npm - @nklisch/pi-enhanced - Versions diffs - 0.1.0 - Mend

@nklisch/pi-enhanced 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1904) hide show

package/node_modules/@nklisch/pi-plugins/dist/application/state-contract.d.ts ADDED Viewed

@@ -0,0 +1,2731 @@
+import { z } from "zod";
+import { type HostConfigDocument } from "../domain/state/config-state.js";
+import { type InstalledUserStateDocument } from "../domain/state/installed-state.js";
+import { type ProjectLocalStateDocument } from "../domain/state/project-state.js";
+import { type StatePointersDocument } from "../domain/state/pointers.js";
+import { type TrustStateDocument } from "../domain/state/trust-state.js";
+import { type ScopeContext } from "../domain/state/scope.js";
+import { type Generation } from "../domain/state/config-state.js";
+import { type StateCorruption } from "../domain/state/codec.js";
+import type { Sha256 } from "../domain/source.js";
+export type UserScopeContext = Extract<ScopeContext, {
+    kind: "user";
+}>;
+export type ProjectScopeContext = Extract<ScopeContext, {
+    kind: "project";
+}>;
+/** One coherent user generation selected by its pointer document. */
+export type UserGenerationSnapshot = Readonly<{
+    scope: UserScopeContext;
+    generation: Generation;
+    pointers: StatePointersDocument;
+    config: HostConfigDocument;
+    installed: InstalledUserStateDocument;
+    trust: TrustStateDocument;
+    corruptions: readonly StateCorruption[];
+}>;
+/** One coherent project generation selected by its pointer document. */
+export type ProjectGenerationSnapshot = Readonly<{
+    scope: ProjectScopeContext;
+    generation: Generation;
+    pointers: StatePointersDocument;
+    project: ProjectLocalStateDocument;
+    corruptions: readonly StateCorruption[];
+}>;
+export type GenerationSnapshot = UserGenerationSnapshot | ProjectGenerationSnapshot;
+/**
+ * Untrusted structural input for a user mutation. Parsing this schema only
+ * checks shape; it does not verify canonical evidence or produce a value that
+ * a LifecycleStateStore may accept.
+ */
+export declare const UserStateMutationInputSchema: z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"user">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        config: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            global: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>;
+                cadence: z.ZodEnum<{
+                    balanced: "balanced";
+                    conservative: "conservative";
+                    frequent: "frequent";
+                    paused: "paused";
+                }>;
+                resolution: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    hostPrecedence: z.ZodReadonly<z.ZodTuple<[z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>, z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>], null>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        installed: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<2>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        trust: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
+                evidence: z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    immutableRevision: z.ZodString;
+                    executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                }, z.core.$strict>>;
+                status: z.ZodEnum<{
+                    granted: "granted";
+                    revoked: "revoked";
+                }>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>;
+export type UserStateMutationInput = z.infer<typeof UserStateMutationInputSchema>;
+/** Untrusted structural input for a project mutation. */
+export declare const ProjectStateMutationInputSchema: z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"project">;
+        identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"repository">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"path-only">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+        }, z.core.$strict>>], "kind">;
+        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        project: z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+            identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"repository">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+            }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"path-only">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+            }, z.core.$strict>>], "kind">;
+            declarationDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+            marketplaceUpdates: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>;
+export type ProjectStateMutationInput = z.infer<typeof ProjectStateMutationInputSchema>;
+/** The complete untrusted structural mutation contract. */
+export declare const StateMutationInputSchema: z.ZodUnion<readonly [z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"user">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        config: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            global: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>;
+                cadence: z.ZodEnum<{
+                    balanced: "balanced";
+                    conservative: "conservative";
+                    frequent: "frequent";
+                    paused: "paused";
+                }>;
+                resolution: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    hostPrecedence: z.ZodReadonly<z.ZodTuple<[z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>, z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>], null>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        installed: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<2>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        trust: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
+                evidence: z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    immutableRevision: z.ZodString;
+                    executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                }, z.core.$strict>>;
+                status: z.ZodEnum<{
+                    granted: "granted";
+                    revoked: "revoked";
+                }>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"project">;
+        identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"repository">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"path-only">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+        }, z.core.$strict>>], "kind">;
+        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        project: z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+            identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"repository">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+            }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"path-only">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+            }, z.core.$strict>>], "kind">;
+            declarationDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+            marketplaceUpdates: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>]>;
+export type StateMutationInput = z.infer<typeof StateMutationInputSchema>;
+export type UnverifiedStateMutation = StateMutationInput;
+/**
+ * Compatibility names for the structural schemas. Their inferred output is
+ * intentionally UnverifiedStateMutation, never the store-facing type.
+ */
+export declare const UserStateMutationSchema: z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"user">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        config: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            global: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>;
+                cadence: z.ZodEnum<{
+                    balanced: "balanced";
+                    conservative: "conservative";
+                    frequent: "frequent";
+                    paused: "paused";
+                }>;
+                resolution: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    hostPrecedence: z.ZodReadonly<z.ZodTuple<[z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>, z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>], null>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        installed: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<2>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        trust: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
+                evidence: z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    immutableRevision: z.ZodString;
+                    executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                }, z.core.$strict>>;
+                status: z.ZodEnum<{
+                    granted: "granted";
+                    revoked: "revoked";
+                }>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>;
+export declare const ProjectStateMutationSchema: z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"project">;
+        identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"repository">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"path-only">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+        }, z.core.$strict>>], "kind">;
+        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        project: z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+            identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"repository">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+            }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"path-only">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+            }, z.core.$strict>>], "kind">;
+            declarationDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+            marketplaceUpdates: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>;
+export declare const StateMutationSchema: z.ZodUnion<readonly [z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"user">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        config: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            global: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>;
+                cadence: z.ZodEnum<{
+                    balanced: "balanced";
+                    conservative: "conservative";
+                    frequent: "frequent";
+                    paused: "paused";
+                }>;
+                resolution: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    hostPrecedence: z.ZodReadonly<z.ZodTuple<[z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>, z.ZodEnum<{
+                        claude: "claude";
+                        codex: "codex";
+                    }>], null>>;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        installed: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<2>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+        trust: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<1>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            records: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                subject: z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">;
+                evidence: z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    marketplaceSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    pluginSource: z.core.$ZodBranded<z.ZodString, "CanonicalSource", "out">;
+                    immutableRevision: z.ZodString;
+                    executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                }, z.core.$strict>>;
+                status: z.ZodEnum<{
+                    granted: "granted";
+                    revoked: "revoked";
+                }>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+    scope: z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"project">;
+        identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"repository">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"path-only">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+        }, z.core.$strict>>], "kind">;
+        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+    }, z.core.$strict>>;
+    expectedGeneration: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+    replace: z.ZodObject<{
+        project: z.ZodReadonly<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<4>;
+            generation: z.core.$ZodBranded<z.ZodNumber, "Generation", "out">;
+            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+            identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"repository">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+            }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                kind: z.ZodLiteral<"path-only">;
+                canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+                limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+            }, z.core.$strict>>], "kind">;
+            declarationDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+            scope: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                application: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    manual: "manual";
+                }>>;
+                schedulerLease: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateSchedulerLeaseId", "out">;
+                    startedAt: z.ZodNumber;
+                    renewedAt: z.ZodNumber;
+                    expiresAt: z.ZodNumber;
+                }, z.core.$strict>>>;
+            }, z.core.$strict>>>;
+            marketplaces: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        git: "git";
+                        github: "github";
+                        "local-git": "local-git";
+                    }>;
+                    sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                    revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                }, z.core.$strict>>;
+                contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                binding: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                contentRef: z.core.$ZodBranded<z.ZodString, "MarketplaceContentRef", "out">;
+            }, z.core.$strict>>>>;
+            plugins: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                activation: z.ZodEnum<{
+                    disabled: "disabled";
+                    enabled: "enabled";
+                }>;
+                selectedRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                revisions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    revision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    evidence: z.ZodReadonly<z.ZodObject<{
+                        plugin: z.ZodReadonly<z.ZodObject<{
+                            key: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                            marketplaceName: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                            marketplaceEntryName: z.ZodString;
+                        }, z.core.$strict>>;
+                        source: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"marketplace-path">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            marketplaceRevision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"git-subdir">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                            revision: z.core.$ZodBranded<z.ZodString, "GitRevision", "out">;
+                        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                            marketplaceSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            pluginSourceIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>>;
+                            declaredVersion: z.ZodOptional<z.ZodString>;
+                            sourceRevision: z.ZodOptional<z.ZodString>;
+                            kind: z.ZodLiteral<"npm">;
+                            sourceHash: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        }, z.core.$strict>>], "kind">;
+                        components: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                            id: z.core.$ZodBranded<z.ZodString, "ComponentId", "out">;
+                            kind: z.ZodEnum<{
+                                foreign: "foreign";
+                                hook: "hook";
+                                "mcp-server": "mcp-server";
+                                skill: "skill";
+                            }>;
+                        }, z.core.$strict>>>>;
+                        compatibility: z.ZodReadonly<z.ZodObject<{
+                            activatable: z.ZodBoolean;
+                            fingerprint: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                        trust: z.ZodReadonly<z.ZodObject<{
+                            executableSurfaceDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        }, z.core.$strict>>;
+                    }, z.core.$strict>>;
+                    contentDigest: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                    contentRef: z.core.$ZodBranded<z.ZodString, "PluginContentRef", "out">;
+                    dataRef: z.core.$ZodBranded<z.ZodString, "PluginDataRef", "out">;
+                    configurationRef: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PluginConfigurationRef", "out">>;
+                }, z.core.$strict>>>>;
+                pendingTransition: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PendingTransitionRef", "out">>;
+            }, z.core.$strict>>>>;
+            marketplaceUpdates: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                marketplace: z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">;
+                source: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>, ...(z.ZodObject<{
+                    kind: z.ZodLiteral<"github">;
+                    repository: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"git">;
+                    url: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict> | z.ZodObject<{
+                    kind: z.ZodLiteral<"local-git">;
+                    path: z.ZodString;
+                    ref: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>)[]], "kind">;
+                origin: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"native">;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"adoption">;
+                    candidateId: z.core.$ZodBranded<z.ZodString, "AdoptionCandidateId", "out">;
+                    documents: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                        host: z.ZodEnum<{
+                            claude: "claude";
+                            codex: "codex";
+                        }>;
+                        document: z.ZodEnum<{
+                            "claude-known-marketplaces": "claude-known-marketplaces";
+                            "claude-user-settings": "claude-user-settings";
+                            "codex-user-config": "codex-user-config";
+                        }>;
+                        pointer: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>>>;
+                }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                    kind: z.ZodLiteral<"legacy">;
+                }, z.core.$strict>>], "kind">;
+                applicationOverride: z.ZodOptional<z.ZodEnum<{
+                    automatic: "automatic";
+                    inherit: "inherit";
+                    manual: "manual";
+                }>>;
+                pluginOverrides: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    sourceIdentity: z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "SourceHash", "out">, z.ZodLiteral<"legacy-unavailable">]>;
+                    mode: z.ZodEnum<{
+                        automatic: "automatic";
+                        inherit: "inherit";
+                        manual: "manual";
+                    }>;
+                }, z.core.$strict>>>>>;
+                refresh: z.ZodDefault<z.ZodReadonly<z.ZodObject<{
+                    claim: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        id: z.core.$ZodBranded<z.ZodString, "RefreshClaimId", "out">;
+                        startedAt: z.ZodNumber;
+                        expiresAt: z.ZodNumber;
+                        owner: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                            pid: z.ZodNumber;
+                            startToken: z.ZodString;
+                        }, z.core.$strict>>>;
+                    }, z.core.$strict>>>;
+                    lastCompletedAt: z.ZodOptional<z.ZodNumber>;
+                    lastAttempt: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        completedAt: z.ZodNumber;
+                        outcome: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            failed: "failed";
+                            succeeded: "succeeded";
+                            unavailable: "unavailable";
+                            unchanged: "unchanged";
+                        }>;
+                        code: z.ZodOptional<z.ZodEnum<{
+                            ABORTED: "ABORTED";
+                            CATALOG_INVALID: "CATALOG_INVALID";
+                            CONTENT_INVALID: "CONTENT_INVALID";
+                            PROMOTION_FAILED: "PROMOTION_FAILED";
+                            REMOVED_DURING_REFRESH: "REMOVED_DURING_REFRESH";
+                            SOURCE_UNAVAILABLE: "SOURCE_UNAVAILABLE";
+                            STATE_STALE: "STATE_STALE";
+                        }>>;
+                    }, z.core.$strict>>>;
+                    schedule: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        anchorAt: z.ZodNumber;
+                        baseDelayMs: z.ZodNumber;
+                        jitterMs: z.ZodNumber;
+                        dueAt: z.ZodNumber;
+                        reason: z.ZodEnum<{
+                            failure: "failure";
+                            legacy: "legacy";
+                            success: "success";
+                        }>;
+                    }, z.core.$strict>>>;
+                    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>>;
+                notices: z.ZodDefault<z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+                    id: z.core.$ZodBranded<z.ZodString, "UpdateNoticeId", "out">;
+                    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"user">;
+                    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodLiteral<"project">;
+                        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+                    }, z.core.$strict>>], "kind">;
+                    plugin: z.core.$ZodBranded<z.ZodString, "PluginKey", "out">;
+                    registrationId: z.ZodString;
+                    snapshot: z.ZodString;
+                    candidateId: z.ZodString;
+                    candidate: z.core.$ZodBranded<z.ZodString, "UpdateCandidateKey", "out">;
+                    available: z.ZodReadonly<z.ZodObject<{
+                        immutableRevision: z.core.$ZodBranded<z.ZodString, "ContentDigest", "out">;
+                        marketplaceSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        pluginSourceIdentity: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+                        declaredVersion: z.ZodOptional<z.ZodString>;
+                        sourceRevision: z.ZodString;
+                    }, z.core.$strict>>;
+                    display: z.ZodReadonly<z.ZodObject<{
+                        installed: z.ZodString;
+                        available: z.ZodString;
+                    }, z.core.$strict>>;
+                    disposition: z.ZodEnum<{
+                        "approval-required": "approval-required";
+                        "automatic-applied": "automatic-applied";
+                        "automatic-pending": "automatic-pending";
+                        "automatic-retryable": "automatic-retryable";
+                        "capability-blocked": "capability-blocked";
+                        "configuration-blocked": "configuration-blocked";
+                        "manual-required": "manual-required";
+                        "recovery-required": "recovery-required";
+                    }>;
+                    publication: z.ZodEnum<{
+                        pending: "pending";
+                        published: "published";
+                    }>;
+                    unread: z.ZodBoolean;
+                    discoveredAt: z.ZodNumber;
+                    acknowledgedAt: z.ZodOptional<z.ZodNumber>;
+                    resolution: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        kind: z.ZodEnum<{
+                            installed: "installed";
+                            "marketplace-removed": "marketplace-removed";
+                            "plugin-removed": "plugin-removed";
+                            superseded: "superseded";
+                        }>;
+                        at: z.ZodNumber;
+                    }, z.core.$strict>>>;
+                    automatic: z.ZodOptional<z.ZodReadonly<z.ZodObject<{
+                        state: z.ZodEnum<{
+                            applied: "applied";
+                            blocked: "blocked";
+                            pending: "pending";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                        }>;
+                        reason: z.ZodOptional<z.ZodEnum<{
+                            "approval-required": "approval-required";
+                            "awaiting-host-context": "awaiting-host-context";
+                            "capability-unavailable": "capability-unavailable";
+                            "configuration-required": "configuration-required";
+                            manual: "manual";
+                            "project-untrusted": "project-untrusted";
+                            "recovery-required": "recovery-required";
+                            retryable: "retryable";
+                            "secret-unavailable": "secret-unavailable";
+                            stale: "stale";
+                        }>>;
+                        attemptedAt: z.ZodOptional<z.ZodNumber>;
+                        retryAt: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strict>>>;
+                }, z.core.$strict>>>>>;
+            }, z.core.$strict>>>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>>]>;
+/**
+ * This compile-time symbol is deliberately module-private. TypeScript callers
+ * cannot manufacture the store-facing type by parsing a public structural
+ * schema. Runtime membership is held separately in a private WeakSet so an
+ * ordinary caller cannot discover and copy a brand property.
+ */
+declare const verifiedStateMutationBrand: unique symbol;
+export type VerifiedStateMutation = UnverifiedStateMutation & {
+    readonly [verifiedStateMutationBrand]: true;
+};
+/** The mutation type accepted by the lifecycle state port. */
+export type StateMutation = VerifiedStateMutation;
+/** Runtime guard for adapters and fakes at the untyped boundary. */
+export declare function isVerifiedStateMutation(input: unknown): input is StateMutation;
+export type StateCommitResult = Readonly<{
+    kind: "committed";
+    snapshot: GenerationSnapshot;
+}> | Readonly<{
+    kind: "stale-generation";
+    expected: Generation;
+    actual: Generation;
+}>;
+export type StateLoadResult = Readonly<{
+    ok: true;
+    snapshot: GenerationSnapshot;
+}> | Readonly<{
+    ok: false;
+    scope: UserScopeContext | ProjectScopeContext;
+    corruptions: readonly [StateCorruption, ...StateCorruption[]];
+}>;
+/**
+ * The only constructor for a store-facing mutation. Structural parsing is
+ * deliberately performed first, then every evidence-bearing replacement is
+ * rebuilt through its SHA-256-aware constructor before the opaque brand is
+ * attached.
+ */
+export declare function parseStateMutation(input: unknown, sha256: Sha256): StateMutation;
+/** Explicit verifier spelling retained for adapter code; SHA-256 is mandatory. */
+export declare const validateStateMutation: typeof parseStateMutation;
+/** Validate a failed load result without accepting an empty corruption list. */
+export declare const StateLoadFailureSchema: z.ZodReadonly<z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"user">;
+    }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+        kind: z.ZodLiteral<"project">;
+        identity: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"repository">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            repositoryFingerprint: z.core.$ZodBranded<z.ZodString, "SourceHash", "out">;
+        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"path-only">;
+            canonicalRoot: z.core.$ZodBranded<z.ZodString, "CanonicalProjectRoot", "out">;
+            limitation: z.ZodLiteral<"identity-changes-with-canonical-root">;
+        }, z.core.$strict>>], "kind">;
+        projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+    }, z.core.$strict>>], "kind">;
+    corruptions: z.ZodReadonly<z.ZodArray<z.ZodReadonly<z.ZodObject<{
+        document: z.ZodEnum<{
+            hostConfig: "hostConfig";
+            installedUser: "installedUser";
+            pointers: "pointers";
+            portableProject: "portableProject";
+            projectLocal: "projectLocal";
+            trust: "trust";
+        }>;
+        scope: z.ZodDiscriminatedUnion<[z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"user">;
+        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"project">;
+            projectKey: z.core.$ZodBranded<z.ZodString, "ProjectKey", "out">;
+        }, z.core.$strict>>], "kind">;
+        code: z.ZodEnum<{
+            [x: string]: string;
+        }>;
+        recordIdentity: z.ZodOptional<z.ZodUnion<readonly [z.core.$ZodBranded<z.ZodString, "MarketplaceName", "out">, z.core.$ZodBranded<z.ZodString, "PluginKey", "out">, z.core.$ZodBranded<z.ZodString, "TrustSubjectRef", "out">]>>;
+        location: z.ZodOptional<z.ZodUnion<readonly [z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"field">;
+            id: z.ZodEnum<{
+                [x: string]: string;
+            }>;
+        }, z.core.$strict>>, z.ZodReadonly<z.ZodObject<{
+            kind: z.ZodLiteral<"pointer">;
+            value: z.ZodString;
+        }, z.core.$strict>>]>>;
+        summary: z.ZodEnum<{
+            [x: string]: string;
+        }>;
+    }, z.core.$strict>>>>;
+}, z.core.$strict>>;
+export type { Generation, HostConfigDocument, InstalledUserStateDocument, ProjectLocalStateDocument, StateCorruption, StatePointersDocument, TrustStateDocument, };