@vibesdotdev/account 0.0.0-stage → 1.0.0-rc.3

package/dist/billing/usage/delivery.js

@@ -0,0 +1,61 @@
+/**
+ * Shared delivery plumbing for the fire-and-forget usage emitters: settle the
+ * bounded POST, classify how it ended without carrying any value the failure
+ * held, and run the caller's journal callbacks so a failed audit write is
+ * logged instead of escaping the emitter.
+ */
+import * as z from 'zod/v4';
+import { settle, settleNow, valueFreeFailure } from '@vibesdotdev/kernel';
+import { isWaitTimeout } from "./wait-timeout.js";
+/** The failure a settled delivery ended with, or null when Account Web accepted it. */
+export function deliveryFailure(delivered) {
+    if (delivered.ok)
+        return delivered.value.ok ? null : { reason: 'http', status: delivered.value.status };
+    if (isWaitTimeout(delivered.cause))
+        return { reason: 'timeout' };
+    return { reason: 'error', error: valueFreeFailure(delivered.cause) };
+}
+/** The journal message for a failed delivery: the status, the deadline, or the failure class, never response text. */
+export function deliveryFailureMessage(failure, timeoutMs) {
+    if (failure.reason === 'http')
+        return `HTTP ${failure.status}`;
+    if (failure.reason === 'timeout')
+        return `timeout-${timeoutMs}ms`;
+    return [failure.error.name, failure.error.code, failure.error.reason].filter(Boolean).join(' ');
+}
+const platformExecutionContextSchema = z.object({ context: z.object({ waitUntil: z.function() }).loose() }).loose();
+/**
+ * Accepts the platform object itself rather than a parsed copy, so `waitUntil`
+ * is still invoked on its own ExecutionContext (an unbound call throws).
+ */
+const waitUntilCarrierSchema = z.custom((value) => platformExecutionContextSchema.safeParse(value).success);
+/**
+ * Keep an in-flight emission alive past the response through the platform's
+ * `context.waitUntil`. Without one, or when `waitUntil` throws (logged by
+ * failure class), the promise floats; it never rejects.
+ */
+export function keepAlive(logger, label, platform, promise) {
+    const carrier = waitUntilCarrierSchema.safeParse(platform);
+    if (!carrier.success)
+        return;
+    const kept = settleNow(() => carrier.data.context.waitUntil(promise));
+    if (kept.ok)
+        return;
+    logger.error('Usage keep-alive failed; the emission floats', {
+        emitter: label,
+        error: valueFreeFailure(kept.cause)
+    });
+}
+/** Run a caller's journal callback; a throw or rejection is logged by failure class, never raised into the emitter. */
+export async function notifyJournal(logger, label, callback) {
+    if (!callback)
+        return;
+    const settled = await settle(callback);
+    if (settled.ok)
+        return;
+    logger.warn('Usage journal callback failed', {
+        emitter: label,
+        error: valueFreeFailure(settled.cause)
+    });
+}
+//# sourceMappingURL=delivery.js.map

package/dist/billing/usage/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../../src/billing/usage/delivery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAuC,MAAM,qBAAqB,CAAC;AAE/G,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAWlD,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,SAA4B;IAC3D,IAAI,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IACxG,IAAI,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACjE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,sBAAsB,CAAC,OAAwB,EAAE,SAAiB;IACjF,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,WAAW,SAAS,IAAI,CAAC;IAClE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjG,CAAC;AAKD,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAEpH;;;GAGG;AACH,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAmB,CAAC,KAAK,EAAE,EAAE,CAAC,8BAA8B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;AAE9H;;;;GAIG;AACH,MAAM,UAAU,SAAS,CACxB,MAA6B,EAC7B,KAAa,EACb,QAAkB,EAClB,OAAsB;IAEtB,MAAM,OAAO,GAAG,sBAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO;IAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO;IACpB,MAAM,CAAC,KAAK,CAAC,8CAA8C,EAAE;QAC5D,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;KACnC,CAAC,CAAC;AACJ,CAAC;AAED,uHAAuH;AACvH,MAAM,CAAC,KAAK,UAAU,aAAa,CAClC,MAA4B,EAC5B,KAAa,EACb,QAAkD;IAElD,IAAI,CAAC,QAAQ;QAAE,OAAO;IACtB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,EAAE;QAAE,OAAO;IACvB,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;QAC5C,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC;KACtC,CAAC,CAAC;AACJ,CAAC"}

