@kici-dev/sdk 0.1.23 → 0.1.25

package/dist/api-types.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { OIDC_TOKEN_REQUEST_METHOD } from "@kici-dev/engine/protocol/messages/oidc-token-relay";
 //#region src/api-types.ts
 /**

package/dist/approval.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/approval.ts
 /**
 * Normalize any `ApprovalConfig` form into

package/dist/cache-types.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { z } from "zod";
 //#region src/cache-types.ts
 /** Zod schema validating a CacheSpec at compile/serialize time. */

package/dist/context.d.ts

@@ -114,6 +114,13 @@ export interface StepContext<TInputs = Record<string, unknown>> {
     setEnv(key: string, value: string): void;
     /** Prepend a directory to PATH, visible to this step and all subsequent steps. */
     addPath(dir: string): void;
+    /**
+     * Aborted when this step should stop early — the job is being cancelled, the
+     * job-level timeout fired, or (in a `parallel()` group) a sibling failed under
+     * fail-fast. Pass it to `fetch`, `ctx.$`, timers, or any cancellable async work
+     * to cooperatively unwind. Unaborted for a normally-running step.
+     */
+    signal: AbortSignal;
     /** Typed inputs from dependencies */
     inputs: TInputs;
     /**
@@ -153,7 +160,7 @@ export interface StepContext<TInputs = Record<string, unknown>> {
     /**
      * Raw webhook payload from the git provider.
      * Contains the full, unmodified payload as received from the webhook.
-     * In local test mode (kici test), contains the simulated payload.
+     * In local preview/run mode (`kici preview` / `kici run local`), contains the simulated payload.
      * Use this for provider-specific data not covered by normalized fields.
      */
     rawPayload?: Record<string, unknown>;
@@ -164,7 +171,7 @@ export interface StepContext<TInputs = Record<string, unknown>> {
      */
     provider?: string;
     /**
-     * Whether this execution was triggered by `kici test` (remote test run).
+     * Whether this execution was triggered by `kici run remote` (developer-initiated remote run).
      * Use to conditionally skip destructive operations in test mode.
      * Defaults to false for backward compatibility.
      */

package/dist/context.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/context.ts
 /** Runtime discriminator: true when `ctx.jobOutputs(ref)` returned a matrix envelope. */
 function isMatrixJobOutputs(value) {

package/dist/dynamic-group.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/dynamic-group.ts
 const DYNAMIC_GROUP_TAG = Symbol.for("kici:dynamicGroup");
 /**

package/dist/errors.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/errors.ts
 /**
 * Thrown when accessing a secret key that does not exist in the flat secrets proxy.

package/dist/events/define-event.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/events/define-event.ts
 /**
 * Create a typed event definition with a Zod schema.

package/dist/events/event-payloads.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/events/event-payloads.ts
 /**
 * Narrow an EventPayload to a specific event type.

package/dist/events/event-payloads.test-d.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { describe, expectTypeOf, it } from "vitest";
 //#region src/events/event-payloads.test-d.ts
 describe("EventPayload narrowing", () => {

package/dist/events/index.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { isEventType } from "./event-payloads.js";
 import { defineEvent } from "./define-event.js";
 export { defineEvent, isEventType };

package/dist/events/types.js

@@ -1,2 +1,2 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 export {};

package/dist/fanout-context.js

@@ -1,2 +1,2 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 export {};

package/dist/fixture.d.ts

@@ -2,7 +2,7 @@
  * Fixture factory for defining test event replicas.
  *
  * Fixtures declare which trigger event to simulate when running
- * `kici test <name>`. They are event replicas (not assertions) --
+ * `kici run remote <name>`. They are event replicas (not assertions) --
  * pass/fail is determined by the pipeline execution.
  */
 import type { TriggerConfig } from './triggers/types.js';
@@ -25,7 +25,7 @@ export interface FixtureOptions {
 }
 /** Resolved fixture definition */
 export interface Fixture {
-    /** Unique fixture ID used in `kici test <name>` */
+    /** Unique fixture ID used in `kici run remote <name>` */
     readonly id: string;
     /** Fixture options (plain object or async factory function) */
     readonly options: FixtureOptions | (() => FixtureOptions | Promise<FixtureOptions>);
@@ -33,7 +33,7 @@ export interface Fixture {
 /**
  * Create a test fixture definition.
  *
- * @param id - Unique fixture ID (no whitespace allowed, used in `kici test <name>`)
+ * @param id - Unique fixture ID (no whitespace allowed, used in `kici run remote <name>`)
  * @param options - Fixture configuration or async factory function
  * @returns Frozen fixture definition
  *

