@shipfox/api-runners 12.1.0 → 12.3.0

package/.turbo/turbo-build.log

@@ -1,6 +1,6 @@
 $ shipfox-swc && shipfox-temporal-bundle dist/temporal/workflows/index.js
-Successfully compiled: 101 files with swc (589.04ms)
-2026-08-04T14:51:31.159Z [INFO] asset workflow-bundle-0c3da2487e29e352d64e.js 3.17 MiB [emitted] [immutable] (name: main)
+Successfully compiled: 102 files with swc (716.68ms)
+2026-08-07T08:46:24.620Z [INFO] asset workflow-bundle-0c3da2487e29e352d64e.js 3.17 MiB [emitted] [immutable] (name: main)
 orphan modules 33.5 KiB [orphan] 21 modules
 runtime modules 1.13 KiB 5 modules
 modules by path ../../../node_modules/.pnpm/ 970 KiB 196 modules
@@ -14,6 +14,6 @@ optional modules 30 bytes [optional]
   __temporal_custom_payload_converter (ignored) 15 bytes [optional] [built] [code generated]
   __temporal_custom_failure_converter (ignored) 15 bytes [optional] [built] [code generated]
 ../../shared/node/temporal/dist/workflow-error-interceptor.js 1.21 KiB [built] [code generated]
-webpack 5.107.2 compiled successfully in 7373 ms
-2026-08-04T14:51:31.177Z [INFO] Workflow bundle created { size: '3.17MB' }
+webpack 5.107.2 compiled successfully in 6556 ms
+2026-08-07T08:46:24.639Z [INFO] Workflow bundle created { size: '3.17MB' }
 /home/runner/work/shipfox/shipfox/libs/api/runners/dist/temporal/workflows/index.js: 3326598 bytes

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @shipfox/api-runners
 
+## 12.3.0
+
+### Patch Changes
+
+- ed3ea25: Raise the default runner reservation TTL ceiling to 600 seconds so longer EC2 launch budgets are accepted while the cap still limits unreleased-reservation demand.
+- 72fb19d: Allow idle runners with expired or deleted intended or assigned reservations to be rebound on the next demand poll.
+- 32bc717: Preserves committed runner assignment metadata during enrollment.
+- 4bd55e8: Adds a service gauge for enrolled runners without a recent provisioner report after the stale-runner grace window.
+- 4a5e847: Uses provider reservation expiry as the activation grace period before stale runner assignments are rebound.
+- Updated dependencies [4b0731e]
+  - @shipfox/api-workflows-dto@12.3.0
+
+## 12.2.0
+
+### Minor Changes
+
+- d7af255: Count bounded runner reservation promotion failures during enrollment.
+
+### Patch Changes
+
+- 947a5bc: Clear stale intended runner reservations when reservation rows are deleted.
+- 78b771c: Accept provider-specific reservation TTLs in runner demand polling and enforce a server-side ceiling.
+- 9e1d2e9: Reserve configured runner labels for installation-scope provisioners.
+- Updated dependencies [78b771c]
+- Updated dependencies [df2ed79]
+- Updated dependencies [ce0984d]
+  - @shipfox/api-runners-dto@12.2.0
+  - @shipfox/runner-labels@0.2.0
+  - @shipfox/api-workflows-dto@12.2.0
+  - @shipfox/node-opentelemetry@0.6.4
+  - @shipfox/node-fastify@0.4.2
+  - @shipfox/node-module@1.0.6
+  - @shipfox/node-temporal@0.4.5
+  - @shipfox/api-auth-context@12.2.0
+
 ## 12.1.0
 
 ### Patch Changes

package/dist/config.d.ts

@@ -4,6 +4,7 @@ export declare const config: Readonly<{
     RUNNER_ACTIVATION_TOKEN_TTL_SECONDS: number;
     RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS: number;
     RUNNER_ASSIGNMENT_POLL_INTERVAL_MS: number;
+    RUNNER_RESERVED_LABELS: string;
     EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: number;
     REGISTRATION_TOKEN_BATCH_MAX: number;
     PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: number;
@@ -12,6 +13,7 @@ export declare const config: Readonly<{
     EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: number;
     RUNNERS_RATE_LIMIT_TIMEOUT_MS: number;
     RESERVATION_TTL_SECONDS: number;
+    RESERVATION_TTL_MAX_SECONDS: number;
     RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: number;
     RESERVATION_POLL_INTERVAL_MS: number;
     RESERVATION_POLL_MAX_INTERVAL_MS: number;
@@ -31,4 +33,5 @@ export declare const config: Readonly<{
     PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: number;
     PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: boolean;
 } & import("@shipfox/config").CleanedEnvAccessors>;
+export declare const runnerReservedLabels: readonly string[];
 //# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kDA6HjB,CAAC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kDAqIjB,CAAC;AAWH,eAAO,MAAM,oBAAoB,mBAA6B,CAAC"}

package/dist/config.js

@@ -1,9 +1,11 @@
 import { RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS } from '@shipfox/api-runners-dto';
-import { bool, createConfig, num } from '@shipfox/config';
+import { bool, createConfig, num, str } from '@shipfox/config';
+import { findInvalidLabels, parseLabelList } from '@shipfox/runner-labels';
 import { STUCK_JOB_THRESHOLD_SECONDS } from '#core/maintenance-policy.js';
 const EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS = 3600;
 const REGISTRATION_TOKEN_BATCH_HARD_MAX = 1000;
 const RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS = 3600;
+const RESERVATION_TTL_HARD_MAX_SECONDS = 3600;
 export const config = createConfig({
     RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS: num({
         desc: 'Lifetime of a one-use runner bootstrap token in seconds. The token can only create one runner-control session before it expires.',
@@ -25,6 +27,10 @@ export const config = createConfig({
         desc: 'Delay between durable assignment reads while a runner-control session waits for an assignment, in milliseconds.',
         default: 250
     }),
+    RUNNER_RESERVED_LABELS: str({
+        desc: 'Comma-separated labels that only installation-scope provisioners may advertise. Any other provisioner or runner has them removed.',
+        default: ''
+    }),
     EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: num({
         desc: `Lifetime of a provisioner-minted runner registration token, in seconds. The token can be exchanged once by a runner before this time passes. Set this between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,
         default: 300
@@ -54,9 +60,13 @@ export const config = createConfig({
         default: 250
     }),
     RESERVATION_TTL_SECONDS: num({
-        desc: 'Lifetime of a count-based runner reservation, in seconds. Expired reservations stop counting against queued demand.',
+        desc: 'Default lifetime and activation grace period of a count-based runner reservation, in seconds. A runner without a session can be rebound only after this deadline. Used when a provisioner does not request a provider-specific value. Expired reservations stop counting against queued demand.',
         default: 60
     }),
+    RESERVATION_TTL_MAX_SECONDS: num({
+        desc: `Server-side ceiling for a count-based runner reservation lifetime and activation grace period, in seconds. Set it at least as high as every provider registration deadline plus its launch headroom so provider-specific values can cover the launch gap, boot, and enrollment. Set this between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,
+        default: 600
+    }),
     RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({
         desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',
         default: 30
@@ -130,6 +140,12 @@ export const config = createConfig({
         default: false
     })
 });
+const parsedRunnerReservedLabels = parseLabelList(config.RUNNER_RESERVED_LABELS);
+const invalidRunnerReservedLabels = findInvalidLabels(parsedRunnerReservedLabels);
+if (invalidRunnerReservedLabels.length > 0) {
+    throw new Error(`RUNNER_RESERVED_LABELS contains invalid runner label(s): ${invalidRunnerReservedLabels.join(', ')}`);
+}
+export const runnerReservedLabels = parsedRunnerReservedLabels;
 if (!Number.isInteger(config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS) || config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS < 1 || config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS > EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS) {
     throw new Error(`EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS (${config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS}) must be a whole number of seconds between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`);
 }
@@ -189,6 +205,12 @@ for (const [name, value] of [
 if (!Number.isInteger(config.RESERVATION_TTL_SECONDS) || config.RESERVATION_TTL_SECONDS < 1) {
     throw new Error(`RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must be a whole number of seconds >= 1.`);
 }
+if (!Number.isInteger(config.RESERVATION_TTL_MAX_SECONDS) || config.RESERVATION_TTL_MAX_SECONDS < 1 || config.RESERVATION_TTL_MAX_SECONDS > RESERVATION_TTL_HARD_MAX_SECONDS) {
+    throw new Error(`RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}) must be a whole number of seconds between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`);
+}
+if (config.RESERVATION_TTL_SECONDS > config.RESERVATION_TTL_MAX_SECONDS) {
+    throw new Error(`RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must not be greater than RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}).`);
+}
 if (!Number.isInteger(config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS) || config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS < 0) {
     throw new Error(`RESERVATION_LONG_POLL_MAX_WAIT_SECONDS (${config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS}) must be a whole number of seconds >= 0.`);
 }

