@kici-dev/engine 0.1.25 → 0.1.27

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. package/dist/approval/types.d.ts +3 -3
  2. package/dist/approval/types.js +3 -3
  3. package/dist/audit/access-log-policy.js +12 -11
  4. package/dist/audit/retention-policy.js +24 -22
  5. package/dist/context/host-match.d.ts +25 -0
  6. package/dist/{environment → context}/host-match.js +1 -1
  7. package/dist/context/index.d.ts +6 -0
  8. package/dist/context/index.js +5 -0
  9. package/dist/context/multi-context.d.ts +30 -0
  10. package/dist/context/multi-context.js +38 -0
  11. package/dist/context/scope-resolver.d.ts +46 -0
  12. package/dist/{environment → context}/scope-resolver.js +6 -6
  13. package/dist/context/scope-template.d.ts +18 -0
  14. package/dist/{environment → context}/scope-template.js +1 -1
  15. package/dist/context/types.d.ts +119 -0
  16. package/dist/{environment → context}/types.js +3 -3
  17. package/dist/dev-ops/operations.d.ts +1 -1
  18. package/dist/dev-ops/operations.js +1 -1
  19. package/dist/env/environment-allowlist.d.ts +23 -0
  20. package/dist/env/environment-allowlist.js +35 -1
  21. package/dist/fanout/materialize.js +2 -2
  22. package/dist/index.d.ts +1 -1
  23. package/dist/index.js +8 -8
  24. package/dist/metrics/metric-catalog.generated.d.ts +15 -10
  25. package/dist/metrics/metric-catalog.generated.js +18 -12
  26. package/dist/protocol/dashboard-api-errors.d.ts +12 -0
  27. package/dist/protocol/dashboard-api-errors.js +13 -0
  28. package/dist/protocol/dashboard-write-operations.d.ts +22 -22
  29. package/dist/protocol/dashboard-write-operations.js +52 -52
  30. package/dist/protocol/messages/access-log.d.ts +65 -60
  31. package/dist/protocol/messages/access-log.js +13 -12
  32. package/dist/protocol/messages/agent-run-result.d.ts +2 -2
  33. package/dist/protocol/messages/agent-run-result.js +1 -1
  34. package/dist/protocol/messages/auth.d.ts +7 -7
  35. package/dist/protocol/messages/capabilities.d.ts +7 -7
  36. package/dist/protocol/messages/dashboard.d.ts +235 -233
  37. package/dist/protocol/messages/dashboard.js +191 -191
  38. package/dist/protocol/messages/execution-status.d.ts +9 -9
  39. package/dist/protocol/messages/execution-status.js +8 -8
  40. package/dist/protocol/messages/platform-orchestrator.d.ts +75 -74
  41. package/dist/protocol/session-policy.d.ts +20 -0
  42. package/dist/protocol/session-policy.js +25 -0
  43. package/dist/trigger/types.d.ts +7 -6
  44. package/dist/trigger/types.js +2 -1
  45. package/package.json +15 -7
  46. package/sbom.spdx.json +5 -5
  47. package/dist/environment/index.js +0 -5
  48. package/dist/environment/multi-env.js +0 -38
@@ -27,13 +27,13 @@ export declare const DashboardWriteOperation: z.ZodEnum<{
27
27
  "secrets.scope.delete": "secrets.scope.delete";
28
28
  "variables.set": "variables.set";
29
29
  "variables.delete": "variables.delete";
30
- "environments.create": "environments.create";
31
- "environments.update": "environments.update";
32
- "environments.test_access.set": "environments.test_access.set";
33
- "environments.delete": "environments.delete";
34
- "environments.bindings.set": "environments.bindings.set";
35
- "environments.source_overrides.set": "environments.source_overrides.set";
36
- "environments.source_overrides.delete": "environments.source_overrides.delete";
30
+ "contexts.create": "contexts.create";
31
+ "contexts.update": "contexts.update";
32
+ "contexts.test_access.set": "contexts.test_access.set";
33
+ "contexts.delete": "contexts.delete";
34
+ "contexts.bindings.set": "contexts.bindings.set";
35
+ "contexts.source_overrides.set": "contexts.source_overrides.set";
36
+ "contexts.source_overrides.delete": "contexts.source_overrides.delete";
37
37
  "held_runs.approve": "held_runs.approve";
38
38
  "held_runs.reject": "held_runs.reject";
39
39
  "event_dlq.retry": "event_dlq.retry";
@@ -54,7 +54,7 @@ export declare const DASHBOARD_WRITE_OPERATION_VALUES: readonly DashboardWriteOp
54
54
  export declare const DashboardWriteCategory: z.ZodEnum<{
55
55
  Secrets: "Secrets";
56
56
  Variables: "Variables";
57
- Environments: "Environments";
57
+ Contexts: "Contexts";
58
58
  Bindings: "Bindings";
59
59
  "Held runs": "Held runs";
60
60
  DLQ: "DLQ";
@@ -118,13 +118,13 @@ export declare const dashboardWritePolicyMap: z.ZodRecord<z.ZodEnum<{
118
118
  "secrets.scope.delete": "secrets.scope.delete";
119
119
  "variables.set": "variables.set";
120
120
  "variables.delete": "variables.delete";
121
- "environments.create": "environments.create";
122
- "environments.update": "environments.update";
123
- "environments.test_access.set": "environments.test_access.set";
124
- "environments.delete": "environments.delete";
125
- "environments.bindings.set": "environments.bindings.set";
126
- "environments.source_overrides.set": "environments.source_overrides.set";
127
- "environments.source_overrides.delete": "environments.source_overrides.delete";
121
+ "contexts.create": "contexts.create";
122
+ "contexts.update": "contexts.update";
123
+ "contexts.test_access.set": "contexts.test_access.set";
124
+ "contexts.delete": "contexts.delete";
125
+ "contexts.bindings.set": "contexts.bindings.set";
126
+ "contexts.source_overrides.set": "contexts.source_overrides.set";
127
+ "contexts.source_overrides.delete": "contexts.source_overrides.delete";
128
128
  "held_runs.approve": "held_runs.approve";
129
129
  "held_runs.reject": "held_runs.reject";
130
130
  "event_dlq.retry": "event_dlq.retry";
@@ -147,13 +147,13 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
147
147
  "secrets.scope.delete": "secrets.scope.delete";
148
148
  "variables.set": "variables.set";
149
149
  "variables.delete": "variables.delete";
150
- "environments.create": "environments.create";
151
- "environments.update": "environments.update";
152
- "environments.test_access.set": "environments.test_access.set";
153
- "environments.delete": "environments.delete";
154
- "environments.bindings.set": "environments.bindings.set";
155
- "environments.source_overrides.set": "environments.source_overrides.set";
156
- "environments.source_overrides.delete": "environments.source_overrides.delete";
150
+ "contexts.create": "contexts.create";
151
+ "contexts.update": "contexts.update";
152
+ "contexts.test_access.set": "contexts.test_access.set";
153
+ "contexts.delete": "contexts.delete";
154
+ "contexts.bindings.set": "contexts.bindings.set";
155
+ "contexts.source_overrides.set": "contexts.source_overrides.set";
156
+ "contexts.source_overrides.delete": "contexts.source_overrides.delete";
157
157
  "held_runs.approve": "held_runs.approve";
158
158
  "held_runs.reject": "held_runs.reject";
159
159
  "event_dlq.retry": "event_dlq.retry";
@@ -29,13 +29,13 @@ const DashboardWriteOperation = z.enum([
29
29
  "secrets.scope.delete",
30
30
  "variables.set",
31
31
  "variables.delete",
32
- "environments.create",
33
- "environments.update",
34
- "environments.test_access.set",
35
- "environments.delete",
36
- "environments.bindings.set",
37
- "environments.source_overrides.set",
38
- "environments.source_overrides.delete",
32
+ "contexts.create",
33
+ "contexts.update",
34
+ "contexts.test_access.set",
35
+ "contexts.delete",
36
+ "contexts.bindings.set",
37
+ "contexts.source_overrides.set",
38
+ "contexts.source_overrides.delete",
39
39
  "held_runs.approve",
40
40
  "held_runs.reject",
41
41
  "event_dlq.retry",
@@ -59,13 +59,13 @@ const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
59
59
  "secrets.scope.delete",
60
60
  "variables.set",
61
61
  "variables.delete",
62
- "environments.create",
63
- "environments.update",
64
- "environments.test_access.set",
65
- "environments.delete",
66
- "environments.bindings.set",
67
- "environments.source_overrides.set",
68
- "environments.source_overrides.delete",
62
+ "contexts.create",
63
+ "contexts.update",
64
+ "contexts.test_access.set",
65
