@shipfox/api-runners 12.7.0 → 13.1.0

package/.turbo/turbo-build.log

@@ -1,6 +1,6 @@
 $ shipfox-swc && shipfox-temporal-bundle dist/temporal/workflows/index.js
-Successfully compiled: 104 files with swc (751.35ms)
-2026-08-10T13:04:49.235Z [INFO] asset workflow-bundle-0c3da2487e29e352d64e.js 3.17 MiB [emitted] [immutable] (name: main)
+Successfully compiled: 105 files with swc (548ms)
+2026-08-23T10:00:31.690Z [INFO] asset workflow-bundle-0c3da2487e29e352d64e.js 3.17 MiB [emitted] [immutable] (name: main)
 orphan modules 33.5 KiB [orphan] 21 modules
 runtime modules 1.13 KiB 5 modules
 modules by path ../../../node_modules/.pnpm/ 970 KiB 196 modules
@@ -14,6 +14,6 @@ optional modules 30 bytes [optional]
   __temporal_custom_payload_converter (ignored) 15 bytes [optional] [built] [code generated]
   __temporal_custom_failure_converter (ignored) 15 bytes [optional] [built] [code generated]
 ../../shared/node/temporal/dist/workflow-error-interceptor.js 1.21 KiB [built] [code generated]
-webpack 5.107.2 compiled successfully in 12344 ms
-2026-08-10T13:04:49.266Z [INFO] Workflow bundle created { size: '3.17MB' }
+webpack 5.107.2 compiled successfully in 9390 ms
+2026-08-23T10:00:31.741Z [INFO] Workflow bundle created { size: '3.17MB' }
 /home/runner/work/shipfox/shipfox/libs/api/runners/dist/temporal/workflows/index.js: 3326598 bytes

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @shipfox/api-runners
 
+## 13.1.0
+
+### Patch Changes
+
+- 7de2e30: Release runner reservation units when a provisioned runner claims its first job.
+- Updated dependencies [0d3c2e3]
+  - @shipfox/api-workflows-dto@13.1.0
+
+## 13.0.0
+
+### Major Changes
+
+- af6b31e: Expose ordered queued and terminal workflow job-execution facts, and release terminal runner reservations once no uncancelled lease remains.
+
+### Patch Changes
+
+- Updated dependencies [af6b31e]
+  - @shipfox/api-runners-dto@13.0.0
+  - @shipfox/api-workflows-dto@13.0.0
+
 ## 12.7.0
 
 ### Patch Changes

package/dist/db/index.d.ts

@@ -4,7 +4,7 @@ export { closeDb, db, schema } from './db.js';
 export type { CreateEphemeralRegistrationTokenParams, DeleteExpiredEphemeralRegistrationTokensParams, } from './ephemeral-registration-tokens.js';
 export { createEphemeralRegistrationToken, createRunnerSessionConsumingEphemeralToken, deleteExpiredEphemeralRegistrationTokens, resolveEphemeralRegistrationTokenByHash, } from './ephemeral-registration-tokens.js';
 export type { ClaimedJobExecution, EnqueueJobExecutionParams, RunnerInstanceBoundJobExecution, } from './job-executions.js';
-export { cancelRunnerJobs, claimPendingJobExecution, enqueueJobExecution, expireStuckJobExecutions, getWorkspaceJobCounts, isJobLeaseActive, listActiveRunningJobExecutions, listRunningJobExecutionsByRunnerInstanceTx, recordHeartbeat, releaseJobExecution, } from './job-executions.js';
+export { claimPendingJobExecution, enqueueJobExecution, expireStuckJobExecutions, getWorkspaceJobCounts, isJobLeaseActive, listActiveRunningJobExecutions, listRunningJobExecutionsByRunnerInstanceTx, recordHeartbeat, } from './job-executions.js';
 export type { CreateManualRegistrationTokenParams } from './manual-registration-tokens.js';
 export { createManualRegistrationToken, listUsableManualRegistrationTokensByWorkspaceId, resolveManualRegistrationTokenByHash, revokeManualRegistrationToken, } from './manual-registration-tokens.js';
 export { hasActiveWorkspaceProvisionerCapability, listActiveWorkspaceProvisionerCapabilitySnapshots, listStaleWorkspaceProvisionerCapabilitySnapshots, publishWorkspaceProvisionerCapabilitySnapshot, } from './provisioner-capability-snapshots.js';

package/dist/db/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,mCAAmC,EACnC,8BAA8B,EAC9B,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAC,gCAAgC,EAAC,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAC,MAAM,SAAS,CAAC;AAC5C,YAAY,EACV,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gCAAgC,EAChC,0CAA0C,EAC1C,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,mBAAmB,EACnB,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,0CAA0C,EAC1C,eAAe,EACf,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAC,mCAAmC,EAAC,MAAM,iCAAiC,CAAC;AACzF,OAAO,EACL,6BAA6B,EAC7B,+CAA+C,EAC/C,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,uCAAuC,EACvC,iDAAiD,EACjD,gDAAgD,EAChD,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EACL,2CAA2C,EAC3C,sBAAsB,EACtB,2BAA2B,EAC3B,iCAAiC,EACjC,wCAAwC,EACxC,6BAA6B,EAC7B,2CAA2C,EAC3C,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,UAAU,EACV,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EACV,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,eAAe,EACf,0CAA0C,EAC1C,yBAAyB,EACzB,oCAAoC,EACpC,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,mBAAmB,EAAE,2BAA2B,EAAC,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAC,aAAa,EAAC,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAC,qBAAqB,EAAE,qBAAqB,EAAC,MAAM,qCAAqC,CAAC;AAEjG,eAAO,MAAM,cAAc,QAAoE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/db/index.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,mCAAmC,EACnC,8BAA8B,EAC9B,sCAAsC,EACtC,sCAAsC,GACvC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAC,gCAAgC,EAAC,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAC,MAAM,SAAS,CAAC;AAC5C,YAAY,EACV,sCAAsC,EACtC,8CAA8C,GAC/C,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACL,gCAAgC,EAChC,0CAA0C,EAC1C,wCAAwC,EACxC,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EACV,mBAAmB,EACnB,yBAAyB,EACzB,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,gBAAgB,EAChB,8BAA8B,EAC9B,0CAA0C,EAC1C,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAC,mCAAmC,EAAC,MAAM,iCAAiC,CAAC;AACzF,OAAO,EACL,6BAA6B,EAC7B,+CAA+C,EAC/C,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,uCAAuC,EACvC,iDAAiD,EACjD,gDAAgD,EAChD,6CAA6C,GAC9C,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EAAC,4BAA4B,EAAC,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EACL,2CAA2C,EAC3C,sBAAsB,EACtB,2BAA2B,EAC3B,iCAAiC,EACjC,wCAAwC,EACxC,6BAA6B,EAC7B,2CAA2C,EAC3C,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,UAAU,EACV,0BAA0B,EAC1B,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAC,qBAAqB,EAAC,MAAM,yBAAyB,CAAC;AAC9D,YAAY,EACV,iCAAiC,EACjC,8BAA8B,EAC9B,gCAAgC,EAChC,8BAA8B,EAC9B,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,eAAe,EACf,0CAA0C,EAC1C,yBAAyB,EACzB,oCAAoC,EACpC,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,iCAAiC,GAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAC,mBAAmB,EAAE,2BAA2B,EAAC,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAAC,aAAa,EAAC,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAC,qBAAqB,EAAE,qBAAqB,EAAC,MAAM,qCAAqC,CAAC;AAEjG,eAAO,MAAM,cAAc,QAAoE,CAAC"}

package/dist/db/index.js

@@ -3,7 +3,7 @@ import { fileURLToPath } from 'node:url';
 export { listAdministratorRunnerInstances } from './admin-runner-instances.js';
 export { closeDb, db, schema } from './db.js';
 export { createEphemeralRegistrationToken, createRunnerSessionConsumingEphemeralToken, deleteExpiredEphemeralRegistrationTokens, resolveEphemeralRegistrationTokenByHash } from './ephemeral-registration-tokens.js';
-export { cancelRunnerJobs, claimPendingJobExecution, enqueueJobExecution, expireStuckJobExecutions, getWorkspaceJobCounts, isJobLeaseActive, listActiveRunningJobExecutions, listRunningJobExecutionsByRunnerInstanceTx, recordHeartbeat, releaseJobExecution } from './job-executions.js';
+export { claimPendingJobExecution, enqueueJobExecution, expireStuckJobExecutions, getWorkspaceJobCounts, isJobLeaseActive, listActiveRunningJobExecutions, listRunningJobExecutionsByRunnerInstanceTx, recordHeartbeat } from './job-executions.js';
 export { createManualRegistrationToken, listUsableManualRegistrationTokensByWorkspaceId, resolveManualRegistrationTokenByHash, revokeManualRegistrationToken } from './manual-registration-tokens.js';
 export { hasActiveWorkspaceProvisionerCapability, listActiveWorkspaceProvisionerCapabilitySnapshots, listStaleWorkspaceProvisionerCapabilitySnapshots, publishWorkspaceProvisionerCapabilitySnapshot } from './provisioner-capability-snapshots.js';
 export { createInstallationProvisionerTokenWithAudit, createProvisionerToken, listActiveProvisionerTokens, listInstallationProvisionerTokens, listUsableProvisionerTokensByWorkspaceId, resolveProvisionerTokenByHash, revokeInstallationProvisionerTokenWithAudit, revokeProvisionerToken, touchProvisionerLastSeen } from './provisioner-tokens.js';

package/dist/db/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/db/index.ts"],"sourcesContent":["import {dirname, resolve} from 'node:path';\nimport {fileURLToPath} from 'node:url';\n\nexport type {\n  AdministratorRunnerAssignmentFilter,\n  AdministratorRunnerInstanceRow,\n  ListAdministratorRunnerInstancesParams,\n  ListAdministratorRunnerInstancesResult,\n} from './admin-runner-instances.js';\nexport {listAdministratorRunnerInstances} from './admin-runner-instances.js';\nexport {closeDb, db, schema} from './db.js';\nexport type {\n  CreateEphemeralRegistrationTokenParams,\n  DeleteExpiredEphemeralRegistrationTokensParams,\n} from './ephemeral-registration-tokens.js';\nexport {\n  createEphemeralRegistrationToken,\n  createRunnerSessionConsumingEphemeralToken,\n  deleteExpiredEphemeralRegistrationTokens,\n  resolveEphemeralRegistrationTokenByHash,\n} from './ephemeral-registration-tokens.js';\nexport type {\n  ClaimedJobExecution,\n  EnqueueJobExecutionParams,\n  RunnerInstanceBoundJobExecution,\n} from './job-executions.js';\nexport {\n  cancelRunnerJobs,\n  claimPendingJobExecution,\n  enqueueJobExecution,\n  expireStuckJobExecutions,\n  getWorkspaceJobCounts,\n  isJobLeaseActive,\n  listActiveRunningJobExecutions,\n  listRunningJobExecutionsByRunnerInstanceTx,\n  recordHeartbeat,\n  releaseJobExecution,\n} from './job-executions.js';\nexport type {CreateManualRegistrationTokenParams} from './manual-registration-tokens.js';\nexport {\n  createManualRegistrationToken,\n  listUsableManualRegistrationTokensByWorkspaceId,\n  resolveManualRegistrationTokenByHash,\n  revokeManualRegistrationToken,\n} from './manual-registration-tokens.js';\nexport {\n  hasActiveWorkspaceProvisionerCapability,\n  listActiveWorkspaceProvisionerCapabilitySnapshots,\n  listStaleWorkspaceProvisionerCapabilitySnapshots,\n  publishWorkspaceProvisionerCapabilitySnapshot,\n} from './provisioner-capability-snapshots.js';\nexport type {CreateProvisionerTokenParams} from './provisioner-tokens.js';\nexport {\n  createInstallationProvisionerTokenWithAudit,\n  createProvisionerToken,\n  listActiveProvisionerTokens,\n  listInstallationProvisionerTokens,\n  listUsableProvisionerTokensByWorkspaceId,\n  resolveProvisionerTokenByHash,\n  revokeInstallationProvisionerTokenWithAudit,\n  revokeProvisionerToken,\n  touchProvisionerLastSeen,\n} from './provisioner-tokens.js';\nexport {\n  consumeRunnersRateLimit,\n  pruneExpiredRunnersRateLimits,\n} from './rate-limits.js';\nexport type {\n  DemandStat,\n  PollDemandAndReserveParams,\n  ReservationGrant,\n  ReservationTemplate,\n} from './reservations.js';\nexport {\n  deleteExpiredReservations,\n  deleteReservationsByIds,\n  pollDemandAndReserve,\n  releaseReservationUnits,\n} from './reservations.js';\nexport {assignRunnerInstances} from './runner-assignments.js';\nexport type {\n  ActiveRunnerInstanceTemplateCount,\n  ReapStaleRunnerInstancesResult,\n  ReconcileRunnerInstancesDbResult,\n  ReconcileRunnerInstancesParams,\n  ReportRunnerInstancesParams,\n  RunnerInstanceReportEvent,\n  RunnerInstanceTerminateIntent,\n  RunnerInstanceTerminateIntentReason,\n} from './runner-instances.js';\nexport {\n  attachRunnerInstanceProviderId,\n  countStaleEnrolledRunnerInstances,\n  isTerminalState,\n  listActiveRunnerInstanceCountsByTemplateTx,\n  listActiveRunnerInstances,\n  listProvisionerTerminateIntentRowsTx,\n  listProvisionerTerminateIntents,\n  reapStaleRunnerInstances,\n  reconcileRunnerInstances,\n  reportRunnerInstances,\n} from './runner-instances.js';\nexport type {\n  CreateRunnerSessionParams,\n  DeleteExpiredRunnerSessionsParams,\n} from './runner-sessions.js';\nexport {createRunnerSession, deleteExpiredRunnerSessions} from './runner-sessions.js';\nexport {runnersOutbox} from './schema/outbox.js';\nexport {runnerBootstrapTokens, runnerControlSessions} from './schema/runner-control-sessions.js';\n\nexport const migrationsPath = resolve(dirname(fileURLToPath(import.meta.url)), '../../drizzle');\n"],"names":["dirname","resolve","fileURLToPath","listAdministratorRunnerInstances","closeDb","db","schema","createEphemeralRegistrationToken","createRunnerSessionConsumingEphemeralToken","deleteExpiredEphemeralRegistrationTokens","resolveEphemeralRegistrationTokenByHash","cancelRunnerJobs","claimPendingJobExecution","enqueueJobExecution","expireStuckJobExecutions","getWorkspaceJobCounts","isJobLeaseActive","listActiveRunningJobExecutions","listRunningJobExecutionsByRunnerInstanceTx","recordHeartbeat","releaseJobExecution","createManualRegistrationToken","listUsableManualRegistrationTokensByWorkspaceId","resolveManualRegistrationTokenByHash","revokeManualRegistrationToken","hasActiveWorkspaceProvisionerCapability","listActiveWorkspaceProvisionerCapabilitySnapshots","listStaleWorkspaceProvisionerCapabilitySnapshots","publishWorkspaceProvisionerCapabilitySnapshot","createInstallationProvisionerTokenWithAudit","createProvisionerToken","listActiveProvisionerTokens","listInstallationProvisionerTokens","listUsableProvisionerTokensByWorkspaceId","resolveProvisionerTokenByHash","revokeInstallationProvisionerTokenWithAudit","revokeProvisionerToken","touchProvisionerLastSeen","consumeRunnersRateLimit","pruneExpiredRunnersRateLimits","deleteExpiredReservations","deleteReservationsByIds","pollDemandAndReserve","releaseReservationUnits","assignRunnerInstances","attachRunnerInstanceProviderId","countStaleEnrolledRunnerInstances","isTerminalState","listActiveRunnerInstanceCountsByTemplateTx","listActiveRunnerInstances","listProvisionerTerminateIntentRowsTx","listProvisionerTerminateIntents","reapStaleRunnerInstances","reconcileRunnerInstances","reportRunnerInstances","createRunnerSession","deleteExpiredRunnerSessions","runnersOutbox","runnerBootstrapTokens","runnerControlSessions","migrationsPath","url"],"mappings":"AAAA,SAAQA,OAAO,EAAEC,OAAO,QAAO,YAAY;AAC3C,SAAQC,aAAa,QAAO,WAAW;AAQvC,SAAQC,gCAAgC,QAAO,8BAA8B;AAC7E,SAAQC,OAAO,EAAEC,EAAE,EAAEC,MAAM,QAAO,UAAU;AAK5C,SACEC,gCAAgC,EAChCC,0CAA0C,EAC1CC,wCAAwC,EACxCC,uCAAuC,QAClC,qCAAqC;AAM5C,SACEC,gBAAgB,EAChBC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,qBAAqB,EACrBC,gBAAgB,EAChBC,8BAA8B,EAC9BC,0CAA0C,EAC1CC,eAAe,EACfC,mBAAmB,QACd,sBAAsB;AAE7B,SACEC,6BAA6B,EAC7BC,+CAA+C,EAC/CC,oCAAoC,EACpCC,6BAA6B,QACxB,kCAAkC;AACzC,SACEC,uCAAuC,EACvCC,iDAAiD,EACjDC,gDAAgD,EAChDC,6CAA6C,QACxC,wCAAwC;AAE/C,SACEC,2CAA2C,EAC3CC,sBAAsB,EACtBC,2BAA2B,EAC3BC,iCAAiC,EACjCC,wCAAwC,EACxCC,6BAA6B,EAC7BC,2CAA2C,EAC3CC,sBAAsB,EACtBC,wBAAwB,QACnB,0BAA0B;AACjC,SACEC,uBAAuB,EACvBC,6BAA6B,QACxB,mBAAmB;AAO1B,SACEC,yBAAyB,EACzBC,uBAAuB,EACvBC,oBAAoB,EACpBC,uBAAuB,QAClB,oBAAoB;AAC3B,SAAQC,qBAAqB,QAAO,0BAA0B;AAW9D,SACEC,8BAA8B,EAC9BC,iCAAiC,EACjCC,eAAe,EACfC,0CAA0C,EAC1CC,yBAAyB,EACzBC,oCAAoC,EACpCC,+BAA+B,EAC/BC,wBAAwB,EACxBC,wBAAwB,EACxBC,qBAAqB,QAChB,wBAAwB;AAK/B,SAAQC,mBAAmB,EAAEC,2BAA2B,QAAO,uBAAuB;AACtF,SAAQC,aAAa,QAAO,qBAAqB;AACjD,SAAQC,qBAAqB,EAAEC,qBAAqB,QAAO,sCAAsC;AAEjG,OAAO,MAAMC,iBAAiB3D,QAAQD,QAAQE,cAAc,YAAY2D,GAAG,IAAI,iBAAiB"}
+{"version":3,"sources":["../../src/db/index.ts"],"sourcesContent":["import {dirname, resolve} from 'node:path';\nimport {fileURLToPath} from 'node:url';\n\nexport type {\n  AdministratorRunnerAssignmentFilter,\n  AdministratorRunnerInstanceRow,\n  ListAdministratorRunnerInstancesParams,\n  ListAdministratorRunnerInstancesResult,\n} from './admin-runner-instances.js';\nexport {listAdministratorRunnerInstances} from './admin-runner-instances.js';\nexport {closeDb, db, schema} from './db.js';\nexport type {\n  CreateEphemeralRegistrationTokenParams,\n  DeleteExpiredEphemeralRegistrationTokensParams,\n} from './ephemeral-registration-tokens.js';\nexport {\n  createEphemeralRegistrationToken,\n  createRunnerSessionConsumingEphemeralToken,\n  deleteExpiredEphemeralRegistrationTokens,\n  resolveEphemeralRegistrationTokenByHash,\n} from './ephemeral-registration-tokens.js';\nexport type {\n  ClaimedJobExecution,\n  EnqueueJobExecutionParams,\n  RunnerInstanceBoundJobExecution,\n} from './job-executions.js';\nexport {\n  claimPendingJobExecution,\n  enqueueJobExecution,\n  expireStuckJobExecutions,\n  getWorkspaceJobCounts,\n  isJobLeaseActive,\n  listActiveRunningJobExecutions,\n  listRunningJobExecutionsByRunnerInstanceTx,\n  recordHeartbeat,\n} from './job-executions.js';\nexport type {CreateManualRegistrationTokenParams} from './manual-registration-tokens.js';\nexport {\n  createManualRegistrationToken,\n  listUsableManualRegistrationTokensByWorkspaceId,\n  resolveManualRegistrationTokenByHash,\n  revokeManualRegistrationToken,\n} from './manual-registration-tokens.js';\nexport {\n  hasActiveWorkspaceProvisionerCapability,\n  listActiveWorkspaceProvisionerCapabilitySnapshots,\n  listStaleWorkspaceProvisionerCapabilitySnapshots,\n  publishWorkspaceProvisionerCapabilitySnapshot,\n} from './provisioner-capability-snapshots.js';\nexport type {CreateProvisionerTokenParams} from './provisioner-tokens.js';\nexport {\n  createInstallationProvisionerTokenWithAudit,\n  createProvisionerToken,\n  listActiveProvisionerTokens,\n  listInstallationProvisionerTokens,\n  listUsableProvisionerTokensByWorkspaceId,\n  resolveProvisionerTokenByHash,\n  revokeInstallationProvisionerTokenWithAudit,\n  revokeProvisionerToken,\n  touchProvisionerLastSeen,\n} from './provisioner-tokens.js';\nexport {\n  consumeRunnersRateLimit,\n  pruneExpiredRunnersRateLimits,\n} from './rate-limits.js';\nexport type {\n  DemandStat,\n  PollDemandAndReserveParams,\n  ReservationGrant,\n  ReservationTemplate,\n} from './reservations.js';\nexport {\n  deleteExpiredReservations,\n  deleteReservationsByIds,\n  pollDemandAndReserve,\n  releaseReservationUnits,\n} from './reservations.js';\nexport {assignRunnerInstances} from './runner-assignments.js';\nexport type {\n  ActiveRunnerInstanceTemplateCount,\n  ReapStaleRunnerInstancesResult,\n  ReconcileRunnerInstancesDbResult,\n  ReconcileRunnerInstancesParams,\n  ReportRunnerInstancesParams,\n  RunnerInstanceReportEvent,\n  RunnerInstanceTerminateIntent,\n  RunnerInstanceTerminateIntentReason,\n} from './runner-instances.js';\nexport {\n  attachRunnerInstanceProviderId,\n  countStaleEnrolledRunnerInstances,\n  isTerminalState,\n  listActiveRunnerInstanceCountsByTemplateTx,\n  listActiveRunnerInstances,\n  listProvisionerTerminateIntentRowsTx,\n  listProvisionerTerminateIntents,\n  reapStaleRunnerInstances,\n  reconcileRunnerInstances,\n  reportRunnerInstances,\n} from './runner-instances.js';\nexport type {\n  CreateRunnerSessionParams,\n  DeleteExpiredRunnerSessionsParams,\n} from './runner-sessions.js';\nexport {createRunnerSession, deleteExpiredRunnerSessions} from './runner-sessions.js';\nexport {runnersOutbox} from './schema/outbox.js';\nexport {runnerBootstrapTokens, runnerControlSessions} from './schema/runner-control-sessions.js';\n\nexport const migrationsPath = resolve(dirname(fileURLToPath(import.meta.url)), '../../drizzle');\n"],"names":["dirname","resolve","fileURLToPath","listAdministratorRunnerInstances","closeDb","db","schema","createEphemeralRegistrationToken","createRunnerSessionConsumingEphemeralToken","deleteExpiredEphemeralRegistrationTokens","resolveEphemeralRegistrationTokenByHash","claimPendingJobExecution","enqueueJobExecution","expireStuckJobExecutions","getWorkspaceJobCounts","isJobLeaseActive","listActiveRunningJobExecutions","listRunningJobExecutionsByRunnerInstanceTx","recordHeartbeat","createManualRegistrationToken","listUsableManualRegistrationTokensByWorkspaceId","resolveManualRegistrationTokenByHash","revokeManualRegistrationToken","hasActiveWorkspaceProvisionerCapability","listActiveWorkspaceProvisionerCapabilitySnapshots","listStaleWorkspaceProvisionerCapabilitySnapshots","publishWorkspaceProvisionerCapabilitySnapshot","createInstallationProvisionerTokenWithAudit","createProvisionerToken","listActiveProvisionerTokens","listInstallationProvisionerTokens","listUsableProvisionerTokensByWorkspaceId","resolveProvisionerTokenByHash","revokeInstallationProvisionerTokenWithAudit","revokeProvisionerToken","touchProvisionerLastSeen","consumeRunnersRateLimit","pruneExpiredRunnersRateLimits","deleteExpiredReservations","deleteReservationsByIds","pollDemandAndReserve","releaseReservationUnits","assignRunnerInstances","attachRunnerInstanceProviderId","countStaleEnrolledRunnerInstances","isTerminalState","listActiveRunnerInstanceCountsByTemplateTx","listActiveRunnerInstances","listProvisionerTerminateIntentRowsTx","listProvisionerTerminateIntents","reapStaleRunnerInstances","reconcileRunnerInstances","reportRunnerInstances","createRunnerSession","deleteExpiredRunnerSessions","runnersOutbox","runnerBootstrapTokens","runnerControlSessions","migrationsPath","url"],"mappings":"AAAA,SAAQA,OAAO,EAAEC,OAAO,QAAO,YAAY;AAC3C,SAAQC,aAAa,QAAO,WAAW;AAQvC,SAAQC,gCAAgC,QAAO,8BAA8B;AAC7E,SAAQC,OAAO,EAAEC,EAAE,EAAEC,MAAM,QAAO,UAAU;AAK5C,SACEC,gCAAgC,EAChCC,0CAA0C,EAC1CC,wCAAwC,EACxCC,uCAAuC,QAClC,qCAAqC;AAM5C,SACEC,wBAAwB,EACxBC,mBAAmB,EACnBC,wBAAwB,EACxBC,qBAAqB,EACrBC,gBAAgB,EAChBC,8BAA8B,EAC9BC,0CAA0C,EAC1CC,eAAe,QACV,sBAAsB;AAE7B,SACEC,6BAA6B,EAC7BC,+CAA+C,EAC/CC,oCAAoC,EACpCC,6BAA6B,QACxB,kCAAkC;AACzC,SACEC,uCAAuC,EACvCC,iDAAiD,EACjDC,gDAAgD,EAChDC,6CAA6C,QACxC,wCAAwC;AAE/C,SACEC,2CAA2C,EAC3CC,sBAAsB,EACtBC,2BAA2B,EAC3BC,iCAAiC,EACjCC,wCAAwC,EACxCC,6BAA6B,EAC7BC,2CAA2C,EAC3CC,sBAAsB,EACtBC,wBAAwB,QACnB,0BAA0B;AACjC,SACEC,uBAAuB,EACvBC,6BAA6B,QACxB,mBAAmB;AAO1B,SACEC,yBAAyB,EACzBC,uBAAuB,EACvBC,oBAAoB,EACpBC,uBAAuB,QAClB,oBAAoB;AAC3B,SAAQC,qBAAqB,QAAO,0BAA0B;AAW9D,SACEC,8BAA8B,EAC9BC,iCAAiC,EACjCC,eAAe,EACfC,0CAA0C,EAC1CC,yBAAyB,EACzBC,oCAAoC,EACpCC,+BAA+B,EAC/BC,wBAAwB,EACxBC,wBAAwB,EACxBC,qBAAqB,QAChB,wBAAwB;AAK/B,SAAQC,mBAAmB,EAAEC,2BAA2B,QAAO,uBAAuB;AACtF,SAAQC,aAAa,QAAO,qBAAqB;AACjD,SAAQC,qBAAqB,EAAEC,qBAAqB,QAAO,sCAAsC;AAEjG,OAAO,MAAMC,iBAAiBzD,QAAQD,QAAQE,cAAc,YAAYyD,GAAG,IAAI,iBAAiB"}

package/dist/db/job-executions.d.ts

@@ -8,6 +8,7 @@ export interface EnqueueJobExecutionParams {
     jobExecutionId: string;
     projectId: string;
     requiredLabels: string[];
+    queuedAt: Date;
 }
 export declare function getWorkspaceJobCounts(params: {
     workspaceIds: string[];
@@ -55,32 +56,18 @@ export declare function claimPendingJobExecution(params: {
     maxClaims: number | null;
     runnerSessionLivenessThrottleSeconds: number;
 }): Promise<ClaimedJobExecution | null>;
-/**
- * Releases a job execution's lease when the orchestration workflow finalizes it: deletes the
- * running-job-execution row AND any lingering pending row for the same execution, in one tx.
- * When the deleted lease was the last one for a terminal provider runner, it also releases the
- * runner's reservation in the same runner-owned transaction. Terminal reports and workflow lease
- * finalization remain independently retryable; they do not share a cross-module scope lock.
- * Idempotent (0-row no-op), no token scope (the workflow is authoritative), and
- * emits no event: the workflow already owns the outcome. Sweeping the pending row
- * too closes the at-least-once window where an enqueue retry left an orphan that a
- * later claim would otherwise pick up for an already-finished job execution.
- */
-export declare function releaseJobExecution(params: {
-    jobExecutionId: string;
-}): Promise<void>;
 /**
  * Reaps stale leases (bounded by `limit`), emitting one
  * `runners.job.lease_expired` event per reaped job execution.
  *
  * The cutoff is re-checked in the DELETE, not just the locking subquery, so a
  * heartbeat landing mid-call spares the live row. Each reaped execution also sweeps its
- * pending row: a failed best-effort `releaseJobExecution` would otherwise leave an orphan
- * that a later claim re-runs as an already-finished job execution.
+ * pending row so an at-least-once queue replay cannot leave an orphan.
  *
- * Locks pending-then-running to match `claimPendingJobExecution`, `releaseJobExecution`, and
- * `reconcileTerminalJobExecution`. The stale candidate scan intentionally does not lock running
- * rows first; the running-row DELETE re-checks the stale predicate after the pending-row sweep.
+ * Locks pending-then-running to match `claimPendingJobExecution` and
+ * `reconcileTerminalJobExecution`. The stale candidate scan intentionally does not lock
+ * running rows first; the running-row DELETE re-checks the stale predicate after the
+ * pending-row sweep.
  */
 export declare function expireStuckJobExecutions(params: {
     thresholdSeconds: number;
@@ -131,13 +118,10 @@ export declare function recordHeartbeat(params: {
 }>;
 /**
  * Reconciles a terminal job execution with runner state in one transaction: removes its pending
- * queue row and requests cancellation on its running lease, if either exists. The operation is
- * idempotent and preserves the first cancellation-request timestamp.
+ * queue row, requests cancellation on its running lease, and converges any linked reservation.
+ * The operation is idempotent and preserves the first cancellation-request timestamp.
  */
 export declare function reconcileTerminalJobExecution(params: {
     jobExecutionId: string;
 }): Promise<void>;
-export declare function cancelRunnerJobs(params: {
-    jobIds: string[];
-}): Promise<void>;
 //# sourceMappingURL=job-executions.d.ts.map

package/dist/db/job-executions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"job-executions.d.ts","sourceRoot":"","sources":["../../src/db/job-executions.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,yBAAyB,EAC/B,MAAM,0BAA0B,CAAC;AAiClC,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAiBhC,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,GAAG,OAAO,CAAC,KAAK,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAwBzE;AAOD,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAoD1F;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,eAAe,EAAE,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,eAAe,EAAE,IAAI,CAAC;IACtB,uBAAuB,EAAE,IAAI,GAAG,IAAI,CAAC;CACtC;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oCAAoC,EAAE,MAAM,CAAC;CAC9C,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAiMtC;AAmBD;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiCzF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,gBAAgB,EAAE,MAAM,CAAC;IACzB,4BAA4B,EAAE,MAAM,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CACT,KAAK,CAAC;IACJ,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC,CACH,CAwFA;AAED,wBAAsB,yBAAyB,IAAI,OAAO,CAAC;IACzD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC,CAOD;AAED,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAyBvC;AAED,wBAAsB,0CAA0C,CAC9D,EAAE,EAAE,EAAE,EACN,MAAM,EAAE;IACN,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,GACA,OAAO,CAAC,+BAA+B,EAAE,CAAC,CA2E5C;AAMD,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CACrD,GAAG,OAAO,CAAC;IACV,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC3D,uBAAuB,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC1D,mBAAmB,EAAE;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,CAAC,CAoED;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB;AAED,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF"}
+{"version":3,"file":"job-executions.d.ts","sourceRoot":"","sources":["../../src/db/job-executions.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,yBAAyB,EAC/B,MAAM,0BAA0B,CAAC;AAiClC,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAuDhC,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,wBAAsB,qBAAqB,CAAC,MAAM,EAAE;IAClD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB,GAAG,OAAO,CAAC,KAAK,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAwBzE;AAKD,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6C1F;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,eAAe,EAAE,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,+BAA+B;IAC9C,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,IAAI,CAAC;IAChB,eAAe,EAAE,IAAI,CAAC;IACtB,uBAAuB,EAAE,IAAI,GAAG,IAAI,CAAC;CACtC;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oCAAoC,EAAE,MAAM,CAAC;CAC9C,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CA8PtC;AAmBD;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IACrD,gBAAgB,EAAE,MAAM,CAAC;IACzB,4BAA4B,EAAE,MAAM,CAAC;IACrC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CACT,KAAK,CAAC;IACJ,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC,CACH,CAiGA;AAED,wBAAsB,yBAAyB,IAAI,OAAO,CAAC;IACzD,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC,CAOD;AAED,wBAAsB,8BAA8B,CAAC,MAAM,EAAE;IAC3D,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAyBvC;AAED,wBAAsB,0CAA0C,CAC9D,EAAE,EAAE,EAAE,EACN,MAAM,EAAE;IACN,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,GACA,OAAO,CAAC,+BAA+B,EAAE,CAAC,CA2E5C;AAMD,wBAAsB,gBAAgB,CAAC,MAAM,EAAE;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,OAAO,CAAC,CAcnB;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,yBAAyB,GAAG,IAAI,CAAC;CACrD,GAAG,OAAO,CAAC;IACV,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC3D,uBAAuB,EAAE,yBAAyB,GAAG,IAAI,CAAC;IAC1D,mBAAmB,EAAE;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,KAAK,EAAE,MAAM,CAAC;QACd,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH,CAAC,CAoED;AAED;;;;GAIG;AACH,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBhB"}

package/dist/db/job-executions.js

@@ -1,4 +1,4 @@
-import { RUNNER_JOB_CLAIMED, RUNNER_JOB_LEASE_EXPIRED, RUNNER_JOB_QUEUED } from '@shipfox/api-runners-dto';
+import { RUNNER_JOB_CLAIMED, RUNNER_JOB_LEASE_EXPIRED } from '@shipfox/api-runners-dto';
 import { logger } from '@shipfox/node-opentelemetry';
 import { writeOutboxEvent, writeOutboxEvents } from '@shipfox/node-outbox';
 import { canonicalizeLabels } from '@shipfox/runner-labels';
@@ -6,9 +6,11 @@ import { and, arrayContained, asc, count, desc, eq, gt, inArray, isNotNull, isNu
 import { EmptyRequiredLabelsError, RunnerSessionExhaustedError, RunningJobExecutionNotFoundError } from '#core/errors.js';
 import { jobExecutionEnqueuedCount, jobExecutionLeaseExpiredCount, recordJobExecutionQueueTime, recordProviderRunnerActivationToFirstClaim } from '#metrics/instance.js';
 import { db } from './db.js';
-import { releaseTerminalRunnerInstanceReservationsByIds } from './reservations.js';
+import { lockRunnerReservationAdvisoryKeysTx } from './reservation-locks.js';
+import { releaseReservationUnits, releaseTerminalRunnerInstanceReservationsByIds } from './reservations.js';
 import { runnersOutbox } from './schema/outbox.js';
 import { pendingJobExecutions } from './schema/pending-job-executions.js';
+import { reservations } from './schema/reservations.js';
 import { providerRunners } from './schema/runner-instances.js';
 import { runnerSessions } from './schema/runner-sessions.js';
 import { runningJobExecutions } from './schema/running-job-executions.js';
@@ -16,6 +18,34 @@ const runnerJobExecutionLockPrefix = 'runners_job_execution:';
 async function lockJobExecution(tx, jobExecutionId) {
     await tx.execute(sql`select pg_advisory_xact_lock(hashtext(${`${runnerJobExecutionLockPrefix}${jobExecutionId}`}))`);
 }
+async function releaseReservationsForTerminalRunningRows(tx, rows) {
+    // Converge after the lease fact changes. The reservation helper locks each provider runner
+    // and releases only when the runner is terminal and no uncancelled lease remains.
+    const providerRunnerIdsByProvisionerId = new Map();
+    for (const row of rows){
+        if (row.provisionerId === null || row.providerRunnerId === null) continue;
+        const providerRunnerIds = providerRunnerIdsByProvisionerId.get(row.provisionerId) ?? new Set();
+        providerRunnerIds.add(row.providerRunnerId);
+        providerRunnerIdsByProvisionerId.set(row.provisionerId, providerRunnerIds);
+    }
+    for (const provisionerId of [
+        ...providerRunnerIdsByProvisionerId.keys()
+    ].sort()){
+        const providerRunnerIds = providerRunnerIdsByProvisionerId.get(provisionerId);
+        if (!providerRunnerIds) continue;
+        await releaseTerminalRunnerInstanceReservationsByIds(tx, {
+            workspaceId: null,
+            provisionerId,
+            providerRunnerIds: [
+                ...providerRunnerIds
+            ].sort(),
+            requireUnlinkedSession: false,
+            // Lock and re-check the runner row locally so lease finalization remains retryable
+            // without a workflow/runner scope lock.
+            requireTerminalState: false
+        });
+    }
+}
 export async function getWorkspaceJobCounts(params) {
     const [pendingRows, runningRows] = await Promise.all([
         db().select({
@@ -41,11 +71,9 @@ export async function getWorkspaceJobCounts(params) {
             running: runningByWorkspace.get(workspaceId) ?? 0
         }));
 }
-// Idempotent while the job execution is still pending: a duplicate jobExecutionId already in
-// `runners_pending_jobs` is a no-op. Temporal retries the enqueue activity at-least-once, so a
-// unique-violation throw on a retry-after-lost-result would permanently fail a healthy execution.
-// The per-execution advisory lock serializes retries with lease expiry/reconciliation, and the
-// durable lease-expired event prevents a retry from re-queueing an execution already reaped.
+// The workflows outbox delivers queue facts at least once. The per-execution advisory lock and
+// pending/running checks make replay a no-op across the claim transition. A durable lease-expired
+// event also prevents a delayed replay from resurrecting an execution already reaped locally.
 export async function enqueueJobExecution(params) {
     const requiredLabels = [
         ...canonicalizeLabels(params.requiredLabels)
@@ -53,6 +81,10 @@ export async function enqueueJobExecution(params) {
     if (requiredLabels.length === 0) throw new EmptyRequiredLabelsError();
     const enqueued = await db().transaction(async (tx)=>{
         await lockJobExecution(tx, params.jobExecutionId);
+        const [running] = await tx.select({
+            jobExecutionId: runningJobExecutions.jobExecutionId
+        }).from(runningJobExecutions).where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId)).limit(1);
+        if (running) return false;
         const [leaseExpired] = await tx.select({
             id: runnersOutbox.id
         }).from(runnersOutbox).where(and(eq(runnersOutbox.eventType, RUNNER_JOB_LEASE_EXPIRED), sql`${runnersOutbox.payload}->>'jobExecutionId' = ${params.jobExecutionId}`)).limit(1);
@@ -64,27 +96,14 @@ export async function enqueueJobExecution(params) {
             jobId: params.jobId,
             jobExecutionId: params.jobExecutionId,
             projectId: params.projectId,
-            requiredLabels
+            requiredLabels,
+            createdAt: params.queuedAt
         }).onConflictDoNothing({
             target: pendingJobExecutions.jobExecutionId
         }).returning({
             createdAt: pendingJobExecutions.createdAt
         });
-        // A retry that hits the conflict inserts nothing: the first enqueue already
-        // emitted the queued event (durably, in the outbox), so re-emitting would
-        // only add a redundant row the subscriber coalesces away. Skip it.
-        if (!inserted) return false;
-        await writeOutboxEvent(tx, runnersOutbox, {
-            type: RUNNER_JOB_QUEUED,
-            payload: {
-                workflowRunId: params.workflowRunId,
-                workflowRunAttemptId: params.workflowRunAttemptId,
-                jobId: params.jobId,
-                jobExecutionId: params.jobExecutionId,
-                queuedAt: inserted.createdAt.toISOString()
-            }
-        });
-        return true;
+        return inserted !== undefined;
     });
     if (enqueued) jobExecutionEnqueuedCount.add(1);
 }
@@ -119,6 +138,20 @@ export async function claimPendingJobExecution(params) {
             provisionerId = session.provisionerId;
             providerRunnerId = session.providerRunnerId;
         }
+        const runnerInstanceCondition = runnerInstanceId ? eq(providerRunners.id, runnerInstanceId) : provisionerId && providerRunnerId ? and(eq(providerRunners.provisionerId, provisionerId), eq(providerRunners.providerRunnerId, providerRunnerId)) : null;
+        if (runnerInstanceCondition && provisionerId) {
+            const [runner] = await tx.select({
+                reservationId: providerRunners.reservationId,
+                intendedReservationId: providerRunners.intendedReservationId
+            }).from(providerRunners).where(runnerInstanceCondition).limit(1);
+            await lockRunnerReservationAdvisoryKeysTx(tx, {
+                provisionerId,
+                reservationIds: [
+                    runner?.reservationId,
+                    runner?.intendedReservationId
+                ].filter((reservationId)=>reservationId !== null && reservationId !== undefined)
+            });
+        }
         // `id` is a uuidv7 (time-ordered), so it is a deterministic FIFO tiebreaker
         // for rows sharing a created_at within a batch. Lock only the FIFO candidate before
         // attempting its execution advisory lock; putting pg_try_advisory_xact_lock in this
@@ -163,7 +196,6 @@ export async function claimPendingJobExecution(params) {
             provider: null,
             launchKind: params.maxClaims === null ? 'manual' : 'unknown'
         };
-        const runnerInstanceCondition = runnerInstanceId ? eq(providerRunners.id, runnerInstanceId) : provisionerId && providerRunnerId ? and(eq(providerRunners.provisionerId, provisionerId), eq(providerRunners.providerRunnerId, providerRunnerId)) : null;
         if (runnerInstanceCondition) {
             const [claimedRunner] = await tx.update(providerRunners).set({
                 firstClaimedAt: sql`coalesce(${providerRunners.firstClaimedAt}, ${claimed.claimedAt})`,
@@ -174,6 +206,8 @@ export async function claimPendingJobExecution(params) {
                 provider: providerRunners.providerKind,
                 launchKind: providerRunners.launchKind,
                 runnerInstanceId: providerRunners.id,
+                reservationId: providerRunners.reservationId,
+                intendedReservationId: providerRunners.intendedReservationId,
                 sessionCreatedAtEpochMs: sql`(
             select extract(epoch from ${runnerSessions.createdAt})::double precision * 1000
             from ${runnerSessions}
@@ -184,6 +218,31 @@ export async function claimPendingJobExecution(params) {
                 queueTimeObservation.provider = claimedRunner.provider;
                 queueTimeObservation.launchKind = claimedRunner.launchKind;
             }
+            if (claimedRunner?.isFirstClaim) {
+                const [releasedRunner] = await tx.update(providerRunners).set({
