@kici-dev/agent 0.1.22 → 0.1.23

package/dist/bootstrap/api-intercept.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Agent-process interception of the bootstrap bring-up API methods.
+ *
+ * `ctx.kici.bootstrap.ensureInitRunner` / `preBootSend` are relayed from the
+ * workflow sandbox as `agent.api.request` IPC. The agent process intercepts
+ * those two methods HERE (rather than relaying them straight to the
+ * orchestrator) so the SSH transport — and the bring-up key / bootstrap token
+ * the orchestrator hands back — stay in the agent process, never reaching user
+ * workflow code. Every other method falls through to the orchestrator relay
+ * unchanged.
+ */
+import { type ApiTransport, type EnsureInitRunnerDeps } from './ensure-init-runner.js';
+/**
+ * Wrap the orchestrator API transport so the two bootstrap methods are handled
+ * in-process (SSH transport here; privileged resolve relayed to the
+ * orchestrator). `relay` is the raw orchestrator transport (the WS
+ * `sendApiRequest`).
+ */
+export declare function withBootstrapInterception(relay: ApiTransport, deps?: EnsureInitRunnerDeps): (method: string, params?: Record<string, unknown>) => Promise<unknown>;
+//# sourceMappingURL=api-intercept.d.ts.map

package/dist/bootstrap/ensure-init-runner.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Agent-side init-runner bring-up.
+ *
+ * Runs in the AGENT process (never the workflow sandbox), so the bring-up SSH
+ * key and bootstrap token the orchestrator hands back never reach user
+ * workflow code. The flow:
+ *
+ *   1. Call the orchestrator's privileged `kici.ensureInitRunner` handler — it
+ *      gates on this agent's `kici:capability:ssh-transport` capability,
+ *      resolves the target's reach + SSH key, mints a single-use bootstrap
+ *      token, audits, and returns the material (or `{ broughtUp: false }` when
+ *      the target already has a live agent).
+ *   2. Over SSH (ephemeral key, never on disk): drop a launcher onto the target
+ *      that starts `kici-agent` with the bootstrap env (token + agent id +
+ *      orchestrator URL + labels), and start it detached.
+ *
+ * The init-runner then connects → `auth.request` (bootstrap token) →
+ * `agent.register` auto-enroll as a temporary `kici:init` agent.
+ */
+import { type SshDeps } from './ssh-exec.js';
+/** Transport that relays an API request to the orchestrator and awaits the result. */
+export type ApiTransport = (method: string, params: Record<string, unknown>) => Promise<unknown>;
+export interface EnsureInitRunnerDeps extends SshDeps {
+    /**
+     * The command used to start the init-runner on the target. Defaults to
+     * `kici-agent` (resolved on the target's PATH). Override for a rescue env
+     * that stages the binary at a fixed path.
+     */
+    agentCommand?: string;
+}
+/**
+ * Bring up a temporary init-runner on `targetAgentId`. Returns `{ broughtUp }`:
+ * false when the target already had a live agent (the orchestrator no-op'd),
+ * true when this call dropped + started the init-runner.
+ */
+export declare function ensureInitRunner(transport: ApiTransport, targetAgentId: string, deps?: EnsureInitRunnerDeps): Promise<{
+    broughtUp: boolean;
+}>;
+//# sourceMappingURL=ensure-init-runner.d.ts.map

package/dist/bootstrap/pre-boot-send.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Agent-side pre-boot input send (dropbear / initramfs unlock).
+ *
+ * Runs in the AGENT process. Asks the orchestrator's privileged
+ * `kici.preBootSend` handler to gate on the `kici:capability:ssh-transport`
+ * capability, resolve the input secret (e.g. a LUKS passphrase), and audit;
+ * then pipes the resolved input to the target's pre-boot SSH endpoint
+ * (default dropbear port 2222, forced `cryptroot-unlock`). The unlock drops
+ * the session as the box boots — success is the send completing, not the SSH
+ * exit code; the caller composes a host-alive wait to confirm boot.
+ */
+import { type SshDeps } from './ssh-exec.js';
+import type { ApiTransport } from './ensure-init-runner.js';
+export interface PreBootSendOpts {
+    inputSecret: string;
+    port?: number;
+    command?: string;
+}
+/**
+ * Ship a pre-boot input to the target's dropbear/initramfs SSH channel. The
+ * input plaintext is resolved server-side and never logged. Resolves once the
+ * send completes (the SSH session legitimately drops as the box boots).
+ */
+export declare function preBootSend(transport: ApiTransport, targetAgentId: string, opts: PreBootSendOpts, deps?: SshDeps): Promise<void>;
+//# sourceMappingURL=pre-boot-send.d.ts.map

package/dist/bootstrap/reach.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Agent-facing host reach metadata: how to SSH to a target for bootstrap.
+ *
+ * This is the subset the agent's SSH helper needs — the connection
+ * coordinates only. It deliberately does NOT carry the `sshKeySecret` ref:
+ * the orchestrator resolves the scoped secret server-side and hands the agent
+ * the already-resolved private key separately, so the secret ref never reaches
+ * the agent. `sshPort` is the OS-sshd port for bring-up; a pre-boot dropbear
+ * port is supplied per-call via `SshExecOpts.port`.
+ */
+export interface HostReach {
+    agentId: string;
+    address: string | null;
+    sshUser: string | null;
+    sshPort: number | null;
+}
+//# sourceMappingURL=reach.d.ts.map

package/dist/bootstrap/ssh-exec.d.ts

@@ -0,0 +1,58 @@
+import type { HostReach } from './reach.js';
+/** Host-key verification mode for the SSH connection. */
+export type SshHostKeyMode = 'accept-new' | 'strict';
+/** Result of an SSH invocation: exit code is reported, never thrown away. */
+export interface SshResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export interface SshExecOpts {
+    /** Piped to the remote command's stdin (e.g. a LUKS passphrase to cryptroot-unlock). */
+    stdin?: string;
+    /** Override the default SSH port (22). E.g. 2222 for a dropbear initramfs prompt. */
+    port?: number;
+    /**
+     * Host-key verification. Defaults to `accept-new` — the dropbear initramfs
+     * host key differs from the OS sshd key, so a pinned OS entry must not be
+     * reused. `strict` enforces a known_hosts match.
+     */
+    hostKeyMode?: SshHostKeyMode;
+}
+/**
+ * Low-level process spawn boundary, injectable so unit tests can assert the
+ * exact argv / env / stdin without running a real `ssh`. Mirrors the relevant
+ * subset of `child_process.spawn`'s contract.
+ */
+export interface SpawnFn {
+    (command: string, args: string[], opts: {
+        env: NodeJS.ProcessEnv;
+        stdin?: string;
+    }): Promise<SshResult>;
+}
+/** Default spawn boundary backed by `node:child_process.spawn`. */
+export declare const defaultSpawn: SpawnFn;
+/** Deps for the SSH helper — the spawn boundary is injectable for tests. */
+export interface SshDeps {
+    spawnFn?: SpawnFn;
+}
+/**
+ * Run a command on the target over SSH using an ephemeral, in-memory key.
+ *
+ * The key is loaded into a per-call ssh-agent (never written to disk) and the
+ * agent is killed in `finally`. The remote command's exit code / stdout /
+ * stderr are returned verbatim — a non-zero exit is reported, not swallowed
+ * (a pre-boot unlock legitimately drops the session, so the caller decides
+ * what a "success" looks like).
+ */
+export declare function sshExec(reach: HostReach, privateKey: string, command: string, opts?: SshExecOpts, deps?: SshDeps): Promise<SshResult>;
+/**
+ * Ship local bytes to a remote path over SSH (`ssh 'cat > path'`), using the
+ * same ephemeral-key discipline. Throws on a non-zero exit (a push must
+ * succeed end-to-end, unlike a pre-boot unlock).
+ */
+export declare function sshPush(reach: HostReach, privateKey: string, localBytes: string, remotePath: string, opts?: {
+    port?: number;
+    hostKeyMode?: SshHostKeyMode;
+}, deps?: SshDeps): Promise<void>;
+//# sourceMappingURL=ssh-exec.d.ts.map

package/dist/execution/job-runner.d.ts

@@ -215,6 +215,18 @@ export declare class JobRunner {
      * failure diagnostics, and send the terminal `job.status` message.
      */
     private reportExecutionResult;
+    /**
+     * Handle a bring-up job: bring up a temporary init-runner on a declared-but-
+     * un-agented host over SSH (fresh-box bootstrap convergence). The orchestrator
+     * dispatches this synthetic `__bringup__` job to an agent holding the
+     * `kici:capability:ssh-transport` capability; here we run the agent-side
+     * `ensureInitRunner` helper (the privileged resolve is relayed to the
+     * orchestrator, the SSH transport happens in this agent process — never
+     * reaching workflow code). No clone, no sandbox — the init-runner then
+     * connects under the target's agent id and the orchestrator's pinned-hold
+     * drains the target's bootstrap steps onto it.
+     */
+    private handleBringupJob;
     /**
      * Handle a build-only job.
      *

package/dist/execution/rule-evaluator.d.ts

@@ -1,11 +1,13 @@
-import type { RuleContext } from '@kici-dev/sdk';
+import type { RuleContext, FanoutPosition } from '@kici-dev/sdk';
 /**
  * Create RuleContext for agent-side rule evaluation.
  *
  * @param event - Event payload from the dispatch message
  * @param changedFiles - List of files changed in this event
  * @param env - Merged environment variables
+ * @param dispatchInputs - Operator dispatch inputs (`ctx.dispatchInputs`)
+ * @param fanout - Fan-out position (`ctx.fanout`); undefined on a non-fan-out job
  */
-export declare function createRuleContext(event: Record<string, unknown>, changedFiles?: string[], env?: Record<string, string | undefined>): RuleContext;
+export declare function createRuleContext(event: Record<string, unknown>, changedFiles?: string[], env?: Record<string, string | undefined>, dispatchInputs?: Readonly<Record<string, string | number | boolean | null>>, fanout?: FanoutPosition): RuleContext;
 export { evaluateRules, type RuleEvaluationResult } from '@kici-dev/sdk';
 //# sourceMappingURL=rule-evaluator.d.ts.map

package/dist/execution/sandbox/ipc-protocol.d.ts

@@ -410,6 +410,20 @@ export interface JobExecutionRequest {
         platform?: string;
         arch?: string;
     };
+    /**
+     * Operator-supplied, validated + coerced + defaulted workflow-dispatch inputs
+     * (from `kici run --input`), exposed to steps + rules as `ctx.dispatchInputs`.
+     * Absent for webhook runs.
+     */
+    dispatchInputs?: Record<string, unknown>;
+    /**
+     * For a fan-out child (`runsOnAll` host or matrix combination): the 0-based
+     * deterministic position in the fan-out, assembled into `ctx.fanout`. Absent
+     * for non-fan-out jobs.
+     */
+    fanoutIndex?: number;
+    /** For a fan-out child: the number of children in this fan-out. */
+    fanoutTotal?: number;
     /** Secrets to merge into step environment (highest precedence). */
     secrets?: Record<string, string>;
     /** Namespaced secrets by context name for ctx.secrets['context-name'].KEY access. */

package/dist/execution/sandbox/step-loop.d.ts

@@ -5,7 +5,7 @@
  * Extracted for testability: the workflow-runner's main() handles IPC, clone, deps,
  * module loading, and calls this loop for step execution with hooks.
  */
-import type { Step, StepContext, HookInput, OutputsMap, StepSecretMountRecord } from '@kici-dev/sdk';
+import type { Step, StepContext, HookInput, OutputsMap, StepSecretMountRecord, FanoutPosition } from '@kici-dev/sdk';
 import { CheckMode } from '@kici-dev/engine';
 import type { RunnerToAgentMessage } from './ipc-protocol.js';
 import type { SandboxStepResult } from './types.js';
@@ -36,6 +36,10 @@ export interface StepLoopOptions {
     event: Record<string, unknown>;
     /** Environment variables for rule context. */
     env: Record<string, string | undefined>;
+    /** Operator dispatch inputs for the rule context (`ctx.dispatchInputs`). */
+    dispatchInputs?: Readonly<Record<string, string | number | boolean | null>>;
+    /** Fan-out position for the rule context (`ctx.fanout`); undefined on a non-fan-out job. */
+    fanout?: FanoutPosition;
     /** Job-level hooks. */
     jobHooks?: JobHooks;
     /**

