@shipfox/api-runners 2.0.0

package/dist/core/demand.js

@@ -0,0 +1,169 @@
+import { setTimeout as sleep } from 'node:timers/promises';
+import { logger } from '@shipfox/node-opentelemetry';
+import { config } from '#config.js';
+import { db } from '#db/db.js';
+import { listActiveProvisionedRunnerCountsByTemplateTx, listProvisionerTerminateIntentRowsTx } from '#db/provisioned-runners.js';
+import { deleteReservationsByIds, pollDemandAndReserveTx } from '#db/reservations.js';
+import { provisionedRunnerCountDivergenceCount, provisionedRunnerTerminateIntentIssuedCount } from '#metrics/instance.js';
+export async function pollDemand(params) {
+    const waitSeconds = Math.min(params.waitSeconds ?? config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS, config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS);
+    const deadlineMs = Date.now() + Math.max(0, waitSeconds) * 1000;
+    const totalCapacity = params.templates.reduce((total, template)=>total + template.availableSlots, 0);
+    let interval = config.RESERVATION_POLL_INTERVAL_MS;
+    let lastSnapshot = {
+        result: {
+            stats: [],
+            reservations: [],
+            terminateProvisionedRunnerIds: []
+        },
+        divergences: [],
+        terminateIntents: []
+    };
+    while(true){
+        if (params.signal.aborted) return lastSnapshot.result;
+        const previousSnapshot = lastSnapshot;
+        const deadlinePassed = Date.now() >= deadlineMs;
+        const snapshot = await db().transaction(async (tx)=>{
+            const demand = await pollDemandAndReserveTx(tx, {
+                workspaceId: params.workspaceId,
+                provisionerId: params.provisionerId,
+                maxReservations: params.maxReservations,
+                ttlSeconds: params.ttlSeconds,
+                templates: params.templates
+            });
+            const terminateIntents = await listProvisionerTerminateIntentRowsTx(tx, {
+                workspaceId: params.workspaceId,
+                provisionerId: params.provisionerId,
+                limit: params.terminateIntentLimit
+            });
+            const result = {
+                ...demand,
+                terminateProvisionedRunnerIds: terminateIntents.map((intent)=>intent.provisionedRunnerId)
+            };
+            if (!shouldReturn(result, params.maxReservations, totalCapacity, deadlinePassed)) {
+                return {
+                    result,
+                    terminateIntents,
+                    divergences: []
+                };
+            }
+            return {
+                result,
+                terminateIntents,
+                divergences: calculateProvisionedRunnerCountDivergences({
+                    advertisedTemplates: params.templates,
+                    backendCounts: await listActiveProvisionedRunnerCountsByTemplateTx(tx, {
+                        workspaceId: params.workspaceId,
+                        provisionerId: params.provisionerId
+                    })
+                })
+            };
+        });
+        if (params.signal.aborted) {
+            await releaseReservationGrants(snapshot.result.reservations);
+            return previousSnapshot.result;
+        }
+        lastSnapshot = snapshot;
+        if (shouldReturn(lastSnapshot.result, params.maxReservations, totalCapacity, deadlinePassed)) {
+            recordPollDemandMetrics(params, lastSnapshot);
+            return lastSnapshot.result;
+        }
+        const remainingWaitMs = Math.max(0, deadlineMs - Date.now());
+        try {
+            await sleep(Math.min(withJitter(interval), remainingWaitMs), undefined, {
+                signal: params.signal
+            });
+        } catch (error) {
+            if (params.signal.aborted) return lastSnapshot.result;
+            throw error;
+        }
+        interval = nextBackoffInterval(interval);
+    }
+}
+export async function releaseReservationGrants(reservations) {
+    await deleteReservationsByIds(reservations.map((reservation)=>reservation.reservationId));
+}
+export function shouldReturn(result, maxReservations, totalCapacity, deadlinePassed) {
+    return maxReservations === 0 || totalCapacity === 0 || result.reservations.length > 0 || result.terminateProvisionedRunnerIds.length > 0 || deadlinePassed;
+}
+export function nextBackoffInterval(ms) {
+    return Math.min(ms * 1.5, config.RESERVATION_POLL_MAX_INTERVAL_MS);
+}
+export function withJitter(ms) {
+    return Math.random() * ms;
+}
+export function calculateProvisionedRunnerCountDivergences(params) {
+    const advertisedCounts = new Map();
+    const backendCounts = new Map();
+    for (const template of params.advertisedTemplates){
+        addCount(advertisedCounts, countKey(template.templateKey, 'starting'), template.starting);
+        addCount(advertisedCounts, countKey(template.templateKey, 'running'), template.running);
+    }
+    for (const count of params.backendCounts){
+        addCount(backendCounts, countKey(count.templateKey, count.state), count.count);
+    }
+    const keys = [
+        ...new Set([
+            ...advertisedCounts.keys(),
+            ...backendCounts.keys()
+        ])
+    ].sort();
+    return keys.flatMap((key)=>{
+        const advertised = advertisedCounts.get(key) ?? 0;
+        const backend = backendCounts.get(key) ?? 0;
+        if (advertised === backend) return [];
+        const [templateKey, state] = splitCountKey(key);
+        return [
+            {
+                templateKey,
+                state,
+                direction: backend > advertised ? 'backend-higher' : 'advertised-higher',
+                delta: Math.abs(backend - advertised)
+            }
+        ];
+    });
+}
+function recordPollDemandMetrics(params, snapshot) {
+    for (const divergence of snapshot.divergences){
+        logger().debug({
+            workspaceId: params.workspaceId,
+            provisionerId: params.provisionerId,
+            templateKey: divergence.templateKey,
+            state: divergence.state,
+            direction: divergence.direction,
+            delta: divergence.delta
+        }, 'provisioned runner count divergence observed');
+        const attributes = {
+            state: divergence.state,
+            direction: divergence.direction,
+            ...config.PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED ? {
+                template_key: divergence.templateKey
+            } : {}
+        };
+        provisionedRunnerCountDivergenceCount.add(divergence.delta, attributes);
+    }
+    for (const intent of snapshot.terminateIntents){
+        provisionedRunnerTerminateIntentIssuedCount.add(1, {
+            surface: 'poll-demand',
+            reason: intent.reason
+        });
+    }
+}
+function addCount(counts, key, count) {
+    counts.set(key, (counts.get(key) ?? 0) + count);
+}
+function countKey(templateKey, state) {
+    return `${templateKey}\0${state}`;
+}
+function splitCountKey(key) {
+    const [templateKey, state] = key.split('\0');
+    if (!templateKey || state !== 'starting' && state !== 'running') {
+        throw new Error(`Invalid provisioned runner count key: ${key}`);
+    }
+    return [
+        templateKey,
+        state
+    ];
+}
+
+//# sourceMappingURL=demand.js.map

package/dist/core/demand.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/demand.ts"],"sourcesContent":["import {setTimeout as sleep} from 'node:timers/promises';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {config} from '#config.js';\nimport {db} from '#db/db.js';\nimport {\n  type ActiveProvisionedRunnerTemplateCount,\n  listActiveProvisionedRunnerCountsByTemplateTx,\n  listProvisionerTerminateIntentRowsTx,\n  type ProvisionedRunnerTerminateIntent,\n} from '#db/provisioned-runners.js';\nimport {\n  type DemandStat,\n  deleteReservationsByIds,\n  pollDemandAndReserveTx,\n  type ReservationGrant,\n  type ReservationTemplate,\n} from '#db/reservations.js';\nimport {\n  provisionedRunnerCountDivergenceCount,\n  provisionedRunnerTerminateIntentIssuedCount,\n} from '#metrics/instance.js';\n\nexport interface PollDemandParams {\n  workspaceId: string;\n  provisionerId: string;\n  maxReservations: number;\n  waitSeconds?: number | undefined;\n  ttlSeconds: number;\n  terminateIntentLimit: number;\n  templates: ReservationTemplate[];\n  signal: AbortSignal;\n}\n\nexport interface PollDemandResult {\n  stats: DemandStat[];\n  reservations: ReservationGrant[];\n  terminateProvisionedRunnerIds: string[];\n}\n\nexport interface ProvisionedRunnerCountDivergence {\n  templateKey: string;\n  state: 'starting' | 'running';\n  direction: 'backend-higher' | 'advertised-higher';\n  delta: number;\n}\n\ninterface PollDemandSnapshot {\n  result: PollDemandResult;\n  divergences: ProvisionedRunnerCountDivergence[];\n  terminateIntents: ProvisionedRunnerTerminateIntent[];\n}\n\nexport async function pollDemand(params: PollDemandParams): Promise<PollDemandResult> {\n  const waitSeconds = Math.min(\n    params.waitSeconds ?? config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS,\n    config.RESERVATION_LONG_POLL_MAX_WAIT_SECONDS,\n  );\n  const deadlineMs = Date.now() + Math.max(0, waitSeconds) * 1000;\n  const totalCapacity = params.templates.reduce(\n    (total, template) => total + template.availableSlots,\n    0,\n  );\n  let interval = config.RESERVATION_POLL_INTERVAL_MS;\n  let lastSnapshot: PollDemandSnapshot = {\n    result: {stats: [], reservations: [], terminateProvisionedRunnerIds: []},\n    divergences: [],\n    terminateIntents: [],\n  };\n\n  while (true) {\n    if (params.signal.aborted) return lastSnapshot.result;\n\n    const previousSnapshot = lastSnapshot;\n    const deadlinePassed = Date.now() >= deadlineMs;\n    const snapshot = await db().transaction(async (tx) => {\n      const demand = await pollDemandAndReserveTx(tx, {\n        workspaceId: params.workspaceId,\n        provisionerId: params.provisionerId,\n        maxReservations: params.maxReservations,\n        ttlSeconds: params.ttlSeconds,\n        templates: params.templates,\n      });\n      const terminateIntents = await listProvisionerTerminateIntentRowsTx(tx, {\n        workspaceId: params.workspaceId,\n        provisionerId: params.provisionerId,\n        limit: params.terminateIntentLimit,\n      });\n      const result: PollDemandResult = {\n        ...demand,\n        terminateProvisionedRunnerIds: terminateIntents.map((intent) => intent.provisionedRunnerId),\n      };\n\n      if (!shouldReturn(result, params.maxReservations, totalCapacity, deadlinePassed)) {\n        return {result, terminateIntents, divergences: []};\n      }\n\n      return {\n        result,\n        terminateIntents,\n        divergences: calculateProvisionedRunnerCountDivergences({\n          advertisedTemplates: params.templates,\n          backendCounts: await listActiveProvisionedRunnerCountsByTemplateTx(tx, {\n            workspaceId: params.workspaceId,\n            provisionerId: params.provisionerId,\n          }),\n        }),\n      };\n    });\n    if (params.signal.aborted) {\n      await releaseReservationGrants(snapshot.result.reservations);\n      return previousSnapshot.result;\n    }\n\n    lastSnapshot = snapshot;\n\n    if (shouldReturn(lastSnapshot.result, params.maxReservations, totalCapacity, deadlinePassed)) {\n      recordPollDemandMetrics(params, lastSnapshot);\n      return lastSnapshot.result;\n    }\n\n    const remainingWaitMs = Math.max(0, deadlineMs - Date.now());\n    try {\n      await sleep(Math.min(withJitter(interval), remainingWaitMs), undefined, {\n        signal: params.signal,\n      });\n    } catch (error) {\n      if (params.signal.aborted) return lastSnapshot.result;\n      throw error;\n    }\n    interval = nextBackoffInterval(interval);\n  }\n}\n\nexport async function releaseReservationGrants(reservations: ReservationGrant[]): Promise<void> {\n  await deleteReservationsByIds(reservations.map((reservation) => reservation.reservationId));\n}\n\nexport function shouldReturn(\n  result: PollDemandResult,\n  maxReservations: number,\n  totalCapacity: number,\n  deadlinePassed: boolean,\n): boolean {\n  return (\n    maxReservations === 0 ||\n    totalCapacity === 0 ||\n    result.reservations.length > 0 ||\n    result.terminateProvisionedRunnerIds.length > 0 ||\n    deadlinePassed\n  );\n}\n\nexport function nextBackoffInterval(ms: number): number {\n  return Math.min(ms * 1.5, config.RESERVATION_POLL_MAX_INTERVAL_MS);\n}\n\nexport function withJitter(ms: number): number {\n  return Math.random() * ms;\n}\n\nexport function calculateProvisionedRunnerCountDivergences(params: {\n  advertisedTemplates: ReservationTemplate[];\n  backendCounts: ActiveProvisionedRunnerTemplateCount[];\n}): ProvisionedRunnerCountDivergence[] {\n  const advertisedCounts = new Map<string, number>();\n  const backendCounts = new Map<string, number>();\n\n  for (const template of params.advertisedTemplates) {\n    addCount(advertisedCounts, countKey(template.templateKey, 'starting'), template.starting);\n    addCount(advertisedCounts, countKey(template.templateKey, 'running'), template.running);\n  }\n  for (const count of params.backendCounts) {\n    addCount(backendCounts, countKey(count.templateKey, count.state), count.count);\n  }\n\n  const keys = [...new Set([...advertisedCounts.keys(), ...backendCounts.keys()])].sort();\n  return keys.flatMap((key) => {\n    const advertised = advertisedCounts.get(key) ?? 0;\n    const backend = backendCounts.get(key) ?? 0;\n    if (advertised === backend) return [];\n\n    const [templateKey, state] = splitCountKey(key);\n    return [\n      {\n        templateKey,\n        state,\n        direction: backend > advertised ? 'backend-higher' : 'advertised-higher',\n        delta: Math.abs(backend - advertised),\n      },\n    ];\n  });\n}\n\nfunction recordPollDemandMetrics(params: PollDemandParams, snapshot: PollDemandSnapshot): void {\n  for (const divergence of snapshot.divergences) {\n    logger().debug(\n      {\n        workspaceId: params.workspaceId,\n        provisionerId: params.provisionerId,\n        templateKey: divergence.templateKey,\n        state: divergence.state,\n        direction: divergence.direction,\n        delta: divergence.delta,\n      },\n      'provisioned runner count divergence observed',\n    );\n\n    const attributes = {\n      state: divergence.state,\n      direction: divergence.direction,\n      ...(config.PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED\n        ? {template_key: divergence.templateKey}\n        : {}),\n    };\n    provisionedRunnerCountDivergenceCount.add(divergence.delta, attributes);\n  }\n  for (const intent of snapshot.terminateIntents) {\n    provisionedRunnerTerminateIntentIssuedCount.add(1, {\n      surface: 'poll-demand',\n      reason: intent.reason,\n    });\n  }\n}\n\nfunction addCount(counts: Map<string, number>, key: string, count: number): void {\n  counts.set(key, (counts.get(key) ?? 0) + count);\n}\n\nfunction countKey(templateKey: string, state: 'starting' | 'running'): string {\n  return `${templateKey}\\0${state}`;\n}\n\nfunction splitCountKey(key: string): [string, 'starting' | 'running'] {\n  const [templateKey, state] = key.split('\\0');\n  if (!templateKey || (state !== 'starting' && state !== 'running')) {\n    throw new Error(`Invalid provisioned runner count key: ${key}`);\n  }\n  return [templateKey, state];\n}\n"],"names":["setTimeout","sleep","logger","config","db","listActiveProvisionedRunnerCountsByTemplateTx","listProvisionerTerminateIntentRowsTx","deleteReservationsByIds","pollDemandAndReserveTx","provisionedRunnerCountDivergenceCount","provisionedRunnerTerminateIntentIssuedCount","pollDemand","params","waitSeconds","Math","min","RESERVATION_LONG_POLL_MAX_WAIT_SECONDS","deadlineMs","Date","now","max","totalCapacity","templates","reduce","total","template","availableSlots","interval","RESERVATION_POLL_INTERVAL_MS","lastSnapshot","result","stats","reservations","terminateProvisionedRunnerIds","divergences","terminateIntents","signal","aborted","previousSnapshot","deadlinePassed","snapshot","transaction","tx","demand","workspaceId","provisionerId","maxReservations","ttlSeconds","limit","terminateIntentLimit","map","intent","provisionedRunnerId","shouldReturn","calculateProvisionedRunnerCountDivergences","advertisedTemplates","backendCounts","releaseReservationGrants","recordPollDemandMetrics","remainingWaitMs","withJitter","undefined","error","nextBackoffInterval","reservation","reservationId","length","ms","RESERVATION_POLL_MAX_INTERVAL_MS","random","advertisedCounts","Map","addCount","countKey","templateKey","starting","running","count","state","keys","Set","sort","flatMap","key","advertised","get","backend","splitCountKey","direction","delta","abs","divergence","debug","attributes","PROVISIONED_RUNNER_COUNT_DIVERGENCE_TEMPLATE_KEY_LABEL_ENABLED","template_key","add","surface","reason","counts","set","split","Error"],"mappings":"AAAA,SAAQA,cAAcC,KAAK,QAAO,uBAAuB;AACzD,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,EAAE,QAAO,YAAY;AAC7B,SAEEC,6CAA6C,EAC7CC,oCAAoC,QAE/B,6BAA6B;AACpC,SAEEC,uBAAuB,EACvBC,sBAAsB,QAGjB,sBAAsB;AAC7B,SACEC,qCAAqC,EACrCC,2CAA2C,QACtC,uBAAuB;AAgC9B,OAAO,eAAeC,WAAWC,MAAwB;IACvD,MAAMC,cAAcC,KAAKC,GAAG,CAC1BH,OAAOC,WAAW,IAAIV,OAAOa,sCAAsC,EACnEb,OAAOa,sCAAsC;IAE/C,MAAMC,aAAaC,KAAKC,GAAG,KAAKL,KAAKM,GAAG,CAAC,GAAGP,eAAe;IAC3D,MAAMQ,gBAAgBT,OAAOU,SAAS,CAACC,MAAM,CAC3C,CAACC,OAAOC,WAAaD,QAAQC,SAASC,cAAc,EACpD;IAEF,IAAIC,WAAWxB,OAAOyB,4BAA4B;IAClD,IAAIC,eAAmC;QACrCC,QAAQ;YAACC,OAAO,EAAE;YAAEC,cAAc,EAAE;YAAEC,+BAA+B,EAAE;QAAA;QACvEC,aAAa,EAAE;QACfC,kBAAkB,EAAE;IACtB;IAEA,MAAO,KAAM;QACX,IAAIvB,OAAOwB,MAAM,CAACC,OAAO,EAAE,OAAOR,aAAaC,MAAM;QAErD,MAAMQ,mBAAmBT;QACzB,MAAMU,iBAAiBrB,KAAKC,GAAG,MAAMF;QACrC,MAAMuB,WAAW,MAAMpC,KAAKqC,WAAW,CAAC,OAAOC;YAC7C,MAAMC,SAAS,MAAMnC,uBAAuBkC,IAAI;gBAC9CE,aAAahC,OAAOgC,WAAW;gBAC/BC,eAAejC,OAAOiC,aAAa;gBACnCC,iBAAiBlC,OAAOkC,eAAe;gBACvCC,YAAYnC,OAAOmC,UAAU;gBAC7BzB,WAAWV,OAAOU,SAAS;YAC7B;YACA,MAAMa,mBAAmB,MAAM7B,qCAAqCoC,IAAI;gBACtEE,aAAahC,OAAOgC,WAAW;gBAC/BC,eAAejC,OAAOiC,aAAa;gBACnCG,OAAOpC,OAAOqC,oBAAoB;YACpC;YACA,MAAMnB,SAA2B;gBAC/B,GAAGa,MAAM;gBACTV,+BAA+BE,iBAAiBe,GAAG,CAAC,CAACC,SAAWA,OAAOC,mBAAmB;YAC5F;YAEA,IAAI,CAACC,aAAavB,QAAQlB,OAAOkC,eAAe,EAAEzB,eAAekB,iBAAiB;gBAChF,OAAO;oBAACT;oBAAQK;oBAAkBD,aAAa,EAAE;gBAAA;YACnD;YAEA,OAAO;gBACLJ;gBACAK;gBACAD,aAAaoB,2CAA2C;oBACtDC,qBAAqB3C,OAAOU,SAAS;oBACrCkC,eAAe,MAAMnD,8CAA8CqC,IAAI;wBACrEE,aAAahC,OAAOgC,WAAW;wBAC/BC,eAAejC,OAAOiC,aAAa;oBACrC;gBACF;YACF;QACF;QACA,IAAIjC,OAAOwB,MAAM,CAACC,OAAO,EAAE;YACzB,MAAMoB,yBAAyBjB,SAASV,MAAM,CAACE,YAAY;YAC3D,OAAOM,iBAAiBR,MAAM;QAChC;QAEAD,eAAeW;QAEf,IAAIa,aAAaxB,aAAaC,MAAM,EAAElB,OAAOkC,eAAe,EAAEzB,eAAekB,iBAAiB;YAC5FmB,wBAAwB9C,QAAQiB;YAChC,OAAOA,aAAaC,MAAM;QAC5B;QAEA,MAAM6B,kBAAkB7C,KAAKM,GAAG,CAAC,GAAGH,aAAaC,KAAKC,GAAG;QACzD,IAAI;YACF,MAAMlB,MAAMa,KAAKC,GAAG,CAAC6C,WAAWjC,WAAWgC,kBAAkBE,WAAW;gBACtEzB,QAAQxB,OAAOwB,MAAM;YACvB;QACF,EAAE,OAAO0B,OAAO;YACd,IAAIlD,OAAOwB,MAAM,CAACC,OAAO,EAAE,OAAOR,aAAaC,MAAM;YACrD,MAAMgC;QACR;QACAnC,WAAWoC,oBAAoBpC;IACjC;AACF;AAEA,OAAO,eAAe8B,yBAAyBzB,YAAgC;IAC7E,MAAMzB,wBAAwByB,aAAakB,GAAG,CAAC,CAACc,cAAgBA,YAAYC,aAAa;AAC3F;AAEA,OAAO,SAASZ,aACdvB,MAAwB,EACxBgB,eAAuB,EACvBzB,aAAqB,EACrBkB,cAAuB;IAEvB,OACEO,oBAAoB,KACpBzB,kBAAkB,KAClBS,OAAOE,YAAY,CAACkC,MAAM,GAAG,KAC7BpC,OAAOG,6BAA6B,CAACiC,MAAM,GAAG,KAC9C3B;AAEJ;AAEA,OAAO,SAASwB,oBAAoBI,EAAU;IAC5C,OAAOrD,KAAKC,GAAG,CAACoD,KAAK,KAAKhE,OAAOiE,gCAAgC;AACnE;AAEA,OAAO,SAASR,WAAWO,EAAU;IACnC,OAAOrD,KAAKuD,MAAM,KAAKF;AACzB;AAEA,OAAO,SAASb,2CAA2C1C,MAG1D;IACC,MAAM0D,mBAAmB,IAAIC;IAC7B,MAAMf,gBAAgB,IAAIe;IAE1B,KAAK,MAAM9C,YAAYb,OAAO2C,mBAAmB,CAAE;QACjDiB,SAASF,kBAAkBG,SAAShD,SAASiD,WAAW,EAAE,aAAajD,SAASkD,QAAQ;QACxFH,SAASF,kBAAkBG,SAAShD,SAASiD,WAAW,EAAE,YAAYjD,SAASmD,OAAO;IACxF;IACA,KAAK,MAAMC,SAASjE,OAAO4C,aAAa,CAAE;QACxCgB,SAAShB,eAAeiB,SAASI,MAAMH,WAAW,EAAEG,MAAMC,KAAK,GAAGD,MAAMA,KAAK;IAC/E;IAEA,MAAME,OAAO;WAAI,IAAIC,IAAI;eAAIV,iBAAiBS,IAAI;eAAOvB,cAAcuB,IAAI;SAAG;KAAE,CAACE,IAAI;IACrF,OAAOF,KAAKG,OAAO,CAAC,CAACC;QACnB,MAAMC,aAAad,iBAAiBe,GAAG,CAACF,QAAQ;QAChD,MAAMG,UAAU9B,cAAc6B,GAAG,CAACF,QAAQ;QAC1C,IAAIC,eAAeE,SAAS,OAAO,EAAE;QAErC,MAAM,CAACZ,aAAaI,MAAM,GAAGS,cAAcJ;QAC3C,OAAO;YACL;gBACET;gBACAI;gBACAU,WAAWF,UAAUF,aAAa,mBAAmB;gBACrDK,OAAO3E,KAAK4E,GAAG,CAACJ,UAAUF;YAC5B;SACD;IACH;AACF;AAEA,SAAS1B,wBAAwB9C,MAAwB,EAAE4B,QAA4B;IACrF,KAAK,MAAMmD,cAAcnD,SAASN,WAAW,CAAE;QAC7ChC,SAAS0F,KAAK,CACZ;YACEhD,aAAahC,OAAOgC,WAAW;YAC/BC,eAAejC,OAAOiC,aAAa;YACnC6B,aAAaiB,WAAWjB,WAAW;YACnCI,OAAOa,WAAWb,KAAK;YACvBU,WAAWG,WAAWH,SAAS;YAC/BC,OAAOE,WAAWF,KAAK;QACzB,GACA;QAGF,MAAMI,aAAa;YACjBf,OAAOa,WAAWb,KAAK;YACvBU,WAAWG,WAAWH,SAAS;YAC/B,GAAIrF,OAAO2F,8DAA8D,GACrE;gBAACC,cAAcJ,WAAWjB,WAAW;YAAA,IACrC,CAAC,CAAC;QACR;QACAjE,sCAAsCuF,GAAG,CAACL,WAAWF,KAAK,EAAEI;IAC9D;IACA,KAAK,MAAM1C,UAAUX,SAASL,gBAAgB,CAAE;QAC9CzB,4CAA4CsF,GAAG,CAAC,GAAG;YACjDC,SAAS;YACTC,QAAQ/C,OAAO+C,MAAM;QACvB;IACF;AACF;AAEA,SAAS1B,SAAS2B,MAA2B,EAAEhB,GAAW,EAAEN,KAAa;IACvEsB,OAAOC,GAAG,CAACjB,KAAK,AAACgB,CAAAA,OAAOd,GAAG,CAACF,QAAQ,CAAA,IAAKN;AAC3C;AAEA,SAASJ,SAASC,WAAmB,EAAEI,KAA6B;IAClE,OAAO,GAAGJ,YAAY,EAAE,EAAEI,OAAO;AACnC;AAEA,SAASS,cAAcJ,GAAW;IAChC,MAAM,CAACT,aAAaI,MAAM,GAAGK,IAAIkB,KAAK,CAAC;IACvC,IAAI,CAAC3B,eAAgBI,UAAU,cAAcA,UAAU,WAAY;QACjE,MAAM,IAAIwB,MAAM,CAAC,sCAAsC,EAAEnB,KAAK;IAChE;IACA,OAAO;QAACT;QAAaI;KAAM;AAC7B"}

package/dist/core/entities/ephemeral-registration-token.d.ts

@@ -0,0 +1,14 @@
+export interface EphemeralRegistrationToken {
+    id: string;
+    workspaceId: string;
+    provisionerId: string;
+    reservationId: string | null;
+    provisionedRunnerId: string;
+    hashedToken: string;
+    prefix: string;
+    expiresAt: Date;
+    consumedAt: Date | null;
+    consumedSessionId: string | null;
+    createdAt: Date;
+}
+//# sourceMappingURL=ephemeral-registration-token.d.ts.map

package/dist/core/entities/ephemeral-registration-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeral-registration-token.d.ts","sourceRoot":"","sources":["../../../src/core/entities/ephemeral-registration-token.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/ephemeral-registration-token.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=ephemeral-registration-token.js.map

package/dist/core/entities/ephemeral-registration-token.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/ephemeral-registration-token.ts"],"sourcesContent":["export interface EphemeralRegistrationToken {\n  id: string;\n  workspaceId: string;\n  provisionerId: string;\n  reservationId: string | null;\n  provisionedRunnerId: string;\n  hashedToken: string;\n  prefix: string;\n  expiresAt: Date;\n  consumedAt: Date | null;\n  consumedSessionId: string | null;\n  createdAt: Date;\n}\n"],"names":[],"mappings":"AAAA,WAYC"}

package/dist/core/entities/manual-registration-token.d.ts

@@ -0,0 +1,12 @@
+export interface ManualRegistrationToken {
+    id: string;
+    workspaceId: string;
+    hashedToken: string;
+    prefix: string;
+    name: string | null;
+    expiresAt: Date | null;
+    revokedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=manual-registration-token.d.ts.map

package/dist/core/entities/manual-registration-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manual-registration-token.d.ts","sourceRoot":"","sources":["../../../src/core/entities/manual-registration-token.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/manual-registration-token.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=manual-registration-token.js.map

package/dist/core/entities/manual-registration-token.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/manual-registration-token.ts"],"sourcesContent":["export interface ManualRegistrationToken {\n  id: string;\n  workspaceId: string;\n  hashedToken: string;\n  prefix: string;\n  name: string | null;\n  expiresAt: Date | null;\n  revokedAt: Date | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n"],"names":[],"mappings":"AAAA,WAUC"}

package/dist/core/entities/provisioned-runner.d.ts

@@ -0,0 +1,24 @@
+export type ProvisionedRunnerState = 'starting' | 'running' | 'stopping' | 'stopped' | 'failed' | 'terminated';
+export interface ProvisionedRunner {
+    id: string;
+    workspaceId: string;
+    provisionerId: string;
+    provisionedRunnerId: string;
+    reservationId: string | null;
+    templateKey: string | null;
+    labels: string[];
+    state: ProvisionedRunnerState;
+    reason: string | null;
+    runnerSessionId: string | null;
+    providerKind: string | null;
+    reportedAt: Date;
+    startedAt: Date | null;
+    stoppingAt: Date | null;
+    stoppedAt: Date | null;
+    failedAt: Date | null;
+    terminatedAt: Date | null;
+    reservationReleasedAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=provisioned-runner.d.ts.map

package/dist/core/entities/provisioned-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioned-runner.d.ts","sourceRoot":"","sources":["../../../src/core/entities/provisioned-runner.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,sBAAsB,GAC9B,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,GACT,QAAQ,GACR,YAAY,CAAC;AAEjB,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,IAAI,CAAC;IACjB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,qBAAqB,EAAE,IAAI,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/provisioned-runner.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=provisioned-runner.js.map

package/dist/core/entities/provisioned-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/provisioned-runner.ts"],"sourcesContent":["export type ProvisionedRunnerState =\n  | 'starting'\n  | 'running'\n  | 'stopping'\n  | 'stopped'\n  | 'failed'\n  | 'terminated';\n\nexport interface ProvisionedRunner {\n  id: string;\n  workspaceId: string;\n  provisionerId: string;\n  provisionedRunnerId: string;\n  reservationId: string | null;\n  templateKey: string | null;\n  labels: string[];\n  state: ProvisionedRunnerState;\n  reason: string | null;\n  runnerSessionId: string | null;\n  providerKind: string | null;\n  reportedAt: Date;\n  startedAt: Date | null;\n  stoppingAt: Date | null;\n  stoppedAt: Date | null;\n  failedAt: Date | null;\n  terminatedAt: Date | null;\n  reservationReleasedAt: Date | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n"],"names":[],"mappings":"AAQA,WAqBC"}

package/dist/core/entities/provisioner-token.d.ts

@@ -0,0 +1,18 @@
+export interface ProvisionerToken {
+    id: string;
+    workspaceId: string;
+    hashedToken: string;
+    prefix: string;
+    name: string | null;
+    createdByUserId: string;
+    revokedByUserId: string | null;
+    expiresAt: Date | null;
+    revokedAt: Date | null;
+    lastSeenAt: Date | null;
+    createdAt: Date;
+    updatedAt: Date;
+}
+export type ActiveProvisionerToken = ProvisionerToken & {
+    lastSeenAt: Date;
+};
+//# sourceMappingURL=provisioner-token.d.ts.map

package/dist/core/entities/provisioner-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioner-token.d.ts","sourceRoot":"","sources":["../../../src/core/entities/provisioner-token.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,GAAG;IAAC,UAAU,EAAE,IAAI,CAAA;CAAC,CAAC"}

package/dist/core/entities/provisioner-token.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=provisioner-token.js.map

package/dist/core/entities/provisioner-token.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/provisioner-token.ts"],"sourcesContent":["export interface ProvisionerToken {\n  id: string;\n  workspaceId: string;\n  hashedToken: string;\n  prefix: string;\n  name: string | null;\n  createdByUserId: string;\n  revokedByUserId: string | null;\n  expiresAt: Date | null;\n  revokedAt: Date | null;\n  lastSeenAt: Date | null;\n  createdAt: Date;\n  updatedAt: Date;\n}\n\nexport type ActiveProvisionerToken = ProvisionerToken & {lastSeenAt: Date};\n"],"names":[],"mappings":"AAeA,WAA2E"}

package/dist/core/entities/reservation.d.ts

@@ -0,0 +1,10 @@
+export interface Reservation {
+    id: string;
+    workspaceId: string;
+    provisionerId: string;
+    requiredLabels: string[];
+    count: number;
+    createdAt: Date;
+    expiresAt: Date;
+}
+//# sourceMappingURL=reservation.d.ts.map

package/dist/core/entities/reservation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reservation.d.ts","sourceRoot":"","sources":["../../../src/core/entities/reservation.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/reservation.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=reservation.js.map

package/dist/core/entities/reservation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/reservation.ts"],"sourcesContent":["export interface Reservation {\n  id: string;\n  workspaceId: string;\n  provisionerId: string;\n  requiredLabels: string[];\n  count: number;\n  createdAt: Date;\n  expiresAt: Date;\n}\n"],"names":[],"mappings":"AAAA,WAQC"}

package/dist/core/entities/runner-session.d.ts

@@ -0,0 +1,18 @@
+import type { RunnerToolCapabilitiesDto } from '@shipfox/api-runners-dto';
+export interface RunnerSession {
+    id: string;
+    workspaceId: string;
+    scope: 'workspace';
+    registrationTokenId: string;
+    registrationTokenKind: 'manual' | 'ephemeral';
+    provisionerId: string | null;
+    provisionedRunnerId: string | null;
+    labels: string[];
+    toolCapabilities: RunnerToolCapabilitiesDto | null;
+    toolCapabilitiesReportedAt: Date | null;
+    maxClaims: number | null;
+    claimsUsed: number;
+    createdAt: Date;
+    updatedAt: Date;
+}
+//# sourceMappingURL=runner-session.d.ts.map

package/dist/core/entities/runner-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-session.d.ts","sourceRoot":"","sources":["../../../src/core/entities/runner-session.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,yBAAyB,EAAC,MAAM,0BAA0B,CAAC;AAExE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,qBAAqB,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC9C,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gBAAgB,EAAE,yBAAyB,GAAG,IAAI,CAAC;IACnD,0BAA0B,EAAE,IAAI,GAAG,IAAI,CAAC;IACxC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,IAAI,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/core/entities/runner-session.js

@@ -0,0 +1,3 @@
+export { };
+
+//# sourceMappingURL=runner-session.js.map

package/dist/core/entities/runner-session.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/core/entities/runner-session.ts"],"sourcesContent":["import type {RunnerToolCapabilitiesDto} from '@shipfox/api-runners-dto';\n\nexport interface RunnerSession {\n  id: string;\n  workspaceId: string;\n  scope: 'workspace';\n  registrationTokenId: string;\n  registrationTokenKind: 'manual' | 'ephemeral';\n  provisionerId: string | null;\n  provisionedRunnerId: string | null;\n  labels: string[];\n  toolCapabilities: RunnerToolCapabilitiesDto | null;\n  toolCapabilitiesReportedAt: Date | null;\n  maxClaims: number | null;\n  claimsUsed: number;\n  createdAt: Date;\n  updatedAt: Date;\n}\n"],"names":[],"mappings":"AAEA,WAeC"}

package/dist/core/ephemeral-registration-tokens.d.ts

@@ -0,0 +1,31 @@
+import type { EphemeralRegistrationToken } from './entities/ephemeral-registration-token.js';
+export interface MintEphemeralRegistrationTokenParams {
+    workspaceId: string;
+    provisionerId: string;
+    provisionedRunnerId: string;
+    reservationId?: string | null | undefined;
+    ttlSeconds: number;
+}
+export interface MintEphemeralRegistrationTokenResult {
+    token: EphemeralRegistrationToken;
+    rawToken: string;
+}
+export interface MintEphemeralRegistrationTokensBatchProvisionedRunner {
+    provisionedRunnerId: string;
+}
+export interface MintEphemeralRegistrationTokensBatchParams {
+    workspaceId: string;
+    provisionerId: string;
+    reservationId: string;
+    provisionedRunners: MintEphemeralRegistrationTokensBatchProvisionedRunner[];
+    ttlSeconds: number;
+    maxBatchSize: number;
+}
+export interface MintEphemeralRegistrationTokensBatchResult {
+    provisionedRunnerId: string;
+    token: EphemeralRegistrationToken;
+    rawToken: string;
+}
+export declare function mintEphemeralRegistrationToken(params: MintEphemeralRegistrationTokenParams): Promise<MintEphemeralRegistrationTokenResult>;
+export declare function mintEphemeralRegistrationTokensBatch(params: MintEphemeralRegistrationTokensBatchParams): Promise<MintEphemeralRegistrationTokensBatchResult[]>;
+//# sourceMappingURL=ephemeral-registration-tokens.d.ts.map

package/dist/core/ephemeral-registration-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ephemeral-registration-tokens.d.ts","sourceRoot":"","sources":["../../src/core/ephemeral-registration-tokens.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,0BAA0B,EAAC,MAAM,4CAA4C,CAAC;AAG3F,MAAM,WAAW,oCAAoC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,0BAA0B,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qDAAqD;IACpE,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,0CAA0C;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,qDAAqD,EAAE,CAAC;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,0CAA0C;IACzD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,KAAK,EAAE,0BAA0B,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,oCAAoC,GAC3C,OAAO,CAAC,oCAAoC,CAAC,CAc/C;AAED,wBAAsB,oCAAoC,CACxD,MAAM,EAAE,0CAA0C,GACjD,OAAO,CAAC,0CAA0C,EAAE,CAAC,CAgCvD"}

package/dist/core/ephemeral-registration-tokens.js

@@ -0,0 +1,61 @@
+import { extractDisplayPrefix, generateOpaqueToken, hashOpaqueToken } from '@shipfox/node-tokens';
+import { createEphemeralRegistrationToken, createEphemeralRegistrationTokensBatch } from '#db/ephemeral-registration-tokens.js';
+import { RegistrationTokenBatchTooLargeError } from './errors.js';
+export async function mintEphemeralRegistrationToken(params) {
+    const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);
+    const row = buildEphemeralTokenRow(params.provisionedRunnerId, expiresAt);
+    const token = await createEphemeralRegistrationToken({
+        workspaceId: params.workspaceId,
+        provisionerId: params.provisionerId,
+        reservationId: params.reservationId ?? null,
+        provisionedRunnerId: params.provisionedRunnerId,
+        hashedToken: row.hashedToken,
+        prefix: row.prefix,
+        expiresAt: row.expiresAt
+    });
+    return {
+        token,
+        rawToken: row.rawToken
+    };
+}
+export async function mintEphemeralRegistrationTokensBatch(params) {
+    if (params.provisionedRunners.length > params.maxBatchSize) {
+        throw new RegistrationTokenBatchTooLargeError(params.provisionedRunners.length, params.maxBatchSize);
+    }
+    const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);
+    const rows = params.provisionedRunners.map((provisionedRunner)=>buildEphemeralTokenRow(provisionedRunner.provisionedRunnerId, expiresAt));
+    const tokens = await createEphemeralRegistrationTokensBatch({
+        workspaceId: params.workspaceId,
+        provisionerId: params.provisionerId,
+        reservationId: params.reservationId,
+        expiresAt,
+        rows
+    });
+    const tokensByProvisionedRunnerId = new Map(tokens.map((token)=>[
+            token.provisionedRunnerId,
+            token
+        ]));
+    return rows.map((row)=>{
+        const token = tokensByProvisionedRunnerId.get(row.provisionedRunnerId);
+        if (!token) {
+            throw new Error(`Inserted token not returned for provisioned runner: ${row.provisionedRunnerId}`);
+        }
+        return {
+            provisionedRunnerId: row.provisionedRunnerId,
+            rawToken: row.rawToken,
+            token
+        };
+    });
+}
+function buildEphemeralTokenRow(provisionedRunnerId, expiresAt) {
+    const rawToken = generateOpaqueToken('ephemeralRegistrationToken');
+    return {
+        provisionedRunnerId,
+        rawToken,
+        hashedToken: hashOpaqueToken(rawToken),
+        prefix: extractDisplayPrefix(rawToken),
+        expiresAt
+    };
+}
+
+//# sourceMappingURL=ephemeral-registration-tokens.js.map

package/dist/core/ephemeral-registration-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/ephemeral-registration-tokens.ts"],"sourcesContent":["import {extractDisplayPrefix, generateOpaqueToken, hashOpaqueToken} from '@shipfox/node-tokens';\nimport {\n  createEphemeralRegistrationToken,\n  createEphemeralRegistrationTokensBatch,\n} from '#db/ephemeral-registration-tokens.js';\nimport type {EphemeralRegistrationToken} from './entities/ephemeral-registration-token.js';\nimport {RegistrationTokenBatchTooLargeError} from './errors.js';\n\nexport interface MintEphemeralRegistrationTokenParams {\n  workspaceId: string;\n  provisionerId: string;\n  provisionedRunnerId: string;\n  reservationId?: string | null | undefined;\n  ttlSeconds: number;\n}\n\nexport interface MintEphemeralRegistrationTokenResult {\n  token: EphemeralRegistrationToken;\n  rawToken: string;\n}\n\nexport interface MintEphemeralRegistrationTokensBatchProvisionedRunner {\n  provisionedRunnerId: string;\n}\n\nexport interface MintEphemeralRegistrationTokensBatchParams {\n  workspaceId: string;\n  provisionerId: string;\n  reservationId: string;\n  provisionedRunners: MintEphemeralRegistrationTokensBatchProvisionedRunner[];\n  ttlSeconds: number;\n  maxBatchSize: number;\n}\n\nexport interface MintEphemeralRegistrationTokensBatchResult {\n  provisionedRunnerId: string;\n  token: EphemeralRegistrationToken;\n  rawToken: string;\n}\n\nexport async function mintEphemeralRegistrationToken(\n  params: MintEphemeralRegistrationTokenParams,\n): Promise<MintEphemeralRegistrationTokenResult> {\n  const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);\n  const row = buildEphemeralTokenRow(params.provisionedRunnerId, expiresAt);\n  const token = await createEphemeralRegistrationToken({\n    workspaceId: params.workspaceId,\n    provisionerId: params.provisionerId,\n    reservationId: params.reservationId ?? null,\n    provisionedRunnerId: params.provisionedRunnerId,\n    hashedToken: row.hashedToken,\n    prefix: row.prefix,\n    expiresAt: row.expiresAt,\n  });\n\n  return {token, rawToken: row.rawToken};\n}\n\nexport async function mintEphemeralRegistrationTokensBatch(\n  params: MintEphemeralRegistrationTokensBatchParams,\n): Promise<MintEphemeralRegistrationTokensBatchResult[]> {\n  if (params.provisionedRunners.length > params.maxBatchSize) {\n    throw new RegistrationTokenBatchTooLargeError(\n      params.provisionedRunners.length,\n      params.maxBatchSize,\n    );\n  }\n\n  const expiresAt = new Date(Date.now() + params.ttlSeconds * 1000);\n  const rows = params.provisionedRunners.map((provisionedRunner) =>\n    buildEphemeralTokenRow(provisionedRunner.provisionedRunnerId, expiresAt),\n  );\n  const tokens = await createEphemeralRegistrationTokensBatch({\n    workspaceId: params.workspaceId,\n    provisionerId: params.provisionerId,\n    reservationId: params.reservationId,\n    expiresAt,\n    rows,\n  });\n  const tokensByProvisionedRunnerId = new Map(\n    tokens.map((token) => [token.provisionedRunnerId, token]),\n  );\n\n  return rows.map((row) => {\n    const token = tokensByProvisionedRunnerId.get(row.provisionedRunnerId);\n    if (!token) {\n      throw new Error(\n        `Inserted token not returned for provisioned runner: ${row.provisionedRunnerId}`,\n      );\n    }\n    return {provisionedRunnerId: row.provisionedRunnerId, rawToken: row.rawToken, token};\n  });\n}\n\ninterface EphemeralTokenRow {\n  provisionedRunnerId: string;\n  rawToken: string;\n  hashedToken: string;\n  prefix: string;\n  expiresAt: Date;\n}\n\nfunction buildEphemeralTokenRow(provisionedRunnerId: string, expiresAt: Date): EphemeralTokenRow {\n  const rawToken = generateOpaqueToken('ephemeralRegistrationToken');\n  return {\n    provisionedRunnerId,\n    rawToken,\n    hashedToken: hashOpaqueToken(rawToken),\n    prefix: extractDisplayPrefix(rawToken),\n    expiresAt,\n  };\n}\n"],"names":["extractDisplayPrefix","generateOpaqueToken","hashOpaqueToken","createEphemeralRegistrationToken","createEphemeralRegistrationTokensBatch","RegistrationTokenBatchTooLargeError","mintEphemeralRegistrationToken","params","expiresAt","Date","now","ttlSeconds","row","buildEphemeralTokenRow","provisionedRunnerId","token","workspaceId","provisionerId","reservationId","hashedToken","prefix","rawToken","mintEphemeralRegistrationTokensBatch","provisionedRunners","length","maxBatchSize","rows","map","provisionedRunner","tokens","tokensByProvisionedRunnerId","Map","get","Error"],"mappings":"AAAA,SAAQA,oBAAoB,EAAEC,mBAAmB,EAAEC,eAAe,QAAO,uBAAuB;AAChG,SACEC,gCAAgC,EAChCC,sCAAsC,QACjC,uCAAuC;AAE9C,SAAQC,mCAAmC,QAAO,cAAc;AAkChE,OAAO,eAAeC,+BACpBC,MAA4C;IAE5C,MAAMC,YAAY,IAAIC,KAAKA,KAAKC,GAAG,KAAKH,OAAOI,UAAU,GAAG;IAC5D,MAAMC,MAAMC,uBAAuBN,OAAOO,mBAAmB,EAAEN;IAC/D,MAAMO,QAAQ,MAAMZ,iCAAiC;QACnDa,aAAaT,OAAOS,WAAW;QAC/BC,eAAeV,OAAOU,aAAa;QACnCC,eAAeX,OAAOW,aAAa,IAAI;QACvCJ,qBAAqBP,OAAOO,mBAAmB;QAC/CK,aAAaP,IAAIO,WAAW;QAC5BC,QAAQR,IAAIQ,MAAM;QAClBZ,WAAWI,IAAIJ,SAAS;IAC1B;IAEA,OAAO;QAACO;QAAOM,UAAUT,IAAIS,QAAQ;IAAA;AACvC;AAEA,OAAO,eAAeC,qCACpBf,MAAkD;IAElD,IAAIA,OAAOgB,kBAAkB,CAACC,MAAM,GAAGjB,OAAOkB,YAAY,EAAE;QAC1D,MAAM,IAAIpB,oCACRE,OAAOgB,kBAAkB,CAACC,MAAM,EAChCjB,OAAOkB,YAAY;IAEvB;IAEA,MAAMjB,YAAY,IAAIC,KAAKA,KAAKC,GAAG,KAAKH,OAAOI,UAAU,GAAG;IAC5D,MAAMe,OAAOnB,OAAOgB,kBAAkB,CAACI,GAAG,CAAC,CAACC,oBAC1Cf,uBAAuBe,kBAAkBd,mBAAmB,EAAEN;IAEhE,MAAMqB,SAAS,MAAMzB,uCAAuC;QAC1DY,aAAaT,OAAOS,WAAW;QAC/BC,eAAeV,OAAOU,aAAa;QACnCC,eAAeX,OAAOW,aAAa;QACnCV;QACAkB;IACF;IACA,MAAMI,8BAA8B,IAAIC,IACtCF,OAAOF,GAAG,CAAC,CAACZ,QAAU;YAACA,MAAMD,mBAAmB;YAAEC;SAAM;IAG1D,OAAOW,KAAKC,GAAG,CAAC,CAACf;QACf,MAAMG,QAAQe,4BAA4BE,GAAG,CAACpB,IAAIE,mBAAmB;QACrE,IAAI,CAACC,OAAO;YACV,MAAM,IAAIkB,MACR,CAAC,oDAAoD,EAAErB,IAAIE,mBAAmB,EAAE;QAEpF;QACA,OAAO;YAACA,qBAAqBF,IAAIE,mBAAmB;YAAEO,UAAUT,IAAIS,QAAQ;YAAEN;QAAK;IACrF;AACF;AAUA,SAASF,uBAAuBC,mBAA2B,EAAEN,SAAe;IAC1E,MAAMa,WAAWpB,oBAAoB;IACrC,OAAO;QACLa;QACAO;QACAF,aAAajB,gBAAgBmB;QAC7BD,QAAQpB,qBAAqBqB;QAC7Bb;IACF;AACF"}

package/dist/core/errors.d.ts

@@ -0,0 +1,62 @@
+export declare class RunningJobExecutionNotFoundError extends Error {
+    constructor(jobExecutionId: string);
+}
+export declare class ManualRegistrationTokenNotFoundError extends Error {
+    constructor(tokenId: string);
+}
+export declare class ProvisionerTokenNotFoundError extends Error {
+    constructor(tokenId: string);
+}
+export declare class EmptyRunnerLabelsError extends Error {
+    constructor();
+}
+export declare class EmptyRequiredLabelsError extends Error {
+    constructor();
+}
+export declare class RegistrationTokenConsumedError extends Error {
+    readonly ephemeralTokenId: string;
+    constructor(ephemeralTokenId: string);
+}
+export declare class RegistrationTokenExpiredError extends Error {
+    readonly ephemeralTokenId: string;
+    constructor(ephemeralTokenId: string);
+}
+export declare class RegistrationTokenWorkspaceMismatchError extends Error {
+    readonly ephemeralTokenId: string;
+    readonly workspaceId: string;
+    constructor(ephemeralTokenId: string, workspaceId: string);
+}
+export declare class ActiveEphemeralRegistrationTokenExistsError extends Error {
+    readonly workspaceId: string;
+    readonly provisionerId: string;
+    readonly provisionedRunnerId: string;
+    constructor(workspaceId: string, provisionerId: string, provisionedRunnerId: string);
+}
+export declare class ReservationNotFoundError extends Error {
+    readonly reservationId: string;
+    constructor(reservationId: string);
+}
+export declare class ReservationExpiredError extends Error {
+    readonly reservationId: string;
+    constructor(reservationId: string);
+}
+export declare class RegistrationTokenBatchTooLargeError extends Error {
+    readonly requested: number;
+    readonly max: number;
+    constructor(requested: number, max: number);
+}
+export declare class RegistrationTokenBatchExceedsReservationError extends Error {
+    readonly requested: number;
+    readonly reservationCount: number;
+    readonly alreadyMinted: number;
+    constructor(requested: number, reservationCount: number, alreadyMinted?: number);
+}
+export declare class ActiveEphemeralRegistrationTokensExistError extends Error {
+    readonly provisionedRunnerIds: string[];
+    constructor(provisionedRunnerIds: string[]);
+}
+export declare class RunnerSessionExhaustedError extends Error {
+    readonly runnerSessionId: string;
+    constructor(runnerSessionId: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/core/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,cAAc,EAAE,MAAM;CAInC;AAED,qBAAa,oCAAqC,SAAQ,KAAK;gBACjD,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,6BAA8B,SAAQ,KAAK;gBAC1C,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;;CAKhD;AAED,qBAAa,wBAAyB,SAAQ,KAAK;;CAKlD;AAED,qBAAa,8BAA+B,SAAQ,KAAK;aAC3B,gBAAgB,EAAE,MAAM;gBAAxB,gBAAgB,EAAE,MAAM;CAIrD;AAED,qBAAa,6BAA8B,SAAQ,KAAK;aAC1B,gBAAgB,EAAE,MAAM;gBAAxB,gBAAgB,EAAE,MAAM;CAIrD;AAED,qBAAa,uCAAwC,SAAQ,KAAK;aAE9C,gBAAgB,EAAE,MAAM;aACxB,WAAW,EAAE,MAAM;gBADnB,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM;CAOtC;AAED,qBAAa,2CAA4C,SAAQ,KAAK;aAElD,WAAW,EAAE,MAAM;aACnB,aAAa,EAAE,MAAM;aACrB,mBAAmB,EAAE,MAAM;gBAF3B,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,mBAAmB,EAAE,MAAM;CAO9C;AAED,qBAAa,wBAAyB,SAAQ,KAAK;aACrB,aAAa,EAAE,MAAM;gBAArB,aAAa,EAAE,MAAM;CAIlD;AAED,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,aAAa,EAAE,MAAM;gBAArB,aAAa,EAAE,MAAM;CAIlD;AAED,qBAAa,mCAAoC,SAAQ,KAAK;aAE1C,SAAS,EAAE,MAAM;aACjB,GAAG,EAAE,MAAM;gBADX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM;CAO9B;AAED,qBAAa,6CAA8C,SAAQ,KAAK;aAEpD,SAAS,EAAE,MAAM;aACjB,gBAAgB,EAAE,MAAM;aACxB,aAAa,EAAE,MAAM;gBAFrB,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,EACxB,aAAa,GAAE,MAAU;CAO5C;AAED,qBAAa,2CAA4C,SAAQ,KAAK;aACxC,oBAAoB,EAAE,MAAM,EAAE;gBAA9B,oBAAoB,EAAE,MAAM,EAAE;CAM3D;AAED,qBAAa,2BAA4B,SAAQ,KAAK;aACxB,eAAe,EAAE,MAAM;gBAAvB,eAAe,EAAE,MAAM;CAIpD"}