@kici-dev/engine 0.1.3 → 0.1.6

package/dist/protocol/messages/platform-orchestrator.d.ts

@@ -177,7 +177,21 @@ export declare const staleCheckrunCleanupSchema: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type StaleCheckrunCleanup = z.infer<typeof staleCheckrunCleanupSchema>;
-/** Periodic OTel metrics push from orchestrator to Platform for centralized observability. */
+/**
+ * Periodic OTel metrics push from orchestrator to Platform for centralized observability.
+ *
+ * Schema bounds are the first line of defence against pollution of the
+ * Platform's monitoring system: a malformed or hostile push fails Zod
+ * parse at the WS edge and never reaches the aggregator or the Mimir
+ * relay. The content-level allow-list (catalog) is enforced one step
+ * deeper — see `packages/platform/src/ws/metrics-filter.ts`.
+ *
+ * Caps:
+ * - 2000 metric data points per push (one orch ships ~60 today)
+ * - 128-char metric name, 64-char label key, 256-char label value
+ * - 15 labels per series (KiCI metrics carry ~5 today)
+ * - 30 explicit histogram buckets (largest histogram has 9 boundaries)
+ */
 export declare const orchMetricsSchema: z.ZodObject<{
     type: z.ZodLiteral<"orch.metrics">;
     messageId: z.ZodString;
@@ -255,6 +269,50 @@ export declare const cacheStatsSchema: z.ZodObject<{
     hit: z.ZodBoolean;
 }, z.core.$strip>;
 export type CacheStats = z.infer<typeof cacheStatsSchema>;
+/**
+ * Runtime broadcast of an updated dashboard-write policy. Carries the
+ * orch's full capabilities object (same shape as `orchCapabilitiesSchema`
+ * via `auth.request`) so Platform's per-org cache can be replaced
+ * wholesale rather than merged. Emitted by the orch whenever an
+ * operator flips a switch via `kici-admin org-settings dashboard-writes`;
+ * Platform receives it, updates its cache, and re-broadcasts the
+ * relevant subset to any connected dashboard SPA sessions.
+ */
+export declare const orchCapabilitiesUpdateSchema: z.ZodObject<{
+    type: z.ZodLiteral<"orch.capabilities.update">;
+    capabilities: z.ZodObject<{
+        orchRole: z.ZodOptional<z.ZodEnum<{
+            coordinator: "coordinator";
+            worker: "worker";
+        }>>;
+        dashboardWrites: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+            "secrets.set": "secrets.set";
+            "secrets.delete": "secrets.delete";
+            "secrets.scope.create": "secrets.scope.create";
+            "secrets.scope.rename": "secrets.scope.rename";
+            "secrets.scope.delete": "secrets.scope.delete";
+            "variables.set": "variables.set";
+            "variables.delete": "variables.delete";
+            "environments.create": "environments.create";
+            "environments.update": "environments.update";
+            "environments.delete": "environments.delete";
+            "environments.bindings.set": "environments.bindings.set";
+            "environments.source_overrides.set": "environments.source_overrides.set";
+            "environments.source_overrides.delete": "environments.source_overrides.delete";
+            "held_runs.approve": "held_runs.approve";
+            "held_runs.reject": "held_runs.reject";
+            "event_dlq.retry": "event_dlq.retry";
+            "event_dlq.discard": "event_dlq.discard";
+            "registration.disable": "registration.disable";
+            "registration.delete": "registration.delete";
+            "global_workflows.update": "global_workflows.update";
+            "backends.sync": "backends.sync";
+            "backends.sync_one": "backends.sync_one";
+            "backends.test": "backends.test";
+        }> & z.core.$partial, z.ZodBoolean>>;
+    }, z.core.$loose>;
+}, z.core.$strip>;
+export type OrchCapabilitiesUpdate = z.infer<typeof orchCapabilitiesUpdateSchema>;
 /** All messages that flow from Platform to Orchestrator.
  *
  * The single-frame `webhookRelaySchema` is intentionally NOT a member of this
@@ -321,7 +379,10 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"source.register.ack">;
     messageId: z.ZodString;
-    accepted: z.ZodArray<z.ZodString>;
+    accepted: z.ZodArray<z.ZodObject<{
+        routingKey: z.ZodString;
+        webhookUrl: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
     rejected: z.ZodArray<z.ZodObject<{
         routingKey: z.ZodString;
         reason: z.ZodString;
@@ -1424,6 +1485,98 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     orgId: z.ZodString;
     deliveryId: z.ZodString;
     routingKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.list">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    limit: z.ZodOptional<z.ZodNumber>;
+    before: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.count">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.retry">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    eventId: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"dashboard.event-dlq.discard">;
+    requestId: z.ZodString;
+    actor: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"user">;
+        sub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"api_key">;
+        keyId: z.ZodString;
+        ownerSub: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"service_account">;
+        id: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"platform_operator">;
+        sub: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"system">;
+        component: z.ZodString;
+    }, z.core.$strip>], "type">;
+    orgId: z.ZodString;
+    eventId: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"dashboard.global-workflows.get">;
     requestId: z.ZodString;
@@ -1510,6 +1663,11 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
     }>>;
     actorId: z.ZodOptional<z.ZodString>;
     action: z.ZodOptional<z.ZodEnum<{
+        "event_dlq.retry": "event_dlq.retry";
+        "event_dlq.discard": "event_dlq.discard";
+        "registration.disable": "registration.disable";
+        "registration.delete": "registration.delete";
+        "global_workflows.update": "global_workflows.update";
         "run.detail.read": "run.detail.read";
         "run.payload.read": "run.payload.read";
         "run.orch_logs.read": "run.orch_logs.read";
@@ -1546,8 +1704,6 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "held_run.approve": "held_run.approve";
         "held_run.reject": "held_run.reject";
         "registration.list.read": "registration.list.read";
-        "registration.disable": "registration.disable";
-        "registration.delete": "registration.delete";
         "diagnostics.read": "diagnostics.read";
         "scaler.capacity.read": "scaler.capacity.read";
         "scaler.agents.read": "scaler.agents.read";
@@ -1557,12 +1713,12 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         "backend.sync.one": "backend.sync.one";
         "backend.test": "backend.test";
         "global_workflows.get.read": "global_workflows.get.read";
-        "global_workflows.update": "global_workflows.update";
+        "org_settings.dashboard_write_policy.update": "org_settings.dashboard_write_policy.update";
+        "cluster_name.update": "cluster_name.update";
         "access_log.list.read": "access_log.list.read";
         "event_dlq.list.read": "event_dlq.list.read";
-        "event_dlq.retry": "event_dlq.retry";
-        "event_dlq.discard": "event_dlq.discard";
         archive_chunk: "archive_chunk";
+        purge_chunk: "purge_chunk";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
         platform_proxy: "platform_proxy";
@@ -1590,6 +1746,8 @@ export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnio
         held_run: "held_run";
         access_log: "access_log";
         event_dlq: "event_dlq";
+        org_settings: "org_settings";
+        cluster_meta: "cluster_meta";
     }>>;
     targetId: z.ZodOptional<z.ZodString>;
     fromTimestamp: z.ZodOptional<z.ZodString>;
@@ -1751,6 +1909,39 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     timestamp: z.ZodNumber;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"orch.capabilities.update">;
+    capabilities: z.ZodObject<{
+        orchRole: z.ZodOptional<z.ZodEnum<{
+            coordinator: "coordinator";
+            worker: "worker";
+        }>>;
+        dashboardWrites: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+            "secrets.set": "secrets.set";
+            "secrets.delete": "secrets.delete";
+            "secrets.scope.create": "secrets.scope.create";
+            "secrets.scope.rename": "secrets.scope.rename";
+            "secrets.scope.delete": "secrets.scope.delete";
+            "variables.set": "variables.set";
+            "variables.delete": "variables.delete";
+            "environments.create": "environments.create";
+            "environments.update": "environments.update";
+            "environments.delete": "environments.delete";
+            "environments.bindings.set": "environments.bindings.set";
+            "environments.source_overrides.set": "environments.source_overrides.set";
+            "environments.source_overrides.delete": "environments.source_overrides.delete";
+            "held_runs.approve": "held_runs.approve";
+            "held_runs.reject": "held_runs.reject";
+            "event_dlq.retry": "event_dlq.retry";
+            "event_dlq.discard": "event_dlq.discard";
+            "registration.disable": "registration.disable";
+            "registration.delete": "registration.delete";
+            "global_workflows.update": "global_workflows.update";
+            "backends.sync": "backends.sync";
+            "backends.sync_one": "backends.sync_one";
+            "backends.test": "backends.test";
+        }> & z.core.$partial, z.ZodBoolean>>;
+    }, z.core.$loose>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"source.register">;
     messageId: z.ZodString;
@@ -1771,6 +1962,8 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
         }>;
     }, z.core.$strip>>;
     instanceId: z.ZodOptional<z.ZodString>;
+    clusterName: z.ZodOptional<z.ZodString>;
+    clusterId: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     version: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodEnum<{
@@ -1801,6 +1994,31 @@ export declare const orchestratorToPlatformMessageSchema: z.ZodDiscriminatedUnio
             coordinator: "coordinator";
             worker: "worker";
         }>>;
+        dashboardWrites: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+            "secrets.set": "secrets.set";
+            "secrets.delete": "secrets.delete";
+            "secrets.scope.create": "secrets.scope.create";
+            "secrets.scope.rename": "secrets.scope.rename";
+            "secrets.scope.delete": "secrets.scope.delete";
+            "variables.set": "variables.set";
+            "variables.delete": "variables.delete";
+            "environments.create": "environments.create";
+            "environments.update": "environments.update";
+            "environments.delete": "environments.delete";
+            "environments.bindings.set": "environments.bindings.set";
+            "environments.source_overrides.set": "environments.source_overrides.set";
+            "environments.source_overrides.delete": "environments.source_overrides.delete";
+            "held_runs.approve": "held_runs.approve";
+            "held_runs.reject": "held_runs.reject";
+            "event_dlq.retry": "event_dlq.retry";
+            "event_dlq.discard": "event_dlq.discard";
+            "registration.disable": "registration.disable";
+            "registration.delete": "registration.delete";
+            "global_workflows.update": "global_workflows.update";
+            "backends.sync": "backends.sync";
+            "backends.sync_one": "backends.sync_one";
+            "backends.test": "backends.test";
+        }> & z.core.$partial, z.ZodBoolean>>;
     }, z.core.$loose>>;
 }, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"heartbeat">;

package/dist/protocol/messages/platform-orchestrator.js

@@ -1,12 +1,13 @@
 import "../../chunk-gOLHoazu.js";
 import { heartbeatSchema } from "./common.js";
+import { orchCapabilitiesSchema } from "./capabilities.js";
 import { authFailureSchema, authRequestSchema, authSuccessSchema } from "./auth.js";
 import { executionStatusSchema, jobStatusForwardSchema, stateReplaySchema, stepStatusForwardSchema } from "./execution-status.js";
 import { sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema } from "./source-registration.js";
 import { dashboardAccessLogListRequestSchema } from "./access-log.js";
 import { dashboardOrchLogsRequestSchema, jobContextMessageSchema, runEventMessageSchema } from "./run-events.js";
 import { globalWorkflowsGetRequestSchema, globalWorkflowsUpdateRequestSchema } from "./dashboard-global-workflows.js";
-import { backendGetRequestSchema, backendSyncRequestSchema, backendTestRequestSchema, backendsListRequestSchema, backendsSyncAllRequestSchema, dashboardDiagnosticsRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardPayloadRequestSchema, dashboardRunDetailRequestSchema, dashboardScalerAgentsRequestSchema, dashboardScalerCapacityRequestSchema, dashboardStepLogsRequestSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, manualScheduleRequestSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationsListRequestSchema, runCancelRequestSchema, runRerunRequestSchema } from "./dashboard.js";
+import { backendGetRequestSchema, backendSyncRequestSchema, backendTestRequestSchema, backendsListRequestSchema, backendsSyncAllRequestSchema, dashboardDiagnosticsRequestSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardPayloadRequestSchema, dashboardRunDetailRequestSchema, dashboardScalerAgentsRequestSchema, dashboardScalerCapacityRequestSchema, dashboardStepLogsRequestSchema, envBindingsListRequestSchema, envBindingsSetRequestSchema, envCreateRequestSchema, envDeleteRequestSchema, envGetRequestSchema, envHistoryRequestSchema, envListRequestSchema, envSecretDeleteRequestSchema, envSecretScopeCreateRequestSchema, envSecretScopeDeleteRequestSchema, envSecretScopeRenameRequestSchema, envSecretSetRequestSchema, envSecretsListRequestSchema, envSourceOverrideDeleteRequestSchema, envSourceOverrideSetRequestSchema, envSourceOverridesListRequestSchema, envUpdateRequestSchema, envVarDeleteRequestSchema, envVarSetRequestSchema, envVarsListRequestSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, manualScheduleRequestSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationsListRequestSchema, runCancelRequestSchema, runRerunRequestSchema } from "./dashboard.js";
 import { z } from "zod";
 //#region src/protocol/messages/platform-orchestrator.ts
 /** Trust policy update pushed from Platform to orchestrator when policy or identity links change. */
@@ -203,12 +204,26 @@ const staleCheckrunCleanupSchema = z.object({
 		jobNames: z.array(z.string())
 	}))
 });
-/** Periodic OTel metrics push from orchestrator to Platform for centralized observability. */
+/**
+* Periodic OTel metrics push from orchestrator to Platform for centralized observability.
+*
+* Schema bounds are the first line of defence against pollution of the
+* Platform's monitoring system: a malformed or hostile push fails Zod
+* parse at the WS edge and never reaches the aggregator or the Mimir
+* relay. The content-level allow-list (catalog) is enforced one step
+* deeper — see `packages/platform/src/ws/metrics-filter.ts`.
+*
+* Caps:
+* - 2000 metric data points per push (one orch ships ~60 today)
+* - 128-char metric name, 64-char label key, 256-char label value
+* - 15 labels per series (KiCI metrics carry ~5 today)
+* - 30 explicit histogram buckets (largest histogram has 9 boundaries)
+*/
 const orchMetricsSchema = z.object({
 	type: z.literal("orch.metrics"),
-	messageId: z.string(),
+	messageId: z.string().max(128),
 	metrics: z.array(z.object({
-		name: z.string(),
+		name: z.string().min(1).max(128),
 		type: z.enum([
 			"counter",
 			"histogram",
@@ -216,14 +231,14 @@ const orchMetricsSchema = z.object({
 			"upDownCounter"
 		]),
 		value: z.number().optional(),
-		labels: z.record(z.string(), z.string()).optional(),
+		labels: z.record(z.string().max(64), z.string().max(256)).refine((m) => Object.keys(m).length <= 15, { message: "metric carries more than 15 labels" }).optional(),
 		buckets: z.array(z.object({
 			le: z.number(),
 			count: z.number()
-		})).optional(),
+		})).max(30).optional(),
 		count: z.number().optional(),
 		sum: z.number().optional()
-	})),
+	})).max(2e3),
 	timestamp: z.number()
 });
 /**
@@ -279,6 +294,19 @@ const cacheStatsSchema = z.object({
 	cacheType: z.enum(["source", "dep"]),
 	hit: z.boolean()
 });
+/**
+* Runtime broadcast of an updated dashboard-write policy. Carries the
+* orch's full capabilities object (same shape as `orchCapabilitiesSchema`
+* via `auth.request`) so Platform's per-org cache can be replaced
+* wholesale rather than merged. Emitted by the orch whenever an
+* operator flips a switch via `kici-admin org-settings dashboard-writes`;
+* Platform receives it, updates its cache, and re-broadcasts the
+* relevant subset to any connected dashboard SPA sessions.
+*/
+const orchCapabilitiesUpdateSchema = z.object({
+	type: z.literal("orch.capabilities.update"),
+	capabilities: orchCapabilitiesSchema
+});
 /** All messages that flow from Platform to Orchestrator.
 *
 * The single-frame `webhookRelaySchema` is intentionally NOT a member of this
@@ -345,6 +373,10 @@ const platformToOrchestratorMessageSchema = z.discriminatedUnion("type", [
 	dashboardEventLogListRequestSchema,
 	dashboardEventLogDetailRequestSchema,
 	dashboardEventLogPayloadStreamRequestSchema,
+	dashboardEventDlqListRequestSchema,
+	dashboardEventDlqCountRequestSchema,
+	dashboardEventDlqRetryRequestSchema,
+	dashboardEventDlqDiscardRequestSchema,
 	globalWorkflowsGetRequestSchema,
 	globalWorkflowsUpdateRequestSchema,
 	dashboardAccessLogListRequestSchema
@@ -364,6 +396,7 @@ const orchestratorToPlatformMessageSchema = z.discriminatedUnion("type", [
 	stepStatusForwardSchema,
 	jobStatusForwardSchema,
 	stateReplaySchema,
+	orchCapabilitiesUpdateSchema,
 	sourceRegistrationSchema,
 	sourceDeregisterSchema,
 	cacheStatsSchema,
@@ -374,6 +407,6 @@ const orchestratorToPlatformMessageSchema = z.discriminatedUnion("type", [
 	orchMetricsSchema
 ]);
 //#endregion
-export { WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WebhookRelayResult, cacheStatsSchema, executionEventSchema, logChunkSchema, orchMetricsSchema, orchestratorToPlatformMessageSchema, peerDiscoverSchema, peerUpdateSchema, platformToOrchestratorMessageSchema, staleCheckrunCleanupSchema, trustPolicyUpdateSchema, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema };
+export { WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WebhookRelayResult, cacheStatsSchema, executionEventSchema, logChunkSchema, orchCapabilitiesUpdateSchema, orchMetricsSchema, orchestratorToPlatformMessageSchema, peerDiscoverSchema, peerUpdateSchema, platformToOrchestratorMessageSchema, staleCheckrunCleanupSchema, trustPolicyUpdateSchema, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema };
 
 //# sourceMappingURL=platform-orchestrator.js.map

package/dist/protocol/messages/source-registration.d.ts

@@ -57,6 +57,8 @@ export declare const sourceRegistrationSchema: z.ZodObject<{
         }>;
     }, z.core.$strip>>;
     instanceId: z.ZodOptional<z.ZodString>;
+    clusterName: z.ZodOptional<z.ZodString>;
+    clusterId: z.ZodOptional<z.ZodString>;
     address: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     version: z.ZodOptional<z.ZodString>;
     mode: z.ZodOptional<z.ZodEnum<{
@@ -68,11 +70,27 @@ export declare const sourceRegistrationSchema: z.ZodObject<{
     s3LogAccess: z.ZodOptional<z.ZodBoolean>;
     queueTimeoutMs: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
+/**
+ * One accepted source in a {@link sourceRegistrationAckSchema}. Carries the
+ * public webhook URL the Platform computed for this routing key so the
+ * orchestrator (which only knows its org *alias*, never the canonical org id)
+ * can surface it to the operator — e.g. `kici-admin source add` printing the
+ * URL to paste into a GitHub App. `webhookUrl` is null when the Platform has
+ * no public webhook base configured (`config.webhookPublicUrl` unset).
+ */
+export declare const acceptedSourceSchema: z.ZodObject<{
+    routingKey: z.ZodString;
+    webhookUrl: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type AcceptedSource = z.infer<typeof acceptedSourceSchema>;
 /** Platform acknowledgment of source registration. */
 export declare const sourceRegistrationAckSchema: z.ZodObject<{
     type: z.ZodLiteral<"source.register.ack">;
     messageId: z.ZodString;
-    accepted: z.ZodArray<z.ZodString>;
+    accepted: z.ZodArray<z.ZodObject<{
+        routingKey: z.ZodString;
+        webhookUrl: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
     rejected: z.ZodArray<z.ZodObject<{
         routingKey: z.ZodString;
         reason: z.ZodString;

package/dist/protocol/messages/source-registration.js

@@ -57,6 +57,27 @@ const sourceRegistrationSchema = z.object({
 	})),
 	/** Orchestrator cluster instance ID for peer correlation. */
 	instanceId: z.string().optional(),
+	/**
+	* Human-friendly cluster name resolved on orch boot (`cluster_meta.cluster_name`).
+	* Used by Platform to populate the per-orch dashboard URL segment
+	* (`/orgs/:cId/orchestrators/:clusterName/...`). Validation happens
+	* Platform-side via `clusterNameSchema`. Platform accepts N
+	* connected orchestrators per `(org_id, cluster_name)` — HA-cluster
+	* siblings share one cluster identity — and the dashboard listing
+	* dedupes by cluster name server-side.
+	*/
+	clusterName: z.string().optional(),
+	/**
+	* Orchestrator DB identifier (UUID, seeded by orch migration 001 in
+	* `cluster_meta` key `'cluster_id'`). Lets Platform distinguish two
+	* different orchestrator clusters that accidentally share the same
+	* `clusterName` in one org: every coord in an HA cluster shares the
+	* same orch DB and therefore the same `clusterId`, while two unrelated
+	* clusters carry distinct UUIDs. Optional — older orchestrators that
+	* haven't been redeployed yet won't publish it, in which case Platform
+	* skips the cross-cluster collision warn for that connection.
+	*/
+	clusterId: z.string().uuid().optional(),
 	/** Reachable address for peer-to-peer connections (from KICI_CLUSTER_ADDRESS env var). */
 	address: z.string().nullable().optional(),
 	/** Orchestrator version (e.g. "0.0.1"). Optional for backward compatibility with older orchestrators. */
@@ -74,11 +95,23 @@ const sourceRegistrationSchema = z.object({
 	/** Queue timeout in ms. Platform uses this (with margin) for safety-net GC of stale queued jobs. */
 	queueTimeoutMs: z.number().optional()
 });
+/**
+* One accepted source in a {@link sourceRegistrationAckSchema}. Carries the
+* public webhook URL the Platform computed for this routing key so the
+* orchestrator (which only knows its org *alias*, never the canonical org id)
+* can surface it to the operator — e.g. `kici-admin source add` printing the
+* URL to paste into a GitHub App. `webhookUrl` is null when the Platform has
+* no public webhook base configured (`config.webhookPublicUrl` unset).
+*/
+const acceptedSourceSchema = z.object({
+	routingKey: z.string(),
+	webhookUrl: z.string().nullable()
+});
 /** Platform acknowledgment of source registration. */
 const sourceRegistrationAckSchema = z.object({
 	type: z.literal("source.register.ack"),
 	messageId: z.string(),
-	accepted: z.array(z.string()),
+	accepted: z.array(acceptedSourceSchema),
 	rejected: z.array(z.object({
 		routingKey: z.string(),
 		reason: z.string()
@@ -104,6 +137,6 @@ const sourceDeregisterAckSchema = z.object({
 	removed: z.array(z.string())
 });
 //#endregion
-export { SourceProvider, SourceSubtype, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema };
+export { SourceProvider, SourceSubtype, acceptedSourceSchema, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema };
 
 //# sourceMappingURL=source-registration.js.map

package/dist/registration/registerable-trigger-type.d.ts

@@ -25,6 +25,7 @@ import { z } from 'zod';
  * Access values: RegisterableTriggerType.enum.kici_event, etc.
  */
 export declare const RegisterableTriggerType: z.ZodEnum<{
+    dispatch: "dispatch";
     status: "status";
     generic_webhook: "generic_webhook";
     pr: "pr";
@@ -34,7 +35,6 @@ export declare const RegisterableTriggerType: z.ZodEnum<{
     review: "review";
     review_comment: "review_comment";
     release: "release";
-    dispatch: "dispatch";
     create: "create";
     delete: "delete";
     workflow_run: "workflow_run";

package/dist/ws/close-codes.d.ts

@@ -23,6 +23,12 @@ export declare const WS_CLOSE_INTERNAL_ERROR = 4006;
 export declare const WS_CLOSE_AGENT_AUTH_FAILED = 4010;
 /** The connection was closed because the organization has reached its plan limit. */
 export declare const WS_CLOSE_PLAN_LIMIT = 4020;
+/**
+ * The orchestrator's reported `cluster_name` collides with another
+ * already-connected orchestrator in the same org. Operator must rename
+ * via `kici-admin cluster-name set <name>` before reconnecting.
+ */
+export declare const WS_CLOSE_CLUSTER_NAME_CONFLICT = 4011;
 /** The connection was closed because the requested run was not found. */
 export declare const WS_CLOSE_RUN_NOT_FOUND = 4030;
 //# sourceMappingURL=close-codes.d.ts.map

package/dist/ws/close-codes.js

@@ -25,9 +25,15 @@ const WS_CLOSE_INTERNAL_ERROR = 4006;
 const WS_CLOSE_AGENT_AUTH_FAILED = 4010;
 /** The connection was closed because the organization has reached its plan limit. */
 const WS_CLOSE_PLAN_LIMIT = 4020;
+/**
+* The orchestrator's reported `cluster_name` collides with another
+* already-connected orchestrator in the same org. Operator must rename
+* via `kici-admin cluster-name set <name>` before reconnecting.
+*/
+const WS_CLOSE_CLUSTER_NAME_CONFLICT = 4011;
 /** The connection was closed because the requested run was not found. */
 const WS_CLOSE_RUN_NOT_FOUND = 4030;
 //#endregion
-export { WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED };
+export { WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_RUN_NOT_FOUND, WS_CLOSE_UNAUTHORIZED };
 
 //# sourceMappingURL=close-codes.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/engine",
-  "version": "0.1.3",
+  "version": "0.1.6",
   "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
   "keywords": [
     "kici",
@@ -29,7 +29,6 @@
     "sbom.spdx.json"
   ],
   "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
     "access": "public"
   },
   "main": "dist/index.js",
@@ -51,9 +50,21 @@
       "import": "./dist/protocol/dashboard-global-workflows.js",
       "types": "./dist/protocol/dashboard-global-workflows.d.ts"
     },
+    "./protocol/dashboard-write-operations": {
+      "import": "./dist/protocol/dashboard-write-operations.js",
+      "types": "./dist/protocol/dashboard-write-operations.d.ts"
+    },
+    "./protocol/cluster-name": {
+      "import": "./dist/protocol/cluster-name.js",
+      "types": "./dist/protocol/cluster-name.d.ts"
+    },
     "./metrics/catalog": {
       "import": "./dist/metrics/metric-catalog.generated.js",
       "types": "./dist/metrics/metric-catalog.generated.d.ts"
+    },
+    "./metrics/catalog-policy": {
+      "import": "./dist/metrics/catalog-policy.js",
+      "types": "./dist/metrics/catalog-policy.d.ts"
     }
   },
   "dependencies": {

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/engine@0.1.3",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.3/ce5e8341-060d-4cea-b030-6d643b9e3e4b",
+  "name": "@kici-dev/engine@0.1.6",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.1.6/b89e3174-b4cd-4b4c-9a07-e0b491f3e36e",
   "creationInfo": {
-    "created": "2026-05-15T14:16:55Z",
+    "created": "2026-05-26T05:00:09Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -54,7 +54,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.1.3",
+      "versionInfo": "0.1.6",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -65,7 +65,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.3"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.1.6"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",