@vibesdotdev/account 0.0.0-stage → 1.0.0-rc.3

package/dist/billing/usage/record-generation-usage.d.ts

@@ -0,0 +1,163 @@
+/**
+ * Record post-hoc AI generation usage against the account billing subject.
+ *
+ * Motivation
+ * ----------
+ * The endpoint wrapper's `billing.credits(feature, amount)` deducts a FLAT
+ * credit count BEFORE the handler runs. That covers quota enforcement
+ * ("can this user invoke this endpoint?") but is blind to:
+ *   - actual tokens generated (short reply vs 32k-token completion)
+ *   - which model was used (GLM-4.7 Flash at $0.40/M output vs Kimi K2.6 at $4/M)
+ *
+ * This helper records a precise, post-hoc usage event AFTER the generation
+ * completes, carrying modelId, resolved pricing tier, and token counts so the
+ * billing system has the information it needs for accurate accounting and
+ * per-tier reconciliation.
+ *
+ * Design constraints
+ * ------------------
+ * - MUST NOT fail the calling endpoint. A billing-API hiccup cannot lose a
+ *   generation. Always returns void and swallows errors with a structured log.
+ * - MUST be time-bounded. 5000ms hard cap via AbortController so a wedged
+ *   account service can't stall the response to the caller. Earlier the cap
+ *   was 500ms, which was tight enough that the legitimate POST regularly
+ *   aborted (and a subtle namespace bug that prevented the call from being
+ *   issued at all went undetected because everything aborted silently
+ *   anyway). All failure modes log at `error` with structured context so
+ *   they show up in prod log aggregation.
+ * - MUST forward the caller's live request authority. Browser calls normally
+ *   carry the verified Bearer principal; the runtime and resolved
+ *   credential/binding carry auth (no cookie path). Neither credential is persisted.
+ *
+ * Pricing tier resolution
+ * -----------------------
+ * To avoid coupling this helper to `apps/ai`'s model catalog, this helper
+ * ships a small, intentionally-conservative lookup of known premium models.
+ * Anything not in the table defaults to `standard`. Callers that care about
+ * precise tiering can pass `pricingTier` explicitly (recommended path when
+ * the caller already resolved it from `prod-defaults.ts`).
+ */
+import type { RuntimeRef } from '@vibesdotdev/kernel';
+import { type BillingEventMetadata } from './delivery.ts';
+import type { CostBasis } from '../rating/schemas/cost-basis.ts';
+import type { HardwarePath, MeasuredUnits } from '../rating/schemas/rated-usage.ts';
+/** The metadata this emitter's input accepts: JSON values, undefined entries dropped. */
+export type { BillingEventMetadata };
+export type PricingTier = 'cheap' | 'standard' | 'premium' | 'local';
+/**
+ * Which surface triggered the generation. Used in usage metadata for
+ * dashboards + reconciliation, and as the logical bucket key when feature
+ * slugs get split per-tier in a future migration.
+ */
+export type GenerationSurface = 'chat' | 'ai.text' | 'ai.stream' | 'ai.audio' | 'ai.image' | 'ai.ocr' | 'ai.embedding' | 'ai.transcription' | 'tools.agent.run' | 'tools.agent.stream' | 'tools.agent.test' | 'workbench.execution';
+export interface RecordGenerationUsageInput {
+    /** Canonical feature slug from `account` FEATURE_SLUGS (e.g. `ai-text-tokens`). */
+    featureSlug: string;
+    /** Origin of the account app. Omit to skip metering (dev without account). */
+    accountOrigin: string | null | undefined;
+    /** Verified Bearer header to forward for request-bound server-to-server auth. */
+    authorization?: string;
+    /** Origin header — Better Auth rejects cross-origin POSTs without one. */
+    callerOrigin: string;
+    /** Which app surface the generation came from. Stored in metadata. */
+    surface: GenerationSurface;
+    /**
+     * Per-unit measured quantities. Keys must match `CostBasisUnits`
+     * (`input_tokens`, `output_tokens`, `cached_input_tokens`,
+     * `cache_write_5m_tokens`, `cache_write_1h_tokens`, `image`,
+     * `audio_minute`, `request`, `gb_month`, `gb_egress`,
+     * `compute_second`, `gpu_second`). The receiver routes this through
+     * the rating engine for a fully-reproducible charge.
