Update Workspace

Credit balance breakdown for a workspace.

Uses pool accounting: total is the credits ever granted (never decremented), used is cumulative consumption, remaining = total - used.

Customer-safe allowance state with no internal cost detail.

Customer-safe view of a subscribed workspace's spendable balance.

Plan usage is a share, never dollars. The only dollar figure is paid_overage_usd: overage the customer explicitly bought, which only a confirmed payment can add. It is absent, not zero, when they bought none, so an overrun past the plan never reads as a dollar debt.

status rides along because an admitted turn on a past-due account is otherwise indistinguishable from a healthy one — the refusal payload can only carry the warning once work is already being refused, which is after the point of warning anyone.

spendable_now states whether the balance can be spent, rather than leaving a client to re-derive it from the status. A balance survives the statuses that refuse every turn, so a client deciding for itself which those are holds a second copy of keeps_paid_access that nothing keeps in step.

Byte caps the client checks before an upload leaves the browser.

Served rather than restated client-side so the enforced number has one home. A file over the hosting platform's request ceiling is refused before the server's own cap can run, and that refusal reaches the browser without CORS headers — unreadable to the page — so the browser is the only place the size can be explained.