@kici-dev/orchestrator 0.1.13 → 0.1.15

package/dist/storage/filesystem.d.ts

@@ -46,14 +46,23 @@ export declare class FilesystemCacheStorage implements CacheStorage {
     private readMeta;
     private writeMeta;
     put(key: string, data: Buffer | string): Promise<void>;
-    get(key: string): Promise<Buffer | null>;
-    has(key: string): Promise<boolean>;
+    get(key: string, ttlMsOverride?: number): Promise<Buffer | null>;
+    has(key: string, ttlMsOverride?: number): Promise<boolean>;
     delete(key: string): Promise<boolean>;
     touch(key: string): Promise<void>;
-    getUrl(key: string): Promise<string | null>;
+    getUrl(key: string, ttlMsOverride?: number): Promise<string | null>;
     getUploadUrl(key: string): Promise<string>;
     getInternalUploadUrl(key: string): Promise<string>;
     initMeta(key: string): Promise<void>;
+    list(subPrefix: string): Promise<string[]>;
+    copy(srcKey: string, destKey: string): Promise<void>;
+    /**
+     * Recursively collect data files under `dir`, returning each as a cache key
+     * relative to `basePath` paired with its mtime. Metadata sidecars
+     * (`*.meta.json`) and the atomic-write temp files (`*.tmp-*`) are skipped so
+     * `list()` only surfaces real cache objects.
+     */
+    private walkDataFiles;
     private signedUrl;
     private deleteFiles;
 }

package/dist/storage/s3.d.ts

@@ -26,6 +26,15 @@ export interface S3CacheStorageOptions {
      * need a container-routable address (e.g., container DNS name).
      */
     externalEndpoint?: string;
+    /**
+     * Separate endpoint for the host-facing (CLI) pre-signed upload URL.
+     * The CLI running `kici run remote` is on the developer's host, which may
+     * reach the bucket at a different address than the orchestrator's own
+     * `endpoint` (e.g. an orchestrator in a container uses the compose DNS name
+     * while the host CLI uses localhost). When unset, `getInternalUploadUrl`
+     * falls back to the internal `endpoint` client (current behavior).
+     */
+    uploadEndpoint?: string;
     /** Use path-style access instead of virtual-hosted-style (required for most S3-compatible services) */
     forcePathStyle?: boolean;
 }
@@ -33,13 +42,15 @@ export declare class S3CacheStorage implements CacheStorage {
     private readonly client;
     /** Separate client for pre-signed URL generation (uses externalEndpoint if configured). */
     private readonly presignClient;
+    /** Separate client for the host CLI's pre-signed upload URL (uses uploadEndpoint if configured). */
+    private readonly uploadPresignClient;
     private readonly bucket;
     private readonly prefix;
     private readonly ttlMs;
     constructor(options: S3CacheStorageOptions);
     /** Build the full S3 object key from a cache key. */
     private objectKey;
-    /** Check if metadata indicates an expired item. */
+    /** Check if metadata indicates an expired item, honoring a per-op TTL override. */
     private isExpired;
     /**
      * Read metadata from an S3 object's custom headers.
@@ -54,14 +65,16 @@ export declare class S3CacheStorage implements CacheStorage {
     /** Check if an error is a "not found" error (NoSuchKey, NotFound, 404). */
     private isNotFoundError;
     put(key: string, data: Buffer | string): Promise<void>;
-    get(key: string): Promise<Buffer | null>;
-    has(key: string): Promise<boolean>;
+    get(key: string, ttlMsOverride?: number): Promise<Buffer | null>;
+    has(key: string, ttlMsOverride?: number): Promise<boolean>;
     delete(key: string): Promise<boolean>;
     touch(key: string): Promise<void>;
-    getUrl(key: string): Promise<string | null>;
+    getUrl(key: string, ttlMsOverride?: number): Promise<string | null>;
     getUploadUrl(key: string): Promise<string>;
     getInternalUploadUrl(key: string): Promise<string>;
     initMeta(key: string): Promise<void>;
+    list(subPrefix: string): Promise<string[]>;
+    copy(srcKey: string, destKey: string): Promise<void>;
     /** Delete an S3 object. Idempotent (doesn't error if missing). */
     private deleteObject;
 }

