@kici-dev/engine 0.1.16 → 0.1.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (98) hide show
  1. package/dist/approval/types.js +1 -1
  2. package/dist/audit/access-log-policy.js +3 -1
  3. package/dist/audit/activity.js +1 -1
  4. package/dist/audit/retention-policy.js +5 -1
  5. package/dist/bundler/index.js +1 -1
  6. package/dist/bundler/rolldown-config.js +1 -1
  7. package/dist/env/environment-allowlist.js +1 -1
  8. package/dist/environment/index.js +1 -1
  9. package/dist/environment/scope-resolver.js +1 -1
  10. package/dist/environment/types.js +1 -1
  11. package/dist/fanout/materialize.d.ts +67 -0
  12. package/dist/fanout/materialize.js +119 -0
  13. package/dist/index.d.ts +3 -2
  14. package/dist/index.js +8 -7
  15. package/dist/labels.js +1 -1
  16. package/dist/matrix/expand.d.ts +43 -0
  17. package/dist/matrix/expand.js +66 -0
  18. package/dist/matrix/format.d.ts +10 -0
  19. package/dist/matrix/format.js +19 -0
  20. package/dist/metrics/catalog-policy.js +8 -3
  21. package/dist/metrics/metric-catalog.generated.d.ts +1 -1
  22. package/dist/metrics/metric-catalog.generated.js +2 -2
  23. package/dist/protocol/analytics-events.js +1 -1
  24. package/dist/protocol/cluster-name.js +1 -1
  25. package/dist/protocol/dashboard-global-workflows.js +1 -1
  26. package/dist/protocol/dashboard-write-operations.js +1 -1
  27. package/dist/protocol/event-log-payload.js +1 -1
  28. package/dist/protocol/messages/access-log.d.ts +15 -5
  29. package/dist/protocol/messages/access-log.js +3 -1
  30. package/dist/protocol/messages/actor.js +1 -1
  31. package/dist/protocol/messages/auth.d.ts +1 -0
  32. package/dist/protocol/messages/auth.js +11 -2
  33. package/dist/protocol/messages/browser.js +1 -1
  34. package/dist/protocol/messages/capabilities.js +1 -1
  35. package/dist/protocol/messages/common.js +1 -1
  36. package/dist/protocol/messages/dashboard-global-workflows.js +1 -1
  37. package/dist/protocol/messages/dashboard.d.ts +976 -56
  38. package/dist/protocol/messages/dashboard.js +362 -6
  39. package/dist/protocol/messages/event-log.js +1 -1
  40. package/dist/protocol/messages/execution-status.d.ts +13 -1
  41. package/dist/protocol/messages/execution-status.js +13 -3
  42. package/dist/protocol/messages/join.js +1 -1
  43. package/dist/protocol/messages/log-pull.js +1 -1
  44. package/dist/protocol/messages/observe.d.ts +1 -0
  45. package/dist/protocol/messages/oidc-token-relay.d.ts +31 -0
  46. package/dist/protocol/messages/oidc-token-relay.js +34 -0
  47. package/dist/protocol/messages/orchestrator-agent.d.ts +41 -0
  48. package/dist/protocol/messages/orchestrator-agent.js +33 -2
  49. package/dist/protocol/messages/peer.js +1 -1
  50. package/dist/protocol/messages/platform-orchestrator.d.ts +171 -4
  51. package/dist/protocol/messages/platform-orchestrator.js +1 -1
  52. package/dist/protocol/messages/run-events.js +1 -1
  53. package/dist/protocol/messages/scaler-event.js +1 -1
  54. package/dist/protocol/messages/source-registration.d.ts +7 -6
  55. package/dist/protocol/messages/source-registration.js +7 -6
  56. package/dist/protocol/version.js +1 -1
  57. package/dist/provenance/bundle.d.ts +54 -0
  58. package/dist/provenance/bundle.js +53 -0
  59. package/dist/provenance/dsse.d.ts +39 -0
  60. package/dist/provenance/dsse.js +53 -0
  61. package/dist/provenance/schema.js +1 -1
  62. package/dist/provenance/verify.d.ts +71 -0
