$jnUdZddlmZddlZddlZddlZddlZddlZddl m Z m Z ddl m Z m Z ddlmZmZmZedZdZd Zdad ed <ejZe d GddZe d GddZe d GddZe d GddZdZd[dZdd ddd\d"Zd]d$Zd^d)Z d_d+Z!d,d d-d`d1Z"dad5Z#dbd6Z$dcd7Z%ddd9Z&ded<Z' dZdfd>Z(dgd@Z)dhdBZ*didEZ+djdGZ,dkdIZ-dddJdldPZ.dmdQZ/dndRZ0dodSZ1dpdTZ2dqdVZ3drdXZ4dodYZ5dS)sz3Normalized Nous Portal account entitlement helpers.) annotationsN) dataclassfield)datetimetimezone)AnyLiteralOptional)jwt account_api inference_keynoneerror) firecrawlfalz fal-videoz openai-audioz browser-usemodal<z1tuple[str, float, 'NousPortalAccountInfo'] | None_account_info_cacheT)frozencreZdZUdZded<dZded<dZded<dZded<dZded <dZ ded <dZ ded <dS) NousPortalSubscriptionInfoN Optional[str]plan Optional[int]tierOptional[float]monthly_chargemonthly_creditscurrent_period_endcredits_remainingrollover_credits) __name__ __module__ __qualname__r__annotations__rrrrr r!6/usr/local/lib/hermes-agent/hermes_cli/nous_account.pyrr$sDD&*N****'+O++++(,,,,,)-----(,,,,,,,r'rceZdZUdZded<dZded<dZded<dZded<dZded <dZ ded <dZ ded <dZ ded <dZ d ed<dZ d ed<dZd ed<dZd ed<dS)NousPaidServiceAccessInfoNOptional[bool]allowed paid_accessrreasonorganisation_idreffective_at_mshas_active_subscriptionactive_subscription_is_paidsubscription_tierrsubscription_monthly_chargesubscription_credits_remainingpurchased_credits_remainingtotal_usable_credits)r"r#r$r,r%r-r.r/r0r1r2r3r4r5r6r7r&r'r(r*r*/s"G"""""&K&&&& F    %)O))))%)O)))).22222266666'+++++3777776:"::::377777,0000000r'r*cDeZdZUdZdZded<eeZded<dS) NousToolAccessInfoa/Free tool-pool entitlement, decoupled from paid/billing access. Mirrors the Portal's ``tool_access`` claim/field: ``enabled`` is true when a positive tool-pool balance is live and not gated off; ``coverage`` maps each tool category to whether the pool funds it (FAL video is excluded). Fboolenabled)default_factoryzdict[str, bool]coverageN) r"r#r$__doc__r;r%rdictr=r&r'r(r9r9?sMG %d ; ; ;H;;;;;;r'r9ceZdZUded<ded<ded<dZded<dZded <dZded <dZded <dZded <dZ ded <dZ ded<dZ ded<dZ ded<dZ ded<dZded<dZded<dZded<dZded<dZded<dZded<dZded<dZded <dZded!<ed)d#Zed)d$Zed)d%Zd*d(ZdS)+NousPortalAccountInfor: logged_inNousAccountInfoSourcesourcefreshNruser_idorg_id client_id product_id nous_clientportal_base_urlinference_base_urlFinference_credential_presentcredential_sourcezOptional[datetime] expires_atemail privy_did$Optional[NousPortalSubscriptionInfo] subscriptionr+paid_service_access#Optional[NousPaidServiceAccessInfo]paid_service_access_infoOptional[NousToolAccessInfo] tool_accessOptional[dict[str, Any]] raw_claims raw_accountrreturnc|jduS)NTrTselfs r(is_paidzNousPortalAccountInfo.is_paides'4//r'c|jduS)NFr^r_s r( is_free_tierz"NousPortalAccountInfo.is_free_tieris'500r'cB|jdurdS|jduo |jjS)zCoarse "entitled to any managed tool" gate: paid access OR a live free tool pool. Use :meth:`tool_gateway_entitled_for` to gate a specific tool category (the pool does not cover every category).TN)rTrXr;r_s r(tool_gateway_entitledz+NousPortalAccountInfo.tool_gateway_entitledms0  #t + +4t+H0@0HHr'categorystrc|jdurdS|j}t|o"|jo|j|duS)zWhether a specific tool category is entitled. Paid users are entitled everywhere; free tool-pool users only where ``coverage[category]`` is true (e.g. image but not video).T)rTrXr:r;r=get)r`rftas r(tool_gateway_entitled_forz/NousPortalAccountInfo.tool_gateway_entitled_forvsL  #t + +4  BK2:K"+//(*C*Ct*KLLLr')r\r:)rfrgr\r:)r"r#r$r%rFrGrHrIrJrKrLrMrNrOrPrQrSrTrVrXrZr[rpropertyrarcrerkr&r'r(rArALsOOO!!!!KKK!G!!!! F    #I#### $J$$$$!%K%%%%%)O))))(,,,,,). ....'+++++%)J))))E#I####9=L====*.....DHHHHH04K4444+/J////,0K0000E 000X0111X1IIIXIMMMMMMr'rA account_infoOptional[NousPortalAccountInfo]r\rgc ddlm}n#t$rd}YnwxYwd}||j}t |t r|s|}|ddS)z>Return the billing URL for a normalized Nous account snapshot.r)DEFAULT_NOUS_PORTAL_URLhttps://portal.nousresearch.comN/z/billing)hermes_cli.authrp ExceptionrK isinstancergstriprstrip)rmrpbases r(nous_portal_billing_urlrysD;;;;;;; DDD"CD D+ dC ' '&kk# ( ( ((s  z this feature) capabilityinclude_refresh_hintcoverage_categoryrzr{r:r|rct|}|2|'||rdS|jr|d|dSn |jrdS| d|d|dS|js|jr d|d|dSd|d |dS|j-d |d }|jr|d |jdz }|r|d z }|d|dz }|S|j}|r|jnd}|dkrd|dS|dks |jdur!t|||}|r |j s|dz }|Sd|d|dS)u Return user-facing guidance for a missing Nous tool-gateway entitlement. ``None`` means the account is entitled to use the capability — via paid service access OR a live free tool pool that covers it. The message works from normalized entitlement fields rather than subscription price alone: purchased credits without a subscription still count as paid access, while a paid subscription with exhausted usable credits does not. ``coverage_category`` scopes the check to a single tool category (e.g. ``"fal-video"``). When given, a user who is entitled overall but whose access does not fund that category gets a neutral billing nudge instead of a message implying their credits are exhausted. The pool-vs-paid distinction is never surfaced to the user. Nzd isn't included with your current Nous Portal access. Add credits or a subscription to enable it at .z9Hermes could not verify your Nous Portal entitlement, so zO is unavailable. Run `hermes model` to refresh your login, or check billing at zeNous inference credentials are configured, but Hermes cannot verify your Nous Portal paid access for zc. Log in with `hermes model` to enable Portal-managed features. Billing and credits are managed at zLog in to Nous Portal to use z9: run `hermes model`. Billing and credits are managed at z9Hermes could not verify your Nous Portal paid access, so z is unavailable.z Account lookup failed: z, Run `hermes model` to refresh your session.z Check billing at account_missingzOHermes could not find a Nous Portal account or organisation for this login, so zi is unavailable. Run `hermes model` to authenticate again; if the problem persists, contact Nous support.no_usable_creditsFzF If you recently bought credits, run `hermes model` to refresh Hermes.zIYour Nous Portal account does not currently have paid service access, so 2 is unavailable. Add credits or update billing at ) ryrkrerBrMrTrrVr._no_paid_access_messagerE) rmrzr{r| billing_urldetailaccessr.messages r(&format_nous_portal_entitlement_messagersd**,77K  (556GHH t1  "\\MX\\\   / 4 )  ) )% ) ) )  !   4 94>99+6999  AJ A A2= A A A '/         G F1CFFF FF  E D DF5{5555  2F$ .V]]$F """ R# R R R $$$ (HE(Q(Q), KPP  ` (: ` _ _G [ [ [LW [ [ [r'rcZ|j}|r|jnd}|r|jnd}|r|jnd}|r|jnd}|r|jnd}|r|rt |||} d| d|d|dS|r |dur d|d|dS|durt |||} d| d|d |dSt |||} d | d|d |dS) Nz&Your Nous Portal credits are exhaustedz, so z, is unavailable. Top up or renew credits at r~FzGYour current Nous Portal plan does not include paid service access, so z+ is unavailable. Upgrade or add credits at zEYour Nous Portal account has no active subscription or usable creditsz- is unavailable. Subscribe or add credits at z3Your Nous Portal account has no usable paid creditsr)rVr1r2r7r5r6_credit_detail) rmrzrrr1r2 total_usablesubscription_creditspurchased_credits credit_details r(rrs  2F@FPf<DN::$ #> &|5IK\]]  I] I I I I:E I I I  #>%#G#G X X XIT X X X %''&|5IK\]]  ! ! !#- ! ! ! ! ! #<1EGXYYM Xm X X  X XIT X X Xr'rrrrcg}||d|d||d|d||d|d|sdSdd|dS) Nzusable $z.2fzsubscription $z purchased $z (z, ))appendjoin)rrrpartss r(rrs E 2 222333' @&:@@@AAA$ :#4:::;;; r # %  # # ##r'Nonec dadS)z7Clear the short-lived account-info cache used by tests.N)rr&r'r($reset_nous_portal_account_info_cacher#sr'F) force_freshmin_jwt_ttl_secondsrrintc ddlm}|dpi}n(#t$r}t|dcYd}~Sd}~wwxYw|d}t |}t |tr|st \}} } ||kr-tj| z tkr| cdddSdddn #1swxYwYt||} | stdd|St| dtr(t| dpdd|| St| || } t 5|tj| fadddn #1swxYwY| S#t $r<} t| t#| d |cYd} ~ Sd} ~ wwxYw) Nr)rresolve_nous_access_tokenrempty_account_responseTrrBrKraccount_response_errorrrBrKr[rrKr)rsrrr _cache_key_ACCOUNT_INFO_CACHE_LOCKrtime monotonic_ACCOUNT_INFO_CACHE_TTL_fetch_nous_account_inforrurirg_info_from_account_payloadrtr:)rrrKrrrrefreshed_state cache_key cached_key cached_at cached_infopayloadinfors r(rras* VVVVVVVV0022 11&99BU*?;;N|_== % ' ' '#6#B5H2 I{**0@0@90LPg/g/g&  ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' +<II . /  gkk'**C 0 0 kk'**F.F /#  * !+    & F F#,dn.>.>"E  F F F F F F F F F F F F F F F    599^4455+          syAE% ;B E% E%B!!E%$B!%&E% AE%E%5E E%EE%E E%% F+/1F& F+&F+c t}|dSt|ddpt|dd}t|tr|sdSt dddt|ddp|t|ddp!t|d dpt|d dd d t|d ddS#t $rYdSwxYw)zEReturn an explicit unknown-entitlement snapshot for opaque Nous keys.Nruntime_api_keyrrFr rKrLruntime_base_urlbase_urlTpool:labelunknownportal_oauth_missing)rBrDrErKrLrMrNr)_select_nous_pool_entrygetattrrurgrvrArt)rKentry runtime_keys r(rrs')) =4e%6==cP^`bAcAc +s++ ;3D3D3F3F 4$"0$77#"3T::45"4d;;45*d33)-JgeWi&H&HJJ(    " ttsC A C !A*C CCc n t}n#t$rYdSwxYw|t|sdSt|dd}t |t r|sdSt|ddp|}|t|ddt|ddp!t|ddpt|ddt|dddt|d d d }|st|||| }||S t||}n)#t$r} t| d |cYd} ~ Sd} ~ wwxYw|stdd |St | dt r(t| dpdd ||St|||S)NrrKrHrLrr agent_keyrrr)rrHrLrrNrTrrrrrr) rrt_pool_entry_is_portal_oauthrrurgrvrrrrir) rrrKrrentry_portal_urlrrrrs r(rrsm ')) tt }7>>}t5.$77L lC ( ( 0B0B0D0Dt ($//   %UK66 E/ 6 6 0u0$77 0uj$//UK66IWUGY%G%GII  E ' , 3      O *<9IJJ    ,           *,    '++g&&,, ++g&&B*B,     &(   s* D D>"D93D>9D> Optional[Any]cddlm}|d}|r|sdSt|}|sdSd d}t || S) Nr) load_poolrrrr\tuple[float, float, int]ctt|ddpd}tt|ddpd}tt|ddpd}||| fS)Nagent_key_expires_atgrOpriorityr)_parse_iso_timestamprr)r agent_exp access_exprs r(_entry_sort_keyz0_select_nous_pool_entry.._entry_sort_keyso(8NPT)U)UVV]Z] )'%t*L*LMMTQT wuj!449:::y11r')key)rrr\r)agent.credential_poolrhas_credentialslistentriesmax)rpoolrrs r(rrs////// 9V  D t++--t4<<>>""G t2222 wO , , ,,r'rrclt|dd}t|tr|sdStt|ddpd}t|dd}|dpt |S)NrF auth_typer refresh_tokenoauth)rrurgrvlower startswithr:)rrrrs r(rrs5.$77L lC ( ( 0B0B0D0DuGE;339r::@@BBHHJJIE?D99M    ( ( ?D,?,??r'rc|pdd}|d}d|dd}tj||}tj|d 5}t j|}dddn #1swxYwYt|tr|niS) Nrqrrz/api/oauth/accountzBearer zapplication/json) AuthorizationAccept)headers)timeout) rwurllibrequestRequesturlopenjsonloadsreaddecoderur?)rrKrxurlrreqresprs r(rrs   @@ H H M MD  % % %C1<11$G . g 6 6C   Q  / /34*TYY[[//1122333333333333333 $// 777R7s'9B,,B03B0tokenc  ddlm}n#t$rYdSwxYw||}|sdSt|d}|5|t jt dt|zkrdSt|d}t|d}t||t|d|} tdidd d d d d dt|ddt|ddt|dp|ddt|ddt|dd|dt|ddd dt|dpddtj|tjd|d| dt#|ddt%|S)Nr)_decode_jwt_claimsexpr-r3rG)r,r-r/r3rBTrDr rEFrFsubrHrIrJrKrLrMrN auth_storerO)tzrTrVrXrZr&)rsrrt _coerce_floatrirrr _coerce_bool _coerce_intr* _coerce_strrAr fromtimestamprutc_tool_access_from_valuer?) rrrKrrclaimsrr-r3 access_infos r(rr*s6666666 tt  & &F t  5)) * *C {cTY[[3q#6I2J2J+K+KKKKtvzz-8899K#FJJ/B$C$CDD+#FJJx$8$899+ K !   $ u e FJJu--...   6::h//000   fjj55O;9O9OPPP  vzz,77888   = 9 9::: ( 'uyy1E'F'FGGG &*T &eii0C&D&DEEU )#(,???? (K "-  ,FJJ},E,EFFF! "<<<# s  rc t|dtr|dni}t|dtr|dni}t|d}t |d}|r|jnd}| ||j}tdiddddd dd t|d p |r|j ndd t|d d |dt|ddt|dp|ddt|dpddt|ddt|dd|d|d|dt|ddt|S)Nuser organisationrSrTrBTrDr rErGidrHrKrLrMrrrNrrPrQrVrXr[r&) rurir?_subscription_from_payload!_paid_service_access_from_payloadr,r-rArr/r:r)rrrKr r rSrr-s r(rr\sr #-W[[-@-@$"G"G O7;;v   RD gkk.114 8 8  N###  .gkk..I.IJJL .w{{;P/Q/Q R RF$*4&..Kv1(    $ } d <++D1122bQW7av7M7M]a   eii 44555   (  'uyy1E'F'FGGG &*%))N*C*C*]uyyQ\G]G]%^%^%^ &eii0C&D&DEEU $((7++,,, dhh{33444 "\ (K "( ,GKK ,F,FGGG  MMM! r'valuerWc^t|tsdSt|ddu}|d}i}t|tr6|D]!\}}t|t r|du||<"t ||S)zParse a Portal ``tool_access`` object (from the JWT claim or the account API) into :class:`NousToolAccessInfo`. Fails closed: a non-object value yields ``None``, and only literal ``true`` counts for ``enabled`` and each coverage entry.Nr;Tr=)r;r=)rur?rriitemsrgr9)rr; raw_coverager=rvals r(rrs eT " "t599Y//00D8G99Z((L "H,%%,$**,, , ,HC#s## , #t  g A A AAr'rRc t|tsdStt|dt |dt |dt |dt|dt |dt |dS) Nrrrrrr r!)rrrrrr r!)rur?rrrirrrs r(rrs eT " "t % 6** + + 6** + +$UYY/?%@%@AA%eii0A&B&BCC&uyy1E'F'FGG' 2E(F(FGG&uyy1C'D'DEE   r'rUcnt|tsdSt|d}t|d}t ||t |dt |dt |dt|dt|dt |dt|d t|d t|d t|d  S)Nr,r-r.r/r0r1r2r3r4r5r6r7) r,r-r.r/r0r1r2r3r4r5r6r7)rur?rrir*rrr)rr,r-s r(rrsW eT " "t599Y//00Guyy7788K $599X..//#EII.?$@$@AA#EII.?$@$@AA ,UYY7P-Q-Q R R$0;X1Y1Y$Z$Z%eii0C&D&DEE$1%)) __future__rrr threadingrurllib.requestr dataclassesrrrrtypingrr r rCTOOL_COVERAGE_CATEGORIESrrr%Lockrrr*r9rAryrrrrrrrrrrrrrrrrrrrrrrrrr&r'r(r9sR999""""""  (((((((('''''''')))))))))) VWIMMMMM)9>++ $-------- $ 1 1 1 1 1 1 1 1 $ < < < < < < < < $0M0M0M0M0M0M0M0Mf ) ) ) ) )$%!%'+ XXXXXXv%%%%P$$$$"!555555p2 2 2 2 jBDDDDN----&@@@@&* 8 8 8 8 8 ////d####LBBBB"    2&*,0 "%%%%////     6666r'