@kici-dev/shared 0.1.26 → 0.1.27

package/dist/db-admin.d.ts

@@ -178,22 +178,22 @@ export declare function purgeScopedSecretsDirect(databaseUrl: string, orgId?: st
     deleted: number;
 }>;
 /**
- * Bulk-delete `environments` (and their FK-dependent rows) for an org, or for
- * every org when `orgId` is omitted. `environment_bindings` /
- * `environment_variables` / `environment_source_overrides` cascade
+ * Bulk-delete `contexts` (and their FK-dependent rows) for an org, or for
+ * every org when `orgId` is omitted. `context_bindings` /
+ * `context_variables` / `context_source_overrides` cascade
  * automatically (ON DELETE CASCADE). `held_runs` and `execution_runs` reference
- * `environments(id)` with ON DELETE SET NULL, so deleting environments alone
- * would leave orphaned `held_runs` rows carrying a null environment reference;
+ * `contexts(id)` with ON DELETE SET NULL, so deleting contexts alone
+ * would leave orphaned `held_runs` rows carrying a null context reference;
  * this helper deletes the org's `held_runs` too so a warm-start reset gets a
  * clean slate. Runs in a transaction so both deletes commit atomically. Used by
- * the E2E warm-start reset (so seeded environments don't leak between
- * categories) and exposed via `kici-admin environment purge`.
+ * the E2E warm-start reset (so seeded contexts don't leak between
+ * categories) and exposed via `kici-admin context purge`.
  */
-export declare function purgeEnvironmentsDirect(databaseUrl: string, orgId?: string): Promise<{
-    environmentsDeleted: number;
+export declare function purgeContextsDirect(databaseUrl: string, orgId?: string): Promise<{
+    contextsDeleted: number;
     heldRunsDeleted: number;
 }>;
-export interface SeedEnvironmentOpts {
+export interface SeedContextOpts {
     orgId: string;
     name: string;
     type?: string;
@@ -205,52 +205,52 @@ export interface SeedEnvironmentOpts {
     minimumTrust?: string | null;
     globPattern?: string | null;
 }
-export interface SeedEnvironmentResult {
+export interface SeedContextResult {
     envId: string;
     created: boolean;
 }
 /**
- * Upsert an environment row keyed by (org_id, name). Returns the env id and
+ * Upsert an context row keyed by (org_id, name). Returns the env id and
  * whether the row was newly inserted. `branchRestrictions` / `requiredReviewers`
  * are JSON-serialised server-side; pass them as plain arrays or objects.
  */
-export declare function seedEnvironmentDirect(databaseUrl: string, opts: SeedEnvironmentOpts): Promise<SeedEnvironmentResult>;
-export interface DeleteEnvironmentOpts {
+export declare function seedContextDirect(databaseUrl: string, opts: SeedContextOpts): Promise<SeedContextResult>;
+export interface DeleteContextOpts {
     orgId: string;
     name: string;
 }
 /**
- * Delete an environment keyed by (org_id, name). Returns whether a row was
- * removed. The `environment_bindings`, `environment_variables`, and
- * `environment_source_overrides` children all carry
- * `FOREIGN KEY (environment_id) REFERENCES environments(id) ON DELETE CASCADE`,
- * so a single DELETE on `environments` cascades to those children. The
+ * Delete an context keyed by (org_id, name). Returns whether a row was
+ * removed. The `context_bindings`, `context_variables`, and
+ * `context_source_overrides` children all carry
+ * `FOREIGN KEY (context_id) REFERENCES contexts(id) ON DELETE CASCADE`,
+ * so a single DELETE on `contexts` cascades to those children. The
  * `held_runs` FK uses `ON DELETE SET NULL`, so terminal held-run history
- * survives the delete with a null environment reference. Pending held runs
- * still reference the environment, so this helper pre-checks their count and
+ * survives the delete with a null context reference. Pending held runs
+ * still reference the context, so this helper pre-checks their count and
  * throws before issuing the DELETE — approve or reject them first.
  */
-export declare function deleteEnvironmentDirect(databaseUrl: string, opts: DeleteEnvironmentOpts): Promise<{
+export declare function deleteContextDirect(databaseUrl: string, opts: DeleteContextOpts): Promise<{
     deleted: boolean;
 }>;
-export interface SeedEnvironmentBindingOpts {
+export interface SeedContextBindingOpts {
     orgId: string;
-    envName: string;
+    contextName: string;
     scopePattern: string;
     /** Host selector; defaults to `'**'` (all hosts). */
     hostPattern?: string;
 }
 /**
- * Upsert an `environment_bindings` row connecting `envName` to `scopePattern`
- * (scoped to `hostPattern`, default `'**'`). Throws if the environment does
+ * Upsert an `context_bindings` row connecting `contextName` to `scopePattern`
+ * (scoped to `hostPattern`, default `'**'`). Throws if the context does
  * not exist.
  */
-export declare function seedEnvironmentBindingDirect(databaseUrl: string, opts: SeedEnvironmentBindingOpts): Promise<{
+export declare function seedContextBindingDirect(databaseUrl: string, opts: SeedContextBindingOpts): Promise<{
     created: boolean;
 }>;
-export interface SetEnvironmentPolicyOpts {
+export interface SetContextPolicyOpts {
     orgId: string;
-    envName: string;
+    contextName: string;
     branchRestrictions?: unknown;
     requiredReviewers?: unknown;
     waitTimerSeconds?: number | null;
@@ -261,10 +261,10 @@ export interface SetEnvironmentPolicyOpts {
 }
 /**
  * UPDATE only the policy fields that were explicitly provided. Columns that
- * were NOT in `opts` are left untouched. Throws if the environment is missing.
+ * were NOT in `opts` are left untouched. Throws if the context is missing.
  */
-export declare function setEnvironmentPolicyDirect(databaseUrl: string, opts: SetEnvironmentPolicyOpts): Promise<void>;
-export interface EnvironmentRow {
+export declare function setContextPolicyDirect(databaseUrl: string, opts: SetContextPolicyOpts): Promise<void>;
+export interface ContextRow {
     id: string;
     org_id: string;
     name: string;
@@ -279,38 +279,38 @@ export interface EnvironmentRow {
     updated_at: string;
 }
 /**
- * SELECT * FROM environments WHERE org_id = $1, ordered by name.
+ * SELECT * FROM contexts WHERE org_id = $1, ordered by name.
  */
-export declare function listEnvironmentsDirect(databaseUrl: string, opts: {
+export declare function listContextsDirect(databaseUrl: string, opts: {
     orgId: string;
 }): Promise<{
-    environments: EnvironmentRow[];
+    contexts: ContextRow[];
 }>;
-export interface EnvironmentVariableRow {
+export interface ContextVariableRow {
     key: string;
     value: string;
     locked: boolean;
     updated_at: string;
 }
-export interface EnvironmentBindingRow {
+export interface ContextBindingRow {
     scope_pattern: string;
     host_pattern: string;
     created_at: string;
 }
-export interface ShowEnvironmentResult {
-    environment: EnvironmentRow;
-    variables: EnvironmentVariableRow[];
-    bindings: EnvironmentBindingRow[];
+export interface ShowContextResult {
+    context: ContextRow;
+    variables: ContextVariableRow[];
+    bindings: ContextBindingRow[];
 }
 /**
- * Fetch a single environment row joined with its variables and bindings.
- * Throws if the environment does not exist.
+ * Fetch a single context row joined with its variables and bindings.
+ * Throws if the context does not exist.
  */
-export declare function showEnvironmentDirect(databaseUrl: string, opts: {
+export declare function showContextDirect(databaseUrl: string, opts: {
     orgId: string;
     name: string;
-}): Promise<ShowEnvironmentResult>;
-export interface CreateEnvironmentTemplateOpts {
+}): Promise<ShowContextResult>;
+export interface CreateContextTemplateOpts {
     orgId: string;
     templateName: string;
     type?: string;
@@ -322,27 +322,27 @@ export interface CreateEnvironmentTemplateOpts {
     variables?: Record<string, string>;
 }
 /**
- * Create (or update) an environment template + its seed variables in one
- * transaction. Templates are represented as environments with `type='template'`
+ * Create (or update) an context template + its seed variables in one
+ * transaction. Templates are represented as contexts with `type='template'`
  * by convention. Returns `{ envId, variablesSet }`.
  */
-export declare function createEnvironmentTemplateDirect(databaseUrl: string, opts: CreateEnvironmentTemplateOpts): Promise<{
+export declare function createContextTemplateDirect(databaseUrl: string, opts: CreateContextTemplateOpts): Promise<{
     envId: string;
     created: boolean;
     variablesSet: number;
 }>;
-export interface SetEnvironmentSecretOpts {
+export interface SetContextSecretOpts {
     orgId: string;
-    environment: string;
+    context: string;
     key: string;
     encryptedValue: string;
 }
 /**
- * UPSERT a scoped_secrets row keyed by (org_id, scope=environment, key).
+ * UPSERT a scoped_secrets row keyed by (org_id, scope=context, key).
  * Writes the value verbatim — the caller is responsible for encryption
  * (matches the stage-4 deferral noted in the plan).
  */
-export declare function setEnvironmentSecretDirect(databaseUrl: string, opts: SetEnvironmentSecretOpts): Promise<{
+export declare function setContextSecretDirect(databaseUrl: string, opts: SetContextSecretOpts): Promise<{
     inserted: boolean;
 }>;
 export interface DispatchQueueRow {
@@ -400,7 +400,7 @@ export interface ExecutionRunRow {
     ref: string;
     sha: string;
     routing_key: string | null;
-    environment: string | null;
+    context: string | null;
     trust_tier: string | null;
     created_at: string;
     started_at: string;
@@ -419,8 +419,8 @@ export interface ExecutionJobRow {
     duration_ms: number | null;
     created_at: string;
     error_message: string | null;
-    /** Ordered bound deployment-environment names (JSON-encoded `string[]`), or null. */
-    environments: string | null;
+    /** Ordered bound deployment-context names (JSON-encoded `string[]`), or null. */
+    contexts: string | null;
 }
 export interface ListExecutionRunsOpts {
     routingKey?: string;
@@ -869,7 +869,7 @@ export interface SeedUniversalGitSourceOpts {
 export declare function seedUniversalGitSourceDirect(databaseUrl: string, opts: SeedUniversalGitSourceOpts): Promise<void>;
 /**
  * Seed the ci-security orchestrator fixtures expected by the security
- * pipeline e2e: sources row for dashboard orgId resolution, environment,
+ * pipeline e2e: sources row for dashboard orgId resolution, context,
  * two execution_runs (unknown + trusted), two execution_jobs, and a
  * security held_run for the unknown contributor.
  *
@@ -877,7 +877,7 @@ export declare function seedUniversalGitSourceDirect(databaseUrl: string, opts:
  */
 export interface SeedCiSecurityFixturesOpts {
     orgId: string;
-    envName?: string;
+    contextName?: string;
     sourceName?: string;
     sourceRoutingKey?: string;
     runsRoutingKey: string;

package/dist/db-admin.js

@@ -341,18 +341,18 @@ async function purgeScopedSecretsDirect(databaseUrl, orgId) {
 	}
 }
 /**
-* Bulk-delete `environments` (and their FK-dependent rows) for an org, or for
-* every org when `orgId` is omitted. `environment_bindings` /
-* `environment_variables` / `environment_source_overrides` cascade
+* Bulk-delete `contexts` (and their FK-dependent rows) for an org, or for
+* every org when `orgId` is omitted. `context_bindings` /
+* `context_variables` / `context_source_overrides` cascade
 * automatically (ON DELETE CASCADE). `held_runs` and `execution_runs` reference
-* `environments(id)` with ON DELETE SET NULL, so deleting environments alone
-* would leave orphaned `held_runs` rows carrying a null environment reference;
+* `contexts(id)` with ON DELETE SET NULL, so deleting contexts alone
+* would leave orphaned `held_runs` rows carrying a null context reference;
 * this helper deletes the org's `held_runs` too so a warm-start reset gets a
 * clean slate. Runs in a transaction so both deletes commit atomically. Used by
-* the E2E warm-start reset (so seeded environments don't leak between
-* categories) and exposed via `kici-admin environment purge`.
+* the E2E warm-start reset (so seeded contexts don't leak between
+* categories) and exposed via `kici-admin context purge`.
 */
-async function purgeEnvironmentsDirect(databaseUrl, orgId) {
+async function purgeContextsDirect(databaseUrl, orgId) {
 	const pool = createPool(databaseUrl);
 	const client = await pool.connect();
 	try {
@@ -360,10 +360,10 @@ async function purgeEnvironmentsDirect(databaseUrl, orgId) {
 		const where = orgId ? "WHERE org_id = $1" : "";
 		const params = orgId ? [orgId] : [];
 		const held = await client.query(`DELETE FROM held_runs ${where}`, params);
-		const envs = await client.query(`DELETE FROM environments ${where}`, params);
+		const envs = await client.query(`DELETE FROM contexts ${where}`, params);
 		await client.query("COMMIT");
 		return {
-			environmentsDeleted: envs.rowCount ?? 0,
+			contextsDeleted: envs.rowCount ?? 0,
 			heldRunsDeleted: held.rowCount ?? 0
 		};
 	} catch (err) {
@@ -375,7 +375,7 @@ async function purgeEnvironmentsDirect(databaseUrl, orgId) {
 	}
 }
 /**
-* Allowed policy field names for `setEnvironmentPolicyDirect`. Kept as an
+* Allowed policy field names for `setContextPolicyDirect`. Kept as an
 * explicit allowlist so the column-name interpolation in the UPDATE string
 * can never be driven by unsanitised caller input.
 */
@@ -389,13 +389,13 @@ const ENV_POLICY_COLUMNS = /* @__PURE__ */ new Set([
 	"allow_local_execution"
 ]);
 /**
-* Upsert an environment row keyed by (org_id, name). Returns the env id and
+* Upsert an context row keyed by (org_id, name). Returns the env id and
 * whether the row was newly inserted. `branchRestrictions` / `requiredReviewers`
 * are JSON-serialised server-side; pass them as plain arrays or objects.
 */
-async function seedEnvironmentDirect(databaseUrl, opts) {
-	if (opts.waitTimerSeconds != null && opts.waitTimerSeconds < 0) throw new Error(`environment: waitTimerSeconds must be >= 0 (got ${opts.waitTimerSeconds})`);
-	if (opts.holdExpirySeconds != null && opts.holdExpirySeconds < 0) throw new Error(`environment: holdExpirySeconds must be >= 0 (got ${opts.holdExpirySeconds})`);
+async function seedContextDirect(databaseUrl, opts) {
+	if (opts.waitTimerSeconds != null && opts.waitTimerSeconds < 0) throw new Error(`context: waitTimerSeconds must be >= 0 (got ${opts.waitTimerSeconds})`);
+	if (opts.holdExpirySeconds != null && opts.holdExpirySeconds < 0) throw new Error(`context: holdExpirySeconds must be >= 0 (got ${opts.holdExpirySeconds})`);
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
@@ -403,20 +403,20 @@ async function seedEnvironmentDirect(databaseUrl, opts) {
 	try {
 		const branchJson = JSON.stringify(opts.branchRestrictions ?? []);
 		const reviewersJson = opts.requiredReviewers === void 0 ? null : JSON.stringify(opts.requiredReviewers);
-		const row = (await pool.query(`INSERT INTO environments
+		const row = (await pool.query(`INSERT INTO contexts
           (org_id, name, type, enabled, branch_restrictions, required_reviewers,
            wait_timer_seconds, hold_expiry_seconds, minimum_trust, glob_pattern)
         VALUES ($1, $2, COALESCE($3, 'fixed'), COALESCE($4, true), $5::jsonb, $6::jsonb,
                 $7, COALESCE($8, 86400), $9, $10)
         ON CONFLICT (org_id, name) DO UPDATE SET
-          type = COALESCE(EXCLUDED.type, environments.type),
+          type = COALESCE(EXCLUDED.type, contexts.type),
           enabled = EXCLUDED.enabled,
           branch_restrictions = EXCLUDED.branch_restrictions,
           required_reviewers = EXCLUDED.required_reviewers,
           wait_timer_seconds = EXCLUDED.wait_timer_seconds,
           hold_expiry_seconds = EXCLUDED.hold_expiry_seconds,
           minimum_trust = EXCLUDED.minimum_trust,
-          glob_pattern = COALESCE(EXCLUDED.glob_pattern, environments.glob_pattern),
+          glob_pattern = COALESCE(EXCLUDED.glob_pattern, contexts.glob_pattern),
           updated_at = now()
         RETURNING id, (xmax = 0) AS inserted`, [
 			opts.orgId,
@@ -430,7 +430,7 @@ async function seedEnvironmentDirect(databaseUrl, opts) {
 			opts.minimumTrust ?? null,
 			opts.globPattern ?? null
 		])).rows[0];
-		if (!row) throw new Error(`environment: upsert returned no row for ${opts.name}`);
+		if (!row) throw new Error(`context: upsert returned no row for ${opts.name}`);
 		return {
 			envId: row.id,
 			created: row.inserted
@@ -440,47 +440,47 @@ async function seedEnvironmentDirect(databaseUrl, opts) {
 	}
 }
 /**
-* Delete an environment keyed by (org_id, name). Returns whether a row was
-* removed. The `environment_bindings`, `environment_variables`, and
-* `environment_source_overrides` children all carry
-* `FOREIGN KEY (environment_id) REFERENCES environments(id) ON DELETE CASCADE`,
-* so a single DELETE on `environments` cascades to those children. The
+* Delete an context keyed by (org_id, name). Returns whether a row was
+* removed. The `context_bindings`, `context_variables`, and
+* `context_source_overrides` children all carry
+* `FOREIGN KEY (context_id) REFERENCES contexts(id) ON DELETE CASCADE`,
+* so a single DELETE on `contexts` cascades to those children. The
 * `held_runs` FK uses `ON DELETE SET NULL`, so terminal held-run history
-* survives the delete with a null environment reference. Pending held runs
-* still reference the environment, so this helper pre-checks their count and
+* survives the delete with a null context reference. Pending held runs
+* still reference the context, so this helper pre-checks their count and
 * throws before issuing the DELETE — approve or reject them first.
 */
-async function deleteEnvironmentDirect(databaseUrl, opts) {
+async function deleteContextDirect(databaseUrl, opts) {
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
 	});
 	try {
 		const pending = await pool.query(`SELECT count(*)::text AS count FROM held_runs hr
-         JOIN environments e ON e.id = hr.environment_id
+         JOIN contexts e ON e.id = hr.context_id
         WHERE e.org_id = $1 AND e.name = $2 AND hr.status = 'pending'`, [opts.orgId, opts.name]);
 		const pendingCount = Number(pending.rows[0]?.count ?? 0);
-		if (pendingCount > 0) throw new Error(`environment has ${pendingCount} pending held run(s) — approve or reject them first`);
-		return { deleted: (await pool.query(`DELETE FROM environments WHERE org_id = $1 AND name = $2 RETURNING id`, [opts.orgId, opts.name])).rows.length > 0 };
+		if (pendingCount > 0) throw new Error(`context has ${pendingCount} pending held run(s) — approve or reject them first`);
+		return { deleted: (await pool.query(`DELETE FROM contexts WHERE org_id = $1 AND name = $2 RETURNING id`, [opts.orgId, opts.name])).rows.length > 0 };
 	} finally {
 		await pool.end();
 	}
 }
 /**
-* Upsert an `environment_bindings` row connecting `envName` to `scopePattern`
-* (scoped to `hostPattern`, default `'**'`). Throws if the environment does
+* Upsert an `context_bindings` row connecting `contextName` to `scopePattern`
+* (scoped to `hostPattern`, default `'**'`). Throws if the context does
 * not exist.
 */
-async function seedEnvironmentBindingDirect(databaseUrl, opts) {
+async function seedContextBindingDirect(databaseUrl, opts) {
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
 	});
 	try {
-		const envRow = await pool.query(`SELECT id FROM environments WHERE org_id = $1 AND name = $2`, [opts.orgId, opts.envName]);
-		if (envRow.rows.length === 0) throw new Error(`environment: not found (org=${opts.orgId}, name=${opts.envName})`);
+		const envRow = await pool.query(`SELECT id FROM contexts WHERE org_id = $1 AND name = $2`, [opts.orgId, opts.contextName]);
+		if (envRow.rows.length === 0) throw new Error(`context: not found (org=${opts.orgId}, name=${opts.contextName})`);
 		const envId = envRow.rows[0].id;
-		return { created: (await pool.query(`INSERT INTO environment_bindings (org_id, environment_id, scope_pattern, host_pattern)
+		return { created: (await pool.query(`INSERT INTO context_bindings (org_id, context_id, scope_pattern, host_pattern)
          VALUES ($1, $2, $3, $4)
          ON CONFLICT DO NOTHING
          RETURNING (xmax = 0) AS inserted`, [
@@ -495,16 +495,16 @@ async function seedEnvironmentBindingDirect(databaseUrl, opts) {
 }
 /**
 * UPDATE only the policy fields that were explicitly provided. Columns that
-* were NOT in `opts` are left untouched. Throws if the environment is missing.
+* were NOT in `opts` are left untouched. Throws if the context is missing.
 */
-async function setEnvironmentPolicyDirect(databaseUrl, opts) {
-	if (opts.waitTimerSeconds != null && opts.waitTimerSeconds < 0) throw new Error(`environment: waitTimerSeconds must be >= 0 (got ${opts.waitTimerSeconds})`);
-	if (opts.holdExpirySeconds != null && opts.holdExpirySeconds < 0) throw new Error(`environment: holdExpirySeconds must be >= 0 (got ${opts.holdExpirySeconds})`);
+async function setContextPolicyDirect(databaseUrl, opts) {
+	if (opts.waitTimerSeconds != null && opts.waitTimerSeconds < 0) throw new Error(`context: waitTimerSeconds must be >= 0 (got ${opts.waitTimerSeconds})`);
+	if (opts.holdExpirySeconds != null && opts.holdExpirySeconds < 0) throw new Error(`context: holdExpirySeconds must be >= 0 (got ${opts.holdExpirySeconds})`);
 	const setClauses = [];
 	const params = [];
 	let idx = 1;
 	const addSet = (column, value, cast) => {
-		if (!ENV_POLICY_COLUMNS.has(column)) throw new Error(`environment: unknown policy column ${column}`);
+		if (!ENV_POLICY_COLUMNS.has(column)) throw new Error(`context: unknown policy column ${column}`);
 		setClauses.push(`${column} = $${idx}${cast ? `::${cast}` : ""}`);
 		params.push(value);
 		idx += 1;
@@ -516,36 +516,36 @@ async function setEnvironmentPolicyDirect(databaseUrl, opts) {
 	if (opts.minimumTrust !== void 0) addSet("minimum_trust", opts.minimumTrust);
 	if (opts.enabled !== void 0) addSet("enabled", opts.enabled);
 	if (opts.allowLocalExecution !== void 0) addSet("allow_local_execution", opts.allowLocalExecution);
-	if (setClauses.length === 0) throw new Error("environment: setEnvironmentPolicy requires at least one policy field");
+	if (setClauses.length === 0) throw new Error("context: setContextPolicy requires at least one policy field");
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
 	});
 	try {
-		params.push(opts.orgId, opts.envName);
+		params.push(opts.orgId, opts.contextName);
 		const orgParam = `$${idx}`;
 		const nameParam = `$${idx + 1}`;
-		const sql = `UPDATE environments
+		const sql = `UPDATE contexts
                     SET ${setClauses.join(", ")}, updated_at = now()
                     WHERE org_id = ${orgParam} AND name = ${nameParam}`;
-		if (((await pool.query(sql, params)).rowCount ?? 0) === 0) throw new Error(`environment: not found (org=${opts.orgId}, name=${opts.envName})`);
+		if (((await pool.query(sql, params)).rowCount ?? 0) === 0) throw new Error(`context: not found (org=${opts.orgId}, name=${opts.contextName})`);
 	} finally {
 		await pool.end();
 	}
 }
 /**
-* SELECT * FROM environments WHERE org_id = $1, ordered by name.
+* SELECT * FROM contexts WHERE org_id = $1, ordered by name.
 */
-async function listEnvironmentsDirect(databaseUrl, opts) {
+async function listContextsDirect(databaseUrl, opts) {
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
 	});
 	try {
-		return { environments: (await pool.query(`SELECT id, org_id, name, type, enabled, branch_restrictions, required_reviewers,
+		return { contexts: (await pool.query(`SELECT id, org_id, name, type, enabled, branch_restrictions, required_reviewers,
               wait_timer_seconds, hold_expiry_seconds, minimum_trust,
               created_at, updated_at
-         FROM environments
+         FROM contexts
         WHERE org_id = $1
         ORDER BY name`, [opts.orgId])).rows };
 	} finally {
@@ -553,10 +553,10 @@ async function listEnvironmentsDirect(databaseUrl, opts) {
 	}
 }
 /**
-* Fetch a single environment row joined with its variables and bindings.
-* Throws if the environment does not exist.
+* Fetch a single context row joined with its variables and bindings.
+* Throws if the context does not exist.
 */
-async function showEnvironmentDirect(databaseUrl, opts) {
+async function showContextDirect(databaseUrl, opts) {
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
@@ -565,20 +565,20 @@ async function showEnvironmentDirect(databaseUrl, opts) {
 		const envResult = await pool.query(`SELECT id, org_id, name, type, enabled, branch_restrictions, required_reviewers,
               wait_timer_seconds, hold_expiry_seconds, minimum_trust,
               created_at, updated_at
-         FROM environments
+         FROM contexts
         WHERE org_id = $1 AND name = $2`, [opts.orgId, opts.name]);
-		if (envResult.rows.length === 0) throw new Error(`environment: not found (org=${opts.orgId}, name=${opts.name})`);
+		if (envResult.rows.length === 0) throw new Error(`context: not found (org=${opts.orgId}, name=${opts.name})`);
 		const env = envResult.rows[0];
 		const variables = await pool.query(`SELECT key, value, locked, updated_at
-         FROM environment_variables
-        WHERE environment_id = $1
+         FROM context_variables
+        WHERE context_id = $1
         ORDER BY key`, [env.id]);
 		const bindings = await pool.query(`SELECT scope_pattern, host_pattern, created_at
-         FROM environment_bindings
-        WHERE environment_id = $1
+         FROM context_bindings
+        WHERE context_id = $1
         ORDER BY scope_pattern, host_pattern`, [env.id]);
 		return {
-			environment: env,
+			context: env,
 			variables: variables.rows,
 			bindings: bindings.rows
 		};
@@ -587,11 +587,11 @@ async function showEnvironmentDirect(databaseUrl, opts) {
 	}
 }
 /**
-* Create (or update) an environment template + its seed variables in one
-* transaction. Templates are represented as environments with `type='template'`
+* Create (or update) an context template + its seed variables in one
+* transaction. Templates are represented as contexts with `type='template'`
 * by convention. Returns `{ envId, variablesSet }`.
 */
-async function createEnvironmentTemplateDirect(databaseUrl, opts) {
+async function createContextTemplateDirect(databaseUrl, opts) {
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
@@ -599,12 +599,12 @@ async function createEnvironmentTemplateDirect(databaseUrl, opts) {
 	const client = await pool.connect();
 	try {
 		await client.query("BEGIN");
-		const row = (await client.query(`INSERT INTO environments
+		const row = (await client.query(`INSERT INTO contexts
           (org_id, name, type, enabled, branch_restrictions, required_reviewers,
            wait_timer_seconds, hold_expiry_seconds, minimum_trust)
         VALUES ($1, $2, COALESCE($3, 'template'), true, $4::jsonb, $5::jsonb, $6, COALESCE($7, 86400), $8)
         ON CONFLICT (org_id, name) DO UPDATE SET
-          type = COALESCE(EXCLUDED.type, environments.type),
+          type = COALESCE(EXCLUDED.type, contexts.type),
           branch_restrictions = EXCLUDED.branch_restrictions,
           required_reviewers = EXCLUDED.required_reviewers,
           wait_timer_seconds = EXCLUDED.wait_timer_seconds,
@@ -621,12 +621,12 @@ async function createEnvironmentTemplateDirect(databaseUrl, opts) {
 			opts.holdExpirySeconds ?? null,
 			opts.minimumTrust ?? null
 		])).rows[0];
-		if (!row) throw new Error(`environment: template upsert returned no row`);
+		if (!row) throw new Error(`context: template upsert returned no row`);
 		let variablesSet = 0;
 		if (opts.variables) for (const [key, value] of Object.entries(opts.variables)) {
-			await client.query(`INSERT INTO environment_variables (org_id, environment_id, key, value, locked)
+			await client.query(`INSERT INTO context_variables (org_id, context_id, key, value, locked)
              VALUES ($1, $2, $3, $4, false)
-             ON CONFLICT (org_id, environment_id, key) DO UPDATE SET
+             ON CONFLICT (org_id, context_id, key) DO UPDATE SET
                value = EXCLUDED.value,
                updated_at = now()`, [
 				opts.orgId,
@@ -651,14 +651,14 @@ async function createEnvironmentTemplateDirect(databaseUrl, opts) {
 	}
 }
 /**
-* UPSERT a scoped_secrets row keyed by (org_id, scope=environment, key).
+* UPSERT a scoped_secrets row keyed by (org_id, scope=context, key).
 * Writes the value verbatim — the caller is responsible for encryption
 * (matches the stage-4 deferral noted in the plan).
 */
-async function setEnvironmentSecretDirect(databaseUrl, opts) {
-	if (!opts.orgId) throw new Error("environment: orgId required");
-	if (!opts.environment) throw new Error("environment: environment name required");
-	if (!opts.key) throw new Error("environment: key required");
+async function setContextSecretDirect(databaseUrl, opts) {
+	if (!opts.orgId) throw new Error("context: orgId required");
+	if (!opts.context) throw new Error("context: context name required");
+	if (!opts.key) throw new Error("context: key required");
 	const pool = new pg.Pool({
 		connectionString: databaseUrl,
 		max: 1
@@ -671,7 +671,7 @@ async function setEnvironmentSecretDirect(databaseUrl, opts) {
            updated_at = now()
          RETURNING (xmax = 0) AS inserted`, [
 			opts.orgId,
-			opts.environment,
+			opts.context,
 			opts.key,
 			opts.encryptedValue
 		])).rows[0]?.inserted ?? false };
@@ -789,7 +789,7 @@ async function listExecutionRunsDirect(databaseUrl, opts = {}) {
 		const limit = Math.max(1, Math.min(1e3, opts.limit ?? 100));
 		const where = clauses.length > 0 ? `WHERE ${clauses.join(" AND ")}` : "";
 		return { runs: (await pool.query(`SELECT id, run_id, workflow_name, status, provider, repo_identifier,
-              ref, sha, routing_key, environment, trust_tier, created_at,
+              ref, sha, routing_key, context, trust_tier, created_at,
               started_at, completed_at, duration_ms
          FROM execution_runs
          ${where}
@@ -807,7 +807,7 @@ async function showExecutionRunDirect(databaseUrl, opts) {
 	const pool = createPool(databaseUrl);
 	try {
 		const runResult = await pool.query(`SELECT id, run_id, workflow_name, status, provider, repo_identifier,
-              ref, sha, routing_key, environment, trust_tier, created_at,
+              ref, sha, routing_key, context, trust_tier, created_at,
               started_at, completed_at, duration_ms
          FROM execution_runs
         WHERE run_id = $1`, [opts.runId]);
@@ -816,7 +816,7 @@ async function showExecutionRunDirect(databaseUrl, opts) {
 		return {
 			run,
 			jobs: (await pool.query(`SELECT id, run_id, job_id, job_name, status, agent_id,
-              started_at, completed_at, duration_ms, created_at, error_message, environments
+              started_at, completed_at, duration_ms, created_at, error_message, contexts
          FROM execution_jobs
         WHERE run_id = $1
         ORDER BY created_at ASC`, [run.run_id])).rows
@@ -834,7 +834,7 @@ async function listExecutionJobsDirect(databaseUrl, opts) {
 	try {
 		return { jobs: (await pool.query(`SELECT j.id, j.run_id, j.job_id, j.job_name, j.status, j.agent_id,
               j.started_at, j.completed_at, j.duration_ms, j.created_at, j.error_message,
-              j.environments
+              j.contexts
          FROM execution_jobs j
          INNER JOIN execution_runs r ON r.run_id = j.run_id
         WHERE r.run_id::text = $1 OR r.id::text = $1
@@ -1649,7 +1649,7 @@ async function seedUniversalGitSourceDirect(databaseUrl, opts) {
 	}
 }
 async function seedCiSecurityFixturesDirect(databaseUrl, opts) {
-	const envName = opts.envName ?? "ci-security-env";
+	const contextName = opts.contextName ?? "ci-security-env";
 	const sourceName = opts.sourceName ?? "ci-security-dashboard-resolver";
 	const sourceRoutingKey = opts.sourceRoutingKey ?? `generic:${opts.orgId}:ci-security-dashboard`;
 	const pool = createPool(databaseUrl);
@@ -1661,10 +1661,10 @@ async function seedCiSecurityFixturesDirect(databaseUrl, opts) {
 			sourceRoutingKey,
 			opts.orgId
 		]);
-		const envId = (await pool.query(`INSERT INTO environments (org_id, name, type, enabled)
+		const envId = (await pool.query(`INSERT INTO contexts (org_id, name, type, enabled)
        VALUES ($1, $2, \'fixed\', true)
        ON CONFLICT (org_id, name) DO UPDATE SET enabled = true
-       RETURNING id`, [opts.orgId, envName])).rows[0].id;
+       RETURNING id`, [opts.orgId, contextName])).rows[0].id;
 		await pool.query(`INSERT INTO execution_runs (
         run_id, workflow_name, provider, repo_identifier,
         ref, sha, delivery_id, status, trust_tier, lock_file_source,
@@ -1677,7 +1677,7 @@ async function seedCiSecurityFixturesDirect(databaseUrl, opts) {
 		]);
 		await pool.query(`INSERT INTO execution_jobs (job_id, run_id, job_name, status)
        VALUES ($1, $2, \'security-test-job\', \'pending\')`, [opts.unknownJobId, opts.unknownRunId]);
-		const heldRunId = (await pool.query(`INSERT INTO held_runs (org_id, run_id, job_id, environment_id, hold_type, queue_type, reason, expires_at)
+		const heldRunId = (await pool.query(`INSERT INTO held_runs (org_id, run_id, job_id, context_id, hold_type, queue_type, reason, expires_at)
        VALUES ($1, $2, $3, $4, \'unknown_contributor\', \'security\',
         \'Unknown contributor requires approval\', NOW() + INTERVAL \'72 hours\')
        RETURNING id`, [
@@ -2754,6 +2754,6 @@ async function terminateIdleDbBackendsDirect(databaseUrl) {
 	}
 }
 //#endregion
-export { MIGRATION_HASH_TABLE, PROVIDER_HASH_KEY, REGISTERABLE_TRIGGER_TYPES, apiKeyExistsDirect, bumpRegistryVersionDirect, bumpRegistryVersionSimpleDirect, cleanupExecutionRowsDirect, clearDispatchQueueDirect, clearPeerCredentialsRevokedAtByIdsDirect, computeMigrationsHash, countActivePeerCredentialsByInstanceDirect, countCronLastFiredDirect, countHeldRunsByRunIdDirect, countWebhookSourcesByConnectionIdDirect, createDbRole, createEnvironmentTemplateDirect, createJoinTokenDirect, createReadOnlyDbUser, deleteCronLastFiredDirect, deleteCrossRepoTrustDirect, deleteEnvironmentDirect, deleteExecutionRunsByWorkflowNameDirect, deleteGenericWebhookSourcesByNameDirect, deleteJoinTokensByCreatedByDirect, deleteKiciEventsDirect, deleteOrgSettingsByCustomerIdDirect, deletePeerCredentialsByInstanceIdLikeDirect, deleteWorkflowRegistrationsDirect, describeTableColumnsDirect, dropAndCreateDatabase, dropDatabaseDirect, emitKiciEventDirect, ensureDatabase, ensureOrgOwnerMemberDirect, findAnyUserApiKeyIdDirect, getExecutionRunSecurityDirect, getGenericWebhookSourceByRoutingKeyDirect, getHeldRunByIdDirect, getPeerCredentialRevokedAtDirect, getRegistryVersionDirect, getWebhookSourceByRoutingKeyDirect, getWorkflowRegistrationByIdDirect, insertCronLastFiredNowDirect, insertCrossRepoTrustStrictDirect, insertKiciEventAtDirect, insertKiciEventRawDirect, insertPeerCredentialExpiredDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, isSchemaCurrent, isSchemaCurrentFromFilesDirect, latestExecutionRunByStatusDirect, listActiveGenericWebhookSourcesDirect, listActivePeerCredentialsExcludingDirect, listCrossRepoTrustBySourceRoutingKeyDirect, listEnvironmentsDirect, listExecutionJobsDirect, listExecutionRunsDirect, listHeldRunApprovalsDirect, listKiciEventsDirect, listQueueDirect, listRegistrationsByRoutingKeyDirect, listRegistrationsDirect, maskDatabaseUrl, paginateUnprocessedEventsKeysetDirect, parseDatabaseUrl, platformConnectionExistsDirect, pollKiciEventsDirect, prunePeerCredentialsDirect, purgeEnvironmentsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, readStoredMigrationContentHash, registerWorkflowManualDirect, resetRaftStateDirect, resolvePlatformWebhookSourceRoutingKeyDirect, restoreSoftDeletedGenericWebhookSourceDirect, seedApiKeyInlineDirect, seedCiSecurityFixturesDirect, seedCrossRepoTrustDirect, seedEnvironmentBindingDirect, seedEnvironmentDirect, seedGenericWebhookSourceDirect, seedSourcePrivateKeyDirect, seedSyntheticGithubSourceDirect, seedUniversalGitSourceDirect, seedWebhookSecretDirect, setEnvironmentPolicyDirect, setEnvironmentSecretDirect, showEnvironmentDirect, showExecutionRunDirect, showKiciEventDirect, showQueueEntryDirect, showRegistrationDirect, storeMigrationContentHash, storeMigrationContentHashInTableDirect, tableExistsDirect, terminateIdleDbBackendsDirect, updateGenericWebhookVerificationConfigDirect, updateOrgSettingsDeniedReposDirect, updateSourceRoutingKeyDirect, updateWorkflowRegistrationCommitShaDirect, upsertCronLastFiredDirect, upsertOrgSettingsGlobalWorkflowsDirect, verifyKiciEventNotifyDirect, waitForEventLogRowByDeliveryIdDirect, waitForExecutionRunStatusSinceDirect, waitForLatestExecutionJobStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformRegistrationsDirect, waitForPostgresDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, waitForRunCompletionDirect };
+export { MIGRATION_HASH_TABLE, PROVIDER_HASH_KEY, REGISTERABLE_TRIGGER_TYPES, apiKeyExistsDirect, bumpRegistryVersionDirect, bumpRegistryVersionSimpleDirect, cleanupExecutionRowsDirect, clearDispatchQueueDirect, clearPeerCredentialsRevokedAtByIdsDirect, computeMigrationsHash, countActivePeerCredentialsByInstanceDirect, countCronLastFiredDirect, countHeldRunsByRunIdDirect, countWebhookSourcesByConnectionIdDirect, createContextTemplateDirect, createDbRole, createJoinTokenDirect, createReadOnlyDbUser, deleteContextDirect, deleteCronLastFiredDirect, deleteCrossRepoTrustDirect, deleteExecutionRunsByWorkflowNameDirect, deleteGenericWebhookSourcesByNameDirect, deleteJoinTokensByCreatedByDirect, deleteKiciEventsDirect, deleteOrgSettingsByCustomerIdDirect, deletePeerCredentialsByInstanceIdLikeDirect, deleteWorkflowRegistrationsDirect, describeTableColumnsDirect, dropAndCreateDatabase, dropDatabaseDirect, emitKiciEventDirect, ensureDatabase, ensureOrgOwnerMemberDirect, findAnyUserApiKeyIdDirect, getExecutionRunSecurityDirect, getGenericWebhookSourceByRoutingKeyDirect, getHeldRunByIdDirect, getPeerCredentialRevokedAtDirect, getRegistryVersionDirect, getWebhookSourceByRoutingKeyDirect, getWorkflowRegistrationByIdDirect, insertCronLastFiredNowDirect, insertCrossRepoTrustStrictDirect, insertKiciEventAtDirect, insertKiciEventRawDirect, insertPeerCredentialExpiredDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, isSchemaCurrent, isSchemaCurrentFromFilesDirect, latestExecutionRunByStatusDirect, listActiveGenericWebhookSourcesDirect, listActivePeerCredentialsExcludingDirect, listContextsDirect, listCrossRepoTrustBySourceRoutingKeyDirect, listExecutionJobsDirect, listExecutionRunsDirect, listHeldRunApprovalsDirect, listKiciEventsDirect, listQueueDirect, listRegistrationsByRoutingKeyDirect, listRegistrationsDirect, maskDatabaseUrl, paginateUnprocessedEventsKeysetDirect, parseDatabaseUrl, platformConnectionExistsDirect, pollKiciEventsDirect, prunePeerCredentialsDirect, purgeContextsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, readStoredMigrationContentHash, registerWorkflowManualDirect, resetRaftStateDirect, resolvePlatformWebhookSourceRoutingKeyDirect, restoreSoftDeletedGenericWebhookSourceDirect, seedApiKeyInlineDirect, seedCiSecurityFixturesDirect, seedContextBindingDirect, seedContextDirect, seedCrossRepoTrustDirect, seedGenericWebhookSourceDirect, seedSourcePrivateKeyDirect, seedSyntheticGithubSourceDirect, seedUniversalGitSourceDirect, seedWebhookSecretDirect, setContextPolicyDirect, setContextSecretDirect, showContextDirect, showExecutionRunDirect, showKiciEventDirect, showQueueEntryDirect, showRegistrationDirect, storeMigrationContentHash, storeMigrationContentHashInTableDirect, tableExistsDirect, terminateIdleDbBackendsDirect, updateGenericWebhookVerificationConfigDirect, updateOrgSettingsDeniedReposDirect, updateSourceRoutingKeyDirect, updateWorkflowRegistrationCommitShaDirect, upsertCronLastFiredDirect, upsertOrgSettingsGlobalWorkflowsDirect, verifyKiciEventNotifyDirect, waitForEventLogRowByDeliveryIdDirect, waitForExecutionRunStatusSinceDirect, waitForLatestExecutionJobStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformRegistrationsDirect, waitForPostgresDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, waitForRunCompletionDirect };
 
 //# sourceMappingURL=db-admin.js.map

package/dist/db-collation.d.ts

@@ -57,4 +57,53 @@ export declare function reindexDatabaseConcurrently(pool: pg.Pool, dbName: strin
  * Metadata-only; safe to run any time after a REINDEX has rebuilt the indexes.
  */
 export declare function refreshDatabaseCollationVersion(pool: pg.Pool, dbName: string): Promise<void>;
+/**
+ * The two-step operator remediation for collation drift on `dbName`, as a
+ * single copy-pasteable string. Surfaced in the startup ERROR line and the
+ * hard-fail message so an operator sees exactly what to run.
+ */
+export declare function collationDriftRemediation(dbName: string): string;
+/**
+ * Minimal structural logger the startup check needs. `winston.Logger`
+ * satisfies it, so both the orchestrator and Platform pass their own logger
+ * without a shared winston dependency here.
+ */
+export interface CollationDriftStartupLogger {
+    info(message: string, meta?: Record<string, unknown>): void;
+    warn(message: string, meta?: Record<string, unknown>): void;
+    error(message: string, meta?: Record<string, unknown>): void;
+}
+/** Env var name that turns a detected drift into a startup refusal. */
+export declare const FAIL_ON_COLLATION_DRIFT_ENV = "KICI_DB_FAIL_ON_COLLATION_DRIFT";
+/**
+ * Read the opt-in hard-fail toggle from an environment map. When set to
+ * `true`, {@link checkCollationDriftAtStartup} throws on detected drift instead
+ * of logging and continuing. Defaults to off (detect + warn loudly).
+ */
+export declare function shouldFailOnCollationDrift(env: NodeJS.ProcessEnv): boolean;
+/**
+ * Boot-time collation-drift guard shared by the orchestrator and Platform.
+ *
+ * Runs {@link getDatabaseCollationDrift} after the DB connection + migrations
+ * are up and before the service starts serving. Behavior:
+ *
+ * - **No drift** → logs one info line and returns `null`.
+ * - **Drift** → logs a single loud, structured ERROR line naming the database,
+ *   the recorded-vs-actual collation versions, the exact remediation command,
+ *   and the risk (text index lookups may silently miss present rows — the
+ *   failure mode that read a present source private key back as absent). Does
+ *   NOT crash by default; a drifted DB still serves most traffic and crashing
+ *   every node is worse than a loud, alertable warning. Returns the drift.
+ * - **`failOnDrift: true`** (opt-in via {@link FAIL_ON_COLLATION_DRIFT_ENV})
+ *   → throws after logging, so strict operators can refuse to boot on drift.
+ * - **Probe failure** (the query itself throws) → logs a WARN and returns
+ *   `null`. A probe bug must never take down every node; unconfirmed drift is
+ *   not a reason to crash, and `failOnDrift` gates confirmed drift only.
+ *
+ * The caller is responsible for reflecting the result into its
+ * `kici_db_collation_drift{database=…}` gauge (1 on drift, 0 clean).
+ */
+export declare function checkCollationDriftAtStartup(pool: pg.Pool, dbName: string, logger: CollationDriftStartupLogger, options?: {
+    failOnDrift?: boolean;
+}): Promise<CollationDrift | null>;
 //# sourceMappingURL=db-collation.d.ts.map

package/dist/db-collation.js

@@ -1,5 +1,6 @@
 import "./rolldown-runtime-ClRpJifh.js";
 import pg from "pg";
+import { toErrorMessage } from "@kici-dev/core";
 //#region src/db-collation.ts
 /**
 * Read `pg_database.datcollversion` and
@@ -46,7 +47,73 @@ async function refreshDatabaseCollationVersion(pool, dbName) {
 	const quoted = pg.escapeIdentifier(dbName);
 	await pool.query(`ALTER DATABASE ${quoted} REFRESH COLLATION VERSION`);
 }
+/**
+* The two-step operator remediation for collation drift on `dbName`, as a
+* single copy-pasteable string. Surfaced in the startup ERROR line and the
+* hard-fail message so an operator sees exactly what to run.
+*/
+function collationDriftRemediation(dbName) {
+	const quoted = pg.escapeIdentifier(dbName);
+	return `REINDEX DATABASE CONCURRENTLY ${quoted}; ALTER DATABASE ${quoted} REFRESH COLLATION VERSION;`;
+}
+/** Env var name that turns a detected drift into a startup refusal. */
+const FAIL_ON_COLLATION_DRIFT_ENV = "KICI_DB_FAIL_ON_COLLATION_DRIFT";
+/**
+* Read the opt-in hard-fail toggle from an environment map. When set to
+* `true`, {@link checkCollationDriftAtStartup} throws on detected drift instead
+* of logging and continuing. Defaults to off (detect + warn loudly).
+*/
+function shouldFailOnCollationDrift(env) {
+	return env[FAIL_ON_COLLATION_DRIFT_ENV] === "true";
+}
+/**
+* Boot-time collation-drift guard shared by the orchestrator and Platform.
+*
+* Runs {@link getDatabaseCollationDrift} after the DB connection + migrations
+* are up and before the service starts serving. Behavior:
+*
+* - **No drift** → logs one info line and returns `null`.
+* - **Drift** → logs a single loud, structured ERROR line naming the database,
+*   the recorded-vs-actual collation versions, the exact remediation command,
+*   and the risk (text index lookups may silently miss present rows — the
+*   failure mode that read a present source private key back as absent). Does
+*   NOT crash by default; a drifted DB still serves most traffic and crashing
+*   every node is worse than a loud, alertable warning. Returns the drift.
+* - **`failOnDrift: true`** (opt-in via {@link FAIL_ON_COLLATION_DRIFT_ENV})
+*   → throws after logging, so strict operators can refuse to boot on drift.
+* - **Probe failure** (the query itself throws) → logs a WARN and returns
+*   `null`. A probe bug must never take down every node; unconfirmed drift is
+*   not a reason to crash, and `failOnDrift` gates confirmed drift only.
+*
+* The caller is responsible for reflecting the result into its
+* `kici_db_collation_drift{database=…}` gauge (1 on drift, 0 clean).
+*/
+async function checkCollationDriftAtStartup(pool, dbName, logger, options = {}) {
+	let drift;
+	try {
+		drift = await getDatabaseCollationDrift(pool, dbName);
+	} catch (err) {
+		logger.warn("Collation-drift startup probe failed; skipping drift check", {
+			database: dbName,
+			error: toErrorMessage(err)
+		});
+		return null;
+	}
+	if (!drift) {
+		logger.info("Database collation version is consistent", { database: dbName });
+		return null;
+	}
+	logger.error("Database collation drift detected — text-column b-tree indexes may silently miss present rows (e.g. secrets/sources reads reporting present rows as missing). Repair with the remediation below.", {
+		database: dbName,
+		stampedCollationVersion: drift.stamped,
+		actualCollationVersion: drift.actual,
+		remediation: collationDriftRemediation(dbName),
+		risk: "corrupted-text-btree-index"
+	});
+	if (options.failOnDrift) throw new Error(`Database "${dbName}" has collation drift (stamped=${drift.stamped}, actual=${drift.actual}) and ${FAIL_ON_COLLATION_DRIFT_ENV} is set. Remediate: ${collationDriftRemediation(dbName)}`);
+	return drift;
+}
 //#endregion
-export { getDatabaseCollationDrift, refreshDatabaseCollationVersion, reindexDatabaseConcurrently };
+export { FAIL_ON_COLLATION_DRIFT_ENV, checkCollationDriftAtStartup, collationDriftRemediation, getDatabaseCollationDrift, refreshDatabaseCollationVersion, reindexDatabaseConcurrently, shouldFailOnCollationDrift };
 
 //# sourceMappingURL=db-collation.js.map

package/dist/index.d.ts

@@ -5,7 +5,7 @@ export { redactConfig, addLogsToArchive, MAX_LOG_BYTES } from './diagnostics/bun
 export { chunkBuffer, BundleChunkAssembler, ChunkRequestWaiter, FLEET_CHUNK_BYTES, type BundleChunkFrame, } from './diagnostics/bundle-chunks.js';
 export { createPool, createDb, type CreatePoolOptions, type PgPoolErrorSource } from './db.js';
 export { isPgUniqueViolation } from './pg-errors.js';
-export { parseDatabaseUrl, maskDatabaseUrl, dropAndCreateDatabase, dropDatabaseDirect, ensureDatabase, type EnsureDatabaseOpts, createDbRole, createReadOnlyDbUser, computeMigrationsHash, storeMigrationContentHash, readStoredMigrationContentHash, isSchemaCurrent, clearDispatchQueueDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, purgeScopedSecretsDirect, purgeEnvironmentsDirect, seedEnvironmentDirect, deleteEnvironmentDirect, seedEnvironmentBindingDirect, setEnvironmentPolicyDirect, listEnvironmentsDirect, showEnvironmentDirect, createEnvironmentTemplateDirect, setEnvironmentSecretDirect, listQueueDirect, showQueueEntryDirect, listExecutionRunsDirect, showExecutionRunDirect, listExecutionJobsDirect, listRegistrationsDirect, showRegistrationDirect, registerWorkflowManualDirect, resetRaftStateDirect, emitKiciEventDirect, seedGenericWebhookSourceDirect, purgeSecretBackendsDirect, apiKeyExistsDirect, seedApiKeyInlineDirect, platformConnectionExistsDirect, countWebhookSourcesByConnectionIdDirect, getWebhookSourceByRoutingKeyDirect, findAnyUserApiKeyIdDirect, seedSyntheticGithubSourceDirect, seedWebhookSecretDirect, seedSourcePrivateKeyDirect, bumpRegistryVersionDirect, pollKiciEventsDirect, waitForPostgresDirect, waitForRunCompletionDirect, cleanupExecutionRowsDirect, isSchemaCurrentFromFilesDirect, storeMigrationContentHashInTableDirect, createJoinTokenDirect, deleteJoinTokensByCreatedByDirect, updateSourceRoutingKeyDirect, prunePeerCredentialsDirect, waitForPlatformRegistrationsDirect, seedUniversalGitSourceDirect, seedCiSecurityFixturesDirect, waitForExecutionRunStatusSinceDirect, latestExecutionRunByStatusDirect, waitForLatestExecutionJobStatusDirect, describeTableColumnsDirect, tableExistsDirect, insertKiciEventRawDirect, showKiciEventDirect, listKiciEventsDirect, deleteKiciEventsDirect, insertKiciEventAtDirect, paginateUnprocessedEventsKeysetDirect, verifyKiciEventNotifyDirect, seedCrossRepoTrustDirect, listCrossRepoTrustBySourceRoutingKeyDirect, deleteCrossRepoTrustDirect, insertCrossRepoTrustStrictDirect, deleteWorkflowRegistrationsDirect, getWorkflowRegistrationByIdDirect, listRegistrationsByRoutingKeyDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, updateWorkflowRegistrationCommitShaDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, getRegistryVersionDirect, bumpRegistryVersionSimpleDirect, upsertCronLastFiredDirect, countCronLastFiredDirect, insertCronLastFiredNowDirect, deleteCronLastFiredDirect, deleteExecutionRunsByWorkflowNameDirect, getGenericWebhookSourceByRoutingKeyDirect, listActiveGenericWebhookSourcesDirect, updateGenericWebhookVerificationConfigDirect, deleteGenericWebhookSourcesByNameDirect, restoreSoftDeletedGenericWebhookSourceDirect, upsertOrgSettingsGlobalWorkflowsDirect, updateOrgSettingsDeniedReposDirect, deleteOrgSettingsByCustomerIdDirect, getExecutionRunSecurityDirect, getHeldRunByIdDirect, listHeldRunApprovalsDirect, countHeldRunsByRunIdDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForEventLogRowByDeliveryIdDirect, resolvePlatformWebhookSourceRoutingKeyDirect, ensureOrgOwnerMemberDirect, deletePeerCredentialsByInstanceIdLikeDirect, insertPeerCredentialExpiredDirect, getPeerCredentialRevokedAtDirect, listActivePeerCredentialsExcludingDirect, clearPeerCredentialsRevokedAtByIdsDirect, countActivePeerCredentialsByInstanceDirect, terminateIdleDbBackendsDirect, type ColumnInfo, type KiciEventRow, type CrossRepoTrustRow, type WorkflowRegistrationFullRow, type RegistrationsScopedResult, type LatestExecutionRunResult, type WaitForLatestJobResult, type ExecutionRunSecurityRow, type HeldRunSecurityRow, type EventLogRow as PlatformEventLogRow, type UpsertOrgSettingsOpts, type OrgSettingsRepoPatternEntry, type InsertKiciEventRawOpts, type EmitKiciEventOpts, type SeedGenericWebhookSourceOpts, REGISTERABLE_TRIGGER_TYPES, MIGRATION_HASH_TABLE, type PurgeStaleExecutionResult, type PurgeStaleSourcesResult, type SeedEnvironmentOpts, type SeedEnvironmentResult, type SeedEnvironmentBindingOpts, type SetEnvironmentPolicyOpts, type EnvironmentRow, type EnvironmentVariableRow, type EnvironmentBindingRow, type ShowEnvironmentResult, type CreateEnvironmentTemplateOpts, type SetEnvironmentSecretOpts, type DispatchQueueRow, type ListQueueOpts, type ExecutionRunRow, type ExecutionJobRow, type ListExecutionRunsOpts, type WorkflowRegistrationRow, type ListRegistrationsOpts, type ListRegistrationsResult, type ShowRegistrationResult, type RegisterWorkflowManualOpts, type RegisterWorkflowManualResult, } from './db-admin.js';
+export { parseDatabaseUrl, maskDatabaseUrl, dropAndCreateDatabase, dropDatabaseDirect, ensureDatabase, type EnsureDatabaseOpts, createDbRole, createReadOnlyDbUser, computeMigrationsHash, storeMigrationContentHash, readStoredMigrationContentHash, isSchemaCurrent, clearDispatchQueueDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, purgeScopedSecretsDirect, purgeContextsDirect, seedContextDirect, deleteContextDirect, seedContextBindingDirect, setContextPolicyDirect, listContextsDirect, showContextDirect, createContextTemplateDirect, setContextSecretDirect, listQueueDirect, showQueueEntryDirect, listExecutionRunsDirect, showExecutionRunDirect, listExecutionJobsDirect, listRegistrationsDirect, showRegistrationDirect, registerWorkflowManualDirect, resetRaftStateDirect, emitKiciEventDirect, seedGenericWebhookSourceDirect, purgeSecretBackendsDirect, apiKeyExistsDirect, seedApiKeyInlineDirect, platformConnectionExistsDirect, countWebhookSourcesByConnectionIdDirect, getWebhookSourceByRoutingKeyDirect, findAnyUserApiKeyIdDirect, seedSyntheticGithubSourceDirect, seedWebhookSecretDirect, seedSourcePrivateKeyDirect, bumpRegistryVersionDirect, pollKiciEventsDirect, waitForPostgresDirect, waitForRunCompletionDirect, cleanupExecutionRowsDirect, isSchemaCurrentFromFilesDirect, storeMigrationContentHashInTableDirect, createJoinTokenDirect, deleteJoinTokensByCreatedByDirect, updateSourceRoutingKeyDirect, prunePeerCredentialsDirect, waitForPlatformRegistrationsDirect, seedUniversalGitSourceDirect, seedCiSecurityFixturesDirect, waitForExecutionRunStatusSinceDirect, latestExecutionRunByStatusDirect, waitForLatestExecutionJobStatusDirect, describeTableColumnsDirect, tableExistsDirect, insertKiciEventRawDirect, showKiciEventDirect, listKiciEventsDirect, deleteKiciEventsDirect, insertKiciEventAtDirect, paginateUnprocessedEventsKeysetDirect, verifyKiciEventNotifyDirect, seedCrossRepoTrustDirect, listCrossRepoTrustBySourceRoutingKeyDirect, deleteCrossRepoTrustDirect, insertCrossRepoTrustStrictDirect, deleteWorkflowRegistrationsDirect, getWorkflowRegistrationByIdDirect, listRegistrationsByRoutingKeyDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, updateWorkflowRegistrationCommitShaDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, getRegistryVersionDirect, bumpRegistryVersionSimpleDirect, upsertCronLastFiredDirect, countCronLastFiredDirect, insertCronLastFiredNowDirect, deleteCronLastFiredDirect, deleteExecutionRunsByWorkflowNameDirect, getGenericWebhookSourceByRoutingKeyDirect, listActiveGenericWebhookSourcesDirect, updateGenericWebhookVerificationConfigDirect, deleteGenericWebhookSourcesByNameDirect, restoreSoftDeletedGenericWebhookSourceDirect, upsertOrgSettingsGlobalWorkflowsDirect, updateOrgSettingsDeniedReposDirect, deleteOrgSettingsByCustomerIdDirect, getExecutionRunSecurityDirect, getHeldRunByIdDirect, listHeldRunApprovalsDirect, countHeldRunsByRunIdDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForEventLogRowByDeliveryIdDirect, resolvePlatformWebhookSourceRoutingKeyDirect, ensureOrgOwnerMemberDirect, deletePeerCredentialsByInstanceIdLikeDirect, insertPeerCredentialExpiredDirect, getPeerCredentialRevokedAtDirect, listActivePeerCredentialsExcludingDirect, clearPeerCredentialsRevokedAtByIdsDirect, countActivePeerCredentialsByInstanceDirect, terminateIdleDbBackendsDirect, type ColumnInfo, type KiciEventRow, type CrossRepoTrustRow, type WorkflowRegistrationFullRow, type RegistrationsScopedResult, type LatestExecutionRunResult, type WaitForLatestJobResult, type ExecutionRunSecurityRow, type HeldRunSecurityRow, type EventLogRow as PlatformEventLogRow, type UpsertOrgSettingsOpts, type OrgSettingsRepoPatternEntry, type InsertKiciEventRawOpts, type EmitKiciEventOpts, type SeedGenericWebhookSourceOpts, REGISTERABLE_TRIGGER_TYPES, MIGRATION_HASH_TABLE, type PurgeStaleExecutionResult, type PurgeStaleSourcesResult, type SeedContextOpts, type SeedContextResult, type SeedContextBindingOpts, type SetContextPolicyOpts, type ContextRow, type ContextVariableRow, type ContextBindingRow, type ShowContextResult, type CreateContextTemplateOpts, type SetContextSecretOpts, type DispatchQueueRow, type ListQueueOpts, type ExecutionRunRow, type ExecutionJobRow, type ListExecutionRunsOpts, type WorkflowRegistrationRow, type ListRegistrationsOpts, type ListRegistrationsResult, type ShowRegistrationResult, type RegisterWorkflowManualOpts, type RegisterWorkflowManualResult, } from './db-admin.js';
 export { createMetricsRoutes, type MetricsRoutesDeps } from './routes/metrics.js';
 export { createHealthRoutes, type HealthRoutesDeps } from './routes/health.js';
 export { getReconnectDelay } from './reconnect-delay.js';

package/dist/index.js

@@ -1,6 +1,6 @@
 import "./rolldown-runtime-ClRpJifh.js";
 import { createDb, createPool } from "./db.js";
-import { MIGRATION_HASH_TABLE, REGISTERABLE_TRIGGER_TYPES, apiKeyExistsDirect, bumpRegistryVersionDirect, bumpRegistryVersionSimpleDirect, cleanupExecutionRowsDirect, clearDispatchQueueDirect, clearPeerCredentialsRevokedAtByIdsDirect, computeMigrationsHash, countActivePeerCredentialsByInstanceDirect, countCronLastFiredDirect, countHeldRunsByRunIdDirect, countWebhookSourcesByConnectionIdDirect, createDbRole, createEnvironmentTemplateDirect, createJoinTokenDirect, createReadOnlyDbUser, deleteCronLastFiredDirect, deleteCrossRepoTrustDirect, deleteEnvironmentDirect, deleteExecutionRunsByWorkflowNameDirect, deleteGenericWebhookSourcesByNameDirect, deleteJoinTokensByCreatedByDirect, deleteKiciEventsDirect, deleteOrgSettingsByCustomerIdDirect, deletePeerCredentialsByInstanceIdLikeDirect, deleteWorkflowRegistrationsDirect, describeTableColumnsDirect, dropAndCreateDatabase, dropDatabaseDirect, emitKiciEventDirect, ensureDatabase, ensureOrgOwnerMemberDirect, findAnyUserApiKeyIdDirect, getExecutionRunSecurityDirect, getGenericWebhookSourceByRoutingKeyDirect, getHeldRunByIdDirect, getPeerCredentialRevokedAtDirect, getRegistryVersionDirect, getWebhookSourceByRoutingKeyDirect, getWorkflowRegistrationByIdDirect, insertCronLastFiredNowDirect, insertCrossRepoTrustStrictDirect, insertKiciEventAtDirect, insertKiciEventRawDirect, insertPeerCredentialExpiredDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, isSchemaCurrent, isSchemaCurrentFromFilesDirect, latestExecutionRunByStatusDirect, listActiveGenericWebhookSourcesDirect, listActivePeerCredentialsExcludingDirect, listCrossRepoTrustBySourceRoutingKeyDirect, listEnvironmentsDirect, listExecutionJobsDirect, listExecutionRunsDirect, listHeldRunApprovalsDirect, listKiciEventsDirect, listQueueDirect, listRegistrationsByRoutingKeyDirect, listRegistrationsDirect, maskDatabaseUrl, paginateUnprocessedEventsKeysetDirect, parseDatabaseUrl, platformConnectionExistsDirect, pollKiciEventsDirect, prunePeerCredentialsDirect, purgeEnvironmentsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, readStoredMigrationContentHash, registerWorkflowManualDirect, resetRaftStateDirect, resolvePlatformWebhookSourceRoutingKeyDirect, restoreSoftDeletedGenericWebhookSourceDirect, seedApiKeyInlineDirect, seedCiSecurityFixturesDirect, seedCrossRepoTrustDirect, seedEnvironmentBindingDirect, seedEnvironmentDirect, seedGenericWebhookSourceDirect, seedSourcePrivateKeyDirect, seedSyntheticGithubSourceDirect, seedUniversalGitSourceDirect, seedWebhookSecretDirect, setEnvironmentPolicyDirect, setEnvironmentSecretDirect, showEnvironmentDirect, showExecutionRunDirect, showKiciEventDirect, showQueueEntryDirect, showRegistrationDirect, storeMigrationContentHash, storeMigrationContentHashInTableDirect, tableExistsDirect, terminateIdleDbBackendsDirect, updateGenericWebhookVerificationConfigDirect, updateOrgSettingsDeniedReposDirect, updateSourceRoutingKeyDirect, updateWorkflowRegistrationCommitShaDirect, upsertCronLastFiredDirect, upsertOrgSettingsGlobalWorkflowsDirect, verifyKiciEventNotifyDirect, waitForEventLogRowByDeliveryIdDirect, waitForExecutionRunStatusSinceDirect, waitForLatestExecutionJobStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformRegistrationsDirect, waitForPostgresDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, waitForRunCompletionDirect } from "./db-admin.js";
+import { MIGRATION_HASH_TABLE, REGISTERABLE_TRIGGER_TYPES, apiKeyExistsDirect, bumpRegistryVersionDirect, bumpRegistryVersionSimpleDirect, cleanupExecutionRowsDirect, clearDispatchQueueDirect, clearPeerCredentialsRevokedAtByIdsDirect, computeMigrationsHash, countActivePeerCredentialsByInstanceDirect, countCronLastFiredDirect, countHeldRunsByRunIdDirect, countWebhookSourcesByConnectionIdDirect, createContextTemplateDirect, createDbRole, createJoinTokenDirect, createReadOnlyDbUser, deleteContextDirect, deleteCronLastFiredDirect, deleteCrossRepoTrustDirect, deleteExecutionRunsByWorkflowNameDirect, deleteGenericWebhookSourcesByNameDirect, deleteJoinTokensByCreatedByDirect, deleteKiciEventsDirect, deleteOrgSettingsByCustomerIdDirect, deletePeerCredentialsByInstanceIdLikeDirect, deleteWorkflowRegistrationsDirect, describeTableColumnsDirect, dropAndCreateDatabase, dropDatabaseDirect, emitKiciEventDirect, ensureDatabase, ensureOrgOwnerMemberDirect, findAnyUserApiKeyIdDirect, getExecutionRunSecurityDirect, getGenericWebhookSourceByRoutingKeyDirect, getHeldRunByIdDirect, getPeerCredentialRevokedAtDirect, getRegistryVersionDirect, getWebhookSourceByRoutingKeyDirect, getWorkflowRegistrationByIdDirect, insertCronLastFiredNowDirect, insertCrossRepoTrustStrictDirect, insertKiciEventAtDirect, insertKiciEventRawDirect, insertPeerCredentialExpiredDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, isSchemaCurrent, isSchemaCurrentFromFilesDirect, latestExecutionRunByStatusDirect, listActiveGenericWebhookSourcesDirect, listActivePeerCredentialsExcludingDirect, listContextsDirect, listCrossRepoTrustBySourceRoutingKeyDirect, listExecutionJobsDirect, listExecutionRunsDirect, listHeldRunApprovalsDirect, listKiciEventsDirect, listQueueDirect, listRegistrationsByRoutingKeyDirect, listRegistrationsDirect, maskDatabaseUrl, paginateUnprocessedEventsKeysetDirect, parseDatabaseUrl, platformConnectionExistsDirect, pollKiciEventsDirect, prunePeerCredentialsDirect, purgeContextsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, readStoredMigrationContentHash, registerWorkflowManualDirect, resetRaftStateDirect, resolvePlatformWebhookSourceRoutingKeyDirect, restoreSoftDeletedGenericWebhookSourceDirect, seedApiKeyInlineDirect, seedCiSecurityFixturesDirect, seedContextBindingDirect, seedContextDirect, seedCrossRepoTrustDirect, seedGenericWebhookSourceDirect, seedSourcePrivateKeyDirect, seedSyntheticGithubSourceDirect, seedUniversalGitSourceDirect, seedWebhookSecretDirect, setContextPolicyDirect, setContextSecretDirect, showContextDirect, showExecutionRunDirect, showKiciEventDirect, showQueueEntryDirect, showRegistrationDirect, storeMigrationContentHash, storeMigrationContentHashInTableDirect, tableExistsDirect, terminateIdleDbBackendsDirect, updateGenericWebhookVerificationConfigDirect, updateOrgSettingsDeniedReposDirect, updateSourceRoutingKeyDirect, updateWorkflowRegistrationCommitShaDirect, upsertCronLastFiredDirect, upsertOrgSettingsGlobalWorkflowsDirect, verifyKiciEventNotifyDirect, waitForEventLogRowByDeliveryIdDirect, waitForExecutionRunStatusSinceDirect, waitForLatestExecutionJobStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformRegistrationsDirect, waitForPostgresDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, waitForRunCompletionDirect } from "./db-admin.js";
 import { setupGracefulShutdown } from "./graceful-shutdown.js";
 import { decrypt, deriveKey, encrypt, generateMasterKey } from "./secret-crypto.js";
 import { RingBuffer } from "./ring-buffer.js";
@@ -26,4 +26,4 @@ import { ChunkLru } from "./cold-store/lru.js";
 import { DEFAULT_TABLE_CONFIG, resolveTableConfig } from "./cold-store/config.js";
 import "./cold-store/index.js";
 export * from "@kici-dev/core";
-export { BaseColdStore, BundleChunkAssembler, COLD_BUCKET_NAMES, ChunkLru, ChunkRequestWaiter, DEFAULT_TABLE_CONFIG, FLEET_CHUNK_BYTES, MAX_LOG_BYTES, MIGRATION_HASH_TABLE, REGISTERABLE_TRIGGER_TYPES, RingBuffer, addLogsToArchive, apiKeyExistsDirect, bumpRegistryVersionDirect, bumpRegistryVersionSimpleDirect, chunkBuffer, chunkObjectKey, cleanupExecutionRowsDirect, clearDispatchQueueDirect, clearPeerCredentialsRevokedAtByIdsDirect, coldDaysToBucket, coldStoreArchiveBytesTotal, coldStoreArchiveCyclesTotal, coldStoreArchiveDurationSeconds, coldStoreArchiveRowsTotal, coldStorePurgeBytesTotal, coldStorePurgeChunksTotal, coldStorePurgeDurationSeconds, coldStoreRehydrateBytesTotal, coldStoreRehydrateDurationSeconds, coldStoreRehydrateRequestsTotal, coldStoreReplayDurationSeconds, coldStoreReplayRowsTotal, coldStoreVerifyFailuresTotal, collectRuntimeMetricNames, computeChunkId, computeMigrationsHash, countActivePeerCredentialsByInstanceDirect, countCronLastFiredDirect, countHeldRunsByRunIdDirect, countWebhookSourcesByConnectionIdDirect, createDb, createDbRole, createEnvironmentTemplateDirect, createHealthRoutes, createJoinTokenDirect, createMeter, createMetricsRoutes, createPool, createReadOnlyDbUser, createS3Client, decodeChunk, decrypt, deleteCronLastFiredDirect, deleteCrossRepoTrustDirect, deleteEnvironmentDirect, deleteExecutionRunsByWorkflowNameDirect, deleteGenericWebhookSourcesByNameDirect, deleteJoinTokensByCreatedByDirect, deleteKiciEventsDirect, deleteOrgSettingsByCustomerIdDirect, deletePeerCredentialsByInstanceIdLikeDirect, deleteWorkflowRegistrationsDirect, deriveKey, describeTableColumnsDirect, dropAndCreateDatabase, dropDatabaseDirect, emitKiciEventDirect, encodeChunk, encodeKeySegment, encrypt, ensureDatabase, ensureOrgOwnerMemberDirect, findAnyUserApiKeyIdDirect, generateMasterKey, getExecutionRunSecurityDirect, getGenericWebhookSourceByRoutingKeyDirect, getHeldRunByIdDirect, getPeerCredentialRevokedAtDirect, getPrometheusExporter, getReconnectDelay, getRegistryVersionDirect, getWebhookSourceByRoutingKeyDirect, getWorkflowRegistrationByIdDirect, initTelemetry, insertCronLastFiredNowDirect, insertCrossRepoTrustStrictDirect, insertKiciEventAtDirect, insertKiciEventRawDirect, insertPeerCredentialExpiredDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, isLongerColdRetention, isPgUniqueViolation, isSchemaCurrent, isSchemaCurrentFromFilesDirect, latestExecutionRunByStatusDirect, listActiveGenericWebhookSourcesDirect, listActivePeerCredentialsExcludingDirect, listCrossRepoTrustBySourceRoutingKeyDirect, listEnvironmentsDirect, listExecutionJobsDirect, listExecutionRunsDirect, listHeldRunApprovalsDirect, listKiciEventsDirect, listQueueDirect, listRegistrationsByRoutingKeyDirect, listRegistrationsDirect, maskDatabaseUrl, paginateUnprocessedEventsKeysetDirect, parseDatabaseUrl, parseManifest, platformConnectionExistsDirect, pollKiciEventsDirect, prunePeerCredentialsDirect, purgeEnvironmentsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, readStoredMigrationContentHash, redactConfig, registerWorkflowManualDirect, resetRaftStateDirect, resolvePlatformWebhookSourceRoutingKeyDirect, resolveTableConfig, restoreSoftDeletedGenericWebhookSourceDirect, seedApiKeyInlineDirect, seedCiSecurityFixturesDirect, seedCrossRepoTrustDirect, seedEnvironmentBindingDirect, seedEnvironmentDirect, seedGenericWebhookSourceDirect, seedSourcePrivateKeyDirect, seedSyntheticGithubSourceDirect, seedUniversalGitSourceDirect, seedWebhookSecretDirect, serializeManifest, setEnvironmentPolicyDirect, setEnvironmentSecretDirect, setupGracefulShutdown, showEnvironmentDirect, showExecutionRunDirect, showKiciEventDirect, showQueueEntryDirect, showRegistrationDirect, storeMigrationContentHash, storeMigrationContentHashInTableDirect, tableExistsDirect, tablePrefix, tenantDayBucketPrefix, tenantDayPrefix, terminateIdleDbBackendsDirect, updateGenericWebhookVerificationConfigDirect, updateOrgSettingsDeniedReposDirect, updateSourceRoutingKeyDirect, updateWorkflowRegistrationCommitShaDirect, upsertCronLastFiredDirect, upsertOrgSettingsGlobalWorkflowsDirect, validateRequiredTools, verifyKiciEventNotifyDirect, waitForEventLogRowByDeliveryIdDirect, waitForExecutionRunStatusSinceDirect, waitForLatestExecutionJobStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformRegistrationsDirect, waitForPostgresDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, waitForRunCompletionDirect };
+export { BaseColdStore, BundleChunkAssembler, COLD_BUCKET_NAMES, ChunkLru, ChunkRequestWaiter, DEFAULT_TABLE_CONFIG, FLEET_CHUNK_BYTES, MAX_LOG_BYTES, MIGRATION_HASH_TABLE, REGISTERABLE_TRIGGER_TYPES, RingBuffer, addLogsToArchive, apiKeyExistsDirect, bumpRegistryVersionDirect, bumpRegistryVersionSimpleDirect, chunkBuffer, chunkObjectKey, cleanupExecutionRowsDirect, clearDispatchQueueDirect, clearPeerCredentialsRevokedAtByIdsDirect, coldDaysToBucket, coldStoreArchiveBytesTotal, coldStoreArchiveCyclesTotal, coldStoreArchiveDurationSeconds, coldStoreArchiveRowsTotal, coldStorePurgeBytesTotal, coldStorePurgeChunksTotal, coldStorePurgeDurationSeconds, coldStoreRehydrateBytesTotal, coldStoreRehydrateDurationSeconds, coldStoreRehydrateRequestsTotal, coldStoreReplayDurationSeconds, coldStoreReplayRowsTotal, coldStoreVerifyFailuresTotal, collectRuntimeMetricNames, computeChunkId, computeMigrationsHash, countActivePeerCredentialsByInstanceDirect, countCronLastFiredDirect, countHeldRunsByRunIdDirect, countWebhookSourcesByConnectionIdDirect, createContextTemplateDirect, createDb, createDbRole, createHealthRoutes, createJoinTokenDirect, createMeter, createMetricsRoutes, createPool, createReadOnlyDbUser, createS3Client, decodeChunk, decrypt, deleteContextDirect, deleteCronLastFiredDirect, deleteCrossRepoTrustDirect, deleteExecutionRunsByWorkflowNameDirect, deleteGenericWebhookSourcesByNameDirect, deleteJoinTokensByCreatedByDirect, deleteKiciEventsDirect, deleteOrgSettingsByCustomerIdDirect, deletePeerCredentialsByInstanceIdLikeDirect, deleteWorkflowRegistrationsDirect, deriveKey, describeTableColumnsDirect, dropAndCreateDatabase, dropDatabaseDirect, emitKiciEventDirect, encodeChunk, encodeKeySegment, encrypt, ensureDatabase, ensureOrgOwnerMemberDirect, findAnyUserApiKeyIdDirect, generateMasterKey, getExecutionRunSecurityDirect, getGenericWebhookSourceByRoutingKeyDirect, getHeldRunByIdDirect, getPeerCredentialRevokedAtDirect, getPrometheusExporter, getReconnectDelay, getRegistryVersionDirect, getWebhookSourceByRoutingKeyDirect, getWorkflowRegistrationByIdDirect, initTelemetry, insertCronLastFiredNowDirect, insertCrossRepoTrustStrictDirect, insertKiciEventAtDirect, insertKiciEventRawDirect, insertPeerCredentialExpiredDirect, insertWorkflowRegistrationRawDirect, insertWorkflowRegistrationStrictDirect, isLongerColdRetention, isPgUniqueViolation, isSchemaCurrent, isSchemaCurrentFromFilesDirect, latestExecutionRunByStatusDirect, listActiveGenericWebhookSourcesDirect, listActivePeerCredentialsExcludingDirect, listContextsDirect, listCrossRepoTrustBySourceRoutingKeyDirect, listExecutionJobsDirect, listExecutionRunsDirect, listHeldRunApprovalsDirect, listKiciEventsDirect, listQueueDirect, listRegistrationsByRoutingKeyDirect, listRegistrationsDirect, maskDatabaseUrl, paginateUnprocessedEventsKeysetDirect, parseDatabaseUrl, parseManifest, platformConnectionExistsDirect, pollKiciEventsDirect, prunePeerCredentialsDirect, purgeContextsDirect, purgeScopedSecretsDirect, purgeSecretBackendsDirect, purgeStaleExecutionDirect, purgeStaleSourcesDirect, readStoredMigrationContentHash, redactConfig, registerWorkflowManualDirect, resetRaftStateDirect, resolvePlatformWebhookSourceRoutingKeyDirect, resolveTableConfig, restoreSoftDeletedGenericWebhookSourceDirect, seedApiKeyInlineDirect, seedCiSecurityFixturesDirect, seedContextBindingDirect, seedContextDirect, seedCrossRepoTrustDirect, seedGenericWebhookSourceDirect, seedSourcePrivateKeyDirect, seedSyntheticGithubSourceDirect, seedUniversalGitSourceDirect, seedWebhookSecretDirect, serializeManifest, setContextPolicyDirect, setContextSecretDirect, setupGracefulShutdown, showContextDirect, showExecutionRunDirect, showKiciEventDirect, showQueueEntryDirect, showRegistrationDirect, storeMigrationContentHash, storeMigrationContentHashInTableDirect, tableExistsDirect, tablePrefix, tenantDayBucketPrefix, tenantDayPrefix, terminateIdleDbBackendsDirect, updateGenericWebhookVerificationConfigDirect, updateOrgSettingsDeniedReposDirect, updateSourceRoutingKeyDirect, updateWorkflowRegistrationCommitShaDirect, upsertCronLastFiredDirect, upsertOrgSettingsGlobalWorkflowsDirect, validateRequiredTools, verifyKiciEventNotifyDirect, waitForEventLogRowByDeliveryIdDirect, waitForExecutionRunStatusSinceDirect, waitForLatestExecutionJobStatusDirect, waitForPlatformEventLogDistinctRoutedDirect, waitForPlatformExecutionRunStatusDirect, waitForPlatformRegistrationsDirect, waitForPostgresDirect, waitForRegistrationsByRoutingKeyDirect, waitForRegistrationsUpdatedAtAdvanceDirect, waitForRunCompletionDirect };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/shared",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
   "keywords": [
     "ci",
@@ -105,7 +105,7 @@
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
     "zx": "^8.8.5",
-    "@kici-dev/core": "0.1.26"
+    "@kici-dev/core": "0.1.27"
   },
   "devDependencies": {
     "@opentelemetry/sdk-trace-base": "^2.7.1",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/shared@0.1.26",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fshared/0.1.26/d99e3d57-fa38-4d0a-b1d9-e16cb8b34870",
+  "name": "@kici-dev/shared@0.1.27",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fshared/0.1.27/2cfd2811-2ab7-4669-81dd-baa01f6bc285",
   "creationInfo": {
-    "created": "2026-07-06T04:29:33Z",
+    "created": "2026-07-10T06:03:45Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -696,9 +696,9 @@
       "homepage": "https://js-sdsl.org"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.27",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.26",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -709,7 +709,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.26"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.27"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
@@ -718,7 +718,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.26",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -729,7 +729,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.26"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.27"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -5202,32 +5202,32 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -5238,7 +5238,7 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {