@kici-dev/orchestrator 0.12.0 → 0.13.0

package/dist/storage/s3.d.ts

@@ -47,6 +47,11 @@ export declare class S3CacheStorage implements CacheStorage {
     private readonly bucket;
     private readonly prefix;
     private readonly ttlMs;
+    /**
+     * False once the backend answered a conditional self-copy with
+     * `501 NotImplemented`. From then on `updateMeta` copies unconditionally.
+     */
+    private conditionalCopySupported;
     constructor(options: S3CacheStorageOptions);
     /** Build the full S3 object key from a cache key. */
     private objectKey;
@@ -57,11 +62,42 @@ export declare class S3CacheStorage implements CacheStorage {
      * Returns null if the object doesn't exist (NoSuchKey/NotFound).
      */
     private readMeta;
+    /**
+     * Read an object's TTL metadata together with the ETag of the version it
+     * belongs to. Returns null if the object doesn't exist (NoSuchKey/NotFound).
+     */
+    private readHead;
     /**
      * Update metadata on an S3 object by copying it to itself.
      * This is the standard S3 pattern for updating metadata without re-uploading data.
+     *
+     * The copy is conditional on `etag`, the version whose metadata the caller
+     * read. A self-copy is a whole-object write: without the condition, one that
+     * races a `put()` of the same key can land after it and write the older body
+     * back. Cache pointers are rewritten in place while builds publish them, so a
+     * touch-on-read racing a publish reverted the pointer to a tarball that no
+     * longer exists. `CopySourceIfMatch` pins the bytes copied to that version and
+     * `IfMatch` refuses the write unless the key still holds it.
+     *
+     * Returns false when the object was replaced since the read (`412`), or is
+     * being replaced right now (`409 ConditionalRequestConflict`): the newer
+     * write stamps metadata of its own, so there is nothing left to refresh.
+     *
+     * An S3-compatible backend that does not implement conditional copies
+     * answers `501 NotImplemented`. The copy then runs again without the
+     * condition, and later copies skip it, as on a backend that ignores the
+     * headers.
      */
     private updateMeta;
+    /** Copy an object onto itself with new TTL metadata, conditional on `etag` when given. */
+    private copyOntoItself;
+    /** Check if an error is a failed conditional request (PreconditionFailed, 412). */
+    private isPreconditionFailedError;
+    /** Check if an error is a conditional write that raced another write (ConditionalRequestConflict, 409). */
+    private isConditionalConflictError;
+    /** Check if an error is a request the backend does not implement (NotImplemented, 501). */
+    private isNotImplementedError;
+    private hasErrorShape;
     /** Check if an error is a "not found" error (NoSuchKey, NotFound, 404). */
     private isNotFoundError;
     put(key: string, data: Buffer | string): Promise<void>;

package/dist/ws/agent-handler.d.ts

@@ -20,7 +20,7 @@
  * token, and the agent then registers as normal.
  */
 import type { WSContext, WSEvents, WSMessageReceive } from 'hono/ws';
-import { LogStream } from '@kici-dev/engine';
+import { LogStream, ScaleDownReason } from '@kici-dev/engine';
 import type { RateLimiterConfig, AttestationVerifyStatus } from '@kici-dev/engine';
 import type { ProvenanceTrustRoot } from '../provenance/trust-root.js';
 import type { AgentRegistry } from '../agent/registry.js';
@@ -36,6 +36,7 @@ import type { PendingBuildTracker } from '../cache/pending-builds.js';
 import type { PendingInitTracker } from '../cache/pending-inits.js';
 import type { PendingDynamicTracker } from '../cache/pending-dynamics.js';
 import type { PendingGlobalEvalTracker } from '../cache/pending-global-evals.js';
+import { type CacheUploadSettle } from '../cache/cache-upload-settle.js';
 import type { CacheStorage } from '../storage/types.js';
 import type { AgentMetricsAggregator } from '../metrics/agent-metrics-aggregator.js';
 import { type AgentApiRegistry } from './agent-api-registry.js';
@@ -94,6 +95,8 @@ export declare function frameIdentity(data: unknown): FrameIdentity;
 export interface AgentWsEvents extends Omit<WSEvents, 'onMessage'> {
     onMessage(evt: MessageEvent<WSMessageReceive>, ws: WSContext): Promise<void>;
 }
+/** `error` frame code sent when a registration is refused because another agent token holds the id. */
+export declare const AGENT_ID_IN_USE = "AGENT_ID_IN_USE";
 export interface AgentWsHandlerDeps {
     registry: AgentRegistry;
     dispatcher: Dispatcher;
@@ -161,8 +164,11 @@ export interface AgentWsHandlerDeps {
         boundJobId?: string;
         mandatoryLabels: string[];
     } | null>;
-    /** Optional callback when an agent disconnects (for scaler lifecycle). */
-    onScalerAgentDisconnected?: (agentId: string) => void;
+    /**
+     * Optional callback when an agent disconnects (for scaler lifecycle). `reason`
+     * is the scale-down reason an event scaler emits for it.
+     */
+    onScalerAgentDisconnected?: (agentId: string, reason?: ScaleDownReason) => void;
     /** Optional callback when an agent completes a job (for scaler lifecycle). */
     onScalerJobComplete?: (agentId: string) => void;
     /** Optional callback when agent sends per-job heartbeats. */
@@ -256,6 +262,13 @@ export interface AgentWsHandlerDeps {
     artifactStore?: ArtifactStore;
     /** Cache storage for setting metadata after upload completion. */
     cacheStorage?: CacheStorage;
+    /**
+     * In-flight build-cache publishes and the per-org bound a build's success
+     * waits for them. Built once per orchestrator, not per connection, so a
+     * success replayed on a reconnected socket still sees a publish started on
+     * the old one. Absent: no registration and no wait.
+     */
+    cacheUploadSettle?: CacheUploadSettle;
     /**
      * Storage used to mint presigned PUT URLs for provenance bundles. Distinct
      * dep so a deployment can decide whether attestations share the cache bucket.
@@ -424,6 +437,14 @@ export interface AgentLogChunkInput {
     /** Absent when the agent does not report a stream; read as `stdout`. */
     stream?: LogStream;
 }
+/**
+ * Release the in-memory waiters of jobs a disconnect triage failed: pending
+ * builds, inits, dynamic evaluations and global eval rounds, and the user-cache
+ * refs of the dispatch. The dispatcher runs it inside `onAgentDisconnect`, so
+ * every path that drops an agent reaches it, whether or not it waits for the
+ * socket to close.
+ */
+export declare function releaseFailedJobWaiters(deps: Pick<AgentWsHandlerDeps, 'pendingBuilds' | 'pendingInits' | 'pendingDynamics' | 'pendingGlobalEvals' | 'dispatchCacheRefs'>, failedJobIds: string[]): void;
 /**
  * Create a Hono WS event handler for agent connections.
  *

