@shipfox/api-runners 12.2.0 → 12.3.0

package/.turbo/turbo-build.log

@@ -1,6 +1,6 @@
 $ shipfox-swc && shipfox-temporal-bundle dist/temporal/workflows/index.js
-Successfully compiled: 102 files with swc (530.2ms)
-2026-08-06T13:12:29.754Z [INFO] asset workflow-bundle-0c3da2487e29e352d64e.js 3.17 MiB [emitted] [immutable] (name: main)
+Successfully compiled: 102 files with swc (716.68ms)
+2026-08-07T08:46:24.620Z [INFO] asset workflow-bundle-0c3da2487e29e352d64e.js 3.17 MiB [emitted] [immutable] (name: main)
 orphan modules 33.5 KiB [orphan] 21 modules
 runtime modules 1.13 KiB 5 modules
 modules by path ../../../node_modules/.pnpm/ 970 KiB 196 modules
@@ -14,6 +14,6 @@ optional modules 30 bytes [optional]
   __temporal_custom_payload_converter (ignored) 15 bytes [optional] [built] [code generated]
   __temporal_custom_failure_converter (ignored) 15 bytes [optional] [built] [code generated]
 ../../shared/node/temporal/dist/workflow-error-interceptor.js 1.21 KiB [built] [code generated]
-webpack 5.107.2 compiled successfully in 5831 ms
-2026-08-06T13:12:29.764Z [INFO] Workflow bundle created { size: '3.17MB' }
+webpack 5.107.2 compiled successfully in 6556 ms
+2026-08-07T08:46:24.639Z [INFO] Workflow bundle created { size: '3.17MB' }
 /home/runner/work/shipfox/shipfox/libs/api/runners/dist/temporal/workflows/index.js: 3326598 bytes

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @shipfox/api-runners
 
+## 12.3.0
+
+### Patch Changes
+
+- ed3ea25: Raise the default runner reservation TTL ceiling to 600 seconds so longer EC2 launch budgets are accepted while the cap still limits unreleased-reservation demand.
+- 72fb19d: Allow idle runners with expired or deleted intended or assigned reservations to be rebound on the next demand poll.
+- 32bc717: Preserves committed runner assignment metadata during enrollment.
+- 4bd55e8: Adds a service gauge for enrolled runners without a recent provisioner report after the stale-runner grace window.
+- 4a5e847: Uses provider reservation expiry as the activation grace period before stale runner assignments are rebound.
+- Updated dependencies [4b0731e]
+  - @shipfox/api-workflows-dto@12.3.0
+
 ## 12.2.0
 
 ### Minor Changes

package/dist/config.js

@@ -60,12 +60,12 @@ export const config = createConfig({
         default: 250
     }),
     RESERVATION_TTL_SECONDS: num({
-        desc: 'Default lifetime of a count-based runner reservation, in seconds. Used when a provisioner does not request a provider-specific value. Expired reservations stop counting against queued demand.',
+        desc: 'Default lifetime and activation grace period of a count-based runner reservation, in seconds. A runner without a session can be rebound only after this deadline. Used when a provisioner does not request a provider-specific value. Expired reservations stop counting against queued demand.',
         default: 60
     }),
     RESERVATION_TTL_MAX_SECONDS: num({
-        desc: `Server-side ceiling for a count-based runner reservation lifetime, in seconds. Set it at least as high as every provider registration deadline so provider-specific values can cover boot and enrollment. Set this between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,
-        default: 300
+        desc: `Server-side ceiling for a count-based runner reservation lifetime and activation grace period, in seconds. Set it at least as high as every provider registration deadline plus its launch headroom so provider-specific values can cover the launch gap, boot, and enrollment. Set this between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,
+        default: 600
     }),
     RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({
         desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS} from '@shipfox/api-runners-dto';\nimport {bool, createConfig, num, str} from '@shipfox/config';\nimport {findInvalidLabels, parseLabelList} from '@shipfox/runner-labels';\nimport {STUCK_JOB_THRESHOLD_SECONDS} from '#core/maintenance-policy.js';\n\nconst EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\nconst REGISTRATION_TOKEN_BATCH_HARD_MAX = 1000;\nconst RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\nconst RESERVATION_TTL_HARD_MAX_SECONDS = 3600;\n\nexport const config = createConfig({\n  RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use runner bootstrap token in seconds. The token can only create one runner-control session before it expires.',\n    default: 300,\n  }),\n  RUNNER_CONTROL_SESSION_TTL_SECONDS: num({\n    desc: 'Lifetime of a pre-workspace runner-control session in seconds. This session can only enroll, attach its provider identity, and report its own liveness.',\n    default: 3600,\n  }),\n  RUNNER_ACTIVATION_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use activation token in seconds. The token is issued only to an assigned runner-control session and creates one workspace runner session.',\n    default: 300,\n  }),\n  RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum server-side cap for the per-request runner assignment wait, in seconds. Managed runners request their own bounded wait with wait_seconds.',\n    default: RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS,\n  }),\n  RUNNER_ASSIGNMENT_POLL_INTERVAL_MS: num({\n    desc: 'Delay between durable assignment reads while a runner-control session waits for an assignment, in milliseconds.',\n    default: 250,\n  }),\n  RUNNER_RESERVED_LABELS: str({\n    desc: 'Comma-separated labels that only installation-scope provisioners may advertise. Any other provisioner or runner has them removed.',\n    default: '',\n  }),\n  EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: num({\n    desc: `Lifetime of a provisioner-minted runner registration token, in seconds. The token can be exchanged once by a runner before this time passes. Set this between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    default: 300,\n  }),\n  REGISTRATION_TOKEN_BATCH_MAX: num({\n    desc: `Maximum number of runner registration tokens a provisioner can mint in one batch request. Set this between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n    default: 500,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of batch runner registration token mint requests one provisioner can make per rate-limit window.',\n    default: 120,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for provisioner batch runner registration token mint requests, in seconds.',\n    default: 60,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of runner registration attempts one ephemeral registration token can make per rate-limit window.',\n    default: 5,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for runner registration attempts with one ephemeral registration token, in seconds.',\n    default: 60,\n  }),\n  RUNNERS_RATE_LIMIT_TIMEOUT_MS: num({\n    desc: 'Maximum time, in milliseconds, a runners rate-limit storage check may wait before the request fails closed.',\n    default: 250,\n  }),\n  RESERVATION_TTL_SECONDS: num({\n    desc: 'Default lifetime of a count-based runner reservation, in seconds. Used when a provisioner does not request a provider-specific value. Expired reservations stop counting against queued demand.',\n    default: 60,\n  }),\n  RESERVATION_TTL_MAX_SECONDS: num({\n    desc: `Server-side ceiling for a count-based runner reservation lifetime, in seconds. Set it at least as high as every provider registration deadline so provider-specific values can cover boot and enrollment. Set this between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,\n    default: 300,\n  }),\n  RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',\n    default: 30,\n  }),\n  RESERVATION_POLL_INTERVAL_MS: num({\n    desc: 'Initial interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 1000,\n  }),\n  RESERVATION_POLL_MAX_INTERVAL_MS: num({\n    desc: 'Maximum backoff interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 5000,\n  }),\n  RUNNER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active runners from recent heartbeats and provisioned runner reports.',\n    default: 60,\n  }),\n  RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS: num({\n    desc: 'Time window, in seconds, after which a runner tool capability report is treated as stale. Set this higher than the runner heartbeat interval so active runners keep their advertised tools fresh.',\n    default: 60,\n  }),\n  RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before maintenance expires a claimed job that has not sent its first heartbeat. Set this lower than the normal stuck-job threshold so startup crashes release work quickly.',\n    default: 60,\n  }),\n  RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before reconcile marks an absent provisioned runner as terminated. Set this higher than the provisioner report interval so a transient empty or partial observed set does not kill a live runner.',\n    default: 120,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS: num({\n    desc: 'Time, in seconds, after which a provisioned runner with no recent report, no live provisioner, no live runner session, and no running job is marked failed by backend maintenance.',\n    default: 300,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT: num({\n    desc: 'Maximum number of stale provisioned runners the maintenance worker marks failed in one run. Higher values clear backlogs faster but hold database locks longer.',\n    default: 100,\n  }),\n  RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between runner session liveness writes from job request polls. Set this lower than RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS so active idle runners stay fresh.',\n    default: 10,\n  }),\n  RUNNER_SESSION_MANUAL_RETENTION_DAYS: num({\n    desc: 'How long manual runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 30,\n  }),\n  RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS: num({\n    desc: 'How long ephemeral runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 7,\n  }),\n  RUNNER_SESSION_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of expired runner sessions maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS: num({\n    desc: 'How long consumed or expired ephemeral registration tokens are retained for audit and debugging before maintenance deletes them, in days. Active tokens that are neither consumed nor expired are never deleted. This window is independent of the runner-session retention windows.',\n    default: 7,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of consumed or expired ephemeral registration tokens maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  PROVISIONER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active provisioners from recent authenticated requests.',\n    default: 120,\n  }),\n  PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between last-seen writes for one provisioner token.',\n    default: 10,\n  }),\n  PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: bool({\n    desc: 'Whether runners_provider_runner_count_divergence includes template_key as a metric label. Use true or false. Defaults to false because template keys can create high-cardinality metric series. Set true only when template keys are bounded and stable.',\n    default: false,\n  }),\n});\n\nconst parsedRunnerReservedLabels = parseLabelList(config.RUNNER_RESERVED_LABELS);\nconst invalidRunnerReservedLabels = findInvalidLabels(parsedRunnerReservedLabels);\n\nif (invalidRunnerReservedLabels.length > 0) {\n  throw new Error(\n    `RUNNER_RESERVED_LABELS contains invalid runner label(s): ${invalidRunnerReservedLabels.join(', ')}`,\n  );\n}\n\nexport const runnerReservedLabels = parsedRunnerReservedLabels;\n\nif (\n  !Number.isInteger(config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS) ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS < 1 ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS >\n    EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS (${config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS}) must be a whole number of seconds between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS', config.RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS],\n  ['RUNNER_CONTROL_SESSION_TTL_SECONDS', config.RUNNER_CONTROL_SESSION_TTL_SECONDS],\n  ['RUNNER_ACTIVATION_TOKEN_TTL_SECONDS', config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS],\n] as const) {\n  if (\n    !Number.isInteger(value) ||\n    value < 1 ||\n    value > RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS\n  ) {\n    throw new Error(\n      `${name} (${value}) must be a whole number of seconds between 1 and ${RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    );\n  }\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS) ||\n  config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS (${config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS) ||\n  config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS < 0\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_INTERVAL_MS (${config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS}) must be a whole number >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.REGISTRATION_TOKEN_BATCH_MAX) ||\n  config.REGISTRATION_TOKEN_BATCH_MAX < 1 ||\n  config.REGISTRATION_TOKEN_BATCH_MAX > REGISTRATION_TOKEN_BATCH_HARD_MAX\n) {\n  throw new Error(\n    `REGISTRATION_TOKEN_BATCH_MAX (${config.REGISTRATION_TOKEN_BATCH_MAX}) must be a whole number between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS', config.PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS],\n  ['PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS', config.PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS],\n  ['EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS', config.EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS],\n  [\n    'EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS',\n    config.EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS,\n  ],\n  ['RUNNERS_RATE_LIMIT_TIMEOUT_MS', config.RUNNERS_RATE_LIMIT_TIMEOUT_MS],\n] as const) {\n  if (!Number.isInteger(value) || value < 1) {\n    throw new Error(`${name} (${value}) must be a whole number >= 1.`);\n  }\n}\n\nif (!Number.isInteger(config.RESERVATION_TTL_SECONDS) || config.RESERVATION_TTL_SECONDS < 1) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_TTL_MAX_SECONDS) ||\n  config.RESERVATION_TTL_MAX_SECONDS < 1 ||\n  config.RESERVATION_TTL_MAX_SECONDS > RESERVATION_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}) must be a whole number of seconds between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nif (config.RESERVATION_TTL_SECONDS > config.RESERVATION_TTL_MAX_SECONDS) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must not be greater than RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS) ||\n  config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS < 0\n) {\n  throw new Error(\n    `RESERVATION_LONG_POLL_MAX_WAIT_SECONDS (${config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS}) must be a whole number of seconds >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_INTERVAL_MS) ||\n  config.RESERVATION_POLL_INTERVAL_MS < 1\n) {\n  throw new Error(\n    `RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}) must be a whole number of milliseconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_MAX_INTERVAL_MS) ||\n  config.RESERVATION_POLL_MAX_INTERVAL_MS < config.RESERVATION_POLL_INTERVAL_MS\n) {\n  throw new Error(\n    `RESERVATION_POLL_MAX_INTERVAL_MS (${config.RESERVATION_POLL_MAX_INTERVAL_MS}) must be a whole number of milliseconds >= RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ACTIVE_WINDOW_SECONDS) ||\n  config.RUNNER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ACTIVE_WINDOW_SECONDS (${config.RUNNER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS) ||\n  config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS (${config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS) ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS < 1 ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS >= STUCK_JOB_THRESHOLD_SECONDS\n) {\n  throw new Error(\n    `RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS (${config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS}) must be a whole number of seconds >= 1 and < ${STUCK_JOB_THRESHOLD_SECONDS}.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS) ||\n  config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS (${config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT (${config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS) ||\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_MANUAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_MANUAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_MANUAL_RETENTION_DAYS (${config.RUNNER_SESSION_MANUAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS (${config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_GC_BATCH_SIZE) ||\n  config.RUNNER_SESSION_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_GC_BATCH_SIZE (${config.RUNNER_SESSION_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS) ||\n  config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS (${config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE) ||\n  config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE (${config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_ACTIVE_WINDOW_SECONDS) ||\n  config.PROVISIONER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_ACTIVE_WINDOW_SECONDS (${config.PROVISIONER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS) ||\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}).`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}).`,\n  );\n}\n"],"names":["RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS","bool","createConfig","num","str","findInvalidLabels","parseLabelList","STUCK_JOB_THRESHOLD_SECONDS","EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS","REGISTRATION_TOKEN_BATCH_HARD_MAX","RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS","RESERVATION_TTL_HARD_MAX_SECONDS","config","RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS","desc","default","RUNNER_CONTROL_SESSION_TTL_SECONDS","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS","RUNNER_ASSIGNMENT_POLL_INTERVAL_MS","RUNNER_RESERVED_LABELS","EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS","REGISTRATION_TOKEN_BATCH_MAX","PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS","PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS","EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS","EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS","RUNNERS_RATE_LIMIT_TIMEOUT_MS","RESERVATION_TTL_SECONDS","RESERVATION_TTL_MAX_SECONDS","RESERVATION_LONG_POLL_MAX_WAIT_SECONDS","RESERVATION_POLL_INTERVAL_MS","RESERVATION_POLL_MAX_INTERVAL_MS","RUNNER_ACTIVE_WINDOW_SECONDS","RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS","RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS","RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT","RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS","RUNNER_SESSION_MANUAL_RETENTION_DAYS","RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS","RUNNER_SESSION_GC_BATCH_SIZE","RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS","RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE","PROVISIONER_ACTIVE_WINDOW_SECONDS","PROVISIONER_LAST_SEEN_THROTTLE_SECONDS","PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED","parsedRunnerReservedLabels","invalidRunnerReservedLabels","length","Error","join","runnerReservedLabels","Number","isInteger","name","value"],"mappings":"AAAA,SAAQA,2CAA2C,QAAO,2BAA2B;AACrF,SAAQC,IAAI,EAAEC,YAAY,EAAEC,GAAG,EAAEC,GAAG,QAAO,kBAAkB;AAC7D,SAAQC,iBAAiB,EAAEC,cAAc,QAAO,yBAAyB;AACzE,SAAQC,2BAA2B,QAAO,8BAA8B;AAExE,MAAMC,oDAAoD;AAC1D,MAAMC,oCAAoC;AAC1C,MAAMC,kDAAkD;AACxD,MAAMC,mCAAmC;AAEzC,OAAO,MAAMC,SAASV,aAAa;IACjCW,oCAAoCV,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAC,oCAAoCb,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAE,qCAAqCd,IAAI;QACvCW,MAAM;QACNC,SAAS;IACX;IACAG,yCAAyCf,IAAI;QAC3CW,MAAM;QACNC,SAASf;IACX;IACAmB,oCAAoChB,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAK,wBAAwBhB,IAAI;QAC1BU,MAAM;QACNC,SAAS;IACX;IACAM,0CAA0ClB,IAAI;QAC5CW,MAAM,CAAC,oKAAoK,EAAEN,kDAAkD,CAAC,CAAC;QACjOO,SAAS;IACX;IACAO,8BAA8BnB,IAAI;QAChCW,MAAM,CAAC,iHAAiH,EAAEL,kCAAkC,CAAC,CAAC;QAC9JM,SAAS;IACX;IACAQ,0CAA0CpB,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAS,4CAA4CrB,IAAI;QAC9CW,MAAM;QACNC,SAAS;IACX;IACAU,4CAA4CtB,IAAI;QAC9CW,MAAM;QACNC,SAAS;IACX;IACAW,8CAA8CvB,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAY,+BAA+BxB,IAAI;QACjCW,MAAM;QACNC,SAAS;IACX;IACAa,yBAAyBzB,IAAI;QAC3BW,MAAM;QACNC,SAAS;IACX;IACAc,6BAA6B1B,IAAI;QAC/BW,MAAM,CAAC,iOAAiO,EAAEH,iCAAiC,CAAC,CAAC;QAC7QI,SAAS;IACX;IACAe,wCAAwC3B,IAAI;QAC1CW,MAAM;QACNC,SAAS;IACX;IACAgB,8BAA8B5B,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACAiB,kCAAkC7B,IAAI;QACpCW,MAAM;QACNC,SAAS;IACX;IACAkB,8BAA8B9B,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACAmB,8CAA8C/B,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAoB,yCAAyChC,IAAI;QAC3CW,MAAM;QACNC,SAAS;IACX;IACAqB,0CAA0CjC,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAsB,mDAAmDlC,IAAI;QACrDW,MAAM;QACNC,SAAS;IACX;IACAuB,8CAA8CnC,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAwB,0CAA0CpC,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAyB,sCAAsCrC,IAAI;QACxCW,MAAM;QACNC,SAAS;IACX;IACA0B,yCAAyCtC,IAAI;QAC3CW,MAAM;QACNC,SAAS;IACX;IACA2B,8BAA8BvC,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACA4B,uCAAuCxC,IAAI;QACzCW,MAAM;QACNC,SAAS;IACX;IACA6B,sCAAsCzC,IAAI;QACxCW,MAAM;QACNC,SAAS;IACX;IACA8B,mCAAmC1C,IAAI;QACrCW,MAAM;QACNC,SAAS;IACX;IACA+B,wCAAwC3C,IAAI;QAC1CW,MAAM;QACNC,SAAS;IACX;IACAgC,gEAAgE9C,KAAK;QACnEa,MAAM;QACNC,SAAS;IACX;AACF,GAAG;AAEH,MAAMiC,6BAA6B1C,eAAeM,OAAOQ,sBAAsB;AAC/E,MAAM6B,8BAA8B5C,kBAAkB2C;AAEtD,IAAIC,4BAA4BC,MAAM,GAAG,GAAG;IAC1C,MAAM,IAAIC,MACR,CAAC,yDAAyD,EAAEF,4BAA4BG,IAAI,CAAC,OAAO;AAExG;AAEA,OAAO,MAAMC,uBAAuBL,2BAA2B;AAE/D,IACE,CAACM,OAAOC,SAAS,CAAC3C,OAAOS,wCAAwC,KACjET,OAAOS,wCAAwC,GAAG,KAClDT,OAAOS,wCAAwC,GAC7Cb,mDACF;IACA,MAAM,IAAI2C,MACR,CAAC,0CAA0C,EAAEvC,OAAOS,wCAAwC,CAAC,kDAAkD,EAAEb,kDAAkD,CAAC,CAAC;AAEzM;AAEA,KAAK,MAAM,CAACgD,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAAsC7C,OAAOC,kCAAkC;KAAC;IACjF;QAAC;QAAsCD,OAAOI,kCAAkC;KAAC;IACjF;QAAC;QAAuCJ,OAAOK,mCAAmC;KAAC;CACpF,CAAW;IACV,IACE,CAACqC,OAAOC,SAAS,CAACE,UAClBA,QAAQ,KACRA,QAAQ/C,iDACR;QACA,MAAM,IAAIyC,MACR,GAAGK,KAAK,EAAE,EAAEC,MAAM,kDAAkD,EAAE/C,gDAAgD,CAAC,CAAC;IAE5H;AACF;AAEA,IACE,CAAC4C,OAAOC,SAAS,CAAC3C,OAAOM,uCAAuC,KAChEN,OAAOM,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIiC,MACR,CAAC,yCAAyC,EAAEvC,OAAOM,uCAAuC,CAAC,8BAA8B,CAAC;AAE9H;AAEA,IACE,CAACoC,OAAOC,SAAS,CAAC3C,OAAOO,kCAAkC,KAC3DP,OAAOO,kCAAkC,GAAG,GAC5C;IACA,MAAM,IAAIgC,MACR,CAAC,oCAAoC,EAAEvC,OAAOO,kCAAkC,CAAC,8BAA8B,CAAC;AAEpH;AAEA,IACE,CAACmC,OAAOC,SAAS,CAAC3C,OAAOU,4BAA4B,KACrDV,OAAOU,4BAA4B,GAAG,KACtCV,OAAOU,4BAA4B,GAAGb,mCACtC;IACA,MAAM,IAAI0C,MACR,CAAC,8BAA8B,EAAEvC,OAAOU,4BAA4B,CAAC,uCAAuC,EAAEb,kCAAkC,CAAC,CAAC;AAEtJ;AAEA,KAAK,MAAM,CAAC+C,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAA4C7C,OAAOW,wCAAwC;KAAC;IAC7F;QAAC;QAA8CX,OAAOY,0CAA0C;KAAC;IACjG;QAAC;QAA8CZ,OAAOa,0CAA0C;KAAC;IACjG;QACE;QACAb,OAAOc,4CAA4C;KACpD;IACD;QAAC;QAAiCd,OAAOe,6BAA6B;KAAC;CACxE,CAAW;IACV,IAAI,CAAC2B,OAAOC,SAAS,CAACE,UAAUA,QAAQ,GAAG;QACzC,MAAM,IAAIN,MAAM,GAAGK,KAAK,EAAE,EAAEC,MAAM,8BAA8B,CAAC;IACnE;AACF;AAEA,IAAI,CAACH,OAAOC,SAAS,CAAC3C,OAAOgB,uBAAuB,KAAKhB,OAAOgB,uBAAuB,GAAG,GAAG;IAC3F,MAAM,IAAIuB,MACR,CAAC,yBAAyB,EAAEvC,OAAOgB,uBAAuB,CAAC,yCAAyC,CAAC;AAEzG;AAEA,IACE,CAAC0B,OAAOC,SAAS,CAAC3C,OAAOiB,2BAA2B,KACpDjB,OAAOiB,2BAA2B,GAAG,KACrCjB,OAAOiB,2BAA2B,GAAGlB,kCACrC;IACA,MAAM,IAAIwC,MACR,CAAC,6BAA6B,EAAEvC,OAAOiB,2BAA2B,CAAC,kDAAkD,EAAElB,iCAAiC,CAAC,CAAC;AAE9J;AAEA,IAAIC,OAAOgB,uBAAuB,GAAGhB,OAAOiB,2BAA2B,EAAE;IACvE,MAAM,IAAIsB,MACR,CAAC,yBAAyB,EAAEvC,OAAOgB,uBAAuB,CAAC,wDAAwD,EAAEhB,OAAOiB,2BAA2B,CAAC,EAAE,CAAC;AAE/J;AAEA,IACE,CAACyB,OAAOC,SAAS,CAAC3C,OAAOkB,sCAAsC,KAC/DlB,OAAOkB,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIqB,MACR,CAAC,wCAAwC,EAAEvC,OAAOkB,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACE,CAACwB,OAAOC,SAAS,CAAC3C,OAAOmB,4BAA4B,KACrDnB,OAAOmB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIoB,MACR,CAAC,8BAA8B,EAAEvC,OAAOmB,4BAA4B,CAAC,8CAA8C,CAAC;AAExH;AAEA,IACE,CAACuB,OAAOC,SAAS,CAAC3C,OAAOoB,gCAAgC,KACzDpB,OAAOoB,gCAAgC,GAAGpB,OAAOmB,4BAA4B,EAC7E;IACA,MAAM,IAAIoB,MACR,CAAC,kCAAkC,EAAEvC,OAAOoB,gCAAgC,CAAC,0EAA0E,EAAEpB,OAAOmB,4BAA4B,CAAC,EAAE,CAAC;AAEpM;AAEA,IACE,CAACuB,OAAOC,SAAS,CAAC3C,OAAOqB,4BAA4B,KACrDrB,OAAOqB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIkB,MACR,CAAC,8BAA8B,EAAEvC,OAAOqB,4BAA4B,CAAC,yCAAyC,CAAC;AAEnH;AAEA,IACE,CAACqB,OAAOC,SAAS,CAAC3C,OAAOsB,4CAA4C,KACrEtB,OAAOsB,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIiB,MACR,CAAC,8CAA8C,EAAEvC,OAAOsB,4CAA4C,CAAC,yCAAyC,CAAC;AAEnJ;AAEA,IACE,CAACoB,OAAOC,SAAS,CAAC3C,OAAOuB,uCAAuC,KAChEvB,OAAOuB,uCAAuC,GAAG,KACjDvB,OAAOuB,uCAAuC,IAAI5B,6BAClD;IACA,MAAM,IAAI4C,MACR,CAAC,yCAAyC,EAAEvC,OAAOuB,uCAAuC,CAAC,+CAA+C,EAAE5B,4BAA4B,CAAC,CAAC;AAE9K;AAEA,IACE,CAAC+C,OAAOC,SAAS,CAAC3C,OAAOwB,wCAAwC,KACjExB,OAAOwB,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIe,MACR,CAAC,0CAA0C,EAAEvC,OAAOwB,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACkB,OAAOC,SAAS,CAAC3C,OAAOyB,iDAAiD,KAC1EzB,OAAOyB,iDAAiD,GAAG,GAC3D;IACA,MAAM,IAAIc,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,yCAAyC,CAAC;AAE7J;AAEA,IACE,CAACiB,OAAOC,SAAS,CAAC3C,OAAO0B,4CAA4C,KACrE1B,OAAO0B,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIa,MACR,CAAC,8CAA8C,EAAEvC,OAAO0B,4CAA4C,CAAC,8BAA8B,CAAC;AAExI;AAEA,IACE,CAACgB,OAAOC,SAAS,CAAC3C,OAAO2B,wCAAwC,KACjE3B,OAAO2B,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIY,MACR,CAAC,0CAA0C,EAAEvC,OAAO2B,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACe,OAAOC,SAAS,CAAC3C,OAAO4B,oCAAoC,KAC7D5B,OAAO4B,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIW,MACR,CAAC,sCAAsC,EAAEvC,OAAO4B,oCAAoC,CAAC,sCAAsC,CAAC;AAEhI;AAEA,IACE,CAACc,OAAOC,SAAS,CAAC3C,OAAO6B,uCAAuC,KAChE7B,OAAO6B,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIU,MACR,CAAC,yCAAyC,EAAEvC,OAAO6B,uCAAuC,CAAC,sCAAsC,CAAC;AAEtI;AAEA,IACE,CAACa,OAAOC,SAAS,CAAC3C,OAAO8B,4BAA4B,KACrD9B,OAAO8B,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIS,MACR,CAAC,8BAA8B,EAAEvC,OAAO8B,4BAA4B,CAAC,8BAA8B,CAAC;AAExG;AAEA,IACE,CAACY,OAAOC,SAAS,CAAC3C,OAAO+B,qCAAqC,KAC9D/B,OAAO+B,qCAAqC,GAAG,GAC/C;IACA,MAAM,IAAIQ,MACR,CAAC,uCAAuC,EAAEvC,OAAO+B,qCAAqC,CAAC,sCAAsC,CAAC;AAElI;AAEA,IACE,CAACW,OAAOC,SAAS,CAAC3C,OAAOgC,oCAAoC,KAC7DhC,OAAOgC,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIO,MACR,CAAC,sCAAsC,EAAEvC,OAAOgC,oCAAoC,CAAC,8BAA8B,CAAC;AAExH;AAEA,IACE,CAACU,OAAOC,SAAS,CAAC3C,OAAOiC,iCAAiC,KAC1DjC,OAAOiC,iCAAiC,GAAG,GAC3C;IACA,MAAM,IAAIM,MACR,CAAC,mCAAmC,EAAEvC,OAAOiC,iCAAiC,CAAC,yCAAyC,CAAC;AAE7H;AAEA,IACE,CAACS,OAAOC,SAAS,CAAC3C,OAAOkC,sCAAsC,KAC/DlC,OAAOkC,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIK,MACR,CAAC,wCAAwC,EAAEvC,OAAOkC,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACElC,OAAOyB,iDAAiD,IACxDzB,OAAOkC,sCAAsC,EAC7C;IACA,MAAM,IAAIK,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,+DAA+D,EAAEzB,OAAOkC,sCAAsC,CAAC,EAAE,CAAC;AAErO;AAEA,IACElC,OAAOyB,iDAAiD,IACxDzB,OAAO2B,wCAAwC,EAC/C;IACA,MAAM,IAAIY,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,iEAAiE,EAAEzB,OAAO2B,wCAAwC,CAAC,EAAE,CAAC;AAEzO"}
