@kitman-sh/loops 0.0.0-stage → 0.7.0

package/types/packages/core/src/agent-environment.d.ts

@@ -0,0 +1,2429 @@
+import * as Schema from 'effect/Schema';
+export declare const AgentHarnessIds: readonly ['opencode', 'claude-code', 'codex', 'pi'];
+export declare const AgentEnvironmentPolicy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+export declare const AgentHarnessId: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+/** A relative path that stays inside its directory. */
+export declare const relativePathPattern = "^(?!/)(?!.*\\\\)(?!.*//)(?!.*(?:^|/)\\.\\.?($|/)).+$";
+export declare const skillNamePattern = "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$";
+export declare const SkillSource: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"skills_sh">;
+    readonly slug: Schema.String;
+    readonly version: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"kitman">;
+    readonly skillId: Schema.optionalKey<Schema.String>;
+    readonly name: Schema.optionalKey<Schema.String>;
+    readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+    /** The skill directory's other files, by path relative to it. */
+    readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"git">;
+    readonly url: Schema.String;
+    readonly ref: Schema.String;
+    readonly path: Schema.optionalKey<Schema.String>;
+    readonly sha256: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"package">;
+    readonly packageName: Schema.String;
+    readonly version: Schema.String;
+    readonly path: Schema.optionalKey<Schema.String>;
+    readonly sha256: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"url">;
+    readonly url: Schema.String;
+    readonly sha256: Schema.String;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"local_path">;
+    readonly path: Schema.String;
+}>]>;
+export declare const ProviderAuthRef: Schema.Union<readonly [Schema.Struct<{
+    readonly provider: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly kind: Schema.Literal<"existing_harness_login">;
+    readonly accountHint: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly provider: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly kind: Schema.Literal<"local_env">;
+    readonly envName: Schema.String;
+}>, Schema.Struct<{
+    readonly provider: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly kind: Schema.Literal<"runner_secret">;
+    readonly runnerSecretName: Schema.String;
+}>, Schema.Struct<{
+    readonly provider: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly kind: Schema.Literal<"managed_oauth">;
+    readonly grantId: Schema.optionalKey<Schema.String>;
+}>]>;
+export declare const RunnerSecretRef: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly source: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"env">;
+        readonly envName: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"file">;
+        readonly pathRef: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"exec">;
+        readonly commandRef: Schema.String;
+    }>]>;
+    readonly capabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>;
+export declare const AgentSkillRequirement: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly source: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"skills_sh">;
+        readonly slug: Schema.String;
+        readonly version: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"kitman">;
+        readonly skillId: Schema.optionalKey<Schema.String>;
+        readonly name: Schema.optionalKey<Schema.String>;
+        readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+        /** The skill directory's other files, by path relative to it. */
+        readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"git">;
+        readonly url: Schema.String;
+        readonly ref: Schema.String;
+        readonly path: Schema.optionalKey<Schema.String>;
+        readonly sha256: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"package">;
+        readonly packageName: Schema.String;
+        readonly version: Schema.String;
+        readonly path: Schema.optionalKey<Schema.String>;
+        readonly sha256: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"url">;
+        readonly url: Schema.String;
+        readonly sha256: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"local_path">;
+        readonly path: Schema.String;
+    }>]>;
+}>;
+export declare const AgentPluginRequirement: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly source: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"package">;
+        readonly packageName: Schema.String;
+        readonly version: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"git">;
+        readonly url: Schema.String;
+        readonly ref: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"url">;
+        readonly url: Schema.String;
+        readonly sha256: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"local_path">;
+        readonly path: Schema.String;
+    }>]>;
+}>;
+export declare const AgentMcpServerRequirement: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly transport: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"stdio">;
+        readonly command: Schema.String;
+        readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly env: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"streamable_http">;
+        readonly url: Schema.String;
+        readonly headers: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+    }>]>;
+}>;
+export declare const AgentHarnessSetting: Schema.Struct<{
+    readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+    readonly key: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly value: Schema.Unknown;
+}>;
+export declare const AgentRuntimeConstraint: Schema.Struct<{
+    readonly key: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly value: Schema.Unknown;
+}>;
+export declare const AgentPermissionRequirement: Schema.Struct<{
+    readonly key: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly value: Schema.Unknown;
+}>;
+export declare const AgentHookRequirement: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly event: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly command: Schema.String;
+    readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly timeoutMs: Schema.optionalKey<Schema.Finite>;
+}>;
+export declare const AgentSandboxPolicyRequirement: Schema.Struct<{
+    readonly key: Schema.String;
+    readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+    readonly value: Schema.Unknown;
+}>;
+export declare const AgentEnvironmentFragment: Schema.Struct<{
+    readonly skills: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"skills_sh">;
+            readonly slug: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"kitman">;
+            readonly skillId: Schema.optionalKey<Schema.String>;
+            readonly name: Schema.optionalKey<Schema.String>;
+            readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+            /** The skill directory's other files, by path relative to it. */
+            readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"git">;
+            readonly url: Schema.String;
+            readonly ref: Schema.String;
+            readonly path: Schema.optionalKey<Schema.String>;
+            readonly sha256: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"package">;
+            readonly packageName: Schema.String;
+            readonly version: Schema.String;
+            readonly path: Schema.optionalKey<Schema.String>;
+            readonly sha256: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"url">;
+            readonly url: Schema.String;
+            readonly sha256: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"local_path">;
+            readonly path: Schema.String;
+        }>]>;
+    }>>>;
+    readonly plugins: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"package">;
+            readonly packageName: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"git">;
+            readonly url: Schema.String;
+            readonly ref: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"url">;
+            readonly url: Schema.String;
+            readonly sha256: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"local_path">;
+            readonly path: Schema.String;
+        }>]>;
+    }>>>;
+    readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly transport: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"stdio">;
+            readonly command: Schema.String;
+            readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly env: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"streamable_http">;
+            readonly url: Schema.String;
+            readonly headers: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+        }>]>;
+    }>>>;
+    readonly harnessSettings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+        readonly key: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly value: Schema.Unknown;
+    }>>>;
+    readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"existing_harness_login">;
+        readonly accountHint: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"local_env">;
+        readonly envName: Schema.String;
+    }>, Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"runner_secret">;
+        readonly runnerSecretName: Schema.String;
+    }>, Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"managed_oauth">;
+        readonly grantId: Schema.optionalKey<Schema.String>;
+    }>]>>>;
+    readonly runnerSecretRefs: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"env">;
+            readonly envName: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"file">;
+            readonly pathRef: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"exec">;
+            readonly commandRef: Schema.String;
+        }>]>;
+        readonly capabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    }>>>;
+    readonly permissions: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly value: Schema.Unknown;
+    }>>>;
+    readonly hooks: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly event: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly command: Schema.String;
+        readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly timeoutMs: Schema.optionalKey<Schema.Finite>;
+    }>>>;
+    readonly runtimeConstraints: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly value: Schema.Unknown;
+    }>>>;
+    readonly sandboxPolicyRequirements: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly value: Schema.Unknown;
+    }>>>;
+}>;
+export declare const HarnessKitActivation: Schema.Struct<{
+    readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+    readonly kitId: Schema.String;
+    readonly enabled: Schema.Boolean;
+    readonly policy: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>>;
+}>;
+export declare const AgentModelPreference: Schema.Struct<{
+    readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+    readonly profileRef: Schema.String;
+    readonly provider: Schema.optionalKey<Schema.String>;
+    readonly model: Schema.optionalKey<Schema.String>;
+}>;
+export declare const UserAgentPreferences: Schema.Struct<{
+    readonly userId: Schema.optionalKey<Schema.String>;
+    readonly defaultHarness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+    readonly perHarnessKitActivations: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+        readonly kitId: Schema.String;
+        readonly enabled: Schema.Boolean;
+        readonly policy: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>>;
+    }>>>;
+    readonly modelPreferences: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+        readonly profileRef: Schema.String;
+        readonly provider: Schema.optionalKey<Schema.String>;
+        readonly model: Schema.optionalKey<Schema.String>;
+    }>>>;
+    readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"existing_harness_login">;
+        readonly accountHint: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"local_env">;
+        readonly envName: Schema.String;
+    }>, Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"runner_secret">;
+        readonly runnerSecretName: Schema.String;
+    }>, Schema.Struct<{
+        readonly provider: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly kind: Schema.Literal<"managed_oauth">;
+        readonly grantId: Schema.optionalKey<Schema.String>;
+    }>]>>>;
+    readonly ui: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
+    readonly agentEnvironment: Schema.optionalKey<Schema.Struct<{
+        readonly skills: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"skills_sh">;
+                readonly slug: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"kitman">;
+                readonly skillId: Schema.optionalKey<Schema.String>;
+                readonly name: Schema.optionalKey<Schema.String>;
+                readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+                /** The skill directory's other files, by path relative to it. */
+                readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"git">;
+                readonly url: Schema.String;
+                readonly ref: Schema.String;
+                readonly path: Schema.optionalKey<Schema.String>;
+                readonly sha256: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"package">;
+                readonly packageName: Schema.String;
+                readonly version: Schema.String;
+                readonly path: Schema.optionalKey<Schema.String>;
+                readonly sha256: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"url">;
+                readonly url: Schema.String;
+                readonly sha256: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"local_path">;
+                readonly path: Schema.String;
+            }>]>;
+        }>>>;
+        readonly plugins: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"package">;
+                readonly packageName: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"git">;
+                readonly url: Schema.String;
+                readonly ref: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"url">;
+                readonly url: Schema.String;
+                readonly sha256: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"local_path">;
+                readonly path: Schema.String;
+            }>]>;
+        }>>>;
+        readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly transport: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"stdio">;
+                readonly command: Schema.String;
+                readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly env: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"streamable_http">;
+                readonly url: Schema.String;
+                readonly headers: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+            }>]>;
+        }>>>;
+        readonly harnessSettings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>>>;
+        readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"existing_harness_login">;
+            readonly accountHint: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"local_env">;
+            readonly envName: Schema.String;
+        }>, Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"runner_secret">;
+            readonly runnerSecretName: Schema.String;
+        }>, Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"managed_oauth">;
+            readonly grantId: Schema.optionalKey<Schema.String>;
+        }>]>>>;
+        readonly runnerSecretRefs: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"env">;
+                readonly envName: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"file">;
+                readonly pathRef: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"exec">;
+                readonly commandRef: Schema.String;
+            }>]>;
+            readonly capabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        }>>>;
+        readonly permissions: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>>>;
+        readonly hooks: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly name: Schema.String;
+            readonly event: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly command: Schema.String;
+            readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly timeoutMs: Schema.optionalKey<Schema.Finite>;
+        }>>>;
+        readonly runtimeConstraints: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>>>;
+        readonly sandboxPolicyRequirements: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>>>;
+    }>>;
+}>;
+export declare const AgentSyncProfileSource: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"personal_kit_defaults">;
+    readonly harness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+    readonly enabled: Schema.Boolean;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"workspace_assignments">;
+    readonly workspaceId: Schema.String;
+    readonly enabled: Schema.Boolean;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"team_defaults">;
+    readonly workspaceId: Schema.String;
+    readonly teamId: Schema.optionalKey<Schema.String>;
+    readonly enabled: Schema.Boolean;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"project_kits">;
+    readonly projectId: Schema.String;
+    readonly enabled: Schema.Boolean;
+}>]>;
+export declare const AgentSyncProfile: Schema.Struct<{
+    readonly id: Schema.optionalKey<Schema.String>;
+    readonly userId: Schema.String;
+    readonly name: Schema.String;
+    readonly default: Schema.optionalKey<Schema.Boolean>;
+    readonly harnesses: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>>;
+    readonly sources: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"personal_kit_defaults">;
+        readonly harness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+        readonly enabled: Schema.Boolean;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"workspace_assignments">;
+        readonly workspaceId: Schema.String;
+        readonly enabled: Schema.Boolean;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"team_defaults">;
+        readonly workspaceId: Schema.String;
+        readonly teamId: Schema.optionalKey<Schema.String>;
+        readonly enabled: Schema.Boolean;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"project_kits">;
+        readonly projectId: Schema.String;
+        readonly enabled: Schema.Boolean;
+    }>]>>;
+}>;
+export declare const AgentEnvironmentSource: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"built_in">;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"user_preferences">;
+    readonly userId: Schema.String;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kitRef: Schema.optionalKey<Schema.String>;
+    readonly kitVersion: Schema.optionalKey<Schema.String>;
+    readonly kitSha256: Schema.optionalKey<Schema.String>;
+    readonly kitActivationId: Schema.optionalKey<Schema.String>;
+    readonly kitActivationType: Schema.optionalKey<Schema.String>;
+    readonly kind: Schema.Literal<"user_kit">;
+    readonly userId: Schema.String;
+    readonly kitId: Schema.String;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"agent_sync_profile">;
+    readonly profileId: Schema.optionalKey<Schema.String>;
+    readonly userId: Schema.String;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"device_local">;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kitRef: Schema.optionalKey<Schema.String>;
+    readonly kitVersion: Schema.optionalKey<Schema.String>;
+    readonly kitSha256: Schema.optionalKey<Schema.String>;
+    readonly kitActivationId: Schema.optionalKey<Schema.String>;
+    readonly kitActivationType: Schema.optionalKey<Schema.String>;
+    readonly kind: Schema.Literal<"workspace_kit">;
+    readonly kitId: Schema.String;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kitRef: Schema.optionalKey<Schema.String>;
+    readonly kitVersion: Schema.optionalKey<Schema.String>;
+    readonly kitSha256: Schema.optionalKey<Schema.String>;
+    readonly kitActivationId: Schema.optionalKey<Schema.String>;
+    readonly kitActivationType: Schema.optionalKey<Schema.String>;
+    readonly kind: Schema.Literal<"team_default_kit">;
+    readonly teamId: Schema.String;
+    readonly kitId: Schema.String;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kitRef: Schema.optionalKey<Schema.String>;
+    readonly kitVersion: Schema.optionalKey<Schema.String>;
+    readonly kitSha256: Schema.optionalKey<Schema.String>;
+    readonly kitActivationId: Schema.optionalKey<Schema.String>;
+    readonly kitActivationType: Schema.optionalKey<Schema.String>;
+    readonly kind: Schema.Literal<"project_kit">;
+    readonly kitId: Schema.String;
+    readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+    readonly policyRevision: Schema.optionalKey<Schema.Int>;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"marketplace_kit">;
+    readonly kitSourceId: Schema.String;
+    readonly kitVersionId: Schema.optionalKey<Schema.String>;
+    readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+    readonly kitActivationId: Schema.optionalKey<Schema.String>;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"step_attempt_override">;
+    readonly stepAttemptId: Schema.String;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"command_override">;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>]>;
+export declare const AgentEnvironment: Schema.Struct<{
+    readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+    readonly skills: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"skills_sh">;
+                readonly slug: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"kitman">;
+                readonly skillId: Schema.optionalKey<Schema.String>;
+                readonly name: Schema.optionalKey<Schema.String>;
+                readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+                /** The skill directory's other files, by path relative to it. */
+                readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"git">;
+                readonly url: Schema.String;
+                readonly ref: Schema.String;
+                readonly path: Schema.optionalKey<Schema.String>;
+                readonly sha256: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"package">;
+                readonly packageName: Schema.String;
+                readonly version: Schema.String;
+                readonly path: Schema.optionalKey<Schema.String>;
+                readonly sha256: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"url">;
+                readonly url: Schema.String;
+                readonly sha256: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"local_path">;
+                readonly path: Schema.String;
+            }>]>;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly plugins: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"package">;
+                readonly packageName: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"git">;
+                readonly url: Schema.String;
+                readonly ref: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"url">;
+                readonly url: Schema.String;
+                readonly sha256: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"local_path">;
+                readonly path: Schema.String;
+            }>]>;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly mcpServers: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly transport: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"stdio">;
+                readonly command: Schema.String;
+                readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly env: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"streamable_http">;
+                readonly url: Schema.String;
+                readonly headers: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+            }>]>;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly harnessSettings: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly providerAuthRefs: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Union<readonly [Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"existing_harness_login">;
+            readonly accountHint: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"local_env">;
+            readonly envName: Schema.String;
+        }>, Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"runner_secret">;
+            readonly runnerSecretName: Schema.String;
+        }>, Schema.Struct<{
+            readonly provider: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly kind: Schema.Literal<"managed_oauth">;
+            readonly grantId: Schema.optionalKey<Schema.String>;
+        }>]>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly runnerSecretRefs: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly name: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"env">;
+                readonly envName: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"file">;
+                readonly pathRef: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"exec">;
+                readonly commandRef: Schema.String;
+            }>]>;
+            readonly capabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly permissions: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly hooks: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly name: Schema.String;
+            readonly event: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly command: Schema.String;
+            readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly timeoutMs: Schema.optionalKey<Schema.Finite>;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly runtimeConstraints: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly sandboxPolicyRequirements: Schema.$Array<Schema.Struct<{
+        readonly item: Schema.Struct<{
+            readonly key: Schema.String;
+            readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+            readonly value: Schema.Unknown;
+        }>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+    }>>;
+    readonly warnings: Schema.$Array<Schema.String>;
+}>;
+export declare const AgentEnvironmentSyncPlan: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["ready", "needs_apply", "blocked"]>;
+    readonly targetHarness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+    readonly agentEnvironment: Schema.Struct<{
+        readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+        readonly skills: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"skills_sh">;
+                    readonly slug: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"kitman">;
+                    readonly skillId: Schema.optionalKey<Schema.String>;
+                    readonly name: Schema.optionalKey<Schema.String>;
+                    readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+                    /** The skill directory's other files, by path relative to it. */
+                    readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"git">;
+                    readonly url: Schema.String;
+                    readonly ref: Schema.String;
+                    readonly path: Schema.optionalKey<Schema.String>;
+                    readonly sha256: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"package">;
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.String;
+                    readonly path: Schema.optionalKey<Schema.String>;
+                    readonly sha256: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"url">;
+                    readonly url: Schema.String;
+                    readonly sha256: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"local_path">;
+                    readonly path: Schema.String;
+                }>]>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly plugins: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"package">;
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"git">;
+                    readonly url: Schema.String;
+                    readonly ref: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"url">;
+                    readonly url: Schema.String;
+                    readonly sha256: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"local_path">;
+                    readonly path: Schema.String;
+                }>]>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly mcpServers: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly transport: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"stdio">;
+                    readonly command: Schema.String;
+                    readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                    readonly env: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"streamable_http">;
+                    readonly url: Schema.String;
+                    readonly headers: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>]>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly harnessSettings: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly providerAuthRefs: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Union<readonly [Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"existing_harness_login">;
+                readonly accountHint: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"local_env">;
+                readonly envName: Schema.String;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"runner_secret">;
+                readonly runnerSecretName: Schema.String;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"managed_oauth">;
+                readonly grantId: Schema.optionalKey<Schema.String>;
+            }>]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly runnerSecretRefs: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"env">;
+                    readonly envName: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"file">;
+                    readonly pathRef: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"exec">;
+                    readonly commandRef: Schema.String;
+                }>]>;
+                readonly capabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly permissions: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly hooks: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly event: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly command: Schema.String;
+                readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly timeoutMs: Schema.optionalKey<Schema.Finite>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly runtimeConstraints: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly sandboxPolicyRequirements: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly warnings: Schema.$Array<Schema.String>;
+    }>;
+    readonly items: Schema.$Array<Schema.Struct<{
+        readonly kind: Schema.Literals<readonly ["skill", "plugin", "mcp_server", "harness_setting", "provider_auth_ref", "runner_secret_ref", "permission", "hook", "runtime_constraint", "sandbox_policy_requirement"]>;
+        readonly name: Schema.String;
+        readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+        readonly source: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"user_preferences">;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"user_kit">;
+            readonly userId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent_sync_profile">;
+            readonly profileId: Schema.optionalKey<Schema.String>;
+            readonly userId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"device_local">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"workspace_kit">;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"team_default_kit">;
+            readonly teamId: Schema.String;
+            readonly kitId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kitRef: Schema.optionalKey<Schema.String>;
+            readonly kitVersion: Schema.optionalKey<Schema.String>;
+            readonly kitSha256: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationType: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"project_kit">;
+            readonly kitId: Schema.String;
+            readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+            readonly policyRevision: Schema.optionalKey<Schema.Int>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"marketplace_kit">;
+            readonly kitSourceId: Schema.String;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+            readonly kitActivationId: Schema.optionalKey<Schema.String>;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"step_attempt_override">;
+            readonly stepAttemptId: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"command_override">;
+            readonly label: Schema.optionalKey<Schema.String>;
+        }>]>;
+        readonly materializerRequirements: Schema.$Array<Schema.Literals<readonly ["config_writer", "provider_auth", "runner_secret", "bun", "sandbox_policy"]>>;
+        readonly applyMode: Schema.Literals<readonly ["automatic", "manual", "verify_only"]>;
+    }>>;
+    readonly blockers: Schema.$Array<Schema.String>;
+    readonly drift: Schema.$Array<Schema.String>;
+}>;
+export type AgentEnvironmentPolicy = (typeof AgentEnvironmentPolicy)['Type'];
+export type AgentHarnessId = (typeof AgentHarnessId)['Type'];
+export type SkillSource = (typeof SkillSource)['Type'];
+export type ProviderAuthRef = (typeof ProviderAuthRef)['Type'];
+export type RunnerSecretRef = (typeof RunnerSecretRef)['Type'];
+export type AgentSkillRequirement = (typeof AgentSkillRequirement)['Type'];
+export type AgentPluginRequirement = (typeof AgentPluginRequirement)['Type'];
+export type AgentMcpServerRequirement = (typeof AgentMcpServerRequirement)['Type'];
+export type AgentHarnessSetting = (typeof AgentHarnessSetting)['Type'];
+export type AgentRuntimeConstraint = (typeof AgentRuntimeConstraint)['Type'];
+export type AgentPermissionRequirement = (typeof AgentPermissionRequirement)['Type'];
+export type AgentHookRequirement = (typeof AgentHookRequirement)['Type'];
+export type AgentSandboxPolicyRequirement = (typeof AgentSandboxPolicyRequirement)['Type'];
+export type AgentEnvironmentFragment = (typeof AgentEnvironmentFragment)['Type'];
+export type HarnessKitActivation = (typeof HarnessKitActivation)['Type'];
+export type AgentModelPreference = (typeof AgentModelPreference)['Type'];
+export type UserAgentPreferences = (typeof UserAgentPreferences)['Type'];
+export type AgentSyncProfileSource = (typeof AgentSyncProfileSource)['Type'];
+export type AgentSyncProfile = (typeof AgentSyncProfile)['Type'];
+export type AgentEnvironmentSource = (typeof AgentEnvironmentSource)['Type'];
+export type AgentEnvironment = (typeof AgentEnvironment)['Type'];
+export type AgentEnvironmentSyncPlan = (typeof AgentEnvironmentSyncPlan)['Type'];
+export declare function findForbiddenAgentEnvironmentSecretPath<ValueType>(value: ValueType): string | undefined;