@kici-dev/engine 0.1.17 → 0.1.18

package/dist/env/environment-allowlist.d.ts

@@ -15,7 +15,7 @@
  * This is an explicit allowlist -- anything NOT listed here is stripped.
  * Adding new variables to the host process will NOT leak them downstream.
  */
-export declare const ALLOWED_SYSTEM_VARS: readonly ["PATH", "HOME", "USER", "SHELL", "LANG", "LC_ALL", "TERM", "TMPDIR", "NODE_PATH", "TZ"];
+export declare const ALLOWED_SYSTEM_VARS: readonly ["PATH", "HOME", "USER", "SHELL", "LANG", "LC_ALL", "TERM", "TMPDIR", "NODE_PATH", "TZ", "PATHEXT", "SystemRoot", "windir", "COMSPEC", "TEMP", "TMP", "USERPROFILE", "LOCALAPPDATA", "APPDATA", "PROCESSOR_ARCHITECTURE", "NUMBER_OF_PROCESSORS"];
 /**
  * Default environment variables injected into every sandbox execution.
  *

package/dist/env/environment-allowlist.js

@@ -27,7 +27,18 @@ const ALLOWED_SYSTEM_VARS = [
 	"TERM",
 	"TMPDIR",
 	"NODE_PATH",
-	"TZ"
+	"TZ",
+	"PATHEXT",
+	"SystemRoot",
+	"windir",
+	"COMSPEC",
+	"TEMP",
+	"TMP",
+	"USERPROFILE",
+	"LOCALAPPDATA",
+	"APPDATA",
+	"PROCESSOR_ARCHITECTURE",
+	"NUMBER_OF_PROCESSORS"
 ];
 /**
 * Default environment variables injected into every sandbox execution.

package/dist/fanout/materialize.d.ts

@@ -2,6 +2,15 @@ import { type MatrixValues } from '../matrix/expand.js';
 import type { LockJob } from '../trigger/types.js';
 /** Hard cap on children per fanned job — mirrors the compiler's MAX_STATIC_MATRIX_JOBS. */
 export declare const MAX_FANOUT_JOBS = 256;
+/**
+ * The kind of fan-out a materialized child belongs to. `matrix` children come
+ * from a matrix expansion (one per combination); `host` children come from a
+ * `runsOnAll` fan-out (one pinned execution per roster host).
+ */
+export declare enum VariantKind {
+    matrix = "matrix",
+    host = "host"
+}
 /**
  * Thrown when a job's matrix cannot be materialized into dispatchable children:
  * zero combinations after exclude, or more combinations than {@link MAX_FANOUT_JOBS}.
@@ -13,8 +22,25 @@ export declare class FanoutError extends Error {
     constructor(jobName: string, message: string);
 }
 /**
- * One dispatchable unit produced from a lock job. `variantKind` is `'matrix'`
- * today; the shape is variant-agnostic so a future host fan-out can add `'host'`.
+ * A roster host resolved as a target of a `runsOnAll` fan-out. Carries the
+ * identity the dispatcher pins to and the agent facts exposed as `ctx.agent`.
+ */
+export interface ResolvedHostAgent {
+    /** Agent id the child pins to. */
+    agentId: string;
+    /** Hostname (falls back to agentId). */
+    host: string;
+    /** The host's label set. */
+    labels: readonly string[];
+    platform?: string;
+    arch?: string;
+    /** Which orchestrator owns the live WS (null = not currently connected). */
+    connectedInstanceId?: string | null;
+}
+/**
+ * One dispatchable unit produced from a lock job. `variantKind` is `matrix` for
+ * a matrix combination child and `host` for a `runsOnAll` per-host child; absent
+ * for a non-fanned job.
  */
 export interface MaterializedJob {
     /** The originating lock job. Its matrix/include/exclude are NOT dispatched as-is. */
@@ -24,14 +50,22 @@ export interface MaterializedJob {
     /** `${baseName} (${suffix})` for fanned children, else `baseName`. */
     expandedName: string;
     /** Present only for fanned children. */
-    variantKind?: 'matrix';
-    /** The combination values for a fanned child; absent for non-fanned jobs. */
+    variantKind?: VariantKind;
+    /** The combination values for a matrix child; absent for non-matrix jobs. */
     variantValues?: MatrixValues;
     /**
      * True when the job carries a dynamic matrix the orchestrator cannot expand —
      * it must route through the agent-eval flow and be re-materialized from the result.
      */
     pendingDynamicMatrix?: boolean;
+    /** The agent this child is pinned to. */
+    pinnedAgentId?: string;
+    /** The host this child runs on (also the variant label / name suffix). */
+    host?: string;
+    /** The resolved host agent facts, exposed to the step as `ctx.agent`. */
+    agent?: ResolvedHostAgent;
+    /** Which orchestrator owns the pinned agent's live WS (null = not connected). */
+    connectedInstanceId?: string | null;
 }
 export interface FanoutResult {
     jobs: MaterializedJob[];
@@ -58,6 +92,28 @@ export declare function matrixEnvelopeFields(mat: MaterializedJob): {
  * enforces the same cap / zero-combination guards.
  */
 export declare function materializeResolvedMatrix(lockJob: LockJob, combos: readonly MatrixValues[]): FanoutResult;
+/**
+ * The job-config envelope fields that identify a materialized host child: the
+ * expanded `name`, the `baseJobName`, the `pinnedAgentId`, the `host` (exposed as
+ * `ctx.host` and persisted as `variant_label`), and the resolved `agent` facts
+ * (exposed as `ctx.agent`). The matrix sibling is {@link matrixEnvelopeFields}.
+ */
+export declare function hostEnvelopeFields(mat: MaterializedJob): {
+    name: string;
+    baseJobName: string;
+    pinnedAgentId?: string;
+    host?: string;
+    agent?: ResolvedHostAgent;
+    connectedInstanceId?: string | null;
+};
+/**
+ * Build materialized host children from a resolved target-host list (produced by
+ * the roster-backed resolution branch at dispatch time). Emits one pinned child
+ * per host, sibling to {@link materializeResolvedMatrix}. `maxHosts` is the
+ * orchestrator `maxFanoutHosts` config (default 1024) — NOT {@link MAX_FANOUT_JOBS}
+ * (the 256 matrix cap is GitHub-Actions author-error parity, irrelevant to fleet size).
+ */
+export declare function materializeResolvedHosts(lockJob: LockJob, agents: readonly ResolvedHostAgent[], maxHosts: number): FanoutResult;
 /**
  * Expand each lock job's static matrix into N dispatchable children (one per
  * combination), passing non-matrix and dynamic-matrix jobs through 1:1.

package/dist/fanout/materialize.js

@@ -5,6 +5,16 @@ import { formatExpandedJobName } from "../matrix/format.js";
 /** Hard cap on children per fanned job — mirrors the compiler's MAX_STATIC_MATRIX_JOBS. */
 const MAX_FANOUT_JOBS = 256;
 /**
+* The kind of fan-out a materialized child belongs to. `matrix` children come
+* from a matrix expansion (one per combination); `host` children come from a
+* `runsOnAll` fan-out (one pinned execution per roster host).
+*/
+let VariantKind = /* @__PURE__ */ function(VariantKind) {
+	VariantKind["matrix"] = "matrix";
+	VariantKind["host"] = "host";
+	return VariantKind;
+}({});
+/**
 * Thrown when a job's matrix cannot be materialized into dispatchable children:
 * zero combinations after exclude, or more combinations than {@link MAX_FANOUT_JOBS}.
 * Callers map this onto the `matrix_expansion` init-failure category.
@@ -61,6 +71,53 @@ function materializeResolvedMatrix(lockJob, combos) {
 	};
 }
 /**
+* The job-config envelope fields that identify a materialized host child: the
+* expanded `name`, the `baseJobName`, the `pinnedAgentId`, the `host` (exposed as
+* `ctx.host` and persisted as `variant_label`), and the resolved `agent` facts
+* (exposed as `ctx.agent`). The matrix sibling is {@link matrixEnvelopeFields}.
+*/
+function hostEnvelopeFields(mat) {
+	return {
+		name: mat.expandedName,
+		baseJobName: mat.baseName,
+		...mat.pinnedAgentId && { pinnedAgentId: mat.pinnedAgentId },
+		...mat.host && { host: mat.host },
+		...mat.agent && { agent: mat.agent },
+		...mat.connectedInstanceId !== void 0 && { connectedInstanceId: mat.connectedInstanceId }
+	};
+}
+/**
+* Build materialized host children from a resolved target-host list (produced by
+* the roster-backed resolution branch at dispatch time). Emits one pinned child
+* per host, sibling to {@link materializeResolvedMatrix}. `maxHosts` is the
+* orchestrator `maxFanoutHosts` config (default 1024) — NOT {@link MAX_FANOUT_JOBS}
+* (the 256 matrix cap is GitHub-Actions author-error parity, irrelevant to fleet size).
+*/
+function materializeResolvedHosts(lockJob, agents, maxHosts) {
+	if (agents.length === 0) throw new FanoutError(lockJob.name, `runsOnAll for job '${lockJob.name}' matched zero matching hosts`);
+	if (agents.length > maxHosts) throw new FanoutError(lockJob.name, `runsOnAll for job '${lockJob.name}' matched ${agents.length} hosts (max ${maxHosts})`);
+	const jobs = [];
+	const names = [];
+	for (const agent of agents) {
+		const expandedName = `${lockJob.name} (${agent.host})`;
+		names.push(expandedName);
+		jobs.push({
+			lockJob,
+			baseName: lockJob.name,
+			expandedName,
+			variantKind: "host",
+			pinnedAgentId: agent.agentId,
+			host: agent.host,
+			agent,
+			connectedInstanceId: agent.connectedInstanceId ?? null
+		});
+	}
+	return {
+		jobs,
+		expansionMap: new Map([[lockJob.name, names]])
+	};
+}
+/**
 * Expand each lock job's static matrix into N dispatchable children (one per
 * combination), passing non-matrix and dynamic-matrix jobs through 1:1.
 * Dynamic-matrix jobs are flagged `pendingDynamicMatrix` for the eval flow.
@@ -114,6 +171,6 @@ function materializeFanout(staticJobs) {
 	};
 }
 //#endregion
-export { FanoutError, MAX_FANOUT_JOBS, materializeFanout, materializeResolvedMatrix, matrixEnvelopeFields };
+export { FanoutError, MAX_FANOUT_JOBS, VariantKind, hostEnvelopeFields, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixEnvelopeFields };
 
