@kici-dev/engine 0.1.25 → 0.1.27

package/dist/trigger/types.d.ts

@@ -20,6 +20,7 @@
  * Schema version 25: adds LockStep.retry (step retry policy data subset; retryIf is execution-only).
  * Schema version 26: adds LockJob.includeUninitialized (runsOnAll fans out to declared-but-un-agented hosts, bringing up a temporary init-runner per fresh box).
  * Schema version 27: adds LockScheduleTrigger.inputs (defaults-only schedule dispatch inputs).
+ * Schema version 30: renames job-level `environments` to `contexts`.
  */
 import { z } from 'zod';
 import type { ProviderType } from '../provider/types.js';
@@ -28,7 +29,7 @@ import type { InputsDescriptorMap } from '../inputs/descriptor.js';
 import { LabelMatcher } from '../labels-match.js';
 import { ExecutionJobStatus } from '../protocol/messages/execution-status.js';
 /** Schema version - increment on breaking changes */
-export declare const SCHEMA_VERSION: 29;
+export declare const SCHEMA_VERSION: 30;
 /**
  * Normalized approval config carried in the lock file. Produced by the compiler
  * from an SDK `approval` at any of the three levels; consumed by the
@@ -568,11 +569,11 @@ export interface LockJob {
     readonly rules?: readonly LockRule[];
     readonly description?: string;
     /**
-     * Deployment environments in merge order. Each entry is a static name or inline
+     * Bound contexts in merge order. Each entry is a static name or inline
      * expression (pure function); `dynamic` is set when it is a function resolved at
      * two-phase eval. Later entries override earlier ones on name collisions.
      */
-    readonly environments?: ReadonlyArray<{
+    readonly contexts?: ReadonlyArray<{
         value: string | LockInlineValue;
         dynamic: boolean;
     }>;
@@ -622,13 +623,13 @@ export type LockJobOrFactory = LockJob | LockDynamicJobFn;
 /**
  * Private npm registry declaration in the lock file.
  * Carries the URL/scope/secret-reference but NOT the resolved token —
- * the orchestrator resolves the token at dispatch time via the per-environment
+ * the orchestrator resolves the token at dispatch time via the per-context
  * secretResolver.resolveForJob path.
  */
 export interface LockRegistry {
     readonly url: string;
     readonly scope?: string;
-    /** Qualified secret reference: `<environment>:<secret-name>`. */
+    /** Qualified secret reference: `<context>:<secret-name>`. */
     readonly tokenSecret: string;
     readonly alwaysAuth?: boolean;
 }
@@ -660,7 +661,7 @@ export interface LockWorkflow {
      */
     readonly registries?: readonly LockRegistry[];
     /**
-     * Extra qualified secret refs (`<environment>:<secret-name>`) to project as
+     * Extra qualified secret refs (`<context>:<secret-name>`) to project as
      * env vars on the install subprocess for use with a customer-committed `.kici/.npmrc`.
      */
     readonly installEnv?: readonly string[];

package/dist/trigger/types.js

@@ -24,9 +24,10 @@ import { z } from "zod";
 * Schema version 25: adds LockStep.retry (step retry policy data subset; retryIf is execution-only).
 * Schema version 26: adds LockJob.includeUninitialized (runsOnAll fans out to declared-but-un-agented hosts, bringing up a temporary init-runner per fresh box).
 * Schema version 27: adds LockScheduleTrigger.inputs (defaults-only schedule dispatch inputs).
+* Schema version 30: renames job-level `environments` to `contexts`.
 */
 /** Schema version - increment on breaking changes */
-const SCHEMA_VERSION = 29;
+const SCHEMA_VERSION = 30;
 /** Type guard distinguishing a parallel group from an ordinary lock step. */
 function isLockParallelStep(entry) {
 	return entry.kind === "parallel";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/engine",
-  "version": "0.1.25",
+  "version": "0.1.27",
   "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
   "keywords": [
     "ci",
@@ -53,13 +53,13 @@
       "import": "./dist/labels/compile.js",
       "types": "./dist/labels/compile.d.ts"
     },
-    "./environment/host-match": {
-      "import": "./dist/environment/host-match.js",
-      "types": "./dist/environment/host-match.d.ts"
+    "./context/host-match": {
+      "import": "./dist/context/host-match.js",
+      "types": "./dist/context/host-match.d.ts"
     },
-    "./environment/scope-template": {
-      "import": "./dist/environment/scope-template.js",
-      "types": "./dist/environment/scope-template.d.ts"
+    "./context/scope-template": {
+      "import": "./dist/context/scope-template.js",
+      "types": "./dist/context/scope-template.d.ts"
     },
     "./protocol/dashboard-global-workflows": {
       "import": "./dist/protocol/dashboard-global-workflows.js",
@@ -69,6 +69,14 @@
       "import": "./dist/protocol/dashboard-write-operations.js",
       "types": "./dist/protocol/dashboard-write-operations.d.ts"
     },
+    "./protocol/dashboard-api-errors": {
+      "import": "./dist/protocol/dashboard-api-errors.js",
+      "types": "./dist/protocol/dashboard-api-errors.d.ts"
+    },
+    "./protocol/session-policy": {
+      "import": "./dist/protocol/session-policy.js",
+      "types": "./dist/protocol/session-policy.d.ts"
+    },
     "./protocol/analytics-events": {
       "import": "./dist/protocol/analytics-events.js",
       "types": "./dist/protocol/analytics-events.d.ts"

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/engine@0.1.25",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.25/1d119a82-cc7a-45cf-b310-0eab61d7151e",
+  "name": "@kici-dev/engine@0.1.27",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.27/39ac3307-cb59-412e-8755-43c06127909d",
   "creationInfo": {
-    "created": "2026-07-05T08:32:25Z",
+    "created": "2026-07-10T06:03:53Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -54,7 +54,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.25",
+      "versionInfo": "0.1.27",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -65,7 +65,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.25"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.27"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",

package/dist/environment/index.js

@@ -1,5 +0,0 @@
-import "../rolldown-runtime-ClRpJifh.js";
-import { TrustTierSchema } from "./types.js";
-import { matchScopePattern, resolveSecretsForEnvironment, stripScopePrefix } from "./scope-resolver.js";
-import { EnvGateRejectReason, mergeOrderedMaps } from "./multi-env.js";
-export { EnvGateRejectReason, TrustTierSchema, matchScopePattern, mergeOrderedMaps, resolveSecretsForEnvironment, stripScopePrefix };

package/dist/environment/multi-env.js

@@ -1,38 +0,0 @@
-import "../rolldown-runtime-ClRpJifh.js";
-import { z } from "zod";
-//#region src/environment/multi-env.ts
-/**
-* Multi-environment merge helpers shared across the orchestrator dispatch path.
-*
-* A job may bind several deployment environments in order; their resolved
-* secrets/variables are folded last-wins (a later environment's key overrides an
-* earlier one) and their protection gates combine all-must-pass. This module is
-* browser-safe (pure functions + a Zod enum, no Node built-ins) so it can be
-* exported from the engine environment barrel.
-*/
-/**
-* Reason a single bound environment rejects a run under all-must-pass
-* aggregation. Used to name which environment and which rule blocked dispatch.
-*/
-const EnvGateRejectReason = z.enum([
-	"branch_restricted",
-	"trigger_filtered",
-	"repo_unmatched",
-	"trust_too_low",
-	"env_disabled",
-	"env_not_found"
-]);
-/**
-* Fold an ordered list of per-environment resolved maps into one. Later entries
-* override earlier keys (last-wins), matching the documented merge order for
-* `environments: [...]`.
-*/
-function mergeOrderedMaps(maps) {
-	const out = {};
-	for (const m of maps) Object.assign(out, m);
-	return out;
-}
-//#endregion
-export { EnvGateRejectReason, mergeOrderedMaps };
-
-//# sourceMappingURL=multi-env.js.map