package/dist/storage/types.d.ts

@@ -29,10 +29,18 @@ export interface CacheMetadata {
 export interface CacheStorage {
     /** Store a value under the given key. Overwrites if key already exists. */
     put(key: string, data: Buffer | string): Promise<void>;
-    /** Retrieve a value by key. Returns null if not found or expired. */
-    get(key: string): Promise<Buffer | null>;
-    /** Check if a key exists and is not expired, without retrieving data. */
-    has(key: string): Promise<boolean>;
+    /**
+     * Retrieve a value by key. Returns null if not found or expired.
+     * `ttlMsOverride` applies a per-operation TTL instead of the backend's
+     * constructor-time default (lets per-org cache TTLs override the
+     * cluster-wide default without re-constructing the backend).
+     */
+    get(key: string, ttlMsOverride?: number): Promise<Buffer | null>;
+    /**
+     * Check if a key exists and is not expired, without retrieving data.
+     * `ttlMsOverride` applies a per-operation TTL (see `get`).
+     */
+    has(key: string, ttlMsOverride?: number): Promise<boolean>;
     /** Delete a key. Returns true if the key existed (even if expired). */
     delete(key: string): Promise<boolean>;
     /** Update lastAccessedAt to now, refreshing the TTL. No-op if key doesn't exist. */
@@ -40,8 +48,9 @@ export interface CacheStorage {
     /**
      * Get a pre-signed download URL for the cached item.
      * Returns null if not found or expired.
+     * `ttlMsOverride` applies a per-operation TTL (see `get`).
      */
-    getUrl(key: string): Promise<string | null>;
+    getUrl(key: string, ttlMsOverride?: number): Promise<string | null>;
     /**
      * Generate a pre-signed PUT URL for direct agent upload.
      * Uses the external endpoint (container-routable) when configured.
@@ -61,6 +70,15 @@ export interface CacheStorage {
      * Sets created-at and last-accessed-at to now.
      */
     initMeta(key: string): Promise<void>;
+    /**
+     * List object keys (relative to the configured prefix) under a sub-prefix,
+     * newest first (by createdAt/last-modified metadata; falls back to
+     * lexicographic when metadata is unavailable). Returns full cache keys
+     * (without the storage prefix). Returns an empty array when nothing matches.
+     */
+    list(subPrefix: string): Promise<string[]>;
+    /** Server-side copy from one cache key to another (used for atomic temp -> final commit). */
+    copy(srcKey: string, destKey: string): Promise<void>;
 }
 import type { SharedS3Config } from '@kici-dev/shared';
 /**
@@ -70,6 +88,8 @@ import type { SharedS3Config } from '@kici-dev/shared';
 export type S3CacheStorageConfig = SharedS3Config & {
     type: 's3';
     ttlMs: number;
+    /** Host-facing pre-signed upload endpoint (see S3CacheStorageOptions.uploadEndpoint). */
+    uploadEndpoint?: string;
 };
 /**
  * Filesystem backend config. Stores blobs as files under `basePath` and

package/dist/worker/in-memory-job-queue.d.ts

@@ -12,6 +12,10 @@
 import { DispatchQueueStatus, type QueuedJobInput, type QueuedJob } from '../queue/job-queue.js';
 export declare class InMemoryJobQueue {
     private readonly jobs;
+    /** Jobs handed to an agent, retained so requeue / lookups can restore them. */
+    private readonly dispatched;
+    /** Per-job re-dispatch counter (parity with dispatch_queue.dispatch_attempts). */
+    private readonly attempts;
     /** Enqueue a job in memory and return its ID. */
     enqueue(input: QueuedJobInput): Promise<string>;
     /**
@@ -40,20 +44,49 @@ export declare class InMemoryJobQueue {
     dequeueById(jobId: string, agentLabels: string[], agentMandatoryLabels?: string[]): Promise<QueuedJob | null>;
     /** Return count of pending jobs. */
     getDepth(): Promise<number>;
-    /** No-op — workers don't track dispatch status in a queue. */
+    /** No-op — the job is already tracked in `dispatched` from dequeue. */
     markDispatched(_jobId: string, _agentId: string): Promise<void>;
-    /** No-op. */
-    markFailed(_jobId: string, _reason: string): Promise<void>;
-    /** No-op. */
-    markCompleted(_jobId: string): Promise<void>;
+    /** Drop the dispatched entry — the job reached a terminal state. */
+    markFailed(jobId: string, _reason: string): Promise<void>;
+    /** Drop the dispatched entry — the job completed. */
+    markCompleted(jobId: string): Promise<void>;
     /** No-op. */
     markRecovering(_jobId: string): Promise<void>;
+    /**
+     * No-op. The worker's dispatch-ack deadline lives entirely in the
+     * in-memory timer; HA-safe persistence belongs to the coord's DB-backed
+     * queue, not the worker's in-memory queue.
+     */
+    setAckDeadline(_jobId: string, _deadline: Date, _agentId: string): Promise<void>;
+    /** No-op (see setAckDeadline). */
+    clearAckDeadline(_jobId: string): Promise<void>;
+    /** Always empty — the worker never rehydrates ack timers from a DB. */
+    getDispatchedAwaitingAck(): Promise<Array<{
+        id: string;
+        runId: string;
+        agentId: string | null;
+        deadline: Date;
+    }>>;
+    /** Always empty — the worker is never the leader running the ack sweep. */
+    listExpiredAckDeadlines(_now: Date): Promise<Array<{
+        id: string;
+        runId: string;
+        agentId: string | null;
+    }>>;
+    /**
+     * Return a dispatched job to pending for re-dispatch, bumping its attempt
+     * counter. Mirrors the DB-backed `JobQueue.requeue`. Returns the new
+     * attempt count, or null when the job is not currently dispatched.
+     */
+    requeue(jobId: string): Promise<number | null>;
+    /** Full job lookup across pending and dispatched jobs. */
+    getFullJobById(jobId: string): Promise<QueuedJob | null>;
     /** Return all pending jobs. */
     getPendingJobs(): Promise<QueuedJob[]>;
     /** Always returns empty array. */
     getDispatchedJobIdsByRunId(_runId: string): Promise<string[]>;
-    /** Always returns null. */
-    getJobById(_jobId: string): Promise<{
+    /** Lookup across pending and dispatched jobs (id / runId / status). */
+    getJobById(jobId: string): Promise<{
         id: string;
         runId: string;
         status: DispatchQueueStatus;

package/dist/ws/agent-handler.d.ts

@@ -23,6 +23,8 @@ import type { AgentTokenStore } from '../agent/token-store.js';
 import type { OwnershipTracker } from '../agent/ownership-tracker.js';
 import type { SourceCache } from '../cache/source-cache.js';
 import type { DepCache } from '../cache/dep-cache.js';
+import type { UserCache } from '../cache/user-cache.js';
+import type { DispatchCacheRefTracker } from '../cache/dispatch-cache-ref-tracker.js';
 import type { PendingBuildTracker } from '../cache/pending-builds.js';
 import type { PendingInitTracker } from '../cache/pending-inits.js';
 import type { PendingDynamicTracker } from '../cache/pending-dynamics.js';
@@ -166,6 +168,17 @@ export interface AgentWsHandlerDeps {
     sourceCache?: SourceCache;
     /** Dep cache for generating pre-signed upload URLs. */
     depCache?: DepCache;
+    /** User-facing cache for serving restore/save requests from the sandbox. */
+    userCache?: UserCache;
+    /**
+     * Server-side jobId -> user-cache-namespace store. The orchestrator records
+     * `{orgId, repoId, cacheRefScope, runId}` per job at dispatch time; the
+     * `cache.user.*` handlers resolve the ref from HERE (keyed by the wire jobId),
+     * NEVER from the wire message body — a `cache.user.*` message carries only a
+     * `jobId` + `key`, so an agent can name a job it owns but can never influence
+     * which org/repo/scope that job resolves to.
+     */
+    dispatchCacheRefs?: DispatchCacheRefTracker;
     /** Cache storage for setting metadata after upload completion. */
     cacheStorage?: CacheStorage;
     /** Optional rate limiter configuration. */

package/dist/ws/dashboard-env-handler.d.ts

@@ -81,6 +81,7 @@ export declare class DashboardEnvHandler {
     private handleEnvGet;
     private handleEnvCreate;
     private handleEnvUpdate;
+    private handleTestAccessSet;
     private handleEnvDelete;
     private handleVarsList;
     private handleVarSet;

package/dist/ws/platform-client.d.ts

@@ -1,4 +1,4 @@
-import { type OrchestratorToPlatformMessage, type WebhookRelay, type WebhookRelayResult, type TrustPolicyUpdate, type StaleCheckrunCleanup, type DashboardRunDetailRequest, type DashboardStepLogsRequest, type DashboardOrchLogsRequest, type RunRerunRequest, type ManualScheduleRequest, type RunCancelRequest, type DashboardPayloadRequest, type DashboardPlatformToOrchMessage, type DashboardDiagnosticsRequest, type DashboardScalerCapacityRequest, type DashboardScalerAgentsRequest, type JoinRequest, type JoinResponse, type OrchCapabilities, type OrchRole } from '@kici-dev/engine';
+import { type OrchestratorToPlatformMessage, type WebhookRelay, type WebhookRelayResult, type TrustPolicyUpdate, type StaleCheckrunCleanup, type DashboardRunDetailRequest, type DashboardRunsListRequest, type DashboardRunsFiltersRequest, type DashboardSourcesListRequest, type DashboardStepLogsRequest, type DashboardOrchLogsRequest, type RunRerunRequest, type ManualScheduleRequest, type RunCancelRequest, type DashboardPayloadRequest, type DashboardPlatformToOrchMessage, type DashboardDiagnosticsRequest, type DashboardScalerCapacityRequest, type DashboardScalerAgentsRequest, type JoinRequest, type JoinResponse, type OrchCapabilities, type OrchRole } from '@kici-dev/engine';
 import { RelayBufferRegistry, type RelayStartMeta } from '../webhook/relay-buffer.js';
 /**
  * Verification + processing outcome returned by the chunked relay path's
@@ -89,6 +89,12 @@ export interface PlatformClientOptions {
     onAuthenticated?: () => void;
     /** Optional callback for dashboard run detail requests from Platform. */
     onDashboardRunDetail?: (msg: DashboardRunDetailRequest) => void;
+    /** Optional callback for dashboard runs.list (operator console) requests from Platform. */
+    onDashboardRunsList?: (msg: DashboardRunsListRequest) => void;
+    /** Optional callback for dashboard runs.filters (operator console) requests from Platform. */
+    onDashboardRunsFilters?: (msg: DashboardRunsFiltersRequest) => void;
+    /** Optional callback for dashboard sources.list (operator console) requests from Platform. */
+    onDashboardSourcesList?: (msg: DashboardSourcesListRequest) => void;
     /** Optional callback for dashboard step logs requests from Platform. */
     onDashboardStepLogs?: (msg: DashboardStepLogsRequest) => void;
     /** Optional callback for run re-run requests from Platform (dashboard action). */
@@ -175,6 +181,9 @@ export declare class PlatformClient {
     private readonly onPeerDiscover?;
     private readonly onAuthenticated?;
     private readonly onDashboardRunDetail?;
+    private readonly onDashboardRunsList?;
+    private readonly onDashboardRunsFilters?;
+    private readonly onDashboardSourcesList?;
     private readonly onDashboardStepLogs?;
     private readonly onRunRerun?;
     private readonly onManualSchedule?;

package/package.json

@@ -1,19 +1,22 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
-    "kici",
     "ci",
-    "cd",
-    "ci-cd",
+    "cicd",
+    "continuous-integration",
     "typescript",
-    "workflows",
-    "devops",
+    "workflow",
     "orchestrator",
-    "webhook",
     "self-hosted"
   ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kici-dev/kici-public.git",
+    "directory": "packages/orchestrator"
+  },
+  "bugs": "https://github.com/kici-dev/kici-public/issues",
   "homepage": "https://kici.dev",
   "author": {
     "name": "KiCI",
@@ -82,8 +85,8 @@
     "ws": "^8.20.0",
     "yaml": "^2.8.3",
     "zod": "^4.3.6",
-    "@kici-dev/engine": "0.1.13",
-    "@kici-dev/shared": "0.1.13"
+    "@kici-dev/engine": "0.1.15",
+    "@kici-dev/shared": "0.1.15"
   },
   "kici": {
     "metrics": {
@@ -97,7 +100,7 @@
     "@types/archiver": "^7.0.0",
     "@types/dockerode": "^4.0.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.1.13"
+    "@kici-dev/agent": "0.1.15"
   },
   "scripts": {
     "build": "node ../../scripts/build-service.mjs && tsc --emitDeclarationOnly",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.1.13",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.1.13/d1c83222-7576-4635-a817-30c9d645853a",
+  "name": "@kici-dev/orchestrator@0.1.15",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.1.15/098f67ed-8ddb-4745-a28c-e2c731216540",
   "creationInfo": {
-    "created": "2026-05-28T10:37:57Z",
+    "created": "2026-06-11T03:03:47Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -1477,9 +1477,29 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.13",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "name": "@kici-dev/core",
+      "versionInfo": "0.1.15",
+      "downloadLocation": "NOASSERTION",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "Apache-2.0",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.15"
+        }
+      ],
+      "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
+      "homepage": "https://kici.dev"
+    },
+    {
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.15",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.13",
+      "versionInfo": "0.1.15",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1490,7 +1510,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.13"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.15"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1499,7 +1519,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.1.13",
+      "versionInfo": "0.1.15",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1510,16 +1530,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.1.13"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.1.15"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.13",
+      "versionInfo": "0.1.15",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1530,7 +1550,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.13"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.15"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -10682,17 +10702,47 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.128.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
@@ -10728,12 +10778,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.13",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.15",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -10837,102 +10887,107 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1038.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.15",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.28.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.40.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-diff-7.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.18",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.128.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.20.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.8.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.13",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.15",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },