@kici-dev/engine 0.11.0 → 0.13.0

package/dist/audit/access-log-policy.d.ts

@@ -48,8 +48,8 @@ export interface AccessLogRateLimiter {
     permit(action: AccessLogAction, actorKey: string, perMinute: number): boolean;
 }
 /**
- * Policy table mirroring research-doc §2 verdicts (with the user's
- * §7 platform-operator override applied separately in `shouldRecordAccess`).
+ * Per-action recording policy (the platform-operator override is applied
+ * separately in `shouldRecordAccess`).
  *
  * Exhaustive over `AccessLogAction.options` — TypeScript catches additions.
  */

package/dist/audit/access-log-policy.js

@@ -32,8 +32,8 @@ const AccessLogPolicyKind = z.enum([
 	"rate_limit"
 ]);
 /**
-* Policy table mirroring research-doc §2 verdicts (with the user's
-* §7 platform-operator override applied separately in `shouldRecordAccess`).
+* Per-action recording policy (the platform-operator override is applied
+* separately in `shouldRecordAccess`).
 *
 * Exhaustive over `AccessLogAction.options` — TypeScript catches additions.
 */

package/dist/audit/activity.d.ts

@@ -2,8 +2,7 @@
  * Unified Activity row + filter schemas for the dashboard's federated
  * "Activity" view. Federates Platform `audit_log` (mutation events,
  * free-form target_type) with orchestrator `access_log` (reads + admin
- * mutations, strict-enum target_type) at the query layer — see plan
- * `~/.claude/plans/ui-audit-logs-page-sleepy-wave.md`.
+ * mutations, strict-enum target_type) at the query layer.
  *
  * The `source` discriminator on each row tells the UI whether to render
  * the audit_log or access_log column set. Fields unique to access_log

package/dist/audit/activity.js

@@ -7,8 +7,7 @@ import { z } from "zod";
 * Unified Activity row + filter schemas for the dashboard's federated
 * "Activity" view. Federates Platform `audit_log` (mutation events,
 * free-form target_type) with orchestrator `access_log` (reads + admin
-* mutations, strict-enum target_type) at the query layer — see plan
-* `~/.claude/plans/ui-audit-logs-page-sleepy-wave.md`.
+* mutations, strict-enum target_type) at the query layer.
 *
 * The `source` discriminator on each row tells the UI whether to render
 * the audit_log or access_log column set. Fields unique to access_log

package/dist/audit/retention-policy.d.ts

@@ -8,9 +8,7 @@
  * `./access-log-policy.ts`; both modules classify by the same action
  * dimension, just for different downstream decisions.
  *
- * The classification table came from research-doc §5
- *  and the user's
- * `## Decisions` section. Two override layers apply uniformly:
+ * Two override layers apply uniformly:
  *
  * 1. `outcome` is `denied` or `error` → retain 180d (forensic value).
  * 2. `actor.type === 'platform_operator'` → retain 365d

package/dist/audit/retention-policy.js

@@ -100,7 +100,7 @@ const FORENSIC_OUTCOME_DAYS = 180;
 const PLATFORM_OPERATOR_DAYS = 365;
 /**
 * Default warm TTL for action strings outside `AccessLogAction.options`. Hit
-* by E2E synthetic action names and would-be-future enum additions on a
+* by synthetic test action names and would-be-future enum additions on a
 * rolling deploy. Matches the conservative `180d` mutations bucket so
 * unknown rows are never archived sooner than a tenant-plane mutation.
 */

package/dist/context/hold-reason.d.ts

@@ -4,16 +4,14 @@
  * `minimumTrust`.
  *
  * Single source of truth for the sentence: the orchestrator's trust gate emits
- * it, the ci-security DB fixture seeds it, and the unit and E2E assertions
- * compare against it. One copy means a copy edit moves every site at once
- * (`.claude/rules/code-style.md` § "Enums over hardcoded strings").
+ * it, and test fixtures and assertions compare against it. One copy means a
+ * copy edit moves every site at once.
  *
  * `held_runs.reason` is a free-text column, so this is a function rather than
  * an enum: the sentence carries the context name, which is per-hold data.
  *
  * Carries no runtime import on purpose — this module reaches the browser
- * through the engine barrel, which must pull in no Node built-ins
- * (`.claude/rules/engine.md` § "Browser-safe barrel export"). The one import
+ * through the engine barrel, which must pull in no Node built-ins. The one import
  * below is type-only and is erased at compile time.
  */
 import type { TrustTier } from './types.js';

package/dist/index.d.ts

@@ -53,6 +53,7 @@ export * from './trigger/text-match.js';
 export * from './trigger/trigger-event-type.js';
 export * from './trigger/decision-trace.js';
 export * from './trigger/matcher.js';
+export * from './trigger/diff-range.js';
 export { getRepoGlobMatcher } from './trigger/compiled-matchers.js';
 export { REGEX_NEGATIVE_ASSERTION, isNegatedPattern, negatedPatternReason, } from './repo/pattern-negation.js';
 export * from './trigger/event-buckets.js';

