@kici-dev/engine 0.1.23 → 0.1.25

package/dist/protocol/messages/access-log.d.ts

@@ -13,10 +13,10 @@ import { z } from 'zod';
  */
 /** Where the access-log entry was originated from. */
 export declare const AccessLogSource: z.ZodEnum<{
+    agent: "agent";
     platform_proxy: "platform_proxy";
     admin_http: "admin_http";
     admin_cli: "admin_cli";
-    agent: "agent";
 }>;
 export type AccessLogSource = z.infer<typeof AccessLogSource>;
 /** Outcome of the attempted action. */
@@ -28,14 +28,14 @@ export declare const AccessLogOutcome: z.ZodEnum<{
 export type AccessLogOutcome = z.infer<typeof AccessLogOutcome>;
 /** Target object category. */
 export declare const AccessLogTargetType: z.ZodEnum<{
-    run: "run";
     job: "job";
-    payload: "payload";
     step: "step";
+    run: "run";
+    environment: "environment";
+    payload: "payload";
     event_log: "event_log";
     event_log_payload: "event_log_payload";
     secret_scope: "secret_scope";
-    environment: "environment";
     registration: "registration";
     backend: "backend";
     diagnostics: "diagnostics";
@@ -46,6 +46,7 @@ export declare const AccessLogTargetType: z.ZodEnum<{
     event_dlq: "event_dlq";
     org_settings: "org_settings";
     cluster_meta: "cluster_meta";
+    attestation: "attestation";
 }>;
 export type AccessLogTargetType = z.infer<typeof AccessLogTargetType>;
 /**
@@ -61,6 +62,7 @@ export declare const AccessLogAction: z.ZodEnum<{
     "fleet.host.declare": "fleet.host.declare";
     "fleet.host.remove": "fleet.host.remove";
     "run.detail.read": "run.detail.read";
+    "run.structured.read": "run.structured.read";
     "runs.list.read": "runs.list.read";
     "runs.filters.read": "runs.filters.read";
     "sources.list.read": "sources.list.read";
@@ -155,6 +157,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
         "fleet.host.declare": "fleet.host.declare";
         "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
+        "run.structured.read": "run.structured.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
         "sources.list.read": "sources.list.read";
@@ -218,14 +221,14 @@ export declare const accessLogItemSchema: z.ZodObject<{
         purge_chunk: "purge_chunk";
     }>;
     targetType: z.ZodNullable<z.ZodEnum<{
-        run: "run";
         job: "job";
-        payload: "payload";
         step: "step";
+        run: "run";
+        environment: "environment";
+        payload: "payload";
         event_log: "event_log";
         event_log_payload: "event_log_payload";
         secret_scope: "secret_scope";
-        environment: "environment";
         registration: "registration";
         backend: "backend";
         diagnostics: "diagnostics";
@@ -236,14 +239,15 @@ export declare const accessLogItemSchema: z.ZodObject<{
         event_dlq: "event_dlq";
         org_settings: "org_settings";
         cluster_meta: "cluster_meta";
+        attestation: "attestation";
     }>>;
     targetId: z.ZodNullable<z.ZodString>;
     requestId: z.ZodNullable<z.ZodString>;
     source: z.ZodEnum<{
+        agent: "agent";
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
-        agent: "agent";
     }>;
     outcome: z.ZodEnum<{
         error: "error";
@@ -251,6 +255,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
         denied: "denied";
     }>;
     errorMessage: z.ZodNullable<z.ZodString>;
+    agentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type AccessLogItem = z.infer<typeof accessLogItemSchema>;
@@ -273,6 +278,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         "fleet.host.declare": "fleet.host.declare";
         "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
+        "run.structured.read": "run.structured.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
         "sources.list.read": "sources.list.read";
@@ -336,10 +342,10 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         purge_chunk: "purge_chunk";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
+        agent: "agent";
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
-        agent: "agent";
     }>>;
     outcome: z.ZodOptional<z.ZodEnum<{
         error: "error";
@@ -347,14 +353,14 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         denied: "denied";
     }>>;
     targetType: z.ZodOptional<z.ZodEnum<{
-        run: "run";
         job: "job";
-        payload: "payload";
         step: "step";
+        run: "run";
+        environment: "environment";
+        payload: "payload";
         event_log: "event_log";
         event_log_payload: "event_log_payload";
         secret_scope: "secret_scope";
-        environment: "environment";
         registration: "registration";
         backend: "backend";
         diagnostics: "diagnostics";
@@ -365,10 +371,13 @@ export declare const accessLogFilterSchema: z.ZodObject<{
         event_dlq: "event_dlq";
         org_settings: "org_settings";
         cluster_meta: "cluster_meta";
+        attestation: "attestation";
     }>>;
     targetId: z.ZodOptional<z.ZodString>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
     toTimestamp: z.ZodOptional<z.ZodString>;
+    agentLabel: z.ZodOptional<z.ZodString>;
+    agentOnly: z.ZodOptional<z.ZodBoolean>;
     limit: z.ZodOptional<z.ZodNumber>;
     cursor: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
@@ -379,10 +388,17 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
         sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"api_key">;
         keyId: z.ZodString;
         ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
     }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"service_account">;
         id: z.ZodString;
@@ -413,6 +429,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         "fleet.host.declare": "fleet.host.declare";
         "fleet.host.remove": "fleet.host.remove";
         "run.detail.read": "run.detail.read";
+        "run.structured.read": "run.structured.read";
         "runs.list.read": "runs.list.read";
         "runs.filters.read": "runs.filters.read";
         "sources.list.read": "sources.list.read";
@@ -476,10 +493,10 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         purge_chunk: "purge_chunk";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
+        agent: "agent";
         platform_proxy: "platform_proxy";
         admin_http: "admin_http";
         admin_cli: "admin_cli";
-        agent: "agent";
     }>>;
     outcome: z.ZodOptional<z.ZodEnum<{
         error: "error";
@@ -487,14 +504,14 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         denied: "denied";
     }>>;
     targetType: z.ZodOptional<z.ZodEnum<{
-        run: "run";
         job: "job";
-        payload: "payload";
         step: "step";
+        run: "run";
+        environment: "environment";
+        payload: "payload";
         event_log: "event_log";
         event_log_payload: "event_log_payload";
         secret_scope: "secret_scope";
-        environment: "environment";
         registration: "registration";
         backend: "backend";
         diagnostics: "diagnostics";
@@ -505,11 +522,14 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
         event_dlq: "event_dlq";
         org_settings: "org_settings";
         cluster_meta: "cluster_meta";
+        attestation: "attestation";
     }>>;
     targetId: z.ZodOptional<z.ZodString>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
     toTimestamp: z.ZodOptional<z.ZodString>;
     q: z.ZodOptional<z.ZodString>;
+    agentLabel: z.ZodOptional<z.ZodString>;
+    agentOnly: z.ZodOptional<z.ZodBoolean>;
     limit: z.ZodOptional<z.ZodNumber>;
     cursor: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
@@ -541,6 +561,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             "fleet.host.declare": "fleet.host.declare";
             "fleet.host.remove": "fleet.host.remove";
             "run.detail.read": "run.detail.read";
+            "run.structured.read": "run.structured.read";
             "runs.list.read": "runs.list.read";
             "runs.filters.read": "runs.filters.read";
             "sources.list.read": "sources.list.read";
@@ -604,14 +625,14 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             purge_chunk: "purge_chunk";
         }>;
         targetType: z.ZodNullable<z.ZodEnum<{
-            run: "run";
             job: "job";
-            payload: "payload";
             step: "step";
+            run: "run";
+            environment: "environment";
+            payload: "payload";
             event_log: "event_log";
             event_log_payload: "event_log_payload";
             secret_scope: "secret_scope";
-            environment: "environment";
             registration: "registration";
             backend: "backend";
             diagnostics: "diagnostics";
@@ -622,14 +643,15 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             event_dlq: "event_dlq";
             org_settings: "org_settings";
             cluster_meta: "cluster_meta";
+            attestation: "attestation";
         }>>;
         targetId: z.ZodNullable<z.ZodString>;
         requestId: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            agent: "agent";
             platform_proxy: "platform_proxy";
             admin_http: "admin_http";
             admin_cli: "admin_cli";
-            agent: "agent";
         }>;
         outcome: z.ZodEnum<{
             error: "error";
@@ -637,6 +659,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
             denied: "denied";
         }>;
         errorMessage: z.ZodNullable<z.ZodString>;
+        agentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         createdAt: z.ZodString;
     }, z.core.$strip>>>;
     nextCursor: z.ZodOptional<z.ZodNullable<z.ZodString>>;

package/dist/protocol/messages/access-log.js

@@ -1,4 +1,4 @@
-import "../../chunk-BTugEXQM.js";
+import "../../rolldown-runtime-ClRpJifh.js";
 import { ActorType, actorPrincipalSchema } from "./actor.js";
 import { z } from "zod";
 //#region src/protocol/messages/access-log.ts
@@ -46,7 +46,8 @@ const AccessLogTargetType = z.enum([
 	"access_log",
 	"event_dlq",
 	"org_settings",
-	"cluster_meta"
+	"cluster_meta",
+	"attestation"
 ]);
 /**
 * Dotted-namespace action names. Every handler that writes an access_log
@@ -54,6 +55,7 @@ const AccessLogTargetType = z.enum([
 */
 const AccessLogAction = z.enum([
 	"run.detail.read",
+	"run.structured.read",
 	"runs.list.read",
 	"runs.filters.read",
 	"sources.list.read",
@@ -147,6 +149,12 @@ const accessLogItemSchema = z.object({
 	source: AccessLogSource,
 	outcome: AccessLogOutcome,
 	errorMessage: z.string().nullable(),
+	/**
+	* Agent provenance label promoted from the dedicated `agent_label` column
+	* (not parsed out of `actor_meta`) so consumers can filter/display it
+	* directly. Null for ordinary human / API-key / system actors.
+	*/
+	agentLabel: z.string().nullable().optional(),
 	createdAt: z.string()
 });
 /** Shared filter shape reused by Platform proxy + orchestrator HTTP + CLI. */
@@ -160,6 +168,8 @@ const accessLogFilterSchema = z.object({
 	targetId: z.string().optional(),
 	fromTimestamp: z.string().optional(),
 	toTimestamp: z.string().optional(),
+	agentLabel: z.string().optional(),
+	agentOnly: z.boolean().optional(),
 	limit: z.number().int().positive().max(200).optional(),
 	cursor: z.string().optional()
 });
@@ -179,6 +189,10 @@ const dashboardAccessLogListRequestSchema = z.object({
 	toTimestamp: z.string().optional(),
 	/** Full-text search over `error_message` (trigram-indexed via migration 009). */
 	q: z.string().optional(),
+	/** Exact-match filter on the agent provenance label (`agent_label` column). */
+	agentLabel: z.string().max(255).optional(),
+	/** When true, return only agent-attributed rows (`agent_label IS NOT NULL`). */
+	agentOnly: z.boolean().optional(),
 	limit: z.number().int().positive().max(200).optional(),
 	cursor: z.string().optional()
 });

package/dist/protocol/messages/actor.d.ts

@@ -20,12 +20,19 @@ export type ActorType = z.infer<typeof ActorType>;
 export declare const userActorSchema: z.ZodObject<{
     type: z.ZodLiteral<"user">;
     sub: z.ZodString;
+    agent: z.ZodOptional<z.ZodObject<{
+        patId: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type UserActor = z.infer<typeof userActorSchema>;
 export declare const apiKeyActorSchema: z.ZodObject<{
     type: z.ZodLiteral<"api_key">;
     keyId: z.ZodString;
     ownerSub: z.ZodString;
+    agent: z.ZodOptional<z.ZodObject<{
+        label: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type ApiKeyActor = z.infer<typeof apiKeyActorSchema>;
 export declare const serviceAccountActorSchema: z.ZodObject<{
@@ -48,10 +55,17 @@ export type SystemActor = z.infer<typeof systemActorSchema>;
 export declare const actorPrincipalSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     type: z.ZodLiteral<"user">;
     sub: z.ZodString;
+    agent: z.ZodOptional<z.ZodObject<{
+        patId: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"api_key">;
     keyId: z.ZodString;
     ownerSub: z.ZodString;
+    agent: z.ZodOptional<z.ZodObject<{
+        label: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"service_account">;
     id: z.ZodString;
@@ -99,4 +113,11 @@ export declare function flattenActor(actor: ActorPrincipal): {
     actorId: string;
     actorMeta: Record<string, unknown> | null;
 };
+/**
+ * Extract the agent provenance label from an actor, when present. Returns the
+ * label for agent-kind `user` (PAT) and `api_key` (org key) actors, else null.
+ * The single label extractor reused by run capture and the access-log writer so
+ * both credential families surface agent provenance identically.
+ */
+export declare function agentLabelOf(actor: ActorPrincipal): string | null;
 //# sourceMappingURL=actor.d.ts.map

