refactor: rename workspace → environment to match Safari vocabulary

Safari renamed the compute-unit concept from 'workspace' / 'worknode' to
'environment'. Mirror the rename in the runner so API, protocol fields, log
keys, and docs align. No migration shim — Safari only ships the new names.

Changes:
- Go package: workspace/ → environment/ (git-mv + `package environment`).
- Type: Workspace → Environment (receivers w → e).
- Protocol: WorknodeID / worknode_id → EnvironmentID / environment_id in
  StatusPayload and WelcomeMessage (Safari's welcome emitter already uses
  these names).
- ws/client.go: field worknodeID → environmentID, log keys match.
- cmd/main.go: default URL path /safari/worknode/ws → /safari/environment/ws,
  token examples wnt_xxx → ent_xxx (Safari's BYOC auth gate accepts ent_*).
- README.md / README_zh.md: same example updates.

CLI flags (--workspace, --token) and env vars (FLASHDUTY_RUNNER_WORKSPACE)
keep their names — they describe the local workspace root on disk, which
Safari also calls WorkspaceRoot. Only the product-level concept ("the thing
Safari talks to over WS") was renamed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: ysyneu

README.md

@@ -127,15 +127,15 @@ sudo mv flashduty-runner /usr/local/bin/
 ```bash
 docker run -d \
   --name flashduty-runner \
-  -e FLASHDUTY_RUNNER_TOKEN=wnt_xxx \
+  -e FLASHDUTY_RUNNER_TOKEN=ent_xxx \
   -v /var/flashduty/workspace:/workspace \
   registry.flashcat.cloud/public/flashduty-runner:latest
 
 # With custom endpoint
 docker run -d \
   --name flashduty-runner \
-  -e FLASHDUTY_RUNNER_TOKEN=wnt_xxx \
-  -e FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/worknode/ws \
+  -e FLASHDUTY_RUNNER_TOKEN=ent_xxx \
+  -e FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/environment/ws \
   -v /var/flashduty/workspace:/workspace \
   registry.flashcat.cloud/public/flashduty-runner:latest
 ```
@@ -144,13 +144,13 @@ docker run -d \
 
 ```bash
 # Basic usage (token required)
-flashduty-runner run --token wnt_xxx
+flashduty-runner run --token ent_xxx
 
 # Specify workspace directory
-flashduty-runner run --token wnt_xxx --workspace ~/projects
+flashduty-runner run --token ent_xxx --workspace ~/projects
 
 # Specify custom WebSocket endpoint
-flashduty-runner run --token wnt_xxx --url wss://custom.example.com/safari/worknode/ws
+flashduty-runner run --token ent_xxx --url wss://custom.example.com/safari/environment/ws
 
 # Check version
 flashduty-runner version
@@ -180,8 +180,8 @@ WantedBy=multi-user.target
 Create `/etc/flashduty-runner/env`:
 
 ```bash
-FLASHDUTY_RUNNER_TOKEN=wnt_xxx
-# FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/worknode/ws
+FLASHDUTY_RUNNER_TOKEN=ent_xxx
+# FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/environment/ws
 # FLASHDUTY_RUNNER_WORKSPACE=/var/flashduty/workspace
 ```
 
@@ -199,7 +199,7 @@ Configuration is via command-line flags or environment variables (flags take pre
 | Flag | Env Variable | Required | Default | Description |
 |------|-------------|----------|---------|-------------|
 | `--token` | `FLASHDUTY_RUNNER_TOKEN` | Yes | - | Authentication token |
-| `--url` | `FLASHDUTY_RUNNER_URL` | No | `wss://api.flashcat.cloud/safari/worknode/ws` | WebSocket endpoint |
+| `--url` | `FLASHDUTY_RUNNER_URL` | No | `wss://api.flashcat.cloud/safari/environment/ws` | WebSocket endpoint |
 | `--workspace` | `FLASHDUTY_RUNNER_WORKSPACE` | No | `~/.flashduty-runner/workspace` | Workspace root directory |
 | `--log-level` | `FLASHDUTY_RUNNER_LOG_LEVEL` | No | `info` | Log level: debug, info, warn, error |
 
@@ -238,7 +238,7 @@ journalctl -u flashduty-runner -f
 Enable debug logging to see detailed permission decisions:
 
 ```bash
-flashduty-runner run --token wnt_xxx --log-level debug
+flashduty-runner run --token ent_xxx --log-level debug
 
 # Or via environment variable
 export FLASHDUTY_RUNNER_LOG_LEVEL=debug

README_zh.md

@@ -127,15 +127,15 @@ sudo mv flashduty-runner /usr/local/bin/
 ```bash
 docker run -d \
   --name flashduty-runner \
-  -e FLASHDUTY_RUNNER_TOKEN=wnt_xxx \
+  -e FLASHDUTY_RUNNER_TOKEN=ent_xxx \
   -v /var/flashduty/workspace:/workspace \
   registry.flashcat.cloud/public/flashduty-runner:latest
 
 # 使用自定义端点
 docker run -d \
   --name flashduty-runner \
-  -e FLASHDUTY_RUNNER_TOKEN=wnt_xxx \
-  -e FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/worknode/ws \
+  -e FLASHDUTY_RUNNER_TOKEN=ent_xxx \
+  -e FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/environment/ws \
   -v /var/flashduty/workspace:/workspace \
   registry.flashcat.cloud/public/flashduty-runner:latest
 ```
@@ -144,13 +144,13 @@ docker run -d \
 
 ```bash
 # 基本用法（token 必填）
-flashduty-runner run --token wnt_xxx
+flashduty-runner run --token ent_xxx
 
 # 指定工作区目录
-flashduty-runner run --token wnt_xxx --workspace ~/projects
+flashduty-runner run --token ent_xxx --workspace ~/projects
 
 # 指定自定义 WebSocket 端点
-flashduty-runner run --token wnt_xxx --url wss://custom.example.com/safari/worknode/ws
+flashduty-runner run --token ent_xxx --url wss://custom.example.com/safari/environment/ws
 
 # 查看版本
 flashduty-runner version
@@ -180,8 +180,8 @@ WantedBy=multi-user.target
 创建 `/etc/flashduty-runner/env`：
 
 ```bash
-FLASHDUTY_RUNNER_TOKEN=wnt_xxx
-# FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/worknode/ws
+FLASHDUTY_RUNNER_TOKEN=ent_xxx
+# FLASHDUTY_RUNNER_URL=wss://custom.example.com/safari/environment/ws
 # FLASHDUTY_RUNNER_WORKSPACE=/var/flashduty/workspace
 ```
 
@@ -199,7 +199,7 @@ sudo systemctl enable --now flashduty-runner
 | 参数 | 环境变量 | 必填 | 默认值 | 说明 |
 |------|----------|------|--------|------|
 | `--token` | `FLASHDUTY_RUNNER_TOKEN` | 是 | - | 认证令牌 |
-| `--url` | `FLASHDUTY_RUNNER_URL` | 否 | `wss://api.flashcat.cloud/safari/worknode/ws` | WebSocket 端点 |
+| `--url` | `FLASHDUTY_RUNNER_URL` | 否 | `wss://api.flashcat.cloud/safari/environment/ws` | WebSocket 端点 |
 | `--workspace` | `FLASHDUTY_RUNNER_WORKSPACE` | 否 | `~/.flashduty-runner/workspace` | 工作区根目录 |
 | `--log-level` | `FLASHDUTY_RUNNER_LOG_LEVEL` | 否 | `info` | 日志级别：debug, info, warn, error |
 
@@ -238,7 +238,7 @@ journalctl -u flashduty-runner -f
 启用调试日志以查看详细的权限决策：
 
 ```bash
-flashduty-runner run --token wnt_xxx --log-level debug
+flashduty-runner run --token ent_xxx --log-level debug
 
 # 或通过环境变量
 export FLASHDUTY_RUNNER_LOG_LEVEL=debug

cmd/main.go

@@ -13,8 +13,8 @@ import (
 
 	"github.com/spf13/cobra"
 
+	"github.com/flashcatcloud/flashduty-runner/environment"
 	"github.com/flashcatcloud/flashduty-runner/permission"
-	"github.com/flashcatcloud/flashduty-runner/workspace"
 	"github.com/flashcatcloud/flashduty-runner/ws"
 )
 
@@ -35,7 +35,7 @@ var (
 
 // Default values
 const (
-	defaultURL      = "wss://api.flashcat.cloud/safari/worknode/ws"
+	defaultURL      = "wss://api.flashcat.cloud/safari/environment/ws"
 	defaultLogLevel = "info"
 )
 
@@ -67,13 +67,13 @@ func runCmd() *cobra.Command {
 
 Examples:
   # Basic usage (token required)
-  flashduty-runner run --token wnt_xxx
+  flashduty-runner run --token ent_xxx
 
   # Specify workspace directory
-  flashduty-runner run --token wnt_xxx --workspace ~/projects
+  flashduty-runner run --token ent_xxx --workspace ~/projects
 
   # Specify custom API URL
-  flashduty-runner run --token wnt_xxx --url wss://custom.example.com/safari/worknode/ws
+  flashduty-runner run --token ent_xxx --url wss://custom.example.com/safari/environment/ws
 
 Environment variables:
   FLASHDUTY_RUNNER_TOKEN     - Authentication token (required if --token not provided)
@@ -177,7 +177,7 @@ func runRunner() error {
 	checker := permission.NewChecker(map[string]string{"*": "allow"})
 
 	// Create workspace
-	wspace, err := workspace.New(cfg.WorkspaceRoot, checker)
+	wspace, err := environment.New(cfg.WorkspaceRoot, checker)
 	if err != nil {
 		return fmt.Errorf("failed to create workspace: %w", err)
 	}