@kici-dev/agent 0.1.16 → 0.1.17

package/dist/ws/orchestrator-client.d.ts

@@ -1,5 +1,5 @@
 import { type AgentToOrchestratorMessage, type JobDispatch, type JobCancel, type FleetLogsRequest } from '@kici-dev/engine';
-import type { CacheRequestIpc, CacheResponseIpc, StepApprovalRequestIpc, StepApprovalResolvedIpc } from '../execution/sandbox/index.js';
+import type { CacheRequestIpc, CacheResponseIpc, ProvenanceRequestIpc, ProvenanceResponseIpc, StepApprovalRequestIpc, StepApprovalResolvedIpc } from '../execution/sandbox/index.js';
 export type ConnectionState = 'disconnected' | 'connecting' | 'authenticating' | 'registering' | 'registered';
 export interface OrchestratorClientOptions {
     /** WebSocket URL of the orchestrator. */
@@ -186,6 +186,14 @@ export declare class OrchestratorClient {
         arch: string;
         depsHash?: string;
     }): void;
+    /**
+     * Request a presigned PUT URL for a provenance bundle. Sends a
+     * `provenance.upload.request` and waits for a `provenance.upload.response`
+     * (resolved via the shared upload-request pending map). Times out after 30s.
+     */
+    requestProvenanceUploadUrl(jobId: string, subjectDigest: string): Promise<string>;
+    /** Notify the orchestrator a provenance bundle upload completed (records an attestations row). */
+    sendProvenanceUploadComplete(jobId: string, subjectName: string, subjectDigest: string, mediaType: string): void;
     /**
      * Send an event.emit WS message to the orchestrator and await the response.
      *
@@ -228,6 +236,13 @@ export declare class OrchestratorClient {
      * Times out after 30 seconds for the round-trip ops.
      */
     requestUserCache(jobId: string, request: CacheRequestIpc): Promise<CacheResponseIpc>;
+    /**
+     * Relay a provenance bundle upload operation to the orchestrator. Maps the
+     * IPC `provenance.request` onto `requestProvenanceUploadUrl` (returns the
+     * presigned URL) or `sendProvenanceUploadComplete` (fire-and-forget) and
+     * returns the result on the IPC response shape.
+     */
+    relayProvenance(jobId: string, request: ProvenanceRequestIpc): Promise<ProvenanceResponseIpc>;
     /**
      * Relay a step-level approval request to the orchestrator. Sends a
      * `step.approval-request` WS message and resolves with the orchestrator's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/agent",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
   "keywords": [
     "ci",
@@ -57,15 +57,16 @@
     "archiver": "^7.0.1",
     "dockerode": "^5.0.0",
     "hono": "^4.12.18",
+    "jose": "^6.1.0",
     "tar": "^7.5.13",
     "winston": "^3.19.0",
     "ws": "^8.20.0",
     "zod": "^4.3.6",
     "zx": "^8.8.5",
-    "@kici-dev/core": "0.1.16",
-    "@kici-dev/engine": "0.1.16",
-    "@kici-dev/shared": "0.1.16",
-    "@kici-dev/sdk": "0.1.16"
+    "@kici-dev/core": "0.1.17",
+    "@kici-dev/sdk": "0.1.17",
+    "@kici-dev/shared": "0.1.17",
+    "@kici-dev/engine": "0.1.17"
   },
   "kici": {
     "metrics": {

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/agent@0.1.16",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.16/e99cba99-0bd9-4ecd-9d6b-4e6ae321ff15",
+  "name": "@kici-dev/agent@0.1.17",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.17/ce302b86-3bf1-4fc3-a35a-a73134925ccc",
   "creationInfo": {
-    "created": "2026-06-12T09:42:04Z",
+    "created": "2026-06-14T12:30:50Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -1084,7 +1084,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/agent",
-      "versionInfo": "0.1.16",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1095,16 +1095,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.16"
+          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.17"
         }
       ],
       "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.17",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.16",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1115,16 +1115,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.16"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.17"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.16",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.17",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.16",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1135,16 +1135,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.16"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.17"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.16",
+      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "name": "@kici-dev/sdk",
-      "versionInfo": "0.1.16",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1155,16 +1155,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.16"
+          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.17"
         }
       ],
       "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.16",
+      "versionInfo": "0.1.17",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1175,7 +1175,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.16"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.17"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -4986,6 +4986,26 @@
       ],
       "description": "A very strict and proper argument parser."
     },
+    {
+      "SPDXID": "SPDXRef-Package-jose-6.2.3",
+      "name": "jose",
+      "versionInfo": "6.2.3",
+      "downloadLocation": "https://registry.npmjs.org/jose/-/jose-6.2.3.tgz",
+      "filesAnalyzed": false,
+      "licenseConcluded": "NOASSERTION",
+      "licenseDeclared": "MIT",
+      "copyrightText": "NOASSERTION",
+      "supplier": "NOASSERTION",
+      "externalRefs": [
+        {
+          "referenceCategory": "PACKAGE-MANAGER",
+          "referenceType": "purl",
+          "referenceLocator": "pkg:npm/jose@6.2.3"
+        }
+      ],
+      "description": "JWA, JWS, JWE, JWT, JWK, JWKS for Node.js, Browser, Cloudflare Workers, Deno, Bun, and other Web-interoperable runtimes",
+      "homepage": "https://github.com/panva/jose"
+    },
     {
       "SPDXID": "SPDXRef-Package-jsep-1.4.0",
       "name": "jsep",
@@ -8768,22 +8788,22 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.16",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.16",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -8801,6 +8821,11 @@
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.18",
       "relationshipType": "DEPENDS_ON"
     },
+    {
+      "spdxElementId": "SPDXRef-RootPackage",
+      "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
+      "relationshipType": "DEPENDS_ON"
+    },
     {
       "spdxElementId": "SPDXRef-RootPackage",
       "relatedSpdxElement": "SPDXRef-Package-tar-7.5.13",
@@ -8827,187 +8852,192 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.128.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.16",
-      "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-fast-cartesian-9.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.16",
-      "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.16",
-      "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.16",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.16",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.16",
-      "relatedSpdxElement": "SPDXRef-Package-fast-cartesian-9.0.1",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.17",
+      "relationshipType": "DEPENDS_ON"
+    },
+    {
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-micromatch-4.0.8",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1038.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.17",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.28.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.217.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.40.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-archiver-7.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-diff-7.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.18",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.128.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.20.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.8.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.3.6",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.16",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.17",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },