@kici-dev/orchestrator 0.14.2 → 0.16.0

package/dist/routes/admin-cluster-settings.d.ts

@@ -16,8 +16,9 @@
 import { Hono } from 'hono';
 import { type Kysely } from 'kysely';
 import type { Database } from '../db/types.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { PeerRegistry } from '../cluster/peer-registry.js';
+import { type AdminEnv } from './admin-env.js';
 /** The live view behind `GET /cluster-settings/propagation`. */
 export interface ClusterSettingsPropagationSource {
     instanceId: string;
@@ -31,13 +32,6 @@ interface ClusterSettingsRouteDeps {
     /** Mounts `GET /cluster-settings/propagation` when set. */
     propagation?: ClusterSettingsPropagationSource;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createClusterSettingsRoutes(deps: ClusterSettingsRouteDeps): Hono<AdminEnv>;
 export {};
 //# sourceMappingURL=admin-cluster-settings.d.ts.map

package/dist/routes/admin-config.d.ts

@@ -28,9 +28,6 @@ import type { LocalConfig } from '../config/types.js';
 export interface PeerReloadForwardResult {
     result: ReloadResult | null;
 }
-/**
- * Dependencies for config admin routes.
- */
 export interface ConfigRouteDeps {
     sharedStore: SharedConfigStore;
     configReloader: ConfigReloader;

package/dist/routes/admin-contexts.d.ts

@@ -29,25 +29,17 @@
  */
 import { Hono } from 'hono';
 import { type Kysely } from 'kysely';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 export interface AdminContextRoutesDeps {
     db: Kysely<any>;
     rbac: RbacEnforcer;
 }
-/** Hono env type for admin-contexts routes with context variables. */
-type AdminEnvEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 /**
  * Create admin API routes for context management.
  *
  * @param deps - db (Kysely) + rbac enforcer
  * @returns Hono app mounted at /api/v1/admin
  */
-export declare function createAdminContextRoutes(deps: AdminContextRoutesDeps): Hono<AdminEnvEnv>;
-export {};
+export declare function createAdminContextRoutes(deps: AdminContextRoutesDeps): Hono<AdminEnv>;
 //# sourceMappingURL=admin-contexts.d.ts.map

package/dist/routes/admin-db.d.ts

@@ -11,7 +11,7 @@
 import { Hono } from 'hono';
 import type { Kysely } from 'kysely';
 import type pg from 'pg';
-import type { Role } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 interface DbRouteDeps {
     db: Kysely<any>;
     pool: pg.Pool;
@@ -21,13 +21,6 @@ interface DbRouteDeps {
      */
     databaseUrl?: string;
 }
-type AdminDbEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
-export declare function createDbRoutes(deps: DbRouteDeps): Hono<AdminDbEnv>;
+export declare function createDbRoutes(deps: DbRouteDeps): Hono<AdminEnv>;
 export {};
 //# sourceMappingURL=admin-db.d.ts.map

package/dist/routes/admin-env.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The Hono env, app factory and routing-key guard every admin route file shares.
+ */
+import { Hono, type Env, type MiddlewareHandler } from 'hono';
+import type { Role } from '../secrets/rbac.js';
+/** Context variables the admin auth middleware sets for every admin route. */
+export type AdminEnv = {
+    Variables: {
+        role: Role;
+        userId: string;
+        routingKey: string | null;
+    };
+};
+type ErrorLogger = {
+    error: (msg: string, meta?: Record<string, unknown>) => void;
+};
+/**
+ * Build an admin sub-app whose thrown errors map through `handleAdminError`.
+ *
+ * Hono runs a routed sub-app's own error handler, so the parent app's generic
+ * 500 never answers an admin route. An `HTTPException` (Hono's deliberate
+ * control-flow response) passes through unchanged, as it does on the parent.
+ *
+ * @param logger - Receives the unmapped-error log line.
+ * @param opts.logBeforeHandling - When set, every error is first logged under this message.
+ */
+export declare function createAdminApp<E extends Env = AdminEnv>(logger: ErrorLogger, opts?: {
+    logBeforeHandling?: string;
+}): Hono<E>;
+/** Refuse a routing-key-scoped token with 403 before the handler runs. */
+export declare const requireUnscoped: MiddlewareHandler<AdminEnv>;
+export {};
+//# sourceMappingURL=admin-env.d.ts.map

package/dist/routes/admin-event-dlq.d.ts

@@ -19,8 +19,9 @@
 import { Hono } from 'hono';
 import type { EventStore } from '../events/event-store.js';
 import type { TokenManager } from '../secrets/token-manager.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { AccessLogWriter } from '../audit/access-log.js';
+import { type AdminEnv } from './admin-env.js';
 export interface AdminEventDlqRoutesDeps {
     eventStore: EventStore;
     tokenManager: TokenManager;
@@ -28,13 +29,5 @@ export interface AdminEventDlqRoutesDeps {
     /** Required so retry/discard mutations land in the access log. */
     accessLog?: AccessLogWriter;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createAdminEventDlqRoutes(deps: AdminEventDlqRoutesDeps): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-event-dlq.d.ts.map

package/dist/routes/admin-event-inspect.d.ts

@@ -17,20 +17,13 @@ import type { Kysely } from 'kysely';
 import type { Database } from '../db/types.js';
 import type { EventStore } from '../events/event-store.js';
 import type { TokenManager } from '../secrets/token-manager.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 export interface AdminEventInspectRoutesDeps {
     db: Kysely<Database>;
     eventStore: EventStore;
     tokenManager: TokenManager;
     rbac: RbacEnforcer;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createAdminEventInspectRoutes(deps: AdminEventInspectRoutesDeps): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-event-inspect.d.ts.map

package/dist/routes/admin-event-log.d.ts

@@ -21,8 +21,9 @@ import { type ColdStore } from '@kici-dev/shared';
 import type { Kysely } from 'kysely';
 import type { Database } from '../db/types.js';
 import type { TokenManager } from '../secrets/token-manager.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { LogStorage } from '../reporting/log-storage.js';
+import { type AdminEnv } from './admin-env.js';
 export interface AdminEventLogRoutesDeps {
     db: Kysely<Database>;
     logStorage: LogStorage;
@@ -31,13 +32,5 @@ export interface AdminEventLogRoutesDeps {
     /** Optional cold-store for archived event_log rows. */
     coldStore?: ColdStore;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createAdminEventLogRoutes(deps: AdminEventLogRoutesDeps): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-event-log.d.ts.map

package/dist/routes/admin-events.d.ts

@@ -12,14 +12,12 @@ import type pg from 'pg';
 import type { GenericSourceManager } from '../webhook/generic-sources.js';
 import type { TrustStore } from '../events/trust-store.js';
 import type { TokenManager } from '../secrets/token-manager.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { AppConfig } from '../config.js';
 import type { ProviderRegistry } from '../provider-registry.js';
 import type { SecretResolver } from '../secrets/secret-resolver.js';
 import type { ClusterSettingsReader } from '../cluster/cluster-settings-reader.js';
-/**
- * Dependencies for admin event routes.
- */
+import { type AdminEnv } from './admin-env.js';
 interface AdminEventRouteDeps {
     sourceManager: GenericSourceManager;
     trustStore: TrustStore;
@@ -61,20 +59,12 @@ interface AdminEventRouteDeps {
      */
     pool?: pg.Pool;
 }
-/** Hono env type for admin event routes with context variables. */
-type AdminEventEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 /**
  * Create admin API routes for generic webhook sources and trust management.
  *
  * @param deps - Admin event route dependencies
  * @returns Hono app with admin event routes mounted at /api/v1/admin/*
  */
-export declare function createAdminEventRoutes(deps: AdminEventRouteDeps): Hono<AdminEventEnv>;
+export declare function createAdminEventRoutes(deps: AdminEventRouteDeps): Hono<AdminEnv>;
 export {};
 //# sourceMappingURL=admin-events.d.ts.map

package/dist/routes/admin-held-runs.d.ts

@@ -45,9 +45,10 @@ import { HeldRunStore, type ReleaseSignal } from '../contexts/held-runs.js';
 import type { TrustDirectoryStore } from '../security/trust-directory-store.js';
 import { adminActorSub, triggererSubjectFor } from '../approvals/triggerer-subject.js';
 import { type ResolveCheckStatusPoster } from '../pipeline/security-hold-check.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { AccessLogWriter } from '../audit/access-log.js';
 import type { Database, HeldRun } from '../db/types.js';
+import { type AdminEnv } from './admin-env.js';
 /**
  * Wording for the Platform-managed refusal, surfaced verbatim by the CLI.
  *
@@ -126,13 +127,6 @@ export interface HeldRunRouteDeps {
     accessLog: AccessLogWriter;
     release: HeldRunReleaseWiring;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 /**
  * The approval subject for a decision taken through an admin token.
  *

package/dist/routes/admin-list-limit.d.ts

@@ -0,0 +1,3 @@
+/** Page size from a `?limit=` query: a missing, non-numeric or non-positive value is 50; the cap is 200. */
+export declare function clampLimit(raw: string | undefined): number;
+//# sourceMappingURL=admin-list-limit.d.ts.map

package/dist/routes/admin-maintenance.d.ts

@@ -14,17 +14,10 @@
  */
 import { Hono } from 'hono';
 import type { Kysely } from 'kysely';
-import type { Role } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 interface MaintenanceRouteDeps {
     db: Kysely<any>;
 }
-type AdminMaintenanceEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
-export declare function createMaintenanceRoutes(deps: MaintenanceRouteDeps): Hono<AdminMaintenanceEnv>;
+export declare function createMaintenanceRoutes(deps: MaintenanceRouteDeps): Hono<AdminEnv>;
 export {};
 //# sourceMappingURL=admin-maintenance.d.ts.map

package/dist/routes/admin-orchestrator-drain.d.ts

@@ -14,22 +14,15 @@
 import { Hono } from 'hono';
 import { z } from 'zod';
 import type { DrainController } from '../drain/drain-controller.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 export declare const DrainActionSchema: z.ZodEnum<{
     drain: "drain";
     resume: "resume";
 }>;
 export type DrainAction = z.infer<typeof DrainActionSchema>;
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createOrchestratorDrainRoutes(deps: {
     drainController: DrainController;
     rbac: RbacEnforcer;
 }): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-orchestrator-drain.d.ts.map

package/dist/routes/admin-org-settings.d.ts

@@ -14,8 +14,9 @@ import { type Kysely } from 'kysely';
 import { type OrchestratorMode } from '@kici-dev/engine';
 import { DashboardWriteOperation } from '@kici-dev/engine/protocol/dashboard-write-operations';
 import type { Database } from '../db/types.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { AccessLogWriter } from '../audit/access-log.js';
+import { type AdminEnv } from './admin-env.js';
 interface OrgSettingsRouteDeps {
     db: Kysely<Database>;
     rbac: RbacEnforcer;
@@ -40,13 +41,6 @@ interface OrgSettingsRouteDeps {
      */
     accessLog?: AccessLogWriter;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createOrgSettingsRoutes(deps: OrgSettingsRouteDeps): Hono<AdminEnv>;
 export { DashboardWriteOperation };
 //# sourceMappingURL=admin-org-settings.d.ts.map

package/dist/routes/admin-orgs.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Admin API route listing the org ids this orchestrator holds data for.
+ *
+ *   GET /api/v1/admin/org-ids → `OrgListResponse`: every org id the configuration
+ *   and anchor tables name, each with the data that names it, plus the live
+ *   Platform attachment (`attached` / `pending` / `none`).
+ *
+ * Backs `kici-admin org list` and the `Org:` line of `kici-admin orchestrator
+ * status`. The listing spans every org, so the route requires an unscoped token
+ * and `secret.read`, like the other read-only inspection routes.
+ */
+import { Hono } from 'hono';
+import { type HeldOrg } from '../db/repos/org-ids-repo.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
+export interface AdminOrgRoutesDeps {
+    /** The org ids the database holds (`listHeldOrgIds` bound to the orchestrator DB). */
+    listOrgs: () => Promise<HeldOrg[]>;
+    rbac: RbacEnforcer;
+    /**
+     * The org the Platform named on `auth.success`; `undefined` before the first
+     * authentication. Absent when no Platform client runs (independent mode).
+     */
+    getPlatformOrgId?: () => string | undefined;
+}
+export declare function createAdminOrgRoutes(deps: AdminOrgRoutesDeps): Hono<AdminEnv>;
+//# sourceMappingURL=admin-orgs.d.ts.map

