@kici-dev/agent 0.1.24 → 0.1.25

package/dist/execution/sandbox/ipc-protocol.d.ts

@@ -216,12 +216,16 @@ export interface StepApprovalRequestIpc {
     };
 }
 /** Which provenance upload operation to relay. */
-export type ProvenanceRequestOp = 'requestUploadUrl' | 'complete';
+export type ProvenanceRequestOp = 'requestUploadUrl' | 'complete' | 'defer';
 /**
  * Request a provenance bundle upload operation (runner -> agent). The agent
- * relays it over the WS as a `provenance.upload.request` / `.complete` and pipes
- * the response back as a {@link ProvenanceResponseIpc}. Mirrors the
- * {@link CacheRequestIpc} relay pattern.
+ * relays it over the WS as a `provenance.upload.request` / `.complete` /
+ * `.defer` and pipes the response back as a {@link ProvenanceResponseIpc}.
+ * Mirrors the {@link CacheRequestIpc} relay pattern.
+ *
+ * `defer` captures a frozen, DSSE-signed statement for later minting (the
+ * transient mint-failure path): no upload happens; the orchestrator persists
+ * the envelope in its deferred-attestation outbox instead.
  */
 export interface ProvenanceRequestIpc {
     type: 'provenance.request';
@@ -231,10 +235,18 @@ export interface ProvenanceRequestIpc {
     op: ProvenanceRequestOp;
     /** Primary subject digest (lowercase hex) — the storage-key discriminator. */
     subjectDigest: string;
-    /** Caller-supplied artifact name. `complete` only. */
+    /** Caller-supplied artifact name. `complete` + `defer` only. */
     subjectName?: string;
-    /** Bundle media type. `complete` only. */
+    /** Bundle media type. `complete` + `defer` only. */
     mediaType?: string;
+    /** Requested token audience. `defer` only. */
+    audience?: string;
+    /** SHA-256 of the frozen DSSE statement payload. `defer` only. */
+    statementHash?: string;
+    /** Frozen, DSSE-signed statement envelope. `defer` only. */
+    dsseEnvelope?: unknown;
+    /** Ephemeral public key JWK the envelope was signed with. `defer` only. */
+    publicKey?: unknown;
 }
 export type RunnerToAgentMessage = ReadyMessage | StepStartMessage | StepCompleteMessage | LogLineMessage | StepSecretMountMessage | JobCompleteMessage | EventEmitRequest | ConcurrencyReportMessage | AgentApiRequestIpc | CacheRequestIpc | ProvenanceRequestIpc | StepApprovalRequestIpc;
 /** Instruct the workflow runner to execute a job. */
@@ -466,6 +478,15 @@ export interface JobExecutionRequest {
     event?: Record<string, unknown>;
     /** Git provider that originated the triggering event (e.g. 'github', 'forgejo'). */
     provider?: string;
+    /**
+     * Platform provenance issuer, threaded from the orchestrator for a deferred
+     * attestation's frozen `builder.id`. Best-effort: absent when the orchestrator
+     * has no issuer wired (e.g. never authenticated to the Platform), in which
+     * case the frozen statement records an unknown issuer honestly. Not
+     * verification load-bearing — a deferred bundle's later token binds to the
+     * frozen statement by hash, and the authoritative org id lives in that token.
+     */
+    provenanceIssuer?: string;
     /** Whether to checkout the repo (default: true). */
     checkout?: boolean;
     /** Whether this job is part of a developer-initiated run triggered by `kici run`. */

package/dist/index.js

@@ -20,7 +20,14 @@ import https from "node:https";
 import http from "node:http";
 import "node:url";
 var __defProp = Object.defineProperty;
-var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
 var __exportAll = (all, no_symbols) => {
 	let target = {};
 	for (var name in all) __defProp(target, name, {
@@ -30,7 +37,6 @@ var __exportAll = (all, no_symbols) => {
 	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
 	return target;
 };
-import.meta.url;
 //#endregion
 //#region src/config.ts
 /** Execution mode for the agent's sandbox backend. Mirrors the runtime enum. */

package/dist/provenance/attest.d.ts

@@ -1,13 +1,31 @@
 import { type KiciBundle } from '@kici-dev/engine/provenance/bundle';
 import type { OidcTokenResult } from '@kici-dev/engine/protocol/messages/oidc-token-relay';
-import { type ProvenanceSubject } from './statement-builder.js';
+import { type LocalBuildContext, type ProvenanceSubject } from './statement-builder.js';
+/** The frozen, DSSE-signed attestation the agent reports for later fulfilment. */
+export interface DeferredAttestationReport {
+    subjectName: string;
+    subjectDigest: string;
+    audience: string;
+    mediaType: string;
+    statementHash: string;
+    dsseEnvelope: KiciBundle['dsseEnvelope'];
+    publicKey: Record<string, unknown>;
+}
 export interface AttestDeps {
-    /** P1.4 relay: returns a KiCI ID token bound to the current job. */
+    /** P1.4 relay: returns a minted KiCI ID token or a transient `deferred` signal. */
     getIdToken: (opts: {
         audience: string;
     }) => Promise<OidcTokenResult>;
     /** Upload the serialized bundle; returns the storage key it was written to. */
     persist: (bundle: KiciBundle, subjectDigest: string) => Promise<string>;
+    /**
+     * Report a frozen, DSSE-signed statement for later minting (the transient
+     * mint-failure path). Required only when the relay may defer; the live path
+     * never calls it.
+     */
+    reportDeferred?: (report: DeferredAttestationReport) => Promise<void>;
+    /** Agent-local job facts used to freeze a statement when the mint defers. */
+    localContext?: LocalBuildContext;
     builderVersions: {
         'kici-agent': string;
         'kici-orchestrator': string;
@@ -19,11 +37,16 @@ export interface AttestInput {
     subject: ProvenanceSubject;
     audience?: string;
 }
-export interface AttestResult {
+/** A minted-and-uploaded attestation, or a deferred one captured for later. */
+export type AttestResult = {
     storageKey: string;
     bundle: KiciBundle;
     subjectDigest: string;
-}
+} | {
+    deferred: true;
+    statementHash: string;
+    subjectDigest: string;
+};
 export declare function attestProvenance(deps: AttestDeps, input: AttestInput): Promise<AttestResult>;
 /**
  * Pick the primary digest (`sha256` preferred) as the storage-key discriminator.

