@kici-dev/engine 0.5.0 → 0.6.1

package/dist/protocol/messages/dashboard.d.ts

@@ -381,6 +381,12 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
     baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    jobKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        gate: "gate";
+        proxy: "proxy";
+        standard: "standard";
+    }>>>;
+    summonedRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     startedAt: z.ZodNullable<z.ZodNumber>;
     completedAt: z.ZodNullable<z.ZodNumber>;
     durationMs: z.ZodNullable<z.ZodNumber>;
@@ -392,7 +398,7 @@ export declare const dashboardJobDetailSchema: z.ZodObject<{
     contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
     skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
     envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+    outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
     initFailure: z.ZodOptional<z.ZodObject<{
         scope: z.ZodEnum<{
@@ -471,6 +477,12 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
         baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        jobKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            gate: "gate";
+            proxy: "proxy";
+            standard: "standard";
+        }>>>;
+        summonedRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         startedAt: z.ZodNullable<z.ZodNumber>;
         completedAt: z.ZodNullable<z.ZodNumber>;
         durationMs: z.ZodNullable<z.ZodNumber>;
@@ -482,7 +494,7 @@ export declare const dashboardRunDetailResponseSchema: z.ZodObject<{
         contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+        outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         initFailure: z.ZodOptional<z.ZodObject<{
             scope: z.ZodEnum<{
@@ -3568,6 +3580,7 @@ export declare const dashboardDiagnosticsResponseSchema: z.ZodObject<{
         type: z.ZodEnum<{
             "bare-metal": "bare-metal";
             container: "container";
+            event: "event";
             firecracker: "firecracker";
             kubernetes: "kubernetes";
         }>;
@@ -3861,6 +3874,7 @@ export declare const registrationItemSchema: z.ZodObject<{
         }>>;
         provider: z.ZodString;
     }, z.core.$strip>>>;
+    isGlobal: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 /** Response with workflow registrations. */
 export declare const registrationsListResponseSchema: z.ZodObject<{
@@ -3891,6 +3905,7 @@ export declare const registrationsListResponseSchema: z.ZodObject<{
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>>;
+        isGlobal: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>>;
     registryVersion: z.ZodNumber;
     registryUpdatedAt: z.ZodString;
@@ -6746,6 +6761,7 @@ export declare const dashboardPlatformToOrchSchema: z.ZodDiscriminatedUnion<[z.Z
         "source_override.set": "source_override.set";
         "sources.list.read": "sources.list.read";
         "step.logs.read": "step.logs.read";
+        "trust_directory.updated": "trust_directory.updated";
         "trust_policy.updated": "trust_policy.updated";
     }>>;
     source: z.ZodOptional<z.ZodEnum<{
@@ -7001,6 +7017,12 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        jobKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            gate: "gate";
+            proxy: "proxy";
+            standard: "standard";
+        }>>>;
+        summonedRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         startedAt: z.ZodNullable<z.ZodNumber>;
         completedAt: z.ZodNullable<z.ZodNumber>;
         durationMs: z.ZodNullable<z.ZodNumber>;
@@ -7012,7 +7034,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+        outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         initFailure: z.ZodOptional<z.ZodObject<{
             scope: z.ZodEnum<{
@@ -7831,6 +7853,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             }>>;
             provider: z.ZodString;
         }, z.core.$strip>>>;
+        isGlobal: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>>;
     registryVersion: z.ZodNumber;
     registryUpdatedAt: z.ZodString;
@@ -7909,6 +7932,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
         type: z.ZodEnum<{
             "bare-metal": "bare-metal";
             container: "container";
+            event: "event";
             firecracker: "firecracker";
             kubernetes: "kubernetes";
         }>;
@@ -8467,6 +8491,7 @@ export declare const dashboardOrchToPlatformSchema: z.ZodDiscriminatedUnion<[z.Z
             "source_override.set": "source_override.set";
             "sources.list.read": "sources.list.read";
             "step.logs.read": "step.logs.read";
+            "trust_directory.updated": "trust_directory.updated";
             "trust_policy.updated": "trust_policy.updated";
         }>;
         targetType: z.ZodNullable<z.ZodEnum<{
@@ -8636,6 +8661,12 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
         baseJobName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         variantKind: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         variantLabel: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        jobKind: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+            gate: "gate";
+            proxy: "proxy";
+            standard: "standard";
+        }>>>;
+        summonedRunId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         startedAt: z.ZodNullable<z.ZodNumber>;
         completedAt: z.ZodNullable<z.ZodNumber>;
         durationMs: z.ZodNullable<z.ZodNumber>;
@@ -8647,7 +8678,7 @@ export declare const dashboardRunDetailApiResponseSchema: z.ZodObject<{
         contexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         skippedContexts: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         envWarning: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodUnknown>>>>;
+        outputs: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         secretOutputKeys: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString>>>;
         initFailure: z.ZodOptional<z.ZodObject<{
             scope: z.ZodEnum<{
@@ -9206,12 +9237,20 @@ export declare const runEventSchema: z.ZodObject<{
     parentSpanId: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 export type RunEvent = z.infer<typeof runEventSchema>;
-/** Trust policy response (from trust_policies table). */
+/**
+ * Trust policy response (from trust_policies table).
+ *
+ * `approvalExpirySeconds` is the authoritative window and `approvalExpiryHours`
+ * its coarse, rounded-up view, so a client reading only the older field still
+ * gets a usable number. Both are always sent by this build; the seconds field is
+ * optional so a dashboard build reading an older Platform still parses.
+ */
 export declare const trustPolicyResponseSchema: z.ZodObject<{
     forkPolicy: z.ZodString;
     unknownContributorPolicy: z.ZodString;
     workflowChangePolicy: z.ZodString;
     approvalExpiryHours: z.ZodNumber;
+    approvalExpirySeconds: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 export type TrustPolicy = z.infer<typeof trustPolicyResponseSchema>;
 /** Single identity link item. */
@@ -9259,6 +9298,7 @@ export declare const orgMemberSchema: z.ZodObject<{
     suspendedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
     joinedAt: z.ZodCoercedString<unknown>;
     ciTrustLevel: z.ZodString;
+    ciTrustOverride: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     identityLinks: z.ZodArray<z.ZodObject<{
         provider: z.ZodString;
         providerUsername: z.ZodString;
@@ -9279,6 +9319,7 @@ export declare const memberListResponseSchema: z.ZodObject<{
         suspendedAt: z.ZodNullable<z.ZodCoercedString<unknown>>;
         joinedAt: z.ZodCoercedString<unknown>;
         ciTrustLevel: z.ZodString;
+        ciTrustOverride: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         identityLinks: z.ZodArray<z.ZodObject<{
             provider: z.ZodString;
             providerUsername: z.ZodString;

package/dist/protocol/messages/dashboard.js

@@ -5,7 +5,7 @@ import { AttestationOrigin } from "../../provenance/attestation-origin.js";
 import { actorPrincipalSchema } from "./actor.js";
 import { HeldRunStatus } from "../../context/held-run-status.js";
 import { dashboardSealedEnvelopeSchema } from "./dashboard-sealed-write.js";
-import { StepConcurrencyKind, initFailureSchema, stateReplayRunSchema } from "./execution-status.js";
+import { JobKind, StepConcurrencyKind, initFailureSchema, stateReplayRunSchema } from "./execution-status.js";
 import { agentRunResultSchema } from "./agent-run-result.js";
 import { kiciBundleSchema } from "../../provenance/bundle.js";
 import { dashboardAccessLogListRequestSchema, dashboardAccessLogListResponseSchema } from "./access-log.js";
@@ -126,6 +126,19 @@ const dashboardJobDetailSchema = z.object({
 	variantKind: z.string().nullable().optional(),
 	/** Fan-out label for a child: matrix suffix or hostname; null for non-fanned jobs. */
 	variantLabel: z.string().nullable().optional(),
+	/**
+	* Job kind: `standard` runs steps on an agent, `gate` is an invoke gate, and
+	* `proxy` mirrors a summoned source-repo run. Absent/null for a standard job.
+	*
+	* OPTIONAL, and must stay optional: the wire protocol is compatibility-
+	* protected, so an orchestrator that predates invoke gates omits it.
+	*/
+	jobKind: JobKind.nullable().optional(),
+	/**
+	* For a `proxy` job, the summoned source-repo run this job mirrors; the
+	* dashboard links the proxy node through to it. null/absent otherwise.
+	*/
+	summonedRunId: z.string().nullable().optional(),
 	startedAt: z.number().nullable(),
 	completedAt: z.number().nullable(),
 	durationMs: z.number().nullable(),
@@ -138,7 +151,7 @@ const dashboardJobDetailSchema = z.object({
 	* a matching agent or scaler backend appears.
 	*
 	* OPTIONAL, and must stay optional: the wire protocol is compatibility-
-	* protected, so an orchestrator that predates the unroutable probe simply
+	* protected, so an orchestrator that predates the unroutable probe
 	* omits it.
 	*/
 	routingReason: z.string().nullable().optional(),
@@ -157,8 +170,22 @@ const dashboardJobDetailSchema = z.object({
 	skippedContexts: z.array(z.string()).nullable().optional(),
 	/** User-visible warning naming the skipped test-run contexts. null/absent when none. */
 	envWarning: z.string().nullable().optional(),
-	/** Aggregated step outputs (step-keyed map). Present when job completed successfully with outputs. */
-	outputs: z.record(z.string(), z.record(z.string(), z.unknown())).nullable().optional(),
+	/**
+	* A job's non-secret outputs. Present when the job completed successfully with
+	* outputs.
+	*
+	* The value is intentionally `z.record(z.string(), z.unknown())` — the same
+	* loose shape the wire (`job.status.data.outputs`) and `InvokeResult.outputs`
+	* use — because two job kinds populate it with two different shapes:
+	* - a **standard** job carries the agent's step-keyed map
+	*   (`{ <stepName>: { <outputKey>: value } }`), so each value is itself a map;
+	* - a **proxy** job mirrors a summoned run, and a run's outputs are FLAT
+	*   (`{ <outputKey>: value }`, values scalar), matching `InvokeResult.outputs`.
+	*
+	* A stricter step-keyed record type rejected the flat proxy shape and failed
+	* the whole run-detail response, so the schema accepts either.
+	*/
+	outputs: z.record(z.string(), z.unknown()).nullable().optional(),
 	/** Secret output key names produced by this job (values are NOT included -- display masked). */
 	secretOutputKeys: z.array(z.string()).nullable().optional(),
 	/**
@@ -1760,7 +1787,18 @@ const registrationItemSchema = z.object({
 	* (legacy / global-workflow rows). Mirrors the shape attached to run
 	* summaries so the dashboard can reuse the same icon/label helpers.
 	*/
-	source: registrationSourceSchema.nullable().optional()
+	source: registrationSourceSchema.nullable().optional(),
+	/**
+	* True when this registration is a global workflow — one whose trigger
+	* carries `repos:`, so it fires on events from other repos in the org.
+	*
+	* Optional because an orchestrator predating this field omits it. A reader
+	* that needs a value for such a row derives one from `triggers[].repos`,
+	* which is the same signal the orchestrator classifies on at registration
+	* time. Prefer this field when present: it mirrors the `is_global` column
+	* the dispatcher itself reads, so it cannot drift from dispatch behaviour.
+	*/
+	isGlobal: z.boolean().optional()
 });
 /** Response with workflow registrations. */
 const registrationsListResponseSchema = z.object({
@@ -2410,12 +2448,20 @@ const runEventSchema = z.object({
 	spanId: z.string().nullable(),
 	parentSpanId: z.string().nullable()
 });
-/** Trust policy response (from trust_policies table). */
+/**
+* Trust policy response (from trust_policies table).
+*
+* `approvalExpirySeconds` is the authoritative window and `approvalExpiryHours`
+* its coarse, rounded-up view, so a client reading only the older field still
+* gets a usable number. Both are always sent by this build; the seconds field is
+* optional so a dashboard build reading an older Platform still parses.
+*/
 const trustPolicyResponseSchema = z.object({
 	forkPolicy: z.string(),
 	unknownContributorPolicy: z.string(),
 	workflowChangePolicy: z.string(),
-	approvalExpiryHours: z.number()
+	approvalExpiryHours: z.number(),
+	approvalExpirySeconds: z.number().optional()
 });
 /** Single identity link item. */
 const identityLinkItemSchema = z.object({
@@ -2448,6 +2494,20 @@ const orgMemberSchema = z.object({
 	suspendedAt: z.coerce.string().nullable(),
 	joinedAt: z.coerce.string(),
 	ciTrustLevel: z.string(),
+	/**
+	* The per-member `ci_trust` override, when one is stored, or `null` when the
+	* member's level is entirely role-derived.
