oblien 2.3.2 → 2.5.0

package/dist/workspace.js

@@ -15,6 +15,7 @@ import { ApiAccessResource } from './resources/api-access.js';
 import { LogsResource } from './resources/logs.js';
 import { ImagesResource } from './resources/images.js';
 import { DomainsResource } from './resources/domains.js';
+import { WorkspaceDisksResource } from './disks.js';
 /**
  * Default token TTL - 55 minutes.
  * Gateway JWTs typically expire in 60 min; we refresh a bit early.
@@ -53,6 +54,7 @@ export class Workspace {
     /** SSH access - enable, disable, set password/key. */
     ssh;
     desktop;
+    disks;
     /** Public port access - expose and revoke ports. */
     publicAccess;
     /** Resources - CPU, memory, disk allocation. */
@@ -83,7 +85,8 @@ export class Workspace {
         this.lifecycle = new LifecycleResource(this._http);
         this.network = new NetworkResource(this._http);
         this.ssh = new SshResource(this._http);
-        this.desktop = new DesktopResource(this._http);
+        this.desktop = new DesktopResource(this._http, id => this.invalidateRuntime(id));
+        this.disks = new WorkspaceDisksResource(this._http);
         this.publicAccess = new PublicAccessResource(this._http);
         this.resources = new ResourcesResource(this._http);
         this.snapshots = new SnapshotsResource(this._http);
@@ -101,7 +104,7 @@ export class Workspace {
     async create(params = {}, options = {}) {
         // Flatten convenience resource fields into config so the backend sees them.
         // Backend extracts cpus/memory_mb/disk_size_mb from config.
-        const { cpus, memory_mb, disk_size_mb, wait_ready = true, ready_timeout_seconds = 600, ...rest } = params;
+        const { cpus, memory_mb, disk_size_mb, root_disk_id, disks, wait_ready = true, ready_timeout_seconds = 600, ...rest } = params;
         const timeoutMs = options.timeoutMs ?? ready_timeout_seconds * 1000;
         if (!Number.isFinite(timeoutMs) || timeoutMs <= 0)
             throw new RangeError('Readiness timeout must be positive');
@@ -112,6 +115,10 @@ export class Workspace {
             config.memory_mb = memory_mb;
         if (disk_size_mb !== undefined)
             config.disk_size_mb = disk_size_mb;
+        if (root_disk_id !== undefined)
+            config.root_disk_id = root_disk_id;
+        if (disks !== undefined)
+            config.disks = disks;
         const body = { ...rest, config, wait_ready: false };
         const res = await this._http.request({ method: 'POST', path: this._base, body, signal: options.signal });
         if (!wait_ready)
@@ -208,7 +215,8 @@ export class Workspace {
     }
     /** Permanently delete a workspace. */
     async delete(workspaceId) {
-        return this._http.request({ method: 'DELETE', path: `${this._base}/${workspaceId}` });
+        this.invalidateRuntime(workspaceId);
+        return this._http.request({ method: 'DELETE', path: `${this._base}/${workspaceId}` }).finally(() => this.invalidateRuntime(workspaceId));
     }
     /** Get aggregated workspace details. */
     async getDetails(workspaceId) {
@@ -217,15 +225,21 @@ export class Workspace {
     // ── Power / lifecycle shortcuts ───────────────────────────────────
     /** Start a workspace. */
     async start(workspaceId, params) {
-        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/start`, body: params });
+        this.invalidateRuntime(workspaceId);
+        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/start`, body: params })
+            .finally(() => this.invalidateRuntime(workspaceId));
     }
     /** Stop a workspace. */
     async stop(workspaceId) {
-        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/stop` });
+        this.invalidateRuntime(workspaceId);
+        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/stop` })
+            .finally(() => this.invalidateRuntime(workspaceId));
     }
     /** Restart a workspace. */
     async restart(workspaceId) {
-        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/restart` });
+        this.invalidateRuntime(workspaceId);
+        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/restart` })
+            .finally(() => this.invalidateRuntime(workspaceId));
     }
     /** Pause a workspace (preserves memory state). */
     async pause(workspaceId) {
@@ -233,7 +247,9 @@ export class Workspace {
     }
     /** Resume a paused workspace. */
     async resume(workspaceId) {
-        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/resume` });
+        this.invalidateRuntime(workspaceId);
+        return this._http.request({ method: 'POST', path: `${this._base}/${workspaceId}/resume` })
+            .finally(() => this.invalidateRuntime(workspaceId));
     }
     /** Keep-alive ping - renews TTL for temporary workspaces. */
     async ping(workspaceId, params) {