package/dist/provenance/statement-builder.d.ts

@@ -5,6 +5,7 @@
  * statement's identity equals the token's identity by construction.
  */
 import { type KiciProvenanceStatement } from '@kici-dev/engine/provenance/schema';
+import type { SourceOrigin } from '@kici-dev/engine';
 /** The KiCI identity-token claims the builder reads (Platform server-truth). */
 export interface ProvenanceTokenClaims {
     iss: string;
@@ -15,6 +16,12 @@ export interface ProvenanceTokenClaims {
     kici_run_id: string;
     kici_job_id: string;
     orchestrator_id?: string | null;
+    /** Authoritative origin: the customer's public org id (Platform-asserted). */
+    org_id?: string;
+    /** Source-origin brand: triggered vs run-remote (local working-tree overlay). */
+    source_origin?: SourceOrigin;
+    /** Informational source provider (github / gitlab / bitbucket / local). */
+    provider?: string | null;
 }
 /** Caller-supplied artifact subject: a name plus a lowercase-hex digest map. */
 export interface ProvenanceSubject {
@@ -33,6 +40,49 @@ export interface BuildStatementInput {
     /** ISO-8601 timestamp with offset. */
     finishedOn: string;
 }
+/**
+ * Agent-local job context used to freeze a provenance statement for a deferred
+ * attestation. When the Platform mint fails transiently there is no identity
+ * token to read claims from, so the statement is built from facts the agent
+ * already holds about the job it just ran. Only the identity token is deferred;
+ * these attested facts are sealed (DSSE-signed) at build time.
+ */
+export interface LocalBuildContext {
+    repository: string;
+    ref: string;
+    sha: string | null;
+    workflowRef: string;
+    runId: string;
+    jobId: string;
+    orgId?: string;
+    sourceOrigin?: SourceOrigin;
+    /**
+     * Platform provenance issuer for the `builder.id`. The agent does not always
+     * know it at build time (the orchestrator may be disconnected — that is why
+     * the mint deferred), so it is best-effort; an empty string yields a
+     * `/orchestrator/unknown` builder id. This field is not verification
+     * load-bearing for a deferred bundle: the later token binds to the frozen
+     * statement by hash, not by field-for-field cross-check.
+     */
+    issuer: string;
+}
+/**
+ * Build a frozen SLSA v1.0 provenance statement from agent-local job context,
+ * for a deferred attestation (no minted identity token yet). Marks
+ * `attestationOrigin: 'deferred'` in the internal parameters. The caller
+ * DSSE-signs the returned statement immediately and computes its statement hash
+ * — the binding the later OIDC mint commits to (truth-contract property 2).
+ */
+export declare function buildLocalProvenanceStatement(input: {
+    context: LocalBuildContext;
+    subject: ProvenanceSubject;
+    builderVersions: {
+        'kici-agent': string;
+        'kici-orchestrator': string;
+    };
+    startedOn: string;
+    finishedOn: string;
+}): KiciProvenanceStatement;
 /** Build a KiCI SLSA v1.0 provenance statement (validates against the P1.1 schema). */
 export declare function buildProvenanceStatement(input: BuildStatementInput): KiciProvenanceStatement;
 //# sourceMappingURL=statement-builder.d.ts.map

