@kici-dev/engine 0.1.13 → 0.1.15

package/dist/protocol/messages/orchestrator-agent.d.ts

@@ -1,4 +1,18 @@
 import { z } from 'zod';
+/**
+ * Cache write scope for a job's user-facing cache.
+ *
+ * - `shared` — trusted ref (default branch / write-permission contributor):
+ *   reads AND writes the org-shared default-branch scope.
+ * - `isolated` — untrusted ref (fork PR / unknown contributor): reads the
+ *   shared scope as a fallback but writes only into a per-run isolated scope,
+ *   so an untrusted ref can never poison the shared cache (GitHub Actions model).
+ */
+export declare const CacheRefScope: z.ZodEnum<{
+    shared: "shared";
+    isolated: "isolated";
+}>;
+export type CacheRefScope = z.infer<typeof CacheRefScope>;
 /**
  * Structured git-clone auth material. Carries everything the agent needs to
  * authenticate a single `git clone`:
@@ -83,6 +97,12 @@ export declare const jobDispatchSchema: z.ZodObject<{
         token: z.ZodString;
     }, z.core.$strip>>>;
     installEnvSecrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    orgId: z.ZodOptional<z.ZodString>;
+    repoId: z.ZodOptional<z.ZodString>;
+    cacheRefScope: z.ZodOptional<z.ZodEnum<{
+        shared: "shared";
+        isolated: "isolated";
+    }>>;
 }, z.core.$strip>;
 /** Cancel a running or queued job. */
 export declare const jobCancelSchema: z.ZodObject<{
@@ -161,6 +181,51 @@ export declare const jobStatusSchema: z.ZodObject<{
         encrypted: z.ZodString;
     }, z.core.$strip>>>;
 }, z.core.$strip>;
+/** Reasons an agent can refuse a job.dispatch. */
+export declare const JobRejectReason: z.ZodEnum<{
+    draining: "draining";
+    busy: "busy";
+}>;
+export type JobRejectReason = z.infer<typeof JobRejectReason>;
+/**
+ * Explicit dispatch rejection (agent -> orchestrator).
+ *
+ * Sent when the agent cannot accept a job.dispatch (already running a job,
+ * or draining). The orchestrator undoes its dispatch accounting and requeues
+ * the job for another agent. Protocol invariant: every job.dispatch is
+ * answered — accepted with `job.ack` (a `job.status` with state `running`
+ * also resolves the deadline), or refused with this message. An unanswered
+ * dispatch is treated as lost once the ack deadline expires (requeue +
+ * disconnect the agent) and is also covered by disconnect-time triage.
+ */
+export declare const jobRejectSchema: z.ZodObject<{
+    type: z.ZodLiteral<"job.reject">;
+    messageId: z.ZodString;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    reason: z.ZodEnum<{
+        draining: "draining";
+        busy: "busy";
+    }>;
+    timestamp: z.ZodNumber;
+}, z.core.$strip>;
+/**
+ * Positive dispatch acknowledgment (agent -> orchestrator).
+ *
+ * Sent immediately when the agent receives a job.dispatch and accepts it
+ * (after the drain/busy checks, before execution begins). The orchestrator
+ * arms a deadline when it sends a dispatch; `job.ack`, `job.reject`, or a
+ * `job.status` with state `running` resolves it. A dispatch with no answer
+ * inside the deadline is treated as lost: the orchestrator requeues the job
+ * and disconnects the unresponsive agent.
+ */
+export declare const jobAckSchema: z.ZodObject<{
+    type: z.ZodLiteral<"job.ack">;
+    messageId: z.ZodString;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    timestamp: z.ZodNumber;
+}, z.core.$strip>;
 /**
  * Streaming log chunk from step execution (agent -> orchestrator).
  *
@@ -247,6 +312,46 @@ export declare const configAckSchema: z.ZodObject<{
     messageId: z.ZodString;
     agentId: z.ZodString;
 }, z.core.$strip>;
+/** Agent -> Orchestrator: request a user-cache restore (presigned download). */
+export declare const cacheUserRestoreRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.restore.request">;
+    messageId: z.ZodString;
+    jobId: z.ZodString;
+    key: z.ZodString;
+    restoreKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+/** Orchestrator -> Agent: presigned download URL + matched key + tar hash, or a miss. */
+export declare const cacheUserRestoreResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.restore.response">;
+    requestId: z.ZodString;
+    hit: z.ZodBoolean;
+    matchedKey: z.ZodOptional<z.ZodString>;
+    downloadUrl: z.ZodOptional<z.ZodString>;
+    tarHash: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Agent -> Orchestrator: request a presigned PUT for a user-cache save (immutable; may decline if key exists). */
+export declare const cacheUserSaveRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.save.request">;
+    messageId: z.ZodString;
+    jobId: z.ZodString;
+    key: z.ZodString;
+}, z.core.$strip>;
+/** Orchestrator -> Agent: presigned PUT URL, or `skip` when the immutable key already exists. */
+export declare const cacheUserSaveResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.save.response">;
+    requestId: z.ZodString;
+    uploadUrl: z.ZodOptional<z.ZodString>;
+    skip: z.ZodBoolean;
+}, z.core.$strip>;
+/** Agent -> Orchestrator: confirm a user-cache upload finished; orchestrator commits temp -> final + sets metadata. */
+export declare const cacheUserSaveCompleteSchema: z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.save.complete">;
+    messageId: z.ZodString;
+    jobId: z.ZodString;
+    key: z.ZodString;
+    tarHash: z.ZodString;
+    sizeBytes: z.ZodNumber;
+}, z.core.$strip>;
 /** Agent -> Orchestrator: emit a custom event from a running workflow step. */
 export declare const eventEmitSchema: z.ZodObject<{
     type: z.ZodLiteral<"event.emit">;
@@ -375,6 +480,12 @@ export declare const orchestratorToAgentMessageSchema: z.ZodDiscriminatedUnion<[
         token: z.ZodString;
     }, z.core.$strip>>>;
     installEnvSecrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    orgId: z.ZodOptional<z.ZodString>;
+    repoId: z.ZodOptional<z.ZodString>;
+    cacheRefScope: z.ZodOptional<z.ZodEnum<{
+        shared: "shared";
+        isolated: "isolated";
+    }>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"job.cancel">;
     messageId: z.ZodString;
@@ -403,6 +514,18 @@ export declare const orchestratorToAgentMessageSchema: z.ZodDiscriminatedUnion<[
     type: z.ZodLiteral<"cache.upload.response">;
     requestId: z.ZodString;
     uploadUrl: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.restore.response">;
+    requestId: z.ZodString;
+    hit: z.ZodBoolean;
+    matchedKey: z.ZodOptional<z.ZodString>;
+    downloadUrl: z.ZodOptional<z.ZodString>;
+    tarHash: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.save.response">;
+    requestId: z.ZodString;
+    uploadUrl: z.ZodOptional<z.ZodString>;
+    skip: z.ZodBoolean;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"event.emit.response">;
     requestId: z.ZodString;
@@ -475,6 +598,22 @@ export declare const agentToOrchestratorMessageSchema: z.ZodDiscriminatedUnion<[
         agentPublicKey: z.ZodString;
         encrypted: z.ZodString;
     }, z.core.$strip>>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"job.reject">;
+    messageId: z.ZodString;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    reason: z.ZodEnum<{
+        draining: "draining";
+        busy: "busy";
+    }>;
+    timestamp: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"job.ack">;
