@herdctl/core 1.3.1 → 2.0.0

package/dist/config/schema.d.ts

@@ -4,7 +4,7 @@
  * Validates herdctl.yaml fleet configuration
  */
 import { z } from "zod";
-export declare const PermissionModeSchema: z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>;
+export declare const PermissionModeSchema: z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>;
 export declare const BashPermissionsSchema: z.ZodObject<{
     allowed_commands: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     denied_patterns: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
@@ -16,7 +16,7 @@ export declare const BashPermissionsSchema: z.ZodObject<{
     denied_patterns?: string[] | undefined;
 }>;
 export declare const PermissionsSchema: z.ZodObject<{
-    mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>>>;
+    mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>>>;
     allowed_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     denied_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     bash: z.ZodOptional<z.ZodObject<{
@@ -30,7 +30,7 @@ export declare const PermissionsSchema: z.ZodObject<{
         denied_patterns?: string[] | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
-    mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+    mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
     allowed_tools?: string[] | undefined;
     denied_tools?: string[] | undefined;
     bash?: {
@@ -38,7 +38,7 @@ export declare const PermissionsSchema: z.ZodObject<{
         denied_patterns?: string[] | undefined;
     } | undefined;
 }, {
-    mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+    mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
     allowed_tools?: string[] | undefined;
     denied_tools?: string[] | undefined;
     bash?: {
@@ -284,14 +284,162 @@ export declare const InstancesSchema: z.ZodObject<{
 }, {
     max_concurrent?: number | undefined;
 }>;
-export declare const DockerSchema: z.ZodObject<{
+/**
+ * Network isolation modes for Docker containers
+ * - "none": No network access (most secure, rare use case)
+ * - "bridge": Standard Docker networking with NAT (default)
+ * - "host": Share host network namespace (least isolated)
+ */
+export declare const DockerNetworkModeSchema: z.ZodEnum<["none", "bridge", "host"]>;
+/**
+ * Docker container configuration schema
+ *
+ * Supports container lifecycle, resource limits, and security options.
+ * All options are optional - defaults provide secure, sensible configuration.
+ *
+ * @example
+ * ```yaml
+ * docker:
+ *   enabled: true
+ *   ephemeral: false        # Reuse container across jobs
+ *   image: anthropic/claude-code:latest
+ *   network: bridge         # Full network access
+ *   memory: 2g              # Memory limit
+ *   cpu_shares: 512         # CPU weight
+ *   user: "1000:1000"       # Run as specific UID:GID
+ *   max_containers: 5       # Keep last 5 containers per agent
+ *   volumes:                # Additional volume mounts
+ *     - "/host/data:/container/data:ro"
+ * ```
+ */
+export declare const DockerSchema: z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+    /** Enable Docker containerization for this agent (default: false) */
     enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    /** Use ephemeral containers (fresh per job, auto-removed) vs persistent (reuse across jobs, kept for inspection) */
+    ephemeral: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    /** Docker image to use (default: anthropic/claude-code:latest) */
+    image: z.ZodOptional<z.ZodString>;
+    /** Network isolation mode (default: bridge for full network access) */
+    network: z.ZodDefault<z.ZodOptional<z.ZodEnum<["none", "bridge", "host"]>>>;
+    /** Memory limit (e.g., "2g", "512m") (default: 2g) */
+    memory: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    /** CPU shares (relative weight, 512 is normal) */
+    cpu_shares: z.ZodOptional<z.ZodNumber>;
+    /** Container user as "UID:GID" string (default: match host user) */
+    user: z.ZodOptional<z.ZodString>;
+    /** Maximum containers to keep per agent before cleanup (default: 5) */
+    max_containers: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    /** Additional volume mounts in Docker format: "host:container:mode" */
+    volumes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    /** Workspace mount mode: rw (read-write, default) or ro (read-only) */
+    workspace_mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["rw", "ro"]>>>;
+    /** Environment variables to pass to the container (supports ${VAR} interpolation) */
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    /** @deprecated Use 'image' instead */
     base_image: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     enabled: boolean;
+    ephemeral: boolean;
+    network: "none" | "bridge" | "host";
+    memory: string;
+    max_containers: number;
+    workspace_mode: "rw" | "ro";
+    image?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    volumes?: string[] | undefined;
+    env?: Record<string, string> | undefined;
     base_image?: string | undefined;
 }, {
     enabled?: boolean | undefined;
+    ephemeral?: boolean | undefined;
+    image?: string | undefined;
+    network?: "none" | "bridge" | "host" | undefined;
+    memory?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    max_containers?: number | undefined;
+    volumes?: string[] | undefined;
+    workspace_mode?: "rw" | "ro" | undefined;
+    env?: Record<string, string> | undefined;
+    base_image?: string | undefined;
+}>, {
+    enabled: boolean;
+    ephemeral: boolean;
+    network: "none" | "bridge" | "host";
+    memory: string;
+    max_containers: number;
+    workspace_mode: "rw" | "ro";
+    image?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    volumes?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    base_image?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    ephemeral?: boolean | undefined;
+    image?: string | undefined;
+    network?: "none" | "bridge" | "host" | undefined;
+    memory?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    max_containers?: number | undefined;
+    volumes?: string[] | undefined;
+    workspace_mode?: "rw" | "ro" | undefined;
+    env?: Record<string, string> | undefined;
+    base_image?: string | undefined;
+}>, {
+    enabled: boolean;
+    ephemeral: boolean;
+    network: "none" | "bridge" | "host";
+    memory: string;
+    max_containers: number;
+    workspace_mode: "rw" | "ro";
+    image?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    volumes?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    base_image?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    ephemeral?: boolean | undefined;
+    image?: string | undefined;
+    network?: "none" | "bridge" | "host" | undefined;
+    memory?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    max_containers?: number | undefined;
+    volumes?: string[] | undefined;
+    workspace_mode?: "rw" | "ro" | undefined;
+    env?: Record<string, string> | undefined;
+    base_image?: string | undefined;
+}>, {
+    enabled: boolean;
+    ephemeral: boolean;
+    network: "none" | "bridge" | "host";
+    memory: string;
+    max_containers: number;
+    workspace_mode: "rw" | "ro";
+    image?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    volumes?: string[] | undefined;
+    env?: Record<string, string> | undefined;
+    base_image?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    ephemeral?: boolean | undefined;
+    image?: string | undefined;
+    network?: "none" | "bridge" | "host" | undefined;
+    memory?: string | undefined;
+    cpu_shares?: number | undefined;
+    user?: string | undefined;
+    max_containers?: number | undefined;
+    volumes?: string[] | undefined;
+    workspace_mode?: "rw" | "ro" | undefined;
+    env?: Record<string, string> | undefined;
     base_image?: string | undefined;
 }>;
 export declare const SessionSchema: z.ZodObject<{
@@ -308,18 +456,138 @@ export declare const SessionSchema: z.ZodObject<{
     model?: string | undefined;
 }>;
 export declare const DefaultsSchema: z.ZodObject<{
-    docker: z.ZodOptional<z.ZodObject<{
+    docker: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+        /** Enable Docker containerization for this agent (default: false) */
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** Use ephemeral containers (fresh per job, auto-removed) vs persistent (reuse across jobs, kept for inspection) */
+        ephemeral: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** Docker image to use (default: anthropic/claude-code:latest) */
+        image: z.ZodOptional<z.ZodString>;
+        /** Network isolation mode (default: bridge for full network access) */
+        network: z.ZodDefault<z.ZodOptional<z.ZodEnum<["none", "bridge", "host"]>>>;
+        /** Memory limit (e.g., "2g", "512m") (default: 2g) */
+        memory: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        /** CPU shares (relative weight, 512 is normal) */
+        cpu_shares: z.ZodOptional<z.ZodNumber>;
+        /** Container user as "UID:GID" string (default: match host user) */
+        user: z.ZodOptional<z.ZodString>;
+        /** Maximum containers to keep per agent before cleanup (default: 5) */
+        max_containers: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        /** Additional volume mounts in Docker format: "host:container:mode" */
+        volumes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /** Workspace mount mode: rw (read-write, default) or ro (read-only) */
+        workspace_mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["rw", "ro"]>>>;
+        /** Environment variables to pass to the container (supports ${VAR} interpolation) */
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /** @deprecated Use 'image' instead */
         base_image: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     }, {
         enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     }>>;
     permissions: z.ZodOptional<z.ZodObject<{
-        mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>>>;
+        mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>>>;
         allowed_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         denied_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         bash: z.ZodOptional<z.ZodObject<{
@@ -333,7 +601,7 @@ export declare const DefaultsSchema: z.ZodObject<{
             denied_patterns?: string[] | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
-        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -341,7 +609,7 @@ export declare const DefaultsSchema: z.ZodObject<{
             denied_patterns?: string[] | undefined;
         } | undefined;
     }, {
-        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -442,6 +710,22 @@ export declare const DefaultsSchema: z.ZodObject<{
     }, {
         max_concurrent?: number | undefined;
     }>>;
+    working_directory: z.ZodOptional<z.ZodLazy<z.ZodUnion<[z.ZodString, z.ZodObject<{
+        root: z.ZodString;
+        auto_clone: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        clone_depth: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        default_branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        root: string;
+        auto_clone: boolean;
+        clone_depth: number;
+        default_branch: string;
+    }, {
+        root: string;
+        auto_clone?: boolean | undefined;
+        clone_depth?: number | undefined;
+        default_branch?: string | undefined;
+    }>]>>>;
     session: z.ZodOptional<z.ZodObject<{
         max_turns: z.ZodOptional<z.ZodNumber>;
         timeout: z.ZodOptional<z.ZodString>;
@@ -457,16 +741,26 @@ export declare const DefaultsSchema: z.ZodObject<{
     }>>;
     model: z.ZodOptional<z.ZodString>;
     max_turns: z.ZodOptional<z.ZodNumber>;
-    permission_mode: z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>>;
+    permission_mode: z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>>;
 }, "strip", z.ZodTypeAny, {
     max_turns?: number | undefined;
     model?: string | undefined;
     docker?: {
         enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     } | undefined;
     permissions?: {
-        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -498,21 +792,37 @@ export declare const DefaultsSchema: z.ZodObject<{
     instances?: {
         max_concurrent: number;
     } | undefined;
+    working_directory?: string | {
+        root: string;
+        auto_clone: boolean;
+        clone_depth: number;
+        default_branch: string;
+    } | undefined;
     session?: {
         max_turns?: number | undefined;
         timeout?: string | undefined;
         model?: string | undefined;
     } | undefined;
-    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
 }, {
     max_turns?: number | undefined;
     model?: string | undefined;
     docker?: {
         enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     } | undefined;
     permissions?: {
-        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -544,14 +854,20 @@ export declare const DefaultsSchema: z.ZodObject<{
     instances?: {
         max_concurrent?: number | undefined;
     } | undefined;
+    working_directory?: string | {
+        root: string;
+        auto_clone?: boolean | undefined;
+        clone_depth?: number | undefined;
+        default_branch?: string | undefined;
+    } | undefined;
     session?: {
         max_turns?: number | undefined;
         timeout?: string | undefined;
         model?: string | undefined;
     } | undefined;
-    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
 }>;
-export declare const WorkspaceSchema: z.ZodObject<{
+export declare const WorkingDirectorySchema: z.ZodObject<{
     root: z.ZodString;
     auto_clone: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     clone_depth: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
@@ -691,9 +1007,12 @@ export declare const ScheduleSchema: z.ZodObject<{
     outputToFile: z.ZodOptional<z.ZodBoolean>;
     /** When false, schedule will not auto-trigger but can still be manually triggered (default: true) */
     enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    /** When false, start a fresh session instead of resuming (default: true - resumes existing session) */
+    resume_session: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
 }, "strip", z.ZodTypeAny, {
     type: "interval" | "cron" | "webhook" | "chat";
     enabled: boolean;
+    resume_session: boolean;
     work_source?: {
         type: "github";
         repo: string;
@@ -747,6 +1066,7 @@ export declare const ScheduleSchema: z.ZodObject<{
     expression?: string | undefined;
     prompt?: string | undefined;
     outputToFile?: boolean | undefined;
+    resume_session?: boolean | undefined;
 }>;
 export declare const McpServerSchema: z.ZodObject<{
     command: z.ZodOptional<z.ZodString>;
@@ -754,15 +1074,15 @@ export declare const McpServerSchema: z.ZodObject<{
     env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
     url: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
-    command?: string | undefined;
-    args?: string[] | undefined;
     url?: string | undefined;
     env?: Record<string, string> | undefined;
-}, {
     command?: string | undefined;
     args?: string[] | undefined;
+}, {
     url?: string | undefined;
     env?: Record<string, string> | undefined;
+    command?: string | undefined;
+    args?: string[] | undefined;
 }>;
 /**
  * Discord bot presence/activity configuration
@@ -1386,8 +1706,8 @@ export declare const WebhookHookConfigSchema: z.ZodObject<{
     timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strip", z.ZodTypeAny, {
     type: "webhook";
-    timeout: number;
     url: string;
+    timeout: number;
     continue_on_error: boolean;
     method: "POST" | "PUT";
     name?: string | undefined;
@@ -1495,8 +1815,8 @@ export declare const HookConfigSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObj
     timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
 }, "strip", z.ZodTypeAny, {
     type: "webhook";
-    timeout: number;
     url: string;
+    timeout: number;
     continue_on_error: boolean;
     method: "POST" | "PUT";
     name?: string | undefined;
@@ -1602,8 +1922,8 @@ export declare const AgentHooksSchema: z.ZodObject<{
         timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     }, "strip", z.ZodTypeAny, {
         type: "webhook";
-        timeout: number;
         url: string;
+        timeout: number;
         continue_on_error: boolean;
         method: "POST" | "PUT";
         name?: string | undefined;
@@ -1705,8 +2025,8 @@ export declare const AgentHooksSchema: z.ZodObject<{
         timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     }, "strip", z.ZodTypeAny, {
         type: "webhook";
-        timeout: number;
         url: string;
+        timeout: number;
         continue_on_error: boolean;
         method: "POST" | "PUT";
         name?: string | undefined;
@@ -1766,8 +2086,8 @@ export declare const AgentHooksSchema: z.ZodObject<{
         when?: string | undefined;
     } | {
         type: "webhook";
-        timeout: number;
         url: string;
+        timeout: number;
         continue_on_error: boolean;
         method: "POST" | "PUT";
         name?: string | undefined;
@@ -1793,8 +2113,8 @@ export declare const AgentHooksSchema: z.ZodObject<{
         when?: string | undefined;
     } | {
         type: "webhook";
-        timeout: number;
         url: string;
+        timeout: number;
         continue_on_error: boolean;
         method: "POST" | "PUT";
         name?: string | undefined;
@@ -1866,7 +2186,7 @@ export declare const AgentHooksSchema: z.ZodObject<{
         when?: string | undefined;
     })[] | undefined;
 }>;
-export declare const AgentWorkspaceSchema: z.ZodUnion<[z.ZodString, z.ZodObject<{
+export declare const AgentWorkingDirectorySchema: z.ZodUnion<[z.ZodString, z.ZodObject<{
     root: z.ZodString;
     auto_clone: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     clone_depth: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
@@ -1885,7 +2205,7 @@ export declare const AgentWorkspaceSchema: z.ZodUnion<[z.ZodString, z.ZodObject<
 export declare const AgentConfigSchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
-    workspace: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodObject<{
+    working_directory: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodObject<{
         root: z.ZodString;
         auto_clone: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
         clone_depth: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
@@ -2099,9 +2419,12 @@ export declare const AgentConfigSchema: z.ZodObject<{
         outputToFile: z.ZodOptional<z.ZodBoolean>;
         /** When false, schedule will not auto-trigger but can still be manually triggered (default: true) */
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** When false, start a fresh session instead of resuming (default: true - resumes existing session) */
+        resume_session: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     }, "strip", z.ZodTypeAny, {
         type: "interval" | "cron" | "webhook" | "chat";
         enabled: boolean;
+        resume_session: boolean;
         work_source?: {
             type: "github";
             repo: string;
@@ -2155,6 +2478,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
         expression?: string | undefined;
         prompt?: string | undefined;
         outputToFile?: boolean | undefined;
+        resume_session?: boolean | undefined;
     }>>>;
     session: z.ZodOptional<z.ZodObject<{
         max_turns: z.ZodOptional<z.ZodNumber>;
@@ -2170,7 +2494,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
         model?: string | undefined;
     }>>;
     permissions: z.ZodOptional<z.ZodObject<{
-        mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>>>;
+        mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>>>;
         allowed_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         denied_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         bash: z.ZodOptional<z.ZodObject<{
@@ -2184,7 +2508,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
             denied_patterns?: string[] | undefined;
         }>>;
     }, "strip", z.ZodTypeAny, {
-        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -2192,7 +2516,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
             denied_patterns?: string[] | undefined;
         } | undefined;
     }, {
-        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -2206,15 +2530,15 @@ export declare const AgentConfigSchema: z.ZodObject<{
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         url: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        command?: string | undefined;
-        args?: string[] | undefined;
         url?: string | undefined;
         env?: Record<string, string> | undefined;
-    }, {
         command?: string | undefined;
         args?: string[] | undefined;
+    }, {
         url?: string | undefined;
         env?: Record<string, string> | undefined;
+        command?: string | undefined;
+        args?: string[] | undefined;
     }>>>;
     chat: z.ZodOptional<z.ZodObject<{
         discord: z.ZodOptional<z.ZodObject<{
@@ -2492,8 +2816,8 @@ export declare const AgentConfigSchema: z.ZodObject<{
             timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
         }, "strip", z.ZodTypeAny, {
             type: "webhook";
-            timeout: number;
             url: string;
+            timeout: number;
             continue_on_error: boolean;
             method: "POST" | "PUT";
             name?: string | undefined;
@@ -2595,8 +2919,8 @@ export declare const AgentConfigSchema: z.ZodObject<{
             timeout: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
         }, "strip", z.ZodTypeAny, {
             type: "webhook";
-            timeout: number;
             url: string;
+            timeout: number;
             continue_on_error: boolean;
             method: "POST" | "PUT";
             name?: string | undefined;
@@ -2656,8 +2980,8 @@ export declare const AgentConfigSchema: z.ZodObject<{
             when?: string | undefined;
         } | {
             type: "webhook";
-            timeout: number;
             url: string;
+            timeout: number;
             continue_on_error: boolean;
             method: "POST" | "PUT";
             name?: string | undefined;
@@ -2683,8 +3007,8 @@ export declare const AgentConfigSchema: z.ZodObject<{
             when?: string | undefined;
         } | {
             type: "webhook";
-            timeout: number;
             url: string;
+            timeout: number;
             continue_on_error: boolean;
             method: "POST" | "PUT";
             name?: string | undefined;
@@ -2756,14 +3080,134 @@ export declare const AgentConfigSchema: z.ZodObject<{
             when?: string | undefined;
         })[] | undefined;
     }>>;
-    docker: z.ZodOptional<z.ZodObject<{
+    docker: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+        /** Enable Docker containerization for this agent (default: false) */
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** Use ephemeral containers (fresh per job, auto-removed) vs persistent (reuse across jobs, kept for inspection) */
+        ephemeral: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** Docker image to use (default: anthropic/claude-code:latest) */
+        image: z.ZodOptional<z.ZodString>;
+        /** Network isolation mode (default: bridge for full network access) */
+        network: z.ZodDefault<z.ZodOptional<z.ZodEnum<["none", "bridge", "host"]>>>;
+        /** Memory limit (e.g., "2g", "512m") (default: 2g) */
+        memory: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        /** CPU shares (relative weight, 512 is normal) */
+        cpu_shares: z.ZodOptional<z.ZodNumber>;
+        /** Container user as "UID:GID" string (default: match host user) */
+        user: z.ZodOptional<z.ZodString>;
+        /** Maximum containers to keep per agent before cleanup (default: 5) */
+        max_containers: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        /** Additional volume mounts in Docker format: "host:container:mode" */
+        volumes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /** Workspace mount mode: rw (read-write, default) or ro (read-only) */
+        workspace_mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["rw", "ro"]>>>;
+        /** Environment variables to pass to the container (supports ${VAR} interpolation) */
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /** @deprecated Use 'image' instead */
         base_image: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     }, {
         enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     }>>;
     instances: z.ZodOptional<z.ZodObject<{
@@ -2775,7 +3219,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
     }>>;
     model: z.ZodOptional<z.ZodString>;
     max_turns: z.ZodOptional<z.ZodNumber>;
-    permission_mode: z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>>;
+    permission_mode: z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>>;
     /** Path to metadata JSON file written by agent (default: metadata.json in workspace) */
     metadata_file: z.ZodOptional<z.ZodString>;
     /**
@@ -2788,6 +3232,14 @@ export declare const AgentConfigSchema: z.ZodObject<{
      * Default: ["project"] when workspace is set, [] otherwise
      */
     setting_sources: z.ZodOptional<z.ZodArray<z.ZodEnum<["user", "project", "local"]>, "many">>;
+    /**
+     * Runtime backend for executing Claude agents
+     * - "sdk" - Claude Agent SDK (default, standard pricing)
+     * - "cli" - Claude CLI (Max plan pricing, Phase 2)
+     *
+     * Default: "sdk"
+     */
+    runtime: z.ZodOptional<z.ZodEnum<["sdk", "cli"]>>;
 }, "strict", z.ZodTypeAny, {
     name: string;
     repo?: string | undefined;
@@ -2795,10 +3247,20 @@ export declare const AgentConfigSchema: z.ZodObject<{
     model?: string | undefined;
     docker?: {
         enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     } | undefined;
     permissions?: {
-        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+        mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -2830,12 +3292,18 @@ export declare const AgentConfigSchema: z.ZodObject<{
     instances?: {
         max_concurrent: number;
     } | undefined;
+    working_directory?: string | {
+        root: string;
+        auto_clone: boolean;
+        clone_depth: number;
+        default_branch: string;
+    } | undefined;
     session?: {
         max_turns?: number | undefined;
         timeout?: string | undefined;
         model?: string | undefined;
     } | undefined;
-    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
     chat?: {
         discord?: {
             bot_token_env: string;
@@ -2869,12 +3337,6 @@ export declare const AgentConfigSchema: z.ZodObject<{
         } | undefined;
     } | undefined;
     description?: string | undefined;
-    workspace?: string | {
-        root: string;
-        auto_clone: boolean;
-        clone_depth: number;
-        default_branch: string;
-    } | undefined;
     identity?: {
         name?: string | undefined;
         role?: string | undefined;
@@ -2885,6 +3347,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
     schedules?: Record<string, {
         type: "interval" | "cron" | "webhook" | "chat";
         enabled: boolean;
+        resume_session: boolean;
         work_source?: {
             type: "github";
             repo: string;
@@ -2912,10 +3375,10 @@ export declare const AgentConfigSchema: z.ZodObject<{
         outputToFile?: boolean | undefined;
     }> | undefined;
     mcp_servers?: Record<string, {
-        command?: string | undefined;
-        args?: string[] | undefined;
         url?: string | undefined;
         env?: Record<string, string> | undefined;
+        command?: string | undefined;
+        args?: string[] | undefined;
     }> | undefined;
     hooks?: {
         after_run?: ({
@@ -2928,8 +3391,8 @@ export declare const AgentConfigSchema: z.ZodObject<{
             when?: string | undefined;
         } | {
             type: "webhook";
-            timeout: number;
             url: string;
+            timeout: number;
             continue_on_error: boolean;
             method: "POST" | "PUT";
             name?: string | undefined;
@@ -2955,8 +3418,8 @@ export declare const AgentConfigSchema: z.ZodObject<{
             when?: string | undefined;
         } | {
             type: "webhook";
-            timeout: number;
             url: string;
+            timeout: number;
             continue_on_error: boolean;
             method: "POST" | "PUT";
             name?: string | undefined;
@@ -2975,6 +3438,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
     } | undefined;
     metadata_file?: string | undefined;
     setting_sources?: ("user" | "project" | "local")[] | undefined;
+    runtime?: "sdk" | "cli" | undefined;
 }, {
     name: string;
     repo?: string | undefined;
@@ -2982,10 +3446,20 @@ export declare const AgentConfigSchema: z.ZodObject<{
     model?: string | undefined;
     docker?: {
         enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     } | undefined;
     permissions?: {
-        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
         allowed_tools?: string[] | undefined;
         denied_tools?: string[] | undefined;
         bash?: {
@@ -3017,12 +3491,18 @@ export declare const AgentConfigSchema: z.ZodObject<{
     instances?: {
         max_concurrent?: number | undefined;
     } | undefined;
+    working_directory?: string | {
+        root: string;
+        auto_clone?: boolean | undefined;
+        clone_depth?: number | undefined;
+        default_branch?: string | undefined;
+    } | undefined;
     session?: {
         max_turns?: number | undefined;
         timeout?: string | undefined;
         model?: string | undefined;
     } | undefined;
-    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+    permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
     chat?: {
         discord?: {
             bot_token_env: string;
@@ -3056,12 +3536,6 @@ export declare const AgentConfigSchema: z.ZodObject<{
         } | undefined;
     } | undefined;
     description?: string | undefined;
-    workspace?: string | {
-        root: string;
-        auto_clone?: boolean | undefined;
-        clone_depth?: number | undefined;
-        default_branch?: string | undefined;
-    } | undefined;
     identity?: {
         name?: string | undefined;
         role?: string | undefined;
@@ -3097,12 +3571,13 @@ export declare const AgentConfigSchema: z.ZodObject<{
         expression?: string | undefined;
         prompt?: string | undefined;
         outputToFile?: boolean | undefined;
+        resume_session?: boolean | undefined;
     }> | undefined;
     mcp_servers?: Record<string, {
-        command?: string | undefined;
-        args?: string[] | undefined;
         url?: string | undefined;
         env?: Record<string, string> | undefined;
+        command?: string | undefined;
+        args?: string[] | undefined;
     }> | undefined;
     hooks?: {
         after_run?: ({
@@ -3162,6 +3637,7 @@ export declare const AgentConfigSchema: z.ZodObject<{
     } | undefined;
     metadata_file?: string | undefined;
     setting_sources?: ("user" | "project" | "local")[] | undefined;
+    runtime?: "sdk" | "cli" | undefined;
 }>;
 /**
  * Schema for agent overrides in fleet config.
@@ -3231,18 +3707,138 @@ export declare const FleetConfigSchema: z.ZodObject<{
         description?: string | undefined;
     }>>;
     defaults: z.ZodOptional<z.ZodObject<{
-        docker: z.ZodOptional<z.ZodObject<{
+        docker: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+            /** Enable Docker containerization for this agent (default: false) */
             enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            /** Use ephemeral containers (fresh per job, auto-removed) vs persistent (reuse across jobs, kept for inspection) */
+            ephemeral: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            /** Docker image to use (default: anthropic/claude-code:latest) */
+            image: z.ZodOptional<z.ZodString>;
+            /** Network isolation mode (default: bridge for full network access) */
+            network: z.ZodDefault<z.ZodOptional<z.ZodEnum<["none", "bridge", "host"]>>>;
+            /** Memory limit (e.g., "2g", "512m") (default: 2g) */
+            memory: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            /** CPU shares (relative weight, 512 is normal) */
+            cpu_shares: z.ZodOptional<z.ZodNumber>;
+            /** Container user as "UID:GID" string (default: match host user) */
+            user: z.ZodOptional<z.ZodString>;
+            /** Maximum containers to keep per agent before cleanup (default: 5) */
+            max_containers: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            /** Additional volume mounts in Docker format: "host:container:mode" */
+            volumes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            /** Workspace mount mode: rw (read-write, default) or ro (read-only) */
+            workspace_mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["rw", "ro"]>>>;
+            /** Environment variables to pass to the container (supports ${VAR} interpolation) */
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            /** @deprecated Use 'image' instead */
             base_image: z.ZodOptional<z.ZodString>;
         }, "strip", z.ZodTypeAny, {
             enabled: boolean;
+            ephemeral: boolean;
+            network: "none" | "bridge" | "host";
+            memory: string;
+            max_containers: number;
+            workspace_mode: "rw" | "ro";
+            image?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            volumes?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            base_image?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            ephemeral?: boolean | undefined;
+            image?: string | undefined;
+            network?: "none" | "bridge" | "host" | undefined;
+            memory?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            max_containers?: number | undefined;
+            volumes?: string[] | undefined;
+            workspace_mode?: "rw" | "ro" | undefined;
+            env?: Record<string, string> | undefined;
+            base_image?: string | undefined;
+        }>, {
+            enabled: boolean;
+            ephemeral: boolean;
+            network: "none" | "bridge" | "host";
+            memory: string;
+            max_containers: number;
+            workspace_mode: "rw" | "ro";
+            image?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            volumes?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            base_image?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            ephemeral?: boolean | undefined;
+            image?: string | undefined;
+            network?: "none" | "bridge" | "host" | undefined;
+            memory?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            max_containers?: number | undefined;
+            volumes?: string[] | undefined;
+            workspace_mode?: "rw" | "ro" | undefined;
+            env?: Record<string, string> | undefined;
+            base_image?: string | undefined;
+        }>, {
+            enabled: boolean;
+            ephemeral: boolean;
+            network: "none" | "bridge" | "host";
+            memory: string;
+            max_containers: number;
+            workspace_mode: "rw" | "ro";
+            image?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            volumes?: string[] | undefined;
+            env?: Record<string, string> | undefined;
+            base_image?: string | undefined;
+        }, {
+            enabled?: boolean | undefined;
+            ephemeral?: boolean | undefined;
+            image?: string | undefined;
+            network?: "none" | "bridge" | "host" | undefined;
+            memory?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            max_containers?: number | undefined;
+            volumes?: string[] | undefined;
+            workspace_mode?: "rw" | "ro" | undefined;
+            env?: Record<string, string> | undefined;
+            base_image?: string | undefined;
+        }>, {
+            enabled: boolean;
+            ephemeral: boolean;
+            network: "none" | "bridge" | "host";
+            memory: string;
+            max_containers: number;
+            workspace_mode: "rw" | "ro";
+            image?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            volumes?: string[] | undefined;
+            env?: Record<string, string> | undefined;
             base_image?: string | undefined;
         }, {
             enabled?: boolean | undefined;
+            ephemeral?: boolean | undefined;
+            image?: string | undefined;
+            network?: "none" | "bridge" | "host" | undefined;
+            memory?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            max_containers?: number | undefined;
+            volumes?: string[] | undefined;
+            workspace_mode?: "rw" | "ro" | undefined;
+            env?: Record<string, string> | undefined;
             base_image?: string | undefined;
         }>>;
         permissions: z.ZodOptional<z.ZodObject<{
-            mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>>>;
+            mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>>>;
             allowed_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
             denied_tools: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
             bash: z.ZodOptional<z.ZodObject<{
@@ -3256,7 +3852,7 @@ export declare const FleetConfigSchema: z.ZodObject<{
                 denied_patterns?: string[] | undefined;
             }>>;
         }, "strip", z.ZodTypeAny, {
-            mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+            mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
             allowed_tools?: string[] | undefined;
             denied_tools?: string[] | undefined;
             bash?: {
@@ -3264,7 +3860,7 @@ export declare const FleetConfigSchema: z.ZodObject<{
                 denied_patterns?: string[] | undefined;
             } | undefined;
         }, {
-            mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+            mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
             allowed_tools?: string[] | undefined;
             denied_tools?: string[] | undefined;
             bash?: {
@@ -3365,6 +3961,22 @@ export declare const FleetConfigSchema: z.ZodObject<{
         }, {
             max_concurrent?: number | undefined;
         }>>;
+        working_directory: z.ZodOptional<z.ZodLazy<z.ZodUnion<[z.ZodString, z.ZodObject<{
+            root: z.ZodString;
+            auto_clone: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            clone_depth: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+            default_branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            root: string;
+            auto_clone: boolean;
+            clone_depth: number;
+            default_branch: string;
+        }, {
+            root: string;
+            auto_clone?: boolean | undefined;
+            clone_depth?: number | undefined;
+            default_branch?: string | undefined;
+        }>]>>>;
         session: z.ZodOptional<z.ZodObject<{
             max_turns: z.ZodOptional<z.ZodNumber>;
             timeout: z.ZodOptional<z.ZodString>;
@@ -3380,16 +3992,26 @@ export declare const FleetConfigSchema: z.ZodObject<{
         }>>;
         model: z.ZodOptional<z.ZodString>;
         max_turns: z.ZodOptional<z.ZodNumber>;
-        permission_mode: z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan"]>>;
+        permission_mode: z.ZodOptional<z.ZodEnum<["default", "acceptEdits", "bypassPermissions", "plan", "delegate", "dontAsk"]>>;
     }, "strip", z.ZodTypeAny, {
         max_turns?: number | undefined;
         model?: string | undefined;
         docker?: {
             enabled: boolean;
+            ephemeral: boolean;
+            network: "none" | "bridge" | "host";
+            memory: string;
+            max_containers: number;
+            workspace_mode: "rw" | "ro";
+            image?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            volumes?: string[] | undefined;
+            env?: Record<string, string> | undefined;
             base_image?: string | undefined;
         } | undefined;
         permissions?: {
-            mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+            mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
             allowed_tools?: string[] | undefined;
             denied_tools?: string[] | undefined;
             bash?: {
@@ -3421,21 +4043,37 @@ export declare const FleetConfigSchema: z.ZodObject<{
         instances?: {
             max_concurrent: number;
         } | undefined;
+        working_directory?: string | {
+            root: string;
+            auto_clone: boolean;
+            clone_depth: number;
+            default_branch: string;
+        } | undefined;
         session?: {
             max_turns?: number | undefined;
             timeout?: string | undefined;
             model?: string | undefined;
         } | undefined;
-        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
     }, {
         max_turns?: number | undefined;
         model?: string | undefined;
         docker?: {
             enabled?: boolean | undefined;
+            ephemeral?: boolean | undefined;
+            image?: string | undefined;
+            network?: "none" | "bridge" | "host" | undefined;
+            memory?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            max_containers?: number | undefined;
+            volumes?: string[] | undefined;
+            workspace_mode?: "rw" | "ro" | undefined;
+            env?: Record<string, string> | undefined;
             base_image?: string | undefined;
         } | undefined;
         permissions?: {
-            mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+            mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
             allowed_tools?: string[] | undefined;
             denied_tools?: string[] | undefined;
             bash?: {
@@ -3467,14 +4105,20 @@ export declare const FleetConfigSchema: z.ZodObject<{
         instances?: {
             max_concurrent?: number | undefined;
         } | undefined;
+        working_directory?: string | {
+            root: string;
+            auto_clone?: boolean | undefined;
+            clone_depth?: number | undefined;
+            default_branch?: string | undefined;
+        } | undefined;
         session?: {
             max_turns?: number | undefined;
             timeout?: string | undefined;
             model?: string | undefined;
         } | undefined;
-        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
     }>>;
-    workspace: z.ZodOptional<z.ZodObject<{
+    working_directory: z.ZodOptional<z.ZodObject<{
         root: z.ZodString;
         auto_clone: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
         clone_depth: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
@@ -3540,14 +4184,134 @@ export declare const FleetConfigSchema: z.ZodObject<{
         port?: number | undefined;
         secret_env?: string | undefined;
     }>>;
-    docker: z.ZodOptional<z.ZodObject<{
+    docker: z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodObject<{
+        /** Enable Docker containerization for this agent (default: false) */
         enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** Use ephemeral containers (fresh per job, auto-removed) vs persistent (reuse across jobs, kept for inspection) */
+        ephemeral: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        /** Docker image to use (default: anthropic/claude-code:latest) */
+        image: z.ZodOptional<z.ZodString>;
+        /** Network isolation mode (default: bridge for full network access) */
+        network: z.ZodDefault<z.ZodOptional<z.ZodEnum<["none", "bridge", "host"]>>>;
+        /** Memory limit (e.g., "2g", "512m") (default: 2g) */
+        memory: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        /** CPU shares (relative weight, 512 is normal) */
+        cpu_shares: z.ZodOptional<z.ZodNumber>;
+        /** Container user as "UID:GID" string (default: match host user) */
+        user: z.ZodOptional<z.ZodString>;
+        /** Maximum containers to keep per agent before cleanup (default: 5) */
+        max_containers: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+        /** Additional volume mounts in Docker format: "host:container:mode" */
+        volumes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /** Workspace mount mode: rw (read-write, default) or ro (read-only) */
+        workspace_mode: z.ZodDefault<z.ZodOptional<z.ZodEnum<["rw", "ro"]>>>;
+        /** Environment variables to pass to the container (supports ${VAR} interpolation) */
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        /** @deprecated Use 'image' instead */
         base_image: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     }, {
         enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }>, {
+        enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
+        base_image?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     }>>;
 }, "strict", z.ZodTypeAny, {
@@ -3558,20 +4322,30 @@ export declare const FleetConfigSchema: z.ZodObject<{
     }[];
     docker?: {
         enabled: boolean;
+        ephemeral: boolean;
+        network: "none" | "bridge" | "host";
+        memory: string;
+        max_containers: number;
+        workspace_mode: "rw" | "ro";
+        image?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        volumes?: string[] | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     } | undefined;
+    working_directory?: {
+        root: string;
+        auto_clone: boolean;
+        clone_depth: number;
+        default_branch: string;
+    } | undefined;
     chat?: {
         discord?: {
             enabled: boolean;
             token_env?: string | undefined;
         } | undefined;
     } | undefined;
-    workspace?: {
-        root: string;
-        auto_clone: boolean;
-        clone_depth: number;
-        default_branch: string;
-    } | undefined;
     fleet?: {
         name?: string | undefined;
         description?: string | undefined;
@@ -3581,10 +4355,20 @@ export declare const FleetConfigSchema: z.ZodObject<{
         model?: string | undefined;
         docker?: {
             enabled: boolean;
+            ephemeral: boolean;
+            network: "none" | "bridge" | "host";
+            memory: string;
+            max_containers: number;
+            workspace_mode: "rw" | "ro";
+            image?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            volumes?: string[] | undefined;
+            env?: Record<string, string> | undefined;
             base_image?: string | undefined;
         } | undefined;
         permissions?: {
-            mode: "default" | "acceptEdits" | "bypassPermissions" | "plan";
+            mode: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk";
             allowed_tools?: string[] | undefined;
             denied_tools?: string[] | undefined;
             bash?: {
@@ -3616,12 +4400,18 @@ export declare const FleetConfigSchema: z.ZodObject<{
         instances?: {
             max_concurrent: number;
         } | undefined;
+        working_directory?: string | {
+            root: string;
+            auto_clone: boolean;
+            clone_depth: number;
+            default_branch: string;
+        } | undefined;
         session?: {
             max_turns?: number | undefined;
             timeout?: string | undefined;
             model?: string | undefined;
         } | undefined;
-        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
     } | undefined;
     webhooks?: {
         enabled: boolean;
@@ -3631,20 +4421,30 @@ export declare const FleetConfigSchema: z.ZodObject<{
 }, {
     docker?: {
         enabled?: boolean | undefined;
+        ephemeral?: boolean | undefined;
+        image?: string | undefined;
+        network?: "none" | "bridge" | "host" | undefined;
+        memory?: string | undefined;
+        cpu_shares?: number | undefined;
+        user?: string | undefined;
+        max_containers?: number | undefined;
+        volumes?: string[] | undefined;
+        workspace_mode?: "rw" | "ro" | undefined;
+        env?: Record<string, string> | undefined;
         base_image?: string | undefined;
     } | undefined;
+    working_directory?: {
+        root: string;
+        auto_clone?: boolean | undefined;
+        clone_depth?: number | undefined;
+        default_branch?: string | undefined;
+    } | undefined;
     chat?: {
         discord?: {
             token_env?: string | undefined;
             enabled?: boolean | undefined;
         } | undefined;
     } | undefined;
-    workspace?: {
-        root: string;
-        auto_clone?: boolean | undefined;
-        clone_depth?: number | undefined;
-        default_branch?: string | undefined;
-    } | undefined;
     version?: number | undefined;
     fleet?: {
         name?: string | undefined;
@@ -3655,10 +4455,20 @@ export declare const FleetConfigSchema: z.ZodObject<{
         model?: string | undefined;
         docker?: {
             enabled?: boolean | undefined;
+            ephemeral?: boolean | undefined;
+            image?: string | undefined;
+            network?: "none" | "bridge" | "host" | undefined;
+            memory?: string | undefined;
+            cpu_shares?: number | undefined;
+            user?: string | undefined;
+            max_containers?: number | undefined;
+            volumes?: string[] | undefined;
+            workspace_mode?: "rw" | "ro" | undefined;
+            env?: Record<string, string> | undefined;
             base_image?: string | undefined;
         } | undefined;
         permissions?: {
-            mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+            mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
             allowed_tools?: string[] | undefined;
             denied_tools?: string[] | undefined;
             bash?: {
@@ -3690,12 +4500,18 @@ export declare const FleetConfigSchema: z.ZodObject<{
         instances?: {
             max_concurrent?: number | undefined;
         } | undefined;
+        working_directory?: string | {
+            root: string;
+            auto_clone?: boolean | undefined;
+            clone_depth?: number | undefined;
+            default_branch?: string | undefined;
+        } | undefined;
         session?: {
             max_turns?: number | undefined;
             timeout?: string | undefined;
             model?: string | undefined;
         } | undefined;
-        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | undefined;
+        permission_mode?: "default" | "acceptEdits" | "bypassPermissions" | "plan" | "delegate" | "dontAsk" | undefined;
     } | undefined;
     agents?: {
         path: string;
@@ -3717,9 +4533,10 @@ export type GitHubWorkSource = z.infer<typeof GitHubWorkSourceSchema>;
 export type BaseWorkSource = z.infer<typeof BaseWorkSourceSchema>;
 export type WorkSource = z.infer<typeof WorkSourceSchema>;
 export type Instances = z.infer<typeof InstancesSchema>;
+export type DockerInput = z.input<typeof DockerSchema>;
 export type Docker = z.infer<typeof DockerSchema>;
 export type Defaults = z.infer<typeof DefaultsSchema>;
-export type Workspace = z.infer<typeof WorkspaceSchema>;
+export type WorkingDirectory = z.infer<typeof WorkingDirectorySchema>;
 export type AgentOverrides = z.infer<typeof AgentOverridesSchema>;
 export type AgentReference = z.infer<typeof AgentReferenceSchema>;
 export type DiscordChat = z.infer<typeof DiscordChatSchema>;
@@ -3737,7 +4554,7 @@ export type DiscordChannel = z.infer<typeof DiscordChannelSchema>;
 export type DiscordGuild = z.infer<typeof DiscordGuildSchema>;
 export type AgentChatDiscord = z.infer<typeof AgentChatDiscordSchema>;
 export type AgentChat = z.infer<typeof AgentChatSchema>;
-export type AgentWorkspace = z.infer<typeof AgentWorkspaceSchema>;
+export type AgentWorkingDirectory = z.infer<typeof AgentWorkingDirectorySchema>;
 export type AgentConfig = z.infer<typeof AgentConfigSchema>;
 export type HookEvent = z.infer<typeof HookEventSchema>;
 export type ShellHookConfig = z.infer<typeof ShellHookConfigSchema>;