@kici-dev/engine 0.1.14 → 0.1.16

package/dist/provider/lock-file-parse-error.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Thrown by a LockFileFetcher when a lock file is present at the repo ref but
+ * cannot be parsed or validated (empty content, invalid JSON, missing/invalid
+ * schemaVersion). Distinct from "not found" (the fetcher returns null) and from
+ * transient fetch errors (plain Error). The orchestrator routes this to a
+ * `lock_resolution` init-failure run.
+ */
+export declare class LockFileParseError extends Error {
+    readonly repoIdentifier: string;
+    readonly ref: string;
+    readonly name = "LockFileParseError";
+    constructor(repoIdentifier: string, ref: string, message: string);
+}
+//# sourceMappingURL=lock-file-parse-error.d.ts.map

package/dist/provider/lock-file-parse-error.js

@@ -0,0 +1,22 @@
+import "../chunk-gOLHoazu.js";
+//#region src/provider/lock-file-parse-error.ts
+/**
+* Thrown by a LockFileFetcher when a lock file is present at the repo ref but
+* cannot be parsed or validated (empty content, invalid JSON, missing/invalid
+* schemaVersion). Distinct from "not found" (the fetcher returns null) and from
+* transient fetch errors (plain Error). The orchestrator routes this to a
+* `lock_resolution` init-failure run.
+*/
+var LockFileParseError = class LockFileParseError extends Error {
+	name = "LockFileParseError";
+	constructor(repoIdentifier, ref, message) {
+		super(message);
+		this.repoIdentifier = repoIdentifier;
+		this.ref = ref;
+		Object.setPrototypeOf(this, LockFileParseError.prototype);
+	}
+};
+//#endregion
+export { LockFileParseError };
+
+//# sourceMappingURL=lock-file-parse-error.js.map

package/dist/trigger/types.d.ts

@@ -8,11 +8,28 @@
  * Schema version 9: adds repos/notRepos repo pattern fields to git-event triggers for global workflow matching.
  * Schema version 10: removes notRepos/notPaths fields, negative patterns use ! prefix in repos/paths arrays.
  * Schema version 11: adds LockInlineValue type for pure function inline evaluation.
+ * Schema version 14: adds declarative cache specs to LockJob and LockStep.
+ * Schema version 15: adds per-job init config(s) to LockJob.
+ * Schema version 16: adds normalized approval config to LockWorkflow/LockJob/LockStep.
  */
 import { z } from 'zod';
 import type { ProviderType } from '../provider/types.js';
+import type { ApproverClause } from '../approval/types.js';
 /** Schema version - increment on breaking changes */
-export declare const SCHEMA_VERSION: 12;
+export declare const SCHEMA_VERSION: 16;
+/**
+ * Normalized approval config carried in the lock file. Produced by the compiler
+ * from an SDK `requireApproval` at any of the three levels; consumed by the
+ * orchestrator dispatch gate (and the agent step round-trip for step scope).
+ */
+export interface LockApproval {
+    /** AND list of approver clauses; empty means "any approval-capable member". */
+    readonly clauses: ApproverClause[];
+    /** Human label for the gate. */
+    readonly reason?: string;
+    /** Per-gate expiry override (seconds); falls back to the org default. */
+    readonly timeoutSeconds?: number;
+}
 /**
  * Source file reference with meaningful path.
  * Format: file is relative path from git root, export uses hash syntax.
@@ -313,6 +330,8 @@ export interface LockStep {
         readonly line: number;
         readonly column: number;
     };
+    /** Normalized approval gate; when set the step pauses for a human approval. */
+    readonly approval?: LockApproval;
 }
 /**
  * Inline expression value for pure dynamic functions.
@@ -381,12 +400,16 @@ export interface LockJob {
     readonly concurrencyGroup?: string | LockInlineValue;
     /** When true, concurrencyGroup is dynamic (function) -- resolved at orchestrator two-phase eval or inline. */
     readonly dynamicConcurrencyGroup?: boolean;
+    /** Total job wall-clock timeout in milliseconds (init + all steps + hooks). Threaded to the agent via jobConfig. */
+    readonly timeout?: number;
     /**
      * Resource request and limit for this job.
      * Threaded from SDK `Job.resources` to the orchestrator scaler for cap accounting
      * (`requests`) and kernel-side enforcement (`limits`) on the spawned agent.
      */
     readonly resources?: import('../scaler/resource-types.js').ResourceRequest;
+    /** Normalized approval gate; when set the job is held before dispatch. */
+    readonly approval?: LockApproval;
 }
 /**
  * Dynamic job generator reference.
@@ -454,6 +477,10 @@ export interface LockWorkflow {
         readonly cancelInProgress?: boolean;
         readonly max?: number;
     };
+    /** Whole-run wall-clock timeout in milliseconds. Read by the orchestrator at run creation to set the run deadline. */
+    readonly timeout?: number;
+    /** Normalized approval gate; when set the whole run is held before any job dispatches. */
+    readonly approval?: LockApproval;
 }
 /**
  * Complete lock file structure.
@@ -470,6 +497,7 @@ export interface LockWorkflow {
  * v10 removes notRepos/notPaths fields; negative patterns use ! prefix in repos/paths arrays.
  * v11 adds LockInlineValue type for pure function inline evaluation.
  * v12 adds workflow-level registries and installEnv for private npm registry auth.
+ * v13 adds job-level and workflow-level timeout.
  */
 export interface LockFile {
     readonly schemaVersion: typeof SCHEMA_VERSION;

package/dist/trigger/types.js

@@ -11,9 +11,12 @@ import { z } from "zod";
 * Schema version 9: adds repos/notRepos repo pattern fields to git-event triggers for global workflow matching.
 * Schema version 10: removes notRepos/notPaths fields, negative patterns use ! prefix in repos/paths arrays.
 * Schema version 11: adds LockInlineValue type for pure function inline evaluation.
+* Schema version 14: adds declarative cache specs to LockJob and LockStep.
+* Schema version 15: adds per-job init config(s) to LockJob.
+* Schema version 16: adds normalized approval config to LockWorkflow/LockJob/LockStep.
 */
 /** Schema version - increment on breaking changes */
-const SCHEMA_VERSION = 12;
+const SCHEMA_VERSION = 16;
 /** Type guard for inline expression values */
 function isLockInlineValue(value) {
 	return typeof value === "object" && value !== null && value._type === "inline";

package/dist/ws/close-codes.d.ts

@@ -31,4 +31,11 @@ export declare const WS_CLOSE_PLAN_LIMIT = 4020;
 export declare const WS_CLOSE_CLUSTER_NAME_CONFLICT = 4011;
 /** The connection was closed because the requested run was not found. */
 export declare const WS_CLOSE_RUN_NOT_FOUND = 4030;
+/**
+ * The connection was closed because a job dispatch went unacknowledged past
+ * its deadline. The orchestrator treats the dispatch as lost, requeues the
+ * job, and disconnects the unresponsive agent (scaler-managed agents are then
+ * destroyed by their normal lifecycle; static agents reconnect and re-sync).
+ */
+export declare const WS_CLOSE_DISPATCH_ACK_TIMEOUT = 4031;
 //# sourceMappingURL=close-codes.d.ts.map

package/dist/ws/close-codes.js

@@ -33,7 +33,14 @@ const WS_CLOSE_PLAN_LIMIT = 4020;
 const WS_CLOSE_CLUSTER_NAME_CONFLICT = 4011;
 /** The connection was closed because the requested run was not found. */
 const WS_CLOSE_RUN_NOT_FOUND = 4030;
+/**
+* The connection was closed because a job dispatch went unacknowledged past
+* its deadline. The orchestrator treats the dispatch as lost, requeues the
+* job, and disconnects the unresponsive agent (scaler-managed agents are then
+* destroyed by their normal lifecycle; static agents reconnect and re-sync).
+*/
+const WS_CLOSE_DISPATCH_ACK_TIMEOUT = 4031;
 //#endregion
-export { WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED };
+export { WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED };
 
 //# sourceMappingURL=close-codes.js.map

package/package.json

@@ -1,18 +1,21 @@
 {
   "name": "@kici-dev/engine",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
   "keywords": [
-    "kici",
     "ci",
-    "cd",
-    "ci-cd",
+    "cicd",
+    "continuous-integration",
     "typescript",
-    "workflows",
-    "devops",
-    "engine",
-    "protocol"
+    "workflow",
+    "engine"
   ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kici-dev/kici-public.git",
+    "directory": "packages/engine"
+  },
+  "bugs": "https://github.com/kici-dev/kici-public/issues",
   "homepage": "https://kici.dev",
   "author": {
     "name": "KiCI",
@@ -54,10 +57,18 @@
       "import": "./dist/protocol/dashboard-write-operations.js",
       "types": "./dist/protocol/dashboard-write-operations.d.ts"
     },
+    "./protocol/analytics-events": {
+      "import": "./dist/protocol/analytics-events.js",
+      "types": "./dist/protocol/analytics-events.d.ts"
+    },
     "./protocol/cluster-name": {
       "import": "./dist/protocol/cluster-name.js",
       "types": "./dist/protocol/cluster-name.d.ts"
     },
+    "./provenance/schema": {
+      "import": "./dist/provenance/schema.js",
+      "types": "./dist/provenance/schema.d.ts"
+    },
     "./metrics/catalog": {
       "import": "./dist/metrics/metric-catalog.generated.js",
       "types": "./dist/metrics/metric-catalog.generated.d.ts"

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/engine@0.1.14",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.14/e0f9b814-d366-4ae4-8be4-0663a2fdb6d7",
+  "name": "@kici-dev/engine@0.1.16",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.16/33d50570-d86e-4a27-b1c9-26cef35a15c7",
   "creationInfo": {
-    "created": "2026-05-30T03:05:55Z",
+    "created": "2026-06-12T09:41:34Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -54,7 +54,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.14",
+      "versionInfo": "0.1.16",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -65,7 +65,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.14"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.16"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",