package/dist/fixture.js

@@ -1,9 +1,9 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/fixture.ts
 /**
 * Create a test fixture definition.
 *
-* @param id - Unique fixture ID (no whitespace allowed, used in `kici test <name>`)
+* @param id - Unique fixture ID (no whitespace allowed, used in `kici run remote <name>`)
 * @param options - Fixture configuration or async factory function
 * @returns Frozen fixture definition
 *

package/dist/hooks/index.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/hooks/index.ts
 /**
 * Normalize HookInput to extract run function and optional timeout.

package/dist/hooks/types.js

@@ -1,2 +1,2 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 export {};

package/dist/host-restart.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { step } from "./step.js";
 import { waitForStep } from "./wait-for.js";
 //#region src/host-restart.ts

package/dist/idempotent.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { step } from "./step.js";
 import { runIdempotentStep } from "@kici-dev/core/idempotency";
 //#region src/idempotent.ts

package/dist/index.d.ts

@@ -1,6 +1,8 @@
 export { step } from './step.js';
 export { job } from './job.js';
 export { workflow } from './workflow.js';
+export { parallel, isParallelGroup, flattenStepInputs } from './parallel.js';
+export type { ParallelGroup, ParallelOptions } from './parallel.js';
 export { normalizeApproval } from './approval.js';
 export type { ApprovalConfig, ApprovalWhen, ApproverClause, NormalizedApproval, } from './approval.js';
 export { pr, push, tag, comment, review, reviewComment, release, dispatch, create, delete as delete, status, workflowRun, fork, star, watch, webhook, kiciEvent, workflowComplete, jobComplete, genericWebhook, schedule, lifecycle, defineDispatchInputs, } from './triggers/index.js';

