@carrierllc/mcp 0.13.0 → 0.13.4

package/dist/{chunk-ZUUC3J4J.js → chunk-DUAXD7GD.js}

@@ -1815,7 +1815,7 @@ function storefrontScreen(input) {
 // package.json
 var package_default = {
   name: "@carrierllc/mcp",
-  version: "0.13.0",
+  version: "0.13.4",
   description: "Carrier MCP \u2014 natural-language control of MVNO/eSIM fleets via eSIMVault OCS. Stdio mode for direct integration with Claude Desktop, Cursor, Windsurf, and MCP-compatible clients. Ships the `carrier` CLI (plugin install + white-label eSIM storefront scaffold).",
   license: "MIT",
   author: "Carrier (Lifecycle Innovations Limited)",
@@ -1899,1218 +1899,1610 @@ var package_default = {
 // src/version.ts
 var CARRIER_VERSION = package_default.version;
 
-// ../../packages/ocs-client/dist/chunk-6C2DHWD4.js
-import { z } from "zod";
-var OCS_V1_METHODS = /* @__PURE__ */ new Set([
-  "getResellerInfo",
-  "listResellerAccount",
-  "listPrepaidPackageTemplate",
-  "listSubscriberPrepaidPackages",
-  "listSubscriber",
-  "getSingleSubscriber",
-  "getSimProviderStatus",
-  "getSubscriberLocation",
-  "getSubscriberLocationByCellId",
-  "esimStatusPerAccount",
-  "subscriberUsageOverPeriod",
-  "affectRecurringPackageToSubscriber",
-  "deleteSubscriberPackage",
-  "modifyAccountBalance",
-  "modifySubscriberBalance",
-  "modifySubscriberContactInfo",
-  "modifySubscriberMobilePlan",
-  "modifySubscriberSteeringList",
-  "modifySubscriberVoipPlan",
-  "modifySubscriberPrepaidPackageActivePeriod",
-  "modifySubscriberPrepaidPackageLimits",
-  "modifySubscriberPrepaidPackageStatus",
-  "modifyPPTCore",
-  "modifyPPTRecurring",
-  "createPrepaidPackageTemplate",
-  "createLocationZone",
-  "changeNetworkProfileOfLocationZone",
-  "hlrGetBitrate",
-  "hlrSetBitrate",
-  "listSponsor",
-  "listDestinationListPrefix",
-  "listDetailedLocationZone",
-  "listLocationZoneElement",
-  "listSubscriberVoipTariff",
-  "listVoipTariffRule",
-  "affectSubscriberFakePhoneNumber",
-  "affectSubscriberRealPhoneNumber",
-  "getCustomerTariff",
-  "resetSubsGzCounter",
-  "sendMtSms"
-]);
-var OcsResponseEnvelope = z.object({
-  status: z.object({
-    code: z.number(),
-    // Required to match the `OcsStatus` interface in client.ts ({ code, msg }).
-    msg: z.string()
-  }).passthrough()
-}).passthrough();
-var GetResellerInfoResponse = z.object({
-  id: z.number(),
-  name: z.string(),
-  parentId: z.number(),
-  parentName: z.string(),
-  // Production eSIMVault returns decimal money as a JSON string ("495.52").
-  // Staging fixtures used a number, so accept both exact provider variants.
-  balance: z.union([z.number(), z.string().regex(/^-?\d+(?:\.\d+)?$/)]),
-  cdrFolder: z.string().optional(),
-  trafficInfo: z.object({}).passthrough().optional(),
-  chargingInfo: z.object({}).passthrough().optional(),
-  contactInfo: z.object({}).passthrough().optional()
-}).passthrough();
-var ListResellerAccountResponse = z.object({
-  reseller: z.array(
-    z.object({
-      id: z.number(),
-      name: z.string(),
-      account: z.array(z.object({}).passthrough())
-    }).passthrough()
-  )
-}).passthrough();
-var ListPrepaidPackageTemplateResponse = z.object({
-  template: z.array(
-    z.object({
-      prepaidpackagetemplateid: z.number(),
-      prepaidpackagetemplatename: z.string(),
-      resellerid: z.number(),
-      locationzoneid: z.number()
-    }).passthrough()
-  )
-}).passthrough();
-var SubscriberStatusName = z.string().regex(/^[A-Za-z]/, "subscriber status must be a non-empty alpha-leading name");
-var GetSingleSubscriberResponse = z.object({
-  status: z.array(
-    z.object({
-      status: SubscriberStatusName
-    }).passthrough()
-  ).min(1, "getSingleSubscriber.status must be a non-empty array")
-}).passthrough();
-var RESPONSE_SCHEMAS = {
-  getResellerInfo: GetResellerInfoResponse,
-  listResellerAccount: ListResellerAccountResponse,
-  listPrepaidPackageTemplate: ListPrepaidPackageTemplateResponse,
-  getSingleSubscriber: GetSingleSubscriberResponse
-};
-var IccidParam = z.object({ iccid: z.string().min(1) });
-var AccountIdParam = z.object({ accountId: z.coerce.number().int().positive() });
-var PackageIdParam = z.object({ packageId: z.coerce.number().int().positive() });
-var TemplateIdParam = z.object({ templateId: z.coerce.number().int().positive() });
-var ResellerIdParam = z.object({ resellerId: z.coerce.number().int().positive() });
-var DateRangeBody = z.object({
-  start: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "must be YYYY-MM-DD"),
-  end: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "must be YYYY-MM-DD")
-});
-var ErrorResponse = z.object({
-  error: z.string(),
-  code: z.number().optional(),
-  retryAfter: z.number().optional()
-});
-var OkResponse = z.object({
-  ok: z.boolean(),
-  data: z.unknown().optional()
-});
-var ModifySubscriberStatusBody = z.object({
-  newStatus: z.enum(["active", "suspended", "deactivated"])
-});
-var ModifySubscriberBalanceBody = z.object({
-  amount: z.number().optional(),
-  setBalance: z.number().optional()
-}).refine((v) => v.amount !== void 0 || v.setBalance !== void 0, {
-  message: "Provide either amount (delta) or setBalance (absolute)"
-});
-var ModifySubscriberContactInfoBody = z.object({
-  name: z.string().optional(),
-  mail: z.string().email().optional(),
-  phone: z.string().optional()
-});
-var SetTrafficRestrictionsBody = z.object({
-  blockData: z.boolean().optional(),
-  blockVoice: z.boolean().optional(),
-  blockSms: z.boolean().optional(),
-  blockRoaming: z.boolean().optional()
-});
-var ModifySteeringListBody = z.object({
-  steeringListId: z.number().int().positive()
-});
-var HlrSetBitrateBody = z.object({
-  limit: z.number().int().positive()
-});
-var AssignPackageBody = z.object({
-  packageTemplateId: z.number().int().positive(),
-  startDate: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
-});
-var AssignRecurringPackageBody = z.object({
-  packageTemplateId: z.number().int().positive()
-});
-var ModifyPackageLimitsBody = z.object({
-  dataLimitMb: z.number().positive().optional(),
-  voiceLimitMin: z.number().nonnegative().optional(),
-  smsLimit: z.number().nonnegative().optional()
-});
-var ModifyPackageExpiryBody = z.object({
-  expiryDate: z.string().regex(/^\d{4}-\d{2}-\d{2}$/)
-});
-var ModifyPackageStatusBody = z.object({
-  status: z.enum(["active", "paused"])
-});
-var StopResumeRecurringBody = z.object({
-  action: z.enum(["stop", "resume"])
-});
-var CreatePackageTemplateBody = z.object({
-  name: z.string().min(1),
-  dataLimitMb: z.number().positive(),
-  validityDays: z.number().int().positive(),
-  price: z.number().nonnegative().optional(),
-  recurring: z.boolean().optional()
-});
-var ModifyTemplateCoreBody = z.object({
-  name: z.string().optional(),
-  dataLimitMb: z.number().positive().optional(),
-  validityDays: z.number().int().positive().optional()
-});
-var ModifyTemplateRecurringBody = z.object({
-  billingCycleDays: z.number().int().positive().optional(),
-  autoRenew: z.boolean().optional()
-});
-var ModifyTemplateThrottlingBody = z.object({
-  throttleSpeedKbps: z.number().int().nonnegative()
-});
-var ModifyAccountBalanceBody = z.object({
-  amount: z.number(),
-  mode: z.enum(["add", "subtract", "set"]).default("add")
-});
-var MoveSubscribersBody = z.object({
-  fromAccountId: z.number().int().positive(),
-  iccidStart: z.string().min(1),
-  iccidEnd: z.string().min(1)
-});
-var CreateLocationZoneBody = z.object({
-  name: z.string().min(1),
-  countries: z.array(z.string().length(2)).min(1)
-});
-var SendSmsBody = z.object({
-  text: z.string().min(1).max(160),
-  senderId: z.string().optional()
-});
-var ChangeSimStatusBody = z.object({
-  newStatus: z.enum(["Enable", "Disable"])
-});
-var DiagnoseSubscriberBody = z.object({
-  iccid: z.string().min(1)
-});
-var FleetHealthQuery = z.object({
-  accountId: z.coerce.number().int().positive().optional()
-});
-var ChurnRiskQuery = z.object({
-  daysSinceUsage: z.coerce.number().int().positive().default(14),
-  limit: z.coerce.number().int().positive().max(500).default(50)
-});
-var DetectUsageAnomaliesBody = z.object({
-  start: z.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-  end: z.string().regex(/^\d{4}-\d{2}-\d{2}$/),
-  thresholdMultiplier: z.number().positive().default(2.5)
-});
-var OptimizePackageBody = z.object({
-  iccid: z.string().min(1)
-});
-var AuditNetworkCoverageBody = z.object({
-  locationZoneId: z.number().int().positive().optional()
-});
-var MarketingIntelligenceQuery = z.object({
-  segment: z.enum(["low_usage", "high_usage", "expiring_soon", "churned"]).optional()
-});
-var HighCostSubscribersQuery = z.object({
-  limit: z.coerce.number().int().positive().max(200).default(20),
-  start: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional(),
-  end: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
-});
-var WebhookEventBody = z.record(z.string(), z.unknown());
-var HealthResponse = z.object({
-  ok: z.literal(true),
-  version: z.string(),
-  build_sha: z.string()
-});
-
-// ../../packages/ocs-client/dist/chunk-CGMK4FTD.js
-var DEFAULT_OCS_BUDGET = {
-  attemptMs: 3e4,
-  maxAttempts: 3,
-  totalMs: 75e3
-};
-var OCS_METHOD_BUDGETS = {
-  // 3.4 MB, 88-128 s measured. 180 s is 1.4x the slowest observation. One
-  // attempt: payload size does not vary, so a retry only doubles the wait.
-  getCustomerTariff: { attemptMs: 18e4, maxAttempts: 1, totalMs: 18e4 }
-};
-var MIN_ATTEMPT_BUDGET_MS = 1e3;
-var BACKOFF_BASE_MS = 500;
-var OcsTimeoutError = class extends Error {
-  constructor(method, timeoutMs, budgetMs = timeoutMs, attempts = 1) {
-    super(
-      `[${method}] OCS request timed out after ${timeoutMs}ms` + (attempts > 1 ? ` on each of ${attempts} attempts` : "") + (budgetMs > timeoutMs ? ` (budget ${budgetMs}ms)` : "") + `. The upstream did not deliver a complete response in time \u2014 usually an oversized payload or a wedged upstream. Narrow the request, or raise OCS_TIMEOUT_MS / OCS_TOTAL_TIMEOUT_MS if this method is legitimately slower here.`
-    );
-    this.method = method;
-    this.timeoutMs = timeoutMs;
-    this.budgetMs = budgetMs;
-    this.attempts = attempts;
-    this.name = "OcsTimeoutError";
+// ../../packages/ocs-client/dist/chunk-LLQXWRFM.js
+var OCS_MAX_USAGE_WINDOW_DAYS = 7;
+function clampUsagePeriod(start, end, maxDays = OCS_MAX_USAGE_WINDOW_DAYS) {
+  const endMs = Date.parse(`${end}T00:00:00Z`);
+  const startMs = Date.parse(`${start}T00:00:00Z`);
+  if (Number.isNaN(endMs) || Number.isNaN(startMs) || startMs > endMs) {
+    return { start, end };
+  }
+  const minStartMs = endMs - (maxDays - 1) * 864e5;
+  if (startMs < minStartMs) {
+    return { start: new Date(minStartMs).toISOString().slice(0, 10), end };
+  }
+  return { start, end };
+}
+function lastNDaysPeriod(days = OCS_MAX_USAGE_WINDOW_DAYS, now = /* @__PURE__ */ new Date()) {
+  const end = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
+  const start = new Date(end);
+  start.setUTCDate(end.getUTCDate() - (days - 1));
+  return {
+    start: start.toISOString().slice(0, 10),
+    end: end.toISOString().slice(0, 10)
+  };
+}
+function locationParams(iccid) {
+  return { iccid };
+}
+function subscriberIdParams(iccid) {
+  return { iccid };
+}
+function recurringPackageParams(iccid, packageTemplateId, options = {}) {
+  if (options.activationAtFirstUse !== void 0 && options.startTimeUTC !== void 0) {
+    throw new Error("activationAtFirstUse cannot be combined with startTimeUTC");
   }
-  method;
-  timeoutMs;
-  budgetMs;
-  attempts;
-};
-function envInt(name) {
-  const proc = globalThis["process"];
-  const parsed = Number(proc?.env?.[name]);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : void 0;
+  return {
+    subscriber: { iccid },
+    packageTemplateId,
+    ...options.startTimeUTC !== void 0 ? { startTimeUTC: options.startTimeUTC } : { activationAtFirstUse: options.activationAtFirstUse ?? true }
+  };
 }
-function ocsBudgetFor(method) {
-  const base = OCS_METHOD_BUDGETS[method] ?? DEFAULT_OCS_BUDGET;
-  const attemptMs = envInt("OCS_TIMEOUT_MS") ?? base.attemptMs;
-  const totalMs = Math.max(envInt("OCS_TOTAL_TIMEOUT_MS") ?? base.totalMs, attemptMs);
-  return { attemptMs, maxAttempts: base.maxAttempts, totalMs };
+function networkEventsOverPeriodParams(iccid, start, end) {
+  return usageOverPeriodParams(iccid, start, end);
 }
-function sleep2(ms, signal) {
-  return new Promise((resolve) => {
-    const timer = setTimeout(finish, ms);
-    function finish() {
-      clearTimeout(timer);
-      signal.removeEventListener("abort", finish);
-      resolve();
-    }
-    signal.addEventListener("abort", finish, { once: true });
-  });
+function usageOverPeriodParams(iccid, start, end) {
+  const period = clampUsagePeriod(start, end);
+  return { subscriber: { iccid }, period };
 }
-async function withDeadline(work, deadline, ms) {
