@kici-dev/engine 0.1.26 → 0.2.0

package/dist/protocol/messages/dashboard.d.ts

@@ -79,13 +79,13 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
             value: z.ZodString;
         }, z.core.$strip>;
         status: z.ZodEnum<{
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            failed: "failed";
             held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodObject<{
@@ -102,21 +102,21 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
         completedAt: z.ZodNullable<z.ZodString>;
         durationMs: z.ZodNullable<z.ZodNumber>;
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
             value: z.ZodString;
         }, z.core.$strip>>;
         failureCategory: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             cancelled: "cancelled";
+            infra: "infra";
             init_failure: "init_failure";
-            timed_out: "timed_out";
             step_failed: "step_failed";
-            infra: "infra";
+            timed_out: "timed_out";
+            unknown: "unknown";
         }>>;
         failureReason: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
@@ -131,17 +131,18 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                 value: z.ZodString;
             }, z.core.$strip>;
             status: z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>;
             startedAt: z.ZodNullable<z.ZodString>;
             completedAt: z.ZodNullable<z.ZodString>;
@@ -157,14 +158,17 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                     run: "run";
                 }>;
                 category: z.ZodEnum<{
-                    secret_resolution: "secret_resolution";
-                    install_secrets: "install_secrets";
-                    lock_resolution: "lock_resolution";
+                    approval_misconfig: "approval_misconfig";
                     build_coordination: "build_coordination";
-                    environment_rules: "environment_rules";
+                    context_rules: "context_rules";
                     dynamic_eval: "dynamic_eval";
-                    no_agent: "no_agent";
+                    install_secrets: "install_secrets";
+                    lock_resolution: "lock_resolution";
                     matrix_expansion: "matrix_expansion";
+                    no_agent: "no_agent";
+                    sandbox_denied: "sandbox_denied";
+                    secret_resolution: "secret_resolution";
+                    trust_policy: "trust_policy";
                 }>;
                 message: z.ZodObject<{
                     untrusted: z.ZodLiteral<true>;
@@ -177,17 +181,18 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                     value: z.ZodString;
                 }, z.core.$strip>;
                 runOn: z.ZodArray<z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
-                    pending: "pending";
-                    running: "running";
-                    failed: "failed";
                     cancelled: "cancelled";
                     cancelling: "cancelling";
+                    drift_dropped: "drift_dropped";
+                    failed: "failed";
+                    pending: "pending";
                     queued: "queued";
                     recovering: "recovering";
+                    running: "running";
+                    skipped: "skipped";
+                    success: "success";
                     timed_out_stale: "timed_out_stale";
-                    drift_dropped: "drift_dropped";
+                    unroutable: "unroutable";
                 }>>;
             }, z.core.$strip>>;
             outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -202,12 +207,12 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                     value: z.ZodString;
                 }, z.core.$strip>;
                 status: z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
+                    cancelled: "cancelled";
+                    failed: "failed";
                     pending: "pending";
                     running: "running";
-                    failed: "failed";
-                    cancelled: "cancelled";
+                    skipped: "skipped";
+                    success: "success";
                 }>;
                 exitCode: z.ZodNullable<z.ZodNumber>;
                 durationMs: z.ZodNullable<z.ZodNumber>;
@@ -219,11 +224,11 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                 }, z.core.$strip>>;
                 stepType: z.ZodString;
                 checkOutcome: z.ZodNullable<z.ZodEnum<{
-                    skipped: "skipped";
                     applied: "applied";
                     declined: "declined";
                     "dry-run": "dry-run";
                     no_check: "no_check";
+                    skipped: "skipped";
                 }>>;
                 secretsAccessed: z.ZodArray<z.ZodString>;
             }, z.core.$strip>>;
@@ -232,6 +237,104 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DashboardRunStructuredResponse = z.infer<typeof dashboardRunStructuredResponseSchema>;
+/**
+ * Request the current mirror-projection state of a single run from the
+ * orchestrator. Unlike `dashboard.run.detail` (a user-plane read that
+ * access-logs), this is a **system reconciliation read**: the Platform's
+ * `RunMirrorReconciler` issues it for a run stuck non-terminal in the mirror to
+ * recover a terminal frame dropped on a live connection. The `actor` is always a
+ * `system` principal, and the orchestrator does NOT write an access-log row.
+ */
+export declare const dashboardRunStateRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>;
+export type DashboardRunStateRequest = z.infer<typeof dashboardRunStateRequestSchema>;
+/**
+ * Response carrying the run's current `StateReplayRun` mirror-projection shape
+ * (the same shape `state.replay` carries), or `run: null` when the orchestrator
+ * has no such run. Consumed by `upsertRunMirror` on the Platform side.
+ */
+export declare const dashboardRunStateResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state.response">;
+    requestId: z.ZodString;
+    run: z.ZodNullable<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            cancelling: "cancelling";
+            failed: "failed";
+            held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
+        }>;
+        routingKey: z.ZodOptional<z.ZodString>;
+        repoIdentifier: z.ZodOptional<z.ZodString>;
+        sha: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        triggerEvent: z.ZodOptional<z.ZodString>;
+        commitMessage: z.ZodOptional<z.ZodString>;
+        jobCount: z.ZodNumber;
+        startedAt: z.ZodNumber;
+        completedAt: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+        parentRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        originalRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredByAgentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        failureReason: z.ZodOptional<z.ZodString>;
+        failureClass: z.ZodOptional<z.ZodEnum<{
+            cancelled: "cancelled";
+            dead_orchestrator: "dead_orchestrator";
+            never_started: "never_started";
+            step_failure: "step_failure";
+            timed_out: "timed_out";
+        }>>;
+        jobs: z.ZodArray<z.ZodObject<{
+            jobId: z.ZodString;
+            jobName: z.ZodString;
+            status: z.ZodString;
+            startedAt: z.ZodOptional<z.ZodNumber>;
+            completedAt: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+            errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DashboardRunStateResponse = z.infer<typeof dashboardRunStateResponseSchema>;
 /** Request step logs from orchestrator. */
 export declare const dashboardStepLogsRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs">;
@@ -284,8 +387,8 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
     orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     errorMessage: z.ZodNullable<z.ZodString>;
     runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-    environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-    skippedEnvironments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+    skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
     envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
     secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
@@ -295,14 +398,17 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -310,17 +416,18 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
     needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         upstreamName: z.ZodString;
         runOn: z.ZodArray<z.ZodEnum<{
-            skipped: "skipped";
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            drift_dropped: "drift_dropped";
+            failed: "failed";
+            pending: "pending";
             queued: "queued";
             recovering: "recovering";
+            running: "running";
+            skipped: "skipped";
+            success: "success";
             timed_out_stale: "timed_out_stale";
-            drift_dropped: "drift_dropped";
+            unroutable: "unroutable";
         }>>;
     }, z.core.$strip>>>>;
     steps: z.ZodArray<z.ZodObject<{
@@ -335,17 +442,17 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
         stepType: z.ZodOptional<z.ZodString>;
         secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            skipped: "skipped";
             applied: "applied";
             declined: "declined";
             "dry-run": "dry-run";
             no_check: "no_check";
+            skipped: "skipped";
         }>>>;
         driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            sequential: "sequential";
             "parallel-child": "parallel-child";
             "parallel-group": "parallel-group";
+            sequential: "sequential";
         }>>>;
         groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
@@ -369,8 +476,8 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
         orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         errorMessage: z.ZodNullable<z.ZodString>;
         runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-        environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-        skippedEnvironments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
@@ -380,14 +487,17 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
                 run: "run";
             }>;
             category: z.ZodEnum<{
-                secret_resolution: "secret_resolution";
-                install_secrets: "install_secrets";
-                lock_resolution: "lock_resolution";
+                approval_misconfig: "approval_misconfig";
                 build_coordination: "build_coordination";
-                environment_rules: "environment_rules";
+                context_rules: "context_rules";
                 dynamic_eval: "dynamic_eval";
-                no_agent: "no_agent";
+                install_secrets: "install_secrets";
+                lock_resolution: "lock_resolution";
                 matrix_expansion: "matrix_expansion";
+                no_agent: "no_agent";
+                sandbox_denied: "sandbox_denied";
+                secret_resolution: "secret_resolution";
+                trust_policy: "trust_policy";
             }>;
             message: z.ZodString;
             jobName: z.ZodOptional<z.ZodString>;
@@ -395,17 +505,18 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
         needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
             upstreamName: z.ZodString;
             runOn: z.ZodArray<z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>>;
         }, z.core.$strip>>>>;
         steps: z.ZodArray<z.ZodObject<{
@@ -420,30 +531,30 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
             stepType: z.ZodOptional<z.ZodString>;
             secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
             checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                skipped: "skipped";
                 applied: "applied";
                 declined: "declined";
                 "dry-run": "dry-run";
                 no_check: "no_check";
+                skipped: "skipped";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                sequential: "sequential";
                 "parallel-child": "parallel-child";
                 "parallel-group": "parallel-group";
+                sequential: "sequential";
             }>>>;
             groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
-            head: "head";
             base: "base";
+            head: "head";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
@@ -453,14 +564,17 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -520,10 +634,10 @@ export type DashboardAttestationsListRequest = z.infer<typeof dashboardAttestati
  *   trust root).
  */
 export declare const attestationVerifyStatusSchema: z.ZodEnum<{
-    pending: "pending";
     failed: "failed";
-    verified: "verified";
+    pending: "pending";
     unverifiable: "unverifiable";
+    verified: "verified";
 }>;
 export type AttestationVerifyStatus = z.infer<typeof attestationVerifyStatusSchema>;
 /**
@@ -557,20 +671,20 @@ export declare const attestationListItemSchema: z.ZodObject<{
     }, z.core.$strip>;
     runId: z.ZodOptional<z.ZodString>;
     verifyStatus: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         failed: "failed";
-        verified: "verified";
+        pending: "pending";
         unverifiable: "unverifiable";
+        verified: "verified";
     }>>;
     verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     sourceOrigin: z.ZodOptional<z.ZodEnum<{
-        triggered: "triggered";
         "run-remote": "run-remote";
+        triggered: "triggered";
     }>>;
     originOrgId: z.ZodOptional<z.ZodString>;
     attestationOrigin: z.ZodOptional<z.ZodEnum<{
-        live: "live";
         deferred: "deferred";
+        live: "live";
         "offline-backfill": "offline-backfill";
     }>>;
 }, z.core.$strip>;
@@ -605,26 +719,90 @@ export declare const dashboardAttestationsListResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DashboardAttestationsListResponse = z.infer<typeof dashboardAttestationsListResponseSchema>;
+/** Request the named artifacts uploaded by a run. */
+export declare const dashboardArtifactsListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>;
+export type DashboardArtifactsListRequest = z.infer<typeof dashboardArtifactsListRequestSchema>;
+/**
+ * Single artifact in the list response. `downloadUrl` is a presigned GET the
+ * dashboard links directly; it is omitted when the backing object could not be
+ * resolved (expired / missing), in which case the row still lists the metadata.
+ */
+export declare const artifactListItemSchema: z.ZodObject<{
+    name: z.ZodString;
+    jobId: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    sha256: z.ZodString;
+    createdAt: z.ZodString;
+    downloadUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ArtifactListItem = z.infer<typeof artifactListItemSchema>;
+/** Response with the run's artifacts (correlates to dashboard.artifacts.list). */
+export declare const dashboardArtifactsListResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list.response">;
+    requestId: z.ZodString;
+    artifacts: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        jobId: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        sha256: z.ZodString;
+        createdAt: z.ZodString;
+        downloadUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    downloadUrlExpiresInSeconds: z.ZodOptional<z.ZodNumber>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DashboardArtifactsListResponse = z.infer<typeof dashboardArtifactsListResponseSchema>;
 /**
  * Metadata-only summary row for the org-wide list. No inlined bundle (keeps the
  * list cheap). `repository` / `workflow` are joined from `execution_runs` when
@@ -641,21 +819,21 @@ export declare const attestationListSummarySchema: z.ZodObject<{
     mediaType: z.ZodString;
     createdAt: z.ZodString;
     verifyStatus: z.ZodEnum<{
-        pending: "pending";
         failed: "failed";
-        verified: "verified";
+        pending: "pending";
         unverifiable: "unverifiable";
+        verified: "verified";
     }>;
     verifyReason: z.ZodNullable<z.ZodString>;
     repository: z.ZodNullable<z.ZodString>;
     workflow: z.ZodNullable<z.ZodString>;
     sourceOrigin: z.ZodOptional<z.ZodEnum<{
-        triggered: "triggered";
         "run-remote": "run-remote";
+        triggered: "triggered";
     }>>;
     attestationOrigin: z.ZodOptional<z.ZodEnum<{
-        live: "live";
         deferred: "deferred";
+        live: "live";
         "offline-backfill": "offline-backfill";
     }>>;
     pending: z.ZodOptional<z.ZodBoolean>;
@@ -666,10 +844,10 @@ export declare const attestationListFiltersSchema: z.ZodObject<{
     digest: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         failed: "failed";
-        verified: "verified";
+        pending: "pending";
         unverifiable: "unverifiable";
+        verified: "verified";
     }>>;
     repository: z.ZodOptional<z.ZodString>;
     workflow: z.ZodOptional<z.ZodString>;
@@ -714,10 +892,10 @@ export declare const dashboardAttestationsListAllRequestSchema: z.ZodObject<{
         digest: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         status: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         repository: z.ZodOptional<z.ZodString>;
         workflow: z.ZodOptional<z.ZodString>;
@@ -742,21 +920,21 @@ export declare const dashboardAttestationsListAllResponseSchema: z.ZodObject<{
         mediaType: z.ZodString;
         createdAt: z.ZodString;
         verifyStatus: z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>;
         verifyReason: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         workflow: z.ZodNullable<z.ZodString>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
         pending: z.ZodOptional<z.ZodBoolean>;
@@ -764,6 +942,7 @@ export declare const dashboardAttestationsListAllResponseSchema: z.ZodObject<{
     page: z.ZodNumber;
     pageSize: z.ZodNumber;
     total: z.ZodNumber;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DashboardAttestationsListAllResponse = z.infer<typeof dashboardAttestationsListAllResponseSchema>;
@@ -830,20 +1009,20 @@ export declare const dashboardAttestationGetResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
@@ -913,7 +1092,7 @@ export declare const dashboardRunSummarySchema: z.ZodObject<{
     triggerEvent: z.ZodOptional<z.ZodString>;
     commitMessage: z.ZodOptional<z.ZodString>;
     jobCount: z.ZodOptional<z.ZodNumber>;
-    environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
     startedAt: z.ZodOptional<z.ZodString>;
     completedAt: z.ZodOptional<z.ZodString>;
     durationMs: z.ZodOptional<z.ZodNumber>;
@@ -986,7 +1165,7 @@ export declare const dashboardRunsListResponseSchema: z.ZodObject<{
         triggerEvent: z.ZodOptional<z.ZodString>;
         commitMessage: z.ZodOptional<z.ZodString>;
         jobCount: z.ZodOptional<z.ZodNumber>;
-        environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
         startedAt: z.ZodOptional<z.ZodString>;
         completedAt: z.ZodOptional<z.ZodString>;
         durationMs: z.ZodOptional<z.ZodNumber>;
@@ -1064,10 +1243,10 @@ export declare const dashboardSourceSummarySchema: z.ZodObject<{
     name: z.ZodNullable<z.ZodString>;
     provider: z.ZodString;
     subtype: z.ZodEnum<{
-        github_app: "github_app";
         generic_webhook: "generic_webhook";
-        universal_git: "universal_git";
+        github_app: "github_app";
         local: "local";
+        universal_git: "universal_git";
     }>;
     enabled: z.ZodBoolean;
     createdAt: z.ZodString;
@@ -1116,10 +1295,10 @@ export declare const dashboardSourcesListResponseSchema: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         provider: z.ZodString;
         subtype: z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodString;
@@ -1274,19 +1453,19 @@ export declare const eventLogListItemSchema: z.ZodObject<{
     event: z.ZodString;
     action: z.ZodNullable<z.ZodString>;
     source: z.ZodEnum<{
-        relay: "relay";
         direct: "direct";
+        relay: "relay";
     }>;
     provider: z.ZodString;
     repoIdentifier: z.ZodNullable<z.ZodString>;
     ref: z.ZodNullable<z.ZodString>;
     status: z.ZodEnum<{
-        failed: "failed";
-        received: "received";
-        processed: "processed";
         duplicate: "duplicate";
-        lockfile_missing: "lockfile_missing";
+        failed: "failed";
         lockfile_corrupt: "lockfile_corrupt";
+        lockfile_missing: "lockfile_missing";
+        processed: "processed";
+        received: "received";
     }>;
     matchedCount: z.ZodNumber;
     runId: z.ZodNullable<z.ZodString>;
@@ -1334,12 +1513,12 @@ export declare const dashboardEventLogListRequestSchema: z.ZodObject<{
     routingKey: z.ZodOptional<z.ZodString>;
     event: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        failed: "failed";
-        received: "received";
-        processed: "processed";
         duplicate: "duplicate";
-        lockfile_missing: "lockfile_missing";
+        failed: "failed";
         lockfile_corrupt: "lockfile_corrupt";
+        lockfile_missing: "lockfile_missing";
+        processed: "processed";
+        received: "received";
     }>>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
     toTimestamp: z.ZodOptional<z.ZodString>;
@@ -1357,19 +1536,19 @@ declare const dashboardEventLogListResponseSchema: z.ZodObject<{
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -1435,19 +1614,19 @@ declare const dashboardEventLogDetailResponseSchema: z.ZodObject<{
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -1463,6 +1642,66 @@ declare const dashboardEventLogDetailResponseSchema: z.ZodObject<{
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/** Aggregate webhook-activity counts for a time window (org-scoped).
+ *  Powers the Runs-page misconfig strip + the `kici runs` hint. No payloads,
+ *  no repo identifiers — safe for all org members. */
+export declare const dashboardEventLogActivityRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    fromTimestamp: z.ZodString;
+    toTimestamp: z.ZodString;
+}, z.core.$strip>;
+/** Orchestrator-only bucketed counts over the window. `matched`/`unmatched`
+ *  distinguish a trigger-no-match delivery from one that produced a run — a
+ *  fact the Platform relay cannot compute (see the two-table architecture). */
+export declare const eventLogActivityCountsSchema: z.ZodObject<{
+    total: z.ZodNumber;
+    matched: z.ZodNumber;
+    unmatched: z.ZodNumber;
+    lockfileMissing: z.ZodNumber;
+    lockfileCorrupt: z.ZodNumber;
+    failed: z.ZodNumber;
+}, z.core.$strip>;
+export declare const dashboardEventLogActivityResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity.response">;
+    requestId: z.ZodString;
+    counts: z.ZodOptional<z.ZodObject<{
+        total: z.ZodNumber;
+        matched: z.ZodNumber;
+        unmatched: z.ZodNumber;
+        lockfileMissing: z.ZodNumber;
+        lockfileCorrupt: z.ZodNumber;
+        failed: z.ZodNumber;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 /**
  * Reasons a chunked event-log payload stream may terminate without a body.
  * The terminal chunk carries `isLast=true` plus one of these codes in
@@ -1483,12 +1722,12 @@ declare const dashboardEventLogDetailResponseSchema: z.ZodObject<{
  *   connection for the request (synthesized on Platform side).
  */
 export declare const EventLogPayloadStreamError: z.ZodEnum<{
-    payload_unavailable: "payload_unavailable";
-    not_found: "not_found";
-    read_failed: "read_failed";
     forbidden: "forbidden";
+    not_found: "not_found";
     orch_stream_timeout: "orch_stream_timeout";
     orchestrator_unavailable: "orchestrator_unavailable";
+    payload_unavailable: "payload_unavailable";
+    read_failed: "read_failed";
 }>;
 export type EventLogPayloadStreamError = z.infer<typeof EventLogPayloadStreamError>;
 /** Platform → orchestrator: begin streaming the body for a delivery. */
@@ -1546,12 +1785,12 @@ export declare const dashboardEventLogPayloadChunkSchema: z.ZodObject<{
     data: z.ZodString;
     isLast: z.ZodBoolean;
     error: z.ZodOptional<z.ZodEnum<{
-        payload_unavailable: "payload_unavailable";
-        not_found: "not_found";
-        read_failed: "read_failed";
         forbidden: "forbidden";
+        not_found: "not_found";
         orch_stream_timeout: "orch_stream_timeout";
         orchestrator_unavailable: "orchestrator_unavailable";
+        payload_unavailable: "payload_unavailable";
+        read_failed: "read_failed";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
@@ -1568,12 +1807,12 @@ export declare const browserEventLogPayloadChunkSchema: z.ZodObject<{
     data: z.ZodString;
     isLast: z.ZodBoolean;
     error: z.ZodOptional<z.ZodEnum<{
-        payload_unavailable: "payload_unavailable";
-        not_found: "not_found";
-        read_failed: "read_failed";
         forbidden: "forbidden";
+        not_found: "not_found";
         orch_stream_timeout: "orch_stream_timeout";
         orchestrator_unavailable: "orchestrator_unavailable";
+        payload_unavailable: "payload_unavailable";
+        read_failed: "read_failed";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
@@ -1764,9 +2003,9 @@ declare const dashboardEventDlqDiscardResponseSchema: z.ZodObject<{
     discarded: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-/** List all environments for the org. */
-export declare const envListRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.list">;
+/** List all contexts for the org. */
+export declare const contextListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1797,10 +2036,10 @@ export declare const envListRequestSchema: z.ZodObject<{
     includeSecrets: z.ZodOptional<z.ZodBoolean>;
     orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-declare const envListResponseSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.list.response">;
+declare const contextListResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.list.response">;
     requestId: z.ZodString;
-    environments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    contexts: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
@@ -1816,9 +2055,9 @@ declare const envListResponseSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-/** Get a single environment by ID. */
-export declare const envGetRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.get">;
+/** Get a single context by ID. */
+export declare const contextGetRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.get">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1846,12 +2085,12 @@ export declare const envGetRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>;
-declare const envGetResponseSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.get.response">;
+declare const contextGetResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.get.response">;
     requestId: z.ZodString;
-    environment: z.ZodOptional<z.ZodObject<{
+    context: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
@@ -1862,8 +2101,8 @@ declare const envGetResponseSchema: z.ZodObject<{
         branchRestrictions: z.ZodNullable<z.ZodArray<z.ZodString>>;
         concurrencyLimit: z.ZodNullable<z.ZodNumber>;
         concurrencyStrategy: z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>;
         requiredReviewers: z.ZodNullable<z.ZodNumber>;
         waitTimerSeconds: z.ZodNullable<z.ZodNumber>;
@@ -1875,9 +2114,9 @@ declare const envGetResponseSchema: z.ZodObject<{
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-/** Create a new environment. */
-export declare const envCreateRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.create">;
+/** Create a new context. */
+export declare const contextCreateRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.create">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1906,7 +2145,7 @@ export declare const envCreateRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     name: z.ZodString;
-    envType: z.ZodEnum<{
+    contextType: z.ZodEnum<{
         fixed: "fixed";
         glob: "glob";
     }>;
@@ -1914,17 +2153,17 @@ export declare const envCreateRequestSchema: z.ZodObject<{
     branchRestrictions: z.ZodOptional<z.ZodArray<z.ZodString>>;
     concurrencyLimit: z.ZodOptional<z.ZodNumber>;
     concurrencyStrategy: z.ZodOptional<z.ZodEnum<{
-        queue: "queue";
         "cancel-pending": "cancel-pending";
+        queue: "queue";
     }>>;
     requiredReviewers: z.ZodOptional<z.ZodNumber>;
     waitTimerSeconds: z.ZodOptional<z.ZodNumber>;
     holdExpirySeconds: z.ZodOptional<z.ZodNumber>;
     enabled: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
-/** Update an existing environment. */
-export declare const envUpdateRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.update">;
+/** Update an existing context. */
+export declare const contextUpdateRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.update">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -1952,10 +2191,10 @@ export declare const envUpdateRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     updates: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
-        envType: z.ZodOptional<z.ZodEnum<{
+        contextType: z.ZodOptional<z.ZodEnum<{
             fixed: "fixed";
             glob: "glob";
         }>>;
@@ -1963,8 +2202,8 @@ export declare const envUpdateRequestSchema: z.ZodObject<{
         branchRestrictions: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         concurrencyLimit: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         concurrencyStrategy: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>>;
         requiredReviewers: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         waitTimerSeconds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -1972,9 +2211,9 @@ export declare const envUpdateRequestSchema: z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
 }, z.core.$strip>;
-/** Set an environment's test-run access flag (allowLocalExecution). */
-export declare const envTestAccessSetRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.test_access.set">;
+/** Set an context's test-run access flag (allowLocalExecution). */
+export declare const contextTestAccessSetRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.test_access.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2002,12 +2241,12 @@ export declare const envTestAccessSetRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     allowLocalExecution: z.ZodBoolean;
 }, z.core.$strip>;
-/** Delete an environment. */
-export declare const envDeleteRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.delete">;
+/** Delete an context. */
+export declare const contextDeleteRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2035,25 +2274,25 @@ export declare const envDeleteRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>;
 /**
- * Machine-readable codes for environment-delete rejections.
+ * Machine-readable codes for context-delete rejections.
  *
  * Three-category response taxonomy on dashboard responses, each mapped to a
  * distinct HTTP status by the Platform proxy: a bare free-text `error` is the
- * human message and maps to 400; a missing result (e.g. environment not found)
+ * human message and maps to 400; a missing result (e.g. context not found)
  * maps to 404; an `errorCode` flags a specific business rejection mapped to a
  * non-400/404 status — here `pending_held_runs` → 409. The sibling precedent is
  * the rerun response's `errorCode` (`runArchivedNotRerunnable` → 410) above.
  */
-export declare const EnvDeleteErrorCode: z.ZodEnum<{
+export declare const ContextDeleteErrorCode: z.ZodEnum<{
     pending_held_runs: "pending_held_runs";
 }>;
-export type EnvDeleteErrorCode = z.infer<typeof EnvDeleteErrorCode>;
-/** List variables for an environment. */
-export declare const envVarsListRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.list">;
+export type ContextDeleteErrorCode = z.infer<typeof ContextDeleteErrorCode>;
+/** List variables for an context. */
+export declare const contextVarsListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.variables.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2081,10 +2320,10 @@ export declare const envVarsListRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>;
-declare const envVarsListResponseSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.list.response">;
+declare const contextVarsListResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.variables.list.response">;
     requestId: z.ZodString;
     variables: z.ZodOptional<z.ZodArray<z.ZodObject<{
         key: z.ZodString;
@@ -2093,9 +2332,17 @@ declare const envVarsListResponseSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-/** Set (create or update) a variable on an environment. */
-export declare const envVarSetRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.set">;
+/**
+ * Set (create or update) a variable on an context.
+ *
+ * Under the `permissive` posture the browser sends the plaintext `value`.
+ * Under the `encrypted` posture it sends a `sealed` envelope instead (the value
+ * sealed to the orchestrator's X25519 key in the browser). Exactly one of
+ * `value` / `sealed` is present; `value` stays optional for backward
+ * compatibility with older dashboards that only ever send plaintext.
+ */
+export declare const contextVarSetRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.variables.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2123,14 +2370,19 @@ export declare const envVarSetRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
     locked: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
-/** Delete a variable from an environment. */
-export declare const envVarDeleteRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.delete">;
+/** Delete a variable from an context. */
+export declare const contextVarDeleteRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.variables.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2158,12 +2410,12 @@ export declare const envVarDeleteRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>;
-/** List source overrides for an environment + routing key. */
-export declare const envSourceOverridesListRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.list">;
+/** List source overrides for an context + routing key. */
+export declare const contextSourceOverridesListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2191,12 +2443,12 @@ export declare const envSourceOverridesListRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
 }, z.core.$strip>;
 /** Set a source override variable. */
-export declare const envSourceOverrideSetRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.set">;
+export declare const contextSourceOverrideSetRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2224,14 +2476,14 @@ export declare const envSourceOverrideSetRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
     key: z.ZodString;
     value: z.ZodString;
 }, z.core.$strip>;
 /** Delete a source override variable. */
-export declare const envSourceOverrideDeleteRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.delete">;
+export declare const contextSourceOverrideDeleteRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2259,23 +2511,23 @@ export declare const envSourceOverrideDeleteRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>;
 /**
- * A scope→environment binding with its host selector. `hostPattern` is the host
+ * A scope→context binding with its host selector. `hostPattern` is the host
  * the binding applies to (`'**'` = all hosts); exact / glob / regex over a
  * fan-out child's agentId / hostname / labels.
  */
-export declare const envBindingEntrySchema: z.ZodObject<{
+export declare const contextBindingEntrySchema: z.ZodObject<{
     scopePattern: z.ZodString;
     hostPattern: z.ZodString;
 }, z.core.$strip>;
-export type EnvBindingEntry = z.infer<typeof envBindingEntrySchema>;
-/** List bindings for an environment. */
-export declare const envBindingsListRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.list">;
+export type ContextBindingEntry = z.infer<typeof contextBindingEntrySchema>;
+/** List bindings for an context. */
+export declare const contextBindingsListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.bindings.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2303,11 +2555,11 @@ export declare const envBindingsListRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>;
-/** Set bindings (scope + host patterns) for an environment. */
-export declare const envBindingsSetRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.set">;
+/** Set bindings (scope + host patterns) for an context. */
+export declare const contextBindingsSetRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.bindings.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2335,15 +2587,15 @@ export declare const envBindingsSetRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     bindings: z.ZodArray<z.ZodObject<{
         scopePattern: z.ZodString;
         hostPattern: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /** List all scoped secrets for the org. */
-export declare const envSecretsListRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.list">;
+export declare const contextSecretsListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.secrets.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2372,9 +2624,17 @@ export declare const envSecretsListRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
 }, z.core.$strip>;
-/** Set (create or update) a scoped secret. */
-export declare const envSecretSetRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.set">;
+/**
+ * Set (create or update) a scoped secret.
+ *
+ * Under the `permissive` posture the browser sends the plaintext `value`.
+ * Under the `encrypted` posture it sends a `sealed` envelope instead (the value
+ * sealed to the orchestrator's X25519 key in the browser). Exactly one of
+ * `value` / `sealed` is present; `value` stays optional for backward
+ * compatibility with older dashboards that only ever send plaintext.
+ */
+export declare const contextSecretSetRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.secrets.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2404,11 +2664,16 @@ export declare const envSecretSetRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** Delete a scoped secret. */
-export declare const envSecretDeleteRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.delete">;
+export declare const contextSecretDeleteRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.secrets.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2440,8 +2705,8 @@ export declare const envSecretDeleteRequestSchema: z.ZodObject<{
     key: z.ZodString;
 }, z.core.$strip>;
 /** Create an empty scope. */
-export declare const envSecretScopeCreateRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.create">;
+export declare const contextSecretScopeCreateRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.create">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2471,9 +2736,9 @@ export declare const envSecretScopeCreateRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
 }, z.core.$strip>;
-/** Rename a scope -- also updates all environment bindings referencing old scope. */
-export declare const envSecretScopeRenameRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.rename">;
+/** Rename a scope -- also updates all context bindings referencing old scope. */
+export declare const contextSecretScopeRenameRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.rename">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2504,9 +2769,9 @@ export declare const envSecretScopeRenameRequestSchema: z.ZodObject<{
     oldScope: z.ZodString;
     newScope: z.ZodString;
 }, z.core.$strip>;
-/** Delete a scope and all its secrets. Also removes environment bindings referencing this scope. */
-export declare const envSecretScopeDeleteRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.delete">;
+/** Delete a scope and all its secrets. Also removes context bindings referencing this scope. */
+export declare const contextSecretScopeDeleteRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2536,9 +2801,9 @@ export declare const envSecretScopeDeleteRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
 }, z.core.$strip>;
-/** Fetch runs that targeted a specific environment, keyed by environment id. */
-export declare const envHistoryRequestSchema: z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.history">;
+/** Fetch runs that targeted a specific context, keyed by context id. */
+export declare const contextHistoryRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.history">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -2566,21 +2831,43 @@ export declare const envHistoryRequestSchema: z.ZodObject<{
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     limit: z.ZodOptional<z.ZodNumber>;
     offset: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
-/** Status values for held runs (approval queue). */
-export declare const HeldRunStatus: z.ZodEnum<{
-    pending: "pending";
-    approved: "approved";
-    rejected: "rejected";
-    expired: "expired";
-}>;
-export type HeldRunStatus = z.infer<typeof HeldRunStatus>;
+export declare const contextHistoryResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.history.response">;
+    requestId: z.ZodString;
+    runs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        runId: z.ZodString;
+        workflowName: z.ZodString;
+        status: z.ZodString;
+        branch: z.ZodNullable<z.ZodString>;
+        commitSha: z.ZodNullable<z.ZodString>;
+        startedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
+        completedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
+        context: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    hasMore: z.ZodOptional<z.ZodBoolean>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Known held-run statuses — the vocabulary the dashboard renders a labelled
+ * badge and a queue tab for, and the vocabulary a client may filter the list
+ * by. Defined in `context/held-run-status.ts` and re-exported here so the
+ * domain types and the wire schema cannot carry divergent copies; a parity test
+ * in the orchestrator asserts these options match every status it persists.
+ *
+ * This is deliberately NOT the wire type of the response field:
+ * `held_runs.status` is a plain-text column owned by a customer-deployed
+ * orchestrator, so the response carries `z.string()` (see
+ * `heldRunsListResponseSchema`) and this enum is what the UI switches on.
+ */
+export { HeldRunStatus } from '../../context/held-run-status.js';
 /** Queue type for held runs. */
 export declare const HeldRunQueueType: z.ZodEnum<{
-    environment: "environment";
+    context: "context";
     security: "security";
 }>;
 export type HeldRunQueueType = z.infer<typeof HeldRunQueueType>;
@@ -2615,16 +2902,18 @@ export declare const heldRunsListRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     status: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         approved: "approved";
-        rejected: "rejected";
         expired: "expired";
+        pending: "pending";
+        rejected: "rejected";
+        released: "released";
     }>>;
     queueType: z.ZodOptional<z.ZodEnum<{
-        environment: "environment";
+        context: "context";
         security: "security";
     }>>;
     runId: z.ZodOptional<z.ZodString>;
+    heldRunId: z.ZodOptional<z.ZodString>;
     orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 declare const heldRunsListResponseSchema: z.ZodObject<{
@@ -2633,19 +2922,11 @@ declare const heldRunsListResponseSchema: z.ZodObject<{
     heldRuns: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         runId: z.ZodString;
-        environmentId: z.ZodNullable<z.ZodString>;
-        environmentName: z.ZodNullable<z.ZodString>;
+        contextId: z.ZodNullable<z.ZodString>;
+        contextName: z.ZodNullable<z.ZodString>;
         holdType: z.ZodString;
-        queueType: z.ZodEnum<{
-            environment: "environment";
-            security: "security";
-        }>;
-        status: z.ZodEnum<{
-            pending: "pending";
-            approved: "approved";
-            rejected: "rejected";
-            expired: "expired";
-        }>;
+        queueType: z.ZodString;
+        status: z.ZodString;
         requestedAt: z.ZodCoercedString<unknown>;
         resolvedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
         resolvedBy: z.ZodNullable<z.ZodString>;
@@ -2655,9 +2936,9 @@ declare const heldRunsListResponseSchema: z.ZodObject<{
         trustTier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         jobId: z.ZodOptional<z.ZodString>;
         holdScope: z.ZodOptional<z.ZodEnum<{
-            workflow: "workflow";
             job: "job";
             step: "step";
+            workflow: "workflow";
         }>>;
         stepIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         requirement: z.ZodOptional<z.ZodNullable<z.ZodObject<{
@@ -2798,9 +3079,9 @@ export declare const fleetPinnedRunSchema: z.ZodObject<{
 export type FleetPinnedRun = z.infer<typeof fleetPinnedRunSchema>;
 /** How a runsOnAll fan-out would treat one host, given its current reachability. */
 export declare const FleetHostDisposition: z.ZodEnum<{
+    "skipped-ephemeral": "skipped-ephemeral";
     target: "target";
     "unreachable-durable": "unreachable-durable";
-    "skipped-ephemeral": "skipped-ephemeral";
 }>;
 export type FleetHostDisposition = z.infer<typeof FleetHostDisposition>;
 /** A host matched by a runsOnAll preview, plus how the fan-out would treat it. */
@@ -2813,20 +3094,20 @@ export declare const fleetPreviewHostSchema: z.ZodObject<{
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>;
     disposition: z.ZodEnum<{
+        "skipped-ephemeral": "skipped-ephemeral";
         target: "target";
         "unreachable-durable": "unreachable-durable";
-        "skipped-ephemeral": "skipped-ephemeral";
     }>;
 }, z.core.$strip>;
 export type FleetPreviewHost = z.infer<typeof fleetPreviewHostSchema>;
@@ -2933,13 +3214,13 @@ export declare const dashboardFleetHostsResponseSchema: z.ZodObject<{
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -2955,13 +3236,13 @@ export declare const dashboardFleetHostResponseSchema: z.ZodObject<{
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -2984,26 +3265,26 @@ export declare const dashboardFleetPreviewResponseSchema: z.ZodObject<{
             platform: z.ZodNullable<z.ZodString>;
             arch: z.ZodNullable<z.ZodString>;
             lifecycleClass: z.ZodEnum<{
-                static: "static";
                 ephemeral: "ephemeral";
+                static: "static";
             }>;
             status: z.ZodEnum<{
                 ready: "ready";
-                unreachable: "unreachable";
                 stale: "stale";
+                unreachable: "unreachable";
             }>;
             lastSeen: z.ZodString;
         }, z.core.$strip>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
     onUnreachable: z.ZodEnum<{
+        fail: "fail";
         hold: "hold";
         skip: "skip";
-        fail: "fail";
     }>;
     estimatedChildCount: z.ZodNumber;
 }, z.core.$strip>;
@@ -3051,14 +3332,14 @@ export declare const fleetHostWorkflowSchema: z.ZodObject<{
     repoIdentifier: z.ZodString;
     sourceFile: z.ZodNullable<z.ZodString>;
     onUnreachable: z.ZodEnum<{
+        fail: "fail";
         hold: "hold";
         skip: "skip";
-        fail: "fail";
     }>;
     disposition: z.ZodEnum<{
+        "skipped-ephemeral": "skipped-ephemeral";
         target: "target";
         "unreachable-durable": "unreachable-durable";
-        "skipped-ephemeral": "skipped-ephemeral";
     }>;
 }, z.core.$strip>;
 export type FleetHostWorkflow = z.infer<typeof fleetHostWorkflowSchema>;
@@ -3070,14 +3351,14 @@ export declare const dashboardFleetWorkflowsForHostResponseSchema: z.ZodObject<{
         repoIdentifier: z.ZodString;
         sourceFile: z.ZodNullable<z.ZodString>;
         onUnreachable: z.ZodEnum<{
+            fail: "fail";
             hold: "hold";
             skip: "skip";
-            fail: "fail";
         }>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
@@ -3208,8 +3489,8 @@ declare const diagnosticsPeerSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
-            pass: "pass";
             fail: "fail";
+            pass: "pass";
             warn: "warn";
         }>;
         message: z.ZodNullable<z.ZodString>;
@@ -3247,8 +3528,8 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         runningAsUser: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         runningAsUid: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         raftRole: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            follower: "follower";
             candidate: "candidate";
+            follower: "follower";
             leader: "leader";
         }>>>;
         raftTerm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -3282,8 +3563,8 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
     scalers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         type: z.ZodEnum<{
-            container: "container";
             "bare-metal": "bare-metal";
+            container: "container";
             firecracker: "firecracker";
             kubernetes: "kubernetes";
         }>;
@@ -3333,8 +3614,8 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                pass: "pass";
                 fail: "fail";
+                pass: "pass";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -3570,10 +3851,10 @@ export declare const registrationItemSchema: z.ZodObject<{
         routingKey: z.ZodString;
         name: z.ZodNullable<z.ZodString>;
         subtype: z.ZodNullable<z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>>;
         provider: z.ZodString;
     }, z.core.$strip>>>;
@@ -3600,10 +3881,10 @@ export declare const registrationsListResponseSchema: z.ZodObject<{
             routingKey: z.ZodString;
             name: z.ZodNullable<z.ZodString>;
             subtype: z.ZodNullable<z.ZodEnum<{
-                github_app: "github_app";
                 generic_webhook: "generic_webhook";
-                universal_git: "universal_git";
+                github_app: "github_app";
                 local: "local";
+                universal_git: "universal_git";
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>>;
@@ -3655,10 +3936,10 @@ export declare const backendItemSchema: z.ZodObject<{
     syncIntervalMs: z.ZodNumber;
     enabled: z.ZodBoolean;
     healthStatus: z.ZodEnum<{
+        degraded: "degraded";
+        healthy: "healthy";
         unknown: "unknown";
         unreachable: "unreachable";
-        healthy: "healthy";
-        degraded: "degraded";
     }>;
     scopeCount: z.ZodNumber;
     lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -3682,10 +3963,10 @@ export declare const backendsListResponseSchema: z.ZodObject<{
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
+            degraded: "degraded";
+            healthy: "healthy";
             unknown: "unknown";
             unreachable: "unreachable";
-            healthy: "healthy";
-            degraded: "degraded";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -3743,10 +4024,10 @@ export declare const backendGetResponseSchema: z.ZodObject<{
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
+            degraded: "degraded";
+            healthy: "healthy";
             unknown: "unknown";
             unreachable: "unreachable";
-            healthy: "healthy";
-            degraded: "degraded";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -3877,11 +4158,11 @@ export declare const backendTestResponseSchema: z.ZodObject<{
 }, z.core.$strip>;
 /** Enum of the five test-relay control message types (request side). */
 export declare const TestRelayType: z.ZodEnum<{
-    "test.relay.uploads.init": "test.relay.uploads.init";
-    "test.relay.trigger": "test.relay.trigger";
-    "test.relay.run.status": "test.relay.run.status";
-    "test.relay.run.logs": "test.relay.run.logs";
     "test.relay.cancel": "test.relay.cancel";
+    "test.relay.run.logs": "test.relay.run.logs";
+    "test.relay.run.status": "test.relay.run.status";
+    "test.relay.trigger": "test.relay.trigger";
+    "test.relay.uploads.init": "test.relay.uploads.init";
 }>;
 export type TestRelayType = z.infer<typeof TestRelayType>;
 /** Request an external presigned upload URL for the overlay tarball. */
@@ -4014,8 +4295,8 @@ export declare const testRelayTriggerResponseSchema: z.ZodObject<{
     requestId: z.ZodString;
     runId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        rejected: "rejected";
         accepted: "accepted";
+        rejected: "rejected";
     }>>;
     reason: z.ZodOptional<z.ZodString>;
     jobIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -4222,6 +4503,36 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     runId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs">;
     requestId: z.ZodString;
@@ -4321,10 +4632,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         digest: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         status: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         repository: z.ZodOptional<z.ZodString>;
         workflow: z.ZodOptional<z.ZodString>;
@@ -4392,6 +4703,36 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     runId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.runs.list">;
     requestId: z.ZodString;
@@ -4638,7 +4979,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     runId: z.ZodString;
     jobId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.list">;
+    type: z.ZodLiteral<"dashboard.contexts.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4669,7 +5010,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     includeSecrets: z.ZodOptional<z.ZodBoolean>;
     orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.get">;
+    type: z.ZodLiteral<"dashboard.contexts.get">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4697,9 +5038,9 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.create">;
+    type: z.ZodLiteral<"dashboard.contexts.create">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4728,7 +5069,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     name: z.ZodString;
-    envType: z.ZodEnum<{
+    contextType: z.ZodEnum<{
         fixed: "fixed";
         glob: "glob";
     }>;
@@ -4736,15 +5077,15 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     branchRestrictions: z.ZodOptional<z.ZodArray<z.ZodString>>;
     concurrencyLimit: z.ZodOptional<z.ZodNumber>;
     concurrencyStrategy: z.ZodOptional<z.ZodEnum<{
-        queue: "queue";
         "cancel-pending": "cancel-pending";
+        queue: "queue";
     }>>;
     requiredReviewers: z.ZodOptional<z.ZodNumber>;
     waitTimerSeconds: z.ZodOptional<z.ZodNumber>;
     holdExpirySeconds: z.ZodOptional<z.ZodNumber>;
     enabled: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.update">;
+    type: z.ZodLiteral<"dashboard.contexts.update">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4772,10 +5113,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     updates: z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
-        envType: z.ZodOptional<z.ZodEnum<{
+        contextType: z.ZodOptional<z.ZodEnum<{
             fixed: "fixed";
             glob: "glob";
         }>>;
@@ -4783,8 +5124,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         branchRestrictions: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         concurrencyLimit: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         concurrencyStrategy: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>>;
         requiredReviewers: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         waitTimerSeconds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -4792,7 +5133,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.test_access.set">;
+    type: z.ZodLiteral<"dashboard.contexts.test_access.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4820,10 +5161,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     allowLocalExecution: z.ZodBoolean;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4851,9 +5192,9 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.list">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4881,9 +5222,9 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.set">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4911,12 +5252,17 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
     locked: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4944,10 +5290,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.list">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -4975,10 +5321,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.set">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5006,12 +5352,12 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
     key: z.ZodString;
     value: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5039,11 +5385,11 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     routingKey: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.list">;
+    type: z.ZodLiteral<"dashboard.contexts.bindings.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5071,9 +5417,9 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.set">;
+    type: z.ZodLiteral<"dashboard.contexts.bindings.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5101,13 +5447,13 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     bindings: z.ZodArray<z.ZodObject<{
         scopePattern: z.ZodString;
         hostPattern: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.list">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.list">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5136,7 +5482,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.set">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.set">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5166,9 +5512,14 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5199,7 +5550,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     scope: z.ZodString;
     key: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.create">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.create">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5229,7 +5580,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.rename">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.rename">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5260,7 +5611,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     oldScope: z.ZodString;
     newScope: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.delete">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.delete">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5290,7 +5641,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.history">;
+    type: z.ZodLiteral<"dashboard.contexts.history">;
     requestId: z.ZodString;
     actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
         type: z.ZodLiteral<"user">;
@@ -5318,7 +5669,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodLiteral<"system">;
         component: z.ZodString;
     }, z.core.$strip>], "type">;
-    environmentId: z.ZodString;
+    contextId: z.ZodString;
     limit: z.ZodOptional<z.ZodNumber>;
     offset: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
@@ -5351,16 +5702,18 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     status: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         approved: "approved";
-        rejected: "rejected";
         expired: "expired";
+        pending: "pending";
+        rejected: "rejected";
+        released: "released";
     }>>;
     queueType: z.ZodOptional<z.ZodEnum<{
-        environment: "environment";
+        context: "context";
         security: "security";
     }>>;
     runId: z.ZodOptional<z.ZodString>;
+    heldRunId: z.ZodOptional<z.ZodString>;
     orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.held-runs.approve">;
@@ -5971,18 +6324,50 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     routingKey: z.ZodOptional<z.ZodString>;
     event: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        failed: "failed";
-        received: "received";
-        processed: "processed";
         duplicate: "duplicate";
-        lockfile_missing: "lockfile_missing";
+        failed: "failed";
         lockfile_corrupt: "lockfile_corrupt";
+        lockfile_missing: "lockfile_missing";
+        processed: "processed";
+        received: "received";
     }>>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
     toTimestamp: z.ZodOptional<z.ZodString>;
     deliveryId: z.ZodOptional<z.ZodString>;
     limit: z.ZodOptional<z.ZodNumber>;
     cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    fromTimestamp: z.ZodString;
+    toTimestamp: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.event-log.detail">;
     requestId: z.ZodString;
@@ -6273,116 +6658,126 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     orgId: z.ZodString;
     actorType: z.ZodOptional<z.ZodEnum<{
-        user: "user";
         api_key: "api_key";
-        service_account: "service_account";
         platform_operator: "platform_operator";
+        service_account: "service_account";
         system: "system";
+        user: "user";
     }>>;
     actorId: z.ZodOptional<z.ZodString>;
     action: z.ZodOptional<z.ZodEnum<{
-        "event_dlq.retry": "event_dlq.retry";
-        "event_dlq.discard": "event_dlq.discard";
-        "registration.disable": "registration.disable";
-        "registration.delete": "registration.delete";
-        "global_workflows.update": "global_workflows.update";
-        "fleet.host.declare": "fleet.host.declare";
-        "fleet.host.remove": "fleet.host.remove";
-        "run.detail.read": "run.detail.read";
-        "run.structured.read": "run.structured.read";
-        "runs.list.read": "runs.list.read";
-        "runs.filters.read": "runs.filters.read";
-        "sources.list.read": "sources.list.read";
-        "run.payload.read": "run.payload.read";
-        "run.orch_logs.read": "run.orch_logs.read";
-        "step.logs.read": "step.logs.read";
+        "access_log.list.read": "access_log.list.read";
+        archive_chunk: "archive_chunk";
+        "artifacts.read": "artifacts.read";
+        "attestation.retry": "attestation.retry";
         "attestations.read": "attestations.read";
-        "run.cancel": "run.cancel";
-        "run.rerun": "run.rerun";
-        "run.manual_schedule": "run.manual_schedule";
-        "run.trigger": "run.trigger";
-        "job.cancel": "job.cancel";
-        "event_log.list.read": "event_log.list.read";
+        "backend.get.read": "backend.get.read";
+        "backend.list.read": "backend.list.read";
+        "backend.sync": "backend.sync";
+        "backend.sync.one": "backend.sync.one";
+        "backend.test": "backend.test";
+        "cluster_name.update": "cluster_name.update";
+        "context.create": "context.create";
+        "context.delete": "context.delete";
+        "context.get.read": "context.get.read";
+        "context.history.read": "context.history.read";
+        "context.list.read": "context.list.read";
+        "context.update": "context.update";
+        "context_binding.list.read": "context_binding.list.read";
+        "context_binding.set": "context_binding.set";
+        "context_var.delete": "context_var.delete";
+        "context_var.list.read": "context_var.list.read";
+        "context_var.set": "context_var.set";
+        "db.create_readonly_user": "db.create_readonly_user";
+        "db.create_role": "db.create_role";
+        "db.ensure": "db.ensure";
+        "db.fresh": "db.fresh";
+        "db.refresh_collation_version": "db.refresh_collation_version";
+        "db.reindex": "db.reindex";
+        "diagnostics.read": "diagnostics.read";
+        "event_dlq.discard": "event_dlq.discard";
+        "event_dlq.list.read": "event_dlq.list.read";
+        "event_dlq.retry": "event_dlq.retry";
         "event_log.detail.read": "event_log.detail.read";
+        "event_log.list.read": "event_log.list.read";
         "event_log.payload.read": "event_log.payload.read";
-        "environment.list.read": "environment.list.read";
-        "environment.get.read": "environment.get.read";
-        "environment.create": "environment.create";
-        "environment.update": "environment.update";
-        "environment.delete": "environment.delete";
-        "env_var.list.read": "env_var.list.read";
-        "env_var.set": "env_var.set";
-        "env_var.delete": "env_var.delete";
-        "source_override.list.read": "source_override.list.read";
-        "source_override.set": "source_override.set";
-        "source_override.delete": "source_override.delete";
-        "env_binding.list.read": "env_binding.list.read";
-        "env_binding.set": "env_binding.set";
-        "secret.list.read": "secret.list.read";
-        "secret.set": "secret.set";
-        "secret.delete": "secret.delete";
-        "secret.reveal": "secret.reveal";
-        "secret_scope.create": "secret_scope.create";
-        "secret_scope.rename": "secret_scope.rename";
-        "secret_scope.delete": "secret_scope.delete";
-        "environment.history.read": "environment.history.read";
-        "held_run.list.read": "held_run.list.read";
+        "fleet.host.declare": "fleet.host.declare";
+        "fleet.host.remove": "fleet.host.remove";
+        "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+        "fleet.pre_boot.send": "fleet.pre_boot.send";
+        "fleet.read": "fleet.read";
+        "global_workflows.get.read": "global_workflows.get.read";
+        "global_workflows.update": "global_workflows.update";
         "held_run.approve": "held_run.approve";
         "held_run.auto_approve": "held_run.auto_approve";
+        "held_run.expire": "held_run.expire";
+        "held_run.list.read": "held_run.list.read";
         "held_run.reject": "held_run.reject";
         "held_run.request": "held_run.request";
-        "held_run.expire": "held_run.expire";
-        "registration.list.read": "registration.list.read";
-        "diagnostics.read": "diagnostics.read";
-        "scaler.capacity.read": "scaler.capacity.read";
-        "scaler.agents.read": "scaler.agents.read";
-        "fleet.read": "fleet.read";
-        "fleet.init_runner.bringup": "fleet.init_runner.bringup";
-        "fleet.pre_boot.send": "fleet.pre_boot.send";
-        "backend.list.read": "backend.list.read";
-        "backend.get.read": "backend.get.read";
-        "backend.sync": "backend.sync";
-        "backend.sync.one": "backend.sync.one";
-        "backend.test": "backend.test";
-        "global_workflows.get.read": "global_workflows.get.read";
+        "job.cancel": "job.cancel";
         "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
-        "cluster_name.update": "cluster_name.update";
-        "access_log.list.read": "access_log.list.read";
-        "event_dlq.list.read": "event_dlq.list.read";
-        archive_chunk: "archive_chunk";
         purge_chunk: "purge_chunk";
+        "registration.delete": "registration.delete";
+        "registration.disable": "registration.disable";
+        "registration.list.read": "registration.list.read";
+        "run.cancel": "run.cancel";
+        "run.detail.read": "run.detail.read";
+        "run.manual_schedule": "run.manual_schedule";
+        "run.orch_logs.read": "run.orch_logs.read";
+        "run.payload.read": "run.payload.read";
+        "run.rerun": "run.rerun";
+        "run.structured.read": "run.structured.read";
+        "run.trigger": "run.trigger";
+        "runs.filters.read": "runs.filters.read";
+        "runs.list.read": "runs.list.read";
+        "scaler.agents.read": "scaler.agents.read";
+        "scaler.capacity.read": "scaler.capacity.read";
+        "secret.delete": "secret.delete";
+        "secret.list.read": "secret.list.read";
+        "secret.reveal": "secret.reveal";
+        "secret.set": "secret.set";
+        "secret_scope.create": "secret_scope.create";
+        "secret_scope.delete": "secret_scope.delete";
+        "secret_scope.rename": "secret_scope.rename";
+        "source_override.delete": "source_override.delete";
+        "source_override.list.read": "source_override.list.read";
+        "source_override.set": "source_override.set";
+        "sources.list.read": "sources.list.read";
+        "step.logs.read": "step.logs.read";
+        "trust_policy.updated": "trust_policy.updated";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
+        admin_cli: "admin_cli";
+        admin_http: "admin_http";
         agent: "agent";
         platform_proxy: "platform_proxy";
-        admin_http: "admin_http";
-        admin_cli: "admin_cli";
     }>>;
     outcome: z.ZodOptional<z.ZodEnum<{
-        error: "error";
         allowed: "allowed";
         denied: "denied";
+        error: "error";
     }>>;
     targetType: z.ZodOptional<z.ZodEnum<{
-        job: "job";
-        step: "step";
-        run: "run";
-        environment: "environment";
-        payload: "payload";
-        event_log: "event_log";
-        event_log_payload: "event_log_payload";
-        secret_scope: "secret_scope";
-        registration: "registration";
+        access_log: "access_log";
+        attestation: "attestation";
         backend: "backend";
+        cluster_meta: "cluster_meta";
+        context: "context";
+        database: "database";
         diagnostics: "diagnostics";
-        scaler: "scaler";
+        event_dlq: "event_dlq";
+        event_log: "event_log";
+        event_log_payload: "event_log_payload";
         fleet: "fleet";
         held_run: "held_run";
-        access_log: "access_log";
-        event_dlq: "event_dlq";
+        job: "job";
         org_settings: "org_settings";
-        cluster_meta: "cluster_meta";
-        attestation: "attestation";
+        payload: "payload";
+        registration: "registration";
+        run: "run";
+        scaler: "scaler";
+        secret_scope: "secret_scope";
+        step: "step";
     }>>;
     targetId: z.ZodOptional<z.ZodString>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
@@ -6611,8 +7006,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         errorMessage: z.ZodNullable<z.ZodString>;
         runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-        environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-        skippedEnvironments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
@@ -6622,14 +7017,17 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 run: "run";
             }>;
             category: z.ZodEnum<{
-                secret_resolution: "secret_resolution";
-                install_secrets: "install_secrets";
-                lock_resolution: "lock_resolution";
+                approval_misconfig: "approval_misconfig";
                 build_coordination: "build_coordination";
-                environment_rules: "environment_rules";
+                context_rules: "context_rules";
                 dynamic_eval: "dynamic_eval";
-                no_agent: "no_agent";
+                install_secrets: "install_secrets";
+                lock_resolution: "lock_resolution";
                 matrix_expansion: "matrix_expansion";
+                no_agent: "no_agent";
+                sandbox_denied: "sandbox_denied";
+                secret_resolution: "secret_resolution";
+                trust_policy: "trust_policy";
             }>;
             message: z.ZodString;
             jobName: z.ZodOptional<z.ZodString>;
@@ -6637,17 +7035,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
             upstreamName: z.ZodString;
             runOn: z.ZodArray<z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>>;
         }, z.core.$strip>>>>;
         steps: z.ZodArray<z.ZodObject<{
@@ -6662,30 +7061,30 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             stepType: z.ZodOptional<z.ZodString>;
             secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
             checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                skipped: "skipped";
                 applied: "applied";
                 declined: "declined";
                 "dry-run": "dry-run";
                 no_check: "no_check";
+                skipped: "skipped";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                sequential: "sequential";
                 "parallel-child": "parallel-child";
                 "parallel-group": "parallel-group";
+                sequential: "sequential";
             }>>>;
             groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
-            head: "head";
             base: "base";
+            head: "head";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
@@ -6695,14 +7094,17 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -6718,13 +7120,13 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             value: z.ZodString;
         }, z.core.$strip>;
         status: z.ZodEnum<{
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            failed: "failed";
             held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodObject<{
@@ -6741,21 +7143,21 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         completedAt: z.ZodNullable<z.ZodString>;
         durationMs: z.ZodNullable<z.ZodNumber>;
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
             value: z.ZodString;
         }, z.core.$strip>>;
         failureCategory: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             cancelled: "cancelled";
+            infra: "infra";
             init_failure: "init_failure";
-            timed_out: "timed_out";
             step_failed: "step_failed";
-            infra: "infra";
+            timed_out: "timed_out";
+            unknown: "unknown";
         }>>;
         failureReason: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
@@ -6770,17 +7172,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 value: z.ZodString;
             }, z.core.$strip>;
             status: z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>;
             startedAt: z.ZodNullable<z.ZodString>;
             completedAt: z.ZodNullable<z.ZodString>;
@@ -6796,14 +7199,17 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                     run: "run";
                 }>;
                 category: z.ZodEnum<{
-                    secret_resolution: "secret_resolution";
-                    install_secrets: "install_secrets";
-                    lock_resolution: "lock_resolution";
+                    approval_misconfig: "approval_misconfig";
                     build_coordination: "build_coordination";
-                    environment_rules: "environment_rules";
+                    context_rules: "context_rules";
                     dynamic_eval: "dynamic_eval";
-                    no_agent: "no_agent";
+                    install_secrets: "install_secrets";
+                    lock_resolution: "lock_resolution";
                     matrix_expansion: "matrix_expansion";
+                    no_agent: "no_agent";
+                    sandbox_denied: "sandbox_denied";
+                    secret_resolution: "secret_resolution";
+                    trust_policy: "trust_policy";
                 }>;
                 message: z.ZodObject<{
                     untrusted: z.ZodLiteral<true>;
@@ -6816,17 +7222,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                     value: z.ZodString;
                 }, z.core.$strip>;
                 runOn: z.ZodArray<z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
-                    pending: "pending";
-                    running: "running";
-                    failed: "failed";
                     cancelled: "cancelled";
                     cancelling: "cancelling";
+                    drift_dropped: "drift_dropped";
+                    failed: "failed";
+                    pending: "pending";
                     queued: "queued";
                     recovering: "recovering";
+                    running: "running";
+                    skipped: "skipped";
+                    success: "success";
                     timed_out_stale: "timed_out_stale";
-                    drift_dropped: "drift_dropped";
+                    unroutable: "unroutable";
                 }>>;
             }, z.core.$strip>>;
             outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -6841,12 +7248,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                     value: z.ZodString;
                 }, z.core.$strip>;
                 status: z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
+                    cancelled: "cancelled";
+                    failed: "failed";
                     pending: "pending";
                     running: "running";
-                    failed: "failed";
-                    cancelled: "cancelled";
+                    skipped: "skipped";
+                    success: "success";
                 }>;
                 exitCode: z.ZodNullable<z.ZodNumber>;
                 durationMs: z.ZodNullable<z.ZodNumber>;
@@ -6858,17 +7265,68 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 }, z.core.$strip>>;
                 stepType: z.ZodString;
                 checkOutcome: z.ZodNullable<z.ZodEnum<{
-                    skipped: "skipped";
                     applied: "applied";
                     declined: "declined";
                     "dry-run": "dry-run";
                     no_check: "no_check";
+                    skipped: "skipped";
                 }>>;
                 secretsAccessed: z.ZodArray<z.ZodString>;
             }, z.core.$strip>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state.response">;
+    requestId: z.ZodString;
+    run: z.ZodNullable<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            cancelling: "cancelling";
+            failed: "failed";
+            held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
+        }>;
+        routingKey: z.ZodOptional<z.ZodString>;
+        repoIdentifier: z.ZodOptional<z.ZodString>;
+        sha: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        triggerEvent: z.ZodOptional<z.ZodString>;
+        commitMessage: z.ZodOptional<z.ZodString>;
+        jobCount: z.ZodNumber;
+        startedAt: z.ZodNumber;
+        completedAt: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+        parentRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        originalRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredByAgentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        failureReason: z.ZodOptional<z.ZodString>;
+        failureClass: z.ZodOptional<z.ZodEnum<{
+            cancelled: "cancelled";
+            dead_orchestrator: "dead_orchestrator";
+            never_started: "never_started";
+            step_failure: "step_failure";
+            timed_out: "timed_out";
+        }>>;
+        jobs: z.ZodArray<z.ZodObject<{
+            jobId: z.ZodString;
+            jobName: z.ZodString;
+            status: z.ZodString;
+            startedAt: z.ZodOptional<z.ZodNumber>;
+            completedAt: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+            errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs.response">;
     requestId: z.ZodString;
@@ -6905,23 +7363,24 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.attestations.list.all.response">;
@@ -6937,21 +7396,21 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         mediaType: z.ZodString;
         createdAt: z.ZodString;
         verifyStatus: z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>;
         verifyReason: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         workflow: z.ZodNullable<z.ZodString>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
         pending: z.ZodOptional<z.ZodBoolean>;
@@ -6959,6 +7418,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     page: z.ZodNumber;
     pageSize: z.ZodNumber;
     total: z.ZodNumber;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.attestation.get.response">;
@@ -6989,20 +7449,20 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
@@ -7013,6 +7473,19 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     minted: z.ZodNumber;
     stillPending: z.ZodNumber;
     error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list.response">;
+    requestId: z.ZodString;
+    artifacts: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        jobId: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        sha256: z.ZodString;
+        createdAt: z.ZodString;
+        downloadUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    downloadUrlExpiresInSeconds: z.ZodOptional<z.ZodNumber>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.runs.list.response">;
     requestId: z.ZodString;
@@ -7030,7 +7503,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         triggerEvent: z.ZodOptional<z.ZodString>;
         commitMessage: z.ZodOptional<z.ZodString>;
         jobCount: z.ZodOptional<z.ZodNumber>;
-        environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
         startedAt: z.ZodOptional<z.ZodString>;
         completedAt: z.ZodOptional<z.ZodString>;
         durationMs: z.ZodOptional<z.ZodNumber>;
@@ -7073,10 +7546,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         name: z.ZodNullable<z.ZodString>;
         provider: z.ZodString;
         subtype: z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodString;
@@ -7098,6 +7571,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     type: z.ZodLiteral<"run.cancel.response">;
     requestId: z.ZodString;
     cancelledJobs: z.ZodOptional<z.ZodNumber>;
+    alreadyTerminal: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.payload.response">;
@@ -7111,9 +7585,9 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     totalLines: z.ZodNumber;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.list.response">;
+    type: z.ZodLiteral<"dashboard.contexts.list.response">;
     requestId: z.ZodString;
-    environments: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    contexts: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
@@ -7129,9 +7603,9 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.get.response">;
+    type: z.ZodLiteral<"dashboard.contexts.get.response">;
     requestId: z.ZodString;
-    environment: z.ZodOptional<z.ZodObject<{
+    context: z.ZodOptional<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
         type: z.ZodEnum<{
@@ -7142,8 +7616,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         branchRestrictions: z.ZodNullable<z.ZodArray<z.ZodString>>;
         concurrencyLimit: z.ZodNullable<z.ZodNumber>;
         concurrencyStrategy: z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>;
         requiredReviewers: z.ZodNullable<z.ZodNumber>;
         waitTimerSeconds: z.ZodNullable<z.ZodNumber>;
@@ -7155,27 +7629,27 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.create.response">;
+    type: z.ZodLiteral<"dashboard.contexts.create.response">;
     requestId: z.ZodString;
-    environmentId: z.ZodOptional<z.ZodString>;
+    contextId: z.ZodOptional<z.ZodString>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.update.response">;
+    type: z.ZodLiteral<"dashboard.contexts.update.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.test_access.set.response">;
+    type: z.ZodLiteral<"dashboard.contexts.test_access.set.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.delete.response">;
+    type: z.ZodLiteral<"dashboard.contexts.delete.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
     errorCode: z.ZodOptional<z.ZodEnum<{
         pending_held_runs: "pending_held_runs";
     }>>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.list.response">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.list.response">;
     requestId: z.ZodString;
     variables: z.ZodOptional<z.ZodArray<z.ZodObject<{
         key: z.ZodString;
@@ -7184,15 +7658,15 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.set.response">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.set.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.variables.delete.response">;
+    type: z.ZodLiteral<"dashboard.contexts.variables.delete.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.list.response">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.list.response">;
     requestId: z.ZodString;
     overrides: z.ZodOptional<z.ZodArray<z.ZodObject<{
         key: z.ZodString;
@@ -7200,15 +7674,15 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.set.response">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.set.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.source-overrides.delete.response">;
+    type: z.ZodLiteral<"dashboard.contexts.source-overrides.delete.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.list.response">;
+    type: z.ZodLiteral<"dashboard.contexts.bindings.list.response">;
     requestId: z.ZodString;
     bindings: z.ZodOptional<z.ZodArray<z.ZodObject<{
         scopePattern: z.ZodString;
@@ -7216,11 +7690,11 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.bindings.set.response">;
+    type: z.ZodLiteral<"dashboard.contexts.bindings.set.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.list.response">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.list.response">;
     requestId: z.ZodString;
     secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
         scope: z.ZodString;
@@ -7230,27 +7704,27 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.set.response">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.set.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.delete.response">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.delete.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.create.response">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.create.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.rename.response">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.rename.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.secrets.scope.delete.response">;
+    type: z.ZodLiteral<"dashboard.contexts.secrets.scope.delete.response">;
     requestId: z.ZodString;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
-    type: z.ZodLiteral<"dashboard.environments.history.response">;
+    type: z.ZodLiteral<"dashboard.contexts.history.response">;
     requestId: z.ZodString;
     runs: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
@@ -7261,8 +7735,9 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         commitSha: z.ZodNullable<z.ZodString>;
         startedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
         completedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
-        environment: z.ZodNullable<z.ZodString>;
+        context: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>>;
+    hasMore: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.held-runs.list.response">;
@@ -7270,19 +7745,11 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     heldRuns: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         runId: z.ZodString;
-        environmentId: z.ZodNullable<z.ZodString>;
-        environmentName: z.ZodNullable<z.ZodString>;
+        contextId: z.ZodNullable<z.ZodString>;
+        contextName: z.ZodNullable<z.ZodString>;
         holdType: z.ZodString;
-        queueType: z.ZodEnum<{
-            environment: "environment";
-            security: "security";
-        }>;
-        status: z.ZodEnum<{
-            pending: "pending";
-            approved: "approved";
-            rejected: "rejected";
-            expired: "expired";
-        }>;
+        queueType: z.ZodString;
+        status: z.ZodString;
         requestedAt: z.ZodCoercedString<unknown>;
         resolvedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
         resolvedBy: z.ZodNullable<z.ZodString>;
@@ -7292,9 +7759,9 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         trustTier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         jobId: z.ZodOptional<z.ZodString>;
         holdScope: z.ZodOptional<z.ZodEnum<{
-            workflow: "workflow";
             job: "job";
             step: "step";
+            workflow: "workflow";
         }>>;
         stepIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         requirement: z.ZodOptional<z.ZodNullable<z.ZodObject<{
@@ -7353,10 +7820,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             routingKey: z.ZodString;
             name: z.ZodNullable<z.ZodString>;
             subtype: z.ZodNullable<z.ZodEnum<{
-                github_app: "github_app";
                 generic_webhook: "generic_webhook";
-                universal_git: "universal_git";
+                github_app: "github_app";
                 local: "local";
+                universal_git: "universal_git";
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>>;
@@ -7401,8 +7868,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         runningAsUser: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         runningAsUid: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         raftRole: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            follower: "follower";
             candidate: "candidate";
+            follower: "follower";
             leader: "leader";
         }>>>;
         raftTerm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -7436,8 +7903,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     scalers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         type: z.ZodEnum<{
-            container: "container";
             "bare-metal": "bare-metal";
+            container: "container";
             firecracker: "firecracker";
             kubernetes: "kubernetes";
         }>;
@@ -7487,8 +7954,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                pass: "pass";
                 fail: "fail";
+                pass: "pass";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -7510,13 +7977,13 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -7531,13 +7998,13 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -7559,26 +8026,26 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             platform: z.ZodNullable<z.ZodString>;
             arch: z.ZodNullable<z.ZodString>;
             lifecycleClass: z.ZodEnum<{
-                static: "static";
                 ephemeral: "ephemeral";
+                static: "static";
             }>;
             status: z.ZodEnum<{
                 ready: "ready";
-                unreachable: "unreachable";
                 stale: "stale";
+                unreachable: "unreachable";
             }>;
             lastSeen: z.ZodString;
         }, z.core.$strip>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
     onUnreachable: z.ZodEnum<{
+        fail: "fail";
         hold: "hold";
         skip: "skip";
-        fail: "fail";
     }>;
     estimatedChildCount: z.ZodNumber;
 }, z.core.$strip>, z.ZodObject<{
@@ -7589,14 +8056,14 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         repoIdentifier: z.ZodString;
         sourceFile: z.ZodNullable<z.ZodString>;
         onUnreachable: z.ZodEnum<{
+            fail: "fail";
             hold: "hold";
             skip: "skip";
-            fail: "fail";
         }>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
@@ -7663,10 +8130,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
-            unknown: "unknown";
-            unreachable: "unreachable";
-            healthy: "healthy";
             degraded: "degraded";
+            healthy: "healthy";
+            unknown: "unknown";
+            unreachable: "unreachable";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -7690,10 +8157,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
+            degraded: "degraded";
+            healthy: "healthy";
             unknown: "unknown";
             unreachable: "unreachable";
-            healthy: "healthy";
-            degraded: "degraded";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -7729,19 +8196,19 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -7757,6 +8224,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>>;
     nextCursor: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity.response">;
+    requestId: z.ZodString;
+    counts: z.ZodOptional<z.ZodObject<{
+        total: z.ZodNumber;
+        matched: z.ZodNumber;
+        unmatched: z.ZodNumber;
+        lockfileMissing: z.ZodNumber;
+        lockfileCorrupt: z.ZodNumber;
+        failed: z.ZodNumber;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.event-log.detail.response">;
     requestId: z.ZodString;
@@ -7766,19 +8245,19 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -7800,12 +8279,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     data: z.ZodString;
     isLast: z.ZodBoolean;
     error: z.ZodOptional<z.ZodEnum<{
-        payload_unavailable: "payload_unavailable";
-        not_found: "not_found";
-        read_failed: "read_failed";
         forbidden: "forbidden";
+        not_found: "not_found";
         orch_stream_timeout: "orch_stream_timeout";
         orchestrator_unavailable: "orchestrator_unavailable";
+        payload_unavailable: "payload_unavailable";
+        read_failed: "read_failed";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
@@ -7895,121 +8374,131 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         orgId: z.ZodNullable<z.ZodString>;
         routingKey: z.ZodNullable<z.ZodString>;
         actorType: z.ZodEnum<{
-            user: "user";
             api_key: "api_key";
-            service_account: "service_account";
             platform_operator: "platform_operator";
+            service_account: "service_account";
             system: "system";
+            user: "user";
         }>;
         actorId: z.ZodString;
         actorMeta: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         actorEmail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         actorDisplayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         action: z.ZodEnum<{
-            "event_dlq.retry": "event_dlq.retry";
+            "access_log.list.read": "access_log.list.read";
+            archive_chunk: "archive_chunk";
+            "artifacts.read": "artifacts.read";
+            "attestation.retry": "attestation.retry";
+            "attestations.read": "attestations.read";
+            "backend.get.read": "backend.get.read";
+            "backend.list.read": "backend.list.read";
+            "backend.sync": "backend.sync";
+            "backend.sync.one": "backend.sync.one";
+            "backend.test": "backend.test";
+            "cluster_name.update": "cluster_name.update";
+            "context.create": "context.create";
+            "context.delete": "context.delete";
+            "context.get.read": "context.get.read";
+            "context.history.read": "context.history.read";
+            "context.list.read": "context.list.read";
+            "context.update": "context.update";
+            "context_binding.list.read": "context_binding.list.read";
+            "context_binding.set": "context_binding.set";
+            "context_var.delete": "context_var.delete";
+            "context_var.list.read": "context_var.list.read";
+            "context_var.set": "context_var.set";
+            "db.create_readonly_user": "db.create_readonly_user";
+            "db.create_role": "db.create_role";
+            "db.ensure": "db.ensure";
+            "db.fresh": "db.fresh";
+            "db.refresh_collation_version": "db.refresh_collation_version";
+            "db.reindex": "db.reindex";
+            "diagnostics.read": "diagnostics.read";
             "event_dlq.discard": "event_dlq.discard";
-            "registration.disable": "registration.disable";
-            "registration.delete": "registration.delete";
-            "global_workflows.update": "global_workflows.update";
+            "event_dlq.list.read": "event_dlq.list.read";
+            "event_dlq.retry": "event_dlq.retry";
+            "event_log.detail.read": "event_log.detail.read";
+            "event_log.list.read": "event_log.list.read";
+            "event_log.payload.read": "event_log.payload.read";
             "fleet.host.declare": "fleet.host.declare";
             "fleet.host.remove": "fleet.host.remove";
+            "fleet.init_runner.bringup": "fleet.init_runner.bringup";
+            "fleet.pre_boot.send": "fleet.pre_boot.send";
+            "fleet.read": "fleet.read";
+            "global_workflows.get.read": "global_workflows.get.read";
+            "global_workflows.update": "global_workflows.update";
+            "held_run.approve": "held_run.approve";
+            "held_run.auto_approve": "held_run.auto_approve";
+            "held_run.expire": "held_run.expire";
+            "held_run.list.read": "held_run.list.read";
+            "held_run.reject": "held_run.reject";
+            "held_run.request": "held_run.request";
+            "job.cancel": "job.cancel";
+            "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
+            purge_chunk: "purge_chunk";
+            "registration.delete": "registration.delete";
+            "registration.disable": "registration.disable";
+            "registration.list.read": "registration.list.read";
+            "run.cancel": "run.cancel";
             "run.detail.read": "run.detail.read";
-            "run.structured.read": "run.structured.read";
-            "runs.list.read": "runs.list.read";
-            "runs.filters.read": "runs.filters.read";
-            "sources.list.read": "sources.list.read";
-            "run.payload.read": "run.payload.read";
+            "run.manual_schedule": "run.manual_schedule";
             "run.orch_logs.read": "run.orch_logs.read";
-            "step.logs.read": "step.logs.read";
-            "attestations.read": "attestations.read";
-            "run.cancel": "run.cancel";
+            "run.payload.read": "run.payload.read";
             "run.rerun": "run.rerun";
-            "run.manual_schedule": "run.manual_schedule";
+            "run.structured.read": "run.structured.read";
             "run.trigger": "run.trigger";
-            "job.cancel": "job.cancel";
-            "event_log.list.read": "event_log.list.read";
-            "event_log.detail.read": "event_log.detail.read";
-            "event_log.payload.read": "event_log.payload.read";
-            "environment.list.read": "environment.list.read";
-            "environment.get.read": "environment.get.read";
-            "environment.create": "environment.create";
-            "environment.update": "environment.update";
-            "environment.delete": "environment.delete";
-            "env_var.list.read": "env_var.list.read";
-            "env_var.set": "env_var.set";
-            "env_var.delete": "env_var.delete";
-            "source_override.list.read": "source_override.list.read";
-            "source_override.set": "source_override.set";
-            "source_override.delete": "source_override.delete";
-            "env_binding.list.read": "env_binding.list.read";
-            "env_binding.set": "env_binding.set";
-            "secret.list.read": "secret.list.read";
-            "secret.set": "secret.set";
+            "runs.filters.read": "runs.filters.read";
+            "runs.list.read": "runs.list.read";
+            "scaler.agents.read": "scaler.agents.read";
+            "scaler.capacity.read": "scaler.capacity.read";
             "secret.delete": "secret.delete";
+            "secret.list.read": "secret.list.read";
             "secret.reveal": "secret.reveal";
+            "secret.set": "secret.set";
             "secret_scope.create": "secret_scope.create";
-            "secret_scope.rename": "secret_scope.rename";
             "secret_scope.delete": "secret_scope.delete";
-            "environment.history.read": "environment.history.read";
-            "held_run.list.read": "held_run.list.read";
-            "held_run.approve": "held_run.approve";
-            "held_run.auto_approve": "held_run.auto_approve";
-            "held_run.reject": "held_run.reject";
-            "held_run.request": "held_run.request";
-            "held_run.expire": "held_run.expire";
-            "registration.list.read": "registration.list.read";
-            "diagnostics.read": "diagnostics.read";
-            "scaler.capacity.read": "scaler.capacity.read";
-            "scaler.agents.read": "scaler.agents.read";
-            "fleet.read": "fleet.read";
-            "fleet.init_runner.bringup": "fleet.init_runner.bringup";
-            "fleet.pre_boot.send": "fleet.pre_boot.send";
-            "backend.list.read": "backend.list.read";
-            "backend.get.read": "backend.get.read";
-            "backend.sync": "backend.sync";
-            "backend.sync.one": "backend.sync.one";
-            "backend.test": "backend.test";
-            "global_workflows.get.read": "global_workflows.get.read";
-            "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
-            "cluster_name.update": "cluster_name.update";
-            "access_log.list.read": "access_log.list.read";
-            "event_dlq.list.read": "event_dlq.list.read";
-            archive_chunk: "archive_chunk";
-            purge_chunk: "purge_chunk";
+            "secret_scope.rename": "secret_scope.rename";
+            "source_override.delete": "source_override.delete";
+            "source_override.list.read": "source_override.list.read";
+            "source_override.set": "source_override.set";
+            "sources.list.read": "sources.list.read";
+            "step.logs.read": "step.logs.read";
+            "trust_policy.updated": "trust_policy.updated";
         }>;
         targetType: z.ZodNullable<z.ZodEnum<{
-            job: "job";
-            step: "step";
-            run: "run";
-            environment: "environment";
-            payload: "payload";
-            event_log: "event_log";
-            event_log_payload: "event_log_payload";
-            secret_scope: "secret_scope";
-            registration: "registration";
+            access_log: "access_log";
+            attestation: "attestation";
             backend: "backend";
+            cluster_meta: "cluster_meta";
+            context: "context";
+            database: "database";
             diagnostics: "diagnostics";
-            scaler: "scaler";
+            event_dlq: "event_dlq";
+            event_log: "event_log";
+            event_log_payload: "event_log_payload";
             fleet: "fleet";
             held_run: "held_run";
-            access_log: "access_log";
-            event_dlq: "event_dlq";
+            job: "job";
             org_settings: "org_settings";
-            cluster_meta: "cluster_meta";
-            attestation: "attestation";
+            payload: "payload";
+            registration: "registration";
+            run: "run";
+            scaler: "scaler";
+            secret_scope: "secret_scope";
+            step: "step";
         }>>;
         targetId: z.ZodNullable<z.ZodString>;
         requestId: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            admin_cli: "admin_cli";
+            admin_http: "admin_http";
             agent: "agent";
             platform_proxy: "platform_proxy";
-            admin_http: "admin_http";
-            admin_cli: "admin_cli";
         }>;
         outcome: z.ZodEnum<{
-            error: "error";
             allowed: "allowed";
             denied: "denied";
+            error: "error";
         }>;
         errorMessage: z.ZodNullable<z.ZodString>;
         agentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -8030,8 +8519,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     requestId: z.ZodString;
     runId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        rejected: "rejected";
         accepted: "accepted";
+        rejected: "rejected";
     }>>;
     reason: z.ZodOptional<z.ZodString>;
     jobIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -8074,6 +8563,9 @@ export type DashboardPlatformToOrchMessage = z.infer<typeof dashboardPlatformToO
 export type EventLogListItem = z.infer<typeof eventLogListItemSchema>;
 export type DashboardEventLogListRequest = z.infer<typeof dashboardEventLogListRequestSchema>;
 export type DashboardEventLogListResponse = z.infer<typeof dashboardEventLogListResponseSchema>;
+export type EventLogActivityCounts = z.infer<typeof eventLogActivityCountsSchema>;
+export type DashboardEventLogActivityRequest = z.infer<typeof dashboardEventLogActivityRequestSchema>;
+export type DashboardEventLogActivityResponse = z.infer<typeof dashboardEventLogActivityResponseSchema>;
 export type DashboardEventLogDetailRequest = z.infer<typeof dashboardEventLogDetailRequestSchema>;
 export type DashboardEventLogDetailResponse = z.infer<typeof dashboardEventLogDetailResponseSchema>;
 export type DashboardEventLogPayloadStreamRequest = z.infer<typeof dashboardEventLogPayloadStreamRequestSchema>;
@@ -8088,30 +8580,30 @@ export type DashboardEventDlqRetryRequest = z.infer<typeof dashboardEventDlqRetr
 export type DashboardEventDlqRetryResponse = z.infer<typeof dashboardEventDlqRetryResponseSchema>;
 export type DashboardEventDlqDiscardRequest = z.infer<typeof dashboardEventDlqDiscardRequestSchema>;
 export type DashboardEventDlqDiscardResponse = z.infer<typeof dashboardEventDlqDiscardResponseSchema>;
-export type EnvListRequest = z.infer<typeof envListRequestSchema>;
-type EnvListResponse = z.infer<typeof envListResponseSchema>;
-export type EnvGetRequest = z.infer<typeof envGetRequestSchema>;
-type EnvGetResponse = z.infer<typeof envGetResponseSchema>;
-export type EnvCreateRequest = z.infer<typeof envCreateRequestSchema>;
-export type EnvUpdateRequest = z.infer<typeof envUpdateRequestSchema>;
-export type EnvTestAccessSetRequest = z.infer<typeof envTestAccessSetRequestSchema>;
-export type EnvDeleteRequest = z.infer<typeof envDeleteRequestSchema>;
-export type EnvVarsListRequest = z.infer<typeof envVarsListRequestSchema>;
-type EnvVarsListResponse = z.infer<typeof envVarsListResponseSchema>;
-export type EnvVarSetRequest = z.infer<typeof envVarSetRequestSchema>;
-export type EnvVarDeleteRequest = z.infer<typeof envVarDeleteRequestSchema>;
-export type EnvSourceOverridesListRequest = z.infer<typeof envSourceOverridesListRequestSchema>;
-export type EnvSourceOverrideSetRequest = z.infer<typeof envSourceOverrideSetRequestSchema>;
-export type EnvSourceOverrideDeleteRequest = z.infer<typeof envSourceOverrideDeleteRequestSchema>;
-export type EnvBindingsListRequest = z.infer<typeof envBindingsListRequestSchema>;
-export type EnvBindingsSetRequest = z.infer<typeof envBindingsSetRequestSchema>;
-export type EnvSecretsListRequest = z.infer<typeof envSecretsListRequestSchema>;
-export type EnvSecretSetRequest = z.infer<typeof envSecretSetRequestSchema>;
-export type EnvSecretDeleteRequest = z.infer<typeof envSecretDeleteRequestSchema>;
-export type EnvSecretScopeCreateRequest = z.infer<typeof envSecretScopeCreateRequestSchema>;
-export type EnvSecretScopeRenameRequest = z.infer<typeof envSecretScopeRenameRequestSchema>;
-export type EnvSecretScopeDeleteRequest = z.infer<typeof envSecretScopeDeleteRequestSchema>;
-export type EnvHistoryRequest = z.infer<typeof envHistoryRequestSchema>;
+export type ContextListRequest = z.infer<typeof contextListRequestSchema>;
+type ContextListResponse = z.infer<typeof contextListResponseSchema>;
+export type ContextGetRequest = z.infer<typeof contextGetRequestSchema>;
+type ContextGetResponse = z.infer<typeof contextGetResponseSchema>;
+export type ContextCreateRequest = z.infer<typeof contextCreateRequestSchema>;
+export type ContextUpdateRequest = z.infer<typeof contextUpdateRequestSchema>;
+export type ContextTestAccessSetRequest = z.infer<typeof contextTestAccessSetRequestSchema>;
+export type ContextDeleteRequest = z.infer<typeof contextDeleteRequestSchema>;
+export type ContextVarsListRequest = z.infer<typeof contextVarsListRequestSchema>;
+type ContextVarsListResponse = z.infer<typeof contextVarsListResponseSchema>;
+export type ContextVarSetRequest = z.infer<typeof contextVarSetRequestSchema>;
+export type ContextVarDeleteRequest = z.infer<typeof contextVarDeleteRequestSchema>;
+export type ContextSourceOverridesListRequest = z.infer<typeof contextSourceOverridesListRequestSchema>;
+export type ContextSourceOverrideSetRequest = z.infer<typeof contextSourceOverrideSetRequestSchema>;
+export type ContextSourceOverrideDeleteRequest = z.infer<typeof contextSourceOverrideDeleteRequestSchema>;
+export type ContextBindingsListRequest = z.infer<typeof contextBindingsListRequestSchema>;
+export type ContextBindingsSetRequest = z.infer<typeof contextBindingsSetRequestSchema>;
+export type ContextSecretsListRequest = z.infer<typeof contextSecretsListRequestSchema>;
+export type ContextSecretSetRequest = z.infer<typeof contextSecretSetRequestSchema>;
+export type ContextSecretDeleteRequest = z.infer<typeof contextSecretDeleteRequestSchema>;
+export type ContextSecretScopeCreateRequest = z.infer<typeof contextSecretScopeCreateRequestSchema>;
+export type ContextSecretScopeRenameRequest = z.infer<typeof contextSecretScopeRenameRequestSchema>;
+export type ContextSecretScopeDeleteRequest = z.infer<typeof contextSecretScopeDeleteRequestSchema>;
+export type ContextHistoryRequest = z.infer<typeof contextHistoryRequestSchema>;
 export type HeldRunsListRequest = z.infer<typeof heldRunsListRequestSchema>;
 type HeldRunsListResponse = z.infer<typeof heldRunsListResponseSchema>;
 export type HeldRunApproveRequest = z.infer<typeof heldRunApproveRequestSchema>;
@@ -8147,8 +8639,8 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
         orchestratorId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         errorMessage: z.ZodNullable<z.ZodString>;
         runsOnLabels: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-        environments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
-        skippedEnvironments: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
+        skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
@@ -8158,14 +8650,17 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
                 run: "run";
             }>;
             category: z.ZodEnum<{
-                secret_resolution: "secret_resolution";
-                install_secrets: "install_secrets";
-                lock_resolution: "lock_resolution";
+                approval_misconfig: "approval_misconfig";
                 build_coordination: "build_coordination";
-                environment_rules: "environment_rules";
+                context_rules: "context_rules";
                 dynamic_eval: "dynamic_eval";
-                no_agent: "no_agent";
+                install_secrets: "install_secrets";
+                lock_resolution: "lock_resolution";
                 matrix_expansion: "matrix_expansion";
+                no_agent: "no_agent";
+                sandbox_denied: "sandbox_denied";
+                secret_resolution: "secret_resolution";
+                trust_policy: "trust_policy";
             }>;
             message: z.ZodString;
             jobName: z.ZodOptional<z.ZodString>;
@@ -8173,17 +8668,18 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
         needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
             upstreamName: z.ZodString;
             runOn: z.ZodArray<z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>>;
         }, z.core.$strip>>>>;
         steps: z.ZodArray<z.ZodObject<{
@@ -8198,30 +8694,30 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
             stepType: z.ZodOptional<z.ZodString>;
             secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
             checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                skipped: "skipped";
                 applied: "applied";
                 declined: "declined";
                 "dry-run": "dry-run";
                 no_check: "no_check";
+                skipped: "skipped";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                sequential: "sequential";
                 "parallel-child": "parallel-child";
                 "parallel-group": "parallel-group";
+                sequential: "sequential";
             }>>>;
             groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
-            head: "head";
             base: "base";
+            head: "head";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
@@ -8236,14 +8732,17 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
-            environment_rules: "environment_rules";
+            context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -8294,20 +8793,20 @@ export declare const dashboardAttestationsApiResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
@@ -8345,23 +8844,30 @@ export declare const runListItemSchema: z.ZodObject<{
     failureReason: z.ZodOptional<z.ZodString>;
     hadCompileJob: z.ZodBoolean;
     compileJobId: z.ZodNullable<z.ZodString>;
-    environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
     repoProvider: z.ZodNullable<z.ZodString>;
     localWorkingTree: z.ZodBoolean;
     source: z.ZodNullable<z.ZodObject<{
         routingKey: z.ZodString;
         name: z.ZodNullable<z.ZodString>;
         subtype: z.ZodNullable<z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>>;
         provider: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RunListItem = z.infer<typeof runListItemSchema>;
-/** Paginated run list response envelope. */
+/**
+ * Cursor-paginated run list response envelope.
+ *
+ * Keyset (cursor) pagination: `nextCursor` fetches the next (older) page,
+ * `prevCursor` the previous (newer) page — both opaque, `null` when there is no
+ * such page. `hasMore` is true when an older page exists. `approxTotal` is a
+ * cached, approximate match count for the "~N runs" label (not an exact total).
+ */
 export declare const runListResponseSchema: z.ZodObject<{
     runs: z.ZodArray<z.ZodObject<{
         runId: z.ZodString;
@@ -8395,25 +8901,26 @@ export declare const runListResponseSchema: z.ZodObject<{
         failureReason: z.ZodOptional<z.ZodString>;
         hadCompileJob: z.ZodBoolean;
         compileJobId: z.ZodNullable<z.ZodString>;
-        environments: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
         repoProvider: z.ZodNullable<z.ZodString>;
         localWorkingTree: z.ZodBoolean;
         source: z.ZodNullable<z.ZodObject<{
             routingKey: z.ZodString;
             name: z.ZodNullable<z.ZodString>;
             subtype: z.ZodNullable<z.ZodEnum<{
-                github_app: "github_app";
                 generic_webhook: "generic_webhook";
-                universal_git: "universal_git";
+                github_app: "github_app";
                 local: "local";
+                universal_git: "universal_git";
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
-    total: z.ZodNumber;
-    page: z.ZodNumber;
-    pageSize: z.ZodNumber;
+    nextCursor: z.ZodNullable<z.ZodString>;
+    prevCursor: z.ZodNullable<z.ZodString>;
     hasMore: z.ZodBoolean;
+    approxTotal: z.ZodNumber;
+    pageSize: z.ZodNumber;
 }, z.core.$strip>;
 export type RunListResponse = z.infer<typeof runListResponseSchema>;
 declare const diagnosticsInfraAgentSchema: z.ZodObject<{
@@ -8456,17 +8963,19 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     scalerBackends: z.ZodArray<z.ZodString>;
     deployment: z.ZodObject<{
         mode: z.ZodEnum<{
-            unknown: "unknown";
-            systemd: "systemd";
+            compose: "compose";
             launchd: "launchd";
+            systemd: "systemd";
+            unknown: "unknown";
             windows: "windows";
-            compose: "compose";
         }>;
         containerName: z.ZodNullable<z.ZodString>;
         containerRuntime: z.ZodNullable<z.ZodEnum<{
-            podman: "podman";
             docker: "docker";
+            podman: "podman";
         }>>;
+        adminInvocation: z.ZodNullable<z.ZodString>;
+        adminPath: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>;
     s3LogAccess: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     agentCount: z.ZodNumber;
@@ -8520,8 +9029,8 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
-            pass: "pass";
             fail: "fail";
+            pass: "pass";
             warn: "warn";
         }>;
         message: z.ZodNullable<z.ZodString>;
@@ -8530,6 +9039,22 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/**
+ * A single infrastructure health alert.
+ *
+ * Both vocabulary fields are `z.string()` on purpose. `InfraAlertType` and
+ * `InfraAlertSeverity` (`diagnostics/infra-alert.ts`) name the *known*
+ * vocabulary the producer mints from and the read-side consumers colour by; the
+ * wire stays permissive because the `kici` CLI hard-parses this response while
+ * pinned to an older version than the hosted Platform it is talking to. A
+ * strict enum would fail the whole response rather than degrade one row.
+ */
+export declare const diagnosticsInfraAlertSchema: z.ZodObject<{
+    type: z.ZodString;
+    message: z.ZodString;
+    severity: z.ZodString;
+}, z.core.$strip>;
+export type DiagnosticsInfraAlert = z.infer<typeof diagnosticsInfraAlertSchema>;
 export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
     orchestrators: z.ZodArray<z.ZodObject<{
         connectionId: z.ZodString;
@@ -8548,17 +9073,19 @@ export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
         scalerBackends: z.ZodArray<z.ZodString>;
         deployment: z.ZodObject<{
             mode: z.ZodEnum<{
-                unknown: "unknown";
-                systemd: "systemd";
+                compose: "compose";
                 launchd: "launchd";
+                systemd: "systemd";
+                unknown: "unknown";
                 windows: "windows";
-                compose: "compose";
             }>;
             containerName: z.ZodNullable<z.ZodString>;
             containerRuntime: z.ZodNullable<z.ZodEnum<{
-                podman: "podman";
                 docker: "docker";
+                podman: "podman";
             }>>;
+            adminInvocation: z.ZodNullable<z.ZodString>;
+            adminPath: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>;
         s3LogAccess: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
         agentCount: z.ZodNumber;
@@ -8612,8 +9139,8 @@ export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                pass: "pass";
                 fail: "fail";
+                pass: "pass";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -8648,12 +9175,12 @@ export type DashboardRunDetailApiResponse = z.infer<typeof dashboardRunDetailApi
 export type DashboardStepLogsApiResponse = z.infer<typeof dashboardStepLogsApiResponseSchema>;
 export type DashboardAttestationsApiResponse = z.infer<typeof dashboardAttestationsApiResponseSchema>;
 export type DashboardJobDetail = z.infer<typeof dashboardJobDetailSchema>;
-/** Single environment from the list response. */
-export type DashboardEnvironment = NonNullable<EnvListResponse['environments']>[number];
-/** Full environment detail from the get response. */
-export type DashboardEnvironmentDetail = NonNullable<EnvGetResponse['environment']>;
-/** Single environment variable from the variables list response. */
-export type DashboardEnvironmentVariable = NonNullable<EnvVarsListResponse['variables']>[number];
+/** Single context from the list response. */
+export type DashboardContext = NonNullable<ContextListResponse['contexts']>[number];
+/** Full context detail from the get response. */
+export type DashboardContextDetail = NonNullable<ContextGetResponse['context']>;
+/** Single context variable from the variables list response. */
+export type DashboardContextVariable = NonNullable<ContextVarsListResponse['variables']>[number];
 /** Single held run from the held runs list response. */
 export type DashboardHeldRun = NonNullable<HeldRunsListResponse['heldRuns']>[number];
 /** Single infrastructure event for a run (from run_events table). */
@@ -8764,11 +9291,10 @@ export declare const DASHBOARD_REQUEST_TYPES: readonly string[];
 export declare const DASHBOARD_REQUEST_TYPE_SET: ReadonlySet<string>;
 /** Structured error code on a dashboard `*.response` frame's `code` field. */
 export declare const DashboardResponseErrorCode: z.ZodEnum<{
-    unsupported_request_type: "unsupported_request_type";
+    internal_error: "internal_error";
     invalid_payload: "invalid_payload";
     unsupported_message_type: "unsupported_message_type";
-    internal_error: "internal_error";
+    unsupported_request_type: "unsupported_request_type";
 }>;
 export type DashboardResponseErrorCode = z.infer<typeof DashboardResponseErrorCode>;
-export {};
 //# sourceMappingURL=dashboard.d.ts.map