@knpkv/control-center 0.1.0

package/dist/server/api/plugins.d.ts

@@ -0,0 +1,1853 @@
+import * as Schema from "effect/Schema";
+import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
+import { ConflictApiError, ForbiddenApiError, InvalidRequestApiError, NotFoundApiError, PayloadTooLargeApiError, RateLimitedApiError, RequestTimedOutApiError, ServiceUnavailableApiError, UnauthorizedApiError } from "./errors.js";
+import { SessionCookieAuth, SessionMutationAuth } from "./session.js";
+/** Stable field key shared by descriptor metadata and configuration values. */
+export declare const PluginConfigurationKey: Schema.brand<Schema.String, "PluginConfigurationKey">;
+/** Decoded plugin configuration field key. */
+export type PluginConfigurationKey = typeof PluginConfigurationKey.Type;
+/** Opaque reference created through the separate secret-management boundary. */
+export declare const OpaqueSecretReference: Schema.brand<Schema.String, "OpaqueSecretReference">;
+/** Decoded opaque secret reference. */
+export type OpaqueSecretReference = typeof OpaqueSecretReference.Type;
+/** Explicit replacement semantics for a redacted secret in a full configuration update. */
+export declare const SecretReferencePatchOperation: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"keep", {}>, Schema.TaggedStruct<"clear", {}>, Schema.TaggedStruct<"replace", {
+    readonly reference: Schema.brand<Schema.String, "OpaqueSecretReference">;
+}>]>;
+/** Decoded secret update operation that never requires the current reference to leave the server. */
+export type SecretReferencePatchOperation = typeof SecretReferencePatchOperation.Type;
+/** Secret-safe current value; secret fields reveal only whether a reference is configured. */
+export declare const RedactedPluginConfigurationValue: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"url", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"boolean", {
+    readonly value: Schema.Boolean;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"integer", {
+    readonly value: Schema.Int;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"select", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"secret-reference", {
+    readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>]>;
+/** Decoded secret-safe current configuration value. */
+export type RedactedPluginConfigurationValue = typeof RedactedPluginConfigurationValue.Type;
+/** Typed configuration update; secret bytes remain outside this endpoint. */
+export declare const PluginConfigurationPatchValue: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"url", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"boolean", {
+    readonly value: Schema.Boolean;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"integer", {
+    readonly value: Schema.Int;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"select", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"secret-reference", {
+    readonly operation: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"keep", {}>, Schema.TaggedStruct<"clear", {}>, Schema.TaggedStruct<"replace", {
+        readonly reference: Schema.brand<Schema.String, "OpaqueSecretReference">;
+    }>]>;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>]>;
+/** Decoded typed plugin configuration update value. */
+export type PluginConfigurationPatchValue = typeof PluginConfigurationPatchValue.Type;
+/** Redacted current configuration with its compare-and-swap revision. */
+export declare const PluginConfiguration: Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly revision: Schema.Int;
+    readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type">, Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded">, never, never>>;
+    readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>;
+/** Decoded redacted current plugin configuration. */
+export type PluginConfiguration = typeof PluginConfiguration.Type;
+/** Bounded compare-and-swap update request for one plugin connection. */
+export declare const PatchPluginConfigurationRequest: Schema.Struct<{
+    readonly expectedRevision: Schema.Int;
+    readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly operation: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"keep", {}>, Schema.TaggedStruct<"clear", {}>, Schema.TaggedStruct<"replace", {
+            readonly reference: Schema.brand<Schema.String, "OpaqueSecretReference">;
+        }>]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type">, Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly operation: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"keep", {}>, Schema.TaggedStruct<"clear", {}>, Schema.TaggedStruct<"replace", {
+            readonly reference: Schema.brand<Schema.String, "OpaqueSecretReference">;
+        }>]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded">, never, never>>;
+}>;
+/** Decoded compare-and-swap plugin configuration update. */
+export type PatchPluginConfigurationRequest = typeof PatchPluginConfigurationRequest.Type;
+export declare const PluginConnectionSummary: Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+    readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly isEnabled: Schema.Boolean;
+    readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+    readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>>;
+    readonly updatedAt: Schema.DateTimeUtcFromString;
+}>;
+/** Decoded plugin connection summary. */
+export type PluginConnectionSummary = typeof PluginConnectionSummary.Type;
+/** Secret-free provider resource shown inside its owning account. */
+export declare const FollowedResourceSummary: Schema.Struct<{
+    readonly followedResourceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly providerImmutableId: Schema.String;
+    readonly isEnabled: Schema.Boolean;
+}>;
+/** Decoded followed-resource overview. */
+export type FollowedResourceSummary = typeof FollowedResourceSummary.Type;
+/** One provider account and the resources this workspace follows within it. */
+export declare const ProviderAccountSummary: Schema.Struct<{
+    readonly providerAccountId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">;
+    readonly providerFamily: Schema.Literals<readonly ["aws", "atlassian", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly providerImmutableId: Schema.String;
+    readonly resources: Schema.$Array<Schema.Struct<{
+        readonly followedResourceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly providerImmutableId: Schema.String;
+        readonly isEnabled: Schema.Boolean;
+    }>>;
+}>;
+/** Decoded provider-account overview. */
+export type ProviderAccountSummary = typeof ProviderAccountSummary.Type;
+/** Secret-free setup field shown before a first-party provider has runtime state. */
+export declare const PluginServiceCatalogField: Schema.Struct<{
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    readonly label: Schema.String;
+    readonly description: Schema.String;
+    readonly kind: Schema.Literals<readonly ["text", "url", "integer", "secret"]>;
+    readonly scope: Schema.Literals<readonly ["adapter", "credential"]>;
+    readonly required: Schema.Boolean;
+    readonly defaultValue: Schema.NullOr<Schema.String>;
+    readonly isReadOnly: Schema.Boolean;
+    readonly minimum: Schema.NullOr<Schema.Int>;
+    readonly maximum: Schema.NullOr<Schema.Int>;
+}>;
+/** Decoded safe setup metadata for one catalog field. */
+export type PluginServiceCatalogField = typeof PluginServiceCatalogField.Type;
+/** One fixed first-party service available whether or not it is configured. */
+export declare const PluginServiceCatalogEntry: Schema.Struct<{
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly description: Schema.String;
+    readonly configurationFields: Schema.$Array<Schema.Struct<{
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly kind: Schema.Literals<readonly ["text", "url", "integer", "secret"]>;
+        readonly scope: Schema.Literals<readonly ["adapter", "credential"]>;
+        readonly required: Schema.Boolean;
+        readonly defaultValue: Schema.NullOr<Schema.String>;
+        readonly isReadOnly: Schema.Boolean;
+        readonly minimum: Schema.NullOr<Schema.Int>;
+        readonly maximum: Schema.NullOr<Schema.Int>;
+    }>>;
+}>;
+/** Decoded safe metadata for one fixed first-party service. */
+export type PluginServiceCatalogEntry = typeof PluginServiceCatalogEntry.Type;
+/** One local AWS CLI profile available to first-party AWS adapters. */
+export declare const DiscoveredAwsProfile: Schema.Struct<{
+    readonly profile: Schema.String;
+    readonly region: Schema.NullOr<Schema.String>;
+}>;
+/** Decoded local AWS profile metadata; credentials never cross this contract. */
+export type DiscoveredAwsProfile = typeof DiscoveredAwsProfile.Type;
+/** Bounded local AWS profile discovery response. */
+export declare const AwsProfileDiscoveryResponse: Schema.$Array<Schema.Struct<{
+    readonly profile: Schema.String;
+    readonly region: Schema.NullOr<Schema.String>;
+}>>;
+/** Decoded bounded AWS profile discovery response. */
+export type AwsProfileDiscoveryResponse = typeof AwsProfileDiscoveryResponse.Type;
+/** Validated local AWS credential selector for one explicit discovery request. */
+export declare const AwsResourceDiscoveryRequest: Schema.Struct<{
+    readonly profile: Schema.String;
+    readonly region: Schema.String;
+}>;
+/** Decoded profile and single-region discovery request. */
+export type AwsResourceDiscoveryRequest = typeof AwsResourceDiscoveryRequest.Type;
+/** Safe per-service AWS resource discovery result. */
+export declare const AwsServiceResourceDiscovery: Schema.Union<readonly [Schema.TaggedStruct<"available", {
+    readonly names: Schema.$Array<Schema.String>;
+    readonly truncated: Schema.Boolean;
+}>, Schema.TaggedStruct<"failed", {
+    readonly failureClass: Schema.Literals<readonly ["authorization", "malformed-response", "rate-limit", "timeout", "unavailable"]>;
+}>]>;
+/** Decoded per-service AWS resource discovery result. */
+export type AwsServiceResourceDiscovery = typeof AwsServiceResourceDiscovery.Type;
+/** Identity-verified, secret-free AWS resource discovery response. */
+export declare const AwsResourceDiscoveryResponse: Schema.Struct<{
+    readonly accountId: Schema.String;
+    readonly codeCommit: Schema.Union<readonly [Schema.TaggedStruct<"available", {
+        readonly names: Schema.$Array<Schema.String>;
+        readonly truncated: Schema.Boolean;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly failureClass: Schema.Literals<readonly ["authorization", "malformed-response", "rate-limit", "timeout", "unavailable"]>;
+    }>]>;
+    readonly codePipeline: Schema.Union<readonly [Schema.TaggedStruct<"available", {
+        readonly names: Schema.$Array<Schema.String>;
+        readonly truncated: Schema.Boolean;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly failureClass: Schema.Literals<readonly ["authorization", "malformed-response", "rate-limit", "timeout", "unavailable"]>;
+    }>]>;
+}>;
+/** Decoded identity and independent service discovery outcomes. */
+export type AwsResourceDiscoveryResponse = typeof AwsResourceDiscoveryResponse.Type;
+/** One local OAuth profile available to first-party Atlassian adapters. */
+export declare const DiscoveredAtlassianProfile: Schema.Struct<{
+    readonly profileId: Schema.String;
+    readonly name: Schema.String;
+    readonly siteUrl: Schema.String;
+    readonly cloudId: Schema.String;
+    readonly accountName: Schema.NullOr<Schema.String>;
+    readonly accountEmail: Schema.NullOr<Schema.String>;
+    readonly status: Schema.Literals<readonly ["valid", "expired"]>;
+    readonly providers: Schema.$Array<Schema.Literals<readonly ["jira", "confluence"]>>;
+}>;
+/** Decoded secret-free metadata for one local Atlassian OAuth profile. */
+export type DiscoveredAtlassianProfile = typeof DiscoveredAtlassianProfile.Type;
+/** Bounded local Atlassian OAuth profile discovery response. */
+export declare const AtlassianProfileDiscoveryResponse: Schema.$Array<Schema.Struct<{
+    readonly profileId: Schema.String;
+    readonly name: Schema.String;
+    readonly siteUrl: Schema.String;
+    readonly cloudId: Schema.String;
+    readonly accountName: Schema.NullOr<Schema.String>;
+    readonly accountEmail: Schema.NullOr<Schema.String>;
+    readonly status: Schema.Literals<readonly ["valid", "expired"]>;
+    readonly providers: Schema.$Array<Schema.Literals<readonly ["jira", "confluence"]>>;
+}>>;
+/** Decoded bounded local Atlassian profile discovery response. */
+export type AtlassianProfileDiscoveryResponse = typeof AtlassianProfileDiscoveryResponse.Type;
+/** Single-use browser OAuth grant identifier; it is also the provider state parameter. */
+export declare const AtlassianOAuthGrantId: Schema.brand<Schema.String, "AtlassianOAuthGrantId">;
+/** Decoded single-use Atlassian OAuth grant identifier. */
+export type AtlassianOAuthGrantId = typeof AtlassianOAuthGrantId.Type;
+/** Atlassian product requested by one browser OAuth grant. */
+export declare const AtlassianOAuthProvider: Schema.Literals<readonly ["jira", "confluence"]>;
+/** Decoded Atlassian product requested by OAuth. */
+export type AtlassianOAuthProvider = typeof AtlassianOAuthProvider.Type;
+/** One or both distinct Atlassian products requested by an OAuth grant. */
+export declare const AtlassianOAuthProviderIntent: Schema.$Array<Schema.Literals<readonly ["jira", "confluence"]>>;
+/** Decoded one- or two-product Atlassian OAuth intent. */
+export type AtlassianOAuthProviderIntent = typeof AtlassianOAuthProviderIntent.Type;
+/** OAuth app credentials entered once in Control Center and retained only by its server. */
+export declare const AtlassianOAuthClientConfiguration: Schema.Struct<{
+    readonly clientId: Schema.String;
+    readonly clientSecret: Schema.String;
+}>;
+/** Decoded local Atlassian OAuth app configuration. */
+export type AtlassianOAuthClientConfiguration = typeof AtlassianOAuthClientConfiguration.Type;
+/** Owner request to start OAuth for the products currently being configured. */
+export declare const CreateAtlassianOAuthGrantRequest: Schema.Struct<{
+    readonly providers: Schema.$Array<Schema.Literals<readonly ["jira", "confluence"]>>;
+    readonly configuration: Schema.optional<Schema.Struct<{
+        readonly clientId: Schema.String;
+        readonly clientSecret: Schema.String;
+    }>>;
+}>;
+/** Decoded owner request to start OAuth for the products currently being configured. */
+export type CreateAtlassianOAuthGrantRequest = typeof CreateAtlassianOAuthGrantRequest.Type;
+/** Safe result of preparing the browser authorization redirect. */
+export declare const AtlassianOAuthGrantStartResponse: Schema.Union<readonly [Schema.TaggedStruct<"ready", {
+    readonly authorizationUrl: Schema.String;
+    readonly callbackUrl: Schema.String;
+}>, Schema.TaggedStruct<"configuration-required", {
+    readonly callbackUrl: Schema.String;
+}>]>;
+/** Decoded browser authorization preparation result. */
+export type AtlassianOAuthGrantStartResponse = typeof AtlassianOAuthGrantStartResponse.Type;
+/** Authorization code returned by Atlassian to the same authenticated browser. */
+export declare const ExchangeAtlassianOAuthGrantRequest: Schema.Struct<{
+    readonly code: Schema.String;
+}>;
+/** One accessible Atlassian site awaiting explicit selection. */
+export declare const AtlassianOAuthSite: Schema.Struct<{
+    readonly cloudId: Schema.String;
+    readonly name: Schema.String;
+    readonly siteUrl: Schema.String;
+}>;
+/** Secret-free account and site choices returned after code exchange. */
+export declare const AtlassianOAuthGrantExchangeResponse: Schema.Struct<{
+    readonly grantId: Schema.brand<Schema.String, "AtlassianOAuthGrantId">;
+    readonly accountName: Schema.String;
+    readonly accountEmail: Schema.NullOr<Schema.String>;
+    readonly sites: Schema.$Array<Schema.Struct<{
+        readonly cloudId: Schema.String;
+        readonly name: Schema.String;
+        readonly siteUrl: Schema.String;
+    }>>;
+}>;
+/** Decoded secret-free site-selection state. */
+export type AtlassianOAuthGrantExchangeResponse = typeof AtlassianOAuthGrantExchangeResponse.Type;
+/** Explicit site choice that completes a pending browser OAuth grant. */
+export declare const CompleteAtlassianOAuthGrantRequest: Schema.Struct<{
+    readonly cloudId: Schema.String;
+}>;
+/** Bounded plugin-navigation and portfolio response retained for v1 clients. */
+export declare const PluginListResponse: Schema.$Array<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+    readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly isEnabled: Schema.Boolean;
+    readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+    readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>>;
+    readonly updatedAt: Schema.DateTimeUtcFromString;
+}>>;
+/** Decoded bounded plugin list. */
+export type PluginListResponse = typeof PluginListResponse.Type;
+/** Bounded Services overview with the fixed catalog and durable connections. */
+export declare const PluginOverviewResponse: Schema.Struct<{
+    readonly catalog: Schema.$Array<Schema.Struct<{
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly description: Schema.String;
+        readonly configurationFields: Schema.$Array<Schema.Struct<{
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly kind: Schema.Literals<readonly ["text", "url", "integer", "secret"]>;
+            readonly scope: Schema.Literals<readonly ["adapter", "credential"]>;
+            readonly required: Schema.Boolean;
+            readonly defaultValue: Schema.NullOr<Schema.String>;
+            readonly isReadOnly: Schema.Boolean;
+            readonly minimum: Schema.NullOr<Schema.Int>;
+            readonly maximum: Schema.NullOr<Schema.Int>;
+        }>>;
+    }>>;
+    readonly connections: Schema.$Array<Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+        readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly isEnabled: Schema.Boolean;
+        readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+        readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"degraded">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"unavailable">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.TaggedStruct<"disabled", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>]>>;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }>>;
+    readonly accounts: Schema.decodeTo<Schema.toType<Schema.$Array<Schema.Struct<{
+        readonly providerAccountId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">;
+        readonly providerFamily: Schema.Literals<readonly ["aws", "atlassian", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly providerImmutableId: Schema.String;
+        readonly resources: Schema.$Array<Schema.Struct<{
+            readonly followedResourceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly displayName: Schema.String;
+            readonly providerImmutableId: Schema.String;
+            readonly isEnabled: Schema.Boolean;
+        }>>;
+    }>>>, Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly providerAccountId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">;
+        readonly providerFamily: Schema.Literals<readonly ["aws", "atlassian", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly providerImmutableId: Schema.String;
+        readonly resources: Schema.$Array<Schema.Struct<{
+            readonly followedResourceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly displayName: Schema.String;
+            readonly providerImmutableId: Schema.String;
+            readonly isEnabled: Schema.Boolean;
+        }>>;
+    }>>>, never, never>;
+}>;
+/** Decoded bounded Services overview. */
+export type PluginOverviewResponse = typeof PluginOverviewResponse.Type;
+/** Typed setup input; only the secret variant carries transport-only secret text. */
+export declare const CreatePluginConnectionValue: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"url", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"integer", {
+    readonly value: Schema.Int;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>, Schema.TaggedStruct<"secret", {
+    readonly value: Schema.String;
+    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+}>]>;
+/** Decoded typed value for first-party connection setup. */
+export type CreatePluginConnectionValue = typeof CreatePluginConnectionValue.Type;
+/** Bounded owner request to create, configure, enable, and immediately test a connection. */
+export declare const CreatePluginConnectionRequest: Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type">, Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded">, never, never>>;
+}>;
+/** Decoded request for first-party connection setup. */
+export type CreatePluginConnectionRequest = typeof CreatePluginConnectionRequest.Type;
+/** Current health for one authenticated plugin connection lookup. */
+export declare const PluginHealthResponse: Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly health: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>;
+}>;
+/** Decoded plugin health response. */
+export type PluginHealthResponse = typeof PluginHealthResponse.Type;
+/** Secret-free provider identity proven by a live connection test. */
+export declare const PluginConnectionIdentity: Schema.Struct<{
+    readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+    readonly label: Schema.String;
+    readonly displayName: Schema.String;
+    readonly providerImmutableId: Schema.String;
+}>;
+/** Decoded provider identity proven by a live connection test. */
+export type PluginConnectionIdentity = typeof PluginConnectionIdentity.Type;
+/** Normalized result of live health and identity discovery against one connection. */
+export declare const PluginConnectionTestResult: Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+    readonly identity: Schema.Struct<{
+        readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+        readonly label: Schema.String;
+        readonly displayName: Schema.String;
+        readonly providerImmutableId: Schema.String;
+    }>;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly checkedAt: Schema.DateTimeUtcFromString;
+    readonly latencyMilliseconds: Schema.Int;
+}>, Schema.TaggedStruct<"failed", {
+    readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly safeMessage: Schema.String;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly checkedAt: Schema.DateTimeUtcFromString;
+    readonly latencyMilliseconds: Schema.Int;
+}>]>;
+/** Decoded live connection test result. */
+export type PluginConnectionTestResult = typeof PluginConnectionTestResult.Type;
+/** Durable result of the most recent bounded synchronization invocation. */
+export declare const PluginSynchronizationResult: Schema.Literals<readonly ["never", "running", "synchronized", "source-unavailable", "interrupted"]>;
+/** Decoded synchronization result presented without provider diagnostics. */
+export type PluginSynchronizationResult = typeof PluginSynchronizationResult.Type;
+/** Secret-free durable synchronization state for one negotiated connection stream. */
+export declare const PluginSynchronizationState: Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly streamKey: Schema.String;
+    readonly lastAttemptAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly lastSuccessAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly result: Schema.Literals<readonly ["never", "running", "synchronized", "source-unavailable", "interrupted"]>;
+    readonly pagesCommitted: Schema.Int;
+}>;
+/** Decoded manual synchronization state. */
+export type PluginSynchronizationState = typeof PluginSynchronizationState.Type;
+/** Redacted result of durable setup and its immediate live identity check. */
+export declare const CreatePluginConnectionResponse: Schema.Struct<{
+    readonly connection: Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+        readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly isEnabled: Schema.Boolean;
+        readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+        readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"degraded">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"unavailable">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.TaggedStruct<"disabled", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>]>>;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }>;
+    readonly configuration: Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly revision: Schema.Int;
+        readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"boolean">;
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"select">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret-reference">;
+            readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type">, Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"boolean">;
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"select">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret-reference">;
+            readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded">, never, never>>;
+        readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    }>;
+    readonly test: Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+        readonly identity: Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+            readonly label: Schema.String;
+            readonly displayName: Schema.String;
+            readonly providerImmutableId: Schema.String;
+        }>;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly latencyMilliseconds: Schema.Int;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly latencyMilliseconds: Schema.Int;
+    }>]>;
+}>;
+/** Decoded redacted first-party connection setup response. */
+export type CreatePluginConnectionResponse = typeof CreatePluginConnectionResponse.Type;
+/** Bounded setup batch owned by one authenticated workspace. */
+export declare const CreatePluginConnectionsRequest: Schema.Struct<{
+    readonly connections: Schema.$Array<Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type">, Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded">, never, never>>;
+    }>>;
+}>;
+/** Decoded bounded multi-connection setup request. */
+export type CreatePluginConnectionsRequest = typeof CreatePluginConnectionsRequest.Type;
+export declare const PluginConnectionSetupFailureClass: Schema.Literals<readonly ["conflict", "invalid-request", "not-found", "rate-limited", "service-unavailable"]>;
+/** Safe classification for one failed setup item. */
+export type PluginConnectionSetupFailureClass = typeof PluginConnectionSetupFailureClass.Type;
+/** One ordered result from a multi-connection setup request. */
+export declare const CreatePluginConnectionBatchResult: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"succeeded", {
+    readonly response: Schema.Struct<{
+        readonly connection: Schema.Struct<{
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+            readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly displayName: Schema.String;
+            readonly isEnabled: Schema.Boolean;
+            readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+            readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+            }>, Schema.Struct<{
+                readonly _tag: Schema.tag<"degraded">;
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly safeMessage: Schema.String;
+            }>, Schema.Struct<{
+                readonly _tag: Schema.tag<"unavailable">;
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly safeMessage: Schema.String;
+            }>, Schema.TaggedStruct<"disabled", {
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+            }>]>>;
+            readonly updatedAt: Schema.DateTimeUtcFromString;
+        }>;
+        readonly configuration: Schema.Struct<{
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly revision: Schema.Int;
+            readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"text">;
+                readonly value: Schema.String;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Type"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"url">;
+                readonly value: Schema.String;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Type"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"boolean">;
+                readonly value: Schema.Boolean;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Type"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"integer">;
+                readonly value: Schema.Int;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Type"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"select">;
+                readonly value: Schema.String;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Type"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"secret-reference">;
+                readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Type">, Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"text">;
+                readonly value: Schema.String;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"url">;
+                readonly value: Schema.String;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"boolean">;
+                readonly value: Schema.Boolean;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"integer">;
+                readonly value: Schema.Int;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"select">;
+                readonly value: Schema.String;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                readonly _tag: Schema.tag<"secret-reference">;
+                readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+                readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            }, "Encoded">, never, never>>;
+            readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        }>;
+        readonly test: Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+            readonly identity: Schema.Struct<{
+                readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+                readonly label: Schema.String;
+                readonly displayName: Schema.String;
+                readonly providerImmutableId: Schema.String;
+            }>;
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly latencyMilliseconds: Schema.Int;
+        }>, Schema.TaggedStruct<"failed", {
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+            readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly latencyMilliseconds: Schema.Int;
+        }>]>;
+    }>;
+}>, Schema.TaggedStruct<"failed", {
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly failureClass: Schema.Literals<readonly ["conflict", "invalid-request", "not-found", "rate-limited", "service-unavailable"]>;
+}>]>;
+/** Decoded result for one connection in a setup batch. */
+export type CreatePluginConnectionBatchResult = typeof CreatePluginConnectionBatchResult.Type;
+/** Ordered redacted results for a bounded setup batch. */
+export declare const CreatePluginConnectionsResponse: Schema.Struct<{
+    readonly results: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"succeeded", {
+        readonly response: Schema.Struct<{
+            readonly connection: Schema.Struct<{
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+                readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+                readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+                readonly displayName: Schema.String;
+                readonly isEnabled: Schema.Boolean;
+                readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+                readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                }>, Schema.Struct<{
+                    readonly _tag: Schema.tag<"degraded">;
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                    readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                    readonly safeMessage: Schema.String;
+                }>, Schema.Struct<{
+                    readonly _tag: Schema.tag<"unavailable">;
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                    readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                    readonly safeMessage: Schema.String;
+                }>, Schema.TaggedStruct<"disabled", {
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                }>]>>;
+                readonly updatedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly configuration: Schema.Struct<{
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly revision: Schema.Int;
+                readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"text">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"url">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"boolean">;
+                    readonly value: Schema.Boolean;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"integer">;
+                    readonly value: Schema.Int;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"select">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"secret-reference">;
+                    readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type">, Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"text">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"url">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"boolean">;
+                    readonly value: Schema.Boolean;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"integer">;
+                    readonly value: Schema.Int;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"select">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"secret-reference">;
+                    readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded">, never, never>>;
+                readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            }>;
+            readonly test: Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+                readonly identity: Schema.Struct<{
+                    readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+                    readonly label: Schema.String;
+                    readonly displayName: Schema.String;
+                    readonly providerImmutableId: Schema.String;
+                }>;
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly latencyMilliseconds: Schema.Int;
+            }>, Schema.TaggedStruct<"failed", {
+                readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly safeMessage: Schema.String;
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly latencyMilliseconds: Schema.Int;
+            }>]>;
+        }>;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly failureClass: Schema.Literals<readonly ["conflict", "invalid-request", "not-found", "rate-limited", "service-unavailable"]>;
+    }>]>>;
+}>;
+/** Decoded ordered multi-connection setup response. */
+export type CreatePluginConnectionsResponse = typeof CreatePluginConnectionsResponse.Type;
+/** Owner-only transition for independently enabling or disabling one connection. */
+export declare const SetPluginConnectionEnabledRequest: Schema.Struct<{
+    readonly isEnabled: Schema.Boolean;
+}>;
+/** Decoded connection enablement transition. */
+export type SetPluginConnectionEnabledRequest = typeof SetPluginConnectionEnabledRequest.Type;
+/** Secret-free configuration contract exposed to settings views. */
+export declare const PluginConfigurationMetadata: Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly pluginId: Schema.brand<Schema.String, string>;
+    readonly contractVersion: Schema.Struct<{
+        readonly major: Schema.Int;
+        readonly minor: Schema.Int;
+        readonly patch: Schema.Int;
+    }>;
+    readonly adapterVersion: Schema.Struct<{
+        readonly major: Schema.Int;
+        readonly minor: Schema.Int;
+        readonly patch: Schema.Int;
+    }>;
+    readonly configurationFields: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+        key: Schema.brand<Schema.String, string>;
+        label: Schema.String;
+        description: Schema.String;
+        required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"url", {
+        key: Schema.brand<Schema.String, string>;
+        label: Schema.String;
+        description: Schema.String;
+        required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"boolean", {
+        key: Schema.brand<Schema.String, string>;
+        label: Schema.String;
+        description: Schema.String;
+        required: Schema.Boolean;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly minimum: Schema.NullOr<Schema.Int>;
+        readonly maximum: Schema.NullOr<Schema.Int>;
+        readonly key: Schema.brand<Schema.String, string>;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"select", {
+        readonly options: Schema.$Array<Schema.Struct<{
+            readonly label: Schema.String;
+            readonly value: Schema.brand<Schema.String, string>;
+        }>>;
+        readonly key: Schema.brand<Schema.String, string>;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"secret-reference", {
+        readonly secretKind: Schema.Literals<readonly ["token", "password", "private-key", "certificate", "opaque"]>;
+        readonly key: Schema.brand<Schema.String, string>;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly required: Schema.Boolean;
+    }>]>>;
+    readonly capabilities: Schema.$Array<Schema.Struct<{
+        readonly capabilityId: Schema.Literals<readonly ["entity.read", "sync.incremental", "action.propose", "action.execute", "action.cancel", "action.reconcile", "diff.inventory", "diff.content"]>;
+        readonly version: Schema.Int;
+    }>>;
+}>;
+/** Decoded secret-free plugin configuration metadata. */
+export type PluginConfigurationMetadata = typeof PluginConfigurationMetadata.Type;
+declare const PluginsApiGroup_base: HttpApiGroup.HttpApiGroup<"plugins", HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/api/v1/plugins/", never, never, never, never, Schema.toCodecJson<Schema.$Array<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+    readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly isEnabled: Schema.Boolean;
+    readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+    readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>>;
+    readonly updatedAt: Schema.DateTimeUtcFromString;
+}>>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"overview", "GET", "/api/v1/plugins/overview", never, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly catalog: Schema.$Array<Schema.Struct<{
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly description: Schema.String;
+        readonly configurationFields: Schema.$Array<Schema.Struct<{
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+            readonly label: Schema.String;
+            readonly description: Schema.String;
+            readonly kind: Schema.Literals<readonly ["text", "url", "integer", "secret"]>;
+            readonly scope: Schema.Literals<readonly ["adapter", "credential"]>;
+            readonly required: Schema.Boolean;
+            readonly defaultValue: Schema.NullOr<Schema.String>;
+            readonly isReadOnly: Schema.Boolean;
+            readonly minimum: Schema.NullOr<Schema.Int>;
+            readonly maximum: Schema.NullOr<Schema.Int>;
+        }>>;
+    }>>;
+    readonly connections: Schema.$Array<Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+        readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly isEnabled: Schema.Boolean;
+        readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+        readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"degraded">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"unavailable">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.TaggedStruct<"disabled", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>]>>;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }>>;
+    readonly accounts: Schema.decodeTo<Schema.toType<Schema.$Array<Schema.Struct<{
+        readonly providerAccountId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">;
+        readonly providerFamily: Schema.Literals<readonly ["aws", "atlassian", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly providerImmutableId: Schema.String;
+        readonly resources: Schema.$Array<Schema.Struct<{
+            readonly followedResourceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly displayName: Schema.String;
+            readonly providerImmutableId: Schema.String;
+            readonly isEnabled: Schema.Boolean;
+        }>>;
+    }>>>, Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly providerAccountId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">;
+        readonly providerFamily: Schema.Literals<readonly ["aws", "atlassian", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly providerImmutableId: Schema.String;
+        readonly resources: Schema.$Array<Schema.Struct<{
+            readonly followedResourceId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">;
+            readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+            readonly displayName: Schema.String;
+            readonly providerImmutableId: Schema.String;
+            readonly isEnabled: Schema.Boolean;
+        }>>;
+    }>>>, never, never>;
+}>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"discoverAwsProfiles", "GET", "/api/v1/plugins/discovery/aws-profiles", never, never, never, never, Schema.toCodecJson<Schema.$Array<Schema.Struct<{
+    readonly profile: Schema.String;
+    readonly region: Schema.NullOr<Schema.String>;
+}>>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"discoverAwsResources", "POST", "/api/v1/plugins/discovery/aws-resources", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly profile: Schema.String;
+    readonly region: Schema.String;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly accountId: Schema.String;
+    readonly codeCommit: Schema.Union<readonly [Schema.TaggedStruct<"available", {
+        readonly names: Schema.$Array<Schema.String>;
+        readonly truncated: Schema.Boolean;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly failureClass: Schema.Literals<readonly ["authorization", "malformed-response", "rate-limit", "timeout", "unavailable"]>;
+    }>]>;
+    readonly codePipeline: Schema.Union<readonly [Schema.TaggedStruct<"available", {
+        readonly names: Schema.$Array<Schema.String>;
+        readonly truncated: Schema.Boolean;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly failureClass: Schema.Literals<readonly ["authorization", "malformed-response", "rate-limit", "timeout", "unavailable"]>;
+    }>]>;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"discoverAtlassianProfiles", "GET", "/api/v1/plugins/discovery/atlassian-profiles", never, never, never, never, Schema.toCodecJson<Schema.$Array<Schema.Struct<{
+    readonly profileId: Schema.String;
+    readonly name: Schema.String;
+    readonly siteUrl: Schema.String;
+    readonly cloudId: Schema.String;
+    readonly accountName: Schema.NullOr<Schema.String>;
+    readonly accountEmail: Schema.NullOr<Schema.String>;
+    readonly status: Schema.Literals<readonly ["valid", "expired"]>;
+    readonly providers: Schema.$Array<Schema.Literals<readonly ["jira", "confluence"]>>;
+}>>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"createAtlassianOAuthGrant", "POST", "/api/v1/plugins/oauth/atlassian/grants", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly providers: Schema.$Array<Schema.Literals<readonly ["jira", "confluence"]>>;
+    readonly configuration: Schema.optional<Schema.Struct<{
+        readonly clientId: Schema.String;
+        readonly clientSecret: Schema.String;
+    }>>;
+}>>, never, Schema.toCodecJson<Schema.Union<readonly [Schema.TaggedStruct<"ready", {
+    readonly authorizationUrl: Schema.String;
+    readonly callbackUrl: Schema.String;
+}>, Schema.TaggedStruct<"configuration-required", {
+    readonly callbackUrl: Schema.String;
+}>]>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof ConflictApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"exchangeAtlassianOAuthGrant", "POST", "/api/v1/plugins/oauth/atlassian/grants/:grantId/exchange", Schema.toCodecStringTree<Schema.Struct<{
+    readonly grantId: Schema.brand<Schema.String, "AtlassianOAuthGrantId">;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly code: Schema.String;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly grantId: Schema.brand<Schema.String, "AtlassianOAuthGrantId">;
+    readonly accountName: Schema.String;
+    readonly accountEmail: Schema.NullOr<Schema.String>;
+    readonly sites: Schema.$Array<Schema.Struct<{
+        readonly cloudId: Schema.String;
+        readonly name: Schema.String;
+        readonly siteUrl: Schema.String;
+    }>>;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof ConflictApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"completeAtlassianOAuthGrant", "POST", "/api/v1/plugins/oauth/atlassian/grants/:grantId/complete", Schema.toCodecStringTree<Schema.Struct<{
+    readonly grantId: Schema.brand<Schema.String, "AtlassianOAuthGrantId">;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly cloudId: Schema.String;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly profileId: Schema.String;
+    readonly name: Schema.String;
+    readonly siteUrl: Schema.String;
+    readonly cloudId: Schema.String;
+    readonly accountName: Schema.NullOr<Schema.String>;
+    readonly accountEmail: Schema.NullOr<Schema.String>;
+    readonly status: Schema.Literals<readonly ["valid", "expired"]>;
+    readonly providers: Schema.$Array<Schema.Literals<readonly ["jira", "confluence"]>>;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof ConflictApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"createConnection", "POST", "/api/v1/plugins/connections", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type">, Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded">, never, never>>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly connection: Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+        readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly isEnabled: Schema.Boolean;
+        readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+        readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"degraded">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.Struct<{
+            readonly _tag: Schema.tag<"unavailable">;
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+            readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+            readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            readonly safeMessage: Schema.String;
+        }>, Schema.TaggedStruct<"disabled", {
+            readonly checkedAt: Schema.DateTimeUtcFromString;
+        }>]>>;
+        readonly updatedAt: Schema.DateTimeUtcFromString;
+    }>;
+    readonly configuration: Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly revision: Schema.Int;
+        readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"boolean">;
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"select">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret-reference">;
+            readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type">, Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"boolean">;
+            readonly value: Schema.Boolean;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"select">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret-reference">;
+            readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded">, never, never>>;
+        readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    }>;
+    readonly test: Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+        readonly identity: Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+            readonly label: Schema.String;
+            readonly displayName: Schema.String;
+            readonly providerImmutableId: Schema.String;
+        }>;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly latencyMilliseconds: Schema.Int;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly latencyMilliseconds: Schema.Int;
+    }>]>;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof ConflictApiError | typeof PayloadTooLargeApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"createConnections", "POST", "/api/v1/plugins/connections/batch", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly connections: Schema.$Array<Schema.Struct<{
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+        readonly displayName: Schema.String;
+        readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Type">, Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"text">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"url">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"integer">;
+            readonly value: Schema.Int;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded"> | Schema.Struct.ReadonlySide<{
+            readonly _tag: Schema.tag<"secret">;
+            readonly value: Schema.String;
+            readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+        }, "Encoded">, never, never>>;
+    }>>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly results: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"succeeded", {
+        readonly response: Schema.Struct<{
+            readonly connection: Schema.Struct<{
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+                readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+                readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+                readonly displayName: Schema.String;
+                readonly isEnabled: Schema.Boolean;
+                readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+                readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                }>, Schema.Struct<{
+                    readonly _tag: Schema.tag<"degraded">;
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                    readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                    readonly safeMessage: Schema.String;
+                }>, Schema.Struct<{
+                    readonly _tag: Schema.tag<"unavailable">;
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                    readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                    readonly safeMessage: Schema.String;
+                }>, Schema.TaggedStruct<"disabled", {
+                    readonly checkedAt: Schema.DateTimeUtcFromString;
+                }>]>>;
+                readonly updatedAt: Schema.DateTimeUtcFromString;
+            }>;
+            readonly configuration: Schema.Struct<{
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly revision: Schema.Int;
+                readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"text">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"url">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"boolean">;
+                    readonly value: Schema.Boolean;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"integer">;
+                    readonly value: Schema.Int;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"select">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"secret-reference">;
+                    readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Type">, Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"text">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"url">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"boolean">;
+                    readonly value: Schema.Boolean;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"integer">;
+                    readonly value: Schema.Int;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"select">;
+                    readonly value: Schema.String;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded"> | Schema.Struct.ReadonlySide<{
+                    readonly _tag: Schema.tag<"secret-reference">;
+                    readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+                    readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+                }, "Encoded">, never, never>>;
+                readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+            }>;
+            readonly test: Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+                readonly identity: Schema.Struct<{
+                    readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+                    readonly label: Schema.String;
+                    readonly displayName: Schema.String;
+                    readonly providerImmutableId: Schema.String;
+                }>;
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly latencyMilliseconds: Schema.Int;
+            }>, Schema.TaggedStruct<"failed", {
+                readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+                readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+                readonly safeMessage: Schema.String;
+                readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+                readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+                readonly checkedAt: Schema.DateTimeUtcFromString;
+                readonly latencyMilliseconds: Schema.Int;
+            }>]>;
+        }>;
+    }>, Schema.TaggedStruct<"failed", {
+        readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+        readonly failureClass: Schema.Literals<readonly ["conflict", "invalid-request", "not-found", "rate-limited", "service-unavailable"]>;
+    }>]>>;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof ConflictApiError | typeof PayloadTooLargeApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"setConnectionEnabled", "PATCH", "/api/v1/plugins/connections/:pluginConnectionId", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly isEnabled: Schema.Boolean;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerAccountId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "ProviderAccountId">>>, never, never>;
+    readonly followedResourceId: Schema.decodeTo<Schema.toType<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, Schema.optional<Schema.NullOr<Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "FollowedResourceId">>>, never, never>;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly displayName: Schema.String;
+    readonly isEnabled: Schema.Boolean;
+    readonly supportsSynchronization: Schema.decodeTo<Schema.Boolean, Schema.optional<Schema.Boolean>, never, never>;
+    readonly health: Schema.NullOr<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>>;
+    readonly updatedAt: Schema.DateTimeUtcFromString;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof ConflictApiError | typeof PayloadTooLargeApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"health", "GET", "/api/v1/plugins/:pluginConnectionId/health", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly health: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"healthy", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"degraded">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"unavailable">;
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+        readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+        readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+        readonly safeMessage: Schema.String;
+    }>, Schema.TaggedStruct<"disabled", {
+        readonly checkedAt: Schema.DateTimeUtcFromString;
+    }>]>;
+}>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"testConnection", "POST", "/api/v1/plugins/:pluginConnectionId/test", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Union<readonly [Schema.TaggedStruct<"healthy", {
+    readonly identity: Schema.Struct<{
+        readonly kind: Schema.Literals<readonly ["user", "account", "workspace"]>;
+        readonly label: Schema.String;
+        readonly displayName: Schema.String;
+        readonly providerImmutableId: Schema.String;
+    }>;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly checkedAt: Schema.DateTimeUtcFromString;
+    readonly latencyMilliseconds: Schema.Int;
+}>, Schema.TaggedStruct<"failed", {
+    readonly failureClass: Schema.Literals<readonly ["authentication", "authorization", "rate-limit", "timeout", "malformed-response", "outage", "unknown"]>;
+    readonly retryAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly safeMessage: Schema.String;
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly checkedAt: Schema.DateTimeUtcFromString;
+    readonly latencyMilliseconds: Schema.Int;
+}>]>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"synchronization", "GET", "/api/v1/plugins/:pluginConnectionId/synchronization", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly streamKey: Schema.String;
+    readonly lastAttemptAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly lastSuccessAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly result: Schema.Literals<readonly ["never", "running", "synchronized", "source-unavailable", "interrupted"]>;
+    readonly pagesCommitted: Schema.Int;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"synchronizeConnection", "POST", "/api/v1/plugins/:pluginConnectionId/sync", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly providerId: Schema.Literals<readonly ["codecommit", "codepipeline", "jira", "confluence", "clockify"]>;
+    readonly streamKey: Schema.String;
+    readonly lastAttemptAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly lastSuccessAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+    readonly result: Schema.Literals<readonly ["never", "running", "synchronized", "source-unavailable", "interrupted"]>;
+    readonly pagesCommitted: Schema.Int;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"configurationMetadata", "GET", "/api/v1/plugins/:pluginConnectionId/configuration-metadata", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly pluginId: Schema.brand<Schema.String, string>;
+    readonly contractVersion: Schema.Struct<{
+        readonly major: Schema.Int;
+        readonly minor: Schema.Int;
+        readonly patch: Schema.Int;
+    }>;
+    readonly adapterVersion: Schema.Struct<{
+        readonly major: Schema.Int;
+        readonly minor: Schema.Int;
+        readonly patch: Schema.Int;
+    }>;
+    readonly configurationFields: Schema.$Array<Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"text", {
+        key: Schema.brand<Schema.String, string>;
+        label: Schema.String;
+        description: Schema.String;
+        required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"url", {
+        key: Schema.brand<Schema.String, string>;
+        label: Schema.String;
+        description: Schema.String;
+        required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"boolean", {
+        key: Schema.brand<Schema.String, string>;
+        label: Schema.String;
+        description: Schema.String;
+        required: Schema.Boolean;
+    }>, Schema.Struct<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly minimum: Schema.NullOr<Schema.Int>;
+        readonly maximum: Schema.NullOr<Schema.Int>;
+        readonly key: Schema.brand<Schema.String, string>;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"select", {
+        readonly options: Schema.$Array<Schema.Struct<{
+            readonly label: Schema.String;
+            readonly value: Schema.brand<Schema.String, string>;
+        }>>;
+        readonly key: Schema.brand<Schema.String, string>;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly required: Schema.Boolean;
+    }>, Schema.TaggedStruct<"secret-reference", {
+        readonly secretKind: Schema.Literals<readonly ["token", "password", "private-key", "certificate", "opaque"]>;
+        readonly key: Schema.brand<Schema.String, string>;
+        readonly label: Schema.String;
+        readonly description: Schema.String;
+        readonly required: Schema.Boolean;
+    }>]>>;
+    readonly capabilities: Schema.$Array<Schema.Struct<{
+        readonly capabilityId: Schema.Literals<readonly ["entity.read", "sync.incremental", "action.propose", "action.execute", "action.cancel", "action.reconcile", "diff.inventory", "diff.content"]>;
+        readonly version: Schema.Int;
+    }>>;
+}>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"configuration", "GET", "/api/v1/plugins/:pluginConnectionId/configuration", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly revision: Schema.Int;
+    readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type">, Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded">, never, never>>;
+    readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>>, Schema.toCodecJson<typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth, never> | HttpApiEndpoint.HttpApiEndpoint<"patchConfiguration", "PATCH", "/api/v1/plugins/:pluginConnectionId/configuration", Schema.toCodecStringTree<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly expectedRevision: Schema.Int;
+    readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly operation: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"keep", {}>, Schema.TaggedStruct<"clear", {}>, Schema.TaggedStruct<"replace", {
+            readonly reference: Schema.brand<Schema.String, "OpaqueSecretReference">;
+        }>]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type">, Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly operation: Schema.toTaggedUnion<"_tag", readonly [Schema.TaggedStruct<"keep", {}>, Schema.TaggedStruct<"clear", {}>, Schema.TaggedStruct<"replace", {
+            readonly reference: Schema.brand<Schema.String, "OpaqueSecretReference">;
+        }>]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded">, never, never>>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly pluginConnectionId: Schema.brand<Schema.decodeTo<Schema.String, Schema.String, never, never>, "PluginConnectionId">;
+    readonly revision: Schema.Int;
+    readonly values: Schema.$Array<Schema.Codec<Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Type">, Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"text">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"url">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"boolean">;
+        readonly value: Schema.Boolean;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"integer">;
+        readonly value: Schema.Int;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"select">;
+        readonly value: Schema.String;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded"> | Schema.Struct.ReadonlySide<{
+        readonly _tag: Schema.tag<"secret-reference">;
+        readonly state: Schema.Literals<readonly ["configured", "missing"]>;
+        readonly key: Schema.brand<Schema.String, "PluginConfigurationKey">;
+    }, "Encoded">, never, never>>;
+    readonly updatedAt: Schema.NullOr<Schema.DateTimeUtcFromString>;
+}>>, Schema.toCodecJson<typeof InvalidRequestApiError | typeof UnauthorizedApiError | typeof ForbiddenApiError | typeof NotFoundApiError | typeof ConflictApiError | typeof PayloadTooLargeApiError | typeof RequestTimedOutApiError | typeof RateLimitedApiError | typeof ServiceUnavailableApiError>, SessionCookieAuth | SessionMutationAuth, never>, false>;
+/** Authenticated plugin list, health, and secret-free configuration contract. */
+export declare class PluginsApiGroup extends PluginsApiGroup_base {
+}
+export {};
+//# sourceMappingURL=plugins.d.ts.map