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS} from '@shipfox/api-runners-dto';\nimport {bool, createConfig, num} from '@shipfox/config';\nimport {STUCK_JOB_THRESHOLD_SECONDS} from '#core/maintenance-policy.js';\n\nconst EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\nconst REGISTRATION_TOKEN_BATCH_HARD_MAX = 1000;\nconst RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\n\nexport const config = createConfig({\n  RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use runner bootstrap token in seconds. The token can only create one runner-control session before it expires.',\n    default: 300,\n  }),\n  RUNNER_CONTROL_SESSION_TTL_SECONDS: num({\n    desc: 'Lifetime of a pre-workspace runner-control session in seconds. This session can only enroll, attach its provider identity, and report its own liveness.',\n    default: 3600,\n  }),\n  RUNNER_ACTIVATION_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use activation token in seconds. The token is issued only to an assigned runner-control session and creates one workspace runner session.',\n    default: 300,\n  }),\n  RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum server-side cap for the per-request runner assignment wait, in seconds. Managed runners request their own bounded wait with wait_seconds.',\n    default: RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS,\n  }),\n  RUNNER_ASSIGNMENT_POLL_INTERVAL_MS: num({\n    desc: 'Delay between durable assignment reads while a runner-control session waits for an assignment, in milliseconds.',\n    default: 250,\n  }),\n  EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: num({\n    desc: `Lifetime of a provisioner-minted runner registration token, in seconds. The token can be exchanged once by a runner before this time passes. Set this between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    default: 300,\n  }),\n  REGISTRATION_TOKEN_BATCH_MAX: num({\n    desc: `Maximum number of runner registration tokens a provisioner can mint in one batch request. Set this between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n    default: 500,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of batch runner registration token mint requests one provisioner can make per rate-limit window.',\n    default: 120,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for provisioner batch runner registration token mint requests, in seconds.',\n    default: 60,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of runner registration attempts one ephemeral registration token can make per rate-limit window.',\n    default: 5,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for runner registration attempts with one ephemeral registration token, in seconds.',\n    default: 60,\n  }),\n  RUNNERS_RATE_LIMIT_TIMEOUT_MS: num({\n    desc: 'Maximum time, in milliseconds, a runners rate-limit storage check may wait before the request fails closed.',\n    default: 250,\n  }),\n  RESERVATION_TTL_SECONDS: num({\n    desc: 'Lifetime of a count-based runner reservation, in seconds. Expired reservations stop counting against queued demand.',\n    default: 60,\n  }),\n  RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',\n    default: 30,\n  }),\n  RESERVATION_POLL_INTERVAL_MS: num({\n    desc: 'Initial interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 1000,\n  }),\n  RESERVATION_POLL_MAX_INTERVAL_MS: num({\n    desc: 'Maximum backoff interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 5000,\n  }),\n  RUNNER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active runners from recent heartbeats and provisioned runner reports.',\n    default: 60,\n  }),\n  RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS: num({\n    desc: 'Time window, in seconds, after which a runner tool capability report is treated as stale. Set this higher than the runner heartbeat interval so active runners keep their advertised tools fresh.',\n    default: 60,\n  }),\n  RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before maintenance expires a claimed job that has not sent its first heartbeat. Set this lower than the normal stuck-job threshold so startup crashes release work quickly.',\n    default: 60,\n  }),\n  RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before reconcile marks an absent provisioned runner as terminated. Set this higher than the provisioner report interval so a transient empty or partial observed set does not kill a live runner.',\n    default: 120,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS: num({\n    desc: 'Time, in seconds, after which a provisioned runner with no recent report, no live provisioner, no live runner session, and no running job is marked failed by backend maintenance.',\n    default: 300,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT: num({\n    desc: 'Maximum number of stale provisioned runners the maintenance worker marks failed in one run. Higher values clear backlogs faster but hold database locks longer.',\n    default: 100,\n  }),\n  RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between runner session liveness writes from job request polls. Set this lower than RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS so active idle runners stay fresh.',\n    default: 10,\n  }),\n  RUNNER_SESSION_MANUAL_RETENTION_DAYS: num({\n    desc: 'How long manual runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 30,\n  }),\n  RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS: num({\n    desc: 'How long ephemeral runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 7,\n  }),\n  RUNNER_SESSION_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of expired runner sessions maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS: num({\n    desc: 'How long consumed or expired ephemeral registration tokens are retained for audit and debugging before maintenance deletes them, in days. Active tokens that are neither consumed nor expired are never deleted. This window is independent of the runner-session retention windows.',\n    default: 7,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of consumed or expired ephemeral registration tokens maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  PROVISIONER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active provisioners from recent authenticated requests.',\n    default: 120,\n  }),\n  PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between last-seen writes for one provisioner token.',\n    default: 10,\n  }),\n  PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: bool({\n    desc: 'Whether runners_provider_runner_count_divergence includes template_key as a metric label. Use true or false. Defaults to false because template keys can create high-cardinality metric series. Set true only when template keys are bounded and stable.',\n    default: false,\n  }),\n});\n\nif (\n  !Number.isInteger(config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS) ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS < 1 ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS >\n    EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS (${config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS}) must be a whole number of seconds between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS', config.RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS],\n  ['RUNNER_CONTROL_SESSION_TTL_SECONDS', config.RUNNER_CONTROL_SESSION_TTL_SECONDS],\n  ['RUNNER_ACTIVATION_TOKEN_TTL_SECONDS', config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS],\n] as const) {\n  if (\n    !Number.isInteger(value) ||\n    value < 1 ||\n    value > RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS\n  ) {\n    throw new Error(\n      `${name} (${value}) must be a whole number of seconds between 1 and ${RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    );\n  }\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS) ||\n  config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS (${config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS) ||\n  config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS < 0\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_INTERVAL_MS (${config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS}) must be a whole number >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.REGISTRATION_TOKEN_BATCH_MAX) ||\n  config.REGISTRATION_TOKEN_BATCH_MAX < 1 ||\n  config.REGISTRATION_TOKEN_BATCH_MAX > REGISTRATION_TOKEN_BATCH_HARD_MAX\n) {\n  throw new Error(\n    `REGISTRATION_TOKEN_BATCH_MAX (${config.REGISTRATION_TOKEN_BATCH_MAX}) must be a whole number between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS', config.PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS],\n  ['PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS', config.PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS],\n  ['EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS', config.EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS],\n  [\n    'EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS',\n    config.EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS,\n  ],\n  ['RUNNERS_RATE_LIMIT_TIMEOUT_MS', config.RUNNERS_RATE_LIMIT_TIMEOUT_MS],\n] as const) {\n  if (!Number.isInteger(value) || value < 1) {\n    throw new Error(`${name} (${value}) must be a whole number >= 1.`);\n  }\n}\n\nif (!Number.isInteger(config.RESERVATION_TTL_SECONDS) || config.RESERVATION_TTL_SECONDS < 1) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS) ||\n  config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS < 0\n) {\n  throw new Error(\n    `RESERVATION_LONG_POLL_MAX_WAIT_SECONDS (${config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS}) must be a whole number of seconds >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_INTERVAL_MS) ||\n  config.RESERVATION_POLL_INTERVAL_MS < 1\n) {\n  throw new Error(\n    `RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}) must be a whole number of milliseconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_MAX_INTERVAL_MS) ||\n  config.RESERVATION_POLL_MAX_INTERVAL_MS < config.RESERVATION_POLL_INTERVAL_MS\n) {\n  throw new Error(\n    `RESERVATION_POLL_MAX_INTERVAL_MS (${config.RESERVATION_POLL_MAX_INTERVAL_MS}) must be a whole number of milliseconds >= RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ACTIVE_WINDOW_SECONDS) ||\n  config.RUNNER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ACTIVE_WINDOW_SECONDS (${config.RUNNER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS) ||\n  config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS (${config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS) ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS < 1 ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS >= STUCK_JOB_THRESHOLD_SECONDS\n) {\n  throw new Error(\n    `RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS (${config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS}) must be a whole number of seconds >= 1 and < ${STUCK_JOB_THRESHOLD_SECONDS}.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS) ||\n  config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS (${config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT (${config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS) ||\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_MANUAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_MANUAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_MANUAL_RETENTION_DAYS (${config.RUNNER_SESSION_MANUAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS (${config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_GC_BATCH_SIZE) ||\n  config.RUNNER_SESSION_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_GC_BATCH_SIZE (${config.RUNNER_SESSION_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS) ||\n  config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS (${config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE) ||\n  config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE (${config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_ACTIVE_WINDOW_SECONDS) ||\n  config.PROVISIONER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_ACTIVE_WINDOW_SECONDS (${config.PROVISIONER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS) ||\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}).`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}).`,\n  );\n}\n"],"names":["RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS","bool","createConfig","num","STUCK_JOB_THRESHOLD_SECONDS","EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS","REGISTRATION_TOKEN_BATCH_HARD_MAX","RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS","config","RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS","desc","default","RUNNER_CONTROL_SESSION_TTL_SECONDS","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS","RUNNER_ASSIGNMENT_POLL_INTERVAL_MS","EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS","REGISTRATION_TOKEN_BATCH_MAX","PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS","PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS","EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS","EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS","RUNNERS_RATE_LIMIT_TIMEOUT_MS","RESERVATION_TTL_SECONDS","RESERVATION_LONG_POLL_MAX_WAIT_SECONDS","RESERVATION_POLL_INTERVAL_MS","RESERVATION_POLL_MAX_INTERVAL_MS","RUNNER_ACTIVE_WINDOW_SECONDS","RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS","RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS","RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT","RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS","RUNNER_SESSION_MANUAL_RETENTION_DAYS","RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS","RUNNER_SESSION_GC_BATCH_SIZE","RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS","RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE","PROVISIONER_ACTIVE_WINDOW_SECONDS","PROVISIONER_LAST_SEEN_THROTTLE_SECONDS","PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED","Number","isInteger","Error","name","value"],"mappings":"AAAA,SAAQA,2CAA2C,QAAO,2BAA2B;AACrF,SAAQC,IAAI,EAAEC,YAAY,EAAEC,GAAG,QAAO,kBAAkB;AACxD,SAAQC,2BAA2B,QAAO,8BAA8B;AAExE,MAAMC,oDAAoD;AAC1D,MAAMC,oCAAoC;AAC1C,MAAMC,kDAAkD;AAExD,OAAO,MAAMC,SAASN,aAAa;IACjCO,oCAAoCN,IAAI;QACtCO,MAAM;QACNC,SAAS;IACX;IACAC,oCAAoCT,IAAI;QACtCO,MAAM;QACNC,SAAS;IACX;IACAE,qCAAqCV,IAAI;QACvCO,MAAM;QACNC,SAAS;IACX;IACAG,yCAAyCX,IAAI;QAC3CO,MAAM;QACNC,SAASX;IACX;IACAe,oCAAoCZ,IAAI;QACtCO,MAAM;QACNC,SAAS;IACX;IACAK,0CAA0Cb,IAAI;QAC5CO,MAAM,CAAC,oKAAoK,EAAEL,kDAAkD,CAAC,CAAC;QACjOM,SAAS;IACX;IACAM,8BAA8Bd,IAAI;QAChCO,MAAM,CAAC,iHAAiH,EAAEJ,kCAAkC,CAAC,CAAC;QAC9JK,SAAS;IACX;IACAO,0CAA0Cf,IAAI;QAC5CO,MAAM;QACNC,SAAS;IACX;IACAQ,4CAA4ChB,IAAI;QAC9CO,MAAM;QACNC,SAAS;IACX;IACAS,4CAA4CjB,IAAI;QAC9CO,MAAM;QACNC,SAAS;IACX;IACAU,8CAA8ClB,IAAI;QAChDO,MAAM;QACNC,SAAS;IACX;IACAW,+BAA+BnB,IAAI;QACjCO,MAAM;QACNC,SAAS;IACX;IACAY,yBAAyBpB,IAAI;QAC3BO,MAAM;QACNC,SAAS;IACX;IACAa,wCAAwCrB,IAAI;QAC1CO,MAAM;QACNC,SAAS;IACX;IACAc,8BAA8BtB,IAAI;QAChCO,MAAM;QACNC,SAAS;IACX;IACAe,kCAAkCvB,IAAI;QACpCO,MAAM;QACNC,SAAS;IACX;IACAgB,8BAA8BxB,IAAI;QAChCO,MAAM;QACNC,SAAS;IACX;IACAiB,8CAA8CzB,IAAI;QAChDO,MAAM;QACNC,SAAS;IACX;IACAkB,yCAAyC1B,IAAI;QAC3CO,MAAM;QACNC,SAAS;IACX;IACAmB,0CAA0C3B,IAAI;QAC5CO,MAAM;QACNC,SAAS;IACX;IACAoB,mDAAmD5B,IAAI;QACrDO,MAAM;QACNC,SAAS;IACX;IACAqB,8CAA8C7B,IAAI;QAChDO,MAAM;QACNC,SAAS;IACX;IACAsB,0CAA0C9B,IAAI;QAC5CO,MAAM;QACNC,SAAS;IACX;IACAuB,sCAAsC/B,IAAI;QACxCO,MAAM;QACNC,SAAS;IACX;IACAwB,yCAAyChC,IAAI;QAC3CO,MAAM;QACNC,SAAS;IACX;IACAyB,8BAA8BjC,IAAI;QAChCO,MAAM;QACNC,SAAS;IACX;IACA0B,uCAAuClC,IAAI;QACzCO,MAAM;QACNC,SAAS;IACX;IACA2B,sCAAsCnC,IAAI;QACxCO,MAAM;QACNC,SAAS;IACX;IACA4B,mCAAmCpC,IAAI;QACrCO,MAAM;QACNC,SAAS;IACX;IACA6B,wCAAwCrC,IAAI;QAC1CO,MAAM;QACNC,SAAS;IACX;IACA8B,gEAAgExC,KAAK;QACnES,MAAM;QACNC,SAAS;IACX;AACF,GAAG;AAEH,IACE,CAAC+B,OAAOC,SAAS,CAACnC,OAAOQ,wCAAwC,KACjER,OAAOQ,wCAAwC,GAAG,KAClDR,OAAOQ,wCAAwC,GAC7CX,mDACF;IACA,MAAM,IAAIuC,MACR,CAAC,0CAA0C,EAAEpC,OAAOQ,wCAAwC,CAAC,kDAAkD,EAAEX,kDAAkD,CAAC,CAAC;AAEzM;AAEA,KAAK,MAAM,CAACwC,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAAsCtC,OAAOC,kCAAkC;KAAC;IACjF;QAAC;QAAsCD,OAAOI,kCAAkC;KAAC;IACjF;QAAC;QAAuCJ,OAAOK,mCAAmC;KAAC;CACpF,CAAW;IACV,IACE,CAAC6B,OAAOC,SAAS,CAACG,UAClBA,QAAQ,KACRA,QAAQvC,iDACR;QACA,MAAM,IAAIqC,MACR,GAAGC,KAAK,EAAE,EAAEC,MAAM,kDAAkD,EAAEvC,gDAAgD,CAAC,CAAC;IAE5H;AACF;AAEA,IACE,CAACmC,OAAOC,SAAS,CAACnC,OAAOM,uCAAuC,KAChEN,OAAOM,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAI8B,MACR,CAAC,yCAAyC,EAAEpC,OAAOM,uCAAuC,CAAC,8BAA8B,CAAC;AAE9H;AAEA,IACE,CAAC4B,OAAOC,SAAS,CAACnC,OAAOO,kCAAkC,KAC3DP,OAAOO,kCAAkC,GAAG,GAC5C;IACA,MAAM,IAAI6B,MACR,CAAC,oCAAoC,EAAEpC,OAAOO,kCAAkC,CAAC,8BAA8B,CAAC;AAEpH;AAEA,IACE,CAAC2B,OAAOC,SAAS,CAACnC,OAAOS,4BAA4B,KACrDT,OAAOS,4BAA4B,GAAG,KACtCT,OAAOS,4BAA4B,GAAGX,mCACtC;IACA,MAAM,IAAIsC,MACR,CAAC,8BAA8B,EAAEpC,OAAOS,4BAA4B,CAAC,uCAAuC,EAAEX,kCAAkC,CAAC,CAAC;AAEtJ;AAEA,KAAK,MAAM,CAACuC,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAA4CtC,OAAOU,wCAAwC;KAAC;IAC7F;QAAC;QAA8CV,OAAOW,0CAA0C;KAAC;IACjG;QAAC;QAA8CX,OAAOY,0CAA0C;KAAC;IACjG;QACE;QACAZ,OAAOa,4CAA4C;KACpD;IACD;QAAC;QAAiCb,OAAOc,6BAA6B;KAAC;CACxE,CAAW;IACV,IAAI,CAACoB,OAAOC,SAAS,CAACG,UAAUA,QAAQ,GAAG;QACzC,MAAM,IAAIF,MAAM,GAAGC,KAAK,EAAE,EAAEC,MAAM,8BAA8B,CAAC;IACnE;AACF;AAEA,IAAI,CAACJ,OAAOC,SAAS,CAACnC,OAAOe,uBAAuB,KAAKf,OAAOe,uBAAuB,GAAG,GAAG;IAC3F,MAAM,IAAIqB,MACR,CAAC,yBAAyB,EAAEpC,OAAOe,uBAAuB,CAAC,yCAAyC,CAAC;AAEzG;AAEA,IACE,CAACmB,OAAOC,SAAS,CAACnC,OAAOgB,sCAAsC,KAC/DhB,OAAOgB,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIoB,MACR,CAAC,wCAAwC,EAAEpC,OAAOgB,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACE,CAACkB,OAAOC,SAAS,CAACnC,OAAOiB,4BAA4B,KACrDjB,OAAOiB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAImB,MACR,CAAC,8BAA8B,EAAEpC,OAAOiB,4BAA4B,CAAC,8CAA8C,CAAC;AAExH;AAEA,IACE,CAACiB,OAAOC,SAAS,CAACnC,OAAOkB,gCAAgC,KACzDlB,OAAOkB,gCAAgC,GAAGlB,OAAOiB,4BAA4B,EAC7E;IACA,MAAM,IAAImB,MACR,CAAC,kCAAkC,EAAEpC,OAAOkB,gCAAgC,CAAC,0EAA0E,EAAElB,OAAOiB,4BAA4B,CAAC,EAAE,CAAC;AAEpM;AAEA,IACE,CAACiB,OAAOC,SAAS,CAACnC,OAAOmB,4BAA4B,KACrDnB,OAAOmB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIiB,MACR,CAAC,8BAA8B,EAAEpC,OAAOmB,4BAA4B,CAAC,yCAAyC,CAAC;AAEnH;AAEA,IACE,CAACe,OAAOC,SAAS,CAACnC,OAAOoB,4CAA4C,KACrEpB,OAAOoB,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIgB,MACR,CAAC,8CAA8C,EAAEpC,OAAOoB,4CAA4C,CAAC,yCAAyC,CAAC;AAEnJ;AAEA,IACE,CAACc,OAAOC,SAAS,CAACnC,OAAOqB,uCAAuC,KAChErB,OAAOqB,uCAAuC,GAAG,KACjDrB,OAAOqB,uCAAuC,IAAIzB,6BAClD;IACA,MAAM,IAAIwC,MACR,CAAC,yCAAyC,EAAEpC,OAAOqB,uCAAuC,CAAC,+CAA+C,EAAEzB,4BAA4B,CAAC,CAAC;AAE9K;AAEA,IACE,CAACsC,OAAOC,SAAS,CAACnC,OAAOsB,wCAAwC,KACjEtB,OAAOsB,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIc,MACR,CAAC,0CAA0C,EAAEpC,OAAOsB,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACY,OAAOC,SAAS,CAACnC,OAAOuB,iDAAiD,KAC1EvB,OAAOuB,iDAAiD,GAAG,GAC3D;IACA,MAAM,IAAIa,MACR,CAAC,mDAAmD,EAAEpC,OAAOuB,iDAAiD,CAAC,yCAAyC,CAAC;AAE7J;AAEA,IACE,CAACW,OAAOC,SAAS,CAACnC,OAAOwB,4CAA4C,KACrExB,OAAOwB,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIY,MACR,CAAC,8CAA8C,EAAEpC,OAAOwB,4CAA4C,CAAC,8BAA8B,CAAC;AAExI;AAEA,IACE,CAACU,OAAOC,SAAS,CAACnC,OAAOyB,wCAAwC,KACjEzB,OAAOyB,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIW,MACR,CAAC,0CAA0C,EAAEpC,OAAOyB,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACS,OAAOC,SAAS,CAACnC,OAAO0B,oCAAoC,KAC7D1B,OAAO0B,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIU,MACR,CAAC,sCAAsC,EAAEpC,OAAO0B,oCAAoC,CAAC,sCAAsC,CAAC;AAEhI;AAEA,IACE,CAACQ,OAAOC,SAAS,CAACnC,OAAO2B,uCAAuC,KAChE3B,OAAO2B,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIS,MACR,CAAC,yCAAyC,EAAEpC,OAAO2B,uCAAuC,CAAC,sCAAsC,CAAC;AAEtI;AAEA,IACE,CAACO,OAAOC,SAAS,CAACnC,OAAO4B,4BAA4B,KACrD5B,OAAO4B,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIQ,MACR,CAAC,8BAA8B,EAAEpC,OAAO4B,4BAA4B,CAAC,8BAA8B,CAAC;AAExG;AAEA,IACE,CAACM,OAAOC,SAAS,CAACnC,OAAO6B,qCAAqC,KAC9D7B,OAAO6B,qCAAqC,GAAG,GAC/C;IACA,MAAM,IAAIO,MACR,CAAC,uCAAuC,EAAEpC,OAAO6B,qCAAqC,CAAC,sCAAsC,CAAC;AAElI;AAEA,IACE,CAACK,OAAOC,SAAS,CAACnC,OAAO8B,oCAAoC,KAC7D9B,OAAO8B,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIM,MACR,CAAC,sCAAsC,EAAEpC,OAAO8B,oCAAoC,CAAC,8BAA8B,CAAC;AAExH;AAEA,IACE,CAACI,OAAOC,SAAS,CAACnC,OAAO+B,iCAAiC,KAC1D/B,OAAO+B,iCAAiC,GAAG,GAC3C;IACA,MAAM,IAAIK,MACR,CAAC,mCAAmC,EAAEpC,OAAO+B,iCAAiC,CAAC,yCAAyC,CAAC;AAE7H;AAEA,IACE,CAACG,OAAOC,SAAS,CAACnC,OAAOgC,sCAAsC,KAC/DhC,OAAOgC,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAII,MACR,CAAC,wCAAwC,EAAEpC,OAAOgC,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACEhC,OAAOuB,iDAAiD,IACxDvB,OAAOgC,sCAAsC,EAC7C;IACA,MAAM,IAAII,MACR,CAAC,mDAAmD,EAAEpC,OAAOuB,iDAAiD,CAAC,+DAA+D,EAAEvB,OAAOgC,sCAAsC,CAAC,EAAE,CAAC;AAErO;AAEA,IACEhC,OAAOuB,iDAAiD,IACxDvB,OAAOyB,wCAAwC,EAC/C;IACA,MAAM,IAAIW,MACR,CAAC,mDAAmD,EAAEpC,OAAOuB,iDAAiD,CAAC,iEAAiE,EAAEvB,OAAOyB,wCAAwC,CAAC,EAAE,CAAC;AAEzO"}
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS} from '@shipfox/api-runners-dto';\nimport {bool, createConfig, num, str} from '@shipfox/config';\nimport {findInvalidLabels, parseLabelList} from '@shipfox/runner-labels';\nimport {STUCK_JOB_THRESHOLD_SECONDS} from '#core/maintenance-policy.js';\n\nconst EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\nconst REGISTRATION_TOKEN_BATCH_HARD_MAX = 1000;\nconst RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\nconst RESERVATION_TTL_HARD_MAX_SECONDS = 3600;\n\nexport const config = createConfig({\n  RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use runner bootstrap token in seconds. The token can only create one runner-control session before it expires.',\n    default: 300,\n  }),\n  RUNNER_CONTROL_SESSION_TTL_SECONDS: num({\n    desc: 'Lifetime of a pre-workspace runner-control session in seconds. This session can only enroll, attach its provider identity, and report its own liveness.',\n    default: 3600,\n  }),\n  RUNNER_ACTIVATION_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use activation token in seconds. The token is issued only to an assigned runner-control session and creates one workspace runner session.',\n    default: 300,\n  }),\n  RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum server-side cap for the per-request runner assignment wait, in seconds. Managed runners request their own bounded wait with wait_seconds.',\n    default: RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS,\n  }),\n  RUNNER_ASSIGNMENT_POLL_INTERVAL_MS: num({\n    desc: 'Delay between durable assignment reads while a runner-control session waits for an assignment, in milliseconds.',\n    default: 250,\n  }),\n  RUNNER_RESERVED_LABELS: str({\n    desc: 'Comma-separated labels that only installation-scope provisioners may advertise. Any other provisioner or runner has them removed.',\n    default: '',\n  }),\n  EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: num({\n    desc: `Lifetime of a provisioner-minted runner registration token, in seconds. The token can be exchanged once by a runner before this time passes. Set this between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    default: 300,\n  }),\n  REGISTRATION_TOKEN_BATCH_MAX: num({\n    desc: `Maximum number of runner registration tokens a provisioner can mint in one batch request. Set this between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n    default: 500,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of batch runner registration token mint requests one provisioner can make per rate-limit window.',\n    default: 120,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for provisioner batch runner registration token mint requests, in seconds.',\n    default: 60,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of runner registration attempts one ephemeral registration token can make per rate-limit window.',\n    default: 5,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for runner registration attempts with one ephemeral registration token, in seconds.',\n    default: 60,\n  }),\n  RUNNERS_RATE_LIMIT_TIMEOUT_MS: num({\n    desc: 'Maximum time, in milliseconds, a runners rate-limit storage check may wait before the request fails closed.',\n    default: 250,\n  }),\n  RESERVATION_TTL_SECONDS: num({\n    desc: 'Default lifetime and activation grace period of a count-based runner reservation, in seconds. A runner without a session can be rebound only after this deadline. Used when a provisioner does not request a provider-specific value. Expired reservations stop counting against queued demand.',\n    default: 60,\n  }),\n  RESERVATION_TTL_MAX_SECONDS: num({\n    desc: `Server-side ceiling for a count-based runner reservation lifetime and activation grace period, in seconds. Set it at least as high as every provider registration deadline plus its launch headroom so provider-specific values can cover the launch gap, boot, and enrollment. Set this between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,\n    default: 600,\n  }),\n  RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',\n    default: 30,\n  }),\n  RESERVATION_POLL_INTERVAL_MS: num({\n    desc: 'Initial interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 1000,\n  }),\n  RESERVATION_POLL_MAX_INTERVAL_MS: num({\n    desc: 'Maximum backoff interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 5000,\n  }),\n  RUNNER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active runners from recent heartbeats and provisioned runner reports.',\n    default: 60,\n  }),\n  RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS: num({\n    desc: 'Time window, in seconds, after which a runner tool capability report is treated as stale. Set this higher than the runner heartbeat interval so active runners keep their advertised tools fresh.',\n    default: 60,\n  }),\n  RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before maintenance expires a claimed job that has not sent its first heartbeat. Set this lower than the normal stuck-job threshold so startup crashes release work quickly.',\n    default: 60,\n  }),\n  RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before reconcile marks an absent provisioned runner as terminated. Set this higher than the provisioner report interval so a transient empty or partial observed set does not kill a live runner.',\n    default: 120,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS: num({\n    desc: 'Time, in seconds, after which a provisioned runner with no recent report, no live provisioner, no live runner session, and no running job is marked failed by backend maintenance.',\n    default: 300,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT: num({\n    desc: 'Maximum number of stale provisioned runners the maintenance worker marks failed in one run. Higher values clear backlogs faster but hold database locks longer.',\n    default: 100,\n  }),\n  RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between runner session liveness writes from job request polls. Set this lower than RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS so active idle runners stay fresh.',\n    default: 10,\n  }),\n  RUNNER_SESSION_MANUAL_RETENTION_DAYS: num({\n    desc: 'How long manual runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 30,\n  }),\n  RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS: num({\n    desc: 'How long ephemeral runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 7,\n  }),\n  RUNNER_SESSION_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of expired runner sessions maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS: num({\n    desc: 'How long consumed or expired ephemeral registration tokens are retained for audit and debugging before maintenance deletes them, in days. Active tokens that are neither consumed nor expired are never deleted. This window is independent of the runner-session retention windows.',\n    default: 7,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of consumed or expired ephemeral registration tokens maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  PROVISIONER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active provisioners from recent authenticated requests.',\n    default: 120,\n  }),\n  PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between last-seen writes for one provisioner token.',\n    default: 10,\n  }),\n  PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: bool({\n    desc: 'Whether runners_provider_runner_count_divergence includes template_key as a metric label. Use true or false. Defaults to false because template keys can create high-cardinality metric series. Set true only when template keys are bounded and stable.',\n    default: false,\n  }),\n});\n\nconst parsedRunnerReservedLabels = parseLabelList(config.RUNNER_RESERVED_LABELS);\nconst invalidRunnerReservedLabels = findInvalidLabels(parsedRunnerReservedLabels);\n\nif (invalidRunnerReservedLabels.length > 0) {\n  throw new Error(\n    `RUNNER_RESERVED_LABELS contains invalid runner label(s): ${invalidRunnerReservedLabels.join(', ')}`,\n  );\n}\n\nexport const runnerReservedLabels = parsedRunnerReservedLabels;\n\nif (\n  !Number.isInteger(config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS) ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS < 1 ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS >\n    EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS (${config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS}) must be a whole number of seconds between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS', config.RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS],\n  ['RUNNER_CONTROL_SESSION_TTL_SECONDS', config.RUNNER_CONTROL_SESSION_TTL_SECONDS],\n  ['RUNNER_ACTIVATION_TOKEN_TTL_SECONDS', config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS],\n] as const) {\n  if (\n    !Number.isInteger(value) ||\n    value < 1 ||\n    value > RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS\n  ) {\n    throw new Error(\n      `${name} (${value}) must be a whole number of seconds between 1 and ${RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    );\n  }\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS) ||\n  config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS (${config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS) ||\n  config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS < 0\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_INTERVAL_MS (${config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS}) must be a whole number >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.REGISTRATION_TOKEN_BATCH_MAX) ||\n  config.REGISTRATION_TOKEN_BATCH_MAX < 1 ||\n  config.REGISTRATION_TOKEN_BATCH_MAX > REGISTRATION_TOKEN_BATCH_HARD_MAX\n) {\n  throw new Error(\n    `REGISTRATION_TOKEN_BATCH_MAX (${config.REGISTRATION_TOKEN_BATCH_MAX}) must be a whole number between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS', config.PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS],\n  ['PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS', config.PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS],\n  ['EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS', config.EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS],\n  [\n    'EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS',\n    config.EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS,\n  ],\n  ['RUNNERS_RATE_LIMIT_TIMEOUT_MS', config.RUNNERS_RATE_LIMIT_TIMEOUT_MS],\n] as const) {\n  if (!Number.isInteger(value) || value < 1) {\n    throw new Error(`${name} (${value}) must be a whole number >= 1.`);\n  }\n}\n\nif (!Number.isInteger(config.RESERVATION_TTL_SECONDS) || config.RESERVATION_TTL_SECONDS < 1) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_TTL_MAX_SECONDS) ||\n  config.RESERVATION_TTL_MAX_SECONDS < 1 ||\n  config.RESERVATION_TTL_MAX_SECONDS > RESERVATION_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}) must be a whole number of seconds between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nif (config.RESERVATION_TTL_SECONDS > config.RESERVATION_TTL_MAX_SECONDS) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must not be greater than RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS) ||\n  config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS < 0\n) {\n  throw new Error(\n    `RESERVATION_LONG_POLL_MAX_WAIT_SECONDS (${config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS}) must be a whole number of seconds >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_INTERVAL_MS) ||\n  config.RESERVATION_POLL_INTERVAL_MS < 1\n) {\n  throw new Error(\n    `RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}) must be a whole number of milliseconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_MAX_INTERVAL_MS) ||\n  config.RESERVATION_POLL_MAX_INTERVAL_MS < config.RESERVATION_POLL_INTERVAL_MS\n) {\n  throw new Error(\n    `RESERVATION_POLL_MAX_INTERVAL_MS (${config.RESERVATION_POLL_MAX_INTERVAL_MS}) must be a whole number of milliseconds >= RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ACTIVE_WINDOW_SECONDS) ||\n  config.RUNNER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ACTIVE_WINDOW_SECONDS (${config.RUNNER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS) ||\n  config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS (${config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS) ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS < 1 ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS >= STUCK_JOB_THRESHOLD_SECONDS\n) {\n  throw new Error(\n    `RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS (${config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS}) must be a whole number of seconds >= 1 and < ${STUCK_JOB_THRESHOLD_SECONDS}.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS) ||\n  config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS (${config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT (${config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS) ||\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_MANUAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_MANUAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_MANUAL_RETENTION_DAYS (${config.RUNNER_SESSION_MANUAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS (${config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_GC_BATCH_SIZE) ||\n  config.RUNNER_SESSION_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_GC_BATCH_SIZE (${config.RUNNER_SESSION_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS) ||\n  config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS (${config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE) ||\n  config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE (${config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_ACTIVE_WINDOW_SECONDS) ||\n  config.PROVISIONER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_ACTIVE_WINDOW_SECONDS (${config.PROVISIONER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS) ||\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}).`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}).`,\n  );\n}\n"],"names":["RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS","bool","createConfig","num","str","findInvalidLabels","parseLabelList","STUCK_JOB_THRESHOLD_SECONDS","EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS","REGISTRATION_TOKEN_BATCH_HARD_MAX","RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS","RESERVATION_TTL_HARD_MAX_SECONDS","config","RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS","desc","default","RUNNER_CONTROL_SESSION_TTL_SECONDS","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS","RUNNER_ASSIGNMENT_POLL_INTERVAL_MS","RUNNER_RESERVED_LABELS","EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS","REGISTRATION_TOKEN_BATCH_MAX","PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS","PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS","EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS","EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS","RUNNERS_RATE_LIMIT_TIMEOUT_MS","RESERVATION_TTL_SECONDS","RESERVATION_TTL_MAX_SECONDS","RESERVATION_LONG_POLL_MAX_WAIT_SECONDS","RESERVATION_POLL_INTERVAL_MS","RESERVATION_POLL_MAX_INTERVAL_MS","RUNNER_ACTIVE_WINDOW_SECONDS","RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS","RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS","RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT","RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS","RUNNER_SESSION_MANUAL_RETENTION_DAYS","RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS","RUNNER_SESSION_GC_BATCH_SIZE","RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS","RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE","PROVISIONER_ACTIVE_WINDOW_SECONDS","PROVISIONER_LAST_SEEN_THROTTLE_SECONDS","PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED","parsedRunnerReservedLabels","invalidRunnerReservedLabels","length","Error","join","runnerReservedLabels","Number","isInteger","name","value"],"mappings":"AAAA,SAAQA,2CAA2C,QAAO,2BAA2B;AACrF,SAAQC,IAAI,EAAEC,YAAY,EAAEC,GAAG,EAAEC,GAAG,QAAO,kBAAkB;AAC7D,SAAQC,iBAAiB,EAAEC,cAAc,QAAO,yBAAyB;AACzE,SAAQC,2BAA2B,QAAO,8BAA8B;AAExE,MAAMC,oDAAoD;AAC1D,MAAMC,oCAAoC;AAC1C,MAAMC,kDAAkD;AACxD,MAAMC,mCAAmC;AAEzC,OAAO,MAAMC,SAASV,aAAa;IACjCW,oCAAoCV,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAC,oCAAoCb,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAE,qCAAqCd,IAAI;QACvCW,MAAM;QACNC,SAAS;IACX;IACAG,yCAAyCf,IAAI;QAC3CW,MAAM;QACNC,SAASf;IACX;IACAmB,oCAAoChB,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAK,wBAAwBhB,IAAI;QAC1BU,MAAM;QACNC,SAAS;IACX;IACAM,0CAA0ClB,IAAI;QAC5CW,MAAM,CAAC,oKAAoK,EAAEN,kDAAkD,CAAC,CAAC;QACjOO,SAAS;IACX;IACAO,8BAA8BnB,IAAI;QAChCW,MAAM,CAAC,iHAAiH,EAAEL,kCAAkC,CAAC,CAAC;QAC9JM,SAAS;IACX;IACAQ,0CAA0CpB,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAS,4CAA4CrB,IAAI;QAC9CW,MAAM;QACNC,SAAS;IACX;IACAU,4CAA4CtB,IAAI;QAC9CW,MAAM;QACNC,SAAS;IACX;IACAW,8CAA8CvB,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAY,+BAA+BxB,IAAI;QACjCW,MAAM;QACNC,SAAS;IACX;IACAa,yBAAyBzB,IAAI;QAC3BW,MAAM;QACNC,SAAS;IACX;IACAc,6BAA6B1B,IAAI;QAC/BW,MAAM,CAAC,uSAAuS,EAAEH,iCAAiC,CAAC,CAAC;QACnVI,SAAS;IACX;IACAe,wCAAwC3B,IAAI;QAC1CW,MAAM;QACNC,SAAS;IACX;IACAgB,8BAA8B5B,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACAiB,kCAAkC7B,IAAI;QACpCW,MAAM;QACNC,SAAS;IACX;IACAkB,8BAA8B9B,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACAmB,8CAA8C/B,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAoB,yCAAyChC,IAAI;QAC3CW,MAAM;QACNC,SAAS;IACX;IACAqB,0CAA0CjC,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAsB,mDAAmDlC,IAAI;QACrDW,MAAM;QACNC,SAAS;IACX;IACAuB,8CAA8CnC,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAwB,0CAA0CpC,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAyB,sCAAsCrC,IAAI;QACxCW,MAAM;QACNC,SAAS;IACX;IACA0B,yCAAyCtC,IAAI;QAC3CW,MAAM;QACNC,SAAS;IACX;IACA2B,8BAA8BvC,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACA4B,uCAAuCxC,IAAI;QACzCW,MAAM;QACNC,SAAS;IACX;IACA6B,sCAAsCzC,IAAI;QACxCW,MAAM;QACNC,SAAS;IACX;IACA8B,mCAAmC1C,IAAI;QACrCW,MAAM;QACNC,SAAS;IACX;IACA+B,wCAAwC3C,IAAI;QAC1CW,MAAM;QACNC,SAAS;IACX;IACAgC,gEAAgE9C,KAAK;QACnEa,MAAM;QACNC,SAAS;IACX;AACF,GAAG;AAEH,MAAMiC,6BAA6B1C,eAAeM,OAAOQ,sBAAsB;AAC/E,MAAM6B,8BAA8B5C,kBAAkB2C;AAEtD,IAAIC,4BAA4BC,MAAM,GAAG,GAAG;IAC1C,MAAM,IAAIC,MACR,CAAC,yDAAyD,EAAEF,4BAA4BG,IAAI,CAAC,OAAO;AAExG;AAEA,OAAO,MAAMC,uBAAuBL,2BAA2B;AAE/D,IACE,CAACM,OAAOC,SAAS,CAAC3C,OAAOS,wCAAwC,KACjET,OAAOS,wCAAwC,GAAG,KAClDT,OAAOS,wCAAwC,GAC7Cb,mDACF;IACA,MAAM,IAAI2C,MACR,CAAC,0CAA0C,EAAEvC,OAAOS,wCAAwC,CAAC,kDAAkD,EAAEb,kDAAkD,CAAC,CAAC;AAEzM;AAEA,KAAK,MAAM,CAACgD,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAAsC7C,OAAOC,kCAAkC;KAAC;IACjF;QAAC;QAAsCD,OAAOI,kCAAkC;KAAC;IACjF;QAAC;QAAuCJ,OAAOK,mCAAmC;KAAC;CACpF,CAAW;IACV,IACE,CAACqC,OAAOC,SAAS,CAACE,UAClBA,QAAQ,KACRA,QAAQ/C,iDACR;QACA,MAAM,IAAIyC,MACR,GAAGK,KAAK,EAAE,EAAEC,MAAM,kDAAkD,EAAE/C,gDAAgD,CAAC,CAAC;IAE5H;AACF;AAEA,IACE,CAAC4C,OAAOC,SAAS,CAAC3C,OAAOM,uCAAuC,KAChEN,OAAOM,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIiC,MACR,CAAC,yCAAyC,EAAEvC,OAAOM,uCAAuC,CAAC,8BAA8B,CAAC;AAE9H;AAEA,IACE,CAACoC,OAAOC,SAAS,CAAC3C,OAAOO,kCAAkC,KAC3DP,OAAOO,kCAAkC,GAAG,GAC5C;IACA,MAAM,IAAIgC,MACR,CAAC,oCAAoC,EAAEvC,OAAOO,kCAAkC,CAAC,8BAA8B,CAAC;AAEpH;AAEA,IACE,CAACmC,OAAOC,SAAS,CAAC3C,OAAOU,4BAA4B,KACrDV,OAAOU,4BAA4B,GAAG,KACtCV,OAAOU,4BAA4B,GAAGb,mCACtC;IACA,MAAM,IAAI0C,MACR,CAAC,8BAA8B,EAAEvC,OAAOU,4BAA4B,CAAC,uCAAuC,EAAEb,kCAAkC,CAAC,CAAC;AAEtJ;AAEA,KAAK,MAAM,CAAC+C,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAA4C7C,OAAOW,wCAAwC;KAAC;IAC7F;QAAC;QAA8CX,OAAOY,0CAA0C;KAAC;IACjG;QAAC;QAA8CZ,OAAOa,0CAA0C;KAAC;IACjG;QACE;QACAb,OAAOc,4CAA4C;KACpD;IACD;QAAC;QAAiCd,OAAOe,6BAA6B;KAAC;CACxE,CAAW;IACV,IAAI,CAAC2B,OAAOC,SAAS,CAACE,UAAUA,QAAQ,GAAG;QACzC,MAAM,IAAIN,MAAM,GAAGK,KAAK,EAAE,EAAEC,MAAM,8BAA8B,CAAC;IACnE;AACF;AAEA,IAAI,CAACH,OAAOC,SAAS,CAAC3C,OAAOgB,uBAAuB,KAAKhB,OAAOgB,uBAAuB,GAAG,GAAG;IAC3F,MAAM,IAAIuB,MACR,CAAC,yBAAyB,EAAEvC,OAAOgB,uBAAuB,CAAC,yCAAyC,CAAC;AAEzG;AAEA,IACE,CAAC0B,OAAOC,SAAS,CAAC3C,OAAOiB,2BAA2B,KACpDjB,OAAOiB,2BAA2B,GAAG,KACrCjB,OAAOiB,2BAA2B,GAAGlB,kCACrC;IACA,MAAM,IAAIwC,MACR,CAAC,6BAA6B,EAAEvC,OAAOiB,2BAA2B,CAAC,kDAAkD,EAAElB,iCAAiC,CAAC,CAAC;AAE9J;AAEA,IAAIC,OAAOgB,uBAAuB,GAAGhB,OAAOiB,2BAA2B,EAAE;IACvE,MAAM,IAAIsB,MACR,CAAC,yBAAyB,EAAEvC,OAAOgB,uBAAuB,CAAC,wDAAwD,EAAEhB,OAAOiB,2BAA2B,CAAC,EAAE,CAAC;AAE/J;AAEA,IACE,CAACyB,OAAOC,SAAS,CAAC3C,OAAOkB,sCAAsC,KAC/DlB,OAAOkB,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIqB,MACR,CAAC,wCAAwC,EAAEvC,OAAOkB,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACE,CAACwB,OAAOC,SAAS,CAAC3C,OAAOmB,4BAA4B,KACrDnB,OAAOmB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIoB,MACR,CAAC,8BAA8B,EAAEvC,OAAOmB,4BAA4B,CAAC,8CAA8C,CAAC;AAExH;AAEA,IACE,CAACuB,OAAOC,SAAS,CAAC3C,OAAOoB,gCAAgC,KACzDpB,OAAOoB,gCAAgC,GAAGpB,OAAOmB,4BAA4B,EAC7E;IACA,MAAM,IAAIoB,MACR,CAAC,kCAAkC,EAAEvC,OAAOoB,gCAAgC,CAAC,0EAA0E,EAAEpB,OAAOmB,4BAA4B,CAAC,EAAE,CAAC;AAEpM;AAEA,IACE,CAACuB,OAAOC,SAAS,CAAC3C,OAAOqB,4BAA4B,KACrDrB,OAAOqB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIkB,MACR,CAAC,8BAA8B,EAAEvC,OAAOqB,4BAA4B,CAAC,yCAAyC,CAAC;AAEnH;AAEA,IACE,CAACqB,OAAOC,SAAS,CAAC3C,OAAOsB,4CAA4C,KACrEtB,OAAOsB,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIiB,MACR,CAAC,8CAA8C,EAAEvC,OAAOsB,4CAA4C,CAAC,yCAAyC,CAAC;AAEnJ;AAEA,IACE,CAACoB,OAAOC,SAAS,CAAC3C,OAAOuB,uCAAuC,KAChEvB,OAAOuB,uCAAuC,GAAG,KACjDvB,OAAOuB,uCAAuC,IAAI5B,6BAClD;IACA,MAAM,IAAI4C,MACR,CAAC,yCAAyC,EAAEvC,OAAOuB,uCAAuC,CAAC,+CAA+C,EAAE5B,4BAA4B,CAAC,CAAC;AAE9K;AAEA,IACE,CAAC+C,OAAOC,SAAS,CAAC3C,OAAOwB,wCAAwC,KACjExB,OAAOwB,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIe,MACR,CAAC,0CAA0C,EAAEvC,OAAOwB,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACkB,OAAOC,SAAS,CAAC3C,OAAOyB,iDAAiD,KAC1EzB,OAAOyB,iDAAiD,GAAG,GAC3D;IACA,MAAM,IAAIc,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,yCAAyC,CAAC;AAE7J;AAEA,IACE,CAACiB,OAAOC,SAAS,CAAC3C,OAAO0B,4CAA4C,KACrE1B,OAAO0B,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIa,MACR,CAAC,8CAA8C,EAAEvC,OAAO0B,4CAA4C,CAAC,8BAA8B,CAAC;AAExI;AAEA,IACE,CAACgB,OAAOC,SAAS,CAAC3C,OAAO2B,wCAAwC,KACjE3B,OAAO2B,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIY,MACR,CAAC,0CAA0C,EAAEvC,OAAO2B,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACe,OAAOC,SAAS,CAAC3C,OAAO4B,oCAAoC,KAC7D5B,OAAO4B,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIW,MACR,CAAC,sCAAsC,EAAEvC,OAAO4B,oCAAoC,CAAC,sCAAsC,CAAC;AAEhI;AAEA,IACE,CAACc,OAAOC,SAAS,CAAC3C,OAAO6B,uCAAuC,KAChE7B,OAAO6B,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIU,MACR,CAAC,yCAAyC,EAAEvC,OAAO6B,uCAAuC,CAAC,sCAAsC,CAAC;AAEtI;AAEA,IACE,CAACa,OAAOC,SAAS,CAAC3C,OAAO8B,4BAA4B,KACrD9B,OAAO8B,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIS,MACR,CAAC,8BAA8B,EAAEvC,OAAO8B,4BAA4B,CAAC,8BAA8B,CAAC;AAExG;AAEA,IACE,CAACY,OAAOC,SAAS,CAAC3C,OAAO+B,qCAAqC,KAC9D/B,OAAO+B,qCAAqC,GAAG,GAC/C;IACA,MAAM,IAAIQ,MACR,CAAC,uCAAuC,EAAEvC,OAAO+B,qCAAqC,CAAC,sCAAsC,CAAC;AAElI;AAEA,IACE,CAACW,OAAOC,SAAS,CAAC3C,OAAOgC,oCAAoC,KAC7DhC,OAAOgC,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIO,MACR,CAAC,sCAAsC,EAAEvC,OAAOgC,oCAAoC,CAAC,8BAA8B,CAAC;AAExH;AAEA,IACE,CAACU,OAAOC,SAAS,CAAC3C,OAAOiC,iCAAiC,KAC1DjC,OAAOiC,iCAAiC,GAAG,GAC3C;IACA,MAAM,IAAIM,MACR,CAAC,mCAAmC,EAAEvC,OAAOiC,iCAAiC,CAAC,yCAAyC,CAAC;AAE7H;AAEA,IACE,CAACS,OAAOC,SAAS,CAAC3C,OAAOkC,sCAAsC,KAC/DlC,OAAOkC,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIK,MACR,CAAC,wCAAwC,EAAEvC,OAAOkC,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACElC,OAAOyB,iDAAiD,IACxDzB,OAAOkC,sCAAsC,EAC7C;IACA,MAAM,IAAIK,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,+DAA+D,EAAEzB,OAAOkC,sCAAsC,CAAC,EAAE,CAAC;AAErO;AAEA,IACElC,OAAOyB,iDAAiD,IACxDzB,OAAO2B,wCAAwC,EAC/C;IACA,MAAM,IAAIY,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,iEAAiE,EAAEzB,OAAO2B,wCAAwC,CAAC,EAAE,CAAC;AAEzO"}

