@kici-dev/orchestrator 0.17.0 → 0.19.0

package/dist/ws/test-relay-handlers.d.ts

@@ -3,13 +3,10 @@
  * transports call them: the Platform relays the `test.relay.*` requests over
  * the authenticated dashboard-proxy WS connection, and the direct test-run
  * routes (`routes/test-direct.ts`, `/api/v1/test/*`) serve the same actions
- * over HTTP to a caller holding an orchestrator admin token. Each handler
- * performs the action by reusing the existing test pipeline / upload / cancel
- * internals and returns the response payload.
+ * over HTTP to a caller holding an orchestrator admin token.
  *
- * The control plane carries only small JSON. The overlay tarball never reaches
- * the Platform — `handleTestUploadsInit` returns a presigned URL the
- * developer PUTs to directly.
+ * The control plane carries only small JSON: the overlay tarball never reaches
+ * the Platform; the developer PUTs it to a presigned URL.
  */
 import type { Kysely } from 'kysely';
 import { AccessLogSource } from '@kici-dev/engine';
@@ -19,17 +16,16 @@ import type { CacheStorage } from '../storage/types.js';
 import type { LogStorage } from '../reporting/log-storage.js';
 import type { AccessLogWriter } from '../audit/access-log.js';
 import type { ProcessingDeps } from '../pipeline/processor.js';
-/** Dependencies shared by every test-relay handler. */
 export interface TestRelayHandlerDeps extends ProcessingDeps {
     db: Kysely<Database>;
-    /** Agent registry — required here: the cancel handler resolves the job's agent. */
+    /** Required: the cancel handler resolves the job's agent. */
     agentRegistry: NonNullable<ProcessingDeps['agentRegistry']>;
     cacheStorage?: CacheStorage;
     logStorage?: LogStorage;
     accessLog?: AccessLogWriter;
-    /** Canonical org id this orchestrator is bound to (for access_log attribution). */
+    /** Canonical org id this orchestrator is bound to, for access_log attribution. */
     orgId?: string | null;
-    /** Routing key resolved for this orchestrator's bound org (for access_log attribution). */
+    /** Routing key resolved for the bound org, for access_log attribution. */
     routingKey?: string | null;
     /**
      * The transport recorded on access_log rows: `admin_http` for the direct
@@ -37,7 +33,6 @@ export interface TestRelayHandlerDeps extends ProcessingDeps {
      */
     accessLogSource?: AccessLogSource;
 }
-/** Response payload for `test.relay.uploads.init.response` (minus envelope fields). */
 export interface TestUploadsInitPayload {
     uploadId: string;
     signedUrl: string;
@@ -45,12 +40,10 @@ export interface TestUploadsInitPayload {
     expiresIn: number;
 }
 /**
- * Mint an upload record + the developer-facing presigned PUT URL. The developer's PAT
- * identity (`msg.actor`) is recorded as the upload owner so the upload is
- * attributable.
+ * Mint an upload record + the presigned PUT URL. The developer's PAT identity
+ * (`msg.actor`) is recorded as the upload owner.
  */
 export declare function handleTestUploadsInit(msg: TestRelayUploadsInitRequest, deps: TestRelayHandlerDeps): Promise<TestUploadsInitPayload>;
-/** Response payload for `test.relay.trigger.response` (minus envelope fields). */
 export interface TestTriggerPayload {
     runId: string;
     status: 'accepted' | 'rejected';
@@ -65,7 +58,6 @@ export interface TestTriggerPayload {
  * The developer's PAT identity is written to `access_log` (`run.trigger`).
  */
 export declare function handleTestTrigger(msg: TestRelayTriggerRequest, deps: TestRelayHandlerDeps): Promise<TestTriggerPayload>;
-/** Response payload for `test.relay.run.status.response` (minus envelope fields). */
 export interface TestRunStatusPayload {
     runId: string;
     status: string;
@@ -74,7 +66,7 @@ export interface TestRunStatusPayload {
         jobName: string;
         status: string;
         errorMessage?: string | null;
-        /** Wall-clock job duration once the job has finished; null while it runs. */
+        /** Wall-clock; null while the job runs. */
         durationMs?: number | null;
     }>;
     done: boolean;
@@ -82,37 +74,26 @@ export interface TestRunStatusPayload {
 /**
  * Snapshot a run's status + per-job status. `done` is true at a terminal run state.
  *
- * ## Why this does not check ownership, even though the run now records an owner
+ * ## Why this does not check ownership against `execution_runs.triggered_by`
  *
- * `handleTestTrigger` records the initiator on `execution_runs.triggered_by`,
- * so comparing `msg.actor` against it here looks like free defence in depth. It
- * is not, for three reasons that are worth writing down because the idea
- * recurs.
+ * The idea recurs; it is not free defence in depth:
  *
- * **The orchestrator cannot authenticate the actor.** It is asserted by the
- * Platform over the authenticated control-plane connection; nothing here can
- * verify it. A Platform that is lying can name any principal and pass the
- * check, so enforcing would defend only against a Platform that reports the
- * actor faithfully and forgets to check ownership — not against a hostile one.
+ * - **The orchestrator cannot authenticate the actor.** The Platform asserts it;
+ *   a lying Platform names any principal and passes, so the check stops only a
+ *   faithful Platform that forgot to check ownership.
