@kici-dev/engine 0.1.22 → 0.1.23

package/dist/metrics/catalog-policy.js

@@ -1,4 +1,5 @@
 import "../chunk-BTugEXQM.js";
+import { ExecutionRunStatus } from "../protocol/messages/execution-status.js";
 import { MetricNames, MetricService } from "./metric-catalog.generated.js";
 //#region src/metrics/catalog-policy.ts
 /**
@@ -48,9 +49,10 @@ const AGENT_SCALER_VALUES = [
 	"bare-metal"
 ];
 /**
-* Closed enum of scaler values the orchestrator's own resource-usage
-* gauges emit. `__global__` is the orchestrator-wide rollup row; the
-* other four match `AGENT_SCALER_VALUES`.
+* Closed enum of scaler-backend TYPE values the orchestrator's own
+* resource-usage gauges carry on their `scalerType` rollup label.
+* `__global__` is the orchestrator-wide rollup row; the other four match
+* `AGENT_SCALER_VALUES`. Exported so the policy tests can assert against it.
 */
 const ORCH_SCALER_VALUES = ["__global__", ...AGENT_SCALER_VALUES];
 /** Closed enum of the five scheduled jobs the orchestrator runs (mirrors `OrchestratorScheduledJobName`). */
@@ -94,12 +96,7 @@ const METRIC_LABEL_POLICY = {
 		"handled",
 		"dispatched"
 	] } },
-	kici_orch_executions_total: { status: { values: [
-		"running",
-		"success",
-		"failed",
-		"cancelled"
-	] } },
+	kici_orch_executions_total: { status: { values: ExecutionRunStatus.options } },
 	kici_orch_steps_total: { status: { values: [
 		"running",
 		"success",
@@ -130,11 +127,13 @@ const METRIC_LABEL_POLICY = {
 		] }
 	},
 	kici_orch_scaler_cpus_used: {
-		scaler: { values: ORCH_SCALER_VALUES },
+		scaler: { maxUniqueValues: 50 },
+		scalerType: { values: ORCH_SCALER_VALUES },
 		machinePool: { maxUniqueValues: 50 }
 	},
 	kici_orch_scaler_memory_bytes_used: {
-		scaler: { values: ORCH_SCALER_VALUES },
+		scaler: { maxUniqueValues: 50 },
+		scalerType: { values: ORCH_SCALER_VALUES },
 		machinePool: { maxUniqueValues: 50 }
 	},
 	kici_orch_install_secrets_decisions_total: {
@@ -278,6 +277,6 @@ const METRIC_LABEL_POLICY = {
 	}
 };
 //#endregion
-export { METRIC_LABEL_POLICY, ORCH_PUSHED_METRIC_NAMES, OVERFLOW_LABEL_VALUE };
+export { METRIC_LABEL_POLICY, ORCH_PUSHED_METRIC_NAMES, ORCH_SCALER_VALUES, OVERFLOW_LABEL_VALUE };
 
 //# sourceMappingURL=catalog-policy.js.map

package/dist/metrics/metric-catalog.generated.d.ts

@@ -183,8 +183,8 @@ export declare const MetricLabels: {
     readonly KICI_ORCH_LOG_CHUNKS_RECEIVED_TOTAL: readonly [];
     readonly KICI_ORCH_PG_POOL_CLIENT_ERRORS_TOTAL: readonly ["source"];
     readonly KICI_ORCH_SCALER_CONFIG_RELOADS_TOTAL: readonly ["result"];
-    readonly KICI_ORCH_SCALER_CPUS_USED: readonly ["scaler", "machinePool"];
-    readonly KICI_ORCH_SCALER_MEMORY_BYTES_USED: readonly ["scaler", "machinePool"];
+    readonly KICI_ORCH_SCALER_CPUS_USED: readonly ["scaler", "scalerType", "machinePool"];
+    readonly KICI_ORCH_SCALER_MEMORY_BYTES_USED: readonly ["scaler", "scalerType", "machinePool"];
     readonly KICI_ORCH_SCALER_SPAWN_FAILURES_TOTAL: readonly ["backend", "bound"];
     readonly KICI_ORCH_SCALER_SPAWN_REFUSALS_TOTAL: readonly [];
     readonly KICI_ORCH_SOURCE_CACHE_HITS_TOTAL: readonly [];

