@xemahq/workload-runtime-api-client 0.1.1

package/LICENSE

@@ -0,0 +1 @@
+Copyright (c) 2026 Xema. All rights reserved.

package/dist/custom-fetch.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Configurable fetch wrapper for Orval-generated clients.
+ *
+ * Consumers must call `configureClient()` before using any endpoint function.
+ * The baseUrl is prepended to the relative paths generated by Orval.
+ *
+ * Features:
+ *   - Automatic bearer-token injection via `getAuthToken` callback
+ *   - Per-request header injection via `getHeaders` callback
+ *   - Automatic 401 handling via `onUnauthorized` callback (single retry)
+ *   - Exponential-backoff retry for transient failures (429, 502, 503, 504)
+ *   - Typed `ClientError` for non-2xx responses
+ *   - Per-call header overrides (take precedence over global headers)
+ *
+ * @example
+ *   configureClient({
+ *     baseUrl: 'http://governance-api:3400',
+ *     getAuthToken: () => identityBootstrapService.getAccessToken(),
+ *     getHeaders: () => ({ 'X-Org-Id': orgId, 'X-Correlation-Id': crypto.randomUUID() }),
+ *   });
+ */
+export interface ClientConfig {
+    /**
+     * Static base URL (e.g. 'http://localhost:3140') — no trailing slash.
+     * Mutually exclusive with `baseUrlResolver`; exactly one MUST be set.
+     */
+    baseUrl?: string;
+    /**
+     * Per-request base-URL resolver. When set, the peer URL is resolved from
+     * the service registry on EVERY request (boot-order-safe). Wired by
+     * `configureOrvalClientResolved` from `@xemahq/platform-common`.
+     */
+    baseUrlResolver?: () => string | Promise<string>;
+    /** Optional async callback to get an auth token. Auto-sets Authorization header on every request. */
+    getAuthToken?: () => Promise<string>;
+    /** Optional callback returning headers to inject on every request. Per-call headers take precedence. */
+    getHeaders?: () => Record<string, string> | Promise<Record<string, string>>;
+    /** Optional callback invoked on 401 before a single retry (e.g. force-refresh auth token). */
+    onUnauthorized?: () => Promise<void>;
+    /** Maximum retry attempts for transient failures (default: 3). Set to 0 to disable retries. */
+    maxRetries?: number;
+}
+export declare class ClientError extends Error {
+    readonly status: number;
+    readonly url: string;
+    readonly body: unknown;
+    constructor(status: number, url: string, body: unknown);
+}
+export declare function configureClient(config: ClientConfig): void;
+export declare function getClientConfig(): ClientConfig;
+export declare const customFetch: <T>(url: string, options: RequestInit) => Promise<T>;
+export default customFetch;

package/dist/custom-fetch.js

@@ -0,0 +1,175 @@
+"use strict";
+/**
+ * Configurable fetch wrapper for Orval-generated clients.
+ *
+ * Consumers must call `configureClient()` before using any endpoint function.
+ * The baseUrl is prepended to the relative paths generated by Orval.
+ *
+ * Features:
+ *   - Automatic bearer-token injection via `getAuthToken` callback
+ *   - Per-request header injection via `getHeaders` callback
+ *   - Automatic 401 handling via `onUnauthorized` callback (single retry)
+ *   - Exponential-backoff retry for transient failures (429, 502, 503, 504)
+ *   - Typed `ClientError` for non-2xx responses
+ *   - Per-call header overrides (take precedence over global headers)
+ *
+ * @example
+ *   configureClient({
+ *     baseUrl: 'http://governance-api:3400',
+ *     getAuthToken: () => identityBootstrapService.getAccessToken(),
+ *     getHeaders: () => ({ 'X-Org-Id': orgId, 'X-Correlation-Id': crypto.randomUUID() }),
+ *   });
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.customFetch = exports.ClientError = void 0;
+exports.configureClient = configureClient;
+exports.getClientConfig = getClientConfig;
+class ClientError extends Error {
+    status;
+    url;
+    body;
+    constructor(status, url, body) {
+        super(`HTTP ${status} from ${url}`);
+        this.status = status;
+        this.url = url;
+        this.body = body;
+        this.name = 'ClientError';
+    }
+}
+exports.ClientError = ClientError;
+let clientConfig = null;
+function configureClient(config) {
+    clientConfig = config;
+}
+function getClientConfig() {
+    if (!clientConfig) {
+        throw new Error('Client not configured. Call configureClient({ baseUrl }) before using endpoint functions.');
+    }
+    return clientConfig;
+}
+const RETRYABLE_STATUSES = [429, 502, 503, 504];
+async function buildHeaders(config, callerHeaders) {
+    const headers = new Headers(callerHeaders);
+    // Global headers from config (caller-provided headers take precedence)
+    if (config.getHeaders) {
+        const globalHeaders = await Promise.resolve(config.getHeaders());
+        for (const [key, value] of Object.entries(globalHeaders)) {
+            if (!headers.has(key)) {
+                headers.set(key, value);
+            }
+        }
+    }
+    // Auth token (caller or global headers take precedence)
+    if (config.getAuthToken && !headers.has('Authorization')) {
+        const token = await config.getAuthToken();
+        headers.set('Authorization', `Bearer ${token}`);
+    }
+    return headers;
+}
+const customFetch = async (url, options) => {
+    const config = getClientConfig();
+    const base = config.baseUrlResolver
+        ? await config.baseUrlResolver()
+        : config.baseUrl;
+    if (base === undefined) {
+        throw new Error('Client not configured: set baseUrl or baseUrlResolver via configureClient().');
+    }
+    const fullUrl = `${base}${url}`;
+    const maxRetries = config.maxRetries ?? 3;
+    const headers = await buildHeaders(config, options.headers);
+    const requestInit = { ...options, headers };
+    let delay = 1000;
+    let lastError;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            const response = await fetch(fullUrl, requestInit);
+            // 401 — invoke onUnauthorized and retry once (outside the transient retry loop)
+            if (response.status === 401 && config.onUnauthorized && attempt === 0) {
+                await config.onUnauthorized();
+                const refreshedHeaders = await buildHeaders(config, options.headers);
+                const retryResponse = await fetch(fullUrl, { ...options, headers: refreshedHeaders });
+                const retryBody = await parseBody(retryResponse);
+                if (retryResponse.status >= 400) {
+                    throw new ClientError(retryResponse.status, fullUrl, retryBody);
+                }
+                return unwrapEnvelope(retryBody);
+            }
+            // Non-retryable status — return or throw
+            if (!RETRYABLE_STATUSES.includes(response.status) || attempt >= maxRetries) {
+                const body = await parseBody(response);
+                if (response.status >= 400) {
+                    throw new ClientError(response.status, fullUrl, body);
+                }
+                return unwrapEnvelope(body);
+            }
+            // Retryable — wait and retry
+            const retryAfter = parseRetryAfter(response.headers.get('Retry-After'));
+            const waitMs = retryAfter ?? addJitter(delay);
+            await sleep(waitMs);
+            delay = Math.min(delay * 2, 30_000);
+        }
+        catch (error) {
+            if (error instanceof ClientError)
+                throw error; // Don't retry client errors
+            lastError = error instanceof Error ? error : new Error(String(error));
+            if (attempt >= maxRetries)
+                throw lastError;
+            const waitMs = addJitter(delay);
+            await sleep(waitMs);
+            delay = Math.min(delay * 2, 30_000);
+        }
+    }
+    throw lastError ?? new Error(`All retries exhausted for ${fullUrl}`);
+};
+exports.customFetch = customFetch;
+/**
+ * The server wraps every non-`@RawResponse()` payload in `{ data: T }`
+ * via `ResponseEnvelopeInterceptor` (see platform-common). Orval's
+ * generated types describe the INNER `T` (because the controllers
+ * declare their return type as `T`, not `{ data: T }`), so the client
+ * must peel `data` to keep types and wire shape consistent. Paginated
+ * lists return `{ data: T[], pagination: {...} }` and consumers read
+ * both fields — keep that envelope intact (detected by the presence
+ * of `pagination`). Anything without a `data` field is returned as-is.
+ */
+function unwrapEnvelope(body) {
+    if (body === null ||
+        typeof body !== 'object' ||
+        Array.isArray(body) ||
+        !('data' in body)) {
+        return body;
+    }
+    const envelope = body;
+    if ('pagination' in envelope) {
+        return envelope;
+    }
+    return envelope.data;
+}
+async function parseBody(response) {
+    const contentType = response.headers.get('content-type');
+    if (contentType?.includes('application/json')) {
+        return response.json();
+    }
+    if (response.status === 204) {
+        return undefined;
+    }
+    return response.text();
+}
+function parseRetryAfter(value) {
+    if (!value)
+        return undefined;
+    const seconds = Number(value);
+    if (!isNaN(seconds) && seconds >= 0)
+        return seconds * 1000;
+    const date = new Date(value);
+    if (!isNaN(date.getTime()))
+        return Math.max(0, date.getTime() - Date.now());
+    return undefined;
+}
+function addJitter(delay) {
+    return delay + (Math.random() * 2 - 1) * delay * 0.25;
+}
+function sleep(ms) {
+    return new Promise(resolve => setTimeout(resolve, ms));
+}
+exports.default = exports.customFetch;

