@kici-dev/sdk 0.1.16 → 0.1.18

package/dist/needs-context.js

@@ -0,0 +1,44 @@
+import "./chunk-BTugEXQM.js";
+import { createSnapshotOutputProxy } from "./outputs.js";
+//#region src/needs-context.ts
+function needKey(need) {
+	if (typeof need === "string") return {
+		kind: "job",
+		key: need
+	};
+	if ("group" in need) return {
+		kind: "group",
+		key: need.group
+	};
+	if ("name" in need) return {
+		kind: "job",
+		key: need.name
+	};
+	return {
+		kind: "job",
+		key: need.name
+	};
+}
+/**
+* Resolve declared needs against a frozen snapshot into the `ctx.needs` map.
+*
+* - A single static/named-job need resolves to `{ result: <proxy over jobs[name]> }`.
+* - A `dynamicGroup(...)` need resolves to an ordered array of `{ name, result }`,
+*   one entry per group member in the snapshot's deterministic eval order.
+*/
+function buildNeedsContext(snapshot, declaredNeeds) {
+	const out = {};
+	for (const need of declaredNeeds) {
+		const { kind, key } = needKey(need);
+		if (kind === "group") out[key] = (snapshot.groups[key] ?? []).map((name) => ({
+			name,
+			result: createSnapshotOutputProxy(name, snapshot.jobs[name])
+		}));
+		else out[key] = { result: createSnapshotOutputProxy(key, snapshot.jobs[key]) };
+	}
+	return out;
+}
+//#endregion
+export { buildNeedsContext };
+
+//# sourceMappingURL=needs-context.js.map

package/dist/outputs.d.ts

@@ -61,6 +61,18 @@ export declare function createStepOutputProxy<T>(stepName: string): OutputProxy<
  * @returns A Proxy that resolves property access at runtime
  */
 export declare function createJobOutputProxy(jobName: string): OutputProxy<any>;
+/**
+ * Output proxy bound to a specific outputs object (not the module-global map).
+ *
+ * Used to expose a frozen upstream-job snapshot as `ctx.needs.<job>.result` for
+ * result-aware dynamic generators. The snapshot is captured once at eval and
+ * replayed unchanged on re-eval, so the proxy reads a fixed `outputs` object
+ * rather than the live module-global job-outputs map.
+ *
+ * @param jobName - The upstream job whose outputs to proxy (used in error text)
+ * @param outputs - The frozen outputs object, or undefined if the job produced none
+ */
+export declare function createSnapshotOutputProxy(jobName: string, outputs: Record<string, unknown> | undefined): OutputProxy<any>;
 /**
  * Resolve step outputs by step reference (Step object or bare function).
  * Used by ctx.outputsOf() implementation.

package/dist/outputs.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 //#region src/outputs.ts
 /**
 * Well-known string property names that should delegate to Reflect rather than throwing.
@@ -140,6 +140,41 @@ function createJobOutputProxy(jobName) {
 	});
 }
 /**
+* Output proxy bound to a specific outputs object (not the module-global map).
+*
+* Used to expose a frozen upstream-job snapshot as `ctx.needs.<job>.result` for
+* result-aware dynamic generators. The snapshot is captured once at eval and
+* replayed unchanged on re-eval, so the proxy reads a fixed `outputs` object
+* rather than the live module-global job-outputs map.
+*
+* @param jobName - The upstream job whose outputs to proxy (used in error text)
+* @param outputs - The frozen outputs object, or undefined if the job produced none
+*/
+function createSnapshotOutputProxy(jobName, outputs) {
+	return new Proxy({}, {
+		get(_target, prop, receiver) {
+			if (typeof prop === "symbol") return Reflect.get(_target, prop, receiver);
+			if (WELL_KNOWN_STRING_PROPS.has(prop)) return Reflect.get(_target, prop, receiver);
+			if (!outputs) throw new Error(`Upstream job '${jobName}' has no frozen outputs in the generator snapshot`);
+			return outputs[prop];
+		},
+		ownKeys() {
+			return outputs ? Reflect.ownKeys(outputs) : [];
+		},
+		has(_target, prop) {
+			return outputs ? prop in outputs : false;
+		},
+		getOwnPropertyDescriptor(_target, prop) {
+			if (!outputs) return void 0;
+			if (prop in outputs) return {
+				configurable: true,
+				enumerable: true,
+				value: outputs[prop]
+			};
+		}
+	});
+}
+/**
 * Resolve step outputs by step reference (Step object or bare function).
 * Used by ctx.outputsOf() implementation.
 *
@@ -175,6 +210,6 @@ function resolveJobOutputs(ref, outputsMap) {
 	return outputs;
 }
 //#endregion
-export { createJobOutputProxy, createStepOutputProxy, getJobOutputsMap, getStepOutputsMap, getStepRefMap, resolveJobOutputs, resolveStepOutputs, setJobOutputsMap, setStepOutputsMap, setStepRefMap };
+export { createJobOutputProxy, createSnapshotOutputProxy, createStepOutputProxy, getJobOutputsMap, getStepOutputsMap, getStepRefMap, resolveJobOutputs, resolveStepOutputs, setJobOutputsMap, setStepOutputsMap, setStepRefMap };
 
 //# sourceMappingURL=outputs.js.map

package/dist/provenance-types.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Types for `ctx.attestProvenance()` — the imperative step helper that builds,
+ * signs, and persists a KiCI build-provenance attestation for a produced
+ * artifact.
+ */
+/**
+ * The artifact being attested. Either supply a precomputed digest, or a path
+ * (relative to the step working directory) the agent will digest with SHA-256.
+ */
+export type ProvenanceSubjectInput = {
+    name: string;
+    digest: {
+        sha256?: string;
+        sha512?: string;
+    };
+} | {
+    name: string;
+    path: string;
+};
+export interface AttestProvenanceOptions {
+    subject: ProvenanceSubjectInput;
+    /** OIDC audience for the identity token (defaults to 'kici-provenance'). */
+    audience?: string;
+}
+export interface AttestProvenanceResult {
+    /** Object-storage key the signed bundle was written to. */
+    storageKey: string;
+    /** Primary subject digest (lowercase hex). */
+    subjectDigest: string;
+    /** Media type of the persisted bundle. */
+    bundleMediaType: string;
+}
+/** Discriminate a path subject from a precomputed-digest subject. */
+export declare function provenanceSubjectIsPath(s: ProvenanceSubjectInput): s is {
+    name: string;
+    path: string;
+};
+//# sourceMappingURL=provenance-types.d.ts.map

package/dist/provenance-types.js

@@ -0,0 +1,10 @@
+import "./chunk-BTugEXQM.js";
+//#region src/provenance-types.ts
+/** Discriminate a path subject from a precomputed-digest subject. */
+function provenanceSubjectIsPath(s) {
+	return "path" in s;
+}
+//#endregion
+export { provenanceSubjectIsPath };
+
+//# sourceMappingURL=provenance-types.js.map

package/dist/rules/evaluator.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { toErrorMessage } from "@kici-dev/core";
 //#region src/rules/evaluator.ts
 /**

package/dist/rules/index.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { rule, skip } from "./rule.js";
 import { evaluateRules } from "./evaluator.js";
 import { isEventType } from "../events/event-payloads.js";

package/dist/rules/rule.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/rules/rule.ts
 /**
 * Implementation of rule() factory.

package/dist/rules/types.js

@@ -1,2 +1,2 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 export {};

package/dist/secrets.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { SecretNotFoundError } from "./errors.js";
 //#region src/secrets.ts
 /**

package/dist/step.js

@@ -1,4 +1,4 @@
-import "./chunk-gOLHoazu.js";
+import "./chunk-BTugEXQM.js";
 import { createStepOutputProxy } from "./outputs.js";
 //#region src/step.ts
 /**

package/dist/triggers/comment.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/comment.ts
 /**

package/dist/triggers/create.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/create.ts
 /**

package/dist/triggers/delete.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/delete.ts
 /**

package/dist/triggers/dispatch.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/dispatch.ts
 /**

package/dist/triggers/fork.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/fork.ts
 /**

package/dist/triggers/generic-webhook.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/triggers/generic-webhook.ts
 /**
 * Create a generic webhook trigger configuration.

package/dist/triggers/index.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { DEFAULT_PR_EVENTS, toBranchPattern } from "./types.js";
 import { pr } from "./pr.js";
 import { push } from "./push.js";

package/dist/triggers/job-complete.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/triggers/job-complete.ts
 /**
 * Create a job completion trigger configuration.

package/dist/triggers/kici-event.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/triggers/kici-event.ts
 /**
 * Create a KiCI custom event trigger configuration.

package/dist/triggers/lifecycle.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/triggers/lifecycle.ts
 /**
 * Create a lifecycle trigger configuration.

package/dist/triggers/pr.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { DEFAULT_PR_EVENTS, asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/pr.ts
 /**

package/dist/triggers/push.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/push.ts
 /**

package/dist/triggers/release.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/release.ts
 /**

package/dist/triggers/review-comment.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/review-comment.ts
 /**

package/dist/triggers/review.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/review.ts
 /**

package/dist/triggers/schedule.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/triggers/schedule.ts
 /**
 * Create a schedule trigger configuration.

package/dist/triggers/star.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/star.ts
 /**

package/dist/triggers/status.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/status.ts
 /**

package/dist/triggers/tag.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/tag.ts
 /**

package/dist/triggers/types.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/triggers/types.ts
 /**
 * Default PR events when pr() is called without explicit events.

package/dist/triggers/watch.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/watch.ts
 /**

package/dist/triggers/webhook.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/webhook.ts
 /**

package/dist/triggers/workflow-complete.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 //#region src/triggers/workflow-complete.ts
 /**
 * Create a workflow completion trigger configuration.

package/dist/triggers/workflow-run.js

@@ -1,4 +1,4 @@
-import "../chunk-gOLHoazu.js";
+import "../chunk-BTugEXQM.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/workflow-run.ts
 /**