@kici-dev/orchestrator 0.1.27 → 0.2.0

package/dist/sources/source-manager.d.ts

@@ -11,7 +11,19 @@
 import type pg from 'pg';
 import { ProviderRegistry } from '../provider-registry.js';
 import type { ProviderSource } from '../entry-helpers.js';
+import { OrchestratorMode } from '@kici-dev/engine';
 import type { SourceStore } from './source-store.js';
+/**
+ * Operator-facing error for a GitHub-App source under `observed` mode. Shared
+ * by the startup assertion and the admin source-create route so both paths give
+ * the same remediation.
+ */
+export declare const OBSERVED_GITHUB_APP_SOURCE_ERROR: string;
+/** Thrown at startup when an observed-mode orchestrator holds GitHub-App sources. */
+export declare class ObservedGithubAppSourcesError extends Error {
+    readonly count: number;
+    constructor(count: number);
+}
 /**
  * Options for creating a SourceManager.
  */
@@ -27,6 +39,13 @@ export interface SourceManagerOptions {
     }) => void;
     /** Debounce interval in ms for coalescing rapid changes. Default: 200. */
     debounceMs?: number;
+    /**
+     * Orchestrator operating mode. In `observed` mode the manager refuses to
+     * start when the `sources` table holds any GitHub-App row — those are
+     * Platform-relayed by construction and an observed orchestrator never
+     * accepts a relay. Omitted (undefined) imposes no mode constraint.
+     */
+    mode?: OrchestratorMode;
 }
 /**
  * Manages webhook sources from the database with hot reload support.
@@ -65,6 +84,11 @@ export declare class SourceManager {
     start(): Promise<ProviderRegistry>;
     /** Stop listening and release the dedicated pg client. */
     stop(): Promise<void>;
+    /**
+     * Fail fast when an observed-mode orchestrator holds GitHub-App sources. The
+     * `sources` table is GitHub-App-only, so any row is a relay-type source.
+     */
+    private assertNoGithubAppSourcesInObservedMode;
     private scheduleReload;
     /** Reload sources from DB and rebuild the ProviderRegistry. */
     reload(): Promise<void>;

package/dist/stale-detector/stale-run-detector.d.ts

@@ -26,6 +26,7 @@ import type { HeldRunStore, ReleaseSignal } from '../contexts/held-runs.js';
 import type { StepApprovalBridge } from '../approvals/step-approval-bridge.js';
 import type { AccessLogWriter } from '../audit/access-log.js';
 import type { PeerRegistry } from '../cluster/peer-registry.js';
+import type { ClusterSettingsReader } from '../cluster/cluster-settings-reader.js';
 export interface StaleRunDetectorDeps {
     db: Kysely<Database>;
     executionTracker: ExecutionTracker;
@@ -39,6 +40,10 @@ export interface StaleRunDetectorDeps {
      * still be replayed from the worker's durable outbox.
      */
     peerRegistry: PeerRegistry;
+    /** Reader for fleet-wide cluster tunables (reroute flap-grace override). */
+    clusterSettings: ClusterSettingsReader;
+    /** Cluster default for the reroute flap-grace window (config.rerouteFlapGraceMs). */
+    rerouteFlapGraceFallbackMs: number;
     /** Threshold in ms after which a job is considered stale. Default: heartbeatIntervalMs * multiplier */
     staleThresholdMs: number;
     /** How often to scan for stale jobs in ms. Default: 60_000 */
@@ -66,6 +71,8 @@ export declare class StaleRunDetector {
     private readonly dispatcher;
     private readonly registry;
     private readonly peerRegistry;
+    private readonly clusterSettings;
+    private readonly rerouteFlapGraceFallbackMs;
     private readonly staleThresholdMs;
     private readonly scanIntervalMs;
     private readonly heldRunStore?;