@kici-dev/orchestrator 0.16.0 → 0.18.0

package/dist/ws/test-relay-handlers.d.ts

@@ -1,36 +1,38 @@
 /**
- * Orchestrator-side handlers for the Platform-relayed `kici run remote` control
- * plane. The Platform relays five `test.relay.*` requests over the authenticated
- * dashboard-proxy WS connection; each handler here performs the action by
- * reusing the existing test pipeline / upload / cancel internals (no
- * duplication) and returns the response payload the caller sends back keyed by
- * `requestId`.
+ * Orchestrator-side handlers for the `kici run remote` control plane. Two
+ * transports call them: the Platform relays the `test.relay.*` requests over
+ * the authenticated dashboard-proxy WS connection, and the direct test-run
+ * routes (`routes/test-direct.ts`, `/api/v1/test/*`) serve the same actions
+ * over HTTP to a caller holding an orchestrator admin token.
  *
- * The control plane carries only small JSON. The overlay tarball never reaches
- * the Platform — `handleTestUploadsInit` returns an external presigned URL the
- * developer PUTs to directly.
+ * The control plane carries only small JSON: the overlay tarball never reaches
+ * the Platform; the developer PUTs it to a presigned URL.
  */
 import type { Kysely } from 'kysely';
+import { AccessLogSource } from '@kici-dev/engine';
 import type { TestRelayRequest, TestRelayUploadsInitRequest, TestRelayTriggerRequest, TestRelayRunStatusRequest, TestRelayRunLogsRequest, TestRelayCancelRequest } from '@kici-dev/engine';
 import type { Database } from '../db/types.js';
 import type { CacheStorage } from '../storage/types.js';
 import type { LogStorage } from '../reporting/log-storage.js';
 import type { AccessLogWriter } from '../audit/access-log.js';
 import type { ProcessingDeps } from '../pipeline/processor.js';
-/** Dependencies shared by all five test-relay handlers. */
 export interface TestRelayHandlerDeps extends ProcessingDeps {
     db: Kysely<Database>;
-    /** Agent registry — required here: the cancel handler resolves the job's agent. */
+    /** Required: the cancel handler resolves the job's agent. */
     agentRegistry: NonNullable<ProcessingDeps['agentRegistry']>;
     cacheStorage?: CacheStorage;
     logStorage?: LogStorage;
     accessLog?: AccessLogWriter;
-    /** Canonical org id this orchestrator is bound to (for access_log attribution). */
+    /** Canonical org id this orchestrator is bound to, for access_log attribution. */
     orgId?: string | null;
-    /** Routing key resolved for this orchestrator's bound org (for access_log attribution). */
+    /** Routing key resolved for the bound org, for access_log attribution. */
     routingKey?: string | null;
+    /**
+     * The transport recorded on access_log rows: `admin_http` for the direct
+     * test-run routes. Defaults to `platform_proxy`, the relay's own source.
+     */
+    accessLogSource?: AccessLogSource;
 }
-/** Response payload for `test.relay.uploads.init.response` (minus envelope fields). */
 export interface TestUploadsInitPayload {
     uploadId: string;
     signedUrl: string;
@@ -38,12 +40,10 @@ export interface TestUploadsInitPayload {
     expiresIn: number;
 }
 /**
- * Mint an upload record + external presigned PUT URL. The developer's PAT
- * identity (`msg.actor`) is recorded as the upload owner so the upload is
- * attributable.
+ * Mint an upload record + the presigned PUT URL. The developer's PAT identity
+ * (`msg.actor`) is recorded as the upload owner.
  */
 export declare function handleTestUploadsInit(msg: TestRelayUploadsInitRequest, deps: TestRelayHandlerDeps): Promise<TestUploadsInitPayload>;
-/** Response payload for `test.relay.trigger.response` (minus envelope fields). */
 export interface TestTriggerPayload {
     runId: string;
     status: 'accepted' | 'rejected';
@@ -58,7 +58,6 @@ export interface TestTriggerPayload {
  * The developer's PAT identity is written to `access_log` (`run.trigger`).
  */
 export declare function handleTestTrigger(msg: TestRelayTriggerRequest, deps: TestRelayHandlerDeps): Promise<TestTriggerPayload>;
-/** Response payload for `test.relay.run.status.response` (minus envelope fields). */
 export interface TestRunStatusPayload {
     runId: string;
     status: string;
@@ -67,7 +66,7 @@ export interface TestRunStatusPayload {
         jobName: string;
         status: string;
         errorMessage?: string | null;
-        /** Wall-clock job duration once the job has finished; null while it runs. */
+        /** Wall-clock; null while the job runs. */
         durationMs?: number | null;
     }>;
     done: boolean;
@@ -75,66 +74,51 @@ export interface TestRunStatusPayload {
 /**
  * Snapshot a run's status + per-job status. `done` is true at a terminal run state.
  *
- * ## Why this does not check ownership, even though the run now records an owner
+ * ## Why this does not check ownership against `execution_runs.triggered_by`
  *
- * `handleTestTrigger` records the initiator on `execution_runs.triggered_by`,
- * so comparing `msg.actor` against it here looks like free defence in depth. It
- * is not, for three reasons that are worth writing down because the idea
- * recurs.
+ * The idea recurs; it is not free defence in depth:
  *
- * **The orchestrator cannot authenticate the actor.** It is asserted by the
- * Platform over the authenticated control-plane connection; nothing here can
- * verify it. A Platform that is lying can name any principal and pass the
- * check, so enforcing would defend only against a Platform that reports the
- * actor faithfully and forgets to check ownership — not against a hostile one.
+ * - **The orchestrator cannot authenticate the actor.** The Platform asserts it;
+ *   a lying Platform names any principal and passes, so the check stops only a
+ *   faithful Platform that forgot to check ownership.
+ * - **The two gates would disagree.** The Platform also admits a caller with
+ *   unrestricted repository scope (who can already read these runs on the
+ *   dashboard run plane). Only the actor reaches this tier, so an org owner
+ *   allowed there is refused here; fixing that needs the Platform to assert
+ *   "unrestricted", the first problem again.
+ * - **Version skew runs the wrong way.** This customer-deployed component
+ *   versions independently, so an upgrade that enforces refuses legitimate reads
+ *   against an unchanged Platform — a break we cannot roll back. Fail-closed is
+ *   right for a security control and wrong for a compatibility surface; this is
+ *   both.
  *
- * **The two gates would disagree.** The Platform deliberately admits a caller
- * with unrestricted repository scope alongside the creator, because such a
- * caller can already read these runs through the dashboard run plane. Repo
- * patterns do not exist on this tier — only the actor arrives — so an
- * organization owner reading a developer's run would be allowed there and
- * refused here. Closing that would mean the Platform asserting "this caller is
- * unrestricted", which is the first problem again with extra steps.
- *
- * **The version skew runs the wrong way.** This component is customer-deployed
- * and versions independently of the Platform, so an orchestrator upgraded to
- * enforce would start refusing legitimate reads against a Platform that has not
- * changed — a break the customer triggers and we cannot roll back. Fail-closed
- * is right for a security control and wrong for a compatibility surface, and
- * this is both.
- *
- * So the actor is recorded, not enforced. Enforcing here needs the caller's
- * effective authorization scope on the wire (so one policy is evaluated rather
- * than two), and an actor this tier can establish independently.
+ * Enforcing needs the caller's effective authorization scope on the wire (one
+ * policy, not two) and an actor this tier can establish independently.
  */
 export declare function handleTestRunStatus(msg: TestRelayRunStatusRequest, deps: TestRelayHandlerDeps): Promise<TestRunStatusPayload | {
     error: string;
 }>;
-/** Response payload for `test.relay.run.logs.response` (minus envelope fields). */
 export interface TestRunLogsPayload {
     lines: string[];
     nextCursor: number;
     done: boolean;
 }
 /**
- * Return the next chunk of a run's logs from a monotonic line-offset cursor
- * The orchestrator concatenates every log line in a deterministic
- * `(jobName ASC, stepIndex ASC, lineIndex ASC)` order; `cursor` is the count of
- * lines already delivered. `done` is true only when the run is terminal AND the
- * cursor has reached the end (the final tail-draining poll). A poll mid-step
- * returns the lines available so far with `done: false`, so no line is ever
- * dropped or skipped on a live run.
+ * Return the next chunk of a run's logs from a monotonic line-offset cursor:
+ * lines are concatenated in `(jobName ASC, stepIndex ASC, lineIndex ASC)` order
+ * and `cursor` counts lines already delivered. `done` is true only when the run
+ * is terminal AND the cursor reached the end, so a live or not-yet-drained poll
+ * returns what exists with `done: false` and no line is dropped.
  */
 export declare function handleTestRunLogs(msg: TestRelayRunLogsRequest, deps: TestRelayHandlerDeps): Promise<TestRunLogsPayload | {
     error: string;
 }>;
-/** Response payload for `test.relay.cancel.response` (minus envelope fields). */
 export interface TestCancelPayload {
     cancelled: boolean;
 }
 /**
  * Cancel a running test run: signal cancellation to every dispatched agent,
- * mark still-pending dispatch queue entries cancelled, and mark the
+ * mark still-pending dispatch queue entries `expired`, and mark the
  * `execution_runs` row cancelled. Returns `{ cancelled }` — true when the run
  * existed, was a test run, and was not already terminal.
  */
@@ -142,11 +126,10 @@ export declare function handleTestCancel(msg: TestRelayCancelRequest, deps: Test
     error: string;
 }>;
 /**
- * Route a parsed `test.relay.*` request to its handler and build the full
- * response envelope (`type` + `requestId` + payload) the caller relays back over
- * the WS connection via `sendRaw`. Errors and `{ error }` results are surfaced
- * on the response's `error` field; the wire stays a structured response so the
- * Platform can map it to an HTTP status.
+ * Build the full response envelope (`type` + `requestId` + payload) the caller
+ * relays via `sendRaw`. `{ error }` results ride the `error` field; a thrown error
+ * propagates, and the caller sends it on the same field. The Platform maps the
+ * structured response to an HTTP status.
  */
 export declare function dispatchTestRelay(msg: TestRelayRequest, deps: TestRelayHandlerDeps): Promise<Record<string, unknown>>;
 //# sourceMappingURL=test-relay-handlers.d.ts.map

package/installer-image-digests.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.16.0",
+  "version": "0.18.0",
   "images": {
-    "kici-agent": "sha256:d685cb8756dd86e6bb5a160fb2190ae2728de7db06a2d3183a4f60c641418034",
-    "kici-orchestrator": "sha256:34f613d76f78b77966680ac2c7f326b949723b959d46cae32767075cd524577d"
+    "kici-agent": "sha256:af19d486765839afb181379d43f826af951038392b1fabc6b0ff3ceaf08c0641",
+    "kici-orchestrator": "sha256:d7e0fd14671bc845a0bd07b6b6374a0eb357422a6c470b3790ef94e476739e0d"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
     "ci",
@@ -90,8 +90,8 @@
     "ws": "^8.21.3",
     "yaml": "^2.9.1",
     "zod": "^4.6.5",
-    "@kici-dev/engine": "0.16.0",
-    "@kici-dev/shared": "0.16.0"
+    "@kici-dev/engine": "0.18.0",
+    "@kici-dev/shared": "0.18.0"
   },
   "kici": {
     "metrics": {
@@ -106,10 +106,11 @@
     "@types/dockerode": "^4.0.1",
     "@types/ws": "^8.18.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.16.0"
+    "@kici-dev/agent": "0.18.0",
+    "@kici-dev/test-support": "0.0.0"
   },
   "scripts": {
-    "build": "node ../../scripts/build-service.mjs && tsc --emitDeclarationOnly",
+    "build": "node ../../scripts/build-service.mjs && tsc -p tsconfig.build.json --emitDeclarationOnly",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "db:migrate": "kysely migrate:latest"

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.16.0",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.16.0/07146eab-96ef-4716-b7c4-77d807d3a8d9",
+  "name": "@kici-dev/orchestrator@0.18.0",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.18.0/f6394886-a872-49bd-a317-c943d8affb5b",
   "creationInfo": {
-    "created": "2026-10-07T15:59:03Z",
+    "created": "2026-10-15T18:02:40Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -964,9 +964,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.18.0",
       "name": "@kici-dev/core",
-      "versionInfo": "0.16.0",
+      "versionInfo": "0.18.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -977,16 +977,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.16.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.18.0"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.16.0",
+      "versionInfo": "0.18.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -997,7 +997,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.16.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.18.0"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1006,7 +1006,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.16.0",
+      "versionInfo": "0.18.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1017,16 +1017,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.16.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.18.0"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.16.0",
+      "versionInfo": "0.18.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1037,7 +1037,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.16.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.18.0"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -7676,62 +7676,62 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.12",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -7767,12 +7767,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -7881,117 +7881,117 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.18.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.18.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.35.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.11.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.43.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.13.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.23.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.16.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.18.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },

package/dist/__test-helpers__/fake-scaler-state-store.d.ts

@@ -1,24 +0,0 @@
-/**
- * In-memory stand-in for the `scaler_pending_claims` half of `ScalerStateStore`.
- *
- * It reproduces the three properties the real table enforces in SQL — a claim
- * is consumable exactly once, a consume past `expires_at` finds nothing, and a
- * per-agent invalidation removes every row for that agent — against an injected
- * clock. That lets a test drive the whole register → redeem round trip without a
- * database, so the single-use and TTL properties are executed rather than
- * hand-fed through a stubbed answer.
- *
- * Only the pending-claim methods are implemented. Reaching any other
- * `ScalerStateStore` method is a `TypeError` at the call site, not a silent
- * no-op.
- */
-import type { ScalerStateStore } from '../scaler/scaler-state-store.js';
-/**
- * Build an in-memory pending-claim store.
- *
- * @param now Clock (epoch ms) the TTL is evaluated against. Pass the same clock
- *   the `ClaimStore` under test uses, or its `expiresAt` lands in a different
- *   era than this store's `now()` and every redeem reads as expired.
- */
-export declare function makeFakeScalerStateStore(now?: () => number): ScalerStateStore;
-//# sourceMappingURL=fake-scaler-state-store.d.ts.map