package/dist/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAmBzD;;;GAGG;AACH,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,SAAS;IACpB,gBAAgB;IACP,KAAK,CAAa;IAEV,KAAK,GAAG,YAAY,CAAC;IAEtC,2EAA2E;IAC1D,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElE,uEAAuE;IAC/D,WAAW,GAAG,oBAAoB,CAAC;IAE3C,qEAAqE;IAErE,uDAAuD;IAC9C,SAAS,CAAoB;IAEtC,qEAAqE;IAC5D,OAAO,CAAkB;IAElC,sDAAsD;IAC7C,GAAG,CAAc;IACjB,OAAO,CAAkB;IAElC,oDAAoD;IAC3C,YAAY,CAAuB;IAE5C,gDAAgD;IACvC,SAAS,CAAoB;IAEtC,8BAA8B;IACrB,SAAS,CAAoB;IAEtC,kDAAkD;IACzC,SAAS,CAAoB;IAEtC,+CAA+C;IACtC,OAAO,CAAkB;IAElC,iDAAiD;IACxC,KAAK,CAAgB;IAE9B,2BAA2B;IAClB,QAAQ,CAAmB;IAEpC,+DAA+D;IACtD,SAAS,CAAoB;IAEtC,sCAAsC;IAC7B,IAAI,CAAe;IAE5B,qBAAqB;IACZ,MAAM,CAAiB;IAEhC,4DAA4D;IACnD,OAAO,CAAkB;IAElC;;OAEG;IACH,YAAY,MAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAE1B,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,qEAAqE;IAErE,2EAA2E;IAC3E,KAAK,CAAC,MAAM,CAAC,SAAgC,EAAE,EAAE,UAAgC,EAAE;QACjF,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,GAAG,IAAI,EAAE,qBAAqB,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAC1G,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,qBAAqB,GAAG,IAAI,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAA6B,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC1D,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QAEnE,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAEpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACnE,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;QACtC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;IAED,iEAAiE;IACjE,cAAc,CAAC,WAAmB,EAAE,UAAgC,EAAE;QACpE,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,OAA6B,EAAE,OAAuB;QACvG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QAC9G,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtF,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA6C;4BAC/E,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;yBACnG,CAAC,CAAC;wBACH,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,sEAAsE;wBACtE,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,IAAI,CAAC,CAAE,KAAqB,CAAC,MAAO,IAAI,GAAG,CAAC,IAAK,KAAqB,CAAC,MAAM,KAAK,GAAG;4BAAE,MAAM,KAAK,CAAC;oBACtI,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,SAAS,EAAE,YAAY,CAAC;gBACtC,IAAI,KAAK,EAAE,KAAK,KAAK,UAAU;oBAAE,MAAM,IAAI,WAAW,CAAC,kCAAkC,EAAE,GAAG,EAAE,8BAA8B,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC/J,IAAI,KAAK,EAAE,KAAK,KAAK,QAAQ;oBAAE,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,2BAA2B,EAAE,GAAG,EAC3G,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClF,IAAI,SAAS,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,IAAI,SAAS,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC;oBAAE,OAAO,SAAU,CAAC;gBACvI,IAAI,SAAS,IAAI,KAAK,EAAE,KAAK,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK;oBAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,EAAE,GAAG,EACrJ,mBAAmB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,WAAW,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACrF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAClH,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzE,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;wBAAE,WAAW,EAAE,CAAC;gBAC/C,CAAC,CAAC,CAAC;gBACH,SAAS,GAAG,SAAS,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,IAAI,WAAW,CAAC,+DAA+D,EAAE,SAAS,EAC5G,yBAAyB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,EAAE,SAAS,EACzH,wBAAwB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA6C;YAC/E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,WAAW,CAAC,qBAAqB;SAC5F,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,IAAI,CAAC,SAA8B,EAAE;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB;YAC/C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,MAAqD;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CACxD,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAA6B;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CACtE,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,qEAAqE;IAErE,yBAAyB;IACzB,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,MAA4B;QAC3D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,wBAAwB;IACxB,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,MAAiC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,qEAAqE;IAErE,qCAAqC;IACrC,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,QAAQ,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,WAAW,CAAC,MAA4D;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,WAAW;YAC9B,KAAK,EAAE,MAA4C;SACpD,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IAErE;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,OAA8C;QAC/E,yDAAyD;QACzD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACrF,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,MAAM,GAAoB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEzE,IAAI,KAAyB,CAAC;QAE9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,kEAAkE;YAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC5D,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3D,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,kDAAkD,WAAW,IAAI;gBACjE,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,WAAmB;QACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,0CAA0C;IAC1C,qBAAqB;QACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../src/workspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAmBpD;;;GAGG;AACH,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,SAAS;IACpB,gBAAgB;IACP,KAAK,CAAa;IAEV,KAAK,GAAG,YAAY,CAAC;IAEtC,2EAA2E;IAC1D,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;IAElE,uEAAuE;IAC/D,WAAW,GAAG,oBAAoB,CAAC;IAE3C,qEAAqE;IAErE,uDAAuD;IAC9C,SAAS,CAAoB;IAEtC,qEAAqE;IAC5D,OAAO,CAAkB;IAElC,sDAAsD;IAC7C,GAAG,CAAc;IACjB,OAAO,CAAkB;IACzB,KAAK,CAAyB;IAEvC,oDAAoD;IAC3C,YAAY,CAAuB;IAE5C,gDAAgD;IACvC,SAAS,CAAoB;IAEtC,8BAA8B;IACrB,SAAS,CAAoB;IAEtC,kDAAkD;IACzC,SAAS,CAAoB;IAEtC,+CAA+C;IACtC,OAAO,CAAkB;IAElC,iDAAiD;IACxC,KAAK,CAAgB;IAE9B,2BAA2B;IAClB,QAAQ,CAAmB;IAEpC,+DAA+D;IACtD,SAAS,CAAoB;IAEtC,sCAAsC;IAC7B,IAAI,CAAe;IAE5B,qBAAqB;IACZ,MAAM,CAAiB;IAEhC,4DAA4D;IACnD,OAAO,CAAkB;IAElC;;OAEG;IACH,YAAY,MAA6B;QACvC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAE1B,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED,qEAAqE;IAErE,2EAA2E;IAC3E,KAAK,CAAC,MAAM,CAAC,SAAgC,EAAE,EAAE,UAAgC,EAAE;QACjF,4EAA4E;QAC5E,4DAA4D;QAC5D,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,EAAE,qBAAqB,GAAG,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAC/H,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,qBAAqB,GAAG,IAAI,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QAC9G,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAA6B,CAAC;QAC7D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QAC3C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC1D,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACnE,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACnE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QAE9C,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAEpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CACnE,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC;QACtC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1F,CAAC;IAED,iEAAiE;IACjE,cAAc,CAAC,WAAmB,EAAE,UAAgC,EAAE;QACpE,OAAO,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,OAA6B,EAAE,OAAuB;QACvG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;QAC9G,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QACrC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACtF,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACnC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA6C;4BAC/E,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;yBACnG,CAAC,CAAC;wBACH,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,sEAAsE;wBACtE,IAAI,CAAC,CAAC,KAAK,YAAY,SAAS,CAAC,IAAI,CAAC,CAAE,KAAqB,CAAC,MAAO,IAAI,GAAG,CAAC,IAAK,KAAqB,CAAC,MAAM,KAAK,GAAG;4BAAE,MAAM,KAAK,CAAC;oBACtI,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,SAAS,EAAE,YAAY,CAAC;gBACtC,IAAI,KAAK,EAAE,KAAK,KAAK,UAAU;oBAAE,MAAM,IAAI,WAAW,CAAC,kCAAkC,EAAE,GAAG,EAAE,8BAA8B,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC/J,IAAI,KAAK,EAAE,KAAK,KAAK,QAAQ;oBAAE,MAAM,IAAI,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,2BAA2B,EAAE,GAAG,EAC3G,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,eAAe,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBAClF,IAAI,SAAS,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,IAAI,SAAS,EAAE,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC;oBAAE,OAAO,SAAU,CAAC;gBACvI,IAAI,SAAS,IAAI,KAAK,EAAE,KAAK,KAAK,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK;oBAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,EAAE,GAAG,EACrJ,mBAAmB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;gBACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,MAAM,WAAW,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACrF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAClH,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACzE,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;wBAAE,WAAW,EAAE,CAAC;gBAC/C,CAAC,CAAC,CAAC;gBACH,SAAS,GAAG,SAAS,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,QAAQ;gBAAE,MAAM,IAAI,WAAW,CAAC,+DAA+D,EAAE,SAAS,EAC5G,yBAAyB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,WAAW,CAAC,6DAA6D,EAAE,SAAS,EACzH,wBAAwB,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3D,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,aAAa,CAAC,WAAmB;QACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAA6C;YAC/E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,kBAAkB,CAAC,WAAW,CAAC,qBAAqB;SAC5F,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,0DAA0D;IAC1D,KAAK,CAAC,IAAI,CAAC,SAA8B,EAAE;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAwB;YAC/C,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,KAAK,EAAE,MAAqD;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,4CAA4C;IAC5C,KAAK,CAAC,GAAG,CAAC,WAAmB;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CACxD,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAA6B;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAClC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CACtE,CAAC;QACF,OAAO,GAAG,CAAC,SAAS,CAAC;IACvB,CAAC;IAED,sCAAsC;IACtC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,EAAE,CAC3D,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,UAAU,CAAC,WAAmB;QAClC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAChE,CAAC;IACJ,CAAC;IAED,qEAAqE;IAErE,yBAAyB;IACzB,KAAK,CAAC,KAAK,CAAC,WAAmB,EAAE,MAA4B;QAC3D,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aACjH,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,wBAAwB;IACxB,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,CAAC;aAClG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,UAAU,EAAE,CAAC;aACrG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,QAAQ,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,SAAS,EAAE,CAAC;aACpG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,MAAiC;QAC/D,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,qEAAqE;IAErE,qCAAqC;IACrC,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CACvB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,QAAQ,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,KAAK,CAAC,WAAW,CAAC,MAA4D;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAc;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,WAAW;YAC9B,KAAK,EAAE,MAA4C;SACpD,CAAC,CAAC;IACL,CAAC;IAED,qEAAqE;IAErE;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,OAA8C;QAC/E,yDAAyD;QACzD,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC/C,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjE,OAAO,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YACrF,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,MAAM,GAAoB,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAEzE,IAAI,KAAyB,CAAC;QAE9B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,kEAAkE;YAClE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC5D,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QACzB,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC3D,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,kDAAkD,WAAW,IAAI;gBACjE,mEAAmE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED;;;;;OAKG;IACH,WAAW,CAAC,EAAU;QACpB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,WAAmB;QACnC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,0CAA0C;IAC1C,qBAAqB;QACnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF"}

package/docs/billing.md

@@ -1,13 +1,28 @@
 # Namespace billing
 
-Available in `oblien@2.3.0`, with the matching namespace billing API deployment.
+Namespace management is available from `oblien@2.3.0`; reseller checkout and
+status reads from `2.4.0`. The `2.5.0` source adds typed offer policy/resource
+caps and exported reseller types, with the matching API deployment.
 Each customer uses a namespace with its own subscription, Stripe customer, quota,
 and billing portal. Keep your `admin` or `billing` API key on your server. Resolve
 the namespace from the authenticated customer's record before calling these methods.
 Namespace/workspace tokens cannot access billing.
+New namespace checkouts (custom offers, catalog subscriptions and top-ups) require
+an Enterprise owner account or platform-admin Enterprise grant, in both test and
+live mode. Customer plans do not qualify the owner. Ineligible attempts return
+`403 reseller_enterprise_required` before creating a payment session. The catalog
+advertises `reseller.requiredAccountTier`. Existing customer management, renewals
+and refunds remain processable after an owner downgrade.
 Do not reassign a customer's namespace slug to someone else: its billing history
 stays attached to that owner/namespace identity.
 
+Omit `namespace` when creating a personal workspace. Its response has
+`namespace: null`, and billing uses the owner's account wallet and account plan.
+Namespace defaults do not apply to personal workspaces. A namespace literally named
+`default` or `null` is a separate customer budget. An enabled namespace policy,
+including an unlimited one, governs that namespace independently of the owner's
+wallet balance; the wallet still records the charges.
+
 ```typescript
 import Oblien from 'oblien';
 
@@ -45,13 +60,15 @@ const topup = await client.billing.checkout({
 });
 ```
 
-Use catalog IDs and prices. Return URLs must be host-allowlisted by the operator;
-otherwise they fall back to Oblien's dashboard. Optional `customer` details apply
+For catalog products, use catalog IDs and prices. To own your prices, credits and
+limits, use a [reseller offer](#reseller-offers-price-allowance-and-product-text).
+Return URLs must be host-allowlisted by the operator;
+an unapproved host returns `billing_redirect_not_allowed`. Supplied URLs require HTTPS. Optional `customer` details apply
 to the first namespace checkout, without copying the API-key owner's details.
 Reuse an idempotency key only when retrying the identical request.
 
 Paid subscriptions provision the namespace and set its quota. Renewals reset usage
-once per cycle; purchased top-ups increase the ceiling and survive renewal.
+once per cycle; purchased top-ups increase the ceiling and carry only their unused remainder into renewal.
 Top-ups, renewals, and funded policy changes clear suspensions caused by billing;
 manual suspensions stay in place. Workspaces can then be started explicitly.
 
@@ -131,7 +148,226 @@ Subscribe to `payment.succeeded`, `entitlement.changed`, `subscription.renewed`,
 `subscription.updated`, `subscription.past_due`, `subscription.canceled`,
 `subscription.tier_changed`, `namespace.suspended`, and `namespace.restored` using
 `client.webhooks`. Verify the signature on raw bytes and deduplicate event IDs.
-Webhook delivery is best effort: reconcile with `entitlement()` and
+Billing events use a durable outbox with retry. Reconcile with `entitlement()` and
 `subscription()` when the customer returns to billing or an event is missed.
 
