@carrierllc/mcp 0.9.0 → 0.9.1

package/dist/index.js

@@ -37,7 +37,7 @@ import {
   subscriberIdParams,
   usageOverPeriodParams,
   verifyStorefront
-} from "./chunk-VACB3Z5V.js";
+} from "./chunk-V4CYEMLJ.js";
 import "./chunk-SHKKVIIA.js";
 
 // src/index.ts
@@ -98,17 +98,206 @@ var OcsClient = class {
   }
 };
 
+// ../../packages/carrier-ai/dist/index.js
+import { AwsClient } from "aws4fetch";
+var AI_TIER_POLICY = {
+  free: { limit: 5, window: "day" },
+  pro: { limit: 1e3, window: "month" },
+  enterprise: { limit: 1e4, window: "month" },
+  // Finite, deliberately. This was `Infinity` when the tier was introduced in
+  // #762, and Infinity breaks in two ways that both hide themselves:
+  //
+  //   1. JSON.stringify(Infinity) is "null". The quota endpoint returned
+  //      {"limit":null,"remaining":null} and the console badge rendered
+  //      "1 of null used". That is the whole reason this was investigated.
+  //   2. An infinite allowance is unmetered Bedrock. A staff account could
+  //      spend without bound and nothing would refuse it or show a number.
+  //
+  // 100,000 is roughly $580 of Haiku at the measured $0.0058/call. Nobody on
+  // staff will reach it by using the product, and a runaway loop stops.
+  superadmin: { limit: 1e5, window: "month" }
+};
+for (const [tier, policy] of Object.entries(AI_TIER_POLICY)) {
+  if (!Number.isFinite(policy.limit) || policy.limit <= 0) {
+    throw new Error(
+      `AI_TIER_POLICY.${tier}.limit must be a positive finite number, got ${policy.limit}. A non-finite limit serialises to null in JSON and leaves spend unmetered.`
+    );
+  }
+}
+var PRELUDE_BYTES = 12;
+var MESSAGE_CRC_BYTES = 4;
+var MIN_FRAME_BYTES = PRELUDE_BYTES + MESSAGE_CRC_BYTES;
+var MAX_FRAME_BYTES = 16 * 1024 * 1024;
+var MAX_ENTRIES = 16;
+var MAX_KEY_LEN = 256;
+var MAX_VALUE_LEN = 256;
+var ALLOWED = /[^a-zA-Z0-9\s:_@$#=/+,\-.]/g;
+function clean(value, max) {
+  return value.replace(ALLOWED, "").slice(0, max);
+}
+var REQUEST_METADATA_HEADER = "X-Amzn-Bedrock-Request-Metadata";
+function requestMetadata(attr2) {
+  const out = {};
+  const pairs = [
+    ["product", "carrier"],
+    ["org", attr2.orgId],
+    ["subaccount", attr2.subAccountId],
+    ["surface", attr2.surface],
+    ["tier", attr2.tier]
+  ];
+  for (const [k, v] of pairs) {
+    if (v === void 0 || v === "") continue;
+    const key = clean(k, MAX_KEY_LEN);
+    const value = clean(v, MAX_VALUE_LEN);
+    if (key && value && Object.keys(out).length < MAX_ENTRIES) out[key] = value;
+  }
+  return Object.keys(out).length > 0 ? out : null;
+}
+var ZERO_USAGE = {
+  inputTokens: 0,
+  outputTokens: 0,
+  cacheReadTokens: 0,
+  cacheWriteTokens: 0
+};
+function extractUsage(payload) {
+  if (!payload || typeof payload !== "object") return ZERO_USAGE;
+  const root = payload;
+  const holder = root.usage ?? root.message?.usage;
+  if (!holder) return ZERO_USAGE;
+  const num = (v) => {
+    const n = Number(v);
+    return Number.isFinite(n) && n > 0 ? n : 0;
+  };
+  return {
+    inputTokens: num(holder.input_tokens),
+    outputTokens: num(holder.output_tokens),
+    cacheReadTokens: num(holder.cache_read_input_tokens),
+    cacheWriteTokens: num(holder.cache_creation_input_tokens)
+  };
+}
+var HAIKU_RATES = {
+  inputPerMTok: 1,
+  outputPerMTok: 5,
+  cacheReadPerMTok: 0.1,
+  cacheWritePerMTok: 1.25,
+  asOf: "2026-08-22"
+};
+function estimateCostUsd(u, rates = HAIKU_RATES) {
+  const perTok = (mtok) => mtok / 1e6;
+  return u.inputTokens * perTok(rates.inputPerMTok) + u.outputTokens * perTok(rates.outputPerMTok) + u.cacheReadTokens * perTok(rates.cacheReadPerMTok) + u.cacheWriteTokens * perTok(rates.cacheWritePerMTok);
+}
+var DEFAULT_BEDROCK_REGION = "us-east-1";
+var DEFAULT_MODEL_ID = "us.anthropic.claude-haiku-4-5-20251001-v1:0";
+var BEDROCK_TIMEOUT_MS = 3e4;
+var BedrockRateLimitError = class extends Error {
+  isRateLimit = true;
+  /**
+   * The raw `retry-after` header, when Bedrock sent one. Callers surface it as
+   * the delay they tell the user to wait; without it they have to guess.
+   */
+  retryAfter;
+  constructor(message, retryAfter = null) {
+    super(message);
+    this.name = "BedrockRateLimitError";
+    this.retryAfter = retryAfter;
+  }
+};
+var BedrockError = class extends Error {
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+    this.name = "BedrockError";
+  }
+  status;
+};
+function client(creds) {
+  const region = creds.region ?? DEFAULT_BEDROCK_REGION;
+  return {
+    aws: new AwsClient({
+      accessKeyId: creds.accessKeyId,
+      secretAccessKey: creds.secretAccessKey,
+      ...creds.sessionToken ? { sessionToken: creds.sessionToken } : {},
+      region,
+      service: "bedrock"
+    }),
+    region,
+    modelId: creds.modelId ?? DEFAULT_MODEL_ID
+  };
+}
+function body(req) {
+  return {
+    anthropic_version: "bedrock-2023-05-31",
+    max_tokens: req.maxTokens,
+    ...req.temperature !== void 0 ? { temperature: req.temperature } : {},
+    system: [{ type: "text", text: req.system, cache_control: { type: "ephemeral" } }],
+    messages: req.messages.map((m) => ({ role: m.role, content: m.content })),
+    ...req.tools ? { tools: req.tools, tool_choice: { type: "any" } } : {}
+  };
+}
+function headersFor(req, accept) {
+  const headers = {
+    "Content-Type": "application/json",
+    Accept: accept
+  };
+  const meta = req.attribution ? requestMetadata(req.attribution) : null;
+  if (meta) headers[REQUEST_METADATA_HEADER] = JSON.stringify(meta);
+  return headers;
+}
+function reportUsage(req, usage) {
+  if (!req.onUsage) return;
+  try {
+    req.onUsage(usage);
+  } catch {
+  }
+}
+async function fail(resp) {
+  const text = await resp.text().catch(() => "");
+  if (resp.status === 429 || /throttl/i.test(text)) {
+    throw new BedrockRateLimitError(
+      text || "Bedrock throttled the request",
+      resp.headers.get("retry-after")
+    );
+  }
+  throw new BedrockError(text || `Bedrock returned HTTP ${resp.status}`, resp.status);
+}
+async function invokeTool(creds, req, signal) {
+  const { aws, region, modelId } = client(creds);
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), req.timeoutMs ?? BEDROCK_TIMEOUT_MS);
+  const onAbort = () => controller.abort();
+  signal?.addEventListener("abort", onAbort, { once: true });
+  try {
+    const headers = headersFor(req, "application/json");
+    const resp = await aws.fetch(
+      `https://bedrock-runtime.${region}.amazonaws.com/model/${encodeURIComponent(modelId)}/invoke`,
+      {
+        method: "POST",
+        headers,
+        body: JSON.stringify(body(req)),
+        signal: controller.signal
+      }
+    );
+    if (!resp.ok) await fail(resp);
+    const json = await resp.json();
+    reportUsage(req, extractUsage(json));
+    const block = json.content?.find((b) => b.type === "tool_use");
+    return block?.name ? { name: block.name, input: block.input ?? {} } : null;
+  } finally {
+    clearTimeout(timer);
+    signal?.removeEventListener("abort", onAbort);
+  }
+}
+
 // src/billing.ts
 var TIER_CALL_LIMITS = {
-  free: 5e3,
-  pro: 5e4,
-  enterprise: Infinity
+  free: 1e3,
+  pro: Infinity,
+  enterprise: Infinity,
+  superadmin: Infinity
 };
+var CARRIER_ASK_PRO_MONTHLY_LIMIT = AI_TIER_POLICY.pro.limit;
+var CARRIER_ASK_FREE_DAILY_LIMIT = AI_TIER_POLICY.free.limit;
 var UPGRADE_URL = "https://mcp.carrier.llc/upgrade";
-function getBillingPrimary(env) {
-  const raw = env.BILLING_PRIMARY;
-  return raw === "clerk" ? "clerk" : "stripe";
-}
 function platformOrgId(env) {
   const raw = env.CARRIER_PLATFORM_ORG_ID;
   if (typeof raw !== "string") return null;
@@ -123,7 +312,7 @@ function isPlatformOperator(env, orgId) {
 async function checkCallQuota(env, sub, tier) {
   const limit = TIER_CALL_LIMITS[tier];
   const resetAt = firstDayNextMonth();
-  if (tier === "enterprise") {
+  if (tier === "pro" || tier === "enterprise" || tier === "superadmin") {
     return { allowed: true, remaining: Infinity, resetAt, tier };
   }
   if (!env.CARRIER_USERS) {
@@ -144,6 +333,7 @@ async function checkCallQuota(env, sub, tier) {
 function recordUsage(env, sub, tier) {
   if (!env.CARRIER_USERS) return;
   (async () => {
+    if (tier === "pro" || tier === "enterprise" || tier === "superadmin") return;
     const month = currentMonth();
     const usageKey = `usage:${sub}:${month}`;
     const raw = await env.CARRIER_USERS.get(usageKey, "json").catch(() => null);
@@ -154,35 +344,8 @@ function recordUsage(env, sub, tier) {
       JSON.stringify({ calls: next, updated_at: (/* @__PURE__ */ new Date()).toISOString() }),
       { expirationTtl: 35 * 24 * 60 * 60 }
     );
-    if (tier === "pro" && next % 100 === 0 && getBillingPrimary(env) === "stripe") {
-      await pushStripeUsageRecord(env, sub, 100).catch(() => {
-      });
-    }
   })();
 }
-async function pushStripeUsageRecord(env, sub, quantity) {
-  const stripeKey = env.STRIPE_SECRET_KEY;
-  if (!stripeKey) return;
-  if (!env.CARRIER_USERS) return;
-  const subItemId = await env.CARRIER_USERS.get(`stripe_sub_item_id:${sub}`);
-  if (!subItemId) return;
-  const body2 = new URLSearchParams({
-    quantity: String(quantity),
-    timestamp: String(Math.floor(Date.now() / 1e3)),
-    action: "increment"
-  });
-  await fetch(
-    `https://api.stripe.com/v1/subscription_items/${subItemId}/usage_records`,
-    {
-      method: "POST",
-      headers: {
-        Authorization: `Bearer ${stripeKey}`,
-        "Content-Type": "application/x-www-form-urlencoded"
-      },
-      body: body2.toString()
-    }
-  );
-}
 function currentMonth() {
   const now = /* @__PURE__ */ new Date();
   return `${now.getUTCFullYear()}${String(now.getUTCMonth() + 1).padStart(2, "0")}`;
@@ -531,8 +694,8 @@ function wrapHandler(toolName, ocsMethod, requiredScope, ctx, handler) {
           {
             type: "text",
             text: [
-              `Quota exceeded: your ${quota.tier} plan has reached the safety limit of 100,000 regular tool calls/month.`,
-              `This limit exists to prevent runaway automation. Resets ${quota.resetAt}.`,
+              `Quota exceeded: your ${quota.tier} plan has reached the monthly limit of ${TIER_CALL_LIMITS.free.toLocaleString()} regular tool calls.`,
+              `Resets ${quota.resetAt}.`,
               `Upgrade to Pro for unlimited calls at ${UPGRADE_URL}`
             ].join(" ")
           }
@@ -4675,196 +4838,6 @@ function registerAllBacklogTools(server2, ctx) {
   );
 }
 
-// ../../packages/carrier-ai/dist/index.js
-import { AwsClient } from "aws4fetch";
-var AI_TIER_POLICY = {
-  free: { limit: 5, window: "day" },
-  pro: { limit: 1e3, window: "month" },
-  enterprise: { limit: 1e4, window: "month" },
-  // Finite, deliberately. This was `Infinity` when the tier was introduced in
-  // #762, and Infinity breaks in two ways that both hide themselves:
-  //
-  //   1. JSON.stringify(Infinity) is "null". The quota endpoint returned
-  //      {"limit":null,"remaining":null} and the console badge rendered
-  //      "1 of null used". That is the whole reason this was investigated.
-  //   2. An infinite allowance is unmetered Bedrock. A staff account could
-  //      spend without bound and nothing would refuse it or show a number.
-  //
-  // 100,000 is roughly $580 of Haiku at the measured $0.0058/call. Nobody on
-  // staff will reach it by using the product, and a runaway loop stops.
-  superadmin: { limit: 1e5, window: "month" }
-};
-for (const [tier, policy] of Object.entries(AI_TIER_POLICY)) {
-  if (!Number.isFinite(policy.limit) || policy.limit <= 0) {
-    throw new Error(
-      `AI_TIER_POLICY.${tier}.limit must be a positive finite number, got ${policy.limit}. A non-finite limit serialises to null in JSON and leaves spend unmetered.`
-    );
-  }
-}
-var PRELUDE_BYTES = 12;
-var MESSAGE_CRC_BYTES = 4;
-var MIN_FRAME_BYTES = PRELUDE_BYTES + MESSAGE_CRC_BYTES;
-var MAX_FRAME_BYTES = 16 * 1024 * 1024;
-var MAX_ENTRIES = 16;
-var MAX_KEY_LEN = 256;
-var MAX_VALUE_LEN = 256;
-var ALLOWED = /[^a-zA-Z0-9\s:_@$#=/+,\-.]/g;
-function clean(value, max) {
-  return value.replace(ALLOWED, "").slice(0, max);
-}
-var REQUEST_METADATA_HEADER = "X-Amzn-Bedrock-Request-Metadata";
-function requestMetadata(attr2) {
-  const out = {};
-  const pairs = [
-    ["product", "carrier"],
-    ["org", attr2.orgId],
-    ["subaccount", attr2.subAccountId],
-    ["surface", attr2.surface],
-    ["tier", attr2.tier]
-  ];
-  for (const [k, v] of pairs) {
-    if (v === void 0 || v === "") continue;
-    const key = clean(k, MAX_KEY_LEN);
-    const value = clean(v, MAX_VALUE_LEN);
-    if (key && value && Object.keys(out).length < MAX_ENTRIES) out[key] = value;
-  }
-  return Object.keys(out).length > 0 ? out : null;
-}
-var ZERO_USAGE = {
-  inputTokens: 0,
-  outputTokens: 0,
-  cacheReadTokens: 0,
-  cacheWriteTokens: 0
-};
-function extractUsage(payload) {
-  if (!payload || typeof payload !== "object") return ZERO_USAGE;
-  const root = payload;
-  const holder = root.usage ?? root.message?.usage;
-  if (!holder) return ZERO_USAGE;
-  const num = (v) => {
-    const n = Number(v);
-    return Number.isFinite(n) && n > 0 ? n : 0;
-  };
-  return {
-    inputTokens: num(holder.input_tokens),
-    outputTokens: num(holder.output_tokens),
-    cacheReadTokens: num(holder.cache_read_input_tokens),
-    cacheWriteTokens: num(holder.cache_creation_input_tokens)
-  };
-}
-var HAIKU_RATES = {
-  inputPerMTok: 1,
-  outputPerMTok: 5,
-  cacheReadPerMTok: 0.1,
-  cacheWritePerMTok: 1.25,
-  asOf: "2026-08-22"
-};
-function estimateCostUsd(u, rates = HAIKU_RATES) {
-  const perTok = (mtok) => mtok / 1e6;
-  return u.inputTokens * perTok(rates.inputPerMTok) + u.outputTokens * perTok(rates.outputPerMTok) + u.cacheReadTokens * perTok(rates.cacheReadPerMTok) + u.cacheWriteTokens * perTok(rates.cacheWritePerMTok);
-}
-var DEFAULT_BEDROCK_REGION = "us-east-1";
-var DEFAULT_MODEL_ID = "us.anthropic.claude-haiku-4-5-20251001-v1:0";
-var BEDROCK_TIMEOUT_MS = 3e4;
-var BedrockRateLimitError = class extends Error {
-  isRateLimit = true;
-  /**
-   * The raw `retry-after` header, when Bedrock sent one. Callers surface it as
-   * the delay they tell the user to wait; without it they have to guess.
-   */
-  retryAfter;
-  constructor(message, retryAfter = null) {
-    super(message);
-    this.name = "BedrockRateLimitError";
-    this.retryAfter = retryAfter;
-  }
-};
-var BedrockError = class extends Error {
-  constructor(message, status) {
-    super(message);
-    this.status = status;
-    this.name = "BedrockError";
-  }
-  status;
-};
-function client(creds) {
-  const region = creds.region ?? DEFAULT_BEDROCK_REGION;
-  return {
-    aws: new AwsClient({
-      accessKeyId: creds.accessKeyId,
-      secretAccessKey: creds.secretAccessKey,
-      ...creds.sessionToken ? { sessionToken: creds.sessionToken } : {},
-      region,
-      service: "bedrock"
-    }),
-    region,
-    modelId: creds.modelId ?? DEFAULT_MODEL_ID
-  };
-}
-function body(req) {
-  return {
-    anthropic_version: "bedrock-2023-05-31",
-    max_tokens: req.maxTokens,
-    ...req.temperature !== void 0 ? { temperature: req.temperature } : {},
-    system: [{ type: "text", text: req.system, cache_control: { type: "ephemeral" } }],
-    messages: req.messages.map((m) => ({ role: m.role, content: m.content })),
-    ...req.tools ? { tools: req.tools, tool_choice: { type: "any" } } : {}
-  };
-}
-function headersFor(req, accept) {
-  const headers = {
-    "Content-Type": "application/json",
-    Accept: accept
-  };
-  const meta = req.attribution ? requestMetadata(req.attribution) : null;
-  if (meta) headers[REQUEST_METADATA_HEADER] = JSON.stringify(meta);
-  return headers;
-}
-function reportUsage(req, usage) {
-  if (!req.onUsage) return;
-  try {
-    req.onUsage(usage);
-  } catch {
-  }
-}
-async function fail(resp) {
-  const text = await resp.text().catch(() => "");
-  if (resp.status === 429 || /throttl/i.test(text)) {
-    throw new BedrockRateLimitError(
-      text || "Bedrock throttled the request",
-      resp.headers.get("retry-after")
-    );
-  }
-  throw new BedrockError(text || `Bedrock returned HTTP ${resp.status}`, resp.status);
-}
-async function invokeTool(creds, req, signal) {
-  const { aws, region, modelId } = client(creds);
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), req.timeoutMs ?? BEDROCK_TIMEOUT_MS);
-  const onAbort = () => controller.abort();
-  signal?.addEventListener("abort", onAbort, { once: true });
-  try {
-    const headers = headersFor(req, "application/json");
-    const resp = await aws.fetch(
-      `https://bedrock-runtime.${region}.amazonaws.com/model/${encodeURIComponent(modelId)}/invoke`,
-      {
-        method: "POST",
-        headers,
-        body: JSON.stringify(body(req)),
-        signal: controller.signal
-      }
-    );
-    if (!resp.ok) await fail(resp);
-    const json = await resp.json();
-    reportUsage(req, extractUsage(json));
-    const block = json.content?.find((b) => b.type === "tool_use");
-    return block?.name ? { name: block.name, input: block.input ?? {} } : null;
-  } finally {
-    clearTimeout(timer);
-    signal?.removeEventListener("abort", onAbort);
-  }
-}
-
 // src/tools-carrier-ask.ts
 import { z as z11 } from "zod";
 
@@ -5132,6 +5105,7 @@ var UI_AGENT_TOOL_SCOPES = {
   ui_create_steering_list: "write",
   ui_build_steering_list: "write",
   ui_set_account_steering_list: "write",
+  ui_request_reseller_relay_change: "write",
   ui_create_account: "admin",
   ui_create_destination_list: "write",
   ui_edit_destination_list: "write",
@@ -5217,6 +5191,66 @@ Open account ID ${args.account_id}.
 `
     )
   );
+  server2.registerTool(
+    "ui_request_reseller_relay_change",
+    {
+      title: "Request Reseller Relay Change",
+      description: "Drafts a parent-reseller/support request for Relay Gy, calls/SMS relay, or VoIP relay when those portal controls are read-only at the current reseller tier. Does not send the request or mutate the portal.",
+      inputSchema: {
+        reseller_id: z4.number().optional().describe("Reseller id; defaults to the authenticated reseller"),
+        relay_gy: z4.boolean().optional().describe("Desired Relay Gy state"),
+        relay_calls_sms: z4.boolean().optional().describe("Desired calls/SMS relay state"),
+        relay_voip: z4.boolean().optional().describe("Desired VoIP relay state"),
+        reason: z4.string().optional().describe("Operational reason for the requested change")
+      }
+    },
+    async (args) => {
+      if (!ctx.props.scope.includes("write")) {
+        return {
+          isError: true,
+          content: [{ type: "text", text: "Scope denied: tool 'ui_request_reseller_relay_change' requires 'write' scope." }]
+        };
+      }
+      const resellerId = args.reseller_id ?? ctx.props.reseller_id;
+      const requested = [
+        args.relay_gy === void 0 ? null : `Relay Gy: ${args.relay_gy ? "enable" : "disable"}`,
+        args.relay_calls_sms === void 0 ? null : `Calls/SMS relay: ${args.relay_calls_sms ? "enable" : "disable"}`,
+        args.relay_voip === void 0 ? null : `VoIP relay: ${args.relay_voip ? "enable" : "disable"}`
+      ].filter((value) => value !== null);
+      if (requested.length === 0) {
+        return {
+          isError: true,
+          content: [{ type: "text", text: JSON.stringify({ error: "relay_state_required", message: "Choose at least one relay flag and desired state." }) }]
+        };
+      }
+      const draft = [
+        `Please update the parent-controlled OCS relay settings for reseller ${resellerId}.`,
+        "",
+        ...requested.map((line) => `- ${line}`),
+        ...args.reason ? ["", `Reason: ${args.reason}`] : [],
+        "",
+        "Please confirm once the change is active so we can verify the dependent OCS operation."
+      ].join("\n");
+      ctx.audit({
+        tool_name: "ui_request_reseller_relay_change",
+        ocs_method: "[ui-agent:G-20]",
+        status: "parent_request_drafted",
+        dry_run: true,
+        duration_ms: 0,
+        event_type: "ui_agent_dispatch"
+      });
+      return {
+        content: [{ type: "text", text: JSON.stringify({
+          status: "parent_request_drafted",
+          capability: "parent_controlled",
+          reseller_id: resellerId,
+          parent_reseller: resellerId === 1170 ? "Bridge4IP" : "parent reseller/support",
+          draft,
+          sent: false
+        }, null, 2) }]
+      };
+    }
+  );
   server2.registerTool(
     "ui_create_account",
     {
@@ -7692,7 +7726,8 @@ function registerStorefrontDeployTools(server2) {
 var TIER_CREDIT_ALLOTMENTS = {
   free: 5e3,
   pro: 1e5,
-  enterprise: Infinity
+  enterprise: Infinity,
+  superadmin: Infinity
 };
 var DAILY_FREE_CREDITS = 50;
 var SCOPE_CREDIT_COSTS = {
@@ -7715,7 +7750,7 @@ async function checkCredits(env, sub, tier, scope) {
   const month = currentMonth2();
   const today = currentDay();
   const resetAt = firstDayNextMonth2();
-  if (tier === "enterprise") {
+  if (tier === "enterprise" || tier === "superadmin") {
     return {
       allowed: true,
       credits_remaining: Infinity,
@@ -7755,7 +7790,7 @@ function deductCredits(env, sub, tier, scope) {
     const cost = SCOPE_CREDIT_COSTS[scope];
     const month = currentMonth2();
     const today = currentDay();
-    if (tier === "enterprise") return;
+    if (tier === "enterprise" || tier === "superadmin") return;
     const dailyFree = await getDailyFreeCredits(env, sub, today);
     const dailyRemaining = dailyFree.granted - dailyFree.consumed;
     if (dailyRemaining >= cost) {
@@ -7961,7 +7996,7 @@ async function resolveUserTier(env, sub) {
   const raw = await env.CARRIER_USERS.get(`user:${sub}`, "json").catch(() => null);
   if (raw && typeof raw === "object" && "tier" in raw) {
     const t = raw.tier;
-    if (t === "pro" || t === "enterprise") return t;
+    if (t === "pro" || t === "enterprise" || t === "superadmin") return t;
   }
   return "free";
 }
@@ -8011,6 +8046,14 @@ var DEFAULT_THRESHOLD_CONFIGS = {
     auto_pause_on_cap: false,
     notification_email: null,
     webhook_url: null
+  },
+  superadmin: {
+    notification_thresholds: [],
+    hard_cap_cents: 0,
+    invoice_threshold_cents: 0,
+    auto_pause_on_cap: false,
+    notification_email: null,
+    webhook_url: null
   }
 };
 async function getThresholdConfig(env, sub, tier) {
@@ -8033,7 +8076,7 @@ async function resolveUserTier2(env, sub) {
   const raw = await env.CARRIER_USERS.get(`user:${sub}`, "json").catch(() => null);
   if (raw && typeof raw === "object" && "tier" in raw) {
     const t = raw.tier;
-    if (t === "pro" || t === "enterprise") return t;
+    if (t === "pro" || t === "enterprise" || t === "superadmin") return t;
   }
   return "free";
 }