@kici-dev/engine 0.1.27 → 0.2.0

package/dist/protocol/messages/dashboard.d.ts

@@ -79,13 +79,13 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
             value: z.ZodString;
         }, z.core.$strip>;
         status: z.ZodEnum<{
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            failed: "failed";
             held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodObject<{
@@ -102,21 +102,21 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
         completedAt: z.ZodNullable<z.ZodString>;
         durationMs: z.ZodNullable<z.ZodNumber>;
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
             value: z.ZodString;
         }, z.core.$strip>>;
         failureCategory: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             cancelled: "cancelled";
+            infra: "infra";
             init_failure: "init_failure";
-            timed_out: "timed_out";
             step_failed: "step_failed";
-            infra: "infra";
+            timed_out: "timed_out";
+            unknown: "unknown";
         }>>;
         failureReason: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
@@ -131,17 +131,18 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                 value: z.ZodString;
             }, z.core.$strip>;
             status: z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>;
             startedAt: z.ZodNullable<z.ZodString>;
             completedAt: z.ZodNullable<z.ZodString>;
@@ -157,14 +158,17 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                     run: "run";
                 }>;
                 category: z.ZodEnum<{
-                    secret_resolution: "secret_resolution";
-                    install_secrets: "install_secrets";
-                    lock_resolution: "lock_resolution";
+                    approval_misconfig: "approval_misconfig";
                     build_coordination: "build_coordination";
                     context_rules: "context_rules";
                     dynamic_eval: "dynamic_eval";
-                    no_agent: "no_agent";
+                    install_secrets: "install_secrets";
+                    lock_resolution: "lock_resolution";
                     matrix_expansion: "matrix_expansion";
+                    no_agent: "no_agent";
+                    sandbox_denied: "sandbox_denied";
+                    secret_resolution: "secret_resolution";
+                    trust_policy: "trust_policy";
                 }>;
                 message: z.ZodObject<{
                     untrusted: z.ZodLiteral<true>;
@@ -177,17 +181,18 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                     value: z.ZodString;
                 }, z.core.$strip>;
                 runOn: z.ZodArray<z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
-                    pending: "pending";
-                    running: "running";
-                    failed: "failed";
                     cancelled: "cancelled";
                     cancelling: "cancelling";
+                    drift_dropped: "drift_dropped";
+                    failed: "failed";
+                    pending: "pending";
                     queued: "queued";
                     recovering: "recovering";
+                    running: "running";
+                    skipped: "skipped";
+                    success: "success";
                     timed_out_stale: "timed_out_stale";
-                    drift_dropped: "drift_dropped";
+                    unroutable: "unroutable";
                 }>>;
             }, z.core.$strip>>;
             outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -202,12 +207,12 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                     value: z.ZodString;
                 }, z.core.$strip>;
                 status: z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
+                    cancelled: "cancelled";
+                    failed: "failed";
                     pending: "pending";
                     running: "running";
-                    failed: "failed";
-                    cancelled: "cancelled";
+                    skipped: "skipped";
+                    success: "success";
                 }>;
                 exitCode: z.ZodNullable<z.ZodNumber>;
                 durationMs: z.ZodNullable<z.ZodNumber>;
@@ -219,11 +224,11 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
                 }, z.core.$strip>>;
                 stepType: z.ZodString;
                 checkOutcome: z.ZodNullable<z.ZodEnum<{
-                    skipped: "skipped";
                     applied: "applied";
                     declined: "declined";
                     "dry-run": "dry-run";
                     no_check: "no_check";
+                    skipped: "skipped";
                 }>>;
                 secretsAccessed: z.ZodArray<z.ZodString>;
             }, z.core.$strip>>;
@@ -232,6 +237,104 @@ export declare const dashboardRunStructuredResponseSchema: z.ZodObject<{
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DashboardRunStructuredResponse = z.infer<typeof dashboardRunStructuredResponseSchema>;
+/**
+ * Request the current mirror-projection state of a single run from the
+ * orchestrator. Unlike `dashboard.run.detail` (a user-plane read that
+ * access-logs), this is a **system reconciliation read**: the Platform's
+ * `RunMirrorReconciler` issues it for a run stuck non-terminal in the mirror to
+ * recover a terminal frame dropped on a live connection. The `actor` is always a
+ * `system` principal, and the orchestrator does NOT write an access-log row.
+ */
+export declare const dashboardRunStateRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>;
+export type DashboardRunStateRequest = z.infer<typeof dashboardRunStateRequestSchema>;
+/**
+ * Response carrying the run's current `StateReplayRun` mirror-projection shape
+ * (the same shape `state.replay` carries), or `run: null` when the orchestrator
+ * has no such run. Consumed by `upsertRunMirror` on the Platform side.
+ */
+export declare const dashboardRunStateResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state.response">;
+    requestId: z.ZodString;
+    run: z.ZodNullable<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            cancelling: "cancelling";
+            failed: "failed";
+            held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
+        }>;
+        routingKey: z.ZodOptional<z.ZodString>;
+        repoIdentifier: z.ZodOptional<z.ZodString>;
+        sha: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        triggerEvent: z.ZodOptional<z.ZodString>;
+        commitMessage: z.ZodOptional<z.ZodString>;
+        jobCount: z.ZodNumber;
+        startedAt: z.ZodNumber;
+        completedAt: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+        parentRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        originalRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredByAgentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        failureReason: z.ZodOptional<z.ZodString>;
+        failureClass: z.ZodOptional<z.ZodEnum<{
+            cancelled: "cancelled";
+            dead_orchestrator: "dead_orchestrator";
+            never_started: "never_started";
+            step_failure: "step_failure";
+            timed_out: "timed_out";
+        }>>;
+        jobs: z.ZodArray<z.ZodObject<{
+            jobId: z.ZodString;
+            jobName: z.ZodString;
+            status: z.ZodString;
+            startedAt: z.ZodOptional<z.ZodNumber>;
+            completedAt: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+            errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DashboardRunStateResponse = z.infer<typeof dashboardRunStateResponseSchema>;
 /** Request step logs from orchestrator. */
 export declare const dashboardStepLogsRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs">;
@@ -295,14 +398,17 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
             context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -310,17 +416,18 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
     needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
         upstreamName: z.ZodString;
         runOn: z.ZodArray<z.ZodEnum<{
-            skipped: "skipped";
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            drift_dropped: "drift_dropped";
+            failed: "failed";
+            pending: "pending";
             queued: "queued";
             recovering: "recovering";
+            running: "running";
+            skipped: "skipped";
+            success: "success";
             timed_out_stale: "timed_out_stale";
-            drift_dropped: "drift_dropped";
+            unroutable: "unroutable";
         }>>;
     }, z.core.$strip>>>>;
     steps: z.ZodArray<z.ZodObject<{
@@ -335,17 +442,17 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
         stepType: z.ZodOptional<z.ZodString>;
         secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            skipped: "skipped";
             applied: "applied";
             declined: "declined";
             "dry-run": "dry-run";
             no_check: "no_check";
+            skipped: "skipped";
         }>>>;
         driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            sequential: "sequential";
             "parallel-child": "parallel-child";
             "parallel-group": "parallel-group";
+            sequential: "sequential";
         }>>>;
         groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, z.core.$strip>>;
@@ -380,14 +487,17 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
                 run: "run";
             }>;
             category: z.ZodEnum<{
-                secret_resolution: "secret_resolution";
-                install_secrets: "install_secrets";
-                lock_resolution: "lock_resolution";
+                approval_misconfig: "approval_misconfig";
                 build_coordination: "build_coordination";
                 context_rules: "context_rules";
                 dynamic_eval: "dynamic_eval";
-                no_agent: "no_agent";
+                install_secrets: "install_secrets";
+                lock_resolution: "lock_resolution";
                 matrix_expansion: "matrix_expansion";
+                no_agent: "no_agent";
+                sandbox_denied: "sandbox_denied";
+                secret_resolution: "secret_resolution";
+                trust_policy: "trust_policy";
             }>;
             message: z.ZodString;
             jobName: z.ZodOptional<z.ZodString>;
@@ -395,17 +505,18 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
         needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
             upstreamName: z.ZodString;
             runOn: z.ZodArray<z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>>;
         }, z.core.$strip>>>>;
         steps: z.ZodArray<z.ZodObject<{
@@ -420,30 +531,30 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
             stepType: z.ZodOptional<z.ZodString>;
             secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
             checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                skipped: "skipped";
                 applied: "applied";
                 declined: "declined";
                 "dry-run": "dry-run";
                 no_check: "no_check";
+                skipped: "skipped";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                sequential: "sequential";
                 "parallel-child": "parallel-child";
                 "parallel-group": "parallel-group";
+                sequential: "sequential";
             }>>>;
             groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
-            head: "head";
             base: "base";
+            head: "head";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
@@ -453,14 +564,17 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
             context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -520,10 +634,10 @@ export type DashboardAttestationsListRequest = z.infer<typeof dashboardAttestati
  *   trust root).
  */
 export declare const attestationVerifyStatusSchema: z.ZodEnum<{
-    pending: "pending";
     failed: "failed";
-    verified: "verified";
+    pending: "pending";
     unverifiable: "unverifiable";
+    verified: "verified";
 }>;
 export type AttestationVerifyStatus = z.infer<typeof attestationVerifyStatusSchema>;
 /**
@@ -557,20 +671,20 @@ export declare const attestationListItemSchema: z.ZodObject<{
     }, z.core.$strip>;
     runId: z.ZodOptional<z.ZodString>;
     verifyStatus: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         failed: "failed";
-        verified: "verified";
+        pending: "pending";
         unverifiable: "unverifiable";
+        verified: "verified";
     }>>;
     verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     sourceOrigin: z.ZodOptional<z.ZodEnum<{
-        triggered: "triggered";
         "run-remote": "run-remote";
+        triggered: "triggered";
     }>>;
     originOrgId: z.ZodOptional<z.ZodString>;
     attestationOrigin: z.ZodOptional<z.ZodEnum<{
-        live: "live";
         deferred: "deferred";
+        live: "live";
         "offline-backfill": "offline-backfill";
     }>>;
 }, z.core.$strip>;
@@ -605,26 +719,90 @@ export declare const dashboardAttestationsListResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DashboardAttestationsListResponse = z.infer<typeof dashboardAttestationsListResponseSchema>;
+/** Request the named artifacts uploaded by a run. */
+export declare const dashboardArtifactsListRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
+}, z.core.$strip>;
+export type DashboardArtifactsListRequest = z.infer<typeof dashboardArtifactsListRequestSchema>;
+/**
+ * Single artifact in the list response. `downloadUrl` is a presigned GET the
+ * dashboard links directly; it is omitted when the backing object could not be
+ * resolved (expired / missing), in which case the row still lists the metadata.
