@shipfox/api-runners 6.0.0 → 7.0.1

package/dist/presentation/routes/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import {\n  AUTH_LEASED_JOB,\n  AUTH_PROVISIONER_TOKEN,\n  AUTH_RUNNER_REGISTRATION_TOKEN,\n  AUTH_RUNNER_SESSION,\n  AUTH_USER,\n} from '@shipfox/api-auth-context';\nimport type {AuthInterModuleClient} from '@shipfox/api-auth-dto/inter-module';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport type {CreateRunnersModuleOptions} from '#installation-provisioning.js';\nimport {assignCapacityRoute} from './assign-capacity.js';\nimport {createManualRegistrationTokenRoute} from './create-manual-registration-token.js';\nimport {createProvisionerTokenRoute} from './create-provisioner-token.js';\nimport {getProvisionerMeRoute} from './get-provisioner-me.js';\nimport {createHeartbeatRoute} from './heartbeat.js';\nimport {listActiveProvisionersRoute} from './list-active-provisioners.js';\nimport {listActiveRunnersRoute} from './list-active-runners.js';\nimport {listManualRegistrationTokensRoute} from './list-manual-registration-tokens.js';\nimport {listProvisionerTokensRoute} from './list-provisioner-tokens.js';\nimport {mintRegistrationTokensRoute} from './mint-registration-tokens.js';\nimport {attachProviderRunnerRoute, createPlannedCapacityRoute} from './planned-capacity.js';\nimport {createPollDemandRoute, pollDemandRoute} from './poll-demand.js';\nimport {reconcileRunnerInstancesRoute} from './reconcile-runner-instances.js';\nimport {createRegisterRoute} from './register.js';\nimport {reportRunnerInstancesRoute} from './report-runner-instances.js';\nimport {createRequestJobRoute} from './request-job.js';\nimport {revokeManualRegistrationTokenRoute} from './revoke-manual-registration-token.js';\nimport {revokeProvisionerTokenRoute} from './revoke-provisioner-token.js';\nimport {\n  attachRunnerControlProviderIdRoute,\n  createRunnerInstancesRoute,\n  enrollRunnerRoute,\n  exchangeRunnerBootstrapRoute,\n  runnerAssignmentPollRoute,\n  runnerControlHeartbeatRoute,\n} from './runner-enrollment.js';\n\nfunction createRunnerOnlyRoutes(auth: AuthInterModuleClient): RouteGroup[] {\n  return [\n    {\n      prefix: '/workspaces/:workspaceId/runners/manual-registration-tokens',\n      auth: AUTH_USER,\n      routes: [\n        listManualRegistrationTokensRoute,\n        createManualRegistrationTokenRoute,\n        revokeManualRegistrationTokenRoute,\n      ],\n    },\n    {\n      prefix: '/workspaces/:workspaceId/runners/active',\n      auth: AUTH_USER,\n      routes: [listActiveRunnersRoute],\n    },\n    {\n      prefix: '/runners',\n      auth: AUTH_RUNNER_REGISTRATION_TOKEN,\n      routes: [createRegisterRoute(auth)],\n    },\n    {\n      prefix: '/runners/jobs',\n      auth: AUTH_RUNNER_SESSION,\n      routes: [createRequestJobRoute(auth)],\n    },\n    {\n      prefix: '/runners/jobs',\n      auth: AUTH_LEASED_JOB,\n      routes: [createHeartbeatRoute(auth)],\n    },\n    {\n      prefix: '/provisioners',\n      auth: AUTH_PROVISIONER_TOKEN,\n      routes: [\n        pollDemandRoute,\n        createRunnerInstancesRoute,\n        createPlannedCapacityRoute,\n        attachProviderRunnerRoute,\n        assignCapacityRoute,\n        mintRegistrationTokensRoute,\n        reportRunnerInstancesRoute,\n        reconcileRunnerInstancesRoute,\n      ],\n    },\n  ];\n}\n\nconst runnerControlRoutes: RouteGroup[] = [\n  {prefix: '/runner-enrollment', routes: [exchangeRunnerBootstrapRoute]},\n  {\n    prefix: '/runner-control',\n    routes: [\n      enrollRunnerRoute,\n      attachRunnerControlProviderIdRoute,\n      runnerControlHeartbeatRoute,\n      runnerAssignmentPollRoute,\n    ],\n  },\n];\n\nexport const provisionerRoutes: RouteGroup[] = [\n  {\n    prefix: '/workspaces/:workspaceId/provisioners/tokens',\n    auth: AUTH_USER,\n    routes: [listProvisionerTokensRoute, createProvisionerTokenRoute, revokeProvisionerTokenRoute],\n  },\n  {\n    prefix: '/workspaces/:workspaceId/provisioners/active',\n    auth: AUTH_USER,\n    routes: [listActiveProvisionersRoute],\n  },\n  {\n    prefix: '/provisioners',\n    auth: AUTH_PROVISIONER_TOKEN,\n    routes: [getProvisionerMeRoute],\n  },\n];\n\nexport function createRunnerRoutes(\n  auth: AuthInterModuleClient,\n  options: CreateRunnersModuleOptions = {},\n): RouteGroup[] {\n  const runnerOnlyRoutes = createRunnerOnlyRoutes(auth);\n  return [\n    ...runnerOnlyRoutes.map((route) =>\n      route.routes.includes(pollDemandRoute)\n        ? {\n            ...route,\n            routes: route.routes.map((r) =>\n              r === pollDemandRoute ? createPollDemandRoute(options) : r,\n            ),\n          }\n        : route,\n    ),\n    ...runnerControlRoutes,\n    ...provisionerRoutes,\n  ];\n}\n"],"names":["AUTH_LEASED_JOB","AUTH_PROVISIONER_TOKEN","AUTH_RUNNER_REGISTRATION_TOKEN","AUTH_RUNNER_SESSION","AUTH_USER","assignCapacityRoute","createManualRegistrationTokenRoute","createProvisionerTokenRoute","getProvisionerMeRoute","createHeartbeatRoute","listActiveProvisionersRoute","listActiveRunnersRoute","listManualRegistrationTokensRoute","listProvisionerTokensRoute","mintRegistrationTokensRoute","attachProviderRunnerRoute","createPlannedCapacityRoute","createPollDemandRoute","pollDemandRoute","reconcileRunnerInstancesRoute","createRegisterRoute","reportRunnerInstancesRoute","createRequestJobRoute","revokeManualRegistrationTokenRoute","revokeProvisionerTokenRoute","attachRunnerControlProviderIdRoute","createRunnerInstancesRoute","enrollRunnerRoute","exchangeRunnerBootstrapRoute","runnerAssignmentPollRoute","runnerControlHeartbeatRoute","createRunnerOnlyRoutes","auth","prefix","routes","runnerControlRoutes","provisionerRoutes","createRunnerRoutes","options","runnerOnlyRoutes","map","route","includes","r"],"mappings":"AAAA,SACEA,eAAe,EACfC,sBAAsB,EACtBC,8BAA8B,EAC9BC,mBAAmB,EACnBC,SAAS,QACJ,4BAA4B;AAInC,SAAQC,mBAAmB,QAAO,uBAAuB;AACzD,SAAQC,kCAAkC,QAAO,wCAAwC;AACzF,SAAQC,2BAA2B,QAAO,gCAAgC;AAC1E,SAAQC,qBAAqB,QAAO,0BAA0B;AAC9D,SAAQC,oBAAoB,QAAO,iBAAiB;AACpD,SAAQC,2BAA2B,QAAO,gCAAgC;AAC1E,SAAQC,sBAAsB,QAAO,2BAA2B;AAChE,SAAQC,iCAAiC,QAAO,uCAAuC;AACvF,SAAQC,0BAA0B,QAAO,+BAA+B;AACxE,SAAQC,2BAA2B,QAAO,gCAAgC;AAC1E,SAAQC,yBAAyB,EAAEC,0BAA0B,QAAO,wBAAwB;AAC5F,SAAQC,qBAAqB,EAAEC,eAAe,QAAO,mBAAmB;AACxE,SAAQC,6BAA6B,QAAO,kCAAkC;AAC9E,SAAQC,mBAAmB,QAAO,gBAAgB;AAClD,SAAQC,0BAA0B,QAAO,+BAA+B;AACxE,SAAQC,qBAAqB,QAAO,mBAAmB;AACvD,SAAQC,kCAAkC,QAAO,wCAAwC;AACzF,SAAQC,2BAA2B,QAAO,gCAAgC;AAC1E,SACEC,kCAAkC,EAClCC,0BAA0B,EAC1BC,iBAAiB,EACjBC,4BAA4B,EAC5BC,yBAAyB,EACzBC,2BAA2B,QACtB,yBAAyB;AAEhC,SAASC,uBAAuBC,IAA2B;IACzD,OAAO;QACL;YACEC,QAAQ;YACRD,MAAM5B;YACN8B,QAAQ;gBACNtB;gBACAN;gBACAiB;aACD;QACH;QACA;YACEU,QAAQ;YACRD,MAAM5B;YACN8B,QAAQ;gBAACvB;aAAuB;QAClC;QACA;YACEsB,QAAQ;YACRD,MAAM9B;YACNgC,QAAQ;gBAACd,oBAAoBY;aAAM;QACrC;QACA;YACEC,QAAQ;YACRD,MAAM7B;YACN+B,QAAQ;gBAACZ,sBAAsBU;aAAM;QACvC;QACA;YACEC,QAAQ;YACRD,MAAMhC;YACNkC,QAAQ;gBAACzB,qBAAqBuB;aAAM;QACtC;QACA;YACEC,QAAQ;YACRD,MAAM/B;YACNiC,QAAQ;gBACNhB;gBACAQ;gBACAV;gBACAD;gBACAV;gBACAS;gBACAO;gBACAF;aACD;QACH;KACD;AACH;AAEA,MAAMgB,sBAAoC;IACxC;QAACF,QAAQ;QAAsBC,QAAQ;YAACN;SAA6B;IAAA;IACrE;QACEK,QAAQ;QACRC,QAAQ;YACNP;YACAF;YACAK;YACAD;SACD;IACH;CACD;AAED,OAAO,MAAMO,oBAAkC;IAC7C;QACEH,QAAQ;QACRD,MAAM5B;QACN8B,QAAQ;YAACrB;YAA4BN;YAA6BiB;SAA4B;IAChG;IACA;QACES,QAAQ;QACRD,MAAM5B;QACN8B,QAAQ;YAACxB;SAA4B;IACvC;IACA;QACEuB,QAAQ;QACRD,MAAM/B;QACNiC,QAAQ;YAAC1B;SAAsB;IACjC;CACD,CAAC;AAEF,OAAO,SAAS6B,mBACdL,IAA2B,EAC3BM,UAAsC,CAAC,CAAC;IAExC,MAAMC,mBAAmBR,uBAAuBC;IAChD,OAAO;WACFO,iBAAiBC,GAAG,CAAC,CAACC,QACvBA,MAAMP,MAAM,CAACQ,QAAQ,CAACxB,mBAClB;gBACE,GAAGuB,KAAK;gBACRP,QAAQO,MAAMP,MAAM,CAACM,GAAG,CAAC,CAACG,IACxBA,MAAMzB,kBAAkBD,sBAAsBqB,WAAWK;YAE7D,IACAF;WAEHN;WACAC;KACJ;AACH"}
+{"version":3,"sources":["../../../src/presentation/routes/index.ts"],"sourcesContent":["import {\n  AUTH_LEASED_JOB,\n  AUTH_PROVISIONER_TOKEN,\n  AUTH_RUNNER_REGISTRATION_TOKEN,\n  AUTH_RUNNER_SESSION,\n  AUTH_USER,\n} from '@shipfox/api-auth-context';\nimport type {AuthInterModuleClient} from '@shipfox/api-auth-dto/inter-module';\nimport type {RouteGroup} from '@shipfox/node-fastify';\nimport type {CreateRunnersModuleOptions} from '#installation-provisioning.js';\nimport {assignRunnerInstancesRoute} from './assign-runner-instances.js';\nimport {createManualRegistrationTokenRoute} from './create-manual-registration-token.js';\nimport {createProvisionerTokenRoute} from './create-provisioner-token.js';\nimport {getProvisionerMeRoute} from './get-provisioner-me.js';\nimport {createHeartbeatRoute} from './heartbeat.js';\nimport {listActiveProvisionersRoute} from './list-active-provisioners.js';\nimport {listActiveRunnersRoute} from './list-active-runners.js';\nimport {listManualRegistrationTokensRoute} from './list-manual-registration-tokens.js';\nimport {listProvisionerTokensRoute} from './list-provisioner-tokens.js';\nimport {createPollDemandRoute, pollDemandRoute} from './poll-demand.js';\nimport {reconcileRunnerInstancesRoute} from './reconcile-runner-instances.js';\nimport {createRegisterRoute} from './register.js';\nimport {reportRunnerInstancesRoute} from './report-runner-instances.js';\nimport {createRequestJobRoute} from './request-job.js';\nimport {revokeManualRegistrationTokenRoute} from './revoke-manual-registration-token.js';\nimport {revokeProvisionerTokenRoute} from './revoke-provisioner-token.js';\nimport {\n  attachRunnerControlProviderIdRoute,\n  attachRunnerInstanceProviderIdRoute,\n  createRunnerInstancesRoute,\n  enrollRunnerRoute,\n  exchangeRunnerBootstrapRoute,\n  runnerAssignmentPollRoute,\n  runnerControlHeartbeatRoute,\n} from './runner-enrollment.js';\n\nfunction createRunnerOnlyRoutes(auth: AuthInterModuleClient): RouteGroup[] {\n  return [\n    {\n      prefix: '/workspaces/:workspaceId/runners/manual-registration-tokens',\n      auth: AUTH_USER,\n      routes: [\n        listManualRegistrationTokensRoute,\n        createManualRegistrationTokenRoute,\n        revokeManualRegistrationTokenRoute,\n      ],\n    },\n    {\n      prefix: '/workspaces/:workspaceId/runners/active',\n      auth: AUTH_USER,\n      routes: [listActiveRunnersRoute],\n    },\n    {\n      prefix: '/runners',\n      auth: AUTH_RUNNER_REGISTRATION_TOKEN,\n      routes: [createRegisterRoute(auth)],\n    },\n    {\n      prefix: '/runners/jobs',\n      auth: AUTH_RUNNER_SESSION,\n      routes: [createRequestJobRoute(auth)],\n    },\n    {\n      prefix: '/runners/jobs',\n      auth: AUTH_LEASED_JOB,\n      routes: [createHeartbeatRoute(auth)],\n    },\n    {\n      prefix: '/provisioners',\n      auth: AUTH_PROVISIONER_TOKEN,\n      routes: [\n        pollDemandRoute,\n        createRunnerInstancesRoute,\n        attachRunnerInstanceProviderIdRoute,\n        assignRunnerInstancesRoute,\n        reportRunnerInstancesRoute,\n        reconcileRunnerInstancesRoute,\n      ],\n    },\n  ];\n}\n\nconst runnerControlRoutes: RouteGroup[] = [\n  {prefix: '/runner-enrollment', routes: [exchangeRunnerBootstrapRoute]},\n  {\n    prefix: '/runner-control',\n    routes: [\n      enrollRunnerRoute,\n      attachRunnerControlProviderIdRoute,\n      runnerControlHeartbeatRoute,\n      runnerAssignmentPollRoute,\n    ],\n  },\n];\n\nexport const provisionerRoutes: RouteGroup[] = [\n  {\n    prefix: '/workspaces/:workspaceId/provisioners/tokens',\n    auth: AUTH_USER,\n    routes: [listProvisionerTokensRoute, createProvisionerTokenRoute, revokeProvisionerTokenRoute],\n  },\n  {\n    prefix: '/workspaces/:workspaceId/provisioners/active',\n    auth: AUTH_USER,\n    routes: [listActiveProvisionersRoute],\n  },\n  {\n    prefix: '/provisioners',\n    auth: AUTH_PROVISIONER_TOKEN,\n    routes: [getProvisionerMeRoute],\n  },\n];\n\nexport function createRunnerRoutes(\n  auth: AuthInterModuleClient,\n  options: CreateRunnersModuleOptions = {},\n): RouteGroup[] {\n  const runnerOnlyRoutes = createRunnerOnlyRoutes(auth);\n  return [\n    ...runnerOnlyRoutes.map((route) =>\n      route.routes.includes(pollDemandRoute)\n        ? {\n            ...route,\n            routes: route.routes.map((r) =>\n              r === pollDemandRoute ? createPollDemandRoute(options) : r,\n            ),\n          }\n        : route,\n    ),\n    ...runnerControlRoutes,\n    ...provisionerRoutes,\n  ];\n}\n"],"names":["AUTH_LEASED_JOB","AUTH_PROVISIONER_TOKEN","AUTH_RUNNER_REGISTRATION_TOKEN","AUTH_RUNNER_SESSION","AUTH_USER","assignRunnerInstancesRoute","createManualRegistrationTokenRoute","createProvisionerTokenRoute","getProvisionerMeRoute","createHeartbeatRoute","listActiveProvisionersRoute","listActiveRunnersRoute","listManualRegistrationTokensRoute","listProvisionerTokensRoute","createPollDemandRoute","pollDemandRoute","reconcileRunnerInstancesRoute","createRegisterRoute","reportRunnerInstancesRoute","createRequestJobRoute","revokeManualRegistrationTokenRoute","revokeProvisionerTokenRoute","attachRunnerControlProviderIdRoute","attachRunnerInstanceProviderIdRoute","createRunnerInstancesRoute","enrollRunnerRoute","exchangeRunnerBootstrapRoute","runnerAssignmentPollRoute","runnerControlHeartbeatRoute","createRunnerOnlyRoutes","auth","prefix","routes","runnerControlRoutes","provisionerRoutes","createRunnerRoutes","options","runnerOnlyRoutes","map","route","includes","r"],"mappings":"AAAA,SACEA,eAAe,EACfC,sBAAsB,EACtBC,8BAA8B,EAC9BC,mBAAmB,EACnBC,SAAS,QACJ,4BAA4B;AAInC,SAAQC,0BAA0B,QAAO,+BAA+B;AACxE,SAAQC,kCAAkC,QAAO,wCAAwC;AACzF,SAAQC,2BAA2B,QAAO,gCAAgC;AAC1E,SAAQC,qBAAqB,QAAO,0BAA0B;AAC9D,SAAQC,oBAAoB,QAAO,iBAAiB;AACpD,SAAQC,2BAA2B,QAAO,gCAAgC;AAC1E,SAAQC,sBAAsB,QAAO,2BAA2B;AAChE,SAAQC,iCAAiC,QAAO,uCAAuC;AACvF,SAAQC,0BAA0B,QAAO,+BAA+B;AACxE,SAAQC,qBAAqB,EAAEC,eAAe,QAAO,mBAAmB;AACxE,SAAQC,6BAA6B,QAAO,kCAAkC;AAC9E,SAAQC,mBAAmB,QAAO,gBAAgB;AAClD,SAAQC,0BAA0B,QAAO,+BAA+B;AACxE,SAAQC,qBAAqB,QAAO,mBAAmB;AACvD,SAAQC,kCAAkC,QAAO,wCAAwC;AACzF,SAAQC,2BAA2B,QAAO,gCAAgC;AAC1E,SACEC,kCAAkC,EAClCC,mCAAmC,EACnCC,0BAA0B,EAC1BC,iBAAiB,EACjBC,4BAA4B,EAC5BC,yBAAyB,EACzBC,2BAA2B,QACtB,yBAAyB;AAEhC,SAASC,uBAAuBC,IAA2B;IACzD,OAAO;QACL;YACEC,QAAQ;YACRD,MAAM1B;YACN4B,QAAQ;gBACNpB;gBACAN;gBACAc;aACD;QACH;QACA;YACEW,QAAQ;YACRD,MAAM1B;YACN4B,QAAQ;gBAACrB;aAAuB;QAClC;QACA;YACEoB,QAAQ;YACRD,MAAM5B;YACN8B,QAAQ;gBAACf,oBAAoBa;aAAM;QACrC;QACA;YACEC,QAAQ;YACRD,MAAM3B;YACN6B,QAAQ;gBAACb,sBAAsBW;aAAM;QACvC;QACA;YACEC,QAAQ;YACRD,MAAM9B;YACNgC,QAAQ;gBAACvB,qBAAqBqB;aAAM;QACtC;QACA;YACEC,QAAQ;YACRD,MAAM7B;YACN+B,QAAQ;gBACNjB;gBACAS;gBACAD;gBACAlB;gBACAa;gBACAF;aACD;QACH;KACD;AACH;AAEA,MAAMiB,sBAAoC;IACxC;QAACF,QAAQ;QAAsBC,QAAQ;YAACN;SAA6B;IAAA;IACrE;QACEK,QAAQ;QACRC,QAAQ;YACNP;YACAH;YACAM;YACAD;SACD;IACH;CACD;AAED,OAAO,MAAMO,oBAAkC;IAC7C;QACEH,QAAQ;QACRD,MAAM1B;QACN4B,QAAQ;YAACnB;YAA4BN;YAA6Bc;SAA4B;IAChG;IACA;QACEU,QAAQ;QACRD,MAAM1B;QACN4B,QAAQ;YAACtB;SAA4B;IACvC;IACA;QACEqB,QAAQ;QACRD,MAAM7B;QACN+B,QAAQ;YAACxB;SAAsB;IACjC;CACD,CAAC;AAEF,OAAO,SAAS2B,mBACdL,IAA2B,EAC3BM,UAAsC,CAAC,CAAC;IAExC,MAAMC,mBAAmBR,uBAAuBC;IAChD,OAAO;WACFO,iBAAiBC,GAAG,CAAC,CAACC,QACvBA,MAAMP,MAAM,CAACQ,QAAQ,CAACzB,mBAClB;gBACE,GAAGwB,KAAK;gBACRP,QAAQO,MAAMP,MAAM,CAACM,GAAG,CAAC,CAACG,IACxBA,MAAM1B,kBAAkBD,sBAAsBsB,WAAWK;YAE7D,IACAF;WAEHN;WACAC;KACJ;AACH"}

package/dist/presentation/routes/runner-enrollment.d.ts

@@ -1,4 +1,5 @@
 export declare const createRunnerInstancesRoute: import("@shipfox/node-fastify").RouteDefinition;
+export declare const attachRunnerInstanceProviderIdRoute: import("@shipfox/node-fastify").RouteDefinition;
 export declare const exchangeRunnerBootstrapRoute: import("@shipfox/node-fastify").RouteDefinition;
 export declare const enrollRunnerRoute: import("@shipfox/node-fastify").RouteDefinition;
 export declare const attachRunnerControlProviderIdRoute: import("@shipfox/node-fastify").RouteDefinition;

package/dist/presentation/routes/runner-enrollment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runner-enrollment.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/runner-enrollment.ts"],"names":[],"mappings":"AA8BA,eAAO,MAAM,0BAA0B,iDA0BrC,CAAC;AAEH,eAAO,MAAM,4BAA4B,iDA2BvC,CAAC;AAEH,eAAO,MAAM,iBAAiB,iDAuB5B,CAAC;AAEH,eAAO,MAAM,kCAAkC,iDAkB7C,CAAC;AAEH,eAAO,MAAM,2BAA2B,iDAYtC,CAAC;AAEH,eAAO,MAAM,yBAAyB,iDA2BpC,CAAC"}
+{"version":3,"file":"runner-enrollment.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/runner-enrollment.ts"],"names":[],"mappings":"AA+BA,eAAO,MAAM,0BAA0B,iDA0BrC,CAAC;AAEH,eAAO,MAAM,mCAAmC,iDAmB9C,CAAC;AAEH,eAAO,MAAM,4BAA4B,iDA2BvC,CAAC;AAEH,eAAO,MAAM,iBAAiB,iDAuB5B,CAAC;AAEH,eAAO,MAAM,kCAAkC,iDAkB7C,CAAC;AAEH,eAAO,MAAM,2BAA2B,iDAYtC,CAAC;AAEH,eAAO,MAAM,yBAAyB,iDA2BpC,CAAC"}

package/dist/presentation/routes/runner-enrollment.js

@@ -5,6 +5,7 @@ import { z } from 'zod';
 import { config } from '#config.js';
 import { getRunnerAssignment, issueRunnerActivationToken } from '#core/runner-activation.js';
 import { attachRunnerControlProviderId, createRunnerInstancesWithBootstrapTokens, enrollRunnerControlSession, exchangeRunnerBootstrapToken, RunnerBootstrapTokenInvalidError, RunnerControlSessionInvalidError, touchRunnerControlSession } from '#core/runner-control-sessions.js';
+import { attachRunnerInstanceProviderId } from '#core/runner-instances.js';
 import { runnerBootstrapExchangeCount, runnerControlHeartbeatCount } from '#metrics/instance.js';
 import { authenticateRunnerControlSession } from '#presentation/auth/index.js';
 export const createRunnerInstancesRoute = defineRoute({
@@ -37,6 +38,32 @@ export const createRunnerInstancesRoute = defineRoute({
         };
     }
 });
+export const attachRunnerInstanceProviderIdRoute = defineRoute({
+    method: 'POST',
+    path: '/runner-instances/:runnerInstanceId/provider-runner',
+    description: 'Attach the provider identity after the provisioner launches a runner instance',
+    schema: {
+        params: z.object({
+            runnerInstanceId: z.string().uuid()
+        }),
+        body: attachRunnerControlProviderIdBodySchema,
+        response: {
+            200: z.object({
+                attached: z.boolean()
+            })
+        }
+    },
+    handler: async (request)=>{
+        const { provisionerTokenId } = requireProvisionerContext(request);
+        return {
+            attached: await attachRunnerInstanceProviderId({
+                runnerInstanceId: request.params.runnerInstanceId,
+                provisionerId: provisionerTokenId,
+                providerRunnerId: request.body.provider_runner_id
+            })
+        };
+    }
+});
 export const exchangeRunnerBootstrapRoute = defineRoute({
     method: 'POST',
     path: '/exchange',

package/dist/presentation/routes/runner-enrollment.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/runner-enrollment.ts"],"sourcesContent":["import {\n  requireProvisionerContext,\n  requireRunnerControlSessionContext,\n} from '@shipfox/api-auth-context';\nimport {\n  attachRunnerControlProviderIdBodySchema,\n  createRunnerInstancesBodySchema,\n  createRunnerInstancesResponseSchema,\n  runnerAssignmentPollResponseSchema,\n  runnerBootstrapExchangeBodySchema,\n  runnerBootstrapExchangeResponseSchema,\n  runnerControlHeartbeatResponseSchema,\n  runnerEnrollmentBodySchema,\n} from '@shipfox/api-runners-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {config} from '#config.js';\nimport {getRunnerAssignment, issueRunnerActivationToken} from '#core/runner-activation.js';\nimport {\n  attachRunnerControlProviderId,\n  createRunnerInstancesWithBootstrapTokens,\n  enrollRunnerControlSession,\n  exchangeRunnerBootstrapToken,\n  RunnerBootstrapTokenInvalidError,\n  RunnerControlSessionInvalidError,\n  touchRunnerControlSession,\n} from '#core/runner-control-sessions.js';\nimport {runnerBootstrapExchangeCount, runnerControlHeartbeatCount} from '#metrics/instance.js';\nimport {authenticateRunnerControlSession} from '#presentation/auth/index.js';\n\nexport const createRunnerInstancesRoute = defineRoute({\n  method: 'POST',\n  path: '/runner-instances/batch',\n  description:\n    'Create provisioner-owned runner instances and one-use bootstrap tokens before launch',\n  schema: {\n    body: createRunnerInstancesBodySchema,\n    response: {200: createRunnerInstancesResponseSchema},\n  },\n  handler: async (request) => {\n    const {provisionerTokenId} = requireProvisionerContext(request);\n    const results = await createRunnerInstancesWithBootstrapTokens({\n      provisionerId: provisionerTokenId,\n      ...(request.body.provider_kind ? {providerKind: request.body.provider_kind} : {}),\n      runnerInstances: request.body.runner_instances.map((runner) =>\n        runner.template_key ? {templateKey: runner.template_key} : {},\n      ),\n      ttlSeconds: config.RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS,\n    });\n    return {\n      runner_instances: results.map((result) => ({\n        runner_instance_id: result.runnerInstanceId,\n        bootstrap_token: result.bootstrapToken,\n      })),\n    };\n  },\n});\n\nexport const exchangeRunnerBootstrapRoute = defineRoute({\n  method: 'POST',\n  path: '/exchange',\n  description: 'Exchange a one-use runner bootstrap token for a workspace-neutral control session',\n  schema: {\n    body: runnerBootstrapExchangeBodySchema,\n    response: {200: runnerBootstrapExchangeResponseSchema},\n  },\n  errorHandler: (error) => {\n    if (error instanceof RunnerBootstrapTokenInvalidError)\n      runnerBootstrapExchangeCount.add(1, {outcome: 'rejected'});\n    if (error instanceof RunnerBootstrapTokenInvalidError)\n      throw new ClientError(error.message, 'runner-bootstrap-token-invalid', {status: 401});\n    throw error;\n  },\n  handler: async (request) => {\n    const result = await exchangeRunnerBootstrapToken({\n      rawToken: request.body.bootstrap_token,\n      ttlSeconds: config.RUNNER_CONTROL_SESSION_TTL_SECONDS,\n    });\n    runnerBootstrapExchangeCount.add(1, {outcome: 'accepted'});\n    return {\n      runner_instance_id: result.runnerInstanceId,\n      control_session_token: result.controlSessionToken,\n      expires_at: result.expiresAt.toISOString(),\n    };\n  },\n});\n\nexport const enrollRunnerRoute = defineRoute({\n  method: 'POST',\n  path: '/enrollment',\n  description: 'Declare the authenticated runner instance labels and protocol capabilities',\n  schema: {body: runnerEnrollmentBodySchema, response: {204: z.null()}},\n  preHandler: authenticateRunnerControlSession,\n  errorHandler: (error) => {\n    if (error instanceof RunnerControlSessionInvalidError)\n      throw new ClientError(error.message, 'runner-control-session-invalid', {status: 409});\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const session = requireRunnerControlSessionContext(request);\n    await enrollRunnerControlSession({\n      runnerInstanceId: session.runnerInstanceId,\n      provisionerId: session.provisionerId,\n      labels: request.body.labels,\n      ...(request.body.capabilities ? {capabilities: request.body.capabilities} : {}),\n      providerKind: request.body.provider_kind,\n      protocolVersion: request.body.protocol_version,\n    });\n    return await reply.code(204).send();\n  },\n});\n\nexport const attachRunnerControlProviderIdRoute = defineRoute({\n  method: 'POST',\n  path: '/provider-runner',\n  description: 'Attach the authenticated runner instance provider identity once',\n  schema: {\n    body: attachRunnerControlProviderIdBodySchema,\n    response: {200: z.object({attached: z.boolean()})},\n  },\n  preHandler: authenticateRunnerControlSession,\n  handler: async (request) => {\n    const session = requireRunnerControlSessionContext(request);\n    return {\n      attached: await attachRunnerControlProviderId({\n        ...session,\n        providerRunnerId: request.body.provider_runner_id,\n      }),\n    };\n  },\n});\n\nexport const runnerControlHeartbeatRoute = defineRoute({\n  method: 'POST',\n  path: '/heartbeat',\n  description: 'Record liveness for only the authenticated runner instance',\n  schema: {response: {200: runnerControlHeartbeatResponseSchema}},\n  preHandler: authenticateRunnerControlSession,\n  handler: async (request) => {\n    const session = requireRunnerControlSessionContext(request);\n    await touchRunnerControlSession(session.runnerInstanceId, session.provisionerId);\n    runnerControlHeartbeatCount.add(1);\n    return {ok: true};\n  },\n});\n\nexport const runnerAssignmentPollRoute = defineRoute({\n  method: 'GET',\n  path: '/assignment',\n  description: 'Wait for only the authenticated runner instance assignment',\n  schema: {response: {200: runnerAssignmentPollResponseSchema}},\n  preHandler: authenticateRunnerControlSession,\n  handler: async (request, reply) => {\n    const session = requireRunnerControlSessionContext(request);\n    const deadline = Date.now() + config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS * 1000;\n    const abortController = new AbortController();\n    reply.raw.on('close', () => abortController.abort());\n    while (Date.now() <= deadline) {\n      if (abortController.signal.aborted) return {activation_token: null};\n      const assignment = await getRunnerAssignment(session);\n      if (assignment) {\n        const activationToken = await issueRunnerActivationToken({\n          ...session,\n          ttlSeconds: config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS,\n        });\n        return {activation_token: activationToken};\n      }\n      await new Promise((resolve) =>\n        setTimeout(resolve, config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS),\n      );\n    }\n    return {activation_token: null};\n  },\n});\n"],"names":["requireProvisionerContext","requireRunnerControlSessionContext","attachRunnerControlProviderIdBodySchema","createRunnerInstancesBodySchema","createRunnerInstancesResponseSchema","runnerAssignmentPollResponseSchema","runnerBootstrapExchangeBodySchema","runnerBootstrapExchangeResponseSchema","runnerControlHeartbeatResponseSchema","runnerEnrollmentBodySchema","ClientError","defineRoute","z","config","getRunnerAssignment","issueRunnerActivationToken","attachRunnerControlProviderId","createRunnerInstancesWithBootstrapTokens","enrollRunnerControlSession","exchangeRunnerBootstrapToken","RunnerBootstrapTokenInvalidError","RunnerControlSessionInvalidError","touchRunnerControlSession","runnerBootstrapExchangeCount","runnerControlHeartbeatCount","authenticateRunnerControlSession","createRunnerInstancesRoute","method","path","description","schema","body","response","handler","request","provisionerTokenId","results","provisionerId","provider_kind","providerKind","runnerInstances","runner_instances","map","runner","template_key","templateKey","ttlSeconds","RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS","result","runner_instance_id","runnerInstanceId","bootstrap_token","bootstrapToken","exchangeRunnerBootstrapRoute","errorHandler","error","add","outcome","message","status","rawToken","RUNNER_CONTROL_SESSION_TTL_SECONDS","control_session_token","controlSessionToken","expires_at","expiresAt","toISOString","enrollRunnerRoute","null","preHandler","reply","session","labels","capabilities","protocolVersion","protocol_version","code","send","attachRunnerControlProviderIdRoute","object","attached","boolean","providerRunnerId","provider_runner_id","runnerControlHeartbeatRoute","ok","runnerAssignmentPollRoute","deadline","Date","now","RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS","abortController","AbortController","raw","on","abort","signal","aborted","activation_token","assignment","activationToken","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","Promise","resolve","setTimeout","RUNNER_ASSIGNMENT_POLL_INTERVAL_MS"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,kCAAkC,QAC7B,4BAA4B;AACnC,SACEC,uCAAuC,EACvCC,+BAA+B,EAC/BC,mCAAmC,EACnCC,kCAAkC,EAClCC,iCAAiC,EACjCC,qCAAqC,EACrCC,oCAAoC,EACpCC,0BAA0B,QACrB,2BAA2B;AAClC,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,mBAAmB,EAAEC,0BAA0B,QAAO,6BAA6B;AAC3F,SACEC,6BAA6B,EAC7BC,wCAAwC,EACxCC,0BAA0B,EAC1BC,4BAA4B,EAC5BC,gCAAgC,EAChCC,gCAAgC,EAChCC,yBAAyB,QACpB,mCAAmC;AAC1C,SAAQC,4BAA4B,EAAEC,2BAA2B,QAAO,uBAAuB;AAC/F,SAAQC,gCAAgC,QAAO,8BAA8B;AAE7E,OAAO,MAAMC,6BAA6Bf,YAAY;IACpDgB,QAAQ;IACRC,MAAM;IACNC,aACE;IACFC,QAAQ;QACNC,MAAM5B;QACN6B,UAAU;YAAC,KAAK5B;QAAmC;IACrD;IACA6B,SAAS,OAAOC;QACd,MAAM,EAACC,kBAAkB,EAAC,GAAGnC,0BAA0BkC;QACvD,MAAME,UAAU,MAAMnB,yCAAyC;YAC7DoB,eAAeF;YACf,GAAID,QAAQH,IAAI,CAACO,aAAa,GAAG;gBAACC,cAAcL,QAAQH,IAAI,CAACO,aAAa;YAAA,IAAI,CAAC,CAAC;YAChFE,iBAAiBN,QAAQH,IAAI,CAACU,gBAAgB,CAACC,GAAG,CAAC,CAACC,SAClDA,OAAOC,YAAY,GAAG;oBAACC,aAAaF,OAAOC,YAAY;gBAAA,IAAI,CAAC;YAE9DE,YAAYjC,OAAOkC,kCAAkC;QACvD;QACA,OAAO;YACLN,kBAAkBL,QAAQM,GAAG,CAAC,CAACM,SAAY,CAAA;oBACzCC,oBAAoBD,OAAOE,gBAAgB;oBAC3CC,iBAAiBH,OAAOI,cAAc;gBACxC,CAAA;QACF;IACF;AACF,GAAG;AAEH,OAAO,MAAMC,+BAA+B1C,YAAY;IACtDgB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMzB;QACN0B,UAAU;YAAC,KAAKzB;QAAqC;IACvD;IACA+C,cAAc,CAACC;QACb,IAAIA,iBAAiBnC,kCACnBG,6BAA6BiC,GAAG,CAAC,GAAG;YAACC,SAAS;QAAU;QAC1D,IAAIF,iBAAiBnC,kCACnB,MAAM,IAAIV,YAAY6C,MAAMG,OAAO,EAAE,kCAAkC;YAACC,QAAQ;QAAG;QACrF,MAAMJ;IACR;IACAtB,SAAS,OAAOC;QACd,MAAMc,SAAS,MAAM7B,6BAA6B;YAChDyC,UAAU1B,QAAQH,IAAI,CAACoB,eAAe;YACtCL,YAAYjC,OAAOgD,kCAAkC;QACvD;QACAtC,6BAA6BiC,GAAG,CAAC,GAAG;YAACC,SAAS;QAAU;QACxD,OAAO;YACLR,oBAAoBD,OAAOE,gBAAgB;YAC3CY,uBAAuBd,OAAOe,mBAAmB;YACjDC,YAAYhB,OAAOiB,SAAS,CAACC,WAAW;QAC1C;IACF;AACF,GAAG;AAEH,OAAO,MAAMC,oBAAoBxD,YAAY;IAC3CgB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QAACC,MAAMtB;QAA4BuB,UAAU;YAAC,KAAKpB,EAAEwD,IAAI;QAAE;IAAC;IACpEC,YAAY5C;IACZ6B,cAAc,CAACC;QACb,IAAIA,iBAAiBlC,kCACnB,MAAM,IAAIX,YAAY6C,MAAMG,OAAO,EAAE,kCAAkC;YAACC,QAAQ;QAAG;QACrF,MAAMJ;IACR;IACAtB,SAAS,OAAOC,SAASoC;QACvB,MAAMC,UAAUtE,mCAAmCiC;QACnD,MAAMhB,2BAA2B;YAC/BgC,kBAAkBqB,QAAQrB,gBAAgB;YAC1Cb,eAAekC,QAAQlC,aAAa;YACpCmC,QAAQtC,QAAQH,IAAI,CAACyC,MAAM;YAC3B,GAAItC,QAAQH,IAAI,CAAC0C,YAAY,GAAG;gBAACA,cAAcvC,QAAQH,IAAI,CAAC0C,YAAY;YAAA,IAAI,CAAC,CAAC;YAC9ElC,cAAcL,QAAQH,IAAI,CAACO,aAAa;YACxCoC,iBAAiBxC,QAAQH,IAAI,CAAC4C,gBAAgB;QAChD;QACA,OAAO,MAAML,MAAMM,IAAI,CAAC,KAAKC,IAAI;IACnC;AACF,GAAG;AAEH,OAAO,MAAMC,qCAAqCnE,YAAY;IAC5DgB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAM7B;QACN8B,UAAU;YAAC,KAAKpB,EAAEmE,MAAM,CAAC;gBAACC,UAAUpE,EAAEqE,OAAO;YAAE;QAAE;IACnD;IACAZ,YAAY5C;IACZQ,SAAS,OAAOC;QACd,MAAMqC,UAAUtE,mCAAmCiC;QACnD,OAAO;YACL8C,UAAU,MAAMhE,8BAA8B;gBAC5C,GAAGuD,OAAO;gBACVW,kBAAkBhD,QAAQH,IAAI,CAACoD,kBAAkB;YACnD;QACF;IACF;AACF,GAAG;AAEH,OAAO,MAAMC,8BAA8BzE,YAAY;IACrDgB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QAACE,UAAU;YAAC,KAAKxB;QAAoC;IAAC;IAC9D6D,YAAY5C;IACZQ,SAAS,OAAOC;QACd,MAAMqC,UAAUtE,mCAAmCiC;QACnD,MAAMZ,0BAA0BiD,QAAQrB,gBAAgB,EAAEqB,QAAQlC,aAAa;QAC/Eb,4BAA4BgC,GAAG,CAAC;QAChC,OAAO;YAAC6B,IAAI;QAAI;IAClB;AACF,GAAG;AAEH,OAAO,MAAMC,4BAA4B3E,YAAY;IACnDgB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QAACE,UAAU;YAAC,KAAK3B;QAAkC;IAAC;IAC5DgE,YAAY5C;IACZQ,SAAS,OAAOC,SAASoC;QACvB,MAAMC,UAAUtE,mCAAmCiC;QACnD,MAAMqD,WAAWC,KAAKC,GAAG,KAAK5E,OAAO6E,uCAAuC,GAAG;QAC/E,MAAMC,kBAAkB,IAAIC;QAC5BtB,MAAMuB,GAAG,CAACC,EAAE,CAAC,SAAS,IAAMH,gBAAgBI,KAAK;QACjD,MAAOP,KAAKC,GAAG,MAAMF,SAAU;YAC7B,IAAII,gBAAgBK,MAAM,CAACC,OAAO,EAAE,OAAO;gBAACC,kBAAkB;YAAI;YAClE,MAAMC,aAAa,MAAMrF,oBAAoByD;YAC7C,IAAI4B,YAAY;gBACd,MAAMC,kBAAkB,MAAMrF,2BAA2B;oBACvD,GAAGwD,OAAO;oBACVzB,YAAYjC,OAAOwF,mCAAmC;gBACxD;gBACA,OAAO;oBAACH,kBAAkBE;gBAAe;YAC3C;YACA,MAAM,IAAIE,QAAQ,CAACC,UACjBC,WAAWD,SAAS1F,OAAO4F,kCAAkC;QAEjE;QACA,OAAO;YAACP,kBAAkB;QAAI;IAChC;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/runner-enrollment.ts"],"sourcesContent":["import {\n  requireProvisionerContext,\n  requireRunnerControlSessionContext,\n} from '@shipfox/api-auth-context';\nimport {\n  attachRunnerControlProviderIdBodySchema,\n  createRunnerInstancesBodySchema,\n  createRunnerInstancesResponseSchema,\n  runnerAssignmentPollResponseSchema,\n  runnerBootstrapExchangeBodySchema,\n  runnerBootstrapExchangeResponseSchema,\n  runnerControlHeartbeatResponseSchema,\n  runnerEnrollmentBodySchema,\n} from '@shipfox/api-runners-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {config} from '#config.js';\nimport {getRunnerAssignment, issueRunnerActivationToken} from '#core/runner-activation.js';\nimport {\n  attachRunnerControlProviderId,\n  createRunnerInstancesWithBootstrapTokens,\n  enrollRunnerControlSession,\n  exchangeRunnerBootstrapToken,\n  RunnerBootstrapTokenInvalidError,\n  RunnerControlSessionInvalidError,\n  touchRunnerControlSession,\n} from '#core/runner-control-sessions.js';\nimport {attachRunnerInstanceProviderId} from '#core/runner-instances.js';\nimport {runnerBootstrapExchangeCount, runnerControlHeartbeatCount} from '#metrics/instance.js';\nimport {authenticateRunnerControlSession} from '#presentation/auth/index.js';\n\nexport const createRunnerInstancesRoute = defineRoute({\n  method: 'POST',\n  path: '/runner-instances/batch',\n  description:\n    'Create provisioner-owned runner instances and one-use bootstrap tokens before launch',\n  schema: {\n    body: createRunnerInstancesBodySchema,\n    response: {200: createRunnerInstancesResponseSchema},\n  },\n  handler: async (request) => {\n    const {provisionerTokenId} = requireProvisionerContext(request);\n    const results = await createRunnerInstancesWithBootstrapTokens({\n      provisionerId: provisionerTokenId,\n      ...(request.body.provider_kind ? {providerKind: request.body.provider_kind} : {}),\n      runnerInstances: request.body.runner_instances.map((runner) =>\n        runner.template_key ? {templateKey: runner.template_key} : {},\n      ),\n      ttlSeconds: config.RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS,\n    });\n    return {\n      runner_instances: results.map((result) => ({\n        runner_instance_id: result.runnerInstanceId,\n        bootstrap_token: result.bootstrapToken,\n      })),\n    };\n  },\n});\n\nexport const attachRunnerInstanceProviderIdRoute = defineRoute({\n  method: 'POST',\n  path: '/runner-instances/:runnerInstanceId/provider-runner',\n  description: 'Attach the provider identity after the provisioner launches a runner instance',\n  schema: {\n    params: z.object({runnerInstanceId: z.string().uuid()}),\n    body: attachRunnerControlProviderIdBodySchema,\n    response: {200: z.object({attached: z.boolean()})},\n  },\n  handler: async (request) => {\n    const {provisionerTokenId} = requireProvisionerContext(request);\n    return {\n      attached: await attachRunnerInstanceProviderId({\n        runnerInstanceId: request.params.runnerInstanceId,\n        provisionerId: provisionerTokenId,\n        providerRunnerId: request.body.provider_runner_id,\n      }),\n    };\n  },\n});\n\nexport const exchangeRunnerBootstrapRoute = defineRoute({\n  method: 'POST',\n  path: '/exchange',\n  description: 'Exchange a one-use runner bootstrap token for a workspace-neutral control session',\n  schema: {\n    body: runnerBootstrapExchangeBodySchema,\n    response: {200: runnerBootstrapExchangeResponseSchema},\n  },\n  errorHandler: (error) => {\n    if (error instanceof RunnerBootstrapTokenInvalidError)\n      runnerBootstrapExchangeCount.add(1, {outcome: 'rejected'});\n    if (error instanceof RunnerBootstrapTokenInvalidError)\n      throw new ClientError(error.message, 'runner-bootstrap-token-invalid', {status: 401});\n    throw error;\n  },\n  handler: async (request) => {\n    const result = await exchangeRunnerBootstrapToken({\n      rawToken: request.body.bootstrap_token,\n      ttlSeconds: config.RUNNER_CONTROL_SESSION_TTL_SECONDS,\n    });\n    runnerBootstrapExchangeCount.add(1, {outcome: 'accepted'});\n    return {\n      runner_instance_id: result.runnerInstanceId,\n      control_session_token: result.controlSessionToken,\n      expires_at: result.expiresAt.toISOString(),\n    };\n  },\n});\n\nexport const enrollRunnerRoute = defineRoute({\n  method: 'POST',\n  path: '/enrollment',\n  description: 'Declare the authenticated runner instance labels and protocol capabilities',\n  schema: {body: runnerEnrollmentBodySchema, response: {204: z.null()}},\n  preHandler: authenticateRunnerControlSession,\n  errorHandler: (error) => {\n    if (error instanceof RunnerControlSessionInvalidError)\n      throw new ClientError(error.message, 'runner-control-session-invalid', {status: 409});\n    throw error;\n  },\n  handler: async (request, reply) => {\n    const session = requireRunnerControlSessionContext(request);\n    await enrollRunnerControlSession({\n      runnerInstanceId: session.runnerInstanceId,\n      provisionerId: session.provisionerId,\n      labels: request.body.labels,\n      ...(request.body.capabilities ? {capabilities: request.body.capabilities} : {}),\n      providerKind: request.body.provider_kind,\n      protocolVersion: request.body.protocol_version,\n    });\n    return await reply.code(204).send();\n  },\n});\n\nexport const attachRunnerControlProviderIdRoute = defineRoute({\n  method: 'POST',\n  path: '/provider-runner',\n  description: 'Attach the authenticated runner instance provider identity once',\n  schema: {\n    body: attachRunnerControlProviderIdBodySchema,\n    response: {200: z.object({attached: z.boolean()})},\n  },\n  preHandler: authenticateRunnerControlSession,\n  handler: async (request) => {\n    const session = requireRunnerControlSessionContext(request);\n    return {\n      attached: await attachRunnerControlProviderId({\n        ...session,\n        providerRunnerId: request.body.provider_runner_id,\n      }),\n    };\n  },\n});\n\nexport const runnerControlHeartbeatRoute = defineRoute({\n  method: 'POST',\n  path: '/heartbeat',\n  description: 'Record liveness for only the authenticated runner instance',\n  schema: {response: {200: runnerControlHeartbeatResponseSchema}},\n  preHandler: authenticateRunnerControlSession,\n  handler: async (request) => {\n    const session = requireRunnerControlSessionContext(request);\n    await touchRunnerControlSession(session.runnerInstanceId, session.provisionerId);\n    runnerControlHeartbeatCount.add(1);\n    return {ok: true};\n  },\n});\n\nexport const runnerAssignmentPollRoute = defineRoute({\n  method: 'GET',\n  path: '/assignment',\n  description: 'Wait for only the authenticated runner instance assignment',\n  schema: {response: {200: runnerAssignmentPollResponseSchema}},\n  preHandler: authenticateRunnerControlSession,\n  handler: async (request, reply) => {\n    const session = requireRunnerControlSessionContext(request);\n    const deadline = Date.now() + config.RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS * 1000;\n    const abortController = new AbortController();\n    reply.raw.on('close', () => abortController.abort());\n    while (Date.now() <= deadline) {\n      if (abortController.signal.aborted) return {activation_token: null};\n      const assignment = await getRunnerAssignment(session);\n      if (assignment) {\n        const activationToken = await issueRunnerActivationToken({\n          ...session,\n          ttlSeconds: config.RUNNER_ACTIVATION_TOKEN_TTL_SECONDS,\n        });\n        return {activation_token: activationToken};\n      }\n      await new Promise((resolve) =>\n        setTimeout(resolve, config.RUNNER_ASSIGNMENT_POLL_INTERVAL_MS),\n      );\n    }\n    return {activation_token: null};\n  },\n});\n"],"names":["requireProvisionerContext","requireRunnerControlSessionContext","attachRunnerControlProviderIdBodySchema","createRunnerInstancesBodySchema","createRunnerInstancesResponseSchema","runnerAssignmentPollResponseSchema","runnerBootstrapExchangeBodySchema","runnerBootstrapExchangeResponseSchema","runnerControlHeartbeatResponseSchema","runnerEnrollmentBodySchema","ClientError","defineRoute","z","config","getRunnerAssignment","issueRunnerActivationToken","attachRunnerControlProviderId","createRunnerInstancesWithBootstrapTokens","enrollRunnerControlSession","exchangeRunnerBootstrapToken","RunnerBootstrapTokenInvalidError","RunnerControlSessionInvalidError","touchRunnerControlSession","attachRunnerInstanceProviderId","runnerBootstrapExchangeCount","runnerControlHeartbeatCount","authenticateRunnerControlSession","createRunnerInstancesRoute","method","path","description","schema","body","response","handler","request","provisionerTokenId","results","provisionerId","provider_kind","providerKind","runnerInstances","runner_instances","map","runner","template_key","templateKey","ttlSeconds","RUNNER_BOOTSTRAP_TOKEN_TTL_SECONDS","result","runner_instance_id","runnerInstanceId","bootstrap_token","bootstrapToken","attachRunnerInstanceProviderIdRoute","params","object","string","uuid","attached","boolean","providerRunnerId","provider_runner_id","exchangeRunnerBootstrapRoute","errorHandler","error","add","outcome","message","status","rawToken","RUNNER_CONTROL_SESSION_TTL_SECONDS","control_session_token","controlSessionToken","expires_at","expiresAt","toISOString","enrollRunnerRoute","null","preHandler","reply","session","labels","capabilities","protocolVersion","protocol_version","code","send","attachRunnerControlProviderIdRoute","runnerControlHeartbeatRoute","ok","runnerAssignmentPollRoute","deadline","Date","now","RUNNER_ASSIGNMENT_POLL_MAX_WAIT_SECONDS","abortController","AbortController","raw","on","abort","signal","aborted","activation_token","assignment","activationToken","RUNNER_ACTIVATION_TOKEN_TTL_SECONDS","Promise","resolve","setTimeout","RUNNER_ASSIGNMENT_POLL_INTERVAL_MS"],"mappings":"AAAA,SACEA,yBAAyB,EACzBC,kCAAkC,QAC7B,4BAA4B;AACnC,SACEC,uCAAuC,EACvCC,+BAA+B,EAC/BC,mCAAmC,EACnCC,kCAAkC,EAClCC,iCAAiC,EACjCC,qCAAqC,EACrCC,oCAAoC,EACpCC,0BAA0B,QACrB,2BAA2B;AAClC,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,mBAAmB,EAAEC,0BAA0B,QAAO,6BAA6B;AAC3F,SACEC,6BAA6B,EAC7BC,wCAAwC,EACxCC,0BAA0B,EAC1BC,4BAA4B,EAC5BC,gCAAgC,EAChCC,gCAAgC,EAChCC,yBAAyB,QACpB,mCAAmC;AAC1C,SAAQC,8BAA8B,QAAO,4BAA4B;AACzE,SAAQC,4BAA4B,EAAEC,2BAA2B,QAAO,uBAAuB;AAC/F,SAAQC,gCAAgC,QAAO,8BAA8B;AAE7E,OAAO,MAAMC,6BAA6BhB,YAAY;IACpDiB,QAAQ;IACRC,MAAM;IACNC,aACE;IACFC,QAAQ;QACNC,MAAM7B;QACN8B,UAAU;YAAC,KAAK7B;QAAmC;IACrD;IACA8B,SAAS,OAAOC;QACd,MAAM,EAACC,kBAAkB,EAAC,GAAGpC,0BAA0BmC;QACvD,MAAME,UAAU,MAAMpB,yCAAyC;YAC7DqB,eAAeF;YACf,GAAID,QAAQH,IAAI,CAACO,aAAa,GAAG;gBAACC,cAAcL,QAAQH,IAAI,CAACO,aAAa;YAAA,IAAI,CAAC,CAAC;YAChFE,iBAAiBN,QAAQH,IAAI,CAACU,gBAAgB,CAACC,GAAG,CAAC,CAACC,SAClDA,OAAOC,YAAY,GAAG;oBAACC,aAAaF,OAAOC,YAAY;gBAAA,IAAI,CAAC;YAE9DE,YAAYlC,OAAOmC,kCAAkC;QACvD;QACA,OAAO;YACLN,kBAAkBL,QAAQM,GAAG,CAAC,CAACM,SAAY,CAAA;oBACzCC,oBAAoBD,OAAOE,gBAAgB;oBAC3CC,iBAAiBH,OAAOI,cAAc;gBACxC,CAAA;QACF;IACF;AACF,GAAG;AAEH,OAAO,MAAMC,sCAAsC3C,YAAY;IAC7DiB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNwB,QAAQ3C,EAAE4C,MAAM,CAAC;YAACL,kBAAkBvC,EAAE6C,MAAM,GAAGC,IAAI;QAAE;QACrD1B,MAAM9B;QACN+B,UAAU;YAAC,KAAKrB,EAAE4C,MAAM,CAAC;gBAACG,UAAU/C,EAAEgD,OAAO;YAAE;QAAE;IACnD;IACA1B,SAAS,OAAOC;QACd,MAAM,EAACC,kBAAkB,EAAC,GAAGpC,0BAA0BmC;QACvD,OAAO;YACLwB,UAAU,MAAMpC,+BAA+B;gBAC7C4B,kBAAkBhB,QAAQoB,MAAM,CAACJ,gBAAgB;gBACjDb,eAAeF;gBACfyB,kBAAkB1B,QAAQH,IAAI,CAAC8B,kBAAkB;YACnD;QACF;IACF;AACF,GAAG;AAEH,OAAO,MAAMC,+BAA+BpD,YAAY;IACtDiB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAM1B;QACN2B,UAAU;YAAC,KAAK1B;QAAqC;IACvD;IACAyD,cAAc,CAACC;QACb,IAAIA,iBAAiB7C,kCACnBI,6BAA6B0C,GAAG,CAAC,GAAG;YAACC,SAAS;QAAU;QAC1D,IAAIF,iBAAiB7C,kCACnB,MAAM,IAAIV,YAAYuD,MAAMG,OAAO,EAAE,kCAAkC;YAACC,QAAQ;QAAG;QACrF,MAAMJ;IACR;IACA/B,SAAS,OAAOC;QACd,MAAMc,SAAS,MAAM9B,6BAA6B;YAChDmD,UAAUnC,QAAQH,IAAI,CAACoB,eAAe;YACtCL,YAAYlC,OAAO0D,kCAAkC;QACvD;QACA/C,6BAA6B0C,GAAG,CAAC,GAAG;YAACC,SAAS;QAAU;QACxD,OAAO;YACLjB,oBAAoBD,OAAOE,gBAAgB;YAC3CqB,uBAAuBvB,OAAOwB,mBAAmB;YACjDC,YAAYzB,OAAO0B,SAAS,CAACC,WAAW;QAC1C;IACF;AACF,GAAG;AAEH,OAAO,MAAMC,oBAAoBlE,YAAY;IAC3CiB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QAACC,MAAMvB;QAA4BwB,UAAU;YAAC,KAAKrB,EAAEkE,IAAI;QAAE;IAAC;IACpEC,YAAYrD;IACZsC,cAAc,CAACC;QACb,IAAIA,iBAAiB5C,kCACnB,MAAM,IAAIX,YAAYuD,MAAMG,OAAO,EAAE,kCAAkC;YAACC,QAAQ;QAAG;QACrF,MAAMJ;IACR;IACA/B,SAAS,OAAOC,SAAS6C;QACvB,MAAMC,UAAUhF,mCAAmCkC;QACnD,MAAMjB,2BAA2B;YAC/BiC,kBAAkB8B,QAAQ9B,gBAAgB;YAC1Cb,eAAe2C,QAAQ3C,aAAa;YACpC4C,QAAQ/C,QAAQH,IAAI,CAACkD,MAAM;YAC3B,GAAI/C,QAAQH,IAAI,CAACmD,YAAY,GAAG;gBAACA,cAAchD,QAAQH,IAAI,CAACmD,YAAY;YAAA,IAAI,CAAC,CAAC;YAC9E3C,cAAcL,QAAQH,IAAI,CAACO,aAAa;YACxC6C,iBAAiBjD,QAAQH,IAAI,CAACqD,gBAAgB;QAChD;QACA,OAAO,MAAML,MAAMM,IAAI,CAAC,KAAKC,IAAI;IACnC;AACF,GAAG;AAEH,OAAO,MAAMC,qCAAqC7E,YAAY;IAC5DiB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAM9B;QACN+B,UAAU;YAAC,KAAKrB,EAAE4C,MAAM,CAAC;gBAACG,UAAU/C,EAAEgD,OAAO;YAAE;QAAE;IACnD;IACAmB,YAAYrD;IACZQ,SAAS,OAAOC;QACd,MAAM8C,UAAUhF,mCAAmCkC;QACnD,OAAO;YACLwB,UAAU,MAAM3C,8BAA8B;gBAC5C,GAAGiE,OAAO;gBACVpB,kBAAkB1B,QAAQH,IAAI,CAAC8B,kBAAkB;YACnD;QACF;IACF;AACF,GAAG;AAEH,OAAO,MAAM2B,8BAA8B9E,YAAY;IACrDiB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QAACE,UAAU;YAAC,KAAKzB;QAAoC;IAAC;IAC9DuE,YAAYrD;IACZQ,SAAS,OAAOC;QACd,MAAM8C,UAAUhF,mCAAmCkC;QACnD,MAAMb,0BAA0B2D,QAAQ9B,gBAAgB,EAAE8B,QAAQ3C,aAAa;QAC/Eb,4BAA4ByC,GAAG,CAAC;QAChC,OAAO;YAACwB,IAAI;QAAI;IAClB;AACF,GAAG;AAEH,OAAO,MAAMC,4BAA4BhF,YAAY;IACnDiB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QAACE,UAAU;YAAC,KAAK5B;QAAkC;IAAC;IAC5D0E,YAAYrD;IACZQ,SAAS,OAAOC,SAAS6C;QACvB,MAAMC,UAAUhF,mCAAmCkC;QACnD,MAAMyD,WAAWC,KAAKC,GAAG,KAAKjF,OAAOkF,uCAAuC,GAAG;QAC/E,MAAMC,kBAAkB,IAAIC;QAC5BjB,MAAMkB,GAAG,CAACC,EAAE,CAAC,SAAS,IAAMH,gBAAgBI,KAAK;QACjD,MAAOP,KAAKC,GAAG,MAAMF,SAAU;YAC7B,IAAII,gBAAgBK,MAAM,CAACC,OAAO,EAAE,OAAO;gBAACC,kBAAkB;YAAI;YAClE,MAAMC,aAAa,MAAM1F,oBAAoBmE;YAC7C,IAAIuB,YAAY;gBACd,MAAMC,kBAAkB,MAAM1F,2BAA2B;oBACvD,GAAGkE,OAAO;oBACVlC,YAAYlC,OAAO6F,mCAAmC;gBACxD;gBACA,OAAO;oBAACH,kBAAkBE;gBAAe;YAC3C;YACA,MAAM,IAAIE,QAAQ,CAACC,UACjBC,WAAWD,SAAS/F,OAAOiG,kCAAkC;QAEjE;QACA,OAAO;YAACP,kBAAkB;QAAI;IAChC;AACF,GAAG"}