@kici-dev/orchestrator 0.8.0 → 0.9.0

package/dist/ws/dashboard-global-workflows-handler.d.ts

@@ -3,7 +3,7 @@
  *
  * Responds to `dashboard.global-workflows.*` WS messages from Platform by
  * reading or upserting the `org_settings` row keyed by `customer_id`. The row
- * holds the three per-org repo-pattern lists (allow / deny / elevate); each
+ * holds the per-org repo-pattern lists (allow / deny); each
  * entry is a `{routingKey?, pattern}` object that may optionally pin to one
  * source. The master enable switch is fleet-wide
  * (`cluster_settings.global_workflows_enabled`) and read-only here — projected
@@ -86,7 +86,6 @@ export declare class DashboardGlobalWorkflowsHandler {
 interface NormalizedPatch {
     allowedRepos: RepoPatternEntry[] | null;
     deniedRepos: RepoPatternEntry[] | null;
-    elevatedRepos: RepoPatternEntry[] | null;
 }
 /**
  * Derive the effective storage state from an existing row (may be undefined)
@@ -97,8 +96,8 @@ export declare function buildPatch(existing: OrgSettings | undefined, msg: Globa
 /**
  * Project a row into the public settings shape. `enabled` is the effective
  * fleet-wide master switch, supplied by the caller (read-only here). When the
- * row does not yet exist, the three per-org lists project as null so callers
- * always get a renderable state.
+ * row does not yet exist, the per-org lists project as null so callers always
+ * get a renderable state.
  */
 export declare function rowToSettings(customerId: string, row: OrgSettings | undefined, enabled: boolean): GlobalWorkflowSettings;
 export {};

package/dist/ws/platform-client.d.ts

@@ -315,12 +315,6 @@ export declare class PlatformClient {
      * `source.register.ack` arrives, or rejected on timeout / disconnect.
      */
     private readonly pendingSourceRegistrations;
-    /**
-     * Generic orchestrator-initiated RPC correlation (e.g. the provenance OIDC
-     * mint). The orchestrator sends a `requestId`-keyed request over the WS and
-     * awaits the Platform's matching `.response`; rejected on timeout or close.
-     */
-    private readonly orchRpc;
     /**
      * Platform capabilities advertised on this connection (Platform → orchestrator
      * `platform.capabilities` frame). `undefined` means nothing advertised yet —
@@ -493,15 +487,6 @@ export declare class PlatformClient {
      * NOT in the OrchestratorToPlatformMessage union (they are in the separate log pull schema).
      */
     sendRaw(data: unknown): void;
-    /**
-     * Send an orchestrator-initiated request over the Platform WS and await its
-     * typed `.response`. The reverse of the Platform's dashboard-RPC pattern: we
-     * hold the pending map and resolve on the echoed requestId. Rejects on timeout
-     * or connection close; protocol-level errors arrive inside the response body.
-     * The request type is a member of the typed orch->Platform union, so it rides
-     * the validated `send()` path.
-     */
-    sendRequestAndAwait<Res>(type: OrchestratorToPlatformMessage['type'], payload: Record<string, unknown>, timeoutMs?: number): Promise<Res>;
     /**
      * Register a new source at runtime (e.g., after config reload adds a new GitHub app).
      * Separate from the post-auth registration which sends all sources at once.

package/installer-image-digests.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.8.0",
+  "version": "0.9.0",
   "images": {
-    "kici-agent": "sha256:81dbd07842282809140f620eceec60978793e1aea6972297b78933c2f66f34b1",
-    "kici-orchestrator": "sha256:0cc0c914b0ce08cb1f3532073d1c70f18532024f69dceeb3a719f1160a62554f"
+    "kici-agent": "sha256:371b518421c505041bc8b52eae3ce92e888f25b2cc2d4914f32420dbbf11df55",
+    "kici-orchestrator": "sha256:58c36d0222832fcb82b0af33cdb46d474b97654b0051cb6c54fa96fca9a13af2"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
     "ci",
@@ -30,6 +30,7 @@
   "files": [
     "dist",
     "!dist/**/*.map",
+    "!dist/server-test.js",
     "!dist/server-test.d.ts",
     "!dist/testing",
     "sbom.spdx.json",
@@ -62,23 +63,23 @@
     }
   },
   "dependencies": {
-    "@aws-sdk/client-kms": "^3.1121.0",
-    "@aws-sdk/client-s3": "^3.1121.0",
-    "@aws-sdk/lib-storage": "^3.1121.0",
-    "@aws-sdk/s3-request-presigner": "^3.1121.0",
+    "@aws-sdk/client-kms": "^3.1135.0",
+    "@aws-sdk/client-s3": "^3.1135.0",
+    "@aws-sdk/lib-storage": "^3.1135.0",
+    "@aws-sdk/s3-request-presigner": "^3.1135.0",
     "@hono/node-server": "^2.1.1",
-    "@inquirer/prompts": "^8.7.0",
-    "@octokit/auth-app": "^8.3.0",
+    "@inquirer/prompts": "^8.7.2",
+    "@octokit/auth-app": "^8.3.1",
     "@octokit/rest": "^22.0.1",
     "archiver": "^8.0.0",
     "commander": "^15.0.0",
     "croner": "^10.0.1",
     "dockerode": "^5.0.1",
     "hashi-vault-js": "^0.5.3",
-    "hono": "^4.13.2",
-    "jose": "^6.2.10",
+    "hono": "^4.13.7",
+    "jose": "^6.2.12",
     "jsonpath-plus": "^10.4.0",
-    "jszip": "^3.10.1",
+    "jszip": "^3.10.2",
     "kysely": "^0.29.4",
     "lru-cache": "^11.5.2",
     "nanoid": "^6.0.1",
@@ -87,10 +88,10 @@
     "strip-ansi": "^7.2.0",
     "tar": "^7.5.22",
     "ws": "^8.21.3",
-    "yaml": "^2.9.0",
-    "zod": "^4.4.3",
-    "@kici-dev/engine": "0.8.0",
-    "@kici-dev/shared": "0.8.0"
+    "yaml": "^2.9.1",
+    "zod": "^4.6.5",
+    "@kici-dev/engine": "0.9.0",
+    "@kici-dev/shared": "0.9.0"
   },
   "kici": {
     "metrics": {
@@ -105,11 +106,11 @@
     "@types/dockerode": "^4.0.1",
     "@types/ws": "^8.18.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.8.0"
+    "@kici-dev/agent": "0.9.0"
   },
   "scripts": {
-    "build": "node ../../scripts/build-service.mjs && tsgo --emitDeclarationOnly",
-    "typecheck": "tsgo --noEmit",
+    "build": "node ../../scripts/build-service.mjs && tsc --emitDeclarationOnly",
+    "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "db:migrate": "kysely migrate:latest"
   }