-  let timer;
-  try {
-    return await Promise.race([
-      work,
-      new Promise((_resolve, reject) => {
-        timer = setTimeout(() => reject(deadline), ms);
-      })
-    ]);
-  } finally {
-    if (timer !== void 0) clearTimeout(timer);
+function imsiFromSubscriberRecord(record) {
+  if (!record || typeof record !== "object") return void 0;
+  const rec = record;
+  const inner = rec.getSingleSubscriber && typeof rec.getSingleSubscriber === "object" ? rec.getSingleSubscriber : rec;
+  const direct = inner.imsi;
+  if (typeof direct === "string" && direct.length > 0) return direct;
+  for (const key of ["imsiList", "multiImsi"]) {
+    const list = inner[key];
+    if (!Array.isArray(list)) continue;
+    for (const entry of list) {
+      if (!entry || typeof entry !== "object") continue;
+      const value = entry.imsi;
+      if (typeof value === "string" && value.length > 0) return value;
+    }
   }
+  return void 0;
 }
-async function runWithBudget(method, attempt, budget = ocsBudgetFor(method)) {
-  const deadlineAt = Date.now() + budget.totalMs;
-  const budgetController = new AbortController();
-  const budgetTimer = setTimeout(() => budgetController.abort(), budget.totalMs);
-  let attempts = 0;
-  let lastTimeout;
-  try {
-    for (let i = 0; i < budget.maxAttempts; i++) {
-      const remaining = deadlineAt - Date.now();
-      if (remaining < MIN_ATTEMPT_BUDGET_MS) break;
-      const attemptMs = Math.min(budget.attemptMs, remaining);
-      attempts++;
-      const attemptController = new AbortController();
-      const onBudgetAbort = () => attemptController.abort();
-      budgetController.signal.addEventListener("abort", onBudgetAbort, { once: true });
-      const attemptTimer = setTimeout(() => attemptController.abort(), attemptMs);
-      const breach = new OcsTimeoutError(method, attemptMs, budget.totalMs, attempts);
-      try {
-        return await withDeadline(
-          attempt(attemptController.signal, attemptMs),
-          breach,
-          attemptMs
-        );
-      } catch (err) {
-        if (!(err instanceof OcsTimeoutError)) throw err;
-        lastTimeout = new OcsTimeoutError(method, attemptMs, budget.totalMs, attempts);
-      } finally {
-        clearTimeout(attemptTimer);
-        budgetController.signal.removeEventListener("abort", onBudgetAbort);
-        attemptController.abort();
-      }
-      if (i === budget.maxAttempts - 1) break;
-      const backoff = Math.random() * BACKOFF_BASE_MS * 2 ** i;
-      if (Date.now() + backoff + MIN_ATTEMPT_BUDGET_MS > deadlineAt) break;
-      await sleep2(backoff, budgetController.signal);
+var OCS_PREPAID_PACKAGE_LIMIT_FIELDS = [
+  "dataByte",
+  "mocSecond",
+  "mtcSecond",
+  "moSms",
+  "mtSms"
+];
+var LIMIT_ALIASES = {
+  dataByte: "dataByte",
+  dataBytes: "dataByte",
+  dataLimit: "dataByte",
+  databyte: "dataByte",
+  mocSecond: "mocSecond",
+  mocSeconds: "mocSecond",
+  voiceOutLimit: "mocSecond",
+  mtcSecond: "mtcSecond",
+  mtcSeconds: "mtcSecond",
+  voiceInLimit: "mtcSecond",
+  moSms: "moSms",
+  moSmsNumber: "moSms",
+  smsOutLimit: "moSms",
+  mtSms: "mtSms",
+  mtSmsNumber: "mtSms",
+  smsInLimit: "mtSms"
+};
+function prepaidPackageLimits(limits) {
+  const out = {};
+  const unknown = [];
+  for (const [key, value] of Object.entries(limits)) {
+    const target = LIMIT_ALIASES[key];
+    if (!target) {
+      unknown.push(key);
+      continue;
     }
-  } finally {
-    clearTimeout(budgetTimer);
+    out[target] = value;
   }
-  throw lastTimeout ?? new OcsTimeoutError(method, budget.attemptMs, budget.totalMs, Math.max(attempts, 1));
+  if (unknown.length > 0) {
+    throw new Error(
+      `Unknown package limit field(s): ${unknown.join(", ")}. OCS accepts only ${OCS_PREPAID_PACKAGE_LIMIT_FIELDS.join(", ")} inside newLimits (aliases: ${Object.keys(LIMIT_ALIASES).join(", ")}).`
+    );
+  }
+  if (Object.keys(out).length === 0) {
+    throw new Error(
+      `No package limits to change. Provide at least one of ${OCS_PREPAID_PACKAGE_LIMIT_FIELDS.join(", ")}.`
+    );
+  }
+  return out;
 }
-
-// ../../packages/ocs-client/dist/chunk-KELMML73.js
-var RATE_LIMIT = 10;
-var WINDOW_MS = 1e3;
-var windows = /* @__PURE__ */ new Map();
-function getWindowState(key) {
-  let s = windows.get(key);
-  if (!s) {
-    s = { log: [], gate: Promise.resolve() };
-    windows.set(key, s);
+function ocsLocalDateTime(value, bareDate = "end") {
+  const trimmed = value.trim();
+  if (/^\d{4}-\d{2}-\d{2}$/.test(trimmed)) {
+    return bareDate === "start" ? `${trimmed}T00:00:00` : `${trimmed}T23:59:59`;
   }
-  return s;
+  if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}$/.test(trimmed)) return `${trimmed}:00`;
+  if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}/.test(trimmed)) {
+    return trimmed.replace(/(?:Z|[+-]\d{2}:?\d{2})$/, "").slice(0, 19);
+  }
+  throw new Error(
+    `"${value}" is not a date OCS can read. Use YYYY-MM-DD or YYYY-MM-DDTHH:mm:ss \u2014 this field is a java.time.LocalDateTime and a zone offset is rejected.`
+  );
 }
-async function acquireToken(resellerId) {
-  const proc = globalThis["process"];
-  if (proc?.env?.["RATE_FLOOR_DISABLED"] === "true" || globalThis["RATE_FLOOR_DISABLED"] === "true") {
+function activePeriodFromPackages(listResponse, packageId) {
+  const root = listResponse ?? {};
+  const payload = root.listSubscriberPrepaidPackages ?? root.data ?? root;
+  const packages = Array.isArray(payload?.packages) ? payload.packages : [];
+  for (const entry of packages) {
+    if (!entry || typeof entry !== "object") continue;
+    const rec = entry;
+    const id = rec.subscriberprepaidpackageid ?? rec.subscriberPrepaidPackageId;
+    if (Number(id) !== packageId) continue;
+    const activation = rec.tsactivationutc ?? rec.tsActivationUtc;
+    const expiration = rec.tsexpirationutc ?? rec.tsExpirationUtc;
+    const window = {};
+    if (typeof activation === "string" && activation) window.activation = activation;
+    if (typeof expiration === "string" && expiration) window.expiration = expiration;
+    return window;
+  }
+  return void 0;
+}
+var OCS_ACTIVE_PERIOD_DEFAULT_COMMENT = "Active period changed via Carrier";
+function packageActivePeriodParams(packageId, change) {
+  if (change.startDate === void 0 && change.endDate === void 0) {
+    throw new Error("Provide startDate and/or endDate to change a package's active period.");
+  }
+  const activation = change.startDate !== void 0 ? ocsLocalDateTime(change.startDate, "start") : change.current?.activation;
+  const expiration = change.endDate !== void 0 ? ocsLocalDateTime(change.endDate, "end") : change.current?.expiration;
+  for (const [field, value, omitted] of [
+    ["newActivationDateUtc", activation, "startDate"],
+    ["newExpirationDateUtc", expiration, "endDate"]
+  ]) {
+    if (value !== void 0) continue;
+    throw new Error(
+      `OCS requires both bounds on an active-period change and rejects the whole request with "Missing '${field}'" when one is absent. Supply ${omitted}, or read the package's current window first (activePeriodFromPackages) and pass it as \`current\`.`
+    );
+  }
+  return {
+    packageId,
+    // Already LocalDateTime-shaped when it came from `current`; normalising
+    // again is a no-op and keeps a hand-passed value honest.
+    newActivationDateUtc: ocsLocalDateTime(activation, "start"),
+    newExpirationDateUtc: ocsLocalDateTime(expiration, "end"),
+    comment: change.comment?.trim() || OCS_ACTIVE_PERIOD_DEFAULT_COMMENT
+  };
+}
+function recurringIdForPackage(listResponse, packageId) {
+  const root = listResponse ?? {};
+  const payload = root.listSubscriberPrepaidPackages ?? root.data ?? root;
+  const packages = Array.isArray(payload?.packages) ? payload.packages : [];
+  for (const entry of packages) {
+    if (!entry || typeof entry !== "object") continue;
+    const rec = entry;
+    const id = rec.subscriberprepaidpackageid ?? rec.subscriberPrepaidPackageId;
+    if (Number(id) !== packageId) continue;
+    const recurring = rec.recurringPackage ?? rec.recurringId;
+    const value = Number(recurring);
+    return Number.isFinite(value) && value > 0 ? value : void 0;
+  }
+  return void 0;
+}
+function emptyEsimStatusCounts() {
+  return { active: 0, suspended: 0, inventory: 0, other: 0, total: 0 };
+}
+function addEsimStatusRow(acc, rec) {
+  const count = Number(rec.count ?? 0);
+  if (!Number.isFinite(count) || count === 0) return;
+  const str2 = String(rec.statusStr ?? rec.name ?? rec.status ?? "").toUpperCase();
+  if (str2 === "ACTIVATED" || str2 === "ACTIVE" || str2 === "AFFECTED") {
+    acc.active += count;
+    return;
+  }
+  if (str2 === "SUSPENDED") {
+    acc.suspended += count;
+    return;
+  }
+  if (str2 === "FREE" || str2 === "INVENTORY" || str2 === "NOT_ACTIVATED" || str2 === "AVAILABLE") {
+    acc.inventory += count;
+    return;
+  }
+  const num = rec.statusNum;
+  if (typeof num === "number") {
+    if (num === 1) acc.active += count;
+    else if (num === 0) acc.inventory += count;
+    else if (num === 2) acc.suspended += count;
+    else acc.other += count;
     return;
   }
-  const state = getWindowState(resellerId);
-  const ticket = state.gate.then(async () => {
-    while (true) {
-      const now = Date.now();
-      if (state.log.length < RATE_LIMIT) {
-        state.log.push(now);
-        return;
-      }
-      const oldest = state.log[0];
-      const age = now - oldest;
-      if (age >= WINDOW_MS) {
-        state.log.shift();
-        state.log.push(now);
-        return;
+  acc.other += count;
+}
+function extractEsimStatusCounts(json) {
+  const acc = emptyEsimStatusCounts();
+  const root = json ?? {};
+  const payload = root.data ?? root.esimStatusPerAccount ?? root;
+  const accounts = Array.isArray(payload) ? payload : Array.isArray(payload.account) ? payload.account : [];
+  for (const account of accounts) {
+    const rec = account ?? {};
+    const sponsors = Array.isArray(rec.sponsor) ? rec.sponsor : [];
+    if (sponsors.length > 0) {
+      for (const sp of sponsors) {
+        const esim = sp?.esim ?? {};
+        const statuses = Array.isArray(esim.status) ? esim.status : [];
+        for (const row of statuses) addEsimStatusRow(acc, row ?? {});
       }
-      const waitMs = WINDOW_MS - age + 1;
-      await new Promise((r) => setTimeout(r, waitMs));
+      continue;
     }
-  });
-  state.gate = ticket;
-  return ticket;
+    acc.active += Number(rec.active ?? 0);
+    acc.suspended += Number(rec.suspended ?? 0);
+    acc.inventory += Number(rec.inventory ?? rec.notActivated ?? rec.free ?? 0);
+    acc.other += Number(rec.other ?? rec.terminated ?? 0);
+  }
+  acc.total = acc.active + acc.suspended + acc.inventory + acc.other;
+  return acc;
 }
-var ENDPOINT_LIMITS_PER_MIN = {
-  // Global sentinel (keyed as "__global__")
-  __global__: 600,
-  // 30/min — tightest endpoint
-  subscriberNetworkEventsOverPeriod: 30,
-  // 100/min
-  subscriberUsageOverPeriod: 100,
-  // 150/min
-  listLocationZoneElement: 150,
-  sendMtSms: 150,
-  // 300/min (explicit; also the fallback default)
-  modifySubscriberMobilePlan: 300,
-  affectRecurringPackageToSubscriber: 300,
-  affectSubscriberFakePhoneNumber: 300,
-  affectSubscriberRealPhoneNumber: 300,
-  esimStatusPerAccount: 300,
-  getSubscriberActivePeriod: 300,
-  hlrGetBitrate: 300,
-  hlrSetBitrate: 300,
-  listSubscriber: 300,
-  listSubscriberPrepaidPackages: 300,
-  moveSubscriberRangeToAccount: 300,
-  pushSteeringToSubs: 300,
-  setSubscriberTrafficRestrictions: 300,
-  getSingleSubscriber: 300,
-  getSubscriberLocationByCellId: 300
-};
-var DEFAULT_LIMIT_PER_MIN = 300;
-var WINDOW_MS2 = 6e4;
-var METRIC_EMIT_MIN_INTERVAL_MS = 1e4;
-var BATCH_FRACTION = 0.2;
-function resellerKeyHash(resellerKey) {
-  if (!resellerKey) return "00000000";
-  let h = 5381;
-  for (let i = 0; i < resellerKey.length; i++) {
-    h = ((h << 5) + h ^ resellerKey.charCodeAt(i)) >>> 0;
+function esimStatusPerAccountParams(args) {
+  if (typeof args === "number") return { accountId: args };
+  if (args.accountId !== void 0) return { accountId: args.accountId };
+  if (args.resellerId !== void 0) return { resellerId: args.resellerId };
+  throw new Error("esimStatusPerAccountParams needs an accountId or a resellerId");
+}
+var UNLIMITED_DATA_BYTES = 100 * 1024 * 1024 * 1024;
+var BYTES_PER_MB = 1048576;
+var TEMPLATE_DATA_KEYS = ["databyte", "dataBytes", "dataLimit"];
+function readTemplateDataBytes(t) {
+  for (const key of TEMPLATE_DATA_KEYS) {
+    const v = t[key];
+    if (typeof v === "number" && Number.isFinite(v)) return v;
   }
-  return h.toString(16).padStart(8, "0");
+  return void 0;
 }
-function emitMetric(endpoint, resellerKey, callsInWindow, limitPerMin) {
-  const pct2 = Math.round(callsInWindow / limitPerMin * 100);
-  const reseller_hash = resellerKeyHash(resellerKey);
