p#jmUdZddlmZddlZddlZddlZddlZddlZddl m Z m Z ddl m Z m Z ddlmZmZmZedZdZd Zdad ed <ejZe d GddZe d GddZe d GddZe d GddZdZd[dZdd ddd\d"Zd]d$Zd^d)Z d_d+Z!d,d d-d`d1Z"dad5Z#dbd6Z$dcd7Z%ddd9Z&ded<Z' dZdfd>Z(dgd@Z)dhdBZ*didEZ+djdGZ,dkdIZ-dddJdldPZ.dmdQZ/dndRZ0dodSZ1dpdTZ2dqdVZ3drdXZ4dodYZ5dS)sz3Normalized Nous Portal account entitlement helpers.) annotationsN) dataclassfield)datetimetimezone)AnyLiteralOptional)jwt account_api inference_keynoneerror) firecrawlfalz fal-videoz openai-audioz browser-usemodal<z1tuple[str, float, 'NousPortalAccountInfo'] | None_account_info_cacheT)frozencdeZdZUdZded<dZded<dZded<dZded<dZded <dZ ded <dS) NousPortalSubscriptionInfoN Optional[str]plan Optional[int]tierOptional[float]monthly_chargecurrent_period_endcredits_remainingrollover_credits) __name__ __module__ __qualname__r__annotations__rrrrr sMG %d ; ; ;H;;;;;;r&r8ceZdZUded<ded<ded<dZded<dZded <dZded <dZded <dZded <dZ ded <dZ ded<dZ ded<dZ ded<dZ ded<dZded<dZded<dZded<dZded<dZded<dZded<dZded<dZded <dZded!<ed)d#Zed)d$Zed)d%Zd*d(ZdS)+NousPortalAccountInfor9 logged_inNousAccountInfoSourcesourcefreshNruser_idorg_id client_id product_id nous_clientportal_base_urlinference_base_urlFinference_credential_presentcredential_sourcezOptional[datetime] expires_atemail privy_did$Optional[NousPortalSubscriptionInfo] subscriptionr*paid_service_access#Optional[NousPaidServiceAccessInfo]paid_service_access_infoOptional[NousToolAccessInfo] tool_accessOptional[dict[str, Any]] raw_claims raw_accountrreturnc|jduS)NTrSselfs r'is_paidzNousPortalAccountInfo.is_paidds'4//r&c|jduS)NFr]r^s r' is_free_tierz"NousPortalAccountInfo.is_free_tierhs'500r&cB|jdurdS|jduo |jjS)zCoarse "entitled to any managed tool" gate: paid access OR a live free tool pool. Use :meth:`tool_gateway_entitled_for` to gate a specific tool category (the pool does not cover every category).TN)rSrWr:r^s r'tool_gateway_entitledz+NousPortalAccountInfo.tool_gateway_entitledls0  #t + +4t+H0@0HHr&categorystrc|jdurdS|j}t|o"|jo|j|duS)zWhether a specific tool category is entitled. Paid users are entitled everywhere; free tool-pool users only where ``coverage[category]`` is true (e.g. image but not video).T)rSrWr9r:r<get)r_retas r'tool_gateway_entitled_forz/NousPortalAccountInfo.tool_gateway_entitled_forusL  #t + +4  BK2:K"+//(*C*Ct*KLLLr&)r[r9)rerfr[r9)r!r"r#r$rErFrGrHrIrJrKrLrMrNrOrPrRrSrUrWrYrZrpropertyr`rbrdrjr%r&r'r@r@KsOOO!!!!KKK!G!!!! F    #I#### $J$$$$!%K%%%%%)O))))(,,,,,). ....'+++++%)J))))E#I####9=L====*.....DHHHHH04K4444+/J////,0K0000E 000X0111X1IIIXIMMMMMMr&r@ account_infoOptional[NousPortalAccountInfo]r[rfc ddlm}n#t$rd}YnwxYwd}||j}t |t r|s|}|ddS)z>Return the billing URL for a normalized Nous account snapshot.r)DEFAULT_NOUS_PORTAL_URLhttps://portal.nousresearch.comN/z/billing)hermes_cli.authro ExceptionrJ isinstancerfstriprstrip)rlrobases r'nous_portal_billing_urlrxsD;;;;;;; DDD"CD D+ dC ' '&kk# ( ( ((s  z this feature) capabilityinclude_refresh_hintcoverage_categoryryrzr9r{rct|}|2|'||rdS|jr|d|dSn |jrdS| d|d|dS|js|jr d|d|dSd|d |dS|j-d |d }|jr|d |jdz }|r|d z }|d|dz }|S|j}|r|jnd}|dkrd|dS|dks |jdur!t|||}|r |j s|dz }|Sd|d|dS)u Return user-facing guidance for a missing Nous tool-gateway entitlement. ``None`` means the account is entitled to use the capability — via paid service access OR a live free tool pool that covers it. The message works from normalized entitlement fields rather than subscription price alone: purchased credits without a subscription still count as paid access, while a paid subscription with exhausted usable credits does not. ``coverage_category`` scopes the check to a single tool category (e.g. ``"fal-video"``). When given, a user who is entitled overall but whose access does not fund that category gets a neutral billing nudge instead of a message implying their credits are exhausted. The pool-vs-paid distinction is never surfaced to the user. Nzd isn't included with your current Nous Portal access. Add credits or a subscription to enable it at .z9Hermes could not verify your Nous Portal entitlement, so zO is unavailable. Run `hermes model` to refresh your login, or check billing at zeNous inference credentials are configured, but Hermes cannot verify your Nous Portal paid access for zc. Log in with `hermes model` to enable Portal-managed features. Billing and credits are managed at zLog in to Nous Portal to use z9: run `hermes model`. Billing and credits are managed at z9Hermes could not verify your Nous Portal paid access, so z is unavailable.z Account lookup failed: z, Run `hermes model` to refresh your session.z Check billing at account_missingzOHermes could not find a Nous Portal account or organisation for this login, so zi is unavailable. Run `hermes model` to authenticate again; if the problem persists, contact Nous support.no_usable_creditsFzF If you recently bought credits, run `hermes model` to refresh Hermes.zIYour Nous Portal account does not currently have paid service access, so 2 is unavailable. Add credits or update billing at ) rxrjrdrArLrSrrUr-_no_paid_access_messagerD) rlryrzr{ billing_urldetailaccessr-messages r'&format_nous_portal_entitlement_messagersd**,77K  (556GHH t1  "\\MX\\\   / 4 )  ) )% ) ) )  !   4 94>99+6999  AJ A A2= A A A '/         G F1CFFF FF  E D DF5{5555  2F$ .V]]$F """ R# R R R $$$ (HE(Q(Q), KPP  ` (: ` _ _G [ [ [LW [ [ [r&rcZ|j}|r|jnd}|r|jnd}|r|jnd}|r|jnd}|r|jnd}|r|rt |||} d| d|d|dS|r |dur d|d|dS|durt |||} d| d|d |dSt |||} d | d|d |dS) Nz&Your Nous Portal credits are exhaustedz, so z, is unavailable. Top up or renew credits at r}FzGYour current Nous Portal plan does not include paid service access, so z+ is unavailable. Upgrade or add credits at zEYour Nous Portal account has no active subscription or usable creditsz- is unavailable. Subscribe or add credits at z3Your Nous Portal account has no usable paid creditsr)rUr0r1r6r4r5_credit_detail) rlryrrr0r1 total_usablesubscription_creditspurchased_credits credit_details r'rrs  2F@FPf<DN::$ #> &|5IK\]]  I] I I I I:E I I I  #>%#G#G X X XIT X X X %''&|5IK\]]  ! ! !#- ! ! ! ! ! #<1EGXYYM Xm X X  X XIT X X Xr&rrrrcg}||d|d||d|d||d|d|sdSdd|dS) Nzusable $z.2fzsubscription $z purchased $z (z, ))appendjoin)rrrpartss r'rrs E 2 222333' @&:@@@AAA$ :#4:::;;; r # %  # # ##r&Nonec dadS)z7Clear the short-lived account-info cache used by tests.N)rr%r&r'$reset_nous_portal_account_info_cacher"sr&F) force_freshmin_jwt_ttl_secondsrrintc ddlm}|dpi}n(#t$r}t|dcYd}~Sd}~wwxYw|d}t |}t |tr|st \}} } ||kr-tj| z tkr| cdddSdddn #1swxYwYt||} | stdd|St| dtr(t| dpdd|| St| || } t 5|tj| fadddn #1swxYwY| S#t $r<} t| t#| d |cYd} ~ Sd} ~ wwxYw) Nr)rresolve_nous_access_tokenrempty_account_responseTrrArJraccount_response_errorrrArJrZrrJr)rrrrr _cache_key_ACCOUNT_INFO_CACHE_LOCKrtime monotonic_ACCOUNT_INFO_CACHE_TTL_fetch_nous_account_inforrtrhrf_info_from_account_payloadrsr9)rrrJrrrrefreshed_state cache_key cached_key cached_at cached_infopayloadinfors r'rr`s* VVVVVVVV0022 11&99BU*?;;N|_== % ' ' '#6#B5H2 I{**0@0@90LPg/g/g&  ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' ' +<II . /  gkk'**C 0 0 kk'**F.F /#  * !+    & F F#,dn.>.>"E  F F F F F F F F F F F F F F F    599^4455+          syAE% ;B E% E%B!!E%$B!%&E% AE%E%5E E%EE%E E%% F+/1F& F+&F+c t}|dSt|ddpt|dd}t|tr|sdSt dddt|ddp|t|ddp!t|d dpt|d dd d t|d ddS#t $rYdSwxYw)zEReturn an explicit unknown-entitlement snapshot for opaque Nous keys.Nruntime_api_keyrrFr rJrKruntime_base_urlbase_urlTpool:labelunknownportal_oauth_missing)rArCrDrJrKrLrMr)_select_nous_pool_entrygetattrrtrfrur@rs)rJentry runtime_keys r'rrs')) =4e%6==cP^`bAcAc +s++ ;3D3D3F3F 4$"0$77#"3T::45"4d;;45*d33)-JgeWi&H&HJJ(    " ttsC A C !A*C CCc n t}n#t$rYdSwxYw|t|sdSt|dd}t |t r|sdSt|ddp|}|t|ddt|ddp!t|ddpt|ddt|dddt|d d d }|st|||| }||S t||}n)#t$r} t| d |cYd} ~ Sd} ~ wwxYw|stdd |St | dt r(t| dpdd ||St|||S)NrrJrGrKrr agent_keyrrr)rrGrKrrMrTrrrrrr) rrs_pool_entry_is_portal_oauthrrtrfrurrrrhr) rrrJrrentry_portal_urlrrrrs r'rrsm ')) tt }7>>}t5.$77L lC ( ( 0B0B0D0Dt ($//   %UK66 E/ 6 6 0u0$77 0uj$//UK66IWUGY%G%GII  E ' , 3      O *<9IJJ    ,           *,    '++g&&,, ++g&&B*B,     &(   s* D D>"D93D>9D> Optional[Any]cddlm}|d}|r|sdSt|}|sdSd d}t || S) Nr) load_poolrrrr[tuple[float, float, int]ctt|ddpd}tt|ddpd}tt|ddpd}||| fS)Nagent_key_expires_atgrNpriorityr)_parse_iso_timestamprr)r agent_exp access_exprs r'_entry_sort_keyz0_select_nous_pool_entry.._entry_sort_keyso(8NPT)U)UVV]Z] )'%t*L*LMMTQT wuj!449:::y11r&)key)rrr[r)agent.credential_poolrhas_credentialslistentriesmax)rpoolrrs r'rrs////// 9V  D t++--t4<<>>""G t2222 wO , , ,,r&rrclt|dd}t|tr|sdStt|ddpd}t|dd}|dpt |S)NrF auth_typer refresh_tokenoauth)rrtrfrulower startswithr9)rrrrs r'rrs5.$77L lC ( ( 0B0B0D0DuGE;339r::@@BBHHJJIE?D99M    ( ( ?D,?,??r&rc|pdd}|d}d|dd}tj||}tj|d 5}t j|}dddn #1swxYwYt|tr|niS) Nrprqz/api/oauth/accountzBearer zapplication/json) AuthorizationAccept)headers)timeout) rvurllibrequestRequesturlopenjsonloadsreaddecodertr>)rrJrwurlrreqresprs r'rrs   @@ H H M MD  % % %C1<11$G . g 6 6C   Q  / /34*TYY[[//1122333333333333333 $// 777R7s'9B,,B03B0tokenc  ddlm}n#t$rYdSwxYw||}|sdSt|d}|5|t jt dt|zkrdSt|d}t|d}t||t|d|} tdidd d d d d dt|ddt|ddt|dp|ddt|ddt|dd|dt|ddd dt|dpddtj|tjd|d| dt#|ddt%|S)Nr)_decode_jwt_claimsexpr,r2rF)r+r,r.r2rATrCr rDFrEsubrGrHrIrJrKrLrM auth_storerN)tzrSrUrWrYr%)rrrrs _coerce_floatrhrrr _coerce_bool _coerce_intr) _coerce_strr@r fromtimestamprutc_tool_access_from_valuer>) rrrJrrclaimsrr,r2 access_infos r'rr)s6666666 tt  & &F t  5)) * *C {cTY[[3q#6I2J2J+K+KKKKtvzz-8899K#FJJ/B$C$CDD+#FJJx$8$899+ K !   $ u e FJJu--...   6::h//000   fjj55O;9O9OPPP  vzz,77888   = 9 9::: ( 'uyy1E'F'FGGG &*T &eii0C&D&DEEU )#(,???? (K "-  ,FJJ},E,EFFF! "<<<# s  rc t|dtr|dni}t|dtr|dni}t|d}t |d}|r|jnd}| ||j}tdiddddd dd t|d p |r|j ndd t|d d |dt|ddt|dp|ddt|dpddt|ddt|dd|d|d|dt|ddt|S)Nuser organisationrRrSrATrCr rDrFidrGrJrKrLrrrMrrOrPrUrWrZr%) rtrhr>_subscription_from_payload!_paid_service_access_from_payloadr+r,r@rr.r9r)rrrJr r rRrr,s r'rr[sr #-W[[-@-@$"G"G O7;;v   RD gkk.114 8 8  N###  .gkk..I.IJJL .w{{;P/Q/Q R RF$*4&..Kv1(    $ } d <++D1122bQW7av7M7M]a   eii 44555   (  'uyy1E'F'FGGG &*%))N*C*C*]uyyQ\G]G]%^%^%^ &eii0C&D&DEEU $((7++,,, dhh{33444 "\ (K "( ,GKK ,F,FGGG  MMM! r&valuerVc^t|tsdSt|ddu}|d}i}t|tr6|D]!\}}t|t r|du||<"t ||S)zParse a Portal ``tool_access`` object (from the JWT claim or the account API) into :class:`NousToolAccessInfo`. Fails closed: a non-object value yields ``None``, and only literal ``true`` counts for ``enabled`` and each coverage entry.Nr:Tr<)r:r<)rtr>rrhitemsrfr8)rr: raw_coverager<rvals r'rrs eT " "t599Y//00D8G99Z((L "H,%%,$**,, , ,HC#s## , #t  g A A AAr&rQc t|tsdStt|dt |dt |dt|dt |dt |dS)Nrrrrrr )rrrrrr )rtr>rrrhrrrs r'r r s eT " "t % 6** + + 6** + +$UYY/?%@%@AA&uyy1E'F'FGG' 2E(F(FGG&uyy1C'D'DEE    r&rTcnt|tsdSt|d}t|d}t ||t |dt |dt |dt|dt|dt |dt|d t|d t|d t|d  S)Nr+r,r-r.r/r0r1r2r3r4r5r6) r+r,r-r.r/r0r1r2r3r4r5r6)rtr>rrhr)rrr)rr+r,s r'rrsW eT " "t599Y//00Guyy7788K $599X..//#EII.?$@$@AA#EII.?$@$@AA ,UYY7P-Q-Q R R$0;X1Y1Y$Z$Z%eii0C&D&DEE$1%))r8sR999""""""  (((((((('''''''')))))))))) VWIMMMMM)9>++ $-------- $ 1 1 1 1 1 1 1 1 $ < < < < < < < < $0M0M0M0M0M0M0M0Mf ) ) ) ) )$%!%'+ XXXXXXv%%%%P$$$$"!555555p2 2 2 2 jBDDDDN----&@@@@&* 8 8 8 8 8 ////d####LBBBB"    2&*,0 "%%%%////     6666r&