Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Agent kind identifier
Request body for PUT /agent-configs/{kind}. Full-replace semantics —
any field omitted from the body reverts to NULL / []. BYOK key entry
is a separate endpoint (PUT /agent-configs/{kind}/byok-key) so raw
secrets never flow through the generic upsert path.
Default budget cap in USD cents for a run enqueued under this kind.
Default wall-clock deadline in seconds from run start.
JSON array of guardrail rule primitives. Defaults to [] if omitted.
Cron expression (5-field POSIX, extended with seconds optional).
Config upserted
A single agent_configs row as exposed over the REST API. Deliberately
omits byok_key_ref and byok_key_version — those never cross the
API boundary.