`gj7sUdZddlmZddlZddlZddlZddlZddlZddl m Z m Z ddl m Z m Z ddlmZmZmZedZdZd Zdad ed <ej.Ze d GddZe d GddZe d GddZe d GddZd5d6dZd5d6dZdd dd d7dZ d8dZ d9dZ!d:dZ"dd d d;d Z# dd#Z&d?d$Z'd@d%Z( d5 dAd&Z) dBd'Z* dCd(Z+dDd)Z,dEd*Z-dFd+Z.ddd, dGd-Z/dHd.Z0dId/Z1dJd0Z2dKd1Z3dLd2Z4dMd3Z5dJd4Z6y)Nz3Normalized Nous Portal account entitlement helpers.) annotationsN) dataclassfield)datetimetimezone)AnyLiteralOptional)jwt account_api inference_keynoneerror) firecrawlfalz fal-videoz openai-audioz browser-usemodal<z1tuple[str, float, 'NousPortalAccountInfo'] | None_account_info_cacheT)frozencpeZdZUdZded<dZded<dZded<dZded<dZded <dZ ded <dZ ded <y) NousPortalSubscriptionInfoN Optional[str]plan Optional[int]tierOptional[float]monthly_chargemonthly_creditscurrent_period_endcredits_remainingrollover_credits) __name__ __module__ __qualname__r__annotations__rrrrr r!J/root/.hermes/venv/lib/python3.12/site-packages/hermes_cli/nous_account.pyrr$sKD-D-&*NO*'+O_+(, ,)--(,o,r'rceZdZUdZded<dZded<dZded<dZded<dZded <dZ ded <dZ ded <dZ ded <dZ d ed<dZ d ed<dZd ed<dZd ed<y)NousPaidServiceAccessInfoNOptional[bool]allowed paid_accessrreasonorganisation_idreffective_at_mshas_active_subscriptionactive_subscription_is_paidsubscription_tierrsubscription_monthly_chargesubscription_credits_remainingpurchased_credits_remainingtotal_usable_credits)r"r#r$r,r%r-r.r/r0r1r2r3r4r5r6r7r&r'r(r*r*/s"G^""&K& FM %)O])%)O]).2^2266'+}+3776:"O:377,0/0r'r*c<eZdZUdZdZded<eeZded<y) NousToolAccessInfoa/Free tool-pool entitlement, decoupled from paid/billing access. Mirrors the Portal's ``tool_access`` claim/field: ``enabled`` is true when a positive tool-pool balance is live and not gated off; ``coverage`` maps each tool category to whether the pool funds it (FAL video is excluded). Fboolenabled)default_factoryzdict[str, bool]coverageN) r"r#r$__doc__r;r%rdictr=r&r'r(r9r9?s"GT %d ;Ho;r'r9ceZdZUded<ded<ded<dZded<dZded <dZded <dZded <dZded <dZ ded <dZ ded<dZ ded<dZ ded<dZ ded<dZded<dZded<dZded<dZded<dZded<dZded<dZded<dZded<dZd ed!<dZd ed"<dZded#<ed(d$Zed(d%Zed(d&Zd)d'Zy)*NousPortalAccountInfor: logged_inNousAccountInfoSourcesourcefreshNruser_idorg_idorg_slugorg_name client_id product_id nous_clientportal_base_urlinference_base_urlFinference_credential_presentcredential_sourcezOptional[datetime] expires_atemail privy_did$Optional[NousPortalSubscriptionInfo] subscriptionr+paid_service_access#Optional[NousPaidServiceAccessInfo]paid_service_access_infoOptional[NousToolAccessInfo] tool_accessOptional[dict[str, Any]] raw_claims raw_accountrc|jduS)NTrVselfs r(is_paidzNousPortalAccountInfo.is_paidgs''4//r'c|jduS)NFr_r`s r( is_free_tierz"NousPortalAccountInfo.is_free_tierks''500r'cl|jdury|jduxr|jjS)zCoarse "entitled to any managed tool" gate: paid access OR a live free tool pool. Use :meth:`tool_gateway_entitled_for` to gate a specific tool category (the pool does not cover every category).TN)rVrZr;r`s r(tool_gateway_entitledz+NousPortalAccountInfo.tool_gateway_entitledos7  # #t +t+H0@0@0H0HHr'c|jdury|j}t|xr+|jxr|jj |duS)zWhether a specific tool category is entitled. Paid users are entitled everywhere; free tool-pool users only where ``coverage[category]`` is true (e.g. image but not video).T)rVrZr:r;r=get)racategorytas r(tool_gateway_entitled_forz/NousPortalAccountInfo.tool_gateway_entitled_forxsK  # #t +   BK2::K"++//(*Ct*KLLr')returnr:)ristrrlr:)r"r#r$r%rFrGrHrIrJrKrLrMrNrOrPrQrRrSrUrVrXrZr\r]rpropertyrbrdrfrkr&r'r(rArALs1O !! K!G]! FM "Hm""Hm"#I}# $J $!%K%%)O])(, ,). $.'+}+%)J")E=#I}#9=L6=*..DHAH04K-4+/J(/,0K)0E= 0011IIMr'rAc ddlm}d}| |j}t |t r|j s|}|jddS#t$rd}YSwxYw)z>Return the billing URL for a normalized Nous account snapshot.r)DEFAULT_NOUS_PORTAL_URLhttps://portal.nousresearch.comN//billing)hermes_cli.authrp ExceptionrM isinstancermstriprstrip) account_inforpbases r(nous_portal_billing_urlr{sjD; D++ dC  &kk# x (( D"CDsA AAct|}|dtd }| t|ddnd}t|tr4|j r$ddlm}|d||j dd S|d S) aNReturn the portal top-up URL that auto-opens the top-up modal. Prefers the org-pinned page ``{base}/orgs/{slug}/billing?topup=open`` (skips the legacy shim's re-resolution + multi-org disambiguation). Falls back to the legacy ``{base}/billing?topup=open`` when the account has no ``org_slug`` (the portal's ``slug`` is nullable; the legacy page forwards the param through to the org-pinned page). Never builds ``/orgs/None/billing``. The ``?topup=open`` query is the NAS enabler that lands the user in the top-up flow rather than just on the billing page. NrsrHr)quotez/orgs/)safez/billing?topup=open)r{lengetattrrvrmrw urllib.parser})ry base_billingrzslugr}s r(nous_portal_topup_urlrs}+<8L *3z?* +D6B6N7<T 2TXD$&veDJJLr:;;NOOV& ''r'z this feature) capabilityinclude_refresh_hintcoverage_categoryc@t|}|5|&|j|ry|jr|d|dS|jry| d|d|dS|js|jr d|d|dSd|d |dS|j 7d |d }|j r|d |j dz }|r|d z }|d|dz }|S|j}|r |jnd}|dk(rd|dS|dk(s|j dur"t|||}|r|js|dz }|Sd|d|dS)u Return user-facing guidance for a missing Nous tool-gateway entitlement. ``None`` means the account is entitled to use the capability — via paid service access OR a live free tool pool that covers it. The message works from normalized entitlement fields rather than subscription price alone: purchased credits without a subscription still count as paid access, while a paid subscription with exhausted usable credits does not. ``coverage_category`` scopes the check to a single tool category (e.g. ``"fal-video"``). When given, a user who is entitled overall but whose access does not fund that category gets a neutral billing nudge instead of a message implying their credits are exhausted. The pool-vs-paid distinction is never surfaced to the user. Nzd isn't included with your current Nous Portal access. Add credits or a subscription to enable it at .z9Hermes could not verify your Nous Portal entitlement, so zO is unavailable. Run `hermes model` to refresh your login, or check billing at zeNous inference credentials are configured, but Hermes cannot verify your Nous Portal paid access for zc. Log in with `hermes model` to enable Portal-managed features. Billing and credits are managed at zLog in to Nous Portal to use z9: run `hermes model`. Billing and credits are managed at z9Hermes could not verify your Nous Portal paid access, so z is unavailable.z Account lookup failed: z, Run `hermes model` to refresh your session.z Check billing at account_missingzOHermes could not find a Nous Portal account or organisation for this login, so zi is unavailable. Run `hermes model` to authenticate again; if the problem persists, contact Nous support.no_usable_creditsFzF If you recently bought credits, run `hermes model` to refresh Hermes.zIYour Nous Portal account does not currently have paid service access, so 2 is unavailable. Add credits or update billing at ) r{rkrfrBrOrVrrXr._no_paid_access_messagerE) ryrrr billing_urldetailaccessr.messages r(&format_nous_portal_entitlement_messagers**,7K  (556GH11 "l#MMXMYZ\ / /G |T%a )  ! !  4 444><@**5a9 ,J<822=a A ''/G |T      01C1C0DAF FF  D DF&{m155  2 2F$V]]$F ""# %Q R $$ (H(HE(Q), KP  (:(: _ _G \KK=XY [r'c~|j}|r |jnd}|r |jnd}|r |jnd}|r |jnd}|r |j nd}|r|rt |||} d| d|d|dS|r |dur d|d|dS|durt |||} d| d|d |dSt |||} d | d|d |dS) Nz&Your Nous Portal credits are exhaustedz, so z, is unavailable. Top up or renew credits at rFzGYour current Nous Portal plan does not include paid service access, so z+ is unavailable. Upgrade or add credits at zEYour Nous Portal account has no active subscription or usable creditsz- is unavailable. Subscribe or add credits at z3Your Nous Portal account has no usable paid creditsr)rXr1r2r7r5r6_credit_detail) ryrrrr1r2 total_usablesubscription_creditspurchased_credits credit_details r(rrs:  2 2F@Ff<D::$#>&|5IK\] 4]O5 U::Ea I #>%#GH UV X %'&|5IK\] SoU:,/a ! #<1EGXYM =m_E ,H UV Xr'cg}||jd|d||jd|d||jd|d|syddj|dS) Nzusable $z.2fzsubscription $z purchased $r~z (z, ))appendjoin)rrrpartss r(rr+s~ E x S123' ~&:3%?@A$ {#4S"9:;   % ! ##r'cday)z7Clear the short-lived account-info cache used by tests.N)rr&r'r($reset_nous_portal_account_info_cacher<s r'F) force_freshmin_jwt_ttl_secondsc ddlm}|dxsi}|j d}t |}t |tr|js0t|||}||St|}||Stdd d| S|st|||| } | | St||| S#t$r}t|dcYd}~Sd}~wwxYw) afReturn normalized Nous Portal account entitlement information. By default, a valid unexpired OAuth access JWT is used as a low-latency local account snapshot. ``force_fresh=True`` always calls ``/api/oauth/account`` and bypasses the short-lived cache. JWT claims are decoded locally for UX gating only; server APIs remain authoritative. r)get_provider_auth_statenousF)rrBN access_token)rrrMr)rBrDrErMstaterMr)rrrM)rtrru _error_inforh_portal_base_urlrvrmrw_info_from_oauth_pool_info_from_inference_key_poolrA_info_from_valid_jwt_fresh_account_info) rrrrexcrrMpool_oauth_info pool_infojwt_infos r(get_nous_portal_account_inforBs7;'/5299^,L&u-O lC ( 0B0B0D/# 3+   &" "1/B   $+    ' + 3    O ' C 7667sB## C, B>8C>Cc  ddlm}m}|}|dxs|}t|xs|}t ||}t 5|s>t 8t \}} } ||k(r)tj| z tkr | cdddSdddt||} | stdd|St| jdtr"t| jdxsdd|| St| || } t 5|tj| faddd| S#1swYxYw#1swY| SxYw#t $r0} t| t#|jd |cYd} ~ Sd} ~ wwxYw) Nr)rresolve_nous_access_tokenrempty_account_responseTrrBrMraccount_response_errorrrBrMr]rrMr)rtrrr _cache_key_ACCOUNT_INFO_CACHE_LOCKrtime monotonic_ACCOUNT_INFO_CACHE_TTL_fetch_nous_account_inforrvrhrm_info_from_account_payloadrur:)rrrMrrrrefreshed_state cache_key cached_key cached_at cached_infopayloadinfors r(rrzst* V02 1&9BU*?;N|_= % '#6#B5H2 I{*0@90LPg/g&  ' ' ' +<I. /  gkk'*C 0kk'*F.F /#  * !+  & F#,dnn.>"E  F 9 ' '4 F  599^45+   se5.$7L lC ( 0B0B0D ($/   %UK6 E/ 6 0u0$7 0uj$/UK6$WUGY%G$HI E ' , 3    O *<9IJ *,  '++g&,++g&B*B,   &( q J  ,   s/ D/ D>/ D;:D;> E EEEcddlm}|d}|r|jsyt|j }|sydd}t ||S)Nr) load_poolrctt|ddxsd}tt|ddxsd}tt|ddxsd}||| fS)Nagent_key_expires_atgrQpriorityr)_parse_iso_timestamprint)r agent_exp access_exprs r(_entry_sort_keyz0_select_nous_pool_entry.._entry_sort_key!s](8NPT)UV]Z] )'%t*LMTQT wuj!49::y11r')key)rrrlztuple[float, float, int])agent.credential_poolrhas_credentialslistentriesmax)rpoolrrs r(rrsJ/ V D t++-4<<>"G 2 wO ,,r'c t|dd}t|tr|jsytt|ddxsdjj }t|dd}|j dxs t |S)NrF auth_typer~ refresh_tokenoauth)rrvrmrwlower startswithr:)rrrrs r(rr*s{5.$7L lC ( 0B0B0DGE;39r:@@BHHJIE?D9M    ( ?D,??r'c~|xsdjd}|d}d|dd}tjj||}tjj |d 5}t j |jj}dddttr|SiS#1swYxYw) Nrqrrz/api/oauth/accountzBearer zapplication/json) AuthorizationAccept)headers)timeout) rxurllibrequestRequesturlopenjsonloadsreaddecodervr?)rrMrzurlrreqresprs r(rr3s  @@ H H MD F$ %C"<.1$G .. g 6C   Q  /34**TYY[//123 $/77R733s %2B33B<c   ddlm}||}|syt|j d}|-|t j t dt|zkryt|j d}t|j d}t||t|j d|} tdidd d d d d dt|j ddt|j ddt|j dxs|j ddt|j ddt|j dd|dt|j ddd dt|j dxsddtj|tj d|d| dt#|j ddt%|S#t$rYywxYw)Nr)_decode_jwt_claimsexpr-r3rG)r,r-r/r3rBTrDr rEFrFsubrJrKrLrMrNrOrP auth_storerQ)tzrVrXrZr\r&)rtrru _coerce_floatrhrrr _coerce_bool _coerce_intr* _coerce_strrAr fromtimestamprutc_tool_access_from_valuer?) tokenrrMrrclaimsrr-r3 access_infos r(rrCs6  &F   5) *C {cTYY[3q#6I2J+KKKvzz-89K#FJJ/B$CD+#FJJx$89+ K !    FJJu-.   6::h/0   fjj5O;9OP  vzz,78   = 9: ( 'uyy1E'FG &* &eii0C&DEU ))#(,,? ( "-  ,FJJ},EF! "<# ) sG77 HHc |jd}t|tr|ni}|jd}t|tr|ni}t|jd}t |jd}|r |j nd} | | |j } tdiddddd dd t|jd xs|r |jndd t|jd dt|jddt|jdd|dt|jddt|jdxs|jddt|jdxsddt|jddt|jdd|d| d|dt|jddt|S)Nuser organisationrUrVrBTrDr rErGidrHrrInamerJrMrNrOrrrPrrRrSrXrZr]r&) rhrvr?_subscription_from_payload!_paid_service_access_from_payloadr,r-rAr r/r:r ) rrrMraw_userrraw_orgrrUrr-s r(rrus {{6"H'1(D'A8rDkk.)G.8$.G7RL-gkk..IJL .w{{;P/Q RF$*&..Kv1((     <++D12bQWv7M7M]a   \--f56   \--f56  eii 45 ( 'uyy1E'FG &*%))N*C*]uyyQ\G]%^ &eii0C&DEU $((7+, dhh{34 " (  "(! ",GKK ,FG# $M% r'ct|tsyt|jddu}|jd}i}t|tr0|j D]\}}t|t s|du||<t ||S)zParse a Portal ``tool_access`` object (from the JWT claim or the account API) into :class:`NousToolAccessInfo`. Fails closed: a non-object value yields ``None``, and only literal ``true`` counts for ``enabled`` and each coverage entry.Nr;Tr=)r;r=)rvr?rrhitemsrmr9)valuer; raw_coverager=rvals r(r r s eT "599Y/0D8G99Z(L "H,%$**, ,HC#s# #t   , g AAr'c t|tsytt|j dt |j dt |j dt |j dt|j dt |j dt |j dS) Nrrrrrr r!)rrrrrr r!)rvr?rr rhrrrs r(rrs eT " % 6* + 6* +$UYY/?%@A%eii0A&BC&uyy1E'FG' 2E(FG&uyy1C'DE r'ct|tsyt|jd}t|jd}t ||t |jdt |jdt |jdt|jdt|jdt |jdt|jd t|jd t|jd t|jd  S)Nr,r-r.r/r0r1r2r3r4r5r6r7) r,r-r.r/r0r1r2r3r4r5r6r7)rvr?rrhr*r rr)rr,r-s r(rrs eT "599Y/0Guyy78K $599X./#EII.?$@A#EII.?$@A ,UYY7P-Q R$0;X1Y$Z%eii0C&DE$1%)) __future__rr%r threadingrurllib.requestr dataclassesrrrrtypingrr r rCTOOL_COVERAGE_CATEGORIESrrr%Lockrrr*r9rAr{rrrrrrrrrrrrrrr rrrrrrr rrrr&r'r(rEs"9"  (')) VWIMFM)9>>+ $--- $ 1 1 1 $ < < < $2M2M2Mj )(4%!%'+ X1XX X % X  Xv%'%%% %P$!$)$'$ $"!555 5p2 2 2 # 2  2 j"$BDDD# D % DN-&@&* 8 8" 8 8 / / /# /  / % /d# # ## #  #LB" 2&*,0  #  *   "%/  6r'