+ "contexts.delete",
66
+ "contexts.bindings.set",
67
+ "contexts.source_overrides.set",
68
+ "contexts.source_overrides.delete",
69
69
  "held_runs.approve",
70
70
  "held_runs.reject",
71
71
  "event_dlq.retry",
@@ -83,7 +83,7 @@ const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
83
83
  const DashboardWriteCategory = z.enum([
84
84
  "Secrets",
85
85
  "Variables",
86
- "Environments",
86
+ "Contexts",
87
87
  "Bindings",
88
88
  "Held runs",
89
89
  "DLQ",
@@ -100,7 +100,7 @@ const DashboardWriteSensitivity = z.enum([
100
100
  const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
101
101
  {
102
102
  name: "secrets.set",
103
- wireMessageType: "dashboard.environments.secrets.set",
103
+ wireMessageType: "dashboard.contexts.secrets.set",
104
104
  category: "Secrets",
105
105
  label: "Set secret value",
106
106
  sensitivity: "plaintext",
@@ -108,7 +108,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
108
108
  },
109
109
  {
110
110
  name: "secrets.delete",
111
- wireMessageType: "dashboard.environments.secrets.delete",
111
+ wireMessageType: "dashboard.contexts.secrets.delete",
112
112
  category: "Secrets",
113
113
  label: "Delete secret",
114
114
  sensitivity: "authority",
@@ -116,7 +116,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
116
116
  },
117
117
  {
118
118
  name: "secrets.scope.create",
119
- wireMessageType: "dashboard.environments.secrets.scope.create",
119
+ wireMessageType: "dashboard.contexts.secrets.scope.create",
120
120
  category: "Secrets",
121
121
  label: "Create secret scope",
122
122
  sensitivity: "authority",
@@ -124,7 +124,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
124
124
  },
125
125
  {
126
126
  name: "secrets.scope.rename",
127
- wireMessageType: "dashboard.environments.secrets.scope.rename",
127
+ wireMessageType: "dashboard.contexts.secrets.scope.rename",
128
128
  category: "Secrets",
129
129
  label: "Rename secret scope",
130
130
  sensitivity: "authority",
@@ -132,7 +132,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
132
132
  },
133
133
  {
134
134
  name: "secrets.scope.delete",
135
- wireMessageType: "dashboard.environments.secrets.scope.delete",
135
+ wireMessageType: "dashboard.contexts.secrets.scope.delete",
136
136
  category: "Secrets",
137
137
  label: "Delete secret scope",
138
138
  sensitivity: "authority",
@@ -140,7 +140,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
140
140
  },
141
141
  {
142
142
  name: "variables.set",
143
- wireMessageType: "dashboard.environments.variables.set",
143
+ wireMessageType: "dashboard.contexts.variables.set",
144
144
  category: "Variables",
145
145
  label: "Set variable value",
146
146
  sensitivity: "plaintext",
@@ -148,67 +148,67 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
148
148
  },
149
149
  {
150
150
  name: "variables.delete",
151
- wireMessageType: "dashboard.environments.variables.delete",
151
+ wireMessageType: "dashboard.contexts.variables.delete",
152
152
  category: "Variables",
153
153
  label: "Delete variable",
154
154
  sensitivity: "authority",
155
155
  cliEquivalent: "kici-admin variable delete"
156
156
  },
157
157
  {
158
- name: "environments.create",
159
- wireMessageType: "dashboard.environments.create",
160
- category: "Environments",
161
- label: "Create environment",
158
+ name: "contexts.create",
159
+ wireMessageType: "dashboard.contexts.create",
160
+ category: "Contexts",
161
+ label: "Create context",
162
162
  sensitivity: "authority",
163
- cliEquivalent: "kici-admin environment create"
163
+ cliEquivalent: "kici-admin context create"
164
164
  },
165
165
  {
166
- name: "environments.update",
167
- wireMessageType: "dashboard.environments.update",
168
- category: "Environments",
169
- label: "Update environment",
166
+ name: "contexts.update",
167
+ wireMessageType: "dashboard.contexts.update",
168
+ category: "Contexts",
169
+ label: "Update context",
170
170
  sensitivity: "authority",
171
