refactor(storage): make runner config store provider-neutral

[edersonbrilhante]

Description

Introduces the provider-neutral RunnerConfigStore contract and moves the existing SSM implementation behind it. Scale-up and runner creation now write registration-token or JIT configuration through the store's create operation, while SSM-specific parameter paths, tags, encryption behavior, and environment parsing stay in the AWS adapter.

The adapter preserves the existing stored values and metadata, exposes its maximum write throughput so callers can pace batches without hard-coding SSM limits, and accepts provider-neutral runner metadata that is translated into SSM tags. This establishes the storage boundary without adding another backend or changing Terraform resource addresses.

Test Plan

• Added/updated runner-config store and control-plane tests.
• git diff --check passed.
• Runtime Yarn tests could not be run locally because the repository's pinned Yarn launcher is unavailable in this environment; CI should provide the full test result.

Related Issues

• Related storage-backend work: feat: add optional DynamoDB runner config storage #5266

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 4 package(s) with unknown licenses.

See the Details below.

License Issues

lambdas/functions/control-plane/package.json

Package	Version	License	Issue Type
@aws-github-runner/storage-providers		Null	Unknown License

lambdas/libs/compute-providers/package.json

Package	Version	License	Issue Type
@aws-github-runner/storage-providers		Null	Unknown License

lambdas/libs/storage-providers/package.json

Package	Version	License	Issue Type
@aws-github-runner/aws-powertools-util		Null	Unknown License
@aws-github-runner/aws-ssm-util		Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/@aws-github-runner/storage-providers		Unknown	Unknown
npm/@aws-github-runner/storage-providers		Unknown	Unknown
npm/@aws-github-runner/aws-powertools-util		Unknown	Unknown
npm/@aws-github-runner/aws-ssm-util		Unknown	Unknown
npm/@aws-sdk/client-ssm	^3.1009.0	Unknown	Unknown
npm/aws-sdk-client-mock	^4.1.0	Unknown	Unknown
npm/aws-sdk-client-mock-jest	^4.1.0	Unknown	Unknown

Scanned Files

• lambdas/functions/control-plane/package.json
• lambdas/libs/compute-providers/package.json
• lambdas/libs/storage-providers/package.json

[Copilot]

🟢 Approval recommended

The refactor preserves existing SSM behavior, with only non-blocking dependency and coverage-configuration cleanup remaining.

Pull request overview

Introduces a provider-neutral runner configuration store while retaining SSM as the current backend.

Changes:

• Adds the RunnerConfigStore contract and SSM adapter.
• Routes registration-token and JIT configuration writes through the store.
• Updates metadata contracts, dependencies, tests, and throughput pacing.

File summaries

File	Description
lambdas/yarn.lock	Registers workspace dependencies.
lambdas/libs/storage-providers/vitest.config.ts	Configures package tests and coverage.
lambdas/libs/storage-providers/tsconfig.json	Configures TypeScript compilation.
lambdas/libs/storage-providers/runner-config.ts	Selects the SSM implementation.
lambdas/libs/storage-providers/runner-config.test.ts	Tests store creation.
lambdas/libs/storage-providers/package.json	Defines the new workspace package.
lambdas/libs/storage-providers/index.ts	Exports the public storage API.
lambdas/libs/storage-providers/environment.d.ts	Declares provider environment typing.
lambdas/libs/storage-providers/core/index.ts	Defines provider-neutral contracts.
lambdas/libs/storage-providers/aws/ssm/runner-config-store.ts	Implements SSM storage.
lambdas/libs/storage-providers/aws/ssm/runner-config-store.test.ts	Tests SSM behavior.
lambdas/libs/storage-providers/aws/ssm/parameter-store-tags.ts	Parses and validates SSM tags.
lambdas/libs/storage-providers/aws/ssm/environment.d.ts	Declares SSM environment variables.
lambdas/libs/compute-providers/package.json	Updates workspace dependencies.
lambdas/libs/compute-providers/core/index.ts	Neutralizes runner metadata contracts.
lambdas/libs/compute-providers/aws/ec2/src/control-plane/scale-up.test.ts	Updates EC2 metadata expectations.
lambdas/libs/compute-providers/aws/ec2/src/control-plane/runner-creation.ts	Produces neutral runner metadata.
lambdas/functions/control-plane/src/scale-runners/scale-up.ts	Removes token-path coupling.
lambdas/functions/control-plane/src/scale-runners/scale-up.test.ts	Updates scale-up integration tests.
lambdas/functions/control-plane/src/scale-runners/scale-up-contract.test.ts	Supplies adapter environment configuration.
lambdas/functions/control-plane/src/scale-runners/github-runner.ts	Writes configurations through the store.
lambdas/functions/control-plane/src/pool/pool.ts	Removes token-path coupling from pools.
lambdas/functions/control-plane/src/pool/pool-contract.test.ts	Configures SSM for contract tests.
lambdas/functions/control-plane/src/modules.d.ts	Removes obsolete local environment typing.
lambdas/functions/control-plane/package.json	Adds the storage package dependency.

Review details

• Files reviewed: 21/25 changed files
• Comments generated: 3
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.