@kici-dev/engine 0.1.26 → 0.1.27
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/approval/types.d.ts +3 -3
- package/dist/approval/types.js +3 -3
- package/dist/audit/access-log-policy.js +12 -11
- package/dist/audit/retention-policy.js +24 -22
- package/dist/context/host-match.d.ts +25 -0
- package/dist/{environment → context}/host-match.js +1 -1
- package/dist/context/index.d.ts +6 -0
- package/dist/context/index.js +5 -0
- package/dist/context/multi-context.d.ts +30 -0
- package/dist/context/multi-context.js +38 -0
- package/dist/context/scope-resolver.d.ts +46 -0
- package/dist/{environment → context}/scope-resolver.js +6 -6
- package/dist/context/scope-template.d.ts +18 -0
- package/dist/{environment → context}/scope-template.js +1 -1
- package/dist/context/types.d.ts +119 -0
- package/dist/{environment → context}/types.js +3 -3
- package/dist/dev-ops/operations.d.ts +1 -1
- package/dist/dev-ops/operations.js +1 -1
- package/dist/env/environment-allowlist.d.ts +23 -0
- package/dist/env/environment-allowlist.js +35 -1
- package/dist/fanout/materialize.js +2 -2
- package/dist/index.d.ts +1 -1
- package/dist/index.js +8 -8
- package/dist/metrics/metric-catalog.generated.d.ts +15 -10
- package/dist/metrics/metric-catalog.generated.js +18 -12
- package/dist/protocol/dashboard-api-errors.d.ts +12 -0
- package/dist/protocol/dashboard-api-errors.js +13 -0
- package/dist/protocol/dashboard-write-operations.d.ts +22 -22
- package/dist/protocol/dashboard-write-operations.js +52 -52
- package/dist/protocol/messages/access-log.d.ts +65 -60
- package/dist/protocol/messages/access-log.js +13 -12
- package/dist/protocol/messages/agent-run-result.d.ts +2 -2
- package/dist/protocol/messages/agent-run-result.js +1 -1
- package/dist/protocol/messages/auth.d.ts +7 -7
- package/dist/protocol/messages/capabilities.d.ts +7 -7
- package/dist/protocol/messages/dashboard.d.ts +235 -233
- package/dist/protocol/messages/dashboard.js +191 -191
- package/dist/protocol/messages/execution-status.d.ts +9 -9
- package/dist/protocol/messages/execution-status.js +8 -8
- package/dist/protocol/messages/platform-orchestrator.d.ts +75 -74
- package/dist/protocol/session-policy.d.ts +20 -0
- package/dist/protocol/session-policy.js +25 -0
- package/dist/trigger/types.d.ts +7 -6
- package/dist/trigger/types.js +2 -1
- package/package.json +15 -7
- package/sbom.spdx.json +5 -5
- package/dist/environment/index.js +0 -5
- package/dist/environment/multi-env.js +0 -38
|
@@ -27,13 +27,13 @@ export declare const DashboardWriteOperation: z.ZodEnum<{
|
|
|
27
27
|
"secrets.scope.delete": "secrets.scope.delete";
|
|
28
28
|
"variables.set": "variables.set";
|
|
29
29
|
"variables.delete": "variables.delete";
|
|
30
|
-
"
|
|
31
|
-
"
|
|
32
|
-
"
|
|
33
|
-
"
|
|
34
|
-
"
|
|
35
|
-
"
|
|
36
|
-
"
|
|
30
|
+
"contexts.create": "contexts.create";
|
|
31
|
+
"contexts.update": "contexts.update";
|
|
32
|
+
"contexts.test_access.set": "contexts.test_access.set";
|
|
33
|
+
"contexts.delete": "contexts.delete";
|
|
34
|
+
"contexts.bindings.set": "contexts.bindings.set";
|
|
35
|
+
"contexts.source_overrides.set": "contexts.source_overrides.set";
|
|
36
|
+
"contexts.source_overrides.delete": "contexts.source_overrides.delete";
|
|
37
37
|
"held_runs.approve": "held_runs.approve";
|
|
38
38
|
"held_runs.reject": "held_runs.reject";
|
|
39
39
|
"event_dlq.retry": "event_dlq.retry";
|
|
@@ -54,7 +54,7 @@ export declare const DASHBOARD_WRITE_OPERATION_VALUES: readonly DashboardWriteOp
|
|
|
54
54
|
export declare const DashboardWriteCategory: z.ZodEnum<{
|
|
55
55
|
Secrets: "Secrets";
|
|
56
56
|
Variables: "Variables";
|
|
57
|
-
|
|
57
|
+
Contexts: "Contexts";
|
|
58
58
|
Bindings: "Bindings";
|
|
59
59
|
"Held runs": "Held runs";
|
|
60
60
|
DLQ: "DLQ";
|
|
@@ -118,13 +118,13 @@ export declare const dashboardWritePolicyMap: z.ZodRecord<z.ZodEnum<{
|
|
|
118
118
|
"secrets.scope.delete": "secrets.scope.delete";
|
|
119
119
|
"variables.set": "variables.set";
|
|
120
120
|
"variables.delete": "variables.delete";
|
|
121
|
-
"
|
|
122
|
-
"
|
|
123
|
-
"
|
|
124
|
-
"
|
|
125
|
-
"
|
|
126
|
-
"
|
|
127
|
-
"
|
|
121
|
+
"contexts.create": "contexts.create";
|
|
122
|
+
"contexts.update": "contexts.update";
|
|
123
|
+
"contexts.test_access.set": "contexts.test_access.set";
|
|
124
|
+
"contexts.delete": "contexts.delete";
|
|
125
|
+
"contexts.bindings.set": "contexts.bindings.set";
|
|
126
|
+
"contexts.source_overrides.set": "contexts.source_overrides.set";
|
|
127
|
+
"contexts.source_overrides.delete": "contexts.source_overrides.delete";
|
|
128
128
|
"held_runs.approve": "held_runs.approve";
|
|
129
129
|
"held_runs.reject": "held_runs.reject";
|
|
130
130
|
"event_dlq.retry": "event_dlq.retry";
|
|
@@ -147,13 +147,13 @@ export declare const dashboardWritePolicyMapSchema: z.ZodDefault<z.ZodRecord<z.Z
|
|
|
147
147
|
"secrets.scope.delete": "secrets.scope.delete";
|
|
148
148
|
"variables.set": "variables.set";
|
|
149
149
|
"variables.delete": "variables.delete";
|
|
150
|
-
"
|
|
151
|
-
"
|
|
152
|
-
"
|
|
153
|
-
"
|
|
154
|
-
"
|
|
155
|
-
"
|
|
156
|
-
"
|
|
150
|
+
"contexts.create": "contexts.create";
|
|
151
|
+
"contexts.update": "contexts.update";
|
|
152
|
+
"contexts.test_access.set": "contexts.test_access.set";
|
|
153
|
+
"contexts.delete": "contexts.delete";
|
|
154
|
+
"contexts.bindings.set": "contexts.bindings.set";
|
|
155
|
+
"contexts.source_overrides.set": "contexts.source_overrides.set";
|
|
156
|
+
"contexts.source_overrides.delete": "contexts.source_overrides.delete";
|
|
157
157
|
"held_runs.approve": "held_runs.approve";
|
|
158
158
|
"held_runs.reject": "held_runs.reject";
|
|
159
159
|
"event_dlq.retry": "event_dlq.retry";
|
|
@@ -29,13 +29,13 @@ const DashboardWriteOperation = z.enum([
|
|
|
29
29
|
"secrets.scope.delete",
|
|
30
30
|
"variables.set",
|
|
31
31
|
"variables.delete",
|
|
32
|
-
"
|
|
33
|
-
"
|
|
34
|
-
"
|
|
35
|
-
"
|
|
36
|
-
"
|
|
37
|
-
"
|
|
38
|
-
"
|
|
32
|
+
"contexts.create",
|
|
33
|
+
"contexts.update",
|
|
34
|
+
"contexts.test_access.set",
|
|
35
|
+
"contexts.delete",
|
|
36
|
+
"contexts.bindings.set",
|
|
37
|
+
"contexts.source_overrides.set",
|
|
38
|
+
"contexts.source_overrides.delete",
|
|
39
39
|
"held_runs.approve",
|
|
40
40
|
"held_runs.reject",
|
|
41
41
|
"event_dlq.retry",
|
|
@@ -59,13 +59,13 @@ const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
|
|
|
59
59
|
"secrets.scope.delete",
|
|
60
60
|
"variables.set",
|
|
61
61
|
"variables.delete",
|
|
62
|
-
"
|
|
63
|
-
"
|
|
64
|
-
"
|
|
65
|
-
"
|
|
66
|
-
"
|
|
67
|
-
"
|
|
68
|
-
"
|
|
62
|
+
"contexts.create",
|
|
63
|
+
"contexts.update",
|
|
64
|
+
"contexts.test_access.set",
|
|
65
|
+
"contexts.delete",
|
|
66
|
+
"contexts.bindings.set",
|
|
67
|
+
"contexts.source_overrides.set",
|
|
68
|
+
"contexts.source_overrides.delete",
|
|
69
69
|
"held_runs.approve",
|
|
70
70
|
"held_runs.reject",
|
|
71
71
|
"event_dlq.retry",
|
|
@@ -83,7 +83,7 @@ const DASHBOARD_WRITE_OPERATION_VALUES = Object.freeze([
|
|
|
83
83
|
const DashboardWriteCategory = z.enum([
|
|
84
84
|
"Secrets",
|
|
85
85
|
"Variables",
|
|
86
|
-
"
|
|
86
|
+
"Contexts",
|
|
87
87
|
"Bindings",
|
|
88
88
|
"Held runs",
|
|
89
89
|
"DLQ",
|
|
@@ -100,7 +100,7 @@ const DashboardWriteSensitivity = z.enum([
|
|
|
100
100
|
const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
|
|
101
101
|
{
|
|
102
102
|
name: "secrets.set",
|
|
103
|
-
wireMessageType: "dashboard.
|
|
103
|
+
wireMessageType: "dashboard.contexts.secrets.set",
|
|
104
104
|
category: "Secrets",
|
|
105
105
|
label: "Set secret value",
|
|
106
106
|
sensitivity: "plaintext",
|
|
@@ -108,7 +108,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
|
|
|
108
108
|
},
|
|
109
109
|
{
|
|
110
110
|
name: "secrets.delete",
|
|
111
|
-
wireMessageType: "dashboard.
|
|
111
|
+
wireMessageType: "dashboard.contexts.secrets.delete",
|
|
112
112
|
category: "Secrets",
|
|
113
113
|
label: "Delete secret",
|
|
114
114
|
sensitivity: "authority",
|
|
@@ -116,7 +116,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
|
|
|
116
116
|
},
|
|
117
117
|
{
|
|
118
118
|
name: "secrets.scope.create",
|
|
119
|
-
wireMessageType: "dashboard.
|
|
119
|
+
wireMessageType: "dashboard.contexts.secrets.scope.create",
|
|
120
120
|
category: "Secrets",
|
|
121
121
|
label: "Create secret scope",
|
|
122
122
|
sensitivity: "authority",
|
|
@@ -124,7 +124,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
|
|
|
124
124
|
},
|
|
125
125
|
{
|
|
126
126
|
name: "secrets.scope.rename",
|
|
127
|
-
wireMessageType: "dashboard.
|
|
127
|
+
wireMessageType: "dashboard.contexts.secrets.scope.rename",
|
|
128
128
|
category: "Secrets",
|
|
129
129
|
label: "Rename secret scope",
|
|
130
130
|
sensitivity: "authority",
|
|
@@ -132,7 +132,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
|
|
|
132
132
|
},
|
|
133
133
|
{
|
|
134
134
|
name: "secrets.scope.delete",
|
|
135
|
-
wireMessageType: "dashboard.
|
|
135
|
+
wireMessageType: "dashboard.contexts.secrets.scope.delete",
|
|
136
136
|
category: "Secrets",
|
|
137
137
|
label: "Delete secret scope",
|
|
138
138
|
sensitivity: "authority",
|
|
@@ -140,7 +140,7 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
|
|
|
140
140
|
},
|
|
141
141
|
{
|
|
142
142
|
name: "variables.set",
|
|
143
|
-
wireMessageType: "dashboard.
|
|
143
|
+
wireMessageType: "dashboard.contexts.variables.set",
|
|
144
144
|
category: "Variables",
|
|
145
145
|
label: "Set variable value",
|
|
146
146
|
sensitivity: "plaintext",
|
|
@@ -148,67 +148,67 @@ const DASHBOARD_WRITE_OPERATIONS = Object.freeze([
|
|
|
148
148
|
},
|
|
149
149
|
{
|
|
150
150
|
name: "variables.delete",
|
|
151
|
-
wireMessageType: "dashboard.
|
|
151
|
+
wireMessageType: "dashboard.contexts.variables.delete",
|
|
152
152
|
category: "Variables",
|
|
153
153
|
label: "Delete variable",
|
|
154
154
|
sensitivity: "authority",
|
|
155
155
|
cliEquivalent: "kici-admin variable delete"
|
|
156
156
|
},
|
|
157
157
|
{
|
|
158
|
-
name: "
|
|
159
|
-
wireMessageType: "dashboard.
|
|
160
|
-
category: "
|
|
161
|
-
label: "Create
|
|
158
|
+
name: "contexts.create",
|
|
159
|
+
wireMessageType: "dashboard.contexts.create",
|
|
160
|
+
category: "Contexts",
|
|
161
|
+
label: "Create context",
|
|
162
162
|
sensitivity: "authority",
|
|
163
|
-
cliEquivalent: "kici-admin
|
|
163
|
+
cliEquivalent: "kici-admin context create"
|
|
164
164
|
},
|
|
165
165
|
{
|
|
166
|
-
name: "
|
|
167
|
-
wireMessageType: "dashboard.
|
|
168
|
-
category: "
|
|
169
|
-
label: "Update
|
|
166
|
+
name: "contexts.update",
|
|
167
|
+
wireMessageType: "dashboard.contexts.update",
|
|
168
|
+
category: "Contexts",
|
|
169
|
+
label: "Update context",
|
|
170
170
|
sensitivity: "authority",
|
|
171
|
-
cliEquivalent: "kici-admin
|
|
171
|
+
cliEquivalent: "kici-admin context set-policy"
|
|
172
172
|
},
|
|
173
173
|
{
|
|
174
|
-
name: "
|
|
175
|
-
wireMessageType: "dashboard.
|
|
176
|
-
category: "
|
|
177
|
-
label: "Set
|
|
174
|
+
name: "contexts.test_access.set",
|
|
175
|
+
wireMessageType: "dashboard.contexts.test_access.set",
|
|
176
|
+
category: "Contexts",
|
|
177
|
+
label: "Set context test access",
|
|
178
178
|
sensitivity: "authority",
|
|
179
|
-
cliEquivalent: "kici-admin
|
|
179
|
+
cliEquivalent: "kici-admin context set-policy --allow-local-execution"
|
|
180
180
|
},
|
|
181
181
|
{
|
|
182
|
-
name: "
|
|
183
|
-
wireMessageType: "dashboard.
|
|
184
|
-
category: "
|
|
185
|
-
label: "Delete
|
|
182
|
+
name: "contexts.delete",
|
|
183
|
+
wireMessageType: "dashboard.contexts.delete",
|
|
184
|
+
category: "Contexts",
|
|
185
|
+
label: "Delete context",
|
|
186
186
|
sensitivity: "authority",
|
|
187
|
-
cliEquivalent: "kici-admin
|
|
187
|
+
cliEquivalent: "kici-admin context delete"
|
|
188
188
|
},
|
|
189
189
|
{
|
|
190
|
-
name: "
|
|
191
|
-
wireMessageType: "dashboard.
|
|
190
|
+
name: "contexts.bindings.set",
|
|
191
|
+
wireMessageType: "dashboard.contexts.bindings.set",
|
|
192
192
|
category: "Bindings",
|
|
193
|
-
label: "Set
|
|
193
|
+
label: "Set context binding",
|
|
194
194
|
sensitivity: "authority",
|
|
195
|
-
cliEquivalent: "kici-admin
|
|
195
|
+
cliEquivalent: "kici-admin context bind"
|
|
196
196
|
},
|
|
197
197
|
{
|
|
198
|
-
name: "
|
|
199
|
-
wireMessageType: "dashboard.
|
|
198
|
+
name: "contexts.source_overrides.set",
|
|
199
|
+
wireMessageType: "dashboard.contexts.source-overrides.set",
|
|
200
200
|
category: "Bindings",
|
|
201
201
|
label: "Set source override",
|
|
202
202
|
sensitivity: "authority",
|
|
203
|
-
cliEquivalent: "kici-admin
|
|
203
|
+
cliEquivalent: "kici-admin context source-override set"
|
|
204
204
|
},
|
|
205
205
|
{
|
|
206
|
-
name: "
|
|
207
|
-
wireMessageType: "dashboard.
|
|
206
|
+
name: "contexts.source_overrides.delete",
|
|
207
|
+
wireMessageType: "dashboard.contexts.source-overrides.delete",
|
|
208
208
|
category: "Bindings",
|
|
209
209
|
label: "Delete source override",
|
|
210
210
|
sensitivity: "authority",
|
|
211
|
-
cliEquivalent: "kici-admin
|
|
211
|
+
cliEquivalent: "kici-admin context source-override delete"
|
|
212
212
|
},
|
|
213
213
|
{
|
|
214
214
|
name: "held_runs.approve",
|
|
@@ -31,7 +31,7 @@ export declare const AccessLogTargetType: z.ZodEnum<{
|
|
|
31
31
|
job: "job";
|
|
32
32
|
step: "step";
|
|
33
33
|
run: "run";
|
|
34
|
-
|
|
34
|
+
context: "context";
|
|
35
35
|
payload: "payload";
|
|
36
36
|
event_log: "event_log";
|
|
37
37
|
event_log_payload: "event_log_payload";
|
|
@@ -78,19 +78,19 @@ export declare const AccessLogAction: z.ZodEnum<{
|
|
|
78
78
|
"event_log.list.read": "event_log.list.read";
|
|
79
79
|
"event_log.detail.read": "event_log.detail.read";
|
|
80
80
|
"event_log.payload.read": "event_log.payload.read";
|
|
81
|
-
"
|
|
82
|
-
"
|
|
83
|
-
"
|
|
84
|
-
"
|
|
85
|
-
"
|
|
86
|
-
"
|
|
87
|
-
"
|
|
88
|
-
"
|
|
81
|
+
"context.list.read": "context.list.read";
|
|
82
|
+
"context.get.read": "context.get.read";
|
|
83
|
+
"context.create": "context.create";
|
|
84
|
+
"context.update": "context.update";
|
|
85
|
+
"context.delete": "context.delete";
|
|
86
|
+
"context_var.list.read": "context_var.list.read";
|
|
87
|
+
"context_var.set": "context_var.set";
|
|
88
|
+
"context_var.delete": "context_var.delete";
|
|
89
89
|
"source_override.list.read": "source_override.list.read";
|
|
90
90
|
"source_override.set": "source_override.set";
|
|
91
91
|
"source_override.delete": "source_override.delete";
|
|
92
|
-
"
|
|
93
|
-
"
|
|
92
|
+
"context_binding.list.read": "context_binding.list.read";
|
|
93
|
+
"context_binding.set": "context_binding.set";
|
|
94
94
|
"secret.list.read": "secret.list.read";
|
|
95
95
|
"secret.set": "secret.set";
|
|
96
96
|
"secret.delete": "secret.delete";
|
|
@@ -98,7 +98,7 @@ export declare const AccessLogAction: z.ZodEnum<{
|
|
|
98
98
|
"secret_scope.create": "secret_scope.create";
|
|
99
99
|
"secret_scope.rename": "secret_scope.rename";
|
|
100
100
|
"secret_scope.delete": "secret_scope.delete";
|
|
101
|
-
"
|
|
101
|
+
"context.history.read": "context.history.read";
|
|
102
102
|
"held_run.list.read": "held_run.list.read";
|
|
103
103
|
"held_run.approve": "held_run.approve";
|
|
104
104
|
"held_run.auto_approve": "held_run.auto_approve";
|
|
@@ -120,6 +120,7 @@ export declare const AccessLogAction: z.ZodEnum<{
|
|
|
120
120
|
"global_workflows.get.read": "global_workflows.get.read";
|
|
121
121
|
"org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
|
|
122
122
|
"cluster_name.update": "cluster_name.update";
|
|
123
|
+
"attestation.retry": "attestation.retry";
|
|
123
124
|
"access_log.list.read": "access_log.list.read";
|
|
124
125
|
"event_dlq.list.read": "event_dlq.list.read";
|
|
125
126
|
archive_chunk: "archive_chunk";
|
|
@@ -173,19 +174,19 @@ export declare const accessLogItemSchema: z.ZodObject<{
|
|
|
173
174
|
"event_log.list.read": "event_log.list.read";
|
|
174
175
|
"event_log.detail.read": "event_log.detail.read";
|
|
175
176
|
"event_log.payload.read": "event_log.payload.read";
|
|
176
|
-
"
|
|
177
|
-
"
|
|
178
|
-
"
|
|
179
|
-
"
|
|
180
|
-
"
|
|
181
|
-
"
|
|
182
|
-
"
|
|
183
|
-
"
|
|
177
|
+
"context.list.read": "context.list.read";
|
|
178
|
+
"context.get.read": "context.get.read";
|
|
179
|
+
"context.create": "context.create";
|
|
180
|
+
"context.update": "context.update";
|
|
181
|
+
"context.delete": "context.delete";
|
|
182
|
+
"context_var.list.read": "context_var.list.read";
|
|
183
|
+
"context_var.set": "context_var.set";
|
|
184
|
+
"context_var.delete": "context_var.delete";
|
|
184
185
|
"source_override.list.read": "source_override.list.read";
|
|
185
186
|
"source_override.set": "source_override.set";
|
|
186
187
|
"source_override.delete": "source_override.delete";
|
|
187
|
-
"
|
|
188
|
-
"
|
|
188
|
+
"context_binding.list.read": "context_binding.list.read";
|
|
189
|
+
"context_binding.set": "context_binding.set";
|
|
189
190
|
"secret.list.read": "secret.list.read";
|
|
190
191
|
"secret.set": "secret.set";
|
|
191
192
|
"secret.delete": "secret.delete";
|
|
@@ -193,7 +194,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
|
|
|
193
194
|
"secret_scope.create": "secret_scope.create";
|
|
194
195
|
"secret_scope.rename": "secret_scope.rename";
|
|
195
196
|
"secret_scope.delete": "secret_scope.delete";
|
|
196
|
-
"
|
|
197
|
+
"context.history.read": "context.history.read";
|
|
197
198
|
"held_run.list.read": "held_run.list.read";
|
|
198
199
|
"held_run.approve": "held_run.approve";
|
|
199
200
|
"held_run.auto_approve": "held_run.auto_approve";
|
|
@@ -215,6 +216,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
|
|
|
215
216
|
"global_workflows.get.read": "global_workflows.get.read";
|
|
216
217
|
"org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
|
|
217
218
|
"cluster_name.update": "cluster_name.update";
|
|
219
|
+
"attestation.retry": "attestation.retry";
|
|
218
220
|
"access_log.list.read": "access_log.list.read";
|
|
219
221
|
"event_dlq.list.read": "event_dlq.list.read";
|
|
220
222
|
archive_chunk: "archive_chunk";
|
|
@@ -224,7 +226,7 @@ export declare const accessLogItemSchema: z.ZodObject<{
|
|
|
224
226
|
job: "job";
|
|
225
227
|
step: "step";
|
|
226
228
|
run: "run";
|
|
227
|
-
|
|
229
|
+
context: "context";
|
|
228
230
|
payload: "payload";
|
|
229
231
|
event_log: "event_log";
|
|
230
232
|
event_log_payload: "event_log_payload";
|
|
@@ -294,19 +296,19 @@ export declare const accessLogFilterSchema: z.ZodObject<{
|
|
|
294
296
|
"event_log.list.read": "event_log.list.read";
|
|
295
297
|
"event_log.detail.read": "event_log.detail.read";
|
|
296
298
|
"event_log.payload.read": "event_log.payload.read";
|
|
297
|
-
"
|
|
298
|
-
"
|
|
299
|
-
"
|
|
300
|
-
"
|
|
301
|
-
"
|
|
302
|
-
"
|
|
303
|
-
"
|
|
304
|
-
"
|
|
299
|
+
"context.list.read": "context.list.read";
|
|
300
|
+
"context.get.read": "context.get.read";
|
|
301
|
+
"context.create": "context.create";
|
|
302
|
+
"context.update": "context.update";
|
|
303
|
+
"context.delete": "context.delete";
|
|
304
|
+
"context_var.list.read": "context_var.list.read";
|
|
305
|
+
"context_var.set": "context_var.set";
|
|
306
|
+
"context_var.delete": "context_var.delete";
|
|
305
307
|
"source_override.list.read": "source_override.list.read";
|
|
306
308
|
"source_override.set": "source_override.set";
|
|
307
309
|
"source_override.delete": "source_override.delete";
|
|
308
|
-
"
|
|
309
|
-
"
|
|
310
|
+
"context_binding.list.read": "context_binding.list.read";
|
|
311
|
+
"context_binding.set": "context_binding.set";
|
|
310
312
|
"secret.list.read": "secret.list.read";
|
|
311
313
|
"secret.set": "secret.set";
|
|
312
314
|
"secret.delete": "secret.delete";
|
|
@@ -314,7 +316,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
|
|
|
314
316
|
"secret_scope.create": "secret_scope.create";
|
|
315
317
|
"secret_scope.rename": "secret_scope.rename";
|
|
316
318
|
"secret_scope.delete": "secret_scope.delete";
|
|
317
|
-
"
|
|
319
|
+
"context.history.read": "context.history.read";
|
|
318
320
|
"held_run.list.read": "held_run.list.read";
|
|
319
321
|
"held_run.approve": "held_run.approve";
|
|
320
322
|
"held_run.auto_approve": "held_run.auto_approve";
|
|
@@ -336,6 +338,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
|
|
|
336
338
|
"global_workflows.get.read": "global_workflows.get.read";
|
|
337
339
|
"org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
|
|
338
340
|
"cluster_name.update": "cluster_name.update";
|
|
341
|
+
"attestation.retry": "attestation.retry";
|
|
339
342
|
"access_log.list.read": "access_log.list.read";
|
|
340
343
|
"event_dlq.list.read": "event_dlq.list.read";
|
|
341
344
|
archive_chunk: "archive_chunk";
|
|
@@ -356,7 +359,7 @@ export declare const accessLogFilterSchema: z.ZodObject<{
|
|
|
356
359
|
job: "job";
|
|
357
360
|
step: "step";
|
|
358
361
|
run: "run";
|
|
359
|
-
|
|
362
|
+
context: "context";
|
|
360
363
|
payload: "payload";
|
|
361
364
|
event_log: "event_log";
|
|
362
365
|
event_log_payload: "event_log_payload";
|
|
@@ -445,19 +448,19 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
|
|
|
445
448
|
"event_log.list.read": "event_log.list.read";
|
|
446
449
|
"event_log.detail.read": "event_log.detail.read";
|
|
447
450
|
"event_log.payload.read": "event_log.payload.read";
|
|
448
|
-
"
|
|
449
|
-
"
|
|
450
|
-
"
|
|
451
|
-
"
|
|
452
|
-
"
|
|
453
|
-
"
|
|
454
|
-
"
|
|
455
|
-
"
|
|
451
|
+
"context.list.read": "context.list.read";
|
|
452
|
+
"context.get.read": "context.get.read";
|
|
453
|
+
"context.create": "context.create";
|
|
454
|
+
"context.update": "context.update";
|
|
455
|
+
"context.delete": "context.delete";
|
|
456
|
+
"context_var.list.read": "context_var.list.read";
|
|
457
|
+
"context_var.set": "context_var.set";
|
|
458
|
+
"context_var.delete": "context_var.delete";
|
|
456
459
|
"source_override.list.read": "source_override.list.read";
|
|
457
460
|
"source_override.set": "source_override.set";
|
|
458
461
|
"source_override.delete": "source_override.delete";
|
|
459
|
-
"
|
|
460
|
-
"
|
|
462
|
+
"context_binding.list.read": "context_binding.list.read";
|
|
463
|
+
"context_binding.set": "context_binding.set";
|
|
461
464
|
"secret.list.read": "secret.list.read";
|
|
462
465
|
"secret.set": "secret.set";
|
|
463
466
|
"secret.delete": "secret.delete";
|
|
@@ -465,7 +468,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
|
|
|
465
468
|
"secret_scope.create": "secret_scope.create";
|
|
466
469
|
"secret_scope.rename": "secret_scope.rename";
|
|
467
470
|
"secret_scope.delete": "secret_scope.delete";
|
|
468
|
-
"
|
|
471
|
+
"context.history.read": "context.history.read";
|
|
469
472
|
"held_run.list.read": "held_run.list.read";
|
|
470
473
|
"held_run.approve": "held_run.approve";
|
|
471
474
|
"held_run.auto_approve": "held_run.auto_approve";
|
|
@@ -487,6 +490,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
|
|
|
487
490
|
"global_workflows.get.read": "global_workflows.get.read";
|
|
488
491
|
"org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
|
|
489
492
|
"cluster_name.update": "cluster_name.update";
|
|
493
|
+
"attestation.retry": "attestation.retry";
|
|
490
494
|
"access_log.list.read": "access_log.list.read";
|
|
491
495
|
"event_dlq.list.read": "event_dlq.list.read";
|
|
492
496
|
archive_chunk: "archive_chunk";
|
|
@@ -507,7 +511,7 @@ export declare const dashboardAccessLogListRequestSchema: z.ZodObject<{
|
|
|
507
511
|
job: "job";
|
|
508
512
|
step: "step";
|
|
509
513
|
run: "run";
|
|
510
|
-
|
|
514
|
+
context: "context";
|
|
511
515
|
payload: "payload";
|
|
512
516
|
event_log: "event_log";
|
|
513
517
|
event_log_payload: "event_log_payload";
|
|
@@ -577,19 +581,19 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
|
|
|
577
581
|
"event_log.list.read": "event_log.list.read";
|
|
578
582
|
"event_log.detail.read": "event_log.detail.read";
|
|
579
583
|
"event_log.payload.read": "event_log.payload.read";
|
|
580
|
-
"
|
|
581
|
-
"
|
|
582
|
-
"
|
|
583
|
-
"
|
|
584
|
-
"
|
|
585
|
-
"
|
|
586
|
-
"
|
|
587
|
-
"
|
|
584
|
+
"context.list.read": "context.list.read";
|
|
585
|
+
"context.get.read": "context.get.read";
|
|
586
|
+
"context.create": "context.create";
|
|
587
|
+
"context.update": "context.update";
|
|
588
|
+
"context.delete": "context.delete";
|
|
589
|
+
"context_var.list.read": "context_var.list.read";
|
|
590
|
+
"context_var.set": "context_var.set";
|
|
591
|
+
"context_var.delete": "context_var.delete";
|
|
588
592
|
"source_override.list.read": "source_override.list.read";
|
|
589
593
|
"source_override.set": "source_override.set";
|
|
590
594
|
"source_override.delete": "source_override.delete";
|
|
591
|
-
"
|
|
592
|
-
"
|
|
595
|
+
"context_binding.list.read": "context_binding.list.read";
|
|
596
|
+
"context_binding.set": "context_binding.set";
|
|
593
597
|
"secret.list.read": "secret.list.read";
|
|
594
598
|
"secret.set": "secret.set";
|
|
595
599
|
"secret.delete": "secret.delete";
|
|
@@ -597,7 +601,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
|
|
|
597
601
|
"secret_scope.create": "secret_scope.create";
|
|
598
602
|
"secret_scope.rename": "secret_scope.rename";
|
|
599
603
|
"secret_scope.delete": "secret_scope.delete";
|
|
600
|
-
"
|
|
604
|
+
"context.history.read": "context.history.read";
|
|
601
605
|
"held_run.list.read": "held_run.list.read";
|
|
602
606
|
"held_run.approve": "held_run.approve";
|
|
603
607
|
"held_run.auto_approve": "held_run.auto_approve";
|
|
@@ -619,6 +623,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
|
|
|
619
623
|
"global_workflows.get.read": "global_workflows.get.read";
|
|
620
624
|
"org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
|
|
621
625
|
"cluster_name.update": "cluster_name.update";
|
|
626
|
+
"attestation.retry": "attestation.retry";
|
|
622
627
|
"access_log.list.read": "access_log.list.read";
|
|
623
628
|
"event_dlq.list.read": "event_dlq.list.read";
|
|
624
629
|
archive_chunk: "archive_chunk";
|
|
@@ -628,7 +633,7 @@ export declare const dashboardAccessLogListResponseSchema: z.ZodObject<{
|
|
|
628
633
|
job: "job";
|
|
629
634
|
step: "step";
|
|
630
635
|
run: "run";
|
|
631
|
-
|
|
636
|
+
context: "context";
|
|
632
637
|
payload: "payload";
|
|
633
638
|
event_log: "event_log";
|
|
634
639
|
event_log_payload: "event_log_payload";
|
|
@@ -36,7 +36,7 @@ const AccessLogTargetType = z.enum([
|
|
|
36
36
|
"event_log",
|
|
37
37
|
"event_log_payload",
|
|
38
38
|
"secret_scope",
|
|
39
|
-
"
|
|
39
|
+
"context",
|
|
40
40
|
"registration",
|
|
41
41
|
"backend",
|
|
42
42
|
"diagnostics",
|
|
@@ -71,19 +71,19 @@ const AccessLogAction = z.enum([
|
|
|
71
71
|
"event_log.list.read",
|
|
72
72
|
"event_log.detail.read",
|
|
73
73
|
"event_log.payload.read",
|
|
74
|
-
"
|
|
75
|
-
"
|
|
76
|
-
"
|
|
77
|
-
"
|
|
78
|
-
"
|
|
79
|
-
"
|
|
80
|
-
"
|
|
81
|
-
"
|
|
74
|
+
"context.list.read",
|
|
75
|
+
"context.get.read",
|
|
76
|
+
"context.create",
|
|
77
|
+
"context.update",
|
|
78
|
+
"context.delete",
|
|
79
|
+
"context_var.list.read",
|
|
80
|
+
"context_var.set",
|
|
81
|
+
"context_var.delete",
|
|
82
82
|
"source_override.list.read",
|
|
83
83
|
"source_override.set",
|
|
84
84
|
"source_override.delete",
|
|
85
|
-
"
|
|
86
|
-
"
|
|
85
|
+
"context_binding.list.read",
|
|
86
|
+
"context_binding.set",
|
|
87
87
|
"secret.list.read",
|
|
88
88
|
"secret.set",
|
|
89
89
|
"secret.delete",
|
|
@@ -91,7 +91,7 @@ const AccessLogAction = z.enum([
|
|
|
91
91
|
"secret_scope.create",
|
|
92
92
|
"secret_scope.rename",
|
|
93
93
|
"secret_scope.delete",
|
|
94
|
-
"
|
|
94
|
+
"context.history.read",
|
|
95
95
|
"held_run.list.read",
|
|
96
96
|
"held_run.approve",
|
|
97
97
|
"held_run.auto_approve",
|
|
@@ -118,6 +118,7 @@ const AccessLogAction = z.enum([
|
|
|
118
118
|
"global_workflows.update",
|
|
119
119
|
"org_settings.dashboard_write_policy.update",
|
|
120
120
|
"cluster_name.update",
|
|
121
|
+
"attestation.retry",
|
|
121
122
|
"access_log.list.read",
|
|
122
123
|
"event_dlq.list.read",
|
|
123
124
|
"event_dlq.retry",
|
|
@@ -110,7 +110,7 @@ export declare const agentJobResultSchema: z.ZodObject<{
|
|
|
110
110
|
install_secrets: "install_secrets";
|
|
111
111
|
lock_resolution: "lock_resolution";
|
|
112
112
|
build_coordination: "build_coordination";
|
|
113
|
-
|
|
113
|
+
context_rules: "context_rules";
|
|
114
114
|
dynamic_eval: "dynamic_eval";
|
|
115
115
|
no_agent: "no_agent";
|
|
116
116
|
matrix_expansion: "matrix_expansion";
|
|
@@ -267,7 +267,7 @@ export declare const agentRunResultSchema: z.ZodObject<{
|
|
|
267
267
|
install_secrets: "install_secrets";
|
|
268
268
|
lock_resolution: "lock_resolution";
|
|
269
269
|
build_coordination: "build_coordination";
|
|
270
|
-
|
|
270
|
+
context_rules: "context_rules";
|
|
271
271
|
dynamic_eval: "dynamic_eval";
|
|
272
272
|
no_agent: "no_agent";
|
|
273
273
|
matrix_expansion: "matrix_expansion";
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import "../../rolldown-runtime-ClRpJifh.js";
|
|
2
2
|
import { CheckStepOutcome } from "../../check-mode.js";
|
|
3
3
|
import { ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, InitFailureCategory } from "./execution-status.js";
|
|
4
|
-
import { TrustTierSchema } from "../../
|
|
4
|
+
import { TrustTierSchema } from "../../context/types.js";
|
|
5
5
|
import { z } from "zod";
|
|
6
6
|
//#region src/protocol/messages/agent-run-result.ts
|
|
7
7
|
/**
|