@kici-dev/engine 0.1.23 → 0.1.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (146) hide show
  1. package/dist/approval/types.d.ts +1 -1
  2. package/dist/approval/types.js +1 -1
  3. package/dist/audit/access-log-policy.d.ts +4 -1
  4. package/dist/audit/access-log-policy.js +11 -2
  5. package/dist/audit/activity.d.ts +4 -2
  6. package/dist/audit/activity.js +15 -1
  7. package/dist/audit/retention-policy.js +5 -3
  8. package/dist/bundler/index.js +1 -1
  9. package/dist/bundler/rolldown-config.js +1 -1
  10. package/dist/check-mode.js +1 -1
  11. package/dist/dev-ops/operations.d.ts +56 -0
  12. package/dist/dev-ops/operations.js +135 -0
  13. package/dist/env/environment-allowlist.js +1 -1
  14. package/dist/environment/host-match.js +1 -1
  15. package/dist/environment/index.d.ts +2 -0
  16. package/dist/environment/index.js +4 -2
  17. package/dist/environment/multi-env.d.ts +30 -0
  18. package/dist/environment/multi-env.js +38 -0
  19. package/dist/environment/scope-resolver.js +1 -1
  20. package/dist/environment/scope-template.js +1 -1
  21. package/dist/environment/types.d.ts +8 -2
  22. package/dist/environment/types.js +19 -2
  23. package/dist/fanout/materialize.js +3 -3
  24. package/dist/index.d.ts +10 -1
  25. package/dist/index.js +25 -13
  26. package/dist/inputs/build.js +1 -1
  27. package/dist/inputs/coerce.js +1 -1
  28. package/dist/inputs/descriptor.js +1 -1
  29. package/dist/inputs/extract.js +1 -1
  30. package/dist/inputs/index.d.ts +1 -0
  31. package/dist/inputs/index.js +3 -2
  32. package/dist/inputs/schedule.d.ts +19 -0
  33. package/dist/inputs/schedule.js +33 -0
  34. package/dist/inventory.js +1 -1
  35. package/dist/labels/compile.js +1 -1
  36. package/dist/labels-match.js +1 -1
  37. package/dist/labels.js +2 -2
  38. package/dist/matrix/expand.js +1 -1
  39. package/dist/matrix/format.js +1 -1
  40. package/dist/mcp/fence.d.ts +22 -0
  41. package/dist/mcp/fence.js +65 -0
  42. package/dist/mcp/held-run-resolve.d.ts +52 -0
  43. package/dist/mcp/held-run-resolve.js +53 -0
  44. package/dist/mcp/tool-schemas.d.ts +74 -0
  45. package/dist/mcp/tool-schemas.js +78 -0
  46. package/dist/metrics/catalog-policy.js +1 -1
  47. package/dist/metrics/metric-catalog.generated.d.ts +105 -0
  48. package/dist/metrics/metric-catalog.generated.js +127 -1
  49. package/dist/protocol/analytics-events.js +1 -1
  50. package/dist/protocol/cluster-name.js +1 -1
  51. package/dist/protocol/dashboard-global-workflows.js +1 -1
  52. package/dist/protocol/dashboard-write-operations.d.ts +5 -1
  53. package/dist/protocol/dashboard-write-operations.js +13 -2
  54. package/dist/protocol/event-log-payload.js +1 -1
  55. package/dist/protocol/messages/access-log.d.ts +43 -20
  56. package/dist/protocol/messages/access-log.js +16 -2
  57. package/dist/protocol/messages/actor.d.ts +21 -0
  58. package/dist/protocol/messages/actor.js +42 -8
  59. package/dist/protocol/messages/agent-dev-ops.d.ts +118 -0
  60. package/dist/protocol/messages/agent-dev-ops.js +89 -0
  61. package/dist/protocol/messages/agent-run-result.d.ts +425 -0
  62. package/dist/protocol/messages/agent-run-result.js +165 -0
  63. package/dist/protocol/messages/auth.d.ts +3 -0
  64. package/dist/protocol/messages/auth.js +11 -2
  65. package/dist/protocol/messages/browser.js +1 -1
  66. package/dist/protocol/messages/capabilities.d.ts +3 -0
  67. package/dist/protocol/messages/capabilities.js +16 -3
  68. package/dist/protocol/messages/common.js +1 -1
  69. package/dist/protocol/messages/dashboard-global-workflows.d.ts +14 -0
  70. package/dist/protocol/messages/dashboard-global-workflows.js +1 -1
  71. package/dist/protocol/messages/dashboard.d.ts +1998 -48
  72. package/dist/protocol/messages/dashboard.js +269 -15
  73. package/dist/protocol/messages/deployment-identity.js +1 -1
  74. package/dist/protocol/messages/event-log.js +1 -1
  75. package/dist/protocol/messages/execution-status.d.ts +67 -4
  76. package/dist/protocol/messages/execution-status.js +133 -57
  77. package/dist/protocol/messages/join.js +1 -1
  78. package/dist/protocol/messages/log-pull.js +1 -1
  79. package/dist/protocol/messages/oidc-mint.d.ts +51 -0
  80. package/dist/protocol/messages/oidc-mint.js +55 -0
  81. package/dist/protocol/messages/oidc-token-relay.d.ts +31 -4
  82. package/dist/protocol/messages/oidc-token-relay.js +22 -7
  83. package/dist/protocol/messages/orchestrator-agent.d.ts +66 -5
  84. package/dist/protocol/messages/orchestrator-agent.js +35 -3
  85. package/dist/protocol/messages/pat-kind.d.ts +16 -0
  86. package/dist/protocol/messages/pat-kind.js +17 -0
  87. package/dist/protocol/messages/peer.d.ts +7 -7
  88. package/dist/protocol/messages/peer.js +1 -1
  89. package/dist/protocol/messages/platform-orchestrator.d.ts +685 -17
  90. package/dist/protocol/messages/platform-orchestrator.js +8 -5
  91. package/dist/protocol/messages/run-events.d.ts +8 -1
  92. package/dist/protocol/messages/run-events.js +1 -1
  93. package/dist/protocol/messages/scaler-event.js +1 -1
  94. package/dist/protocol/messages/source-registration.js +1 -1
  95. package/dist/protocol/source-origin.d.ts +20 -0
  96. package/dist/protocol/source-origin.js +21 -0
  97. package/dist/protocol/version.js +1 -1
  98. package/dist/provenance/attestation-origin.d.ts +18 -0
  99. package/dist/provenance/attestation-origin.js +22 -0
  100. package/dist/provenance/bundle.js +1 -1
  101. package/dist/provenance/dsse.js +1 -1
  102. package/dist/provenance/schema.d.ts +48 -0
  103. package/dist/provenance/schema.js +21 -7
  104. package/dist/provenance/statement-hash.d.ts +9 -0
  105. package/dist/provenance/statement-hash.js +17 -0
  106. package/dist/provenance/verify.d.ts +7 -0
  107. package/dist/provenance/verify.js +49 -10
  108. package/dist/provider/changed-files-fetcher.js +1 -1
  109. package/dist/provider/check-run-conclusion.d.ts +1 -1
  110. package/dist/provider/check-run-conclusion.js +1 -1
  111. package/dist/provider/check-status-poster.js +1 -1
  112. package/dist/provider/clone-token-provider.js +1 -1
  113. package/dist/provider/contributor-resolver.js +1 -1
  114. package/dist/provider/index.js +1 -1
  115. package/dist/provider/lock-file-fetcher.js +1 -1
  116. package/dist/provider/lock-file-parse-error.js +1 -1
  117. package/dist/provider/repo-url-builder.js +1 -1
  118. package/dist/provider/types.js +1 -1
  119. package/dist/provider/webhook-normalizer.js +1 -1
  120. package/dist/registration/registerable-trigger-type.d.ts +1 -1
  121. package/dist/registration/registerable-trigger-type.js +1 -1
  122. package/dist/{chunk-BTugEXQM.js → rolldown-runtime-ClRpJifh.js} +0 -1
  123. package/dist/scaler/resource-types.js +1 -1
  124. package/dist/scaler/scaler-backend-type.js +1 -1
  125. package/dist/secrets/index.d.ts +1 -1
  126. package/dist/secrets/index.js +1 -1
  127. package/dist/secrets/types.d.ts +0 -24
  128. package/dist/secrets/types.js +1 -1
  129. package/dist/state-machine/index.js +1 -1
  130. package/dist/state-machine/machine.js +1 -1
  131. package/dist/state-machine/types.js +1 -1
  132. package/dist/trigger/decision-trace.js +1 -1
  133. package/dist/trigger/jsonpath-matcher.js +1 -1
  134. package/dist/trigger/matcher.js +1 -1
  135. package/dist/trigger/trigger-event-type.js +1 -1
  136. package/dist/trigger/types.d.ts +35 -7
  137. package/dist/trigger/types.js +8 -3
  138. package/dist/webhook/signature.js +1 -1
  139. package/dist/webhook/webhook-url-format.d.ts +7 -0
  140. package/dist/webhook/webhook-url-format.js +11 -2
  141. package/dist/ws/close-codes.d.ts +8 -2
  142. package/dist/ws/close-codes.js +10 -4
  143. package/dist/ws/rate-limiter.js +1 -1
  144. package/dist/ws/ws-like.js +1 -1
  145. package/package.json +9 -1
  146. package/sbom.spdx.json +5 -5
@@ -1,4 +1,4 @@
1
- import "../chunk-BTugEXQM.js";
1
+ import "../rolldown-runtime-ClRpJifh.js";
2
2
  //#region src/metrics/metric-catalog.generated.ts
3
3
  const MetricNames = {
4
4
  KICI_AGENT_CLONE_DURATION_SECONDS: "kici_agent_clone_duration_seconds",
@@ -17,6 +17,11 @@ const MetricNames = {
17
17
  KICI_CROSS_SOURCE_ERRORS_TOTAL: "kici_cross_source_errors_total",
18
18
  KICI_CROSS_SOURCE_FANOUT_SIZE: "kici_cross_source_fanout_size",
19
19
  KICI_DASHBOARD_RELAY_LATENCY_SECONDS: "kici_dashboard_relay_latency_seconds",
20
+ KICI_MCP_AUTH_REJECTIONS_TOTAL: "kici_mcp_auth_rejections_total",
21
+ KICI_MCP_DB_POOL_CONNECTIONS: "kici_mcp_db_pool_connections",
22
+ KICI_MCP_RATE_LIMITED_TOTAL: "kici_mcp_rate_limited_total",
23
+ KICI_MCP_TOOL_DURATION_SECONDS: "kici_mcp_tool_duration_seconds",
24
+ KICI_MCP_TOOL_REQUESTS_TOTAL: "kici_mcp_tool_requests_total",
20
25
  KICI_ORCH_AGENTS_ACTIVE: "kici_orch_agents_active",
21
26
  KICI_ORCH_BUILD_DURATION_SECONDS: "kici_orch_build_duration_seconds",
22
27
  KICI_ORCH_CONFIG_RELOAD_TOTAL: "kici_orch_config_reload_total",
@@ -47,7 +52,10 @@ const MetricNames = {
47
52
  KICI_ORCH_JOB_RUNS_TOTAL: "kici_orch_job_runs_total",
48
53
  KICI_ORCH_LOG_BYTES_STORED_TOTAL: "kici_orch_log_bytes_stored_total",
49
54
  KICI_ORCH_LOG_CHUNKS_RECEIVED_TOTAL: "kici_orch_log_chunks_received_total",
55
+ KICI_ORCH_PENDING_ATTESTATION_OLDEST_AGE_SECONDS: "kici_orch_pending_attestation_oldest_age_seconds",
56
+ KICI_ORCH_PENDING_ATTESTATIONS_CURRENT: "kici_orch_pending_attestations_current",
50
57