package/dist/metrics/metric-catalog.generated.js

@@ -188,8 +188,16 @@ const MetricLabels = {
 	KICI_ORCH_LOG_CHUNKS_RECEIVED_TOTAL: [],
 	KICI_ORCH_PG_POOL_CLIENT_ERRORS_TOTAL: ["source"],
 	KICI_ORCH_SCALER_CONFIG_RELOADS_TOTAL: ["result"],
-	KICI_ORCH_SCALER_CPUS_USED: ["scaler", "machinePool"],
-	KICI_ORCH_SCALER_MEMORY_BYTES_USED: ["scaler", "machinePool"],
+	KICI_ORCH_SCALER_CPUS_USED: [
+		"scaler",
+		"scalerType",
+		"machinePool"
+	],
+	KICI_ORCH_SCALER_MEMORY_BYTES_USED: [
+		"scaler",
+		"scalerType",
+		"machinePool"
+	],
 	KICI_ORCH_SCALER_SPAWN_FAILURES_TOTAL: ["backend", "bound"],
 	KICI_ORCH_SCALER_SPAWN_REFUSALS_TOTAL: [],
 	KICI_ORCH_SOURCE_CACHE_HITS_TOTAL: [],

package/dist/protocol/messages/access-log.d.ts

@@ -16,6 +16,7 @@ export declare const AccessLogSource: z.ZodEnum<{
     platform_proxy: "platform_proxy";
     admin_http: "admin_http";
     admin_cli: "admin_cli";
+    agent: "agent";
 }>;
 export type AccessLogSource = z.infer<typeof AccessLogSource>;
 /** Outcome of the attempted action. */
@@ -107,6 +108,8 @@ export declare const AccessLogAction: z.ZodEnum<{
     "scaler.capacity.read": "scaler.capacity.read";
     "scaler.agents.read": "scaler.agents.read";
     "fleet.read": "fleet.read";
+    "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+    "fleet.pre_boot.send": "fleet.pre_boot.send";
     "backend.list.read": "backend.list.read";
     "backend.get.read": "backend.get.read";
     "backend.sync": "backend.sync";
@@ -199,6 +202,8 @@ export declare const accessLogItemSchema: z.ZodObject<{
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
         "fleet.read": "fleet.read";
+        "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+        "fleet.pre_boot.send": "fleet.pre_boot.send";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -238,6 +243,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
+        agent: "agent";
     }>;
     outcome: z.ZodEnum<{
         error: "error";
@@ -314,6 +320,8 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
         "fleet.read": "fleet.read";
+        "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+        "fleet.pre_boot.send": "fleet.pre_boot.send";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -331,6 +339,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
+        agent: "agent";
     }>>;
     outcome: z.ZodOptional<z.ZodEnum<{
         error: "error";
@@ -451,6 +460,8 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
         "fleet.read": "fleet.read";
+        "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+        "fleet.pre_boot.send": "fleet.pre_boot.send";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -468,6 +479,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
+        agent: "agent";
     }>>;
     outcome: z.ZodOptional<z.ZodEnum<{
         error: "error";
@@ -576,6 +588,8 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             "scaler.capacity.read": "scaler.capacity.read";
             "scaler.agents.read": "scaler.agents.read";
             "fleet.read": "fleet.read";
+            "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+            "fleet.pre_boot.send": "fleet.pre_boot.send";
             "backend.list.read": "backend.list.read";
             "backend.get.read": "backend.get.read";
             "backend.sync": "backend.sync";
@@ -615,6 +629,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             platform_proxy: "platform_proxy";
             admin_http: "admin_http";
             admin_cli: "admin_cli";
+            agent: "agent";
         }>;
         outcome: z.ZodEnum<{
             error: "error";

package/dist/protocol/messages/access-log.js

@@ -18,7 +18,8 @@ import { z } from "zod";
 const AccessLogSource = z.enum([
 	"platform_proxy",
 	"admin_http",
-	"admin_cli"
+	"admin_cli",
+	"agent"
 ]);
 /** Outcome of the attempted action. */
 const AccessLogOutcome = z.enum([
@@ -104,6 +105,8 @@ const AccessLogAction = z.enum([
 	"fleet.read",
 	"fleet.host.declare",
 	"fleet.host.remove",
+	"fleet.init_runner.bringup",
+	"fleet.pre_boot.send",
 	"backend.list.read",
 	"backend.get.read",
 	"backend.sync",

package/dist/protocol/messages/dashboard.d.ts

@@ -1511,6 +1511,16 @@ export declare const envSourceOverrideDeleteRequestSchema: z.ZodObject<{
     routingKey: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>;
+/**
+ * A scope→environment binding with its host selector. `hostPattern` is the host
+ * the binding applies to (`'**'` = all hosts); exact / glob / regex over a
+ * fan-out child's agentId / hostname / labels.
+ */
+export declare const envBindingEntrySchema: z.ZodObject<{
+    scopePattern: z.ZodString;
+    hostPattern: z.ZodString;
+}, z.core.$strip>;
+export type EnvBindingEntry = z.infer<typeof envBindingEntrySchema>;
 /** List bindings for an environment. */
 export declare const envBindingsListRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.list">;
@@ -1536,7 +1546,7 @@ export declare const envBindingsListRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     environmentId: z.ZodString;
 }, z.core.$strip>;
-/** Set bindings (scope patterns) for an environment. */
+/** Set bindings (scope + host patterns) for an environment. */
 export declare const envBindingsSetRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.set">;
     requestId: z.ZodString;
@@ -1560,7 +1570,10 @@ export declare const envBindingsSetRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     environmentId: z.ZodString;
-    scopePatterns: z.ZodArray<z.ZodString>;
+    bindings: z.ZodArray<z.ZodObject<{
+        scopePattern: z.ZodString;
+        hostPattern: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** List all scoped secrets for the org. */
 export declare const envSecretsListRequestSchema: z.ZodObject<{
@@ -1937,6 +1950,13 @@ export declare const fleetPinnedRunSchema: z.ZodObject<{
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type FleetPinnedRun = z.infer<typeof fleetPinnedRunSchema>;
+/** How a runsOnAll fan-out would treat one host, given its current reachability. */
+export declare const FleetHostDisposition: z.ZodEnum<{
+    target: "target";
+    "unreachable-durable": "unreachable-durable";
+    "skipped-ephemeral": "skipped-ephemeral";
+}>;
+export type FleetHostDisposition = z.infer<typeof FleetHostDisposition>;
 /** A host matched by a runsOnAll preview, plus how the fan-out would treat it. */
 export declare const fleetPreviewHostSchema: z.ZodObject<{
     entry: z.ZodObject<{
@@ -2126,6 +2146,69 @@ export type DashboardFleetPreviewRequest = z.infer<typeof dashboardFleetPreviewR
 export type DashboardFleetHostsResponse = z.infer<typeof dashboardFleetHostsResponseSchema>;
 export type DashboardFleetHostResponse = z.infer<typeof dashboardFleetHostResponseSchema>;
 export type DashboardFleetPreviewResponse = z.infer<typeof dashboardFleetPreviewResponseSchema>;
+/** Request: which registered runsOnAll fan-outs target this host? */
+export declare const dashboardFleetWorkflowsForHostRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    agentId: z.ZodString;
+}, z.core.$strip>;
+/** One registered runsOnAll workflow whose selector matches the host. */
+export declare const fleetHostWorkflowSchema: z.ZodObject<{
+    workflowName: z.ZodString;
+    repoIdentifier: z.ZodString;
+    sourceFile: z.ZodNullable<z.ZodString>;
+    onUnreachable: z.ZodEnum<{
+        skip: "skip";
+        fail: "fail";
+        hold: "hold";
+    }>;
+    disposition: z.ZodEnum<{
+        target: "target";
+        "unreachable-durable": "unreachable-durable";
+        "skipped-ephemeral": "skipped-ephemeral";
+    }>;
+}, z.core.$strip>;
+export type FleetHostWorkflow = z.infer<typeof fleetHostWorkflowSchema>;
+export declare const dashboardFleetWorkflowsForHostResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host.response">;
+    requestId: z.ZodString;
+    workflows: z.ZodArray<z.ZodObject<{
+        workflowName: z.ZodString;
+        repoIdentifier: z.ZodString;
+        sourceFile: z.ZodNullable<z.ZodString>;
+        onUnreachable: z.ZodEnum<{
+            skip: "skip";
+            fail: "fail";
+            hold: "hold";
+        }>;
+        disposition: z.ZodEnum<{
+            target: "target";
+            "unreachable-durable": "unreachable-durable";
+            "skipped-ephemeral": "skipped-ephemeral";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DashboardFleetWorkflowsForHostRequest = z.infer<typeof dashboardFleetWorkflowsForHostRequestSchema>;
+export type DashboardFleetWorkflowsForHostResponse = z.infer<typeof dashboardFleetWorkflowsForHostResponseSchema>;
 /** Declare a static host into the roster (wraps HostRosterStore.declareStatic). */
 export declare const fleetHostDeclareRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare">;
@@ -2150,7 +2233,7 @@ export declare const fleetHostDeclareRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     agentId: z.ZodString;
-    labels: z.ZodArray<z.ZodString>;
+    labels: z.ZodOptional<z.ZodArray<z.ZodString>>;
     hostname: z.ZodOptional<z.ZodString>;
     properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
 }, z.core.$strip>;
@@ -2158,6 +2241,7 @@ export declare const fleetHostDeclareResponseSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare.response">;
     requestId: z.ZodString;
     declared: z.ZodOptional<z.ZodBoolean>;
+    created: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** Remove a host from the roster by agent id (HostRosterStore.removeStatic). */
@@ -2946,6 +3030,7 @@ export declare const testRelayTriggerRequestSchema: z.ZodObject<{
         }, z.core.$strip>>;
         allowEmpty: z.ZodBoolean;
     }, z.core.$strip>>;
+    dispatchInputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     encryptedSecrets: z.ZodOptional<z.ZodString>;
     encryptedSecretsKey: z.ZodOptional<z.ZodString>;
@@ -3709,7 +3794,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     environmentId: z.ZodString;
-    scopePatterns: z.ZodArray<z.ZodString>;
+    bindings: z.ZodArray<z.ZodObject<{
+        scopePattern: z.ZodString;
+        hostPattern: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.secrets.list">;
     requestId: z.ZodString;
@@ -4120,6 +4208,29 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     workflowName: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    agentId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare">;
     requestId: z.ZodString;
@@ -4143,7 +4254,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     agentId: z.ZodString;
-    labels: z.ZodArray<z.ZodString>;
+    labels: z.ZodOptional<z.ZodArray<z.ZodString>>;
     hostname: z.ZodOptional<z.ZodString>;
     properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
 }, z.core.$strip>, z.ZodObject<{
@@ -4655,6 +4766,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
         "fleet.read": "fleet.read";
+        "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+        "fleet.pre_boot.send": "fleet.pre_boot.send";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -4672,6 +4785,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
+        agent: "agent";
     }>>;
     outcome: z.ZodOptional<z.ZodEnum<{
         error: "error";
@@ -4793,6 +4907,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         }, z.core.$strip>>;
         allowEmpty: z.ZodBoolean;
     }, z.core.$strip>>;
+    dispatchInputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     encryptedSecrets: z.ZodOptional<z.ZodString>;
     encryptedSecretsKey: z.ZodOptional<z.ZodString>;
@@ -5204,7 +5319,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.list.response">;
     requestId: z.ZodString;
-    scopePatterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    bindings: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        scopePattern: z.ZodString;
+        hostPattern: z.ZodString;
+    }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.set.response">;
@@ -5572,10 +5690,29 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         hold: "hold";
     }>;
     estimatedChildCount: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host.response">;
+    requestId: z.ZodString;
+    workflows: z.ZodArray<z.ZodObject<{
+        workflowName: z.ZodString;
+        repoIdentifier: z.ZodString;
+        sourceFile: z.ZodNullable<z.ZodString>;
+        onUnreachable: z.ZodEnum<{
+            skip: "skip";
+            fail: "fail";
+            hold: "hold";
+        }>;
+        disposition: z.ZodEnum<{
+            target: "target";
+            "unreachable-durable": "unreachable-durable";
+            "skipped-ephemeral": "skipped-ephemeral";
+        }>;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare.response">;
     requestId: z.ZodString;
     declared: z.ZodOptional<z.ZodBoolean>;
+    created: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.remove.response">;
@@ -5933,6 +6070,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             "scaler.capacity.read": "scaler.capacity.read";
             "scaler.agents.read": "scaler.agents.read";
             "fleet.read": "fleet.read";
+            "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+            "fleet.pre_boot.send": "fleet.pre_boot.send";
             "backend.list.read": "backend.list.read";
             "backend.get.read": "backend.get.read";
             "backend.sync": "backend.sync";
@@ -5972,6 +6111,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             platform_proxy: "platform_proxy";
             admin_http: "admin_http";
             admin_cli: "admin_cli";
+            agent: "agent";
         }>;
         outcome: z.ZodEnum<{
             error: "error";

package/dist/protocol/messages/dashboard.js

@@ -819,6 +819,15 @@ const envSourceOverrideDeleteResponseSchema = z.object({
 	requestId: z.string(),
 	error: z.string().optional()
 });
+/**
+* A scope→environment binding with its host selector. `hostPattern` is the host
+* the binding applies to (`'**'` = all hosts); exact / glob / regex over a
+* fan-out child's agentId / hostname / labels.
+*/
+const envBindingEntrySchema = z.object({
+	scopePattern: z.string(),
+	hostPattern: z.string()
+});
 /** List bindings for an environment. */
 const envBindingsListRequestSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.list"),
@@ -829,16 +838,16 @@ const envBindingsListRequestSchema = z.object({
 const envBindingsListResponseSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.list.response"),
 	requestId: z.string(),
-	scopePatterns: z.array(z.string()).optional(),
+	bindings: z.array(envBindingEntrySchema).optional(),
 	error: z.string().optional()
 });
-/** Set bindings (scope patterns) for an environment. */
+/** Set bindings (scope + host patterns) for an environment. */
 const envBindingsSetRequestSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.set"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	environmentId: z.string(),
-	scopePatterns: z.array(z.string())
+	bindings: z.array(envBindingEntrySchema)
 });
 const envBindingsSetResponseSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.set.response"),
@@ -1054,14 +1063,16 @@ const fleetPinnedRunSchema = z.object({
 	status: z.string(),
 	createdAt: z.string()
 });
+/** How a runsOnAll fan-out would treat one host, given its current reachability. */
+const FleetHostDisposition = z.enum([
+	"target",
+	"unreachable-durable",
+	"skipped-ephemeral"
+]);
 /** A host matched by a runsOnAll preview, plus how the fan-out would treat it. */
 const fleetPreviewHostSchema = z.object({
 	entry: HostInventoryEntry,
-	disposition: z.enum([
-		"target",
-		"unreachable-durable",
-		"skipped-ephemeral"
-	])
+	disposition: FleetHostDisposition
 });
 const dashboardFleetHostsRequestSchema = z.object({
 	type: z.literal("dashboard.fleet.hosts"),
@@ -1098,13 +1109,33 @@ const dashboardFleetPreviewResponseSchema = z.object({
 	onUnreachable: OnUnreachableMode,
 	estimatedChildCount: z.number()
 });
+/** Request: which registered runsOnAll fan-outs target this host? */
+const dashboardFleetWorkflowsForHostRequestSchema = z.object({
+	type: z.literal("dashboard.fleet.workflows-for-host"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	agentId: z.string()
+});
+/** One registered runsOnAll workflow whose selector matches the host. */
+const fleetHostWorkflowSchema = z.object({
+	workflowName: z.string(),
+	repoIdentifier: z.string(),
+	sourceFile: z.string().nullable(),
+	onUnreachable: OnUnreachableMode,
+	disposition: FleetHostDisposition
+});
+const dashboardFleetWorkflowsForHostResponseSchema = z.object({
+	type: z.literal("dashboard.fleet.workflows-for-host.response"),
+	requestId: z.string(),
+	workflows: z.array(fleetHostWorkflowSchema)
+});
 /** Declare a static host into the roster (wraps HostRosterStore.declareStatic). */
 const fleetHostDeclareRequestSchema = z.object({
 	type: z.literal("dashboard.fleet.host.declare"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	agentId: z.string(),
-	labels: z.array(z.string()),
+	labels: z.array(z.string()).optional(),
 	hostname: z.string().optional(),
 	properties: z.record(z.string(), z.union([
 		z.string(),
@@ -1116,6 +1147,7 @@ const fleetHostDeclareResponseSchema = z.object({
 	type: z.literal("dashboard.fleet.host.declare.response"),
 	requestId: z.string(),
 	declared: z.boolean().optional(),
+	created: z.boolean().optional(),
 	error: z.string().optional()
 });
 /** Remove a host from the roster by agent id (HostRosterStore.removeStatic). */
@@ -1535,6 +1567,12 @@ const testRelayTriggerRequestSchema = z.object({
 	* job's matched roster with this selector. Omitted for webhook runs.
 	*/
 	target: HostTargetSelector.optional(),
+	/**
+	* Raw operator-supplied `kici run --input KEY=VALUE` pairs (not coerced /
+	* defaulted), relayed verbatim. The orchestrator validates + coerces + applies
+	* defaults authoritatively against the matched workflow's lock descriptor.
+	*/
+	dispatchInputs: z.record(z.string(), z.string()).optional(),
 	secrets: z.record(z.string(), z.string()).optional(),
 	encryptedSecrets: z.string().optional(),
 	encryptedSecretsKey: z.string().optional()
@@ -1648,6 +1686,7 @@ const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 	dashboardFleetHostsRequestSchema,
 	dashboardFleetHostRequestSchema,
 	dashboardFleetPreviewRequestSchema,
+	dashboardFleetWorkflowsForHostRequestSchema,
 	fleetHostDeclareRequestSchema,
 	fleetHostRemoveRequestSchema,
 	dashboardScalerCapacityRequestSchema,
@@ -1717,6 +1756,7 @@ const dashboardOrchToPlatformSchema = z.discriminatedUnion("type", [
 	dashboardFleetHostsResponseSchema,
 	dashboardFleetHostResponseSchema,
 	dashboardFleetPreviewResponseSchema,
+	dashboardFleetWorkflowsForHostResponseSchema,
 	fleetHostDeclareResponseSchema,
 	fleetHostRemoveResponseSchema,
 	dashboardScalerCapacityResponseSchema,
@@ -1991,6 +2031,6 @@ const orgMemberSchema = z.object({
 /** Response for org members list endpoint. */
 const memberListResponseSchema = z.object({ members: z.array(orgMemberSchema) });
 //#endregion
-export { EnvDeleteErrorCode, EventLogPayloadStreamError, HeldRunQueueType, HeldRunStatus, TestRelayType, attestationListItemSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, trustPolicyResponseSchema };
+export { EnvDeleteErrorCode, EventLogPayloadStreamError, FleetHostDisposition, HeldRunQueueType, HeldRunStatus, TestRelayType, attestationListItemSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardFleetWorkflowsForHostRequestSchema, dashboardFleetWorkflowsForHostResponseSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, envBindingEntrySchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetHostWorkflowSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, trustPolicyResponseSchema };
 
 //# sourceMappingURL=dashboard.js.map