@kitman-sh/sdk 0.7.4 → 0.8.0

package/types/packages/core/src/runner.d.ts

@@ -5,17 +5,46 @@ import type { ControlCommandList } from './run';
 export { RunnerExecutionRouting } from './runner-routing';
 export type { RunnerExecutionRouting as RunnerExecutionRoutingValue } from './runner-routing';
 export declare const DefaultRunnerHeartbeatStaleAfterSeconds = 120;
+export declare const RunnerProblemCodes: readonly ['credential_missing', 'credential_refused', 'runner_removed', 'sandbox_missing', 'update_failed'];
+/** A Runner Problem as the Runner reports it: what only a person can fix, and the one command or action that fixes it. */
+export declare const RunnerProblemReport: Schema.Struct<{
+    readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+    readonly message: Schema.String;
+    readonly fix: Schema.String;
+}>;
+export declare const RunnerProblem: Schema.Struct<{
+    readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+    readonly message: Schema.String;
+    readonly fix: Schema.String;
+    readonly startedAt: Schema.String;
+}>;
+/** What Kitman says a Runner is doing, derived by `runnerState`. */
+export declare const RunnerState: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"online">;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"offline">;
+    readonly since: Schema.optionalKey<Schema.String>;
+}>, Schema.Struct<{
+    readonly kind: Schema.Literal<"needs_attention">;
+    readonly problems: Schema.$Array<Schema.Struct<{
+        readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+        readonly message: Schema.String;
+        readonly fix: Schema.String;
+        readonly startedAt: Schema.String;
+    }>>;
+}>]>;
+export declare const RunnerCredentialStatus: Schema.Literals<readonly ["active", "revoked", "never_provisioned"]>;
 export declare const RunnerOwnership: Schema.Union<readonly [Schema.Struct<{
     readonly kind: Schema.Literal<"workspace">;
-    readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+    readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
 }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"project">;
-    readonly projectId: Schema.String;
+    readonly kind: Schema.Literal<"team">;
+    readonly teamId: Schema.String;
 }>, Schema.Struct<{
     readonly kind: Schema.Literal<"personal">;
     readonly ownerUserId: Schema.String;
-    /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-    readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+    /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+    readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
 }>]>;
 export declare const RunnerExecutionBackend: Schema.Literals<readonly ["host", "srt", "docker"]>;
 export declare const RunnerLoopExecutionCapability: Schema.Struct<{
@@ -93,7 +122,7 @@ export declare const RunnerCapabilities: Schema.Struct<{
     readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
     readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
         readonly repoBindingId: Schema.String;
-        readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+        readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
         readonly host: Schema.String;
         readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
         readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -126,21 +155,35 @@ export declare const Runner: Schema.Struct<{
     readonly agentIdentityId: Schema.String;
     readonly ownership: Schema.Union<readonly [Schema.Struct<{
         readonly kind: Schema.Literal<"workspace">;
-        readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+        readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
     }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"project">;
-        readonly projectId: Schema.String;
+        readonly kind: Schema.Literal<"team">;
+        readonly teamId: Schema.String;
     }>, Schema.Struct<{
         readonly kind: Schema.Literal<"personal">;
         readonly ownerUserId: Schema.String;
-        /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-        readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+        /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+        readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
     }>]>;
-    readonly projectGrantIds: Schema.$Array<Schema.String>;
+    readonly teamGrantIds: Schema.$Array<Schema.String>;
     readonly credentialHostId: Schema.optionalKey<Schema.String>;
     readonly name: Schema.String;
     readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
-    readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+    readonly state: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"online">;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"offline">;
+        readonly since: Schema.optionalKey<Schema.String>;
+    }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"needs_attention">;
+        readonly problems: Schema.$Array<Schema.Struct<{
+            readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+            readonly message: Schema.String;
+            readonly fix: Schema.String;
+            readonly startedAt: Schema.String;
+        }>>;
+    }>]>;
+    readonly credentialStatus: Schema.Literals<readonly ["active", "revoked", "never_provisioned"]>;
     readonly capabilities: Schema.Struct<{
         readonly harnesses: Schema.$Array<Schema.String>;
         /** The Harness an Agent that names none launches on. */
@@ -188,7 +231,7 @@ export declare const Runner: Schema.Struct<{
         readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
         readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly repoBindingId: Schema.String;
-            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
             readonly host: Schema.String;
             readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
             readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -218,39 +261,51 @@ export declare const Runner: Schema.Struct<{
     /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
     readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
     readonly labels: Schema.$Array<Schema.String>;
+    /** The `kitman` version the Runner last reported. */
+    readonly version: Schema.optionalKey<Schema.String>;
+    /** The `kitman` version this control plane serves; a Runner on another version is told to update to it. */
+    readonly latestVersion: Schema.optionalKey<Schema.String>;
+    /** Runs in a container, which never updates itself. */
+    readonly container: Schema.Boolean;
+    readonly automaticUpdates: Schema.Boolean;
     readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
     readonly createdByUserId: Schema.optionalKey<Schema.String>;
     readonly createdAt: Schema.String;
     readonly updatedAt: Schema.String;
 }>;
-export declare const RunnerProjectGrant: Schema.Struct<{
+export declare const RunnerTeamGrant: Schema.Struct<{
     readonly id: Schema.String;
     readonly runnerId: Schema.String;
     readonly workspaceId: Schema.String;
-    readonly projectId: Schema.String;
+    readonly teamId: Schema.String;
     readonly createdByUserId: Schema.optionalKey<Schema.String>;
     readonly createdAt: Schema.String;
     readonly updatedAt: Schema.String;
 }>;
-export declare const RunnerProjectGrantCreate: Schema.Struct<{
-    readonly projectId: Schema.String;
+export declare const RunnerTeamGrantCreate: Schema.Struct<{
+    readonly teamId: Schema.String;
 }>;
 export declare const RunnerRescope: Schema.Struct<{
     readonly ownership: Schema.Union<readonly [Schema.Struct<{
         readonly kind: Schema.Literal<"workspace">;
-        readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+        readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
     }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"project">;
-        readonly projectId: Schema.String;
+        readonly kind: Schema.Literal<"team">;
+        readonly teamId: Schema.String;
     }>, Schema.Struct<{
         readonly kind: Schema.Literal<"personal">;
         readonly ownerUserId: Schema.String;
-        /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-        readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+        /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+        readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
     }>]>;
 }>;
 export declare const RunnerUpdate: Schema.Struct<{
-    readonly name: Schema.String;
+    readonly name: Schema.optionalKey<Schema.String>;
+    readonly automaticUpdates: Schema.optionalKey<Schema.Boolean>;
+}>;
+/** The version a Runner's replicas were told to update to. */
+export declare const RunnerUpdateRequested: Schema.Struct<{
+    readonly version: Schema.String;
 }>;
 export declare const RunnerRemoveResult: Schema.Struct<{
     readonly removed: Schema.Boolean;
@@ -259,18 +314,18 @@ export declare const RunnerRemoveResult: Schema.Struct<{
 export declare const RunnerDefaultHarnessInput: Schema.Struct<{
     readonly harness: Schema.NullOr<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
 }>;
-export declare const RunnerProjectGrantList: Schema.Struct<{
+export declare const RunnerTeamGrantList: Schema.Struct<{
     readonly items: Schema.$Array<Schema.Struct<{
         readonly id: Schema.String;
         readonly runnerId: Schema.String;
         readonly workspaceId: Schema.String;
-        readonly projectId: Schema.String;
+        readonly teamId: Schema.String;
         readonly createdByUserId: Schema.optionalKey<Schema.String>;
         readonly createdAt: Schema.String;
         readonly updatedAt: Schema.String;
     }>>;
 }>;
-export declare const RunnerProjectGrantDeleteResult: Schema.Struct<{
+export declare const RunnerTeamGrantDeleteResult: Schema.Struct<{
     readonly removed: Schema.Boolean;
 }>;
 export declare const RunnerReplicaPlacement: Schema.Struct<{
@@ -437,21 +492,19 @@ export declare const RunnerReplicaList: Schema.Struct<{
 }>;
 export declare const RunnerCreate: Schema.Struct<{
     readonly name: Schema.String;
-    readonly agentIdentityId: Schema.optionalKey<Schema.String>;
     readonly ownership: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
         readonly kind: Schema.Literal<"workspace">;
-        readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+        readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
     }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"project">;
-        readonly projectId: Schema.String;
+        readonly kind: Schema.Literal<"team">;
+        readonly teamId: Schema.String;
     }>, Schema.Struct<{
         readonly kind: Schema.Literal<"personal">;
         readonly ownerUserId: Schema.String;
-        /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-        readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+        /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+        readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
     }>]>>;
-    readonly projectId: Schema.optionalKey<Schema.String>;
-    readonly credentialHostId: Schema.optionalKey<Schema.String>;
+    readonly teamId: Schema.optionalKey<Schema.String>;
     readonly capabilities: Schema.optionalKey<Schema.Struct<{
         readonly harnesses: Schema.$Array<Schema.String>;
         /** The Harness an Agent that names none launches on. */
@@ -499,7 +552,7 @@ export declare const RunnerCreate: Schema.Struct<{
         readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
         readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly repoBindingId: Schema.String;
-            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
             readonly host: Schema.String;
             readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
             readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -538,21 +591,35 @@ export declare const RunnerRegistrationResult: Schema.Struct<{
         readonly agentIdentityId: Schema.String;
         readonly ownership: Schema.Union<readonly [Schema.Struct<{
             readonly kind: Schema.Literal<"workspace">;
-            readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+            readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
         }>, Schema.Struct<{
-            readonly kind: Schema.Literal<"project">;
-            readonly projectId: Schema.String;
+            readonly kind: Schema.Literal<"team">;
+            readonly teamId: Schema.String;
         }>, Schema.Struct<{
             readonly kind: Schema.Literal<"personal">;
             readonly ownerUserId: Schema.String;
-            /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-            readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+            /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+            readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
         }>]>;
-        readonly projectGrantIds: Schema.$Array<Schema.String>;
+        readonly teamGrantIds: Schema.$Array<Schema.String>;
         readonly credentialHostId: Schema.optionalKey<Schema.String>;
         readonly name: Schema.String;
         readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
-        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly state: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"online">;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"offline">;
+            readonly since: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"needs_attention">;
+            readonly problems: Schema.$Array<Schema.Struct<{
+                readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+                readonly message: Schema.String;
+                readonly fix: Schema.String;
+                readonly startedAt: Schema.String;
+            }>>;
+        }>]>;
+        readonly credentialStatus: Schema.Literals<readonly ["active", "revoked", "never_provisioned"]>;
         readonly capabilities: Schema.Struct<{
             readonly harnesses: Schema.$Array<Schema.String>;
             /** The Harness an Agent that names none launches on. */
@@ -600,7 +667,7 @@ export declare const RunnerRegistrationResult: Schema.Struct<{
             readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
             readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
                 readonly repoBindingId: Schema.String;
-                readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
                 readonly host: Schema.String;
                 readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
                 readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -630,6 +697,13 @@ export declare const RunnerRegistrationResult: Schema.Struct<{
         /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
         readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
         readonly labels: Schema.$Array<Schema.String>;
+        /** The `kitman` version the Runner last reported. */
+        readonly version: Schema.optionalKey<Schema.String>;
+        /** The `kitman` version this control plane serves; a Runner on another version is told to update to it. */
+        readonly latestVersion: Schema.optionalKey<Schema.String>;
+        /** Runs in a container, which never updates itself. */
+        readonly container: Schema.Boolean;
+        readonly automaticUpdates: Schema.Boolean;
         readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
         readonly createdByUserId: Schema.optionalKey<Schema.String>;
         readonly createdAt: Schema.String;
@@ -649,7 +723,14 @@ export declare const RunnerRegistrationResult: Schema.Struct<{
     }>>;
 }>;
 export declare const RunnerHeartbeatInput: Schema.Struct<{
-    readonly healthStatus: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>>;
+    readonly version: Schema.optionalKey<Schema.String>;
+    readonly container: Schema.optionalKey<Schema.Boolean>;
+    /** The Runner's open Problems, replacing those it reported before; empty clears them. */
+    readonly problems: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+        readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+        readonly message: Schema.String;
+        readonly fix: Schema.String;
+    }>>>;
     readonly capabilities: Schema.optionalKey<Schema.Struct<{
         readonly harnesses: Schema.$Array<Schema.String>;
         /** The Harness an Agent that names none launches on. */
@@ -697,7 +778,7 @@ export declare const RunnerHeartbeatInput: Schema.Struct<{
         readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
         readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly repoBindingId: Schema.String;
-            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
             readonly host: Schema.String;
             readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
             readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -774,7 +855,7 @@ export declare const RunnerCapabilitiesUpdate: Schema.Struct<{
         readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
         readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly repoBindingId: Schema.String;
-            readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+            readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
             readonly host: Schema.String;
             readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
             readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -848,7 +929,7 @@ export declare const RunnerStepAttempt: Schema.Struct<{
     readonly attempt: Schema.Struct<{
         readonly id: Schema.String;
         readonly workspaceId: Schema.String;
-        readonly projectId: Schema.optionalKey<Schema.String>;
+        readonly teamId: Schema.optionalKey<Schema.String>;
         readonly taskId: Schema.optionalKey<Schema.String>;
         readonly sessionId: Schema.optionalKey<Schema.String>;
         readonly runId: Schema.String;
@@ -866,7 +947,7 @@ export declare const RunnerStepAttempt: Schema.Struct<{
                 readonly kind: Schema.Literals<readonly ["kit", "memory", "decision", "knowledge_record", "context_pack"]>;
                 readonly sourceId: Schema.String;
                 readonly sourceScope: Schema.Struct<{
-                    readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "loop", "agent"]>;
+                    readonly kind: Schema.Literals<readonly ["workspace", "team", "task", "loop", "agent"]>;
                     readonly id: Schema.String;
                 }>;
                 readonly inclusionReason: Schema.String;
@@ -890,7 +971,7 @@ export declare const RunnerStepAttempt: Schema.Struct<{
                 readonly kind: Schema.Literals<readonly ["kit", "memory", "decision", "knowledge_record", "context_pack"]>;
                 readonly sourceId: Schema.String;
                 readonly sourceScope: Schema.Struct<{
-                    readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "loop", "agent"]>;
+                    readonly kind: Schema.Literals<readonly ["workspace", "team", "task", "loop", "agent"]>;
                     readonly id: Schema.String;
                 }>;
                 readonly inclusionReason: Schema.String;
@@ -1042,7 +1123,7 @@ export declare const RunnerStepAttempt: Schema.Struct<{
             readonly kind: Schema.Literal<"human_approval">;
             readonly prompt: Schema.String;
             readonly approvalPolicy: Schema.Struct<{
-                readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_team_member", "require_workspace_owner_or_admin"]>;
                 readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
                 readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
                 readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
@@ -1154,7 +1235,7 @@ export declare const RunnerStepAttempt: Schema.Struct<{
                 readonly kind: Schema.Literal<"human_approval">;
                 readonly prompt: Schema.String;
                 readonly approvalPolicy: Schema.Struct<{
-                    readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                    readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_team_member", "require_workspace_owner_or_admin"]>;
                     readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
                     readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
                     readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
@@ -1256,9 +1337,9 @@ export declare const RunnerStepAttempt: Schema.Struct<{
             readonly sha256: Schema.optionalKey<Schema.String>;
         }>;
         readonly allowedCapabilities: Schema.$Array<Schema.Struct<{
-            readonly capability: Schema.Literals<readonly ["read_task", "read_repo_binding", "read_agent_environment", "read_kit", "update_task_status", "read_change_request", "read_change_request_review", "read_task_link", "refresh_change_request_metadata", "record_change_request_review", "record_session_update", "create_task_link", "create_task_dependency", "create_task_asset", "create_follow_up_task", "execute_agent", "read_step_attempt", "record_task_thread_entry", "write_provider_repository", "write_provider_change_request", "publish_provider_check", "write_provider_comment", "request_provider_changes", "approve_provider_change_request", "merge_provider_change_request", "wait_for_event", "request_human_approval", "execute_package_ref", "read_context_feedback", "read_session_update", "read_repo_binding", "read_agent_environment", "read_kit", "read_memory", "read_decision", "create_task_dependency", "propose_memory", "propose_kit", "propose_decision", "propose_agent_environment_policy", "propose_project_context", "propose_context_relevance", "execute_runner_sandbox"]>;
+            readonly capability: Schema.Literals<readonly ["read_task", "read_repo_binding", "read_agent_environment", "read_kit", "update_task_status", "read_change_request", "read_change_request_review", "read_task_link", "refresh_change_request_metadata", "record_change_request_review", "record_session_update", "create_task_link", "create_task_dependency", "create_task_asset", "create_follow_up_task", "execute_agent", "read_step_attempt", "record_task_thread_entry", "write_provider_repository", "write_provider_change_request", "publish_provider_check", "write_provider_comment", "request_provider_changes", "approve_provider_change_request", "merge_provider_change_request", "wait_for_event", "request_human_approval", "execute_package_ref", "read_context_feedback", "read_session_update", "read_repo_binding", "read_agent_environment", "read_kit", "read_memory", "read_decision", "create_task_dependency", "propose_memory", "propose_kit", "propose_decision", "propose_agent_environment_policy", "propose_team_context", "propose_context_relevance", "execute_runner_sandbox"]>;
             readonly scope: Schema.optionalKey<Schema.Struct<{
-                readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "change_request", "step_attempt", "run", "repo_binding", "provider_host"]>;
+                readonly kind: Schema.Literals<readonly ["workspace", "team", "task", "change_request", "step_attempt", "run", "repo_binding", "provider_host"]>;
                 readonly id: Schema.optionalKey<Schema.String>;
                 readonly idRef: Schema.optionalKey<Schema.String>;
                 readonly value: Schema.optionalKey<Schema.String>;
@@ -1279,7 +1360,7 @@ export declare const RunnerStepAttempt: Schema.Struct<{
 export declare const RunnerStepAttemptDiagnostic: Schema.Struct<{
     readonly id: Schema.String;
     readonly workspaceId: Schema.String;
-    readonly projectId: Schema.optionalKey<Schema.String>;
+    readonly teamId: Schema.optionalKey<Schema.String>;
     readonly kind: Schema.Literal<"step_attempt">;
     readonly runId: Schema.String;
     readonly stepKey: Schema.String;
@@ -1378,21 +1459,35 @@ export declare const RunnerOperationsOverview: Schema.Struct<{
         readonly agentIdentityId: Schema.String;
         readonly ownership: Schema.Union<readonly [Schema.Struct<{
             readonly kind: Schema.Literal<"workspace">;
-            readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+            readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
         }>, Schema.Struct<{
-            readonly kind: Schema.Literal<"project">;
-            readonly projectId: Schema.String;
+            readonly kind: Schema.Literal<"team">;
+            readonly teamId: Schema.String;
         }>, Schema.Struct<{
             readonly kind: Schema.Literal<"personal">;
             readonly ownerUserId: Schema.String;
-            /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-            readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+            /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+            readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
         }>]>;
-        readonly projectGrantIds: Schema.$Array<Schema.String>;
+        readonly teamGrantIds: Schema.$Array<Schema.String>;
         readonly credentialHostId: Schema.optionalKey<Schema.String>;
         readonly name: Schema.String;
         readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
-        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly state: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"online">;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"offline">;
+            readonly since: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"needs_attention">;
+            readonly problems: Schema.$Array<Schema.Struct<{
+                readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+                readonly message: Schema.String;
+                readonly fix: Schema.String;
+                readonly startedAt: Schema.String;
+            }>>;
+        }>]>;
+        readonly credentialStatus: Schema.Literals<readonly ["active", "revoked", "never_provisioned"]>;
         readonly capabilities: Schema.Struct<{
             readonly harnesses: Schema.$Array<Schema.String>;
             /** The Harness an Agent that names none launches on. */
@@ -1440,7 +1535,7 @@ export declare const RunnerOperationsOverview: Schema.Struct<{
             readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
             readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
                 readonly repoBindingId: Schema.String;
-                readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
                 readonly host: Schema.String;
                 readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
                 readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -1470,6 +1565,13 @@ export declare const RunnerOperationsOverview: Schema.Struct<{
         /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
         readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
         readonly labels: Schema.$Array<Schema.String>;
+        /** The `kitman` version the Runner last reported. */
+        readonly version: Schema.optionalKey<Schema.String>;
+        /** The `kitman` version this control plane serves; a Runner on another version is told to update to it. */
+        readonly latestVersion: Schema.optionalKey<Schema.String>;
+        /** Runs in a container, which never updates itself. */
+        readonly container: Schema.Boolean;
+        readonly automaticUpdates: Schema.Boolean;
         readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
         readonly createdByUserId: Schema.optionalKey<Schema.String>;
         readonly createdAt: Schema.String;
@@ -1483,7 +1585,7 @@ export declare const RunnerOperationsOverview: Schema.Struct<{
         readonly items: Schema.$Array<Schema.Struct<{
             readonly id: Schema.String;
             readonly workspaceId: Schema.String;
-            readonly projectId: Schema.optionalKey<Schema.String>;
+            readonly teamId: Schema.optionalKey<Schema.String>;
             readonly kind: Schema.Literal<"step_attempt">;
             readonly runId: Schema.String;
             readonly stepKey: Schema.String;
@@ -1585,21 +1687,35 @@ export declare const RunnerOperationsLiveSnapshot: Schema.Struct<{
             readonly agentIdentityId: Schema.String;
             readonly ownership: Schema.Union<readonly [Schema.Struct<{
                 readonly kind: Schema.Literal<"workspace">;
-                readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+                readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
             }>, Schema.Struct<{
-                readonly kind: Schema.Literal<"project">;
-                readonly projectId: Schema.String;
+                readonly kind: Schema.Literal<"team">;
+                readonly teamId: Schema.String;
             }>, Schema.Struct<{
                 readonly kind: Schema.Literal<"personal">;
                 readonly ownerUserId: Schema.String;
-                /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-                readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+                /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+                readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
             }>]>;
-            readonly projectGrantIds: Schema.$Array<Schema.String>;
+            readonly teamGrantIds: Schema.$Array<Schema.String>;
             readonly credentialHostId: Schema.optionalKey<Schema.String>;
             readonly name: Schema.String;
             readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
-            readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+            readonly state: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"online">;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"offline">;
+                readonly since: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"needs_attention">;
+                readonly problems: Schema.$Array<Schema.Struct<{
+                    readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+                    readonly message: Schema.String;
+                    readonly fix: Schema.String;
+                    readonly startedAt: Schema.String;
+                }>>;
+            }>]>;
+            readonly credentialStatus: Schema.Literals<readonly ["active", "revoked", "never_provisioned"]>;
             readonly capabilities: Schema.Struct<{
                 readonly harnesses: Schema.$Array<Schema.String>;
                 /** The Harness an Agent that names none launches on. */
@@ -1647,7 +1763,7 @@ export declare const RunnerOperationsLiveSnapshot: Schema.Struct<{
                 readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
                 readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
                     readonly repoBindingId: Schema.String;
-                    readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                    readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
                     readonly host: Schema.String;
                     readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
                     readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -1677,6 +1793,13 @@ export declare const RunnerOperationsLiveSnapshot: Schema.Struct<{
             /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
             readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
             readonly labels: Schema.$Array<Schema.String>;
+            /** The `kitman` version the Runner last reported. */
+            readonly version: Schema.optionalKey<Schema.String>;
+            /** The `kitman` version this control plane serves; a Runner on another version is told to update to it. */
+            readonly latestVersion: Schema.optionalKey<Schema.String>;
+            /** Runs in a container, which never updates itself. */
+            readonly container: Schema.Boolean;
+            readonly automaticUpdates: Schema.Boolean;
             readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
             readonly createdByUserId: Schema.optionalKey<Schema.String>;
             readonly createdAt: Schema.String;
@@ -1690,7 +1813,7 @@ export declare const RunnerOperationsLiveSnapshot: Schema.Struct<{
             readonly items: Schema.$Array<Schema.Struct<{
                 readonly id: Schema.String;
                 readonly workspaceId: Schema.String;
-                readonly projectId: Schema.optionalKey<Schema.String>;
+                readonly teamId: Schema.optionalKey<Schema.String>;
                 readonly kind: Schema.Literal<"step_attempt">;
                 readonly runId: Schema.String;
                 readonly stepKey: Schema.String;
@@ -1788,9 +1911,9 @@ export declare const RunnerOperationsLiveSnapshot: Schema.Struct<{
         readonly source: Schema.Literal<"http_snapshot">;
         readonly collection: Schema.Literal<"runner_operations">;
         readonly scope: Schema.Struct<{
-            readonly kind: Schema.Literal<"project">;
+            readonly kind: Schema.Literal<"team">;
             readonly workspaceId: Schema.String;
-            readonly projectId: Schema.String;
+            readonly teamId: Schema.String;
         }>;
         readonly window: Schema.Struct<{
             readonly runnerLimit: Schema.Literal<50>;
@@ -1960,7 +2083,20 @@ export declare const RunnerFlightDeck: Schema.Struct<{
         readonly runnerId: Schema.String;
         readonly name: Schema.String;
         readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
-        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly state: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"online">;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"offline">;
+            readonly since: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"needs_attention">;
+            readonly problems: Schema.$Array<Schema.Struct<{
+                readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+                readonly message: Schema.String;
+                readonly fix: Schema.String;
+                readonly startedAt: Schema.String;
+            }>>;
+        }>]>;
         readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
         readonly replicaCount: Schema.Int;
         readonly acceptingReplicas: Schema.Int;
@@ -2123,7 +2259,20 @@ export declare const RunnerFlightDeckLiveSnapshot: Schema.Struct<{
             readonly runnerId: Schema.String;
             readonly name: Schema.String;
             readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
-            readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+            readonly state: Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"online">;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"offline">;
+                readonly since: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"needs_attention">;
+                readonly problems: Schema.$Array<Schema.Struct<{
+                    readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+                    readonly message: Schema.String;
+                    readonly fix: Schema.String;
+                    readonly startedAt: Schema.String;
+                }>>;
+            }>]>;
             readonly heartbeatAgeSeconds: Schema.optionalKey<Schema.Int>;
             readonly replicaCount: Schema.Int;
             readonly acceptingReplicas: Schema.Int;
@@ -2274,8 +2423,8 @@ export declare const RunnerStepAttemptListInput: Schema.Struct<{
     readonly runId: Schema.String;
     readonly limit: Schema.optionalKey<Schema.Int>;
 }>;
-export declare const RunnerProjectStepAttemptListInput: Schema.Struct<{
-    readonly projectId: Schema.String;
+export declare const RunnerTeamStepAttemptListInput: Schema.Struct<{
+    readonly teamId: Schema.String;
     readonly limit: Schema.optionalKey<Schema.Int>;
 }>;
 export declare const RunnerStepAttemptClaimInput: Schema.Struct<{
@@ -2337,21 +2486,35 @@ export declare const RunnerList: Schema.Struct<{
         readonly agentIdentityId: Schema.String;
         readonly ownership: Schema.Union<readonly [Schema.Struct<{
             readonly kind: Schema.Literal<"workspace">;
-            readonly projectAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
+            readonly teamAccess: Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>;
         }>, Schema.Struct<{
-            readonly kind: Schema.Literal<"project">;
-            readonly projectId: Schema.String;
+            readonly kind: Schema.Literal<"team">;
+            readonly teamId: Schema.String;
         }>, Schema.Struct<{
             readonly kind: Schema.Literal<"personal">;
             readonly ownerUserId: Schema.String;
-            /** `selected` narrows it to granted Projects; it serves only Projects its owner can access either way. */
-            readonly projectAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
+            /** `selected` narrows it to granted Teams; it serves only Teams its owner can access either way. */
+            readonly teamAccess: Schema.withDecodingDefaultKey<Schema.Union<readonly [Schema.Literal<"all">, Schema.Literal<"selected">]>, never>;
         }>]>;
-        readonly projectGrantIds: Schema.$Array<Schema.String>;
+        readonly teamGrantIds: Schema.$Array<Schema.String>;
         readonly credentialHostId: Schema.optionalKey<Schema.String>;
         readonly name: Schema.String;
         readonly status: Schema.Union<readonly [Schema.Literal<"active">, Schema.Literal<"disabled">]>;
-        readonly healthStatus: Schema.Union<readonly [Schema.Literal<"healthy">, Schema.Literal<"degraded">, Schema.Literal<"unhealthy">, Schema.Literal<"unknown">]>;
+        readonly state: Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"online">;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"offline">;
+            readonly since: Schema.optionalKey<Schema.String>;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"needs_attention">;
+            readonly problems: Schema.$Array<Schema.Struct<{
+                readonly code: Schema.Literals<readonly ["credential_missing", "credential_refused", "runner_removed", "sandbox_missing", "update_failed"]>;
+                readonly message: Schema.String;
+                readonly fix: Schema.String;
+                readonly startedAt: Schema.String;
+            }>>;
+        }>]>;
+        readonly credentialStatus: Schema.Literals<readonly ["active", "revoked", "never_provisioned"]>;
         readonly capabilities: Schema.Struct<{
             readonly harnesses: Schema.$Array<Schema.String>;
             /** The Harness an Agent that names none launches on. */
@@ -2399,7 +2562,7 @@ export declare const RunnerList: Schema.Struct<{
             readonly secretProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
             readonly repoBindings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
                 readonly repoBindingId: Schema.String;
-                readonly provider: Schema.Union<readonly [Schema.Literal<"github">, Schema.Literal<"gitlab">, Schema.Literal<"generic_git">]>;
+                readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
                 readonly host: Schema.String;
                 readonly accessModes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"local_checkout">, Schema.Literal<"managed_clone">, Schema.Literal<"runner_secret_provider">]>>;
                 readonly credentialProviderTypes: Schema.$Array<Schema.Union<readonly [Schema.Literal<"env">, Schema.Literal<"file">, Schema.Literal<"exec">]>>;
@@ -2429,12 +2592,50 @@ export declare const RunnerList: Schema.Struct<{
         /** The owner's choice of default Harness; `capabilities.defaultHarness` is the one in effect. */
         readonly preferredHarness: Schema.optionalKey<Schema.Literals<readonly ["pi", "claude", "codex"]>>;
         readonly labels: Schema.$Array<Schema.String>;
+        /** The `kitman` version the Runner last reported. */
+        readonly version: Schema.optionalKey<Schema.String>;
+        /** The `kitman` version this control plane serves; a Runner on another version is told to update to it. */
+        readonly latestVersion: Schema.optionalKey<Schema.String>;
+        /** Runs in a container, which never updates itself. */
+        readonly container: Schema.Boolean;
+        readonly automaticUpdates: Schema.Boolean;
         readonly lastHeartbeatAt: Schema.optionalKey<Schema.String>;
         readonly createdByUserId: Schema.optionalKey<Schema.String>;
         readonly createdAt: Schema.String;
         readonly updatedAt: Schema.String;
     }>>;
 }>;
+/** What a Runner is doing now: the work holding its slots, and how many slots its replicas offer. */
+export declare const RunnerActivity: Schema.Struct<{
+    readonly runnerId: Schema.String;
+    readonly working: Schema.$Array<Schema.Struct<{
+        readonly runId: Schema.String;
+        /** Absent while the Run's orchestration, not one of its Steps, holds the slot. */
+        readonly stepKey: Schema.optionalKey<Schema.String>;
+        readonly task: Schema.optionalKey<Schema.Struct<{
+            readonly id: Schema.String;
+            readonly taskKey: Schema.String;
+            readonly title: Schema.String;
+        }>>;
+    }>>;
+    readonly capacitySlots: Schema.optionalKey<Schema.Int>;
+}>;
+export declare const RunnerActivityList: Schema.Struct<{
+    readonly items: Schema.$Array<Schema.Struct<{
+        readonly runnerId: Schema.String;
+        readonly working: Schema.$Array<Schema.Struct<{
+            readonly runId: Schema.String;
+            /** Absent while the Run's orchestration, not one of its Steps, holds the slot. */
+            readonly stepKey: Schema.optionalKey<Schema.String>;
+            readonly task: Schema.optionalKey<Schema.Struct<{
+                readonly id: Schema.String;
+                readonly taskKey: Schema.String;
+                readonly title: Schema.String;
+            }>>;
+        }>>;
+        readonly capacitySlots: Schema.optionalKey<Schema.Int>;
+    }>>;
+}>;
 export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
     readonly runnerId: Schema.String;
     readonly agentEnvironment: Schema.Struct<{
@@ -2524,7 +2725,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -2616,7 +2817,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -2702,7 +2903,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -2780,7 +2981,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -2873,7 +3074,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -2960,7 +3161,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -3037,7 +3238,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -3117,7 +3318,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -3194,7 +3395,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -3271,7 +3472,7 @@ export declare const RunnerEnvironmentMatchInput: Schema.Struct<{
                 readonly kitSha256: Schema.optionalKey<Schema.String>;
                 readonly kitActivationId: Schema.optionalKey<Schema.String>;
                 readonly kitActivationType: Schema.optionalKey<Schema.String>;
-                readonly kind: Schema.Literal<"project_kit">;
+                readonly kind: Schema.Literal<"team_kit">;
                 readonly kitId: Schema.String;
                 readonly provenance: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"explicit">, Schema.Literal<"workspace_default">, Schema.Literal<"workspace_mandatory">]>>;
                 readonly policyRevision: Schema.optionalKey<Schema.Int>;
@@ -3319,7 +3520,7 @@ export declare const RunnerLoopStepMatchInput: Schema.Struct<{
         }>>;
         readonly guards: Schema.$Array<Schema.Struct<{
             readonly key: Schema.String;
-            readonly source: Schema.Literals<readonly ["trigger_event", "task", "project", "proposal", "decision", "step_attempt", "change_request", "context_feedback", "run", "project_policy"]>;
+            readonly source: Schema.Literals<readonly ["trigger_event", "task", "team", "proposal", "decision", "step_attempt", "change_request", "context_feedback", "run", "team_policy"]>;
             readonly path: Schema.$Array<Schema.String>;
             readonly operator: Schema.Literals<readonly ["equals", "not_equals", "in", "not_in", "exists", "not_exists"]>;
             readonly value: Schema.optionalKey<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean]>>;
@@ -3378,7 +3579,7 @@ export declare const RunnerLoopStepMatchInput: Schema.Struct<{
             readonly kind: Schema.Literal<"human_approval">;
             readonly prompt: Schema.String;
             readonly approvalPolicy: Schema.Struct<{
-                readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_team_member", "require_workspace_owner_or_admin"]>;
                 readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
                 readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
                 readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
@@ -3490,7 +3691,7 @@ export declare const RunnerLoopStepMatchInput: Schema.Struct<{
                 readonly kind: Schema.Literal<"human_approval">;
                 readonly prompt: Schema.String;
                 readonly approvalPolicy: Schema.Struct<{
-                    readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+                    readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_team_member", "require_workspace_owner_or_admin"]>;
                     readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
                     readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
                     readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
@@ -3636,9 +3837,9 @@ export declare const RunnerLoopStepMatchInput: Schema.Struct<{
             readonly required: Schema.optionalKey<Schema.Boolean>;
         }>>;
         readonly allowedCapabilities: Schema.$Array<Schema.Struct<{
-            readonly capability: Schema.Literals<readonly ["read_task", "read_repo_binding", "read_agent_environment", "read_kit", "update_task_status", "read_change_request", "read_change_request_review", "read_task_link", "refresh_change_request_metadata", "record_change_request_review", "record_session_update", "create_task_link", "create_task_dependency", "create_task_asset", "create_follow_up_task", "execute_agent", "read_step_attempt", "record_task_thread_entry", "write_provider_repository", "write_provider_change_request", "publish_provider_check", "write_provider_comment", "request_provider_changes", "approve_provider_change_request", "merge_provider_change_request", "wait_for_event", "request_human_approval", "execute_package_ref", "read_context_feedback", "read_session_update", "read_repo_binding", "read_agent_environment", "read_kit", "read_memory", "read_decision", "create_task_dependency", "propose_memory", "propose_kit", "propose_decision", "propose_agent_environment_policy", "propose_project_context", "propose_context_relevance", "execute_runner_sandbox"]>;
+            readonly capability: Schema.Literals<readonly ["read_task", "read_repo_binding", "read_agent_environment", "read_kit", "update_task_status", "read_change_request", "read_change_request_review", "read_task_link", "refresh_change_request_metadata", "record_change_request_review", "record_session_update", "create_task_link", "create_task_dependency", "create_task_asset", "create_follow_up_task", "execute_agent", "read_step_attempt", "record_task_thread_entry", "write_provider_repository", "write_provider_change_request", "publish_provider_check", "write_provider_comment", "request_provider_changes", "approve_provider_change_request", "merge_provider_change_request", "wait_for_event", "request_human_approval", "execute_package_ref", "read_context_feedback", "read_session_update", "read_repo_binding", "read_agent_environment", "read_kit", "read_memory", "read_decision", "create_task_dependency", "propose_memory", "propose_kit", "propose_decision", "propose_agent_environment_policy", "propose_team_context", "propose_context_relevance", "execute_runner_sandbox"]>;
             readonly scope: Schema.optionalKey<Schema.Struct<{
-                readonly kind: Schema.Literals<readonly ["workspace", "project", "task", "change_request", "step_attempt", "run", "repo_binding", "provider_host"]>;
+                readonly kind: Schema.Literals<readonly ["workspace", "team", "task", "change_request", "step_attempt", "run", "repo_binding", "provider_host"]>;
                 readonly id: Schema.optionalKey<Schema.String>;
                 readonly idRef: Schema.optionalKey<Schema.String>;
                 readonly value: Schema.optionalKey<Schema.String>;
@@ -3664,13 +3865,14 @@ export declare const RunnerLoopStepMatch: Schema.Struct<{
 }>;
 export type RunnerOwnership = (typeof RunnerOwnership)['Type'];
 export type RunnerUpdate = (typeof RunnerUpdate)['Type'];
+export type RunnerUpdateRequested = (typeof RunnerUpdateRequested)['Type'];
 export type RunnerRemoveResult = (typeof RunnerRemoveResult)['Type'];
-export type RunnerProjectGrant = (typeof RunnerProjectGrant)['Type'];
-export type RunnerProjectGrantCreate = (typeof RunnerProjectGrantCreate)['Type'];
+export type RunnerTeamGrant = (typeof RunnerTeamGrant)['Type'];
+export type RunnerTeamGrantCreate = (typeof RunnerTeamGrantCreate)['Type'];
 export type RunnerRescope = (typeof RunnerRescope)['Type'];
 export type RunnerDefaultHarnessInput = (typeof RunnerDefaultHarnessInput)['Type'];
-export type RunnerProjectGrantList = (typeof RunnerProjectGrantList)['Type'];
-export type RunnerProjectGrantDeleteResult = (typeof RunnerProjectGrantDeleteResult)['Type'];
+export type RunnerTeamGrantList = (typeof RunnerTeamGrantList)['Type'];
+export type RunnerTeamGrantDeleteResult = (typeof RunnerTeamGrantDeleteResult)['Type'];
 export type RunnerExecutionBackend = (typeof RunnerExecutionBackend)['Type'];
 export type RunnerLoopExecutionCapability = (typeof RunnerLoopExecutionCapability)['Type'];
 export type RunnerCapabilities = (typeof RunnerCapabilities)['Type'];
@@ -3694,6 +3896,11 @@ export type RunnerCreate = (typeof RunnerCreate)['Type'];
 export type RunnerCredentialProvisionInput = (typeof RunnerCredentialProvisionInput)['Type'];
 export type RunnerRegistrationResult = (typeof RunnerRegistrationResult)['Type'];
 export type RunnerHeartbeatInput = (typeof RunnerHeartbeatInput)['Type'];
+export type RunnerProblemCode = (typeof RunnerProblemCodes)[number];
+export type RunnerProblemReport = (typeof RunnerProblemReport)['Type'];
+export type RunnerProblem = (typeof RunnerProblem)['Type'];
+export type RunnerState = (typeof RunnerState)['Type'];
+export type RunnerCredentialStatus = (typeof RunnerCredentialStatus)['Type'];
 export type RunnerCapabilitiesUpdate = (typeof RunnerCapabilitiesUpdate)['Type'];
 export type RunnerWorkUnitWarmStart = (typeof RunnerWorkUnitWarmStart)['Type'];
 export type RunnerWorkUnitData = (typeof RunnerWorkUnitData)['Type'];
@@ -3718,23 +3925,25 @@ export type RunnerFlightDeckLiveSnapshot = (typeof RunnerFlightDeckLiveSnapshot)
 export type RunnerControlCommandListInput = (typeof RunnerControlCommandListInput)['Type'];
 export type RunnerControlCommandList = (typeof ControlCommandList)['Type'];
 export type RunnerStepAttemptListInput = (typeof RunnerStepAttemptListInput)['Type'];
-export type RunnerProjectStepAttemptListInput = (typeof RunnerProjectStepAttemptListInput)['Type'];
+export type RunnerTeamStepAttemptListInput = (typeof RunnerTeamStepAttemptListInput)['Type'];
 export type RunnerStepAttemptClaimInput = (typeof RunnerStepAttemptClaimInput)['Type'];
 export type RunnerStepAttemptHeartbeat = (typeof RunnerStepAttemptHeartbeat)['Type'];
 export type RunnerStepAttemptCompletion = (typeof RunnerStepAttemptCompletion)['Type'];
 export type RunnerStepAttemptFailure = (typeof RunnerStepAttemptFailure)['Type'];
 export type RunnerList = (typeof RunnerList)['Type'];
+export type RunnerActivityList = (typeof RunnerActivityList)['Type'];
+export type RunnerActivity = (typeof RunnerActivity)['Type'];
 export type RunnerEnvironmentMatchInput = (typeof RunnerEnvironmentMatchInput)['Type'];
 export type RunnerEnvironmentMatch = (typeof RunnerEnvironmentMatch)['Type'];
 export type RunnerLoopStepMatchInput = (typeof RunnerLoopStepMatchInput)['Type'];
 export type RunnerLoopStepMatch = (typeof RunnerLoopStepMatch)['Type'];
-/** Whether the Runner reaches only the Projects granted to it. */
-export declare const servesSelectedProjects: (ownership: RunnerOwnership) => boolean;
+/** Whether the Runner reaches only the Teams granted to it. */
+export declare const servesSelectedTeams: (ownership: RunnerOwnership) => boolean;
 export declare function runnerOwnershipFromStorage(input: {
     readonly scopeKind?: string | null;
-    readonly scopeProjectId?: string | null;
+    readonly scopeTeamId?: string | null;
     readonly ownerUserId?: string | null;
-    readonly projectAccessMode?: string | null;
+    readonly teamAccessMode?: string | null;
 }): RunnerOwnership;
 export declare function findForbiddenRunnerCapabilitiesPath<ValueType>(value: ValueType): string | undefined;
 export declare function matchRunnerReplicaForWork(input: {
@@ -3774,3 +3983,22 @@ export declare function buildRunnerFlightDeck(input: {
     readonly runnerLimit?: number;
     readonly hasMoreRunners?: boolean;
 }): RunnerFlightDeck;
+/** Needs attention while any Runner Problem is open; otherwise online, or offline since its last heartbeat. */
+export declare function runnerState(runner: {
+    readonly lastHeartbeatAt?: string;
+    readonly problems: readonly RunnerProblem[];
+}, now: Date, staleAfterSeconds?: number): RunnerState;
+/**
+ * The update a Runner is due, when it reports a version other than the one its control plane serves: `automatic` is
+ * signalled to it, `manual` waits for a person's "Update now", and a `container` Runner is never updated in place.
+ */
+export declare function runnerUpdate(runner: Pick<Runner, 'version' | 'latestVersion' | 'container' | 'automaticUpdates'>): {
+    readonly from: string;
+    readonly version: string;
+    readonly how: 'automatic' | 'manual' | 'container';
+} | undefined;
+/** `host` is the status of the host the Runner's credential was provisioned on; none until it is provisioned. */
+export declare function runnerCredentialStatus(credential: {
+    readonly identity: string;
+    readonly host?: string;
+}): RunnerCredentialStatus;