@kici-dev/compiler 0.1.27 → 0.2.0

package/dist/local-executor/dag-scheduler.d.ts

@@ -1,44 +0,0 @@
-/**
- * DAG-based parallel job scheduler with concurrency control and fail-fast.
- *
- * Generic scheduler that takes nodes with dependency relationships and
- * executes them via callbacks, respecting concurrency limits and
- * providing abort signals for fail-fast cancellation.
- */
-export interface DagNode {
-    name: string;
-    needs: string[];
-}
-interface DagExecutionCallbacks<T> {
-    execute: (name: string, signal: AbortSignal) => Promise<T>;
-    isSuccess: (result: T) => boolean;
-}
-interface DagOptions {
-    maxConcurrency: number;
-    failFast: boolean;
-}
-interface DagResult<T> {
-    results: Map<string, T>;
-    skipped: string[];
-    cancelled: string[];
-    status: 'success' | 'failure';
-}
-/**
- * Execute a DAG of nodes with bounded concurrency and fail-fast support.
- *
- * Algorithm:
- * 1. Detect cycles
- * 2. Initialize ready queue with zero-dependency nodes
- * 3. Event loop: launch ready nodes up to concurrency limit,
- *    await first completion, update state, repeat
- * 4. On failure: if failFast, abort all running and skip pending;
- *    if keep-going, only skip transitive dependents
- */
-export declare function executeDag<T>(nodes: DagNode[], callbacks: DagExecutionCallbacks<T>, options: DagOptions): Promise<DagResult<T>>;
-/**
- * Given a list of DAG nodes and a target job name, return the target
- * plus all transitive dependencies in topological order.
- */
-export declare function resolveJobFilter(nodes: DagNode[], targetName: string): DagNode[];
-export {};
-//# sourceMappingURL=dag-scheduler.d.ts.map

package/dist/local-executor/index.d.ts

@@ -1,23 +0,0 @@
-/**
- * Public API: executeLocal() orchestrating compile, match, resolve, schedule, report.
- *
- * Pipeline:
- * 1. Compile workflows from .kici/ sources
- * 2. Load workflows (discover runtime modules)
- * 3. Load secrets from local files
- * 4. Build event payload from git state + CLI overrides
- * 5. Match triggers to find active workflows
- * 6. Apply --workflow and --job filters
- * 7. Resolve jobs (matrix expansion, dynamic evaluation)
- * 8. Execute via DAG scheduler with concurrency control
- * 9. Return success/failure
- */
-import type { RunLocalOptions } from './types.js';
-/**
- * Execute workflows locally -- the full compile-match-resolve-execute pipeline.
- *
- * @param options - CLI options from `kici run local`
- * @returns true if all workflows succeeded, false otherwise
- */
-export declare function executeLocal(options: RunLocalOptions): Promise<boolean>;
-//# sourceMappingURL=index.d.ts.map