 [Full API contract](https://oblien.com/docs/api/billing)
+
+
+## Reseller offers: price, allowance and product text
+
+`POST /billing/checkout` also accepts a server-defined `offer` instead of a catalog `planTierId` or `packId`. Keep this request behind your authenticated backend and resolve the customer's namespace from your own database.
+
+```json
+{
+  "namespace": "tenant-a",
+  "kind": "subscription",
+  "billingInterval": "monthly",
+  "offer": {
+    "reference": "compute-starter-v1",
+    "name": "Compute Starter",
+    "description": "Your hosted application compute plan",
+    "unitAmount": 1000,
+    "currency": "usd",
+    "credits": 100,
+    "policy": { "overdraft": 0, "suspendThreshold": 0, "onOverdraftAction": "stop_workspaces" },
+    "resourceLimits": { "max_workspaces": 2, "max_vcpus": 2, "max_ram_mb": 4096, "max_disk_gb": 32 }
+  },
+  "metadata": { "appOrderId": "order-123", "planVersion": "1" },
+  "idempotencyKey": "order-123",
+  "customer": { "email": "customer@example.com" },
+  "successUrl": "https://app.example.com/billing/return",
+  "cancelUrl": "https://app.example.com/billing"
+}
+```
+
+This charges **$10**, funds the **owner's Oblien wallet** at the standard rate (currently **1,000 platform credits**), and grants **100 namespace credits**. It does not pay out to the reseller. Checkout and invoices use the chosen product name/description. Those display fields do not grant CPU minutes or increase account resource capacity. `kind: 'topup'` adds the allowance as purchased credits; `subscription` sets the included allowance for each paid monthly/yearly cycle. Unused purchased credits carry across renewals; spent top-ups do not replenish.
+
+| Field | Contract |
+| --- | --- |
+| `offer.reference` | Optional application catalog reference, at most 100 characters |
+| `offer.name` | Required customer-facing name, at most 120 characters |
+| `offer.description` | Optional customer-facing text, at most 500 characters |
+| `offer.unitAmount` | Required integer USD cents, 100–1,000,000 ($1–$10,000) |
+| `offer.currency` | `usd` only; defaults to `usd` |
+| `offer.credits` | Required integer namespace allowance, 1–1,000,000,000; independent of wallet funding |
+| `offer.policy` | Subscription only: optional `overdraft`, `suspendThreshold`, `onOverdraftAction`; defaults to zero grace and `stop_workspaces` |
+| `offer.resourceLimits` | Subscription only: nonempty subset of `max_workspaces`, `max_vcpus`, `max_ram_mb`, `max_disk_gb`; values are integers 0–1,000,000,000 or `null` |
+| `metadata` | Optional, only with `offer`: at most 35 string entries; key `[A-Za-z0-9_]`, length 1–40; value at most 500 characters without control characters |
+| `idempotencyKey` | Required with `offer`, nonempty string up to 200 characters; reuse only for an identical request |
+
+Metadata may not override `service`, `user_id`, `client_id`, `namespace`, `billing_order_id`, `kind`, `credits`, `amount`, `credits_per_cycle`, `plan_family`, `billing_interval`, prototype keys, or any `oblien_` or `promotion_` prefix. Unknown offer fields are rejected. Customer accepts only `email` and/or `name`; provider customer IDs are never accepted. Custom offers support Oblien-admin promotions when `allowPromotionCodes: true` is supplied. Trials, proration, direct Stripe code entry, and portal price changes remain unsupported.
+
+The contract is saved before contacting the provider. It binds owner, namespace, amount, allowance, metadata, provider customer and checkout mode. Reusing a key with a changed request returns `409 billing_idempotency_conflict`. An interrupted checkout older than the provider's safe idempotency window returns `409 billing_checkout_reconciliation_required`; do not create another payment blindly.
+
+### Saved policy and resource caps
+
+Check `billing.catalog().reseller` before enabling offers with policy or limits:
+`contractVersion >= 2`, `offerPolicy: true`, `resourceLimits: true`, and
+`effectiveResourceLimits: true` identify support in the deployed API. A dashboard-only deployment does not add this API
+capability. SDK 2.4.0 already transports reseller offers; the 2.5.0 source adds
+these TypeScript fields and public reseller type exports.
+
+Grace is zero by default. To permit 60 extra namespace credits, save
+`policy: { overdraft: 60, suspendThreshold: 60, onOverdraftAction: 'stop_workspaces' }`
+on the subscription offer. `suspendThreshold` must be at least `overdraft`.
+`quota.balance` already includes grace (`limit + overdraft - used`); never add it
+again on the client. A top-up adds purchased allowance and cannot change policy
+or resource caps.
+
+The saved price, allowance, metadata, grace and resource caps are reused for
+renewals. Editing your catalog does not alter existing subscriptions. The cycle
+checkpoint, allowance reset, grace and receipt allocation commit in one database
+transaction. VM admission reads caps from that committed cycle, so a missed
+reseller webhook cannot leave a larger namespace mirror as a bypass. A full
+refund of the current cycle removes its remaining allowance and grace; an old
+invoice refund cannot erase a newer cycle.
+
+`max_workspaces` counts allocated workspaces in this namespace. CPU, RAM and disk
+are per-workspace caps. Oblien resolves the strictest cap from the saved offer,
+configured namespace policy, owner account and platform. `null` inherits capacity;
+it never removes another layer's restriction. Clients submit policy directly
+without fetching account quota or calculating capacity. Namespace detail and
+mutation responses expose `effective_resource_limits` separately from the saved
+`resource_limits`; these are ceilings, not capacity reservations. Concurrent
+creates reserve slots under a namespace lock. Create, resize and subsequent VM
+start/resume/wake/snapshot-resume check the caps. Lowering limits does not delete
+existing workspaces or resize running machines; arrange any necessary cleanup
+or stop/resize before moving customers to a smaller plan. Service, project,
+seat and other application limits belong to your application and can be saved
+as versioned metadata; Oblien does not interpret those metadata fields.
+
+Only the namespace receives this subscription. Owner plan reads, owner portal
+customer lookup and owner plan replacement exclude namespace subscriptions.
+The owner's wallet receives payment funding, and that wallet entry does not
+change the owner's platform plan.
+
+Stripe, the payment database, namespace storage and VM hosts are separate
+systems. The whole network operation is not one distributed transaction:
+receipts and cycle checkpoints make retries safe, and fresh entitlement/status
+reads prevent a checkout redirect from granting access before fulfillment.
+
+### Inspect a reseller checkout
+
+```
+GET /billing/checkout/:checkoutId?namespace=tenant-a
+```
+
+Requires an `admin` or `billing` credential. Looks up both owner and namespace before contacting Stripe. Returns `404 no_checkout` for an unknown or differently scoped session. This lookup supports saved reseller offers; catalog payments use entitlement/subscription and payment events.
+
+```json
+{
+  "success": true,
+  "namespace": "tenant-a",
+  "checkout": {
+    "id": "cs_...",
+    "kind": "subscription",
+    "status": "complete",
+    "paymentStatus": "paid",
+    "fulfilled": true,
+    "fulfillmentStatus": "completed",
+    "walletCreditsGranted": 1000,
+    "namespaceCreditsGranted": 100,
+    "billingInterval": "monthly",
+    "subscriptionId": "sub_...",
+    "offer": {
+      "reference": "compute-starter-v1",
+      "name": "Compute Starter",
+      "unitAmount": 1000,
+      "currency": "usd",
+      "credits": 100
+    },
+    "metadata": { "appOrderId": "order-123", "planVersion": "1" }
+  }
+}
+```
+
+`fulfilled` means initial processing finished; always inspect the net credit fields and `fulfillmentStatus` for `partially_refunded`, `refunded` or `disputed`. Use `GET /billing/entitlement` and `/billing/balance` for current access. The lookup describes the checkout's initial payment, not its later renewal invoices. Reseller subscriptions also expose `offer` and `metadata` through `GET /billing/subscription`; their `tierId` is `reseller` and does not upgrade owner capacity.
+
+Custom `payment.succeeded`, `subscription.renewed` and `entitlement.changed` events include `orgRef`, `namespace`, `kind`, `checkoutId`, `paymentId`, saved `offer`, application `metadata`, `amount: { unitAmount, currency }`, net `walletCredits` and `namespaceCredits`. Fulfillment uses stable receipt-based event IDs. Verify the raw-body HMAC, deduplicate by event ID, then re-read entitlement to handle reordering. Financial billing events are committed to a durable outbox with retries. Keep reconciliation polling to handle delayed or exhausted delivery and event reordering.
+
+### Useful checkout and portal errors
+
+Billing responses include a safe diagnostic code and message. Internal failures include a `details.reference` correlated with backend logs; SQL and raw provider requests are not returned.
+
+```json
+{
+  "success": false,
+  "error": "billing_database_collation_error",
+  "code": "billing_database_collation_error",
+  "message": "Oblien billing storage is misconfigured. Contact Oblien support with the reference below.",
+  "details": {
+    "cause": "ER_CANT_AGGREGATE_NCOLLATIONS",
+    "retryable": false,
+    "reference": "support-reference"
+  }
+}
+```
+
+| HTTP | Code | Action |
+| --- | --- | --- |
+| 400 | `invalid_offer`, `invalid_billing_metadata`, `ambiguous_checkout_offer` | Correct the backend request |
+| 400 | `billing_redirect_not_allowed` | Ask the operator to allowlist the browser return host in `REDIRECT_ALLOWED_HOSTS` |
+| 401 / 403 | authentication or scope error | Use deployed routes and server-side `admin`/`billing` credentials |
+| 404 | `no_customer`, `no_subscription`, `no_checkout` | No matching record in this owner/namespace; never fall back to another customer |
+| 409 | `billing_customer_conflict`, `billing_identity_conflict` | Reconcile an isolated customer binding; do not bypass the check |
+| 409 | `billing_idempotency_conflict`, `billing_checkout_reconciliation_required` | Reconcile the existing application order |
+| 502 / 503 | `billing_provider_configuration_error`, `billing_provider_unavailable`, `billing_provider_rejected`, `billing_storage_unavailable`, `billing_database_collation_error` | Display the safe message/reference and fix the provider or backend configuration |
+
+Supplied checkout and portal return URLs must be HTTPS and allowlisted. An invalid host returns an error; it is not silently replaced. Omitted URLs use the platform default. Retrying payment creation must reuse the original idempotency key.
+
+SDK 2.4.0 adds typed `offer`/`metadata` and `client.billing.checkoutStatus(namespace, checkoutId)`. For a complete customer onboarding, resource-limit, VM creation and signed webhook walkthrough, see [Build a SaaS or VM reseller](https://oblien.com/docs/saas-reselling).
+
+
+## Promotion codes
+
+Oblien uses Stripe for collection and validates its own administrator-issued codes before creating the Stripe Checkout Session. Native Stripe metadata does not restrict a code to an Oblien owner or namespace, and a native percentage coupon has no dollar cap. Do not enable unrestricted Stripe code entry or use metadata as authorization.
+
+Enable the promotion step for a namespace checkout on your server:
+
+```typescript
+const { url, checkoutId } = await client.billing.checkout({
+  namespace: customer.namespace, // Resolve from your authenticated customer.
+  kind: 'subscription',
+  billingInterval: 'monthly',
+  offer: {
+    reference: 'starter-v1', name: 'Starter', description: 'Your chosen CPU-minute allowance',
+    unitAmount: 1000, currency: 'usd', credits: 100,
+    policy: { overdraft: 0, suspendThreshold: 0, onOverdraftAction: 'stop_workspaces' },
+    resourceLimits: { max_workspaces: 3 },
+  },
+  allowPromotionCodes: true,
+  successUrl: 'https://your-app.com/billing?checkout={CHECKOUT_SESSION_ID}',
+  cancelUrl: 'https://your-app.com/billing',
+  idempotencyKey: `checkout-${order.id}`,
+});
+// Save checkoutId with the customer/order and redirect to url unchanged.
+```
+
+`allowPromotionCodes` is a strict boolean. For `POST /billing/checkout`, omit it or set it to `false` for direct Stripe checkout without code entry. `true` enables Oblien's payment page. A reseller cannot issue codes, override eligibility, choose a coupon, or supply a discount amount. Its authenticated owner ID and saved namespace determine eligibility. Enterprise reseller eligibility and saved quotas/resource caps still apply.
+
+For Oblien's own `POST /credits/purchase` and `POST /credits/subscribe`, code entry is enabled by default and can be disabled with the same flag. `GET /billing/catalog` advertises `promotions.enabled`, `customerEntry: "oblien_hosted"`, `firstPaymentOnly`, `preservesCredits`, `canDisable`, and `namespaceOptIn`.
+
+The enabled response may contain `https://api.oblien.com/billing/pay#<capability>` and an ID starting with `bco_`. Treat both checkout IDs and returned URLs as opaque; do not require a Stripe `cs_` ID. If enforcing a redirect allowlist, allow HTTPS on `api.oblien.com` with exactly `/billing/pay`, no query, credentials or custom port, and a 43-character base64url fragment, as well as your existing Stripe checkout host. Never log the capability or put it in analytics. It grants access to one checkout, not a billing portal or account. The page removes the fragment from the address bar and uses no login-cookie authority.
+
+The `{CHECKOUT_SESSION_ID}` return placeholder is replaced with the same public checkout ID that was saved with the order. `billing.checkoutStatus(namespace, checkoutId)` and signed billing events retain that ID. A browser return is not payment proof: use the verified payment event and re-read status/entitlement.
+
+### Administrator rules and financial treatment
+
+Create, inspect usage, or disable a promotion at **https://admin.oblien.com/promotions**. Only platform operators with `promotions.manage` can create or disable codes, using the existing MFA, idempotent operation queue and audit trail.
+
+Rules include fixed USD amount or percentage plus a required USD cap; minimum purchase; start and expiry; finite total uses; optional uses per owner and per namespace; eligible owner IDs or all owners; account/namespace/both scope; and top-up/subscription checkout kinds. A code for owner `80` in namespace scope can be used only for namespaces under owner `80`. To allow multiple reseller customers, avoid a per-owner limit of one; use per-namespace limits and a bounded total. Rules are immutable; disable a campaign and create a new code to change them. Test and live campaigns are isolated, including queued admin creation.
+
+Promotions apply to the **first payment only**. They do not stack. A $10 offer with a 50% promotion charges $5, funds the full 1,000 Oblien wallet credits at the current standard rate, and grants the offer's independently declared 100 namespace credits. Oblien funds the $5 discount; the receipt and ledger retain list price, cash paid, discount and campaign. Subsequent renewals charge $10 and grant the normal credits/quotas. Any admin-approved plan change uses its separately saved renewal price and credit terms. A namespace payment never subscribes the reseller's owner account to the namespace plan.
+
+The discount cannot exceed the price. A resulting USD total must be zero or at least $0.50. A zero total requires a verified completed Stripe checkout marked paid or no-payment-required; an unpaid or open session never grants credits. This is a promotional subsidy, not test credit.
+
+### Retries, expiry and refunds
+
+Previewing a code consumes no use. Confirming locks the campaign and reserves one use with an immutable checkout selection. The reservation counts against all applicable limits immediately, including concurrent checkouts. The payment session lasts 45 minutes; disabling or expiring a code stops new reservations but honors already reserved payments until their payment session expires. Unstarted links expire after 24 hours. The recovery worker releases abandoned reservations only after confirming that payment is no longer possible.
+
+The verified payment receipt, promotion redemption, wallet credit, namespace allowance/cycle, saved resource policy and billing-event outbox commit in the financial transaction. Replayed provider events cannot grant twice. External Stripe calls are recovered with stable idempotency keys and provider reads; they do not form a distributed SQL transaction.
+
+Refund only the cash actually collected through Stripe's authorized refund controls. Credits, including the funded discount, are reversed proportionally: refunding all $5 above reverses the full 1,000 wallet credits and the corresponding 100 namespace credits. Reversing an old subscription payment cannot reduce a later cycle's allowance. Refunds and disputes retain the original code use. Oblien's admin promotion page does not initiate cash refunds.
+
+Errors use `{ success:false, code, message, requestId }`, with safe diagnostic details when available. Codes include `promotion_unavailable`, `promotion_expired`, `promotion_limit_reached`, `promotion_minimum_amount`, `promotion_payment_too_small`, `checkout_already_started`, `checkout_expired`, and `checkout_rate_limit`. Do not retry a changed selection under the same checkout ID: continue the saved payment or start a new checkout with a new idempotency key.

package/docs/desktop.md

@@ -26,6 +26,38 @@ Creation accepts `config.desktop: { enabled: true }`. Live changes use these
 methods without changing CPU, RAM or boot settings. `forTarget()` changes command
 and file targets, while desktop continues to address the workspace image.
 
+## Add desktop
+
+Ubuntu 24.04/26.04 and Debian 13 offer prepared Cinnamon layers. Discover choices
+from the owned workspace, then add the selected desktop:
+
+```ts
+const desktop = client.workspace(workspaceId).desktop;
+const installation = await desktop.installation();
+if (installation.choices?.length) {
+  await desktop.install({ desktop: installation.choices[0].id, restart: true });
+}
+```
+
+`restart: true` explicitly permits restarting a running workspace. Stopped
+workspaces stay stopped. Poll `installation()` while `phase === 'installing'`;
+`stage` describes progress. Completion is `ready`, or `stopped` with
+`installed: true`. Failures include `error`; retry after fixing the cause.
+An explicit Stop cancels the preparer's deferred restart.
+
+After preparation, obtain the current connection with
+`await client.workspace(workspaceId).runtime()`. Recreate any Runtime object or
+stream held across the restart, as with an ordinary workspace restart.
+
+Prepared programs are shared read-only with private profiles and writes. There
+are no per-workspace downloads, public desktop disk IDs or extra image names.
+Creation with `config.desktop.enabled: true` attaches before first boot and
+honors normal `wait_ready`. Compatible custom/application images without a
+prepared choice still support `install()` using the download-based recipe.
+
+Use `client.disks.listSoftware({ workspace_id: workspaceId })` to browse software
+compatible with a workspace's base OS. Desktop artifacts remain internal.
+
 ## CLI
 
 The desktop-enabled 2.3.2 build is an official downloadable package:

package/docs/namespaces.md

@@ -6,6 +6,13 @@ Group workspaces into isolated namespaces with **resource limits**, **spending q
 const ns = client.namespaces;
 ```
 
+Account namespace counts are enforced atomically by both `create` and `ensure`:
+the owner row is locked and the count and namespace insert share a transaction.
+At the account limit a new namespace returns `409 namespace_limit_exceeded`;
+ensuring an existing namespace remains idempotent. The owner's paid or
+admin-granted Enterprise tier has no namespace-count cap. A customer namespace
+subscription cannot raise it.
+
 ## Create + resource limits
 
 ```typescript
@@ -20,7 +27,19 @@ const { data } = await ns.create({
 });
 ```
 
-Resource limits are enforced **atomically at workspace create and resource upgrade** — over-limit returns `409 NAMESPACE_LIMIT_REACHED`. `max_workspaces` is race-proof (the namespace row is locked + the count re-checked inside the insert transaction). Update them with `ns.update(id, { resource_limits })`.
+Workspace count is reserved **atomically at workspace create**; effective resource caps are checked at create, resize and start/resume/restart/wake/snapshot-resume — over-limit returns `409 NAMESPACE_LIMIT_REACHED`. `max_workspaces` is race-proof (the namespace row is locked + the count re-checked inside the insert transaction). Update them with `ns.update(id, { resource_limits })`.
+
+Declare policy directly. `null` inherits Oblien capacity; zero denies that
+allocation. VM policy integers may exceed current capacity: Oblien applies the
+strictest declared, committed paid-offer, account and platform cap. Clients do
+not calculate or copy the account's machine ceiling into customer contracts.
+Invalid numbers and unknown keys return `invalid_resource_limits`.
+
+`create`, `ensure`, `get` and `update` expose both `data.resource_limits` (saved
+policy) and `data.effective_resource_limits` (current enforced ceilings). The
+latter can change with account capacity while saved customer terms stay intact.
+These limits do not reserve host capacity or funds. Account pool usage and
+credits are checked independently at allocation time.
 
 ## Lifecycle
 
@@ -67,3 +86,45 @@ data.totals.vcpu_hours;   // cpu_time_minutes/60, gb_hours, network_gb, disk_io_
 A namespace-scoped key is pinned to its namespace: list/get/usage/webhooks all auto-filter to it, and it can't widen scope. `user_id` is always the tenant gate.
 
 **Full reference:** [Namespaces API](https://oblien.com/docs/api/namespaces)
+
+
+## Namespace credit alerts and customer recovery
+
+Oblien computes the warning state from the same quota row that enforces spending.
+Read `quota.alert` from `GET /billing/entitlement?namespace=...`, or `alert` from
+`GET /billing/balance?namespace=...`. Namespace quota rows also include `alert`.
+Its `state` is `ok`, `low`, `grace`, `depleted`, `unlimited`, or `disabled`.
+`percent` uses **included allowance + purchased top-ups**, excluding grace.
+`remaining` is paid allowance left; `balance` also includes configured grace.
+All amounts are JSON numbers in Oblien credits. Never add grace to `balance` again.
+
+Subscribe to `namespace.quota.threshold`, `credits.low`, and `credits.depleted`:
+
+- Warning percentages default to **80% and 95%** and can be configured per service.
+  `notificationThresholds: []` disables percentage warnings, not enforcement or
+  exhaustion alerts. A large usage window reports the most urgent crossed state.
+- `credits.low` reports entry into configured grace. Zero grace remains the default.
+  `credits.depleted` reports exhaustion at `balance <= 0`.
+- The usage debit, threshold marker and outgoing alert commit in **one payments
+  transaction**. Delivery retries after failures and API restarts, retaining its
+  signed body and event ID. Metering does not wait for your webhook or email server.
+- Each event identifies `data.namespace`, `data.service`, `data.transaction_id`
+  and a numeric `data.alert` snapshot. Resolve the customer from your saved namespace
+  mapping, verify the signature, and durably save the event and notification job
+  before acknowledging. Deduplicate event IDs, then re-read current entitlement;
+  an old alert may arrive after a top-up or renewal. Do not use event amounts to
+  grant credits or override the current quota.
+- Show a warning banner and a billing action. Use your server-defined top-up offer
+  to create a namespace-bound checkout after the customer chooses to buy. Payment
+  fulfillment increases purchased allowance once; your next entitlement read
+  clears the warning when funded. Workspaces stopped for billing can then be
+  restarted. A top-up does not change the plan's resource caps or grace policy.
+- Paid renewals re-arm warnings and preserve custom notification percentages.
+  A top-up or usage refund that lowers usage below a warning band re-arms that
+  band for the larger remaining budget. Mode A cycles must still be reset by
+  your backend; Mode B cycles renew after verified paid invoices.
+
+External email delivery is asynchronous and can repeat after a lost acknowledgment.
+Use a durable notification queue, honor verified recipient preferences, recheck
+organization membership before delivery, and bind billing links to the intended
+organization. Keep a read-only dashboard warning while email is unavailable.

package/docs/on-demand.md

@@ -0,0 +1,43 @@
+# Sleep and wake on request
+
+Automatic sleep is opt-in for permanent workspaces with memory snapshot support. It covers every exposed HTTP port URL and connected custom domain for that workspace.
+
+```ts
+import Oblien from 'oblien';
+
+const client = new Oblien({
+  clientId: process.env.OBLIEN_CLIENT_ID,
+  clientSecret: process.env.OBLIEN_CLIENT_SECRET,
+});
+const ws = client.workspace('YOUR_WORKSPACE_ID');
+
+// Start your app on 0.0.0.0:3000, then publish it.
+const port = await ws.publicAccess.expose({ port: 3000 });
+await ws.lifecycle.setIdle({ suspend_after: '15m' });
+console.log(port);
+
+// Read the policy/capability or disable automatic sleep.
+console.log(await ws.lifecycle.get());
+await ws.lifecycle.setIdle(null);
+```
+
+Creation accepts the same policy under `config.idle`:
+
+```ts
+const workspace = await client.workspaces.create({
+  image: 'oblien/node:24', mode: 'permanent',
+  config: { idle: { suspend_after: '15m' } },
+});
+```
+
+`suspend_after` accepts seconds or a duration string, with a minimum of 120 seconds. The default `stop_after: 0` keeps saved RAM until wake. An optional retention time of at least one hour discards saved RAM after that long asleep; files remain, but the next wake cold-boots. For example `{ suspend_after: '15m', stop_after: '72h' }` requires an app that starts at boot.
+
+The API coalesces concurrent wake/restore attempts across workers, ports and aliases. The edge waits for the requested application port and forwards each request after readiness. If startup exceeds its wait budget, it returns 503 with `Retry-After: 1`; wake continues. Retry with a deadline/backoff and use application idempotency keys for writes.
+
+Requests and streams through the HTTP edge keep the workspace awake. For background jobs, direct TCP, SSH or runtime work, call `ws.lifecycle.ping()` periodically within the idle timeout or disable automatic sleep. External connections can expire during hibernation and need application-level reconnection.
+
+While this policy is enabled, an existing public route can wake a stopped workspace too. `ws.lifecycle.setIdle(null)` disables automatic sleep and public wake; explicit Restore/Resume remains available. Revoke public ports/disconnect domains to remove public access entirely. Nested KVM workspaces currently reject automatic sleep because Firecracker cannot preserve their nested VM state.
+
+CLI: `oblien lifecycle idle WORKSPACE_ID --after 15m`, optionally `--stop-after 72h`; disable with `--disable`.
+
+See [the hosted guide](https://oblien.com/docs/workspace/on-demand) for dashboard setup and operational details.

package/docs/runtime.md

@@ -10,6 +10,8 @@ const rt = await client.workspace('ws_abc').runtime();
 
 This enables the Runtime API server (if needed), fetches a gateway JWT, and returns a `Runtime` instance. The token is cached — subsequent calls for the same workspace return instantly.
 
+After starting, stopping, restarting or resuming a workspace, call `workspace.runtime()` again. These lifecycle calls invalidate its cached connection; an already-held `Runtime` object is not rewritten. Use `runtime({ force: true })` when the workspace was restarted outside this client.
+
 ## Namespaces
 
 | Namespace | What it does |