yj|ddlmZddlZddlZddlmZddlmZmZddlm Z m Z m Z ddl Z ddl mZmZddlmZmZmZddlmZe rdd lmZejeZdFd Zed GddZed GddZdGdZdHdZdIdZdddJd#Z dKd&Z!dLd)Z"dMd*Z#dd+d,dNd.Z$dMd/Z%ed Gd0d1Z&dd+d,dOd2Z'dPd5Z(dQd6Z)dRd9Z* dSdTd:Z+ed Gd;d<Z,d=Z-dddd>dUd@Z.dMdAZ/dTdBZ0dddCdVdEZ1dS)W) annotationsN) dataclass)datetimetimezone) TYPE_CHECKINGAnyOptional)_is_oauth_tokenresolve_anthropic_token) AuthError_read_codex_tokens!resolve_codex_runtime_credentials)resolve_runtime_provider) TypeGuardreturnrc>tjtjSN)rnowrutc9/home/ragecks/.hermes/hermes-agent/agent/account_usage.py_utc_nowrs < % %%rT)frozencDeZdZUded<dZded<dZded<dZded <dS) AccountUsageWindowstrlabelNzOptional[float] used_percentOptional[datetime]reset_at Optional[str]detail)__name__ __module__ __qualname____annotations__rr!r#rrrrrsNJJJ$(L((((#'H'''' F      rrceZdZUded<ded<ded<dZded<dZd ed <d Zd ed <d Zded<dZd ed<e ddZ dS)AccountUsageSnapshotrprovidersourcer fetched_atzAccount limitstitleNr"planrztuple[AccountUsageWindow, ...]windowstuple[str, ...]detailsunavailable_reasonrboolcHt|jp|jo|j Sr)r3r/r1r2selfs r availablezAccountUsageSnapshot.available,s$DL0DL11Q$:Q6QQrrr3) r$r%r&r'r-r.r/r1r2propertyr7rrrr)r)!sMMMKKK!E!!!!D.0G0000!G!!!!(,,,,, RRRXRRRrr)valuer"ct|pd}|sdS|ddddS)N_ -)rstripreplacer-)r:cleaneds r_title_case_slugrC1s\%+2$$&&G t ??3 $ $ , ,S# 6 6 < < > >>rrr c|dvrdSt|ttfr-tjt|t jSt|tr|}|sdS| dr |dddz} tj |}|j r|n| t jS#t$rYdSwxYwdS)N>Nr<)tzZz+00:00)tzinfo) isinstanceintfloatr fromtimestamprrrr@endswith fromisoformatrHrA ValueError)r:textdts r _parse_dtrR8s t%#u&&E%eEllx|DDDD% {{}} 4 ==   (9x'D '--BG22 (, (G(G G   44  4s >X&&':;; > > >>rFmarkdownsnapshotOptional[AccountUsageSnapshot]rhr3 list[str]c  |sgSd|rdnd|j|rdnd}|g}|jr'|d|jd|jdn|d|j|jD]}|j |jd}nqtdtd t|jz }tdtt|j}|jd |d |d }|j r|d t|j z }n|j r |d|j z }|||j D]}|||jr|d|j|S)Nu📈 z**r<z Provider: rZrUz : unavailablerdz: z % remaining (z% used)u • resets  • z Unavailable: )r-r.appendr*r/rrmaxroundrKr!rfr#r1r2) rirhheaderlineswindowbase remainingusedr#s rrender_account_usage_linesrx_s  YX-TT2 Yx~ Yx?WttUW Y YF HE}7 G("3GGx}GGGHHHH 5("355666"     &l111DDAuS51D+E+E%EFFGGIq%f&9 : :;;<,>@@AAA &:DAAJ 86*66777|%:DAA 5== NNJ K K K w 4G"7"7 "E"EGGHHH()))-0_wsFD)))$##zz 'NN'NN     I &ttsK?IK?8BK??LL$@)rhtimeoutrc ddlm}|}n#t$rd}YnwxYw| t|}t ||S ddlm}|dpid}t|tr| sgSn#t$rgcYSwxYw ddl }ddl m }|jd 5} | |d | } dddn #1swxYwYt%| }t ||S#t$r!t&dd gcYSwxYw)aReturn rendered Nous-credits /usage lines, or [] when there's nothing to show. Account-independent of any live agent: gated on "a Nous account is logged in" (a cheap local auth-state check), then a wall-clock-bounded portal fetch. Shared by the CLI ``_show_usage`` and the TUI ``session.usage`` RPC so both surfaces show the same block regardless of session API-call count or resume state. Fail-open: any auth/portal hiccup or timeout returns [] (the caller shows nothing). Dev override: when HERMES_DEV_CREDITS_FIXTURE selects a fixture state, /usage renders from that fixture instead of the real portal (so the block + gauge are testable without a live account). Throwaway scaffolding. r)dev_fixture_credits_stateNrgget_provider_auth_stater access_token)get_nous_portal_account_info max_workersT force_freshru9credits ▸ /usage portal fetch/render failed (fail-open)exc_info)agent.credits_trackerr Exception_snapshot_from_credits_staterxhermes_cli.authrgetrIrr@concurrent.futuresrrfuturesThreadPoolExecutorsubmitresultrloggerdebug) rhrrfixturerirtok concurrentrpoolaccounts rnous_credits_linesrsCCCCCC++-- /88)(XFFFF;;;;;;&&v..4"99.II3$$  I   !!!!HHHHHH   2 2q 2 A A &Tkk,$"fWf%%  & & & & & & & & & & & & & & &/w77)(XFFFF   P[_ ``` sU ""AB B)(B)-%D5,D > D5 DD5D"D55(E E c  |dSg}g}t|dd}t|ttfrt j|rut|dd}t|dd}d}|r |r d|d|d}|tdtd td |d z| t|dd}|r|d |t|d d}|r|d|t|dd}|r|d|t|dddur|d|s|sdS|dtddtdt|t|S#ttf$rYdSwxYw)uMap a header-shaped CreditsState (e.g. a dev fixture) to the /usage snapshot. Renders the same magnitudes + monthly-grant % window the portal path produces, so HERMES_DEV_CREDITS_FIXTURE can exercise /usage without a live account. The *_usd strings are mock display values here (not server balance to compute on); the % comes from CreditsState.used_fraction (micros math). Fail-open → None. N used_fractionsubscription_limit_usdsubscription_usdr{ of $rrrrrzSubscription credits: $ purchased_usdzTop-up credits: $ remaining_usdzTotal usable: $ paid_accessTFru,(dev fixture — HERMES_DEV_CREDITS_FIXTURE)rz dev-fixturer)r*r+r,r-r/r1)rrIrJrKrrrorrprr)rrrr) stater/r1ufcap_usdsub_usdr#rrs rrrs@/ =4,. UOT 2 2 b3, ' ' DM",=,= e%=tDDGe%7>>GF :7 :9W997999 NN"(!$S#eR%Z*@*@!A!A!   %!3T::  @ NN>W>> ? ? ?==  @ NN>}>> ? ? ?==  > NN<]<< = = = 5- . .% 7 7 NNJ K K K w 4EFFF# zz 'NN'NN      I &ttsF?E'F?/AF??GGcVeZdZUdZded<dZded<dZded <dZded <d Zded <dS) CreditsViewuOSurface-agnostic data for the ``/topup`` balance view. One portal fetch, one parse — consumed identically by the CLI panel, the gateway button, and any other money surface. Fail-open: when not logged in or the portal is unreachable, ``logged_in`` is False / ``topup_url`` is None and callers degrade gracefully. r3rrr0 balance_linesNr" identity_line topup_urlFdepleted) r$r%r&__doc__r'rrrrrrrrrUskOOO%'M''''#'M''''#I####Hrrc td} ddlm}|dpid}t |t r|s|Sn#t$r|cYSwxYw ddl}ddl m }m }|j d 5}||d | } dddn #1swxYwYn.#t$r!t dd |cYSwxYw| t%| dds|St'| } g} | t)| |} d| D} t%| dd} t%| dd}g}| r"|t | |r|d||rdd|znd}td t/| ||| t%| ddduS)uBuild the /topup balance view: balance block + identity line + top-up URL. Reuses the same account fetch + snapshot + URL builder as the /usage credits block, so the numbers always match. The balance block is the rendered snapshot MINUS its trailing top-up/command-hint lines (the /topup surface supplies its own affordance). Fail-open → ``CreditsView(logged_in=False)``. F)rrrrrN)rrrrTrru2credits ▸ /topup portal fetch failed (fail-open)rrrgcg|]R}|d)|dP|SS)zTop up:z(or run)lstrip startswith).0lines r z&build_credits_view..sd   ;;==++I66 KKMM,,Y77     remailorg_namezorg zTopping up as  / r)rrrrr)rrrrrIrr@rrrrrrrrrrrrrrxrojoinr)rhr not_logged_inrrrrrrrrirrenderedrrwhors rbuild_credits_viewrfs %000M;;;;;;&&v..4"99.II3$$ ! !  ! !!!!          2 2q 2 A A Tkk">DkQQXXYG                 ITX YYYgg{EBB*733H "M-hJJJ       GWd + +Ew D11HC  3u::& $($$%%%>%G    sHAA$$ A32A37'C",C C"CC"CC""(D  D base_urltuple[str, str, str]c|pdd}|sd}|dr|dtd }|d|vrdndz}|d z|d z|d zfS) aResolve the Codex backend endpoints (usage, reset-credits list, consume). Mirrors the Codex CLI's PathStyle split (codex-rs backend-client): base URLs containing ``/backend-api`` use the ChatGPT ``/wham/...`` paths; everything else uses ``/api/codex/...``. r</z%https://chatgpt.com/backend-api/codexz/codexNz /backend-apiz/whamz /api/codexz/usagez/rate-limit-reset-creditsz!/rate-limit-reset-credits/consume)r@rstriprMlen)r normalizedprefixs r_codex_backend_urlsrs.b''))0055J =< 8$$2 03x==. 01 n &B&B77 UF,,44 rc,t|dS)Nr)r)rs r_resolve_codex_usage_urlrs x ( ( ++rapi_keytuple[str, str, Optional[str]]c~t|pd}|r&|t|pddfS td}d} t}|dpi}t|ddpdpd}n,#t $rt ddYnwxYw|d t|d dpd|fS#t $rt d dYnwxYwd d lm }|d}| } | td| j t| j p|pddfS)aLResolve Codex quota credentials from the native runtime path. Prefer explicit live-agent credentials, then the legacy singleton OAuth state, then the credential pool. Hermes's native OAuth setup now stores device-code logins in the pool, so quota diagnostics must not depend only on the older singleton store. r<NT)refresh_if_expiringtokens account_idu5codex ▸ /usage account_id read failed (best-effort)rrru@codex ▸ /usage runtime resolver returned no creds; trying poolr) load_pool openai-codexz7No available openai-codex credential in credential pool)rr@rr rr rragent.credential_poolrselect RuntimeErrorruntime_api_keyruntime_base_url) rr explicit_keycredsr token_datarrrentrys r _resolve_codex_usage_credentialsr sw}"%%++--L?SR006688$>>" h1dKKK$(  a+--J^^H--3FVZZ b99?R@@FFHHPDJJ a a a LLP[_L ` ` ` ` ` aYUYYz2%>%>%D"!E!E!K!K!M!MzYY hhh Wbf gggggh0///// 9^ $ $D KKMME }TUUU  #e&<&N&NB"O"O"U"U"W"WY] ]]s8 D+ AB?>D+?&C(%D+'C((AD++&EEc t||\}}}d|ddd}|r||d<tjd5}|t ||}|dddn #1swxYwY|pi}|d pi} g} d D]\} } | | pi} | d }|4| t| t|t| d  g}|dpi}|d}t|ttfrHt|dkr5t|}|dkrdnd}|d|d|d|dpi}|dr|d}t|ttfr'|dt|dn*|dr|dtddtt|d t!| t!|!S)"NBearer application/json codex-cli AuthorizationAccept User-AgentChatGPT-Account-Id.@rheaders rate_limit))primary_windowSession)secondary_windowWeeklyrr!rrr!rate_limit_reset_creditsavailable_countrrsr<z You have  resetz& banked - use /usage reset to activatecredits has_creditsbalanceCredits balance: $.2f unlimitedzCredits balance: unlimitedr usage_api plan_type)r*r+r,r.r/r1)r httpxClientrrraise_for_statusjsonrorrKrRrIrJr)rrCr)rrtokenresolved_base_urlrrclientresponsepayloadrr/keyrrtrwr1 reset_creditsbankedcountpluralr!r#s r_fetch_codex_account_usager7s3,LHV]+^+^(E j*5**$!G 3(2$% d # # #$v::67HIISZ:[[!!###$$$$$$$$$$$$$$$mmoo#G\**0bJ(*GU   U$$*zz.)) <  "4[["6::j#9#9::       GKK :;;ArM   0 1 1F&3,'' CKK!OOF   S S SV S S S   kk)$$*G{{=!!9++i(( gU| , , 9 NNDgDDD E E E E [[ % % 9 NN7 8 8 8 :: gkk+66 7 7gg    s9A??BBc\eZdZUdZded<ded<dZded<dZded<ed d Zd S)CodexResetRedeemResultz>Outcome of a `/usage reset` attempt against the Codex backend.rstatusmessagerrJr windows_resetrr3c|jdkS)Nreset)r:r5s rredeemedzCodexResetRedeemResult.redeemed@s{g%%rNr8) r$r%r&rr'rr<r9r?rrrr9r96snHHKKKLLLOM &&&X&&&rr9r)rrforcer@c ddl} t||\}}}n!#t$rtddcYSwxYwt |\}}} d|ddd } |r|| d < t jd 5} | || } | | pi} | dpi}|d}t|ttfrt|nd}|dkrtddcdddS| dpi}d}dD]g}||pid}t|ttfrt|pdt|}h|duo |tk}|s?|s=|d|ddnd}|dkrdnd}tdd|d|d |d!|"cdddS| | i| d#did$t!|i%}|| pi}dddn #1swxYwYn#t j$rI}|jj}|d&vrtdd'|d(cYd}~Stdd)|d*cYd}~Sd}~wt$r}tdd+|cYd}~Sd}~wwxYwt!|d,dpd}|d-}t|ttfrt|nd}td|dz }|dkrdnd}|d.krX dd/lm}|n,#t$rt2d0d12YnwxYwtd.d3|d4|d5||6S|d7krtd7d8|"S|d9krtd9d:S|d;krtd;d<|"Stdd=|S)>uRedeem one banked Codex rate-limit reset credit (`/usage reset`). Flow (mirrors the Codex CLI's reset-credits picker, codex-rs ``backend-client``): 1. ``GET .../usage`` — read the current windows + banked credit count. 2. Guard: zero banked credits → refuse. No window fully used and not ``force`` → refuse with a warning (a banked reset restores the WHOLE 5h + weekly allowance; burning it early wastes it). The backend has the same protection (``nothing_to_reset`` doesn't consume the credit), but failing fast client-side gives a clearer message. 3. ``POST .../rate-limit-reset-credits/consume`` with a fresh UUID idempotency key (``redeem_request_id``). No ``credit_id`` — the backend picks the next available credit, exactly like the CLI's default "Full reset" option. Never raises: every failure mode returns a ``CodexResetRedeemResult`` with a user-renderable message. rN unavailablezWNo Codex credentials available. Run `hermes auth` to sign in with your ChatGPT account.)r:r;r r rrrrrrrrno_credits_bankedu>No banked reset credits on this account — nothing to redeem.r)rrrrzyour busiest window is only z.0fz% usedz6your current usage could not be confirmed as exhaustedrrr< not_exhaustedu⚠️ Not redeeming: zl. A banked reset restores your FULL 5h + weekly limits, so spending it now would waste most of it. You have r z5 banked. Use `/usage reset --force` to redeem anyway.)r:r;r Content-Typeredeem_request_id)rr,)iiz)Codex backend rejected the request (HTTP ur). Reset credits require ChatGPT-account (OAuth) auth — run `hermes auth` and sign in with your ChatGPT account.zCodex backend error (HTTP u) — try again shortly.z#Could not reach the Codex backend: coder<r>) clear_codex_pool_quota_cooldownsz;Failed to clear Codex pool cooldowns after reset redemptionTru:✅ Reset redeemed — your usage limits have been reset. z banked resetz remaining.)r:r;rr<nothing_to_resetu\Backend reports nothing to reset — your limits aren't exhausted. The credit was NOT spent. no_creditz:Backend reports no available reset credit on this account.already_redeemeduIThis redemption was already processed — no additional credit was spent.z,Unexpected response from the Codex backend: )uuidr rr9rr)r*rr+r,rIrJrKrp_CODEX_WINDOW_EXHAUSTED_PERCENTpostruuid4HTTPStatusErrorr0 status_coder@lowerrrHrr)rrr@rLr-r.r usage_url _credits_url consume_urlrr/ usage_respr1r3 raw_countr7r worst_usedr2rw exhausted usage_noter6 consume_respbodyexcrGr<rvrHs rredeem_codex_reset_creditr^Ks2KKK /OPXZa/b/b, **    % m       ,??P+Q+Q(I|[*5**$!G 3(2$%B \$ ' ' '- -6Iw??J  ' ' ) ) ) oo''-2G#KK(BCCIrM%))*;<r*r+r,r/r1)r r@r r)rr)r*rr+r,rKrorrRrIrJr)r-rr/r0r1r/mappingr2rrtutilrwr1extrarjrkrls r_fetch_anthropic_account_usagerrs $ & & ," 3 3 5 5E t 5 ! ! # $zzn     +5**$*,) G d # # #$v::ISZ:[[!!###$$$$$$$$$$$$$$$mmoo#G(*GG    US!!'Rzz-(( < $)$KK1$4$4uT{{S  %++ !"6::k#:#:;;       G KK & & ,"E yyyy00  /22 99Z((1E lS%L 1 1 jQTV[P\6]6]  NNS SSS]SSSSS     ::gg    s5,B--B14B1c  td||}t|ddpd}|sdSt|ddpdd}|d}|d}d |d d }t jd 5}|||} | | pidpi} |||} | | pidpi} n#t$ri} YnwxYwdddn #1swxYwYt| dpd} t| dpd}dtd| |z dg}g}| d}| d}t| dpd}| d}t|ttfrt|dkrt|ttfrdt|cxkrt|krnnt|}t|}||z |z dz}d|dd|ddg}|r|d||td|d |!t|ttfrd"t|dd#g}| d$d%f| d&d'f| d(d)ffD]]\}}t|ttfr credits_apirn)rrrr@rr)r*r+r,rrKrprIrJrorrr)rr)rrruntimer-r credits_urlkey_urlrr/ credits_respr!key_respkey_dataryrzr1r/r{r|r}r~ limit_valueremaining_valuer detail_parts usage_partsr:rs r_fetch_openrouter_account_usager,s&" G  Ir**0b 1 1 7 7 9 9E tW[[R006B77>>sCCJ)))K!!!G*5**$G d # # # vzz+wz?? %%'''$$&&,"11&99?R zz'7z;;H  % % ' ' ' -2226::@bHH   HHH                '++o66=#>>M M229c::KOC][-H$I$IOOOPG(*G LL ! !Ell#455Ohll=117R88>>@@K LL ! !E53,'' %LL1   e 5 5  '' 7 7 7 75<< 7 7 7 7 7Ell 00$6+EL QOQQQkQQQQR  9    7+ 7 7 8 8 8 %)||L11      %#u&& 2B%,,BBBBC \\- ( (' 2 \\. ) ); 7 \\/ * *L 9  C CLE5 %#u.. C5<E>rrr*c$t|pd}|dvrdS |dkrt||S|dkrt S|dkrt ||Sn#t $rYdSwxYwdS)Nr<>r<autocustomrrr`rt)rr@rRr7rrrr)r*rrrs rfetch_account_usagerts X^$$**,,2244J+++t  ' '-xQQQ Q  $ $133 3  % %28WEE E & tt 4sA?A?(A?? B  B )rr)r:r"rr")r:rrr )rQr rr)rirjrhr3rrk)ryrKrr)r}rrr~)rrj)rhr3rrKrrk)rhr3rrKrr)rrrr)rrrr)rr"rr"rr)NN)rr"rr"rrj)rr"rr"r@r3rr9)r*r"rr"rr"rrj)2 __future__rloggingr dataclassesrrrtypingrrr r)agent.anthropic_adapterr r rr r rhermes_cli.runtime_providerrr getLoggerr$rrrr)rCrRrfrxr|rrrrrrrrr r7r9rMr^rrrrrrrrs"""""" !!!!!!''''''''////////// LLLLLLLL\\\\\\\\\\@@@@@@!       8 $ $&&&& $!!!!!!!! $ R R R R R R R R????&????(^c8XXXX]]]]@,14//////d7777t $         ,14CCCCCCL(,,,,7^7^7^7^v#!55555p $ & & & & & & & &"#( #! aaaaaaH::::zEEEEV#! r