@kici-dev/engine 0.1.26 → 0.2.0

package/dist/protocol/messages/access-log.js

@@ -36,7 +36,7 @@ const AccessLogTargetType = z.enum([
 	"event_log",
 	"event_log_payload",
 	"secret_scope",
-	"environment",
+	"context",
 	"registration",
 	"backend",
 	"diagnostics",
@@ -47,7 +47,8 @@ const AccessLogTargetType = z.enum([
 	"event_dlq",
 	"org_settings",
 	"cluster_meta",
-	"attestation"
+	"attestation",
+	"database"
 ]);
 /**
 * Dotted-namespace action names. Every handler that writes an access_log
@@ -63,6 +64,7 @@ const AccessLogAction = z.enum([
 	"run.orch_logs.read",
 	"step.logs.read",
 	"attestations.read",
+	"artifacts.read",
 	"run.cancel",
 	"run.rerun",
 	"run.manual_schedule",
@@ -71,19 +73,19 @@ const AccessLogAction = z.enum([
 	"event_log.list.read",
 	"event_log.detail.read",
 	"event_log.payload.read",
-	"environment.list.read",
-	"environment.get.read",
-	"environment.create",
-	"environment.update",
-	"environment.delete",
-	"env_var.list.read",
-	"env_var.set",
-	"env_var.delete",
+	"context.list.read",
+	"context.get.read",
+	"context.create",
+	"context.update",
+	"context.delete",
+	"context_var.list.read",
+	"context_var.set",
+	"context_var.delete",
 	"source_override.list.read",
 	"source_override.set",
 	"source_override.delete",
-	"env_binding.list.read",
-	"env_binding.set",
+	"context_binding.list.read",
+	"context_binding.set",
 	"secret.list.read",
 	"secret.set",
 	"secret.delete",
@@ -91,7 +93,7 @@ const AccessLogAction = z.enum([
 	"secret_scope.create",
 	"secret_scope.rename",
 	"secret_scope.delete",
-	"environment.history.read",
+	"context.history.read",
 	"held_run.list.read",
 	"held_run.approve",
 	"held_run.auto_approve",
@@ -117,13 +119,21 @@ const AccessLogAction = z.enum([
 	"global_workflows.get.read",
 	"global_workflows.update",
 	"org_settings.dashboard_write_policy.update",
+	"trust_policy.updated",
 	"cluster_name.update",
+	"attestation.retry",
 	"access_log.list.read",
 	"event_dlq.list.read",
 	"event_dlq.retry",
 	"event_dlq.discard",
 	"archive_chunk",
-	"purge_chunk"
+	"purge_chunk",
+	"db.fresh",
+	"db.ensure",
+	"db.create_role",
+	"db.create_readonly_user",
+	"db.reindex",
+	"db.refresh_collation_version"
 ]);
 /**
 * Single row as surfaced to the dashboard / CLI. Includes optional

package/dist/protocol/messages/actor.d.ts

@@ -10,11 +10,11 @@ import { z } from 'zod';
  * protocol level rather than in free-text metadata.
  */
 export declare const ActorType: z.ZodEnum<{
-    user: "user";
     api_key: "api_key";
-    service_account: "service_account";
     platform_operator: "platform_operator";
+    service_account: "service_account";
     system: "system";
+    user: "user";
 }>;
 export type ActorType = z.infer<typeof ActorType>;
 export declare const userActorSchema: z.ZodObject<{

package/dist/protocol/messages/agent-dev-ops.d.ts

@@ -59,8 +59,9 @@ export type AgentOrchestratorSummary = z.infer<typeof agentOrchestratorSummarySc
 export declare const agentDiagnosticsConnectionSchema: z.ZodObject<{
     connectionId: z.ZodString;
     healthBadge: z.ZodEnum<{
-        stale: "stale";
         connected: "connected";
+        orphaned: "orphaned";
+        stale: "stale";
         unhealthy: "unhealthy";
     }>;
     routingKeys: z.ZodArray<z.ZodObject<{
@@ -85,8 +86,9 @@ export declare const agentDiagnosticsSchema: z.ZodObject<{
     orchestrators: z.ZodArray<z.ZodObject<{
         connectionId: z.ZodString;
         healthBadge: z.ZodEnum<{
-            stale: "stale";
             connected: "connected";
+            orphaned: "orphaned";
+            stale: "stale";
             unhealthy: "unhealthy";
         }>;
         routingKeys: z.ZodArray<z.ZodObject<{

