@kici-dev/compiler 0.2.0 → 0.4.0

package/dist/cli.js

@@ -7,7 +7,7 @@ import { realpathSync } from "node:fs";
 import { Argument, Command, Option } from "commander";
 import pc from "picocolors";
 //#region src/cli.ts
-const version = "0.2.0";
+const version = "0.4.0";
 /**
 * Top-level commands that were removed, mapped to their current equivalent.
 * Consulted when the CLI hits an unknown command so the user gets a precise

package/dist/llm-context/llms-architecture.txt

@@ -308,9 +308,9 @@ The `ConfigReloader` uses a dependency injection pattern with callbacks for subs
 
 ### ProviderRegistry
 
-The `ProviderRegistry` maps routing keys to provider bundles. Each routing key (e.g., `github:12345`) is associated with a `ProviderBundle` containing:
+The `ProviderRegistry` maps routing keys to provider bundles. Each routing key (e.g., `github:12345`) is associated with a `ProviderBundle`. Only the normalizer is required; every other capability is optional, so a bundle carries exactly the interfaces its provider implements:
 
-- `WebhookNormalizer` -- normalizes incoming webhooks to a standard format
+- `WebhookNormalizer` (required) -- normalizes incoming webhooks to a standard format
 - `LockFileFetcher` -- fetches lock files from the repository
 - `ChangedFilesFetcher` -- determines which files changed
 - `CloneTokenProvider` -- generates clone tokens for agents
@@ -318,6 +318,8 @@ The `ProviderRegistry` maps routing keys to provider bundles. Each routing key (
 - `ContributorResolver` -- resolves contributor permissions for trust-tier gating
 - `CheckStatusPoster` -- posts check statuses (approval/hold) to the git provider
 
+A GitHub App source populates all seven. A plain generic webhook source carries only the normalizer -- it has no repository API to fetch a lock file, resolve a contributor, or post a check against -- so the pipeline skips the stages whose interface is absent rather than failing the delivery.
+
 Provider registrations are managed via the `sources` database table, not via `SharedConfig`. When the orchestrator connects to the Platform relay, it reads source records from the DB and sends `source.register` messages. Changes to sources (add/remove) are detected via PostgreSQL LISTEN/NOTIFY on the `sources_change` channel and pushed to the Platform via `source.secrets` and `source.register`/`source.deregister`.
 
 ### Per-App Credentials
@@ -485,7 +487,7 @@ Remote runs are offered by the Platform; an orchestrator with no Platform connec
 
 KiCI runs two orchestrator-side caches — the **source tarball cache** (raw `.kici/` directory minus `node_modules/`) and the **dependency tarball cache** (packed `node_modules/`). Both use a build-then-execute pattern: the orchestrator checks the caches before dispatching execution jobs, and if the source cache is cold a build agent populates both in one pass.
 
-With the shared TypeScript loader hook plus source tarball, execution agents do not run `git clone` or compile anything at runtime — they perform exactly two S3 GETs (source + deps) and extract.
+With the shared TypeScript loader hook plus source tarball, execution agents never install or compile `.kici/` at runtime — they restore the workflow directory and its `node_modules` with two S3 GETs and extract. The workspace checkout is unaffected: an execution job still clones the repository at the dispatch ref unless it sets `checkout: false`, and the source tarball is restored over that clone.
 
 ### Cache miss flow
 
@@ -533,7 +535,7 @@ Execution Job Dispatch --> Execution Agent
 Done <-----------------------+
 ```
 
-The execution agent never clones the repo. The source tarball IS the workflow repo's `.kici/` directory.
+The execution agent never rebuilds `.kici/`. The source tarball IS the workflow repo's `.kici/` directory, extracted over the checkout.
 
 ### Cache hit flow
 
@@ -582,7 +584,7 @@ Dep cache misses alone do **not** trigger a build job. Deps are platform-specifi
 
 ### Cross-source / no-contentHash workflows
 
-- **Lock files without `contentHash`** (schema v1) skip the source cache entirely; agents compile from source. Regenerate lock files with `kici compile` to enable caching. The current lock file schema version is 31.
+- **Lock files without `contentHash`** (schema v1) skip the source cache entirely; agents compile from source. Regenerate lock files with `kici compile` to enable caching. The current lock file schema version is 32.
 - **Cross-source / global-workflow dispatch** (a workflow registered against source A fired by a webhook on source B) bypasses both caches. The registration's lock file entry still carries `contentHash`, but the cross-source path always clone-and-installs — the eval temp dir doesn't ship `@kici-dev/sdk`. The execution agent still verifies `contentHash` against the cloned source for drift detection.
 
 ### Build deduplication
@@ -593,7 +595,7 @@ When multiple webhooks trigger simultaneously for the same repository state, the
 
 If cache storage is unavailable or a download fails:
 
-- **Source tarball download failure:** Hard failure today — the agent does not fall back to `git clone` on the execution path. (The build path is where cloning happens.) In practice this is rare because the same orchestrator that issued the pre-signed URL controls the cache backend.
+- **Source tarball download failure:** Hard failure today — the agent does not fall back to rebuilding `.kici/` from the checkout. In practice this is rare because the same orchestrator that issued the pre-signed URL controls the cache backend.
 - **Dep tarball download failure:** Agent falls back to running `npm ci` / `npm install` inline.
 - **Dep tarball hash mismatch:** Agent retries the download twice (3 total attempts), then fails the job (no fallback for integrity failures).
 - **Source tarball drift (extracted `contentHash` ≠ lock file):** Hard failure with "Lock file is out of date: workflow source changed without regenerating kici.lock.json" — see [Lock file and drift](https://docs.kici.dev/user/lock-file-and-drift/).

package/dist/llm-context/llms-full.txt

@@ -13978,9 +13978,9 @@ The `ConfigReloader` uses a dependency injection pattern with callbacks for subs
 
 ### ProviderRegistry
 
-The `ProviderRegistry` maps routing keys to provider bundles. Each routing key (e.g., `github:12345`) is associated with a `ProviderBundle` containing:
+The `ProviderRegistry` maps routing keys to provider bundles. Each routing key (e.g., `github:12345`) is associated with a `ProviderBundle`. Only the normalizer is required; every other capability is optional, so a bundle carries exactly the interfaces its provider implements:
 
-- `WebhookNormalizer` -- normalizes incoming webhooks to a standard format
+- `WebhookNormalizer` (required) -- normalizes incoming webhooks to a standard format
 - `LockFileFetcher` -- fetches lock files from the repository
 - `ChangedFilesFetcher` -- determines which files changed
 - `CloneTokenProvider` -- generates clone tokens for agents
@@ -13988,6 +13988,8 @@ The `ProviderRegistry` maps routing keys to provider bundles. Each routing key (
 - `ContributorResolver` -- resolves contributor permissions for trust-tier gating
 - `CheckStatusPoster` -- posts check statuses (approval/hold) to the git provider
 
+A GitHub App source populates all seven. A plain generic webhook source carries only the normalizer -- it has no repository API to fetch a lock file, resolve a contributor, or post a check against -- so the pipeline skips the stages whose interface is absent rather than failing the delivery.
+
 Provider registrations are managed via the `sources` database table, not via `SharedConfig`. When the orchestrator connects to the Platform relay, it reads source records from the DB and sends `source.register` messages. Changes to sources (add/remove) are detected via PostgreSQL LISTEN/NOTIFY on the `sources_change` channel and pushed to the Platform via `source.secrets` and `source.register`/`source.deregister`.
 
 ### Per-App Credentials
@@ -14155,7 +14157,7 @@ Remote runs are offered by the Platform; an orchestrator with no Platform connec
 
 KiCI runs two orchestrator-side caches — the **source tarball cache** (raw `.kici/` directory minus `node_modules/`) and the **dependency tarball cache** (packed `node_modules/`). Both use a build-then-execute pattern: the orchestrator checks the caches before dispatching execution jobs, and if the source cache is cold a build agent populates both in one pass.
 
-With the shared TypeScript loader hook plus source tarball, execution agents do not run `git clone` or compile anything at runtime — they perform exactly two S3 GETs (source + deps) and extract.
+With the shared TypeScript loader hook plus source tarball, execution agents never install or compile `.kici/` at runtime — they restore the workflow directory and its `node_modules` with two S3 GETs and extract. The workspace checkout is unaffected: an execution job still clones the repository at the dispatch ref unless it sets `checkout: false`, and the source tarball is restored over that clone.
 
 ### Cache miss flow
 
@@ -14203,7 +14205,7 @@ Execution Job Dispatch --> Execution Agent
 Done <-----------------------+
 ```
 
-The execution agent never clones the repo. The source tarball IS the workflow repo's `.kici/` directory.
+The execution agent never rebuilds `.kici/`. The source tarball IS the workflow repo's `.kici/` directory, extracted over the checkout.
 
 ### Cache hit flow
 
@@ -14252,7 +14254,7 @@ Dep cache misses alone do **not** trigger a build job. Deps are platform-specifi
 
 ### Cross-source / no-contentHash workflows
 
-- **Lock files without `contentHash`** (schema v1) skip the source cache entirely; agents compile from source. Regenerate lock files with `kici compile` to enable caching. The current lock file schema version is 31.
+- **Lock files without `contentHash`** (schema v1) skip the source cache entirely; agents compile from source. Regenerate lock files with `kici compile` to enable caching. The current lock file schema version is 32.
 - **Cross-source / global-workflow dispatch** (a workflow registered against source A fired by a webhook on source B) bypasses both caches. The registration's lock file entry still carries `contentHash`, but the cross-source path always clone-and-installs — the eval temp dir doesn't ship `@kici-dev/sdk`. The execution agent still verifies `contentHash` against the cloned source for drift detection.
 
 ### Build deduplication
@@ -14263,7 +14265,7 @@ When multiple webhooks trigger simultaneously for the same repository state, the
 
 If cache storage is unavailable or a download fails:
 
-- **Source tarball download failure:** Hard failure today — the agent does not fall back to `git clone` on the execution path. (The build path is where cloning happens.) In practice this is rare because the same orchestrator that issued the pre-signed URL controls the cache backend.
+- **Source tarball download failure:** Hard failure today — the agent does not fall back to rebuilding `.kici/` from the checkout. In practice this is rare because the same orchestrator that issued the pre-signed URL controls the cache backend.
 - **Dep tarball download failure:** Agent falls back to running `npm ci` / `npm install` inline.
 - **Dep tarball hash mismatch:** Agent retries the download twice (3 total attempts), then fails the job (no fallback for integrity failures).
 - **Source tarball drift (extracted `contentHash` ≠ lock file):** Hard failure with "Lock file is out of date: workflow source changed without regenerating kici.lock.json" — see [Lock file and drift](https://docs.kici.dev/user/lock-file-and-drift/).

package/dist/local-plane/plane-manager.js

@@ -19,8 +19,8 @@ import { generateKeyPairSync, randomBytes } from "node:crypto";
 */
 function currentBuildIdentity() {
 	return {
-		version: "0.2.0",
-		buildCommit: "15d5e4447"
+		version: "0.4.0",
+		buildCommit: "ffd489464"
 	};
 }
 /**

package/dist/templates/package-json.js

@@ -1,6 +1,6 @@
 import "../rolldown-runtime-ClRpJifh.js";
 //#region src/templates/package-json.ts
-const sdkVersion = "0.2.0";
+const sdkVersion = "0.4.0";
 /**
 * The npm version range the scaffold pins `@kici-dev/sdk` to.
 *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/compiler",
-  "version": "0.2.0",
+  "version": "0.4.0",
   "description": "Compiler and CLI for KiCI workflows. Compiles `.kici/workflows/*.ts` to a `kici.lock.json` file consumed by the orchestrator and agents, and runs workflows locally or against a remote orchestrator.",
   "keywords": [
     "ci",
@@ -61,13 +61,13 @@
     "yaml": "^2.9.0",
     "zod": "^4.4.3",
     "zx": "^8.8.5",
-    "@kici-dev/agent": "0.2.0",
-    "@kici-dev/engine": "0.2.0",
-    "@kici-dev/orchestrator": "0.2.0",
-    "@kici-dev/core": "0.2.0"
+    "@kici-dev/agent": "0.4.0",
+    "@kici-dev/core": "0.4.0",
+    "@kici-dev/engine": "0.4.0",
+    "@kici-dev/orchestrator": "0.4.0"
   },
   "peerDependencies": {
-    "@kici-dev/sdk": "0.2.0"
+    "@kici-dev/sdk": "0.4.0"
   },
   "scripts": {
     "build": "node ../../scripts/build-ts.mjs && tsgo --emitDeclarationOnly",

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/compiler@0.2.0",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fcompiler/0.2.0/2052db7a-4dd7-49ac-8ff3-4cce45a9f931",
+  "name": "@kici-dev/compiler@0.4.0",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fcompiler/0.4.0/01d31a85-b948-498c-a488-001a8f72c470",
   "creationInfo": {
-    "created": "2026-08-08T04:27:18Z",
+    "created": "2026-08-09T16:02:55Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -1163,9 +1163,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "name": "@kici-dev/agent",
-      "versionInfo": "0.2.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1176,7 +1176,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.2.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/agent@0.4.0"
         }
       ],
       "description": "Customer-deployable agent for the KiCI CI/CD stack. Connects to an orchestrator, clones the workflow repo, executes steps, and streams logs back.",
@@ -1185,7 +1185,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/compiler",
-      "versionInfo": "0.2.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1196,16 +1196,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/compiler@0.2.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/compiler@0.4.0"
         }
       ],
       "description": "Compiler and CLI for KiCI workflows. Compiles `.kici/workflows/*.ts` to a `kici.lock.json` file consumed by the orchestrator and agents, and runs workflows locally or against a remote orchestrator.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.4.0",
       "name": "@kici-dev/core",
-      "versionInfo": "0.2.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1216,16 +1216,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.2.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.4.0"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.2.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1236,16 +1236,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.2.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.4.0"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "name": "@kici-dev/orchestrator",
-      "versionInfo": "0.2.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1256,16 +1256,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.2.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/orchestrator@0.4.0"
         }
       ],
       "description": "Customer-deployable orchestrator for the KiCI CI/CD stack. Receives webhook events (direct or via Platform relay), matches triggers against the lock file, and dispatches jobs to connected agents.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.2.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-sdk-0.4.0",
       "name": "@kici-dev/sdk",
-      "versionInfo": "0.2.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1276,16 +1276,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.2.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.4.0"
         }
       ],
       "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "SPDXID": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "name": "@kici-dev/shared",
-      "versionInfo": "0.2.0",
+      "versionInfo": "0.4.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -1296,7 +1296,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.2.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/shared@0.4.0"
         }
       ],
       "description": "Shared utilities for the KiCI CI/CD stack — logging, zx setup, crypto, telemetry, health and metrics routes. No business logic.",
@@ -8654,77 +8654,77 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--hono-node-server-2.0.10",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-dockerode-5.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.32",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-tar-7.5.20",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-ws-8.21.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
@@ -8735,27 +8735,27 @@
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-agent-0.2.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-agent-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.2.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-sdk-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
@@ -8829,342 +8829,342 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.140.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-kms-3.1090.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1090.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-lib-storage-3.1090.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-s3-request-presigner-3.1090.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--hono-node-server-2.0.10",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--inquirer-prompts-8.5.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--octokit-auth-app-8.2.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--octokit-rest-22.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-commander-15.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-croner-10.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-dockerode-5.0.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-hashi-vault-js-0.5.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.32",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-jszip-3.10.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-lru-cache-11.5.2",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-nanoid-6.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.22.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-strip-ansi-7.2.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-tar-7.5.20",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-ws-8.21.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-orchestrator-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-micromatch-4.0.8",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-sdk-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--aws-sdk-client-s3-3.1090.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-api-1.9.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-metrics-otlp-http-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-prometheus-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-exporter-trace-otlp-http-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-instrumentation-runtime-node-0.34.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-resources-2.10.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-sdk-node-0.221.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package--opentelemetry-semantic-conventions-1.43.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-archiver-8.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-diff-9.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-hono-4.12.32",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-kysely-0.29.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.140.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-pg-8.22.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-yaml-2.9.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.2.0",
+      "spdxElementId": "SPDXRef-Package--kici-dev-shared-0.4.0",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },