Workspaces

A workspace is the customer. It owns the apps, the members, the plan, and the shared usage limits. A person can belong to more than one workspace. Each workspace has exactly one owner.

How it works

After an account exists, a person with no workspace names one and can add an icon. That creates the workspace, an owner membership, a Free subscription, and an empty usage period. The next step is the first app. The plan is not chosen during signup.

The sidebar has two switchers. The workspace switcher lists memberships. Choosing one opens the last app in that workspace, or app creation when it has none. The app switcher lists only that workspace’s apps. Addresses use the workspace id, /workspaces/{id}, so two workspaces can share a name. An old /w/{slug} address redirects to that id. The last workspace id is remembered for a year in notifiable_last_workspace. The last app stays in notifiable_last_app.

Roles are viewer, developer, admin, and owner.

• A viewer can open the workspace and its apps.
• A developer can also change an app, its keys, and its environment.
• An admin can also create, delete, and restore apps, and can invite, remove, and change members.
• The owner can also change billing, transfer ownership, and delete the workspace.

Someone who is not a member receives a 404. A member who cannot do the action receives a 403. An app URL is checked against the workspace in the path. A client-supplied workspace is never trusted on its own.

People, connections, usage, and billing live on workspace settings. Connections shows the Apple Developer account saved for the workspace, and named keys for OpenAI, OpenRouter, Anthropic, and Google Gemini. A key shows its name and the first 8 characters of its value, then asterisks. A pen edits or deletes it. An admin or the owner can invite by email as viewer, developer, or admin. The invite lasts seven days. A pending invite for an existing account can be accepted while signed in. A new email goes through sign-in or registration, then the signed link. Nothing is granted before acceptance. The owner counts as a seat. Active members plus pending invites cannot pass the plan’s member cap.

Transfer moves ownership to an existing member. That member becomes the owner, and the previous owner becomes an admin. The owner cannot leave until they transfer. Other members can leave.

Usage reads the open period and the workspace plan. The Apps row shows each live app as a stacked icon beside the count. Free allows 3 apps, 1,000 active subscribers, 5,000 notifications a month, 2 members, and 3 workflows. Starter is 5, 10,000, 100,000, 5, and 10 workflows. Pro is 15, 50,000, 500,000, 15, and unlimited workflows. Scale is unlimited until a custom entitlement exists. The workflow counter counts stored workflows. Creating an app, or restoring one, stops at the app cap. Soft-deleted apps do not count. Active subscribers are the production subscribers in the workspace. Development subscribers are unlimited and are not counted. Notification counters count delivery attempts in the open period. A skip does not count. Workflow counters count stored workflows.

Deleting a workspace removes it for its members. The danger zone states that the workspace, its apps, and everyone in it will be removed, and that this cannot be undone. Delete workspace is a red button, then Confirm delete. Deleting an app does not change the subscription.