@kici-dev/engine 0.1.13 → 0.1.15

package/dist/protocol/dashboard-write-operations.d.ts

@@ -29,6 +29,7 @@ export declare const DashboardWriteOperation: z.ZodEnum<{
     "variables.delete": "variables.delete";
     "environments.create": "environments.create";
     "environments.update": "environments.update";
+    "environments.test_access.set": "environments.test_access.set";
     "environments.delete": "environments.delete";
     "environments.bindings.set": "environments.bindings.set";
     "environments.source_overrides.set": "environments.source_overrides.set";
@@ -114,6 +115,7 @@ export declare const dashboardWritePolicyMap: z.ZodRecord<z.ZodEnum<{
     "variables.delete": "variables.delete";
     "environments.create": "environments.create";
     "environments.update": "environments.update";
+    "environments.test_access.set": "environments.test_access.set";
     "environments.delete": "environments.delete";
     "environments.bindings.set": "environments.bindings.set";
     "environments.source_overrides.set": "environments.source_overrides.set";
@@ -139,6 +141,7 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
     "variables.delete": "variables.delete";
     "environments.create": "environments.create";
     "environments.update": "environments.update";
+    "environments.test_access.set": "environments.test_access.set";
     "environments.delete": "environments.delete";
     "environments.bindings.set": "environments.bindings.set";
     "environments.source_overrides.set": "environments.source_overrides.set";
@@ -161,7 +164,7 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
 export declare function isDashboardWriteOperationEnabled(policy: DashboardWritePolicyMap | null | undefined, op: DashboardWriteOperation): boolean;
 /**
  * Expand a (possibly sparse) policy map into the full effective state
- * for all 23 operations. Operations the policy doesn't mention come
+ * for all 24 operations. Operations the policy doesn't mention come
  * back as `true` (permissive). Used by the orch HTTP admin response,
  * the WS `orch.capabilities` broadcast, and the dashboard's policy
  * page so consumers see the full picture, not the sparse storage shape.

package/dist/protocol/dashboard-write-operations.js

@@ -31,6 +31,7 @@ const DashboardWriteOperation = z.enum([
 	"variables.delete",
 	"environments.create",
 	"environments.update",
+	"environments.test_access.set",
 	"environments.delete",
 	"environments.bindings.set",
 	"environments.source_overrides.set",
@@ -57,6 +58,7 @@ const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
 	"variables.delete",
 	"environments.create",
 	"environments.update",
+	"environments.test_access.set",
 	"environments.delete",
 	"environments.bindings.set",
 	"environments.source_overrides.set",
@@ -160,6 +162,14 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
 		sensitivity: "authority",
 		cliEquivalent: "kici-admin environment set-policy"
 	},
+	{
+		name: "environments.test_access.set",
+		wireMessageType: "dashboard.environments.test_access.set",
+		category: "Environments",
+		label: "Set environment test access",
+		sensitivity: "authority",
+		cliEquivalent: "kici-admin environment set-policy --allow-local-execution"
+	},
 	{
 		name: "environments.delete",
 		wireMessageType: "dashboard.environments.delete",
@@ -308,7 +318,7 @@ function isDashboardWriteOperationEnabled(policy, op) {
 }
 /**
 * Expand a (possibly sparse) policy map into the full effective state
-* for all 23 operations. Operations the policy doesn't mention come
+* for all 24 operations. Operations the policy doesn't mention come
 * back as `true` (permissive). Used by the orch HTTP admin response,
 * the WS `orch.capabilities` broadcast, and the dashboard's policy
 * page so consumers see the full picture, not the sparse storage shape.

