@kici-dev/orchestrator 0.1.23 → 0.1.25

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.1.23",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.1.23/261def5e-2309-4ba2-a52c-5dc631179d1a",
+  "name": "@kici-dev/orchestrator@0.1.25",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.1.25/f588e095-c485-4a71-9e27-ffb697def0b9",
   "creationInfo": {
-    "created": "2026-06-25T11:13:00Z",
+    "created": "2026-07-05T08:32:44Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -754,10 +754,10 @@
       "homepage": "https://grpc.io/"
     },
     {
-      "SPDXID": "SPDXRef-Package--hono-node-server-2.0.4",
+      "SPDXID": "SPDXRef-Package--hono-node-server-1.19.14",
       "name": "@hono/node-server",
-      "versionInfo": "2.0.4",
-      "downloadLocation": "https://registry.npmjs.org/@hono/node-server/-/node-server-2.0.4.tgz",
+      "versionInfo": "1.19.14",
+      "downloadLocation": "https://registry.npmjs.org/@hono/node-server/-/node-server-1.19.14.tgz",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
       "licenseDeclared": "MIT",
@@ -767,7 +767,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40hono/node-server@2.0.4"
+          "referenceLocator": "pkg:npm/%40hono/node-server@1.19.14"
         }
       ],
       "description": "Node.js Adapter for Hono",
@@ -1190,9 +1190,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.25",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.23",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1203,16 +1203,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.23"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.25"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.23",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1223,7 +1223,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.23"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.25"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1232,7 +1232,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.1.23",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1243,16 +1243,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.1.23"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.1.25"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.23",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1263,7 +1263,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.23"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.25"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -7866,13 +7866,13 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--hono-node-server-2.0.4",
+      "spdxElementId": "SPDXRef-Package--hono-node-server-1.19.14",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-Package--hono-node-ws-1.3.1",
-      "relatedSpdxElement": "SPDXRef-Package--hono-node-server-2.0.4",
+      "relatedSpdxElement": "SPDXRef-Package--hono-node-server-1.19.14",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -8201,57 +8201,57 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
@@ -8272,7 +8272,7 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--hono-node-server-2.0.4",
+      "relatedSpdxElement": "SPDXRef-Package--hono-node-server-1.19.14",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -8287,12 +8287,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -8335,6 +8335,11 @@
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.25",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-RootPackage",
+      "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-RootPackage",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
@@ -8396,112 +8401,112 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1064.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.31.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.41.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.21.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },

package/dist/secrets/crypto.d.ts

@@ -1,49 +0,0 @@
-/**
- * Encrypted value with key version tracking.
- * The data field contains base64-encoded IV || AuthTag || Ciphertext.
- */
-export interface EncryptedValue {
-    /** Base64-encoded IV + auth tag + ciphertext. */
-    data: string;
-    /** Version of the encryption key used. */
-    keyVersion: number;
-}
-/**
- * Encrypt a plaintext string using AES-256-GCM with AAD.
- *
- * @param plaintext - The string to encrypt
- * @param key - 32-byte encryption key
- * @param keyVersion - Version number for key rotation tracking
- * @param aad - Additional authenticated data (e.g., "contextId:keyName")
- * @returns Encrypted value with key version
- */
-export declare function encrypt(plaintext: string, key: Buffer, keyVersion: number, aad: string): EncryptedValue;
-/**
- * Decrypt an encrypted value using AES-256-GCM with AAD verification.
- *
- * @param encrypted - The encrypted value to decrypt
- * @param key - 32-byte encryption key (must match the key used for encryption)
- * @param aad - Additional authenticated data (must match the AAD used for encryption)
- * @returns Decrypted plaintext string
- * @throws If decryption fails (wrong key, wrong AAD, tampered data)
- */
-export declare function decrypt(encrypted: EncryptedValue, key: Buffer, aad: string): string;
-/**
- * Derive a 32-byte encryption key from a string input.
- *
- * Accepts two formats:
- * - 64-character hex string (e.g., from generateMasterKey())
- * - Base64-encoded 32-byte key
- *
- * @param input - Hex or base64 encoded key material
- * @returns 32-byte Buffer suitable for use with encrypt/decrypt
- * @throws If the derived key is not exactly 32 bytes
- */
-export declare function deriveKey(input: string): Buffer;
-/**
- * Generate a new random 32-byte master key as a hex string.
- *
- * @returns 64-character hex string suitable for KICI_SECRET_KEY env var
- */
-export declare function generateMasterKey(): string;
-//# sourceMappingURL=crypto.d.ts.map