@kici-dev/engine 0.1.17 → 0.1.18

package/dist/metrics/metric-catalog.generated.d.ts

@@ -19,6 +19,7 @@ export declare const MetricNames: {
     readonly KICI_ORCH_BUILD_DURATION_SECONDS: "kici_orch_build_duration_seconds";
     readonly KICI_ORCH_CONFIG_RELOAD_TOTAL: "kici_orch_config_reload_total";
     readonly KICI_ORCH_CONFIG_VERSION: "kici_orch_config_version";
+    readonly KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "kici_orch_declared_hosts_unreachable";
     readonly KICI_ORCH_DEDUP_HITS_TOTAL: "kici_orch_dedup_hits_total";
     readonly KICI_ORCH_DEP_CACHE_HITS_TOTAL: "kici_orch_dep_cache_hits_total";
     readonly KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "kici_orch_dep_cache_misses_total";
@@ -128,6 +129,7 @@ export declare const MetricNames: {
     readonly V8JS_MEMORY_HEAP_LIMIT: "v8js.memory.heap.limit";
     readonly V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "v8js.memory.heap.space.available_size";
     readonly V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "v8js.memory.heap.space.physical_size";
+    readonly V8JS_MEMORY_HEAP_SPACE_SIZE: "v8js.memory.heap.space.size";
     readonly V8JS_MEMORY_HEAP_USED: "v8js.memory.heap.used";
 };
 export type MetricName = (typeof MetricNames)[keyof typeof MetricNames];
@@ -152,6 +154,7 @@ export declare const MetricLabels: {
     readonly KICI_ORCH_BUILD_DURATION_SECONDS: readonly [];
     readonly KICI_ORCH_CONFIG_RELOAD_TOTAL: readonly ["result", "source"];
     readonly KICI_ORCH_CONFIG_VERSION: readonly [];
+    readonly KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: readonly [];
     readonly KICI_ORCH_DEDUP_HITS_TOTAL: readonly [];
     readonly KICI_ORCH_DEP_CACHE_HITS_TOTAL: readonly [];
     readonly KICI_ORCH_DEP_CACHE_MISSES_TOTAL: readonly [];
@@ -261,6 +264,7 @@ export declare const MetricLabels: {
     readonly V8JS_MEMORY_HEAP_LIMIT: readonly ["v8js.heap.space.name", "scaler"];
     readonly V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: readonly ["v8js.heap.space.name", "scaler"];
     readonly V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: readonly ["v8js.heap.space.name", "scaler"];
+    readonly V8JS_MEMORY_HEAP_SPACE_SIZE: readonly ["v8js.heap.space.name", "scaler"];
     readonly V8JS_MEMORY_HEAP_USED: readonly ["v8js.heap.space.name", "scaler"];
 };
 export declare const MetricKind: {
@@ -284,6 +288,7 @@ export declare const MetricKind: {
     readonly KICI_ORCH_BUILD_DURATION_SECONDS: "histogram";
     readonly KICI_ORCH_CONFIG_RELOAD_TOTAL: "counter";
     readonly KICI_ORCH_CONFIG_VERSION: "observableGauge";
+    readonly KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "observableGauge";
     readonly KICI_ORCH_DEDUP_HITS_TOTAL: "counter";
     readonly KICI_ORCH_DEP_CACHE_HITS_TOTAL: "counter";
     readonly KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "counter";
@@ -393,6 +398,7 @@ export declare const MetricKind: {
     readonly V8JS_MEMORY_HEAP_LIMIT: "gauge";
     readonly V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "gauge";
     readonly V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "gauge";
+    readonly V8JS_MEMORY_HEAP_SPACE_SIZE: "gauge";
     readonly V8JS_MEMORY_HEAP_USED: "gauge";
 };
 export declare const MetricDescription: {
@@ -416,6 +422,7 @@ export declare const MetricDescription: {
     readonly KICI_ORCH_BUILD_DURATION_SECONDS: "Duration of build agent operations in seconds";
     readonly KICI_ORCH_CONFIG_RELOAD_TOTAL: "Total number of config reload operations";
     readonly KICI_ORCH_CONFIG_VERSION: "Current shared config version number";
+    readonly KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "Number of declared (static) roster hosts currently unreachable";
     readonly KICI_ORCH_DEDUP_HITS_TOTAL: "Total number of deduplication cache hits";
     readonly KICI_ORCH_DEP_CACHE_HITS_TOTAL: "Total number of dep cache hits";
     readonly KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "Total number of dep cache misses";
@@ -525,6 +532,7 @@ export declare const MetricDescription: {
     readonly V8JS_MEMORY_HEAP_LIMIT: "V8 heap size limit by heap space";
     readonly V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "V8 available heap size by heap space";
     readonly V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "V8 physical heap size by heap space";
+    readonly V8JS_MEMORY_HEAP_SPACE_SIZE: "V8 total heap size by heap space";
     readonly V8JS_MEMORY_HEAP_USED: "V8 used heap size by heap space";
 };
 /**
@@ -555,6 +563,7 @@ export declare const MetricService: {
     readonly KICI_ORCH_BUILD_DURATION_SECONDS: "orchestrator";
     readonly KICI_ORCH_CONFIG_RELOAD_TOTAL: "orchestrator";
     readonly KICI_ORCH_CONFIG_VERSION: "orchestrator";
+    readonly KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "orchestrator";
     readonly KICI_ORCH_DEDUP_HITS_TOTAL: "orchestrator";
     readonly KICI_ORCH_DEP_CACHE_HITS_TOTAL: "orchestrator";
     readonly KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "orchestrator";
@@ -664,6 +673,7 @@ export declare const MetricService: {
     readonly V8JS_MEMORY_HEAP_LIMIT: "runtime";
     readonly V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "runtime";
     readonly V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "runtime";
+    readonly V8JS_MEMORY_HEAP_SPACE_SIZE: "runtime";
     readonly V8JS_MEMORY_HEAP_USED: "runtime";
 };
 export type MetricService = (typeof MetricService)[keyof typeof MetricService];

package/dist/metrics/metric-catalog.generated.js

@@ -21,6 +21,7 @@ const MetricNames = {
 	KICI_ORCH_BUILD_DURATION_SECONDS: "kici_orch_build_duration_seconds",
 	KICI_ORCH_CONFIG_RELOAD_TOTAL: "kici_orch_config_reload_total",
 	KICI_ORCH_CONFIG_VERSION: "kici_orch_config_version",
+	KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "kici_orch_declared_hosts_unreachable",
 	KICI_ORCH_DEDUP_HITS_TOTAL: "kici_orch_dedup_hits_total",
 	KICI_ORCH_DEP_CACHE_HITS_TOTAL: "kici_orch_dep_cache_hits_total",
 	KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "kici_orch_dep_cache_misses_total",
@@ -130,6 +131,7 @@ const MetricNames = {
 	V8JS_MEMORY_HEAP_LIMIT: "v8js.memory.heap.limit",
 	V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "v8js.memory.heap.space.available_size",
 	V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "v8js.memory.heap.space.physical_size",
+	V8JS_MEMORY_HEAP_SPACE_SIZE: "v8js.memory.heap.space.size",
 	V8JS_MEMORY_HEAP_USED: "v8js.memory.heap.used"
 };
 const MetricLabels = {
@@ -153,6 +155,7 @@ const MetricLabels = {
 	KICI_ORCH_BUILD_DURATION_SECONDS: [],
 	KICI_ORCH_CONFIG_RELOAD_TOTAL: ["result", "source"],
 	KICI_ORCH_CONFIG_VERSION: [],
+	KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: [],
 	KICI_ORCH_DEDUP_HITS_TOTAL: [],
 	KICI_ORCH_DEP_CACHE_HITS_TOTAL: [],
 	KICI_ORCH_DEP_CACHE_MISSES_TOTAL: [],
@@ -270,6 +273,7 @@ const MetricLabels = {
 	V8JS_MEMORY_HEAP_LIMIT: ["v8js.heap.space.name", "scaler"],
 	V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: ["v8js.heap.space.name", "scaler"],
 	V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: ["v8js.heap.space.name", "scaler"],
+	V8JS_MEMORY_HEAP_SPACE_SIZE: ["v8js.heap.space.name", "scaler"],
 	V8JS_MEMORY_HEAP_USED: ["v8js.heap.space.name", "scaler"]
 };
 const MetricKind = {
@@ -293,6 +297,7 @@ const MetricKind = {
 	KICI_ORCH_BUILD_DURATION_SECONDS: "histogram",
 	KICI_ORCH_CONFIG_RELOAD_TOTAL: "counter",
 	KICI_ORCH_CONFIG_VERSION: "observableGauge",
+	KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "observableGauge",
 	KICI_ORCH_DEDUP_HITS_TOTAL: "counter",
 	KICI_ORCH_DEP_CACHE_HITS_TOTAL: "counter",
 	KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "counter",
@@ -402,6 +407,7 @@ const MetricKind = {
 	V8JS_MEMORY_HEAP_LIMIT: "gauge",
 	V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "gauge",
 	V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "gauge",
+	V8JS_MEMORY_HEAP_SPACE_SIZE: "gauge",
 	V8JS_MEMORY_HEAP_USED: "gauge"
 };
 const MetricDescription = {
@@ -425,6 +431,7 @@ const MetricDescription = {
 	KICI_ORCH_BUILD_DURATION_SECONDS: "Duration of build agent operations in seconds",
 	KICI_ORCH_CONFIG_RELOAD_TOTAL: "Total number of config reload operations",
 	KICI_ORCH_CONFIG_VERSION: "Current shared config version number",
+	KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "Number of declared (static) roster hosts currently unreachable",
 	KICI_ORCH_DEDUP_HITS_TOTAL: "Total number of deduplication cache hits",
 	KICI_ORCH_DEP_CACHE_HITS_TOTAL: "Total number of dep cache hits",
 	KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "Total number of dep cache misses",
@@ -534,6 +541,7 @@ const MetricDescription = {
 	V8JS_MEMORY_HEAP_LIMIT: "V8 heap size limit by heap space",
 	V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "V8 available heap size by heap space",
 	V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "V8 physical heap size by heap space",
+	V8JS_MEMORY_HEAP_SPACE_SIZE: "V8 total heap size by heap space",
 	V8JS_MEMORY_HEAP_USED: "V8 used heap size by heap space"
 };
 /**
@@ -564,6 +572,7 @@ const MetricService = {
 	KICI_ORCH_BUILD_DURATION_SECONDS: "orchestrator",
 	KICI_ORCH_CONFIG_RELOAD_TOTAL: "orchestrator",
 	KICI_ORCH_CONFIG_VERSION: "orchestrator",
+	KICI_ORCH_DECLARED_HOSTS_UNREACHABLE: "orchestrator",
 	KICI_ORCH_DEDUP_HITS_TOTAL: "orchestrator",
 	KICI_ORCH_DEP_CACHE_HITS_TOTAL: "orchestrator",
 	KICI_ORCH_DEP_CACHE_MISSES_TOTAL: "orchestrator",
@@ -673,6 +682,7 @@ const MetricService = {
 	V8JS_MEMORY_HEAP_LIMIT: "runtime",
 	V8JS_MEMORY_HEAP_SPACE_AVAILABLE_SIZE: "runtime",
 	V8JS_MEMORY_HEAP_SPACE_PHYSICAL_SIZE: "runtime",
+	V8JS_MEMORY_HEAP_SPACE_SIZE: "runtime",
 	V8JS_MEMORY_HEAP_USED: "runtime"
 };
 /** Set of every catalog metric name — O(1) membership for lint / filter UI. */
@@ -697,6 +707,7 @@ const ALL_METRIC_NAMES = [
 	"kici_orch_build_duration_seconds",
 	"kici_orch_config_reload_total",
 	"kici_orch_config_version",
+	"kici_orch_declared_hosts_unreachable",
 	"kici_orch_dedup_hits_total",
 	"kici_orch_dep_cache_hits_total",
 	"kici_orch_dep_cache_misses_total",
@@ -806,6 +817,7 @@ const ALL_METRIC_NAMES = [
 	"v8js.memory.heap.limit",
 	"v8js.memory.heap.space.available_size",
 	"v8js.memory.heap.space.physical_size",
+	"v8js.memory.heap.space.size",
 	"v8js.memory.heap.used"
 ];
 //#endregion

package/dist/protocol/messages/dashboard.d.ts

@@ -57,6 +57,9 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
     jobName: z.ZodString;
     status: z.ZodString;
     matrixValues: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     startedAt: z.ZodNullable<z.ZodNumber>;
     completedAt: z.ZodNullable<z.ZodNumber>;
     durationMs: z.ZodNullable<z.ZodNumber>;
@@ -113,6 +116,9 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
         jobName: z.ZodString;
         status: z.ZodString;
         matrixValues: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         startedAt: z.ZodNullable<z.ZodNumber>;
         completedAt: z.ZodNullable<z.ZodNumber>;
         durationMs: z.ZodNullable<z.ZodNumber>;
@@ -1925,9 +1931,9 @@ declare const diagnosticsPeerSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
+            fail: "fail";
             pass: "pass";
             warn: "warn";
-            fail: "fail";
         }>;
         message: z.ZodNullable<z.ZodString>;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -1972,7 +1978,6 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         raftLeaderId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         agentCount: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         statefulAgentCount: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-        statefulHosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>;
     agents: z.ZodArray<z.ZodObject<{
         agentId: z.ZodString;
@@ -2051,9 +2056,9 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
+                fail: "fail";
                 pass: "pass";
                 warn: "warn";
-                fail: "fail";
             }>;
             message: z.ZodNullable<z.ZodString>;
             details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -4392,6 +4397,9 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         jobName: z.ZodString;
         status: z.ZodString;
         matrixValues: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         startedAt: z.ZodNullable<z.ZodNumber>;
         completedAt: z.ZodNullable<z.ZodNumber>;
         durationMs: z.ZodNullable<z.ZodNumber>;
@@ -4891,7 +4899,6 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         raftLeaderId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         agentCount: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         statefulAgentCount: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-        statefulHosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>;
     agents: z.ZodArray<z.ZodObject<{
         agentId: z.ZodString;
@@ -4970,9 +4977,9 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
+                fail: "fail";
                 pass: "pass";
                 warn: "warn";
-                fail: "fail";
             }>;
             message: z.ZodNullable<z.ZodString>;
             details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -5497,6 +5504,9 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
         jobName: z.ZodString;
         status: z.ZodString;
         matrixValues: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         startedAt: z.ZodNullable<z.ZodNumber>;
         completedAt: z.ZodNullable<z.ZodNumber>;
         durationMs: z.ZodNullable<z.ZodNumber>;
@@ -5791,7 +5801,6 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     runningAsUser: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     runningAsUid: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     statefulAgentCount: z.ZodNumber;
-    statefulHosts: z.ZodArray<z.ZodString>;
     scalers: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         type: z.ZodString;
@@ -5804,9 +5813,9 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
+            fail: "fail";
             pass: "pass";
             warn: "warn";
-            fail: "fail";
         }>;
         message: z.ZodNullable<z.ZodString>;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -5870,7 +5879,6 @@ export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
         runningAsUser: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         runningAsUid: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         statefulAgentCount: z.ZodNumber;
-        statefulHosts: z.ZodArray<z.ZodString>;
         scalers: z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             type: z.ZodString;
@@ -5883,9 +5891,9 @@ export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
+                fail: "fail";
                 pass: "pass";
                 warn: "warn";
-                fail: "fail";
             }>;
             message: z.ZodNullable<z.ZodString>;
             details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/protocol/messages/dashboard.js

@@ -49,6 +49,12 @@ const dashboardJobDetailSchema = z.object({
 	jobName: z.string(),
 	status: z.string(),
 	matrixValues: z.record(z.string(), z.unknown()).nullable(),
+	/** Base (logical) job name for a fan-out child; null for non-fanned jobs. */
+	baseJobName: z.string().nullable().optional(),
+	/** Fan-out kind for a child: 'matrix' | 'host'; null for non-fanned jobs. */
+	variantKind: z.string().nullable().optional(),
+	/** Fan-out label for a child: matrix suffix or hostname; null for non-fanned jobs. */
+	variantLabel: z.string().nullable().optional(),
 	startedAt: z.number().nullable(),
 	completedAt: z.number().nullable(),
 	durationMs: z.number().nullable(),
@@ -1152,13 +1158,7 @@ const dashboardDiagnosticsResponseSchema = z.object({
 		/** Total number of registered agents (always populated regardless of includeAgents). */
 		agentCount: z.number().nullable().optional(),
 		/** Number of agents not bound to any scaler. */
-		statefulAgentCount: z.number().nullable().optional(),
-		/**
-		* Distinct host names of stateful (unbound) agents, derived from their
-		* self-reported kici:host: labels. Lets the dashboard surface the hosts of
-		* long-lived standalone agents on the collapsed "Stateful agents" header.
-		*/
-		statefulHosts: z.array(z.string()).optional()
+		statefulAgentCount: z.number().nullable().optional()
 	}),
 	agents: z.array(diagnosticsAgentSchema),
 	scalers: z.array(diagnosticsScalerSchema).optional(),
@@ -1764,7 +1764,6 @@ const diagnosticsInfraOrchestratorSchema = z.object({
 	runningAsUser: z.string().nullable().optional(),
 	runningAsUid: z.number().nullable().optional(),
 	statefulAgentCount: z.number(),
-	statefulHosts: z.array(z.string()),
 	scalers: z.array(diagnosticsInfraScalerSchema),
 	dependencyHealth: z.array(z.object({
 		name: z.string(),

package/dist/protocol/messages/orchestrator-agent.d.ts

@@ -13,6 +13,21 @@ export declare const CacheRefScope: z.ZodEnum<{
     isolated: "isolated";
 }>;
 export type CacheRefScope = z.infer<typeof CacheRefScope>;
+/**
+ * Frozen snapshot of upstream job outputs for a result-aware dynamic generator.
+ *
+ * Captured once when the deferred eval job is dispatched (its upstreams are
+ * terminal at that point) and replayed unchanged on agent-side re-eval, so the
+ * generator sees the same `ctx.needs` data on both passes.
+ *
+ * - `jobs` maps an upstream job name to its outputs record.
+ * - `groups` maps a dynamic group name to its ordered member job names.
+ */
+export declare const upstreamSnapshotSchema: z.ZodObject<{
+    jobs: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    groups: z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type UpstreamSnapshot = z.infer<typeof upstreamSnapshotSchema>;
 /**
  * Structured git-clone auth material. Carries everything the agent needs to
  * authenticate a single `git clone`:

package/dist/protocol/messages/orchestrator-agent.js

@@ -14,6 +14,20 @@ import { z } from "zod";
 */
 const CacheRefScope = z.enum(["shared", "isolated"]);
 /**
+* Frozen snapshot of upstream job outputs for a result-aware dynamic generator.
+*
+* Captured once when the deferred eval job is dispatched (its upstreams are
+* terminal at that point) and replayed unchanged on agent-side re-eval, so the
+* generator sees the same `ctx.needs` data on both passes.
+*
+* - `jobs` maps an upstream job name to its outputs record.
+* - `groups` maps a dynamic group name to its ordered member job names.
+*/
+const upstreamSnapshotSchema = z.object({
+	jobs: z.record(z.string(), z.record(z.string(), z.unknown())),
+	groups: z.record(z.string(), z.array(z.string()))
+});
+/**
 * Structured git-clone auth material. Carries everything the agent needs to
 * authenticate a single `git clone`:
 *
@@ -705,6 +719,6 @@ const agentToOrchestratorMessageSchema = z.discriminatedUnion("type", [
 	stepApprovalRequestSchema
 ]);
 //#endregion
-export { CacheRefScope, JobRejectReason, StepApprovalOutcome, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, configAckSchema, eventEmitResponseSchema, eventEmitSchema, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetLogsRequestSchema, gitAuthSchema, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobDispatchSchema, jobRejectSchema, jobStatusSchema, orchestratorToAgentMessageSchema, provenanceUploadCompleteSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, registerAckSchema, stepApprovalRequestSchema, stepApprovalResolvedSchema };
+export { CacheRefScope, JobRejectReason, StepApprovalOutcome, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, configAckSchema, eventEmitResponseSchema, eventEmitSchema, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetLogsRequestSchema, gitAuthSchema, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobDispatchSchema, jobRejectSchema, jobStatusSchema, orchestratorToAgentMessageSchema, provenanceUploadCompleteSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, registerAckSchema, stepApprovalRequestSchema, stepApprovalResolvedSchema, upstreamSnapshotSchema };
 
 //# sourceMappingURL=orchestrator-agent.js.map

package/dist/protocol/messages/peer.d.ts

@@ -140,6 +140,22 @@ export declare const jobRerouteSchema: z.ZodObject<{
     workflowName: z.ZodString;
     runsOnLabels: z.ZodArray<z.ZodArray<z.ZodString>>;
     excludeLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    runsOnPatterns: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
+    excludePatterns: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
     triedConnections: z.ZodArray<z.ZodString>;
     maxHops: z.ZodNumber;
     coordinatorId: z.ZodString;
@@ -488,6 +504,22 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
     workflowName: z.ZodString;
     runsOnLabels: z.ZodArray<z.ZodArray<z.ZodString>>;
     excludeLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    runsOnPatterns: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
+    excludePatterns: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
     triedConnections: z.ZodArray<z.ZodString>;
     maxHops: z.ZodNumber;
     coordinatorId: z.ZodString;
@@ -756,6 +788,22 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
     workflowName: z.ZodString;
     runsOnLabels: z.ZodArray<z.ZodArray<z.ZodString>>;
     excludeLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    runsOnPatterns: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
+    excludePatterns: z.ZodOptional<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
     triedConnections: z.ZodArray<z.ZodString>;
     maxHops: z.ZodNumber;
     coordinatorId: z.ZodString;

package/dist/protocol/messages/peer.js

@@ -1,6 +1,7 @@
 import "../../chunk-BTugEXQM.js";
 import { ExecutionJobStatus } from "./execution-status.js";
 import { ScalerEventType } from "./scaler-event.js";
+import { LabelMatcher } from "../../labels-match.js";
 import { z } from "zod";
 //#region src/protocol/messages/peer.ts
 /** Agent summary included in peer heartbeat and auth response messages. */
@@ -160,6 +161,16 @@ const jobRerouteSchema = z.object({
 	runsOnLabels: z.array(z.array(z.string())),
 	/** Labels that the dispatched agent must NOT have (optional for backward compatibility). */
 	excludeLabels: z.array(z.string()).optional(),
+	/**
+	* Glob/regex include matchers the receiving peer's agent labels must
+	* satisfy (JS post-filter, applied on top of the exact `runsOnLabels`
+	* prefilter — same semantics as the single-orchestrator dispatch path).
+	* Absent is treated as `[]`. A pure-pattern job (no exact labels) carries
+	* its selector here; dropping it would let the job match any local agent.
+	*/
+	runsOnPatterns: z.array(LabelMatcher).optional(),
+	/** Glob/regex matchers that disqualify a candidate agent (JS post-filter). Absent is `[]`. */
+	excludePatterns: z.array(LabelMatcher).optional(),
 	triedConnections: z.array(z.string()),
 	maxHops: z.number(),
 	coordinatorId: z.string(),

package/dist/trigger/types.d.ts

@@ -12,12 +12,16 @@
  * Schema version 15: adds per-job init config(s) to LockJob.
  * Schema version 16: adds normalized approval config to LockWorkflow/LockJob/LockStep.
  * Schema version 17: widens LockJob.init to typed presets ('mise' / { mise }) and 'auto' detection.
+ * Schema version 18: adds LockJob.runsOnAll host fan-out predicate + onUnreachable policy.
+ * Schema version 19: adds LockJob.maxParallel/failFast fan-out concurrency (rolling waves).
+ * Schema version 20: runsOn/runsOnAll/excludeLabels carry LabelMatcher (exact|regex) for glob+regex selectors.
  */
 import { z } from 'zod';
 import type { ProviderType } from '../provider/types.js';
 import type { ApproverClause } from '../approval/types.js';
+import { LabelMatcher } from '../labels-match.js';
 /** Schema version - increment on breaking changes */
-export declare const SCHEMA_VERSION: 17;
+export declare const SCHEMA_VERSION: 20;
 /**
  * Normalized approval config carried in the lock file. Produced by the compiler
  * from an SDK `requireApproval` at any of the three levels; consumed by the
@@ -386,11 +390,59 @@ export type NeedsGroupEntry = z.infer<typeof NeedsGroupEntrySchema>;
  * Static job in lock file.
  * Contains all orchestrator-readable information for scheduling.
  */
+/** Normalized runsOnAll predicate: OR of AND-groups (include), minus exclude matchers. */
+export interface RunsOnAllPredicate {
+    /** OR across groups; AND within a group. */
+    readonly include: readonly (readonly LabelMatcher[])[];
+    /** Matchers that disqualify a host (AND-NOT, applied to the union). */
+    readonly exclude: readonly LabelMatcher[];
+}
+/** Author-facing input forms for runsOnAll (string | RegExp | array-with-! | structured). */
+export type RunsOnAllInput = string | RegExp | readonly (string | RegExp)[] | {
+    readonly include: readonly {
+        readonly all: readonly (string | RegExp)[];
+    }[];
+    readonly exclude?: readonly (string | RegExp)[];
+};
+/**
+ * Failure policy for a host fan-out (`runsOnAll`) when an expected durable host
+ * is in the declared roster but not currently reachable.
+ *
+ * - `skip`: omit the unreachable durable host (fan out to reachable hosts only).
+ * - `fail`: fail the run init if any expected durable host is unreachable.
+ * - `hold`: queue a pinned child for each unreachable durable host and wait for
+ *   it to (re)connect (the durable default).
+ *
+ * Ephemeral hosts that are not live are always skipped (a scaled-down node may
+ * never return), independent of this policy.
+ */
+export declare const OnUnreachableMode: z.ZodEnum<{
+    skip: "skip";
+    fail: "fail";
+    hold: "hold";
+}>;
+export type OnUnreachableMode = z.infer<typeof OnUnreachableMode>;
 export interface LockJob {
     readonly _type: 'static';
     readonly name: string;
-    readonly runsOn: string | readonly string[];
-    readonly excludeLabels?: readonly string[];
+    /** Single-agent targeting matchers. Absent when the job uses `runsOnAll` instead. */
+    readonly runsOn?: readonly LabelMatcher[];
+    readonly excludeLabels?: readonly LabelMatcher[];
+    /**
+     * Host fan-out predicate (mutually exclusive with `runsOn`). When set, the job
+     * fans out to every roster host matching the predicate, one pinned child per host.
+     */
+    readonly runsOnAll?: RunsOnAllPredicate;
+    /** Failure policy for unreachable durable hosts in a `runsOnAll` fan-out. */
+    readonly onUnreachable?: OnUnreachableMode;
+    /**
+     * Fan-out concurrency width (sliding window; `1` = serial). When set on a
+     * fan-out job (matrix or `runsOnAll`), only the first `maxParallel` children
+     * dispatch; the rest are held `wave_gated` and released one-per-terminal.
+     */
+    readonly maxParallel?: number;
+    /** Halt the fan-out on first child failure, skipping the held remainder. Default `false`. */
+    readonly failFast?: boolean;
     readonly needs: readonly (string | NeedsEntry | NeedsGroupEntry)[];
     /** Group names this job depends on (populated by compiler from dynamicGroup refs). */
     readonly dependsOnGroups?: readonly string[];
@@ -435,6 +487,15 @@ export interface LockDynamicJobFn {
     };
     /** Group name for cross-domain needs (set when dynamicJob('name', fn) is used). */
     readonly group?: string;
+    /**
+     * Declared upstream needs for a result-aware generator. When present the
+     * generator's eval job is deferred until these upstreams complete, then run
+     * with their frozen outputs available as ctx.needs. Same normalized shape as
+     * a static job's `needs`.
+     */
+    readonly needs?: readonly (string | NeedsEntry | NeedsGroupEntry)[];
+    /** True when this dynamic entry was authored as dynamicJob(group, { needs, generate }). */
+    readonly resultAware?: boolean;
 }
 /** Job or dynamic job generator */
 export type LockJobOrFactory = LockJob | LockDynamicJobFn;

package/dist/trigger/types.js

@@ -15,9 +15,12 @@ import { z } from "zod";
 * Schema version 15: adds per-job init config(s) to LockJob.
 * Schema version 16: adds normalized approval config to LockWorkflow/LockJob/LockStep.
 * Schema version 17: widens LockJob.init to typed presets ('mise' / { mise }) and 'auto' detection.
+* Schema version 18: adds LockJob.runsOnAll host fan-out predicate + onUnreachable policy.
+* Schema version 19: adds LockJob.maxParallel/failFast fan-out concurrency (rolling waves).
+* Schema version 20: runsOn/runsOnAll/excludeLabels carry LabelMatcher (exact|regex) for glob+regex selectors.
 */
 /** Schema version - increment on breaking changes */
-const SCHEMA_VERSION = 17;
+const SCHEMA_VERSION = 20;
 /** Type guard for inline expression values */
 function isLockInlineValue(value) {
 	return typeof value === "object" && value !== null && value._type === "inline";
@@ -45,6 +48,23 @@ const NeedsGroupEntrySchema = z.object({
 	group: z.string(),
 	ifFailed: IfFailedPolicy.default(IfFailedPolicy.enum.skip)
 });
+/**
+* Failure policy for a host fan-out (`runsOnAll`) when an expected durable host
+* is in the declared roster but not currently reachable.
+*
+* - `skip`: omit the unreachable durable host (fan out to reachable hosts only).
+* - `fail`: fail the run init if any expected durable host is unreachable.
+* - `hold`: queue a pinned child for each unreachable durable host and wait for
+*   it to (re)connect (the durable default).
+*
+* Ephemeral hosts that are not live are always skipped (a scaled-down node may
+* never return), independent of this policy.
+*/
+const OnUnreachableMode = z.enum([
+	"skip",
+	"fail",
+	"hold"
+]);
 /** Type guard for static jobs */
 function isLockStaticJob(job) {
 	return job._type === "static";
@@ -54,6 +74,6 @@ function isLockDynamicJobFn(job) {
 	return job._type === "dynamic";
 }
 //#endregion
-export { IfFailedPolicy, NeedsEntrySchema, NeedsGroupEntrySchema, SCHEMA_VERSION, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob };
+export { IfFailedPolicy, NeedsEntrySchema, NeedsGroupEntrySchema, OnUnreachableMode, SCHEMA_VERSION, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob };
 
 //# sourceMappingURL=types.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/engine",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
   "keywords": [
     "ci",
@@ -49,6 +49,10 @@
       "import": "./dist/webhook/signature.js",
       "types": "./dist/webhook/signature.d.ts"
     },
+    "./labels/compile": {
+      "import": "./dist/labels/compile.js",
+      "types": "./dist/labels/compile.d.ts"
+    },
     "./protocol/dashboard-global-workflows": {
       "import": "./dist/protocol/dashboard-global-workflows.js",
       "types": "./dist/protocol/dashboard-global-workflows.d.ts"
@@ -95,14 +99,15 @@
     }
   },
   "dependencies": {
-    "fast-cartesian": "^9.0.1",
     "jose": "^6.1.0",
     "jsonpath-plus": "^10.4.0",
     "picomatch": "^4.0.4",
-    "zod": "^4.3.6"
+    "safe-regex": "^2.1.1",
+    "zod": "^4.4.3"
   },
   "devDependencies": {
-    "@types/node": "^24.12.0"
+    "@types/node": "^24.12.0",
+    "@types/safe-regex": "^1.1.6"
   },
   "scripts": {
     "build": "node ../../scripts/build-ts.mjs && tsc --emitDeclarationOnly",