@kici-dev/agent 0.1.16 → 0.1.18

package/dist/ws/orchestrator-client.d.ts

@@ -1,5 +1,5 @@
 import { type AgentToOrchestratorMessage, type JobDispatch, type JobCancel, type FleetLogsRequest } from '@kici-dev/engine';
-import type { CacheRequestIpc, CacheResponseIpc, StepApprovalRequestIpc, StepApprovalResolvedIpc } from '../execution/sandbox/index.js';
+import type { CacheRequestIpc, CacheResponseIpc, ProvenanceRequestIpc, ProvenanceResponseIpc, StepApprovalRequestIpc, StepApprovalResolvedIpc } from '../execution/sandbox/index.js';
 export type ConnectionState = 'disconnected' | 'connecting' | 'authenticating' | 'registering' | 'registered';
 export interface OrchestratorClientOptions {
     /** WebSocket URL of the orchestrator. */
@@ -186,6 +186,14 @@ export declare class OrchestratorClient {
         arch: string;
         depsHash?: string;
     }): void;
+    /**
+     * Request a presigned PUT URL for a provenance bundle. Sends a
+     * `provenance.upload.request` and waits for a `provenance.upload.response`
+     * (resolved via the shared upload-request pending map). Times out after 30s.
+     */
+    requestProvenanceUploadUrl(jobId: string, subjectDigest: string): Promise<string>;
+    /** Notify the orchestrator a provenance bundle upload completed (records an attestations row). */
+    sendProvenanceUploadComplete(jobId: string, subjectName: string, subjectDigest: string, mediaType: string): void;
     /**
      * Send an event.emit WS message to the orchestrator and await the response.
      *
@@ -228,6 +236,13 @@ export declare class OrchestratorClient {
      * Times out after 30 seconds for the round-trip ops.
      */
     requestUserCache(jobId: string, request: CacheRequestIpc): Promise<CacheResponseIpc>;
+    /**
+     * Relay a provenance bundle upload operation to the orchestrator. Maps the
+     * IPC `provenance.request` onto `requestProvenanceUploadUrl` (returns the
+     * presigned URL) or `sendProvenanceUploadComplete` (fire-and-forget) and
+     * returns the result on the IPC response shape.
+     */
+    relayProvenance(jobId: string, request: ProvenanceRequestIpc): Promise<ProvenanceResponseIpc>;
     /**
      * Relay a step-level approval request to the orchestrator. Sends a
      * `step.approval-request` WS message and resolves with the orchestrator's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/agent",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
   "keywords": [
     "ci",
@@ -53,19 +53,21 @@
     }
   },
   "dependencies": {
-    "@hono/node-server": "^2.0.0",
-    "archiver": "^7.0.1",
+    "@hono/node-server": "^2.0.4",
+    "archiver": "^8.0.0",
     "dockerode": "^5.0.0",
-    "hono": "^4.12.18",
-    "tar": "^7.5.13",
+    "hono": "^4.12.25",
+    "jose": "^6.1.0",
+    "tar": "^7.5.16",
     "winston": "^3.19.0",
-    "ws": "^8.20.0",
-    "zod": "^4.3.6",
+    "ws": "^8.21.0",
+    "yaml": "^2.9.0",
+    "zod": "^4.4.3",
     "zx": "^8.8.5",
-    "@kici-dev/core": "0.1.16",
-    "@kici-dev/engine": "0.1.16",
-    "@kici-dev/shared": "0.1.16",
-    "@kici-dev/sdk": "0.1.16"
+    "@kici-dev/core": "0.1.18",
+    "@kici-dev/sdk": "0.1.18",
+    "@kici-dev/engine": "0.1.18",
+    "@kici-dev/shared": "0.1.18"
   },
   "kici": {
     "metrics": {
@@ -74,7 +76,7 @@
     }
   },
   "devDependencies": {
-    "@types/archiver": "^7.0.0",
+    "@types/archiver": "^8.0.0",
     "@types/dockerode": "^4.0.1"
   },
   "scripts": {