package/dist/billing/usage/grant-signup-credits.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Grant the free-tier monthly credits to a newly-created user.
+ *
+ * Free plans don't generate Stripe invoices, so the
+ * `invoice.payment_succeeded` hook in
+ * `apps/account-web/src/server/billing/server/providers/stripe/webhooks/plan-grants.ts`
+ * never fires for them. Without this emitter, brand-new users land at
+ * zero credits and can't try paid AI inference at all.
+ *
+ * Lifecycle:
+ *   - Auth-web's `onUserRegistered` callback fires after `better-auth`
+ *     finishes the user row insert.
+ *   - That callback invokes `grantSignupCredits()`, which POSTs to the
+ *     internal-service endpoint at
+ *     `/api/billing/credits/grant-signup-credits`.
+ *   - Receiver idempotently grants `TIER_DEFINITIONS.free.creditGrant.monthly`
+ *     credits via `creditsService.addCredits('grant', …)`.
+ *
+ * Same design constraints as `record-sandbox-uptime` and
+ * `record-platform-resource`:
+ *   - MUST NOT fail the parent flow (signup must succeed even if billing
+ *     is wedged). Fire-and-forget, time-bounded.
+ *   - Returns `void`; failures log structured context.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type BillingEventMetadata } from './delivery.ts';
+/** The metadata this emitter's input accepts: JSON values, undefined entries dropped. */
+export type { BillingEventMetadata };
+export interface GrantSignupCreditsInput {
+    /** Origin of the account app. Omit to skip metering. */
+    accountOrigin: string | null | undefined;
+    /** `VIBES_INTERNAL_SERVICE_TOKEN`. Omit to skip metering. */
+    internalServiceToken: string | null | undefined;
+    /** User to grant free-tier credits to. */
+    userId: string;
+    /**
+     * Optional metadata stamped on the ledger row + billing_events audit
+     * row. Useful for correlating signup grants with referral codes,
+     * marketing source, etc.
+     */
+    metadata?: BillingEventMetadata;
+}
+export declare function grantSignupCredits(runtime: RuntimeRef, input: GrantSignupCreditsInput): void;
+//# sourceMappingURL=grant-signup-credits.d.ts.map

package/dist/billing/usage/grant-signup-credits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-signup-credits.d.ts","sourceRoot":"","sources":["../../../src/billing/usage/grant-signup-credits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAGH,OAAO,EAAU,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAmB,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE3E,yFAAyF;AACzF,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAQrC,MAAM,WAAW,uBAAuB;IACvC,wDAAwD;IACxD,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,6DAA6D;IAC7D,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD,0CAA0C;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,uBAAuB,GAAG,IAAI,CA0D5F"}

package/dist/billing/usage/grant-signup-credits.js

@@ -0,0 +1,86 @@
+/**
+ * Grant the free-tier monthly credits to a newly-created user.
+ *
+ * Free plans don't generate Stripe invoices, so the
+ * `invoice.payment_succeeded` hook in
+ * `apps/account-web/src/server/billing/server/providers/stripe/webhooks/plan-grants.ts`
+ * never fires for them. Without this emitter, brand-new users land at
+ * zero credits and can't try paid AI inference at all.
+ *
+ * Lifecycle:
+ *   - Auth-web's `onUserRegistered` callback fires after `better-auth`
+ *     finishes the user row insert.
+ *   - That callback invokes `grantSignupCredits()`, which POSTs to the
+ *     internal-service endpoint at
+ *     `/api/billing/credits/grant-signup-credits`.
+ *   - Receiver idempotently grants `TIER_DEFINITIONS.free.creditGrant.monthly`
+ *     credits via `creditsService.addCredits('grant', …)`.
+ *
+ * Same design constraints as `record-sandbox-uptime` and
+ * `record-platform-resource`:
+ *   - MUST NOT fail the parent flow (signup must succeed even if billing
+ *     is wedged). Fire-and-forget, time-bounded.
+ *   - Returns `void`; failures log structured context.
+ */
+import { getLogger } from '@vibesdotdev/logging';
+import { settle } from '@vibesdotdev/kernel';
+import { deliveryFailure } from "./delivery.js";
+function log(runtime) {
+    return getLogger('account', runtime).child({ context: 'grant-signup-credits' });
+}
+const GRANT_TIMEOUT_MS = 500;
+export function grantSignupCredits(runtime, input) {
+    if (!input.userId)
+        return;
+    if (!input.accountOrigin) {
+        log(runtime).debug('grantSignupCredits: accountOrigin missing; skipping', {
+            userId: input.userId
+        });
+        return;
+    }
+    if (!input.internalServiceToken) {
+        log(runtime).debug('grantSignupCredits: internalServiceToken missing; skipping', {
+            userId: input.userId
+        });
+        return;
+    }
+    const accountOrigin = input.accountOrigin;
+    const headers = {
+        'Content-Type': 'application/json',
+        Accept: 'application/json',
+        Authorization: `Bearer ${input.internalServiceToken}`,
+        'X-Vibes-User-Id': input.userId
+    };
+    void settle(() => runtime.lifecycle.wait((signal) => fetch(`${accountOrigin.replace(/\/$/, '')}/api/billing/credits/grant-signup-credits`, {
+        method: 'POST',
+        headers,
+        body: JSON.stringify({
+            userId: input.userId,
+            metadata: input.metadata ?? {}
+        }),
+        signal
+    }), { timeoutMs: GRANT_TIMEOUT_MS, reason: 'account signup credit grant' })).then((delivered) => {
+        const failure = deliveryFailure(delivered);
+        if (!failure)
+            return;
+        if (failure.reason === 'http') {
+            log(runtime).warn('grantSignupCredits: non-2xx from account', {
+                userId: input.userId,
+                status: failure.status
+            });
+        }
+        else if (failure.reason === 'timeout') {
+            log(runtime).warn('grantSignupCredits: timed out', {
+                userId: input.userId,
+                timeoutMs: GRANT_TIMEOUT_MS
+            });
+        }
+        else {
+            log(runtime).warn('grantSignupCredits: fetch failed', {
+                userId: input.userId,
+                error: failure.error
+            });
+        }
+    });
+}
+//# sourceMappingURL=grant-signup-credits.js.map

package/dist/billing/usage/grant-signup-credits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grant-signup-credits.js","sourceRoot":"","sources":["../../../src/billing/usage/grant-signup-credits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAmB,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAA6B,MAAM,eAAe,CAAC;AAK3E,SAAS,GAAG,CAAC,OAAmB;IAC/B,OAAO,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAiB7B,MAAM,UAAU,kBAAkB,CAAC,OAAmB,EAAE,KAA8B;IACrF,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO;IAC1B,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,qDAAqD,EAAE;YACzE,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,4DAA4D,EAAE;YAChF,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAE1C,MAAM,OAAO,GAAG;QACf,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;QAC1B,aAAa,EAAE,UAAU,KAAK,CAAC,oBAAoB,EAAE;QACrD,iBAAiB,EAAE,KAAK,CAAC,MAAM;KACE,CAAC;IAEnC,KAAK,MAAM,CAAC,GAAG,EAAE,CAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CACrB,CAAC,MAAM,EAAE,EAAE,CACV,KAAK,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,2CAA2C,EAAE;QACrF,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,EAAE;SAC9B,CAAC;QACF,MAAM;KACN,CAAC,EACH,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,EAAE,6BAA6B,EAAE,CACtE,CACD,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACpB,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,0CAA0C,EAAE;gBAC7D,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC,CAAC;QACJ,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,+BAA+B,EAAE;gBAClD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,SAAS,EAAE,gBAAgB;aAC3B,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBACrD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,OAAO,CAAC,KAAK;aACpB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/billing/usage/record-browser-run-usage.d.ts