+	*
+	* Carried beside `ciTrustLevel` rather than folded into it, because the two
+	* answer different questions. `ciTrustLevel` is the effective level the CI
+	* trust gate decides with — the role-derived level with any override applied
+	* on top — so it cannot say which half produced it. An override OUTRANKS the
+	* roles, so an org that lowered a member by override has no way to see that,
+	* and no way to undo it, from a payload that reports only the result.
+	*
+	* Optional so an older client keeps parsing the response.
+	*/
+	ciTrustOverride: z.string().nullable().optional(),
 	identityLinks: z.array(memberIdentityLinkSchema)
 });
 /** Response for org members list endpoint. */

package/dist/protocol/messages/execution-status.d.ts

@@ -57,6 +57,18 @@ export declare const ExecutionJobStatus: z.ZodEnum<{
     unroutable: "unroutable";
 }>;
 export type ExecutionJobStatus = z.infer<typeof ExecutionJobStatus>;
+/**
+ * Job kind on the wire. `standard` runs steps on an agent; `gate` is an invoke
+ * gate that summons source-repo runs instead of running steps; `proxy` mirrors
+ * one summoned run's lifecycle. The orchestrator's DB `JobKind` enum mirrors
+ * these members.
+ */
+export declare const JobKind: z.ZodEnum<{
+    gate: "gate";
+    proxy: "proxy";
+    standard: "standard";
+}>;
+export type JobKind = z.infer<typeof JobKind>;
 /**
  * The status values a notification subscription may target at the given level.
  *
@@ -174,6 +186,28 @@ export declare const CacheStepType: z.ZodEnum<{
     "cache:save": "cache:save";
 }>;
 export type CacheStepType = z.infer<typeof CacheStepType>;
+/**
+ * `step_type` values for pseudo-steps that run BEFORE a job's real steps.
+ *
+ * A run's step timeline is ordered by `step_index`, and every pseudo-step index
+ * sits ABOVE the real steps (the wire schema requires a non-negative index, and
+ * the in-sandbox allocators claim a high block). That is fine for the cache
+ * pseudo-steps, which mostly bracket the work — but a job's image build runs
+ * strictly first, and rendering it last reads as though it happened last.
+ *
+ * A reader therefore sorts these types ahead of everything else, by TYPE rather
+ * than by index. Keeping the ordering rule here — rather than as a negative
+ * index — is deliberate: `step.status` rejects a negative index outright, so an
+ * agent that sent one to an older orchestrator would have its connection closed
+ * mid-job, and two consumers (the check-run reporter's array write, the
+ * dashboard's `stepIndex >= 0` log gate) treat a negative index as absent.
+ */
+export declare const SetupStepType: z.ZodEnum<{
+    "container:build": "container:build";
+}>;
+export type SetupStepType = z.infer<typeof SetupStepType>;
+/** True when a `step_type` names a pseudo-step that ran before the real steps. */
+export declare function isSetupStepType(stepType: string | null | undefined): boolean;
 /** `run.event` types emitted for user-facing cache operations. */
 export declare const CacheRunEventType: z.ZodEnum<{
     "cache.restore": "cache.restore";
@@ -265,6 +299,7 @@ export declare const executionStatusSchema: z.ZodObject<{
     routingKey: z.ZodOptional<z.ZodString>;
     repoIdentifier: z.ZodOptional<z.ZodString>;
     workflowRepoIdentifier: z.ZodOptional<z.ZodString>;
+    isGlobalEvalRound: z.ZodOptional<z.ZodBoolean>;
     repoProvider: z.ZodOptional<z.ZodString>;
     localWorkingTree: z.ZodOptional<z.ZodBoolean>;
     sha: z.ZodOptional<z.ZodString>;
@@ -394,6 +429,12 @@ export declare const jobStatusForwardSchema: z.ZodObject<{
         message: z.ZodString;
         jobName: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
+    jobKind: z.ZodOptional<z.ZodEnum<{
+        gate: "gate";
+        proxy: "proxy";
+        standard: "standard";
+    }>>;
+    summonedRunId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** State replay sent on orchestrator reconnection -- full snapshot of active runs and jobs. */
 /**

package/dist/protocol/messages/execution-status.js

@@ -58,6 +58,17 @@ const ExecutionJobStatus = z.enum([
 	"unroutable"
 ]);
 /**
+* Job kind on the wire. `standard` runs steps on an agent; `gate` is an invoke
+* gate that summons source-repo runs instead of running steps; `proxy` mirrors
+* one summoned run's lifecycle. The orchestrator's DB `JobKind` enum mirrors
+* these members.
+*/
+const JobKind = z.enum([
+	"standard",
+	"gate",
+	"proxy"
+]);
+/**
 * The status values a notification subscription may target at the given level.
 *
 * A run-level subscription matches against an `ExecutionRunStatus`; a job-level
@@ -164,6 +175,27 @@ const RunFailureClass = z.enum([
 * dashboard can render it inline alongside the real steps.
 */
 const CacheStepType = z.enum(["cache:restore", "cache:save"]);
+/**
+* `step_type` values for pseudo-steps that run BEFORE a job's real steps.
+*
+* A run's step timeline is ordered by `step_index`, and every pseudo-step index
+* sits ABOVE the real steps (the wire schema requires a non-negative index, and
+* the in-sandbox allocators claim a high block). That is fine for the cache
+* pseudo-steps, which mostly bracket the work — but a job's image build runs
+* strictly first, and rendering it last reads as though it happened last.
+*
+* A reader therefore sorts these types ahead of everything else, by TYPE rather
+* than by index. Keeping the ordering rule here — rather than as a negative
+* index — is deliberate: `step.status` rejects a negative index outright, so an
+* agent that sent one to an older orchestrator would have its connection closed
+* mid-job, and two consumers (the check-run reporter's array write, the
+* dashboard's `stepIndex >= 0` log gate) treat a negative index as absent.
+*/
+const SetupStepType = z.enum(["container:build"]);
+/** True when a `step_type` names a pseudo-step that ran before the real steps. */
+function isSetupStepType(stepType) {
+	return stepType != null && SetupStepType.safeParse(stepType).success;
+}
 /** `run.event` types emitted for user-facing cache operations. */
 const CacheRunEventType = z.enum(["cache.restore", "cache.save"]);
 /**
@@ -248,6 +280,17 @@ const executionStatusSchema = z.object({
 	*/
 	workflowRepoIdentifier: z.string().max(256).optional(),
 	/**
+	* True when this run records a global evaluation round rather than a
+	* workflow.
+	*
+	* The Platform mirrors it so its own re-run refusal can admit a round: a
+	* round is definitionally cross-repository, and re-running one re-evaluates
+	* the original event instead of resolving a workflow out of the acted-on
+	* repository's lock file. Absent means an ordinary run — optional for
+	* backward compatibility with an orchestrator that never sends it.
+	*/
+	isGlobalEvalRound: z.boolean().optional(),
+	/**
 	* Run-level repo provider (origin host: `github` / `gitlab` / `bitbucket` /
 	* `local`). Distinct from the routing-key-derived source provider; drives the
 	* dashboard's provider-aware repo links.
@@ -351,7 +394,15 @@ const jobStatusForwardSchema = z.object({
 	logBytes: z.number().int().nonnegative().optional(),
 	timestamp: z.number(),
 	/** Structured init-failure signal — set for synthetic rejected-* / init-failed-* jobs. */
-	initFailure: initFailureSchema.optional()
+	initFailure: initFailureSchema.optional(),
+	/**
+	* Job kind. Absent means an ordinary `standard` job. `gate`/`proxy` mark an
+	* invoke gate and its per-run proxy children. Additive/optional — an older
+	* peer ignores it.
+	*/
+	jobKind: JobKind.optional(),
+	/** For a `proxy` job, the summoned run it mirrors. Additive/optional. */
+	summonedRunId: z.string().max(128).optional()
 });
 /** State replay sent on orchestrator reconnection -- full snapshot of active runs and jobs. */
 /**
@@ -411,6 +462,6 @@ const stateReplaySchema = z.object({
 	timestamp: z.number()
 });
 //#endregion
-export { CONTEXTS_MAX, CacheOutcome, CacheRunEventType, CacheStepType, DEAD_ORCH_FAILURE_REASON, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, InitFailureCategory, MAX_JOBS_PER_RUN, REPO_IDENTIFIER_MAX, RUNS_ON_LABELS_MAX, RunFailureClass, STATE_REPLAY_MAX_RUNS, STATUS_FREE_TEXT_MAX, STATUS_ID_MAX, StepConcurrencyKind, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TERMINAL_STEP_STATES, TimeoutReason, executionStatusSchema, initFailureSchema, jobStatusForwardSchema, stateReplayRunSchema, stateReplaySchema, statusOptionsForLevel, stepStatusForwardSchema };
+export { CONTEXTS_MAX, CacheOutcome, CacheRunEventType, CacheStepType, DEAD_ORCH_FAILURE_REASON, ExecutionJobStatus, ExecutionRunStatus, ExecutionStepStatus, InitFailureCategory, JobKind, MAX_JOBS_PER_RUN, REPO_IDENTIFIER_MAX, RUNS_ON_LABELS_MAX, RunFailureClass, STATE_REPLAY_MAX_RUNS, STATUS_FREE_TEXT_MAX, STATUS_ID_MAX, SetupStepType, StepConcurrencyKind, TERMINAL_JOB_STATES, TERMINAL_RUN_STATES, TERMINAL_STEP_STATES, TimeoutReason, executionStatusSchema, initFailureSchema, isSetupStepType, jobStatusForwardSchema, stateReplayRunSchema, stateReplaySchema, statusOptionsForLevel, stepStatusForwardSchema };
 
 //# sourceMappingURL=execution-status.js.map

package/dist/protocol/messages/git-credential-relay.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Agent → orchestrator relay for git credentials.
+ *
+ * The agent's credential helper calls this on every git network operation, so
+ * a token is always minted seconds before use — which is what defeats the
+ * one-hour GitHub App installation-token expiry for arbitrarily long jobs.
+ *
+ * Mirrors the browser-safe types in `provider/git-credential.ts`; this module
+ * is the validating half and is the only one that imports Zod.
+ */
+import { z } from 'zod';
+/** Method name on the agent private API registry. */
+export declare const GIT_CREDENTIAL_REQUEST_METHOD = "git.credential.request";
+export declare const gitCredentialRefSchema: z.ZodUnion<readonly [z.ZodIntersection<z.ZodIntersection<z.ZodIntersection<z.ZodObject<{
+    kind: z.ZodLiteral<"app">;
+}, z.core.$strip>, z.ZodObject<{
+    [x: string]: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>, z.ZodObject<{
+    [x: string]: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>, z.ZodObject<{
+    [x: string]: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
+    kind: z.ZodLiteral<"token">;
+    user: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    [x: string]: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
+    kind: z.ZodLiteral<"ssh">;
+}, z.core.$strip>, z.ZodObject<{
+    [x: string]: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>>]>;
+export declare const gitCredentialRequestParamsSchema: z.ZodObject<{
+    jobId: z.ZodString;
+    repositories: z.ZodArray<z.ZodString>;
+    ref: z.ZodOptional<z.ZodUnion<readonly [z.ZodIntersection<z.ZodIntersection<z.ZodIntersection<z.ZodObject<{
+        kind: z.ZodLiteral<"app">;
+    }, z.core.$strip>, z.ZodObject<{
+        [x: string]: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>, z.ZodObject<{
+        [x: string]: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>, z.ZodObject<{
+        [x: string]: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
+        kind: z.ZodLiteral<"token">;
+        user: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        [x: string]: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>, z.ZodIntersection<z.ZodObject<{
+        kind: z.ZodLiteral<"ssh">;
+    }, z.core.$strip>, z.ZodObject<{
+        [x: string]: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>]>>;
+    permissions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, z.core.$strip>;
+export type GitCredentialRequestParams = z.infer<typeof gitCredentialRequestParamsSchema>;
+export declare const gitCredentialGrantSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    scoped: z.ZodLiteral<false>;
+}, z.core.$strip>, z.ZodObject<{
+    scoped: z.ZodLiteral<true>;
+    permissions: z.ZodRecord<z.ZodString, z.ZodString>;
+}, z.core.$strip>], "scoped">;
+export declare const gitCredentialResultSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        basic: "basic";
+        ssh: "ssh";
+    }>;
+    user: z.ZodOptional<z.ZodString>;
+    secret: z.ZodString;
+    grant: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        scoped: z.ZodLiteral<false>;
+    }, z.core.$strip>, z.ZodObject<{
+        scoped: z.ZodLiteral<true>;
+        permissions: z.ZodRecord<z.ZodString, z.ZodString>;
+    }, z.core.$strip>], "scoped">;
+    expiresAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type GitCredentialRelayResult = z.infer<typeof gitCredentialResultSchema>;
+//# sourceMappingURL=git-credential-relay.d.ts.map

package/dist/protocol/messages/git-credential-relay.js

@@ -0,0 +1,86 @@
+import "../../rolldown-runtime-ClRpJifh.js";
+import { z } from "zod";
+//#region src/protocol/messages/git-credential-relay.ts
+/**
+* Agent → orchestrator relay for git credentials.
+*
+* The agent's credential helper calls this on every git network operation, so
+* a token is always minted seconds before use — which is what defeats the
+* one-hour GitHub App installation-token expiry for arbitrarily long jobs.
+*
+* Mirrors the browser-safe types in `provider/git-credential.ts`; this module
+* is the validating half and is the only one that imports Zod.
+*/
+/** Method name on the agent private API registry. */
+const GIT_CREDENTIAL_REQUEST_METHOD = "git.credential.request";
+/**
+* A repository must be named explicitly — no wildcards, no "every repo in the
+* installation". A write grant is therefore always a specific repository
+* written down in the workflow source and reviewable in a diff.
+*/
+const repositorySchema = z.string().min(1).max(512).refine((v) => !v.includes("*") && !v.includes("?"), { message: "repository must be explicit — wildcards are not accepted" });
+/**
+* Requested permissions.
+*
+* Deliberate carve-out from the enums-over-hardcoded-strings rule: GitHub adds
+* permissions over time, and a closed enum would mean a permission GitHub
+* shipped yesterday needs an SDK release before anyone can use it. Known keys
+* are typed in the SDK for autocomplete; here they pass through verbatim for
+* the forge itself to accept or reject.
+*/
+const permissionsSchema = z.record(z.string().min(1), z.string().min(1));
+/**
+* Exactly one of `<name>Secret` / `<name>Value` per pair.
+*
+* `*Secret` is a qualified `<context>:<secret-name>` reference — the same form
+* `packages/sdk/src/workflow.ts` validates with `isQualifiedSecretRef` — so the
+* context travels with the reference and nothing has to infer a scope.
+* `*Value` is material supplied at runtime.
+*/
+function sourced(name) {
+	const qualified = z.string().min(1).refine((v) => {
+		const i = v.indexOf(":");
+		return i > 0 && i < v.length - 1 && !v.slice(i + 1).includes(":");
+	}, { message: `${name}Secret must be a qualified <context>:<secret-name> reference` }).refine((v) => !v.startsWith("-----BEGIN") && !/^gh[pousr]_/.test(v) && !v.startsWith("github_pat_"), { message: `${name}Secret looks like the credential itself, not the name of a secret holding it. Use ${name}Value if you genuinely have runtime material.` });
+	return z.object({
+		[`${name}Secret`]: qualified.optional(),
+		[`${name}Value`]: z.string().min(1).optional()
+	}).refine((o) => Boolean(o[`${name}Secret`]) !== Boolean(o[`${name}Value`]), { message: `exactly one of ${name}Secret or ${name}Value must be set` });
+}
+const gitCredentialRefSchema = z.union([
+	z.object({ kind: z.literal("app") }).and(sourced("appId")).and(sourced("installationId")).and(sourced("privateKey")),
+	z.object({
+		kind: z.literal("token"),
+		user: z.string().optional()
+	}).and(sourced("token")),
+	z.object({ kind: z.literal("ssh") }).and(sourced("privateKey"))
+]);
+const gitCredentialRequestParamsSchema = z.object({
+	jobId: z.string().min(1),
+	/**
+	* Every repository the credential must cover, most-specific first.
+	*
+	* A list rather than one name because a GitHub App token is minted per
+	* installation and can name several repositories at once — which is the
+	* point of `getToken({ repositories })`. The credential helper, which is
+	* asked about one URL at a time, sends a one-element list.
+	*/
+	repositories: z.array(repositorySchema).min(1),
+	ref: gitCredentialRefSchema.optional(),
+	permissions: permissionsSchema.optional()
+});
+const gitCredentialGrantSchema = z.discriminatedUnion("scoped", [z.object({ scoped: z.literal(false) }), z.object({
+	scoped: z.literal(true),
+	permissions: permissionsSchema
+})]);
+const gitCredentialResultSchema = z.object({
+	kind: z.enum(["basic", "ssh"]),
+	user: z.string().optional(),
+	secret: z.string(),
+	grant: gitCredentialGrantSchema,
+	expiresAt: z.string().nullable()
+});
+//#endregion
+export { GIT_CREDENTIAL_REQUEST_METHOD, gitCredentialGrantSchema, gitCredentialRefSchema, gitCredentialRequestParamsSchema, gitCredentialResultSchema };
+
+//# sourceMappingURL=git-credential-relay.js.map