@kici-dev/engine 0.1.15 → 0.1.17

package/dist/protocol/messages/platform-orchestrator.d.ts

@@ -5,17 +5,17 @@ export declare const trustPolicyUpdateSchema: z.ZodObject<{
     orgId: z.ZodString;
     policy: z.ZodObject<{
         forkPolicy: z.ZodEnum<{
-            hold: "hold";
             reject: "reject";
+            hold: "hold";
             allow: "allow";
         }>;
         unknownContributorPolicy: z.ZodEnum<{
-            hold: "hold";
             reject: "reject";
+            hold: "hold";
         }>;
         workflowChangePolicy: z.ZodEnum<{
-            hold: "hold";
             reject: "reject";
+            hold: "hold";
             allow: "allow";
         }>;
         approvalExpiryHours: z.ZodNumber;
@@ -32,6 +32,10 @@ export declare const trustPolicyUpdateSchema: z.ZodObject<{
         write: "write";
         admin: "admin";
     }>>;
+    teamMemberships: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        teamName: z.ZodString;
+        memberUserIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type TrustPolicyUpdate = z.infer<typeof trustPolicyUpdateSchema>;
 /**
@@ -350,17 +354,17 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     orgId: z.ZodString;
     policy: z.ZodObject<{
         forkPolicy: z.ZodEnum<{
-            hold: "hold";
             reject: "reject";
+            hold: "hold";
             allow: "allow";
         }>;
         unknownContributorPolicy: z.ZodEnum<{
-            hold: "hold";
             reject: "reject";
+            hold: "hold";
         }>;
         workflowChangePolicy: z.ZodEnum<{
-            hold: "hold";
             reject: "reject";
+            hold: "hold";
             allow: "allow";
         }>;
         approvalExpiryHours: z.ZodNumber;
@@ -377,6 +381,10 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         write: "write";
         admin: "admin";
     }>>;
+    teamMemberships: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        teamName: z.ZodString;
+        memberUserIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"source.register.ack">;
     messageId: z.ZodString;
@@ -402,6 +410,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     type: z.ZodLiteral<"auth.success">;
     connectionId: z.ZodString;
     orgPublicAlias: z.ZodOptional<z.ZodString>;
+    orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"auth.failure">;
     reason: z.ZodString;
@@ -484,6 +493,29 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     runId: z.ZodString;
     jobId: z.ZodString;
     stepIndex: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestations.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.runs.list">;
     requestId: z.ZodString;
@@ -694,6 +726,8 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
+    includeSecrets: z.ZodOptional<z.ZodBoolean>;
+    orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.get">;
     requestId: z.ZodString;
@@ -741,8 +775,8 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     }, z.core.$strip>], "type">;
     name: z.ZodString;
     envType: z.ZodEnum<{
-        fixed: "fixed";
         glob: "glob";
+        fixed: "fixed";
     }>;
     globPattern: z.ZodOptional<z.ZodString>;
     branchRestrictions: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -781,8 +815,8 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     updates: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
         envType: z.ZodOptional<z.ZodEnum<{
-            fixed: "fixed";
             glob: "glob";
+            fixed: "fixed";
         }>>;
         globPattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         branchRestrictions: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
@@ -1822,9 +1856,11 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "run.payload.read": "run.payload.read";
         "run.orch_logs.read": "run.orch_logs.read";
         "step.logs.read": "step.logs.read";
+        "attestations.read": "attestations.read";
         "run.cancel": "run.cancel";
         "run.rerun": "run.rerun";
         "run.manual_schedule": "run.manual_schedule";
+        "run.trigger": "run.trigger";
         "job.cancel": "job.cancel";
         "event_log.list.read": "event_log.list.read";
         "event_log.detail.read": "event_log.detail.read";
@@ -1853,6 +1889,8 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "held_run.list.read": "held_run.list.read";
         "held_run.approve": "held_run.approve";
         "held_run.reject": "held_run.reject";
+        "held_run.request": "held_run.request";
+        "held_run.expire": "held_run.expire";
         "registration.list.read": "registration.list.read";
         "diagnostics.read": "diagnostics.read";
         "scaler.capacity.read": "scaler.capacity.read";
@@ -1883,8 +1921,8 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     targetType: z.ZodOptional<z.ZodEnum<{
         run: "run";
         job: "job";
-        step: "step";
         payload: "payload";
+        step: "step";
         event_log: "event_log";
         event_log_payload: "event_log_payload";
         secret_scope: "secret_scope";
@@ -1905,6 +1943,143 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     q: z.ZodOptional<z.ZodString>;
     limit: z.ZodOptional<z.ZodNumber>;
     cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"test.relay.uploads.init">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    routingKey: z.ZodString;
+    sha: z.ZodOptional<z.ZodString>;
+    fileCount: z.ZodOptional<z.ZodNumber>;
+    compressedSize: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"test.relay.trigger">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    routingKey: z.ZodString;
+    fixtureId: z.ZodString;
+    event: z.ZodObject<{
+        type: z.ZodString;
+        action: z.ZodOptional<z.ZodString>;
+        targetBranch: z.ZodString;
+        sourceBranch: z.ZodOptional<z.ZodString>;
+        payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        changedFiles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>;
+    workflowName: z.ZodOptional<z.ZodString>;
+    uploadId: z.ZodOptional<z.ZodString>;
+    cliPublicKey: z.ZodOptional<z.ZodString>;
+    inlineLockFile: z.ZodOptional<z.ZodString>;
+    fullRepo: z.ZodOptional<z.ZodBoolean>;
+    secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    encryptedSecrets: z.ZodOptional<z.ZodString>;
+    encryptedSecretsKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"test.relay.run.status">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"test.relay.run.logs">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+    cursor: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"test.relay.cancel">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodOptional<z.ZodString>;
+    branch: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>], "type">;
 /** All messages that flow from Orchestrator to Platform.
  *
@@ -1956,6 +2131,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
         failed: "failed";
         cancelled: "cancelled";
         cancelling: "cancelling";
+        held: "held";
     }>;
     repoIdentifier: z.ZodOptional<z.ZodString>;
     sha: z.ZodOptional<z.ZodString>;
@@ -2067,6 +2243,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            held: "held";
         }>;
         routingKey: z.ZodOptional<z.ZodString>;
         repoIdentifier: z.ZodOptional<z.ZodString>;
@@ -2145,7 +2322,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             github_app: "github_app";
             generic_webhook: "generic_webhook";
             universal_git: "universal_git";
-            internal: "internal";
+            local: "local";
         }>;
     }, z.core.$strip>>;
     instanceId: z.ZodOptional<z.ZodString>;