package/dist/index.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { buildKiciApi } from "./api-types.js";
 import { normalizeApproval } from "./approval.js";
 import { CacheSpecSchema, normalizeCacheSpecs } from "./cache-types.js";
@@ -13,6 +13,7 @@ import { restartHost, waitForHostAlive } from "./host-restart.js";
 import { checkStep, idempotent, idempotentStep } from "./idempotent.js";
 import { job } from "./job.js";
 import { workflow } from "./workflow.js";
+import { flattenStepInputs, isParallelGroup, parallel } from "./parallel.js";
 import { pr } from "./triggers/pr.js";
 import { push } from "./triggers/push.js";
 import { tag } from "./triggers/tag.js";
@@ -54,4 +55,4 @@ import "./matrix/index.js";
 import { defineEvent } from "./events/define-event.js";
 import "./events/index.js";
 import { z } from "zod";
-export { CacheSpecSchema, DYNAMIC_GROUP_TAG, DYNAMIC_JOB_GROUP_TAG, DYNAMIC_JOB_NEEDS_TAG, SecretNotFoundError, WaitForTimeoutError, afterStep, applyIncludeExclude, beforeStep, buildKiciApi, buildNeedsContext, checkStep, cleanup, comment, create, createJobOutputProxy, createSnapshotOutputProxy, createStepOutputProxy, createStepSecrets, defineDispatchInputs, defineEvent, del as delete, dispatch, dynamicGroup, dynamicJob, evaluateRules, expandMatrix, fixture, fork, genericWebhook, getDynamicJobGroup, getDynamicJobNeeds, getJobOutputsMap, getStepOutputsMap, getStepRefMap, idempotent, idempotentStep, isDynamicFunction, isDynamicGroupRef, isDynamicJobFn, isEventType, isHostJobOutputs, isMatrixJobOutputs, isStaticArray, isStaticObject, job, jobComplete, kiciEvent, lifecycle, normalizeApproval, normalizeCacheSpecs, onCancel, onFailure, onSuccess, onlyOnFanoutIndex, onlyOnFirstHost, onlyOnLastHost, pr, provenanceSubjectIsPath, push, release, resolveJobOutputs, resolveStepOutputs, restartHost, review, reviewComment, rule, schedule, setJobOutputsMap, setStepOutputsMap, setStepRefMap, skip, star, status, step, tag, validateDag, waitFor, waitForHostAlive, waitForStep, watch, webhook, workflow, workflowComplete, workflowRun, z };
+export { CacheSpecSchema, DYNAMIC_GROUP_TAG, DYNAMIC_JOB_GROUP_TAG, DYNAMIC_JOB_NEEDS_TAG, SecretNotFoundError, WaitForTimeoutError, afterStep, applyIncludeExclude, beforeStep, buildKiciApi, buildNeedsContext, checkStep, cleanup, comment, create, createJobOutputProxy, createSnapshotOutputProxy, createStepOutputProxy, createStepSecrets, defineDispatchInputs, defineEvent, del as delete, dispatch, dynamicGroup, dynamicJob, evaluateRules, expandMatrix, fixture, flattenStepInputs, fork, genericWebhook, getDynamicJobGroup, getDynamicJobNeeds, getJobOutputsMap, getStepOutputsMap, getStepRefMap, idempotent, idempotentStep, isDynamicFunction, isDynamicGroupRef, isDynamicJobFn, isEventType, isHostJobOutputs, isMatrixJobOutputs, isParallelGroup, isStaticArray, isStaticObject, job, jobComplete, kiciEvent, lifecycle, normalizeApproval, normalizeCacheSpecs, onCancel, onFailure, onSuccess, onlyOnFanoutIndex, onlyOnFirstHost, onlyOnLastHost, parallel, pr, provenanceSubjectIsPath, push, release, resolveJobOutputs, resolveStepOutputs, restartHost, review, reviewComment, rule, schedule, setJobOutputsMap, setStepOutputsMap, setStepRefMap, skip, star, status, step, tag, validateDag, waitFor, waitForHostAlive, waitForStep, watch, webhook, workflow, workflowComplete, workflowRun, z };

package/dist/job.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { createJobOutputProxy } from "./outputs.js";
 import { randomUUID } from "node:crypto";
 //#region src/job.ts
@@ -32,6 +32,9 @@ function job(nameOrOptions, maybeOptions) {
 		steps = [options.run];
 	}
 	validateInit(options.init, name);
+	const firstEnv = options.environments?.[0];
+	const concurrencyGroup = options.concurrencyGroup ?? (typeof firstEnv === "string" ? firstEnv : void 0);
+	if (options.environment !== void 0 && options.environments !== void 0) throw new Error(`job('${name}'): environment and environments are mutually exclusive — use one`);
 	if (options.runsOn !== void 0 && options.runsOnAll !== void 0) throw new Error(`job('${name}'): runsOn and runsOnAll are mutually exclusive`);
 	if (options.runsOn === void 0 && options.runsOnAll === void 0) throw new Error(`job('${name}'): one of runsOn or runsOnAll is required`);
 	if (options.onUnreachable !== void 0 && options.runsOnAll === void 0) console.warn(`[kici] job('${name}'): onUnreachable is ignored without runsOnAll`);
@@ -55,8 +58,9 @@ function job(nameOrOptions, maybeOptions) {
 		checkout: options.checkout,
 		container: options.container,
 		environment: options.environment,
+		environments: options.environments,
 		env: options.env,
-		concurrencyGroup: options.concurrencyGroup,
+		concurrencyGroup,
 		onCancel: options.onCancel,
 		cleanup: options.cleanup,
 		onSuccess: options.onSuccess,

package/dist/matrix/expand.js

@@ -1,3 +1,3 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { applyIncludeExclude, expandMatrix, expandMultiDimension, expandSingleDimension } from "@kici-dev/engine";
 export { applyIncludeExclude, expandMatrix, expandMultiDimension, expandSingleDimension };

package/dist/matrix/index.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { isDynamicFunction, isStaticArray, isStaticObject } from "./types.js";
 import { applyIncludeExclude, expandMatrix } from "./expand.js";
 export { applyIncludeExclude, expandMatrix, isDynamicFunction, isStaticArray, isStaticObject };

package/dist/matrix/types.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/matrix/types.ts
 /** Type guard for static array matrices */
 function isStaticArray(m) {

package/dist/needs-context.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { createSnapshotOutputProxy } from "./outputs.js";
 //#region src/needs-context.ts
 function needKey(need) {

package/dist/outputs.js

@@ -1,10 +1,10 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/outputs.ts
 /**
 * Well-known string property names that should delegate to Reflect rather than throwing.
 * These are accessed by built-in operations like JSON.stringify, console.log, iteration, etc.
 */
-const WELL_KNOWN_STRING_PROPS = new Set([
+const WELL_KNOWN_STRING_PROPS = /* @__PURE__ */ new Set([
 	"constructor",
 	"toString",
 	"valueOf",

package/dist/parallel.d.ts

@@ -0,0 +1,40 @@
+import type { Step, BareStepFn, StepInput } from './types.js';
+/** A flat step entry: a step or bare function, never a parallel group. */
+export type FlatStepInput = Step<any> | BareStepFn<any>;
+/**
+ * A concurrent group of steps with a join barrier. Each child runs concurrently
+ * and surfaces as its own observable dashboard step (own logs, status, timing).
+ * Execution continues past the group only once every child has settled.
+ */
+export interface ParallelGroup {
+    readonly _tag: 'ParallelGroup';
+    /** Optional group label shown on the dashboard band. */
+    readonly name?: string;
+    /** When the first child fails, cancel in-flight siblings (default `true`). */
+    readonly failFast: boolean;
+    /** Maximum children running at once; queued children show `pending`. */
+    readonly maxParallel?: number;
+    readonly steps: readonly StepInput[];
+}
+export interface ParallelOptions {
+    readonly failFast?: boolean;
+    readonly maxParallel?: number;
+    readonly name?: string;
+}
+/**
+ * Run `steps` concurrently with a join barrier; each child is its own
+ * observable step. A `parallel()` group's `failFast`/`maxParallel` nest inside
+ * the job-level fan-out scopes — they govern only this step group.
+ */
+export declare function parallel(steps: StepInput[], opts?: ParallelOptions): ParallelGroup;
+/** Type guard distinguishing a `ParallelGroup` from a step or bare function. */
+export declare function isParallelGroup(x: unknown): x is ParallelGroup;
+/**
+ * Flatten a job's `steps` into a flat list where each parallel group's children
+ * are inlined in array order (the group wrapper is dropped). Used by single-
+ * process consumers (the local executor and dry-run preview) that surface each
+ * child as its own step but do not run a concurrent scheduler; the concurrent
+ * agent path expands groups into observable concurrent tasks instead.
+ */
+export declare function flattenStepInputs(steps: readonly StepInput[]): FlatStepInput[];
+//# sourceMappingURL=parallel.d.ts.map

package/dist/parallel.js

@@ -0,0 +1,37 @@
+import "./rolldown-runtime-ClRpJifh.js";
+//#region src/parallel.ts
+/**
+* Run `steps` concurrently with a join barrier; each child is its own
+* observable step. A `parallel()` group's `failFast`/`maxParallel` nest inside
+* the job-level fan-out scopes — they govern only this step group.
+*/
+function parallel(steps, opts = {}) {
+	return {
+		_tag: "ParallelGroup",
+		name: opts.name,
+		failFast: opts.failFast ?? true,
+		maxParallel: opts.maxParallel,
+		steps
+	};
+}
+/** Type guard distinguishing a `ParallelGroup` from a step or bare function. */
+function isParallelGroup(x) {
+	return typeof x === "object" && x !== null && x._tag === "ParallelGroup";
+}
+/**
+* Flatten a job's `steps` into a flat list where each parallel group's children
+* are inlined in array order (the group wrapper is dropped). Used by single-
+* process consumers (the local executor and dry-run preview) that surface each
+* child as its own step but do not run a concurrent scheduler; the concurrent
+* agent path expands groups into observable concurrent tasks instead.
+*/
+function flattenStepInputs(steps) {
+	const flat = [];
+	for (const entry of steps) if (isParallelGroup(entry)) flat.push(...entry.steps);
+	else flat.push(entry);
+	return flat;
+}
+//#endregion
+export { flattenStepInputs, isParallelGroup, parallel };
+
+//# sourceMappingURL=parallel.js.map

package/dist/provenance-types.d.ts

@@ -22,14 +22,28 @@ export interface AttestProvenanceOptions {
     /** OIDC audience for the identity token (defaults to 'kici-provenance'). */
     audience?: string;
 }
-export interface AttestProvenanceResult {
+export type AttestProvenanceResult = {
+    /** Absent/false: the identity token was minted live and the bundle uploaded. */
+    deferred?: false;
     /** Object-storage key the signed bundle was written to. */
     storageKey: string;
     /** Primary subject digest (lowercase hex). */
     subjectDigest: string;
     /** Media type of the persisted bundle. */
     bundleMediaType: string;
-}
+} | {
+    /**
+     * The Platform mint failed transiently, so only the identity token is
+     * deferred: the statement was frozen + signed at build time and is minted
+     * later (automatically on Platform recovery, or via
+     * `kici-admin attestations retry`). The job still completes successfully.
+     */
+    deferred: true;
+    /** Primary subject digest (lowercase hex). */
+    subjectDigest: string;
+    /** SHA-256 of the frozen statement the later token will bind to. */
+    statementHash: string;
+};
 /** Discriminate a path subject from a precomputed-digest subject. */
 export declare function provenanceSubjectIsPath(s: ProvenanceSubjectInput): s is {
     name: string;

package/dist/provenance-types.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/provenance-types.ts
 /** Discriminate a path subject from a precomputed-digest subject. */
 function provenanceSubjectIsPath(s) {

package/dist/{chunk-BTugEXQM.js → rolldown-runtime-ClRpJifh.js}

@@ -1,4 +1,3 @@
 import "node:module";
-import.meta.url;
 //#endregion
 export {};

package/dist/rules/evaluator.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { toErrorMessage } from "@kici-dev/core";
 //#region src/rules/evaluator.ts
 /**

package/dist/rules/index.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { onlyOnFanoutIndex, onlyOnFirstHost, onlyOnLastHost, rule, skip } from "./rule.js";
 import { evaluateRules } from "./evaluator.js";
 import { isEventType } from "../events/event-payloads.js";

package/dist/rules/rule.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/rules/rule.ts
 /**
 * Implementation of rule() factory.

package/dist/rules/types.js

@@ -1,2 +1,2 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 export {};

package/dist/secrets.d.ts

@@ -48,7 +48,7 @@ export interface MountedFile {
  *
  * The SDK owns the public surface (`mountFile` / `exposeFile`) but defers
  * disk and `process.env` operations to the agent so the SDK stays free of
- * any `node:fs` / `node:os` imports. Local-test mode (`kici test`) plugs
+ * any `node:fs` / `node:os` imports. Local preview/run mode (`kici preview` / `kici run local`) plugs
  * in the same adapter shape against `os.tmpdir()`.
  */
 export interface StepSecretsFileHost {

package/dist/secrets.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { SecretNotFoundError } from "./errors.js";
 //#region src/secrets.ts
 /**

package/dist/step.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { normalizeApproval } from "./approval.js";
 import { createStepOutputProxy } from "./outputs.js";
 //#region src/step.ts

package/dist/triggers/comment.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/comment.ts
 /**

package/dist/triggers/create.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/create.ts
 /**

package/dist/triggers/delete.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/delete.ts
 /**

package/dist/triggers/dispatch-inputs.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/dispatch-inputs.ts
 /**
 * Declare a typed workflow-dispatch inputs map once and get back a handle that

package/dist/triggers/dispatch.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/dispatch.ts
 /**

package/dist/triggers/fork.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/fork.ts
 /**

package/dist/triggers/generic-webhook.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/generic-webhook.ts
 /**
 * Create a generic webhook trigger configuration.

package/dist/triggers/index.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { DEFAULT_PR_EVENTS, toBranchPattern } from "./types.js";
 import { pr } from "./pr.js";
 import { push } from "./push.js";

package/dist/triggers/job-complete.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/job-complete.ts
 /**
 * Create a job completion trigger configuration.

package/dist/triggers/kici-event.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/kici-event.ts
 /**
 * Create a KiCI custom event trigger configuration.

package/dist/triggers/lifecycle.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/lifecycle.ts
 /**
 * Create a lifecycle trigger configuration.

package/dist/triggers/pr.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { DEFAULT_PR_EVENTS, asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/pr.ts
 /**

package/dist/triggers/push.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/push.ts
 /**

package/dist/triggers/release.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/release.ts
 /**

package/dist/triggers/review-comment.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/review-comment.ts
 /**

package/dist/triggers/review.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/review.ts
 /**

package/dist/triggers/schedule.d.ts

@@ -15,6 +15,9 @@ import type { ScheduleConfigInput, ScheduleTriggerConfig } from './types.js';
  *
  * // Run weekly on Monday at 9am in a specific timezone
  * schedule({ cron: '0 9 * * 1', timezone: 'America/New_York' })
+ *
+ * // Daily at midnight UTC, with a defaults-only input
+ * schedule({ cron: '0 0 * * *', inputs: { mode: z.enum(['full', 'quick']).default('full') } })
  */
 export declare function schedule(config: ScheduleConfigInput): ScheduleTriggerConfig;
 //# sourceMappingURL=schedule.d.ts.map

package/dist/triggers/schedule.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/schedule.ts
 /**
 * Create a schedule trigger configuration.
@@ -12,14 +12,21 @@ import "../chunk-BTugEXQM.js";
 *
 * // Run weekly on Monday at 9am in a specific timezone
 * schedule({ cron: '0 9 * * 1', timezone: 'America/New_York' })
+*
+* // Daily at midnight UTC, with a defaults-only input
+* schedule({ cron: '0 0 * * *', inputs: { mode: z.enum(['full', 'quick']).default('full') } })
 */
 function schedule(config) {
 	if (!config.cron || config.cron.trim() === "") throw new Error("schedule() requires a non-empty cron expression");
+	const rawInputs = config.inputs;
+	let inputsMap;
+	if (rawInputs) inputsMap = "__kiciDispatchInputs" in rawInputs ? rawInputs.map : rawInputs;
 	const result = {
 		_tag: "ScheduleTrigger",
 		cron: config.cron,
 		timezone: config.timezone ?? "UTC",
-		...config.description !== void 0 && { description: config.description }
+		...config.description !== void 0 && { description: config.description },
+		...inputsMap && { inputs: Object.freeze({ ...inputsMap }) }
 	};
 	return Object.freeze(result);
 }

package/dist/triggers/star.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/star.ts
 /**

package/dist/triggers/status.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/status.ts
 /**

package/dist/triggers/tag.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/tag.ts
 /**

package/dist/triggers/types.d.ts

@@ -459,6 +459,16 @@ export interface ScheduleConfigInput {
     readonly cron: string;
     readonly timezone?: string;
     readonly description?: string;
+    /**
+     * Typed schedule inputs (defaults-only — no operator overrides on a fire).
+     * Accepts a bare `{ name: ZodSchema }` map or a `defineDispatchInputs(...)`
+     * branded handle. Each input must declare a `.default()` or be `.optional()`
+     * (enforced at compile time).
+     */
+    readonly inputs?: DispatchInputsMap | {
+        readonly __kiciDispatchInputs: true;
+        readonly map: DispatchInputsMap;
+    };
 }
 /**
  * Configuration for a schedule trigger.
@@ -468,6 +478,8 @@ export interface ScheduleTriggerConfig {
     readonly cron: string;
     readonly timezone: string;
     readonly description?: string;
+    /** Declared, typed schedule inputs (frozen `{ name: ZodSchema }`). */
+    readonly inputs?: DispatchInputsMap;
 }
 /**
  * Lifecycle event types for cross-workflow orchestration.

package/dist/triggers/types.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/types.ts
 /**
 * Default PR events when pr() is called without explicit events.

package/dist/triggers/watch.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/watch.ts
 /**

package/dist/triggers/webhook.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/webhook.ts
 /**

package/dist/triggers/workflow-complete.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/triggers/workflow-complete.ts
 /**
 * Create a workflow completion trigger configuration.

package/dist/triggers/workflow-run.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { asArray, toBranchPattern } from "./types.js";
 //#region src/triggers/workflow-run.ts
 /**

package/dist/types.d.ts

@@ -93,9 +93,9 @@ export interface Step<TResult = void> {
 export type BareStepFn<TResult = void> = (ctx: StepContext) => Promise<TResult>;
 /**
  * Union type for items accepted in a job's steps array.
- * Accepts both Step objects and bare async functions.
+ * Accepts Step objects, bare async functions, and concurrent parallel groups.
  */
-export type StepInput = Step<any> | BareStepFn<any>;
+export type StepInput = Step<any> | BareStepFn<any> | import('./parallel.js').ParallelGroup;
 /** Options for step() factory - simple form (just async function) */
 export type StepRunFn = (ctx: StepContext) => Promise<void>;
 /**
@@ -473,9 +473,16 @@ export interface Job {
     readonly container?: string | ContainerConfig;
     /** Deployment environment for this job. String for static, or a function of the normalized event envelope for dynamic (resolved at orchestrator two-phase eval). */
     readonly environment?: string | ((event: EventPayload) => string | Promise<string>);
+    /**
+     * Deployment environments for this job, in merge order (later entries override
+     * earlier on name collisions). Mutually exclusive with `environment`. Each entry
+     * is a static name or a function of the event (dynamic, resolved per element at
+     * two-phase eval).
+     */
+    readonly environments?: readonly (string | ((event: EventPayload) => string | Promise<string>))[];
     /** Environment variables. Static object or a function of the normalized event envelope (resolved at orchestrator two-phase eval). */
     readonly env?: Record<string, string> | ((event: EventPayload) => Record<string, string> | Promise<Record<string, string>>);
-    /** Concurrency group name. Defaults to environment name if not set. String or a function of the normalized event envelope. */
+    /** Concurrency group name. Defaults to the first bound environment's name if not set. String or a function of the normalized event envelope. */
     readonly concurrencyGroup?: string | ((event: EventPayload) => string | Promise<string>);
     /** Runs on cancellation. */
     readonly onCancel?: HookInput;
@@ -614,9 +621,16 @@ export interface JobOptions {
     container?: string | ContainerConfig;
     /** Deployment environment for this job. String for static, or a function of the normalized event envelope for dynamic (resolved at orchestrator two-phase eval). */
     environment?: string | ((event: EventPayload) => string | Promise<string>);
+    /**
+     * Deployment environments for this job, in merge order (later entries override
+     * earlier on name collisions). Mutually exclusive with `environment`. Each entry
+     * is a static name or a function of the event (dynamic, resolved per element at
+     * two-phase eval).
+     */
+    environments?: (string | ((event: EventPayload) => string | Promise<string>))[];
     /** Environment variables. Static object or a function of the normalized event envelope (resolved at orchestrator two-phase eval). */
     env?: Record<string, string> | ((event: EventPayload) => Record<string, string> | Promise<Record<string, string>>);
-    /** Concurrency group name. Defaults to environment name if not set. String or a function of the normalized event envelope. */
+    /** Concurrency group name. Defaults to the first bound environment's name if not set. String or a function of the normalized event envelope. */
     concurrencyGroup?: string | ((event: EventPayload) => string | Promise<string>);
     /** Runs on cancellation. */
     onCancel?: HookInput;

package/dist/types.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/types.ts
 /**
 * Type guard to check if a JobOrFactory is a dynamic job generator.

package/dist/validation/dag.js

@@ -1,4 +1,4 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 //#region src/validation/dag.ts
 /**
 * Validate a DAG for common issues: self-references, missing dependencies, and cycles.

package/dist/validation/index.js

@@ -1,3 +1,3 @@
-import "../chunk-BTugEXQM.js";
+import "../rolldown-runtime-ClRpJifh.js";
 import { validateDag } from "./dag.js";
 export { validateDag };

package/dist/wait-for.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 import { step } from "./step.js";
 //#region src/wait-for.ts
 /**

package/dist/workflow.js

@@ -1,4 +1,4 @@
-import "./chunk-BTugEXQM.js";
+import "./rolldown-runtime-ClRpJifh.js";
 //#region src/workflow.ts
 /**
 * Normalize triggers to array.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/sdk",
-  "version": "0.1.23",
+  "version": "0.1.25",
   "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
   "keywords": [
     "ci",
@@ -49,8 +49,8 @@
     "micromatch": "^4.0.8",
     "zod": "^4.4.3",
     "zx": "^8.8.5",
-    "@kici-dev/core": "0.1.23",
-    "@kici-dev/engine": "0.1.23"
+    "@kici-dev/core": "0.1.25",
+    "@kici-dev/engine": "0.1.25"
   },
   "devDependencies": {
     "@types/micromatch": "^4.0.10"

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/sdk@0.1.23",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fsdk/0.1.23/91b9ac0e-988f-4da4-8a22-0a3413875c5f",
+  "name": "@kici-dev/sdk@0.1.25",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fsdk/0.1.25/28cc15a9-6a0e-47f1-956b-685f5211df15",
   "creationInfo": {
-    "created": "2026-06-25T11:12:47Z",
+    "created": "2026-07-05T08:32:31Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -146,9 +146,9 @@
       "homepage": "https://ericsmekens.github.io/jsep/tree/master/packages/regex#readme"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "SPDXID": "SPDXRef-Package--kici-dev-core-0.1.25",
       "name": "@kici-dev/core",
-      "versionInfo": "0.1.23",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -159,16 +159,16 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.23"
+          "referenceLocator": "pkg:npm/%40kici-dev/core@0.1.25"
         }
       ],
       "description": "Light shared utilities for the KiCI stack (logging, errors, formatting, crypto, zx init, the TypeScript ESM loader hook). No server-side dependencies.",
       "homepage": "https://kici.dev"
     },
     {
-      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "SPDXID": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.23",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -179,7 +179,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.23"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.25"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
@@ -188,7 +188,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/sdk",
-      "versionInfo": "0.1.23",
+      "versionInfo": "0.1.25",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -199,7 +199,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.23"
+          "referenceLocator": "pkg:npm/%40kici-dev/sdk@0.1.25"
         }
       ],
       "description": "TypeScript SDK for defining KiCI workflows. Import into `.kici/workflows/*.ts` to declare workflows, jobs, steps, triggers, rules, and matrix configurations.",
@@ -1584,68 +1584,68 @@
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-oxc-transform-0.135.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picocolors-1.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-daily-rotate-file-5.0.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-winston-3.19.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zx-8.8.5",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-jose-6.2.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-jsonpath-plus-10.4.0",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-picomatch-4.0.4",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-safe-regex-2.1.1",
       "relationshipType": "DEPENDS_ON"
     },
     {
-      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "spdxElementId": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relatedSpdxElement": "SPDXRef-Package-zod-4.4.3",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.23",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-core-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {
       "spdxElementId": "SPDXRef-RootPackage",
-      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.23",
+      "relatedSpdxElement": "SPDXRef-Package--kici-dev-engine-0.1.25",
       "relationshipType": "DEPENDS_ON"
     },
     {