- cliEquivalent: "kici-admin environment set-policy"
171
+ cliEquivalent: "kici-admin context set-policy"
172
172
  },
173
173
  {
174
- name: "environments.test_access.set",
175
- wireMessageType: "dashboard.environments.test_access.set",
176
- category: "Environments",
177
- label: "Set environment test access",
174
+ name: "contexts.test_access.set",
175
+ wireMessageType: "dashboard.contexts.test_access.set",
176
+ category: "Contexts",
177
+ label: "Set context test access",
178
178
  sensitivity: "authority",
179
- cliEquivalent: "kici-admin environment set-policy --allow-local-execution"
179
+ cliEquivalent: "kici-admin context set-policy --allow-local-execution"
180
180
  },
181
181
  {
182
- name: "environments.delete",
183
- wireMessageType: "dashboard.environments.delete",
184
- category: "Environments",
185
- label: "Delete environment",
182
+ name: "contexts.delete",
183
+ wireMessageType: "dashboard.contexts.delete",
184
+ category: "Contexts",
185
+ label: "Delete context",
186
186
  sensitivity: "authority",
187
- cliEquivalent: "kici-admin environment delete"
187
+ cliEquivalent: "kici-admin context delete"
188
188
  },
189
189
  {
190
- name: "environments.bindings.set",
191
- wireMessageType: "dashboard.environments.bindings.set",
190
+ name: "contexts.bindings.set",
191
+ wireMessageType: "dashboard.contexts.bindings.set",
192
192
  category: "Bindings",
193
- label: "Set environment binding",
193
+ label: "Set context binding",
194
194
  sensitivity: "authority",
195
- cliEquivalent: "kici-admin environment bind"
195
+ cliEquivalent: "kici-admin context bind"
196
196
  },
197
197
  {
198
- name: "environments.source_overrides.set",
199
- wireMessageType: "dashboard.environments.source-overrides.set",
198
+ name: "contexts.source_overrides.set",
199
+ wireMessageType: "dashboard.contexts.source-overrides.set",
200
200
  category: "Bindings",
201
201
  label: "Set source override",
202
202
  sensitivity: "authority",
203
- cliEquivalent: "kici-admin environment source-override set"
203
+ cliEquivalent: "kici-admin context source-override set"
204
204
  },
205
205
  {
206
- name: "environments.source_overrides.delete",
207
- wireMessageType: "dashboard.environments.source-overrides.delete",
206
+ name: "contexts.source_overrides.delete",
207
+ wireMessageType: "dashboard.contexts.source-overrides.delete",
208
208
  category: "Bindings",
209
209
  label: "Delete source override",
210
210
  sensitivity: "authority",
211
- cliEquivalent: "kici-admin environment source-override delete"
211
+ cliEquivalent: "kici-admin context source-override delete"
212
212
  },
213
213
  {
214
214
  name: "held_runs.approve",
@@ -31,7 +31,7 @@ export declare const AccessLogTargetType: z.ZodEnum<{
31
31
  job: "job";
32
32
  step: "step";
33
33
  run: "run";
34
- environment: "environment";
34
+ context: "context";
35
35
  payload: "payload";
36
36
  event_log: "event_log";
37
37
  event_log_payload: "event_log_payload";
@@ -78,19 +78,19 @@ export declare const AccessLogAction: z.ZodEnum<{
78
78
  "event_log.list.read": "event_log.list.read";
79
79
  "event_log.detail.read": "event_log.detail.read";
80
80
  "event_log.payload.read": "event_log.payload.read";
81
- "environment.list.read": "environment.list.read";
82
- "environment.get.read": "environment.get.read";
83
- "environment.create": "environment.create";
84
- "environment.update": "environment.update";
85
- "environment.delete": "environment.delete";
86
- "env_var.list.read": "env_var.list.read";
87
- "env_var.set": "env_var.set";
88
- "env_var.delete": "env_var.delete";
81
+ "context.list.read": "context.list.read";
82
+ "context.get.read": "context.get.read";
83
+ "context.create": "context.create";
84
+ "context.update": "context.update";
85
+ "context.delete": "context.delete";
86
+ "context_var.list.read": "context_var.list.read";
87
+ "context_var.set": "context_var.set";
88
+ "context_var.delete": "context_var.delete";
89
89
  "source_override.list.read": "source_override.list.read";
90
90
  "source_override.set": "source_override.set";
91
91
  "source_override.delete": "source_override.delete";
92
- "env_binding.list.read": "env_binding.list.read";
93
- "env_binding.set": "env_binding.set";
92
+ "context_binding.list.read": "context_binding.list.read";
93
+ "context_binding.set": "context_binding.set";
94
94
  "secret.list.read": "secret.list.read";
95
95
  "secret.set": "secret.set";
96
96
  "secret.delete": "secret.delete";
@@ -98,7 +98,7 @@ export declare const AccessLogAction: z.ZodEnum<{
98
98
  "secret_scope.create": "secret_scope.create";
99
99
  "secret_scope.rename": "secret_scope.rename";
100
100
  "secret_scope.delete": "secret_scope.delete";
101
- "environment.history.read": "environment.history.read";
101
+ "context.history.read": "context.history.read";
102
102
  "held_run.list.read": "held_run.list.read";
103
103
  "held_run.approve": "held_run.approve";
104
104
  "held_run.auto_approve": "held_run.auto_approve";
@@ -120,6 +120,7 @@ export declare const AccessLogAction: z.ZodEnum<{
120
120
  "global_workflows.get.read": "global_workflows.get.read";
121
121
  "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
122
122
  "cluster_name.update": "cluster_name.update";
123
+ "attestation.retry": "attestation.retry";
123
124
  "access_log.list.read": "access_log.list.read";
124
125
  "event_dlq.list.read": "event_dlq.list.read";
125
126
  archive_chunk: "archive_chunk";
@@ -173,19 +174,19 @@ export declare const accessLogItemSchema: z.ZodObject<{
173
174
  "event_log.list.read": "event_log.list.read";
174
175
  "event_log.detail.read": "event_log.detail.read";
175
176
  "event_log.payload.read": "event_log.payload.read";
176
- "environment.list.read": "environment.list.read";
177
- "environment.get.read": "environment.get.read";
178
- "environment.create": "environment.create";
179
- "environment.update": "environment.update";
180
- "environment.delete": "environment.delete";
181
- "env_var.list.read": "env_var.list.read";
182
- "env_var.set": "env_var.set";
183
- "env_var.delete": "env_var.delete";
177
+ "context.list.read": "context.list.read";
178
+ "context.get.read": "context.get.read";
179
+ "context.create": "context.create";
180
+ "context.update": "context.update";
181
+ "context.delete": "context.delete";
182
+ "context_var.list.read": "context_var.list.read";
183
+ "context_var.set": "context_var.set";
184
+ "context_var.delete": "context_var.delete";
184
185
  "source_override.list.read": "source_override.list.read";
185
186
  "source_override.set": "source_override.set";
186
187
  "source_override.delete": "source_override.delete";
187
- "env_binding.list.read": "env_binding.list.read";
188
- "env_binding.set": "env_binding.set";
188
+ "context_binding.list.read": "context_binding.list.read";
189
+ "context_binding.set": "context_binding.set";
189
190
  "secret.list.read": "secret.list.read";
190
191
  "secret.set": "secret.set";
191
192
  "secret.delete": "secret.delete";
@@ -193,7 +194,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
193
194
  "secret_scope.create": "secret_scope.create";
194
195
  "secret_scope.rename": "secret_scope.rename";
195
196
  "secret_scope.delete": "secret_scope.delete";
196
- "environment.history.read": "environment.history.read";
197
+ "context.history.read": "context.history.read";
197
198
  "held_run.list.read": "held_run.list.read";
198
199
  "held_run.approve": "held_run.approve";
199
200
  "held_run.auto_approve": "held_run.auto_approve";
@@ -215,6 +216,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
215
216
  "global_workflows.get.read": "global_workflows.get.read";
216
217
  "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
217
218
  "cluster_name.update": "cluster_name.update";
219
+ "attestation.retry": "attestation.retry";
218
220
  "access_log.list.read": "access_log.list.read";
219
221
  "event_dlq.list.read": "event_dlq.list.read";
220
222
  archive_chunk: "archive_chunk";
@@ -224,7 +226,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
224
226
  job: "job";
225
227
  step: "step";
226
228
  run: "run";
227
- environment: "environment";
229
+ context: "context";
228
230
  payload: "payload";
229
231
  event_log: "event_log";
230
232
  event_log_payload: "event_log_payload";
@@ -294,19 +296,19 @@ export declare const accessLogFilterSchema: z.ZodObject<{
294
296
  "event_log.list.read": "event_log.list.read";
295
297
  "event_log.detail.read": "event_log.detail.read";
296
298
  "event_log.payload.read": "event_log.payload.read";
297
- "environment.list.read": "environment.list.read";
298
- "environment.get.read": "environment.get.read";
299
- "environment.create": "environment.create";
300
- "environment.update": "environment.update";
301
- "environment.delete": "environment.delete";
302
- "env_var.list.read": "env_var.list.read";
303
- "env_var.set": "env_var.set";
304
- "env_var.delete": "env_var.delete";
299
+ "context.list.read": "context.list.read";
300
+ "context.get.read": "context.get.read";
301
+ "context.create": "context.create";
302
+ "context.update": "context.update";
303
+ "context.delete": "context.delete";
304
+ "context_var.list.read": "context_var.list.read";
305
+ "context_var.set": "context_var.set";
306
+ "context_var.delete": "context_var.delete";
305
307
  "source_override.list.read": "source_override.list.read";
306
308
  "source_override.set": "source_override.set";
307
309
  "source_override.delete": "source_override.delete";
308
- "env_binding.list.read": "env_binding.list.read";
309
- "env_binding.set": "env_binding.set";
310
+ "context_binding.list.read": "context_binding.list.read";
311
+ "context_binding.set": "context_binding.set";
310
312
  "secret.list.read": "secret.list.read";
311
313
  "secret.set": "secret.set";
312
314
  "secret.delete": "secret.delete";
@@ -314,7 +316,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
314
316
  "secret_scope.create": "secret_scope.create";
315
317
  "secret_scope.rename": "secret_scope.rename";
316
318
  "secret_scope.delete": "secret_scope.delete";
317
- "environment.history.read": "environment.history.read";
319
+ "context.history.read": "context.history.read";
318
320
  "held_run.list.read": "held_run.list.read";
319
321
  "held_run.approve": "held_run.approve";
320
322
  "held_run.auto_approve": "held_run.auto_approve";
@@ -336,6 +338,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
336
338
  "global_workflows.get.read": "global_workflows.get.read";
337
339
  "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
338
340
  "cluster_name.update": "cluster_name.update";
341
+ "attestation.retry": "attestation.retry";
339
342
  "access_log.list.read": "access_log.list.read";
340
343
  "event_dlq.list.read": "event_dlq.list.read";
341
344
  archive_chunk: "archive_chunk";
@@ -356,7 +359,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
356
359
  job: "job";
357
360
  step: "step";
358
361
  run: "run";
359
- environment: "environment";
362
+ context: "context";
360
363
  payload: "payload";
361
364
  event_log: "event_log";
362
365
  event_log_payload: "event_log_payload";
@@ -445,19 +448,19 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
445
448
  "event_log.list.read": "event_log.list.read";
446
449
  "event_log.detail.read": "event_log.detail.read";
447
450
  "event_log.payload.read": "event_log.payload.read";
448
- "environment.list.read": "environment.list.read";
449
- "environment.get.read": "environment.get.read";
450
- "environment.create": "environment.create";
451
- "environment.update": "environment.update";
452
- "environment.delete": "environment.delete";
453
- "env_var.list.read": "env_var.list.read";
454
- "env_var.set": "env_var.set";
455
- "env_var.delete": "env_var.delete";
451
+ "context.list.read": "context.list.read";
452
+ "context.get.read": "context.get.read";
453
+ "context.create": "context.create";
454
+ "context.update": "context.update";
455
+ "context.delete": "context.delete";
456
+ "context_var.list.read": "context_var.list.read";
457
+ "context_var.set": "context_var.set";
458
+ "context_var.delete": "context_var.delete";
456
459
  "source_override.list.read": "source_override.list.read";
457
460
  "source_override.set": "source_override.set";
458
461
  "source_override.delete": "source_override.delete";
459
- "env_binding.list.read": "env_binding.list.read";
460
- "env_binding.set": "env_binding.set";
462
+ "context_binding.list.read": "context_binding.list.read";
463
+ "context_binding.set": "context_binding.set";
461
464
  "secret.list.read": "secret.list.read";
462
465
  "secret.set": "secret.set";
463
466
  "secret.delete": "secret.delete";
@@ -465,7 +468,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
465
468
  "secret_scope.create": "secret_scope.create";
466
469
  "secret_scope.rename": "secret_scope.rename";
467
470
  "secret_scope.delete": "secret_scope.delete";
468
- "environment.history.read": "environment.history.read";
471
+ "context.history.read": "context.history.read";
469
472
  "held_run.list.read": "held_run.list.read";
470
473
  "held_run.approve": "held_run.approve";
471
474
  "held_run.auto_approve": "held_run.auto_approve";
@@ -487,6 +490,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
487
490
  "global_workflows.get.read": "global_workflows.get.read";
488
491
  "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
489
492
  "cluster_name.update": "cluster_name.update";
493
+ "attestation.retry": "attestation.retry";
490
494
  "access_log.list.read": "access_log.list.read";
491
495
  "event_dlq.list.read": "event_dlq.list.read";
492
496
  archive_chunk: "archive_chunk";
@@ -507,7 +511,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
507
511
  job: "job";
508
512
  step: "step";
509
513
  run: "run";
510
- environment: "environment";
514
+ context: "context";
511
515
  payload: "payload";
512
516
  event_log: "event_log";
513
517
  event_log_payload: "event_log_payload";
@@ -577,19 +581,19 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
577
581
  "event_log.list.read": "event_log.list.read";
578
582
  "event_log.detail.read": "event_log.detail.read";
579
583
  "event_log.payload.read": "event_log.payload.read";
580
- "environment.list.read": "environment.list.read";
581
- "environment.get.read": "environment.get.read";
582
- "environment.create": "environment.create";
583
- "environment.update": "environment.update";
584
- "environment.delete": "environment.delete";
585
- "env_var.list.read": "env_var.list.read";
586
- "env_var.set": "env_var.set";
587
- "env_var.delete": "env_var.delete";
584
+ "context.list.read": "context.list.read";
585
+ "context.get.read": "context.get.read";
586
+ "context.create": "context.create";
587
+ "context.update": "context.update";
588
+ "context.delete": "context.delete";
589
+ "context_var.list.read": "context_var.list.read";
590
+ "context_var.set": "context_var.set";
591
+ "context_var.delete": "context_var.delete";
588
592
  "source_override.list.read": "source_override.list.read";
589
593
  "source_override.set": "source_override.set";
590
594
  "source_override.delete": "source_override.delete";
591
- "env_binding.list.read": "env_binding.list.read";
592
- "env_binding.set": "env_binding.set";
595
+ "context_binding.list.read": "context_binding.list.read";
596
+ "context_binding.set": "context_binding.set";
593
597
  "secret.list.read": "secret.list.read";
594
598
  "secret.set": "secret.set";
595
599
  "secret.delete": "secret.delete";
@@ -597,7 +601,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
597
601
  "secret_scope.create": "secret_scope.create";
598
602
  "secret_scope.rename": "secret_scope.rename";
599
603
  "secret_scope.delete": "secret_scope.delete";
600
- "environment.history.read": "environment.history.read";
604
+ "context.history.read": "context.history.read";
601
605
  "held_run.list.read": "held_run.list.read";
602
606
  "held_run.approve": "held_run.approve";
603
607
  "held_run.auto_approve": "held_run.auto_approve";
@@ -619,6 +623,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
619
623
  "global_workflows.get.read": "global_workflows.get.read";
620
624
  "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
621
625
  "cluster_name.update": "cluster_name.update";
626
+ "attestation.retry": "attestation.retry";
622
627
  "access_log.list.read": "access_log.list.read";
623
628
  "event_dlq.list.read": "event_dlq.list.read";
624
629
  archive_chunk: "archive_chunk";
@@ -628,7 +633,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
628
633
  job: "job";
629
634
  step: "step";
630
635
  run: "run";
631
- environment: "environment";
636
+ context: "context";
632
637
  payload: "payload";
633
638
  event_log: "event_log";
634
639
  event_log_payload: "event_log_payload";
@@ -36,7 +36,7 @@ const AccessLogTargetType = z.enum([
36
36
  "event_log",
37
37
  "event_log_payload",
38
38
  "secret_scope",
39
- "environment",
39
+ "context",
40
40
  "registration",
41
41
  "backend",
42
42
  "diagnostics",
@@ -71,19 +71,19 @@ const AccessLogAction = z.enum([
71
71
  "event_log.list.read",
72
72
  "event_log.detail.read",
73
73
  "event_log.payload.read",
74
- "environment.list.read",
75
- "environment.get.read",
76
- "environment.create",
77
- "environment.update",
78
- "environment.delete",
79
- "env_var.list.read",
80
- "env_var.set",
81
- "env_var.delete",
74
+ "context.list.read",
75
+ "context.get.read",
76
+ "context.create",
77
+ "context.update",
78
+ "context.delete",
79
+ "context_var.list.read",
80
+ "context_var.set",
81
+ "context_var.delete",
82
82
  "source_override.list.read",
83
83
  "source_override.set",
84
84
  "source_override.delete",
85
- "env_binding.list.read",
86
- "env_binding.set",
85
+ "context_binding.list.read",
86
+ "context_binding.set",
87
87
  "secret.list.read",
88
88
  "secret.set",
89
89
  "secret.delete",
@@ -91,7 +91,7 @@ const AccessLogAction = z.enum([
91
91
  "secret_scope.create",
92
92
  "secret_scope.rename",
93
93
  "secret_scope.delete",
94
- "environment.history.read",
94
+ "context.history.read",
95
95
  "held_run.list.read",
96
96
  "held_run.approve",
97
97
  "held_run.auto_approve",
@@ -118,6 +118,7 @@ const AccessLogAction = z.enum([
118
118
  "global_workflows.update",
119
119
  "org_settings.dashboard_write_policy.update",
120
120
  "cluster_name.update",
121
+ "attestation.retry",
121
122
  "access_log.list.read",
122
123
  "event_dlq.list.read",
123
124
  "event_dlq.retry",
@@ -110,7 +110,7 @@ export declare const agentJobResultSchema: z.ZodObject<{
110
110
  install_secrets: "install_secrets";
111
111
  lock_resolution: "lock_resolution";
112
112
  build_coordination: "build_coordination";
113
- environment_rules: "environment_rules";
113
+ context_rules: "context_rules";
114
114
  dynamic_eval: "dynamic_eval";
115
115
  no_agent: "no_agent";
116
116
  matrix_expansion: "matrix_expansion";
@@ -267,7 +267,7 @@ export declare const agentRunResultSchema: z.ZodObject<{
267
267
  install_secrets: "install_secrets";
268
268
  lock_resolution: "lock_resolution";
269
269
  build_coordination: "build_coordination";
270
- environment_rules: "environment_rules";
270
+ context_rules: "context_rules";
271
271
  dynamic_eval: "dynamic_eval";
272
272
  no_agent: "no_agent";
273
273
  matrix_expansion: "matrix_expansion";
@@ -1,7 +1,7 @@
1
1
  import "../../rolldown-runtime-ClRpJifh.js";
2
2
  import { CheckStepOutcome } from "../../check-mode.js";
3
3
  import { ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, InitFailureCategory } from "./execution-status.js";
4
- import { TrustTierSchema } from "../../environment/types.js";
4
+ import { TrustTierSchema } from "../../context/types.js";
5
5
  import { z } from "zod";
6
6
  //#region src/protocol/messages/agent-run-result.ts
7
7
  /**