@kici-dev/engine 0.1.3 → 0.1.5

package/dist/audit/access-log-policy.js

@@ -130,6 +130,8 @@ const POLICY_BY_ACTION = {
 	"backend.sync.one": { kind: "always" },
 	"backend.test": { kind: "always" },
 	"global_workflows.update": { kind: "always" },
+	"org_settings.dashboard_write_policy.update": { kind: "always" },
+	"cluster_name.update": { kind: "always" },
 	"access_log.list.read": { kind: "always" },
 	"event_dlq.list.read": {
 		kind: "sample",
@@ -137,7 +139,8 @@ const POLICY_BY_ACTION = {
 	},
 	"event_dlq.retry": { kind: "always" },
 	"event_dlq.discard": { kind: "always" },
-	archive_chunk: { kind: "always" }
+	archive_chunk: { kind: "always" },
+	purge_chunk: { kind: "always" }
 };
 /**
 * Tiny FNV-1a 32-bit hash. Used for stable hash-based sampling so a single

package/dist/audit/retention-policy.js

@@ -55,6 +55,8 @@ const ACCESS_LOG_WARM_DAYS = {
 	"backend.sync.one": 180,
 	"backend.test": 180,
 	"global_workflows.update": 180,
+	"org_settings.dashboard_write_policy.update": 180,
+	"cluster_name.update": 180,
 	"event_dlq.list.read": 30,
 	"event_dlq.retry": 180,
 	"event_dlq.discard": 180,
@@ -64,7 +66,8 @@ const ACCESS_LOG_WARM_DAYS = {
 	"secret_scope.create": 365,
 	"secret_scope.rename": 365,
 	"secret_scope.delete": 365,
-	archive_chunk: 365
+	archive_chunk: 365,
+	purge_chunk: 365
 };
 /** Override outcomes that promote retention to 180 days regardless of action. */
 const FORENSIC_OUTCOME_DAYS = 180;
@@ -103,6 +106,7 @@ const COMPLIANCE_AUDIT_PREFIXES = [
 ];
 const COMPLIANCE_AUDIT_EXACT = new Set([
 	"archive_chunk",
+	"purge_chunk",
 	"replay_chunk",
 	"scheduled_job_failure"
 ]);
@@ -283,6 +287,8 @@ const ACCESS_LOG_COLD_DAYS = {
 	"backend.sync.one": 730,
 	"backend.test": 730,
 	"global_workflows.update": 730,
+	"org_settings.dashboard_write_policy.update": 730,
+	"cluster_name.update": 730,
 	"event_dlq.list.read": 180,
 	"event_dlq.retry": 730,
 	"event_dlq.discard": 730,
@@ -292,7 +298,8 @@ const ACCESS_LOG_COLD_DAYS = {
 	"secret_scope.create": "forever",
 	"secret_scope.rename": "forever",
 	"secret_scope.delete": "forever",
-	archive_chunk: "forever"
+	archive_chunk: "forever",
+	purge_chunk: "forever"
 };
 /** Override outcome cold-retention (forensic — 2 years). */
 const FORENSIC_OUTCOME_COLD_DAYS = 730;

package/dist/index.js

@@ -9,7 +9,7 @@ import { SourceProvider, SourceSubtype, sourceDeregisterAckSchema, sourceDeregis
 import { AccessLogAction, AccessLogOutcome, AccessLogSource, AccessLogTargetType, accessLogFilterSchema, accessLogItemSchema, dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema } from "./protocol/messages/access-log.js";
 import { browserJobContextSchema, browserRunEventSchema, dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema, jobContextMessageSchema, runEventMessageSchema } from "./protocol/messages/run-events.js";
 import { EventLogSource, EventLogStatus, PayloadOmittedReason } from "./protocol/messages/event-log.js";
-import { EventLogPayloadStreamError, HeldRunQueueType, HeldRunStatus, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runRerunRequestSchema, trustPolicyResponseSchema } from "./protocol/messages/dashboard.js";
+import { EventLogPayloadStreamError, HeldRunQueueType, HeldRunStatus, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserEventLogPayloadChunkSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, eventLogListItemSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, identityLinkItemSchema, identityLinkListResponseSchema, manualScheduleRequestSchema, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, orgMemberSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, runCancelRequestSchema, runEventSchema, runLineageResponseSchema, runRerunRequestSchema, trustPolicyResponseSchema } from "./protocol/messages/dashboard.js";
 import { WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WebhookRelayResult, cacheStatsSchema, executionEventSchema, logChunkSchema, orchMetricsSchema, orchestratorToPlatformMessageSchema, peerDiscoverSchema, peerUpdateSchema, platformToOrchestratorMessageSchema, staleCheckrunCleanupSchema, trustPolicyUpdateSchema, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema } from "./protocol/messages/platform-orchestrator.js";
 import { AccessLogPolicyKind, POLICY_BY_ACTION, fnv1a32, shouldRecordAccess, shouldRecordSecretResolve } from "./audit/access-log-policy.js";
 import { ACCESS_LOG_COLD_DAYS, ACCESS_LOG_WARM_DAYS, accessLogWarmSqlCase, auditLogColdDays, auditLogWarmDays, auditLogWarmSqlCase, getAccessLogColdDays, getAccessLogWarmDays, getAuditLogColdDays, getAuditLogWarmDays, getSecretAuditLogColdDays, getSecretAuditLogWarmDays, minAccessLogWarmDays, minAuditLogWarmDays, minSecretAuditLogWarmDays, secretAuditLogColdDays, secretAuditLogWarmDays, secretAuditLogWarmSqlCase } from "./audit/retention-policy.js";
@@ -30,7 +30,7 @@ import { isTerminal, transition } from "./state-machine/machine.js";
 import "./state-machine/index.js";
 import { CheckRunConclusion } from "./provider/check-run-conclusion.js";
 import "./provider/index.js";
-import { WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED } from "./ws/close-codes.js";
+import { WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED } from "./ws/close-codes.js";
 import { WsRateLimiter } from "./ws/rate-limiter.js";
 import { AGENT_REQUIRED_KICI_VARS, ALLOWED_SYSTEM_VARS, KICI_AGENT_ENV_PREFIX, SANDBOX_DEFAULT_VARS } from "./env/environment-allowlist.js";
 import "./secrets/index.js";
@@ -42,4 +42,4 @@ import { parseMemoryString, resourceRequestNestedSchema, resourceSpecSchema, val
 import { RegisterableTriggerType } from "./registration/registerable-trigger-type.js";
 import { createWorkflowBundleConfig } from "./bundler/rolldown-config.js";
 import "./bundler/index.js";
-export { ACCESS_LOG_COLD_DAYS, ACCESS_LOG_WARM_DAYS, AGENT_REQUIRED_KICI_VARS, ALLOWED_SYSTEM_VARS, AccessLogAction, AccessLogOutcome, AccessLogPolicyKind, AccessLogSource, AccessLogTargetType, ActivityFilterSource, ActivityRowSource, ActorType, CheckRunConclusion, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, HeldRunQueueType, HeldRunStatus, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, MIN_PROTOCOL_VERSION, NeedsEntrySchema, NeedsGroupEntrySchema, ORCH_CAPABILITIES, OrchRole, POLICY_BY_ACTION, PROTOCOL_VERSION, PayloadOmittedReason, RegisterableTriggerType, SANDBOX_DEFAULT_VARS, SCHEMA_VERSION, ScalerBackendType, SourceProvider, SourceSubtype, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TRIGGER_EVENT_META, TRIGGER_EVENT_TYPES, WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogFilterSchema, accessLogItemSchema, accessLogWarmSqlCase, ackSchema, activityCursorSchema, activityFilterSchema, activityRowSchema, actorPrincipalSchema, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, agentTypeLabel, apiKeyActorSchema, auditLogColdDays, auditLogWarmDays, auditLogWarmSqlCase, authFailureSchema, authRequestSchema, authSuccessSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserAuthFailureSchema, browserAuthRefreshSchema, browserAuthRequestSchema, browserAuthSuccessSchema, browserErrorSchema, browserEventLogPayloadChunkSchema, browserEventLogPayloadFetchSchema, browserGapSchema, browserJobContextSchema, browserJobNewSchema, browserJobStatusSchema, browserLogLinesSchema, browserLogStreamTerminatedReason, browserLogStreamTerminatedSchema, browserLogSubscribeSchema, browserLogUnsubscribeSchema, browserPingSchema, browserPongSchema, browserRunEventSchema, browserRunNewSchema, browserRunStatusSchema, browserStatusSubscribeSchema, browserStatusUnsubscribeSchema, browserStepStatusSchema, browserToPlatformMessageSchema, cacheStatsSchema, configAckSchema, createTraceEntry, createWorkflowBundleConfig, createWorkflowDecision, dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, decodeActivityCursor, deriveOsArchLabels, encodeActivityCursor, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, errorSchema, eventEmitResponseSchema, eventEmitSchema, eventLogListItemSchema, executionEventSchema, executionStatusSchema, flattenActor, fnv1a32, getAccessLogColdDays, getAccessLogWarmDays, getAuditLogColdDays, getAuditLogWarmDays, getSecretAuditLogColdDays, getSecretAuditLogWarmDays, gitAuthSchema, hasOrchCapability, heartbeatSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, hostLabel, identityLinkItemSchema, identityLinkListResponseSchema, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob, isTerminal, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobContextMessageSchema, jobDispatchSchema, jobProgressSchema, jobRerouteAckSchema, jobRerouteSchema, jobStatusForwardSchema, jobStatusSchema, joinRequestSchema, joinResponseSchema, logChunkSchema, logPullOrchToPlatformSchema, logPullPlatformToOrchSchema, manualScheduleRequestSchema, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchScopePattern, matchWorkflowTriggers, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, mergeAutoLabels, minAccessLogWarmDays, minAuditLogWarmDays, minSecretAuditLogWarmDays, nackSchema, normalizeRunsOn, observeCompleteSchema, observeLogSchema, observeStatusSchema, observeStepSchema, observeSubscribeSchema, orchCapabilitiesSchema, orchMetricsSchema, orchestratorToAgentMessageSchema, orchestratorToPlatformMessageSchema, orgMemberSchema, parseActor, parseMemoryString, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerDiscoverSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerToPeerMessageSchema, peerUpdateSchema, platformOperatorActorSchema, platformToBrowserMessageSchema, platformToOrchestratorMessageSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema, registerAckSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, resolveRoleLabels, resolveRunIdSugar, resolveSecretsForEnvironment, resourceRequestNestedSchema, resourceSpecSchema, runCancelRequestSchema, runEventMessageSchema, runEventSchema, runLineageResponseSchema, runRerunRequestSchema, scalerLabel, secretAuditLogColdDays, secretAuditLogWarmDays, secretAuditLogWarmSqlCase, serviceAccountActorSchema, shouldRecordAccess, shouldRecordSecretResolve, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema, staleCheckrunCleanupSchema, stateReplaySchema, stepStatusForwardSchema, stringifyActor, stripScopePrefix, systemActorSchema, testCancelResponseSchema, testCancelSchema, testEventSchema, testTriggerResponseSchema, testTriggerSchema, transition, trustPolicyResponseSchema, trustPolicyUpdateSchema, userActorSchema, validateNoReservedLabels, validateResourceRequest, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema };
+export { ACCESS_LOG_COLD_DAYS, ACCESS_LOG_WARM_DAYS, AGENT_REQUIRED_KICI_VARS, ALLOWED_SYSTEM_VARS, AccessLogAction, AccessLogOutcome, AccessLogPolicyKind, AccessLogSource, AccessLogTargetType, ActivityFilterSource, ActivityRowSource, ActorType, CheckRunConclusion, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, HeldRunQueueType, HeldRunStatus, KICI_AGENT_ENV_PREFIX, KNOWN_ROLES, MIN_PROTOCOL_VERSION, NeedsEntrySchema, NeedsGroupEntrySchema, ORCH_CAPABILITIES, OrchRole, POLICY_BY_ACTION, PROTOCOL_VERSION, PayloadOmittedReason, RegisterableTriggerType, SANDBOX_DEFAULT_VARS, SCHEMA_VERSION, ScalerBackendType, SourceProvider, SourceSubtype, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TRIGGER_EVENT_META, TRIGGER_EVENT_TYPES, WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookRelayResult, WsRateLimiter, accessLogFilterSchema, accessLogItemSchema, accessLogWarmSqlCase, ackSchema, activityCursorSchema, activityFilterSchema, activityRowSchema, actorPrincipalSchema, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentLogChunkSchema, agentMetricsSchema, agentRegisterSchema, agentStatusSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, agentTypeLabel, apiKeyActorSchema, auditLogColdDays, auditLogWarmDays, auditLogWarmSqlCase, authFailureSchema, authRequestSchema, authSuccessSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, browserAuthFailureSchema, browserAuthRefreshSchema, browserAuthRequestSchema, browserAuthSuccessSchema, browserErrorSchema, browserEventLogPayloadChunkSchema, browserEventLogPayloadFetchSchema, browserGapSchema, browserJobContextSchema, browserJobNewSchema, browserJobStatusSchema, browserLogLinesSchema, browserLogStreamTerminatedReason, browserLogStreamTerminatedSchema, browserLogSubscribeSchema, browserLogUnsubscribeSchema, browserPingSchema, browserPongSchema, browserRunEventSchema, browserRunNewSchema, browserRunStatusSchema, browserStatusSubscribeSchema, browserStatusUnsubscribeSchema, browserStepStatusSchema, browserToPlatformMessageSchema, cacheStatsSchema, configAckSchema, createTraceEntry, createWorkflowBundleConfig, createWorkflowDecision, dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardJobDetailSchema, dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, decodeActivityCursor, deriveOsArchLabels, encodeActivityCursor, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, errorSchema, eventEmitResponseSchema, eventEmitSchema, eventLogListItemSchema, executionEventSchema, executionStatusSchema, flattenActor, fnv1a32, getAccessLogColdDays, getAccessLogWarmDays, getAuditLogColdDays, getAuditLogWarmDays, getSecretAuditLogColdDays, getSecretAuditLogWarmDays, gitAuthSchema, hasOrchCapability, heartbeatSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, hostLabel, identityLinkItemSchema, identityLinkListResponseSchema, isLockDynamicJobFn, isLockInlineValue, isLockStaticJob, isTerminal, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobContextMessageSchema, jobDispatchSchema, jobProgressSchema, jobRerouteAckSchema, jobRerouteSchema, jobStatusForwardSchema, jobStatusSchema, joinRequestSchema, joinResponseSchema, logChunkSchema, logPullOrchToPlatformSchema, logPullPlatformToOrchSchema, manualScheduleRequestSchema, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchScopePattern, matchWorkflowTriggers, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, mergeAutoLabels, minAccessLogWarmDays, minAuditLogWarmDays, minSecretAuditLogWarmDays, nackSchema, normalizeRunsOn, observeCompleteSchema, observeLogSchema, observeStatusSchema, observeStepSchema, observeSubscribeSchema, orchCapabilitiesSchema, orchMetricsSchema, orchestratorToAgentMessageSchema, orchestratorToPlatformMessageSchema, orgMemberSchema, parseActor, parseMemoryString, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerDiscoverSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerToPeerMessageSchema, peerUpdateSchema, platformOperatorActorSchema, platformToBrowserMessageSchema, platformToOrchestratorMessageSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema, registerAckSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, resolveRoleLabels, resolveRunIdSugar, resolveSecretsForEnvironment, resourceRequestNestedSchema, resourceSpecSchema, runCancelRequestSchema, runEventMessageSchema, runEventSchema, runLineageResponseSchema, runRerunRequestSchema, scalerLabel, secretAuditLogColdDays, secretAuditLogWarmDays, secretAuditLogWarmSqlCase, serviceAccountActorSchema, shouldRecordAccess, shouldRecordSecretResolve, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema, staleCheckrunCleanupSchema, stateReplaySchema, stepStatusForwardSchema, stringifyActor, stripScopePrefix, systemActorSchema, testCancelResponseSchema, testCancelSchema, testEventSchema, testTriggerResponseSchema, testTriggerSchema, transition, trustPolicyResponseSchema, trustPolicyUpdateSchema, userActorSchema, validateNoReservedLabels, validateResourceRequest, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema };

package/dist/metrics/catalog-policy.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Hand-maintained label-value policy on top of the auto-generated
+ * `MetricLabels` / `MetricKind` allow-list in
+ * `./metric-catalog.generated.ts`. Consumed by the Platform's
+ * orchestrator-metrics filter (`packages/platform/src/ws/metrics-filter.ts`)
+ * to harden the WS `orch.metrics` push path against pollution of the
+ * monitoring system.
+ *
+ * Three layers compose:
+ *
+ *   1. `MetricNames` (auto) — every catalog metric name.
+ *   2. `MetricLabels` (auto) — allow-list of label KEYS per metric.
+ *   3. `METRIC_LABEL_POLICY` (here) — value constraints per (metric, key):
+ *      either a closed enum (`values`) or a cardinality cap
+ *      (`maxUniqueValues`). Labels without a policy entry pass through
+ *      unconstrained — they were already on the auto allow-list, so
+ *      the producer guarantees the value shape.
+ *
+ * Browser-safe: pure constants, no Node imports.
+ */
+import { type MetricName } from './metric-catalog.generated.js';
+/**
+ * Per-label policy: enum-constrained values OR a cardinality cap.
+ */
+export interface LabelPolicy {
+    /** Closed enum of acceptable label values. */
+    values?: readonly string[];
+    /**
+     * Cap on distinct values per (orgId, routingKey, metric, labelKey)
+     * tracked by the Platform-side cardinality tracker. Values beyond the
+     * cap collapse to the literal `__overflow__` — total counts are
+     * preserved, dimensionality is bounded.
+     */
+    maxUniqueValues?: number;
+}
+/** Literal value substituted for cap-exceeded label values. */
+export declare const OVERFLOW_LABEL_VALUE = "__overflow__";
+/**
+ * Set of catalog metric names the orchestrator is allowed to push over
+ * `orch.metrics`. Derived from `MetricService` so the membership stays
+ * in lock-step with codegen: orchestrator owns its own `kici_orch_*`,
+ * `kici_cross_source_*`, and `kici_universal_git_*` metrics, plus
+ * `kici_agent_*` metrics forwarded by `AgentMetricsAggregator`. Every
+ * `kici_platform_*` / `kici_org_*` / `kici_plan_*` / `kici_valkey_*` /
+ * `kici_webhook*` / `kici_ws_*` / `kici_build_*` / `kici_cache_*` /
+ * `kici_orgs_*` series is Platform-emitted locally and would be a
+ * tenancy violation if accepted from the wire.
+ *
+ * The synthetic `runtime` service covers the Node.js runtime metrics
+ * (`nodejs.*` / `v8js.*`) the orchestrator emits via
+ * `RuntimeNodeInstrumentation`. They describe the orchestrator process,
+ * so they are valid push payloads alongside `kici_orch_*`.
+ */
+export declare const ORCH_PUSHED_METRIC_NAMES: ReadonlySet<MetricName>;
+/**
+ * Per-metric, per-label value policy. Missing entries (or missing label
+ * keys within an entry) mean "no value-level constraint" — the label key
+ * still has to appear in the auto-generated `MetricLabels[name]` allow
+ * list to make it past the filter.
+ *
+ * User-controlled labels (the three flagged below) get a numeric cap
+ * instead of an enum. Anything past the cap collapses to
+ * `OVERFLOW_LABEL_VALUE` so dashboards keep their counts but cannot be
+ * inflated past N+1 distinct series.
+ */
+export declare const METRIC_LABEL_POLICY: Partial<Record<MetricName, Partial<Record<string, LabelPolicy>>>>;
+//# sourceMappingURL=catalog-policy.d.ts.map

package/dist/metrics/catalog-policy.js

@@ -0,0 +1,246 @@
+import "../chunk-gOLHoazu.js";
+import { MetricNames, MetricService } from "./metric-catalog.generated.js";
+//#region src/metrics/catalog-policy.ts
+/**
+* Hand-maintained label-value policy on top of the auto-generated
+* `MetricLabels` / `MetricKind` allow-list in
+* `./metric-catalog.generated.ts`. Consumed by the Platform's
+* orchestrator-metrics filter (`packages/platform/src/ws/metrics-filter.ts`)
+* to harden the WS `orch.metrics` push path against pollution of the
+* monitoring system.
+*
+* Three layers compose:
+*
+*   1. `MetricNames` (auto) — every catalog metric name.
+*   2. `MetricLabels` (auto) — allow-list of label KEYS per metric.
+*   3. `METRIC_LABEL_POLICY` (here) — value constraints per (metric, key):
+*      either a closed enum (`values`) or a cardinality cap
+*      (`maxUniqueValues`). Labels without a policy entry pass through
+*      unconstrained — they were already on the auto allow-list, so
+*      the producer guarantees the value shape.
+*
+* Browser-safe: pure constants, no Node imports.
+*/
+/** Literal value substituted for cap-exceeded label values. */
+const OVERFLOW_LABEL_VALUE = "__overflow__";
+/**
+* Set of catalog metric names the orchestrator is allowed to push over
+* `orch.metrics`. Derived from `MetricService` so the membership stays
+* in lock-step with codegen: orchestrator owns its own `kici_orch_*`,
+* `kici_cross_source_*`, and `kici_universal_git_*` metrics, plus
+* `kici_agent_*` metrics forwarded by `AgentMetricsAggregator`. Every
+* `kici_platform_*` / `kici_org_*` / `kici_plan_*` / `kici_valkey_*` /
+* `kici_webhook*` / `kici_ws_*` / `kici_build_*` / `kici_cache_*` /
+* `kici_orgs_*` series is Platform-emitted locally and would be a
+* tenancy violation if accepted from the wire.
+*
+* The synthetic `runtime` service covers the Node.js runtime metrics
+* (`nodejs.*` / `v8js.*`) the orchestrator emits via
+* `RuntimeNodeInstrumentation`. They describe the orchestrator process,
+* so they are valid push payloads alongside `kici_orch_*`.
+*/
+const ORCH_PUSHED_METRIC_NAMES = new Set(Object.entries(MetricService).filter(([, svc]) => svc === "orchestrator" || svc === "agent" || svc === "runtime").map(([key]) => MetricNames[key]));
+/** Closed enum of the four scaler-backend label values an agent can carry. */
+const AGENT_SCALER_VALUES = [
+	"stateful",
+	"container",
+	"firecracker",
+	"bare-metal"
+];
+/**
+* Closed enum of scaler values the orchestrator's own resource-usage
+* gauges emit. `__global__` is the orchestrator-wide rollup row; the
+* other four match `AGENT_SCALER_VALUES`.
+*/
+const ORCH_SCALER_VALUES = ["__global__", ...AGENT_SCALER_VALUES];
+/** Closed enum of the five scheduled jobs the orchestrator runs (mirrors `OrchestratorScheduledJobName`). */
+const ORCH_JOB_VALUES = [
+	"cleanup",
+	"orphan-secret-cleanup",
+	"token-cleanup",
+	"cold-store-archive",
+	"cold-store-purge"
+];
+/**
+* Per-metric, per-label value policy. Missing entries (or missing label
+* keys within an entry) mean "no value-level constraint" — the label key
+* still has to appear in the auto-generated `MetricLabels[name]` allow
+* list to make it past the filter.
+*
+* User-controlled labels (the three flagged below) get a numeric cap
+* instead of an enum. Anything past the cap collapses to
+* `OVERFLOW_LABEL_VALUE` so dashboards keep their counts but cannot be
+* inflated past N+1 distinct series.
+*/
+const METRIC_LABEL_POLICY = {
+	kici_orch_dispatch_queue_depth: { status: { values: ["pending", "dispatched"] } },
+	kici_orch_dispatch_queue_depth_by_label: {
+		status: { values: ["pending"] },
+		label: { maxUniqueValues: 200 }
+	},
+	kici_orch_webhooks_received_total: {
+		source: { values: [
+			"relay",
+			"pipeline",
+			"generic",
+			"direct"
+		] },
+		event: { maxUniqueValues: 50 }
+	},
+	kici_orch_webhooks_processed_total: { result: { values: [
+		"matched",
+		"skipped",
+		"error",
+		"handled",
+		"dispatched"
+	] } },
+	kici_orch_executions_total: { status: { values: [
+		"running",
+		"success",
+		"failed",
+		"cancelled"
+	] } },
+	kici_orch_steps_total: { status: { values: [
+		"running",
+		"success",
+		"failed",
+		"skipped"
+	] } },
+	kici_orch_github_check_run_total: { operation: { values: [
+		"create",
+		"update",
+		"stale_cleanup"
+	] } },
+	kici_orch_scaler_config_reloads_total: { result: { values: [
+		"attempted",
+		"success",
+		"failed"
+	] } },
+	kici_orch_config_reload_total: {
+		result: { values: [
+			"attempted",
+			"success",
+			"failed"
+		] },
+		source: { values: [
+			"sighup",
+			"http",
+			"cluster",
+			"cli"
+		] }
+	},
+	kici_orch_scaler_cpus_used: {
+		scaler: { values: ORCH_SCALER_VALUES },
+		machinePool: { maxUniqueValues: 50 }
+	},
+	kici_orch_scaler_memory_bytes_used: {
+		scaler: { values: ORCH_SCALER_VALUES },
+		machinePool: { maxUniqueValues: 50 }
+	},
+	kici_orch_install_secrets_decisions_total: {
+		decision: { values: ["pass", "reject"] },
+		reason: { values: [
+			"ok",
+			"malformed_ref",
+			"invalid_url_scheme",
+			"missing_env_store",
+			"missing_secret_resolver",
+			"env_not_found",
+			"protection_rule_block",
+			"missing_token",
+			"missing_install_env"
+		] }
+	},
+	kici_orch_install_secrets_npm_registry_used_total: {
+		channel: { values: ["registries", "install_env"] },
+		provider: { values: ["static"] },
+		scope: { maxUniqueValues: 100 }
+	},
+	kici_orch_install_secrets_contributor_stripped_total: { trust_tier: { values: ["unknown", "known"] } },
+	kici_orch_install_secrets_token_resolution_duration_seconds: { environment: { maxUniqueValues: 50 } },
+	kici_cross_source_errors_total: { reason: { values: ["clone_token", "bundle_missing"] } },
+	kici_universal_git_registration_errors_total: { reason: { values: [
+		"invalid_config",
+		"bundle_build",
+		"registration"
+	] } },
+	kici_orch_trust_match_refused_no_id_total: { reason: { values: [
+		"event_missing",
+		"link_missing",
+		"id_mismatch"
+	] } },
+	kici_orch_job_runs_total: {
+		job: { values: ORCH_JOB_VALUES },
+		result: { values: ["success", "failure"] }
+	},
+	kici_orch_job_duration_seconds: { job: { values: ORCH_JOB_VALUES } },
+	kici_orch_job_last_success_timestamp_seconds: { job: { values: ORCH_JOB_VALUES } },
+	kici_orch_job_last_failure_timestamp_seconds: { job: { values: ORCH_JOB_VALUES } },
+	kici_orch_job_consecutive_failures: { job: { values: ORCH_JOB_VALUES } },
+	kici_agent_jobs_total: {
+		status: { values: [
+			"success",
+			"failed",
+			"cancelled"
+		] },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	kici_agent_jobs_active: { scaler: { values: AGENT_SCALER_VALUES } },
+	kici_agent_steps_total: {
+		status: { values: [
+			"success",
+			"failed",
+			"skipped"
+		] },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	kici_agent_step_duration_seconds: { scaler: { values: AGENT_SCALER_VALUES } },
+	kici_agent_clone_duration_seconds: { scaler: { values: AGENT_SCALER_VALUES } },
+	kici_agent_log_bytes_total: { scaler: { values: AGENT_SCALER_VALUES } },
+	kici_agent_log_backpressure_events_total: {
+		mode: { values: ["pause", "drop"] },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	kici_agent_log_lines_dropped_total: { scaler: { values: AGENT_SCALER_VALUES } },
+	kici_agent_log_backpressure_active: {
+		mode: { values: ["pause", "drop"] },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	kici_agent_connection_status: { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.delay.max": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.delay.mean": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.delay.min": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.delay.p50": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.delay.p90": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.delay.p99": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.delay.stddev": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.utilization": { scaler: { values: AGENT_SCALER_VALUES } },
+	"nodejs.eventloop.time": {
+		"nodejs.eventloop.state": { maxUniqueValues: 4 },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	"v8js.gc.duration": {
+		"v8js.gc.type": { maxUniqueValues: 6 },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	"v8js.memory.heap.limit": {
+		"v8js.heap.space.name": { maxUniqueValues: 20 },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	"v8js.memory.heap.used": {
+		"v8js.heap.space.name": { maxUniqueValues: 20 },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	"v8js.memory.heap.space.available_size": {
+		"v8js.heap.space.name": { maxUniqueValues: 20 },
+		scaler: { values: AGENT_SCALER_VALUES }
+	},
+	"v8js.memory.heap.space.physical_size": {
+		"v8js.heap.space.name": { maxUniqueValues: 20 },
+		scaler: { values: AGENT_SCALER_VALUES }
+	}
+};
+//#endregion
+export { METRIC_LABEL_POLICY, ORCH_PUSHED_METRIC_NAMES, OVERFLOW_LABEL_VALUE };
+
+//# sourceMappingURL=catalog-policy.js.map