package/dist/routes/admin-peer-forget.d.ts

@@ -16,14 +16,8 @@
 import { Hono } from 'hono';
 import type { AccessLogWriter } from '../audit/access-log.js';
 import { type PeerForgetResult } from '../cluster/peer-forget.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 /** What the route needs from the coordinator it runs on. */
 export interface PeerForgetRouteDeps {
     /**
@@ -39,5 +33,4 @@ export declare function createPeerForgetRoutes(deps: {
     rbac: RbacEnforcer;
     accessLog?: AccessLogWriter;
 }): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-peer-forget.d.ts.map

package/dist/routes/admin-queue-execution.d.ts

@@ -11,18 +11,11 @@
  */
 import { Hono } from 'hono';
 import { type Kysely } from 'kysely';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 export interface AdminQueueExecutionRoutesDeps {
     db: Kysely<any>;
     rbac: RbacEnforcer;
 }
-type AdminQEEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
-export declare function createAdminQueueExecutionRoutes(deps: AdminQueueExecutionRoutesDeps): Hono<AdminQEEnv>;
-export {};
+export declare function createAdminQueueExecutionRoutes(deps: AdminQueueExecutionRoutesDeps): Hono<AdminEnv>;
 //# sourceMappingURL=admin-queue-execution.d.ts.map

package/dist/routes/admin-registrations.d.ts

@@ -9,11 +9,9 @@ import { Hono } from 'hono';
 import type { RegistrationStore } from '../registration/registration-store.js';
 import type { RegistrationIndex } from '../registration/registration-index.js';
 import type { TokenManager } from '../secrets/token-manager.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { ContextStore } from '../contexts/context-store.js';
-/**
- * Dependencies for admin registration routes.
- */
+import { type AdminEnv } from './admin-env.js';
 export interface AdminRegistrationRoutesDeps {
     registrationStore: RegistrationStore;
     registrationIndex: RegistrationIndex;
@@ -27,20 +25,11 @@ export interface AdminRegistrationRoutesDeps {
      */
     contextStore?: Pick<ContextStore, 'matchContext'>;
 }
-/** Hono env type for admin registration routes with context variables. */
-type AdminRegEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 /**
  * Create admin API routes for workflow registration management.
  *
  * @param deps - Admin registration route dependencies
  * @returns Hono app with registration routes mounted at /api/v1/admin/registrations
  */
-export declare function createAdminRegistrationRoutes(deps: AdminRegistrationRoutesDeps): Hono<AdminRegEnv>;
-export {};
+export declare function createAdminRegistrationRoutes(deps: AdminRegistrationRoutesDeps): Hono<AdminEnv>;
 //# sourceMappingURL=admin-registrations.d.ts.map

package/dist/routes/admin-runs.d.ts

@@ -22,10 +22,11 @@ import { Hono } from 'hono';
 import type { Kysely } from 'kysely';
 import type { Database } from '../db/types.js';
 import type { TokenManager } from '../secrets/token-manager.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import type { AuditLogger } from '../secrets/audit-logger.js';
 import type { ResolvedMasterKeys } from '../secrets/config.js';
 import type { LogStorage } from '../reporting/log-storage.js';
+import { type AdminEnv } from './admin-env.js';
 /**
  * Statuses accepted by the `?status=` filter.
  *
@@ -35,9 +36,6 @@ import type { LogStorage } from '../reporting/log-storage.js';
  * an empty result into a rejected request.
  */
 export declare const RUN_STATUSES: ReadonlySet<string>;
-/**
- * Dependencies for admin run routes.
- */
 export interface AdminRunRoutesDeps {
     db: Kysely<Database>;
     tokenManager: TokenManager;
@@ -58,20 +56,11 @@ export interface AdminRunRoutesDeps {
      */
     logStorage?: LogStorage;
 }
-/** Hono env type for admin run routes with context variables. */
-type AdminRunEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 /**
  * Create admin API routes for execution run inspection.
  *
  * @param deps - Admin run route dependencies
  * @returns Hono app with run routes mounted at /api/v1/admin/runs
  */
-export declare function createAdminRunRoutes(deps: AdminRunRoutesDeps): Hono<AdminRunEnv>;
-export {};
+export declare function createAdminRunRoutes(deps: AdminRunRoutesDeps): Hono<AdminEnv>;
 //# sourceMappingURL=admin-runs.d.ts.map

package/dist/routes/admin-scaler-orphans.d.ts

@@ -19,16 +19,10 @@
 import { Hono } from 'hono';
 import { type PeerScalerOrphansResponse } from '@kici-dev/engine';
 import type { AccessLogWriter } from '../audit/access-log.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
 import { type ScalerOrphansAnswer, type ScalerOrphansRequest } from '../scaler/orphan-requests.js';
 import { ScalerOrphansForwardFailure } from '../cluster/scaler-orphans-peer.js';
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
+import { type AdminEnv } from './admin-env.js';
 /** What the routes need from the coordinator they run on. */
 export interface ScalerOrphansRouteDeps {
     /** This coordinator's instance id. */
@@ -60,5 +54,4 @@ export declare function createScalerOrphansRoutes(deps: {
     rbac: RbacEnforcer;
     accessLog?: AccessLogWriter;
 }): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-scaler-orphans.d.ts.map

package/dist/routes/admin-scaler-reload.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Reload the scaler config, behind `kici-admin scaler reload`.
+ *
+ * Mounted inside `createAdminRoutes` at `/api/v1/admin`, so the Bearer-token
+ * auth middleware has already resolved the caller's role. Needs an unscoped
+ * token and the `scaler.manage` permission (owner, admin).
+ *
+ * - `POST /api/v1/admin/scaler/reload { single?, timeoutMs? }` — re-read the
+ *   scaler config on this orchestrator and, unless `single`, on every peer it
+ *   is connected to. Each orchestrator applies its own file completely or not
+ *   at all. Answers `{ scope, results }` with one result per instance, this
+ *   one first: `200` when no instance refused its file or went unanswered,
+ *   `422` otherwise.
+ *
+ * The route runs the scaler reload only: it does not reload the orchestrator
+ * config, so it never bumps the config version the peers follow, and a
+ * `single` reload stays on this orchestrator.
+ */
+import { Hono } from 'hono';
+import { type ScalerReloadInstanceResult } from '@kici-dev/engine';
+import type { AccessLogWriter } from '../audit/access-log.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
+/** What the route needs from the orchestrator it runs on. */
+export interface ScalerReloadRouteDeps {
+    /** This orchestrator's instance id, the audit row's target. */
+    instanceId: string;
+    /**
+     * Reload here and, unless `single`, on every connected peer, waiting
+     * `timeoutMs` for each peer. The first result is this orchestrator's.
+     */
+    reload: (single: boolean, timeoutMs: number) => Promise<ScalerReloadInstanceResult[]>;
+}
+/** How long the route waits for each peer by default. */
+export declare const DEFAULT_SCALER_RELOAD_TIMEOUT_MS = 60000;
+export declare function createScalerReloadRoutes(deps: {
+    scalerReload: ScalerReloadRouteDeps;
+    rbac: RbacEnforcer;
+    accessLog?: AccessLogWriter;
+}): Hono<AdminEnv>;
+//# sourceMappingURL=admin-scaler-reload.d.ts.map

package/dist/routes/admin-scheduled-jobs.d.ts

@@ -18,19 +18,12 @@ import { Hono } from 'hono';
 import type { Kysely } from 'kysely';
 import type { Database } from '../db/types.js';
 import type { TokenManager } from '../secrets/token-manager.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 export interface AdminScheduledJobsRoutesDeps {
     db: Kysely<Database>;
     tokenManager: TokenManager;
     rbac: RbacEnforcer;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createAdminScheduledJobsRoutes(deps: AdminScheduledJobsRoutesDeps): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-scheduled-jobs.d.ts.map

package/dist/routes/admin-signing-keys.d.ts

@@ -16,18 +16,11 @@
 import { Hono } from 'hono';
 import type { Kysely } from 'kysely';
 import type { Database } from '../db/types.js';
-import type { RbacEnforcer, Role } from '../secrets/rbac.js';
+import type { RbacEnforcer } from '../secrets/rbac.js';
+import { type AdminEnv } from './admin-env.js';
 export interface AdminSigningKeyRoutesDeps {
     db: Kysely<Database>;
     rbac: RbacEnforcer;
 }
-type AdminEnv = {
-    Variables: {
-        role: Role;
-        userId: string;
-        routingKey: string | null;
-    };
-};
 export declare function createAdminSigningKeyRoutes(deps: AdminSigningKeyRoutesDeps): Hono<AdminEnv>;
-export {};
 //# sourceMappingURL=admin-signing-keys.d.ts.map