@kici-dev/engine 0.1.22 → 0.1.24

package/dist/protocol/messages/dashboard.d.ts

@@ -6,6 +6,10 @@ export declare const dashboardRunDetailRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -24,6 +28,203 @@ export declare const dashboardRunDetailRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     runId: z.ZodString;
 }, z.core.$strip>;
+/**
+ * Request the machine-first, provenance-tagged structured run result from the
+ * orchestrator (user-plane equivalent of the orchestrator-admin
+ * `/runs/:id/structured` endpoint). Reuses the Phase-1 `AgentRunResult` shape.
+ */
+export declare const dashboardRunStructuredRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.structured">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>;
+export type DashboardRunStructuredRequest = z.infer<typeof dashboardRunStructuredRequestSchema>;
+/** Response carrying the provenance-tagged AgentRunResult (null when not found). */
+export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.structured.response">;
+    requestId: z.ZodString;
+    result: z.ZodNullable<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        status: z.ZodEnum<{
+            success: "success";
+            pending: "pending";
+            running: "running";
+            failed: "failed";
+            cancelled: "cancelled";
+            cancelling: "cancelling";
+            held: "held";
+        }>;
+        provider: z.ZodString;
+        repoIdentifier: z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        ref: z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        sha: z.ZodString;
+        baseSha: z.ZodNullable<z.ZodString>;
+        startedAt: z.ZodNullable<z.ZodString>;
+        completedAt: z.ZodNullable<z.ZodString>;
+        durationMs: z.ZodNullable<z.ZodNumber>;
+        trustTier: z.ZodNullable<z.ZodEnum<{
+            unknown: "unknown";
+            known: "known";
+            trusted: "trusted";
+        }>>;
+        contributorUsername: z.ZodNullable<z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        failureCategory: z.ZodNullable<z.ZodEnum<{
+            unknown: "unknown";
+            cancelled: "cancelled";
+            init_failure: "init_failure";
+            timed_out: "timed_out";
+            step_failed: "step_failed";
+            infra: "infra";
+        }>>;
+        failureReason: z.ZodNullable<z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        triggeredBy: z.ZodNullable<z.ZodString>;
+        jobs: z.ZodArray<z.ZodObject<{
+            jobId: z.ZodString;
+            jobName: z.ZodObject<{
+                untrusted: z.ZodLiteral<true>;
+                value: z.ZodString;
+            }, z.core.$strip>;
+            status: z.ZodEnum<{
+                skipped: "skipped";
+                success: "success";
+                pending: "pending";
+                running: "running";
+                failed: "failed";
+                cancelled: "cancelled";
+                cancelling: "cancelling";
+                queued: "queued";
+                recovering: "recovering";
+                timed_out_stale: "timed_out_stale";
+                drift_dropped: "drift_dropped";
+            }>;
+            startedAt: z.ZodNullable<z.ZodString>;
+            completedAt: z.ZodNullable<z.ZodString>;
+            durationMs: z.ZodNullable<z.ZodNumber>;
+            agentId: z.ZodNullable<z.ZodString>;
+            errorMessage: z.ZodNullable<z.ZodObject<{
+                untrusted: z.ZodLiteral<true>;
+                value: z.ZodString;
+            }, z.core.$strip>>;
+            initFailure: z.ZodNullable<z.ZodObject<{
+                scope: z.ZodEnum<{
+                    run: "run";
+                    job: "job";
+                }>;
+                category: z.ZodEnum<{
+                    secret_resolution: "secret_resolution";
+                    install_secrets: "install_secrets";
+                    lock_resolution: "lock_resolution";
+                    build_coordination: "build_coordination";
+                    environment_rules: "environment_rules";
+                    dynamic_eval: "dynamic_eval";
+                    no_agent: "no_agent";
+                    matrix_expansion: "matrix_expansion";
+                }>;
+                message: z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
+            needs: z.ZodArray<z.ZodObject<{
+                ref: z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>;
+                runOn: z.ZodArray<z.ZodEnum<{
+                    skipped: "skipped";
+                    success: "success";
+                    pending: "pending";
+                    running: "running";
+                    failed: "failed";
+                    cancelled: "cancelled";
+                    cancelling: "cancelling";
+                    queued: "queued";
+                    recovering: "recovering";
+                    timed_out_stale: "timed_out_stale";
+                    drift_dropped: "drift_dropped";
+                }>>;
+            }, z.core.$strip>>;
+            outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
+                untrusted: z.ZodLiteral<true>;
+                value: z.ZodString;
+            }, z.core.$strip>>>;
+            secretOutputKeys: z.ZodArray<z.ZodString>;
+            steps: z.ZodArray<z.ZodObject<{
+                stepIndex: z.ZodNumber;
+                stepName: z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>;
+                status: z.ZodEnum<{
+                    skipped: "skipped";
+                    success: "success";
+                    pending: "pending";
+                    running: "running";
+                    failed: "failed";
+                    cancelled: "cancelled";
+                }>;
+                exitCode: z.ZodNullable<z.ZodNumber>;
+                durationMs: z.ZodNullable<z.ZodNumber>;
+                startedAt: z.ZodNullable<z.ZodString>;
+                completedAt: z.ZodNullable<z.ZodString>;
+                errorMessage: z.ZodNullable<z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>>;
+                stepType: z.ZodString;
+                checkOutcome: z.ZodNullable<z.ZodEnum<{
+                    skipped: "skipped";
+                    applied: "applied";
+                    declined: "declined";
+                    "dry-run": "dry-run";
+                    no_check: "no_check";
+                }>>;
+                secretsAccessed: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DashboardRunStructuredResponse = z.infer<typeof dashboardRunStructuredResponseSchema>;
 /** Request step logs from orchestrator. */
 export declare const dashboardStepLogsRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs">;
@@ -31,6 +232,10 @@ export declare const dashboardStepLogsRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -67,6 +272,7 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
     orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     errorMessage: z.ZodNullable<z.ZodString>;
     runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
     outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
     secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
     initFailure: z.ZodOptional<z.ZodObject<{
@@ -122,6 +328,12 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
             no_check: "no_check";
         }>>>;
         driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            sequential: "sequential";
+            "parallel-child": "parallel-child";
+            "parallel-group": "parallel-group";
+        }>>>;
+        groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /** Response with full run detail (correlates to dashboard.run.detail). */
@@ -143,6 +355,7 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
         orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         errorMessage: z.ZodNullable<z.ZodString>;
         runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         initFailure: z.ZodOptional<z.ZodObject<{
@@ -198,13 +411,19 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
                 no_check: "no_check";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                sequential: "sequential";
+                "parallel-child": "parallel-child";
+                "parallel-group": "parallel-group";
+            }>>>;
+            groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
             unknown: "unknown";
-            trusted: "trusted";
             known: "known";
+            trusted: "trusted";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
             head: "head";
@@ -247,6 +466,10 @@ export declare const dashboardAttestationsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -266,6 +489,23 @@ export declare const dashboardAttestationsListRequestSchema: z.ZodObject<{
     runId: z.ZodString;
 }, z.core.$strip>;
 export type DashboardAttestationsListRequest = z.infer<typeof dashboardAttestationsListRequestSchema>;
+/**
+ * Server-side verification verdict for an attestation, computed at ingest.
+ * - `verified` — `verifyKiciBundle` succeeded.
+ * - `failed` — verification ran and the bundle failed (signature / identity /
+ *   build-context / unsupported mode). A provenance-integrity signal.
+ * - `unverifiable` — no verdict could be computed (no trust root configured, or
+ *   the JWKS / bundle could not be read). NOT a forgery signal.
+ * - `pending` — verdict not yet computed (pre-backfill row, or ingest raced the
+ *   trust root).
+ */
+export declare const attestationVerifyStatusSchema: z.ZodEnum<{
+    pending: "pending";
+    failed: "failed";
+    verified: "verified";
+    unverifiable: "unverifiable";
+}>;
+export type AttestationVerifyStatus = z.infer<typeof attestationVerifyStatusSchema>;
 /**
  * Single attestation in the list response, with its bundle inlined from object
  * storage so the dashboard verifies it without a second fetch. The bundle is a
@@ -295,6 +535,14 @@ export declare const attestationListItemSchema: z.ZodObject<{
             identityToken: z.ZodString;
         }, z.core.$strip>;
     }, z.core.$strip>;
+    runId: z.ZodOptional<z.ZodString>;
+    verifyStatus: z.ZodOptional<z.ZodEnum<{
+        pending: "pending";
+        failed: "failed";
+        verified: "verified";
+        unverifiable: "unverifiable";
+    }>>;
+    verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 export type AttestationListItem = z.infer<typeof attestationListItemSchema>;
 /** Response with the run's attestations (correlates to dashboard.attestations.list). */
@@ -325,10 +573,207 @@ export declare const dashboardAttestationsListResponseSchema: z.ZodObject<{
                 identityToken: z.ZodString;
             }, z.core.$strip>;
         }, z.core.$strip>;
+        runId: z.ZodOptional<z.ZodString>;
+        verifyStatus: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>>;
+        verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DashboardAttestationsListResponse = z.infer<typeof dashboardAttestationsListResponseSchema>;
+/**
+ * Metadata-only summary row for the org-wide list. No inlined bundle (keeps the
+ * list cheap). `repository` / `workflow` are joined from `execution_runs` when
+ * available.
+ */
+export declare const attestationListSummarySchema: z.ZodObject<{
+    id: z.ZodString;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    jobName: z.ZodNullable<z.ZodString>;
+    subjectName: z.ZodString;
+    subjectDigest: z.ZodString;
+    mode: z.ZodString;
+    mediaType: z.ZodString;
+    createdAt: z.ZodString;
+    verifyStatus: z.ZodEnum<{
+        pending: "pending";
+        failed: "failed";
+        verified: "verified";
+        unverifiable: "unverifiable";
+    }>;
+    verifyReason: z.ZodNullable<z.ZodString>;
+    repository: z.ZodNullable<z.ZodString>;
+    workflow: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type AttestationListSummary = z.infer<typeof attestationListSummarySchema>;
+/** Filters for the org-wide attestations list. */
+export declare const attestationListFiltersSchema: z.ZodObject<{
+    digest: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodEnum<{
+        pending: "pending";
+        failed: "failed";
+        verified: "verified";
+        unverifiable: "unverifiable";
+    }>>;
+    repository: z.ZodOptional<z.ZodString>;
+    workflow: z.ZodOptional<z.ZodString>;
+    job: z.ZodOptional<z.ZodString>;
+    createdAfter: z.ZodOptional<z.ZodString>;
+    createdBefore: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AttestationListFilters = z.infer<typeof attestationListFiltersSchema>;
+/** Request the org-wide, paginated, filtered list of attestations. */
+export declare const dashboardAttestationsListAllRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestations.list.all">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    page: z.ZodNumber;
+    sort: z.ZodOptional<z.ZodString>;
+    filters: z.ZodDefault<z.ZodObject<{
+        digest: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>>;
+        repository: z.ZodOptional<z.ZodString>;
+        workflow: z.ZodOptional<z.ZodString>;
+        job: z.ZodOptional<z.ZodString>;
+        createdAfter: z.ZodOptional<z.ZodString>;
+        createdBefore: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DashboardAttestationsListAllRequest = z.infer<typeof dashboardAttestationsListAllRequestSchema>;
+/** Response with one page of org-wide attestation summaries. */
+export declare const dashboardAttestationsListAllResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestations.list.all.response">;
+    requestId: z.ZodString;
+    attestations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        runId: z.ZodString;
+        jobId: z.ZodString;
+        jobName: z.ZodNullable<z.ZodString>;
+        subjectName: z.ZodString;
+        subjectDigest: z.ZodString;
+        mode: z.ZodString;
+        mediaType: z.ZodString;
+        createdAt: z.ZodString;
+        verifyStatus: z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>;
+        verifyReason: z.ZodNullable<z.ZodString>;
+        repository: z.ZodNullable<z.ZodString>;
+        workflow: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    page: z.ZodNumber;
+    pageSize: z.ZodNumber;
+    total: z.ZodNumber;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DashboardAttestationsListAllResponse = z.infer<typeof dashboardAttestationsListAllResponseSchema>;
+/** Request a single attestation by id (detail page; inlines the one bundle). */
+export declare const dashboardAttestationGetRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestation.get">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    attestationId: z.ZodString;
+}, z.core.$strip>;
+export type DashboardAttestationGetRequest = z.infer<typeof dashboardAttestationGetRequestSchema>;
+/** Response with one attestation (the existing item shape with bundle), or null. */
+export declare const dashboardAttestationGetResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestation.get.response">;
+    requestId: z.ZodString;
+    attestation: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        jobId: z.ZodString;
+        jobName: z.ZodNullable<z.ZodString>;
+        subjectName: z.ZodString;
+        subjectDigest: z.ZodString;
+        mode: z.ZodString;
+        mediaType: z.ZodString;
+        createdAt: z.ZodString;
+        bundle: z.ZodObject<{
+            mediaType: z.ZodLiteral<"application/vnd.kici.provenance.bundle+json;version=0.1">;
+            dsseEnvelope: z.ZodObject<{
+                payloadType: z.ZodString;
+                payload: z.ZodString;
+                signatures: z.ZodArray<z.ZodObject<{
+                    keyid: z.ZodString;
+                    sig: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+            verificationMaterial: z.ZodObject<{
+                publicKey: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                identityToken: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        runId: z.ZodOptional<z.ZodString>;
+        verifyStatus: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>>;
+        verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DashboardAttestationGetResponse = z.infer<typeof dashboardAttestationGetResponseSchema>;
 /**
  * Run-summary projection from the orchestrator's execution_runs table.
  *
@@ -350,6 +795,7 @@ export declare const dashboardRunSummarySchema: z.ZodObject<{
     triggerEvent: z.ZodOptional<z.ZodString>;
     commitMessage: z.ZodOptional<z.ZodString>;
     jobCount: z.ZodOptional<z.ZodNumber>;
+    environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
     startedAt: z.ZodOptional<z.ZodString>;
     completedAt: z.ZodOptional<z.ZodString>;
     durationMs: z.ZodOptional<z.ZodNumber>;
@@ -375,6 +821,10 @@ export declare const dashboardRunsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -413,6 +863,7 @@ export declare const dashboardRunsListResponseSchema: z.ZodObject<{
         triggerEvent: z.ZodOptional<z.ZodString>;
         commitMessage: z.ZodOptional<z.ZodString>;
         jobCount: z.ZodOptional<z.ZodNumber>;
+        environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
         startedAt: z.ZodOptional<z.ZodString>;
         completedAt: z.ZodOptional<z.ZodString>;
         durationMs: z.ZodOptional<z.ZodNumber>;
@@ -441,6 +892,10 @@ export declare const dashboardRunsFiltersRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -497,6 +952,10 @@ export declare const dashboardSourcesListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -545,6 +1004,10 @@ export declare const runRerunRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -571,6 +1034,10 @@ export declare const manualScheduleRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -596,6 +1063,10 @@ export declare const runCancelRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -622,6 +1093,10 @@ export declare const dashboardPayloadRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -688,6 +1163,10 @@ export declare const dashboardEventLogListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -767,6 +1246,10 @@ export declare const dashboardEventLogDetailRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -865,6 +1348,10 @@ export declare const dashboardEventLogPayloadStreamRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -960,6 +1447,10 @@ export declare const dashboardEventDlqListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1008,6 +1499,10 @@ export declare const dashboardEventDlqCountRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1039,6 +1534,10 @@ export declare const dashboardEventDlqRetryRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1071,6 +1570,10 @@ export declare const dashboardEventDlqDiscardRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1103,6 +1606,10 @@ export declare const envListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1129,8 +1636,8 @@ declare const envListResponseSchema: z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
-            glob: "glob";
             fixed: "fixed";
+            glob: "glob";
         }>;
         globPattern: z.ZodNullable<z.ZodString>;
         enabled: z.ZodBoolean;
@@ -1148,6 +1655,10 @@ export declare const envGetRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1173,8 +1684,8 @@ declare const envGetResponseSchema: z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
-            glob: "glob";
             fixed: "fixed";
+            glob: "glob";
         }>;
         globPattern: z.ZodNullable<z.ZodString>;
         branchRestrictions: z.ZodNullable<z.ZodArray<z.ZodString>>;
@@ -1200,6 +1711,10 @@ export declare const envCreateRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1218,8 +1733,8 @@ export declare const envCreateRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     name: z.ZodString;
     envType: z.ZodEnum<{
-        glob: "glob";
         fixed: "fixed";
+        glob: "glob";
     }>;
     globPattern: z.ZodOptional<z.ZodString>;
     branchRestrictions: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -1240,6 +1755,10 @@ export declare const envUpdateRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1260,8 +1779,8 @@ export declare const envUpdateRequestSchema: z.ZodObject<{
     updates: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
         envType: z.ZodOptional<z.ZodEnum<{
-            glob: "glob";
             fixed: "fixed";
+            glob: "glob";
         }>>;
         globPattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         branchRestrictions: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
@@ -1283,6 +1802,10 @@ export declare const envTestAccessSetRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1309,6 +1832,10 @@ export declare const envDeleteRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1348,6 +1875,10 @@ export declare const envVarsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1383,6 +1914,10 @@ export declare const envVarSetRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1411,6 +1946,10 @@ export declare const envVarDeleteRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1437,6 +1976,10 @@ export declare const envSourceOverridesListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1463,6 +2006,10 @@ export declare const envSourceOverrideSetRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1491,6 +2038,10 @@ export declare const envSourceOverrideDeleteRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1511,6 +2062,16 @@ export declare const envSourceOverrideDeleteRequestSchema: z.ZodObject<{
     routingKey: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>;
+/**
+ * A scope→environment binding with its host selector. `hostPattern` is the host
+ * the binding applies to (`'**'` = all hosts); exact / glob / regex over a
+ * fan-out child's agentId / hostname / labels.
+ */
+export declare const envBindingEntrySchema: z.ZodObject<{
+    scopePattern: z.ZodString;
+    hostPattern: z.ZodString;
+}, z.core.$strip>;
+export type EnvBindingEntry = z.infer<typeof envBindingEntrySchema>;
 /** List bindings for an environment. */
 export declare const envBindingsListRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.list">;
@@ -1518,6 +2079,10 @@ export declare const envBindingsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1536,13 +2101,17 @@ export declare const envBindingsListRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     environmentId: z.ZodString;
 }, z.core.$strip>;
-/** Set bindings (scope patterns) for an environment. */
+/** Set bindings (scope + host patterns) for an environment. */
 export declare const envBindingsSetRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1560,7 +2129,10 @@ export declare const envBindingsSetRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     environmentId: z.ZodString;
-    scopePatterns: z.ZodArray<z.ZodString>;
+    bindings: z.ZodArray<z.ZodObject<{
+        scopePattern: z.ZodString;
+        hostPattern: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** List all scoped secrets for the org. */
 export declare const envSecretsListRequestSchema: z.ZodObject<{
@@ -1569,6 +2141,10 @@ export declare const envSecretsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1593,6 +2169,10 @@ export declare const envSecretSetRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1620,6 +2200,10 @@ export declare const envSecretDeleteRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1646,6 +2230,10 @@ export declare const envSecretScopeCreateRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1671,6 +2259,10 @@ export declare const envSecretScopeRenameRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1697,6 +2289,10 @@ export declare const envSecretScopeDeleteRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1722,6 +2318,10 @@ export declare const envHistoryRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1745,8 +2345,8 @@ export declare const envHistoryRequestSchema: z.ZodObject<{
 /** Status values for held runs (approval queue). */
 export declare const HeldRunStatus: z.ZodEnum<{
     pending: "pending";
-    rejected: "rejected";
     approved: "approved";
+    rejected: "rejected";
     expired: "expired";
 }>;
 export type HeldRunStatus = z.infer<typeof HeldRunStatus>;
@@ -1763,6 +2363,10 @@ export declare const heldRunsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1781,8 +2385,8 @@ export declare const heldRunsListRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     status: z.ZodOptional<z.ZodEnum<{
         pending: "pending";
-        rejected: "rejected";
         approved: "approved";
+        rejected: "rejected";
         expired: "expired";
     }>>;
     queueType: z.ZodOptional<z.ZodEnum<{
@@ -1806,8 +2410,8 @@ declare const heldRunsListResponseSchema: z.ZodObject<{
         }>;
         status: z.ZodEnum<{
             pending: "pending";
-            rejected: "rejected";
             approved: "approved";
+            rejected: "rejected";
             expired: "expired";
         }>;
         requestedAt: z.ZodCoercedString<unknown>;
@@ -1820,8 +2424,8 @@ declare const heldRunsListResponseSchema: z.ZodObject<{
         jobId: z.ZodOptional<z.ZodString>;
         holdScope: z.ZodOptional<z.ZodEnum<{
             job: "job";
-            step: "step";
             workflow: "workflow";
+            step: "step";
         }>>;
         stepIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         requirement: z.ZodOptional<z.ZodNullable<z.ZodObject<{
@@ -1859,6 +2463,10 @@ export declare const heldRunApproveRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1885,6 +2493,10 @@ export declare const heldRunRejectRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1911,6 +2523,10 @@ export declare const dashboardDiagnosticsRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1937,6 +2553,13 @@ export declare const fleetPinnedRunSchema: z.ZodObject<{
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type FleetPinnedRun = z.infer<typeof fleetPinnedRunSchema>;
+/** How a runsOnAll fan-out would treat one host, given its current reachability. */
+export declare const FleetHostDisposition: z.ZodEnum<{
+    target: "target";
+    "unreachable-durable": "unreachable-durable";
+    "skipped-ephemeral": "skipped-ephemeral";
+}>;
+export type FleetHostDisposition = z.infer<typeof FleetHostDisposition>;
 /** A host matched by a runsOnAll preview, plus how the fan-out would treat it. */
 export declare const fleetPreviewHostSchema: z.ZodObject<{
     entry: z.ZodObject<{
@@ -1970,6 +2593,10 @@ export declare const dashboardFleetHostsRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -1993,6 +2620,10 @@ export declare const dashboardFleetHostRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2017,6 +2648,10 @@ export declare const dashboardFleetPreviewRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2114,9 +2749,9 @@ export declare const dashboardFleetPreviewResponseSchema: z.ZodObject<{
         }>;
     }, z.core.$strip>>;
     onUnreachable: z.ZodEnum<{
+        hold: "hold";
         skip: "skip";
         fail: "fail";
-        hold: "hold";
     }>;
     estimatedChildCount: z.ZodNumber;
 }, z.core.$strip>;
@@ -2126,6 +2761,73 @@ export type DashboardFleetPreviewRequest = z.infer<typeof dashboardFleetPreviewR
 export type DashboardFleetHostsResponse = z.infer<typeof dashboardFleetHostsResponseSchema>;
 export type DashboardFleetHostResponse = z.infer<typeof dashboardFleetHostResponseSchema>;
 export type DashboardFleetPreviewResponse = z.infer<typeof dashboardFleetPreviewResponseSchema>;
+/** Request: which registered runsOnAll fan-outs target this host? */
+export declare const dashboardFleetWorkflowsForHostRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    agentId: z.ZodString;
+}, z.core.$strip>;
+/** One registered runsOnAll workflow whose selector matches the host. */
+export declare const fleetHostWorkflowSchema: z.ZodObject<{
+    workflowName: z.ZodString;
+    repoIdentifier: z.ZodString;
+    sourceFile: z.ZodNullable<z.ZodString>;
+    onUnreachable: z.ZodEnum<{
+        hold: "hold";
+        skip: "skip";
+        fail: "fail";
+    }>;
+    disposition: z.ZodEnum<{
+        target: "target";
+        "unreachable-durable": "unreachable-durable";
+        "skipped-ephemeral": "skipped-ephemeral";
+    }>;
+}, z.core.$strip>;
+export type FleetHostWorkflow = z.infer<typeof fleetHostWorkflowSchema>;
+export declare const dashboardFleetWorkflowsForHostResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host.response">;
+    requestId: z.ZodString;
+    workflows: z.ZodArray<z.ZodObject<{
+        workflowName: z.ZodString;
+        repoIdentifier: z.ZodString;
+        sourceFile: z.ZodNullable<z.ZodString>;
+        onUnreachable: z.ZodEnum<{
+            hold: "hold";
+            skip: "skip";
+            fail: "fail";
+        }>;
+        disposition: z.ZodEnum<{
+            target: "target";
+            "unreachable-durable": "unreachable-durable";
+            "skipped-ephemeral": "skipped-ephemeral";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DashboardFleetWorkflowsForHostRequest = z.infer<typeof dashboardFleetWorkflowsForHostRequestSchema>;
+export type DashboardFleetWorkflowsForHostResponse = z.infer<typeof dashboardFleetWorkflowsForHostResponseSchema>;
 /** Declare a static host into the roster (wraps HostRosterStore.declareStatic). */
 export declare const fleetHostDeclareRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare">;
@@ -2133,6 +2835,10 @@ export declare const fleetHostDeclareRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2150,7 +2856,7 @@ export declare const fleetHostDeclareRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     agentId: z.ZodString;
-    labels: z.ZodArray<z.ZodString>;
+    labels: z.ZodOptional<z.ZodArray<z.ZodString>>;
     hostname: z.ZodOptional<z.ZodString>;
     properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
 }, z.core.$strip>;
@@ -2158,6 +2864,7 @@ export declare const fleetHostDeclareResponseSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare.response">;
     requestId: z.ZodString;
     declared: z.ZodOptional<z.ZodBoolean>;
+    created: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** Remove a host from the roster by agent id (HostRosterStore.removeStatic). */
@@ -2167,6 +2874,10 @@ export declare const fleetHostRemoveRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2236,8 +2947,8 @@ declare const diagnosticsPeerSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
-            fail: "fail";
             pass: "pass";
+            fail: "fail";
             warn: "warn";
         }>;
         message: z.ZodNullable<z.ZodString>;
@@ -2361,8 +3072,8 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                fail: "fail";
                 pass: "pass";
+                fail: "fail";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -2381,6 +3092,10 @@ export declare const dashboardScalerCapacityRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2418,6 +3133,10 @@ export declare const dashboardScalerAgentsRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2473,6 +3192,10 @@ export declare const registrationDisableRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2499,6 +3222,10 @@ export declare const registrationDeleteRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2525,6 +3252,10 @@ export declare const registrationsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2612,6 +3343,10 @@ export declare const backendsListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2689,6 +3424,10 @@ export declare const backendGetRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2743,6 +3482,10 @@ export declare const backendsSyncAllRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2774,6 +3517,10 @@ export declare const backendSyncRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2807,6 +3554,10 @@ export declare const backendTestRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2849,6 +3600,10 @@ export declare const testRelayUploadsInitRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2889,6 +3644,10 @@ export declare const testRelayTriggerRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -2946,6 +3705,7 @@ export declare const testRelayTriggerRequestSchema: z.ZodObject<{
         }, z.core.$strip>>;
         allowEmpty: z.ZodBoolean;
     }, z.core.$strip>>;
+    dispatchInputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     encryptedSecrets: z.ZodOptional<z.ZodString>;
     encryptedSecretsKey: z.ZodOptional<z.ZodString>;
@@ -2957,8 +3717,8 @@ export declare const testRelayTriggerResponseSchema: z.ZodObject<{
     requestId: z.ZodString;
     runId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        accepted: "accepted";
         rejected: "rejected";
+        accepted: "accepted";
     }>>;
     reason: z.ZodOptional<z.ZodString>;
     jobIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -2972,6 +3732,10 @@ export declare const testRelayRunStatusRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3015,6 +3779,10 @@ export declare const testRelayRunLogsRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3052,6 +3820,10 @@ export declare const testRelayCancelRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3089,6 +3861,37 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.structured">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3112,6 +3915,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3132,11 +3939,85 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     jobId: z.ZodString;
     stepIndex: z.ZodNumber;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.attestations.list">;
+    type: z.ZodLiteral<"dashboard.attestations.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestations.list.all">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    page: z.ZodNumber;
+    sort: z.ZodOptional<z.ZodString>;
+    filters: z.ZodDefault<z.ZodObject<{
+        digest: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        status: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>>;
+        repository: z.ZodOptional<z.ZodString>;
+        workflow: z.ZodOptional<z.ZodString>;
+        job: z.ZodOptional<z.ZodString>;
+        createdAfter: z.ZodOptional<z.ZodString>;
+        createdBefore: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestation.get">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3153,13 +4034,17 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    runId: z.ZodString;
+    attestationId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.runs.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3184,6 +4069,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3206,6 +4095,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3230,6 +4123,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3254,6 +4151,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3277,6 +4178,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3301,6 +4206,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3324,6 +4233,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3348,6 +4261,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3372,6 +4289,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3395,6 +4316,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3413,8 +4338,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     name: z.ZodString;
     envType: z.ZodEnum<{
-        glob: "glob";
         fixed: "fixed";
+        glob: "glob";
     }>;
     globPattern: z.ZodOptional<z.ZodString>;
     branchRestrictions: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -3433,6 +4358,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3453,8 +4382,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     updates: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
         envType: z.ZodOptional<z.ZodEnum<{
-            glob: "glob";
             fixed: "fixed";
+            glob: "glob";
         }>>;
         globPattern: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         branchRestrictions: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
@@ -3474,6 +4403,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3498,6 +4431,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3521,6 +4458,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3544,6 +4485,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3570,6 +4515,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3594,6 +4543,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3618,6 +4571,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3644,6 +4601,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3669,6 +4630,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3692,6 +4657,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3709,13 +4678,20 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     environmentId: z.ZodString;
-    scopePatterns: z.ZodArray<z.ZodString>;
+    bindings: z.ZodArray<z.ZodObject<{
+        scopePattern: z.ZodString;
+        hostPattern: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.secrets.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3738,6 +4714,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3763,6 +4743,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3787,6 +4771,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3810,6 +4798,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3834,6 +4826,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3857,6 +4853,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3882,6 +4882,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3900,8 +4904,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     status: z.ZodOptional<z.ZodEnum<{
         pending: "pending";
-        rejected: "rejected";
         approved: "approved";
+        rejected: "rejected";
         expired: "expired";
     }>>;
     queueType: z.ZodOptional<z.ZodEnum<{
@@ -3915,6 +4919,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3939,6 +4947,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3963,6 +4975,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -3987,6 +5003,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4011,6 +5031,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4035,6 +5059,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4058,6 +5086,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4080,6 +5112,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4103,6 +5139,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4120,12 +5160,43 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     workflowName: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    agentId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4143,7 +5214,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     agentId: z.ZodString;
-    labels: z.ZodArray<z.ZodString>;
+    labels: z.ZodOptional<z.ZodArray<z.ZodString>>;
     hostname: z.ZodOptional<z.ZodString>;
     properties: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
 }, z.core.$strip>, z.ZodObject<{
@@ -4152,6 +5223,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4175,6 +5250,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4197,6 +5276,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4220,6 +5303,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4242,6 +5329,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4265,6 +5356,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4287,6 +5382,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4310,6 +5409,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4333,6 +5436,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4371,6 +5478,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4396,6 +5507,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4421,6 +5536,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4446,6 +5565,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4469,6 +5592,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4493,6 +5620,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4517,6 +5648,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4539,6 +5674,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4574,6 +5713,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4608,6 +5751,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         "fleet.host.declare": "fleet.host.declare";
         "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
+        "run.structured.read": "run.structured.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
         "sources.list.read": "sources.list.read";
@@ -4655,6 +5799,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
         "fleet.read": "fleet.read";
+        "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+        "fleet.pre_boot.send": "fleet.pre_boot.send";
         "backend.list.read": "backend.list.read";
         "backend.get.read": "backend.get.read";
         "backend.sync": "backend.sync";
@@ -4669,6 +5815,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         purge_chunk: "purge_chunk";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
+        agent: "agent";
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
@@ -4681,12 +5828,12 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     targetType: z.ZodOptional<z.ZodEnum<{
         run: "run";
         job: "job";
-        payload: "payload";
         step: "step";
+        environment: "environment";
+        payload: "payload";
         event_log: "event_log";
         event_log_payload: "event_log_payload";
         secret_scope: "secret_scope";
-        environment: "environment";
         registration: "registration";
         backend: "backend";
         diagnostics: "diagnostics";
@@ -4697,6 +5844,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         event_dlq: "event_dlq";
         org_settings: "org_settings";
         cluster_meta: "cluster_meta";
+        attestation: "attestation";
     }>>;
     targetId: z.ZodOptional<z.ZodString>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
@@ -4710,6 +5858,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4736,6 +5888,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4793,6 +5949,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         }, z.core.$strip>>;
         allowEmpty: z.ZodBoolean;
     }, z.core.$strip>>;
+    dispatchInputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     secrets: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     encryptedSecrets: z.ZodOptional<z.ZodString>;
     encryptedSecretsKey: z.ZodOptional<z.ZodString>;
@@ -4802,6 +5959,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4825,6 +5986,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4849,6 +6014,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
@@ -4887,6 +6056,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         errorMessage: z.ZodNullable<z.ZodString>;
         runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         initFailure: z.ZodOptional<z.ZodObject<{
@@ -4942,13 +6112,19 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 no_check: "no_check";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                sequential: "sequential";
+                "parallel-child": "parallel-child";
+                "parallel-group": "parallel-group";
+            }>>>;
+            groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
             unknown: "unknown";
-            trusted: "trusted";
             known: "known";
+            trusted: "trusted";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
             head: "head";
@@ -4975,6 +6151,166 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         jobName: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.structured.response">;
+    requestId: z.ZodString;
+    result: z.ZodNullable<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        status: z.ZodEnum<{
+            success: "success";
+            pending: "pending";
+            running: "running";
+            failed: "failed";
+            cancelled: "cancelled";
+            cancelling: "cancelling";
+            held: "held";
+        }>;
+        provider: z.ZodString;
+        repoIdentifier: z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        ref: z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>;
+        sha: z.ZodString;
+        baseSha: z.ZodNullable<z.ZodString>;
+        startedAt: z.ZodNullable<z.ZodString>;
+        completedAt: z.ZodNullable<z.ZodString>;
+        durationMs: z.ZodNullable<z.ZodNumber>;
+        trustTier: z.ZodNullable<z.ZodEnum<{
+            unknown: "unknown";
+            known: "known";
+            trusted: "trusted";
+        }>>;
+        contributorUsername: z.ZodNullable<z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        failureCategory: z.ZodNullable<z.ZodEnum<{
+            unknown: "unknown";
+            cancelled: "cancelled";
+            init_failure: "init_failure";
+            timed_out: "timed_out";
+            step_failed: "step_failed";
+            infra: "infra";
+        }>>;
+        failureReason: z.ZodNullable<z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        triggeredBy: z.ZodNullable<z.ZodString>;
+        jobs: z.ZodArray<z.ZodObject<{
+            jobId: z.ZodString;
+            jobName: z.ZodObject<{
+                untrusted: z.ZodLiteral<true>;
+                value: z.ZodString;
+            }, z.core.$strip>;
+            status: z.ZodEnum<{
+                skipped: "skipped";
+                success: "success";
+                pending: "pending";
+                running: "running";
+                failed: "failed";
+                cancelled: "cancelled";
+                cancelling: "cancelling";
+                queued: "queued";
+                recovering: "recovering";
+                timed_out_stale: "timed_out_stale";
+                drift_dropped: "drift_dropped";
+            }>;
+            startedAt: z.ZodNullable<z.ZodString>;
+            completedAt: z.ZodNullable<z.ZodString>;
+            durationMs: z.ZodNullable<z.ZodNumber>;
+            agentId: z.ZodNullable<z.ZodString>;
+            errorMessage: z.ZodNullable<z.ZodObject<{
+                untrusted: z.ZodLiteral<true>;
+                value: z.ZodString;
+            }, z.core.$strip>>;
+            initFailure: z.ZodNullable<z.ZodObject<{
+                scope: z.ZodEnum<{
+                    run: "run";
+                    job: "job";
+                }>;
+                category: z.ZodEnum<{
+                    secret_resolution: "secret_resolution";
+                    install_secrets: "install_secrets";
+                    lock_resolution: "lock_resolution";
+                    build_coordination: "build_coordination";
+                    environment_rules: "environment_rules";
+                    dynamic_eval: "dynamic_eval";
+                    no_agent: "no_agent";
+                    matrix_expansion: "matrix_expansion";
+                }>;
+                message: z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>;
+            }, z.core.$strip>>;
+            needs: z.ZodArray<z.ZodObject<{
+                ref: z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>;
+                runOn: z.ZodArray<z.ZodEnum<{
+                    skipped: "skipped";
+                    success: "success";
+                    pending: "pending";
+                    running: "running";
+                    failed: "failed";
+                    cancelled: "cancelled";
+                    cancelling: "cancelling";
+                    queued: "queued";
+                    recovering: "recovering";
+                    timed_out_stale: "timed_out_stale";
+                    drift_dropped: "drift_dropped";
+                }>>;
+            }, z.core.$strip>>;
+            outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
+                untrusted: z.ZodLiteral<true>;
+                value: z.ZodString;
+            }, z.core.$strip>>>;
+            secretOutputKeys: z.ZodArray<z.ZodString>;
+            steps: z.ZodArray<z.ZodObject<{
+                stepIndex: z.ZodNumber;
+                stepName: z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>;
+                status: z.ZodEnum<{
+                    skipped: "skipped";
+                    success: "success";
+                    pending: "pending";
+                    running: "running";
+                    failed: "failed";
+                    cancelled: "cancelled";
+                }>;
+                exitCode: z.ZodNullable<z.ZodNumber>;
+                durationMs: z.ZodNullable<z.ZodNumber>;
+                startedAt: z.ZodNullable<z.ZodString>;
+                completedAt: z.ZodNullable<z.ZodString>;
+                errorMessage: z.ZodNullable<z.ZodObject<{
+                    untrusted: z.ZodLiteral<true>;
+                    value: z.ZodString;
+                }, z.core.$strip>>;
+                stepType: z.ZodString;
+                checkOutcome: z.ZodNullable<z.ZodEnum<{
+                    skipped: "skipped";
+                    applied: "applied";
+                    declined: "declined";
+                    "dry-run": "dry-run";
+                    no_check: "no_check";
+                }>>;
+                secretsAccessed: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs.response">;
     requestId: z.ZodString;
@@ -5008,6 +6344,78 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 identityToken: z.ZodString;
             }, z.core.$strip>;
         }, z.core.$strip>;
+        runId: z.ZodOptional<z.ZodString>;
+        verifyStatus: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>>;
+        verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestations.list.all.response">;
+    requestId: z.ZodString;
+    attestations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        runId: z.ZodString;
+        jobId: z.ZodString;
+        jobName: z.ZodNullable<z.ZodString>;
+        subjectName: z.ZodString;
+        subjectDigest: z.ZodString;
+        mode: z.ZodString;
+        mediaType: z.ZodString;
+        createdAt: z.ZodString;
+        verifyStatus: z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>;
+        verifyReason: z.ZodNullable<z.ZodString>;
+        repository: z.ZodNullable<z.ZodString>;
+        workflow: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    page: z.ZodNumber;
+    pageSize: z.ZodNumber;
+    total: z.ZodNumber;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.attestation.get.response">;
+    requestId: z.ZodString;
+    attestation: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        jobId: z.ZodString;
+        jobName: z.ZodNullable<z.ZodString>;
+        subjectName: z.ZodString;
+        subjectDigest: z.ZodString;
+        mode: z.ZodString;
+        mediaType: z.ZodString;
+        createdAt: z.ZodString;
+        bundle: z.ZodObject<{
+            mediaType: z.ZodLiteral<"application/vnd.kici.provenance.bundle+json;version=0.1">;
+            dsseEnvelope: z.ZodObject<{
+                payloadType: z.ZodString;
+                payload: z.ZodString;
+                signatures: z.ZodArray<z.ZodObject<{
+                    keyid: z.ZodString;
+                    sig: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>;
+            verificationMaterial: z.ZodObject<{
+                publicKey: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+                identityToken: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>;
+        runId: z.ZodOptional<z.ZodString>;
+        verifyStatus: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>>;
+        verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
@@ -5027,6 +6435,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         triggerEvent: z.ZodOptional<z.ZodString>;
         commitMessage: z.ZodOptional<z.ZodString>;
         jobCount: z.ZodOptional<z.ZodNumber>;
+        environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
         startedAt: z.ZodOptional<z.ZodString>;
         completedAt: z.ZodOptional<z.ZodString>;
         durationMs: z.ZodOptional<z.ZodNumber>;
@@ -5111,8 +6520,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
-            glob: "glob";
             fixed: "fixed";
+            glob: "glob";
         }>;
         globPattern: z.ZodNullable<z.ZodString>;
         enabled: z.ZodBoolean;
@@ -5129,8 +6538,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
-            glob: "glob";
             fixed: "fixed";
+            glob: "glob";
         }>;
         globPattern: z.ZodNullable<z.ZodString>;
         branchRestrictions: z.ZodNullable<z.ZodArray<z.ZodString>>;
@@ -5204,7 +6613,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.list.response">;
     requestId: z.ZodString;
-    scopePatterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    bindings: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        scopePattern: z.ZodString;
+        hostPattern: z.ZodString;
+    }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.environments.bindings.set.response">;
@@ -5270,8 +6682,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         }>;
         status: z.ZodEnum<{
             pending: "pending";
-            rejected: "rejected";
             approved: "approved";
+            rejected: "rejected";
             expired: "expired";
         }>;
         requestedAt: z.ZodCoercedString<unknown>;
@@ -5284,8 +6696,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         jobId: z.ZodOptional<z.ZodString>;
         holdScope: z.ZodOptional<z.ZodEnum<{
             job: "job";
-            step: "step";
             workflow: "workflow";
+            step: "step";
         }>>;
         stepIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         requirement: z.ZodOptional<z.ZodNullable<z.ZodObject<{
@@ -5478,8 +6890,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                fail: "fail";
                 pass: "pass";
+                fail: "fail";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -5567,15 +6979,34 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         }>;
     }, z.core.$strip>>;
     onUnreachable: z.ZodEnum<{
+        hold: "hold";
         skip: "skip";
         fail: "fail";
-        hold: "hold";
     }>;
     estimatedChildCount: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.fleet.workflows-for-host.response">;
+    requestId: z.ZodString;
+    workflows: z.ZodArray<z.ZodObject<{
+        workflowName: z.ZodString;
+        repoIdentifier: z.ZodString;
+        sourceFile: z.ZodNullable<z.ZodString>;
+        onUnreachable: z.ZodEnum<{
+            hold: "hold";
+            skip: "skip";
+            fail: "fail";
+        }>;
+        disposition: z.ZodEnum<{
+            target: "target";
+            "unreachable-durable": "unreachable-durable";
+            "skipped-ephemeral": "skipped-ephemeral";
+        }>;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.declare.response">;
     requestId: z.ZodString;
     declared: z.ZodOptional<z.ZodBoolean>;
+    created: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.fleet.host.remove.response">;
@@ -5886,6 +7317,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             "fleet.host.declare": "fleet.host.declare";
             "fleet.host.remove": "fleet.host.remove";
             "run.detail.read": "run.detail.read";
+            "run.structured.read": "run.structured.read";
             "runs.list.read": "runs.list.read";
             "runs.filters.read": "runs.filters.read";
             "sources.list.read": "sources.list.read";
@@ -5933,6 +7365,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             "scaler.capacity.read": "scaler.capacity.read";
             "scaler.agents.read": "scaler.agents.read";
             "fleet.read": "fleet.read";
+            "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+            "fleet.pre_boot.send": "fleet.pre_boot.send";
             "backend.list.read": "backend.list.read";
             "backend.get.read": "backend.get.read";
             "backend.sync": "backend.sync";
@@ -5949,12 +7383,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         targetType: z.ZodNullable<z.ZodEnum<{
             run: "run";
             job: "job";
-            payload: "payload";
             step: "step";
+            environment: "environment";
+            payload: "payload";
             event_log: "event_log";
             event_log_payload: "event_log_payload";
             secret_scope: "secret_scope";
-            environment: "environment";
             registration: "registration";
             backend: "backend";
             diagnostics: "diagnostics";
@@ -5965,10 +7399,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             event_dlq: "event_dlq";
             org_settings: "org_settings";
             cluster_meta: "cluster_meta";
+            attestation: "attestation";
         }>>;
         targetId: z.ZodNullable<z.ZodString>;
         requestId: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            agent: "agent";
             platform_proxy: "platform_proxy";
             admin_http: "admin_http";
             admin_cli: "admin_cli";
@@ -5996,8 +7432,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     requestId: z.ZodString;
     runId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        accepted: "accepted";
         rejected: "rejected";
+        accepted: "accepted";
     }>>;
     reason: z.ZodOptional<z.ZodString>;
     jobIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -6112,6 +7548,7 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
         orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         errorMessage: z.ZodNullable<z.ZodString>;
         runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         initFailure: z.ZodOptional<z.ZodObject<{
@@ -6167,13 +7604,19 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
                 no_check: "no_check";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+                sequential: "sequential";
+                "parallel-child": "parallel-child";
+                "parallel-group": "parallel-group";
+            }>>>;
+            groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
             unknown: "unknown";
-            trusted: "trusted";
             known: "known";
+            trusted: "trusted";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
             head: "head";
@@ -6247,6 +7690,14 @@ export declare const dashboardAttestationsApiResponseSchema: z.ZodObject<{
                 identityToken: z.ZodString;
             }, z.core.$strip>;
         }, z.core.$strip>;
+        runId: z.ZodOptional<z.ZodString>;
+        verifyStatus: z.ZodOptional<z.ZodEnum<{
+            pending: "pending";
+            failed: "failed";
+            verified: "verified";
+            unverifiable: "unverifiable";
+        }>>;
+        verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /** Single run summary in the paginated run list. */
@@ -6280,6 +7731,9 @@ export declare const runListItemSchema: z.ZodObject<{
     failureReason: z.ZodOptional<z.ZodString>;
     hadCompileJob: z.ZodBoolean;
     compileJobId: z.ZodNullable<z.ZodString>;
+    environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    repoProvider: z.ZodNullable<z.ZodString>;
+    localWorkingTree: z.ZodBoolean;
     source: z.ZodNullable<z.ZodObject<{
         routingKey: z.ZodString;
         name: z.ZodNullable<z.ZodString>;
@@ -6325,6 +7779,9 @@ export declare const runListResponseSchema: z.ZodObject<{
         failureReason: z.ZodOptional<z.ZodString>;
         hadCompileJob: z.ZodBoolean;
         compileJobId: z.ZodNullable<z.ZodString>;
+        environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        repoProvider: z.ZodNullable<z.ZodString>;
+        localWorkingTree: z.ZodBoolean;
         source: z.ZodNullable<z.ZodObject<{
             routingKey: z.ZodString;
             name: z.ZodNullable<z.ZodString>;
@@ -6447,8 +7904,8 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
-            fail: "fail";
             pass: "pass";
+            fail: "fail";
             warn: "warn";
         }>;
         message: z.ZodNullable<z.ZodString>;
@@ -6539,8 +7996,8 @@ export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                fail: "fail";
                 pass: "pass";
+                fail: "fail";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -6680,5 +8137,22 @@ export declare const memberListResponseSchema: z.ZodObject<{
 }, z.core.$strip>;
 export type OrgMember = z.infer<typeof orgMemberSchema>;
 export type MemberListResponse = z.infer<typeof memberListResponseSchema>;
+/**
+ * Every dashboard request type the local build understands, derived from the
+ * discriminated union so it can never drift. A component advertises this set to
+ * describe ITSELF; gating decisions always compare against the REMOTE's
+ * advertised set, never this local one.
+ */
+export declare const DASHBOARD_REQUEST_TYPES: readonly string[];
+/** Membership-test form of {@link DASHBOARD_REQUEST_TYPES}. */
+export declare const DASHBOARD_REQUEST_TYPE_SET: ReadonlySet<string>;
+/** Structured error code on a dashboard `*.response` frame's `code` field. */
+export declare const DashboardResponseErrorCode: z.ZodEnum<{
+    unsupported_request_type: "unsupported_request_type";
+    invalid_payload: "invalid_payload";
+    unsupported_message_type: "unsupported_message_type";
+    internal_error: "internal_error";
+}>;
+export type DashboardResponseErrorCode = z.infer<typeof DashboardResponseErrorCode>;
 export {};
 //# sourceMappingURL=dashboard.d.ts.map