package/dist/execution/sandbox/workflow-runner.d.ts

@@ -15,7 +15,7 @@
  */
 import { ExecutionJobStatus } from '@kici-dev/engine';
 import type { StepContext } from '@kici-dev/sdk';
-import type { NeedsContext } from '@kici-dev/sdk';
+import type { NeedsContext, FanoutPosition } from '@kici-dev/sdk';
 import type { OutputsMap, StepRefMap, TrackedStepSecrets } from '@kici-dev/sdk';
 import type { RunnerToAgentMessage, JobExecutionRequest } from './ipc-protocol.js';
 import { LogMasker } from './log-masker.js';
@@ -36,6 +36,12 @@ export declare function buildStepNeedsContext(declaredNeeds: readonly unknown[]
  * inside this process with full shell access.
  */
 export declare function createSandboxStepContext(workDir: string, stepIndex: number, stepName: string, request: JobExecutionRequest, maskedSendFn: (msg: RunnerToAgentMessage) => void, outputsMap: OutputsMap, refMap: StepRefMap, operatorSecretKeys: Set<string>, secretOutputs: Map<string, string>, jobOutputsMap: OutputsMap, secrets: TrackedStepSecrets, masker: LogMasker): StepContext;
+/**
+ * Derive the fan-out position (`ctx.fanout`) from a dispatch request. Returns
+ * `undefined` for a non-fan-out job (no `fanoutTotal`), so `ctx.fanout` is only
+ * set for `runsOnAll` host children and matrix combinations.
+ */
+export declare function deriveFanout(request: JobExecutionRequest): FanoutPosition | undefined;
 /** Raw provider webhook body for ctx.rawPayload — nested in the envelope. */
 export declare function rawPayloadFromEvent(event: Record<string, unknown> | undefined): Record<string, unknown> | undefined;
 //# sourceMappingURL=workflow-runner.d.ts.map

