yjxUdZddlmZddlZddlZddlZddlZddlZddl m Z m Z ddl m Z m Z ddlmZmZmZedZdZd Zdad ed <ejZe d GddZe d GddZe d GddZe d GddZd[d\dZd[d\dZdd ddd]d#Zd^d%Z d_d*Z!d`d,Z"d-d d.dad2Z#dbd6Z$dcd7Z%ddd8Z&ded:Z'dfd=Z( d[dgd?Z)dhdAZ*didCZ+djdFZ,dkdHZ-dldJZ.dddKdmdQZ/dndRZ0dodSZ1dpdTZ2dqdUZ3drdWZ4dsdYZ5dpdZZ6dS)tz3Normalized Nous Portal account entitlement helpers.) annotationsN) dataclassfield)datetimetimezone)AnyLiteralOptional)jwt account_api inference_keynoneerror) firecrawlfalz fal-videoz openai-audioz browser-usemodal<z1tuple[str, float, 'NousPortalAccountInfo'] | None_account_info_cacheT)frozencreZdZUdZded<dZded<dZded<dZded<dZded <dZ ded <dZ ded <dS) NousPortalSubscriptionInfoN Optional[str]plan Optional[int]tierOptional[float]monthly_chargemonthly_creditscurrent_period_endcredits_remainingrollover_credits) __name__ __module__ __qualname__r__annotations__rrrrr r!=/home/ragecks/.hermes/hermes-agent/hermes_cli/nous_account.pyrr$sDD&*N****'+O++++(,,,,,)-----(,,,,,,,r'rceZdZUdZded<dZded<dZded<dZded<dZded <dZ ded <dZ ded <dZ ded <dZ d ed<dZ d ed<dZd ed<dZd ed<dZded<dZd ed<dZd ed<dZd ed<dS)NousPaidServiceAccessInfoNOptional[bool]allowed paid_accessrreasonorganisation_idreffective_at_mshas_active_subscriptionactive_subscription_is_paidsubscription_tierrsubscription_monthly_chargesubscription_credits_remainingpurchased_credits_remainingtotal_usable_creditsmember_spend_cap_exceededmember_spend_cap_usdmember_spend_usdmember_spend_cap_remaining_usd)r"r#r$r,r%r-r.r/r0r1r2r3r4r5r6r7r8r9r:r;r&r'r(r*r*/s-"G"""""&K&&&& F    %)O))))%)O)))).22222266666'+++++3777776:"::::377777,00000044444,00000(,,,,,6:"::::::r'r*cDeZdZUdZdZded<eeZded<dS) NousToolAccessInfoa/Free tool-pool entitlement, decoupled from paid/billing access. Mirrors the Portal's ``tool_access`` claim/field: ``enabled`` is true when a positive tool-pool balance is live and not gated off; ``coverage`` maps each tool category to whether the pool funds it (FAL video is excluded). Fboolenabled)default_factoryzdict[str, bool]coverageN) r"r#r$__doc__r?r%rdictrAr&r'r(r=r=CsMG %d ; ; ;H;;;;;;r'r=ceZdZUded<ded<ded<dZded<dZded <dZded <dZded <dZded <dZ ded <dZ ded<dZ ded<dZ ded<dZ ded<dZded<dZded<dZded<dZded<dZded<dZded<dZded<dZded<dZd ed!<dZd ed"<dZded#<ed+d%Zed+d&Zed+d'Zd,d*ZdS)-NousPortalAccountInfor> logged_inNousAccountInfoSourcesourcefreshNruser_idorg_idorg_slugorg_name client_id product_id nous_clientportal_base_urlinference_base_urlFinference_credential_presentcredential_sourcezOptional[datetime] expires_atemail privy_did$Optional[NousPortalSubscriptionInfo] subscriptionr+paid_service_access#Optional[NousPaidServiceAccessInfo]paid_service_access_infoOptional[NousToolAccessInfo] tool_accessOptional[dict[str, Any]] raw_claims raw_accountrreturnc|jduS)NTrZselfs r(is_paidzNousPortalAccountInfo.is_paidks'4//r'c|jduS)NFrdres r( is_free_tierz"NousPortalAccountInfo.is_free_tieros'500r'cB|jdurdS|jduo |jjS)zCoarse "entitled to any managed tool" gate: paid access OR a live free tool pool. Use :meth:`tool_gateway_entitled_for` to gate a specific tool category (the pool does not cover every category).TN)rZr^r?res r(tool_gateway_entitledz+NousPortalAccountInfo.tool_gateway_entitledss0  #t + +4t+H0@0HHr'categorystrc|jdurdS|j}t|o"|jo|j|duS)zWhether a specific tool category is entitled. Paid users are entitled everywhere; free tool-pool users only where ``coverage[category]`` is true (e.g. image but not video).T)rZr^r>r?rAget)rfrltas r(tool_gateway_entitled_forz/NousPortalAccountInfo.tool_gateway_entitled_for|sL  #t + +4  BK2:K"+//(*C*Ct*KLLLr')rbr>)rlrmrbr>)r"r#r$r%rJrKrLrMrNrOrPrQrRrSrTrUrVrWrYrZr\r^r`rarpropertyrgrirkrqr&r'r(rErEPsOOO!!!!KKK!G!!!! F    "H"""""H""""#I#### $J$$$$!%K%%%%%)O))))(,,,,,). ....'+++++%)J))))E#I####9=L====*.....DHHHHH04K4444+/J////,0K0000E 000X0111X1IIIXIMMMMMMr'rE account_infoOptional[NousPortalAccountInfo]rbrmc ddlm}n#t$rd}YnwxYwd}||j}t |t r|s|}|ddS)z>Return the billing URL for a normalized Nous account snapshot.r)DEFAULT_NOUS_PORTAL_URLhttps://portal.nousresearch.comN//billing)hermes_cli.authrv ExceptionrQ isinstancermstriprstrip)rsrvbases r(nous_portal_billing_urlrsD;;;;;;; DDD"CD D+ dC ' '&kk# ( ( ((s  c,t|}|dtd }|t|ddnd}t|tr?|r+ddlm}|d||dd S|d S) aNReturn the portal top-up URL that auto-opens the top-up modal. Prefers the org-pinned page ``{base}/orgs/{slug}/billing?topup=open`` (skips the legacy shim's re-resolution + multi-org disambiguation). Falls back to the legacy ``{base}/billing?topup=open`` when the account has no ``org_slug`` (the portal's ``slug`` is nullable; the legacy page forwards the param through to the org-pinned page). Never builds ``/orgs/None/billing``. The ``?topup=open`` query is the NAS enabler that lands the user in the top-up flow rather than just on the billing page. NryrLr)quotez/orgs/)safez/billing?topup=open)rlengetattrr|rmr} urllib.parser)rs base_billingrslugrs r(nous_portal_topup_urlrs+<88L *3z??** +D6B6N7<T 2 2 2TXD$PP&&&&&&OOeeDJJLLr:::OOOO ' ' ''r'z this feature) capabilityinclude_refresh_hintcoverage_categoryrrr>rrct|}|2|'||rdS|jr|d|dSn |jrdS| d|d|dS|js|jr d|d|dSd|d |dS|j-d |d }|jr|d |jdz }|r|d z }|d|dz }|S|j}|r|jnd}|dkrd|dS|dks |jdur!t|||}|r |j s|dz }|Sd|d|dS)u Return user-facing guidance for a missing Nous tool-gateway entitlement. ``None`` means the account is entitled to use the capability — via paid service access OR a live free tool pool that covers it. The message works from normalized entitlement fields rather than subscription price alone: purchased credits without a subscription still count as paid access, while a paid subscription with exhausted usable credits does not. ``coverage_category`` scopes the check to a single tool category (e.g. ``"fal-video"``). When given, a user who is entitled overall but whose access does not fund that category gets a neutral billing nudge instead of a message implying their credits are exhausted. The pool-vs-paid distinction is never surfaced to the user. Nzd isn't included with your current Nous Portal access. Add credits or a subscription to enable it at .z9Hermes could not verify your Nous Portal entitlement, so zO is unavailable. Run `hermes model` to refresh your login, or check billing at zeNous inference credentials are configured, but Hermes cannot verify your Nous Portal paid access for zc. Log in with `hermes model` to enable Portal-managed features. Billing and credits are managed at zLog in to Nous Portal to use z9: run `hermes model`. Billing and credits are managed at z9Hermes could not verify your Nous Portal paid access, so z is unavailable.z Account lookup failed: z, Run `hermes model` to refresh your session.z Check billing at account_missingzOHermes could not find a Nous Portal account or organisation for this login, so zi is unavailable. Run `hermes model` to authenticate again; if the problem persists, contact Nous support.no_usable_creditsFzF If you recently bought credits, run `hermes model` to refresh Hermes.zIYour Nous Portal account does not currently have paid service access, so 2 is unavailable. Add credits or update billing at ) rrqrkrFrSrZrr\r._no_paid_access_messagerI) rsrrr billing_urldetailaccessr.messages r(&format_nous_portal_entitlement_messagersd**,77K  (556GHH t1  "\\MX\\\   / 4 )  ) )% ) ) )  !   4 94>99+6999  AJ A A2= A A A '/         G F1CFFF FF  E D DF5{5555  2F$ .V]]$F """ R# R R R $$$ (HE(Q(Q), KPP  ` (: ` _ _G [ [ [LW [ [ [r'rc|j}|r|jnd}|r|jnd}|r|jnd}|r|jnd}|r|jnd}|rL|jrE|j} |j} t|||} d} | | d| dd| dd} n | d| dd} d| | d|d S|r|rt|||} d | d |d |dS|r |d ur d|d|dS|d urt|||} d| d |d|dSt|||} d| d |d|dS)Nrz. Your organisation's per-member spend cap is $.2fz and you've spent $z of it.rzlYour Nous Portal access is paused because you've exceeded the per-member spend cap set by your organisation.z> Ask your organisation admin to raise the member spend cap at z%, then run `hermes model` to refresh.z&Your Nous Portal credits are exhaustedz, so z, is unavailable. Top up or renew credits at FzGYour current Nous Portal plan does not include paid service access, so z+ is unavailable. Upgrade or add credits at zEYour Nous Portal account has no active subscription or usable creditsz- is unavailable. Subscribe or add credits at z3Your Nous Portal account has no usable paid creditsr) r\r1r2r7r5r6r8r9r:_credit_detail) rsrrrr1r2 total_usablesubscription_creditspurchased_creditscapspent credit_detail cap_details r(rrsi  2F@FPf<DN::$  &2 )'&|5IK\]]  ?u0x#xxxfkxxxxJJ _T#TTTTJ >H   %0     #> &|5IK\]]  I] I I I I:E I I I  #>%#G#G X X XIT X X X %''&|5IK\]]  ! ! !#- ! ! ! ! ! #<1EGXYYM Xm X X  X XIT X X Xr'rrrrcg}||d|d||d|d||d|d|sdSdd|dS) Nzusable $rzsubscription $z purchased $rz (z, ))appendjoin)rrrpartss r(rr@s E 2 222333' @&:@@@AAA$ :#4:::;;; r # %  # # ##r'Nonec dadS)z7Clear the short-lived account-info cache used by tests.N)rr&r'r($reset_nous_portal_account_info_cacherQsr'F) force_freshmin_jwt_ttl_secondsrrintc ddlm}|dpi}n(#t$r}t|dcYd}~Sd}~wwxYw|d}t |}t |tr|st \}} } ||kr-tj| z tkr| cdddSdddn #1swxYwYt||} | stdd|St| dtr(t| dpdd|| St| || } t 5|tj| fadddn #1swxYwY| S#t $r<} t| t#| d |cYd} ~ Sd} ~ wwxYw) Nr)rresolve_nous_access_tokenrempty_account_responseTrrFrQraccount_response_errorrrFrQrarrQr)rzrrr _cache_key_ACCOUNT_INFO_CACHE_LOCKrtime monotonic_ACCOUNT_INFO_CACHE_TTL_fetch_nous_account_inforr|rorm_info_from_account_payloadr{r>)rrrQrrrrefreshed_state cache_key cached_key cached_at cached_infopayloadinfors r(rrs* VVVVVVVV0022 11&99BU*?;;N|_== % ' ' '#6#B5H2 I{**0@0@90LPg/g/g&  ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' +<II . /  gkk'**C 0 0 kk'**F.F /#  * !+    & F F#,dn.>.>"E  F F F F F F F F F F F F F F F    599^4455+          syAE% ;B E% E%B!!E%$B!%&E% AE%E%5E E%EE%E E%% F+/1F& F+&F+c t}|dSt|ddpt|dd}t|tr|sdSt dddt|ddp|t|ddp!t|d dpt|d dd d t|d ddS#t $rYdSwxYw)zEReturn an explicit unknown-entitlement snapshot for opaque Nous keys.Nruntime_api_keyrrFr rQrRruntime_base_urlbase_urlTpool:labelunknownportal_oauth_missing)rFrHrIrQrRrSrTr)_select_nous_pool_entryrr|rmr}rEr{)rQentry runtime_keys r(rrs')) =4e%6==cP^`bAcAc +s++ ;3D3D3F3F 4$"0$77#"3T::45"4d;;45*d33)-JgeWi&H&HJJ(    " ttsC A C !A*C CCc n t}n#t$rYdSwxYw|t|sdSt|dd}t |t r|sdSt|ddp|}|t|ddt|ddp!t|ddpt|ddt|dddt|d d d }|st|||| }||S t||}n)#t$r} t| d |cYd} ~ Sd} ~ wwxYw|stdd |St | dt r(t| dpdd ||St|||S)NrrQrNrRrr agent_keyrrr)rrNrRrrTrTrrrrrr) rr{_pool_entry_is_portal_oauthrr|rmr}rrrror) rrrQrrentry_portal_urlrrrrs r(rrsm ')) tt }7>>}t5.$77L lC ( ( 0B0B0D0Dt ($//   %UK66 E/ 6 6 0u0$77 0uj$//UK66IWUGY%G%GII  E ' , 3      O *<9IJJ    ,           *,    '++g&&,, ++g&&B*B,     &(   s* D D>"D93D>9D> Optional[Any]cddlm}|d}|r|sdSt|}|sdSd d}t || S) Nr) load_poolrrrrbtuple[float, float, int]ctt|ddpd}tt|ddpd}tt|ddpd}||| fS)Nagent_key_expires_atgrUpriorityr)_parse_iso_timestamprr)r agent_exp access_exprs r(_entry_sort_keyz0_select_nous_pool_entry.._entry_sort_key6so(8NPT)U)UVV]Z] )'%t*L*LMMTQT wuj!449:::y11r')key)rrrbr)agent.credential_poolrhas_credentialslistentriesmax)rpoolrrs r(rr,s////// 9V  D t++--t4<<>>""G t2222 wO , , ,,r'rrclt|dd}t|tr|sdStt|ddpd}t|dd}|dpt |S)NrF auth_typer refresh_tokenoauth)rr|rmr}lower startswithr>)rrrrs r(rr?s5.$77L lC ( ( 0B0B0D0DuGE;339r::@@BBHHJJIE?D99M    ( ( ?D,?,??r'rc|pdd}|d}d|dd}tj||}tj|d 5}t j|}dddn #1swxYwYt|tr|niS) Nrwrxz/api/oauth/accountzBearer zapplication/json) AuthorizationAccept)headers)timeout) r~urllibrequestRequesturlopenjsonloadsreaddecoder|rC)rrQrurlrreqresprs r(rrHs   @@ H H M MD  % % %C1<11$G . g 6 6C   Q  / /34*TYY[[//1122333333333333333 $// 777R7s'9B,,B03B0tokenc  ddlm}n#t$rYdSwxYw||}|sdSt|d}|5|t jt dt|zkrdSt|d}t|d}t||t|d|} tdidd d d d d dt|ddt|ddt|dp|ddt|ddt|dd|dt|ddd dt|dpddtj|tjd|d| dt#|ddt%|S)Nr)_decode_jwt_claimsexpr-r3rK)r,r-r/r3rFTrHr rIFrJsubrNrOrPrQrRrSrT auth_storerU)tzrZr\r^r`r&)rzrr{ _coerce_floatrorrr _coerce_bool _coerce_intr* _coerce_strrEr fromtimestamprutc_tool_access_from_valuerC) r rrQrrclaimsrr-r3 access_infos r(rrXs6666666 tt  & &F t  5)) * *C {cTY[[3q#6I2J2J+K+KKKKtvzz-8899K#FJJ/B$C$CDD+#FJJx$8$899+ K !   $ u e FJJu--...   6::h//000   fjj55O;9O9OPPP  vzz,77888   = 9 9::: ( 'uyy1E'F'FGGG &*T &eii0C&D&DEEU )#(,???? (K "-  ,FJJ},E,EFFF! "<<<# s  rc |d}t|tr|ni}|d}t|tr|ni}t|d}t |d}|r|jnd} | ||j} tdiddddd dd t|d p |r|j ndd t|d dt|ddt|dd|dt|ddt|dp|ddt|dpddt|ddt|dd|d| d|dt|ddt|S)Nuser organisationrYrZrFTrHr rIrKidrLrrMnamerNrQrRrSrrrTrrVrWr\r^rar&) ror|rC_subscription_from_payload!_paid_service_access_from_payloadr,r-rErr/r>r) rrrQraw_userrraw_orgrrYrr-s r(rrs {{6""H'1(D'A'AI88rDkk.))G.8$.G.G#O77RL-gkk..I.IJJL .w{{;P/Q/Q R RF$*4&..Kv1(    $ } d <++D1122bQW7av7M7M]a   \--f55666   \--f55666  eii 44555 ( 'uyy1E'F'FGGG &*%))N*C*C*]uyyQ\G]G]%^%^%^ &eii0C&D&DEEU $((7++,,, dhh{33444 "\ (K  "(! ",GKK ,F,FGGG# $MMM% r'valuer]c^t|tsdSt|ddu}|d}i}t|tr6|D]!\}}t|t r|du||<"t ||S)zParse a Portal ``tool_access`` object (from the JWT claim or the account API) into :class:`NousToolAccessInfo`. Fails closed: a non-object value yields ``None``, and only literal ``true`` counts for ``enabled`` and each coverage entry.Nr?TrA)r?rA)r|rCrroitemsrmr=)r&r? raw_coveragerArvals r(rrs eT " "t599Y//00D8G99Z((L "H,%%,$**,, , ,HC#s## , #t  g A A AAr'rXc t|tsdStt|dt |dt |dt |dt|dt |dt |dS) Nrrrrrr r!)rrrrrr r!)r|rCrrrorrr&s r(r"r"s eT " "t % 6** + + 6** + +$UYY/?%@%@AA%eii0A&B&BCC&uyy1E'F'FGG' 2E(F(FGG&uyy1C'D'DEE   r'r[c t|tsdSt|d}t|d}t did|d|dt |ddt |ddt |ddt|ddt|ddt |dd t|d d t|d d t|d d t|d d t|d dt|ddt|ddt|dS)Nr,r-r.r/r0r1r2r3r4r5r6r7r8r9r:r;r&)r|rCrror*rrr)r&r,r-s r(r#r#sQ eT " "t599Y//00Guyy7788K $    K 599X../// $EII.?$@$@AAA   $EII.?$@$@AAA   !-UYY7P-Q-Q R R R  %1;X1Y1Y$Z$Z$Z &eii0C&D&DEEE %2%))r,s r(rrsud++ 5555r'rct|trdS |dSt|S#ttf$rYdSwxYwr@)r|r>r TypeError ValueErrorr,s r(rrs[%t =45zz z "tt,,AAct|trdS |dSt|S#ttf$rYdSwxYwr@)r|r>floatrCrDr,s r(rr&s[%t =4U|| z "ttrEr@)rsrtrbrm) rsrtrrmrr>rrrbr)rsrErrmrrmrbrm)rrrrrrrbrm)rbr)rr>rrrbrE)rrrr>rQrrbrE)rQrrbrt)rr>rrrQrrbrt)rbr)rrrbr>)rrmrQrrbr) r rmrrrQrrrrbrt)rrrrrQrrbrE)r&rrbr])r&rrbrX)r&rrbr[) rr.rFr>rQrrar_rbrE)rrrbr)rrmrQrrbrm)r&rrbr)r&rrbr)r&rrbr+)r&rrbr)7rB __future__rr3r threadingrurllib.requestr dataclassesrrrrtypingrr r rGTOOL_COVERAGE_CATEGORIESrrr%Lockrrr*r=rErrrrrrrrrrrrrrrrr"r#rrrrrrrrr&r'r(rOsk999""""""  (((((((('''''''')))))))))) VWIMMMMM)9>++ $-------- $;;;;;;;;& $ < < < < < < < < $2M2M2M2M2M2M2M2Mj ) ) ) ) )(((((4%!%'+ XXXXXXv6666r$$$$"!555555p2 2 2 2 jBDDDDN----&@@@@&* 8 8 8 8 8 ////d####LBBBB"    :&*,0 "%%%%////     6666r'