@kici-dev/engine 0.1.20 → 0.1.22

package/dist/labels-match.d.ts

@@ -24,6 +24,58 @@ export declare function compileRegexMatcher(m: {
 export declare function matcherMatches(m: LabelMatcher, label: string): boolean;
 /** Whether some label in the set satisfies the matcher. */
 export declare function matcherSatisfiedBy(m: LabelMatcher, labels: ReadonlySet<string>): boolean;
+export declare const HostTargetValue: z.ZodObject<{
+    include: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>;
+    exclude: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"exact">;
+        value: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"regex">;
+        source: z.ZodString;
+        flags: z.ZodString;
+    }, z.core.$strip>], "kind">>;
+}, z.core.$strip>;
+export type HostTargetValue = z.infer<typeof HostTargetValue>;
+/**
+ * A runtime host narrowing (`kici run --target`): each repeated value is an AND
+ * set; values AND-combine. Narrow-only — applied as a post-filter over the
+ * runsOnAll-matched roster. `allowEmpty` selects the zero-host outcome: skip
+ * (true) vs fail (false).
+ */
+export declare const HostTargetSelector: z.ZodObject<{
+    values: z.ZodArray<z.ZodObject<{
+        include: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"exact">;
+            value: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"regex">;
+            source: z.ZodString;
+            flags: z.ZodString;
+        }, z.core.$strip>], "kind">>;
+        exclude: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"exact">;
+            value: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"regex">;
+            source: z.ZodString;
+            flags: z.ZodString;
+        }, z.core.$strip>], "kind">>;
+    }, z.core.$strip>>;
+    allowEmpty: z.ZodBoolean;
+}, z.core.$strip>;
+export type HostTargetSelector = z.infer<typeof HostTargetSelector>;
+/**
+ * True iff the host's labels satisfy EVERY target value: all of a value's
+ * include matchers match and none of its exclude matchers match.
+ */
+export declare function hostSatisfiesTarget(labels: ReadonlySet<string>, target: HostTargetSelector): boolean;
 /** Split a matcher list into exact label strings and the remaining regex matchers. */
 export declare function partitionMatchers(ms: readonly LabelMatcher[]): {
     exact: string[];

package/dist/labels-match.js

@@ -38,18 +38,40 @@ function matcherSatisfiedBy(m, labels) {
 	for (const label of labels) if (re.test(label)) return true;
 	return false;
 }
+const HostTargetValue = z.object({
+	include: z.array(LabelMatcher),
+	exclude: z.array(LabelMatcher)
+});
+/**
+* A runtime host narrowing (`kici run --target`): each repeated value is an AND
+* set; values AND-combine. Narrow-only — applied as a post-filter over the
+* runsOnAll-matched roster. `allowEmpty` selects the zero-host outcome: skip
+* (true) vs fail (false).
+*/
+const HostTargetSelector = z.object({
+	values: z.array(HostTargetValue).min(1),
+	allowEmpty: z.boolean()
+});
+/**
+* True iff the host's labels satisfy EVERY target value: all of a value's
+* include matchers match and none of its exclude matchers match.
+*/
+function hostSatisfiesTarget(labels, target) {
+	return target.values.every((v) => v.include.every((m) => matcherSatisfiedBy(m, labels)) && !v.exclude.some((m) => matcherSatisfiedBy(m, labels)));
+}
 /** Split a matcher list into exact label strings and the remaining regex matchers. */
 function partitionMatchers(ms) {
 	const exact = [];
 	const regex = [];
 	for (const m of ms) if (m.kind === "exact") exact.push(m.value);
-	else regex.push(m);
+	else if (m.kind === "regex") regex.push(m);
+	else throw new Error(`partitionMatchers: invalid label matcher ${JSON.stringify(m)} — expected { kind: 'exact', value } or { kind: 'regex', source, flags }. The lock file is likely stale or compiled by an older engine — recompile with \`kici compile\`.`);
 	return {
 		exact,
 		regex
 	};
 }
 //#endregion
-export { LabelMatcher, compileRegexMatcher, matcherMatches, matcherSatisfiedBy, partitionMatchers };
+export { HostTargetSelector, HostTargetValue, LabelMatcher, compileRegexMatcher, hostSatisfiesTarget, matcherMatches, matcherSatisfiedBy, partitionMatchers };
 
 //# sourceMappingURL=labels-match.js.map

package/dist/protocol/dashboard-write-operations.d.ts

@@ -44,6 +44,8 @@ export declare const DashboardWriteOperation: z.ZodEnum<{
     "backends.sync": "backends.sync";
     "backends.sync_one": "backends.sync_one";
     "backends.test": "backends.test";
+    "fleet.host.declare": "fleet.host.declare";
+    "fleet.host.remove": "fleet.host.remove";
 }>;
 export type DashboardWriteOperation = z.infer<typeof DashboardWriteOperation>;
 /** Stable list of every operation in enum-declaration order. */
@@ -57,6 +59,7 @@ export declare const DashboardWriteCategory: z.ZodEnum<{
     DLQ: "DLQ";
     Registrations: "Registrations";
     Topology: "Topology";
+    Fleet: "Fleet";
 }>;
 export type DashboardWriteCategory = z.infer<typeof DashboardWriteCategory>;
 export declare const DashboardWriteSensitivity: z.ZodEnum<{
@@ -130,6 +133,8 @@ export declare const dashboardWritePolicyMap: z.ZodRecord<z.ZodEnum<{
     "backends.sync": "backends.sync";
     "backends.sync_one": "backends.sync_one";
     "backends.test": "backends.test";
+    "fleet.host.declare": "fleet.host.declare";
+    "fleet.host.remove": "fleet.host.remove";
 }> & z.core.$partial, z.ZodBoolean>;
 export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.ZodEnum<{
     "secrets.set": "secrets.set";
@@ -156,6 +161,8 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
     "backends.sync": "backends.sync";
     "backends.sync_one": "backends.sync_one";
     "backends.test": "backends.test";
+    "fleet.host.declare": "fleet.host.declare";
+    "fleet.host.remove": "fleet.host.remove";
 }> & z.core.$partial, z.ZodBoolean>>;
 /**
  * Resolve the effective state of an operation given a (possibly sparse)
@@ -164,7 +171,7 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
 export declare function isDashboardWriteOperationEnabled(policy: DashboardWritePolicyMap | null | undefined, op: DashboardWriteOperation): boolean;
 /**
  * Expand a (possibly sparse) policy map into the full effective state
- * for all 24 operations. Operations the policy doesn't mention come
+ * for all 26 operations. Operations the policy doesn't mention come
  * back as `true` (permissive). Used by the orch HTTP admin response,
  * the WS `orch.capabilities` broadcast, and the dashboard's policy
  * page so consumers see the full picture, not the sparse storage shape.

package/dist/protocol/dashboard-write-operations.js

@@ -45,7 +45,9 @@ const DashboardWriteOperation = z.enum([
 	"global_workflows.update",
 	"backends.sync",
 	"backends.sync_one",
-	"backends.test"
+	"backends.test",
+	"fleet.host.declare",
+	"fleet.host.remove"
 ]);
 /** Stable list of every operation in enum-declaration order. */
 const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
@@ -72,7 +74,9 @@ const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
 	"global_workflows.update",
 	"backends.sync",
 	"backends.sync_one",
-	"backends.test"
+	"backends.test",
+	"fleet.host.declare",
+	"fleet.host.remove"
 ]);
 const DashboardWriteCategory = z.enum([
 	"Secrets",
@@ -82,7 +86,8 @@ const DashboardWriteCategory = z.enum([
 	"Held runs",
 	"DLQ",
 	"Registrations",
-	"Topology"
+	"Topology",
+	"Fleet"
 ]);
 const DashboardWriteSensitivity = z.enum([
 	"plaintext",
@@ -281,6 +286,22 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
 		label: "Test scaler backend",
 		sensitivity: "dispatch",
 		cliEquivalent: "kici-admin backend test"
+	},
+	{
+		name: "fleet.host.declare",
+		wireMessageType: "dashboard.fleet.host.declare",
+		category: "Fleet",
+		label: "Declare a static host",
+		sensitivity: "dispatch",
+		cliEquivalent: "kici-admin host declare"
+	},
+	{
+		name: "fleet.host.remove",
+		wireMessageType: "dashboard.fleet.host.remove",
+		category: "Fleet",
+		label: "Remove a host from the roster",
+		sensitivity: "dispatch",
+		cliEquivalent: "kici-admin host remove"
 	}
 ]);
 /** O(1) lookup of a descriptor by operation name. */
@@ -318,7 +339,7 @@ function isDashboardWriteOperationEnabled(policy, op) {
 }
 /**
 * Expand a (possibly sparse) policy map into the full effective state
-* for all 24 operations. Operations the policy doesn't mention come
+* for all 26 operations. Operations the policy doesn't mention come
 * back as `true` (permissive). Used by the orch HTTP admin response,
 * the WS `orch.capabilities` broadcast, and the dashboard's policy
 * page so consumers see the full picture, not the sparse storage shape.

package/dist/protocol/messages/access-log.d.ts

@@ -39,6 +39,7 @@ export declare const AccessLogTargetType: z.ZodEnum<{
     backend: "backend";
     diagnostics: "diagnostics";
     scaler: "scaler";
+    fleet: "fleet";
     held_run: "held_run";
     access_log: "access_log";
     event_dlq: "event_dlq";
@@ -56,6 +57,8 @@ export declare const AccessLogAction: z.ZodEnum<{
     "registration.disable": "registration.disable";
     "registration.delete": "registration.delete";
     "global_workflows.update": "global_workflows.update";
+    "fleet.host.declare": "fleet.host.declare";
+    "fleet.host.remove": "fleet.host.remove";
     "run.detail.read": "run.detail.read";
     "runs.list.read": "runs.list.read";
     "runs.filters.read": "runs.filters.read";
@@ -95,6 +98,7 @@ export declare const AccessLogAction: z.ZodEnum<{
     "environment.history.read": "environment.history.read";
     "held_run.list.read": "held_run.list.read";
     "held_run.approve": "held_run.approve";
+    "held_run.auto_approve": "held_run.auto_approve";
     "held_run.reject": "held_run.reject";
     "held_run.request": "held_run.request";
     "held_run.expire": "held_run.expire";
@@ -102,6 +106,7 @@ export declare const AccessLogAction: z.ZodEnum<{
     "diagnostics.read": "diagnostics.read";
     "scaler.capacity.read": "scaler.capacity.read";
     "scaler.agents.read": "scaler.agents.read";
+    "fleet.read": "fleet.read";
     "backend.list.read": "backend.list.read";
     "backend.get.read": "backend.get.read";
     "backend.sync": "backend.sync";
@@ -144,6 +149,8 @@ export declare const accessLogItemSchema: z.ZodObject<{
         "registration.disable": "registration.disable";
         "registration.delete": "registration.delete";
         "global_workflows.update": "global_workflows.update";
+        "fleet.host.declare": "fleet.host.declare";
+        "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
@@ -183,6 +190,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
         "environment.history.read": "environment.history.read";
         "held_run.list.read": "held_run.list.read";
         "held_run.approve": "held_run.approve";
+        "held_run.auto_approve": "held_run.auto_approve";
         "held_run.reject": "held_run.reject";
         "held_run.request": "held_run.request";
         "held_run.expire": "held_run.expire";
@@ -190,6 +198,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
         "diagnostics.read": "diagnostics.read";
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
+        "fleet.read": "fleet.read";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -216,6 +225,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
         backend: "backend";
         diagnostics: "diagnostics";
         scaler: "scaler";
+        fleet: "fleet";
         held_run: "held_run";
         access_log: "access_log";
         event_dlq: "event_dlq";
@@ -254,6 +264,8 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         "registration.disable": "registration.disable";
         "registration.delete": "registration.delete";
         "global_workflows.update": "global_workflows.update";
+        "fleet.host.declare": "fleet.host.declare";
+        "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
@@ -293,6 +305,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         "environment.history.read": "environment.history.read";
         "held_run.list.read": "held_run.list.read";
         "held_run.approve": "held_run.approve";
+        "held_run.auto_approve": "held_run.auto_approve";
         "held_run.reject": "held_run.reject";
         "held_run.request": "held_run.request";
         "held_run.expire": "held_run.expire";
@@ -300,6 +313,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         "diagnostics.read": "diagnostics.read";
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
+        "fleet.read": "fleet.read";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -336,6 +350,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         backend: "backend";
         diagnostics: "diagnostics";
         scaler: "scaler";
+        fleet: "fleet";
         held_run: "held_run";
         access_log: "access_log";
         event_dlq: "event_dlq";
@@ -386,6 +401,8 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         "registration.disable": "registration.disable";
         "registration.delete": "registration.delete";
         "global_workflows.update": "global_workflows.update";
+        "fleet.host.declare": "fleet.host.declare";
+        "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
@@ -425,6 +442,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         "environment.history.read": "environment.history.read";
         "held_run.list.read": "held_run.list.read";
         "held_run.approve": "held_run.approve";
+        "held_run.auto_approve": "held_run.auto_approve";
         "held_run.reject": "held_run.reject";
         "held_run.request": "held_run.request";
         "held_run.expire": "held_run.expire";
@@ -432,6 +450,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         "diagnostics.read": "diagnostics.read";
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
+        "fleet.read": "fleet.read";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -468,6 +487,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         backend: "backend";
         diagnostics: "diagnostics";
         scaler: "scaler";
+        fleet: "fleet";
         held_run: "held_run";
         access_log: "access_log";
         event_dlq: "event_dlq";
@@ -506,6 +526,8 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             "registration.disable": "registration.disable";
             "registration.delete": "registration.delete";
             "global_workflows.update": "global_workflows.update";
+            "fleet.host.declare": "fleet.host.declare";
+            "fleet.host.remove": "fleet.host.remove";
             "run.detail.read": "run.detail.read";
             "runs.list.read": "runs.list.read";
             "runs.filters.read": "runs.filters.read";
@@ -545,6 +567,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             "environment.history.read": "environment.history.read";
             "held_run.list.read": "held_run.list.read";
             "held_run.approve": "held_run.approve";
+            "held_run.auto_approve": "held_run.auto_approve";
             "held_run.reject": "held_run.reject";
             "held_run.request": "held_run.request";
             "held_run.expire": "held_run.expire";
@@ -552,6 +575,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             "diagnostics.read": "diagnostics.read";
             "scaler.capacity.read": "scaler.capacity.read";
             "scaler.agents.read": "scaler.agents.read";
+            "fleet.read": "fleet.read";
             "backend.list.read": "backend.list.read";
             "backend.get.read": "backend.get.read";
             "backend.sync": "backend.sync";
@@ -578,6 +602,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             backend: "backend";
             diagnostics: "diagnostics";
             scaler: "scaler";
+            fleet: "fleet";
             held_run: "held_run";
             access_log: "access_log";
             event_dlq: "event_dlq";

package/dist/protocol/messages/access-log.js

@@ -40,6 +40,7 @@ const AccessLogTargetType = z.enum([
 	"backend",
 	"diagnostics",
 	"scaler",
+	"fleet",
 	"held_run",
 	"access_log",
 	"event_dlq",
@@ -90,6 +91,7 @@ const AccessLogAction = z.enum([
 	"environment.history.read",
 	"held_run.list.read",
 	"held_run.approve",
+	"held_run.auto_approve",
 	"held_run.reject",
 	"held_run.request",
 	"held_run.expire",
@@ -99,6 +101,9 @@ const AccessLogAction = z.enum([
 	"diagnostics.read",
 	"scaler.capacity.read",
 	"scaler.agents.read",
+	"fleet.read",
+	"fleet.host.declare",
+	"fleet.host.remove",
 	"backend.list.read",
 	"backend.get.read",
 	"backend.sync",

package/dist/protocol/messages/auth.d.ts

@@ -34,6 +34,8 @@ export declare const authRequestSchema: z.ZodObject<{
             "backends.sync": "backends.sync";
             "backends.sync_one": "backends.sync_one";
             "backends.test": "backends.test";
+            "fleet.host.declare": "fleet.host.declare";
+            "fleet.host.remove": "fleet.host.remove";
         }> & z.core.$partial, z.ZodBoolean>>;
     }, z.core.$loose>>;
 }, z.core.$strip>;

package/dist/protocol/messages/capabilities.d.ts

@@ -53,6 +53,8 @@ export declare const orchCapabilitiesSchema: z.ZodObject<{
         "backends.sync": "backends.sync";
         "backends.sync_one": "backends.sync_one";
         "backends.test": "backends.test";
+        "fleet.host.declare": "fleet.host.declare";
+        "fleet.host.remove": "fleet.host.remove";
     }> & z.core.$partial, z.ZodBoolean>>;
 }, z.core.$loose>;
 /** Inferred type for orchestrator capabilities. */