package/dist/ws/agent-heartbeat.d.ts

@@ -23,8 +23,8 @@ interface AgentHeartbeatMonitorDeps {
 /**
  * Periodically inspects all registered agent connections and:
  * - Marks agents as unhealthy after 90s of silence (log only).
- * - Closes and unregisters agents after 180s of silence.
- * - Triggers dispatcher.onAgentDisconnect for stale agents.
+ * - Triggers dispatcher.onAgentDisconnect for an agent silent for 180s, then
+ *   unregisters it and closes its socket.
  */
 export declare class AgentHeartbeatMonitor {
     private readonly registry;

package/installer-image-digests.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.12.0",
+  "version": "0.13.0",
   "images": {
-    "kici-agent": "sha256:eaa1d2270da370f150b149dbf51569b51759d7b62607fe6a1cee8b01babac2e9",
-    "kici-orchestrator": "sha256:a1a73e458b0cda327e534b74ba02406fb64170d61a3de34bfbfa8c42ab75d087"
+    "kici-agent": "sha256:301bc573b855f582a43aaf1813ed6d5fc1b1f72ecbbe6e98d7176227bb4f7d81",
+    "kici-orchestrator": "sha256:6dc6f9aa82b30b6f194873816cebc37a8d8eb4600ed00ce72f3ea8dbdfa91501"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
     "ci",
@@ -24,7 +24,7 @@
   },
   "license": "AGPL-3.0-only",
   "engines": {
-    "node": ">=24"
+    "node": ">=24.5.0"
   },
   "type": "module",
   "files": [
@@ -90,8 +90,8 @@
     "ws": "^8.21.3",
     "yaml": "^2.9.1",
     "zod": "^4.6.5",
-    "@kici-dev/engine": "0.12.0",
-    "@kici-dev/shared": "0.12.0"
+    "@kici-dev/shared": "0.13.0",
+    "@kici-dev/engine": "0.13.0"
   },
   "kici": {
     "metrics": {
@@ -106,7 +106,7 @@
     "@types/dockerode": "^4.0.1",
     "@types/ws": "^8.18.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.12.0"
+    "@kici-dev/agent": "0.13.0"
   },
   "scripts": {
     "build": "node ../../scripts/build-service.mjs && tsc --emitDeclarationOnly",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.12.0",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.12.0/7ed473c4-ef45-4a4a-91c4-1294dc868112",
+  "name": "@kici-dev/orchestrator@0.13.0",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.13.0/2d67bf58-654a-4c14-96ff-5d0ca3e027a0",
   "creationInfo": {
-    "created": "2026-09-28T05:10:57Z",
+    "created": "2026-09-30T15:39:17Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -964,9 +964,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.13.0",
       "name": "@kici-dev/core",
-      "versionInfo": "0.12.0",
+      "versionInfo": "0.13.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -977,16 +977,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.12.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.13.0"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.12.0",
+      "versionInfo": "0.13.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -997,7 +997,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.12.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.13.0"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1006,7 +1006,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.12.0",
+      "versionInfo": "0.13.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1017,16 +1017,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.12.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.13.0"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.12.0",
+      "versionInfo": "0.13.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1037,7 +1037,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.12.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.13.0"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -7676,62 +7676,62 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.12",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -7767,12 +7767,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -7881,117 +7881,117 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.13.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.13.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.35.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.11.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.43.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.13.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.23.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.12.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.13.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },