@kitman-sh/sdk 0.7.2 → 0.7.4

package/types/packages/core/src/runner.d.ts

@@ -0,0 +1,3776 @@
+import * as Schema from 'effect/Schema';
+import { type AgentEnvironment as AgentEnvironmentValue } from './agent-environment';
+import { type LoopStep as LoopStepValue } from './loop';
+import type { ControlCommandList } from './run';
+export { RunnerExecutionRouting } from './runner-routing';
+export type { RunnerExecutionRouting as RunnerExecutionRoutingValue } from './runner-routing';
+export declare const DefaultRunnerHeartbeatStaleAfterSeconds = 120;
+export declare const RunnerOwnership: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"workspace">;
+    readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"project">;
+    readonly projectId: Schema.String;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"personal">;
+    readonly ownerUserId: Schema.String;
+    /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+    readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+}>]>;
+export declare const RunnerExecutionBackend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+export declare const RunnerLoopExecutionCapability: Schema.Struct<{
+    readonly supported: Schema.Boolean;
+    readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+    readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+    readonly sandboxBackends: Schema.$Array<Schema.String>;
+    readonly providerActions: Schema.Struct<{
+        readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+        readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+        readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+        readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+    }>;
+    readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+}>;
+/** A SandboxBackend a Runner does not offer, and what its host lacks for it. */
+export declare const RunnerSandboxUnavailable: Schema.Struct<{
+    readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+    readonly missing: Schema.$Array<Schema.String>;
+}>;
+export type RunnerSandboxUnavailable = (typeof RunnerSandboxUnavailable)['Type'];
+/** The Harnesses a Runner looks for, in the order its default is picked from (ADR-0067). */
+export declare const DetectedHarnessIds: readonly ['pi', 'claude', 'codex'];
+export type DetectedHarnessId = (typeof DetectedHarnessIds)[number];
+/** A Harness a Runner looks for but does not offer, and what it lacks. */
+export declare const RunnerHarnessUnavailable: Schema.Struct<{
+    readonly harness: Schema.String;
+    readonly missing: Schema.$Array<Schema.String>;
+}>;
+export type RunnerHarnessUnavailable = (typeof RunnerHarnessUnavailable)['Type'];
+export declare const RunnerCapabilities: Schema.Struct<{
+    readonly harnesses: Schema.$Array<Schema.String>;
+    /** The Harness an Agent that names none launches on. */
+    readonly defaultHarness: Schema.optionalKey<Schema.String>;
+    readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly harness: Schema.String;
+        readonly missing: Schema.$Array<Schema.String>;
+    }>>>;
+    readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+    readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+    readonly sandboxBackends: Schema.$Array<Schema.String>;
+    readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly implementation: Schema.String;
+        readonly version: Schema.String;
+        readonly guestRuntime: Schema.optionalKey<Schema.String>;
+        readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+        readonly moduleLoading: Schema.Boolean;
+        readonly longLivedProcesses: Schema.Boolean;
+        readonly services: Schema.Boolean;
+        readonly tunnels: Schema.Boolean;
+        readonly processIsolation: Schema.Boolean;
+        readonly filesystemIsolation: Schema.Boolean;
+        readonly networkIsolation: Schema.Boolean;
+        readonly resourceEnforcement: Schema.Boolean;
+    }>>>;
+    readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+        readonly missing: Schema.$Array<Schema.String>;
+    }>>>;
+    /** Namespaced native extension identities (id@version) the runner supports. */
+    readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly deliveryTools: Schema.$Array<Schema.Struct<{
+        readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+        readonly available: Schema.Boolean;
+        readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+    }>>;
+    readonly bun: Schema.Struct<{
+        readonly available: Schema.Boolean;
+        readonly version: Schema.optionalKey<Schema.String>;
+    }>;
+    readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+    readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly repoBindingId: Schema.String;
+        readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+        readonly host: Schema.String;
+        readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+        readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+        readonly authenticated: Schema.Boolean;
+        readonly canPush: Schema.optionalKey<Schema.Boolean>;
+    }>>>;
+    readonly runs: Schema.optionalKey<Schema.Struct<{
+        readonly supported: Schema.Boolean;
+        readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+        readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+        readonly sandboxBackends: Schema.$Array<Schema.String>;
+        readonly providerActions: Schema.Struct<{
+            readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+            readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+            readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+            readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+        }>;
+        readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+    }>>;
+    readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+        readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+        readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+        readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+        readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+    }>>;
+}>;
+export declare const Runner: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly workspaceId: Schema.String;
+    readonly agentIdentityId: Schema.String;
+    readonly ownership: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"workspace">;
+        readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"project">;
+        readonly projectId: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"personal">;
+        readonly ownerUserId: Schema.String;
+        /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+        readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+    }>]>;
+    readonly projectGrantIds: Schema.$Array<Schema.String>;
+    readonly credentialHostId: Schema.optionalKey<Schema.String>;
+    readonly name: Schema.String;
+    readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
+    readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+    readonly capabilities: Schema.Struct<{
+        readonly harnesses: Schema.$Array<Schema.String>;
+        /** The Harness an Agent that names none launches on. */
+        readonly defaultHarness: Schema.optionalKey<Schema.String>;
+        readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly harness: Schema.String;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+        readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+        readonly sandboxBackends: Schema.$Array<Schema.String>;
+        readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly implementation: Schema.String;
+            readonly version: Schema.String;
+            readonly guestRuntime: Schema.optionalKey<Schema.String>;
+            readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+            readonly moduleLoading: Schema.Boolean;
+            readonly longLivedProcesses: Schema.Boolean;
+            readonly services: Schema.Boolean;
+            readonly tunnels: Schema.Boolean;
+            readonly processIsolation: Schema.Boolean;
+            readonly filesystemIsolation: Schema.Boolean;
+            readonly networkIsolation: Schema.Boolean;
+            readonly resourceEnforcement: Schema.Boolean;
+        }>>>;
+        readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        /** Namespaced native extension identities (id@version) the runner supports. */
+        readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly deliveryTools: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+            readonly available: Schema.Boolean;
+            readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+        }>>;
+        readonly bun: Schema.Struct<{
+            readonly available: Schema.Boolean;
+            readonly version: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+        readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly repoBindingId: Schema.String;
+            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly host: Schema.String;
+            readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+            readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+            readonly authenticated: Schema.Boolean;
+            readonly canPush: Schema.optionalKey<Schema.Boolean>;
+        }>>>;
+        readonly runs: Schema.optionalKey<Schema.Struct<{
+            readonly supported: Schema.Boolean;
+            readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+            readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly providerActions: Schema.Struct<{
+                readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+            }>;
+            readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+        }>>;
+        readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+            readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+            readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+            readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+            readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+        }>>;
+    }>;
+    /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
+    readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
+    readonly labels: Schema.$Array<Schema.String>;
+    readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+    readonly createdByUserId: Schema.optionalKey<Schema.String>;
+    readonly createdAt: Schema.String;
+    readonly updatedAt: Schema.String;
+}>;
+export declare const RunnerProjectGrant: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly runnerId: Schema.String;
+    readonly workspaceId: Schema.String;
+    readonly projectId: Schema.String;
+    readonly createdByUserId: Schema.optionalKey<Schema.String>;
+    readonly createdAt: Schema.String;
+    readonly updatedAt: Schema.String;
+}>;
+export declare const RunnerProjectGrantCreate: Schema.Struct<{
+    readonly projectId: Schema.String;
+}>;
+export declare const RunnerRescope: Schema.Struct<{
+    readonly ownership: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"workspace">;
+        readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"project">;
+        readonly projectId: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"personal">;
+        readonly ownerUserId: Schema.String;
+        /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+        readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+    }>]>;
+}>;
+export declare const RunnerUpdate: Schema.Struct<{
+    readonly name: Schema.String;
+}>;
+export declare const RunnerRemoveResult: Schema.Struct<{
+    readonly removed: Schema.Boolean;
+}>;
+/** The owner's default Harness for a Runner; null goes back to the first the Runner offers. */
+export declare const RunnerDefaultHarnessInput: Schema.Struct<{
+    readonly harness: Schema.NullOr<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
+}>;
+export declare const RunnerProjectGrantList: Schema.Struct<{
+    readonly items: Schema.$Array<Schema.Struct<{
+        readonly id: Schema.String;
+        readonly runnerId: Schema.String;
+        readonly workspaceId: Schema.String;
+        readonly projectId: Schema.String;
+        readonly createdByUserId: Schema.optionalKey<Schema.String>;
+        readonly createdAt: Schema.String;
+        readonly updatedAt: Schema.String;
+    }>>;
+}>;
+export declare const RunnerProjectGrantDeleteResult: Schema.Struct<{
+    readonly removed: Schema.Boolean;
+}>;
+export declare const RunnerReplicaPlacement: Schema.Struct<{
+    readonly kind: Schema.String;
+    readonly label: Schema.optionalKey<Schema.String>;
+    readonly zone: Schema.optionalKey<Schema.String>;
+}>;
+export declare const RunnerReplicaTelemetry: Schema.Struct<{
+    readonly activeWorkUnits: Schema.optionalKey<Schema.Int>;
+    readonly queuedWorkUnits: Schema.optionalKey<Schema.Int>;
+    readonly cacheHitRate: Schema.optionalKey<Schema.Finite>;
+}>;
+export declare const RunnerReplicaCacheHint: Schema.Struct<{
+    readonly key: Schema.String;
+    readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+    readonly warmed: Schema.Boolean;
+    readonly cacheClass: Schema.optionalKey<Schema.String>;
+    readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+    readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+    readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+    readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+    readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+}>;
+export declare const RunnerReplica: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly workspaceId: Schema.String;
+    readonly runnerId: Schema.String;
+    readonly name: Schema.String;
+    readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"draining">, Schema.Literal<"stopped">, Schema.Literal<"disabled">]>;
+    readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+    readonly drainState: Schema.Union<readonly [Schema.Literal<"accepting">, Schema.Literal<"draining">, Schema.Literal<"drained">]>;
+    readonly capacity: Schema.Struct<{
+        readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+        readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+        readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+        readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+    }>;
+    readonly cacheHints: Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+        readonly warmed: Schema.Boolean;
+        readonly cacheClass: Schema.optionalKey<Schema.String>;
+        readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+        readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+        readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+    }>>;
+    readonly placement: Schema.optionalKey<Schema.Struct<{
+        readonly kind: Schema.String;
+        readonly label: Schema.optionalKey<Schema.String>;
+        readonly zone: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly telemetry: Schema.Struct<{
+        readonly activeWorkUnits: Schema.optionalKey<Schema.Int>;
+        readonly queuedWorkUnits: Schema.optionalKey<Schema.Int>;
+        readonly cacheHitRate: Schema.optionalKey<Schema.Finite>;
+    }>;
+    readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+    readonly createdAt: Schema.String;
+    readonly updatedAt: Schema.String;
+}>;
+export declare const RunnerReplicaCreate: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly capacity: Schema.optionalKey<Schema.Struct<{
+        readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+        readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+        readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+        readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+    }>>;
+    readonly cacheHints: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+        readonly warmed: Schema.Boolean;
+        readonly cacheClass: Schema.optionalKey<Schema.String>;
+        readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+        readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+        readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+    }>>>;
+    readonly placement: Schema.optionalKey<Schema.Struct<{
+        readonly kind: Schema.String;
+        readonly label: Schema.optionalKey<Schema.String>;
+        readonly zone: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly telemetry: Schema.optionalKey<Schema.Struct<{
+        readonly activeWorkUnits: Schema.optionalKey<Schema.Int>;
+        readonly queuedWorkUnits: Schema.optionalKey<Schema.Int>;
+        readonly cacheHitRate: Schema.optionalKey<Schema.Finite>;
+    }>>;
+}>;
+export declare const RunnerReplicaHeartbeatInput: Schema.Struct<{
+    readonly healthStatus: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>>;
+    readonly drainState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"accepting">, Schema.Literal<"draining">, Schema.Literal<"drained">]>>;
+    readonly capacity: Schema.optionalKey<Schema.Struct<{
+        readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+        readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+        readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+        readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+    }>>;
+    readonly cacheHints: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+        readonly warmed: Schema.Boolean;
+        readonly cacheClass: Schema.optionalKey<Schema.String>;
+        readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+        readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+        readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+    }>>>;
+    readonly placement: Schema.optionalKey<Schema.Struct<{
+        readonly kind: Schema.String;
+        readonly label: Schema.optionalKey<Schema.String>;
+        readonly zone: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly telemetry: Schema.optionalKey<Schema.Struct<{
+        readonly activeWorkUnits: Schema.optionalKey<Schema.Int>;
+        readonly queuedWorkUnits: Schema.optionalKey<Schema.Int>;
+        readonly cacheHitRate: Schema.optionalKey<Schema.Finite>;
+    }>>;
+}>;
+export declare const RunnerReplicaList: Schema.Struct<{
+    readonly items: Schema.$Array<Schema.Struct<{
+        readonly id: Schema.String;
+        readonly workspaceId: Schema.String;
+        readonly runnerId: Schema.String;
+        readonly name: Schema.String;
+        readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"draining">, Schema.Literal<"stopped">, Schema.Literal<"disabled">]>;
+        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly drainState: Schema.Union<readonly [Schema.Literal<"accepting">, Schema.Literal<"draining">, Schema.Literal<"drained">]>;
+        readonly capacity: Schema.Struct<{
+            readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+            readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+            readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+            readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+        }>;
+        readonly cacheHints: Schema.$Array<Schema.Struct<{
+            readonly key: Schema.String;
+            readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+            readonly warmed: Schema.Boolean;
+            readonly cacheClass: Schema.optionalKey<Schema.String>;
+            readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+            readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+            readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+            readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+            readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+        }>>;
+        readonly placement: Schema.optionalKey<Schema.Struct<{
+            readonly kind: Schema.String;
+            readonly label: Schema.optionalKey<Schema.String>;
+            readonly zone: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly telemetry: Schema.Struct<{
+            readonly activeWorkUnits: Schema.optionalKey<Schema.Int>;
+            readonly queuedWorkUnits: Schema.optionalKey<Schema.Int>;
+            readonly cacheHitRate: Schema.optionalKey<Schema.Finite>;
+        }>;
+        readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+        readonly createdAt: Schema.String;
+        readonly updatedAt: Schema.String;
+    }>>;
+}>;
+export declare const RunnerCreate: Schema.Struct<{
+    readonly name: Schema.String;
+    readonly agentIdentityId: Schema.optionalKey<Schema.String>;
+    readonly ownership: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"workspace">;
+        readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"project">;
+        readonly projectId: Schema.String;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"personal">;
+        readonly ownerUserId: Schema.String;
+        /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+        readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+    }>]>>;
+    readonly projectId: Schema.optionalKey<Schema.String>;
+    readonly credentialHostId: Schema.optionalKey<Schema.String>;
+    readonly capabilities: Schema.optionalKey<Schema.Struct<{
+        readonly harnesses: Schema.$Array<Schema.String>;
+        /** The Harness an Agent that names none launches on. */
+        readonly defaultHarness: Schema.optionalKey<Schema.String>;
+        readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly harness: Schema.String;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+        readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+        readonly sandboxBackends: Schema.$Array<Schema.String>;
+        readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly implementation: Schema.String;
+            readonly version: Schema.String;
+            readonly guestRuntime: Schema.optionalKey<Schema.String>;
+            readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+            readonly moduleLoading: Schema.Boolean;
+            readonly longLivedProcesses: Schema.Boolean;
+            readonly services: Schema.Boolean;
+            readonly tunnels: Schema.Boolean;
+            readonly processIsolation: Schema.Boolean;
+            readonly filesystemIsolation: Schema.Boolean;
+            readonly networkIsolation: Schema.Boolean;
+            readonly resourceEnforcement: Schema.Boolean;
+        }>>>;
+        readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        /** Namespaced native extension identities (id@version) the runner supports. */
+        readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly deliveryTools: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+            readonly available: Schema.Boolean;
+            readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+        }>>;
+        readonly bun: Schema.Struct<{
+            readonly available: Schema.Boolean;
+            readonly version: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+        readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly repoBindingId: Schema.String;
+            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly host: Schema.String;
+            readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+            readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+            readonly authenticated: Schema.Boolean;
+            readonly canPush: Schema.optionalKey<Schema.Boolean>;
+        }>>>;
+        readonly runs: Schema.optionalKey<Schema.Struct<{
+            readonly supported: Schema.Boolean;
+            readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+            readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly providerActions: Schema.Struct<{
+                readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+            }>;
+            readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+        }>>;
+        readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+            readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+            readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+            readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+            readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+        }>>;
+    }>>;
+    readonly labels: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>;
+export declare const RunnerCredentialProvisionInput: Schema.Struct<{
+    readonly publicKey: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.String, Schema.Boolean, Schema.$Array<Schema.String>]>>;
+}>;
+export declare const RunnerRegistrationResult: Schema.Struct<{
+    readonly runner: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly workspaceId: Schema.String;
+        readonly agentIdentityId: Schema.String;
+        readonly ownership: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"workspace">;
+            readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"project">;
+            readonly projectId: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"personal">;
+            readonly ownerUserId: Schema.String;
+            /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+            readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+        }>]>;
+        readonly projectGrantIds: Schema.$Array<Schema.String>;
+        readonly credentialHostId: Schema.optionalKey<Schema.String>;
+        readonly name: Schema.String;
+        readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
+        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly capabilities: Schema.Struct<{
+            readonly harnesses: Schema.$Array<Schema.String>;
+            /** The Harness an Agent that names none launches on. */
+            readonly defaultHarness: Schema.optionalKey<Schema.String>;
+            readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly harness: Schema.String;
+                readonly missing: Schema.$Array<Schema.String>;
+            }>>>;
+            readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+            readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly implementation: Schema.String;
+                readonly version: Schema.String;
+                readonly guestRuntime: Schema.optionalKey<Schema.String>;
+                readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+                readonly moduleLoading: Schema.Boolean;
+                readonly longLivedProcesses: Schema.Boolean;
+                readonly services: Schema.Boolean;
+                readonly tunnels: Schema.Boolean;
+                readonly processIsolation: Schema.Boolean;
+                readonly filesystemIsolation: Schema.Boolean;
+                readonly networkIsolation: Schema.Boolean;
+                readonly resourceEnforcement: Schema.Boolean;
+            }>>>;
+            readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+                readonly missing: Schema.$Array<Schema.String>;
+            }>>>;
+            /** Namespaced native extension identities (id@version) the runner supports. */
+            readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly deliveryTools: Schema.$Array<Schema.Struct<{
+                readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+                readonly available: Schema.Boolean;
+                readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+            }>>;
+            readonly bun: Schema.Struct<{
+                readonly available: Schema.Boolean;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>;
+            readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+            readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly repoBindingId: Schema.String;
+                readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                readonly host: Schema.String;
+                readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+                readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+                readonly authenticated: Schema.Boolean;
+                readonly canPush: Schema.optionalKey<Schema.Boolean>;
+            }>>>;
+            readonly runs: Schema.optionalKey<Schema.Struct<{
+                readonly supported: Schema.Boolean;
+                readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+                readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+                readonly sandboxBackends: Schema.$Array<Schema.String>;
+                readonly providerActions: Schema.Struct<{
+                    readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                }>;
+                readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+            }>>;
+            readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+                readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+                readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+                readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+                readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+            }>>;
+        }>;
+        /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
+        readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
+        readonly labels: Schema.$Array<Schema.String>;
+        readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+        readonly createdByUserId: Schema.optionalKey<Schema.String>;
+        readonly createdAt: Schema.String;
+        readonly updatedAt: Schema.String;
+    }>;
+    readonly agentCredential: Schema.Struct<{
+        readonly agentIdentityId: Schema.String;
+        readonly hostId: Schema.String;
+        readonly status: Schema.Union<readonly [Schema.Literal<"issued">, Schema.Literal<"referenced">]>;
+        readonly rotatable: Schema.Literal<true>;
+    }>;
+    readonly setup: Schema.optionalKey<Schema.Struct<{
+        readonly profile: Schema.Literal<"personal_development_v1">;
+        readonly identityCreated: Schema.Boolean;
+        readonly capabilityNames: Schema.$Array<Schema.String>;
+        readonly readiness: Schema.Union<readonly [Schema.Literal<"registered">, Schema.Literal<"ready">, Schema.Literal<"needs_runner_preflight">]>;
+    }>>;
+}>;
+export declare const RunnerHeartbeatInput: Schema.Struct<{
+    readonly healthStatus: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>>;
+    readonly capabilities: Schema.optionalKey<Schema.Struct<{
+        readonly harnesses: Schema.$Array<Schema.String>;
+        /** The Harness an Agent that names none launches on. */
+        readonly defaultHarness: Schema.optionalKey<Schema.String>;
+        readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly harness: Schema.String;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+        readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+        readonly sandboxBackends: Schema.$Array<Schema.String>;
+        readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly implementation: Schema.String;
+            readonly version: Schema.String;
+            readonly guestRuntime: Schema.optionalKey<Schema.String>;
+            readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+            readonly moduleLoading: Schema.Boolean;
+            readonly longLivedProcesses: Schema.Boolean;
+            readonly services: Schema.Boolean;
+            readonly tunnels: Schema.Boolean;
+            readonly processIsolation: Schema.Boolean;
+            readonly filesystemIsolation: Schema.Boolean;
+            readonly networkIsolation: Schema.Boolean;
+            readonly resourceEnforcement: Schema.Boolean;
+        }>>>;
+        readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        /** Namespaced native extension identities (id@version) the runner supports. */
+        readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly deliveryTools: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+            readonly available: Schema.Boolean;
+            readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+        }>>;
+        readonly bun: Schema.Struct<{
+            readonly available: Schema.Boolean;
+            readonly version: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+        readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly repoBindingId: Schema.String;
+            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly host: Schema.String;
+            readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+            readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+            readonly authenticated: Schema.Boolean;
+            readonly canPush: Schema.optionalKey<Schema.Boolean>;
+        }>>>;
+        readonly runs: Schema.optionalKey<Schema.Struct<{
+            readonly supported: Schema.Boolean;
+            readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+            readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly providerActions: Schema.Struct<{
+                readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+            }>;
+            readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+        }>>;
+        readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+            readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+            readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+            readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+            readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+        }>>;
+    }>>;
+    readonly labels: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>;
+export declare const RunnerCapabilitiesUpdate: Schema.Struct<{
+    readonly capabilities: Schema.Struct<{
+        readonly harnesses: Schema.$Array<Schema.String>;
+        /** The Harness an Agent that names none launches on. */
+        readonly defaultHarness: Schema.optionalKey<Schema.String>;
+        readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly harness: Schema.String;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+        readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+        readonly sandboxBackends: Schema.$Array<Schema.String>;
+        readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly implementation: Schema.String;
+            readonly version: Schema.String;
+            readonly guestRuntime: Schema.optionalKey<Schema.String>;
+            readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+            readonly moduleLoading: Schema.Boolean;
+            readonly longLivedProcesses: Schema.Boolean;
+            readonly services: Schema.Boolean;
+            readonly tunnels: Schema.Boolean;
+            readonly processIsolation: Schema.Boolean;
+            readonly filesystemIsolation: Schema.Boolean;
+            readonly networkIsolation: Schema.Boolean;
+            readonly resourceEnforcement: Schema.Boolean;
+        }>>>;
+        readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+            readonly missing: Schema.$Array<Schema.String>;
+        }>>>;
+        /** Namespaced native extension identities (id@version) the runner supports. */
+        readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        readonly deliveryTools: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+            readonly available: Schema.Boolean;
+            readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+        }>>;
+        readonly bun: Schema.Struct<{
+            readonly available: Schema.Boolean;
+            readonly version: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+        readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly repoBindingId: Schema.String;
+            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly host: Schema.String;
+            readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+            readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+            readonly authenticated: Schema.Boolean;
+            readonly canPush: Schema.optionalKey<Schema.Boolean>;
+        }>>>;
+        readonly runs: Schema.optionalKey<Schema.Struct<{
+            readonly supported: Schema.Boolean;
+            readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+            readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly providerActions: Schema.Struct<{
+                readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+            }>;
+            readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+        }>>;
+        readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+            readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+            readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+            readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+            readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+        }>>;
+    }>;
+    readonly labels: Schema.optionalKey<Schema.$Array<Schema.String>>;
+}>;
+export declare const RunnerWorkUnitWarmStart: Schema.Struct<{
+    readonly strategy: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>;
+    readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+    readonly cacheHits: Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+        readonly validated: Schema.Boolean;
+    }>>;
+    readonly cacheMisses: Schema.$Array<Schema.String>;
+    readonly executedOperations: Schema.Int;
+    readonly skippedOperations: Schema.Int;
+    readonly phaseTimings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly phase: Schema.String;
+        readonly mode: Schema.Union<readonly [Schema.Literal<"cold">, Schema.Literal<"warm">]>;
+        readonly durationMs: Schema.Finite;
+        readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+        readonly cacheKey: Schema.optionalKey<Schema.String>;
+    }>>>;
+    readonly invalidations: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly cacheClass: Schema.String;
+        readonly key: Schema.String;
+        readonly reason: Schema.String;
+    }>>>;
+    readonly environmentHashes: Schema.optionalKey<Schema.Struct<{
+        readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+        readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+    }>>;
+}>;
+type RunnerWorkUnitDataValue = string | number | boolean | null | readonly RunnerWorkUnitDataValue[] | {
+    readonly [key: string]: RunnerWorkUnitDataValue;
+};
+declare const RunnerWorkUnitDataValue: Schema.Codec<RunnerWorkUnitDataValue>;
+export declare const RunnerWorkUnitData: Schema.$Record<Schema.String, Schema.Codec<RunnerWorkUnitDataValue, RunnerWorkUnitDataValue, never, never>>;
+export declare const RunnerWorkUnitInput: Schema.Struct<{
+    readonly schemaRef: Schema.optionalKey<Schema.String>;
+    readonly schemaSha256: Schema.optionalKey<Schema.String>;
+    readonly data: Schema.$Record<Schema.String, Schema.Codec<RunnerWorkUnitDataValue, RunnerWorkUnitDataValue, never, never>>;
+}>;
+export declare const RunnerStepAttempt: Schema.Struct<{
+    readonly kind: Schema.Literal<"step_attempt">;
+    readonly attempt: Schema.Struct<{
+        readonly id: Schema.String;
+        readonly workspaceId: Schema.String;
+        readonly projectId: Schema.optionalKey<Schema.String>;
+        readonly taskId: Schema.optionalKey<Schema.String>;
+        readonly sessionId: Schema.optionalKey<Schema.String>;
+        readonly runId: Schema.String;
+        readonly stepSnapshotId: Schema.optionalKey<Schema.String>;
+        readonly stepKey: Schema.String;
+        readonly sequence: Schema.Int;
+        readonly required: Schema.Boolean;
+        readonly attempt: Schema.Int;
+        readonly retryOfAttemptId: Schema.optionalKey<Schema.String>;
+        readonly status: Schema.Literals<readonly ["pending", "running", "waiting", "blocked", "completed", "failed", "canceled"]>;
+        readonly inputManifest: Schema.Struct<{
+            readonly manifestVersion: Schema.Int;
+            readonly assembledAt: Schema.String;
+            readonly entries: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literals<readonly ["kit", "memory", "decision", "knowledge_record", "context_pack"]>;
+                readonly sourceId: Schema.String;
+                readonly sourceScope: Schema.Struct<{
+                    readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "loop", "agent"]>;
+                    readonly id: Schema.String;
+                }>;
+                readonly inclusionReason: Schema.String;
+                readonly resolvedAt: Schema.String;
+                readonly appliedToStepKey: Schema.String;
+                readonly availability: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"available">;
+                    readonly inspectRef: Schema.Struct<{
+                        readonly kind: Schema.Literals<readonly ["task", "kit", "memory", "decision", "knowledge_record", "context_pack", "step_attempt", "change_request", "change_request_review", "provider_action", "thread_entry", "run", "artifact"]>;
+                        readonly id: Schema.optionalKey<Schema.String>;
+                        readonly externalId: Schema.optionalKey<Schema.String>;
+                        readonly provider: Schema.optionalKey<Schema.String>;
+                        readonly title: Schema.optionalKey<Schema.String>;
+                    }>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"redacted">, Schema.Literal<"unavailable">]>;
+                    readonly reason: Schema.String;
+                }>]>;
+                readonly sourceVersion: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literals<readonly ["kit", "memory", "decision", "knowledge_record", "context_pack"]>;
+                readonly sourceId: Schema.String;
+                readonly sourceScope: Schema.Struct<{
+                    readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "loop", "agent"]>;
+                    readonly id: Schema.String;
+                }>;
+                readonly inclusionReason: Schema.String;
+                readonly resolvedAt: Schema.String;
+                readonly appliedToStepKey: Schema.String;
+                readonly availability: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"available">;
+                    readonly inspectRef: Schema.Struct<{
+                        readonly kind: Schema.Literals<readonly ["task", "kit", "memory", "decision", "knowledge_record", "context_pack", "step_attempt", "change_request", "change_request_review", "provider_action", "thread_entry", "run", "artifact"]>;
+                        readonly id: Schema.optionalKey<Schema.String>;
+                        readonly externalId: Schema.optionalKey<Schema.String>;
+                        readonly provider: Schema.optionalKey<Schema.String>;
+                        readonly title: Schema.optionalKey<Schema.String>;
+                    }>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"redacted">, Schema.Literal<"unavailable">]>;
+                    readonly reason: Schema.String;
+                }>]>;
+                readonly contentSha256: Schema.String;
+            }>]>>;
+            readonly budget: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+        }>;
+        readonly execution: Schema.Struct<{
+            readonly agent: Schema.optionalKey<Schema.Struct<{
+                readonly id: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly runner: Schema.optionalKey<Schema.Struct<{
+                readonly id: Schema.String;
+                readonly capabilitySnapshot: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            }>>;
+            readonly harness: Schema.optionalKey<Schema.String>;
+            readonly model: Schema.optionalKey<Schema.String>;
+            readonly metadata: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+        }>;
+        readonly output: Schema.optionalKey<Schema.Struct<{
+            readonly stepKey: Schema.String;
+            readonly outputSchemaRef: Schema.Struct<{
+                readonly kind: Schema.Literal<"typebox_ref">;
+                readonly name: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+                readonly sha256: Schema.optionalKey<Schema.String>;
+            }>;
+            readonly summary: Schema.String;
+            readonly data: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+            readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            readonly refs: Schema.$Array<Schema.Struct<{
+                readonly kind: Schema.Literals<readonly ["task", "kit", "memory", "decision", "knowledge_record", "context_pack", "step_attempt", "change_request", "change_request_review", "provider_action", "thread_entry", "run", "artifact"]>;
+                readonly id: Schema.optionalKey<Schema.String>;
+                readonly externalId: Schema.optionalKey<Schema.String>;
+                readonly provider: Schema.optionalKey<Schema.String>;
+                readonly title: Schema.optionalKey<Schema.String>;
+            }>>;
+        }>>;
+        readonly brief: Schema.optionalKey<Schema.Struct<{
+            readonly stepAttemptId: Schema.String;
+            readonly harness: Schema.String;
+            readonly model: Schema.optionalKey<Schema.String>;
+            readonly effort: Schema.optionalKey<Schema.Literals<readonly ["low", "medium", "high", "xhigh"]>>;
+            readonly prompt: Schema.String;
+            readonly contextPack: Schema.optionalKey<Schema.Struct<{
+                readonly contextPackId: Schema.optionalKey<Schema.String>;
+                readonly mode: Schema.String;
+                readonly contentMarkdown: Schema.String;
+            }>>;
+            readonly outputSchema: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            readonly skills: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly files: Schema.$Record<Schema.String, Schema.String>;
+            }>>>;
+            readonly toolless: Schema.optionalKey<Schema.Literal<true>>;
+        }>>;
+        readonly failureSummary: Schema.optionalKey<Schema.String>;
+        readonly reviewEvidence: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["task", "kit", "memory", "decision", "knowledge_record", "context_pack", "step_attempt", "change_request", "change_request_review", "provider_action", "thread_entry", "run", "artifact"]>;
+            readonly id: Schema.optionalKey<Schema.String>;
+            readonly externalId: Schema.optionalKey<Schema.String>;
+            readonly provider: Schema.optionalKey<Schema.String>;
+            readonly title: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly lease: Schema.optionalKey<Schema.Struct<{
+            readonly ownerId: Schema.String;
+            readonly runnerReplicaId: Schema.optionalKey<Schema.String>;
+            readonly leaseId: Schema.String;
+            readonly fencingToken: Schema.String;
+            readonly capacitySlot: Schema.optionalKey<Schema.String>;
+            readonly expiresAt: Schema.String;
+            readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly claimIdempotencyKey: Schema.optionalKey<Schema.String>;
+        readonly terminalIdempotencyKey: Schema.optionalKey<Schema.String>;
+        readonly startedAt: Schema.optionalKey<Schema.String>;
+        readonly completedAt: Schema.optionalKey<Schema.String>;
+        readonly createdAt: Schema.String;
+        readonly updatedAt: Schema.String;
+    }>;
+    readonly step: Schema.Struct<{
+        readonly title: Schema.String;
+        readonly implementation: Schema.Union<readonly [Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in_action">;
+            readonly action: Schema.String;
+            readonly input: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent">;
+            readonly taskIdRef: Schema.String;
+            readonly agentId: Schema.String;
+            readonly agentRef: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+                readonly agentId: Schema.String;
+                readonly alias: Schema.String;
+            }>, Schema.Struct<{
+                readonly agentId: Schema.String;
+                readonly version: Schema.Int;
+                readonly digest: Schema.String;
+            }>]>>;
+            readonly runtimeKind: Schema.optionalKey<Schema.String>;
+            readonly harness: Schema.optionalKey<Schema.Struct<{
+                readonly implementation: Schema.String;
+                readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+            }>>;
+            readonly sandbox: Schema.optionalKey<Schema.Struct<{
+                readonly implementation: Schema.String;
+                readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+            }>>;
+            readonly models: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly providerRef: Schema.String;
+                readonly modelRef: Schema.String;
+                readonly profile: Schema.optionalKey<Schema.String>;
+                readonly reasoning: Schema.optionalKey<Schema.String>;
+            }>>>;
+            readonly extensions: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly extensionId: Schema.String;
+                readonly version: Schema.Int;
+                readonly policy: Schema.Literals<readonly ["optional", "required"]>;
+                readonly requiredCapabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly configuration: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./run").SafeJson, import("./run").SafeJson, never, never>>>;
+            }>>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"wait_for_event">;
+            readonly event: Schema.String;
+            readonly anyOf: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly correlationPath: Schema.$Array<Schema.String>;
+            readonly authPolicy: Schema.optionalKey<Schema.Struct<{
+                readonly mode: Schema.Union<readonly [Schema.Literal<"trusted_source">, Schema.Literal<"actor">]>;
+                readonly capability: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly cancellation: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"cancel">, Schema.Literal<"timeout">]>>;
+            readonly releaseRunner: Schema.optionalKey<Schema.Boolean>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"human_approval">;
+            readonly prompt: Schema.String;
+            readonly approvalPolicy: Schema.Struct<{
+                readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
+                readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
+                readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
+            }>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"runner_sandbox">;
+            readonly runnerSelector: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+            readonly entrypoint: Schema.String;
+            readonly package: Schema.optionalKey<Schema.Struct<{
+                readonly packageName: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+                readonly entrypoint: Schema.String;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly mode: Schema.Literal<"direct">;
+                    readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                    readonly bundleRef: Schema.optionalKey<Schema.String>;
+                    readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>, Schema.Struct<{
+                    readonly mode: Schema.Literal<"git_backed">;
+                    readonly repoBindingId: Schema.String;
+                    readonly gitRef: Schema.String;
+                    readonly commitSha: Schema.String;
+                    readonly definitionPath: Schema.optionalKey<Schema.String>;
+                    readonly packagePath: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>]>;
+                readonly runtime: Schema.optionalKey<Schema.String>;
+                readonly integritySha256: Schema.optionalKey<Schema.String>;
+                readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            }>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"package_ref">;
+            readonly package: Schema.Struct<{
+                readonly packageName: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+                readonly entrypoint: Schema.String;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly mode: Schema.Literal<"direct">;
+                    readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                    readonly bundleRef: Schema.optionalKey<Schema.String>;
+                    readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>, Schema.Struct<{
+                    readonly mode: Schema.Literal<"git_backed">;
+                    readonly repoBindingId: Schema.String;
+                    readonly gitRef: Schema.String;
+                    readonly commitSha: Schema.String;
+                    readonly definitionPath: Schema.optionalKey<Schema.String>;
+                    readonly packagePath: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>]>;
+                readonly runtime: Schema.optionalKey<Schema.String>;
+                readonly integritySha256: Schema.optionalKey<Schema.String>;
+                readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            }>;
+        }>]>, Schema.Struct<{
+            readonly kind: Schema.Literal<"repeat_until">;
+            readonly body: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in_action">;
+                readonly action: Schema.String;
+                readonly input: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent">;
+                readonly taskIdRef: Schema.String;
+                readonly agentId: Schema.String;
+                readonly agentRef: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+                    readonly agentId: Schema.String;
+                    readonly alias: Schema.String;
+                }>, Schema.Struct<{
+                    readonly agentId: Schema.String;
+                    readonly version: Schema.Int;
+                    readonly digest: Schema.String;
+                }>]>>;
+                readonly runtimeKind: Schema.optionalKey<Schema.String>;
+                readonly harness: Schema.optionalKey<Schema.Struct<{
+                    readonly implementation: Schema.String;
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+                }>>;
+                readonly sandbox: Schema.optionalKey<Schema.Struct<{
+                    readonly implementation: Schema.String;
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+                }>>;
+                readonly models: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly providerRef: Schema.String;
+                    readonly modelRef: Schema.String;
+                    readonly profile: Schema.optionalKey<Schema.String>;
+                    readonly reasoning: Schema.optionalKey<Schema.String>;
+                }>>>;
+                readonly extensions: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly extensionId: Schema.String;
+                    readonly version: Schema.Int;
+                    readonly policy: Schema.Literals<readonly ["optional", "required"]>;
+                    readonly requiredCapabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                    readonly configuration: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./run").SafeJson, import("./run").SafeJson, never, never>>>;
+                }>>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"wait_for_event">;
+                readonly event: Schema.String;
+                readonly anyOf: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly correlationPath: Schema.$Array<Schema.String>;
+                readonly authPolicy: Schema.optionalKey<Schema.Struct<{
+                    readonly mode: Schema.Union<readonly [Schema.Literal<"trusted_source">, Schema.Literal<"actor">]>;
+                    readonly capability: Schema.optionalKey<Schema.String>;
+                }>>;
+                readonly cancellation: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"cancel">, Schema.Literal<"timeout">]>>;
+                readonly releaseRunner: Schema.optionalKey<Schema.Boolean>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"human_approval">;
+                readonly prompt: Schema.String;
+                readonly approvalPolicy: Schema.Struct<{
+                    readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                    readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
+                    readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
+                    readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
+                }>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"runner_sandbox">;
+                readonly runnerSelector: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+                readonly entrypoint: Schema.String;
+                readonly package: Schema.optionalKey<Schema.Struct<{
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                    readonly entrypoint: Schema.String;
+                    readonly source: Schema.Union<readonly [Schema.Struct<{
+                        readonly mode: Schema.Literal<"direct">;
+                        readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                        readonly bundleRef: Schema.optionalKey<Schema.String>;
+                        readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>, Schema.Struct<{
+                        readonly mode: Schema.Literal<"git_backed">;
+                        readonly repoBindingId: Schema.String;
+                        readonly gitRef: Schema.String;
+                        readonly commitSha: Schema.String;
+                        readonly definitionPath: Schema.optionalKey<Schema.String>;
+                        readonly packagePath: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>]>;
+                    readonly runtime: Schema.optionalKey<Schema.String>;
+                    readonly integritySha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"package_ref">;
+                readonly package: Schema.Struct<{
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                    readonly entrypoint: Schema.String;
+                    readonly source: Schema.Union<readonly [Schema.Struct<{
+                        readonly mode: Schema.Literal<"direct">;
+                        readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                        readonly bundleRef: Schema.optionalKey<Schema.String>;
+                        readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>, Schema.Struct<{
+                        readonly mode: Schema.Literal<"git_backed">;
+                        readonly repoBindingId: Schema.String;
+                        readonly gitRef: Schema.String;
+                        readonly commitSha: Schema.String;
+                        readonly definitionPath: Schema.optionalKey<Schema.String>;
+                        readonly packagePath: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>]>;
+                    readonly runtime: Schema.optionalKey<Schema.String>;
+                    readonly integritySha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>;
+            }>]>;
+            readonly convergenceOutput: Schema.String;
+            readonly safetyPolicy: Schema.Struct<{
+                readonly maxIterations: Schema.Int;
+                readonly timeoutSeconds: Schema.optionalKey<Schema.Int>;
+            }>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"call_loop">;
+            readonly loop: Schema.Union<readonly [Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly alias: Schema.String;
+            }>, Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly versionId: Schema.String;
+            }>, Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly version: Schema.Int;
+            }>, Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly digest: Schema.String;
+            }>, Schema.Struct<{
+                readonly slug: Schema.String;
+                readonly alias: Schema.String;
+            }>, Schema.Struct<{
+                readonly slug: Schema.String;
+                readonly version: Schema.Int;
+            }>, Schema.Struct<{
+                readonly slug: Schema.String;
+                readonly digest: Schema.String;
+            }>]>;
+            readonly mode: Schema.Literal<"awaited">;
+        }>]>;
+        readonly inputSchemaRef: Schema.Struct<{
+            readonly kind: Schema.Literal<"typebox_ref">;
+            readonly name: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+            readonly sha256: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly outputSchemaRef: Schema.Struct<{
+            readonly kind: Schema.Literal<"typebox_ref">;
+            readonly name: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+            readonly sha256: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly allowedCapabilities: Schema.$Array<Schema.Struct<{
+            readonly capability: Schema.Literals<readonly ["read_task", "read_repo_binding", "read_agent_environment", "read_kit", "update_task_status", "read_change_request", "read_change_request_review", "read_task_link", "refresh_change_request_metadata", "record_change_request_review", "record_session_update", "create_task_link", "create_task_dependency", "create_task_asset", "create_follow_up_task", "execute_agent", "read_step_attempt", "record_task_thread_entry", "write_provider_repository", "write_provider_change_request", "publish_provider_check", "write_provider_comment", "request_provider_changes", "approve_provider_change_request", "merge_provider_change_request", "wait_for_event", "request_human_approval", "execute_package_ref", "read_context_feedback", "read_session_update", "read_repo_binding", "read_agent_environment", "read_kit", "read_memory", "read_decision", "create_task_dependency", "propose_memory", "propose_kit", "propose_decision", "propose_agent_environment_policy", "propose_project_context", "propose_context_relevance", "execute_runner_sandbox"]>;
+            readonly scope: Schema.optionalKey<Schema.Struct<{
+                readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "change_request", "step_attempt", "run", "repo_binding", "provider_host"]>;
+                readonly id: Schema.optionalKey<Schema.String>;
+                readonly idRef: Schema.optionalKey<Schema.String>;
+                readonly value: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly reason: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly retryPolicy: Schema.Struct<{
+            readonly maxAttempts: Schema.Int;
+            readonly backoff: Schema.Literals<readonly ["none", "fixed", "exponential"]>;
+            readonly delaySeconds: Schema.optionalKey<Schema.Int>;
+        }>;
+        readonly timeoutPolicy: Schema.Struct<{
+            readonly timeoutSeconds: Schema.Int;
+        }>;
+        readonly metadata: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+    }>;
+}>;
+export declare const RunnerStepAttemptDiagnostic: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly workspaceId: Schema.String;
+    readonly projectId: Schema.optionalKey<Schema.String>;
+    readonly kind: Schema.Literal<"step_attempt">;
+    readonly runId: Schema.String;
+    readonly stepKey: Schema.String;
+    readonly runtimeKind: Schema.optionalKey<Schema.String>;
+    readonly attempt: Schema.Int;
+    readonly status: Schema.Union<readonly [Schema.Literal<"pending">, Schema.Literal<"claimed">, Schema.Literal<"running">, Schema.Literal<"blocked">, Schema.Literal<"completed">, Schema.Literal<"failed">, Schema.Literal<"canceled">, Schema.Literal<"expired">]>;
+    readonly lease: Schema.Struct<{
+        readonly leaseOwnerId: Schema.optionalKey<Schema.String>;
+        readonly runnerReplicaId: Schema.optionalKey<Schema.String>;
+        readonly leaseId: Schema.optionalKey<Schema.String>;
+        readonly attempt: Schema.optionalKey<Schema.Int>;
+        readonly fencingToken: Schema.optionalKey<Schema.String>;
+        readonly capacitySlot: Schema.optionalKey<Schema.String>;
+        readonly leaseExpiresAt: Schema.optionalKey<Schema.String>;
+        readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+    }>;
+    readonly capacity: Schema.Struct<{
+        readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+        readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+        readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+    }>;
+    readonly capabilities: Schema.$Array<Schema.Struct<{
+        readonly kind: Schema.Union<readonly [Schema.Literal<"loop_capability">, Schema.Literal<"operation_ref">, Schema.Literal<"package_ref">]>;
+        readonly ref: Schema.String;
+        readonly scopeKind: Schema.optionalKey<Schema.String>;
+        readonly scopeId: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly environment: Schema.optionalKey<Schema.Struct<{
+        readonly harness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+        readonly configWriterRequired: Schema.optionalKey<Schema.Boolean>;
+        readonly secretProviderTypes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>>;
+        readonly runtimeConstraints: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    }>>;
+    readonly environmentHashes: Schema.optionalKey<Schema.Struct<{
+        readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+        readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly caches: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly key: Schema.String;
+        readonly strategy: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>;
+        readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+    }>>>;
+    readonly warmStart: Schema.optionalKey<Schema.Struct<{
+        readonly strategy: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>;
+        readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+        readonly cacheHits: Schema.$Array<Schema.Struct<{
+            readonly key: Schema.String;
+            readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+            readonly validated: Schema.Boolean;
+        }>>;
+        readonly cacheMisses: Schema.$Array<Schema.String>;
+        readonly executedOperations: Schema.Int;
+        readonly skippedOperations: Schema.Int;
+        readonly phaseTimings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly phase: Schema.String;
+            readonly mode: Schema.Union<readonly [Schema.Literal<"cold">, Schema.Literal<"warm">]>;
+            readonly durationMs: Schema.Finite;
+            readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+            readonly cacheKey: Schema.optionalKey<Schema.String>;
+        }>>>;
+        readonly invalidations: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly cacheClass: Schema.String;
+            readonly key: Schema.String;
+            readonly reason: Schema.String;
+        }>>>;
+        readonly environmentHashes: Schema.optionalKey<Schema.Struct<{
+            readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+            readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+            readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+            readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+        }>>;
+    }>>;
+    readonly sandbox: Schema.Struct<{
+        readonly sandboxPolicyRefId: Schema.optionalKey<Schema.String>;
+        readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+        readonly failClosed: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
+    }>;
+    readonly materialization: Schema.Struct<{
+        readonly sourceMode: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>;
+        readonly repoBindingId: Schema.optionalKey<Schema.String>;
+        readonly commitSha: Schema.optionalKey<Schema.String>;
+        readonly packageName: Schema.optionalKey<Schema.String>;
+        readonly version: Schema.optionalKey<Schema.String>;
+        readonly entrypoint: Schema.optionalKey<Schema.String>;
+        readonly contentSha256: Schema.optionalKey<Schema.String>;
+    }>;
+    readonly createdAt: Schema.String;
+    readonly updatedAt: Schema.String;
+}>;
+export declare const RunnerOperationsOverview: Schema.Struct<{
+    readonly runners: Schema.$Array<Schema.Struct<{
+        readonly id: Schema.String;
+        readonly workspaceId: Schema.String;
+        readonly agentIdentityId: Schema.String;
+        readonly ownership: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"workspace">;
+            readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"project">;
+            readonly projectId: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"personal">;
+            readonly ownerUserId: Schema.String;
+            /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+            readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+        }>]>;
+        readonly projectGrantIds: Schema.$Array<Schema.String>;
+        readonly credentialHostId: Schema.optionalKey<Schema.String>;
+        readonly name: Schema.String;
+        readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
+        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly capabilities: Schema.Struct<{
+            readonly harnesses: Schema.$Array<Schema.String>;
+            /** The Harness an Agent that names none launches on. */
+            readonly defaultHarness: Schema.optionalKey<Schema.String>;
+            readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly harness: Schema.String;
+                readonly missing: Schema.$Array<Schema.String>;
+            }>>>;
+            readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+            readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly implementation: Schema.String;
+                readonly version: Schema.String;
+                readonly guestRuntime: Schema.optionalKey<Schema.String>;
+                readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+                readonly moduleLoading: Schema.Boolean;
+                readonly longLivedProcesses: Schema.Boolean;
+                readonly services: Schema.Boolean;
+                readonly tunnels: Schema.Boolean;
+                readonly processIsolation: Schema.Boolean;
+                readonly filesystemIsolation: Schema.Boolean;
+                readonly networkIsolation: Schema.Boolean;
+                readonly resourceEnforcement: Schema.Boolean;
+            }>>>;
+            readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+                readonly missing: Schema.$Array<Schema.String>;
+            }>>>;
+            /** Namespaced native extension identities (id@version) the runner supports. */
+            readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly deliveryTools: Schema.$Array<Schema.Struct<{
+                readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+                readonly available: Schema.Boolean;
+                readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+            }>>;
+            readonly bun: Schema.Struct<{
+                readonly available: Schema.Boolean;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>;
+            readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+            readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly repoBindingId: Schema.String;
+                readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                readonly host: Schema.String;
+                readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+                readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+                readonly authenticated: Schema.Boolean;
+                readonly canPush: Schema.optionalKey<Schema.Boolean>;
+            }>>>;
+            readonly runs: Schema.optionalKey<Schema.Struct<{
+                readonly supported: Schema.Boolean;
+                readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+                readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+                readonly sandboxBackends: Schema.$Array<Schema.String>;
+                readonly providerActions: Schema.Struct<{
+                    readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                }>;
+                readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+            }>>;
+            readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+                readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+                readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+                readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+                readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+            }>>;
+        }>;
+        /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
+        readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
+        readonly labels: Schema.$Array<Schema.String>;
+        readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+        readonly createdByUserId: Schema.optionalKey<Schema.String>;
+        readonly createdAt: Schema.String;
+        readonly updatedAt: Schema.String;
+    }>>;
+    readonly stepAttempts: Schema.$Array<Schema.Struct<{
+        readonly runnerId: Schema.String;
+        readonly loopId: Schema.String;
+        readonly loopName: Schema.String;
+        readonly runId: Schema.String;
+        readonly items: Schema.$Array<Schema.Struct<{
+            readonly id: Schema.String;
+            readonly workspaceId: Schema.String;
+            readonly projectId: Schema.optionalKey<Schema.String>;
+            readonly kind: Schema.Literal<"step_attempt">;
+            readonly runId: Schema.String;
+            readonly stepKey: Schema.String;
+            readonly runtimeKind: Schema.optionalKey<Schema.String>;
+            readonly attempt: Schema.Int;
+            readonly status: Schema.Union<readonly [Schema.Literal<"pending">, Schema.Literal<"claimed">, Schema.Literal<"running">, Schema.Literal<"blocked">, Schema.Literal<"completed">, Schema.Literal<"failed">, Schema.Literal<"canceled">, Schema.Literal<"expired">]>;
+            readonly lease: Schema.Struct<{
+                readonly leaseOwnerId: Schema.optionalKey<Schema.String>;
+                readonly runnerReplicaId: Schema.optionalKey<Schema.String>;
+                readonly leaseId: Schema.optionalKey<Schema.String>;
+                readonly attempt: Schema.optionalKey<Schema.Int>;
+                readonly fencingToken: Schema.optionalKey<Schema.String>;
+                readonly capacitySlot: Schema.optionalKey<Schema.String>;
+                readonly leaseExpiresAt: Schema.optionalKey<Schema.String>;
+                readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+            }>;
+            readonly capacity: Schema.Struct<{
+                readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+                readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+                readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+            }>;
+            readonly capabilities: Schema.$Array<Schema.Struct<{
+                readonly kind: Schema.Union<readonly [Schema.Literal<"loop_capability">, Schema.Literal<"operation_ref">, Schema.Literal<"package_ref">]>;
+                readonly ref: Schema.String;
+                readonly scopeKind: Schema.optionalKey<Schema.String>;
+                readonly scopeId: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly environment: Schema.optionalKey<Schema.Struct<{
+                readonly harness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+                readonly configWriterRequired: Schema.optionalKey<Schema.Boolean>;
+                readonly secretProviderTypes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>>;
+                readonly runtimeConstraints: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            }>>;
+            readonly environmentHashes: Schema.optionalKey<Schema.Struct<{
+                readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+                readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly caches: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly key: Schema.String;
+                readonly strategy: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>;
+                readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+            }>>>;
+            readonly warmStart: Schema.optionalKey<Schema.Struct<{
+                readonly strategy: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>;
+                readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+                readonly cacheHits: Schema.$Array<Schema.Struct<{
+                    readonly key: Schema.String;
+                    readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+                    readonly validated: Schema.Boolean;
+                }>>;
+                readonly cacheMisses: Schema.$Array<Schema.String>;
+                readonly executedOperations: Schema.Int;
+                readonly skippedOperations: Schema.Int;
+                readonly phaseTimings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly phase: Schema.String;
+                    readonly mode: Schema.Union<readonly [Schema.Literal<"cold">, Schema.Literal<"warm">]>;
+                    readonly durationMs: Schema.Finite;
+                    readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+                    readonly cacheKey: Schema.optionalKey<Schema.String>;
+                }>>>;
+                readonly invalidations: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly cacheClass: Schema.String;
+                    readonly key: Schema.String;
+                    readonly reason: Schema.String;
+                }>>>;
+                readonly environmentHashes: Schema.optionalKey<Schema.Struct<{
+                    readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                    readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                    readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+                    readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+                }>>;
+            }>>;
+            readonly sandbox: Schema.Struct<{
+                readonly sandboxPolicyRefId: Schema.optionalKey<Schema.String>;
+                readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+                readonly failClosed: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
+            }>;
+            readonly materialization: Schema.Struct<{
+                readonly sourceMode: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>;
+                readonly repoBindingId: Schema.optionalKey<Schema.String>;
+                readonly commitSha: Schema.optionalKey<Schema.String>;
+                readonly packageName: Schema.optionalKey<Schema.String>;
+                readonly version: Schema.optionalKey<Schema.String>;
+                readonly entrypoint: Schema.optionalKey<Schema.String>;
+                readonly contentSha256: Schema.optionalKey<Schema.String>;
+            }>;
+            readonly createdAt: Schema.String;
+            readonly updatedAt: Schema.String;
+        }>>;
+    }>>;
+}>;
+export declare const RunnerOperationsLiveSnapshot: Schema.Struct<{
+    readonly overview: Schema.Struct<{
+        readonly runners: Schema.$Array<Schema.Struct<{
+            readonly id: Schema.String;
+            readonly workspaceId: Schema.String;
+            readonly agentIdentityId: Schema.String;
+            readonly ownership: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"workspace">;
+                readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"project">;
+                readonly projectId: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"personal">;
+                readonly ownerUserId: Schema.String;
+                /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+                readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+            }>]>;
+            readonly projectGrantIds: Schema.$Array<Schema.String>;
+            readonly credentialHostId: Schema.optionalKey<Schema.String>;
+            readonly name: Schema.String;
+            readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
+            readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+            readonly capabilities: Schema.Struct<{
+                readonly harnesses: Schema.$Array<Schema.String>;
+                /** The Harness an Agent that names none launches on. */
+                readonly defaultHarness: Schema.optionalKey<Schema.String>;
+                readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly harness: Schema.String;
+                    readonly missing: Schema.$Array<Schema.String>;
+                }>>>;
+                readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+                readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+                readonly sandboxBackends: Schema.$Array<Schema.String>;
+                readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly implementation: Schema.String;
+                    readonly version: Schema.String;
+                    readonly guestRuntime: Schema.optionalKey<Schema.String>;
+                    readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+                    readonly moduleLoading: Schema.Boolean;
+                    readonly longLivedProcesses: Schema.Boolean;
+                    readonly services: Schema.Boolean;
+                    readonly tunnels: Schema.Boolean;
+                    readonly processIsolation: Schema.Boolean;
+                    readonly filesystemIsolation: Schema.Boolean;
+                    readonly networkIsolation: Schema.Boolean;
+                    readonly resourceEnforcement: Schema.Boolean;
+                }>>>;
+                readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+                    readonly missing: Schema.$Array<Schema.String>;
+                }>>>;
+                /** Namespaced native extension identities (id@version) the runner supports. */
+                readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly deliveryTools: Schema.$Array<Schema.Struct<{
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+                    readonly available: Schema.Boolean;
+                    readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                    readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+                }>>;
+                readonly bun: Schema.Struct<{
+                    readonly available: Schema.Boolean;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                }>;
+                readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+                readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly repoBindingId: Schema.String;
+                    readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                    readonly host: Schema.String;
+                    readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+                    readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+                    readonly authenticated: Schema.Boolean;
+                    readonly canPush: Schema.optionalKey<Schema.Boolean>;
+                }>>>;
+                readonly runs: Schema.optionalKey<Schema.Struct<{
+                    readonly supported: Schema.Boolean;
+                    readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+                    readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+                    readonly sandboxBackends: Schema.$Array<Schema.String>;
+                    readonly providerActions: Schema.Struct<{
+                        readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                        readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                        readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                        readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    }>;
+                    readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+                }>>;
+                readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+                    readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+                    readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+                    readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+                    readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+                }>>;
+            }>;
+            /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
+            readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
+            readonly labels: Schema.$Array<Schema.String>;
+            readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+            readonly createdByUserId: Schema.optionalKey<Schema.String>;
+            readonly createdAt: Schema.String;
+            readonly updatedAt: Schema.String;
+        }>>;
+        readonly stepAttempts: Schema.$Array<Schema.Struct<{
+            readonly runnerId: Schema.String;
+            readonly loopId: Schema.String;
+            readonly loopName: Schema.String;
+            readonly runId: Schema.String;
+            readonly items: Schema.$Array<Schema.Struct<{
+                readonly id: Schema.String;
+                readonly workspaceId: Schema.String;
+                readonly projectId: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"step_attempt">;
+                readonly runId: Schema.String;
+                readonly stepKey: Schema.String;
+                readonly runtimeKind: Schema.optionalKey<Schema.String>;
+                readonly attempt: Schema.Int;
+                readonly status: Schema.Union<readonly [Schema.Literal<"pending">, Schema.Literal<"claimed">, Schema.Literal<"running">, Schema.Literal<"blocked">, Schema.Literal<"completed">, Schema.Literal<"failed">, Schema.Literal<"canceled">, Schema.Literal<"expired">]>;
+                readonly lease: Schema.Struct<{
+                    readonly leaseOwnerId: Schema.optionalKey<Schema.String>;
+                    readonly runnerReplicaId: Schema.optionalKey<Schema.String>;
+                    readonly leaseId: Schema.optionalKey<Schema.String>;
+                    readonly attempt: Schema.optionalKey<Schema.Int>;
+                    readonly fencingToken: Schema.optionalKey<Schema.String>;
+                    readonly capacitySlot: Schema.optionalKey<Schema.String>;
+                    readonly leaseExpiresAt: Schema.optionalKey<Schema.String>;
+                    readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+                }>;
+                readonly capacity: Schema.Struct<{
+                    readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+                    readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+                    readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+                }>;
+                readonly capabilities: Schema.$Array<Schema.Struct<{
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"loop_capability">, Schema.Literal<"operation_ref">, Schema.Literal<"package_ref">]>;
+                    readonly ref: Schema.String;
+                    readonly scopeKind: Schema.optionalKey<Schema.String>;
+                    readonly scopeId: Schema.optionalKey<Schema.String>;
+                }>>;
+                readonly environment: Schema.optionalKey<Schema.Struct<{
+                    readonly harness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+                    readonly configWriterRequired: Schema.optionalKey<Schema.Boolean>;
+                    readonly secretProviderTypes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>>;
+                    readonly runtimeConstraints: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                }>>;
+                readonly environmentHashes: Schema.optionalKey<Schema.Struct<{
+                    readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                    readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                    readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+                    readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+                }>>;
+                readonly caches: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly key: Schema.String;
+                    readonly strategy: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>;
+                    readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+                }>>>;
+                readonly warmStart: Schema.optionalKey<Schema.Struct<{
+                    readonly strategy: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>;
+                    readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+                    readonly cacheHits: Schema.$Array<Schema.Struct<{
+                        readonly key: Schema.String;
+                        readonly sharing: Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>;
+                        readonly validated: Schema.Boolean;
+                    }>>;
+                    readonly cacheMisses: Schema.$Array<Schema.String>;
+                    readonly executedOperations: Schema.Int;
+                    readonly skippedOperations: Schema.Int;
+                    readonly phaseTimings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                        readonly phase: Schema.String;
+                        readonly mode: Schema.Union<readonly [Schema.Literal<"cold">, Schema.Literal<"warm">]>;
+                        readonly durationMs: Schema.Finite;
+                        readonly cacheState: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"hit">, Schema.Literal<"miss">, Schema.Literal<"stale">, Schema.Literal<"corrupt">, Schema.Literal<"lock_wait">, Schema.Literal<"invalidated">]>>;
+                        readonly cacheKey: Schema.optionalKey<Schema.String>;
+                    }>>>;
+                    readonly invalidations: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                        readonly cacheClass: Schema.String;
+                        readonly key: Schema.String;
+                        readonly reason: Schema.String;
+                    }>>>;
+                    readonly environmentHashes: Schema.optionalKey<Schema.Struct<{
+                        readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                        readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                        readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+                        readonly secretScopeHash: Schema.optionalKey<Schema.String>;
+                    }>>;
+                }>>;
+                readonly sandbox: Schema.Struct<{
+                    readonly sandboxPolicyRefId: Schema.optionalKey<Schema.String>;
+                    readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+                    readonly failClosed: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
+                }>;
+                readonly materialization: Schema.Struct<{
+                    readonly sourceMode: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>;
+                    readonly repoBindingId: Schema.optionalKey<Schema.String>;
+                    readonly commitSha: Schema.optionalKey<Schema.String>;
+                    readonly packageName: Schema.optionalKey<Schema.String>;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                    readonly entrypoint: Schema.optionalKey<Schema.String>;
+                    readonly contentSha256: Schema.optionalKey<Schema.String>;
+                }>;
+                readonly createdAt: Schema.String;
+                readonly updatedAt: Schema.String;
+            }>>;
+        }>>;
+    }>;
+    readonly snapshot: Schema.Struct<{
+        readonly source: Schema.Literal<"http_snapshot">;
+        readonly collection: Schema.Literal<"runner_operations">;
+        readonly scope: Schema.Struct<{
+            readonly kind: Schema.Literal<"project">;
+            readonly workspaceId: Schema.String;
+            readonly projectId: Schema.String;
+        }>;
+        readonly window: Schema.Struct<{
+            readonly runnerLimit: Schema.Literal<50>;
+            readonly loopLimit: Schema.Literal<50>;
+            readonly recentRunsPerLoop: Schema.Literal<3>;
+            readonly stepAttemptsPerRunnerRun: Schema.Literal<10>;
+        }>;
+        readonly capturedAt: Schema.String;
+        readonly consistency: Schema.Literal<"lower_bound">;
+        readonly lowerBound: Schema.String;
+        readonly isComplete: Schema.Literal<false>;
+    }>;
+}>;
+export declare const RunnerFlightDeckReadiness: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["ready", "degraded", "blocked", "unknown"]>;
+    readonly reasons: Schema.$Array<Schema.String>;
+    readonly nextActions: Schema.$Array<Schema.String>;
+}>;
+export declare const RunnerFlightDeckClaimability: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["claimable", "not_claimable", "unknown"]>;
+    readonly reasons: Schema.$Array<Schema.String>;
+    readonly nextActions: Schema.$Array<Schema.String>;
+}>;
+export declare const RunnerFlightDeckTrust: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["verified", "unavailable", "stale", "revoked", "unknown"]>;
+    readonly enrollment: Schema.Literals<readonly ["enrolled", "pending_enrollment", "lost_host", "revoked", "unknown"]>;
+    readonly preflight: Schema.Literals<readonly ["accepted", "expired", "revoked", "unavailable", "unknown"]>;
+    readonly profileDigest: Schema.optionalKey<Schema.String>;
+    readonly artifactDigest: Schema.optionalKey<Schema.String>;
+    readonly certificationDigest: Schema.optionalKey<Schema.String>;
+    readonly configDigest: Schema.optionalKey<Schema.String>;
+    readonly closureDigest: Schema.optionalKey<Schema.String>;
+    readonly candidateDigest: Schema.optionalKey<Schema.String>;
+    readonly acceptanceDigest: Schema.optionalKey<Schema.String>;
+    readonly launchSnapshotHash: Schema.optionalKey<Schema.String>;
+    readonly architecture: Schema.optionalKey<Schema.Literals<readonly ["amd64", "arm64"]>>;
+    readonly blockers: Schema.$Array<Schema.String>;
+}>;
+export declare const RunnerFlightDeckEnvironment: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["resolved", "blocked", "stale", "unknown"]>;
+    readonly sourceMode: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>>;
+    readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+    readonly sandboxPosture: Schema.Literals<readonly ["verified", "trusted", "unknown"]>;
+    readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+    readonly syncKitHash: Schema.optionalKey<Schema.String>;
+    readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+    readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+    readonly cacheStatus: Schema.Literals<readonly ["hit", "miss", "stale", "corrupt", "unknown"]>;
+    readonly warmCacheHits: Schema.Int;
+    readonly warmCacheMisses: Schema.Int;
+    readonly blockers: Schema.$Array<Schema.String>;
+}>;
+export declare const RunnerFlightDeckQuota: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["available", "waiting", "blocked_manual", "unknown"]>;
+    readonly freshness: Schema.Literals<readonly ["fresh", "stale", "expired", "unknown"]>;
+    readonly evidenceGrade: Schema.Literals<readonly ["authoritative", "strong", "supporting", "none"]>;
+    readonly observedAt: Schema.optionalKey<Schema.String>;
+    readonly reason: Schema.optionalKey<Schema.String>;
+    readonly blockers: Schema.$Array<Schema.String>;
+}>;
+export declare const RunnerFlightDeckCleanup: Schema.Struct<{
+    readonly status: Schema.Literals<readonly ["clean", "pending", "incomplete", "unknown"]>;
+    readonly knownResourceClasses: Schema.Int;
+    readonly unknownResourceClasses: Schema.Int;
+    readonly blockers: Schema.$Array<Schema.String>;
+}>;
+export declare const RunnerFlightDeckLifecycleAction: Schema.Struct<{
+    readonly kind: Schema.Literals<readonly ["drain", "rotate", "revoke", "update", "rollback"]>;
+    readonly allowed: Schema.Boolean;
+    readonly reason: Schema.String;
+}>;
+export declare const RunnerFlightDeckRunnerDiagnostics: Schema.Struct<{
+    readonly readiness: Schema.Struct<{
+        readonly status: Schema.Literals<readonly ["ready", "degraded", "blocked", "unknown"]>;
+        readonly reasons: Schema.$Array<Schema.String>;
+        readonly nextActions: Schema.$Array<Schema.String>;
+    }>;
+    readonly claimability: Schema.Struct<{
+        readonly status: Schema.Literals<readonly ["claimable", "not_claimable", "unknown"]>;
+        readonly reasons: Schema.$Array<Schema.String>;
+        readonly nextActions: Schema.$Array<Schema.String>;
+    }>;
+    readonly trust: Schema.Struct<{
+        readonly status: Schema.Literals<readonly ["verified", "unavailable", "stale", "revoked", "unknown"]>;
+        readonly enrollment: Schema.Literals<readonly ["enrolled", "pending_enrollment", "lost_host", "revoked", "unknown"]>;
+        readonly preflight: Schema.Literals<readonly ["accepted", "expired", "revoked", "unavailable", "unknown"]>;
+        readonly profileDigest: Schema.optionalKey<Schema.String>;
+        readonly artifactDigest: Schema.optionalKey<Schema.String>;
+        readonly certificationDigest: Schema.optionalKey<Schema.String>;
+        readonly configDigest: Schema.optionalKey<Schema.String>;
+        readonly closureDigest: Schema.optionalKey<Schema.String>;
+        readonly candidateDigest: Schema.optionalKey<Schema.String>;
+        readonly acceptanceDigest: Schema.optionalKey<Schema.String>;
+        readonly launchSnapshotHash: Schema.optionalKey<Schema.String>;
+        readonly architecture: Schema.optionalKey<Schema.Literals<readonly ["amd64", "arm64"]>>;
+        readonly blockers: Schema.$Array<Schema.String>;
+    }>;
+    readonly environment: Schema.Struct<{
+        readonly status: Schema.Literals<readonly ["resolved", "blocked", "stale", "unknown"]>;
+        readonly sourceMode: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>>;
+        readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+        readonly sandboxPosture: Schema.Literals<readonly ["verified", "trusted", "unknown"]>;
+        readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly syncKitHash: Schema.optionalKey<Schema.String>;
+        readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+        readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+        readonly cacheStatus: Schema.Literals<readonly ["hit", "miss", "stale", "corrupt", "unknown"]>;
+        readonly warmCacheHits: Schema.Int;
+        readonly warmCacheMisses: Schema.Int;
+        readonly blockers: Schema.$Array<Schema.String>;
+    }>;
+    readonly quota: Schema.Struct<{
+        readonly status: Schema.Literals<readonly ["available", "waiting", "blocked_manual", "unknown"]>;
+        readonly freshness: Schema.Literals<readonly ["fresh", "stale", "expired", "unknown"]>;
+        readonly evidenceGrade: Schema.Literals<readonly ["authoritative", "strong", "supporting", "none"]>;
+        readonly observedAt: Schema.optionalKey<Schema.String>;
+        readonly reason: Schema.optionalKey<Schema.String>;
+        readonly blockers: Schema.$Array<Schema.String>;
+    }>;
+    readonly cleanup: Schema.Struct<{
+        readonly status: Schema.Literals<readonly ["clean", "pending", "incomplete", "unknown"]>;
+        readonly knownResourceClasses: Schema.Int;
+        readonly unknownResourceClasses: Schema.Int;
+        readonly blockers: Schema.$Array<Schema.String>;
+    }>;
+    readonly lifecycle: Schema.Struct<{
+        readonly enrollment: Schema.Literals<readonly ["enrolled", "pending_enrollment", "lost_host", "revoked", "unknown"]>;
+        readonly rotation: Schema.Literals<readonly ["available", "required", "blocked", "unknown"]>;
+        readonly revocation: Schema.Literals<readonly ["active", "draining", "revoked", "unknown"]>;
+        readonly update: Schema.Literals<readonly ["available", "blocked", "unknown"]>;
+        readonly rollback: Schema.Literals<readonly ["available", "blocked", "unknown"]>;
+        readonly actions: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["drain", "rotate", "revoke", "update", "rollback"]>;
+            readonly allowed: Schema.Boolean;
+            readonly reason: Schema.String;
+        }>>;
+    }>;
+}>;
+export declare const RunnerFlightDeckEvidenceRef: Schema.Struct<{
+    readonly kind: Schema.Literals<readonly ["work_unit", "run", "runner_replica"]>;
+    readonly id: Schema.String;
+}>;
+export declare const RunnerFlightDeck: Schema.Struct<{
+    readonly generatedAt: Schema.String;
+    readonly staleAfterSeconds: Schema.Int;
+    readonly coverage: Schema.Struct<{
+        readonly runnerLimit: Schema.Int;
+        readonly returnedRunners: Schema.Int;
+        readonly hasMore: Schema.Boolean;
+        readonly isComplete: Schema.Boolean;
+    }>;
+    readonly metrics: Schema.Struct<{
+        readonly runnerCount: Schema.Int;
+        readonly replicaCount: Schema.Int;
+        readonly acceptingReplicaCount: Schema.Int;
+        readonly activeWorkUnitCount: Schema.Int;
+        readonly blockedWorkUnitCount: Schema.Int;
+        readonly failedWorkUnitCount: Schema.Int;
+        readonly warmCacheHits: Schema.Int;
+        readonly warmCacheMisses: Schema.Int;
+        readonly staleReplicaCount: Schema.Int;
+        readonly notClaimableRunnerCount: Schema.optionalKey<Schema.Int>;
+        readonly unknownQuotaRunnerCount: Schema.optionalKey<Schema.Int>;
+        readonly unknownCleanupRunnerCount: Schema.optionalKey<Schema.Int>;
+    }>;
+    readonly runners: Schema.$Array<Schema.Struct<{
+        readonly runnerId: Schema.String;
+        readonly name: Schema.String;
+        readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
+        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
+        readonly replicaCount: Schema.Int;
+        readonly acceptingReplicas: Schema.Int;
+        readonly activeWorkUnits: Schema.Int;
+        readonly labels: Schema.$Array<Schema.String>;
+        readonly harnesses: Schema.$Array<Schema.String>;
+        readonly sandboxBackends: Schema.$Array<Schema.String>;
+        readonly blockers: Schema.$Array<Schema.String>;
+        readonly diagnostics: Schema.optionalKey<Schema.Struct<{
+            readonly readiness: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["ready", "degraded", "blocked", "unknown"]>;
+                readonly reasons: Schema.$Array<Schema.String>;
+                readonly nextActions: Schema.$Array<Schema.String>;
+            }>;
+            readonly claimability: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["claimable", "not_claimable", "unknown"]>;
+                readonly reasons: Schema.$Array<Schema.String>;
+                readonly nextActions: Schema.$Array<Schema.String>;
+            }>;
+            readonly trust: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["verified", "unavailable", "stale", "revoked", "unknown"]>;
+                readonly enrollment: Schema.Literals<readonly ["enrolled", "pending_enrollment", "lost_host", "revoked", "unknown"]>;
+                readonly preflight: Schema.Literals<readonly ["accepted", "expired", "revoked", "unavailable", "unknown"]>;
+                readonly profileDigest: Schema.optionalKey<Schema.String>;
+                readonly artifactDigest: Schema.optionalKey<Schema.String>;
+                readonly certificationDigest: Schema.optionalKey<Schema.String>;
+                readonly configDigest: Schema.optionalKey<Schema.String>;
+                readonly closureDigest: Schema.optionalKey<Schema.String>;
+                readonly candidateDigest: Schema.optionalKey<Schema.String>;
+                readonly acceptanceDigest: Schema.optionalKey<Schema.String>;
+                readonly launchSnapshotHash: Schema.optionalKey<Schema.String>;
+                readonly architecture: Schema.optionalKey<Schema.Literals<readonly ["amd64", "arm64"]>>;
+                readonly blockers: Schema.$Array<Schema.String>;
+            }>;
+            readonly environment: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["resolved", "blocked", "stale", "unknown"]>;
+                readonly sourceMode: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>>;
+                readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+                readonly sandboxPosture: Schema.Literals<readonly ["verified", "trusted", "unknown"]>;
+                readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                readonly syncKitHash: Schema.optionalKey<Schema.String>;
+                readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+                readonly cacheStatus: Schema.Literals<readonly ["hit", "miss", "stale", "corrupt", "unknown"]>;
+                readonly warmCacheHits: Schema.Int;
+                readonly warmCacheMisses: Schema.Int;
+                readonly blockers: Schema.$Array<Schema.String>;
+            }>;
+            readonly quota: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["available", "waiting", "blocked_manual", "unknown"]>;
+                readonly freshness: Schema.Literals<readonly ["fresh", "stale", "expired", "unknown"]>;
+                readonly evidenceGrade: Schema.Literals<readonly ["authoritative", "strong", "supporting", "none"]>;
+                readonly observedAt: Schema.optionalKey<Schema.String>;
+                readonly reason: Schema.optionalKey<Schema.String>;
+                readonly blockers: Schema.$Array<Schema.String>;
+            }>;
+            readonly cleanup: Schema.Struct<{
+                readonly status: Schema.Literals<readonly ["clean", "pending", "incomplete", "unknown"]>;
+                readonly knownResourceClasses: Schema.Int;
+                readonly unknownResourceClasses: Schema.Int;
+                readonly blockers: Schema.$Array<Schema.String>;
+            }>;
+            readonly lifecycle: Schema.Struct<{
+                readonly enrollment: Schema.Literals<readonly ["enrolled", "pending_enrollment", "lost_host", "revoked", "unknown"]>;
+                readonly rotation: Schema.Literals<readonly ["available", "required", "blocked", "unknown"]>;
+                readonly revocation: Schema.Literals<readonly ["active", "draining", "revoked", "unknown"]>;
+                readonly update: Schema.Literals<readonly ["available", "blocked", "unknown"]>;
+                readonly rollback: Schema.Literals<readonly ["available", "blocked", "unknown"]>;
+                readonly actions: Schema.$Array<Schema.Struct<{
+                    readonly kind: Schema.Literals<readonly ["drain", "rotate", "revoke", "update", "rollback"]>;
+                    readonly allowed: Schema.Boolean;
+                    readonly reason: Schema.String;
+                }>>;
+            }>;
+        }>>;
+        readonly replicas: Schema.$Array<Schema.Struct<{
+            readonly replicaId: Schema.String;
+            readonly name: Schema.String;
+            readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"draining">, Schema.Literal<"stopped">, Schema.Literal<"disabled">]>;
+            readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+            readonly drainState: Schema.Union<readonly [Schema.Literal<"accepting">, Schema.Literal<"draining">, Schema.Literal<"drained">]>;
+            readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
+            readonly activeWorkUnits: Schema.Int;
+            readonly capacitySlots: Schema.optionalKey<Schema.Int>;
+            readonly cacheHints: Schema.Int;
+            readonly cacheHitRate: Schema.optionalKey<Schema.Finite>;
+            readonly placement: Schema.optionalKey<Schema.Struct<{
+                readonly kind: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+                readonly zone: Schema.optionalKey<Schema.String>;
+            }>>;
+        }>>;
+    }>>;
+    readonly workUnits: Schema.$Array<Schema.Struct<{
+        readonly workUnitId: Schema.String;
+        readonly runId: Schema.String;
+        readonly stepKey: Schema.String;
+        readonly attempt: Schema.Int;
+        readonly status: Schema.Union<readonly [Schema.Literal<"pending">, Schema.Literal<"claimed">, Schema.Literal<"running">, Schema.Literal<"blocked">, Schema.Literal<"completed">, Schema.Literal<"failed">, Schema.Literal<"canceled">, Schema.Literal<"expired">]>;
+        readonly runnerReplicaId: Schema.optionalKey<Schema.String>;
+        readonly fencePresent: Schema.Boolean;
+        readonly leaseExpiresAt: Schema.optionalKey<Schema.String>;
+        readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
+        readonly queueAgeSeconds: Schema.optionalKey<Schema.Int>;
+        readonly elapsedSeconds: Schema.optionalKey<Schema.Int>;
+        readonly participant: Schema.optionalKey<Schema.String>;
+        readonly harness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+        readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+        readonly cacheStrategy: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>>;
+        readonly cachePhase: Schema.optionalKey<Schema.Literals<readonly ["not_required", "unknown", "hit", "miss", "mixed"]>>;
+        readonly commandPhase: Schema.optionalKey<Schema.Literals<readonly ["queued", "claiming", "preparation", "sandbox_launch", "harness_execution", "verification", "review", "delivery", "completion", "blocked", "completed", "failed", "canceled", "expired", "unknown"]>>;
+        readonly currentBlocker: Schema.optionalKey<Schema.String>;
+        readonly evidenceRefs: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["work_unit", "run", "runner_replica"]>;
+            readonly id: Schema.String;
+        }>>>;
+        readonly warmCacheHits: Schema.Int;
+        readonly warmCacheMisses: Schema.Int;
+        readonly materializationSourceMode: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>;
+        readonly blockers: Schema.$Array<Schema.String>;
+    }>>;
+}>;
+export declare const RunnerFlightDeckInput: Schema.Struct<{
+    readonly runIds: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly limitPerRunnerRun: Schema.optionalKey<Schema.Int>;
+    readonly staleAfterSeconds: Schema.optionalKey<Schema.Int>;
+}>;
+export declare const RunnerFlightDeckLiveSnapshotInput: Schema.Struct<{
+    readonly runIds: Schema.optionalKey<Schema.$Array<Schema.String>>;
+    readonly limitPerRunnerRun: Schema.optionalKey<Schema.Int>;
+    readonly staleAfterSeconds: Schema.optionalKey<Schema.Int>;
+    readonly consistency: Schema.Literal<"lower_bound">;
+    readonly workspaceCursor: Schema.String;
+}>;
+export declare const RunnerFlightDeckLiveSnapshot: Schema.Struct<{
+    readonly data: Schema.Struct<{
+        readonly generatedAt: Schema.String;
+        readonly staleAfterSeconds: Schema.Int;
+        readonly coverage: Schema.Struct<{
+            readonly runnerLimit: Schema.Int;
+            readonly returnedRunners: Schema.Int;
+            readonly hasMore: Schema.Boolean;
+            readonly isComplete: Schema.Boolean;
+        }>;
+        readonly metrics: Schema.Struct<{
+            readonly runnerCount: Schema.Int;
+            readonly replicaCount: Schema.Int;
+            readonly acceptingReplicaCount: Schema.Int;
+            readonly activeWorkUnitCount: Schema.Int;
+            readonly blockedWorkUnitCount: Schema.Int;
+            readonly failedWorkUnitCount: Schema.Int;
+            readonly warmCacheHits: Schema.Int;
+            readonly warmCacheMisses: Schema.Int;
+            readonly staleReplicaCount: Schema.Int;
+            readonly notClaimableRunnerCount: Schema.optionalKey<Schema.Int>;
+            readonly unknownQuotaRunnerCount: Schema.optionalKey<Schema.Int>;
+            readonly unknownCleanupRunnerCount: Schema.optionalKey<Schema.Int>;
+        }>;
+        readonly runners: Schema.$Array<Schema.Struct<{
+            readonly runnerId: Schema.String;
+            readonly name: Schema.String;
+            readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
+            readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+            readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
+            readonly replicaCount: Schema.Int;
+            readonly acceptingReplicas: Schema.Int;
+            readonly activeWorkUnits: Schema.Int;
+            readonly labels: Schema.$Array<Schema.String>;
+            readonly harnesses: Schema.$Array<Schema.String>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly blockers: Schema.$Array<Schema.String>;
+            readonly diagnostics: Schema.optionalKey<Schema.Struct<{
+                readonly readiness: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["ready", "degraded", "blocked", "unknown"]>;
+                    readonly reasons: Schema.$Array<Schema.String>;
+                    readonly nextActions: Schema.$Array<Schema.String>;
+                }>;
+                readonly claimability: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["claimable", "not_claimable", "unknown"]>;
+                    readonly reasons: Schema.$Array<Schema.String>;
+                    readonly nextActions: Schema.$Array<Schema.String>;
+                }>;
+                readonly trust: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["verified", "unavailable", "stale", "revoked", "unknown"]>;
+                    readonly enrollment: Schema.Literals<readonly ["enrolled", "pending_enrollment", "lost_host", "revoked", "unknown"]>;
+                    readonly preflight: Schema.Literals<readonly ["accepted", "expired", "revoked", "unavailable", "unknown"]>;
+                    readonly profileDigest: Schema.optionalKey<Schema.String>;
+                    readonly artifactDigest: Schema.optionalKey<Schema.String>;
+                    readonly certificationDigest: Schema.optionalKey<Schema.String>;
+                    readonly configDigest: Schema.optionalKey<Schema.String>;
+                    readonly closureDigest: Schema.optionalKey<Schema.String>;
+                    readonly candidateDigest: Schema.optionalKey<Schema.String>;
+                    readonly acceptanceDigest: Schema.optionalKey<Schema.String>;
+                    readonly launchSnapshotHash: Schema.optionalKey<Schema.String>;
+                    readonly architecture: Schema.optionalKey<Schema.Literals<readonly ["amd64", "arm64"]>>;
+                    readonly blockers: Schema.$Array<Schema.String>;
+                }>;
+                readonly environment: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["resolved", "blocked", "stale", "unknown"]>;
+                    readonly sourceMode: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>>;
+                    readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+                    readonly sandboxPosture: Schema.Literals<readonly ["verified", "trusted", "unknown"]>;
+                    readonly developmentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                    readonly syncKitHash: Schema.optionalKey<Schema.String>;
+                    readonly agentEnvironmentHash: Schema.optionalKey<Schema.String>;
+                    readonly sandboxPolicyHash: Schema.optionalKey<Schema.String>;
+                    readonly cacheStatus: Schema.Literals<readonly ["hit", "miss", "stale", "corrupt", "unknown"]>;
+                    readonly warmCacheHits: Schema.Int;
+                    readonly warmCacheMisses: Schema.Int;
+                    readonly blockers: Schema.$Array<Schema.String>;
+                }>;
+                readonly quota: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["available", "waiting", "blocked_manual", "unknown"]>;
+                    readonly freshness: Schema.Literals<readonly ["fresh", "stale", "expired", "unknown"]>;
+                    readonly evidenceGrade: Schema.Literals<readonly ["authoritative", "strong", "supporting", "none"]>;
+                    readonly observedAt: Schema.optionalKey<Schema.String>;
+                    readonly reason: Schema.optionalKey<Schema.String>;
+                    readonly blockers: Schema.$Array<Schema.String>;
+                }>;
+                readonly cleanup: Schema.Struct<{
+                    readonly status: Schema.Literals<readonly ["clean", "pending", "incomplete", "unknown"]>;
+                    readonly knownResourceClasses: Schema.Int;
+                    readonly unknownResourceClasses: Schema.Int;
+                    readonly blockers: Schema.$Array<Schema.String>;
+                }>;
+                readonly lifecycle: Schema.Struct<{
+                    readonly enrollment: Schema.Literals<readonly ["enrolled", "pending_enrollment", "lost_host", "revoked", "unknown"]>;
+                    readonly rotation: Schema.Literals<readonly ["available", "required", "blocked", "unknown"]>;
+                    readonly revocation: Schema.Literals<readonly ["active", "draining", "revoked", "unknown"]>;
+                    readonly update: Schema.Literals<readonly ["available", "blocked", "unknown"]>;
+                    readonly rollback: Schema.Literals<readonly ["available", "blocked", "unknown"]>;
+                    readonly actions: Schema.$Array<Schema.Struct<{
+                        readonly kind: Schema.Literals<readonly ["drain", "rotate", "revoke", "update", "rollback"]>;
+                        readonly allowed: Schema.Boolean;
+                        readonly reason: Schema.String;
+                    }>>;
+                }>;
+            }>>;
+            readonly replicas: Schema.$Array<Schema.Struct<{
+                readonly replicaId: Schema.String;
+                readonly name: Schema.String;
+                readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"draining">, Schema.Literal<"stopped">, Schema.Literal<"disabled">]>;
+                readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+                readonly drainState: Schema.Union<readonly [Schema.Literal<"accepting">, Schema.Literal<"draining">, Schema.Literal<"drained">]>;
+                readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
+                readonly activeWorkUnits: Schema.Int;
+                readonly capacitySlots: Schema.optionalKey<Schema.Int>;
+                readonly cacheHints: Schema.Int;
+                readonly cacheHitRate: Schema.optionalKey<Schema.Finite>;
+                readonly placement: Schema.optionalKey<Schema.Struct<{
+                    readonly kind: Schema.String;
+                    readonly label: Schema.optionalKey<Schema.String>;
+                    readonly zone: Schema.optionalKey<Schema.String>;
+                }>>;
+            }>>;
+        }>>;
+        readonly workUnits: Schema.$Array<Schema.Struct<{
+            readonly workUnitId: Schema.String;
+            readonly runId: Schema.String;
+            readonly stepKey: Schema.String;
+            readonly attempt: Schema.Int;
+            readonly status: Schema.Union<readonly [Schema.Literal<"pending">, Schema.Literal<"claimed">, Schema.Literal<"running">, Schema.Literal<"blocked">, Schema.Literal<"completed">, Schema.Literal<"failed">, Schema.Literal<"canceled">, Schema.Literal<"expired">]>;
+            readonly runnerReplicaId: Schema.optionalKey<Schema.String>;
+            readonly fencePresent: Schema.Boolean;
+            readonly leaseExpiresAt: Schema.optionalKey<Schema.String>;
+            readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
+            readonly queueAgeSeconds: Schema.optionalKey<Schema.Int>;
+            readonly elapsedSeconds: Schema.optionalKey<Schema.Int>;
+            readonly participant: Schema.optionalKey<Schema.String>;
+            readonly harness: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+            readonly sandboxBackend: Schema.optionalKey<Schema.String>;
+            readonly cacheStrategy: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"best_effort">, Schema.Literal<"required">]>>;
+            readonly cachePhase: Schema.optionalKey<Schema.Literals<readonly ["not_required", "unknown", "hit", "miss", "mixed"]>>;
+            readonly commandPhase: Schema.optionalKey<Schema.Literals<readonly ["queued", "claiming", "preparation", "sandbox_launch", "harness_execution", "verification", "review", "delivery", "completion", "blocked", "completed", "failed", "canceled", "expired", "unknown"]>>;
+            readonly currentBlocker: Schema.optionalKey<Schema.String>;
+            readonly evidenceRefs: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly kind: Schema.Literals<readonly ["work_unit", "run", "runner_replica"]>;
+                readonly id: Schema.String;
+            }>>>;
+            readonly warmCacheHits: Schema.Int;
+            readonly warmCacheMisses: Schema.Int;
+            readonly materializationSourceMode: Schema.Union<readonly [Schema.Literal<"none">, Schema.Literal<"repo_binding">, Schema.Literal<"direct">, Schema.Literal<"git_backed">]>;
+            readonly blockers: Schema.$Array<Schema.String>;
+        }>>;
+    }>;
+    readonly snapshot: Schema.Struct<{
+        readonly source: Schema.Literal<"http_snapshot">;
+        readonly collection: Schema.Literal<"runner_flight_deck">;
+        readonly scope: Schema.Struct<{
+            readonly kind: Schema.Literal<"workspace">;
+            readonly workspaceId: Schema.String;
+        }>;
+        readonly input: Schema.Struct<{
+            readonly runIds: Schema.$Array<Schema.String>;
+            readonly limitPerRunnerRun: Schema.Int;
+            readonly staleAfterSeconds: Schema.optionalKey<Schema.Int>;
+        }>;
+        readonly capturedAt: Schema.String;
+        readonly consistency: Schema.Literal<"lower_bound">;
+        readonly lowerBound: Schema.String;
+        readonly isComplete: Schema.Boolean;
+    }>;
+}>;
+export declare const RunnerControlCommandListInput: Schema.Union<readonly [Schema.Struct<{
+    readonly runId: Schema.String;
+    readonly stepKey: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly taskId: Schema.String;
+}>]>;
+export declare const RunnerStepAttemptListInput: Schema.Struct<{
+    readonly runId: Schema.String;
+    readonly limit: Schema.optionalKey<Schema.Int>;
+}>;
+export declare const RunnerProjectStepAttemptListInput: Schema.Struct<{
+    readonly projectId: Schema.String;
+    readonly limit: Schema.optionalKey<Schema.Int>;
+}>;
+export declare const RunnerStepAttemptClaimInput: Schema.Struct<{
+    readonly attemptId: Schema.String;
+    readonly runnerReplicaId: Schema.String;
+    readonly capacitySlot: Schema.String;
+    readonly idempotencyKey: Schema.String;
+    readonly leaseDurationSeconds: Schema.optionalKey<Schema.Int>;
+}>;
+export declare const RunnerStepAttemptHeartbeat: Schema.Struct<{
+    readonly attemptId: Schema.String;
+    readonly runnerReplicaId: Schema.String;
+    readonly leaseId: Schema.String;
+    readonly fencingToken: Schema.String;
+    readonly capacitySlot: Schema.String;
+    readonly leaseDurationSeconds: Schema.optionalKey<Schema.Int>;
+}>;
+export declare const RunnerStepAttemptCompletion: Schema.Struct<{
+    readonly attemptId: Schema.String;
+    readonly runnerReplicaId: Schema.String;
+    readonly leaseId: Schema.String;
+    readonly fencingToken: Schema.String;
+    readonly capacitySlot: Schema.String;
+    readonly idempotencyKey: Schema.String;
+    readonly result: Schema.Struct<{
+        readonly stepKey: Schema.String;
+        readonly outputSchemaRef: Schema.Struct<{
+            readonly kind: Schema.Literal<"typebox_ref">;
+            readonly name: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+            readonly sha256: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly summary: Schema.String;
+        readonly data: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+        readonly refs: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["task", "kit", "memory", "decision", "knowledge_record", "context_pack", "step_attempt", "change_request", "change_request_review", "provider_action", "thread_entry", "run", "artifact"]>;
+            readonly id: Schema.optionalKey<Schema.String>;
+            readonly externalId: Schema.optionalKey<Schema.String>;
+            readonly provider: Schema.optionalKey<Schema.String>;
+            readonly title: Schema.optionalKey<Schema.String>;
+        }>>;
+    }>;
+}>;
+export declare const RunnerStepAttemptFailure: Schema.Struct<{
+    readonly attemptId: Schema.String;
+    readonly runnerReplicaId: Schema.String;
+    readonly leaseId: Schema.String;
+    readonly fencingToken: Schema.String;
+    readonly capacitySlot: Schema.String;
+    readonly idempotencyKey: Schema.String;
+    readonly failureSummary: Schema.String;
+    readonly outcome: Schema.Union<readonly [Schema.Literal<"retrying">, Schema.Literal<"blocked">, Schema.Literal<"failed">]>;
+}>;
+export declare const RunnerList: Schema.Struct<{
+    readonly items: Schema.$Array<Schema.Struct<{
+        readonly id: Schema.String;
+        readonly workspaceId: Schema.String;
+        readonly agentIdentityId: Schema.String;
+        readonly ownership: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"workspace">;
+            readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"project">;
+            readonly projectId: Schema.String;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"personal">;
+            readonly ownerUserId: Schema.String;
+            /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
+            readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+        }>]>;
+        readonly projectGrantIds: Schema.$Array<Schema.String>;
+        readonly credentialHostId: Schema.optionalKey<Schema.String>;
+        readonly name: Schema.String;
+        readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
+        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly capabilities: Schema.Struct<{
+            readonly harnesses: Schema.$Array<Schema.String>;
+            /** The Harness an Agent that names none launches on. */
+            readonly defaultHarness: Schema.optionalKey<Schema.String>;
+            readonly harnessUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly harness: Schema.String;
+                readonly missing: Schema.$Array<Schema.String>;
+            }>>>;
+            readonly configWriters: Schema.$Array<Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>>;
+            readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly skillSources: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+            readonly sandboxBackends: Schema.$Array<Schema.String>;
+            readonly sandboxCapabilities: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly implementation: Schema.String;
+                readonly version: Schema.String;
+                readonly guestRuntime: Schema.optionalKey<Schema.String>;
+                readonly guestRuntimeVersion: Schema.optionalKey<Schema.String>;
+                readonly moduleLoading: Schema.Boolean;
+                readonly longLivedProcesses: Schema.Boolean;
+                readonly services: Schema.Boolean;
+                readonly tunnels: Schema.Boolean;
+                readonly processIsolation: Schema.Boolean;
+                readonly filesystemIsolation: Schema.Boolean;
+                readonly networkIsolation: Schema.Boolean;
+                readonly resourceEnforcement: Schema.Boolean;
+            }>>>;
+            readonly sandboxUnavailable: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly backend: Schema.Literals<readonly ["host", "srt", "docker"]>;
+                readonly missing: Schema.$Array<Schema.String>;
+            }>>>;
+            /** Namespaced native extension identities (id@version) the runner supports. */
+            readonly nativeExtensions: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly deliveryTools: Schema.$Array<Schema.Struct<{
+                readonly kind: Schema.Union<readonly [Schema.Literal<"gh">, Schema.Literal<"glab">]>;
+                readonly available: Schema.Boolean;
+                readonly providerHosts: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly authenticated: Schema.optionalKey<Schema.Boolean>;
+            }>>;
+            readonly bun: Schema.Struct<{
+                readonly available: Schema.Boolean;
+                readonly version: Schema.optionalKey<Schema.String>;
+            }>;
+            readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+            readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly repoBindingId: Schema.String;
+                readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                readonly host: Schema.String;
+                readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
+                readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
+                readonly authenticated: Schema.Boolean;
+                readonly canPush: Schema.optionalKey<Schema.Boolean>;
+            }>>>;
+            readonly runs: Schema.optionalKey<Schema.Struct<{
+                readonly supported: Schema.Boolean;
+                readonly stepKinds: Schema.$Array<Schema.Literals<readonly ["built_in_action", "agent", "wait_for_event", "human_approval", "runner_sandbox", "package_ref", "repeat_until", "call_loop"]>>;
+                readonly executionBackends: Schema.optionalKey<Schema.$Array<Schema.Literals<readonly ["host", "srt", "docker"]>>>;
+                readonly sandboxBackends: Schema.$Array<Schema.String>;
+                readonly providerActions: Schema.Struct<{
+                    readonly comment: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly requestChanges: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly approve: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                    readonly merge: Schema.Union<readonly [Schema.Literal<"disabled">, Schema.Literal<"dry_run">, Schema.Literal<"allowed">]>;
+                }>;
+                readonly cacheSharingModes: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Literal<"runner">, Schema.Literal<"replica">, Schema.Literal<"workspace">]>>>;
+            }>>;
+            readonly resourceLimits: Schema.optionalKey<Schema.Struct<{
+                readonly maxConcurrentRuns: Schema.optionalKey<Schema.Finite>;
+                readonly maxCpuCores: Schema.optionalKey<Schema.Finite>;
+                readonly maxMemoryMb: Schema.optionalKey<Schema.Finite>;
+                readonly maxRunSeconds: Schema.optionalKey<Schema.Finite>;
+            }>>;
+        }>;
+        /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
+        readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
+        readonly labels: Schema.$Array<Schema.String>;
+        readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
+        readonly createdByUserId: Schema.optionalKey<Schema.String>;
+        readonly createdAt: Schema.String;
+        readonly updatedAt: Schema.String;
+    }>>;
+}>;
+export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
+    readonly runnerId: Schema.String;
+    readonly agentEnvironment: Schema.Struct<{
+        readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+        readonly skills: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"skills_sh">;
+                    readonly slug: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"kitman">;
+                    readonly skillId: Schema.optionalKey<Schema.String>;
+                    readonly name: Schema.optionalKey<Schema.String>;
+                    readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+                    readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"git">;
+                    readonly url: Schema.String;
+                    readonly ref: Schema.optionalKey<Schema.String>;
+                    readonly path: Schema.optionalKey<Schema.String>;
+                    readonly sha256: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"package">;
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.String;
+                    readonly path: Schema.optionalKey<Schema.String>;
+                    readonly sha256: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"url">;
+                    readonly url: Schema.String;
+                    readonly sha256: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"local_path">;
+                    readonly path: Schema.String;
+                }>]>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly plugins: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly sources: Schema.NonEmptyArray<Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"package">;
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"git">;
+                    readonly url: Schema.String;
+                    readonly ref: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"url">;
+                    readonly url: Schema.String;
+                    readonly sha256: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"local_path">;
+                    readonly path: Schema.String;
+                }>]>>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly mcpServers: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly transport: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"stdio">;
+                    readonly command: Schema.String;
+                    readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                    readonly env: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"streamable_http">;
+                    readonly url: Schema.String;
+                    readonly headers: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>]>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly harnessSettings: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly providerAuthRefs: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Union<readonly [Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"existing_harness_login">;
+                readonly accountHint: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"local_env">;
+                readonly envName: Schema.String;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"runner_secret">;
+                readonly runnerSecretName: Schema.String;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"managed_oauth">;
+                readonly grantId: Schema.optionalKey<Schema.String>;
+            }>]>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly runnerSecretRefs: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"env">;
+                    readonly envName: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"file">;
+                    readonly pathRef: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"exec">;
+                    readonly commandRef: Schema.String;
+                }>]>;
+                readonly capabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly permissions: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly hooks: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly name: Schema.String;
+                readonly event: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly command: Schema.String;
+                readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly timeoutMs: Schema.optionalKey<Schema.Finite>;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly runtimeConstraints: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly sandboxPolicyRequirements: Schema.$Array<Schema.Struct<{
+            readonly item: Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>;
+            readonly source: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"user_preferences">;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"user_kit">;
+                readonly userId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent_sync_profile">;
+                readonly profileId: Schema.optionalKey<Schema.String>;
+                readonly userId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"device_local">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"workspace_kit">;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"team_default_kit">;
+                readonly teamId: Schema.String;
+                readonly kitId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kitRef: Schema.optionalKey<Schema.String>;
+                readonly kitVersion: Schema.optionalKey<Schema.String>;
+                readonly kitSha256: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationType: Schema.optionalKey<Schema.String>;
+                readonly kind: Schema.Literal<"project_kit">;
+                readonly kitId: Schema.String;
+                readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
+                readonly policyRevision: Schema.optionalKey<Schema.Int>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"marketplace_kit">;
+                readonly kitSourceId: Schema.String;
+                readonly kitVersionId: Schema.optionalKey<Schema.String>;
+                readonly kitInstallationId: Schema.optionalKey<Schema.String>;
+                readonly kitActivationId: Schema.optionalKey<Schema.String>;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"step_attempt_override">;
+                readonly stepAttemptId: Schema.String;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"command_override">;
+                readonly label: Schema.optionalKey<Schema.String>;
+            }>]>;
+        }>>;
+        readonly warnings: Schema.$Array<Schema.String>;
+    }>;
+    readonly now: Schema.optionalKey<Schema.String>;
+    readonly staleAfterSeconds: Schema.optionalKey<Schema.Finite>;
+}>;
+export declare const RunnerEnvironmentMatch: Schema.Struct<{
+    readonly runnerId: Schema.String;
+    readonly match: Schema.Boolean;
+    readonly reasons: Schema.$Array<Schema.String>;
+    readonly evaluatedAt: Schema.String;
+}>;
+export declare const RunnerLoopStepMatchInput: Schema.Struct<{
+    readonly runnerId: Schema.String;
+    readonly loopStep: Schema.Struct<{
+        readonly key: Schema.String;
+        readonly title: Schema.String;
+        readonly required: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
+        readonly dependsOn: Schema.$Array<Schema.String>;
+        readonly requiredContext: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["kit", "memory", "decision", "session", "session_update", "proposal", "task_dependency", "repo_binding", "agent_environment", "loop_step"]>;
+            readonly id: Schema.optionalKey<Schema.String>;
+            readonly idRef: Schema.optionalKey<Schema.String>;
+            readonly reason: Schema.String;
+            readonly required: Schema.withDecodingDefaultKey<Schema.Boolean, never>;
+        }>>;
+        readonly guards: Schema.$Array<Schema.Struct<{
+            readonly key: Schema.String;
+            readonly source: Schema.Literals<readonly ["trigger_event", "task", "project", "proposal", "decision", "step_attempt", "change_request", "context_feedback", "run", "project_policy"]>;
+            readonly path: Schema.$Array<Schema.String>;
+            readonly operator: Schema.Literals<readonly ["equals", "not_equals", "in", "not_in", "exists", "not_exists"]>;
+            readonly value: Schema.optionalKey<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean]>>;
+            readonly values: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean]>>>;
+        }>>;
+        readonly implementation: Schema.Union<readonly [Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"built_in_action">;
+            readonly action: Schema.String;
+            readonly input: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"agent">;
+            readonly taskIdRef: Schema.String;
+            readonly agentId: Schema.String;
+            readonly agentRef: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+                readonly agentId: Schema.String;
+                readonly alias: Schema.String;
+            }>, Schema.Struct<{
+                readonly agentId: Schema.String;
+                readonly version: Schema.Int;
+                readonly digest: Schema.String;
+            }>]>>;
+            readonly runtimeKind: Schema.optionalKey<Schema.String>;
+            readonly harness: Schema.optionalKey<Schema.Struct<{
+                readonly implementation: Schema.String;
+                readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+            }>>;
+            readonly sandbox: Schema.optionalKey<Schema.Struct<{
+                readonly implementation: Schema.String;
+                readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+            }>>;
+            readonly models: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly providerRef: Schema.String;
+                readonly modelRef: Schema.String;
+                readonly profile: Schema.optionalKey<Schema.String>;
+                readonly reasoning: Schema.optionalKey<Schema.String>;
+            }>>>;
+            readonly extensions: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly extensionId: Schema.String;
+                readonly version: Schema.Int;
+                readonly policy: Schema.Literals<readonly ["optional", "required"]>;
+                readonly requiredCapabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly configuration: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./run").SafeJson, import("./run").SafeJson, never, never>>>;
+            }>>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"wait_for_event">;
+            readonly event: Schema.String;
+            readonly anyOf: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly correlationPath: Schema.$Array<Schema.String>;
+            readonly authPolicy: Schema.optionalKey<Schema.Struct<{
+                readonly mode: Schema.Union<readonly [Schema.Literal<"trusted_source">, Schema.Literal<"actor">]>;
+                readonly capability: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly cancellation: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"cancel">, Schema.Literal<"timeout">]>>;
+            readonly releaseRunner: Schema.optionalKey<Schema.Boolean>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"human_approval">;
+            readonly prompt: Schema.String;
+            readonly approvalPolicy: Schema.Struct<{
+                readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
+                readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
+                readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
+            }>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"runner_sandbox">;
+            readonly runnerSelector: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+            readonly entrypoint: Schema.String;
+            readonly package: Schema.optionalKey<Schema.Struct<{
+                readonly packageName: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+                readonly entrypoint: Schema.String;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly mode: Schema.Literal<"direct">;
+                    readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                    readonly bundleRef: Schema.optionalKey<Schema.String>;
+                    readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>, Schema.Struct<{
+                    readonly mode: Schema.Literal<"git_backed">;
+                    readonly repoBindingId: Schema.String;
+                    readonly gitRef: Schema.String;
+                    readonly commitSha: Schema.String;
+                    readonly definitionPath: Schema.optionalKey<Schema.String>;
+                    readonly packagePath: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>]>;
+                readonly runtime: Schema.optionalKey<Schema.String>;
+                readonly integritySha256: Schema.optionalKey<Schema.String>;
+                readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            }>>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"package_ref">;
+            readonly package: Schema.Struct<{
+                readonly packageName: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+                readonly entrypoint: Schema.String;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly mode: Schema.Literal<"direct">;
+                    readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                    readonly bundleRef: Schema.optionalKey<Schema.String>;
+                    readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>, Schema.Struct<{
+                    readonly mode: Schema.Literal<"git_backed">;
+                    readonly repoBindingId: Schema.String;
+                    readonly gitRef: Schema.String;
+                    readonly commitSha: Schema.String;
+                    readonly definitionPath: Schema.optionalKey<Schema.String>;
+                    readonly packagePath: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>]>;
+                readonly runtime: Schema.optionalKey<Schema.String>;
+                readonly integritySha256: Schema.optionalKey<Schema.String>;
+                readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            }>;
+        }>]>, Schema.Struct<{
+            readonly kind: Schema.Literal<"repeat_until">;
+            readonly body: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"built_in_action">;
+                readonly action: Schema.String;
+                readonly input: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"agent">;
+                readonly taskIdRef: Schema.String;
+                readonly agentId: Schema.String;
+                readonly agentRef: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+                    readonly agentId: Schema.String;
+                    readonly alias: Schema.String;
+                }>, Schema.Struct<{
+                    readonly agentId: Schema.String;
+                    readonly version: Schema.Int;
+                    readonly digest: Schema.String;
+                }>]>>;
+                readonly runtimeKind: Schema.optionalKey<Schema.String>;
+                readonly harness: Schema.optionalKey<Schema.Struct<{
+                    readonly implementation: Schema.String;
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+                }>>;
+                readonly sandbox: Schema.optionalKey<Schema.Struct<{
+                    readonly implementation: Schema.String;
+                    readonly kind: Schema.Union<readonly [Schema.Literal<"preferred">, Schema.Literal<"required">]>;
+                }>>;
+                readonly models: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly providerRef: Schema.String;
+                    readonly modelRef: Schema.String;
+                    readonly profile: Schema.optionalKey<Schema.String>;
+                    readonly reasoning: Schema.optionalKey<Schema.String>;
+                }>>>;
+                readonly extensions: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                    readonly extensionId: Schema.String;
+                    readonly version: Schema.Int;
+                    readonly policy: Schema.Literals<readonly ["optional", "required"]>;
+                    readonly requiredCapabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                    readonly configuration: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./run").SafeJson, import("./run").SafeJson, never, never>>>;
+                }>>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"wait_for_event">;
+                readonly event: Schema.String;
+                readonly anyOf: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly correlationPath: Schema.$Array<Schema.String>;
+                readonly authPolicy: Schema.optionalKey<Schema.Struct<{
+                    readonly mode: Schema.Union<readonly [Schema.Literal<"trusted_source">, Schema.Literal<"actor">]>;
+                    readonly capability: Schema.optionalKey<Schema.String>;
+                }>>;
+                readonly cancellation: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"cancel">, Schema.Literal<"timeout">]>>;
+                readonly releaseRunner: Schema.optionalKey<Schema.Boolean>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"human_approval">;
+                readonly prompt: Schema.String;
+                readonly approvalPolicy: Schema.Struct<{
+                    readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                    readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
+                    readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
+                    readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
+                }>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"runner_sandbox">;
+                readonly runnerSelector: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+                readonly entrypoint: Schema.String;
+                readonly package: Schema.optionalKey<Schema.Struct<{
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                    readonly entrypoint: Schema.String;
+                    readonly source: Schema.Union<readonly [Schema.Struct<{
+                        readonly mode: Schema.Literal<"direct">;
+                        readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                        readonly bundleRef: Schema.optionalKey<Schema.String>;
+                        readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>, Schema.Struct<{
+                        readonly mode: Schema.Literal<"git_backed">;
+                        readonly repoBindingId: Schema.String;
+                        readonly gitRef: Schema.String;
+                        readonly commitSha: Schema.String;
+                        readonly definitionPath: Schema.optionalKey<Schema.String>;
+                        readonly packagePath: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>]>;
+                    readonly runtime: Schema.optionalKey<Schema.String>;
+                    readonly integritySha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"package_ref">;
+                readonly package: Schema.Struct<{
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                    readonly entrypoint: Schema.String;
+                    readonly source: Schema.Union<readonly [Schema.Struct<{
+                        readonly mode: Schema.Literal<"direct">;
+                        readonly registeredFrom: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"api">, Schema.Literal<"cli">, Schema.Literal<"mcp">, Schema.Literal<"import">]>>;
+                        readonly bundleRef: Schema.optionalKey<Schema.String>;
+                        readonly bundleSha256: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>, Schema.Struct<{
+                        readonly mode: Schema.Literal<"git_backed">;
+                        readonly repoBindingId: Schema.String;
+                        readonly gitRef: Schema.String;
+                        readonly commitSha: Schema.String;
+                        readonly definitionPath: Schema.optionalKey<Schema.String>;
+                        readonly packagePath: Schema.optionalKey<Schema.String>;
+                        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                    }>]>;
+                    readonly runtime: Schema.optionalKey<Schema.String>;
+                    readonly integritySha256: Schema.optionalKey<Schema.String>;
+                    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>>;
+                }>;
+            }>]>;
+            readonly convergenceOutput: Schema.String;
+            readonly safetyPolicy: Schema.Struct<{
+                readonly maxIterations: Schema.Int;
+                readonly timeoutSeconds: Schema.optionalKey<Schema.Int>;
+            }>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"call_loop">;
+            readonly loop: Schema.Union<readonly [Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly alias: Schema.String;
+            }>, Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly versionId: Schema.String;
+            }>, Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly version: Schema.Int;
+            }>, Schema.Struct<{
+                readonly loopId: Schema.String;
+                readonly digest: Schema.String;
+            }>, Schema.Struct<{
+                readonly slug: Schema.String;
+                readonly alias: Schema.String;
+            }>, Schema.Struct<{
+                readonly slug: Schema.String;
+                readonly version: Schema.Int;
+            }>, Schema.Struct<{
+                readonly slug: Schema.String;
+                readonly digest: Schema.String;
+            }>]>;
+            readonly mode: Schema.Literal<"awaited">;
+        }>]>;
+        readonly inputSchemaRef: Schema.Struct<{
+            readonly kind: Schema.Literal<"typebox_ref">;
+            readonly name: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+            readonly sha256: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly outputSchemaRef: Schema.Struct<{
+            readonly kind: Schema.Literal<"typebox_ref">;
+            readonly name: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+            readonly sha256: Schema.optionalKey<Schema.String>;
+        }>;
+        readonly inputBindings: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+            readonly key: Schema.String;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+            readonly source: Schema.Literal<"trigger_event">;
+            readonly path: Schema.$Array<Schema.String>;
+        }>, Schema.Struct<{
+            readonly key: Schema.String;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+            readonly source: Schema.Literal<"subject">;
+            readonly path: Schema.$Array<Schema.String>;
+        }>, Schema.Struct<{
+            readonly key: Schema.String;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+            readonly source: Schema.Literal<"context">;
+            readonly path: Schema.$Array<Schema.String>;
+        }>, Schema.Struct<{
+            readonly key: Schema.String;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+            readonly source: Schema.Literal<"step_output">;
+            readonly stepKey: Schema.String;
+            readonly outputKey: Schema.String;
+            readonly path: Schema.optionalKey<Schema.$Array<Schema.String>>;
+        }>, Schema.Struct<{
+            readonly key: Schema.String;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+            readonly source: Schema.Literal<"run">;
+            readonly path: Schema.$Array<Schema.String>;
+        }>, Schema.Struct<{
+            readonly key: Schema.String;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+            readonly source: Schema.Literal<"literal">;
+            readonly value: Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>;
+        }>]>>;
+        readonly outputRefs: Schema.$Array<Schema.Struct<{
+            readonly key: Schema.String;
+            readonly schemaRef: Schema.optionalKey<Schema.Struct<{
+                readonly kind: Schema.Literal<"typebox_ref">;
+                readonly name: Schema.String;
+                readonly version: Schema.optionalKey<Schema.String>;
+                readonly sha256: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly path: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly required: Schema.optionalKey<Schema.Boolean>;
+        }>>;
+        readonly allowedCapabilities: Schema.$Array<Schema.Struct<{
+            readonly capability: Schema.Literals<readonly ["read_task", "read_repo_binding", "read_agent_environment", "read_kit", "update_task_status", "read_change_request", "read_change_request_review", "read_task_link", "refresh_change_request_metadata", "record_change_request_review", "record_session_update", "create_task_link", "create_task_dependency", "create_task_asset", "create_follow_up_task", "execute_agent", "read_step_attempt", "record_task_thread_entry", "write_provider_repository", "write_provider_change_request", "publish_provider_check", "write_provider_comment", "request_provider_changes", "approve_provider_change_request", "merge_provider_change_request", "wait_for_event", "request_human_approval", "execute_package_ref", "read_context_feedback", "read_session_update", "read_repo_binding", "read_agent_environment", "read_kit", "read_memory", "read_decision", "create_task_dependency", "propose_memory", "propose_kit", "propose_decision", "propose_agent_environment_policy", "propose_project_context", "propose_context_relevance", "execute_runner_sandbox"]>;
+            readonly scope: Schema.optionalKey<Schema.Struct<{
+                readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "change_request", "step_attempt", "run", "repo_binding", "provider_host"]>;
+                readonly id: Schema.optionalKey<Schema.String>;
+                readonly idRef: Schema.optionalKey<Schema.String>;
+                readonly value: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly reason: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly retryPolicy: Schema.Struct<{
+            readonly maxAttempts: Schema.Int;
+            readonly backoff: Schema.Literals<readonly ["none", "fixed", "exponential"]>;
+            readonly delaySeconds: Schema.optionalKey<Schema.Int>;
+        }>;
+        readonly timeoutPolicy: Schema.Struct<{
+            readonly timeoutSeconds: Schema.Int;
+        }>;
+        readonly metadata: Schema.$Record<Schema.String, Schema.Codec<import("./loop").LoopStepOutputDataValue, import("./loop").LoopStepOutputDataValue, never, never>>;
+    }>;
+}>;
+export declare const RunnerLoopStepMatch: Schema.Struct<{
+    readonly runnerId: Schema.String;
+    readonly match: Schema.Boolean;
+    readonly reasons: Schema.$Array<Schema.String>;
+    readonly evaluatedAt: Schema.String;
+}>;
+export type RunnerOwnership = (typeof RunnerOwnership)['Type'];
+export type RunnerUpdate = (typeof RunnerUpdate)['Type'];
+export type RunnerRemoveResult = (typeof RunnerRemoveResult)['Type'];
+export type RunnerProjectGrant = (typeof RunnerProjectGrant)['Type'];
+export type RunnerProjectGrantCreate = (typeof RunnerProjectGrantCreate)['Type'];
+export type RunnerRescope = (typeof RunnerRescope)['Type'];
+export type RunnerDefaultHarnessInput = (typeof RunnerDefaultHarnessInput)['Type'];
+export type RunnerProjectGrantList = (typeof RunnerProjectGrantList)['Type'];
+export type RunnerProjectGrantDeleteResult = (typeof RunnerProjectGrantDeleteResult)['Type'];
+export type RunnerExecutionBackend = (typeof RunnerExecutionBackend)['Type'];
+export type RunnerLoopExecutionCapability = (typeof RunnerLoopExecutionCapability)['Type'];
+export type RunnerCapabilities = (typeof RunnerCapabilities)['Type'];
+/**
+ * Registration advertises the runner's materialization surface, not a chosen
+ * harness. `executionBackends` includes direct host execution; `sandboxBackends`
+ * contains only actual isolation backends. The connected process should
+ * heartbeat a narrower profile when its host does not provide one of these
+ * capabilities.
+ */
+export declare function defaultRunnerCapabilities(): RunnerCapabilities;
+export type Runner = (typeof Runner)['Type'];
+export type RunnerReplicaPlacement = (typeof RunnerReplicaPlacement)['Type'];
+export type RunnerReplicaTelemetry = (typeof RunnerReplicaTelemetry)['Type'];
+export type RunnerReplicaCacheHint = (typeof RunnerReplicaCacheHint)['Type'];
+export type RunnerReplica = (typeof RunnerReplica)['Type'];
+export type RunnerReplicaCreate = (typeof RunnerReplicaCreate)['Type'];
+export type RunnerReplicaHeartbeatInput = (typeof RunnerReplicaHeartbeatInput)['Type'];
+export type RunnerReplicaList = (typeof RunnerReplicaList)['Type'];
+export type RunnerCreate = (typeof RunnerCreate)['Type'];
+export type RunnerCredentialProvisionInput = (typeof RunnerCredentialProvisionInput)['Type'];
+export type RunnerRegistrationResult = (typeof RunnerRegistrationResult)['Type'];
+export type RunnerHeartbeatInput = (typeof RunnerHeartbeatInput)['Type'];
+export type RunnerCapabilitiesUpdate = (typeof RunnerCapabilitiesUpdate)['Type'];
+export type RunnerWorkUnitWarmStart = (typeof RunnerWorkUnitWarmStart)['Type'];
+export type RunnerWorkUnitData = (typeof RunnerWorkUnitData)['Type'];
+export type RunnerWorkUnitInput = (typeof RunnerWorkUnitInput)['Type'];
+export type RunnerStepAttempt = (typeof RunnerStepAttempt)['Type'];
+export type RunnerStepAttemptDiagnostic = (typeof RunnerStepAttemptDiagnostic)['Type'];
+export type RunnerOperationsOverview = (typeof RunnerOperationsOverview)['Type'];
+export type RunnerOperationsLiveSnapshot = (typeof RunnerOperationsLiveSnapshot)['Type'];
+export type RunnerFlightDeckReadiness = (typeof RunnerFlightDeckReadiness)['Type'];
+export type RunnerFlightDeckClaimability = (typeof RunnerFlightDeckClaimability)['Type'];
+export type RunnerFlightDeckTrust = (typeof RunnerFlightDeckTrust)['Type'];
+export type RunnerFlightDeckEnvironment = (typeof RunnerFlightDeckEnvironment)['Type'];
+export type RunnerFlightDeckQuota = (typeof RunnerFlightDeckQuota)['Type'];
+export type RunnerFlightDeckCleanup = (typeof RunnerFlightDeckCleanup)['Type'];
+export type RunnerFlightDeckLifecycleAction = (typeof RunnerFlightDeckLifecycleAction)['Type'];
+export type RunnerFlightDeckRunnerDiagnostics = (typeof RunnerFlightDeckRunnerDiagnostics)['Type'];
+export type RunnerFlightDeckEvidenceRef = (typeof RunnerFlightDeckEvidenceRef)['Type'];
+export type RunnerFlightDeck = (typeof RunnerFlightDeck)['Type'];
+export type RunnerFlightDeckInput = (typeof RunnerFlightDeckInput)['Type'];
+export type RunnerFlightDeckLiveSnapshotInput = (typeof RunnerFlightDeckLiveSnapshotInput)['Type'];
+export type RunnerFlightDeckLiveSnapshot = (typeof RunnerFlightDeckLiveSnapshot)['Type'];
+export type RunnerControlCommandListInput = (typeof RunnerControlCommandListInput)['Type'];
+export type RunnerControlCommandList = (typeof ControlCommandList)['Type'];
+export type RunnerStepAttemptListInput = (typeof RunnerStepAttemptListInput)['Type'];
+export type RunnerProjectStepAttemptListInput = (typeof RunnerProjectStepAttemptListInput)['Type'];
+export type RunnerStepAttemptClaimInput = (typeof RunnerStepAttemptClaimInput)['Type'];
+export type RunnerStepAttemptHeartbeat = (typeof RunnerStepAttemptHeartbeat)['Type'];
+export type RunnerStepAttemptCompletion = (typeof RunnerStepAttemptCompletion)['Type'];
+export type RunnerStepAttemptFailure = (typeof RunnerStepAttemptFailure)['Type'];
+export type RunnerList = (typeof RunnerList)['Type'];
+export type RunnerEnvironmentMatchInput = (typeof RunnerEnvironmentMatchInput)['Type'];
+export type RunnerEnvironmentMatch = (typeof RunnerEnvironmentMatch)['Type'];
+export type RunnerLoopStepMatchInput = (typeof RunnerLoopStepMatchInput)['Type'];
+export type RunnerLoopStepMatch = (typeof RunnerLoopStepMatch)['Type'];
+/** Whether the Runner reaches only the Projects granted to it. */
+export declare const servesSelectedProjects: (ownership: RunnerOwnership) => boolean;
+export declare function runnerOwnershipFromStorage(input: {
+    readonly scopeKind?: string | null;
+    readonly scopeProjectId?: string | null;
+    readonly ownerUserId?: string | null;
+    readonly projectAccessMode?: string | null;
+}): RunnerOwnership;
+export declare function findForbiddenRunnerCapabilitiesPath<ValueType>(value: ValueType): string | undefined;
+export declare function matchRunnerReplicaForWork(input: {
+    readonly runner: Runner;
+    readonly replica: RunnerReplica;
+    readonly activeWorkUnits?: number;
+    readonly now: Date;
+    readonly staleAfterSeconds?: number;
+}): {
+    replicaId: string;
+    match: boolean;
+    reasons: string[];
+    evaluatedAt: string;
+};
+export declare function matchRunnerToAgentEnvironment(input: {
+    readonly runner: Runner;
+    readonly agentEnvironment: AgentEnvironmentValue;
+    readonly now: Date;
+    readonly staleAfterSeconds?: number;
+}): RunnerEnvironmentMatch;
+/** Whether a Runner takes program agent Steps; a shared Runner that cannot sandbox advertises no `agent` step kind. */
+export declare const runnerTakesAgentSteps: (capabilities: RunnerCapabilities) => boolean;
+export declare function matchRunnerToLoopStep(input: {
+    readonly runner: Runner;
+    readonly loopStep: LoopStepValue;
+    readonly now: Date;
+    readonly staleAfterSeconds?: number;
+}): RunnerLoopStepMatch;
+export declare function buildRunnerFlightDeck(input: {
+    readonly runners: readonly Runner[];
+    readonly replicas: readonly RunnerReplica[];
+    readonly workUnits: readonly RunnerStepAttemptDiagnostic[];
+    readonly matchReasons?: Readonly<Record<string, readonly string[]>>;
+    readonly diagnostics?: Readonly<Record<string, RunnerFlightDeckRunnerDiagnostics>>;
+    readonly now: Date;
+    readonly staleAfterSeconds?: number;
+    readonly runnerLimit?: number;
+    readonly hasMoreRunners?: boolean;
+}): RunnerFlightDeck;