@kici-dev/orchestrator 0.9.0 → 0.10.0

package/dist/worker/in-memory-job-queue.d.ts

@@ -96,10 +96,19 @@ export declare class InMemoryJobQueue {
     }>>;
     /**
      * Return a dispatched job to pending for re-dispatch, bumping its attempt
-     * counter. Mirrors the DB-backed `JobQueue.requeue`. Returns the new
-     * attempt count, or null when the job is not currently dispatched.
+     * counter unless `countAttempt` is false. Mirrors the DB-backed
+     * `JobQueue.requeue`. Returns the attempt count, or null when the job is
+     * not currently dispatched.
      */
-    requeue(jobId: string): Promise<number | null>;
+    requeue(jobId: string, opts?: {
+        countAttempt?: boolean;
+    }): Promise<number | null>;
+    /**
+     * The sealed-secrets back-off of `JobQueue.isDeferredUnopenable`. A worker's
+     * in-memory jobs are never sealed, so none is ever deferred; the dispatcher's
+     * requeue redispatch asks every queue this.
+     */
+    isDeferredUnopenable(_jobId: string): boolean;
     /** Full job lookup across pending and dispatched jobs. */
     getFullJobById(jobId: string): Promise<QueuedJob | null>;
     /** Return all pending jobs. */

package/dist/worker/reroute-dispatch.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Worker-mode dispatch of a job rerouted from a coordinator.
+ *
+ * A worker holds no provider credentials. The coordinator pre-resolves the
+ * clone tokens and carries them on the `job.reroute` message. The worker keeps
+ * them in the queued job's config and turns them into the agent's clone auth
+ * at dispatch time.
+ */
+import type { JobReroute } from '@kici-dev/engine';
+/** The queued job's config for a reroute message, carrying the pre-resolved clone tokens. */
+export declare function rerouteJobConfig(msg: JobReroute): Record<string, unknown>;
+/**
+ * Why a rerouted job must not reach an agent, or `undefined` when it may: a
+ * global job carrying only one of its two clone tokens, whose source and
+ * workflow repositories are on different git hosts. The agent would use that
+ * token for the other clone, handing one host's credential to another.
+ */
+export declare function rerouteDispatchRefusal(msg: JobReroute): string | undefined;
+/** The fields of a queued job the worker dispatch reads. */
+export interface WorkerQueuedJob {
+    id: string;
+    runId: string;
+    jobName: string;
+    workflowName: string;
+    repoUrl: string;
+    ref: string;
+    sha: string;
+    jobConfig: Record<string, unknown>;
+}
+/** The `job.dispatch` message the worker sends its agent for a rerouted job. */
+export declare function buildWorkerDispatchMessage(job: WorkerQueuedJob, ids: {
+    messageId: string;
+    timestamp: number;
+}): Record<string, unknown>;
+//# sourceMappingURL=reroute-dispatch.d.ts.map

package/dist/ws/agent-handler.d.ts

@@ -89,16 +89,19 @@ export interface AgentWsHandlerDeps {
         timestamp: number;
         data?: Record<string, unknown>;
     }) => void;
-    /** Optional callback when agent sends log chunks. */
-    onLogChunk?: (agentId: string, msg: {
-        runId: string;
-        jobId: string;
-        stepIndex: number;
-        lines: string[];
-        timestamp: number;
-        /** Absent when the agent does not report a stream; read as `stdout`. */
-        stream?: LogStream;
-    }) => void;
+    /**
+     * Optional callback when agent sends log chunks. A returned promise is the
+     * chunk's write, which {@link AgentWsHandlerDeps.trackLogChunk} registers.
+     */
+    onLogChunk?: (agentId: string, msg: AgentLogChunkInput) => void | Promise<void>;
+    /**
+     * Register a log chunk's handling with its run's log drain, before anything
+     * is awaited (`LogWriter.trackPending`). The ownership check can fall back
+     * to the database, and a run that completes during that lookup would
+     * otherwise be drained without the chunk, whose segment is then never
+     * sealed.
+     */
+    trackLogChunk?: (runId: string, pending: Promise<unknown>) => void;
     /** Optional callback when agent sends step status updates. */
     onStepStatus?: (agentId: string, msg: {
         runId: string;
@@ -392,5 +395,15 @@ export declare function isValidLogChunk(raw: unknown): raw is {
     timestamp: number;
     stream?: LogStream;
 };
+/** A log chunk as the handler passes it on. */
+export interface AgentLogChunkInput {
+    runId: string;
+    jobId: string;
+    stepIndex: number;
+    lines: string[];
+    timestamp: number;
+    /** Absent when the agent does not report a stream; read as `stdout`. */
+    stream?: LogStream;
+}
 export declare function createAgentWsHandler(deps: AgentWsHandlerDeps): WSEvents;
 //# sourceMappingURL=agent-handler.d.ts.map

package/dist/ws/git-credential-relay.d.ts

@@ -39,8 +39,17 @@ import type { GitCredentialBroker } from '../git/credential-broker.js';
 /** Per-job facts the handler needs. Resolved from server truth, never from params. */
 export interface JobCredentialContext {
     orgId: string;
-    /** The repository this job was dispatched for. */
+    /**
+     * The repository whose code the job checks out — the event's repository.
+     * The write-credential organisation fence is anchored here.
+     */
     sourceRepo: string;
+    /**
+     * The repository whose policy governs the job's credentials: the workflow
+     * repository for a run whose workflow lives in another repository, otherwise
+     * the source repository. A named context's repository restrictions read it.
+     */
+    policyRepo: string;
     /**
      * The `gitCredentials` map this job's lock entry declared, verbatim — a
      * request's ref must equal one of these entries. An empty map means the job
@@ -49,8 +58,12 @@ export interface JobCredentialContext {
     declaredCredentials: Readonly<Record<string, Readonly<Record<string, string>>>>;
     /** The run's resolved contributor trust tier, or undefined when unresolved. */
     trustTier: TrustTier | undefined;
-    /** The branch the run presents, for the named context's branch restrictions. */
-    branch: string;
+    /**
+     * The branch a named context's branch restrictions read: the workflow's
+     * registered branch for a run whose workflow lives in another repository,
+     * otherwise the branch the run presents.
+     */
+    policyBranch: string;
     /** The event type that started the run, for a context's trigger-type filters. */
     triggerType: string;
 }

package/installer-image-digests.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.9.0",
+  "version": "0.10.0",
   "images": {
-    "kici-agent": "sha256:371b518421c505041bc8b52eae3ce92e888f25b2cc2d4914f32420dbbf11df55",
-    "kici-orchestrator": "sha256:58c36d0222832fcb82b0af33cdb46d474b97654b0051cb6c54fa96fca9a13af2"
+    "kici-agent": "sha256:f4b278ff8694016ad46b741b199b7363ce083ccef892f62ad640576e8e7c275e",
+    "kici-orchestrator": "sha256:4bb360a18d6193cd0fed233541bee6ba1fa44c9a1052b4a26c4578426d45c9fa"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/orchestrator",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
   "keywords": [
     "ci",
@@ -90,8 +90,8 @@
     "ws": "^8.21.3",
     "yaml": "^2.9.1",
     "zod": "^4.6.5",
-    "@kici-dev/engine": "0.9.0",
-    "@kici-dev/shared": "0.9.0"
+    "@kici-dev/engine": "0.10.0",
+    "@kici-dev/shared": "0.10.0"
   },
   "kici": {
     "metrics": {
@@ -106,7 +106,7 @@
     "@types/dockerode": "^4.0.1",
     "@types/ws": "^8.18.1",
     "kysely-ctl": "^0.21.0",
-    "@kici-dev/agent": "0.9.0"
+    "@kici-dev/agent": "0.10.0"
   },
   "scripts": {
     "build": "node ../../scripts/build-service.mjs && tsc --emitDeclarationOnly",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/orchestrator@0.9.0",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.9.0/f29c1468-46c2-4a20-8f58-978ec346613e",
+  "name": "@kici-dev/orchestrator@0.10.0",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Forchestrator/0.10.0/2bdc7528-345b-4d74-87a1-f0b4c64ea694",
   "creationInfo": {
-    "created": "2026-09-21T08:49:42Z",
+    "created": "2026-09-25T03:03:30Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -964,9 +964,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.10.0",
       "name": "@kici-dev/core",
-      "versionInfo": "0.9.0",
+      "versionInfo": "0.10.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -977,16 +977,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.9.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.10.0"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.9.0",
+      "versionInfo": "0.10.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -997,7 +997,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.9.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.10.0"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -1006,7 +1006,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.9.0",
+      "versionInfo": "0.10.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1017,16 +1017,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.9.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.10.0"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.9.0",
+      "versionInfo": "0.10.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1037,7 +1037,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.9.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.10.0"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -7676,62 +7676,62 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.12",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -7767,12 +7767,12 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -7881,117 +7881,117 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.10.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.10.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.35.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.11.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.222.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.43.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.13.7",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.150.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.23.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.6.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.9.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.10.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },