@sealant/api-contracts-next 0.39.0-next.734 → 0.39.0-next.735

package/dist/core-api/control-plane.d.ts

@@ -1,19 +1,6 @@
 import { HttpApi } from "effect/unstable/httpapi";
 import { RequestRefusal } from "./request-refusal.js";
-export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi", import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"accessTokens", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listAccessTokens", "GET", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly tokenId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly scopes: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["session:read", "session:input", "workspace:exec"]>>;
-        readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly createdAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createAccessToken", "POST", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi", import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"accessTokens", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createAccessToken", "POST", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly scopes: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["session:read", "session:input", "workspace:exec"]>>;
     readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -29,7 +16,20 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly token: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeAccessToken", "POST", "/v1/access-tokens/:tokenId/revoke", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listAccessTokens", "GET", "/v1/access-tokens/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly tokenId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly scopes: import("effect/Schema").$Array<import("effect/Schema").Literals<readonly ["session:read", "session:input", "workspace:exec"]>>;
+        readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"revokeAccessToken", "POST", "/v1/access-tokens/:tokenId/revoke", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly tokenId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -42,29 +42,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly revokedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"connectedAccounts", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listConnectedAccounts", "GET", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly connectedAccountId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
-        readonly name: import("effect/Schema").String;
-        readonly kind: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["active", "invalid", "archived"]>;
-        readonly metadata: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
-        readonly connectedAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-        readonly lastUsedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly lastSyncedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly credential: import("effect/Schema").Struct<{
-            readonly accessExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-            readonly refreshExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-            readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-            readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
-        }>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveConnectedAccount", "DELETE", "/v1/connected-accounts/:connectedAccountId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./access-tokens.js").AccessTokenBadRequestError | typeof import("./access-tokens.js").AccessTokenNotFoundError | typeof import("./access-tokens.js").AccessTokenInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"connectedAccounts", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveConnectedAccount", "DELETE", "/v1/connected-accounts/:connectedAccountId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -86,10 +64,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"markConnectedAccountInvalid", "POST", "/v1/connected-accounts/:connectedAccountId/mark-invalid", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly connectedAccountId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createConnectedAccount", "POST", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
+    readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly secret: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
@@ -108,11 +87,32 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createConnectedAccount", "POST", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountBadRequestError | typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountConflictError | typeof import("./connected-accounts.js").ConnectedAccountServiceUnavailableError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listConnectedAccounts", "GET", "/v1/connected-accounts/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly connectedAccountId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
+        readonly name: import("effect/Schema").String;
+        readonly kind: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "invalid", "archived"]>;
+        readonly metadata: import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>;
+        readonly connectedAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+        readonly lastUsedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly lastSyncedAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly credential: import("effect/Schema").Struct<{
+            readonly accessExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+            readonly refreshExpiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+            readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+            readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
+        }>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"markConnectedAccountInvalid", "POST", "/v1/connected-accounts/:connectedAccountId/mark-invalid", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly connectedAccountId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly provider: import("effect/Schema").Literals<readonly ["claude", "codex", "github"]>;
-    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly secret: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly connectedAccountId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
@@ -131,19 +131,14 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly lastRefreshAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
         readonly lastRefreshOutcome: import("effect/Schema").NullOr<import("effect/Schema").Literals<readonly ["refreshed", "fresh", "failed"]>>;
     }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountBadRequestError | typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountConflictError | typeof import("./connected-accounts.js").ConnectedAccountServiceUnavailableError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"github", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallations", "GET", "/v1/github/installations", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly userId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly installationId: import("effect/Schema").String;
-        readonly externalInstallationId: import("effect/Schema").String;
-        readonly accountLogin: import("effect/Schema").String;
-        readonly accountType: import("effect/Schema").Literals<readonly ["organization", "user"]>;
-        readonly status: import("effect/Schema").Literals<readonly ["active", "suspended", "deleted"]>;
-        readonly repositorySelection: import("effect/Schema").Literals<readonly ["all", "selected"]>;
-        readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"importInstallation", "POST", "/v1/github/installations/import", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./connected-accounts.js").ConnectedAccountNotFoundError | typeof import("./connected-accounts.js").ConnectedAccountInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"github", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"handleWebhook", "POST", "/v1/github/webhooks", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").String>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly "x-github-delivery": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-github-event": import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly "x-hub-signature-256": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly deliveryId: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["received", "processed", "failed", "ignored"]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubBadRequestError | typeof import("./github.js").GitHubUnauthorizedError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"importInstallation", "POST", "/v1/github/installations/import", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
     readonly externalInstallationId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -158,22 +153,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     }>;
     readonly syncedRepositoryCount: import("effect/Schema").Number;
     readonly syncedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"handleWebhook", "POST", "/v1/github/webhooks", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").String>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "x-github-delivery": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-github-event": import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly "x-hub-signature-256": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly deliveryId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["received", "processed", "failed", "ignored"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubBadRequestError | typeof import("./github.js").GitHubUnauthorizedError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"syncInstallation", "POST", "/v1/github/installations/:installationId/sync", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly installationId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly userId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly installationId: import("effect/Schema").String;
-    readonly syncedRepositoryCount: import("effect/Schema").Number;
-    readonly syncedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubForbiddenError | typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallationRepositories", "GET", "/v1/github/installations/:installationId/repositories", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallationRepositories", "GET", "/v1/github/installations/:installationId/repositories", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly installationId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly userId: import("effect/Schema").String;
@@ -192,6 +172,26 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly isArchived: import("effect/Schema").Boolean;
         readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubForbiddenError | typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listInstallations", "GET", "/v1/github/installations", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly installationId: import("effect/Schema").String;
+        readonly externalInstallationId: import("effect/Schema").String;
+        readonly accountLogin: import("effect/Schema").String;
+        readonly accountType: import("effect/Schema").Literals<readonly ["organization", "user"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "suspended", "deleted"]>;
+        readonly repositorySelection: import("effect/Schema").Literals<readonly ["all", "selected"]>;
+        readonly lastSyncedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"syncInstallation", "POST", "/v1/github/installations/:installationId/sync", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly installationId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly installationId: import("effect/Schema").String;
+    readonly syncedRepositoryCount: import("effect/Schema").Number;
+    readonly syncedAt: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./github.js").GitHubForbiddenError | typeof import("./github.js").GitHubNotFoundError | typeof import("./github.js").GitHubServiceUnavailableError | typeof import("./github.js").GitHubInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"inference", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"respond", "POST", "/v1/inference/respond", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
     readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
@@ -285,21 +285,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     }>>;
     readonly fetchedAt: import("effect/Schema").String;
     readonly expiresAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./packages.js").PackagesBadGatewayError | typeof import("./packages.js").PackagesInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"profiles", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfiles", "GET", "/v1/profiles/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly profileId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly slug: import("effect/Schema").String;
-        readonly name: import("effect/Schema").String;
-        readonly description: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly status: import("effect/Schema").Literals<readonly ["active", "archived"]>;
-        readonly activeRevisionId: import("effect/Schema").NullOr<import("effect/Schema").String>;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfileCredentialBindings", "GET", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./packages.js").PackagesBadGatewayError | typeof import("./packages.js").PackagesInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"profiles", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfileCredentialBindings", "GET", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly profileId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -328,7 +314,21 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
             }>;
         }>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileNotFoundError | typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"setProfileCredentialBinding", "PUT", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileNotFoundError | typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listProfiles", "GET", "/v1/profiles/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly profileId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly slug: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+        readonly description: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly status: import("effect/Schema").Literals<readonly ["active", "archived"]>;
+        readonly activeRevisionId: import("effect/Schema").NullOr<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./profiles.js").ProfileInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"setProfileCredentialBinding", "PUT", "/v1/profiles/:profileId/credential-bindings", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly profileId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -398,74 +398,20 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly name: import("effect/Schema").String;
     readonly reachable: import("effect/Schema").Literal<true>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"runs", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRuns", "GET", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly runId: import("effect/Schema").String;
-        readonly workspaceId: import("effect/Schema").String;
-        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly harnessId: import("effect/Schema").String;
-        readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-        readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly executable: import("effect/Schema").String;
-            readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-            readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-        }>>;
-        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-        readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunChanges", "GET", "/v1/runs/:runId/changes", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly files: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly path: import("effect/Schema").String;
-        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
-        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly diff: import("effect/Schema").String;
-    readonly available: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly unavailableReason: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunLoss", "GET", "/v1/runs/:runId/loss", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-    readonly droppedEventCount: import("effect/Schema").String;
-    readonly sequenceGapCount: import("effect/Schema").Number;
-    readonly watchOverflowCount: import("effect/Schema").Number;
-    readonly earlyClose: import("effect/Schema").Boolean;
-    readonly spans: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly kind: import("effect/Schema").Literals<readonly ["dropped_event", "sequence_gap", "watch_overflow", "early_close"]>;
-        readonly fromSequence: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly toSequence: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly droppedCount: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly detectedVia: import("effect/Schema").Literals<readonly ["marker", "gap"]>;
-        readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./registries.js").RegistriesNotFoundError | typeof import("./registries.js").RegistriesBadGatewayError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"runs", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createRun", "POST", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRun", "GET", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
     readonly workspaceId: import("effect/Schema").String;
     readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -490,21 +436,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"updateRun", "PATCH", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRun", "GET", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly diff: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly changedFiles: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly path: import("effect/Schema").String;
-        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
-        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>>;
-    readonly changesReadFailed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
     readonly workspaceId: import("effect/Schema").String;
     readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -529,7 +465,20 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunEvent", "GET", "/v1/runs/:runId/events/:sequence", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunChanges", "GET", "/v1/runs/:runId/changes", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly files: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly path: import("effect/Schema").String;
+        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
+        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly diff: import("effect/Schema").String;
+    readonly available: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly unavailableReason: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunEvent", "GET", "/v1/runs/:runId/events/:sequence", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
     readonly sequence: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -551,13 +500,31 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly payloadCase: import("effect/Schema").String;
     readonly payload: import("effect/Schema").Unknown;
     readonly ingestedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunScrollback", "GET", "/v1/runs/:runId/scrollback", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunLoss", "GET", "/v1/runs/:runId/loss", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly processId: import("effect/Schema").String;
-    readonly stream: import("effect/Schema").Literals<readonly ["stdout", "stderr", "pty"]>;
-    readonly atSequence: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly droppedEventCount: import("effect/Schema").String;
+    readonly sequenceGapCount: import("effect/Schema").Number;
+    readonly watchOverflowCount: import("effect/Schema").Number;
+    readonly earlyClose: import("effect/Schema").Boolean;
+    readonly spans: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly kind: import("effect/Schema").Literals<readonly ["dropped_event", "sequence_gap", "watch_overflow", "early_close"]>;
+        readonly fromSequence: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly toSequence: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly droppedCount: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly detectedVia: import("effect/Schema").Literals<readonly ["marker", "gap"]>;
+        readonly reason: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getRunScrollback", "GET", "/v1/runs/:runId/scrollback", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly processId: import("effect/Schema").String;
+    readonly stream: import("effect/Schema").Literals<readonly ["stdout", "stderr", "pty"]>;
+    readonly atSequence: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly fromSequence: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -585,19 +552,52 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly captureMethod: import("effect/Schema").Number;
         readonly confidence: import("effect/Schema").Number;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createRun", "POST", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listRuns", "GET", "/v1/runs/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly runId: import("effect/Schema").String;
+        readonly workspaceId: import("effect/Schema").String;
+        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly harnessId: import("effect/Schema").String;
+        readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+        readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly executable: import("effect/Schema").String;
+            readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+            readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+        }>>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+        readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
     }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"updateRun", "PATCH", "/v1/runs/:runId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly diff: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly changedFiles: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly path: import("effect/Schema").String;
+        readonly change: import("effect/Schema").Literals<readonly ["added", "modified", "deleted", "renamed"]>;
+        readonly oldPath: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>>;
+    readonly changesReadFailed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly runId: import("effect/Schema").String;
     readonly workspaceId: import("effect/Schema").String;
@@ -623,40 +623,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly createdAt: import("effect/Schema").String;
     readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sessions", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSessions", "GET", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly sessionId: import("effect/Schema").String;
-        readonly workspaceId: import("effect/Schema").String;
-        readonly runId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
-        readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly cols: import("effect/Schema").Number;
-        readonly rows: import("effect/Schema").Number;
-        readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
-        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly exitSignal: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-        readonly outputHighWater: import("effect/Schema").String;
-        readonly createdAt: import("effect/Schema").String;
-        readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSession", "GET", "/v1/sessions/:sessionId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./runs.js").RunBadRequestError | typeof import("./runs.js").RunNotFoundError | typeof import("./runs.js").RunInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sessions", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"closeSession", "POST", "/v1/sessions/:sessionId/close", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
@@ -678,26 +649,18 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSessionOutput", "GET", "/v1/sessions/:sessionId/output", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly from: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-    readonly chunks: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly sequence: import("effect/Schema").String;
-        readonly dataBase64: import("effect/Schema").String;
-    }>>;
-    readonly nextFrom: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"closeSession", "POST", "/v1/sessions/:sessionId/close", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly sessionId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSession", "POST", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly env: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly cols: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly rows: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -720,7 +683,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSession", "POST", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSessionAsUser", "POST", "/v1/sessions/as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
     readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
@@ -731,7 +694,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
     readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly user: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -754,19 +717,11 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createSessionAsUser", "POST", "/v1/sessions/as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
-    readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly env: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-    readonly cols: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly rows: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly term: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSession", "GET", "/v1/sessions/:sessionId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
@@ -788,21 +743,66 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly outputHighWater: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
     readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"sendSessionInput", "POST", "/v1/sessions/:sessionId/input", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSessionOutput", "GET", "/v1/sessions/:sessionId/output", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly from: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly sessionId: import("effect/Schema").String;
+    readonly chunks: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sequence: import("effect/Schema").String;
+        readonly dataBase64: import("effect/Schema").String;
+    }>>;
+    readonly nextFrom: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSessions", "GET", "/v1/sessions/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sessionId: import("effect/Schema").String;
+        readonly workspaceId: import("effect/Schema").String;
+        readonly runId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["starting", "running", "exited", "failed"]>;
+        readonly argv: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly cols: import("effect/Schema").Number;
+        readonly rows: import("effect/Schema").Number;
+        readonly mode: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["pty", "pipe"]>>;
+        readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly exitSignal: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+        readonly outputHighWater: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").String;
+        readonly endedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resizeSession", "POST", "/v1/sessions/:sessionId/resize", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly dataBase64: import("effect/Schema").String;
+    readonly cols: import("effect/Schema").Int;
+    readonly rows: import("effect/Schema").Int;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ok: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resizeSession", "POST", "/v1/sessions/:sessionId/resize", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"sendSessionInput", "POST", "/v1/sessions/:sessionId/input", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sessionId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly cols: import("effect/Schema").Int;
-    readonly rows: import("effect/Schema").Int;
+    readonly dataBase64: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
@@ -816,18 +816,7 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly authorization: import("effect/Schema").optional<import("effect/Schema").String>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ok: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sshKeys", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSshKeys", "GET", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly sshKeyId: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly name: import("effect/Schema").String;
-        readonly algorithm: import("effect/Schema").String;
-        readonly fingerprint: import("effect/Schema").String;
-        readonly createdAt: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveSshKey", "DELETE", "/v1/ssh-keys/:sshKeyId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./sessions.js").SessionBadRequestError | typeof import("./sessions.js").SessionUnauthorizedError | typeof import("./sessions.js").SessionForbiddenError | typeof import("./sessions.js").SessionNotFoundError | typeof import("./sessions.js").SessionConflictError | typeof import("./sessions.js").SessionBadGatewayError | typeof import("./sessions.js").SessionInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"sshKeys", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"archiveSshKey", "DELETE", "/v1/ssh-keys/:sshKeyId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly sshKeyId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -849,7 +838,18 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly algorithm: import("effect/Schema").String;
     readonly fingerprint: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyBadRequestError | typeof import("./ssh-keys.js").SshKeyNotFoundError | typeof import("./ssh-keys.js").SshKeyConflictError | typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resolveSshPrincipal", "POST", "/v1/ssh-keys/resolve-principal", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyBadRequestError | typeof import("./ssh-keys.js").SshKeyNotFoundError | typeof import("./ssh-keys.js").SshKeyConflictError | typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listSshKeys", "GET", "/v1/ssh-keys/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly sshKeyId: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+        readonly algorithm: import("effect/Schema").String;
+        readonly fingerprint: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./ssh-keys.js").SshKeyInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resolveSshPrincipal", "POST", "/v1/ssh-keys/resolve-principal", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly algo: import("effect/Schema").String;
     readonly publicKeyBase64: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -874,10 +874,6 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly personBinding: import("effect/Schema").optional<import("effect/Schema").Boolean>;
         readonly sshKeyRemovalEndsConnections: import("effect/Schema").optional<import("effect/Schema").Boolean>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"health", "GET", "/healthz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly status: import("effect/Schema").Literal<"ok">;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ready", "GET", "/readyz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly status: import("effect/Schema").Literal<"ok">;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getSetupState", "GET", "/v1/system/setup-state", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly needsSetup: import("effect/Schema").Boolean;
     readonly sshGateway: import("effect/Schema").NullOr<import("effect/Schema").Struct<{
@@ -885,7 +881,25 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly port: import("effect/Schema").Number;
         readonly usernamePrefix: import("effect/Schema").String;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./system.js").SystemInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"users", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ensureUser", "POST", "/v1/users/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./system.js").SystemInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"health", "GET", "/healthz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly status: import("effect/Schema").Literal<"ok">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ready", "GET", "/readyz", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly status: import("effect/Schema").Literal<"ok">;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"users", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindUserPerson", "POST", "/v1/users/:userId/person", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly id: import("effect/Schema").String;
+    readonly uid: import("effect/Schema").Int;
+    readonly home: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly userId: import("effect/Schema").String;
+    readonly person: import("effect/Schema").Struct<{
+        readonly id: import("effect/Schema").String;
+        readonly uid: import("effect/Schema").Int;
+        readonly home: import("effect/Schema").String;
+    }>;
+    readonly created: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserPersonConflictError | typeof import("./users.js").UserBadRequestError | typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"ensureUser", "POST", "/v1/users/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly email: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
     readonly userId: import("effect/Schema").optional<import("effect/Schema").String>;
@@ -902,98 +916,73 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     readonly email: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
     readonly createdAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindUserPerson", "POST", "/v1/users/:userId/person", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly userId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"workspaces", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"applyWorkspaceDotfiles", "POST", "/v1/workspaces/:workspaceId/dotfiles", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly id: import("effect/Schema").String;
-    readonly uid: import("effect/Schema").Int;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly onBehalfOfUserId: import("effect/Schema").String;
+    readonly user: import("effect/Schema").String;
     readonly home: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly url: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
+        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly archives: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly data: import("effect/Schema").String;
+        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
+        readonly target: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["home", "config"]>>;
+        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly userId: import("effect/Schema").String;
-    readonly person: import("effect/Schema").Struct<{
-        readonly id: import("effect/Schema").String;
-        readonly uid: import("effect/Schema").Int;
-        readonly home: import("effect/Schema").String;
-    }>;
-    readonly created: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./users.js").UserPersonConflictError | typeof import("./users.js").UserBadRequestError | typeof import("./users.js").UserNotFoundError | typeof import("./users.js").UserInternalServerError>, RequestRefusal, never>, false> | import("effect/unstable/httpapi/HttpApiGroup").HttpApiGroup<"workspaces", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"cancelWorkspaceCreate", "POST", "/v1/workspaces/idempotency-keys/:idempotencyKey/cancel", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly ownerUserId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+    }>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindWorkspace", "POST", "/v1/workspaces/:workspaceId/bind", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly mountPath: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly subpath: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly binds: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly mountPath: import("effect/Schema").String;
+        readonly subpath: import("effect/Schema").String;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"cancelWorkspaceCreate", "POST", "/v1/workspaces/idempotency-keys/:idempotencyKey/cancel", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly idempotencyKey: import("effect/Schema").String;
-    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
-    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCreate", "GET", "/v1/workspaces/idempotency-keys/:idempotencyKey", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly idempotencyKey: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly idempotencyKey: import("effect/Schema").String;
     readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
     readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaces", "GET", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly workspaceId: import("effect/Schema").String;
-        readonly name: import("effect/Schema").String;
-        readonly ownerUserId: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-        readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-            readonly resourceId: import("effect/Schema").String;
-            readonly reference: import("effect/Schema").String;
-            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
-            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly reference: import("effect/Schema").String;
-            readonly digestReference: import("effect/Schema").String;
-            readonly digest: import("effect/Schema").String;
-            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly runtime: import("effect/Schema").String;
-                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            }>>;
-        }>>;
-        readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
-        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly message: import("effect/Schema").String;
-            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
-            readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
-                readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
-                readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
-                readonly progressAt: import("effect/Schema").String;
-                readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
-            }>>;
-        }>>;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"clearWorkspaceSshUser", "DELETE", "/v1/workspaces/:workspaceId/ssh-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
@@ -1001,27 +990,47 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly sshUser: import("effect/Schema").Null;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"renameWorkspace", "PATCH", "/v1/workspaces/:workspaceId/name", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly name: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly name: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspace", "GET", "/v1/workspaces/:workspaceId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createWorkspace", "POST", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly registryId: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").String;
+    readonly tag: import("effect/Schema").String;
+    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly sourceSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly provider: import("effect/Schema").Literal<"github">;
+        readonly installationId: import("effect/Schema").String;
+        readonly installationRepositoryId: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly dotfilesSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly provider: import("effect/Schema").Literal<"github">;
+        readonly installationId: import("effect/Schema").String;
+        readonly installationRepositoryId: import("effect/Schema").String;
+        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly profileId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly claude: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly codex: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly github: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly spec: import("effect/Schema").Unknown;
+    readonly secretEnv: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
+    readonly captureToken: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").Int>;
+    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly sshAsOwner: import("effect/Schema").optional<import("effect/Schema").Boolean>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly "idempotency-key": import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
-    readonly ownerUserId: import("effect/Schema").String;
     readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-    readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly registryId: import("effect/Schema").String;
+    readonly repository: import("effect/Schema").String;
+    readonly tag: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
         readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
         readonly resourceId: import("effect/Schema").String;
@@ -1032,188 +1041,87 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
         readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly reference: import("effect/Schema").String;
-        readonly digestReference: import("effect/Schema").String;
-        readonly digest: import("effect/Schema").String;
-        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly runtime: import("effect/Schema").String;
-            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        }>>;
-    }>>;
-    readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
-    readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly message: import("effect/Schema").String;
-        readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly replayed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceRuntimeEnvReferencesUnsupportedError | typeof import("./workspaces.js").WorkspaceDockerServiceUnsupportedError | typeof import("./workspaces.js").WorkspaceSshOwnerRefusedError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspace", "POST", "/v1/workspaces/:workspaceId/exec", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-    readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
-        readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
-            readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
-            readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly progressAt: import("effect/Schema").String;
-            readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
-        }>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
+    readonly workspaceId: import("effect/Schema").String;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
     }>>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
     readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly spec: import("effect/Schema").optional<import("effect/Schema").Unknown>;
-    readonly captureDrain: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly state: import("effect/Schema").Literals<readonly ["draining", "kept", "saved", "gone", "stop-failed", "stopped", "discarded"]>;
-        readonly detail: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly observedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly preservationStartsAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly discard: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly requestedBy: import("effect/Schema").String;
-            readonly requestedAt: import("effect/Schema").String;
-        }>>;
-        readonly retained: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly since: import("effect/Schema").String;
-            readonly reason: import("effect/Schema").String;
-            readonly recoverable: import("effect/Schema").Boolean;
-            readonly recoveryAttempts: import("effect/Schema").Int;
-            readonly nextRecoveryAt: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly lastRecoveryError: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly executor: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly runId: import("effect/Schema").String;
-            readonly adapter: import("effect/Schema").String;
-            readonly resourceId: import("effect/Schema").String;
-            readonly reference: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly executorId: import("effect/Schema").String;
-            readonly epoch: import("effect/Schema").Int;
-            readonly captureN: import("effect/Schema").Int;
-            readonly attestedAt: import("effect/Schema").String;
-            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly sealedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly epoch: import("effect/Schema").Int;
-                readonly launch: import("effect/Schema").String;
-                readonly bootId: import("effect/Schema").String;
-                readonly bootGeneration: import("effect/Schema").Int;
-                readonly observation: import("effect/Schema").Int;
-                readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
-            }>>;
-        }>>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"inspectWorkspaceImage", "POST", "/v1/workspaces/image", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly registryId: import("effect/Schema").String;
-    readonly spec: import("effect/Schema").Unknown;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly planHash: import("effect/Schema").String;
-    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly reference: import("effect/Schema").String;
-        readonly digestReference: import("effect/Schema").String;
-        readonly digest: import("effect/Schema").String;
-        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-            readonly runtime: import("effect/Schema").String;
-            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        }>>;
-    }>>;
-    readonly personLayout: import("effect/Schema").Struct<{
-        readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-        readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly runtime: import("effect/Schema").String;
-        readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-    }>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"expireWorkspace", "POST", "/v1/workspaces/:workspaceId/expire", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspaceAsUser", "POST", "/v1/workspaces/:workspaceId/exec-as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Int>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly expiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceAttempts", "GET", "/v1/workspaces/:workspaceId/attempts", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly attemptId: import("effect/Schema").String;
-        readonly relation: import("effect/Schema").Literals<readonly ["launch", "rebuild", "retry", "resume"]>;
-        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-        readonly triggerType: import("effect/Schema").Literals<readonly ["manual", "schedule", "api", "retry"]>;
-        readonly triggerRef: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-            readonly resourceId: import("effect/Schema").String;
-            readonly reference: import("effect/Schema").String;
-            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
-            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly reference: import("effect/Schema").String;
-            readonly digestReference: import("effect/Schema").String;
-            readonly digest: import("effect/Schema").String;
-            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
-                readonly runtime: import("effect/Schema").String;
-                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
-            }>>;
-        }>>;
-        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly message: import("effect/Schema").String;
-            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
-        }>>;
-        readonly spec: import("effect/Schema").optional<import("effect/Schema").Unknown>;
-        readonly queuedAt: import("effect/Schema").String;
-        readonly createdAt: import("effect/Schema").String;
-        readonly updatedAt: import("effect/Schema").String;
-        readonly linkedAt: import("effect/Schema").String;
-        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly durationMs: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceEvents", "GET", "/v1/workspaces/:workspaceId/events", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly user: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly runId: import("effect/Schema").String;
     readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly eventId: import("effect/Schema").String;
-        readonly workspaceId: import("effect/Schema").String;
-        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly type: import("effect/Schema").Literals<readonly ["workspace.created", "attempt.queued", "attempt.running", "attempt.succeeded", "attempt.failed", "attempt.cancelled", "image.published", "runtime.pending", "runtime.running", "runtime.ready", "runtime.failed", "runtime.stopped"]>;
-        readonly occurredAt: import("effect/Schema").String;
-        readonly message: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly data: import("effect/Schema").optional<import("effect/Schema").Unknown>;
+    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly harnessId: import("effect/Schema").String;
+    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
+    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly executable: import("effect/Schema").String;
+        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
+        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
     }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"bindWorkspace", "POST", "/v1/workspaces/:workspaceId/bind", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"expireWorkspace", "POST", "/v1/workspaces/:workspaceId/expire", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly mountPath: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly subpath: import("effect/Schema").String;
+    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Int>>;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly binds: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly mountPath: import("effect/Schema").String;
-        readonly subpath: import("effect/Schema").String;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"flushWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/flush", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly expiresAt: import("effect/Schema").NullOr<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"flushWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/flush", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1270,38 +1178,104 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly boundMs: import("effect/Schema").Number;
     }>>;
     readonly ownerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"replanWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/replan", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspace", "GET", "/v1/workspaces/:workspaceId", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly name: import("effect/Schema").String;
     readonly ownerUserId: import("effect/Schema").String;
-    readonly expectedOwnerMap: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
-        readonly gid: import("effect/Schema").Number;
-        readonly worktreeUid: import("effect/Schema").Number;
-        readonly people: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-            readonly id: import("effect/Schema").String;
-            readonly uid: import("effect/Schema").Number;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+    readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+        readonly resourceId: import("effect/Schema").String;
+        readonly reference: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
+        readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+        readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly reference: import("effect/Schema").String;
+        readonly digestReference: import("effect/Schema").String;
+        readonly digest: import("effect/Schema").String;
+        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly runtime: import("effect/Schema").String;
+            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        }>>;
+    }>>;
+    readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
+    readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly message: import("effect/Schema").String;
+        readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
+        readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
+            readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
+            readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly progressAt: import("effect/Schema").String;
+            readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
+        }>>;
+    }>>;
+    readonly createdAt: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly spec: import("effect/Schema").optional<import("effect/Schema").Unknown>;
+    readonly captureDrain: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly state: import("effect/Schema").Literals<readonly ["draining", "kept", "saved", "gone", "stop-failed", "stopped", "discarded"]>;
+        readonly detail: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly observedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly preservationStartsAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly discard: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly requestedBy: import("effect/Schema").String;
+            readonly requestedAt: import("effect/Schema").String;
+        }>>;
+        readonly retained: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly since: import("effect/Schema").String;
+            readonly reason: import("effect/Schema").String;
+            readonly recoverable: import("effect/Schema").Boolean;
+            readonly recoveryAttempts: import("effect/Schema").Int;
+            readonly nextRecoveryAt: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly lastRecoveryError: import("effect/Schema").optional<import("effect/Schema").String>;
         }>>;
-    }>>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly worktreeId: import("effect/Schema").String;
-    readonly epoch: import("effect/Schema").Number;
-    readonly headN: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly headCaptureId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly filesWritten: import("effect/Schema").Number;
-    readonly bytesWritten: import("effect/Schema").Number;
-    readonly filesSkipped: import("effect/Schema").Number;
-    readonly bytesSkipped: import("effect/Schema").Number;
-    readonly removed: import("effect/Schema").Number;
-    readonly unchanged: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"recoverWorkspace", "POST", "/v1/workspaces/:workspaceId/recover", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly state: import("effect/Schema").Literals<readonly ["requested", "not-retained"]>;
-    readonly recoverable: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCaptureStatus", "GET", "/v1/workspaces/:workspaceId/capture", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+        readonly executor: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly runId: import("effect/Schema").String;
+            readonly adapter: import("effect/Schema").String;
+            readonly resourceId: import("effect/Schema").String;
+            readonly reference: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly executorId: import("effect/Schema").String;
+            readonly epoch: import("effect/Schema").Int;
+            readonly captureN: import("effect/Schema").Int;
+            readonly attestedAt: import("effect/Schema").String;
+            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly sealedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly epoch: import("effect/Schema").Int;
+                readonly launch: import("effect/Schema").String;
+                readonly bootId: import("effect/Schema").String;
+                readonly bootGeneration: import("effect/Schema").Int;
+                readonly observation: import("effect/Schema").Int;
+                readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
+            }>>;
+        }>>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCaptureStatus", "GET", "/v1/workspaces/:workspaceId/capture", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1355,145 +1329,17 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly boundMs: import("effect/Schema").Number;
     }>>;
     readonly ownerMap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceCredentials", "GET", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceCreate", "GET", "/v1/workspaces/idempotency-keys/:idempotencyKey", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly homes: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly home: import("effect/Schema").String;
-        readonly onBehalfOfUserId: import("effect/Schema").String;
-        readonly accounts: import("effect/Schema").Struct<{
-            readonly claude: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly codex: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly github: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly pi: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-            readonly opencode: import("effect/Schema").optional<import("effect/Schema").Struct<{
-                readonly connectedAccountId: import("effect/Schema").String;
-                readonly name: import("effect/Schema").String;
-            }>>;
-        }>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspace", "POST", "/v1/workspaces/:workspaceId/exec", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-    readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-    }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"execWorkspaceAsUser", "POST", "/v1/workspaces/:workspaceId/exec-as-user", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly commands: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly user: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
-    readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
-    }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"stopWorkspace", "POST", "/v1/workspaces/:workspaceId/stop", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly discardUnsaved: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly captureN: import("effect/Schema").Int;
-        readonly epoch: import("effect/Schema").Int;
-        readonly executorId: import("effect/Schema").String;
-        readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly sealedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
-            readonly epoch: import("effect/Schema").Int;
-            readonly launch: import("effect/Schema").String;
-            readonly bootId: import("effect/Schema").String;
-            readonly bootGeneration: import("effect/Schema").Int;
-            readonly observation: import("effect/Schema").Int;
-            readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
-        }>>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly outcome: import("effect/Schema").Literals<readonly ["accepted", "ignored"]>;
-        readonly detail: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"restartWorkspace", "POST", "/v1/workspaces/:workspaceId/restart", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").String;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceSshTarget", "GET", "/v1/workspaces/:workspaceId/ssh-target", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly idempotencyKey: import("effect/Schema").String;
+    readonly state: import("effect/Schema").Literals<readonly ["pending", "found", "cancelled", "none"]>;
+    readonly workspaceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"getWorkspaceSshTarget", "GET", "/v1/workspaces/:workspaceId/ssh-target", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly "x-sealant-gateway-token": import("effect/Schema").optional<import("effect/Schema").String>;
@@ -1512,63 +1358,185 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
     }>;
     readonly sessionUser: import("effect/Schema").NullOr<import("effect/Schema").String>;
     readonly sshKeyFingerprint: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceUnauthorizedError | typeof import("./workspaces.js").WorkspaceSshKeyNoLongerRegisteredError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"releaseWorkspaceCredentials", "DELETE", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceUnauthorizedError | typeof import("./workspaces.js").WorkspaceSshKeyNoLongerRegisteredError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"inspectWorkspaceImage", "POST", "/v1/workspaces/image", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly registryId: import("effect/Schema").String;
+    readonly spec: import("effect/Schema").Unknown;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly planHash: import("effect/Schema").String;
+    readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly reference: import("effect/Schema").String;
+        readonly digestReference: import("effect/Schema").String;
+        readonly digest: import("effect/Schema").String;
+        readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+            readonly runtime: import("effect/Schema").String;
+            readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        }>>;
+    }>>;
+    readonly personLayout: import("effect/Schema").Struct<{
+        readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+        readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+        readonly runtime: import("effect/Schema").String;
+        readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+    }>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceAttempts", "GET", "/v1/workspaces/:workspaceId/attempts", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly attemptId: import("effect/Schema").String;
+        readonly relation: import("effect/Schema").Literals<readonly ["launch", "rebuild", "retry", "resume"]>;
+        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+        readonly triggerType: import("effect/Schema").Literals<readonly ["manual", "schedule", "api", "retry"]>;
+        readonly triggerRef: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+            readonly resourceId: import("effect/Schema").String;
+            readonly reference: import("effect/Schema").String;
+            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
+            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly reference: import("effect/Schema").String;
+            readonly digestReference: import("effect/Schema").String;
+            readonly digest: import("effect/Schema").String;
+            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly runtime: import("effect/Schema").String;
+                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            }>>;
+        }>>;
+        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly message: import("effect/Schema").String;
+            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly spec: import("effect/Schema").optional<import("effect/Schema").Unknown>;
+        readonly queuedAt: import("effect/Schema").String;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+        readonly linkedAt: import("effect/Schema").String;
+        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly durationMs: import("effect/Schema").optional<import("effect/Schema").Number>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceCredentials", "GET", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly runId: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-    readonly released: import("effect/Schema").Boolean;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"applyWorkspaceDotfiles", "POST", "/v1/workspaces/:workspaceId/dotfiles", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly workspaceId: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly ownerUserId: import("effect/Schema").String;
-    readonly onBehalfOfUserId: import("effect/Schema").String;
-    readonly user: import("effect/Schema").String;
-    readonly home: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly url: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
-        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly homes: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly home: import("effect/Schema").String;
+        readonly onBehalfOfUserId: import("effect/Schema").String;
+        readonly accounts: import("effect/Schema").Struct<{
+            readonly claude: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly codex: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly github: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly pi: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+            readonly opencode: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly connectedAccountId: import("effect/Schema").String;
+                readonly name: import("effect/Schema").String;
+            }>>;
+        }>;
     }>>;
-    readonly archives: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Struct<{
-        readonly data: import("effect/Schema").String;
-        readonly manager: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["auto", "chezmoi", "stow", "copy"]>>;
-        readonly target: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["home", "config"]>>;
-        readonly bootstrap: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-        readonly bootstrapCommand: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
-    readonly runId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaceEvents", "GET", "/v1/workspaces/:workspaceId/events", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
-    readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly eventId: import("effect/Schema").String;
+        readonly workspaceId: import("effect/Schema").String;
+        readonly attemptId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly type: import("effect/Schema").Literals<readonly ["workspace.created", "attempt.queued", "attempt.running", "attempt.succeeded", "attempt.failed", "attempt.cancelled", "image.published", "runtime.pending", "runtime.running", "runtime.ready", "runtime.failed", "runtime.stopped"]>;
+        readonly occurredAt: import("effect/Schema").String;
+        readonly message: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly data: import("effect/Schema").optional<import("effect/Schema").Unknown>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"listWorkspaces", "GET", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly harnessId: import("effect/Schema").String;
-    readonly mode: import("effect/Schema").Literals<readonly ["one-shot", "interactive"]>;
-    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "completed", "failed", "cancelled"]>;
-    readonly prompt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly command: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly executable: import("effect/Schema").String;
-        readonly args: import("effect/Schema").$Array<import("effect/Schema").String>;
-        readonly cwd: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly argCount: import("effect/Schema").optional<import("effect/Schema").Number>;
-        readonly argLengths: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").Number>>;
+    readonly status: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>>;
+    readonly limit: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly items: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly workspaceId: import("effect/Schema").String;
+        readonly name: import("effect/Schema").String;
+        readonly ownerUserId: import("effect/Schema").String;
+        readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+        readonly registryId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly repository: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly tag: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
+            readonly resourceId: import("effect/Schema").String;
+            readonly reference: import("effect/Schema").String;
+            readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
+            readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
+            readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly publishedImage: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly reference: import("effect/Schema").String;
+            readonly digestReference: import("effect/Schema").String;
+            readonly digest: import("effect/Schema").String;
+            readonly personLayout: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly status: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+                readonly missing: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly unknown: import("effect/Schema").$Array<import("effect/Schema").String>;
+                readonly runtime: import("effect/Schema").String;
+                readonly acl: import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>;
+            }>>;
+        }>>;
+        readonly processUser: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["supported", "unsupported", "unknown"]>>;
+        readonly error: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly message: import("effect/Schema").String;
+            readonly code: import("effect/Schema").optional<import("effect/Schema").String>;
+        }>>;
+        readonly phase: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly name: import("effect/Schema").Literals<readonly ["queued", "image-build", "boot"]>;
+            readonly since: import("effect/Schema").optional<import("effect/Schema").String>;
+            readonly imageBuild: import("effect/Schema").optional<import("effect/Schema").Struct<{
+                readonly step: import("effect/Schema").optional<import("effect/Schema").Int>;
+                readonly steps: import("effect/Schema").optional<import("effect/Schema").Int>;
+                readonly stepName: import("effect/Schema").optional<import("effect/Schema").String>;
+                readonly progressAt: import("effect/Schema").String;
+                readonly stallTimeoutMs: import("effect/Schema").optional<import("effect/Schema").Int>;
+            }>>;
+        }>>;
+        readonly createdAt: import("effect/Schema").String;
+        readonly updatedAt: import("effect/Schema").String;
+        readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly expiresAt: import("effect/Schema").optional<import("effect/Schema").String>;
     }>>;
-    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
-    readonly user: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly exitCode: import("effect/Schema").optional<import("effect/Schema").Number>;
-    readonly errorMessage: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly startedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly finishedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly recordDeletedAt: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly createdAt: import("effect/Schema").String;
-    readonly updatedAt: import("effect/Schema").String;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
@@ -1616,57 +1584,89 @@ export declare const ControlPlaneAPI: HttpApi.HttpApi<"sealantControlPlaneApi",
         readonly code: import("effect/Schema").Literals<readonly ["connected-account-missing", "connected-account-invalid", "connected-account-unsupported", "login-file-unusable"]>;
         readonly message: import("effect/Schema").String;
     }>>>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"createWorkspace", "POST", "/v1/workspaces/", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"recoverWorkspace", "POST", "/v1/workspaces/:workspaceId/recover", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly ownerUserId: import("effect/Schema").String;
-    readonly registryId: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").String;
-    readonly tag: import("effect/Schema").String;
-    readonly name: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly sourceSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly provider: import("effect/Schema").Literal<"github">;
-        readonly installationId: import("effect/Schema").String;
-        readonly installationRepositoryId: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly dotfilesSelection: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly provider: import("effect/Schema").Literal<"github">;
-        readonly installationId: import("effect/Schema").String;
-        readonly installationRepositoryId: import("effect/Schema").String;
-        readonly ref: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly credentials: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly profileId: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly claude: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly codex: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly github: import("effect/Schema").optional<import("effect/Schema").String>;
-    }>>;
-    readonly spec: import("effect/Schema").Unknown;
-    readonly secretEnv: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").String>>;
-    readonly captureToken: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly ttlSeconds: import("effect/Schema").optional<import("effect/Schema").Int>;
-    readonly idempotencyKey: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly sshAsOwner: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly state: import("effect/Schema").Literals<readonly ["requested", "not-retained"]>;
+    readonly recoverable: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"releaseWorkspaceCredentials", "DELETE", "/v1/workspaces/:workspaceId/credentials", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
 }>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
-    readonly "idempotency-key": import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<never>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
+    readonly home: import("effect/Schema").String;
+    readonly released: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"renameWorkspace", "PATCH", "/v1/workspaces/:workspaceId/name", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly name: import("effect/Schema").String;
+    readonly ownerUserId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
     readonly workspaceId: import("effect/Schema").String;
     readonly name: import("effect/Schema").String;
+    readonly updatedAt: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"replanWorkspaceCapture", "POST", "/v1/workspaces/:workspaceId/capture/replan", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly expectedOwnerMap: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").Struct<{
+        readonly gid: import("effect/Schema").Number;
+        readonly worktreeUid: import("effect/Schema").Number;
+        readonly people: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+            readonly id: import("effect/Schema").String;
+            readonly uid: import("effect/Schema").Number;
+        }>>;
+    }>>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly worktreeId: import("effect/Schema").String;
+    readonly epoch: import("effect/Schema").Number;
+    readonly headN: import("effect/Schema").optional<import("effect/Schema").Number>;
+    readonly headCaptureId: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly filesWritten: import("effect/Schema").Number;
+    readonly bytesWritten: import("effect/Schema").Number;
+    readonly filesSkipped: import("effect/Schema").Number;
+    readonly bytesSkipped: import("effect/Schema").Number;
+    readonly removed: import("effect/Schema").Number;
+    readonly unchanged: import("effect/Schema").Boolean;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"restartWorkspace", "POST", "/v1/workspaces/:workspaceId/restart", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly runId: import("effect/Schema").String;
     readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
-    readonly registryId: import("effect/Schema").String;
-    readonly repository: import("effect/Schema").String;
-    readonly tag: import("effect/Schema").String;
-    readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
-    readonly runtime: import("effect/Schema").optional<import("effect/Schema").Struct<{
-        readonly adapter: import("effect/Schema").Literals<readonly ["docker", "k8s", "k3s", "cloudflare", "microvm"]>;
-        readonly resourceId: import("effect/Schema").String;
-        readonly reference: import("effect/Schema").String;
-        readonly status: import("effect/Schema").Literals<readonly ["pending", "running", "ready", "failed", "stopped", "retained"]>;
-        readonly endpoint: import("effect/Schema").optional<import("effect/Schema").String>;
-        readonly deadline: import("effect/Schema").optional<import("effect/Schema").NullOr<import("effect/Schema").String>>;
-        readonly runId: import("effect/Schema").optional<import("effect/Schema").String>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"stopWorkspace", "POST", "/v1/workspaces/:workspaceId/stop", import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly ownerUserId: import("effect/Schema").String;
+    readonly discardUnsaved: import("effect/Schema").optional<import("effect/Schema").Boolean>;
+    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly captureN: import("effect/Schema").Int;
+        readonly epoch: import("effect/Schema").Int;
+        readonly executorId: import("effect/Schema").String;
         readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly sealedAt: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly origin: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly epoch: import("effect/Schema").Int;
+            readonly launch: import("effect/Schema").String;
+            readonly bootId: import("effect/Schema").String;
+            readonly bootGeneration: import("effect/Schema").Int;
+            readonly observation: import("effect/Schema").Int;
+            readonly headN: import("effect/Schema").optional<import("effect/Schema").Int>;
+        }>>;
     }>>;
-    readonly replayed: import("effect/Schema").optional<import("effect/Schema").Boolean>;
-    readonly launchId: import("effect/Schema").optional<import("effect/Schema").String>;
-}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./budgets.ts").BudgetExceededError | typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceRuntimeEnvReferencesUnsupportedError | typeof import("./workspaces.js").WorkspaceDockerServiceUnsupportedError | typeof import("./workspaces.js").WorkspaceSshOwnerRefusedError | typeof import("./workspaces.js").WorkspaceForbiddenError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceServiceUnavailableError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never>, false>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").StringTree<never>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<import("effect/Schema").Struct<{
+    readonly workspaceId: import("effect/Schema").String;
+    readonly status: import("effect/Schema").Literals<readonly ["queued", "running", "ready", "failed", "cancelled", "stopped", "retained"]>;
+    readonly completion: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly outcome: import("effect/Schema").Literals<readonly ["accepted", "ignored"]>;
+        readonly detail: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+}>>, import("effect/unstable/httpapi/HttpApiEndpoint").Json<typeof import("./workspaces.js").WorkspaceBadRequestError | typeof import("./workspaces.js").WorkspaceNotFoundError | typeof import("./workspaces.js").WorkspaceConflictError | typeof import("./workspaces.js").WorkspaceBadGatewayError | typeof import("./workspaces.js").WorkspaceInternalServerError>, RequestRefusal, never>, false>>;