@kici-dev/agent 0.1.26 → 0.1.27

package/dist/config.d.ts

@@ -30,6 +30,8 @@ declare const configSchema: z.ZodObject<{
         drop: "drop";
     }>>;
     sandbox: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<boolean, string>>;
+    trustedEnv: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<boolean, string>>;
+    inPlace: z.ZodPipe<z.ZodDefault<z.ZodString>, z.ZodTransform<boolean, string>>;
     sandboxNetwork: z.ZodDefault<z.ZodEnum<{
         isolated: "isolated";
         host: "host";
@@ -71,6 +73,8 @@ export declare const envDef: import("@kici-dev/shared/env").DefineEnvResult<{
     jobHeartbeatIntervalMs: number;
     backpressureMode: "pause" | "drop";
     sandbox: boolean;
+    trustedEnv: boolean;
+    inPlace: boolean;
     sandboxNetwork: "isolated" | "host";
     scalerManaged: boolean;
     scalerIdleTimeoutMs: number;
@@ -102,6 +106,8 @@ export declare const envDef: import("@kici-dev/shared/env").DefineEnvResult<{
  * - KICI_JOB_HEARTBEAT_INTERVAL_MS (default: 60000)
  * - KICI_BACKPRESSURE_MODE (default: pause, options: pause | drop)
  * - KICI_SANDBOX (default: false) — enable bubblewrap (bwrap) namespace isolation for bare-metal execution
+ * - KICI_TRUSTED_ENV (default: false) — trusted fleet-agent profile: pass the ambient host env (minus the agent's own KiCI identity secrets) through to steps
+ * - KICI_IN_PLACE (default: false) — in-place no-clone profile: for a file:// source, use the real repo path as workDir and skip the clone (the routed deploy:stg profile)
  * - KICI_SANDBOX_NETWORK (default: isolated, options: isolated | host) — when sandbox=true, controls bwrap network namespace
  * - KICI_SCALER_MANAGED (set to "1" by the orchestrator's auto-scaler — agent self-shuts down on idle)
  * - KICI_SCALER_IDLE_TIMEOUT (ms, default 5000) — how long a scaler-managed agent waits before shutdown after going idle

package/dist/execution/init-runner.d.ts

@@ -5,8 +5,8 @@ import { type MatrixValues } from '@kici-dev/engine';
  * Only fields that were flagged as dynamic and successfully resolved are set.
  */
 export interface InitResult {
-    /** Resolved bound-environment names, in merge order (one per `environments` element). */
-    environmentNames?: string[];
+    /** Resolved bound-context names, in merge order (one per `contexts` element). */
+    contextNames?: string[];
     env?: Record<string, string>;
     concurrencyGroup?: string;
     /**
@@ -16,7 +16,7 @@ export interface InitResult {
     matrixValues?: MatrixValues[];
 }
 /**
- * Evaluate dynamic fields (environment, env, concurrencyGroup) on a job.
+ * Evaluate dynamic fields (context, env, concurrencyGroup) on a job.
  *
  * Only fields with their corresponding flag set to true AND whose property
  * on the job is a function will be evaluated. All evaluations happen in a
@@ -33,7 +33,7 @@ export interface InitResult {
  * @param timeoutMs - Timeout per dynamic function call (default 60_000ms)
  */
 export declare function evaluateDynamicFields(workflow: Workflow, jobName: string, event: Record<string, unknown>, flags: {
-    dynamicEnvironment: boolean;
+    dynamicContext: boolean;
     dynamicEnv: boolean;
     dynamicConcurrencyGroup: boolean;
     dynamicMatrix?: boolean;

package/dist/execution/job-runner.d.ts

@@ -122,6 +122,23 @@ export declare function buildEvalNeedsContext(config: {
     declaredNeeds?: readonly unknown[];
     upstreamSnapshot?: import('@kici-dev/engine').UpstreamSnapshot;
 }): ReturnType<typeof buildNeedsContext> | undefined;
+/**
+ * Resolve a job's workDir and its cleanup.
+ *
+ * - Default: a fresh `mkdtemp` the agent clones into and removes after the job.
+ * - **In-place profile** (`inPlace` config + a `file://` source): the source's
+ *   real repo path used directly as the workDir, with **no clone** and **no
+ *   removal**. This is the routed `deploy:stg` profile — the operator runs their
+ *   own already-built working tree (module-relative `MONOREPO_ROOT`,
+ *   `node_modules`, `dist` all present). Gated to `file://` so a
+ *   Platform-connected agent (https sources) can never be pushed onto a tree,
+ *   and read only from agent config (never a dispatch/wire value).
+ */
+export declare function resolveJobWorkDir(inPlace: boolean, repoUrl: string | undefined): Promise<{
+    workDir: string;
+    cleanup: () => Promise<void>;
+    inPlace: boolean;
+}>;
 /**
  * Top-level job execution orchestrator for the agent.
  *

package/dist/execution/sandbox/env-sanitizer.d.ts

@@ -9,8 +9,8 @@
  *   1. Allowed system vars from process.env
  *   2. Sandbox defaults (FORCE_COLOR=1, etc.)
  *   3. KICI_* system vars (orchestrator-generated, from userEnv)
- *   4. Org-level environment vars (from orchestrator via environmentVars)
- *   5. Source-level environment overrides (merged into environmentVars by orchestrator)
+ *   4. Org-level environment vars (from orchestrator via contextVars)
+ *   5. Source-level environment overrides (merged into contextVars by orchestrator)
  *   6. Job env (from lock file env field, evaluated by orchestrator)
  *   7. setEnv() calls (runtime -- applied at step execution, not here)
  */
@@ -32,12 +32,21 @@
  * PLATFORM_TOKEN, WEBHOOK_SECRET, etc.) are never included because they
  * are not in the allowlist.
  *
+ * The `trustedEnv` option (default false) selects the trusted fleet-agent
+ * profile: Layer 1 passes the ambient host env through instead of restricting
+ * to `ALLOWED_SYSTEM_VARS`, minus the agent's own KiCI identity/operational
+ * secrets (the whole `KICI_*` namespace + a small non-`KICI_` infra denylist).
+ * It is read ONLY from agent config (`KICI_TRUSTED_ENV`), never from a dispatch
+ * payload, so a workflow cannot request it. With it OFF the output is
+ * byte-identical to the allowlist-only behavior.
+ *
  * @param userEnv - Environment variables from workflow config and orchestrator
  * @param options - Optional extended options for environment layers
  * @returns A new Record with only safe environment variables
  */
 export declare function buildSanitizedEnv(userEnv: Record<string, string>, options?: {
-    environmentVars?: Record<string, string>;
+    contextVars?: Record<string, string>;
     jobEnv?: Record<string, string>;
+    trustedEnv?: boolean;
 }): Record<string, string>;
 //# sourceMappingURL=env-sanitizer.d.ts.map

package/dist/execution/sandbox/ipc-protocol.d.ts

@@ -508,10 +508,10 @@ export interface JobExecutionRequest {
     orchestratorPrivateKey?: string;
     /** Base64-encoded X25519 public key for the run (for encrypting secret outputs). */
     runPublicKey?: string;
-    /** Deployment environment name (resolved by orchestrator). */
-    environment?: string;
+    /** Resolved context name (resolved by orchestrator). */
+    context?: string;
     /** Environment variables from orchestrator (org-level + source overrides, layers 4-5). */
-    environmentVars?: Record<string, string>;
+    contextVars?: Record<string, string>;
     /** Job env from lock file env field (layer 6, evaluated by orchestrator). */
     jobEnv?: Record<string, string>;
     /** Whether this is a global workflow (dual-clone: workflow repo + source repo). */

package/dist/execution/streaming-zx-log.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Shared factory for the zx `log` callback that streams a subprocess's
+ * stdout/stderr into the captured/streamed run log, line by line, via `emit`.
+ *
+ * zx does NOT write child stdout/stderr to `process.stdout`; it pipes the
+ * child stdio to an internal VoidStream and surfaces each chunk through the
+ * shell's `log` callback as `{ kind: 'stdout' | 'stderr', data, verbose }`.
+ * The `verbose` flag is zx's per-invocation quiet/verbose decision:
+ *
+ *   - stdout entries: `verbose = !piped && (snapshot.verbose && !snapshot.quiet)`
+ *   - stderr entries: `verbose = !snapshot.quiet`
+ *
+ * so a step that opts into `$({ quiet: true })` (e.g. a `sops -d` decrypt of a
+ * credential) produces `verbose: false` entries. This factory HONORS that flag
+ * — it skips `verbose: false` entries — which is what makes `{ quiet: true }`
+ * actually suppress sensitive output from the run log. Without the gate, a
+ * decrypted-secret line leaks into the persisted/streamed log (zx's own default
+ * log function gates on the same flag: `if (!entry.verbose) return`).
+ *
+ * IMPORTANT: the shell that installs this callback MUST be constructed with
+ * `verbose: true`. With `verbose: true` zx flags ordinary (non-quiet)
+ * subprocess output `verbose: true` (captured) and a `{ quiet: true }` call
+ * `verbose: false` (suppressed). A `verbose: false` base would flag ordinary
+ * output `verbose: false` too, and this gate would then drop every line.
+ *
+ * The returned callback owns a per-shell line buffer, so partial chunks are
+ * coalesced into whole lines before `emit` is called.
+ */
+export declare function makeStreamingZxLog(emit: (line: string) => void): (entry: unknown) => void;
+//# sourceMappingURL=streaming-zx-log.d.ts.map

package/dist/index.js

@@ -86,6 +86,8 @@ const envDef = defineEnv({
 		jobHeartbeatIntervalMs: z.coerce.number().default(6e4),
 		backpressureMode: z.enum(["pause", "drop"]).default("pause"),
 		sandbox: z.string().default("false").transform((s) => s === "true"),
+		trustedEnv: z.string().default("false").transform((s) => s === "true"),
+		inPlace: z.string().default("false").transform((s) => s === "true"),
 		sandboxNetwork: z.enum(["isolated", "host"]).default("isolated"),
 		scalerManaged: z.string().optional().transform((s) => s === "1"),
 		scalerIdleTimeoutMs: z.coerce.number().default(5e3),
@@ -112,6 +114,8 @@ const envDef = defineEnv({
 		jobHeartbeatIntervalMs: "KICI_JOB_HEARTBEAT_INTERVAL_MS",
 		backpressureMode: "KICI_BACKPRESSURE_MODE",
 		sandbox: "KICI_SANDBOX",
+		trustedEnv: "KICI_TRUSTED_ENV",
+		inPlace: "KICI_IN_PLACE",
 		sandboxNetwork: "KICI_SANDBOX_NETWORK",
 		scalerManaged: "KICI_SCALER_MANAGED",
 		scalerIdleTimeoutMs: "KICI_SCALER_IDLE_TIMEOUT",
@@ -140,6 +144,8 @@ const envDef = defineEnv({
 * - KICI_JOB_HEARTBEAT_INTERVAL_MS (default: 60000)
 * - KICI_BACKPRESSURE_MODE (default: pause, options: pause | drop)
 * - KICI_SANDBOX (default: false) — enable bubblewrap (bwrap) namespace isolation for bare-metal execution
+* - KICI_TRUSTED_ENV (default: false) — trusted fleet-agent profile: pass the ambient host env (minus the agent's own KiCI identity secrets) through to steps
+* - KICI_IN_PLACE (default: false) — in-place no-clone profile: for a file:// source, use the real repo path as workDir and skip the clone (the routed deploy:stg profile)
 * - KICI_SANDBOX_NETWORK (default: isolated, options: isolated | host) — when sandbox=true, controls bwrap network namespace
 * - KICI_SCALER_MANAGED (set to "1" by the orchestrator's auto-scaler — agent self-shuts down on idle)
 * - KICI_SCALER_IDLE_TIMEOUT (ms, default 5000) — how long a scaler-managed agent waits before shutdown after going idle

package/dist/server.js

@@ -12,7 +12,7 @@ import winston from "winston";
 import { RingBuffer, addLogsToArchive, chunkBuffer, createHealthRoutes, createLogger, createMeter, createMetricsRoutes, deriveSharedSecret, getPrometheusExporter, getReconnectDelay, getRequestContext, guardStartup, initTelemetry, logger, normalizeLineEndings, redactConfig, requestContext, setServiceName, setupGracefulShutdown, sha256, sha256File, toErrorMessage, validateRequiredTools } from "@kici-dev/shared";
 import { z } from "zod";
 import { LOGGER_ENV_VARS, defineEnv, validateUnknownKiciVars } from "@kici-dev/shared/env";
-import { ALLOWED_SYSTEM_VARS, CacheRunEventType, CacheStepType, ExecutionJobStatus, ExecutionStepStatus, InitFailureCategory, KNOWN_ROLES, PROTOCOL_VERSION, SANDBOX_DEFAULT_VARS, WS_CLOSE_AGENT_AUTH_FAILED, WS_MAX_PAYLOAD_BYTES, applyIncludeExclude, deriveOsArchLabels, expandMatrix, heartbeatSchema, hostLabel, mergeAutoLabels, orchestratorToAgentMessageSchema, parseHostPropertyAssignments, resolveRoleLabels, resolveWhenToRunOn, validateNoReservedLabels } from "@kici-dev/engine";
+import { ALLOWED_SYSTEM_VARS, CacheRunEventType, CacheStepType, ExecutionJobStatus, ExecutionStepStatus, InitFailureCategory, KNOWN_ROLES, PROTOCOL_VERSION, SANDBOX_DEFAULT_VARS, WS_CLOSE_AGENT_AUTH_FAILED, WS_MAX_PAYLOAD_BYTES, applyIncludeExclude, buildTrustedPassthroughEnv, deriveOsArchLabels, expandMatrix, heartbeatSchema, hostLabel, mergeAutoLabels, orchestratorToAgentMessageSchema, parseHostPropertyAssignments, resolveRoleLabels, resolveWhenToRunOn, validateNoReservedLabels } from "@kici-dev/engine";
 import { execFile, execFileSync, execSync, fork, spawn } from "node:child_process";
 import WebSocket from "ws";
 import * as fs$1 from "node:fs";
@@ -102,6 +102,8 @@ const envDef = defineEnv({
 		jobHeartbeatIntervalMs: z.coerce.number().default(6e4),
 		backpressureMode: z.enum(["pause", "drop"]).default("pause"),
 		sandbox: z.string().default("false").transform((s) => s === "true"),
+		trustedEnv: z.string().default("false").transform((s) => s === "true"),
+		inPlace: z.string().default("false").transform((s) => s === "true"),
 		sandboxNetwork: z.enum(["isolated", "host"]).default("isolated"),
 		scalerManaged: z.string().optional().transform((s) => s === "1"),
 		scalerIdleTimeoutMs: z.coerce.number().default(5e3),
@@ -128,6 +130,8 @@ const envDef = defineEnv({
 		jobHeartbeatIntervalMs: "KICI_JOB_HEARTBEAT_INTERVAL_MS",
 		backpressureMode: "KICI_BACKPRESSURE_MODE",
 		sandbox: "KICI_SANDBOX",
+		trustedEnv: "KICI_TRUSTED_ENV",
+		inPlace: "KICI_IN_PLACE",
 		sandboxNetwork: "KICI_SANDBOX_NETWORK",
 		scalerManaged: "KICI_SCALER_MANAGED",
 		scalerIdleTimeoutMs: "KICI_SCALER_IDLE_TIMEOUT",
@@ -156,6 +160,8 @@ const envDef = defineEnv({
 * - KICI_JOB_HEARTBEAT_INTERVAL_MS (default: 60000)
 * - KICI_BACKPRESSURE_MODE (default: pause, options: pause | drop)
 * - KICI_SANDBOX (default: false) — enable bubblewrap (bwrap) namespace isolation for bare-metal execution
+* - KICI_TRUSTED_ENV (default: false) — trusted fleet-agent profile: pass the ambient host env (minus the agent's own KiCI identity secrets) through to steps
+* - KICI_IN_PLACE (default: false) — in-place no-clone profile: for a file:// source, use the real repo path as workDir and skip the clone (the routed deploy:stg profile)
 * - KICI_SANDBOX_NETWORK (default: isolated, options: isolated | host) — when sandbox=true, controls bwrap network namespace
 * - KICI_SCALER_MANAGED (set to "1" by the orchestrator's auto-scaler — agent self-shuts down on idle)
 * - KICI_SCALER_IDLE_TIMEOUT (ms, default 5000) — how long a scaler-managed agent waits before shutdown after going idle
@@ -1342,14 +1348,14 @@ var init_console_capture = __esmMin((() => {
 init_console_capture();
 function safe(name, fallback = "unknown") {
 	switch (name) {
-		case "version": return "0.1.26";
-		case "buildCommit": return "85120b08f";
-		case "sdkVersion": return "0.1.26";
+		case "version": return "0.1.27";
+		case "buildCommit": return "f0747470b";
+		case "sdkVersion": return "0.1.27";
 		case "sdkBundleHash": return "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
-		case "sharedVersion": return "0.1.26";
-		case "sharedBundleHash": return "2394db0d8560b2cebf220c0e2d8993c75083aaf70a5917c35099b24feb3a22ba";
-		case "engineVersion": return "0.1.26";
-		case "engineBundleHash": return "c3320e812b8593d692f3fbf5eafe83507270028f7a1174c607881105dd702654";
+		case "sharedVersion": return "0.1.27";
+		case "sharedBundleHash": return "f8e1f0117cf41fca5a74377633e2ec89e54ce4eda47d9f476cdb83336f1ed962";
+		case "engineVersion": return "0.1.27";
+		case "engineBundleHash": return "ce675fb4790406ed2a938f8f1783db37b283cffd7d8fc1eb12a878e0bfb919b3";
 		default: return fallback;
 	}
 }
@@ -2112,7 +2118,7 @@ async function extractStepsFromDynamicJob(workflow, dynamicIndex, jobName, event
 }
 var AGENT_SDK_VERSION, AGENT_SDK_BUNDLE_HASH, hookRegistered;
 var init_workflow_loader = __esmMin((() => {
-	AGENT_SDK_VERSION = "0.1.26";
+	AGENT_SDK_VERSION = "0.1.27";
 	AGENT_SDK_BUNDLE_HASH = "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
 	hookRegistered = false;
 }));
@@ -2539,7 +2545,7 @@ function findJobByName(workflow, jobName) {
 	throw new Error(`Job '${jobName}' not found in workflow '${workflow.name}'`);
 }
 /**
-* Evaluate dynamic fields (environment, env, concurrencyGroup) on a job.
+* Evaluate dynamic fields (context, env, concurrencyGroup) on a job.
 *
 * Only fields with their corresponding flag set to true AND whose property
 * on the job is a function will be evaluated. All evaluations happen in a
@@ -2580,15 +2586,15 @@ async function evaluateDynamicFields(workflow, jobName, event, flags, timeoutMs
 		if (job.include || job.exclude) combos = applyIncludeExclude(combos, job.include, job.exclude);
 		result.matrixValues = combos;
 	}
-	if (flags.dynamicEnvironment) {
-		const envRefs = job.environments ?? (job.environment !== void 0 ? [job.environment] : void 0);
+	if (flags.dynamicContext) {
+		const envRefs = job.contexts ?? (job.context !== void 0 ? [job.context] : void 0);
 		if (envRefs && envRefs.length > 0) {
 			const names = [];
 			for (const ref of envRefs) if (typeof ref === "function") {
-				const value = await withTimeout(() => ref(event), timeoutMs, `dynamicEnvironment for job '${jobName}'`);
+				const value = await withTimeout(() => ref(event), timeoutMs, `dynamicContext for job '${jobName}'`);
 				if (value !== void 0 && value !== null) names.push(value);
 			} else if (typeof ref === "string") names.push(ref);
-			if (names.length > 0) result.environmentNames = names;
+			if (names.length > 0) result.contextNames = names;
 		}
 	}
 	if (flags.dynamicEnv && typeof job.env === "function") {
@@ -2889,6 +2895,50 @@ var init_api_intercept = __esmMin((() => {
 	PRE_BOOT_SEND = "kici.preBootSend";
 }));
 //#endregion
+//#region src/execution/streaming-zx-log.ts
+/**
+* Shared factory for the zx `log` callback that streams a subprocess's
+* stdout/stderr into the captured/streamed run log, line by line, via `emit`.
+*
+* zx does NOT write child stdout/stderr to `process.stdout`; it pipes the
+* child stdio to an internal VoidStream and surfaces each chunk through the
+* shell's `log` callback as `{ kind: 'stdout' | 'stderr', data, verbose }`.
+* The `verbose` flag is zx's per-invocation quiet/verbose decision:
+*
+*   - stdout entries: `verbose = !piped && (snapshot.verbose && !snapshot.quiet)`
+*   - stderr entries: `verbose = !snapshot.quiet`
+*
+* so a step that opts into `$({ quiet: true })` (e.g. a `sops -d` decrypt of a
+* credential) produces `verbose: false` entries. This factory HONORS that flag
+* — it skips `verbose: false` entries — which is what makes `{ quiet: true }`
+* actually suppress sensitive output from the run log. Without the gate, a
+* decrypted-secret line leaks into the persisted/streamed log (zx's own default
+* log function gates on the same flag: `if (!entry.verbose) return`).
+*
+* IMPORTANT: the shell that installs this callback MUST be constructed with
+* `verbose: true`. With `verbose: true` zx flags ordinary (non-quiet)
+* subprocess output `verbose: true` (captured) and a `{ quiet: true }` call
+* `verbose: false` (suppressed). A `verbose: false` base would flag ordinary
+* output `verbose: false` too, and this gate would then drop every line.
+*
+* The returned callback owns a per-shell line buffer, so partial chunks are
+* coalesced into whole lines before `emit` is called.
+*/
+function makeStreamingZxLog(emit) {
+	let lineBuf = "";
+	return (entry) => {
+		const e = entry;
+		if (e.kind !== "stdout" && e.kind !== "stderr") return;
+		if (!e.verbose) return;
+		const text = typeof e.data === "string" ? e.data : String(e.data ?? "");
+		lineBuf += text;
+		const lines = lineBuf.split("\n");
+		lineBuf = lines.pop();
+		for (const line of lines) if (line) emit(line);
+	};
+}
+var init_streaming_zx_log = __esmMin((() => {}));
+//#endregion
 //#region src/execution/dynamic-job-serializer.ts
 /**
 * Convert an array of SDK Job objects into LockJob format for the orchestrator.
@@ -2912,8 +2962,8 @@ async function serializeJobsToLock(jobs, ctx, staticNames, allowedGroups) {
 }
 async function serializeJob(job, generatedNames, ctx, staticNames, allowedGroups) {
 	const { include: runsOn, exclude: excludeLabels } = normalizeRunsOnToMatchers(job.runsOn, `generated job '${job.name}' runsOn`);
-	const envRefs = job.environments ?? (job.environment !== void 0 ? [job.environment] : void 0);
-	let resolvedEnvironments;
+	const envRefs = job.contexts ?? (job.context !== void 0 ? [job.context] : void 0);
+	let resolvedContexts;
 	if (envRefs !== void 0 && envRefs.length > 0) {
 		const resolved = [];
 		for (const ref of envRefs) if (typeof ref === "function") {
@@ -2926,7 +2976,7 @@ async function serializeJob(job, generatedNames, ctx, staticNames, allowedGroups
 			value: ref,
 			dynamic: false
 		});
-		if (resolved.length > 0) resolvedEnvironments = resolved;
+		if (resolved.length > 0) resolvedContexts = resolved;
 	}
 	let resolvedEnv;
 	if (typeof job.env === "function") {
@@ -2953,7 +3003,7 @@ async function serializeJob(job, generatedNames, ctx, staticNames, allowedGroups
 		...job.include ? { include: job.include } : {},
 		...job.exclude ? { exclude: job.exclude } : {},
 		...job.description ? { description: job.description } : {},
-		...resolvedEnvironments !== void 0 ? { environments: resolvedEnvironments } : {},
+		...resolvedContexts !== void 0 ? { contexts: resolvedContexts } : {},
 		...resolvedEnv !== void 0 ? { env: resolvedEnv } : {},
 		...resolvedConcurrencyGroup !== void 0 ? { concurrencyGroup: resolvedConcurrencyGroup } : {}
 	};
@@ -4471,8 +4521,8 @@ var init_dep_packer = __esmMin((() => {
 *   1. Allowed system vars from process.env
 *   2. Sandbox defaults (FORCE_COLOR=1, etc.)
 *   3. KICI_* system vars (orchestrator-generated, from userEnv)
-*   4. Org-level environment vars (from orchestrator via environmentVars)
-*   5. Source-level environment overrides (merged into environmentVars by orchestrator)
+*   4. Org-level environment vars (from orchestrator via contextVars)
+*   5. Source-level environment overrides (merged into contextVars by orchestrator)
 *   6. Job env (from lock file env field, evaluated by orchestrator)
 *   7. setEnv() calls (runtime -- applied at step execution, not here)
 */
@@ -4494,19 +4544,28 @@ var init_dep_packer = __esmMin((() => {
 * PLATFORM_TOKEN, WEBHOOK_SECRET, etc.) are never included because they
 * are not in the allowlist.
 *
+* The `trustedEnv` option (default false) selects the trusted fleet-agent
+* profile: Layer 1 passes the ambient host env through instead of restricting
+* to `ALLOWED_SYSTEM_VARS`, minus the agent's own KiCI identity/operational
+* secrets (the whole `KICI_*` namespace + a small non-`KICI_` infra denylist).
+* It is read ONLY from agent config (`KICI_TRUSTED_ENV`), never from a dispatch
+* payload, so a workflow cannot request it. With it OFF the output is
+* byte-identical to the allowlist-only behavior.
+*
 * @param userEnv - Environment variables from workflow config and orchestrator
 * @param options - Optional extended options for environment layers
 * @returns A new Record with only safe environment variables
 */
 function buildSanitizedEnv(userEnv, options) {
 	const sanitized = {};
-	for (const key of ALLOWED_SYSTEM_VARS) {
+	if (options?.trustedEnv) Object.assign(sanitized, buildTrustedPassthroughEnv(process.env));
+	else for (const key of ALLOWED_SYSTEM_VARS) {
 		const value = process.env[key];
 		if (value !== void 0) sanitized[key] = value;
 	}
 	Object.assign(sanitized, SANDBOX_DEFAULT_VARS);
 	Object.assign(sanitized, userEnv);
-	if (options?.environmentVars) Object.assign(sanitized, options.environmentVars);
+	if (options?.contextVars) Object.assign(sanitized, options.contextVars);
 	if (options?.jobEnv) Object.assign(sanitized, options.jobEnv);
 	return sanitized;
 }
@@ -4639,8 +4698,8 @@ function buildRequest(dispatch, workDir) {
 		cliPublicKey: jobConfig.cliPublicKey,
 		orchestratorPrivateKey: jobConfig.orchestratorPrivateKey,
 		runPublicKey: dispatch.runPublicKey,
-		environment: jobConfig.environment,
-		environmentVars: jobConfig.environmentVars,
+		context: jobConfig.context,
+		contextVars: jobConfig.contextVars,
 		jobEnv: jobConfig.jobEnv,
 		isGlobalWorkflow: jobConfig.isGlobalWorkflow,
 		workflowRepoUrl: jobConfig.workflowRepoUrl,
@@ -5855,7 +5914,8 @@ var init_sandbox = __esmMin((() => {
 //#region src/execution/job-runner.ts
 var job_runner_exports = /* @__PURE__ */ __exportAll({
 	JobRunner: () => JobRunner$1,
-	buildEvalNeedsContext: () => buildEvalNeedsContext
+	buildEvalNeedsContext: () => buildEvalNeedsContext,
+	resolveJobWorkDir: () => resolveJobWorkDir
 });
 /**
 * Check if a file exists at the given path.
@@ -5912,6 +5972,36 @@ function buildEvalNeedsContext(config) {
 	if (!config.resultAware || !config.upstreamSnapshot) return void 0;
 	return buildNeedsContext(config.upstreamSnapshot, config.declaredNeeds ?? []);
 }
+/**
+* Resolve a job's workDir and its cleanup.
+*
+* - Default: a fresh `mkdtemp` the agent clones into and removes after the job.
+* - **In-place profile** (`inPlace` config + a `file://` source): the source's
+*   real repo path used directly as the workDir, with **no clone** and **no
+*   removal**. This is the routed `deploy:stg` profile — the operator runs their
+*   own already-built working tree (module-relative `MONOREPO_ROOT`,
+*   `node_modules`, `dist` all present). Gated to `file://` so a
+*   Platform-connected agent (https sources) can never be pushed onto a tree,
+*   and read only from agent config (never a dispatch/wire value).
+*/
+async function resolveJobWorkDir(inPlace, repoUrl) {
+	if (inPlace && repoUrl && repoUrl.startsWith("file://")) return {
+		workDir: fileURLToPath(repoUrl),
+		cleanup: async () => {},
+		inPlace: true
+	};
+	const workDir = await fsPromises.mkdtemp(join(tmpdir(), "kici-"));
+	return {
+		workDir,
+		cleanup: async () => {
+			await fsPromises.rm(workDir, {
+				recursive: true,
+				force: true
+			}).catch(() => {});
+		},
+		inPlace: false
+	};
+}
 var logger$2, JobRunner$1;
 var init_job_runner = __esmMin((() => {
 	init_git_clone();
@@ -5922,6 +6012,7 @@ var init_job_runner = __esmMin((() => {
 	init_api_intercept();
 	init_ensure_init_runner();
 	init_timeout_util();
+	init_streaming_zx_log();
 	init_dynamic_job_serializer();
 	init_log_streamer();
 	init_overlay_applier();
@@ -5978,14 +6069,12 @@ var init_job_runner = __esmMin((() => {
 		async execute(dispatch) {
 			const { runId: _runId, jobId, jobConfig: _jobConfig } = dispatch;
 			const abortController = new AbortController();
-			const workDir = await fsPromises.mkdtemp(join(tmpdir(), "kici-"));
+			const { workDir, cleanup, inPlace } = await resolveJobWorkDir(this.config.inPlace, dispatch.repoUrl);
+			if (inPlace) dispatch.jobConfig.checkout = false;
 			const completionPromise = this.runJob(dispatch, workDir, abortController).finally(async () => {
 				this.activeJobs.delete(jobId);
 				this.activeSandbox = null;
-				await fsPromises.rm(workDir, {
-					recursive: true,
-					force: true
-				}).catch(() => {});
+				await cleanup();
 			});
 			this.activeJobs.set(jobId, {
 				abortController,
@@ -6111,8 +6200,9 @@ var init_job_runner = __esmMin((() => {
 			const runnerPath = resolveRunnerPath();
 			const typedConfig = jobConfig;
 			const sanitizedEnv = buildSanitizedEnv(typedConfig.env ?? {}, {
-				environmentVars: typedConfig.environmentVars ?? void 0,
-				jobEnv: typedConfig.jobEnv ?? void 0
+				contextVars: typedConfig.contextVars ?? void 0,
+				jobEnv: typedConfig.jobEnv ?? void 0,
+				trustedEnv: this.config.trustedEnv
 			});
 			logger$2.info("Creating execution sandbox", {
 				executionMode,
@@ -6583,9 +6673,9 @@ var init_job_runner = __esmMin((() => {
 				const initResult = await runCaptured(initSink, async () => {
 					const { module } = await loadWorkflowSource(workDir, config.source, config.contentHash, config.resolvedHashFiles);
 					const workflow = extractWorkflow(module, config.workflowName);
-					initLog(`Evaluating dynamic fields for job '${config.targetJobName}' (env=${config.dynamicEnv} environment=${config.dynamicEnvironment} concurrencyGroup=${config.dynamicConcurrencyGroup} matrix=${config.dynamicMatrix ?? false})`);
+					initLog(`Evaluating dynamic fields for job '${config.targetJobName}' (env=${config.dynamicEnv} context=${config.dynamicContext} concurrencyGroup=${config.dynamicConcurrencyGroup} matrix=${config.dynamicMatrix ?? false})`);
 					return evaluateDynamicFields(workflow, config.targetJobName, config.event, {
-						dynamicEnvironment: config.dynamicEnvironment,
+						dynamicContext: config.dynamicContext,
 						dynamicEnv: config.dynamicEnv,
 						dynamicConcurrencyGroup: config.dynamicConcurrencyGroup,
 						dynamicMatrix: config.dynamicMatrix ?? false
@@ -6593,7 +6683,7 @@ var init_job_runner = __esmMin((() => {
 				});
 				logger$2.info("Init job completed successfully", {
 					jobId,
-					hasEnvironment: initResult.environmentNames !== void 0,
+					hasContext: initResult.contextNames !== void 0,
 					hasEnv: initResult.env !== void 0,
 					hasConcurrencyGroup: initResult.concurrencyGroup !== void 0
 				});
@@ -6688,20 +6778,12 @@ var init_job_runner = __esmMin((() => {
 					});
 				}
 				const { $: zx$ } = await import("zx");
-				let zxLineBuf = "";
 				const scopedDollar = zx$({
 					cwd: workDir,
 					env: { ...process.env },
-					verbose: false,
+					verbose: true,
 					quiet: false,
-					log: ((entry) => {
-						if (entry.kind !== "stdout" && entry.kind !== "stderr") return;
-						const text = typeof entry.data === "string" ? entry.data : String(entry.data ?? "");
-						zxLineBuf += text;
-						const lines = zxLineBuf.split("\n");
-						zxLineBuf = lines.pop();
-						for (const line of lines) if (line) evalStreamer.addLine(line);
-					})
+					log: makeStreamingZxLog((line) => evalStreamer.addLine(line))
 				});
 				const evalSink = { addLine: (line) => evalStreamer.addLine(line) };
 				const dynamicJobLogger = {
@@ -6944,14 +7026,14 @@ var init_job_runner = __esmMin((() => {
 */
 init_console_capture();
 init_npm_resolver();
-const AGENT_VERSION = "0.1.26";
-const BUILD_COMMIT = "85120b08f";
-const SDK_VERSION = "0.1.26";
+const AGENT_VERSION = "0.1.27";
+const BUILD_COMMIT = "f0747470b";
+const SDK_VERSION = "0.1.27";
 const SDK_BUNDLE_HASH = "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
-const SHARED_VERSION = "0.1.26";
-const SHARED_BUNDLE_HASH = "2394db0d8560b2cebf220c0e2d8993c75083aaf70a5917c35099b24feb3a22ba";
-const ENGINE_VERSION = "0.1.26";
-const ENGINE_BUNDLE_HASH = "c3320e812b8593d692f3fbf5eafe83507270028f7a1174c607881105dd702654";
+const SHARED_VERSION = "0.1.27";
+const SHARED_BUNDLE_HASH = "f8e1f0117cf41fca5a74377633e2ec89e54ce4eda47d9f476cdb83336f1ed962";
+const ENGINE_VERSION = "0.1.27";
+const ENGINE_BUNDLE_HASH = "ce675fb4790406ed2a938f8f1783db37b283cffd7d8fc1eb12a878e0bfb919b3";
 initTelemetry({
 	serviceName: "kici-agent",
 	otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT

package/dist/workflow-runner.js

@@ -48,6 +48,49 @@ var __exportAll = (all, no_symbols) => {
 	return target;
 };
 //#endregion
+//#region src/execution/streaming-zx-log.ts
+/**
+* Shared factory for the zx `log` callback that streams a subprocess's
+* stdout/stderr into the captured/streamed run log, line by line, via `emit`.
+*
+* zx does NOT write child stdout/stderr to `process.stdout`; it pipes the
+* child stdio to an internal VoidStream and surfaces each chunk through the
+* shell's `log` callback as `{ kind: 'stdout' | 'stderr', data, verbose }`.
+* The `verbose` flag is zx's per-invocation quiet/verbose decision:
+*
+*   - stdout entries: `verbose = !piped && (snapshot.verbose && !snapshot.quiet)`
+*   - stderr entries: `verbose = !snapshot.quiet`
+*
+* so a step that opts into `$({ quiet: true })` (e.g. a `sops -d` decrypt of a
+* credential) produces `verbose: false` entries. This factory HONORS that flag
+* — it skips `verbose: false` entries — which is what makes `{ quiet: true }`
+* actually suppress sensitive output from the run log. Without the gate, a
+* decrypted-secret line leaks into the persisted/streamed log (zx's own default
+* log function gates on the same flag: `if (!entry.verbose) return`).
+*
+* IMPORTANT: the shell that installs this callback MUST be constructed with
+* `verbose: true`. With `verbose: true` zx flags ordinary (non-quiet)
+* subprocess output `verbose: true` (captured) and a `{ quiet: true }` call
+* `verbose: false` (suppressed). A `verbose: false` base would flag ordinary
+* output `verbose: false` too, and this gate would then drop every line.
+*
+* The returned callback owns a per-shell line buffer, so partial chunks are
+* coalesced into whole lines before `emit` is called.
+*/
+function makeStreamingZxLog(emit) {
+	let lineBuf = "";
+	return (entry) => {
+		const e = entry;
+		if (e.kind !== "stdout" && e.kind !== "stderr") return;
+		if (!e.verbose) return;
+		const text = typeof e.data === "string" ? e.data : String(e.data ?? "");
+		lineBuf += text;
+		const lines = lineBuf.split("\n");
+		lineBuf = lines.pop();
+		for (const line of lines) if (line) emit(line);
+	};
+}
+//#endregion
 //#region src/provenance/statement-builder.ts
 /**
 * Build a SLSA v1.0 in-toto provenance statement from the server-truth identity
@@ -3493,7 +3536,7 @@ function logSubprocessStreams(e, tokens) {
 * no Rolldown step at runtime. `@kici-dev/sdk` and host-repo deps resolve via
 * Node's normal ESM lookup against `.kici/node_modules/`.
 */
-const AGENT_SDK_VERSION = "0.1.26";
+const AGENT_SDK_VERSION = "0.1.27";
 const AGENT_SDK_BUNDLE_HASH = "e06bd1acf349ba365bdb357f3d865e0cbb4ad4604a0270b707a681a4f440954e";
 /**
 * Register the `@kici-dev/core/ts-loader-hook` oxc-transform ESM loader hook so
@@ -3856,7 +3899,7 @@ async function applyOverlay(config) {
 */
 init_download();
 init_dep_restore();
-const AGENT_VERSION = "0.1.26";
+const AGENT_VERSION = "0.1.27";
 process.on("uncaughtException", (err) => {
 	process.stderr.write(`[workflow-runner] UNCAUGHT EXCEPTION: ${err.message}\n`);
 	if (err.stack) process.stderr.write(`[workflow-runner] Stack: ${err.stack}\n`);
@@ -4716,10 +4759,16 @@ function createSecretMasker(request) {
 *
 * Intercept zx subprocess output via the log callback: zx does NOT write child
 * stdout/stderr to process.stdout — it pipes to an internal VoidStream and only
-* calls $.log() with { kind: 'stdout'|'stderr' }. With verbose=false the default
-* log function skips stdout entirely, and with quiet=false it writes stderr to
-* process.stderr. We override the log function to capture both kinds directly
-* and send them as masked IPC log.line messages tagged with `stepIndex`.
+* calls $.log() with { kind: 'stdout'|'stderr', verbose }. We override the log
+* function (`makeStreamingZxLog`) to capture both kinds and send them as masked
+* IPC log.line messages tagged with `stepIndex`.
+*
+* The shell is built with `verbose: true` so ordinary subprocess output is
+* flagged `verbose: true` (captured) while a step that opts into
+* `$({ quiet: true })` — e.g. a `sops -d` credential decrypt — is flagged
+* `verbose: false` and dropped by `makeStreamingZxLog`. That gate is what keeps
+* a decrypted secret out of the streamed run log; a `verbose: false` base would
+* flag ordinary output `verbose: false` too and drop every line.
 *
 * IMPORTANT: The log function must be passed in the zx$() config, not set on the
 * returned function. zx$() returns a plain function (not the proxy $), so setting
@@ -4727,26 +4776,16 @@ function createSecretMasker(request) {
 * AsyncLocalStorage store that zx uses for ProcessPromise snapshots.
 */
 function buildSandboxShell(cwd, stepIndex, maskedSendFn) {
-	let zxLineBuf = "";
 	return $({
 		cwd,
 		env: { ...process.env },
-		verbose: false,
+		verbose: true,
 		quiet: false,
-		log: ((entry) => {
-			if (entry.kind === "stdout" || entry.kind === "stderr") {
-				const text = typeof entry.data === "string" ? entry.data : String(entry.data ?? "");
-				zxLineBuf += text;
-				const lines = zxLineBuf.split("\n");
-				zxLineBuf = lines.pop();
-				for (const line of lines) if (line) maskedSendFn({
-					type: "log.line",
-					stepIndex,
-					line
-				});
-				return;
-			}
-		})
+		log: makeStreamingZxLog((line) => maskedSendFn({
+			type: "log.line",
+			stepIndex,
+			line
+		}))
 	});
 }
 /**
@@ -4800,7 +4839,7 @@ function createSandboxStepContext(workDir, stepIndex, stepName, request, maskedS
 			runsOn: request.runsOn
 		},
 		isTestRun: request.isTestRun ?? false,
-		environment: request.environment,
+		context: request.context,
 		cache: createCacheApi(workDir, buildCacheTransport()),
 		emit: async (eventName, payload, options) => {
 			const reqId = randomUUID();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/agent",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
   "keywords": [
     "ci",
@@ -64,10 +64,10 @@
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
     "zx": "^8.8.5",
-    "@kici-dev/core": "0.1.26",
-    "@kici-dev/engine": "0.1.26",
-    "@kici-dev/sdk": "0.1.26",
-    "@kici-dev/shared": "0.1.26"
+    "@kici-dev/core": "0.1.27",
+    "@kici-dev/engine": "0.1.27",
+    "@kici-dev/sdk": "0.1.27",
+    "@kici-dev/shared": "0.1.27"
   },
   "kici": {
     "metrics": {

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/agent@0.1.26",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.26/6219ec2d-01e6-4f85-a26d-146376e963ac",
+  "name": "@kici-dev/agent@0.1.27",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fagent/0.1.27/4c241955-12c0-4d95-a7dc-c6bb021cf653",
   "creationInfo": {
-    "created": "2026-07-06T04:30:08Z",
+    "created": "2026-07-10T06:04:29Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -816,7 +816,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/agent",
-      "versionInfo": "0.1.26",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -827,16 +827,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.26"
+          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.1.27"
         }
       ],
       "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.27",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.26",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -847,16 +847,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.26"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.27"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.26",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -867,16 +867,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.26"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.27"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.26",
+      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.1.27",
       "name": "@kici-dev/sdk",
-      "versionInfo": "0.1.26",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -887,16 +887,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.26"
+          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.27"
         }
       ],
       "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.1.26",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -907,7 +907,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.26"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.1.27"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -6209,22 +6209,22 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.26",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -6278,192 +6278,192 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.26",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.27",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.26",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.27",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-micromatch-4.0.8",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1064.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.27",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.31.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.7.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.218.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.41.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.21.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.26",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.1.27",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },