@kici-dev/engine 0.1.26 → 0.2.0

package/dist/protocol/messages/dashboard.js

@@ -3,7 +3,9 @@ import { CheckMode, CheckStepOutcome } from "../../check-mode.js";
 import { SourceOrigin } from "../source-origin.js";
 import { AttestationOrigin } from "../../provenance/attestation-origin.js";
 import { actorPrincipalSchema } from "./actor.js";
-import { StepConcurrencyKind, initFailureSchema } from "./execution-status.js";
+import { HeldRunStatus } from "../../context/held-run-status.js";
+import { dashboardSealedEnvelopeSchema } from "./dashboard-sealed-write.js";
+import { StepConcurrencyKind, initFailureSchema, stateReplayRunSchema } from "./execution-status.js";
 import { agentRunResultSchema } from "./agent-run-result.js";
 import { kiciBundleSchema } from "../../provenance/bundle.js";
 import { dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema } from "./access-log.js";
@@ -15,6 +17,7 @@ import { ScalerBackendType } from "../../scaler/scaler-backend-type.js";
 import { ApprovalDecision, HoldScope, approverClauseSchema } from "../../approval/types.js";
 import { NeedsRunOn, OnUnreachableMode } from "../../trigger/types.js";
 import { HostTargetSelector } from "../../labels-match.js";
+import { ConcurrencyStrategy } from "../../context/concurrency-strategy.js";
 import { HostInventoryEntry } from "../../inventory.js";
 import { globalWorkflowsGetRequestSchema, globalWorkflowsGetResponseSchema, globalWorkflowsUpdateRequestSchema, globalWorkflowsUpdateResponseSchema } from "./dashboard-global-workflows.js";
 import { z } from "zod";
@@ -44,6 +47,31 @@ const dashboardRunStructuredResponseSchema = z.object({
 	result: agentRunResultSchema.nullable(),
 	error: z.string().optional()
 });
+/**
+* Request the current mirror-projection state of a single run from the
+* orchestrator. Unlike `dashboard.run.detail` (a user-plane read that
+* access-logs), this is a **system reconciliation read**: the Platform's
+* `RunMirrorReconciler` issues it for a run stuck non-terminal in the mirror to
+* recover a terminal frame dropped on a live connection. The `actor` is always a
+* `system` principal, and the orchestrator does NOT write an access-log row.
+*/
+const dashboardRunStateRequestSchema = z.object({
+	type: z.literal("dashboard.run.state"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	runId: z.string()
+});
+/**
+* Response carrying the run's current `StateReplayRun` mirror-projection shape
+* (the same shape `state.replay` carries), or `run: null` when the orchestrator
+* has no such run. Consumed by `upsertRunMirror` on the Platform side.
+*/
+const dashboardRunStateResponseSchema = z.object({
+	type: z.literal("dashboard.run.state.response"),
+	requestId: z.string(),
+	run: stateReplayRunSchema.nullable(),
+	error: z.string().optional()
+});
 /** Request step logs from orchestrator. */
 const dashboardStepLogsRequestSchema = z.object({
 	type: z.literal("dashboard.step.logs"),
@@ -107,17 +135,17 @@ const dashboardJobDetailSchema = z.object({
 	/** Labels used for agent routing (e.g. ["kici:os:linux", "kici:arch:x64"]). */
 	runsOnLabels: z.array(z.string()).nullable().optional(),
 	/**
-	* Ordered bound deployment-environment names for this job, in merge order
-	* (later environments override earlier on key collisions). A `(dynamic)`
+	* Ordered bound deployment-context names for this job, in merge order
+	* (later contexts override earlier on key collisions). A `(dynamic)`
 	* entry marks an element resolved at runtime. null/absent = no binding.
 	*/
-	environments: z.array(z.string()).nullable().optional(),
+	contexts: z.array(z.string()).nullable().optional(),
 	/**
-	* Bound environments skipped on a test/local run (non-test or unconfigured).
+	* Bound contexts skipped on a test/local run (non-test or unconfigured).
 	* null/absent when nothing was skipped.
 	*/
-	skippedEnvironments: z.array(z.string()).nullable().optional(),
-	/** User-visible warning naming the skipped test-run environments. null/absent when none. */
+	skippedContexts: z.array(z.string()).nullable().optional(),
+	/** User-visible warning naming the skipped test-run contexts. null/absent when none. */
 	envWarning: z.string().nullable().optional(),
 	/** Aggregated step outputs (step-keyed map). Present when job completed successfully with outputs. */
 	outputs: z.record(z.string(), z.record(z.string(), z.unknown())).nullable().optional(),
@@ -239,6 +267,50 @@ const dashboardAttestationsListResponseSchema = z.object({
 	type: z.literal("dashboard.attestations.list.response"),
 	requestId: z.string(),
 	attestations: z.array(attestationListItemSchema),
+	/**
+	* The provenance issuer that signs this orchestrator's attestations, when it
+	* owns signing (`KICI_ORCHESTRATOR_PROVENANCE_ISSUER`). The Platform surfaces
+	* it as `trustedIssuer` so the dashboard / CLI verify against the orchestrator
+	* that actually signed the bundles; absent → the Platform falls back to its own
+	* issuer (for historical Platform-signed bundles). Optional for backward
+	* compatibility with older orchestrators.
+	*/
+	trustedIssuer: z.string().nullable().optional(),
+	error: z.string().optional()
+});
+/** Request the named artifacts uploaded by a run. */
+const dashboardArtifactsListRequestSchema = z.object({
+	type: z.literal("dashboard.artifacts.list"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	runId: z.string()
+});
+/**
+* Single artifact in the list response. `downloadUrl` is a presigned GET the
+* dashboard links directly; it is omitted when the backing object could not be
+* resolved (expired / missing), in which case the row still lists the metadata.
+*/
+const artifactListItemSchema = z.object({
+	name: z.string(),
+	jobId: z.string(),
+	sizeBytes: z.number(),
+	sha256: z.string(),
+	createdAt: z.string(),
+	downloadUrl: z.string().optional()
+});
+/** Response with the run's artifacts (correlates to dashboard.artifacts.list). */
+const dashboardArtifactsListResponseSchema = z.object({
+	type: z.literal("dashboard.artifacts.list.response"),
+	requestId: z.string(),
+	artifacts: z.array(artifactListItemSchema),
+	/**
+	* Signature-validity window (seconds) of the presigned `downloadUrl`s in this
+	* response, from the storage backend's presigned-GET expiry; the dashboard
+	* refreshes the list on a fraction of it so a displayed link is never stale.
+	* Optional for backward compatibility with older orchestrators (mirrors
+	* `trustedIssuer`).
+	*/
+	downloadUrlExpiresInSeconds: z.number().int().positive().optional(),
 	error: z.string().optional()
 });
 /**
@@ -301,6 +373,8 @@ const dashboardAttestationsListAllResponseSchema = z.object({
 	page: z.number().int(),
 	pageSize: z.number().int(),
 	total: z.number().int(),
+	/** See `dashboardAttestationsListResponseSchema.trustedIssuer`. */
+	trustedIssuer: z.string().nullable().optional(),
 	error: z.string().optional()
 });
 /** Request a single attestation by id (detail page; inlines the one bundle). */
@@ -354,8 +428,8 @@ const dashboardRunSummarySchema = z.object({
 	triggerEvent: z.string().optional(),
 	commitMessage: z.string().optional(),
 	jobCount: z.number().optional(),
-	/** Distinct bound deployment-environment names across the run's jobs (first-seen order). */
-	environments: z.array(z.string()).optional(),
+	/** Distinct bound deployment-context names across the run's jobs (first-seen order). */
+	contexts: z.array(z.string()).optional(),
 	startedAt: z.string().optional(),
 	completedAt: z.string().optional(),
 	durationMs: z.number().optional(),
@@ -499,6 +573,12 @@ const runCancelResponseSchema = z.object({
 	type: z.literal("run.cancel.response"),
 	requestId: z.string(),
 	cancelledJobs: z.number().optional(),
+	/**
+	* True when the run was already terminal, so the cancel wrote nothing. Optional
+	* so an orchestrator that predates the field still parses: an absent value
+	* means "not reported", not "false".
+	*/
+	alreadyTerminal: z.boolean().optional(),
 	error: z.string().optional()
 });
 /** Request the original webhook payload for a run. */
@@ -601,6 +681,36 @@ const dashboardEventLogDetailResponseSchema = z.object({
 	item: eventLogListItemSchema.optional(),
 	error: z.string().optional()
 });
+/** Aggregate webhook-activity counts for a time window (org-scoped).
+*  Powers the Runs-page misconfig strip + the `kici runs` hint. No payloads,
+*  no repo identifiers — safe for all org members. */
+const dashboardEventLogActivityRequestSchema = z.object({
+	type: z.literal("dashboard.event-log.activity"),
+	requestId: z.string(),
+	actor: actorPrincipalSchema,
+	orgId: z.string(),
+	/** ISO timestamp lower bound (inclusive). */
+	fromTimestamp: z.string(),
+	/** ISO timestamp upper bound (exclusive). */
+	toTimestamp: z.string()
+});
+/** Orchestrator-only bucketed counts over the window. `matched`/`unmatched`
+*  distinguish a trigger-no-match delivery from one that produced a run — a
+*  fact the Platform relay cannot compute (see the two-table architecture). */
+const eventLogActivityCountsSchema = z.object({
+	total: z.number(),
+	matched: z.number(),
+	unmatched: z.number(),
+	lockfileMissing: z.number(),
+	lockfileCorrupt: z.number(),
+	failed: z.number()
+});
+const dashboardEventLogActivityResponseSchema = z.object({
+	type: z.literal("dashboard.event-log.activity.response"),
+	requestId: z.string(),
+	counts: eventLogActivityCountsSchema.optional(),
+	error: z.string().optional()
+});
 /**
 * Reasons a chunked event-log payload stream may terminate without a body.
 * The terminal chunk carries `isLast=true` plus one of these codes in
@@ -757,15 +867,14 @@ const dashboardEventDlqDiscardResponseSchema = z.object({
 	discarded: z.boolean().optional(),
 	error: z.string().optional()
 });
-const environmentTypeSchema = z.enum(["fixed", "glob"]);
-const concurrencyStrategySchema = z.enum(["queue", "cancel-pending"]);
-/** List all environments for the org. */
-const envListRequestSchema = z.object({
-	type: z.literal("dashboard.environments.list"),
+const contextTypeSchema = z.enum(["fixed", "glob"]);
+/** List all contexts for the org. */
+const contextListRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.list"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	/**
-	* When true, each returned environment carries its reachable secret key
+	* When true, each returned context carries its reachable secret key
 	* names (never values) in `secretKeys`. Used by the developer CLI's
 	* `kici secrets list` / `kici types` commands.
 	*/
@@ -774,27 +883,27 @@ const envListRequestSchema = z.object({
 	* Target org the read must be scoped to, carried per-request by the Platform
 	* (the validated `:orgId` path param). The orchestrator honors this over its
 	* static connection-level org so a Platform-first `kici run remote` org —
-	* anchored only by `remote_sources` — sees its own environments even when the
+	* anchored only by `remote_sources` — sees its own contexts even when the
 	* orchestrator's connection also serves a webhook source for a different org.
 	* Absent on the legacy customer-dashboard path, where the connection org is
 	* already the request org.
 	*/
 	orgId: z.string().optional()
 });
-const envListResponseSchema = z.object({
-	type: z.literal("dashboard.environments.list.response"),
+const contextListResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.list.response"),
 	requestId: z.string(),
-	environments: z.array(z.object({
+	contexts: z.array(z.object({
 		id: z.string(),
 		name: z.string(),
-		type: environmentTypeSchema,
+		type: contextTypeSchema,
 		globPattern: z.string().nullable(),
 		enabled: z.boolean(),
 		allowLocalExecution: z.boolean(),
 		createdAt: z.coerce.string(),
 		updatedAt: z.coerce.string(),
 		/**
-		* Distinct secret key names reachable from this environment's scope
+		* Distinct secret key names reachable from this context's scope
 		* bindings (never values). Present only when the request set
 		* `includeSecrets: true`.
 		*/
@@ -802,24 +911,24 @@ const envListResponseSchema = z.object({
 	})).optional(),
 	error: z.string().optional()
 });
-/** Get a single environment by ID. */
-const envGetRequestSchema = z.object({
-	type: z.literal("dashboard.environments.get"),
+/** Get a single context by ID. */
+const contextGetRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.get"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string()
+	contextId: z.string()
 });
-const envGetResponseSchema = z.object({
-	type: z.literal("dashboard.environments.get.response"),
+const contextGetResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.get.response"),
 	requestId: z.string(),
-	environment: z.object({
+	context: z.object({
 		id: z.string(),
 		name: z.string(),
-		type: environmentTypeSchema,
+		type: contextTypeSchema,
 		globPattern: z.string().nullable(),
 		branchRestrictions: z.array(z.string()).nullable(),
 		concurrencyLimit: z.number().nullable(),
-		concurrencyStrategy: concurrencyStrategySchema.nullable(),
+		concurrencyStrategy: ConcurrencyStrategy.nullable(),
 		requiredReviewers: z.number().nullable(),
 		waitTimerSeconds: z.number().nullable(),
 		holdExpirySeconds: z.number().nullable(),
@@ -830,98 +939,98 @@ const envGetResponseSchema = z.object({
 	}).optional(),
 	error: z.string().optional()
 });
-/** Create a new environment. */
-const envCreateRequestSchema = z.object({
-	type: z.literal("dashboard.environments.create"),
+/** Create a new context. */
+const contextCreateRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.create"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	name: z.string(),
-	envType: environmentTypeSchema,
+	contextType: contextTypeSchema,
 	globPattern: z.string().optional(),
 	branchRestrictions: z.array(z.string()).optional(),
-	concurrencyLimit: z.number().optional(),
-	concurrencyStrategy: concurrencyStrategySchema.optional(),
+	concurrencyLimit: z.number().int().positive().optional(),
+	concurrencyStrategy: ConcurrencyStrategy.optional(),
 	requiredReviewers: z.number().optional(),
 	waitTimerSeconds: z.number().optional(),
-	holdExpirySeconds: z.number().optional(),
+	holdExpirySeconds: z.number().int().positive().optional(),
 	enabled: z.boolean().optional()
 });
-const envCreateResponseSchema = z.object({
-	type: z.literal("dashboard.environments.create.response"),
+const contextCreateResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.create.response"),
 	requestId: z.string(),
-	environmentId: z.string().optional(),
+	contextId: z.string().optional(),
 	error: z.string().optional()
 });
-/** Update an existing environment. */
-const envUpdateRequestSchema = z.object({
-	type: z.literal("dashboard.environments.update"),
+/** Update an existing context. */
+const contextUpdateRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.update"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	updates: z.object({
 		name: z.string().optional(),
-		envType: environmentTypeSchema.optional(),
+		contextType: contextTypeSchema.optional(),
 		globPattern: z.string().nullable().optional(),
 		branchRestrictions: z.array(z.string()).nullable().optional(),
-		concurrencyLimit: z.number().nullable().optional(),
-		concurrencyStrategy: concurrencyStrategySchema.nullable().optional(),
+		concurrencyLimit: z.number().int().positive().nullable().optional(),
+		concurrencyStrategy: ConcurrencyStrategy.nullable().optional(),
 		requiredReviewers: z.number().nullable().optional(),
 		waitTimerSeconds: z.number().nullable().optional(),
-		holdExpirySeconds: z.number().nullable().optional(),
+		holdExpirySeconds: z.number().int().positive().nullable().optional(),
 		enabled: z.boolean().optional()
 	})
 });
-const envUpdateResponseSchema = z.object({
-	type: z.literal("dashboard.environments.update.response"),
+const contextUpdateResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.update.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
-/** Set an environment's test-run access flag (allowLocalExecution). */
-const envTestAccessSetRequestSchema = z.object({
-	type: z.literal("dashboard.environments.test_access.set"),
+/** Set an context's test-run access flag (allowLocalExecution). */
+const contextTestAccessSetRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.test_access.set"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	allowLocalExecution: z.boolean()
 });
-const envTestAccessSetResponseSchema = z.object({
-	type: z.literal("dashboard.environments.test_access.set.response"),
+const contextTestAccessSetResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.test_access.set.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
-/** Delete an environment. */
-const envDeleteRequestSchema = z.object({
-	type: z.literal("dashboard.environments.delete"),
+/** Delete an context. */
+const contextDeleteRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.delete"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string()
+	contextId: z.string()
 });
 /**
-* Machine-readable codes for environment-delete rejections.
+* Machine-readable codes for context-delete rejections.
 *
 * Three-category response taxonomy on dashboard responses, each mapped to a
 * distinct HTTP status by the Platform proxy: a bare free-text `error` is the
-* human message and maps to 400; a missing result (e.g. environment not found)
+* human message and maps to 400; a missing result (e.g. context not found)
 * maps to 404; an `errorCode` flags a specific business rejection mapped to a
 * non-400/404 status — here `pending_held_runs` → 409. The sibling precedent is
 * the rerun response's `errorCode` (`runArchivedNotRerunnable` → 410) above.
 */
-const EnvDeleteErrorCode = z.enum(["pending_held_runs"]);
-const envDeleteResponseSchema = z.object({
-	type: z.literal("dashboard.environments.delete.response"),
+const ContextDeleteErrorCode = z.enum(["pending_held_runs"]);
+const contextDeleteResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.delete.response"),
 	requestId: z.string(),
 	error: z.string().optional(),
-	errorCode: EnvDeleteErrorCode.optional()
+	errorCode: ContextDeleteErrorCode.optional()
 });
-/** List variables for an environment. */
-const envVarsListRequestSchema = z.object({
-	type: z.literal("dashboard.environments.variables.list"),
+/** List variables for an context. */
+const contextVarsListRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.variables.list"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string()
+	contextId: z.string()
 });
-const envVarsListResponseSchema = z.object({
-	type: z.literal("dashboard.environments.variables.list.response"),
+const contextVarsListResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.variables.list.response"),
 	requestId: z.string(),
 	variables: z.array(z.object({
 		key: z.string(),
@@ -930,44 +1039,53 @@ const envVarsListResponseSchema = z.object({
 	})).optional(),
 	error: z.string().optional()
 });
-/** Set (create or update) a variable on an environment. */
-const envVarSetRequestSchema = z.object({
-	type: z.literal("dashboard.environments.variables.set"),
+/**
+* Set (create or update) a variable on an context.
+*
+* Under the `permissive` posture the browser sends the plaintext `value`.
+* Under the `encrypted` posture it sends a `sealed` envelope instead (the value
+* sealed to the orchestrator's X25519 key in the browser). Exactly one of
+* `value` / `sealed` is present; `value` stays optional for backward
+* compatibility with older dashboards that only ever send plaintext.
+*/
+const contextVarSetRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.variables.set"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	key: z.string(),
-	value: z.string(),
+	value: z.string().optional(),
+	sealed: dashboardSealedEnvelopeSchema.optional(),
 	locked: z.boolean().optional()
-});
-const envVarSetResponseSchema = z.object({
-	type: z.literal("dashboard.environments.variables.set.response"),
+}).refine((m) => m.value === void 0 !== (m.sealed === void 0), { message: "exactly one of value / sealed must be present" });
+const contextVarSetResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.variables.set.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
-/** Delete a variable from an environment. */
-const envVarDeleteRequestSchema = z.object({
-	type: z.literal("dashboard.environments.variables.delete"),
+/** Delete a variable from an context. */
+const contextVarDeleteRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.variables.delete"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	key: z.string()
 });
-const envVarDeleteResponseSchema = z.object({
-	type: z.literal("dashboard.environments.variables.delete.response"),
+const contextVarDeleteResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.variables.delete.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
-/** List source overrides for an environment + routing key. */
-const envSourceOverridesListRequestSchema = z.object({
-	type: z.literal("dashboard.environments.source-overrides.list"),
+/** List source overrides for an context + routing key. */
+const contextSourceOverridesListRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.source-overrides.list"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	routingKey: z.string()
 });
-const envSourceOverridesListResponseSchema = z.object({
-	type: z.literal("dashboard.environments.source-overrides.list.response"),
+const contextSourceOverridesListResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.source-overrides.list.response"),
 	requestId: z.string(),
 	overrides: z.array(z.object({
 		key: z.string(),
@@ -976,77 +1094,77 @@ const envSourceOverridesListResponseSchema = z.object({
 	error: z.string().optional()
 });
 /** Set a source override variable. */
-const envSourceOverrideSetRequestSchema = z.object({
-	type: z.literal("dashboard.environments.source-overrides.set"),
+const contextSourceOverrideSetRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.source-overrides.set"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	routingKey: z.string(),
 	key: z.string(),
 	value: z.string()
 });
-const envSourceOverrideSetResponseSchema = z.object({
-	type: z.literal("dashboard.environments.source-overrides.set.response"),
+const contextSourceOverrideSetResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.source-overrides.set.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
 /** Delete a source override variable. */
-const envSourceOverrideDeleteRequestSchema = z.object({
-	type: z.literal("dashboard.environments.source-overrides.delete"),
+const contextSourceOverrideDeleteRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.source-overrides.delete"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	routingKey: z.string(),
 	key: z.string()
 });
-const envSourceOverrideDeleteResponseSchema = z.object({
-	type: z.literal("dashboard.environments.source-overrides.delete.response"),
+const contextSourceOverrideDeleteResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.source-overrides.delete.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
 /**
-* A scope→environment binding with its host selector. `hostPattern` is the host
+* A scope→context binding with its host selector. `hostPattern` is the host
 * the binding applies to (`'**'` = all hosts); exact / glob / regex over a
 * fan-out child's agentId / hostname / labels.
 */
-const envBindingEntrySchema = z.object({
+const contextBindingEntrySchema = z.object({
 	scopePattern: z.string(),
 	hostPattern: z.string()
 });
-/** List bindings for an environment. */
-const envBindingsListRequestSchema = z.object({
-	type: z.literal("dashboard.environments.bindings.list"),
+/** List bindings for an context. */
+const contextBindingsListRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.bindings.list"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string()
+	contextId: z.string()
 });
-const envBindingsListResponseSchema = z.object({
-	type: z.literal("dashboard.environments.bindings.list.response"),
+const contextBindingsListResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.bindings.list.response"),
 	requestId: z.string(),
-	bindings: z.array(envBindingEntrySchema).optional(),
+	bindings: z.array(contextBindingEntrySchema).optional(),
 	error: z.string().optional()
 });
-/** Set bindings (scope + host patterns) for an environment. */
-const envBindingsSetRequestSchema = z.object({
-	type: z.literal("dashboard.environments.bindings.set"),
+/** Set bindings (scope + host patterns) for an context. */
+const contextBindingsSetRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.bindings.set"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
-	bindings: z.array(envBindingEntrySchema)
+	contextId: z.string(),
+	bindings: z.array(contextBindingEntrySchema)
 });
-const envBindingsSetResponseSchema = z.object({
-	type: z.literal("dashboard.environments.bindings.set.response"),
+const contextBindingsSetResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.bindings.set.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
 /** List all scoped secrets for the org. */
-const envSecretsListRequestSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.list"),
+const contextSecretsListRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.list"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema
 });
-const envSecretsListResponseSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.list.response"),
+const contextSecretsListResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.list.response"),
 	requestId: z.string(),
 	secrets: z.array(z.object({
 		scope: z.string(),
@@ -1056,81 +1174,90 @@ const envSecretsListResponseSchema = z.object({
 	})).optional(),
 	error: z.string().optional()
 });
-/** Set (create or update) a scoped secret. */
-const envSecretSetRequestSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.set"),
+/**
+* Set (create or update) a scoped secret.
+*
+* Under the `permissive` posture the browser sends the plaintext `value`.
+* Under the `encrypted` posture it sends a `sealed` envelope instead (the value
+* sealed to the orchestrator's X25519 key in the browser). Exactly one of
+* `value` / `sealed` is present; `value` stays optional for backward
+* compatibility with older dashboards that only ever send plaintext.
+*/
+const contextSecretSetRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.set"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	scope: z.string(),
 	key: z.string(),
-	value: z.string()
-});
-const envSecretSetResponseSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.set.response"),
+	value: z.string().optional(),
+	sealed: dashboardSealedEnvelopeSchema.optional()
+}).refine((m) => m.value === void 0 !== (m.sealed === void 0), { message: "exactly one of value / sealed must be present" });
+const contextSecretSetResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.set.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
 /** Delete a scoped secret. */
-const envSecretDeleteRequestSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.delete"),
+const contextSecretDeleteRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.delete"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	scope: z.string(),
 	key: z.string()
 });
-const envSecretDeleteResponseSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.delete.response"),
+const contextSecretDeleteResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.delete.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
 /** Create an empty scope. */
-const envSecretScopeCreateRequestSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.scope.create"),
+const contextSecretScopeCreateRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.scope.create"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	scope: z.string()
 });
-const envSecretScopeCreateResponseSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.scope.create.response"),
+const contextSecretScopeCreateResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.scope.create.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
-/** Rename a scope -- also updates all environment bindings referencing old scope. */
-const envSecretScopeRenameRequestSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.scope.rename"),
+/** Rename a scope -- also updates all context bindings referencing old scope. */
+const contextSecretScopeRenameRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.scope.rename"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	oldScope: z.string(),
 	newScope: z.string()
 });
-const envSecretScopeRenameResponseSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.scope.rename.response"),
+const contextSecretScopeRenameResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.scope.rename.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
-/** Delete a scope and all its secrets. Also removes environment bindings referencing this scope. */
-const envSecretScopeDeleteRequestSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.scope.delete"),
+/** Delete a scope and all its secrets. Also removes context bindings referencing this scope. */
+const contextSecretScopeDeleteRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.scope.delete"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
 	scope: z.string()
 });
-const envSecretScopeDeleteResponseSchema = z.object({
-	type: z.literal("dashboard.environments.secrets.scope.delete.response"),
+const contextSecretScopeDeleteResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.secrets.scope.delete.response"),
 	requestId: z.string(),
 	error: z.string().optional()
 });
-/** Fetch runs that targeted a specific environment, keyed by environment id. */
-const envHistoryRequestSchema = z.object({
-	type: z.literal("dashboard.environments.history"),
+/** Fetch runs that targeted a specific context, keyed by context id. */
+const contextHistoryRequestSchema = z.object({
+	type: z.literal("dashboard.contexts.history"),
 	requestId: z.string(),
 	actor: actorPrincipalSchema,
-	environmentId: z.string(),
+	contextId: z.string(),
 	limit: z.number().optional(),
 	offset: z.number().optional()
 });
-const envHistoryResponseSchema = z.object({
-	type: z.literal("dashboard.environments.history.response"),
+const contextHistoryResponseSchema = z.object({
+	type: z.literal("dashboard.contexts.history.response"),
 	requestId: z.string(),
 	runs: z.array(z.object({
 		id: z.string(),
@@ -1141,19 +1268,13 @@ const envHistoryResponseSchema = z.object({
 		commitSha: z.string().nullable(),
 		startedAt: z.coerce.string().nullable(),
 		completedAt: z.coerce.string().nullable(),
-		environment: z.string().nullable()
+		context: z.string().nullable()
 	})).optional(),
+	hasMore: z.boolean().optional(),
 	error: z.string().optional()
 });
-/** Status values for held runs (approval queue). */
-const HeldRunStatus = z.enum([
-	"pending",
-	"approved",
-	"rejected",
-	"expired"
-]);
 /** Queue type for held runs. */
-const HeldRunQueueType = z.enum(["environment", "security"]);
+const HeldRunQueueType = z.enum(["context", "security"]);
 /** List held runs. */
 const heldRunsListRequestSchema = z.object({
 	type: z.literal("dashboard.held-runs.list"),
@@ -1163,6 +1284,14 @@ const heldRunsListRequestSchema = z.object({
 	queueType: HeldRunQueueType.optional(),
 	runId: z.string().optional(),
 	/**
+	* Narrow to a single hold by its `held_runs.id`. The Platform's held-run
+	* approval gate uses this to resolve one hold's `holdType` before deciding
+	* which permission the caller needs. Optional so an orchestrator that does
+	* not know the field still answers the request — the Platform then narrows
+	* client-side from the response.
+	*/
+	heldRunId: z.string().optional(),
+	/**
 	* Target org the read must be scoped to, carried per-request by the Platform
 	* (the validated `:orgId` path param). The orchestrator honors this over its
 	* static connection-level org so a Platform-first `kici run remote` org —
@@ -1179,11 +1308,11 @@ const heldRunsListResponseSchema = z.object({
 	heldRuns: z.array(z.object({
 		id: z.string(),
 		runId: z.string(),
-		environmentId: z.string().nullable(),
-		environmentName: z.string().nullable(),
+		contextId: z.string().nullable(),
+		contextName: z.string().nullable(),
 		holdType: z.string(),
-		queueType: HeldRunQueueType,
-		status: HeldRunStatus,
+		queueType: z.string(),
+		status: z.string(),
 		requestedAt: z.coerce.string(),
 		resolvedAt: z.coerce.string().nullable(),
 		resolvedBy: z.string().nullable(),
@@ -1796,7 +1925,7 @@ const testRelayTriggerResponseSchema = z.object({
 	status: z.enum(["accepted", "rejected"]).optional(),
 	reason: z.string().optional(),
 	jobIds: z.array(z.string()).optional(),
-	/** User-visible warnings on acceptance (e.g. skipped non-test bound environments). */
+	/** User-visible warnings on acceptance (e.g. skipped non-test bound contexts). */
 	warnings: z.array(z.string()).optional(),
 	error: z.string().optional()
 });
@@ -1859,11 +1988,13 @@ const testRelayCancelResponseSchema = z.object({
 const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 	dashboardRunDetailRequestSchema,
 	dashboardRunStructuredRequestSchema,
+	dashboardRunStateRequestSchema,
 	dashboardStepLogsRequestSchema,
 	dashboardAttestationsListRequestSchema,
 	dashboardAttestationsListAllRequestSchema,
 	dashboardAttestationGetRequestSchema,
 	dashboardAttestationRetryRequestSchema,
+	dashboardArtifactsListRequestSchema,
 	dashboardRunsListRequestSchema,
 	dashboardRunsFiltersRequestSchema,
 	dashboardSourcesListRequestSchema,
@@ -1872,27 +2003,27 @@ const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 	runCancelRequestSchema,
 	dashboardPayloadRequestSchema,
 	dashboardOrchLogsRequestSchema,
-	envListRequestSchema,
-	envGetRequestSchema,
-	envCreateRequestSchema,
-	envUpdateRequestSchema,
-	envTestAccessSetRequestSchema,
-	envDeleteRequestSchema,
-	envVarsListRequestSchema,
-	envVarSetRequestSchema,
-	envVarDeleteRequestSchema,
-	envSourceOverridesListRequestSchema,
-	envSourceOverrideSetRequestSchema,
-	envSourceOverrideDeleteRequestSchema,
-	envBindingsListRequestSchema,
-	envBindingsSetRequestSchema,
-	envSecretsListRequestSchema,
-	envSecretSetRequestSchema,
-	envSecretDeleteRequestSchema,
-	envSecretScopeCreateRequestSchema,
-	envSecretScopeRenameRequestSchema,
-	envSecretScopeDeleteRequestSchema,
-	envHistoryRequestSchema,
+	contextListRequestSchema,
+	contextGetRequestSchema,
+	contextCreateRequestSchema,
+	contextUpdateRequestSchema,
+	contextTestAccessSetRequestSchema,
+	contextDeleteRequestSchema,
+	contextVarsListRequestSchema,
+	contextVarSetRequestSchema,
+	contextVarDeleteRequestSchema,
+	contextSourceOverridesListRequestSchema,
+	contextSourceOverrideSetRequestSchema,
+	contextSourceOverrideDeleteRequestSchema,
+	contextBindingsListRequestSchema,
+	contextBindingsSetRequestSchema,
+	contextSecretsListRequestSchema,
+	contextSecretSetRequestSchema,
+	contextSecretDeleteRequestSchema,
+	contextSecretScopeCreateRequestSchema,
+	contextSecretScopeRenameRequestSchema,
+	contextSecretScopeDeleteRequestSchema,
+	contextHistoryRequestSchema,
 	heldRunsListRequestSchema,
 	heldRunApproveRequestSchema,
 	heldRunRejectRequestSchema,
@@ -1914,6 +2045,7 @@ const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 	backendSyncRequestSchema,
 	backendTestRequestSchema,
 	dashboardEventLogListRequestSchema,
+	dashboardEventLogActivityRequestSchema,
 	dashboardEventLogDetailRequestSchema,
 	dashboardEventLogPayloadStreamRequestSchema,
 	dashboardEventDlqListRequestSchema,
@@ -1933,11 +2065,13 @@ const dashboardPlatformToOrchSchema = z.discriminatedUnion("type", [
 const dashboardOrchToPlatformSchema = z.discriminatedUnion("type", [
 	dashboardRunDetailResponseSchema,
 	dashboardRunStructuredResponseSchema,
+	dashboardRunStateResponseSchema,
 	dashboardStepLogsResponseSchema,
 	dashboardAttestationsListResponseSchema,
 	dashboardAttestationsListAllResponseSchema,
 	dashboardAttestationGetResponseSchema,
 	dashboardAttestationRetryResponseSchema,
+	dashboardArtifactsListResponseSchema,
 	dashboardRunsListResponseSchema,
 	dashboardRunsFiltersResponseSchema,
 	dashboardSourcesListResponseSchema,
@@ -1946,27 +2080,27 @@ const dashboardOrchToPlatformSchema = z.discriminatedUnion("type", [
 	runCancelResponseSchema,
 	dashboardPayloadResponseSchema,
 	dashboardOrchLogsResponseSchema,
-	envListResponseSchema,
-	envGetResponseSchema,
-	envCreateResponseSchema,
-	envUpdateResponseSchema,
-	envTestAccessSetResponseSchema,
-	envDeleteResponseSchema,
-	envVarsListResponseSchema,
-	envVarSetResponseSchema,
-	envVarDeleteResponseSchema,
-	envSourceOverridesListResponseSchema,
-	envSourceOverrideSetResponseSchema,
-	envSourceOverrideDeleteResponseSchema,
-	envBindingsListResponseSchema,
-	envBindingsSetResponseSchema,
-	envSecretsListResponseSchema,
-	envSecretSetResponseSchema,
-	envSecretDeleteResponseSchema,
-	envSecretScopeCreateResponseSchema,
-	envSecretScopeRenameResponseSchema,
-	envSecretScopeDeleteResponseSchema,
-	envHistoryResponseSchema,
+	contextListResponseSchema,
+	contextGetResponseSchema,
+	contextCreateResponseSchema,
+	contextUpdateResponseSchema,
+	contextTestAccessSetResponseSchema,
+	contextDeleteResponseSchema,
+	contextVarsListResponseSchema,
+	contextVarSetResponseSchema,
+	contextVarDeleteResponseSchema,
+	contextSourceOverridesListResponseSchema,
+	contextSourceOverrideSetResponseSchema,
+	contextSourceOverrideDeleteResponseSchema,
+	contextBindingsListResponseSchema,
+	contextBindingsSetResponseSchema,
+	contextSecretsListResponseSchema,
+	contextSecretSetResponseSchema,
+	contextSecretDeleteResponseSchema,
+	contextSecretScopeCreateResponseSchema,
+	contextSecretScopeRenameResponseSchema,
+	contextSecretScopeDeleteResponseSchema,
+	contextHistoryResponseSchema,
 	heldRunsListResponseSchema,
 	heldRunApproveResponseSchema,
 	heldRunRejectResponseSchema,
@@ -1988,6 +2122,7 @@ const dashboardOrchToPlatformSchema = z.discriminatedUnion("type", [
 	backendSyncResponseSchema,
 	backendTestResponseSchema,
 	dashboardEventLogListResponseSchema,
+	dashboardEventLogActivityResponseSchema,
 	dashboardEventLogDetailResponseSchema,
 	dashboardEventLogPayloadChunkSchema,
 	dashboardEventDlqListResponseSchema,
@@ -2078,11 +2213,11 @@ const runListItemSchema = z.object({
 	hadCompileJob: z.boolean(),
 	compileJobId: z.string().nullable(),
 	/**
-	* Distinct bound deployment-environment names across the run's jobs
-	* (first-seen order). Drives the run-list environment chips; empty/absent
-	* when no job binds an environment.
+	* Distinct bound deployment-context names across the run's jobs
+	* (first-seen order). Drives the run-list context chips; empty/absent
+	* when no job binds an context.
 	*/
-	environments: z.array(z.string()).optional(),
+	contexts: z.array(z.string()).optional(),
 	/**
 	* Run-level repo provider (origin host) — distinct from `source.provider`
 	* which is derived from the routing key. Drives provider-aware repo links.
@@ -2092,13 +2227,21 @@ const runListItemSchema = z.object({
 	localWorkingTree: z.boolean(),
 	source: runListSourceSchema.nullable()
 });
-/** Paginated run list response envelope. */
+/**
+* Cursor-paginated run list response envelope.
+*
+* Keyset (cursor) pagination: `nextCursor` fetches the next (older) page,
+* `prevCursor` the previous (newer) page — both opaque, `null` when there is no
+* such page. `hasMore` is true when an older page exists. `approxTotal` is a
+* cached, approximate match count for the "~N runs" label (not an exact total).
+*/
 const runListResponseSchema = z.object({
 	runs: z.array(runListItemSchema),
-	total: z.number(),
-	page: z.number(),
-	pageSize: z.number(),
-	hasMore: z.boolean()
+	nextCursor: z.string().nullable(),
+	prevCursor: z.string().nullable(),
+	hasMore: z.boolean(),
+	approxTotal: z.number(),
+	pageSize: z.number()
 });
 const diagnosticsInfraAgentSchema = z.object({
 	agentId: z.string(),
@@ -2151,11 +2294,25 @@ const diagnosticsInfraOrchestratorSchema = z.object({
 	* Self-reported deployment shape, used by the dashboard to build the correct
 	* per-orchestrator kici-admin invocation. Orchestrators that never reported
 	* it serialize as `mode: 'unknown'` with null container fields.
+	*
+	* `adminInvocation` is a shell command, not a pair of raw paths: either half
+	* is single-quoted when its path holds whitespace, so it is rendered verbatim
+	* and a reader that wants the shim path back has to split it as shell words
+	* rather than on the last space.
+	*
+	* `adminPath` is the `windows` counterpart: the RAW, unquoted path of the
+	* `kici-admin.cmd` launcher, null for every other mode and whenever it could
+	* not be located. It is deliberately not a command — cmd.exe runs a
+	* double-quoted path in command position while PowerShell only prints it, so
+	* the renderer has to quote it per shell and a pre-quoted value would take
+	* that choice away.
 	*/
 	deployment: z.object({
 		mode: DeploymentModeSchema,
 		containerName: z.string().nullable(),
-		containerRuntime: DeploymentContainerRuntimeSchema.nullable()
+		containerRuntime: DeploymentContainerRuntimeSchema.nullable(),
+		adminInvocation: z.string().nullable(),
+		adminPath: z.string().nullable()
 	}),
 	s3LogAccess: z.boolean().nullable().optional(),
 	agentCount: z.number(),
@@ -2189,6 +2346,16 @@ const diagnosticsInfraOrchestratorSchema = z.object({
 	})).optional(),
 	error: z.string().optional()
 });
+/**
+* A single infrastructure health alert.
+*
+* Both vocabulary fields are `z.string()` on purpose. `InfraAlertType` and
+* `InfraAlertSeverity` (`diagnostics/infra-alert.ts`) name the *known*
+* vocabulary the producer mints from and the read-side consumers colour by; the
+* wire stays permissive because the `kici` CLI hard-parses this response while
+* pinned to an older version than the hosted Platform it is talking to. A
+* strict enum would fail the whole response rather than degrade one row.
+*/
 const diagnosticsInfraAlertSchema = z.object({
 	type: z.string(),
 	message: z.string(),
@@ -2285,6 +2452,6 @@ const DashboardResponseErrorCode = z.enum([
 	"internal_error"
 ]);
 //#endregion
-export { DASHBOARD_REQUEST_TYPES, DASHBOARD_REQUEST_TYPE_SET, DashboardResponseErrorCode, EnvDeleteErrorCode, EventLogPayloadStreamError, FleetHostDisposition, HeldRunQueueType, HeldRunStatus, TestRelayType, attestationListFiltersSchema, attestationListItemSchema, attestationListSummarySchema, attestationVerifyStatusSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardAttestationGetRequestSchema, dashboardAttestationGetResponseSchema, dashboardAttestationRetryRequestSchema, dashboardAttestationRetryResponseSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListAllRequestSchema, dashboardAttestationsListAllResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardFleetWorkflowsForHostRequestSchema, dashboardFleetWorkflowsForHostResponseSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunStructuredRequestSchema, dashboardRunStructuredResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, envBindingEntrySchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envTestAccessSetRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetHostWorkflowSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, trustPolicyResponseSchema };
+export { ContextDeleteErrorCode, DASHBOARD_REQUEST_TYPES, DASHBOARD_REQUEST_TYPE_SET, DashboardResponseErrorCode, EventLogPayloadStreamError, FleetHostDisposition, HeldRunQueueType, HeldRunStatus, TestRelayType, artifactListItemSchema, attestationListFiltersSchema, attestationListItemSchema, attestationListSummarySchema, attestationVerifyStatusSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, contextBindingEntrySchema, contextBindingsListRequestSchema, contextBindingsSetRequestSchema, contextCreateRequestSchema, contextDeleteRequestSchema, contextGetRequestSchema, contextHistoryRequestSchema, contextHistoryResponseSchema, contextListRequestSchema, contextSecretDeleteRequestSchema, contextSecretScopeCreateRequestSchema, contextSecretScopeDeleteRequestSchema, contextSecretScopeRenameRequestSchema, contextSecretSetRequestSchema, contextSecretsListRequestSchema, contextSourceOverrideDeleteRequestSchema, contextSourceOverrideSetRequestSchema, contextSourceOverridesListRequestSchema, contextTestAccessSetRequestSchema, contextUpdateRequestSchema, contextVarDeleteRequestSchema, contextVarSetRequestSchema, contextVarsListRequestSchema, dashboardArtifactsListRequestSchema, dashboardArtifactsListResponseSchema, dashboardAttestationGetRequestSchema, dashboardAttestationGetResponseSchema, dashboardAttestationRetryRequestSchema, dashboardAttestationRetryResponseSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListAllRequestSchema, dashboardAttestationsListAllResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogActivityRequestSchema, dashboardEventLogActivityResponseSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardFleetWorkflowsForHostRequestSchema, dashboardFleetWorkflowsForHostResponseSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunStateRequestSchema, dashboardRunStateResponseSchema, dashboardRunStructuredRequestSchema, dashboardRunStructuredResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, diagnosticsInfraAlertSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, eventLogActivityCountsSchema, eventLogListItemSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetHostWorkflowSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, trustPolicyResponseSchema };
 
 //# sourceMappingURL=dashboard.js.map