package/dist/endpoints/health/health.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @summary Health check
+ */
+export declare const getHealthControllerCheckUrl: () => string;
+export declare const healthControllerCheck: (options?: RequestInit) => Promise<void>;
+/**
+ * @summary Liveness probe
+ */
+export declare const getHealthControllerLiveUrl: () => string;
+export declare const healthControllerLive: (options?: RequestInit) => Promise<void>;
+/**
+ * @summary Readiness probe — checks database connectivity
+ */
+export declare const getHealthControllerReadyUrl: () => string;
+export declare const healthControllerReady: (options?: RequestInit) => Promise<void>;

package/dist/endpoints/health/health.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.healthControllerReady = exports.getHealthControllerReadyUrl = exports.healthControllerLive = exports.getHealthControllerLiveUrl = exports.healthControllerCheck = exports.getHealthControllerCheckUrl = void 0;
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Workload Runtime API
+ * Declarative workload scheduling for biome sidecars, biome APIs, opencode workers, previews, and DB schemas.
+ * OpenAPI spec version: 0.1.0
+ */
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * @summary Health check
+ */
+const getHealthControllerCheckUrl = () => {
+    return `/health`;
+};
+exports.getHealthControllerCheckUrl = getHealthControllerCheckUrl;
+const healthControllerCheck = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getHealthControllerCheckUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.healthControllerCheck = healthControllerCheck;
+/**
+ * @summary Liveness probe
+ */
+const getHealthControllerLiveUrl = () => {
+    return `/health/live`;
+};
+exports.getHealthControllerLiveUrl = getHealthControllerLiveUrl;
+const healthControllerLive = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getHealthControllerLiveUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.healthControllerLive = healthControllerLive;
+/**
+ * @summary Readiness probe — checks database connectivity
+ */
+const getHealthControllerReadyUrl = () => {
+    return `/health/ready`;
+};
+exports.getHealthControllerReadyUrl = getHealthControllerReadyUrl;
+const healthControllerReady = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getHealthControllerReadyUrl)(), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.healthControllerReady = healthControllerReady;

package/dist/endpoints/internal/internal.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Service-to-service endpoint fired by the workload-reconcile Temporal Schedule. Runs a full reconcile sweep and returns the per-category counts.
+ * @summary Run one workload reconcile sweep
+ */
+export declare const getInternalReconcileControllerTickUrl: () => string;
+export declare const internalReconcileControllerTick: (options?: RequestInit) => Promise<void>;

package/dist/endpoints/internal/internal.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.internalReconcileControllerTick = exports.getInternalReconcileControllerTickUrl = void 0;
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Workload Runtime API
+ * Declarative workload scheduling for biome sidecars, biome APIs, opencode workers, previews, and DB schemas.
+ * OpenAPI spec version: 0.1.0
+ */
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * Service-to-service endpoint fired by the workload-reconcile Temporal Schedule. Runs a full reconcile sweep and returns the per-category counts.
+ * @summary Run one workload reconcile sweep
+ */
+const getInternalReconcileControllerTickUrl = () => {
+    return `/internal/reconcile/tick`;
+};
+exports.getInternalReconcileControllerTickUrl = getInternalReconcileControllerTickUrl;
+const internalReconcileControllerTick = async (options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getInternalReconcileControllerTickUrl)(), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.internalReconcileControllerTick = internalReconcileControllerTick;

package/dist/endpoints/internal-/342/200/224-build-container-image/internal-/342/200/224-build-container-image.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Workload Runtime API
+ * Declarative workload scheduling for biome sidecars, biome APIs, opencode workers, previews, and DB schemas.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { RunKanikoRequestDto, RunKanikoResponseDto } from '../../models';
+/**
+ * Synchronous endpoint — blocks until Kaniko completes, fails, or the 25-minute outer timeout fires. Returns the pushed image digest + end-to-end duration. The owning Temporal workflow handles retries.
+ * @summary Run a Kaniko build via the workload runtime
+ */
+export declare const getBuildContainerImageControllerRunKanikoUrl: () => string;
+export declare const buildContainerImageControllerRunKaniko: (runKanikoRequestDto: RunKanikoRequestDto, options?: RequestInit) => Promise<RunKanikoResponseDto>;

package/dist/endpoints/internal-/342/200/224-build-container-image/internal-/342/200/224-build-container-image.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildContainerImageControllerRunKaniko = exports.getBuildContainerImageControllerRunKanikoUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * Synchronous endpoint — blocks until Kaniko completes, fails, or the 25-minute outer timeout fires. Returns the pushed image digest + end-to-end duration. The owning Temporal workflow handles retries.
+ * @summary Run a Kaniko build via the workload runtime
+ */
+const getBuildContainerImageControllerRunKanikoUrl = () => {
+    return `/internal/build-container-image/run-kaniko`;
+};
+exports.getBuildContainerImageControllerRunKanikoUrl = getBuildContainerImageControllerRunKanikoUrl;
+const buildContainerImageControllerRunKaniko = async (runKanikoRequestDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getBuildContainerImageControllerRunKanikoUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(runKanikoRequestDto)
+    });
+};
+exports.buildContainerImageControllerRunKaniko = buildContainerImageControllerRunKaniko;

package/dist/endpoints/runner-jobs/runner-jobs.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Workload Runtime API
+ * Declarative workload scheduling for biome sidecars, biome APIs, opencode workers, previews, and DB schemas.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { CreateRunnerJobDto, RunnerJobDto, RunnerJobDtoPaginatedEnvelope, RunnerJobReportDto, RunnerJobsControllerListParams } from '../../models';
+/**
+ * Called by the capability router after it decides to dispatch a capability to a runner and the kernel-server has minted the job token. Re-POSTing the same `jobId` returns the existing row (HTTP 200) without creating a duplicate; first creation returns HTTP 201. A `jti` already bound to a different job is rejected (409) — replay guard.
+ * @summary Create a RunnerJob in `pending` (idempotent by jobId)
+ */
+export declare const getRunnerJobsControllerCreateUrl: () => string;
+export declare const runnerJobsControllerCreate: (createRunnerJobDto: CreateRunnerJobDto, options?: RequestInit) => Promise<RunnerJobDto>;
+/**
+ * Powers the operator RunnerJob inspector (runners-web). Filter by `state` and/or `runnerInstanceId`. `cursor` + `limit` page through results in `updatedAt desc` order (newest-touched first, `jobId` as a stable tiebreaker). Callers that walk every job MUST follow `nextCursor` until null. Default limit 200, max 1000. These are service-to-service routes (ServiceTokenGuard); a RunnerJob carries no org column, so there is no org filter — same scoping as `GET /:jobId`.
+ * @summary List RunnerJobs with filters and cursor pagination
+ */
+export declare const getRunnerJobsControllerListUrl: (params?: RunnerJobsControllerListParams) => string;
+export declare const runnerJobsControllerList: (params?: RunnerJobsControllerListParams, options?: RequestInit) => Promise<RunnerJobDtoPaginatedEnvelope>;
+/**
+ * @summary Fetch a RunnerJob by jobId
+ */
+export declare const getRunnerJobsControllerGetUrl: (jobId: string) => string;
+export declare const runnerJobsControllerGet: (jobId: string, options?: RequestInit) => Promise<RunnerJobDto>;
+/**
+ * Called by the capability router AFTER it hands the dispatch envelope to the runner (push CloudEvent or pull-queue enqueue). Records the `pending → dispatched` transition. Idempotent — a re-mark or a job already past dispatched is a no-op; a terminal row is rejected (409).
+ * @summary Mark a RunnerJob dispatched (router-owned; idempotent)
+ */
+export declare const getRunnerJobsControllerMarkDispatchedUrl: (jobId: string) => string;
+export declare const runnerJobsControllerMarkDispatched: (jobId: string, options?: RequestInit) => Promise<RunnerJobDto>;
+/**
+ * Advances the RunnerJob state machine from a `RunnerJobReport`. Mirror of the `xema.runner.job.*` CloudEvent consumers for runners on the pull/HTTP transport. A duplicate report (same state) is a no-op; a report against a terminal row or an illegal transition is rejected (409).
+ * @summary Apply a runner job report (direct report path; idempotent)
+ */
+export declare const getRunnerJobsControllerReportUrl: (jobId: string) => string;
+export declare const runnerJobsControllerReport: (jobId: string, runnerJobReportDto: RunnerJobReportDto, options?: RequestInit) => Promise<RunnerJobDto>;

package/dist/endpoints/runner-jobs/runner-jobs.js

@@ -0,0 +1,101 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runnerJobsControllerReport = exports.getRunnerJobsControllerReportUrl = exports.runnerJobsControllerMarkDispatched = exports.getRunnerJobsControllerMarkDispatchedUrl = exports.runnerJobsControllerGet = exports.getRunnerJobsControllerGetUrl = exports.runnerJobsControllerList = exports.getRunnerJobsControllerListUrl = exports.runnerJobsControllerCreate = exports.getRunnerJobsControllerCreateUrl = void 0;
+const custom_fetch_1 = require("../../custom-fetch");
+/**
+ * Called by the capability router after it decides to dispatch a capability to a runner and the kernel-server has minted the job token. Re-POSTing the same `jobId` returns the existing row (HTTP 200) without creating a duplicate; first creation returns HTTP 201. A `jti` already bound to a different job is rejected (409) — replay guard.
+ * @summary Create a RunnerJob in `pending` (idempotent by jobId)
+ */
+const getRunnerJobsControllerCreateUrl = () => {
+    return `/runner-jobs`;
+};
+exports.getRunnerJobsControllerCreateUrl = getRunnerJobsControllerCreateUrl;
+const runnerJobsControllerCreate = async (createRunnerJobDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerJobsControllerCreateUrl)(), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(createRunnerJobDto)
+    });
+};
+exports.runnerJobsControllerCreate = runnerJobsControllerCreate;
+/**
+ * Powers the operator RunnerJob inspector (runners-web). Filter by `state` and/or `runnerInstanceId`. `cursor` + `limit` page through results in `updatedAt desc` order (newest-touched first, `jobId` as a stable tiebreaker). Callers that walk every job MUST follow `nextCursor` until null. Default limit 200, max 1000. These are service-to-service routes (ServiceTokenGuard); a RunnerJob carries no org column, so there is no org filter — same scoping as `GET /:jobId`.
+ * @summary List RunnerJobs with filters and cursor pagination
+ */
+const getRunnerJobsControllerListUrl = (params) => {
+    const normalizedParams = new URLSearchParams();
+    Object.entries(params || {}).forEach(([key, value]) => {
+        if (value === undefined)
+            return;
+        if (value === null) {
+            normalizedParams.append(key, 'null');
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (item === undefined || item === null)
+                    continue;
+                normalizedParams.append(key, item.toString());
+            }
+            return;
+        }
+        normalizedParams.append(key, value.toString());
+    });
+    const stringifiedParams = normalizedParams.toString();
+    return stringifiedParams.length > 0 ? `/runner-jobs?${stringifiedParams}` : `/runner-jobs`;
+};
+exports.getRunnerJobsControllerListUrl = getRunnerJobsControllerListUrl;
+const runnerJobsControllerList = async (params, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerJobsControllerListUrl)(params), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.runnerJobsControllerList = runnerJobsControllerList;
+/**
+ * @summary Fetch a RunnerJob by jobId
+ */
+const getRunnerJobsControllerGetUrl = (jobId) => {
+    return `/runner-jobs/${jobId}`;
+};
+exports.getRunnerJobsControllerGetUrl = getRunnerJobsControllerGetUrl;
+const runnerJobsControllerGet = async (jobId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerJobsControllerGetUrl)(jobId), {
+        ...options,
+        method: 'GET'
+    });
+};
+exports.runnerJobsControllerGet = runnerJobsControllerGet;
+/**
+ * Called by the capability router AFTER it hands the dispatch envelope to the runner (push CloudEvent or pull-queue enqueue). Records the `pending → dispatched` transition. Idempotent — a re-mark or a job already past dispatched is a no-op; a terminal row is rejected (409).
+ * @summary Mark a RunnerJob dispatched (router-owned; idempotent)
+ */
+const getRunnerJobsControllerMarkDispatchedUrl = (jobId) => {
+    return `/runner-jobs/${jobId}/dispatched`;
+};
+exports.getRunnerJobsControllerMarkDispatchedUrl = getRunnerJobsControllerMarkDispatchedUrl;
+const runnerJobsControllerMarkDispatched = async (jobId, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerJobsControllerMarkDispatchedUrl)(jobId), {
+        ...options,
+        method: 'POST'
+    });
+};
+exports.runnerJobsControllerMarkDispatched = runnerJobsControllerMarkDispatched;
+/**
+ * Advances the RunnerJob state machine from a `RunnerJobReport`. Mirror of the `xema.runner.job.*` CloudEvent consumers for runners on the pull/HTTP transport. A duplicate report (same state) is a no-op; a report against a terminal row or an illegal transition is rejected (409).
+ * @summary Apply a runner job report (direct report path; idempotent)
+ */
+const getRunnerJobsControllerReportUrl = (jobId) => {
+    return `/runner-jobs/${jobId}/report`;
+};
+exports.getRunnerJobsControllerReportUrl = getRunnerJobsControllerReportUrl;
+const runnerJobsControllerReport = async (jobId, runnerJobReportDto, options) => {
+    return (0, custom_fetch_1.customFetch)((0, exports.getRunnerJobsControllerReportUrl)(jobId), {
+        ...options,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', ...options?.headers },
+        body: JSON.stringify(runnerJobReportDto)
+    });
+};
+exports.runnerJobsControllerReport = runnerJobsControllerReport;

package/dist/endpoints/workloads/workloads.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Generated by orval v8.6.2 🍺
+ * Do not edit manually.
+ * Workload Runtime API
+ * Declarative workload scheduling for biome sidecars, biome APIs, opencode workers, previews, and DB schemas.
+ * OpenAPI spec version: 0.1.0
+ */
+import type { WorkloadDescriptorDto, WorkloadInstanceDto, WorkloadInstanceDtoPaginatedEnvelope, WorkloadsControllerListParams } from '../../models';
+/**
+ * Creates a workload from a descriptor. Re-POSTing with the same `(kind, ownerKey)` returns the existing workload (HTTP 200) without reapplying; first-time creation returns HTTP 201. The scheduler runs asynchronously — clients subscribe to `workload.lifecycle.*` events to learn when the workload reaches `ready`.
+ * @summary Create or upsert a workload (idempotent by kind+ownerKey)
+ */
+export declare const getWorkloadsControllerCreateUrl: () => string;
+export declare const workloadsControllerCreate: (workloadDescriptorDto: WorkloadDescriptorDto, options?: RequestInit) => Promise<WorkloadInstanceDto>;
+/**
+ * Filter by kind/state/org/project/ownerKey. `cursor` + `limit` page through results in `createdAt desc` order — callers that walk every workload (pool reconcilers, ops sweepers) MUST follow `nextCursor` until null. Default limit 200, max 1000.
+ * @summary List workloads with filters and cursor pagination
+ */
+export declare const getWorkloadsControllerListUrl: (params?: WorkloadsControllerListParams) => string;
+export declare const workloadsControllerList: (params?: WorkloadsControllerListParams, options?: RequestInit) => Promise<WorkloadInstanceDtoPaginatedEnvelope>;
+/**
+ * @summary Fetch a workload by id with last-known health snapshot
+ */
+export declare const getWorkloadsControllerGetUrl: (id: string) => string;
+export declare const workloadsControllerGet: (id: string, options?: RequestInit) => Promise<WorkloadInstanceDto>;
+/**
+ * @summary Drain then delete a workload (state → draining → deleted)
+ */
+export declare const getWorkloadsControllerDeleteUrl: (id: string) => string;
+export declare const workloadsControllerDelete: (id: string, options?: RequestInit) => Promise<void>;
+/**
+ * @summary Force scheduler.reconcile() with current descriptor (rolling restart)
+ */
+export declare const getWorkloadsControllerRestartUrl: (id: string) => string;
+export declare const workloadsControllerRestart: (id: string, options?: RequestInit) => Promise<void>;
+/**
+ * @summary On-demand health probe (synchronous scheduler.describe)
+ */
+export declare const getWorkloadsControllerRefreshHealthUrl: (id: string) => string;
+export declare const workloadsControllerRefreshHealth: (id: string, options?: RequestInit) => Promise<WorkloadInstanceDto>;
+/**
+ * @summary Trigger a full reconciler sweep (admin-only)
+ */
+export declare const getWorkloadsControllerReconcileAllUrl: () => string;
+export declare const workloadsControllerReconcileAll: (options?: RequestInit) => Promise<void>;