oblien 2.2.45 → 2.3.2

package/dist/workspace.js

@@ -1,7 +1,9 @@
+import { OblienError } from './error.js';
 import { Runtime } from './runtime.js';
 import { LifecycleResource } from './resources/lifecycle.js';
 import { NetworkResource } from './resources/network.js';
 import { SshResource } from './resources/ssh.js';
+import { DesktopResource } from './resources/desktop.js';
 import { PublicAccessResource } from './resources/public-access.js';
 import { ResourcesResource } from './resources/resources.js';
 import { SnapshotsResource } from './resources/snapshots.js';
@@ -50,6 +52,7 @@ export class Workspace {
     network;
     /** SSH access - enable, disable, set password/key. */
     ssh;
+    desktop;
     /** Public port access - expose and revoke ports. */
     publicAccess;
     /** Resources - CPU, memory, disk allocation. */
@@ -80,6 +83,7 @@ export class Workspace {
         this.lifecycle = new LifecycleResource(this._http);
         this.network = new NetworkResource(this._http);
         this.ssh = new SshResource(this._http);
+        this.desktop = new DesktopResource(this._http);
         this.publicAccess = new PublicAccessResource(this._http);
         this.resources = new ResourcesResource(this._http);
         this.snapshots = new SnapshotsResource(this._http);
@@ -93,11 +97,14 @@ export class Workspace {
         this.domains = new DomainsResource(this._http);
     }
     // ── CRUD ──────────────────────────────────────────────────────────
-    /** Create a new workspace. */
-    async create(params = {}) {
+    /** Create a workspace; wait for its runtime unless wait_ready is false. */
+    async create(params = {}, options = {}) {
         // Flatten convenience resource fields into config so the backend sees them.
         // Backend extracts cpus/memory_mb/disk_size_mb from config.
-        const { cpus, memory_mb, disk_size_mb, ...rest } = params;
+        const { cpus, memory_mb, disk_size_mb, wait_ready = true, ready_timeout_seconds = 600, ...rest } = params;
+        const timeoutMs = options.timeoutMs ?? ready_timeout_seconds * 1000;
+        if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+            throw new RangeError('Readiness timeout must be positive');
         const config = { ...rest.config };
         if (cpus !== undefined)
             config.cpus = cpus;
@@ -105,8 +112,80 @@ export class Workspace {
             config.memory_mb = memory_mb;
         if (disk_size_mb !== undefined)
             config.disk_size_mb = disk_size_mb;
-        const body = { ...rest, config };
-        const res = await this._http.request({ method: 'POST', path: this._base, body });
+        const body = { ...rest, config, wait_ready: false };
+        const res = await this._http.request({ method: 'POST', path: this._base, body, signal: options.signal });
+        if (!wait_ready)
+            return res.workspace;
+        return this._waitUntilReady(res.workspace.id, { ...options, timeoutMs }, res.workspace);
+    }
+    /** Wait for an accepted creation using short status requests. */
+    waitUntilReady(workspaceId, options = {}) {
+        return this._waitUntilReady(workspaceId, options);
+    }
+    async _waitUntilReady(workspaceId, options, initial) {
+        const timeoutMs = options.timeoutMs ?? 600_000;
+        if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
+            throw new RangeError('Readiness timeout must be positive');
+        const controller = new AbortController();
+        const abort = () => controller.abort(options.signal?.reason);
+        options.signal?.addEventListener('abort', abort, { once: true });
+        if (options.signal?.aborted)
+            abort();
+        let timedOut = false;
+        const timeout = setTimeout(() => { timedOut = true; controller.abort(); }, timeoutMs);
+        let workspace = initial;
+        try {
+            for (;;) {
+                controller.signal.throwIfAborted();
+                if (!workspace) {
+                    try {
+                        const res = await this._http.request({
+                            method: 'GET', path: `${this._base}/${encodeURIComponent(workspaceId)}`, signal: controller.signal,
+                        });
+                        workspace = res.workspace;
+                    }
+                    catch (error) {
+                        // A short API outage must not turn an accepted creation into failure.
+                        if (!(error instanceof TypeError) && !(error.status >= 500) && error.status !== 429)
+                            throw error;
+                    }
+                }
+                const state = workspace?.provisioning;
+                if (state?.phase === 'deleting')
+                    throw new OblienError('Workspace creation was cancelled', 409, 'WORKSPACE_CREATION_CANCELLED', { workspace_id: workspaceId });
+                if (state?.state === 'failed')
+                    throw new OblienError(state.error?.message || 'Workspace creation failed', 422, state.error?.code || 'CREATE_FAILED', { workspace_id: workspaceId, workspace });
+                if (workspace?.ready === true || (!state && (workspace?.info?.is_running || workspace?.info?.status === 'running')))
+                    return workspace;
+                if (workspace && state?.state === 'ready' && !workspace.ready)
+                    throw new OblienError('Workspace creation completed, but the workspace has stopped', 409, 'WORKSPACE_STOPPED', { workspace_id: workspaceId, workspace });
+                await new Promise((resolve, reject) => {
+                    const interrupted = () => { clearTimeout(timer); reject(controller.signal.reason); };
+                    const timer = setTimeout(() => { controller.signal.removeEventListener('abort', interrupted); resolve(); }, 2000);
+                    controller.signal.addEventListener('abort', interrupted, { once: true });
+                    if (controller.signal.aborted)
+                        interrupted();
+                });
+                workspace = undefined;
+            }
+        }
+        catch (error) {
+            if (timedOut)
+                throw new OblienError('Timed out waiting for workspace readiness; creation continues', undefined, 'WORKSPACE_READY_TIMEOUT', { workspace_id: workspaceId });
+            if (options.signal?.aborted)
+                throw new OblienError('Stopped waiting for workspace readiness; creation continues', undefined, 'WORKSPACE_WAIT_ABORTED', { workspace_id: workspaceId });
+            throw error;
+        }
+        finally {
+            clearTimeout(timeout);
+            options.signal?.removeEventListener('abort', abort);
+        }
+    }
+    /** Retry a failed creation with its existing ID and configuration. */
+    async retryCreation(workspaceId) {
+        const res = await this._http.request({
+            method: 'POST', path: `${this._base}/${encodeURIComponent(workspaceId)}/provisioning/retry`,
+        });
         return res.workspace;
     }
     /** List workspaces with optional pagination / filters. */
@@ -196,7 +275,7 @@ export class Workspace {
         if (!options?.force) {
             const cached = this._runtimes.get(workspaceId);
             if (cached && (Date.now() - cached.fetchedAt) < this._tokenTtlMs) {
-                return cached.runtime;
+                return options?.target ? cached.runtime.forTarget(options.target) : cached.runtime;
             }
         }
         /* ── 2. Check status (lightweight GET, no side-effects) ── */
@@ -218,7 +297,7 @@ export class Workspace {
         }
         const rt = new Runtime({ token });
         this._runtimes.set(workspaceId, { runtime: rt, fetchedAt: Date.now() });
-        return rt;
+        return options?.target ? rt.forTarget(options.target) : rt;
     }
     /**
      * Set the token TTL used by the runtime cache.

package/dist/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAkBzD;;;GAGG;AACH,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,SAAS;IACpB,gBAAgB;IACP,KAAK,CAAa;IAEV,KAAK,GAAG,YAAY,CAAC;IAEtC,2EAA2E;IAC1D,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElE,uEAAuE;IAC/D,WAAW,GAAG,oBAAoB,CAAC;IAE3C,qEAAqE;IAErE,uDAAuD;IAC9C,SAAS,CAAoB;IAEtC,qEAAqE;IAC5D,OAAO,CAAkB;IAElC,sDAAsD;IAC7C,GAAG,CAAc;IAE1B,oDAAoD;IAC3C,YAAY,CAAuB;IAE5C,gDAAgD;IACvC,SAAS,CAAoB;IAEtC,8BAA8B;IACrB,SAAS,CAAoB;IAEtC,kDAAkD;IACzC,SAAS,CAAoB;IAEtC,+CAA+C;IACtC,OAAO,CAAkB;IAElC,iDAAiD;IACxC,KAAK,CAAgB;IAE9B,2BAA2B;IAClB,QAAQ,CAAmB;IAEpC,+DAA+D;IACtD,SAAS,CAAoB;IAEtC,sCAAsC;IAC7B,IAAI,CAAe;IAE5B,qBAAqB;IACZ,MAAM,CAAiB;IAEhC,4DAA4D;IACnD,OAAO,CAAkB;IAElC;;OAEG;IACH,YAAY,MAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAE1B,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,qEAAqE;IAErE,8BAA8B;IAC9B,KAAK,CAAC,MAAM,CAAC,SAAgC,EAAE;QAC7C,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAC1D,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAA6B,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC1D,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QAEnE,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAC3C,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,IAAI,CAAC,SAA8B,EAAE;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB;YAC/C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,MAAqD;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CACxD,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAA6B;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CACtE,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,qEAAqE;IAErE,yBAAyB;IACzB,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,MAA4B;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,wBAAwB;IACxB,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,MAAiC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,qEAAqE;IAErE,qCAAqC;IACrC,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,QAAQ,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,WAAW,CAAC,MAA4D;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,WAAW;YAC9B,KAAK,EAAE,MAA4C;SACpD,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IAErE;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,OAA6B;QAC9D,yDAAyD;QACzD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO,MAAM,CAAC,OAAO,CAAC;YACxB,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,MAAM,GAAoB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEzE,IAAI,KAAyB,CAAC;QAE9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,kEAAkE;YAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC5D,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3D,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,kDAAkD,WAAW,IAAI;gBACjE,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,WAAmB;QACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,0CAA0C;IAC1C,qBAAqB;QACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAmBzD;;;GAGG;AACH,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,SAAS;IACpB,gBAAgB;IACP,KAAK,CAAa;IAEV,KAAK,GAAG,YAAY,CAAC;IAEtC,2EAA2E;IAC1D,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElE,uEAAuE;IAC/D,WAAW,GAAG,oBAAoB,CAAC;IAE3C,qEAAqE;IAErE,uDAAuD;IAC9C,SAAS,CAAoB;IAEtC,qEAAqE;IAC5D,OAAO,CAAkB;IAElC,sDAAsD;IAC7C,GAAG,CAAc;IACjB,OAAO,CAAkB;IAElC,oDAAoD;IAC3C,YAAY,CAAuB;IAE5C,gDAAgD;IACvC,SAAS,CAAoB;IAEtC,8BAA8B;IACrB,SAAS,CAAoB;IAEtC,kDAAkD;IACzC,SAAS,CAAoB;IAEtC,+CAA+C;IACtC,OAAO,CAAkB;IAElC,iDAAiD;IACxC,KAAK,CAAgB;IAE9B,2BAA2B;IAClB,QAAQ,CAAmB;IAEpC,+DAA+D;IACtD,SAAS,CAAoB;IAEtC,sCAAsC;IAC7B,IAAI,CAAe;IAE5B,qBAAqB;IACZ,MAAM,CAAiB;IAEhC,4DAA4D;IACnD,OAAO,CAAkB;IAElC;;OAEG;IACH,YAAY,MAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAE1B,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,qEAAqE;IAErE,2EAA2E;IAC3E,KAAK,CAAC,MAAM,CAAC,SAAgC,EAAE,EAAE,UAAgC,EAAE;QACjF,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,GAAG,IAAI,EAAE,qBAAqB,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAC1G,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,qBAAqB,GAAG,IAAI,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAA6B,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC1D,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QAEnE,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAEpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACnE,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;QACtC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;IAED,iEAAiE;IACjE,cAAc,CAAC,WAAmB,EAAE,UAAgC,EAAE;QACpE,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,OAA6B,EAAE,OAAuB;QACvG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QAC9G,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtF,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA6C;4BAC/E,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;yBACnG,CAAC,CAAC;wBACH,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,sEAAsE;wBACtE,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,IAAI,CAAC,CAAE,KAAqB,CAAC,MAAO,IAAI,GAAG,CAAC,IAAK,KAAqB,CAAC,MAAM,KAAK,GAAG;4BAAE,MAAM,KAAK,CAAC;oBACtI,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,SAAS,EAAE,YAAY,CAAC;gBACtC,IAAI,KAAK,EAAE,KAAK,KAAK,UAAU;oBAAE,MAAM,IAAI,WAAW,CAAC,kCAAkC,EAAE,GAAG,EAAE,8BAA8B,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC/J,IAAI,KAAK,EAAE,KAAK,KAAK,QAAQ;oBAAE,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,2BAA2B,EAAE,GAAG,EAC3G,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClF,IAAI,SAAS,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,IAAI,SAAS,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC;oBAAE,OAAO,SAAU,CAAC;gBACvI,IAAI,SAAS,IAAI,KAAK,EAAE,KAAK,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK;oBAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,EAAE,GAAG,EACrJ,mBAAmB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,WAAW,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACrF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAClH,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzE,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;wBAAE,WAAW,EAAE,CAAC;gBAC/C,CAAC,CAAC,CAAC;gBACH,SAAS,GAAG,SAAS,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,IAAI,WAAW,CAAC,+DAA+D,EAAE,SAAS,EAC5G,yBAAyB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,EAAE,SAAS,EACzH,wBAAwB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA6C;YAC/E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,WAAW,CAAC,qBAAqB;SAC5F,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,IAAI,CAAC,SAA8B,EAAE;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB;YAC/C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,MAAqD;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CACxD,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAA6B;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CACtE,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,qEAAqE;IAErE,yBAAyB;IACzB,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,MAA4B;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,wBAAwB;IACxB,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,MAAiC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,qEAAqE;IAErE,qCAAqC;IACrC,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,QAAQ,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,WAAW,CAAC,MAA4D;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,WAAW;YAC9B,KAAK,EAAE,MAA4C;SACpD,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IAErE;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,OAA8C;QAC/E,yDAAyD;QACzD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACrF,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,MAAM,GAAoB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEzE,IAAI,KAAyB,CAAC;QAE9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,kEAAkE;YAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC5D,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3D,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,kDAAkD,WAAW,IAAI;gBACjE,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,WAAmB;QACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,0CAA0C;IAC1C,qBAAqB;QACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF"}

package/docs/billing.md

@@ -0,0 +1,137 @@
+# Namespace billing
+
+Available in `oblien@2.3.0`, with the matching namespace billing API deployment.
+Each customer uses a namespace with its own subscription, Stripe customer, quota,
+and billing portal. Keep your `admin` or `billing` API key on your server. Resolve
+the namespace from the authenticated customer's record before calling these methods.
+Namespace/workspace tokens cannot access billing.
+Do not reassign a customer's namespace slug to someone else: its billing history
+stays attached to that owner/namespace identity.
+
+```typescript
+import Oblien from 'oblien';
+
+const client = new Oblien({
+  clientId: process.env.OBLIEN_CLIENT_ID!,
+  clientSecret: process.env.OBLIEN_CLIENT_SECRET!,
+});
+const namespace = authenticatedCustomer.namespace;
+```
+
+## Hosted subscriptions and top-ups
+
+```typescript
+const { plans, creditPacks } = await client.billing.catalog();
+const checkout = await client.billing.checkout({
+  namespace,
+  kind: 'subscription',
+  planTierId: plans.find(plan => plan.tierId === 'pro')!.tierId,
+  billingInterval: 'monthly',
+  customer: { email: authenticatedCustomer.email },
+  idempotencyKey: `subscription-${orderId}`,
+  successUrl: 'https://app.example.com/billing/success',
+  cancelUrl: 'https://app.example.com/billing',
+});
+// Redirect to checkout.url. Wait for the paid entitlement before granting access.
+
+const entitlement = await client.billing.entitlement(namespace);
+const balance = await client.billing.balance(namespace);
+
+const topup = await client.billing.checkout({
+  namespace,
+  kind: 'topup',
+  packId: creditPacks[0].packId,
+  idempotencyKey: `topup-${orderId}`,
+});
+```
+
+Use catalog IDs and prices. Return URLs must be host-allowlisted by the operator;
+otherwise they fall back to Oblien's dashboard. Optional `customer` details apply
+to the first namespace checkout, without copying the API-key owner's details.
+Reuse an idempotency key only when retrying the identical request.
+
+Paid subscriptions provision the namespace and set its quota. Renewals reset usage
+once per cycle; purchased top-ups increase the ceiling and survive renewal.
+Top-ups, renewals, and funded policy changes clear suspensions caused by billing;
+manual suspensions stay in place. Workspaces can then be started explicitly.
+
+## Customer billing management
+
+```typescript
+const portal = await client.billing.portal({
+  namespace,
+  returnUrl: 'https://app.example.com/billing',
+});
+// Redirect to portal.url for invoices, payment methods, contact details, cancellation.
+
+const { subscription } = await client.billing.subscription(namespace);
+// subscription === null if this namespace has never subscribed.
+// subscription.cancelAtPeriodEnd drives "cancels on…" / "keep subscription" UI.
+
+await client.billing.cancelSubscription(namespace); // Ends renewal after the paid period.
+await client.billing.resumeSubscription(namespace); // Clears a scheduled cancellation.
+```
+
+Every management method addresses exactly one owner/namespace pair. `portal()`
+requires `namespace`; older local integrations using `portal({ returnUrl })` must
+add it. The owner dashboard uses its separate `/credits/manage` endpoint.
+
+Cancel/resume are safe to repeat. Cancellation keeps paid access through `periodEnd`.
+An ended subscription must be purchased again through checkout. Tier changes also
+use a new paid checkout: it replaces only this namespace's subscription and starts a
+full-price cycle; there is no automatic proration. Portal tier switching is disabled.
+
+| Error code | Meaning |
+| --- | --- |
+| `no_customer` | This namespace has no Stripe customer yet. |
+| `billing_customer_conflict` | Legacy billing shares a Stripe customer; the operator must separate it. |
+| `no_subscription` | No subscription to cancel/resume. |
+| `subscription_ended` | Start a new checkout instead of resuming. |
+| `billing_identity_conflict` | Stored billing and Stripe identity disagree. |
+
+## Bring your own payments
+
+```typescript
+await client.billing.setDefaults({
+  quotaLimit: 1000, overdraft: 0, suspendThreshold: 0, autoApply: true,
+});
+await client.billing.setPolicy(namespace, {
+  quotaLimit: 5000, overdraft: 100, suspendThreshold: 100,
+  onOverdraftAction: 'stop_workspaces',
+});
+const policy = await client.billing.policy(namespace);
+
+// Call after your next payment cycle clears. Reuse the same timestamp on retry.
+const reset = await client.billing.resetQuota(namespace, {
+  periodEnd: '2026-10-01T00:00:00Z',
+});
+// reset.applied is false for the same or an older cycle.
+```
+
+Setting policy preserves usage. `resetQuota()` resets usage and threshold markers,
+preserving purchased credits and the policy. It returns `subscription_managed` for
+a live Oblien-hosted subscription, whose paid invoices reset quota automatically.
+Defaults apply to newly created namespaces. Without a policy/default, a namespace
+is uncapped. `overdraft` must not exceed `suspendThreshold` when both are set.
+
+## Access and reconciliation
+
+`entitlement()` returns `active`, `past_due`, `credit_exhausted`, or `canceled`.
+
+The paid tier and period belong to that namespace's subscription. An account or
+sibling namespace subscription cannot supply them. A namespace that has never
+subscribed returns `tierId: 'free'` with null period dates; its policy determines
+available credit. Zero-credit defaults are initialized by both namespace creation
+and ensure, so a new namespace immediately returns `credit_exhausted`. Usage and
+balances preserve fractional credits.
+`balance()` checks suspension and spending capacity; a subscription-only product
+must also check entitlement and whether a subscription exists.
+
+Subscribe to `payment.succeeded`, `entitlement.changed`, `subscription.renewed`,
+`subscription.updated`, `subscription.past_due`, `subscription.canceled`,
+`subscription.tier_changed`, `namespace.suspended`, and `namespace.restored` using
+`client.webhooks`. Verify the signature on raw bytes and deduplicate event IDs.
+Webhook delivery is best effort: reconcile with `entitlement()` and
+`subscription()` when the customer returns to billing or an event is missed.
+
+[Full API contract](https://oblien.com/docs/api/billing)

package/docs/desktop.md

@@ -0,0 +1,83 @@
+# Remote desktop
+
+Desktop is an image capability. The same API works for Mac and Linux desktop
+providers. Access defaults off and changes without reboot. Disabling it closes
+desktop sessions and preserves terminal/SSH/workloads. The saved choice survives
+workspace restart.
+
+```ts
+const runtime = await client.workspaces.runtime(workspaceId);
+if ((await runtime.desktop.status()).supported) {
+  await runtime.desktop.enable();
+  const viewerUrl = runtime.desktop.url(); // Credential-bearing URL: keep private.
+  const tunnel = await runtime.desktop.tunnel({ port: 5901 }); // Node.js only
+  // Connect a VNC client to tunnel.url (vnc://127.0.0.1:5901).
+  await tunnel.close();
+  await runtime.desktop.disable();
+}
+```
+
+Status includes `supported`, `enabled`, `available`, `credentials` and
+`transports`. If `credentials` is true, `runtime.desktop.credentials()` returns
+the image's OS account. For Mac this is `oblien` with its per-workspace password,
+also used by SSH. The method requires enabled desktop access.
+
+Creation accepts `config.desktop: { enabled: true }`. Live changes use these
+methods without changing CPU, RAM or boot settings. `forTarget()` changes command
+and file targets, while desktop continues to address the workspace image.
+
+## CLI
+
+The desktop-enabled 2.3.2 build is an official downloadable package:
+
+```sh
+npm install -g https://oblien.com/downloads/oblien-2.3.2.tgz
+oblien login
+oblien desktop status WORKSPACE_ID
+oblien desktop enable WORKSPACE_ID
+oblien desktop vnc WORKSPACE_ID --port 5901
+```
+
+Keep the command running and open `vnc://127.0.0.1:5901` in a VNC client.
+`oblien desktop credentials WORKSPACE_ID` retrieves the optional OS login account.
+Ctrl+C closes the local tunnel. `oblien desktop disable WORKSPACE_ID` disconnects
+all desktop clients for that workspace.
+
+Browser and native VNC traffic use the same authenticated WSS gateway route.
+The Node tunnel sends its credential in an Authorization header, binds only to
+local loopback and applies stream backpressure. No public raw VNC port is needed.
+Token rotation or Runtime API disable revokes these connections too; obtain a
+fresh runtime credential to reconnect. The package is downloadable independently
+of npm registry publication.
+
+## Native SSH/VNC apps
+
+Enable desktop access, then issue an eight-hour desktop-only connection:
+
+```ts
+const connection = await client.workspaces.desktop.sshConnection(workspaceId);
+// Or: await client.workspace(workspaceId).desktop.sshConnection();
+// Treat connection.ssh.password as a secret; do not log it.
+```
+
+```sh
+oblien desktop ssh WORKSPACE_ID
+```
+
+The response contains `ssh: { host, port, username, password, host_key_fingerprint }`,
+`vnc: { host, port, authentication }` and `expires_at`. In a VNC app with built-in
+SSH tunneling, use the supplied SSH settings and the VNC destination
+`127.0.0.1:5900`. SSH password authentication grants access only to this desktop,
+with no shell or arbitrary forwarding. Verify the host fingerprint on first use.
+No local CLI relay or enabled guest SSH service is required for this path.
+
+Expiry closes active connections. Desktop disable rejects access while disabled;
+re-enable permits unexpired credentials again. Runtime token rotation permanently
+revokes previous desktop credentials. Issuing another connection does not revoke
+older ones. The OS login, if required, uses separate account credentials.
+
+Browser/CLI WSS stays on `workspace.oblien.com` port 443, and managed SSH uses
+`ssh.oblien.com` port 22. Both reach the same private runtime desktop endpoint.
+There is no public raw VNC port. See the
+[native connection guide](https://oblien.com/docs/workspace/desktop#mobile-and-remote-devices)
+for client settings, expiry, security and clipboard limitations.

package/docs/errors.md

@@ -27,8 +27,14 @@ try {
 | `AuthenticationError` | 401 | Invalid or missing credentials |
 | `PaymentRequiredError` | 402 | Credit quota exceeded |
 | `NotFoundError` | 404 | Resource does not exist |
-| `ConflictError` | 409 | Resource in wrong state |
+| `ConflictError` | 409 | Resource in wrong state or workspace/namespace/pool limit reached |
 | `ValidationError` | 422 | Invalid parameters |
 | `RateLimitError` | 429 | Too many requests |
 
 All subclasses extend `OblienError`, so a single `instanceof OblienError` catch handles everything while still exposing `.code`/`.message`/`.details`/`.requestId`.
+
+Legacy API versions may return HTTP 200 with `success: false` for workspace limits.
+The SDK rejects these responses too. The three limit codes
+`SANDBOX_LIMIT_REACHED`, `NAMESPACE_LIMIT_REACHED`, and `POOL_LIMIT_REACHED` become
+`ConflictError`, with the original HTTP status retained in `.status`. HTTP failures
+are also rejected when their JSON body omits `success: false`.

package/docs/notifications.md

@@ -37,4 +37,19 @@ await nt.send(token.token, { title: 'Build done', body: 'Agent finished', data:
 
 Dead device tokens (app uninstalled) are auto-pruned on send.
 
+Inspect `failed` and `errors` even when the request succeeds: acceptance by Oblien
+does not mean FCM delivered to a device.
+
+```typescript
+const result = await nt.send(token.token, { title: 'Build done' });
+for (const error of result.errors ?? []) {
+  console.error(error.code, error.message, error.count);
+}
+```
+
+The API returns sanitized Firebase codes/messages, such as
+`messaging/third-party-auth-error` for an APNs authentication failure. Older API
+deployments return only the delivery counters; deploy the API update to receive
+`errors`.
+
 **Full reference:** [Notifications concept](https://oblien.com/docs/concepts/notifications) · [API](https://oblien.com/docs/api/notifications)

package/docs/workspace-limit-report.md

@@ -0,0 +1,34 @@
+# Openship workspace-limit HTTP status report
+
+Reported 2026-09-17. Openship already rejects this response safely; it is not an
+independent release blocker for Openship.
+
+Some API deployments returned HTTP 200 when workspace creation failed:
+
+```json
+{
+  "success": false,
+  "error": "SANDBOX_LIMIT_REACHED",
+  "code": "SANDBOX_LIMIT_REACHED",
+  "message": "Workspace count limit reached.",
+  "current": 3,
+  "max": 3
+}
+```
+
+Expected behavior is HTTP 409 with the failure code and quota details. The API now
+maps workspace, namespace, and owned-pool limits to 409. A namespace admission
+failure also now sets `success: false`, so the response cannot take the success path.
+
+The SDK patch retains compatibility with legacy HTTP 200 failure envelopes, maps
+these limit codes to `ConflictError`, and preserves the actual response status.
+It also rejects non-2xx JSON responses that omit `success: false`. Creation failures
+do not enter readiness polling or issue a second create request.
+
+Verification: `npm test` passes all 19 SDK tests, including
+`tests/http-errors.test.mjs` for legacy 200, current 409, uppercase error-only codes,
+403/500 JSON responses, and successful asynchronous creation.
+
+This report and patch are recorded in the SDK repository for maintainers. No external
+issue or team message has been sent from this environment. The public npm version
+checked during this work is 2.3.0; these SDK changes require the next SDK release.

package/docs/workspaces.md

@@ -1,5 +1,18 @@
 # Workspaces
 
+`create()` waits for the workspace's default runtime. To return its ID immediately:
+
+```ts
+const pending = await client.workspaces.create({
+  image: 'oblien/ubuntu:24.04',
+  wait_ready: false,
+  idempotency_key: 'my-create-request',
+});
+const ready = await client.workspaces.waitUntilReady(pending.id, { timeoutMs: 300_000 });
+```
+
+Read `workspace.provisioning` for progress and failure details, and `workspace.ready` for readiness. `waitUntilReady` supports `signal`; a timeout or abort stops waiting while creation continues. Errors include `details.workspace_id`. Reuse the same `idempotency_key` if a create response is lost. Failed creation can be retried with `retryCreation(id)` or deleted with `delete(id)`. A deletion accepted with `accepted: true` completes in the background.
+
 A workspace is a hardware-isolated microVM that boots in under a second from any Docker image. It's the only primitive in Oblien — everything else (pages, proxies, domains) hangs off a workspace or the account.
 
 `client.workspaces` is the control-plane resource: create, configure, power, and destroy workspaces, plus a tree of sub-resources. To interact with a *running* workspace's filesystem/exec/terminal, see **[Runtime](./runtime.md)**.
@@ -27,6 +40,12 @@ await ws.delete(workspace.id);
 
 Creating in a namespace enforces that namespace's **resource limits** (max workspaces, per-workspace vCPU/RAM/disk) atomically, and **status** (a suspended/over-quota namespace rejects new workspaces). See **[Namespaces](./namespaces.md)**.
 
+Workspace count, namespace, and owned resource pool limits return HTTP 409 with
+`SANDBOX_LIMIT_REACHED`, `NAMESPACE_LIMIT_REACHED`, or `POOL_LIMIT_REACHED`. The SDK
+throws `ConflictError` for these codes, including older API responses that incorrectly
+used HTTP 200 with `success: false`. It preserves the actual HTTP status in
+`error.status` and rejects before polling for readiness.
+
 ## Power
 
 ```typescript
@@ -37,6 +56,15 @@ await ws.pause(id);    // freeze to disk
 await ws.resume(id);   // thaw
 ```
 
+During billing or manual namespace suspension, scoped credentials can still inspect,
+stop, and delete their own workspaces. Create, start, restart, resume, and other
+mutations return `403 namespace_suspended`. Funding can restore a billing suspension;
+manual suspension requires explicit namespace activation. Restoration leaves
+workspaces stopped until the customer starts them.
+
+Stop is safe to retry when automatic exhaustion or an earlier request has already
+stopped the VM. The API returns success only after the VM node confirms that state.
+
 ## Scoped handle
 
 Bind to one workspace so you never pass the ID again:
@@ -79,4 +107,6 @@ Accessed as namespaces on `client.workspaces`:
 | `logs` | Boot and command logs |
 | `images` | Available base images |
 
+Native macOS SSH uses public-key authentication and the `oblien` login account. Save a public key with `client.workspaces.ssh.setKey(id, { public_key })`, then call `client.workspaces.ssh.enable(id)`. SSH status includes `auth_methods` and the SSH/SCP connection commands. Public SSH can be disabled without affecting the Mac runtime or its private boot connection.
+
 **Full reference:** [API docs](https://oblien.com/docs/api/workspaces)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oblien",
-  "version": "2.2.45",
+  "version": "2.3.2",
   "description": "Official TypeScript SDK for the Oblien Workspace API",
   "type": "module",
   "main": "./dist/index.js",
@@ -30,6 +30,7 @@
     "LICENSE"
   ],
   "scripts": {
+    "test": "npm run build && node --test tests/*.test.mjs",
     "build": "tsc",
     "dev": "tsc --watch",
     "clean": "rm -rf dist",