package/dist/protocol/messages/actor.js

@@ -1,4 +1,4 @@
-import "../../chunk-BTugEXQM.js";
+import "../../rolldown-runtime-ClRpJifh.js";
 import { z } from "zod";
 //#region src/protocol/messages/actor.ts
 /**
@@ -21,14 +21,32 @@ const ActorType = z.enum([
 const userActorSchema = z.object({
 	type: z.literal(ActorType.enum.user),
 	/** Keycloak subject (idp_sub). */
-	sub: z.string().min(1)
+	sub: z.string().min(1),
+	/**
+	* Present when the user is acting through an agent-kind PAT (e.g. a coding
+	* agent driving KiCI via the developer MCP server). The PAT still inherits
+	* the user's permissions — this is provenance only, not an authority change.
+	* `patId` is the opaque PAT identifier; `label` is the human-set agent name
+	* recorded on every audit / access-log row.
+	*/
+	agent: z.object({
+		patId: z.string().min(1),
+		label: z.string().min(1)
+	}).optional()
 });
 const apiKeyActorSchema = z.object({
 	type: z.literal(ActorType.enum.api_key),
 	/** Opaque key identifier (not the secret). */
 	keyId: z.string().min(1),
 	/** Keycloak sub of the human who owns this key. */
-	ownerSub: z.string().min(1)
+	ownerSub: z.string().min(1),
+	/**
+	* Present when the org API key is agent-kind (e.g. a service account driving
+	* KiCI via the developer MCP server). Unlike the user actor's agent, no
+	* separate id is needed — `keyId` already identifies the credential. The key
+	* still inherits the org's permissions; the label is provenance only.
+	*/
+	agent: z.object({ label: z.string().min(1) }).optional()
 });
 const serviceAccountActorSchema = z.object({
 	type: z.literal(ActorType.enum.service_account),
@@ -77,8 +95,8 @@ const actorPrincipalSchema = z.discriminatedUnion("type", [
 */
 function stringifyActor(actor) {
 	switch (actor.type) {
-		case "user": return `user:${actor.sub}`;
-		case "api_key": return `api_key:${actor.keyId}`;
+		case "user": return actor.agent ? `user:${actor.sub} via agent:${actor.agent.label}` : `user:${actor.sub}`;
+		case "api_key": return actor.agent ? `api_key:${actor.keyId} via agent:${actor.agent.label}` : `api_key:${actor.keyId}`;
 		case "service_account": return `service_account:${actor.id}`;
 		case "platform_operator": return `platform_operator:${actor.sub}`;
 		case "system": return `system:${actor.component}`;
@@ -116,12 +134,18 @@ function flattenActor(actor) {
 		case "user": return {
 			actorType: "user",
 			actorId: actor.sub,
-			actorMeta: null
+			actorMeta: actor.agent ? {
+				agentPatId: actor.agent.patId,
+				agentLabel: actor.agent.label
+			} : null
 		};
 		case "api_key": return {
 			actorType: "api_key",
 			actorId: actor.keyId,
-			actorMeta: { ownerSub: actor.ownerSub }
+			actorMeta: actor.agent ? {
+				ownerSub: actor.ownerSub,
+				agentLabel: actor.agent.label
+			} : { ownerSub: actor.ownerSub }
 		};
 		case "service_account": return {
 			actorType: "service_account",
@@ -143,7 +167,17 @@ function flattenActor(actor) {
 		};
 	}
 }
+/**
+* Extract the agent provenance label from an actor, when present. Returns the
+* label for agent-kind `user` (PAT) and `api_key` (org key) actors, else null.
+* The single label extractor reused by run capture and the access-log writer so
+* both credential families surface agent provenance identically.
+*/
+function agentLabelOf(actor) {
+	if (actor.type === "user" || actor.type === "api_key") return actor.agent?.label ?? null;
+	return null;
+}
 //#endregion
-export { ActorType, actorPrincipalSchema, apiKeyActorSchema, flattenActor, parseActor, platformOperatorActorSchema, serviceAccountActorSchema, stringifyActor, systemActorSchema, userActorSchema };
+export { ActorType, actorPrincipalSchema, agentLabelOf, apiKeyActorSchema, flattenActor, parseActor, platformOperatorActorSchema, serviceAccountActorSchema, stringifyActor, systemActorSchema, userActorSchema };
 
 //# sourceMappingURL=actor.js.map

package/dist/protocol/messages/agent-dev-ops.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Agent-facing, provenance-tagged shapes for the developer MCP's read tools
+ * beyond runs: organizations, connected orchestrators, diagnostics, and secret
+ * scope key names. Same discipline as {@link ./agent-run-result.js}: every
+ * user/process-controlled value (org and cluster names, routing keys, scope and
+ * secret key names) is wrapped in an {@link untrusted} envelope so the fencing
+ * renderer keeps it out of an agent's instruction channel; KiCI-generated ids,
+ * enum statuses, counts, and timestamps stay plain (trusted).
+ *
+ * Browser-safe (zod only) so it can ride the engine barrel alongside the rest
+ * of the agent-facing read contract.
+ */
+import { z } from 'zod';
+/**
+ * Organization the calling user belongs to. `displayName` / `publicAlias` are
+ * user-chosen → untrusted; the id, the owner flag, and the creation timestamp
+ * are trusted.
+ */
+export declare const agentOrgSummarySchema: z.ZodObject<{
+    id: z.ZodString;
+    publicAlias: z.ZodNullable<z.ZodObject<{
+        untrusted: z.ZodLiteral<true>;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+    displayName: z.ZodObject<{
+        untrusted: z.ZodLiteral<true>;
+        value: z.ZodString;
+    }, z.core.$strip>;
+    isOwner: z.ZodBoolean;
+    createdAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type AgentOrgSummary = z.infer<typeof agentOrgSummarySchema>;
+/**
+ * Connected orchestrator cluster (the customer-deployed data plane the org's
+ * runs execute on). The cluster name and routing keys carry user/source-derived
+ * content → untrusted; versions, modes, roles, scaler-backend enum tags, the S3
+ * flag, ids, and timestamps are trusted.
+ */
+export declare const agentOrchestratorSummarySchema: z.ZodObject<{
+    connectionId: z.ZodString;
+    clusterName: z.ZodNullable<z.ZodObject<{
+        untrusted: z.ZodLiteral<true>;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+    routingKeys: z.ZodArray<z.ZodObject<{
+        untrusted: z.ZodLiteral<true>;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+    orchVersion: z.ZodNullable<z.ZodString>;
+    orchMode: z.ZodNullable<z.ZodString>;
+    orchRole: z.ZodNullable<z.ZodString>;
+    scalerBackends: z.ZodArray<z.ZodString>;
+    s3LogAccess: z.ZodBoolean;
+    connectedAt: z.ZodString;
+    lastHeartbeatAt: z.ZodString;
+}, z.core.$strip>;
+export type AgentOrchestratorSummary = z.infer<typeof agentOrchestratorSummarySchema>;
+/** One orchestrator connection row inside the diagnostics summary. */
+export declare const agentDiagnosticsConnectionSchema: z.ZodObject<{
+    connectionId: z.ZodString;
+    healthBadge: z.ZodEnum<{
+        stale: "stale";
+        connected: "connected";
+        unhealthy: "unhealthy";
+    }>;
+    routingKeys: z.ZodArray<z.ZodObject<{
+        untrusted: z.ZodLiteral<true>;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+    lastHeartbeatAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Org diagnostics summary: execution metrics over the last 24h plus per-orch
+ * connection health. All metrics/counts/badges are KiCI-computed (trusted); only
+ * the routing keys carry user content.
+ */
+export declare const agentDiagnosticsSchema: z.ZodObject<{
+    executionMetrics: z.ZodObject<{
+        totalRuns: z.ZodNumber;
+        successRate: z.ZodNumber;
+        avgDurationSeconds: z.ZodNumber;
+        queuedJobs: z.ZodNumber;
+        runningJobs: z.ZodNumber;
+    }, z.core.$strip>;
+    orchestrators: z.ZodArray<z.ZodObject<{
+        connectionId: z.ZodString;
+        healthBadge: z.ZodEnum<{
+            stale: "stale";
+            connected: "connected";
+            unhealthy: "unhealthy";
+        }>;
+        routingKeys: z.ZodArray<z.ZodObject<{
+            untrusted: z.ZodLiteral<true>;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        lastHeartbeatAt: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    orphanedConnections: z.ZodNumber;
+}, z.core.$strip>;
+export type AgentDiagnostics = z.infer<typeof agentDiagnosticsSchema>;
+/**
+ * A secret scope and the key NAMES it holds — never values. Both the scope name
+ * and each key name are user-chosen → untrusted. This is the read contract for
+ * `list_secrets`: an agent can discover which secret keys exist without ever
+ * being handed a secret value.
+ */
+export declare const agentSecretScopeSchema: z.ZodObject<{
+    scope: z.ZodObject<{
+        untrusted: z.ZodLiteral<true>;
+        value: z.ZodString;
+    }, z.core.$strip>;
+    keys: z.ZodArray<z.ZodObject<{
+        untrusted: z.ZodLiteral<true>;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AgentSecretScope = z.infer<typeof agentSecretScopeSchema>;
+//# sourceMappingURL=agent-dev-ops.d.ts.map

package/dist/protocol/messages/agent-dev-ops.js

@@ -0,0 +1,89 @@
+import "../../rolldown-runtime-ClRpJifh.js";
+import { untrusted } from "./agent-run-result.js";
+import { z } from "zod";
+//#region src/protocol/messages/agent-dev-ops.ts
+/**
+* Agent-facing, provenance-tagged shapes for the developer MCP's read tools
+* beyond runs: organizations, connected orchestrators, diagnostics, and secret
+* scope key names. Same discipline as {@link ./agent-run-result.js}: every
+* user/process-controlled value (org and cluster names, routing keys, scope and
+* secret key names) is wrapped in an {@link untrusted} envelope so the fencing
+* renderer keeps it out of an agent's instruction channel; KiCI-generated ids,
+* enum statuses, counts, and timestamps stay plain (trusted).
+*
+* Browser-safe (zod only) so it can ride the engine barrel alongside the rest
+* of the agent-facing read contract.
+*/
+const untrustedString = untrusted(z.string());
+const untrustedStringNullable = untrusted(z.string()).nullable();
+/**
+* Organization the calling user belongs to. `displayName` / `publicAlias` are
+* user-chosen → untrusted; the id, the owner flag, and the creation timestamp
+* are trusted.
+*/
+const agentOrgSummarySchema = z.object({
+	id: z.string(),
+	publicAlias: untrustedStringNullable,
+	displayName: untrustedString,
+	isOwner: z.boolean(),
+	createdAt: z.string().nullable()
+});
+/**
+* Connected orchestrator cluster (the customer-deployed data plane the org's
+* runs execute on). The cluster name and routing keys carry user/source-derived
+* content → untrusted; versions, modes, roles, scaler-backend enum tags, the S3
+* flag, ids, and timestamps are trusted.
+*/
+const agentOrchestratorSummarySchema = z.object({
+	connectionId: z.string(),
+	clusterName: untrustedStringNullable,
+	routingKeys: z.array(untrustedString),
+	orchVersion: z.string().nullable(),
+	orchMode: z.string().nullable(),
+	orchRole: z.string().nullable(),
+	scalerBackends: z.array(z.string()),
+	s3LogAccess: z.boolean(),
+	connectedAt: z.string(),
+	lastHeartbeatAt: z.string()
+});
+/** One orchestrator connection row inside the diagnostics summary. */
+const agentDiagnosticsConnectionSchema = z.object({
+	connectionId: z.string(),
+	healthBadge: z.enum([
+		"connected",
+		"unhealthy",
+		"stale"
+	]),
+	routingKeys: z.array(untrustedString),
+	lastHeartbeatAt: z.string().nullable()
+});
+/**
+* Org diagnostics summary: execution metrics over the last 24h plus per-orch
+* connection health. All metrics/counts/badges are KiCI-computed (trusted); only
+* the routing keys carry user content.
+*/
+const agentDiagnosticsSchema = z.object({
+	executionMetrics: z.object({
+		totalRuns: z.number().int(),
+		successRate: z.number(),
+		avgDurationSeconds: z.number(),
+		queuedJobs: z.number().int(),
+		runningJobs: z.number().int()
+	}),
+	orchestrators: z.array(agentDiagnosticsConnectionSchema),
+	orphanedConnections: z.number().int()
+});
+/**
+* A secret scope and the key NAMES it holds — never values. Both the scope name
+* and each key name are user-chosen → untrusted. This is the read contract for
+* `list_secrets`: an agent can discover which secret keys exist without ever
+* being handed a secret value.
+*/
+const agentSecretScopeSchema = z.object({
+	scope: untrustedString,
+	keys: z.array(untrustedString)
+});
+//#endregion
+export { agentDiagnosticsConnectionSchema, agentDiagnosticsSchema, agentOrchestratorSummarySchema, agentOrgSummarySchema, agentSecretScopeSchema };
+
+//# sourceMappingURL=agent-dev-ops.js.map