  KICI_ORCH_PG_POOL_CLIENT_ERRORS_TOTAL: "kici_orch_pg_pool_client_errors_total",
58
+ KICI_ORCH_REJECTED_ATTESTATIONS_CURRENT: "kici_orch_rejected_attestations_current",
51
59
  KICI_ORCH_SCALER_CONFIG_RELOADS_TOTAL: "kici_orch_scaler_config_reloads_total",
52
60
  KICI_ORCH_SCALER_CPUS_USED: "kici_orch_scaler_cpus_used",
53
61
  KICI_ORCH_SCALER_MEMORY_BYTES_USED: "kici_orch_scaler_memory_bytes_used",
@@ -71,6 +79,11 @@ const MetricNames = {
71
79
  KICI_ORGS_TOTAL: "kici_orgs_total",
72
80
  KICI_PLAN_CAP_EXCEEDED_TOTAL: "kici_plan_cap_exceeded_total",
73
81
  KICI_PLAN_USAGE_RATIO: "kici_plan_usage_ratio",
82
+ KICI_PLATFORM_COORDINATOR_POOL_SIZE: "kici_platform_coordinator_pool_size",
83
+ KICI_PLATFORM_COORDINATOR_PROBE_LATENCY_MS: "kici_platform_coordinator_probe_latency_ms",
84
+ KICI_PLATFORM_COORDINATOR_PROBE_TIMEOUTS_TOTAL: "kici_platform_coordinator_probe_timeouts_total",
85
+ KICI_PLATFORM_COORDINATOR_STALE_ENTRIES: "kici_platform_coordinator_stale_entries",
86
+ KICI_PLATFORM_COORDINATOR_ZOMBIE_ENTRIES_TOTAL: "kici_platform_coordinator_zombie_entries_total",
74
87
  KICI_PLATFORM_CROSS_TENANT_REJECTIONS_TOTAL: "kici_platform_cross_tenant_rejections_total",
75
88
  KICI_PLATFORM_DASHBOARD_PROXY_DURATION_SECONDS: "kici_platform_dashboard_proxy_duration_seconds",
76
89
  KICI_PLATFORM_DASHBOARD_PROXY_PENDING: "kici_platform_dashboard_proxy_pending",
@@ -88,13 +101,21 @@ const MetricNames = {
88
101
  KICI_PLATFORM_LOG_LINES_FORWARDED_TOTAL: "kici_platform_log_lines_forwarded_total",
89
102
  KICI_PLATFORM_METRICS_QUERY_RATE_LIMITED_TOTAL: "kici_platform_metrics_query_rate_limited_total",
90
103
  KICI_PLATFORM_MIMIR_RELAY_ERRORS_TOTAL: "kici_platform_mimir_relay_errors_total",
104
+ KICI_PLATFORM_NOTIFICATIONS_DELIVERED_TOTAL: "kici_platform_notifications_delivered_total",
105
+ KICI_PLATFORM_NOTIFICATIONS_SUPPRESSED_TOTAL: "kici_platform_notifications_suppressed_total",
91
106
  KICI_PLATFORM_ORCH_METRICS_FILTERED_TOTAL: "kici_platform_orch_metrics_filtered_total",
92
107
  KICI_PLATFORM_ORPHAN_CONNECTIONS_SWEPT_TOTAL: "kici_platform_orphan_connections_swept_total",
93
108
  KICI_PLATFORM_PG_POOL_CLIENT_ERRORS_TOTAL: "kici_platform_pg_pool_client_errors_total",
109
+ KICI_PLATFORM_PLAN_CAP_CHECK_ERRORS_TOTAL: "kici_platform_plan_cap_check_errors_total",
110
+ KICI_PLATFORM_RELAY_BREAKER_STATE: "kici_platform_relay_breaker_state",
111
+ KICI_PLATFORM_RELAY_BREAKER_TRIPS_TOTAL: "kici_platform_relay_breaker_trips_total",
112
+ KICI_PLATFORM_RELAY_REQUEST_DURATION_MS: "kici_platform_relay_request_duration_ms",
113
+ KICI_PLATFORM_RELAY_REQUEST_OUTCOME_TOTAL: "kici_platform_relay_request_outcome_total",
94
114
  KICI_PLATFORM_STALE_ORCHESTRATORS_TOTAL: "kici_platform_stale_orchestrators_total",
95
115
  KICI_PLATFORM_STALE_PLATFORM_CONNECTIONS_EVICTED_TOTAL: "kici_platform_stale_platform_connections_evicted_total",
96
116
  KICI_PLATFORM_STALE_RUNS_FAILED_TOTAL: "kici_platform_stale_runs_failed_total",
97
117
  KICI_PLATFORM_STEP_STATUS_FORWARDS_TOTAL: "kici_platform_step_status_forwards_total",
118
+ KICI_PLATFORM_WS_ORG_RATE_LIMITED_TOTAL: "kici_platform_ws_org_rate_limited_total",
98
119
  KICI_REGISTRATIONS_TOTAL: "kici_registrations_total",
99
120
  KICI_UNIVERSAL_GIT_REGISTRATION_ERRORS_TOTAL: "kici_universal_git_registration_errors_total",
100
121
  KICI_USER_REGISTRATION_NOTIFY_TOTAL: "kici_user_registration_notify_total",
@@ -152,6 +173,11 @@ const MetricLabels = {
152
173
  KICI_CROSS_SOURCE_ERRORS_TOTAL: ["reason"],
153
174
  KICI_CROSS_SOURCE_FANOUT_SIZE: ["event"],
154
175
  KICI_DASHBOARD_RELAY_LATENCY_SECONDS: ["outcome"],
176
+ KICI_MCP_AUTH_REJECTIONS_TOTAL: ["reason"],
177
+ KICI_MCP_DB_POOL_CONNECTIONS: ["state"],
178
+ KICI_MCP_RATE_LIMITED_TOTAL: ["kind"],
179
+ KICI_MCP_TOOL_DURATION_SECONDS: ["tool"],
180
+ KICI_MCP_TOOL_REQUESTS_TOTAL: ["tool", "outcome"],
155
181
  KICI_ORCH_AGENTS_ACTIVE: [],
156
182
  KICI_ORCH_BUILD_DURATION_SECONDS: [],
157
183
  KICI_ORCH_CONFIG_RELOAD_TOTAL: ["result", "source"],
@@ -186,7 +212,10 @@ const MetricLabels = {
186
212
  KICI_ORCH_JOB_RUNS_TOTAL: ["job", "result"],
187
213
  KICI_ORCH_LOG_BYTES_STORED_TOTAL: [],
188
214
  KICI_ORCH_LOG_CHUNKS_RECEIVED_TOTAL: [],
215
+ KICI_ORCH_PENDING_ATTESTATION_OLDEST_AGE_SECONDS: [],
216
+ KICI_ORCH_PENDING_ATTESTATIONS_CURRENT: [],
189
217
  KICI_ORCH_PG_POOL_CLIENT_ERRORS_TOTAL: ["source"],
218
+ KICI_ORCH_REJECTED_ATTESTATIONS_CURRENT: [],
190
219
  KICI_ORCH_SCALER_CONFIG_RELOADS_TOTAL: ["result"],
191
220
  KICI_ORCH_SCALER_CPUS_USED: [
192
221
  "scaler",
@@ -218,6 +247,11 @@ const MetricLabels = {
218
247
  KICI_ORGS_TOTAL: ["plan_type"],
219
248
  KICI_PLAN_CAP_EXCEEDED_TOTAL: ["org_id", "dimension"],
220
249
  KICI_PLAN_USAGE_RATIO: ["org_id", "dimension"],
250
+ KICI_PLATFORM_COORDINATOR_POOL_SIZE: ["routingKey"],
251
+ KICI_PLATFORM_COORDINATOR_PROBE_LATENCY_MS: ["clusterName", "connectionId"],
252
+ KICI_PLATFORM_COORDINATOR_PROBE_TIMEOUTS_TOTAL: ["clusterName", "connectionId"],
253
+ KICI_PLATFORM_COORDINATOR_STALE_ENTRIES: [],
254
+ KICI_PLATFORM_COORDINATOR_ZOMBIE_ENTRIES_TOTAL: ["clusterName"],
221
255
  KICI_PLATFORM_CROSS_TENANT_REJECTIONS_TOTAL: ["reason"],
222
256
  KICI_PLATFORM_DASHBOARD_PROXY_DURATION_SECONDS: ["outcome"],
223
257
  KICI_PLATFORM_DASHBOARD_PROXY_PENDING: [],
@@ -235,13 +269,21 @@ const MetricLabels = {
235
269
  KICI_PLATFORM_LOG_LINES_FORWARDED_TOTAL: [],
236
270
  KICI_PLATFORM_METRICS_QUERY_RATE_LIMITED_TOTAL: ["org_id"],
237
271
  KICI_PLATFORM_MIMIR_RELAY_ERRORS_TOTAL: ["reason"],
272
+ KICI_PLATFORM_NOTIFICATIONS_DELIVERED_TOTAL: ["channel_type", "result"],
273
+ KICI_PLATFORM_NOTIFICATIONS_SUPPRESSED_TOTAL: ["org_id"],
238
274
  KICI_PLATFORM_ORCH_METRICS_FILTERED_TOTAL: ["reason", "metric"],
239
275
  KICI_PLATFORM_ORPHAN_CONNECTIONS_SWEPT_TOTAL: [],
240
276
  KICI_PLATFORM_PG_POOL_CLIENT_ERRORS_TOTAL: ["source"],
277
+ KICI_PLATFORM_PLAN_CAP_CHECK_ERRORS_TOTAL: ["org_id"],
278
+ KICI_PLATFORM_RELAY_BREAKER_STATE: ["clusterName", "connectionId"],
279
+ KICI_PLATFORM_RELAY_BREAKER_TRIPS_TOTAL: ["clusterName", "connectionId"],
280
+ KICI_PLATFORM_RELAY_REQUEST_DURATION_MS: ["kind"],
281
+ KICI_PLATFORM_RELAY_REQUEST_OUTCOME_TOTAL: ["outcome", "kind"],
241
282
  KICI_PLATFORM_STALE_ORCHESTRATORS_TOTAL: [],
242
283
  KICI_PLATFORM_STALE_PLATFORM_CONNECTIONS_EVICTED_TOTAL: ["org_id"],
243
284
  KICI_PLATFORM_STALE_RUNS_FAILED_TOTAL: [],
244
285
  KICI_PLATFORM_STEP_STATUS_FORWARDS_TOTAL: ["state"],
286
+ KICI_PLATFORM_WS_ORG_RATE_LIMITED_TOTAL: ["org_id"],
245
287
  KICI_REGISTRATIONS_TOTAL: [],
246
288
  KICI_UNIVERSAL_GIT_REGISTRATION_ERRORS_TOTAL: ["reason"],
247
289
  KICI_USER_REGISTRATION_NOTIFY_TOTAL: ["result"],
@@ -303,6 +345,11 @@ const MetricKind = {
303
345
  KICI_CROSS_SOURCE_ERRORS_TOTAL: "counter",
304
346
  KICI_CROSS_SOURCE_FANOUT_SIZE: "histogram",
305
347
  KICI_DASHBOARD_RELAY_LATENCY_SECONDS: "histogram",
348
+ KICI_MCP_AUTH_REJECTIONS_TOTAL: "counter",
349
+ KICI_MCP_DB_POOL_CONNECTIONS: "observableGauge",
350
+ KICI_MCP_RATE_LIMITED_TOTAL: "counter",
351
+ KICI_MCP_TOOL_DURATION_SECONDS: "histogram",
352
+ KICI_MCP_TOOL_REQUESTS_TOTAL: "counter",
306
353
  KICI_ORCH_AGENTS_ACTIVE: "observableGauge",
307
354
  KICI_ORCH_BUILD_DURATION_SECONDS: "histogram",
308
355
  KICI_ORCH_CONFIG_RELOAD_TOTAL: "counter",
@@ -333,7 +380,10 @@ const MetricKind = {
333
380
  KICI_ORCH_JOB_RUNS_TOTAL: "counter",
334
381
  KICI_ORCH_LOG_BYTES_STORED_TOTAL: "counter",
335
382
  KICI_ORCH_LOG_CHUNKS_RECEIVED_TOTAL: "counter",
383
+ KICI_ORCH_PENDING_ATTESTATION_OLDEST_AGE_SECONDS: "observableGauge",
384
+ KICI_ORCH_PENDING_ATTESTATIONS_CURRENT: "observableGauge",
336
385
  KICI_ORCH_PG_POOL_CLIENT_ERRORS_TOTAL: "counter",
386
+ KICI_ORCH_REJECTED_ATTESTATIONS_CURRENT: "observableGauge",
337
387
  KICI_ORCH_SCALER_CONFIG_RELOADS_TOTAL: "counter",
338
388
  KICI_ORCH_SCALER_CPUS_USED: "observableGauge",
339
389
  KICI_ORCH_SCALER_MEMORY_BYTES_USED: "observableGauge",
@@ -357,6 +407,11 @@ const MetricKind = {
357
407
  KICI_ORGS_TOTAL: "observableGauge",
358
408
  KICI_PLAN_CAP_EXCEEDED_TOTAL: "counter",
359
409
  KICI_PLAN_USAGE_RATIO: "observableGauge",
410
+ KICI_PLATFORM_COORDINATOR_POOL_SIZE: "observableGauge",
411
+ KICI_PLATFORM_COORDINATOR_PROBE_LATENCY_MS: "histogram",
412
+ KICI_PLATFORM_COORDINATOR_PROBE_TIMEOUTS_TOTAL: "counter",
413
+ KICI_PLATFORM_COORDINATOR_STALE_ENTRIES: "observableGauge",
414
+ KICI_PLATFORM_COORDINATOR_ZOMBIE_ENTRIES_TOTAL: "counter",
360
415
  KICI_PLATFORM_CROSS_TENANT_REJECTIONS_TOTAL: "counter",
361
416
  KICI_PLATFORM_DASHBOARD_PROXY_DURATION_SECONDS: "histogram",
362
417
  KICI_PLATFORM_DASHBOARD_PROXY_PENDING: "observableGauge",
@@ -374,13 +429,21 @@ const MetricKind = {
374
429
  KICI_PLATFORM_LOG_LINES_FORWARDED_TOTAL: "counter",
375
430
  KICI_PLATFORM_METRICS_QUERY_RATE_LIMITED_TOTAL: "counter",
376
431
  KICI_PLATFORM_MIMIR_RELAY_ERRORS_TOTAL: "counter",
432
+ KICI_PLATFORM_NOTIFICATIONS_DELIVERED_TOTAL: "counter",
433
+ KICI_PLATFORM_NOTIFICATIONS_SUPPRESSED_TOTAL: "counter",
377
434
  KICI_PLATFORM_ORCH_METRICS_FILTERED_TOTAL: "counter",
378
435
  KICI_PLATFORM_ORPHAN_CONNECTIONS_SWEPT_TOTAL: "counter",
379
436
  KICI_PLATFORM_PG_POOL_CLIENT_ERRORS_TOTAL: "counter",
437
+ KICI_PLATFORM_PLAN_CAP_CHECK_ERRORS_TOTAL: "counter",
438
+ KICI_PLATFORM_RELAY_BREAKER_STATE: "observableGauge",
439
+ KICI_PLATFORM_RELAY_BREAKER_TRIPS_TOTAL: "counter",
440
+ KICI_PLATFORM_RELAY_REQUEST_DURATION_MS: "histogram",
441
+ KICI_PLATFORM_RELAY_REQUEST_OUTCOME_TOTAL: "counter",
380
442
  KICI_PLATFORM_STALE_ORCHESTRATORS_TOTAL: "counter",
381
443
  KICI_PLATFORM_STALE_PLATFORM_CONNECTIONS_EVICTED_TOTAL: "counter",
382
444
  KICI_PLATFORM_STALE_RUNS_FAILED_TOTAL: "counter",
383
445
  KICI_PLATFORM_STEP_STATUS_FORWARDS_TOTAL: "counter",
446
+ KICI_PLATFORM_WS_ORG_RATE_LIMITED_TOTAL: "counter",
384
447
  KICI_REGISTRATIONS_TOTAL: "counter",
385
448
  KICI_UNIVERSAL_GIT_REGISTRATION_ERRORS_TOTAL: "counter",
386
449
  KICI_USER_REGISTRATION_NOTIFY_TOTAL: "counter",
@@ -438,6 +501,11 @@ const MetricDescription = {
438
501
  KICI_CROSS_SOURCE_ERRORS_TOTAL: "Errors encountered during cross-source webhook dispatch",
439
502
  KICI_CROSS_SOURCE_FANOUT_SIZE: "Number of webhook-trigger registrations matched when an inbound generic webhook fans out across sources in the same org",
440
503
  KICI_DASHBOARD_RELAY_LATENCY_SECONDS: "Round-trip latency of a cross-instance dashboard relay request",
504
+ KICI_MCP_AUTH_REJECTIONS_TOTAL: "Developer-MCP requests rejected by the agent-credential gate",
505
+ KICI_MCP_DB_POOL_CONNECTIONS: "MCP-dedicated Postgres pool connection counts",
506
+ KICI_MCP_RATE_LIMITED_TOTAL: "Developer-MCP requests rejected by the per-credential rate limiter",
507
+ KICI_MCP_TOOL_DURATION_SECONDS: "Developer-MCP tool invocation duration in seconds",
508
+ KICI_MCP_TOOL_REQUESTS_TOTAL: "Total developer-MCP tool invocations by tool and outcome",
441
509
  KICI_ORCH_AGENTS_ACTIVE: "Current number of active agents connected",
442
510
  KICI_ORCH_BUILD_DURATION_SECONDS: "Duration of build agent operations in seconds",
443
511
  KICI_ORCH_CONFIG_RELOAD_TOTAL: "Total number of config reload operations",
@@ -468,7 +536,10 @@ const MetricDescription = {
468
536
  KICI_ORCH_JOB_RUNS_TOTAL: "Scheduled job run outcomes, by job and result (success/failure)",
469
537
  KICI_ORCH_LOG_BYTES_STORED_TOTAL: "Total bytes of log data written to storage",
470
538
  KICI_ORCH_LOG_CHUNKS_RECEIVED_TOTAL: "Total number of log chunks received from agents",
539
+ KICI_ORCH_PENDING_ATTESTATION_OLDEST_AGE_SECONDS: "Age of the oldest deferred attestation in the outbox",
540
+ KICI_ORCH_PENDING_ATTESTATIONS_CURRENT: "Deferred attestations awaiting a later mint",
471
541
  KICI_ORCH_PG_POOL_CLIENT_ERRORS_TOTAL: "Total pg connection errors absorbed without a process restart",
542
+ KICI_ORCH_REJECTED_ATTESTATIONS_CURRENT: "Deferred attestations permanently rejected (run/job absent on Platform); terminal, re-attempted only via kici-admin attestations retry --include-rejected",
472
543
  KICI_ORCH_SCALER_CONFIG_RELOADS_TOTAL: "Total number of scaler config reload operations",
473
544
  KICI_ORCH_SCALER_CPUS_USED: "Current CPU reservations summed by scaler / pool. scaler=\"__global__\" is the orchestrator-wide total; machinePool=\"<name>\" rows reflect the on-disk ledger.",
474
545
  KICI_ORCH_SCALER_MEMORY_BYTES_USED: "Current memory reservations (bytes) summed by scaler / pool. scaler=\"__global__\" is the orchestrator-wide total; machinePool=\"<name>\" rows reflect the on-disk ledger.",
@@ -492,6 +563,11 @@ const MetricDescription = {
492
563
  KICI_ORGS_TOTAL: "Total organizations by plan type",
493
564
  KICI_PLAN_CAP_EXCEEDED_TOTAL: "Total times an org hit a plan cap (per dimension)",
494
565
  KICI_PLAN_USAGE_RATIO: "Per-org per-dimension usage ratio (current / cap)",
566
+ KICI_PLATFORM_COORDINATOR_POOL_SIZE: "Coordinator pool size per routing key",
567
+ KICI_PLATFORM_COORDINATOR_PROBE_LATENCY_MS: "Active coordinator liveness-probe round-trip latency in ms",
568
+ KICI_PLATFORM_COORDINATOR_PROBE_TIMEOUTS_TOTAL: "Active coordinator liveness-probe timeouts",
569
+ KICI_PLATFORM_COORDINATOR_STALE_ENTRIES: "Stale (non-OPEN socket) coordinator entries in the pool per routing key",
570
+ KICI_PLATFORM_COORDINATOR_ZOMBIE_ENTRIES_TOTAL: "Zombie (non-OPEN) coordinator entries encountered during relay selection",
495
571
  KICI_PLATFORM_CROSS_TENANT_REJECTIONS_TOTAL: "Total cross-tenant WS messages rejected by the Platform (security invariant). Labels: reason.",
496
572
  KICI_PLATFORM_DASHBOARD_PROXY_DURATION_SECONDS: "Dashboard proxy request round-trip duration in seconds",
497
573
  KICI_PLATFORM_DASHBOARD_PROXY_PENDING: "In-flight dashboard proxy requests (Platform → orchestrator)",
@@ -509,13 +585,21 @@ const MetricDescription = {
509
585
  KICI_PLATFORM_LOG_LINES_FORWARDED_TOTAL: "Total log lines forwarded from orchestrators",
510
586
  KICI_PLATFORM_METRICS_QUERY_RATE_LIMITED_TOTAL: "Total dashboard metric-query requests rate-limited (429).",
511
587
  KICI_PLATFORM_MIMIR_RELAY_ERRORS_TOTAL: "Total Mimir push-relay errors (Platform-embedded metrics). Labels: reason.",
588
+ KICI_PLATFORM_NOTIFICATIONS_DELIVERED_TOTAL: "Notification delivery attempts that reached a terminal outcome",
589
+ KICI_PLATFORM_NOTIFICATIONS_SUPPRESSED_TOTAL: "Run-terminal notifications suppressed by the per-org notification quota",
512
590
  KICI_PLATFORM_ORCH_METRICS_FILTERED_TOTAL: "Orchestrator-pushed metric data points dropped or rewritten by the catalog allow-list. Labels: reason, metric.",
513
591
  KICI_PLATFORM_ORPHAN_CONNECTIONS_SWEPT_TOTAL: "Total orphan connections swept from platform_connections",
514
592
  KICI_PLATFORM_PG_POOL_CLIENT_ERRORS_TOTAL: "Total pg connection errors absorbed without a process restart",
593
+ KICI_PLATFORM_PLAN_CAP_CHECK_ERRORS_TOTAL: "WS connection rejected because the plan-limit check errored (fail-closed)",
594
+ KICI_PLATFORM_RELAY_BREAKER_STATE: "Relay circuit-breaker state per coordinator (0=closed,1=half-open,2=open)",
595
+ KICI_PLATFORM_RELAY_BREAKER_TRIPS_TOTAL: "Relay circuit-breaker open transitions per coordinator",
596
+ KICI_PLATFORM_RELAY_REQUEST_DURATION_MS: "End-to-end dashboard-proxy relay latency incl. failover, in ms",
597
+ KICI_PLATFORM_RELAY_REQUEST_OUTCOME_TOTAL: "Dashboard-proxy relay request outcomes (incl. sibling failover)",
515
598
  KICI_PLATFORM_STALE_ORCHESTRATORS_TOTAL: "Total orchestrators detected as permanently disconnected",
516
599
  KICI_PLATFORM_STALE_PLATFORM_CONNECTIONS_EVICTED_TOTAL: "platform_connections rows evicted by source.register DB dedup (same-instance reconnect path)",
517
600
  KICI_PLATFORM_STALE_RUNS_FAILED_TOTAL: "Total execution runs failed due to orchestrator staleness",
518
601
  KICI_PLATFORM_STEP_STATUS_FORWARDS_TOTAL: "Total step status forwards received",
602
+ KICI_PLATFORM_WS_ORG_RATE_LIMITED_TOTAL: "Inbound orchestrator messages dropped by the per-org aggregate WS rate limit",
519
603
  KICI_REGISTRATIONS_TOTAL: "Total user registrations (new personal orgs created on first login)",
520
604
  KICI_UNIVERSAL_GIT_REGISTRATION_ERRORS_TOTAL: "Errors encountered while registering universal-git provider bundles",
521
605
  KICI_USER_REGISTRATION_NOTIFY_TOTAL: "New-user Telegram notifications by result (sent|failed)",
@@ -580,6 +664,11 @@ const MetricService = {
580
664
  KICI_CROSS_SOURCE_ERRORS_TOTAL: "orchestrator",
581
665
  KICI_CROSS_SOURCE_FANOUT_SIZE: "orchestrator",
582
666
  KICI_DASHBOARD_RELAY_LATENCY_SECONDS: "platform",
667
+ KICI_MCP_AUTH_REJECTIONS_TOTAL: "platform",
668
+ KICI_MCP_DB_POOL_CONNECTIONS: "platform",
669
+ KICI_MCP_RATE_LIMITED_TOTAL: "platform",
670
+ KICI_MCP_TOOL_DURATION_SECONDS: "platform",
671
+ KICI_MCP_TOOL_REQUESTS_TOTAL: "platform",
583
672
  KICI_ORCH_AGENTS_ACTIVE: "orchestrator",
584
673
  KICI_ORCH_BUILD_DURATION_SECONDS: "orchestrator",
585
674
  KICI_ORCH_CONFIG_RELOAD_TOTAL: "orchestrator",
@@ -610,7 +699,10 @@ const MetricService = {
610
699
  KICI_ORCH_JOB_RUNS_TOTAL: "orchestrator",
611
700
  KICI_ORCH_LOG_BYTES_STORED_TOTAL: "orchestrator",
612
701
  KICI_ORCH_LOG_CHUNKS_RECEIVED_TOTAL: "orchestrator",
702
+ KICI_ORCH_PENDING_ATTESTATION_OLDEST_AGE_SECONDS: "orchestrator",
703
+ KICI_ORCH_PENDING_ATTESTATIONS_CURRENT: "orchestrator",
613
704
  KICI_ORCH_PG_POOL_CLIENT_ERRORS_TOTAL: "orchestrator",
705
+ KICI_ORCH_REJECTED_ATTESTATIONS_CURRENT: "orchestrator",
614
706
  KICI_ORCH_SCALER_CONFIG_RELOADS_TOTAL: "orchestrator",
615
707
  KICI_ORCH_SCALER_CPUS_USED: "orchestrator",
616
708
  KICI_ORCH_SCALER_MEMORY_BYTES_USED: "orchestrator",
@@ -634,6 +726,11 @@ const MetricService = {
634
726
  KICI_ORGS_TOTAL: "platform",
635
727
  KICI_PLAN_CAP_EXCEEDED_TOTAL: "platform",
636
728
  KICI_PLAN_USAGE_RATIO: "platform",
729
+ KICI_PLATFORM_COORDINATOR_POOL_SIZE: "platform",
730
+ KICI_PLATFORM_COORDINATOR_PROBE_LATENCY_MS: "platform",
731
+ KICI_PLATFORM_COORDINATOR_PROBE_TIMEOUTS_TOTAL: "platform",
732
+ KICI_PLATFORM_COORDINATOR_STALE_ENTRIES: "platform",
733
+ KICI_PLATFORM_COORDINATOR_ZOMBIE_ENTRIES_TOTAL: "platform",
637
734
  KICI_PLATFORM_CROSS_TENANT_REJECTIONS_TOTAL: "platform",
638
735
  KICI_PLATFORM_DASHBOARD_PROXY_DURATION_SECONDS: "platform",
639
736
  KICI_PLATFORM_DASHBOARD_PROXY_PENDING: "platform",
@@ -651,13 +748,21 @@ const MetricService = {
651
748
  KICI_PLATFORM_LOG_LINES_FORWARDED_TOTAL: "platform",
652
749
  KICI_PLATFORM_METRICS_QUERY_RATE_LIMITED_TOTAL: "platform",
653
750
  KICI_PLATFORM_MIMIR_RELAY_ERRORS_TOTAL: "platform",
751
+ KICI_PLATFORM_NOTIFICATIONS_DELIVERED_TOTAL: "platform",
752
+ KICI_PLATFORM_NOTIFICATIONS_SUPPRESSED_TOTAL: "platform",
654
753
  KICI_PLATFORM_ORCH_METRICS_FILTERED_TOTAL: "platform",
655
754
  KICI_PLATFORM_ORPHAN_CONNECTIONS_SWEPT_TOTAL: "platform",
656
755
  KICI_PLATFORM_PG_POOL_CLIENT_ERRORS_TOTAL: "platform",
756
+ KICI_PLATFORM_PLAN_CAP_CHECK_ERRORS_TOTAL: "platform",
757
+ KICI_PLATFORM_RELAY_BREAKER_STATE: "platform",
758
+ KICI_PLATFORM_RELAY_BREAKER_TRIPS_TOTAL: "platform",
759
+ KICI_PLATFORM_RELAY_REQUEST_DURATION_MS: "platform",
760
+ KICI_PLATFORM_RELAY_REQUEST_OUTCOME_TOTAL: "platform",
657
761
  KICI_PLATFORM_STALE_ORCHESTRATORS_TOTAL: "platform",
658
762
  KICI_PLATFORM_STALE_PLATFORM_CONNECTIONS_EVICTED_TOTAL: "platform",
659
763
  KICI_PLATFORM_STALE_RUNS_FAILED_TOTAL: "platform",
660
764
  KICI_PLATFORM_STEP_STATUS_FORWARDS_TOTAL: "platform",
765
+ KICI_PLATFORM_WS_ORG_RATE_LIMITED_TOTAL: "platform",
661
766
  KICI_REGISTRATIONS_TOTAL: "platform",
662
767
  KICI_UNIVERSAL_GIT_REGISTRATION_ERRORS_TOTAL: "orchestrator",
663
768
  KICI_USER_REGISTRATION_NOTIFY_TOTAL: "platform",
@@ -716,6 +821,11 @@ const ALL_METRIC_NAMES = [
716
821
  "kici_cross_source_errors_total",
717
822
  "kici_cross_source_fanout_size",
718
823
  "kici_dashboard_relay_latency_seconds",
824
+ "kici_mcp_auth_rejections_total",
825
+ "kici_mcp_db_pool_connections",
826
+ "kici_mcp_rate_limited_total",
827
+ "kici_mcp_tool_duration_seconds",
828
+ "kici_mcp_tool_requests_total",
719
829
  "kici_orch_agents_active",
720
830
  "kici_orch_build_duration_seconds",
721
831
  "kici_orch_config_reload_total",
@@ -746,7 +856,10 @@ const ALL_METRIC_NAMES = [
746
856
  "kici_orch_job_runs_total",
747
857
  "kici_orch_log_bytes_stored_total",
748
858
  "kici_orch_log_chunks_received_total",
859
+ "kici_orch_pending_attestation_oldest_age_seconds",
860
+ "kici_orch_pending_attestations_current",
749
861
  "kici_orch_pg_pool_client_errors_total",
862
+ "kici_orch_rejected_attestations_current",
750
863
  "kici_orch_scaler_config_reloads_total",
751
864
  "kici_orch_scaler_cpus_used",
752
865
  "kici_orch_scaler_memory_bytes_used",
@@ -770,6 +883,11 @@ const ALL_METRIC_NAMES = [
770
883
  "kici_orgs_total",
771
884
  "kici_plan_cap_exceeded_total",
772
885
  "kici_plan_usage_ratio",
886
+ "kici_platform_coordinator_pool_size",
887
+ "kici_platform_coordinator_probe_latency_ms",
888
+ "kici_platform_coordinator_probe_timeouts_total",
889
+ "kici_platform_coordinator_stale_entries",
890
+ "kici_platform_coordinator_zombie_entries_total",
773
891
  "kici_platform_cross_tenant_rejections_total",
774
892
  "kici_platform_dashboard_proxy_duration_seconds",
775
893
  "kici_platform_dashboard_proxy_pending",
@@ -787,13 +905,21 @@ const ALL_METRIC_NAMES = [
787
905
  "kici_platform_log_lines_forwarded_total",
788
906
  "kici_platform_metrics_query_rate_limited_total",
789
907
  "kici_platform_mimir_relay_errors_total",
908
+ "kici_platform_notifications_delivered_total",
909
+ "kici_platform_notifications_suppressed_total",
790
910
  "kici_platform_orch_metrics_filtered_total",
791
911
  "kici_platform_orphan_connections_swept_total",
792
912
  "kici_platform_pg_pool_client_errors_total",
913
+ "kici_platform_plan_cap_check_errors_total",
914
+ "kici_platform_relay_breaker_state",
915
+ "kici_platform_relay_breaker_trips_total",
916
+ "kici_platform_relay_request_duration_ms",
917
+ "kici_platform_relay_request_outcome_total",
793
918
  "kici_platform_stale_orchestrators_total",
794
919
  "kici_platform_stale_platform_connections_evicted_total",
795
920
  "kici_platform_stale_runs_failed_total",
796
921
  "kici_platform_step_status_forwards_total",
922
+ "kici_platform_ws_org_rate_limited_total",
797
923
  "kici_registrations_total",
798
924
  "kici_universal_git_registration_errors_total",
799
925
  "kici_user_registration_notify_total",
@@ -1,4 +1,4 @@
1
- import "../chunk-BTugEXQM.js";
1
+ import "../rolldown-runtime-ClRpJifh.js";
2
2
  import { z } from "zod";
3
3
  //#region src/protocol/analytics-events.ts
4
4
  const AnalyticsEvent = z.enum([
@@ -1,4 +1,4 @@
1
- import "../chunk-BTugEXQM.js";
1
+ import "../rolldown-runtime-ClRpJifh.js";
2
2
  import { z } from "zod";
3
3
  //#region src/protocol/cluster-name.ts
4
4
  /**
@@ -1,3 +1,3 @@
1
- import "../chunk-BTugEXQM.js";
1
+ import "../rolldown-runtime-ClRpJifh.js";
2
2
  import { globalWorkflowSettingsSchema, globalWorkflowsGetRequestSchema, globalWorkflowsGetResponseSchema, globalWorkflowsUpdateRequestSchema, globalWorkflowsUpdateResponseSchema, repoPatternEntrySchema } from "./messages/dashboard-global-workflows.js";
3
3
  export { globalWorkflowSettingsSchema, globalWorkflowsGetRequestSchema, globalWorkflowsGetResponseSchema, globalWorkflowsUpdateRequestSchema, globalWorkflowsUpdateResponseSchema, repoPatternEntrySchema };
@@ -38,6 +38,7 @@ export declare const DashboardWriteOperation: z.ZodEnum<{
38
38
  "held_runs.reject": "held_runs.reject";
39
39
  "event_dlq.retry": "event_dlq.retry";
40
40
  "event_dlq.discard": "event_dlq.discard";
41
+ "attestations.retry": "attestations.retry";
41
42
  "registration.disable": "registration.disable";
42
43
  "registration.delete": "registration.delete";
43
44
  "global_workflows.update": "global_workflows.update";
@@ -57,6 +58,7 @@ export declare const DashboardWriteCategory: z.ZodEnum<{
57
58
  Bindings: "Bindings";
58
59
  "Held runs": "Held runs";
59
60
  DLQ: "DLQ";
61
+ Attestations: "Attestations";
60
62
  Registrations: "Registrations";
61
63
  Topology: "Topology";
62
64
  Fleet: "Fleet";
@@ -127,6 +129,7 @@ export declare const dashboardWritePolicyMap: z.ZodRecord<z.ZodEnum<{
127
129
  "held_runs.reject": "held_runs.reject";
128
130
  "event_dlq.retry": "event_dlq.retry";
129
131
  "event_dlq.discard": "event_dlq.discard";
132
+ "attestations.retry": "attestations.retry";
130
133
  "registration.disable": "registration.disable";
131
134
  "registration.delete": "registration.delete";
132
135
  "global_workflows.update": "global_workflows.update";
@@ -155,6 +158,7 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
155
158
  "held_runs.reject": "held_runs.reject";
156
159
  "event_dlq.retry": "event_dlq.retry";
157
160
  "event_dlq.discard": "event_dlq.discard";
161
+ "attestations.retry": "attestations.retry";
158
162
  "registration.disable": "registration.disable";
159
163
  "registration.delete": "registration.delete";
160
164
  "global_workflows.update": "global_workflows.update";
@@ -171,7 +175,7 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
171
175
  export declare function isDashboardWriteOperationEnabled(policy: DashboardWritePolicyMap | null | undefined, op: DashboardWriteOperation): boolean;
172
176
  /**
173
177
  * Expand a (possibly sparse) policy map into the full effective state
174
- * for all 26 operations. Operations the policy doesn't mention come
178
+ * for all 27 operations. Operations the policy doesn't mention come
175
179
  * back as `true` (permissive). Used by the orch HTTP admin response,
176
180
  * the WS `orch.capabilities` broadcast, and the dashboard's policy
177
181
  * page so consumers see the full picture, not the sparse storage shape.
@@ -1,4 +1,4 @@
1
- import "../chunk-BTugEXQM.js";
1
+ import "../rolldown-runtime-ClRpJifh.js";
2
2
  import { z } from "zod";
3
3
  //#region src/protocol/dashboard-write-operations.ts
4
4
  /**
@@ -40,6 +40,7 @@ const DashboardWriteOperation = z.enum([
40
40
  "held_runs.reject",
41
41
  "event_dlq.retry",
42
42
  "event_dlq.discard",
43
+ "attestations.retry",
43
44
  "registration.disable",
44
45
  "registration.delete",
45
46
  "global_workflows.update",
@@ -69,6 +70,7 @@ const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
69
70
  "held_runs.reject",
70
71
  "event_dlq.retry",
71
72
  "event_dlq.discard",
73
+ "attestations.retry",
72
74
  "registration.disable",
73
75
  "registration.delete",
74
76
  "global_workflows.update",
@@ -85,6 +87,7 @@ const DashboardWriteCategory = z.enum([
85
87
  "Bindings",
86
88
  "Held runs",
87
89
  "DLQ",
90
+ "Attestations",
88
91
  "Registrations",
89
92
  "Topology",
90
93
  "Fleet"
@@ -239,6 +242,14 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
239
242
  sensitivity: "dispatch",
240
243
  cliEquivalent: "kici-admin event-dlq discard"
241
244
  },
245
+ {
246
+ name: "attestations.retry",
247
+ wireMessageType: "dashboard.attestation.retry",
248
+ category: "Attestations",
249
+ label: "Retry deferred attestations",
250
+ sensitivity: "dispatch",
251
+ cliEquivalent: "kici-admin attestations retry"
252
+ },
242
253
  {
243
254
  name: "registration.disable",
244
255
  wireMessageType: "dashboard.registration.disable",
@@ -339,7 +350,7 @@ function isDashboardWriteOperationEnabled(policy, op) {
339
350
  }
340
351
  /**
341
352
  * Expand a (possibly sparse) policy map into the full effective state
342
- * for all 26 operations. Operations the policy doesn't mention come
353
+ * for all 27 operations. Operations the policy doesn't mention come
343
354
  * back as `true` (permissive). Used by the orch HTTP admin response,
344
355
  * the WS `orch.capabilities` broadcast, and the dashboard's policy
345
356
  * page so consumers see the full picture, not the sparse storage shape.
@@ -1,4 +1,4 @@
1
- import "../chunk-BTugEXQM.js";
1
+ import "../rolldown-runtime-ClRpJifh.js";
2
2
  //#region src/protocol/event-log-payload.ts
3
3
  /**
4
4
  * Constants for the chunked event-log payload streaming transport.