@kici-dev/engine 0.1.22 → 0.1.24

package/dist/protocol/messages/dashboard.js

@@ -1,13 +1,14 @@
 import "../../chunk-BTugEXQM.js";
 import { CheckMode, CheckStepOutcome } from "../../check-mode.js";
 import { actorPrincipalSchema } from "./actor.js";
-import { initFailureSchema } from "./execution-status.js";
-import { DeploymentContainerRuntimeSchema, DeploymentModeSchema } from "./deployment-identity.js";
-import { SourceSubtype } from "./source-registration.js";
+import { StepConcurrencyKind, initFailureSchema } from "./execution-status.js";
+import { agentRunResultSchema } from "./agent-run-result.js";
 import { kiciBundleSchema } from "../../provenance/bundle.js";
 import { dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema } from "./access-log.js";
 import { dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema } from "./run-events.js";
 import { EventLogSource, EventLogStatus, PayloadOmittedReason } from "./event-log.js";
+import { DeploymentContainerRuntimeSchema, DeploymentModeSchema } from "./deployment-identity.js";
+import { SourceSubtype } from "./source-registration.js";
 import { ScalerBackendType } from "../../scaler/scaler-backend-type.js";
 import { ApprovalDecision, HoldScope, approverClauseSchema } from "../../approval/types.js";
 import { NeedsRunOn, OnUnreachableMode } from "../../trigger/types.js";
@@ -23,6 +24,24 @@ const dashboardRunDetailRequestSchema = z.object({
 	actor: actorPrincipalSchema,
 	runId: z.string()
 });
+/**
+* Request the machine-first, provenance-tagged structured run result from the
+* orchestrator (user-plane equivalent of the orchestrator-admin
+* `/runs/:id/structured` endpoint). Reuses the Phase-1 `AgentRunResult` shape.
+*/
+const dashboardRunStructuredRequestSchema = z.object({
+	type: z.literal("dashboard.run.structured"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	runId: z.string()
+});
+/** Response carrying the provenance-tagged AgentRunResult (null when not found). */
+const dashboardRunStructuredResponseSchema = z.object({
+	type: z.literal("dashboard.run.structured.response"),
+	requestId: z.string(),
+	result: agentRunResultSchema.nullable(),
+	error: z.string().optional()
+});
 /** Request step logs from orchestrator. */
 const dashboardStepLogsRequestSchema = z.object({
 	type: z.literal("dashboard.step.logs"),
@@ -49,7 +68,11 @@ const dashboardStepDetailSchema = z.object({
 	/** Idempotent per-step outcome under a check mode. null/absent for non-check runs. */
 	checkOutcome: CheckStepOutcome.nullable().optional(),
 	/** Human-readable drift summary, present when the step reported drift. */
-	driftSummary: z.string().nullable().optional()
+	driftSummary: z.string().nullable().optional(),
+	/** Step concurrency role; absent/`sequential` for ordinary steps. */
+	concurrencyKind: StepConcurrencyKind.nullable().optional(),
+	/** Parallel-group correlation id shared by a group's children (e.g. `g0`). */
+	groupId: z.string().nullable().optional()
 });
 /** Job detail within a run detail response. */
 const dashboardJobDetailSchema = z.object({
@@ -71,6 +94,12 @@ const dashboardJobDetailSchema = z.object({
 	errorMessage: z.string().nullable(),
 	/** Labels used for agent routing (e.g. ["kici:os:linux", "kici:arch:x64"]). */
 	runsOnLabels: z.array(z.string()).nullable().optional(),
+	/**
+	* Ordered bound deployment-environment names for this job, in merge order
+	* (later environments override earlier on key collisions). A `(dynamic)`
+	* entry marks an element resolved at runtime. null/absent = no binding.
+	*/
+	environments: z.array(z.string()).nullable().optional(),
 	/** Aggregated step outputs (step-keyed map). Present when job completed successfully with outputs. */
 	outputs: z.record(z.string(), z.record(z.string(), z.unknown())).nullable().optional(),
 	/** Secret output key names produced by this job (values are NOT included -- display masked). */
@@ -132,6 +161,22 @@ const dashboardAttestationsListRequestSchema = z.object({
 	runId: z.string()
 });
 /**
+* Server-side verification verdict for an attestation, computed at ingest.
+* - `verified` — `verifyKiciBundle` succeeded.
+* - `failed` — verification ran and the bundle failed (signature / identity /
+*   build-context / unsupported mode). A provenance-integrity signal.
+* - `unverifiable` — no verdict could be computed (no trust root configured, or
+*   the JWKS / bundle could not be read). NOT a forgery signal.
+* - `pending` — verdict not yet computed (pre-backfill row, or ingest raced the
+*   trust root).
+*/
+const attestationVerifyStatusSchema = z.enum([
+	"verified",
+	"failed",
+	"unverifiable",
+	"pending"
+]);
+/**
 * Single attestation in the list response, with its bundle inlined from object
 * storage so the dashboard verifies it without a second fetch. The bundle is a
 * KiCI Mode-A bundle (`@kici-dev/engine/provenance/bundle`).
@@ -145,7 +190,16 @@ const attestationListItemSchema = z.object({
 	mode: z.string(),
 	mediaType: z.string(),
 	createdAt: z.string(),
-	bundle: kiciBundleSchema
+	bundle: kiciBundleSchema,
+	/**
+	* Owning run id — populated by the single-attestation detail get (for the
+	* "view run" link); omitted by the per-run list (the run is already known).
+	*/
+	runId: z.string().optional(),
+	/** Stored server-side verdict — populated by the detail get (omitted per-run). */
+	verifyStatus: attestationVerifyStatusSchema.optional(),
+	/** First failure reason for the stored verdict, when failed (detail get only). */
+	verifyReason: z.string().nullable().optional()
 });
 /** Response with the run's attestations (correlates to dashboard.attestations.list). */
 const dashboardAttestationsListResponseSchema = z.object({
@@ -155,6 +209,70 @@ const dashboardAttestationsListResponseSchema = z.object({
 	error: z.string().optional()
 });
 /**
+* Metadata-only summary row for the org-wide list. No inlined bundle (keeps the
+* list cheap). `repository` / `workflow` are joined from `execution_runs` when
+* available.
+*/
+const attestationListSummarySchema = z.object({
+	id: z.string(),
+	runId: z.string(),
+	jobId: z.string(),
+	jobName: z.string().nullable(),
+	subjectName: z.string(),
+	subjectDigest: z.string(),
+	mode: z.string(),
+	mediaType: z.string(),
+	createdAt: z.string(),
+	verifyStatus: attestationVerifyStatusSchema,
+	verifyReason: z.string().nullable(),
+	repository: z.string().nullable(),
+	workflow: z.string().nullable()
+});
+/** Filters for the org-wide attestations list. */
+const attestationListFiltersSchema = z.object({
+	digest: z.string().optional(),
+	name: z.string().optional(),
+	status: attestationVerifyStatusSchema.optional(),
+	repository: z.string().optional(),
+	workflow: z.string().optional(),
+	job: z.string().optional(),
+	createdAfter: z.string().optional(),
+	createdBefore: z.string().optional()
+});
+/** Request the org-wide, paginated, filtered list of attestations. */
+const dashboardAttestationsListAllRequestSchema = z.object({
+	type: z.literal("dashboard.attestations.list.all"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	page: z.number().int().positive(),
+	sort: z.string().optional(),
+	filters: attestationListFiltersSchema.default({})
+});
+/** Response with one page of org-wide attestation summaries. */
+const dashboardAttestationsListAllResponseSchema = z.object({
+	type: z.literal("dashboard.attestations.list.all.response"),
+	requestId: z.string(),
+	attestations: z.array(attestationListSummarySchema),
+	page: z.number().int(),
+	pageSize: z.number().int(),
+	total: z.number().int(),
+	error: z.string().optional()
+});
+/** Request a single attestation by id (detail page; inlines the one bundle). */
+const dashboardAttestationGetRequestSchema = z.object({
+	type: z.literal("dashboard.attestation.get"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	attestationId: z.string()
+});
+/** Response with one attestation (the existing item shape with bundle), or null. */
+const dashboardAttestationGetResponseSchema = z.object({
+	type: z.literal("dashboard.attestation.get.response"),
+	requestId: z.string(),
+	attestation: attestationListItemSchema.nullable(),
+	error: z.string().optional()
+});
+/**
 * Run-summary projection from the orchestrator's execution_runs table.