package/dist/protocol/messages/agent-dev-ops.js

@@ -1,5 +1,6 @@
 import "../../rolldown-runtime-ClRpJifh.js";
 import { untrusted } from "./agent-run-result.js";
+import { connectionHealthStatusSchema } from "./heartbeat-health.js";
 import { z } from "zod";
 //#region src/protocol/messages/agent-dev-ops.ts
 /**
@@ -49,11 +50,7 @@ const agentOrchestratorSummarySchema = z.object({
 /** One orchestrator connection row inside the diagnostics summary. */
 const agentDiagnosticsConnectionSchema = z.object({
 	connectionId: z.string(),
-	healthBadge: z.enum([
-		"connected",
-		"unhealthy",
-		"stale"
-	]),
+	healthBadge: connectionHealthStatusSchema,
 	routingKeys: z.array(untrustedString),
 	lastHeartbeatAt: z.string().nullable()
 });

package/dist/protocol/messages/agent-run-result.d.ts

@@ -32,12 +32,12 @@ export declare function wrapUntrusted<T>(value: T): {
 };
 /** Coarse, derived run-failure classification (trusted — KiCI computes it). */
 export declare const AgentFailureCategory: z.ZodEnum<{
-    unknown: "unknown";
     cancelled: "cancelled";
+    infra: "infra";
     init_failure: "init_failure";
-    timed_out: "timed_out";
     step_failed: "step_failed";
-    infra: "infra";
+    timed_out: "timed_out";
+    unknown: "unknown";
 }>;
 export type AgentFailureCategory = z.infer<typeof AgentFailureCategory>;
 export declare const agentStepResultSchema: z.ZodObject<{
@@ -47,12 +47,12 @@ export declare const agentStepResultSchema: z.ZodObject<{
         value: z.ZodString;
     }, z.core.$strip>;
     status: z.ZodEnum<{
-        skipped: "skipped";
-        success: "success";
+        cancelled: "cancelled";
+        failed: "failed";
         pending: "pending";
         running: "running";
-        failed: "failed";
-        cancelled: "cancelled";
+        skipped: "skipped";
+        success: "success";
     }>;
     exitCode: z.ZodNullable<z.ZodNumber>;
     durationMs: z.ZodNullable<z.ZodNumber>;
@@ -64,11 +64,11 @@ export declare const agentStepResultSchema: z.ZodObject<{
     }, z.core.$strip>>;
     stepType: z.ZodString;
     checkOutcome: z.ZodNullable<z.ZodEnum<{
-        skipped: "skipped";
         applied: "applied";
         declined: "declined";
         "dry-run": "dry-run";
         no_check: "no_check";
+        skipped: "skipped";
     }>>;
     secretsAccessed: z.ZodArray<z.ZodString>;
 }, z.core.$strip>;
@@ -80,17 +80,18 @@ export declare const agentJobResultSchema: z.ZodObject<{
         value: z.ZodString;
     }, z.core.$strip>;
     status: z.ZodEnum<{
-        skipped: "skipped";
-        success: "success";
-        pending: "pending";
-        running: "running";
-        failed: "failed";
         cancelled: "cancelled";
         cancelling: "cancelling";
+        drift_dropped: "drift_dropped";
+        failed: "failed";
+        pending: "pending";
         queued: "queued";
         recovering: "recovering";
+        running: "running";
+        skipped: "skipped";
+        success: "success";
         timed_out_stale: "timed_out_stale";
-        drift_dropped: "drift_dropped";
+        unroutable: "unroutable";
     }>;
     startedAt: z.ZodNullable<z.ZodString>;
     completedAt: z.ZodNullable<z.ZodString>;
@@ -106,14 +107,17 @@ export declare const agentJobResultSchema: z.ZodObject<{
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
@@ -126,17 +130,18 @@ export declare const agentJobResultSchema: z.ZodObject<{
             value: z.ZodString;
         }, z.core.$strip>;
         runOn: z.ZodArray<z.ZodEnum<{
-            skipped: "skipped";
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            drift_dropped: "drift_dropped";
+            failed: "failed";
+            pending: "pending";
             queued: "queued";
             recovering: "recovering";
+            running: "running";
+            skipped: "skipped";
+            success: "success";
             timed_out_stale: "timed_out_stale";
-            drift_dropped: "drift_dropped";
+            unroutable: "unroutable";
         }>>;
     }, z.core.$strip>>;
     outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -151,12 +156,12 @@ export declare const agentJobResultSchema: z.ZodObject<{
             value: z.ZodString;
         }, z.core.$strip>;
         status: z.ZodEnum<{
-            skipped: "skipped";
-            success: "success";
+            cancelled: "cancelled";
+            failed: "failed";
             pending: "pending";
             running: "running";
-            failed: "failed";
-            cancelled: "cancelled";
+            skipped: "skipped";
+            success: "success";
         }>;
         exitCode: z.ZodNullable<z.ZodNumber>;
         durationMs: z.ZodNullable<z.ZodNumber>;
@@ -168,11 +173,11 @@ export declare const agentJobResultSchema: z.ZodObject<{
         }, z.core.$strip>>;
         stepType: z.ZodString;
         checkOutcome: z.ZodNullable<z.ZodEnum<{
-            skipped: "skipped";
             applied: "applied";
             declined: "declined";
             "dry-run": "dry-run";
             no_check: "no_check";
+            skipped: "skipped";
         }>>;
         secretsAccessed: z.ZodArray<z.ZodString>;
     }, z.core.$strip>>;
@@ -185,13 +190,13 @@ export declare const agentRunResultSchema: z.ZodObject<{
         value: z.ZodString;
     }, z.core.$strip>;
     status: z.ZodEnum<{
-        success: "success";
-        pending: "pending";
-        running: "running";
-        failed: "failed";
         cancelled: "cancelled";
         cancelling: "cancelling";
+        failed: "failed";
         held: "held";
+        pending: "pending";
+        running: "running";
+        success: "success";
     }>;
     provider: z.ZodString;
     repoIdentifier: z.ZodObject<{
@@ -208,21 +213,21 @@ export declare const agentRunResultSchema: z.ZodObject<{
     completedAt: z.ZodNullable<z.ZodString>;
     durationMs: z.ZodNullable<z.ZodNumber>;
     trustTier: z.ZodNullable<z.ZodEnum<{
-        unknown: "unknown";
         known: "known";
         trusted: "trusted";
+        unknown: "unknown";
     }>>;
     contributorUsername: z.ZodNullable<z.ZodObject<{
         untrusted: z.ZodLiteral<true>;
         value: z.ZodString;
     }, z.core.$strip>>;
     failureCategory: z.ZodNullable<z.ZodEnum<{
-        unknown: "unknown";
         cancelled: "cancelled";
+        infra: "infra";
         init_failure: "init_failure";
-        timed_out: "timed_out";
         step_failed: "step_failed";
-        infra: "infra";
+        timed_out: "timed_out";
+        unknown: "unknown";
     }>>;
     failureReason: z.ZodNullable<z.ZodObject<{
         untrusted: z.ZodLiteral<true>;
@@ -237,17 +242,18 @@ export declare const agentRunResultSchema: z.ZodObject<{
             value: z.ZodString;
         }, z.core.$strip>;
         status: z.ZodEnum<{
-            skipped: "skipped";
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            drift_dropped: "drift_dropped";
+            failed: "failed";
+            pending: "pending";
             queued: "queued";
             recovering: "recovering";
+            running: "running";
+            skipped: "skipped";
+            success: "success";
             timed_out_stale: "timed_out_stale";
-            drift_dropped: "drift_dropped";
+            unroutable: "unroutable";
         }>;
         startedAt: z.ZodNullable<z.ZodString>;
         completedAt: z.ZodNullable<z.ZodString>;
@@ -263,14 +269,17 @@ export declare const agentRunResultSchema: z.ZodObject<{
                 run: "run";
             }>;
             category: z.ZodEnum<{
-                secret_resolution: "secret_resolution";
-                install_secrets: "install_secrets";
-                lock_resolution: "lock_resolution";
+                approval_misconfig: "approval_misconfig";
                 build_coordination: "build_coordination";
-                environment_rules: "environment_rules";
+                context_rules: "context_rules";
                 dynamic_eval: "dynamic_eval";
-                no_agent: "no_agent";
+                install_secrets: "install_secrets";
+                lock_resolution: "lock_resolution";
                 matrix_expansion: "matrix_expansion";
+                no_agent: "no_agent";
+                sandbox_denied: "sandbox_denied";
+                secret_resolution: "secret_resolution";
+                trust_policy: "trust_policy";
             }>;
             message: z.ZodObject<{
                 untrusted: z.ZodLiteral<true>;
@@ -283,17 +292,18 @@ export declare const agentRunResultSchema: z.ZodObject<{
                 value: z.ZodString;
             }, z.core.$strip>;
             runOn: z.ZodArray<z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>>;
         }, z.core.$strip>>;
         outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -308,12 +318,12 @@ export declare const agentRunResultSchema: z.ZodObject<{
                 value: z.ZodString;
             }, z.core.$strip>;
             status: z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
+                cancelled: "cancelled";
+                failed: "failed";
                 pending: "pending";
                 running: "running";
-                failed: "failed";
-                cancelled: "cancelled";
+                skipped: "skipped";
+                success: "success";
             }>;
             exitCode: z.ZodNullable<z.ZodNumber>;
             durationMs: z.ZodNullable<z.ZodNumber>;
@@ -325,11 +335,11 @@ export declare const agentRunResultSchema: z.ZodObject<{
             }, z.core.$strip>>;
             stepType: z.ZodString;
             checkOutcome: z.ZodNullable<z.ZodEnum<{
-                skipped: "skipped";
                 applied: "applied";
                 declined: "declined";
                 "dry-run": "dry-run";
                 no_check: "no_check";
+                skipped: "skipped";
             }>>;
             secretsAccessed: z.ZodArray<z.ZodString>;
         }, z.core.$strip>>;
@@ -357,13 +367,13 @@ export type AgentStepLogs = z.infer<typeof agentStepLogsSchema>;
 export declare const agentRunListItemSchema: z.ZodObject<{
     runId: z.ZodString;
     status: z.ZodEnum<{
-        success: "success";
-        pending: "pending";
-        running: "running";
-        failed: "failed";
         cancelled: "cancelled";
         cancelling: "cancelling";
+        failed: "failed";
         held: "held";
+        pending: "pending";
+        running: "running";
+        success: "success";
     }>;
     sha: z.ZodNullable<z.ZodString>;
     createdAt: z.ZodNullable<z.ZodString>;

package/dist/protocol/messages/agent-run-result.js

@@ -1,7 +1,7 @@
 import "../../rolldown-runtime-ClRpJifh.js";
 import { CheckStepOutcome } from "../../check-mode.js";
 import { ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, InitFailureCategory } from "./execution-status.js";
-import { TrustTierSchema } from "../../environment/types.js";
+import { TrustTierSchema } from "../../context/types.js";
 import { z } from "zod";
 //#region src/protocol/messages/agent-run-result.ts
 /**

package/dist/protocol/messages/auth.d.ts

@@ -9,36 +9,48 @@ export declare const authRequestSchema: z.ZodObject<{
             coordinator: "coordinator";
             worker: "worker";
         }>>;
-        dashboardWrites: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
-            "secrets.set": "secrets.set";
-            "secrets.delete": "secrets.delete";
-            "secrets.scope.create": "secrets.scope.create";
-            "secrets.scope.rename": "secrets.scope.rename";
-            "secrets.scope.delete": "secrets.scope.delete";
-            "variables.set": "variables.set";
-            "variables.delete": "variables.delete";
-            "environments.create": "environments.create";
-            "environments.update": "environments.update";
-            "environments.test_access.set": "environments.test_access.set";
-            "environments.delete": "environments.delete";
-            "environments.bindings.set": "environments.bindings.set";
-            "environments.source_overrides.set": "environments.source_overrides.set";
-            "environments.source_overrides.delete": "environments.source_overrides.delete";
-            "held_runs.approve": "held_runs.approve";
-            "held_runs.reject": "held_runs.reject";
-            "event_dlq.retry": "event_dlq.retry";
-            "event_dlq.discard": "event_dlq.discard";
+        dashboardWrites: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodEnum<{
             "attestations.retry": "attestations.retry";
-            "registration.disable": "registration.disable";
-            "registration.delete": "registration.delete";
-            "global_workflows.update": "global_workflows.update";
             "backends.sync": "backends.sync";
             "backends.sync_one": "backends.sync_one";
             "backends.test": "backends.test";
+            "contexts.bindings.set": "contexts.bindings.set";
+            "contexts.create": "contexts.create";
+            "contexts.delete": "contexts.delete";
+            "contexts.source_overrides.delete": "contexts.source_overrides.delete";
+            "contexts.source_overrides.set": "contexts.source_overrides.set";
+            "contexts.test_access.set": "contexts.test_access.set";
+            "contexts.update": "contexts.update";
+            "event_dlq.discard": "event_dlq.discard";
+            "event_dlq.retry": "event_dlq.retry";
             "fleet.host.declare": "fleet.host.declare";
             "fleet.host.remove": "fleet.host.remove";
-        }> & z.core.$partial, z.ZodBoolean>>;
+            "global_workflows.update": "global_workflows.update";
+            "held_runs.approve": "held_runs.approve";
+            "held_runs.reject": "held_runs.reject";
+            "registration.delete": "registration.delete";
+            "registration.disable": "registration.disable";
+            "secrets.delete": "secrets.delete";
+            "secrets.scope.create": "secrets.scope.create";
+            "secrets.scope.delete": "secrets.scope.delete";
+            "secrets.scope.rename": "secrets.scope.rename";
+            "secrets.set": "secrets.set";
+            "variables.delete": "variables.delete";
+            "variables.set": "variables.set";
+        }> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodEnum<{
+            disabled: "disabled";
+            encrypted: "encrypted";
+            permissive: "permissive";
+        }>]>>, z.ZodTransform<Partial<Record<"attestations.retry" | "backends.sync" | "backends.sync_one" | "backends.test" | "contexts.bindings.set" | "contexts.create" | "contexts.delete" | "contexts.source_overrides.delete" | "contexts.source_overrides.set" | "contexts.test_access.set" | "contexts.update" | "event_dlq.discard" | "event_dlq.retry" | "fleet.host.declare" | "fleet.host.remove" | "global_workflows.update" | "held_runs.approve" | "held_runs.reject" | "registration.delete" | "registration.disable" | "secrets.delete" | "secrets.scope.create" | "secrets.scope.delete" | "secrets.scope.rename" | "secrets.set" | "variables.delete" | "variables.set", "disabled" | "encrypted" | "permissive">>, Partial<Record<"attestations.retry" | "backends.sync" | "backends.sync_one" | "backends.test" | "contexts.bindings.set" | "contexts.create" | "contexts.delete" | "contexts.source_overrides.delete" | "contexts.source_overrides.set" | "contexts.test_access.set" | "contexts.update" | "event_dlq.discard" | "event_dlq.retry" | "fleet.host.declare" | "fleet.host.remove" | "global_workflows.update" | "held_runs.approve" | "held_runs.reject" | "registration.delete" | "registration.disable" | "secrets.delete" | "secrets.scope.create" | "secrets.scope.delete" | "secrets.scope.rename" | "secrets.set" | "variables.delete" | "variables.set", "disabled" | "encrypted" | "permissive" | boolean>>>>>;
         supportedDashboardRequests: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        dashboardEncryptionKey: z.ZodOptional<z.ZodObject<{
+            kty: z.ZodLiteral<"OKP">;
+            crv: z.ZodLiteral<"X25519">;
+            x: z.ZodString;
+            kid: z.ZodString;
+            use: z.ZodOptional<z.ZodLiteral<"enc">>;
+        }, z.core.$loose>>;
+        dashboardVerifiedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$loose>>;
 }, z.core.$strip>;
 /** Auth success response sent by Platform to orchestrator after successful authentication. */

package/dist/protocol/messages/browser.d.ts

@@ -33,6 +33,24 @@ export declare const browserLogUnsubscribeSchema: z.ZodObject<{
     jobId: z.ZodString;
     stepIndex: z.ZodNumber;
 }, z.core.$strip>;
+/**
+ * Browser subscribes to live orchestration/provisioning logs for a job.
+ *
+ * Keyed by `(runId, jobId)` — no `stepIndex` (orch logs are job-level, not
+ * per-step). On subscribe the Platform backfills persisted history via the
+ * `dashboard.orch.logs` RPC, then streams live `orch-log.lines`.
+ */
+export declare const browserOrchLogSubscribeSchema: z.ZodObject<{
+    type: z.ZodLiteral<"orch-log.subscribe">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+}, z.core.$strip>;
+/** Browser unsubscribes from live orchestration/provisioning logs for a job. */
+export declare const browserOrchLogUnsubscribeSchema: z.ZodObject<{
+    type: z.ZodLiteral<"orch-log.unsubscribe">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+}, z.core.$strip>;
 /** Browser subscribes to org-level status updates (run/job/step status changes). */
 export declare const browserStatusSubscribeSchema: z.ZodObject<{
     type: z.ZodLiteral<"status.subscribe">;
@@ -80,6 +98,14 @@ export declare const browserToPlatformMessageSchema: z.ZodDiscriminatedUnion<[z.
     runId: z.ZodString;
     jobId: z.ZodString;
     stepIndex: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"orch-log.subscribe">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"orch-log.unsubscribe">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"status.subscribe">;
     scope: z.ZodLiteral<"org">;
@@ -112,6 +138,39 @@ export declare const browserLogLinesSchema: z.ZodObject<{
     stepIndex: z.ZodNumber;
     lines: z.ZodArray<z.ZodString>;
     lineCount: z.ZodNumber;
+    stream: z.ZodOptional<z.ZodEnum<{
+        stderr: "stderr";
+        stdout: "stdout";
+    }>>;
+}, z.core.$strip>;
+/**
+ * Platform sends orchestration/provisioning log lines for a subscribed job.
+ *
+ * Delivered in two forms over the same message:
+ * - **Backfill** (on subscribe): `lines` are the persisted JSONL strings from
+ *   the `dashboard.orch.logs` RPC (each carrying its own `phase`/`ts`), so the
+ *   top-level `phase`/`ts` are omitted.
+ * - **Live** (streamed after backfill): `lines` are raw message strings for a
+ *   single `phase` at timestamp `ts`.
+ *
+ * The dashboard normalizes both by attempting to JSON-parse each line and
+ * falling back to the envelope `phase`/`ts`, and dedups on `(ts, phase,
+ * message)` so an overlap between the backfill snapshot and the first live
+ * chunk is not double-appended.
+ */
+export declare const browserOrchLogLinesSchema: z.ZodObject<{
+    type: z.ZodLiteral<"orch-log.lines">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    phase: z.ZodOptional<z.ZodEnum<{
+        dispatch: "dispatch";
+        provisioning: "provisioning";
+        setup: "setup";
+        teardown: "teardown";
+        unknown: "unknown";
+    }>>;
+    lines: z.ZodArray<z.ZodString>;
+    ts: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 /** Platform notifies browser that lines were dropped due to backpressure. */
 export declare const browserGapSchema: z.ZodObject<{
@@ -237,6 +296,23 @@ export declare const platformToBrowserMessageSchema: z.ZodDiscriminatedUnion<[z.
     stepIndex: z.ZodNumber;
     lines: z.ZodArray<z.ZodString>;
     lineCount: z.ZodNumber;
+    stream: z.ZodOptional<z.ZodEnum<{
+        stderr: "stderr";
+        stdout: "stdout";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"orch-log.lines">;
+    runId: z.ZodString;
+    jobId: z.ZodString;
+    phase: z.ZodOptional<z.ZodEnum<{
+        dispatch: "dispatch";
+        provisioning: "provisioning";
+        setup: "setup";
+        teardown: "teardown";
+        unknown: "unknown";
+    }>>;
+    lines: z.ZodArray<z.ZodString>;
+    ts: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"log.gap">;
     runId: z.ZodString;
@@ -325,10 +401,10 @@ export declare const platformToBrowserMessageSchema: z.ZodDiscriminatedUnion<[z.
             name: z.ZodString;
             value: z.ZodString;
             category: z.ZodEnum<{
-                user: "user";
-                system: "system";
                 inherited: "inherited";
                 secret: "secret";
+                system: "system";
+                user: "user";
             }>;
         }, z.core.$strip>>>;
         runtime: z.ZodOptional<z.ZodObject<{
@@ -356,12 +432,12 @@ export declare const platformToBrowserMessageSchema: z.ZodDiscriminatedUnion<[z.
     data: z.ZodString;
     isLast: z.ZodBoolean;
     error: z.ZodOptional<z.ZodEnum<{
-        payload_unavailable: "payload_unavailable";
-        not_found: "not_found";
-        read_failed: "read_failed";
         forbidden: "forbidden";
+        not_found: "not_found";
         orch_stream_timeout: "orch_stream_timeout";
         orchestrator_unavailable: "orchestrator_unavailable";
+        payload_unavailable: "payload_unavailable";
+        read_failed: "read_failed";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>], "type">;