+ * - **The two gates would disagree.** The Platform also admits a caller with
+ *   unrestricted repository scope (who can already read these runs on the
+ *   dashboard run plane). Only the actor reaches this tier, so an org owner
+ *   allowed there is refused here; fixing that needs the Platform to assert
+ *   "unrestricted", the first problem again.
+ * - **Version skew runs the wrong way.** This customer-deployed component
+ *   versions independently, so an upgrade that enforces refuses legitimate reads
+ *   against an unchanged Platform — a break we cannot roll back. Fail-closed is
+ *   right for a security control and wrong for a compatibility surface; this is
+ *   both.
  *
- * **The two gates would disagree.** The Platform deliberately admits a caller
- * with unrestricted repository scope alongside the creator, because such a
- * caller can already read these runs through the dashboard run plane. Repo
- * patterns do not exist on this tier — only the actor arrives — so an
- * organization owner reading a developer's run would be allowed there and
- * refused here. Closing that would mean the Platform asserting "this caller is
- * unrestricted", which is the first problem again with extra steps.
- *
- * **The version skew runs the wrong way.** This component is customer-deployed
- * and versions independently of the Platform, so an orchestrator upgraded to
- * enforce would start refusing legitimate reads against a Platform that has not
- * changed — a break the customer triggers and we cannot roll back. Fail-closed
- * is right for a security control and wrong for a compatibility surface, and
- * this is both.
- *
- * So the actor is recorded, not enforced. Enforcing here needs the caller's
- * effective authorization scope on the wire (so one policy is evaluated rather
- * than two), and an actor this tier can establish independently.
+ * Enforcing needs the caller's effective authorization scope on the wire (one
+ * policy, not two) and an actor this tier can establish independently.
  */
 export declare function handleTestRunStatus(msg: TestRelayRunStatusRequest, deps: TestRelayHandlerDeps): Promise<TestRunStatusPayload | {
     error: string;
@@ -122,26 +103,32 @@ export interface TestRunLogsPayload {
     lines: string[];
     nextCursor: number;
     done: boolean;
+    /** Opaque per-file cursor for the next poll; present when the request sent `logCursor`. */
+    nextLogCursor?: string;
 }
 /**
- * Return the next chunk of a run's logs from a monotonic line-offset cursor
- * The orchestrator concatenates every log line in a deterministic
- * `(jobName ASC, stepIndex ASC, lineIndex ASC)` order; `cursor` is the count of
- * lines already delivered. `done` is true only when the run is terminal AND the
- * cursor has reached the end (the final tail-draining poll). A poll mid-step
- * returns the lines available so far with `done: false`, so no line is ever
- * dropped or skipped on a live run.
+ * Return the next chunk of a run's logs.
+ *
+ * With `logCursor` (the per-file cursor), each log file is read from its own
+ * offset, so a file that appears later is read from its first line wherever it
+ * sorts. Without it, the stream is the flat `(jobName, stepIndex, lineIndex)`
+ * concatenation and `cursor` counts the lines already delivered, which an
+ * older CLI sends.
+ *
+ * `done` is true only once the run is terminal and the stream is delivered to
+ * its end. For a terminal run, pending log appends are drained first, because
+ * the agent's chunks are persisted fire-and-forget and the status can turn
+ * terminal while the last write is still in flight.
  */
 export declare function handleTestRunLogs(msg: TestRelayRunLogsRequest, deps: TestRelayHandlerDeps): Promise<TestRunLogsPayload | {
     error: string;
 }>;
-/** Response payload for `test.relay.cancel.response` (minus envelope fields). */
 export interface TestCancelPayload {
     cancelled: boolean;
 }
 /**
  * Cancel a running test run: signal cancellation to every dispatched agent,
- * mark still-pending dispatch queue entries cancelled, and mark the
+ * mark still-pending dispatch queue entries `expired`, and mark the
  * `execution_runs` row cancelled. Returns `{ cancelled }` — true when the run
  * existed, was a test run, and was not already terminal.
  */
@@ -149,11 +136,10 @@ export declare function handleTestCancel(msg: TestRelayCancelRequest, deps: Test
     error: string;
 }>;
 /**
- * Route a parsed `test.relay.*` request to its handler and build the full
- * response envelope (`type` + `requestId` + payload) the caller relays back over
- * the WS connection via `sendRaw`. Errors and `{ error }` results are surfaced
- * on the response's `error` field; the wire stays a structured response so the
- * Platform can map it to an HTTP status.
+ * Build the full response envelope (`type` + `requestId` + payload) the caller
+ * relays via `sendRaw`. `{ error }` results ride the `error` field; a thrown error
+ * propagates, and the caller sends it on the same field. The Platform maps the
+ * structured response to an HTTP status.
  */
 export declare function dispatchTestRelay(msg: TestRelayRequest, deps: TestRelayHandlerDeps): Promise<Record<string, unknown>>;
 //# sourceMappingURL=test-relay-handlers.d.ts.map

package/dist/ws/test-run-log-cursor.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The opaque per-file cursor of a `kici run remote` log stream.
+ *
+ * It records, for each of a run's log files, how many lines the caller already
+ * received: `{ "<file>": <lines> }`, JSON-encoded, then base64url so it fits a
+ * query string. The file key is the path below `executions/<runId>/`. A file
+ * that appears later starts at line 0 wherever it sorts, so no line is lost or
+ * sent twice when a step's file sorts before a file that was already read.
+ */
+import { z } from 'zod';
+declare const offsetsSchema: z.ZodRecord<z.ZodString, z.ZodNumber>;
+/** Lines already delivered from each of a run's log files. */
+export type RunLogFileOffsets = z.infer<typeof offsetsSchema>;
+export declare function encodeRunLogCursor(offsets: RunLogFileOffsets): string;
+/** Decode a cursor. The start token decodes to no offsets; malformed input to null. */
+export declare function decodeRunLogCursor(cursor: string): RunLogFileOffsets | null;
+export {};
+//# sourceMappingURL=test-run-log-cursor.d.ts.map

package/installer-image-digests.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.17.0",
+  "version": "0.19.0",
   "images": {
-    "kici-agent": "sha256:e823d016c135b77682227d4cc89219df84f9b1af7a6880bce74c3d1660585345",
-    "kici-orchestrator": "sha256:f116a30095a475d58d96fa731e1dd3d40f756c546b290888f7d6e64d32182777"
+    "kici-agent": "sha256:6948358a9f43843e1ef61fab37253d4d50ea2f4e16cc19810d029cec8117c5a7",
+    "kici-orchestrator": "sha256:f5d101af3e4dca37e68387168cbb3d241da71f86e11ee448ac87c038bf923580"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.17.0",
+  "version": "0.19.0",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
     "ci",
@@ -90,8 +90,8 @@
     "ws": "^8.21.3",
     "yaml": "^2.9.1",
     "zod": "^4.6.5",
-    "@kici-dev/shared": "0.17.0",
-    "@kici-dev/engine": "0.17.0"
+    "@kici-dev/shared": "0.19.0",
+    "@kici-dev/engine": "0.19.0"
   },
   "kici": {
     "metrics": {
@@ -106,10 +106,11 @@
     "@types/dockerode": "^4.0.1",
     "@types/ws": "^8.18.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.17.0"
+    "@kici-dev/test-support": "0.0.0",
+    "@kici-dev/agent": "0.19.0"
   },
   "scripts": {
-    "build": "node ../../scripts/build-service.mjs && tsc --emitDeclarationOnly",
+    "build": "node ../../scripts/build-service.mjs && tsc -p tsconfig.build.json --emitDeclarationOnly",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "db:migrate": "kysely migrate:latest"

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.17.0",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.17.0/4b44e7dd-379a-450c-a894-2ac17c1cd25b",
+  "name": "@kici-dev/orchestrator@0.19.0",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.19.0/40dd3338-67e9-407a-bb25-3c919db547ce",
   "creationInfo": {
-    "created": "2026-10-10T11:27:43Z",
+    "created": "2026-10-17T04:16:13Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -964,9 +964,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.19.0",
       "name": "@kici-dev/core",
-      "versionInfo": "0.17.0",
+      "versionInfo": "0.19.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -977,16 +977,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.17.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.19.0"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.17.0",
+      "versionInfo": "0.19.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -997,7 +997,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.17.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.19.0"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1006,7 +1006,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.17.0",
+      "versionInfo": "0.19.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1017,16 +1017,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.17.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.19.0"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.17.0",
+      "versionInfo": "0.19.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1037,7 +1037,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.17.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.19.0"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -7676,62 +7676,62 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.12",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -7767,12 +7767,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -7881,117 +7881,117 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.35.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.11.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.43.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.13.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.23.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.17.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.19.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },

package/dist/__test-helpers__/fake-scaler-state-store.d.ts

@@ -1,24 +0,0 @@
-/**
- * In-memory stand-in for the `scaler_pending_claims` half of `ScalerStateStore`.
- *
- * It reproduces the three properties the real table enforces in SQL — a claim
- * is consumable exactly once, a consume past `expires_at` finds nothing, and a
- * per-agent invalidation removes every row for that agent — against an injected
- * clock. That lets a test drive the whole register → redeem round trip without a
- * database, so the single-use and TTL properties are executed rather than
- * hand-fed through a stubbed answer.
- *
- * Only the pending-claim methods are implemented. Reaching any other
- * `ScalerStateStore` method is a `TypeError` at the call site, not a silent
- * no-op.
- */
-import type { ScalerStateStore } from '../scaler/scaler-state-store.js';
-/**
- * Build an in-memory pending-claim store.
- *
- * @param now Clock (epoch ms) the TTL is evaluated against. Pass the same clock
- *   the `ClaimStore` under test uses, or its `expiresAt` lands in a different
- *   era than this store's `now()` and every redeem reads as expired.
- */
-export declare function makeFakeScalerStateStore(now?: () => number): ScalerStateStore;
-//# sourceMappingURL=fake-scaler-state-store.d.ts.map