@kici-dev/orchestrator 0.1.18 → 0.1.19

package/dist/cli.js

@@ -15096,7 +15096,9 @@ function renderBootScript(cfg) {
 		"#!/usr/bin/env bash",
 		`# Generated by kici-admin firecracker --persist for bridge ${cfg.bridgeName}. Do not hand-edit.`,
 		"set -euo pipefail",
-		`printf '%s\\n' "${NM_CONF_CONTENT.replace(/\n/g, "\\n").replace(/"/g, "\\\"")}" > ${NM_CONF_PATH} || true`,
+		`cat > ${NM_CONF_PATH} <<'KICI_NM_EOF' || true`,
+		NM_CONF_CONTENT.replace(/\n$/, ""),
+		"KICI_NM_EOF",
 		"HOST_IFACE=$(ip -j route show default | sed -n 's/.*\"dev\":\"\\([^\"]*\\)\".*/\\1/p' | head -1)",
 		"if [ -z \"$HOST_IFACE\" ]; then echo \"no default-route iface\" >&2; exit 1; fi",
 		...lines,

package/dist/server.js

@@ -8937,16 +8937,25 @@ async function cancelRunWithReason(deps, runId, reason, options = {}) {
 		const agentId = dispatcher.getAgentIdForJob(jobId);
 		if (!agentId) continue;
 		const entry = registry.get(agentId);
-		if (!entry?.ws) continue;
-		entry.ws.send(JSON.stringify({
-			type: "job.cancel",
-			messageId: randomUUID(),
-			runId,
-			jobId,
-			reason,
-			...force && { force: true }
-		}));
-		agentsNotified++;
+		if (entry?.ws?.readyState !== 1) continue;
+		try {
+			entry.ws.send(JSON.stringify({
+				type: "job.cancel",
+				messageId: randomUUID(),
+				runId,
+				jobId,
+				reason,
+				...force && { force: true }
+			}));
+			agentsNotified++;
+		} catch (err) {
+			logger$88.warn("Failed to send job.cancel to agent; treating job as orphaned", {
+				runId,
+				jobId,
+				agentId,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		}
 	}
 	const pendingResult = await db.updateTable("execution_jobs").set({
 		status: ExecutionJobStatus.enum.cancelled,
@@ -19383,6 +19392,21 @@ var init_admin_runs = __esmMin((() => {
 }));
 //#endregion
 //#region src/cold-store/load-event-log-range.ts
+/**
+* Read-through helper for `event_log` (Orchestrator) — Phase E.
+*
+* Mirrors the Platform-side `load-event-log-range.ts`. Tenant column is
+* `routing_key` (NOT NULL on this side) so cold-store partitioning
+* doesn't need a synthetic-tenant fallback. Partition column is
+* `received_at`.
+*
+* The orchestrator's `event_log` row carries the `payload_key` reference
+* (an S3 object that holds the gzipped webhook body). Cold-store
+* archives the row metadata and preserves `payload_key` verbatim — the
+* payload blob itself stays in object storage indefinitely so the
+* dashboard's payload-detail view continues to resolve archived
+* deliveries identically to hot ones.
+*/
 async function loadEventLogRange(args) {
 	const { db, coldStore, routingKey, orgId, event, action, status, deliveryId, fromTs, toTs, limit, offset, includeArchived } = args;
 	const warmCutoff = /* @__PURE__ */ new Date(Date.now() - EVENT_LOG_WARM_TTL_DAYS * 864e5);
@@ -19400,6 +19424,16 @@ async function loadEventLogRange(args) {
 	if (coldFromTs >= warmCutoff) return hotRows;
 	const remaining = limit - hotRows.length;
 	if (remaining <= 0) return hotRows;
+	let hotCountQuery = db.selectFrom("event_log").select(sql`count(*)::text`.as("n")).where("routing_key", "=", routingKey);
+	if (orgId) hotCountQuery = hotCountQuery.where("org_id", "=", orgId);
+	if (event) hotCountQuery = hotCountQuery.where("event", "=", event);
+	if (action) hotCountQuery = hotCountQuery.where("action", "=", action);
+	if (status) hotCountQuery = hotCountQuery.where("status", "=", status);
+	if (deliveryId) hotCountQuery = hotCountQuery.where("delivery_id", "like", `%${deliveryId}%`);
+	if (fromTs) hotCountQuery = hotCountQuery.where("received_at", ">=", fromTs);
+	if (toTs) hotCountQuery = hotCountQuery.where("received_at", "<", toTs);
+	const hotCount = Number((await hotCountQuery.executeTakeFirst())?.n ?? "0");
+	const coldOffset = Math.max(0, offset - hotCount);
 	const coldToTs = toTs && toTs < warmCutoff ? toTs : warmCutoff;
 	const coldRows = [];
 	try {
@@ -19416,7 +19450,6 @@ async function loadEventLogRange(args) {
 			if (status !== void 0 && row.status !== status) continue;
 			if (deliveryId !== void 0 && !row.delivery_id.includes(deliveryId)) continue;
 			coldRows.push(row);
-			if (coldRows.length >= remaining) break;
 		}
 	} catch (err) {
 		if (hotRows.length === 0) {
@@ -19436,7 +19469,7 @@ async function loadEventLogRange(args) {
 		const at = a.received_at instanceof Date ? a.received_at.getTime() : new Date(a.received_at).getTime();
 		return (b.received_at instanceof Date ? b.received_at.getTime() : new Date(b.received_at).getTime()) - at;
 	});
-	return [...hotRows, ...coldRows.slice(0, remaining)];
+	return [...hotRows, ...coldRows.slice(coldOffset, coldOffset + remaining)];
 }
 /**
 * Detail lookup by `(orgId, deliveryId)`. The dashboard handler joins
@@ -20597,14 +20630,14 @@ var init_admin_config = __esmMin((() => {
 function createHealthRoutes$1(deps = {}) {
 	return createHealthRoutes({
 		livenessInfo: () => ({
-			version: "0.1.18",
-			buildDate: "2026-06-17T09:57:52.557Z",
-			buildCommit: "d8cff38bb",
-			sdkVersion: "0.1.18",
+			version: "0.1.19",
+			buildDate: "2026-06-19T04:32:44.899Z",
+			buildCommit: "1590f5e99",
+			sdkVersion: "0.1.19",
 			sdkBundleHash: "8308089347c304e41b457d3867b17bbff11d6b5cd9706b6823e7abdbd849f33f",
-			sharedVersion: "0.1.18",
+			sharedVersion: "0.1.19",
 			sharedBundleHash: "5f2c220f24d166b0f13d0620a2e80d19689ac8b683a12154daef44e938fd46a7",
-			engineVersion: "0.1.18",
+			engineVersion: "0.1.19",
 			engineBundleHash: "79ce14640d1798eaaa7cb3aa6c4bc325da3bff1e9f4716936e19614eabb1d858"
 		}),
 		readinessCheck: deps.db ? async () => {
@@ -20639,7 +20672,7 @@ function createCapabilitiesRoutes() {
 	const app = new Hono();
 	app.get("/api/v1/capabilities", (c) => {
 		const manifest = {
-			orchestratorVersion: "0.1.18",
+			orchestratorVersion: "0.1.19",
 			protocolVersion: PROTOCOL_VERSION,
 			minProtocolVersion: MIN_PROTOCOL_VERSION
 		};
@@ -32495,7 +32528,7 @@ var init_peer_client = __esmMin((() => {
 	init_peer_crypto();
 	init_peer_credentials();
 	logger$42 = createLogger({ prefix: "peer-client" });
-	SOFTWARE_VERSION$1 = "0.1.18";
+	SOFTWARE_VERSION$1 = "0.1.19";
 	PeerClient$1 = class {
 		ws = null;
 		_state = "disconnected";
@@ -34021,7 +34054,7 @@ var init_peer_handler = __esmMin((() => {
 	init_peer_crypto();
 	init_join_token();
 	logger$41 = createLogger({ prefix: "peer-handler" });
-	SOFTWARE_VERSION = "0.1.18";
+	SOFTWARE_VERSION = "0.1.19";
 	RATE_LIMIT_MAX = 5;
 	RATE_LIMIT_WINDOW_MS = 6e4;
 }));
@@ -49069,12 +49102,16 @@ async function resolveTestRunSecrets(input, deps, orgId, jobEnvironment) {
 }
 function buildJobInput(workflow, mat, ctx, input, secretBundle, fields, environmentVars) {
 	const staticJob = mat.lockJob;
-	const runsOnLabels = Array.isArray(staticJob.runsOn) ? staticJob.runsOn : [staticJob.runsOn];
+	const runsOnSel = partitionMatchers(staticJob.runsOn ?? []);
+	const excludeSel = partitionMatchers(staticJob.excludeLabels ?? []);
 	return {
 		runId: ctx.runId,
 		workflowName: workflow.name,
 		jobName: mat.expandedName,
-		runsOnLabels,
+		runsOnLabels: runsOnSel.exact,
+		runsOnPatterns: runsOnSel.regex,
+		excludeLabels: excludeSel.exact,
+		excludePatterns: excludeSel.regex,
 		jobConfig: {
 			source: workflow.source ?? ctx.fullLockFile.source,
 			workflowName: workflow.name,
@@ -56132,9 +56169,14 @@ async function dispatchRerunJobs(opts) {
 	if (deps.coordinator && materializedJobs.length > 0) {
 		const jobsToRoute = materializedJobs.map((mat) => {
 			const job = mat.lockJob;
+			const runsOnSel = partitionMatchers(job.runsOn ?? []);
+			const excludeSel = partitionMatchers(job.excludeLabels ?? []);
 			return {
 				jobName: mat.expandedName,
-				runsOnLabels: [Array.isArray(job.runsOn) ? job.runsOn : [job.runsOn]],
+				runsOnLabels: [runsOnSel.exact],
+				runsOnPatterns: runsOnSel.regex,
+				excludeLabels: excludeSel.exact,
+				excludePatterns: excludeSel.regex,
 				jobConfig: buildRerunJobConfig(mat),
 				repoUrl,
 				ref: originalRun.ref,
@@ -56169,7 +56211,7 @@ async function dispatchRerunJobs(opts) {
 			for (const local of routeResult.localJobs) {
 				const runsOnLabels = (() => {
 					const job = materializedJobs.find((m) => m.expandedName === local.jobName)?.lockJob;
-					return job ? Array.isArray(job.runsOn) ? job.runsOn : [job.runsOn] : void 0;
+					return job ? partitionMatchers(job.runsOn ?? []).exact : void 0;
 				})();
 				const matrixValues = matrixByName.get(local.jobName);
 				dispatchedJobs.push({
@@ -56196,12 +56238,17 @@ async function dispatchRerunJobs(opts) {
 	if (!routedViaCoordinator) for (const mat of materializedJobs) {
 		const job = mat.lockJob;
 		const matrixValues = mat.variantValues;
-		const runsOnLabels = Array.isArray(job.runsOn) ? job.runsOn : [job.runsOn];
+		const runsOnSel = partitionMatchers(job.runsOn ?? []);
+		const excludeSel = partitionMatchers(job.excludeLabels ?? []);
+		const runsOnLabels = runsOnSel.exact;
 		const jobInput = {
 			runId: newRunId,
 			workflowName: workflow.name,
 			jobName: mat.expandedName,
 			runsOnLabels,
+			runsOnPatterns: runsOnSel.regex,
+			excludeLabels: excludeSel.exact,
+			excludePatterns: excludeSel.regex,
 			jobConfig: buildRerunJobConfig(mat),
 			repoUrl,
 			ref: originalRun.ref,
@@ -56415,9 +56462,14 @@ async function tryRouteViaCoordinator(args) {
 	const installationId = typeof registration.providerContext.installationId === "number" ? registration.providerContext.installationId : void 0;
 	const jobsToRoute = materializedJobs.map((mat) => {
 		const job = mat.lockJob;
+		const runsOnSel = partitionMatchers(job.runsOn ?? []);
+		const excludeSel = partitionMatchers(job.excludeLabels ?? []);
 		return {
 			jobName: mat.expandedName,
-			runsOnLabels: [Array.isArray(job.runsOn) ? [...job.runsOn] : [job.runsOn]],
+			runsOnLabels: [runsOnSel.exact],
+			runsOnPatterns: runsOnSel.regex,
+			excludeLabels: excludeSel.exact,
+			excludePatterns: excludeSel.regex,
 			jobConfig: buildManualJobConfig(workflow, mat),
 			repoUrl,
 			ref: "",
@@ -56450,7 +56502,7 @@ async function tryRouteViaCoordinator(args) {
 	if (!routeResult) return null;
 	const dispatchedJobs = routeResult.localJobs.map((local) => {
 		const job = materializedJobs.find((m) => m.expandedName === local.jobName)?.lockJob;
-		const runsOnLabels = job ? Array.isArray(job.runsOn) ? [...job.runsOn] : [job.runsOn] : void 0;
+		const runsOnLabels = job ? partitionMatchers(job.runsOn ?? []).exact : void 0;
 		const matrixValues = matrixByName.get(local.jobName);
 		return {
 			jobId: local.jobId,
@@ -56483,12 +56535,17 @@ async function dispatchDirectly(args) {
 	for (const mat of materializedJobs) {
 		const job = mat.lockJob;
 		const matrixValues = mat.variantValues;
-		const runsOnLabels = Array.isArray(job.runsOn) ? [...job.runsOn] : [job.runsOn];
+		const runsOnSel = partitionMatchers(job.runsOn ?? []);
+		const excludeSel = partitionMatchers(job.excludeLabels ?? []);
+		const runsOnLabels = runsOnSel.exact;
 		const jobInput = {
 			runId: newRunId,
 			workflowName: workflow.name,
 			jobName: mat.expandedName,
 			runsOnLabels,
+			runsOnPatterns: runsOnSel.regex,
+			excludeLabels: excludeSel.exact,
+			excludePatterns: excludeSel.regex,
 			jobConfig: buildManualJobConfig(workflow, mat),
 			repoUrl,
 			ref: "",
@@ -58212,13 +58269,13 @@ var init_worker_core = __esmMin((() => {
 	init_fleet_wiring();
 	init_worker_status();
 	init_agent_heartbeat();
-	ORCHESTRATOR_VERSION$1 = "0.1.18";
-	WORKER_BUILD_COMMIT = "d8cff38bb";
-	WORKER_SDK_VERSION = "0.1.18";
+	ORCHESTRATOR_VERSION$1 = "0.1.19";
+	WORKER_BUILD_COMMIT = "1590f5e99";
+	WORKER_SDK_VERSION = "0.1.19";
 	WORKER_SDK_BUNDLE_HASH = "8308089347c304e41b457d3867b17bbff11d6b5cd9706b6823e7abdbd849f33f";
-	WORKER_SHARED_VERSION = "0.1.18";
+	WORKER_SHARED_VERSION = "0.1.19";
 	WORKER_SHARED_BUNDLE_HASH = "5f2c220f24d166b0f13d0620a2e80d19689ac8b683a12154daef44e938fd46a7";
-	WORKER_ENGINE_VERSION = "0.1.18";
+	WORKER_ENGINE_VERSION = "0.1.19";
 	WORKER_ENGINE_BUNDLE_HASH = "79ce14640d1798eaaa7cb3aa6c4bc325da3bff1e9f4716936e19614eabb1d858";
 	logger$2 = createLogger({ prefix: "worker" });
 	DRAIN_TIMEOUT_MS = 3e5;
@@ -58240,13 +58297,13 @@ var init_worker_core = __esmMin((() => {
 * Graceful shutdown in reverse order:
 * Platform client -> agent WS -> heartbeat -> HTTP -> DB
 */
-const ORCHESTRATOR_VERSION = "0.1.18";
-const BUILD_COMMIT = "d8cff38bb";
-const SDK_VERSION = "0.1.18";
+const ORCHESTRATOR_VERSION = "0.1.19";
+const BUILD_COMMIT = "1590f5e99";
+const SDK_VERSION = "0.1.19";
 const SDK_BUNDLE_HASH = "8308089347c304e41b457d3867b17bbff11d6b5cd9706b6823e7abdbd849f33f";
-const SHARED_VERSION = "0.1.18";
+const SHARED_VERSION = "0.1.19";
 const SHARED_BUNDLE_HASH = "5f2c220f24d166b0f13d0620a2e80d19689ac8b683a12154daef44e938fd46a7";
-const ENGINE_VERSION = "0.1.18";
+const ENGINE_VERSION = "0.1.19";
 const ENGINE_BUNDLE_HASH = "79ce14640d1798eaaa7cb3aa6c4bc325da3bff1e9f4716936e19614eabb1d858";
 const otelSdk = initTelemetry({
 	serviceName: "kici-orchestrator",

package/dist/standalone.js

@@ -1065,7 +1065,7 @@ var init_peer_client = __esmMin((() => {
 	init_peer_crypto();
 	init_peer_credentials();
 	logger$89 = createLogger({ prefix: "peer-client" });
-	SOFTWARE_VERSION$1 = "0.1.18";
+	SOFTWARE_VERSION$1 = "0.1.19";
 	PeerClient$1 = class {
 		ws = null;
 		_state = "disconnected";
@@ -2591,7 +2591,7 @@ var init_peer_handler = __esmMin((() => {
 	init_peer_crypto();
 	init_join_token();
 	logger$88 = createLogger({ prefix: "peer-handler" });
-	SOFTWARE_VERSION = "0.1.18";
+	SOFTWARE_VERSION = "0.1.19";
 	RATE_LIMIT_MAX = 5;
 	RATE_LIMIT_WINDOW_MS = 6e4;
 }));
@@ -12225,16 +12225,25 @@ async function cancelRunWithReason(deps, runId, reason, options = {}) {
 		const agentId = dispatcher.getAgentIdForJob(jobId);
 		if (!agentId) continue;
 		const entry = registry.get(agentId);
-		if (!entry?.ws) continue;
-		entry.ws.send(JSON.stringify({
-			type: "job.cancel",
-			messageId: randomUUID(),
-			runId,
-			jobId,
-			reason,
-			...force && { force: true }
-		}));
-		agentsNotified++;
+		if (entry?.ws?.readyState !== 1) continue;
+		try {
+			entry.ws.send(JSON.stringify({
+				type: "job.cancel",
+				messageId: randomUUID(),
+				runId,
+				jobId,
+				reason,
+				...force && { force: true }
+			}));
+			agentsNotified++;
+		} catch (err) {
+			logger$71.warn("Failed to send job.cancel to agent; treating job as orphaned", {
+				runId,
+				jobId,
+				agentId,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		}
 	}
 	const pendingResult = await db.updateTable("execution_jobs").set({
 		status: ExecutionJobStatus.enum.cancelled,
@@ -22331,6 +22340,21 @@ var init_admin_runs = __esmMin((() => {
 }));
 //#endregion
 //#region src/cold-store/load-event-log-range.ts
+/**
+* Read-through helper for `event_log` (Orchestrator) — Phase E.
+*
+* Mirrors the Platform-side `load-event-log-range.ts`. Tenant column is
+* `routing_key` (NOT NULL on this side) so cold-store partitioning
+* doesn't need a synthetic-tenant fallback. Partition column is
+* `received_at`.
+*
+* The orchestrator's `event_log` row carries the `payload_key` reference
+* (an S3 object that holds the gzipped webhook body). Cold-store
+* archives the row metadata and preserves `payload_key` verbatim — the
+* payload blob itself stays in object storage indefinitely so the
+* dashboard's payload-detail view continues to resolve archived
+* deliveries identically to hot ones.
+*/
 async function loadEventLogRange(args) {
 	const { db, coldStore, routingKey, orgId, event, action, status, deliveryId, fromTs, toTs, limit, offset, includeArchived } = args;
 	const warmCutoff = /* @__PURE__ */ new Date(Date.now() - EVENT_LOG_WARM_TTL_DAYS * 864e5);
@@ -22348,6 +22372,16 @@ async function loadEventLogRange(args) {
 	if (coldFromTs >= warmCutoff) return hotRows;
 	const remaining = limit - hotRows.length;
 	if (remaining <= 0) return hotRows;
+	let hotCountQuery = db.selectFrom("event_log").select(sql`count(*)::text`.as("n")).where("routing_key", "=", routingKey);
+	if (orgId) hotCountQuery = hotCountQuery.where("org_id", "=", orgId);
+	if (event) hotCountQuery = hotCountQuery.where("event", "=", event);
+	if (action) hotCountQuery = hotCountQuery.where("action", "=", action);
+	if (status) hotCountQuery = hotCountQuery.where("status", "=", status);
+	if (deliveryId) hotCountQuery = hotCountQuery.where("delivery_id", "like", `%${deliveryId}%`);
+	if (fromTs) hotCountQuery = hotCountQuery.where("received_at", ">=", fromTs);
+	if (toTs) hotCountQuery = hotCountQuery.where("received_at", "<", toTs);
+	const hotCount = Number((await hotCountQuery.executeTakeFirst())?.n ?? "0");
+	const coldOffset = Math.max(0, offset - hotCount);
 	const coldToTs = toTs && toTs < warmCutoff ? toTs : warmCutoff;
 	const coldRows = [];
 	try {
@@ -22364,7 +22398,6 @@ async function loadEventLogRange(args) {
 			if (status !== void 0 && row.status !== status) continue;
 			if (deliveryId !== void 0 && !row.delivery_id.includes(deliveryId)) continue;
 			coldRows.push(row);
-			if (coldRows.length >= remaining) break;
 		}
 	} catch (err) {
 		if (hotRows.length === 0) {
@@ -22384,7 +22417,7 @@ async function loadEventLogRange(args) {
 		const at = a.received_at instanceof Date ? a.received_at.getTime() : new Date(a.received_at).getTime();
 		return (b.received_at instanceof Date ? b.received_at.getTime() : new Date(b.received_at).getTime()) - at;
 	});
-	return [...hotRows, ...coldRows.slice(0, remaining)];
+	return [...hotRows, ...coldRows.slice(coldOffset, coldOffset + remaining)];
 }
 /**
 * Detail lookup by `(orgId, deliveryId)`. The dashboard handler joins
@@ -23545,14 +23578,14 @@ var init_admin_config = __esmMin((() => {
 function createHealthRoutes$1(deps = {}) {
 	return createHealthRoutes({
 		livenessInfo: () => ({
-			version: "0.1.18",
-			buildDate: "2026-06-17T09:57:52.557Z",
-			buildCommit: "d8cff38bb",
-			sdkVersion: "0.1.18",
+			version: "0.1.19",
+			buildDate: "2026-06-19T04:32:44.899Z",
+			buildCommit: "1590f5e99",
+			sdkVersion: "0.1.19",
 			sdkBundleHash: "8308089347c304e41b457d3867b17bbff11d6b5cd9706b6823e7abdbd849f33f",
-			sharedVersion: "0.1.18",
+			sharedVersion: "0.1.19",
 			sharedBundleHash: "5f2c220f24d166b0f13d0620a2e80d19689ac8b683a12154daef44e938fd46a7",
-			engineVersion: "0.1.18",
+			engineVersion: "0.1.19",
 			engineBundleHash: "79ce14640d1798eaaa7cb3aa6c4bc325da3bff1e9f4716936e19614eabb1d858"
 		}),
 		readinessCheck: deps.db ? async () => {
@@ -23587,7 +23620,7 @@ function createCapabilitiesRoutes() {
 	const app = new Hono();
 	app.get("/api/v1/capabilities", (c) => {
 		const manifest = {
-			orchestratorVersion: "0.1.18",
+			orchestratorVersion: "0.1.19",
 			protocolVersion: PROTOCOL_VERSION,
 			minProtocolVersion: MIN_PROTOCOL_VERSION
 		};
@@ -49499,13 +49532,13 @@ var init_worker_core = __esmMin((() => {
 	init_fleet_wiring();
 	init_worker_status();
 	init_agent_heartbeat();
-	ORCHESTRATOR_VERSION$1 = "0.1.18";
-	WORKER_BUILD_COMMIT = "d8cff38bb";
-	WORKER_SDK_VERSION = "0.1.18";
+	ORCHESTRATOR_VERSION$1 = "0.1.19";
+	WORKER_BUILD_COMMIT = "1590f5e99";
+	WORKER_SDK_VERSION = "0.1.19";
 	WORKER_SDK_BUNDLE_HASH = "8308089347c304e41b457d3867b17bbff11d6b5cd9706b6823e7abdbd849f33f";
-	WORKER_SHARED_VERSION = "0.1.18";
+	WORKER_SHARED_VERSION = "0.1.19";
 	WORKER_SHARED_BUNDLE_HASH = "5f2c220f24d166b0f13d0620a2e80d19689ac8b683a12154daef44e938fd46a7";
-	WORKER_ENGINE_VERSION = "0.1.18";
+	WORKER_ENGINE_VERSION = "0.1.19";
 	WORKER_ENGINE_BUNDLE_HASH = "79ce14640d1798eaaa7cb3aa6c4bc325da3bff1e9f4716936e19614eabb1d858";
 	logger$2 = createLogger({ prefix: "worker" });
 	DRAIN_TIMEOUT_MS = 3e5;
@@ -49530,13 +49563,13 @@ var init_worker_core = __esmMin((() => {
 * Graceful shutdown:
 * agent WS -> heartbeat -> HTTP -> DB
 */
-const ORCHESTRATOR_VERSION = "0.1.18";
-const BUILD_COMMIT = "d8cff38bb";
-const SDK_VERSION = "0.1.18";
+const ORCHESTRATOR_VERSION = "0.1.19";
+const BUILD_COMMIT = "1590f5e99";
+const SDK_VERSION = "0.1.19";
 const SDK_BUNDLE_HASH = "8308089347c304e41b457d3867b17bbff11d6b5cd9706b6823e7abdbd849f33f";
-const SHARED_VERSION = "0.1.18";
+const SHARED_VERSION = "0.1.19";
 const SHARED_BUNDLE_HASH = "5f2c220f24d166b0f13d0620a2e80d19689ac8b683a12154daef44e938fd46a7";
-const ENGINE_VERSION = "0.1.18";
+const ENGINE_VERSION = "0.1.19";
 const ENGINE_BUNDLE_HASH = "79ce14640d1798eaaa7cb3aa6c4bc325da3bff1e9f4716936e19614eabb1d858";
 const otelSdk = initTelemetry({
 	serviceName: "kici-orchestrator",

package/installer-image-digests.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.1.18",
+  "version": "0.1.19",
   "images": {
-    "kici-agent": "sha256:18c4867e472bc4031f4ffea86fee50ae8402fb9abcae0eabe1e2ba88714b010b",
-    "kici-orchestrator": "sha256:cddbfc3aef84ac1bbbd4a80cd1e56deb63fce8381711c982c4b267f00a8010d8"
+    "kici-agent": "sha256:7e54dde6c087b0a8117b8a45a255dd4f0f749db3a5da798e350a266fba396570",
+    "kici-orchestrator": "sha256:47f2caf0c8effca17e13d80457f4dd517784ac3eabda270f6da78a49e529f7af"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.1.18",
+  "version": "0.1.19",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
     "ci",
@@ -86,8 +86,8 @@
     "ws": "^8.21.0",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@kici-dev/shared": "0.1.18",
-    "@kici-dev/engine": "0.1.18"
+    "@kici-dev/shared": "0.1.19",
+    "@kici-dev/engine": "0.1.19"
   },
   "kici": {
     "metrics": {
@@ -101,7 +101,7 @@
     "@types/archiver": "^8.0.0",
     "@types/dockerode": "^4.0.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.1.18"
+    "@kici-dev/agent": "0.1.19"
   },
   "scripts": {
     "build": "node ../../scripts/build-service.mjs && tsc --emitDeclarationOnly",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.1.18",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.1.18/07e0df5d-5748-4ffa-bbc2-faa4ad230ec0",
+  "name": "@kici-dev/orchestrator@0.1.19",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.1.19/e51708f7-e161-4759-b280-198c788c29b4",
   "creationInfo": {
-    "created": "2026-06-17T10:56:02Z",
+    "created": "2026-06-19T05:11:21Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -1190,9 +1190,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.19",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.18",
+      "versionInfo": "0.1.19",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1203,16 +1203,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.18"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.19"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.18",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.19",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.18",
+      "versionInfo": "0.1.19",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1223,7 +1223,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.18"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.19"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1232,7 +1232,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.1.18",
+      "versionInfo": "0.1.19",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1243,16 +1243,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.1.18"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.1.19"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.18",
+      "versionInfo": "0.1.19",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1263,7 +1263,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.18"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.19"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -8242,57 +8242,57 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
@@ -8328,12 +8328,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.18",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.19",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -8437,112 +8437,112 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1064.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.19",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.31.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.41.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.21.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.18",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.19",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },