npm - @sealant/api-contracts-next - Versions diffs - 0.39.0-next.711 → 0.39.0-next.714 - Mend

@sealant/api-contracts-next 0.39.0-next.711 → 0.39.0-next.714

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/dist/core-api/control-plane.d.ts +414 -388
package/dist/core-api/system.d.ts +14 -0
package/dist/core-api/system.js +7 -0
package/dist/core-api/users.d.ts +49 -1
package/dist/core-api/users.js +37 -0
package/dist/core-api/workspaces.d.ts +73 -2
package/dist/core-api/workspaces.js +50 -0
package/package.json +2 -2

package/dist/core-api/control-plane.d.ts CHANGED Viewed

@@ -42,7 +42,29 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"connectedAccounts", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listConnectedAccounts", "GET", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"connectedAccounts", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveConnectedAccount", "DELETE", "/v1/connected-accounts/:connectedAccountId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly connectedAccountId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly connectedAccountId: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
+    readonly name: import("effect/Schema").String;
+    readonly kind: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["active", "invalid", "archived"]>;
+    readonly metadata: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+    readonly connectedAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+    readonly lastUsedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+    readonly lastSyncedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+    readonly credential: import("effect/Schema").Struct<{
+        readonly accessExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly refreshExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
+    }>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listConnectedAccounts", "GET", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
@@ -64,32 +86,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
             readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
         }>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveConnectedAccount", "DELETE", "/v1/connected-accounts/:connectedAccountId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly connectedAccountId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly connectedAccountId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createConnectedAccount", "POST", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
-    readonly name: import("effect/Schema").String;
-    readonly kind: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["active", "invalid", "archived"]>;
-    readonly metadata: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
-    readonly connectedAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-    readonly lastUsedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-    readonly lastSyncedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-    readonly credential: import("effect/Schema").Struct<{
-        readonly accessExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly refreshExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
-    }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"markConnectedAccountInvalid", "POST", "/v1/connected-accounts/:connectedAccountId/mark-invalid", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly connectedAccountId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly secret: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
@@ -108,11 +109,10 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createConnectedAccount", "POST", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountBadRequestError | typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountConflictError | typeof import("./connected-accounts.js").ConnectedAccountServiceUnavailableError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"markConnectedAccountInvalid", "POST", "/v1/connected-accounts/:connectedAccountId/mark-invalid", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly connectedAccountId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
-    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly secret: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
@@ -131,7 +131,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountBadRequestError | typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountConflictError | typeof import("./connected-accounts.js").ConnectedAccountServiceUnavailableError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"github", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallations", "GET", "/v1/github/installations", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"github", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallations", "GET", "/v1/github/installations", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
@@ -143,29 +143,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly repositorySelection: import("effect/Schema").Literals<readonly ["all", "selected"]>;
         readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"importInstallation", "POST", "/v1/github/installations/import", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly userId: import("effect/Schema").String;
-    readonly externalInstallationId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly installation: import("effect/Schema").Struct<{
-        readonly installationId: import("effect/Schema").String;
-        readonly externalInstallationId: import("effect/Schema").String;
-        readonly accountLogin: import("effect/Schema").String;
-        readonly accountType: import("effect/Schema").Literals<readonly ["organization", "user"]>;
-        readonly status: import("effect/Schema").Literals<readonly ["active", "suspended", "deleted"]>;
-        readonly repositorySelection: import("effect/Schema").Literals<readonly ["all", "selected"]>;
-        readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>;
-    readonly syncedRepositoryCount: import("effect/Schema").Number;
-    readonly syncedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"handleWebhook", "POST", "/v1/github/webhooks", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").String>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "x-github-delivery": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-github-event": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-hub-signature-256": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly deliveryId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["received", "processed", "failed", "ignored"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubBadRequestError | typeof import("./github.js").GitHubUnauthorizedError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallationRepositories", "GET", "/v1/github/installations/:installationId/repositories", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallationRepositories", "GET", "/v1/github/installations/:installationId/repositories", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly installationId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
@@ -192,7 +170,29 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly installationId: import("effect/Schema").String;
     readonly syncedRepositoryCount: import("effect/Schema").Number;
     readonly syncedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubForbiddenError | typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"inference", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"respond", "POST", "/v1/inference/respond", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubForbiddenError | typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"importInstallation", "POST", "/v1/github/installations/import", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+    readonly externalInstallationId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly installation: import("effect/Schema").Struct<{
+        readonly installationId: import("effect/Schema").String;
+        readonly externalInstallationId: import("effect/Schema").String;
+        readonly accountLogin: import("effect/Schema").String;
+        readonly accountType: import("effect/Schema").Literals<readonly ["organization", "user"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "suspended", "deleted"]>;
+        readonly repositorySelection: import("effect/Schema").Literals<readonly ["all", "selected"]>;
+        readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>;
+    readonly syncedRepositoryCount: import("effect/Schema").Number;
+    readonly syncedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"handleWebhook", "POST", "/v1/github/webhooks", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").String>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly "x-github-delivery": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-github-event": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-hub-signature-256": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly deliveryId: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["received", "processed", "failed", "ignored"]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubBadRequestError | typeof import("./github.js").GitHubUnauthorizedError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"inference", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"respond", "POST", "/v1/inference/respond", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
         readonly profileId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -430,38 +430,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly createdAt: import("effect/Schema").String;
         readonly updatedAt: import("effect/Schema").String;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunChanges", "GET", "/v1/runs/:runId/changes", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly files: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly path: import("effect/Schema").String;
-        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
-        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly diff: import("effect/Schema").String;
-    readonly available: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly unavailableReason: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunLoss", "GET", "/v1/runs/:runId/loss", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-    readonly droppedEventCount: import("effect/Schema").String;
-    readonly sequenceGapCount: import("effect/Schema").Number;
-    readonly watchOverflowCount: import("effect/Schema").Number;
-    readonly earlyClose: import("effect/Schema").Boolean;
-    readonly spans: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literals<readonly ["dropped_event", "sequence_gap", "watch_overflow", "early_close"]>;
-        readonly fromSequence: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly toSequence: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly droppedCount: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly detectedVia: import("effect/Schema").Literals<readonly ["marker", "gap"]>;
-        readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRun", "GET", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRun", "GET", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -490,7 +459,20 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunEvent", "GET", "/v1/runs/:runId/events/:sequence", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunChanges", "GET", "/v1/runs/:runId/changes", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly files: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly path: import("effect/Schema").String;
+        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
+        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly diff: import("effect/Schema").String;
+    readonly available: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly unavailableReason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunEvent", "GET", "/v1/runs/:runId/events/:sequence", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
     readonly sequence: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -512,7 +494,25 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly payloadCase: import("effect/Schema").String;
     readonly payload: import("effect/Schema").Unknown;
     readonly ingestedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunScrollback", "GET", "/v1/runs/:runId/scrollback", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunLoss", "GET", "/v1/runs/:runId/loss", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly droppedEventCount: import("effect/Schema").String;
+    readonly sequenceGapCount: import("effect/Schema").Number;
+    readonly watchOverflowCount: import("effect/Schema").Number;
+    readonly earlyClose: import("effect/Schema").Boolean;
+    readonly spans: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literals<readonly ["dropped_event", "sequence_gap", "watch_overflow", "early_close"]>;
+        readonly fromSequence: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly toSequence: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly droppedCount: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly detectedVia: import("effect/Schema").Literals<readonly ["marker", "gap"]>;
+        readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunScrollback", "GET", "/v1/runs/:runId/scrollback", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -694,10 +694,18 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     }>>;
     readonly nextFrom: import("effect/Schema").String;
     readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"closeSession", "POST", "/v1/sessions/:sessionId/close", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSession", "POST", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly env: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly cols: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly rows: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -720,18 +728,10 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSession", "POST", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
-    readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly env: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-    readonly cols: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly rows: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"closeSession", "POST", "/v1/sessions/:sessionId/close", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -754,7 +754,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"sendSessionInput", "POST", "/v1/sessions/:sessionId/input", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"sendSessionInput", "POST", "/v1/sessions/:sessionId/input", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -816,18 +816,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sshKeys", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSshKeys", "GET", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly sshKeyId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly name: import("effect/Schema").String;
-        readonly algorithm: import("effect/Schema").String;
-        readonly fingerprint: import("effect/Schema").String;
-        readonly createdAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveSshKey", "DELETE", "/v1/ssh-keys/:sshKeyId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sshKeys", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveSshKey", "DELETE", "/v1/ssh-keys/:sshKeyId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sshKeyId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -838,7 +827,18 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly algorithm: import("effect/Schema").String;
     readonly fingerprint: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyNotFoundError | typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSshKey", "POST", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyNotFoundError | typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSshKeys", "GET", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sshKeyId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+        readonly algorithm: import("effect/Schema").String;
+        readonly fingerprint: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSshKey", "POST", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly publicKey: import("effect/Schema").String;
@@ -870,6 +870,8 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly credentialsPartialPut: import("effect/Schema").optional<import("effect/Schema").Boolean>;
         readonly credentialsPiOpencode: import("effect/Schema").optional<import("effect/Schema").Boolean>;
         readonly captureOwnerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly workspaceSshUser: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly personBinding: import("effect/Schema").optional<import("effect/Schema").Boolean>;
     }>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"health", "GET", "/healthz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly status: import("effect/Schema").Literal<"ok">;
@@ -882,7 +884,14 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly port: import("effect/Schema").Number;
         readonly usernamePrefix: import("effect/Schema").String;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./system.js").SystemInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"users", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ensureUser", "POST", "/v1/users/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./system.js").SystemInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"users", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getUser", "GET", "/v1/users/:userId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+    readonly email: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+    readonly createdAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ensureUser", "POST", "/v1/users/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly email: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
     readonly userId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -892,14 +901,38 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly name: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly created: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserBadRequestError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getUser", "GET", "/v1/users/:userId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserBadRequestError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindUserPerson", "POST", "/v1/users/:userId/person", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly id: import("effect/Schema").String;
+    readonly uid: import("effect/Schema").Int;
+    readonly home: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
-    readonly email: import("effect/Schema").String;
-    readonly name: import("effect/Schema").String;
-    readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"workspaces", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaces", "GET", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly person: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly uid: import("effect/Schema").Int;
+        readonly home: import("effect/Schema").String;
+    }>;
+    readonly created: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserPersonConflictError | typeof import("./users.js").UserBadRequestError | typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"workspaces", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"releaseWorkspaceCredentials", "DELETE", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+    readonly released: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"clearWorkspaceSshUser", "DELETE", "/v1/workspaces/:workspaceId/ssh-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly sshUser: import("effect/Schema").Null;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaces", "GET", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>>;
     readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -957,26 +990,6 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCreate", "GET", "/v1/workspaces/idempotency-keys/:idempotencyKey", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"cancelWorkspaceCreate", "POST", "/v1/workspaces/idempotency-keys/:idempotencyKey/cancel", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspace", "GET", "/v1/workspaces/:workspaceId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -1074,15 +1087,6 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
             }>>;
         }>>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"renameWorkspace", "PATCH", "/v1/workspaces/:workspaceId/name", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly name: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly name: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceAttempts", "GET", "/v1/workspaces/:workspaceId/attempts", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -1130,55 +1134,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly durationMs: import("effect/Schema").optional<import("effect/Schema").Number>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceEvents", "GET", "/v1/workspaces/:workspaceId/events", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly eventId: import("effect/Schema").String;
-        readonly workspaceId: import("effect/Schema").String;
-        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly type: import("effect/Schema").Literals<readonly ["workspace.created", "attempt.queued", "attempt.running", "attempt.succeeded", "attempt.failed", "attempt.cancelled", "image.published", "runtime.pending", "runtime.running", "runtime.ready", "runtime.failed", "runtime.stopped"]>;
-        readonly occurredAt: import("effect/Schema").String;
-        readonly message: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly data: import("effect/Schema").optional<import("effect/Schema").Unknown>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"expireWorkspace", "POST", "/v1/workspaces/:workspaceId/expire", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Int>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly expiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"inspectWorkspaceImage", "POST", "/v1/workspaces/image", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly registryId: import("effect/Schema").String;
-    readonly spec: import("effect/Schema").Unknown;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly planHash: import("effect/Schema").String;
-    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly reference: import("effect/Schema").String;
-        readonly digestReference: import("effect/Schema").String;
-        readonly digest: import("effect/Schema").String;
-        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly runtime: import("effect/Schema").String;
-            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        }>>;
-    }>>;
-    readonly personLayout: import("effect/Schema").Struct<{
-        readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly runtime: import("effect/Schema").String;
-        readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-    }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCaptureStatus", "GET", "/v1/workspaces/:workspaceId/capture", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCaptureStatus", "GET", "/v1/workspaces/:workspaceId/capture", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1232,7 +1188,144 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly boundMs: import("effect/Schema").Number;
     }>>;
     readonly ownerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindWorkspace", "POST", "/v1/workspaces/:workspaceId/bind", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceCredentials", "GET", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
+    readonly homes: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly home: import("effect/Schema").String;
+        readonly onBehalfOfUserId: import("effect/Schema").String;
+        readonly accounts: import("effect/Schema").Struct<{
+            readonly claude: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly codex: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly github: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly pi: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly opencode: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+        }>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceEvents", "GET", "/v1/workspaces/:workspaceId/events", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly eventId: import("effect/Schema").String;
+        readonly workspaceId: import("effect/Schema").String;
+        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literals<readonly ["workspace.created", "attempt.queued", "attempt.running", "attempt.succeeded", "attempt.failed", "attempt.cancelled", "image.published", "runtime.pending", "runtime.running", "runtime.ready", "runtime.failed", "runtime.stopped"]>;
+        readonly occurredAt: import("effect/Schema").String;
+        readonly message: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly data: import("effect/Schema").optional<import("effect/Schema").Unknown>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceSshTarget", "GET", "/v1/workspaces/:workspaceId/ssh-target", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly "x-sealant-gateway-token": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-sealant-principal-id": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-sealant-gateway-ssh-user": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").String;
+    readonly runtime: import("effect/Schema").Struct<{
+        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+        readonly resourceId: import("effect/Schema").String;
+        readonly reference: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped"]>;
+        readonly endpoint: import("effect/Schema").String;
+    }>;
+    readonly sessionUser: import("effect/Schema").NullOr<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceUnauthorizedError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCreate", "GET", "/v1/workspaces/idempotency-keys/:idempotencyKey", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
+    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"renameWorkspace", "PATCH", "/v1/workspaces/:workspaceId/name", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly name: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createWorkspace", "POST", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly registryId: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").String;
+    readonly tag: import("effect/Schema").String;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly sourceSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly provider: import("effect/Schema").Literal<"github">;
+        readonly installationId: import("effect/Schema").String;
+        readonly installationRepositoryId: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly dotfilesSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly provider: import("effect/Schema").Literal<"github">;
+        readonly installationId: import("effect/Schema").String;
+        readonly installationRepositoryId: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly profileId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly claude: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly codex: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly github: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly spec: import("effect/Schema").Unknown;
+    readonly secretEnv: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly captureToken: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly sshAsOwner: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly "idempotency-key": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+    readonly registryId: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").String;
+    readonly tag: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+        readonly resourceId: import("effect/Schema").String;
+        readonly reference: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
+        readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+        readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly replayed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceRuntimeEnvReferencesUnsupportedError | typeof import("./workspaces.js").WorkspaceDockerServiceUnsupportedError | typeof import("./workspaces.js").WorkspaceSshOwnerRefusedError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindWorkspace", "POST", "/v1/workspaces/:workspaceId/bind", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1323,22 +1416,24 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly bytesSkipped: import("effect/Schema").Number;
     readonly removed: import("effect/Schema").Number;
     readonly unchanged: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"recoverWorkspace", "POST", "/v1/workspaces/:workspaceId/recover", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
+    readonly onBehalfOfUserId: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+    readonly uid: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly gid: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly claude: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+    readonly codex: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+    readonly github: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+    readonly pi: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+    readonly opencode: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+    readonly partial: import("effect/Schema").optional<import("effect/Schema").Boolean>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly state: import("effect/Schema").Literals<readonly ["requested", "not-retained"]>;
-    readonly recoverable: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceCredentials", "GET", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly runId: import("effect/Schema").String;
-    readonly homes: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+    readonly home: import("effect/Schema").Struct<{
         readonly home: import("effect/Schema").String;
         readonly onBehalfOfUserId: import("effect/Schema").String;
         readonly accounts: import("effect/Schema").Struct<{
@@ -1363,8 +1458,59 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
                 readonly name: import("effect/Schema").String;
             }>>;
         }>;
+    }>;
+    readonly skipped: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+        readonly code: import("effect/Schema").Literals<readonly ["connected-account-missing", "connected-account-invalid", "connected-account-unsupported", "login-file-unusable"]>;
+        readonly message: import("effect/Schema").String;
+    }>>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"applyWorkspaceDotfiles", "POST", "/v1/workspaces/:workspaceId/dotfiles", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly onBehalfOfUserId: import("effect/Schema").String;
+    readonly user: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly url: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
+        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspace", "POST", "/v1/workspaces/:workspaceId/exec", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly archives: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly data: import("effect/Schema").String;
+        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
+        readonly target: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["home", "config"]>>;
+        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+    }>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspace", "POST", "/v1/workspaces/:workspaceId/exec", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1434,7 +1580,31 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"stopWorkspace", "POST", "/v1/workspaces/:workspaceId/stop", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"expireWorkspace", "POST", "/v1/workspaces/:workspaceId/expire", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Int>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly expiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"recoverWorkspace", "POST", "/v1/workspaces/:workspaceId/recover", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly state: import("effect/Schema").Literals<readonly ["requested", "not-retained"]>;
+    readonly recoverable: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"restartWorkspace", "POST", "/v1/workspaces/:workspaceId/restart", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"stopWorkspace", "POST", "/v1/workspaces/:workspaceId/stop", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1461,183 +1631,39 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly outcome: import("effect/Schema").Literals<readonly ["accepted", "ignored"]>;
         readonly detail: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceSshTarget", "GET", "/v1/workspaces/:workspaceId/ssh-target", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "x-sealant-gateway-token": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-sealant-principal-id": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").String;
-    readonly runtime: import("effect/Schema").Struct<{
-        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-        readonly resourceId: import("effect/Schema").String;
-        readonly reference: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped"]>;
-        readonly endpoint: import("effect/Schema").String;
-    }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceUnauthorizedError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"restartWorkspace", "POST", "/v1/workspaces/:workspaceId/restart", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"releaseWorkspaceCredentials", "DELETE", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-    readonly released: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly onBehalfOfUserId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-    readonly uid: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly gid: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly claude: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-    readonly codex: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-    readonly github: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-    readonly pi: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-    readonly opencode: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-    readonly partial: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").Struct<{
-        readonly home: import("effect/Schema").String;
-        readonly onBehalfOfUserId: import("effect/Schema").String;
-        readonly accounts: import("effect/Schema").Struct<{
-            readonly claude: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly codex: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly github: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly pi: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly opencode: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-        }>;
-    }>;
-    readonly skipped: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
-        readonly code: import("effect/Schema").Literals<readonly ["connected-account-missing", "connected-account-invalid", "connected-account-unsupported", "login-file-unusable"]>;
-        readonly message: import("effect/Schema").String;
-    }>>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"applyWorkspaceDotfiles", "POST", "/v1/workspaces/:workspaceId/dotfiles", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"cancelWorkspaceCreate", "POST", "/v1/workspaces/idempotency-keys/:idempotencyKey/cancel", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly onBehalfOfUserId: import("effect/Schema").String;
-    readonly user: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly url: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
-        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly archives: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly data: import("effect/Schema").String;
-        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
-        readonly target: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["home", "config"]>>;
-        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-    readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-    }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createWorkspace", "POST", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
+    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"inspectWorkspaceImage", "POST", "/v1/workspaces/image", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly registryId: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").String;
-    readonly tag: import("effect/Schema").String;
-    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly sourceSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly provider: import("effect/Schema").Literal<"github">;
-        readonly installationId: import("effect/Schema").String;
-        readonly installationRepositoryId: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly dotfilesSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly provider: import("effect/Schema").Literal<"github">;
-        readonly installationId: import("effect/Schema").String;
-        readonly installationRepositoryId: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly profileId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly claude: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly codex: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly github: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
     readonly spec: import("effect/Schema").Unknown;
-    readonly secretEnv: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-    readonly captureToken: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "idempotency-key": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly name: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-    readonly registryId: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").String;
-    readonly tag: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-        readonly resourceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly planHash: import("effect/Schema").String;
+    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
         readonly reference: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
-        readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-        readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly digestReference: import("effect/Schema").String;
+        readonly digest: import("effect/Schema").String;
+        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly runtime: import("effect/Schema").String;
+            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        }>>;
     }>>;
-    readonly replayed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceRuntimeEnvReferencesUnsupportedError | typeof import("./workspaces.js").WorkspaceDockerServiceUnsupportedError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never>, false>>;
+    readonly personLayout: import("effect/Schema").Struct<{
+        readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly runtime: import("effect/Schema").String;
+        readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+    }>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never>, false>>;