package/dist/server.js

@@ -15,7 +15,7 @@ import { LOGGER_ENV_VARS, defineEnv, validateUnknownKiciVars } from "@kici-dev/s
 import { ALLOWED_SYSTEM_VARS, CacheRunEventType, CacheStepType, ExecutionJobStatus, ExecutionStepStatus, InitFailureCategory, KNOWN_ROLES, PROTOCOL_VERSION, SANDBOX_DEFAULT_VARS, WS_CLOSE_AGENT_AUTH_FAILED, WS_MAX_PAYLOAD_BYTES, applyIncludeExclude, deriveOsArchLabels, expandMatrix, heartbeatSchema, hostLabel, mergeAutoLabels, orchestratorToAgentMessageSchema, parseHostPropertyAssignments, resolveRoleLabels, resolveWhenToRunOn, validateNoReservedLabels } from "@kici-dev/engine";
 import { execFile, execFileSync, execSync, fork, spawn } from "node:child_process";
 import WebSocket from "ws";
-import * as fs$2 from "node:fs";
+import * as fs$1 from "node:fs";
 import fs, { existsSync } from "node:fs";
 import { ZipArchive } from "archiver";
 import path, { dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -23,7 +23,7 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { format, promisify } from "node:util";
 import { gcStaleTmpDirs } from "@kici-dev/core/tmp-gc";
-import fs$1, { access, lstat, mkdir, mkdtemp, readFile, readdir, realpath, rm, unlink, writeFile } from "node:fs/promises";
+import fsPromises, { access, lstat, mkdir, mkdtemp, readFile, readdir, realpath, rm, unlink, writeFile } from "node:fs/promises";
 import Docker from "dockerode";
 import { buildKiciApi, buildNeedsContext, isDynamicGroupRef, isDynamicJobFn, isParallelGroup, isStaticArray, isStaticObject } from "@kici-dev/sdk";
 import { c, x } from "tar";
@@ -36,7 +36,14 @@ import { PNPM_IGNORE_BUILD_GATE_ARG, PackageManager, YarnFlavor, detectPackageMa
 import { parse, stringify } from "yaml";
 import { createInterface } from "node:readline";
 var __defProp = Object.defineProperty;
-var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
 var __exportAll = (all, no_symbols) => {
 	let target = {};
 	for (var name in all) __defProp(target, name, {
@@ -46,7 +53,6 @@ var __exportAll = (all, no_symbols) => {
 	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
 	return target;
 };
-import.meta.url;
 //#endregion
 //#region src/config.ts
 /** Execution mode for the agent's sandbox backend. Mirrors the runtime enum. */
@@ -222,7 +228,7 @@ async function buildAgentMiniBundle(opts) {
 		uptime: os$1.uptime()
 	}, null, 2), { name: "system/info.json" });
 	if (opts.metricsText) archive.append(opts.metricsText, { name: "system/metrics.txt" });
-	if (opts.logDir && fs$2.existsSync(opts.logDir)) await addLogsToArchive(archive, opts.logDir, opts.logWindowHours);
+	if (opts.logDir && fs$1.existsSync(opts.logDir)) await addLogsToArchive(archive, opts.logDir, opts.logWindowHours);
 	await archive.finalize();
 	await done;
 	return Buffer.concat(chunks);
@@ -722,6 +728,13 @@ var OrchestratorClient = class OrchestratorClient {
 				requestId: request.requestId
 			};
 		}
+		if (request.op === "defer") {
+			this.sendProvenanceUploadDefer(jobId, request);
+			return {
+				type: "provenance.response",
+				requestId: request.requestId
+			};
+		}
 		const uploadUrl = await this.requestProvenanceUploadUrl(jobId, request.subjectDigest);
 		return {
 			type: "provenance.response",
@@ -730,6 +743,25 @@ var OrchestratorClient = class OrchestratorClient {
 		};
 	}
 	/**
+	* Capture a frozen, DSSE-signed attestation for later minting (transient
+	* mint-failure path). Fire-and-forget: the orchestrator persists it into the
+	* deferred-attestation outbox and the job stays green.
+	*/
+	sendProvenanceUploadDefer(jobId, request) {
+		this.sendDirect({
+			type: "provenance.upload.defer",
+			messageId: randomUUID(),
+			jobId,
+			subjectName: request.subjectName,
+			subjectDigest: request.subjectDigest,
+			audience: request.audience,
+			mediaType: request.mediaType,
+			statementHash: request.statementHash,
+			dsseEnvelope: request.dsseEnvelope,
+			publicKey: request.publicKey
+		});
+	}
+	/**
 	* Relay a step-level approval request to the orchestrator. Sends a
 	* `step.approval-request` WS message and resolves with the orchestrator's
 	* `step.approval-resolved` mapped onto the IPC response shape. No client-side
@@ -1310,14 +1342,14 @@ var init_console_capture = __esmMin((() => {
 init_console_capture();
 function safe(name, fallback = "unknown") {
 	switch (name) {
-		case "version": return "0.1.24";
-		case "buildCommit": return "73592f67f";
-		case "sdkVersion": return "0.1.24";
-		case "sdkBundleHash": return "031712cf8cd02f483365113aad7e946da982110d544b177eb05edcc0d4421253";
-		case "sharedVersion": return "0.1.24";
-		case "sharedBundleHash": return "b977224129c767c4851458a795fa470264b2fc51255baf06cf14640e29e2f44c";
-		case "engineVersion": return "0.1.24";
-		case "engineBundleHash": return "734acca885cd70eed07a1a9426b08c04c07a9bf99484c18100d3d797b3eb8f39";
+		case "version": return "0.1.25";
+		case "buildCommit": return "15e8e4155";
+		case "sdkVersion": return "0.1.25";
+		case "sdkBundleHash": return "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
+		case "sharedVersion": return "0.1.25";
+		case "sharedBundleHash": return "2394db0d8560b2cebf220c0e2d8993c75083aaf70a5917c35099b24feb3a22ba";
+		case "engineVersion": return "0.1.25";
+		case "engineBundleHash": return "c3320e812b8593d692f3fbf5eafe83507270028f7a1174c607881105dd702654";
 		default: return fallback;
 	}
 }
@@ -1951,7 +1983,7 @@ async function buildAssetDigestFromResolvedPaths(workDir, resolvedPaths) {
 	for (const rel of resolvedPaths) {
 		const abs = path.join(workDir, rel);
 		try {
-			const content = await fs$1.readFile(abs, "utf-8");
+			const content = await fsPromises.readFile(abs, "utf-8");
 			parts.push(`${rel}\n${content}`);
 		} catch {
 			parts.push(`${rel}\n`);
@@ -1976,7 +2008,7 @@ async function loadWorkflowSource(workDir, sourceFile, expectedContentHash, reso
 	ensureLoaderHookRegistered();
 	const filePath = path.join(workDir, sourceFile);
 	if (expectedContentHash) {
-		const rawSource = await fs$1.readFile(filePath, "utf-8");
+		const rawSource = await fsPromises.readFile(filePath, "utf-8");
 		let assetDigest;
 		if (resolvedHashFiles?.length) assetDigest = await buildAssetDigestFromResolvedPaths(workDir, resolvedHashFiles);
 		const actualHash = computeContentHash(rawSource, assetDigest);
@@ -2080,8 +2112,8 @@ async function extractStepsFromDynamicJob(workflow, dynamicIndex, jobName, event
 }
 var AGENT_SDK_VERSION, AGENT_SDK_BUNDLE_HASH, hookRegistered;
 var init_workflow_loader = __esmMin((() => {
-	AGENT_SDK_VERSION = "0.1.24";
-	AGENT_SDK_BUNDLE_HASH = "031712cf8cd02f483365113aad7e946da982110d544b177eb05edcc0d4421253";
+	AGENT_SDK_VERSION = "0.1.25";
+	AGENT_SDK_BUNDLE_HASH = "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
 	hookRegistered = false;
 }));
 //#endregion
@@ -2247,24 +2279,24 @@ function resolveOrchestratorUrl(url) {
 * have nothing to race; the defensive `rm` covers re-runs.
 */
 async function moveScratchIntoRepo(scratchDir, workDir) {
-	for (const child of await fs$1.readdir(scratchDir)) if (child === ".kici") {
+	for (const child of await fsPromises.readdir(scratchDir)) if (child === ".kici") {
 		const kiciScratch = join(scratchDir, ".kici");
-		for (const sub of await fs$1.readdir(kiciScratch)) await moveInto(join(kiciScratch, sub), join(workDir, ".kici", sub));
+		for (const sub of await fsPromises.readdir(kiciScratch)) await moveInto(join(kiciScratch, sub), join(workDir, ".kici", sub));
 	} else await moveInto(join(scratchDir, child), join(workDir, child));
 }
 /** Move `src` to `dest`, creating the parent and clearing any stale dest. */
 async function moveInto(src, dest) {
 	await mkdir(dirname(dest), { recursive: true });
-	await fs$1.rm(dest, {
+	await fsPromises.rm(dest, {
 		recursive: true,
 		force: true
 	});
-	await fs$1.rename(src, dest);
+	await fsPromises.rename(src, dest);
 }
 /** Best-effort cleanup of a settled scratch dir; logs and continues on failure. */
 async function cleanupScratch(scratchDir) {
 	try {
-		await fs$1.rm(scratchDir, {
+		await fsPromises.rm(scratchDir, {
 			recursive: true,
 			force: true
 		});
@@ -2298,7 +2330,7 @@ async function restoreDeps(workDir, depsUrl, depsHash) {
 	const kiciDir = join(workDir, ".kici");
 	if (depsUrl.startsWith("file://")) {
 		const localPath = fileURLToPath(depsUrl);
-		const data = await fs$1.readFile(localPath);
+		const data = await fsPromises.readFile(localPath);
 		if (depsHash) {
 			const actualHash = computeHash(data);
 			if (actualHash !== depsHash) throw new Error(`Dep tarball hash mismatch: expected ${depsHash}, got ${actualHash}`);
@@ -2457,7 +2489,7 @@ async function restoreSource(workDir, sourceTarUrl) {
 	let data;
 	if (sourceTarUrl.startsWith("file://")) {
 		const localPath = fileURLToPath(sourceTarUrl);
-		data = await fs$1.readFile(localPath);
+		data = await fsPromises.readFile(localPath);
 	} else if (sourceTarUrl.startsWith("http://") || sourceTarUrl.startsWith("https://")) data = await downloadUrl(sourceTarUrl);
 	else throw new Error(`Unsupported source tarball URL scheme: ${sourceTarUrl}`);
 	await extractSourceTarball(data, workDir);
@@ -2665,37 +2697,53 @@ async function sshPush(reach, privateKey, localBytes, remotePath, opts = {}, dep
 /**
 * Start a per-call ephemeral ssh-agent, load the key via stdin (never a file),
 * run `body` with `SSH_AUTH_SOCK` in env, and kill the agent in `finally`.
+*
+* The agent is bound to a socket inside a private `kici-bootstrap-ssh-*`
+* directory (`ssh-agent -a <dir>/agent.sock`) rather than the default
+* `/tmp/ssh-XXXX`. `ssh-agent` daemonizes into its own session, so it does NOT
+* die with this process — a SIGKILL of the agent (routine when an ephemeral
+* bring-up runner is torn down) skips the `finally` and orphans the daemon.
+* The namespaced socket path is how `kici-leak-sweep` reaps such orphans
+* precisely: it can distinguish a KiCI bring-up agent from an operator's login
+* agent, which a bare `/tmp/ssh-XXXX` socket cannot. The private dir is removed
+* in an outer `finally` so the normal path leaves nothing behind.
 */
 async function withEphemeralAgent(privateKey, spawnFn, body) {
 	const baseEnv = { ...process.env };
-	const start = await spawnFn("ssh-agent", ["-s"], { env: baseEnv });
-	if (start.exitCode !== 0) throw new Error(`ssh-agent start failed: exit ${start.exitCode}\n${start.stderr}`);
-	const sock = parseAgentSocket(start.stdout);
-	const pid = parseAgentPid(start.stdout);
-	const agentEnv = {
-		...baseEnv,
-		SSH_AUTH_SOCK: sock,
-		...pid ? { SSH_AGENT_PID: pid } : {},
-		SSH_ASKPASS: "/bin/false",
-		DISPLAY: ""
-	};
+	const agentDir = await mkdtemp(join(tmpdir(), "kici-bootstrap-ssh-"));
+	const sock = join(agentDir, "agent.sock");
 	try {
-		const add = await spawnFn("ssh-add", ["-"], {
-			env: agentEnv,
-			stdin: privateKey.endsWith("\n") ? privateKey : `${privateKey}\n`
-		});
-		if (add.exitCode !== 0) throw new Error(`ssh-add failed: exit ${add.exitCode}\n${add.stderr}`);
-		return await body(agentEnv);
+		const start = await spawnFn("ssh-agent", [
+			"-a",
+			sock,
+			"-s"
+		], { env: baseEnv });
+		if (start.exitCode !== 0) throw new Error(`ssh-agent start failed: exit ${start.exitCode}\n${start.stderr}`);
+		const pid = parseAgentPid(start.stdout);
+		const agentEnv = {
+			...baseEnv,
+			SSH_AUTH_SOCK: sock,
+			...pid ? { SSH_AGENT_PID: pid } : {},
+			SSH_ASKPASS: "/bin/false",
+			DISPLAY: ""
+		};
+		try {
+			const add = await spawnFn("ssh-add", ["-"], {
+				env: agentEnv,
+				stdin: privateKey.endsWith("\n") ? privateKey : `${privateKey}\n`
+			});
+			if (add.exitCode !== 0) throw new Error(`ssh-add failed: exit ${add.exitCode}\n${add.stderr}`);
+			return await body(agentEnv);
+		} finally {
+			await spawnFn("ssh-agent", ["-k"], { env: agentEnv }).catch(() => {});
+		}
 	} finally {
-		await spawnFn("ssh-agent", ["-k"], { env: agentEnv }).catch(() => {});
+		await rm(agentDir, {
+			recursive: true,
+			force: true
+		}).catch(() => {});
 	}
 }
-/** Extract `SSH_AUTH_SOCK=<path>;` from `ssh-agent -s` output. */
-function parseAgentSocket(out) {
-	const m = out.match(/SSH_AUTH_SOCK=([^;\n]+)/);
-	if (!m) throw new Error("ssh-agent -s did not emit SSH_AUTH_SOCK");
-	return m[1];
-}
 /** Extract `SSH_AGENT_PID=<n>;` from `ssh-agent -s` output (best-effort). */
 function parseAgentPid(out) {
 	return out.match(/SSH_AGENT_PID=([^;\n]+)/)?.[1];
@@ -2921,7 +2969,7 @@ async function serializeJob(job, generatedNames, ctx, staticNames, allowedGroups
 */
 function resolveNeeds(needs, generatedNames, staticNames, allowedGroups) {
 	if (!needs || needs.length === 0) return [];
-	const allNames = new Set([...generatedNames, ...staticNames]);
+	const allNames = /* @__PURE__ */ new Set([...generatedNames, ...staticNames]);
 	return needs.map((dep) => {
 		if (typeof dep === "string") {
 			if (!allNames.has(dep)) throw new Error(`Job dependency '${dep}' not found in workflow jobs (checked: ${generatedNames.size} generated, ${staticNames.size} static)`);
@@ -3318,7 +3366,7 @@ function decryptBuffer(encrypted, aesKey) {
 */
 async function applyOverlay(config) {
 	const { tarballUrl, cliPublicKey, orchestratorPrivateKey, repoDir } = config;
-	const tmpDir = await fs$1.mkdtemp(path.join(os.tmpdir(), "kici-overlay-"));
+	const tmpDir = await fsPromises.mkdtemp(path.join(os.tmpdir(), "kici-overlay-"));
 	try {
 		logger$7.info("Downloading overlay tarball", { url: tarballUrl.replace(/\?.*$/, "?[redacted]") });
 		let encryptedData;
@@ -3332,7 +3380,7 @@ async function applyOverlay(config) {
 		const decryptedData = decryptBuffer(encryptedData, aesKey);
 		logger$7.info("Extracting overlay tarball", { size: decryptedData.length });
 		const extractDir = path.join(tmpDir, "extracted");
-		await fs$1.mkdir(extractDir, { recursive: true });
+		await fsPromises.mkdir(extractDir, { recursive: true });
 		try {
 			const readable = Readable.from(decryptedData);
 			await new Promise((resolve, reject) => {
@@ -3347,7 +3395,7 @@ async function applyOverlay(config) {
 		const manifestPath = path.join(extractDir, ".kici-overlay-tmp", "manifest.json");
 		let manifestContent;
 		try {
-			manifestContent = await fs$1.readFile(manifestPath, "utf-8");
+			manifestContent = await fsPromises.readFile(manifestPath, "utf-8");
 		} catch {
 			throw new Error("Overlay manifest not found: expected .kici-overlay-tmp/manifest.json in tarball");
 		}
@@ -3368,15 +3416,15 @@ async function applyOverlay(config) {
 		for (const file of checksumFiles) {
 			const srcPath = path.join(extractDir, file);
 			const destPath = path.join(repoDir, file);
-			await fs$1.mkdir(path.dirname(destPath), { recursive: true });
-			await fs$1.copyFile(srcPath, destPath);
+			await fsPromises.mkdir(path.dirname(destPath), { recursive: true });
+			await fsPromises.copyFile(srcPath, destPath);
 			filesApplied++;
 		}
 		let filesDeleted = 0;
 		for (const file of manifest.deletions) {
 			const targetPath = path.join(repoDir, file);
 			try {
-				await fs$1.unlink(targetPath);
+				await fsPromises.unlink(targetPath);
 				filesDeleted++;
 			} catch {
 				logger$7.debug("Deletion target not found, skipping", { file });
@@ -3392,7 +3440,7 @@ async function applyOverlay(config) {
 			verified: true
 		};
 	} finally {
-		await fs$1.rm(tmpDir, {
+		await fsPromises.rm(tmpDir, {
 			recursive: true,
 			force: true
 		}).catch(() => {});
@@ -5814,7 +5862,7 @@ var job_runner_exports = /* @__PURE__ */ __exportAll({
 */
 async function fileExists(p) {
 	try {
-		await fs$1.access(p);
+		await fsPromises.access(p);
 		return true;
 	} catch {
 		return false;
@@ -5930,11 +5978,11 @@ var init_job_runner = __esmMin((() => {
 		async execute(dispatch) {
 			const { runId: _runId, jobId, jobConfig: _jobConfig } = dispatch;
 			const abortController = new AbortController();
-			const workDir = await fs$1.mkdtemp(join(tmpdir(), "kici-"));
+			const workDir = await fsPromises.mkdtemp(join(tmpdir(), "kici-"));
 			const completionPromise = this.runJob(dispatch, workDir, abortController).finally(async () => {
 				this.activeJobs.delete(jobId);
 				this.activeSandbox = null;
-				await fs$1.rm(workDir, {
+				await fsPromises.rm(workDir, {
 					recursive: true,
 					force: true
 				}).catch(() => {});
@@ -6896,14 +6944,14 @@ var init_job_runner = __esmMin((() => {
 */
 init_console_capture();
 init_npm_resolver();
-const AGENT_VERSION = "0.1.24";
-const BUILD_COMMIT = "73592f67f";
-const SDK_VERSION = "0.1.24";
-const SDK_BUNDLE_HASH = "031712cf8cd02f483365113aad7e946da982110d544b177eb05edcc0d4421253";
-const SHARED_VERSION = "0.1.24";
-const SHARED_BUNDLE_HASH = "b977224129c767c4851458a795fa470264b2fc51255baf06cf14640e29e2f44c";
-const ENGINE_VERSION = "0.1.24";
-const ENGINE_BUNDLE_HASH = "734acca885cd70eed07a1a9426b08c04c07a9bf99484c18100d3d797b3eb8f39";
+const AGENT_VERSION = "0.1.25";
+const BUILD_COMMIT = "15e8e4155";
+const SDK_VERSION = "0.1.25";
+const SDK_BUNDLE_HASH = "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
+const SHARED_VERSION = "0.1.25";
+const SHARED_BUNDLE_HASH = "2394db0d8560b2cebf220c0e2d8993c75083aaf70a5917c35099b24feb3a22ba";
+const ENGINE_VERSION = "0.1.25";
+const ENGINE_BUNDLE_HASH = "c3320e812b8593d692f3fbf5eafe83507270028f7a1174c607881105dd702654";
 initTelemetry({
 	serviceName: "kici-agent",
 	otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT

package/dist/workflow-runner.js

@@ -13,6 +13,7 @@ import { OIDC_TOKEN_REQUEST_METHOD } from "@kici-dev/engine/protocol/messages/oi
 import { computeBackoffDelay, sha256File as sha256File$1 } from "@kici-dev/core";
 import { calculateJwkThumbprint, decodeJwt, exportJWK, generateKeyPair } from "jose";
 import { IN_TOTO_PAYLOAD_TYPE, KICI_PROVENANCE_AUDIENCE, KICI_PROVENANCE_BUNDLE_MEDIA_TYPE } from "@kici-dev/engine/provenance/bundle";
+import { computeStatementHash } from "@kici-dev/engine/provenance/statement-hash";
 import { IN_TOTO_STATEMENT_TYPE, KICI_WORKFLOW_BUILD_TYPE, SLSA_PROVENANCE_PREDICATE_TYPE } from "@kici-dev/engine/provenance/schema";
 import { buildDsseEnvelope, dssePae } from "@kici-dev/engine/provenance/dsse";
 import https from "node:https";
@@ -29,7 +30,14 @@ import { promisify } from "node:util";
 import { PNPM_IGNORE_BUILD_GATE_ARG, PackageManager, YarnFlavor, detectPackageManagerFromManifests, detectYarnFlavor } from "@kici-dev/shared/package-manager";
 import { parse, stringify } from "yaml";
 var __defProp = Object.defineProperty;
-var __esmMin = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __esmMin = (fn, res, err) => () => {
+	if (err) throw err[0];
+	try {
+		return fn && (res = fn(fn = 0)), res;
+	} catch (e) {
+		throw err = [e], e;
+	}
+};
 var __exportAll = (all, no_symbols) => {
 	let target = {};
 	for (var name in all) __defProp(target, name, {
@@ -39,7 +47,6 @@ var __exportAll = (all, no_symbols) => {
 	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
 	return target;
 };
-import.meta.url;
 //#endregion
 //#region src/provenance/statement-builder.ts
 /**
@@ -48,6 +55,53 @@ import.meta.url;
 * entirely from the JWT claims (Platform-minted, unforgeable), so the
 * statement's identity equals the token's identity by construction.
 */
+/**
+* Build a frozen SLSA v1.0 provenance statement from agent-local job context,
+* for a deferred attestation (no minted identity token yet). Marks
+* `attestationOrigin: 'deferred'` in the internal parameters. The caller
+* DSSE-signs the returned statement immediately and computes its statement hash
+* — the binding the later OIDC mint commits to (truth-contract property 2).
+*/
+function buildLocalProvenanceStatement(input) {
+	const c = input.context;
+	return {
+		_type: IN_TOTO_STATEMENT_TYPE,
+		subject: [{
+			name: input.subject.name,
+			digest: input.subject.digest
+		}],
+		predicateType: SLSA_PROVENANCE_PREDICATE_TYPE,
+		predicate: {
+			buildDefinition: {
+				buildType: KICI_WORKFLOW_BUILD_TYPE,
+				externalParameters: { workflow: {
+					repository: c.repository,
+					ref: c.ref,
+					path: c.workflowRef
+				} },
+				internalParameters: {
+					...c.sha ? { commit: c.sha } : {},
+					runId: c.runId,
+					jobId: c.jobId,
+					...c.orgId ? { orgId: c.orgId } : {},
+					...c.sourceOrigin ? { sourceOrigin: c.sourceOrigin } : {},
+					attestationOrigin: "deferred"
+				}
+			},
+			runDetails: {
+				builder: {
+					id: `${c.issuer}/orchestrator/unknown`,
+					version: input.builderVersions
+				},
+				metadata: {
+					invocationId: c.runId,
+					startedOn: input.startedOn,
+					finishedOn: input.finishedOn
+				}
+			}
+		}
+	};
+}
 /** Build a KiCI SLSA v1.0 provenance statement (validates against the P1.1 schema). */
 function buildProvenanceStatement(input) {
 	const c = input.tokenClaims;
@@ -61,15 +115,20 @@ function buildProvenanceStatement(input) {
 		predicate: {
 			buildDefinition: {
 				buildType: KICI_WORKFLOW_BUILD_TYPE,
-				externalParameters: { workflow: {
-					repository: c.repository ?? "",
-					ref: c.ref ?? "",
-					path: c.workflow_ref ?? ""
-				} },
+				externalParameters: {
+					workflow: {
+						repository: c.repository ?? "",
+						ref: c.ref ?? "",
+						path: c.workflow_ref ?? ""
+					},
+					...c.provider ? { provider: c.provider } : {}
+				},
 				internalParameters: {
 					...c.sha ? { commit: c.sha } : {},
 					runId: c.kici_run_id,
-					jobId: c.kici_job_id
+					jobId: c.kici_job_id,
+					...c.org_id ? { orgId: c.org_id } : {},
+					...c.source_origin ? { sourceOrigin: c.source_origin } : {}
 				}
 			},
 			runDetails: {
@@ -127,7 +186,9 @@ async function signStatementDsse(payloadType, statementBytes) {
 async function attestProvenance(deps, input) {
 	const audience = input.audience ?? KICI_PROVENANCE_AUDIENCE;
 	const subjectDigest = subjectDigestString(input.subject);
-	const { token } = await deps.getIdToken({ audience });
+	const tokenResult = await deps.getIdToken({ audience });
+	if ("deferred" in tokenResult) return deferAttestation(deps, input, subjectDigest, audience);
+	const { token } = tokenResult;
 	const claims = decodeJwt(token);
 	const now = (deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()))();
 	const statement = buildProvenanceStatement({
@@ -153,6 +214,39 @@ async function attestProvenance(deps, input) {
 	};
 }
 /**
+* Freeze + DSSE-sign the provenance statement from agent-local job facts and
+* report it for later minting. The step does NOT throw — the job completes
+* green and the attestation surfaces as `deferred`.
+*/
+async function deferAttestation(deps, input, subjectDigest, audience) {
+	if (!deps.reportDeferred || !deps.localContext) throw new Error("provenance mint deferred but no reportDeferred/localContext wired to capture it");
+	const now = (deps.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()))();
+	const statement = buildLocalProvenanceStatement({
+		context: deps.localContext,
+		subject: input.subject,
+		builderVersions: deps.builderVersions,
+		startedOn: now,
+		finishedOn: now
+	});
+	const statementBytes = new TextEncoder().encode(JSON.stringify(statement));
+	const { envelope, publicJwk } = await signStatementDsse(IN_TOTO_PAYLOAD_TYPE, statementBytes);
+	const statementHash = await computeStatementHash(statementBytes);
+	await deps.reportDeferred({
+		subjectName: input.subject.name,
+		subjectDigest,
+		audience,
+		mediaType: KICI_PROVENANCE_BUNDLE_MEDIA_TYPE,
+		statementHash,
+		dsseEnvelope: envelope,
+		publicKey: publicJwk
+	});
+	return {
+		deferred: true,
+		statementHash,
+		subjectDigest
+	};
+}
+/**
 * Pick the primary digest (`sha256` preferred) as the storage-key discriminator.
 * Throws when the subject carries no digest: an empty digest set would otherwise
 * yield an `undefined` storage-key segment (`provenance/<run>/<job>/undefined.kici.json`)
@@ -3399,8 +3493,8 @@ function logSubprocessStreams(e, tokens) {
 * no Rolldown step at runtime. `@kici-dev/sdk` and host-repo deps resolve via
 * Node's normal ESM lookup against `.kici/node_modules/`.
 */
-const AGENT_SDK_VERSION = "0.1.24";
-const AGENT_SDK_BUNDLE_HASH = "031712cf8cd02f483365113aad7e946da982110d544b177eb05edcc0d4421253";
+const AGENT_SDK_VERSION = "0.1.25";
+const AGENT_SDK_BUNDLE_HASH = "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
 /**
 * Register the `@kici-dev/core/ts-loader-hook` oxc-transform ESM loader hook so
 * subsequent dynamic `import()` calls for `.ts` / `.tsx` files transform on the
@@ -3762,7 +3856,7 @@ async function applyOverlay(config) {
 */
 init_download();
 init_dep_restore();
-const AGENT_VERSION = "0.1.24";
+const AGENT_VERSION = "0.1.25";
 process.on("uncaughtException", (err) => {
 	process.stderr.write(`[workflow-runner] UNCAUGHT EXCEPTION: ${err.message}\n`);
 	if (err.stack) process.stderr.write(`[workflow-runner] Stack: ${err.stack}\n`);
@@ -4269,9 +4363,20 @@ async function relayProvenanceIpc(request) {
 	return response;
 }
 /**
+* Extract an `owner/repo` identifier from a git clone URL for a deferred
+* statement's `externalParameters.workflow.repository` (the live path reads this
+* from the minted token claim; the deferred path has no token yet).
+*/
+function extractRepoIdentifier(repoUrl) {
+	const match = repoUrl.match(/(?:github|gitlab|bitbucket)\.\w+\/([^/]+\/[^/.]+)/);
+	return match ? match[1] : "unknown/unknown";
+}
+/**
 * Build the `ctx.attestProvenance` step helper. Resolves a `path` subject to a
 * SHA-256 digest, threads the identity token via the supplied OIDC getter, and
-* persists the bundle over the IPC -> WS provenance-upload relay.
+* persists the bundle over the IPC -> WS provenance-upload relay. On a transient
+* mint failure the statement is frozen + reported for later minting (deferred);
+* the step still completes.
 */
 function buildAttestProvenanceFn(request, workDir, getIdToken) {
 	return async (opts) => {
@@ -4288,6 +4393,27 @@ function buildAttestProvenanceFn(request, workDir, getIdToken) {
 				"kici-agent": AGENT_VERSION,
 				"kici-orchestrator": "unknown"
 			},
+			localContext: {
+				repository: extractRepoIdentifier(request.repoUrl),
+				ref: request.ref,
+				sha: request.sha || null,
+				workflowRef: request.workflowRef ?? request.workflowName,
+				runId: request.runId,
+				jobId: request.jobId,
+				issuer: request.provenanceIssuer ?? ""
+			},
+			reportDeferred: async (report) => {
+				await relayProvenanceIpc({
+					op: "defer",
+					subjectDigest: report.subjectDigest,
+					subjectName: report.subjectName,
+					mediaType: report.mediaType,
+					audience: report.audience,
+					statementHash: report.statementHash,
+					dsseEnvelope: report.dsseEnvelope,
+					publicKey: report.publicKey
+				});
+			},
 			persist: async (bundle, subjectDigest) => {
 				const urlResponse = await relayProvenanceIpc({
 					op: "requestUploadUrl",
@@ -4307,6 +4433,11 @@ function buildAttestProvenanceFn(request, workDir, getIdToken) {
 			subject,
 			...opts.audience !== void 0 && { audience: opts.audience }
 		});
+		if ("deferred" in result) return {
+			deferred: true,
+			subjectDigest: result.subjectDigest,
+			statementHash: result.statementHash
+		};
 		return {
 			storageKey: result.storageKey,
 			subjectDigest: result.subjectDigest,

package/dist/ws/orchestrator-client.d.ts

@@ -250,6 +250,12 @@ export declare class OrchestratorClient {
      * returns the result on the IPC response shape.
      */
     relayProvenance(jobId: string, request: ProvenanceRequestIpc): Promise<ProvenanceResponseIpc>;
+    /**
+     * Capture a frozen, DSSE-signed attestation for later minting (transient
+     * mint-failure path). Fire-and-forget: the orchestrator persists it into the
+     * deferred-attestation outbox and the job stays green.
+     */
+    sendProvenanceUploadDefer(jobId: string, request: ProvenanceRequestIpc): void;
     /**
      * Relay a step-level approval request to the orchestrator. Sends a
      * `step.approval-request` WS message and resolves with the orchestrator's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/agent",
-  "version": "0.1.24",
+  "version": "0.1.25",
   "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
   "keywords": [
     "ci",
@@ -64,10 +64,10 @@
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
     "zx": "^8.8.5",
-    "@kici-dev/engine": "0.1.24",
-    "@kici-dev/shared": "0.1.24",
-    "@kici-dev/core": "0.1.24",
-    "@kici-dev/sdk": "0.1.24"
+    "@kici-dev/core": "0.1.25",
+    "@kici-dev/engine": "0.1.25",
+    "@kici-dev/sdk": "0.1.25",
+    "@kici-dev/shared": "0.1.25"
   },
   "kici": {
     "metrics": {

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/agent@0.1.24",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.24/d46ec25f-cf71-414d-a647-8164545d1cff",
+  "name": "@kici-dev/agent@0.1.25",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.25/0c3ee967-8ee9-47da-bc53-89a597d05c47",
   "creationInfo": {
-    "created": "2026-06-28T16:24:54Z",
+    "created": "2026-07-05T08:32:53Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -816,7 +816,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/agent",
-      "versionInfo": "0.1.24",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -827,16 +827,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.24"
+          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.25"
         }
       ],
       "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.25",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.24",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -847,16 +847,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.24"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.25"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.24",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -867,16 +867,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.24"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.25"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.24",
+      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.25",
       "name": "@kici-dev/sdk",
-      "versionInfo": "0.1.24",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -887,16 +887,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.24"
+          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.25"
         }
       ],
       "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.24",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -907,7 +907,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.24"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.25"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -6209,22 +6209,22 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.24",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -6278,192 +6278,192 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.24",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.25",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.24",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.25",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-micromatch-4.0.8",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1064.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.31.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.41.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.21.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.24",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },