Function buildBridgeWorkerLease

src/auth/runtime/leases.ts:230–268

(
  params: {
    credentials: RemoteCredentials
    nowMs?: number
    organizationUuid?: string | null
    providerMode?: Exclude<LeaseProviderMode, 'third_party_provider'>
    sessionId: string
  },
)

}

export function buildBridgeWorkerLease(
  params: {
    credentials: RemoteCredentials
    nowMs?: number
    organizationUuid?: string | null
    providerMode?: Exclude<LeaseProviderMode, 'third_party_provider'>
    sessionId: string
  },
): IssuedRuntimeLease {
  const issuedAt = params.nowMs ?? Date.now()
  const ttlMs = Math.max(0, params.credentials.expires_in * 1000)
  const expiresAt = issuedAt + ttlMs

  return {
    leaseKind: 'bridge_worker',
    leaseId: `bridge_worker:${params.sessionId}:${params.credentials.worker_epoch}`,
    sessionId: params.sessionId,
    state: ttlMs > 0 ? 'usable' : 'expired',
    renewable: true,
    renewalOwner: 'bridge_control_plane',
    issuedAt,
    expiresAt,
    renewAfter: computeRenewAfter(issuedAt, expiresAt, BRIDGE_RENEWAL_WINDOW_MS),
    graceUntil: expiresAt + BRIDGE_GRACE_WINDOW_MS,
    organizationUuid: params.organizationUuid ?? null,
    capabilities: ['bridge_worker', 'remote_control'],
    executionTarget: 'remote',
    providerMode: params.providerMode ?? 'noumena_managed',
    degradationMode: 'resume_required',
    recoveryMessage:
      'Bridge worker lease expired. Reconnect or resume the remote session to continue.',
    metadata: {
      apiBaseUrl: params.credentials.api_base_url,
      workerEpoch: params.credentials.worker_epoch,
      tokenTransport: 'jwt',
      ttlSeconds: params.credentials.expires_in,
    },
  }
}

export function buildRemoteSessionLease(
  params: {