runner.hosted-tenant-provision

Enable Orkestia-hosted runners for an organization: create the hosted runner group, point the org's agent settings at it, tighten the session quotas for platform-paid compute, and trigger the first warm-pool reconcile. Idempotent — re-enabling returns the existing pool.

Enable Orkestia-hosted runners for one organization.

Overview

Property	Value
Workflow type	Atomic
Library	App-runners
Version	1.0

Input Schema

Field	Type	Required	Default	Description
organization_uuid	uuid	No	—	UUID of the organization enabling hosted runners, injected server-side from the authenticated request.
name	string	No	—	Display name for the pool. Defaults to 'Orkestia hosted runners'.
backend_type	string	No	—	Which platform-owned backend to host the pool on: 'kubernetes' (default) or 'azure_vm'. An organization may hold one hosted pool per backend, because the Kubernetes pool cannot run coding work on any AKS node image (Landlock ABI 4 against a floor of 6).

Output Schema

Field	Type	Required	Default	Description
runner_group_uuid	uuid	No	—	UUID of the RunnerGroup this action operates on, picked from the organization's list of runner groups; echoed on output alongside terminal/error payloads.
organization_uuid	uuid	No	—	UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant. Echoed on output alongside terminal/error payloads.
runner_execution_uuid	uuid	No	—	UUID of the RunnerExecution this action operates on, picked from the organization's (optionally group-scoped) list of executions; echoed on output alongside terminal/error payloads.
workflow_uuid	string	No	—	Engine workflow-run identifier (or, for GitHub-Actions-triggered flows, an external GitHub Actions run id) associated with this record; not a platform entity foreign key despite the name. No source is attached since there is no list/query workflow for an internal run id.
status	string	No	—	—
outcome	string	No	—	—
initiated_at	string	No	—	—
completed_at	string	No	—	—
failed_at	string	No	—	—
failure_reason	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—
actor_uuid	uuid	No	—	UUID of the user or service actor who triggered this action, injected server-side from the authenticated request when available; used for audit/attribution only. Optional — omitted for system or service-triggered actions with no human actor.
reason	string	No	—	—
workflow_run_uuid	string	No	—	Engine-stamped correlation/run id for this DAG execution (ADR-015/E1 plumbing), written into state_data by action_start; not a foreign key to any business entity. No source is attached since there is no list/query workflow for an internal run id.
retry_count	integer	No	—	—
retried_from	string	No	—	—
failed_step	json	No	—	—
failed_layer	json	No	—	—
failed_at_state	json	No	—	—
compensation_trigger	json	No	—	—
comp_current_layer	json	No	—	—
comp_queue	json	No	—	—
comp_retry_count	json	No	—	—
backend_type	string	No	—	—
quotas	json	No	—	—
reconcile_workflow_uuid	string	No	—	—
broker_agent_uuid	uuid	No	—	—
broker_secret_name	string	No	—	—
name	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	provision	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	provision	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "runner.hosted-tenant-provision",
  "initial_data": {
    "organization_uuid": "value",
    "name": "value",
    "backend_type": "value"
  }
}