@kici-dev/orchestrator 0.1.27 → 0.2.0

package/dist/contexts/context-store.d.ts

@@ -1,5 +1,5 @@
 import { type Kysely } from 'kysely';
-import type { Context as EngineContext } from '@kici-dev/engine';
+import type { ConcurrencyStrategy, Context as EngineContext } from '@kici-dev/engine';
 import type { Database, Context } from '../db/types.js';
 /** Thrown by `delete` when pending held runs reference the context. */
 export declare class ContextDeleteBlockedError extends Error {
@@ -21,7 +21,7 @@ export interface ContextCreateInput {
     triggerTypeFilters?: string[];
     repoPatterns?: string[];
     concurrencyLimit?: number | null;
-    concurrencyStrategy?: 'queue' | 'cancel-pending';
+    concurrencyStrategy?: ConcurrencyStrategy;
     concurrencyTimeoutMs?: number;
     requiredReviewers?: string[] | null;
     waitTimerSeconds?: number | null;
@@ -31,20 +31,30 @@ export interface ContextCreateInput {
     enabled?: boolean;
     createdBy?: string | null;
 }
-/** Fields accepted when updating a context. */
+/**
+ * Fields accepted when updating a context.
+ *
+ * Convention for every nullable column: `undefined` means "the caller did not
+ * mention this field, leave the column alone"; `null` means "clear it". The two
+ * are distinct on the wire (`contextUpdateRequestSchema` declares these fields
+ * `.nullable().optional()`), so the handler forwards both verbatim and `update`
+ * below writes the column's cleared state for an explicit `null` — SQL NULL for
+ * the nullable columns, and the empty array for `branchRestrictions`, whose
+ * column is `jsonb NOT NULL DEFAULT '[]'`.
+ */
 export interface ContextUpdateInput {
     name?: string;
     type?: 'fixed' | 'glob';
     globPattern?: string | null;
-    branchRestrictions?: string[];
+    branchRestrictions?: string[] | null;
     triggerTypeFilters?: string[];
     repoPatterns?: string[];
     concurrencyLimit?: number | null;
-    concurrencyStrategy?: 'queue' | 'cancel-pending';
+    concurrencyStrategy?: ConcurrencyStrategy | null;
     concurrencyTimeoutMs?: number;
     requiredReviewers?: string[] | null;
     waitTimerSeconds?: number | null;
-    holdExpirySeconds?: number;
+    holdExpirySeconds?: number | null;
     minimumTrust?: 'known' | 'trusted' | null;
     allowLocalExecution?: boolean;
     enabled?: boolean;
@@ -79,8 +89,11 @@ export declare class ContextStore {
      * Match a context name against org contexts.
      *
      * First tries exact name match (for fixed contexts).
-     * If no exact match, scans glob-type contexts and uses picomatch.
-     * Returns the first matching context or null.
+     * If no exact match, scans glob-type contexts and uses picomatch. When the
+     * name matches more than one glob pattern, the most-specific pattern wins
+     * (most literal characters; ties break toward fewer wildcards, then name
+     * ascending) so the winning context — and its protection rules — is
+     * deterministic across dispatches. Returns the matching context or null.
      */
     matchContext(orgId: string, name: string): Promise<Context | null>;
 }

package/dist/contexts/glob-specificity.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Specificity scoring for glob environment patterns.
+ *
+ * Used to resolve which glob context governs a run when an environment name
+ * matches more than one pattern. The most-specific pattern (most literal
+ * characters) wins; ties break toward fewer wildcards, then name ascending —
+ * a total, deterministic order.
+ */
+export interface GlobSpecificity {
+    /** Count of characters that are NOT glob metacharacters. Higher = more specific. */
+    literals: number;
+    /** Count of characters that ARE glob metacharacters. Lower = more specific. */
+    wildcards: number;
+}
+export declare function globSpecificityScore(pattern: string): GlobSpecificity;
+/**
+ * Compares two glob contexts, ranking the more specific first.
+ * Returns <0 when `a` is more specific than `b`, >0 when less, 0 only when
+ * pattern-score and name are identical.
+ *
+ * Order: literals desc, then wildcards asc, then name asc.
+ */
+export declare function compareGlobSpecificity(a: {
+    pattern: string;
+    name: string;
+}, b: {
+    pattern: string;
+    name: string;
+}): number;
+//# sourceMappingURL=glob-specificity.d.ts.map

package/dist/contexts/held-runs.d.ts

@@ -3,7 +3,8 @@
  *
  * Manages the lifecycle: pending -> approved/rejected/expired.
  */
-import { type Kysely } from 'kysely';
+import { Kysely } from 'kysely';
+import { z } from 'zod';
 import { type ApprovalRequirement, type ApproverClause, type StepApprovalPayload, ApprovalDecision, HoldScope, TriggerSource } from '@kici-dev/engine';
 import type { Database, HeldRun, HeldRunApproval } from '../db/types.js';
 /** Status values for held runs (held_runs table). */
@@ -14,11 +15,23 @@ export declare enum HeldRunStatus {
     Expired = "expired",
     Released = "released"
 }
+/**
+ * Reason a run was held in the security queue. Persisted verbatim in
+ * `held_runs.reason` and switched on by `buildSecurityHoldSummary`.
+ */
+export declare const SecurityHoldReason: z.ZodEnum<{
+    context_trust: "context_trust";
+    fork_pr: "fork_pr";
+    unknown_contributor: "unknown_contributor";
+    workflow_modification: "workflow_modification";
+}>;
+export type SecurityHoldReason = z.infer<typeof SecurityHoldReason>;
 /** Data required to create a held run. */
 export interface CreateHeldRunData {
     runId: string;
     jobId: string;
-    contextId: string;
+    /** Bound context id, or null for context-free holds (e.g. workflow_modification). */
+    contextId: string | null;
     holdType: string;
     reason: string;
     expiresAt: Date;
@@ -46,8 +59,8 @@ export interface CreateHoldData {
     /** Queue type: 'context' (default) or 'security'. */
     queueType?: 'context' | 'security';
     /**
-     * Held-run `hold_type` discriminator. Defaults to `'approval'` (reviewer
-     * holds). The workflow install gate sets `'wait_timer'` / `'concurrency'` so
+     * Held-run `hold_type` discriminator — an engine `HoldType` member. Defaults
+     * to `reviewer`. The workflow install gate sets `timer` / `concurrency` so
      * the automated release sweeps can find their rows.
      */
     holdType?: string;
@@ -152,6 +165,16 @@ export declare class HeldRunStore {
     listAll(orgId: string, options?: ListHeldRunsOptions): Promise<HeldRun[]>;
     /** List held runs for an org filtered by queue type with optional filters. */
     listByQueueType(orgId: string, queueType: 'context' | 'security', options?: ListHeldRunsOptions): Promise<HeldRun[]>;
+    /**
+     * List pending `security` holds whose run belongs to a specific PR (and repo).
+     *
+     * Joins `execution_runs` on `run_id` and filters by `repo_identifier` +
+     * `pr_number` so `/kici approve|reject` only affects the commented PR's holds
+     * rather than every pending security hold in the org. A run with a NULL
+     * `pr_number` (non-PR run, or a legacy run predating the column) never matches
+     * the equality predicate, so such holds are never released here — fail-closed.
+     */
+    listPendingSecurityHoldsForPr(orgId: string, repoIdentifier: string, prNumber: number): Promise<HeldRun[]>;
     /**
      * Approve a pending held run, enforcing queue_type boundary.
      * Prevents context approvals from approving security holds and vice versa.
@@ -167,23 +190,20 @@ export declare class HeldRunStore {
      */
     listOverdue(): Promise<HeldRun[]>;
     /**
-     * Release overdue workflow `wait_timer` holds. The install-gate wait action
-     * pauses the workflow as a held run; on timer expiry it must RESUME (not
-     * fail like a reviewer-hold expiry). Flips each overdue pending
-     * `hold_type='wait_timer'`, `hold_scope='workflow'` row to `released` and
-     * returns a `ReleaseSignal` per row so the caller can resume the workflow.
-     * Runs BEFORE `expireOverdue()` so these rows leave the pending pool before
-     * the expire-and-fail sweep sees them.
+     * Release overdue workflow timer holds. The install-gate wait action pauses
+     * the workflow as a held run; on timer expiry it must RESUME (not fail like
+     * a reviewer-hold expiry). Flips each overdue pending `hold_type` timer,
+     * `hold_scope='workflow'` row to `released` and returns a `ReleaseSignal`
+     * per row so the caller can resume the workflow. Runs BEFORE
+     * `expireOverdue()` so these rows leave the pending pool before the
+     * expire-and-fail sweep sees them.
+     *
+     * The filter matches every persisted spelling of the timer hold type, so a
+     * row an un-upgraded orchestrator wrote as `wait_timer` still resumes rather
+     * than falling through to the expire-and-fail sweep. `hold_scope` is what
+     * keeps job-scoped dispatch-gate timer holds out of this sweep.
      */
     releaseDueWaitHolds(): Promise<ReleaseSignal[]>;
-    /**
-     * Release the oldest pending workflow `concurrency` hold for a group. Called
-     * when a concurrency slot frees on run completion. Flips the oldest matching
-     * pending row to `released` and returns its `ReleaseSignal`, or null when no
-     * concurrency hold is queued for the group. `group` matches the held row's
-     * `context_id` (workflow-level install concurrency keys on the env id).
-     */
-    releaseConcurrencyHold(orgId: string, group: string): Promise<ReleaseSignal | null>;
     /**
      * Expire overdue pending runs. Called by the stale detector.
      * Sets status to 'expired' and resolved_at to now() for all
@@ -192,4 +212,16 @@ export declare class HeldRunStore {
      */
     expireOverdue(): Promise<number>;
 }
+/**
+ * Build a HeldRunStore backed by its own connection pool to the given
+ * orchestrator database URL. Mirrors `createPeerCredentialStoreFromUrl` /
+ * `createJoinTokenManagerFromUrl`; consumed by E2E tests that exercise the
+ * PR-scoped hold selection against the real deployed orchestrator DB.
+ */
+export declare function createHeldRunStoreFromUrl(databaseUrl: string, opts?: {
+    maxConnections?: number;
+}): {
+    store: HeldRunStore;
+    dispose: () => Promise<void>;
+};
 //# sourceMappingURL=held-runs.d.ts.map

package/dist/contexts/protection/aggregate.d.ts

@@ -1,4 +1,4 @@
-import { ContextGateRejectReason, type Context } from '@kici-dev/engine';
+import { ContextGateRejectReason, type ConcurrencyStrategy, type Context } from '@kici-dev/engine';
 import type { JobDispatchContext } from './pipeline.js';
 /** A single context's rejection under all-must-pass aggregation. */
 export interface ContextGateRejection {
@@ -13,7 +13,7 @@ export interface EffectiveProtection {
     waitTimerSeconds: number | null;
     holdExpirySeconds: number;
     concurrencyLimit: number | null;
-    concurrencyStrategy: 'queue' | 'cancel-pending';
+    concurrencyStrategy: ConcurrencyStrategy;
 }
 /**
  * Evaluate each context's hard reject gates against the run context. A name

package/dist/contexts/protection/concurrency-gate.d.ts

@@ -1,6 +1,3 @@
-/**
- * Concurrency gate -- checks concurrency limits.
- */
 import type { Context, ProtectionGateResult } from '@kici-dev/engine';
 /** Evaluate concurrency limits for the context. */
 export declare function evaluateConcurrencyGate(env: Context, currentRunningCount: number, _concurrencyGroup: string): ProtectionGateResult;

package/dist/contexts/protection/reviewer-gate.d.ts

@@ -1,6 +1,3 @@
-/**
- * Reviewer gate -- checks required reviewers.
- */
 import type { Context, ProtectionGateResult } from '@kici-dev/engine';
 /** Evaluate reviewer requirements for the context. */
 export declare function evaluateReviewerGate(env: Context): ProtectionGateResult;

package/dist/contexts/protection/satisfiability.d.ts

@@ -22,9 +22,9 @@ import { z } from 'zod';
 import type { Context } from '@kici-dev/engine';
 /** Which decidable rule made a binding unsatisfiable. */
 export declare const UnsatisfiableRule: z.ZodEnum<{
+    branch: "branch";
     enabled: "enabled";
     repo: "repo";
-    branch: "branch";
     trigger: "trigger";
 }>;
 export type UnsatisfiableRule = z.infer<typeof UnsatisfiableRule>;

package/dist/contexts/protection/trust-gate.d.ts

@@ -1,6 +1,3 @@
-/**
- * Trust gate -- checks contributor trust tier against context minimumTrust.
- */
 import type { Context, ProtectionGateResult, TrustTier } from '@kici-dev/engine';
 /** Evaluate minimumTrust requirements for the context. */
 export declare function evaluateTrustGate(env: Context, trustTier: TrustTier | undefined): ProtectionGateResult;

package/dist/contexts/protection/wait-timer-gate.d.ts

@@ -1,6 +1,3 @@
-/**
- * Wait timer gate -- checks wait timer configuration.
- */
 import type { Context, ProtectionGateResult } from '@kici-dev/engine';
 /** Evaluate wait timer for the context. */
 export declare function evaluateWaitTimerGate(env: Context): ProtectionGateResult;

package/dist/cron/cron-scheduler.d.ts

@@ -2,7 +2,7 @@ import type { Kysely } from 'kysely';
 import type { Database } from '../db/types.js';
 import type { RegistrationIndex } from '../registration/registration-index.js';
 import type { EventRouter } from '../events/event-router.js';
-import type { CronStore } from './cron-store.js';
+import { type CronStore } from './cron-store.js';
 interface CronSchedulerOptions {
     db: Kysely<Database>;
     registrationIndex: RegistrationIndex;
@@ -32,9 +32,14 @@ export declare class CronScheduler {
     private readonly cronStore;
     private readonly eventRouter;
     private readonly evaluationIntervalMs;
-    private timer;
-    private isLeader;
+    private readonly scheduler;
     private lastFiredCache;
+    /**
+     * Set when the leader-election cache load fails. While true, each evaluation
+     * tick re-attempts the load (see reloadCacheAfterFailure) so a transient DB
+     * error at leader election does not leave the cache cold for the whole tenure.
+     */
+    private cacheLoadPending;
     constructor(options: CronSchedulerOptions);
     /**
      * Called when this orchestrator becomes the Raft leader.
@@ -64,15 +69,30 @@ export declare class CronScheduler {
      * fires the schedule.
      */
     evaluate(): Promise<void>;
+    /**
+     * Re-attempt the last-fired cache load after an earlier failure at leader
+     * election. On success, clears the pending flag; on repeated failure, leaves
+     * it set so the next tick tries again. Evaluation continues either way — the
+     * DB-side tryClaimFire guard prevents double-fires with a stale or cold cache.
+     */
+    private reloadCacheAfterFailure;
     /**
      * Recover missed schedules after becoming leader.
      * Same logic as evaluate() but logs recovery context.
      */
     private recoverMissedSchedules;
     /**
-     * Evaluate a single registration and fire if due.
+     * Evaluate a single registration and fire every due schedule trigger.
+     *
+     * A workflow may declare multiple `schedule()` triggers; each is tracked and
+     * fired independently (keyed per (registration, schedule)), so a second or
+     * third schedule is never silently skipped.
      */
     private evaluateRegistration;
+    /**
+     * Evaluate one schedule trigger of a registration and fire if due.
+     */
+    private evaluateScheduleTrigger;
 }
 export {};
 //# sourceMappingURL=cron-scheduler.d.ts.map

package/dist/cron/cron-store.d.ts

@@ -1,10 +1,21 @@
 import type { Kysely, Transaction } from 'kysely';
 import type { Database } from '../db/types.js';
 type DbExecutor = Kysely<Database> | Transaction<Database>;
+/**
+ * In-memory cache key uniting a registration and one of its schedules.
+ *
+ * A workflow may declare several `schedule()` triggers, each tracked
+ * independently in `cron_last_fired` keyed by (registration_id, schedule_key).
+ * The space separator is unambiguous: a registration id is a UUID and a
+ * schedule key is `${cronExpression}\n${timezone}` — neither contains a space
+ * at the boundary that could collide.
+ */
+export declare function cronCacheKey(registrationId: string, scheduleKey: string): string;
 /**
  * DB persistence for cron last-fired tracking.
  *
- * Tracks the last time each cron-triggered workflow registration was fired.
+ * Tracks the last time each (registration, schedule) was fired — a workflow
+ * with multiple `schedule()` triggers has one row per distinct schedule.
  * Used by CronScheduler for fire-once-on-recovery after leader transitions.
  * Uses upsert (INSERT ON CONFLICT UPDATE) for atomic idempotent writes.
  */
@@ -12,11 +23,14 @@ export declare class CronStore {
     private readonly db;
     constructor(db: Kysely<Database>);
     /**
-     * Atomically claim a cron fire: only succeeds if no other orchestrator has
-     * already fired this registration at a time >= firedAt.
+     * Atomically claim a cron fire for one schedule of a registration: only
+     * succeeds if no other orchestrator has already fired this (registration,
+     * schedule) at a time >= firedAt.
      *
      * Uses INSERT ... ON CONFLICT with a WHERE guard so the upsert only writes
-     * when `last_fired_at < firedAt` (or the row doesn't exist yet).
+     * when `last_fired_at < firedAt` (or the row doesn't exist yet). The conflict
+     * target is the composite key (registration_id, schedule_key) so two distinct
+     * schedules of the same registration claim independently.
      *
      * Accepts an optional executor (Kysely DB handle or Transaction). The cron
      * fire path passes a Transaction so the claim and the subsequent
@@ -27,10 +41,10 @@ export declare class CronStore {
      * Returns true if this call won the race (the fire should proceed).
      * Returns false if another node already recorded a fire >= firedAt.
      */
-    tryClaimFire(registrationId: string, firedAt: Date, executor?: DbExecutor): Promise<boolean>;
+    tryClaimFire(registrationId: string, scheduleKey: string, firedAt: Date, executor?: DbExecutor): Promise<boolean>;
     /**
-     * Get all last-fired records as a Map<registrationId, lastFiredAt>.
-     * Used for bulk loading during leader recovery.
+     * Get all last-fired records as a Map keyed by `cronCacheKey(registrationId,
+     * scheduleKey)`. Used for bulk loading during leader recovery.
      */
     getAll(): Promise<Map<string, Date>>;
 }

package/dist/dashboard/attestation-filters.d.ts

@@ -12,55 +12,64 @@ import type { Database } from '../db/types.js';
  * lists (repository / workflow come back null).
  */
 export declare function baseAttestationsQuery(db: Kysely<Database>): import("kysely").SelectQueryBuilder<{
+    access_log: import("../db/types.js").AccessLogTable;
+    admin_tokens: import("../db/types.js").AdminTokenTable;
+    agent_tokens: import("../db/types.js").AgentTokenTable;
+    artifacts: import("../db/types.js").ArtifactsTable;
+    attestations: import("../db/types.js").AttestationsTable;
+    backup_runs: import("../db/types.js").BackupRunsTable;
+    batch_accumulation_items: import("../db/types.js").BatchAccumulationItemsTable;
+    batch_accumulation_windows: import("../db/types.js").BatchAccumulationWindowsTable;
+    check_run_tracking: import("../db/types.js").CheckRunTrackingTable;
     cluster_meta: import("../db/types.js").ClusterMetaTable;
+    cluster_settings: import("../db/types.js").ClusterSettingsTable;
+    cold_store_chunk_counts: import("../db/types.js").ColdStoreChunkCountsTable;
+    cold_store_chunks: import("../db/types.js").ColdStoreChunksTable;
+    concurrency_groups: import("../db/types.js").ConcurrencyGroupsTable;
+    config_versions: import("../db/types.js").ConfigVersionTable;
+    context_bindings: import("../db/types.js").ContextBindingsTable;
+    context_source_overrides: import("../db/types.js").ContextSourceOverridesTable;
+    context_variables: import("../db/types.js").ContextVariablesTable;
     contexts: import("../db/types.js").ContextsTable;
-    host_roster: import("../db/types.js").HostRosterTable;
-    dispatch_queue: import("../db/types.js").DispatchQueueTable;
+    cron_last_fired: import("../db/types.js").CronLastFiredTable;
+    cross_repo_trust: import("../db/types.js").CrossRepoTrustTable;
+    dashboard_encryption_keys: import("../db/types.js").DashboardEncryptionKeysTable;
     dedup_cache: import("../db/types.js").DedupCacheTable;
-    ip_allocations: import("../db/types.js").IpAllocationTable;
-    execution_runs: import("kysely").Nullable<import("../db/types.js").ExecutionRunTable>;
+    dispatch_queue: import("../db/types.js").DispatchQueueTable;
+    event_log: import("../db/types.js").EventLogTable;
+    execution_job_needs: import("../db/types.js").ExecutionJobNeedsTable;
     execution_jobs: import("../db/types.js").ExecutionJobTable;
+    execution_runs: import("kysely").Nullable<import("../db/types.js").ExecutionRunTable>;
     execution_steps: import("../db/types.js").ExecutionStepTable;
-    raft_state: import("../db/types.js").RaftStateTable;
-    secret_audit_log: import("../db/types.js").SecretAuditLogTable;
-    scoped_secrets: import("../db/types.js").ScopedSecretsTable;
-    context_bindings: import("../db/types.js").ContextBindingsTable;
-    context_variables: import("../db/types.js").ContextVariablesTable;
-    context_source_overrides: import("../db/types.js").ContextSourceOverridesTable;
-    held_runs: import("../db/types.js").HeldRunsTable;
-    held_run_approvals: import("../db/types.js").HeldRunApprovalsTable;
-    admin_tokens: import("../db/types.js").AdminTokenTable;
-    agent_tokens: import("../db/types.js").AgentTokenTable;
-    config_versions: import("../db/types.js").ConfigVersionTable;
-    kici_events: import("../db/types.js").KiciEventTable;
     generic_webhook_sources: import("../db/types.js").GenericWebhookSourceTable;
-    cross_repo_trust: import("../db/types.js").CrossRepoTrustTable;
-    test_uploads: import("../db/types.js").TestUploadsTable;
-    workflow_registrations: import("../db/types.js").WorkflowRegistrationsTable;
-    registry_versions: import("../db/types.js").RegistryVersionsTable;
-    cron_last_fired: import("../db/types.js").CronLastFiredTable;
-    run_ephemeral_keys: import("../db/types.js").RunEphemeralKeysTable;
-    run_secret_outputs: import("../db/types.js").RunSecretOutputsTable;
-    concurrency_groups: import("../db/types.js").ConcurrencyGroupsTable;
-    sources: import("../db/types.js").SourcesTable;
+    held_run_approvals: import("../db/types.js").HeldRunApprovalsTable;
+    held_runs: import("../db/types.js").HeldRunsTable;
+    host_roster: import("../db/types.js").HostRosterTable;
+    ingest_overflow_buffer: import("../db/types.js").IngestOverflowBufferTable;
+    ip_allocations: import("../db/types.js").IpAllocationTable;
     join_tokens: import("../db/types.js").JoinTokenTable;
+    kici_events: import("../db/types.js").KiciEventTable;
+    orchestrator_signing_keys: import("../db/types.js").OrchestratorSigningKeysTable;
     org_settings: import("../db/types.js").OrgSettingsTable;
-    execution_job_needs: import("../db/types.js").ExecutionJobNeedsTable;
+    org_trust_policy: import("../db/types.js").OrgTrustPolicyTable;
+    pending_attestations: import("../db/types.js").PendingAttestationsTable;
     pending_job_contexts: import("../db/types.js").PendingJobContextsTable;
     pending_workflow_contexts: import("../db/types.js").PendingWorkflowContextsTable;
-    event_log: import("../db/types.js").EventLogTable;
-    access_log: import("../db/types.js").AccessLogTable;
-    cold_store_chunk_counts: import("../db/types.js").ColdStoreChunkCountsTable;
-    cold_store_chunks: import("../db/types.js").ColdStoreChunksTable;
-    check_run_tracking: import("../db/types.js").CheckRunTrackingTable;
-    scaler_spawning_agents: import("../db/types.js").ScalerSpawningAgentsTable;
-    scaler_agent_jobs: import("../db/types.js").ScalerAgentJobsTable;
-    scaler_reservations: import("../db/types.js").ScalerReservationsTable;
-    attestations: import("../db/types.js").AttestationsTable;
-    pending_attestations: import("../db/types.js").PendingAttestationsTable;
+    raft_state: import("../db/types.js").RaftStateTable;
+    registry_versions: import("../db/types.js").RegistryVersionsTable;
     remote_sources: import("../db/types.js").RemoteSourcesTable;
     request_idempotency: import("../db/types.js").RequestIdempotencyTable;
-}, "execution_runs" | "execution_jobs" | "attestations", {}>;
+    run_ephemeral_keys: import("../db/types.js").RunEphemeralKeysTable;
+    run_secret_outputs: import("../db/types.js").RunSecretOutputsTable;
+    scaler_agent_jobs: import("../db/types.js").ScalerAgentJobsTable;
+    scaler_reservations: import("../db/types.js").ScalerReservationsTable;
+    scaler_spawning_agents: import("../db/types.js").ScalerSpawningAgentsTable;
+    scoped_secrets: import("../db/types.js").ScopedSecretsTable;
+    secret_audit_log: import("../db/types.js").SecretAuditLogTable;
+    sources: import("../db/types.js").SourcesTable;
+    test_uploads: import("../db/types.js").TestUploadsTable;
+    workflow_registrations: import("../db/types.js").WorkflowRegistrationsTable;
+}, "attestations" | "execution_jobs" | "execution_runs", {}>;
 export type AttestationsBaseQuery = ReturnType<typeof baseAttestationsQuery>;
 /**
  * Base query for the deferred-attestation outbox (`pending_attestations`),
@@ -74,55 +83,64 @@ export type AttestationsBaseQuery = ReturnType<typeof baseAttestationsQuery>;
  * run / job still lists (repository / workflow / job name come back null).
  */
 export declare function basePendingAttestationsQuery(db: Kysely<Database>): import("kysely").SelectQueryBuilder<{
+    access_log: import("../db/types.js").AccessLogTable;
+    admin_tokens: import("../db/types.js").AdminTokenTable;
+    agent_tokens: import("../db/types.js").AgentTokenTable;
+    artifacts: import("../db/types.js").ArtifactsTable;
+    attestations: import("../db/types.js").AttestationsTable;
+    backup_runs: import("../db/types.js").BackupRunsTable;
+    batch_accumulation_items: import("../db/types.js").BatchAccumulationItemsTable;
+    batch_accumulation_windows: import("../db/types.js").BatchAccumulationWindowsTable;
+    check_run_tracking: import("../db/types.js").CheckRunTrackingTable;
     cluster_meta: import("../db/types.js").ClusterMetaTable;
+    cluster_settings: import("../db/types.js").ClusterSettingsTable;
+    cold_store_chunk_counts: import("../db/types.js").ColdStoreChunkCountsTable;
+    cold_store_chunks: import("../db/types.js").ColdStoreChunksTable;
+    concurrency_groups: import("../db/types.js").ConcurrencyGroupsTable;
+    config_versions: import("../db/types.js").ConfigVersionTable;
+    context_bindings: import("../db/types.js").ContextBindingsTable;
+    context_source_overrides: import("../db/types.js").ContextSourceOverridesTable;
+    context_variables: import("../db/types.js").ContextVariablesTable;
     contexts: import("../db/types.js").ContextsTable;
-    host_roster: import("../db/types.js").HostRosterTable;
-    dispatch_queue: import("../db/types.js").DispatchQueueTable;
+    cron_last_fired: import("../db/types.js").CronLastFiredTable;
+    cross_repo_trust: import("../db/types.js").CrossRepoTrustTable;
+    dashboard_encryption_keys: import("../db/types.js").DashboardEncryptionKeysTable;
     dedup_cache: import("../db/types.js").DedupCacheTable;
-    ip_allocations: import("../db/types.js").IpAllocationTable;
-    execution_runs: import("kysely").Nullable<import("../db/types.js").ExecutionRunTable>;
+    dispatch_queue: import("../db/types.js").DispatchQueueTable;
+    event_log: import("../db/types.js").EventLogTable;
+    execution_job_needs: import("../db/types.js").ExecutionJobNeedsTable;
     execution_jobs: import("kysely").Nullable<import("../db/types.js").ExecutionJobTable>;
+    execution_runs: import("kysely").Nullable<import("../db/types.js").ExecutionRunTable>;
     execution_steps: import("../db/types.js").ExecutionStepTable;
-    raft_state: import("../db/types.js").RaftStateTable;
-    secret_audit_log: import("../db/types.js").SecretAuditLogTable;
-    scoped_secrets: import("../db/types.js").ScopedSecretsTable;
-    context_bindings: import("../db/types.js").ContextBindingsTable;
-    context_variables: import("../db/types.js").ContextVariablesTable;
-    context_source_overrides: import("../db/types.js").ContextSourceOverridesTable;
-    held_runs: import("../db/types.js").HeldRunsTable;
-    held_run_approvals: import("../db/types.js").HeldRunApprovalsTable;
-    admin_tokens: import("../db/types.js").AdminTokenTable;
-    agent_tokens: import("../db/types.js").AgentTokenTable;
-    config_versions: import("../db/types.js").ConfigVersionTable;
-    kici_events: import("../db/types.js").KiciEventTable;
     generic_webhook_sources: import("../db/types.js").GenericWebhookSourceTable;
-    cross_repo_trust: import("../db/types.js").CrossRepoTrustTable;
-    test_uploads: import("../db/types.js").TestUploadsTable;
-    workflow_registrations: import("../db/types.js").WorkflowRegistrationsTable;
-    registry_versions: import("../db/types.js").RegistryVersionsTable;
-    cron_last_fired: import("../db/types.js").CronLastFiredTable;
-    run_ephemeral_keys: import("../db/types.js").RunEphemeralKeysTable;
-    run_secret_outputs: import("../db/types.js").RunSecretOutputsTable;
-    concurrency_groups: import("../db/types.js").ConcurrencyGroupsTable;
-    sources: import("../db/types.js").SourcesTable;
+    held_run_approvals: import("../db/types.js").HeldRunApprovalsTable;
+    held_runs: import("../db/types.js").HeldRunsTable;
+    host_roster: import("../db/types.js").HostRosterTable;
+    ingest_overflow_buffer: import("../db/types.js").IngestOverflowBufferTable;
+    ip_allocations: import("../db/types.js").IpAllocationTable;
     join_tokens: import("../db/types.js").JoinTokenTable;
+    kici_events: import("../db/types.js").KiciEventTable;
+    orchestrator_signing_keys: import("../db/types.js").OrchestratorSigningKeysTable;
     org_settings: import("../db/types.js").OrgSettingsTable;
-    execution_job_needs: import("../db/types.js").ExecutionJobNeedsTable;
+    org_trust_policy: import("../db/types.js").OrgTrustPolicyTable;
+    pending_attestations: import("../db/types.js").PendingAttestationsTable;
     pending_job_contexts: import("../db/types.js").PendingJobContextsTable;
     pending_workflow_contexts: import("../db/types.js").PendingWorkflowContextsTable;
-    event_log: import("../db/types.js").EventLogTable;
-    access_log: import("../db/types.js").AccessLogTable;
-    cold_store_chunk_counts: import("../db/types.js").ColdStoreChunkCountsTable;
-    cold_store_chunks: import("../db/types.js").ColdStoreChunksTable;
-    check_run_tracking: import("../db/types.js").CheckRunTrackingTable;
-    scaler_spawning_agents: import("../db/types.js").ScalerSpawningAgentsTable;
-    scaler_agent_jobs: import("../db/types.js").ScalerAgentJobsTable;
-    scaler_reservations: import("../db/types.js").ScalerReservationsTable;
-    attestations: import("../db/types.js").AttestationsTable;
-    pending_attestations: import("../db/types.js").PendingAttestationsTable;
+    raft_state: import("../db/types.js").RaftStateTable;
+    registry_versions: import("../db/types.js").RegistryVersionsTable;
     remote_sources: import("../db/types.js").RemoteSourcesTable;
     request_idempotency: import("../db/types.js").RequestIdempotencyTable;
-}, "execution_runs" | "execution_jobs" | "pending_attestations", {}>;
+    run_ephemeral_keys: import("../db/types.js").RunEphemeralKeysTable;
+    run_secret_outputs: import("../db/types.js").RunSecretOutputsTable;
+    scaler_agent_jobs: import("../db/types.js").ScalerAgentJobsTable;
+    scaler_reservations: import("../db/types.js").ScalerReservationsTable;
+    scaler_spawning_agents: import("../db/types.js").ScalerSpawningAgentsTable;
+    scoped_secrets: import("../db/types.js").ScopedSecretsTable;
+    secret_audit_log: import("../db/types.js").SecretAuditLogTable;
+    sources: import("../db/types.js").SourcesTable;
+    test_uploads: import("../db/types.js").TestUploadsTable;
+    workflow_registrations: import("../db/types.js").WorkflowRegistrationsTable;
+}, "execution_jobs" | "execution_runs" | "pending_attestations", {}>;
 /**
  * Apply org-wide attestation filters to the base query. Digest is exact-match;
  * name is an ILIKE substring; status / repository / workflow / job are equality;