@kici-dev/orchestrator 0.3.0 → 0.4.0

package/dist/cli.js

@@ -7,10 +7,10 @@ import * as fs$1 from "node:fs";
 import fs, { chmodSync, closeSync, constants, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, openSync, promises, readFileSync, realpathSync, rmSync, statSync, unwatchFile, watchFile, writeFileSync } from "node:fs";
 import { Command, Option } from "commander";
 import { AgentPlatform, BaseColdStore, ChunkLru, addLogsToArchive, chunkObjectKey, clearDispatchQueueDirect, computeChunkId, computeMigrationsHash, createContextTemplateDirect, createDb, createDbRole, createLogger, createPool, createReadOnlyDbUser, createS3Client, decodeChunk, decrypt, deleteContextDirect, deriveKey, diagnoseExitCode, dropAndCreateDatabase, emitKiciEventDirect, encodeKeySegment, encrypt, ensureDatabase, formatBytes, formatUptime, isSchemaCurrent, kiciMkdtemp, listCheckRunTrackingDirect, listContextsDirect, listExecutionRunsDirect, listQueueDirect, listRegistrationsDirect, maskDatabaseUrl, parseDatabaseUrl, parseManifest, prunePeerCredentialsDirect, purgeContextsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, registerWorkflowManualDirect, resetRaftStateDirect, seedContextBindingDirect, seedContextDirect, setContextPolicyDirect, setContextSecretDirect, sha256, showContextDirect, showExecutionRunDirect, showQueueEntryDirect, showRegistrationDirect, splitAgentPlatform, storeMigrationContentHash, tablePrefix, toErrorMessage } from "@kici-dev/shared";
+import { AccessLogSource, DEFAULT_APPROVAL_EXPIRY_HOURS, ExecutionJobStatus, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, OrchestratorMode, PLATFORM_CONNECTED_MODES, PRIVILEGED_ROOT_LABEL, ScalerBackendType, ScalerEventType, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, WS_MAX_PAYLOAD_BYTES, accessLogWarmSqlCase, agentLabelOf, assertValidSecretKey, attestationVerifyStatusSchema, flattenActor, getAccessLogColdDays, getSecretAuditLogColdDays, matcherSatisfiedBy, minAccessLogWarmDays, minSecretAuditLogWarmDays, parseHostPropertyAssignments, scalerAgentLabels, scalerPlatformSchema, secretAuditLogWarmSqlCase, shouldRecordAccess, shouldRecordSecretResolve } from "@kici-dev/engine";
 import crypto$1, { createDecipheriv, createHash, createHmac, createPublicKey, generateKeyPairSync, hkdfSync, randomBytes, randomUUID } from "node:crypto";
 import { createInterface } from "node:readline";
 import { sql } from "kysely";
-import { AccessLogSource, DEFAULT_APPROVAL_EXPIRY_HOURS, ExecutionJobStatus, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, OrchestratorMode, PLATFORM_CONNECTED_MODES, PRIVILEGED_ROOT_LABEL, ScalerBackendType, ScalerEventType, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, WS_MAX_PAYLOAD_BYTES, accessLogWarmSqlCase, agentLabelOf, attestationVerifyStatusSchema, flattenActor, getAccessLogColdDays, getSecretAuditLogColdDays, matcherSatisfiedBy, minAccessLogWarmDays, minSecretAuditLogWarmDays, parseHostPropertyAssignments, scalerAgentLabels, scalerPlatformSchema, secretAuditLogWarmSqlCase, shouldRecordAccess, shouldRecordSecretResolve } from "@kici-dev/engine";
 import { access, chmod, constants as constants$1, copyFile, link, mkdir, open, readFile, readdir, rm, stat, writeFile } from "node:fs/promises";
 import { parse, stringify } from "yaml";
 import { z } from "zod";
@@ -783,17 +783,36 @@ var PgSecretStore = class PgSecretStore {
 		}
 		return result;
 	}
-	/**
-	* Set (create or update) a secret in a scope.
-	* Encrypts the value with AAD = "orgId:scope:key".
-	*/
 	/** Check if a scope is internal/operational (always allowed regardless of toggle). */
 	isInternalScope(scope) {
 		const colonIdx = scope.indexOf(":");
 		const path = colonIdx >= 0 ? scope.slice(colonIdx + 1) : scope;
 		return path.startsWith("__source__/") || path.startsWith("__webhook__/");
 	}
+	/**
+	* Set (create or update) a secret in a scope.
+	* Encrypts the value with AAD = "orgId:scope:key".
+	*
+	* Rejects a key outside `[A-Za-z0-9._-]` before doing anything else. The AAD
+	* is a plain concatenation, so a `:` in the key would let two distinct
+	* locations render one AAD (scope 'b' + key 'c:d' equals scope 'b:c' + key
+	* 'd') and a ciphertext written at one would authenticate at the other. The
+	* check sits ahead of the customerSecretsEnabled gate so internal scopes get
+	* no exemption — the binding has to hold for every writer.
+	*
+	* Callers pass a bare scope path, so the AAD's middle field is colon-free
+	* too: the admin route and the dashboard handler both run the scope
+	* validator immediately before calling in, and `source-store` builds its
+	* scope from a uuid. That precondition is what makes the whole triple
+	* recoverable, and it is the caller's to keep — this method does not
+	* re-check it.
+	*
+	* Write-path only: getSecrets, listKeys, deleteSecret, deleteScope,
+	* renameScope, getAllSecrets and createScope stay unvalidated, which is what
+	* keeps a key stored before this rule readable and deletable.
+	*/
 	async setSecret(orgId, scope, key, value) {
+		assertValidSecretKey(key);
 		if (!this.customerSecretsEnabled && !this.isInternalScope(scope)) throw new Error("PG customer secrets are disabled. Use an external secret backend or enable pgCustomerSecrets in config.");
 		const aad = `${orgId}:${scope}:${key}`;
 		const encrypted = encrypt(value, this.masterKey, this.keyVersion, aad);
@@ -1491,6 +1510,7 @@ function registerSecretCommands(program, getClient) {
 			}
 			const dbUrl = resolveDirectDbUrl$10(opts.databaseUrl);
 			if (dbUrl) {
+				assertValidSecretKey(key);
 				await setContextSecretDirect(dbUrl, {
 					orgId,
 					context: scope,
@@ -10131,6 +10151,21 @@ function parseLocalConfig(s) {
 	const parsed = LocalSourceConfigSchema.safeParse(raw);
 	return parsed.success ? parsed.data : null;
 }
+/**
+* Read a local source's stored config over whichever transport the caller is
+* already on — direct DB when `--database-url` / KICI_DATABASE_URL is in play,
+* otherwise the admin API. Used to preserve `repoBasePath` when only the clone
+* base is being changed; returns null when the id names no local source.
+*/
+async function readLocalSourceConfig(id, databaseUrl, getClient) {
+	const dbUrl = resolveDirectDbUrl$9(databaseUrl);
+	if (dbUrl) {
+		const row = await withGenericManager(dbUrl, (mgr) => mgr.getById(id));
+		return row ? parseLocalConfig(row) : null;
+	}
+	const { source } = await getClient().getGenericSource(id);
+	return parseLocalConfig(source);
+}
 function safeParse(value) {
 	try {
 		return JSON.parse(value);
@@ -10676,17 +10711,26 @@ function registerSourceCommands(program, getClient) {
 		try {
 			const data = {};
 			if (opts.name) data.name = opts.name;
-			if (opts.path !== void 0) {
-				if (!path.isAbsolute(opts.path)) {
-					console.error(`Error: --path must be an absolute path: ${opts.path}`);
+			if (opts.path !== void 0 || opts.cloneUrlBase !== void 0) {
+				let repoBasePath = opts.path;
+				if (repoBasePath === void 0) {
+					const existing = await readLocalSourceConfig(id, opts.databaseUrl, getClient);
+					if (!existing) {
+						console.error(`Error: no local source with id ${id}`);
+						process.exit(1);
+					}
+					repoBasePath = existing.repoBasePath;
+				}
+				if (!path.isAbsolute(repoBasePath)) {
+					console.error(`Error: --path must be an absolute path: ${repoBasePath}`);
 					process.exit(1);
 				}
-				const localConfig = { repoBasePath: opts.path };
+				const localConfig = { repoBasePath };
 				if (opts.cloneUrlBase) localConfig.cloneUrlBase = opts.cloneUrlBase;
 				data.localConfig = localConfig;
 			}
 			if (Object.keys(data).length === 0) {
-				console.error("Error: no fields to update. Provide --path and/or --name.");
+				console.error("Error: no fields to update. Provide --path, --name, and/or --clone-url-base.");
 				process.exit(1);
 			}
 			const dbUrl = resolveDirectDbUrl$9(opts.databaseUrl);
@@ -18402,7 +18446,7 @@ async function refreshAgentPackages(storage, version, opts, deps) {
 const ALL_PLATFORMS = AgentPlatform.options;
 /** The orchestrator's own version (single-version invariant) = the packaged agent version. */
 function resolveKiciVersion() {
-	return "0.3.0";
+	return "0.4.0";
 }
 /** Parse the --platform value: default set | single | CSV | `all`. */
 function parsePlatforms(raw) {

package/dist/secrets/pg-secret-store.d.ts

@@ -60,12 +60,30 @@ export declare class PgSecretStore implements SecretStore {
      * Get all secrets for a scope as decrypted key-value pairs.
      */
     getSecrets(orgId: string, scope: string): Promise<Record<string, string>>;
+    /** Check if a scope is internal/operational (always allowed regardless of toggle). */
+    private isInternalScope;
     /**
      * Set (create or update) a secret in a scope.
      * Encrypts the value with AAD = "orgId:scope:key".
+     *
+     * Rejects a key outside `[A-Za-z0-9._-]` before doing anything else. The AAD
+     * is a plain concatenation, so a `:` in the key would let two distinct
+     * locations render one AAD (scope 'b' + key 'c:d' equals scope 'b:c' + key
+     * 'd') and a ciphertext written at one would authenticate at the other. The
+     * check sits ahead of the customerSecretsEnabled gate so internal scopes get
+     * no exemption — the binding has to hold for every writer.
+     *
+     * Callers pass a bare scope path, so the AAD's middle field is colon-free
+     * too: the admin route and the dashboard handler both run the scope
+     * validator immediately before calling in, and `source-store` builds its
+     * scope from a uuid. That precondition is what makes the whole triple
+     * recoverable, and it is the caller's to keep — this method does not
+     * re-check it.
+     *
+     * Write-path only: getSecrets, listKeys, deleteSecret, deleteScope,
+     * renameScope, getAllSecrets and createScope stay unvalidated, which is what
+     * keeps a key stored before this rule readable and deletable.
      */
-    /** Check if a scope is internal/operational (always allowed regardless of toggle). */
-    private isInternalScope;
     setSecret(orgId: string, scope: string, key: string, value: string): Promise<void>;
     /**
      * Delete a secret from a scope.

package/dist/server.js

@@ -1,6 +1,6 @@
 import "node:module";
 import { AgentDeliveryMode, AgentPlatform, BaseColdStore, ChunkRequestWaiter, RingBuffer, addLogsToArchive, chunkBuffer, computeBackoffDelay, computeMigrationsHash, createDb, createHealthRoutes, createLogger, createMeter, createMetricsRoutes, createPool, createS3Client, decrypt, decryptJson, deriveKey, encodeKeySegment, encrypt, enrichRequestContext, formatDuration, getPrometheusExporter, getReconnectDelay, getRequestContext, guardStartup, initTelemetry, isPgUniqueViolation, logger, parseDatabaseUrl, redactConfig, requestContext, serializeError, setServiceName, setupGracefulShutdown, sha256, storeMigrationContentHash, toErrorMessage, validateRequiredTools } from "@kici-dev/shared";
-import { ALLOWED_SYSTEM_VARS, ARTIFACT_NAME_MAX_LENGTH, AccessLogAction, AccessLogOutcome, AccessLogSource, AccessLogTargetType, ActorType, AgentFailureCategory, ApprovalDecision, ArtifactCompleteAckOutcome, ArtifactDownloadOutcome, ArtifactUploadOutcome, AttestationOrigin, BREAKING_FLOOR, CANONICAL_STATUSES, CacheRefScope, CheckMode, CheckRunConclusion, CheckStepOutcome, ConcurrencyStrategy, ContextDeleteErrorCode, ContextGateRejectReason, DASHBOARD_REQUEST_TYPE_SET, DEFAULT_APPROVAL_EXPIRY_HOURS, DEFAULT_CONCURRENCY_STRATEGY, DEFAULT_HOLD_EXPIRY_SECONDS, DashboardResponseErrorCode, DeploymentContainerRuntimeSchema, DeploymentModeSchema, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutCause, FanoutError, HeldRunQueueType, HoldScope, HoldType, INIT_LABEL, InitFailureCategory, InventorySelectorSchema, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, LabelMatcher, LockFileParseError, LogStream, MIN_PROTOCOL_VERSION, ORCH_AGENT_CAPABILITIES, ORCH_CAPABILITIES, OWN_INGRESS_MODES, OrchLogPhase, OrchRole, OrchestratorMode, PLATFORM_CONNECTED_MODES, PLATFORM_TAINT_LABELS, PLATFORM_TO_ORCH_RECOGNIZED_TYPES, PRIVILEGED_ROOT_LABEL, PROTOCOL_VERSION, PayloadOmittedReason, RELAY_INGRESS_MODES, RegisterableTriggerType, RunFailureClass, SCHEMA_VERSION, SECURITY_HOLD_JOB_IDS, SSH_TRANSPORT_CAPABILITY, ScalerBackendType, ScalerEventType, ScalerEventType as ScalerEventType$1, SourceOrigin, SourceSubtype, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TimeoutReason, TriggerSource, VariantKind, WEBHOOK_RELAY_MAX_BODY_BYTES, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogWarmSqlCase, agentAuthRequestSchema, agentLabelOf, agentToOrchestratorMessageSchema, agentTypeLabel, approvalTimeoutSecondsSchema, artifactInvalidNameError, assertValidScopeName, attestationVerifyStatusSchema, buildTrustedPassthroughEnv, buildUnsupportedMessageNack, canonicalizeCapability, checkArtifactName, coerceDispatchInputs, collectDiscriminatorTypes, createWorkflowDecision, dashboardArtifactsListResponseSchema, dashboardAttestationGetResponseSchema, dashboardAttestationsListAllResponseSchema, dashboardAttestationsListResponseSchema, dashboardRunDetailApiResponseSchema, dashboardStepLogsApiResponseSchema, deriveOsArchLabels, derivePlatformTaints, fanoutEnvelopeFields, flattenActor, getAccessLogColdDays, getSecretAuditLogColdDays, githubIngressPath, githubWebhookPath, hasPlatformCapability, hostLabel, hostSatisfiesTarget, hostToScalerPlatform, installGateJobId, isFailureStatus, isKnownCapability, isLockDynamicJobFn, isLockInlineValue, isLockParallelStep, isLockStaticJob, isSelfReportedLabel, joinRequestSchema, logPullPlatformToOrchSchema, matchAllWorkflows, matchScopePattern, matchWorkflowsForEvent, matcherSatisfiedBy, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixEnvelopeFields, mergeOrderedMaps, minAccessLogWarmDays, minSecretAuditLogWarmDays, normalizePersistedHoldType, partitionMatchers, peerAuthRequestSchema, peerFromPeerMessageSchema, peerHelloResponseSchema, peerHelloSchema, persistedHoldTypeSpellings, platformToOrchestratorMessageSchema, platformToOsArchLabels, platformToTaints, resolveRoleLabels, resolveScheduleInputs, resolveSecretsWithProvenance, scalerAgentLabels, scalerLabel, scalerPlatformSchema, scheduleTriggerKey, secretAuditLogWarmSqlCase, shouldRecordAccess, shouldRecordSecretResolve, stateReplaySchema, stringifyActor, trustedContributorHoldReason, unknownContributorHoldReason, validateScopeName, wrapUntrusted } from "@kici-dev/engine";
+import { ALLOWED_SYSTEM_VARS, ARTIFACT_NAME_MAX_LENGTH, AccessLogAction, AccessLogOutcome, AccessLogSource, AccessLogTargetType, ActorType, AgentFailureCategory, ApprovalDecision, ArtifactCompleteAckOutcome, ArtifactDownloadOutcome, ArtifactUploadOutcome, AttestationOrigin, BREAKING_FLOOR, CANONICAL_STATUSES, CacheRefScope, CheckMode, CheckRunConclusion, CheckStepOutcome, ConcurrencyStrategy, ContextDeleteErrorCode, ContextGateRejectReason, DASHBOARD_REQUEST_TYPE_SET, DEFAULT_APPROVAL_EXPIRY_HOURS, DEFAULT_CONCURRENCY_STRATEGY, DEFAULT_HOLD_EXPIRY_SECONDS, DashboardResponseErrorCode, DeploymentContainerRuntimeSchema, DeploymentModeSchema, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutCause, FanoutError, HeldRunQueueType, HoldScope, HoldType, INIT_LABEL, InitFailureCategory, InventorySelectorSchema, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, LabelMatcher, LockFileParseError, LogStream, MIN_PROTOCOL_VERSION, ORCH_AGENT_CAPABILITIES, ORCH_CAPABILITIES, OWN_INGRESS_MODES, OrchLogPhase, OrchRole, OrchestratorMode, PLATFORM_CONNECTED_MODES, PLATFORM_TAINT_LABELS, PLATFORM_TO_ORCH_RECOGNIZED_TYPES, PRIVILEGED_ROOT_LABEL, PROTOCOL_VERSION, PayloadOmittedReason, RELAY_INGRESS_MODES, RegisterableTriggerType, RunFailureClass, SCHEMA_VERSION, SECURITY_HOLD_JOB_IDS, SSH_TRANSPORT_CAPABILITY, ScalerBackendType, ScalerEventType, ScalerEventType as ScalerEventType$1, SourceOrigin, SourceSubtype, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TimeoutReason, TriggerSource, VariantKind, WEBHOOK_RELAY_MAX_BODY_BYTES, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogWarmSqlCase, agentAuthRequestSchema, agentLabelOf, agentToOrchestratorMessageSchema, agentTypeLabel, approvalTimeoutSecondsSchema, artifactInvalidNameError, assertValidScopeName, assertValidSecretKey, attestationVerifyStatusSchema, buildTrustedPassthroughEnv, buildUnsupportedMessageNack, canonicalizeCapability, checkArtifactName, coerceDispatchInputs, collectDiscriminatorTypes, createWorkflowDecision, dashboardArtifactsListResponseSchema, dashboardAttestationGetResponseSchema, dashboardAttestationsListAllResponseSchema, dashboardAttestationsListResponseSchema, dashboardRunDetailApiResponseSchema, dashboardStepLogsApiResponseSchema, deriveOsArchLabels, derivePlatformTaints, fanoutEnvelopeFields, flattenActor, getAccessLogColdDays, getSecretAuditLogColdDays, githubIngressPath, githubWebhookPath, hasPlatformCapability, hostLabel, hostSatisfiesTarget, hostToScalerPlatform, installGateJobId, isFailureStatus, isKnownCapability, isLockDynamicJobFn, isLockInlineValue, isLockParallelStep, isLockStaticJob, isSelfReportedLabel, joinRequestSchema, logPullPlatformToOrchSchema, matchAllWorkflows, matchScopePattern, matchWorkflowsForEvent, matcherSatisfiedBy, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixEnvelopeFields, mergeOrderedMaps, minAccessLogWarmDays, minSecretAuditLogWarmDays, normalizePersistedHoldType, partitionMatchers, peerAuthRequestSchema, peerFromPeerMessageSchema, peerHelloResponseSchema, peerHelloSchema, persistedHoldTypeSpellings, platformToOrchestratorMessageSchema, platformToOsArchLabels, platformToTaints, resolveRoleLabels, resolveScheduleInputs, resolveSecretsWithProvenance, scalerAgentLabels, scalerLabel, scalerPlatformSchema, scheduleTriggerKey, secretAuditLogWarmSqlCase, shouldRecordAccess, shouldRecordSecretResolve, stateReplaySchema, stringifyActor, trustedContributorHoldReason, unknownContributorHoldReason, validateScopeName, validateSecretKey, wrapUntrusted } from "@kici-dev/engine";
 import { X509Certificate, createCipheriv, createDecipheriv, createHash, createHmac, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
 import * as fs$1 from "node:fs";
 import { chmodSync, closeSync, createReadStream, createWriteStream, fsyncSync, mkdirSync, mkdtempSync, openSync, promises, readFileSync, renameSync, rmSync, statSync, unwatchFile, watchFile, writeFileSync, writeSync } from "node:fs";
@@ -19137,17 +19137,36 @@ var init_pg_secret_store = __esmMin((() => {
 			}
 			return result;
 		}
-		/**
-		* Set (create or update) a secret in a scope.
-		* Encrypts the value with AAD = "orgId:scope:key".
-		*/
 		/** Check if a scope is internal/operational (always allowed regardless of toggle). */
 		isInternalScope(scope) {
 			const colonIdx = scope.indexOf(":");
 			const path = colonIdx >= 0 ? scope.slice(colonIdx + 1) : scope;
 			return path.startsWith("__source__/") || path.startsWith("__webhook__/");
 		}
+		/**
+		* Set (create or update) a secret in a scope.
+		* Encrypts the value with AAD = "orgId:scope:key".
+		*
+		* Rejects a key outside `[A-Za-z0-9._-]` before doing anything else. The AAD
+		* is a plain concatenation, so a `:` in the key would let two distinct
+		* locations render one AAD (scope 'b' + key 'c:d' equals scope 'b:c' + key
+		* 'd') and a ciphertext written at one would authenticate at the other. The
+		* check sits ahead of the customerSecretsEnabled gate so internal scopes get
+		* no exemption — the binding has to hold for every writer.
+		*
+		* Callers pass a bare scope path, so the AAD's middle field is colon-free
+		* too: the admin route and the dashboard handler both run the scope
+		* validator immediately before calling in, and `source-store` builds its
+		* scope from a uuid. That precondition is what makes the whole triple
+		* recoverable, and it is the caller's to keep — this method does not
+		* re-check it.
+		*
+		* Write-path only: getSecrets, listKeys, deleteSecret, deleteScope,
+		* renameScope, getAllSecrets and createScope stay unvalidated, which is what
+		* keeps a key stored before this rule readable and deletable.
+		*/
 		async setSecret(orgId, scope, key, value) {
+			assertValidSecretKey(key);
 			if (!this.customerSecretsEnabled && !this.isInternalScope(scope)) throw new Error("PG customer secrets are disabled. Use an external secret backend or enable pgCustomerSecrets in config.");
 			const aad = `${orgId}:${scope}:${key}`;
 			const encrypted = encrypt(value, this.masterKey, this.keyVersion, aad);
@@ -29773,6 +29792,8 @@ function createAdminRoutes(deps) {
 			const resolved = await routeScope(scope);
 			const scopeError = validateScopeName(resolved.path);
 			if (scopeError) return c.json({ error: scopeError }, 400);
+			const keyError = validateSecretKey(key);
+			if (keyError) return c.json({ error: keyError }, 400);
 			await resolved.store.setSecret(orgId, resolved.path, key, parsed.value);
 			await deps.auditLogger.log({
 				action: "setSecret",
@@ -34396,15 +34417,15 @@ var init_admin_config = __esmMin((() => {
 function createHealthRoutes$1(deps = {}) {
 	return createHealthRoutes({
 		livenessInfo: () => ({
-			version: "0.3.0",
-			buildDate: "2026-08-09T00:52:55.102Z",
-			buildCommit: "2e7dec998",
-			sdkVersion: "0.3.0",
+			version: "0.4.0",
+			buildDate: "2026-08-09T15:20:50.779Z",
+			buildCommit: "ffd489464",
+			sdkVersion: "0.4.0",
 			sdkBundleHash: "fcd0a836aa1cb92debd93e0254450614d123b3748511aa4148d956fd72a7c29f",
-			sharedVersion: "0.3.0",
+			sharedVersion: "0.4.0",
 			sharedBundleHash: "f16fa528a8a9ef1bed8df369f0e88efafca8a9954a749005299fdbcdb93fa188",
-			engineVersion: "0.3.0",
-			engineBundleHash: "c579e54f7d0b0d5b16587a0528a3e66d32f63e2434bb471a93a01366296efd58"
+			engineVersion: "0.4.0",
+			engineBundleHash: "31e2d5c327284e1cac908d7f85cf6d878bbf87ea0da93ed09c6205ada6935f89"
 		}),
 		readinessCheck: deps.db ? async () => {
 			const checks = {};
@@ -34439,7 +34460,7 @@ function createCapabilitiesRoutes() {
 	const app = new Hono();
 	app.get("/api/v1/capabilities", (c) => {
 		const manifest = {
-			orchestratorVersion: "0.3.0",
+			orchestratorVersion: "0.4.0",
 			protocolVersion: PROTOCOL_VERSION,
 			minProtocolVersion: MIN_PROTOCOL_VERSION
 		};
@@ -37058,7 +37079,7 @@ var init_app = __esmMin((() => {
 	init_log_chunk_sink();
 	init_agent_metrics_aggregator();
 	logger$57 = createLogger({ prefix: "app" });
-	ORCHESTRATOR_VERSION$2 = "0.3.0";
+	ORCHESTRATOR_VERSION$2 = "0.4.0";
 	SourceLocationStore = class {
 		cache = /* @__PURE__ */ new Map();
 		key(workflowName, jobName) {
@@ -46250,7 +46271,7 @@ var logger$44, SOFTWARE_VERSION$1, PeerClient$1;
 var init_peer_client = __esmMin((() => {
 	init_peer_crypto();
 	logger$44 = createLogger({ prefix: "peer-client" });
-	SOFTWARE_VERSION$1 = "0.3.0";
+	SOFTWARE_VERSION$1 = "0.4.0";
 	PeerClient$1 = class {
 		ws = null;
 		_state = "disconnected";
@@ -48213,7 +48234,7 @@ var init_peer_handler = __esmMin((() => {
 	init_peer_crypto();
 	init_join_token();
 	logger$42 = createLogger({ prefix: "peer-handler" });
-	SOFTWARE_VERSION = "0.3.0";
+	SOFTWARE_VERSION = "0.4.0";
 	RATE_LIMIT_MAX = 5;
 	RATE_LIMIT_WINDOW_MS = 6e4;
 }));
@@ -70553,6 +70574,7 @@ var init_dashboard_context_handler = __esmMin((() => {
 			try {
 				const { store, scope } = await this.resolveStoreForScope(msg.scope);
 				assertValidScopeName(scope);
+				assertValidSecretKey(msg.key);
 				await store.setSecret(this.deps.orgId, scope, msg.key, resolved.plaintext);
 				this.recordAccess(msg.actor, "secret.set", {
 					type: "secret_scope",
@@ -75590,14 +75612,14 @@ var init_worker_core = __esmMin((() => {
 	init_peer_outbox();
 	init_worker_outbox_relay();
 	init_app_on_error();
-	ORCHESTRATOR_VERSION$1 = "0.3.0";
-	WORKER_BUILD_COMMIT = "2e7dec998";
-	WORKER_SDK_VERSION = "0.3.0";
+	ORCHESTRATOR_VERSION$1 = "0.4.0";
+	WORKER_BUILD_COMMIT = "ffd489464";
+	WORKER_SDK_VERSION = "0.4.0";
 	WORKER_SDK_BUNDLE_HASH = "fcd0a836aa1cb92debd93e0254450614d123b3748511aa4148d956fd72a7c29f";
-	WORKER_SHARED_VERSION = "0.3.0";
+	WORKER_SHARED_VERSION = "0.4.0";
 	WORKER_SHARED_BUNDLE_HASH = "f16fa528a8a9ef1bed8df369f0e88efafca8a9954a749005299fdbcdb93fa188";
-	WORKER_ENGINE_VERSION = "0.3.0";
-	WORKER_ENGINE_BUNDLE_HASH = "c579e54f7d0b0d5b16587a0528a3e66d32f63e2434bb471a93a01366296efd58";
+	WORKER_ENGINE_VERSION = "0.4.0";
+	WORKER_ENGINE_BUNDLE_HASH = "31e2d5c327284e1cac908d7f85cf6d878bbf87ea0da93ed09c6205ada6935f89";
 	logger$2 = createLogger({ prefix: "worker" });
 	DRAIN_TIMEOUT_MS = 3e5;
 }));
@@ -75621,14 +75643,14 @@ var init_worker_core = __esmMin((() => {
 init_verify_inbound();
 init_ingest_overflow_types();
 init_scope_routing();
-const ORCHESTRATOR_VERSION = "0.3.0";
-const BUILD_COMMIT = "2e7dec998";
-const SDK_VERSION = "0.3.0";
+const ORCHESTRATOR_VERSION = "0.4.0";
+const BUILD_COMMIT = "ffd489464";
+const SDK_VERSION = "0.4.0";
 const SDK_BUNDLE_HASH = "fcd0a836aa1cb92debd93e0254450614d123b3748511aa4148d956fd72a7c29f";
-const SHARED_VERSION = "0.3.0";
+const SHARED_VERSION = "0.4.0";
 const SHARED_BUNDLE_HASH = "f16fa528a8a9ef1bed8df369f0e88efafca8a9954a749005299fdbcdb93fa188";
-const ENGINE_VERSION = "0.3.0";
-const ENGINE_BUNDLE_HASH = "c579e54f7d0b0d5b16587a0528a3e66d32f63e2434bb471a93a01366296efd58";
+const ENGINE_VERSION = "0.4.0";
+const ENGINE_BUNDLE_HASH = "31e2d5c327284e1cac908d7f85cf6d878bbf87ea0da93ed09c6205ada6935f89";
 const otelSdk = initTelemetry({
 	serviceName: "kici-orchestrator",
 	otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT

package/dist/standalone.js

@@ -1,6 +1,6 @@
 import "node:module";
 import { AgentDeliveryMode, AgentPlatform, BaseColdStore, ChunkRequestWaiter, addLogsToArchive, chunkBuffer, computeBackoffDelay, computeMigrationsHash, createDb, createHealthRoutes, createLogger, createMeter, createMetricsRoutes, createPool, createS3Client, decrypt, deriveKey, encodeKeySegment, encrypt, enrichRequestContext, formatDuration, getPrometheusExporter, getReconnectDelay, getRequestContext, guardStartup, initTelemetry, isPgUniqueViolation, logger, parseDatabaseUrl, redactConfig, requestContext, serializeError, setServiceName, setupGracefulShutdown, sha256, storeMigrationContentHash, toErrorMessage, validateRequiredTools } from "@kici-dev/shared";
-import { ALLOWED_SYSTEM_VARS, ARTIFACT_NAME_MAX_LENGTH, AccessLogAction, AccessLogOutcome, AccessLogSource, AccessLogTargetType, ActorType, AgentFailureCategory, ArtifactCompleteAckOutcome, ArtifactDownloadOutcome, ArtifactUploadOutcome, AttestationOrigin, BREAKING_FLOOR, CANONICAL_STATUSES, CacheRefScope, CheckMode, CheckRunConclusion, CheckStepOutcome, ConcurrencyStrategy, ContextDeleteErrorCode, ContextGateRejectReason, DEFAULT_APPROVAL_EXPIRY_HOURS, DEFAULT_CONCURRENCY_STRATEGY, DEFAULT_HOLD_EXPIRY_SECONDS, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutCause, FanoutError, HoldScope, HoldType, INIT_LABEL, InitFailureCategory, InventorySelectorSchema, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, LabelMatcher, LockFileParseError, LogStream, MIN_PROTOCOL_VERSION, ORCH_AGENT_CAPABILITIES, OWN_INGRESS_MODES, OrchLogPhase, OrchestratorMode, PLATFORM_CONNECTED_MODES, PLATFORM_TAINT_LABELS, PRIVILEGED_ROOT_LABEL, PROTOCOL_VERSION, PayloadOmittedReason, RegisterableTriggerType, RunFailureClass, SCHEMA_VERSION, SECURITY_HOLD_JOB_IDS, SSH_TRANSPORT_CAPABILITY, ScalerBackendType, ScalerEventType, ScalerEventType as ScalerEventType$1, SourceOrigin, SourceSubtype, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TimeoutReason, TriggerSource, VariantKind, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogWarmSqlCase, agentAuthRequestSchema, agentLabelOf, agentToOrchestratorMessageSchema, agentTypeLabel, approvalTimeoutSecondsSchema, artifactInvalidNameError, attestationVerifyStatusSchema, buildTrustedPassthroughEnv, canonicalizeCapability, checkArtifactName, deriveOsArchLabels, derivePlatformTaints, fanoutEnvelopeFields, flattenActor, getAccessLogColdDays, getSecretAuditLogColdDays, githubIngressPath, hostLabel, hostSatisfiesTarget, hostToScalerPlatform, installGateJobId, isFailureStatus, isKnownCapability, isLockDynamicJobFn, isLockInlineValue, isLockParallelStep, isLockStaticJob, isSelfReportedLabel, matchAllWorkflows, matchScopePattern, matchWorkflowsForEvent, matcherSatisfiedBy, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixEnvelopeFields, mergeOrderedMaps, minAccessLogWarmDays, minSecretAuditLogWarmDays, partitionMatchers, peerAuthRequestSchema, peerFromPeerMessageSchema, peerHelloResponseSchema, peerHelloSchema, platformToOsArchLabels, platformToTaints, resolveRoleLabels, resolveScheduleInputs, resolveSecretsWithProvenance, scalerAgentLabels, scalerLabel, scalerPlatformSchema, scheduleTriggerKey, secretAuditLogWarmSqlCase, shouldRecordAccess, shouldRecordSecretResolve, trustedContributorHoldReason, unknownContributorHoldReason, validateScopeName, wrapUntrusted } from "@kici-dev/engine";
+import { ALLOWED_SYSTEM_VARS, ARTIFACT_NAME_MAX_LENGTH, AccessLogAction, AccessLogOutcome, AccessLogSource, AccessLogTargetType, ActorType, AgentFailureCategory, ArtifactCompleteAckOutcome, ArtifactDownloadOutcome, ArtifactUploadOutcome, AttestationOrigin, BREAKING_FLOOR, CANONICAL_STATUSES, CacheRefScope, CheckMode, CheckRunConclusion, CheckStepOutcome, ConcurrencyStrategy, ContextDeleteErrorCode, ContextGateRejectReason, DEFAULT_APPROVAL_EXPIRY_HOURS, DEFAULT_CONCURRENCY_STRATEGY, DEFAULT_HOLD_EXPIRY_SECONDS, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutCause, FanoutError, HoldScope, HoldType, INIT_LABEL, InitFailureCategory, InventorySelectorSchema, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, LabelMatcher, LockFileParseError, LogStream, MIN_PROTOCOL_VERSION, ORCH_AGENT_CAPABILITIES, OWN_INGRESS_MODES, OrchLogPhase, OrchestratorMode, PLATFORM_CONNECTED_MODES, PLATFORM_TAINT_LABELS, PRIVILEGED_ROOT_LABEL, PROTOCOL_VERSION, PayloadOmittedReason, RegisterableTriggerType, RunFailureClass, SCHEMA_VERSION, SECURITY_HOLD_JOB_IDS, SSH_TRANSPORT_CAPABILITY, ScalerBackendType, ScalerEventType, ScalerEventType as ScalerEventType$1, SourceOrigin, SourceSubtype, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TimeoutReason, TriggerSource, VariantKind, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogWarmSqlCase, agentAuthRequestSchema, agentLabelOf, agentToOrchestratorMessageSchema, agentTypeLabel, approvalTimeoutSecondsSchema, artifactInvalidNameError, assertValidSecretKey, attestationVerifyStatusSchema, buildTrustedPassthroughEnv, canonicalizeCapability, checkArtifactName, deriveOsArchLabels, derivePlatformTaints, fanoutEnvelopeFields, flattenActor, getAccessLogColdDays, getSecretAuditLogColdDays, githubIngressPath, hostLabel, hostSatisfiesTarget, hostToScalerPlatform, installGateJobId, isFailureStatus, isKnownCapability, isLockDynamicJobFn, isLockInlineValue, isLockParallelStep, isLockStaticJob, isSelfReportedLabel, matchAllWorkflows, matchScopePattern, matchWorkflowsForEvent, matcherSatisfiedBy, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixEnvelopeFields, mergeOrderedMaps, minAccessLogWarmDays, minSecretAuditLogWarmDays, partitionMatchers, peerAuthRequestSchema, peerFromPeerMessageSchema, peerHelloResponseSchema, peerHelloSchema, platformToOsArchLabels, platformToTaints, resolveRoleLabels, resolveScheduleInputs, resolveSecretsWithProvenance, scalerAgentLabels, scalerLabel, scalerPlatformSchema, scheduleTriggerKey, secretAuditLogWarmSqlCase, shouldRecordAccess, shouldRecordSecretResolve, trustedContributorHoldReason, unknownContributorHoldReason, validateScopeName, validateSecretKey, wrapUntrusted } from "@kici-dev/engine";
 import * as os$1 from "node:os";
 import os, { cpus, freemem, homedir, hostname, release, tmpdir, totalmem, uptime, userInfo } from "node:os";
 import { X509Certificate, createCipheriv, createDecipheriv, createHash, createHmac, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -1269,7 +1269,7 @@ var logger$113, SOFTWARE_VERSION$1, PeerClient$1;
 var init_peer_client = __esmMin((() => {
 	init_peer_crypto();
 	logger$113 = createLogger({ prefix: "peer-client" });
-	SOFTWARE_VERSION$1 = "0.3.0";
+	SOFTWARE_VERSION$1 = "0.4.0";
 	PeerClient$1 = class {
 		ws = null;
 		_state = "disconnected";
@@ -3232,7 +3232,7 @@ var init_peer_handler = __esmMin((() => {
 	init_peer_crypto();
 	init_join_token();
 	logger$111 = createLogger({ prefix: "peer-handler" });
-	SOFTWARE_VERSION = "0.3.0";
+	SOFTWARE_VERSION = "0.4.0";
 	RATE_LIMIT_MAX = 5;
 	RATE_LIMIT_WINDOW_MS = 6e4;
 }));
@@ -30004,17 +30004,36 @@ var init_pg_secret_store = __esmMin((() => {
 			}
 			return result;
 		}
-		/**
-		* Set (create or update) a secret in a scope.
-		* Encrypts the value with AAD = "orgId:scope:key".
-		*/
 		/** Check if a scope is internal/operational (always allowed regardless of toggle). */
 		isInternalScope(scope) {
 			const colonIdx = scope.indexOf(":");
 			const path = colonIdx >= 0 ? scope.slice(colonIdx + 1) : scope;
 			return path.startsWith("__source__/") || path.startsWith("__webhook__/");
 		}
+		/**
+		* Set (create or update) a secret in a scope.
+		* Encrypts the value with AAD = "orgId:scope:key".
+		*
+		* Rejects a key outside `[A-Za-z0-9._-]` before doing anything else. The AAD
+		* is a plain concatenation, so a `:` in the key would let two distinct
+		* locations render one AAD (scope 'b' + key 'c:d' equals scope 'b:c' + key
+		* 'd') and a ciphertext written at one would authenticate at the other. The
+		* check sits ahead of the customerSecretsEnabled gate so internal scopes get
+		* no exemption — the binding has to hold for every writer.
+		*
+		* Callers pass a bare scope path, so the AAD's middle field is colon-free
+		* too: the admin route and the dashboard handler both run the scope
+		* validator immediately before calling in, and `source-store` builds its
+		* scope from a uuid. That precondition is what makes the whole triple
+		* recoverable, and it is the caller's to keep — this method does not
+		* re-check it.
+		*
+		* Write-path only: getSecrets, listKeys, deleteSecret, deleteScope,
+		* renameScope, getAllSecrets and createScope stay unvalidated, which is what
+		* keeps a key stored before this rule readable and deletable.
+		*/
 		async setSecret(orgId, scope, key, value) {
+			assertValidSecretKey(key);
 			if (!this.customerSecretsEnabled && !this.isInternalScope(scope)) throw new Error("PG customer secrets are disabled. Use an external secret backend or enable pgCustomerSecrets in config.");
 			const aad = `${orgId}:${scope}:${key}`;
 			const encrypted = encrypt(value, this.masterKey, this.keyVersion, aad);
@@ -40190,6 +40209,8 @@ function createAdminRoutes(deps) {
 			const resolved = await routeScope(scope);
 			const scopeError = validateScopeName(resolved.path);
 			if (scopeError) return c.json({ error: scopeError }, 400);
+			const keyError = validateSecretKey(key);
+			if (keyError) return c.json({ error: keyError }, 400);
 			await resolved.store.setSecret(orgId, resolved.path, key, parsed.value);
 			await deps.auditLogger.log({
 				action: "setSecret",
@@ -44813,15 +44834,15 @@ var init_admin_config = __esmMin((() => {
 function createHealthRoutes$1(deps = {}) {
 	return createHealthRoutes({
 		livenessInfo: () => ({
-			version: "0.3.0",
-			buildDate: "2026-08-09T00:52:55.102Z",
-			buildCommit: "2e7dec998",
-			sdkVersion: "0.3.0",
+			version: "0.4.0",
+			buildDate: "2026-08-09T15:20:50.779Z",
+			buildCommit: "ffd489464",
+			sdkVersion: "0.4.0",
 			sdkBundleHash: "fcd0a836aa1cb92debd93e0254450614d123b3748511aa4148d956fd72a7c29f",
-			sharedVersion: "0.3.0",
+			sharedVersion: "0.4.0",
 			sharedBundleHash: "f16fa528a8a9ef1bed8df369f0e88efafca8a9954a749005299fdbcdb93fa188",
-			engineVersion: "0.3.0",
-			engineBundleHash: "c579e54f7d0b0d5b16587a0528a3e66d32f63e2434bb471a93a01366296efd58"
+			engineVersion: "0.4.0",
+			engineBundleHash: "31e2d5c327284e1cac908d7f85cf6d878bbf87ea0da93ed09c6205ada6935f89"
 		}),
 		readinessCheck: deps.db ? async () => {
 			const checks = {};
@@ -44856,7 +44877,7 @@ function createCapabilitiesRoutes() {
 	const app = new Hono();
 	app.get("/api/v1/capabilities", (c) => {
 		const manifest = {
-			orchestratorVersion: "0.3.0",
+			orchestratorVersion: "0.4.0",
 			protocolVersion: PROTOCOL_VERSION,
 			minProtocolVersion: MIN_PROTOCOL_VERSION
 		};
@@ -47475,7 +47496,7 @@ var init_app = __esmMin((() => {
 	init_log_chunk_sink();
 	init_agent_metrics_aggregator();
 	logger$31 = createLogger({ prefix: "app" });
-	ORCHESTRATOR_VERSION$2 = "0.3.0";
+	ORCHESTRATOR_VERSION$2 = "0.4.0";
 	SourceLocationStore = class {
 		cache = /* @__PURE__ */ new Map();
 		key(workflowName, jobName) {
@@ -64901,14 +64922,14 @@ var init_worker_core = __esmMin((() => {
 	init_peer_outbox();
 	init_worker_outbox_relay();
 	init_app_on_error();
-	ORCHESTRATOR_VERSION$1 = "0.3.0";
-	WORKER_BUILD_COMMIT = "2e7dec998";
-	WORKER_SDK_VERSION = "0.3.0";
+	ORCHESTRATOR_VERSION$1 = "0.4.0";
+	WORKER_BUILD_COMMIT = "ffd489464";
+	WORKER_SDK_VERSION = "0.4.0";
 	WORKER_SDK_BUNDLE_HASH = "fcd0a836aa1cb92debd93e0254450614d123b3748511aa4148d956fd72a7c29f";
-	WORKER_SHARED_VERSION = "0.3.0";
+	WORKER_SHARED_VERSION = "0.4.0";
 	WORKER_SHARED_BUNDLE_HASH = "f16fa528a8a9ef1bed8df369f0e88efafca8a9954a749005299fdbcdb93fa188";
-	WORKER_ENGINE_VERSION = "0.3.0";
-	WORKER_ENGINE_BUNDLE_HASH = "c579e54f7d0b0d5b16587a0528a3e66d32f63e2434bb471a93a01366296efd58";
+	WORKER_ENGINE_VERSION = "0.4.0";
+	WORKER_ENGINE_BUNDLE_HASH = "31e2d5c327284e1cac908d7f85cf6d878bbf87ea0da93ed09c6205ada6935f89";
 	logger$2 = createLogger({ prefix: "worker" });
 	DRAIN_TIMEOUT_MS = 3e5;
 }));
@@ -64932,14 +64953,14 @@ var init_worker_core = __esmMin((() => {
 * Graceful shutdown:
 * agent WS -> heartbeat -> HTTP -> DB
 */
-const ORCHESTRATOR_VERSION = "0.3.0";
-const BUILD_COMMIT = "2e7dec998";
-const SDK_VERSION = "0.3.0";
+const ORCHESTRATOR_VERSION = "0.4.0";
+const BUILD_COMMIT = "ffd489464";
+const SDK_VERSION = "0.4.0";
 const SDK_BUNDLE_HASH = "fcd0a836aa1cb92debd93e0254450614d123b3748511aa4148d956fd72a7c29f";
-const SHARED_VERSION = "0.3.0";
+const SHARED_VERSION = "0.4.0";
 const SHARED_BUNDLE_HASH = "f16fa528a8a9ef1bed8df369f0e88efafca8a9954a749005299fdbcdb93fa188";
-const ENGINE_VERSION = "0.3.0";
-const ENGINE_BUNDLE_HASH = "c579e54f7d0b0d5b16587a0528a3e66d32f63e2434bb471a93a01366296efd58";
+const ENGINE_VERSION = "0.4.0";
+const ENGINE_BUNDLE_HASH = "31e2d5c327284e1cac908d7f85cf6d878bbf87ea0da93ed09c6205ada6935f89";
 const otelSdk = initTelemetry({
 	serviceName: "kici-orchestrator",
 	otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT

package/installer-image-digests.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.3.0",
+  "version": "0.4.0",
   "images": {
-    "kici-agent": "sha256:2c0bc34ff4c2f8f736cac88c758093d90fbf2df8d80351e400db03a9936438fe",
-    "kici-orchestrator": "sha256:328d45e2231d1585eba4a3cceb12080175e93b90b083bf6e45bf4e7ec65e642a"
+    "kici-agent": "sha256:60f463973e2fa02c4e1d9311c9214e679269fa6ead3135b4c826789ca0278cbf",
+    "kici-orchestrator": "sha256:75312fc8bee960384aa2c57ff72cf2fe65bcd52d222278632c79a5f14ccd3e27"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
     "ci",
@@ -84,8 +84,8 @@
     "ws": "^8.21.1",
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
-    "@kici-dev/shared": "0.3.0",
-    "@kici-dev/engine": "0.3.0"
+    "@kici-dev/engine": "0.4.0",
+    "@kici-dev/shared": "0.4.0"
   },
   "kici": {
     "metrics": {
@@ -100,7 +100,7 @@
     "@types/dockerode": "^4.0.1",
     "@types/ws": "^8.18.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.3.0"
+    "@kici-dev/agent": "0.4.0"
   },
   "scripts": {
     "build": "node ../../scripts/build-service.mjs && tsgo --emitDeclarationOnly",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.3.0",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.3.0/7acb1732-6f68-4a3e-be32-37f73bf25228",
+  "name": "@kici-dev/orchestrator@0.4.0",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.4.0/2bd64076-f4f1-416e-9ca2-c7c843d5d0a1",
   "creationInfo": {
-    "created": "2026-08-09T01:30:30Z",
+    "created": "2026-08-09T16:03:04Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -1018,9 +1018,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.4.0",
       "name": "@kici-dev/core",
-      "versionInfo": "0.3.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1031,16 +1031,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.3.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.4.0"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.3.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1051,7 +1051,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.3.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.4.0"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1060,7 +1060,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.3.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1071,16 +1071,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.3.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.4.0"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.3.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1091,7 +1091,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.3.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.4.0"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -7768,57 +7768,57 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.140.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
@@ -7854,12 +7854,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -7968,117 +7968,117 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1090.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.34.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.10.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.43.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.32",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.140.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.22.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.3.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },