@nocobase/app-plugin-agents 0.1.0-beta.1 → 0.1.0-beta.10

package/dist/server/routes/roster.js

@@ -1,10 +1,10 @@
 /**
  * `GET /api/agents/available`: the agents the caller may give work to, for a person (session or API key, scoped keys
- * included) and for an agent's run, which asks for the person who woke it. The agents' configuration is the settings
- * API's (`GET /api/agents`, `agents.agents` read); this answers only what picking one needs.
+ * included) and for an agent's run, which asks for the person who woke it: enabled agents discovered from runners and
+ * reported recently (`Agents.roster`). The Agent page's list is `GET /api/agents`; this answers only what picking one
+ * needs.
  */
 import { apiErrorResponses, cliRoute, describeRoute, listResponse, } from '@nocobase/app-server/router';
-import { entryTools } from '../../shared/agents.js';
 import { AGENTS_VIEW_ACTION } from '../core/callers/index.js';
 import { domainRouter } from '../kernel/http.js';
 import { personOrRunSecurity, tags } from './openapi.js';
@@ -16,7 +16,7 @@ export function createRosterRoutes(services, guard) {
         tags,
         summary: 'List the agents the caller may give work to',
         operationId: 'agentsListAvailableAgents',
-        description: 'The agents that are not archived and that the caller (for a run, the person who woke its agent) may wake: what each is good at, and whether it can take work now. An online agent with no model of its own answers with the system default chat model, and is left out only while there is none.',
+        description: 'The enabled agents the caller (for a run, the person who woke its agent) may give work to, one for each coding tool and model the runners report: what each is good at, whether a runner would take the caller’s work now, whether only personal runners have it, and how many of its runs have not finished. Agents no runner reported for 14 days are left out.',
         security: personOrRunSecurity,
         responses: {
             200: listResponse(AvailableAgentSchema),
@@ -25,26 +25,11 @@ export function createRosterRoutes(services, guard) {
         ...cliRoute({
             command: 'agent list',
             action: AGENTS_VIEW_ACTION,
-            columns: ['id', 'name', 'type', 'online', 'busy', 'goodAt'],
+            columns: ['id', 'name', 'online', 'busy', 'goodAt'],
             examples: ['agent list', 'agent list --json'],
         }),
     }), async (context) => {
-        const userId = context.get('caller').userId;
-        const hasDefault = Boolean((await services.online.services.defaults()).effectiveChat);
-        const agents = (await services.agents.list()).filter((agent) => !agent.archivedAt &&
-            (agent.modelEntries.length > 0 ||
-                (agent.type === 'online' && hasDefault)) &&
-            services.agents.mayInvoke(agent, userId));
-        const availability = await services.availability(services.tx.read(), agents);
-        const data = agents.map((agent) => ({
-            id: agent.id,
-            name: agent.name,
-            goodAt: agent.description ?? '',
-            type: agent.type,
-            tool: entryTools(agent)[0] ?? null,
-            online: availability.get(agent.id)?.online ?? false,
-            busy: availability.get(agent.id)?.busy ?? 0,
-        }));
+        const data = await services.roster(services.tx.read(), context.get('caller').userId);
         return context.json({ data, meta: { total: data.length } });
     });
     return router;

package/dist/server/routes/roster.js.map

@@ -1 +1 @@
-{"version":3,"file":"roster.js","sourceRoot":"","sources":["../../../server/routes/roster.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,GACb,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,UAAU,EAAuB,MAAM,wBAAwB,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,KAAkC;IAElC,MAAM,MAAM,GAAG,YAAY,EAAY,CAAC;IACxC,MAAM,CAAC,GAAG,CACR,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,6CAA6C;QACtD,WAAW,EAAE,2BAA2B;QACxC,WAAW,EACT,kSAAkS;QACpS,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,oBAAoB,CAAC;YACvC,GAAG,iBAAiB;SACrB;QACD,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YAC3D,QAAQ,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;SAC9C,CAAC;KACH,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5C,MAAM,UAAU,GAAG,OAAO,CACxB,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,aAAa,CAC1D,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,KAAK,CAAC,UAAU;YACjB,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;gBAC5B,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC;YAC1C,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAC3C,CAAC;QACF,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAC9C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAClB,MAAM,CACP,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAkB,EAAE,CAAC,CAAC;YAClD,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI;YAClC,MAAM,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,IAAI,KAAK;YACnD,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC;SAC5C,CAAC,CAAC,CAAC;QACJ,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"roster.js","sourceRoot":"","sources":["../../../server/routes/roster.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,aAAa,EACb,YAAY,GACb,MAAM,6BAA6B,CAAC;AAIrC,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,kFAAkF;AAClF,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,KAAkC;IAElC,MAAM,MAAM,GAAG,YAAY,EAAY,CAAC;IACxC,MAAM,CAAC,GAAG,CACR,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,6CAA6C;QACtD,WAAW,EAAE,2BAA2B;QACxC,WAAW,EACT,mWAAmW;QACrW,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,oBAAoB,CAAC;YACvC,GAAG,iBAAiB;SACrB;QACD,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,YAAY;YACrB,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;YACnD,QAAQ,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;SAC9C,CAAC;KACH,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,MAAM,CAChC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAClB,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/routes/run-requests.d.ts

@@ -0,0 +1,6 @@
+import type { Hono, MiddlewareHandler } from 'hono';
+import type { Agents } from '../composition.js';
+import type { AdminEnv } from './admin.js';
+/** `guard` authenticates a person (no run token, no scoped key) and sets `caller`. */
+export declare function createRunRequestRoutes(services: Agents, guard: MiddlewareHandler<AdminEnv>): Hono<AdminEnv>;
+//# sourceMappingURL=run-requests.d.ts.map

package/dist/server/routes/run-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-requests.d.ts","sourceRoot":"","sources":["../../../server/routes/run-requests.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAW,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAI7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAOhD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AA2B3C,sFAAsF;AACtF,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,CAwShB"}

package/dist/server/routes/run-requests.js

@@ -0,0 +1,216 @@
+/**
+ * Run requests, mounted at `/api/agents`: work someone asked of an agent on a subject another person answers for,
+ * waiting for that person (`shared/runs.ts`, `core/runs/run-requests.ts`). For people only, by their session or an
+ * unscoped API key: a run's token or a scoped key never settles a request, because confirming one makes a run act as
+ * the person who confirms.
+ *
+ * - The caller sees the requests they answer for or asked, and no other: an administrator or a manager of agents
+ *   included, since a request holds someone's words for one person.
+ * - Only the responsible confirms or rejects; only the person who asked withdraws or runs it as themselves.
+ * - A request that is not pending answers `RUN_REQUEST_SETTLED`.
+ */
+import { apiErrorResponse, apiErrorResponses, apiValidator, cliRoute, dataResponse, describeRoute, listResponse, } from '@nocobase/app-server/router';
+import { z } from 'zod';
+import { forbidden, notFound } from '../kernel/errors.js';
+import { decodePageToken, domainRouter, encodePageToken, } from '../kernel/http.js';
+import { tags } from './openapi.js';
+import { PageTokenMetaSchema, RunRequestItemSchema, RunRequestListQuery, RunRequestOutcomeSchema, RunRequestParams, RunRequestRejectInput, RunRequestSchema, } from './schemas.js';
+const RequestPosition = z.object({ createdAt: z.string(), id: z.string() });
+const noRequest = apiErrorResponse(404, 'The run request does not exist, or the caller neither answers for it nor asked it.');
+const settledError = (also = '') => apiErrorResponse(400, `The request is not pending any more (\`RUN_REQUEST_SETTLED\`, \`metadata.status\` its status)${also}.`);
+/** `guard` authenticates a person (no run token, no scoped key) and sets `caller`. */
+export function createRunRequestRoutes(services, guard) {
+    const router = domainRouter();
+    const requests = services.runs.requests;
+    /** The request of the path, if the caller answers for it or asked it (404 otherwise, as if it did not exist). */
+    const visible = async (context) => {
+        const userId = context.get('caller').userId;
+        const request = await requests.get(context.req.param('requestId') ?? '');
+        if (request.responsibleUserId !== userId &&
+            request.requestedByUserId !== userId)
+            throw notFound('Run request');
+        return request;
+    };
+    /** Only the party who may act on the request goes on: 404 when the caller is in it neither way, 403 when not as `party`. */
+    const party = (who) => async (context, next) => {
+        const request = await visible(context);
+        const userId = context.get('caller').userId;
+        if (who === 'responsible' && request.responsibleUserId !== userId)
+            throw forbidden('Only the person who answers for the subject may confirm or reject this request.');
+        if (who === 'requester' && request.requestedByUserId !== userId)
+            throw forbidden('Only the person who asked may withdraw this request or run it as themselves.');
+        await next();
+    };
+    const requestParam = apiValidator('param', RunRequestParams);
+    router.get('/runRequests', guard, describeRoute({
+        tags,
+        summary: 'List run requests',
+        operationId: 'agentsListRunRequests',
+        description: 'The run requests the caller answers for or asked, newest first, a page at a time: an inbox of work waiting for the caller to confirm (`role=responsible&status=pending`), or of what the caller asked of others.',
+        ...cliRoute({
+            command: 'run request list',
+            flags: {
+                subjectId: { name: 'subject' },
+                agentId: { name: 'agent' },
+                pageSize: { name: 'limit' },
+            },
+            columns: [
+                'id',
+                'agentName',
+                'subject.kind',
+                'subject.id',
+                'requestedByName',
+                'responsibleName',
+                'status',
+                'createdAt',
+            ],
+            examples: [
+                'run request list --role responsible --status pending',
+                'run request list --role requester',
+            ],
+        }),
+        responses: {
+            200: listResponse(RunRequestItemSchema, PageTokenMetaSchema),
+            ...apiErrorResponses,
+        },
+    }), apiValidator('query', RunRequestListQuery), async (context) => {
+        const query = context.req.valid('query');
+        const found = await requests.list({
+            userId: context.get('caller').userId,
+            ...(query.role ? { role: query.role } : {}),
+            ...(query.status ? { status: query.status } : {}),
+            ...(query.subjectKind
+                ? {
+                    subject: {
+                        kind: query.subjectKind,
+                        ...(query.subjectId ? { id: query.subjectId } : {}),
+                    },
+                }
+                : {}),
+            ...(query.agentId ? { agentId: query.agentId } : {}),
+            limit: query.pageSize + 1,
+            ...(query.pageToken === undefined
+                ? {}
+                : { cursor: decodePageToken(query.pageToken, RequestPosition) }),
+        });
+        const page = found.slice(0, query.pageSize);
+        const last = page.at(-1);
+        return context.json({
+            data: page,
+            meta: found.length > query.pageSize && last
+                ? {
+                    nextPageToken: encodePageToken({
+                        createdAt: last.createdAt,
+                        id: last.id,
+                    }),
+                }
+                : {},
+        });
+    });
+    router.get('/runRequests/:requestId', guard, describeRoute({
+        tags,
+        summary: 'Get a run request',
+        operationId: 'agentsGetRunRequest',
+        description: 'With the input as it was asked, in full: what confirming it runs. For the person who answers for it and the person who asked it.',
+        ...cliRoute({
+            command: 'run request get',
+            args: ['requestId'],
+            flags: { requestId: { name: 'request' } },
+        }),
+        responses: {
+            200: dataResponse(RunRequestItemSchema),
+            404: noRequest,
+            ...apiErrorResponses,
+        },
+    }), requestParam, async (context) => context.json({ data: await visible(context) }));
+    router.post('/runRequests/:requestId/confirm', guard, party('responsible'), describeRoute({
+        tags,
+        summary: 'Confirm a run request',
+        operationId: 'agentsConfirmRunRequest',
+        description: "Runs the work as the request's responsible, who must still be able to wake the agent. When the subject binds a current responsible resolver, it is rechecked; otherwise the application must reassign requests when responsibility changes. Administrators and agent managers cannot confirm for them. The original input joins only a run acting as the caller.",
+        ...cliRoute({
+            command: 'run request confirm',
+            args: ['requestId'],
+            flags: { requestId: { name: 'request' } },
+            confirm: 'Run this request as you?',
+        }),
+        responses: {
+            200: dataResponse(RunRequestOutcomeSchema),
+            400: settledError(', or the agent is archived (`AGENT_ARCHIVED`)'),
+            403: apiErrorResponse(403, 'The caller does not answer for the subject, or may no longer wake the agent (`FORBIDDEN`).'),
+            404: noRequest,
+            409: apiErrorResponse(409, 'The request changed concurrently; read it again.'),
+            401: apiErrorResponse(401),
+            500: apiErrorResponse(500),
+        },
+    }), requestParam, async (context) => context.json({
+        data: await requests.confirm(context.req.valid('param').requestId, context.get('caller').userId),
+    }));
+    router.post('/runRequests/:requestId/reject', guard, party('responsible'), describeRoute({
+        tags,
+        summary: 'Reject a run request',
+        operationId: 'agentsRejectRunRequest',
+        description: "Declines the work; only the request's responsible may. The subject's current responsible resolver is rechecked when bound; otherwise the application must reassign requests on responsibility changes. The person who asked may run it as themselves by asking again.",
+        ...cliRoute({
+            command: 'run request reject',
+            args: ['requestId'],
+            flags: { requestId: { name: 'request' } },
+        }),
+        responses: {
+            200: dataResponse(RunRequestSchema),
+            400: settledError(),
+            409: apiErrorResponse(409, 'The request changed concurrently; read it again.'),
+            404: noRequest,
+            ...apiErrorResponses,
+        },
+    }), requestParam, apiValidator('json', RunRequestRejectInput), async (context) => {
+        const { note } = context.req.valid('json');
+        return context.json({
+            data: await requests.reject(context.req.valid('param').requestId, context.get('caller').userId, note),
+        });
+    });
+    router.post('/runRequests/:requestId/withdraw', guard, party('requester'), describeRoute({
+        tags,
+        summary: 'Withdraw a run request',
+        operationId: 'agentsWithdrawRunRequest',
+        description: 'Takes the request back; only the person who asked may.',
+        ...cliRoute({
+            command: 'run request withdraw',
+            args: ['requestId'],
+            flags: { requestId: { name: 'request' } },
+        }),
+        responses: {
+            200: dataResponse(RunRequestSchema),
+            400: settledError(),
+            409: apiErrorResponse(409, 'The request changed concurrently; read it again.'),
+            404: noRequest,
+            ...apiErrorResponses,
+        },
+    }), requestParam, async (context) => context.json({
+        data: await requests.withdraw(context.req.valid('param').requestId, context.get('caller').userId),
+    }));
+    router.post('/runRequests/:requestId/runAsMe', guard, party('requester'), describeRoute({
+        tags,
+        summary: 'Run a run request as the caller',
+        operationId: 'agentsRunRunRequestAsMe',
+        description: 'The person who asked runs the work as themselves now, without waiting for confirmation: on their own runner or a team runner, never on the runners of the person who answers for the subject. A pending request is withdrawn; an expired one that went nowhere may be run this way once. Refused with `NO_RUNNER_AVAILABLE` when no runner the caller may use can run the agent now, so the work never waits unseen.',
+        ...cliRoute({
+            command: 'run request run-as-me',
+            args: ['requestId'],
+            flags: { requestId: { name: 'request' } },
+        }),
+        responses: {
+            200: dataResponse(RunRequestOutcomeSchema),
+            400: settledError(', no runner the caller may use can run the agent (`NO_RUNNER_AVAILABLE`), or the agent is archived (`AGENT_ARCHIVED`)'),
+            403: apiErrorResponse(403, 'The caller did not ask it, or may not wake the agent (`FORBIDDEN`).'),
+            404: noRequest,
+            409: apiErrorResponse(409, 'The request changed concurrently; read it again.'),
+            401: apiErrorResponse(401),
+            500: apiErrorResponse(500),
+        },
+    }), requestParam, async (context) => context.json({
+        data: await requests.runAsRequester(context.req.valid('param').requestId, context.get('caller').userId),
+    }));
+    return router;
+}
+//# sourceMappingURL=run-requests.js.map

package/dist/server/routes/run-requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-requests.js","sourceRoot":"","sources":["../../../server/routes/run-requests.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,YAAY,GAEb,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EACL,eAAe,EACf,YAAY,EACZ,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AACpC,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAEtB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAK5E,MAAM,SAAS,GAAsB,gBAAgB,CACnD,GAAG,EACH,oFAAoF,CACrF,CAAC;AACF,MAAM,YAAY,GAAG,CAAC,IAAI,GAAG,EAAE,EAAqB,EAAE,CACpD,gBAAgB,CACd,GAAG,EACH,gGAAgG,IAAI,GAAG,CACxG,CAAC;AAEJ,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,KAAkC;IAElC,MAAM,MAAM,GAAG,YAAY,EAAY,CAAC;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;IAExC,iHAAiH;IACjH,MAAM,OAAO,GAAG,KAAK,EACnB,OAA0B,EACD,EAAE;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QACzE,IACE,OAAO,CAAC,iBAAiB,KAAK,MAAM;YACpC,OAAO,CAAC,iBAAiB,KAAK,MAAM;YAEpC,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,4HAA4H;IAC5H,MAAM,KAAK,GACT,CAAC,GAAU,EAA+B,EAAE,CAC5C,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC5C,IAAI,GAAG,KAAK,aAAa,IAAI,OAAO,CAAC,iBAAiB,KAAK,MAAM;YAC/D,MAAM,SAAS,CACb,iFAAiF,CAClF,CAAC;QACJ,IAAI,GAAG,KAAK,WAAW,IAAI,OAAO,CAAC,iBAAiB,KAAK,MAAM;YAC7D,MAAM,SAAS,CACb,8EAA8E,CAC/E,CAAC;QACJ,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;IAEJ,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAE7D,MAAM,CAAC,GAAG,CACR,cAAc,EACd,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,uBAAuB;QACpC,WAAW,EACT,kNAAkN;QACpN,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,kBAAkB;YAC3B,KAAK,EAAE;gBACL,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;gBAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;gBAC1B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;aAC5B;YACD,OAAO,EAAE;gBACP,IAAI;gBACJ,WAAW;gBACX,cAAc;gBACd,YAAY;gBACZ,iBAAiB;gBACjB,iBAAiB;gBACjB,QAAQ;gBACR,WAAW;aACZ;YACD,QAAQ,EAAE;gBACR,sDAAsD;gBACtD,mCAAmC;aACpC;SACF,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,oBAAoB,EAAE,mBAAmB,CAAC;YAC5D,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,OAAO,EAAE,mBAAmB,CAAC,EAC1C,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;YAChC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM;YACpC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,WAAW;gBACnB,CAAC,CAAC;oBACE,OAAO,EAAE;wBACP,IAAI,EAAE,KAAK,CAAC,WAAW;wBACvB,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACpD;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,KAAK,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,IAAI;YACV,IAAI,EACF,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI;gBACnC,CAAC,CAAC;oBACE,aAAa,EAAE,eAAe,CAAC;wBAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,EAAE,EAAE,IAAI,CAAC,EAAE;qBACZ,CAAC;iBACH;gBACH,CAAC,CAAC,EAAE;SACT,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,yBAAyB,EACzB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,mBAAmB;QAC5B,WAAW,EAAE,qBAAqB;QAClC,WAAW,EACT,kIAAkI;QACpI,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,iBAAiB;YAC1B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SAC1C,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,oBAAoB,CAAC;YACvC,GAAG,EAAE,SAAS;YACd,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,EACZ,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAClE,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,iCAAiC,EACjC,KAAK,EACL,KAAK,CAAC,aAAa,CAAC,EACpB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,yBAAyB;QACtC,WAAW,EACT,kWAAkW;QACpW,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,qBAAqB;YAC9B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACzC,OAAO,EAAE,0BAA0B;SACpC,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,uBAAuB,CAAC;YAC1C,GAAG,EAAE,YAAY,CAAC,+CAA+C,CAAC;YAClE,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,4FAA4F,CAC7F;YACD,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,kDAAkD,CACnD;YACD,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;YAC1B,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,EACZ,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,QAAQ,CAAC,OAAO,CAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,EACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B;KACF,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,gCAAgC,EAChC,KAAK,EACL,KAAK,CAAC,aAAa,CAAC,EACpB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EAAE,wBAAwB;QACrC,WAAW,EACT,uQAAuQ;QACzQ,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,oBAAoB;YAC7B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SAC1C,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,CAAC;YACnC,GAAG,EAAE,YAAY,EAAE;YACnB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,kDAAkD,CACnD;YACD,GAAG,EAAE,SAAS;YACd,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,EACZ,YAAY,CAAC,MAAM,EAAE,qBAAqB,CAAC,EAC3C,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,CACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,EACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,EAC5B,IAAI,CACL;SACF,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,kCAAkC,EAClC,KAAK,EACL,KAAK,CAAC,WAAW,CAAC,EAClB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,wBAAwB;QACjC,WAAW,EAAE,0BAA0B;QACvC,WAAW,EAAE,wDAAwD;QACrE,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,sBAAsB;YAC/B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SAC1C,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,gBAAgB,CAAC;YACnC,GAAG,EAAE,YAAY,EAAE;YACnB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,kDAAkD,CACnD;YACD,GAAG,EAAE,SAAS;YACd,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,EACZ,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,QAAQ,CAAC,QAAQ,CAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,EACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B;KACF,CAAC,CACL,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,iCAAiC,EACjC,KAAK,EACL,KAAK,CAAC,WAAW,CAAC,EAClB,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,yBAAyB;QACtC,WAAW,EACT,sZAAsZ;QACxZ,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,uBAAuB;YAChC,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SAC1C,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,uBAAuB,CAAC;YAC1C,GAAG,EAAE,YAAY,CACf,uHAAuH,CACxH;YACD,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,qEAAqE,CACtE;YACD,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,kDAAkD,CACnD;YACD,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;YAC1B,GAAG,EAAE,gBAAgB,CAAC,GAAG,CAAC;SAC3B;KACF,CAAC,EACF,YAAY,EACZ,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,QAAQ,CAAC,cAAc,CACjC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,EACpC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B;KACF,CAAC,CACL,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/routes/runners/admin.d.ts

@@ -13,8 +13,16 @@ export interface AdminEnv {
         runnerToManage: Runner;
     };
 }
+/** Where a manager revoking someone else's runner is recorded: the application's logger. */
+export interface AdminAuditLogger {
+    info(details: Readonly<Record<string, unknown>>, message: string): void;
+}
+export interface AdminRoutesOptions {
+    /** Without one, the record goes to the console. */
+    readonly logger?: AdminAuditLogger;
+}
 /**
  * `guard` authenticates the request and sets `caller`; the route contribution installs the real one, tests a fake.
  */
-export declare function createAdminRoutes(services: Agents, guard: MiddlewareHandler<AdminEnv>): Hono<AdminEnv>;
+export declare function createAdminRoutes(services: Agents, guard: MiddlewareHandler<AdminEnv>, options?: AdminRoutesOptions): Hono<AdminEnv>;
 //# sourceMappingURL=admin.d.ts.map

package/dist/server/routes/runners/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../../server/routes/runners/admin.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAW,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE7D,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EACV,MAAM,EAIP,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAiBnD,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAMD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,GACjC,IAAI,CAAC,QAAQ,CAAC,CAiXhB"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../../../server/routes/runners/admin.ts"],"names":[],"mappings":"AAiCA,OAAO,KAAK,EAAW,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAE7D,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9E,OAAO,KAAK,EACV,MAAM,EAIP,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAiBnD,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D;AAMD,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACzE;AAED,MAAM,WAAW,kBAAkB;IACjC,mDAAmD;IACnD,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CACpC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAClC,OAAO,GAAE,kBAAuB,GAC/B,IAAI,CAAC,QAAQ,CAAC,CAqahB"}

package/dist/server/routes/runners/admin.js

@@ -3,10 +3,14 @@
  * and registration tokens. Every route is behind the guard the route contribution passes (a signed-in user and their
  * authorization context); what each caller may do is checked here.
  *
- * - `agents.runners` read/manage: every runner; adding a team runner, changing, revoking and deleting any runner.
- *   Anyone signed in may add a personal runner and manage their own runners, including sharing one with the team and
- *   choosing which coding tools it runs. Reading agents (`agents.agents` read) also shows every runner, to pick where
- *   an agent runs.
+ * - `agents.runners` read/manage: every runner; adding a team runner, and revoking and deleting any runner. Revoking
+ *   someone else's runner is an emergency measure: its owner is told, and the server log records who did it.
+ * - Changing a runner (its name, slots, coding tools, policy and trust) is its owner's alone, because the runner is
+ *   their machine with their tools' sign-ins and credentials: a manager who could share it with the team would send
+ *   everyone's work there. A runner whose owner can no longer act (no owner recorded, or an owner the application's
+ *   directory reports disabled or deleted, `people.inactive`) is changed by managers of runners, or nobody could.
+ *   Anyone signed in may add a personal runner and change their own, including sharing it with the
+ *   team. Reading agents (`agents.agents` read) also shows every runner, to pick where an agent runs.
  * - A runner's page: whoever sees a runner sees which agents it takes (`takes`), what it holds now
  *   (`GET /agents/runners/:runnerId/work`: its runs as the caller may see them, then its jobs) and its latest runs
  *   (`GET /agents/runners/:runnerId/runs`). What identifies its machine (its host name, where its tools are installed)
@@ -27,13 +31,21 @@ function caller(context) {
 /**
  * `guard` authenticates the request and sets `caller`; the route contribution installs the real one, tests a fake.
  */
-export function createAdminRoutes(services, guard) {
+export function createAdminRoutes(services, guard, options = {}) {
+    const audit = options.logger ?? {
+        info: (details, message) => console.info(message, details),
+    };
     const router = domainRouter();
     const runnerParam = apiValidator('param', RunnerParams);
     const notVisible = apiErrorResponse(404, 'The runner does not exist, or the caller may not see it.');
-    const manageErrors = {
+    const editErrors = {
         ...apiErrorResponses,
-        403: apiErrorResponse(403, "Only the runner's owner or a manager of runners (`agents.runners` manage) may change it."),
+        403: apiErrorResponse(403, "Only the runner's owner may change it; a manager of runners (`agents.runners` manage) only once its owner can no longer act."),
+        404: notVisible,
+    };
+    const revokeErrors = {
+        ...apiErrorResponses,
+        403: apiErrorResponse(403, "Only the runner's owner or a manager of runners (`agents.runners` manage) may revoke or delete it."),
         404: notVisible,
     };
     /** Whether the caller sees every runner: `agents.runners` read, or `agents.agents` read (to pick where one runs). */
@@ -51,14 +63,18 @@ export function createAdminRoutes(services, guard) {
         }
         return found;
     };
+    /** Whether nobody can act as the runner's owner: none recorded, or one the directory reports disabled or deleted. */
+    const ownerGone = async (runner) => runner.ownerUserId === null ||
+        (await services.people.inactive(services.tx.read(), [runner.ownerUserId])).has(runner.ownerUserId);
     /** What the caller may do with a runner, or 404 when they may not see it. */
     const runnerRights = async (context, runner) => {
         const who = caller(context);
         const own = runner.ownerUserId === who.userId;
-        const manage = own || (await who.can('agents.runners', 'manage'));
-        const see = manage || (await seesEveryRunner(who));
-        const machine = manage || (see && (await mayUseAgents(who)));
-        return { see, manage, machine };
+        const revoke = own || (await who.can('agents.runners', 'manage'));
+        const edit = own || (revoke && (await ownerGone(runner)));
+        const see = revoke || (await seesEveryRunner(who));
+        const machine = revoke || (see && (await mayUseAgents(who)));
+        return { see, edit, revoke, machine };
     };
     /** The agents each runner takes. */
     const takesOf = async (runners) => runners.length > 0
@@ -73,20 +89,32 @@ export function createAdminRoutes(services, guard) {
             activeJobs: held.jobs,
             activeByTool: held.byTool ?? {},
             takes: takes.get(runner.id) ?? [],
-            canManage: rights.manage,
-            canChangeTrust: rights.manage,
+            canManage: rights.edit,
+            canChangeTrust: rights.edit,
+            canRevoke: rights.revoke,
             updateVersion: (await upgradeFor(services.dist, runner))?.latestVersion ?? null,
             requiredProtocol: { min: MIN_PROTOCOL_VERSION, max: PROTOCOL_VERSION },
             offersJobs: services.jobs.kinds().length > 0,
         };
     };
-    const manageableRunner = async (context) => {
+    /** The runner named in the path if the caller may change it: 404 when they may not see it, 403 when not theirs. */
+    const editableRunner = async (context) => {
+        const runner = await services.runners.get(context.req.param('runnerId') ?? '');
+        const rights = await runnerRights(context, runner);
+        if (!rights.see)
+            throw notFound('Runner');
+        if (!rights.edit)
+            throw forbidden("Only the runner's owner may change it; a manager of runners only once its owner can no longer act.");
+        return runner;
+    };
+    /** The runner named in the path if the caller may revoke or delete it: 404 when they may not see it, else 403. */
+    const revocableRunner = async (context) => {
         const runner = await services.runners.get(context.req.param('runnerId') ?? '');
         const rights = await runnerRights(context, runner);
         if (!rights.see)
             throw notFound('Runner');
-        if (!rights.manage)
-            throw forbidden("Only the runner's owner or a manager of runners may change it.");
+        if (!rights.revoke)
+            throw forbidden("Only the runner's owner or a manager of runners may revoke or delete it.");
         return runner;
     };
     // Runners.
@@ -228,9 +256,10 @@ export function createAdminRoutes(services, guard) {
             args: ['runnerId'],
             flags: { runnerId: { name: 'runtime' } },
         }),
-        responses: { 200: dataResponse(RunnerSchema), ...manageErrors },
+        description: "Its owner's alone, a manager of runners (`agents.runners` manage) included; a runner whose owner can no longer act (none recorded, or disabled or deleted) is changed by managers of runners.",
+        responses: { 200: dataResponse(RunnerSchema), ...editErrors },
     }), runnerParam, async (context, next) => {
-        context.set('runnerToManage', await manageableRunner(context));
+        context.set('runnerToManage', await editableRunner(context));
         await next();
     }, apiValidator('json', RunnerPatchInput), async (context) => context.json({
         data: await services.runners.update(context.get('runnerToManage').id, context.req.valid('json')),
@@ -245,11 +274,20 @@ export function createAdminRoutes(services, guard) {
             flags: { runnerId: { name: 'runtime' } },
             confirm: 'Revoke this runtime? It stops taking work and must register again.',
         }),
-        description: 'Revokes the runner and its keys; the runs and jobs it held go back to the queue.',
-        responses: { 200: dataResponse(RunnerSchema), ...manageErrors },
+        description: "Revokes the runner and its keys; the runs and jobs it held go back to the queue. Its owner or a manager of runners (`agents.runners` manage); a manager revoking someone else's runner tells its owner.",
+        responses: { 200: dataResponse(RunnerSchema), ...revokeErrors },
     }), runnerParam, async (context) => {
-        const runner = await manageableRunner(context);
-        const revoked = await services.runners.revoke(runner.id);
+        const runner = await revocableRunner(context);
+        const by = caller(context).userId;
+        const revoked = await services.runners.revoke(runner.id, { by });
+        if (runner.ownerUserId !== null && runner.ownerUserId !== by)
+            audit.info({
+                event: 'agents.runner.revoked',
+                runnerId: runner.id,
+                runnerName: runner.name,
+                ownerUserId: runner.ownerUserId,
+                actorId: by,
+            }, "A manager of runners revoked someone else's runner.");
         // What it held goes back to the queue now rather than at the next sweep.
         await services.sweeper.sweep();
         return context.json({ data: revoked });
@@ -267,11 +305,11 @@ export function createAdminRoutes(services, guard) {
         description: 'Deletes a revoked runner; its past runs keep its id.',
         responses: {
             204: emptyResponse(),
-            ...manageErrors,
+            ...revokeErrors,
             400: apiErrorResponse(400, 'The runner is not revoked (`RUNNER_NOT_REVOKED`).'),
         },
     }), runnerParam, async (context) => {
-        const runner = await manageableRunner(context);
+        const runner = await revocableRunner(context);
         await services.runners.remove(runner.id);
         return context.body(null, 204);
     });

package/dist/server/routes/runners/admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../../server/routes/runners/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,6BAA6B,CAAC;AAWrC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAYvB,SAAS,MAAM,CAAC,OAA0B;IACxC,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,KAAkC;IAElC,MAAM,MAAM,GAAG,YAAY,EAAY,CAAC;IACxC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,CACjC,GAAG,EACH,0DAA0D,CAC3D,CAAC;IACF,MAAM,YAAY,GAAG;QACnB,GAAG,iBAAiB;QACpB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,0FAA0F,CAC3F;QACD,GAAG,EAAE,UAAU;KAChB,CAAC;IAEF,qHAAqH;IACrH,MAAM,eAAe,GAAG,KAAK,EAAE,GAAgB,EAAoB,EAAE,CACnE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,8EAA8E;IAC9E,MAAM,UAAU,GAAG,IAAI,OAAO,EAAiC,CAAC;IAChE,MAAM,YAAY,GAAG,CAAC,GAAgB,EAAoB,EAAE;QAC1D,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,QAAQ,CAAC,MAAM;iBACpB,IAAI,EAAE;iBACN,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CACrE,CAAC;YACJ,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,6EAA6E;IAC7E,MAAM,YAAY,GAAG,KAAK,EACxB,OAA0B,EAC1B,MAAc,EAKb,EAAE;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC,CAAC;IAEF,oCAAoC;IACpC,MAAM,OAAO,GAAG,KAAK,EACnB,OAA0B,EACiC,EAAE,CAC7D,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,CAAC,CAAC,IAAI,GAAG,EAAuC,CAAC;IAErD,MAAM,eAAe,GAAG,KAAK,EAC3B,OAA0B,EAC1B,MAAc,EACd,KAAuD,EAC/B,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO;YACL,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,YAAY,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YAC/B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YACjC,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,cAAc,EAAE,MAAM,CAAC,MAAM;YAC7B,aAAa,EACX,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,aAAa,IAAI,IAAI;YAClE,gBAAgB,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,gBAAgB,EAAE;YACtE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAC5B,OAA0B,EACT,EAAE;QACnB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CACpC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,MAAM;YAChB,MAAM,SAAS,CACb,gEAAgE,CACjE,CAAC;QACJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,WAAW;IACX,2EAA2E;IAC3E,MAAM,aAAa,GAAG,KAAK,EAAE,OAA0B,EAAmB,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,GAAG,EACH,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,mBAAmB;QAChC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC;SACtE,CAAC;QACF,WAAW,EACT,2HAA2H;QAC7H,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,mBAAmB,CAAC;YACtC,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;YAChD,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAoB,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,oCAAoC;QAC7C,WAAW,EAAE,qCAAqC;QAClD,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,sBAAsB;YAC/B,QAAQ,EAAE,CAAC,mCAAmC,CAAC;SAChD,CAAC;QACF,WAAW,EACT,+NAA+N;QACjO,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,uBAAuB,EAAE,UAAU,CAAC;YACtD,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,4BAA4B,CAAC,EAClD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IACE,KAAK,CAAC,KAAK,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YAE5C,MAAM,SAAS,CACb,8EAA8E,CAC/E,CAAC;QACJ,OAAO,OAAO,CAAC,IAAI,CACjB;YACE,IAAI,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAClD,GAAG,CAAC,MAAM,EACV,KAAK,CACN;SACF,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CACF,CAAC;IACF,MAAM,CAAC,GAAG,CACR,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,iBAAiB;QAC9B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SACzC,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,mBAAmB,CAAC;YACtC,GAAG,iBAAiB;YACpB,GAAG,EAAE,UAAU;SAChB;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SACtE,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,0DAA0D;IAC1D,MAAM,CAAC,GAAG,CACR,iBAAiB,EACjB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,sBAAsB;QACnC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;SACxD,CAAC;QACF,WAAW,EACT,2FAA2F;QAC7F,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,oBAAoB,CAAC;YACvC,GAAG,iBAAiB;YACpB,GAAG,EAAE,UAAU;SAChB;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CACzC,MAAM,EACN,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CACvB,CAAC;QACF,MAAM,IAAI,GAAG,CACX,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAC9D,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CACjE,CAAC;QACF,MAAM,IAAI,GAAqB;YAC7B,GAAG,IAAI;YACP,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACpB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,KAAc;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAkC;gBAC9C,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,YAAY;gBAC5C,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;SACJ,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,CAAC,GAAG,CACR,iBAAiB,EACjB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,sBAAsB;QACnC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;SAChD,CAAC;QACF,WAAW,EACT,mHAAmH;QACrH,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,qBAAqB,CAAC;YACxC,GAAG,iBAAiB;YACpB,GAAG,EAAE,UAAU;SAChB;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAC3C,MAAM,EACN,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CACvB,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CACV,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,oBAAoB;QACjC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SACzC,CAAC;QACF,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG,YAAY,EAAE;KAChE,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,EACD,YAAY,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACtC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CACjC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAC1B;KACF,CAAC,CACL,CAAC;IACF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,oBAAoB;QACjC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EACL,oEAAoE;SACvE,CAAC;QACF,WAAW,EACT,kFAAkF;QACpF,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG,YAAY,EAAE;KAChE,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzD,yEAAyE;QACzE,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC,CACF,CAAC;IACF,MAAM,CAAC,MAAM,CACX,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,oBAAoB;QACjC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EAAE,sBAAsB;SAChC,CAAC;QACF,WAAW,EAAE,sDAAsD;QACnE,SAAS,EAAE;YACT,GAAG,EAAE,aAAa,EAAE;YACpB,GAAG,YAAY;YACf,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,mDAAmD,CACpD;SACF;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../../../server/routes/runners/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,6BAA6B,CAAC;AAWrC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,oBAAoB,EACpB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,mBAAmB,GACpB,MAAM,eAAe,CAAC;AAYvB,SAAS,MAAM,CAAC,OAA0B;IACxC,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAYD;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,KAAkC,EAClC,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAqB,OAAO,CAAC,MAAM,IAAI;QAChD,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;KAC3D,CAAC;IACF,MAAM,MAAM,GAAG,YAAY,EAAY,CAAC;IACxC,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,CACjC,GAAG,EACH,0DAA0D,CAC3D,CAAC;IACF,MAAM,UAAU,GAAG;QACjB,GAAG,iBAAiB;QACpB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,8HAA8H,CAC/H;QACD,GAAG,EAAE,UAAU;KAChB,CAAC;IACF,MAAM,YAAY,GAAG;QACnB,GAAG,iBAAiB;QACpB,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,oGAAoG,CACrG;QACD,GAAG,EAAE,UAAU;KAChB,CAAC;IAEF,qHAAqH;IACrH,MAAM,eAAe,GAAG,KAAK,EAAE,GAAgB,EAAoB,EAAE,CACnE,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3C,8EAA8E;IAC9E,MAAM,UAAU,GAAG,IAAI,OAAO,EAAiC,CAAC;IAChE,MAAM,YAAY,GAAG,CAAC,GAAgB,EAAoB,EAAE;QAC1D,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,QAAQ,CAAC,MAAM;iBACpB,IAAI,EAAE;iBACN,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CACrE,CAAC;YACJ,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,qHAAqH;IACrH,MAAM,SAAS,GAAG,KAAK,EAAE,MAAc,EAAoB,EAAE,CAC3D,MAAM,CAAC,WAAW,KAAK,IAAI;QAC3B,CACE,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CACzE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAE5B,6EAA6E;IAC7E,MAAM,YAAY,GAAG,KAAK,EACxB,OAA0B,EAC1B,MAAc,EAMb,EAAE;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,KAAK,GAAG,CAAC,MAAM,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC,CAAC;IAEF,oCAAoC;IACpC,MAAM,OAAO,GAAG,KAAK,EACnB,OAA0B,EACiC,EAAE,CAC7D,OAAO,CAAC,MAAM,GAAG,CAAC;QAChB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;QACpC,CAAC,CAAC,IAAI,GAAG,EAAuC,CAAC;IAErD,MAAM,eAAe,GAAG,KAAK,EAC3B,OAA0B,EAC1B,MAAc,EACd,KAAuD,EAC/B,EAAE;QAC1B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtE,OAAO;YACL,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC;YAC1C,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,UAAU,EAAE,IAAI,CAAC,IAAI;YACrB,YAAY,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YAC/B,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;YACjC,SAAS,EAAE,MAAM,CAAC,IAAI;YACtB,cAAc,EAAE,MAAM,CAAC,IAAI;YAC3B,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,aAAa,EACX,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,aAAa,IAAI,IAAI;YAClE,gBAAgB,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,gBAAgB,EAAE;YACtE,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,GAAG,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC;IAEF,mHAAmH;IACnH,MAAM,cAAc,GAAG,KAAK,EAC1B,OAA0B,EACT,EAAE;QACnB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CACpC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,IAAI;YACd,MAAM,SAAS,CACb,oGAAoG,CACrG,CAAC;QACJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,kHAAkH;IAClH,MAAM,eAAe,GAAG,KAAK,EAC3B,OAA0B,EACT,EAAE;QACnB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CACpC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,MAAM;YAChB,MAAM,SAAS,CACb,0EAA0E,CAC3E,CAAC;QACJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,WAAW;IACX,2EAA2E;IAC3E,MAAM,aAAa,GAAG,KAAK,EAAE,OAA0B,EAAmB,EAAE;QAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,CACvC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CACpC,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,CAAC,GAAG,CACR,GAAG,EACH,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,mBAAmB;QAChC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,CAAC;SACtE,CAAC;QACF,WAAW,EACT,2HAA2H;QAC7H,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,mBAAmB,CAAC;YACtC,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;YAChD,IAAI,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG;gBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAoB,EAAE,CAAC;QACjC,KAAK,MAAM,MAAM,IAAI,OAAO;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,CAAC,IAAI,CACT,qBAAqB,EACrB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,oCAAoC;QAC7C,WAAW,EAAE,qCAAqC;QAClD,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,sBAAsB;YAC/B,QAAQ,EAAE,CAAC,mCAAmC,CAAC;SAChD,CAAC;QACF,WAAW,EACT,+NAA+N;QACjO,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,uBAAuB,EAAE,UAAU,CAAC;YACtD,GAAG,iBAAiB;SACrB;KACF,CAAC,EACF,YAAY,CAAC,MAAM,EAAE,4BAA4B,CAAC,EAClD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxC,IACE,KAAK,CAAC,KAAK,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;YAE5C,MAAM,SAAS,CACb,8EAA8E,CAC/E,CAAC;QACJ,OAAO,OAAO,CAAC,IAAI,CACjB;YACE,IAAI,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,uBAAuB,CAClD,GAAG,CAAC,MAAM,EACV,KAAK,CACN;SACF,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CACF,CAAC;IACF,MAAM,CAAC,GAAG,CACR,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,iBAAiB;QAC9B,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,aAAa;YACtB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SACzC,CAAC;QACF,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,mBAAmB,CAAC;YACtC,GAAG,iBAAiB;YACpB,GAAG,EAAE,UAAU;SAChB;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,IAAI,CAAC;YAClB,IAAI,EAAE,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;SACtE,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IACF,0DAA0D;IAC1D,MAAM,CAAC,GAAG,CACR,iBAAiB,EACjB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,sBAAsB;QACnC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;SACxD,CAAC;QACF,WAAW,EACT,2FAA2F;QAC7F,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,oBAAoB,CAAC;YACvC,GAAG,iBAAiB;YACpB,GAAG,EAAE,UAAU;SAChB;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,CACzC,MAAM,EACN,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CACvB,CAAC;QACF,MAAM,IAAI,GAAG,CACX,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAC9D,CAAC,MAAM,CACN,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CACjE,CAAC;QACF,MAAM,IAAI,GAAqB;YAC7B,GAAG,IAAI;YACP,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACpB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,KAAc;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI;gBAC5B,MAAM,EAAE,GAAG,CAAC,MAAkC;gBAC9C,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,YAAY;gBAC5C,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;SACJ,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,CAAC,GAAG,CACR,iBAAiB,EACjB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,sBAAsB;QACnC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC;SAChD,CAAC;QACF,WAAW,EACT,mHAAmH;QACrH,SAAS,EAAE;YACT,GAAG,EAAE,YAAY,CAAC,qBAAqB,CAAC;YACxC,GAAG,iBAAiB;YACpB,GAAG,EAAE,UAAU;SAChB;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAC3C,MAAM,EACN,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CACvB,CAAC;QACF,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC,CACF,CAAC;IACF,MAAM,CAAC,KAAK,CACV,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,oBAAoB;QACjC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;SACzC,CAAC;QACF,WAAW,EACT,+LAA+L;QACjM,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG,UAAU,EAAE;KAC9D,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QACtB,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,EACD,YAAY,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACtC,KAAK,EAAE,OAAO,EAAE,EAAE,CAChB,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CACjC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAC1B;KACF,CAAC,CACL,CAAC;IACF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,oBAAoB;QACjC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EACL,oEAAoE;SACvE,CAAC;QACF,WAAW,EACT,yMAAyM;QAC3M,SAAS,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,GAAG,YAAY,EAAE;KAChE,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE;YAC1D,KAAK,CAAC,IAAI,CACR;gBACE,KAAK,EAAE,uBAAuB;gBAC9B,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,UAAU,EAAE,MAAM,CAAC,IAAI;gBACvB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,EAAE;aACZ,EACD,qDAAqD,CACtD,CAAC;QACJ,yEAAyE;QACzE,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACzC,CAAC,CACF,CAAC;IACF,MAAM,CAAC,MAAM,CACX,YAAY,EACZ,KAAK,EACL,aAAa,CAAC;QACZ,IAAI;QACJ,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,oBAAoB;QACjC,GAAG,QAAQ,CAAC;YACV,OAAO,EAAE,gBAAgB;YACzB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;YACxC,OAAO,EAAE,sBAAsB;SAChC,CAAC;QACF,WAAW,EAAE,sDAAsD;QACnE,SAAS,EAAE;YACT,GAAG,EAAE,aAAa,EAAE;YACpB,GAAG,YAAY;YACf,GAAG,EAAE,gBAAgB,CACnB,GAAG,EACH,mDAAmD,CACpD;SACF;KACF,CAAC,EACF,WAAW,EACX,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/routes/runners/dist.d.ts

@@ -1,4 +1,4 @@
-import { type DistArtifact } from '@nocobase/agent-protocol';
+import { type DistArtifact, type DistNpmPackage, type DistResolution } from '@nocobase/agent-protocol';
 import type { Hono, MiddlewareHandler } from 'hono';
 import type { Agents } from '../../composition.js';
 import type { AdminEnv } from './admin.js';
@@ -16,5 +16,9 @@ export interface DistRoutesOptions {
 }
 /** `key=value` lines a POSIX shell reads without a JSON parser. Values never contain a newline. */
 export declare function artifactEnv(artifact: DistArtifact): string;
+/** The same lines for an npm answer, led by `kind=npm`; only a caller that sent `accept=npm` reads them. */
+export declare function npmPackageEnv(npm: DistNpmPackage): string;
+/** `artifactEnv` or `npmPackageEnv`, whichever the answer is. */
+export declare function resolutionEnv(resolution: DistResolution): string;
 export declare function createDistRoutes(services: Pick<Agents, 'runners' | 'dist' | 'downloadTokens'>, options?: DistRoutesOptions): Hono;
 //# sourceMappingURL=dist.d.ts.map

package/dist/server/routes/runners/dist.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dist.d.ts","sourceRoot":"","sources":["../../../../server/routes/runners/dist.ts"],"names":[],"mappings":"AAeA,OAAO,EAKL,KAAK,YAAY,EAClB,MAAM,0BAA0B,CAAC;AAUlC,OAAO,KAAK,EAAW,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAI7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AASnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;CAC/C;AAED,mGAAmG;AACnG,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAY1D;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,gBAAgB,CAAC,EAC7D,OAAO,GAAE,iBAAsB,GAC9B,IAAI,CAmNN"}
+{"version":3,"file":"dist.d.ts","sourceRoot":"","sources":["../../../../server/routes/runners/dist.ts"],"names":[],"mappings":"AAeA,OAAO,EAWL,KAAK,YAAY,EAEjB,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,0BAA0B,CAAC;AAUlC,OAAO,KAAK,EAAW,IAAI,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAI7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AASnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;CAC/C;AAED,mGAAmG;AACnG,wBAAgB,WAAW,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAc1D;AAED,4GAA4G;AAC5G,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,CAUzD;AAED,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,UAAU,EAAE,cAAc,GAAG,MAAM,CAIhE;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,gBAAgB,CAAC,EAC7D,OAAO,GAAE,iBAAsB,GAC9B,IAAI,CA4NN"}