@@ -0,0 +1,68 @@
+/**
+ * Record Browser Run tool-call usage against the account billing subject.
+ *
+ * The Browser Run backend (Cloudflare Browser Rendering) is invoked from chat
+ * / agent tool calls that carry the user's authenticated session, so this
+ * helper bills via the user endpoint exactly like
+ * `recordGenerationUsage` — NOT the internal-service heartbeat path used by
+ * sandbox / code-session uptime.
+ *
+ * A Browser Run is metered as one `request` plus measured `gb_egress` (page
+ * fetch + network transfer). Cloud is the only path that bills; if a future
+ * consumer-local headless-browser backend lands, pass `hardware: 'consumer'`
+ * and the rating engine zeroes it (`consumer-local-free`).
+ *
+ * Design constraints (inherited from record-generation-usage.ts):
+ *   - MUST NOT fail the calling tool. Returns void; swallows errors with a
+ *     structured log via the wrapped emitter.
+ *   - MUST be time-bounded (the wrapped emitter caps at 500ms).
+ *   - Auth rides the runtime + resolved credential/binding (no cookie).
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import type { CostBasis } from '../rating/schemas/cost-basis.ts';
+import type { HardwarePath } from '../rating/schemas/rated-usage.ts';
+import type { BillingEventMetadata } from './delivery.ts';
+/** The metadata this emitter's input accepts: JSON values, undefined entries dropped. */
+export type { BillingEventMetadata };
+export interface RecordBrowserRunUsageInput {
+    /** Origin of the account app. Omit to skip metering (dev without account). */
+    accountOrigin: string | null | undefined;
+    /** Verified caller Bearer header forwarded to the usage endpoint. */
+    authorization?: string;
+    /** Origin header — Better Auth rejects cross-origin POSTs without one. */
+    callerOrigin: string;
+    /**
+     * Number of Browser Run requests this emission covers. Defaults to 1
+     * (one tool call). Batched callers may pass a higher count.
+     */
+    requests?: number;
+    /**
+     * Measured network egress for the run(s), in GB. Optional — when 0 or
+     * omitted, only the per-request charge applies.
+     */
+    gbEgress?: number;
+    /**
+     * Hardware path. Defaults to `'cloud'` (CF Browser Rendering). A
+     * future consumer-local headless backend would pass `'consumer'` to
+     * run free.
+     */
+    hardware?: HardwarePath;
+    /**
+     * Cost basis override. When omitted, uses the placeholder
+     * `request` + `gb_egress` quotes from `build-session-cost-basis.ts`.
+     */
+    costBasis?: CostBasis[];
+    /** Stable identifier for the run (tool-call id, session id) — analytics. */
+    runId?: string | null;
+    /** Target URL of the browse, for ledger metadata. */
+    targetUrl?: string | null;
+    /** Caller-provided extras merged into metadata. */
+    metadata?: BillingEventMetadata;
+}
+/**
+ * Fire-and-forget rated usage record for a Browser Run tool call. Billed as
+ * `request` + `gb_egress` against the user-cookie endpoint via the shared
+ * `recordGenerationUsage` emitter (rating engine + pool routing).
+ */
+export declare function recordBrowserRunUsage(runtime: RuntimeRef, input: RecordBrowserRunUsageInput): void;
+//# sourceMappingURL=record-browser-run-usage.d.ts.map

package/dist/billing/usage/record-browser-run-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-browser-run-usage.d.ts","sourceRoot":"","sources":["../../../src/billing/usage/record-browser-run-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACrG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAG1D,yFAAyF;AACzF,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAMrC,MAAM,WAAW,0BAA0B;IAC1C,8EAA8E;IAC9E,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,0BAA0B,GAAG,IAAI,CA2ClG"}

