fission-worker 0.2.2 → 0.3.0

package/runner/modules/worker-api/worker-api.controller.js

@@ -0,0 +1,497 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var WorkerApiController_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerApiController = void 0;
+const common_1 = require("@nestjs/common");
+const throttler_1 = require("@nestjs/throttler");
+const crypto_1 = require("crypto");
+const prisma_service_1 = require("../../prisma/prisma.service");
+const event_bus_service_1 = require("../../common/services/event-bus.service");
+const activity_log_service_1 = require("../../common/services/activity-log.service");
+const public_decorator_1 = require("../../common/decorators/public.decorator");
+const worker_api_guard_1 = require("./worker-api.guard");
+const github_service_1 = require("../github/github.service");
+let WorkerApiController = WorkerApiController_1 = class WorkerApiController {
+    prisma;
+    eventBus;
+    activityLog;
+    github;
+    logger = new common_1.Logger(WorkerApiController_1.name);
+    constructor(prisma, eventBus, activityLog, github) {
+        this.prisma = prisma;
+        this.eventBus = eventBus;
+        this.activityLog = activityLog;
+        this.github = github;
+    }
+    // ── Poll for jobs ──────────────────────────────────────────────── //
+    async poll(req) {
+        const worker = req.worker;
+        const session = await this.prisma.session.findFirst({
+            where: { status: "DISPATCHED", workerId: worker.id },
+            include: {
+                project: {
+                    select: {
+                        id: true,
+                        name: true,
+                    },
+                },
+            },
+            orderBy: { startedAt: "asc" },
+        });
+        if (!session)
+            return { status: 204, data: null };
+        // Get repository info with GitHub installation details
+        const repos = await this.prisma.repository.findMany({
+            where: { projectId: session.projectId },
+            select: {
+                name: true,
+                repoUrl: true,
+                repoPath: true,
+                branch: true,
+                githubInstallationId: true,
+                githubOwner: true,
+                githubRepo: true,
+            },
+        });
+        // Generate GitHub installation tokens for repos that have them
+        let githubToken = null;
+        const repoWithInstallation = repos.find((r) => r.githubInstallationId);
+        if (repoWithInstallation?.githubInstallationId && this.github.isConfigured()) {
+            try {
+                githubToken = await this.github.getInstallationToken(repoWithInstallation.githubInstallationId);
+            }
+            catch (err) {
+                this.logger.warn(`Failed to generate GitHub token for installation ${repoWithInstallation.githubInstallationId}: ${err}`);
+            }
+        }
+        // Mark as ACTIVE
+        await this.prisma.session.update({
+            where: { id: session.id },
+            data: { status: "ACTIVE" },
+        });
+        return {
+            sessionId: session.id,
+            projectId: session.projectId,
+            project: {
+                name: session.project.name,
+                repos,
+            },
+            githubToken,
+        };
+    }
+    // ── Heartbeat ──────────────────────────────────────────────────── //
+    async heartbeat(req, body) {
+        await this.prisma.worker.update({
+            where: { id: req.worker.id },
+            data: {
+                lastHeartbeat: new Date(),
+                activeSessions: body.activeSessions,
+                status: "ONLINE",
+            },
+        });
+        return { ok: true };
+    }
+    // ── Event relay (worker → SSE → browser) ──────────────────────── //
+    async relayEvent(body) {
+        this.eventBus.emit(body.projectId, body.type, body.data);
+    }
+    // ── Tasks ──────────────────────────────────────────────────────── //
+    async findTasks(projectId, status, retryCountLt, take) {
+        const where = { projectId };
+        if (status) {
+            const statuses = status.split(",");
+            where.status = statuses.length === 1 ? statuses[0] : { in: statuses };
+        }
+        if (retryCountLt)
+            where.retryCount = { lt: parseInt(retryCountLt, 10) };
+        return this.prisma.task.findMany({
+            where,
+            orderBy: [{ priority: "asc" }, { createdAt: "asc" }],
+            take: take ? parseInt(take, 10) : undefined,
+        });
+    }
+    async updateTask(id, body) {
+        const task = await this.prisma.task.update({
+            where: { id },
+            data: body,
+        });
+        if (body.status) {
+            this.eventBus.emit(task.projectId, "task_updated", { id: task.id, status: task.status });
+        }
+        return task;
+    }
+    async createTask(body) {
+        const task = await this.prisma.task.create({
+            data: body,
+        });
+        this.eventBus.emit(task.projectId, "task_created", {
+            id: task.id,
+            title: task.title,
+            priority: task.priority,
+            status: task.status,
+        });
+        return task;
+    }
+    // ── Task Comments ──────────────────────────────────────────────── //
+    async findTaskComments(taskId, take) {
+        return this.prisma.taskComment.findMany({
