@kici-dev/agent 0.7.0 → 0.9.0

package/dist/container-ts-loader-hook.js

@@ -29,23 +29,23 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 var __require = /* #__PURE__ */ (() => createRequire(import.meta.url))();
-/*! *****************************************************************************
-Copyright (c) Microsoft Corporation. All rights reserved.
-Licensed under the Apache License, Version 2.0 (the "License"); you may not use
-this file except in compliance with the License. You may obtain a copy of the
-License at http://www.apache.org/licenses/LICENSE-2.0
-
-THIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
-KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED
-WARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,
-MERCHANTABILITY OR NON-INFRINGEMENT.
-
-See the Apache Version 2.0 License for specific language governing permissions
-and limitations under the License.
-***************************************************************************** */
 //#endregion
-//#region src/execution/sandbox/container-ts-loader-hook.ts
-var import_typescript = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {
+//#region ../../node_modules/.pnpm/typescript@6.0.3/node_modules/typescript/lib/typescript.js
+var require_typescript$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
+	/*! *****************************************************************************
+	Copyright (c) Microsoft Corporation. All rights reserved.
+	Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+	this file except in compliance with the License. You may obtain a copy of the
+	License at http://www.apache.org/licenses/LICENSE-2.0
+	
+	THIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+	KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED
+	WARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,
+	MERCHANTABILITY OR NON-INFRINGEMENT.
+	
+	See the Apache Version 2.0 License for specific language governing permissions
+	and limitations under the License.
+	***************************************************************************** */
 	var ts = {};
 	((module$1) => {
 		"use strict";
@@ -8059,8 +8059,8 @@ ${lanes.join("\n")}
 		function getPathComponentsRelativeTo(from, to, stringEqualityComparer, getCanonicalFileName) {
 			const fromComponents = reducePathComponents(getPathComponents(from));
 			const toComponents = reducePathComponents(getPathComponents(to));
-			let start;
-			for (start = 0; start < fromComponents.length && start < toComponents.length; start++) {
+			let start = 0;
+			for (; start < fromComponents.length && start < toComponents.length; start++) {
 				const fromComponent = getCanonicalFileName(fromComponents[start]);
 				const toComponent = getCanonicalFileName(toComponents[start]);
 				if (!(start === 0 ? equateStringsCaseInsensitive : stringEqualityComparer)(fromComponent, toComponent)) break;
@@ -147892,6 +147892,11 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
 			if (typeof module !== "undefined" && module.exports) module.exports = v;
 		}
 	});
+}));
+//#endregion
+//#region src/execution/sandbox/container-ts-loader-hook.ts
+var import_typescript = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {
+	module.exports = require_typescript$1();
 })))(), 1);
 function resolve(specifier, context, nextResolve) {
 	if (specifier.endsWith(".js") && (specifier.startsWith("./") || specifier.startsWith("../"))) try {

package/dist/eval-runner.js

@@ -1,6 +1,6 @@
 import { createRequire, register } from "node:module";
 import { normalizeLineEndings, sha256, toErrorMessage } from "@kici-dev/shared";
-import { buildKiciApi, buildNeedsContext, createFilterContext, setJobOutputsMap, setStepOutputsMap, setStepRefMap } from "@kici-dev/sdk/internal";
+import { buildKiciApi, buildNeedsContext, createFilterContext } from "@kici-dev/sdk/internal";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { format } from "node:util";
 import path, { join } from "node:path";
@@ -165,28 +165,25 @@ var workflow_loader_exports = /* @__PURE__ */ __exportAll({
 * ESM modules by resolved URL, so importing that path yields the workflow's live
 * singleton, not a fresh copy.
 *
-* Both specifiers resolve to the same module-global maps — `internal.ts` and the
-* root barrel re-export the same `outputs.js` bindings — so the fallback below
-* changes which entry is imported, never which singleton is mutated.
-*
-* Falls back to the agent's bundled setters when neither resolves (mirrors
-* `resolveSdkSetters` in the compiler's test runner).
+* The setters live only on `@kici-dev/sdk/internal`. A tree whose SDK does not
+* publish that subpath cannot be wired to this agent, and the agent's own
+* bundled setters would mutate a map the workflow's proxies never read — so the
+* mismatch is refused here rather than surfacing later as an empty `.result`.
 */
 async function resolveWorkflowSdkSetters(workflowFilePath) {
 	const req = createRequire(workflowFilePath);
-	for (const specifier of ["@kici-dev/sdk/internal", "@kici-dev/sdk"]) try {
-		const sdkEntry = req.resolve(specifier);
-		const sdk = await import(pathToFileURL(sdkEntry).href);
-		if (typeof sdk.setStepOutputsMap === "function" && typeof sdk.setStepRefMap === "function" && typeof sdk.setJobOutputsMap === "function") return {
-			setStepOutputsMap: sdk.setStepOutputsMap,
-			setStepRefMap: sdk.setStepRefMap,
-			setJobOutputsMap: sdk.setJobOutputsMap
-		};
-	} catch {}
+	let sdk;
+	try {
+		const sdkEntry = req.resolve("@kici-dev/sdk/internal");
+		sdk = await import(pathToFileURL(sdkEntry).href);
+	} catch (err) {
+		throw new Error(`Could not resolve @kici-dev/sdk/internal from ${workflowFilePath}: the workflow tree must depend on @kici-dev/sdk@>=0.8.0 to run on this agent (agent baked @kici-dev/sdk@${AGENT_SDK_VERSION}). Upgrade the repository's @kici-dev/sdk and recompile: ${toErrorMessage(err)}`);
+	}
+	if (typeof sdk.setStepOutputsMap !== "function" || typeof sdk.setStepRefMap !== "function" || typeof sdk.setJobOutputsMap !== "function") throw new Error(`@kici-dev/sdk/internal resolved from ${workflowFilePath} carries no output-map setters; the workflow tree must depend on @kici-dev/sdk@>=0.8.0 to run on this agent (agent baked @kici-dev/sdk@${AGENT_SDK_VERSION}).`);
 	return {
-		setStepOutputsMap,
-		setStepRefMap,
-		setJobOutputsMap
+		setStepOutputsMap: sdk.setStepOutputsMap,
+		setStepRefMap: sdk.setStepRefMap,
+		setJobOutputsMap: sdk.setJobOutputsMap
 	};
 }
 function ensureLoaderHookRegistered() {
@@ -361,7 +358,7 @@ async function extractStepsFromDynamicJob(workflow, dynamicIndex, jobName, event
 	const dynamicFn = extractDynamicJobFn(workflow, dynamicIndex);
 	const { $ } = await import("zx");
 	const { createLogger } = await import("@kici-dev/shared");
-	const { buildKiciApi, buildNeedsContext } = await import("@kici-dev/sdk");
+	const { buildKiciApi, buildNeedsContext } = await import("@kici-dev/sdk/internal");
 	const log = createLogger({ prefix: `dynamic-job-fn:${workflow.name}` });
 	const kici = buildKiciApi(apiTransport ?? (() => Promise.reject(/* @__PURE__ */ new Error("Agent API not available during re-evaluation"))));
 	const needs = upstreamSnapshot ? buildNeedsContext(upstreamSnapshot, declaredNeeds ?? []) : void 0;
@@ -398,8 +395,8 @@ async function extractStepsFromDynamicJob(workflow, dynamicIndex, jobName, event
 var AGENT_SDK_VERSION, AGENT_SDK_BUNDLE_HASH, hookRegistered;
 var init_workflow_loader = __esmMin((() => {
 	init_generator_context();
-	AGENT_SDK_VERSION = "0.7.0";
-	AGENT_SDK_BUNDLE_HASH = "065963c7765dc8d87e04d45f57d7e15be1613da705e4ff3ec3742fd1408b7bf5";
+	AGENT_SDK_VERSION = "0.9.0";
+	AGENT_SDK_BUNDLE_HASH = "b012bd8bace3df9e574252bf290c652bc39766da617acf51729a08586756266d";
 	hookRegistered = false;
 }));
 //#endregion

package/dist/execution/artifacts/artifact-engine.d.ts

@@ -42,7 +42,7 @@ export interface ArtifactTransport {
     /** Request a presigned PUT for `name` at `declaredSizeBytes`; enforced before minting. */
     beginUpload(name: string, declaredSizeBytes: number): Promise<ArtifactBeginUploadResult>;
     /** Confirm the upload finished — records the DB row. */
-    completeUpload(name: string, sizeBytes: number, sha256: string, storageKey: string): Promise<void>;
+    completeUpload(name: string, sha256: string): Promise<void>;
     /** Resolve a named artifact of this run to a presigned GET + its size/sha256. */
     download(name: string): Promise<ArtifactDownloadLookup>;
 }

package/dist/execution/sandbox/ipc-protocol.d.ts

@@ -313,12 +313,8 @@ export interface ArtifactRequestIpc {
     name: string;
     /** Packed tarball size in bytes — drives the enforcement gates. `beginUpload` only. */
     declaredSizeBytes?: number;
-    /** Confirmed tarball size in bytes. `completeUpload` only. */
-    sizeBytes?: number;
     /** SHA-256 of the tarball bytes. `completeUpload` only. */
     sha256?: string;
-    /** Storage key echoed from the grant response. `completeUpload` only. */
-    storageKey?: string;
 }
 export type RunnerToAgentMessage = ReadyMessage | StepStartMessage | StepCompleteMessage | LogLineMessage | StepSecretMountMessage | JobCompleteMessage | HooksDeclaredMessage | CompletionHooksDoneMessage | EventEmitRequest | ConcurrencyReportMessage | AgentApiRequestIpc | CacheRequestIpc | ProvenanceRequestIpc | ArtifactRequestIpc | GitGrantRequestIpc | StepApprovalRequestIpc;
 /** Instruct the workflow runner to execute a job. */
@@ -554,7 +550,6 @@ export interface JobExecutionRequest {
      */
     credentialHelperPath?: string;
     /** SHA-256 hash of the source tarball bytes for integrity verification. */
-    sourceTarHash?: string;
     sourceTarDigest?: string;
     /** URL to pre-built dependency tarball (skip install if present). */
     depsUrl?: string;

package/dist/execution/source-restore.d.ts

@@ -7,18 +7,13 @@
  * optimization — source tarballs are tiny (kilobytes, not the hundreds of
  * megabytes a `node_modules/` tarball carries).
  *
- * Two properties this path is responsible for, both of which it previously
- * lacked:
+ * Two properties this path is responsible for:
  *
  * **Verification.** `dispatch.sourceTarDigest` is the SHA-256 of the tarball's
  * own bytes, so the download is checked before anything is extracted — the same
- * contract `restoreDeps` has always had via `depsHash`. The older
- * `dispatch.sourceTarHash` field carries the workflow `contentHash` instead, so
- * it never could serve this purpose; it stays on the wire for older peers and
- * is deliberately not used as a verification input here. When no digest is
- * dispatched (an older orchestrator, or a source that did not come from the
- * content-addressed cache) the restore proceeds unverified rather than failing,
- * so a mixed-version rollout still runs.
+ * contract `restoreDeps` has via `depsHash`. When no digest is dispatched (a
+ * source that did not come from the content-addressed cache) the restore
+ * proceeds unverified rather than failing.
  *
  * **Replacement, not overlay.** Extraction lands in a scratch directory and the
  * result REPLACES `workDir/.kici` wholesale, save for `node_modules/` — the one

package/dist/execution/workflow-loader.d.ts

@@ -34,12 +34,10 @@ export interface SdkOutputSetters {
  * ESM modules by resolved URL, so importing that path yields the workflow's live
  * singleton, not a fresh copy.
  *
- * Both specifiers resolve to the same module-global maps — `internal.ts` and the
- * root barrel re-export the same `outputs.js` bindings — so the fallback below
- * changes which entry is imported, never which singleton is mutated.
- *
- * Falls back to the agent's bundled setters when neither resolves (mirrors
- * `resolveSdkSetters` in the compiler's test runner).
+ * The setters live only on `@kici-dev/sdk/internal`. A tree whose SDK does not
+ * publish that subpath cannot be wired to this agent, and the agent's own
+ * bundled setters would mutate a map the workflow's proxies never read — so the
+ * mismatch is refused here rather than surfacing later as an empty `.result`.
  */
 export declare function resolveWorkflowSdkSetters(workflowFilePath: string): Promise<SdkOutputSetters>;
 /**

package/dist/provenance/statement-builder.d.ts

@@ -43,8 +43,8 @@ export interface BuildStatementInput {
 }
 /**
  * Agent-local job context used to freeze a provenance statement for a deferred
- * attestation. When the Platform mint fails transiently there is no identity
- * token to read claims from, so the statement is built from facts the agent
+ * attestation. When the orchestrator's mint defers there is no identity token
+ * to read claims from, so the statement is built from facts the agent
  * already holds about the job it just ran. Only the identity token is deferred;
  * these attested facts are sealed (DSSE-signed) at build time.
  */

package/dist/server.js

@@ -815,6 +815,23 @@ var OrchestratorClient = class OrchestratorClient {
 	* GitHub Actions run hangs until the job timeout.
 	*/
 	onClaimFailedPermanently = null;
+	/**
+	* Fired once when authentication fails permanently — an `auth.failure` frame,
+	* or the orchestrator closing with WS_CLOSE_AGENT_AUTH_FAILED (a revoked token,
+	* or a protocol version below the orchestrator's floor). The client never
+	* reconnects after this, so server.ts wires it to a non-zero graceful
+	* shutdown; without it the health HTTP server keeps a process alive that can
+	* never register again, and a one-shot GitHub Actions agent holds its runner
+	* until the job timeout.
+	*/
+	onAuthFailedPermanently = null;
+	/** Marks the auth failure permanent and fires onAuthFailedPermanently exactly once. */
+	failAuthPermanently(reason) {
+		const first = !this.authFailed;
+		this.authFailed = true;
+		this.intentionalDisconnect = true;
+		if (first) this.onAuthFailedPermanently?.(reason);
+	}
 	constructor(options) {
 		this.url = options.url;
 		this.agentId = options.agentId;
@@ -1225,9 +1242,7 @@ var OrchestratorClient = class OrchestratorClient {
 				messageId: completeId,
 				jobId,
 				name: request.name,
-				sizeBytes: request.sizeBytes,
-				sha256: request.sha256,
-				storageKey: request.storageKey
+				sha256: request.sha256
 			};
 			if (!hasOrchAgentCapability(this.orchCapabilities, "artifactCompleteAck")) {
 				this.sendDirect(complete);
@@ -1480,8 +1495,7 @@ var OrchestratorClient = class OrchestratorClient {
 					code,
 					reason: reason.toString()
 				});
-				this.authFailed = true;
-				this.intentionalDisconnect = true;
+				this.failAuthPermanently(reason.toString() || "orchestrator closed with auth-failed code");
 			}
 			this._state = "disconnected";
 			this.stopHeartbeat();
@@ -1851,8 +1865,7 @@ var OrchestratorClient = class OrchestratorClient {
 					break;
 				case "auth.failure":
 					logger$16.error("Authentication FAILED -- token is invalid or expired. NOT retrying.", { reason: msg.reason });
-					this.authFailed = true;
-					this.intentionalDisconnect = true;
+					this.failAuthPermanently(msg.reason);
 					if (this.ws) {
 						this.ws.close(1e3, "Auth failed");
 						this.ws = null;
@@ -1918,6 +1931,8 @@ var OrchestratorClient = class OrchestratorClient {
 						logWindowHours: msg.logWindowHours
 					});
 					this.streamFleetBundle(msg);
+					break;
+				case "rate.limit.warning": logger$16.warn("Orchestrator rate-limited this agent and dropped a frame", { retryAfterMs: msg.retryAfterMs });
 			}
 			return;
 		}
@@ -2159,14 +2174,14 @@ function installConsoleCapture() {
 //#region src/routes/health.ts
 function safe(name, fallback = "unknown") {
 	switch (name) {
-		case "version": return "0.7.0";
-		case "buildCommit": return "31843a21c";
-		case "sdkVersion": return "0.7.0";
-		case "sdkBundleHash": return "065963c7765dc8d87e04d45f57d7e15be1613da705e4ff3ec3742fd1408b7bf5";
-		case "sharedVersion": return "0.7.0";
-		case "sharedBundleHash": return "a79be949815735b9e36eecc716f7eb07aa36c7bffba62e798e7e19f31a474eff";
-		case "engineVersion": return "0.7.0";
-		case "engineBundleHash": return "380f6edf7e0e5cfe988fa0f98512de6e6864f4f2a7a8d07f67e2ab84ed637d19";
+		case "version": return "0.9.0";
+		case "buildCommit": return "69765a7ee";
+		case "sdkVersion": return "0.9.0";
+		case "sdkBundleHash": return "b012bd8bace3df9e574252bf290c652bc39766da617acf51729a08586756266d";
+		case "sharedVersion": return "0.9.0";
+		case "sharedBundleHash": return "c1c70e41a1ec14fd7cf3a6047251e9aa11258a21e3694ea89a50e8bf14b99f9d";
+		case "engineVersion": return "0.9.0";
+		case "engineBundleHash": return "c5e0e34d8d7f56f747bba71076a5fbccac4c932be855ef71c596b4211ca8698c";
 		default: return fallback;
 	}
 }
@@ -3689,18 +3704,13 @@ var init_download = __esmMin((() => {
 * optimization — source tarballs are tiny (kilobytes, not the hundreds of
 * megabytes a `node_modules/` tarball carries).
 *
-* Two properties this path is responsible for, both of which it previously
-* lacked:
+* Two properties this path is responsible for:
 *
 * **Verification.** `dispatch.sourceTarDigest` is the SHA-256 of the tarball's
 * own bytes, so the download is checked before anything is extracted — the same
-* contract `restoreDeps` has always had via `depsHash`. The older
-* `dispatch.sourceTarHash` field carries the workflow `contentHash` instead, so
-* it never could serve this purpose; it stays on the wire for older peers and
-* is deliberately not used as a verification input here. When no digest is
-* dispatched (an older orchestrator, or a source that did not come from the
-* content-addressed cache) the restore proceeds unverified rather than failing,
-* so a mixed-version rollout still runs.
+* contract `restoreDeps` has via `depsHash`. When no digest is dispatched (a
+* source that did not come from the content-addressed cache) the restore
+* proceeds unverified rather than failing.
 *
 * **Replacement, not overlay.** Extraction lands in a scratch directory and the
 * result REPLACES `workDir/.kici` wholesale, save for `node_modules/` — the one
@@ -6863,7 +6873,6 @@ function buildRequest(dispatch, workDir, extra) {
 		...extra?.credentialHelperPath ? { credentialHelperPath: extra.credentialHelperPath } : {},
 		...extra?.allowInstallScripts ? { allowInstallScripts: true } : {},
 		sourceTarUrl: dispatch.sourceTarUrl,
-		sourceTarHash: dispatch.sourceTarHash,
 		sourceTarDigest: dispatch.sourceTarDigest,
 		depsUrl: dispatch.depsUrl,
 		depsHash: dispatch.depsHash,
@@ -9861,10 +9870,10 @@ var init_job_runner = __esmMin((() => {
 				signal
 			});
 			buildLog("Packing .kici/ source tarball...");
-			const { tarball, hash: sourceTarHash } = await packKiciSource(workDir);
+			const { tarball, hash: sourceTarDigest } = await packKiciSource(workDir);
 			const sourceKey = {
 				contentHash: buildConfig.contentHash,
-				sourceTarDigest: sourceTarHash,
+				sourceTarDigest,
 				platform: os.platform(),
 				arch: os.arch()
 			};
@@ -9881,7 +9890,7 @@ var init_job_runner = __esmMin((() => {
 			this.sendJobStatus(dispatch, ExecutionJobStatus.enum.running, {
 				buildEvent: "source_packed",
 				contentHash: buildConfig.contentHash,
-				sourceTarHash
+				sourceTarDigest
 			});
 		}
 		/**
@@ -10657,14 +10666,14 @@ var init_between_jobs_controller = __esmMin((() => {
 * - SIGUSR1: Drain mode (stop accepting, finish current, exit)
 */
 init_npm_resolver();
-const AGENT_VERSION = "0.7.0";
-const BUILD_COMMIT = "31843a21c";
-const SDK_VERSION = "0.7.0";
-const SDK_BUNDLE_HASH = "065963c7765dc8d87e04d45f57d7e15be1613da705e4ff3ec3742fd1408b7bf5";
-const SHARED_VERSION = "0.7.0";
-const SHARED_BUNDLE_HASH = "a79be949815735b9e36eecc716f7eb07aa36c7bffba62e798e7e19f31a474eff";
-const ENGINE_VERSION = "0.7.0";
-const ENGINE_BUNDLE_HASH = "380f6edf7e0e5cfe988fa0f98512de6e6864f4f2a7a8d07f67e2ab84ed637d19";
+const AGENT_VERSION = "0.9.0";
+const BUILD_COMMIT = "69765a7ee";
+const SDK_VERSION = "0.9.0";
+const SDK_BUNDLE_HASH = "b012bd8bace3df9e574252bf290c652bc39766da617acf51729a08586756266d";
+const SHARED_VERSION = "0.9.0";
+const SHARED_BUNDLE_HASH = "c1c70e41a1ec14fd7cf3a6047251e9aa11258a21e3694ea89a50e8bf14b99f9d";
+const ENGINE_VERSION = "0.9.0";
+const ENGINE_BUNDLE_HASH = "c5e0e34d8d7f56f747bba71076a5fbccac4c932be855ef71c596b4211ca8698c";
 initTelemetry({
 	serviceName: "kici-agent",
 	otlpEndpoint: process.env.OTEL_EXPORTER_OTLP_ENDPOINT
@@ -11053,6 +11062,10 @@ await guardStartup(logger$1, async () => {
 		logger$1.error("Self-bootstrap claim failed permanently, shutting down", { reason });
 		gracefulShutdown("scaler-claim-failed", 1);
 	};
+	client.onAuthFailedPermanently = (reason) => {
+		logger$1.error("Authentication failed permanently, shutting down", { reason });
+		gracefulShutdown("auth-failed", 1);
+	};
 	process.on("SIGUSR1", () => {
 		logger$1.info("Received SIGUSR1, entering drain mode");
 		isDraining = true;