package/dist/index.js

@@ -55,7 +55,8 @@ import { KNOWN_LINUX_CAPABILITIES, canonicalizeCapability, isKnownCapability } f
 import { compileSafeRegex, describeTextMatch, evaluateTextMatch, textMatchHasQuery } from "./trigger/text-match.js";
 import { REDACTED_TRACE_FIELD, TRACE_TEXT_MAX, TRACE_TRUNCATION_WORKFLOW_NAME, TraceCheck, TraceVerdict, appendChecks, createCommitMessageTraceEntry, createContentRequirementsTraceEntry, createDispatchFailureTraceEntry, createGlobalFilterTraceEntry, createTraceEntry, createTraceTruncationMarker, createWorkflowDecision, truncateDecisionsToByteBudget, truncateTraceText, utf8ByteLength } from "./trigger/decision-trace.js";
 import { getRepoGlobMatcher } from "./trigger/compiled-matchers.js";
-import { matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchTrigger, matchWorkflowTriggers } from "./trigger/matcher.js";
+import { diffRangeKindSchema, isDeferrableRange, isZeroSha, resolveDiffRange } from "./trigger/diff-range.js";
+import { DEFERRED_PATHS_SUMMARY_SUFFIX, UnavailablePathsTrace, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchTrigger, matchWorkflowTriggers } from "./trigger/matcher.js";
 import { TRIGGER_TYPE_TO_EVENT_TYPES, matchWorkflowsForEvent, prepareEventBuckets } from "./trigger/event-buckets.js";
 import { scheduleTriggerKey } from "./trigger/schedule-key.js";
 import { DispatchInputType, InputDescriptor, InputsDescriptorMapSchema } from "./inputs/descriptor.js";
@@ -95,4 +96,4 @@ import { ARTIFACT_INVALID_NAME_PREFIX, ARTIFACT_NAME_MAX_LENGTH, ArtifactNameSch
 import { PLAN_TYPES, PaidPlanType, PlanType, isPaidTier, planRank } from "./billing/plan-type.js";
 import { SUBSCRIPTION_EXISTS_CODE, StripeSubscriptionStatus, blocksNewCheckout } from "./billing/subscription-status.js";
 import { INFRA_ALERT_TYPES, InfraAlertSeverity, InfraAlertType, normalizeInfraAlertSeverity } from "./diagnostics/infra-alert.js";
-export { ACCESS_LOG_COLD_DAYS, ACCESS_LOG_WARM_DAYS, ACTOR_AGENT_SUFFIX, AGENT_API_REQUEST_TIMEOUT_MS, AGENT_CAPABILITIES, AGENT_FEATURE_LABELS, AGENT_FEATURE_LABEL_PREFIX, AGENT_REQUIRED_KICI_VARS, ALLOWED_SYSTEM_VARS, ARTIFACT_INVALID_NAME_PREFIX, ARTIFACT_NAME_MAX_LENGTH, AccessLogAction, AccessLogOutcome, AccessLogPolicyKind, AccessLogSource, AccessLogTargetType, ActivityFilterSource, ActivityRowSource, ActorType, AgentCapabilityFlag, AgentFailureCategory, AgentFeature, ApprovalDecision, ArtifactCompleteAckOutcome, ArtifactDownloadOutcome, ArtifactNameSchema, ArtifactRejectReason, ArtifactUploadOutcome, AttestationOrigin, BREAKING_FLOOR, CANONICAL_STATUSES, CAPABILITY_LABEL_PREFIX, CLUSTER_MEMBERSHIP_MAX_WORKERS, CONTAINER_BUILD_RUNTIME_LABEL, CONTEXTS_MAX, CacheOutcome, CacheRefScope, CacheRunEventType, CacheStepType, CheckMode, CheckRunConclusion, CheckStepOutcome, CiTrustLevel, ConcurrencyStrategy, ConfigPathsSchema, ContextDeleteErrorCode, ContextGateRejectReason, ContextType, DASHBOARD_REQUEST_TYPES, DASHBOARD_REQUEST_TYPE_SET, DEAD_ORCH_FAILURE_REASON, DEFAULT_APPROVAL_EXPIRY_HOURS, DEFAULT_APPROVAL_EXPIRY_SECONDS, DEFAULT_CONCURRENCY_STRATEGY, DEFAULT_HOLD_EXPIRY_SECONDS, DEVELOPER_OPERATIONS, DashboardResponseErrorCode, DeploymentContainerRuntimeSchema, DeploymentIdentitySchema, DeploymentModeSchema, DispatchInputError, DispatchInputType, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutCause, FanoutError, FleetHostDisposition, ForkPolicy, GLOBAL_APPROVAL_MIN_READER, GLOBAL_EVAL_SKIPS_RESULT_AWARE_LABEL, HEARTBEAT_CLOSE_MS, HEARTBEAT_DEGRADED_MS, HEARTBEAT_FRESH_MS, HEARTBEAT_STALE_THRESHOLD_SECONDS, HEARTBEAT_UNHEALTHY_MARK_MS, HOST_LABEL_PREFIX, HeldRunQueueType, HeldRunStatus, HoldScope, HoldType, HostInventoryEntry, HostPropertyValue, HostTargetSelector, HostTargetValue, ID_TOKEN_CLAIM_NAMES, INFRA_ALERT_TYPES, INIT_LABEL, INIT_RUNNER_ROLE_LABEL, INSTALL_JOB_ID_PREFIX, INTERNAL_EVENT_NAME_PREFIX, InfraAlertSeverity, InfraAlertType, InitFailureCategory, InputDescriptor, InputsDescriptorMapSchema, InventoryHostStatus, InventoryLifecycleClass, InventorySelectorSchema, JOB_IMAGE_RUNTIME_LABEL, JobKind, JobRejectReason, KICI_AGENT_ENV_PREFIX, KICI_EVENT_NAME_PREFIX, KNOWN_LINUX_CAPABILITIES, KNOWN_ROLES, LEGACY_STATUS_ALIASES, LabelMatcher, LockFileParseError, LogStream, MAX_APPROVAL_EXPIRY_HOURS, MAX_APPROVAL_EXPIRY_SECONDS, MAX_FANOUT_JOBS, MAX_JOBS_PER_RUN, MAX_MATRIX_MATERIALIZATION, MIN_APPROVAL_EXPIRY_SECONDS, MIN_PROTOCOL_VERSION, MatrixShapeError, MinimumTrustSchema, NACK_EXEMPT_MESSAGE_TYPES, NeedsEntrySchema, NeedsGroupEntrySchema, NeedsRunOn, NeedsWhen, ORCH_AGENT_CAPABILITIES, ORCH_CAPABILITIES, ORCH_TO_PLATFORM_RECOGNIZED_TYPES, OWN_INGRESS_MODES, OnUnreachableMode, OrchLogPhase, OrchRole, OrchestratorMode, PING_EVENT_TYPE, PLAN_TYPES, PLATFORM_CAPABILITIES, PLATFORM_CONNECTED_MODES, PLATFORM_TAINT_LABELS, PLATFORM_TO_ORCH_RECOGNIZED_TYPES, POLICY_BY_ACTION, PRIVILEGED_ROOT_LABEL, PROTOCOL_VERSION, PULL_REQUEST_FAMILY_TRIGGER_EVENTS, PaidPlanType, PatKind, PayloadOmittedReason, PlanType, REDACTED_TRACE_FIELD, REGEX_NEGATIVE_ASSERTION, RELAY_INGRESS_MODES, REPO_IDENTIFIER_MAX, RUNS_ON_LABELS_MAX, RUNTIME_LABEL_PREFIX, RegisterableTriggerType, RunFailureClass, RunsOnPick, RuntimeFact, SANDBOX_DEFAULT_VARS, SANDBOX_NETWORK_MODES, SCALER_EVENT_NAMES, SCHEMA_VERSION, SCOPE_NAME_MAX_LENGTH, SCOPE_SEGMENT_PATTERN, SECONDS_PER_HOUR, SECRET_KEY_MAX_LENGTH, SECRET_KEY_PATTERN, SECURITY_HOLD_JOB_IDS, SECURITY_HOLD_JOB_LABELS, SELF_REPORTED_LABEL_PREFIXES, SSH_TRANSPORT_CAPABILITY, STATE_REPLAY_MAX_RUNS, STATUS_EPOCH_MAX, STATUS_FAILURE_CLASS, STATUS_FREE_TEXT_MAX, STATUS_ID_MAX, STATUS_PRECEDENCE, SUBSCRIBABLE_WEBHOOK_EVENT_TYPES, SUBSCRIPTION_EXISTS_CODE, ScaleDownReason, ScalerArch, ScalerBackendType, ScalerEventType, ScalerOs, ScalerScaleDownPayload, ScalerScaleUpPayload, ScopeNameError, SecretKeyError, SetupStepType, SourceOrigin, SourceProvider, SourceSubtype, StatusFailureClass, StepApprovalOutcome, StepConcurrencyKind, StripeSubscriptionStatus, SubscribableWebhookEventType, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TERMINAL_STEP_STATES, TRACE_TEXT_MAX, TRACE_TRUNCATION_WORKFLOW_NAME, TRIGGER_EVENT_META, TRIGGER_EVENT_TYPES, TRIGGER_TYPE_TO_EVENT_TYPES, TRUSTED_ENV_SCRUB_EXACT, TestRelayType, TimeoutReason, TraceCheck, TraceVerdict, TriggerSource, TrustTierSchema, UNRESOLVED_CLAIM, UnsupportedDispatchInputError, VariantKind, WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WORKFLOW_MODIFICATION_JOB_ID, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_REBALANCE, WS_CLOSE_SUPERSEDED_BY_RECONNECT, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookEventType, WebhookRelayResult, WsRateLimiter, accessLogFilterSchema, accessLogItemSchema, accessLogWarmSqlCase, ackSchema, activityCursorSchema, activityFilterSchema, activityRowSchema, actorPrincipalSchema, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentCapabilitiesSchema, agentDiagnosticsConnectionSchema, agentDiagnosticsSchema, agentFeatureLabel, agentJobResultSchema, agentLabelOf, agentLogChunkSchema, agentMetricsSchema, agentOrchestratorSummarySchema, agentOrgSummarySchema, agentRegisterSchema, agentRunListItemSchema, agentRunResultSchema, agentSecretScopeSchema, agentStatusSchema, agentStepLogsSchema, agentStepResultSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, agentTypeLabel, agentWorkflowSummarySchema, apiKeyActorSchema, appendChecks, applyIncludeExclude, approvalExpiryHoursOf, approvalExpirySecondsOf, approvalRequirementSchema, approvalTimeoutSecondsSchema, approveRunToolSchema, approverClauseSchema, artifactInvalidNameError, artifactListItemSchema, artifactsDownloadRequestSchema, artifactsDownloadResponseSchema, artifactsUploadCompleteAckSchema, artifactsUploadCompleteSchema, artifactsUploadRequestSchema, artifactsUploadResponseSchema, assertScheduleInputsSatisfiable, assertValidScopeName, assertValidSecretKey, attestationListFiltersSchema, attestationListItemSchema, attestationListSummarySchema, attestationVerifyStatusSchema, auditLogColdDays, auditLogWarmDays, auditLogWarmSqlCase, authFailureSchema, authRequestSchema, authSuccessSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, blocksNewCheckout, browserAuthFailureSchema, browserAuthRefreshSchema, browserAuthRequestSchema, browserAuthSuccessSchema, browserErrorSchema, browserEventLogPayloadChunkSchema, browserEventLogPayloadFetchSchema, browserGapSchema, browserJobContextSchema, browserJobNewSchema, browserJobStatusSchema, browserLogLinesSchema, browserLogStreamTerminatedReason, browserLogStreamTerminatedSchema, browserLogSubscribeSchema, browserLogUnsubscribeSchema, browserOrchLogLinesSchema, browserOrchLogSubscribeSchema, browserOrchLogUnsubscribeSchema, browserPingSchema, browserPongSchema, browserRunEventSchema, browserRunNewSchema, browserRunStatusSchema, browserStatusSubscribeSchema, browserStatusUnsubscribeSchema, browserStepStatusSchema, browserToPlatformMessageSchema, buildEventClaims, buildIdTokenSubject, buildTrustedPassthroughEnv, buildUnsupportedMessageNack, buildZodFromDescriptor, buildZodObjectFromMap, cacheStatsSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, cancelRunToolSchema, cancelRunsByBranchToolSchema, canonicalizeCapability, canonicalizeLabel, canonicalizeLabelSet, canonicalizeLabels, canonicalizeMatcher, capabilityLabel, changedFilesStatusSchema, checkArtifactName, clusterMembershipSchema, coerceDispatchInputs, coerceHostPropertyValue, collectDiscriminatorTypes, compileRegexMatcher, compileSafeRegex, configAckSchema, connectionHealthStatusSchema, contextBindingEntrySchema, contextBindingsListRequestSchema, contextBindingsSetRequestSchema, contextCreateRequestSchema, contextDeleteRequestSchema, contextGetRequestSchema, contextHistoryRequestSchema, contextHistoryResponseSchema, contextListRequestSchema, contextSecretDeleteRequestSchema, contextSecretScopeCreateRequestSchema, contextSecretScopeDeleteRequestSchema, contextSecretScopeRenameRequestSchema, contextSecretSetRequestSchema, contextSecretsListRequestSchema, contextSourceOverrideDeleteRequestSchema, contextSourceOverrideSetRequestSchema, contextSourceOverridesListRequestSchema, contextTestAccessSetRequestSchema, contextUpdateRequestSchema, contextVarDeleteRequestSchema, contextVarSetRequestSchema, contextVarsListRequestSchema, createCommitMessageTraceEntry, createContentRequirementsTraceEntry, createDispatchFailureTraceEntry, createGlobalFilterTraceEntry, createTraceEntry, createTraceTruncationMarker, createWorkflowBundleConfig, createWorkflowDecision, dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema, dashboardAdminTokenSummarySchema, dashboardAdminTokensListRequestSchema, dashboardAdminTokensListResponseSchema, dashboardArtifactsListRequestSchema, dashboardArtifactsListResponseSchema, dashboardAttestationGetRequestSchema, dashboardAttestationGetResponseSchema, dashboardAttestationRetryRequestSchema, dashboardAttestationRetryResponseSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListAllRequestSchema, dashboardAttestationsListAllResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogActivityRequestSchema, dashboardEventLogActivityResponseSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardFleetWorkflowsForHostRequestSchema, dashboardFleetWorkflowsForHostResponseSchema, dashboardJobDetailSchema, dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunStateRequestSchema, dashboardRunStateResponseSchema, dashboardRunStructuredRequestSchema, dashboardRunStructuredResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, decodeActivityCursor, deriveOsArchLabels, derivePlatformTaints, describeTextMatch, developerOpsForEntrypoint, diagnosticsInfraAlertSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, encodeActivityCursor, errorSchema, evaluateTextMatch, eventEmitResponseSchema, eventEmitSchema, eventLogActivityCountsSchema, eventLogListItemSchema, executionEventSchema, executionStatusSchema, expandMatrix, expandMultiDimension, expandSingleDimension, extractInputDescriptor, extractInputsDescriptorMap, fanoutEnvelopeFields, findDuplicateCombination, flattenActor, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetHostWorkflowSchema, fleetLogsRequestSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, fleetSelectionSchema, fnv1a32, formatExpandedJobName, formatMatrixSuffix, getAccessLogColdDays, getAccessLogWarmDays, getAuditLogColdDays, getAuditLogWarmDays, getDiagnosticsToolSchema, getRepoGlobMatcher, getRunToolSchema, getSecretAuditLogColdDays, getSecretAuditLogWarmDays, getStepLogsToolSchema, gitAuthSchema, githubIngressPath, githubWebhookPath, globalEvalCandidateResultSchema, globalEvalRoundResultSchema, hasAgentCapability, hasOrchAgentCapability, hasOrchCapability, hasPlatformCapability, heartbeatSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, hostEnvelopeFields, hostLabel, hostSatisfiesTarget, hostToScalerPlatform, identityLinkItemSchema, identityLinkListResponseSchema, initFailureSchema, installGateJobId, invokeResultSchema, isFailureStatus, isInputSatisfiableFromDefaults, isKnownCapability, isLockDynamicJobFn, isLockParallelStep, isLockStaticJob, isMintedRef, isNegatedPattern, isPaidTier, isPullRequestFamilyTriggerEvent, isSecurityHoldJobId, isSelfReportedLabel, isSetupStepType, isTrustedEnvScrubbed, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobContextMessageSchema, jobDispatchSchema, jobProgressAckSchema, jobProgressSchema, jobRejectSchema, jobRerouteAckSchema, jobRerouteSchema, jobStatusForwardSchema, jobStatusSchema, joinRequestSchema, joinResponseSchema, listOrchestratorsToolSchema, listOrgsToolSchema, listRunsToolSchema, listSecretsToolSchema, listWorkflowsToolSchema, logChunkSchema, logPullOrchToPlatformSchema, logPullPlatformToOrchSchema, manualScheduleRequestSchema, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchScopePattern, matchTrigger, matchWorkflowTriggers, matchWorkflowsForEvent, matcherMatches, matcherSatisfiedBy, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixCombinationCount, matrixEnvelopeFields, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, mergeAutoLabels, mergeOrderedMaps, minAccessLogWarmDays, minAuditLogWarmDays, minSecretAuditLogWarmDays, nackSchema, negatedPatternReason, nodeArchToScalerArch, nodePlatformToScalerOs, normalizeInfraAlertSeverity, normalizeMatrixInput, normalizePersistedHoldType, normalizeRegexFlags, normalizeRunsOn, orchAgentCapabilitiesSchema, orchCapabilitiesSchema, orchLogChunkSchema, orchMetricsSchema, orchestratorToAgentMessageSchema, orchestratorToPlatformMessageSchema, orgMemberSchema, parseActor, parseHostLabel, parseHostPropertyAssignments, parseInputPairs, parseMemoryString, partitionMatchers, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerClusterSettingsRequestSchema, peerClusterSettingsResponseSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerDiscoverSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerLogsCollectChunkSchema, peerLogsCollectErrorSchema, peerLogsCollectRequestSchema, peerScalerEventSchema, peerToPeerMessageSchema, peerUpdateSchema, persistedHoldTypeSpellings, planHeadroomSchema, planRank, platformCapabilitiesMessageSchema, platformCapabilitiesSchema, platformOperatorActorSchema, platformToBrowserMessageSchema, platformToOrchestratorMessageSchema, platformToOsArchLabels, platformToTaints, prepareEventBuckets, provenanceContextSchema, provenanceUploadCompleteSchema, provenanceUploadDeferSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema, rateLimitWarningSchema, registerAckSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, rejectRunToolSchema, renderFenced, rerunRunToolSchema, reservedEventNamePrefix, resolveContentFormat, resolveHeldRunId, resolveRoleLabels, resolveRunIdSugar, resolveScheduleInputs, resolveSecretsForContext, resolveSecretsWithProvenance, resolveWhenToRunOn, resourceRequestNestedSchema, resourceSpecSchema, runCancelRequestSchema, runEventMessageSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, runtimeLabel, scalerAgentLabels, scalerClaimCredentialsResponseSchema, scalerClaimCredentialsSchema, scalerLabel, scalerPlatformSchema, scheduleTriggerKey, secretAuditLogColdDays, secretAuditLogWarmDays, secretAuditLogWarmSqlCase, serviceAccountActorSchema, shouldRecordAccess, shouldRecordSecretResolve, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema, staleCheckrunCleanupSchema, stateReplayRunSchema, stateReplaySchema, statusOptionsForLevel, stepApprovalPayloadSchema, stepApprovalRequestSchema, stepApprovalResolvedSchema, stepStatusForwardSchema, stringifyActor, stripScopePrefix, stripStatefulRegexFlags, systemActorSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, textMatchHasQuery, toCanonicalStatus, triggerRunToolSchema, truncateDecisionsToByteBudget, truncateTraceText, trustPolicyResponseSchema, trustPolicySchema, trustPolicyUpdateSchema, trustedContributorHoldReason, untrusted, upstreamSnapshotSchema, userActorSchema, utf8ByteLength, validateNoReservedLabels, validateResourceRequest, validateScopeName, validateSecretKey, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema, workerClusterSettingsSchema, worstStatus, wrapUntrusted };
+export { ACCESS_LOG_COLD_DAYS, ACCESS_LOG_WARM_DAYS, ACTOR_AGENT_SUFFIX, AGENT_API_REQUEST_TIMEOUT_MS, AGENT_CAPABILITIES, AGENT_FEATURE_LABELS, AGENT_FEATURE_LABEL_PREFIX, AGENT_REQUIRED_KICI_VARS, ALLOWED_SYSTEM_VARS, ARTIFACT_INVALID_NAME_PREFIX, ARTIFACT_NAME_MAX_LENGTH, AccessLogAction, AccessLogOutcome, AccessLogPolicyKind, AccessLogSource, AccessLogTargetType, ActivityFilterSource, ActivityRowSource, ActorType, AgentCapabilityFlag, AgentFailureCategory, AgentFeature, ApprovalDecision, ArtifactCompleteAckOutcome, ArtifactDownloadOutcome, ArtifactNameSchema, ArtifactRejectReason, ArtifactUploadOutcome, AttestationOrigin, BREAKING_FLOOR, CANONICAL_STATUSES, CAPABILITY_LABEL_PREFIX, CLUSTER_MEMBERSHIP_MAX_WORKERS, CONTAINER_BUILD_RUNTIME_LABEL, CONTEXTS_MAX, CacheOutcome, CacheRefScope, CacheRunEventType, CacheStepType, CheckMode, CheckRunConclusion, CheckStepOutcome, CiTrustLevel, ConcurrencyStrategy, ConfigPathsSchema, ContextDeleteErrorCode, ContextGateRejectReason, ContextType, DASHBOARD_REQUEST_TYPES, DASHBOARD_REQUEST_TYPE_SET, DEAD_ORCH_FAILURE_REASON, DEFAULT_APPROVAL_EXPIRY_HOURS, DEFAULT_APPROVAL_EXPIRY_SECONDS, DEFAULT_CONCURRENCY_STRATEGY, DEFAULT_HOLD_EXPIRY_SECONDS, DEFERRED_PATHS_SUMMARY_SUFFIX, DEVELOPER_OPERATIONS, DashboardResponseErrorCode, DeploymentContainerRuntimeSchema, DeploymentIdentitySchema, DeploymentModeSchema, DispatchInputError, DispatchInputType, EVENT_LOG_PAYLOAD_CHUNK_BYTES, EventLogPayloadStreamError, EventLogSource, EventLogStatus, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, FanoutCause, FanoutError, FleetHostDisposition, ForkPolicy, GLOBAL_APPROVAL_MIN_READER, GLOBAL_EVAL_SKIPS_RESULT_AWARE_LABEL, HEARTBEAT_CLOSE_MS, HEARTBEAT_DEGRADED_MS, HEARTBEAT_FRESH_MS, HEARTBEAT_STALE_THRESHOLD_SECONDS, HEARTBEAT_UNHEALTHY_MARK_MS, HOST_LABEL_PREFIX, HeldRunQueueType, HeldRunStatus, HoldScope, HoldType, HostInventoryEntry, HostPropertyValue, HostTargetSelector, HostTargetValue, ID_TOKEN_CLAIM_NAMES, INFRA_ALERT_TYPES, INIT_LABEL, INIT_RUNNER_ROLE_LABEL, INSTALL_JOB_ID_PREFIX, INTERNAL_EVENT_NAME_PREFIX, InfraAlertSeverity, InfraAlertType, InitFailureCategory, InputDescriptor, InputsDescriptorMapSchema, InventoryHostStatus, InventoryLifecycleClass, InventorySelectorSchema, JOB_IMAGE_RUNTIME_LABEL, JobKind, JobRejectReason, KICI_AGENT_ENV_PREFIX, KICI_EVENT_NAME_PREFIX, KNOWN_LINUX_CAPABILITIES, KNOWN_ROLES, LEGACY_STATUS_ALIASES, LabelMatcher, LockFileParseError, LogStream, MAX_APPROVAL_EXPIRY_HOURS, MAX_APPROVAL_EXPIRY_SECONDS, MAX_FANOUT_JOBS, MAX_JOBS_PER_RUN, MAX_MATRIX_MATERIALIZATION, MIN_APPROVAL_EXPIRY_SECONDS, MIN_PROTOCOL_VERSION, MatrixShapeError, MinimumTrustSchema, NACK_EXEMPT_MESSAGE_TYPES, NeedsEntrySchema, NeedsGroupEntrySchema, NeedsRunOn, NeedsWhen, ORCH_AGENT_CAPABILITIES, ORCH_CAPABILITIES, ORCH_TO_PLATFORM_RECOGNIZED_TYPES, OWN_INGRESS_MODES, OnUnreachableMode, OrchLogPhase, OrchRole, OrchestratorMode, PING_EVENT_TYPE, PLAN_TYPES, PLATFORM_CAPABILITIES, PLATFORM_CONNECTED_MODES, PLATFORM_TAINT_LABELS, PLATFORM_TO_ORCH_RECOGNIZED_TYPES, POLICY_BY_ACTION, PRIVILEGED_ROOT_LABEL, PROTOCOL_VERSION, PULL_REQUEST_FAMILY_TRIGGER_EVENTS, PaidPlanType, PatKind, PayloadOmittedReason, PlanType, REDACTED_TRACE_FIELD, REGEX_NEGATIVE_ASSERTION, RELAY_INGRESS_MODES, REPO_IDENTIFIER_MAX, RUNS_ON_LABELS_MAX, RUNTIME_LABEL_PREFIX, RegisterableTriggerType, RunFailureClass, RunsOnPick, RuntimeFact, SANDBOX_DEFAULT_VARS, SANDBOX_NETWORK_MODES, SCALER_EVENT_NAMES, SCHEMA_VERSION, SCOPE_NAME_MAX_LENGTH, SCOPE_SEGMENT_PATTERN, SECONDS_PER_HOUR, SECRET_KEY_MAX_LENGTH, SECRET_KEY_PATTERN, SECURITY_HOLD_JOB_IDS, SECURITY_HOLD_JOB_LABELS, SELF_REPORTED_LABEL_PREFIXES, SSH_TRANSPORT_CAPABILITY, STATE_REPLAY_MAX_RUNS, STATUS_EPOCH_MAX, STATUS_FAILURE_CLASS, STATUS_FREE_TEXT_MAX, STATUS_ID_MAX, STATUS_PRECEDENCE, SUBSCRIBABLE_WEBHOOK_EVENT_TYPES, SUBSCRIPTION_EXISTS_CODE, ScaleDownReason, ScalerArch, ScalerBackendType, ScalerEventType, ScalerOs, ScalerScaleDownPayload, ScalerScaleUpPayload, ScopeNameError, SecretKeyError, SetupStepType, SourceOrigin, SourceProvider, SourceSubtype, StatusFailureClass, StepApprovalOutcome, StepConcurrencyKind, StripeSubscriptionStatus, SubscribableWebhookEventType, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TERMINAL_STEP_STATES, TRACE_TEXT_MAX, TRACE_TRUNCATION_WORKFLOW_NAME, TRIGGER_EVENT_META, TRIGGER_EVENT_TYPES, TRIGGER_TYPE_TO_EVENT_TYPES, TRUSTED_ENV_SCRUB_EXACT, TestRelayType, TimeoutReason, TraceCheck, TraceVerdict, TriggerSource, TrustTierSchema, UNRESOLVED_CLAIM, UnavailablePathsTrace, UnsupportedDispatchInputError, VariantKind, WEBHOOK_RELAY_CHUNK_SIZE, WEBHOOK_RELAY_MAX_BODY_BYTES, WORKFLOW_MODIFICATION_JOB_ID, WS_CLOSE_AGENT_AUTH_FAILED, WS_CLOSE_AUTH_TIMEOUT, WS_CLOSE_CLUSTER_NAME_CONFLICT, WS_CLOSE_DISPATCH_ACK_TIMEOUT, WS_CLOSE_GOING_AWAY, WS_CLOSE_HEARTBEAT_TIMEOUT, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_INVALID_MESSAGE, WS_CLOSE_PLAN_LIMIT, WS_CLOSE_PROTOCOL_ERROR, WS_CLOSE_REBALANCE, WS_CLOSE_SUPERSEDED_BY_RECONNECT, WS_CLOSE_UNAUTHORIZED, WS_MAX_PAYLOAD_BYTES, WebhookEventType, WebhookRelayResult, WsRateLimiter, accessLogFilterSchema, accessLogItemSchema, accessLogWarmSqlCase, ackSchema, activityCursorSchema, activityFilterSchema, activityRowSchema, actorPrincipalSchema, agentApiRequestSchema, agentApiResponseSchema, agentAuthFailureSchema, agentAuthRequestSchema, agentAuthSuccessSchema, agentCapabilitiesSchema, agentDiagnosticsConnectionSchema, agentDiagnosticsSchema, agentFeatureLabel, agentJobResultSchema, agentLabelOf, agentLogChunkSchema, agentMetricsSchema, agentOrchestratorSummarySchema, agentOrgSummarySchema, agentRegisterSchema, agentRunListItemSchema, agentRunResultSchema, agentSecretScopeSchema, agentStatusSchema, agentStepLogsSchema, agentStepResultSchema, agentStepStatusSchema, agentToOrchestratorMessageSchema, agentTypeLabel, agentWorkflowSummarySchema, apiKeyActorSchema, appendChecks, applyIncludeExclude, approvalExpiryHoursOf, approvalExpirySecondsOf, approvalRequirementSchema, approvalTimeoutSecondsSchema, approveRunToolSchema, approverClauseSchema, artifactInvalidNameError, artifactListItemSchema, artifactsDownloadRequestSchema, artifactsDownloadResponseSchema, artifactsUploadCompleteAckSchema, artifactsUploadCompleteSchema, artifactsUploadRequestSchema, artifactsUploadResponseSchema, assertScheduleInputsSatisfiable, assertValidScopeName, assertValidSecretKey, attestationListFiltersSchema, attestationListItemSchema, attestationListSummarySchema, attestationVerifyStatusSchema, auditLogColdDays, auditLogWarmDays, auditLogWarmSqlCase, authFailureSchema, authRequestSchema, authSuccessSchema, backendGetRequestSchema, backendGetResponseSchema, backendItemSchema, backendSyncRequestSchema, backendSyncResponseSchema, backendTestRequestSchema, backendTestResponseSchema, backendsListRequestSchema, backendsListResponseSchema, backendsSyncAllRequestSchema, backendsSyncAllResponseSchema, blocksNewCheckout, browserAuthFailureSchema, browserAuthRefreshSchema, browserAuthRequestSchema, browserAuthSuccessSchema, browserErrorSchema, browserEventLogPayloadChunkSchema, browserEventLogPayloadFetchSchema, browserGapSchema, browserJobContextSchema, browserJobNewSchema, browserJobStatusSchema, browserLogLinesSchema, browserLogStreamTerminatedReason, browserLogStreamTerminatedSchema, browserLogSubscribeSchema, browserLogUnsubscribeSchema, browserOrchLogLinesSchema, browserOrchLogSubscribeSchema, browserOrchLogUnsubscribeSchema, browserPingSchema, browserPongSchema, browserRunEventSchema, browserRunNewSchema, browserRunStatusSchema, browserStatusSubscribeSchema, browserStatusUnsubscribeSchema, browserStepStatusSchema, browserToPlatformMessageSchema, buildEventClaims, buildIdTokenSubject, buildTrustedPassthroughEnv, buildUnsupportedMessageNack, buildZodFromDescriptor, buildZodObjectFromMap, cacheStatsSchema, cacheUserRestoreRequestSchema, cacheUserRestoreResponseSchema, cacheUserSaveCompleteSchema, cacheUserSaveRequestSchema, cacheUserSaveResponseSchema, cancelRunToolSchema, cancelRunsByBranchToolSchema, canonicalizeCapability, canonicalizeLabel, canonicalizeLabelSet, canonicalizeLabels, canonicalizeMatcher, capabilityLabel, changedFilesStatusSchema, checkArtifactName, clusterMembershipSchema, coerceDispatchInputs, coerceHostPropertyValue, collectDiscriminatorTypes, compileRegexMatcher, compileSafeRegex, configAckSchema, connectionHealthStatusSchema, contextBindingEntrySchema, contextBindingsListRequestSchema, contextBindingsSetRequestSchema, contextCreateRequestSchema, contextDeleteRequestSchema, contextGetRequestSchema, contextHistoryRequestSchema, contextHistoryResponseSchema, contextListRequestSchema, contextSecretDeleteRequestSchema, contextSecretScopeCreateRequestSchema, contextSecretScopeDeleteRequestSchema, contextSecretScopeRenameRequestSchema, contextSecretSetRequestSchema, contextSecretsListRequestSchema, contextSourceOverrideDeleteRequestSchema, contextSourceOverrideSetRequestSchema, contextSourceOverridesListRequestSchema, contextTestAccessSetRequestSchema, contextUpdateRequestSchema, contextVarDeleteRequestSchema, contextVarSetRequestSchema, contextVarsListRequestSchema, createCommitMessageTraceEntry, createContentRequirementsTraceEntry, createDispatchFailureTraceEntry, createGlobalFilterTraceEntry, createTraceEntry, createTraceTruncationMarker, createWorkflowBundleConfig, createWorkflowDecision, dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema, dashboardAdminTokenSummarySchema, dashboardAdminTokensListRequestSchema, dashboardAdminTokensListResponseSchema, dashboardArtifactsListRequestSchema, dashboardArtifactsListResponseSchema, dashboardAttestationGetRequestSchema, dashboardAttestationGetResponseSchema, dashboardAttestationRetryRequestSchema, dashboardAttestationRetryResponseSchema, dashboardAttestationsApiResponseSchema, dashboardAttestationsListAllRequestSchema, dashboardAttestationsListAllResponseSchema, dashboardAttestationsListRequestSchema, dashboardAttestationsListResponseSchema, dashboardDiagnosticsRequestSchema, dashboardDiagnosticsResponseSchema, dashboardEventDlqCountRequestSchema, dashboardEventDlqDiscardRequestSchema, dashboardEventDlqListItemSchema, dashboardEventDlqListRequestSchema, dashboardEventDlqRetryRequestSchema, dashboardEventLogActivityRequestSchema, dashboardEventLogActivityResponseSchema, dashboardEventLogDetailRequestSchema, dashboardEventLogListRequestSchema, dashboardEventLogPayloadChunkSchema, dashboardEventLogPayloadStreamRequestSchema, dashboardFleetHostRequestSchema, dashboardFleetHostResponseSchema, dashboardFleetHostsRequestSchema, dashboardFleetHostsResponseSchema, dashboardFleetPreviewRequestSchema, dashboardFleetPreviewResponseSchema, dashboardFleetWorkflowsForHostRequestSchema, dashboardFleetWorkflowsForHostResponseSchema, dashboardJobDetailSchema, dashboardOrchLogsRequestSchema, dashboardOrchLogsResponseSchema, dashboardOrchToPlatformSchema, dashboardPayloadRequestSchema, dashboardPlatformToOrchSchema, dashboardRunDetailApiResponseSchema, dashboardRunDetailRequestSchema, dashboardRunDetailResponseSchema, dashboardRunStateRequestSchema, dashboardRunStateResponseSchema, dashboardRunStructuredRequestSchema, dashboardRunStructuredResponseSchema, dashboardRunSummarySchema, dashboardRunsFiltersRequestSchema, dashboardRunsFiltersResponseSchema, dashboardRunsListRequestSchema, dashboardRunsListResponseSchema, dashboardScalerAgentsRequestSchema, dashboardScalerAgentsResponseSchema, dashboardScalerCapacityRequestSchema, dashboardScalerCapacityResponseSchema, dashboardSourceSummarySchema, dashboardSourcesListRequestSchema, dashboardSourcesListResponseSchema, dashboardStepLogsApiResponseSchema, dashboardStepLogsRequestSchema, dashboardStepLogsResponseSchema, decodeActivityCursor, deriveOsArchLabels, derivePlatformTaints, describeTextMatch, developerOpsForEntrypoint, diagnosticsInfraAlertSchema, diagnosticsInfrastructureResponseSchema, diagnosticsSummaryResponseSchema, diffRangeKindSchema, encodeActivityCursor, errorSchema, evaluateTextMatch, eventEmitResponseSchema, eventEmitSchema, eventLogActivityCountsSchema, eventLogListItemSchema, executionEventSchema, executionStatusSchema, expandMatrix, expandMultiDimension, expandSingleDimension, extractInputDescriptor, extractInputsDescriptorMap, fanoutEnvelopeFields, findDuplicateCombination, flattenActor, fleetBundleChunkSchema, fleetBundleErrorSchema, fleetHostDeclareRequestSchema, fleetHostDeclareResponseSchema, fleetHostRemoveRequestSchema, fleetHostRemoveResponseSchema, fleetHostWorkflowSchema, fleetLogsRequestSchema, fleetPinnedRunSchema, fleetPreviewHostSchema, fleetSelectionSchema, fnv1a32, formatExpandedJobName, formatMatrixSuffix, getAccessLogColdDays, getAccessLogWarmDays, getAuditLogColdDays, getAuditLogWarmDays, getDiagnosticsToolSchema, getRepoGlobMatcher, getRunToolSchema, getSecretAuditLogColdDays, getSecretAuditLogWarmDays, getStepLogsToolSchema, gitAuthSchema, githubIngressPath, githubWebhookPath, globalEvalCandidateResultSchema, globalEvalRoundResultSchema, hasAgentCapability, hasOrchAgentCapability, hasOrchCapability, hasPlatformCapability, heartbeatSchema, heldRunApproveRequestSchema, heldRunRejectRequestSchema, heldRunsListRequestSchema, hostEnvelopeFields, hostLabel, hostSatisfiesTarget, hostToScalerPlatform, identityLinkItemSchema, identityLinkListResponseSchema, initFailureSchema, installGateJobId, invokeResultSchema, isDeferrableRange, isFailureStatus, isInputSatisfiableFromDefaults, isKnownCapability, isLockDynamicJobFn, isLockParallelStep, isLockStaticJob, isMintedRef, isNegatedPattern, isPaidTier, isPullRequestFamilyTriggerEvent, isSecurityHoldJobId, isSelfReportedLabel, isSetupStepType, isTrustedEnvScrubbed, isZeroSha, jobAckSchema, jobCancelSchema, jobConcurrencyAckSchema, jobConcurrencyReportSchema, jobContextMessageSchema, jobDispatchSchema, jobProgressAckSchema, jobProgressSchema, jobRejectSchema, jobRerouteAckSchema, jobRerouteSchema, jobStatusForwardSchema, jobStatusSchema, joinRequestSchema, joinResponseSchema, listOrchestratorsToolSchema, listOrgsToolSchema, listRunsToolSchema, listSecretsToolSchema, listWorkflowsToolSchema, logChunkSchema, logPullOrchToPlatformSchema, logPullPlatformToOrchSchema, manualScheduleRequestSchema, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchScopePattern, matchTrigger, matchWorkflowTriggers, matchWorkflowsForEvent, matcherMatches, matcherSatisfiedBy, materializeFanout, materializeResolvedHosts, materializeResolvedMatrix, matrixCombinationCount, matrixEnvelopeFields, memberIdentityLinkSchema, memberListResponseSchema, memberRoleAssignmentSchema, mergeAutoLabels, mergeOrderedMaps, minAccessLogWarmDays, minAuditLogWarmDays, minSecretAuditLogWarmDays, nackSchema, negatedPatternReason, nodeArchToScalerArch, nodePlatformToScalerOs, normalizeInfraAlertSeverity, normalizeMatrixInput, normalizePersistedHoldType, normalizeRegexFlags, normalizeRunsOn, orchAgentCapabilitiesSchema, orchCapabilitiesSchema, orchLogChunkSchema, orchMetricsSchema, orchestratorToAgentMessageSchema, orchestratorToPlatformMessageSchema, orgMemberSchema, parseActor, parseHostLabel, parseHostPropertyAssignments, parseInputPairs, parseMemoryString, partitionMatchers, peerAgentTokenRevokeSchema, peerAuthRequestSchema, peerAuthResponseSchema, peerCapabilitiesSchema, peerClusterSettingsRequestSchema, peerClusterSettingsResponseSchema, peerConfigReloadResponseSchema, peerConfigReloadSchema, peerDiscoverSchema, peerFromPeerMessageSchema, peerHeartbeatSchema, peerHelloResponseSchema, peerHelloSchema, peerJobCancelSchema, peerLeavingSchema, peerLogsCollectChunkSchema, peerLogsCollectErrorSchema, peerLogsCollectRequestSchema, peerScalerEventSchema, peerToPeerMessageSchema, peerUpdateSchema, persistedHoldTypeSpellings, planHeadroomSchema, planRank, platformCapabilitiesMessageSchema, platformCapabilitiesSchema, platformOperatorActorSchema, platformToBrowserMessageSchema, platformToOrchestratorMessageSchema, platformToOsArchLabels, platformToTaints, prepareEventBuckets, provenanceContextSchema, provenanceUploadCompleteSchema, provenanceUploadDeferSchema, provenanceUploadRequestSchema, provenanceUploadResponseSchema, raftAppendEntriesSchema, raftVoteRequestSchema, raftVoteResponseSchema, rateLimitWarningSchema, registerAckSchema, registrationDeleteRequestSchema, registrationDisableRequestSchema, registrationItemSchema, registrationsListRequestSchema, registrationsListResponseSchema, rejectRunToolSchema, renderFenced, rerunRunToolSchema, reservedEventNamePrefix, resolveContentFormat, resolveDiffRange, resolveHeldRunId, resolveRoleLabels, resolveRunIdSugar, resolveScheduleInputs, resolveSecretsForContext, resolveSecretsWithProvenance, resolveWhenToRunOn, resourceRequestNestedSchema, resourceSpecSchema, runCancelRequestSchema, runEventMessageSchema, runEventSchema, runLineageResponseSchema, runListItemSchema, runListResponseSchema, runRerunRequestSchema, runtimeLabel, scalerAgentLabels, scalerClaimCredentialsResponseSchema, scalerClaimCredentialsSchema, scalerLabel, scalerPlatformSchema, scheduleTriggerKey, secretAuditLogColdDays, secretAuditLogWarmDays, secretAuditLogWarmSqlCase, serviceAccountActorSchema, shouldRecordAccess, shouldRecordSecretResolve, sourceDeregisterAckSchema, sourceDeregisterSchema, sourceRegistrationAckSchema, sourceRegistrationSchema, staleCheckrunCleanupSchema, stateReplayRunSchema, stateReplaySchema, statusOptionsForLevel, stepApprovalPayloadSchema, stepApprovalRequestSchema, stepApprovalResolvedSchema, stepStatusForwardSchema, stringifyActor, stripScopePrefix, stripStatefulRegexFlags, systemActorSchema, testRelayCancelRequestSchema, testRelayCancelResponseSchema, testRelayRunLogsRequestSchema, testRelayRunLogsResponseSchema, testRelayRunStatusRequestSchema, testRelayRunStatusResponseSchema, testRelayTriggerRequestSchema, testRelayTriggerResponseSchema, testRelayUploadsInitRequestSchema, testRelayUploadsInitResponseSchema, textMatchHasQuery, toCanonicalStatus, triggerRunToolSchema, truncateDecisionsToByteBudget, truncateTraceText, trustPolicyResponseSchema, trustPolicySchema, trustPolicyUpdateSchema, trustedContributorHoldReason, untrusted, upstreamSnapshotSchema, userActorSchema, utf8ByteLength, validateNoReservedLabels, validateResourceRequest, validateScopeName, validateSecretKey, webhookAckSchema, webhookRelayChunkSchema, webhookRelaySchema, webhookRelayStartSchema, workerClusterSettingsSchema, worstStatus, wrapUntrusted };

package/dist/labels.d.ts

@@ -13,7 +13,7 @@ import { z } from 'zod';
  *   kici:os:      — operating system (kici:os:linux, kici:os:macos, kici:os:windows)
  *   kici:arch:    — CPU architecture (kici:arch:x64, kici:arch:amd64, kici:arch:arm64)
  *   kici:agent:   — scaler/execution backend type (kici:agent:container, kici:agent:bare-metal, kici:agent:firecracker)
- *   kici:scaler:  — scaler backend name (kici:scaler:stg-container, kici:scaler:prod-firecracker)
+ *   kici:scaler:  — scaler backend name (kici:scaler:linux-container, kici:scaler:prod-firecracker)
  *   kici:host:    — hostname of the machine running the agent (kici:host:<hostname>)
  *   kici:role:    — agent role (kici:role:builder, kici:role:init-runner)
  *

package/dist/labels.js

@@ -15,7 +15,7 @@ import { z } from "zod";
 *   kici:os:      — operating system (kici:os:linux, kici:os:macos, kici:os:windows)
 *   kici:arch:    — CPU architecture (kici:arch:x64, kici:arch:amd64, kici:arch:arm64)
 *   kici:agent:   — scaler/execution backend type (kici:agent:container, kici:agent:bare-metal, kici:agent:firecracker)
-*   kici:scaler:  — scaler backend name (kici:scaler:stg-container, kici:scaler:prod-firecracker)
+*   kici:scaler:  — scaler backend name (kici:scaler:linux-container, kici:scaler:prod-firecracker)
 *   kici:host:    — hostname of the machine running the agent (kici:host:<hostname>)
 *   kici:role:    — agent role (kici:role:builder, kici:role:init-runner)
 *

package/dist/mcp/tool-schemas.d.ts

@@ -4,7 +4,7 @@
  * Browser-safe (zod only) so they live in the shared engine barrel. Each export
  * is a Zod *raw shape* (a plain object of Zod fields) so it can be passed
  * directly as an MCP tool `inputSchema`. The Platform-hosted developer MCP
- * server (packages/platform/src/mcp/server.ts) is the consumer.
+ * server is the consumer.
  */
 import { z } from 'zod';
 export declare const listRunsToolSchema: {

package/dist/mcp/tool-schemas.js

@@ -7,7 +7,7 @@ import { z } from "zod";
 * Browser-safe (zod only) so they live in the shared engine barrel. Each export
 * is a Zod *raw shape* (a plain object of Zod fields) so it can be passed
 * directly as an MCP tool `inputSchema`. The Platform-hosted developer MCP
-* server (packages/platform/src/mcp/server.ts) is the consumer.
+* server is the consumer.
 */
 /**
 * Optional organization id. When the calling user belongs to exactly one org

package/dist/metrics/catalog-policy.d.ts

@@ -2,8 +2,7 @@
  * Hand-maintained label-value policy on top of the auto-generated
  * `MetricLabels` / `MetricKind` allow-list in
  * `./metric-catalog.generated.ts`. Consumed by the Platform's
- * orchestrator-metrics filter (`packages/platform/src/ws/metrics-filter.ts`)
- * to harden the WS `orch.metrics` push path against pollution of the
+ * orchestrator-metrics filter to harden the WS `orch.metrics` push path against pollution of the
  * monitoring system.
  *
  * Three layers compose:

package/dist/metrics/catalog-policy.js

@@ -7,8 +7,7 @@ import { MetricNames, MetricService } from "./metric-catalog.generated.js";
 * Hand-maintained label-value policy on top of the auto-generated
 * `MetricLabels` / `MetricKind` allow-list in
 * `./metric-catalog.generated.ts`. Consumed by the Platform's
-* orchestrator-metrics filter (`packages/platform/src/ws/metrics-filter.ts`)
-* to harden the WS `orch.metrics` push path against pollution of the
+* orchestrator-metrics filter to harden the WS `orch.metrics` push path against pollution of the
 * monitoring system.
 *
 * Three layers compose:

package/dist/protocol/dashboard-global-workflows.d.ts

@@ -3,7 +3,7 @@
  *
  * Consumers import from `@kici-dev/engine/protocol/dashboard-global-workflows`.
  * This file is intentionally kept out of the engine barrel so it remains a
- * server-only surface (see `.claude/rules/engine.md`).
+ * server-only surface: the barrel must stay browser-safe.
  */
 export * from './messages/dashboard-global-workflows.js';
 //# sourceMappingURL=dashboard-global-workflows.d.ts.map

package/dist/protocol/messages/common.d.ts

@@ -24,7 +24,6 @@ export declare const WS_MAX_PAYLOAD_BYTES: number;
  * FAST-PATHED: A manual validator exists in
  * packages/orchestrator/src/ws/agent-handler.ts (isValidHeartbeat).
  * If you change this schema, update the manual validator in the same commit.
- * See CLAUDE.md rule: "Zod fast-path sync invariant".
  */
 export declare const heartbeatSchema: z.ZodObject<{
     type: z.ZodLiteral<"heartbeat">;

package/dist/protocol/messages/common.js

@@ -26,7 +26,6 @@ const WS_MAX_PAYLOAD_BYTES = 26214400;
 * FAST-PATHED: A manual validator exists in
 * packages/orchestrator/src/ws/agent-handler.ts (isValidHeartbeat).
 * If you change this schema, update the manual validator in the same commit.
-* See CLAUDE.md rule: "Zod fast-path sync invariant".
 */
 const heartbeatSchema = z.object({
 	type: z.literal("heartbeat"),

package/dist/protocol/messages/dashboard.d.ts

@@ -34,7 +34,7 @@ export declare const dashboardRunDetailRequestSchema: z.ZodObject<{
 /**
  * Request the machine-first, provenance-tagged structured run result from the
  * orchestrator (user-plane equivalent of the orchestrator-admin
- * `/runs/:id/structured` endpoint). Reuses the Phase-1 `AgentRunResult` shape.
+ * `/runs/:id/structured` endpoint). Reuses the `AgentRunResult` shape.
  */
 export declare const dashboardRunStructuredRequestSchema: z.ZodObject<{
     type: z.ZodLiteral<"dashboard.run.structured">;

package/dist/protocol/messages/dashboard.js

@@ -33,7 +33,7 @@ const dashboardRunDetailRequestSchema = z.object({
 /**
 * Request the machine-first, provenance-tagged structured run result from the
 * orchestrator (user-plane equivalent of the orchestrator-admin
-* `/runs/:id/structured` endpoint). Reuses the Phase-1 `AgentRunResult` shape.
+* `/runs/:id/structured` endpoint). Reuses the `AgentRunResult` shape.
 */
 const dashboardRunStructuredRequestSchema = z.object({
 	type: z.literal("dashboard.run.structured"),
@@ -605,7 +605,7 @@ const runRerunRequestSchema = z.object({
 	actor: actorPrincipalSchema,
 	runId: z.string(),
 	/**
-	* Phase F — Platform forwards the original run's `routing_key` so the
+	* The Platform forwards the original run's `routing_key` so the
 	* orchestrator can probe its cold-store under the right tenant prefix
 	* when the run is missing from PG. Optional for backwards compatibility
 	* with older Platform versions in mixed deploys; if absent, the
@@ -747,7 +747,7 @@ const dashboardEventLogDetailRequestSchema = z.object({
 	orgId: z.string(),
 	deliveryId: z.string(),
 	/**
-	* Phase E cold-store hint: when the Platform side has resurrected the
+	* Cold-store hint: when the Platform side has resurrected the
 	* archived `event_log` row, it forwards the `routing_key` so the
 	* orchestrator can scope its own cold-store fetch to a single tenant
 	* prefix instead of scanning every routing_key for the org.
@@ -831,7 +831,7 @@ const dashboardEventLogPayloadStreamRequestSchema = z.object({
 	orgId: z.string(),
 	deliveryId: z.string(),
 	/**
-	* Phase E cold-store hint: when Platform has resurrected the archived
+	* Cold-store hint: when Platform has resurrected the archived
 	* `event_log` row, it forwards `routing_key` so the orchestrator can scope
 	* its own cold-store fetch to a single tenant prefix instead of scanning
 	* every routing_key for the org. Mirrors `dashboardEventLogDetailRequestSchema`.

package/dist/protocol/messages/orchestrator-agent.d.ts

@@ -378,7 +378,6 @@ export declare const jobAckSchema: z.ZodObject<{
  * FAST-PATHED: A manual validator exists in
  * packages/orchestrator/src/ws/agent-handler.ts (isValidLogChunk).
  * If you change this schema, update the manual validator in the same commit.
- * See CLAUDE.md rule: "Zod fast-path sync invariant".
  */
 export declare const agentLogChunkSchema: z.ZodObject<{
     type: z.ZodLiteral<"log.chunk">;

package/dist/protocol/messages/orchestrator-agent.js

@@ -442,7 +442,6 @@ const jobAckSchema = z.object({
 * FAST-PATHED: A manual validator exists in
 * packages/orchestrator/src/ws/agent-handler.ts (isValidLogChunk).
 * If you change this schema, update the manual validator in the same commit.
-* See CLAUDE.md rule: "Zod fast-path sync invariant".
 */
 const agentLogChunkSchema = z.object({
 	type: z.literal("log.chunk"),

package/dist/protocol/messages/peer.js

@@ -41,7 +41,7 @@ const peerCapabilitiesSchema = z.object({
 * version-skew signal rather than something to ignore.
 */
 const scalerCapacitySummarySchema = z.object({
-	/** Scaler backend name (e.g. "stg-worker-bare-metal") */
+	/** Scaler backend name (e.g. "worker-bare-metal") */
 	name: z.string().optional(),
 	/** Scaler backend type (e.g. "bare-metal", "container") */
 	type: z.string().optional(),

package/dist/protocol/messages/platform-orchestrator.d.ts

@@ -143,12 +143,12 @@ export type TrustPolicyUpdate = z.infer<typeof trustPolicyUpdateSchema>;
  *
  * NOT a wire-parseable schema: this shape is intentionally absent from the
  * `platformToOrchestratorMessageSchema` discriminated union so that a rogue
- * or compromised Platform process (A10) cannot fabricate one and bypass the
+ * or compromised Platform process cannot fabricate one and bypass the
  * on-orchestrator HMAC verification gate. The only legitimate construction
  * site is `completeChunkedRelay` in `packages/orchestrator/src/ws/platform-client.ts`,
  * which synthesizes this shape AFTER `onVerifyInbound` returns `'accepted'`.
  *
- * Migration `packages/platform/src/db/migrations/012_drop_webhook_secret_columns.ts`
+ * The Platform migration that dropped the webhook secret columns
  * makes the orch-side `verifyInboundWebhook` (called from `onVerifyInbound` on
  * the chunked relay path `webhook.relay.start` / `webhook.relay.chunk`) the
  * sole trust boundary against a malicious Platform; keeping this schema OUT
@@ -310,7 +310,7 @@ export type PlatformCapabilitiesMessage = z.infer<typeof platformCapabilitiesMes
  * Platform's monitoring system: a malformed or hostile push fails Zod
  * parse at the WS edge and never reaches the aggregator or the Mimir
  * relay. The content-level allow-list (catalog) is enforced one step
- * deeper — see `packages/platform/src/ws/metrics-filter.ts`.
+ * deeper, in the Platform's orchestrator-metrics filter.
  *
  * Caps:
  * - 2000 metric data points per push (one orch ships ~60 today)
@@ -552,10 +552,10 @@ export type OrchCapabilitiesUpdate = z.infer<typeof orchCapabilitiesUpdateSchema
  * The single-frame `webhookRelaySchema` is intentionally NOT a member of this
  * union: that shape carries an attacker-controlled `payload` and pre-existed
  * the chunked relay's on-orch HMAC verification, so accepting it on the wire
- * would let a compromised Platform (A10) fabricate webhook deliveries that
+ * would let a compromised Platform fabricate webhook deliveries that
  * bypass the only trust boundary against a malicious Platform (see the
- * docblock on `webhookRelaySchema` above and migration
- * `packages/platform/src/db/migrations/012_drop_webhook_secret_columns.ts`).
+ * docblock on `webhookRelaySchema` above and the Platform migration that
+ * dropped the webhook secret columns).
  * The chunked path `webhook.relay.start` + `webhook.relay.chunk` is the sole
  * legitimate route from Platform to `onWebhookRelay`. */
 export declare const platformToOrchestratorMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{

package/dist/protocol/messages/platform-orchestrator.js

@@ -173,12 +173,12 @@ const trustPolicyUpdateSchema = z.object({
 *
 * NOT a wire-parseable schema: this shape is intentionally absent from the
 * `platformToOrchestratorMessageSchema` discriminated union so that a rogue
-* or compromised Platform process (A10) cannot fabricate one and bypass the
+* or compromised Platform process cannot fabricate one and bypass the
 * on-orchestrator HMAC verification gate. The only legitimate construction
 * site is `completeChunkedRelay` in `packages/orchestrator/src/ws/platform-client.ts`,
 * which synthesizes this shape AFTER `onVerifyInbound` returns `'accepted'`.
 *
-* Migration `packages/platform/src/db/migrations/012_drop_webhook_secret_columns.ts`
+* The Platform migration that dropped the webhook secret columns
 * makes the orch-side `verifyInboundWebhook` (called from `onVerifyInbound` on
 * the chunked relay path `webhook.relay.start` / `webhook.relay.chunk`) the
 * sole trust boundary against a malicious Platform; keeping this schema OUT
@@ -363,7 +363,7 @@ const platformCapabilitiesMessageSchema = z.object({
 * Platform's monitoring system: a malformed or hostile push fails Zod
 * parse at the WS edge and never reaches the aggregator or the Mimir
 * relay. The content-level allow-list (catalog) is enforced one step
-* deeper — see `packages/platform/src/ws/metrics-filter.ts`.
+* deeper, in the Platform's orchestrator-metrics filter.
 *
 * Caps:
 * - 2000 metric data points per push (one orch ships ~60 today)
@@ -543,10 +543,10 @@ const orchCapabilitiesUpdateSchema = z.object({
 * The single-frame `webhookRelaySchema` is intentionally NOT a member of this
 * union: that shape carries an attacker-controlled `payload` and pre-existed
 * the chunked relay's on-orch HMAC verification, so accepting it on the wire
-* would let a compromised Platform (A10) fabricate webhook deliveries that
+* would let a compromised Platform fabricate webhook deliveries that
 * bypass the only trust boundary against a malicious Platform (see the
-* docblock on `webhookRelaySchema` above and migration
-* `packages/platform/src/db/migrations/012_drop_webhook_secret_columns.ts`).
+* docblock on `webhookRelaySchema` above and the Platform migration that
+* dropped the webhook secret columns).
 * The chunked path `webhook.relay.start` + `webhook.relay.chunk` is the sole
 * legitimate route from Platform to `onWebhookRelay`. */
 const platformToOrchestratorMessageSchema = z.discriminatedUnion("type", [

package/dist/registration/registerable-trigger-type.d.ts

@@ -14,7 +14,7 @@ import { z } from 'zod';
  *      matched via the per-event lock file pipeline on the same-source path
  *      (e.g. a real GitHub push webhook). Registering them in addition is
  *      what makes cross-source dispatch work for a generic webhook that
- *      targets an externally-hosted repo (phase 28.5): the cross-source
+ *      targets an externally-hosted repo: the cross-source
  *      branch looks up `(customer_id, repo_identifier)` and reuses the
  *      stored `provider_context` (installation id, app id, …) to mint
  *      credentials for the actual provider bundle that owns the repo.

package/dist/registration/registerable-trigger-type.js

@@ -16,7 +16,7 @@ import { z } from "zod";
 *      matched via the per-event lock file pipeline on the same-source path
 *      (e.g. a real GitHub push webhook). Registering them in addition is
 *      what makes cross-source dispatch work for a generic webhook that
-*      targets an externally-hosted repo (phase 28.5): the cross-source
+*      targets an externally-hosted repo: the cross-source
 *      branch looks up `(customer_id, repo_identifier)` and reuses the
 *      stored `provider_context` (installation id, app id, …) to mint
 *      credentials for the actual provider bundle that owns the repo.

package/dist/trigger/decision-trace.d.ts

@@ -30,6 +30,12 @@ export interface WorkflowDecision {
     checks: TraceEntry[];
     /** Summary reason */
     summary: string;
+    /**
+     * The `paths` lists of triggers that matched only because the changed files
+     * were unavailable while a git range existed. Set only when no trigger
+     * matched outright; the agent decides these from its clone.
+     */
+    deferredPaths?: string[][];
 }
 /**
  * Max characters of any free-text field a trace entry carries, so an
@@ -159,9 +165,9 @@ export declare function createCommitMessageTraceEntry(args: {
  * What a withheld trace field is replaced with when the reader does not hold
  * `event_log:read_payload`.
  *
- * Lives here rather than beside the Platform's redactor because three packages
- * read it: the Platform writes it, the dashboard renders it, and the E2E suite
- * asserts the permission boundary against it. A literal repeated at each site
+ * Lives here rather than beside the Platform's redactor because it crosses
+ * packages: the Platform writes it, the dashboard renders it, and tests assert
+ * the permission boundary against it. A literal repeated at each site
  * would drift into a marker one of them no longer recognizes.
  */
 export declare const REDACTED_TRACE_FIELD = "[redacted \u2014 requires event_log:read_payload]";

package/dist/trigger/decision-trace.js

@@ -145,9 +145,9 @@ function createCommitMessageTraceEntry(args) {
 * What a withheld trace field is replaced with when the reader does not hold
 * `event_log:read_payload`.
 *
-* Lives here rather than beside the Platform's redactor because three packages
-* read it: the Platform writes it, the dashboard renders it, and the E2E suite
-* asserts the permission boundary against it. A literal repeated at each site
+* Lives here rather than beside the Platform's redactor because it crosses
+* packages: the Platform writes it, the dashboard renders it, and tests assert
+* the permission boundary against it. A literal repeated at each site
 * would drift into a marker one of them no longer recognizes.
 */
 const REDACTED_TRACE_FIELD = "[redacted — requires event_log:read_payload]";

package/dist/trigger/diff-range.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Which files an event changed, expressed as a git range.
+ *
+ * The one definition the orchestrator's changed-files fetchers and the agent's
+ * clone diff share, so both layers reach the same answer from the same event.
+ * Pure — no I/O and no `node:*` import — because the engine barrel is
+ * browser-safe.
+ */
+import { z } from 'zod';
+export declare const diffRangeKindSchema: z.ZodEnum<{
+    deleted: "deleted";
+    "new-branch": "new-branch";
+    none: "none";
+    pr: "pr";
+    "two-dot": "two-dot";
+}>;
+export type DiffRangeKind = z.infer<typeof diffRangeKindSchema>;
+declare const Kind: {
+    deleted: "deleted";
+    "new-branch": "new-branch";
+    none: "none";
+    pr: "pr";
+    "two-dot": "two-dot";
+};
+export type DiffRange = 
+/** `git diff base..head` — a push to an existing branch. */
+{
+    kind: (typeof Kind)['two-dot'];
+    base: string;
+    head: string;
+}
+/** Three-dot `defaultBranch...head` — the files a new branch adds. */
+ | {
+    kind: (typeof Kind)['new-branch'];
+    defaultBranch: string;
+    head: string;
+}
+/** A deleted branch: no files changed. */
+ | {
+    kind: typeof Kind.deleted;
+}
+/** Three-dot `base...HEAD` — a pull request. */
+ | {
+    kind: typeof Kind.pr;
+    base: string;
+}
+/** No range exists: nobody can compute a diff for this event. */
+ | {
+    kind: typeof Kind.none;
+};
+/** The event fields a range is read from; `SimulatedEvent` and the SDK `EventPayload` both fit. */
+export interface DiffRangeEvent {
+    type: string;
+    targetBranch?: string;
+    baseBranch?: string;
+    defaultBranch?: string;
+    payload?: Record<string, unknown>;
+}
+/** Whether a SHA is git's all-zero placeholder (a created or deleted ref). */
+export declare function isZeroSha(sha: string): boolean;
+/** The git range an event changed, or `none` when no diff exists anywhere. */
+export declare function resolveDiffRange(event: DiffRangeEvent): DiffRange;
+/** Whether a range lets an agent compute the diff the orchestrator could not. */
+export declare function isDeferrableRange(range: DiffRange): boolean;
+export {};
+//# sourceMappingURL=diff-range.d.ts.map

package/dist/trigger/diff-range.js

@@ -0,0 +1,68 @@
+import "../rolldown-runtime-ClRpJifh.js";
+import { z } from "zod";
+//#region src/trigger/diff-range.ts
+/**
+* Which files an event changed, expressed as a git range.
+*
+* The one definition the orchestrator's changed-files fetchers and the agent's
+* clone diff share, so both layers reach the same answer from the same event.
+* Pure — no I/O and no `node:*` import — because the engine barrel is
+* browser-safe.
+*/
+const diffRangeKindSchema = z.enum([
+	"two-dot",
+	"new-branch",
+	"deleted",
+	"pr",
+	"none"
+]);
+const Kind = diffRangeKindSchema.enum;
+const ZERO_SHA_RE = /^0+$/;
+/** Whether a SHA is git's all-zero placeholder (a created or deleted ref). */
+function isZeroSha(sha) {
+	return ZERO_SHA_RE.test(sha);
+}
+function nonEmptyString(value) {
+	return typeof value === "string" && value.length > 0 ? value : void 0;
+}
+function defaultBranchOf(event) {
+	if (event.defaultBranch) return event.defaultBranch;
+	const repository = event.payload?.repository;
+	if (repository === null || typeof repository !== "object") return void 0;
+	return nonEmptyString(repository.default_branch);
+}
+/** The git range an event changed, or `none` when no diff exists anywhere. */
+function resolveDiffRange(event) {
+	if (event.type === "pull_request") {
+		const base = event.baseBranch ?? event.targetBranch;
+		return base ? {
+			kind: Kind.pr,
+			base
+		} : { kind: Kind.none };
+	}
+	if (event.type !== "push") return { kind: Kind.none };
+	const before = nonEmptyString(event.payload?.before);
+	const after = nonEmptyString(event.payload?.after);
+	if (!before || !after) return { kind: Kind.none };
+	if (isZeroSha(after)) return { kind: Kind.deleted };
+	if (!isZeroSha(before)) return {
+		kind: Kind["two-dot"],
+		base: before,
+		head: after
+	};
+	const defaultBranch = defaultBranchOf(event);
+	if (!defaultBranch || defaultBranch === event.targetBranch) return { kind: Kind.none };
+	return {
+		kind: Kind["new-branch"],
+		defaultBranch,
+		head: after
+	};
+}
+/** Whether a range lets an agent compute the diff the orchestrator could not. */
+function isDeferrableRange(range) {
+	return range.kind === Kind["two-dot"] || range.kind === Kind["new-branch"] || range.kind === Kind.pr;
+}
+//#endregion
+export { diffRangeKindSchema, isDeferrableRange, isZeroSha, resolveDiffRange };
+
+//# sourceMappingURL=diff-range.js.map

package/dist/trigger/matcher.d.ts

@@ -17,10 +17,23 @@ export declare function matchPathPatterns(paths: readonly string[], changedFiles
  * Empty array = no filtering (matches all repos).
  */
 export declare function matchRepoPatterns(repos: readonly LockBranchPattern[], sourceRepo: string): boolean;
+/** Set by a push/pr trigger whose `paths` check passed only because the diff was unavailable. */
+/** Trace value of a `paths` check that read an unavailable diff. */
+export declare const UnavailablePathsTrace: {
+    /** A git range exists: the agent decides from its clone. */
+    readonly DecidedOnAgent: '[unavailable — decided on agent]';
+    /** No range the agent can diff: the workflow runs conservatively. */
+    readonly Conservative: '[unavailable — matched conservatively]';
+};
+/** Appended to a matched decision's summary when its paths are left to the agent. */
+export declare const DEFERRED_PATHS_SUMMARY_SUFFIX = " \u2014 paths decided on the agent";
+export interface TriggerMatchNotes {
+    conservativePaths?: readonly string[];
+}
 /**
  * Match a trigger against a simulated event.
  */
-export declare function matchTrigger(trigger: LockTrigger, event: SimulatedEvent, traces: TraceEntry[]): boolean;
+export declare function matchTrigger(trigger: LockTrigger, event: SimulatedEvent, traces: TraceEntry[], notes?: TriggerMatchNotes): boolean;
 /**
  * Match all triggers for a workflow against an event.
  * Returns WorkflowDecision with full trace.

package/dist/trigger/matcher.js

@@ -2,6 +2,7 @@ import "../rolldown-runtime-ClRpJifh.js";
 import { evaluateTextMatch } from "./text-match.js";
 import { TraceCheck, createCommitMessageTraceEntry, createTraceEntry, createWorkflowDecision } from "./decision-trace.js";
 import { getCompiledRegex, getGlobMatcher, getRepoGlobMatcher } from "./compiled-matchers.js";
+import { isDeferrableRange, resolveDiffRange } from "./diff-range.js";
 import { matchJsonPath, matchJsonPathNot } from "./jsonpath-matcher.js";
 //#region src/trigger/matcher.ts
 /**
@@ -142,10 +143,37 @@ function evaluateCommitMessageFilter(trigger, event, traces) {
 	}));
 	return result.pass;
 }
+/** Set by a push/pr trigger whose `paths` check passed only because the diff was unavailable. */
+/** Trace value of a `paths` check that read an unavailable diff. */
+const UnavailablePathsTrace = {
+	/** A git range exists: the agent decides from its clone. */
+	DecidedOnAgent: "[unavailable — decided on agent]",
+	/** No range the agent can diff: the workflow runs conservatively. */
+	Conservative: "[unavailable — matched conservatively]"
+};
+/** Appended to a matched decision's summary when its paths are left to the agent. */
+const DEFERRED_PATHS_SUMMARY_SUFFIX = " — paths decided on the agent";
+/**
+* Evaluate a push/pr trigger's `paths` list and trace it. An `unavailable`
+* diff matches; when the event still has a git range, the match is recorded in
+* `notes` so the workflow's path decision moves to the agent's clone.
+*/
+function checkTriggerPaths(paths, event, traces, notes) {
+	if (paths.length === 0) return true;
+	const changedFiles = event.changedFiles ?? [];
+	const { include, exclude } = splitStringPatterns(paths);
+	const unavailable = event.changedFilesStatus === "unavailable";
+	const deferrable = unavailable && isDeferrableRange(resolveDiffRange(event));
+	const matches = matchPathPatterns(paths, changedFiles, event.changedFilesStatus);
+	const value = !unavailable ? `[${changedFiles.join(", ")}]` : deferrable ? UnavailablePathsTrace.DecidedOnAgent : UnavailablePathsTrace.Conservative;
+	traces.push(createTraceEntry("paths", `include: [${include.join(", ")}] exclude: [${exclude.join(", ")}]`, value, matches));
+	if (deferrable && notes) notes.conservativePaths = paths;
+	return matches;
+}
 /**
 * Match a PR trigger against a simulated event.
 */
-function matchPrTrigger(trigger, event, traces) {
+function matchPrTrigger(trigger, event, traces, notes) {
 	if (event.type !== "pull_request") {
 		traces.push(createTraceEntry("event type", "pull_request", event.type, false));
 		return false;
@@ -171,13 +199,7 @@ function matchPrTrigger(trigger, event, traces) {
 		traces.push(createTraceEntry("source branch", trigger.sourceBranches.map((p) => p.pattern).join("|"), event.sourceBranch, matches));
 		if (!matches) return false;
 	}
-	if (trigger.paths.length > 0) {
-		const changedFiles = event.changedFiles ?? [];
-		const { include, exclude } = splitStringPatterns(trigger.paths);
-		const matches = matchPathPatterns(trigger.paths, changedFiles, event.changedFilesStatus);
-		traces.push(createTraceEntry("paths", `include: [${include.join(", ")}] exclude: [${exclude.join(", ")}]`, event.changedFilesStatus === "unavailable" ? "[unavailable — matched conservatively]" : `[${changedFiles.join(", ")}]`, matches));
-		if (!matches) return false;
-	}
+	if (!checkTriggerPaths(trigger.paths, event, traces, notes)) return false;
 	if (!evaluateCommitMessageFilter(trigger, event, traces)) return false;
 	if (!evaluateRepoFilter(trigger, event, traces)) return false;
 	return true;
@@ -185,7 +207,7 @@ function matchPrTrigger(trigger, event, traces) {
 /**
 * Match a push trigger against a simulated event.
 */
-function matchPushTrigger(trigger, event, traces) {
+function matchPushTrigger(trigger, event, traces, notes) {
 	if (event.type !== "push") {
 		traces.push(createTraceEntry("event type", "push", event.type, false));
 		return false;
@@ -196,13 +218,7 @@ function matchPushTrigger(trigger, event, traces) {
 		traces.push(createTraceEntry("branch", trigger.branches.map((p) => p.pattern).join("|"), event.targetBranch, matches));
 		if (!matches) return false;
 	}
-	if (trigger.paths.length > 0) {
-		const changedFiles = event.changedFiles ?? [];
-		const { include, exclude } = splitStringPatterns(trigger.paths);
-		const matches = matchPathPatterns(trigger.paths, changedFiles, event.changedFilesStatus);
-		traces.push(createTraceEntry("paths", `include: [${include.join(", ")}] exclude: [${exclude.join(", ")}]`, event.changedFilesStatus === "unavailable" ? "[unavailable — matched conservatively]" : `[${changedFiles.join(", ")}]`, matches));
-		if (!matches) return false;
-	}
+	if (!checkTriggerPaths(trigger.paths, event, traces, notes)) return false;
 	if (!evaluateCommitMessageFilter(trigger, event, traces)) return false;
 	if (!evaluateRepoFilter(trigger, event, traces)) return false;
 	return true;
@@ -737,10 +753,10 @@ function matchLifecycleTrigger(trigger, event, traces) {
 /**
 * Match a trigger against a simulated event.
 */
-function matchTrigger(trigger, event, traces) {
+function matchTrigger(trigger, event, traces, notes) {
 	switch (trigger._type) {
-		case "pr": return matchPrTrigger(trigger, event, traces);
-		case "push": return matchPushTrigger(trigger, event, traces);
+		case "pr": return matchPrTrigger(trigger, event, traces, notes);
+		case "push": return matchPushTrigger(trigger, event, traces, notes);
 		case "tag": return matchTagTrigger(trigger, event, traces);
 		case "comment": return matchCommentTrigger(trigger, event, traces);
 		case "review": return matchReviewTrigger(trigger, event, traces);
@@ -772,13 +788,29 @@ function matchTrigger(trigger, event, traces) {
 function matchWorkflowTriggers(workflow, event) {
 	const allTraces = [];
 	if (workflow.triggers.length === 0) return createWorkflowDecision(workflow.name, false, [], void 0, "No triggers defined");
+	let firstDeferred;
+	const deferredPaths = [];
 	for (let i = 0; i < workflow.triggers.length; i++) {
 		const trigger = workflow.triggers[i];
 		if (trigger == null) continue;
 		const triggerTraces = [];
-		if (matchTrigger(trigger, event, triggerTraces)) return createWorkflowDecision(workflow.name, true, triggerTraces, i, `Matched trigger ${i + 1} (${trigger._type})`);
+		const notes = {};
+		if (matchTrigger(trigger, event, triggerTraces, notes)) {
+			if (notes.conservativePaths === void 0) return createWorkflowDecision(workflow.name, true, triggerTraces, i, `Matched trigger ${i + 1} (${trigger._type})`);
+			deferredPaths.push([...notes.conservativePaths]);
+			firstDeferred ??= {
+				index: i,
+				traces: triggerTraces,
+				type: trigger._type
+			};
+			continue;
+		}
 		allTraces.push(...triggerTraces);
 	}
+	if (firstDeferred) return {
+		...createWorkflowDecision(workflow.name, true, firstDeferred.traces, firstDeferred.index, `Matched trigger ${firstDeferred.index + 1} (${firstDeferred.type})${DEFERRED_PATHS_SUMMARY_SUFFIX}`),
+		deferredPaths
+	};
 	return createWorkflowDecision(workflow.name, false, allTraces, void 0, "No triggers matched");
 }
 /**
@@ -788,6 +820,6 @@ function matchAllWorkflows(workflows, event) {
 	return workflows.map((w) => matchWorkflowTriggers(w, event));
 }
 //#endregion
-export { matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchTrigger, matchWorkflowTriggers };
+export { DEFERRED_PATHS_SUMMARY_SUFFIX, UnavailablePathsTrace, matchAllWorkflows, matchBranchPattern, matchPathPatterns, matchRepoPatterns, matchTrigger, matchWorkflowTriggers };
 
 //# sourceMappingURL=matcher.js.map

package/dist/trigger/types.d.ts

@@ -732,9 +732,15 @@ export interface ResolvedSandboxGrant {
     capabilities?: string[];
     /** Network override; when set it wins over the config network mode. */
     network?: SandboxNetworkMode;
-    /** Force a read-only rootfs (operator-config path only in Phase 2). */
+    /**
+     * Force a read-only rootfs. The orchestrator does not grant it; the agent's
+     * own config sets it.
+     */
     readonlyRootfs?: boolean;
-    /** Run the container as this user (operator-config path only in Phase 2). */
+    /**
+     * Run the container as this user. The orchestrator does not grant it; the
+     * agent's own config sets it.
+     */
     user?: string;
 }
 /**
@@ -1125,6 +1131,12 @@ export interface SimulatedEvent {
     isForkPR?: boolean;
     /** Base branch ref for PR events (the branch being merged into). */
     baseBranch?: string;
+    /**
+     * The repository's default branch, when the delivery names it. A new-branch
+     * push diffs against it (`resolveDiffRange`); absent, the range falls back to
+     * `payload.repository.default_branch`.
+     */
+    defaultBranch?: string;
     /** Sender username from the webhook payload (e.g. GitHub login). */
     senderUsername?: string;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kici-dev/engine",
-  "version": "0.11.0",
+  "version": "0.13.0",
   "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",
   "keywords": [
     "ci",
@@ -23,7 +23,7 @@
   },
   "license": "AGPL-3.0-only",
   "engines": {
-    "node": ">=24"
+    "node": ">=24.5.0"
   },
   "type": "module",
   "files": [

package/sbom.spdx.json

@@ -2,10 +2,10 @@
   "spdxVersion": "SPDX-2.3",
   "dataLicense": "CC0-1.0",
   "SPDXID": "SPDXRef-DOCUMENT",
-  "name": "@kici-dev/engine@0.11.0",
-  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.11.0/551d6e11-b929-4b7a-9e55-d758c60dec3d",
+  "name": "@kici-dev/engine@0.13.0",
+  "documentNamespace": "https://kici.dev/sbom/%40kici-dev%2Fengine/0.13.0/4b96027f-523a-4ba7-ab05-2b81a6793c87",
   "creationInfo": {
-    "created": "2026-09-25T16:08:00Z",
+    "created": "2026-09-30T15:38:56Z",
     "creators": [
       "Tool: kici-sbom-generator"
     ]
@@ -54,7 +54,7 @@
     {
       "SPDXID": "SPDXRef-RootPackage",
       "name": "@kici-dev/engine",
-      "versionInfo": "0.11.0",
+      "versionInfo": "0.13.0",
       "downloadLocation": "NOASSERTION",
       "filesAnalyzed": false,
       "licenseConcluded": "NOASSERTION",
@@ -65,7 +65,7 @@
         {
           "referenceCategory": "PACKAGE-MANAGER",
           "referenceType": "purl",
-          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.11.0"
+          "referenceLocator": "pkg:npm/%40kici-dev/engine@0.13.0"
         }
       ],
       "description": "Shared business logic for the KiCI CI/CD stack: protocol, triggers, state machine, and provider interfaces used by the Platform relay, orchestrator, and compiler.",