npm - @sealant/sdk - Versions diffs - 0.3.1 → 0.4.0 - Mend

@sealant/sdk 0.3.1 → 0.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (26) hide show

package/README.md +7 -7
package/dist/client.d.ts +7 -7
package/dist/client.js +21 -21
package/dist/effect/api-client.d.ts +250 -250
package/dist/effect/operations.d.ts +14 -14
package/dist/effect/operations.js +4 -4
package/dist/effect/run-harness.d.ts +2 -2
package/dist/effect/run-harness.js +4 -4
package/dist/errors.d.ts +1 -1
package/dist/errors.js +1 -1
package/dist/facade/run.d.ts +1 -1
package/dist/facade/{sandbox.d.ts → workspace.d.ts} +6 -6
package/dist/facade/{sandbox.js → workspace.js} +17 -17
package/dist/harness.d.ts +1 -1
package/dist/index.d.ts +4 -4
package/dist/index.js +4 -4
package/dist/internal/blueprint.d.ts +1 -1
package/dist/internal/blueprint.js +8 -8
package/dist/internal/config.d.ts +2 -2
package/dist/internal/credentials.d.ts +7 -7
package/dist/internal/credentials.js +2 -2
package/dist/internal/map-error.d.ts +1 -1
package/dist/internal/map-error.js +1 -1
package/dist/types.d.ts +35 -35
package/dist/types.js +2 -2
package/package.json +3 -3

package/dist/effect/api-client.d.ts CHANGED Viewed

@@ -378,7 +378,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
     readonly runs: {
         readonly createRun: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly payload: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly harnessId: string;
                 readonly ownerUserId: string;
                 readonly mode?: "interactive" | "one-shot" | undefined;
@@ -393,7 +393,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly runId: string;
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId?: string | undefined;
             readonly ownerUserId: string;
             readonly harnessId: string;
@@ -414,7 +414,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly runId: string;
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId?: string | undefined;
             readonly ownerUserId: string;
             readonly harnessId: string;
@@ -527,7 +527,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").RunBadRequestError | import("@sealant/api-contracts").RunInternalServerError | import("@sealant/api-contracts").RunNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
         readonly listRuns: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly query: {
-                readonly sandboxId?: string | undefined;
+                readonly workspaceId?: string | undefined;
                 readonly ownerUserId?: string | undefined;
                 readonly status?: "cancelled" | "completed" | "failed" | "queued" | "running" | undefined;
                 readonly limit?: string | undefined;
@@ -536,7 +536,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly items: readonly {
                 readonly runId: string;
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly attemptId?: string | undefined;
                 readonly ownerUserId: string;
                 readonly harnessId: string;
@@ -569,7 +569,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly runId: string;
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId?: string | undefined;
             readonly ownerUserId: string;
             readonly harnessId: string;
@@ -584,8 +584,100 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly updatedAt: string;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").RunBadRequestError | import("@sealant/api-contracts").RunInternalServerError | import("@sealant/api-contracts").RunNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
     };
-    readonly sandboxes: {
-        readonly createSandbox: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+    readonly sshKeys: {
+        readonly archiveSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly params: {
+                readonly sshKeyId: string;
+            };
+            readonly query: {
+                readonly ownerUserId: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly sshKeyId: string;
+            readonly ownerUserId: string;
+            readonly name: string;
+            readonly algorithm: string;
+            readonly fingerprint: string;
+            readonly createdAt: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly createSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly payload: {
+                readonly ownerUserId: string;
+                readonly name?: string | undefined;
+                readonly publicKey: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly sshKeyId: string;
+            readonly ownerUserId: string;
+            readonly name: string;
+            readonly algorithm: string;
+            readonly fingerprint: string;
+            readonly createdAt: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyBadRequestError | import("@sealant/api-contracts").SshKeyConflictError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listSshKeys: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly query: {
+                readonly ownerUserId: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly items: readonly {
+                readonly sshKeyId: string;
+                readonly ownerUserId: string;
+                readonly name: string;
+                readonly algorithm: string;
+                readonly fingerprint: string;
+                readonly createdAt: string;
+            }[];
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly resolveSshPrincipal: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly headers: {
+                readonly "x-sealant-gateway-token"?: string | undefined;
+            };
+            readonly payload: {
+                readonly algo: string;
+                readonly publicKeyBase64: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly principalId: string;
+            readonly sshKeyId: string;
+            readonly fingerprint: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError | import("@sealant/api-contracts").SshKeyServiceUnavailableError | import("@sealant/api-contracts").SshKeyUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
+    };
+    readonly system: {
+        readonly getIndex: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly name: string;
+            readonly version: string;
+            readonly docsPath: string;
+            readonly openApiPath: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+        readonly getSetupState: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly needsSetup: boolean;
+            readonly sshGateway: {
+                readonly host: string;
+                readonly port: number;
