@kici-dev/engine 0.1.22 → 0.1.24

package/dist/protocol/messages/platform-orchestrator.js

@@ -1,11 +1,11 @@
 import "../../chunk-BTugEXQM.js";
 import { heartbeatSchema } from "./common.js";
-import { orchCapabilitiesSchema } from "./capabilities.js";
-import { authFailureSchema, authRequestSchema, authSuccessSchema } from "./auth.js";
 import { executionStatusSchema, jobStatusForwardSchema, stateReplaySchema, stepStatusForwardSchema } from "./execution-status.js";
-import { sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema } from "./source-registration.js";
 import { jobContextMessageSchema, runEventMessageSchema } from "./run-events.js";
+import { sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema } from "./source-registration.js";
 import { dashboardPlatformToOrchSchema } from "./dashboard.js";
+import { orchCapabilitiesSchema } from "./capabilities.js";
+import { authFailureSchema, authRequestSchema, authSuccessSchema } from "./auth.js";
 import { z } from "zod";
 //#region src/protocol/messages/platform-orchestrator.ts
 /** Trust policy update pushed from Platform to orchestrator when policy or identity links change. */

package/dist/protocol/messages/run-events.d.ts

@@ -14,9 +14,9 @@ export declare const runEventMessageSchema: z.ZodObject<{
     eventType: z.ZodString;
     timestampMs: z.ZodNumber;
     sourceService: z.ZodEnum<{
+        agent: "agent";
         platform: "platform";
         orchestrator: "orchestrator";
-        agent: "agent";
     }>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     traceId: z.ZodOptional<z.ZodString>;
@@ -125,6 +125,10 @@ export declare const dashboardOrchLogsRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;

package/dist/provider/check-run-conclusion.d.ts

@@ -8,8 +8,8 @@ import { z } from 'zod';
 export declare const CheckRunConclusion: z.ZodEnum<{
     success: "success";
     cancelled: "cancelled";
-    failure: "failure";
     timed_out: "timed_out";
+    failure: "failure";
 }>;
 export type CheckRunConclusion = z.infer<typeof CheckRunConclusion>;
 //# sourceMappingURL=check-run-conclusion.d.ts.map

package/dist/trigger/types.d.ts

@@ -15,14 +15,20 @@
  * Schema version 18: adds LockJob.runsOnAll host fan-out predicate + onUnreachable policy.
  * Schema version 19: adds LockJob.maxParallel/failFast fan-out concurrency (rolling waves).
  * Schema version 20: runsOn/runsOnAll/excludeLabels carry LabelMatcher (exact|regex) for glob+regex selectors.
+ * Schema version 23: adds LockDispatchTrigger.inputs (typed dispatch inputs descriptors).
+ * Schema version 24: adds LockJob.runsOnPick (deterministic single-host selection).
+ * Schema version 25: adds LockStep.retry (step retry policy data subset; retryIf is execution-only).
+ * Schema version 26: adds LockJob.includeUninitialized (runsOnAll fans out to declared-but-un-agented hosts, bringing up a temporary init-runner per fresh box).
+ * Schema version 27: adds LockScheduleTrigger.inputs (defaults-only schedule dispatch inputs).
  */
 import { z } from 'zod';
 import type { ProviderType } from '../provider/types.js';
 import type { ApproverClause } from '../approval/types.js';
+import type { InputsDescriptorMap } from '../inputs/descriptor.js';
 import { LabelMatcher } from '../labels-match.js';
 import { ExecutionJobStatus } from '../protocol/messages/execution-status.js';
 /** Schema version - increment on breaking changes */
-export declare const SCHEMA_VERSION: 22;
+export declare const SCHEMA_VERSION: 29;
 /**
  * Normalized approval config carried in the lock file. Produced by the compiler
  * from an SDK `approval` at any of the three levels; consumed by the
@@ -139,6 +145,8 @@ export interface LockDispatchTrigger {
     readonly _type: 'dispatch';
     readonly types: readonly string[];
     readonly repos?: readonly LockBranchPattern[];
+    /** Typed dispatch-input descriptors (from `dispatch({ inputs })`). */
+    readonly inputs?: InputsDescriptorMap;
 }
 /**
  * Create trigger in lock file.
@@ -285,6 +293,8 @@ export interface LockScheduleTrigger {
     readonly cronExpression: string;
     readonly timezone: string;
     readonly description?: string;
+    /** Typed schedule-input descriptors (from `schedule({ inputs })`); defaults-only. */
+    readonly inputs?: InputsDescriptorMap;
 }
 /**
  * Lifecycle trigger in lock file.
@@ -329,12 +339,21 @@ export interface LockRule {
  * Minimal representation - agents load full step functions from source.
  */
 export interface LockStep {
+    /** Discriminator for the step union; absent/`'sequential'` is an ordinary step. */
+    readonly kind?: 'sequential';
     readonly name: string;
     readonly hasOutputs: boolean;
     /** When true, job proceeds even if this step fails. */
     readonly continueOnError?: boolean;
     /** Step-level timeout in milliseconds. */
     readonly timeout?: number;
+    /** Retry policy data (retryIf is execution-only and never serialized). */
+    readonly retry?: {
+        readonly maxAttempts: number;
+        readonly delayMs: number;
+        readonly backoff: 'fixed' | 'exponential';
+        readonly maxDelayMs: number;
+    };
     /** Source location of the step() call in the original TypeScript file (for annotations). */
     readonly sourceLocation?: {
         readonly file: string;
@@ -344,6 +363,24 @@ export interface LockStep {
     /** Normalized approval gate; when set the step pauses for a human approval. */
     readonly approval?: LockApproval;
 }
+/**
+ * A concurrent group of sequential steps in the lock file. Children run
+ * concurrently behind a join barrier; the group wrapper itself consumes no
+ * flat step index (its children carry the indices). No nesting is allowed.
+ */
+export interface LockParallelStep {
+    readonly kind: 'parallel';
+    readonly name: string;
+    /** Cancel in-flight siblings when the first child fails (default true). */
+    readonly failFast: boolean;
+    /** Maximum children running at once; queued children report `pending`. */
+    readonly maxParallel?: number;
+    readonly children: readonly LockStep[];
+}
+/** A lock-file entry in a job's `steps` array: an ordinary step or a parallel group. */
+export type LockStepEntry = LockStep | LockParallelStep;
+/** Type guard distinguishing a parallel group from an ordinary lock step. */
+export declare function isLockParallelStep(entry: LockStepEntry): entry is LockParallelStep;
 /**
  * Inline expression value for pure dynamic functions.
  * The compiler serializes pure functions as { _type: 'inline', expression: '(event) => ...' }
@@ -469,17 +506,35 @@ export type RunsOnAllInput = string | RegExp | readonly (string | RegExp)[] | {
  * never return), independent of this policy.
  */
 export declare const OnUnreachableMode: z.ZodEnum<{
+    hold: "hold";
     skip: "skip";
     fail: "fail";
-    hold: "hold";
 }>;
 export type OnUnreachableMode = z.infer<typeof OnUnreachableMode>;
+/**
+ * Single-agent selection policy when multiple agents match a `runsOn` selector.
+ *
+ * - `deterministic` (default): sort matching candidates by `agentId` and pick the
+ *   lowest, so a run-once-on-one-host job is reproducible across re-runs.
+ * - `any`: pick any available agent (load spread).
+ */
+export declare const RunsOnPick: z.ZodEnum<{
+    any: "any";
+    deterministic: "deterministic";
+}>;
+export type RunsOnPick = z.infer<typeof RunsOnPick>;
 export interface LockJob {
     readonly _type: 'static';
     readonly name: string;
     /** Single-agent targeting matchers. Absent when the job uses `runsOnAll` instead. */
     readonly runsOn?: readonly LabelMatcher[];
     readonly excludeLabels?: readonly LabelMatcher[];
+    /**
+     * Single-agent selection policy when more than one agent matches `runsOn`.
+     * `deterministic` (default) sorts candidates by `agentId` and picks the lowest;
+     * `any` picks any available agent. Absent on a `runsOnAll` fan-out job.
+     */
+    readonly runsOnPick?: RunsOnPick;
     /**
      * Host fan-out predicate (mutually exclusive with `runsOn`). When set, the job
      * fans out to every roster host matching the predicate, one pinned child per host.
@@ -487,6 +542,14 @@ export interface LockJob {
     readonly runsOnAll?: RunsOnAllPredicate;
     /** Failure policy for unreachable durable hosts in a `runsOnAll` fan-out. */
     readonly onUnreachable?: OnUnreachableMode;
+    /**
+     * Widen a `runsOnAll` fan-out to declared-but-un-agented hosts. When true,
+     * every roster host matching the predicate is a fan-out target even with no
+     * live agent: a fresh host gets a temporary init-runner brought up over SSH
+     * and its pinned steps run there; a live host runs on its own agent. Default
+     * absent ⇒ only live hosts (today's behavior governed by `onUnreachable`).
+     */
+    readonly includeUninitialized?: boolean;
     /**
      * Fan-out concurrency width (sliding window; `1` = serial). When set on a
      * fan-out job (matrix or `runsOnAll`), only the first `maxParallel` children
@@ -498,16 +561,21 @@ export interface LockJob {
     readonly needs: readonly (string | NeedsEntry | NeedsGroupEntry)[];
     /** Group names this job depends on (populated by compiler from dynamicGroup refs). */
     readonly dependsOnGroups?: readonly string[];
-    readonly steps: readonly LockStep[];
+    readonly steps: readonly LockStepEntry[];
     readonly matrix?: LockMatrix;
     readonly include?: readonly Record<string, string>[];
     readonly exclude?: readonly Record<string, string>[];
     readonly rules?: readonly LockRule[];
     readonly description?: string;
-    /** Deployment environment name (static string) or inline expression (pure function). */
-    readonly environment?: string | LockInlineValue;
-    /** When true, environment is dynamic (function) -- resolved at orchestrator two-phase eval or inline. */
-    readonly dynamicEnvironment?: boolean;
+    /**
+     * Deployment environments in merge order. Each entry is a static name or inline
+     * expression (pure function); `dynamic` is set when it is a function resolved at
+     * two-phase eval. Later entries override earlier ones on name collisions.
+     */
+    readonly environments?: ReadonlyArray<{
+        value: string | LockInlineValue;
+        dynamic: boolean;
+    }>;
     /** Static environment variables or inline expression (pure function). */
     readonly env?: Record<string, string> | LockInlineValue;
     /** When true, env is dynamic (function) -- resolved at orchestrator two-phase eval or inline. */

package/dist/trigger/types.js

@@ -19,9 +19,18 @@ import { z } from "zod";
 * Schema version 18: adds LockJob.runsOnAll host fan-out predicate + onUnreachable policy.
 * Schema version 19: adds LockJob.maxParallel/failFast fan-out concurrency (rolling waves).
 * Schema version 20: runsOn/runsOnAll/excludeLabels carry LabelMatcher (exact|regex) for glob+regex selectors.
+* Schema version 23: adds LockDispatchTrigger.inputs (typed dispatch inputs descriptors).
+* Schema version 24: adds LockJob.runsOnPick (deterministic single-host selection).
+* Schema version 25: adds LockStep.retry (step retry policy data subset; retryIf is execution-only).
+* Schema version 26: adds LockJob.includeUninitialized (runsOnAll fans out to declared-but-un-agented hosts, bringing up a temporary init-runner per fresh box).
+* Schema version 27: adds LockScheduleTrigger.inputs (defaults-only schedule dispatch inputs).
 */
 /** Schema version - increment on breaking changes */
-const SCHEMA_VERSION = 22;
+const SCHEMA_VERSION = 29;
+/** Type guard distinguishing a parallel group from an ordinary lock step. */
+function isLockParallelStep(entry) {
+	return entry.kind === "parallel";
+}
 /** Type guard for inline expression values */
 function isLockInlineValue(value) {
 	return typeof value === "object" && value !== null && value._type === "inline";
@@ -94,6 +103,14 @@ const OnUnreachableMode = z.enum([
 	"fail",
 	"hold"
 ]);
+/**
+* Single-agent selection policy when multiple agents match a `runsOn` selector.
+*
+* - `deterministic` (default): sort matching candidates by `agentId` and pick the
+*   lowest, so a run-once-on-one-host job is reproducible across re-runs.
+* - `any`: pick any available agent (load spread).
+*/
+const RunsOnPick = z.enum(["deterministic", "any"]);
 /** Type guard for static jobs */
 function isLockStaticJob(job) {
 	return job._type === "static";
@@ -103,6 +120,6 @@ function isLockDynamicJobFn(job) {
 	return job._type === "dynamic";
 }
 //#endregion
-export { NeedsEntrySchema, NeedsGroupEntrySchema, NeedsRunOn, NeedsWhen, OnUnreachableMode, SCHEMA_VERSION, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob, resolveWhenToRunOn };
+export { NeedsEntrySchema, NeedsGroupEntrySchema, NeedsRunOn, NeedsWhen, OnUnreachableMode, RunsOnPick, SCHEMA_VERSION, isLockDynamicJobFn, isLockInlineValue, isLockParallelStep, isLockStaticJob, resolveWhenToRunOn };
 
 //# sourceMappingURL=types.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/engine",
-  "version": "0.1.22",
+  "version": "0.1.24",
   "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
   "keywords": [
     "ci",
@@ -53,6 +53,14 @@
       "import": "./dist/labels/compile.js",
       "types": "./dist/labels/compile.d.ts"
     },
+    "./environment/host-match": {
+      "import": "./dist/environment/host-match.js",
+      "types": "./dist/environment/host-match.d.ts"
+    },
+    "./environment/scope-template": {
+      "import": "./dist/environment/scope-template.js",
+      "types": "./dist/environment/scope-template.d.ts"
+    },
     "./protocol/dashboard-global-workflows": {
       "import": "./dist/protocol/dashboard-global-workflows.js",
       "types": "./dist/protocol/dashboard-global-workflows.d.ts"

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/engine@0.1.22",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.22/5dc6919d-c8a2-40b2-aba3-44650ecac92f",
+  "name": "@kici-dev/engine@0.1.24",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.24/915641e1-bf02-4cc8-a165-ac232d710e4f",
   "creationInfo": {
-    "created": "2026-06-24T06:02:58Z",
+    "created": "2026-06-28T16:24:19Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -54,7 +54,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.22",
+      "versionInfo": "0.1.24",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -65,7 +65,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.22"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.24"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",