@kici-dev/engine 0.14.2 → 0.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (58) hide show
  1. package/dist/approval/expiry-duration.d.ts +11 -0
  2. package/dist/approval/expiry-duration.js +29 -0
  3. package/dist/audit/access-log-policy.js +2 -0
  4. package/dist/audit/retention-policy.d.ts +1 -1
  5. package/dist/audit/retention-policy.js +5 -1
  6. package/dist/auth/permissions.d.ts +69 -0
  7. package/dist/auth/permissions.js +51 -0
  8. package/dist/context/hold-type.d.ts +0 -19
  9. package/dist/context/hold-type.js +1 -37
  10. package/dist/context/index.d.ts +1 -1
  11. package/dist/context/index.js +2 -2
  12. package/dist/index.d.ts +7 -2
  13. package/dist/index.js +20 -15
  14. package/dist/labels.d.ts +2 -17
  15. package/dist/labels.js +3 -33
  16. package/dist/mcp/held-run-resolve.d.ts +2 -5
  17. package/dist/mcp/held-run-resolve.js +3 -4
  18. package/dist/metrics/metric-catalog.generated.d.ts +0 -5
  19. package/dist/metrics/metric-catalog.generated.js +0 -6
  20. package/dist/protocol/messages/access-log.d.ts +10 -0
  21. package/dist/protocol/messages/access-log.js +2 -0
  22. package/dist/protocol/messages/auth.d.ts +7 -8
  23. package/dist/protocol/messages/auth.js +12 -17
  24. package/dist/protocol/messages/browser.js +1 -1
  25. package/dist/protocol/messages/capabilities.d.ts +21 -100
  26. package/dist/protocol/messages/capabilities.js +22 -124
  27. package/dist/protocol/messages/dashboard.d.ts +64 -22
  28. package/dist/protocol/messages/dashboard.js +43 -40
  29. package/dist/protocol/messages/execution-status.d.ts +3 -3
  30. package/dist/protocol/messages/execution-status.js +7 -12
  31. package/dist/protocol/messages/join.d.ts +73 -2
  32. package/dist/protocol/messages/join.js +101 -12
  33. package/dist/protocol/messages/orchestrator-agent.d.ts +35 -40
  34. package/dist/protocol/messages/orchestrator-agent.js +63 -96
  35. package/dist/protocol/messages/peer.d.ts +278 -26
  36. package/dist/protocol/messages/peer.js +120 -65
  37. package/dist/protocol/messages/platform-orchestrator.d.ts +36 -141
  38. package/dist/protocol/messages/platform-orchestrator.js +24 -86
  39. package/dist/protocol/messages/source-registration.d.ts +0 -13
  40. package/dist/protocol/messages/source-registration.js +9 -10
  41. package/dist/protocol/version.d.ts +9 -15
  42. package/dist/protocol/version.js +9 -15
  43. package/dist/provenance/id-token-claim-names.d.ts +3 -5
  44. package/dist/provenance/id-token-claim-names.js +3 -5
  45. package/dist/status/presentation.d.ts +2 -14
  46. package/dist/status/presentation.js +3 -23
  47. package/dist/trigger/types.d.ts +125 -34
  48. package/dist/trigger/types.js +9 -24
  49. package/dist/util/date.d.ts +7 -0
  50. package/dist/util/date.js +14 -0
  51. package/dist/util/parse-duration.d.ts +6 -0
  52. package/dist/util/parse-duration.js +21 -0
  53. package/dist/util/sleep.d.ts +3 -0
  54. package/dist/util/sleep.js +10 -0
  55. package/dist/webhook/webhook-url-format.d.ts +2 -2
  56. package/dist/webhook/webhook-url-format.js +2 -2
  57. package/package.json +1 -1
  58. package/sbom.spdx.json +5 -5
@@ -22,29 +22,54 @@ declare const scalerCapacitySummarySchema: z.ZodObject<{
22
22
  spawnsOnLocalHost: z.ZodOptional<z.ZodBoolean>;
23
23
  labelSetMandatoryLabels: z.ZodArray<z.ZodArray<z.ZodString>>;
24
24
  }, z.core.$strict>;
25
- /** Peer hello: initiator sends ephemeral X25519 public key and nonce. */
25
+ /** Peer authentication schemes. A server lists the ones it accepts in `peer.hello`. */
26
+ export declare const PeerAuthScheme: z.ZodEnum<{
27
+ "mutual-v2": "mutual-v2";
28
+ }>;
29
+ export type PeerAuthScheme = z.infer<typeof PeerAuthScheme>;
30
+ /** How a peer proves itself: with its persisted credential, or with a join token on first join. */
31
+ export declare const PeerAuthMode: z.ZodEnum<{
32
+ credential: "credential";
33
+ token: "token";
34
+ }>;
35
+ export type PeerAuthMode = z.infer<typeof PeerAuthMode>;
36
+ /**
37
+ * The reason a server gives a peer that authenticates without mutual-v2 (a
38
+ * proof or token field, or no scheme). It is none of the credential-divergence
39
+ * reasons, so that peer keeps its credential file.
40
+ */
41
+ export declare const PEER_MUTUAL_AUTH_REQUIRED_REASON = "Mutual peer authentication required";
42
+ /** Peer hello: the server sends its ephemeral X25519 public key, a nonce and its schemes. */
26
43
  export declare const peerHelloSchema: z.ZodObject<{
27
44
  type: z.ZodLiteral<"peer.hello">;
28
45
  ephemeralPublicKey: z.ZodString;
29
46
  nonce: z.ZodString;
47
+ authSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
30
48
  }, z.core.$strip>;
31
49
  /** Peer hello response: responder sends their ephemeral X25519 public key. */
32
50
  export declare const peerHelloResponseSchema: z.ZodObject<{
33
51
  type: z.ZodLiteral<"peer.hello.response">;
34
52
  ephemeralPublicKey: z.ZodString;
35
53
  }, z.core.$strip>;
36
- /** Peer auth request sent after ECDH handshake (encrypted channel established). */
54
+ /** Peer auth request sent after the ECDH handshake, under the handshake key. */
37
55
  export declare const peerAuthRequestSchema: z.ZodObject<{
38
56
  type: z.ZodLiteral<"peer.auth.request">;
39
57
  instanceId: z.ZodString;
40
- token: z.ZodOptional<z.ZodString>;
41
- proof: z.ZodOptional<z.ZodString>;
42
58
  protocolVersion: z.ZodNumber;
43
59
  softwareVersion: z.ZodOptional<z.ZodString>;
44
60
  role: z.ZodOptional<z.ZodEnum<{
45
61
  coordinator: "coordinator";
46
62
  worker: "worker";
47
63
  }>>;
64
+ scheme: z.ZodEnum<{
65
+ "mutual-v2": "mutual-v2";
66
+ }>;
67
+ mode: z.ZodEnum<{
68
+ credential: "credential";
69
+ token: "token";
70
+ }>;
71
+ clientProof: z.ZodString;
72
+ tokenRouting: z.ZodOptional<z.ZodString>;
48
73
  }, z.core.$strip>;
49
74
  /** Peer auth response indicating whether the connection was accepted. */
50
75
  export declare const peerAuthResponseSchema: z.ZodObject<{
@@ -52,6 +77,7 @@ export declare const peerAuthResponseSchema: z.ZodObject<{
52
77
  accepted: z.ZodBoolean;
53
78
  instanceId: z.ZodOptional<z.ZodString>;
54
79
  reason: z.ZodOptional<z.ZodString>;
80
+ serverProof: z.ZodOptional<z.ZodString>;
55
81
  sessionCredential: z.ZodOptional<z.ZodString>;
56
82
  role: z.ZodOptional<z.ZodString>;
57
83
  softwareVersion: z.ZodOptional<z.ZodString>;
@@ -173,10 +199,10 @@ export declare const jobRerouteSchema: z.ZodObject<{
173
199
  }, z.core.$strip>], "kind">>>;
174
200
  triedConnections: z.ZodArray<z.ZodString>;
175
201
  maxHops: z.ZodNumber;
176
- spawnRetry: z.ZodOptional<z.ZodObject<{
202
+ spawnRetry: z.ZodObject<{
177
203
  maxAttempts: z.ZodNumber;
178
204
  backoffMs: z.ZodNumber;
179
- }, z.core.$strip>>;
205
+ }, z.core.$strip>;
180
206
  coordinatorId: z.ZodString;
181
207
  requestId: z.ZodOptional<z.ZodString>;
182
208
  traceId: z.ZodOptional<z.ZodString>;
@@ -313,10 +339,10 @@ declare const peerLogChunkSchema: z.ZodObject<{
313
339
  lines: z.ZodArray<z.ZodObject<{
314
340
  text: z.ZodString;
315
341
  timestamp: z.ZodNumber;
316
- stream: z.ZodOptional<z.ZodEnum<{
342
+ stream: z.ZodEnum<{
317
343
  stderr: "stderr";
318
344
  stdout: "stdout";
319
- }>>;
345
+ }>;
320
346
  }, z.core.$strip>>;
321
347
  }, z.core.$strip>;
322
348
  /** Cache upload request: worker -> coordinator. Worker agent needs upload URL. */
@@ -340,6 +366,110 @@ declare const peerCacheUploadResponseSchema: z.ZodObject<{
340
366
  jobId: z.ZodString;
341
367
  uploadUrl: z.ZodString;
342
368
  }, z.core.$strip>;
369
+ /**
370
+ * What a scaler config reload did on one orchestrator. `rejected`: the file did
371
+ * not load or validate, or an added scaler did not build, and nothing applied.
372
+ * `not-configured`: the orchestrator runs without a scaler config, so there is
373
+ * nothing to reload. `unreachable`: the request did not reach the orchestrator,
374
+ * or it did not answer in time.
375
+ */
376
+ export declare const ScalerReloadOutcome: z.ZodEnum<{
377
+ applied: "applied";
378
+ "not-configured": "not-configured";
379
+ rejected: "rejected";
380
+ unreachable: "unreachable";
381
+ }>;
382
+ export type ScalerReloadOutcome = z.infer<typeof ScalerReloadOutcome>;
383
+ /**
384
+ * What an applied scaler reload changed, as scaler names per bucket. `updated`
385
+ * holds the kept scalers whose entry changed and `unchanged` the rest of them;
386
+ * `global` names the changed top-level limits (`globalMaxAgents`,
387
+ * `globalResourceCap`).
388
+ */
389
+ export declare const scalerReloadPlanSchema: z.ZodObject<{
390
+ added: z.ZodArray<z.ZodString>;
391
+ updated: z.ZodArray<z.ZodString>;
392
+ unchanged: z.ZodArray<z.ZodString>;
393
+ retired: z.ZodArray<z.ZodString>;
394
+ resurrected: z.ZodArray<z.ZodString>;
395
+ global: z.ZodArray<z.ZodString>;
396
+ }, z.core.$strip>;
397
+ export type ScalerReloadPlan = z.infer<typeof scalerReloadPlanSchema>;
398
+ /** One orchestrator's scaler reload outcome, its plan when applied, its errors when refused. */
399
+ export declare const scalerReloadAnswerSchema: z.ZodObject<{
400
+ outcome: z.ZodEnum<{
401
+ applied: "applied";
402
+ "not-configured": "not-configured";
403
+ rejected: "rejected";
404
+ unreachable: "unreachable";
405
+ }>;
406
+ plan: z.ZodOptional<z.ZodObject<{
407
+ added: z.ZodArray<z.ZodString>;
408
+ updated: z.ZodArray<z.ZodString>;
409
+ unchanged: z.ZodArray<z.ZodString>;
410
+ retired: z.ZodArray<z.ZodString>;
411
+ resurrected: z.ZodArray<z.ZodString>;
412
+ global: z.ZodArray<z.ZodString>;
413
+ }, z.core.$strip>>;
414
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
415
+ }, z.core.$strip>;
416
+ export type ScalerReloadAnswer = z.infer<typeof scalerReloadAnswerSchema>;
417
+ /** One orchestrator's answer to a scaler reload, as `kici-admin scaler reload` reports it. */
418
+ export declare const scalerReloadInstanceResultSchema: z.ZodObject<{
419
+ outcome: z.ZodEnum<{
420
+ applied: "applied";
421
+ "not-configured": "not-configured";
422
+ rejected: "rejected";
423
+ unreachable: "unreachable";
424
+ }>;
425
+ plan: z.ZodOptional<z.ZodObject<{
426
+ added: z.ZodArray<z.ZodString>;
427
+ updated: z.ZodArray<z.ZodString>;
428
+ unchanged: z.ZodArray<z.ZodString>;
429
+ retired: z.ZodArray<z.ZodString>;
430
+ resurrected: z.ZodArray<z.ZodString>;
431
+ global: z.ZodArray<z.ZodString>;
432
+ }, z.core.$strip>>;
433
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
434
+ instanceId: z.ZodString;
435
+ role: z.ZodEnum<{
436
+ coordinator: "coordinator";
437
+ unknown: "unknown";
438
+ worker: "worker";
439
+ }>;
440
+ detail: z.ZodOptional<z.ZodString>;
441
+ }, z.core.$strip>;
442
+ export type ScalerReloadInstanceResult = z.infer<typeof scalerReloadInstanceResultSchema>;
443
+ /**
444
+ * Scaler reload request: the orchestrator that received `kici-admin scaler
445
+ * reload` asks each connected peer to re-read its own scaler config. The peer
446
+ * answers with peer.scaler.reload.response.
447
+ */
448
+ export declare const peerScalerReloadRequestSchema: z.ZodObject<{
449
+ type: z.ZodLiteral<"peer.scaler.reload.request">;
450
+ messageId: z.ZodString;
451
+ }, z.core.$strip>;
452
+ /** Scaler reload response: the peer's outcome, its plan when applied, its errors when rejected. */
453
+ export declare const peerScalerReloadResponseSchema: z.ZodObject<{
454
+ outcome: z.ZodEnum<{
455
+ applied: "applied";
456
+ "not-configured": "not-configured";
457
+ rejected: "rejected";
458
+ unreachable: "unreachable";
459
+ }>;
460
+ plan: z.ZodOptional<z.ZodObject<{
461
+ added: z.ZodArray<z.ZodString>;
462
+ updated: z.ZodArray<z.ZodString>;
463
+ unchanged: z.ZodArray<z.ZodString>;
464
+ retired: z.ZodArray<z.ZodString>;
465
+ resurrected: z.ZodArray<z.ZodString>;
466
+ global: z.ZodArray<z.ZodString>;
467
+ }, z.core.$strip>>;
468
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
469
+ type: z.ZodLiteral<"peer.scaler.reload.response">;
470
+ messageId: z.ZodString;
471
+ detail: z.ZodOptional<z.ZodString>;
472
+ }, z.core.$strip>;
343
473
  /**
344
474
  * Config reload request: forwarded from one orchestrator to a specific peer
345
475
  * when an operator calls POST /admin/config/reload with a `target` parameter.
@@ -363,6 +493,23 @@ export declare const peerConfigReloadResponseSchema: z.ZodObject<{
363
493
  errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
364
494
  restartRequired: z.ZodOptional<z.ZodArray<z.ZodString>>;
365
495
  fieldsChanged: z.ZodOptional<z.ZodArray<z.ZodString>>;
496
+ scaler: z.ZodOptional<z.ZodObject<{
497
+ outcome: z.ZodEnum<{
498
+ applied: "applied";
499
+ "not-configured": "not-configured";
500
+ rejected: "rejected";
501
+ unreachable: "unreachable";
502
+ }>;
503
+ plan: z.ZodOptional<z.ZodObject<{
504
+ added: z.ZodArray<z.ZodString>;
505
+ updated: z.ZodArray<z.ZodString>;
506
+ unchanged: z.ZodArray<z.ZodString>;
507
+ retired: z.ZodArray<z.ZodString>;
508
+ resurrected: z.ZodArray<z.ZodString>;
509
+ global: z.ZodArray<z.ZodString>;
510
+ }, z.core.$strip>>;
511
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
512
+ }, z.core.$strip>>;
366
513
  }, z.core.$strip>;
367
514
  /** How a live Firecracker VM relates to the orchestrator on its host. */
368
515
  export declare const ScalerVmStatus: z.ZodEnum<{
@@ -542,7 +689,8 @@ export declare const peerForgetResponseSchema: z.ZodObject<{
542
689
  */
543
690
  export declare const workerClusterSettingsSchema: z.ZodObject<{
544
691
  agentTokenTtlMs: z.ZodNumber;
545
- firecrackerApiSocketWaitMs: z.ZodOptional<z.ZodNumber>;
692
+ firecrackerApiSocketWaitMs: z.ZodNumber;
693
+ concurrencyWaitTimeoutMs: z.ZodNumber;
546
694
  }, z.core.$strip>;
547
695
  /**
548
696
  * Cluster-settings pull request: a DB-less worker asks a connected coordinator
@@ -564,7 +712,8 @@ export declare const peerClusterSettingsResponseSchema: z.ZodObject<{
564
712
  version: z.ZodNumber;
565
713
  settings: z.ZodObject<{
566
714
  agentTokenTtlMs: z.ZodNumber;
567
- firecrackerApiSocketWaitMs: z.ZodOptional<z.ZodNumber>;
715
+ firecrackerApiSocketWaitMs: z.ZodNumber;
716
+ concurrencyWaitTimeoutMs: z.ZodNumber;
568
717
  }, z.core.$strip>;
569
718
  }, z.core.$strip>;
570
719
  /** Which of THIS peer's downstream nodes to gather. all=true ignores the id lists. */
@@ -642,29 +791,38 @@ export declare const peerScalerEventSchema: z.ZodObject<{
642
791
  final: z.ZodOptional<z.ZodBoolean>;
643
792
  }, z.core.$strip>;
644
793
  /** All peer-to-peer messages (outbound from this node). */
645
- export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
794
+ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
646
795
  type: z.ZodLiteral<"peer.hello">;
647
796
  ephemeralPublicKey: z.ZodString;
648
797
  nonce: z.ZodString;
798
+ authSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
649
799
  }, z.core.$strip>, z.ZodObject<{
650
800
  type: z.ZodLiteral<"peer.hello.response">;
651
801
  ephemeralPublicKey: z.ZodString;
652
802
  }, z.core.$strip>, z.ZodObject<{
653
803
  type: z.ZodLiteral<"peer.auth.request">;
654
804
  instanceId: z.ZodString;
655
- token: z.ZodOptional<z.ZodString>;
656
- proof: z.ZodOptional<z.ZodString>;
657
805
  protocolVersion: z.ZodNumber;
658
806
  softwareVersion: z.ZodOptional<z.ZodString>;
659
807
  role: z.ZodOptional<z.ZodEnum<{
660
808
  coordinator: "coordinator";
661
809
  worker: "worker";
662
810
  }>>;
811
+ scheme: z.ZodEnum<{
812
+ "mutual-v2": "mutual-v2";
813
+ }>;
814
+ mode: z.ZodEnum<{
815
+ credential: "credential";
816
+ token: "token";
817
+ }>;
818
+ clientProof: z.ZodString;
819
+ tokenRouting: z.ZodOptional<z.ZodString>;
663
820
  }, z.core.$strip>, z.ZodObject<{
664
821
  type: z.ZodLiteral<"peer.auth.response">;
665
822
  accepted: z.ZodBoolean;
666
823
  instanceId: z.ZodOptional<z.ZodString>;
667
824
  reason: z.ZodOptional<z.ZodString>;
825
+ serverProof: z.ZodOptional<z.ZodString>;
668
826
  sessionCredential: z.ZodOptional<z.ZodString>;
669
827
  role: z.ZodOptional<z.ZodString>;
670
828
  softwareVersion: z.ZodOptional<z.ZodString>;
@@ -773,10 +931,10 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
773
931
  }, z.core.$strip>], "kind">>>;
774
932
  triedConnections: z.ZodArray<z.ZodString>;
775
933
  maxHops: z.ZodNumber;
776
- spawnRetry: z.ZodOptional<z.ZodObject<{
934
+ spawnRetry: z.ZodObject<{
777
935
  maxAttempts: z.ZodNumber;
778
936
  backoffMs: z.ZodNumber;
779
- }, z.core.$strip>>;
937
+ }, z.core.$strip>;
780
938
  coordinatorId: z.ZodString;
781
939
  requestId: z.ZodOptional<z.ZodString>;
782
940
  traceId: z.ZodOptional<z.ZodString>;
@@ -873,10 +1031,10 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
873
1031
  lines: z.ZodArray<z.ZodObject<{
874
1032
  text: z.ZodString;
875
1033
  timestamp: z.ZodNumber;
876
- stream: z.ZodOptional<z.ZodEnum<{
1034
+ stream: z.ZodEnum<{
877
1035
  stderr: "stderr";
878
1036
  stdout: "stdout";
879
- }>>;
1037
+ }>;
880
1038
  }, z.core.$strip>>;
881
1039
  }, z.core.$strip>, z.ZodObject<{
882
1040
  type: z.ZodLiteral<"peer.cache.upload.request">;
@@ -907,6 +1065,23 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
907
1065
  errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
908
1066
  restartRequired: z.ZodOptional<z.ZodArray<z.ZodString>>;
909
1067
  fieldsChanged: z.ZodOptional<z.ZodArray<z.ZodString>>;
1068
+ scaler: z.ZodOptional<z.ZodObject<{
1069
+ outcome: z.ZodEnum<{
1070
+ applied: "applied";
1071
+ "not-configured": "not-configured";
1072
+ rejected: "rejected";
1073
+ unreachable: "unreachable";
1074
+ }>;
1075
+ plan: z.ZodOptional<z.ZodObject<{
1076
+ added: z.ZodArray<z.ZodString>;
1077
+ updated: z.ZodArray<z.ZodString>;
1078
+ unchanged: z.ZodArray<z.ZodString>;
1079
+ retired: z.ZodArray<z.ZodString>;
1080
+ resurrected: z.ZodArray<z.ZodString>;
1081
+ global: z.ZodArray<z.ZodString>;
1082
+ }, z.core.$strip>>;
1083
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
1084
+ }, z.core.$strip>>;
910
1085
  }, z.core.$strip>, z.ZodObject<{
911
1086
  type: z.ZodLiteral<"peer.scaler.orphans.request">;
912
1087
  messageId: z.ZodString;
@@ -954,6 +1129,28 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
954
1129
  pid: z.ZodOptional<z.ZodNumber>;
955
1130
  detail: z.ZodString;
956
1131
  }, z.core.$strip>>>;
1132
+ }, z.core.$strip>, z.ZodObject<{
1133
+ type: z.ZodLiteral<"peer.scaler.reload.request">;
1134
+ messageId: z.ZodString;
1135
+ }, z.core.$strip>, z.ZodObject<{
1136
+ outcome: z.ZodEnum<{
1137
+ applied: "applied";
1138
+ "not-configured": "not-configured";
1139
+ rejected: "rejected";
1140
+ unreachable: "unreachable";
1141
+ }>;
1142
+ plan: z.ZodOptional<z.ZodObject<{
1143
+ added: z.ZodArray<z.ZodString>;
1144
+ updated: z.ZodArray<z.ZodString>;
1145
+ unchanged: z.ZodArray<z.ZodString>;
1146
+ retired: z.ZodArray<z.ZodString>;
1147
+ resurrected: z.ZodArray<z.ZodString>;
1148
+ global: z.ZodArray<z.ZodString>;
1149
+ }, z.core.$strip>>;
1150
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
1151
+ type: z.ZodLiteral<"peer.scaler.reload.response">;
1152
+ messageId: z.ZodString;
1153
+ detail: z.ZodOptional<z.ZodString>;
957
1154
  }, z.core.$strip>, z.ZodObject<{
958
1155
  type: z.ZodLiteral<"peer.forget.request">;
959
1156
  messageId: z.ZodString;
@@ -980,7 +1177,8 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
980
1177
  version: z.ZodNumber;
981
1178
  settings: z.ZodObject<{
982
1179
  agentTokenTtlMs: z.ZodNumber;
983
- firecrackerApiSocketWaitMs: z.ZodOptional<z.ZodNumber>;
1180
+ firecrackerApiSocketWaitMs: z.ZodNumber;
1181
+ concurrencyWaitTimeoutMs: z.ZodNumber;
984
1182
  }, z.core.$strip>;
985
1183
  }, z.core.$strip>, z.ZodObject<{
986
1184
  type: z.ZodLiteral<"peer.logs.collect.request">;
@@ -1027,29 +1225,38 @@ export declare const peerToPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObje
1027
1225
  final: z.ZodOptional<z.ZodBoolean>;
1028
1226
  }, z.core.$strip>], "type">;
1029
1227
  /** All peer-to-peer messages (inbound to this node). */
1030
- export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
1228
+ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<readonly [z.ZodObject<{
1031
1229
  type: z.ZodLiteral<"peer.hello">;
1032
1230
  ephemeralPublicKey: z.ZodString;
1033
1231
  nonce: z.ZodString;
1232
+ authSchemes: z.ZodOptional<z.ZodArray<z.ZodString>>;
1034
1233
  }, z.core.$strip>, z.ZodObject<{
1035
1234
  type: z.ZodLiteral<"peer.hello.response">;
1036
1235
  ephemeralPublicKey: z.ZodString;
1037
1236
  }, z.core.$strip>, z.ZodObject<{
1038
1237
  type: z.ZodLiteral<"peer.auth.request">;
1039
1238
  instanceId: z.ZodString;
1040
- token: z.ZodOptional<z.ZodString>;
1041
- proof: z.ZodOptional<z.ZodString>;
1042
1239
  protocolVersion: z.ZodNumber;
1043
1240
  softwareVersion: z.ZodOptional<z.ZodString>;
1044
1241
  role: z.ZodOptional<z.ZodEnum<{
1045
1242
  coordinator: "coordinator";
1046
1243
  worker: "worker";
1047
1244
  }>>;
1245
+ scheme: z.ZodEnum<{
1246
+ "mutual-v2": "mutual-v2";
1247
+ }>;
1248
+ mode: z.ZodEnum<{
1249
+ credential: "credential";
1250
+ token: "token";
1251
+ }>;
1252
+ clientProof: z.ZodString;
1253
+ tokenRouting: z.ZodOptional<z.ZodString>;
1048
1254
  }, z.core.$strip>, z.ZodObject<{
1049
1255
  type: z.ZodLiteral<"peer.auth.response">;
1050
1256
  accepted: z.ZodBoolean;
1051
1257
  instanceId: z.ZodOptional<z.ZodString>;
1052
1258
  reason: z.ZodOptional<z.ZodString>;
1259
+ serverProof: z.ZodOptional<z.ZodString>;
1053
1260
  sessionCredential: z.ZodOptional<z.ZodString>;
1054
1261
  role: z.ZodOptional<z.ZodString>;
1055
1262
  softwareVersion: z.ZodOptional<z.ZodString>;
@@ -1158,10 +1365,10 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
1158
1365
  }, z.core.$strip>], "kind">>>;
1159
1366
  triedConnections: z.ZodArray<z.ZodString>;
1160
1367
  maxHops: z.ZodNumber;
1161
- spawnRetry: z.ZodOptional<z.ZodObject<{
1368
+ spawnRetry: z.ZodObject<{
1162
1369
  maxAttempts: z.ZodNumber;
1163
1370
  backoffMs: z.ZodNumber;
1164
- }, z.core.$strip>>;
1371
+ }, z.core.$strip>;
1165
1372
  coordinatorId: z.ZodString;
1166
1373
  requestId: z.ZodOptional<z.ZodString>;
1167
1374
  traceId: z.ZodOptional<z.ZodString>;
@@ -1258,10 +1465,10 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
1258
1465
  lines: z.ZodArray<z.ZodObject<{
1259
1466
  text: z.ZodString;
1260
1467
  timestamp: z.ZodNumber;
1261
- stream: z.ZodOptional<z.ZodEnum<{
1468
+ stream: z.ZodEnum<{
1262
1469
  stderr: "stderr";
1263
1470
  stdout: "stdout";
1264
- }>>;
1471
+ }>;
1265
1472
  }, z.core.$strip>>;
1266
1473
  }, z.core.$strip>, z.ZodObject<{
1267
1474
  type: z.ZodLiteral<"peer.cache.upload.request">;
@@ -1292,6 +1499,23 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
1292
1499
  errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
1293
1500
  restartRequired: z.ZodOptional<z.ZodArray<z.ZodString>>;
1294
1501
  fieldsChanged: z.ZodOptional<z.ZodArray<z.ZodString>>;
1502
+ scaler: z.ZodOptional<z.ZodObject<{
1503
+ outcome: z.ZodEnum<{
1504
+ applied: "applied";
1505
+ "not-configured": "not-configured";
1506
+ rejected: "rejected";
1507
+ unreachable: "unreachable";
1508
+ }>;
1509
+ plan: z.ZodOptional<z.ZodObject<{
1510
+ added: z.ZodArray<z.ZodString>;
1511
+ updated: z.ZodArray<z.ZodString>;
1512
+ unchanged: z.ZodArray<z.ZodString>;
1513
+ retired: z.ZodArray<z.ZodString>;
1514
+ resurrected: z.ZodArray<z.ZodString>;
1515
+ global: z.ZodArray<z.ZodString>;
1516
+ }, z.core.$strip>>;
1517
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
1518
+ }, z.core.$strip>>;
1295
1519
  }, z.core.$strip>, z.ZodObject<{
1296
1520
  type: z.ZodLiteral<"peer.scaler.orphans.request">;
1297
1521
  messageId: z.ZodString;
@@ -1339,6 +1563,28 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
1339
1563
  pid: z.ZodOptional<z.ZodNumber>;
1340
1564
  detail: z.ZodString;
1341
1565
  }, z.core.$strip>>>;
1566
+ }, z.core.$strip>, z.ZodObject<{
1567
+ type: z.ZodLiteral<"peer.scaler.reload.request">;
1568
+ messageId: z.ZodString;
1569
+ }, z.core.$strip>, z.ZodObject<{
1570
+ outcome: z.ZodEnum<{
1571
+ applied: "applied";
1572
+ "not-configured": "not-configured";
1573
+ rejected: "rejected";
1574
+ unreachable: "unreachable";
1575
+ }>;
1576
+ plan: z.ZodOptional<z.ZodObject<{
1577
+ added: z.ZodArray<z.ZodString>;
1578
+ updated: z.ZodArray<z.ZodString>;
1579
+ unchanged: z.ZodArray<z.ZodString>;
1580
+ retired: z.ZodArray<z.ZodString>;
1581
+ resurrected: z.ZodArray<z.ZodString>;
1582
+ global: z.ZodArray<z.ZodString>;
1583
+ }, z.core.$strip>>;
1584
+ errors: z.ZodOptional<z.ZodArray<z.ZodString>>;
1585
+ type: z.ZodLiteral<"peer.scaler.reload.response">;
1586
+ messageId: z.ZodString;
1587
+ detail: z.ZodOptional<z.ZodString>;
1342
1588
  }, z.core.$strip>, z.ZodObject<{
1343
1589
  type: z.ZodLiteral<"peer.forget.request">;
1344
1590
  messageId: z.ZodString;
@@ -1365,7 +1611,8 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
1365
1611
  version: z.ZodNumber;
1366
1612
  settings: z.ZodObject<{
1367
1613
  agentTokenTtlMs: z.ZodNumber;
1368
- firecrackerApiSocketWaitMs: z.ZodOptional<z.ZodNumber>;
1614
+ firecrackerApiSocketWaitMs: z.ZodNumber;
1615
+ concurrencyWaitTimeoutMs: z.ZodNumber;
1369
1616
  }, z.core.$strip>;
1370
1617
  }, z.core.$strip>, z.ZodObject<{
1371
1618
  type: z.ZodLiteral<"peer.logs.collect.request">;
@@ -1414,6 +1661,9 @@ export declare const peerFromPeerMessageSchema: z.ZodDiscriminatedUnion<[z.ZodOb
1414
1661
  export type PeerCapabilities = z.infer<typeof peerCapabilitiesSchema>;
1415
1662
  export type ScalerCapacitySummary = z.infer<typeof scalerCapacitySummarySchema>;
1416
1663
  export type PeerHeartbeat = z.infer<typeof peerHeartbeatSchema>;
1664
+ export type PeerHello = z.infer<typeof peerHelloSchema>;
1665
+ export type PeerAuthRequest = z.infer<typeof peerAuthRequestSchema>;
1666
+ export type PeerAuthResponse = z.infer<typeof peerAuthResponseSchema>;
1417
1667
  export type JobReroute = z.infer<typeof jobRerouteSchema>;
1418
1668
  export type RerouteSpawnRetry = z.infer<typeof rerouteSpawnRetrySchema>;
1419
1669
  export type JobProgress = z.infer<typeof jobProgressSchema>;
@@ -1430,6 +1680,8 @@ export type PeerConfigReload = z.infer<typeof peerConfigReloadSchema>;
1430
1680
  export type PeerConfigReloadResponse = z.infer<typeof peerConfigReloadResponseSchema>;
1431
1681
  export type PeerScalerOrphansRequest = z.infer<typeof peerScalerOrphansRequestSchema>;
1432
1682
  export type PeerScalerOrphansResponse = z.infer<typeof peerScalerOrphansResponseSchema>;
1683
+ export type PeerScalerReloadRequest = z.infer<typeof peerScalerReloadRequestSchema>;
1684
+ export type PeerScalerReloadResponse = z.infer<typeof peerScalerReloadResponseSchema>;
1433
1685
  export type PeerForgetRequest = z.infer<typeof peerForgetRequestSchema>;
1434
1686
  export type PeerForgetResponse = z.infer<typeof peerForgetResponseSchema>;
1435
1687
  export type WorkerClusterSettings = z.infer<typeof workerClusterSettingsSchema>;