@kici-dev/engine 0.1.25 → 0.1.27

package/dist/protocol/messages/execution-status.d.ts

@@ -11,8 +11,8 @@ export declare const STATE_REPLAY_MAX_RUNS = 500;
 export declare const MAX_JOBS_PER_RUN = 1000;
 /** Max number of `runsOn` / `secretsAccessed` label entries on a job/step. */
 export declare const RUNS_ON_LABELS_MAX = 30;
-/** Max number of bound deployment-environment names on a job. */
-export declare const ENVIRONMENTS_MAX = 30;
+/** Max number of bound context names on a job. */
+export declare const CONTEXTS_MAX = 30;
 /**
  * Status values for execution runs (execution_runs table).
  *
@@ -117,14 +117,14 @@ export type TimeoutReason = z.infer<typeof TimeoutReason>;
  *    (secret_resolution, install_secrets, lock_resolution,
  *    build_coordination).
  *  - `job`-scoped categories fail one job and leave siblings alone
- *    (environment_rules, dynamic_eval, no_agent, matrix_expansion).
+ *    (context_rules, dynamic_eval, no_agent, matrix_expansion).
  */
 export declare const InitFailureCategory: z.ZodEnum<{
     secret_resolution: "secret_resolution";
     install_secrets: "install_secrets";
     lock_resolution: "lock_resolution";
     build_coordination: "build_coordination";
-    environment_rules: "environment_rules";
+    context_rules: "context_rules";
     dynamic_eval: "dynamic_eval";
     no_agent: "no_agent";
     matrix_expansion: "matrix_expansion";
@@ -176,7 +176,7 @@ export declare const initFailureSchema: z.ZodObject<{
         install_secrets: "install_secrets";
         lock_resolution: "lock_resolution";
         build_coordination: "build_coordination";
-        environment_rules: "environment_rules";
+        context_rules: "context_rules";
         dynamic_eval: "dynamic_eval";
         no_agent: "no_agent";
         matrix_expansion: "matrix_expansion";
@@ -235,7 +235,7 @@ export declare const executionStatusSchema: z.ZodObject<{
             install_secrets: "install_secrets";
             lock_resolution: "lock_resolution";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
             no_agent: "no_agent";
             matrix_expansion: "matrix_expansion";
@@ -299,7 +299,7 @@ export declare const jobStatusForwardSchema: z.ZodObject<{
     agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
     logBytes: z.ZodOptional<z.ZodNumber>;
     timestamp: z.ZodNumber;
     initFailure: z.ZodOptional<z.ZodObject<{
@@ -312,7 +312,7 @@ export declare const jobStatusForwardSchema: z.ZodObject<{
             install_secrets: "install_secrets";
             lock_resolution: "lock_resolution";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
             no_agent: "no_agent";
             matrix_expansion: "matrix_expansion";
@@ -362,7 +362,7 @@ export declare const stateReplaySchema: z.ZodObject<{
             errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     timestamp: z.ZodNumber;

package/dist/protocol/messages/execution-status.js

@@ -13,8 +13,8 @@ const STATE_REPLAY_MAX_RUNS = 500;
 const MAX_JOBS_PER_RUN = 1e3;
 /** Max number of `runsOn` / `secretsAccessed` label entries on a job/step. */
 const RUNS_ON_LABELS_MAX = 30;
-/** Max number of bound deployment-environment names on a job. */
-const ENVIRONMENTS_MAX = 30;
+/** Max number of bound context names on a job. */
+const CONTEXTS_MAX = 30;
 /**
 * Status values for execution runs (execution_runs table).
 *
@@ -113,14 +113,14 @@ const TimeoutReason = z.enum(["job_timeout", "workflow_timeout"]);
 *    (secret_resolution, install_secrets, lock_resolution,
 *    build_coordination).
 *  - `job`-scoped categories fail one job and leave siblings alone
-*    (environment_rules, dynamic_eval, no_agent, matrix_expansion).
+*    (context_rules, dynamic_eval, no_agent, matrix_expansion).
 */
 const InitFailureCategory = z.enum([
 	"secret_resolution",
 	"install_secrets",
 	"lock_resolution",
 	"build_coordination",
-	"environment_rules",
+	"context_rules",
 	"dynamic_eval",
 	"no_agent",
 	"matrix_expansion"
@@ -274,8 +274,8 @@ const jobStatusForwardSchema = z.object({
 	orchestratorId: z.string().max(128).nullable().optional(),
 	/** Labels used for agent routing. */
 	runsOnLabels: z.array(z.string().max(128)).max(30).optional(),
-	/** Ordered bound deployment-environment names for this job (multi-env jobs). */
-	environments: z.array(z.string().max(128)).max(30).optional(),
+	/** Ordered bound context names for this job (multi-context jobs). */
+	contexts: z.array(z.string().max(128)).max(30).optional(),
 	/**
 	* Total raw log bytes accumulated across all steps of this job, summed by
 	* the orchestrator from per-step `logBytesStreamed` values reported by the
@@ -321,12 +321,12 @@ const stateReplaySchema = z.object({
 			errorMessage: z.string().max(STATUS_FREE_TEXT_MAX).nullable().optional(),
 			agentId: z.string().max(128).nullable().optional(),
 			runsOnLabels: z.array(z.string().max(128)).max(30).optional(),
-			environments: z.array(z.string().max(128)).max(30).optional()
+			contexts: z.array(z.string().max(128)).max(30).optional()
 		})).max(MAX_JOBS_PER_RUN)
 	})).max(500),
 	timestamp: z.number()
 });
 //#endregion
-export { CacheOutcome, CacheRunEventType, CacheStepType, ENVIRONMENTS_MAX, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, InitFailureCategory, MAX_JOBS_PER_RUN, REPO_IDENTIFIER_MAX, RUNS_ON_LABELS_MAX, STATE_REPLAY_MAX_RUNS, STATUS_FREE_TEXT_MAX, STATUS_ID_MAX, StepConcurrencyKind, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TimeoutReason, executionStatusSchema, initFailureSchema, jobStatusForwardSchema, stateReplaySchema, statusOptionsForLevel, stepStatusForwardSchema };
+export { CONTEXTS_MAX, CacheOutcome, CacheRunEventType, CacheStepType, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, InitFailureCategory, MAX_JOBS_PER_RUN, REPO_IDENTIFIER_MAX, RUNS_ON_LABELS_MAX, STATE_REPLAY_MAX_RUNS, STATUS_FREE_TEXT_MAX, STATUS_ID_MAX, StepConcurrencyKind, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TimeoutReason, executionStatusSchema, initFailureSchema, jobStatusForwardSchema, stateReplaySchema, statusOptionsForLevel, stepStatusForwardSchema };
 
 //# sourceMappingURL=execution-status.js.map

package/dist/protocol/messages/platform-orchestrator.d.ts

@@ -297,13 +297,13 @@ export declare const orchCapabilitiesUpdateSchema: z.ZodObject<{
             "secrets.scope.delete": "secrets.scope.delete";
             "variables.set": "variables.set";
             "variables.delete": "variables.delete";
-            "environments.create": "environments.create";
-            "environments.update": "environments.update";
-            "environments.test_access.set": "environments.test_access.set";
-            "environments.delete": "environments.delete";
-            "environments.bindings.set": "environments.bindings.set";
-            "environments.source_overrides.set": "environments.source_overrides.set";
-            "environments.source_overrides.delete": "environments.source_overrides.delete";
+            "contexts.create": "contexts.create";
+            "contexts.update": "contexts.update";
+            "contexts.test_access.set": "contexts.test_access.set";
+            "contexts.delete": "contexts.delete";
+            "contexts.bindings.set": "contexts.bindings.set";
+            "contexts.source_overrides.set": "contexts.source_overrides.set";
+            "contexts.source_overrides.delete": "contexts.source_overrides.delete";
             "held_runs.approve": "held_runs.approve";
             "held_runs.reject": "held_runs.reject";
             "event_dlq.retry": "event_dlq.retry";
@@ -942,7 +942,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     runId: z.ZodString;
     jobId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.list">;
+    type: z.ZodLiteral<"dashboard.contexts.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -973,7 +973,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     includeSecrets: z.ZodOptional<z.ZodBoolean>;
     orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.get">;
+    type: z.ZodLiteral<"dashboard.contexts.get">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1001,9 +1001,9 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.create">;
+    type: z.ZodLiteral<"dashboard.contexts.create">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1032,7 +1032,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     name: z.ZodString;
-    envType: z.ZodEnum<{
+    contextType: z.ZodEnum<{
         fixed: "fixed";
         glob: "glob";
     }>;
@@ -1048,7 +1048,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     holdExpirySeconds: z.ZodOptional<z.ZodNumber>;
     enabled: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.update">;
+    type: z.ZodLiteral<"dashboard.contexts.update">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1076,10 +1076,10 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     updates: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
-        envType: z.ZodOptional<z.ZodEnum<{
+        contextType: z.ZodOptional<z.ZodEnum<{
             fixed: "fixed";
             glob: "glob";
         }>>;
@@ -1096,7 +1096,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.test_access.set">;
+    type: z.ZodLiteral<"dashboard.contexts.test_access.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1124,10 +1124,10 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     allowLocalExecution: z.ZodBoolean;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1155,9 +1155,9 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.list">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1185,9 +1185,9 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.set">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1215,12 +1215,12 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     key: z.ZodString;
     value: z.ZodString;
     locked: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1248,10 +1248,10 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.list">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1279,10 +1279,10 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.set">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1310,12 +1310,12 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
     key: z.ZodString;
     value: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1343,11 +1343,11 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.list">;
+    type: z.ZodLiteral<"dashboard.contexts.bindings.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1375,9 +1375,9 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.set">;
+    type: z.ZodLiteral<"dashboard.contexts.bindings.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1405,13 +1405,13 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     bindings: z.ZodArray<z.ZodObject<{
         scopePattern: z.ZodString;
         hostPattern: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.list">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1440,7 +1440,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         component: z.ZodString;
     }, z.core.$strip>], "type">;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.set">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1472,7 +1472,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     key: z.ZodString;
     value: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1503,7 +1503,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     scope: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.create">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.create">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1533,7 +1533,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.rename">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.rename">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1564,7 +1564,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     oldScope: z.ZodString;
     newScope: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1594,7 +1594,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.history">;
+    type: z.ZodLiteral<"dashboard.contexts.history">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1622,7 +1622,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     limit: z.ZodOptional<z.ZodNumber>;
     offset: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
@@ -1661,7 +1661,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         expired: "expired";
     }>>;
     queueType: z.ZodOptional<z.ZodEnum<{
-        environment: "environment";
+        context: "context";
         security: "security";
     }>>;
     runId: z.ZodOptional<z.ZodString>;
@@ -2609,19 +2609,19 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "event_log.list.read": "event_log.list.read";
         "event_log.detail.read": "event_log.detail.read";
         "event_log.payload.read": "event_log.payload.read";
-        "environment.list.read": "environment.list.read";
-        "environment.get.read": "environment.get.read";
-        "environment.create": "environment.create";
-        "environment.update": "environment.update";
-        "environment.delete": "environment.delete";
-        "env_var.list.read": "env_var.list.read";
-        "env_var.set": "env_var.set";
-        "env_var.delete": "env_var.delete";
+        "context.list.read": "context.list.read";
+        "context.get.read": "context.get.read";
+        "context.create": "context.create";
+        "context.update": "context.update";
+        "context.delete": "context.delete";
+        "context_var.list.read": "context_var.list.read";
+        "context_var.set": "context_var.set";
+        "context_var.delete": "context_var.delete";
         "source_override.list.read": "source_override.list.read";
         "source_override.set": "source_override.set";
         "source_override.delete": "source_override.delete";
-        "env_binding.list.read": "env_binding.list.read";
-        "env_binding.set": "env_binding.set";
+        "context_binding.list.read": "context_binding.list.read";
+        "context_binding.set": "context_binding.set";
         "secret.list.read": "secret.list.read";
         "secret.set": "secret.set";
         "secret.delete": "secret.delete";
@@ -2629,7 +2629,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "secret_scope.create": "secret_scope.create";
         "secret_scope.rename": "secret_scope.rename";
         "secret_scope.delete": "secret_scope.delete";
-        "environment.history.read": "environment.history.read";
+        "context.history.read": "context.history.read";
         "held_run.list.read": "held_run.list.read";
         "held_run.approve": "held_run.approve";
         "held_run.auto_approve": "held_run.auto_approve";
@@ -2651,6 +2651,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "global_workflows.get.read": "global_workflows.get.read";
         "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
         "cluster_name.update": "cluster_name.update";
+        "attestation.retry": "attestation.retry";
         "access_log.list.read": "access_log.list.read";
         "event_dlq.list.read": "event_dlq.list.read";
         archive_chunk: "archive_chunk";
@@ -2671,7 +2672,7 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         job: "job";
         step: "step";
         run: "run";
-        environment: "environment";
+        context: "context";
         payload: "payload";
         event_log: "event_log";
         event_log_payload: "event_log_payload";
@@ -2979,7 +2980,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             install_secrets: "install_secrets";
             lock_resolution: "lock_resolution";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
             no_agent: "no_agent";
             matrix_expansion: "matrix_expansion";
@@ -3039,7 +3040,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
     agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
-    environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
     logBytes: z.ZodOptional<z.ZodNumber>;
     timestamp: z.ZodNumber;
     initFailure: z.ZodOptional<z.ZodObject<{
@@ -3052,7 +3053,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             install_secrets: "install_secrets";
             lock_resolution: "lock_resolution";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
             no_agent: "no_agent";
             matrix_expansion: "matrix_expansion";
@@ -3100,7 +3101,7 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
-            environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     timestamp: z.ZodNumber;
@@ -3119,13 +3120,13 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             "secrets.scope.delete": "secrets.scope.delete";
             "variables.set": "variables.set";
             "variables.delete": "variables.delete";
-            "environments.create": "environments.create";
-            "environments.update": "environments.update";
-            "environments.test_access.set": "environments.test_access.set";
-            "environments.delete": "environments.delete";
-            "environments.bindings.set": "environments.bindings.set";
-            "environments.source_overrides.set": "environments.source_overrides.set";
-            "environments.source_overrides.delete": "environments.source_overrides.delete";
+            "contexts.create": "contexts.create";
+            "contexts.update": "contexts.update";
+            "contexts.test_access.set": "contexts.test_access.set";
+            "contexts.delete": "contexts.delete";
+            "contexts.bindings.set": "contexts.bindings.set";
+            "contexts.source_overrides.set": "contexts.source_overrides.set";
+            "contexts.source_overrides.delete": "contexts.source_overrides.delete";
             "held_runs.approve": "held_runs.approve";
             "held_runs.reject": "held_runs.reject";
             "event_dlq.retry": "event_dlq.retry";
@@ -3217,13 +3218,13 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             "secrets.scope.delete": "secrets.scope.delete";
             "variables.set": "variables.set";
             "variables.delete": "variables.delete";
-            "environments.create": "environments.create";
-            "environments.update": "environments.update";
-            "environments.test_access.set": "environments.test_access.set";
-            "environments.delete": "environments.delete";
-            "environments.bindings.set": "environments.bindings.set";
-            "environments.source_overrides.set": "environments.source_overrides.set";
-            "environments.source_overrides.delete": "environments.source_overrides.delete";
+            "contexts.create": "contexts.create";
+            "contexts.update": "contexts.update";
+            "contexts.test_access.set": "contexts.test_access.set";
+            "contexts.delete": "contexts.delete";
+            "contexts.bindings.set": "contexts.bindings.set";
+            "contexts.source_overrides.set": "contexts.source_overrides.set";
+            "contexts.source_overrides.delete": "contexts.source_overrides.delete";
             "held_runs.approve": "held_runs.approve";
             "held_runs.reject": "held_runs.reject";
             "event_dlq.retry": "event_dlq.retry";

package/dist/protocol/session-policy.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Per-org dashboard session max age policy constants.
+ *
+ * Browser-safe (imported by the dashboard): no Node built-ins. Shared so the
+ * Platform enforcement/write-validation sites and the dashboard settings UI
+ * never drift on the bounds or the dashboard client id.
+ */
+/** Minimum configurable session max age: 1 hour (floor). */
+export declare const SESSION_MAX_AGE_MIN_SECONDS = 3600;
+/** Maximum configurable session max age: 30 days (ceiling == realm cap). */
+export declare const SESSION_MAX_AGE_MAX_SECONDS = 2592000;
+/** Default session max age applied to every org: 7 days. */
+export declare const SESSION_MAX_AGE_DEFAULT_SECONDS = 604800;
+/**
+ * Keycloak client id for the web dashboard. The per-org max-age check applies
+ * only to tokens whose `azp` equals this value; CLI / service-account tokens
+ * are exempt.
+ */
+export declare const DASHBOARD_KEYCLOAK_CLIENT_ID = "kici-dashboard";
+//# sourceMappingURL=session-policy.d.ts.map

package/dist/protocol/session-policy.js

@@ -0,0 +1,25 @@
+import "../rolldown-runtime-ClRpJifh.js";
+//#region src/protocol/session-policy.ts
+/**
+* Per-org dashboard session max age policy constants.
+*
+* Browser-safe (imported by the dashboard): no Node built-ins. Shared so the
+* Platform enforcement/write-validation sites and the dashboard settings UI
+* never drift on the bounds or the dashboard client id.
+*/
+/** Minimum configurable session max age: 1 hour (floor). */
+const SESSION_MAX_AGE_MIN_SECONDS = 3600;
+/** Maximum configurable session max age: 30 days (ceiling == realm cap). */
+const SESSION_MAX_AGE_MAX_SECONDS = 2592e3;
+/** Default session max age applied to every org: 7 days. */
+const SESSION_MAX_AGE_DEFAULT_SECONDS = 604800;
+/**
+* Keycloak client id for the web dashboard. The per-org max-age check applies
+* only to tokens whose `azp` equals this value; CLI / service-account tokens
+* are exempt.
+*/
+const DASHBOARD_KEYCLOAK_CLIENT_ID = "kici-dashboard";
+//#endregion
+export { DASHBOARD_KEYCLOAK_CLIENT_ID, SESSION_MAX_AGE_DEFAULT_SECONDS, SESSION_MAX_AGE_MAX_SECONDS, SESSION_MAX_AGE_MIN_SECONDS };
+
+//# sourceMappingURL=session-policy.js.map