@sealant/api-contracts-next 0.40.0-next.763 → 0.40.0-next.765

package/dist/core-api/inference.d.ts

@@ -152,8 +152,13 @@ export declare class InferenceNotFoundError extends InferenceNotFoundError_base
 }
 declare const InferenceConflictError_base: Schema.Class<InferenceConflictError, Schema.TaggedStruct<"InferenceConflictError", {
     readonly message: Schema.String;
+    readonly code: Schema.optional<Schema.Literals<readonly ["connected-account-unsupported"]>>;
 }>, import("effect/Cause").YieldableError>;
-/** The selected account exists but is not usable (status "invalid") — reconnect it. */
+/**
+ * The selected account exists but is not usable: its status is "invalid" (reconnect it), or, with
+ * `code` `connected-account-unsupported`, it is a login this control plane cannot run on yet (a
+ * Claude API key).
+ */
 export declare class InferenceConflictError extends InferenceConflictError_base {
 }
 declare const InferenceUnavailableError_base: Schema.Class<InferenceUnavailableError, Schema.TaggedStruct<"InferenceUnavailableError", {

package/dist/core-api/inference.js

@@ -113,8 +113,15 @@ export class InferenceBadRequestError extends Schema.TaggedError()("InferenceBad
 /** Unknown account/profile (uniform for foreign owners) or an expired/unknown inference session. */
 export class InferenceNotFoundError extends Schema.TaggedError()("InferenceNotFoundError", { message: Schema.String }, { httpApiStatus: 404 }) {
 }
-/** The selected account exists but is not usable (status "invalid") — reconnect it. */
-export class InferenceConflictError extends Schema.TaggedError()("InferenceConflictError", { message: Schema.String }, { httpApiStatus: 409 }) {
+/**
+ * The selected account exists but is not usable: its status is "invalid" (reconnect it), or, with
+ * `code` `connected-account-unsupported`, it is a login this control plane cannot run on yet (a
+ * Claude API key).
+ */
+export class InferenceConflictError extends Schema.TaggedError()("InferenceConflictError", {
+    message: Schema.String,
+    code: Schema.optional(Schema.Literals(["connected-account-unsupported"])),
+}, { httpApiStatus: 409 }) {
 }
 export class InferenceUnavailableError extends Schema.TaggedError()("InferenceUnavailableError", { message: Schema.String }, { httpApiStatus: 503 }) {
 }

package/dist/core-api/profiles.d.ts

@@ -56,6 +56,12 @@ export declare const profileCredentialBindingWithAccountSchema: Schema.Struct<{
         }>;
         readonly isDefault: Schema.optional<Schema.Boolean>;
         readonly credentialRevision: Schema.optional<Schema.Int>;
+        readonly login: Schema.optional<Schema.Union<readonly [Schema.Struct<{
+            readonly kind: Schema.Literal<"subscription">;
+        }>, Schema.Struct<{
+            readonly kind: Schema.Literal<"api-key">;
+            readonly suffix: Schema.String;
+        }>]>>;
     }>;
 }>;
 export type ProfileCredentialBindingWithAccount = typeof profileCredentialBindingWithAccountSchema.Type;
@@ -84,6 +90,12 @@ export declare const listProfileCredentialBindingsResponseSchema: Schema.Struct<
             }>;
             readonly isDefault: Schema.optional<Schema.Boolean>;
             readonly credentialRevision: Schema.optional<Schema.Int>;
+            readonly login: Schema.optional<Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"api-key">;
+                readonly suffix: Schema.String;
+            }>]>>;
         }>;
     }>>;
 }>;
@@ -148,6 +160,12 @@ export declare const ProfilesGroup: HttpApiGroup.HttpApiGroup<"profiles", HttpAp
             }>;
             readonly isDefault: Schema.optional<Schema.Boolean>;
             readonly credentialRevision: Schema.optional<Schema.Int>;
+            readonly login: Schema.optional<Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"api-key">;
+                readonly suffix: Schema.String;
+            }>]>>;
         }>;
     }>>;
 }>>, Schema.toCodecJson<typeof ProfileNotFoundError | typeof ProfileInternalServerError>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"listProfiles", "GET", "/", never, Schema.toCodecStringTree<Schema.Struct<{
@@ -200,6 +218,12 @@ export declare const ProfilesGroup: HttpApiGroup.HttpApiGroup<"profiles", HttpAp
             }>;
             readonly isDefault: Schema.optional<Schema.Boolean>;
             readonly credentialRevision: Schema.optional<Schema.Int>;
+            readonly login: Schema.optional<Schema.Union<readonly [Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"api-key">;
+                readonly suffix: Schema.String;
+            }>]>>;
         }>;
     }>>;
 }>>, Schema.toCodecJson<typeof ProfileBadRequestError | typeof ProfileNotFoundError | typeof ProfileConflictError | typeof ProfileInternalServerError>, never, never>, false>;

package/dist/core-api/system.d.ts

@@ -52,11 +52,19 @@ export declare const systemIndexResponseSchema: Schema.Struct<{
          * it, a connect takes `accountId` and `makeDefault`, and summaries carry `isDefault`.
          */
         readonly connectedAccountDefaults: Schema.optional<Schema.Boolean>;
+        /**
+         * A connect takes `login` and refuses a secret of the other login class, Claude and Codex
+         * API keys connect beside a subscription, summaries carry `login`, and the list carries
+         * `hasApiKeyHistory`. Without it, `login` on a connect is dropped unread.
+         */
+        readonly connectedAccountLoginClass: Schema.optional<Schema.Boolean>;
         /**
          * `ownerMap` on a capture source is taken on Kubernetes (runc): the Pod lets each person's
          * `sudo` work, and the Kubernetes image builder records the image probe the launch checks.
          */
         readonly kubernetesPersonLayout: Schema.optional<Schema.Boolean>;
+        /** Credential homes answer placement receipts; a put takes `live`; prune exists. */
+        readonly credentialPlacements: Schema.optional<Schema.Boolean>;
     }>>;
 }>;
 export type SystemIndexResponse = typeof systemIndexResponseSchema.Type;
@@ -136,11 +144,19 @@ export declare const SystemGroup: HttpApiGroup.HttpApiGroup<"system", HttpApiEnd
          * it, a connect takes `accountId` and `makeDefault`, and summaries carry `isDefault`.
          */
         readonly connectedAccountDefaults: Schema.optional<Schema.Boolean>;
+        /**
+         * A connect takes `login` and refuses a secret of the other login class, Claude and Codex
+         * API keys connect beside a subscription, summaries carry `login`, and the list carries
+         * `hasApiKeyHistory`. Without it, `login` on a connect is dropped unread.
+         */
+        readonly connectedAccountLoginClass: Schema.optional<Schema.Boolean>;
         /**
          * `ownerMap` on a capture source is taken on Kubernetes (runc): the Pod lets each person's
          * `sudo` work, and the Kubernetes image builder records the image probe the launch checks.
          */
         readonly kubernetesPersonLayout: Schema.optional<Schema.Boolean>;
+        /** Credential homes answer placement receipts; a put takes `live`; prune exists. */
+        readonly credentialPlacements: Schema.optional<Schema.Boolean>;
     }>>;
 }>>, never, never, never> | HttpApiEndpoint.HttpApiEndpoint<"getSetupState", "GET", "/v1/system/setup-state", never, never, never, never, Schema.toCodecJson<Schema.Struct<{
     readonly needsSetup: Schema.Boolean;

package/dist/core-api/system.js

@@ -53,11 +53,19 @@ export const systemIndexResponseSchema = Schema.Struct({
          * it, a connect takes `accountId` and `makeDefault`, and summaries carry `isDefault`.
          */
         connectedAccountDefaults: Schema.optional(Schema.Boolean),
+        /**
+         * A connect takes `login` and refuses a secret of the other login class, Claude and Codex
+         * API keys connect beside a subscription, summaries carry `login`, and the list carries
+         * `hasApiKeyHistory`. Without it, `login` on a connect is dropped unread.
+         */
+        connectedAccountLoginClass: Schema.optional(Schema.Boolean),
         /**
          * `ownerMap` on a capture source is taken on Kubernetes (runc): the Pod lets each person's
          * `sudo` work, and the Kubernetes image builder records the image probe the launch checks.
          */
         kubernetesPersonLayout: Schema.optional(Schema.Boolean),
+        /** Credential homes answer placement receipts; a put takes `live`; prune exists. */
+        credentialPlacements: Schema.optional(Schema.Boolean),
     })),
 });
 export const systemHealthResponseSchema = Schema.Struct({

package/dist/core-api/workspaces.d.ts

@@ -793,7 +793,8 @@ export type InspectWorkspaceImageResponse = typeof inspectWorkspaceImageResponse
  * else's) and `connected-account-invalid` (`WorkspaceConflictError`, 409: the account is marked
  * invalid, or holds an unusable credential; reconnect it) and `connected-account-unsupported`
  * (`WorkspaceConflictError`, 409: the account cannot serve what was asked, as a Codex API key cannot
- * be pi's or opencode's ChatGPT login). Nothing was written either way.
+ * be pi's or opencode's ChatGPT login, and a Claude API key cannot be placed yet). Nothing was
+ * written either way.
  */
 export declare const connectedAccountRefusalCodes: readonly ["connected-account-missing", "connected-account-invalid", "connected-account-unsupported"];
 export type ConnectedAccountRefusalCode = (typeof connectedAccountRefusalCodes)[number];
@@ -856,8 +857,36 @@ export declare const putWorkspaceCredentialsRequestSchema: Schema.Struct<{
      * of the whole put failing. Every other refusal still fails the put. Default false.
      */
     readonly partial: Schema.optional<Schema.Boolean>;
+    /**
+     * The placements the person's running processes hold in this home: a provider whose slot one of
+     * them holds is not written over with another login. Absent, nothing is held.
+     */
+    readonly live: Schema.optional<Schema.$Array<Schema.String>>;
 }>;
 export type PutWorkspaceCredentialsRequest = typeof putWorkspaceCredentialsRequestSchema.Type;
+/** One login written into one home: its id stays the same while a refresh moves its revision. */
+export declare const credentialPlacementReceiptSchema: Schema.Struct<{
+    readonly placementId: Schema.String;
+    readonly accountId: Schema.String;
+    readonly revision: Schema.Int;
+    readonly login: Schema.Struct<{
+        readonly kind: Schema.Literal<"subscription">;
+    }>;
+    readonly pinned: Schema.Boolean;
+}>;
+export type CredentialPlacementReceipt = typeof credentialPlacementReceiptSchema.Type;
+/** A receipt tagged with the home provider whose slot it occupies. */
+export declare const workspaceCredentialPlacementReceiptSchema: Schema.Struct<{
+    readonly placementId: Schema.String;
+    readonly accountId: Schema.String;
+    readonly revision: Schema.Int;
+    readonly login: Schema.Struct<{
+        readonly kind: Schema.Literal<"subscription">;
+    }>;
+    readonly pinned: Schema.Boolean;
+    readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+}>;
+export type WorkspaceCredentialPlacementReceipt = typeof workspaceCredentialPlacementReceiptSchema.Type;
 /** One account whose copy a home holds. */
 export declare const workspaceHomeAccountSchema: Schema.Struct<{
     readonly connectedAccountId: Schema.String;
@@ -870,6 +899,17 @@ export declare const workspaceCredentialHomeSchema: Schema.Struct<{
     readonly home: Schema.String;
     /** The one person whose logins the home holds. */
     readonly onBehalfOfUserId: Schema.String;
+    /** The logins written there, one receipt each. Absent from a server without placements. */
+    readonly placements: Schema.optional<Schema.$Array<Schema.Struct<{
+        readonly placementId: Schema.String;
+        readonly accountId: Schema.String;
+        readonly revision: Schema.Int;
+        readonly login: Schema.Struct<{
+            readonly kind: Schema.Literal<"subscription">;
+        }>;
+        readonly pinned: Schema.Boolean;
+        readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+    }>>>;
     /** By provider; a provider the home holds no login for is absent. */
     readonly accounts: Schema.Struct<{
         readonly claude: Schema.optional<Schema.Struct<{
@@ -923,6 +963,17 @@ export declare const putWorkspaceCredentialsResponseSchema: Schema.Struct<{
         readonly home: Schema.String;
         /** The one person whose logins the home holds. */
         readonly onBehalfOfUserId: Schema.String;
+        /** The logins written there, one receipt each. Absent from a server without placements. */
+        readonly placements: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly placementId: Schema.String;
+            readonly accountId: Schema.String;
+            readonly revision: Schema.Int;
+            readonly login: Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>;
+            readonly pinned: Schema.Boolean;
+            readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+        }>>>;
         /** By provider; a provider the home holds no login for is absent. */
         readonly accounts: Schema.Struct<{
             readonly claude: Schema.optional<Schema.Struct<{
@@ -967,6 +1018,65 @@ export declare const putWorkspaceCredentialsResponseSchema: Schema.Struct<{
     }>>>;
 }>;
 export type PutWorkspaceCredentialsResponse = typeof putWorkspaceCredentialsResponseSchema.Type;
+/** Remove every login of one home that is neither live nor the ready one of the person's default. */
+export declare const pruneWorkspaceCredentialsRequestSchema: Schema.Struct<{
+    readonly ownerUserId: Schema.String;
+    readonly home: Schema.String;
+    readonly live: Schema.$Array<Schema.String>;
+}>;
+export type PruneWorkspaceCredentialsRequest = typeof pruneWorkspaceCredentialsRequestSchema.Type;
+export declare const pruneWorkspaceCredentialsResponseSchema: Schema.Struct<{
+    readonly workspaceId: Schema.String;
+    readonly runId: Schema.String;
+    /** Absent when the home holds nothing (any more). */
+    readonly home: Schema.optional<Schema.Struct<{
+        readonly home: Schema.String;
+        /** The one person whose logins the home holds. */
+        readonly onBehalfOfUserId: Schema.String;
+        /** The logins written there, one receipt each. Absent from a server without placements. */
+        readonly placements: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly placementId: Schema.String;
+            readonly accountId: Schema.String;
+            readonly revision: Schema.Int;
+            readonly login: Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>;
+            readonly pinned: Schema.Boolean;
+            readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+        }>>>;
+        /** By provider; a provider the home holds no login for is absent. */
+        readonly accounts: Schema.Struct<{
+            readonly claude: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            readonly codex: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            readonly github: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            /** The Codex account pi's ChatGPT login is made from. */
+            readonly pi: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            /** The Codex account opencode's ChatGPT login is made from. */
+            readonly opencode: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+        }>;
+    }>>;
+}>;
+export type PruneWorkspaceCredentialsResponse = typeof pruneWorkspaceCredentialsResponseSchema.Type;
 /** Release one home: its login files are removed and its record deleted. */
 export declare const releaseWorkspaceCredentialsQuerySchema: Schema.Struct<{
     readonly ownerUserId: Schema.String;
@@ -993,6 +1103,17 @@ export declare const listWorkspaceCredentialsResponseSchema: Schema.Struct<{
         readonly home: Schema.String;
         /** The one person whose logins the home holds. */
         readonly onBehalfOfUserId: Schema.String;
+        /** The logins written there, one receipt each. Absent from a server without placements. */
+        readonly placements: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly placementId: Schema.String;
+            readonly accountId: Schema.String;
+            readonly revision: Schema.Int;
+            readonly login: Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>;
+            readonly pinned: Schema.Boolean;
+            readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+        }>>>;
         /** By provider; a provider the home holds no login for is absent. */
         readonly accounts: Schema.Struct<{
             readonly claude: Schema.optional<Schema.Struct<{
@@ -1031,11 +1152,12 @@ export type ListWorkspaceCredentialsResponse = typeof listWorkspaceCredentialsRe
  * `workspace-not-running` (no ready executor), `connected-account-invalid` (a named account is
  * marked invalid or unusable: reconnect it; `provider` names its provider),
  * `connected-account-unsupported` (a Codex account named for pi or opencode is not a ChatGPT
- * login), `home-held` (the home holds another person's logins: release it
- * first; `/root` while the launch's own logins are at `$HOME`, or for anyone but the workspace's
- * owner), `home-unusable` (the home does not exist, is not a directory, is reached through a
- * symbolic link, or a login directory in it links outside it), `home-busy` (another write into the
- * home, or too many into this workspace, is still running: nothing was done, try again).
+ * login, or a Claude account is an API key, which cannot be placed yet), `home-held` (the home
+ * holds another person's logins: release it first; `/root` while the launch's own logins are at
+ * `$HOME`, or for anyone but the workspace's owner), `home-unusable` (the home does not exist, is
+ * not a directory, is reached through a symbolic link, or a login directory in it links outside
+ * it), `home-busy` (another write into the home, or too many into this workspace, is still
+ * running: nothing was done, try again).
  */
 export declare const workspaceCredentialsConflictCodes: readonly ["workspace-not-running", "connected-account-invalid", "connected-account-unsupported", "home-held", "home-unusable", "home-busy"];
 export type WorkspaceCredentialsConflictCode = (typeof workspaceCredentialsConflictCodes)[number];
@@ -2710,6 +2832,17 @@ export declare const WorkspacesGroup: HttpApiGroup.HttpApiGroup<"workspaces", Ht
         readonly home: Schema.String;
         /** The one person whose logins the home holds. */
         readonly onBehalfOfUserId: Schema.String;
+        /** The logins written there, one receipt each. Absent from a server without placements. */
+        readonly placements: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly placementId: Schema.String;
+            readonly accountId: Schema.String;
+            readonly revision: Schema.Int;
+            readonly login: Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>;
+            readonly pinned: Schema.Boolean;
+            readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+        }>>>;
         /** By provider; a provider the home holds no login for is absent. */
         readonly accounts: Schema.Struct<{
             readonly claude: Schema.optional<Schema.Struct<{
@@ -2847,7 +2980,63 @@ export declare const WorkspacesGroup: HttpApiGroup.HttpApiGroup<"workspaces", Ht
         readonly finishedAt: Schema.optional<Schema.String>;
         readonly expiresAt: Schema.optional<Schema.String>;
     }>>;
-}>>, Schema.toCodecJson<typeof WorkspaceBadRequestError | typeof WorkspaceInternalServerError>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/:workspaceId/credentials", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof WorkspaceBadRequestError | typeof WorkspaceInternalServerError>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"pruneWorkspaceCredentials", "POST", "/:workspaceId/credentials/prune", Schema.toCodecStringTree<Schema.Struct<{
+    readonly workspaceId: Schema.String;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly ownerUserId: Schema.String;
+    readonly home: Schema.String;
+    readonly live: Schema.$Array<Schema.String>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly workspaceId: Schema.String;
+    readonly runId: Schema.String;
+    /** Absent when the home holds nothing (any more). */
+    readonly home: Schema.optional<Schema.Struct<{
+        readonly home: Schema.String;
+        /** The one person whose logins the home holds. */
+        readonly onBehalfOfUserId: Schema.String;
+        /** The logins written there, one receipt each. Absent from a server without placements. */
+        readonly placements: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly placementId: Schema.String;
+            readonly accountId: Schema.String;
+            readonly revision: Schema.Int;
+            readonly login: Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>;
+            readonly pinned: Schema.Boolean;
+            readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+        }>>>;
+        /** By provider; a provider the home holds no login for is absent. */
+        readonly accounts: Schema.Struct<{
+            readonly claude: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            readonly codex: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            readonly github: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            /** The Codex account pi's ChatGPT login is made from. */
+            readonly pi: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+            /** The Codex account opencode's ChatGPT login is made from. */
+            readonly opencode: Schema.optional<Schema.Struct<{
+                readonly connectedAccountId: Schema.String;
+                /** The account's name under its provider, as it is now. */
+                readonly name: Schema.String;
+            }>>;
+        }>;
+    }>>;
+}>>, Schema.toCodecJson<typeof WorkspaceBadRequestError | typeof WorkspaceForbiddenError | typeof WorkspaceNotFoundError | typeof WorkspaceConflictError | typeof WorkspaceBadGatewayError | typeof WorkspaceServiceUnavailableError | typeof WorkspaceInternalServerError>, never, never> | HttpApiEndpoint.HttpApiEndpoint<"putWorkspaceCredentials", "POST", "/:workspaceId/credentials", Schema.toCodecStringTree<Schema.Struct<{
     readonly workspaceId: Schema.String;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
     /** The workspace's owner (owner scope; uniform 404 otherwise). */
@@ -2889,6 +3078,11 @@ export declare const WorkspacesGroup: HttpApiGroup.HttpApiGroup<"workspaces", Ht
      * of the whole put failing. Every other refusal still fails the put. Default false.
      */
     readonly partial: Schema.optional<Schema.Boolean>;
+    /**
+     * The placements the person's running processes hold in this home: a provider whose slot one of
+     * them holds is not written over with another login. Absent, nothing is held.
+     */
+    readonly live: Schema.optional<Schema.$Array<Schema.String>>;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
     readonly workspaceId: Schema.String;
     /** The launch attempt whose executor was written. */
@@ -2898,6 +3092,17 @@ export declare const WorkspacesGroup: HttpApiGroup.HttpApiGroup<"workspaces", Ht
         readonly home: Schema.String;
         /** The one person whose logins the home holds. */
         readonly onBehalfOfUserId: Schema.String;
+        /** The logins written there, one receipt each. Absent from a server without placements. */
+        readonly placements: Schema.optional<Schema.$Array<Schema.Struct<{
+            readonly placementId: Schema.String;
+            readonly accountId: Schema.String;
+            readonly revision: Schema.Int;
+            readonly login: Schema.Struct<{
+                readonly kind: Schema.Literal<"subscription">;
+            }>;
+            readonly pinned: Schema.Boolean;
+            readonly provider: Schema.Literals<readonly ["claude", "codex", "github", "pi", "opencode"]>;
+        }>>>;
         /** By provider; a provider the home holds no login for is absent. */
         readonly accounts: Schema.Struct<{
             readonly claude: Schema.optional<Schema.Struct<{

package/dist/core-api/workspaces.js

@@ -663,7 +663,8 @@ export const inspectWorkspaceImageResponseSchema = Schema.Struct({
  * else's) and `connected-account-invalid` (`WorkspaceConflictError`, 409: the account is marked
  * invalid, or holds an unusable credential; reconnect it) and `connected-account-unsupported`
  * (`WorkspaceConflictError`, 409: the account cannot serve what was asked, as a Codex API key cannot
- * be pi's or opencode's ChatGPT login). Nothing was written either way.
+ * be pi's or opencode's ChatGPT login, and a Claude API key cannot be placed yet). Nothing was
+ * written either way.
  */
 export const connectedAccountRefusalCodes = [
     "connected-account-missing",
@@ -734,6 +735,24 @@ export const putWorkspaceCredentialsRequestSchema = Schema.Struct({
      * of the whole put failing. Every other refusal still fails the put. Default false.
      */
     partial: Schema.optional(Schema.Boolean),
+    /**
+     * The placements the person's running processes hold in this home: a provider whose slot one of
+     * them holds is not written over with another login. Absent, nothing is held.
+     */
+    live: Schema.optional(Schema.Array(NonEmptyString)),
+});
+/** One login written into one home: its id stays the same while a refresh moves its revision. */
+export const credentialPlacementReceiptSchema = Schema.Struct({
+    placementId: NonEmptyString,
+    accountId: NonEmptyString,
+    revision: Schema.Int.check(Schema.isGreaterThan(0)),
+    login: Schema.Struct({ kind: Schema.Literal("subscription") }),
+    pinned: Schema.Boolean,
+});
+/** A receipt tagged with the home provider whose slot it occupies. */
+export const workspaceCredentialPlacementReceiptSchema = Schema.Struct({
+    provider: Schema.Literals(workspaceCredentialHomeProviders),
+    ...credentialPlacementReceiptSchema.fields,
 });
 /** One account whose copy a home holds. */
 export const workspaceHomeAccountSchema = Schema.Struct({
@@ -746,6 +765,8 @@ export const workspaceCredentialHomeSchema = Schema.Struct({
     home: NonEmptyString,
     /** The one person whose logins the home holds. */
     onBehalfOfUserId: NonEmptyString,
+    /** The logins written there, one receipt each. Absent from a server without placements. */
+    placements: Schema.optional(Schema.Array(workspaceCredentialPlacementReceiptSchema)),
     /** By provider; a provider the home holds no login for is absent. */
     accounts: Schema.Struct({
         claude: Schema.optional(workspaceHomeAccountSchema),
@@ -777,6 +798,18 @@ export const putWorkspaceCredentialsResponseSchema = Schema.Struct({
     /** A partial put's left-out providers, in the order named (empty when all were written). */
     skipped: Schema.optional(Schema.Array(workspaceCredentialSkipSchema)),
 });
+/** Remove every login of one home that is neither live nor the ready one of the person's default. */
+export const pruneWorkspaceCredentialsRequestSchema = Schema.Struct({
+    ownerUserId: NonEmptyString,
+    home: NonEmptyString,
+    live: Schema.Array(NonEmptyString),
+});
+export const pruneWorkspaceCredentialsResponseSchema = Schema.Struct({
+    workspaceId: NonEmptyString,
+    runId: NonEmptyString,
+    /** Absent when the home holds nothing (any more). */
+    home: Schema.optional(workspaceCredentialHomeSchema),
+});
 /** Release one home: its login files are removed and its record deleted. */
 export const releaseWorkspaceCredentialsQuerySchema = Schema.Struct({
     ownerUserId: NonEmptyString,
@@ -803,11 +836,12 @@ export const listWorkspaceCredentialsResponseSchema = Schema.Struct({
  * `workspace-not-running` (no ready executor), `connected-account-invalid` (a named account is
  * marked invalid or unusable: reconnect it; `provider` names its provider),
  * `connected-account-unsupported` (a Codex account named for pi or opencode is not a ChatGPT
- * login), `home-held` (the home holds another person's logins: release it
- * first; `/root` while the launch's own logins are at `$HOME`, or for anyone but the workspace's
- * owner), `home-unusable` (the home does not exist, is not a directory, is reached through a
- * symbolic link, or a login directory in it links outside it), `home-busy` (another write into the
- * home, or too many into this workspace, is still running: nothing was done, try again).
+ * login, or a Claude account is an API key, which cannot be placed yet), `home-held` (the home
+ * holds another person's logins: release it first; `/root` while the launch's own logins are at
+ * `$HOME`, or for anyone but the workspace's owner), `home-unusable` (the home does not exist, is
+ * not a directory, is reached through a symbolic link, or a login directory in it links outside
+ * it), `home-busy` (another write into the home, or too many into this workspace, is still
+ * running: nothing was done, try again).
  */
 export const workspaceCredentialsConflictCodes = [
     "workspace-not-running",
@@ -1457,6 +1491,20 @@ HttpApiEndpoint.delete("releaseWorkspaceCredentials", "/:workspaceId/credentials
         WorkspaceServiceUnavailableError,
         WorkspaceInternalServerError,
     ],
+}))
+    .add(HttpApiEndpoint.post("pruneWorkspaceCredentials", "/:workspaceId/credentials/prune", {
+    params: workspaceIdParams,
+    payload: pruneWorkspaceCredentialsRequestSchema,
+    success: pruneWorkspaceCredentialsResponseSchema,
+    error: [
+        WorkspaceBadRequestError,
+        WorkspaceForbiddenError,
+        WorkspaceNotFoundError,
+        WorkspaceConflictError,
+        WorkspaceBadGatewayError,
+        WorkspaceServiceUnavailableError,
+        WorkspaceInternalServerError,
+    ],
 }))
     .add(HttpApiEndpoint.get("listWorkspaceCredentials", "/:workspaceId/credentials", {
     params: workspaceIdParams,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sealant/api-contracts-next",
-  "version": "0.40.0-next.763",
+  "version": "0.40.0-next.765",
   "description": "Contract-first HTTP API definitions for Sealant services",
   "license": "Apache-2.0",
   "repository": {
@@ -36,7 +36,7 @@
   "peerDependencies": {
     "effect": "^4.0.5"
   },
-  "gitHead": "c741e10743b2c553b526f93565c256fe8fa4bd8b",
+  "gitHead": "9802ef32e54645b875272fecf15d036bf7f095e1",
   "publishConfig": {
     "access": "public"
   }