feat(werkbank): runner queue endpoints + result persistence (WB-05) (#207)

2026-07-17 11:42:29 +00:00
parent 633f945a1e
commit 91a87677bc
11 changed files with 565 additions and 47 deletions
@@ -53,6 +53,11 @@ pub struct AgentConfig {
    /// default: it needs Docker access in the agent's runtime, which is a
    /// deployment opt-in.
    pub plc_runtime: PlcRuntimeConfig,
+    /// Static bearer for the Werkbank runner endpoints
+    /// (`/api/v1/werkbank/jobs/*`). Machine auth for runners leasing/completing
+    /// jobs — NOT a Keycloak JWT, since a runner acts across tenants. When
+    /// `None`, those endpoints are not mounted at all.
+    pub werkbank_runner_token: Option<SecretString>,
 }

 /// Configuration for the ephemeral soft-PLC "provision-and-test" path (#183).