+     */
+    measuredUnits: MeasuredUnits;
+    /**
+     * Resolved cost basis for the model/provider serving this request.
+     * Caller looks it up through its host-composed
+     * `@vibesdotdev/ai/models/cost-basis-resolver#createCostBasisResolver(...)`
+     * instance, optionally with a pricing cache.
+     *
+     * When omitted, the rating engine applies the safety heuristic
+     * (SPEC §10: never zero).
+     */
+    costBasis?: CostBasis[];
+    /**
+     * Hardware path. `'consumer'` short-circuits the rating engine to
+     * zero credits — used when the request was served by the user's own
+     * machine (LM Studio, Ollama, etc.). `'cloud'` is the default for
+     * vibes-operated infrastructure. `'hybrid'` is for split paths where
+     * consumer compute runs alongside cloud facilitation (the caller is
+     * responsible for emitting both events separately).
+     *
+     * When omitted, the emitter derives consumer-vs-cloud from
+     * `modelId` via `isLocalModelId()` and defaults to `'cloud'`.
+     */
+    hardware?: HardwarePath;
+    /** Resolved model ID (e.g. `@cf/moonshotai/kimi-k2.6`). Powers cost-basis lookup + analytics. */
+    modelId?: string | null;
+    /** Resolved pricing tier if the caller already knows it (analytics-only). */
+    pricingTier?: PricingTier;
+    /** Optional token breakdown for richer analytics. */
+    inputTokens?: number;
+    outputTokens?: number;
+    /**
+     * The acting member's active org id, for org-first opt-in billing. When
+     * set (and the org has opted in to paying for members, the member is under
+     * their per-period allocation, and the org pool has funds), the charge
+     * routes to the org credit pool; otherwise it falls back to the member's
+     * own user pool. Leave unset for non-member/system usage.
+     */
+    memberActiveOrgId?: string | null;
+    /** Any extra caller metadata to merge into the usage record. */
+    metadata?: BillingEventMetadata;
+    /** Optional fetch implementation for transport when ACCOUNT_SERVICE binding is unavailable. */
+    fetch?: typeof globalThis.fetch;
+}
+declare function resolvePricingTier(modelId: string | null | undefined): PricingTier;
+/**
+ * Rated usage record. Returns the in-flight HTTP promise (resolves when the
+ * record lands or fails — never rejects; failures log structured context).
+ *
+ * IMPORTANT: in a Cloudflare Worker the returned promise MUST be kept alive
+ * past the response, or workerd cancels the subrequest on isolate teardown and
+ * the charge silently never lands (this is why prod had 0 usage_records). Use
+ * `meterGenerationUsage(runtime, platform, input)` at request-handler call sites — it
+ * registers this promise with `ctx.waitUntil`. Only `await` it directly when
+ * you are already inside a `waitUntil`-backed background task.
+ *
+ * Phase 6 removed the legacy `quantity`-only path; callers MUST pass
+ * `measuredUnits`. The receiver runs the rating engine + pool routing
+ * for a fully-reproducible charge.
+ */
+export declare function recordGenerationUsage(runtime: RuntimeRef, input: RecordGenerationUsageInput): Promise<void>;
+/**
+ * Record rated usage from inside a request handler, keeping the HTTP call alive
+ * past the response via `ctx.waitUntil`.
+ *
+ * Pass `event.platform` (SvelteKit) — the Cloudflare ExecutionContext lives at
+ * `platform.context`. When `waitUntil` is unavailable (dev / non-worker), the
+ * promise is left to run on the loop. This is the canonical call site for
+ * metering: a bare `recordGenerationUsage(...)` whose promise is dropped gets
+ * cancelled on isolate teardown in workerd and never charges (the prod
+ * `0 usage_records` bug). `waitUntil` is called on the platform's own context:
+ * workerd throws "Illegal invocation" for an unbound call, which once floated
+ * every record.
+ */
+export declare function meterGenerationUsage<Platform>(runtime: RuntimeRef, platform: Platform, input: RecordGenerationUsageInput): void;
+export { resolvePricingTier };
+/** Token counts read from a generation response; `total` falls back to `input + output`. */
+export type GenerationTokenUsage = {
+    input: number;
+    output: number;
+    total: number;
+};
+/**
+ * Pull `{ inputTokens, outputTokens, totalTokens }` out of a generation
+ * response's `.metadata.usage` / `.metadata.tokens*` best-effort, handling
+ * the shapes returned by Workers AI, LM Studio, OpenAI-compat providers,
+ * and the chat fallback path.
+ *
+ * Returns `{ total: 0 }` when nothing can be extracted — the caller should
+ * then decide whether to skip the record or charge a per-request minimum.
+ */
+export declare function extractTokenUsage<Metadata>(metadata: Metadata): GenerationTokenUsage;
+//# sourceMappingURL=record-generation-usage.d.ts.map

package/dist/billing/usage/record-generation-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-generation-usage.d.ts","sourceRoot":"","sources":["../../../src/billing/usage/record-generation-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAEtF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEpF,yFAAyF;AACzF,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAQrC,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;AAsBrE;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAC1B,MAAM,GACN,SAAS,GACT,WAAW,GACX,UAAU,GACV,UAAU,GACV,QAAQ,GACR,cAAc,GACd,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,CAAC;AAEzB,MAAM,WAAW,0BAA0B;IAC1C,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,OAAO,EAAE,iBAAiB,CAAC;IAC3B;;;;;;;OAOG;IACH,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACxB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,iGAAiG;IACjG,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,6EAA6E;IAC7E,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,gEAAgE;IAChE,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,+FAA+F;IAC/F,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAChC;AAuBD,iBAAS,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,WAAW,CAK3E;AAUD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CA6G3G;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAC5C,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,0BAA0B,GAC/B,IAAI,CAWN;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC;AA4B9B,4FAA4F;AAC5F,MAAM,MAAM,oBAAoB,GAAG;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACd,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,oBAAoB,CAwBpF"}

package/dist/billing/usage/record-generation-usage.js

@@ -0,0 +1,294 @@
+/**
+ * Record post-hoc AI generation usage against the account billing subject.
+ *
+ * Motivation
+ * ----------
+ * The endpoint wrapper's `billing.credits(feature, amount)` deducts a FLAT
+ * credit count BEFORE the handler runs. That covers quota enforcement
+ * ("can this user invoke this endpoint?") but is blind to:
+ *   - actual tokens generated (short reply vs 32k-token completion)
+ *   - which model was used (GLM-4.7 Flash at $0.40/M output vs Kimi K2.6 at $4/M)
+ *
+ * This helper records a precise, post-hoc usage event AFTER the generation
+ * completes, carrying modelId, resolved pricing tier, and token counts so the
+ * billing system has the information it needs for accurate accounting and
+ * per-tier reconciliation.
+ *
+ * Design constraints
+ * ------------------
+ * - MUST NOT fail the calling endpoint. A billing-API hiccup cannot lose a
+ *   generation. Always returns void and swallows errors with a structured log.
+ * - MUST be time-bounded. 5000ms hard cap via AbortController so a wedged
+ *   account service can't stall the response to the caller. Earlier the cap
+ *   was 500ms, which was tight enough that the legitimate POST regularly
+ *   aborted (and a subtle namespace bug that prevented the call from being
+ *   issued at all went undetected because everything aborted silently
+ *   anyway). All failure modes log at `error` with structured context so
+ *   they show up in prod log aggregation.
+ * - MUST forward the caller's live request authority. Browser calls normally
+ *   carry the verified Bearer principal; the runtime and resolved
+ *   credential/binding carry auth (no cookie path). Neither credential is persisted.
+ *
+ * Pricing tier resolution
+ * -----------------------
+ * To avoid coupling this helper to `apps/ai`'s model catalog, this helper
+ * ships a small, intentionally-conservative lookup of known premium models.
+ * Anything not in the table defaults to `standard`. Callers that care about
+ * precise tiering can pass `pricingTier` explicitly (recommended path when
+ * the caller already resolved it from `prod-defaults.ts`).
