@kici-dev/engine 0.1.16 → 0.1.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/approval/types.js +1 -1
- package/dist/audit/access-log-policy.js +3 -1
- package/dist/audit/activity.js +1 -1
- package/dist/audit/retention-policy.js +5 -1
- package/dist/bundler/index.js +1 -1
- package/dist/bundler/rolldown-config.js +1 -1
- package/dist/env/environment-allowlist.d.ts +1 -1
- package/dist/env/environment-allowlist.js +13 -2
- package/dist/environment/index.js +1 -1
- package/dist/environment/scope-resolver.js +1 -1
- package/dist/environment/types.js +1 -1
- package/dist/fanout/materialize.d.ts +123 -0
- package/dist/fanout/materialize.js +176 -0
- package/dist/index.d.ts +4 -2
- package/dist/index.js +9 -7
- package/dist/labels/compile.d.ts +40 -0
- package/dist/labels/compile.js +91 -0
- package/dist/labels-match.d.ts +32 -0
- package/dist/labels-match.js +55 -0
- package/dist/labels.js +1 -1
- package/dist/matrix/expand.d.ts +48 -0
- package/dist/matrix/expand.js +72 -0
- package/dist/matrix/format.d.ts +10 -0
- package/dist/matrix/format.js +20 -0
- package/dist/metrics/catalog-policy.js +8 -3
- package/dist/metrics/metric-catalog.generated.d.ts +11 -1
- package/dist/metrics/metric-catalog.generated.js +14 -2
- package/dist/protocol/analytics-events.js +1 -1
- package/dist/protocol/cluster-name.js +1 -1
- package/dist/protocol/dashboard-global-workflows.js +1 -1
- package/dist/protocol/dashboard-write-operations.js +1 -1
- package/dist/protocol/event-log-payload.js +1 -1
- package/dist/protocol/messages/access-log.d.ts +15 -5
- package/dist/protocol/messages/access-log.js +3 -1
- package/dist/protocol/messages/actor.js +1 -1
- package/dist/protocol/messages/auth.d.ts +1 -0
- package/dist/protocol/messages/auth.js +11 -2
- package/dist/protocol/messages/browser.js +1 -1
- package/dist/protocol/messages/capabilities.js +1 -1
- package/dist/protocol/messages/common.js +1 -1
- package/dist/protocol/messages/dashboard-global-workflows.js +1 -1
- package/dist/protocol/messages/dashboard.d.ts +985 -57
- package/dist/protocol/messages/dashboard.js +368 -13
- package/dist/protocol/messages/event-log.js +1 -1
- package/dist/protocol/messages/execution-status.d.ts +13 -1
- package/dist/protocol/messages/execution-status.js +13 -3
- package/dist/protocol/messages/join.js +1 -1
- package/dist/protocol/messages/log-pull.js +1 -1
- package/dist/protocol/messages/observe.d.ts +1 -0
- package/dist/protocol/messages/oidc-token-relay.d.ts +31 -0
- package/dist/protocol/messages/oidc-token-relay.js +34 -0
- package/dist/protocol/messages/orchestrator-agent.d.ts +56 -0
- package/dist/protocol/messages/orchestrator-agent.js +47 -2
- package/dist/protocol/messages/peer.d.ts +48 -0
- package/dist/protocol/messages/peer.js +12 -1
- package/dist/protocol/messages/platform-orchestrator.d.ts +171 -4
- package/dist/protocol/messages/platform-orchestrator.js +1 -1
- package/dist/protocol/messages/run-events.js +1 -1
- package/dist/protocol/messages/scaler-event.js +1 -1
- package/dist/protocol/messages/source-registration.d.ts +7 -6
- package/dist/protocol/messages/source-registration.js +7 -6
- package/dist/protocol/version.js +1 -1
- package/dist/provenance/bundle.d.ts +54 -0
- package/dist/provenance/bundle.js +53 -0
- package/dist/provenance/dsse.d.ts +39 -0
- package/dist/provenance/dsse.js +53 -0
- package/dist/provenance/schema.js +1 -1
- package/dist/provenance/verify.d.ts +71 -0
- package/dist/provenance/verify.js +135 -0
- package/dist/provider/changed-files-fetcher.js +1 -1
- package/dist/provider/check-run-conclusion.js +1 -1
- package/dist/provider/check-status-poster.js +1 -1
- package/dist/provider/clone-token-provider.js +1 -1
- package/dist/provider/contributor-resolver.js +1 -1
- package/dist/provider/index.js +1 -1
- package/dist/provider/lock-file-fetcher.js +1 -1
- package/dist/provider/lock-file-parse-error.js +3 -1
- package/dist/provider/repo-url-builder.js +1 -1
- package/dist/provider/types.d.ts +2 -2
- package/dist/provider/types.js +1 -1
- package/dist/provider/webhook-normalizer.js +1 -1
- package/dist/registration/registerable-trigger-type.js +1 -1
- package/dist/scaler/resource-types.js +1 -1
- package/dist/scaler/scaler-backend-type.js +1 -1
- package/dist/secrets/index.js +1 -1
- package/dist/secrets/types.js +1 -1
- package/dist/state-machine/index.js +1 -1
- package/dist/state-machine/machine.js +1 -1
- package/dist/state-machine/types.js +1 -1
- package/dist/trigger/decision-trace.js +1 -1
- package/dist/trigger/jsonpath-matcher.js +1 -1
- package/dist/trigger/matcher.js +1 -1
- package/dist/trigger/trigger-event-type.js +1 -1
- package/dist/trigger/types.d.ts +76 -3
- package/dist/trigger/types.js +33 -5
- package/dist/webhook/signature.js +1 -1
- package/dist/ws/close-codes.js +1 -1
- package/dist/ws/rate-limiter.js +3 -1
- package/dist/ws/ws-like.js +1 -1
- package/package.json +26 -3
- package/sbom.spdx.json +85 -10
- package/dist/protocol/messages/observe.js +0 -70
- package/dist/protocol/messages/test-run.js +0 -52
- /package/dist/{chunk-gOLHoazu.js → chunk-BTugEXQM.js} +0 -0
|
@@ -29,8 +29,8 @@ export type AccessLogOutcome = z.infer<typeof AccessLogOutcome>;
|
|
|
29
29
|
export declare const AccessLogTargetType: z.ZodEnum<{
|
|
30
30
|
run: "run";
|
|
31
31
|
job: "job";
|
|
32
|
-
step: "step";
|
|
33
32
|
payload: "payload";
|
|
33
|
+
step: "step";
|
|
34
34
|
event_log: "event_log";
|
|
35
35
|
event_log_payload: "event_log_payload";
|
|
36
36
|
secret_scope: "secret_scope";
|
|
@@ -63,9 +63,11 @@ export declare const AccessLogAction: z.ZodEnum<{
|
|
|
63
63
|
"run.payload.read": "run.payload.read";
|
|
64
64
|
"run.orch_logs.read": "run.orch_logs.read";
|
|
65
65
|
"step.logs.read": "step.logs.read";
|
|
66
|
+
"attestations.read": "attestations.read";
|
|
66
67
|
"run.cancel": "run.cancel";
|
|
67
68
|
"run.rerun": "run.rerun";
|
|
68
69
|
"run.manual_schedule": "run.manual_schedule";
|
|
70
|
+
"run.trigger": "run.trigger";
|
|
69
71
|
"job.cancel": "job.cancel";
|
|
70
72
|
"event_log.list.read": "event_log.list.read";
|
|
71
73
|
"event_log.detail.read": "event_log.detail.read";
|
|
@@ -149,9 +151,11 @@ export declare const accessLogItemSchema: z.ZodObject<{
|
|
|
149
151
|
"run.payload.read": "run.payload.read";
|
|
150
152
|
"run.orch_logs.read": "run.orch_logs.read";
|
|
151
153
|
"step.logs.read": "step.logs.read";
|
|
154
|
+
"attestations.read": "attestations.read";
|
|
152
155
|
"run.cancel": "run.cancel";
|
|
153
156
|
"run.rerun": "run.rerun";
|
|
154
157
|
"run.manual_schedule": "run.manual_schedule";
|
|
158
|
+
"run.trigger": "run.trigger";
|
|
155
159
|
"job.cancel": "job.cancel";
|
|
156
160
|
"event_log.list.read": "event_log.list.read";
|
|
157
161
|
"event_log.detail.read": "event_log.detail.read";
|
|
@@ -202,8 +206,8 @@ export declare const accessLogItemSchema: z.ZodObject<{
|
|
|
202
206
|
targetType: z.ZodNullable<z.ZodEnum<{
|
|
203
207
|
run: "run";
|
|
204
208
|
job: "job";
|
|
205
|
-
step: "step";
|
|
206
209
|
payload: "payload";
|
|
210
|
+
step: "step";
|
|
207
211
|
event_log: "event_log";
|
|
208
212
|
event_log_payload: "event_log_payload";
|
|
209
213
|
secret_scope: "secret_scope";
|
|
@@ -257,9 +261,11 @@ export declare const accessLogFilterSchema: z.ZodObject<{
|
|
|
257
261
|
"run.payload.read": "run.payload.read";
|
|
258
262
|
"run.orch_logs.read": "run.orch_logs.read";
|
|
259
263
|
"step.logs.read": "step.logs.read";
|
|
264
|
+
"attestations.read": "attestations.read";
|
|
260
265
|
"run.cancel": "run.cancel";
|
|
261
266
|
"run.rerun": "run.rerun";
|
|
262
267
|
"run.manual_schedule": "run.manual_schedule";
|
|
268
|
+
"run.trigger": "run.trigger";
|
|
263
269
|
"job.cancel": "job.cancel";
|
|
264
270
|
"event_log.list.read": "event_log.list.read";
|
|
265
271
|
"event_log.detail.read": "event_log.detail.read";
|
|
@@ -320,8 +326,8 @@ export declare const accessLogFilterSchema: z.ZodObject<{
|
|
|
320
326
|
targetType: z.ZodOptional<z.ZodEnum<{
|
|
321
327
|
run: "run";
|
|
322
328
|
job: "job";
|
|
323
|
-
step: "step";
|
|
324
329
|
payload: "payload";
|
|
330
|
+
step: "step";
|
|
325
331
|
event_log: "event_log";
|
|
326
332
|
event_log_payload: "event_log_payload";
|
|
327
333
|
secret_scope: "secret_scope";
|
|
@@ -387,9 +393,11 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
|
|
|
387
393
|
"run.payload.read": "run.payload.read";
|
|
388
394
|
"run.orch_logs.read": "run.orch_logs.read";
|
|
389
395
|
"step.logs.read": "step.logs.read";
|
|
396
|
+
"attestations.read": "attestations.read";
|
|
390
397
|
"run.cancel": "run.cancel";
|
|
391
398
|
"run.rerun": "run.rerun";
|
|
392
399
|
"run.manual_schedule": "run.manual_schedule";
|
|
400
|
+
"run.trigger": "run.trigger";
|
|
393
401
|
"job.cancel": "job.cancel";
|
|
394
402
|
"event_log.list.read": "event_log.list.read";
|
|
395
403
|
"event_log.detail.read": "event_log.detail.read";
|
|
@@ -450,8 +458,8 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
|
|
|
450
458
|
targetType: z.ZodOptional<z.ZodEnum<{
|
|
451
459
|
run: "run";
|
|
452
460
|
job: "job";
|
|
453
|
-
step: "step";
|
|
454
461
|
payload: "payload";
|
|
462
|
+
step: "step";
|
|
455
463
|
event_log: "event_log";
|
|
456
464
|
event_log_payload: "event_log_payload";
|
|
457
465
|
secret_scope: "secret_scope";
|
|
@@ -505,9 +513,11 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
|
|
|
505
513
|
"run.payload.read": "run.payload.read";
|
|
506
514
|
"run.orch_logs.read": "run.orch_logs.read";
|
|
507
515
|
"step.logs.read": "step.logs.read";
|
|
516
|
+
"attestations.read": "attestations.read";
|
|
508
517
|
"run.cancel": "run.cancel";
|
|
509
518
|
"run.rerun": "run.rerun";
|
|
510
519
|
"run.manual_schedule": "run.manual_schedule";
|
|
520
|
+
"run.trigger": "run.trigger";
|
|
511
521
|
"job.cancel": "job.cancel";
|
|
512
522
|
"event_log.list.read": "event_log.list.read";
|
|
513
523
|
"event_log.detail.read": "event_log.detail.read";
|
|
@@ -558,8 +568,8 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
|
|
|
558
568
|
targetType: z.ZodNullable<z.ZodEnum<{
|
|
559
569
|
run: "run";
|
|
560
570
|
job: "job";
|
|
561
|
-
step: "step";
|
|
562
571
|
payload: "payload";
|
|
572
|
+
step: "step";
|
|
563
573
|
event_log: "event_log";
|
|
564
574
|
event_log_payload: "event_log_payload";
|
|
565
575
|
secret_scope: "secret_scope";
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import "../../chunk-
|
|
1
|
+
import "../../chunk-BTugEXQM.js";
|
|
2
2
|
import { ActorType, actorPrincipalSchema } from "./actor.js";
|
|
3
3
|
import { z } from "zod";
|
|
4
4
|
//#region src/protocol/messages/access-log.ts
|
|
@@ -58,9 +58,11 @@ const AccessLogAction = z.enum([
|
|
|
58
58
|
"run.payload.read",
|
|
59
59
|
"run.orch_logs.read",
|
|
60
60
|
"step.logs.read",
|
|
61
|
+
"attestations.read",
|
|
61
62
|
"run.cancel",
|
|
62
63
|
"run.rerun",
|
|
63
64
|
"run.manual_schedule",
|
|
65
|
+
"run.trigger",
|
|
64
66
|
"job.cancel",
|
|
65
67
|
"event_log.list.read",
|
|
66
68
|
"event_log.detail.read",
|
|
@@ -42,6 +42,7 @@ export declare const authSuccessSchema: z.ZodObject<{
|
|
|
42
42
|
type: z.ZodLiteral<"auth.success">;
|
|
43
43
|
connectionId: z.ZodString;
|
|
44
44
|
orgPublicAlias: z.ZodOptional<z.ZodString>;
|
|
45
|
+
orgId: z.ZodOptional<z.ZodString>;
|
|
45
46
|
}, z.core.$strip>;
|
|
46
47
|
/** Auth failure response sent by Platform to orchestrator when authentication fails. */
|
|
47
48
|
export declare const authFailureSchema: z.ZodObject<{
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import "../../chunk-
|
|
1
|
+
import "../../chunk-BTugEXQM.js";
|
|
2
2
|
import { orchCapabilitiesSchema } from "./capabilities.js";
|
|
3
3
|
import { z } from "zod";
|
|
4
4
|
//#region src/protocol/messages/auth.ts
|
|
@@ -23,7 +23,16 @@ const authSuccessSchema = z.object({
|
|
|
23
23
|
* that don't yet supply it; when absent, the orchestrator skips
|
|
24
24
|
* `details_url` (preserving today's behaviour).
|
|
25
25
|
*/
|
|
26
|
-
orgPublicAlias: z.string().optional()
|
|
26
|
+
orgPublicAlias: z.string().optional(),
|
|
27
|
+
/**
|
|
28
|
+
* Canonical org id (`org_<…>`) of the authenticated orchestrator's owning
|
|
29
|
+
* org. The orchestrator auto-provisions a `remote_sources` anchor
|
|
30
|
+
* (`remote:<orgId>`) from this so `kici run remote` relayed through the
|
|
31
|
+
* Platform resolves the real tenant. Optional for back-compat with Platforms
|
|
32
|
+
* that don't yet supply it; when absent, the orchestrator skips
|
|
33
|
+
* remote-source provisioning.
|
|
34
|
+
*/
|
|
35
|
+
orgId: z.string().optional()
|
|
27
36
|
});
|
|
28
37
|
/** Auth failure response sent by Platform to orchestrator when authentication fails. */
|
|
29
38
|
const authFailureSchema = z.object({
|