+            where: { taskId },
+            orderBy: { createdAt: "asc" },
+            take: take ? parseInt(take, 10) : undefined,
+        });
+    }
+    async createTaskComment(taskId, body) {
+        await this.prisma.taskComment.create({
+            data: { taskId, author: body.author, content: body.content },
+        });
+    }
+    // ── Findings ───────────────────────────────────────────────────── //
+    async findFindings(projectId, status, source, take) {
+        const where = { projectId };
+        if (status) {
+            const statuses = status.split(",");
+            where.status = statuses.length === 1 ? statuses[0] : { in: statuses };
+        }
+        if (source)
+            where.source = source;
+        return this.prisma.finding.findMany({
+            where,
+            orderBy: [{ severity: "asc" }, { createdAt: "asc" }],
+            take: take ? parseInt(take, 10) : undefined,
+        });
+    }
+    async findFindingById(id) {
+        const finding = await this.prisma.finding.findUnique({ where: { id } });
+        if (!finding)
+            throw new common_1.NotFoundException("Finding not found");
+        return finding;
+    }
+    async createFinding(body) {
+        const finding = await this.prisma.finding.create({
+            data: body,
+        });
+        this.eventBus.emit(finding.projectId, "finding_created", {
+            id: finding.id,
+            title: finding.title,
+            severity: finding.severity,
+            category: finding.category,
+        });
+        return finding;
+    }
+    async updateFinding(id, body) {
+        await this.prisma.finding.update({
+            where: { id },
+            data: body,
+        });
+    }
+    async updateManyFindings(body) {
+        await this.prisma.finding.updateMany({
+            where: { id: { in: body.ids } },
+            data: { status: body.status },
+        });
+    }
+    // ── Sessions ───────────────────────────────────────────────────── //
+    async findSession(id) {
+        const session = await this.prisma.session.findUnique({
+            where: { id },
+            include: { project: { select: { name: true } } },
+        });
+        if (!session)
+            throw new common_1.NotFoundException("Session not found");
+        return session;
+    }
+    async updateSession(id, body) {
+        await this.prisma.session.update({
+            where: { id },
+            data: {
+                ...body,
+                endedAt: body.endedAt ? new Date(body.endedAt) : undefined,
+            },
+        });
+    }
+    async completeSession(req, id, body) {
+        const session = await this.prisma.session.findUnique({ where: { id } });
+        if (!session)
+            throw new common_1.NotFoundException("Session not found");
+        const existingMeta = session.metadata || {};
+        await this.prisma.session.update({
+            where: { id },
+            data: {
+                status: "TERMINATED",
+                endedAt: new Date(),
+                metadata: { ...existingMeta, summary: body.summary, exitCode: body.exitCode },
+            },
+        });
+        // Decrement worker active sessions
+        await this.prisma.worker.update({
+            where: { id: req.worker.id },
+            data: { activeSessions: { decrement: 1 } },
+        });
+        this.eventBus.emit(session.projectId, "pipeline_complete", { sessionId: id });
+        if (body.summary) {
+            this.eventBus.emit(session.projectId, "pipeline_summary", { sessionId: id, summary: body.summary });
+        }
+    }
+    // ── Activity Log ───────────────────────────────────────────────── //
+    async logActivity(body) {
+        await this.activityLog.log(body.action, body.entityType, body.entityId, body.userId, body.details);
+    }
+    // ── Worker Registration ────────────────────────────────────────── //
+    async register(body) {
+        // Look up token
+        const tokenRecord = await this.prisma.workerToken.findUnique({
+            where: { token: body.token },
+        });
+        if (!tokenRecord)
+            throw new common_1.NotFoundException("Invalid token");
+        if (tokenRecord.usedAt)
+            throw new common_1.NotFoundException("Token already used");
+        if (tokenRecord.expiresAt < new Date())
+            throw new common_1.NotFoundException("Token expired");
+        // Mark token as used
+        await this.prisma.workerToken.update({
+            where: { id: tokenRecord.id },
+            data: { usedAt: new Date() },
+        });
+        // Generate API key
+        const rawApiKey = `wk_key_${(0, crypto_1.randomBytes)(24).toString("hex")}`;
+        const apiKeyHash = (0, crypto_1.createHash)("sha256").update(rawApiKey).digest("hex");
+        // Create worker
+        const worker = await this.prisma.worker.create({
+            data: {
+                name: body.name,
+                tier: tokenRecord.tier,
+                ownerId: tokenRecord.ownerId,
+                status: "ONLINE",
+                apiKeyHash,
+                hostname: body.hostname,
+                specs: body.specs,
+                maxConcurrent: body.maxConcurrent ?? 3,
+                lastHeartbeat: new Date(),
+            },
+        });
+        return {
+            workerId: worker.id,
+            apiKey: rawApiKey,
+            tier: worker.tier,
+            name: worker.name,
+        };
+    }
+    // ── Token Generation ───────────────────────────────────────────── //
+    // Note: This endpoint uses JWT auth (not worker API key) — handled separately
+    // ── Worker Project Assignment ──────────────────────────────────── //
+    async assignProject(workerId, body) {
+        await this.prisma.workerProject.create({
+            data: { workerId, projectId: body.projectId },
+        });
+        return { ok: true };
+    }
+    async unassignProject(workerId, projectId) {
+        await this.prisma.workerProject.deleteMany({
+            where: { workerId, projectId },
+        });
+        return { ok: true };
+    }
+};
+exports.WorkerApiController = WorkerApiController;
+__decorate([
+    (0, common_1.Get)("poll"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Req)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "poll", null);
+__decorate([
+    (0, common_1.Post)("heartbeat"),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "heartbeat", null);
+__decorate([
+    (0, common_1.Post)("events"),
+    (0, common_1.HttpCode)(202),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "relayEvent", null);
+__decorate([
+    (0, common_1.Get)("projects/:projectId/tasks"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("projectId")),
+    __param(1, (0, common_1.Query)("status")),
+    __param(2, (0, common_1.Query)("retryCountLt")),
+    __param(3, (0, common_1.Query)("take")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, String]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "findTasks", null);
+__decorate([
+    (0, common_1.Patch)("tasks/:id"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("id")),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "updateTask", null);
+__decorate([
+    (0, common_1.Post)("tasks"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "createTask", null);
+__decorate([
+    (0, common_1.Get)("tasks/:id/comments"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("id")),
+    __param(1, (0, common_1.Query)("take")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "findTaskComments", null);
+__decorate([
+    (0, common_1.Post)("tasks/:id/comments"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("id")),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "createTaskComment", null);
+__decorate([
+    (0, common_1.Get)("projects/:projectId/findings"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("projectId")),
+    __param(1, (0, common_1.Query)("status")),
+    __param(2, (0, common_1.Query)("source")),
+    __param(3, (0, common_1.Query)("take")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String, String]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "findFindings", null);
+__decorate([
+    (0, common_1.Get)("findings/:id"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("id")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "findFindingById", null);
+__decorate([
+    (0, common_1.Post)("findings"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "createFinding", null);
+__decorate([
+    (0, common_1.Patch)("findings/:id"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("id")),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "updateFinding", null);
+__decorate([
+    (0, common_1.Patch)("findings/bulk"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "updateManyFindings", null);
+__decorate([
+    (0, common_1.Get)("sessions/:id"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("id")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "findSession", null);
+__decorate([
+    (0, common_1.Patch)("sessions/:id"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("id")),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "updateSession", null);
+__decorate([
+    (0, common_1.Post)("sessions/:id/complete"),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Param)("id")),
+    __param(2, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String, Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "completeSession", null);
+__decorate([
+    (0, common_1.Post)("activity-log"),
+    (0, common_1.HttpCode)(200),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "logActivity", null);
+__decorate([
+    (0, common_1.Post)("register"),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "register", null);
+__decorate([
+    (0, common_1.Post)("workers/:workerId/projects"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("workerId")),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "assignProject", null);
+__decorate([
+    (0, common_1.Delete)("workers/:workerId/projects/:projectId"),
+    (0, common_1.UseGuards)(worker_api_guard_1.WorkerApiGuard),
+    __param(0, (0, common_1.Param)("workerId")),
+    __param(1, (0, common_1.Param)("projectId")),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String]),
+    __metadata("design:returntype", Promise)
+], WorkerApiController.prototype, "unassignProject", null);
+exports.WorkerApiController = WorkerApiController = WorkerApiController_1 = __decorate([
+    (0, common_1.Controller)("worker"),
+    (0, public_decorator_1.Public)() // bypass JWT auth — workers use API key
+    ,
+    (0, throttler_1.SkipThrottle)({ global: true }),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService,
+        event_bus_service_1.EventBusService,
+        activity_log_service_1.ActivityLogService,
+        github_service_1.GithubService])
+], WorkerApiController);

package/runner/modules/worker-api/worker-api.guard.js

@@ -0,0 +1,41 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerApiGuard = void 0;
+const common_1 = require("@nestjs/common");
+const crypto_1 = require("crypto");
+const prisma_service_1 = require("../../prisma/prisma.service");
+let WorkerApiGuard = class WorkerApiGuard {
+    prisma;
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async canActivate(context) {
+        const request = context.switchToHttp().getRequest();
+        const authHeader = request.headers.authorization;
+        if (!authHeader?.startsWith("Bearer "))
+            return false;
+        const apiKey = authHeader.slice(7);
+        const hash = (0, crypto_1.createHash)("sha256").update(apiKey).digest("hex");
+        const worker = await this.prisma.worker.findFirst({
+            where: { apiKeyHash: hash },
+        });
+        if (!worker)
+            return false;
+        request.worker = worker;
+        return true;
+    }
+};
+exports.WorkerApiGuard = WorkerApiGuard;
+exports.WorkerApiGuard = WorkerApiGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], WorkerApiGuard);

package/runner/modules/worker-api/worker-api.module.js

@@ -0,0 +1,25 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerApiModule = void 0;
+const common_1 = require("@nestjs/common");
+const github_module_1 = require("../github/github.module");
+const worker_api_controller_1 = require("./worker-api.controller");
+const worker_api_guard_1 = require("./worker-api.guard");
+const worker_dispatch_service_1 = require("./worker-dispatch.service");
+let WorkerApiModule = class WorkerApiModule {
+};
+exports.WorkerApiModule = WorkerApiModule;
+exports.WorkerApiModule = WorkerApiModule = __decorate([
+    (0, common_1.Module)({
+        imports: [github_module_1.GithubModule],
+        controllers: [worker_api_controller_1.WorkerApiController],
+        providers: [worker_api_guard_1.WorkerApiGuard, worker_dispatch_service_1.WorkerDispatchService],
+        exports: [worker_dispatch_service_1.WorkerDispatchService],
+    })
+], WorkerApiModule);

package/runner/modules/worker-api/worker-dispatch.service.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var WorkerDispatchService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerDispatchService = void 0;
+const common_1 = require("@nestjs/common");
+const prisma_service_1 = require("../../prisma/prisma.service");
+let WorkerDispatchService = WorkerDispatchService_1 = class WorkerDispatchService {
+    prisma;
+    logger = new common_1.Logger(WorkerDispatchService_1.name);
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    /**
+     * Find the best worker for a pipeline session.
+     * Returns null if no worker is available.
+     */
+    async findWorker(projectId, userId) {
+        // 1. Check for a DEDICATED worker assigned to this project
+        const dedicatedWorker = await this.prisma.$queryRaw `
+      SELECT w.* FROM workers w
+      WHERE w.tier = 'DEDICATED'
+        AND w.owner_id = ${userId}
+        AND w.status = 'ONLINE'
+        AND w.active_sessions < w.max_concurrent
+        AND w.id IN (SELECT wp.worker_id FROM worker_projects wp WHERE wp.project_id = ${projectId})
+      ORDER BY w.active_sessions ASC
+      LIMIT 1
+    `;
+        if (dedicatedWorker.length > 0)
+            return dedicatedWorker[0];
+        // 2. Check shared pool
+        const sharedWorker = await this.prisma.$queryRaw `
+      SELECT w.* FROM workers w
+      WHERE w.tier = 'SHARED'
+        AND w.status = 'ONLINE'
+        AND w.active_sessions < w.max_concurrent
+      ORDER BY w.active_sessions ASC
+      LIMIT 1
+    `;
+        return sharedWorker.length > 0 ? sharedWorker[0] : null;
+    }
+    /**
+     * Check for stale workers and re-queue orphaned sessions.
+     * Called periodically (e.g., every 60 seconds).
+     */
+    async checkWorkerHealth() {
+        const staleThreshold = new Date(Date.now() - 2 * 60 * 1000); // 2 minutes
+        const staleCount = await this.prisma.worker.updateMany({
+            where: {
+                status: { not: "OFFLINE" },
+                lastHeartbeat: { lt: staleThreshold },
+            },
+            data: { status: "OFFLINE" },
+        });
+        if (staleCount.count > 0) {
+            this.logger.warn(`Marked ${staleCount.count} stale worker(s) as OFFLINE`);
+        }
+        // Re-queue sessions dispatched to now-offline workers
+        const orphanedSessions = await this.prisma.session.findMany({
+            where: {
+                status: "DISPATCHED",
+                worker: { status: "OFFLINE" },
+            },
+        });
+        for (const session of orphanedSessions) {
+            await this.prisma.session.update({
+                where: { id: session.id },
+                data: { status: "QUEUED", workerId: null },
+            });
+            this.logger.warn(`Re-queued orphaned session ${session.id}`);
+        }
+    }
+};
+exports.WorkerDispatchService = WorkerDispatchService;
+exports.WorkerDispatchService = WorkerDispatchService = WorkerDispatchService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [prisma_service_1.PrismaService])
+], WorkerDispatchService);