 //# sourceMappingURL=materialize.js.map

package/dist/index.d.ts

@@ -47,6 +47,7 @@ export * from './environment/index.js';
 export { deriveOsArchLabels, hostLabel, parseHostLabel, HOST_LABEL_PREFIX, agentTypeLabel, scalerLabel, mergeAutoLabels, normalizeRunsOn, KNOWN_ROLES, resolveRoleLabels, validateNoReservedLabels, scalerAgentLabels, isSelfReportedLabel, SELF_REPORTED_LABEL_PREFIXES, } from './labels.js';
 export type { NormalizedRunsOn } from './labels.js';
 export type { AgentRole } from './labels.js';
+export { LabelMatcher, matcherMatches, matcherSatisfiedBy, partitionMatchers, compileRegexMatcher, } from './labels-match.js';
 export * from './scaler/scaler-backend-type.js';
 export * from './scaler/resource-types.js';
 export * from './registration/registerable-trigger-type.js';

package/dist/index.js

@@ -11,7 +11,7 @@ import { browserJobContextSchema, browserRunEventSchema, dashboardOrchLogsReques
 import { EventLogSource, EventLogStatus, PayloadOmittedReason } from "./protocol/messages/event-log.js";
 import { ScalerBackendType } from "./scaler/scaler-backend-type.js";
 import { ApprovalDecision, HoldScope, TriggerSource, approvalRequirementSchema, approverClauseSchema } from "./approval/types.js";
-import { IfFailedPolicy, NeedsEntrySchema, NeedsGroupEntrySchema, SCHEMA_VERSION, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob } from "./trigger/types.js";
+import { IfFailedPolicy, NeedsEntrySchema, NeedsGroupEntrySchema, OnUnreachableMode, SCHEMA_VERSION, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob } from "./trigger/types.js";
 import { EnvDeleteErrorCode, EventLogPayloadStreamError, HeldRunQueueType, HeldRunStatus, TestRelayType, attestationListItemSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, trustPolicyResponseSchema } from "./protocol/messages/dashboard.js";
 import { WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WebhookRelayResult, cacheStatsSchema, executionEventSchema, logChunkSchema, orchMetricsSchema, orchestratorToPlatformMessageSchema, peerDiscoverSchema, peerUpdateSchema, platformToOrchestratorMessageSchema, staleCheckrunCleanupSchema, trustPolicyUpdateSchema, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema } from "./protocol/messages/platform-orchestrator.js";
 import { ScalerEventType } from "./protocol/messages/scaler-event.js";
@@ -22,8 +22,9 @@ import { logPullOrchToPlatformSchema, logPullPlatformToOrchSchema } from "./prot
 import { EVENT_LOG_PAYLOAD_CHUNK_BYTES } from "./protocol/event-log-payload.js";
 import { browserAuthFailureSchema, browserAuthRefreshSchema, browserAuthRequestSchema, browserAuthSuccessSchema, browserErrorSchema, browserEventLogPayloadFetchSchema, browserGapSchema, browserJobNewSchema, browserJobStatusSchema, browserLogLinesSchema, browserLogStreamTerminatedReason, browserLogStreamTerminatedSchema, browserLogSubscribeSchema, browserLogUnsubscribeSchema, browserPingSchema, browserPongSchema, browserRunNewSchema, browserRunStatusSchema, browserStatusSubscribeSchema, browserStatusUnsubscribeSchema, browserStepStatusSchema, browserToPlatformMessageSchema, platformToBrowserMessageSchema } from "./protocol/messages/browser.js";
 import { joinRequestSchema, joinResponseSchema } from "./protocol/messages/join.js";
+import { LabelMatcher, compileRegexMatcher, matcherMatches, matcherSatisfiedBy, partitionMatchers } from "./labels-match.js";
 import { fleetSelectionSchema, jobProgressSchema, jobRerouteAckSchema, jobRerouteSchema, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerLogsCollectChunkSchema, peerLogsCollectErrorSchema, peerLogsCollectRequestSchema, peerScalerEventSchema, peerToPeerMessageSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema } from "./protocol/messages/peer.js";
-import { CacheRefScope, JobRejectReason, StepApprovalOutcome, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, configAckSchema, eventEmitResponseSchema, eventEmitSchema, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetLogsRequestSchema, gitAuthSchema, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobDispatchSchema, jobRejectSchema, jobStatusSchema, orchestratorToAgentMessageSchema, provenanceUploadCompleteSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, registerAckSchema, stepApprovalRequestSchema, stepApprovalResolvedSchema } from "./protocol/messages/orchestrator-agent.js";
+import { CacheRefScope, JobRejectReason, StepApprovalOutcome, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, configAckSchema, eventEmitResponseSchema, eventEmitSchema, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetLogsRequestSchema, gitAuthSchema, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobDispatchSchema, jobRejectSchema, jobStatusSchema, orchestratorToAgentMessageSchema, provenanceUploadCompleteSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, registerAckSchema, stepApprovalRequestSchema, stepApprovalResolvedSchema, upstreamSnapshotSchema } from "./protocol/messages/orchestrator-agent.js";
 import { TRIGGER_EVENT_META, TRIGGER_EVENT_TYPES } from "./trigger/trigger-event-type.js";
 import { createTraceEntry, createWorkflowDecision } from "./trigger/decision-trace.js";
 import { matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchWorkflowTriggers } from "./trigger/matcher.js";
@@ -45,5 +46,5 @@ import { createWorkflowBundleConfig } from "./bundler/rolldown-config.js";
 import "./bundler/index.js";
 import { applyIncludeExclude, expandMatrix, expandMultiDimension, expandSingleDimension } from "./matrix/expand.js";
 import { formatExpandedJobName, formatMatrixSuffix } from "./matrix/format.js";
-import { FanoutError, MAX_FANOUT_JOBS, materializeFanout, materializeResolvedMatrix, matrixEnvelopeFields } from "./fanout/materialize.js";
-export { ACCESS_LOG_COLD_DAYS, ACCESS_LOG_WARM_DAYS, AGENT_REQUIRED_KICI_VARS, ALLOWED_SYSTEM_VARS, AccessLogAction, AccessLogOutcome, AccessLogPolicyKind, AccessLogSource, AccessLogTargetType, ActivityFilterSource, ActivityRowSource, ActorType, ApprovalDecision, CacheOutcome, CacheRefScope, CacheRunEventType, CacheStepType, CheckRunConclusion, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EnvDeleteErrorCode, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutError, HOST_LABEL_PREFIX, HeldRunQueueType, HeldRunStatus, HoldScope, IfFailedPolicy, InitFailureCategory, JobRejectReason, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, LockFileParseError, MAX_FANOUT_JOBS, MIN_PROTOCOL_VERSION, NeedsEntrySchema, NeedsGroupEntrySchema, ORCH_CAPABILITIES, OrchRole, POLICY_BY_ACTION, PROTOCOL_VERSION, PayloadOmittedReason, RegisterableTriggerType, SANDBOX_DEFAULT_VARS, SCHEMA_VERSION, SELF_REPORTED_LABEL_PREFIXES, ScalerBackendType, ScalerEventType, SourceProvider, SourceSubtype, StepApprovalOutcome, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TRIGGER_EVENT_META, TRIGGER_EVENT_TYPES, TestRelayType, TimeoutReason, TriggerSource, WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogFilterSchema, accessLogItemSchema, accessLogWarmSqlCase, ackSchema, activityCursorSchema, activityFilterSchema, activityRowSchema, actorPrincipalSchema, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, agentTypeLabel, apiKeyActorSchema, applyIncludeExclude, approvalRequirementSchema, approverClauseSchema, attestationListItemSchema, auditLogColdDays, auditLogWarmDays, auditLogWarmSqlCase, authFailureSchema, authRequestSchema, authSuccessSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserAuthFailureSchema, browserAuthRefreshSchema, browserAuthRequestSchema, browserAuthSuccessSchema, browserErrorSchema, browserEventLogPayloadChunkSchema, browserEventLogPayloadFetchSchema, browserGapSchema, browserJobContextSchema, browserJobNewSchema, browserJobStatusSchema, browserLogLinesSchema, browserLogStreamTerminatedReason, browserLogStreamTerminatedSchema, browserLogSubscribeSchema, browserLogUnsubscribeSchema, browserPingSchema, browserPongSchema, browserRunEventSchema, browserRunNewSchema, browserRunStatusSchema, browserStatusSubscribeSchema, browserStatusUnsubscribeSchema, browserStepStatusSchema, browserToPlatformMessageSchema, cacheStatsSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, configAckSchema, createTraceEntry, createWorkflowBundleConfig, createWorkflowDecision, dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, decodeActivityCursor, deriveOsArchLabels, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, encodeActivityCursor, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, errorSchema, eventEmitResponseSchema, eventEmitSchema, eventLogListItemSchema, executionEventSchema, executionStatusSchema, expandMatrix, expandMultiDimension, expandSingleDimension, flattenActor, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetLogsRequestSchema, fleetSelectionSchema, fnv1a32, formatExpandedJobName, formatMatrixSuffix, getAccessLogColdDays, getAccessLogWarmDays, getAuditLogColdDays, getAuditLogWarmDays, getSecretAuditLogColdDays, getSecretAuditLogWarmDays, gitAuthSchema, hasOrchCapability, heartbeatSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, hostLabel, identityLinkItemSchema, identityLinkListResponseSchema, initFailureSchema, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob, isSelfReportedLabel, isTerminal, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobContextMessageSchema, jobDispatchSchema, jobProgressSchema, jobRejectSchema, jobRerouteAckSchema, jobRerouteSchema, jobStatusForwardSchema, jobStatusSchema, joinRequestSchema, joinResponseSchema, logChunkSchema, logPullOrchToPlatformSchema, logPullPlatformToOrchSchema, manualScheduleRequestSchema, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchScopePattern, matchWorkflowTriggers, materializeFanout, materializeResolvedMatrix, matrixEnvelopeFields, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, mergeAutoLabels, minAccessLogWarmDays, minAuditLogWarmDays, minSecretAuditLogWarmDays, nackSchema, normalizeRunsOn, orchCapabilitiesSchema, orchMetricsSchema, orchestratorToAgentMessageSchema, orchestratorToPlatformMessageSchema, orgMemberSchema, parseActor, parseHostLabel, parseMemoryString, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerDiscoverSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerLogsCollectChunkSchema, peerLogsCollectErrorSchema, peerLogsCollectRequestSchema, peerScalerEventSchema, peerToPeerMessageSchema, peerUpdateSchema, platformOperatorActorSchema, platformToBrowserMessageSchema, platformToOrchestratorMessageSchema, provenanceUploadCompleteSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema, registerAckSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, resolveRoleLabels, resolveRunIdSugar, resolveSecretsForEnvironment, resourceRequestNestedSchema, resourceSpecSchema, runCancelRequestSchema, runEventMessageSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, scalerAgentLabels, scalerLabel, secretAuditLogColdDays, secretAuditLogWarmDays, secretAuditLogWarmSqlCase, serviceAccountActorSchema, shouldRecordAccess, shouldRecordSecretResolve, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema, staleCheckrunCleanupSchema, stateReplaySchema, stepApprovalRequestSchema, stepApprovalResolvedSchema, stepStatusForwardSchema, stringifyActor, stripScopePrefix, systemActorSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, transition, trustPolicyResponseSchema, trustPolicyUpdateSchema, userActorSchema, validateNoReservedLabels, validateResourceRequest, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema };
+import { FanoutError, MAX_FANOUT_JOBS, VariantKind, hostEnvelopeFields, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixEnvelopeFields } from "./fanout/materialize.js";
+export { ACCESS_LOG_COLD_DAYS, ACCESS_LOG_WARM_DAYS, AGENT_REQUIRED_KICI_VARS, ALLOWED_SYSTEM_VARS, AccessLogAction, AccessLogOutcome, AccessLogPolicyKind, AccessLogSource, AccessLogTargetType, ActivityFilterSource, ActivityRowSource, ActorType, ApprovalDecision, CacheOutcome, CacheRefScope, CacheRunEventType, CacheStepType, CheckRunConclusion, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EnvDeleteErrorCode, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutError, HOST_LABEL_PREFIX, HeldRunQueueType, HeldRunStatus, HoldScope, IfFailedPolicy, InitFailureCategory, JobRejectReason, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, LabelMatcher, LockFileParseError, MAX_FANOUT_JOBS, MIN_PROTOCOL_VERSION, NeedsEntrySchema, NeedsGroupEntrySchema, ORCH_CAPABILITIES, OnUnreachableMode, OrchRole, POLICY_BY_ACTION, PROTOCOL_VERSION, PayloadOmittedReason, RegisterableTriggerType, SANDBOX_DEFAULT_VARS, SCHEMA_VERSION, SELF_REPORTED_LABEL_PREFIXES, ScalerBackendType, ScalerEventType, SourceProvider, SourceSubtype, StepApprovalOutcome, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TRIGGER_EVENT_META, TRIGGER_EVENT_TYPES, TestRelayType, TimeoutReason, TriggerSource, VariantKind, WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogFilterSchema, accessLogItemSchema, accessLogWarmSqlCase, ackSchema, activityCursorSchema, activityFilterSchema, activityRowSchema, actorPrincipalSchema, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, agentTypeLabel, apiKeyActorSchema, applyIncludeExclude, approvalRequirementSchema, approverClauseSchema, attestationListItemSchema, auditLogColdDays, auditLogWarmDays, auditLogWarmSqlCase, authFailureSchema, authRequestSchema, authSuccessSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserAuthFailureSchema, browserAuthRefreshSchema, browserAuthRequestSchema, browserAuthSuccessSchema, browserErrorSchema, browserEventLogPayloadChunkSchema, browserEventLogPayloadFetchSchema, browserGapSchema, browserJobContextSchema, browserJobNewSchema, browserJobStatusSchema, browserLogLinesSchema, browserLogStreamTerminatedReason, browserLogStreamTerminatedSchema, browserLogSubscribeSchema, browserLogUnsubscribeSchema, browserPingSchema, browserPongSchema, browserRunEventSchema, browserRunNewSchema, browserRunStatusSchema, browserStatusSubscribeSchema, browserStatusUnsubscribeSchema, browserStepStatusSchema, browserToPlatformMessageSchema, cacheStatsSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, compileRegexMatcher, configAckSchema, createTraceEntry, createWorkflowBundleConfig, createWorkflowDecision, dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, decodeActivityCursor, deriveOsArchLabels, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, encodeActivityCursor, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, errorSchema, eventEmitResponseSchema, eventEmitSchema, eventLogListItemSchema, executionEventSchema, executionStatusSchema, expandMatrix, expandMultiDimension, expandSingleDimension, flattenActor, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetLogsRequestSchema, fleetSelectionSchema, fnv1a32, formatExpandedJobName, formatMatrixSuffix, getAccessLogColdDays, getAccessLogWarmDays, getAuditLogColdDays, getAuditLogWarmDays, getSecretAuditLogColdDays, getSecretAuditLogWarmDays, gitAuthSchema, hasOrchCapability, heartbeatSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, hostEnvelopeFields, hostLabel, identityLinkItemSchema, identityLinkListResponseSchema, initFailureSchema, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob, isSelfReportedLabel, isTerminal, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobContextMessageSchema, jobDispatchSchema, jobProgressSchema, jobRejectSchema, jobRerouteAckSchema, jobRerouteSchema, jobStatusForwardSchema, jobStatusSchema, joinRequestSchema, joinResponseSchema, logChunkSchema, logPullOrchToPlatformSchema, logPullPlatformToOrchSchema, manualScheduleRequestSchema, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchScopePattern, matchWorkflowTriggers, matcherMatches, matcherSatisfiedBy, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixEnvelopeFields, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, mergeAutoLabels, minAccessLogWarmDays, minAuditLogWarmDays, minSecretAuditLogWarmDays, nackSchema, normalizeRunsOn, orchCapabilitiesSchema, orchMetricsSchema, orchestratorToAgentMessageSchema, orchestratorToPlatformMessageSchema, orgMemberSchema, parseActor, parseHostLabel, parseMemoryString, partitionMatchers, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerDiscoverSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerLogsCollectChunkSchema, peerLogsCollectErrorSchema, peerLogsCollectRequestSchema, peerScalerEventSchema, peerToPeerMessageSchema, peerUpdateSchema, platformOperatorActorSchema, platformToBrowserMessageSchema, platformToOrchestratorMessageSchema, provenanceUploadCompleteSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema, registerAckSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, resolveRoleLabels, resolveRunIdSugar, resolveSecretsForEnvironment, resourceRequestNestedSchema, resourceSpecSchema, runCancelRequestSchema, runEventMessageSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, scalerAgentLabels, scalerLabel, secretAuditLogColdDays, secretAuditLogWarmDays, secretAuditLogWarmSqlCase, serviceAccountActorSchema, shouldRecordAccess, shouldRecordSecretResolve, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema, staleCheckrunCleanupSchema, stateReplaySchema, stepApprovalRequestSchema, stepApprovalResolvedSchema, stepStatusForwardSchema, stringifyActor, stripScopePrefix, systemActorSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, transition, trustPolicyResponseSchema, trustPolicyUpdateSchema, upstreamSnapshotSchema, userActorSchema, validateNoReservedLabels, validateResourceRequest, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema };

package/dist/labels/compile.d.ts

@@ -0,0 +1,40 @@
+import type { LabelMatcher } from '../labels-match.js';
+/**
+ * Reject a ReDoS-prone regex. `safe-regex` is a star-height heuristic — the
+ * orchestrator is single-tenant, so a slipped-through pattern only stalls the
+ * author's own orchestrator. Globs are linear by construction but pass through
+ * here for uniformity.
+ */
+export declare function assertSafeRegex(source: string, flags: string, ctx: string): void;
+/**
+ * Convert one author selector element into a `LabelMatcher`.
+ * - `RegExp` → regex matcher (source + flags captured verbatim).
+ * - string that picomatch detects as a glob → regex via `picomatch.makeRe`.
+ * - any other string → exact.
+ * `ctx` is a human label (e.g. "job 'web' runsOn") used in ReDoS errors.
+ */
+export declare function toLabelMatcher(el: string | RegExp, ctx: string): LabelMatcher;
+export type SelectorEl = string | RegExp;
+export type RunsOnAuthorInput = SelectorEl | readonly SelectorEl[] | {
+    labels: SelectorEl | readonly SelectorEl[];
+    exclude?: SelectorEl | readonly SelectorEl[];
+};
+export type RunsOnAllAuthorInput = string | RegExp | readonly SelectorEl[] | {
+    include: readonly {
+        all: readonly SelectorEl[];
+    }[];
+    exclude?: readonly SelectorEl[];
+};
+/** Normalize a `runsOn` author value into include + exclude matchers. */
+export declare function normalizeRunsOnToMatchers(runsOn: RunsOnAuthorInput, ctx: string): {
+    include: LabelMatcher[];
+    exclude: LabelMatcher[];
+};
+/** Normalize a `runsOnAll` author value into include groups + exclude matchers. */
+export declare function normalizeRunsOnAllToMatchers(input: RunsOnAllAuthorInput, ctx: string): {
+    include: LabelMatcher[][];
+    exclude: LabelMatcher[];
+};
+/** Re-validate every regex matcher in a parsed lock selector (orchestrator lock-load). */
+export declare function assertMatchersSafe(matchers: readonly LabelMatcher[], ctx: string): void;
+//# sourceMappingURL=compile.d.ts.map

package/dist/labels/compile.js

@@ -0,0 +1,91 @@
+import "../chunk-BTugEXQM.js";
+import picomatch from "picomatch";
+import safeRegex from "safe-regex";
+//#region src/labels/compile.ts
+/**
+* Reject a ReDoS-prone regex. `safe-regex` is a star-height heuristic — the
+* orchestrator is single-tenant, so a slipped-through pattern only stalls the
+* author's own orchestrator. Globs are linear by construction but pass through
+* here for uniformity.
+*/
+function assertSafeRegex(source, flags, ctx) {
+	if (!safeRegex(new RegExp(source, flags))) throw new Error(`${ctx}: regex /${source}/${flags} is ReDoS-prone — rejected`);
+}
+/**
+* Convert one author selector element into a `LabelMatcher`.
+* - `RegExp` → regex matcher (source + flags captured verbatim).
+* - string that picomatch detects as a glob → regex via `picomatch.makeRe`.
+* - any other string → exact.
+* `ctx` is a human label (e.g. "job 'web' runsOn") used in ReDoS errors.
+*/
+function toLabelMatcher(el, ctx) {
+	if (el instanceof RegExp) {
+		assertSafeRegex(el.source, el.flags, ctx);
+		return {
+			kind: "regex",
+			source: el.source,
+			flags: el.flags
+		};
+	}
+	if (picomatch.scan(el).isGlob) {
+		const re = picomatch.makeRe(el);
+		if (!(re instanceof RegExp)) throw new Error(`${ctx}: glob '${el}' is not a valid pattern`);
+		assertSafeRegex(re.source, re.flags, ctx);
+		return {
+			kind: "regex",
+			source: re.source,
+			flags: re.flags
+		};
+	}
+	return {
+		kind: "exact",
+		value: el
+	};
+}
+const asArray = (v) => Array.isArray(v) ? v : [v];
+/** Normalize a `runsOn` author value into include + exclude matchers. */
+function normalizeRunsOnToMatchers(runsOn, ctx) {
+	if (typeof runsOn === "string" || runsOn instanceof RegExp) return {
+		include: [toLabelMatcher(runsOn, ctx)],
+		exclude: []
+	};
+	if (Array.isArray(runsOn)) return {
+		include: runsOn.map((e) => toLabelMatcher(e, ctx)),
+		exclude: []
+	};
+	const sel = runsOn;
+	return {
+		include: asArray(sel.labels).map((e) => toLabelMatcher(e, ctx)),
+		exclude: sel.exclude ? asArray(sel.exclude).map((e) => toLabelMatcher(e, ctx)) : []
+	};
+}
+/** Normalize a `runsOnAll` author value into include groups + exclude matchers. */
+function normalizeRunsOnAllToMatchers(input, ctx) {
+	if (typeof input === "string" || input instanceof RegExp) return {
+		include: [[toLabelMatcher(input, ctx)]],
+		exclude: []
+	};
+	if (Array.isArray(input)) {
+		const include = [];
+		const exclude = [];
+		for (const entry of input) if (typeof entry === "string" && entry.startsWith("!")) exclude.push(toLabelMatcher(entry.slice(1), ctx));
+		else include.push(toLabelMatcher(entry, ctx));
+		return {
+			include: include.length ? [include] : [],
+			exclude
+		};
+	}
+	const obj = input;
+	return {
+		include: obj.include.map((g) => g.all.map((e) => toLabelMatcher(e, ctx))),
+		exclude: (obj.exclude ?? []).map((e) => toLabelMatcher(e, ctx))
+	};
+}
+/** Re-validate every regex matcher in a parsed lock selector (orchestrator lock-load). */
+function assertMatchersSafe(matchers, ctx) {
+	for (const m of matchers) if (m.kind === "regex") assertSafeRegex(m.source, m.flags, ctx);
+}
+//#endregion
+export { assertMatchersSafe, assertSafeRegex, normalizeRunsOnAllToMatchers, normalizeRunsOnToMatchers, toLabelMatcher };
+
+//# sourceMappingURL=compile.js.map

package/dist/labels-match.d.ts

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+/**
+ * A single label selector element after compilation. Globs are converted to
+ * regex at compile time, so the lock file only ever carries `exact` or `regex`.
+ * This module is browser-safe (pure `RegExp`, zod only) and lives in the engine
+ * barrel; glob conversion and the ReDoS gate live in the Node-only
+ * `@kici-dev/engine/labels/compile` subpath.
+ */
+export declare const LabelMatcher: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"exact">;
+    value: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"regex">;
+    source: z.ZodString;
+    flags: z.ZodString;
+}, z.core.$strip>], "kind">;
+export type LabelMatcher = z.infer<typeof LabelMatcher>;
+/** Compile (and cache) the `RegExp` for a regex matcher. */
+export declare function compileRegexMatcher(m: {
+    source: string;
+    flags: string;
+}): RegExp;
+/** Whether a single label string satisfies the matcher. */
+export declare function matcherMatches(m: LabelMatcher, label: string): boolean;
+/** Whether some label in the set satisfies the matcher. */
+export declare function matcherSatisfiedBy(m: LabelMatcher, labels: ReadonlySet<string>): boolean;
+/** Split a matcher list into exact label strings and the remaining regex matchers. */
+export declare function partitionMatchers(ms: readonly LabelMatcher[]): {
+    exact: string[];
+    regex: LabelMatcher[];
+};
+//# sourceMappingURL=labels-match.d.ts.map

package/dist/labels-match.js

@@ -0,0 +1,55 @@
+import "./chunk-BTugEXQM.js";
+import { z } from "zod";
+//#region src/labels-match.ts
+/**
+* A single label selector element after compilation. Globs are converted to
+* regex at compile time, so the lock file only ever carries `exact` or `regex`.
+* This module is browser-safe (pure `RegExp`, zod only) and lives in the engine
+* barrel; glob conversion and the ReDoS gate live in the Node-only
+* `@kici-dev/engine/labels/compile` subpath.
+*/
+const LabelMatcher = z.discriminatedUnion("kind", [z.object({
+	kind: z.literal("exact"),
+	value: z.string()
+}), z.object({
+	kind: z.literal("regex"),
+	source: z.string(),
+	flags: z.string()
+})]);
+const regexCache = /* @__PURE__ */ new Map();
+/** Compile (and cache) the `RegExp` for a regex matcher. */
+function compileRegexMatcher(m) {
+	const key = `${m.flags} ${m.source}`;
+	let re = regexCache.get(key);
+	if (!re) {
+		re = new RegExp(m.source, m.flags);
+		regexCache.set(key, re);
+	}
+	return re;
+}
+/** Whether a single label string satisfies the matcher. */
+function matcherMatches(m, label) {
+	return m.kind === "exact" ? label === m.value : compileRegexMatcher(m).test(label);
+}
+/** Whether some label in the set satisfies the matcher. */
+function matcherSatisfiedBy(m, labels) {
+	if (m.kind === "exact") return labels.has(m.value);
+	const re = compileRegexMatcher(m);
+	for (const label of labels) if (re.test(label)) return true;
+	return false;
+}
+/** Split a matcher list into exact label strings and the remaining regex matchers. */
+function partitionMatchers(ms) {
+	const exact = [];
+	const regex = [];
+	for (const m of ms) if (m.kind === "exact") exact.push(m.value);
+	else regex.push(m);
+	return {
+		exact,
+		regex
+	};
+}
+//#endregion
+export { LabelMatcher, compileRegexMatcher, matcherMatches, matcherSatisfiedBy, partitionMatchers };
+
+//# sourceMappingURL=labels-match.js.map

package/dist/matrix/expand.d.ts

@@ -17,6 +17,11 @@ export interface MatrixValues {
     /** Multi-dimensional: named properties */
     [dimension: string]: string | undefined;
 }
+/**
+ * Compute the cartesian product of the given value sets in row-major order.
+ * An empty set list yields a single empty tuple; any empty set yields no tuples.
+ */
+export declare function cartesianProduct<T>(sets: T[][]): T[][];
 /**
  * Expand single-dimension matrix (array form) to MatrixValues array.
  * Each value becomes {value: string}.
@@ -24,7 +29,7 @@ export interface MatrixValues {
 export declare function expandSingleDimension(matrix: StaticMatrixArray): MatrixValues[];
 /**
  * Expand multi-dimensional matrix (object form) to MatrixValues array.
- * Uses fast-cartesian to compute cartesian product of all dimensions.
+ * Computes the cartesian product of all dimensions.
  * Dimension names are sorted for deterministic output.
  */
 export declare function expandMultiDimension(matrix: StaticMatrixObject): MatrixValues[];

package/dist/matrix/expand.js

@@ -1,7 +1,13 @@
 import "../chunk-BTugEXQM.js";
-import fastCartesian from "fast-cartesian";
 //#region src/matrix/expand.ts
 /**
+* Compute the cartesian product of the given value sets in row-major order.
+* An empty set list yields a single empty tuple; any empty set yields no tuples.
+*/
+function cartesianProduct(sets) {
+	return sets.reduce((acc, set) => acc.flatMap((tuple) => set.map((value) => [...tuple, value])), [[]]);
+}
+/**
 * Expand single-dimension matrix (array form) to MatrixValues array.
 * Each value becomes {value: string}.
 */
@@ -10,7 +16,7 @@ function expandSingleDimension(matrix) {
 }
 /**
 * Expand multi-dimensional matrix (object form) to MatrixValues array.
-* Uses fast-cartesian to compute cartesian product of all dimensions.
+* Computes the cartesian product of all dimensions.
 * Dimension names are sorted for deterministic output.
 */
 function expandMultiDimension(matrix) {
@@ -18,7 +24,7 @@ function expandMultiDimension(matrix) {
 	if (dimensions.length === 0) return [];
 	dimensions.sort((a, b) => a[0].localeCompare(b[0]));
 	const names = dimensions.map(([name]) => name);
-	return fastCartesian(dimensions.map(([, values]) => values)).map((combo) => {
+	return cartesianProduct(dimensions.map(([, values]) => values)).map((combo) => {
 		const result = {};
 		names.forEach((name, idx) => {
 			result[name] = combo[idx];
@@ -61,6 +67,6 @@ function applyIncludeExclude(expanded, include, exclude) {
 	return result;
 }
 //#endregion
-export { applyIncludeExclude, expandMatrix, expandMultiDimension, expandSingleDimension };
+export { applyIncludeExclude, cartesianProduct, expandMatrix, expandMultiDimension, expandSingleDimension };
 
 //# sourceMappingURL=expand.js.map

package/dist/matrix/format.js

@@ -6,8 +6,9 @@ import "../chunk-BTugEXQM.js";
 * Multi-dimensional: "linux, 18"
 */
 function formatMatrixSuffix(matrixValues) {
-	if ("value" in matrixValues && matrixValues.value !== void 0) return matrixValues.value;
-	return Object.values(matrixValues).filter((v) => v !== void 0).join(", ");
+	const defined = Object.entries(matrixValues).filter(([, v]) => v !== void 0);
+	if (defined.length === 1 && defined[0][0] === "value") return defined[0][1];
+	return defined.map(([, v]) => v).join(", ");
 }
 /** Expanded child job name: `${baseName} (${suffix})`. MUST match the local executor. */
 function formatExpandedJobName(baseName, matrixValues) {