@kici-dev/shared 0.1.16 → 0.1.17

package/dist/cold-store/bucket.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/cold-store/bucket.ts
 /**
 * Map a `ColdRetention` to a stable S3 prefix segment. Rounds

package/dist/cold-store/chunk-encoder.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { sha256 } from "@kici-dev/core";
 import { gzipSync } from "node:zlib";
 //#region src/cold-store/chunk-encoder.ts

package/dist/cold-store/chunk-id.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { sha256 } from "@kici-dev/core";
 //#region src/cold-store/chunk-id.ts
 /**

package/dist/cold-store/cold-store.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { createS3Client } from "../s3-client.js";
 import { chunkObjectKey, encodeKeySegment, tablePrefix, tenantDayPrefix } from "./key.js";
 import { coldDaysToBucket, isLongerColdRetention } from "./bucket.js";

package/dist/cold-store/config.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/cold-store/config.ts
 /**
 * Reasonable defaults — matches the design doc's section 5 table.

package/dist/cold-store/index.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { chunkObjectKey, encodeKeySegment, tablePrefix, tenantDayBucketPrefix, tenantDayPrefix } from "./key.js";
 import { COLD_BUCKET_NAMES, coldDaysToBucket, isLongerColdRetention } from "./bucket.js";
 import { computeChunkId } from "./chunk-id.js";

package/dist/cold-store/key.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/cold-store/key.ts
 /**
 * Key helpers for S3 object layouts.

package/dist/cold-store/lru.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/cold-store/lru.ts
 var ChunkLru = class {
 	maxBytes;

package/dist/cold-store/manifest.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/cold-store/manifest.ts
 /**
 * Required fields shared by v1 and v2 manifests. Order is the on-disk

package/dist/cold-store/metrics.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { createMeter } from "../telemetry/metrics.js";
 //#region src/cold-store/metrics.ts
 let _meter;

package/dist/cold-store/table-adapter.js

@@ -1,2 +1,2 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 export {};

package/dist/cold-store/types.js

@@ -1,2 +1,2 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 export {};

package/dist/db-admin.d.ts

@@ -553,8 +553,8 @@ export interface EmitKiciEventOpts {
  * e2e helpers to simulate what `agent ctx.emit()` does from inside a step
  * execution — but without needing an actual running step. Returns the event id.
  *
- * Fixed `chain_depth=0` and `expires_at=NOW() + 1h` match emitInternalEvent()
- * in e2e/helpers/internal-webhook.ts, which this helper supersedes.
+ * Fixed `chain_depth=0` and `expires_at=NOW() + 1h` match emitLocalEvent()
+ * in e2e/helpers/local-webhook.ts, which this helper supersedes.
  */
 export declare function emitKiciEventDirect(databaseUrl: string, opts: EmitKiciEventOpts): Promise<{
     eventId: string;
@@ -567,18 +567,23 @@ export interface SeedGenericWebhookSourceOpts {
     /** Pre-computed routing key (caller uses `generic:${orgId}:${name}`) */
     routingKey: string;
     verificationMethod?: string;
-    /** 'generic' (Stripe-shaped) or 'internal' (github-shaped via InternalWebhookNormalizer) */
-    providerType?: 'generic' | 'internal';
+    /** 'generic' (Stripe-shaped) or 'local' (github-shaped via LocalWebhookNormalizer,
+     *  a git repo present on the agent filesystem cloned via file://). */
+    providerType?: 'generic' | 'local';
+    /** For `providerType='local'`: the per-source `{ repoBasePath, cloneUrlBase? }`
+     *  stored in `git_config`. The orchestrator reads `repoBasePath` from this row
+     *  at registration time to build the local provider bundle. */
+    gitConfig?: Record<string, unknown>;
 }
 /**
- * Upsert a row into `generic_webhook_sources` for internal E2E tests. Uses
+ * Upsert a row into `generic_webhook_sources`. Uses
  * `ON CONFLICT (routing_key) DO UPDATE` so warm-start mode (where the source
  * may already exist from a prior run) is idempotent.
  *
  * IMPORTANT: callers must invoke this BEFORE the orchestrator starts, because
  * GenericSourceManager caches sources at boot and does not reload them later.
  * This helper supersedes seedGenericWebhookSource() in
- * e2e/helpers/internal-webhook.ts.
+ * e2e/helpers/local-webhook.ts.
  */
 export declare function seedGenericWebhookSourceDirect(databaseUrl: string, opts: SeedGenericWebhookSourceOpts): Promise<void>;
 /**

package/dist/db-admin.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { createPool } from "./db.js";
 import { createHash } from "node:crypto";
 import pg from "pg";
@@ -992,8 +992,8 @@ async function resetRaftStateDirect(databaseUrl) {
 * e2e helpers to simulate what `agent ctx.emit()` does from inside a step
 * execution — but without needing an actual running step. Returns the event id.
 *
-* Fixed `chain_depth=0` and `expires_at=NOW() + 1h` match emitInternalEvent()
-* in e2e/helpers/internal-webhook.ts, which this helper supersedes.
+* Fixed `chain_depth=0` and `expires_at=NOW() + 1h` match emitLocalEvent()
+* in e2e/helpers/local-webhook.ts, which this helper supersedes.
 */
 async function emitKiciEventDirect(databaseUrl, opts) {
 	const pool = createPool(databaseUrl);
@@ -1016,14 +1016,14 @@ async function emitKiciEventDirect(databaseUrl, opts) {
 	}
 }
 /**
-* Upsert a row into `generic_webhook_sources` for internal E2E tests. Uses
+* Upsert a row into `generic_webhook_sources`. Uses
 * `ON CONFLICT (routing_key) DO UPDATE` so warm-start mode (where the source
 * may already exist from a prior run) is idempotent.
 *
 * IMPORTANT: callers must invoke this BEFORE the orchestrator starts, because
 * GenericSourceManager caches sources at boot and does not reload them later.
 * This helper supersedes seedGenericWebhookSource() in
-* e2e/helpers/internal-webhook.ts.
+* e2e/helpers/local-webhook.ts.
 */
 async function seedGenericWebhookSourceDirect(databaseUrl, opts) {
 	const pool = createPool(databaseUrl);
@@ -1033,14 +1033,15 @@ async function seedGenericWebhookSourceDirect(databaseUrl, opts) {
         verification_method, verification_config,
         event_type_header, dedup_window_seconds,
         max_payload_bytes, rate_limit_rpm, enabled,
-        provider_type
-      ) VALUES ($1, $2, $3, $4, $5, '{}', 'x-event-type', 300, 10485760, 600, true, $6)
+        provider_type, git_config
+      ) VALUES ($1, $2, $3, $4, $5, '{}', 'x-event-type', 300, 10485760, 600, true, $6, $7::jsonb)
       ON CONFLICT (routing_key) DO UPDATE SET
         customer_id = EXCLUDED.customer_id,
         name = EXCLUDED.name,
         verification_method = EXCLUDED.verification_method,
         verification_config = EXCLUDED.verification_config,
         provider_type = EXCLUDED.provider_type,
+        git_config = EXCLUDED.git_config,
         enabled = true,
         deleted_at = NULL,
         updated_at = NOW()`, [
@@ -1049,7 +1050,8 @@ async function seedGenericWebhookSourceDirect(databaseUrl, opts) {
 			opts.name,
 			opts.routingKey,
 			opts.verificationMethod ?? "none",
-			opts.providerType ?? "generic"
+			opts.providerType ?? "generic",
+			opts.gitConfig ? JSON.stringify(opts.gitConfig) : null
 		]);
 	} finally {
 		await pool.end();

package/dist/db-collation.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import pg from "pg";
 //#region src/db-collation.ts
 /**

package/dist/db.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import pg from "pg";
 import { Kysely, PostgresDialect } from "kysely";
 import { createLogger } from "@kici-dev/core";

package/dist/diagnostics/bundle-archive.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import * as fs from "node:fs";
 import * as path from "node:path";
 //#region src/diagnostics/bundle-archive.ts

package/dist/diagnostics/bundle-chunks.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/diagnostics/bundle-chunks.ts
 /**
 * Channel-agnostic chunked transfer for fleet bundle ZIPs.

package/dist/env/allowlist.d.ts

@@ -39,7 +39,8 @@
  *   - `KICI_*`            — every project-internal env var.
  *   - OS basics           — NODE_ENV, HOME, PATH, TZ, LANG, TMPDIR,
  *                           USER, USERNAME, SHELL, COMSPEC, PWD, OLDPWD,
- *                           HOSTNAME.
+ *                           HOSTNAME, PROCESSOR_ARCHITECTURE (Windows arch
+ *                           hint the agent reads to pick the mise zip).
  *   - Terminal / display  — COLUMNS, LINES, TERM, COLORTERM, DISPLAY,
  *                           WAYLAND_DISPLAY, LOCALAPPDATA.
  *   - XDG basedir spec    — XDG_*.
@@ -48,6 +49,9 @@
  *                           GITHUB_PATH, GITHUB_STEP_SUMMARY, GITLAB_CI.
  *   - Cloud / SDK names   — AWS_*, REDIS_*, OTEL_*, STRIPE_*, DOCKER_*,
  *                           CONTAINER_HOST.
+ *   - git tooling         — GIT_* (git's own env-var family, e.g.
+ *                           GIT_CONFIG_GLOBAL / GIT_SSH_COMMAND, that KiCI
+ *                           sets to drive cloned / overlay workspaces).
  *   - Postgres libpq      — PGHOST, PGPORT, PGUSER, PGPASSWORD,
  *                           PGDATABASE, PGSERVICEFILE, PGSSLMODE.
  *   - Forgejo dev server  — FORGEJO_URL, FORGEJO_CONTAINER (read by the

package/dist/env/allowlist.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/env/allowlist.ts
 /**
 * Source of truth for the env-var allowlist.
@@ -41,7 +41,8 @@ import "../chunk-gOLHoazu.js";
 *   - `KICI_*`            — every project-internal env var.
 *   - OS basics           — NODE_ENV, HOME, PATH, TZ, LANG, TMPDIR,
 *                           USER, USERNAME, SHELL, COMSPEC, PWD, OLDPWD,
-*                           HOSTNAME.
+*                           HOSTNAME, PROCESSOR_ARCHITECTURE (Windows arch
+*                           hint the agent reads to pick the mise zip).
 *   - Terminal / display  — COLUMNS, LINES, TERM, COLORTERM, DISPLAY,
 *                           WAYLAND_DISPLAY, LOCALAPPDATA.
 *   - XDG basedir spec    — XDG_*.
@@ -50,6 +51,9 @@ import "../chunk-gOLHoazu.js";
 *                           GITHUB_PATH, GITHUB_STEP_SUMMARY, GITLAB_CI.
 *   - Cloud / SDK names   — AWS_*, REDIS_*, OTEL_*, STRIPE_*, DOCKER_*,
 *                           CONTAINER_HOST.
+*   - git tooling         — GIT_* (git's own env-var family, e.g.
+*                           GIT_CONFIG_GLOBAL / GIT_SSH_COMMAND, that KiCI
+*                           sets to drive cloned / overlay workspaces).
 *   - Postgres libpq      — PGHOST, PGPORT, PGUSER, PGPASSWORD,
 *                           PGDATABASE, PGSERVICEFILE, PGSSLMODE.
 *   - Forgejo dev server  — FORGEJO_URL, FORGEJO_CONTAINER (read by the
@@ -70,7 +74,7 @@ import "../chunk-gOLHoazu.js";
 *                           the dev proxy), HEADED (Playwright convention
 *                           for `--headed` runs).
 */
-const OS_SDK_ALLOWLIST_REGEX = /^(KICI_.*|NODE_ENV|HOME|PATH|TZ|LANG|TMPDIR|USER|USERNAME|SHELL|COMSPEC|PWD|OLDPWD|HOSTNAME|COLUMNS|LINES|TERM|COLORTERM|DISPLAY|WAYLAND_DISPLAY|LOCALAPPDATA|XDG_CACHE_HOME|XDG_CONFIG_HOME|XDG_DATA_HOME|XDG_RUNTIME_DIR|XDG_STATE_HOME|INIT_CWD|npm_.*|SSH_.*|CI|GITHUB_ACTIONS|GITHUB_ENV|GITHUB_OUTPUT|GITHUB_PATH|GITHUB_STEP_SUMMARY|GITLAB_CI|AWS_.*|REDIS_.*|OTEL_.*|STRIPE_.*|DOCKER_.*|CONTAINER_HOST|container|PGHOST|PGPORT|PGUSER|PGPASSWORD|PGDATABASE|PGSERVICEFILE|PGSSLMODE|FORGEJO_URL|FORGEJO_CONTAINER|KEYCLOAK_.*|VITE_.*|PLAYWRIGHT|HEADED)$/;
+const OS_SDK_ALLOWLIST_REGEX = /^(KICI_.*|NODE_ENV|HOME|PATH|TZ|LANG|TMPDIR|USER|USERNAME|SHELL|COMSPEC|PWD|OLDPWD|HOSTNAME|PROCESSOR_ARCHITECTURE|COLUMNS|LINES|TERM|COLORTERM|DISPLAY|WAYLAND_DISPLAY|LOCALAPPDATA|XDG_CACHE_HOME|XDG_CONFIG_HOME|XDG_DATA_HOME|XDG_RUNTIME_DIR|XDG_STATE_HOME|INIT_CWD|npm_.*|SSH_.*|CI|GITHUB_ACTIONS|GITHUB_ENV|GITHUB_OUTPUT|GITHUB_PATH|GITHUB_STEP_SUMMARY|GITLAB_CI|AWS_.*|REDIS_.*|OTEL_.*|STRIPE_.*|DOCKER_.*|GIT_.*|CONTAINER_HOST|container|PGHOST|PGPORT|PGUSER|PGPASSWORD|PGDATABASE|PGSERVICEFILE|PGSSLMODE|FORGEJO_URL|FORGEJO_CONTAINER|KEYCLOAK_.*|VITE_.*|PLAYWRIGHT|HEADED)$/;
 /**
 * Returns true when `name` is allowed under the KiCI env-var convention:
 * it matches the OS/SDK allowlist regex (which includes the `KICI_*`

package/dist/env/define-env.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/env/define-env.ts
 /** Read an env value following the alias precedence (first non-undefined wins). */
 function readEnv(envMap, env) {

package/dist/env/index.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { RESERVED_NON_SCHEMA_KICI_PREFIXES, RESERVED_NON_SCHEMA_KICI_VARS, defineEnv, validateUnknownKiciVars } from "./define-env.js";
 import { LOGGER_ENV_FIELD_SPECS, LOGGER_ENV_VARS, LoggerEnvSchema } from "./logger-env.js";
 export { LOGGER_ENV_FIELD_SPECS, LOGGER_ENV_VARS, LoggerEnvSchema, RESERVED_NON_SCHEMA_KICI_PREFIXES, RESERVED_NON_SCHEMA_KICI_VARS, defineEnv, validateUnknownKiciVars };

package/dist/env/logger-env.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { z } from "zod";
 //#region src/env/logger-env.ts
 /**

package/dist/graceful-shutdown.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { toErrorMessage } from "@kici-dev/core";
 //#region src/graceful-shutdown.ts
 /**

package/dist/idempotency-env-diff.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 //#region src/idempotency-env-diff.ts
 /**
 * Env-file semantic diff for the idempotent-step preview path.

package/dist/idempotency-files.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { diffEnvFiles, renderEnvDiff } from "./idempotency-env-diff.js";
 import { createTwoFilesPatch } from "diff";
 //#region src/idempotency-files.ts

package/dist/idempotency-yaml-diff.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { setYamlDiffRenderer } from "./idempotency-files.js";
 import { parse } from "yaml";
 //#region src/idempotency-yaml-diff.ts

package/dist/idempotency.js

@@ -1,3 +1,3 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 export * from "@kici-dev/core/idempotency";
 export {};

package/dist/index.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { createDb, createPool } from "./db.js";
 import { MIGRATION_HASH_TABLE, REGISTERABLE_TRIGGER_TYPES, apiKeyExistsDirect, bumpRegistryVersionDirect, bumpRegistryVersionSimpleDirect, cleanupExecutionRowsDirect, clearDispatchQueueDirect, clearPeerCredentialsRevokedAtByIdsDirect, computeMigrationsHash, countActivePeerCredentialsByInstanceDirect, countCronLastFiredDirect, countHeldRunsByRunIdDirect, countWebhookSourcesByConnectionIdDirect, createDbRole, createEnvironmentTemplateDirect, createJoinTokenDirect, createReadOnlyDbUser, deleteCronLastFiredDirect, deleteCrossRepoTrustDirect, deleteEnvironmentDirect, deleteExecutionRunsByWorkflowNameDirect, deleteGenericWebhookSourcesByNameDirect, deleteKiciEventsDirect, deleteOrgSettingsByCustomerIdDirect, deletePeerCredentialsByInstanceIdLikeDirect, deleteWorkflowRegistrationsDirect, describeTableColumnsDirect, dropAndCreateDatabase, dropDatabaseDirect, emitKiciEventDirect, ensureDatabase, ensureOrgOwnerMemberDirect, findAnyUserApiKeyIdDirect, getExecutionRunSecurityDirect, getGenericWebhookSourceByRoutingKeyDirect, getHeldRunByIdDirect, getPeerCredentialRevokedAtDirect, getRegistryVersionDirect, getWebhookSourceByRoutingKeyDirect, getWorkflowRegistrationByIdDirect, insertCronLastFiredNowDirect, insertCrossRepoTrustStrictDirect, insertKiciEventRawDirect, insertPeerCredentialExpiredDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, isSchemaCurrent, isSchemaCurrentFromFilesDirect, latestExecutionRunByStatusDirect, listActiveGenericWebhookSourcesDirect, listActivePeerCredentialsExcludingDirect, listCrossRepoTrustBySourceRoutingKeyDirect, listEnvironmentsDirect, listExecutionJobsDirect, listExecutionRunsDirect, listKiciEventsDirect, listQueueDirect, listRegistrationsByRoutingKeyDirect, listRegistrationsDirect, maskDatabaseUrl, parseDatabaseUrl, platformConnectionExistsDirect, pollKiciEventsDirect, prunePeerCredentialsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, readStoredMigrationContentHash, registerWorkflowManualDirect, resetRaftStateDirect, resolvePlatformWebhookSourceRoutingKeyDirect, restoreSoftDeletedGenericWebhookSourceDirect, seedApiKeyInlineDirect, seedCiSecurityFixturesDirect, seedCrossRepoTrustDirect, seedEnvironmentBindingDirect, seedEnvironmentDirect, seedGenericWebhookSourceDirect, seedSourcePrivateKeyDirect, seedSyntheticGithubSourceDirect, seedUniversalGitSourceDirect, seedWebhookSecretDirect, setEnvironmentPolicyDirect, setEnvironmentSecretDirect, showEnvironmentDirect, showExecutionRunDirect, showKiciEventDirect, showQueueEntryDirect, showRegistrationDirect, storeMigrationContentHash, storeMigrationContentHashInTableDirect, tableExistsDirect, terminateIdleDbBackendsDirect, updateGenericWebhookVerificationConfigDirect, updateOrgSettingsDeniedReposDirect, updateSourceRoutingKeyDirect, updateWorkflowRegistrationCommitShaDirect, upsertCronLastFiredDirect, upsertOrgSettingsGlobalWorkflowsDirect, verifyKiciEventNotifyDirect, waitForEventLogRowByDeliveryIdDirect, waitForExecutionRunStatusSinceDirect, waitForLatestExecutionJobStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformRegistrationsDirect, waitForPostgresDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, waitForRunCompletionDirect } from "./db-admin.js";
 import { setupGracefulShutdown } from "./graceful-shutdown.js";

package/dist/package-manager-types.js

@@ -1,3 +1,3 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 export * from "@kici-dev/core/package-manager-types";
 export {};

package/dist/package-manager.js

@@ -1,3 +1,3 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 export * from "@kici-dev/core/package-manager";
 export {};

package/dist/reconnect-delay.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 //#region src/reconnect-delay.ts
 /**
 * Calculate reconnection delay with exponential backoff and jitter.

package/dist/ring-buffer.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 //#region src/ring-buffer.ts
 /**
 * Generic ring buffer with a configurable maximum size.

package/dist/routes/health.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { Hono } from "hono";
 //#region src/routes/health.ts
 /**

package/dist/routes/metrics.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { Hono } from "hono";
 //#region src/routes/metrics.ts
 /**

package/dist/s3-client.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { S3Client } from "@aws-sdk/client-s3";
 //#region src/s3-client.ts
 /**

package/dist/telemetry/index.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { collectRuntimeMetricNames, getPrometheusExporter, initTelemetry } from "./init.js";
 import { createMeter } from "./metrics.js";
 export { collectRuntimeMetricNames, createMeter, getPrometheusExporter, initTelemetry };

package/dist/telemetry/init.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { NodeSDK } from "@opentelemetry/sdk-node";
 import { PrometheusExporter } from "@opentelemetry/exporter-prometheus";
 import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";

package/dist/telemetry/metrics.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { metrics } from "@opentelemetry/api";
 //#region src/telemetry/metrics.ts
 /**

package/dist/tool-check.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { accessSync, constants } from "node:fs";
 import { delimiter, join } from "node:path";
 //#region src/tool-check.ts

package/dist/ts-loader-hook.js

@@ -1,3 +1,3 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 export * from "@kici-dev/core/ts-loader-hook";
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/shared",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
   "keywords": [
     "ci",
@@ -101,7 +101,7 @@
     "yaml": "^2.8.3",
     "zod": "^4.3.6",
     "zx": "^8.8.5",
-    "@kici-dev/core": "0.1.16"
+    "@kici-dev/core": "0.1.17"
   },
   "devDependencies": {
     "@opentelemetry/sdk-trace-base": "^2.7.0",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/shared@0.1.16",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fshared/0.1.16/510199e0-6d64-4ff3-92fc-8f6870891cf6",
+  "name": "@kici-dev/shared@0.1.17",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fshared/0.1.17/1885c7a2-2121-4876-8a5a-7fcbd118af01",
   "creationInfo": {
-    "created": "2026-06-12T09:41:27Z",
+    "created": "2026-06-14T12:30:07Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -964,9 +964,9 @@
       "homepage": "https://js-sdsl.org"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.17",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.16",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -977,7 +977,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.16"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.17"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
@@ -986,7 +986,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.16",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -997,7 +997,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.16"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.17"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -7820,32 +7820,32 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.128.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -7856,7 +7856,7 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {