@shipfox/api-server 7.0.2 → 8.0.0

package/package.json

@@ -2,7 +2,7 @@
   "name": "@shipfox/api-server",
   "license": "MIT",
   "private": false,
-  "version": "7.0.2",
+  "version": "8.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ShipfoxHQ/shipfox.git",
@@ -25,37 +25,37 @@
     }
   },
   "dependencies": {
-    "@shipfox/annotations": "6.0.0",
+    "@shipfox/annotations": "8.0.0",
     "@shipfox/annotations-dto": "6.0.0",
-    "@shipfox/api-agent": "6.0.0",
-    "@shipfox/api-agent-dto": "6.0.0",
-    "@shipfox/api-auth": "7.0.2",
-    "@shipfox/api-auth-dto": "6.0.0",
-    "@shipfox/api-definitions": "6.0.0",
+    "@shipfox/api-agent": "8.0.0",
+    "@shipfox/api-agent-dto": "8.0.0",
+    "@shipfox/api-auth": "7.1.0",
+    "@shipfox/api-auth-dto": "7.1.0",
+    "@shipfox/api-definitions": "8.0.0",
     "@shipfox/api-definitions-dto": "6.0.0",
-    "@shipfox/api-dispatcher": "6.0.0",
-    "@shipfox/api-email-challenges": "0.2.3",
-    "@shipfox/api-integration-core": "7.0.1",
-    "@shipfox/api-integration-core-dto": "6.0.0",
-    "@shipfox/api-logs": "6.0.0",
-    "@shipfox/api-projects": "6.0.0",
-    "@shipfox/api-projects-dto": "6.0.0",
-    "@shipfox/api-runners": "7.0.2",
+    "@shipfox/api-dispatcher": "7.1.0",
+    "@shipfox/api-email-challenges": "0.3.0",
+    "@shipfox/api-integration-core": "8.0.0",
+    "@shipfox/api-integration-core-dto": "8.0.0",
+    "@shipfox/api-logs": "8.0.0",
+    "@shipfox/api-projects": "8.0.0",
+    "@shipfox/api-projects-dto": "8.0.0",
+    "@shipfox/api-runners": "8.0.0",
     "@shipfox/api-runners-dto": "7.0.1",
-    "@shipfox/api-secrets": "6.0.0",
+    "@shipfox/api-secrets": "8.0.0",
     "@shipfox/api-secrets-dto": "6.0.0",
-    "@shipfox/api-triggers": "7.0.1",
-    "@shipfox/api-workflows": "7.0.2",
-    "@shipfox/api-workflows-dto": "6.0.0",
+    "@shipfox/api-triggers": "8.0.0",
+    "@shipfox/api-workflows": "8.0.0",
+    "@shipfox/api-workflows-dto": "8.0.0",
     "@shipfox/api-workspaces-dto": "6.0.0",
-    "@shipfox/api-workspaces": "7.0.1",
+    "@shipfox/api-workspaces": "7.1.0",
     "@shipfox/config": "1.2.2",
-    "@shipfox/node-error-monitoring": "0.1.3",
-    "@shipfox/node-fastify": "0.2.4",
+    "@shipfox/node-error-monitoring": "0.2.0",
+    "@shipfox/node-fastify": "0.3.0",
     "@shipfox/node-jwt": "0.3.0",
-    "@shipfox/node-opentelemetry": "0.5.2",
-    "@shipfox/node-postgres": "0.4.2",
-    "@shipfox/node-module": "0.4.0"
+    "@shipfox/node-module": "0.5.0",
+    "@shipfox/node-opentelemetry": "0.6.0",
+    "@shipfox/node-postgres": "0.4.2"
   },
   "scripts": {
     "build": "shipfox-swc",

package/src/auth-token-interoperability.test.ts

@@ -0,0 +1,52 @@
+import {AUTH_LEASED_JOB, requireLeasedJobContext} from '@shipfox/api-auth-context';
+import {closeApp, createApp, defineRoute} from '@shipfox/node-fastify';
+import {afterEach, describe, expect, it} from '@shipfox/vitest/vi';
+
+process.env.AUTH_ROOT_KEY ??= 'MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY=';
+
+const leaseRoute = defineRoute({
+  method: 'GET',
+  path: '/lease',
+  description: 'Auth composition test route.',
+  handler: (request) => {
+    const lease = requireLeasedJobContext(request);
+    return {job_id: lease.jobId, step_id: lease.currentStepId};
+  },
+});
+
+describe('Auth token interoperability', () => {
+  afterEach(async () => {
+    await closeApp();
+  });
+
+  it('accepts an Auth-issued step lease through the server route boundary', async () => {
+    const {createLeaseTokenAuthMethod, issueJobLeaseToken} = await import('@shipfox/api-auth');
+    const jobId = crypto.randomUUID();
+    const stepId = crypto.randomUUID();
+    const token = await issueJobLeaseToken({
+      jobId,
+      jobExecutionId: crypto.randomUUID(),
+      workflowRunId: crypto.randomUUID(),
+      workflowRunAttemptId: crypto.randomUUID(),
+      projectId: crypto.randomUUID(),
+      workspaceId: crypto.randomUUID(),
+      runnerSessionId: crypto.randomUUID(),
+      currentStepId: stepId,
+      currentStepAttempt: 1,
+    });
+    const app = await createApp({
+      auth: [createLeaseTokenAuthMethod()],
+      routes: [{prefix: '/runs/jobs/current', auth: AUTH_LEASED_JOB, routes: [leaseRoute]}],
+      swagger: false,
+    });
+
+    const res = await app.inject({
+      method: 'GET',
+      url: '/runs/jobs/current/lease',
+      headers: {authorization: `Bearer ${token}`},
+    });
+
+    expect(res.statusCode).toBe(200);
+    expect(res.json()).toEqual({job_id: jobId, step_id: stepId});
+  });
+});

package/src/index.ts

@@ -1,3 +1,9 @@
-export {type DefaultModulesOptions, defaultModules} from './modules.js';
+export {
+  type DefaultModulesExtension,
+  type DefaultModulesOptions,
+  type DefaultRunnersModuleFactory,
+  defaultModules,
+} from './modules.js';
+export {createLoginMethodsRoute} from './routes/login-methods.js';
 export type {CreateServerOptions, RunServerOptions, ServerHandle} from './server.js';
 export {createServer, runServer} from './server.js';

package/src/instrumentation.ts

@@ -1,8 +1,12 @@
+import {createRequire} from 'node:module';
 import {startInstanceInstrumentation} from '@shipfox/node-opentelemetry';
 
+const {version} = createRequire(import.meta.url)('../package.json') as {version: string};
+
 // The metrics API has no proxy meter: instruments created before this preload
 // completes bind to a no-op provider for the process lifetime.
 await startInstanceInstrumentation({
   serviceName: 'api',
-  instrumentations: {fastify: true, http: true, pg: true},
+  serviceVersion: version,
+  instrumentations: {fastify: true, http: true, pg: true, awsSdk: true},
 });

package/src/modules.test.ts

@@ -2,15 +2,18 @@ import {annotationsInterModuleContract} from '@shipfox/annotations-dto/inter-mod
 import {agentInterModuleContract} from '@shipfox/api-agent-dto/inter-module';
 import {authInterModuleContract} from '@shipfox/api-auth-dto/inter-module';
 import {definitionsInterModuleContract} from '@shipfox/api-definitions-dto/inter-module';
-import {integrationsInterModuleContract} from '@shipfox/api-integration-core-dto';
-import {projectsInterModuleContract} from '@shipfox/api-projects-dto';
+import {integrationsInterModuleContract} from '@shipfox/api-integration-core-dto/inter-module';
+import {projectsInterModuleContract} from '@shipfox/api-projects-dto/inter-module';
 import {runnersInterModuleContract} from '@shipfox/api-runners-dto/inter-module';
 import {
   type SecretsInterModuleClient,
   secretsInterModuleContract,
 } from '@shipfox/api-secrets-dto/inter-module';
 import {workflowsInterModuleContract} from '@shipfox/api-workflows-dto/inter-module';
-import {workspacesInterModuleContract} from '@shipfox/api-workspaces-dto/inter-module';
+import {
+  type WorkspacesInterModuleClient,
+  workspacesInterModuleContract,
+} from '@shipfox/api-workspaces-dto/inter-module';
 import {defineInterModulePresentation} from '@shipfox/inter-module';
 import {defaultModules} from './modules.js';
 
@@ -30,6 +33,7 @@ const mocks = vi.hoisted(() => ({
   deleteSecrets: vi.fn(),
   getIntegrationConnectionById: vi.fn(),
   getSecret: vi.fn(),
+  listMembershipsForTokenClaims: vi.fn(),
   setSecrets: vi.fn(),
 }));
 
@@ -96,7 +100,7 @@ vi.mock('@shipfox/api-workspaces', () => ({
       {
         contract: workspacesInterModuleContract,
         handlers: {
-          listMembershipsForTokenClaims: vi.fn(),
+          listMembershipsForTokenClaims: mocks.listMembershipsForTokenClaims,
           preflightInvitationAcceptance: vi.fn(),
           acceptInvitation: vi.fn(),
           requireActiveMembership: vi.fn(),
@@ -123,6 +127,7 @@ describe('defaultModules', () => {
     mocks.deleteSecrets.mockReset();
     mocks.getIntegrationConnectionById.mockReset();
     mocks.getSecret.mockReset();
+    mocks.listMembershipsForTokenClaims.mockReset();
     mocks.setSecrets.mockReset();
 
     mocks.createIntegrationsContext.mockResolvedValue({
@@ -147,6 +152,7 @@ describe('defaultModules', () => {
     mocks.createWorkspaceConnectionSnapshotLoader.mockReturnValue(vi.fn());
     mocks.deleteSecrets.mockResolvedValue({deleted: 1});
     mocks.getSecret.mockResolvedValue({value: 'secret'});
+    mocks.listMembershipsForTokenClaims.mockResolvedValue({memberships: []});
     mocks.setSecrets.mockResolvedValue({});
     mocks.createProjectsModule.mockReturnValue({
       name: 'projects',
@@ -182,7 +188,11 @@ describe('defaultModules', () => {
       interModulePresentations: [
         {
           contract: agentInterModuleContract,
-          handlers: {resolveAgentConfig: vi.fn(), resolveRuntimeCredentials: vi.fn()},
+          handlers: {
+            getValidationCatalog: vi.fn(),
+            resolveAgentConfig: vi.fn(),
+            resolveRuntimeCredentials: vi.fn(),
+          },
         },
       ],
     });
@@ -254,6 +264,61 @@ describe('defaultModules', () => {
     expect(mocks.createRunnersModule).toHaveBeenCalledWith({auth: expect.any(Object)});
   });
 
+  it('lets a host replace only the Runners module with the composed Auth client', async () => {
+    const policy = {filterEligibleWorkspaceIds: vi.fn().mockResolvedValue(new Set<string>())};
+    const runnersModule = mocks.createRunnersModule({});
+    const createHostRunnersModule = vi.fn(({auth}) =>
+      mocks.createRunnersModule({auth, installationProvisioning: {policy}}),
+    );
+    mocks.createRunnersModule.mockClear();
+
+    const modules = await defaultModules({runnersModule: createHostRunnersModule});
+
+    expect(createHostRunnersModule).toHaveBeenCalledWith({auth: expect.any(Object)});
+    expect(mocks.createRunnersModule).toHaveBeenCalledWith({
+      auth: createHostRunnersModule.mock.calls[0]?.[0].auth,
+      installationProvisioning: {policy},
+    });
+    expect(modules.filter((module) => module.name === 'runners')).toEqual([runnersModule]);
+    expect(modules.map((module) => module.name)).toEqual([
+      'email-challenges',
+      'auth',
+      'workspaces',
+      'secrets',
+      'agent',
+      'integrations',
+      'projects',
+      'definitions',
+      'workflows',
+      'annotations',
+      'runners',
+      'logs',
+      'triggers',
+      'dispatcher',
+    ]);
+  });
+
+  it('extends the default module list with the composed Workspaces client', async () => {
+    let workspaces: WorkspacesInterModuleClient | undefined;
+    const extensionModule = {name: 'cloud'};
+    const extension = vi.fn((options: {workspaces: WorkspacesInterModuleClient}) => {
+      workspaces = options.workspaces;
+      return [extensionModule];
+    });
+
+    const modules = await defaultModules({extension});
+    const userId = crypto.randomUUID();
+    const memberships = await workspaces?.listMembershipsForTokenClaims({userId});
+
+    expect(extension).toHaveBeenCalledWith({workspaces: expect.any(Object)});
+    expect(memberships).toEqual({memberships: []});
+    expect(mocks.listMembershipsForTokenClaims).toHaveBeenCalledWith(
+      {userId},
+      expect.objectContaining({signal: expect.any(AbortSignal)}),
+    );
+    expect(modules.at(-1)).toBe(extensionModule);
+  });
+
   it('injects Workflows into integrations and logs and namespaces provider secrets', async () => {
     await defaultModules();
 

package/src/modules.ts

@@ -4,16 +4,19 @@ import {createAgentModule} from '@shipfox/api-agent';
 import {agentInterModuleContract} from '@shipfox/api-agent-dto/inter-module';
 import {createAuthModule} from '@shipfox/api-auth';
 import {config as authConfig} from '@shipfox/api-auth/config';
-import {authInterModuleContract} from '@shipfox/api-auth-dto/inter-module';
+import {
+  type AuthInterModuleClient,
+  authInterModuleContract,
+} from '@shipfox/api-auth-dto/inter-module';
 import {createDefinitionsModule} from '@shipfox/api-definitions';
 import {definitionsInterModuleContract} from '@shipfox/api-definitions-dto/inter-module';
 import {dispatcherModule} from '@shipfox/api-dispatcher';
 import {emailChallengesModule} from '@shipfox/api-email-challenges';
 import {createIntegrationsContext, type WebhookDeliverySource} from '@shipfox/api-integration-core';
-import {integrationsInterModuleContract} from '@shipfox/api-integration-core-dto';
+import {integrationsInterModuleContract} from '@shipfox/api-integration-core-dto/inter-module';
 import {createLogsModule} from '@shipfox/api-logs';
 import {createProjectsModule} from '@shipfox/api-projects';
-import {projectsInterModuleContract} from '@shipfox/api-projects-dto';
+import {projectsInterModuleContract} from '@shipfox/api-projects-dto/inter-module';
 import {createRunnersModule} from '@shipfox/api-runners';
 import {runnersInterModuleContract} from '@shipfox/api-runners-dto/inter-module';
 import {createSecretsModule} from '@shipfox/api-secrets';
@@ -22,22 +25,46 @@ import {createTriggersModule} from '@shipfox/api-triggers';
 import {createWorkflowsModule} from '@shipfox/api-workflows';
 import {workflowsInterModuleContract} from '@shipfox/api-workflows-dto/inter-module';
 import {workspacesModule} from '@shipfox/api-workspaces';
-import {workspacesInterModuleContract} from '@shipfox/api-workspaces-dto/inter-module';
+import {
+  type WorkspacesInterModuleClient,
+  workspacesInterModuleContract,
+} from '@shipfox/api-workspaces-dto/inter-module';
+import {reportError} from '@shipfox/node-error-monitoring';
 import {durationToSeconds} from '@shipfox/node-jwt';
 import type {ShipfoxModule} from '@shipfox/node-module';
 import {
   createInMemoryInterModuleTransport,
   registerInterModulePresentations,
 } from '@shipfox/node-module/inter-module';
+import {logger} from '@shipfox/node-opentelemetry';
 
 export interface DefaultModulesOptions {
   webhookDeliverySource?: WebhookDeliverySource | undefined;
+  runnersModule?: DefaultRunnersModuleFactory | undefined;
+  extension?: DefaultModulesExtension | undefined;
 }
 
+export type DefaultRunnersModuleFactory = (options: {auth: AuthInterModuleClient}) => ShipfoxModule;
+export type DefaultModulesExtension = (options: {
+  workspaces: WorkspacesInterModuleClient;
+}) => ShipfoxModule[];
+
 export async function defaultModules(
   options: DefaultModulesOptions = {},
 ): Promise<ShipfoxModule[]> {
-  const interModuleTransport = createInMemoryInterModuleTransport();
+  const interModuleTransport = createInMemoryInterModuleTransport({
+    reportInternalError: (error, context) => {
+      logger().error(
+        {err: error, module: context.module, method: context.method, phase: context.phase},
+        'Inter-module call failed unexpectedly',
+      );
+      reportError(error, {
+        boundary: 'inter-module',
+        operation: `${context.module}.${context.method}`,
+        tags: {module: context.module, method: context.method, phase: context.phase},
+      });
+    },
+  });
   const workflowsClient = interModuleTransport.createClient(workflowsInterModuleContract);
   const authClient = interModuleTransport.createClient(authInterModuleContract);
   const agentClient = interModuleTransport.createClient(agentInterModuleContract);
@@ -131,8 +158,10 @@ export async function defaultModules(
   const projectsModule = createProjectsModule({integrations: integrationsClient});
   const definitionsModule = createDefinitionsModule({
     projects: projectsClient,
+    agent: agentClient,
     integrations: integrationsClient,
   });
+  const extensionModules = options.extension?.({workspaces: workspacesClient}) ?? [];
 
   const modules = [
     emailChallengesModule,
@@ -154,13 +183,14 @@ export async function defaultModules(
       integrations: integrationsClient,
     }),
     annotationsModule,
-    createRunnersModule({auth: authClient}),
+    (options.runnersModule ?? createRunnersModule)({auth: authClient}),
     createLogsModule({
       workflows: workflowsClient,
       jobLeaseTokenTtlSeconds: durationToSeconds(authConfig.AUTH_JOB_LEASE_TOKEN_EXPIRES_IN),
     }),
     createTriggersModule({workflows: workflowsClient}),
     dispatcherModule,
+    ...extensionModules,
   ];
   registerInterModulePresentations({transport: interModuleTransport, modules});
   interModuleTransport.seal();

package/src/routes/login-methods.test.ts

@@ -0,0 +1,56 @@
+import {createApp} from '@shipfox/node-fastify';
+import type {LoginMethod} from '@shipfox/node-module';
+import {createLoginMethodsRoute} from './login-methods.js';
+
+describe('createLoginMethodsRoute', () => {
+  it('lists registered methods exactly once, including unknown future IDs', async () => {
+    const app = await createApp({
+      auth: [],
+      routes: [
+        createLoginMethodsRoute({
+          loginMethods: [{id: 'password'}, {id: 'oauth-google'}, {id: 'future-provider'}],
+        }),
+      ],
+      swagger: false,
+    });
+
+    try {
+      const response = await app.inject({method: 'GET', url: '/auth/login-methods'});
+
+      expect(response.statusCode).toBe(200);
+      expect(response.json()).toEqual({
+        login_methods: [{id: 'password'}, {id: 'oauth-google'}, {id: 'future-provider'}],
+      });
+    } finally {
+      await app.close();
+    }
+  });
+
+  it('does not serialize module implementation details', async () => {
+    const loginMethod = {
+      id: 'oauth-google',
+      clientSecret: 'not-for-clients',
+      callbackUrl: 'https://api.example.test/auth/callback',
+    } as LoginMethod;
+    const app = await createApp({
+      auth: [],
+      routes: [createLoginMethodsRoute({loginMethods: [loginMethod]})],
+      swagger: false,
+    });
+
+    try {
+      const response = await app.inject({method: 'GET', url: '/auth/login-methods'});
+
+      expect(response.statusCode).toBe(200);
+      expect(response.json()).toEqual({login_methods: [{id: 'oauth-google'}]});
+      expect(response.body).not.toContain('not-for-clients');
+      expect(response.body).not.toContain('api.example.test');
+    } finally {
+      await app.close();
+    }
+  });
+
+  it('rejects an out-of-contract login method ID before the server can start', () => {
+    expect(() => createLoginMethodsRoute({loginMethods: [{id: ''}]})).toThrow();
+  });
+});

package/src/routes/login-methods.ts

@@ -0,0 +1,21 @@
+import {loginMethodsResponseSchema} from '@shipfox/api-auth-dto';
+import {defineRoute} from '@shipfox/node-fastify';
+import type {LoginMethod} from '@shipfox/node-module';
+
+export function createLoginMethodsRoute({loginMethods}: {loginMethods: readonly LoginMethod[]}) {
+  const response = loginMethodsResponseSchema.parse({
+    login_methods: loginMethods.map(({id}) => ({id})),
+  });
+
+  return defineRoute({
+    method: 'GET',
+    path: '/auth/login-methods',
+    description: 'List the login methods available in this server composition.',
+    schema: {
+      response: {
+        200: loginMethodsResponseSchema,
+      },
+    },
+    handler: () => response,
+  });
+}

package/src/server.test.ts

@@ -12,11 +12,13 @@ const mocks = vi.hoisted(() => {
   const workersHandle = {stop: vi.fn()};
   const servicesHandle = {stop: vi.fn()};
   return {
-    captureException: vi.fn(),
+    markErrorReported: vi.fn(),
+    reportError: vi.fn(),
     closeApp: vi.fn(),
     closeErrorMonitoring: vi.fn(),
     closePostgresClient: vi.fn(),
     createApp: vi.fn(),
+    defineRoute: vi.fn((route) => route),
     createE2eAdminAuthMethod: vi.fn(),
     createE2eRouteGroup: vi.fn(),
     createPostgresClient: vi.fn(),
@@ -42,12 +44,14 @@ const mocks = vi.hoisted(() => {
 });
 
 vi.mock('@shipfox/node-error-monitoring', () => ({
-  captureException: mocks.captureException,
   closeErrorMonitoring: mocks.closeErrorMonitoring,
+  markErrorReported: mocks.markErrorReported,
+  reportError: mocks.reportError,
 }));
 vi.mock('@shipfox/node-fastify', () => ({
   closeApp: mocks.closeApp,
   createApp: mocks.createApp,
+  defineRoute: mocks.defineRoute,
   listen: mocks.listen,
 }));
 vi.mock('@shipfox/node-module', () => ({
@@ -113,11 +117,13 @@ function lastStartModuleServicesOptions(): {
 
 function resetMocks(): void {
   vi.useRealTimers();
-  mocks.captureException.mockReset();
+  mocks.markErrorReported.mockReset();
+  mocks.reportError.mockReset();
   mocks.closeApp.mockReset();
   mocks.closeErrorMonitoring.mockReset();
   mocks.closePostgresClient.mockReset();
   mocks.createApp.mockReset();
+  mocks.defineRoute.mockReset();
   mocks.createE2eAdminAuthMethod.mockReset();
   mocks.createE2eRouteGroup.mockReset();
   mocks.createPostgresClient.mockReset();
@@ -143,6 +149,7 @@ function resetMocks(): void {
   mocks.closeErrorMonitoring.mockResolvedValue(true);
   mocks.closePostgresClient.mockResolvedValue(undefined);
   mocks.createApp.mockResolvedValue({});
+  mocks.defineRoute.mockImplementation((route) => route);
   mocks.aggregateLoginMethods.mockReturnValue([{id: 'test-login'}]);
   mocks.createE2eRouteGroup.mockReturnValue([]);
   mocks.initializeModules.mockResolvedValue({
@@ -204,9 +211,16 @@ describe('createServer', () => {
     });
     expect(mocks.createApp).toHaveBeenCalledWith({
       auth: [],
-      routes: [],
+      routes: [
+        expect.objectContaining({
+          method: 'GET',
+          path: '/auth/login-methods',
+        }),
+      ],
       fastifyOptions: {trustProxy: false},
     });
+    const appConfig = mocks.createApp.mock.calls.at(0)?.[0];
+    expect(appConfig?.routes[0].handler()).toEqual({login_methods: [{id: 'test-login'}]});
   });
 
   it('fails before startup side effects when no login method is configured', async () => {
@@ -492,7 +506,10 @@ describe('createServer', () => {
       {err: failure, taskQueue: 'runtime-queue'},
       'Module worker stopped unexpectedly',
     );
-    expect(mocks.captureException).toHaveBeenCalledWith(failure);
+    expect(mocks.reportError).toHaveBeenCalledWith(failure, {
+      boundary: 'api.runtime',
+      tags: {taskQueue: 'runtime-queue'},
+    });
     expect(mocks.closeApp).toHaveBeenCalledOnce();
     expect(mocks.closeErrorMonitoring).toHaveBeenCalledWith(2_000);
     expect(mocks.closeErrorMonitoring.mock.invocationCallOrder[0]).toBeLessThan(
@@ -513,7 +530,10 @@ describe('createServer', () => {
       {err: failure, service: 'runtime-service'},
       'Module service stopped unexpectedly',
     );
-    expect(mocks.captureException).toHaveBeenCalledWith(failure);
+    expect(mocks.reportError).toHaveBeenCalledWith(failure, {
+      boundary: 'api.runtime',
+      tags: {service: 'runtime-service'},
+    });
     expect(mocks.closeApp).toHaveBeenCalledOnce();
     expect(mocks.closeErrorMonitoring).toHaveBeenCalledWith(2_000);
     expect(mocks.closeErrorMonitoring.mock.invocationCallOrder[0]).toBeLessThan(