runner.registration-token-resolve

Resolve a runner registration token without direct SSM clients

Resolve a runner registration token with workflow-mediated SSM reads.

Overview

Property	Value
Workflow type	Linear
Library	App-runners
Version	1.0

Input Schema

Field	Type	Required	Default	Description
runner_group_uuid	uuid	Yes	—	UUID of the RunnerGroup whose registration token should be resolved, picked from the organization's list of runner groups.
organization_uuid	uuid	No	—	UUID of the caller's organization, injected server-side from the authenticated request; scopes the operation to the correct tenant. Optional here — this workflow falls back to the runner group's own organization when omitted.

Output Schema

Field	Type	Required	Default	Description
runner_group_uuid	uuid	No	—	UUID of the RunnerGroup the resolved token belongs to, echoed from input on output.
organization_uuid	uuid	No	—	UUID of the caller's organization, echoed from input (or derived from the runner group) on output.
connection_uuid	uuid	No	—	UUID of the AWS CloudConnection used to read the PAT registration token from SSM Parameter Store (PAT auth type only); picked from the organization's AWS connections.
registration_token	string	No	—	—
token_source	string	No	—	—
token_expires_at	string	No	—	—
completed_at	string	No	—	—
failed_at	string	No	—	—
failure_reason	string	No	—	—
failed_step	string	No	—	—
failed_layer	json	No	—	—
failed_at_state	string	No	—	—
error	string	No	—	—
error_type	string	No	—	—

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	resolve	—
resolving	No	No	—	complete	—
completed	No	Yes	Yes	—	—
failed	No	Yes	No	—	—

State Diagram

Transitions

From	Action	To	Description
pending	resolve	resolving	—
resolving	complete	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "runner.registration-token-resolve",
  "initial_data": {
    "runner_group_uuid": "value"
  }
}