@kici-dev/engine 0.1.20 → 0.1.22

package/dist/protocol/messages/peer.d.ts

@@ -214,6 +214,7 @@ export declare const jobProgressSchema: z.ZodObject<{
     stepIndex: z.ZodNumber;
     stepName: z.ZodString;
     state: z.ZodEnum<{
+        skipped: "skipped";
         success: "success";
         pending: "pending";
         running: "running";
@@ -222,13 +223,36 @@ export declare const jobProgressSchema: z.ZodObject<{
         cancelling: "cancelling";
         queued: "queued";
         recovering: "recovering";
-        skipped: "skipped";
         timed_out_stale: "timed_out_stale";
         drift_dropped: "drift_dropped";
     }>;
     timestamp: z.ZodNumber;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strip>;
+/**
+ * Acknowledgement sent coordinator -> worker once the coordinator has applied
+ * a terminal `job.progress` (kind='job') to its run/job DB rows. The worker
+ * uses it to prune the matching record from its durable outbox. Carries
+ * `state` for debuggability; `(runId, jobId)` is the dedup key.
+ */
+export declare const jobProgressAckSchema: z.ZodObject<{
+    type: z.ZodLiteral<"job.progress.ack">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    state: z.ZodEnum<{
+        skipped: "skipped";
+        success: "success";
+        pending: "pending";
+        running: "running";
+        failed: "failed";
+        cancelled: "cancelled";
+        cancelling: "cancelling";
+        queued: "queued";
+        recovering: "recovering";
+        timed_out_stale: "timed_out_stale";
+        drift_dropped: "drift_dropped";
+    }>;
+}, z.core.$strip>;
 /** Request to cancel a job on a peer orchestrator. */
 export declare const peerJobCancelSchema: z.ZodObject<{
     type: z.ZodLiteral<"peer.job.cancel">;
@@ -555,6 +579,7 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
     stepIndex: z.ZodNumber;
     stepName: z.ZodString;
     state: z.ZodEnum<{
+        skipped: "skipped";
         success: "success";
         pending: "pending";
         running: "running";
@@ -563,12 +588,28 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
         cancelling: "cancelling";
         queued: "queued";
         recovering: "recovering";
-        skipped: "skipped";
         timed_out_stale: "timed_out_stale";
         drift_dropped: "drift_dropped";
     }>;
     timestamp: z.ZodNumber;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"job.progress.ack">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    state: z.ZodEnum<{
+        skipped: "skipped";
+        success: "success";
+        pending: "pending";
+        running: "running";
+        failed: "failed";
+        cancelled: "cancelled";
+        cancelling: "cancelling";
+        queued: "queued";
+        recovering: "recovering";
+        timed_out_stale: "timed_out_stale";
+        drift_dropped: "drift_dropped";
+    }>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"peer.job.cancel">;
     runId: z.ZodString;
@@ -839,6 +880,7 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
     stepIndex: z.ZodNumber;
     stepName: z.ZodString;
     state: z.ZodEnum<{
+        skipped: "skipped";
         success: "success";
         pending: "pending";
         running: "running";
@@ -847,12 +889,28 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
         cancelling: "cancelling";
         queued: "queued";
         recovering: "recovering";
-        skipped: "skipped";
         timed_out_stale: "timed_out_stale";
         drift_dropped: "drift_dropped";
     }>;
     timestamp: z.ZodNumber;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"job.progress.ack">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    state: z.ZodEnum<{
+        skipped: "skipped";
+        success: "success";
+        pending: "pending";
+        running: "running";
+        failed: "failed";
+        cancelled: "cancelled";
+        cancelling: "cancelling";
+        queued: "queued";
+        recovering: "recovering";
+        timed_out_stale: "timed_out_stale";
+        drift_dropped: "drift_dropped";
+    }>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"peer.job.cancel">;
     runId: z.ZodString;
@@ -964,6 +1022,7 @@ export type ScalerCapacitySummary = z.infer<typeof scalerCapacitySummarySchema>;
 export type PeerHeartbeat = z.infer<typeof peerHeartbeatSchema>;
 export type JobReroute = z.infer<typeof jobRerouteSchema>;
 export type JobProgress = z.infer<typeof jobProgressSchema>;
+export type JobProgressAck = z.infer<typeof jobProgressAckSchema>;
 export type PeerScalerEvent = z.infer<typeof peerScalerEventSchema>;
 export type PeerJobCancel = z.infer<typeof peerJobCancelSchema>;
 export type RaftVoteRequest = z.infer<typeof raftVoteRequestSchema>;

package/dist/protocol/messages/peer.js

@@ -1,7 +1,7 @@
 import "../../chunk-BTugEXQM.js";
 import { ExecutionJobStatus } from "./execution-status.js";
-import { ScalerEventType } from "./scaler-event.js";
 import { LabelMatcher } from "../../labels-match.js";
+import { ScalerEventType } from "./scaler-event.js";
 import { z } from "zod";
 //#region src/protocol/messages/peer.ts
 /** Agent summary included in peer heartbeat and auth response messages. */
@@ -242,6 +242,18 @@ const jobProgressSchema = z.object({
 	timestamp: z.number(),
 	data: z.record(z.string(), z.unknown()).optional()
 });
+/**
+* Acknowledgement sent coordinator -> worker once the coordinator has applied
+* a terminal `job.progress` (kind='job') to its run/job DB rows. The worker
+* uses it to prune the matching record from its durable outbox. Carries
+* `state` for debuggability; `(runId, jobId)` is the dedup key.
+*/
+const jobProgressAckSchema = z.object({
+	type: z.literal("job.progress.ack"),
+	runId: z.string(),
+	jobId: z.string(),
+	state: ExecutionJobStatus
+});
 /** Request to cancel a job on a peer orchestrator. */
 const peerJobCancelSchema = z.object({
 	type: z.literal("peer.job.cancel"),
@@ -408,6 +420,7 @@ const peerToPeerMessageSchema = z.discriminatedUnion("type", [
 	jobRerouteSchema,
 	jobRerouteAckSchema,
 	jobProgressSchema,
+	jobProgressAckSchema,
 	peerJobCancelSchema,
 	raftVoteRequestSchema,
 	raftVoteResponseSchema,
@@ -434,6 +447,7 @@ const peerFromPeerMessageSchema = z.discriminatedUnion("type", [
 	jobRerouteSchema,
 	jobRerouteAckSchema,
 	jobProgressSchema,
+	jobProgressAckSchema,
 	peerJobCancelSchema,
 	raftVoteRequestSchema,
 	raftVoteResponseSchema,
@@ -451,6 +465,6 @@ const peerFromPeerMessageSchema = z.discriminatedUnion("type", [
 	peerScalerEventSchema
 ]);
 //#endregion
-export { fleetSelectionSchema, jobProgressSchema, jobRerouteAckSchema, jobRerouteSchema, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerLogsCollectChunkSchema, peerLogsCollectErrorSchema, peerLogsCollectRequestSchema, peerScalerEventSchema, peerToPeerMessageSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema };
+export { fleetSelectionSchema, jobProgressAckSchema, jobProgressSchema, jobRerouteAckSchema, jobRerouteSchema, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerLogsCollectChunkSchema, peerLogsCollectErrorSchema, peerLogsCollectRequestSchema, peerScalerEventSchema, peerToPeerMessageSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema };
 
 //# sourceMappingURL=peer.js.map

package/dist/protocol/messages/platform-orchestrator.d.ts

@@ -314,6 +314,8 @@ export declare const orchCapabilitiesUpdateSchema: z.ZodObject<{
             "backends.sync": "backends.sync";
             "backends.sync_one": "backends.sync_one";
             "backends.test": "backends.test";
+            "fleet.host.declare": "fleet.host.declare";
+            "fleet.host.remove": "fleet.host.remove";
         }> & z.core.$partial, z.ZodBoolean>>;
     }, z.core.$loose>;
 }, z.core.$strip>;
@@ -1294,6 +1296,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     heldRunId: z.ZodString;
+    autoApprove: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.held-runs.reject">;
     requestId: z.ZodString;
@@ -1413,6 +1416,123 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     includeAgents: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.hosts">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.host">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    agentId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.preview">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    workflowName: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.host.declare">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    agentId: z.ZodString;
+    labels: z.ZodArray<z.ZodString>;
+    hostname: z.ZodOptional<z.ZodString>;
+    properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.host.remove">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    agentId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.scaler.capacity">;
     requestId: z.ZodString;
@@ -1849,6 +1969,8 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "registration.disable": "registration.disable";
         "registration.delete": "registration.delete";
         "global_workflows.update": "global_workflows.update";
+        "fleet.host.declare": "fleet.host.declare";
+        "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
@@ -1888,6 +2010,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "environment.history.read": "environment.history.read";
         "held_run.list.read": "held_run.list.read";
         "held_run.approve": "held_run.approve";
+        "held_run.auto_approve": "held_run.auto_approve";
         "held_run.reject": "held_run.reject";
         "held_run.request": "held_run.request";
         "held_run.expire": "held_run.expire";
@@ -1895,6 +2018,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "diagnostics.read": "diagnostics.read";
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
+        "fleet.read": "fleet.read";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -1931,6 +2055,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         backend: "backend";
         diagnostics: "diagnostics";
         scaler: "scaler";
+        fleet: "fleet";
         held_run: "held_run";
         access_log: "access_log";
         event_dlq: "event_dlq";
@@ -2006,6 +2131,32 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     cliPublicKey: z.ZodOptional<z.ZodString>;
     inlineLockFile: z.ZodOptional<z.ZodString>;
     fullRepo: z.ZodOptional<z.ZodBoolean>;
+    checkMode: z.ZodOptional<z.ZodEnum<{
+        apply: "apply";
+        check: "check";
+        "check-fail-on-drift": "check-fail-on-drift";
+    }>>;
+    target: z.ZodOptional<z.ZodObject<{
+        values: z.ZodArray<z.ZodObject<{
+            include: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"exact">;
+                value: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"regex">;
+                source: z.ZodString;
+                flags: z.ZodString;
+            }, z.core.$strip>], "kind">>;
+            exclude: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"exact">;
+                value: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"regex">;
+                source: z.ZodString;
+                flags: z.ZodString;
+            }, z.core.$strip>], "kind">>;
+        }, z.core.$strip>>;
+        allowEmpty: z.ZodBoolean;
+    }, z.core.$strip>>;
     secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     encryptedSecrets: z.ZodOptional<z.ZodString>;
     encryptedSecretsKey: z.ZodOptional<z.ZodString>;
@@ -2175,10 +2326,10 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
     stepIndex: z.ZodNumber;
     stepName: z.ZodString;
     state: z.ZodEnum<{
+        skipped: "skipped";
         success: "success";
         running: "running";
         failed: "failed";
-        skipped: "skipped";
     }>;
     timestamp: z.ZodNumber;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -2190,6 +2341,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
     jobId: z.ZodString;
     jobName: z.ZodString;
     status: z.ZodEnum<{
+        skipped: "skipped";
         success: "success";
         pending: "pending";
         running: "running";
@@ -2198,7 +2350,6 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
         cancelling: "cancelling";
         queued: "queued";
         recovering: "recovering";
-        skipped: "skipped";
         timed_out_stale: "timed_out_stale";
         drift_dropped: "drift_dropped";
     }>;
@@ -2304,6 +2455,8 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             "backends.sync": "backends.sync";
             "backends.sync_one": "backends.sync_one";
             "backends.test": "backends.test";
+            "fleet.host.declare": "fleet.host.declare";
+            "fleet.host.remove": "fleet.host.remove";
         }> & z.core.$partial, z.ZodBoolean>>;
     }, z.core.$loose>;
 }, z.core.$strip>, z.ZodObject<{
@@ -2324,6 +2477,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             universal_git: "universal_git";
             local: "local";
         }>;
+        slug: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     instanceId: z.ZodOptional<z.ZodString>;
     clusterName: z.ZodOptional<z.ZodString>;
@@ -2336,6 +2490,20 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
         independent: "independent";
     }>>;
     scalerBackends: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    deployment: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodEnum<{
+            unknown: "unknown";
+            systemd: "systemd";
+            launchd: "launchd";
+            windows: "windows";
+            compose: "compose";
+        }>;
+        containerName: z.ZodOptional<z.ZodString>;
+        containerRuntime: z.ZodOptional<z.ZodEnum<{
+            podman: "podman";
+            docker: "docker";
+        }>>;
+    }, z.core.$strip>>;
     s3LogAccess: z.ZodOptional<z.ZodBoolean>;
     queueTimeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
@@ -2383,6 +2551,8 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             "backends.sync": "backends.sync";
             "backends.sync_one": "backends.sync_one";
             "backends.test": "backends.test";
+            "fleet.host.declare": "fleet.host.declare";
+            "fleet.host.remove": "fleet.host.remove";
         }> & z.core.$partial, z.ZodBoolean>>;
     }, z.core.$loose>>;
 }, z.core.$strip>, z.ZodObject<{

package/dist/protocol/messages/source-registration.d.ts

@@ -56,6 +56,7 @@ export declare const sourceRegistrationSchema: z.ZodObject<{
             universal_git: "universal_git";
             local: "local";
         }>;
+        slug: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     instanceId: z.ZodOptional<z.ZodString>;
     clusterName: z.ZodOptional<z.ZodString>;
@@ -68,6 +69,20 @@ export declare const sourceRegistrationSchema: z.ZodObject<{
         independent: "independent";
     }>>;
     scalerBackends: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    deployment: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodEnum<{
+            unknown: "unknown";
+            systemd: "systemd";
+            launchd: "launchd";
+            windows: "windows";
+            compose: "compose";
+        }>;
+        containerName: z.ZodOptional<z.ZodString>;
+        containerRuntime: z.ZodOptional<z.ZodEnum<{
+            podman: "podman";
+            docker: "docker";
+        }>>;
+    }, z.core.$strip>>;
     s3LogAccess: z.ZodOptional<z.ZodBoolean>;
     queueTimeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;

package/dist/protocol/messages/source-registration.js

@@ -1,4 +1,5 @@
 import "../../chunk-BTugEXQM.js";
+import { DeploymentIdentitySchema } from "./deployment-identity.js";
 import { z } from "zod";
 //#region src/protocol/messages/source-registration.ts
 /**
@@ -54,7 +55,15 @@ const sourceRegistrationSchema = z.object({
 		* Fine-grained source subtype. See {@link SourceSubtype} for the full
 		* mapping. Required — pre-release, no backward-compat shims.
 		*/
-		subtype: SourceSubtype
+		subtype: SourceSubtype,
+		/**
+		* GitHub App slug (the URL-safe identifier GitHub assigns, e.g.
+		* `my-kici-app`). Only set for GitHub-App sources, where GitHub is the
+		* source of truth for both the display `name` and the `slug`. Optional —
+		* generic / universal-git / local sources have no slug, and a GitHub
+		* source whose identity fetch hasn't run yet leaves it unset.
+		*/
+		slug: z.string().min(1).optional()
 	})),
 	/** Orchestrator cluster instance ID for peer correlation. */
 	instanceId: z.string().optional(),
@@ -91,6 +100,13 @@ const sourceRegistrationSchema = z.object({
 	]).optional(),
 	/** Scaler backends configured on this orchestrator (e.g. ["container", "firecracker"]). */
 	scalerBackends: z.array(z.string()).optional(),
+	/**
+	* How the orchestrator process itself was deployed (systemd/launchd/windows/
+	* compose/unknown), used by the dashboard to build the correct kici-admin
+	* invocation. Optional: older orchestrators that haven't been redeployed don't
+	* publish it, in which case the dashboard treats the shape as `unknown`.
+	*/
+	deployment: DeploymentIdentitySchema.optional(),
 	/** Whether this orchestrator has S3 log storage configured. Used for multi-orch pool validation. */
 	s3LogAccess: z.boolean().optional(),
 	/** Queue timeout in ms. Platform uses this (with margin) for safety-net GC of stale queued jobs. */

package/dist/trigger/types.d.ts

@@ -20,11 +20,12 @@ import { z } from 'zod';
 import type { ProviderType } from '../provider/types.js';
 import type { ApproverClause } from '../approval/types.js';
 import { LabelMatcher } from '../labels-match.js';
+import { ExecutionJobStatus } from '../protocol/messages/execution-status.js';
 /** Schema version - increment on breaking changes */
-export declare const SCHEMA_VERSION: 20;
+export declare const SCHEMA_VERSION: 22;
 /**
  * Normalized approval config carried in the lock file. Produced by the compiler
- * from an SDK `requireApproval` at any of the three levels; consumed by the
+ * from an SDK `approval` at any of the three levels; consumed by the
  * orchestrator dispatch gate (and the agent step round-trip for step scope).
  */
 export interface LockApproval {
@@ -34,6 +35,11 @@ export interface LockApproval {
     readonly reason?: string;
     /** Per-gate expiry override (seconds); falls back to the org default. */
     readonly timeoutSeconds?: number;
+    /**
+     * When the gate fires. `always` (default) gates before the element; `drift`
+     * gates between a step's check and run on detected drift (step scope only).
+     */
+    readonly when: 'always' | 'drift';
 }
 /**
  * Source file reference with meaningful path.
@@ -352,38 +358,84 @@ export interface LockInlineValue {
 /** Type guard for inline expression values */
 export declare function isLockInlineValue(value: unknown): value is LockInlineValue;
 /**
- * Per-edge failure policy for a `needs` dependency: `skip` propagates an
- * upstream failure to the downstream job (default), `run` runs the downstream
- * job regardless of the upstream outcome. Single source of truth for this
- * value across lock-file schemas and protocol messages.
+ * Author-facing keyword sugar for a `needs` edge's run condition. Each keyword
+ * resolves (at compile time) to a set of upstream terminal statuses; the
+ * downstream edge is dispatch-satisfied when the upstream's terminal status is
+ * a member of that set.
  */
-export declare const IfFailedPolicy: z.ZodEnum<{
-    run: "run";
-    skip: "skip";
+export declare const NeedsWhen: z.ZodEnum<{
+    always: "always";
+    "on-success": "on-success";
+    "on-skip": "on-skip";
+    "on-failure": "on-failure";
 }>;
-export type IfFailedPolicy = z.infer<typeof IfFailedPolicy>;
-/**
- * Needs entry with per-edge failure policy.
- * Used in lock file needs arrays for explicit ifFailed override.
+export type NeedsWhen = z.infer<typeof NeedsWhen>;
+/**
+ * Normalized, DB-evaluable run condition for a `needs` edge: the non-empty set
+ * of upstream terminal statuses that satisfy the edge. The lock file and the
+ * orchestrator scheduler only ever see this resolved set (never a keyword), so
+ * gating stays a pure status-set membership test.
+ */
+export declare const NeedsRunOn: z.ZodArray<z.ZodEnum<{
+    skipped: "skipped";
+    success: "success";
+    pending: "pending";
+    running: "running";
+    failed: "failed";
+    cancelled: "cancelled";
+    cancelling: "cancelling";
+    queued: "queued";
+    recovering: "recovering";
+    timed_out_stale: "timed_out_stale";
+    drift_dropped: "drift_dropped";
+}>>;
+export type NeedsRunOn = z.infer<typeof NeedsRunOn>;
+/**
+ * Resolve the author-facing `when` (keyword sugar | raw status-set | unset) to
+ * the normalized status-set. An unset `when` defaults to success-only — the
+ * downstream runs only when the upstream succeeded.
+ */
+export declare function resolveWhenToRunOn(when: NeedsWhen | ExecutionJobStatus[] | undefined): ExecutionJobStatus[];
+/**
+ * Needs entry carrying the normalized run-on status-set.
+ * Used in lock file needs arrays for an explicit per-edge run condition.
  */
 export declare const NeedsEntrySchema: z.ZodObject<{
     name: z.ZodString;
-    ifFailed: z.ZodDefault<z.ZodEnum<{
-        run: "run";
-        skip: "skip";
-    }>>;
+    runOn: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        skipped: "skipped";
+        success: "success";
+        pending: "pending";
+        running: "running";
+        failed: "failed";
+        cancelled: "cancelled";
+        cancelling: "cancelling";
+        queued: "queued";
+        recovering: "recovering";
+        timed_out_stale: "timed_out_stale";
+        drift_dropped: "drift_dropped";
+    }>>>;
 }, z.core.$strip>;
 export type NeedsEntry = z.infer<typeof NeedsEntrySchema>;
 /**
- * Needs group entry with per-edge failure policy.
+ * Needs group entry carrying the normalized run-on status-set.
  * Used in lock file needs arrays for dynamic group dependencies.
  */
 export declare const NeedsGroupEntrySchema: z.ZodObject<{
     group: z.ZodString;
-    ifFailed: z.ZodDefault<z.ZodEnum<{
-        run: "run";
-        skip: "skip";
-    }>>;
+    runOn: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        skipped: "skipped";
+        success: "success";
+        pending: "pending";
+        running: "running";
+        failed: "failed";
+        cancelled: "cancelled";
+        cancelling: "cancelling";
+        queued: "queued";
+        recovering: "recovering";
+        timed_out_stale: "timed_out_stale";
+        drift_dropped: "drift_dropped";
+    }>>>;
 }, z.core.$strip>;
 export type NeedsGroupEntry = z.infer<typeof NeedsGroupEntrySchema>;
 /**