 *
 * The required fields (`runId` / `routingKey` / `status`) are always present.
@@ -175,6 +293,8 @@ const dashboardRunSummarySchema = z.object({
 	triggerEvent: z.string().optional(),
 	commitMessage: z.string().optional(),
 	jobCount: z.number().optional(),
+	/** Distinct bound deployment-environment names across the run's jobs (first-seen order). */
+	environments: z.array(z.string()).optional(),
 	startedAt: z.string().optional(),
 	completedAt: z.string().optional(),
 	durationMs: z.number().optional(),
@@ -819,6 +939,15 @@ const envSourceOverrideDeleteResponseSchema = z.object({
 	requestId: z.string(),
 	error: z.string().optional()
 });
+/**
+* A scope→environment binding with its host selector. `hostPattern` is the host
+* the binding applies to (`'**'` = all hosts); exact / glob / regex over a
+* fan-out child's agentId / hostname / labels.
+*/
+const envBindingEntrySchema = z.object({
+	scopePattern: z.string(),
+	hostPattern: z.string()
+});
 /** List bindings for an environment. */
 const envBindingsListRequestSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.list"),
@@ -829,16 +958,16 @@ const envBindingsListRequestSchema = z.object({
 const envBindingsListResponseSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.list.response"),
 	requestId: z.string(),
-	scopePatterns: z.array(z.string()).optional(),
+	bindings: z.array(envBindingEntrySchema).optional(),
 	error: z.string().optional()
 });
-/** Set bindings (scope patterns) for an environment. */
+/** Set bindings (scope + host patterns) for an environment. */
 const envBindingsSetRequestSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.set"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	environmentId: z.string(),
-	scopePatterns: z.array(z.string())
+	bindings: z.array(envBindingEntrySchema)
 });
 const envBindingsSetResponseSchema = z.object({
 	type: z.literal("dashboard.environments.bindings.set.response"),
@@ -1054,14 +1183,16 @@ const fleetPinnedRunSchema = z.object({
 	status: z.string(),
 	createdAt: z.string()
 });
+/** How a runsOnAll fan-out would treat one host, given its current reachability. */
+const FleetHostDisposition = z.enum([
+	"target",
+	"unreachable-durable",
+	"skipped-ephemeral"
+]);
 /** A host matched by a runsOnAll preview, plus how the fan-out would treat it. */
 const fleetPreviewHostSchema = z.object({
 	entry: HostInventoryEntry,
-	disposition: z.enum([
-		"target",
-		"unreachable-durable",
-		"skipped-ephemeral"
-	])
+	disposition: FleetHostDisposition
 });
 const dashboardFleetHostsRequestSchema = z.object({
 	type: z.literal("dashboard.fleet.hosts"),
@@ -1098,13 +1229,33 @@ const dashboardFleetPreviewResponseSchema = z.object({
 	onUnreachable: OnUnreachableMode,
 	estimatedChildCount: z.number()
 });
+/** Request: which registered runsOnAll fan-outs target this host? */
+const dashboardFleetWorkflowsForHostRequestSchema = z.object({
+	type: z.literal("dashboard.fleet.workflows-for-host"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	agentId: z.string()
+});
+/** One registered runsOnAll workflow whose selector matches the host. */
+const fleetHostWorkflowSchema = z.object({
+	workflowName: z.string(),
+	repoIdentifier: z.string(),
+	sourceFile: z.string().nullable(),
+	onUnreachable: OnUnreachableMode,
+	disposition: FleetHostDisposition
+});
+const dashboardFleetWorkflowsForHostResponseSchema = z.object({
+	type: z.literal("dashboard.fleet.workflows-for-host.response"),
+	requestId: z.string(),
+	workflows: z.array(fleetHostWorkflowSchema)
+});
