@kici-dev/compiler 0.7.0 → 0.9.0

package/dist/remote/output/streaming.js

@@ -19,6 +19,25 @@ const COLOR_PALETTE = [
 	pc.magenta,
 	pc.cyan
 ];
+/**
+* The text a stored log line carries.
+*
+* The orchestrator stores every step log line as a JSON envelope —
+* `{"ts":…,"level":"stdout","msg":"…","meta":{}}` — and the Platform relay
+* returns those envelopes verbatim, so a run's log stream is the envelope
+* stream. The dashboard unwraps `msg` before rendering; the terminal must too,
+* or the developer watching `kici run remote` reads raw JSON. A line that is
+* not an envelope (an orchestrator phase marker, a plain line from an older
+* store) passes through unchanged.
+*/
+function unwrapStoredLogLine(line) {
+	if (!line.startsWith("{")) return line;
+	try {
+		const parsed = JSON.parse(line);
+		if (typeof parsed === "object" && parsed !== null && typeof parsed.msg === "string") return parsed.msg;
+	} catch {}
+	return line;
+}
 var StreamingFormatter = class {
 	/** Color assignment per job name. */
 	jobColors = /* @__PURE__ */ new Map();
@@ -119,6 +138,6 @@ var StreamingFormatter = class {
 	}
 };
 //#endregion
-export { StreamingFormatter };
+export { StreamingFormatter, unwrapStoredLogLine };
 
 //# sourceMappingURL=streaming.js.map

package/dist/remote/platform-client.d.ts

@@ -106,6 +106,8 @@ export interface PlatformRunStatusResponse {
         status: string;
         exitCode?: number | null;
         errorMessage?: string | null;
+        /** Absent or null from an orchestrator that does not report it. */
+        durationMs?: number | null;
     }>;
     done: boolean;
 }

package/dist/templates/agents-md.d.ts

@@ -4,5 +4,5 @@
  * picked up by Claude Code, Cursor, Aider, and other coding agents that scan
  * the working tree for an authoring context file.
  */
-export declare const agentsMdTemplate = "# KiCI workflow authoring guide\n\nThis project uses KiCI \u2014 a TypeScript-native CI/CD workflow engine \u2014 instead\nof YAML-based CI. Workflows live in `.kici/workflows/*.ts`, are compiled\ninto a portable lock file, and executed by self-hosted agents.\n\n## Where the API surface lives\n\n- Public SDK types: `node_modules/@kici-dev/sdk/dist/index.d.ts` \u2014 read this\n  for the canonical signatures of `workflow`, `job`, `step`, `pr`,\n  `push`, `schedule`, `rule`, `dynamicJob`, etc.\n- Bundled offline reference for coding agents: `kici docs llm` prints the\n  full markdown documentation bundle to stdout. `kici docs llm --index`\n  prints just the curated link index (llms.txt format).\n- Online docs:\n  - <https://kici.dev/docs/> \u2014 published docs site.\n  - <https://kici.dev/llms.txt> \u2014 curated index for LLM consumers.\n  - <https://kici.dev/llms-full.txt> \u2014 full markdown bundle.\n  - Key pages: `user/sdk-reference`, `user/workflow-patterns`,\n    `user/testing-guide`, `user/hooks`, `user/secrets`.\n\n## The five core patterns\n\n1. **Push trigger** \u2014 `on: push({ branches: 'main' })`. Pair with `paths`\n   to scope to subtrees.\n\n   ```ts\n   import { workflow, job, step, push } from '@kici-dev/sdk';\n\n   export default workflow('build', {\n     on: push({ branches: 'main' }),\n     jobs: [\n       job('build', {\n         runsOn: 'kici:os:linux',\n         steps: [step('install', async ({ $ }) => { await $`pnpm install`; })],\n       }),\n     ],\n   });\n   ```\n\n   `kici:os:linux` targets any agent reporting that OS \u2014 every agent\n   self-reports `kici:os:` / `kici:arch:` / `kici:host:`. Use a custom label\n   (e.g. `'gpu'`, `'prod-pool'`) to target a specific agent pool your scaler\n   defines.\n\n2. **PR + matrix** \u2014 `pr({ target: 'main' })` plus a matrix over node\n   versions. The matrix expands at dispatch time.\n\n   ```ts\n   import { workflow, job, step, pr } from '@kici-dev/sdk';\n\n   export default workflow('test-matrix', {\n     on: pr({ target: 'main' }),\n     jobs: [\n       job('test', {\n         runsOn: 'kici:os:linux',\n         matrix: { node: ['20', '22', '24'] },\n         steps: [\n           step('test', async ({ $, matrix }) => {\n             await $`echo testing on node ${matrix!.node}`;\n             await $`pnpm install`;\n             await $`pnpm test`;\n           }),\n         ],\n       }),\n     ],\n   });\n   ```\n\n3. **Lifecycle hooks** \u2014 `onFailure` / `onSuccess` / `onCancel` on a\n   job or workflow run after the main steps in their own scope.\n\n4. **Secrets** \u2014 declared scopes resolve at dispatch:\n\n   ```ts\n   step('deploy', async ({ $, secrets }) => {\n     await secrets.expose('DEPLOY_TOKEN');\n     await $`./scripts/deploy.sh`;\n   });\n   ```\n\n   Run `kici secrets list` to enumerate the contexts available for testing.\n\n5. **Dynamic jobs** \u2014 `dynamicJob` and `dynamicGroup` build the DAG at\n   runtime from a step's outputs. Don't try to compute job names at top level;\n   the lock file would be wrong.\n\n## Anti-patterns\n\n- **Do NOT write `.yml` / `.yaml` CI files** \u2014 KiCI replaces that entire\n  layer. There is no compatibility shim.\n- **Do NOT `import` from any `@kici-dev/*` package's `/dist/...`\n  subpath** \u2014 those are not part of the public API and break across versions.\n  Import from the package root.\n- **Do NOT `await` outside step bodies.** The top-level workflow file is\n  loaded by the compiler synchronously; async I/O at module scope means the\n  lock file emits before it resolves and the workflow appears empty.\n- **Do NOT mutate shared variables between jobs.** Each job runs in its own\n  agent process. Use `needs` + step outputs to thread values.\n- **Do NOT hand-edit `kici.lock.json`.** Regenerate it via `kici compile`.\n\n## Local commands a coding agent should run\n\n| Command                         | Purpose                                     |\n| ------------------------------- | ------------------------------------------- |\n| `pnpm kici compile --check`     | Validate workflow source without writing.   |\n| `pnpm kici preview pr:open --debug` | Preview which workflows match an event.   |\n| `pnpm kici run push --local`    | Execute a workflow locally (this machine as an ephemeral agent). |\n| `pnpm kici docs llm`            | Print the full LLM documentation bundle.    |\n| `pnpm kici docs llm --index`    | Print the curated link index.               |\n\nIf `pnpm kici` isn't in scripts, fall back to `npx kici`.\n\n## Loop\n\n1. Read the SDK types from `node_modules/@kici-dev/sdk/dist/index.d.ts`.\n2. Pipe `kici docs llm` into the agent's context if it doesn't already have\n   the full bundle.\n3. Edit a workflow under `.kici/workflows/`.\n4. Run `kici compile --check` (zero exit means valid).\n5. Run `kici preview <event>` to preview matching.\n6. Run `kici run <event> --local` to execute locally before pushing.\n";
+export declare const agentsMdTemplate = "# KiCI workflow authoring guide\n\nThis project uses KiCI \u2014 a TypeScript-native CI/CD workflow engine \u2014 instead\nof YAML-based CI. Workflows live in `.kici/workflows/*.ts`, are compiled\ninto a portable lock file, and executed by self-hosted agents.\n\n## Where the API surface lives\n\n- Public SDK types: `node_modules/@kici-dev/sdk/dist/index.d.ts` \u2014 read this\n  for the canonical signatures of `workflow`, `job`, `step`, `pr`,\n  `push`, `schedule`, `rule`, `dynamicJob`, etc.\n- Bundled offline reference for coding agents: `kici docs llm` prints the\n  curated link index (llms.txt format); `kici docs llm full` prints the\n  complete markdown documentation bundle; `kici docs llm <topic>` prints one\n  task bundle (`sdk`, `cli`, `patterns`, \u2026).\n- Online docs:\n  - <https://docs.kici.dev/> \u2014 published docs site.\n  - <https://kici.dev/llms.txt> \u2014 curated index for LLM consumers.\n  - <https://kici.dev/llms-full.txt> \u2014 full markdown bundle.\n  - Key pages: `user/sdk-reference`, `user/workflow-patterns`,\n    `user/testing-guide`, `user/hooks`, `user/secrets`.\n\n## The five core patterns\n\n1. **Push trigger** \u2014 `on: push({ branches: 'main' })`. Pair with `paths`\n   to scope to subtrees.\n\n   ```ts\n   import { workflow, job, step, push } from '@kici-dev/sdk';\n\n   export default workflow('build', {\n     on: push({ branches: 'main' }),\n     jobs: [\n       job('build', {\n         runsOn: 'kici:os:linux',\n         steps: [step('install', async ({ $ }) => { await $`pnpm install`; })],\n       }),\n     ],\n   });\n   ```\n\n   `kici:os:linux` targets any agent reporting that OS \u2014 every agent\n   self-reports `kici:os:` / `kici:arch:` / `kici:host:`. Use a custom label\n   (e.g. `'gpu'`, `'prod-pool'`) to target a specific agent pool your scaler\n   defines.\n\n2. **PR + matrix** \u2014 `pr({ target: 'main' })` plus a matrix over node\n   versions. The matrix expands at dispatch time.\n\n   ```ts\n   import { workflow, job, step, pr } from '@kici-dev/sdk';\n\n   export default workflow('test-matrix', {\n     on: pr({ target: 'main' }),\n     jobs: [\n       job('test', {\n         runsOn: 'kici:os:linux',\n         matrix: { node: ['20', '22', '24'] },\n         steps: [\n           step('test', async ({ $, matrix }) => {\n             await $`echo testing on node ${matrix!.node}`;\n             await $`pnpm install`;\n             await $`pnpm test`;\n           }),\n         ],\n       }),\n     ],\n   });\n   ```\n\n3. **Lifecycle hooks** \u2014 `onFailure` / `onSuccess` / `onCancel` on a\n   job or workflow run after the main steps in their own scope.\n\n4. **Secrets** \u2014 declared scopes resolve at dispatch:\n\n   ```ts\n   step('deploy', async ({ $, secrets }) => {\n     await secrets.expose('DEPLOY_TOKEN');\n     await $`./scripts/deploy.sh`;\n   });\n   ```\n\n   Run `kici secrets list` to enumerate the contexts available for testing.\n\n5. **Dynamic jobs** \u2014 `dynamicJob` and `dynamicGroup` build the DAG at\n   runtime from a step's outputs. Don't try to compute job names at top level;\n   the lock file would be wrong.\n\n## Anti-patterns\n\n- **Do NOT write `.yml` / `.yaml` CI files** \u2014 KiCI replaces that entire\n  layer. There is no compatibility shim.\n- **Do NOT `import` from any `@kici-dev/*` package's `/dist/...`\n  subpath** \u2014 those are not part of the public API and break across versions.\n  Import from the package root.\n- **Do NOT `await` outside step bodies.** The top-level workflow file is\n  loaded by the compiler synchronously; async I/O at module scope means the\n  lock file emits before it resolves and the workflow appears empty.\n- **Do NOT mutate shared variables between jobs.** Each job runs in its own\n  agent process. Use `needs` + step outputs to thread values.\n- **Do NOT hand-edit `kici.lock.json`.** Regenerate it via `kici compile`.\n\n## Local commands a coding agent should run\n\n| Command                         | Purpose                                     |\n| ------------------------------- | ------------------------------------------- |\n| `pnpm kici compile --check`     | Validate workflow source without writing.   |\n| `pnpm kici preview pr:open --debug` | Preview which workflows match an event.   |\n| `pnpm kici run push --local`    | Execute a workflow locally (this machine as an ephemeral agent). |\n| `pnpm kici docs llm`            | Print the curated link index (llms.txt).    |\n| `pnpm kici docs llm full`       | Print the full LLM documentation bundle.    |\n| `pnpm kici docs llm sdk`        | Print one task bundle (also `cli`, `patterns`, \u2026). |\n\nIf `pnpm kici` isn't in scripts, fall back to `npx kici`.\n\n## Loop\n\n1. Read the SDK types from `node_modules/@kici-dev/sdk/dist/index.d.ts`.\n2. Pipe `kici docs llm sdk` (or `kici docs llm full`) into the agent's context if\n   it doesn't already have the authoring reference.\n3. Edit a workflow under `.kici/workflows/`.\n4. Run `kici compile --check` (zero exit means valid).\n5. Run `kici preview <event>` to preview matching.\n6. Run `kici run <event> --local` to execute locally before pushing.\n";
 //# sourceMappingURL=agents-md.d.ts.map

package/dist/templates/agents-md.js

@@ -18,10 +18,11 @@ into a portable lock file, and executed by self-hosted agents.
   for the canonical signatures of \`workflow\`, \`job\`, \`step\`, \`pr\`,
   \`push\`, \`schedule\`, \`rule\`, \`dynamicJob\`, etc.
 - Bundled offline reference for coding agents: \`kici docs llm\` prints the
-  full markdown documentation bundle to stdout. \`kici docs llm --index\`
-  prints just the curated link index (llms.txt format).
+  curated link index (llms.txt format); \`kici docs llm full\` prints the
+  complete markdown documentation bundle; \`kici docs llm <topic>\` prints one
+  task bundle (\`sdk\`, \`cli\`, \`patterns\`, …).
 - Online docs:
-  - <https://kici.dev/docs/> — published docs site.
+  - <https://docs.kici.dev/> — published docs site.
   - <https://kici.dev/llms.txt> — curated index for LLM consumers.
   - <https://kici.dev/llms-full.txt> — full markdown bundle.
   - Key pages: \`user/sdk-reference\`, \`user/workflow-patterns\`,
@@ -114,16 +115,17 @@ into a portable lock file, and executed by self-hosted agents.
 | \`pnpm kici compile --check\`     | Validate workflow source without writing.   |
 | \`pnpm kici preview pr:open --debug\` | Preview which workflows match an event.   |
 | \`pnpm kici run push --local\`    | Execute a workflow locally (this machine as an ephemeral agent). |
-| \`pnpm kici docs llm\`            | Print the full LLM documentation bundle.    |
-| \`pnpm kici docs llm --index\`    | Print the curated link index.               |
+| \`pnpm kici docs llm\`            | Print the curated link index (llms.txt).    |
+| \`pnpm kici docs llm full\`       | Print the full LLM documentation bundle.    |
+| \`pnpm kici docs llm sdk\`        | Print one task bundle (also \`cli\`, \`patterns\`, …). |
 
 If \`pnpm kici\` isn't in scripts, fall back to \`npx kici\`.
 
 ## Loop
 
 1. Read the SDK types from \`node_modules/@kici-dev/sdk/dist/index.d.ts\`.
-2. Pipe \`kici docs llm\` into the agent's context if it doesn't already have
-   the full bundle.
+2. Pipe \`kici docs llm sdk\` (or \`kici docs llm full\`) into the agent's context if
+   it doesn't already have the authoring reference.
 3. Edit a workflow under \`.kici/workflows/\`.
 4. Run \`kici compile --check\` (zero exit means valid).
 5. Run \`kici preview <event>\` to preview matching.

package/dist/templates/package-json.d.ts

@@ -7,11 +7,14 @@
  * The compiler is invoked via npx (not installed as a dependency).
  */
 /**
- * The npm version range the scaffold pins `@kici-dev/sdk` to.
+ * The npm version spec the scaffold pins `@kici-dev/sdk` to.
  *
- * @param devMode - When true, a prerelease-compatible range (`>=0.0.1-0`) so
- *   npm resolves Verdaccio's prerelease builds (e.g. 0.0.1-2856). Semver
- *   `^0.0.1` does NOT match prereleases, causing 404s on Verdaccio.
+ * @param devMode - When true, the `latest` dist-tag, so npm resolves whatever
+ *   build the dev registry (Verdaccio) currently publishes. Dev builds are
+ *   prereleases such as `0.8.0-9726`, and no semver range reaches them: a
+ *   prerelease only satisfies a comparator with the same major.minor.patch, so
+ *   `^0.0.1` misses every one and `>=0.0.1-0` misses every one past 0.0.1.
+ *   A dist-tag is resolved by name, never by range, so it follows the counter.
  */
 export declare function sdkDependencyRange(devMode?: boolean): string;
 /**
@@ -24,9 +27,8 @@ export declare const TYPESCRIPT_RANGE = "^6.0.3";
 /**
  * Generate package.json content for .kici/ directory
  *
- * @param devMode - When true, uses a prerelease-compatible version range
- *   (`>=0.0.1-0`) so npm resolves Verdaccio's prerelease builds (e.g. 0.0.1-2856).
- *   Semver `^0.0.1` does NOT match prereleases, causing 404s on Verdaccio.
+ * @param devMode - When true, pins the SDK to the `latest` dist-tag so npm
+ *   resolves the dev registry's newest prerelease build (see sdkDependencyRange).
  * @returns JSON string with proper formatting (2-space indent, trailing newline)
  */
 export declare function generatePackageJson(devMode?: boolean): string;

package/dist/templates/package-json.js

@@ -1,15 +1,18 @@
 import "../rolldown-runtime-ClRpJifh.js";
 //#region src/templates/package-json.ts
-const sdkVersion = "0.7.0";
+const sdkVersion = "0.9.0";
 /**
-* The npm version range the scaffold pins `@kici-dev/sdk` to.
+* The npm version spec the scaffold pins `@kici-dev/sdk` to.
 *
-* @param devMode - When true, a prerelease-compatible range (`>=0.0.1-0`) so
-*   npm resolves Verdaccio's prerelease builds (e.g. 0.0.1-2856). Semver
-*   `^0.0.1` does NOT match prereleases, causing 404s on Verdaccio.
+* @param devMode - When true, the `latest` dist-tag, so npm resolves whatever
+*   build the dev registry (Verdaccio) currently publishes. Dev builds are
+*   prereleases such as `0.8.0-9726`, and no semver range reaches them: a
+*   prerelease only satisfies a comparator with the same major.minor.patch, so
+*   `^0.0.1` misses every one and `>=0.0.1-0` misses every one past 0.0.1.
+*   A dist-tag is resolved by name, never by range, so it follows the counter.
 */
 function sdkDependencyRange(devMode = false) {
-	return devMode ? ">=0.0.1-0" : `^${sdkVersion}`;
+	return devMode ? "latest" : `^${sdkVersion}`;
 }
 /**
 * The TypeScript range scaffolded into a `.kici` workspace. Pinned to the major
@@ -21,9 +24,8 @@ const TYPESCRIPT_RANGE = "^6.0.3";
 /**
 * Generate package.json content for .kici/ directory
 *
-* @param devMode - When true, uses a prerelease-compatible version range
-*   (`>=0.0.1-0`) so npm resolves Verdaccio's prerelease builds (e.g. 0.0.1-2856).
-*   Semver `^0.0.1` does NOT match prereleases, causing 404s on Verdaccio.
+* @param devMode - When true, pins the SDK to the `latest` dist-tag so npm
+*   resolves the dev registry's newest prerelease build (see sdkDependencyRange).
 * @returns JSON string with proper formatting (2-space indent, trailing newline)
 */
 function generatePackageJson(devMode = false) {

package/dist/templates/workflows/hello-world.ts

@@ -1,5 +1,5 @@
 // Hello World -- minimal push workflow
-// Docs: https://kici.dev/docs/sdk-reference
+// Docs: https://docs.kici.dev/user/sdk-reference/
 
 import { workflow, job, step, push } from '@kici-dev/sdk';
 

package/dist/templates/workflows/pr-checks.ts

@@ -1,6 +1,6 @@
 // PR Checks -- workflow with rules, dependencies, and multiple jobs
-// Docs: https://kici.dev/docs/sdk-reference
-// Patterns: https://kici.dev/docs/workflow-patterns
+// Docs: https://docs.kici.dev/user/sdk-reference/
+// Patterns: https://docs.kici.dev/user/workflow-patterns/
 
 import { workflow, job, step, pr, rule, skip, isEventType } from '@kici-dev/sdk';
 

package/dist/test-runner/job-executor.js

@@ -12,13 +12,14 @@ import { setJobOutputsMap, setStepOutputsMap, setStepRefMap } from "@kici-dev/sd
 /**
 * Resolve SDK output setter functions from the workflow's module instance.
 * This ensures the output maps are set on the same SDK module that the
-* workflow code uses for .result proxy resolution and ctx.outputsOf().
+* workflow code uses for .result proxy resolution and ctx.outputsOf(). The
+* setters live only on the `@kici-dev/sdk/internal` subpath.
 *
 * Falls back to the compiler's own SDK import if dynamic resolution fails.
 */
 async function resolveSdkSetters(kiciDir) {
 	if (kiciDir) try {
-		const sdkPath = path.join(kiciDir, "node_modules", "@kici-dev", "sdk", "dist", "index.js");
+		const sdkPath = path.join(kiciDir, "node_modules", "@kici-dev", "sdk", "dist", "internal.js");
 		const sdk = await import(pathToFileURL(sdkPath).href);
 		return {
 			setStepOutputsMap: sdk.setStepOutputsMap,

package/dist/types.d.ts

@@ -8,7 +8,7 @@
  * v6 replaces job-level contexts with environment/env/concurrencyGroup.
  * v7 adds hook flags, step rules, gracePeriod, and workflow concurrency config.
  * v8 adds runsOn polymorphic type (string | string[] | selector) and excludeLabels.
- * v11 adds LockInlineValue type for pure function inline evaluation.
+ * v11 added an inline-expression value shape for dynamic fields, which is no longer parsed.
  * v15 adds per-job init config(s).
  * v17 widens per-job init to typed presets ('mise' / { mise }) and 'auto' detection.
  */
@@ -394,29 +394,6 @@ export interface LockParallelStep {
 export type LockStepEntry = LockStep | LockParallelStep;
 /** Type guard distinguishing a parallel group from an ordinary lock step. */
 export declare function isLockParallelStep(entry: LockStepEntry): entry is LockParallelStep;
-/**
- * Serialized inline expression for a dynamic env/context/concurrencyGroup
- * field, shaped as `{ _type: 'inline', expression: '(event) => ...' }`
- * alongside the existing 'static' and 'dynamic' discriminants.
- *
- * @deprecated Schema v11 inline expressions are no longer evaluated in the
- * orchestrator. Dynamic env/context/concurrencyGroup fields are resolved on the
- * eval agent's init-runner. The compiler no longer emits this type; readers keep
- * recognizing it only to defer an old lock's field to the init round. Removed at
- * the next major (v1.0.0).
- */
-export interface LockInlineValue {
-    readonly _type: 'inline';
-    readonly expression: string;
-}
-/**
- * Type guard for inline expression values.
- *
- * @deprecated See {@link LockInlineValue}. Retained only so a reader can
- * recognize an old lock's inline field and defer it to the eval agent's
- * init-runner. Removed at the next major (v1.0.0).
- */
-export declare function isLockInlineValue(value: unknown): value is LockInlineValue;
 /**
  * Static job in lock file.
  * Contains all orchestrator-readable information for scheduling.
@@ -500,21 +477,21 @@ export interface LockJob {
         };
     };
     /**
-     * Bound contexts in merge order. Each entry is a static name or inline
-     * expression (pure function); `dynamic` is set when it is a function resolved at
-     * two-phase eval. Later entries override earlier ones on name collisions.
+     * Bound contexts in merge order. Each entry is a static name; `dynamic` is set
+     * when it is a function resolved on the eval agent's init-runner. Later entries
+     * override earlier ones on name collisions.
      */
     readonly contexts?: ReadonlyArray<{
-        value: string | LockInlineValue;
+        value: string;
         dynamic: boolean;
     }>;
-    /** Static environment variables or inline expression (pure function). */
-    readonly env?: Record<string, string> | LockInlineValue;
-    /** When true, env is dynamic (function) -- resolved at orchestrator two-phase eval or inline. */
+    /** Static environment variables. */
+    readonly env?: Record<string, string>;
+    /** When true, env is dynamic (function) -- resolved on the eval agent's init-runner. */
     readonly dynamicEnv?: boolean;
-    /** Concurrency group name (static string) or inline expression (pure function). */
-    readonly concurrencyGroup?: string | LockInlineValue;
-    /** When true, concurrencyGroup is dynamic (function) -- resolved at orchestrator two-phase eval or inline. */
+    /** Concurrency group name (static string). */
+    readonly concurrencyGroup?: string;
+    /** When true, concurrencyGroup is dynamic (function) -- resolved on the eval agent's init-runner. */
     readonly dynamicConcurrencyGroup?: boolean;
     /** Whether this job has an onCancel hook. */
     readonly hasOnCancel?: boolean;
@@ -658,7 +635,7 @@ export interface LockWorkflow {
  * v6 replaces job-level contexts with environment/env/concurrencyGroup.
  * v7 adds hook flags, step rules, gracePeriod, and workflow concurrency config.
  * v8 adds runsOn polymorphic type (string | string[] | selector) and excludeLabels.
- * v11 adds LockInlineValue type for pure function inline evaluation.
+ * v11 added an inline-expression value shape for dynamic fields, which is no longer parsed.
  * v13 adds job-level and workflow-level timeout.
  * v34 adds LockWorkflow.hasFilter (workflow-level pre-dispatch filter predicate).
  */

package/dist/types.js

@@ -11,7 +11,7 @@ import { BREAKING_FLOOR as BREAKING_FLOOR$1, SCHEMA_VERSION as SCHEMA_VERSION$1
 * v6 replaces job-level contexts with environment/env/concurrencyGroup.
 * v7 adds hook flags, step rules, gracePeriod, and workflow concurrency config.
 * v8 adds runsOn polymorphic type (string | string[] | selector) and excludeLabels.
-* v11 adds LockInlineValue type for pure function inline evaluation.
+* v11 added an inline-expression value shape for dynamic fields, which is no longer parsed.
 * v15 adds per-job init config(s).
 * v17 widens per-job init to typed presets ('mise' / { mise }) and 'auto' detection.
 */
@@ -23,16 +23,6 @@ const BREAKING_FLOOR = BREAKING_FLOOR$1;
 function isLockParallelStep(entry) {
 	return entry.kind === "parallel";
 }
-/**
-* Type guard for inline expression values.
-*
-* @deprecated See {@link LockInlineValue}. Retained only so a reader can
-* recognize an old lock's inline field and defer it to the eval agent's
-* init-runner. Removed at the next major (v1.0.0).
-*/
-function isLockInlineValue(value) {
-	return typeof value === "object" && value !== null && value._type === "inline";
-}
 /** Type guard for static jobs */
 function isLockStaticJob(job) {
 	return job._type === "static";
@@ -42,6 +32,6 @@ function isLockDynamicJobFn(job) {
 	return job._type === "dynamic";
 }
 //#endregion
-export { BREAKING_FLOOR, SCHEMA_VERSION, isLockDynamicJobFn, isLockInlineValue, isLockParallelStep, isLockStaticJob };
+export { BREAKING_FLOOR, SCHEMA_VERSION, isLockDynamicJobFn, isLockParallelStep, isLockStaticJob };
 
 //# sourceMappingURL=types.js.map

package/dist/types.test-d.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.test-d.d.ts.map

package/dist/types.test-d.js

@@ -0,0 +1,63 @@
+import "./rolldown-runtime-ClRpJifh.js";
+import { describe, expectTypeOf, it } from "vitest";
+//#region src/types.test-d.ts
+/**
+* The lock-file dynamic fields no longer admit the schema-v11 inline
+* expression `{ _type: 'inline', expression }`. That object is itself a
+* `Record<string, string>`, so the `env` axis is pinned by type identity rather
+* than by an assignment the compiler would accept either way; the two string
+* fields refuse the object outright.
+*/
+describe("LockJob dynamic fields", () => {
+	it("refuses an inline expression as the concurrency group", () => {
+		expectTypeOf({
+			_type: "static",
+			name: "build",
+			steps: [],
+			needs: [],
+			concurrencyGroup: {
+				_type: "inline",
+				expression: "() => \"deploy\""
+			}
+		}).toBeObject();
+	});
+	it("refuses an inline expression as a context name", () => {
+		expectTypeOf({
+			_type: "static",
+			name: "build",
+			steps: [],
+			needs: [],
+			contexts: [{
+				value: {
+					_type: "inline",
+					expression: "() => \"prod\""
+				},
+				dynamic: false
+			}]
+		}).toBeObject();
+	});
+	it("types env as exactly a plain record", () => {
+		expectTypeOf().toEqualTypeOf();
+	});
+	it("accepts the static shapes", () => {
+		const job = {
+			_type: "static",
+			name: "build",
+			steps: [],
+			needs: [],
+			env: { NODE_ENV: "test" },
+			dynamicEnv: true,
+			concurrencyGroup: "deploy",
+			contexts: [{
+				value: "production",
+				dynamic: false
+			}]
+		};
+		expectTypeOf(job.env).toEqualTypeOf();
+		expectTypeOf(job.concurrencyGroup).toEqualTypeOf();
+	});
+});
+//#endregion
+export {};
+
+//# sourceMappingURL=types.test-d.js.map

package/dist/workflows/hello-world.ts

@@ -1,5 +1,5 @@
 // Hello World -- minimal push workflow
-// Docs: https://kici.dev/docs/sdk-reference
+// Docs: https://docs.kici.dev/user/sdk-reference/
 
 import { workflow, job, step, push } from '@kici-dev/sdk';
 

package/dist/workflows/pr-checks.ts

@@ -1,6 +1,6 @@
 // PR Checks -- workflow with rules, dependencies, and multiple jobs
-// Docs: https://kici.dev/docs/sdk-reference
-// Patterns: https://kici.dev/docs/workflow-patterns
+// Docs: https://docs.kici.dev/user/sdk-reference/
+// Patterns: https://docs.kici.dev/user/workflow-patterns/
 
 import { workflow, job, step, pr, rule, skip, isEventType } from '@kici-dev/sdk';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/compiler",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "description": "Compiler and CLI for KiCI workflows. Compiles `.kici/workflows/*.ts` to a `kici.lock.json` file consumed by the orchestrator and agents, and runs workflows locally or against a remote orchestrator.",
   "keywords": [
     "ci",
@@ -45,38 +45,38 @@
     "./cli": "./dist/cli.js"
   },
   "dependencies": {
-    "@inquirer/prompts": "^8.7.0",
+    "@inquirer/prompts": "^8.7.2",
     "archiver": "^8.0.0",
     "chokidar": "^5.0.0",
     "commander": "^15.0.0",
     "embedded-postgres": "18.4.0-beta.17",
     "fast-glob": "^3.3.3",
-    "open": "11.0.0",
+    "open": "11.0.4",
     "picocolors": "^1.1.1",
     "picomatch": "^4.0.7",
     "tar": "^7.5.22",
-    "typescript": "^6.0.3",
     "ws": "^8.21.3",
-    "wsl-utils": "^0.3.0",
-    "yaml": "^2.9.0",
-    "zod": "^4.4.3",
+    "wsl-utils": "^1.0.0",
+    "yaml": "^2.9.1",
+    "zod": "^4.6.5",
     "zx": "^8.8.5",
-    "@kici-dev/agent": "0.7.0",
-    "@kici-dev/orchestrator": "0.7.0",
-    "@kici-dev/core": "0.7.0",
-    "@kici-dev/engine": "0.7.0"
+    "@kici-dev/agent": "0.9.0",
+    "@kici-dev/orchestrator": "0.9.0",
+    "@kici-dev/core": "0.9.0",
+    "@kici-dev/engine": "0.9.0"
   },
   "devDependencies": {
     "@types/archiver": "^8.0.0",
-    "jszip": "^3.10.1"
+    "jszip": "^3.10.2",
+    "typescript": "npm:@typescript/typescript6@^6.0.2"
   },
   "peerDependencies": {
-    "@kici-dev/sdk": "0.7.0"
+    "@kici-dev/sdk": "0.9.0"
   },
   "scripts": {
-    "build": "node ../../scripts/build-ts.mjs && tsgo --emitDeclarationOnly",
+    "build": "node ../../scripts/build-ts.mjs && tsc --emitDeclarationOnly",
     "postbuild": "zx hack/postbuild.mjs",
-    "typecheck": "tsgo --noEmit",
+    "typecheck": "tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest"
   }