npm - @sealant/api-contracts-next - Versions diffs - 0.39.0-next.711 → 0.39.0-next.712 - Mend

@sealant/api-contracts-next 0.39.0-next.711 → 0.39.0-next.712

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (2) hide show

package/dist/core-api/control-plane.d.ts +823 -823
package/package.json +2 -2

package/dist/core-api/control-plane.d.ts CHANGED Viewed

@@ -1,19 +1,6 @@
 import { HttpApi } from "effect/unstable/httpapi";
 import { RequestRefusal } from "./request-refusal.js";
-export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi", import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"accessTokens", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listAccessTokens", "GET", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly tokenId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly scopes: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["session:read", "session:input", "workspace:exec"]>>;
-        readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly createdAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createAccessToken", "POST", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi", import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"accessTokens", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createAccessToken", "POST", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly scopes: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["session:read", "session:input", "workspace:exec"]>>;
     readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -29,7 +16,20 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly token: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeAccessToken", "POST", "/v1/access-tokens/:tokenId/revoke", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listAccessTokens", "GET", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly tokenId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly scopes: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["session:read", "session:input", "workspace:exec"]>>;
+        readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeAccessToken", "POST", "/v1/access-tokens/:tokenId/revoke", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly tokenId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -42,29 +42,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"connectedAccounts", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listConnectedAccounts", "GET", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly connectedAccountId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
-        readonly name: import("effect/Schema").String;
-        readonly kind: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["active", "invalid", "archived"]>;
-        readonly metadata: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
-        readonly connectedAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-        readonly lastUsedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly lastSyncedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly credential: import("effect/Schema").Struct<{
-            readonly accessExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-            readonly refreshExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-            readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-            readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
-        }>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveConnectedAccount", "DELETE", "/v1/connected-accounts/:connectedAccountId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"connectedAccounts", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveConnectedAccount", "DELETE", "/v1/connected-accounts/:connectedAccountId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -86,10 +64,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"markConnectedAccountInvalid", "POST", "/v1/connected-accounts/:connectedAccountId/mark-invalid", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly connectedAccountId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createConnectedAccount", "POST", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
+    readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly secret: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
@@ -108,11 +87,32 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createConnectedAccount", "POST", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountBadRequestError | typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountConflictError | typeof import("./connected-accounts.js").ConnectedAccountServiceUnavailableError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listConnectedAccounts", "GET", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly connectedAccountId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
+        readonly name: import("effect/Schema").String;
+        readonly kind: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "invalid", "archived"]>;
+        readonly metadata: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly connectedAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+        readonly lastUsedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly lastSyncedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly credential: import("effect/Schema").Struct<{
+            readonly accessExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+            readonly refreshExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+            readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+            readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
+        }>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"markConnectedAccountInvalid", "POST", "/v1/connected-accounts/:connectedAccountId/mark-invalid", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly connectedAccountId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
-    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly secret: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
@@ -131,19 +131,14 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountBadRequestError | typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountConflictError | typeof import("./connected-accounts.js").ConnectedAccountServiceUnavailableError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"github", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallations", "GET", "/v1/github/installations", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly userId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly installationId: import("effect/Schema").String;
-        readonly externalInstallationId: import("effect/Schema").String;
-        readonly accountLogin: import("effect/Schema").String;
-        readonly accountType: import("effect/Schema").Literals<readonly ["organization", "user"]>;
-        readonly status: import("effect/Schema").Literals<readonly ["active", "suspended", "deleted"]>;
-        readonly repositorySelection: import("effect/Schema").Literals<readonly ["all", "selected"]>;
-        readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"importInstallation", "POST", "/v1/github/installations/import", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"github", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"handleWebhook", "POST", "/v1/github/webhooks", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").String>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly "x-github-delivery": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-github-event": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-hub-signature-256": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly deliveryId: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["received", "processed", "failed", "ignored"]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubBadRequestError | typeof import("./github.js").GitHubUnauthorizedError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"importInstallation", "POST", "/v1/github/installations/import", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
     readonly externalInstallationId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -158,14 +153,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     }>;
     readonly syncedRepositoryCount: import("effect/Schema").Number;
     readonly syncedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"handleWebhook", "POST", "/v1/github/webhooks", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").String>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "x-github-delivery": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-github-event": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-hub-signature-256": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly deliveryId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["received", "processed", "failed", "ignored"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubBadRequestError | typeof import("./github.js").GitHubUnauthorizedError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallationRepositories", "GET", "/v1/github/installations/:installationId/repositories", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallationRepositories", "GET", "/v1/github/installations/:installationId/repositories", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly installationId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
@@ -184,7 +172,19 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly isArchived: import("effect/Schema").Boolean;
         readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubForbiddenError | typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"syncInstallation", "POST", "/v1/github/installations/:installationId/sync", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubForbiddenError | typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallations", "GET", "/v1/github/installations", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly installationId: import("effect/Schema").String;
+        readonly externalInstallationId: import("effect/Schema").String;
+        readonly accountLogin: import("effect/Schema").String;
+        readonly accountType: import("effect/Schema").Literals<readonly ["organization", "user"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "suspended", "deleted"]>;
+        readonly repositorySelection: import("effect/Schema").Literals<readonly ["all", "selected"]>;
+        readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"syncInstallation", "POST", "/v1/github/installations/:installationId/sync", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly installationId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
@@ -285,21 +285,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     }>>;
     readonly fetchedAt: import("effect/Schema").String;
     readonly expiresAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./packages.js").PackagesBadGatewayError | typeof import("./packages.js").PackagesInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"profiles", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfiles", "GET", "/v1/profiles/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly profileId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly slug: import("effect/Schema").String;
-        readonly name: import("effect/Schema").String;
-        readonly description: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly status: import("effect/Schema").Literals<readonly ["active", "archived"]>;
-        readonly activeRevisionId: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfileCredentialBindings", "GET", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./packages.js").PackagesBadGatewayError | typeof import("./packages.js").PackagesInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"profiles", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfileCredentialBindings", "GET", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly profileId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -328,7 +314,21 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
             }>;
         }>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileNotFoundError | typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"setProfileCredentialBinding", "PUT", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileNotFoundError | typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfiles", "GET", "/v1/profiles/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly profileId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly slug: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+        readonly description: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "archived"]>;
+        readonly activeRevisionId: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"setProfileCredentialBinding", "PUT", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly profileId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -366,16 +366,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly baseUrl: import("effect/Schema").String;
     readonly pushRegistry: import("effect/Schema").String;
     readonly hasBasicAuth: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRegistryExtensions", "GET", "/v1/registries/:registryId/extensions", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly registryId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly extensions: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly name: import("effect/Schema").String;
-        readonly url: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly description: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly endpoints: import("effect/Schema").$Array<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRegistryManifest", "GET", "/v1/registries/:registryId/manifest", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRegistryManifest", "GET", "/v1/registries/:registryId/manifest", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly registryId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly repository: import("effect/Schema").String;
@@ -386,11 +377,15 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly digest: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly contentType: import("effect/Schema").Union<readonly [import("effect/Schema").String, import("effect/Schema").Null]>;
     readonly manifest: import("effect/Schema").Unknown;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"pingRegistry", "GET", "/v1/registries/:registryId/ping", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRegistryExtensions", "GET", "/v1/registries/:registryId/extensions", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly registryId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly name: import("effect/Schema").String;
-    readonly reachable: import("effect/Schema").Literal<true>;
+    readonly extensions: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly name: import("effect/Schema").String;
+        readonly url: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly description: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly endpoints: import("effect/Schema").$Array<import("effect/Schema").String>;
+    }>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRegistryTags", "GET", "/v1/registries/:registryId/tags", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly registryId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -398,70 +393,50 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly repository: import("effect/Schema").String;
     readonly tags: import("effect/Schema").$Array<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"runs", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRuns", "GET", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly runId: import("effect/Schema").String;
-        readonly workspaceId: import("effect/Schema").String;
-        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly harnessId: import("effect/Schema").String;
-        readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-        readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly executable: import("effect/Schema").String;
-            readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-            readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-        }>>;
-        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-        readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunChanges", "GET", "/v1/runs/:runId/changes", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly files: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly path: import("effect/Schema").String;
-        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
-        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"pingRegistry", "GET", "/v1/registries/:registryId/ping", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly registryId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly name: import("effect/Schema").String;
+    readonly reachable: import("effect/Schema").Literal<true>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"runs", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createRun", "POST", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-    readonly diff: import("effect/Schema").String;
-    readonly available: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly unavailableReason: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunLoss", "GET", "/v1/runs/:runId/loss", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
-    readonly droppedEventCount: import("effect/Schema").String;
-    readonly sequenceGapCount: import("effect/Schema").Number;
-    readonly watchOverflowCount: import("effect/Schema").Number;
-    readonly earlyClose: import("effect/Schema").Boolean;
-    readonly spans: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literals<readonly ["dropped_event", "sequence_gap", "watch_overflow", "early_close"]>;
-        readonly fromSequence: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly toSequence: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly droppedCount: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly detectedVia: import("effect/Schema").Literals<readonly ["marker", "gap"]>;
-        readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRun", "GET", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRun", "GET", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -490,16 +465,29 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunEvent", "GET", "/v1/runs/:runId/events/:sequence", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunChanges", "GET", "/v1/runs/:runId/changes", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
-    readonly sequence: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly eventId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly runtimeId: import("effect/Schema").String;
-    readonly executionId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly files: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly path: import("effect/Schema").String;
+        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
+        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly diff: import("effect/Schema").String;
+    readonly available: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly unavailableReason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunEvent", "GET", "/v1/runs/:runId/events/:sequence", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly sequence: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly eventId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
+    readonly runtimeId: import("effect/Schema").String;
+    readonly executionId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly sessionId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly processId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly requestId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -512,7 +500,25 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly payloadCase: import("effect/Schema").String;
     readonly payload: import("effect/Schema").Unknown;
     readonly ingestedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunScrollback", "GET", "/v1/runs/:runId/scrollback", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunLoss", "GET", "/v1/runs/:runId/loss", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly droppedEventCount: import("effect/Schema").String;
+    readonly sequenceGapCount: import("effect/Schema").Number;
+    readonly watchOverflowCount: import("effect/Schema").Number;
+    readonly earlyClose: import("effect/Schema").Boolean;
+    readonly spans: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literals<readonly ["dropped_event", "sequence_gap", "watch_overflow", "early_close"]>;
+        readonly fromSequence: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly toSequence: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly droppedCount: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly detectedVia: import("effect/Schema").Literals<readonly ["marker", "gap"]>;
+        readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunScrollback", "GET", "/v1/runs/:runId/scrollback", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -546,7 +552,39 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly captureMethod: import("effect/Schema").Number;
         readonly confidence: import("effect/Schema").Number;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"updateRun", "PATCH", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRuns", "GET", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly runId: import("effect/Schema").String;
+        readonly workspaceId: import("effect/Schema").String;
+        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly harnessId: import("effect/Schema").String;
+        readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+        readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly executable: import("effect/Schema").String;
+            readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+            readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+        }>>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+        readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"updateRun", "PATCH", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -585,78 +623,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createRun", "POST", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-    readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-    }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sessions", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSessions", "GET", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly sessionId: import("effect/Schema").String;
-        readonly workspaceId: import("effect/Schema").String;
-        readonly runId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
-        readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly cols: import("effect/Schema").Number;
-        readonly rows: import("effect/Schema").Number;
-        readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
-        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly exitSignal: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-        readonly outputHighWater: import("effect/Schema").String;
-        readonly createdAt: import("effect/Schema").String;
-        readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSession", "GET", "/v1/sessions/:sessionId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sessions", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"closeSession", "POST", "/v1/sessions/:sessionId/close", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
@@ -678,26 +649,18 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSessionOutput", "GET", "/v1/sessions/:sessionId/output", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly from: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-    readonly chunks: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly sequence: import("effect/Schema").String;
-        readonly dataBase64: import("effect/Schema").String;
-    }>>;
-    readonly nextFrom: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"closeSession", "POST", "/v1/sessions/:sessionId/close", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSession", "POST", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly env: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly cols: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly rows: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -720,7 +683,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSession", "POST", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSessionAsUser", "POST", "/v1/sessions/as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
     readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
@@ -731,7 +694,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
     readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly user: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -754,47 +717,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"sendSessionInput", "POST", "/v1/sessions/:sessionId/input", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly dataBase64: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ok: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resizeSession", "POST", "/v1/sessions/:sessionId/resize", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSession", "GET", "/v1/sessions/:sessionId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly cols: import("effect/Schema").Int;
-    readonly rows: import("effect/Schema").Int;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ok: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"signalSession", "POST", "/v1/sessions/:sessionId/signal", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly signal: import("effect/Schema").Int;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ok: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSessionAsUser", "POST", "/v1/sessions/as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
-    readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly env: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-    readonly cols: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly rows: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
@@ -816,23 +743,85 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sshKeys", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSshKeys", "GET", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSessionOutput", "GET", "/v1/sessions/:sessionId/output", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly from: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+    readonly chunks: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sequence: import("effect/Schema").String;
+        readonly dataBase64: import("effect/Schema").String;
+    }>>;
+    readonly nextFrom: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSessions", "GET", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly sshKeyId: import("effect/Schema").String;
+        readonly sessionId: import("effect/Schema").String;
+        readonly workspaceId: import("effect/Schema").String;
+        readonly runId: import("effect/Schema").String;
         readonly ownerUserId: import("effect/Schema").String;
-        readonly name: import("effect/Schema").String;
-        readonly algorithm: import("effect/Schema").String;
-        readonly fingerprint: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
+        readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly cols: import("effect/Schema").Number;
+        readonly rows: import("effect/Schema").Number;
+        readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
+        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly exitSignal: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+        readonly outputHighWater: import("effect/Schema").String;
         readonly createdAt: import("effect/Schema").String;
+        readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveSshKey", "DELETE", "/v1/ssh-keys/:sshKeyId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sshKeyId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly sshKeyId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resizeSession", "POST", "/v1/sessions/:sessionId/resize", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly cols: import("effect/Schema").Int;
+    readonly rows: import("effect/Schema").Int;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ok: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"sendSessionInput", "POST", "/v1/sessions/:sessionId/input", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly dataBase64: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ok: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"signalSession", "POST", "/v1/sessions/:sessionId/signal", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly signal: import("effect/Schema").Int;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ok: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sshKeys", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveSshKey", "DELETE", "/v1/ssh-keys/:sshKeyId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sshKeyId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly sshKeyId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
     readonly algorithm: import("effect/Schema").String;
@@ -849,7 +838,18 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly algorithm: import("effect/Schema").String;
     readonly fingerprint: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyBadRequestError | typeof import("./ssh-keys.js").SshKeyNotFoundError | typeof import("./ssh-keys.js").SshKeyConflictError | typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resolveSshPrincipal", "POST", "/v1/ssh-keys/resolve-principal", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyBadRequestError | typeof import("./ssh-keys.js").SshKeyNotFoundError | typeof import("./ssh-keys.js").SshKeyConflictError | typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSshKeys", "GET", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sshKeyId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+        readonly algorithm: import("effect/Schema").String;
+        readonly fingerprint: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resolveSshPrincipal", "POST", "/v1/ssh-keys/resolve-principal", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly algo: import("effect/Schema").String;
     readonly publicKeyBase64: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -871,10 +871,6 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly credentialsPiOpencode: import("effect/Schema").optional<import("effect/Schema").Boolean>;
         readonly captureOwnerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"health", "GET", "/healthz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly status: import("effect/Schema").Literal<"ok">;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ready", "GET", "/readyz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly status: import("effect/Schema").Literal<"ok">;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSetupState", "GET", "/v1/system/setup-state", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly needsSetup: import("effect/Schema").Boolean;
     readonly sshGateway: import("effect/Schema").NullOr<import("effect/Schema").Struct<{
@@ -882,7 +878,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly port: import("effect/Schema").Number;
         readonly usernamePrefix: import("effect/Schema").String;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./system.js").SystemInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"users", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ensureUser", "POST", "/v1/users/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./system.js").SystemInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"health", "GET", "/healthz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly status: import("effect/Schema").Literal<"ok">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ready", "GET", "/readyz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly status: import("effect/Schema").Literal<"ok">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"users", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ensureUser", "POST", "/v1/users/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly email: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
     readonly userId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -899,75 +899,64 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly email: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"workspaces", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaces", "GET", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"workspaces", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"applyWorkspaceDotfiles", "POST", "/v1/workspaces/:workspaceId/dotfiles", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly workspaceId: import("effect/Schema").String;
-        readonly name: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-        readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-            readonly resourceId: import("effect/Schema").String;
-            readonly reference: import("effect/Schema").String;
-            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
-            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly reference: import("effect/Schema").String;
-            readonly digestReference: import("effect/Schema").String;
-            readonly digest: import("effect/Schema").String;
-            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly runtime: import("effect/Schema").String;
-                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            }>>;
-        }>>;
-        readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
-        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly message: import("effect/Schema").String;
-            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
-            readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
-                readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
-                readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
-                readonly progressAt: import("effect/Schema").String;
-                readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
-            }>>;
-        }>>;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly onBehalfOfUserId: import("effect/Schema").String;
+    readonly user: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly url: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
+        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCreate", "GET", "/v1/workspaces/idempotency-keys/:idempotencyKey", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly archives: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly data: import("effect/Schema").String;
+        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
+        readonly target: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["home", "config"]>>;
+        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"cancelWorkspaceCreate", "POST", "/v1/workspaces/idempotency-keys/:idempotencyKey/cancel", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+    }>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindWorkspace", "POST", "/v1/workspaces/:workspaceId/bind", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly mountPath: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly subpath: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly binds: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly mountPath: import("effect/Schema").String;
+        readonly subpath: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"cancelWorkspaceCreate", "POST", "/v1/workspaces/idempotency-keys/:idempotencyKey/cancel", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly idempotencyKey: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -977,18 +966,46 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspace", "GET", "/v1/workspaces/:workspaceId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createWorkspace", "POST", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly registryId: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").String;
+    readonly tag: import("effect/Schema").String;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly sourceSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly provider: import("effect/Schema").Literal<"github">;
+        readonly installationId: import("effect/Schema").String;
+        readonly installationRepositoryId: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly dotfilesSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly provider: import("effect/Schema").Literal<"github">;
+        readonly installationId: import("effect/Schema").String;
+        readonly installationRepositoryId: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly profileId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly claude: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly codex: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly github: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly spec: import("effect/Schema").Unknown;
+    readonly secretEnv: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly captureToken: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly "idempotency-key": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").String;
     readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-    readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly registryId: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").String;
+    readonly tag: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
         readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
         readonly resourceId: import("effect/Schema").String;
@@ -999,33 +1016,192 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly reference: import("effect/Schema").String;
-        readonly digestReference: import("effect/Schema").String;
-        readonly digest: import("effect/Schema").String;
-        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly runtime: import("effect/Schema").String;
-            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        }>>;
-    }>>;
-    readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
-    readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly message: import("effect/Schema").String;
-        readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly replayed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceRuntimeEnvReferencesUnsupportedError | typeof import("./workspaces.js").WorkspaceDockerServiceUnsupportedError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspace", "POST", "/v1/workspaces/:workspaceId/exec", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-    readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
-        readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
-            readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
-            readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly progressAt: import("effect/Schema").String;
-            readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
-        }>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+    }>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspaceAsUser", "POST", "/v1/workspaces/:workspaceId/exec-as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly user: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+    }>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"expireWorkspace", "POST", "/v1/workspaces/:workspaceId/expire", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Int>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly expiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"flushWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/flush", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly kind: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["final", "suspend"]>>;
+    readonly deadlineMs: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly graceMs: import("effect/Schema").optional<import("effect/Schema").Int>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly epoch: import("effect/Schema").Number;
+    readonly worktreeId: import("effect/Schema").String;
+    readonly headN: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly pending: import("effect/Schema").Number;
+    readonly stagedBytes: import("effect/Schema").Number;
+    readonly uploadedObjects: import("effect/Schema").Number;
+    readonly uploadedBytes: import("effect/Schema").Number;
+    readonly registered: import("effect/Schema").Number;
+    readonly fenced: import("effect/Schema").Boolean;
+    readonly paused: import("effect/Schema").Boolean;
+    readonly lastSnapUnixMs: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly refused: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["small", "bulk"]>>>;
+    readonly pendingBytes: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly pendingBulk: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly complete: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly incompleteReason: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly unreadable: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly carried: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly unreadablePaths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    readonly registerRefused: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly registerRefusedN: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly registerMissing: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+    readonly registerRefusals: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly repairing: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly bulkBuilding: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly snaps: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly class: import("effect/Schema").Literals<readonly ["small", "bulk"]>;
+        readonly snapsFailed: import("effect/Schema").Number;
+        readonly lastSnapError: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly snapFailingSinceUnixMs: import("effect/Schema").optional<import("effect/Schema").Number>;
+    }>>>;
+    readonly lastSnapError: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly snapFailingSinceUnixMs: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly snapsFailed: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly epoch: import("effect/Schema").Int;
+        readonly launch: import("effect/Schema").String;
+        readonly bootId: import("effect/Schema").String;
+        readonly bootGeneration: import("effect/Schema").Int;
+        readonly observation: import("effect/Schema").Int;
+        readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
+    }>>;
+    readonly overdue: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly step: import("effect/Schema").String;
+        readonly startedUnixMs: import("effect/Schema").Number;
+        readonly runningMs: import("effect/Schema").Number;
+        readonly boundMs: import("effect/Schema").Number;
+    }>>;
+    readonly ownerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspace", "GET", "/v1/workspaces/:workspaceId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+    readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+        readonly resourceId: import("effect/Schema").String;
+        readonly reference: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
+        readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+        readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly reference: import("effect/Schema").String;
+        readonly digestReference: import("effect/Schema").String;
+        readonly digest: import("effect/Schema").String;
+        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly runtime: import("effect/Schema").String;
+            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        }>>;
+    }>>;
+    readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
+    readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly message: import("effect/Schema").String;
+        readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
+        readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
+            readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
+            readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly progressAt: import("effect/Schema").String;
+            readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
+        }>>;
     }>>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
@@ -1074,111 +1250,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
             }>>;
         }>>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"renameWorkspace", "PATCH", "/v1/workspaces/:workspaceId/name", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly name: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly name: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceAttempts", "GET", "/v1/workspaces/:workspaceId/attempts", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly attemptId: import("effect/Schema").String;
-        readonly relation: import("effect/Schema").Literals<readonly ["launch", "rebuild", "retry", "resume"]>;
-        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-        readonly triggerType: import("effect/Schema").Literals<readonly ["manual", "schedule", "api", "retry"]>;
-        readonly triggerRef: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-            readonly resourceId: import("effect/Schema").String;
-            readonly reference: import("effect/Schema").String;
-            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
-            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly reference: import("effect/Schema").String;
-            readonly digestReference: import("effect/Schema").String;
-            readonly digest: import("effect/Schema").String;
-            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly runtime: import("effect/Schema").String;
-                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            }>>;
-        }>>;
-        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly message: import("effect/Schema").String;
-            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly spec: import("effect/Schema").optional<import("effect/Schema").Unknown>;
-        readonly queuedAt: import("effect/Schema").String;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-        readonly linkedAt: import("effect/Schema").String;
-        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly durationMs: import("effect/Schema").optional<import("effect/Schema").Number>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceEvents", "GET", "/v1/workspaces/:workspaceId/events", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly eventId: import("effect/Schema").String;
-        readonly workspaceId: import("effect/Schema").String;
-        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly type: import("effect/Schema").Literals<readonly ["workspace.created", "attempt.queued", "attempt.running", "attempt.succeeded", "attempt.failed", "attempt.cancelled", "image.published", "runtime.pending", "runtime.running", "runtime.ready", "runtime.failed", "runtime.stopped"]>;
-        readonly occurredAt: import("effect/Schema").String;
-        readonly message: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly data: import("effect/Schema").optional<import("effect/Schema").Unknown>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"expireWorkspace", "POST", "/v1/workspaces/:workspaceId/expire", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Int>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly expiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"inspectWorkspaceImage", "POST", "/v1/workspaces/image", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly registryId: import("effect/Schema").String;
-    readonly spec: import("effect/Schema").Unknown;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly planHash: import("effect/Schema").String;
-    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly reference: import("effect/Schema").String;
-        readonly digestReference: import("effect/Schema").String;
-        readonly digest: import("effect/Schema").String;
-        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly runtime: import("effect/Schema").String;
-            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        }>>;
-    }>>;
-    readonly personLayout: import("effect/Schema").Struct<{
-        readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly runtime: import("effect/Schema").String;
-        readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-    }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCaptureStatus", "GET", "/v1/workspaces/:workspaceId/capture", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCaptureStatus", "GET", "/v1/workspaces/:workspaceId/capture", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1232,106 +1304,104 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly boundMs: import("effect/Schema").Number;
     }>>;
     readonly ownerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindWorkspace", "POST", "/v1/workspaces/:workspaceId/bind", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCreate", "GET", "/v1/workspaces/idempotency-keys/:idempotencyKey", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly mountPath: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly subpath: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly binds: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly mountPath: import("effect/Schema").String;
-        readonly subpath: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"flushWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/flush", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
+    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceSshTarget", "GET", "/v1/workspaces/:workspaceId/ssh-target", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly "x-sealant-gateway-token": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-sealant-principal-id": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").String;
+    readonly runtime: import("effect/Schema").Struct<{
+        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+        readonly resourceId: import("effect/Schema").String;
+        readonly reference: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped"]>;
+        readonly endpoint: import("effect/Schema").String;
+    }>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceUnauthorizedError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"inspectWorkspaceImage", "POST", "/v1/workspaces/image", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly kind: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["final", "suspend"]>>;
-    readonly deadlineMs: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly graceMs: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly registryId: import("effect/Schema").String;
+    readonly spec: import("effect/Schema").Unknown;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly epoch: import("effect/Schema").Number;
-    readonly worktreeId: import("effect/Schema").String;
-    readonly headN: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly pending: import("effect/Schema").Number;
-    readonly stagedBytes: import("effect/Schema").Number;
-    readonly uploadedObjects: import("effect/Schema").Number;
-    readonly uploadedBytes: import("effect/Schema").Number;
-    readonly registered: import("effect/Schema").Number;
-    readonly fenced: import("effect/Schema").Boolean;
-    readonly paused: import("effect/Schema").Boolean;
-    readonly lastSnapUnixMs: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly refused: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["small", "bulk"]>>>;
-    readonly pendingBytes: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly pendingBulk: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly complete: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly incompleteReason: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly unreadable: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly carried: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly unreadablePaths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
-    readonly registerRefused: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly registerRefusedN: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly registerMissing: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
-    readonly registerRefusals: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly repairing: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly bulkBuilding: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly snaps: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly class: import("effect/Schema").Literals<readonly ["small", "bulk"]>;
-        readonly snapsFailed: import("effect/Schema").Number;
-        readonly lastSnapError: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly snapFailingSinceUnixMs: import("effect/Schema").optional<import("effect/Schema").Number>;
-    }>>>;
-    readonly lastSnapError: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly snapFailingSinceUnixMs: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly snapsFailed: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly epoch: import("effect/Schema").Int;
-        readonly launch: import("effect/Schema").String;
-        readonly bootId: import("effect/Schema").String;
-        readonly bootGeneration: import("effect/Schema").Int;
-        readonly observation: import("effect/Schema").Int;
-        readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
-    }>>;
-    readonly overdue: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly step: import("effect/Schema").String;
-        readonly startedUnixMs: import("effect/Schema").Number;
-        readonly runningMs: import("effect/Schema").Number;
-        readonly boundMs: import("effect/Schema").Number;
+    readonly planHash: import("effect/Schema").String;
+    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly reference: import("effect/Schema").String;
+        readonly digestReference: import("effect/Schema").String;
+        readonly digest: import("effect/Schema").String;
+        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly runtime: import("effect/Schema").String;
+            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        }>>;
     }>>;
-    readonly ownerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"replanWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/replan", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly personLayout: import("effect/Schema").Struct<{
+        readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly runtime: import("effect/Schema").String;
+        readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+    }>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceAttempts", "GET", "/v1/workspaces/:workspaceId/attempts", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly expectedOwnerMap: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
-        readonly gid: import("effect/Schema").Number;
-        readonly worktreeUid: import("effect/Schema").Number;
-        readonly people: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-            readonly id: import("effect/Schema").String;
-            readonly uid: import("effect/Schema").Number;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly attemptId: import("effect/Schema").String;
+        readonly relation: import("effect/Schema").Literals<readonly ["launch", "rebuild", "retry", "resume"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+        readonly triggerType: import("effect/Schema").Literals<readonly ["manual", "schedule", "api", "retry"]>;
+        readonly triggerRef: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+            readonly resourceId: import("effect/Schema").String;
+            readonly reference: import("effect/Schema").String;
+            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
+            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
         }>>;
-    }>>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly worktreeId: import("effect/Schema").String;
-    readonly epoch: import("effect/Schema").Number;
-    readonly headN: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly headCaptureId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly filesWritten: import("effect/Schema").Number;
-    readonly bytesWritten: import("effect/Schema").Number;
-    readonly filesSkipped: import("effect/Schema").Number;
-    readonly bytesSkipped: import("effect/Schema").Number;
-    readonly removed: import("effect/Schema").Number;
-    readonly unchanged: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"recoverWorkspace", "POST", "/v1/workspaces/:workspaceId/recover", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly state: import("effect/Schema").Literals<readonly ["requested", "not-retained"]>;
-    readonly recoverable: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceCredentials", "GET", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly reference: import("effect/Schema").String;
+            readonly digestReference: import("effect/Schema").String;
+            readonly digest: import("effect/Schema").String;
+            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly runtime: import("effect/Schema").String;
+                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            }>>;
+        }>>;
+        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly message: import("effect/Schema").String;
+            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly spec: import("effect/Schema").optional<import("effect/Schema").Unknown>;
+        readonly queuedAt: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+        readonly linkedAt: import("effect/Schema").String;
+        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly durationMs: import("effect/Schema").optional<import("effect/Schema").Number>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceCredentials", "GET", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1364,137 +1434,80 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
             }>>;
         }>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspace", "POST", "/v1/workspaces/:workspaceId/exec", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceEvents", "GET", "/v1/workspaces/:workspaceId/events", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-    }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspaceAsUser", "POST", "/v1/workspaces/:workspaceId/exec-as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly user: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-    readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly eventId: import("effect/Schema").String;
+        readonly workspaceId: import("effect/Schema").String;
+        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literals<readonly ["workspace.created", "attempt.queued", "attempt.running", "attempt.succeeded", "attempt.failed", "attempt.cancelled", "image.published", "runtime.pending", "runtime.running", "runtime.ready", "runtime.failed", "runtime.stopped"]>;
+        readonly occurredAt: import("effect/Schema").String;
+        readonly message: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly data: import("effect/Schema").optional<import("effect/Schema").Unknown>;
     }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"stopWorkspace", "POST", "/v1/workspaces/:workspaceId/stop", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaces", "GET", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly discardUnsaved: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly captureN: import("effect/Schema").Int;
-        readonly epoch: import("effect/Schema").Int;
-        readonly executorId: import("effect/Schema").String;
-        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly sealedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly epoch: import("effect/Schema").Int;
-            readonly launch: import("effect/Schema").String;
-            readonly bootId: import("effect/Schema").String;
-            readonly bootGeneration: import("effect/Schema").Int;
-            readonly observation: import("effect/Schema").Int;
-            readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly workspaceId: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+        readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+            readonly resourceId: import("effect/Schema").String;
+            readonly reference: import("effect/Schema").String;
+            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
+            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
         }>>;
+        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly reference: import("effect/Schema").String;
+            readonly digestReference: import("effect/Schema").String;
+            readonly digest: import("effect/Schema").String;
+            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly runtime: import("effect/Schema").String;
+                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            }>>;
+        }>>;
+        readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
+        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly message: import("effect/Schema").String;
+            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
+            readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
+                readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
+                readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly progressAt: import("effect/Schema").String;
+                readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
+            }>>;
+        }>>;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly outcome: import("effect/Schema").Literals<readonly ["accepted", "ignored"]>;
-        readonly detail: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceSshTarget", "GET", "/v1/workspaces/:workspaceId/ssh-target", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "x-sealant-gateway-token": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-sealant-principal-id": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").String;
-    readonly runtime: import("effect/Schema").Struct<{
-        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-        readonly resourceId: import("effect/Schema").String;
-        readonly reference: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped"]>;
-        readonly endpoint: import("effect/Schema").String;
-    }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceUnauthorizedError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"restartWorkspace", "POST", "/v1/workspaces/:workspaceId/restart", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"releaseWorkspaceCredentials", "DELETE", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-    readonly released: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1542,102 +1555,89 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly code: import("effect/Schema").Literals<readonly ["connected-account-missing", "connected-account-invalid", "connected-account-unsupported", "login-file-unusable"]>;
         readonly message: import("effect/Schema").String;
     }>>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"applyWorkspaceDotfiles", "POST", "/v1/workspaces/:workspaceId/dotfiles", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"recoverWorkspace", "POST", "/v1/workspaces/:workspaceId/recover", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly onBehalfOfUserId: import("effect/Schema").String;
-    readonly user: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly state: import("effect/Schema").Literals<readonly ["requested", "not-retained"]>;
+    readonly recoverable: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"releaseWorkspaceCredentials", "DELETE", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
     readonly home: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly url: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
-        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly archives: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly data: import("effect/Schema").String;
-        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
-        readonly target: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["home", "config"]>>;
-        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+    readonly released: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"renameWorkspace", "PATCH", "/v1/workspaces/:workspaceId/name", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly name: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"replanWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/replan", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly expectedOwnerMap: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
+        readonly gid: import("effect/Schema").Number;
+        readonly worktreeUid: import("effect/Schema").Number;
+        readonly people: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly id: import("effect/Schema").String;
+            readonly uid: import("effect/Schema").Number;
+        }>>;
     }>>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
+    readonly worktreeId: import("effect/Schema").String;
+    readonly epoch: import("effect/Schema").Number;
+    readonly headN: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly headCaptureId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly filesWritten: import("effect/Schema").Number;
+    readonly bytesWritten: import("effect/Schema").Number;
+    readonly filesSkipped: import("effect/Schema").Number;
+    readonly bytesSkipped: import("effect/Schema").Number;
+    readonly removed: import("effect/Schema").Number;
+    readonly unchanged: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"restartWorkspace", "POST", "/v1/workspaces/:workspaceId/restart", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-    }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createWorkspace", "POST", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"stopWorkspace", "POST", "/v1/workspaces/:workspaceId/stop", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly registryId: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").String;
-    readonly tag: import("effect/Schema").String;
-    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly sourceSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly provider: import("effect/Schema").Literal<"github">;
-        readonly installationId: import("effect/Schema").String;
-        readonly installationRepositoryId: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly dotfilesSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly provider: import("effect/Schema").Literal<"github">;
-        readonly installationId: import("effect/Schema").String;
-        readonly installationRepositoryId: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly profileId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly claude: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly codex: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly github: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly discardUnsaved: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly captureN: import("effect/Schema").Int;
+        readonly epoch: import("effect/Schema").Int;
+        readonly executorId: import("effect/Schema").String;
+        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly sealedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly epoch: import("effect/Schema").Int;
+            readonly launch: import("effect/Schema").String;
+            readonly bootId: import("effect/Schema").String;
+            readonly bootGeneration: import("effect/Schema").Int;
+            readonly observation: import("effect/Schema").Int;
+            readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
+        }>>;
     }>>;
-    readonly spec: import("effect/Schema").Unknown;
-    readonly secretEnv: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-    readonly captureToken: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "idempotency-key": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
-    readonly name: import("effect/Schema").String;
     readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-    readonly registryId: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").String;
-    readonly tag: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-        readonly resourceId: import("effect/Schema").String;
-        readonly reference: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
-        readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-        readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly outcome: import("effect/Schema").Literals<readonly ["accepted", "ignored"]>;
+        readonly detail: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-    readonly replayed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceRuntimeEnvReferencesUnsupportedError | typeof import("./workspaces.js").WorkspaceDockerServiceUnsupportedError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never>, false>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never>, false>>;