@kici-dev/engine 0.1.2 → 0.1.5

package/dist/protocol/messages/capabilities.d.ts

@@ -28,6 +28,31 @@ export declare const orchCapabilitiesSchema: z.ZodObject<{
         coordinator: "coordinator";
         worker: "worker";
     }>>;
+    dashboardWrites: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+        "secrets.set": "secrets.set";
+        "secrets.delete": "secrets.delete";
+        "secrets.scope.create": "secrets.scope.create";
+        "secrets.scope.rename": "secrets.scope.rename";
+        "secrets.scope.delete": "secrets.scope.delete";
+        "variables.set": "variables.set";
+        "variables.delete": "variables.delete";
+        "environments.create": "environments.create";
+        "environments.update": "environments.update";
+        "environments.delete": "environments.delete";
+        "environments.bindings.set": "environments.bindings.set";
+        "environments.source_overrides.set": "environments.source_overrides.set";
+        "environments.source_overrides.delete": "environments.source_overrides.delete";
+        "held_runs.approve": "held_runs.approve";
+        "held_runs.reject": "held_runs.reject";
+        "event_dlq.retry": "event_dlq.retry";
+        "event_dlq.discard": "event_dlq.discard";
+        "registration.disable": "registration.disable";
+        "registration.delete": "registration.delete";
+        "global_workflows.update": "global_workflows.update";
+        "backends.sync": "backends.sync";
+        "backends.sync_one": "backends.sync_one";
+        "backends.test": "backends.test";
+    }> & z.core.$partial, z.ZodBoolean>>;
 }, z.core.$loose>;
 /** Inferred type for orchestrator capabilities. */
 export type OrchCapabilities = z.infer<typeof orchCapabilitiesSchema>;

package/dist/protocol/messages/capabilities.js

@@ -1,4 +1,5 @@
 import "../../chunk-gOLHoazu.js";
+import { dashboardWritePolicyMap } from "../dashboard-write-operations.js";
 import { z } from "zod";
 //#region src/protocol/messages/capabilities.ts
 /**
@@ -21,9 +22,19 @@ const OrchRole = z.enum(["coordinator", "worker"]);
 * Orchestrator-advertised capabilities sent in auth.request.
 * Uses .passthrough() so newer orchestrators sending unknown flags are preserved.
 */
-const orchCapabilitiesSchema = z.object({ 
-/** Orchestrator's role in the cluster (coordinator manages DB/vault, worker is stateless). */
-orchRole: OrchRole.optional() }).passthrough();
+const orchCapabilitiesSchema = z.object({
+	/** Orchestrator's role in the cluster (coordinator manages DB/vault, worker is stateless). */
+	orchRole: OrchRole.optional(),
+	/**
+	* Per-operation dashboard-write policy. Sparse map where each
+	* present key flips one `DashboardWriteOperation` to false. Missing
+	* keys are treated as `true` (permissive default). Sent on auth so
+	* Platform's per-org cache populates immediately; rebroadcast via
+	* the standalone `orch.capabilities.update` message on policy
+	* change (see platform-orchestrator.ts).
+	*/
+	dashboardWrites: dashboardWritePolicyMap.optional()
+}).passthrough();
 /** Default orchestrator capabilities sent in auth.request. */
 const ORCH_CAPABILITIES = Object.freeze({ orchRole: OrchRole.enum.coordinator });
 /**

package/dist/protocol/messages/dashboard.d.ts

@@ -518,6 +518,161 @@ export declare const browserEventLogPayloadChunkSchema: z.ZodObject<{
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
+/** Single DLQ event in the list response. */
+export declare const dashboardEventDlqListItemSchema: z.ZodObject<{
+    id: z.ZodString;
+    eventName: z.ZodString;
+    payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    sourceRepo: z.ZodNullable<z.ZodString>;
+    sourceRoutingKey: z.ZodNullable<z.ZodString>;
+    sourceRunId: z.ZodNullable<z.ZodString>;
+    sourceJobId: z.ZodNullable<z.ZodString>;
+    chainDepth: z.ZodNumber;
+    createdAt: z.ZodString;
+    dlqAt: z.ZodNullable<z.ZodString>;
+    dlqReason: z.ZodNullable<z.ZodString>;
+    attempts: z.ZodNumber;
+    lastError: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+/** Request a paginated list of DLQ events from the orchestrator. */
+export declare const dashboardEventDlqListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    limit: z.ZodOptional<z.ZodNumber>;
+    before: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+declare const dashboardEventDlqListResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.list.response">;
+    requestId: z.ZodString;
+    items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        eventName: z.ZodString;
+        payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        sourceRepo: z.ZodNullable<z.ZodString>;
+        sourceRoutingKey: z.ZodNullable<z.ZodString>;
+        sourceRunId: z.ZodNullable<z.ZodString>;
+        sourceJobId: z.ZodNullable<z.ZodString>;
+        chainDepth: z.ZodNumber;
+        createdAt: z.ZodString;
+        dlqAt: z.ZodNullable<z.ZodString>;
+        dlqReason: z.ZodNullable<z.ZodString>;
+        attempts: z.ZodNumber;
+        lastError: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    nextCursor: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Request the DLQ depth for the sidebar badge. */
+export declare const dashboardEventDlqCountRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.count">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+}, z.core.$strip>;
+declare const dashboardEventDlqCountResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.count.response">;
+    requestId: z.ZodString;
+    total: z.ZodOptional<z.ZodNumber>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Clear DLQ flag + re-publish for retry. */
+export declare const dashboardEventDlqRetryRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.retry">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    eventId: z.ZodString;
+}, z.core.$strip>;
+declare const dashboardEventDlqRetryResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.retry.response">;
+    requestId: z.ZodString;
+    retried: z.ZodOptional<z.ZodBoolean>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** Permanently delete the DLQ row. */
+export declare const dashboardEventDlqDiscardRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.discard">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    eventId: z.ZodString;
+}, z.core.$strip>;
+declare const dashboardEventDlqDiscardResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.discard.response">;
+    requestId: z.ZodString;
+    discarded: z.ZodOptional<z.ZodBoolean>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 /** List all environments for the org. */
 export declare const envListRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.list">;
@@ -2918,6 +3073,98 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     orgId: z.ZodString;
     deliveryId: z.ZodString;
     routingKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    limit: z.ZodOptional<z.ZodNumber>;
+    before: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.count">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.retry">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    eventId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.discard">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    eventId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.global-workflows.get">;
     requestId: z.ZodString;
@@ -3004,6 +3251,11 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }>>;
     actorId: z.ZodOptional<z.ZodString>;
     action: z.ZodOptional<z.ZodEnum<{
+        "event_dlq.retry": "event_dlq.retry";
+        "event_dlq.discard": "event_dlq.discard";
+        "registration.disable": "registration.disable";
+        "registration.delete": "registration.delete";
+        "global_workflows.update": "global_workflows.update";
         "run.detail.read": "run.detail.read";
         "run.payload.read": "run.payload.read";
         "run.orch_logs.read": "run.orch_logs.read";
@@ -3040,8 +3292,6 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         "held_run.approve": "held_run.approve";
         "held_run.reject": "held_run.reject";
         "registration.list.read": "registration.list.read";
-        "registration.disable": "registration.disable";
-        "registration.delete": "registration.delete";
         "diagnostics.read": "diagnostics.read";
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
@@ -3051,12 +3301,12 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         "backend.sync.one": "backend.sync.one";
         "backend.test": "backend.test";
         "global_workflows.get.read": "global_workflows.get.read";
-        "global_workflows.update": "global_workflows.update";
+        "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
+        "cluster_name.update": "cluster_name.update";
         "access_log.list.read": "access_log.list.read";
         "event_dlq.list.read": "event_dlq.list.read";
-        "event_dlq.retry": "event_dlq.retry";
-        "event_dlq.discard": "event_dlq.discard";
         archive_chunk: "archive_chunk";
+        purge_chunk: "purge_chunk";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
         platform_proxy: "platform_proxy";
@@ -3084,6 +3334,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         held_run: "held_run";
         access_log: "access_log";
         event_dlq: "event_dlq";
+        org_settings: "org_settings";
+        cluster_meta: "cluster_meta";
     }>>;
     targetId: z.ZodOptional<z.ZodString>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
@@ -3701,6 +3953,41 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         orchestrator_unavailable: "orchestrator_unavailable";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.list.response">;
+    requestId: z.ZodString;
+    items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        eventName: z.ZodString;
+        payload: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        sourceRepo: z.ZodNullable<z.ZodString>;
+        sourceRoutingKey: z.ZodNullable<z.ZodString>;
+        sourceRunId: z.ZodNullable<z.ZodString>;
+        sourceJobId: z.ZodNullable<z.ZodString>;
+        chainDepth: z.ZodNumber;
+        createdAt: z.ZodString;
+        dlqAt: z.ZodNullable<z.ZodString>;
+        dlqReason: z.ZodNullable<z.ZodString>;
+        attempts: z.ZodNumber;
+        lastError: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    nextCursor: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.count.response">;
+    requestId: z.ZodString;
+    total: z.ZodOptional<z.ZodNumber>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.retry.response">;
+    requestId: z.ZodString;
+    retried: z.ZodOptional<z.ZodBoolean>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.discard.response">;
+    requestId: z.ZodString;
+    discarded: z.ZodOptional<z.ZodBoolean>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.global-workflows.get.response">;
     requestId: z.ZodString;
@@ -3764,6 +4051,11 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         actorEmail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         actorDisplayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         action: z.ZodEnum<{
+            "event_dlq.retry": "event_dlq.retry";
+            "event_dlq.discard": "event_dlq.discard";
+            "registration.disable": "registration.disable";
+            "registration.delete": "registration.delete";
+            "global_workflows.update": "global_workflows.update";
             "run.detail.read": "run.detail.read";
             "run.payload.read": "run.payload.read";
             "run.orch_logs.read": "run.orch_logs.read";
@@ -3800,8 +4092,6 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             "held_run.approve": "held_run.approve";
             "held_run.reject": "held_run.reject";
             "registration.list.read": "registration.list.read";
-            "registration.disable": "registration.disable";
-            "registration.delete": "registration.delete";
             "diagnostics.read": "diagnostics.read";
             "scaler.capacity.read": "scaler.capacity.read";
             "scaler.agents.read": "scaler.agents.read";
@@ -3811,12 +4101,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             "backend.sync.one": "backend.sync.one";
             "backend.test": "backend.test";
             "global_workflows.get.read": "global_workflows.get.read";
-            "global_workflows.update": "global_workflows.update";
+            "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
+            "cluster_name.update": "cluster_name.update";
             "access_log.list.read": "access_log.list.read";
             "event_dlq.list.read": "event_dlq.list.read";
-            "event_dlq.retry": "event_dlq.retry";
-            "event_dlq.discard": "event_dlq.discard";
             archive_chunk: "archive_chunk";
+            purge_chunk: "purge_chunk";
         }>;
         targetType: z.ZodNullable<z.ZodEnum<{
             run: "run";
@@ -3834,6 +4124,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             held_run: "held_run";
             access_log: "access_log";
             event_dlq: "event_dlq";
+            org_settings: "org_settings";
+            cluster_meta: "cluster_meta";
         }>>;
         targetId: z.ZodNullable<z.ZodString>;
         requestId: z.ZodNullable<z.ZodString>;
@@ -3868,6 +4160,15 @@ export type DashboardEventLogDetailResponse = z.infer<typeof dashboardEventLogDe
 export type DashboardEventLogPayloadStreamRequest = z.infer<typeof dashboardEventLogPayloadStreamRequestSchema>;
 export type DashboardEventLogPayloadChunk = z.infer<typeof dashboardEventLogPayloadChunkSchema>;
 export type BrowserEventLogPayloadChunk = z.infer<typeof browserEventLogPayloadChunkSchema>;
+export type DashboardEventDlqListItem = z.infer<typeof dashboardEventDlqListItemSchema>;
+export type DashboardEventDlqListRequest = z.infer<typeof dashboardEventDlqListRequestSchema>;
+export type DashboardEventDlqListResponse = z.infer<typeof dashboardEventDlqListResponseSchema>;
+export type DashboardEventDlqCountRequest = z.infer<typeof dashboardEventDlqCountRequestSchema>;
+export type DashboardEventDlqCountResponse = z.infer<typeof dashboardEventDlqCountResponseSchema>;
+export type DashboardEventDlqRetryRequest = z.infer<typeof dashboardEventDlqRetryRequestSchema>;
+export type DashboardEventDlqRetryResponse = z.infer<typeof dashboardEventDlqRetryResponseSchema>;
+export type DashboardEventDlqDiscardRequest = z.infer<typeof dashboardEventDlqDiscardRequestSchema>;
+export type DashboardEventDlqDiscardResponse = z.infer<typeof dashboardEventDlqDiscardResponseSchema>;
 export type EnvListRequest = z.infer<typeof envListRequestSchema>;
 type EnvListResponse = z.infer<typeof envListResponseSchema>;
 export type EnvGetRequest = z.infer<typeof envGetRequestSchema>;

package/dist/protocol/messages/dashboard.js

@@ -324,6 +324,82 @@ const browserEventLogPayloadChunkSchema = z.object({
 	error: EventLogPayloadStreamError.optional(),
 	totalBytes: z.number().int().min(0).optional()
 });
+/** Single DLQ event in the list response. */
+const dashboardEventDlqListItemSchema = z.object({
+	id: z.string(),
+	eventName: z.string(),
+	payload: z.record(z.string(), z.unknown()),
+	sourceRepo: z.string().nullable(),
+	sourceRoutingKey: z.string().nullable(),
+	sourceRunId: z.string().nullable(),
+	sourceJobId: z.string().nullable(),
+	chainDepth: z.number(),
+	createdAt: z.string(),
+	dlqAt: z.string().nullable(),
+	dlqReason: z.string().nullable(),
+	attempts: z.number(),
+	lastError: z.string().nullable()
+});
+/** Request a paginated list of DLQ events from the orchestrator. */
+const dashboardEventDlqListRequestSchema = z.object({
+	type: z.literal("dashboard.event-dlq.list"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	/** Tenant ID -- the orchestrator scopes by org_id, not routing key. */
+	orgId: z.string(),
+	/** Page size (default 50, max 200). */
+	limit: z.number().optional(),
+	/** Cursor: ISO `dlq_at` of the last row on the previous page. */
+	before: z.string().optional()
+});
+const dashboardEventDlqListResponseSchema = z.object({
+	type: z.literal("dashboard.event-dlq.list.response"),
+	requestId: z.string(),
+	items: z.array(dashboardEventDlqListItemSchema).optional(),
+	nextCursor: z.string().nullable().optional(),
+	error: z.string().optional()
+});
+/** Request the DLQ depth for the sidebar badge. */
+const dashboardEventDlqCountRequestSchema = z.object({
+	type: z.literal("dashboard.event-dlq.count"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	orgId: z.string()
+});
+const dashboardEventDlqCountResponseSchema = z.object({
+	type: z.literal("dashboard.event-dlq.count.response"),
+	requestId: z.string(),
+	total: z.number().optional(),
+	error: z.string().optional()
+});
+/** Clear DLQ flag + re-publish for retry. */
+const dashboardEventDlqRetryRequestSchema = z.object({
+	type: z.literal("dashboard.event-dlq.retry"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	orgId: z.string(),
+	eventId: z.string()
+});
+const dashboardEventDlqRetryResponseSchema = z.object({
+	type: z.literal("dashboard.event-dlq.retry.response"),
+	requestId: z.string(),
+	retried: z.boolean().optional(),
+	error: z.string().optional()
+});
+/** Permanently delete the DLQ row. */
+const dashboardEventDlqDiscardRequestSchema = z.object({
+	type: z.literal("dashboard.event-dlq.discard"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	orgId: z.string(),
+	eventId: z.string()
+});
+const dashboardEventDlqDiscardResponseSchema = z.object({
+	type: z.literal("dashboard.event-dlq.discard.response"),
+	requestId: z.string(),
+	discarded: z.boolean().optional(),
+	error: z.string().optional()
+});
 const environmentTypeSchema = z.enum(["fixed", "glob"]);
 const concurrencyStrategySchema = z.enum(["queue", "cancel-pending"]);
 /** List all environments for the org. */
@@ -1110,6 +1186,10 @@ const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 	dashboardEventLogListRequestSchema,
 	dashboardEventLogDetailRequestSchema,
 	dashboardEventLogPayloadStreamRequestSchema,
+	dashboardEventDlqListRequestSchema,
+	dashboardEventDlqCountRequestSchema,
+	dashboardEventDlqRetryRequestSchema,
+	dashboardEventDlqDiscardRequestSchema,
 	globalWorkflowsGetRequestSchema,
 	globalWorkflowsUpdateRequestSchema,
 	dashboardAccessLogListRequestSchema
@@ -1160,6 +1240,10 @@ const dashboardOrchToPlatformSchema = z.discriminatedUnion("type", [
 	dashboardEventLogListResponseSchema,
 	dashboardEventLogDetailResponseSchema,
 	dashboardEventLogPayloadChunkSchema,
+	dashboardEventDlqListResponseSchema,
+	dashboardEventDlqCountResponseSchema,
+	dashboardEventDlqRetryResponseSchema,
+	dashboardEventDlqDiscardResponseSchema,
 	globalWorkflowsGetResponseSchema,
 	globalWorkflowsUpdateResponseSchema,
 	dashboardAccessLogListResponseSchema
@@ -1232,6 +1316,6 @@ const orgMemberSchema = z.object({
 /** Response for org members list endpoint. */
 const memberListResponseSchema = z.object({ members: z.array(orgMemberSchema) });
 //#endregion
-export { EventLogPayloadStreamError, HeldRunQueueType, HeldRunStatus, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runRerunRequestSchema, trustPolicyResponseSchema };
+export { EventLogPayloadStreamError, HeldRunQueueType, HeldRunStatus, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runRerunRequestSchema, trustPolicyResponseSchema };
 
 //# sourceMappingURL=dashboard.js.map