package/dist/billing/usage/record-browser-run-usage.js

@@ -0,0 +1,74 @@
+/**
+ * Record Browser Run tool-call usage against the account billing subject.
+ *
+ * The Browser Run backend (Cloudflare Browser Rendering) is invoked from chat
+ * / agent tool calls that carry the user's authenticated session, so this
+ * helper bills via the user endpoint exactly like
+ * `recordGenerationUsage` — NOT the internal-service heartbeat path used by
+ * sandbox / code-session uptime.
+ *
+ * A Browser Run is metered as one `request` plus measured `gb_egress` (page
+ * fetch + network transfer). Cloud is the only path that bills; if a future
+ * consumer-local headless-browser backend lands, pass `hardware: 'consumer'`
+ * and the rating engine zeroes it (`consumer-local-free`).
+ *
+ * Design constraints (inherited from record-generation-usage.ts):
+ *   - MUST NOT fail the calling tool. Returns void; swallows errors with a
+ *     structured log via the wrapped emitter.
+ *   - MUST be time-bounded (the wrapped emitter caps at 500ms).
+ *   - Auth rides the runtime + resolved credential/binding (no cookie).
+ */
+import { getLogger } from '@vibesdotdev/logging';
+import { CaughtFailureSchema, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { FEATURE_SLUGS } from "../schemas/core/feature-slugs.js";
+import { browserRunCostBasis } from "./build-session-cost-basis.js";
+import { recordGenerationUsage } from "./record-generation-usage.js";
+function log(runtime) {
+    return getLogger('account', runtime).child({ context: 'record-browser-run-usage' });
+}
+/**
+ * Fire-and-forget rated usage record for a Browser Run tool call. Billed as
+ * `request` + `gb_egress` against the user-cookie endpoint via the shared
+ * `recordGenerationUsage` emitter (rating engine + pool routing).
+ */
+export function recordBrowserRunUsage(runtime, input) {
+    const requests = input.requests !== undefined && input.requests > 0 ? input.requests : 1;
+    const gbEgress = input.gbEgress !== undefined && Number.isFinite(input.gbEgress) && input.gbEgress > 0 ? input.gbEgress : 0;
+    if (!input.accountOrigin) {
+        log(runtime).debug('recordBrowserRunUsage: accountOrigin missing; skipping', {
+            runId: input.runId ?? null
+        });
+        return;
+    }
+    const measuredUnits = gbEgress > 0 ? { request: requests, gb_egress: gbEgress } : { request: requests };
+    const usage = {
+        featureSlug: FEATURE_SLUGS['bandwidth-egress-gb'],
+        accountOrigin: input.accountOrigin,
+        authorization: input.authorization,
+        callerOrigin: input.callerOrigin,
+        // Browser Run is not an AI generation; reuse the closest analytics
+        // surface so dashboards keep one bucket. (Surface union is advisory.)
+        surface: 'tools.agent.run',
+        measuredUnits,
+        costBasis: input.costBasis ?? browserRunCostBasis(),
+        hardware: input.hardware ?? 'cloud',
+        metadata: {
+            toolSurface: 'tools.browser-run',
+            runId: input.runId ?? null,
+            targetUrl: input.targetUrl ?? null,
+            requests,
+            gbEgress,
+            ...input.metadata
+        }
+    };
+    // Fire-and-forget: a refused record (no declared account transport) is logged, never thrown into the tool call.
+    void settle(() => recordGenerationUsage(runtime, usage)).then((recorded) => {
+        if (recorded.ok)
+            return;
+        log(runtime).error('recordBrowserRunUsage: usage not recorded', {
+            runId: input.runId ?? null,
+            error: valueFreeFailure(CaughtFailureSchema.parse(recorded.cause))
+        });
+    });
+}
+//# sourceMappingURL=record-browser-run-usage.js.map