  63. package/dist/provenance/verify.js +135 -0
  64. package/dist/provider/changed-files-fetcher.js +1 -1
  65. package/dist/provider/check-run-conclusion.js +1 -1
  66. package/dist/provider/check-status-poster.js +1 -1
  67. package/dist/provider/clone-token-provider.js +1 -1
  68. package/dist/provider/contributor-resolver.js +1 -1
  69. package/dist/provider/index.js +1 -1
  70. package/dist/provider/lock-file-fetcher.js +1 -1
  71. package/dist/provider/lock-file-parse-error.js +3 -1
  72. package/dist/provider/repo-url-builder.js +1 -1
  73. package/dist/provider/types.d.ts +2 -2
  74. package/dist/provider/types.js +1 -1
  75. package/dist/provider/webhook-normalizer.js +1 -1
  76. package/dist/registration/registerable-trigger-type.js +1 -1
  77. package/dist/scaler/resource-types.js +1 -1
  78. package/dist/scaler/scaler-backend-type.js +1 -1
  79. package/dist/secrets/index.js +1 -1
  80. package/dist/secrets/types.js +1 -1
  81. package/dist/state-machine/index.js +1 -1
  82. package/dist/state-machine/machine.js +1 -1
  83. package/dist/state-machine/types.js +1 -1
  84. package/dist/trigger/decision-trace.js +1 -1
  85. package/dist/trigger/jsonpath-matcher.js +1 -1
  86. package/dist/trigger/matcher.js +1 -1
  87. package/dist/trigger/trigger-event-type.js +1 -1
  88. package/dist/trigger/types.d.ts +13 -1
  89. package/dist/trigger/types.js +13 -5
  90. package/dist/webhook/signature.js +1 -1
  91. package/dist/ws/close-codes.js +1 -1
  92. package/dist/ws/rate-limiter.js +3 -1
  93. package/dist/ws/ws-like.js +1 -1
  94. package/package.json +19 -1
  95. package/sbom.spdx.json +55 -5
  96. package/dist/protocol/messages/observe.js +0 -70
  97. package/dist/protocol/messages/test-run.js +0 -52
  98. /package/dist/{chunk-gOLHoazu.js → chunk-BTugEXQM.js} +0 -0
@@ -1,4 +1,4 @@
1
- import "../chunk-gOLHoazu.js";
1
+ import "../chunk-BTugEXQM.js";
2
2
  import { z } from "zod";
3
3
  //#region src/protocol/dashboard-write-operations.ts
4
4
  /**
@@ -1,4 +1,4 @@
1
- import "../chunk-gOLHoazu.js";
1
+ import "../chunk-BTugEXQM.js";
2
2
  //#region src/protocol/event-log-payload.ts
3
3
  /**
4
4
  * Constants for the chunked event-log payload streaming transport.
@@ -29,8 +29,8 @@ export type AccessLogOutcome = z.infer<typeof AccessLogOutcome>;
29
29
  export declare const AccessLogTargetType: z.ZodEnum<{
30
30
  run: "run";
31
31
  job: "job";
32
- step: "step";
33
32
  payload: "payload";
33
+ step: "step";
34
34
  event_log: "event_log";
35
35
  event_log_payload: "event_log_payload";
36
36
  secret_scope: "secret_scope";
@@ -63,9 +63,11 @@ export declare const AccessLogAction: z.ZodEnum<{
63
63
  "run.payload.read": "run.payload.read";
64
64
  "run.orch_logs.read": "run.orch_logs.read";
65
65
  "step.logs.read": "step.logs.read";
66
+ "attestations.read": "attestations.read";
66
67
  "run.cancel": "run.cancel";
67
68
  "run.rerun": "run.rerun";
68
69
  "run.manual_schedule": "run.manual_schedule";
70
+ "run.trigger": "run.trigger";
69
71
  "job.cancel": "job.cancel";
70
72
  "event_log.list.read": "event_log.list.read";
71
73
  "event_log.detail.read": "event_log.detail.read";
@@ -149,9 +151,11 @@ export declare const accessLogItemSchema: z.ZodObject<{
149
151
  "run.payload.read": "run.payload.read";
150
152
  "run.orch_logs.read": "run.orch_logs.read";
151
153
  "step.logs.read": "step.logs.read";
154
+ "attestations.read": "attestations.read";
152
155
  "run.cancel": "run.cancel";
153
156
  "run.rerun": "run.rerun";
154
157
  "run.manual_schedule": "run.manual_schedule";
158
+ "run.trigger": "run.trigger";
155
159
  "job.cancel": "job.cancel";
156
160
  "event_log.list.read": "event_log.list.read";
157
161
  "event_log.detail.read": "event_log.detail.read";
@@ -202,8 +206,8 @@ export declare const accessLogItemSchema: z.ZodObject<{
202
206
  targetType: z.ZodNullable<z.ZodEnum<{
203
207
  run: "run";
204
208
  job: "job";
205
- step: "step";
206
209
  payload: "payload";
210
+ step: "step";
207
211
  event_log: "event_log";
208
212
  event_log_payload: "event_log_payload";
209
213
  secret_scope: "secret_scope";
@@ -257,9 +261,11 @@ export declare const accessLogFilterSchema: z.ZodObject<{
257
261
  "run.payload.read": "run.payload.read";
258
262
  "run.orch_logs.read": "run.orch_logs.read";
259
263
  "step.logs.read": "step.logs.read";
264
+ "attestations.read": "attestations.read";
260
265
  "run.cancel": "run.cancel";
261
266
  "run.rerun": "run.rerun";
262
267
  "run.manual_schedule": "run.manual_schedule";
268
+ "run.trigger": "run.trigger";
263
269
  "job.cancel": "job.cancel";
264
270
  "event_log.list.read": "event_log.list.read";
265
271
  "event_log.detail.read": "event_log.detail.read";
@@ -320,8 +326,8 @@ export declare const accessLogFilterSchema: z.ZodObject<{
320
326
  targetType: z.ZodOptional<z.ZodEnum<{
321
327
  run: "run";
322
328
  job: "job";
323
- step: "step";
324
329
  payload: "payload";
330
+ step: "step";
325
331
  event_log: "event_log";
326
332
  event_log_payload: "event_log_payload";
327
333
  secret_scope: "secret_scope";
@@ -387,9 +393,11 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
387
393
  "run.payload.read": "run.payload.read";
388
394
  "run.orch_logs.read": "run.orch_logs.read";
389
395
  "step.logs.read": "step.logs.read";
396
+ "attestations.read": "attestations.read";
390
397
  "run.cancel": "run.cancel";
391
398
  "run.rerun": "run.rerun";
392
399
  "run.manual_schedule": "run.manual_schedule";
400
+ "run.trigger": "run.trigger";
393
401
  "job.cancel": "job.cancel";
394
402
  "event_log.list.read": "event_log.list.read";
395
403
  "event_log.detail.read": "event_log.detail.read";
@@ -450,8 +458,8 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
450
458
  targetType: z.ZodOptional<z.ZodEnum<{
451
459
  run: "run";
452
460
  job: "job";
453
- step: "step";
454
461
  payload: "payload";
462
+ step: "step";
455
463
  event_log: "event_log";
456
464
  event_log_payload: "event_log_payload";
457
465
  secret_scope: "secret_scope";
@@ -505,9 +513,11 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
505
513
  "run.payload.read": "run.payload.read";
506
514
  "run.orch_logs.read": "run.orch_logs.read";
507
515
  "step.logs.read": "step.logs.read";
516
+ "attestations.read": "attestations.read";
508
517
  "run.cancel": "run.cancel";
509
518
  "run.rerun": "run.rerun";
510
519
  "run.manual_schedule": "run.manual_schedule";
520
+ "run.trigger": "run.trigger";
511
521
  "job.cancel": "job.cancel";
512
522
  "event_log.list.read": "event_log.list.read";
513
523
  "event_log.detail.read": "event_log.detail.read";
@@ -558,8 +568,8 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
558
568
  targetType: z.ZodNullable<z.ZodEnum<{
559
569
  run: "run";
560
570
  job: "job";
561
- step: "step";
562
571
  payload: "payload";
572
+ step: "step";
563
573
  event_log: "event_log";
564
574
  event_log_payload: "event_log_payload";
565
575
  secret_scope: "secret_scope";
@@ -1,4 +1,4 @@
1
- import "../../chunk-gOLHoazu.js";
1
+ import "../../chunk-BTugEXQM.js";
2
2
  import { ActorType, actorPrincipalSchema } from "./actor.js";
3
3
  import { z } from "zod";
4
4
  //#region src/protocol/messages/access-log.ts
@@ -58,9 +58,11 @@ const AccessLogAction = z.enum([
58
58
  "run.payload.read",
59
59
  "run.orch_logs.read",
60
60
  "step.logs.read",
61
+ "attestations.read",
61
62
  "run.cancel",
62
63
  "run.rerun",
63
64
  "run.manual_schedule",
65
+ "run.trigger",
64
66
  "job.cancel",
65
67
  "event_log.list.read",
66
68
  "event_log.detail.read",
@@ -1,4 +1,4 @@
1
- import "../../chunk-gOLHoazu.js";
1
+ import "../../chunk-BTugEXQM.js";
2
2
  import { z } from "zod";
3
3
  //#region src/protocol/messages/actor.ts
4
4
  /**
@@ -42,6 +42,7 @@ export declare const authSuccessSchema: z.ZodObject<{
42
42
  type: z.ZodLiteral<"auth.success">;
43
43
  connectionId: z.ZodString;
44
44
  orgPublicAlias: z.ZodOptional<z.ZodString>;
45
+ orgId: z.ZodOptional<z.ZodString>;
45
46
  }, z.core.$strip>;
46
47
  /** Auth failure response sent by Platform to orchestrator when authentication fails. */
47
48
  export declare const authFailureSchema: z.ZodObject<{
@@ -1,4 +1,4 @@
1
- import "../../chunk-gOLHoazu.js";
1
+ import "../../chunk-BTugEXQM.js";
2
2
  import { orchCapabilitiesSchema } from "./capabilities.js";
3
3
  import { z } from "zod";
4
4
  //#region src/protocol/messages/auth.ts
@@ -23,7 +23,16 @@ const authSuccessSchema = z.object({
23
23
  * that don't yet supply it; when absent, the orchestrator skips
24
24
  * `details_url` (preserving today's behaviour).
25
25
  */
26
- orgPublicAlias: z.string().optional()
26
+ orgPublicAlias: z.string().optional(),
27
+ /**
28
+ * Canonical org id (`org_<…>`) of the authenticated orchestrator's owning
29
+ * org. The orchestrator auto-provisions a `remote_sources` anchor
30
+ * (`remote:<orgId>`) from this so `kici run remote` relayed through the
31
+ * Platform resolves the real tenant. Optional for back-compat with Platforms
32
+ * that don't yet supply it; when absent, the orchestrator skips
33
+ * remote-source provisioning.
34
+ */
35
+ orgId: z.string().optional()
27
36
  });
28
37
  /** Auth failure response sent by Platform to orchestrator when authentication fails. */
29
38
  const authFailureSchema = z.object({
@@ -1,4 +1,4 @@
1
- import "../../chunk-gOLHoazu.js";
1
+ import "../../chunk-BTugEXQM.js";
2
2
  import { browserJobContextSchema, browserRunEventSchema } from "./run-events.js";
3
3
  import { browserEventLogPayloadChunkSchema } from "./dashboard.js";
4
4
  import { z } from "zod";
@@ -1,4 +1,4 @@
1
- import "../../chunk-gOLHoazu.js";
1
+ import "../../chunk-BTugEXQM.js";
2
2
  import { dashboardWritePolicyMap } from "../dashboard-write-operations.js";
3
3
  import { z } from "zod";
4
4
  //#region src/protocol/messages/capabilities.ts
@@ -1,4 +1,4 @@
1
- import "../../chunk-gOLHoazu.js";
1
+ import "../../chunk-BTugEXQM.js";
2
2
  import { z } from "zod";
3
3
  //#region src/protocol/messages/common.ts
4
4
  /**
@@ -1,4 +1,4 @@
1
- import "../../chunk-gOLHoazu.js";
1
+ import "../../chunk-BTugEXQM.js";
2
2
  import { actorPrincipalSchema } from "./actor.js";
3
3
  import { z } from "zod";
4
4
  //#region src/protocol/messages/dashboard-global-workflows.ts