+                readonly usernamePrefix: string;
+            } | null;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SystemInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly health: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly status: "ok";
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+        readonly ready: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly status: "ok";
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+    };
+    readonly workspaces: {
+        readonly createWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly headers: {
                 readonly "idempotency-key"?: string | undefined;
             };
@@ -617,20 +709,20 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly name: string;
             readonly status: "cancelled" | "failed" | "queued" | "ready" | "running";
             readonly registryId: string;
             readonly repository: string;
             readonly tag: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadGatewayError | import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxConflictError | import("@sealant/api-contracts").SandboxForbiddenError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("@sealant/api-contracts").SandboxServiceUnavailableError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly getSandbox: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError), [Mode] extends ["response-only"] ? never : never>;
+        readonly getWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly name: string;
             readonly ownerUserId: string;
             readonly status: "cancelled" | "failed" | "queued" | "ready" | "running";
@@ -658,10 +750,10 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly startedAt?: string | undefined;
             readonly finishedAt?: string | undefined;
             readonly spec?: unknown;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly getSandboxSshTarget: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly getWorkspaceSshTarget: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly headers: {
                 readonly "x-sealant-gateway-token"?: string | undefined;
@@ -669,7 +761,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId: string;
             readonly runtime: {
                 readonly adapter: "docker" | "k3s" | "k8s";
@@ -678,10 +770,10 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
                 readonly status: "failed" | "pending" | "ready" | "running" | "stopped";
                 readonly endpoint: string;
             };
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxConflictError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("@sealant/api-contracts").SandboxServiceUnavailableError | import("@sealant/api-contracts").SandboxUnauthorizedError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSandboxAttempts: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError | import("@sealant/api-contracts").WorkspaceUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listWorkspaceAttempts: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly query: {
                 readonly limit?: string | undefined;
@@ -719,10 +811,10 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
                 readonly finishedAt?: string | undefined;
                 readonly durationMs?: number | undefined;
             }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSandboxEvents: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listWorkspaceEvents: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly query: {
                 readonly limit?: string | undefined;
@@ -731,15 +823,15 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly items: readonly {
                 readonly eventId: string;
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly attemptId?: string | undefined;
-                readonly type: "attempt.cancelled" | "attempt.failed" | "attempt.queued" | "attempt.running" | "attempt.succeeded" | "image.published" | "runtime.failed" | "runtime.pending" | "runtime.ready" | "runtime.running" | "runtime.stopped" | "sandbox.created";
+                readonly type: "attempt.cancelled" | "attempt.failed" | "attempt.queued" | "attempt.running" | "attempt.succeeded" | "image.published" | "runtime.failed" | "runtime.pending" | "runtime.ready" | "runtime.running" | "runtime.stopped" | "workspace.created";
                 readonly occurredAt: string;
                 readonly message?: string | undefined;
                 readonly data?: unknown;
             }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSandboxes: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listWorkspaces: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly query: {
                 readonly ownerUserId: string;
                 readonly status?: "cancelled" | "failed" | "queued" | "ready" | "running" | undefined;
@@ -748,7 +840,7 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly items: readonly {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly name: string;
                 readonly ownerUserId: string;
                 readonly status: "cancelled" | "failed" | "queued" | "ready" | "running";
@@ -776,112 +868,20 @@ declare const buildControlPlaneClient: (config: SealantInternalConfig) => Effect
                 readonly startedAt?: string | undefined;
                 readonly finishedAt?: string | undefined;
             }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxInternalServerError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly renameSandbox: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly renameWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly payload: {
                 readonly name: string;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly name: string;
             readonly updatedAt: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-    };
-    readonly sshKeys: {
-        readonly archiveSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly params: {
-                readonly sshKeyId: string;
-            };
-            readonly query: {
-                readonly ownerUserId: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sshKeyId: string;
-            readonly ownerUserId: string;
-            readonly name: string;
-            readonly algorithm: string;
-            readonly fingerprint: string;
-            readonly createdAt: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
-        readonly createSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly payload: {
-                readonly ownerUserId: string;
-                readonly name?: string | undefined;
-                readonly publicKey: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sshKeyId: string;
-            readonly ownerUserId: string;
-            readonly name: string;
-            readonly algorithm: string;
-            readonly fingerprint: string;
-            readonly createdAt: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyBadRequestError | import("@sealant/api-contracts").SshKeyConflictError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSshKeys: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly query: {
-                readonly ownerUserId: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly items: readonly {
-                readonly sshKeyId: string;
-                readonly ownerUserId: string;
-                readonly name: string;
-                readonly algorithm: string;
-                readonly fingerprint: string;
-                readonly createdAt: string;
-            }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError), [Mode] extends ["response-only"] ? never : never>;
-        readonly resolveSshPrincipal: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly headers: {
-                readonly "x-sealant-gateway-token"?: string | undefined;
-            };
-            readonly payload: {
-                readonly algo: string;
-                readonly publicKeyBase64: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly principalId: string;
-            readonly sshKeyId: string;
-            readonly fingerprint: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError | import("@sealant/api-contracts").SshKeyServiceUnavailableError | import("@sealant/api-contracts").SshKeyUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
-    };
-    readonly system: {
-        readonly getIndex: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly name: string;
-            readonly version: string;
-            readonly docsPath: string;
-            readonly openApiPath: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly getSetupState: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly needsSetup: boolean;
-            readonly sshGateway: {
-                readonly host: string;
-                readonly port: number;
-                readonly usernamePrefix: string;
-            } | null;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SystemInternalServerError), [Mode] extends ["response-only"] ? never : never>;
-        readonly health: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly status: "ok";
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly ready: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly status: "ok";
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
     };
 }, never, HttpClient.HttpClient>;
 /** The fully-typed control-plane client, derived from the `@sealant/api-contracts` HttpApi. */
@@ -1261,7 +1261,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
     readonly runs: {
         readonly createRun: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly payload: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly harnessId: string;
                 readonly ownerUserId: string;
                 readonly mode?: "interactive" | "one-shot" | undefined;
@@ -1276,7 +1276,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly runId: string;
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId?: string | undefined;
             readonly ownerUserId: string;
             readonly harnessId: string;
@@ -1297,7 +1297,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly runId: string;
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId?: string | undefined;
             readonly ownerUserId: string;
             readonly harnessId: string;
@@ -1410,7 +1410,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").RunBadRequestError | import("@sealant/api-contracts").RunInternalServerError | import("@sealant/api-contracts").RunNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
         readonly listRuns: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly query: {
-                readonly sandboxId?: string | undefined;
+                readonly workspaceId?: string | undefined;
                 readonly ownerUserId?: string | undefined;
                 readonly status?: "cancelled" | "completed" | "failed" | "queued" | "running" | undefined;
                 readonly limit?: string | undefined;
@@ -1419,7 +1419,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly items: readonly {
                 readonly runId: string;
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly attemptId?: string | undefined;
                 readonly ownerUserId: string;
                 readonly harnessId: string;
@@ -1452,7 +1452,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly runId: string;
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId?: string | undefined;
             readonly ownerUserId: string;
             readonly harnessId: string;
@@ -1467,8 +1467,100 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly updatedAt: string;
         }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").RunBadRequestError | import("@sealant/api-contracts").RunInternalServerError | import("@sealant/api-contracts").RunNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
     };
-    readonly sandboxes: {
-        readonly createSandbox: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+    readonly sshKeys: {
+        readonly archiveSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly params: {
+                readonly sshKeyId: string;
+            };
+            readonly query: {
+                readonly ownerUserId: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly sshKeyId: string;
+            readonly ownerUserId: string;
+            readonly name: string;
+            readonly algorithm: string;
+            readonly fingerprint: string;
+            readonly createdAt: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly createSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly payload: {
+                readonly ownerUserId: string;
+                readonly name?: string | undefined;
+                readonly publicKey: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly sshKeyId: string;
+            readonly ownerUserId: string;
+            readonly name: string;
+            readonly algorithm: string;
+            readonly fingerprint: string;
+            readonly createdAt: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyBadRequestError | import("@sealant/api-contracts").SshKeyConflictError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listSshKeys: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly query: {
+                readonly ownerUserId: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly items: readonly {
+                readonly sshKeyId: string;
+                readonly ownerUserId: string;
+                readonly name: string;
+                readonly algorithm: string;
+                readonly fingerprint: string;
+                readonly createdAt: string;
+            }[];
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly resolveSshPrincipal: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+            readonly headers: {
+                readonly "x-sealant-gateway-token"?: string | undefined;
+            };
+            readonly payload: {
+                readonly algo: string;
+                readonly publicKeyBase64: string;
+            };
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly principalId: string;
+            readonly sshKeyId: string;
+            readonly fingerprint: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError | import("@sealant/api-contracts").SshKeyServiceUnavailableError | import("@sealant/api-contracts").SshKeyUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
+    };
+    readonly system: {
+        readonly getIndex: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly name: string;
+            readonly version: string;
+            readonly docsPath: string;
+            readonly openApiPath: string;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+        readonly getSetupState: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly needsSetup: boolean;
+            readonly sshGateway: {
+                readonly host: string;
+                readonly port: number;
+                readonly usernamePrefix: string;
+            } | null;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SystemInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly health: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly status: "ok";
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+        readonly ready: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
+            readonly responseMode?: Mode;
+        }) => Effect.Effect<HttpApiClient.Client.Response<{
+            readonly status: "ok";
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+    };
+    readonly workspaces: {
+        readonly createWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly headers: {
                 readonly "idempotency-key"?: string | undefined;
             };
@@ -1500,20 +1592,20 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly name: string;
             readonly status: "cancelled" | "failed" | "queued" | "ready" | "running";
             readonly registryId: string;
             readonly repository: string;
             readonly tag: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadGatewayError | import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxConflictError | import("@sealant/api-contracts").SandboxForbiddenError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("@sealant/api-contracts").SandboxServiceUnavailableError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly getSandbox: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadGatewayError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceForbiddenError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError), [Mode] extends ["response-only"] ? never : never>;
+        readonly getWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly name: string;
             readonly ownerUserId: string;
             readonly status: "cancelled" | "failed" | "queued" | "ready" | "running";
@@ -1541,10 +1633,10 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly startedAt?: string | undefined;
             readonly finishedAt?: string | undefined;
             readonly spec?: unknown;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly getSandboxSshTarget: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly getWorkspaceSshTarget: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly headers: {
                 readonly "x-sealant-gateway-token"?: string | undefined;
@@ -1552,7 +1644,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly attemptId: string;
             readonly runtime: {
                 readonly adapter: "docker" | "k3s" | "k8s";
@@ -1561,10 +1653,10 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
                 readonly status: "failed" | "pending" | "ready" | "running" | "stopped";
                 readonly endpoint: string;
             };
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxConflictError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("@sealant/api-contracts").SandboxServiceUnavailableError | import("@sealant/api-contracts").SandboxUnauthorizedError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSandboxAttempts: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceConflictError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError | import("@sealant/api-contracts").WorkspaceServiceUnavailableError | import("@sealant/api-contracts").WorkspaceUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listWorkspaceAttempts: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly query: {
                 readonly limit?: string | undefined;
@@ -1602,10 +1694,10 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
                 readonly finishedAt?: string | undefined;
                 readonly durationMs?: number | undefined;
             }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSandboxEvents: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listWorkspaceEvents: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly query: {
                 readonly limit?: string | undefined;
@@ -1614,15 +1706,15 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly items: readonly {
                 readonly eventId: string;
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly attemptId?: string | undefined;
-                readonly type: "attempt.cancelled" | "attempt.failed" | "attempt.queued" | "attempt.running" | "attempt.succeeded" | "image.published" | "runtime.failed" | "runtime.pending" | "runtime.ready" | "runtime.running" | "runtime.stopped" | "sandbox.created";
+                readonly type: "attempt.cancelled" | "attempt.failed" | "attempt.queued" | "attempt.running" | "attempt.succeeded" | "image.published" | "runtime.failed" | "runtime.pending" | "runtime.ready" | "runtime.running" | "runtime.stopped" | "workspace.created";
                 readonly occurredAt: string;
                 readonly message?: string | undefined;
                 readonly data?: unknown;
             }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSandboxes: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
+        readonly listWorkspaces: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly query: {
                 readonly ownerUserId: string;
                 readonly status?: "cancelled" | "failed" | "queued" | "ready" | "running" | undefined;
@@ -1631,7 +1723,7 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
             readonly items: readonly {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
                 readonly name: string;
                 readonly ownerUserId: string;
                 readonly status: "cancelled" | "failed" | "queued" | "ready" | "running";
@@ -1659,112 +1751,20 @@ declare const SealantApiClient_base: Context.ServiceClass<SealantApiClient, "@se
                 readonly startedAt?: string | undefined;
                 readonly finishedAt?: string | undefined;
             }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxBadRequestError | import("@sealant/api-contracts").SandboxInternalServerError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly renameSandbox: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceBadRequestError | import("@sealant/api-contracts").WorkspaceInternalServerError), [Mode] extends ["response-only"] ? never : never>;
+        readonly renameWorkspace: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
             readonly params: {
-                readonly sandboxId: string;
+                readonly workspaceId: string;
             };
             readonly payload: {
                 readonly name: string;
             };
             readonly responseMode?: Mode;
         }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sandboxId: string;
+            readonly workspaceId: string;
             readonly name: string;
             readonly updatedAt: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("@sealant/api-contracts").SandboxInternalServerError | import("@sealant/api-contracts").SandboxNotFoundError | import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-    };
-    readonly sshKeys: {
-        readonly archiveSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly params: {
-                readonly sshKeyId: string;
-            };
-            readonly query: {
-                readonly ownerUserId: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sshKeyId: string;
-            readonly ownerUserId: string;
-            readonly name: string;
-            readonly algorithm: string;
-            readonly fingerprint: string;
-            readonly createdAt: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
-        readonly createSshKey: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly payload: {
-                readonly ownerUserId: string;
-                readonly name?: string | undefined;
-                readonly publicKey: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly sshKeyId: string;
-            readonly ownerUserId: string;
-            readonly name: string;
-            readonly algorithm: string;
-            readonly fingerprint: string;
-            readonly createdAt: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyBadRequestError | import("@sealant/api-contracts").SshKeyConflictError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError), [Mode] extends ["response-only"] ? never : never>;
-        readonly listSshKeys: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly query: {
-                readonly ownerUserId: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly items: readonly {
-                readonly sshKeyId: string;
-                readonly ownerUserId: string;
-                readonly name: string;
-                readonly algorithm: string;
-                readonly fingerprint: string;
-                readonly createdAt: string;
-            }[];
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError), [Mode] extends ["response-only"] ? never : never>;
-        readonly resolveSshPrincipal: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: {
-            readonly headers: {
-                readonly "x-sealant-gateway-token"?: string | undefined;
-            };
-            readonly payload: {
-                readonly algo: string;
-                readonly publicKeyBase64: string;
-            };
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly principalId: string;
-            readonly sshKeyId: string;
-            readonly fingerprint: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SshKeyInternalServerError | import("@sealant/api-contracts").SshKeyNotFoundError | import("@sealant/api-contracts").SshKeyServiceUnavailableError | import("@sealant/api-contracts").SshKeyUnauthorizedError), [Mode] extends ["response-only"] ? never : never>;
-    };
-    readonly system: {
-        readonly getIndex: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly name: string;
-            readonly version: string;
-            readonly docsPath: string;
-            readonly openApiPath: string;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly getSetupState: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly needsSetup: boolean;
-            readonly sshGateway: {
-                readonly host: string;
-                readonly port: number;
-                readonly usernamePrefix: string;
-            } | null;
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").SystemInternalServerError), [Mode] extends ["response-only"] ? never : never>;
-        readonly health: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly status: "ok";
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
-        readonly ready: <Mode extends import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode = import("effect/unstable/httpapi/HttpApiEndpoint").ClientResponseMode>(request: void | {
-            readonly responseMode?: Mode;
-        }) => Effect.Effect<HttpApiClient.Client.Response<{
-            readonly status: "ok";
-        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError), [Mode] extends ["response-only"] ? never : never>;
+        }, Mode>, import("effect/unstable/http/HttpClientError").HttpClientError | ([Mode] extends ["response-only"] ? never : import("effect/Schema").SchemaError | import("@sealant/api-contracts").WorkspaceInternalServerError | import("@sealant/api-contracts").WorkspaceNotFoundError), [Mode] extends ["response-only"] ? never : never>;
     };
 }>;
 export declare class SealantApiClient extends SealantApiClient_base {