package/dist/core/errors.d.ts

@@ -16,6 +16,10 @@ export declare class ProvisionerAdminIdempotencyReplayUnavailableError extends E
 export declare class EmptyRunnerLabelsError extends Error {
     constructor();
 }
+export declare class RunnerLabelsReservedError extends Error {
+    readonly labels: string[];
+    constructor(labels: string[]);
+}
 export declare class EmptyRequiredLabelsError extends Error {
     constructor();
 }

package/dist/core/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,cAAc,EAAE,MAAM;CAInC;AAED,qBAAa,oCAAqC,SAAQ,KAAK;gBACjD,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,wCAAyC,SAAQ,KAAK;;CAKlE;AAED,qBAAa,iDAAkD,SAAQ,KAAK;;CAK3E;AAED,qBAAa,sBAAuB,SAAQ,KAAK;;CAKhD;AAED,qBAAa,wBAAyB,SAAQ,KAAK;;CAKlD;AAED,qBAAa,8BAA+B,SAAQ,KAAK;aAC3B,gBAAgB,EAAE,MAAM;gBAAxB,gBAAgB,EAAE,MAAM;CAIrD;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAC1B,gBAAgB,EAAE,MAAM;gBAAxB,gBAAgB,EAAE,MAAM;CAIrD;AAED,qBAAa,uCAAwC,SAAQ,KAAK;aAE9C,gBAAgB,EAAE,MAAM;aACxB,WAAW,EAAE,MAAM;gBADnB,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM;CAOtC;AAED,qBAAa,2CAA4C,SAAQ,KAAK;aAElD,WAAW,EAAE,MAAM;aACnB,aAAa,EAAE,MAAM;aACrB,gBAAgB,EAAE,MAAM;gBAFxB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,MAAM;CAO3C;AAED,qBAAa,wBAAyB,SAAQ,KAAK;aACrB,aAAa,EAAE,MAAM;gBAArB,aAAa,EAAE,MAAM;CAIlD;AAED,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,aAAa,EAAE,MAAM;gBAArB,aAAa,EAAE,MAAM;CAIlD;AAED,qBAAa,gCAAiC,SAAQ,KAAK;aAC7B,gBAAgB,EAAE,MAAM;gBAAxB,gBAAgB,EAAE,MAAM;CAIrD;AACD,qBAAa,kCAAmC,SAAQ,KAAK;aAC/B,gBAAgB,EAAE,MAAM;gBAAxB,gBAAgB,EAAE,MAAM;CAIrD;AACD,qBAAa,+BAAgC,SAAQ,KAAK;aAC5B,aAAa,EAAE,MAAM;gBAArB,aAAa,EAAE,MAAM;CAIlD;AAED,qBAAa,mCAAoC,SAAQ,KAAK;aAE1C,SAAS,EAAE,MAAM;aACjB,GAAG,EAAE,MAAM;gBADX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM;CAO9B;AAED,qBAAa,6CAA8C,SAAQ,KAAK;aAEpD,SAAS,EAAE,MAAM;aACjB,gBAAgB,EAAE,MAAM;aACxB,aAAa,EAAE,MAAM;gBAFrB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,aAAa,GAAE,MAAU;CAO5C;AAED,qBAAa,2CAA4C,SAAQ,KAAK;aACxC,iBAAiB,EAAE,MAAM,EAAE;gBAA3B,iBAAiB,EAAE,MAAM,EAAE;CAMxD;AAED,qBAAa,2BAA4B,SAAQ,KAAK;aACxB,eAAe,EAAE,MAAM;gBAAvB,eAAe,EAAE,MAAM;CAIpD"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,YAAY,cAAc,EAAE,MAAM,EAGjC;CACF;AAED,qBAAa,oCAAqC,SAAQ,KAAK;IAC7D,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IACtD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,qBAAa,wCAAyC,SAAQ,KAAK;IACjE,cAGC;CACF;AAED,qBAAa,iDAAkD,SAAQ,KAAK;IAC1E,cAGC;CACF;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,cAGC;CACF;AAED,qBAAa,yBAA0B,SAAQ,KAAK;aACtB,MAAM,EAAE,MAAM,EAAE;IAA5C,YAA4B,MAAM,EAAE,MAAM,EAAE,EAK3C;CACF;AAED,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,cAGC;CACF;AAED,qBAAa,8BAA+B,SAAQ,KAAK;aAC3B,gBAAgB,EAAE,MAAM;IAApD,YAA4B,gBAAgB,EAAE,MAAM,EAGnD;CACF;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAC1B,gBAAgB,EAAE,MAAM;IAApD,YAA4B,gBAAgB,EAAE,MAAM,EAGnD;CACF;AAED,qBAAa,uCAAwC,SAAQ,KAAK;aAE9C,gBAAgB,EAAE,MAAM;aACxB,WAAW,EAAE,MAAM;IAFrC,YACkB,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM,EAMpC;CACF;AAED,qBAAa,2CAA4C,SAAQ,KAAK;aAElD,WAAW,EAAE,MAAM;aACnB,aAAa,EAAE,MAAM;aACrB,gBAAgB,EAAE,MAAM;IAH1C,YACkB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,MAAM,EAMzC;CACF;AAED,qBAAa,wBAAyB,SAAQ,KAAK;aACrB,aAAa,EAAE,MAAM;IAAjD,YAA4B,aAAa,EAAE,MAAM,EAGhD;CACF;AAED,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,aAAa,EAAE,MAAM;IAAjD,YAA4B,aAAa,EAAE,MAAM,EAGhD;CACF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;aAC7B,gBAAgB,EAAE,MAAM;IAApD,YAA4B,gBAAgB,EAAE,MAAM,EAGnD;CACF;AACD,qBAAa,kCAAmC,SAAQ,KAAK;aAC/B,gBAAgB,EAAE,MAAM;IAApD,YAA4B,gBAAgB,EAAE,MAAM,EAGnD;CACF;AACD,qBAAa,+BAAgC,SAAQ,KAAK;aAC5B,aAAa,EAAE,MAAM;IAAjD,YAA4B,aAAa,EAAE,MAAM,EAGhD;CACF;AAED,qBAAa,mCAAoC,SAAQ,KAAK;aAE1C,SAAS,EAAE,MAAM;aACjB,GAAG,EAAE,MAAM;IAF7B,YACkB,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EAM5B;CACF;AAED,qBAAa,6CAA8C,SAAQ,KAAK;aAEpD,SAAS,EAAE,MAAM;aACjB,gBAAgB,EAAE,MAAM;aACxB,aAAa,EAAE,MAAM;IAHvC,YACkB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,aAAa,GAAE,MAAU,EAM1C;CACF;AAED,qBAAa,2CAA4C,SAAQ,KAAK;aACxC,iBAAiB,EAAE,MAAM,EAAE;IAAvD,YAA4B,iBAAiB,EAAE,MAAM,EAAE,EAKtD;CACF;AAED,qBAAa,2BAA4B,SAAQ,KAAK;aACxB,eAAe,EAAE,MAAM;IAAnD,YAA4B,eAAe,EAAE,MAAM,EAGlD;CACF"}

package/dist/core/errors.js

@@ -34,6 +34,12 @@ export class EmptyRunnerLabelsError extends Error {
         this.name = 'EmptyRunnerLabelsError';
     }
 }
+export class RunnerLabelsReservedError extends Error {
+    constructor(labels){
+        super(`All supplied runner labels are reserved for installation-scope provisioners: ${labels.join(', ')}`), this.labels = labels;
+        this.name = 'RunnerLabelsReservedError';
+    }
+}
 export class EmptyRequiredLabelsError extends Error {
     constructor(){
         super('Required labels cannot be empty');

package/dist/core/errors.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["export class RunningJobExecutionNotFoundError extends Error {\n  constructor(jobExecutionId: string) {\n    super(`Running job execution not found: ${jobExecutionId}`);\n    this.name = 'RunningJobExecutionNotFoundError';\n  }\n}\n\nexport class ManualRegistrationTokenNotFoundError extends Error {\n  constructor(tokenId: string) {\n    super(`Manual registration token not found: ${tokenId}`);\n    this.name = 'ManualRegistrationTokenNotFoundError';\n  }\n}\n\nexport class ProvisionerTokenNotFoundError extends Error {\n  constructor(tokenId: string) {\n    super(`Provisioner token not found: ${tokenId}`);\n    this.name = 'ProvisionerTokenNotFoundError';\n  }\n}\n\nexport class ProvisionerAdminIdempotencyKeyReuseError extends Error {\n  constructor() {\n    super('Idempotency-Key was already used for a different provisioner token command');\n    this.name = 'ProvisionerAdminIdempotencyKeyReuseError';\n  }\n}\n\nexport class ProvisionerAdminIdempotencyReplayUnavailableError extends Error {\n  constructor() {\n    super('Idempotency-Key replay cannot reproduce the original provisioner token');\n    this.name = 'ProvisionerAdminIdempotencyReplayUnavailableError';\n  }\n}\n\nexport class EmptyRunnerLabelsError extends Error {\n  constructor() {\n    super('Runner labels cannot be empty');\n    this.name = 'EmptyRunnerLabelsError';\n  }\n}\n\nexport class EmptyRequiredLabelsError extends Error {\n  constructor() {\n    super('Required labels cannot be empty');\n    this.name = 'EmptyRequiredLabelsError';\n  }\n}\n\nexport class RegistrationTokenConsumedError extends Error {\n  constructor(public readonly ephemeralTokenId: string) {\n    super(`Ephemeral registration token has already been consumed: ${ephemeralTokenId}`);\n    this.name = 'RegistrationTokenConsumedError';\n  }\n}\n\nexport class RegistrationTokenExpiredError extends Error {\n  constructor(public readonly ephemeralTokenId: string) {\n    super(`Ephemeral registration token has expired: ${ephemeralTokenId}`);\n    this.name = 'RegistrationTokenExpiredError';\n  }\n}\n\nexport class RegistrationTokenWorkspaceMismatchError extends Error {\n  constructor(\n    public readonly ephemeralTokenId: string,\n    public readonly workspaceId: string,\n  ) {\n    super(\n      `Ephemeral registration token ${ephemeralTokenId} does not belong to workspace ${workspaceId}`,\n    );\n    this.name = 'RegistrationTokenWorkspaceMismatchError';\n  }\n}\n\nexport class ActiveEphemeralRegistrationTokenExistsError extends Error {\n  constructor(\n    public readonly workspaceId: string,\n    public readonly provisionerId: string,\n    public readonly providerRunnerId: string,\n  ) {\n    super(\n      `Active ephemeral registration token already exists for provisioned runner ${providerRunnerId} in workspace ${workspaceId}`,\n    );\n    this.name = 'ActiveEphemeralRegistrationTokenExistsError';\n  }\n}\n\nexport class ReservationNotFoundError extends Error {\n  constructor(public readonly reservationId: string) {\n    super(`Reservation not found: ${reservationId}`);\n    this.name = 'ReservationNotFoundError';\n  }\n}\n\nexport class ReservationExpiredError extends Error {\n  constructor(public readonly reservationId: string) {\n    super(`Reservation has expired: ${reservationId}`);\n    this.name = 'ReservationExpiredError';\n  }\n}\n\nexport class RunnerInstanceNotAssignableError extends Error {\n  constructor(public readonly runnerInstanceId: string) {\n    super(`Runner instance cannot be assigned: ${runnerInstanceId}`);\n    this.name = 'RunnerInstanceNotAssignableError';\n  }\n}\nexport class RunnerInstanceAlreadyAssignedError extends Error {\n  constructor(public readonly runnerInstanceId: string) {\n    super(`Runner instance is already assigned: ${runnerInstanceId}`);\n    this.name = 'RunnerInstanceAlreadyAssignedError';\n  }\n}\nexport class ReservationAlreadyAssignedError extends Error {\n  constructor(public readonly reservationId: string) {\n    super(`Reservation is already assigned: ${reservationId}`);\n    this.name = 'ReservationAlreadyAssignedError';\n  }\n}\n\nexport class RegistrationTokenBatchTooLargeError extends Error {\n  constructor(\n    public readonly requested: number,\n    public readonly max: number,\n  ) {\n    super(\n      `Registration token batch requested ${requested} provisioned runners, exceeding max ${max}`,\n    );\n    this.name = 'RegistrationTokenBatchTooLargeError';\n  }\n}\n\nexport class RegistrationTokenBatchExceedsReservationError extends Error {\n  constructor(\n    public readonly requested: number,\n    public readonly reservationCount: number,\n    public readonly alreadyMinted: number = 0,\n  ) {\n    super(\n      `Registration token batch requested ${requested} provisioned runners with ${alreadyMinted} already minted, exceeding reservation count ${reservationCount}`,\n    );\n    this.name = 'RegistrationTokenBatchExceedsReservationError';\n  }\n}\n\nexport class ActiveEphemeralRegistrationTokensExistError extends Error {\n  constructor(public readonly providerRunnerIds: string[]) {\n    super(\n      `Active ephemeral registration tokens already exist for provisioned runners: ${providerRunnerIds.join(', ')}`,\n    );\n    this.name = 'ActiveEphemeralRegistrationTokensExistError';\n  }\n}\n\nexport class RunnerSessionExhaustedError extends Error {\n  constructor(public readonly runnerSessionId: string) {\n    super(`Runner session claim limit exhausted: ${runnerSessionId}`);\n    this.name = 'RunnerSessionExhaustedError';\n  }\n}\n"],"names":["RunningJobExecutionNotFoundError","Error","jobExecutionId","name","ManualRegistrationTokenNotFoundError","tokenId","ProvisionerTokenNotFoundError","ProvisionerAdminIdempotencyKeyReuseError","ProvisionerAdminIdempotencyReplayUnavailableError","EmptyRunnerLabelsError","EmptyRequiredLabelsError","RegistrationTokenConsumedError","ephemeralTokenId","RegistrationTokenExpiredError","RegistrationTokenWorkspaceMismatchError","workspaceId","ActiveEphemeralRegistrationTokenExistsError","provisionerId","providerRunnerId","ReservationNotFoundError","reservationId","ReservationExpiredError","RunnerInstanceNotAssignableError","runnerInstanceId","RunnerInstanceAlreadyAssignedError","ReservationAlreadyAssignedError","RegistrationTokenBatchTooLargeError","requested","max","RegistrationTokenBatchExceedsReservationError","reservationCount","alreadyMinted","ActiveEphemeralRegistrationTokensExistError","providerRunnerIds","join","RunnerSessionExhaustedError","runnerSessionId"],"mappings":"AAAA,OAAO,MAAMA,yCAAyCC;IACpD,YAAYC,cAAsB,CAAE;QAClC,KAAK,CAAC,CAAC,iCAAiC,EAAEA,gBAAgB;QAC1D,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,6CAA6CH;IACxD,YAAYI,OAAe,CAAE;QAC3B,KAAK,CAAC,CAAC,qCAAqC,EAAEA,SAAS;QACvD,IAAI,CAACF,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMG,sCAAsCL;IACjD,YAAYI,OAAe,CAAE;QAC3B,KAAK,CAAC,CAAC,6BAA6B,EAAEA,SAAS;QAC/C,IAAI,CAACF,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMI,iDAAiDN;IAC5D,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMK,0DAA0DP;IACrE,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMM,+BAA+BR;IAC1C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMO,iCAAiCT;IAC5C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMQ,uCAAuCV;IAClD,YAAY,AAAgBW,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,wDAAwD,EAAEA,kBAAkB,QADzDA,mBAAAA;QAE1B,IAAI,CAACT,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMU,sCAAsCZ;IACjD,YAAY,AAAgBW,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,0CAA0C,EAAEA,kBAAkB,QAD3CA,mBAAAA;QAE1B,IAAI,CAACT,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMW,gDAAgDb;IAC3D,YACE,AAAgBW,gBAAwB,EACxC,AAAgBG,WAAmB,CACnC;QACA,KAAK,CACH,CAAC,6BAA6B,EAAEH,iBAAiB,8BAA8B,EAAEG,aAAa,QAJhFH,mBAAAA,uBACAG,cAAAA;QAKhB,IAAI,CAACZ,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMa,oDAAoDf;IAC/D,YACE,AAAgBc,WAAmB,EACnC,AAAgBE,aAAqB,EACrC,AAAgBC,gBAAwB,CACxC;QACA,KAAK,CACH,CAAC,0EAA0E,EAAEA,iBAAiB,cAAc,EAAEH,aAAa,QAL7GA,cAAAA,kBACAE,gBAAAA,oBACAC,mBAAAA;QAKhB,IAAI,CAACf,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMgB,iCAAiClB;IAC5C,YAAY,AAAgBmB,aAAqB,CAAE;QACjD,KAAK,CAAC,CAAC,uBAAuB,EAAEA,eAAe,QADrBA,gBAAAA;QAE1B,IAAI,CAACjB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMkB,gCAAgCpB;IAC3C,YAAY,AAAgBmB,aAAqB,CAAE;QACjD,KAAK,CAAC,CAAC,yBAAyB,EAAEA,eAAe,QADvBA,gBAAAA;QAE1B,IAAI,CAACjB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMmB,yCAAyCrB;IACpD,YAAY,AAAgBsB,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,oCAAoC,EAAEA,kBAAkB,QADrCA,mBAAAA;QAE1B,IAAI,CAACpB,IAAI,GAAG;IACd;AACF;AACA,OAAO,MAAMqB,2CAA2CvB;IACtD,YAAY,AAAgBsB,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,qCAAqC,EAAEA,kBAAkB,QADtCA,mBAAAA;QAE1B,IAAI,CAACpB,IAAI,GAAG;IACd;AACF;AACA,OAAO,MAAMsB,wCAAwCxB;IACnD,YAAY,AAAgBmB,aAAqB,CAAE;QACjD,KAAK,CAAC,CAAC,iCAAiC,EAAEA,eAAe,QAD/BA,gBAAAA;QAE1B,IAAI,CAACjB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMuB,4CAA4CzB;IACvD,YACE,AAAgB0B,SAAiB,EACjC,AAAgBC,GAAW,CAC3B;QACA,KAAK,CACH,CAAC,mCAAmC,EAAED,UAAU,oCAAoC,EAAEC,KAAK,QAJ7ED,YAAAA,gBACAC,MAAAA;QAKhB,IAAI,CAACzB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAM0B,sDAAsD5B;IACjE,YACE,AAAgB0B,SAAiB,EACjC,AAAgBG,gBAAwB,EACxC,AAAgBC,gBAAwB,CAAC,CACzC;QACA,KAAK,CACH,CAAC,mCAAmC,EAAEJ,UAAU,0BAA0B,EAAEI,cAAc,6CAA6C,EAAED,kBAAkB,QAL7IH,YAAAA,gBACAG,mBAAAA,uBACAC,gBAAAA;QAKhB,IAAI,CAAC5B,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAM6B,oDAAoD/B;IAC/D,YAAY,AAAgBgC,iBAA2B,CAAE;QACvD,KAAK,CACH,CAAC,4EAA4E,EAAEA,kBAAkBC,IAAI,CAAC,OAAO,QAFrFD,oBAAAA;QAI1B,IAAI,CAAC9B,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMgC,oCAAoClC;IAC/C,YAAY,AAAgBmC,eAAuB,CAAE;QACnD,KAAK,CAAC,CAAC,sCAAsC,EAAEA,iBAAiB,QADtCA,kBAAAA;QAE1B,IAAI,CAACjC,IAAI,GAAG;IACd;AACF"}
+{"version":3,"sources":["../../src/core/errors.ts"],"sourcesContent":["export class RunningJobExecutionNotFoundError extends Error {\n  constructor(jobExecutionId: string) {\n    super(`Running job execution not found: ${jobExecutionId}`);\n    this.name = 'RunningJobExecutionNotFoundError';\n  }\n}\n\nexport class ManualRegistrationTokenNotFoundError extends Error {\n  constructor(tokenId: string) {\n    super(`Manual registration token not found: ${tokenId}`);\n    this.name = 'ManualRegistrationTokenNotFoundError';\n  }\n}\n\nexport class ProvisionerTokenNotFoundError extends Error {\n  constructor(tokenId: string) {\n    super(`Provisioner token not found: ${tokenId}`);\n    this.name = 'ProvisionerTokenNotFoundError';\n  }\n}\n\nexport class ProvisionerAdminIdempotencyKeyReuseError extends Error {\n  constructor() {\n    super('Idempotency-Key was already used for a different provisioner token command');\n    this.name = 'ProvisionerAdminIdempotencyKeyReuseError';\n  }\n}\n\nexport class ProvisionerAdminIdempotencyReplayUnavailableError extends Error {\n  constructor() {\n    super('Idempotency-Key replay cannot reproduce the original provisioner token');\n    this.name = 'ProvisionerAdminIdempotencyReplayUnavailableError';\n  }\n}\n\nexport class EmptyRunnerLabelsError extends Error {\n  constructor() {\n    super('Runner labels cannot be empty');\n    this.name = 'EmptyRunnerLabelsError';\n  }\n}\n\nexport class RunnerLabelsReservedError extends Error {\n  constructor(public readonly labels: string[]) {\n    super(\n      `All supplied runner labels are reserved for installation-scope provisioners: ${labels.join(', ')}`,\n    );\n    this.name = 'RunnerLabelsReservedError';\n  }\n}\n\nexport class EmptyRequiredLabelsError extends Error {\n  constructor() {\n    super('Required labels cannot be empty');\n    this.name = 'EmptyRequiredLabelsError';\n  }\n}\n\nexport class RegistrationTokenConsumedError extends Error {\n  constructor(public readonly ephemeralTokenId: string) {\n    super(`Ephemeral registration token has already been consumed: ${ephemeralTokenId}`);\n    this.name = 'RegistrationTokenConsumedError';\n  }\n}\n\nexport class RegistrationTokenExpiredError extends Error {\n  constructor(public readonly ephemeralTokenId: string) {\n    super(`Ephemeral registration token has expired: ${ephemeralTokenId}`);\n    this.name = 'RegistrationTokenExpiredError';\n  }\n}\n\nexport class RegistrationTokenWorkspaceMismatchError extends Error {\n  constructor(\n    public readonly ephemeralTokenId: string,\n    public readonly workspaceId: string,\n  ) {\n    super(\n      `Ephemeral registration token ${ephemeralTokenId} does not belong to workspace ${workspaceId}`,\n    );\n    this.name = 'RegistrationTokenWorkspaceMismatchError';\n  }\n}\n\nexport class ActiveEphemeralRegistrationTokenExistsError extends Error {\n  constructor(\n    public readonly workspaceId: string,\n    public readonly provisionerId: string,\n    public readonly providerRunnerId: string,\n  ) {\n    super(\n      `Active ephemeral registration token already exists for provisioned runner ${providerRunnerId} in workspace ${workspaceId}`,\n    );\n    this.name = 'ActiveEphemeralRegistrationTokenExistsError';\n  }\n}\n\nexport class ReservationNotFoundError extends Error {\n  constructor(public readonly reservationId: string) {\n    super(`Reservation not found: ${reservationId}`);\n    this.name = 'ReservationNotFoundError';\n  }\n}\n\nexport class ReservationExpiredError extends Error {\n  constructor(public readonly reservationId: string) {\n    super(`Reservation has expired: ${reservationId}`);\n    this.name = 'ReservationExpiredError';\n  }\n}\n\nexport class RunnerInstanceNotAssignableError extends Error {\n  constructor(public readonly runnerInstanceId: string) {\n    super(`Runner instance cannot be assigned: ${runnerInstanceId}`);\n    this.name = 'RunnerInstanceNotAssignableError';\n  }\n}\nexport class RunnerInstanceAlreadyAssignedError extends Error {\n  constructor(public readonly runnerInstanceId: string) {\n    super(`Runner instance is already assigned: ${runnerInstanceId}`);\n    this.name = 'RunnerInstanceAlreadyAssignedError';\n  }\n}\nexport class ReservationAlreadyAssignedError extends Error {\n  constructor(public readonly reservationId: string) {\n    super(`Reservation is already assigned: ${reservationId}`);\n    this.name = 'ReservationAlreadyAssignedError';\n  }\n}\n\nexport class RegistrationTokenBatchTooLargeError extends Error {\n  constructor(\n    public readonly requested: number,\n    public readonly max: number,\n  ) {\n    super(\n      `Registration token batch requested ${requested} provisioned runners, exceeding max ${max}`,\n    );\n    this.name = 'RegistrationTokenBatchTooLargeError';\n  }\n}\n\nexport class RegistrationTokenBatchExceedsReservationError extends Error {\n  constructor(\n    public readonly requested: number,\n    public readonly reservationCount: number,\n    public readonly alreadyMinted: number = 0,\n  ) {\n    super(\n      `Registration token batch requested ${requested} provisioned runners with ${alreadyMinted} already minted, exceeding reservation count ${reservationCount}`,\n    );\n    this.name = 'RegistrationTokenBatchExceedsReservationError';\n  }\n}\n\nexport class ActiveEphemeralRegistrationTokensExistError extends Error {\n  constructor(public readonly providerRunnerIds: string[]) {\n    super(\n      `Active ephemeral registration tokens already exist for provisioned runners: ${providerRunnerIds.join(', ')}`,\n    );\n    this.name = 'ActiveEphemeralRegistrationTokensExistError';\n  }\n}\n\nexport class RunnerSessionExhaustedError extends Error {\n  constructor(public readonly runnerSessionId: string) {\n    super(`Runner session claim limit exhausted: ${runnerSessionId}`);\n    this.name = 'RunnerSessionExhaustedError';\n  }\n}\n"],"names":["RunningJobExecutionNotFoundError","Error","jobExecutionId","name","ManualRegistrationTokenNotFoundError","tokenId","ProvisionerTokenNotFoundError","ProvisionerAdminIdempotencyKeyReuseError","ProvisionerAdminIdempotencyReplayUnavailableError","EmptyRunnerLabelsError","RunnerLabelsReservedError","labels","join","EmptyRequiredLabelsError","RegistrationTokenConsumedError","ephemeralTokenId","RegistrationTokenExpiredError","RegistrationTokenWorkspaceMismatchError","workspaceId","ActiveEphemeralRegistrationTokenExistsError","provisionerId","providerRunnerId","ReservationNotFoundError","reservationId","ReservationExpiredError","RunnerInstanceNotAssignableError","runnerInstanceId","RunnerInstanceAlreadyAssignedError","ReservationAlreadyAssignedError","RegistrationTokenBatchTooLargeError","requested","max","RegistrationTokenBatchExceedsReservationError","reservationCount","alreadyMinted","ActiveEphemeralRegistrationTokensExistError","providerRunnerIds","RunnerSessionExhaustedError","runnerSessionId"],"mappings":"AAAA,OAAO,MAAMA,yCAAyCC;IACpD,YAAYC,cAAsB,CAAE;QAClC,KAAK,CAAC,CAAC,iCAAiC,EAAEA,gBAAgB;QAC1D,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,6CAA6CH;IACxD,YAAYI,OAAe,CAAE;QAC3B,KAAK,CAAC,CAAC,qCAAqC,EAAEA,SAAS;QACvD,IAAI,CAACF,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMG,sCAAsCL;IACjD,YAAYI,OAAe,CAAE;QAC3B,KAAK,CAAC,CAAC,6BAA6B,EAAEA,SAAS;QAC/C,IAAI,CAACF,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMI,iDAAiDN;IAC5D,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMK,0DAA0DP;IACrE,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMM,+BAA+BR;IAC1C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMO,kCAAkCT;IAC7C,YAAY,AAAgBU,MAAgB,CAAE;QAC5C,KAAK,CACH,CAAC,6EAA6E,EAAEA,OAAOC,IAAI,CAAC,OAAO,QAF3ED,SAAAA;QAI1B,IAAI,CAACR,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMU,iCAAiCZ;IAC5C,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACE,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMW,uCAAuCb;IAClD,YAAY,AAAgBc,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,wDAAwD,EAAEA,kBAAkB,QADzDA,mBAAAA;QAE1B,IAAI,CAACZ,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMa,sCAAsCf;IACjD,YAAY,AAAgBc,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,0CAA0C,EAAEA,kBAAkB,QAD3CA,mBAAAA;QAE1B,IAAI,CAACZ,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMc,gDAAgDhB;IAC3D,YACE,AAAgBc,gBAAwB,EACxC,AAAgBG,WAAmB,CACnC;QACA,KAAK,CACH,CAAC,6BAA6B,EAAEH,iBAAiB,8BAA8B,EAAEG,aAAa,QAJhFH,mBAAAA,uBACAG,cAAAA;QAKhB,IAAI,CAACf,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMgB,oDAAoDlB;IAC/D,YACE,AAAgBiB,WAAmB,EACnC,AAAgBE,aAAqB,EACrC,AAAgBC,gBAAwB,CACxC;QACA,KAAK,CACH,CAAC,0EAA0E,EAAEA,iBAAiB,cAAc,EAAEH,aAAa,QAL7GA,cAAAA,kBACAE,gBAAAA,oBACAC,mBAAAA;QAKhB,IAAI,CAAClB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMmB,iCAAiCrB;IAC5C,YAAY,AAAgBsB,aAAqB,CAAE;QACjD,KAAK,CAAC,CAAC,uBAAuB,EAAEA,eAAe,QADrBA,gBAAAA;QAE1B,IAAI,CAACpB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMqB,gCAAgCvB;IAC3C,YAAY,AAAgBsB,aAAqB,CAAE;QACjD,KAAK,CAAC,CAAC,yBAAyB,EAAEA,eAAe,QADvBA,gBAAAA;QAE1B,IAAI,CAACpB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMsB,yCAAyCxB;IACpD,YAAY,AAAgByB,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,oCAAoC,EAAEA,kBAAkB,QADrCA,mBAAAA;QAE1B,IAAI,CAACvB,IAAI,GAAG;IACd;AACF;AACA,OAAO,MAAMwB,2CAA2C1B;IACtD,YAAY,AAAgByB,gBAAwB,CAAE;QACpD,KAAK,CAAC,CAAC,qCAAqC,EAAEA,kBAAkB,QADtCA,mBAAAA;QAE1B,IAAI,CAACvB,IAAI,GAAG;IACd;AACF;AACA,OAAO,MAAMyB,wCAAwC3B;IACnD,YAAY,AAAgBsB,aAAqB,CAAE;QACjD,KAAK,CAAC,CAAC,iCAAiC,EAAEA,eAAe,QAD/BA,gBAAAA;QAE1B,IAAI,CAACpB,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAM0B,4CAA4C5B;IACvD,YACE,AAAgB6B,SAAiB,EACjC,AAAgBC,GAAW,CAC3B;QACA,KAAK,CACH,CAAC,mCAAmC,EAAED,UAAU,oCAAoC,EAAEC,KAAK,QAJ7ED,YAAAA,gBACAC,MAAAA;QAKhB,IAAI,CAAC5B,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAM6B,sDAAsD/B;IACjE,YACE,AAAgB6B,SAAiB,EACjC,AAAgBG,gBAAwB,EACxC,AAAgBC,gBAAwB,CAAC,CACzC;QACA,KAAK,CACH,CAAC,mCAAmC,EAAEJ,UAAU,0BAA0B,EAAEI,cAAc,6CAA6C,EAAED,kBAAkB,QAL7IH,YAAAA,gBACAG,mBAAAA,uBACAC,gBAAAA;QAKhB,IAAI,CAAC/B,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMgC,oDAAoDlC;IAC/D,YAAY,AAAgBmC,iBAA2B,CAAE;QACvD,KAAK,CACH,CAAC,4EAA4E,EAAEA,kBAAkBxB,IAAI,CAAC,OAAO,QAFrFwB,oBAAAA;QAI1B,IAAI,CAACjC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMkC,oCAAoCpC;IAC/C,YAAY,AAAgBqC,eAAuB,CAAE;QACnD,KAAK,CAAC,CAAC,sCAAsC,EAAEA,iBAAiB,QADtCA,kBAAAA;QAE1B,IAAI,CAACnC,IAAI,GAAG;IACd;AACF"}

package/dist/core/index.d.ts

@@ -5,7 +5,7 @@ export type { ProvisionerCapabilitySnapshot } from './entities/provisioner-capab
 export type { ActiveProvisionerToken, ProvisionerScope, ProvisionerToken, } from './entities/provisioner-token.js';
 export type { RunnerInstance, RunnerInstanceState, } from './entities/runner-instance.js';
 export type { RunnerSession } from './entities/runner-session.js';
-export { EmptyRunnerLabelsError, ManualRegistrationTokenNotFoundError, ProvisionerAdminIdempotencyKeyReuseError, ProvisionerAdminIdempotencyReplayUnavailableError, ProvisionerTokenNotFoundError, RegistrationTokenConsumedError, RegistrationTokenExpiredError, RunnerSessionExhaustedError, RunningJobExecutionNotFoundError, } from './errors.js';
+export { EmptyRunnerLabelsError, ManualRegistrationTokenNotFoundError, ProvisionerAdminIdempotencyKeyReuseError, ProvisionerAdminIdempotencyReplayUnavailableError, ProvisionerTokenNotFoundError, RegistrationTokenConsumedError, RegistrationTokenExpiredError, RunnerLabelsReservedError, RunnerSessionExhaustedError, RunningJobExecutionNotFoundError, } from './errors.js';
 export { type ClaimJobExecutionResult, claimJobExecution } from './job-executions.js';
 export { createWorkspaceManualRegistrationToken, listUsableManualRegistrationTokens, revokeWorkspaceManualRegistrationToken, } from './manual-registration-tokens.js';
 export { hasActiveWorkspaceProvisionerCapability } from './provisioner-capability-snapshots.js';

package/dist/core/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,sCAAsC,EAC3C,KAAK,sCAAsC,EAC3C,gCAAgC,EAChC,KAAK,2BAA2B,GACjC,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAC,0BAA0B,EAAC,MAAM,4CAA4C,CAAC;AAC3F,YAAY,EAAC,uBAAuB,EAAC,MAAM,yCAAyC,CAAC;AACrF,YAAY,EAAC,6BAA6B,EAAC,MAAM,+CAA+C,CAAC;AACjG,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,cAAc,EACd,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAC,aAAa,EAAC,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,oCAAoC,EACpC,wCAAwC,EACxC,iDAAiD,EACjD,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAC,KAAK,uBAAuB,EAAE,iBAAiB,EAAC,MAAM,qBAAqB,CAAC;AACpF,OAAO,EACL,sCAAsC,EACtC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAC,uCAAuC,EAAC,MAAM,uCAAuC,CAAC;AAC9F,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,+BAA+B,EAC/B,kCAAkC,EAClC,sBAAsB,EACtB,8CAA8C,EAC9C,2BAA2B,EAC3B,+CAA+C,EAC/C,kCAAkC,EAClC,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAC,mBAAmB,EAAE,0BAA0B,EAAC,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,6BAA6B,EAC7B,wCAAwC,EACxC,0BAA0B,EAC1B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,YAAY,EACjB,8BAA8B,EAC9B,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,sCAAsC,EAC3C,KAAK,sCAAsC,EAC3C,gCAAgC,EAChC,KAAK,2BAA2B,GACjC,MAAM,6BAA6B,CAAC;AACrC,YAAY,EAAC,0BAA0B,EAAC,MAAM,4CAA4C,CAAC;AAC3F,YAAY,EAAC,uBAAuB,EAAC,MAAM,yCAAyC,CAAC;AACrF,YAAY,EAAC,6BAA6B,EAAC,MAAM,+CAA+C,CAAC;AACjG,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,cAAc,EACd,mBAAmB,GACpB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EAAC,aAAa,EAAC,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,sBAAsB,EACtB,oCAAoC,EACpC,wCAAwC,EACxC,iDAAiD,EACjD,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,yBAAyB,EACzB,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAC,KAAK,uBAAuB,EAAE,iBAAiB,EAAC,MAAM,qBAAqB,CAAC;AACpF,OAAO,EACL,sCAAsC,EACtC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAC,uCAAuC,EAAC,MAAM,uCAAuC,CAAC;AAC9F,OAAO,EACL,+CAA+C,EAC/C,kCAAkC,EAClC,+BAA+B,EAC/B,kCAAkC,EAClC,sBAAsB,EACtB,8CAA8C,EAC9C,2BAA2B,EAC3B,+CAA+C,EAC/C,kCAAkC,EAClC,+BAA+B,GAChC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAC,mBAAmB,EAAE,0BAA0B,EAAC,MAAM,wBAAwB,CAAC;AACvF,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EACL,6BAA6B,EAC7B,wCAAwC,EACxC,0BAA0B,EAC1B,4BAA4B,EAC5B,gCAAgC,EAChC,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,KAAK,YAAY,EACjB,8BAA8B,EAC9B,iBAAiB,EACjB,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EACnC,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,KAAK,2BAA2B,EAChC,KAAK,4BAA4B,EACjC,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,+BAA+B,CAAC"}

package/dist/core/index.js

@@ -1,5 +1,5 @@
 export { listRunnerAdministratorInstances } from './admin-runner-instances.js';
-export { EmptyRunnerLabelsError, ManualRegistrationTokenNotFoundError, ProvisionerAdminIdempotencyKeyReuseError, ProvisionerAdminIdempotencyReplayUnavailableError, ProvisionerTokenNotFoundError, RegistrationTokenConsumedError, RegistrationTokenExpiredError, RunnerSessionExhaustedError, RunningJobExecutionNotFoundError } from './errors.js';
+export { EmptyRunnerLabelsError, ManualRegistrationTokenNotFoundError, ProvisionerAdminIdempotencyKeyReuseError, ProvisionerAdminIdempotencyReplayUnavailableError, ProvisionerTokenNotFoundError, RegistrationTokenConsumedError, RegistrationTokenExpiredError, RunnerLabelsReservedError, RunnerSessionExhaustedError, RunningJobExecutionNotFoundError } from './errors.js';
 export { claimJobExecution } from './job-executions.js';
 export { createWorkspaceManualRegistrationToken, listUsableManualRegistrationTokens, revokeWorkspaceManualRegistrationToken } from './manual-registration-tokens.js';
 export { hasActiveWorkspaceProvisionerCapability } from './provisioner-capability-snapshots.js';

package/dist/core/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/index.ts"],"sourcesContent":["export {\n  type ListRunnerAdministratorInstancesParams,\n  type ListRunnerAdministratorInstancesResult,\n  listRunnerAdministratorInstances,\n  type RunnerAdministratorInstance,\n} from './admin-runner-instances.js';\nexport type {EphemeralRegistrationToken} from './entities/ephemeral-registration-token.js';\nexport type {ManualRegistrationToken} from './entities/manual-registration-token.js';\nexport type {ProvisionerCapabilitySnapshot} from './entities/provisioner-capability-snapshot.js';\nexport type {\n  ActiveProvisionerToken,\n  ProvisionerScope,\n  ProvisionerToken,\n} from './entities/provisioner-token.js';\nexport type {\n  RunnerInstance,\n  RunnerInstanceState,\n} from './entities/runner-instance.js';\nexport type {RunnerSession} from './entities/runner-session.js';\nexport {\n  EmptyRunnerLabelsError,\n  ManualRegistrationTokenNotFoundError,\n  ProvisionerAdminIdempotencyKeyReuseError,\n  ProvisionerAdminIdempotencyReplayUnavailableError,\n  ProvisionerTokenNotFoundError,\n  RegistrationTokenConsumedError,\n  RegistrationTokenExpiredError,\n  RunnerSessionExhaustedError,\n  RunningJobExecutionNotFoundError,\n} from './errors.js';\nexport {type ClaimJobExecutionResult, claimJobExecution} from './job-executions.js';\nexport {\n  createWorkspaceManualRegistrationToken,\n  listUsableManualRegistrationTokens,\n  revokeWorkspaceManualRegistrationToken,\n} from './manual-registration-tokens.js';\nexport {hasActiveWorkspaceProvisionerCapability} from './provisioner-capability-snapshots.js';\nexport {\n  createAdministratorInstallationProvisionerToken,\n  createInstallationProvisionerToken,\n  createWorkspaceProvisionerToken,\n  installationProvisionerTokenStatus,\n  listActiveProvisioners,\n  listAdministratorInstallationProvisionerTokens,\n  listUsableProvisionerTokens,\n  revokeAdministratorInstallationProvisionerToken,\n  revokeInstallationProvisionerToken,\n  revokeWorkspaceProvisionerToken,\n} from './provisioner-tokens.js';\nexport {getRunnerAssignment, issueRunnerActivationToken} from './runner-activation.js';\nexport {assignRunnerInstances} from './runner-assignments.js';\nexport {\n  attachRunnerControlProviderId,\n  createRunnerInstancesWithBootstrapTokens,\n  enrollRunnerControlSession,\n  exchangeRunnerBootstrapToken,\n  RunnerBootstrapTokenInvalidError,\n  RunnerControlSessionInvalidError,\n  touchRunnerControlSession,\n} from './runner-control-sessions.js';\nexport {\n  type ActiveRunner,\n  attachRunnerInstanceProviderId,\n  listActiveRunners,\n  type ReconcileDesiredIntent,\n  type ReconciledBoundJobExecution,\n  type ReconciledRunnerInstance,\n  type ReconcileRunnerInstancesParams,\n  type ReconcileRunnerInstancesResult,\n  type ReportRunnerInstancesParams,\n  type ReportRunnerInstancesResult,\n  reconcileRunnerInstances,\n  reportRunnerInstances,\n} from './runner-instances.js';\nexport {\n  type RegisterRunnerSessionResult,\n  type RunnerRegistrationCredential,\n  registerRunnerSession,\n} from './runner-sessions.js';\nexport {\n  EMPTY_RUNNER_TOOL_CAPABILITIES,\n  effectiveRunnerToolCapabilities,\n} from './runner-tool-capabilities.js';\n"],"names":["listRunnerAdministratorInstances","EmptyRunnerLabelsError","ManualRegistrationTokenNotFoundError","ProvisionerAdminIdempotencyKeyReuseError","ProvisionerAdminIdempotencyReplayUnavailableError","ProvisionerTokenNotFoundError","RegistrationTokenConsumedError","RegistrationTokenExpiredError","RunnerSessionExhaustedError","RunningJobExecutionNotFoundError","claimJobExecution","createWorkspaceManualRegistrationToken","listUsableManualRegistrationTokens","revokeWorkspaceManualRegistrationToken","hasActiveWorkspaceProvisionerCapability","createAdministratorInstallationProvisionerToken","createInstallationProvisionerToken","createWorkspaceProvisionerToken","installationProvisionerTokenStatus","listActiveProvisioners","listAdministratorInstallationProvisionerTokens","listUsableProvisionerTokens","revokeAdministratorInstallationProvisionerToken","revokeInstallationProvisionerToken","revokeWorkspaceProvisionerToken","getRunnerAssignment","issueRunnerActivationToken","assignRunnerInstances","attachRunnerControlProviderId","createRunnerInstancesWithBootstrapTokens","enrollRunnerControlSession","exchangeRunnerBootstrapToken","RunnerBootstrapTokenInvalidError","RunnerControlSessionInvalidError","touchRunnerControlSession","attachRunnerInstanceProviderId","listActiveRunners","reconcileRunnerInstances","reportRunnerInstances","registerRunnerSession","EMPTY_RUNNER_TOOL_CAPABILITIES","effectiveRunnerToolCapabilities"],"mappings":"AAAA,SAGEA,gCAAgC,QAE3B,8BAA8B;AAcrC,SACEC,sBAAsB,EACtBC,oCAAoC,EACpCC,wCAAwC,EACxCC,iDAAiD,EACjDC,6BAA6B,EAC7BC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,2BAA2B,EAC3BC,gCAAgC,QAC3B,cAAc;AACrB,SAAsCC,iBAAiB,QAAO,sBAAsB;AACpF,SACEC,sCAAsC,EACtCC,kCAAkC,EAClCC,sCAAsC,QACjC,kCAAkC;AACzC,SAAQC,uCAAuC,QAAO,wCAAwC;AAC9F,SACEC,+CAA+C,EAC/CC,kCAAkC,EAClCC,+BAA+B,EAC/BC,kCAAkC,EAClCC,sBAAsB,EACtBC,8CAA8C,EAC9CC,2BAA2B,EAC3BC,+CAA+C,EAC/CC,kCAAkC,EAClCC,+BAA+B,QAC1B,0BAA0B;AACjC,SAAQC,mBAAmB,EAAEC,0BAA0B,QAAO,yBAAyB;AACvF,SAAQC,qBAAqB,QAAO,0BAA0B;AAC9D,SACEC,6BAA6B,EAC7BC,wCAAwC,EACxCC,0BAA0B,EAC1BC,4BAA4B,EAC5BC,gCAAgC,EAChCC,gCAAgC,EAChCC,yBAAyB,QACpB,+BAA+B;AACtC,SAEEC,8BAA8B,EAC9BC,iBAAiB,EAQjBC,wBAAwB,EACxBC,qBAAqB,QAChB,wBAAwB;AAC/B,SAGEC,qBAAqB,QAChB,uBAAuB;AAC9B,SACEC,8BAA8B,EAC9BC,+BAA+B,QAC1B,gCAAgC"}
+{"version":3,"sources":["../../src/core/index.ts"],"sourcesContent":["export {\n  type ListRunnerAdministratorInstancesParams,\n  type ListRunnerAdministratorInstancesResult,\n  listRunnerAdministratorInstances,\n  type RunnerAdministratorInstance,\n} from './admin-runner-instances.js';\nexport type {EphemeralRegistrationToken} from './entities/ephemeral-registration-token.js';\nexport type {ManualRegistrationToken} from './entities/manual-registration-token.js';\nexport type {ProvisionerCapabilitySnapshot} from './entities/provisioner-capability-snapshot.js';\nexport type {\n  ActiveProvisionerToken,\n  ProvisionerScope,\n  ProvisionerToken,\n} from './entities/provisioner-token.js';\nexport type {\n  RunnerInstance,\n  RunnerInstanceState,\n} from './entities/runner-instance.js';\nexport type {RunnerSession} from './entities/runner-session.js';\nexport {\n  EmptyRunnerLabelsError,\n  ManualRegistrationTokenNotFoundError,\n  ProvisionerAdminIdempotencyKeyReuseError,\n  ProvisionerAdminIdempotencyReplayUnavailableError,\n  ProvisionerTokenNotFoundError,\n  RegistrationTokenConsumedError,\n  RegistrationTokenExpiredError,\n  RunnerLabelsReservedError,\n  RunnerSessionExhaustedError,\n  RunningJobExecutionNotFoundError,\n} from './errors.js';\nexport {type ClaimJobExecutionResult, claimJobExecution} from './job-executions.js';\nexport {\n  createWorkspaceManualRegistrationToken,\n  listUsableManualRegistrationTokens,\n  revokeWorkspaceManualRegistrationToken,\n} from './manual-registration-tokens.js';\nexport {hasActiveWorkspaceProvisionerCapability} from './provisioner-capability-snapshots.js';\nexport {\n  createAdministratorInstallationProvisionerToken,\n  createInstallationProvisionerToken,\n  createWorkspaceProvisionerToken,\n  installationProvisionerTokenStatus,\n  listActiveProvisioners,\n  listAdministratorInstallationProvisionerTokens,\n  listUsableProvisionerTokens,\n  revokeAdministratorInstallationProvisionerToken,\n  revokeInstallationProvisionerToken,\n  revokeWorkspaceProvisionerToken,\n} from './provisioner-tokens.js';\nexport {getRunnerAssignment, issueRunnerActivationToken} from './runner-activation.js';\nexport {assignRunnerInstances} from './runner-assignments.js';\nexport {\n  attachRunnerControlProviderId,\n  createRunnerInstancesWithBootstrapTokens,\n  enrollRunnerControlSession,\n  exchangeRunnerBootstrapToken,\n  RunnerBootstrapTokenInvalidError,\n  RunnerControlSessionInvalidError,\n  touchRunnerControlSession,\n} from './runner-control-sessions.js';\nexport {\n  type ActiveRunner,\n  attachRunnerInstanceProviderId,\n  listActiveRunners,\n  type ReconcileDesiredIntent,\n  type ReconciledBoundJobExecution,\n  type ReconciledRunnerInstance,\n  type ReconcileRunnerInstancesParams,\n  type ReconcileRunnerInstancesResult,\n  type ReportRunnerInstancesParams,\n  type ReportRunnerInstancesResult,\n  reconcileRunnerInstances,\n  reportRunnerInstances,\n} from './runner-instances.js';\nexport {\n  type RegisterRunnerSessionResult,\n  type RunnerRegistrationCredential,\n  registerRunnerSession,\n} from './runner-sessions.js';\nexport {\n  EMPTY_RUNNER_TOOL_CAPABILITIES,\n  effectiveRunnerToolCapabilities,\n} from './runner-tool-capabilities.js';\n"],"names":["listRunnerAdministratorInstances","EmptyRunnerLabelsError","ManualRegistrationTokenNotFoundError","ProvisionerAdminIdempotencyKeyReuseError","ProvisionerAdminIdempotencyReplayUnavailableError","ProvisionerTokenNotFoundError","RegistrationTokenConsumedError","RegistrationTokenExpiredError","RunnerLabelsReservedError","RunnerSessionExhaustedError","RunningJobExecutionNotFoundError","claimJobExecution","createWorkspaceManualRegistrationToken","listUsableManualRegistrationTokens","revokeWorkspaceManualRegistrationToken","hasActiveWorkspaceProvisionerCapability","createAdministratorInstallationProvisionerToken","createInstallationProvisionerToken","createWorkspaceProvisionerToken","installationProvisionerTokenStatus","listActiveProvisioners","listAdministratorInstallationProvisionerTokens","listUsableProvisionerTokens","revokeAdministratorInstallationProvisionerToken","revokeInstallationProvisionerToken","revokeWorkspaceProvisionerToken","getRunnerAssignment","issueRunnerActivationToken","assignRunnerInstances","attachRunnerControlProviderId","createRunnerInstancesWithBootstrapTokens","enrollRunnerControlSession","exchangeRunnerBootstrapToken","RunnerBootstrapTokenInvalidError","RunnerControlSessionInvalidError","touchRunnerControlSession","attachRunnerInstanceProviderId","listActiveRunners","reconcileRunnerInstances","reportRunnerInstances","registerRunnerSession","EMPTY_RUNNER_TOOL_CAPABILITIES","effectiveRunnerToolCapabilities"],"mappings":"AAAA,SAGEA,gCAAgC,QAE3B,8BAA8B;AAcrC,SACEC,sBAAsB,EACtBC,oCAAoC,EACpCC,wCAAwC,EACxCC,iDAAiD,EACjDC,6BAA6B,EAC7BC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,yBAAyB,EACzBC,2BAA2B,EAC3BC,gCAAgC,QAC3B,cAAc;AACrB,SAAsCC,iBAAiB,QAAO,sBAAsB;AACpF,SACEC,sCAAsC,EACtCC,kCAAkC,EAClCC,sCAAsC,QACjC,kCAAkC;AACzC,SAAQC,uCAAuC,QAAO,wCAAwC;AAC9F,SACEC,+CAA+C,EAC/CC,kCAAkC,EAClCC,+BAA+B,EAC/BC,kCAAkC,EAClCC,sBAAsB,EACtBC,8CAA8C,EAC9CC,2BAA2B,EAC3BC,+CAA+C,EAC/CC,kCAAkC,EAClCC,+BAA+B,QAC1B,0BAA0B;AACjC,SAAQC,mBAAmB,EAAEC,0BAA0B,QAAO,yBAAyB;AACvF,SAAQC,qBAAqB,QAAO,0BAA0B;AAC9D,SACEC,6BAA6B,EAC7BC,wCAAwC,EACxCC,0BAA0B,EAC1BC,4BAA4B,EAC5BC,gCAAgC,EAChCC,gCAAgC,EAChCC,yBAAyB,QACpB,+BAA+B;AACtC,SAEEC,8BAA8B,EAC9BC,iBAAiB,EAQjBC,wBAAwB,EACxBC,qBAAqB,QAChB,wBAAwB;AAC/B,SAGEC,qBAAqB,QAChB,uBAAuB;AAC9B,SACEC,8BAA8B,EAC9BC,+BAA+B,QAC1B,gCAAgC"}

package/dist/core/rate-limit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/core/rate-limit.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,yBAAyB,EAC1B,MAAM,0BAA0B,CAAC;AAKlC,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAC/E,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,iBAAiB,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AACvD,MAAM,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAErD,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,qBAAa,6BAA8B,SAAQ,sBAAsB,CACvE,sBAAsB,EACtB,qBAAqB,CACtB;gBACa,MAAM,EAAE;QAClB,MAAM,EAAE,sBAAsB,CAAC;QAC/B,KAAK,EAAE,qBAAqB,CAAC;QAC7B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;KAC9B;CAIF;AAED,qBAAa,gCAAiC,SAAQ,yBAAyB,CAC7E,sBAAsB,EACtB,qBAAqB,CACtB;gBACa,MAAM,EAAE;QAClB,MAAM,EAAE,sBAAsB,CAAC;QAC/B,KAAK,EAAE,qBAAqB,CAAC;QAC7B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC;KAChB;CAIF;AAID,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAQT;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC9F"}
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../../src/core/rate-limit.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,yBAAyB,EAC1B,MAAM,0BAA0B,CAAC;AAKlC,MAAM,MAAM,sBAAsB,GAAG,kBAAkB,GAAG,oBAAoB,CAAC;AAC/E,MAAM,MAAM,qBAAqB,GAAG,aAAa,GAAG,iBAAiB,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AACvD,MAAM,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAErD,MAAM,WAAW,2BAA4B,SAAQ,sBAAsB;IACzE,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC;AAED,qBAAa,6BAA8B,SAAQ,sBAAsB,CACvE,sBAAsB,EACtB,qBAAqB,CACtB;IACC,YAAY,MAAM,EAAE;QAClB,MAAM,EAAE,sBAAsB,CAAC;QAC/B,KAAK,EAAE,qBAAqB,CAAC;QAC7B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,oBAAoB,EAAE,MAAM,CAAC;KAC9B,EAGA;CACF;AAED,qBAAa,gCAAiC,SAAQ,yBAAyB,CAC7E,sBAAsB,EACtB,qBAAqB,CACtB;IACC,YAAY,MAAM,EAAE;QAClB,MAAM,EAAE,sBAAsB,CAAC;QAC/B,KAAK,EAAE,qBAAqB,CAAC;QAC7B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,KAAK,EAAE,OAAO,CAAC;KAChB,EAGA;CACF;AAID,wBAAgB,8BAA8B,CAAC,MAAM,EAAE;IACrD,MAAM,EAAE,sBAAsB,CAAC;IAC/B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,MAAM,CAQT;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoC9F"}

package/dist/core/runner-control-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner-control-sessions.d.ts","sourceRoot":"","sources":["../../src/core/runner-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,0BAA0B,CAAC;AAqBxE,qBAAa,gCAAiC,SAAQ,KAAK;;CAK1D;AAED,qBAAa,gCAAiC,SAAQ,KAAK;;CAK1D;AAED,wBAAsB,wCAAwC,CAAC,MAAM,EAAE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,KAAK,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAgCrE;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAC,CAAC,CA8BpF;AAED,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,MAAM;;;;eAmBjE;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAiFzB;AAED,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnB;AAED,wBAAsB,yBAAyB,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAW9F"}
+{"version":3,"file":"runner-control-sessions.d.ts","sourceRoot":"","sources":["../../src/core/runner-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,0BAA0B,CAAC;AAyBxE,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,cAGC;CACF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,cAGC;CACF;AAED,wBAAsB,wCAAwC,CAAC,MAAM,EAAE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,KAAK,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAgCrE;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAC,CAAC,CA8BpF;AAED,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,MAAM;;;;eAmBjE;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2GzB;AAYD,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnB;AAED,wBAAsB,yBAAyB,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAW9F"}

package/dist/core/runner-control-sessions.js

@@ -1,15 +1,16 @@
 import { logger } from '@shipfox/node-opentelemetry';
 import { extractDisplayPrefix, generateOpaqueToken, hashOpaqueToken } from '@shipfox/node-tokens';
-import { canonicalizeLabels } from '@shipfox/runner-labels';
 import { and, eq, gt, isNull, notInArray, or, sql } from 'drizzle-orm';
 import { config } from '#config.js';
 import { ReservationExpiredError, ReservationNotFoundError, RunnerInstanceAlreadyAssignedError, RunnerInstanceNotAssignableError } from '#core/errors.js';
+import { sanitizeRunnerLabels } from '#core/runner-labels.js';
 import { db } from '#db/db.js';
 import { assignRunnerInstancesTx } from '#db/runner-assignments.js';
 import { terminalStates } from '#db/runner-instances.js';
 import { provisionerTokens } from '#db/schema/provisioner-tokens.js';
 import { runnerBootstrapTokens, runnerControlSessions } from '#db/schema/runner-control-sessions.js';
 import { providerRunners } from '#db/schema/runner-instances.js';
+import { recordRunnerReservationPromotionFailure } from '#metrics/index.js';
 import { issueRunnerActivationTokenTx } from './runner-activation.js';
 export class RunnerBootstrapTokenInvalidError extends Error {
     constructor(){
@@ -87,17 +88,31 @@ export async function resolveRunnerControlSession(rawToken) {
 export async function enrollRunnerControlSession(params) {
     return await db().transaction(async (tx)=>{
         const [current] = await tx.select({
-            intendedReservationId: providerRunners.intendedReservationId
-        }).from(providerRunners).where(and(eq(providerRunners.id, params.runnerInstanceId), eq(providerRunners.provisionerId, params.provisionerId)));
+            intendedReservationId: providerRunners.intendedReservationId,
+            provisionerScope: provisionerTokens.scope
+        }).from(providerRunners).innerJoin(provisionerTokens, eq(provisionerTokens.id, providerRunners.provisionerId)).where(and(eq(providerRunners.id, params.runnerInstanceId), eq(providerRunners.provisionerId, params.provisionerId)));
         if (!current) throw new RunnerControlSessionInvalidError();
         if (current.intendedReservationId) await tx.execute(sql`select pg_advisory_xact_lock(hashtext(${`runners_assignment:${params.provisionerId}:${current.intendedReservationId}`}))`);
-        const [updated] = await tx.update(providerRunners).set({
-            labels: [
-                ...canonicalizeLabels(params.labels)
-            ],
+        // Provider reports may populate reservationId before the assignment commits. assignedAt is
+        // written by the assignment transaction, so keep the guard on that write boundary.
+        const [metadataUpdated] = await tx.update(providerRunners).set({
+            labels: sanitizeRunnerLabels(params.labels, {
+                scope: current.provisionerScope,
+                source: 'runner control enrollment'
+            }),
             providerKind: params.providerKind,
             protocolVersion: params.protocolVersion,
-            capabilities: params.capabilities ?? null,
+            capabilities: params.capabilities ?? null
+        }).where(and(eq(providerRunners.id, params.runnerInstanceId), eq(providerRunners.provisionerId, params.provisionerId), isNull(providerRunners.assignedAt), notInArray(providerRunners.state, [
+            ...terminalStates
+        ]))).returning({
+            id: providerRunners.id
+        });
+        if (!metadataUpdated) logger().debug({
+            runnerInstanceId: params.runnerInstanceId,
+            provisionerId: params.provisionerId
+        }, 'Runner enrollment metadata update skipped for assigned or terminal runner');
+        const [updated] = await tx.update(providerRunners).set({
             state: 'running',
             reportedAt: sql`now()`,
             updatedAt: sql`now()`
@@ -127,19 +142,30 @@ export async function enrollRunnerControlSession(params) {
                 });
             });
         } catch (error) {
-            const expectedFailure = error instanceof ReservationExpiredError || error instanceof ReservationNotFoundError || error instanceof RunnerInstanceAlreadyAssignedError || error instanceof RunnerInstanceNotAssignableError;
+            const expectedFailureReason = getRunnerReservationPromotionFailureReason(error);
             const details = {
                 err: error,
                 runnerInstanceId: params.runnerInstanceId,
                 provisionerId: params.provisionerId,
                 reservationId: intendedReservationId
             };
-            if (expectedFailure) logger().debug(details, 'Runner reservation could not be promoted during enrollment');
-            else logger().error(details, 'Unexpected failure promoting runner reservation during enrollment');
+            if (expectedFailureReason) {
+                recordRunnerReservationPromotionFailure(expectedFailureReason);
+                logger().debug(details, 'Runner reservation could not be promoted during enrollment');
+            } else {
+                logger().error(details, 'Unexpected failure promoting runner reservation during enrollment');
+            }
             return null;
         }
     });
 }
+function getRunnerReservationPromotionFailureReason(error) {
+    if (error instanceof ReservationExpiredError) return 'reservation-expired';
+    if (error instanceof ReservationNotFoundError) return 'reservation-not-found';
+    if (error instanceof RunnerInstanceAlreadyAssignedError) return 'already-assigned';
+    if (error instanceof RunnerInstanceNotAssignableError) return 'not-assignable';
+    return null;
+}
 export async function attachRunnerControlProviderId(params) {
     const rows = await db().update(providerRunners).set({
         providerRunnerId: params.providerRunnerId,