@kici-dev/engine 0.1.27 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (148) hide show
  1. package/dist/approval/types.d.ts +8 -1
  2. package/dist/approval/types.js +8 -1
  3. package/dist/artifacts/name.d.ts +60 -0
  4. package/dist/artifacts/name.js +71 -0
  5. package/dist/audit/access-log-policy.d.ts +1 -1
  6. package/dist/audit/access-log-policy.js +8 -0
  7. package/dist/audit/activity.d.ts +12 -12
  8. package/dist/audit/retention-policy.js +16 -0
  9. package/dist/billing/plan-type.d.ts +53 -0
  10. package/dist/billing/plan-type.js +70 -0
  11. package/dist/bundler/rolldown-config.d.ts +3 -3
  12. package/dist/check-mode.d.ts +1 -1
  13. package/dist/context/concurrency-strategy.d.ts +34 -0
  14. package/dist/context/concurrency-strategy.js +35 -0
  15. package/dist/context/held-run-job-id.d.ts +45 -0
  16. package/dist/context/held-run-job-id.js +56 -0
  17. package/dist/context/held-run-status.d.ts +33 -0
  18. package/dist/context/held-run-status.js +37 -0
  19. package/dist/context/hold-expiry.d.ts +20 -0
  20. package/dist/context/hold-expiry.js +25 -0
  21. package/dist/context/hold-reason.d.ts +33 -0
  22. package/dist/context/hold-reason.js +23 -0
  23. package/dist/context/hold-type.d.ts +40 -0
  24. package/dist/context/hold-type.js +61 -0
  25. package/dist/context/index.d.ts +9 -1
  26. package/dist/context/index.js +9 -2
  27. package/dist/context/multi-context.d.ts +3 -3
  28. package/dist/context/scope-name.d.ts +29 -0
  29. package/dist/context/scope-name.js +49 -0
  30. package/dist/context/scope-resolver.d.ts +33 -0
  31. package/dist/context/scope-resolver.js +45 -15
  32. package/dist/context/types.d.ts +8 -5
  33. package/dist/dev-ops/operations.d.ts +8 -0
  34. package/dist/dev-ops/operations.js +36 -19
  35. package/dist/diagnostics/infra-alert.d.ts +71 -0
  36. package/dist/diagnostics/infra-alert.js +60 -0
  37. package/dist/env/environment-allowlist.d.ts +4 -4
  38. package/dist/fanout/materialize.d.ts +16 -0
  39. package/dist/fanout/materialize.js +32 -3
  40. package/dist/index.d.ts +15 -6
  41. package/dist/index.js +34 -19
  42. package/dist/inputs/descriptor.d.ts +9 -9
  43. package/dist/inventory.d.ts +4 -4
  44. package/dist/labels.d.ts +82 -2
  45. package/dist/labels.js +119 -1
  46. package/dist/matrix/expand.d.ts +49 -2
  47. package/dist/matrix/expand.js +102 -13
  48. package/dist/matrix/format.d.ts +6 -1
  49. package/dist/matrix/format.js +6 -1
  50. package/dist/mcp/held-run-resolve.d.ts +7 -10
  51. package/dist/mcp/held-run-resolve.js +33 -7
  52. package/dist/metrics/catalog-policy.js +4 -4
  53. package/dist/metrics/metric-catalog.generated.d.ts +959 -739
  54. package/dist/metrics/metric-catalog.generated.js +284 -20
  55. package/dist/metrics/metric-kind-compat.d.ts +26 -0
  56. package/dist/metrics/metric-kind-compat.js +33 -0
  57. package/dist/protocol/analytics-events.d.ts +6 -6
  58. package/dist/protocol/dashboard-api-errors.d.ts +1 -0
  59. package/dist/protocol/dashboard-api-errors.js +5 -1
  60. package/dist/protocol/dashboard-write-operations.d.ts +143 -86
  61. package/dist/protocol/dashboard-write-operations.js +91 -17
  62. package/dist/protocol/messages/access-log.d.ts +437 -392
  63. package/dist/protocol/messages/access-log.js +11 -2
  64. package/dist/protocol/messages/actor.d.ts +2 -2
  65. package/dist/protocol/messages/agent-dev-ops.d.ts +4 -2
  66. package/dist/protocol/messages/agent-dev-ops.js +2 -5
  67. package/dist/protocol/messages/agent-run-result.d.ts +72 -62
  68. package/dist/protocol/messages/auth.d.ts +35 -23
  69. package/dist/protocol/messages/browser.d.ts +81 -5
  70. package/dist/protocol/messages/browser.js +53 -2
  71. package/dist/protocol/messages/capabilities.d.ts +106 -31
  72. package/dist/protocol/messages/capabilities.js +94 -10
  73. package/dist/protocol/messages/common.d.ts +45 -2
  74. package/dist/protocol/messages/common.js +64 -3
  75. package/dist/protocol/messages/dashboard-sealed-write.d.ts +52 -0
  76. package/dist/protocol/messages/dashboard-sealed-write.js +57 -0
  77. package/dist/protocol/messages/dashboard.d.ts +1026 -498
  78. package/dist/protocol/messages/dashboard.js +208 -31
  79. package/dist/protocol/messages/deployment-identity.d.ts +37 -10
  80. package/dist/protocol/messages/deployment-identity.js +30 -3
  81. package/dist/protocol/messages/event-log.d.ts +5 -5
  82. package/dist/protocol/messages/execution-status.d.ts +189 -53
  83. package/dist/protocol/messages/execution-status.js +108 -40
  84. package/dist/protocol/messages/heartbeat-health.d.ts +83 -0
  85. package/dist/protocol/messages/heartbeat-health.js +87 -0
  86. package/dist/protocol/messages/log-stream.d.ts +18 -0
  87. package/dist/protocol/messages/log-stream.js +19 -0
  88. package/dist/protocol/messages/oidc-mint.d.ts +7 -0
  89. package/dist/protocol/messages/oidc-mint.js +7 -0
  90. package/dist/protocol/messages/orchestrator-agent.d.ts +264 -67
  91. package/dist/protocol/messages/orchestrator-agent.js +170 -5
  92. package/dist/protocol/messages/pat-kind.d.ts +1 -1
  93. package/dist/protocol/messages/peer.d.ts +122 -58
  94. package/dist/protocol/messages/peer.js +37 -2
  95. package/dist/protocol/messages/platform-orchestrator.d.ts +561 -217
  96. package/dist/protocol/messages/platform-orchestrator.js +131 -21
  97. package/dist/protocol/messages/run-events.d.ts +5 -5
  98. package/dist/protocol/messages/scaler-event.d.ts +3 -3
  99. package/dist/protocol/messages/source-registration.d.ts +56 -13
  100. package/dist/protocol/messages/source-registration.js +49 -6
  101. package/dist/protocol/source-origin.d.ts +1 -1
  102. package/dist/provenance/attestation-origin.d.ts +1 -1
  103. package/dist/provenance/schema.d.ts +11 -11
  104. package/dist/provenance/verify.js +2 -1
  105. package/dist/provider/changed-files-fetcher.d.ts +21 -2
  106. package/dist/provider/check-run-conclusion.d.ts +2 -2
  107. package/dist/provider/check-status-poster.d.ts +23 -0
  108. package/dist/provider/index.d.ts +2 -2
  109. package/dist/registration/registerable-trigger-type.d.ts +14 -13
  110. package/dist/registration/registerable-trigger-type.js +1 -0
  111. package/dist/sandbox/capabilities.d.ts +6 -0
  112. package/dist/sandbox/capabilities.js +57 -0
  113. package/dist/scaler/scaler-backend-type.d.ts +1 -1
  114. package/dist/status/presentation.d.ts +89 -0
  115. package/dist/status/presentation.js +163 -0
  116. package/dist/trigger/compiled-matchers.d.ts +13 -0
  117. package/dist/trigger/compiled-matchers.js +44 -0
  118. package/dist/trigger/event-buckets.d.ts +44 -0
  119. package/dist/trigger/event-buckets.js +93 -0
  120. package/dist/trigger/matcher.d.ts +7 -3
  121. package/dist/trigger/matcher.js +53 -15
  122. package/dist/trigger/schedule-key.d.ts +14 -0
  123. package/dist/trigger/schedule-key.js +21 -0
  124. package/dist/trigger/trigger-event-type.d.ts +1 -1
  125. package/dist/trigger/trigger-event-type.js +2 -0
  126. package/dist/trigger/types.d.ts +173 -43
  127. package/dist/trigger/types.js +82 -25
  128. package/dist/webhook/event-types.d.ts +56 -0
  129. package/dist/webhook/event-types.js +59 -0
  130. package/dist/ws/ws-like.d.ts +13 -0
  131. package/package.json +12 -4
  132. package/sbom.spdx.json +10 -10
  133. package/dist/environment/host-match.d.ts +0 -25
  134. package/dist/environment/index.d.ts +0 -6
  135. package/dist/environment/multi-env.d.ts +0 -30
  136. package/dist/environment/scope-resolver.d.ts +0 -46
  137. package/dist/environment/scope-template.d.ts +0 -18
  138. package/dist/environment/types.d.ts +0 -119
  139. package/dist/package-manager.d.ts +0 -20
  140. package/dist/protocol/messages/observe.d.ts +0 -76
  141. package/dist/protocol/messages/saas-orchestrator.d.ts +0 -2179
  142. package/dist/protocol/messages/test-run.d.ts +0 -59
  143. package/dist/state-machine/index.d.ts +0 -2
  144. package/dist/state-machine/index.js +0 -3
  145. package/dist/state-machine/machine.d.ts +0 -34
  146. package/dist/state-machine/machine.js +0 -103
  147. package/dist/state-machine/types.d.ts +0 -34
  148. package/dist/state-machine/types.js +0 -15
@@ -47,7 +47,8 @@ const AccessLogTargetType = z.enum([
47
47
  "event_dlq",
48
48
  "org_settings",
49
49
  "cluster_meta",
50
- "attestation"
50
+ "attestation",
51
+ "database"
51
52
  ]);
52
53
  /**
53
54
  * Dotted-namespace action names. Every handler that writes an access_log
@@ -63,6 +64,7 @@ const AccessLogAction = z.enum([
63
64
  "run.orch_logs.read",
64
65
  "step.logs.read",
65
66
  "attestations.read",
67
+ "artifacts.read",
66
68
  "run.cancel",
67
69
  "run.rerun",
68
70
  "run.manual_schedule",
@@ -117,6 +119,7 @@ const AccessLogAction = z.enum([
117
119
  "global_workflows.get.read",
118
120
  "global_workflows.update",
119
121
  "org_settings.dashboard_write_policy.update",
122
+ "trust_policy.updated",
120
123
  "cluster_name.update",
121
124
  "attestation.retry",
122
125
  "access_log.list.read",
@@ -124,7 +127,13 @@ const AccessLogAction = z.enum([
124
127
  "event_dlq.retry",
125
128
  "event_dlq.discard",
126
129
  "archive_chunk",
127
- "purge_chunk"
130
+ "purge_chunk",
131
+ "db.fresh",
132
+ "db.ensure",
133
+ "db.create_role",
134
+ "db.create_readonly_user",
135
+ "db.reindex",
136
+ "db.refresh_collation_version"
128
137
  ]);
129
138
  /**
130
139
  * Single row as surfaced to the dashboard / CLI. Includes optional
@@ -10,11 +10,11 @@ import { z } from 'zod';
10
10
  * protocol level rather than in free-text metadata.
11
11
  */
12
12
  export declare const ActorType: z.ZodEnum<{
13
- user: "user";
14
13
  api_key: "api_key";
15
- service_account: "service_account";
16
14
  platform_operator: "platform_operator";
15
+ service_account: "service_account";
17
16
  system: "system";
17
+ user: "user";
18
18
  }>;
19
19
  export type ActorType = z.infer<typeof ActorType>;
20
20
  export declare const userActorSchema: z.ZodObject<{
@@ -59,8 +59,9 @@ export type AgentOrchestratorSummary = z.infer<typeof agentOrchestratorSummarySc
59
59
  export declare const agentDiagnosticsConnectionSchema: z.ZodObject<{
60
60
  connectionId: z.ZodString;
61
61
  healthBadge: z.ZodEnum<{
62
- stale: "stale";
63
62
  connected: "connected";
63
+ orphaned: "orphaned";
64
+ stale: "stale";
64
65
  unhealthy: "unhealthy";
65
66
  }>;
66
67
  routingKeys: z.ZodArray<z.ZodObject<{
@@ -85,8 +86,9 @@ export declare const agentDiagnosticsSchema: z.ZodObject<{
85
86
  orchestrators: z.ZodArray<z.ZodObject<{
86
87
  connectionId: z.ZodString;
87
88
  healthBadge: z.ZodEnum<{
88
- stale: "stale";
89
89
  connected: "connected";
90
+ orphaned: "orphaned";
91
+ stale: "stale";
90
92
  unhealthy: "unhealthy";
91
93
  }>;
92
94
  routingKeys: z.ZodArray<z.ZodObject<{
@@ -1,5 +1,6 @@
1
1
  import "../../rolldown-runtime-ClRpJifh.js";
2
2
  import { untrusted } from "./agent-run-result.js";
3
+ import { connectionHealthStatusSchema } from "./heartbeat-health.js";
3
4
  import { z } from "zod";
4
5
  //#region src/protocol/messages/agent-dev-ops.ts
5
6
  /**
@@ -49,11 +50,7 @@ const agentOrchestratorSummarySchema = z.object({
49
50
  /** One orchestrator connection row inside the diagnostics summary. */
50
51
  const agentDiagnosticsConnectionSchema = z.object({
51
52
  connectionId: z.string(),
52
- healthBadge: z.enum([
53
- "connected",
54
- "unhealthy",
55
- "stale"
56
- ]),
53
+ healthBadge: connectionHealthStatusSchema,
57
54
  routingKeys: z.array(untrustedString),
58
55
  lastHeartbeatAt: z.string().nullable()
59
56
  });
@@ -32,12 +32,12 @@ export declare function wrapUntrusted<T>(value: T): {
32
32
  };
33
33
  /** Coarse, derived run-failure classification (trusted — KiCI computes it). */
34
34
  export declare const AgentFailureCategory: z.ZodEnum<{
35
- unknown: "unknown";
36
35
  cancelled: "cancelled";
36
+ infra: "infra";
37
37
  init_failure: "init_failure";
38
- timed_out: "timed_out";
39
38
  step_failed: "step_failed";
40
- infra: "infra";
39
+ timed_out: "timed_out";
40
+ unknown: "unknown";
41
41
  }>;
42
42
  export type AgentFailureCategory = z.infer<typeof AgentFailureCategory>;
43
43
  export declare const agentStepResultSchema: z.ZodObject<{
@@ -47,12 +47,12 @@ export declare const agentStepResultSchema: z.ZodObject<{
47
47
  value: z.ZodString;
48
48
  }, z.core.$strip>;
49
49
  status: z.ZodEnum<{
50
- skipped: "skipped";
51
- success: "success";
50
+ cancelled: "cancelled";
51
+ failed: "failed";
52
52
  pending: "pending";
53
53
  running: "running";
54
- failed: "failed";
55
- cancelled: "cancelled";
54
+ skipped: "skipped";
55
+ success: "success";
56
56
  }>;
57
57
  exitCode: z.ZodNullable<z.ZodNumber>;
58
58
  durationMs: z.ZodNullable<z.ZodNumber>;
@@ -64,11 +64,11 @@ export declare const agentStepResultSchema: z.ZodObject<{
64
64
  }, z.core.$strip>>;
65
65
  stepType: z.ZodString;
66
66
  checkOutcome: z.ZodNullable<z.ZodEnum<{
67
- skipped: "skipped";
68
67
  applied: "applied";
69
68
  declined: "declined";
70
69
  "dry-run": "dry-run";
71
70
  no_check: "no_check";
71
+ skipped: "skipped";
72
72
  }>>;
73
73
  secretsAccessed: z.ZodArray<z.ZodString>;
74
74
  }, z.core.$strip>;
@@ -80,17 +80,18 @@ export declare const agentJobResultSchema: z.ZodObject<{
80
80
  value: z.ZodString;
81
81
  }, z.core.$strip>;
82
82
  status: z.ZodEnum<{
83
- skipped: "skipped";
84
- success: "success";
85
- pending: "pending";
86
- running: "running";
87
- failed: "failed";
88
83
  cancelled: "cancelled";
89
84
  cancelling: "cancelling";
85
+ drift_dropped: "drift_dropped";
86
+ failed: "failed";
87
+ pending: "pending";
90
88
  queued: "queued";
91
89
  recovering: "recovering";
90
+ running: "running";
91
+ skipped: "skipped";
92
+ success: "success";
92
93
  timed_out_stale: "timed_out_stale";
93
- drift_dropped: "drift_dropped";
94
+ unroutable: "unroutable";
94
95
  }>;
95
96
  startedAt: z.ZodNullable<z.ZodString>;
96
97
  completedAt: z.ZodNullable<z.ZodString>;
@@ -106,14 +107,17 @@ export declare const agentJobResultSchema: z.ZodObject<{
106
107
  run: "run";
107
108
  }>;
108
109
  category: z.ZodEnum<{
109
- secret_resolution: "secret_resolution";
110
- install_secrets: "install_secrets";
111
- lock_resolution: "lock_resolution";
110
+ approval_misconfig: "approval_misconfig";
112
111
  build_coordination: "build_coordination";
113
112
  context_rules: "context_rules";
114
113
  dynamic_eval: "dynamic_eval";
115
- no_agent: "no_agent";
114
+ install_secrets: "install_secrets";
115
+ lock_resolution: "lock_resolution";
116
116
  matrix_expansion: "matrix_expansion";
117
+ no_agent: "no_agent";
118
+ sandbox_denied: "sandbox_denied";
119
+ secret_resolution: "secret_resolution";
120
+ trust_policy: "trust_policy";
117
121
  }>;
118
122
  message: z.ZodObject<{
119
123
  untrusted: z.ZodLiteral<true>;
@@ -126,17 +130,18 @@ export declare const agentJobResultSchema: z.ZodObject<{
126
130
  value: z.ZodString;
127
131
  }, z.core.$strip>;
128
132
  runOn: z.ZodArray<z.ZodEnum<{
129
- skipped: "skipped";
130
- success: "success";
131
- pending: "pending";
132
- running: "running";
133
- failed: "failed";
134
133
  cancelled: "cancelled";
135
134
  cancelling: "cancelling";
135
+ drift_dropped: "drift_dropped";
136
+ failed: "failed";
137
+ pending: "pending";
136
138
  queued: "queued";
137
139
  recovering: "recovering";
140
+ running: "running";
141
+ skipped: "skipped";
142
+ success: "success";
138
143
  timed_out_stale: "timed_out_stale";
139
- drift_dropped: "drift_dropped";
144
+ unroutable: "unroutable";
140
145
  }>>;
141
146
  }, z.core.$strip>>;
142
147
  outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -151,12 +156,12 @@ export declare const agentJobResultSchema: z.ZodObject<{
151
156
  value: z.ZodString;
152
157
  }, z.core.$strip>;
153
158
  status: z.ZodEnum<{
154
- skipped: "skipped";
155
- success: "success";
159
+ cancelled: "cancelled";
160
+ failed: "failed";
156
161
  pending: "pending";
157
162
  running: "running";
158
- failed: "failed";
159
- cancelled: "cancelled";
163
+ skipped: "skipped";
164
+ success: "success";
160
165
  }>;
161
166
  exitCode: z.ZodNullable<z.ZodNumber>;
162
167
  durationMs: z.ZodNullable<z.ZodNumber>;
@@ -168,11 +173,11 @@ export declare const agentJobResultSchema: z.ZodObject<{
168
173
  }, z.core.$strip>>;
169
174
  stepType: z.ZodString;
170
175
  checkOutcome: z.ZodNullable<z.ZodEnum<{
171
- skipped: "skipped";
172
176
  applied: "applied";
173
177
  declined: "declined";
174
178
  "dry-run": "dry-run";
175
179
  no_check: "no_check";
180
+ skipped: "skipped";
176
181
  }>>;
177
182
  secretsAccessed: z.ZodArray<z.ZodString>;
178
183
  }, z.core.$strip>>;
@@ -185,13 +190,13 @@ export declare const agentRunResultSchema: z.ZodObject<{
185
190
  value: z.ZodString;
186
191
  }, z.core.$strip>;
187
192
  status: z.ZodEnum<{
188
- success: "success";
189
- pending: "pending";
190
- running: "running";
191
- failed: "failed";
192
193
  cancelled: "cancelled";
193
194
  cancelling: "cancelling";
195
+ failed: "failed";
194
196
  held: "held";
197
+ pending: "pending";
198
+ running: "running";
199
+ success: "success";
195
200
  }>;
196
201
  provider: z.ZodString;
197
202
  repoIdentifier: z.ZodObject<{
@@ -208,21 +213,21 @@ export declare const agentRunResultSchema: z.ZodObject<{
208
213
  completedAt: z.ZodNullable<z.ZodString>;
209
214
  durationMs: z.ZodNullable<z.ZodNumber>;
210
215
  trustTier: z.ZodNullable<z.ZodEnum<{
211
- unknown: "unknown";
212
216
  known: "known";
213
217
  trusted: "trusted";
218
+ unknown: "unknown";
214
219
  }>>;
215
220
  contributorUsername: z.ZodNullable<z.ZodObject<{
216
221
  untrusted: z.ZodLiteral<true>;
217
222
  value: z.ZodString;
218
223
  }, z.core.$strip>>;
219
224
  failureCategory: z.ZodNullable<z.ZodEnum<{
220
- unknown: "unknown";
221
225
  cancelled: "cancelled";
226
+ infra: "infra";
222
227
  init_failure: "init_failure";
223
- timed_out: "timed_out";
224
228
  step_failed: "step_failed";
225
- infra: "infra";
229
+ timed_out: "timed_out";
230
+ unknown: "unknown";
226
231
  }>>;
227
232
  failureReason: z.ZodNullable<z.ZodObject<{
228
233
  untrusted: z.ZodLiteral<true>;
@@ -237,17 +242,18 @@ export declare const agentRunResultSchema: z.ZodObject<{
237
242
  value: z.ZodString;
238
243
  }, z.core.$strip>;
239
244
  status: z.ZodEnum<{
240
- skipped: "skipped";
241
- success: "success";
242
- pending: "pending";
243
- running: "running";
244
- failed: "failed";
245
245
  cancelled: "cancelled";
246
246
  cancelling: "cancelling";
247
+ drift_dropped: "drift_dropped";
248
+ failed: "failed";
249
+ pending: "pending";
247
250
  queued: "queued";
248
251
  recovering: "recovering";
252
+ running: "running";
253
+ skipped: "skipped";
254
+ success: "success";
249
255
  timed_out_stale: "timed_out_stale";
250
- drift_dropped: "drift_dropped";
256
+ unroutable: "unroutable";
251
257
  }>;
252
258
  startedAt: z.ZodNullable<z.ZodString>;
253
259
  completedAt: z.ZodNullable<z.ZodString>;
@@ -263,14 +269,17 @@ export declare const agentRunResultSchema: z.ZodObject<{
263
269
  run: "run";
264
270
  }>;
265
271
  category: z.ZodEnum<{
266
- secret_resolution: "secret_resolution";
267
- install_secrets: "install_secrets";
268
- lock_resolution: "lock_resolution";
272
+ approval_misconfig: "approval_misconfig";
269
273
  build_coordination: "build_coordination";
270
274
  context_rules: "context_rules";
271
275
  dynamic_eval: "dynamic_eval";
272
- no_agent: "no_agent";
276
+ install_secrets: "install_secrets";
277
+ lock_resolution: "lock_resolution";
273
278
  matrix_expansion: "matrix_expansion";
279
+ no_agent: "no_agent";
280
+ sandbox_denied: "sandbox_denied";
281
+ secret_resolution: "secret_resolution";
282
+ trust_policy: "trust_policy";
274
283
  }>;
275
284
  message: z.ZodObject<{
276
285
  untrusted: z.ZodLiteral<true>;
@@ -283,17 +292,18 @@ export declare const agentRunResultSchema: z.ZodObject<{
283
292
  value: z.ZodString;
284
293
  }, z.core.$strip>;
285
294
  runOn: z.ZodArray<z.ZodEnum<{
286
- skipped: "skipped";
287
- success: "success";
288
- pending: "pending";
289
- running: "running";
290
- failed: "failed";
291
295
  cancelled: "cancelled";
292
296
  cancelling: "cancelling";
297
+ drift_dropped: "drift_dropped";
298
+ failed: "failed";
299
+ pending: "pending";
293
300
  queued: "queued";
294
301
  recovering: "recovering";
302
+ running: "running";
303
+ skipped: "skipped";
304
+ success: "success";
295
305
  timed_out_stale: "timed_out_stale";
296
- drift_dropped: "drift_dropped";
306
+ unroutable: "unroutable";
297
307
  }>>;
298
308
  }, z.core.$strip>>;
299
309
  outputs: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -308,12 +318,12 @@ export declare const agentRunResultSchema: z.ZodObject<{
308
318
  value: z.ZodString;
309
319
  }, z.core.$strip>;
310
320
  status: z.ZodEnum<{
311
- skipped: "skipped";
312
- success: "success";
321
+ cancelled: "cancelled";
322
+ failed: "failed";
313
323
  pending: "pending";
314
324
  running: "running";
315
- failed: "failed";
316
- cancelled: "cancelled";
325
+ skipped: "skipped";
326
+ success: "success";
317
327
  }>;
318
328
  exitCode: z.ZodNullable<z.ZodNumber>;
319
329
  durationMs: z.ZodNullable<z.ZodNumber>;
@@ -325,11 +335,11 @@ export declare const agentRunResultSchema: z.ZodObject<{
325
335
  }, z.core.$strip>>;
326
336
  stepType: z.ZodString;
327
337
  checkOutcome: z.ZodNullable<z.ZodEnum<{
328
- skipped: "skipped";
329
338
  applied: "applied";
330
339
  declined: "declined";
331
340
  "dry-run": "dry-run";
332
341
  no_check: "no_check";
342
+ skipped: "skipped";
333
343
  }>>;
334
344
  secretsAccessed: z.ZodArray<z.ZodString>;
335
345
  }, z.core.$strip>>;
@@ -357,13 +367,13 @@ export type AgentStepLogs = z.infer<typeof agentStepLogsSchema>;
357
367
  export declare const agentRunListItemSchema: z.ZodObject<{
358
368
  runId: z.ZodString;
359
369
  status: z.ZodEnum<{
360
- success: "success";
361
- pending: "pending";
362
- running: "running";
363
- failed: "failed";
364
370
  cancelled: "cancelled";
365
371
  cancelling: "cancelling";
372
+ failed: "failed";
366
373
  held: "held";
374
+ pending: "pending";
375
+ running: "running";
376
+ success: "success";
367
377
  }>;
368
378
  sha: z.ZodNullable<z.ZodString>;
369
379
  createdAt: z.ZodNullable<z.ZodString>;
@@ -9,36 +9,48 @@ export declare const authRequestSchema: z.ZodObject<{
9
9
  coordinator: "coordinator";
10
10
  worker: "worker";
11
11
  }>>;
12
- dashboardWrites: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
13
- "secrets.set": "secrets.set";
14
- "secrets.delete": "secrets.delete";
15
- "secrets.scope.create": "secrets.scope.create";
16
- "secrets.scope.rename": "secrets.scope.rename";
17
- "secrets.scope.delete": "secrets.scope.delete";
18
- "variables.set": "variables.set";
19
- "variables.delete": "variables.delete";
20
- "contexts.create": "contexts.create";
21
- "contexts.update": "contexts.update";
22
- "contexts.test_access.set": "contexts.test_access.set";
23
- "contexts.delete": "contexts.delete";
24
- "contexts.bindings.set": "contexts.bindings.set";
25
- "contexts.source_overrides.set": "contexts.source_overrides.set";
26
- "contexts.source_overrides.delete": "contexts.source_overrides.delete";
27
- "held_runs.approve": "held_runs.approve";
28
- "held_runs.reject": "held_runs.reject";
29
- "event_dlq.retry": "event_dlq.retry";
30
- "event_dlq.discard": "event_dlq.discard";
12
+ dashboardWrites: z.ZodOptional<z.ZodPipe<z.ZodRecord<z.ZodEnum<{
31
13
  "attestations.retry": "attestations.retry";
32
- "registration.disable": "registration.disable";
33
- "registration.delete": "registration.delete";
34
- "global_workflows.update": "global_workflows.update";
35
14
  "backends.sync": "backends.sync";
36
15
  "backends.sync_one": "backends.sync_one";
37
16
  "backends.test": "backends.test";
17
+ "contexts.bindings.set": "contexts.bindings.set";
18
+ "contexts.create": "contexts.create";
19
+ "contexts.delete": "contexts.delete";
20
+ "contexts.source_overrides.delete": "contexts.source_overrides.delete";
21
+ "contexts.source_overrides.set": "contexts.source_overrides.set";
22
+ "contexts.test_access.set": "contexts.test_access.set";
23
+ "contexts.update": "contexts.update";
24
+ "event_dlq.discard": "event_dlq.discard";
25
+ "event_dlq.retry": "event_dlq.retry";
38
26
  "fleet.host.declare": "fleet.host.declare";
39
27
  "fleet.host.remove": "fleet.host.remove";
40
- }> & z.core.$partial, z.ZodBoolean>>;
28
+ "global_workflows.update": "global_workflows.update";
29
+ "held_runs.approve": "held_runs.approve";
30
+ "held_runs.reject": "held_runs.reject";
31
+ "registration.delete": "registration.delete";
32
+ "registration.disable": "registration.disable";
33
+ "secrets.delete": "secrets.delete";
34
+ "secrets.scope.create": "secrets.scope.create";
35
+ "secrets.scope.delete": "secrets.scope.delete";
36
+ "secrets.scope.rename": "secrets.scope.rename";
37
+ "secrets.set": "secrets.set";
38
+ "variables.delete": "variables.delete";
39
+ "variables.set": "variables.set";
40
+ }> & z.core.$partial, z.ZodUnion<readonly [z.ZodBoolean, z.ZodEnum<{
41
+ disabled: "disabled";
42
+ encrypted: "encrypted";
43
+ permissive: "permissive";
44
+ }>]>>, z.ZodTransform<Partial<Record<"attestations.retry" | "backends.sync" | "backends.sync_one" | "backends.test" | "contexts.bindings.set" | "contexts.create" | "contexts.delete" | "contexts.source_overrides.delete" | "contexts.source_overrides.set" | "contexts.test_access.set" | "contexts.update" | "event_dlq.discard" | "event_dlq.retry" | "fleet.host.declare" | "fleet.host.remove" | "global_workflows.update" | "held_runs.approve" | "held_runs.reject" | "registration.delete" | "registration.disable" | "secrets.delete" | "secrets.scope.create" | "secrets.scope.delete" | "secrets.scope.rename" | "secrets.set" | "variables.delete" | "variables.set", "disabled" | "encrypted" | "permissive">>, Partial<Record<"attestations.retry" | "backends.sync" | "backends.sync_one" | "backends.test" | "contexts.bindings.set" | "contexts.create" | "contexts.delete" | "contexts.source_overrides.delete" | "contexts.source_overrides.set" | "contexts.test_access.set" | "contexts.update" | "event_dlq.discard" | "event_dlq.retry" | "fleet.host.declare" | "fleet.host.remove" | "global_workflows.update" | "held_runs.approve" | "held_runs.reject" | "registration.delete" | "registration.disable" | "secrets.delete" | "secrets.scope.create" | "secrets.scope.delete" | "secrets.scope.rename" | "secrets.set" | "variables.delete" | "variables.set", "disabled" | "encrypted" | "permissive" | boolean>>>>>;
41
45
  supportedDashboardRequests: z.ZodOptional<z.ZodArray<z.ZodString>>;
46
+ dashboardEncryptionKey: z.ZodOptional<z.ZodObject<{
47
+ kty: z.ZodLiteral<"OKP">;
48
+ crv: z.ZodLiteral<"X25519">;
49
+ x: z.ZodString;
50
+ kid: z.ZodString;
51
+ use: z.ZodOptional<z.ZodLiteral<"enc">>;
52
+ }, z.core.$loose>>;
53
+ dashboardVerifiedIssuer: z.ZodOptional<z.ZodNullable<z.ZodString>>;
42
54
  }, z.core.$loose>>;
43
55
  }, z.core.$strip>;
44
56
  /** Auth success response sent by Platform to orchestrator after successful authentication. */
@@ -33,6 +33,24 @@ export declare const browserLogUnsubscribeSchema: z.ZodObject<{
33
33
  jobId: z.ZodString;
34
34
  stepIndex: z.ZodNumber;
35
35
  }, z.core.$strip>;
36
+ /**
37
+ * Browser subscribes to live orchestration/provisioning logs for a job.
38
+ *
39
+ * Keyed by `(runId, jobId)` — no `stepIndex` (orch logs are job-level, not
40
+ * per-step). On subscribe the Platform backfills persisted history via the
41
+ * `dashboard.orch.logs` RPC, then streams live `orch-log.lines`.
42
+ */
43
+ export declare const browserOrchLogSubscribeSchema: z.ZodObject<{
44
+ type: z.ZodLiteral<"orch-log.subscribe">;
45
+ runId: z.ZodString;
46
+ jobId: z.ZodString;
47
+ }, z.core.$strip>;
48
+ /** Browser unsubscribes from live orchestration/provisioning logs for a job. */
49
+ export declare const browserOrchLogUnsubscribeSchema: z.ZodObject<{
50
+ type: z.ZodLiteral<"orch-log.unsubscribe">;
51
+ runId: z.ZodString;
52
+ jobId: z.ZodString;
53
+ }, z.core.$strip>;
36
54
  /** Browser subscribes to org-level status updates (run/job/step status changes). */
37
55
  export declare const browserStatusSubscribeSchema: z.ZodObject<{
38
56
  type: z.ZodLiteral<"status.subscribe">;
@@ -80,6 +98,14 @@ export declare const browserToPlatformMessageSchema: z.ZodDiscriminatedUnion<[z.
80
98
  runId: z.ZodString;
81
99
  jobId: z.ZodString;
82
100
  stepIndex: z.ZodNumber;
101
+ }, z.core.$strip>, z.ZodObject<{
102
+ type: z.ZodLiteral<"orch-log.subscribe">;
103
+ runId: z.ZodString;
104
+ jobId: z.ZodString;
105
+ }, z.core.$strip>, z.ZodObject<{
106
+ type: z.ZodLiteral<"orch-log.unsubscribe">;
107
+ runId: z.ZodString;
108
+ jobId: z.ZodString;
83
109
  }, z.core.$strip>, z.ZodObject<{
84
110
  type: z.ZodLiteral<"status.subscribe">;
85
111
  scope: z.ZodLiteral<"org">;
@@ -112,6 +138,39 @@ export declare const browserLogLinesSchema: z.ZodObject<{
112
138
  stepIndex: z.ZodNumber;
113
139
  lines: z.ZodArray<z.ZodString>;
114
140
  lineCount: z.ZodNumber;
141
+ stream: z.ZodOptional<z.ZodEnum<{
142
+ stderr: "stderr";
143
+ stdout: "stdout";
144
+ }>>;
145
+ }, z.core.$strip>;
146
+ /**
147
+ * Platform sends orchestration/provisioning log lines for a subscribed job.
148
+ *
149
+ * Delivered in two forms over the same message:
150
+ * - **Backfill** (on subscribe): `lines` are the persisted JSONL strings from
151
+ * the `dashboard.orch.logs` RPC (each carrying its own `phase`/`ts`), so the
152
+ * top-level `phase`/`ts` are omitted.
153
+ * - **Live** (streamed after backfill): `lines` are raw message strings for a
154
+ * single `phase` at timestamp `ts`.
155
+ *
156
+ * The dashboard normalizes both by attempting to JSON-parse each line and
157
+ * falling back to the envelope `phase`/`ts`, and dedups on `(ts, phase,
158
+ * message)` so an overlap between the backfill snapshot and the first live
159
+ * chunk is not double-appended.
160
+ */
161
+ export declare const browserOrchLogLinesSchema: z.ZodObject<{
162
+ type: z.ZodLiteral<"orch-log.lines">;
163
+ runId: z.ZodString;
164
+ jobId: z.ZodString;
165
+ phase: z.ZodOptional<z.ZodEnum<{
166
+ dispatch: "dispatch";
167
+ provisioning: "provisioning";
168
+ setup: "setup";
169
+ teardown: "teardown";
170
+ unknown: "unknown";
171
+ }>>;
172
+ lines: z.ZodArray<z.ZodString>;
173
+ ts: z.ZodOptional<z.ZodNumber>;
115
174
  }, z.core.$strip>;
116
175
  /** Platform notifies browser that lines were dropped due to backpressure. */
117
176
  export declare const browserGapSchema: z.ZodObject<{
@@ -237,6 +296,23 @@ export declare const platformToBrowserMessageSchema: z.ZodDiscriminatedUnion<[z.
237
296
  stepIndex: z.ZodNumber;
238
297
  lines: z.ZodArray<z.ZodString>;
239
298
  lineCount: z.ZodNumber;
299
+ stream: z.ZodOptional<z.ZodEnum<{
300
+ stderr: "stderr";
301
+ stdout: "stdout";
302
+ }>>;
303
+ }, z.core.$strip>, z.ZodObject<{
304
+ type: z.ZodLiteral<"orch-log.lines">;
305
+ runId: z.ZodString;
306
+ jobId: z.ZodString;
307
+ phase: z.ZodOptional<z.ZodEnum<{
308
+ dispatch: "dispatch";
309
+ provisioning: "provisioning";
310
+ setup: "setup";
311
+ teardown: "teardown";
312
+ unknown: "unknown";
313
+ }>>;
314
+ lines: z.ZodArray<z.ZodString>;
315
+ ts: z.ZodOptional<z.ZodNumber>;
240
316
  }, z.core.$strip>, z.ZodObject<{
241
317
  type: z.ZodLiteral<"log.gap">;
242
318
  runId: z.ZodString;
@@ -325,10 +401,10 @@ export declare const platformToBrowserMessageSchema: z.ZodDiscriminatedUnion<[z.
325
401
  name: z.ZodString;
326
402
  value: z.ZodString;
327
403
  category: z.ZodEnum<{
328
- user: "user";
329
- system: "system";
330
404
  inherited: "inherited";
331
405
  secret: "secret";
406
+ system: "system";
407
+ user: "user";
332
408
  }>;
333
409
  }, z.core.$strip>>>;
334
410
  runtime: z.ZodOptional<z.ZodObject<{
@@ -356,12 +432,12 @@ export declare const platformToBrowserMessageSchema: z.ZodDiscriminatedUnion<[z.
356
432
  data: z.ZodString;
357
433
  isLast: z.ZodBoolean;
358
434
  error: z.ZodOptional<z.ZodEnum<{
359
- payload_unavailable: "payload_unavailable";
360
- not_found: "not_found";
361
- read_failed: "read_failed";
362
435
  forbidden: "forbidden";
436
+ not_found: "not_found";
363
437
  orch_stream_timeout: "orch_stream_timeout";
364
438
  orchestrator_unavailable: "orchestrator_unavailable";
439
+ payload_unavailable: "payload_unavailable";
440
+ read_failed: "read_failed";
365
441
  }>>;
366
442
  totalBytes: z.ZodOptional<z.ZodNumber>;
367
443
  }, z.core.$strip>], "type">;