package/dist/server.js

@@ -1310,14 +1310,14 @@ var init_console_capture = __esmMin((() => {
 init_console_capture();
 function safe(name, fallback = "unknown") {
 	switch (name) {
-		case "version": return "0.1.22";
-		case "buildCommit": return "5afd16303";
-		case "sdkVersion": return "0.1.22";
-		case "sdkBundleHash": return "4b26a42978f77e29db110d47523ec947d3d673c3109fc48141c1a62814bde7a1";
-		case "sharedVersion": return "0.1.22";
+		case "version": return "0.1.23";
+		case "buildCommit": return "4465935bb";
+		case "sdkVersion": return "0.1.23";
+		case "sdkBundleHash": return "3a83610d2d122b9f9b0f924b225a47050d0b35f00a8f3256a3e15f3ff3bf7ddc";
+		case "sharedVersion": return "0.1.23";
 		case "sharedBundleHash": return "991385c024392c395d3eb8a68946ef8ed3fcba96f2652f21c3164a54eafa1b1b";
-		case "engineVersion": return "0.1.22";
-		case "engineBundleHash": return "ff74a3afb2b1db2870c03d47543642f64d04b660bebdcde6681f76d874f26757";
+		case "engineVersion": return "0.1.23";
+		case "engineBundleHash": return "4a0566c709180a6a8744ff3281640e596b8e661ddceb81327cd37d232d9768d5";
 		default: return fallback;
 	}
 }
@@ -2080,8 +2080,8 @@ async function extractStepsFromDynamicJob(workflow, dynamicIndex, jobName, event
 }
 var AGENT_SDK_VERSION, AGENT_SDK_BUNDLE_HASH, hookRegistered;
 var init_workflow_loader = __esmMin((() => {
-	AGENT_SDK_VERSION = "0.1.22";
-	AGENT_SDK_BUNDLE_HASH = "4b26a42978f77e29db110d47523ec947d3d673c3109fc48141c1a62814bde7a1";
+	AGENT_SDK_VERSION = "0.1.23";
+	AGENT_SDK_BUNDLE_HASH = "3a83610d2d122b9f9b0f924b225a47050d0b35f00a8f3256a3e15f3ff3bf7ddc";
 	hookRegistered = false;
 }));
 //#endregion
@@ -2566,6 +2566,274 @@ var init_init_runner = __esmMin((() => {
 	init_timeout_util();
 }));
 //#endregion
+//#region src/bootstrap/ssh-exec.ts
+/**
+* Agent-side SSH helper for bootstrap bring-up.
+*
+* Lifts the discipline from `infra/prod/hw/ssh.sh` + the deploy-prod
+* `runOnBox` helper into the agent: the bring-up private key is piped into an
+* **ephemeral ssh-agent** (`ssh-add -` reads it from stdin) and the agent is
+* torn down in a `finally`, so the key never lands on disk and never enters a
+* long-lived process environment. The agent only holds the key for the
+* lifetime of the one `ssh` / `scp` invocation.
+*
+* `sshExec` runs a remote command; `sshPush` ships local bytes to a remote
+* path (`ssh 'cat > path'`). Both accept a resolved private key string
+* (supplied by the caller — the orchestrator resolves the scoped secret and
+* hands the key down). `sshExec` supports `{ stdin, port, hostKeyMode }` so it
+* can also drive a pre-boot dropbear / initramfs prompt (a forced-command
+* endpoint such as `cryptroot-unlock` on port 2222, which accepts the unlock
+* input on stdin and uses a transient host key distinct from the OS sshd key).
+*/
+/** Common `-o` flags every bootstrap SSH connection carries. */
+function baseSshOptions(hostKeyMode) {
+	return [
+		"-o",
+		`StrictHostKeyChecking=${HOST_KEY_FLAG[hostKeyMode]}`,
+		"-o",
+		"ConnectTimeout=10",
+		"-o",
+		"BatchMode=yes"
+	];
+}
+/** Resolve the `user@address` target + port from reach metadata. */
+function resolveTarget(reach, portOverride) {
+	if (!reach.address) throw new Error(`host ${reach.agentId} has no SSH reach address declared`);
+	const user = reach.sshUser ?? SSH_USER_DEFAULT;
+	const port = portOverride ?? reach.sshPort ?? SSH_PORT_DEFAULT;
+	return {
+		dest: `${user}@${reach.address}`,
+		port
+	};
+}
+/**
+* Run a command on the target over SSH using an ephemeral, in-memory key.
+*
+* The key is loaded into a per-call ssh-agent (never written to disk) and the
+* agent is killed in `finally`. The remote command's exit code / stdout /
+* stderr are returned verbatim — a non-zero exit is reported, not swallowed
+* (a pre-boot unlock legitimately drops the session, so the caller decides
+* what a "success" looks like).
+*/
+async function sshExec(reach, privateKey, command, opts = {}, deps = {}) {
+	const spawnFn = deps.spawnFn ?? defaultSpawn;
+	const hostKeyMode = opts.hostKeyMode ?? "accept-new";
+	const { dest, port } = resolveTarget(reach, opts.port);
+	return withEphemeralAgent(privateKey, spawnFn, async (env) => {
+		return spawnFn("ssh", [
+			...baseSshOptions(hostKeyMode),
+			"-p",
+			String(port),
+			dest,
+			command
+		], {
+			env,
+			stdin: opts.stdin
+		});
+	});
+}
+/**
+* Ship local bytes to a remote path over SSH (`ssh 'cat > path'`), using the
+* same ephemeral-key discipline. Throws on a non-zero exit (a push must
+* succeed end-to-end, unlike a pre-boot unlock).
+*/
+async function sshPush(reach, privateKey, localBytes, remotePath, opts = {}, deps = {}) {
+	const spawnFn = deps.spawnFn ?? defaultSpawn;
+	const hostKeyMode = opts.hostKeyMode ?? "accept-new";
+	const { dest, port } = resolveTarget(reach, opts.port);
+	const result = await withEphemeralAgent(privateKey, spawnFn, async (env) => {
+		return spawnFn("ssh", [
+			...baseSshOptions(hostKeyMode),
+			"-p",
+			String(port),
+			dest,
+			`cat > '${remotePath.replace(/'/g, `'\\''`)}'`
+		], {
+			env,
+			stdin: localBytes
+		});
+	});
+	if (result.exitCode !== 0) throw new Error(`sshPush(${reach.agentId}:${remotePath}): exit ${result.exitCode}${result.stderr ? `\n${result.stderr}` : ""}`);
+}
+/**
+* Start a per-call ephemeral ssh-agent, load the key via stdin (never a file),
+* run `body` with `SSH_AUTH_SOCK` in env, and kill the agent in `finally`.
+*/
+async function withEphemeralAgent(privateKey, spawnFn, body) {
+	const baseEnv = { ...process.env };
+	const start = await spawnFn("ssh-agent", ["-s"], { env: baseEnv });
+	if (start.exitCode !== 0) throw new Error(`ssh-agent start failed: exit ${start.exitCode}\n${start.stderr}`);
+	const sock = parseAgentSocket(start.stdout);
+	const pid = parseAgentPid(start.stdout);
+	const agentEnv = {
+		...baseEnv,
+		SSH_AUTH_SOCK: sock,
+		...pid ? { SSH_AGENT_PID: pid } : {},
+		SSH_ASKPASS: "/bin/false",
+		DISPLAY: ""
+	};
+	try {
+		const add = await spawnFn("ssh-add", ["-"], {
+			env: agentEnv,
+			stdin: privateKey.endsWith("\n") ? privateKey : `${privateKey}\n`
+		});
+		if (add.exitCode !== 0) throw new Error(`ssh-add failed: exit ${add.exitCode}\n${add.stderr}`);
+		return await body(agentEnv);
+	} finally {
+		await spawnFn("ssh-agent", ["-k"], { env: agentEnv }).catch(() => {});
+	}
+}
+/** Extract `SSH_AUTH_SOCK=<path>;` from `ssh-agent -s` output. */
+function parseAgentSocket(out) {
+	const m = out.match(/SSH_AUTH_SOCK=([^;\n]+)/);
+	if (!m) throw new Error("ssh-agent -s did not emit SSH_AUTH_SOCK");
+	return m[1];
+}
+/** Extract `SSH_AGENT_PID=<n>;` from `ssh-agent -s` output (best-effort). */
+function parseAgentPid(out) {
+	return out.match(/SSH_AGENT_PID=([^;\n]+)/)?.[1];
+}
+var defaultSpawn, SSH_USER_DEFAULT, SSH_PORT_DEFAULT, HOST_KEY_FLAG;
+var init_ssh_exec = __esmMin((() => {
+	defaultSpawn = (command, args, opts) => new Promise((resolve, reject) => {
+		const child = spawn(command, args, {
+			env: opts.env,
+			stdio: [
+				opts.stdin !== void 0 ? "pipe" : "ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		let stdout = "";
+		let stderr = "";
+		child.stdout?.on("data", (b) => {
+			stdout += b.toString();
+		});
+		child.stderr?.on("data", (b) => {
+			stderr += b.toString();
+		});
+		child.on("error", reject);
+		child.on("close", (code) => resolve({
+			exitCode: code ?? -1,
+			stdout,
+			stderr
+		}));
+		if (opts.stdin !== void 0) child.stdin?.end(opts.stdin);
+	});
+	SSH_USER_DEFAULT = "root";
+	SSH_PORT_DEFAULT = 22;
+	HOST_KEY_FLAG = {
+		"accept-new": "accept-new",
+		strict: "yes"
+	};
+}));
+//#endregion
+//#region src/bootstrap/ensure-init-runner.ts
+/**
+* Build the launcher script that starts the init-runner on the target with its
+* bootstrap env. Detached (`setsid … &`) so the SSH session can return while
+* the agent keeps running and dials the orchestrator.
+*/
+function buildLauncher(material, agentCommand) {
+	return [
+		"#!/usr/bin/env bash",
+		"set -euo pipefail",
+		`setsid env ${[
+			`KICI_AGENT_TOKEN=${shQuote(material.bootstrapToken)}`,
+			`KICI_AGENT_ID=${shQuote(material.targetAgentId)}`,
+			`KICI_ORCHESTRATOR_URL=${shQuote(material.orchestratorUrl)}`,
+			`KICI_LABELS=${shQuote(material.labels.join(","))}`,
+			"KICI_EXECUTION_MODE=bare-metal",
+			"KICI_PORT=0"
+		].join(" \\\n  ")} \\`,
+		`  ${agentCommand} >/tmp/kici-init-runner.log 2>&1 &`,
+		"echo \"init-runner started pid=$!\""
+	].join("\n");
+}
+/** Single-quote a value for safe embedding in the launcher's env assignment. */
+function shQuote(v) {
+	return `'${v.replace(/'/g, `'\\''`)}'`;
+}
+/**
+* Bring up a temporary init-runner on `targetAgentId`. Returns `{ broughtUp }`:
+* false when the target already had a live agent (the orchestrator no-op'd),
+* true when this call dropped + started the init-runner.
+*/
+async function ensureInitRunner(transport, targetAgentId, deps = {}) {
+	const material = await transport("kici.ensureInitRunner", { targetAgentId });
+	if (!material.broughtUp) return { broughtUp: false };
+	const { reach, privateKey, bootstrapToken, orchestratorUrl, labels } = material;
+	if (!reach || !privateKey || !bootstrapToken || !orchestratorUrl || !labels) throw new Error(`orchestrator returned incomplete bring-up material for ${targetAgentId}`);
+	const agentCommand = deps.agentCommand ?? DEFAULT_AGENT_COMMAND;
+	await sshPush(reach, privateKey, buildLauncher({
+		bootstrapToken,
+		targetAgentId,
+		orchestratorUrl,
+		labels
+	}, agentCommand), LAUNCHER_REMOTE_PATH, {}, deps);
+	const run = await sshExec(reach, privateKey, `chmod 0700 ${LAUNCHER_REMOTE_PATH} && ${LAUNCHER_REMOTE_PATH}`, {}, deps);
+	if (run.exitCode !== 0) throw new Error(`init-runner launch on ${targetAgentId} failed: exit ${run.exitCode}${run.stderr ? `\n${run.stderr}` : ""}`);
+	return { broughtUp: true };
+}
+var DEFAULT_AGENT_COMMAND, LAUNCHER_REMOTE_PATH;
+var init_ensure_init_runner = __esmMin((() => {
+	init_ssh_exec();
+	DEFAULT_AGENT_COMMAND = "kici-agent";
+	LAUNCHER_REMOTE_PATH = "/tmp/kici-init-runner.sh";
+}));
+//#endregion
+//#region src/bootstrap/pre-boot-send.ts
+/**
+* Ship a pre-boot input to the target's dropbear/initramfs SSH channel. The
+* input plaintext is resolved server-side and never logged. Resolves once the
+* send completes (the SSH session legitimately drops as the box boots).
+*/
+async function preBootSend(transport, targetAgentId, opts, deps = {}) {
+	const material = await transport("kici.preBootSend", {
+		targetAgentId,
+		inputSecret: opts.inputSecret,
+		...opts.port !== void 0 ? { port: opts.port } : {},
+		...opts.command !== void 0 ? { command: opts.command } : {}
+	});
+	await sshExec(material.reach, material.privateKey, material.command, {
+		stdin: material.input,
+		port: material.port,
+		hostKeyMode: "accept-new"
+	}, deps);
+}
+var init_pre_boot_send = __esmMin((() => {
+	init_ssh_exec();
+}));
+//#endregion
+//#region src/bootstrap/api-intercept.ts
+/**
+* Wrap the orchestrator API transport so the two bootstrap methods are handled
+* in-process (SSH transport here; privileged resolve relayed to the
+* orchestrator). `relay` is the raw orchestrator transport (the WS
+* `sendApiRequest`).
+*/
+function withBootstrapInterception(relay, deps = {}) {
+	return async (method, params = {}) => {
+		if (method === ENSURE_INIT_RUNNER) return ensureInitRunner(relay, String(params.targetAgentId ?? ""), deps);
+		if (method === PRE_BOOT_SEND) {
+			await preBootSend(relay, String(params.targetAgentId ?? ""), {
+				inputSecret: String(params.inputSecret ?? ""),
+				...typeof params.port === "number" ? { port: params.port } : {},
+				...typeof params.command === "string" ? { command: params.command } : {}
+			}, deps);
+			return;
+		}
+		return relay(method, params);
+	};
+}
+var ENSURE_INIT_RUNNER, PRE_BOOT_SEND;
+var init_api_intercept = __esmMin((() => {
+	init_ensure_init_runner();
+	init_pre_boot_send();
+	ENSURE_INIT_RUNNER = "kici.ensureInitRunner";
+	PRE_BOOT_SEND = "kici.preBootSend";
+}));
+//#endregion
 //#region src/execution/dynamic-job-serializer.ts
 /**
 * Convert an array of SDK Job objects into LockJob format for the orchestrator.
@@ -2687,7 +2955,13 @@ function serializeSteps(steps) {
 			name: step.name || `step-${index}`,
 			hasOutputs: !!step.outputs,
 			...step.continueOnError ? { continueOnError: true } : {},
-			...step.timeout ? { timeout: step.timeout } : {}
+			...step.timeout ? { timeout: step.timeout } : {},
+			...step.retry ? { retry: {
+				maxAttempts: step.retry.maxAttempts,
+				delayMs: step.retry.delayMs,
+				backoff: step.retry.backoff,
+				maxDelayMs: step.retry.maxDelayMs
+			} } : {}
 		};
 	});
 }
@@ -4263,6 +4537,9 @@ function buildRequest(dispatch, workDir) {
 		matrixValues: jobConfig.matrixValues,
 		host: jobConfig.host,
 		agent: jobConfig.agent,
+		dispatchInputs: jobConfig.dispatchInputs,
+		fanoutIndex: jobConfig.fanoutIndex,
+		fanoutTotal: jobConfig.fanoutTotal,
 		secrets: dispatch.secrets,
 		namespacedSecrets: dispatch.namespacedSecrets,
 		sourceFile: jobConfig.source?.file,
@@ -5543,6 +5820,8 @@ var init_job_runner = __esmMin((() => {
 	init_source_packer();
 	init_source_restore();
 	init_init_runner();
+	init_api_intercept();
+	init_ensure_init_runner();
 	init_timeout_util();
 	init_dynamic_job_serializer();
 	init_log_streamer();
@@ -5655,6 +5934,10 @@ var init_job_runner = __esmMin((() => {
 				await this.handleDynamicJobFn(dispatch, workDir, abortController);
 				return true;
 			}
+			if (jobConfig.bringupOnly === true) {
+				await this.handleBringupJob(dispatch);
+				return true;
+			}
 			if (jobConfig.buildOnly === true) {
 				if (jobConfig.fullRepo) {
 					logger$2.warn("Build job received for fullRepo run -- skipping (should not happen)", {
@@ -5827,7 +6110,7 @@ var init_job_runner = __esmMin((() => {
 						reason: ack.reason
 					};
 				},
-				onApiRequest: this._sendApiRequest ? async (method, params) => this._sendApiRequest(method, params) : void 0,
+				onApiRequest: this._sendApiRequest ? withBootstrapInterception(async (method, params) => this._sendApiRequest(method, params)) : void 0,
 				onCacheRequest: this._requestUserCache ? async (request) => this._requestUserCache(jobId, request) : void 0,
 				onProvenanceRequest: this._relayProvenance ? async (request) => this._relayProvenance(jobId, request) : void 0,
 				onApprovalRequest: this._sendStepApproval ? async (request) => this._sendStepApproval(dispatch.runId, dispatch.jobId, request) : void 0,
@@ -5889,6 +6172,53 @@ var init_job_runner = __esmMin((() => {
 			}, result.secretOutputs);
 		}
 		/**
+		* Handle a bring-up job: bring up a temporary init-runner on a declared-but-
+		* un-agented host over SSH (fresh-box bootstrap convergence). The orchestrator
+		* dispatches this synthetic `__bringup__` job to an agent holding the
+		* `kici:capability:ssh-transport` capability; here we run the agent-side
+		* `ensureInitRunner` helper (the privileged resolve is relayed to the
+		* orchestrator, the SSH transport happens in this agent process — never
+		* reaching workflow code). No clone, no sandbox — the init-runner then
+		* connects under the target's agent id and the orchestrator's pinned-hold
+		* drains the target's bootstrap steps onto it.
+		*/
+		async handleBringupJob(dispatch) {
+			const { runId, jobId, jobConfig } = dispatch;
+			const targetAgentId = String(jobConfig.bringupTarget ?? "");
+			logger$2.info("Starting bring-up job", {
+				jobId,
+				runId,
+				targetAgentId
+			});
+			this.sendJobStatus(dispatch, ExecutionJobStatus.enum.running);
+			const streamer = this.createStepStreamer(dispatch, 0);
+			this.sendStepStatus(dispatch, 0, "bring-up", ExecutionStepStatus.enum.running);
+			try {
+				if (!targetAgentId) throw new Error("bring-up job missing bringupTarget");
+				if (!this._sendApiRequest) throw new Error("bring-up job requires an orchestrator API transport");
+				streamer.addLine(`Bringing up init-runner on ${targetAgentId}…`);
+				const result = await ensureInitRunner(async (method, params) => this._sendApiRequest(method, params), targetAgentId);
+				streamer.addLine(result.broughtUp ? `Init-runner brought up on ${targetAgentId}.` : `${targetAgentId} already has a live agent — no bring-up needed.`);
+				await streamer.flush();
+				this.sendStepStatus(dispatch, 0, "bring-up", ExecutionStepStatus.enum.success, void 0, streamer.getTotalBytes());
+				streamer.destroy();
+				this.sendJobStatus(dispatch, ExecutionJobStatus.enum.success);
+			} catch (err) {
+				const message = err instanceof Error ? err.message : String(err);
+				streamer.addLine(`Bring-up failed: ${message}`);
+				await streamer.flush();
+				this.sendStepStatus(dispatch, 0, "bring-up", ExecutionStepStatus.enum.failed, void 0, streamer.getTotalBytes());
+				streamer.destroy();
+				this.sendJobStatus(dispatch, ExecutionJobStatus.enum.failed, { error: message });
+				logger$2.warn("Bring-up job failed", {
+					jobId,
+					runId,
+					targetAgentId,
+					error: message
+				});
+			}
+		}
+		/**
 		* Handle a build-only job.
 		*
 		* Build jobs install dependencies, pack them into a tarball,
@@ -6281,7 +6611,7 @@ var init_job_runner = __esmMin((() => {
 					error: (msg, ..._args) => evalLog(`ERROR: ${msg}`),
 					debug: (msg, ..._args) => evalLog(`DEBUG: ${msg}`)
 				};
-				const kici = buildKiciApi(this._sendApiRequest ? (method, params) => this._sendApiRequest(method, params ?? {}) : () => Promise.reject(/* @__PURE__ */ new Error("Agent API not available")));
+				const kici = buildKiciApi(this._sendApiRequest ? withBootstrapInterception((method, params) => this._sendApiRequest(method, params ?? {})) : () => Promise.reject(/* @__PURE__ */ new Error("Agent API not available")));
 				const lockJobs = await runCaptured(evalSink, async () => {
 					const { module } = await loadWorkflowSource(workDir, config.source.file, config.contentHash, config.resolvedHashFiles);
 					evalLog("Workflow loaded");
@@ -6511,14 +6841,14 @@ var init_job_runner = __esmMin((() => {
 */
 init_console_capture();
 init_npm_resolver();
-const AGENT_VERSION = "0.1.22";
-const BUILD_COMMIT = "5afd16303";
-const SDK_VERSION = "0.1.22";
-const SDK_BUNDLE_HASH = "4b26a42978f77e29db110d47523ec947d3d673c3109fc48141c1a62814bde7a1";
-const SHARED_VERSION = "0.1.22";
+const AGENT_VERSION = "0.1.23";
+const BUILD_COMMIT = "4465935bb";
+const SDK_VERSION = "0.1.23";
+const SDK_BUNDLE_HASH = "3a83610d2d122b9f9b0f924b225a47050d0b35f00a8f3256a3e15f3ff3bf7ddc";
+const SHARED_VERSION = "0.1.23";
 const SHARED_BUNDLE_HASH = "991385c024392c395d3eb8a68946ef8ed3fcba96f2652f21c3164a54eafa1b1b";
-const ENGINE_VERSION = "0.1.22";
-const ENGINE_BUNDLE_HASH = "ff74a3afb2b1db2870c03d47543642f64d04b660bebdcde6681f76d874f26757";
+const ENGINE_VERSION = "0.1.23";
+const ENGINE_BUNDLE_HASH = "4a0566c709180a6a8744ff3281640e596b8e661ddceb81327cd37d232d9768d5";
 initTelemetry({
 	serviceName: "kici-agent",
 	otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT

package/dist/workflow-runner.js

@@ -10,7 +10,7 @@ import { createLogger, deriveSharedSecret, initZx, normalizeLineEndings, sha256,
 import { CacheOutcome, CacheStepType, CheckMode, CheckStepOutcome, ExecutionJobStatus, ExecutionStepStatus, TimeoutReason } from "@kici-dev/engine";
 import { buildKiciApi, buildNeedsContext, createStepSecrets, evaluateRules, isDynamicJobFn, normalizeApproval, normalizeCacheSpecs, provenanceSubjectIsPath, resolveJobOutputs, resolveStepOutputs, setJobOutputsMap, setStepOutputsMap, setStepRefMap } from "@kici-dev/sdk";
 import { OIDC_TOKEN_REQUEST_METHOD } from "@kici-dev/engine/protocol/messages/oidc-token-relay";
-import { sha256File as sha256File$1 } from "@kici-dev/core";
+import { computeBackoffDelay, sha256File as sha256File$1 } from "@kici-dev/core";
 import { calculateJwkThumbprint, decodeJwt, exportJWK, generateKeyPair } from "jose";
 import { IN_TOTO_PAYLOAD_TYPE, KICI_PROVENANCE_AUDIENCE, KICI_PROVENANCE_BUNDLE_MEDIA_TYPE } from "@kici-dev/engine/provenance/bundle";
 import { IN_TOTO_STATEMENT_TYPE, KICI_WORKFLOW_BUILD_TYPE, SLSA_PROVENANCE_PREDICATE_TYPE } from "@kici-dev/engine/provenance/schema";
@@ -1106,12 +1106,16 @@ initZx();
 * @param event - Event payload from the dispatch message
 * @param changedFiles - List of files changed in this event
 * @param env - Merged environment variables
+* @param dispatchInputs - Operator dispatch inputs (`ctx.dispatchInputs`)
+* @param fanout - Fan-out position (`ctx.fanout`); undefined on a non-fan-out job
 */
-function createRuleContext(event, changedFiles = [], env = {}) {
+function createRuleContext(event, changedFiles = [], env = {}, dispatchInputs = {}, fanout) {
 	return {
 		event,
 		changedFiles,
 		env,
+		dispatchInputs,
+		...fanout && { fanout },
 		$
 	};
 }
@@ -1316,7 +1320,7 @@ function extractSignal(error) {
 */
 async function evaluateStepRulesAndMaybeSkip(step, stepIndex, opts) {
 	if (!step.rules || step.rules.length === 0) return null;
-	const ruleCtx = createRuleContext(opts.event, [], opts.env);
+	const ruleCtx = createRuleContext(opts.event, [], opts.env, opts.dispatchInputs ?? {}, opts.fanout);
 	const ruleResult = await evaluateRules(step.rules, ruleCtx, step.name);
 	if (ruleResult.allPassed) return null;
 	opts.sendIpc({
@@ -1442,6 +1446,39 @@ async function runObserverHook(args) {
 * `ctx.secrets.mountFile` tmpdir, any env vars set via `exposeFile`) is
 * removed even when the step throws, times out, or rule-skips.
 */
+/**
+* Run a step through its retry policy. Each call to `executeStepInLoop` is one
+* attempt: it sets up its own per-attempt timeout from `step.timeout` and returns
+* a `SandboxStepResult` (it never throws — a failed attempt is reported as a
+* `failed` status with an `error`). A failed attempt is retried while attempts
+* remain AND `retryIf(reconstructedError)` is true; backoff sleeps between
+* attempts. The retry loop runs to completion BEFORE the caller applies
+* `continueOnError` to the final outcome.
+*/
+async function runStepWithRetry(step, stepIndex, ctx, timeoutMs, opts) {
+	const retry = step.retry;
+	const max = retry?.maxAttempts ?? 1;
+	let result;
+	for (let n = 1; n <= max; n++) {
+		result = await executeStepInLoop(step, stepIndex, ctx, timeoutMs, opts.sendIpc, opts.outputsMap, opts.getSecretsAccessLog, opts.getSecretMountRecords, opts.jobDeadlineSignal, opts.checkMode ?? CheckMode.enum.apply, opts);
+		if (result.status !== ExecutionStepStatus.enum.failed) return result;
+		const err = new Error(result.error?.message ?? `Step '${step.name}' failed`);
+		if (!(n < max && (retry?.retryIf?.(err) ?? true))) break;
+		const delay = computeBackoffDelay(n, {
+			maxAttempts: max,
+			delayMs: retry.delayMs,
+			backoff: retry.backoff,
+			maxDelayMs: retry.maxDelayMs
+		});
+		opts.sendIpc({
+			type: "log.line",
+			stepIndex,
+			line: `[kici] Step '${step.name}' attempt ${n}/${max} failed: ${err.message}; retrying in ${delay}ms`
+		});
+		await new Promise((r) => setTimeout(r, delay));
+	}
+	return result;
+}
 async function runStepIteration(step, stepIndex, opts) {
 	const skippedResult = await evaluateStepRulesAndMaybeSkip(step, stepIndex, opts);
 	if (skippedResult) {
@@ -1469,7 +1506,7 @@ async function runStepIteration(step, stepIndex, opts) {
 		const timeoutMs = step.timeout ?? opts.defaultTimeoutMs;
 		let result;
 		try {
-			result = await executeStepInLoop(step, stepIndex, ctx, timeoutMs, opts.sendIpc, opts.outputsMap, opts.getSecretsAccessLog, opts.getSecretMountRecords, opts.jobDeadlineSignal, opts.checkMode ?? CheckMode.enum.apply, opts);
+			result = await runStepWithRetry(step, stepIndex, ctx, timeoutMs, opts);
 		} finally {
 			await opts.afterStepApplyEnvFiles?.();
 		}
@@ -3111,8 +3148,8 @@ function logSubprocessStreams(e, tokens) {
 * no Rolldown step at runtime. `@kici-dev/sdk` and host-repo deps resolve via
 * Node's normal ESM lookup against `.kici/node_modules/`.
 */
-const AGENT_SDK_VERSION = "0.1.22";
-const AGENT_SDK_BUNDLE_HASH = "4b26a42978f77e29db110d47523ec947d3d673c3109fc48141c1a62814bde7a1";
+const AGENT_SDK_VERSION = "0.1.23";
+const AGENT_SDK_BUNDLE_HASH = "3a83610d2d122b9f9b0f924b225a47050d0b35f00a8f3256a3e15f3ff3bf7ddc";
 /**
 * Register the `@kici-dev/core/ts-loader-hook` oxc-transform ESM loader hook so
 * subsequent dynamic `import()` calls for `.ts` / `.tsx` files transform on the
@@ -3474,7 +3511,7 @@ async function applyOverlay(config) {
 */
 init_download();
 init_dep_restore();
-const AGENT_VERSION = "0.1.22";
+const AGENT_VERSION = "0.1.23";
 process.on("uncaughtException", (err) => {
 	process.stderr.write(`[workflow-runner] UNCAUGHT EXCEPTION: ${err.message}\n`);
 	if (err.stack) process.stderr.write(`[workflow-runner] Stack: ${err.stack}\n`);
@@ -4407,12 +4444,32 @@ function createSandboxStepContext(workDir, stepIndex, stepName, request, maskedS
 		...request.matrixValues && { matrix: request.matrixValues },
 		...request.host && { host: request.host },
 		...request.agent && { agent: request.agent },
+		...(() => {
+			const fanout = deriveFanout(request);
+			return fanout ? { fanout } : {};
+		})(),
+		dispatchInputs: request.dispatchInputs ?? {},
 		...(() => {
 			const needs = buildStepNeedsContext(request.jobNeeds, request.upstreamJobOutputs, request.upstreamJobStatuses);
 			return needs ? { needs } : {};
 		})()
 	};
 }
+/**
+* Derive the fan-out position (`ctx.fanout`) from a dispatch request. Returns
+* `undefined` for a non-fan-out job (no `fanoutTotal`), so `ctx.fanout` is only
+* set for `runsOnAll` host children and matrix combinations.
+*/
+function deriveFanout(request) {
+	if (request.fanoutTotal === void 0) return void 0;
+	const index = request.fanoutIndex ?? 0;
+	return {
+		index,
+		total: request.fanoutTotal,
+		first: index === 0,
+		last: index === request.fanoutTotal - 1
+	};
+}
 /** Raw provider webhook body for ctx.rawPayload — nested in the envelope. */
 function rawPayloadFromEvent(event) {
 	if (!event) return void 0;
@@ -5026,7 +5083,7 @@ function buildOutputInfrastructure(request, refMap) {
 */
 async function maybeSkipJobOnRules(job, request, normalizedSteps) {
 	if (!job?.rules || job.rules.length === 0) return false;
-	const ruleCtx = createRuleContext(request.event ?? {}, [], process.env);
+	const ruleCtx = createRuleContext(request.event ?? {}, [], process.env, request.dispatchInputs ?? {}, deriveFanout(request));
 	if ((await evaluateRules(job.rules, ruleCtx, request.jobName)).allPassed) return false;
 	const skippedResults = normalizedSteps.map((s, i) => ({
 		name: s.name,
@@ -5281,6 +5338,8 @@ async function main() {
 		outputsMap,
 		event: request.event ?? {},
 		env: process.env,
+		dispatchInputs: request.dispatchInputs ?? {},
+		fanout: deriveFanout(request),
 		jobHooks,
 		cachePhaseDeps,
 		isAborted: () => aborted,
@@ -5389,6 +5448,6 @@ main().catch((error) => {
 	setTimeout(() => process.exit(1), 100);
 });
 //#endregion
-export { buildStepNeedsContext, createSandboxStepContext, rawPayloadFromEvent };
+export { buildStepNeedsContext, createSandboxStepContext, deriveFanout, rawPayloadFromEvent };
 
 //# sourceMappingURL=workflow-runner.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/agent",
-  "version": "0.1.22",
+  "version": "0.1.23",
   "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
   "keywords": [
     "ci",
@@ -64,10 +64,10 @@
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
     "zx": "^8.8.5",
-    "@kici-dev/core": "0.1.22",
-    "@kici-dev/engine": "0.1.22",
-    "@kici-dev/sdk": "0.1.22",
-    "@kici-dev/shared": "0.1.22"
+    "@kici-dev/core": "0.1.23",
+    "@kici-dev/engine": "0.1.23",
+    "@kici-dev/sdk": "0.1.23",
+    "@kici-dev/shared": "0.1.23"
   },
   "kici": {
     "metrics": {

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/agent@0.1.22",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.22/c9b5cd43-8980-4ccc-9212-759130a7d3ae",
+  "name": "@kici-dev/agent@0.1.23",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.23/55c6fdcb-9b29-45b7-b421-94309c584037",
   "creationInfo": {
-    "created": "2026-06-24T06:03:27Z",
+    "created": "2026-06-25T11:13:08Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -816,7 +816,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/agent",
-      "versionInfo": "0.1.22",
+      "versionInfo": "0.1.23",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -827,16 +827,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.22"
+          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.23"
         }
       ],
       "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.23",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.22",
+      "versionInfo": "0.1.23",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -847,16 +847,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.22"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.23"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.22",
+      "versionInfo": "0.1.23",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -867,16 +867,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.22"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.23"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.22",
+      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.23",
       "name": "@kici-dev/sdk",
-      "versionInfo": "0.1.22",
+      "versionInfo": "0.1.23",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -887,16 +887,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.22"
+          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.23"
         }
       ],
       "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.22",
+      "versionInfo": "0.1.23",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -907,7 +907,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.22"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.23"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -6209,22 +6209,22 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.22",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.23",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -6278,192 +6278,192 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.22",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.23",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.22",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.23",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.23",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-micromatch-4.0.8",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1064.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.23",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.31.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.41.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.21.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.22",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.23",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },