@shipfox/api-runners 2.0.0

package/dist/db/job-executions.js

@@ -0,0 +1,354 @@
+import { RUNNER_JOB_CLAIMED, RUNNER_JOB_LEASE_EXPIRED, RUNNER_JOB_QUEUED } from '@shipfox/api-runners-dto';
+import { logger } from '@shipfox/node-opentelemetry';
+import { writeOutboxEvent, writeOutboxEvents } from '@shipfox/node-outbox';
+import { canonicalizeLabels } from '@shipfox/runner-labels';
+import { and, arrayContained, asc, count, desc, eq, gt, inArray, isNotNull, isNull, lt, lte, or, sql } from 'drizzle-orm';
+import { EmptyRequiredLabelsError, RunnerSessionExhaustedError, RunningJobExecutionNotFoundError } from '#core/errors.js';
+import { jobExecutionEnqueuedCount, jobExecutionLeaseExpiredCount } from '#metrics/instance.js';
+import { db } from './db.js';
+import { runnersOutbox } from './schema/outbox.js';
+import { pendingJobExecutions } from './schema/pending-job-executions.js';
+import { runnerSessions } from './schema/runner-sessions.js';
+import { runningJobExecutions } from './schema/running-job-executions.js';
+// Idempotent while the job execution is still pending: a duplicate jobExecutionId already in
+// `runners_pending_jobs` is a no-op. Temporal retries the enqueue activity
+// at-least-once, so a unique-violation throw on a retry-after-lost-result
+// would permanently fail a healthy job execution's workflow. The guard does not extend
+// past the claim: once the job execution has moved to `runners_running_jobs`, a retry
+// can reinsert an orphan pending row, which a later `claimPendingJobExecution` drops
+// via the running-execution unique constraint (onConflictDoNothing) instead of failing.
+export async function enqueueJobExecution(params) {
+    const requiredLabels = [
+        ...canonicalizeLabels(params.requiredLabels)
+    ];
+    if (requiredLabels.length === 0) throw new EmptyRequiredLabelsError();
+    const enqueued = await db().transaction(async (tx)=>{
+        const [inserted] = await tx.insert(pendingJobExecutions).values({
+            workspaceId: params.workspaceId,
+            workflowRunId: params.workflowRunId,
+            workflowRunAttemptId: params.workflowRunAttemptId,
+            jobId: params.jobId,
+            jobExecutionId: params.jobExecutionId,
+            projectId: params.projectId,
+            requiredLabels
+        }).onConflictDoNothing({
+            target: pendingJobExecutions.jobExecutionId
+        }).returning({
+            createdAt: pendingJobExecutions.createdAt
+        });
+        // A retry that hits the conflict inserts nothing: the first enqueue already
+        // emitted the queued event (durably, in the outbox), so re-emitting would
+        // only add a redundant row the subscriber coalesces away. Skip it.
+        if (!inserted) return false;
+        await writeOutboxEvent(tx, runnersOutbox, {
+            type: RUNNER_JOB_QUEUED,
+            payload: {
+                workflowRunId: params.workflowRunId,
+                workflowRunAttemptId: params.workflowRunAttemptId,
+                jobId: params.jobId,
+                jobExecutionId: params.jobExecutionId,
+                queuedAt: inserted.createdAt.toISOString()
+            }
+        });
+        return true;
+    });
+    if (enqueued) jobExecutionEnqueuedCount.add(1);
+}
+export async function claimPendingJobExecution(params) {
+    await touchRunnerSessionLiveness({
+        workspaceId: params.workspaceId,
+        runnerSessionId: params.runnerSessionId,
+        throttleSeconds: params.runnerSessionLivenessThrottleSeconds
+    });
+    if (params.sessionLabels.length === 0) return null;
+    return await db().transaction(async (tx)=>{
+        let provisionerId = null;
+        let provisionedRunnerId = null;
+        if (params.maxClaims !== null) {
+            const [session] = await tx.select({
+                maxClaims: runnerSessions.maxClaims,
+                claimsUsed: runnerSessions.claimsUsed,
+                provisionerId: runnerSessions.provisionerId,
+                provisionedRunnerId: runnerSessions.provisionedRunnerId
+            }).from(runnerSessions).where(eq(runnerSessions.id, params.runnerSessionId)).limit(1).for('update');
+            if (!session || session.maxClaims === null || session.claimsUsed >= session.maxClaims) {
+                throw new RunnerSessionExhaustedError(params.runnerSessionId);
+            }
+            // Ephemeral sessions are the only capped sessions, and the DB check keeps
+            // their provisioned-runner link present as a pair.
+            provisionerId = session.provisionerId;
+            provisionedRunnerId = session.provisionedRunnerId;
+        }
+        // `id` is a uuidv7 (time-ordered), so it is a deterministic FIFO tiebreaker
+        // for rows sharing a created_at within a batch.
+        const [row] = await tx.select().from(pendingJobExecutions).where(and(eq(pendingJobExecutions.workspaceId, params.workspaceId), arrayContained(pendingJobExecutions.requiredLabels, params.sessionLabels))).orderBy(asc(pendingJobExecutions.createdAt), asc(pendingJobExecutions.id)).limit(1).for('update', {
+            skipLocked: true
+        });
+        if (!row) return null;
+        await tx.delete(pendingJobExecutions).where(eq(pendingJobExecutions.id, row.id));
+        // An enqueue retry that lands after a prior claim can leave an orphan pending
+        // row whose jobExecutionId is already in `runners_running_jobs`. Insert-or-skip
+        // on the jobExecutionId unique constraint: when the job execution is already running
+        // the insert touches no row, so we commit the orphan's deletion and return
+        // null rather than let the unique violation roll the claim back into a poison
+        // loop. The runner just re-polls for a real job execution.
+        const inserted = await tx.insert(runningJobExecutions).values({
+            workspaceId: row.workspaceId,
+            workflowRunId: row.workflowRunId,
+            workflowRunAttemptId: row.workflowRunAttemptId,
+            jobId: row.jobId,
+            jobExecutionId: row.jobExecutionId,
+            projectId: row.projectId,
+            runnerSessionId: params.runnerSessionId,
+            provisionerId,
+            provisionedRunnerId,
+            requiredLabels: row.requiredLabels,
+            runnerLabels: params.sessionLabels
+        }).onConflictDoNothing({
+            target: runningJobExecutions.jobExecutionId
+        }).returning({
+            claimedAt: runningJobExecutions.startedAt
+        });
+        const claimed = inserted[0];
+        if (!claimed) return null;
+        if (params.maxClaims !== null) {
+            await tx.update(runnerSessions).set({
+                claimsUsed: sql`${runnerSessions.claimsUsed} + 1`,
+                updatedAt: sql`now()`
+            }).where(eq(runnerSessions.id, params.runnerSessionId));
+        }
+        // The running-row insert is the runner claiming the job execution. Emit in the same tx; the
+        // payload carries the row's own claim instant so a consumer records the true time,
+        // not the outbox drain time.
+        await writeOutboxEvent(tx, runnersOutbox, {
+            type: RUNNER_JOB_CLAIMED,
+            payload: {
+                workflowRunId: row.workflowRunId,
+                workflowRunAttemptId: row.workflowRunAttemptId,
+                jobId: row.jobId,
+                jobExecutionId: row.jobExecutionId,
+                claimedAt: claimed.claimedAt.toISOString()
+            }
+        });
+        return {
+            workflowRunId: row.workflowRunId,
+            workflowRunAttemptId: row.workflowRunAttemptId,
+            jobId: row.jobId,
+            jobExecutionId: row.jobExecutionId,
+            projectId: row.projectId
+        };
+    });
+}
+async function touchRunnerSessionLiveness(params) {
+    await db().update(runnerSessions).set({
+        updatedAt: sql`now()`
+    }).where(and(eq(runnerSessions.id, params.runnerSessionId), eq(runnerSessions.workspaceId, params.workspaceId), sql`${runnerSessions.updatedAt} < now() - (${params.throttleSeconds} || ' seconds')::interval`));
+}
+/**
+ * Releases a job execution's lease when the orchestration workflow finalizes it: deletes the
+ * running-job-execution row AND any lingering pending row for the same execution, in one tx.
+ * Idempotent (0-row no-op), no token scope (the workflow is authoritative), and
+ * emits no event — the workflow already owns the outcome. Sweeping the pending row
+ * too closes the at-least-once window where an enqueue retry left an orphan that a
+ * later claim would otherwise pick up for an already-finished job execution.
+ */ export async function releaseJobExecution(params) {
+    await db().transaction(async (tx)=>{
+        // Delete pending before running to match `claimPendingJobExecution`'s lock-acquisition
+        // order (it locks the pending row first, then the running row). A concurrent
+        // claim picking up an orphan pending row for this same job execution would otherwise
+        // deadlock against the reverse order here.
+        await tx.delete(pendingJobExecutions).where(eq(pendingJobExecutions.jobExecutionId, params.jobExecutionId));
+        await tx.delete(runningJobExecutions).where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId));
+    });
+}
+/**
+ * Reaps stale leases (bounded by `limit`), emitting one
+ * `runners.job.lease_expired` event per reaped job execution.
+ *
+ * The cutoff is re-checked in the DELETE, not just the locking subquery, so a
+ * heartbeat landing mid-call spares the live row. Each reaped execution also sweeps its
+ * pending row: a failed best-effort `releaseJobExecution` would otherwise leave an orphan
+ * that a later claim re-runs as an already-finished job execution.
+ *
+ * Locks running-then-pending, the inverse of `claimPendingJobExecution` / `releaseJobExecution`.
+ * That pre-existing asymmetry opens a narrow deadlock window against a concurrent
+ * claim of the same orphan-pending job execution; Postgres breaks it and the cron retries.
+ */ export async function expireStuckJobExecutions(params) {
+    const reaped = await db().transaction(async (tx)=>{
+        const heartbeatCutoff = sql`now() - (${params.thresholdSeconds} || ' seconds')::interval`;
+        const firstHeartbeatCutoff = sql`now() - (${params.noFirstHeartbeatGraceSeconds} || ' seconds')::interval`;
+        const stalePredicate = or(and(isNull(runningJobExecutions.firstHeartbeatAt), lte(runningJobExecutions.lastHeartbeatAt, runningJobExecutions.startedAt), lt(runningJobExecutions.startedAt, firstHeartbeatCutoff)), and(or(isNotNull(runningJobExecutions.firstHeartbeatAt), gt(runningJobExecutions.lastHeartbeatAt, runningJobExecutions.startedAt)), lt(runningJobExecutions.lastHeartbeatAt, heartbeatCutoff)));
+        const staleIds = tx.select({
+            id: runningJobExecutions.id
+        }).from(runningJobExecutions).where(stalePredicate).orderBy(asc(sql`CASE WHEN ${runningJobExecutions.firstHeartbeatAt} IS NULL AND ${runningJobExecutions.lastHeartbeatAt} <= ${runningJobExecutions.startedAt} THEN ${runningJobExecutions.startedAt} ELSE ${runningJobExecutions.lastHeartbeatAt} END`)).limit(params.limit ?? 100).for('update', {
+            skipLocked: true
+        });
+        const deleted = await tx.delete(runningJobExecutions).where(and(inArray(runningJobExecutions.id, staleIds), stalePredicate)).returning({
+            workflowRunId: runningJobExecutions.workflowRunId,
+            workflowRunAttemptId: runningJobExecutions.workflowRunAttemptId,
+            jobId: runningJobExecutions.jobId,
+            jobExecutionId: runningJobExecutions.jobExecutionId
+        });
+        if (deleted.length === 0) return [];
+        await tx.delete(pendingJobExecutions).where(inArray(pendingJobExecutions.jobExecutionId, deleted.map((row)=>row.jobExecutionId)));
+        await writeOutboxEvents(tx, runnersOutbox, deleted.map((row)=>({
+                type: RUNNER_JOB_LEASE_EXPIRED,
+                payload: {
+                    workflowRunId: row.workflowRunId,
+                    workflowRunAttemptId: row.workflowRunAttemptId,
+                    jobId: row.jobId,
+                    jobExecutionId: row.jobExecutionId
+                }
+            })));
+        return deleted;
+    });
+    if (reaped.length > 0) jobExecutionLeaseExpiredCount.add(reaped.length);
+    return reaped;
+}
+export async function getJobExecutionQueueDepth() {
+    const [pending] = await db().select({
+        value: count()
+    }).from(pendingJobExecutions);
+    const [running] = await db().select({
+        value: count()
+    }).from(runningJobExecutions);
+    return {
+        pendingJobExecutions: pending?.value ?? 0,
+        runningJobExecutions: running?.value ?? 0
+    };
+}
+export async function listActiveRunningJobExecutions(params) {
+    return await db().select({
+        jobId: runningJobExecutions.jobId,
+        jobExecutionId: runningJobExecutions.jobExecutionId,
+        workflowRunId: runningJobExecutions.workflowRunId,
+        workflowRunAttemptId: runningJobExecutions.workflowRunAttemptId,
+        projectId: runningJobExecutions.projectId,
+        runnerSessionId: runningJobExecutions.runnerSessionId,
+        provisionerId: runningJobExecutions.provisionerId,
+        provisionedRunnerId: runningJobExecutions.provisionedRunnerId,
+        requiredLabels: runningJobExecutions.requiredLabels,
+        runnerLabels: runningJobExecutions.runnerLabels,
+        startedAt: runningJobExecutions.startedAt,
+        lastHeartbeatAt: runningJobExecutions.lastHeartbeatAt
+    }).from(runningJobExecutions).where(and(eq(runningJobExecutions.workspaceId, params.workspaceId), sql`${runningJobExecutions.lastHeartbeatAt} > now() - (${params.windowSeconds} || ' seconds')::interval`)).orderBy(desc(runningJobExecutions.lastHeartbeatAt), desc(runningJobExecutions.id)).limit(params.limit ?? 1000);
+}
+export async function listRunningJobExecutionsByProvisionedRunnerTx(tx, params) {
+    if (params.provisionedRunnerIds.length === 0) return [];
+    const duplicateRows = await tx.select({
+        provisionedRunnerId: runningJobExecutions.provisionedRunnerId,
+        count: count()
+    }).from(runningJobExecutions).where(and(eq(runningJobExecutions.workspaceId, params.workspaceId), eq(runningJobExecutions.provisionerId, params.provisionerId), inArray(runningJobExecutions.provisionedRunnerId, params.provisionedRunnerIds))).groupBy(runningJobExecutions.provisionedRunnerId).having(sql`count(*) > 1`);
+    const duplicateProvisionedRunnerIds = duplicateRows.flatMap((row)=>row.provisionedRunnerId ? [
+            row.provisionedRunnerId
+        ] : []);
+    if (duplicateProvisionedRunnerIds.length > 0) {
+        logger().warn({
+            workspaceId: params.workspaceId,
+            provisionerId: params.provisionerId,
+            provisionedRunnerIds: duplicateProvisionedRunnerIds
+        }, 'multiple running job executions are bound to the same provisioned runner');
+    }
+    const result = await tx.execute(sql`
+    SELECT DISTINCT ON (${runningJobExecutions.provisionedRunnerId})
+      ${runningJobExecutions.workflowRunId} AS "workflowRunId",
+      ${runningJobExecutions.workflowRunAttemptId} AS "workflowRunAttemptId",
+      ${runningJobExecutions.jobId} AS "jobId",
+      ${runningJobExecutions.jobExecutionId} AS "jobExecutionId",
+      ${runningJobExecutions.provisionedRunnerId} AS "provisionedRunnerId",
+      ${runningJobExecutions.startedAt} AS "startedAt",
+      ${runningJobExecutions.lastHeartbeatAt} AS "lastHeartbeatAt",
+      ${runningJobExecutions.cancellationRequestedAt} AS "cancellationRequestedAt"
+    FROM ${runningJobExecutions}
+    WHERE
+      ${runningJobExecutions.workspaceId} = ${params.workspaceId}
+      AND ${runningJobExecutions.provisionerId} = ${params.provisionerId}
+      AND ${runningJobExecutions.provisionedRunnerId} IN (${sql.join(params.provisionedRunnerIds.map((provisionedRunnerId)=>sql`${provisionedRunnerId}`), sql`, `)})
+    ORDER BY ${runningJobExecutions.provisionedRunnerId}, ${runningJobExecutions.startedAt} DESC, ${runningJobExecutions.jobExecutionId} DESC
+  `);
+    return result.rows.map((row)=>({
+            workflowRunId: row.workflowRunId,
+            workflowRunAttemptId: row.workflowRunAttemptId,
+            jobId: row.jobId,
+            jobExecutionId: row.jobExecutionId,
+            provisionedRunnerId: row.provisionedRunnerId,
+            startedAt: toDate(row.startedAt),
+            lastHeartbeatAt: toDate(row.lastHeartbeatAt),
+            cancellationRequestedAt: row.cancellationRequestedAt ? toDate(row.cancellationRequestedAt) : null
+        }));
+}
+function toDate(value) {
+    return value instanceof Date ? value : new Date(value);
+}
+export async function isJobLeaseActive(params) {
+    const [row] = await db().select({
+        id: runningJobExecutions.id
+    }).from(runningJobExecutions).where(and(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId), eq(runningJobExecutions.runnerSessionId, params.runnerSessionId), params.jobId === undefined ? undefined : eq(runningJobExecutions.jobId, params.jobId))).limit(1);
+    return row !== undefined;
+}
+export async function recordHeartbeat(params) {
+    const result = await db().transaction(async (tx)=>{
+        const updated = await tx.update(runningJobExecutions).set({
+            firstHeartbeatAt: sql`COALESCE(${runningJobExecutions.firstHeartbeatAt}, now())`,
+            lastHeartbeatAt: sql`now()`
+        }).where(and(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId), eq(runningJobExecutions.runnerSessionId, params.runnerSessionId))).returning({
+            cancellationRequestedAt: runningJobExecutions.cancellationRequestedAt,
+            workflowRunId: runningJobExecutions.workflowRunId,
+            workflowRunAttemptId: runningJobExecutions.workflowRunAttemptId,
+            jobId: runningJobExecutions.jobId,
+            jobExecutionId: runningJobExecutions.jobExecutionId,
+            projectId: runningJobExecutions.projectId,
+            workspaceId: runningJobExecutions.workspaceId,
+            runnerSessionId: runningJobExecutions.runnerSessionId
+        });
+        const row = updated[0];
+        if (!row) throw new RunningJobExecutionNotFoundError(params.jobExecutionId);
+        const [previous] = await tx.select({
+            toolCapabilities: runnerSessions.toolCapabilities
+        }).from(runnerSessions).where(eq(runnerSessions.id, params.runnerSessionId)).limit(1).for('update');
+        const [session] = await tx.update(runnerSessions).set({
+            toolCapabilities: params.toolCapabilities ?? null,
+            toolCapabilitiesReportedAt: params.toolCapabilities ? sql`now()` : null,
+            updatedAt: sql`now()`
+        }).where(eq(runnerSessions.id, params.runnerSessionId)).returning({
+            toolCapabilities: runnerSessions.toolCapabilities
+        });
+        return {
+            row,
+            previousToolCapabilities: previous?.toolCapabilities ?? null,
+            currentToolCapabilities: session?.toolCapabilities ?? null
+        };
+    });
+    const row = result.row;
+    if (!row) throw new RunningJobExecutionNotFoundError(params.jobExecutionId);
+    return {
+        cancellationRequested: row.cancellationRequestedAt !== null,
+        previousToolCapabilities: result.previousToolCapabilities,
+        currentToolCapabilities: result.currentToolCapabilities,
+        runningJobExecution: {
+            workflowRunId: row.workflowRunId,
+            workflowRunAttemptId: row.workflowRunAttemptId,
+            jobId: row.jobId,
+            jobExecutionId: row.jobExecutionId,
+            projectId: row.projectId,
+            workspaceId: row.workspaceId,
+            runnerSessionId: row.runnerSessionId
+        }
+    };
+}
+export async function requestJobExecutionCancellation(params) {
+    await db().update(runningJobExecutions).set({
+        cancellationRequestedAt: sql`COALESCE(${runningJobExecutions.cancellationRequestedAt}, now())`
+    }).where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId));
+}
+export async function cancelRunnerJobs(params) {
+    if (params.jobIds.length === 0) return;
+    await db().transaction(async (tx)=>{
+        await tx.delete(pendingJobExecutions).where(inArray(pendingJobExecutions.jobId, params.jobIds));
+        await tx.update(runningJobExecutions).set({
+            cancellationRequestedAt: sql`COALESCE(${runningJobExecutions.cancellationRequestedAt}, now())`
+        }).where(inArray(runningJobExecutions.jobId, params.jobIds));
+    });
+}
+
+//# sourceMappingURL=job-executions.js.map

package/dist/db/job-executions.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/job-executions.ts"],"sourcesContent":["import {\n  RUNNER_JOB_CLAIMED,\n  RUNNER_JOB_LEASE_EXPIRED,\n  RUNNER_JOB_QUEUED,\n  type RunnersEventMap,\n  type RunnerToolCapabilitiesDto,\n} from '@shipfox/api-runners-dto';\nimport {logger} from '@shipfox/node-opentelemetry';\nimport {writeOutboxEvent, writeOutboxEvents} from '@shipfox/node-outbox';\nimport {canonicalizeLabels} from '@shipfox/runner-labels';\nimport {\n  and,\n  arrayContained,\n  asc,\n  count,\n  desc,\n  eq,\n  gt,\n  inArray,\n  isNotNull,\n  isNull,\n  lt,\n  lte,\n  or,\n  sql,\n} from 'drizzle-orm';\nimport {\n  EmptyRequiredLabelsError,\n  RunnerSessionExhaustedError,\n  RunningJobExecutionNotFoundError,\n} from '#core/errors.js';\nimport {jobExecutionEnqueuedCount, jobExecutionLeaseExpiredCount} from '#metrics/instance.js';\nimport type {Tx} from './db.js';\nimport {db} from './db.js';\nimport {runnersOutbox} from './schema/outbox.js';\nimport {pendingJobExecutions} from './schema/pending-job-executions.js';\nimport {runnerSessions} from './schema/runner-sessions.js';\nimport {runningJobExecutions} from './schema/running-job-executions.js';\n\nexport interface EnqueueJobExecutionParams {\n  workspaceId: string;\n  workflowRunId: string;\n  workflowRunAttemptId: string;\n  jobId: string;\n  jobExecutionId: string;\n  projectId: string;\n  requiredLabels: string[];\n}\n\n// Idempotent while the job execution is still pending: a duplicate jobExecutionId already in\n// `runners_pending_jobs` is a no-op. Temporal retries the enqueue activity\n// at-least-once, so a unique-violation throw on a retry-after-lost-result\n// would permanently fail a healthy job execution's workflow. The guard does not extend\n// past the claim: once the job execution has moved to `runners_running_jobs`, a retry\n// can reinsert an orphan pending row, which a later `claimPendingJobExecution` drops\n// via the running-execution unique constraint (onConflictDoNothing) instead of failing.\nexport async function enqueueJobExecution(params: EnqueueJobExecutionParams): Promise<void> {\n  const requiredLabels = [...canonicalizeLabels(params.requiredLabels)];\n  if (requiredLabels.length === 0) throw new EmptyRequiredLabelsError();\n\n  const enqueued = await db().transaction(async (tx) => {\n    const [inserted] = await tx\n      .insert(pendingJobExecutions)\n      .values({\n        workspaceId: params.workspaceId,\n        workflowRunId: params.workflowRunId,\n        workflowRunAttemptId: params.workflowRunAttemptId,\n        jobId: params.jobId,\n        jobExecutionId: params.jobExecutionId,\n        projectId: params.projectId,\n        requiredLabels,\n      })\n      .onConflictDoNothing({target: pendingJobExecutions.jobExecutionId})\n      .returning({createdAt: pendingJobExecutions.createdAt});\n\n    // A retry that hits the conflict inserts nothing: the first enqueue already\n    // emitted the queued event (durably, in the outbox), so re-emitting would\n    // only add a redundant row the subscriber coalesces away. Skip it.\n    if (!inserted) return false;\n\n    await writeOutboxEvent<RunnersEventMap>(tx, runnersOutbox, {\n      type: RUNNER_JOB_QUEUED,\n      payload: {\n        workflowRunId: params.workflowRunId,\n        workflowRunAttemptId: params.workflowRunAttemptId,\n        jobId: params.jobId,\n        jobExecutionId: params.jobExecutionId,\n        queuedAt: inserted.createdAt.toISOString(),\n      },\n    });\n    return true;\n  });\n\n  if (enqueued) jobExecutionEnqueuedCount.add(1);\n}\n\nexport interface ClaimedJobExecution {\n  workflowRunId: string;\n  workflowRunAttemptId: string;\n  jobId: string;\n  jobExecutionId: string;\n  projectId: string;\n}\n\nexport interface ActiveRunningJobExecution {\n  workflowRunId: string;\n  workflowRunAttemptId: string;\n  jobId: string;\n  jobExecutionId: string;\n  projectId: string;\n  runnerSessionId: string;\n  provisionerId: string | null;\n  provisionedRunnerId: string | null;\n  requiredLabels: string[];\n  runnerLabels: string[];\n  startedAt: Date;\n  lastHeartbeatAt: Date;\n}\n\nexport interface ProvisionedRunnerBoundJobExecution {\n  workflowRunId: string;\n  workflowRunAttemptId: string;\n  jobId: string;\n  jobExecutionId: string;\n  provisionedRunnerId: string;\n  startedAt: Date;\n  lastHeartbeatAt: Date;\n  cancellationRequestedAt: Date | null;\n}\n\nexport async function claimPendingJobExecution(params: {\n  workspaceId: string;\n  runnerSessionId: string;\n  sessionLabels: string[];\n  maxClaims: number | null;\n  runnerSessionLivenessThrottleSeconds: number;\n}): Promise<ClaimedJobExecution | null> {\n  await touchRunnerSessionLiveness({\n    workspaceId: params.workspaceId,\n    runnerSessionId: params.runnerSessionId,\n    throttleSeconds: params.runnerSessionLivenessThrottleSeconds,\n  });\n\n  if (params.sessionLabels.length === 0) return null;\n\n  return await db().transaction(async (tx) => {\n    let provisionerId: string | null = null;\n    let provisionedRunnerId: string | null = null;\n\n    if (params.maxClaims !== null) {\n      const [session] = await tx\n        .select({\n          maxClaims: runnerSessions.maxClaims,\n          claimsUsed: runnerSessions.claimsUsed,\n          provisionerId: runnerSessions.provisionerId,\n          provisionedRunnerId: runnerSessions.provisionedRunnerId,\n        })\n        .from(runnerSessions)\n        .where(eq(runnerSessions.id, params.runnerSessionId))\n        .limit(1)\n        .for('update');\n\n      if (!session || session.maxClaims === null || session.claimsUsed >= session.maxClaims) {\n        throw new RunnerSessionExhaustedError(params.runnerSessionId);\n      }\n\n      // Ephemeral sessions are the only capped sessions, and the DB check keeps\n      // their provisioned-runner link present as a pair.\n      provisionerId = session.provisionerId;\n      provisionedRunnerId = session.provisionedRunnerId;\n    }\n\n    // `id` is a uuidv7 (time-ordered), so it is a deterministic FIFO tiebreaker\n    // for rows sharing a created_at within a batch.\n    const [row] = await tx\n      .select()\n      .from(pendingJobExecutions)\n      .where(\n        and(\n          eq(pendingJobExecutions.workspaceId, params.workspaceId),\n          arrayContained(pendingJobExecutions.requiredLabels, params.sessionLabels),\n        ),\n      )\n      .orderBy(asc(pendingJobExecutions.createdAt), asc(pendingJobExecutions.id))\n      .limit(1)\n      .for('update', {skipLocked: true});\n\n    if (!row) return null;\n\n    await tx.delete(pendingJobExecutions).where(eq(pendingJobExecutions.id, row.id));\n\n    // An enqueue retry that lands after a prior claim can leave an orphan pending\n    // row whose jobExecutionId is already in `runners_running_jobs`. Insert-or-skip\n    // on the jobExecutionId unique constraint: when the job execution is already running\n    // the insert touches no row, so we commit the orphan's deletion and return\n    // null rather than let the unique violation roll the claim back into a poison\n    // loop. The runner just re-polls for a real job execution.\n    const inserted = await tx\n      .insert(runningJobExecutions)\n      .values({\n        workspaceId: row.workspaceId,\n        workflowRunId: row.workflowRunId,\n        workflowRunAttemptId: row.workflowRunAttemptId,\n        jobId: row.jobId,\n        jobExecutionId: row.jobExecutionId,\n        projectId: row.projectId,\n        runnerSessionId: params.runnerSessionId,\n        provisionerId,\n        provisionedRunnerId,\n        requiredLabels: row.requiredLabels,\n        runnerLabels: params.sessionLabels,\n      })\n      .onConflictDoNothing({target: runningJobExecutions.jobExecutionId})\n      .returning({claimedAt: runningJobExecutions.startedAt});\n\n    const claimed = inserted[0];\n    if (!claimed) return null;\n\n    if (params.maxClaims !== null) {\n      await tx\n        .update(runnerSessions)\n        .set({claimsUsed: sql`${runnerSessions.claimsUsed} + 1`, updatedAt: sql`now()`})\n        .where(eq(runnerSessions.id, params.runnerSessionId));\n    }\n\n    // The running-row insert is the runner claiming the job execution. Emit in the same tx; the\n    // payload carries the row's own claim instant so a consumer records the true time,\n    // not the outbox drain time.\n    await writeOutboxEvent<RunnersEventMap>(tx, runnersOutbox, {\n      type: RUNNER_JOB_CLAIMED,\n      payload: {\n        workflowRunId: row.workflowRunId,\n        workflowRunAttemptId: row.workflowRunAttemptId,\n        jobId: row.jobId,\n        jobExecutionId: row.jobExecutionId,\n        claimedAt: claimed.claimedAt.toISOString(),\n      },\n    });\n\n    return {\n      workflowRunId: row.workflowRunId,\n      workflowRunAttemptId: row.workflowRunAttemptId,\n      jobId: row.jobId,\n      jobExecutionId: row.jobExecutionId,\n      projectId: row.projectId,\n    };\n  });\n}\n\nasync function touchRunnerSessionLiveness(params: {\n  workspaceId: string;\n  runnerSessionId: string;\n  throttleSeconds: number;\n}): Promise<void> {\n  await db()\n    .update(runnerSessions)\n    .set({updatedAt: sql`now()`})\n    .where(\n      and(\n        eq(runnerSessions.id, params.runnerSessionId),\n        eq(runnerSessions.workspaceId, params.workspaceId),\n        sql`${runnerSessions.updatedAt} < now() - (${params.throttleSeconds} || ' seconds')::interval`,\n      ),\n    );\n}\n\n/**\n * Releases a job execution's lease when the orchestration workflow finalizes it: deletes the\n * running-job-execution row AND any lingering pending row for the same execution, in one tx.\n * Idempotent (0-row no-op), no token scope (the workflow is authoritative), and\n * emits no event — the workflow already owns the outcome. Sweeping the pending row\n * too closes the at-least-once window where an enqueue retry left an orphan that a\n * later claim would otherwise pick up for an already-finished job execution.\n */\nexport async function releaseJobExecution(params: {jobExecutionId: string}): Promise<void> {\n  await db().transaction(async (tx) => {\n    // Delete pending before running to match `claimPendingJobExecution`'s lock-acquisition\n    // order (it locks the pending row first, then the running row). A concurrent\n    // claim picking up an orphan pending row for this same job execution would otherwise\n    // deadlock against the reverse order here.\n    await tx\n      .delete(pendingJobExecutions)\n      .where(eq(pendingJobExecutions.jobExecutionId, params.jobExecutionId));\n    await tx\n      .delete(runningJobExecutions)\n      .where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId));\n  });\n}\n\n/**\n * Reaps stale leases (bounded by `limit`), emitting one\n * `runners.job.lease_expired` event per reaped job execution.\n *\n * The cutoff is re-checked in the DELETE, not just the locking subquery, so a\n * heartbeat landing mid-call spares the live row. Each reaped execution also sweeps its\n * pending row: a failed best-effort `releaseJobExecution` would otherwise leave an orphan\n * that a later claim re-runs as an already-finished job execution.\n *\n * Locks running-then-pending, the inverse of `claimPendingJobExecution` / `releaseJobExecution`.\n * That pre-existing asymmetry opens a narrow deadlock window against a concurrent\n * claim of the same orphan-pending job execution; Postgres breaks it and the cron retries.\n */\nexport async function expireStuckJobExecutions(params: {\n  thresholdSeconds: number;\n  noFirstHeartbeatGraceSeconds: number;\n  limit?: number;\n}): Promise<\n  Array<{\n    workflowRunId: string;\n    workflowRunAttemptId: string;\n    jobId: string;\n    jobExecutionId: string;\n  }>\n> {\n  const reaped = await db().transaction(async (tx) => {\n    const heartbeatCutoff = sql`now() - (${params.thresholdSeconds} || ' seconds')::interval`;\n    const firstHeartbeatCutoff = sql`now() - (${params.noFirstHeartbeatGraceSeconds} || ' seconds')::interval`;\n    const stalePredicate = or(\n      and(\n        isNull(runningJobExecutions.firstHeartbeatAt),\n        lte(runningJobExecutions.lastHeartbeatAt, runningJobExecutions.startedAt),\n        lt(runningJobExecutions.startedAt, firstHeartbeatCutoff),\n      ),\n      and(\n        or(\n          isNotNull(runningJobExecutions.firstHeartbeatAt),\n          gt(runningJobExecutions.lastHeartbeatAt, runningJobExecutions.startedAt),\n        ),\n        lt(runningJobExecutions.lastHeartbeatAt, heartbeatCutoff),\n      ),\n    );\n\n    const staleIds = tx\n      .select({id: runningJobExecutions.id})\n      .from(runningJobExecutions)\n      .where(stalePredicate)\n      .orderBy(\n        asc(\n          sql`CASE WHEN ${runningJobExecutions.firstHeartbeatAt} IS NULL AND ${runningJobExecutions.lastHeartbeatAt} <= ${runningJobExecutions.startedAt} THEN ${runningJobExecutions.startedAt} ELSE ${runningJobExecutions.lastHeartbeatAt} END`,\n        ),\n      )\n      .limit(params.limit ?? 100)\n      .for('update', {skipLocked: true});\n\n    const deleted = await tx\n      .delete(runningJobExecutions)\n      .where(and(inArray(runningJobExecutions.id, staleIds), stalePredicate))\n      .returning({\n        workflowRunId: runningJobExecutions.workflowRunId,\n        workflowRunAttemptId: runningJobExecutions.workflowRunAttemptId,\n        jobId: runningJobExecutions.jobId,\n        jobExecutionId: runningJobExecutions.jobExecutionId,\n      });\n\n    if (deleted.length === 0) return [];\n\n    await tx.delete(pendingJobExecutions).where(\n      inArray(\n        pendingJobExecutions.jobExecutionId,\n        deleted.map((row) => row.jobExecutionId),\n      ),\n    );\n\n    await writeOutboxEvents<RunnersEventMap>(\n      tx,\n      runnersOutbox,\n      deleted.map((row) => ({\n        type: RUNNER_JOB_LEASE_EXPIRED,\n        payload: {\n          workflowRunId: row.workflowRunId,\n          workflowRunAttemptId: row.workflowRunAttemptId,\n          jobId: row.jobId,\n          jobExecutionId: row.jobExecutionId,\n        },\n      })),\n    );\n\n    return deleted;\n  });\n\n  if (reaped.length > 0) jobExecutionLeaseExpiredCount.add(reaped.length);\n\n  return reaped;\n}\n\nexport async function getJobExecutionQueueDepth(): Promise<{\n  pendingJobExecutions: number;\n  runningJobExecutions: number;\n}> {\n  const [pending] = await db().select({value: count()}).from(pendingJobExecutions);\n  const [running] = await db().select({value: count()}).from(runningJobExecutions);\n  return {\n    pendingJobExecutions: pending?.value ?? 0,\n    runningJobExecutions: running?.value ?? 0,\n  };\n}\n\nexport async function listActiveRunningJobExecutions(params: {\n  workspaceId: string;\n  windowSeconds: number;\n  limit?: number;\n}): Promise<ActiveRunningJobExecution[]> {\n  return await db()\n    .select({\n      jobId: runningJobExecutions.jobId,\n      jobExecutionId: runningJobExecutions.jobExecutionId,\n      workflowRunId: runningJobExecutions.workflowRunId,\n      workflowRunAttemptId: runningJobExecutions.workflowRunAttemptId,\n      projectId: runningJobExecutions.projectId,\n      runnerSessionId: runningJobExecutions.runnerSessionId,\n      provisionerId: runningJobExecutions.provisionerId,\n      provisionedRunnerId: runningJobExecutions.provisionedRunnerId,\n      requiredLabels: runningJobExecutions.requiredLabels,\n      runnerLabels: runningJobExecutions.runnerLabels,\n      startedAt: runningJobExecutions.startedAt,\n      lastHeartbeatAt: runningJobExecutions.lastHeartbeatAt,\n    })\n    .from(runningJobExecutions)\n    .where(\n      and(\n        eq(runningJobExecutions.workspaceId, params.workspaceId),\n        sql`${runningJobExecutions.lastHeartbeatAt} > now() - (${params.windowSeconds} || ' seconds')::interval`,\n      ),\n    )\n    .orderBy(desc(runningJobExecutions.lastHeartbeatAt), desc(runningJobExecutions.id))\n    .limit(params.limit ?? 1000);\n}\n\nexport async function listRunningJobExecutionsByProvisionedRunnerTx(\n  tx: Tx,\n  params: {\n    workspaceId: string;\n    provisionerId: string;\n    provisionedRunnerIds: string[];\n  },\n): Promise<ProvisionedRunnerBoundJobExecution[]> {\n  if (params.provisionedRunnerIds.length === 0) return [];\n\n  const duplicateRows = await tx\n    .select({\n      provisionedRunnerId: runningJobExecutions.provisionedRunnerId,\n      count: count(),\n    })\n    .from(runningJobExecutions)\n    .where(\n      and(\n        eq(runningJobExecutions.workspaceId, params.workspaceId),\n        eq(runningJobExecutions.provisionerId, params.provisionerId),\n        inArray(runningJobExecutions.provisionedRunnerId, params.provisionedRunnerIds),\n      ),\n    )\n    .groupBy(runningJobExecutions.provisionedRunnerId)\n    .having(sql`count(*) > 1`);\n\n  const duplicateProvisionedRunnerIds = duplicateRows.flatMap((row) =>\n    row.provisionedRunnerId ? [row.provisionedRunnerId] : [],\n  );\n  if (duplicateProvisionedRunnerIds.length > 0) {\n    logger().warn(\n      {\n        workspaceId: params.workspaceId,\n        provisionerId: params.provisionerId,\n        provisionedRunnerIds: duplicateProvisionedRunnerIds,\n      },\n      'multiple running job executions are bound to the same provisioned runner',\n    );\n  }\n\n  const result = await tx.execute<{\n    workflowRunId: string;\n    workflowRunAttemptId: string;\n    jobId: string;\n    jobExecutionId: string;\n    provisionedRunnerId: string;\n    startedAt: Date | string;\n    lastHeartbeatAt: Date | string;\n    cancellationRequestedAt: Date | string | null;\n  }>(sql`\n    SELECT DISTINCT ON (${runningJobExecutions.provisionedRunnerId})\n      ${runningJobExecutions.workflowRunId} AS \"workflowRunId\",\n      ${runningJobExecutions.workflowRunAttemptId} AS \"workflowRunAttemptId\",\n      ${runningJobExecutions.jobId} AS \"jobId\",\n      ${runningJobExecutions.jobExecutionId} AS \"jobExecutionId\",\n      ${runningJobExecutions.provisionedRunnerId} AS \"provisionedRunnerId\",\n      ${runningJobExecutions.startedAt} AS \"startedAt\",\n      ${runningJobExecutions.lastHeartbeatAt} AS \"lastHeartbeatAt\",\n      ${runningJobExecutions.cancellationRequestedAt} AS \"cancellationRequestedAt\"\n    FROM ${runningJobExecutions}\n    WHERE\n      ${runningJobExecutions.workspaceId} = ${params.workspaceId}\n      AND ${runningJobExecutions.provisionerId} = ${params.provisionerId}\n      AND ${runningJobExecutions.provisionedRunnerId} IN (${sql.join(\n        params.provisionedRunnerIds.map((provisionedRunnerId) => sql`${provisionedRunnerId}`),\n        sql`, `,\n      )})\n    ORDER BY ${runningJobExecutions.provisionedRunnerId}, ${runningJobExecutions.startedAt} DESC, ${runningJobExecutions.jobExecutionId} DESC\n  `);\n\n  return result.rows.map((row) => ({\n    workflowRunId: row.workflowRunId,\n    workflowRunAttemptId: row.workflowRunAttemptId,\n    jobId: row.jobId,\n    jobExecutionId: row.jobExecutionId,\n    provisionedRunnerId: row.provisionedRunnerId,\n    startedAt: toDate(row.startedAt),\n    lastHeartbeatAt: toDate(row.lastHeartbeatAt),\n    cancellationRequestedAt: row.cancellationRequestedAt\n      ? toDate(row.cancellationRequestedAt)\n      : null,\n  }));\n}\n\nfunction toDate(value: Date | string): Date {\n  return value instanceof Date ? value : new Date(value);\n}\n\nexport async function isJobLeaseActive(params: {\n  jobId?: string;\n  jobExecutionId: string;\n  runnerSessionId: string;\n}): Promise<boolean> {\n  const [row] = await db()\n    .select({id: runningJobExecutions.id})\n    .from(runningJobExecutions)\n    .where(\n      and(\n        eq(runningJobExecutions.jobExecutionId, params.jobExecutionId),\n        eq(runningJobExecutions.runnerSessionId, params.runnerSessionId),\n        params.jobId === undefined ? undefined : eq(runningJobExecutions.jobId, params.jobId),\n      ),\n    )\n    .limit(1);\n\n  return row !== undefined;\n}\n\nexport async function recordHeartbeat(params: {\n  jobExecutionId: string;\n  runnerSessionId: string;\n  toolCapabilities?: RunnerToolCapabilitiesDto | null;\n}): Promise<{\n  cancellationRequested: boolean;\n  previousToolCapabilities: RunnerToolCapabilitiesDto | null;\n  currentToolCapabilities: RunnerToolCapabilitiesDto | null;\n  runningJobExecution: {\n    workflowRunId: string;\n    workflowRunAttemptId: string;\n    jobId: string;\n    jobExecutionId: string;\n    projectId: string;\n    workspaceId: string;\n    runnerSessionId: string;\n  };\n}> {\n  const result = await db().transaction(async (tx) => {\n    const updated = await tx\n      .update(runningJobExecutions)\n      .set({\n        firstHeartbeatAt: sql`COALESCE(${runningJobExecutions.firstHeartbeatAt}, now())`,\n        lastHeartbeatAt: sql`now()`,\n      })\n      .where(\n        and(\n          eq(runningJobExecutions.jobExecutionId, params.jobExecutionId),\n          eq(runningJobExecutions.runnerSessionId, params.runnerSessionId),\n        ),\n      )\n      .returning({\n        cancellationRequestedAt: runningJobExecutions.cancellationRequestedAt,\n        workflowRunId: runningJobExecutions.workflowRunId,\n        workflowRunAttemptId: runningJobExecutions.workflowRunAttemptId,\n        jobId: runningJobExecutions.jobId,\n        jobExecutionId: runningJobExecutions.jobExecutionId,\n        projectId: runningJobExecutions.projectId,\n        workspaceId: runningJobExecutions.workspaceId,\n        runnerSessionId: runningJobExecutions.runnerSessionId,\n      });\n\n    const row = updated[0];\n    if (!row) throw new RunningJobExecutionNotFoundError(params.jobExecutionId);\n\n    const [previous] = await tx\n      .select({toolCapabilities: runnerSessions.toolCapabilities})\n      .from(runnerSessions)\n      .where(eq(runnerSessions.id, params.runnerSessionId))\n      .limit(1)\n      .for('update');\n\n    const [session] = await tx\n      .update(runnerSessions)\n      .set({\n        toolCapabilities: params.toolCapabilities ?? null,\n        toolCapabilitiesReportedAt: params.toolCapabilities ? sql`now()` : null,\n        updatedAt: sql`now()`,\n      })\n      .where(eq(runnerSessions.id, params.runnerSessionId))\n      .returning({toolCapabilities: runnerSessions.toolCapabilities});\n\n    return {\n      row,\n      previousToolCapabilities: previous?.toolCapabilities ?? null,\n      currentToolCapabilities: session?.toolCapabilities ?? null,\n    };\n  });\n\n  const row = result.row;\n  if (!row) throw new RunningJobExecutionNotFoundError(params.jobExecutionId);\n  return {\n    cancellationRequested: row.cancellationRequestedAt !== null,\n    previousToolCapabilities: result.previousToolCapabilities,\n    currentToolCapabilities: result.currentToolCapabilities,\n    runningJobExecution: {\n      workflowRunId: row.workflowRunId,\n      workflowRunAttemptId: row.workflowRunAttemptId,\n      jobId: row.jobId,\n      jobExecutionId: row.jobExecutionId,\n      projectId: row.projectId,\n      workspaceId: row.workspaceId,\n      runnerSessionId: row.runnerSessionId,\n    },\n  };\n}\n\nexport async function requestJobExecutionCancellation(params: {\n  jobExecutionId: string;\n}): Promise<void> {\n  await db()\n    .update(runningJobExecutions)\n    .set({\n      cancellationRequestedAt: sql`COALESCE(${runningJobExecutions.cancellationRequestedAt}, now())`,\n    })\n    .where(eq(runningJobExecutions.jobExecutionId, params.jobExecutionId));\n}\n\nexport async function cancelRunnerJobs(params: {jobIds: string[]}): Promise<void> {\n  if (params.jobIds.length === 0) return;\n\n  await db().transaction(async (tx) => {\n    await tx.delete(pendingJobExecutions).where(inArray(pendingJobExecutions.jobId, params.jobIds));\n    await tx\n      .update(runningJobExecutions)\n      .set({\n        cancellationRequestedAt: sql`COALESCE(${runningJobExecutions.cancellationRequestedAt}, now())`,\n      })\n      .where(inArray(runningJobExecutions.jobId, params.jobIds));\n  });\n}\n"],"names":["RUNNER_JOB_CLAIMED","RUNNER_JOB_LEASE_EXPIRED","RUNNER_JOB_QUEUED","logger","writeOutboxEvent","writeOutboxEvents","canonicalizeLabels","and","arrayContained","asc","count","desc","eq","gt","inArray","isNotNull","isNull","lt","lte","or","sql","EmptyRequiredLabelsError","RunnerSessionExhaustedError","RunningJobExecutionNotFoundError","jobExecutionEnqueuedCount","jobExecutionLeaseExpiredCount","db","runnersOutbox","pendingJobExecutions","runnerSessions","runningJobExecutions","enqueueJobExecution","params","requiredLabels","length","enqueued","transaction","tx","inserted","insert","values","workspaceId","workflowRunId","workflowRunAttemptId","jobId","jobExecutionId","projectId","onConflictDoNothing","target","returning","createdAt","type","payload","queuedAt","toISOString","add","claimPendingJobExecution","touchRunnerSessionLiveness","runnerSessionId","throttleSeconds","runnerSessionLivenessThrottleSeconds","sessionLabels","provisionerId","provisionedRunnerId","maxClaims","session","select","claimsUsed","from","where","id","limit","for","row","orderBy","skipLocked","delete","runnerLabels","claimedAt","startedAt","claimed","update","set","updatedAt","releaseJobExecution","expireStuckJobExecutions","reaped","heartbeatCutoff","thresholdSeconds","firstHeartbeatCutoff","noFirstHeartbeatGraceSeconds","stalePredicate","firstHeartbeatAt","lastHeartbeatAt","staleIds","deleted","map","getJobExecutionQueueDepth","pending","value","running","listActiveRunningJobExecutions","windowSeconds","listRunningJobExecutionsByProvisionedRunnerTx","provisionedRunnerIds","duplicateRows","groupBy","having","duplicateProvisionedRunnerIds","flatMap","warn","result","execute","cancellationRequestedAt","join","rows","toDate","Date","isJobLeaseActive","undefined","recordHeartbeat","updated","previous","toolCapabilities","toolCapabilitiesReportedAt","previousToolCapabilities","currentToolCapabilities","cancellationRequested","runningJobExecution","requestJobExecutionCancellation","cancelRunnerJobs","jobIds"],"mappings":"AAAA,SACEA,kBAAkB,EAClBC,wBAAwB,EACxBC,iBAAiB,QAGZ,2BAA2B;AAClC,SAAQC,MAAM,QAAO,8BAA8B;AACnD,SAAQC,gBAAgB,EAAEC,iBAAiB,QAAO,uBAAuB;AACzE,SAAQC,kBAAkB,QAAO,yBAAyB;AAC1D,SACEC,GAAG,EACHC,cAAc,EACdC,GAAG,EACHC,KAAK,EACLC,IAAI,EACJC,EAAE,EACFC,EAAE,EACFC,OAAO,EACPC,SAAS,EACTC,MAAM,EACNC,EAAE,EACFC,GAAG,EACHC,EAAE,EACFC,GAAG,QACE,cAAc;AACrB,SACEC,wBAAwB,EACxBC,2BAA2B,EAC3BC,gCAAgC,QAC3B,kBAAkB;AACzB,SAAQC,yBAAyB,EAAEC,6BAA6B,QAAO,uBAAuB;AAE9F,SAAQC,EAAE,QAAO,UAAU;AAC3B,SAAQC,aAAa,QAAO,qBAAqB;AACjD,SAAQC,oBAAoB,QAAO,qCAAqC;AACxE,SAAQC,cAAc,QAAO,8BAA8B;AAC3D,SAAQC,oBAAoB,QAAO,qCAAqC;AAYxE,6FAA6F;AAC7F,2EAA2E;AAC3E,0EAA0E;AAC1E,uFAAuF;AACvF,sFAAsF;AACtF,qFAAqF;AACrF,wFAAwF;AACxF,OAAO,eAAeC,oBAAoBC,MAAiC;IACzE,MAAMC,iBAAiB;WAAI3B,mBAAmB0B,OAAOC,cAAc;KAAE;IACrE,IAAIA,eAAeC,MAAM,KAAK,GAAG,MAAM,IAAIb;IAE3C,MAAMc,WAAW,MAAMT,KAAKU,WAAW,CAAC,OAAOC;QAC7C,MAAM,CAACC,SAAS,GAAG,MAAMD,GACtBE,MAAM,CAACX,sBACPY,MAAM,CAAC;YACNC,aAAaT,OAAOS,WAAW;YAC/BC,eAAeV,OAAOU,aAAa;YACnCC,sBAAsBX,OAAOW,oBAAoB;YACjDC,OAAOZ,OAAOY,KAAK;YACnBC,gBAAgBb,OAAOa,cAAc;YACrCC,WAAWd,OAAOc,SAAS;YAC3Bb;QACF,GACCc,mBAAmB,CAAC;YAACC,QAAQpB,qBAAqBiB,cAAc;QAAA,GAChEI,SAAS,CAAC;YAACC,WAAWtB,qBAAqBsB,SAAS;QAAA;QAEvD,4EAA4E;QAC5E,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAACZ,UAAU,OAAO;QAEtB,MAAMlC,iBAAkCiC,IAAIV,eAAe;YACzDwB,MAAMjD;YACNkD,SAAS;gBACPV,eAAeV,OAAOU,aAAa;gBACnCC,sBAAsBX,OAAOW,oBAAoB;gBACjDC,OAAOZ,OAAOY,KAAK;gBACnBC,gBAAgBb,OAAOa,cAAc;gBACrCQ,UAAUf,SAASY,SAAS,CAACI,WAAW;YAC1C;QACF;QACA,OAAO;IACT;IAEA,IAAInB,UAAUX,0BAA0B+B,GAAG,CAAC;AAC9C;AAoCA,OAAO,eAAeC,yBAAyBxB,MAM9C;IACC,MAAMyB,2BAA2B;QAC/BhB,aAAaT,OAAOS,WAAW;QAC/BiB,iBAAiB1B,OAAO0B,eAAe;QACvCC,iBAAiB3B,OAAO4B,oCAAoC;IAC9D;IAEA,IAAI5B,OAAO6B,aAAa,CAAC3B,MAAM,KAAK,GAAG,OAAO;IAE9C,OAAO,MAAMR,KAAKU,WAAW,CAAC,OAAOC;QACnC,IAAIyB,gBAA+B;QACnC,IAAIC,sBAAqC;QAEzC,IAAI/B,OAAOgC,SAAS,KAAK,MAAM;YAC7B,MAAM,CAACC,QAAQ,GAAG,MAAM5B,GACrB6B,MAAM,CAAC;gBACNF,WAAWnC,eAAemC,SAAS;gBACnCG,YAAYtC,eAAesC,UAAU;gBACrCL,eAAejC,eAAeiC,aAAa;gBAC3CC,qBAAqBlC,eAAekC,mBAAmB;YACzD,GACCK,IAAI,CAACvC,gBACLwC,KAAK,CAACzD,GAAGiB,eAAeyC,EAAE,EAAEtC,OAAO0B,eAAe,GAClDa,KAAK,CAAC,GACNC,GAAG,CAAC;YAEP,IAAI,CAACP,WAAWA,QAAQD,SAAS,KAAK,QAAQC,QAAQE,UAAU,IAAIF,QAAQD,SAAS,EAAE;gBACrF,MAAM,IAAI1C,4BAA4BU,OAAO0B,eAAe;YAC9D;YAEA,0EAA0E;YAC1E,mDAAmD;YACnDI,gBAAgBG,QAAQH,aAAa;YACrCC,sBAAsBE,QAAQF,mBAAmB;QACnD;QAEA,4EAA4E;QAC5E,gDAAgD;QAChD,MAAM,CAACU,IAAI,GAAG,MAAMpC,GACjB6B,MAAM,GACNE,IAAI,CAACxC,sBACLyC,KAAK,CACJ9D,IACEK,GAAGgB,qBAAqBa,WAAW,EAAET,OAAOS,WAAW,GACvDjC,eAAeoB,qBAAqBK,cAAc,EAAED,OAAO6B,aAAa,IAG3Ea,OAAO,CAACjE,IAAImB,qBAAqBsB,SAAS,GAAGzC,IAAImB,qBAAqB0C,EAAE,GACxEC,KAAK,CAAC,GACNC,GAAG,CAAC,UAAU;YAACG,YAAY;QAAI;QAElC,IAAI,CAACF,KAAK,OAAO;QAEjB,MAAMpC,GAAGuC,MAAM,CAAChD,sBAAsByC,KAAK,CAACzD,GAAGgB,qBAAqB0C,EAAE,EAAEG,IAAIH,EAAE;QAE9E,8EAA8E;QAC9E,gFAAgF;QAChF,qFAAqF;QACrF,2EAA2E;QAC3E,8EAA8E;QAC9E,2DAA2D;QAC3D,MAAMhC,WAAW,MAAMD,GACpBE,MAAM,CAACT,sBACPU,MAAM,CAAC;YACNC,aAAagC,IAAIhC,WAAW;YAC5BC,eAAe+B,IAAI/B,aAAa;YAChCC,sBAAsB8B,IAAI9B,oBAAoB;YAC9CC,OAAO6B,IAAI7B,KAAK;YAChBC,gBAAgB4B,IAAI5B,cAAc;YAClCC,WAAW2B,IAAI3B,SAAS;YACxBY,iBAAiB1B,OAAO0B,eAAe;YACvCI;YACAC;YACA9B,gBAAgBwC,IAAIxC,cAAc;YAClC4C,cAAc7C,OAAO6B,aAAa;QACpC,GACCd,mBAAmB,CAAC;YAACC,QAAQlB,qBAAqBe,cAAc;QAAA,GAChEI,SAAS,CAAC;YAAC6B,WAAWhD,qBAAqBiD,SAAS;QAAA;QAEvD,MAAMC,UAAU1C,QAAQ,CAAC,EAAE;QAC3B,IAAI,CAAC0C,SAAS,OAAO;QAErB,IAAIhD,OAAOgC,SAAS,KAAK,MAAM;YAC7B,MAAM3B,GACH4C,MAAM,CAACpD,gBACPqD,GAAG,CAAC;gBAACf,YAAY/C,GAAG,CAAC,EAAES,eAAesC,UAAU,CAAC,IAAI,CAAC;gBAAEgB,WAAW/D,GAAG,CAAC,KAAK,CAAC;YAAA,GAC7EiD,KAAK,CAACzD,GAAGiB,eAAeyC,EAAE,EAAEtC,OAAO0B,eAAe;QACvD;QAEA,4FAA4F;QAC5F,mFAAmF;QACnF,6BAA6B;QAC7B,MAAMtD,iBAAkCiC,IAAIV,eAAe;YACzDwB,MAAMnD;YACNoD,SAAS;gBACPV,eAAe+B,IAAI/B,aAAa;gBAChCC,sBAAsB8B,IAAI9B,oBAAoB;gBAC9CC,OAAO6B,IAAI7B,KAAK;gBAChBC,gBAAgB4B,IAAI5B,cAAc;gBAClCiC,WAAWE,QAAQF,SAAS,CAACxB,WAAW;YAC1C;QACF;QAEA,OAAO;YACLZ,eAAe+B,IAAI/B,aAAa;YAChCC,sBAAsB8B,IAAI9B,oBAAoB;YAC9CC,OAAO6B,IAAI7B,KAAK;YAChBC,gBAAgB4B,IAAI5B,cAAc;YAClCC,WAAW2B,IAAI3B,SAAS;QAC1B;IACF;AACF;AAEA,eAAeW,2BAA2BzB,MAIzC;IACC,MAAMN,KACHuD,MAAM,CAACpD,gBACPqD,GAAG,CAAC;QAACC,WAAW/D,GAAG,CAAC,KAAK,CAAC;IAAA,GAC1BiD,KAAK,CACJ9D,IACEK,GAAGiB,eAAeyC,EAAE,EAAEtC,OAAO0B,eAAe,GAC5C9C,GAAGiB,eAAeY,WAAW,EAAET,OAAOS,WAAW,GACjDrB,GAAG,CAAC,EAAES,eAAesD,SAAS,CAAC,YAAY,EAAEnD,OAAO2B,eAAe,CAAC,yBAAyB,CAAC;AAGtG;AAEA;;;;;;;CAOC,GACD,OAAO,eAAeyB,oBAAoBpD,MAAgC;IACxE,MAAMN,KAAKU,WAAW,CAAC,OAAOC;QAC5B,uFAAuF;QACvF,6EAA6E;QAC7E,qFAAqF;QACrF,2CAA2C;QAC3C,MAAMA,GACHuC,MAAM,CAAChD,sBACPyC,KAAK,CAACzD,GAAGgB,qBAAqBiB,cAAc,EAAEb,OAAOa,cAAc;QACtE,MAAMR,GACHuC,MAAM,CAAC9C,sBACPuC,KAAK,CAACzD,GAAGkB,qBAAqBe,cAAc,EAAEb,OAAOa,cAAc;IACxE;AACF;AAEA;;;;;;;;;;;;CAYC,GACD,OAAO,eAAewC,yBAAyBrD,MAI9C;IAQC,MAAMsD,SAAS,MAAM5D,KAAKU,WAAW,CAAC,OAAOC;QAC3C,MAAMkD,kBAAkBnE,GAAG,CAAC,SAAS,EAAEY,OAAOwD,gBAAgB,CAAC,yBAAyB,CAAC;QACzF,MAAMC,uBAAuBrE,GAAG,CAAC,SAAS,EAAEY,OAAO0D,4BAA4B,CAAC,yBAAyB,CAAC;QAC1G,MAAMC,iBAAiBxE,GACrBZ,IACES,OAAOc,qBAAqB8D,gBAAgB,GAC5C1E,IAAIY,qBAAqB+D,eAAe,EAAE/D,qBAAqBiD,SAAS,GACxE9D,GAAGa,qBAAqBiD,SAAS,EAAEU,wBAErClF,IACEY,GACEJ,UAAUe,qBAAqB8D,gBAAgB,GAC/C/E,GAAGiB,qBAAqB+D,eAAe,EAAE/D,qBAAqBiD,SAAS,IAEzE9D,GAAGa,qBAAqB+D,eAAe,EAAEN;QAI7C,MAAMO,WAAWzD,GACd6B,MAAM,CAAC;YAACI,IAAIxC,qBAAqBwC,EAAE;QAAA,GACnCF,IAAI,CAACtC,sBACLuC,KAAK,CAACsB,gBACNjB,OAAO,CACNjE,IACEW,GAAG,CAAC,UAAU,EAAEU,qBAAqB8D,gBAAgB,CAAC,aAAa,EAAE9D,qBAAqB+D,eAAe,CAAC,IAAI,EAAE/D,qBAAqBiD,SAAS,CAAC,MAAM,EAAEjD,qBAAqBiD,SAAS,CAAC,MAAM,EAAEjD,qBAAqB+D,eAAe,CAAC,IAAI,CAAC,GAG3OtB,KAAK,CAACvC,OAAOuC,KAAK,IAAI,KACtBC,GAAG,CAAC,UAAU;YAACG,YAAY;QAAI;QAElC,MAAMoB,UAAU,MAAM1D,GACnBuC,MAAM,CAAC9C,sBACPuC,KAAK,CAAC9D,IAAIO,QAAQgB,qBAAqBwC,EAAE,EAAEwB,WAAWH,iBACtD1C,SAAS,CAAC;YACTP,eAAeZ,qBAAqBY,aAAa;YACjDC,sBAAsBb,qBAAqBa,oBAAoB;YAC/DC,OAAOd,qBAAqBc,KAAK;YACjCC,gBAAgBf,qBAAqBe,cAAc;QACrD;QAEF,IAAIkD,QAAQ7D,MAAM,KAAK,GAAG,OAAO,EAAE;QAEnC,MAAMG,GAAGuC,MAAM,CAAChD,sBAAsByC,KAAK,CACzCvD,QACEc,qBAAqBiB,cAAc,EACnCkD,QAAQC,GAAG,CAAC,CAACvB,MAAQA,IAAI5B,cAAc;QAI3C,MAAMxC,kBACJgC,IACAV,eACAoE,QAAQC,GAAG,CAAC,CAACvB,MAAS,CAAA;gBACpBtB,MAAMlD;gBACNmD,SAAS;oBACPV,eAAe+B,IAAI/B,aAAa;oBAChCC,sBAAsB8B,IAAI9B,oBAAoB;oBAC9CC,OAAO6B,IAAI7B,KAAK;oBAChBC,gBAAgB4B,IAAI5B,cAAc;gBACpC;YACF,CAAA;QAGF,OAAOkD;IACT;IAEA,IAAIT,OAAOpD,MAAM,GAAG,GAAGT,8BAA8B8B,GAAG,CAAC+B,OAAOpD,MAAM;IAEtE,OAAOoD;AACT;AAEA,OAAO,eAAeW;IAIpB,MAAM,CAACC,QAAQ,GAAG,MAAMxE,KAAKwC,MAAM,CAAC;QAACiC,OAAOzF;IAAO,GAAG0D,IAAI,CAACxC;IAC3D,MAAM,CAACwE,QAAQ,GAAG,MAAM1E,KAAKwC,MAAM,CAAC;QAACiC,OAAOzF;IAAO,GAAG0D,IAAI,CAACtC;IAC3D,OAAO;QACLF,sBAAsBsE,SAASC,SAAS;QACxCrE,sBAAsBsE,SAASD,SAAS;IAC1C;AACF;AAEA,OAAO,eAAeE,+BAA+BrE,MAIpD;IACC,OAAO,MAAMN,KACVwC,MAAM,CAAC;QACNtB,OAAOd,qBAAqBc,KAAK;QACjCC,gBAAgBf,qBAAqBe,cAAc;QACnDH,eAAeZ,qBAAqBY,aAAa;QACjDC,sBAAsBb,qBAAqBa,oBAAoB;QAC/DG,WAAWhB,qBAAqBgB,SAAS;QACzCY,iBAAiB5B,qBAAqB4B,eAAe;QACrDI,eAAehC,qBAAqBgC,aAAa;QACjDC,qBAAqBjC,qBAAqBiC,mBAAmB;QAC7D9B,gBAAgBH,qBAAqBG,cAAc;QACnD4C,cAAc/C,qBAAqB+C,YAAY;QAC/CE,WAAWjD,qBAAqBiD,SAAS;QACzCc,iBAAiB/D,qBAAqB+D,eAAe;IACvD,GACCzB,IAAI,CAACtC,sBACLuC,KAAK,CACJ9D,IACEK,GAAGkB,qBAAqBW,WAAW,EAAET,OAAOS,WAAW,GACvDrB,GAAG,CAAC,EAAEU,qBAAqB+D,eAAe,CAAC,YAAY,EAAE7D,OAAOsE,aAAa,CAAC,yBAAyB,CAAC,GAG3G5B,OAAO,CAAC/D,KAAKmB,qBAAqB+D,eAAe,GAAGlF,KAAKmB,qBAAqBwC,EAAE,GAChFC,KAAK,CAACvC,OAAOuC,KAAK,IAAI;AAC3B;AAEA,OAAO,eAAegC,8CACpBlE,EAAM,EACNL,MAIC;IAED,IAAIA,OAAOwE,oBAAoB,CAACtE,MAAM,KAAK,GAAG,OAAO,EAAE;IAEvD,MAAMuE,gBAAgB,MAAMpE,GACzB6B,MAAM,CAAC;QACNH,qBAAqBjC,qBAAqBiC,mBAAmB;QAC7DrD,OAAOA;IACT,GACC0D,IAAI,CAACtC,sBACLuC,KAAK,CACJ9D,IACEK,GAAGkB,qBAAqBW,WAAW,EAAET,OAAOS,WAAW,GACvD7B,GAAGkB,qBAAqBgC,aAAa,EAAE9B,OAAO8B,aAAa,GAC3DhD,QAAQgB,qBAAqBiC,mBAAmB,EAAE/B,OAAOwE,oBAAoB,IAGhFE,OAAO,CAAC5E,qBAAqBiC,mBAAmB,EAChD4C,MAAM,CAACvF,GAAG,CAAC,YAAY,CAAC;IAE3B,MAAMwF,gCAAgCH,cAAcI,OAAO,CAAC,CAACpC,MAC3DA,IAAIV,mBAAmB,GAAG;YAACU,IAAIV,mBAAmB;SAAC,GAAG,EAAE;IAE1D,IAAI6C,8BAA8B1E,MAAM,GAAG,GAAG;QAC5C/B,SAAS2G,IAAI,CACX;YACErE,aAAaT,OAAOS,WAAW;YAC/BqB,eAAe9B,OAAO8B,aAAa;YACnC0C,sBAAsBI;QACxB,GACA;IAEJ;IAEA,MAAMG,SAAS,MAAM1E,GAAG2E,OAAO,CAS5B5F,GAAG,CAAC;wBACe,EAAEU,qBAAqBiC,mBAAmB,CAAC;MAC7D,EAAEjC,qBAAqBY,aAAa,CAAC;MACrC,EAAEZ,qBAAqBa,oBAAoB,CAAC;MAC5C,EAAEb,qBAAqBc,KAAK,CAAC;MAC7B,EAAEd,qBAAqBe,cAAc,CAAC;MACtC,EAAEf,qBAAqBiC,mBAAmB,CAAC;MAC3C,EAAEjC,qBAAqBiD,SAAS,CAAC;MACjC,EAAEjD,qBAAqB+D,eAAe,CAAC;MACvC,EAAE/D,qBAAqBmF,uBAAuB,CAAC;SAC5C,EAAEnF,qBAAqB;;MAE1B,EAAEA,qBAAqBW,WAAW,CAAC,GAAG,EAAET,OAAOS,WAAW,CAAC;UACvD,EAAEX,qBAAqBgC,aAAa,CAAC,GAAG,EAAE9B,OAAO8B,aAAa,CAAC;UAC/D,EAAEhC,qBAAqBiC,mBAAmB,CAAC,KAAK,EAAE3C,IAAI8F,IAAI,CAC5DlF,OAAOwE,oBAAoB,CAACR,GAAG,CAAC,CAACjC,sBAAwB3C,GAAG,CAAC,EAAE2C,oBAAoB,CAAC,GACpF3C,GAAG,CAAC,EAAE,CAAC,EACP;aACK,EAAEU,qBAAqBiC,mBAAmB,CAAC,EAAE,EAAEjC,qBAAqBiD,SAAS,CAAC,OAAO,EAAEjD,qBAAqBe,cAAc,CAAC;EACtI,CAAC;IAED,OAAOkE,OAAOI,IAAI,CAACnB,GAAG,CAAC,CAACvB,MAAS,CAAA;YAC/B/B,eAAe+B,IAAI/B,aAAa;YAChCC,sBAAsB8B,IAAI9B,oBAAoB;YAC9CC,OAAO6B,IAAI7B,KAAK;YAChBC,gBAAgB4B,IAAI5B,cAAc;YAClCkB,qBAAqBU,IAAIV,mBAAmB;YAC5CgB,WAAWqC,OAAO3C,IAAIM,SAAS;YAC/Bc,iBAAiBuB,OAAO3C,IAAIoB,eAAe;YAC3CoB,yBAAyBxC,IAAIwC,uBAAuB,GAChDG,OAAO3C,IAAIwC,uBAAuB,IAClC;QACN,CAAA;AACF;AAEA,SAASG,OAAOjB,KAAoB;IAClC,OAAOA,iBAAiBkB,OAAOlB,QAAQ,IAAIkB,KAAKlB;AAClD;AAEA,OAAO,eAAemB,iBAAiBtF,MAItC;IACC,MAAM,CAACyC,IAAI,GAAG,MAAM/C,KACjBwC,MAAM,CAAC;QAACI,IAAIxC,qBAAqBwC,EAAE;IAAA,GACnCF,IAAI,CAACtC,sBACLuC,KAAK,CACJ9D,IACEK,GAAGkB,qBAAqBe,cAAc,EAAEb,OAAOa,cAAc,GAC7DjC,GAAGkB,qBAAqB4B,eAAe,EAAE1B,OAAO0B,eAAe,GAC/D1B,OAAOY,KAAK,KAAK2E,YAAYA,YAAY3G,GAAGkB,qBAAqBc,KAAK,EAAEZ,OAAOY,KAAK,IAGvF2B,KAAK,CAAC;IAET,OAAOE,QAAQ8C;AACjB;AAEA,OAAO,eAAeC,gBAAgBxF,MAIrC;IAcC,MAAM+E,SAAS,MAAMrF,KAAKU,WAAW,CAAC,OAAOC;QAC3C,MAAMoF,UAAU,MAAMpF,GACnB4C,MAAM,CAACnD,sBACPoD,GAAG,CAAC;YACHU,kBAAkBxE,GAAG,CAAC,SAAS,EAAEU,qBAAqB8D,gBAAgB,CAAC,QAAQ,CAAC;YAChFC,iBAAiBzE,GAAG,CAAC,KAAK,CAAC;QAC7B,GACCiD,KAAK,CACJ9D,IACEK,GAAGkB,qBAAqBe,cAAc,EAAEb,OAAOa,cAAc,GAC7DjC,GAAGkB,qBAAqB4B,eAAe,EAAE1B,OAAO0B,eAAe,IAGlET,SAAS,CAAC;YACTgE,yBAAyBnF,qBAAqBmF,uBAAuB;YACrEvE,eAAeZ,qBAAqBY,aAAa;YACjDC,sBAAsBb,qBAAqBa,oBAAoB;YAC/DC,OAAOd,qBAAqBc,KAAK;YACjCC,gBAAgBf,qBAAqBe,cAAc;YACnDC,WAAWhB,qBAAqBgB,SAAS;YACzCL,aAAaX,qBAAqBW,WAAW;YAC7CiB,iBAAiB5B,qBAAqB4B,eAAe;QACvD;QAEF,MAAMe,MAAMgD,OAAO,CAAC,EAAE;QACtB,IAAI,CAAChD,KAAK,MAAM,IAAIlD,iCAAiCS,OAAOa,cAAc;QAE1E,MAAM,CAAC6E,SAAS,GAAG,MAAMrF,GACtB6B,MAAM,CAAC;YAACyD,kBAAkB9F,eAAe8F,gBAAgB;QAAA,GACzDvD,IAAI,CAACvC,gBACLwC,KAAK,CAACzD,GAAGiB,eAAeyC,EAAE,EAAEtC,OAAO0B,eAAe,GAClDa,KAAK,CAAC,GACNC,GAAG,CAAC;QAEP,MAAM,CAACP,QAAQ,GAAG,MAAM5B,GACrB4C,MAAM,CAACpD,gBACPqD,GAAG,CAAC;YACHyC,kBAAkB3F,OAAO2F,gBAAgB,IAAI;YAC7CC,4BAA4B5F,OAAO2F,gBAAgB,GAAGvG,GAAG,CAAC,KAAK,CAAC,GAAG;YACnE+D,WAAW/D,GAAG,CAAC,KAAK,CAAC;QACvB,GACCiD,KAAK,CAACzD,GAAGiB,eAAeyC,EAAE,EAAEtC,OAAO0B,eAAe,GAClDT,SAAS,CAAC;YAAC0E,kBAAkB9F,eAAe8F,gBAAgB;QAAA;QAE/D,OAAO;YACLlD;YACAoD,0BAA0BH,UAAUC,oBAAoB;YACxDG,yBAAyB7D,SAAS0D,oBAAoB;QACxD;IACF;IAEA,MAAMlD,MAAMsC,OAAOtC,GAAG;IACtB,IAAI,CAACA,KAAK,MAAM,IAAIlD,iCAAiCS,OAAOa,cAAc;IAC1E,OAAO;QACLkF,uBAAuBtD,IAAIwC,uBAAuB,KAAK;QACvDY,0BAA0Bd,OAAOc,wBAAwB;QACzDC,yBAAyBf,OAAOe,uBAAuB;QACvDE,qBAAqB;YACnBtF,eAAe+B,IAAI/B,aAAa;YAChCC,sBAAsB8B,IAAI9B,oBAAoB;YAC9CC,OAAO6B,IAAI7B,KAAK;YAChBC,gBAAgB4B,IAAI5B,cAAc;YAClCC,WAAW2B,IAAI3B,SAAS;YACxBL,aAAagC,IAAIhC,WAAW;YAC5BiB,iBAAiBe,IAAIf,eAAe;QACtC;IACF;AACF;AAEA,OAAO,eAAeuE,gCAAgCjG,MAErD;IACC,MAAMN,KACHuD,MAAM,CAACnD,sBACPoD,GAAG,CAAC;QACH+B,yBAAyB7F,GAAG,CAAC,SAAS,EAAEU,qBAAqBmF,uBAAuB,CAAC,QAAQ,CAAC;IAChG,GACC5C,KAAK,CAACzD,GAAGkB,qBAAqBe,cAAc,EAAEb,OAAOa,cAAc;AACxE;AAEA,OAAO,eAAeqF,iBAAiBlG,MAA0B;IAC/D,IAAIA,OAAOmG,MAAM,CAACjG,MAAM,KAAK,GAAG;IAEhC,MAAMR,KAAKU,WAAW,CAAC,OAAOC;QAC5B,MAAMA,GAAGuC,MAAM,CAAChD,sBAAsByC,KAAK,CAACvD,QAAQc,qBAAqBgB,KAAK,EAAEZ,OAAOmG,MAAM;QAC7F,MAAM9F,GACH4C,MAAM,CAACnD,sBACPoD,GAAG,CAAC;YACH+B,yBAAyB7F,GAAG,CAAC,SAAS,EAAEU,qBAAqBmF,uBAAuB,CAAC,QAAQ,CAAC;QAChG,GACC5C,KAAK,CAACvD,QAAQgB,qBAAqBc,KAAK,EAAEZ,OAAOmG,MAAM;IAC5D;AACF"}

package/dist/db/manual-registration-tokens.d.ts

@@ -0,0 +1,16 @@
+import type { ManualRegistrationToken } from '#core/entities/manual-registration-token.js';
+export interface CreateManualRegistrationTokenParams {
+    workspaceId: string;
+    hashedToken: string;
+    prefix: string;
+    name?: string | undefined;
+    expiresAt?: Date | undefined;
+}
+export declare function createManualRegistrationToken(params: CreateManualRegistrationTokenParams): Promise<ManualRegistrationToken>;
+export declare function resolveManualRegistrationTokenByHash(hashedToken: string): Promise<ManualRegistrationToken | undefined>;
+export declare function listUsableManualRegistrationTokensByWorkspaceId(workspaceId: string): Promise<ManualRegistrationToken[]>;
+export declare function revokeManualRegistrationToken(params: {
+    tokenId: string;
+    workspaceId: string;
+}): Promise<ManualRegistrationToken | undefined>;
+//# sourceMappingURL=manual-registration-tokens.d.ts.map

package/dist/db/manual-registration-tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manual-registration-tokens.d.ts","sourceRoot":"","sources":["../../src/db/manual-registration-tokens.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,6CAA6C,CAAC;AAOzF,MAAM,WAAW,mCAAmC;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,SAAS,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;CAC9B;AAED,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,mCAAmC,GAC1C,OAAO,CAAC,uBAAuB,CAAC,CAelC;AAED,wBAAsB,oCAAoC,CACxD,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAU9C;AAED,wBAAsB,+CAA+C,CACnE,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAepC;AAED,wBAAsB,6BAA6B,CAAC,MAAM,EAAE;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC,CAe/C"}

package/dist/db/manual-registration-tokens.js

@@ -0,0 +1,37 @@
+import { and, desc, eq, gt, isNull, or } from 'drizzle-orm';
+import { db } from './db.js';
+import { manualRegistrationTokens, toManualRegistrationToken } from './schema/manual-registration-tokens.js';
+export async function createManualRegistrationToken(params) {
+    const rows = await db().insert(manualRegistrationTokens).values({
+        workspaceId: params.workspaceId,
+        hashedToken: params.hashedToken,
+        prefix: params.prefix,
+        name: params.name ?? null,
+        expiresAt: params.expiresAt ?? null
+    }).returning();
+    const row = rows[0];
+    if (!row) throw new Error('Insert returned no rows');
+    return toManualRegistrationToken(row);
+}
+export async function resolveManualRegistrationTokenByHash(hashedToken) {
+    const rows = await db().select().from(manualRegistrationTokens).where(eq(manualRegistrationTokens.hashedToken, hashedToken)).limit(1);
+    const row = rows[0];
+    if (!row) return undefined;
+    return toManualRegistrationToken(row);
+}
+export async function listUsableManualRegistrationTokensByWorkspaceId(workspaceId) {
+    const now = new Date();
+    const rows = await db().select().from(manualRegistrationTokens).where(and(eq(manualRegistrationTokens.workspaceId, workspaceId), isNull(manualRegistrationTokens.revokedAt), or(isNull(manualRegistrationTokens.expiresAt), gt(manualRegistrationTokens.expiresAt, now)))).orderBy(desc(manualRegistrationTokens.createdAt), desc(manualRegistrationTokens.id));
+    return rows.map(toManualRegistrationToken);
+}
+export async function revokeManualRegistrationToken(params) {
+    const rows = await db().update(manualRegistrationTokens).set({
+        revokedAt: new Date(),
+        updatedAt: new Date()
+    }).where(and(eq(manualRegistrationTokens.id, params.tokenId), eq(manualRegistrationTokens.workspaceId, params.workspaceId))).returning();
+    const row = rows[0];
+    if (!row) return undefined;
+    return toManualRegistrationToken(row);
+}
+
+//# sourceMappingURL=manual-registration-tokens.js.map

package/dist/db/manual-registration-tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/db/manual-registration-tokens.ts"],"sourcesContent":["import {and, desc, eq, gt, isNull, or} from 'drizzle-orm';\nimport type {ManualRegistrationToken} from '#core/entities/manual-registration-token.js';\nimport {db} from './db.js';\nimport {\n  manualRegistrationTokens,\n  toManualRegistrationToken,\n} from './schema/manual-registration-tokens.js';\n\nexport interface CreateManualRegistrationTokenParams {\n  workspaceId: string;\n  hashedToken: string;\n  prefix: string;\n  name?: string | undefined;\n  expiresAt?: Date | undefined;\n}\n\nexport async function createManualRegistrationToken(\n  params: CreateManualRegistrationTokenParams,\n): Promise<ManualRegistrationToken> {\n  const rows = await db()\n    .insert(manualRegistrationTokens)\n    .values({\n      workspaceId: params.workspaceId,\n      hashedToken: params.hashedToken,\n      prefix: params.prefix,\n      name: params.name ?? null,\n      expiresAt: params.expiresAt ?? null,\n    })\n    .returning();\n\n  const row = rows[0];\n  if (!row) throw new Error('Insert returned no rows');\n  return toManualRegistrationToken(row);\n}\n\nexport async function resolveManualRegistrationTokenByHash(\n  hashedToken: string,\n): Promise<ManualRegistrationToken | undefined> {\n  const rows = await db()\n    .select()\n    .from(manualRegistrationTokens)\n    .where(eq(manualRegistrationTokens.hashedToken, hashedToken))\n    .limit(1);\n\n  const row = rows[0];\n  if (!row) return undefined;\n  return toManualRegistrationToken(row);\n}\n\nexport async function listUsableManualRegistrationTokensByWorkspaceId(\n  workspaceId: string,\n): Promise<ManualRegistrationToken[]> {\n  const now = new Date();\n  const rows = await db()\n    .select()\n    .from(manualRegistrationTokens)\n    .where(\n      and(\n        eq(manualRegistrationTokens.workspaceId, workspaceId),\n        isNull(manualRegistrationTokens.revokedAt),\n        or(isNull(manualRegistrationTokens.expiresAt), gt(manualRegistrationTokens.expiresAt, now)),\n      ),\n    )\n    .orderBy(desc(manualRegistrationTokens.createdAt), desc(manualRegistrationTokens.id));\n\n  return rows.map(toManualRegistrationToken);\n}\n\nexport async function revokeManualRegistrationToken(params: {\n  tokenId: string;\n  workspaceId: string;\n}): Promise<ManualRegistrationToken | undefined> {\n  const rows = await db()\n    .update(manualRegistrationTokens)\n    .set({revokedAt: new Date(), updatedAt: new Date()})\n    .where(\n      and(\n        eq(manualRegistrationTokens.id, params.tokenId),\n        eq(manualRegistrationTokens.workspaceId, params.workspaceId),\n      ),\n    )\n    .returning();\n\n  const row = rows[0];\n  if (!row) return undefined;\n  return toManualRegistrationToken(row);\n}\n"],"names":["and","desc","eq","gt","isNull","or","db","manualRegistrationTokens","toManualRegistrationToken","createManualRegistrationToken","params","rows","insert","values","workspaceId","hashedToken","prefix","name","expiresAt","returning","row","Error","resolveManualRegistrationTokenByHash","select","from","where","limit","undefined","listUsableManualRegistrationTokensByWorkspaceId","now","Date","revokedAt","orderBy","createdAt","id","map","revokeManualRegistrationToken","update","set","updatedAt","tokenId"],"mappings":"AAAA,SAAQA,GAAG,EAAEC,IAAI,EAAEC,EAAE,EAAEC,EAAE,EAAEC,MAAM,EAAEC,EAAE,QAAO,cAAc;AAE1D,SAAQC,EAAE,QAAO,UAAU;AAC3B,SACEC,wBAAwB,EACxBC,yBAAyB,QACpB,yCAAyC;AAUhD,OAAO,eAAeC,8BACpBC,MAA2C;IAE3C,MAAMC,OAAO,MAAML,KAChBM,MAAM,CAACL,0BACPM,MAAM,CAAC;QACNC,aAAaJ,OAAOI,WAAW;QAC/BC,aAAaL,OAAOK,WAAW;QAC/BC,QAAQN,OAAOM,MAAM;QACrBC,MAAMP,OAAOO,IAAI,IAAI;QACrBC,WAAWR,OAAOQ,SAAS,IAAI;IACjC,GACCC,SAAS;IAEZ,MAAMC,MAAMT,IAAI,CAAC,EAAE;IACnB,IAAI,CAACS,KAAK,MAAM,IAAIC,MAAM;IAC1B,OAAOb,0BAA0BY;AACnC;AAEA,OAAO,eAAeE,qCACpBP,WAAmB;IAEnB,MAAMJ,OAAO,MAAML,KAChBiB,MAAM,GACNC,IAAI,CAACjB,0BACLkB,KAAK,CAACvB,GAAGK,yBAAyBQ,WAAW,EAAEA,cAC/CW,KAAK,CAAC;IAET,MAAMN,MAAMT,IAAI,CAAC,EAAE;IACnB,IAAI,CAACS,KAAK,OAAOO;IACjB,OAAOnB,0BAA0BY;AACnC;AAEA,OAAO,eAAeQ,gDACpBd,WAAmB;IAEnB,MAAMe,MAAM,IAAIC;IAChB,MAAMnB,OAAO,MAAML,KAChBiB,MAAM,GACNC,IAAI,CAACjB,0BACLkB,KAAK,CACJzB,IACEE,GAAGK,yBAAyBO,WAAW,EAAEA,cACzCV,OAAOG,yBAAyBwB,SAAS,GACzC1B,GAAGD,OAAOG,yBAAyBW,SAAS,GAAGf,GAAGI,yBAAyBW,SAAS,EAAEW,QAGzFG,OAAO,CAAC/B,KAAKM,yBAAyB0B,SAAS,GAAGhC,KAAKM,yBAAyB2B,EAAE;IAErF,OAAOvB,KAAKwB,GAAG,CAAC3B;AAClB;AAEA,OAAO,eAAe4B,8BAA8B1B,MAGnD;IACC,MAAMC,OAAO,MAAML,KAChB+B,MAAM,CAAC9B,0BACP+B,GAAG,CAAC;QAACP,WAAW,IAAID;QAAQS,WAAW,IAAIT;IAAM,GACjDL,KAAK,CACJzB,IACEE,GAAGK,yBAAyB2B,EAAE,EAAExB,OAAO8B,OAAO,GAC9CtC,GAAGK,yBAAyBO,WAAW,EAAEJ,OAAOI,WAAW,IAG9DK,SAAS;IAEZ,MAAMC,MAAMT,IAAI,CAAC,EAAE;IACnB,IAAI,CAACS,KAAK,OAAOO;IACjB,OAAOnB,0BAA0BY;AACnC"}

package/dist/db/provisioned-runners.d.ts

@@ -0,0 +1,79 @@
+import type { ProvisionedRunner, ProvisionedRunnerState } from '#core/entities/provisioned-runner.js';
+import type { Tx } from './db.js';
+import { type ProvisionedRunnerBoundJobExecution } from './job-executions.js';
+export declare const terminalStates: readonly ["stopped", "failed", "terminated"];
+export declare const activeStates: readonly ["starting", "running", "stopping"];
+export declare const divergenceCountStates: readonly ["starting", "running"];
+export type ProvisionedRunnerTerminateIntentReason = 'job-cancelled';
+export interface ProvisionedRunnerTerminateIntent {
+    provisionedRunnerId: string;
+    reason: ProvisionedRunnerTerminateIntentReason;
+}
+export interface ActiveProvisionedRunnerTemplateCount {
+    templateKey: string;
+    state: (typeof divergenceCountStates)[number];
+    count: number;
+}
+export interface ProvisionedRunnerReportEvent {
+    provisionedRunnerId: string;
+    reservationId: string | null;
+    templateKey: string | null;
+    labels: string[];
+    state: ProvisionedRunnerState;
+    reason: string | null;
+    runnerSessionId: string | null;
+    providerKind: string | null;
+    reportedAt: Date;
+}
+export interface ReportProvisionedRunnersParams {
+    workspaceId: string;
+    provisionerId: string;
+    events: ProvisionedRunnerReportEvent[];
+}
+export interface ReconcileProvisionedRunnersParams {
+    workspaceId: string;
+    provisionerId: string;
+    observedProvisionedRunnerIds: string[];
+    terminateGraceSeconds: number;
+}
+export interface ReconcileProvisionedRunnersDbResult {
+    observedRows: ProvisionedRunner[];
+    boundJobExecutionsByProvisionedRunnerId: Map<string, ProvisionedRunnerBoundJobExecution>;
+    absentIds: string[];
+    reservationsReleased: number;
+}
+export interface ReapStaleProvisionedRunnersResult {
+    reaped: number;
+    reservationsReleased: number;
+}
+export declare function reportProvisionedRunners(params: ReportProvisionedRunnersParams): Promise<{
+    accepted: number;
+    reservationsReleased: number;
+    terminateIntentsHonored: ProvisionedRunnerTerminateIntent[];
+}>;
+export declare function listActiveProvisionedRunnerCountsByTemplateTx(tx: Tx, params: {
+    workspaceId: string;
+    provisionerId: string;
+}): Promise<ActiveProvisionedRunnerTemplateCount[]>;
+export declare function listActiveProvisionedRunners(params: {
+    workspaceId: string;
+    windowSeconds: number;
+    limit?: number;
+}): Promise<ProvisionedRunner[]>;
+export declare function listProvisionerTerminateIntents(params: {
+    workspaceId: string;
+    provisionerId: string;
+    limit: number;
+}): Promise<string[]>;
+export declare function listProvisionerTerminateIntentRowsTx(tx: Tx, params: {
+    workspaceId: string;
+    provisionerId: string;
+    limit: number;
+}): Promise<ProvisionedRunnerTerminateIntent[]>;
+export declare function reconcileProvisionedRunners(params: ReconcileProvisionedRunnersParams): Promise<ReconcileProvisionedRunnersDbResult>;
+export declare function reapStaleProvisionedRunners(params: {
+    thresholdSeconds: number;
+    limit: number;
+}): Promise<ReapStaleProvisionedRunnersResult>;
+export declare function isTerminalState(state: ProvisionedRunnerState): boolean;
+//# sourceMappingURL=provisioned-runners.d.ts.map

package/dist/db/provisioned-runners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioned-runners.d.ts","sourceRoot":"","sources":["../../src/db/provisioned-runners.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAC,iBAAiB,EAAE,sBAAsB,EAAC,MAAM,sCAAsC,CAAC;AACpG,OAAO,KAAK,EAAC,EAAE,EAAC,MAAM,SAAS,CAAC;AAEhC,OAAO,EAEL,KAAK,kCAAkC,EACxC,MAAM,qBAAqB,CAAC;AAQ7B,eAAO,MAAM,cAAc,8CAI2B,CAAC;AACvD,eAAO,MAAM,YAAY,8CAI6B,CAAC;AACvD,eAAO,MAAM,qBAAqB,kCAG/B,CAAC;AAEJ,MAAM,MAAM,sCAAsC,GAAG,eAAe,CAAC;AAErE,MAAM,WAAW,gCAAgC;IAC/C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,MAAM,EAAE,sCAAsC,CAAC;CAChD;AAED,MAAM,WAAW,oCAAoC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,4BAA4B;IAC3C,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,sBAAsB,CAAC;IAC9B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,4BAA4B,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,iCAAiC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,4BAA4B,EAAE,MAAM,EAAE,CAAC;IACvC,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,mCAAmC;IAClD,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,uCAAuC,EAAE,GAAG,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;IACzF,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAiBD,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,8BAA8B,GAAG,OAAO,CAAC;IAC9F,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,uBAAuB,EAAE,gCAAgC,EAAE,CAAC;CAC7D,CAAC,CA+ED;AAED,wBAAsB,6CAA6C,CACjE,EAAE,EAAE,EAAE,EACN,MAAM,EAAE;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAC,GACnD,OAAO,CAAC,oCAAoC,EAAE,CAAC,CAuBjD;AAED,wBAAsB,4BAA4B,CAAC,MAAM,EAAE;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAe/B;AAED,wBAAsB,+BAA+B,CAAC,MAAM,EAAE;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAKpB;AAED,wBAAsB,oCAAoC,CACxD,EAAE,EAAE,EAAE,EACN,MAAM,EAAE;IACN,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf,GACA,OAAO,CAAC,gCAAgC,EAAE,CAAC,CAoB7C;AAkFD,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,iCAAiC,GACxC,OAAO,CAAC,mCAAmC,CAAC,CA2F9C;AAED,wBAAsB,2BAA2B,CAAC,MAAM,EAAE;IACxD,gBAAgB,EAAE,MAAM,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,iCAAiC,CAAC,CA0D7C;AAiWD,wBAAgB,eAAe,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAEtE"}