@kici-dev/orchestrator 0.1.15 → 0.1.17

package/dist/sources/build-platform-sources.d.ts

@@ -1,4 +1,3 @@
-import type { AppConfig } from '../config.js';
 import type { SourceManager } from './source-manager.js';
 import type { ProviderSource } from '../entry-helpers.js';
 /** One active generic-webhook routing-key row (subset consumed here). */
@@ -7,6 +6,9 @@ export interface GenericRoutingKeyRow {
     provider_type: string;
     name: string;
     has_git_config: boolean;
+    /** Raw `git_config` JSONB — used to check a local source's per-row
+     *  `repoBasePath` reachability before advertising its routing key. */
+    git_config: string | Record<string, unknown> | null;
 }
 /**
  * Build the full provider-source list the orchestrator advertises to the
@@ -22,5 +24,5 @@ export interface GenericRoutingKeyRow {
  * The generic-row loader is injected (rather than taking a `db`) so the merge
  * logic is unit-testable without a live database.
  */
-export declare function buildPlatformProviderSources(sourceManager: Pick<SourceManager, 'getSources'>, loadGenericRows: () => Promise<GenericRoutingKeyRow[]>, config: AppConfig): Promise<ProviderSource[]>;
+export declare function buildPlatformProviderSources(sourceManager: Pick<SourceManager, 'getSources'>, loadGenericRows: () => Promise<GenericRoutingKeyRow[]>): Promise<ProviderSource[]>;
 //# sourceMappingURL=build-platform-sources.d.ts.map

package/dist/stale-detector/stale-run-detector.d.ts

@@ -22,7 +22,9 @@ import type { CheckRunReporter } from '../reporting/check-run-reporter.js';
 import type { ScalerManager } from '../scaler/manager.js';
 import type { Dispatcher } from '../agent/dispatcher.js';
 import type { AgentRegistry } from '../agent/registry.js';
-import type { HeldRunStore } from '../environments/held-runs.js';
+import type { HeldRunStore, ReleaseSignal } from '../environments/held-runs.js';
+import type { StepApprovalBridge } from '../approvals/step-approval-bridge.js';
+import type { AccessLogWriter } from '../audit/access-log.js';
 export interface StaleRunDetectorDeps {
     db: Kysely<Database>;
     executionTracker: ExecutionTracker;
@@ -36,6 +38,18 @@ export interface StaleRunDetectorDeps {
     scanIntervalMs: number;
     /** Held run store for expiring overdue held runs. Optional -- if not set, held run cleanup is skipped. */
     heldRunStore?: HeldRunStore;
+    /** Step-approval bridge — notified when a step-scoped hold expires so the waiting agent fails the step. Optional. */
+    stepApprovalBridge?: StepApprovalBridge;
+    /** Fail a whole run when a job/workflow-scoped approval hold expires. Optional. */
+    failRun?: (runId: string, reason: string) => Promise<void>;
+    /**
+     * Resume a workflow whose install-gate wait-timer hold has elapsed. Wired to
+     * the same `resumeWorkflow` path as reviewer approvals. Optional -- if not
+     * set, wait-timer workflow holds are not auto-released.
+     */
+    onWorkflowRelease?: (signal: ReleaseSignal) => Promise<void>;
+    /** Access-log writer for the orchestrator audit stream. Optional -- if not set, expiry audit rows (`held_run.expire`) are skipped. */
+    accessLogWriter?: AccessLogWriter;
 }
 export declare class StaleRunDetector {
     private readonly db;
@@ -47,8 +61,25 @@ export declare class StaleRunDetector {
     private readonly staleThresholdMs;
     private readonly scanIntervalMs;
     private readonly heldRunStore?;
+    private readonly stepApprovalBridge?;
+    private readonly failRun?;
+    private readonly onWorkflowRelease?;
+    private readonly accessLogWriter?;
     private interval;
     constructor(deps: StaleRunDetectorDeps);
+    /**
+     * Release workflow install-gate wait-timer holds whose timer has elapsed.
+     * Runs BEFORE `expireOverdueHolds` so a wait hold resumes the workflow rather
+     * than being failed by the expire-and-fail sweep.
+     */
+    private releaseDueWaitHolds;
+    /**
+     * Expire overdue approval holds. Routes each overdue hold by scope BEFORE the
+     * bulk status flip: step-scoped holds notify the waiting agent (which fails
+     * the step), job/workflow-scoped holds fail the whole run. Then the bulk
+     * `expireOverdue()` flips every overdue row to `expired`.
+     */
+    private expireOverdueHolds;
     /**
      * Clean up orphaned jobs left in 'recovering' state from a previous orchestrator instance.
      *