+                    intendedReservationId: null,
+                    reservationReleasedAt: sql`now()`,
+                    updatedAt: sql`now()`
+                }).where(and(eq(providerRunners.id, claimedRunner.runnerInstanceId), or(isNotNull(providerRunners.reservationId), isNotNull(providerRunners.intendedReservationId)), isNull(providerRunners.reservationReleasedAt))).returning({
+                    provisionerId: providerRunners.provisionerId
+                });
+                const reservationId = claimedRunner.intendedReservationId ?? claimedRunner.reservationId;
+                if (releasedRunner?.provisionerId && reservationId) {
+                    const [reservation] = await tx.select({
+                        workspaceId: reservations.workspaceId
+                    }).from(reservations).where(and(eq(reservations.id, reservationId), eq(reservations.provisionerId, releasedRunner.provisionerId))).limit(1);
+                    if (reservation) await releaseReservationUnits(tx, {
+                        workspaceId: reservation.workspaceId,
+                        provisionerId: releasedRunner.provisionerId,
+                        releases: [
+                            {
+                                reservationId,
+                                count: 1
+                            }
+                        ]
+                    });
+                }
+            }
             if (claimedRunner?.isFirstClaim && claimedRunner.firstClaimedAt !== null && claimedRunner.sessionCreatedAtEpochMs !== null && claimedRunner.sessionCreatedAtEpochMs !== undefined) activationToFirstClaimObservation = {
                 durationMilliseconds: claimedRunner.firstClaimedAt.getTime() - claimedRunner.sessionCreatedAtEpochMs,
                 provider: claimedRunner.provider,
@@ -227,57 +286,18 @@ async function touchRunnerSessionLiveness(params) {
         updatedAt: sql`now()`
     }).where(and(eq(runnerSessions.id, params.runnerSessionId), eq(runnerSessions.workspaceId, params.workspaceId), sql`${runnerSessions.updatedAt} < now() - (${params.throttleSeconds} || ' seconds')::interval`));
 }
-/**
- * Releases a job execution's lease when the orchestration workflow finalizes it: deletes the
- * running-job-execution row AND any lingering pending row for the same execution, in one tx.
- * When the deleted lease was the last one for a terminal provider runner, it also releases the
- * runner's reservation in the same runner-owned transaction. Terminal reports and workflow lease
- * finalization remain independently retryable; they do not share a cross-module scope lock.
- * Idempotent (0-row no-op), no token scope (the workflow is authoritative), and
- * emits no event: the workflow already owns the outcome. Sweeping the pending row
- * too closes the at-least-once window where an enqueue retry left an orphan that a
- * later claim would otherwise pick up for an already-finished job execution.
- */ export async function releaseJobExecution(params) {
-    await db().transaction(async (tx)=>{
-        await lockJobExecution(tx, params.jobExecutionId);
-        // Delete pending before running to match `claimPendingJobExecution`'s lock-acquisition
-        // order (it locks the pending row first, then the running row). A concurrent
-        // claim picking up an orphan pending row for this same job execution would otherwise
-        // deadlock against the reverse order here.
-        await tx.delete(pendingJobExecutions).where(eq(pendingJobExecutions.jobExecutionId, params.jobExecutionId));
-        const deletedRunningRows = await tx.delete(runningJobExecutions).where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId)).returning({
-            workspaceId: runningJobExecutions.workspaceId,
-            provisionerId: runningJobExecutions.provisionerId,
-            providerRunnerId: runningJobExecutions.providerRunnerId
-        });
-        const deletedRunningRow = deletedRunningRows[0];
-        if (deletedRunningRow?.provisionerId && deletedRunningRow.providerRunnerId) {
-            await releaseTerminalRunnerInstanceReservationsByIds(tx, {
-                workspaceId: null,
-                provisionerId: deletedRunningRow.provisionerId,
-                providerRunnerIds: [
-                    deletedRunningRow.providerRunnerId
-                ],
-                requireUnlinkedSession: false,
-                // Lock and re-check the runner row locally so terminal reporting remains retryable
-                // without a workflow/runner scope lock.
-                requireTerminalState: false
-            });
-        }
-    });
-}
 /**
  * Reaps stale leases (bounded by `limit`), emitting one
  * `runners.job.lease_expired` event per reaped job execution.
  *
  * The cutoff is re-checked in the DELETE, not just the locking subquery, so a
  * heartbeat landing mid-call spares the live row. Each reaped execution also sweeps its
- * pending row: a failed best-effort `releaseJobExecution` would otherwise leave an orphan
- * that a later claim re-runs as an already-finished job execution.
+ * pending row so an at-least-once queue replay cannot leave an orphan.
  *
- * Locks pending-then-running to match `claimPendingJobExecution`, `releaseJobExecution`, and
- * `reconcileTerminalJobExecution`. The stale candidate scan intentionally does not lock running
- * rows first; the running-row DELETE re-checks the stale predicate after the pending-row sweep.
+ * Locks pending-then-running to match `claimPendingJobExecution` and
+ * `reconcileTerminalJobExecution`. The stale candidate scan intentionally does not lock
+ * running rows first; the running-row DELETE re-checks the stale predicate after the
+ * pending-row sweep.
  */ export async function expireStuckJobExecutions(params) {
     const reaped = await db().transaction(async (tx)=>{
         const heartbeatCutoff = sql`now() - (${params.thresholdSeconds} || ' seconds')::interval`;
@@ -303,9 +323,12 @@ async function touchRunnerSessionLiveness(params) {
             workflowRunId: runningJobExecutions.workflowRunId,
             workflowRunAttemptId: runningJobExecutions.workflowRunAttemptId,
             jobId: runningJobExecutions.jobId,
-            jobExecutionId: runningJobExecutions.jobExecutionId
+            jobExecutionId: runningJobExecutions.jobExecutionId,
+            provisionerId: runningJobExecutions.provisionerId,
+            providerRunnerId: runningJobExecutions.providerRunnerId
         });
         if (deleted.length === 0) return [];
+        await releaseReservationsForTerminalRunningRows(tx, deleted);
         await writeOutboxEvents(tx, runnersOutbox, deleted.map((row)=>({
                 type: RUNNER_JOB_LEASE_EXPIRED,
                 payload: {
@@ -315,7 +338,12 @@ async function touchRunnerSessionLiveness(params) {
                     jobExecutionId: row.jobExecutionId
                 }
             })));
-        return deleted;
+        return deleted.map(({ workflowRunId, workflowRunAttemptId, jobId, jobExecutionId })=>({
+                workflowRunId,
+                workflowRunAttemptId,
+                jobId,
+                jobExecutionId
+            }));
     });
     if (reaped.length > 0) jobExecutionLeaseExpiredCount.add(reaped.length);
     return reaped;
@@ -453,8 +481,8 @@ export async function recordHeartbeat(params) {
 }
 /**
  * Reconciles a terminal job execution with runner state in one transaction: removes its pending
- * queue row and requests cancellation on its running lease, if either exists. The operation is
- * idempotent and preserves the first cancellation-request timestamp.
+ * queue row, requests cancellation on its running lease, and converges any linked reservation.
+ * The operation is idempotent and preserves the first cancellation-request timestamp.
  */ export async function reconcileTerminalJobExecution(params) {
     await db().transaction(async (tx)=>{
         await lockJobExecution(tx, params.jobExecutionId);
@@ -462,18 +490,13 @@ export async function recordHeartbeat(params) {
         // pending rows with SKIP LOCKED before inserting the running lease, so this ordering makes
         // a concurrent terminal reconciliation either win before claim or cancel the new lease.
         await tx.delete(pendingJobExecutions).where(eq(pendingJobExecutions.jobExecutionId, params.jobExecutionId));
-        await tx.update(runningJobExecutions).set({
+        const cancelledRunningRows = await tx.update(runningJobExecutions).set({
             cancellationRequestedAt: sql`COALESCE(${runningJobExecutions.cancellationRequestedAt}, now())`
-        }).where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId));
-    });
-}
-export async function cancelRunnerJobs(params) {
-    if (params.jobIds.length === 0) return;
-    await db().transaction(async (tx)=>{
-        await tx.delete(pendingJobExecutions).where(inArray(pendingJobExecutions.jobId, params.jobIds));
-        await tx.update(runningJobExecutions).set({
-            cancellationRequestedAt: sql`COALESCE(${runningJobExecutions.cancellationRequestedAt}, now())`
-        }).where(inArray(runningJobExecutions.jobId, params.jobIds));
+        }).where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId)).returning({
+            provisionerId: runningJobExecutions.provisionerId,
+            providerRunnerId: runningJobExecutions.providerRunnerId
+        });
+        await releaseReservationsForTerminalRunningRows(tx, cancelledRunningRows);
     });
 }