+    messageId: z.ZodString;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    timestamp: z.ZodNumber;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"log.chunk">;
     messageId: z.ZodString;
@@ -555,6 +694,24 @@ export declare const agentToOrchestratorMessageSchema: z.ZodDiscriminatedUnion<[
     platform: z.ZodString;
     arch: z.ZodString;
     depsHash: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.restore.request">;
+    messageId: z.ZodString;
+    jobId: z.ZodString;
+    key: z.ZodString;
+    restoreKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.save.request">;
+    messageId: z.ZodString;
+    jobId: z.ZodString;
+    key: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"cache.user.save.complete">;
+    messageId: z.ZodString;
+    jobId: z.ZodString;
+    key: z.ZodString;
+    tarHash: z.ZodString;
+    sizeBytes: z.ZodNumber;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"event.emit">;
     jobId: z.ZodString;
@@ -599,8 +756,15 @@ export declare const agentToOrchestratorMessageSchema: z.ZodDiscriminatedUnion<[
 export type JobDispatch = z.infer<typeof jobDispatchSchema>;
 export type JobCancel = z.infer<typeof jobCancelSchema>;
 export type JobStatus = z.infer<typeof jobStatusSchema>;
+export type JobReject = z.infer<typeof jobRejectSchema>;
+export type JobAck = z.infer<typeof jobAckSchema>;
 export type AgentLogChunk = z.infer<typeof agentLogChunkSchema>;
 export type AgentStepStatus = z.infer<typeof agentStepStatusSchema>;
 export type AgentMetrics = z.infer<typeof agentMetricsSchema>;
+export type CacheUserRestoreRequest = z.infer<typeof cacheUserRestoreRequestSchema>;
+export type CacheUserRestoreResponse = z.infer<typeof cacheUserRestoreResponseSchema>;
+export type CacheUserSaveRequest = z.infer<typeof cacheUserSaveRequestSchema>;
+export type CacheUserSaveResponse = z.infer<typeof cacheUserSaveResponseSchema>;
+export type CacheUserSaveComplete = z.infer<typeof cacheUserSaveCompleteSchema>;
 export type AgentToOrchestratorMessage = z.infer<typeof agentToOrchestratorMessageSchema>;
 //# sourceMappingURL=orchestrator-agent.d.ts.map

package/dist/protocol/messages/orchestrator-agent.js

@@ -3,6 +3,16 @@ import { ExecutionJobStatus, ExecutionStepStatus } from "./execution-status.js";
 import { z } from "zod";
 //#region src/protocol/messages/orchestrator-agent.ts
 /**
+* Cache write scope for a job's user-facing cache.
+*
+* - `shared` — trusted ref (default branch / write-permission contributor):
+*   reads AND writes the org-shared default-branch scope.
+* - `isolated` — untrusted ref (fork PR / unknown contributor): reads the
+*   shared scope as a fallback but writes only into a per-run isolated scope,
+*   so an untrusted ref can never poison the shared cache (GitHub Actions model).
+*/
+const CacheRefScope = z.enum(["shared", "isolated"]);
+/**
 * Structured git-clone auth material. Carries everything the agent needs to
 * authenticate a single `git clone`:
 *
@@ -109,7 +119,18 @@ const jobDispatchSchema = z.object({
 	* is stripped at resolution time). For use with a customer-committed
 	* `.kici/.npmrc` containing `${VAR}` placeholders.
 	*/
-	installEnvSecrets: z.record(z.string(), z.string()).optional()
+	installEnvSecrets: z.record(z.string(), z.string()).optional(),
+	/** Org id that owns this run — namespaces the user-facing cache (per-tenant isolation). */
+	orgId: z.string().optional(),
+	/** Repo identifier (e.g. "owner/repo") — second namespacing level for the user-facing cache. */
+	repoId: z.string().optional(),
+	/**
+	* Cache write scope for this job. `shared` lets the job write the
+	* org-shared default-branch cache; `isolated` confines writes to a
+	* per-run scope while still allowing shared-scope reads. Absent ⇒ treated
+	* as `isolated` by the agent (fail-closed).
+	*/
+	cacheRefScope: CacheRefScope.optional()
 }).superRefine((val, ctx) => {
 	if (val.token && val.sourceAuth) {
 		if (val.sourceAuth.kind !== "basic") ctx.addIssue({
@@ -222,6 +243,44 @@ const jobStatusSchema = z.object({
 		encrypted: z.string()
 	})).optional()
 });
+/** Reasons an agent can refuse a job.dispatch. */
+const JobRejectReason = z.enum(["busy", "draining"]);
+/**
+* Explicit dispatch rejection (agent -> orchestrator).
+*
+* Sent when the agent cannot accept a job.dispatch (already running a job,
+* or draining). The orchestrator undoes its dispatch accounting and requeues
+* the job for another agent. Protocol invariant: every job.dispatch is
+* answered — accepted with `job.ack` (a `job.status` with state `running`
+* also resolves the deadline), or refused with this message. An unanswered
+* dispatch is treated as lost once the ack deadline expires (requeue +
+* disconnect the agent) and is also covered by disconnect-time triage.
+*/
+const jobRejectSchema = z.object({
+	type: z.literal("job.reject"),
+	messageId: z.string(),
+	runId: z.string(),
+	jobId: z.string(),
+	reason: JobRejectReason,
+	timestamp: z.number()
+});
+/**
+* Positive dispatch acknowledgment (agent -> orchestrator).
+*
+* Sent immediately when the agent receives a job.dispatch and accepts it
+* (after the drain/busy checks, before execution begins). The orchestrator
+* arms a deadline when it sends a dispatch; `job.ack`, `job.reject`, or a
+* `job.status` with state `running` resolves it. A dispatch with no answer
+* inside the deadline is treated as lost: the orchestrator requeues the job
+* and disconnects the unresponsive agent.
+*/
+const jobAckSchema = z.object({
+	type: z.literal("job.ack"),
+	messageId: z.string(),
+	runId: z.string(),
+	jobId: z.string(),
+	timestamp: z.number()
+});
 /**
 * Streaming log chunk from step execution (agent -> orchestrator).
 *
@@ -361,6 +420,56 @@ const cacheUploadCompleteSchema = z.object({
 	/** SHA-256 hash of the dependency tarball for integrity verification. Only present for deps uploads. */
 	depsHash: z.string().optional()
 });
+/** Agent -> Orchestrator: request a user-cache restore (presigned download). */
+const cacheUserRestoreRequestSchema = z.object({
+	type: z.literal("cache.user.restore.request"),
+	messageId: z.string(),
+	jobId: z.string(),
+	/** Exact cache key. */
+	key: z.string(),
+	/** Ordered prefix fallbacks (newest matching entry wins). */
+	restoreKeys: z.array(z.string()).optional()
+});
+/** Orchestrator -> Agent: presigned download URL + matched key + tar hash, or a miss. */
+const cacheUserRestoreResponseSchema = z.object({
+	type: z.literal("cache.user.restore.response"),
+	requestId: z.string(),
+	/** True when an entry matched (exact or prefix). */
+	hit: z.boolean(),
+	/** Full key that matched (exact key or the matched prefix entry's full key). */
+	matchedKey: z.string().optional(),
+	/** Presigned GET URL for the matched tarball. Present only on hit. */
+	downloadUrl: z.string().optional(),
+	/** SHA-256 of the tarball bytes for integrity verification on download. */
+	tarHash: z.string().optional()
+});
+/** Agent -> Orchestrator: request a presigned PUT for a user-cache save (immutable; may decline if key exists). */
+const cacheUserSaveRequestSchema = z.object({
+	type: z.literal("cache.user.save.request"),
+	messageId: z.string(),
+	jobId: z.string(),
+	key: z.string()
+});
+/** Orchestrator -> Agent: presigned PUT URL, or `skip` when the immutable key already exists. */
+const cacheUserSaveResponseSchema = z.object({
+	type: z.literal("cache.user.save.response"),
+	requestId: z.string(),
+	/** Presigned PUT URL to the temp object. Absent when `skip` is true. */
+	uploadUrl: z.string().optional(),
+	/** True when the exact key already exists (immutable no-op). */
+	skip: z.boolean()
+});
+/** Agent -> Orchestrator: confirm a user-cache upload finished; orchestrator commits temp -> final + sets metadata. */
+const cacheUserSaveCompleteSchema = z.object({
+	type: z.literal("cache.user.save.complete"),
+	messageId: z.string(),
+	jobId: z.string(),
+	key: z.string(),
+	/** SHA-256 of the tarball bytes. */
+	tarHash: z.string(),
+	/** Tarball size in bytes (drives quota accounting). */
+	sizeBytes: z.number().int().nonnegative()
+});
 /** Agent -> Orchestrator: emit a custom event from a running workflow step. */
 const eventEmitSchema = z.object({
 	type: z.literal("event.emit"),
@@ -452,6 +561,8 @@ const orchestratorToAgentMessageSchema = z.discriminatedUnion("type", [
 	registerAckSchema,
 	jobConcurrencyAckSchema,
 	cacheUploadResponseSchema,
+	cacheUserRestoreResponseSchema,
+	cacheUserSaveResponseSchema,
 	eventEmitResponseSchema,
 	agentApiResponseSchema,
 	agentAuthSuccessSchema,
@@ -462,6 +573,8 @@ const agentToOrchestratorMessageSchema = z.discriminatedUnion("type", [
 	agentRegisterSchema,
 	agentStatusSchema,
 	jobStatusSchema,
+	jobRejectSchema,
+	jobAckSchema,
 	agentLogChunkSchema,
 	agentStepStatusSchema,
 	jobHeartbeatSchema,
@@ -470,12 +583,15 @@ const agentToOrchestratorMessageSchema = z.discriminatedUnion("type", [
 	configAckSchema,
 	cacheUploadRequestSchema,
 	cacheUploadCompleteSchema,
+	cacheUserRestoreRequestSchema,
+	cacheUserSaveRequestSchema,
+	cacheUserSaveCompleteSchema,
 	eventEmitSchema,
 	agentApiRequestSchema,
 	agentMetricsSchema,
 	agentAuthRequestSchema
 ]);
 //#endregion
-export { agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, configAckSchema, eventEmitResponseSchema, eventEmitSchema, gitAuthSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobDispatchSchema, jobStatusSchema, orchestratorToAgentMessageSchema, registerAckSchema };
+export { CacheRefScope, JobRejectReason, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, configAckSchema, eventEmitResponseSchema, eventEmitSchema, gitAuthSchema, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobDispatchSchema, jobRejectSchema, jobStatusSchema, orchestratorToAgentMessageSchema, registerAckSchema };
 
 //# sourceMappingURL=orchestrator-agent.js.map

package/dist/protocol/messages/peer.d.ts

@@ -14,6 +14,7 @@ declare const scalerCapacitySummarySchema: z.ZodObject<{
     labelSets: z.ZodArray<z.ZodArray<z.ZodString>>;
     maxAgents: z.ZodNumber;
     activeCount: z.ZodNumber;
+    spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
     mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
 }, z.core.$strip>;
 /** Peer hello: initiator sends ephemeral X25519 public key and nonce. */
@@ -57,6 +58,7 @@ export declare const peerAuthResponseSchema: z.ZodObject<{
         platform: z.ZodString;
         arch: z.ZodString;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        scalerName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>>;
     scalerCapacity: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
@@ -64,6 +66,7 @@ export declare const peerAuthResponseSchema: z.ZodObject<{
         labelSets: z.ZodArray<z.ZodArray<z.ZodString>>;
         maxAgents: z.ZodNumber;
         activeCount: z.ZodNumber;
+        spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
     }, z.core.$strip>>>;
     capabilities: z.ZodOptional<z.ZodObject<{
@@ -89,6 +92,7 @@ export declare const peerHeartbeatSchema: z.ZodObject<{
         platform: z.ZodString;
         arch: z.ZodString;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        scalerName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
     capabilities: z.ZodObject<{
         s3LogAccess: z.ZodBoolean;
@@ -103,6 +107,7 @@ export declare const peerHeartbeatSchema: z.ZodObject<{
         labelSets: z.ZodArray<z.ZodArray<z.ZodString>>;
         maxAgents: z.ZodNumber;
         activeCount: z.ZodNumber;
+        spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
     }, z.core.$strip>>>;
     configVersion: z.ZodOptional<z.ZodNumber>;
@@ -373,6 +378,7 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
         platform: z.ZodString;
         arch: z.ZodString;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        scalerName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>>;
     scalerCapacity: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
@@ -380,6 +386,7 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
         labelSets: z.ZodArray<z.ZodArray<z.ZodString>>;
         maxAgents: z.ZodNumber;
         activeCount: z.ZodNumber;
+        spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
     }, z.core.$strip>>>;
     capabilities: z.ZodOptional<z.ZodObject<{
@@ -403,6 +410,7 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
         platform: z.ZodString;
         arch: z.ZodString;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        scalerName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
     capabilities: z.ZodObject<{
         s3LogAccess: z.ZodBoolean;
@@ -417,6 +425,7 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
         labelSets: z.ZodArray<z.ZodArray<z.ZodString>>;
         maxAgents: z.ZodNumber;
         activeCount: z.ZodNumber;
+        spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
     }, z.core.$strip>>>;
     configVersion: z.ZodOptional<z.ZodNumber>;
@@ -617,6 +626,7 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
         platform: z.ZodString;
         arch: z.ZodString;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        scalerName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>>;
     scalerCapacity: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
@@ -624,6 +634,7 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
         labelSets: z.ZodArray<z.ZodArray<z.ZodString>>;
         maxAgents: z.ZodNumber;
         activeCount: z.ZodNumber;
+        spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
     }, z.core.$strip>>>;
     capabilities: z.ZodOptional<z.ZodObject<{
@@ -647,6 +658,7 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
         platform: z.ZodString;
         arch: z.ZodString;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
+        scalerName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
     capabilities: z.ZodObject<{
         s3LogAccess: z.ZodBoolean;
@@ -661,6 +673,7 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
         labelSets: z.ZodArray<z.ZodArray<z.ZodString>>;
         maxAgents: z.ZodNumber;
         activeCount: z.ZodNumber;
+        spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
         mandatoryLabels: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodString>>>;
     }, z.core.$strip>>>;
     configVersion: z.ZodOptional<z.ZodNumber>;

package/dist/protocol/messages/peer.js

@@ -22,7 +22,14 @@ const peerAgentSummarySchema = z.object({
 	* predate the gate omit the field, and the coordinator falls back to
 	* "no gate" routing for those agents (matching pre-gate behavior).
 	*/
-	mandatoryLabels: z.array(z.string()).optional().default([])
+	mandatoryLabels: z.array(z.string()).optional().default([]),
+	/**
+	* Name of the scaler backend that spawned this agent, or null/omitted for
+	* static (stateful) agents not bound to any scaler. Carried so the dashboard
+	* diagnostics tree can group a worker peer's agents under the correct scaler
+	* row (and the stateful-agents row) without a second round trip.
+	*/
+	scalerName: z.string().nullable().optional()
 });
 /** Peer capabilities advertised during heartbeat and auth response. */
 const peerCapabilitiesSchema = z.object({
@@ -42,6 +49,12 @@ const scalerCapacitySummarySchema = z.object({
 	/** Current active count for this backend */
 	activeCount: z.number(),
 	/**
+	* Whether this backend spawns its agents on the peer's own host (bare-metal,
+	* Firecracker, container on a local runtime socket). Lets diagnostics
+	* surface the peer's hostname as the scaler's spawning host.
+	*/
+	spawnsOnLocalHost: z.boolean().optional(),
+	/**
 	* Labels a job MUST declare in `runsOn` to be allowed on this backend
 	* (Kubernetes-taint-style opt-in gate). When omitted (legacy peer) or
 	* empty the backend has no gate. Cross-peer routing applies the same