package/dist/protocol/messages/platform-orchestrator.js

@@ -1,4 +1,4 @@
-import "../../chunk-gOLHoazu.js";
+import "../../chunk-BTugEXQM.js";
 import { heartbeatSchema } from "./common.js";
 import { orchCapabilitiesSchema } from "./capabilities.js";
 import { authFailureSchema, authRequestSchema, authSuccessSchema } from "./auth.js";
@@ -44,7 +44,18 @@ const trustPolicyUpdateSchema = z.object({
 		"read",
 		"write",
 		"admin"
-	]))
+	])),
+	/**
+	* Operator-defined teams and their member user ids. The orchestrator has no
+	* identity store, so team membership is delivered here (next to
+	* `identityLinks`) and cached in-memory. The approval resolver matches a
+	* `{team}` clause by looking up the team's members in this list.
+	* `.default([])` keeps an older Platform that doesn't send it valid.
+	*/
+	teamMemberships: z.array(z.object({
+		teamName: z.string(),
+		memberUserIds: z.array(z.string())
+	})).default([])
 });
 /**
 * Internal shape of a fully-reassembled, HMAC-verified webhook relay handed

package/dist/protocol/messages/run-events.js

@@ -1,4 +1,4 @@
-import "../../chunk-gOLHoazu.js";
+import "../../chunk-BTugEXQM.js";
 import { actorPrincipalSchema } from "./actor.js";
 import { z } from "zod";
 //#region src/protocol/messages/run-events.ts

package/dist/protocol/messages/scaler-event.js

@@ -1,4 +1,4 @@
-import "../../chunk-gOLHoazu.js";
+import "../../chunk-BTugEXQM.js";
 import { z } from "zod";
 //#region src/protocol/messages/scaler-event.ts
 /**

package/dist/protocol/messages/source-registration.d.ts

@@ -4,7 +4,7 @@ import { z } from 'zod';
  * grouping logic) to render an icon and friendly label for each source.
  *
  * Distinct from `provider` (which collapses universal-git, generic_webhook, and
- * internal into the single value `'generic'`): subtype keeps the "what kind of
+ * local into the single value `'generic'`): subtype keeps the "what kind of
  * orchestrator-side wiring is this?" distinction visible all the way through
  * the API and UI.
  *
@@ -13,19 +13,20 @@ import { z } from 'zod';
  * - `generic_webhook` — `generic_webhook_sources` row with `provider_type='generic'`.
  * - `universal_git`   — `generic_webhook_sources` row with a non-null `git_config`
  *                      (universal-git provider — gitea, gitlab, forgejo, etc.).
- * - `internal`        — `generic_webhook_sources` row with `provider_type='internal'`
- *                      (E2E / staging stg-ha smoke-test plumbing).
+ * - `local`           — `generic_webhook_sources` row with `provider_type='local'`
+ *                      (a git repository present on the agent's filesystem,
+ *                      cloned via `file://`).
  */
 export declare const SourceSubtype: z.ZodEnum<{
     github_app: "github_app";
     generic_webhook: "generic_webhook";
     universal_git: "universal_git";
-    internal: "internal";
+    local: "local";
 }>;
 export type SourceSubtype = z.infer<typeof SourceSubtype>;
 /**
  * Source provider family used by Platform's webhook router. Coarser-grained
- * than `SourceSubtype` — every universal-git / generic_webhook / internal row
+ * than `SourceSubtype` — every universal-git / generic_webhook / local row
  * collapses to `'generic'` here because Platform routes them through the same
  * generic webhook ingress.
  */
@@ -53,7 +54,7 @@ export declare const sourceRegistrationSchema: z.ZodObject<{
             github_app: "github_app";
             generic_webhook: "generic_webhook";
             universal_git: "universal_git";
-            internal: "internal";
+            local: "local";
         }>;
     }, z.core.$strip>>;
     instanceId: z.ZodOptional<z.ZodString>;

package/dist/protocol/messages/source-registration.js

@@ -1,4 +1,4 @@
-import "../../chunk-gOLHoazu.js";
+import "../../chunk-BTugEXQM.js";
 import { z } from "zod";
 //#region src/protocol/messages/source-registration.ts
 /**
@@ -6,7 +6,7 @@ import { z } from "zod";
 * grouping logic) to render an icon and friendly label for each source.
 *
 * Distinct from `provider` (which collapses universal-git, generic_webhook, and
-* internal into the single value `'generic'`): subtype keeps the "what kind of
+* local into the single value `'generic'`): subtype keeps the "what kind of
 * orchestrator-side wiring is this?" distinction visible all the way through
 * the API and UI.
 *
@@ -15,18 +15,19 @@ import { z } from "zod";
 * - `generic_webhook` — `generic_webhook_sources` row with `provider_type='generic'`.
 * - `universal_git`   — `generic_webhook_sources` row with a non-null `git_config`
 *                      (universal-git provider — gitea, gitlab, forgejo, etc.).
-* - `internal`        — `generic_webhook_sources` row with `provider_type='internal'`
-*                      (E2E / staging stg-ha smoke-test plumbing).
+* - `local`           — `generic_webhook_sources` row with `provider_type='local'`
+*                      (a git repository present on the agent's filesystem,
+*                      cloned via `file://`).
 */
 const SourceSubtype = z.enum([
 	"github_app",
 	"generic_webhook",
 	"universal_git",
-	"internal"
+	"local"
 ]);
 /**
 * Source provider family used by Platform's webhook router. Coarser-grained
-* than `SourceSubtype` — every universal-git / generic_webhook / internal row
+* than `SourceSubtype` — every universal-git / generic_webhook / local row
 * collapses to `'generic'` here because Platform routes them through the same
 * generic webhook ingress.
 */

package/dist/protocol/version.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/protocol/version.ts
 /**
 * Protocol version. Sent during WebSocket handshake.

package/dist/provenance/bundle.d.ts

@@ -0,0 +1,54 @@
+/**
+ * KiCI provenance bundle: the Mode-A (KiCI-signed) attestation package.
+ *
+ * A KiCI bundle is the Sigstore model with the KiCI identity JWT standing in
+ * for the Fulcio certificate and no transparency log: it carries the DSSE
+ * envelope over the in-toto statement, the ephemeral public key that signed it,
+ * and the identity JWT that anchors the statement's build context to a
+ * KiCI-minted identity (verified offline against the Platform JWKS).
+ *
+ * Pure schema + constants, browser-safe — the agent producer and the verifier
+ * both import it. Exported at `@kici-dev/engine/provenance/bundle`.
+ */
+import { z } from 'zod';
+/** Versioned media type for the KiCI-custom Mode-A bundle (verifier dispatches on it). */
+export declare const KICI_PROVENANCE_BUNDLE_MEDIA_TYPE = "application/vnd.kici.provenance.bundle+json;version=0.1";
+/** OIDC audience the agent requests for the identity token bound into a bundle. */
+export declare const KICI_PROVENANCE_AUDIENCE = "kici-provenance";
+/** in-toto DSSE payload type for the signed statement. */
+export declare const IN_TOTO_PAYLOAD_TYPE = "application/vnd.in-toto+json";
+/** Signing mode of a stored attestation. Mode A = KiCI-signed (the only mode today). */
+export declare const AttestationMode: z.ZodEnum<{
+    kici: "kici";
+}>;
+export type AttestationMode = z.infer<typeof AttestationMode>;
+/** Object-storage prefix for provenance bundles. */
+export declare const PROVENANCE_STORAGE_PREFIX = "provenance";
+/**
+ * Storage key for a provenance bundle:
+ * `provenance/{runId}/{jobId}/{subjectDigest}.kici.json`. Shared by the agent
+ * producer and the orchestrator persistence path so the two never drift.
+ */
+export declare function provenanceStorageKey(runId: string, jobId: string, subjectDigest: string): string;
+/**
+ * Mode-A (KiCI-signed) bundle: the DSSE envelope over the statement plus the
+ * verification material (the ephemeral signing public key as a JWK + the
+ * identity JWT).
+ */
+export declare const kiciBundleSchema: z.ZodObject<{
+    mediaType: z.ZodLiteral<"application/vnd.kici.provenance.bundle+json;version=0.1">;
+    dsseEnvelope: z.ZodObject<{
+        payloadType: z.ZodString;
+        payload: z.ZodString;
+        signatures: z.ZodArray<z.ZodObject<{
+            keyid: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    verificationMaterial: z.ZodObject<{
+        publicKey: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        identityToken: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type KiciBundle = z.infer<typeof kiciBundleSchema>;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/provenance/bundle.js

@@ -0,0 +1,53 @@
+import "../chunk-BTugEXQM.js";
+import { dsseEnvelopeSchema } from "./dsse.js";
+import { z } from "zod";
+//#region src/provenance/bundle.ts
+/**
+* KiCI provenance bundle: the Mode-A (KiCI-signed) attestation package.
+*
+* A KiCI bundle is the Sigstore model with the KiCI identity JWT standing in
+* for the Fulcio certificate and no transparency log: it carries the DSSE
+* envelope over the in-toto statement, the ephemeral public key that signed it,
+* and the identity JWT that anchors the statement's build context to a
+* KiCI-minted identity (verified offline against the Platform JWKS).
+*
+* Pure schema + constants, browser-safe — the agent producer and the verifier
+* both import it. Exported at `@kici-dev/engine/provenance/bundle`.
+*/
+/** Versioned media type for the KiCI-custom Mode-A bundle (verifier dispatches on it). */
+const KICI_PROVENANCE_BUNDLE_MEDIA_TYPE = "application/vnd.kici.provenance.bundle+json;version=0.1";
+/** OIDC audience the agent requests for the identity token bound into a bundle. */
+const KICI_PROVENANCE_AUDIENCE = "kici-provenance";
+/** in-toto DSSE payload type for the signed statement. */
+const IN_TOTO_PAYLOAD_TYPE = "application/vnd.in-toto+json";
+/** Signing mode of a stored attestation. Mode A = KiCI-signed (the only mode today). */
+const AttestationMode = z.enum(["kici"]);
+/** Object-storage prefix for provenance bundles. */
+const PROVENANCE_STORAGE_PREFIX = "provenance";
+/**
+* Storage key for a provenance bundle:
+* `provenance/{runId}/{jobId}/{subjectDigest}.kici.json`. Shared by the agent
+* producer and the orchestrator persistence path so the two never drift.
+*/
+function provenanceStorageKey(runId, jobId, subjectDigest) {
+	return `${PROVENANCE_STORAGE_PREFIX}/${runId}/${jobId}/${subjectDigest}.kici.json`;
+}
+/**
+* Mode-A (KiCI-signed) bundle: the DSSE envelope over the statement plus the
+* verification material (the ephemeral signing public key as a JWK + the
+* identity JWT).
+*/
+const kiciBundleSchema = z.object({
+	mediaType: z.literal(KICI_PROVENANCE_BUNDLE_MEDIA_TYPE),
+	dsseEnvelope: dsseEnvelopeSchema,
+	verificationMaterial: z.object({
+		/** JWK of the ephemeral ES256 key that signed the DSSE envelope. */
+		publicKey: z.record(z.string(), z.unknown()),
+		/** The KiCI ID token (verified against the Platform JWKS). */
+		identityToken: z.string()
+	})
+});
+//#endregion
+export { AttestationMode, IN_TOTO_PAYLOAD_TYPE, KICI_PROVENANCE_AUDIENCE, KICI_PROVENANCE_BUNDLE_MEDIA_TYPE, PROVENANCE_STORAGE_PREFIX, kiciBundleSchema, provenanceStorageKey };
+
+//# sourceMappingURL=bundle.js.map

package/dist/provenance/dsse.d.ts

@@ -0,0 +1,39 @@
+/**
+ * DSSE (Dead Simple Signing Envelope) helpers for KiCI provenance.
+ *
+ * Provides the in-toto pre-authentication encoding (PAE) and the envelope
+ * assembly used by the agent producer and the verifier. Pure byte / base64
+ * assembly with no Node-only crypto, so this module stays browser-safe and is
+ * exported at the subpath `@kici-dev/engine/provenance/dsse`.
+ *
+ * Spec reference: https://github.com/secure-systems-lab/dsse/blob/master/protocol.md
+ */
+import { z } from 'zod';
+/** A single DSSE signature: a key id plus the base64 signature bytes. */
+export declare const dsseSignatureSchema: z.ZodObject<{
+    keyid: z.ZodString;
+    sig: z.ZodString;
+}, z.core.$strip>;
+export type DsseSignature = z.infer<typeof dsseSignatureSchema>;
+/** A DSSE envelope: the payload type, the base64 payload, and ≥1 signature. */
+export declare const dsseEnvelopeSchema: z.ZodObject<{
+    payloadType: z.ZodString;
+    payload: z.ZodString;
+    signatures: z.ZodArray<z.ZodObject<{
+        keyid: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DsseEnvelope = z.infer<typeof dsseEnvelopeSchema>;
+/**
+ * DSSE pre-authentication encoding: `"DSSEv1 <lenType> <type> <lenBody> <body>"`.
+ * The length fields count bytes (UTF-8 for the type, raw bytes for the payload).
+ * This is the exact byte sequence that gets signed and verified.
+ */
+export declare function dssePae(payloadType: string, payload: Uint8Array): Uint8Array;
+/** Assemble a {@link DsseEnvelope} from the payload bytes + raw signature bytes. */
+export declare function buildDsseEnvelope(payloadType: string, payloadBytes: Uint8Array, signatures: {
+    keyid: string;
+    sig: Uint8Array;
+}[]): DsseEnvelope;
+//# sourceMappingURL=dsse.d.ts.map

package/dist/provenance/dsse.js

@@ -0,0 +1,53 @@
+import "../chunk-BTugEXQM.js";
+import { z } from "zod";
+//#region src/provenance/dsse.ts
+/**
+* DSSE (Dead Simple Signing Envelope) helpers for KiCI provenance.
+*
+* Provides the in-toto pre-authentication encoding (PAE) and the envelope
+* assembly used by the agent producer and the verifier. Pure byte / base64
+* assembly with no Node-only crypto, so this module stays browser-safe and is
+* exported at the subpath `@kici-dev/engine/provenance/dsse`.
+*
+* Spec reference: https://github.com/secure-systems-lab/dsse/blob/master/protocol.md
+*/
+/** A single DSSE signature: a key id plus the base64 signature bytes. */
+const dsseSignatureSchema = z.object({
+	keyid: z.string(),
+	sig: z.string()
+});
+/** A DSSE envelope: the payload type, the base64 payload, and ≥1 signature. */
+const dsseEnvelopeSchema = z.object({
+	payloadType: z.string(),
+	payload: z.string(),
+	signatures: z.array(dsseSignatureSchema).min(1)
+});
+/**
+* DSSE pre-authentication encoding: `"DSSEv1 <lenType> <type> <lenBody> <body>"`.
+* The length fields count bytes (UTF-8 for the type, raw bytes for the payload).
+* This is the exact byte sequence that gets signed and verified.
+*/
+function dssePae(payloadType, payload) {
+	const enc = new TextEncoder();
+	const typeBytes = enc.encode(payloadType);
+	const prefix = enc.encode(`DSSEv1 ${typeBytes.length} ${payloadType} ${payload.length} `);
+	const out = new Uint8Array(prefix.length + payload.length);
+	out.set(prefix, 0);
+	out.set(payload, prefix.length);
+	return out;
+}
+/** Assemble a {@link DsseEnvelope} from the payload bytes + raw signature bytes. */
+function buildDsseEnvelope(payloadType, payloadBytes, signatures) {
+	return {
+		payloadType,
+		payload: Buffer.from(payloadBytes).toString("base64"),
+		signatures: signatures.map((s) => ({
+			keyid: s.keyid,
+			sig: Buffer.from(s.sig).toString("base64")
+		}))
+	};
+}
+//#endregion
+export { buildDsseEnvelope, dsseEnvelopeSchema, dssePae, dsseSignatureSchema };
+
+//# sourceMappingURL=dsse.js.map