchema.shape.id)
+      const workerVersionId = parseArgument(request, "workerVersionId", z.cuid2())
 
-      const registrationStream = services.pubsubManager.subscribe([
-        "worker-unit-registration",
-        projectId,
-        workerId,
-      ])
+      // set worker as running
+      services.workerManager.setWorkerRunning(projectId, workerVersionId)
 
-      // update worker status
-      await services.workerManager.setWorkerRunning(projectId, workerId)
-      await services.workerManager.writeSystemMessage(projectId, workerId, "worker connected")
+      // get existing registrations for this worker version
+      const database = await services.database.forProject(projectId)
+      const existingRegistrations = await database.workerUnitRegistration.findMany({
+        where: { workerVersionId },
+        select: { stateId: true, params: true },
+      })
 
       // emit existing registrations
-      const registrations = await services.stateManager
-        .getWorkerRegistrationIndexRepository(projectId, workerId)
-        .getAllItems()
-
-      for (const registration of registrations) {
+      for (const registration of existingRegistrations) {
         yield {
           event: {
             $case: "unitRegistration",
             value: {
-              instanceId: registration.id,
+              stateId: registration.stateId,
               params: registration.params,
             },
           },
         }
       }
 
-      // emit new registrations
+      // subscribe to new registration events for this worker version
+      const registrationStream = await services.pubsubManager.subscribe([
+        "worker-unit-registration",
+        projectId,
+        workerVersionId,
+      ])
+
+      // emit new registration/deregistration events
       for await (const event of registrationStream) {
-        yield {
-          event: {
-            $case: "unitRegistration",
-            value: {
-              instanceId: event.instanceId,
-              params: event.params,
+        if (event.type === "registered") {
+          yield {
+            event: {
+              $case: "unitRegistration",
+              value: {
+                instanceId: event.instanceId,
+                params: event.params,
+              },
             },
-          },
+          }
+        } else if (event.type === "deregistered") {
+          yield {
+            event: {
+              $case: "unitDeregistration",
+              value: {
+                instanceId: event.instanceId,
+              },
+            },
+          }
         }
       }
     },
+
+    async updateWorkerVersionMeta(request, context) {
+      const [projectId] = await authenticate(services, context)
+
+      const workerVersionId = parseArgument(request, "workerVersionId", z.string())
+      const meta = parseArgument(request, "meta", commonObjectMetaSchema)
+
+      await services.workerService.updateWorkerVersionMeta(projectId, workerVersionId, meta)
+
+      return {}
+    },
   }
 }

package/src/index.ts

@@ -1,6 +1,6 @@
 import { rm } from "node:fs/promises"
 import { createServer } from "nice-grpc"
-import { type Services } from "@highstate/backend"
+import type { Services } from "@highstate/backend"
 import { InstanceServiceDefinition } from "@highstate/api/instance.v1"
 import { SecretServiceDefinition } from "@highstate/api/secret.v1"
 import { WorkerServiceDefinition } from "@highstate/api/worker.v1"
@@ -17,7 +17,7 @@ export async function startBackedApi(services: Services) {
   server.add(SecretServiceDefinition, createSecretService(services))
   server.add(WorkerServiceDefinition, createWorkerService(services))
 
-  const uid = process.geteuid!()
+  const uid = process.geteuid?.()
   const sockPath = `/run/user/${uid}/highstate.sock`
 
   try {

package/src/shared/authentication.ts

@@ -1,11 +1,10 @@
-import type { Services } from "@highstate/backend"
-import type { ProjectApiKey } from "@highstate/backend/shared"
-import { ServerError, Status, type CallContext } from "nice-grpc-common"
+import type { ApiKey, Services } from "@highstate/backend"
+import { type CallContext, ServerError, Status } from "nice-grpc-common"
 
 export async function authenticate(
   services: Services,
   context: CallContext,
-): Promise<[projectId: string, apiKey: ProjectApiKey]> {
+): Promise<[projectId: string, apiKey: ApiKey]> {
   const token = context.metadata.get("api-key")
   if (!token) {
     throw new ServerError(Status.UNAUTHENTICATED, "No API key provided")

package/src/shared/error-handling.ts

@@ -1,7 +1,7 @@
 import type { Services } from "@highstate/backend"
-import { ServerError, Status, type CallContext, type ServerMiddlewareCall } from "nice-grpc-common"
-import { isAbortError } from "abort-controller-x"
 import { AccessError } from "@highstate/backend/shared"
+import { isAbortError } from "abort-controller-x"
+import { type CallContext, ServerError, type ServerMiddlewareCall, Status } from "nice-grpc-common"
 
 export function createErrorHandlingMiddleware(services: Services) {
   return async function* errorHandlingMiddleware<TRequest, TResponse>(