+ */
+export declare const artifactListItemSchema: z.ZodObject<{
+    name: z.ZodString;
+    jobId: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    sha256: z.ZodString;
+    createdAt: z.ZodString;
+    downloadUrl: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ArtifactListItem = z.infer<typeof artifactListItemSchema>;
+/** Response with the run's artifacts (correlates to dashboard.artifacts.list). */
+export declare const dashboardArtifactsListResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list.response">;
+    requestId: z.ZodString;
+    artifacts: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        jobId: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        sha256: z.ZodString;
+        createdAt: z.ZodString;
+        downloadUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    downloadUrlExpiresInSeconds: z.ZodOptional<z.ZodNumber>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DashboardArtifactsListResponse = z.infer<typeof dashboardArtifactsListResponseSchema>;
 /**
  * Metadata-only summary row for the org-wide list. No inlined bundle (keeps the
  * list cheap). `repository` / `workflow` are joined from `execution_runs` when
@@ -641,21 +819,21 @@ export declare const attestationListSummarySchema: z.ZodObject<{
     mediaType: z.ZodString;
     createdAt: z.ZodString;
     verifyStatus: z.ZodEnum<{
-        pending: "pending";
         failed: "failed";
-        verified: "verified";
+        pending: "pending";
         unverifiable: "unverifiable";
+        verified: "verified";
     }>;
     verifyReason: z.ZodNullable<z.ZodString>;
     repository: z.ZodNullable<z.ZodString>;
     workflow: z.ZodNullable<z.ZodString>;
     sourceOrigin: z.ZodOptional<z.ZodEnum<{
-        triggered: "triggered";
         "run-remote": "run-remote";
+        triggered: "triggered";
     }>>;
     attestationOrigin: z.ZodOptional<z.ZodEnum<{
-        live: "live";
         deferred: "deferred";
+        live: "live";
         "offline-backfill": "offline-backfill";
     }>>;
     pending: z.ZodOptional<z.ZodBoolean>;
@@ -666,10 +844,10 @@ export declare const attestationListFiltersSchema: z.ZodObject<{
     digest: z.ZodOptional<z.ZodString>;
     name: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         failed: "failed";
-        verified: "verified";
+        pending: "pending";
         unverifiable: "unverifiable";
+        verified: "verified";
     }>>;
     repository: z.ZodOptional<z.ZodString>;
     workflow: z.ZodOptional<z.ZodString>;
@@ -714,10 +892,10 @@ export declare const dashboardAttestationsListAllRequestSchema: z.ZodObject<{
         digest: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         status: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         repository: z.ZodOptional<z.ZodString>;
         workflow: z.ZodOptional<z.ZodString>;
@@ -742,21 +920,21 @@ export declare const dashboardAttestationsListAllResponseSchema: z.ZodObject<{
         mediaType: z.ZodString;
         createdAt: z.ZodString;
         verifyStatus: z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>;
         verifyReason: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         workflow: z.ZodNullable<z.ZodString>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
         pending: z.ZodOptional<z.ZodBoolean>;
@@ -764,6 +942,7 @@ export declare const dashboardAttestationsListAllResponseSchema: z.ZodObject<{
     page: z.ZodNumber;
     pageSize: z.ZodNumber;
     total: z.ZodNumber;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type DashboardAttestationsListAllResponse = z.infer<typeof dashboardAttestationsListAllResponseSchema>;
@@ -830,20 +1009,20 @@ export declare const dashboardAttestationGetResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
@@ -1064,10 +1243,10 @@ export declare const dashboardSourceSummarySchema: z.ZodObject<{
     name: z.ZodNullable<z.ZodString>;
     provider: z.ZodString;
     subtype: z.ZodEnum<{
-        github_app: "github_app";
         generic_webhook: "generic_webhook";
-        universal_git: "universal_git";
+        github_app: "github_app";
         local: "local";
+        universal_git: "universal_git";
     }>;
     enabled: z.ZodBoolean;
     createdAt: z.ZodString;
@@ -1116,10 +1295,10 @@ export declare const dashboardSourcesListResponseSchema: z.ZodObject<{
         name: z.ZodNullable<z.ZodString>;
         provider: z.ZodString;
         subtype: z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodString;
@@ -1274,19 +1453,19 @@ export declare const eventLogListItemSchema: z.ZodObject<{
     event: z.ZodString;
     action: z.ZodNullable<z.ZodString>;
     source: z.ZodEnum<{
-        relay: "relay";
         direct: "direct";
+        relay: "relay";
     }>;
     provider: z.ZodString;
     repoIdentifier: z.ZodNullable<z.ZodString>;
     ref: z.ZodNullable<z.ZodString>;
     status: z.ZodEnum<{
-        failed: "failed";
-        received: "received";
-        processed: "processed";
         duplicate: "duplicate";
-        lockfile_missing: "lockfile_missing";
+        failed: "failed";
         lockfile_corrupt: "lockfile_corrupt";
+        lockfile_missing: "lockfile_missing";
+        processed: "processed";
+        received: "received";
     }>;
     matchedCount: z.ZodNumber;
     runId: z.ZodNullable<z.ZodString>;
@@ -1334,12 +1513,12 @@ export declare const dashboardEventLogListRequestSchema: z.ZodObject<{
     routingKey: z.ZodOptional<z.ZodString>;
     event: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        failed: "failed";
-        received: "received";
-        processed: "processed";
         duplicate: "duplicate";
-        lockfile_missing: "lockfile_missing";
+        failed: "failed";
         lockfile_corrupt: "lockfile_corrupt";
+        lockfile_missing: "lockfile_missing";
+        processed: "processed";
+        received: "received";
     }>>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
     toTimestamp: z.ZodOptional<z.ZodString>;
@@ -1357,19 +1536,19 @@ declare const dashboardEventLogListResponseSchema: z.ZodObject<{
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -1435,19 +1614,19 @@ declare const dashboardEventLogDetailResponseSchema: z.ZodObject<{
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -1463,6 +1642,66 @@ declare const dashboardEventLogDetailResponseSchema: z.ZodObject<{
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/** Aggregate webhook-activity counts for a time window (org-scoped).
+ *  Powers the Runs-page misconfig strip + the `kici runs` hint. No payloads,
+ *  no repo identifiers — safe for all org members. */
+export declare const dashboardEventLogActivityRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    fromTimestamp: z.ZodString;
+    toTimestamp: z.ZodString;
+}, z.core.$strip>;
+/** Orchestrator-only bucketed counts over the window. `matched`/`unmatched`
+ *  distinguish a trigger-no-match delivery from one that produced a run — a
+ *  fact the Platform relay cannot compute (see the two-table architecture). */
+export declare const eventLogActivityCountsSchema: z.ZodObject<{
+    total: z.ZodNumber;
+    matched: z.ZodNumber;
+    unmatched: z.ZodNumber;
+    lockfileMissing: z.ZodNumber;
+    lockfileCorrupt: z.ZodNumber;
+    failed: z.ZodNumber;
+}, z.core.$strip>;
+export declare const dashboardEventLogActivityResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity.response">;
+    requestId: z.ZodString;
+    counts: z.ZodOptional<z.ZodObject<{
+        total: z.ZodNumber;
+        matched: z.ZodNumber;
+        unmatched: z.ZodNumber;
+        lockfileMissing: z.ZodNumber;
+        lockfileCorrupt: z.ZodNumber;
+        failed: z.ZodNumber;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
 /**
  * Reasons a chunked event-log payload stream may terminate without a body.
  * The terminal chunk carries `isLast=true` plus one of these codes in
@@ -1483,12 +1722,12 @@ declare const dashboardEventLogDetailResponseSchema: z.ZodObject<{
  *   connection for the request (synthesized on Platform side).
  */
 export declare const EventLogPayloadStreamError: z.ZodEnum<{
-    payload_unavailable: "payload_unavailable";
-    not_found: "not_found";
-    read_failed: "read_failed";
     forbidden: "forbidden";
+    not_found: "not_found";
     orch_stream_timeout: "orch_stream_timeout";
     orchestrator_unavailable: "orchestrator_unavailable";
+    payload_unavailable: "payload_unavailable";
+    read_failed: "read_failed";
 }>;
 export type EventLogPayloadStreamError = z.infer<typeof EventLogPayloadStreamError>;
 /** Platform → orchestrator: begin streaming the body for a delivery. */
@@ -1546,12 +1785,12 @@ export declare const dashboardEventLogPayloadChunkSchema: z.ZodObject<{
     data: z.ZodString;
     isLast: z.ZodBoolean;
     error: z.ZodOptional<z.ZodEnum<{
-        payload_unavailable: "payload_unavailable";
-        not_found: "not_found";
-        read_failed: "read_failed";
         forbidden: "forbidden";
+        not_found: "not_found";
         orch_stream_timeout: "orch_stream_timeout";
         orchestrator_unavailable: "orchestrator_unavailable";
+        payload_unavailable: "payload_unavailable";
+        read_failed: "read_failed";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
@@ -1568,12 +1807,12 @@ export declare const browserEventLogPayloadChunkSchema: z.ZodObject<{
     data: z.ZodString;
     isLast: z.ZodBoolean;
     error: z.ZodOptional<z.ZodEnum<{
-        payload_unavailable: "payload_unavailable";
-        not_found: "not_found";
-        read_failed: "read_failed";
         forbidden: "forbidden";
+        not_found: "not_found";
         orch_stream_timeout: "orch_stream_timeout";
         orchestrator_unavailable: "orchestrator_unavailable";
+        payload_unavailable: "payload_unavailable";
+        read_failed: "read_failed";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
@@ -1862,8 +2101,8 @@ declare const contextGetResponseSchema: z.ZodObject<{
         branchRestrictions: z.ZodNullable<z.ZodArray<z.ZodString>>;
         concurrencyLimit: z.ZodNullable<z.ZodNumber>;
         concurrencyStrategy: z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>;
         requiredReviewers: z.ZodNullable<z.ZodNumber>;
         waitTimerSeconds: z.ZodNullable<z.ZodNumber>;
@@ -1914,8 +2153,8 @@ export declare const contextCreateRequestSchema: z.ZodObject<{
     branchRestrictions: z.ZodOptional<z.ZodArray<z.ZodString>>;
     concurrencyLimit: z.ZodOptional<z.ZodNumber>;
     concurrencyStrategy: z.ZodOptional<z.ZodEnum<{
-        queue: "queue";
         "cancel-pending": "cancel-pending";
+        queue: "queue";
     }>>;
     requiredReviewers: z.ZodOptional<z.ZodNumber>;
     waitTimerSeconds: z.ZodOptional<z.ZodNumber>;
@@ -1963,8 +2202,8 @@ export declare const contextUpdateRequestSchema: z.ZodObject<{
         branchRestrictions: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         concurrencyLimit: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         concurrencyStrategy: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>>;
         requiredReviewers: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         waitTimerSeconds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -2093,7 +2332,15 @@ declare const contextVarsListResponseSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-/** Set (create or update) a variable on an context. */
+/**
+ * Set (create or update) a variable on an context.
+ *
+ * Under the `permissive` posture the browser sends the plaintext `value`.
+ * Under the `encrypted` posture it sends a `sealed` envelope instead (the value
+ * sealed to the orchestrator's X25519 key in the browser). Exactly one of
+ * `value` / `sealed` is present; `value` stays optional for backward
+ * compatibility with older dashboards that only ever send plaintext.
+ */
 export declare const contextVarSetRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.contexts.variables.set">;
     requestId: z.ZodString;
@@ -2125,7 +2372,12 @@ export declare const contextVarSetRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     contextId: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
     locked: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 /** Delete a variable from an context. */
@@ -2372,7 +2624,15 @@ export declare const contextSecretsListRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
 }, z.core.$strip>;
-/** Set (create or update) a scoped secret. */
+/**
+ * Set (create or update) a scoped secret.
+ *
+ * Under the `permissive` posture the browser sends the plaintext `value`.
+ * Under the `encrypted` posture it sends a `sealed` envelope instead (the value
+ * sealed to the orchestrator's X25519 key in the browser). Exactly one of
+ * `value` / `sealed` is present; `value` stays optional for backward
+ * compatibility with older dashboards that only ever send plaintext.
+ */
 export declare const contextSecretSetRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.contexts.secrets.set">;
     requestId: z.ZodString;
@@ -2404,7 +2664,12 @@ export declare const contextSecretSetRequestSchema: z.ZodObject<{
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /** Delete a scoped secret. */
 export declare const contextSecretDeleteRequestSchema: z.ZodObject<{
@@ -2570,14 +2835,36 @@ export declare const contextHistoryRequestSchema: z.ZodObject<{
     limit: z.ZodOptional<z.ZodNumber>;
     offset: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
-/** Status values for held runs (approval queue). */
-export declare const HeldRunStatus: z.ZodEnum<{
-    pending: "pending";
-    approved: "approved";
-    rejected: "rejected";
-    expired: "expired";
-}>;
-export type HeldRunStatus = z.infer<typeof HeldRunStatus>;
+export declare const contextHistoryResponseSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.contexts.history.response">;
+    requestId: z.ZodString;
+    runs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        runId: z.ZodString;
+        workflowName: z.ZodString;
+        status: z.ZodString;
+        branch: z.ZodNullable<z.ZodString>;
+        commitSha: z.ZodNullable<z.ZodString>;
+        startedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
+        completedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
+        context: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+    hasMore: z.ZodOptional<z.ZodBoolean>;
+    error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Known held-run statuses — the vocabulary the dashboard renders a labelled
+ * badge and a queue tab for, and the vocabulary a client may filter the list
+ * by. Defined in `context/held-run-status.ts` and re-exported here so the
+ * domain types and the wire schema cannot carry divergent copies; a parity test
+ * in the orchestrator asserts these options match every status it persists.
+ *
+ * This is deliberately NOT the wire type of the response field:
+ * `held_runs.status` is a plain-text column owned by a customer-deployed
+ * orchestrator, so the response carries `z.string()` (see
+ * `heldRunsListResponseSchema`) and this enum is what the UI switches on.
+ */
+export { HeldRunStatus } from '../../context/held-run-status.js';
 /** Queue type for held runs. */
 export declare const HeldRunQueueType: z.ZodEnum<{
     context: "context";
@@ -2615,16 +2902,18 @@ export declare const heldRunsListRequestSchema: z.ZodObject<{
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     status: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         approved: "approved";
-        rejected: "rejected";
         expired: "expired";
+        pending: "pending";
+        rejected: "rejected";
+        released: "released";
     }>>;
     queueType: z.ZodOptional<z.ZodEnum<{
         context: "context";
         security: "security";
     }>>;
     runId: z.ZodOptional<z.ZodString>;
+    heldRunId: z.ZodOptional<z.ZodString>;
     orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 declare const heldRunsListResponseSchema: z.ZodObject<{
@@ -2636,16 +2925,8 @@ declare const heldRunsListResponseSchema: z.ZodObject<{
         contextId: z.ZodNullable<z.ZodString>;
         contextName: z.ZodNullable<z.ZodString>;
         holdType: z.ZodString;
-        queueType: z.ZodEnum<{
-            context: "context";
-            security: "security";
-        }>;
-        status: z.ZodEnum<{
-            pending: "pending";
-            approved: "approved";
-            rejected: "rejected";
-            expired: "expired";
-        }>;
+        queueType: z.ZodString;
+        status: z.ZodString;
         requestedAt: z.ZodCoercedString<unknown>;
         resolvedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
         resolvedBy: z.ZodNullable<z.ZodString>;
@@ -2655,9 +2936,9 @@ declare const heldRunsListResponseSchema: z.ZodObject<{
         trustTier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         jobId: z.ZodOptional<z.ZodString>;
         holdScope: z.ZodOptional<z.ZodEnum<{
-            workflow: "workflow";
             job: "job";
             step: "step";
+            workflow: "workflow";
         }>>;
         stepIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         requirement: z.ZodOptional<z.ZodNullable<z.ZodObject<{
@@ -2798,9 +3079,9 @@ export declare const fleetPinnedRunSchema: z.ZodObject<{
 export type FleetPinnedRun = z.infer<typeof fleetPinnedRunSchema>;
 /** How a runsOnAll fan-out would treat one host, given its current reachability. */
 export declare const FleetHostDisposition: z.ZodEnum<{
+    "skipped-ephemeral": "skipped-ephemeral";
     target: "target";
     "unreachable-durable": "unreachable-durable";
-    "skipped-ephemeral": "skipped-ephemeral";
 }>;
 export type FleetHostDisposition = z.infer<typeof FleetHostDisposition>;
 /** A host matched by a runsOnAll preview, plus how the fan-out would treat it. */
@@ -2813,20 +3094,20 @@ export declare const fleetPreviewHostSchema: z.ZodObject<{
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>;
     disposition: z.ZodEnum<{
+        "skipped-ephemeral": "skipped-ephemeral";
         target: "target";
         "unreachable-durable": "unreachable-durable";
-        "skipped-ephemeral": "skipped-ephemeral";
     }>;
 }, z.core.$strip>;
 export type FleetPreviewHost = z.infer<typeof fleetPreviewHostSchema>;
@@ -2933,13 +3214,13 @@ export declare const dashboardFleetHostsResponseSchema: z.ZodObject<{
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -2955,13 +3236,13 @@ export declare const dashboardFleetHostResponseSchema: z.ZodObject<{
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -2984,26 +3265,26 @@ export declare const dashboardFleetPreviewResponseSchema: z.ZodObject<{
             platform: z.ZodNullable<z.ZodString>;
             arch: z.ZodNullable<z.ZodString>;
             lifecycleClass: z.ZodEnum<{
-                static: "static";
                 ephemeral: "ephemeral";
+                static: "static";
             }>;
             status: z.ZodEnum<{
                 ready: "ready";
-                unreachable: "unreachable";
                 stale: "stale";
+                unreachable: "unreachable";
             }>;
             lastSeen: z.ZodString;
         }, z.core.$strip>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
     onUnreachable: z.ZodEnum<{
+        fail: "fail";
         hold: "hold";
         skip: "skip";
-        fail: "fail";
     }>;
     estimatedChildCount: z.ZodNumber;
 }, z.core.$strip>;
@@ -3051,14 +3332,14 @@ export declare const fleetHostWorkflowSchema: z.ZodObject<{
     repoIdentifier: z.ZodString;
     sourceFile: z.ZodNullable<z.ZodString>;
     onUnreachable: z.ZodEnum<{
+        fail: "fail";
         hold: "hold";
         skip: "skip";
-        fail: "fail";
     }>;
     disposition: z.ZodEnum<{
+        "skipped-ephemeral": "skipped-ephemeral";
         target: "target";
         "unreachable-durable": "unreachable-durable";
-        "skipped-ephemeral": "skipped-ephemeral";
     }>;
 }, z.core.$strip>;
 export type FleetHostWorkflow = z.infer<typeof fleetHostWorkflowSchema>;
@@ -3070,14 +3351,14 @@ export declare const dashboardFleetWorkflowsForHostResponseSchema: z.ZodObject<{
         repoIdentifier: z.ZodString;
         sourceFile: z.ZodNullable<z.ZodString>;
         onUnreachable: z.ZodEnum<{
+            fail: "fail";
             hold: "hold";
             skip: "skip";
-            fail: "fail";
         }>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
@@ -3208,8 +3489,8 @@ declare const diagnosticsPeerSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
-            pass: "pass";
             fail: "fail";
+            pass: "pass";
             warn: "warn";
         }>;
         message: z.ZodNullable<z.ZodString>;
@@ -3247,8 +3528,8 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         runningAsUser: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         runningAsUid: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         raftRole: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            follower: "follower";
             candidate: "candidate";
+            follower: "follower";
             leader: "leader";
         }>>>;
         raftTerm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -3282,8 +3563,8 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
     scalers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         type: z.ZodEnum<{
-            container: "container";
             "bare-metal": "bare-metal";
+            container: "container";
             firecracker: "firecracker";
             kubernetes: "kubernetes";
         }>;
@@ -3333,8 +3614,8 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                pass: "pass";
                 fail: "fail";
+                pass: "pass";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -3570,10 +3851,10 @@ export declare const registrationItemSchema: z.ZodObject<{
         routingKey: z.ZodString;
         name: z.ZodNullable<z.ZodString>;
         subtype: z.ZodNullable<z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>>;
         provider: z.ZodString;
     }, z.core.$strip>>>;
@@ -3600,10 +3881,10 @@ export declare const registrationsListResponseSchema: z.ZodObject<{
             routingKey: z.ZodString;
             name: z.ZodNullable<z.ZodString>;
             subtype: z.ZodNullable<z.ZodEnum<{
-                github_app: "github_app";
                 generic_webhook: "generic_webhook";
-                universal_git: "universal_git";
+                github_app: "github_app";
                 local: "local";
+                universal_git: "universal_git";
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>>;
@@ -3655,10 +3936,10 @@ export declare const backendItemSchema: z.ZodObject<{
     syncIntervalMs: z.ZodNumber;
     enabled: z.ZodBoolean;
     healthStatus: z.ZodEnum<{
+        degraded: "degraded";
+        healthy: "healthy";
         unknown: "unknown";
         unreachable: "unreachable";
-        healthy: "healthy";
-        degraded: "degraded";
     }>;
     scopeCount: z.ZodNumber;
     lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -3682,10 +3963,10 @@ export declare const backendsListResponseSchema: z.ZodObject<{
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
+            degraded: "degraded";
+            healthy: "healthy";
             unknown: "unknown";
             unreachable: "unreachable";
-            healthy: "healthy";
-            degraded: "degraded";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -3743,10 +4024,10 @@ export declare const backendGetResponseSchema: z.ZodObject<{
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
+            degraded: "degraded";
+            healthy: "healthy";
             unknown: "unknown";
             unreachable: "unreachable";
-            healthy: "healthy";
-            degraded: "degraded";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -3877,11 +4158,11 @@ export declare const backendTestResponseSchema: z.ZodObject<{
 }, z.core.$strip>;
 /** Enum of the five test-relay control message types (request side). */
 export declare const TestRelayType: z.ZodEnum<{
-    "test.relay.uploads.init": "test.relay.uploads.init";
-    "test.relay.trigger": "test.relay.trigger";
-    "test.relay.run.status": "test.relay.run.status";
-    "test.relay.run.logs": "test.relay.run.logs";
     "test.relay.cancel": "test.relay.cancel";
+    "test.relay.run.logs": "test.relay.run.logs";
+    "test.relay.run.status": "test.relay.run.status";
+    "test.relay.trigger": "test.relay.trigger";
+    "test.relay.uploads.init": "test.relay.uploads.init";
 }>;
 export type TestRelayType = z.infer<typeof TestRelayType>;
 /** Request an external presigned upload URL for the overlay tarball. */
@@ -4014,8 +4295,8 @@ export declare const testRelayTriggerResponseSchema: z.ZodObject<{
     requestId: z.ZodString;
     runId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        rejected: "rejected";
         accepted: "accepted";
+        rejected: "rejected";
     }>>;
     reason: z.ZodOptional<z.ZodString>;
     jobIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -4222,6 +4503,36 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     runId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs">;
     requestId: z.ZodString;
@@ -4321,10 +4632,10 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         digest: z.ZodOptional<z.ZodString>;
         name: z.ZodOptional<z.ZodString>;
         status: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         repository: z.ZodOptional<z.ZodString>;
         workflow: z.ZodOptional<z.ZodString>;
@@ -4392,6 +4703,36 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     runId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    runId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.runs.list">;
     requestId: z.ZodString;
@@ -4736,8 +5077,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     branchRestrictions: z.ZodOptional<z.ZodArray<z.ZodString>>;
     concurrencyLimit: z.ZodOptional<z.ZodNumber>;
     concurrencyStrategy: z.ZodOptional<z.ZodEnum<{
-        queue: "queue";
         "cancel-pending": "cancel-pending";
+        queue: "queue";
     }>>;
     requiredReviewers: z.ZodOptional<z.ZodNumber>;
     waitTimerSeconds: z.ZodOptional<z.ZodNumber>;
@@ -4783,8 +5124,8 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         branchRestrictions: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         concurrencyLimit: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         concurrencyStrategy: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>>;
         requiredReviewers: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         waitTimerSeconds: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -4913,7 +5254,12 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     contextId: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
     locked: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.contexts.variables.delete">;
@@ -5166,7 +5512,12 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     scope: z.ZodString;
     key: z.ZodString;
-    value: z.ZodString;
+    value: z.ZodOptional<z.ZodString>;
+    sealed: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        ephemeralPublicKey: z.ZodString;
+        encrypted: z.ZodString;
+    }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.contexts.secrets.delete">;
     requestId: z.ZodString;
@@ -5351,16 +5702,18 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         component: z.ZodString;
     }, z.core.$strip>], "type">;
     status: z.ZodOptional<z.ZodEnum<{
-        pending: "pending";
         approved: "approved";
-        rejected: "rejected";
         expired: "expired";
+        pending: "pending";
+        rejected: "rejected";
+        released: "released";
     }>>;
     queueType: z.ZodOptional<z.ZodEnum<{
         context: "context";
         security: "security";
     }>>;
     runId: z.ZodOptional<z.ZodString>;
+    heldRunId: z.ZodOptional<z.ZodString>;
     orgId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.held-runs.approve">;
@@ -5971,18 +6324,50 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     routingKey: z.ZodOptional<z.ZodString>;
     event: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        failed: "failed";
-        received: "received";
-        processed: "processed";
         duplicate: "duplicate";
-        lockfile_missing: "lockfile_missing";
+        failed: "failed";
         lockfile_corrupt: "lockfile_corrupt";
+        lockfile_missing: "lockfile_missing";
+        processed: "processed";
+        received: "received";
     }>>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
     toTimestamp: z.ZodOptional<z.ZodString>;
     deliveryId: z.ZodOptional<z.ZodString>;
     limit: z.ZodOptional<z.ZodNumber>;
     cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            patId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+        agent: z.ZodOptional<z.ZodObject<{
+            label: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+        sessionId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    fromTimestamp: z.ZodString;
+    toTimestamp: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.event-log.detail">;
     requestId: z.ZodString;
@@ -6273,117 +6658,126 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>], "type">;
     orgId: z.ZodString;
     actorType: z.ZodOptional<z.ZodEnum<{
-        user: "user";
         api_key: "api_key";
-        service_account: "service_account";
         platform_operator: "platform_operator";
+        service_account: "service_account";
         system: "system";
+        user: "user";
     }>>;
     actorId: z.ZodOptional<z.ZodString>;
     action: z.ZodOptional<z.ZodEnum<{
-        "event_dlq.retry": "event_dlq.retry";
-        "event_dlq.discard": "event_dlq.discard";
-        "registration.disable": "registration.disable";
-        "registration.delete": "registration.delete";
-        "global_workflows.update": "global_workflows.update";
-        "fleet.host.declare": "fleet.host.declare";
-        "fleet.host.remove": "fleet.host.remove";
-        "run.detail.read": "run.detail.read";
-        "run.structured.read": "run.structured.read";
-        "runs.list.read": "runs.list.read";
-        "runs.filters.read": "runs.filters.read";
-        "sources.list.read": "sources.list.read";
-        "run.payload.read": "run.payload.read";
-        "run.orch_logs.read": "run.orch_logs.read";
-        "step.logs.read": "step.logs.read";
+        "access_log.list.read": "access_log.list.read";
+        archive_chunk: "archive_chunk";
+        "artifacts.read": "artifacts.read";
+        "attestation.retry": "attestation.retry";
         "attestations.read": "attestations.read";
-        "run.cancel": "run.cancel";
-        "run.rerun": "run.rerun";
-        "run.manual_schedule": "run.manual_schedule";
-        "run.trigger": "run.trigger";
-        "job.cancel": "job.cancel";
-        "event_log.list.read": "event_log.list.read";
-        "event_log.detail.read": "event_log.detail.read";
-        "event_log.payload.read": "event_log.payload.read";
-        "context.list.read": "context.list.read";
-        "context.get.read": "context.get.read";
+        "backend.get.read": "backend.get.read";
+        "backend.list.read": "backend.list.read";
+        "backend.sync": "backend.sync";
+        "backend.sync.one": "backend.sync.one";
+        "backend.test": "backend.test";
+        "cluster_name.update": "cluster_name.update";
         "context.create": "context.create";
-        "context.update": "context.update";
         "context.delete": "context.delete";
-        "context_var.list.read": "context_var.list.read";
-        "context_var.set": "context_var.set";
-        "context_var.delete": "context_var.delete";
-        "source_override.list.read": "source_override.list.read";
-        "source_override.set": "source_override.set";
-        "source_override.delete": "source_override.delete";
+        "context.get.read": "context.get.read";
+        "context.history.read": "context.history.read";
+        "context.list.read": "context.list.read";
+        "context.update": "context.update";
         "context_binding.list.read": "context_binding.list.read";
         "context_binding.set": "context_binding.set";
-        "secret.list.read": "secret.list.read";
-        "secret.set": "secret.set";
-        "secret.delete": "secret.delete";
-        "secret.reveal": "secret.reveal";
-        "secret_scope.create": "secret_scope.create";
-        "secret_scope.rename": "secret_scope.rename";
-        "secret_scope.delete": "secret_scope.delete";
-        "context.history.read": "context.history.read";
-        "held_run.list.read": "held_run.list.read";
-        "held_run.approve": "held_run.approve";
-        "held_run.auto_approve": "held_run.auto_approve";
-        "held_run.reject": "held_run.reject";
-        "held_run.request": "held_run.request";
-        "held_run.expire": "held_run.expire";
-        "registration.list.read": "registration.list.read";
+        "context_var.delete": "context_var.delete";
+        "context_var.list.read": "context_var.list.read";
+        "context_var.set": "context_var.set";
+        "db.create_readonly_user": "db.create_readonly_user";
+        "db.create_role": "db.create_role";
+        "db.ensure": "db.ensure";
+        "db.fresh": "db.fresh";
+        "db.refresh_collation_version": "db.refresh_collation_version";
+        "db.reindex": "db.reindex";
         "diagnostics.read": "diagnostics.read";
-        "scaler.capacity.read": "scaler.capacity.read";
-        "scaler.agents.read": "scaler.agents.read";
-        "fleet.read": "fleet.read";
+        "event_dlq.discard": "event_dlq.discard";
+        "event_dlq.list.read": "event_dlq.list.read";
+        "event_dlq.retry": "event_dlq.retry";
+        "event_log.detail.read": "event_log.detail.read";
+        "event_log.list.read": "event_log.list.read";
+        "event_log.payload.read": "event_log.payload.read";
+        "fleet.host.declare": "fleet.host.declare";
+        "fleet.host.remove": "fleet.host.remove";
         "fleet.init_runner.bringup": "fleet.init_runner.bringup";
         "fleet.pre_boot.send": "fleet.pre_boot.send";
-        "backend.list.read": "backend.list.read";
-        "backend.get.read": "backend.get.read";
-        "backend.sync": "backend.sync";
-        "backend.sync.one": "backend.sync.one";
-        "backend.test": "backend.test";
+        "fleet.read": "fleet.read";
         "global_workflows.get.read": "global_workflows.get.read";
+        "global_workflows.update": "global_workflows.update";
+        "held_run.approve": "held_run.approve";
+        "held_run.auto_approve": "held_run.auto_approve";
+        "held_run.expire": "held_run.expire";
+        "held_run.list.read": "held_run.list.read";
+        "held_run.reject": "held_run.reject";
+        "held_run.request": "held_run.request";
+        "job.cancel": "job.cancel";
         "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
-        "cluster_name.update": "cluster_name.update";
-        "attestation.retry": "attestation.retry";
-        "access_log.list.read": "access_log.list.read";
-        "event_dlq.list.read": "event_dlq.list.read";
-        archive_chunk: "archive_chunk";
         purge_chunk: "purge_chunk";
+        "registration.delete": "registration.delete";
+        "registration.disable": "registration.disable";
+        "registration.list.read": "registration.list.read";
+        "run.cancel": "run.cancel";
+        "run.detail.read": "run.detail.read";
+        "run.manual_schedule": "run.manual_schedule";
+        "run.orch_logs.read": "run.orch_logs.read";
+        "run.payload.read": "run.payload.read";
+        "run.rerun": "run.rerun";
+        "run.structured.read": "run.structured.read";
+        "run.trigger": "run.trigger";
+        "runs.filters.read": "runs.filters.read";
+        "runs.list.read": "runs.list.read";
+        "scaler.agents.read": "scaler.agents.read";
+        "scaler.capacity.read": "scaler.capacity.read";
+        "secret.delete": "secret.delete";
+        "secret.list.read": "secret.list.read";
+        "secret.reveal": "secret.reveal";
+        "secret.set": "secret.set";
+        "secret_scope.create": "secret_scope.create";
+        "secret_scope.delete": "secret_scope.delete";
+        "secret_scope.rename": "secret_scope.rename";
+        "source_override.delete": "source_override.delete";
+        "source_override.list.read": "source_override.list.read";
+        "source_override.set": "source_override.set";
+        "sources.list.read": "sources.list.read";
+        "step.logs.read": "step.logs.read";
+        "trust_policy.updated": "trust_policy.updated";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
-        agent: "agent";
-        platform_proxy: "platform_proxy";
-        admin_http: "admin_http";
         admin_cli: "admin_cli";
+        admin_http: "admin_http";
+        agent: "agent";
+        platform_proxy: "platform_proxy";
     }>>;
     outcome: z.ZodOptional<z.ZodEnum<{
-        error: "error";
         allowed: "allowed";
         denied: "denied";
+        error: "error";
     }>>;
     targetType: z.ZodOptional<z.ZodEnum<{
-        job: "job";
-        step: "step";
-        run: "run";
+        access_log: "access_log";
+        attestation: "attestation";
+        backend: "backend";
+        cluster_meta: "cluster_meta";
         context: "context";
-        payload: "payload";
+        database: "database";
+        diagnostics: "diagnostics";
+        event_dlq: "event_dlq";
         event_log: "event_log";
         event_log_payload: "event_log_payload";
-        secret_scope: "secret_scope";
-        registration: "registration";
-        backend: "backend";
-        diagnostics: "diagnostics";
-        scaler: "scaler";
         fleet: "fleet";
         held_run: "held_run";
-        access_log: "access_log";
-        event_dlq: "event_dlq";
+        job: "job";
         org_settings: "org_settings";
-        cluster_meta: "cluster_meta";
-        attestation: "attestation";
+        payload: "payload";
+        registration: "registration";
+        run: "run";
+        scaler: "scaler";
+        secret_scope: "secret_scope";
+        step: "step";
     }>>;
     targetId: z.ZodOptional<z.ZodString>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
@@ -6623,14 +7017,17 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 run: "run";
             }>;
             category: z.ZodEnum<{
-                secret_resolution: "secret_resolution";
-                install_secrets: "install_secrets";
-                lock_resolution: "lock_resolution";
+                approval_misconfig: "approval_misconfig";
                 build_coordination: "build_coordination";
                 context_rules: "context_rules";
                 dynamic_eval: "dynamic_eval";
-                no_agent: "no_agent";
+                install_secrets: "install_secrets";
+                lock_resolution: "lock_resolution";
                 matrix_expansion: "matrix_expansion";
+                no_agent: "no_agent";
+                sandbox_denied: "sandbox_denied";
+                secret_resolution: "secret_resolution";
+                trust_policy: "trust_policy";
             }>;
             message: z.ZodString;
             jobName: z.ZodOptional<z.ZodString>;
@@ -6638,17 +7035,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
             upstreamName: z.ZodString;
             runOn: z.ZodArray<z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>>;
         }, z.core.$strip>>>>;
         steps: z.ZodArray<z.ZodObject<{
@@ -6663,30 +7061,30 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             stepType: z.ZodOptional<z.ZodString>;
             secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
             checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                skipped: "skipped";
                 applied: "applied";
                 declined: "declined";
                 "dry-run": "dry-run";
                 no_check: "no_check";
+                skipped: "skipped";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                sequential: "sequential";
                 "parallel-child": "parallel-child";
                 "parallel-group": "parallel-group";
+                sequential: "sequential";
             }>>>;
             groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
-            head: "head";
             base: "base";
+            head: "head";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
@@ -6696,14 +7094,17 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
             context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -6719,13 +7120,13 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             value: z.ZodString;
         }, z.core.$strip>;
         status: z.ZodEnum<{
-            success: "success";
-            pending: "pending";
-            running: "running";
-            failed: "failed";
             cancelled: "cancelled";
             cancelling: "cancelling";
+            failed: "failed";
             held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodObject<{
@@ -6742,21 +7143,21 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         completedAt: z.ZodNullable<z.ZodString>;
         durationMs: z.ZodNullable<z.ZodNumber>;
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
             value: z.ZodString;
         }, z.core.$strip>>;
         failureCategory: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             cancelled: "cancelled";
+            infra: "infra";
             init_failure: "init_failure";
-            timed_out: "timed_out";
             step_failed: "step_failed";
-            infra: "infra";
+            timed_out: "timed_out";
+            unknown: "unknown";
         }>>;
         failureReason: z.ZodNullable<z.ZodObject<{
             untrusted: z.ZodLiteral<true>;
@@ -6771,17 +7172,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 value: z.ZodString;
             }, z.core.$strip>;
             status: z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>;
             startedAt: z.ZodNullable<z.ZodString>;
             completedAt: z.ZodNullable<z.ZodString>;
@@ -6797,14 +7199,17 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                     run: "run";
                 }>;
                 category: z.ZodEnum<{
-                    secret_resolution: "secret_resolution";
-                    install_secrets: "install_secrets";
-                    lock_resolution: "lock_resolution";
+                    approval_misconfig: "approval_misconfig";
                     build_coordination: "build_coordination";
                     context_rules: "context_rules";
                     dynamic_eval: "dynamic_eval";
-                    no_agent: "no_agent";
+                    install_secrets: "install_secrets";
+                    lock_resolution: "lock_resolution";
                     matrix_expansion: "matrix_expansion";
+                    no_agent: "no_agent";
+                    sandbox_denied: "sandbox_denied";
+                    secret_resolution: "secret_resolution";
+                    trust_policy: "trust_policy";
                 }>;
                 message: z.ZodObject<{
                     untrusted: z.ZodLiteral<true>;
@@ -6817,17 +7222,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                     value: z.ZodString;
                 }, z.core.$strip>;
                 runOn: z.ZodArray<z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
-                    pending: "pending";
-                    running: "running";
-                    failed: "failed";
                     cancelled: "cancelled";
                     cancelling: "cancelling";
+                    drift_dropped: "drift_dropped";
+                    failed: "failed";
+                    pending: "pending";
                     queued: "queued";
                     recovering: "recovering";
+                    running: "running";
+                    skipped: "skipped";
+                    success: "success";
                     timed_out_stale: "timed_out_stale";
-                    drift_dropped: "drift_dropped";
+                    unroutable: "unroutable";
                 }>>;
             }, z.core.$strip>>;
             outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -6842,12 +7248,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                     value: z.ZodString;
                 }, z.core.$strip>;
                 status: z.ZodEnum<{
-                    skipped: "skipped";
-                    success: "success";
+                    cancelled: "cancelled";
+                    failed: "failed";
                     pending: "pending";
                     running: "running";
-                    failed: "failed";
-                    cancelled: "cancelled";
+                    skipped: "skipped";
+                    success: "success";
                 }>;
                 exitCode: z.ZodNullable<z.ZodNumber>;
                 durationMs: z.ZodNullable<z.ZodNumber>;
@@ -6859,17 +7265,68 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
                 }, z.core.$strip>>;
                 stepType: z.ZodString;
                 checkOutcome: z.ZodNullable<z.ZodEnum<{
-                    skipped: "skipped";
                     applied: "applied";
                     declined: "declined";
                     "dry-run": "dry-run";
                     no_check: "no_check";
+                    skipped: "skipped";
                 }>>;
                 secretsAccessed: z.ZodArray<z.ZodString>;
             }, z.core.$strip>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.run.state.response">;
+    requestId: z.ZodString;
+    run: z.ZodNullable<z.ZodObject<{
+        runId: z.ZodString;
+        workflowName: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            cancelling: "cancelling";
+            failed: "failed";
+            held: "held";
+            pending: "pending";
+            running: "running";
+            success: "success";
+        }>;
+        routingKey: z.ZodOptional<z.ZodString>;
+        repoIdentifier: z.ZodOptional<z.ZodString>;
+        sha: z.ZodOptional<z.ZodString>;
+        ref: z.ZodOptional<z.ZodString>;
+        triggerEvent: z.ZodOptional<z.ZodString>;
+        commitMessage: z.ZodOptional<z.ZodString>;
+        jobCount: z.ZodNumber;
+        startedAt: z.ZodNumber;
+        completedAt: z.ZodOptional<z.ZodNumber>;
+        durationMs: z.ZodOptional<z.ZodNumber>;
+        parentRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        originalRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredBy: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        triggeredByAgentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        failureReason: z.ZodOptional<z.ZodString>;
+        failureClass: z.ZodOptional<z.ZodEnum<{
+            cancelled: "cancelled";
+            dead_orchestrator: "dead_orchestrator";
+            never_started: "never_started";
+            step_failure: "step_failure";
+            timed_out: "timed_out";
+        }>>;
+        jobs: z.ZodArray<z.ZodObject<{
+            jobId: z.ZodString;
+            jobName: z.ZodString;
+            status: z.ZodString;
+            startedAt: z.ZodOptional<z.ZodNumber>;
+            completedAt: z.ZodOptional<z.ZodNumber>;
+            durationMs: z.ZodOptional<z.ZodNumber>;
+            errorMessage: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            agentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            runsOnLabels: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            contexts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.step.logs.response">;
     requestId: z.ZodString;
@@ -6906,23 +7363,24 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.attestations.list.all.response">;
@@ -6938,21 +7396,21 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         mediaType: z.ZodString;
         createdAt: z.ZodString;
         verifyStatus: z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>;
         verifyReason: z.ZodNullable<z.ZodString>;
         repository: z.ZodNullable<z.ZodString>;
         workflow: z.ZodNullable<z.ZodString>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
         pending: z.ZodOptional<z.ZodBoolean>;
@@ -6960,6 +7418,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     page: z.ZodNumber;
     pageSize: z.ZodNumber;
     total: z.ZodNumber;
+    trustedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.attestation.get.response">;
@@ -6990,20 +7449,20 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
@@ -7014,6 +7473,19 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     minted: z.ZodNumber;
     stillPending: z.ZodNumber;
     error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.artifacts.list.response">;
+    requestId: z.ZodString;
+    artifacts: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        jobId: z.ZodString;
+        sizeBytes: z.ZodNumber;
+        sha256: z.ZodString;
+        createdAt: z.ZodString;
+        downloadUrl: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    downloadUrlExpiresInSeconds: z.ZodOptional<z.ZodNumber>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.runs.list.response">;
     requestId: z.ZodString;
@@ -7074,10 +7546,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         name: z.ZodNullable<z.ZodString>;
         provider: z.ZodString;
         subtype: z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodString;
@@ -7099,6 +7571,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     type: z.ZodLiteral<"run.cancel.response">;
     requestId: z.ZodString;
     cancelledJobs: z.ZodOptional<z.ZodNumber>;
+    alreadyTerminal: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.payload.response">;
@@ -7143,8 +7616,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         branchRestrictions: z.ZodNullable<z.ZodArray<z.ZodString>>;
         concurrencyLimit: z.ZodNullable<z.ZodNumber>;
         concurrencyStrategy: z.ZodNullable<z.ZodEnum<{
-            queue: "queue";
             "cancel-pending": "cancel-pending";
+            queue: "queue";
         }>>;
         requiredReviewers: z.ZodNullable<z.ZodNumber>;
         waitTimerSeconds: z.ZodNullable<z.ZodNumber>;
@@ -7264,6 +7737,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         completedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
         context: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>>;
+    hasMore: z.ZodOptional<z.ZodBoolean>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.held-runs.list.response">;
@@ -7274,16 +7748,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         contextId: z.ZodNullable<z.ZodString>;
         contextName: z.ZodNullable<z.ZodString>;
         holdType: z.ZodString;
-        queueType: z.ZodEnum<{
-            context: "context";
-            security: "security";
-        }>;
-        status: z.ZodEnum<{
-            pending: "pending";
-            approved: "approved";
-            rejected: "rejected";
-            expired: "expired";
-        }>;
+        queueType: z.ZodString;
+        status: z.ZodString;
         requestedAt: z.ZodCoercedString<unknown>;
         resolvedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
         resolvedBy: z.ZodNullable<z.ZodString>;
@@ -7293,9 +7759,9 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         trustTier: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         jobId: z.ZodOptional<z.ZodString>;
         holdScope: z.ZodOptional<z.ZodEnum<{
-            workflow: "workflow";
             job: "job";
             step: "step";
+            workflow: "workflow";
         }>>;
         stepIndex: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         requirement: z.ZodOptional<z.ZodNullable<z.ZodObject<{
@@ -7354,10 +7820,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             routingKey: z.ZodString;
             name: z.ZodNullable<z.ZodString>;
             subtype: z.ZodNullable<z.ZodEnum<{
-                github_app: "github_app";
                 generic_webhook: "generic_webhook";
-                universal_git: "universal_git";
+                github_app: "github_app";
                 local: "local";
+                universal_git: "universal_git";
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>>;
@@ -7402,8 +7868,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         runningAsUser: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         runningAsUid: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         raftRole: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-            follower: "follower";
             candidate: "candidate";
+            follower: "follower";
             leader: "leader";
         }>>>;
         raftTerm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -7437,8 +7903,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     scalers: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         type: z.ZodEnum<{
-            container: "container";
             "bare-metal": "bare-metal";
+            container: "container";
             firecracker: "firecracker";
             kubernetes: "kubernetes";
         }>;
@@ -7488,8 +7954,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                pass: "pass";
                 fail: "fail";
+                pass: "pass";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -7511,13 +7977,13 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -7532,13 +7998,13 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         platform: z.ZodNullable<z.ZodString>;
         arch: z.ZodNullable<z.ZodString>;
         lifecycleClass: z.ZodEnum<{
-            static: "static";
             ephemeral: "ephemeral";
+            static: "static";
         }>;
         status: z.ZodEnum<{
             ready: "ready";
-            unreachable: "unreachable";
             stale: "stale";
+            unreachable: "unreachable";
         }>;
         lastSeen: z.ZodString;
     }, z.core.$strip>>;
@@ -7560,26 +8026,26 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             platform: z.ZodNullable<z.ZodString>;
             arch: z.ZodNullable<z.ZodString>;
             lifecycleClass: z.ZodEnum<{
-                static: "static";
                 ephemeral: "ephemeral";
+                static: "static";
             }>;
             status: z.ZodEnum<{
                 ready: "ready";
-                unreachable: "unreachable";
                 stale: "stale";
+                unreachable: "unreachable";
             }>;
             lastSeen: z.ZodString;
         }, z.core.$strip>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
     onUnreachable: z.ZodEnum<{
+        fail: "fail";
         hold: "hold";
         skip: "skip";
-        fail: "fail";
     }>;
     estimatedChildCount: z.ZodNumber;
 }, z.core.$strip>, z.ZodObject<{
@@ -7590,14 +8056,14 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         repoIdentifier: z.ZodString;
         sourceFile: z.ZodNullable<z.ZodString>;
         onUnreachable: z.ZodEnum<{
+            fail: "fail";
             hold: "hold";
             skip: "skip";
-            fail: "fail";
         }>;
         disposition: z.ZodEnum<{
+            "skipped-ephemeral": "skipped-ephemeral";
             target: "target";
             "unreachable-durable": "unreachable-durable";
-            "skipped-ephemeral": "skipped-ephemeral";
         }>;
     }, z.core.$strip>>;
 }, z.core.$strip>, z.ZodObject<{
@@ -7664,10 +8130,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
+            degraded: "degraded";
+            healthy: "healthy";
             unknown: "unknown";
             unreachable: "unreachable";
-            healthy: "healthy";
-            degraded: "degraded";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -7691,10 +8157,10 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         syncIntervalMs: z.ZodNumber;
         enabled: z.ZodBoolean;
         healthStatus: z.ZodEnum<{
+            degraded: "degraded";
+            healthy: "healthy";
             unknown: "unknown";
             unreachable: "unreachable";
-            healthy: "healthy";
-            degraded: "degraded";
         }>;
         scopeCount: z.ZodNumber;
         lastSyncAt: z.ZodNullable<z.ZodString>;
@@ -7730,19 +8196,19 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -7758,6 +8224,18 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     }, z.core.$strip>>>;
     nextCursor: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     error: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-log.activity.response">;
+    requestId: z.ZodString;
+    counts: z.ZodOptional<z.ZodObject<{
+        total: z.ZodNumber;
+        matched: z.ZodNumber;
+        unmatched: z.ZodNumber;
+        lockfileMissing: z.ZodNumber;
+        lockfileCorrupt: z.ZodNumber;
+        failed: z.ZodNumber;
+    }, z.core.$strip>>;
+    error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.event-log.detail.response">;
     requestId: z.ZodString;
@@ -7767,19 +8245,19 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         event: z.ZodString;
         action: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
-            relay: "relay";
             direct: "direct";
+            relay: "relay";
         }>;
         provider: z.ZodString;
         repoIdentifier: z.ZodNullable<z.ZodString>;
         ref: z.ZodNullable<z.ZodString>;
         status: z.ZodEnum<{
-            failed: "failed";
-            received: "received";
-            processed: "processed";
             duplicate: "duplicate";
-            lockfile_missing: "lockfile_missing";
+            failed: "failed";
             lockfile_corrupt: "lockfile_corrupt";
+            lockfile_missing: "lockfile_missing";
+            processed: "processed";
+            received: "received";
         }>;
         matchedCount: z.ZodNumber;
         runId: z.ZodNullable<z.ZodString>;
@@ -7801,12 +8279,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     data: z.ZodString;
     isLast: z.ZodBoolean;
     error: z.ZodOptional<z.ZodEnum<{
-        payload_unavailable: "payload_unavailable";
-        not_found: "not_found";
-        read_failed: "read_failed";
         forbidden: "forbidden";
+        not_found: "not_found";
         orch_stream_timeout: "orch_stream_timeout";
         orchestrator_unavailable: "orchestrator_unavailable";
+        payload_unavailable: "payload_unavailable";
+        read_failed: "read_failed";
     }>>;
     totalBytes: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>, z.ZodObject<{
@@ -7896,122 +8374,131 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         orgId: z.ZodNullable<z.ZodString>;
         routingKey: z.ZodNullable<z.ZodString>;
         actorType: z.ZodEnum<{
-            user: "user";
             api_key: "api_key";
-            service_account: "service_account";
             platform_operator: "platform_operator";
+            service_account: "service_account";
             system: "system";
+            user: "user";
         }>;
         actorId: z.ZodString;
         actorMeta: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         actorEmail: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         actorDisplayName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         action: z.ZodEnum<{
-            "event_dlq.retry": "event_dlq.retry";
-            "event_dlq.discard": "event_dlq.discard";
-            "registration.disable": "registration.disable";
-            "registration.delete": "registration.delete";
-            "global_workflows.update": "global_workflows.update";
-            "fleet.host.declare": "fleet.host.declare";
-            "fleet.host.remove": "fleet.host.remove";
-            "run.detail.read": "run.detail.read";
-            "run.structured.read": "run.structured.read";
-            "runs.list.read": "runs.list.read";
-            "runs.filters.read": "runs.filters.read";
-            "sources.list.read": "sources.list.read";
-            "run.payload.read": "run.payload.read";
-            "run.orch_logs.read": "run.orch_logs.read";
-            "step.logs.read": "step.logs.read";
+            "access_log.list.read": "access_log.list.read";
+            archive_chunk: "archive_chunk";
+            "artifacts.read": "artifacts.read";
+            "attestation.retry": "attestation.retry";
             "attestations.read": "attestations.read";
-            "run.cancel": "run.cancel";
-            "run.rerun": "run.rerun";
-            "run.manual_schedule": "run.manual_schedule";
-            "run.trigger": "run.trigger";
-            "job.cancel": "job.cancel";
-            "event_log.list.read": "event_log.list.read";
-            "event_log.detail.read": "event_log.detail.read";
-            "event_log.payload.read": "event_log.payload.read";
-            "context.list.read": "context.list.read";
-            "context.get.read": "context.get.read";
+            "backend.get.read": "backend.get.read";
+            "backend.list.read": "backend.list.read";
+            "backend.sync": "backend.sync";
+            "backend.sync.one": "backend.sync.one";
+            "backend.test": "backend.test";
+            "cluster_name.update": "cluster_name.update";
             "context.create": "context.create";
-            "context.update": "context.update";
             "context.delete": "context.delete";
-            "context_var.list.read": "context_var.list.read";
-            "context_var.set": "context_var.set";
-            "context_var.delete": "context_var.delete";
-            "source_override.list.read": "source_override.list.read";
-            "source_override.set": "source_override.set";
-            "source_override.delete": "source_override.delete";
+            "context.get.read": "context.get.read";
+            "context.history.read": "context.history.read";
+            "context.list.read": "context.list.read";
+            "context.update": "context.update";
             "context_binding.list.read": "context_binding.list.read";
             "context_binding.set": "context_binding.set";
-            "secret.list.read": "secret.list.read";
-            "secret.set": "secret.set";
-            "secret.delete": "secret.delete";
-            "secret.reveal": "secret.reveal";
-            "secret_scope.create": "secret_scope.create";
-            "secret_scope.rename": "secret_scope.rename";
-            "secret_scope.delete": "secret_scope.delete";
-            "context.history.read": "context.history.read";
-            "held_run.list.read": "held_run.list.read";
-            "held_run.approve": "held_run.approve";
-            "held_run.auto_approve": "held_run.auto_approve";
-            "held_run.reject": "held_run.reject";
-            "held_run.request": "held_run.request";
-            "held_run.expire": "held_run.expire";
-            "registration.list.read": "registration.list.read";
+            "context_var.delete": "context_var.delete";
+            "context_var.list.read": "context_var.list.read";
+            "context_var.set": "context_var.set";
+            "db.create_readonly_user": "db.create_readonly_user";
+            "db.create_role": "db.create_role";
+            "db.ensure": "db.ensure";
+            "db.fresh": "db.fresh";
+            "db.refresh_collation_version": "db.refresh_collation_version";
+            "db.reindex": "db.reindex";
             "diagnostics.read": "diagnostics.read";
-            "scaler.capacity.read": "scaler.capacity.read";
-            "scaler.agents.read": "scaler.agents.read";
-            "fleet.read": "fleet.read";
+            "event_dlq.discard": "event_dlq.discard";
+            "event_dlq.list.read": "event_dlq.list.read";
+            "event_dlq.retry": "event_dlq.retry";
+            "event_log.detail.read": "event_log.detail.read";
+            "event_log.list.read": "event_log.list.read";
+            "event_log.payload.read": "event_log.payload.read";
+            "fleet.host.declare": "fleet.host.declare";
+            "fleet.host.remove": "fleet.host.remove";
             "fleet.init_runner.bringup": "fleet.init_runner.bringup";
             "fleet.pre_boot.send": "fleet.pre_boot.send";
-            "backend.list.read": "backend.list.read";
-            "backend.get.read": "backend.get.read";
-            "backend.sync": "backend.sync";
-            "backend.sync.one": "backend.sync.one";
-            "backend.test": "backend.test";
+            "fleet.read": "fleet.read";
             "global_workflows.get.read": "global_workflows.get.read";
+            "global_workflows.update": "global_workflows.update";
+            "held_run.approve": "held_run.approve";
+            "held_run.auto_approve": "held_run.auto_approve";
+            "held_run.expire": "held_run.expire";
+            "held_run.list.read": "held_run.list.read";
+            "held_run.reject": "held_run.reject";
+            "held_run.request": "held_run.request";
+            "job.cancel": "job.cancel";
             "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
-            "cluster_name.update": "cluster_name.update";
-            "attestation.retry": "attestation.retry";
-            "access_log.list.read": "access_log.list.read";
-            "event_dlq.list.read": "event_dlq.list.read";
-            archive_chunk: "archive_chunk";
             purge_chunk: "purge_chunk";
+            "registration.delete": "registration.delete";
+            "registration.disable": "registration.disable";
+            "registration.list.read": "registration.list.read";
+            "run.cancel": "run.cancel";
+            "run.detail.read": "run.detail.read";
+            "run.manual_schedule": "run.manual_schedule";
+            "run.orch_logs.read": "run.orch_logs.read";
+            "run.payload.read": "run.payload.read";
+            "run.rerun": "run.rerun";
+            "run.structured.read": "run.structured.read";
+            "run.trigger": "run.trigger";
+            "runs.filters.read": "runs.filters.read";
+            "runs.list.read": "runs.list.read";
+            "scaler.agents.read": "scaler.agents.read";
+            "scaler.capacity.read": "scaler.capacity.read";
+            "secret.delete": "secret.delete";
+            "secret.list.read": "secret.list.read";
+            "secret.reveal": "secret.reveal";
+            "secret.set": "secret.set";
+            "secret_scope.create": "secret_scope.create";
+            "secret_scope.delete": "secret_scope.delete";
+            "secret_scope.rename": "secret_scope.rename";
+            "source_override.delete": "source_override.delete";
+            "source_override.list.read": "source_override.list.read";
+            "source_override.set": "source_override.set";
+            "sources.list.read": "sources.list.read";
+            "step.logs.read": "step.logs.read";
+            "trust_policy.updated": "trust_policy.updated";
         }>;
         targetType: z.ZodNullable<z.ZodEnum<{
-            job: "job";
-            step: "step";
-            run: "run";
+            access_log: "access_log";
+            attestation: "attestation";
+            backend: "backend";
+            cluster_meta: "cluster_meta";
             context: "context";
-            payload: "payload";
+            database: "database";
+            diagnostics: "diagnostics";
+            event_dlq: "event_dlq";
             event_log: "event_log";
             event_log_payload: "event_log_payload";
-            secret_scope: "secret_scope";
-            registration: "registration";
-            backend: "backend";
-            diagnostics: "diagnostics";
-            scaler: "scaler";
             fleet: "fleet";
             held_run: "held_run";
-            access_log: "access_log";
-            event_dlq: "event_dlq";
+            job: "job";
             org_settings: "org_settings";
-            cluster_meta: "cluster_meta";
-            attestation: "attestation";
+            payload: "payload";
+            registration: "registration";
+            run: "run";
+            scaler: "scaler";
+            secret_scope: "secret_scope";
+            step: "step";
         }>>;
         targetId: z.ZodNullable<z.ZodString>;
         requestId: z.ZodNullable<z.ZodString>;
         source: z.ZodEnum<{
+            admin_cli: "admin_cli";
+            admin_http: "admin_http";
             agent: "agent";
             platform_proxy: "platform_proxy";
-            admin_http: "admin_http";
-            admin_cli: "admin_cli";
         }>;
         outcome: z.ZodEnum<{
-            error: "error";
             allowed: "allowed";
             denied: "denied";
+            error: "error";
         }>;
         errorMessage: z.ZodNullable<z.ZodString>;
         agentLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -8032,8 +8519,8 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
     requestId: z.ZodString;
     runId: z.ZodOptional<z.ZodString>;
     status: z.ZodOptional<z.ZodEnum<{
-        rejected: "rejected";
         accepted: "accepted";
+        rejected: "rejected";
     }>>;
     reason: z.ZodOptional<z.ZodString>;
     jobIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -8076,6 +8563,9 @@ export type DashboardPlatformToOrchMessage = z.infer<typeof dashboardPlatformToO
 export type EventLogListItem = z.infer<typeof eventLogListItemSchema>;
 export type DashboardEventLogListRequest = z.infer<typeof dashboardEventLogListRequestSchema>;
 export type DashboardEventLogListResponse = z.infer<typeof dashboardEventLogListResponseSchema>;
+export type EventLogActivityCounts = z.infer<typeof eventLogActivityCountsSchema>;
+export type DashboardEventLogActivityRequest = z.infer<typeof dashboardEventLogActivityRequestSchema>;
+export type DashboardEventLogActivityResponse = z.infer<typeof dashboardEventLogActivityResponseSchema>;
 export type DashboardEventLogDetailRequest = z.infer<typeof dashboardEventLogDetailRequestSchema>;
 export type DashboardEventLogDetailResponse = z.infer<typeof dashboardEventLogDetailResponseSchema>;
 export type DashboardEventLogPayloadStreamRequest = z.infer<typeof dashboardEventLogPayloadStreamRequestSchema>;
@@ -8160,14 +8650,17 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
                 run: "run";
             }>;
             category: z.ZodEnum<{
-                secret_resolution: "secret_resolution";
-                install_secrets: "install_secrets";
-                lock_resolution: "lock_resolution";
+                approval_misconfig: "approval_misconfig";
                 build_coordination: "build_coordination";
                 context_rules: "context_rules";
                 dynamic_eval: "dynamic_eval";
-                no_agent: "no_agent";
+                install_secrets: "install_secrets";
+                lock_resolution: "lock_resolution";
                 matrix_expansion: "matrix_expansion";
+                no_agent: "no_agent";
+                sandbox_denied: "sandbox_denied";
+                secret_resolution: "secret_resolution";
+                trust_policy: "trust_policy";
             }>;
             message: z.ZodString;
             jobName: z.ZodOptional<z.ZodString>;
@@ -8175,17 +8668,18 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
         needs: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
             upstreamName: z.ZodString;
             runOn: z.ZodArray<z.ZodEnum<{
-                skipped: "skipped";
-                success: "success";
-                pending: "pending";
-                running: "running";
-                failed: "failed";
                 cancelled: "cancelled";
                 cancelling: "cancelling";
+                drift_dropped: "drift_dropped";
+                failed: "failed";
+                pending: "pending";
                 queued: "queued";
                 recovering: "recovering";
+                running: "running";
+                skipped: "skipped";
+                success: "success";
                 timed_out_stale: "timed_out_stale";
-                drift_dropped: "drift_dropped";
+                unroutable: "unroutable";
             }>>;
         }, z.core.$strip>>>>;
         steps: z.ZodArray<z.ZodObject<{
@@ -8200,30 +8694,30 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
             stepType: z.ZodOptional<z.ZodString>;
             secretsAccessed: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
             checkOutcome: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                skipped: "skipped";
                 applied: "applied";
                 declined: "declined";
                 "dry-run": "dry-run";
                 no_check: "no_check";
+                skipped: "skipped";
             }>>>;
             driftSummary: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             concurrencyKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
-                sequential: "sequential";
                 "parallel-child": "parallel-child";
                 "parallel-group": "parallel-group";
+                sequential: "sequential";
             }>>>;
             groupId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     trustContext: z.ZodOptional<z.ZodObject<{
         trustTier: z.ZodNullable<z.ZodEnum<{
-            unknown: "unknown";
             known: "known";
             trusted: "trusted";
+            unknown: "unknown";
         }>>;
         lockFileSource: z.ZodNullable<z.ZodEnum<{
-            head: "head";
             base: "base";
+            head: "head";
         }>>;
         contributorUsername: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
@@ -8238,14 +8732,17 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
             run: "run";
         }>;
         category: z.ZodEnum<{
-            secret_resolution: "secret_resolution";
-            install_secrets: "install_secrets";
-            lock_resolution: "lock_resolution";
+            approval_misconfig: "approval_misconfig";
             build_coordination: "build_coordination";
             context_rules: "context_rules";
             dynamic_eval: "dynamic_eval";
-            no_agent: "no_agent";
+            install_secrets: "install_secrets";
+            lock_resolution: "lock_resolution";
             matrix_expansion: "matrix_expansion";
+            no_agent: "no_agent";
+            sandbox_denied: "sandbox_denied";
+            secret_resolution: "secret_resolution";
+            trust_policy: "trust_policy";
         }>;
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
@@ -8296,20 +8793,20 @@ export declare const dashboardAttestationsApiResponseSchema: z.ZodObject<{
         }, z.core.$strip>;
         runId: z.ZodOptional<z.ZodString>;
         verifyStatus: z.ZodOptional<z.ZodEnum<{
-            pending: "pending";
             failed: "failed";
-            verified: "verified";
+            pending: "pending";
             unverifiable: "unverifiable";
+            verified: "verified";
         }>>;
         verifyReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         sourceOrigin: z.ZodOptional<z.ZodEnum<{
-            triggered: "triggered";
             "run-remote": "run-remote";
+            triggered: "triggered";
         }>>;
         originOrgId: z.ZodOptional<z.ZodString>;
         attestationOrigin: z.ZodOptional<z.ZodEnum<{
-            live: "live";
             deferred: "deferred";
+            live: "live";
             "offline-backfill": "offline-backfill";
         }>>;
     }, z.core.$strip>>;
@@ -8354,16 +8851,23 @@ export declare const runListItemSchema: z.ZodObject<{
         routingKey: z.ZodString;
         name: z.ZodNullable<z.ZodString>;
         subtype: z.ZodNullable<z.ZodEnum<{
-            github_app: "github_app";
             generic_webhook: "generic_webhook";
-            universal_git: "universal_git";
+            github_app: "github_app";
             local: "local";
+            universal_git: "universal_git";
         }>>;
         provider: z.ZodString;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type RunListItem = z.infer<typeof runListItemSchema>;
-/** Paginated run list response envelope. */
+/**
+ * Cursor-paginated run list response envelope.
+ *
+ * Keyset (cursor) pagination: `nextCursor` fetches the next (older) page,
+ * `prevCursor` the previous (newer) page — both opaque, `null` when there is no
+ * such page. `hasMore` is true when an older page exists. `approxTotal` is a
+ * cached, approximate match count for the "~N runs" label (not an exact total).
+ */
 export declare const runListResponseSchema: z.ZodObject<{
     runs: z.ZodArray<z.ZodObject<{
         runId: z.ZodString;
@@ -8404,18 +8908,19 @@ export declare const runListResponseSchema: z.ZodObject<{
             routingKey: z.ZodString;
             name: z.ZodNullable<z.ZodString>;
             subtype: z.ZodNullable<z.ZodEnum<{
-                github_app: "github_app";
                 generic_webhook: "generic_webhook";
-                universal_git: "universal_git";
+                github_app: "github_app";
                 local: "local";
+                universal_git: "universal_git";
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
-    total: z.ZodNumber;
-    page: z.ZodNumber;
-    pageSize: z.ZodNumber;
+    nextCursor: z.ZodNullable<z.ZodString>;
+    prevCursor: z.ZodNullable<z.ZodString>;
     hasMore: z.ZodBoolean;
+    approxTotal: z.ZodNumber;
+    pageSize: z.ZodNumber;
 }, z.core.$strip>;
 export type RunListResponse = z.infer<typeof runListResponseSchema>;
 declare const diagnosticsInfraAgentSchema: z.ZodObject<{
@@ -8458,17 +8963,19 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     scalerBackends: z.ZodArray<z.ZodString>;
     deployment: z.ZodObject<{
         mode: z.ZodEnum<{
-            unknown: "unknown";
-            systemd: "systemd";
+            compose: "compose";
             launchd: "launchd";
+            systemd: "systemd";
+            unknown: "unknown";
             windows: "windows";
-            compose: "compose";
         }>;
         containerName: z.ZodNullable<z.ZodString>;
         containerRuntime: z.ZodNullable<z.ZodEnum<{
-            podman: "podman";
             docker: "docker";
+            podman: "podman";
         }>>;
+        adminInvocation: z.ZodNullable<z.ZodString>;
+        adminPath: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>;
     s3LogAccess: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
     agentCount: z.ZodNumber;
@@ -8522,8 +9029,8 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         status: z.ZodEnum<{
-            pass: "pass";
             fail: "fail";
+            pass: "pass";
             warn: "warn";
         }>;
         message: z.ZodNullable<z.ZodString>;
@@ -8532,6 +9039,22 @@ declare const diagnosticsInfraOrchestratorSchema: z.ZodObject<{
     }, z.core.$strip>>>;
     error: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/**
+ * A single infrastructure health alert.
+ *
+ * Both vocabulary fields are `z.string()` on purpose. `InfraAlertType` and
+ * `InfraAlertSeverity` (`diagnostics/infra-alert.ts`) name the *known*
+ * vocabulary the producer mints from and the read-side consumers colour by; the
+ * wire stays permissive because the `kici` CLI hard-parses this response while
+ * pinned to an older version than the hosted Platform it is talking to. A
+ * strict enum would fail the whole response rather than degrade one row.
+ */
+export declare const diagnosticsInfraAlertSchema: z.ZodObject<{
+    type: z.ZodString;
+    message: z.ZodString;
+    severity: z.ZodString;
+}, z.core.$strip>;
+export type DiagnosticsInfraAlert = z.infer<typeof diagnosticsInfraAlertSchema>;
 export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
     orchestrators: z.ZodArray<z.ZodObject<{
         connectionId: z.ZodString;
@@ -8550,17 +9073,19 @@ export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
         scalerBackends: z.ZodArray<z.ZodString>;
         deployment: z.ZodObject<{
             mode: z.ZodEnum<{
-                unknown: "unknown";
-                systemd: "systemd";
+                compose: "compose";
                 launchd: "launchd";
+                systemd: "systemd";
+                unknown: "unknown";
                 windows: "windows";
-                compose: "compose";
             }>;
             containerName: z.ZodNullable<z.ZodString>;
             containerRuntime: z.ZodNullable<z.ZodEnum<{
-                podman: "podman";
                 docker: "docker";
+                podman: "podman";
             }>>;
+            adminInvocation: z.ZodNullable<z.ZodString>;
+            adminPath: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>;
         s3LogAccess: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
         agentCount: z.ZodNumber;
@@ -8614,8 +9139,8 @@ export declare const diagnosticsInfrastructureResponseSchema: z.ZodObject<{
         dependencyHealth: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             status: z.ZodEnum<{
-                pass: "pass";
                 fail: "fail";
+                pass: "pass";
                 warn: "warn";
             }>;
             message: z.ZodNullable<z.ZodString>;
@@ -8766,11 +9291,10 @@ export declare const DASHBOARD_REQUEST_TYPES: readonly string[];
 export declare const DASHBOARD_REQUEST_TYPE_SET: ReadonlySet<string>;
 /** Structured error code on a dashboard `*.response` frame's `code` field. */
 export declare const DashboardResponseErrorCode: z.ZodEnum<{
-    unsupported_request_type: "unsupported_request_type";
+    internal_error: "internal_error";
     invalid_payload: "invalid_payload";
     unsupported_message_type: "unsupported_message_type";
-    internal_error: "internal_error";
+    unsupported_request_type: "unsupported_request_type";
 }>;
 export type DashboardResponseErrorCode = z.infer<typeof DashboardResponseErrorCode>;
-export {};
 //# sourceMappingURL=dashboard.d.ts.map