package/dist/protocol/messages/access-log.d.ts

@@ -57,6 +57,9 @@ export declare const AccessLogAction: z.ZodEnum<{
     "registration.delete": "registration.delete";
     "global_workflows.update": "global_workflows.update";
     "run.detail.read": "run.detail.read";
+    "runs.list.read": "runs.list.read";
+    "runs.filters.read": "runs.filters.read";
+    "sources.list.read": "sources.list.read";
     "run.payload.read": "run.payload.read";
     "run.orch_logs.read": "run.orch_logs.read";
     "step.logs.read": "step.logs.read";
@@ -138,6 +141,9 @@ export declare const accessLogItemSchema: z.ZodObject<{
         "registration.delete": "registration.delete";
         "global_workflows.update": "global_workflows.update";
         "run.detail.read": "run.detail.read";
+        "runs.list.read": "runs.list.read";
+        "runs.filters.read": "runs.filters.read";
+        "sources.list.read": "sources.list.read";
         "run.payload.read": "run.payload.read";
         "run.orch_logs.read": "run.orch_logs.read";
         "step.logs.read": "step.logs.read";
@@ -241,6 +247,9 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         "registration.delete": "registration.delete";
         "global_workflows.update": "global_workflows.update";
         "run.detail.read": "run.detail.read";
+        "runs.list.read": "runs.list.read";
+        "runs.filters.read": "runs.filters.read";
+        "sources.list.read": "sources.list.read";
         "run.payload.read": "run.payload.read";
         "run.orch_logs.read": "run.orch_logs.read";
         "step.logs.read": "step.logs.read";
@@ -345,6 +354,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"platform_operator">;
         sub: z.ZodString;
         reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
@@ -365,6 +375,9 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         "registration.delete": "registration.delete";
         "global_workflows.update": "global_workflows.update";
         "run.detail.read": "run.detail.read";
+        "runs.list.read": "runs.list.read";
+        "runs.filters.read": "runs.filters.read";
+        "sources.list.read": "sources.list.read";
         "run.payload.read": "run.payload.read";
         "run.orch_logs.read": "run.orch_logs.read";
         "step.logs.read": "step.logs.read";
@@ -478,6 +491,9 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             "registration.delete": "registration.delete";
             "global_workflows.update": "global_workflows.update";
             "run.detail.read": "run.detail.read";
+            "runs.list.read": "runs.list.read";
+            "runs.filters.read": "runs.filters.read";
+            "sources.list.read": "sources.list.read";
             "run.payload.read": "run.payload.read";
             "run.orch_logs.read": "run.orch_logs.read";
             "step.logs.read": "step.logs.read";

package/dist/protocol/messages/access-log.js

@@ -52,6 +52,9 @@ const AccessLogTargetType = z.enum([
 */
 const AccessLogAction = z.enum([
 	"run.detail.read",
+	"runs.list.read",
+	"runs.filters.read",
+	"sources.list.read",
 	"run.payload.read",
 	"run.orch_logs.read",
 	"step.logs.read",

package/dist/protocol/messages/actor.d.ts

@@ -37,6 +37,7 @@ export declare const platformOperatorActorSchema: z.ZodObject<{
     type: z.ZodLiteral<"platform_operator">;
     sub: z.ZodString;
     reason: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type PlatformOperatorActor = z.infer<typeof platformOperatorActorSchema>;
 export declare const systemActorSchema: z.ZodObject<{
@@ -58,6 +59,7 @@ export declare const actorPrincipalSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
     type: z.ZodLiteral<"platform_operator">;
     sub: z.ZodString;
     reason: z.ZodString;
+    sessionId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"system">;
     component: z.ZodString;

package/dist/protocol/messages/actor.js

@@ -44,7 +44,14 @@ const platformOperatorActorSchema = z.object({
 	* Length bounds reject empty / obviously-bad-faith values; not a ticket
 	* pattern (we support multiple incident systems).
 	*/
-	reason: z.string().min(10).max(200)
+	reason: z.string().min(4).max(200),
+	/**
+	* Support-session id, when the operator is reading through a dashboard
+	* support session (not the kici-platform-admin CLI break-glass path).
+	* Recorded in `access_log.actor_meta.sessionId` so the customer's activity
+	* page can tie each operator read back to the session that authorised it.
+	*/
+	sessionId: z.string().min(1).optional()
 });
 const systemActorSchema = z.object({
 	type: z.literal(ActorType.enum.system),
@@ -124,7 +131,10 @@ function flattenActor(actor) {
 		case "platform_operator": return {
 			actorType: "platform_operator",
 			actorId: actor.sub,
-			actorMeta: { reason: actor.reason }
+			actorMeta: {
+				reason: actor.reason,
+				...actor.sessionId ? { sessionId: actor.sessionId } : {}
+			}
 		};
 		case "system": return {
 			actorType: "system",

package/dist/protocol/messages/auth.d.ts

@@ -19,6 +19,7 @@ export declare const authRequestSchema: z.ZodObject<{
             "variables.delete": "variables.delete";
             "environments.create": "environments.create";
             "environments.update": "environments.update";
+            "environments.test_access.set": "environments.test_access.set";
             "environments.delete": "environments.delete";
             "environments.bindings.set": "environments.bindings.set";
             "environments.source_overrides.set": "environments.source_overrides.set";

package/dist/protocol/messages/capabilities.d.ts

@@ -38,6 +38,7 @@ export declare const orchCapabilitiesSchema: z.ZodObject<{
         "variables.delete": "variables.delete";
         "environments.create": "environments.create";
         "environments.update": "environments.update";
+        "environments.test_access.set": "environments.test_access.set";
         "environments.delete": "environments.delete";
         "environments.bindings.set": "environments.bindings.set";
         "environments.source_overrides.set": "environments.source_overrides.set";

package/dist/protocol/messages/dashboard-global-workflows.d.ts

@@ -67,6 +67,7 @@ export declare const globalWorkflowsGetRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"platform_operator">;
         sub: z.ZodString;
         reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
@@ -95,6 +96,7 @@ export declare const globalWorkflowsUpdateRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"platform_operator">;
         sub: z.ZodString;
         reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;