@shipfox/api-runners 10.0.0 → 10.2.0

package/dist/db/schema/admin-command-results.d.ts

@@ -0,0 +1,134 @@
+export interface StoredProvisionerTokenAdministrationResult {
+    provisionerTokenId: string;
+    correlationId: string;
+}
+export declare const runnersAdminCommandResults: import("drizzle-orm/pg-core").PgTableWithColumns<{
+    name: "admin_command_results";
+    schema: undefined;
+    columns: {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "admin_command_results";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_id";
+            tableName: "admin_command_results";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        idempotencyKeyFingerprint: import("drizzle-orm/pg-core").PgColumn<{
+            name: "idempotency_key_fingerprint";
+            tableName: "admin_command_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        command: import("drizzle-orm/pg-core").PgColumn<{
+            name: "command";
+            tableName: "admin_command_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        requestFingerprint: import("drizzle-orm/pg-core").PgColumn<{
+            name: "request_fingerprint";
+            tableName: "admin_command_results";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        result: import("drizzle-orm/pg-core").PgColumn<{
+            name: "result";
+            tableName: "admin_command_results";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: StoredProvisionerTokenAdministrationResult;
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: StoredProvisionerTokenAdministrationResult;
+        }>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "admin_command_results";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: "pg";
+}>;
+export type RunnersAdminCommandResultDb = typeof runnersAdminCommandResults.$inferSelect;
+//# sourceMappingURL=admin-command-results.d.ts.map

package/dist/db/schema/admin-command-results.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-command-results.d.ts","sourceRoot":"","sources":["../../../src/db/schema/admin-command-results.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,0CAA0C;IACzD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiBtC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,OAAO,0BAA0B,CAAC,YAAY,CAAC"}

package/dist/db/schema/admin-command-results.js

@@ -0,0 +1,18 @@
+import { uuidv7PrimaryKey } from '@shipfox/node-drizzle';
+import { jsonb, text, timestamp, uniqueIndex, uuid } from 'drizzle-orm/pg-core';
+import { pgTable } from './common.js';
+export const runnersAdminCommandResults = pgTable('admin_command_results', {
+    id: uuidv7PrimaryKey(),
+    actorId: uuid('actor_id').notNull(),
+    idempotencyKeyFingerprint: text('idempotency_key_fingerprint').notNull(),
+    command: text('command').notNull(),
+    requestFingerprint: text('request_fingerprint').notNull(),
+    result: jsonb('result').$type().notNull(),
+    createdAt: timestamp('created_at', {
+        withTimezone: true
+    }).notNull().defaultNow()
+}, (table)=>[
+        uniqueIndex('runners_admin_command_results_actor_key_unique').on(table.actorId, table.idempotencyKeyFingerprint)
+    ]);
+
+//# sourceMappingURL=admin-command-results.js.map

package/dist/db/schema/admin-command-results.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/db/schema/admin-command-results.ts"],"sourcesContent":["import {uuidv7PrimaryKey} from '@shipfox/node-drizzle';\nimport {jsonb, text, timestamp, uniqueIndex, uuid} from 'drizzle-orm/pg-core';\nimport {pgTable} from './common.js';\n\nexport interface StoredProvisionerTokenAdministrationResult {\n  provisionerTokenId: string;\n  correlationId: string;\n}\n\nexport const runnersAdminCommandResults = pgTable(\n  'admin_command_results',\n  {\n    id: uuidv7PrimaryKey(),\n    actorId: uuid('actor_id').notNull(),\n    idempotencyKeyFingerprint: text('idempotency_key_fingerprint').notNull(),\n    command: text('command').notNull(),\n    requestFingerprint: text('request_fingerprint').notNull(),\n    result: jsonb('result').$type<StoredProvisionerTokenAdministrationResult>().notNull(),\n    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),\n  },\n  (table) => [\n    uniqueIndex('runners_admin_command_results_actor_key_unique').on(\n      table.actorId,\n      table.idempotencyKeyFingerprint,\n    ),\n  ],\n);\n\nexport type RunnersAdminCommandResultDb = typeof runnersAdminCommandResults.$inferSelect;\n"],"names":["uuidv7PrimaryKey","jsonb","text","timestamp","uniqueIndex","uuid","pgTable","runnersAdminCommandResults","id","actorId","notNull","idempotencyKeyFingerprint","command","requestFingerprint","result","$type","createdAt","withTimezone","defaultNow","table","on"],"mappings":"AAAA,SAAQA,gBAAgB,QAAO,wBAAwB;AACvD,SAAQC,KAAK,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,EAAEC,IAAI,QAAO,sBAAsB;AAC9E,SAAQC,OAAO,QAAO,cAAc;AAOpC,OAAO,MAAMC,6BAA6BD,QACxC,yBACA;IACEE,IAAIR;IACJS,SAASJ,KAAK,YAAYK,OAAO;IACjCC,2BAA2BT,KAAK,+BAA+BQ,OAAO;IACtEE,SAASV,KAAK,WAAWQ,OAAO;IAChCG,oBAAoBX,KAAK,uBAAuBQ,OAAO;IACvDI,QAAQb,MAAM,UAAUc,KAAK,GAA+CL,OAAO;IACnFM,WAAWb,UAAU,cAAc;QAACc,cAAc;IAAI,GAAGP,OAAO,GAAGQ,UAAU;AAC/E,GACA,CAACC,QAAU;QACTf,YAAY,kDAAkDgB,EAAE,CAC9DD,MAAMV,OAAO,EACbU,MAAMR,yBAAyB;KAElC,EACD"}

package/dist/db/schema/runner-instances.d.ts

@@ -234,6 +234,23 @@ export declare const providerRunners: import("drizzle-orm/pg-core").PgTableWithC
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        firstClaimedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "first_claimed_at";
+            tableName: "runner_instances";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         providerKind: import("drizzle-orm/pg-core").PgColumn<{
             name: "provider_kind";
             tableName: "runner_instances";

package/dist/db/schema/runner-instances.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner-instances.d.ts","sourceRoot":"","sources":["../../../src/db/schema/runner-instances.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,mCAAmC,CAAC;AAGtE,eAAO,MAAM,uBAAuB,8GAOlC,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoD3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AACnE,MAAM,MAAM,sBAAsB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAEzE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,cAAc,CAyBtE"}
+{"version":3,"file":"runner-instances.d.ts","sourceRoot":"","sources":["../../../src/db/schema/runner-instances.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,mCAAmC,CAAC;AAGtE,eAAO,MAAM,uBAAuB,8GAOlC,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqD3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AACnE,MAAM,MAAM,sBAAsB,GAAG,OAAO,eAAe,CAAC,YAAY,CAAC;AAEzE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,cAAc,CAyBtE"}

package/dist/db/schema/runner-instances.js

@@ -27,6 +27,9 @@ export const providerRunners = pgTable('runner_instances', {
     state: providerRunnerStateEnum('state').notNull(),
     reason: text('reason'),
     runnerSessionId: uuid('runner_session_id'),
+    firstClaimedAt: timestamp('first_claimed_at', {
+        withTimezone: true
+    }),
     providerKind: text('provider_kind'),
     protocolVersion: text('protocol_version'),
     capabilities: jsonb('capabilities').$type(),

package/dist/db/schema/runner-instances.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/db/schema/runner-instances.ts"],"sourcesContent":["import type {RunnerToolCapabilitiesDto} from '@shipfox/api-runners-dto';\nimport {uuidv7PrimaryKey} from '@shipfox/node-drizzle';\nimport {sql} from 'drizzle-orm';\nimport {index, jsonb, pgEnum, text, timestamp, uniqueIndex, uuid} from 'drizzle-orm/pg-core';\nimport type {RunnerInstance} from '#core/entities/runner-instance.js';\nimport {pgTable} from './common.js';\n\nexport const providerRunnerStateEnum = pgEnum('runners_provider_runner_state', [\n  'starting',\n  'running',\n  'stopping',\n  'stopped',\n  'failed',\n  'terminated',\n]);\n\nexport const providerRunners = pgTable(\n  'runner_instances',\n  {\n    id: uuidv7PrimaryKey(),\n    // Kept during the protocol migration for legacy workspace capacity. New capacity is owned\n    // only by its provisioner and has no workspace assignment.\n    workspaceId: uuid('workspace_id'),\n    provisionerId: uuid('provisioner_id').notNull(),\n    providerRunnerId: text('provider_runner_id'),\n    intendedReservationId: uuid('intended_reservation_id'),\n    reservationId: uuid('reservation_id'),\n    assignedAt: timestamp('assigned_at', {withTimezone: true}),\n    templateKey: text('template_key'),\n    labels: text('labels').array().notNull().default([]),\n    state: providerRunnerStateEnum('state').notNull(),\n    reason: text('reason'),\n    runnerSessionId: uuid('runner_session_id'),\n    providerKind: text('provider_kind'),\n    protocolVersion: text('protocol_version'),\n    capabilities: jsonb('capabilities').$type<RunnerToolCapabilitiesDto | null>(),\n    reportedAt: timestamp('reported_at', {withTimezone: true}).notNull(),\n    startedAt: timestamp('started_at', {withTimezone: true}),\n    stoppingAt: timestamp('stopping_at', {withTimezone: true}),\n    stoppedAt: timestamp('stopped_at', {withTimezone: true}),\n    failedAt: timestamp('failed_at', {withTimezone: true}),\n    terminatedAt: timestamp('terminated_at', {withTimezone: true}),\n    reservationReleasedAt: timestamp('reservation_released_at', {withTimezone: true}),\n    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', {withTimezone: true}).notNull().defaultNow(),\n  },\n  (table) => [\n    uniqueIndex('runners_runner_instances_provisioner_runner_unique')\n      .on(table.provisionerId, table.providerRunnerId)\n      .where(sql`${table.providerRunnerId} is not null`),\n    index('runners_runner_instances_workspace_state_updated_idx').on(table.state, table.updatedAt),\n    index('runners_runner_instances_stale_reaper_idx').on(\n      table.state,\n      table.updatedAt,\n      table.reportedAt,\n    ),\n    index('runners_runner_instances_provisioner_intended_reservation_idx')\n      .on(table.provisionerId, table.intendedReservationId)\n      .where(\n        sql`${table.intendedReservationId} is not null and ${table.reservationReleasedAt} is null`,\n      ),\n    index('runners_runner_instances_provisioner_reservation_idx')\n      .on(table.provisionerId, table.reservationId)\n      .where(sql`${table.reservationId} is not null`),\n    index('runners_runner_instances_active_template_counts_idx')\n      .on(table.provisionerId, table.state, table.templateKey)\n      .where(sql`\"state\" in ('starting', 'running') and \"template_key\" is not null`),\n  ],\n);\n\nexport type RunnerInstanceDb = typeof providerRunners.$inferSelect;\nexport type RunnerInstanceInsertDb = typeof providerRunners.$inferInsert;\n\nexport function toRunnerInstance(row: RunnerInstanceDb): RunnerInstance {\n  if (!row.providerRunnerId) throw new Error('Runner instance has no provider runner identity');\n  return {\n    id: row.id,\n    workspaceId: row.workspaceId,\n    provisionerId: row.provisionerId,\n    providerRunnerId: row.providerRunnerId,\n    reservationId: row.reservationId,\n    assignedAt: row.assignedAt,\n    templateKey: row.templateKey,\n    labels: row.labels,\n    state: row.state,\n    reason: row.reason,\n    runnerSessionId: row.runnerSessionId,\n    providerKind: row.providerKind,\n    reportedAt: row.reportedAt,\n    startedAt: row.startedAt,\n    stoppingAt: row.stoppingAt,\n    stoppedAt: row.stoppedAt,\n    failedAt: row.failedAt,\n    terminatedAt: row.terminatedAt,\n    reservationReleasedAt: row.reservationReleasedAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n"],"names":["uuidv7PrimaryKey","sql","index","jsonb","pgEnum","text","timestamp","uniqueIndex","uuid","pgTable","providerRunnerStateEnum","providerRunners","id","workspaceId","provisionerId","notNull","providerRunnerId","intendedReservationId","reservationId","assignedAt","withTimezone","templateKey","labels","array","default","state","reason","runnerSessionId","providerKind","protocolVersion","capabilities","$type","reportedAt","startedAt","stoppingAt","stoppedAt","failedAt","terminatedAt","reservationReleasedAt","createdAt","defaultNow","updatedAt","table","on","where","toRunnerInstance","row","Error"],"mappings":"AACA,SAAQA,gBAAgB,QAAO,wBAAwB;AACvD,SAAQC,GAAG,QAAO,cAAc;AAChC,SAAQC,KAAK,EAAEC,KAAK,EAAEC,MAAM,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,EAAEC,IAAI,QAAO,sBAAsB;AAE7F,SAAQC,OAAO,QAAO,cAAc;AAEpC,OAAO,MAAMC,0BAA0BN,OAAO,iCAAiC;IAC7E;IACA;IACA;IACA;IACA;IACA;CACD,EAAE;AAEH,OAAO,MAAMO,kBAAkBF,QAC7B,oBACA;IACEG,IAAIZ;IACJ,0FAA0F;IAC1F,2DAA2D;IAC3Da,aAAaL,KAAK;IAClBM,eAAeN,KAAK,kBAAkBO,OAAO;IAC7CC,kBAAkBX,KAAK;IACvBY,uBAAuBT,KAAK;IAC5BU,eAAeV,KAAK;IACpBW,YAAYb,UAAU,eAAe;QAACc,cAAc;IAAI;IACxDC,aAAahB,KAAK;IAClBiB,QAAQjB,KAAK,UAAUkB,KAAK,GAAGR,OAAO,GAAGS,OAAO,CAAC,EAAE;IACnDC,OAAOf,wBAAwB,SAASK,OAAO;IAC/CW,QAAQrB,KAAK;IACbsB,iBAAiBnB,KAAK;IACtBoB,cAAcvB,KAAK;IACnBwB,iBAAiBxB,KAAK;IACtByB,cAAc3B,MAAM,gBAAgB4B,KAAK;IACzCC,YAAY1B,UAAU,eAAe;QAACc,cAAc;IAAI,GAAGL,OAAO;IAClEkB,WAAW3B,UAAU,cAAc;QAACc,cAAc;IAAI;IACtDc,YAAY5B,UAAU,eAAe;QAACc,cAAc;IAAI;IACxDe,WAAW7B,UAAU,cAAc;QAACc,cAAc;IAAI;IACtDgB,UAAU9B,UAAU,aAAa;QAACc,cAAc;IAAI;IACpDiB,cAAc/B,UAAU,iBAAiB;QAACc,cAAc;IAAI;IAC5DkB,uBAAuBhC,UAAU,2BAA2B;QAACc,cAAc;IAAI;IAC/EmB,WAAWjC,UAAU,cAAc;QAACc,cAAc;IAAI,GAAGL,OAAO,GAAGyB,UAAU;IAC7EC,WAAWnC,UAAU,cAAc;QAACc,cAAc;IAAI,GAAGL,OAAO,GAAGyB,UAAU;AAC/E,GACA,CAACE,QAAU;QACTnC,YAAY,sDACToC,EAAE,CAACD,MAAM5B,aAAa,EAAE4B,MAAM1B,gBAAgB,EAC9C4B,KAAK,CAAC3C,GAAG,CAAC,EAAEyC,MAAM1B,gBAAgB,CAAC,YAAY,CAAC;QACnDd,MAAM,wDAAwDyC,EAAE,CAACD,MAAMjB,KAAK,EAAEiB,MAAMD,SAAS;QAC7FvC,MAAM,6CAA6CyC,EAAE,CACnDD,MAAMjB,KAAK,EACXiB,MAAMD,SAAS,EACfC,MAAMV,UAAU;QAElB9B,MAAM,iEACHyC,EAAE,CAACD,MAAM5B,aAAa,EAAE4B,MAAMzB,qBAAqB,EACnD2B,KAAK,CACJ3C,GAAG,CAAC,EAAEyC,MAAMzB,qBAAqB,CAAC,iBAAiB,EAAEyB,MAAMJ,qBAAqB,CAAC,QAAQ,CAAC;QAE9FpC,MAAM,wDACHyC,EAAE,CAACD,MAAM5B,aAAa,EAAE4B,MAAMxB,aAAa,EAC3C0B,KAAK,CAAC3C,GAAG,CAAC,EAAEyC,MAAMxB,aAAa,CAAC,YAAY,CAAC;QAChDhB,MAAM,uDACHyC,EAAE,CAACD,MAAM5B,aAAa,EAAE4B,MAAMjB,KAAK,EAAEiB,MAAMrB,WAAW,EACtDuB,KAAK,CAAC3C,GAAG,CAAC,iEAAiE,CAAC;KAChF,EACD;AAKF,OAAO,SAAS4C,iBAAiBC,GAAqB;IACpD,IAAI,CAACA,IAAI9B,gBAAgB,EAAE,MAAM,IAAI+B,MAAM;IAC3C,OAAO;QACLnC,IAAIkC,IAAIlC,EAAE;QACVC,aAAaiC,IAAIjC,WAAW;QAC5BC,eAAegC,IAAIhC,aAAa;QAChCE,kBAAkB8B,IAAI9B,gBAAgB;QACtCE,eAAe4B,IAAI5B,aAAa;QAChCC,YAAY2B,IAAI3B,UAAU;QAC1BE,aAAayB,IAAIzB,WAAW;QAC5BC,QAAQwB,IAAIxB,MAAM;QAClBG,OAAOqB,IAAIrB,KAAK;QAChBC,QAAQoB,IAAIpB,MAAM;QAClBC,iBAAiBmB,IAAInB,eAAe;QACpCC,cAAckB,IAAIlB,YAAY;QAC9BI,YAAYc,IAAId,UAAU;QAC1BC,WAAWa,IAAIb,SAAS;QACxBC,YAAYY,IAAIZ,UAAU;QAC1BC,WAAWW,IAAIX,SAAS;QACxBC,UAAUU,IAAIV,QAAQ;QACtBC,cAAcS,IAAIT,YAAY;QAC9BC,uBAAuBQ,IAAIR,qBAAqB;QAChDC,WAAWO,IAAIP,SAAS;QACxBE,WAAWK,IAAIL,SAAS;IAC1B;AACF"}
+{"version":3,"sources":["../../../src/db/schema/runner-instances.ts"],"sourcesContent":["import type {RunnerToolCapabilitiesDto} from '@shipfox/api-runners-dto';\nimport {uuidv7PrimaryKey} from '@shipfox/node-drizzle';\nimport {sql} from 'drizzle-orm';\nimport {index, jsonb, pgEnum, text, timestamp, uniqueIndex, uuid} from 'drizzle-orm/pg-core';\nimport type {RunnerInstance} from '#core/entities/runner-instance.js';\nimport {pgTable} from './common.js';\n\nexport const providerRunnerStateEnum = pgEnum('runners_provider_runner_state', [\n  'starting',\n  'running',\n  'stopping',\n  'stopped',\n  'failed',\n  'terminated',\n]);\n\nexport const providerRunners = pgTable(\n  'runner_instances',\n  {\n    id: uuidv7PrimaryKey(),\n    // Kept during the protocol migration for legacy workspace capacity. New capacity is owned\n    // only by its provisioner and has no workspace assignment.\n    workspaceId: uuid('workspace_id'),\n    provisionerId: uuid('provisioner_id').notNull(),\n    providerRunnerId: text('provider_runner_id'),\n    intendedReservationId: uuid('intended_reservation_id'),\n    reservationId: uuid('reservation_id'),\n    assignedAt: timestamp('assigned_at', {withTimezone: true}),\n    templateKey: text('template_key'),\n    labels: text('labels').array().notNull().default([]),\n    state: providerRunnerStateEnum('state').notNull(),\n    reason: text('reason'),\n    runnerSessionId: uuid('runner_session_id'),\n    firstClaimedAt: timestamp('first_claimed_at', {withTimezone: true}),\n    providerKind: text('provider_kind'),\n    protocolVersion: text('protocol_version'),\n    capabilities: jsonb('capabilities').$type<RunnerToolCapabilitiesDto | null>(),\n    reportedAt: timestamp('reported_at', {withTimezone: true}).notNull(),\n    startedAt: timestamp('started_at', {withTimezone: true}),\n    stoppingAt: timestamp('stopping_at', {withTimezone: true}),\n    stoppedAt: timestamp('stopped_at', {withTimezone: true}),\n    failedAt: timestamp('failed_at', {withTimezone: true}),\n    terminatedAt: timestamp('terminated_at', {withTimezone: true}),\n    reservationReleasedAt: timestamp('reservation_released_at', {withTimezone: true}),\n    createdAt: timestamp('created_at', {withTimezone: true}).notNull().defaultNow(),\n    updatedAt: timestamp('updated_at', {withTimezone: true}).notNull().defaultNow(),\n  },\n  (table) => [\n    uniqueIndex('runners_runner_instances_provisioner_runner_unique')\n      .on(table.provisionerId, table.providerRunnerId)\n      .where(sql`${table.providerRunnerId} is not null`),\n    index('runners_runner_instances_workspace_state_updated_idx').on(table.state, table.updatedAt),\n    index('runners_runner_instances_stale_reaper_idx').on(\n      table.state,\n      table.updatedAt,\n      table.reportedAt,\n    ),\n    index('runners_runner_instances_provisioner_intended_reservation_idx')\n      .on(table.provisionerId, table.intendedReservationId)\n      .where(\n        sql`${table.intendedReservationId} is not null and ${table.reservationReleasedAt} is null`,\n      ),\n    index('runners_runner_instances_provisioner_reservation_idx')\n      .on(table.provisionerId, table.reservationId)\n      .where(sql`${table.reservationId} is not null`),\n    index('runners_runner_instances_active_template_counts_idx')\n      .on(table.provisionerId, table.state, table.templateKey)\n      .where(sql`\"state\" in ('starting', 'running') and \"template_key\" is not null`),\n  ],\n);\n\nexport type RunnerInstanceDb = typeof providerRunners.$inferSelect;\nexport type RunnerInstanceInsertDb = typeof providerRunners.$inferInsert;\n\nexport function toRunnerInstance(row: RunnerInstanceDb): RunnerInstance {\n  if (!row.providerRunnerId) throw new Error('Runner instance has no provider runner identity');\n  return {\n    id: row.id,\n    workspaceId: row.workspaceId,\n    provisionerId: row.provisionerId,\n    providerRunnerId: row.providerRunnerId,\n    reservationId: row.reservationId,\n    assignedAt: row.assignedAt,\n    templateKey: row.templateKey,\n    labels: row.labels,\n    state: row.state,\n    reason: row.reason,\n    runnerSessionId: row.runnerSessionId,\n    providerKind: row.providerKind,\n    reportedAt: row.reportedAt,\n    startedAt: row.startedAt,\n    stoppingAt: row.stoppingAt,\n    stoppedAt: row.stoppedAt,\n    failedAt: row.failedAt,\n    terminatedAt: row.terminatedAt,\n    reservationReleasedAt: row.reservationReleasedAt,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  };\n}\n"],"names":["uuidv7PrimaryKey","sql","index","jsonb","pgEnum","text","timestamp","uniqueIndex","uuid","pgTable","providerRunnerStateEnum","providerRunners","id","workspaceId","provisionerId","notNull","providerRunnerId","intendedReservationId","reservationId","assignedAt","withTimezone","templateKey","labels","array","default","state","reason","runnerSessionId","firstClaimedAt","providerKind","protocolVersion","capabilities","$type","reportedAt","startedAt","stoppingAt","stoppedAt","failedAt","terminatedAt","reservationReleasedAt","createdAt","defaultNow","updatedAt","table","on","where","toRunnerInstance","row","Error"],"mappings":"AACA,SAAQA,gBAAgB,QAAO,wBAAwB;AACvD,SAAQC,GAAG,QAAO,cAAc;AAChC,SAAQC,KAAK,EAAEC,KAAK,EAAEC,MAAM,EAAEC,IAAI,EAAEC,SAAS,EAAEC,WAAW,EAAEC,IAAI,QAAO,sBAAsB;AAE7F,SAAQC,OAAO,QAAO,cAAc;AAEpC,OAAO,MAAMC,0BAA0BN,OAAO,iCAAiC;IAC7E;IACA;IACA;IACA;IACA;IACA;CACD,EAAE;AAEH,OAAO,MAAMO,kBAAkBF,QAC7B,oBACA;IACEG,IAAIZ;IACJ,0FAA0F;IAC1F,2DAA2D;IAC3Da,aAAaL,KAAK;IAClBM,eAAeN,KAAK,kBAAkBO,OAAO;IAC7CC,kBAAkBX,KAAK;IACvBY,uBAAuBT,KAAK;IAC5BU,eAAeV,KAAK;IACpBW,YAAYb,UAAU,eAAe;QAACc,cAAc;IAAI;IACxDC,aAAahB,KAAK;IAClBiB,QAAQjB,KAAK,UAAUkB,KAAK,GAAGR,OAAO,GAAGS,OAAO,CAAC,EAAE;IACnDC,OAAOf,wBAAwB,SAASK,OAAO;IAC/CW,QAAQrB,KAAK;IACbsB,iBAAiBnB,KAAK;IACtBoB,gBAAgBtB,UAAU,oBAAoB;QAACc,cAAc;IAAI;IACjES,cAAcxB,KAAK;IACnByB,iBAAiBzB,KAAK;IACtB0B,cAAc5B,MAAM,gBAAgB6B,KAAK;IACzCC,YAAY3B,UAAU,eAAe;QAACc,cAAc;IAAI,GAAGL,OAAO;IAClEmB,WAAW5B,UAAU,cAAc;QAACc,cAAc;IAAI;IACtDe,YAAY7B,UAAU,eAAe;QAACc,cAAc;IAAI;IACxDgB,WAAW9B,UAAU,cAAc;QAACc,cAAc;IAAI;IACtDiB,UAAU/B,UAAU,aAAa;QAACc,cAAc;IAAI;IACpDkB,cAAchC,UAAU,iBAAiB;QAACc,cAAc;IAAI;IAC5DmB,uBAAuBjC,UAAU,2BAA2B;QAACc,cAAc;IAAI;IAC/EoB,WAAWlC,UAAU,cAAc;QAACc,cAAc;IAAI,GAAGL,OAAO,GAAG0B,UAAU;IAC7EC,WAAWpC,UAAU,cAAc;QAACc,cAAc;IAAI,GAAGL,OAAO,GAAG0B,UAAU;AAC/E,GACA,CAACE,QAAU;QACTpC,YAAY,sDACTqC,EAAE,CAACD,MAAM7B,aAAa,EAAE6B,MAAM3B,gBAAgB,EAC9C6B,KAAK,CAAC5C,GAAG,CAAC,EAAE0C,MAAM3B,gBAAgB,CAAC,YAAY,CAAC;QACnDd,MAAM,wDAAwD0C,EAAE,CAACD,MAAMlB,KAAK,EAAEkB,MAAMD,SAAS;QAC7FxC,MAAM,6CAA6C0C,EAAE,CACnDD,MAAMlB,KAAK,EACXkB,MAAMD,SAAS,EACfC,MAAMV,UAAU;QAElB/B,MAAM,iEACH0C,EAAE,CAACD,MAAM7B,aAAa,EAAE6B,MAAM1B,qBAAqB,EACnD4B,KAAK,CACJ5C,GAAG,CAAC,EAAE0C,MAAM1B,qBAAqB,CAAC,iBAAiB,EAAE0B,MAAMJ,qBAAqB,CAAC,QAAQ,CAAC;QAE9FrC,MAAM,wDACH0C,EAAE,CAACD,MAAM7B,aAAa,EAAE6B,MAAMzB,aAAa,EAC3C2B,KAAK,CAAC5C,GAAG,CAAC,EAAE0C,MAAMzB,aAAa,CAAC,YAAY,CAAC;QAChDhB,MAAM,uDACH0C,EAAE,CAACD,MAAM7B,aAAa,EAAE6B,MAAMlB,KAAK,EAAEkB,MAAMtB,WAAW,EACtDwB,KAAK,CAAC5C,GAAG,CAAC,iEAAiE,CAAC;KAChF,EACD;AAKF,OAAO,SAAS6C,iBAAiBC,GAAqB;IACpD,IAAI,CAACA,IAAI/B,gBAAgB,EAAE,MAAM,IAAIgC,MAAM;IAC3C,OAAO;QACLpC,IAAImC,IAAInC,EAAE;QACVC,aAAakC,IAAIlC,WAAW;QAC5BC,eAAeiC,IAAIjC,aAAa;QAChCE,kBAAkB+B,IAAI/B,gBAAgB;QACtCE,eAAe6B,IAAI7B,aAAa;QAChCC,YAAY4B,IAAI5B,UAAU;QAC1BE,aAAa0B,IAAI1B,WAAW;QAC5BC,QAAQyB,IAAIzB,MAAM;QAClBG,OAAOsB,IAAItB,KAAK;QAChBC,QAAQqB,IAAIrB,MAAM;QAClBC,iBAAiBoB,IAAIpB,eAAe;QACpCE,cAAckB,IAAIlB,YAAY;QAC9BI,YAAYc,IAAId,UAAU;QAC1BC,WAAWa,IAAIb,SAAS;QACxBC,YAAYY,IAAIZ,UAAU;QAC1BC,WAAWW,IAAIX,SAAS;QACxBC,UAAUU,IAAIV,QAAQ;QACtBC,cAAcS,IAAIT,YAAY;QAC9BC,uBAAuBQ,IAAIR,qBAAqB;QAChDC,WAAWO,IAAIP,SAAS;QACxBE,WAAWK,IAAIL,SAAS;IAC1B;AACF"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,oCAAoC,CAAC;AAM9E,OAAO,EAAC,KAAK,aAAa,EAAoB,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAC,0BAA0B,EAAC,MAAM,+BAA+B,CAAC;AAa9E,OAAO,EACL,KAAK,qCAAqC,EAC1C,kCAAkC,EAClC,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,+BAA+B,CAAC;AAOvC,wBAAgB,mBAAmB,CAAC,EAClC,IAAI,EACJ,GAAG,OAAO,EACX,EAAE,0BAA0B,GAAG;IAAC,IAAI,EAAE,qBAAqB,CAAA;CAAC,GAAG,aAAa,CAyB5E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,qBAAqB,EAAC,MAAM,oCAAoC,CAAC;AAO9E,OAAO,EAAC,KAAK,aAAa,EAAoB,MAAM,sBAAsB,CAAC;AAE3E,OAAO,KAAK,EAAC,0BAA0B,EAAC,MAAM,+BAA+B,CAAC;AAe9E,OAAO,EACL,KAAK,qCAAqC,EAC1C,kCAAkC,EAClC,uBAAuB,GACxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,KAAK,yBAAyB,EAC9B,mBAAmB,EACnB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,+BAA+B,CAAC;AAOvC,wBAAgB,mBAAmB,CAAC,EAClC,IAAI,EACJ,GAAG,OAAO,EACX,EAAE,0BAA0B,GAAG;IAAC,IAAI,EAAE,qBAAqB,CAAA;CAAC,GAAG,aAAa,CA2B5E"}

package/dist/index.js

@@ -1,5 +1,6 @@
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { administrationActionEventSchemas } from '@shipfox/api-common-dto';
 import { runnersEventSchemas } from '@shipfox/api-runners-dto';
 import { WORKFLOWS_JOB_EXECUTION_TIMED_OUT } from '@shipfox/api-workflows-dto';
 import { subscriberFactory } from '@shipfox/node-module';
@@ -9,6 +10,10 @@ import { createProvisionerTokenAuthMethod, createRunnerControlSessionAuthMethod,
 import { createRunnersInterModulePresentation } from '#presentation/inter-module.js';
 import { createRunnersMaintenanceActivities } from '#temporal/activities/index.js';
 import { RUNNERS_MAINTENANCE_TASK_QUEUE } from '#temporal/constants.js';
+const runnersPublisherEventSchemas = {
+    ...runnersEventSchemas,
+    ...administrationActionEventSchemas
+};
 export { getEffectiveRunnerToolCapabilities, unadvertisedRunnerTools } from '#core/runner-tool-capabilities.js';
 export { cancelRunnerJobs, enqueueJobExecution, getWorkspaceJobCounts, isJobLeaseActive, releaseJobExecution } from '#db/index.js';
 const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
@@ -34,7 +39,7 @@ export function createRunnersModule({ auth, ...options }) {
                 name: 'runners',
                 table: runnersOutbox,
                 db,
-                eventSchemas: runnersEventSchemas
+                eventSchemas: runnersPublisherEventSchemas
             }
         ],
         subscribers: [

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {dirname, resolve} from 'node:path';\nimport {fileURLToPath} from 'node:url';\nimport type {AuthInterModuleClient} from '@shipfox/api-auth-dto/inter-module';\nimport {runnersEventSchemas} from '@shipfox/api-runners-dto';\nimport {\n  WORKFLOWS_JOB_EXECUTION_TIMED_OUT,\n  type WorkflowsEventMapDto,\n} from '@shipfox/api-workflows-dto';\nimport {type ShipfoxModule, subscriberFactory} from '@shipfox/node-module';\nimport {db, migrationsPath, runnersOutbox} from '#db/index.js';\nimport type {CreateRunnersModuleOptions} from '#installation-provisioning.js';\nimport {registerRunnersServiceMetrics} from '#metrics/index.js';\nimport {\n  createProvisionerTokenAuthMethod,\n  createRunnerControlSessionAuthMethod,\n  createRunnerRegistrationTokenAuthMethod,\n  createRunnerRoutes,\n  onWorkflowsJobExecutionTimedOut,\n} from '#presentation/index.js';\nimport {createRunnersInterModulePresentation} from '#presentation/inter-module.js';\nimport {createRunnersMaintenanceActivities} from '#temporal/activities/index.js';\nimport {RUNNERS_MAINTENANCE_TASK_QUEUE} from '#temporal/constants.js';\n\nexport {\n  type EffectiveRunnerToolCapabilitiesResult,\n  getEffectiveRunnerToolCapabilities,\n  unadvertisedRunnerTools,\n} from '#core/runner-tool-capabilities.js';\nexport {\n  cancelRunnerJobs,\n  type EnqueueJobExecutionParams,\n  enqueueJobExecution,\n  getWorkspaceJobCounts,\n  isJobLeaseActive,\n  releaseJobExecution,\n} from '#db/index.js';\nexport type {\n  CreateRunnersModuleOptions,\n  InstallationProvisioningPolicy,\n} from '#installation-provisioning.js';\n\nconst packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');\nconst workflowsPath = resolve(packageRoot, 'dist/temporal/workflows/index.js');\n\nconst subscriber = subscriberFactory<WorkflowsEventMapDto>();\n\nexport function createRunnersModule({\n  auth,\n  ...options\n}: CreateRunnersModuleOptions & {auth: AuthInterModuleClient}): ShipfoxModule {\n  return {\n    name: 'runners',\n    database: {db, migrationsPath, databaseNamespace: 'runners'},\n    auth: [\n      createRunnerRegistrationTokenAuthMethod(),\n      createRunnerControlSessionAuthMethod(),\n      createProvisionerTokenAuthMethod(),\n    ],\n    routes: createRunnerRoutes(auth, options),\n    metrics: registerRunnersServiceMetrics,\n    publishers: [{name: 'runners', table: runnersOutbox, db, eventSchemas: runnersEventSchemas}],\n    subscribers: [subscriber(WORKFLOWS_JOB_EXECUTION_TIMED_OUT, onWorkflowsJobExecutionTimedOut)],\n    workers: [\n      {\n        taskQueue: RUNNERS_MAINTENANCE_TASK_QUEUE,\n        workflowsPath,\n        activities: createRunnersMaintenanceActivities,\n        workflows: [\n          {name: 'stuckJobDetector', id: 'stuck-job-detector', cronSchedule: '* * * * *'},\n        ],\n      },\n    ],\n    interModulePresentations: [createRunnersInterModulePresentation()],\n  };\n}\n"],"names":["dirname","resolve","fileURLToPath","runnersEventSchemas","WORKFLOWS_JOB_EXECUTION_TIMED_OUT","subscriberFactory","db","migrationsPath","runnersOutbox","registerRunnersServiceMetrics","createProvisionerTokenAuthMethod","createRunnerControlSessionAuthMethod","createRunnerRegistrationTokenAuthMethod","createRunnerRoutes","onWorkflowsJobExecutionTimedOut","createRunnersInterModulePresentation","createRunnersMaintenanceActivities","RUNNERS_MAINTENANCE_TASK_QUEUE","getEffectiveRunnerToolCapabilities","unadvertisedRunnerTools","cancelRunnerJobs","enqueueJobExecution","getWorkspaceJobCounts","isJobLeaseActive","releaseJobExecution","packageRoot","url","workflowsPath","subscriber","createRunnersModule","auth","options","name","database","databaseNamespace","routes","metrics","publishers","table","eventSchemas","subscribers","workers","taskQueue","activities","workflows","id","cronSchedule","interModulePresentations"],"mappings":"AAAA,SAAQA,OAAO,EAAEC,OAAO,QAAO,YAAY;AAC3C,SAAQC,aAAa,QAAO,WAAW;AAEvC,SAAQC,mBAAmB,QAAO,2BAA2B;AAC7D,SACEC,iCAAiC,QAE5B,6BAA6B;AACpC,SAA4BC,iBAAiB,QAAO,uBAAuB;AAC3E,SAAQC,EAAE,EAAEC,cAAc,EAAEC,aAAa,QAAO,eAAe;AAE/D,SAAQC,6BAA6B,QAAO,oBAAoB;AAChE,SACEC,gCAAgC,EAChCC,oCAAoC,EACpCC,uCAAuC,EACvCC,kBAAkB,EAClBC,+BAA+B,QAC1B,yBAAyB;AAChC,SAAQC,oCAAoC,QAAO,gCAAgC;AACnF,SAAQC,kCAAkC,QAAO,gCAAgC;AACjF,SAAQC,8BAA8B,QAAO,yBAAyB;AAEtE,SAEEC,kCAAkC,EAClCC,uBAAuB,QAClB,oCAAoC;AAC3C,SACEC,gBAAgB,EAEhBC,mBAAmB,EACnBC,qBAAqB,EACrBC,gBAAgB,EAChBC,mBAAmB,QACd,eAAe;AAMtB,MAAMC,cAAcxB,QAAQD,QAAQE,cAAc,YAAYwB,GAAG,IAAI;AACrE,MAAMC,gBAAgB1B,QAAQwB,aAAa;AAE3C,MAAMG,aAAavB;AAEnB,OAAO,SAASwB,oBAAoB,EAClCC,IAAI,EACJ,GAAGC,SACwD;IAC3D,OAAO;QACLC,MAAM;QACNC,UAAU;YAAC3B;YAAIC;YAAgB2B,mBAAmB;QAAS;QAC3DJ,MAAM;YACJlB;YACAD;YACAD;SACD;QACDyB,QAAQtB,mBAAmBiB,MAAMC;QACjCK,SAAS3B;QACT4B,YAAY;YAAC;gBAACL,MAAM;gBAAWM,OAAO9B;gBAAeF;gBAAIiC,cAAcpC;YAAmB;SAAE;QAC5FqC,aAAa;YAACZ,WAAWxB,mCAAmCU;SAAiC;QAC7F2B,SAAS;YACP;gBACEC,WAAWzB;gBACXU;gBACAgB,YAAY3B;gBACZ4B,WAAW;oBACT;wBAACZ,MAAM;wBAAoBa,IAAI;wBAAsBC,cAAc;oBAAW;iBAC/E;YACH;SACD;QACDC,0BAA0B;YAAChC;SAAuC;IACpE;AACF"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import {dirname, resolve} from 'node:path';\nimport {fileURLToPath} from 'node:url';\nimport type {AuthInterModuleClient} from '@shipfox/api-auth-dto/inter-module';\nimport {administrationActionEventSchemas} from '@shipfox/api-common-dto';\nimport {runnersEventSchemas} from '@shipfox/api-runners-dto';\nimport {\n  WORKFLOWS_JOB_EXECUTION_TIMED_OUT,\n  type WorkflowsEventMapDto,\n} from '@shipfox/api-workflows-dto';\nimport {type ShipfoxModule, subscriberFactory} from '@shipfox/node-module';\nimport {db, migrationsPath, runnersOutbox} from '#db/index.js';\nimport type {CreateRunnersModuleOptions} from '#installation-provisioning.js';\nimport {registerRunnersServiceMetrics} from '#metrics/index.js';\nimport {\n  createProvisionerTokenAuthMethod,\n  createRunnerControlSessionAuthMethod,\n  createRunnerRegistrationTokenAuthMethod,\n  createRunnerRoutes,\n  onWorkflowsJobExecutionTimedOut,\n} from '#presentation/index.js';\nimport {createRunnersInterModulePresentation} from '#presentation/inter-module.js';\nimport {createRunnersMaintenanceActivities} from '#temporal/activities/index.js';\nimport {RUNNERS_MAINTENANCE_TASK_QUEUE} from '#temporal/constants.js';\n\nconst runnersPublisherEventSchemas = {...runnersEventSchemas, ...administrationActionEventSchemas};\n\nexport {\n  type EffectiveRunnerToolCapabilitiesResult,\n  getEffectiveRunnerToolCapabilities,\n  unadvertisedRunnerTools,\n} from '#core/runner-tool-capabilities.js';\nexport {\n  cancelRunnerJobs,\n  type EnqueueJobExecutionParams,\n  enqueueJobExecution,\n  getWorkspaceJobCounts,\n  isJobLeaseActive,\n  releaseJobExecution,\n} from '#db/index.js';\nexport type {\n  CreateRunnersModuleOptions,\n  InstallationProvisioningPolicy,\n} from '#installation-provisioning.js';\n\nconst packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');\nconst workflowsPath = resolve(packageRoot, 'dist/temporal/workflows/index.js');\n\nconst subscriber = subscriberFactory<WorkflowsEventMapDto>();\n\nexport function createRunnersModule({\n  auth,\n  ...options\n}: CreateRunnersModuleOptions & {auth: AuthInterModuleClient}): ShipfoxModule {\n  return {\n    name: 'runners',\n    database: {db, migrationsPath, databaseNamespace: 'runners'},\n    auth: [\n      createRunnerRegistrationTokenAuthMethod(),\n      createRunnerControlSessionAuthMethod(),\n      createProvisionerTokenAuthMethod(),\n    ],\n    routes: createRunnerRoutes(auth, options),\n    metrics: registerRunnersServiceMetrics,\n    publishers: [\n      {name: 'runners', table: runnersOutbox, db, eventSchemas: runnersPublisherEventSchemas},\n    ],\n    subscribers: [subscriber(WORKFLOWS_JOB_EXECUTION_TIMED_OUT, onWorkflowsJobExecutionTimedOut)],\n    workers: [\n      {\n        taskQueue: RUNNERS_MAINTENANCE_TASK_QUEUE,\n        workflowsPath,\n        activities: createRunnersMaintenanceActivities,\n        workflows: [\n          {name: 'stuckJobDetector', id: 'stuck-job-detector', cronSchedule: '* * * * *'},\n        ],\n      },\n    ],\n    interModulePresentations: [createRunnersInterModulePresentation()],\n  };\n}\n"],"names":["dirname","resolve","fileURLToPath","administrationActionEventSchemas","runnersEventSchemas","WORKFLOWS_JOB_EXECUTION_TIMED_OUT","subscriberFactory","db","migrationsPath","runnersOutbox","registerRunnersServiceMetrics","createProvisionerTokenAuthMethod","createRunnerControlSessionAuthMethod","createRunnerRegistrationTokenAuthMethod","createRunnerRoutes","onWorkflowsJobExecutionTimedOut","createRunnersInterModulePresentation","createRunnersMaintenanceActivities","RUNNERS_MAINTENANCE_TASK_QUEUE","runnersPublisherEventSchemas","getEffectiveRunnerToolCapabilities","unadvertisedRunnerTools","cancelRunnerJobs","enqueueJobExecution","getWorkspaceJobCounts","isJobLeaseActive","releaseJobExecution","packageRoot","url","workflowsPath","subscriber","createRunnersModule","auth","options","name","database","databaseNamespace","routes","metrics","publishers","table","eventSchemas","subscribers","workers","taskQueue","activities","workflows","id","cronSchedule","interModulePresentations"],"mappings":"AAAA,SAAQA,OAAO,EAAEC,OAAO,QAAO,YAAY;AAC3C,SAAQC,aAAa,QAAO,WAAW;AAEvC,SAAQC,gCAAgC,QAAO,0BAA0B;AACzE,SAAQC,mBAAmB,QAAO,2BAA2B;AAC7D,SACEC,iCAAiC,QAE5B,6BAA6B;AACpC,SAA4BC,iBAAiB,QAAO,uBAAuB;AAC3E,SAAQC,EAAE,EAAEC,cAAc,EAAEC,aAAa,QAAO,eAAe;AAE/D,SAAQC,6BAA6B,QAAO,oBAAoB;AAChE,SACEC,gCAAgC,EAChCC,oCAAoC,EACpCC,uCAAuC,EACvCC,kBAAkB,EAClBC,+BAA+B,QAC1B,yBAAyB;AAChC,SAAQC,oCAAoC,QAAO,gCAAgC;AACnF,SAAQC,kCAAkC,QAAO,gCAAgC;AACjF,SAAQC,8BAA8B,QAAO,yBAAyB;AAEtE,MAAMC,+BAA+B;IAAC,GAAGf,mBAAmB;IAAE,GAAGD,gCAAgC;AAAA;AAEjG,SAEEiB,kCAAkC,EAClCC,uBAAuB,QAClB,oCAAoC;AAC3C,SACEC,gBAAgB,EAEhBC,mBAAmB,EACnBC,qBAAqB,EACrBC,gBAAgB,EAChBC,mBAAmB,QACd,eAAe;AAMtB,MAAMC,cAAc1B,QAAQD,QAAQE,cAAc,YAAY0B,GAAG,IAAI;AACrE,MAAMC,gBAAgB5B,QAAQ0B,aAAa;AAE3C,MAAMG,aAAaxB;AAEnB,OAAO,SAASyB,oBAAoB,EAClCC,IAAI,EACJ,GAAGC,SACwD;IAC3D,OAAO;QACLC,MAAM;QACNC,UAAU;YAAC5B;YAAIC;YAAgB4B,mBAAmB;QAAS;QAC3DJ,MAAM;YACJnB;YACAD;YACAD;SACD;QACD0B,QAAQvB,mBAAmBkB,MAAMC;QACjCK,SAAS5B;QACT6B,YAAY;YACV;gBAACL,MAAM;gBAAWM,OAAO/B;gBAAeF;gBAAIkC,cAActB;YAA4B;SACvF;QACDuB,aAAa;YAACZ,WAAWzB,mCAAmCU;SAAiC;QAC7F4B,SAAS;YACP;gBACEC,WAAW1B;gBACXW;gBACAgB,YAAY5B;gBACZ6B,WAAW;oBACT;wBAACZ,MAAM;wBAAoBa,IAAI;wBAAsBC,cAAc;oBAAW;iBAC/E;YACH;SACD;QACDC,0BAA0B;YAACjC;SAAuC;IACpE;AACF"}

package/dist/presentation/dto/admin-provisioner-token.d.ts

@@ -0,0 +1,16 @@
+import type { ProvisionerToken } from '#core/entities/provisioner-token.js';
+export declare function toAdministratorProvisionerTokenDto(token: ProvisionerToken): {
+    id: string;
+    scope: "installation";
+    prefix: string;
+    name: string | null;
+    status: import("#core/provisioner-tokens.js").InstallationProvisionerTokenStatus;
+    created_by_user_id: string;
+    revoked_by_user_id: string | null;
+    expires_at: string | null;
+    revoked_at: string | null;
+    last_seen_at: string | null;
+    created_at: string;
+    updated_at: string;
+};
+//# sourceMappingURL=admin-provisioner-token.d.ts.map

package/dist/presentation/dto/admin-provisioner-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-provisioner-token.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/admin-provisioner-token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,gBAAgB,EAAC,MAAM,qCAAqC,CAAC;AAG1E,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,gBAAgB;;;;;;;;;;;;;EAmBzE"}

package/dist/presentation/dto/admin-provisioner-token.js

@@ -0,0 +1,22 @@
+import { installationProvisionerTokenStatus } from '#core/provisioner-tokens.js';
+export function toAdministratorProvisionerTokenDto(token) {
+    if (token.scope !== 'installation') {
+        throw new Error('Workspace provisioner tokens cannot be returned from administrator routes');
+    }
+    return {
+        id: token.id,
+        scope: 'installation',
+        prefix: token.prefix,
+        name: token.name,
+        status: installationProvisionerTokenStatus(token),
+        created_by_user_id: token.createdByUserId,
+        revoked_by_user_id: token.revokedByUserId,
+        expires_at: token.expiresAt?.toISOString() ?? null,
+        revoked_at: token.revokedAt?.toISOString() ?? null,
+        last_seen_at: token.lastSeenAt?.toISOString() ?? null,
+        created_at: token.createdAt.toISOString(),
+        updated_at: token.updatedAt.toISOString()
+    };
+}
+
+//# sourceMappingURL=admin-provisioner-token.js.map

package/dist/presentation/dto/admin-provisioner-token.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/dto/admin-provisioner-token.ts"],"sourcesContent":["import type {ProvisionerToken} from '#core/entities/provisioner-token.js';\nimport {installationProvisionerTokenStatus} from '#core/provisioner-tokens.js';\n\nexport function toAdministratorProvisionerTokenDto(token: ProvisionerToken) {\n  if (token.scope !== 'installation') {\n    throw new Error('Workspace provisioner tokens cannot be returned from administrator routes');\n  }\n\n  return {\n    id: token.id,\n    scope: 'installation' as const,\n    prefix: token.prefix,\n    name: token.name,\n    status: installationProvisionerTokenStatus(token),\n    created_by_user_id: token.createdByUserId,\n    revoked_by_user_id: token.revokedByUserId,\n    expires_at: token.expiresAt?.toISOString() ?? null,\n    revoked_at: token.revokedAt?.toISOString() ?? null,\n    last_seen_at: token.lastSeenAt?.toISOString() ?? null,\n    created_at: token.createdAt.toISOString(),\n    updated_at: token.updatedAt.toISOString(),\n  };\n}\n"],"names":["installationProvisionerTokenStatus","toAdministratorProvisionerTokenDto","token","scope","Error","id","prefix","name","status","created_by_user_id","createdByUserId","revoked_by_user_id","revokedByUserId","expires_at","expiresAt","toISOString","revoked_at","revokedAt","last_seen_at","lastSeenAt","created_at","createdAt","updated_at","updatedAt"],"mappings":"AACA,SAAQA,kCAAkC,QAAO,8BAA8B;AAE/E,OAAO,SAASC,mCAAmCC,KAAuB;IACxE,IAAIA,MAAMC,KAAK,KAAK,gBAAgB;QAClC,MAAM,IAAIC,MAAM;IAClB;IAEA,OAAO;QACLC,IAAIH,MAAMG,EAAE;QACZF,OAAO;QACPG,QAAQJ,MAAMI,MAAM;QACpBC,MAAML,MAAMK,IAAI;QAChBC,QAAQR,mCAAmCE;QAC3CO,oBAAoBP,MAAMQ,eAAe;QACzCC,oBAAoBT,MAAMU,eAAe;QACzCC,YAAYX,MAAMY,SAAS,EAAEC,iBAAiB;QAC9CC,YAAYd,MAAMe,SAAS,EAAEF,iBAAiB;QAC9CG,cAAchB,MAAMiB,UAAU,EAAEJ,iBAAiB;QACjDK,YAAYlB,MAAMmB,SAAS,CAACN,WAAW;QACvCO,YAAYpB,MAAMqB,SAAS,CAACR,WAAW;IACzC;AACF"}

package/dist/presentation/dto/admin-runner-instances.d.ts

@@ -0,0 +1,23 @@
+import type { RunnerAdministratorInstance } from '#core/admin-runner-instances.js';
+export declare function toRunnerAdministratorInstanceDto(runner: RunnerAdministratorInstance): {
+    id: string;
+    lifecycle_state: import("#core/admin-runner-instances.js").RunnerAdministratorLifecycleState;
+    compute_state: import("../../core/index.js").RunnerInstanceState;
+    enrollment_state: import("#core/admin-runner-instances.js").RunnerAdministratorEnrollmentState;
+    assignment_presence: "unassigned" | "assigned";
+    assigned_workspace: {
+        id: string;
+    } | null;
+    labels: string[];
+    created_at: string;
+    last_heartbeat_at: string;
+    closure_reason: string | null;
+    closed_at: string | null;
+    provisioner: {
+        id: string;
+        scope: "installation";
+        name: string | null;
+    };
+    reconciliation_status: import("#core/admin-runner-instances.js").RunnerAdministratorReconciliationStatus;
+};
+//# sourceMappingURL=admin-runner-instances.d.ts.map

package/dist/presentation/dto/admin-runner-instances.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-runner-instances.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/admin-runner-instances.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,2BAA2B,EAAC,MAAM,iCAAiC,CAAC;AAEjF,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,2BAA2B;;;;;;;;;;;;;;;;;;;;EAgBnF"}

package/dist/presentation/dto/admin-runner-instances.js

@@ -0,0 +1,19 @@
+export function toRunnerAdministratorInstanceDto(runner) {
+    return {
+        id: runner.id,
+        lifecycle_state: runner.lifecycleState,
+        compute_state: runner.computeState,
+        enrollment_state: runner.enrollmentState,
+        assignment_presence: runner.assignmentPresence,
+        assigned_workspace: runner.assignedWorkspace,
+        labels: runner.labels,
+        created_at: runner.createdAt.toISOString(),
+        last_heartbeat_at: runner.lastHeartbeatAt.toISOString(),
+        closure_reason: runner.closureReason,
+        closed_at: runner.closedAt?.toISOString() ?? null,
+        provisioner: runner.provisioner,
+        reconciliation_status: runner.reconciliationStatus
+    };
+}
+
+//# sourceMappingURL=admin-runner-instances.js.map

package/dist/presentation/dto/admin-runner-instances.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/presentation/dto/admin-runner-instances.ts"],"sourcesContent":["import type {RunnerAdministratorInstance} from '#core/admin-runner-instances.js';\n\nexport function toRunnerAdministratorInstanceDto(runner: RunnerAdministratorInstance) {\n  return {\n    id: runner.id,\n    lifecycle_state: runner.lifecycleState,\n    compute_state: runner.computeState,\n    enrollment_state: runner.enrollmentState,\n    assignment_presence: runner.assignmentPresence,\n    assigned_workspace: runner.assignedWorkspace,\n    labels: runner.labels,\n    created_at: runner.createdAt.toISOString(),\n    last_heartbeat_at: runner.lastHeartbeatAt.toISOString(),\n    closure_reason: runner.closureReason,\n    closed_at: runner.closedAt?.toISOString() ?? null,\n    provisioner: runner.provisioner,\n    reconciliation_status: runner.reconciliationStatus,\n  };\n}\n"],"names":["toRunnerAdministratorInstanceDto","runner","id","lifecycle_state","lifecycleState","compute_state","computeState","enrollment_state","enrollmentState","assignment_presence","assignmentPresence","assigned_workspace","assignedWorkspace","labels","created_at","createdAt","toISOString","last_heartbeat_at","lastHeartbeatAt","closure_reason","closureReason","closed_at","closedAt","provisioner","reconciliation_status","reconciliationStatus"],"mappings":"AAEA,OAAO,SAASA,iCAAiCC,MAAmC;IAClF,OAAO;QACLC,IAAID,OAAOC,EAAE;QACbC,iBAAiBF,OAAOG,cAAc;QACtCC,eAAeJ,OAAOK,YAAY;QAClCC,kBAAkBN,OAAOO,eAAe;QACxCC,qBAAqBR,OAAOS,kBAAkB;QAC9CC,oBAAoBV,OAAOW,iBAAiB;QAC5CC,QAAQZ,OAAOY,MAAM;QACrBC,YAAYb,OAAOc,SAAS,CAACC,WAAW;QACxCC,mBAAmBhB,OAAOiB,eAAe,CAACF,WAAW;QACrDG,gBAAgBlB,OAAOmB,aAAa;QACpCC,WAAWpB,OAAOqB,QAAQ,EAAEN,iBAAiB;QAC7CO,aAAatB,OAAOsB,WAAW;QAC/BC,uBAAuBvB,OAAOwB,oBAAoB;IACpD;AACF"}

package/dist/presentation/dto/index.d.ts

@@ -1,4 +1,6 @@
 export { toActiveProvisionerDto } from './active-provisioner.js';
+export { toAdministratorProvisionerTokenDto } from './admin-provisioner-token.js';
+export { toRunnerAdministratorInstanceDto } from './admin-runner-instances.js';
 export { toManualRegistrationTokenDto } from './manual-registration-token.js';
 export { toPollDemandResponseDto } from './poll-demand.js';
 export { toProvisionerTokenDto } from './provisioner-token.js';

package/dist/presentation/dto/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAC,4BAA4B,EAAC,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAC,uBAAuB,EAAC,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAC,qBAAqB,EAAC,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,qCAAqC,EACrC,kCAAkC,GACnC,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/dto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,sBAAsB,EAAC,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAC,kCAAkC,EAAC,MAAM,8BAA8B,CAAC;AAChF,OAAO,EAAC,gCAAgC,EAAC,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAC,4BAA4B,EAAC,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAC,uBAAuB,EAAC,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAC,qBAAqB,EAAC,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,qCAAqC,EACrC,kCAAkC,GACnC,MAAM,uBAAuB,CAAC"}

package/dist/presentation/dto/index.js

@@ -1,4 +1,6 @@
 export { toActiveProvisionerDto } from './active-provisioner.js';
+export { toAdministratorProvisionerTokenDto } from './admin-provisioner-token.js';
+export { toRunnerAdministratorInstanceDto } from './admin-runner-instances.js';
 export { toManualRegistrationTokenDto } from './manual-registration-token.js';
 export { toPollDemandResponseDto } from './poll-demand.js';
 export { toProvisionerTokenDto } from './provisioner-token.js';

package/dist/presentation/dto/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/dto/index.ts"],"sourcesContent":["export {toActiveProvisionerDto} from './active-provisioner.js';\nexport {toManualRegistrationTokenDto} from './manual-registration-token.js';\nexport {toPollDemandResponseDto} from './poll-demand.js';\nexport {toProvisionerTokenDto} from './provisioner-token.js';\nexport {\n  toActiveRunnersResponseDto,\n  toReconcileRunnerInstancesResponseDto,\n  toReportRunnerInstancesResponseDto,\n} from './runner-instances.js';\n"],"names":["toActiveProvisionerDto","toManualRegistrationTokenDto","toPollDemandResponseDto","toProvisionerTokenDto","toActiveRunnersResponseDto","toReconcileRunnerInstancesResponseDto","toReportRunnerInstancesResponseDto"],"mappings":"AAAA,SAAQA,sBAAsB,QAAO,0BAA0B;AAC/D,SAAQC,4BAA4B,QAAO,iCAAiC;AAC5E,SAAQC,uBAAuB,QAAO,mBAAmB;AACzD,SAAQC,qBAAqB,QAAO,yBAAyB;AAC7D,SACEC,0BAA0B,EAC1BC,qCAAqC,EACrCC,kCAAkC,QAC7B,wBAAwB"}
+{"version":3,"sources":["../../../src/presentation/dto/index.ts"],"sourcesContent":["export {toActiveProvisionerDto} from './active-provisioner.js';\nexport {toAdministratorProvisionerTokenDto} from './admin-provisioner-token.js';\nexport {toRunnerAdministratorInstanceDto} from './admin-runner-instances.js';\nexport {toManualRegistrationTokenDto} from './manual-registration-token.js';\nexport {toPollDemandResponseDto} from './poll-demand.js';\nexport {toProvisionerTokenDto} from './provisioner-token.js';\nexport {\n  toActiveRunnersResponseDto,\n  toReconcileRunnerInstancesResponseDto,\n  toReportRunnerInstancesResponseDto,\n} from './runner-instances.js';\n"],"names":["toActiveProvisionerDto","toAdministratorProvisionerTokenDto","toRunnerAdministratorInstanceDto","toManualRegistrationTokenDto","toPollDemandResponseDto","toProvisionerTokenDto","toActiveRunnersResponseDto","toReconcileRunnerInstancesResponseDto","toReportRunnerInstancesResponseDto"],"mappings":"AAAA,SAAQA,sBAAsB,QAAO,0BAA0B;AAC/D,SAAQC,kCAAkC,QAAO,+BAA+B;AAChF,SAAQC,gCAAgC,QAAO,8BAA8B;AAC7E,SAAQC,4BAA4B,QAAO,iCAAiC;AAC5E,SAAQC,uBAAuB,QAAO,mBAAmB;AACzD,SAAQC,qBAAqB,QAAO,yBAAyB;AAC7D,SACEC,0BAA0B,EAC1BC,qCAAqC,EACrCC,kCAAkC,QAC7B,wBAAwB"}

package/dist/presentation/routes/admin-provisioner-tokens.d.ts

@@ -0,0 +1,4 @@
+import { type AuthInterModuleClient } from '@shipfox/api-auth-dto/inter-module';
+import { type RouteGroup } from '@shipfox/node-fastify';
+export declare function createAdminProvisionerTokenRoutes(auth: Pick<AuthInterModuleClient, 'requireAdminRole'>): RouteGroup;
+//# sourceMappingURL=admin-provisioner-tokens.d.ts.map

package/dist/presentation/routes/admin-provisioner-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-provisioner-tokens.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/admin-provisioner-tokens.ts"],"names":[],"mappings":"AACA,OAAO,EACL,KAAK,qBAAqB,EAE3B,MAAM,oCAAoC,CAAC;AAW5C,OAAO,EAA2B,KAAK,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAyDhF,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,GACpD,UAAU,CAsGZ"}

package/dist/presentation/routes/admin-provisioner-tokens.js

@@ -0,0 +1,167 @@
+import { AUTH_USER, requireUserContext } from '@shipfox/api-auth-context';
+import { authInterModuleContract } from '@shipfox/api-auth-dto/inter-module';
+import { createAdministratorProvisionerTokenBodySchema, createAdministratorProvisionerTokenResponseSchema, listAdministratorProvisionerTokensQuerySchema, listAdministratorProvisionerTokensResponseSchema, revokeAdministratorProvisionerTokenBodySchema, revokeAdministratorProvisionerTokenResponseSchema } from '@shipfox/api-runners-dto';
+import { isInterModuleKnownError } from '@shipfox/inter-module';
+import { decodeTimestampIdCursor, encodeTimestampIdCursor } from '@shipfox/node-drizzle';
+import { ClientError, defineRoute } from '@shipfox/node-fastify';
+import { z } from 'zod';
+import { createAdministratorInstallationProvisionerToken, listAdministratorInstallationProvisionerTokens, ProvisionerAdminIdempotencyKeyReuseError, ProvisionerAdminIdempotencyReplayUnavailableError, ProvisionerTokenNotFoundError, revokeAdministratorInstallationProvisionerToken } from '#core/index.js';
+import { toAdministratorProvisionerTokenDto } from '#presentation/dto/index.js';
+const idempotencyKeyMaxLength = 256;
+function requireIdempotencyKey(request) {
+    const value = request.headers['idempotency-key'];
+    const key = Array.isArray(value) ? value[0] : value;
+    if (!key || key.trim().length === 0 || key.length > idempotencyKeyMaxLength) {
+        throw new ClientError('Idempotency-Key header is required', 'idempotency-key-required', {
+            status: 400
+        });
+    }
+    return key;
+}
+function translateAdministrationError(error) {
+    if (isInterModuleKnownError(authInterModuleContract.methods.requireAdminRole, error) && error.code === 'admin-role-required') {
+        throw new ClientError('Administrator role required', 'forbidden', {
+            status: 403,
+            details: {
+                required_role: error.details.requiredRole
+            }
+        });
+    }
+    if (error instanceof ProvisionerAdminIdempotencyKeyReuseError) {
+        throw new ClientError('Idempotency-Key was already used for a different provisioner token command', 'idempotency-key-reused', {
+            status: 409
+        });
+    }
+    if (error instanceof ProvisionerAdminIdempotencyReplayUnavailableError) {
+        throw new ClientError('Idempotency-Key replay cannot reproduce the original provisioner token', 'idempotency-replay-unavailable', {
+            status: 409
+        });
+    }
+    if (error instanceof ProvisionerTokenNotFoundError) {
+        throw new ClientError('Installation provisioner token not found', 'not-found', {
+            status: 404
+        });
+    }
+    throw error;
+}
+export function createAdminProvisionerTokenRoutes(auth) {
+    const listRoute = defineRoute({
+        method: 'GET',
+        path: '/',
+        auth: AUTH_USER,
+        description: 'List bounded installation provisioner token metadata for administrators.',
+        schema: {
+            querystring: listAdministratorProvisionerTokensQuerySchema,
+            response: {
+                200: listAdministratorProvisionerTokensResponseSchema
+            }
+        },
+        errorHandler: translateAdministrationError,
+        handler: async (request)=>{
+            const actor = requireUserContext(request);
+            await auth.requireAdminRole({
+                userId: actor.userId,
+                minimumRole: 'admin-observer'
+            });
+            const { status, limit, cursor } = request.query;
+            const decodedCursor = decodeTimestampIdCursor(cursor);
+            if (cursor !== undefined && !decodedCursor) {
+                throw new ClientError('Invalid cursor', 'invalid-cursor', {
+                    status: 400
+                });
+            }
+            const result = await listAdministratorInstallationProvisionerTokens({
+                status,
+                limit,
+                ...decodedCursor ? {
+                    cursor: decodedCursor
+                } : {}
+            });
+            return {
+                tokens: result.tokens.map(toAdministratorProvisionerTokenDto),
+                next_cursor: result.nextCursor ? encodeTimestampIdCursor(result.nextCursor) : null
+            };
+        }
+    });
+    const createRoute = defineRoute({
+        method: 'POST',
+        path: '/',
+        auth: AUTH_USER,
+        description: 'Create an installation-wide provisioner token for administrators.',
+        schema: {
+            body: createAdministratorProvisionerTokenBodySchema,
+            response: {
+                201: createAdministratorProvisionerTokenResponseSchema
+            }
+        },
+        errorHandler: translateAdministrationError,
+        handler: async (request, reply)=>{
+            const actor = requireUserContext(request);
+            const role = await auth.requireAdminRole({
+                userId: actor.userId,
+                minimumRole: 'admin-owner'
+            });
+            const result = await createAdministratorInstallationProvisionerToken({
+                actorId: actor.userId,
+                actorRole: role.role,
+                idempotencyKey: requireIdempotencyKey(request),
+                correlationId: request.id,
+                reason: request.body.reason,
+                name: request.body.name,
+                ttlSeconds: request.body.ttl_seconds
+            });
+            reply.code(201);
+            return {
+                ...toAdministratorProvisionerTokenDto(result.token),
+                raw_token: result.rawToken,
+                correlation_id: result.correlationId
+            };
+        }
+    });
+    const revokeRoute = defineRoute({
+        method: 'POST',
+        path: '/:tokenId/revoke',
+        auth: AUTH_USER,
+        description: 'Revoke an installation provisioner token and its unclaimed descendants.',
+        schema: {
+            params: z.object({
+                tokenId: z.string().uuid()
+            }),
+            body: revokeAdministratorProvisionerTokenBodySchema,
+            response: {
+                200: revokeAdministratorProvisionerTokenResponseSchema
+            }
+        },
+        errorHandler: translateAdministrationError,
+        handler: async (request)=>{
+            const actor = requireUserContext(request);
+            const role = await auth.requireAdminRole({
+                userId: actor.userId,
+                minimumRole: 'admin-operator'
+            });
+            const result = await revokeAdministratorInstallationProvisionerToken({
+                actorId: actor.userId,
+                actorRole: role.role,
+                tokenId: request.params.tokenId,
+                idempotencyKey: requireIdempotencyKey(request),
+                correlationId: request.id,
+                reason: request.body.reason
+            });
+            return {
+                ...toAdministratorProvisionerTokenDto(result.token),
+                correlation_id: result.correlationId
+            };
+        }
+    });
+    return {
+        prefix: '/admin/runners/provisioner-tokens',
+        auth: AUTH_USER,
+        routes: [
+            listRoute,
+            createRoute,
+            revokeRoute
+        ]
+    };
+}
+
+//# sourceMappingURL=admin-provisioner-tokens.js.map