 /** Declare a static host into the roster (wraps HostRosterStore.declareStatic). */
 const fleetHostDeclareRequestSchema = z.object({
 	type: z.literal("dashboard.fleet.host.declare"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	agentId: z.string(),
-	labels: z.array(z.string()),
+	labels: z.array(z.string()).optional(),
 	hostname: z.string().optional(),
 	properties: z.record(z.string(), z.union([
 		z.string(),
@@ -1116,6 +1267,7 @@ const fleetHostDeclareResponseSchema = z.object({
 	type: z.literal("dashboard.fleet.host.declare.response"),
 	requestId: z.string(),
 	declared: z.boolean().optional(),
+	created: z.boolean().optional(),
 	error: z.string().optional()
 });
 /** Remove a host from the roster by agent id (HostRosterStore.removeStatic). */
@@ -1535,6 +1687,12 @@ const testRelayTriggerRequestSchema = z.object({
 	* job's matched roster with this selector. Omitted for webhook runs.
 	*/
 	target: HostTargetSelector.optional(),
+	/**
+	* Raw operator-supplied `kici run --input KEY=VALUE` pairs (not coerced /
+	* defaulted), relayed verbatim. The orchestrator validates + coerces + applies
+	* defaults authoritatively against the matched workflow's lock descriptor.
+	*/
+	dispatchInputs: z.record(z.string(), z.string()).optional(),
 	secrets: z.record(z.string(), z.string()).optional(),
 	encryptedSecrets: z.string().optional(),
 	encryptedSecretsKey: z.string().optional()
@@ -1607,8 +1765,11 @@ const testRelayCancelResponseSchema = z.object({
 /** Dashboard messages flowing from Platform to Orchestrator. */
 const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 	dashboardRunDetailRequestSchema,
+	dashboardRunStructuredRequestSchema,
 	dashboardStepLogsRequestSchema,
 	dashboardAttestationsListRequestSchema,
+	dashboardAttestationsListAllRequestSchema,
+	dashboardAttestationGetRequestSchema,
 	dashboardRunsListRequestSchema,
 	dashboardRunsFiltersRequestSchema,
 	dashboardSourcesListRequestSchema,
@@ -1648,6 +1809,7 @@ const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 	dashboardFleetHostsRequestSchema,
 	dashboardFleetHostRequestSchema,
 	dashboardFleetPreviewRequestSchema,
+	dashboardFleetWorkflowsForHostRequestSchema,
 	fleetHostDeclareRequestSchema,
 	fleetHostRemoveRequestSchema,
 	dashboardScalerCapacityRequestSchema,
@@ -1676,8 +1838,11 @@ const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 /** Dashboard messages flowing from Orchestrator to Platform. */
 const dashboardOrchToPlatformSchema = z.discriminatedUnion("type", [
 	dashboardRunDetailResponseSchema,
+	dashboardRunStructuredResponseSchema,
 	dashboardStepLogsResponseSchema,
 	dashboardAttestationsListResponseSchema,
+	dashboardAttestationsListAllResponseSchema,
+	dashboardAttestationGetResponseSchema,
 	dashboardRunsListResponseSchema,
 	dashboardRunsFiltersResponseSchema,
 	dashboardSourcesListResponseSchema,
@@ -1717,6 +1882,7 @@ const dashboardOrchToPlatformSchema = z.discriminatedUnion("type", [
 	dashboardFleetHostsResponseSchema,
 	dashboardFleetHostResponseSchema,
 	dashboardFleetPreviewResponseSchema,
+	dashboardFleetWorkflowsForHostResponseSchema,
 	fleetHostDeclareResponseSchema,
 	fleetHostRemoveResponseSchema,
 	dashboardScalerCapacityResponseSchema,
@@ -1812,6 +1978,19 @@ const runListItemSchema = z.object({
 	failureReason: z.string().optional(),
 	hadCompileJob: z.boolean(),
 	compileJobId: z.string().nullable(),
+	/**
+	* Distinct bound deployment-environment names across the run's jobs
+	* (first-seen order). Drives the run-list environment chips; empty/absent
+	* when no job binds an environment.
+	*/
+	environments: z.array(z.string()).optional(),
+	/**
+	* Run-level repo provider (origin host) — distinct from `source.provider`
+	* which is derived from the routing key. Drives provider-aware repo links.
+	*/
+	repoProvider: z.string().nullable(),
+	/** True when the run executed a developer's local working tree (`kici run remote`). */
+	localWorkingTree: z.boolean(),
 	source: runListSourceSchema.nullable()
 });
 /** Paginated run list response envelope. */
@@ -1990,7 +2169,23 @@ const orgMemberSchema = z.object({
 });
 /** Response for org members list endpoint. */
 const memberListResponseSchema = z.object({ members: z.array(orgMemberSchema) });
+/**
+* Every dashboard request type the local build understands, derived from the
+* discriminated union so it can never drift. A component advertises this set to
+* describe ITSELF; gating decisions always compare against the REMOTE's
+* advertised set, never this local one.
+*/
+const DASHBOARD_REQUEST_TYPES = dashboardPlatformToOrchSchema.options.map((o) => o.shape.type.value);
+/** Membership-test form of {@link DASHBOARD_REQUEST_TYPES}. */
+const DASHBOARD_REQUEST_TYPE_SET = new Set(DASHBOARD_REQUEST_TYPES);
+/** Structured error code on a dashboard `*.response` frame's `code` field. */
+const DashboardResponseErrorCode = z.enum([
+	"unsupported_request_type",
+	"invalid_payload",
+	"unsupported_message_type",
+	"internal_error"
+]);
 //#endregion
-export { EnvDeleteErrorCode, EventLogPayloadStreamError, HeldRunQueueType, HeldRunStatus, TestRelayType, attestationListItemSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, trustPolicyResponseSchema };
+export { DASHBOARD_REQUEST_TYPES, DASHBOARD_REQUEST_TYPE_SET, DashboardResponseErrorCode, EnvDeleteErrorCode, EventLogPayloadStreamError, FleetHostDisposition, HeldRunQueueType, HeldRunStatus, TestRelayType, attestationListFiltersSchema, attestationListItemSchema, attestationListSummarySchema, attestationVerifyStatusSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardAttestationGetRequestSchema, dashboardAttestationGetResponseSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListAllRequestSchema, dashboardAttestationsListAllResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardFleetWorkflowsForHostRequestSchema, dashboardFleetWorkflowsForHostResponseSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunStructuredRequestSchema, dashboardRunStructuredResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, envBindingEntrySchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetHostWorkflowSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, trustPolicyResponseSchema };
 
 //# sourceMappingURL=dashboard.js.map

package/dist/protocol/messages/execution-status.d.ts

@@ -1,4 +1,18 @@
 import { z } from 'zod';
+/** Max length for ids and short identifier fields (runId, jobId, sha, ref, …). */
+export declare const STATUS_ID_MAX = 128;
+/** Max length for the repo identifier (`owner/repo` can be long). */
+export declare const REPO_IDENTIFIER_MAX = 256;
+/** Max length for free-text fields (commit message, failure/error reason). */
+export declare const STATUS_FREE_TEXT_MAX = 2000;
+/** Max number of runs in a single `state.replay` snapshot. */
+export declare const STATE_REPLAY_MAX_RUNS = 500;
+/** Max number of jobs attached to a single run in a `state.replay` snapshot. */
+export declare const MAX_JOBS_PER_RUN = 1000;
+/** Max number of `runsOn` / `secretsAccessed` label entries on a job/step. */
+export declare const RUNS_ON_LABELS_MAX = 30;
+/** Max number of bound deployment-environment names on a job. */
+export declare const ENVIRONMENTS_MAX = 30;
 /**
  * Status values for execution runs (execution_runs table).
  *
@@ -34,14 +48,36 @@ export declare const ExecutionJobStatus: z.ZodEnum<{
     drift_dropped: "drift_dropped";
 }>;
 export type ExecutionJobStatus = z.infer<typeof ExecutionJobStatus>;
-/** Status values for execution steps (execution_steps table + step.status protocol messages). */
+/**
+ * Status values for execution steps (execution_steps table + step.status protocol messages).
+ *
+ *  - `pending`   — a parallel-group child queued behind `maxParallel`, not yet launched.
+ *  - `cancelled` — a parallel-group sibling aborted by fail-fast (NOT a failure).
+ */
 export declare const ExecutionStepStatus: z.ZodEnum<{
     skipped: "skipped";
     success: "success";
+    pending: "pending";
     running: "running";
     failed: "failed";
+    cancelled: "cancelled";
 }>;
 export type ExecutionStepStatus = z.infer<typeof ExecutionStepStatus>;
+/**
+ * How a step participates in a job's step concurrency model.
+ *
+ *  - `sequential`     — an ordinary step in the flat step sequence.
+ *  - `parallel-child` — a child of a `parallel()` group, running concurrently
+ *                       with its siblings, each its own observable step.
+ *  - `parallel-group` — the structural group wrapper (no flat step index); used
+ *                       only for the dashboard band aggregate, not persisted per step.
+ */
+export declare const StepConcurrencyKind: z.ZodEnum<{
+    sequential: "sequential";
+    "parallel-child": "parallel-child";
+    "parallel-group": "parallel-group";
+}>;
+export type StepConcurrencyKind = z.infer<typeof StepConcurrencyKind>;
 /**
  * Distinct reasons a run/job ended because a configured wall-clock timeout
  * was exceeded. Surfaced in the failure/cancel reason so the dashboard can
@@ -159,6 +195,8 @@ export declare const executionStatusSchema: z.ZodObject<{
         held: "held";
     }>;
     repoIdentifier: z.ZodOptional<z.ZodString>;
+    repoProvider: z.ZodOptional<z.ZodString>;
+    localWorkingTree: z.ZodOptional<z.ZodBoolean>;
     sha: z.ZodOptional<z.ZodString>;
     ref: z.ZodOptional<z.ZodString>;
     triggerEvent: z.ZodOptional<z.ZodString>;
@@ -171,6 +209,9 @@ export declare const executionStatusSchema: z.ZodObject<{
     parentRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     originalRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     triggeredBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    triggerActorProvider: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    triggerActorUsername: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    triggerActorUserId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     failureReason: z.ZodOptional<z.ZodString>;
     logBytes: z.ZodOptional<z.ZodNumber>;
     initFailure: z.ZodOptional<z.ZodObject<{
@@ -204,12 +245,20 @@ export declare const stepStatusForwardSchema: z.ZodObject<{
     state: z.ZodEnum<{
         skipped: "skipped";
         success: "success";
+        pending: "pending";
         running: "running";
         failed: "failed";
+        cancelled: "cancelled";
     }>;
     timestamp: z.ZodNumber;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     secretsAccessed: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    concurrencyKind: z.ZodOptional<z.ZodEnum<{
+        sequential: "sequential";
+        "parallel-child": "parallel-child";
+        "parallel-group": "parallel-group";
+    }>>;
+    groupId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** Per-job status forwarded from orchestrator to Platform (real-time). */
 export declare const jobStatusForwardSchema: z.ZodObject<{
@@ -239,6 +288,7 @@ export declare const jobStatusForwardSchema: z.ZodObject<{
     agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
     logBytes: z.ZodOptional<z.ZodNumber>;
     timestamp: z.ZodNumber;
     initFailure: z.ZodOptional<z.ZodObject<{
@@ -300,6 +350,7 @@ export declare const stateReplaySchema: z.ZodObject<{
             errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     timestamp: z.ZodNumber;