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS} from '@shipfox/api-runners-dto';\nimport {bool, createConfig, num, str} from '@shipfox/config';\nimport {findInvalidLabels, parseLabelList} from '@shipfox/runner-labels';\nimport {STUCK_JOB_THRESHOLD_SECONDS} from '#core/maintenance-policy.js';\n\nconst EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\nconst REGISTRATION_TOKEN_BATCH_HARD_MAX = 1000;\nconst RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\nconst RESERVATION_TTL_HARD_MAX_SECONDS = 3600;\n\nexport const config = createConfig({\n  RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use runner bootstrap token in seconds. The token can only create one runner-control session before it expires.',\n    default: 300,\n  }),\n  RUNNER_CONTROL_SESSION_TTL_SECONDS: num({\n    desc: 'Lifetime of a pre-workspace runner-control session in seconds. This session can only enroll, attach its provider identity, and report its own liveness.',\n    default: 3600,\n  }),\n  RUNNER_ACTIVATION_TOKEN_TTL_SECONDS: num({\n    desc: 'Lifetime of a one-use activation token in seconds. The token is issued only to an assigned runner-control session and creates one workspace runner session.',\n    default: 300,\n  }),\n  RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum server-side cap for the per-request runner assignment wait, in seconds. Managed runners request their own bounded wait with wait_seconds.',\n    default: RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS,\n  }),\n  RUNNER_ASSIGNMENT_POLL_INTERVAL_MS: num({\n    desc: 'Delay between durable assignment reads while a runner-control session waits for an assignment, in milliseconds.',\n    default: 250,\n  }),\n  RUNNER_RESERVED_LABELS: str({\n    desc: 'Comma-separated labels that only installation-scope provisioners may advertise. Any other provisioner or runner has them removed.',\n    default: '',\n  }),\n  EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: num({\n    desc: `Lifetime of a provisioner-minted runner registration token, in seconds. The token can be exchanged once by a runner before this time passes. Set this between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    default: 300,\n  }),\n  REGISTRATION_TOKEN_BATCH_MAX: num({\n    desc: `Maximum number of runner registration tokens a provisioner can mint in one batch request. Set this between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n    default: 500,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of batch runner registration token mint requests one provisioner can make per rate-limit window.',\n    default: 120,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for provisioner batch runner registration token mint requests, in seconds.',\n    default: 60,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of runner registration attempts one ephemeral registration token can make per rate-limit window.',\n    default: 5,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for runner registration attempts with one ephemeral registration token, in seconds.',\n    default: 60,\n  }),\n  RUNNERS_RATE_LIMIT_TIMEOUT_MS: num({\n    desc: 'Maximum time, in milliseconds, a runners rate-limit storage check may wait before the request fails closed.',\n    default: 250,\n  }),\n  RESERVATION_TTL_SECONDS: num({\n    desc: 'Default lifetime and activation grace period of a count-based runner reservation, in seconds. A runner without a session can be rebound only after this deadline. Used when a provisioner does not request a provider-specific value. Expired reservations stop counting against queued demand.',\n    default: 60,\n  }),\n  RESERVATION_TTL_MAX_SECONDS: num({\n    desc: `Server-side ceiling for a count-based runner reservation lifetime and activation grace period, in seconds. Set it at least as high as every provider registration deadline plus its launch headroom so provider-specific values can cover the launch gap, boot, and enrollment. Set this between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,\n    default: 600,\n  }),\n  RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',\n    default: 30,\n  }),\n  RESERVATION_POLL_INTERVAL_MS: num({\n    desc: 'Initial interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 1000,\n  }),\n  RESERVATION_POLL_MAX_INTERVAL_MS: num({\n    desc: 'Maximum backoff interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 5000,\n  }),\n  RUNNER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active runners from recent heartbeats and provisioned runner reports.',\n    default: 60,\n  }),\n  RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS: num({\n    desc: 'Time window, in seconds, after which a runner tool capability report is treated as stale. Set this higher than the runner heartbeat interval so active runners keep their advertised tools fresh.',\n    default: 60,\n  }),\n  RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before maintenance expires a claimed job that has not sent its first heartbeat. Set this lower than the normal stuck-job threshold so startup crashes release work quickly.',\n    default: 60,\n  }),\n  RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before reconcile marks an absent provisioned runner as terminated. Set this higher than the provisioner report interval so a transient empty or partial observed set does not kill a live runner.',\n    default: 120,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS: num({\n    desc: 'Time, in seconds, after which a provisioned runner with no recent report, no live provisioner, no live runner session, and no running job is marked failed by backend maintenance.',\n    default: 300,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT: num({\n    desc: 'Maximum number of stale provisioned runners the maintenance worker marks failed in one run. Higher values clear backlogs faster but hold database locks longer.',\n    default: 100,\n  }),\n  RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between runner session liveness writes from job request polls. Set this lower than RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS so active idle runners stay fresh.',\n    default: 10,\n  }),\n  RUNNER_SESSION_MANUAL_RETENTION_DAYS: num({\n    desc: 'How long manual runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 30,\n  }),\n  RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS: num({\n    desc: 'How long ephemeral runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 7,\n  }),\n  RUNNER_SESSION_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of expired runner sessions maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS: num({\n    desc: 'How long consumed or expired ephemeral registration tokens are retained for audit and debugging before maintenance deletes them, in days. Active tokens that are neither consumed nor expired are never deleted. This window is independent of the runner-session retention windows.',\n    default: 7,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of consumed or expired ephemeral registration tokens maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  PROVISIONER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active provisioners from recent authenticated requests.',\n    default: 120,\n  }),\n  PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between last-seen writes for one provisioner token.',\n    default: 10,\n  }),\n  PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: bool({\n    desc: 'Whether runners_provider_runner_count_divergence includes template_key as a metric label. Use true or false. Defaults to false because template keys can create high-cardinality metric series. Set true only when template keys are bounded and stable.',\n    default: false,\n  }),\n});\n\nconst parsedRunnerReservedLabels = parseLabelList(config.RUNNER_RESERVED_LABELS);\nconst invalidRunnerReservedLabels = findInvalidLabels(parsedRunnerReservedLabels);\n\nif (invalidRunnerReservedLabels.length > 0) {\n  throw new Error(\n    `RUNNER_RESERVED_LABELS contains invalid runner label(s): ${invalidRunnerReservedLabels.join(', ')}`,\n  );\n}\n\nexport const runnerReservedLabels = parsedRunnerReservedLabels;\n\nif (\n  !Number.isInteger(config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS) ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS < 1 ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS >\n    EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS (${config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS}) must be a whole number of seconds between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS', config.RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS],\n  ['RUNNER_CONTROL_SESSION_TTL_SECONDS', config.RUNNER_CONTROL_SESSION_TTL_SECONDS],\n  ['RUNNER_ACTIVATION_TOKEN_TTL_SECONDS', config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS],\n] as const) {\n  if (\n    !Number.isInteger(value) ||\n    value < 1 ||\n    value > RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS\n  ) {\n    throw new Error(\n      `${name} (${value}) must be a whole number of seconds between 1 and ${RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    );\n  }\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS) ||\n  config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS (${config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS) ||\n  config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS < 0\n) {\n  throw new Error(\n    `RUNNER_ASSIGNMENT_POLL_INTERVAL_MS (${config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS}) must be a whole number >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.REGISTRATION_TOKEN_BATCH_MAX) ||\n  config.REGISTRATION_TOKEN_BATCH_MAX < 1 ||\n  config.REGISTRATION_TOKEN_BATCH_MAX > REGISTRATION_TOKEN_BATCH_HARD_MAX\n) {\n  throw new Error(\n    `REGISTRATION_TOKEN_BATCH_MAX (${config.REGISTRATION_TOKEN_BATCH_MAX}) must be a whole number between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS', config.PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS],\n  ['PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS', config.PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS],\n  ['EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS', config.EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS],\n  [\n    'EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS',\n    config.EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS,\n  ],\n  ['RUNNERS_RATE_LIMIT_TIMEOUT_MS', config.RUNNERS_RATE_LIMIT_TIMEOUT_MS],\n] as const) {\n  if (!Number.isInteger(value) || value < 1) {\n    throw new Error(`${name} (${value}) must be a whole number >= 1.`);\n  }\n}\n\nif (!Number.isInteger(config.RESERVATION_TTL_SECONDS) || config.RESERVATION_TTL_SECONDS < 1) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_TTL_MAX_SECONDS) ||\n  config.RESERVATION_TTL_MAX_SECONDS < 1 ||\n  config.RESERVATION_TTL_MAX_SECONDS > RESERVATION_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}) must be a whole number of seconds between 1 and ${RESERVATION_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nif (config.RESERVATION_TTL_SECONDS > config.RESERVATION_TTL_MAX_SECONDS) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must not be greater than RESERVATION_TTL_MAX_SECONDS (${config.RESERVATION_TTL_MAX_SECONDS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS) ||\n  config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS < 0\n) {\n  throw new Error(\n    `RESERVATION_LONG_POLL_MAX_WAIT_SECONDS (${config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS}) must be a whole number of seconds >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_INTERVAL_MS) ||\n  config.RESERVATION_POLL_INTERVAL_MS < 1\n) {\n  throw new Error(\n    `RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}) must be a whole number of milliseconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_MAX_INTERVAL_MS) ||\n  config.RESERVATION_POLL_MAX_INTERVAL_MS < config.RESERVATION_POLL_INTERVAL_MS\n) {\n  throw new Error(\n    `RESERVATION_POLL_MAX_INTERVAL_MS (${config.RESERVATION_POLL_MAX_INTERVAL_MS}) must be a whole number of milliseconds >= RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ACTIVE_WINDOW_SECONDS) ||\n  config.RUNNER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ACTIVE_WINDOW_SECONDS (${config.RUNNER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS) ||\n  config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS (${config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS) ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS < 1 ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS >= STUCK_JOB_THRESHOLD_SECONDS\n) {\n  throw new Error(\n    `RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS (${config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS}) must be a whole number of seconds >= 1 and < ${STUCK_JOB_THRESHOLD_SECONDS}.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS) ||\n  config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS (${config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT (${config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS) ||\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_MANUAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_MANUAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_MANUAL_RETENTION_DAYS (${config.RUNNER_SESSION_MANUAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS (${config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_GC_BATCH_SIZE) ||\n  config.RUNNER_SESSION_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_GC_BATCH_SIZE (${config.RUNNER_SESSION_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS) ||\n  config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS (${config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE) ||\n  config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE (${config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_ACTIVE_WINDOW_SECONDS) ||\n  config.PROVISIONER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_ACTIVE_WINDOW_SECONDS (${config.PROVISIONER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS) ||\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}).`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}).`,\n  );\n}\n"],"names":["RUNNER_ASSIGNMENT_POLL_DEFAULT_WAIT_SECONDS","bool","createConfig","num","str","findInvalidLabels","parseLabelList","STUCK_JOB_THRESHOLD_SECONDS","EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS","REGISTRATION_TOKEN_BATCH_HARD_MAX","RUNNER_CONTROL_PLANE_TOKEN_TTL_HARD_MAX_SECONDS","RESERVATION_TTL_HARD_MAX_SECONDS","config","RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS","desc","default","RUNNER_CONTROL_SESSION_TTL_SECONDS","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS","RUNNER_ASSIGNMENT_POLL_INTERVAL_MS","RUNNER_RESERVED_LABELS","EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS","REGISTRATION_TOKEN_BATCH_MAX","PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS","PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS","EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS","EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS","RUNNERS_RATE_LIMIT_TIMEOUT_MS","RESERVATION_TTL_SECONDS","RESERVATION_TTL_MAX_SECONDS","RESERVATION_LONG_POLL_MAX_WAIT_SECONDS","RESERVATION_POLL_INTERVAL_MS","RESERVATION_POLL_MAX_INTERVAL_MS","RUNNER_ACTIVE_WINDOW_SECONDS","RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS","RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS","RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT","RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS","RUNNER_SESSION_MANUAL_RETENTION_DAYS","RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS","RUNNER_SESSION_GC_BATCH_SIZE","RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS","RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE","PROVISIONER_ACTIVE_WINDOW_SECONDS","PROVISIONER_LAST_SEEN_THROTTLE_SECONDS","PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED","parsedRunnerReservedLabels","invalidRunnerReservedLabels","length","Error","join","runnerReservedLabels","Number","isInteger","name","value"],"mappings":"AAAA,SAAQA,2CAA2C,QAAO,2BAA2B;AACrF,SAAQC,IAAI,EAAEC,YAAY,EAAEC,GAAG,EAAEC,GAAG,QAAO,kBAAkB;AAC7D,SAAQC,iBAAiB,EAAEC,cAAc,QAAO,yBAAyB;AACzE,SAAQC,2BAA2B,QAAO,8BAA8B;AAExE,MAAMC,oDAAoD;AAC1D,MAAMC,oCAAoC;AAC1C,MAAMC,kDAAkD;AACxD,MAAMC,mCAAmC;AAEzC,OAAO,MAAMC,SAASV,aAAa;IACjCW,oCAAoCV,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAC,oCAAoCb,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAE,qCAAqCd,IAAI;QACvCW,MAAM;QACNC,SAAS;IACX;IACAG,yCAAyCf,IAAI;QAC3CW,MAAM;QACNC,SAASf;IACX;IACAmB,oCAAoChB,IAAI;QACtCW,MAAM;QACNC,SAAS;IACX;IACAK,wBAAwBhB,IAAI;QAC1BU,MAAM;QACNC,SAAS;IACX;IACAM,0CAA0ClB,IAAI;QAC5CW,MAAM,CAAC,oKAAoK,EAAEN,kDAAkD,CAAC,CAAC;QACjOO,SAAS;IACX;IACAO,8BAA8BnB,IAAI;QAChCW,MAAM,CAAC,iHAAiH,EAAEL,kCAAkC,CAAC,CAAC;QAC9JM,SAAS;IACX;IACAQ,0CAA0CpB,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAS,4CAA4CrB,IAAI;QAC9CW,MAAM;QACNC,SAAS;IACX;IACAU,4CAA4CtB,IAAI;QAC9CW,MAAM;QACNC,SAAS;IACX;IACAW,8CAA8CvB,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAY,+BAA+BxB,IAAI;QACjCW,MAAM;QACNC,SAAS;IACX;IACAa,yBAAyBzB,IAAI;QAC3BW,MAAM;QACNC,SAAS;IACX;IACAc,6BAA6B1B,IAAI;QAC/BW,MAAM,CAAC,uSAAuS,EAAEH,iCAAiC,CAAC,CAAC;QACnVI,SAAS;IACX;IACAe,wCAAwC3B,IAAI;QAC1CW,MAAM;QACNC,SAAS;IACX;IACAgB,8BAA8B5B,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACAiB,kCAAkC7B,IAAI;QACpCW,MAAM;QACNC,SAAS;IACX;IACAkB,8BAA8B9B,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACAmB,8CAA8C/B,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAoB,yCAAyChC,IAAI;QAC3CW,MAAM;QACNC,SAAS;IACX;IACAqB,0CAA0CjC,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAsB,mDAAmDlC,IAAI;QACrDW,MAAM;QACNC,SAAS;IACX;IACAuB,8CAA8CnC,IAAI;QAChDW,MAAM;QACNC,SAAS;IACX;IACAwB,0CAA0CpC,IAAI;QAC5CW,MAAM;QACNC,SAAS;IACX;IACAyB,sCAAsCrC,IAAI;QACxCW,MAAM;QACNC,SAAS;IACX;IACA0B,yCAAyCtC,IAAI;QAC3CW,MAAM;QACNC,SAAS;IACX;IACA2B,8BAA8BvC,IAAI;QAChCW,MAAM;QACNC,SAAS;IACX;IACA4B,uCAAuCxC,IAAI;QACzCW,MAAM;QACNC,SAAS;IACX;IACA6B,sCAAsCzC,IAAI;QACxCW,MAAM;QACNC,SAAS;IACX;IACA8B,mCAAmC1C,IAAI;QACrCW,MAAM;QACNC,SAAS;IACX;IACA+B,wCAAwC3C,IAAI;QAC1CW,MAAM;QACNC,SAAS;IACX;IACAgC,gEAAgE9C,KAAK;QACnEa,MAAM;QACNC,SAAS;IACX;AACF,GAAG;AAEH,MAAMiC,6BAA6B1C,eAAeM,OAAOQ,sBAAsB;AAC/E,MAAM6B,8BAA8B5C,kBAAkB2C;AAEtD,IAAIC,4BAA4BC,MAAM,GAAG,GAAG;IAC1C,MAAM,IAAIC,MACR,CAAC,yDAAyD,EAAEF,4BAA4BG,IAAI,CAAC,OAAO;AAExG;AAEA,OAAO,MAAMC,uBAAuBL,2BAA2B;AAE/D,IACE,CAACM,OAAOC,SAAS,CAAC3C,OAAOS,wCAAwC,KACjET,OAAOS,wCAAwC,GAAG,KAClDT,OAAOS,wCAAwC,GAC7Cb,mDACF;IACA,MAAM,IAAI2C,MACR,CAAC,0CAA0C,EAAEvC,OAAOS,wCAAwC,CAAC,kDAAkD,EAAEb,kDAAkD,CAAC,CAAC;AAEzM;AAEA,KAAK,MAAM,CAACgD,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAAsC7C,OAAOC,kCAAkC;KAAC;IACjF;QAAC;QAAsCD,OAAOI,kCAAkC;KAAC;IACjF;QAAC;QAAuCJ,OAAOK,mCAAmC;KAAC;CACpF,CAAW;IACV,IACE,CAACqC,OAAOC,SAAS,CAACE,UAClBA,QAAQ,KACRA,QAAQ/C,iDACR;QACA,MAAM,IAAIyC,MACR,GAAGK,KAAK,EAAE,EAAEC,MAAM,kDAAkD,EAAE/C,gDAAgD,CAAC,CAAC;IAE5H;AACF;AAEA,IACE,CAAC4C,OAAOC,SAAS,CAAC3C,OAAOM,uCAAuC,KAChEN,OAAOM,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIiC,MACR,CAAC,yCAAyC,EAAEvC,OAAOM,uCAAuC,CAAC,8BAA8B,CAAC;AAE9H;AAEA,IACE,CAACoC,OAAOC,SAAS,CAAC3C,OAAOO,kCAAkC,KAC3DP,OAAOO,kCAAkC,GAAG,GAC5C;IACA,MAAM,IAAIgC,MACR,CAAC,oCAAoC,EAAEvC,OAAOO,kCAAkC,CAAC,8BAA8B,CAAC;AAEpH;AAEA,IACE,CAACmC,OAAOC,SAAS,CAAC3C,OAAOU,4BAA4B,KACrDV,OAAOU,4BAA4B,GAAG,KACtCV,OAAOU,4BAA4B,GAAGb,mCACtC;IACA,MAAM,IAAI0C,MACR,CAAC,8BAA8B,EAAEvC,OAAOU,4BAA4B,CAAC,uCAAuC,EAAEb,kCAAkC,CAAC,CAAC;AAEtJ;AAEA,KAAK,MAAM,CAAC+C,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAA4C7C,OAAOW,wCAAwC;KAAC;IAC7F;QAAC;QAA8CX,OAAOY,0CAA0C;KAAC;IACjG;QAAC;QAA8CZ,OAAOa,0CAA0C;KAAC;IACjG;QACE;QACAb,OAAOc,4CAA4C;KACpD;IACD;QAAC;QAAiCd,OAAOe,6BAA6B;KAAC;CACxE,CAAW;IACV,IAAI,CAAC2B,OAAOC,SAAS,CAACE,UAAUA,QAAQ,GAAG;QACzC,MAAM,IAAIN,MAAM,GAAGK,KAAK,EAAE,EAAEC,MAAM,8BAA8B,CAAC;IACnE;AACF;AAEA,IAAI,CAACH,OAAOC,SAAS,CAAC3C,OAAOgB,uBAAuB,KAAKhB,OAAOgB,uBAAuB,GAAG,GAAG;IAC3F,MAAM,IAAIuB,MACR,CAAC,yBAAyB,EAAEvC,OAAOgB,uBAAuB,CAAC,yCAAyC,CAAC;AAEzG;AAEA,IACE,CAAC0B,OAAOC,SAAS,CAAC3C,OAAOiB,2BAA2B,KACpDjB,OAAOiB,2BAA2B,GAAG,KACrCjB,OAAOiB,2BAA2B,GAAGlB,kCACrC;IACA,MAAM,IAAIwC,MACR,CAAC,6BAA6B,EAAEvC,OAAOiB,2BAA2B,CAAC,kDAAkD,EAAElB,iCAAiC,CAAC,CAAC;AAE9J;AAEA,IAAIC,OAAOgB,uBAAuB,GAAGhB,OAAOiB,2BAA2B,EAAE;IACvE,MAAM,IAAIsB,MACR,CAAC,yBAAyB,EAAEvC,OAAOgB,uBAAuB,CAAC,wDAAwD,EAAEhB,OAAOiB,2BAA2B,CAAC,EAAE,CAAC;AAE/J;AAEA,IACE,CAACyB,OAAOC,SAAS,CAAC3C,OAAOkB,sCAAsC,KAC/DlB,OAAOkB,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIqB,MACR,CAAC,wCAAwC,EAAEvC,OAAOkB,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACE,CAACwB,OAAOC,SAAS,CAAC3C,OAAOmB,4BAA4B,KACrDnB,OAAOmB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIoB,MACR,CAAC,8BAA8B,EAAEvC,OAAOmB,4BAA4B,CAAC,8CAA8C,CAAC;AAExH;AAEA,IACE,CAACuB,OAAOC,SAAS,CAAC3C,OAAOoB,gCAAgC,KACzDpB,OAAOoB,gCAAgC,GAAGpB,OAAOmB,4BAA4B,EAC7E;IACA,MAAM,IAAIoB,MACR,CAAC,kCAAkC,EAAEvC,OAAOoB,gCAAgC,CAAC,0EAA0E,EAAEpB,OAAOmB,4BAA4B,CAAC,EAAE,CAAC;AAEpM;AAEA,IACE,CAACuB,OAAOC,SAAS,CAAC3C,OAAOqB,4BAA4B,KACrDrB,OAAOqB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIkB,MACR,CAAC,8BAA8B,EAAEvC,OAAOqB,4BAA4B,CAAC,yCAAyC,CAAC;AAEnH;AAEA,IACE,CAACqB,OAAOC,SAAS,CAAC3C,OAAOsB,4CAA4C,KACrEtB,OAAOsB,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIiB,MACR,CAAC,8CAA8C,EAAEvC,OAAOsB,4CAA4C,CAAC,yCAAyC,CAAC;AAEnJ;AAEA,IACE,CAACoB,OAAOC,SAAS,CAAC3C,OAAOuB,uCAAuC,KAChEvB,OAAOuB,uCAAuC,GAAG,KACjDvB,OAAOuB,uCAAuC,IAAI5B,6BAClD;IACA,MAAM,IAAI4C,MACR,CAAC,yCAAyC,EAAEvC,OAAOuB,uCAAuC,CAAC,+CAA+C,EAAE5B,4BAA4B,CAAC,CAAC;AAE9K;AAEA,IACE,CAAC+C,OAAOC,SAAS,CAAC3C,OAAOwB,wCAAwC,KACjExB,OAAOwB,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIe,MACR,CAAC,0CAA0C,EAAEvC,OAAOwB,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACkB,OAAOC,SAAS,CAAC3C,OAAOyB,iDAAiD,KAC1EzB,OAAOyB,iDAAiD,GAAG,GAC3D;IACA,MAAM,IAAIc,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,yCAAyC,CAAC;AAE7J;AAEA,IACE,CAACiB,OAAOC,SAAS,CAAC3C,OAAO0B,4CAA4C,KACrE1B,OAAO0B,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIa,MACR,CAAC,8CAA8C,EAAEvC,OAAO0B,4CAA4C,CAAC,8BAA8B,CAAC;AAExI;AAEA,IACE,CAACgB,OAAOC,SAAS,CAAC3C,OAAO2B,wCAAwC,KACjE3B,OAAO2B,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIY,MACR,CAAC,0CAA0C,EAAEvC,OAAO2B,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACe,OAAOC,SAAS,CAAC3C,OAAO4B,oCAAoC,KAC7D5B,OAAO4B,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIW,MACR,CAAC,sCAAsC,EAAEvC,OAAO4B,oCAAoC,CAAC,sCAAsC,CAAC;AAEhI;AAEA,IACE,CAACc,OAAOC,SAAS,CAAC3C,OAAO6B,uCAAuC,KAChE7B,OAAO6B,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIU,MACR,CAAC,yCAAyC,EAAEvC,OAAO6B,uCAAuC,CAAC,sCAAsC,CAAC;AAEtI;AAEA,IACE,CAACa,OAAOC,SAAS,CAAC3C,OAAO8B,4BAA4B,KACrD9B,OAAO8B,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIS,MACR,CAAC,8BAA8B,EAAEvC,OAAO8B,4BAA4B,CAAC,8BAA8B,CAAC;AAExG;AAEA,IACE,CAACY,OAAOC,SAAS,CAAC3C,OAAO+B,qCAAqC,KAC9D/B,OAAO+B,qCAAqC,GAAG,GAC/C;IACA,MAAM,IAAIQ,MACR,CAAC,uCAAuC,EAAEvC,OAAO+B,qCAAqC,CAAC,sCAAsC,CAAC;AAElI;AAEA,IACE,CAACW,OAAOC,SAAS,CAAC3C,OAAOgC,oCAAoC,KAC7DhC,OAAOgC,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIO,MACR,CAAC,sCAAsC,EAAEvC,OAAOgC,oCAAoC,CAAC,8BAA8B,CAAC;AAExH;AAEA,IACE,CAACU,OAAOC,SAAS,CAAC3C,OAAOiC,iCAAiC,KAC1DjC,OAAOiC,iCAAiC,GAAG,GAC3C;IACA,MAAM,IAAIM,MACR,CAAC,mCAAmC,EAAEvC,OAAOiC,iCAAiC,CAAC,yCAAyC,CAAC;AAE7H;AAEA,IACE,CAACS,OAAOC,SAAS,CAAC3C,OAAOkC,sCAAsC,KAC/DlC,OAAOkC,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIK,MACR,CAAC,wCAAwC,EAAEvC,OAAOkC,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACElC,OAAOyB,iDAAiD,IACxDzB,OAAOkC,sCAAsC,EAC7C;IACA,MAAM,IAAIK,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,+DAA+D,EAAEzB,OAAOkC,sCAAsC,CAAC,EAAE,CAAC;AAErO;AAEA,IACElC,OAAOyB,iDAAiD,IACxDzB,OAAO2B,wCAAwC,EAC/C;IACA,MAAM,IAAIY,MACR,CAAC,mDAAmD,EAAEvC,OAAOyB,iDAAiD,CAAC,iEAAiE,EAAEzB,OAAO2B,wCAAwC,CAAC,EAAE,CAAC;AAEzO"}

package/dist/core/runner-control-sessions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner-control-sessions.d.ts","sourceRoot":"","sources":["../../src/core/runner-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,0BAA0B,CAAC;AAyBxE,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,cAGC;CACF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,cAGC;CACF;AAED,wBAAsB,wCAAwC,CAAC,MAAM,EAAE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,KAAK,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAgCrE;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAC,CAAC,CA8BpF;AAED,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,MAAM;;;;eAmBjE;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAsFzB;AAYD,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnB;AAED,wBAAsB,yBAAyB,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAW9F"}
+{"version":3,"file":"runner-control-sessions.d.ts","sourceRoot":"","sources":["../../src/core/runner-control-sessions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,0BAA0B,CAAC;AAyBxE,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,cAGC;CACF;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,cAGC;CACF;AAED,wBAAsB,wCAAwC,CAAC,MAAM,EAAE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,KAAK,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,CAAC,CAAC;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,KAAK,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAgCrE;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAC,CAAC,CA8BpF;AAED,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,MAAM;;;;eAmBjE;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE;IACvD,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA2GzB;AAYD,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnB;AAED,wBAAsB,yBAAyB,CAAC,gBAAgB,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAW9F"}

package/dist/core/runner-control-sessions.js

@@ -93,14 +93,26 @@ export async function enrollRunnerControlSession(params) {
         }).from(providerRunners).innerJoin(provisionerTokens, eq(provisionerTokens.id, providerRunners.provisionerId)).where(and(eq(providerRunners.id, params.runnerInstanceId), eq(providerRunners.provisionerId, params.provisionerId)));
         if (!current) throw new RunnerControlSessionInvalidError();
         if (current.intendedReservationId) await tx.execute(sql`select pg_advisory_xact_lock(hashtext(${`runners_assignment:${params.provisionerId}:${current.intendedReservationId}`}))`);
-        const [updated] = await tx.update(providerRunners).set({
+        // Provider reports may populate reservationId before the assignment commits. assignedAt is
+        // written by the assignment transaction, so keep the guard on that write boundary.
+        const [metadataUpdated] = await tx.update(providerRunners).set({
             labels: sanitizeRunnerLabels(params.labels, {
                 scope: current.provisionerScope,
                 source: 'runner control enrollment'
             }),
             providerKind: params.providerKind,
             protocolVersion: params.protocolVersion,
-            capabilities: params.capabilities ?? null,
+            capabilities: params.capabilities ?? null
+        }).where(and(eq(providerRunners.id, params.runnerInstanceId), eq(providerRunners.provisionerId, params.provisionerId), isNull(providerRunners.assignedAt), notInArray(providerRunners.state, [
+            ...terminalStates
+        ]))).returning({
+            id: providerRunners.id
+        });
+        if (!metadataUpdated) logger().debug({
+            runnerInstanceId: params.runnerInstanceId,
+            provisionerId: params.provisionerId
+        }, 'Runner enrollment metadata update skipped for assigned or terminal runner');
+        const [updated] = await tx.update(providerRunners).set({
             state: 'running',
             reportedAt: sql`now()`,
             updatedAt: sql`now()`

package/dist/core/runner-control-sessions.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/runner-control-sessions.ts"],"sourcesContent":["import type {RunnerToolCapabilitiesDto} from '@shipfox/api-runners-dto';\nimport type {NodePgDatabase} from '@shipfox/node-drizzle';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {extractDisplayPrefix, generateOpaqueToken, hashOpaqueToken} from '@shipfox/node-tokens';\nimport {and, eq, gt, isNull, notInArray, or, sql} from 'drizzle-orm';\nimport {config} from '#config.js';\nimport {\n  ReservationExpiredError,\n  ReservationNotFoundError,\n  RunnerInstanceAlreadyAssignedError,\n  RunnerInstanceNotAssignableError,\n} from '#core/errors.js';\nimport {sanitizeRunnerLabels} from '#core/runner-labels.js';\nimport {db, type schema, type Tx} from '#db/db.js';\nimport {assignRunnerInstancesTx} from '#db/runner-assignments.js';\nimport {terminalStates} from '#db/runner-instances.js';\nimport {provisionerTokens} from '#db/schema/provisioner-tokens.js';\nimport {runnerBootstrapTokens, runnerControlSessions} from '#db/schema/runner-control-sessions.js';\nimport {providerRunners} from '#db/schema/runner-instances.js';\nimport {\n  type RunnerReservationPromotionFailureReason,\n  recordRunnerReservationPromotionFailure,\n} from '#metrics/index.js';\nimport {issueRunnerActivationTokenTx} from './runner-activation.js';\n\nexport class RunnerBootstrapTokenInvalidError extends Error {\n  constructor() {\n    super('Runner bootstrap token is invalid, expired, or has already been used');\n    this.name = 'RunnerBootstrapTokenInvalidError';\n  }\n}\n\nexport class RunnerControlSessionInvalidError extends Error {\n  constructor() {\n    super('Runner control session is invalid, expired, or closed');\n    this.name = 'RunnerControlSessionInvalidError';\n  }\n}\n\nexport async function createRunnerInstancesWithBootstrapTokens(params: {\n  provisionerId: string;\n  providerKind?: string | null;\n  runnerInstances: Array<{\n    templateKey?: string | null;\n    reservationId?: string | null;\n  }>;\n  ttlSeconds: number;\n}): Promise<Array<{runnerInstanceId: string; bootstrapToken: string}>> {\n  const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);\n  return await db().transaction(async (tx) => {\n    const instances = await tx\n      .insert(providerRunners)\n      .values(\n        params.runnerInstances.map((runner) => ({\n          provisionerId: params.provisionerId,\n          providerKind: params.providerKind ?? null,\n          templateKey: runner.templateKey ?? null,\n          intendedReservationId: runner.reservationId ?? null,\n          state: 'starting' as const,\n          labels: [],\n          reportedAt: new Date(),\n        })),\n      )\n      .returning({id: providerRunners.id});\n    const results = instances.map((instance) => ({\n      runnerInstanceId: instance.id,\n      bootstrapToken: generateOpaqueToken('runnerBootstrapToken'),\n    }));\n    await tx.insert(runnerBootstrapTokens).values(\n      results.map((result) => ({\n        runnerInstanceId: result.runnerInstanceId,\n        provisionerId: params.provisionerId,\n        hashedToken: hashOpaqueToken(result.bootstrapToken),\n        prefix: extractDisplayPrefix(result.bootstrapToken),\n        expiresAt,\n      })),\n    );\n    return results;\n  });\n}\n\nexport async function exchangeRunnerBootstrapToken(params: {\n  rawToken: string;\n  ttlSeconds: number;\n}): Promise<{runnerInstanceId: string; controlSessionToken: string; expiresAt: Date}> {\n  const controlSessionToken = generateOpaqueToken('runnerControlSession');\n  const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);\n  return await db().transaction(async (tx) => {\n    const [bootstrap] = await tx\n      .update(runnerBootstrapTokens)\n      .set({consumedAt: sql`now()`})\n      .where(\n        and(\n          eq(runnerBootstrapTokens.hashedToken, hashOpaqueToken(params.rawToken)),\n          isNull(runnerBootstrapTokens.consumedAt),\n          isNull(runnerBootstrapTokens.revokedAt),\n          gt(runnerBootstrapTokens.expiresAt, sql`now()`),\n        ),\n      )\n      .returning();\n    if (!bootstrap) throw new RunnerBootstrapTokenInvalidError();\n    const [session] = await tx\n      .insert(runnerControlSessions)\n      .values({\n        runnerInstanceId: bootstrap.runnerInstanceId,\n        provisionerId: bootstrap.provisionerId,\n        hashedToken: hashOpaqueToken(controlSessionToken),\n        prefix: extractDisplayPrefix(controlSessionToken),\n        expiresAt,\n      })\n      .returning({id: runnerControlSessions.id});\n    if (!session) throw new Error('Runner control session insert returned no row');\n    return {runnerInstanceId: bootstrap.runnerInstanceId, controlSessionToken, expiresAt};\n  });\n}\n\nexport async function resolveRunnerControlSession(rawToken: string) {\n  const [session] = await db()\n    .select({\n      id: runnerControlSessions.id,\n      runnerInstanceId: runnerControlSessions.runnerInstanceId,\n      provisionerId: runnerControlSessions.provisionerId,\n    })\n    .from(runnerControlSessions)\n    .leftJoin(provisionerTokens, eq(provisionerTokens.id, runnerControlSessions.provisionerId))\n    .where(\n      and(\n        eq(runnerControlSessions.hashedToken, hashOpaqueToken(rawToken)),\n        isNull(runnerControlSessions.closedAt),\n        or(isNull(provisionerTokens.id), isNull(provisionerTokens.revokedAt)),\n        gt(runnerControlSessions.expiresAt, sql`now()`),\n      ),\n    )\n    .limit(1);\n  return session;\n}\n\nexport async function enrollRunnerControlSession(params: {\n  runnerInstanceId: string;\n  provisionerId: string;\n  labels: string[];\n  capabilities?: RunnerToolCapabilitiesDto | null;\n  providerKind: string;\n  protocolVersion: string;\n}): Promise<string | null> {\n  return await db().transaction(async (tx) => {\n    const [current] = await tx\n      .select({\n        intendedReservationId: providerRunners.intendedReservationId,\n        provisionerScope: provisionerTokens.scope,\n      })\n      .from(providerRunners)\n      .innerJoin(provisionerTokens, eq(provisionerTokens.id, providerRunners.provisionerId))\n      .where(\n        and(\n          eq(providerRunners.id, params.runnerInstanceId),\n          eq(providerRunners.provisionerId, params.provisionerId),\n        ),\n      );\n    if (!current) throw new RunnerControlSessionInvalidError();\n    if (current.intendedReservationId)\n      await tx.execute(\n        sql`select pg_advisory_xact_lock(hashtext(${`runners_assignment:${params.provisionerId}:${current.intendedReservationId}`}))`,\n      );\n\n    const [updated] = await tx\n      .update(providerRunners)\n      .set({\n        labels: sanitizeRunnerLabels(params.labels, {\n          scope: current.provisionerScope,\n          source: 'runner control enrollment',\n        }),\n        providerKind: params.providerKind,\n        protocolVersion: params.protocolVersion,\n        capabilities: params.capabilities ?? null,\n        state: 'running',\n        reportedAt: sql`now()`,\n        updatedAt: sql`now()`,\n      })\n      .where(\n        and(\n          eq(providerRunners.id, params.runnerInstanceId),\n          eq(providerRunners.provisionerId, params.provisionerId),\n          notInArray(providerRunners.state, [...terminalStates]),\n        ),\n      )\n      .returning({\n        id: providerRunners.id,\n        intendedReservationId: providerRunners.intendedReservationId,\n      });\n    if (!updated) throw new RunnerControlSessionInvalidError();\n\n    await updateRunnerControlSessionLastSeen(tx, params.runnerInstanceId, params.provisionerId);\n\n    const intendedReservationId = updated.intendedReservationId;\n    if (!intendedReservationId) return null;\n\n    try {\n      return await tx.transaction(async (promotionTx) => {\n        await assignRunnerInstancesTx(promotionTx, {\n          provisionerId: params.provisionerId,\n          reservationId: intendedReservationId,\n          runnerInstanceIds: [params.runnerInstanceId],\n        });\n        return await issueRunnerActivationTokenTx(promotionTx, {\n          runnerInstanceId: params.runnerInstanceId,\n          provisionerId: params.provisionerId,\n          ttlSeconds: config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS,\n        });\n      });\n    } catch (error) {\n      const expectedFailureReason = getRunnerReservationPromotionFailureReason(error);\n      const details = {\n        err: error,\n        runnerInstanceId: params.runnerInstanceId,\n        provisionerId: params.provisionerId,\n        reservationId: intendedReservationId,\n      };\n      if (expectedFailureReason) {\n        recordRunnerReservationPromotionFailure(expectedFailureReason);\n        logger().debug(details, 'Runner reservation could not be promoted during enrollment');\n      } else {\n        logger().error(\n          details,\n          'Unexpected failure promoting runner reservation during enrollment',\n        );\n      }\n      return null;\n    }\n  });\n}\n\nfunction getRunnerReservationPromotionFailureReason(\n  error: unknown,\n): RunnerReservationPromotionFailureReason | null {\n  if (error instanceof ReservationExpiredError) return 'reservation-expired';\n  if (error instanceof ReservationNotFoundError) return 'reservation-not-found';\n  if (error instanceof RunnerInstanceAlreadyAssignedError) return 'already-assigned';\n  if (error instanceof RunnerInstanceNotAssignableError) return 'not-assignable';\n  return null;\n}\n\nexport async function attachRunnerControlProviderId(params: {\n  runnerInstanceId: string;\n  provisionerId: string;\n  providerRunnerId: string;\n}): Promise<boolean> {\n  const rows = await db()\n    .update(providerRunners)\n    .set({providerRunnerId: params.providerRunnerId, updatedAt: sql`now()`})\n    .where(\n      and(\n        eq(providerRunners.id, params.runnerInstanceId),\n        eq(providerRunners.provisionerId, params.provisionerId),\n        isNull(providerRunners.providerRunnerId),\n        notInArray(providerRunners.state, [...terminalStates]),\n      ),\n    )\n    .returning({id: providerRunners.id});\n  return rows.length === 1;\n}\n\nexport async function touchRunnerControlSession(runnerInstanceId: string, provisionerId: string) {\n  await updateRunnerControlSessionLastSeen(db(), runnerInstanceId, provisionerId);\n  await db()\n    .update(providerRunners)\n    .set({reportedAt: sql`now()`, updatedAt: sql`now()`})\n    .where(\n      and(\n        eq(providerRunners.id, runnerInstanceId),\n        eq(providerRunners.provisionerId, provisionerId),\n      ),\n    );\n}\n\nasync function updateRunnerControlSessionLastSeen(\n  tx: Tx | NodePgDatabase<typeof schema>,\n  runnerInstanceId: string,\n  provisionerId: string,\n) {\n  await tx\n    .update(runnerControlSessions)\n    .set({lastSeenAt: sql`now()`})\n    .where(\n      and(\n        eq(runnerControlSessions.runnerInstanceId, runnerInstanceId),\n        eq(runnerControlSessions.provisionerId, provisionerId),\n        isNull(runnerControlSessions.closedAt),\n      ),\n    );\n}\n"],"names":["logger","extractDisplayPrefix","generateOpaqueToken","hashOpaqueToken","and","eq","gt","isNull","notInArray","or","sql","config","ReservationExpiredError","ReservationNotFoundError","RunnerInstanceAlreadyAssignedError","RunnerInstanceNotAssignableError","sanitizeRunnerLabels","db","assignRunnerInstancesTx","terminalStates","provisionerTokens","runnerBootstrapTokens","runnerControlSessions","providerRunners","recordRunnerReservationPromotionFailure","issueRunnerActivationTokenTx","RunnerBootstrapTokenInvalidError","Error","name","RunnerControlSessionInvalidError","createRunnerInstancesWithBootstrapTokens","params","expiresAt","Date","now","ttlSeconds","transaction","tx","instances","insert","values","runnerInstances","map","runner","provisionerId","providerKind","templateKey","intendedReservationId","reservationId","state","labels","reportedAt","returning","id","results","instance","runnerInstanceId","bootstrapToken","result","hashedToken","prefix","exchangeRunnerBootstrapToken","controlSessionToken","bootstrap","update","set","consumedAt","where","rawToken","revokedAt","session","resolveRunnerControlSession","select","from","leftJoin","closedAt","limit","enrollRunnerControlSession","current","provisionerScope","scope","innerJoin","execute","updated","source","protocolVersion","capabilities","updatedAt","updateRunnerControlSessionLastSeen","promotionTx","runnerInstanceIds","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","error","expectedFailureReason","getRunnerReservationPromotionFailureReason","details","err","debug","attachRunnerControlProviderId","rows","providerRunnerId","length","touchRunnerControlSession","lastSeenAt"],"mappings":"AAEA,SAAQA,MAAM,QAAO,8BAA8B;AACnD,SAAQC,oBAAoB,EAAEC,mBAAmB,EAAEC,eAAe,QAAO,uBAAuB;AAChG,SAAQC,GAAG,EAAEC,EAAE,EAAEC,EAAE,EAAEC,MAAM,EAAEC,UAAU,EAAEC,EAAE,EAAEC,GAAG,QAAO,cAAc;AACrE,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,uBAAuB,EACvBC,wBAAwB,EACxBC,kCAAkC,EAClCC,gCAAgC,QAC3B,kBAAkB;AACzB,SAAQC,oBAAoB,QAAO,yBAAyB;AAC5D,SAAQC,EAAE,QAA6B,YAAY;AACnD,SAAQC,uBAAuB,QAAO,4BAA4B;AAClE,SAAQC,cAAc,QAAO,0BAA0B;AACvD,SAAQC,iBAAiB,QAAO,mCAAmC;AACnE,SAAQC,qBAAqB,EAAEC,qBAAqB,QAAO,wCAAwC;AACnG,SAAQC,eAAe,QAAO,iCAAiC;AAC/D,SAEEC,uCAAuC,QAClC,oBAAoB;AAC3B,SAAQC,4BAA4B,QAAO,yBAAyB;AAEpE,OAAO,MAAMC,yCAAyCC;IACpD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,yCAAyCF;IACpD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,eAAeE,yCAAyCC,MAQ9D;IACC,MAAMC,YAAY,IAAIC,KAAKA,KAAKC,GAAG,KAAKH,OAAOI,UAAU,GAAG;IAC5D,OAAO,MAAMlB,KAAKmB,WAAW,CAAC,OAAOC;QACnC,MAAMC,YAAY,MAAMD,GACrBE,MAAM,CAAChB,iBACPiB,MAAM,CACLT,OAAOU,eAAe,CAACC,GAAG,CAAC,CAACC,SAAY,CAAA;gBACtCC,eAAeb,OAAOa,aAAa;gBACnCC,cAAcd,OAAOc,YAAY,IAAI;gBACrCC,aAAaH,OAAOG,WAAW,IAAI;gBACnCC,uBAAuBJ,OAAOK,aAAa,IAAI;gBAC/CC,OAAO;gBACPC,QAAQ,EAAE;gBACVC,YAAY,IAAIlB;YAClB,CAAA,IAEDmB,SAAS,CAAC;YAACC,IAAI9B,gBAAgB8B,EAAE;QAAA;QACpC,MAAMC,UAAUhB,UAAUI,GAAG,CAAC,CAACa,WAAc,CAAA;gBAC3CC,kBAAkBD,SAASF,EAAE;gBAC7BI,gBAAgBvD,oBAAoB;YACtC,CAAA;QACA,MAAMmC,GAAGE,MAAM,CAAClB,uBAAuBmB,MAAM,CAC3Cc,QAAQZ,GAAG,CAAC,CAACgB,SAAY,CAAA;gBACvBF,kBAAkBE,OAAOF,gBAAgB;gBACzCZ,eAAeb,OAAOa,aAAa;gBACnCe,aAAaxD,gBAAgBuD,OAAOD,cAAc;gBAClDG,QAAQ3D,qBAAqByD,OAAOD,cAAc;gBAClDzB;YACF,CAAA;QAEF,OAAOsB;IACT;AACF;AAEA,OAAO,eAAeO,6BAA6B9B,MAGlD;IACC,MAAM+B,sBAAsB5D,oBAAoB;IAChD,MAAM8B,YAAY,IAAIC,KAAKA,KAAKC,GAAG,KAAKH,OAAOI,UAAU,GAAG;IAC5D,OAAO,MAAMlB,KAAKmB,WAAW,CAAC,OAAOC;QACnC,MAAM,CAAC0B,UAAU,GAAG,MAAM1B,GACvB2B,MAAM,CAAC3C,uBACP4C,GAAG,CAAC;YAACC,YAAYxD,GAAG,CAAC,KAAK,CAAC;QAAA,GAC3ByD,KAAK,CACJ/D,IACEC,GAAGgB,sBAAsBsC,WAAW,EAAExD,gBAAgB4B,OAAOqC,QAAQ,IACrE7D,OAAOc,sBAAsB6C,UAAU,GACvC3D,OAAOc,sBAAsBgD,SAAS,GACtC/D,GAAGe,sBAAsBW,SAAS,EAAEtB,GAAG,CAAC,KAAK,CAAC,IAGjD0C,SAAS;QACZ,IAAI,CAACW,WAAW,MAAM,IAAIrC;QAC1B,MAAM,CAAC4C,QAAQ,GAAG,MAAMjC,GACrBE,MAAM,CAACjB,uBACPkB,MAAM,CAAC;YACNgB,kBAAkBO,UAAUP,gBAAgB;YAC5CZ,eAAemB,UAAUnB,aAAa;YACtCe,aAAaxD,gBAAgB2D;YAC7BF,QAAQ3D,qBAAqB6D;YAC7B9B;QACF,GACCoB,SAAS,CAAC;YAACC,IAAI/B,sBAAsB+B,EAAE;QAAA;QAC1C,IAAI,CAACiB,SAAS,MAAM,IAAI3C,MAAM;QAC9B,OAAO;YAAC6B,kBAAkBO,UAAUP,gBAAgB;YAAEM;YAAqB9B;QAAS;IACtF;AACF;AAEA,OAAO,eAAeuC,4BAA4BH,QAAgB;IAChE,MAAM,CAACE,QAAQ,GAAG,MAAMrD,KACrBuD,MAAM,CAAC;QACNnB,IAAI/B,sBAAsB+B,EAAE;QAC5BG,kBAAkBlC,sBAAsBkC,gBAAgB;QACxDZ,eAAetB,sBAAsBsB,aAAa;IACpD,GACC6B,IAAI,CAACnD,uBACLoD,QAAQ,CAACtD,mBAAmBf,GAAGe,kBAAkBiC,EAAE,EAAE/B,sBAAsBsB,aAAa,GACxFuB,KAAK,CACJ/D,IACEC,GAAGiB,sBAAsBqC,WAAW,EAAExD,gBAAgBiE,YACtD7D,OAAOe,sBAAsBqD,QAAQ,GACrClE,GAAGF,OAAOa,kBAAkBiC,EAAE,GAAG9C,OAAOa,kBAAkBiD,SAAS,IACnE/D,GAAGgB,sBAAsBU,SAAS,EAAEtB,GAAG,CAAC,KAAK,CAAC,IAGjDkE,KAAK,CAAC;IACT,OAAON;AACT;AAEA,OAAO,eAAeO,2BAA2B9C,MAOhD;IACC,OAAO,MAAMd,KAAKmB,WAAW,CAAC,OAAOC;QACnC,MAAM,CAACyC,QAAQ,GAAG,MAAMzC,GACrBmC,MAAM,CAAC;YACNzB,uBAAuBxB,gBAAgBwB,qBAAqB;YAC5DgC,kBAAkB3D,kBAAkB4D,KAAK;QAC3C,GACCP,IAAI,CAAClD,iBACL0D,SAAS,CAAC7D,mBAAmBf,GAAGe,kBAAkBiC,EAAE,EAAE9B,gBAAgBqB,aAAa,GACnFuB,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEtB,OAAOyB,gBAAgB,GAC9CnD,GAAGkB,gBAAgBqB,aAAa,EAAEb,OAAOa,aAAa;QAG5D,IAAI,CAACkC,SAAS,MAAM,IAAIjD;QACxB,IAAIiD,QAAQ/B,qBAAqB,EAC/B,MAAMV,GAAG6C,OAAO,CACdxE,GAAG,CAAC,sCAAsC,EAAE,CAAC,mBAAmB,EAAEqB,OAAOa,aAAa,CAAC,CAAC,EAAEkC,QAAQ/B,qBAAqB,EAAE,CAAC,EAAE,CAAC;QAGjI,MAAM,CAACoC,QAAQ,GAAG,MAAM9C,GACrB2B,MAAM,CAACzC,iBACP0C,GAAG,CAAC;YACHf,QAAQlC,qBAAqBe,OAAOmB,MAAM,EAAE;gBAC1C8B,OAAOF,QAAQC,gBAAgB;gBAC/BK,QAAQ;YACV;YACAvC,cAAcd,OAAOc,YAAY;YACjCwC,iBAAiBtD,OAAOsD,eAAe;YACvCC,cAAcvD,OAAOuD,YAAY,IAAI;YACrCrC,OAAO;YACPE,YAAYzC,GAAG,CAAC,KAAK,CAAC;YACtB6E,WAAW7E,GAAG,CAAC,KAAK,CAAC;QACvB,GACCyD,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEtB,OAAOyB,gBAAgB,GAC9CnD,GAAGkB,gBAAgBqB,aAAa,EAAEb,OAAOa,aAAa,GACtDpC,WAAWe,gBAAgB0B,KAAK,EAAE;eAAI9B;SAAe,IAGxDiC,SAAS,CAAC;YACTC,IAAI9B,gBAAgB8B,EAAE;YACtBN,uBAAuBxB,gBAAgBwB,qBAAqB;QAC9D;QACF,IAAI,CAACoC,SAAS,MAAM,IAAItD;QAExB,MAAM2D,mCAAmCnD,IAAIN,OAAOyB,gBAAgB,EAAEzB,OAAOa,aAAa;QAE1F,MAAMG,wBAAwBoC,QAAQpC,qBAAqB;QAC3D,IAAI,CAACA,uBAAuB,OAAO;QAEnC,IAAI;YACF,OAAO,MAAMV,GAAGD,WAAW,CAAC,OAAOqD;gBACjC,MAAMvE,wBAAwBuE,aAAa;oBACzC7C,eAAeb,OAAOa,aAAa;oBACnCI,eAAeD;oBACf2C,mBAAmB;wBAAC3D,OAAOyB,gBAAgB;qBAAC;gBAC9C;gBACA,OAAO,MAAM/B,6BAA6BgE,aAAa;oBACrDjC,kBAAkBzB,OAAOyB,gBAAgB;oBACzCZ,eAAeb,OAAOa,aAAa;oBACnCT,YAAYxB,OAAOgF,mCAAmC;gBACxD;YACF;QACF,EAAE,OAAOC,OAAO;YACd,MAAMC,wBAAwBC,2CAA2CF;YACzE,MAAMG,UAAU;gBACdC,KAAKJ;gBACLpC,kBAAkBzB,OAAOyB,gBAAgB;gBACzCZ,eAAeb,OAAOa,aAAa;gBACnCI,eAAeD;YACjB;YACA,IAAI8C,uBAAuB;gBACzBrE,wCAAwCqE;gBACxC7F,SAASiG,KAAK,CAACF,SAAS;YAC1B,OAAO;gBACL/F,SAAS4F,KAAK,CACZG,SACA;YAEJ;YACA,OAAO;QACT;IACF;AACF;AAEA,SAASD,2CACPF,KAAc;IAEd,IAAIA,iBAAiBhF,yBAAyB,OAAO;IACrD,IAAIgF,iBAAiB/E,0BAA0B,OAAO;IACtD,IAAI+E,iBAAiB9E,oCAAoC,OAAO;IAChE,IAAI8E,iBAAiB7E,kCAAkC,OAAO;IAC9D,OAAO;AACT;AAEA,OAAO,eAAemF,8BAA8BnE,MAInD;IACC,MAAMoE,OAAO,MAAMlF,KAChB+C,MAAM,CAACzC,iBACP0C,GAAG,CAAC;QAACmC,kBAAkBrE,OAAOqE,gBAAgB;QAAEb,WAAW7E,GAAG,CAAC,KAAK,CAAC;IAAA,GACrEyD,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEtB,OAAOyB,gBAAgB,GAC9CnD,GAAGkB,gBAAgBqB,aAAa,EAAEb,OAAOa,aAAa,GACtDrC,OAAOgB,gBAAgB6E,gBAAgB,GACvC5F,WAAWe,gBAAgB0B,KAAK,EAAE;WAAI9B;KAAe,IAGxDiC,SAAS,CAAC;QAACC,IAAI9B,gBAAgB8B,EAAE;IAAA;IACpC,OAAO8C,KAAKE,MAAM,KAAK;AACzB;AAEA,OAAO,eAAeC,0BAA0B9C,gBAAwB,EAAEZ,aAAqB;IAC7F,MAAM4C,mCAAmCvE,MAAMuC,kBAAkBZ;IACjE,MAAM3B,KACH+C,MAAM,CAACzC,iBACP0C,GAAG,CAAC;QAACd,YAAYzC,GAAG,CAAC,KAAK,CAAC;QAAE6E,WAAW7E,GAAG,CAAC,KAAK,CAAC;IAAA,GAClDyD,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEG,mBACvBnD,GAAGkB,gBAAgBqB,aAAa,EAAEA;AAG1C;AAEA,eAAe4C,mCACbnD,EAAsC,EACtCmB,gBAAwB,EACxBZ,aAAqB;IAErB,MAAMP,GACH2B,MAAM,CAAC1C,uBACP2C,GAAG,CAAC;QAACsC,YAAY7F,GAAG,CAAC,KAAK,CAAC;IAAA,GAC3ByD,KAAK,CACJ/D,IACEC,GAAGiB,sBAAsBkC,gBAAgB,EAAEA,mBAC3CnD,GAAGiB,sBAAsBsB,aAAa,EAAEA,gBACxCrC,OAAOe,sBAAsBqD,QAAQ;AAG7C"}
+{"version":3,"sources":["../../src/core/runner-control-sessions.ts"],"sourcesContent":["import type {RunnerToolCapabilitiesDto} from '@shipfox/api-runners-dto';\nimport type {NodePgDatabase} from '@shipfox/node-drizzle';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {extractDisplayPrefix, generateOpaqueToken, hashOpaqueToken} from '@shipfox/node-tokens';\nimport {and, eq, gt, isNull, notInArray, or, sql} from 'drizzle-orm';\nimport {config} from '#config.js';\nimport {\n  ReservationExpiredError,\n  ReservationNotFoundError,\n  RunnerInstanceAlreadyAssignedError,\n  RunnerInstanceNotAssignableError,\n} from '#core/errors.js';\nimport {sanitizeRunnerLabels} from '#core/runner-labels.js';\nimport {db, type schema, type Tx} from '#db/db.js';\nimport {assignRunnerInstancesTx} from '#db/runner-assignments.js';\nimport {terminalStates} from '#db/runner-instances.js';\nimport {provisionerTokens} from '#db/schema/provisioner-tokens.js';\nimport {runnerBootstrapTokens, runnerControlSessions} from '#db/schema/runner-control-sessions.js';\nimport {providerRunners} from '#db/schema/runner-instances.js';\nimport {\n  type RunnerReservationPromotionFailureReason,\n  recordRunnerReservationPromotionFailure,\n} from '#metrics/index.js';\nimport {issueRunnerActivationTokenTx} from './runner-activation.js';\n\nexport class RunnerBootstrapTokenInvalidError extends Error {\n  constructor() {\n    super('Runner bootstrap token is invalid, expired, or has already been used');\n    this.name = 'RunnerBootstrapTokenInvalidError';\n  }\n}\n\nexport class RunnerControlSessionInvalidError extends Error {\n  constructor() {\n    super('Runner control session is invalid, expired, or closed');\n    this.name = 'RunnerControlSessionInvalidError';\n  }\n}\n\nexport async function createRunnerInstancesWithBootstrapTokens(params: {\n  provisionerId: string;\n  providerKind?: string | null;\n  runnerInstances: Array<{\n    templateKey?: string | null;\n    reservationId?: string | null;\n  }>;\n  ttlSeconds: number;\n}): Promise<Array<{runnerInstanceId: string; bootstrapToken: string}>> {\n  const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);\n  return await db().transaction(async (tx) => {\n    const instances = await tx\n      .insert(providerRunners)\n      .values(\n        params.runnerInstances.map((runner) => ({\n          provisionerId: params.provisionerId,\n          providerKind: params.providerKind ?? null,\n          templateKey: runner.templateKey ?? null,\n          intendedReservationId: runner.reservationId ?? null,\n          state: 'starting' as const,\n          labels: [],\n          reportedAt: new Date(),\n        })),\n      )\n      .returning({id: providerRunners.id});\n    const results = instances.map((instance) => ({\n      runnerInstanceId: instance.id,\n      bootstrapToken: generateOpaqueToken('runnerBootstrapToken'),\n    }));\n    await tx.insert(runnerBootstrapTokens).values(\n      results.map((result) => ({\n        runnerInstanceId: result.runnerInstanceId,\n        provisionerId: params.provisionerId,\n        hashedToken: hashOpaqueToken(result.bootstrapToken),\n        prefix: extractDisplayPrefix(result.bootstrapToken),\n        expiresAt,\n      })),\n    );\n    return results;\n  });\n}\n\nexport async function exchangeRunnerBootstrapToken(params: {\n  rawToken: string;\n  ttlSeconds: number;\n}): Promise<{runnerInstanceId: string; controlSessionToken: string; expiresAt: Date}> {\n  const controlSessionToken = generateOpaqueToken('runnerControlSession');\n  const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);\n  return await db().transaction(async (tx) => {\n    const [bootstrap] = await tx\n      .update(runnerBootstrapTokens)\n      .set({consumedAt: sql`now()`})\n      .where(\n        and(\n          eq(runnerBootstrapTokens.hashedToken, hashOpaqueToken(params.rawToken)),\n          isNull(runnerBootstrapTokens.consumedAt),\n          isNull(runnerBootstrapTokens.revokedAt),\n          gt(runnerBootstrapTokens.expiresAt, sql`now()`),\n        ),\n      )\n      .returning();\n    if (!bootstrap) throw new RunnerBootstrapTokenInvalidError();\n    const [session] = await tx\n      .insert(runnerControlSessions)\n      .values({\n        runnerInstanceId: bootstrap.runnerInstanceId,\n        provisionerId: bootstrap.provisionerId,\n        hashedToken: hashOpaqueToken(controlSessionToken),\n        prefix: extractDisplayPrefix(controlSessionToken),\n        expiresAt,\n      })\n      .returning({id: runnerControlSessions.id});\n    if (!session) throw new Error('Runner control session insert returned no row');\n    return {runnerInstanceId: bootstrap.runnerInstanceId, controlSessionToken, expiresAt};\n  });\n}\n\nexport async function resolveRunnerControlSession(rawToken: string) {\n  const [session] = await db()\n    .select({\n      id: runnerControlSessions.id,\n      runnerInstanceId: runnerControlSessions.runnerInstanceId,\n      provisionerId: runnerControlSessions.provisionerId,\n    })\n    .from(runnerControlSessions)\n    .leftJoin(provisionerTokens, eq(provisionerTokens.id, runnerControlSessions.provisionerId))\n    .where(\n      and(\n        eq(runnerControlSessions.hashedToken, hashOpaqueToken(rawToken)),\n        isNull(runnerControlSessions.closedAt),\n        or(isNull(provisionerTokens.id), isNull(provisionerTokens.revokedAt)),\n        gt(runnerControlSessions.expiresAt, sql`now()`),\n      ),\n    )\n    .limit(1);\n  return session;\n}\n\nexport async function enrollRunnerControlSession(params: {\n  runnerInstanceId: string;\n  provisionerId: string;\n  labels: string[];\n  capabilities?: RunnerToolCapabilitiesDto | null;\n  providerKind: string;\n  protocolVersion: string;\n}): Promise<string | null> {\n  return await db().transaction(async (tx) => {\n    const [current] = await tx\n      .select({\n        intendedReservationId: providerRunners.intendedReservationId,\n        provisionerScope: provisionerTokens.scope,\n      })\n      .from(providerRunners)\n      .innerJoin(provisionerTokens, eq(provisionerTokens.id, providerRunners.provisionerId))\n      .where(\n        and(\n          eq(providerRunners.id, params.runnerInstanceId),\n          eq(providerRunners.provisionerId, params.provisionerId),\n        ),\n      );\n    if (!current) throw new RunnerControlSessionInvalidError();\n    if (current.intendedReservationId)\n      await tx.execute(\n        sql`select pg_advisory_xact_lock(hashtext(${`runners_assignment:${params.provisionerId}:${current.intendedReservationId}`}))`,\n      );\n\n    // Provider reports may populate reservationId before the assignment commits. assignedAt is\n    // written by the assignment transaction, so keep the guard on that write boundary.\n    const [metadataUpdated] = await tx\n      .update(providerRunners)\n      .set({\n        labels: sanitizeRunnerLabels(params.labels, {\n          scope: current.provisionerScope,\n          source: 'runner control enrollment',\n        }),\n        providerKind: params.providerKind,\n        protocolVersion: params.protocolVersion,\n        capabilities: params.capabilities ?? null,\n      })\n      .where(\n        and(\n          eq(providerRunners.id, params.runnerInstanceId),\n          eq(providerRunners.provisionerId, params.provisionerId),\n          isNull(providerRunners.assignedAt),\n          notInArray(providerRunners.state, [...terminalStates]),\n        ),\n      )\n      .returning({id: providerRunners.id});\n    if (!metadataUpdated)\n      logger().debug(\n        {runnerInstanceId: params.runnerInstanceId, provisionerId: params.provisionerId},\n        'Runner enrollment metadata update skipped for assigned or terminal runner',\n      );\n\n    const [updated] = await tx\n      .update(providerRunners)\n      .set({\n        state: 'running',\n        reportedAt: sql`now()`,\n        updatedAt: sql`now()`,\n      })\n      .where(\n        and(\n          eq(providerRunners.id, params.runnerInstanceId),\n          eq(providerRunners.provisionerId, params.provisionerId),\n          notInArray(providerRunners.state, [...terminalStates]),\n        ),\n      )\n      .returning({\n        id: providerRunners.id,\n        intendedReservationId: providerRunners.intendedReservationId,\n      });\n    if (!updated) throw new RunnerControlSessionInvalidError();\n\n    await updateRunnerControlSessionLastSeen(tx, params.runnerInstanceId, params.provisionerId);\n\n    const intendedReservationId = updated.intendedReservationId;\n    if (!intendedReservationId) return null;\n\n    try {\n      return await tx.transaction(async (promotionTx) => {\n        await assignRunnerInstancesTx(promotionTx, {\n          provisionerId: params.provisionerId,\n          reservationId: intendedReservationId,\n          runnerInstanceIds: [params.runnerInstanceId],\n        });\n        return await issueRunnerActivationTokenTx(promotionTx, {\n          runnerInstanceId: params.runnerInstanceId,\n          provisionerId: params.provisionerId,\n          ttlSeconds: config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS,\n        });\n      });\n    } catch (error) {\n      const expectedFailureReason = getRunnerReservationPromotionFailureReason(error);\n      const details = {\n        err: error,\n        runnerInstanceId: params.runnerInstanceId,\n        provisionerId: params.provisionerId,\n        reservationId: intendedReservationId,\n      };\n      if (expectedFailureReason) {\n        recordRunnerReservationPromotionFailure(expectedFailureReason);\n        logger().debug(details, 'Runner reservation could not be promoted during enrollment');\n      } else {\n        logger().error(\n          details,\n          'Unexpected failure promoting runner reservation during enrollment',\n        );\n      }\n      return null;\n    }\n  });\n}\n\nfunction getRunnerReservationPromotionFailureReason(\n  error: unknown,\n): RunnerReservationPromotionFailureReason | null {\n  if (error instanceof ReservationExpiredError) return 'reservation-expired';\n  if (error instanceof ReservationNotFoundError) return 'reservation-not-found';\n  if (error instanceof RunnerInstanceAlreadyAssignedError) return 'already-assigned';\n  if (error instanceof RunnerInstanceNotAssignableError) return 'not-assignable';\n  return null;\n}\n\nexport async function attachRunnerControlProviderId(params: {\n  runnerInstanceId: string;\n  provisionerId: string;\n  providerRunnerId: string;\n}): Promise<boolean> {\n  const rows = await db()\n    .update(providerRunners)\n    .set({providerRunnerId: params.providerRunnerId, updatedAt: sql`now()`})\n    .where(\n      and(\n        eq(providerRunners.id, params.runnerInstanceId),\n        eq(providerRunners.provisionerId, params.provisionerId),\n        isNull(providerRunners.providerRunnerId),\n        notInArray(providerRunners.state, [...terminalStates]),\n      ),\n    )\n    .returning({id: providerRunners.id});\n  return rows.length === 1;\n}\n\nexport async function touchRunnerControlSession(runnerInstanceId: string, provisionerId: string) {\n  await updateRunnerControlSessionLastSeen(db(), runnerInstanceId, provisionerId);\n  await db()\n    .update(providerRunners)\n    .set({reportedAt: sql`now()`, updatedAt: sql`now()`})\n    .where(\n      and(\n        eq(providerRunners.id, runnerInstanceId),\n        eq(providerRunners.provisionerId, provisionerId),\n      ),\n    );\n}\n\nasync function updateRunnerControlSessionLastSeen(\n  tx: Tx | NodePgDatabase<typeof schema>,\n  runnerInstanceId: string,\n  provisionerId: string,\n) {\n  await tx\n    .update(runnerControlSessions)\n    .set({lastSeenAt: sql`now()`})\n    .where(\n      and(\n        eq(runnerControlSessions.runnerInstanceId, runnerInstanceId),\n        eq(runnerControlSessions.provisionerId, provisionerId),\n        isNull(runnerControlSessions.closedAt),\n      ),\n    );\n}\n"],"names":["logger","extractDisplayPrefix","generateOpaqueToken","hashOpaqueToken","and","eq","gt","isNull","notInArray","or","sql","config","ReservationExpiredError","ReservationNotFoundError","RunnerInstanceAlreadyAssignedError","RunnerInstanceNotAssignableError","sanitizeRunnerLabels","db","assignRunnerInstancesTx","terminalStates","provisionerTokens","runnerBootstrapTokens","runnerControlSessions","providerRunners","recordRunnerReservationPromotionFailure","issueRunnerActivationTokenTx","RunnerBootstrapTokenInvalidError","Error","name","RunnerControlSessionInvalidError","createRunnerInstancesWithBootstrapTokens","params","expiresAt","Date","now","ttlSeconds","transaction","tx","instances","insert","values","runnerInstances","map","runner","provisionerId","providerKind","templateKey","intendedReservationId","reservationId","state","labels","reportedAt","returning","id","results","instance","runnerInstanceId","bootstrapToken","result","hashedToken","prefix","exchangeRunnerBootstrapToken","controlSessionToken","bootstrap","update","set","consumedAt","where","rawToken","revokedAt","session","resolveRunnerControlSession","select","from","leftJoin","closedAt","limit","enrollRunnerControlSession","current","provisionerScope","scope","innerJoin","execute","metadataUpdated","source","protocolVersion","capabilities","assignedAt","debug","updated","updatedAt","updateRunnerControlSessionLastSeen","promotionTx","runnerInstanceIds","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","error","expectedFailureReason","getRunnerReservationPromotionFailureReason","details","err","attachRunnerControlProviderId","rows","providerRunnerId","length","touchRunnerControlSession","lastSeenAt"],"mappings":"AAEA,SAAQA,MAAM,QAAO,8BAA8B;AACnD,SAAQC,oBAAoB,EAAEC,mBAAmB,EAAEC,eAAe,QAAO,uBAAuB;AAChG,SAAQC,GAAG,EAAEC,EAAE,EAAEC,EAAE,EAAEC,MAAM,EAAEC,UAAU,EAAEC,EAAE,EAAEC,GAAG,QAAO,cAAc;AACrE,SAAQC,MAAM,QAAO,aAAa;AAClC,SACEC,uBAAuB,EACvBC,wBAAwB,EACxBC,kCAAkC,EAClCC,gCAAgC,QAC3B,kBAAkB;AACzB,SAAQC,oBAAoB,QAAO,yBAAyB;AAC5D,SAAQC,EAAE,QAA6B,YAAY;AACnD,SAAQC,uBAAuB,QAAO,4BAA4B;AAClE,SAAQC,cAAc,QAAO,0BAA0B;AACvD,SAAQC,iBAAiB,QAAO,mCAAmC;AACnE,SAAQC,qBAAqB,EAAEC,qBAAqB,QAAO,wCAAwC;AACnG,SAAQC,eAAe,QAAO,iCAAiC;AAC/D,SAEEC,uCAAuC,QAClC,oBAAoB;AAC3B,SAAQC,4BAA4B,QAAO,yBAAyB;AAEpE,OAAO,MAAMC,yCAAyCC;IACpD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,MAAMC,yCAAyCF;IACpD,aAAc;QACZ,KAAK,CAAC;QACN,IAAI,CAACC,IAAI,GAAG;IACd;AACF;AAEA,OAAO,eAAeE,yCAAyCC,MAQ9D;IACC,MAAMC,YAAY,IAAIC,KAAKA,KAAKC,GAAG,KAAKH,OAAOI,UAAU,GAAG;IAC5D,OAAO,MAAMlB,KAAKmB,WAAW,CAAC,OAAOC;QACnC,MAAMC,YAAY,MAAMD,GACrBE,MAAM,CAAChB,iBACPiB,MAAM,CACLT,OAAOU,eAAe,CAACC,GAAG,CAAC,CAACC,SAAY,CAAA;gBACtCC,eAAeb,OAAOa,aAAa;gBACnCC,cAAcd,OAAOc,YAAY,IAAI;gBACrCC,aAAaH,OAAOG,WAAW,IAAI;gBACnCC,uBAAuBJ,OAAOK,aAAa,IAAI;gBAC/CC,OAAO;gBACPC,QAAQ,EAAE;gBACVC,YAAY,IAAIlB;YAClB,CAAA,IAEDmB,SAAS,CAAC;YAACC,IAAI9B,gBAAgB8B,EAAE;QAAA;QACpC,MAAMC,UAAUhB,UAAUI,GAAG,CAAC,CAACa,WAAc,CAAA;gBAC3CC,kBAAkBD,SAASF,EAAE;gBAC7BI,gBAAgBvD,oBAAoB;YACtC,CAAA;QACA,MAAMmC,GAAGE,MAAM,CAAClB,uBAAuBmB,MAAM,CAC3Cc,QAAQZ,GAAG,CAAC,CAACgB,SAAY,CAAA;gBACvBF,kBAAkBE,OAAOF,gBAAgB;gBACzCZ,eAAeb,OAAOa,aAAa;gBACnCe,aAAaxD,gBAAgBuD,OAAOD,cAAc;gBAClDG,QAAQ3D,qBAAqByD,OAAOD,cAAc;gBAClDzB;YACF,CAAA;QAEF,OAAOsB;IACT;AACF;AAEA,OAAO,eAAeO,6BAA6B9B,MAGlD;IACC,MAAM+B,sBAAsB5D,oBAAoB;IAChD,MAAM8B,YAAY,IAAIC,KAAKA,KAAKC,GAAG,KAAKH,OAAOI,UAAU,GAAG;IAC5D,OAAO,MAAMlB,KAAKmB,WAAW,CAAC,OAAOC;QACnC,MAAM,CAAC0B,UAAU,GAAG,MAAM1B,GACvB2B,MAAM,CAAC3C,uBACP4C,GAAG,CAAC;YAACC,YAAYxD,GAAG,CAAC,KAAK,CAAC;QAAA,GAC3ByD,KAAK,CACJ/D,IACEC,GAAGgB,sBAAsBsC,WAAW,EAAExD,gBAAgB4B,OAAOqC,QAAQ,IACrE7D,OAAOc,sBAAsB6C,UAAU,GACvC3D,OAAOc,sBAAsBgD,SAAS,GACtC/D,GAAGe,sBAAsBW,SAAS,EAAEtB,GAAG,CAAC,KAAK,CAAC,IAGjD0C,SAAS;QACZ,IAAI,CAACW,WAAW,MAAM,IAAIrC;QAC1B,MAAM,CAAC4C,QAAQ,GAAG,MAAMjC,GACrBE,MAAM,CAACjB,uBACPkB,MAAM,CAAC;YACNgB,kBAAkBO,UAAUP,gBAAgB;YAC5CZ,eAAemB,UAAUnB,aAAa;YACtCe,aAAaxD,gBAAgB2D;YAC7BF,QAAQ3D,qBAAqB6D;YAC7B9B;QACF,GACCoB,SAAS,CAAC;YAACC,IAAI/B,sBAAsB+B,EAAE;QAAA;QAC1C,IAAI,CAACiB,SAAS,MAAM,IAAI3C,MAAM;QAC9B,OAAO;YAAC6B,kBAAkBO,UAAUP,gBAAgB;YAAEM;YAAqB9B;QAAS;IACtF;AACF;AAEA,OAAO,eAAeuC,4BAA4BH,QAAgB;IAChE,MAAM,CAACE,QAAQ,GAAG,MAAMrD,KACrBuD,MAAM,CAAC;QACNnB,IAAI/B,sBAAsB+B,EAAE;QAC5BG,kBAAkBlC,sBAAsBkC,gBAAgB;QACxDZ,eAAetB,sBAAsBsB,aAAa;IACpD,GACC6B,IAAI,CAACnD,uBACLoD,QAAQ,CAACtD,mBAAmBf,GAAGe,kBAAkBiC,EAAE,EAAE/B,sBAAsBsB,aAAa,GACxFuB,KAAK,CACJ/D,IACEC,GAAGiB,sBAAsBqC,WAAW,EAAExD,gBAAgBiE,YACtD7D,OAAOe,sBAAsBqD,QAAQ,GACrClE,GAAGF,OAAOa,kBAAkBiC,EAAE,GAAG9C,OAAOa,kBAAkBiD,SAAS,IACnE/D,GAAGgB,sBAAsBU,SAAS,EAAEtB,GAAG,CAAC,KAAK,CAAC,IAGjDkE,KAAK,CAAC;IACT,OAAON;AACT;AAEA,OAAO,eAAeO,2BAA2B9C,MAOhD;IACC,OAAO,MAAMd,KAAKmB,WAAW,CAAC,OAAOC;QACnC,MAAM,CAACyC,QAAQ,GAAG,MAAMzC,GACrBmC,MAAM,CAAC;YACNzB,uBAAuBxB,gBAAgBwB,qBAAqB;YAC5DgC,kBAAkB3D,kBAAkB4D,KAAK;QAC3C,GACCP,IAAI,CAAClD,iBACL0D,SAAS,CAAC7D,mBAAmBf,GAAGe,kBAAkBiC,EAAE,EAAE9B,gBAAgBqB,aAAa,GACnFuB,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEtB,OAAOyB,gBAAgB,GAC9CnD,GAAGkB,gBAAgBqB,aAAa,EAAEb,OAAOa,aAAa;QAG5D,IAAI,CAACkC,SAAS,MAAM,IAAIjD;QACxB,IAAIiD,QAAQ/B,qBAAqB,EAC/B,MAAMV,GAAG6C,OAAO,CACdxE,GAAG,CAAC,sCAAsC,EAAE,CAAC,mBAAmB,EAAEqB,OAAOa,aAAa,CAAC,CAAC,EAAEkC,QAAQ/B,qBAAqB,EAAE,CAAC,EAAE,CAAC;QAGjI,2FAA2F;QAC3F,mFAAmF;QACnF,MAAM,CAACoC,gBAAgB,GAAG,MAAM9C,GAC7B2B,MAAM,CAACzC,iBACP0C,GAAG,CAAC;YACHf,QAAQlC,qBAAqBe,OAAOmB,MAAM,EAAE;gBAC1C8B,OAAOF,QAAQC,gBAAgB;gBAC/BK,QAAQ;YACV;YACAvC,cAAcd,OAAOc,YAAY;YACjCwC,iBAAiBtD,OAAOsD,eAAe;YACvCC,cAAcvD,OAAOuD,YAAY,IAAI;QACvC,GACCnB,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEtB,OAAOyB,gBAAgB,GAC9CnD,GAAGkB,gBAAgBqB,aAAa,EAAEb,OAAOa,aAAa,GACtDrC,OAAOgB,gBAAgBgE,UAAU,GACjC/E,WAAWe,gBAAgB0B,KAAK,EAAE;eAAI9B;SAAe,IAGxDiC,SAAS,CAAC;YAACC,IAAI9B,gBAAgB8B,EAAE;QAAA;QACpC,IAAI,CAAC8B,iBACHnF,SAASwF,KAAK,CACZ;YAAChC,kBAAkBzB,OAAOyB,gBAAgB;YAAEZ,eAAeb,OAAOa,aAAa;QAAA,GAC/E;QAGJ,MAAM,CAAC6C,QAAQ,GAAG,MAAMpD,GACrB2B,MAAM,CAACzC,iBACP0C,GAAG,CAAC;YACHhB,OAAO;YACPE,YAAYzC,GAAG,CAAC,KAAK,CAAC;YACtBgF,WAAWhF,GAAG,CAAC,KAAK,CAAC;QACvB,GACCyD,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEtB,OAAOyB,gBAAgB,GAC9CnD,GAAGkB,gBAAgBqB,aAAa,EAAEb,OAAOa,aAAa,GACtDpC,WAAWe,gBAAgB0B,KAAK,EAAE;eAAI9B;SAAe,IAGxDiC,SAAS,CAAC;YACTC,IAAI9B,gBAAgB8B,EAAE;YACtBN,uBAAuBxB,gBAAgBwB,qBAAqB;QAC9D;QACF,IAAI,CAAC0C,SAAS,MAAM,IAAI5D;QAExB,MAAM8D,mCAAmCtD,IAAIN,OAAOyB,gBAAgB,EAAEzB,OAAOa,aAAa;QAE1F,MAAMG,wBAAwB0C,QAAQ1C,qBAAqB;QAC3D,IAAI,CAACA,uBAAuB,OAAO;QAEnC,IAAI;YACF,OAAO,MAAMV,GAAGD,WAAW,CAAC,OAAOwD;gBACjC,MAAM1E,wBAAwB0E,aAAa;oBACzChD,eAAeb,OAAOa,aAAa;oBACnCI,eAAeD;oBACf8C,mBAAmB;wBAAC9D,OAAOyB,gBAAgB;qBAAC;gBAC9C;gBACA,OAAO,MAAM/B,6BAA6BmE,aAAa;oBACrDpC,kBAAkBzB,OAAOyB,gBAAgB;oBACzCZ,eAAeb,OAAOa,aAAa;oBACnCT,YAAYxB,OAAOmF,mCAAmC;gBACxD;YACF;QACF,EAAE,OAAOC,OAAO;YACd,MAAMC,wBAAwBC,2CAA2CF;YACzE,MAAMG,UAAU;gBACdC,KAAKJ;gBACLvC,kBAAkBzB,OAAOyB,gBAAgB;gBACzCZ,eAAeb,OAAOa,aAAa;gBACnCI,eAAeD;YACjB;YACA,IAAIiD,uBAAuB;gBACzBxE,wCAAwCwE;gBACxChG,SAASwF,KAAK,CAACU,SAAS;YAC1B,OAAO;gBACLlG,SAAS+F,KAAK,CACZG,SACA;YAEJ;YACA,OAAO;QACT;IACF;AACF;AAEA,SAASD,2CACPF,KAAc;IAEd,IAAIA,iBAAiBnF,yBAAyB,OAAO;IACrD,IAAImF,iBAAiBlF,0BAA0B,OAAO;IACtD,IAAIkF,iBAAiBjF,oCAAoC,OAAO;IAChE,IAAIiF,iBAAiBhF,kCAAkC,OAAO;IAC9D,OAAO;AACT;AAEA,OAAO,eAAeqF,8BAA8BrE,MAInD;IACC,MAAMsE,OAAO,MAAMpF,KAChB+C,MAAM,CAACzC,iBACP0C,GAAG,CAAC;QAACqC,kBAAkBvE,OAAOuE,gBAAgB;QAAEZ,WAAWhF,GAAG,CAAC,KAAK,CAAC;IAAA,GACrEyD,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEtB,OAAOyB,gBAAgB,GAC9CnD,GAAGkB,gBAAgBqB,aAAa,EAAEb,OAAOa,aAAa,GACtDrC,OAAOgB,gBAAgB+E,gBAAgB,GACvC9F,WAAWe,gBAAgB0B,KAAK,EAAE;WAAI9B;KAAe,IAGxDiC,SAAS,CAAC;QAACC,IAAI9B,gBAAgB8B,EAAE;IAAA;IACpC,OAAOgD,KAAKE,MAAM,KAAK;AACzB;AAEA,OAAO,eAAeC,0BAA0BhD,gBAAwB,EAAEZ,aAAqB;IAC7F,MAAM+C,mCAAmC1E,MAAMuC,kBAAkBZ;IACjE,MAAM3B,KACH+C,MAAM,CAACzC,iBACP0C,GAAG,CAAC;QAACd,YAAYzC,GAAG,CAAC,KAAK,CAAC;QAAEgF,WAAWhF,GAAG,CAAC,KAAK,CAAC;IAAA,GAClDyD,KAAK,CACJ/D,IACEC,GAAGkB,gBAAgB8B,EAAE,EAAEG,mBACvBnD,GAAGkB,gBAAgBqB,aAAa,EAAEA;AAG1C;AAEA,eAAe+C,mCACbtD,EAAsC,EACtCmB,gBAAwB,EACxBZ,aAAqB;IAErB,MAAMP,GACH2B,MAAM,CAAC1C,uBACP2C,GAAG,CAAC;QAACwC,YAAY/F,GAAG,CAAC,KAAK,CAAC;IAAA,GAC3ByD,KAAK,CACJ/D,IACEC,GAAGiB,sBAAsBkC,gBAAgB,EAAEA,mBAC3CnD,GAAGiB,sBAAsBsB,aAAa,EAAEA,gBACxCrC,OAAOe,sBAAsBqD,QAAQ;AAG7C"}

package/dist/db/index.d.ts

@@ -15,7 +15,7 @@ export type { DemandStat, PollDemandAndReserveParams, ReservationGrant, Reservat
 export { deleteExpiredReservations, deleteReservationsByIds, pollDemandAndReserve, releaseReservationUnits, } from './reservations.js';
 export { assignRunnerInstances } from './runner-assignments.js';
 export type { ActiveRunnerInstanceTemplateCount, ReapStaleRunnerInstancesResult, ReconcileRunnerInstancesDbResult, ReconcileRunnerInstancesParams, ReportRunnerInstancesParams, RunnerInstanceReportEvent, RunnerInstanceTerminateIntent, RunnerInstanceTerminateIntentReason, } from './runner-instances.js';
-export { attachRunnerInstanceProviderId, isTerminalState, listActiveRunnerInstanceCountsByTemplateTx, listActiveRunnerInstances, listProvisionerTerminateIntentRowsTx, listProvisionerTerminateIntents, reapStaleRunnerInstances, reconcileRunnerInstances, reportRunnerInstances, } from './runner-instances.js';
+export { attachRunnerInstanceProviderId, countStaleEnrolledRunnerInstances, isTerminalState, listActiveRunnerInstanceCountsByTemplateTx, listActiveRunnerInstances, listProvisionerTerminateIntentRowsTx, listProvisionerTerminateIntents, reapStaleRunnerInstances, reconcileRunnerInstances, reportRunnerInstances, } from './runner-instances.js';
 export type { CreateRunnerSessionParams, DeleteExpiredRunnerSessionsParams, } from './runner-sessions.js';
 export { createRunnerSession, deleteExpiredRunnerSessions } from './runner-sessions.js';
 export { runnersOutbox } from './schema/outbox.js';

package/dist/db/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,mCAAmC,EACnC,8BAA8B,EAC9B,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAC,gCAAgC,EAAC,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAC,MAAM,SAAS,CAAC;AAC5C,YAAY,EACV,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gCAAgC,EAChC,0CAA0C,EAC1C,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,mBAAmB,EACnB,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,0CAA0C,EAC1C,eAAe,EACf,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAC,mCAAmC,EAAC,MAAM,iCAAiC,CAAC;AACzF,OAAO,EACL,6BAA6B,EAC7B,+CAA+C,EAC/C,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,uCAAuC,EACvC,iDAAiD,EACjD,gDAAgD,EAChD,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EACL,2CAA2C,EAC3C,sBAAsB,EACtB,2BAA2B,EAC3B,iCAAiC,EACjC,wCAAwC,EACxC,6BAA6B,EAC7B,2CAA2C,EAC3C,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,UAAU,EACV,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EACV,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,eAAe,EACf,0CAA0C,EAC1C,yBAAyB,EACzB,oCAAoC,EACpC,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,mBAAmB,EAAE,2BAA2B,EAAC,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAC,aAAa,EAAC,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAC,qBAAqB,EAAE,qBAAqB,EAAC,MAAM,qCAAqC,CAAC;AAEjG,eAAO,MAAM,cAAc,QAAoE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,mCAAmC,EACnC,8BAA8B,EAC9B,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAC,gCAAgC,EAAC,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAC,MAAM,SAAS,CAAC;AAC5C,YAAY,EACV,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gCAAgC,EAChC,0CAA0C,EAC1C,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,mBAAmB,EACnB,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,0CAA0C,EAC1C,eAAe,EACf,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAC,mCAAmC,EAAC,MAAM,iCAAiC,CAAC;AACzF,OAAO,EACL,6BAA6B,EAC7B,+CAA+C,EAC/C,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,uCAAuC,EACvC,iDAAiD,EACjD,gDAAgD,EAChD,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EACL,2CAA2C,EAC3C,sBAAsB,EACtB,2BAA2B,EAC3B,iCAAiC,EACjC,wCAAwC,EACxC,6BAA6B,EAC7B,2CAA2C,EAC3C,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,UAAU,EACV,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EACV,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,eAAe,EACf,0CAA0C,EAC1C,yBAAyB,EACzB,oCAAoC,EACpC,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,mBAAmB,EAAE,2BAA2B,EAAC,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAC,aAAa,EAAC,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAC,qBAAqB,EAAE,qBAAqB,EAAC,MAAM,qCAAqC,CAAC;AAEjG,eAAO,MAAM,cAAc,QAAoE,CAAC"}

package/dist/db/index.js

@@ -10,7 +10,7 @@ export { createInstallationProvisionerTokenWithAudit, createProvisionerToken, li
 export { consumeRunnersRateLimit, pruneExpiredRunnersRateLimits } from './rate-limits.js';
 export { deleteExpiredReservations, deleteReservationsByIds, pollDemandAndReserve, releaseReservationUnits } from './reservations.js';
 export { assignRunnerInstances } from './runner-assignments.js';
-export { attachRunnerInstanceProviderId, isTerminalState, listActiveRunnerInstanceCountsByTemplateTx, listActiveRunnerInstances, listProvisionerTerminateIntentRowsTx, listProvisionerTerminateIntents, reapStaleRunnerInstances, reconcileRunnerInstances, reportRunnerInstances } from './runner-instances.js';
+export { attachRunnerInstanceProviderId, countStaleEnrolledRunnerInstances, isTerminalState, listActiveRunnerInstanceCountsByTemplateTx, listActiveRunnerInstances, listProvisionerTerminateIntentRowsTx, listProvisionerTerminateIntents, reapStaleRunnerInstances, reconcileRunnerInstances, reportRunnerInstances } from './runner-instances.js';
 export { createRunnerSession, deleteExpiredRunnerSessions } from './runner-sessions.js';
 export { runnersOutbox } from './schema/outbox.js';
 export { runnerBootstrapTokens, runnerControlSessions } from './schema/runner-control-sessions.js';

package/dist/db/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/db/index.ts"],"sourcesContent":["import {dirname, resolve} from 'node:path';\nimport {fileURLToPath} from 'node:url';\n\nexport type {\n  AdministratorRunnerAssignmentFilter,\n  AdministratorRunnerInstanceRow,\n  ListAdministratorRunnerInstancesParams,\n  ListAdministratorRunnerInstancesResult,\n} from './admin-runner-instances.js';\nexport {listAdministratorRunnerInstances} from './admin-runner-instances.js';\nexport {closeDb, db, schema} from './db.js';\nexport type {\n  CreateEphemeralRegistrationTokenParams,\n  DeleteExpiredEphemeralRegistrationTokensParams,\n} from './ephemeral-registration-tokens.js';\nexport {\n  createEphemeralRegistrationToken,\n  createRunnerSessionConsumingEphemeralToken,\n  deleteExpiredEphemeralRegistrationTokens,\n  resolveEphemeralRegistrationTokenByHash,\n} from './ephemeral-registration-tokens.js';\nexport type {\n  ClaimedJobExecution,\n  EnqueueJobExecutionParams,\n  RunnerInstanceBoundJobExecution,\n} from './job-executions.js';\nexport {\n  cancelRunnerJobs,\n  claimPendingJobExecution,\n  enqueueJobExecution,\n  expireStuckJobExecutions,\n  getWorkspaceJobCounts,\n  isJobLeaseActive,\n  listActiveRunningJobExecutions,\n  listRunningJobExecutionsByRunnerInstanceTx,\n  recordHeartbeat,\n  releaseJobExecution,\n} from './job-executions.js';\nexport type {CreateManualRegistrationTokenParams} from './manual-registration-tokens.js';\nexport {\n  createManualRegistrationToken,\n  listUsableManualRegistrationTokensByWorkspaceId,\n  resolveManualRegistrationTokenByHash,\n  revokeManualRegistrationToken,\n} from './manual-registration-tokens.js';\nexport {\n  hasActiveWorkspaceProvisionerCapability,\n  listActiveWorkspaceProvisionerCapabilitySnapshots,\n  listStaleWorkspaceProvisionerCapabilitySnapshots,\n  publishWorkspaceProvisionerCapabilitySnapshot,\n} from './provisioner-capability-snapshots.js';\nexport type {CreateProvisionerTokenParams} from './provisioner-tokens.js';\nexport {\n  createInstallationProvisionerTokenWithAudit,\n  createProvisionerToken,\n  listActiveProvisionerTokens,\n  listInstallationProvisionerTokens,\n  listUsableProvisionerTokensByWorkspaceId,\n  resolveProvisionerTokenByHash,\n  revokeInstallationProvisionerTokenWithAudit,\n  revokeProvisionerToken,\n  touchProvisionerLastSeen,\n} from './provisioner-tokens.js';\nexport {\n  consumeRunnersRateLimit,\n  pruneExpiredRunnersRateLimits,\n} from './rate-limits.js';\nexport type {\n  DemandStat,\n  PollDemandAndReserveParams,\n  ReservationGrant,\n  ReservationTemplate,\n} from './reservations.js';\nexport {\n  deleteExpiredReservations,\n  deleteReservationsByIds,\n  pollDemandAndReserve,\n  releaseReservationUnits,\n} from './reservations.js';\nexport {assignRunnerInstances} from './runner-assignments.js';\nexport type {\n  ActiveRunnerInstanceTemplateCount,\n  ReapStaleRunnerInstancesResult,\n  ReconcileRunnerInstancesDbResult,\n  ReconcileRunnerInstancesParams,\n  ReportRunnerInstancesParams,\n  RunnerInstanceReportEvent,\n  RunnerInstanceTerminateIntent,\n  RunnerInstanceTerminateIntentReason,\n} from './runner-instances.js';\nexport {\n  attachRunnerInstanceProviderId,\n  isTerminalState,\n  listActiveRunnerInstanceCountsByTemplateTx,\n  listActiveRunnerInstances,\n  listProvisionerTerminateIntentRowsTx,\n  listProvisionerTerminateIntents,\n  reapStaleRunnerInstances,\n  reconcileRunnerInstances,\n  reportRunnerInstances,\n} from './runner-instances.js';\nexport type {\n  CreateRunnerSessionParams,\n  DeleteExpiredRunnerSessionsParams,\n} from './runner-sessions.js';\nexport {createRunnerSession, deleteExpiredRunnerSessions} from './runner-sessions.js';\nexport {runnersOutbox} from './schema/outbox.js';\nexport {runnerBootstrapTokens, runnerControlSessions} from './schema/runner-control-sessions.js';\n\nexport const migrationsPath = resolve(dirname(fileURLToPath(import.meta.url)), '../../drizzle');\n"],"names":["dirname","resolve","fileURLToPath","listAdministratorRunnerInstances","closeDb","db","schema","createEphemeralRegistrationToken","createRunnerSessionConsumingEphemeralToken","deleteExpiredEphemeralRegistrationTokens","resolveEphemeralRegistrationTokenByHash","cancelRunnerJobs","claimPendingJobExecution","enqueueJobExecution","expireStuckJobExecutions","getWorkspaceJobCounts","isJobLeaseActive","listActiveRunningJobExecutions","listRunningJobExecutionsByRunnerInstanceTx","recordHeartbeat","releaseJobExecution","createManualRegistrationToken","listUsableManualRegistrationTokensByWorkspaceId","resolveManualRegistrationTokenByHash","revokeManualRegistrationToken","hasActiveWorkspaceProvisionerCapability","listActiveWorkspaceProvisionerCapabilitySnapshots","listStaleWorkspaceProvisionerCapabilitySnapshots","publishWorkspaceProvisionerCapabilitySnapshot","createInstallationProvisionerTokenWithAudit","createProvisionerToken","listActiveProvisionerTokens","listInstallationProvisionerTokens","listUsableProvisionerTokensByWorkspaceId","resolveProvisionerTokenByHash","revokeInstallationProvisionerTokenWithAudit","revokeProvisionerToken","touchProvisionerLastSeen","consumeRunnersRateLimit","pruneExpiredRunnersRateLimits","deleteExpiredReservations","deleteReservationsByIds","pollDemandAndReserve","releaseReservationUnits","assignRunnerInstances","attachRunnerInstanceProviderId","isTerminalState","listActiveRunnerInstanceCountsByTemplateTx","listActiveRunnerInstances","listProvisionerTerminateIntentRowsTx","listProvisionerTerminateIntents","reapStaleRunnerInstances","reconcileRunnerInstances","reportRunnerInstances","createRunnerSession","deleteExpiredRunnerSessions","runnersOutbox","runnerBootstrapTokens","runnerControlSessions","migrationsPath","url"],"mappings":"AAAA,SAAQA,OAAO,EAAEC,OAAO,QAAO,YAAY;AAC3C,SAAQC,aAAa,QAAO,WAAW;AAQvC,SAAQC,gCAAgC,QAAO,8BAA8B;AAC7E,SAAQC,OAAO,EAAEC,EAAE,EAAEC,MAAM,QAAO,UAAU;AAK5C,SACEC,gCAAgC,EAChCC,0CAA0C,EAC1CC,wCAAwC,EACxCC,uCAAuC,QAClC,qCAAqC;AAM5C,SACEC,gBAAgB,EAChBC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,qBAAqB,EACrBC,gBAAgB,EAChBC,8BAA8B,EAC9BC,0CAA0C,EAC1CC,eAAe,EACfC,mBAAmB,QACd,sBAAsB;AAE7B,SACEC,6BAA6B,EAC7BC,+CAA+C,EAC/CC,oCAAoC,EACpCC,6BAA6B,QACxB,kCAAkC;AACzC,SACEC,uCAAuC,EACvCC,iDAAiD,EACjDC,gDAAgD,EAChDC,6CAA6C,QACxC,wCAAwC;AAE/C,SACEC,2CAA2C,EAC3CC,sBAAsB,EACtBC,2BAA2B,EAC3BC,iCAAiC,EACjCC,wCAAwC,EACxCC,6BAA6B,EAC7BC,2CAA2C,EAC3CC,sBAAsB,EACtBC,wBAAwB,QACnB,0BAA0B;AACjC,SACEC,uBAAuB,EACvBC,6BAA6B,QACxB,mBAAmB;AAO1B,SACEC,yBAAyB,EACzBC,uBAAuB,EACvBC,oBAAoB,EACpBC,uBAAuB,QAClB,oBAAoB;AAC3B,SAAQC,qBAAqB,QAAO,0BAA0B;AAW9D,SACEC,8BAA8B,EAC9BC,eAAe,EACfC,0CAA0C,EAC1CC,yBAAyB,EACzBC,oCAAoC,EACpCC,+BAA+B,EAC/BC,wBAAwB,EACxBC,wBAAwB,EACxBC,qBAAqB,QAChB,wBAAwB;AAK/B,SAAQC,mBAAmB,EAAEC,2BAA2B,QAAO,uBAAuB;AACtF,SAAQC,aAAa,QAAO,qBAAqB;AACjD,SAAQC,qBAAqB,EAAEC,qBAAqB,QAAO,sCAAsC;AAEjG,OAAO,MAAMC,iBAAiB1D,QAAQD,QAAQE,cAAc,YAAY0D,GAAG,IAAI,iBAAiB"}
+{"version":3,"sources":["../../src/db/index.ts"],"sourcesContent":["import {dirname, resolve} from 'node:path';\nimport {fileURLToPath} from 'node:url';\n\nexport type {\n  AdministratorRunnerAssignmentFilter,\n  AdministratorRunnerInstanceRow,\n  ListAdministratorRunnerInstancesParams,\n  ListAdministratorRunnerInstancesResult,\n} from './admin-runner-instances.js';\nexport {listAdministratorRunnerInstances} from './admin-runner-instances.js';\nexport {closeDb, db, schema} from './db.js';\nexport type {\n  CreateEphemeralRegistrationTokenParams,\n  DeleteExpiredEphemeralRegistrationTokensParams,\n} from './ephemeral-registration-tokens.js';\nexport {\n  createEphemeralRegistrationToken,\n  createRunnerSessionConsumingEphemeralToken,\n  deleteExpiredEphemeralRegistrationTokens,\n  resolveEphemeralRegistrationTokenByHash,\n} from './ephemeral-registration-tokens.js';\nexport type {\n  ClaimedJobExecution,\n  EnqueueJobExecutionParams,\n  RunnerInstanceBoundJobExecution,\n} from './job-executions.js';\nexport {\n  cancelRunnerJobs,\n  claimPendingJobExecution,\n  enqueueJobExecution,\n  expireStuckJobExecutions,\n  getWorkspaceJobCounts,\n  isJobLeaseActive,\n  listActiveRunningJobExecutions,\n  listRunningJobExecutionsByRunnerInstanceTx,\n  recordHeartbeat,\n  releaseJobExecution,\n} from './job-executions.js';\nexport type {CreateManualRegistrationTokenParams} from './manual-registration-tokens.js';\nexport {\n  createManualRegistrationToken,\n  listUsableManualRegistrationTokensByWorkspaceId,\n  resolveManualRegistrationTokenByHash,\n  revokeManualRegistrationToken,\n} from './manual-registration-tokens.js';\nexport {\n  hasActiveWorkspaceProvisionerCapability,\n  listActiveWorkspaceProvisionerCapabilitySnapshots,\n  listStaleWorkspaceProvisionerCapabilitySnapshots,\n  publishWorkspaceProvisionerCapabilitySnapshot,\n} from './provisioner-capability-snapshots.js';\nexport type {CreateProvisionerTokenParams} from './provisioner-tokens.js';\nexport {\n  createInstallationProvisionerTokenWithAudit,\n  createProvisionerToken,\n  listActiveProvisionerTokens,\n  listInstallationProvisionerTokens,\n  listUsableProvisionerTokensByWorkspaceId,\n  resolveProvisionerTokenByHash,\n  revokeInstallationProvisionerTokenWithAudit,\n  revokeProvisionerToken,\n  touchProvisionerLastSeen,\n} from './provisioner-tokens.js';\nexport {\n  consumeRunnersRateLimit,\n  pruneExpiredRunnersRateLimits,\n} from './rate-limits.js';\nexport type {\n  DemandStat,\n  PollDemandAndReserveParams,\n  ReservationGrant,\n  ReservationTemplate,\n} from './reservations.js';\nexport {\n  deleteExpiredReservations,\n  deleteReservationsByIds,\n  pollDemandAndReserve,\n  releaseReservationUnits,\n} from './reservations.js';\nexport {assignRunnerInstances} from './runner-assignments.js';\nexport type {\n  ActiveRunnerInstanceTemplateCount,\n  ReapStaleRunnerInstancesResult,\n  ReconcileRunnerInstancesDbResult,\n  ReconcileRunnerInstancesParams,\n  ReportRunnerInstancesParams,\n  RunnerInstanceReportEvent,\n  RunnerInstanceTerminateIntent,\n  RunnerInstanceTerminateIntentReason,\n} from './runner-instances.js';\nexport {\n  attachRunnerInstanceProviderId,\n  countStaleEnrolledRunnerInstances,\n  isTerminalState,\n  listActiveRunnerInstanceCountsByTemplateTx,\n  listActiveRunnerInstances,\n  listProvisionerTerminateIntentRowsTx,\n  listProvisionerTerminateIntents,\n  reapStaleRunnerInstances,\n  reconcileRunnerInstances,\n  reportRunnerInstances,\n} from './runner-instances.js';\nexport type {\n  CreateRunnerSessionParams,\n  DeleteExpiredRunnerSessionsParams,\n} from './runner-sessions.js';\nexport {createRunnerSession, deleteExpiredRunnerSessions} from './runner-sessions.js';\nexport {runnersOutbox} from './schema/outbox.js';\nexport {runnerBootstrapTokens, runnerControlSessions} from './schema/runner-control-sessions.js';\n\nexport const migrationsPath = resolve(dirname(fileURLToPath(import.meta.url)), '../../drizzle');\n"],"names":["dirname","resolve","fileURLToPath","listAdministratorRunnerInstances","closeDb","db","schema","createEphemeralRegistrationToken","createRunnerSessionConsumingEphemeralToken","deleteExpiredEphemeralRegistrationTokens","resolveEphemeralRegistrationTokenByHash","cancelRunnerJobs","claimPendingJobExecution","enqueueJobExecution","expireStuckJobExecutions","getWorkspaceJobCounts","isJobLeaseActive","listActiveRunningJobExecutions","listRunningJobExecutionsByRunnerInstanceTx","recordHeartbeat","releaseJobExecution","createManualRegistrationToken","listUsableManualRegistrationTokensByWorkspaceId","resolveManualRegistrationTokenByHash","revokeManualRegistrationToken","hasActiveWorkspaceProvisionerCapability","listActiveWorkspaceProvisionerCapabilitySnapshots","listStaleWorkspaceProvisionerCapabilitySnapshots","publishWorkspaceProvisionerCapabilitySnapshot","createInstallationProvisionerTokenWithAudit","createProvisionerToken","listActiveProvisionerTokens","listInstallationProvisionerTokens","listUsableProvisionerTokensByWorkspaceId","resolveProvisionerTokenByHash","revokeInstallationProvisionerTokenWithAudit","revokeProvisionerToken","touchProvisionerLastSeen","consumeRunnersRateLimit","pruneExpiredRunnersRateLimits","deleteExpiredReservations","deleteReservationsByIds","pollDemandAndReserve","releaseReservationUnits","assignRunnerInstances","attachRunnerInstanceProviderId","countStaleEnrolledRunnerInstances","isTerminalState","listActiveRunnerInstanceCountsByTemplateTx","listActiveRunnerInstances","listProvisionerTerminateIntentRowsTx","listProvisionerTerminateIntents","reapStaleRunnerInstances","reconcileRunnerInstances","reportRunnerInstances","createRunnerSession","deleteExpiredRunnerSessions","runnersOutbox","runnerBootstrapTokens","runnerControlSessions","migrationsPath","url"],"mappings":"AAAA,SAAQA,OAAO,EAAEC,OAAO,QAAO,YAAY;AAC3C,SAAQC,aAAa,QAAO,WAAW;AAQvC,SAAQC,gCAAgC,QAAO,8BAA8B;AAC7E,SAAQC,OAAO,EAAEC,EAAE,EAAEC,MAAM,QAAO,UAAU;AAK5C,SACEC,gCAAgC,EAChCC,0CAA0C,EAC1CC,wCAAwC,EACxCC,uCAAuC,QAClC,qCAAqC;AAM5C,SACEC,gBAAgB,EAChBC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,qBAAqB,EACrBC,gBAAgB,EAChBC,8BAA8B,EAC9BC,0CAA0C,EAC1CC,eAAe,EACfC,mBAAmB,QACd,sBAAsB;AAE7B,SACEC,6BAA6B,EAC7BC,+CAA+C,EAC/CC,oCAAoC,EACpCC,6BAA6B,QACxB,kCAAkC;AACzC,SACEC,uCAAuC,EACvCC,iDAAiD,EACjDC,gDAAgD,EAChDC,6CAA6C,QACxC,wCAAwC;AAE/C,SACEC,2CAA2C,EAC3CC,sBAAsB,EACtBC,2BAA2B,EAC3BC,iCAAiC,EACjCC,wCAAwC,EACxCC,6BAA6B,EAC7BC,2CAA2C,EAC3CC,sBAAsB,EACtBC,wBAAwB,QACnB,0BAA0B;AACjC,SACEC,uBAAuB,EACvBC,6BAA6B,QACxB,mBAAmB;AAO1B,SACEC,yBAAyB,EACzBC,uBAAuB,EACvBC,oBAAoB,EACpBC,uBAAuB,QAClB,oBAAoB;AAC3B,SAAQC,qBAAqB,QAAO,0BAA0B;AAW9D,SACEC,8BAA8B,EAC9BC,iCAAiC,EACjCC,eAAe,EACfC,0CAA0C,EAC1CC,yBAAyB,EACzBC,oCAAoC,EACpCC,+BAA+B,EAC/BC,wBAAwB,EACxBC,wBAAwB,EACxBC,qBAAqB,QAChB,wBAAwB;AAK/B,SAAQC,mBAAmB,EAAEC,2BAA2B,QAAO,uBAAuB;AACtF,SAAQC,aAAa,QAAO,qBAAqB;AACjD,SAAQC,qBAAqB,EAAEC,qBAAqB,QAAO,sCAAsC;AAEjG,OAAO,MAAMC,iBAAiB3D,QAAQD,QAAQE,cAAc,YAAY2D,GAAG,IAAI,iBAAiB"}

package/dist/db/reservations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reservations.d.ts","sourceRoot":"","sources":["../../src/db/reservations.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAUhC,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,sCAAsC;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;CAC7D;AAcD,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,YAAY,EAAE,gBAAgB,EAAE,CAAA;CAAC,CAAC,CAIlE;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,YAAY,EAAE,gBAAgB,EAAE,CAAA;CAAC,CAAC,CAGlE;AAED,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,sCAAsC,GAC7C,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,YAAY,EAAE,gBAAgB,EAAE,CAAA;CAAC,CAAC,CA2ClE;AAsOD,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAMtE;AA0BD,wBAAsB,yBAAyB,CAAC,MAAM,CAAC,EAAE;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAc1F;AAED,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAM5E;AA0GD,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,EAAE,EACN,MAAM,EAAE;IACN,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,KAAK,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CACzD,GACA,OAAO,CAAC,MAAM,CAAC,CA0CjB"}
+{"version":3,"file":"reservations.d.ts","sourceRoot":"","sources":["../../src/db/reservations.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAUhC,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,sCAAsC;IACrD,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,uBAAuB,EAAE,MAAM,CAAC;IAChC,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,cAAc,CAAC,EAAE,CAAC,YAAY,EAAE,gBAAgB,EAAE,KAAK,IAAI,CAAC;CAC7D;AAoBD,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,YAAY,EAAE,gBAAgB,EAAE,CAAA;CAAC,CAAC,CAIlE;AAED,wBAAsB,sBAAsB,CAC1C,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,YAAY,EAAE,gBAAgB,EAAE,CAAA;CAAC,CAAC,CAGlE;AAED,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,sCAAsC,GAC7C,OAAO,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,YAAY,EAAE,gBAAgB,EAAE,CAAA;CAAC,CAAC,CA4ClE;AA+RD,wBAAsB,4BAA4B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAMtE;AA0BD,wBAAsB,yBAAyB,CAAC,MAAM,CAAC,EAAE;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAc1F;AAED,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAM5E;AA0GD,wBAAsB,uBAAuB,CAC3C,EAAE,EAAE,EAAE,EACN,MAAM,EAAE;IACN,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,KAAK,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,CAAC,CAAC;CACzD,GACA,OAAO,CAAC,MAAM,CAAC,CA0CjB"}

package/dist/db/reservations.js

@@ -1,5 +1,5 @@
 import { canonicalizeLabels } from '@shipfox/runner-labels';
-import { and, arrayContains, asc, eq, exists, gt, inArray, isNotNull, isNull, lt, or, sql } from 'drizzle-orm';
+import { and, arrayContains, asc, eq, exists, gt, inArray, isNotNull, isNull, lt, notExists, or, sql } from 'drizzle-orm';
 import { db } from './db.js';
 import { pendingJobExecutions } from './schema/pending-job-executions.js';
 import { provisionerCapabilitySnapshots } from './schema/provisioner-capability-snapshots.js';
@@ -15,7 +15,10 @@ export async function pollDemandAndReserve(params) {
 }
 export async function pollDemandAndReserveTx(tx, params) {
     await tx.execute(sql`select pg_advisory_xact_lock(hashtext(${params.workspaceId}))`);
-    return await pollDemandAndReserveLockedTx(tx, params);
+    return await pollDemandAndReserveLockedTx(tx, {
+        ...params,
+        scope: 'workspace'
+    });
 }
 export async function pollInstallationDemandAndReserve(params) {
     const candidateWorkspaceIds = await listInstallationDemandWorkspaceIds(params.eligibleWorkspaceIds);
@@ -46,7 +49,8 @@ export async function pollInstallationDemandAndReserve(params) {
                         ...template,
                         availableSlots: template.remainingSlots
                     })),
-                capabilityWindowSeconds: params.capabilityWindowSeconds
+                capabilityWindowSeconds: params.capabilityWindowSeconds,
+                scope: 'installation'
             });
         });
         results.push(result);
@@ -134,7 +138,8 @@ async function pollDemandAndReserveLockedTx(tx, params) {
                 reservationId: inserted.id,
                 requiredLabels: demand.requiredLabels,
                 count: grant,
-                workspaceId: params.workspaceId
+                workspaceId: params.workspaceId,
+                scope: params.scope
             });
             reservedAfterGrant += grant;
             grants.push({
@@ -159,18 +164,29 @@ async function pollDemandAndReserveLockedTx(tx, params) {
     };
 }
 async function bindIdleRunnerInstancesTx(tx, params) {
+    // Reservation expiry is the activation grace deadline. A live reservation
+    // protects a runner that is still booting; an expired or missing row is stale.
+    const canBindRunner = ()=>and(or(and(isNull(providerRunners.workspaceId), isNull(providerRunners.reservationId)), and(isNotNull(providerRunners.reservationId), params.scope === 'installation' ? undefined : or(isNull(providerRunners.workspaceId), eq(providerRunners.workspaceId, params.workspaceId)), notExists(tx.select({
+            id: reservations.id
+        }).from(reservations).where(and(eq(reservations.id, providerRunners.reservationId), gt(reservations.expiresAt, sql`now()`)))))), or(isNull(providerRunners.intendedReservationId), notExists(tx.select({
+            id: reservations.id
+        }).from(reservations).where(and(eq(reservations.id, providerRunners.intendedReservationId), gt(reservations.expiresAt, sql`now()`))))), isNull(providerRunners.reservationReleasedAt), isNull(providerRunners.runnerSessionId));
     const idleRunners = await tx.select({
         id: providerRunners.id
-    }).from(providerRunners).where(and(eq(providerRunners.provisionerId, params.provisionerId), isNull(providerRunners.workspaceId), isNull(providerRunners.reservationId), isNull(providerRunners.intendedReservationId), isNull(providerRunners.runnerSessionId), isNotNull(providerRunners.providerRunnerId), eq(providerRunners.state, 'running'), arrayContains(providerRunners.labels, params.requiredLabels), exists(tx.select({
+    }).from(providerRunners).where(and(eq(providerRunners.provisionerId, params.provisionerId), canBindRunner(), isNotNull(providerRunners.providerRunnerId), eq(providerRunners.state, 'running'), arrayContains(providerRunners.labels, params.requiredLabels), exists(tx.select({
         id: runnerControlSessions.id
     }).from(runnerControlSessions).where(and(eq(runnerControlSessions.runnerInstanceId, providerRunners.id), eq(runnerControlSessions.provisionerId, params.provisionerId), isNull(runnerControlSessions.closedAt), gt(runnerControlSessions.expiresAt, sql`now()`)))))).orderBy(asc(providerRunners.createdAt), asc(providerRunners.id)).limit(params.count).for('update');
     if (idleRunners.length === 0) return;
+    await tx.update(runnerActivationTokens).set({
+        revokedAt: sql`now()`
+    }).where(and(inArray(runnerActivationTokens.runnerInstanceId, idleRunners.map((runner)=>runner.id)), isNull(runnerActivationTokens.consumedAt), isNull(runnerActivationTokens.revokedAt)));
     await tx.update(providerRunners).set({
         workspaceId: params.workspaceId,
         reservationId: params.reservationId,
+        intendedReservationId: null,
         assignedAt: sql`now()`,
         updatedAt: sql`now()`
-    }).where(and(inArray(providerRunners.id, idleRunners.map((runner)=>runner.id)), isNull(providerRunners.workspaceId), isNull(providerRunners.reservationId), isNull(providerRunners.runnerSessionId)));
+    }).where(and(inArray(providerRunners.id, idleRunners.map((runner)=>runner.id)), canBindRunner()));
 }
 async function listInstallationDemandWorkspaceIds(eligibleWorkspaceIds) {
     if (eligibleWorkspaceIds.size === 0) return [];