package/dist/billing/usage/record-browser-run-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-browser-run-usage.js","sourceRoot":"","sources":["../../../src/billing/usage/record-browser-run-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AAGrG,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEpE,OAAO,EAAE,qBAAqB,EAAmC,MAAM,8BAA8B,CAAC;AAKtG,SAAS,GAAG,CAAC,OAAmB;IAC/B,OAAO,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;AACrF,CAAC;AAsCD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAmB,EAAE,KAAiC;IAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GACb,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE5G,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,wDAAwD,EAAE;YAC5E,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;SAC1B,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IAED,MAAM,aAAa,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAExG,MAAM,KAAK,GAAG;QACb,WAAW,EAAE,aAAa,CAAC,qBAAqB,CAAC;QACjD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,mEAAmE;QACnE,sEAAsE;QACtE,OAAO,EAAE,iBAAiB;QAC1B,aAAa;QACb,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,mBAAmB,EAAE;QACnD,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,OAAO;QACnC,QAAQ,EAAE;YACT,WAAW,EAAE,mBAAmB;YAChC,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,QAAQ;YACR,QAAQ;YACR,GAAG,KAAK,CAAC,QAAQ;SACjB;KACoC,CAAC;IAEvC,gHAAgH;IAChH,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QAC1E,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,2CAA2C,EAAE;YAC/D,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAClE,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC"}

package/dist/billing/usage/record-code-session-usage.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Record code-session compute usage against the session owner's billing
+ * subject.
+ *
+ * A Build-mode `agent/code-session` (WS3) is a PERSISTENT workspace bound to
+ * a host target: either a platform Host (`hardware: 'consumer'` — the user's
+ * laptop daemon or a managed droplet) or cloud (`hardware: 'cloud'` — a
+ * Cloudflare Sandbox). Compute is metered in `compute_second`, exactly like
+ * sandbox uptime, but a code-session lives on the internal-service heartbeat
+ * path (no user cookie) so it bills against the session owner's
+ * `billingUserId` / `organizationId` like `record-sandbox-uptime` /
+ * `record-platform-resource`.
+ *
+ * Consumer / local-host sessions are FREE: this helper forwards
+ * `hardware: 'consumer'` and attaches no cost basis, and the rating engine
+ * short-circuits consumer hardware to zero credits
+ * (`consumer-local-free`) — the same rule `recordGenerationUsage` applies to
+ * LM Studio / Ollama generations. Cloud sessions attach the placeholder
+ * `compute_second` cost basis from `build-session-cost-basis.ts`.
+ *
+ * Design constraints (inherited from record-sandbox-uptime.ts):
+ *   - MUST NOT fail the heartbeat / teardown path. Returns void; swallows
+ *     errors with structured log via the wrapped emitter.
+ *   - MUST be time-bounded (the wrapped emitter caps at 500ms).
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import type { CostBasis } from '../rating/schemas/cost-basis.ts';
+import type { HardwarePath } from '../rating/schemas/rated-usage.ts';
+import { type PlatformResourceReason } from './record-platform-resource.ts';
+import type { BillingEventMetadata } from './delivery.ts';
+/** The metadata this emitter's input accepts: JSON values, undefined entries dropped. */
+export type { BillingEventMetadata };
+export interface RecordCodeSessionUsageInput {
+    /** Origin of the account app. Omit to skip metering (dev without account). */
+    accountOrigin: string | null | undefined;
+    /** `VIBES_INTERNAL_SERVICE_TOKEN`. Omit to skip metering. */
+    internalServiceToken: string | null | undefined;
+    /**
+     * Billing subject — same resolution rules as `record-sandbox-uptime`.
+     * Either user, org, or both.
+     */
+    billingUserId?: string | null;
+    organizationId?: string | null;
+    /** Stable code-session id (powers the resource id + metadata). */
+    sessionId: string;
+    /** Repository the session is bound to (analytics-only). */
+    repositoryId?: string | null;
+    /** Host the session executes on (platform Host id, or 'cloud'). */
+    hostId?: string | null;
+    /**
+     * Compute consumed since the last emission. Provide EITHER
+     * `computeSeconds` (preferred — matches the `compute_second` unit) OR
+     * `minutes` (converted to seconds). When both are given, `computeSeconds`
+     * wins.
+     */
+    computeSeconds?: number;
+    minutes?: number;
+    /**
+     * Hardware path. `'consumer'` (a platform Host: laptop / droplet) is
+     * FREE — no cost basis emitted, rating engine zeroes it. `'cloud'`
+     * (a Cloudflare Sandbox) is rated with the placeholder compute rate.
+     * Defaults to `'cloud'` (the vibes-managed path).
+     */
+    hardware?: HardwarePath;
+    /**
+     * Cost basis override. When omitted, cloud sessions use the placeholder
+     * `compute_second` quote from `build-session-cost-basis.ts`; consumer
+     * sessions emit no cost basis at all (free).
+     */
+    costBasis?: CostBasis[];
+    /** Why this emission fired — heartbeat tick, teardown final, manual, or reconciler retry. */
+    reason: PlatformResourceReason;
+    /** Caller-provided extras merged into metadata. */
+    metadata?: BillingEventMetadata;
+    /** Optional audit-row callbacks. Same shape as record-platform-resource. */
+    journal?: {
+        onSuccess?: () => Promise<void> | void;
+        onFailure?: (info: {
+            reason: 'http' | 'timeout' | 'error' | 'skip';
+            message: string;
+        }) => Promise<void> | void;
+    };
+}
+/**
+ * Fire-and-forget rated emission for code-session compute. Consumer / local
+ * hardware is free (no cost basis, rating engine zeroes it); cloud sessions
+ * are rated in `compute_second` against the placeholder rate.
+ */
+export declare function recordCodeSessionUsage(runtime: RuntimeRef, input: RecordCodeSessionUsageInput): void;
+//# sourceMappingURL=record-code-session-usage.d.ts.map

package/dist/billing/usage/record-code-session-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-code-session-usage.d.ts","sourceRoot":"","sources":["../../../src/billing/usage/record-code-session-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAGrE,OAAO,EAEN,KAAK,sBAAsB,EAC3B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,yFAAyF;AACzF,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAQrC,MAAM,WAAW,2BAA2B;IAC3C,8EAA8E;IAC9E,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,6DAA6D;IAC7D,oBAAoB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAChD;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB,6FAA6F;IAC7F,MAAM,EAAE,sBAAsB,CAAC;IAC/B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,4EAA4E;IAC5E,OAAO,CAAC,EAAE;QACT,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE;YAClB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;YAC9C,OAAO,EAAE,MAAM,CAAC;SAChB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;KAC3B,CAAC;CACF;AAYD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,2BAA2B,GAAG,IAAI,CAuCpG"}

package/dist/billing/usage/record-code-session-usage.js

@@ -0,0 +1,85 @@
+/**
+ * Record code-session compute usage against the session owner's billing
+ * subject.
+ *
+ * A Build-mode `agent/code-session` (WS3) is a PERSISTENT workspace bound to
+ * a host target: either a platform Host (`hardware: 'consumer'` — the user's
+ * laptop daemon or a managed droplet) or cloud (`hardware: 'cloud'` — a
+ * Cloudflare Sandbox). Compute is metered in `compute_second`, exactly like
+ * sandbox uptime, but a code-session lives on the internal-service heartbeat
+ * path (no user cookie) so it bills against the session owner's
+ * `billingUserId` / `organizationId` like `record-sandbox-uptime` /
+ * `record-platform-resource`.
+ *
+ * Consumer / local-host sessions are FREE: this helper forwards
+ * `hardware: 'consumer'` and attaches no cost basis, and the rating engine
+ * short-circuits consumer hardware to zero credits
+ * (`consumer-local-free`) — the same rule `recordGenerationUsage` applies to
+ * LM Studio / Ollama generations. Cloud sessions attach the placeholder
+ * `compute_second` cost basis from `build-session-cost-basis.ts`.
+ *
+ * Design constraints (inherited from record-sandbox-uptime.ts):
+ *   - MUST NOT fail the heartbeat / teardown path. Returns void; swallows
+ *     errors with structured log via the wrapped emitter.
+ *   - MUST be time-bounded (the wrapped emitter caps at 500ms).
+ */
+import { getLogger } from '@vibesdotdev/logging';
+import { FEATURE_SLUGS } from "../schemas/core/feature-slugs.js";
+import { codeSessionComputeCostBasis } from "./build-session-cost-basis.js";
+import { recordPlatformResource } from "./record-platform-resource.js";
+function log(runtime) {
+    return getLogger('account', runtime).child({ context: 'record-code-session-usage' });
+}
+const SECONDS_PER_MINUTE = 60;
+function resolveComputeSeconds(input) {
+    if (input.computeSeconds !== undefined && Number.isFinite(input.computeSeconds)) {
+        return input.computeSeconds;
+    }
+    if (input.minutes !== undefined && Number.isFinite(input.minutes)) {
+        return input.minutes * SECONDS_PER_MINUTE;
+    }
+    return 0;
+}
+/**
+ * Fire-and-forget rated emission for code-session compute. Consumer / local
+ * hardware is free (no cost basis, rating engine zeroes it); cloud sessions
+ * are rated in `compute_second` against the placeholder rate.
+ */
+export function recordCodeSessionUsage(runtime, input) {
+    const computeSeconds = resolveComputeSeconds(input);
+    if (computeSeconds <= 0) {
+        log(runtime).debug('recordCodeSessionUsage: zero compute; skipping', {
+            sessionId: input.sessionId,
+            reason: input.reason
+        });
+        return;
+    }
+    const hardware = input.hardware ?? 'cloud';
+    // Consumer/local-host sessions run on the user's own hardware — never
+    // attach a cost basis (the rating engine short-circuits consumer to zero
+    // regardless, but omitting it keeps the ledger metadata honest about the
+    // free path). Cloud sessions get the placeholder compute rate.
+    const costBasis = input.costBasis ?? (hardware === 'consumer' ? undefined : codeSessionComputeCostBasis());
+    recordPlatformResource(runtime, {
+        accountOrigin: input.accountOrigin,
+        internalServiceToken: input.internalServiceToken,
+        billingUserId: input.billingUserId,
+        organizationId: input.organizationId,
+        featureSlug: FEATURE_SLUGS['code-execution-seconds'],
+        surface: 'build.code-session',
+        resourceId: input.sessionId,
+        measuredUnits: { compute_second: computeSeconds },
+        costBasis,
+        hardware,
+        reason: input.reason,
+        metadata: {
+            sessionId: input.sessionId,
+            repositoryId: input.repositoryId ?? null,
+            hostId: input.hostId ?? null,
+            computeSeconds,
+            ...input.metadata
+        },
+        journal: input.journal
+    });
+}
+//# sourceMappingURL=record-code-session-usage.js.map

package/dist/billing/usage/record-code-session-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-code-session-usage.js","sourceRoot":"","sources":["../../../src/billing/usage/record-code-session-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAIjD,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EACN,sBAAsB,EAEtB,MAAM,+BAA+B,CAAC;AAMvC,SAAS,GAAG,CAAC,OAAmB;IAC/B,OAAO,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAsD9B,SAAS,qBAAqB,CAAC,KAAkC;IAChE,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC,cAAc,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC,OAAO,GAAG,kBAAkB,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAmB,EAAE,KAAkC;IAC7F,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,gDAAgD,EAAE;YACpE,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IAED,MAAM,QAAQ,GAAiB,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC;IACzD,sEAAsE;IACtE,yEAAyE;IACzE,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,SAAS,GACd,KAAK,CAAC,SAAS,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAE1F,sBAAsB,CAAC,OAAO,EAAE;QAC/B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,aAAa,CAAC,wBAAwB,CAAC;QACpD,OAAO,EAAE,oBAAoB;QAC7B,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,aAAa,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE;QACjD,SAAS;QACT,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE;YACT,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;YAC5B,cAAc;YACd,GAAG,KAAK,CAAC,QAAQ;SACjB;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAC;AACJ,CAAC"}