@shipfox/api-runners 2.0.0

package/.turbo/turbo-build.log

@@ -0,0 +1,2 @@
+$ shipfox-swc
+Successfully compiled: 81 files with swc (114.17ms)

package/.turbo/turbo-type$colon$emit.log

@@ -0,0 +1 @@
+$ shipfox-tsc-emit

package/.turbo/turbo-type.log

@@ -0,0 +1 @@
+$ shipfox-tsc-check

package/CHANGELOG.md

@@ -0,0 +1,187 @@
+# @shipfox/api-runners
+
+## 2.0.0
+
+### Minor Changes
+
+- 1b0d344: Publishes the complete API runtime closure with packed-consumer-safe internal imports and records its exact package set in application releases.
+
+### Patch Changes
+
+- Updated dependencies [0cd6dd4]
+- Updated dependencies [a68458a]
+- Updated dependencies [6eba800]
+- Updated dependencies [c31a7e0]
+- Updated dependencies [1b0d344]
+- Updated dependencies [521e006]
+  - @shipfox/node-module@0.2.0
+  - @shipfox/node-temporal@0.2.0
+  - @shipfox/api-auth@2.0.0
+  - @shipfox/api-auth-context@2.0.0
+  - @shipfox/api-runners-dto@2.0.0
+  - @shipfox/api-workflows-dto@2.0.0
+  - @shipfox/node-rate-limit@0.2.0
+  - @shipfox/node-tokens@0.2.0
+  - @shipfox/runner-labels@0.1.0
+  - @shipfox/config@1.2.1
+  - @shipfox/node-drizzle@0.2.1
+  - @shipfox/node-fastify@0.2.1
+  - @shipfox/node-opentelemetry@0.5.0
+  - @shipfox/node-outbox@0.2.1
+  - @shipfox/node-postgres@0.4.1
+
+## 0.1.2
+
+### Patch Changes
+
+- Updated dependencies [705dd43]
+  - @shipfox/node-outbox@0.2.0
+  - @shipfox/api-auth@0.1.2
+  - @shipfox/node-module@0.1.2
+
+## 0.1.1
+
+### Patch Changes
+
+- Updated dependencies [ec75cd5]
+- Updated dependencies [6a1fb54]
+  - @shipfox/node-drizzle@0.2.0
+  - @shipfox/node-postgres@0.4.0
+  - @shipfox/api-auth@0.1.1
+  - @shipfox/node-module@0.1.1
+  - @shipfox/node-outbox@0.1.1
+
+## 0.1.0
+
+### Minor Changes
+
+- 8100b48: Adds the provisioned-runner reconcile endpoint and shared request/response schemas for provisioner state recovery.
+- 7a9943d: Adds the backend contract for per-step execution: job claims mint a lease token for the step API, step reports carry attempts and exit codes, and workflow completion can be signalled through the workflows outbox. The runner-side step loop is intentionally owned by the follow-up runner protocol work.
+- 2bc5595: Adds workflow-run cancellation across the API, orchestration queue cleanup, event contract, and run-page cancel action.
+- c47be09: Reshape Scheduling around runner job leases. Jobs are now enqueued with `workflowRunId`, `workflowRunAttemptId`, `jobId`, and `jobExecutionId`; the claim route mints a job lease token and returns the same workflow/job identity tuple. The stuck-job detector emits `runners.job.lease_expired` with that tuple when a lease expires.
+- f9f059e: Cut the runner protocol over to per-step pull/report and remove the job-atomic path.
+
+  The job workflow now terminates on two signals: `job-finished` (raised by
+  `recordStepResult` on step exhaustion) and `job-lease-expired` (raised by the new
+  `runners.job.lease_expired` subscriber). A precedence ladder keeps a genuinely
+  finished job from being failed by a late lease expiry, and the lease-expiry branch
+  re-derives the outcome from the authoritative step projection in a single
+  transaction (server state is the final gate). On finish the workflow releases the
+  lease via `releaseJob` (deleting both the running and any orphaned pending row);
+  release is best-effort so a Scheduling outage never blocks the run DAG.
+
+  Removed the atomic path end to end: the runner `POST /runners/jobs/:jobId/complete`
+  route, the `RUNNER_JOB_COMPLETED` event, `finalizeRunningJob`/`completeJob`, the
+  `applyStepResults*` apply path and its workflow subscriber, and the dead
+  `jobPayload*`/`complete-job` DTO schemas. The runner now parses the step-less claim
+  response, and `claimPendingJob` drops an orphan pending row instead of poison-looping.
+
+  Internal breaking change (deleted exported DTOs/events and a runner route, plus a
+  Temporal signal rename) consumed only within this monorepo; backend and agent ship
+  together.
+
+- 1c1fb3e: Adds shared fixed-window rate limiting for provisioner token minting and ephemeral runner registration.
+- fb64f13: Adds a job lease capability token (HS256, `verifyJobLeaseToken` plus the claims schema) so runner step calls can be authenticated in-process without a hop back to Scheduling.
+- 03d9eae: Adds runner-advertised tool capabilities to registration, heartbeat, persistence, and runner protocol reporting.
+- 6181819: Adds runner registration sessions with bounded label contracts, session-token auth, and lease-token heartbeat ownership.
+
+### Patch Changes
+
+- 2325d76: Adds provisioned-runner terminate intent signals for cancelled bound jobs across runner polling and reconcile responses.
+- 89026d5: Fixes provisioned-runner reconcile results when fresh lifecycle reports commit during stale-absent termination.
+- c0a883c: Moves the job lease capability token codec and its claims schema from the runners packages into api-auth/api-auth-dto, renaming its config to `AUTH_JOB_LEASE_TOKEN_*`, so all signed-token codecs live with authentication. Adds a shared leased-job auth context for request-scoped lease claims, and a shared `createLeaseTokenAuthMethod` (the `leased-job` auth method) registered on the auth module so any feature module can protect routes with a lease token by name.
+- ae7a63c: Adds daily dispatched outbox row retention with bounded cleanup batches and retention indexes on module outbox tables.
+- 5729548: Stuck-job expiry now reaps a bounded batch in one transaction instead of N+1: a single `DELETE … RETURNING` (oldest-first, `FOR UPDATE SKIP LOCKED`, capped at 100 per tick) feeds a multi-row outbox insert via the new `writeOutboxEvents` helper. Behavior is unchanged (same rows reaped, one `runners.job.lease_expired` event per reaped job, same orphan-pending sweep).
+- e250c4c: Propagates `projectId` end-to-end into the job lease token. Workflows sources the `{workspaceId, projectId, workflowRunId, workflowRunAttemptId, jobId, jobExecutionId}` identity tuple and threads it through the runner pending/running job tables and lease claims. This is lease-shape groundwork for per-project log-ingest authorization; the stream-stamping consumer lands separately.
+- 2617db9: Folds the runner database migrations into a single baseline and drops six redundant indexes; the resulting schema is unchanged.
+- 247cbd6: Adds label-aware runner job claiming with shared runner-label validation and required-label orchestration.
+- 1d98b19: Rewrites the pending-job claim query with the Drizzle query builder instead of raw SQL, keeping the same FOR UPDATE SKIP LOCKED locking behavior.
+- 5823bac: Removes the per-request workspace existence and status check from provisioner token auth, severing the last `@shipfox/api-workspaces` dependency in `@shipfox/api-runners`; workspace-status enforcement on the provisioner path moves to the upcoming workspace removal/disable work.
+- 75520ff: Add the foundation for metrics observability. `@shipfox/node-module` gains an optional `metrics` hook on `ShipfoxModule` plus `registerModuleMetrics`, a declarative slot for modules to register service-level metrics (observable gauges) once at app startup, kept separate from `initializeModules` so unit tests never bind the metrics port. `@shipfox/api-runners` is instrumented as the worked example across both planes: instance counters for job enqueue, claim, and lease expiry recorded inline, and `runners_pending_jobs` / `runners_running_jobs` observable gauges over a new `getJobQueueDepth` query wired through the module hook.
+- 62720ea: Consolidates runner label canonicalization on `@shipfox/runner-labels` across runner scheduling and protocol code.
+- b855d6f: Adds reconciliation observability metrics for provisioned-runner divergence and terminate-intent reconciliation.
+- 362b3eb: Scope runner log append authorization to the dispatched step attempt carried by the job lease token.
+- 3bea87f: Adds a typed `subscriberFactory` that binds each outbox event name to its payload type at construction, so subscriber handlers receive a typed `(payload, event)` and the per-handler `event.payload as X` casts are gone; a private brand makes the factory the only way to build a module subscriber.
+- 82d22e4: Make the workspace-membership gate stateless. `requireWorkspaceAccess` now lives in `@shipfox/api-auth-context` and authorizes a request purely from the verified session-token claims, replacing the `requireMembership` gate in `@shipfox/api-workspaces` that read the workspace row from the database on every workspace-scoped request. Membership and role already travel in the token, so the check needs no database access.
+
+  This removes the per-request database read and severs the runtime dependency on `@shipfox/api-workspaces` from feature modules that only needed the membership gate (integration providers, secrets, projects, agent, runners). Workspace existence and `active`-status enforcement, which no code path currently exercises, moves off the hot path; enforce it at token issuance when workspace suspension is introduced.
+
+- 2933c33: Adds drain-boundary Zod validation for current outbox publisher event payloads.
+- 8b9c3e0: Runs the API runners and integration core test suites without per-file Vitest module isolation, removing runner auth-helper mocks and cleaning up module-reset handling for shared test modules.
+- 0dd23a7: Warns on agent tool capability mismatches during dispatch without blocking label-matched runners.
+- 8ecc121: Track queue/run/finish timing for workflow runs and jobs. Adds nullable `started_at`/`finished_at` to workflow runs and `queued_at`/`started_at`/`finished_at` to jobs, exposed on the run and job DTOs. The runners module emits two new authoritative-timestamp events (`runners.job.queued`, `runners.job.started`) in the same transaction as the enqueue/claim; workflows projects them onto the job row with a first-write-wins `coalesce`, so the at-least-once outbox can redeliver out of order safely. Run `started_at`/`finished_at` and job `finished_at` are stamped in-module at the status transitions. All columns are nullable and eventually consistent, so consumers must treat a missing endpoint as "not yet known" and clamp any duration math.
+- Updated dependencies [eb40964]
+- Updated dependencies [5c18360]
+- Updated dependencies [34ba284]
+- Updated dependencies [8100b48]
+- Updated dependencies [5707d6d]
+- Updated dependencies [7a9943d]
+- Updated dependencies [b9c3f32]
+- Updated dependencies [2325d76]
+- Updated dependencies [d02c5fd]
+- Updated dependencies [c17dd6e]
+- Updated dependencies [a81b68c]
+- Updated dependencies [c0a883c]
+- Updated dependencies [72ce351]
+- Updated dependencies [e47f8da]
+- Updated dependencies [736249b]
+- Updated dependencies [2bc5595]
+- Updated dependencies [7b175f5]
+- Updated dependencies [c47be09]
+- Updated dependencies [f9f059e]
+- Updated dependencies [940696a]
+- Updated dependencies [f98c2be]
+- Updated dependencies [e9396c9]
+- Updated dependencies [ae7a63c]
+- Updated dependencies [5729548]
+- Updated dependencies [f92122b]
+- Updated dependencies [e250c4c]
+- Updated dependencies [b525dcd]
+- Updated dependencies [b0a0e1a]
+- Updated dependencies [857fd73]
+- Updated dependencies [1c1fb3e]
+- Updated dependencies [3afb7e3]
+- Updated dependencies [1daf39a]
+- Updated dependencies [247cbd6]
+- Updated dependencies [c652a68]
+- Updated dependencies [fb64f13]
+- Updated dependencies [75520ff]
+- Updated dependencies [62720ea]
+- Updated dependencies [795f440]
+- Updated dependencies [3dcd751]
+- Updated dependencies [c0a883c]
+- Updated dependencies [362b3eb]
+- Updated dependencies [d6d4862]
+- Updated dependencies [c0a883c]
+- Updated dependencies [6077301]
+- Updated dependencies [3bea87f]
+- Updated dependencies [82d22e4]
+- Updated dependencies [d69b164]
+- Updated dependencies [2fb3e87]
+- Updated dependencies [ef1e917]
+- Updated dependencies [61de795]
+- Updated dependencies [88b9793]
+- Updated dependencies [27770eb]
+- Updated dependencies [2933c33]
+- Updated dependencies [03d9eae]
+- Updated dependencies [a5c7562]
+- Updated dependencies [6181819]
+- Updated dependencies [e699508]
+- Updated dependencies [9c149d1]
+- Updated dependencies [fb64f13]
+- Updated dependencies [8ecc121]
+  - @shipfox/api-workflows-dto@0.1.0
+  - @shipfox/node-fastify@0.2.0
+  - @shipfox/api-runners-dto@0.1.0
+  - @shipfox/node-drizzle@0.1.0
+  - @shipfox/api-auth@0.1.0
+  - @shipfox/node-tokens@0.1.0
+  - @shipfox/api-auth-context@0.1.0
+  - @shipfox/node-opentelemetry@0.4.2
+  - @shipfox/node-postgres@0.3.2
+  - @shipfox/node-temporal@0.1.1
+  - @shipfox/node-module@0.1.0
+  - @shipfox/node-outbox@0.1.0
+  - @shipfox/node-rate-limit@0.1.0
+  - @shipfox/runner-labels@0.0.1
+  - @shipfox/config@1.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Shipfox
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/config.d.ts

@@ -0,0 +1,30 @@
+export declare const config: Readonly<{
+    EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: number;
+    REGISTRATION_TOKEN_BATCH_MAX: number;
+    PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: number;
+    PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS: number;
+    EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS: number;
+    EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: number;
+    RUNNERS_RATE_LIMIT_TIMEOUT_MS: number;
+    RATE_LIMIT_IDENTIFIER_SECRET: string | undefined;
+    RESERVATION_TTL_SECONDS: number;
+    RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: number;
+    RESERVATION_POLL_INTERVAL_MS: number;
+    RESERVATION_POLL_MAX_INTERVAL_MS: number;
+    RUNNER_ACTIVE_WINDOW_SECONDS: number;
+    RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS: number;
+    RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS: number;
+    RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS: number;
+    RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS: number;
+    RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT: number;
+    RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS: number;
+    RUNNER_SESSION_MANUAL_RETENTION_DAYS: number;
+    RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS: number;
+    RUNNER_SESSION_GC_BATCH_SIZE: number;
+    RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS: number;
+    RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE: number;
+    PROVISIONER_ACTIVE_WINDOW_SECONDS: number;
+    PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: number;
+    PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: boolean;
+} & import("@shipfox/config").CleanedEnvAccessors>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;kDA6GjB,CAAC"}

package/dist/config.js

@@ -0,0 +1,208 @@
+import { REGISTRATION_TOKEN_BATCH_HARD_MAX } from '@shipfox/api-runners-dto';
+import { bool, createConfig, num, str } from '@shipfox/config';
+import { STUCK_JOB_THRESHOLD_SECONDS } from '#core/maintenance-policy.js';
+const EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS = 3600;
+export const config = createConfig({
+    EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: num({
+        desc: `Lifetime of a provisioner-minted runner registration token, in seconds. The token can be exchanged once by a runner before this time passes. Set this between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,
+        default: 300
+    }),
+    REGISTRATION_TOKEN_BATCH_MAX: num({
+        desc: `Maximum number of runner registration tokens a provisioner can mint in one batch request. Set this between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,
+        default: 500
+    }),
+    PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: num({
+        desc: 'Maximum number of batch runner registration token mint requests one provisioner can make per rate-limit window.',
+        default: 120
+    }),
+    PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS: num({
+        desc: 'Rate-limit window for provisioner batch runner registration token mint requests, in seconds.',
+        default: 60
+    }),
+    EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS: num({
+        desc: 'Maximum number of runner registration attempts one ephemeral registration token can make per rate-limit window.',
+        default: 5
+    }),
+    EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: num({
+        desc: 'Rate-limit window for runner registration attempts with one ephemeral registration token, in seconds.',
+        default: 60
+    }),
+    RUNNERS_RATE_LIMIT_TIMEOUT_MS: num({
+        desc: 'Maximum time, in milliseconds, a runners rate-limit storage check may wait before the request fails closed.',
+        default: 250
+    }),
+    RATE_LIMIT_IDENTIFIER_SECRET: str({
+        desc: 'Optional secret used to HMAC identifiers before storing rate-limit counters. Leave it unset to derive a stable key from AUTH_JWT_SECRET.',
+        default: undefined
+    }),
+    RESERVATION_TTL_SECONDS: num({
+        desc: 'Lifetime of a count-based runner reservation, in seconds. Expired reservations stop counting against queued demand.',
+        default: 60
+    }),
+    RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({
+        desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',
+        default: 30
+    }),
+    RESERVATION_POLL_INTERVAL_MS: num({
+        desc: 'Initial interval between demand re-checks while a provisioner request is waiting, in milliseconds.',
+        default: 1000
+    }),
+    RESERVATION_POLL_MAX_INTERVAL_MS: num({
+        desc: 'Maximum backoff interval between demand re-checks while a provisioner request is waiting, in milliseconds.',
+        default: 5000
+    }),
+    RUNNER_ACTIVE_WINDOW_SECONDS: num({
+        desc: 'Time window, in seconds, used to list active runners from recent heartbeats and provisioned runner reports.',
+        default: 60
+    }),
+    RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS: num({
+        desc: 'Time window, in seconds, after which a runner tool capability report is treated as stale. Set this higher than the runner heartbeat interval so active runners keep their advertised tools fresh.',
+        default: 60
+    }),
+    RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS: num({
+        desc: 'Grace window, in seconds, before maintenance expires a claimed job that has not sent its first heartbeat. Set this lower than the normal stuck-job threshold so startup crashes release work quickly.',
+        default: 60
+    }),
+    RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS: num({
+        desc: 'Grace window, in seconds, before reconcile marks an absent provisioned runner as terminated. Set this higher than the provisioner report interval so a transient empty or partial observed set does not kill a live runner.',
+        default: 120
+    }),
+    RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS: num({
+        desc: 'Time, in seconds, after which a provisioned runner with no recent report, no live provisioner, no live runner session, and no running job is marked failed by backend maintenance.',
+        default: 300
+    }),
+    RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT: num({
+        desc: 'Maximum number of stale provisioned runners the maintenance worker marks failed in one run. Higher values clear backlogs faster but hold database locks longer.',
+        default: 100
+    }),
+    RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS: num({
+        desc: 'Minimum time, in seconds, between runner session liveness writes from job request polls. Set this lower than RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS so active idle runners stay fresh.',
+        default: 10
+    }),
+    RUNNER_SESSION_MANUAL_RETENTION_DAYS: num({
+        desc: 'How long manual runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',
+        default: 30
+    }),
+    RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS: num({
+        desc: 'How long ephemeral runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',
+        default: 7
+    }),
+    RUNNER_SESSION_GC_BATCH_SIZE: num({
+        desc: 'Maximum number of expired runner sessions maintenance deletes in one pass.',
+        default: 1000
+    }),
+    RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS: num({
+        desc: 'How long consumed or expired ephemeral registration tokens are retained for audit and debugging before maintenance deletes them, in days. Active tokens that are neither consumed nor expired are never deleted. This window is independent of the runner-session retention windows.',
+        default: 7
+    }),
+    RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE: num({
+        desc: 'Maximum number of consumed or expired ephemeral registration tokens maintenance deletes in one pass.',
+        default: 1000
+    }),
+    PROVISIONER_ACTIVE_WINDOW_SECONDS: num({
+        desc: 'Time window, in seconds, used to list active provisioners from recent authenticated requests.',
+        default: 120
+    }),
+    PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: num({
+        desc: 'Minimum time, in seconds, between last-seen writes for one provisioner token.',
+        default: 10
+    }),
+    PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: bool({
+        desc: 'Whether runners_provisioned_runner_count_divergence includes template_key as a metric label. Use true or false. Defaults to false because template keys can create high-cardinality metric series. Set true only when template keys are bounded and stable.',
+        default: false
+    })
+});
+if (!Number.isInteger(config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS) || config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS < 1 || config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS > EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS) {
+    throw new Error(`EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS (${config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS}) must be a whole number of seconds between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`);
+}
+if (!Number.isInteger(config.REGISTRATION_TOKEN_BATCH_MAX) || config.REGISTRATION_TOKEN_BATCH_MAX < 1 || config.REGISTRATION_TOKEN_BATCH_MAX > REGISTRATION_TOKEN_BATCH_HARD_MAX) {
+    throw new Error(`REGISTRATION_TOKEN_BATCH_MAX (${config.REGISTRATION_TOKEN_BATCH_MAX}) must be a whole number between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`);
+}
+for (const [name, value] of [
+    [
+        'PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS',
+        config.PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS
+    ],
+    [
+        'PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS',
+        config.PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS
+    ],
+    [
+        'EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS',
+        config.EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS
+    ],
+    [
+        'EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS',
+        config.EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS
+    ],
+    [
+        'RUNNERS_RATE_LIMIT_TIMEOUT_MS',
+        config.RUNNERS_RATE_LIMIT_TIMEOUT_MS
+    ]
+]){
+    if (!Number.isInteger(value) || value < 1) {
+        throw new Error(`${name} (${value}) must be a whole number >= 1.`);
+    }
+}
+if (!Number.isInteger(config.RESERVATION_TTL_SECONDS) || config.RESERVATION_TTL_SECONDS < 1) {
+    throw new Error(`RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (!Number.isInteger(config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS) || config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS < 0) {
+    throw new Error(`RESERVATION_LONG_POLL_MAX_WAIT_SECONDS (${config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS}) must be a whole number of seconds >= 0.`);
+}
+if (!Number.isInteger(config.RESERVATION_POLL_INTERVAL_MS) || config.RESERVATION_POLL_INTERVAL_MS < 1) {
+    throw new Error(`RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}) must be a whole number of milliseconds >= 1.`);
+}
+if (!Number.isInteger(config.RESERVATION_POLL_MAX_INTERVAL_MS) || config.RESERVATION_POLL_MAX_INTERVAL_MS < config.RESERVATION_POLL_INTERVAL_MS) {
+    throw new Error(`RESERVATION_POLL_MAX_INTERVAL_MS (${config.RESERVATION_POLL_MAX_INTERVAL_MS}) must be a whole number of milliseconds >= RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}).`);
+}
+if (!Number.isInteger(config.RUNNER_ACTIVE_WINDOW_SECONDS) || config.RUNNER_ACTIVE_WINDOW_SECONDS < 1) {
+    throw new Error(`RUNNER_ACTIVE_WINDOW_SECONDS (${config.RUNNER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS) || config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS < 1) {
+    throw new Error(`RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS (${config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS) || config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS < 1 || config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS >= STUCK_JOB_THRESHOLD_SECONDS) {
+    throw new Error(`RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS (${config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS}) must be a whole number of seconds >= 1 and < ${STUCK_JOB_THRESHOLD_SECONDS}.`);
+}
+if (!Number.isInteger(config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS) || config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS < 1) {
+    throw new Error(`RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS (${config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS) || config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS < 1) {
+    throw new Error(`RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT) || config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT < 1) {
+    throw new Error(`RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT (${config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT}) must be a whole number >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS) || config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS < 1) {
+    throw new Error(`RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_SESSION_MANUAL_RETENTION_DAYS) || config.RUNNER_SESSION_MANUAL_RETENTION_DAYS < 1) {
+    throw new Error(`RUNNER_SESSION_MANUAL_RETENTION_DAYS (${config.RUNNER_SESSION_MANUAL_RETENTION_DAYS}) must be a whole number of days >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS) || config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS < 1) {
+    throw new Error(`RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS (${config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS}) must be a whole number of days >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_SESSION_GC_BATCH_SIZE) || config.RUNNER_SESSION_GC_BATCH_SIZE < 1) {
+    throw new Error(`RUNNER_SESSION_GC_BATCH_SIZE (${config.RUNNER_SESSION_GC_BATCH_SIZE}) must be a whole number >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS) || config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS < 1) {
+    throw new Error(`RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS (${config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS}) must be a whole number of days >= 1.`);
+}
+if (!Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE) || config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE < 1) {
+    throw new Error(`RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE (${config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE}) must be a whole number >= 1.`);
+}
+if (!Number.isInteger(config.PROVISIONER_ACTIVE_WINDOW_SECONDS) || config.PROVISIONER_ACTIVE_WINDOW_SECONDS < 1) {
+    throw new Error(`PROVISIONER_ACTIVE_WINDOW_SECONDS (${config.PROVISIONER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (!Number.isInteger(config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS) || config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS < 1) {
+    throw new Error(`PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`);
+}
+if (config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <= config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS) {
+    throw new Error(`RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}).`);
+}
+if (config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <= config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS) {
+    throw new Error(`RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}).`);
+}
+
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts"],"sourcesContent":["import {REGISTRATION_TOKEN_BATCH_HARD_MAX} from '@shipfox/api-runners-dto';\nimport {bool, createConfig, num, str} from '@shipfox/config';\nimport {STUCK_JOB_THRESHOLD_SECONDS} from '#core/maintenance-policy.js';\n\nconst EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS = 3600;\n\nexport const config = createConfig({\n  EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS: num({\n    desc: `Lifetime of a provisioner-minted runner registration token, in seconds. The token can be exchanged once by a runner before this time passes. Set this between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n    default: 300,\n  }),\n  REGISTRATION_TOKEN_BATCH_MAX: num({\n    desc: `Maximum number of runner registration tokens a provisioner can mint in one batch request. Set this between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n    default: 500,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of batch runner registration token mint requests one provisioner can make per rate-limit window.',\n    default: 120,\n  }),\n  PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for provisioner batch runner registration token mint requests, in seconds.',\n    default: 60,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS: num({\n    desc: 'Maximum number of runner registration attempts one ephemeral registration token can make per rate-limit window.',\n    default: 5,\n  }),\n  EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS: num({\n    desc: 'Rate-limit window for runner registration attempts with one ephemeral registration token, in seconds.',\n    default: 60,\n  }),\n  RUNNERS_RATE_LIMIT_TIMEOUT_MS: num({\n    desc: 'Maximum time, in milliseconds, a runners rate-limit storage check may wait before the request fails closed.',\n    default: 250,\n  }),\n  RATE_LIMIT_IDENTIFIER_SECRET: str({\n    desc: 'Optional secret used to HMAC identifiers before storing rate-limit counters. Leave it unset to derive a stable key from AUTH_JWT_SECRET.',\n    default: undefined,\n  }),\n  RESERVATION_TTL_SECONDS: num({\n    desc: 'Lifetime of a count-based runner reservation, in seconds. Expired reservations stop counting against queued demand.',\n    default: 60,\n  }),\n  RESERVATION_LONG_POLL_MAX_WAIT_SECONDS: num({\n    desc: 'Maximum time the provisioner demand poll endpoint waits for reservable demand before returning, in seconds.',\n    default: 30,\n  }),\n  RESERVATION_POLL_INTERVAL_MS: num({\n    desc: 'Initial interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 1000,\n  }),\n  RESERVATION_POLL_MAX_INTERVAL_MS: num({\n    desc: 'Maximum backoff interval between demand re-checks while a provisioner request is waiting, in milliseconds.',\n    default: 5000,\n  }),\n  RUNNER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active runners from recent heartbeats and provisioned runner reports.',\n    default: 60,\n  }),\n  RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS: num({\n    desc: 'Time window, in seconds, after which a runner tool capability report is treated as stale. Set this higher than the runner heartbeat interval so active runners keep their advertised tools fresh.',\n    default: 60,\n  }),\n  RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before maintenance expires a claimed job that has not sent its first heartbeat. Set this lower than the normal stuck-job threshold so startup crashes release work quickly.',\n    default: 60,\n  }),\n  RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS: num({\n    desc: 'Grace window, in seconds, before reconcile marks an absent provisioned runner as terminated. Set this higher than the provisioner report interval so a transient empty or partial observed set does not kill a live runner.',\n    default: 120,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS: num({\n    desc: 'Time, in seconds, after which a provisioned runner with no recent report, no live provisioner, no live runner session, and no running job is marked failed by backend maintenance.',\n    default: 300,\n  }),\n  RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT: num({\n    desc: 'Maximum number of stale provisioned runners the maintenance worker marks failed in one run. Higher values clear backlogs faster but hold database locks longer.',\n    default: 100,\n  }),\n  RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between runner session liveness writes from job request polls. Set this lower than RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS so active idle runners stay fresh.',\n    default: 10,\n  }),\n  RUNNER_SESSION_MANUAL_RETENTION_DAYS: num({\n    desc: 'How long manual runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 30,\n  }),\n  RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS: num({\n    desc: 'How long ephemeral runner sessions are retained before maintenance deletes them, in days. Set this longer than AUTH_RUNNER_SESSION_TOKEN_EXPIRES_IN so a valid session token never outlives its row.',\n    default: 7,\n  }),\n  RUNNER_SESSION_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of expired runner sessions maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS: num({\n    desc: 'How long consumed or expired ephemeral registration tokens are retained for audit and debugging before maintenance deletes them, in days. Active tokens that are neither consumed nor expired are never deleted. This window is independent of the runner-session retention windows.',\n    default: 7,\n  }),\n  RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE: num({\n    desc: 'Maximum number of consumed or expired ephemeral registration tokens maintenance deletes in one pass.',\n    default: 1000,\n  }),\n  PROVISIONER_ACTIVE_WINDOW_SECONDS: num({\n    desc: 'Time window, in seconds, used to list active provisioners from recent authenticated requests.',\n    default: 120,\n  }),\n  PROVISIONER_LAST_SEEN_THROTTLE_SECONDS: num({\n    desc: 'Minimum time, in seconds, between last-seen writes for one provisioner token.',\n    default: 10,\n  }),\n  PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED: bool({\n    desc: 'Whether runners_provisioned_runner_count_divergence includes template_key as a metric label. Use true or false. Defaults to false because template keys can create high-cardinality metric series. Set true only when template keys are bounded and stable.',\n    default: false,\n  }),\n});\n\nif (\n  !Number.isInteger(config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS) ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS < 1 ||\n  config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS >\n    EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS\n) {\n  throw new Error(\n    `EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS (${config.EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS}) must be a whole number of seconds between 1 and ${EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS}.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.REGISTRATION_TOKEN_BATCH_MAX) ||\n  config.REGISTRATION_TOKEN_BATCH_MAX < 1 ||\n  config.REGISTRATION_TOKEN_BATCH_MAX > REGISTRATION_TOKEN_BATCH_HARD_MAX\n) {\n  throw new Error(\n    `REGISTRATION_TOKEN_BATCH_MAX (${config.REGISTRATION_TOKEN_BATCH_MAX}) must be a whole number between 1 and ${REGISTRATION_TOKEN_BATCH_HARD_MAX}.`,\n  );\n}\n\nfor (const [name, value] of [\n  ['PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS', config.PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS],\n  ['PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS', config.PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS],\n  ['EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS', config.EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS],\n  [\n    'EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS',\n    config.EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS,\n  ],\n  ['RUNNERS_RATE_LIMIT_TIMEOUT_MS', config.RUNNERS_RATE_LIMIT_TIMEOUT_MS],\n] as const) {\n  if (!Number.isInteger(value) || value < 1) {\n    throw new Error(`${name} (${value}) must be a whole number >= 1.`);\n  }\n}\n\nif (!Number.isInteger(config.RESERVATION_TTL_SECONDS) || config.RESERVATION_TTL_SECONDS < 1) {\n  throw new Error(\n    `RESERVATION_TTL_SECONDS (${config.RESERVATION_TTL_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS) ||\n  config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS < 0\n) {\n  throw new Error(\n    `RESERVATION_LONG_POLL_MAX_WAIT_SECONDS (${config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS}) must be a whole number of seconds >= 0.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_INTERVAL_MS) ||\n  config.RESERVATION_POLL_INTERVAL_MS < 1\n) {\n  throw new Error(\n    `RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}) must be a whole number of milliseconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RESERVATION_POLL_MAX_INTERVAL_MS) ||\n  config.RESERVATION_POLL_MAX_INTERVAL_MS < config.RESERVATION_POLL_INTERVAL_MS\n) {\n  throw new Error(\n    `RESERVATION_POLL_MAX_INTERVAL_MS (${config.RESERVATION_POLL_MAX_INTERVAL_MS}) must be a whole number of milliseconds >= RESERVATION_POLL_INTERVAL_MS (${config.RESERVATION_POLL_INTERVAL_MS}).`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_ACTIVE_WINDOW_SECONDS) ||\n  config.RUNNER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_ACTIVE_WINDOW_SECONDS (${config.RUNNER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS) ||\n  config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS (${config.RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS) ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS < 1 ||\n  config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS >= STUCK_JOB_THRESHOLD_SECONDS\n) {\n  throw new Error(\n    `RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS (${config.RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS}) must be a whole number of seconds >= 1 and < ${STUCK_JOB_THRESHOLD_SECONDS}.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS) ||\n  config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS (${config.RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT) ||\n  config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT < 1\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT (${config.RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS) ||\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_MANUAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_MANUAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_MANUAL_RETENTION_DAYS (${config.RUNNER_SESSION_MANUAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS) ||\n  config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS (${config.RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_SESSION_GC_BATCH_SIZE) ||\n  config.RUNNER_SESSION_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_SESSION_GC_BATCH_SIZE (${config.RUNNER_SESSION_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS) ||\n  config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS (${config.RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS}) must be a whole number of days >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE) ||\n  config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE < 1\n) {\n  throw new Error(\n    `RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE (${config.RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE}) must be a whole number >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_ACTIVE_WINDOW_SECONDS) ||\n  config.PROVISIONER_ACTIVE_WINDOW_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_ACTIVE_WINDOW_SECONDS (${config.PROVISIONER_ACTIVE_WINDOW_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  !Number.isInteger(config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS) ||\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS < 1\n) {\n  throw new Error(\n    `PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}) must be a whole number of seconds >= 1.`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than PROVISIONER_LAST_SEEN_THROTTLE_SECONDS (${config.PROVISIONER_LAST_SEEN_THROTTLE_SECONDS}).`,\n  );\n}\n\nif (\n  config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS <=\n  config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS\n) {\n  throw new Error(\n    `RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS (${config.RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS}) must be greater than RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS (${config.RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS}).`,\n  );\n}\n"],"names":["REGISTRATION_TOKEN_BATCH_HARD_MAX","bool","createConfig","num","str","STUCK_JOB_THRESHOLD_SECONDS","EPHEMERAL_REGISTRATION_TOKEN_TTL_HARD_MAX_SECONDS","config","EPHEMERAL_REGISTRATION_TOKEN_TTL_SECONDS","desc","default","REGISTRATION_TOKEN_BATCH_MAX","PROVISIONER_MINT_RATE_LIMIT_MAX_REQUESTS","PROVISIONER_MINT_RATE_LIMIT_WINDOW_SECONDS","EPHEMERAL_REGISTER_RATE_LIMIT_MAX_REQUESTS","EPHEMERAL_REGISTER_RATE_LIMIT_WINDOW_SECONDS","RUNNERS_RATE_LIMIT_TIMEOUT_MS","RATE_LIMIT_IDENTIFIER_SECRET","undefined","RESERVATION_TTL_SECONDS","RESERVATION_LONG_POLL_MAX_WAIT_SECONDS","RESERVATION_POLL_INTERVAL_MS","RESERVATION_POLL_MAX_INTERVAL_MS","RUNNER_ACTIVE_WINDOW_SECONDS","RUNNER_TOOL_CAPABILITIES_STALE_AFTER_SECONDS","RUNNER_NO_FIRST_HEARTBEAT_GRACE_SECONDS","RUNNER_RECONCILE_TERMINATE_GRACE_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_THRESHOLD_SECONDS","RUNNER_STALE_PROVISIONED_RUNNER_REAPER_LIMIT","RUNNER_SESSION_LIVENESS_THROTTLE_SECONDS","RUNNER_SESSION_MANUAL_RETENTION_DAYS","RUNNER_SESSION_EPHEMERAL_RETENTION_DAYS","RUNNER_SESSION_GC_BATCH_SIZE","RUNNER_EPHEMERAL_TOKEN_RETENTION_DAYS","RUNNER_EPHEMERAL_TOKEN_GC_BATCH_SIZE","PROVISIONER_ACTIVE_WINDOW_SECONDS","PROVISIONER_LAST_SEEN_THROTTLE_SECONDS","PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED","Number","isInteger","Error","name","value"],"mappings":"AAAA,SAAQA,iCAAiC,QAAO,2BAA2B;AAC3E,SAAQC,IAAI,EAAEC,YAAY,EAAEC,GAAG,EAAEC,GAAG,QAAO,kBAAkB;AAC7D,SAAQC,2BAA2B,QAAO,8BAA8B;AAExE,MAAMC,oDAAoD;AAE1D,OAAO,MAAMC,SAASL,aAAa;IACjCM,0CAA0CL,IAAI;QAC5CM,MAAM,CAAC,oKAAoK,EAAEH,kDAAkD,CAAC,CAAC;QACjOI,SAAS;IACX;IACAC,8BAA8BR,IAAI;QAChCM,MAAM,CAAC,iHAAiH,EAAET,kCAAkC,CAAC,CAAC;QAC9JU,SAAS;IACX;IACAE,0CAA0CT,IAAI;QAC5CM,MAAM;QACNC,SAAS;IACX;IACAG,4CAA4CV,IAAI;QAC9CM,MAAM;QACNC,SAAS;IACX;IACAI,4CAA4CX,IAAI;QAC9CM,MAAM;QACNC,SAAS;IACX;IACAK,8CAA8CZ,IAAI;QAChDM,MAAM;QACNC,SAAS;IACX;IACAM,+BAA+Bb,IAAI;QACjCM,MAAM;QACNC,SAAS;IACX;IACAO,8BAA8Bb,IAAI;QAChCK,MAAM;QACNC,SAASQ;IACX;IACAC,yBAAyBhB,IAAI;QAC3BM,MAAM;QACNC,SAAS;IACX;IACAU,wCAAwCjB,IAAI;QAC1CM,MAAM;QACNC,SAAS;IACX;IACAW,8BAA8BlB,IAAI;QAChCM,MAAM;QACNC,SAAS;IACX;IACAY,kCAAkCnB,IAAI;QACpCM,MAAM;QACNC,SAAS;IACX;IACAa,8BAA8BpB,IAAI;QAChCM,MAAM;QACNC,SAAS;IACX;IACAc,8CAA8CrB,IAAI;QAChDM,MAAM;QACNC,SAAS;IACX;IACAe,yCAAyCtB,IAAI;QAC3CM,MAAM;QACNC,SAAS;IACX;IACAgB,0CAA0CvB,IAAI;QAC5CM,MAAM;QACNC,SAAS;IACX;IACAiB,mDAAmDxB,IAAI;QACrDM,MAAM;QACNC,SAAS;IACX;IACAkB,8CAA8CzB,IAAI;QAChDM,MAAM;QACNC,SAAS;IACX;IACAmB,0CAA0C1B,IAAI;QAC5CM,MAAM;QACNC,SAAS;IACX;IACAoB,sCAAsC3B,IAAI;QACxCM,MAAM;QACNC,SAAS;IACX;IACAqB,yCAAyC5B,IAAI;QAC3CM,MAAM;QACNC,SAAS;IACX;IACAsB,8BAA8B7B,IAAI;QAChCM,MAAM;QACNC,SAAS;IACX;IACAuB,uCAAuC9B,IAAI;QACzCM,MAAM;QACNC,SAAS;IACX;IACAwB,sCAAsC/B,IAAI;QACxCM,MAAM;QACNC,SAAS;IACX;IACAyB,mCAAmChC,IAAI;QACrCM,MAAM;QACNC,SAAS;IACX;IACA0B,wCAAwCjC,IAAI;QAC1CM,MAAM;QACNC,SAAS;IACX;IACA2B,gEAAgEpC,KAAK;QACnEQ,MAAM;QACNC,SAAS;IACX;AACF,GAAG;AAEH,IACE,CAAC4B,OAAOC,SAAS,CAAChC,OAAOC,wCAAwC,KACjED,OAAOC,wCAAwC,GAAG,KAClDD,OAAOC,wCAAwC,GAC7CF,mDACF;IACA,MAAM,IAAIkC,MACR,CAAC,0CAA0C,EAAEjC,OAAOC,wCAAwC,CAAC,kDAAkD,EAAEF,kDAAkD,CAAC,CAAC;AAEzM;AAEA,IACE,CAACgC,OAAOC,SAAS,CAAChC,OAAOI,4BAA4B,KACrDJ,OAAOI,4BAA4B,GAAG,KACtCJ,OAAOI,4BAA4B,GAAGX,mCACtC;IACA,MAAM,IAAIwC,MACR,CAAC,8BAA8B,EAAEjC,OAAOI,4BAA4B,CAAC,uCAAuC,EAAEX,kCAAkC,CAAC,CAAC;AAEtJ;AAEA,KAAK,MAAM,CAACyC,MAAMC,MAAM,IAAI;IAC1B;QAAC;QAA4CnC,OAAOK,wCAAwC;KAAC;IAC7F;QAAC;QAA8CL,OAAOM,0CAA0C;KAAC;IACjG;QAAC;QAA8CN,OAAOO,0CAA0C;KAAC;IACjG;QACE;QACAP,OAAOQ,4CAA4C;KACpD;IACD;QAAC;QAAiCR,OAAOS,6BAA6B;KAAC;CACxE,CAAW;IACV,IAAI,CAACsB,OAAOC,SAAS,CAACG,UAAUA,QAAQ,GAAG;QACzC,MAAM,IAAIF,MAAM,GAAGC,KAAK,EAAE,EAAEC,MAAM,8BAA8B,CAAC;IACnE;AACF;AAEA,IAAI,CAACJ,OAAOC,SAAS,CAAChC,OAAOY,uBAAuB,KAAKZ,OAAOY,uBAAuB,GAAG,GAAG;IAC3F,MAAM,IAAIqB,MACR,CAAC,yBAAyB,EAAEjC,OAAOY,uBAAuB,CAAC,yCAAyC,CAAC;AAEzG;AAEA,IACE,CAACmB,OAAOC,SAAS,CAAChC,OAAOa,sCAAsC,KAC/Db,OAAOa,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAIoB,MACR,CAAC,wCAAwC,EAAEjC,OAAOa,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACE,CAACkB,OAAOC,SAAS,CAAChC,OAAOc,4BAA4B,KACrDd,OAAOc,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAImB,MACR,CAAC,8BAA8B,EAAEjC,OAAOc,4BAA4B,CAAC,8CAA8C,CAAC;AAExH;AAEA,IACE,CAACiB,OAAOC,SAAS,CAAChC,OAAOe,gCAAgC,KACzDf,OAAOe,gCAAgC,GAAGf,OAAOc,4BAA4B,EAC7E;IACA,MAAM,IAAImB,MACR,CAAC,kCAAkC,EAAEjC,OAAOe,gCAAgC,CAAC,0EAA0E,EAAEf,OAAOc,4BAA4B,CAAC,EAAE,CAAC;AAEpM;AAEA,IACE,CAACiB,OAAOC,SAAS,CAAChC,OAAOgB,4BAA4B,KACrDhB,OAAOgB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIiB,MACR,CAAC,8BAA8B,EAAEjC,OAAOgB,4BAA4B,CAAC,yCAAyC,CAAC;AAEnH;AAEA,IACE,CAACe,OAAOC,SAAS,CAAChC,OAAOiB,4CAA4C,KACrEjB,OAAOiB,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIgB,MACR,CAAC,8CAA8C,EAAEjC,OAAOiB,4CAA4C,CAAC,yCAAyC,CAAC;AAEnJ;AAEA,IACE,CAACc,OAAOC,SAAS,CAAChC,OAAOkB,uCAAuC,KAChElB,OAAOkB,uCAAuC,GAAG,KACjDlB,OAAOkB,uCAAuC,IAAIpB,6BAClD;IACA,MAAM,IAAImC,MACR,CAAC,yCAAyC,EAAEjC,OAAOkB,uCAAuC,CAAC,+CAA+C,EAAEpB,4BAA4B,CAAC,CAAC;AAE9K;AAEA,IACE,CAACiC,OAAOC,SAAS,CAAChC,OAAOmB,wCAAwC,KACjEnB,OAAOmB,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIc,MACR,CAAC,0CAA0C,EAAEjC,OAAOmB,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACY,OAAOC,SAAS,CAAChC,OAAOoB,iDAAiD,KAC1EpB,OAAOoB,iDAAiD,GAAG,GAC3D;IACA,MAAM,IAAIa,MACR,CAAC,mDAAmD,EAAEjC,OAAOoB,iDAAiD,CAAC,yCAAyC,CAAC;AAE7J;AAEA,IACE,CAACW,OAAOC,SAAS,CAAChC,OAAOqB,4CAA4C,KACrErB,OAAOqB,4CAA4C,GAAG,GACtD;IACA,MAAM,IAAIY,MACR,CAAC,8CAA8C,EAAEjC,OAAOqB,4CAA4C,CAAC,8BAA8B,CAAC;AAExI;AAEA,IACE,CAACU,OAAOC,SAAS,CAAChC,OAAOsB,wCAAwC,KACjEtB,OAAOsB,wCAAwC,GAAG,GAClD;IACA,MAAM,IAAIW,MACR,CAAC,0CAA0C,EAAEjC,OAAOsB,wCAAwC,CAAC,yCAAyC,CAAC;AAE3I;AAEA,IACE,CAACS,OAAOC,SAAS,CAAChC,OAAOuB,oCAAoC,KAC7DvB,OAAOuB,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIU,MACR,CAAC,sCAAsC,EAAEjC,OAAOuB,oCAAoC,CAAC,sCAAsC,CAAC;AAEhI;AAEA,IACE,CAACQ,OAAOC,SAAS,CAAChC,OAAOwB,uCAAuC,KAChExB,OAAOwB,uCAAuC,GAAG,GACjD;IACA,MAAM,IAAIS,MACR,CAAC,yCAAyC,EAAEjC,OAAOwB,uCAAuC,CAAC,sCAAsC,CAAC;AAEtI;AAEA,IACE,CAACO,OAAOC,SAAS,CAAChC,OAAOyB,4BAA4B,KACrDzB,OAAOyB,4BAA4B,GAAG,GACtC;IACA,MAAM,IAAIQ,MACR,CAAC,8BAA8B,EAAEjC,OAAOyB,4BAA4B,CAAC,8BAA8B,CAAC;AAExG;AAEA,IACE,CAACM,OAAOC,SAAS,CAAChC,OAAO0B,qCAAqC,KAC9D1B,OAAO0B,qCAAqC,GAAG,GAC/C;IACA,MAAM,IAAIO,MACR,CAAC,uCAAuC,EAAEjC,OAAO0B,qCAAqC,CAAC,sCAAsC,CAAC;AAElI;AAEA,IACE,CAACK,OAAOC,SAAS,CAAChC,OAAO2B,oCAAoC,KAC7D3B,OAAO2B,oCAAoC,GAAG,GAC9C;IACA,MAAM,IAAIM,MACR,CAAC,sCAAsC,EAAEjC,OAAO2B,oCAAoC,CAAC,8BAA8B,CAAC;AAExH;AAEA,IACE,CAACI,OAAOC,SAAS,CAAChC,OAAO4B,iCAAiC,KAC1D5B,OAAO4B,iCAAiC,GAAG,GAC3C;IACA,MAAM,IAAIK,MACR,CAAC,mCAAmC,EAAEjC,OAAO4B,iCAAiC,CAAC,yCAAyC,CAAC;AAE7H;AAEA,IACE,CAACG,OAAOC,SAAS,CAAChC,OAAO6B,sCAAsC,KAC/D7B,OAAO6B,sCAAsC,GAAG,GAChD;IACA,MAAM,IAAII,MACR,CAAC,wCAAwC,EAAEjC,OAAO6B,sCAAsC,CAAC,yCAAyC,CAAC;AAEvI;AAEA,IACE7B,OAAOoB,iDAAiD,IACxDpB,OAAO6B,sCAAsC,EAC7C;IACA,MAAM,IAAII,MACR,CAAC,mDAAmD,EAAEjC,OAAOoB,iDAAiD,CAAC,+DAA+D,EAAEpB,OAAO6B,sCAAsC,CAAC,EAAE,CAAC;AAErO;AAEA,IACE7B,OAAOoB,iDAAiD,IACxDpB,OAAOsB,wCAAwC,EAC/C;IACA,MAAM,IAAIW,MACR,CAAC,mDAAmD,EAAEjC,OAAOoB,iDAAiD,CAAC,iEAAiE,EAAEpB,OAAOsB,wCAAwC,CAAC,EAAE,CAAC;AAEzO"}

package/dist/core/demand.d.ts

@@ -0,0 +1,33 @@
+import { type ActiveProvisionedRunnerTemplateCount } from '#db/provisioned-runners.js';
+import { type DemandStat, type ReservationGrant, type ReservationTemplate } from '#db/reservations.js';
+export interface PollDemandParams {
+    workspaceId: string;
+    provisionerId: string;
+    maxReservations: number;
+    waitSeconds?: number | undefined;
+    ttlSeconds: number;
+    terminateIntentLimit: number;
+    templates: ReservationTemplate[];
+    signal: AbortSignal;
+}
+export interface PollDemandResult {
+    stats: DemandStat[];
+    reservations: ReservationGrant[];
+    terminateProvisionedRunnerIds: string[];
+}
+export interface ProvisionedRunnerCountDivergence {
+    templateKey: string;
+    state: 'starting' | 'running';
+    direction: 'backend-higher' | 'advertised-higher';
+    delta: number;
+}
+export declare function pollDemand(params: PollDemandParams): Promise<PollDemandResult>;
+export declare function releaseReservationGrants(reservations: ReservationGrant[]): Promise<void>;
+export declare function shouldReturn(result: PollDemandResult, maxReservations: number, totalCapacity: number, deadlinePassed: boolean): boolean;
+export declare function nextBackoffInterval(ms: number): number;
+export declare function withJitter(ms: number): number;
+export declare function calculateProvisionedRunnerCountDivergences(params: {
+    advertisedTemplates: ReservationTemplate[];
+    backendCounts: ActiveProvisionedRunnerTemplateCount[];
+}): ProvisionedRunnerCountDivergence[];
+//# sourceMappingURL=demand.d.ts.map

package/dist/core/demand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"demand.d.ts","sourceRoot":"","sources":["../../src/core/demand.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,oCAAoC,EAI1C,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,KAAK,UAAU,EAGf,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACzB,MAAM,qBAAqB,CAAC;AAM7B,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,6BAA6B,EAAE,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,gCAAgC;IAC/C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,UAAU,GAAG,SAAS,CAAC;IAC9B,SAAS,EAAE,gBAAgB,GAAG,mBAAmB,CAAC;IAClD,KAAK,EAAE,MAAM,CAAC;CACf;AAQD,wBAAsB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA+EpF;AAED,wBAAsB,wBAAwB,CAAC,YAAY,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE9F;AAED,wBAAgB,YAAY,CAC1B,MAAM,EAAE,gBAAgB,EACxB,eAAe,EAAE,MAAM,EACvB,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,OAAO,GACtB,OAAO,CAQT;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED,wBAAgB,0CAA0C,CAAC,MAAM,EAAE;IACjE,mBAAmB,EAAE,mBAAmB,EAAE,CAAC;IAC3C,aAAa,EAAE,oCAAoC,EAAE,CAAC;CACvD,GAAG,gCAAgC,EAAE,CA4BrC"}