​
Top-level fields

FieldTypeNotes
version1Configuration version
namestringProject identifier
runtimepiCurrent hosted runtime
imageobjectManaged image configuration
agentobjectAgent identity and active state
runtimeConfigobjectRegion, egress, telemetry and workspace policy
envmapNon-secret environment values
secretsmapValues loaded from deployer environment
extensionsarrayHosted extension entrypoints
localobjectOptional local template metadata

​
Image

image:
  mode: managed

​
Agent

agent:
  name: My Agent
  slug: my-agent
  description: General-purpose agent.
  icon: 🤖
  isActive: true
Prompts and instructions are not accepted here. Use agent/system.md, skills and prompt templates.

​
Runtime configuration

runtimeConfig:
  sandboxRegion: eu
  egressPolicyMode: restricted
  egressAllowlist:
    - api.openai.com
  otlpEndpointOverride: null
  otelIncludeContentOverride: null
  workspaceUpgradePolicy: automatic
FieldValues
sandboxRegionOptional us or eu
egressPolicyModerestricted or full-open
egressAllowlistHost-only values
otlpEndpointOverrideOptional per-deployment OTLP endpoint
otelIncludeContentOverrideOptional content-export override
workspaceUpgradePolicyautomatic or new-run-only

​
Environment values

env:
  APP_MODE:
    value: standard
    description: Application behavior mode.
    exposeTo:
      - runtime
exposeTo contains runtime, sandbox, or both.

​
Secrets

secrets:
  PARTNER_TOKEN:
    fromEnv: PARTNER_TOKEN
    description: Partner API credential.
    allowedHosts:
      - api.partner.example
    exposeTo:
      - sandbox
Sandbox exposure requires at least one allowedHosts entry. Raw secret values are rejected.

​
Extensions

extensions:
  - path: agent/extensions/tools.mjs
    mode: auto
mode is auto, lazy, or eager. Paths must be safe project-relative paths.

​
Unsupported top-level fields

The v1 schema accepts only the documented fields. Deployment records and the platform-owned runtime lifecycle own versioning and runtime preparation.