-  console.error(
-    JSON.stringify({
-      metric: "carrier_ocs_calls_per_min",
-      endpoint,
-      reseller_hash,
-      calls_in_window: callsInWindow,
-      limit_per_min: limitPerMin,
-      utilisation_pct: pct2,
-      alert: pct2 >= 80,
-      ts: Date.now()
-    })
-  );
-  if (pct2 >= 80) {
-    console.warn(
-      `[rate-governor] ALERT: ${endpoint} at ${pct2}% capacity (${callsInWindow}/${limitPerMin} per min) reseller=${reseller_hash}`
-    );
+function throttlePercentFromMb(mb, totalBytes = UNLIMITED_DATA_BYTES) {
+  if (!Number.isFinite(mb) || mb <= 0 || totalBytes <= 0) return 100;
+  const pct2 = Math.round(mb * BYTES_PER_MB / totalBytes * 100);
+  return Math.min(100, Math.max(1, pct2));
+}
+var OCS_THROTTLE_KBPS = [
+  128,
+  256,
+  384,
+  512,
+  1024,
+  3072,
+  5120,
+  7680,
+  10240,
+  20480,
+  51200,
+  102400
+];
+var OCS_HLR_BITRATE_LIMITS = [
+  "KB_32",
+  "KB_64",
+  "KB_128",
+  "KB_256",
+  "KB_384",
+  "KB_512",
+  "KB_1024",
+  "KB_2048",
+  "KB_3072",
+  "KB_5120",
+  "KB_7680",
+  "KB_10240",
+  "KB_20480",
+  "KB_51200",
+  "KB_102400",
+  "UNLIMITED"
+];
+var OCS_HLR_BITRATE_SET = new Set(OCS_HLR_BITRATE_LIMITS);
+function ocsHlrBitrate(raw) {
+  const token = hlrBitrateToken(raw);
+  if (token !== void 0 && OCS_HLR_BITRATE_SET.has(token)) return token;
+  return {
+    error: "limit must be an HLR bitrate in Kbps (32, 64, 128, 256, 384, 512, 1024, 2048, 3072, 5120, 7680, 10240, 20480, 51200, 102400) or UNLIMITED"
+  };
+}
+function ocsHlrBitrateFromBps(raw) {
+  if (raw === 0) return "UNLIMITED";
+  if (!Number.isInteger(raw) || raw < 0 || raw % 1e3 !== 0) {
+    return {
+      error: "bitrate must be an HLR speed in bits per second that matches a KB_ level (for example 256000), or 0 for UNLIMITED"
+    };
   }
+  const mapped = ocsHlrBitrate(raw / 1e3);
+  if (typeof mapped === "string") return mapped;
+  return {
+    error: "bitrate must be an HLR speed in bits per second that matches a KB_ level (for example 256000), or 0 for UNLIMITED"
+  };
 }
-var _endpointWindows = /* @__PURE__ */ new Map();
-function _getEndpointState(key) {
-  let s = _endpointWindows.get(key);
-  if (!s) {
-    s = {
-      log: [],
-      batchLog: [],
-      gate: Promise.resolve(),
-      lastMetricEmitAt: 0,
-      metricBelowHighUtil: true
+function hlrBitrateToken(raw) {
+  if (typeof raw === "number" && Number.isInteger(raw) && raw > 0) return `KB_${raw}`;
+  if (typeof raw !== "string") return void 0;
+  const key = raw.trim().toUpperCase().replace(/\s+/g, "_");
+  if (key === "UNLIMITED") return "UNLIMITED";
+  if (key.startsWith("KB_")) return key;
+  if (/^\d+$/.test(key)) return `KB_${key}`;
+  return void 0;
+}
+function ocsSimStatus(raw) {
+  const key = raw.trim().toLowerCase();
+  if (key === "enable" || key === "enabled" || key === "affected") return "Affected";
+  if (key === "disable" || key === "disabled" || key === "free") return "Free";
+  if (key === "deleted") {
+    return {
+      error: "DELETED is not a changeSimStatus value. newStatus must be Enable or Disable"
     };
-    _endpointWindows.set(key, s);
   }
-  return s;
+  return { error: "newStatus must be Enable or Disable" };
 }
-function _prune(log, windowStart) {
-  let i = 0;
-  while (i < log.length && log[i] <= windowStart) i++;
-  return i > 0 ? log.slice(i) : log;
+var OCS_PERIODICITY = { DAILY: 0, WEEKLY: 1, MONTHLY: 2 };
+var OCS_PERIODICITY_VALUES = [0, 1, 2];
+var CEILING_MULTIPLIERS = [20, 25, 50, 100];
+var SECONDS_PER_DAY = 86400;
+function throttledBytesPerPeriod(kbps, periodDays = 1) {
+  if (!Number.isFinite(kbps) || kbps <= 0) return 0;
+  return kbps * 1e3 * SECONDS_PER_DAY * Math.max(1, periodDays) / 8;
 }
-async function acquireEndpointSlot(resellerId, endpoint, priority = "interactive") {
-  const proc = globalThis["process"];
-  if (proc?.env?.["RATE_FLOOR_DISABLED"] === "true" || globalThis["RATE_FLOOR_DISABLED"] === "true") {
-    return;
+function unlimitedCeilingFor(windowMb, throttleKbps, periodDays = 1) {
+  const windowBytes = windowMb * BYTES_PER_MB;
+  const unreachableAbove = windowBytes + throttledBytesPerPeriod(throttleKbps ?? 0, periodDays);
+  for (const multiplier of CEILING_MULTIPLIERS) {
+    const ceilingBytes = windowBytes * multiplier;
+    if (ceilingBytes > unreachableAbove) {
+      return { ceilingBytes, percent: Math.round(100 / multiplier) };
+    }
   }
-  await _acquireOneSlot(resellerId, "__global__", priority);
-  await _acquireOneSlot(resellerId, endpoint, priority);
+  const last = CEILING_MULTIPLIERS[CEILING_MULTIPLIERS.length - 1];
+  return { ceilingBytes: windowBytes * last, percent: Math.round(100 / last) };
 }
-async function _acquireOneSlot(resellerId, endpoint, priority) {
-  const bucketKey = `${resellerId}:${endpoint}`;
-  const limitPerMin = ENDPOINT_LIMITS_PER_MIN[endpoint] ?? DEFAULT_LIMIT_PER_MIN;
-  const batchCap = Math.floor(limitPerMin * BATCH_FRACTION);
-  const state = _getEndpointState(bucketKey);
-  const ticket = state.gate.then(async () => {
-    while (true) {
-      const now = Date.now();
-      const windowStart = now - WINDOW_MS2;
-      state.log = _prune(state.log, windowStart);
-      state.batchLog = _prune(state.batchLog, windowStart);
-      const totalInWindow = state.log.length;
-      const batchInWindow = state.batchLog.length;
-      if (totalInWindow > 0 && endpoint !== "__global__") {
-        const utilPct = Math.round(totalInWindow / limitPerMin * 100);
-        const intervalOk = now - state.lastMetricEmitAt >= METRIC_EMIT_MIN_INTERVAL_MS;
-        const enteredHighUtil = utilPct >= 80 && state.metricBelowHighUtil;
-        if (intervalOk || enteredHighUtil) {
-          emitMetric(endpoint, resellerId, totalInWindow, limitPerMin);
-          state.lastMetricEmitAt = now;
-          if (utilPct >= 80) {
-            state.metricBelowHighUtil = false;
-          }
-        }
-        if (utilPct < 80) {
-          state.metricBelowHighUtil = true;
-        }
-      }
-      const globalFull = totalInWindow >= limitPerMin;
-      const batchFull = priority === "batch" && batchInWindow >= batchCap;
-      if (!globalFull && !batchFull) {
-        state.log.push(now);
-        if (priority === "batch") {
-          state.batchLog.push(now);
-        }
-        return;
-      }
-      let waitMs;
-      if (globalFull) {
-        const oldest = state.log[0];
-        waitMs = WINDOW_MS2 - (now - oldest) + 1;
-      } else {
-        const oldestBatch = state.batchLog[0];
-        waitMs = WINDOW_MS2 - (now - oldestBatch) + 1;
-      }
-      await new Promise((r) => setTimeout(r, waitMs));
+function normalizePackageTemplate(template) {
+  const out = { ...template };
+  const unlimitedFlag = out.unlimited === true;
+  const current = readTemplateDataBytes(out);
+  const isUnlimited = unlimitedFlag || current === void 0 || current === 0;
+  const throttleAfterMb = typeof out.throttleAfterMb === "number" ? out.throttleAfterMb : void 0;
+  const throttleKbps = typeof out.throttleKbps === "number" ? out.throttleKbps : void 0;
+  const periodDays = typeof out.perioddays === "number" ? out.perioddays : 1;
+  if (throttleKbps !== void 0 && !OCS_THROTTLE_KBPS.includes(throttleKbps)) {
+    throw new Error(
+      `throttleKbps ${throttleKbps} is not an OCS bitrate. Allowed: ${OCS_THROTTLE_KBPS.join(", ")}. This field is a SPEED in Kbps, not a data allowance.`
+    );
+  }
+  const periodicity = out.recurringPeriodicityType;
+  if (periodicity !== void 0 && !OCS_PERIODICITY_VALUES.includes(periodicity)) {
+    throw new Error(
+      `recurringPeriodicityType ${periodicity} is out of range. Allowed: 0=Daily, 1=Weekly, 2=Monthly. (The live v2 Mango templates use 3, which is not a valid value.)`
+    );
+  }
+  if (out.recurring === true && (periodicity === OCS_PERIODICITY.DAILY || periodicity === OCS_PERIODICITY.WEEKLY) && out.nbOccurrence === void 0) {
+    throw new Error(
+      "nbOccurrence is required for a daily or weekly recurring template; OCS only treats it as optional for monthly templates."
+    );
+  }
+  if (throttleKbps !== void 0) out.throttlingThreshold1Limit = throttleKbps;
+  delete out.throttleKbps;
+  if (isUnlimited) {
+    let ceiling = UNLIMITED_DATA_BYTES;
+    if (throttleAfterMb !== void 0 && throttleAfterMb > 0) {
+      const sized = unlimitedCeilingFor(throttleAfterMb, throttleKbps, periodDays);
+      ceiling = sized.ceilingBytes;
+      out.throttlingThreshold1Perc = sized.percent;
     }
-  });
-  state.gate = ticket;
-  return ticket;
-}
-function getLimitForEndpoint(endpoint) {
-  return ENDPOINT_LIMITS_PER_MIN[endpoint] ?? DEFAULT_LIMIT_PER_MIN;
+    for (const key of TEMPLATE_DATA_KEYS) {
+      if (key in out) out[key] = ceiling;
+    }
+    if (!TEMPLATE_DATA_KEYS.some((k) => k in out)) out.databyte = ceiling;
+  }
+  delete out.unlimited;
+  if (throttleAfterMb !== void 0) {
+    if (!isUnlimited) {
+      const total = readTemplateDataBytes(out) ?? UNLIMITED_DATA_BYTES;
+      out.throttlingThreshold1Perc = throttlePercentFromMb(throttleAfterMb, total);
+    }
+    out.throttlingActive = out.throttlingActive ?? true;
+  }
+  delete out.throttleAfterMb;
+  return out;
 }
-function getRateLimitWindowCounts(resellerKey, endpoint) {
-  const bucketKey = `${resellerKey}:${endpoint}`;
-  const state = _endpointWindows.get(bucketKey);
-  if (!state) {
-    return { calls_in_window: 0, batch_calls_in_window: 0 };
+function normalizePackageTemplateChanges(changes) {
+  const out = { ...changes };
+  const explicitlyUnlimited = out.unlimited === true;
+  for (const key of TEMPLATE_DATA_KEYS) {
+    if (!(key in out)) continue;
+    if (out[key] === 0 || explicitlyUnlimited) out[key] = UNLIMITED_DATA_BYTES;
   }
-  const windowStart = Date.now() - WINDOW_MS2;
-  let calls_in_window = 0;
-  for (const ts of state.log) {
-    if (ts > windowStart) calls_in_window++;
+  if (explicitlyUnlimited && !TEMPLATE_DATA_KEYS.some((k) => k in out)) {
+    out.databyte = UNLIMITED_DATA_BYTES;
   }
-  let batch_calls_in_window = 0;
-  for (const ts of state.batchLog) {
-    if (ts > windowStart) batch_calls_in_window++;
+  delete out.unlimited;
+  const throttleAfterMb = out.throttleAfterMb;
+  if (typeof throttleAfterMb === "number") {
+    const total = readTemplateDataBytes(out) ?? UNLIMITED_DATA_BYTES;
+    out.throttlingThreshold1Perc = throttlePercentFromMb(throttleAfterMb, total);
   }
-  return { calls_in_window, batch_calls_in_window };
+  delete out.throttleAfterMb;
+  return out;
 }
-var OCS_BARE_INT_RESELLER_METHODS = [
-  "listSponsor",
-  "listSteeringList",
-  "listDetailedDestinationList",
-  "listDetailedLocationZone",
-  "getCustomerTariff"
+var LOCATION_ZONE_KEYS = /* @__PURE__ */ new Set(["locationZoneName", "name", "tadigList", "tadigs", "networkProfileId"]);
+function zoneRecord(input) {
+  if (typeof input !== "string") {
+    if (input === null || typeof input !== "object" || Array.isArray(input)) {
+      return { ok: false, error: "zone must be a JSON object" };
+    }
+    return { ok: true, body: input };
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(input);
+  } catch {
+    return { ok: false, error: "zone must be a JSON object" };
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return { ok: false, error: "zone must be a JSON object" };
+  }
+  return { ok: true, body: parsed };
+}
+function zoneName(raw) {
+  if (raw === void 0 || raw === null || raw === "") return { error: "locationZoneName is required" };
+  if (typeof raw !== "string") return { error: "locationZoneName must be a string" };
+  const name = raw.trim();
+  if (!name) return { error: "locationZoneName is required" };
+  return name;
+}
+function zoneTadigs(raw) {
+  if (raw === void 0 || raw === null || raw === "") return { error: "tadigList is required" };
+  const parts = typeof raw === "string" ? raw.split(/[\s,]+/) : Array.isArray(raw) ? raw : null;
+  if (!parts) return { error: "tadigList must be a list of TADIG codes" };
+  const list = [];
+  for (const part of parts) {
+    if (typeof part !== "string") return { error: "tadigList must be a list of TADIG codes" };
+    const code = part.trim();
+    if (code) list.push(code);
+  }
+  if (list.length === 0) return { error: "tadigList is required" };
+  return list;
+}
+function zoneProfile(raw) {
+  if (typeof raw === "number" && Number.isInteger(raw) && raw > 0) return raw;
+  if (typeof raw === "string" && /^\d+$/.test(raw.trim())) {
+    const n = Number(raw.trim());
+    return n > 0 ? n : void 0;
+  }
+  return void 0;
+}
+function locationZoneCreateParams(input) {
+  const parsed = zoneRecord(input);
+  if (!parsed.ok) return { error: parsed.error };
+  const body = parsed.body;
+  if ("countries" in body || "operators" in body) {
+    return {
+      error: "createLocationZone has no countries or operators field. Send tadigList (TADIG codes) and networkProfileId."
+    };
+  }
+  for (const key of Object.keys(body)) {
+    if (!LOCATION_ZONE_KEYS.has(key)) {
+      return { error: "createLocationZone accepts locationZoneName, tadigList, and networkProfileId" };
+    }
+  }
+  const name = zoneName("locationZoneName" in body ? body.locationZoneName : body.name);
+  if (typeof name !== "string") return name;
+  const tadigList = zoneTadigs("tadigList" in body ? body.tadigList : body.tadigs);
+  if (!Array.isArray(tadigList)) return tadigList;
+  const networkProfileId = zoneProfile(body.networkProfileId);
+  if (networkProfileId === void 0) {
+    return { error: "networkProfileId must be a positive integer" };
+  }
+  return { locationZoneName: name, tadigList, networkProfileId };
+}
+var PACKAGE_TEMPLATE_CREATE_FIELDS = [
+  "cost",
+  "databyte",
+  "deleted",
+  "destinationzoneid",
+  "esimSponsor",
+  "hotspotBlocked",
+  "locationzoneid",
+  "mocsecond",
+  "mosmsnumber",
+  "mtcsecond",
+  "mtsmsnumber",
+  "nbOccurrence",
+  "pckSubPrePaidPackagesDataSlicesTmpl",
+  "perioddays",
+  "picture",
+  "prepaidpackagetemplateid",
+  "prepaidpackagetemplatename",
+  "priority",
+  "rdbDestinationZones",
+  "rdbLocationZones",
+  "recurring",
+  "recurringPeriodicityFrequency",
+  "recurringPeriodicityType",
+  "reportUnitsPreviousPackage",
+  "reseller",
+  "resellerid",
+  "sponsors",
+  "throttleTillEnd",
+  "throttlingActive",
+  "throttlingErrorAction",
+  "throttlingThreshold1Limit",
+  "throttlingThreshold1Perc",
+  "throttlingThreshold2Limit",
+  "throttlingThreshold2Perc",
+  "throttlingThreshold3Limit",
+  "throttlingThreshold3Perc",
+  "throttlingThreshold4Limit",
+  "throttlingThreshold4Perc",
+  "uiEndAvailibilityPeriod",
+  "uiStartAvailablePeriod",
+  "uiVisible",
+  "userUiName"
 ];
-var OCS_BARE_INT_OTHER_METHODS = {
-  listLocationZoneElement: "locationZoneId",
-  listDestinationListPrefix: "destinationListId",
-  listVoipTariffRule: "voipPlanId",
-  getSimProviderStatus: "simId",
-  deleteSubscriberPackage: "packageId"
-};
-var OCS_PARAM_RENAMES = {
-  getResellerInfo: { resellerId: "id" },
-  modifyPPTCore: {
-    templateId: "prepaidpackagetemplateid",
-    name: "prepaidpackagetemplatename",
-    volume: "databyte",
-    validityDays: "perioddays"
-  },
-  modifyPPTRecurring: { templateId: "prepaidpackagetemplateid" },
-  modifyPPTThrottling: { templateId: "prepaidpackagetemplateid" },
-  // Console NL-create and the MCP tool both advertise `name` / `volume` /
-  // `validityDays`. OCS createPrepaidPackageTemplate rejects unknown keys
-  // (Jackson code 2) — live failure was Unrecognized field "name".
-  createPrepaidPackageTemplate: {
-    name: "prepaidpackagetemplatename",
-    volume: "databyte",
-    validityDays: "perioddays",
-    dataLimit: "databyte"
-  },
-  createLocationZone: { name: "locationZoneName" }
+var PACKAGE_TEMPLATE_CREATE_FIELD_SET = new Set(PACKAGE_TEMPLATE_CREATE_FIELDS);
+var PACKAGE_TEMPLATE_CREATE_ALIASES = {
+  name: "prepaidpackagetemplatename",
+  volume: "databyte",
+  dataLimit: "databyte",
+  dataBytes: "databyte",
+  validityDays: "perioddays",
+  periodDays: "perioddays",
+  locationZoneId: "locationzoneid",
+  destinationZoneId: "destinationzoneid",
+  resellerId: "resellerid"
 };
-function applyParamRenames(method, params) {
-  const renames = OCS_PARAM_RENAMES[method];
-  if (!renames || !params || typeof params !== "object" || Array.isArray(params)) {
-    return params;
+function templateRecord(input) {
+  if (typeof input !== "string") {
+    if (input === null || typeof input !== "object" || Array.isArray(input)) {
+      return { ok: false, error: "template must be a JSON object" };
+    }
+    return { ok: true, body: input };
   }
-  const record = params;
-  let out;
-  for (const [from, to] of Object.entries(renames)) {
-    if (!Object.prototype.hasOwnProperty.call(record, from)) continue;
-    out ??= { ...record };
-    if (!Object.prototype.hasOwnProperty.call(record, to)) out[to] = record[from];
-    delete out[from];
+  let parsed;
+  try {
+    parsed = JSON.parse(input);
+  } catch {
+    return { ok: false, error: "template must be a JSON object" };
   }
-  return out ?? params;
-}
-function isBareIntResellerMethod(method) {
-  return OCS_BARE_INT_RESELLER_METHODS.includes(method);
-}
-function isBareIntMethod(method) {
-  return isBareIntResellerMethod(method) || Object.prototype.hasOwnProperty.call(OCS_BARE_INT_OTHER_METHODS, method);
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return { ok: false, error: "template must be a JSON object" };
+  }
+  return { ok: true, body: parsed };
 }
-function bareIntIdName(method) {
-  if (isBareIntResellerMethod(method)) return "resellerId";
-  return OCS_BARE_INT_OTHER_METHODS[method] ?? "id";
+function templateName(raw) {
+  if (typeof raw !== "string") return { error: "prepaidpackagetemplatename must be a string" };
+  const name = raw.trim();
+  if (!name) return { error: "prepaidpackagetemplatename is required" };
+  return name;
 }
-function assertBareIntParam(method, params) {
-  if (!isBareIntMethod(method)) return;
-  if (typeof params === "number") return;
-  const shape = params === null ? "null" : Array.isArray(params) ? "array" : typeof params === "object" ? "object" : typeof params;
-  throw new TypeError(
-    `OCS method "${method}" takes a BARE INTEGER ${bareIntIdName(method)}, but received ${shape}. Sending an object makes OCS reject the whole request with "Cannot deserialize value of type java.lang.Integer from Object value", which surfaces in the UI as an empty panel. Pass the id itself, e.g. call("${method}", 1170).`
-  );
+function packageTemplateCreateParams(input) {
+  const parsed = templateRecord(input);
+  if (!parsed.ok) return { error: parsed.error };
+  const body = parsed.body;
+  if ("price" in body) return { error: "createPrepaidPackageTemplate has no price field" };
+  if ("description" in body) return { error: "createPrepaidPackageTemplate has no description field" };
+  const out = {};
+  for (const [key, value] of Object.entries(body)) {
+    if (PACKAGE_TEMPLATE_CREATE_FIELD_SET.has(key)) out[key] = value;
+  }
+  for (const [key, value] of Object.entries(body)) {
+    const target = PACKAGE_TEMPLATE_CREATE_ALIASES[key];
+    if (!target) {
+      if (!PACKAGE_TEMPLATE_CREATE_FIELD_SET.has(key)) {
+        return { error: `createPrepaidPackageTemplate does not accept ${key}` };
+      }
+      continue;
+    }
+    if (target in out) continue;
+    if (target === "prepaidpackagetemplatename") {
+      const name = templateName(value);
+      if (typeof name !== "string") return name;
+      out[target] = name;
+      continue;
+    }
+    out[target] = value;
+  }
+  if ("prepaidpackagetemplatename" in out) {
+    const name = templateName(out["prepaidpackagetemplatename"]);
+    if (typeof name !== "string") return name;
+    out["prepaidpackagetemplatename"] = name;
+  }
+  return out;
 }
-var OcsApiError = class extends Error {
-  constructor(code, message, method, details = {}) {
-    super(`[${method}] OCS error ${code}: ${message}`);
-    this.code = code;
-    this.method = method;
-    this.name = "OcsApiError";
-    this.details = details;
+function packageTemplateCreateFromToolJson(template) {
+  let parsed;
+  try {
+    parsed = JSON.parse(template);
+  } catch {
+    return { error: "template must be a JSON object" };
   }
-  code;
-  method;
-  details;
-};
-var OcsUnknownMethodError = class extends Error {
-  constructor(method) {
-    super(
-      `[${method}] is not a known OCS v1 method. It is not in the verified set of ${OCS_V1_METHODS.size} methods (createAccount/createSubscriber do not exist on the OCS). If this is a genuinely new method, add it to OCS_V1_METHODS or construct the client without { strictMethods: true }.`
-    );
-    this.method = method;
-    this.name = "OcsUnknownMethodError";
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return { error: "template must be a JSON object" };
   }
-  method;
+  let normalized;
+  try {
+    normalized = normalizePackageTemplate(parsed);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "template could not be normalized";
+    return { error: message };
+  }
+  return packageTemplateCreateParams(normalized);
+}
+var PACKAGE_TEMPLATE_MODIFY_EXTRA = {
+  modifyPPTCore: ["changeSponsor"],
+  modifyPPTRecurring: [],
+  modifyPPTThrottling: []
 };
-var OcsContractError = class _OcsContractError extends Error {
-  constructor(method, issues, payload) {
-    super(
-      `[${method}] OCS response failed contract validation: ${_OcsContractError.summarize(issues)}`
-    );
-    this.method = method;
-    this.issues = issues;
-    this.payload = payload;
-    this.name = "OcsContractError";
+var PACKAGE_TEMPLATE_MODIFY_IDENTITY = /* @__PURE__ */ new Set(["templateId", "prepaidpackagetemplateid"]);
+var PACKAGE_TEMPLATE_MODIFY_ALIASES = {
+  ...PACKAGE_TEMPLATE_CREATE_ALIASES,
+  periodicity: "recurringPeriodicityType",
+  occurrences: "nbOccurrence",
+  firstThresholdPercent: "throttlingThreshold1Perc",
+  firstThresholdLimitKbps: "throttlingThreshold1Limit",
+  errorAction: "throttlingErrorAction"
+};
+function changesRecord(input) {
+  if (typeof input !== "string") {
+    if (input === null || typeof input !== "object" || Array.isArray(input)) {
+      return { ok: false, error: "changes must be a JSON object" };
+    }
+    return { ok: true, body: input };
   }
-  method;
-  issues;
-  payload;
-  /** One-line, human-readable join of the issues — for logs and the error message. */
-  get summary() {
-    return _OcsContractError.summarize(this.issues);
+  let parsed;
+  try {
+    parsed = JSON.parse(input);
+  } catch {
+    return { ok: false, error: "changes must be a JSON object" };
   }
-  static summarize(issues) {
-    return issues.map((i) => `${i.path}: ${i.message}`).join("; ");
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return { ok: false, error: "changes must be a JSON object" };
   }
-};
-function ocsErrorMessage(code, rawMsg, rawBody) {
-  switch (code) {
-    case 12:
-      return {
-        message: "OCS resource is read-only (code 12). The package/subscriber/account state does not allow this mutation. Often returned for end-of-life subscribers or finalized invoices.",
-        details: {}
-      };
-    case 17:
-      return {
-        message: "Subscriber is end-of-life (code 17). It can no longer be mutated. Use modify_subscriber_status to revive before further changes.",
-        details: {}
-      };
-    default:
-      if (code >= 10001 && code <= 10004) {
-        const details = {};
-        if (rawBody["invalidTadigs"] !== void 0) {
-          details.invalidTadigs = rawBody["invalidTadigs"];
-        }
-        if (rawBody["existingLZ"] !== void 0) {
-          details.existingLZ = rawBody["existingLZ"];
-        }
-        return { message: rawMsg || "Location zone validation failed", details };
-      }
-      return { message: rawMsg || "Unknown error", details: {} };
+  return { ok: true, body: parsed };
+}
+function periodicityValue(raw) {
+  if (typeof raw === "number" && OCS_PERIODICITY_VALUES.includes(raw)) return raw;
+  if (typeof raw === "string") {
+    const key = raw.trim().toLowerCase();
+    if (key === "daily" || key === "0") return OCS_PERIODICITY.DAILY;
+    if (key === "weekly" || key === "1") return OCS_PERIODICITY.WEEKLY;
+    if (key === "monthly" || key === "2") return OCS_PERIODICITY.MONTHLY;
   }
+  return { error: "recurringPeriodicityType must be 0 (daily), 1 (weekly), or 2 (monthly)" };
 }
-var BACKOFF_BASE_MS2 = 500;
-var BACKOFF_MAX_MS = 4e3;
-var BACKOFF_MAX_RETRIES = 3;
-var TRAFFIC_CONTROL_BACKOFF_BASE_MS = 1e3;
-var TRAFFIC_CONTROL_BACKOFF_MAX_MS = 16e3;
-var TRAFFIC_CONTROL_MAX_RETRIES = 6;
-var BACKOFF_JITTER = 0.25;
-async function retryWithBackoff(fn) {
-  let lastError;
-  let maxRetries = BACKOFF_MAX_RETRIES;
-  let backoffBaseMs = BACKOFF_BASE_MS2;
-  let backoffMaxMs = BACKOFF_MAX_MS;
-  for (let attempt = 0; attempt <= maxRetries; attempt++) {
-    if (attempt > 0) {
-      const base = Math.min(backoffBaseMs * Math.pow(2, attempt - 1), backoffMaxMs);
-      const jitter = base * BACKOFF_JITTER * (2 * Math.random() - 1);
-      const delay = Math.max(0, Math.round(base + jitter));
-      await new Promise((r) => setTimeout(r, delay));
-    }
-    try {
-      return await fn();
-    } catch (err) {
-      lastError = err;
-      if (err instanceof OcsApiError) {
-        if (err.code !== 100) throw err;
-        maxRetries = TRAFFIC_CONTROL_MAX_RETRIES;
-        backoffBaseMs = TRAFFIC_CONTROL_BACKOFF_BASE_MS;
-        backoffMaxMs = TRAFFIC_CONTROL_BACKOFF_MAX_MS;
-      }
-      if (err instanceof OcsContractError) {
-        throw err;
-      }
-      if (err instanceof OcsTimeoutError) {
-        throw err;
-      }
-    }
+function throttlingErrorActionValue(raw) {
+  if (typeof raw === "number" && Number.isInteger(raw)) return raw;
+  if (typeof raw === "string" && /^-?\d+$/.test(raw.trim())) return Number(raw.trim());
+  if (typeof raw === "string" && raw.trim().toLowerCase() === "continue_unthrottled") {
+    return {
+      error: "throttlingErrorAction is an integer. continue_unthrottled is not a modifyPPT value"
+    };
+  }
+  return { error: "throttlingErrorAction is an integer" };
+}
+function applyTemplateField(out, target, value) {
+  if (target === "prepaidpackagetemplatename") {
+    const name = templateName(value);
+    if (typeof name !== "string") return name;
+    out[target] = name;
+    return void 0;
   }
-  throw lastError;
+  if (target === "recurringPeriodicityType") {
+    const period = periodicityValue(value);
+    if (typeof period !== "number") return period;
+    out[target] = period;
+    return void 0;
+  }
+  if (target === "throttlingErrorAction") {
+    const action = throttlingErrorActionValue(value);
+    if (typeof action !== "number") return action;
+    out[target] = action;
+    return void 0;
+  }
+  out[target] = value;
+  return void 0;
 }
-function isAbortError(err) {
-  return err instanceof Error && (err.name === "AbortError" || err.name === "TimeoutError" || /aborted|timed? ?out/i.test(err.message));
+function packageTemplateModifyParams(input, method) {
+  const parsed = changesRecord(input);
+  if (!parsed.ok) return { error: parsed.error };
+  const body = parsed.body;
+  if ("price" in body) return { error: `${method} has no price field` };
+  if ("description" in body) return { error: `${method} has no description field` };
+  const accepted = /* @__PURE__ */ new Set([
+    ...PACKAGE_TEMPLATE_CREATE_FIELDS,
+    ...PACKAGE_TEMPLATE_MODIFY_EXTRA[method]
+  ]);
+  const out = {};
+  for (const [key, value] of Object.entries(body)) {
+    if (PACKAGE_TEMPLATE_MODIFY_IDENTITY.has(key) || !accepted.has(key)) continue;
+    const applied = applyTemplateField(out, key, value);
+    if (applied) return applied;
+  }
+  for (const [key, value] of Object.entries(body)) {
+    if (PACKAGE_TEMPLATE_MODIFY_IDENTITY.has(key)) continue;
+    const target = PACKAGE_TEMPLATE_MODIFY_ALIASES[key];
+    if (!target) {
+      if (!accepted.has(key)) return { error: `${method} does not accept ${key}` };
+      continue;
+    }
+    if (target in out) continue;
+    const applied = applyTemplateField(out, target, value);
+    if (applied) return applied;
+  }
+  if (Object.keys(out).length === 0) {
+    return { error: "at least one template field required" };
+  }
+  return out;
 }
-var OcsClient = class {
-  /**
-   * @param baseUrl        OCS base URL without trailing slash (e.g. https://ocs.esimvault.cloud).
-   * @param _defaultToken  Default API token; identifies the reseller for rate-floor keying.
-   * @param _priority      Call priority: "interactive" (MCP tool calls, 80% capacity) or
-   *                       "batch" (cron/poll callers, 20% capacity). Default: "interactive".
-   * @param options        Contract-enforcement opt-outs (see `OcsClientOptions`).
-   */
-  constructor(baseUrl, _defaultToken, _priority = "interactive", options = {}) {
-    this._defaultToken = _defaultToken;
-    this._priority = _priority;
-    let end = baseUrl.length;
-    while (end > 0 && baseUrl.charCodeAt(end - 1) === 47) end--;
-    this.baseUrl = baseUrl.slice(0, end);
-    this._strictMethods = options.strictMethods ?? false;
-    this._validateResponses = options.validateResponses ?? true;
-    this._strictValidation = options.strictValidation ?? false;
+function packageTemplateModifyFromToolJson(changes, method) {
+  let parsed;
+  try {
+    parsed = JSON.parse(changes);
+  } catch {
+    return { error: "changes must be a JSON object" };
   }
-  _defaultToken;
-  _priority;
-  baseUrl;
-  _strictMethods;
-  _validateResponses;
-  _strictValidation;
-  // Per-instance (NOT static): a static set would dedup across requests in a
-  // reused Worker isolate and silently swallow recurring contract-drift warnings.
-  _warnedMethods = /* @__PURE__ */ new Set();
-  _warnedValidation = /* @__PURE__ */ new Set();
-  async call(method, params = {}, token) {
-    if (!OCS_V1_METHODS.has(method)) {
-      if (this._strictMethods) throw new OcsUnknownMethodError(method);
-      if (!this._warnedMethods.has(method)) {
-        this._warnedMethods.add(method);
-        console.warn(
-          `[ocs-client] method "${method}" is not in the verified OCS v1 set \u2014 it may not exist on this OCS instance (see OCS_V1_METHODS).`
-        );
-      }
-    }
-    const tok = token ?? this._defaultToken;
-    if (!tok) {
-      throw new OcsApiError(-1, "No OCS API token provided", method);
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return { error: "changes must be a JSON object" };
+  }
+  let body = parsed;
+  if (method === "modifyPPTCore") {
+    try {
+      body = normalizePackageTemplateChanges(body);
+    } catch (err) {
+      const message = err instanceof Error ? err.message : "changes could not be normalized";
+      return { error: message };
     }
-    const url = `${this.baseUrl}/v1?token=${tok}`;
-    assertBareIntParam(method, params);
-    const wireParams = applyParamRenames(method, params);
-    const body = JSON.stringify({ [method]: wireParams });
-    return retryWithBackoff(async () => {
-      await acquireToken(tok);
-      await acquireEndpointSlot(tok, method, this._priority);
-      return runWithBudget(method, async (signal, attemptMs) => {
-        let res;
-        try {
-          res = await fetch(url, {
-            method: "POST",
-            headers: { "Content-Type": "application/json" },
-            body,
-            signal
-          });
-        } catch (err) {
-          if (isAbortError(err)) {
-            throw new OcsTimeoutError(method, attemptMs);
-          }
-          throw err;
-        }
-        if (res.status >= 500) {
-          throw new Error(`HTTP ${res.status} ${res.statusText}`);
-        }
-        if (!res.ok) {
-          throw new OcsApiError(
-            res.status,
-            `HTTP ${res.status} ${res.statusText}`,
-            method
-          );
-        }
-        let json;
-        try {
-          json = await res.json();
-        } catch (err) {
-          if (isAbortError(err)) {
-            throw new OcsTimeoutError(method, attemptMs);
-          }
-          throw err;
-        }
-        if (json.status?.code !== 0) {
-          const ocsCode = json.status?.code ?? -1;
-          const rawMsg = json.status?.msg ?? "Unknown error";
-          const rawBody = json;
-          const { message, details } = ocsErrorMessage(ocsCode, rawMsg, rawBody);
-          throw new OcsApiError(ocsCode, message, method, details);
-        }
-        let payload;
-        if (method === "getCustomerTariff" && json["listTariffRule"] !== void 0) {
-          payload = json["listTariffRule"];
-        } else if (method === "getSubscriberLocationByCellId") {
-          const byMethod = json[method];
-          if (byMethod !== void 0) {
-            payload = byMethod;
-          } else if (json["subscriberLocation"] !== void 0) {
-            payload = json["subscriberLocation"];
-          } else {
-            payload = json[method] ?? json;
-          }
-        } else if (json[method] !== void 0) {
-          payload = json[method];
-        } else if (Object.keys(json).some((k) => k !== "status")) {
-          payload = json;
-        } else {
-          payload = null;
-        }
-        if (this._validateResponses) {
-          const schema = RESPONSE_SCHEMAS[method];
-          if (schema) {
-            const parsed = schema.safeParse(payload);
-            if (!parsed.success) {
-              const issues = parsed.error.issues.map((i) => ({
-                path: i.path.join(".") || "<root>",
-                message: i.message
-              }));
-              if (this._strictValidation) {
-                throw new OcsContractError(method, issues, payload);
-              }
-              if (!this._warnedValidation.has(method)) {
-                this._warnedValidation.add(method);
-                console.warn(`[ocs-client] ${new OcsContractError(method, issues, payload).message}`);
-              }
-            }
-          }
-        }
-        return payload;
-      });
-    });
   }
+  return packageTemplateModifyParams(body, method);
+}
+
+// ../../packages/ocs-client/dist/chunk-SFPWPYGO.js
+import { z } from "zod";
+var OCS_V1_METHODS = /* @__PURE__ */ new Set([
+  "getResellerInfo",
+  "listResellerAccount",
+  "listPrepaidPackageTemplate",
+  "listSubscriberPrepaidPackages",
+  "listSubscriber",
+  "getSingleSubscriber",
+  "getSimProviderStatus",
+  "getSubscriberLocation",
+  "getSubscriberLocationByCellId",
+  "esimStatusPerAccount",
+  "subscriberUsageOverPeriod",
+  "affectRecurringPackageToSubscriber",
+  "deleteSubscriberPackage",
+  "modifyAccountBalance",
+  "modifySubscriberBalance",
+  "modifySubscriberContactInfo",
+  "modifySubscriberMobilePlan",
+  "modifySubscriberSteeringList",
+  "modifySubscriberVoipPlan",
+  "modifySubscriberPrepaidPackageActivePeriod",
+  "modifySubscriberPrepaidPackageLimits",
+  "modifySubscriberPrepaidPackageStatus",
+  "modifyPPTCore",
+  "modifyPPTRecurring",
+  "createPrepaidPackageTemplate",
+  "createLocationZone",
+  "changeNetworkProfileOfLocationZone",
+  "hlrGetBitrate",
+  "hlrSetBitrate",
+  "listSponsor",
+  "listDestinationListPrefix",
+  "listDetailedLocationZone",
+  "listLocationZoneElement",
+  "listSubscriberVoipTariff",
+  "listVoipTariffRule",
+  "affectSubscriberFakePhoneNumber",
+  "affectSubscriberRealPhoneNumber",
+  "getCustomerTariff",
+  "resetSubsGzCounter",
+  "sendMtSms"
+]);
+var OcsResponseEnvelope = z.object({
+  status: z.object({
+    code: z.number(),
+    // Required to match the `OcsStatus` interface in client.ts ({ code, msg }).
+    msg: z.string()
+  }).passthrough()
+}).passthrough();
+var GetResellerInfoResponse = z.object({
+  id: z.number(),
+  name: z.string(),
+  parentId: z.number(),
+  parentName: z.string(),
+  // Production eSIMVault returns decimal money as a JSON string ("495.52").
+  // Staging fixtures used a number, so accept both exact provider variants.
+  balance: z.union([z.number(), z.string().regex(/^-?\d+(?:\.\d+)?$/)]),
+  cdrFolder: z.string().optional(),
+  trafficInfo: z.object({}).passthrough().optional(),
+  chargingInfo: z.object({}).passthrough().optional(),
+  contactInfo: z.object({}).passthrough().optional()
+}).passthrough();
+var ListResellerAccountResponse = z.object({
+  reseller: z.array(
+    z.object({
+      id: z.number(),
+      name: z.string(),
+      account: z.array(z.object({}).passthrough())
+    }).passthrough()
+  )
+}).passthrough();
+var ListPrepaidPackageTemplateResponse = z.object({
+  template: z.array(
+    z.object({
+      prepaidpackagetemplateid: z.number(),
+      prepaidpackagetemplatename: z.string(),
+      resellerid: z.number(),
+      locationzoneid: z.number()
+    }).passthrough()
+  )
+}).passthrough();
+var SubscriberStatusName = z.string().regex(/^[A-Za-z]/, "subscriber status must be a non-empty alpha-leading name");
+var GetSingleSubscriberResponse = z.object({
+  status: z.array(
+    z.object({
+      status: SubscriberStatusName
+    }).passthrough()
+  ).min(1, "getSingleSubscriber.status must be a non-empty array")
+}).passthrough();
+var RESPONSE_SCHEMAS = {
+  getResellerInfo: GetResellerInfoResponse,
+  listResellerAccount: ListResellerAccountResponse,
+  listPrepaidPackageTemplate: ListPrepaidPackageTemplateResponse,
+  getSingleSubscriber: GetSingleSubscriberResponse
 };
+var IccidParam = z.object({ iccid: z.string().min(1) });
+var AccountIdParam = z.object({ accountId: z.coerce.number().int().positive() });
+var PackageIdParam = z.object({ packageId: z.coerce.number().int().positive() });
+var TemplateIdParam = z.object({ templateId: z.coerce.number().int().positive() });
+var ResellerIdParam = z.object({ resellerId: z.coerce.number().int().positive() });
+var DateRangeBody = z.object({
+  start: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "must be YYYY-MM-DD"),
+  end: z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "must be YYYY-MM-DD")
+});
+var ErrorResponse = z.object({
+  error: z.string(),
+  code: z.number().optional(),
+  retryAfter: z.number().optional()
+});
+var OkResponse = z.object({
+  ok: z.boolean(),
+  data: z.unknown().optional()
+});
+var ModifySubscriberStatusBody = z.object({
+  newStatus: z.enum(["active", "suspended", "deactivated"])
+});
+var ModifySubscriberBalanceBody = z.object({
+  amount: z.number().optional(),
+  setBalance: z.number().optional()
+}).refine((v) => v.amount !== void 0 || v.setBalance !== void 0, {
+  message: "Provide either amount (delta) or setBalance (absolute)"
+});
+var ModifySubscriberContactInfoBody = z.object({
+  name: z.string().optional(),
+  mail: z.string().email().optional(),
+  phone: z.string().optional()
+});
+var SetTrafficRestrictionsBody = z.object({
+  blockData: z.boolean().optional(),
+  blockVoice: z.boolean().optional(),
+  blockSms: z.boolean().optional(),
+  blockRoaming: z.boolean().optional()
+});
+var ModifySteeringListBody = z.object({
+  steeringListId: z.number().int().positive()
+});
+var HlrSetBitrateBody = z.object({
+  limit: z.enum(OCS_HLR_BITRATE_LIMITS)
+});
+var AssignPackageBody = z.object({
+  packageTemplateId: z.number().int().positive(),
+  startDate: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
+});
+var AssignRecurringPackageBody = z.object({
+  packageTemplateId: z.number().int().positive()
+});
+var ModifyPackageLimitsBody = z.object({
+  dataLimitMb: z.number().positive().optional(),
+  voiceLimitMin: z.number().nonnegative().optional(),
+  smsLimit: z.number().nonnegative().optional()
+});
+var ModifyPackageExpiryBody = z.object({
+  expiryDate: z.string().regex(/^\d{4}-\d{2}-\d{2}$/)
+});
+var ModifyPackageStatusBody = z.object({
+  status: z.enum(["active", "paused"])
+});
+var StopResumeRecurringBody = z.object({
+  action: z.enum(["stop", "resume"])
+});
+var CreatePackageTemplateBody = z.object({
+  name: z.string().min(1),
+  dataLimitMb: z.number().positive(),
+  validityDays: z.number().int().positive(),
+  price: z.number().nonnegative().optional(),
+  recurring: z.boolean().optional()
+});
+var ModifyTemplateCoreBody = z.object({
+  name: z.string().optional(),
+  dataLimitMb: z.number().positive().optional(),
+  validityDays: z.number().int().positive().optional()
+});
+var ModifyTemplateRecurringBody = z.object({
+  billingCycleDays: z.number().int().positive().optional(),
+  autoRenew: z.boolean().optional()
+});
+var ModifyTemplateThrottlingBody = z.object({
+  throttleSpeedKbps: z.number().int().nonnegative()
+});
+var ModifyAccountBalanceBody = z.object({
+  amount: z.number(),
+  // adapt and add are a signed delta. set replaces the balance. subtract
+  // negates a positive amount. The API drops mode before the OCS call.
+  mode: z.enum(["adapt", "set", "add", "subtract"]).default("adapt")
+});
+var MoveSubscribersBody = z.object({
+  fromAccountId: z.number().int().positive(),
+  iccidStart: z.string().min(1),
+  iccidEnd: z.string().min(1)
+});
+var CreateLocationZoneBody = z.object({
+  name: z.string().min(1),
+  countries: z.array(z.string().length(2)).min(1)
+});
+var SendSmsBody = z.object({
+  text: z.string().min(1).max(160),
+  senderId: z.string().optional()
+});
+var ChangeSimStatusBody = z.object({
+  newStatus: z.enum(["Enable", "Disable"])
+});
+var DiagnoseSubscriberBody = z.object({
+  iccid: z.string().min(1)
+});
+var FleetHealthQuery = z.object({
+  accountId: z.coerce.number().int().positive().optional()
+});
+var ChurnRiskQuery = z.object({
+  daysSinceUsage: z.coerce.number().int().positive().default(14),
+  limit: z.coerce.number().int().positive().max(500).default(50)
+});
+var DetectUsageAnomaliesBody = z.object({
+  start: z.string().regex(/^\d{4}-\d{2}-\d{2}$/),
+  end: z.string().regex(/^\d{4}-\d{2}-\d{2}$/),
+  thresholdMultiplier: z.number().positive().default(2.5)
+});
+var OptimizePackageBody = z.object({
+  iccid: z.string().min(1)
+});
+var AuditNetworkCoverageBody = z.object({
+  locationZoneId: z.number().int().positive().optional()
+});
+var MarketingIntelligenceQuery = z.object({
+  segment: z.enum(["low_usage", "high_usage", "expiring_soon", "churned"]).optional()
+});
+var HighCostSubscribersQuery = z.object({
+  limit: z.coerce.number().int().positive().max(200).default(20),
+  start: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional(),
+  end: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).optional()
+});
+var WebhookEventBody = z.record(z.string(), z.unknown());
+var HealthResponse = z.object({
+  ok: z.literal(true),
+  version: z.string(),
+  build_sha: z.string()
+});
 
-// ../../packages/ocs-client/dist/chunk-AL4HRKV6.js
-var OCS_MAX_USAGE_WINDOW_DAYS = 7;
-function clampUsagePeriod(start, end, maxDays = OCS_MAX_USAGE_WINDOW_DAYS) {
-  const endMs = Date.parse(`${end}T00:00:00Z`);
-  const startMs = Date.parse(`${start}T00:00:00Z`);
-  if (Number.isNaN(endMs) || Number.isNaN(startMs) || startMs > endMs) {
-    return { start, end };
-  }
-  const minStartMs = endMs - (maxDays - 1) * 864e5;
-  if (startMs < minStartMs) {
-    return { start: new Date(minStartMs).toISOString().slice(0, 10), end };
+// ../../packages/ocs-client/dist/chunk-CGMK4FTD.js
+var DEFAULT_OCS_BUDGET = {
+  attemptMs: 3e4,
+  maxAttempts: 3,
+  totalMs: 75e3
+};
+var OCS_METHOD_BUDGETS = {
+  // 3.4 MB, 88-128 s measured. 180 s is 1.4x the slowest observation. One
+  // attempt: payload size does not vary, so a retry only doubles the wait.
+  getCustomerTariff: { attemptMs: 18e4, maxAttempts: 1, totalMs: 18e4 }
+};
+var MIN_ATTEMPT_BUDGET_MS = 1e3;
+var BACKOFF_BASE_MS = 500;
+var OcsTimeoutError = class extends Error {
+  constructor(method, timeoutMs, budgetMs = timeoutMs, attempts = 1) {
+    super(
+      `[${method}] OCS request timed out after ${timeoutMs}ms` + (attempts > 1 ? ` on each of ${attempts} attempts` : "") + (budgetMs > timeoutMs ? ` (budget ${budgetMs}ms)` : "") + `. The upstream did not deliver a complete response in time \u2014 usually an oversized payload or a wedged upstream. Narrow the request, or raise OCS_TIMEOUT_MS / OCS_TOTAL_TIMEOUT_MS if this method is legitimately slower here.`
+    );
+    this.method = method;
+    this.timeoutMs = timeoutMs;
+    this.budgetMs = budgetMs;
+    this.attempts = attempts;
+    this.name = "OcsTimeoutError";
   }
-  return { start, end };
-}
-function lastNDaysPeriod(days = OCS_MAX_USAGE_WINDOW_DAYS, now = /* @__PURE__ */ new Date()) {
-  const end = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
-  const start = new Date(end);
-  start.setUTCDate(end.getUTCDate() - (days - 1));
-  return {
-    start: start.toISOString().slice(0, 10),
-    end: end.toISOString().slice(0, 10)
-  };
+  method;
+  timeoutMs;
+  budgetMs;
+  attempts;
+};
+function envInt(name) {
+  const proc = globalThis["process"];
+  const parsed = Number(proc?.env?.[name]);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : void 0;
 }
-function locationParams(iccid) {
-  return { iccid };
+function ocsBudgetFor(method) {
+  const base = OCS_METHOD_BUDGETS[method] ?? DEFAULT_OCS_BUDGET;
+  const attemptMs = envInt("OCS_TIMEOUT_MS") ?? base.attemptMs;
+  const totalMs = Math.max(envInt("OCS_TOTAL_TIMEOUT_MS") ?? base.totalMs, attemptMs);
+  return { attemptMs, maxAttempts: base.maxAttempts, totalMs };
 }
-function subscriberIdParams(iccid) {
-  return { iccid };
+function sleep2(ms, signal) {
+  return new Promise((resolve) => {
+    const timer = setTimeout(finish, ms);
+    function finish() {
+      clearTimeout(timer);
+      signal.removeEventListener("abort", finish);
+      resolve();
+    }
+    signal.addEventListener("abort", finish, { once: true });
+  });
 }
-function recurringPackageParams(iccid, packageTemplateId, options = {}) {
-  if (options.activationAtFirstUse !== void 0 && options.startTimeUTC !== void 0) {
-    throw new Error("activationAtFirstUse cannot be combined with startTimeUTC");
+async function withDeadline(work, deadline, ms) {
+  let timer;
+  try {
+    return await Promise.race([
+      work,
+      new Promise((_resolve, reject) => {
+        timer = setTimeout(() => reject(deadline), ms);
+      })
+    ]);
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
   }
-  return {
-    subscriber: { iccid },
-    packageTemplateId,
-    ...options.startTimeUTC !== void 0 ? { startTimeUTC: options.startTimeUTC } : { activationAtFirstUse: options.activationAtFirstUse ?? true }
-  };
 }
-function networkEventsOverPeriodParams(iccid, start, end) {
-  return usageOverPeriodParams(iccid, start, end);
+async function runWithBudget(method, attempt, budget = ocsBudgetFor(method)) {
+  const deadlineAt = Date.now() + budget.totalMs;
+  const budgetController = new AbortController();
+  const budgetTimer = setTimeout(() => budgetController.abort(), budget.totalMs);
+  let attempts = 0;
+  let lastTimeout;
+  try {
+    for (let i = 0; i < budget.maxAttempts; i++) {
+      const remaining = deadlineAt - Date.now();
+      if (remaining < MIN_ATTEMPT_BUDGET_MS) break;
+      const attemptMs = Math.min(budget.attemptMs, remaining);
+      attempts++;
+      const attemptController = new AbortController();
+      const onBudgetAbort = () => attemptController.abort();
+      budgetController.signal.addEventListener("abort", onBudgetAbort, { once: true });
+      const attemptTimer = setTimeout(() => attemptController.abort(), attemptMs);
+      const breach = new OcsTimeoutError(method, attemptMs, budget.totalMs, attempts);
+      try {
+        return await withDeadline(
+          attempt(attemptController.signal, attemptMs),
+          breach,
+          attemptMs
+        );
+      } catch (err) {
+        if (!(err instanceof OcsTimeoutError)) throw err;
+        lastTimeout = new OcsTimeoutError(method, attemptMs, budget.totalMs, attempts);
+      } finally {
+        clearTimeout(attemptTimer);
+        budgetController.signal.removeEventListener("abort", onBudgetAbort);
+        attemptController.abort();
+      }
+      if (i === budget.maxAttempts - 1) break;
+      const backoff = Math.random() * BACKOFF_BASE_MS * 2 ** i;
+      if (Date.now() + backoff + MIN_ATTEMPT_BUDGET_MS > deadlineAt) break;
+      await sleep2(backoff, budgetController.signal);
+    }
+  } finally {
+    clearTimeout(budgetTimer);
+  }
+  throw lastTimeout ?? new OcsTimeoutError(method, budget.attemptMs, budget.totalMs, Math.max(attempts, 1));
 }
-function usageOverPeriodParams(iccid, start, end) {
-  const period = clampUsagePeriod(start, end);
-  return { subscriber: { iccid }, period };
+
+// ../../packages/ocs-client/dist/chunk-WYFBYNKX.js
+var RATE_LIMIT = 10;
+var WINDOW_MS = 1e3;
+var windows = /* @__PURE__ */ new Map();
+function getWindowState(key) {
+  let s = windows.get(key);
+  if (!s) {
+    s = { log: [], gate: Promise.resolve() };
+    windows.set(key, s);
+  }
+  return s;
 }
-function imsiFromSubscriberRecord(record) {
-  if (!record || typeof record !== "object") return void 0;
-  const rec = record;
-  const inner = rec.getSingleSubscriber && typeof rec.getSingleSubscriber === "object" ? rec.getSingleSubscriber : rec;
-  const direct = inner.imsi;
-  if (typeof direct === "string" && direct.length > 0) return direct;
-  for (const key of ["imsiList", "multiImsi"]) {
-    const list = inner[key];
-    if (!Array.isArray(list)) continue;
-    for (const entry of list) {
-      if (!entry || typeof entry !== "object") continue;
-      const value = entry.imsi;
-      if (typeof value === "string" && value.length > 0) return value;
-    }
+async function acquireToken(resellerId) {
+  const proc = globalThis["process"];
+  if (proc?.env?.["RATE_FLOOR_DISABLED"] === "true" || globalThis["RATE_FLOOR_DISABLED"] === "true") {
+    return;
   }
-  return void 0;
+  const state = getWindowState(resellerId);
+  const ticket = state.gate.then(async () => {
+    while (true) {
+      const now = Date.now();
+      if (state.log.length < RATE_LIMIT) {
+        state.log.push(now);
+        return;
+      }
+      const oldest = state.log[0];
+      const age = now - oldest;
+      if (age >= WINDOW_MS) {
+        state.log.shift();
+        state.log.push(now);
+        return;
+      }
+      const waitMs = WINDOW_MS - age + 1;
+      await new Promise((r) => setTimeout(r, waitMs));
+    }
+  });
+  state.gate = ticket;
+  return ticket;
 }
-var OCS_PREPAID_PACKAGE_LIMIT_FIELDS = [
-  "dataByte",
-  "mocSecond",
-  "mtcSecond",
-  "moSms",
-  "mtSms"
-];
-var LIMIT_ALIASES = {
-  dataByte: "dataByte",
-  dataBytes: "dataByte",
-  dataLimit: "dataByte",
-  databyte: "dataByte",
-  mocSecond: "mocSecond",
-  mocSeconds: "mocSecond",
-  voiceOutLimit: "mocSecond",
-  mtcSecond: "mtcSecond",
-  mtcSeconds: "mtcSecond",
-  voiceInLimit: "mtcSecond",
-  moSms: "moSms",
-  moSmsNumber: "moSms",
-  smsOutLimit: "moSms",
-  mtSms: "mtSms",
-  mtSmsNumber: "mtSms",
-  smsInLimit: "mtSms"
+var ENDPOINT_LIMITS_PER_MIN = {
+  // Global sentinel (keyed as "__global__")
+  __global__: 600,
+  // 30/min — tightest endpoint
+  subscriberNetworkEventsOverPeriod: 30,
+  // 100/min
+  subscriberUsageOverPeriod: 100,
+  // 150/min
+  listLocationZoneElement: 150,
+  sendMtSms: 150,
+  // 300/min (explicit; also the fallback default)
+  modifySubscriberMobilePlan: 300,
+  affectRecurringPackageToSubscriber: 300,
+  affectSubscriberFakePhoneNumber: 300,
+  affectSubscriberRealPhoneNumber: 300,
+  esimStatusPerAccount: 300,
+  getSubscriberActivePeriod: 300,
+  hlrGetBitrate: 300,
+  hlrSetBitrate: 300,
+  listSubscriber: 300,
+  listSubscriberPrepaidPackages: 300,
+  moveSubscriberRangeToAccount: 300,
+  pushSteeringToSubs: 300,
+  setSubscriberTrafficRestrictions: 300,
+  getSingleSubscriber: 300,
+  getSubscriberLocationByCellId: 300
 };
-function prepaidPackageLimits(limits) {
-  const out = {};
-  const unknown = [];
-  for (const [key, value] of Object.entries(limits)) {
-    const target = LIMIT_ALIASES[key];
-    if (!target) {
-      unknown.push(key);
-      continue;
-    }
-    out[target] = value;
-  }
-  if (unknown.length > 0) {
-    throw new Error(
-      `Unknown package limit field(s): ${unknown.join(", ")}. OCS accepts only ${OCS_PREPAID_PACKAGE_LIMIT_FIELDS.join(", ")} inside newLimits (aliases: ${Object.keys(LIMIT_ALIASES).join(", ")}).`
-    );
+var DEFAULT_LIMIT_PER_MIN = 300;
+var WINDOW_MS2 = 6e4;
+var METRIC_EMIT_MIN_INTERVAL_MS = 1e4;
+var BATCH_FRACTION = 0.2;
+function resellerKeyHash(resellerKey) {
+  if (!resellerKey) return "00000000";
+  let h = 5381;
+  for (let i = 0; i < resellerKey.length; i++) {
+    h = ((h << 5) + h ^ resellerKey.charCodeAt(i)) >>> 0;
   }
-  if (Object.keys(out).length === 0) {
-    throw new Error(
-      `No package limits to change. Provide at least one of ${OCS_PREPAID_PACKAGE_LIMIT_FIELDS.join(", ")}.`
+  return h.toString(16).padStart(8, "0");
+}
+function emitMetric(endpoint, resellerKey, callsInWindow, limitPerMin) {
+  const pct2 = Math.round(callsInWindow / limitPerMin * 100);
+  const reseller_hash = resellerKeyHash(resellerKey);
+  console.error(
+    JSON.stringify({
+      metric: "carrier_ocs_calls_per_min",
+      endpoint,
+      reseller_hash,
+      calls_in_window: callsInWindow,
+      limit_per_min: limitPerMin,
+      utilisation_pct: pct2,
+      alert: pct2 >= 80,
+      ts: Date.now()
+    })
+  );
+  if (pct2 >= 80) {
+    console.warn(
+      `[rate-governor] ALERT: ${endpoint} at ${pct2}% capacity (${callsInWindow}/${limitPerMin} per min) reseller=${reseller_hash}`
     );
   }
-  return out;
 }
-function ocsLocalDateTime(value, bareDate = "end") {
-  const trimmed = value.trim();
-  if (/^\d{4}-\d{2}-\d{2}$/.test(trimmed)) {
-    return bareDate === "start" ? `${trimmed}T00:00:00` : `${trimmed}T23:59:59`;
-  }
-  if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}$/.test(trimmed)) return `${trimmed}:00`;
-  if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}/.test(trimmed)) {
-    return trimmed.replace(/(?:Z|[+-]\d{2}:?\d{2})$/, "").slice(0, 19);
+var _endpointWindows = /* @__PURE__ */ new Map();
+function _getEndpointState(key) {
+  let s = _endpointWindows.get(key);
+  if (!s) {
+    s = {
+      log: [],
+      batchLog: [],
+      gate: Promise.resolve(),
+      lastMetricEmitAt: 0,
+      metricBelowHighUtil: true
+    };
+    _endpointWindows.set(key, s);
   }
-  throw new Error(
-    `"${value}" is not a date OCS can read. Use YYYY-MM-DD or YYYY-MM-DDTHH:mm:ss \u2014 this field is a java.time.LocalDateTime and a zone offset is rejected.`
-  );
+  return s;
 }
-function activePeriodFromPackages(listResponse, packageId) {
-  const root = listResponse ?? {};
-  const payload = root.listSubscriberPrepaidPackages ?? root.data ?? root;
-  const packages = Array.isArray(payload?.packages) ? payload.packages : [];
-  for (const entry of packages) {
-    if (!entry || typeof entry !== "object") continue;
-    const rec = entry;
-    const id = rec.subscriberprepaidpackageid ?? rec.subscriberPrepaidPackageId;
-    if (Number(id) !== packageId) continue;
-    const activation = rec.tsactivationutc ?? rec.tsActivationUtc;
-    const expiration = rec.tsexpirationutc ?? rec.tsExpirationUtc;
-    const window = {};
-    if (typeof activation === "string" && activation) window.activation = activation;
-    if (typeof expiration === "string" && expiration) window.expiration = expiration;
-    return window;
-  }
-  return void 0;
+function _prune(log, windowStart) {
+  let i = 0;
+  while (i < log.length && log[i] <= windowStart) i++;
+  return i > 0 ? log.slice(i) : log;
 }
-var OCS_ACTIVE_PERIOD_DEFAULT_COMMENT = "Active period changed via Carrier";
-function packageActivePeriodParams(packageId, change) {
-  if (change.startDate === void 0 && change.endDate === void 0) {
-    throw new Error("Provide startDate and/or endDate to change a package's active period.");
-  }
-  const activation = change.startDate !== void 0 ? ocsLocalDateTime(change.startDate, "start") : change.current?.activation;
-  const expiration = change.endDate !== void 0 ? ocsLocalDateTime(change.endDate, "end") : change.current?.expiration;
-  for (const [field, value, omitted] of [
-    ["newActivationDateUtc", activation, "startDate"],
-    ["newExpirationDateUtc", expiration, "endDate"]
-  ]) {
-    if (value !== void 0) continue;
-    throw new Error(
-      `OCS requires both bounds on an active-period change and rejects the whole request with "Missing '${field}'" when one is absent. Supply ${omitted}, or read the package's current window first (activePeriodFromPackages) and pass it as \`current\`.`
-    );
+async function acquireEndpointSlot(resellerId, endpoint, priority = "interactive") {
+  const proc = globalThis["process"];
+  if (proc?.env?.["RATE_FLOOR_DISABLED"] === "true" || globalThis["RATE_FLOOR_DISABLED"] === "true") {
+    return;
   }
-  return {
-    packageId,
-    // Already LocalDateTime-shaped when it came from `current`; normalising
-    // again is a no-op and keeps a hand-passed value honest.
-    newActivationDateUtc: ocsLocalDateTime(activation, "start"),
-    newExpirationDateUtc: ocsLocalDateTime(expiration, "end"),
-    comment: change.comment?.trim() || OCS_ACTIVE_PERIOD_DEFAULT_COMMENT
-  };
+  await _acquireOneSlot(resellerId, "__global__", priority);
+  await _acquireOneSlot(resellerId, endpoint, priority);
 }
-function recurringIdForPackage(listResponse, packageId) {
-  const root = listResponse ?? {};
-  const payload = root.listSubscriberPrepaidPackages ?? root.data ?? root;
-  const packages = Array.isArray(payload?.packages) ? payload.packages : [];
-  for (const entry of packages) {
-    if (!entry || typeof entry !== "object") continue;
-    const rec = entry;
-    const id = rec.subscriberprepaidpackageid ?? rec.subscriberPrepaidPackageId;
-    if (Number(id) !== packageId) continue;
-    const recurring = rec.recurringPackage ?? rec.recurringId;
-    const value = Number(recurring);
-    return Number.isFinite(value) && value > 0 ? value : void 0;
-  }
-  return void 0;
+async function _acquireOneSlot(resellerId, endpoint, priority) {
+  const bucketKey = `${resellerId}:${endpoint}`;
+  const limitPerMin = ENDPOINT_LIMITS_PER_MIN[endpoint] ?? DEFAULT_LIMIT_PER_MIN;
+  const batchCap = Math.floor(limitPerMin * BATCH_FRACTION);
+  const state = _getEndpointState(bucketKey);
+  const ticket = state.gate.then(async () => {
+    while (true) {
+      const now = Date.now();
+      const windowStart = now - WINDOW_MS2;
+      state.log = _prune(state.log, windowStart);
+      state.batchLog = _prune(state.batchLog, windowStart);
+      const totalInWindow = state.log.length;
+      const batchInWindow = state.batchLog.length;
+      if (totalInWindow > 0 && endpoint !== "__global__") {
+        const utilPct = Math.round(totalInWindow / limitPerMin * 100);
+        const intervalOk = now - state.lastMetricEmitAt >= METRIC_EMIT_MIN_INTERVAL_MS;
+        const enteredHighUtil = utilPct >= 80 && state.metricBelowHighUtil;
+        if (intervalOk || enteredHighUtil) {
+          emitMetric(endpoint, resellerId, totalInWindow, limitPerMin);
+          state.lastMetricEmitAt = now;
+          if (utilPct >= 80) {
+            state.metricBelowHighUtil = false;
+          }
+        }
+        if (utilPct < 80) {
+          state.metricBelowHighUtil = true;
+        }
+      }
+      const globalFull = totalInWindow >= limitPerMin;
+      const batchFull = priority === "batch" && batchInWindow >= batchCap;
+      if (!globalFull && !batchFull) {
+        state.log.push(now);
+        if (priority === "batch") {
+          state.batchLog.push(now);
+        }
+        return;
+      }
+      let waitMs;
+      if (globalFull) {
+        const oldest = state.log[0];
+        waitMs = WINDOW_MS2 - (now - oldest) + 1;
+      } else {
+        const oldestBatch = state.batchLog[0];
+        waitMs = WINDOW_MS2 - (now - oldestBatch) + 1;
+      }
+      await new Promise((r) => setTimeout(r, waitMs));
+    }
+  });
+  state.gate = ticket;
+  return ticket;
 }
-function emptyEsimStatusCounts() {
-  return { active: 0, suspended: 0, inventory: 0, other: 0, total: 0 };
+function getLimitForEndpoint(endpoint) {
+  return ENDPOINT_LIMITS_PER_MIN[endpoint] ?? DEFAULT_LIMIT_PER_MIN;
 }
-function addEsimStatusRow(acc, rec) {
-  const count = Number(rec.count ?? 0);
-  if (!Number.isFinite(count) || count === 0) return;
-  const str2 = String(rec.statusStr ?? rec.name ?? rec.status ?? "").toUpperCase();
-  if (str2 === "ACTIVATED" || str2 === "ACTIVE" || str2 === "AFFECTED") {
-    acc.active += count;
-    return;
-  }
-  if (str2 === "SUSPENDED") {
-    acc.suspended += count;
-    return;
+function getRateLimitWindowCounts(resellerKey, endpoint) {
+  const bucketKey = `${resellerKey}:${endpoint}`;
+  const state = _endpointWindows.get(bucketKey);
+  if (!state) {
+    return { calls_in_window: 0, batch_calls_in_window: 0 };
   }
-  if (str2 === "FREE" || str2 === "INVENTORY" || str2 === "NOT_ACTIVATED" || str2 === "AVAILABLE") {
-    acc.inventory += count;
-    return;
+  const windowStart = Date.now() - WINDOW_MS2;
+  let calls_in_window = 0;
+  for (const ts of state.log) {
+    if (ts > windowStart) calls_in_window++;
   }
-  const num = rec.statusNum;
-  if (typeof num === "number") {
-    if (num === 1) acc.active += count;
-    else if (num === 0) acc.inventory += count;
-    else if (num === 2) acc.suspended += count;
-    else acc.other += count;
-    return;
+  let batch_calls_in_window = 0;
+  for (const ts of state.batchLog) {
+    if (ts > windowStart) batch_calls_in_window++;
   }
-  acc.other += count;
+  return { calls_in_window, batch_calls_in_window };
 }
-function extractEsimStatusCounts(json) {
-  const acc = emptyEsimStatusCounts();
-  const root = json ?? {};
-  const payload = root.data ?? root.esimStatusPerAccount ?? root;
-  const accounts = Array.isArray(payload) ? payload : Array.isArray(payload.account) ? payload.account : [];
-  for (const account of accounts) {
-    const rec = account ?? {};
-    const sponsors = Array.isArray(rec.sponsor) ? rec.sponsor : [];
-    if (sponsors.length > 0) {
-      for (const sp of sponsors) {
-        const esim = sp?.esim ?? {};
-        const statuses = Array.isArray(esim.status) ? esim.status : [];
-        for (const row of statuses) addEsimStatusRow(acc, row ?? {});
-      }
-      continue;
-    }
-    acc.active += Number(rec.active ?? 0);
-    acc.suspended += Number(rec.suspended ?? 0);
-    acc.inventory += Number(rec.inventory ?? rec.notActivated ?? rec.free ?? 0);
-    acc.other += Number(rec.other ?? rec.terminated ?? 0);
+var OCS_BARE_INT_RESELLER_METHODS = [
+  "listSponsor",
+  "listSteeringList",
+  "listDetailedDestinationList",
+  "listDetailedLocationZone",
+  "getCustomerTariff"
+];
+var OCS_BARE_INT_OTHER_METHODS = {
+  listLocationZoneElement: "locationZoneId",
+  listDestinationListPrefix: "destinationListId",
+  listVoipTariffRule: "voipPlanId",
+  getSimProviderStatus: "simId",
+  deleteSubscriberPackage: "packageId"
+};
+var OCS_PARAM_RENAMES = {
+  getResellerInfo: { resellerId: "id" },
+  modifyPPTCore: {
+    templateId: "prepaidpackagetemplateid",
+    name: "prepaidpackagetemplatename",
+    volume: "databyte",
+    validityDays: "perioddays"
+  },
+  modifyPPTRecurring: { templateId: "prepaidpackagetemplateid" },
+  modifyPPTThrottling: { templateId: "prepaidpackagetemplateid" },
+  // Console NL-create and the MCP tool both advertise `name` / `volume` /
+  // `validityDays`. OCS createPrepaidPackageTemplate rejects unknown keys
+  // (Jackson code 2) — live failure was Unrecognized field "name".
+  createPrepaidPackageTemplate: {
+    name: "prepaidpackagetemplatename",
+    volume: "databyte",
+    validityDays: "perioddays",
+    dataLimit: "databyte"
+  },
+  createLocationZone: { name: "locationZoneName" }
+};
+function applyParamRenames(method, params) {
+  const renames = OCS_PARAM_RENAMES[method];
+  if (!renames || !params || typeof params !== "object" || Array.isArray(params)) {
+    return params;
   }
-  acc.total = acc.active + acc.suspended + acc.inventory + acc.other;
-  return acc;
+  const record = params;
+  let out;
+  for (const [from, to] of Object.entries(renames)) {
+    if (!Object.prototype.hasOwnProperty.call(record, from)) continue;
+    out ??= { ...record };
+    if (!Object.prototype.hasOwnProperty.call(record, to)) out[to] = record[from];
+    delete out[from];
+  }
+  return out ?? params;
 }
-function esimStatusPerAccountParams(args) {
-  if (typeof args === "number") return { accountId: args };
-  if (args.accountId !== void 0) return { accountId: args.accountId };
-  if (args.resellerId !== void 0) return { resellerId: args.resellerId };
-  throw new Error("esimStatusPerAccountParams needs an accountId or a resellerId");
+function isBareIntResellerMethod(method) {
+  return OCS_BARE_INT_RESELLER_METHODS.includes(method);
 }
-var UNLIMITED_DATA_BYTES = 100 * 1024 * 1024 * 1024;
-var BYTES_PER_MB = 1048576;
-var TEMPLATE_DATA_KEYS = ["databyte", "dataBytes", "dataLimit"];
-function readTemplateDataBytes(t) {
-  for (const key of TEMPLATE_DATA_KEYS) {
-    const v = t[key];
-    if (typeof v === "number" && Number.isFinite(v)) return v;
-  }
-  return void 0;
+function isBareIntMethod(method) {
+  return isBareIntResellerMethod(method) || Object.prototype.hasOwnProperty.call(OCS_BARE_INT_OTHER_METHODS, method);
 }
-function throttlePercentFromMb(mb, totalBytes = UNLIMITED_DATA_BYTES) {
-  if (!Number.isFinite(mb) || mb <= 0 || totalBytes <= 0) return 100;
-  const pct2 = Math.round(mb * BYTES_PER_MB / totalBytes * 100);
-  return Math.min(100, Math.max(1, pct2));
+function bareIntIdName(method) {
+  if (isBareIntResellerMethod(method)) return "resellerId";
+  return OCS_BARE_INT_OTHER_METHODS[method] ?? "id";
 }
-var OCS_THROTTLE_KBPS = [
-  128,
-  256,
-  384,
-  512,
-  1024,
-  3072,
-  5120,
-  7680,
-  10240,
-  20480,
-  51200,
-  102400
-];
-var OCS_PERIODICITY = { DAILY: 0, WEEKLY: 1, MONTHLY: 2 };
-var OCS_PERIODICITY_VALUES = [0, 1, 2];
-var CEILING_MULTIPLIERS = [20, 25, 50, 100];
-var SECONDS_PER_DAY = 86400;
-function throttledBytesPerPeriod(kbps, periodDays = 1) {
-  if (!Number.isFinite(kbps) || kbps <= 0) return 0;
-  return kbps * 1e3 * SECONDS_PER_DAY * Math.max(1, periodDays) / 8;
+function assertBareIntParam(method, params) {
+  if (!isBareIntMethod(method)) return;
+  if (typeof params === "number") return;
+  const shape = params === null ? "null" : Array.isArray(params) ? "array" : typeof params === "object" ? "object" : typeof params;
+  throw new TypeError(
+    `OCS method "${method}" takes a BARE INTEGER ${bareIntIdName(method)}, but received ${shape}. Sending an object makes OCS reject the whole request with "Cannot deserialize value of type java.lang.Integer from Object value", which surfaces in the UI as an empty panel. Pass the id itself, e.g. call("${method}", 1170).`
+  );
 }
-function unlimitedCeilingFor(windowMb, throttleKbps, periodDays = 1) {
-  const windowBytes = windowMb * BYTES_PER_MB;
-  const unreachableAbove = windowBytes + throttledBytesPerPeriod(throttleKbps ?? 0, periodDays);
-  for (const multiplier of CEILING_MULTIPLIERS) {
-    const ceilingBytes = windowBytes * multiplier;
-    if (ceilingBytes > unreachableAbove) {
-      return { ceilingBytes, percent: Math.round(100 / multiplier) };
-    }
+var OcsApiError = class extends Error {
+  constructor(code, message, method, details = {}) {
+    super(`[${method}] OCS error ${code}: ${message}`);
+    this.code = code;
+    this.method = method;
+    this.name = "OcsApiError";
+    this.details = details;
   }
-  const last = CEILING_MULTIPLIERS[CEILING_MULTIPLIERS.length - 1];
-  return { ceilingBytes: windowBytes * last, percent: Math.round(100 / last) };
-}
-function normalizePackageTemplate(template) {
-  const out = { ...template };
-  const unlimitedFlag = out.unlimited === true;
-  const current = readTemplateDataBytes(out);
-  const isUnlimited = unlimitedFlag || current === void 0 || current === 0;
-  const throttleAfterMb = typeof out.throttleAfterMb === "number" ? out.throttleAfterMb : void 0;
-  const throttleKbps = typeof out.throttleKbps === "number" ? out.throttleKbps : void 0;
-  const periodDays = typeof out.perioddays === "number" ? out.perioddays : 1;
-  if (throttleKbps !== void 0 && !OCS_THROTTLE_KBPS.includes(throttleKbps)) {
-    throw new Error(
-      `throttleKbps ${throttleKbps} is not an OCS bitrate. Allowed: ${OCS_THROTTLE_KBPS.join(", ")}. This field is a SPEED in Kbps, not a data allowance.`
+  code;
+  method;
+  details;
+};
+var OcsUnknownMethodError = class extends Error {
+  constructor(method) {
+    super(
+      `[${method}] is not a known OCS v1 method. It is not in the verified set of ${OCS_V1_METHODS.size} methods (createAccount/createSubscriber do not exist on the OCS). If this is a genuinely new method, add it to OCS_V1_METHODS or construct the client without { strictMethods: true }.`
     );
+    this.method = method;
+    this.name = "OcsUnknownMethodError";
   }
-  const periodicity = out.recurringPeriodicityType;
-  if (periodicity !== void 0 && !OCS_PERIODICITY_VALUES.includes(periodicity)) {
-    throw new Error(
-      `recurringPeriodicityType ${periodicity} is out of range. Allowed: 0=Daily, 1=Weekly, 2=Monthly. (The live v2 Mango templates use 3, which is not a valid value.)`
+  method;
+};
+var OcsContractError = class _OcsContractError extends Error {
+  constructor(method, issues, payload) {
+    super(
+      `[${method}] OCS response failed contract validation: ${_OcsContractError.summarize(issues)}`
     );
+    this.method = method;
+    this.issues = issues;
+    this.payload = payload;
+    this.name = "OcsContractError";
+  }
+  method;
+  issues;
+  payload;
+  /** One-line, human-readable join of the issues — for logs and the error message. */
+  get summary() {
+    return _OcsContractError.summarize(this.issues);
   }
-  if (out.recurring === true && (periodicity === OCS_PERIODICITY.DAILY || periodicity === OCS_PERIODICITY.WEEKLY) && out.nbOccurrence === void 0) {
-    throw new Error(
-      "nbOccurrence is required for a daily or weekly recurring template; OCS only treats it as optional for monthly templates."
-    );
+  static summarize(issues) {
+    return issues.map((i) => `${i.path}: ${i.message}`).join("; ");
   }
-  if (throttleKbps !== void 0) out.throttlingThreshold1Limit = throttleKbps;
-  delete out.throttleKbps;
-  if (isUnlimited) {
-    let ceiling = UNLIMITED_DATA_BYTES;
-    if (throttleAfterMb !== void 0 && throttleAfterMb > 0) {
-      const sized = unlimitedCeilingFor(throttleAfterMb, throttleKbps, periodDays);
-      ceiling = sized.ceilingBytes;
-      out.throttlingThreshold1Perc = sized.percent;
-    }
-    for (const key of TEMPLATE_DATA_KEYS) {
-      if (key in out) out[key] = ceiling;
-    }
-    if (!TEMPLATE_DATA_KEYS.some((k) => k in out)) out.databyte = ceiling;
+};
+function ocsErrorMessage(code, rawMsg, rawBody) {
+  switch (code) {
+    case 12:
+      return {
+        message: "OCS resource is read-only (code 12). The package/subscriber/account state does not allow this mutation. Often returned for end-of-life subscribers or finalized invoices.",
+        details: {}
+      };
+    case 17:
+      return {
+        message: "Subscriber is end-of-life (code 17). It can no longer be mutated. Use modify_subscriber_status to revive before further changes.",
+        details: {}
+      };
+    default:
+      if (code >= 10001 && code <= 10004) {
+        const details = {};
+        if (rawBody["invalidTadigs"] !== void 0) {
+          details.invalidTadigs = rawBody["invalidTadigs"];
+        }
+        if (rawBody["existingLZ"] !== void 0) {
+          details.existingLZ = rawBody["existingLZ"];
+        }
+        return { message: rawMsg || "Location zone validation failed", details };
+      }
+      return { message: rawMsg || "Unknown error", details: {} };
   }
-  delete out.unlimited;
-  if (throttleAfterMb !== void 0) {
-    if (!isUnlimited) {
-      const total = readTemplateDataBytes(out) ?? UNLIMITED_DATA_BYTES;
-      out.throttlingThreshold1Perc = throttlePercentFromMb(throttleAfterMb, total);
+}
+var BACKOFF_BASE_MS2 = 500;
+var BACKOFF_MAX_MS = 4e3;
+var BACKOFF_MAX_RETRIES = 3;
+var TRAFFIC_CONTROL_BACKOFF_BASE_MS = 1e3;
+var TRAFFIC_CONTROL_BACKOFF_MAX_MS = 16e3;
+var TRAFFIC_CONTROL_MAX_RETRIES = 6;
+var BACKOFF_JITTER = 0.25;
+async function retryWithBackoff(fn) {
+  let lastError;
+  let maxRetries = BACKOFF_MAX_RETRIES;
+  let backoffBaseMs = BACKOFF_BASE_MS2;
+  let backoffMaxMs = BACKOFF_MAX_MS;
+  for (let attempt = 0; attempt <= maxRetries; attempt++) {
+    if (attempt > 0) {
+      const base = Math.min(backoffBaseMs * Math.pow(2, attempt - 1), backoffMaxMs);
+      const jitter = base * BACKOFF_JITTER * (2 * Math.random() - 1);
+      const delay = Math.max(0, Math.round(base + jitter));
+      await new Promise((r) => setTimeout(r, delay));
+    }
+    try {
+      return await fn();
+    } catch (err) {
+      lastError = err;
+      if (err instanceof OcsApiError) {
+        if (err.code !== 100) throw err;
+        maxRetries = TRAFFIC_CONTROL_MAX_RETRIES;
+        backoffBaseMs = TRAFFIC_CONTROL_BACKOFF_BASE_MS;
+        backoffMaxMs = TRAFFIC_CONTROL_BACKOFF_MAX_MS;
+      }
+      if (err instanceof OcsContractError) {
+        throw err;
+      }
+      if (err instanceof OcsTimeoutError) {
+        throw err;
+      }
     }
-    out.throttlingActive = out.throttlingActive ?? true;
   }
-  delete out.throttleAfterMb;
-  return out;
+  throw lastError;
 }
-function normalizePackageTemplateChanges(changes) {
-  const out = { ...changes };
-  const explicitlyUnlimited = out.unlimited === true;
-  for (const key of TEMPLATE_DATA_KEYS) {
-    if (!(key in out)) continue;
-    if (out[key] === 0 || explicitlyUnlimited) out[key] = UNLIMITED_DATA_BYTES;
-  }
-  if (explicitlyUnlimited && !TEMPLATE_DATA_KEYS.some((k) => k in out)) {
-    out.databyte = UNLIMITED_DATA_BYTES;
+function isAbortError(err) {
+  return err instanceof Error && (err.name === "AbortError" || err.name === "TimeoutError" || /aborted|timed? ?out/i.test(err.message));
+}
+var OcsClient = class {
+  /**
+   * @param baseUrl        OCS base URL without trailing slash (e.g. https://ocs.esimvault.cloud).
+   * @param _defaultToken  Default API token; identifies the reseller for rate-floor keying.
+   * @param _priority      Call priority: "interactive" (MCP tool calls, 80% capacity) or
+   *                       "batch" (cron/poll callers, 20% capacity). Default: "interactive".
+   * @param options        Contract-enforcement opt-outs (see `OcsClientOptions`).
+   */
+  constructor(baseUrl, _defaultToken, _priority = "interactive", options = {}) {
+    this._defaultToken = _defaultToken;
+    this._priority = _priority;
+    let end = baseUrl.length;
+    while (end > 0 && baseUrl.charCodeAt(end - 1) === 47) end--;
+    this.baseUrl = baseUrl.slice(0, end);
+    this._strictMethods = options.strictMethods ?? false;
+    this._validateResponses = options.validateResponses ?? true;
+    this._strictValidation = options.strictValidation ?? false;
   }
-  delete out.unlimited;
-  const throttleAfterMb = out.throttleAfterMb;
-  if (typeof throttleAfterMb === "number") {
-    const total = readTemplateDataBytes(out) ?? UNLIMITED_DATA_BYTES;
-    out.throttlingThreshold1Perc = throttlePercentFromMb(throttleAfterMb, total);
+  _defaultToken;
+  _priority;
+  baseUrl;
+  _strictMethods;
+  _validateResponses;
+  _strictValidation;
+  // Per-instance (NOT static): a static set would dedup across requests in a
+  // reused Worker isolate and silently swallow recurring contract-drift warnings.
+  _warnedMethods = /* @__PURE__ */ new Set();
+  _warnedValidation = /* @__PURE__ */ new Set();
+  async call(method, params = {}, token) {
+    if (!OCS_V1_METHODS.has(method)) {
+      if (this._strictMethods) throw new OcsUnknownMethodError(method);
+      if (!this._warnedMethods.has(method)) {
+        this._warnedMethods.add(method);
+        console.warn(
+          `[ocs-client] method "${method}" is not in the verified OCS v1 set \u2014 it may not exist on this OCS instance (see OCS_V1_METHODS).`
+        );
+      }
+    }
+    const tok = token ?? this._defaultToken;
+    if (!tok) {
+      throw new OcsApiError(-1, "No OCS API token provided", method);
+    }
+    const url = `${this.baseUrl}/v1?token=${tok}`;
+    assertBareIntParam(method, params);
+    const wireParams = applyParamRenames(method, params);
+    const body = JSON.stringify({ [method]: wireParams });
+    return retryWithBackoff(async () => {
+      await acquireToken(tok);
+      await acquireEndpointSlot(tok, method, this._priority);
+      return runWithBudget(method, async (signal, attemptMs) => {
+        let res;
+        try {
+          res = await fetch(url, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body,
+            signal
+          });
+        } catch (err) {
+          if (isAbortError(err)) {
+            throw new OcsTimeoutError(method, attemptMs);
+          }
+          throw err;
+        }
+        if (res.status >= 500) {
+          throw new Error(`HTTP ${res.status} ${res.statusText}`);
+        }
+        if (!res.ok) {
+          throw new OcsApiError(
+            res.status,
+            `HTTP ${res.status} ${res.statusText}`,
+            method
+          );
+        }
+        let json;
+        try {
+          json = await res.json();
+        } catch (err) {
+          if (isAbortError(err)) {
+            throw new OcsTimeoutError(method, attemptMs);
+          }
+          throw err;
+        }
+        if (json.status?.code !== 0) {
+          const ocsCode = json.status?.code ?? -1;
+          const rawMsg = json.status?.msg ?? "Unknown error";
+          const rawBody = json;
+          const { message, details } = ocsErrorMessage(ocsCode, rawMsg, rawBody);
+          throw new OcsApiError(ocsCode, message, method, details);
+        }
+        let payload;
+        if (method === "getCustomerTariff" && json["listTariffRule"] !== void 0) {
+          payload = json["listTariffRule"];
+        } else if (method === "getSubscriberLocationByCellId") {
+          const byMethod = json[method];
+          if (byMethod !== void 0) {
+            payload = byMethod;
+          } else if (json["subscriberLocation"] !== void 0) {
+            payload = json["subscriberLocation"];
+          } else {
+            payload = json[method] ?? json;
+          }
+        } else if (json[method] !== void 0) {
+          payload = json[method];
+        } else if (Object.keys(json).some((k) => k !== "status")) {
+          payload = json;
+        } else {
+          payload = null;
+        }
+        if (this._validateResponses) {
+          const schema = RESPONSE_SCHEMAS[method];
+          if (schema) {
+            const parsed = schema.safeParse(payload);
+            if (!parsed.success) {
+              const issues = parsed.error.issues.map((i) => ({
+                path: i.path.join(".") || "<root>",
+                message: i.message
+              }));
+              if (this._strictValidation) {
+                throw new OcsContractError(method, issues, payload);
+              }
+              if (!this._warnedValidation.has(method)) {
+                this._warnedValidation.add(method);
+                console.warn(`[ocs-client] ${new OcsContractError(method, issues, payload).message}`);
+              }
+            }
+          }
+        }
+        return payload;
+      });
+    });
   }
-  delete out.throttleAfterMb;
-  return out;
-}
+};
 
 // ../../packages/ocs-spec/src/mcc-iso.ts
 var MCC_TO_ISO = {
@@ -3929,20 +4321,23 @@ var NETWORK_EVENT_KEYS = [
   "mocAnswer",
   "mtcAnswer"
 ];
+function positiveSimId(raw) {
+  const n = typeof raw === "number" ? raw : typeof raw === "string" && raw.trim() !== "" ? Number(raw) : NaN;
+  return Number.isSafeInteger(n) && n > 0 ? n : void 0;
+}
 function subscriberSimId(record) {
   if (!record || typeof record !== "object") return void 0;
   const rec = record;
   const sim = rec.sim;
   if (sim && typeof sim === "object") {
-    const id = sim.id;
-    if (typeof id === "number" && Number.isFinite(id)) return id;
-    if (typeof id === "string" && id.trim() !== "" && Number.isFinite(Number(id))) return Number(id);
-  }
-  for (const key of ["simId", "sim_id"]) {
-    const v = rec[key];
-    if (typeof v === "number" && Number.isFinite(v)) return v;
-    if (typeof v === "string" && v.trim() !== "" && Number.isFinite(Number(v))) return Number(v);
-  }
+    const simRec = sim;
+    const fromSim = positiveSimId(simRec.id) ?? positiveSimId(simRec.simId) ?? positiveSimId(simRec.sim_id);
+    if (fromSim !== void 0) return fromSim;
+  }
+  const flat = positiveSimId(rec.simId) ?? positiveSimId(rec.sim_id);
+  if (flat !== void 0) return flat;
+  const nested = rec.subscriber;
+  if (nested && typeof nested === "object" && nested !== record) return subscriberSimId(nested);
   return void 0;
 }
 function prepaidPackageRows(data) {
@@ -4274,10 +4669,6 @@ async function generateStorefrontLogo(input) {
 }
 
 export {
-  getLimitForEndpoint,
-  getRateLimitWindowCounts,
-  OcsApiError,
-  OcsClient,
   OCS_MAX_USAGE_WINDOW_DAYS,
   clampUsagePeriod,
   lastNDaysPeriod,
@@ -4294,8 +4685,16 @@ export {
   recurringIdForPackage,
   extractEsimStatusCounts,
   esimStatusPerAccountParams,
-  normalizePackageTemplate,
-  normalizePackageTemplateChanges,
+  ocsHlrBitrate,
+  ocsHlrBitrateFromBps,
+  ocsSimStatus,
+  locationZoneCreateParams,
+  packageTemplateCreateFromToolJson,
+  packageTemplateModifyFromToolJson,
+  getLimitForEndpoint,
+  getRateLimitWindowCounts,
+  OcsApiError,
+  OcsClient,
   mccToIso,
   buildListSubscriberParams,
   extractSubscriberStatus,
@@ -4359,4 +4758,4 @@ export {
   storefrontScreen,
   CARRIER_VERSION
 };
-//# sourceMappingURL=chunk-ZUUC3J4J.js.map
+//# sourceMappingURL=chunk-DUAXD7GD.js.map