package/dist/local-executor/job-runner.d.ts

@@ -1,47 +0,0 @@
-/**
- * Job resolution (matrix/dynamic) and single-job execution with step context.
- *
- * Handles:
- * - Static job resolution
- * - Matrix expansion into multiple ResolvedJob instances
- * - Dynamic job function evaluation
- * - Single-job step-by-step execution with rules, abort, and output chaining
- */
-import type { Workflow, OutputsMap } from '@kici-dev/sdk';
-import { CheckMode } from '@kici-dev/engine';
-import type { SimulatedEvent } from '@kici-dev/engine';
-import type { ParsedSecrets } from '../test-runner/secrets-file.js';
-import type { ResolvedJob, LocalJobResult } from './types.js';
-/**
- * Context passed to executeResolvedJob for single-job execution.
- */
-export interface JobExecutionContext {
-    workflowName: string;
-    event: SimulatedEvent;
-    secrets: ParsedSecrets;
-    /** Original `.kici/` dir — used for compile, secrets, and SDK setter resolution. */
-    kiciDir: string;
-    /** Directory steps execute against (isolated tmp checkout, or the repo root with --in-place). */
-    execDir: string;
-    jobOutputsMap: OutputsMap;
-    signal: AbortSignal;
-    /** Run mode for idempotent steps. Defaults to `apply` when unset. */
-    checkMode?: CheckMode;
-    /** Resolved (coerced + defaulted) workflow-dispatch inputs for `ctx.dispatchInputs`. */
-    dispatchInputs?: Readonly<Record<string, string | number | boolean | null>>;
-}
-/**
- * Resolve all jobs in a workflow, expanding matrix jobs and evaluating dynamic jobs.
- *
- * - Static jobs: create ResolvedJob with name, needs, job reference
- * - Matrix jobs: use expandMatrix() from SDK, create one ResolvedJob per combination
- * - Dynamic job functions: evaluate the function, recursively resolve results
- * - Fan-in: if a job needs a matrix-expanded job, it needs ALL instances
- */
-export declare function resolveJobs(workflow: Workflow, event: SimulatedEvent): Promise<ResolvedJob[]>;
-/**
- * Execute a single resolved job: evaluate rules, run steps sequentially,
- * check abort signal between steps, collect outputs.
- */
-export declare function executeResolvedJob(resolvedJob: ResolvedJob, context: JobExecutionContext): Promise<LocalJobResult>;
-//# sourceMappingURL=job-runner.d.ts.map

package/dist/local-executor/materializer.d.ts

@@ -1,44 +0,0 @@
-/**
- * Materialize an isolated tmp checkout of the repo for `kici run local`.
- *
- * Reproduces the same workspace `kici run remote` reconstructs on the agent:
- * a clone checked out at HEAD, with the local overlay (dirty + untracked,
- * minus gitignored, with `.kiciignore` applied) copied on top and local
- * deletions removed. Steps then execute against this copy so the developer's
- * real working tree is never mutated.
- *
- * Secrets are NOT part of the overlay: gitignored files such as
- * `.kici/.env.local` are excluded by the shared selection, so the tmp checkout
- * never receives them — the run reads them from the original `.kici/`.
- */
-/**
- * A materialized isolated checkout.
- */
-export interface MaterializedCheckout {
-    /** Absolute path to the tmp checkout directory */
-    path: string;
-    /** Remove the tmp checkout directory */
-    cleanup: () => Promise<void>;
-}
-/**
- * Options for {@link materializeCheckout}.
- */
-export interface MaterializeOptions {
-    /** Base directory for the tmp checkout (default: os.tmpdir()) */
-    runDir?: string;
-}
-/**
- * Materialize the repo at `repoRoot` into an isolated tmp checkout.
- *
- * @param repoRoot - Path to the git repository root
- * @param opts - Optional configuration (tmp base directory)
- * @returns The tmp checkout path and a cleanup callback
- * @throws If `repoRoot` is not inside a git work tree
- */
-export declare function materializeCheckout(repoRoot: string, opts?: MaterializeOptions): Promise<MaterializedCheckout>;
-/**
- * Collect stale retained checkouts under the run base. Invoked on every
- * `kici run local`; never throws (the GC must not break the run).
- */
-export declare function gcStaleRunCheckouts(base: string): Promise<string[]>;
-//# sourceMappingURL=materializer.d.ts.map

package/dist/local-executor/output-streamer.d.ts

@@ -1,31 +0,0 @@
-/**
- * Output formatting for local execution: tree summary, JSON, JUnit XML.
- *
- * - displayLocalSummary: tree-format summary with per-step timing
- * - formatLocalJsonResult: structured JSON output
- * - formatLocalJunitResult: JUnit XML for CI integration
- */
-import type { WorkflowExecutionResult } from './types.js';
-/**
- * Display tree-format execution summary to the console.
- *
- * Shows per-workflow, per-job, per-step timing and status.
- * Matrix values appear in the job name.
- */
-export declare function displayLocalSummary(results: WorkflowExecutionResult[]): void;
-/**
- * Format workflow execution results as structured JSON.
- *
- * @returns JSON string with 2-space indentation.
- */
-export declare function formatLocalJsonResult(results: WorkflowExecutionResult[]): string;
-/**
- * Format workflow execution results as JUnit XML.
- *
- * Each workflow maps to a <testsuite>, each job maps to a <testcase>.
- * Failed jobs include failure message. Skipped/cancelled jobs use <skipped />.
- *
- * @returns Valid JUnit XML string.
- */
-export declare function formatLocalJunitResult(results: WorkflowExecutionResult[]): string;
-//# sourceMappingURL=output-streamer.d.ts.map

package/dist/local-executor/payload-generator.d.ts

@@ -1,16 +0,0 @@
-import type { SimulatedEvent } from '@kici-dev/engine';
-import type { RunLocalOptions } from './types.js';
-/**
- * Generate a SimulatedEvent from git state and CLI overrides.
- *
- * For push events: detects branch, SHA, and changed files from git.
- * For PR events: uses current branch as source, 'main' (or --branch) as target.
- * If --payload flag is provided, delegates to existing buildEventPayload.
- * Falls back gracefully when not in a git repository.
- *
- * @param event - Event argument string (e.g. 'push', 'pr:open')
- * @param options - CLI options with override fields
- * @returns Generated SimulatedEvent
- */
-export declare function generateEventPayload(event: string, options: RunLocalOptions): Promise<SimulatedEvent>;
-//# sourceMappingURL=payload-generator.d.ts.map

package/dist/local-executor/picker.d.ts

@@ -1,33 +0,0 @@
-/**
- * Interactive workflow picker for `kici run local --pick`.
- *
- * Lists every workflow with a summary of its triggers, lets the user pick one
- * (and a specific trigger when there are multiple), and returns the derived
- * event arg plus workflow name. The caller feeds these back into the standard
- * executeLocal pipeline so the run remains consistent with normal trigger
- * matching.
- */
-import type { Workflow } from '@kici-dev/sdk';
-export declare class PickerCancelledError extends Error {
-    constructor(message: string);
-}
-export interface PickerOptions {
-    /**
-     * Optional event-arg filter. When set, restrict the workflow list to those
-     * with at least one trigger whose derived event arg shares the same family
-     * (e.g. `filterEvent: 'pr'` keeps any workflow with a `pr:*` trigger).
-     */
-    filterEvent?: string;
-}
-export interface PickerResult {
-    event: string;
-    workflow: string;
-}
-/**
- * Run the interactive picker.
- *
- * @throws PickerCancelledError when stdin is not a TTY, when no eligible
- *   workflows exist, or when the user aborts one of the prompts.
- */
-export declare function runPicker(workflows: Workflow[], opts?: PickerOptions): Promise<PickerResult>;
-//# sourceMappingURL=picker.d.ts.map

package/dist/local-executor/runs-on-display.d.ts

@@ -1,9 +0,0 @@
-import type { RunsOn } from '@kici-dev/sdk';
-/**
- * Render a job's `runsOn` to the comma-joined label string the local/test
- * runners surface as `ctx.job.runsOn`. A `runsOnAll` job has no `runsOn` —
- * locally it runs once on this machine, so we surface the marker `'runsOnAll'`.
- * RegExp selectors render via their `/source/flags` literal.
- */
-export declare function localRunsOnString(runsOn: RunsOn | undefined): string;
-//# sourceMappingURL=runs-on-display.d.ts.map

package/dist/local-executor/secret-loader.d.ts

@@ -1,18 +0,0 @@
-import type { ParsedSecrets } from '../test-runner/secrets-file.js';
-/**
- * Load secrets from multiple sources with merge precedence.
- *
- * Merge order (lowest to highest priority):
- * 1. .kici/.secrets (INI-style, backward compat)
- * 2. .kici/.env.local (dotenv format)
- * 3. .kici/secrets.yaml (YAML with context scopes, merged flat)
- * 4. --env KEY=VALUE CLI flags
- *
- * Note: process.env is NOT merged here -- it's handled at step-context level.
- *
- * @param kiciDir - Path to the .kici directory
- * @param envFlags - Optional --env KEY=VALUE flag values
- * @returns Merged secrets with correct precedence
- */
-export declare function loadLocalSecrets(kiciDir: string, envFlags?: string[]): Promise<ParsedSecrets>;
-//# sourceMappingURL=secret-loader.d.ts.map

package/dist/local-executor/to-event-payload.d.ts

@@ -1,16 +0,0 @@
-import type { SimulatedEvent } from '@kici-dev/engine';
-import type { EventPayload } from '@kici-dev/sdk';
-/**
- * Map a {@link SimulatedEvent} into the normalized SDK {@link EventPayload}
- * envelope that every user-authored dynamic function (dynamic job generators,
- * `concurrency.group()`) receives as its `event` argument.
- *
- * `SimulatedEvent` already carries the normalized fields (`type`, `action`,
- * `targetBranch`, …) alongside the raw provider body under `payload`, so the
- * single cast at this boundary is a deliberate type assertion over a
- * structurally-identical value: it asserts the discriminated-union view
- * without reshaping anything. Raw provider fields stay nested under
- * `payload.<field>`; normalized fields live at the top level.
- */
-export declare function toEventPayload(event: SimulatedEvent): EventPayload;
-//# sourceMappingURL=to-event-payload.d.ts.map

package/dist/local-executor/types.d.ts

@@ -1,93 +0,0 @@
-import type { MatrixValues, Job } from '@kici-dev/sdk';
-import type { CheckMode } from '@kici-dev/engine';
-import type { JobResult } from '../test-runner/job-executor.js';
-/**
- * All CLI flags for `kici run local`.
- */
-export interface RunLocalOptions {
-    /** Positional arg: event type (e.g. 'push', 'pr:open'). Optional when `pick` is true. */
-    event?: string;
-    /** --pick / -p: interactive workflow picker (derives event arg from the selected trigger) */
-    pick?: boolean;
-    /** --workflow filter: run only matching workflow */
-    workflow?: string;
-    /** --job filter: run only matching job (includes transitive deps) */
-    job?: string;
-    /** --branch override: override detected git branch */
-    branch?: string;
-    /** --sha override: override detected git SHA */
-    sha?: string;
-    /** --payload path: explicit event payload JSON file */
-    payload?: string;
-    /** --concurrency: max parallel jobs (default: os.availableParallelism()) */
-    concurrency?: number;
-    /** --keep-going: continue after job failure (default: false) */
-    keepGoing?: boolean;
-    /** --container: use Podman isolation (default: false) */
-    container?: boolean;
-    /** --env KEY=VALUE overrides (repeatable) */
-    env?: string[];
-    /** --input KEY=VALUE typed workflow-dispatch inputs (repeatable) */
-    inputs?: string[];
-    /** --quiet: minimal output */
-    quiet?: boolean;
-    /** --json: JSON output format */
-    json?: boolean;
-    /** --junit: path for JUnit XML report */
-    junit?: string;
-    /** --files: override changed file paths (repeatable) */
-    files?: string[];
-    /** --debug: verbose debug output */
-    debug?: boolean;
-    /** --kici-dir: path to .kici directory */
-    kiciDir?: string;
-    /** --in-place: run against the real working directory instead of an isolated tmp checkout */
-    inPlace?: boolean;
-    /** --keep: always retain the isolated tmp checkout (default: keep only on failure) */
-    keep?: boolean;
-    /**
-     * Run mode resolved from --check / --fail-on-drift. Threads to the agent step
-     * loop: `apply` (default) converges, `check` previews drift, `check-fail-on-drift`
-     * previews drift and fails the run if any step reports drift. Defaults to `apply`.
-     */
-    checkMode?: CheckMode;
-}
-/**
- * A job after matrix expansion with resolved values.
- */
-export interface ResolvedJob {
-    /** Original job definition */
-    job: Job;
-    /** Expanded name (e.g. 'test (node-18, linux)') */
-    expandedName: string;
-    /** Matrix values for this expansion (empty object if no matrix) */
-    matrixValues: MatrixValues;
-    /** Resolved dependency names (expanded names of upstream jobs) */
-    resolvedNeeds: string[];
-}
-/**
- * Result for a single job execution in local mode.
- * Extends JobResult with matrix context and cancellation.
- */
-export interface LocalJobResult extends Omit<JobResult, 'status'> {
-    /** Job completion status (adds 'cancelled' to base JobResult statuses) */
-    status: 'success' | 'failure' | 'skipped' | 'cancelled';
-    /** Matrix values if this job was part of a matrix expansion */
-    matrixValues?: MatrixValues;
-    /** Whether this job was cancelled (e.g. by AbortSignal) */
-    cancelled?: boolean;
-}
-/**
- * Result of executing a workflow locally.
- */
-export interface WorkflowExecutionResult {
-    /** Workflow name */
-    name: string;
-    /** Overall status */
-    status: 'success' | 'failure' | 'skipped';
-    /** Individual job results */
-    jobs: LocalJobResult[];
-    /** Total execution duration in milliseconds */
-    durationMs: number;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/local-executor/workflow-lock.d.ts

@@ -1,82 +0,0 @@
-/**
- * Workflow-level concurrency lock for `kici run local`.
- *
- * Enforces the SDK-declared `workflow.concurrency` block across concurrent
- * `kici run local` invocations on the same machine and user. Mirrors the
- * orchestrator semantics:
- *
- * - `group` callback evaluated against the simulated event, fails closed
- *   on throw via {@link ConcurrencyKeyEvaluationError} (the caller aborts the
- *   run rather than fall back to the workflow name).
- * - `cancelInProgress: true` interrupts the holder via SIGTERM, escalates
- *   to SIGKILL after `KICI_LOCAL_LOCK_KILL_GRACE_MS` (default 30000ms).
- * - Otherwise contention waits in FIFO order on the underlying file lock.
- * - Stale locks (holder PID gone per `process.kill(pid, 0)`) are reclaimed.
- *
- * The lock primitive is `proper-lockfile` (atomic `mkdir` of a `.lock`
- * directory next to the metadata sidecar). The lock identity is
- * `sha256(workflowName + '\0' + groupKey)`, scoped to a per-user lock dir
- * (`$XDG_RUNTIME_DIR/kici-local-locks/` on Linux, else
- * `os.tmpdir()/kici-local-locks-<uid>/`).
- */
-import type { Workflow } from '@kici-dev/sdk';
-import type { SimulatedEvent } from '@kici-dev/engine';
-/** Sidecar metadata persisted next to the lock dir for diagnostics + reclamation. */
-export interface LockHolderMetadata {
-    pid: number;
-    startedAt: string;
-    workflowName: string;
-    groupKey: string;
-    hostname: string;
-}
-/** Handle returned by {@link acquireWorkflowLock}. Caller MUST invoke `release()` in a `finally`. */
-export interface WorkflowLockHandle {
-    release(): Promise<void>;
-}
-export interface AcquireWorkflowLockOptions {
-    workflowName: string;
-    workflow: Workflow;
-    /** The simulated event mapped to the normalized envelope passed as `groupCtx.event`. */
-    event: SimulatedEvent;
-    /** Branch derived from the simulated event for `groupCtx.branch`. */
-    branch: string;
-    debug?: boolean;
-}
-/**
- * Thrown when the workflow's `concurrency.group()` function throws or rejects.
- * The caller surfaces this as a workflow failure (it does NOT fall back to the
- * workflow name as a key — fail-closed is the documented contract).
- */
-export declare class ConcurrencyKeyEvaluationError extends Error {
-    readonly cause?: Error;
-    readonly workflowName: string;
-    constructor(workflowName: string, cause: unknown);
-}
-/** Module-level stub for `process.kill`, swappable by tests via {@link __setKillFnForTesting}. */
-type KillFn = (pid: number, signal?: string | number) => boolean;
-/** Test-only: swap the kill function so unit tests don't actually signal real PIDs. */
-export declare function __setKillFnForTesting(fn?: KillFn): void;
-/**
- * Resolve the per-user lock directory. Prefers `$XDG_RUNTIME_DIR/kici-local-locks/`
- * (Linux per-user runtime dir, mode 0700), else `os.tmpdir()/kici-local-locks-<uid>/`.
- *
- * Created with `mode: 0o700`. Falls through silently to the tmpdir form on EACCES/EROFS.
- */
-export declare function resolveLockDir(): Promise<string>;
-/**
- * Evaluate the workflow's concurrency `group` function against the simulated event.
- *
- * Returns `null` when the workflow has no `concurrency` block. Throws
- * {@link ConcurrencyKeyEvaluationError} when the group function throws or rejects.
- */
-export declare function resolveConcurrencyKey(workflow: Workflow, event: SimulatedEvent, branch: string): Promise<string | null>;
-/**
- * Acquire the workflow-level concurrency lock for a `kici run local` invocation.
- *
- * Returns `null` immediately when the workflow has no `concurrency` block (no
- * locking is performed). Otherwise blocks until the lock is held, then returns
- * a handle whose `release()` MUST be invoked in a `finally`.
- */
-export declare function acquireWorkflowLock(opts: AcquireWorkflowLockOptions): Promise<WorkflowLockHandle | null>;
-export {};
-//# sourceMappingURL=workflow-lock.d.ts.map

package/dist/package-F7UXSDHW.json

@@ -1,74 +0,0 @@
-{
-	"name": "winston",
-	"description": "A logger for just about everything.",
-	"version": "3.19.0",
-	"author": "Charlie Robbins <charlie.robbins@gmail.com>",
-	"maintainers": [
-		"David Hyde <dabh@alumni.stanford.edu>"
-	],
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/winstonjs/winston.git"
-	},
-	"keywords": [
-		"winston",
-		"logger",
-		"logging",
-		"logs",
-		"sysadmin",
-		"bunyan",
-		"pino",
-		"loglevel",
-		"tools",
-		"json",
-		"stream"
-	],
-	"dependencies": {
-		"@dabh/diagnostics": "^2.0.8",
-		"@colors/colors": "^1.6.0",
-		"async": "^3.2.3",
-		"is-stream": "^2.0.0",
-		"logform": "^2.7.0",
-		"one-time": "^1.0.0",
-		"readable-stream": "^3.4.0",
-		"safe-stable-stringify": "^2.3.1",
-		"stack-trace": "0.0.x",
-		"triple-beam": "^1.3.0",
-		"winston-transport": "^4.9.0"
-	},
-	"devDependencies": {
-		"@babel/cli": "^7.23.9",
-		"@babel/core": "^7.24.0",
-		"@babel/preset-env": "^7.24.0",
-		"@dabh/eslint-config-populist": "^4.4.0",
-		"@types/node": "^20.11.24",
-		"abstract-winston-transport": "^0.5.1",
-		"assume": "^2.2.0",
-		"cross-spawn-async": "^2.2.5",
-		"eslint": "^8.57.0",
-		"hock": "^1.4.1",
-		"jest": "^29.7.0",
-		"rimraf": "5.0.10",
-		"split2": "^4.1.0",
-		"std-mocks": "^2.0.0",
-		"through2": "^4.0.2",
-		"winston-compat": "^0.1.5"
-	},
-	"main": "./lib/winston.js",
-	"browser": "./dist/winston",
-	"types": "./index.d.ts",
-	"scripts": {
-		"lint": "eslint lib/*.js lib/winston/*.js lib/winston/**/*.js --resolve-plugins-relative-to ./node_modules/@dabh/eslint-config-populist",
-		"test": "jest",
-		"test:unit": "jest -c test/jest.config.unit.js",
-		"test:integration": "jest -c test/jest.config.integration.js",
-		"test:typescript": "npx --package typescript tsc --project test",
-		"build": "babel lib -d dist",
-		"prebuild": "rimraf dist",
-		"prepublishOnly": "npm run build"
-	},
-	"engines": {
-		"node": ">= 12.0.0"
-	},
-	"license": "MIT"
-}