+ */
+import * as z from 'zod/v4';
+import { getLogger } from '@vibesdotdev/logging';
+import { CapabilityError, CaughtFailureSchema, settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { deliveryFailure, keepAlive } from "./delivery.js";
+import { AccountServiceBindingSchema } from "../../server/account-service-binding.js";
+function log(runtime) {
+    return getLogger('account', runtime).child({ context: 'record-generation-usage' });
+}
+const USAGE_RECORD_TIMEOUT_MS = 5000;
+/**
+ * Provider-type tokens (e.g. `lmstudio:`, `ollama:`, `comfyui:`,
+ * `automatic1111:`) that prefix modelIds for locally-hosted providers.
+ *
+ * Generations served by these providers run on the user's own hardware
+ * (consumer scope) and should NOT charge credits against the vibes.dev
+ * billing subject. The check here mirrors the canonical
+ * `LOCAL_PROVIDER_TYPES` set in
+ * `@vibesdotdev/ai/providers-runtime/client/discovery-helpers` — duplicated
+ * to keep this module free of an `ai` package dependency (would invert the
+ * layering: `account` is meant to be below `ai`).
+ */
+const LOCAL_MODEL_ID_PREFIXES = ['lmstudio:', 'ollama:', 'comfyui:', 'automatic1111:'];
+function isLocalModelId(modelId) {
+    if (!modelId)
+        return false;
+    const lowered = modelId.toLowerCase();
+    return LOCAL_MODEL_ID_PREFIXES.some((prefix) => lowered.startsWith(prefix));
+}
+/**
+ * Known premium-tier model IDs. Kept short and conservative — callers that
+ * need precise tiering should pass `pricingTier` explicitly (resolved from
+ * `apps/ai/src/lib/config/prod-defaults.ts`).
+ */
+const PREMIUM_MODEL_IDS = new Set([
+    '@cf/moonshotai/kimi-k2.6',
+    '@cf/moonshotai/kimi-k2.5',
+    '@cf/meta/llama-3.3-70b-instruct-fp8-fast',
+    '@cf/meta/llama-4-scout-17b-16e-instruct'
+]);
+const CHEAP_MODEL_IDS = new Set([
+    '@cf/zai-org/glm-4.7-flash',
+    '@cf/baai/bge-m3',
+    '@cf/baai/bge-base-en-v1.5',
+    '@cf/qwen/qwen3-embedding-0.6b',
+    '@cf/openai/whisper-large-v3-turbo',
+    '@cf/meta/llama-3.1-8b-instruct'
+]);
+function resolvePricingTier(modelId) {
+    if (!modelId)
+        return 'standard';
+    if (PREMIUM_MODEL_IDS.has(modelId))
+        return 'premium';
+    if (CHEAP_MODEL_IDS.has(modelId))
+        return 'cheap';
+    return 'standard';
+}
+function totalMeasuredQuantity(units) {
+    let total = 0;
+    for (const value of Object.values(units)) {
+        if (value !== undefined && Number.isFinite(value) && value > 0)
+            total += value;
+    }
+    return total;
+}
+/**
+ * Rated usage record. Returns the in-flight HTTP promise (resolves when the
+ * record lands or fails — never rejects; failures log structured context).
+ *
+ * IMPORTANT: in a Cloudflare Worker the returned promise MUST be kept alive
+ * past the response, or workerd cancels the subrequest on isolate teardown and
+ * the charge silently never lands (this is why prod had 0 usage_records). Use
+ * `meterGenerationUsage(runtime, platform, input)` at request-handler call sites — it
+ * registers this promise with `ctx.waitUntil`. Only `await` it directly when
+ * you are already inside a `waitUntil`-backed background task.
+ *
+ * Phase 6 removed the legacy `quantity`-only path; callers MUST pass
+ * `measuredUnits`. The receiver runs the rating engine + pool routing
+ * for a fully-reproducible charge.
+ */
+export function recordGenerationUsage(runtime, input) {
+    if (totalMeasuredQuantity(input.measuredUnits) <= 0)
+        return Promise.resolve();
+    if (!input.accountOrigin) {
+        log(runtime).debug('recordGenerationUsage: accountOrigin missing; skipping', {
+            surface: input.surface,
+            feature: input.featureSlug
+        });
+        return Promise.resolve();
+    }
+    const accountOrigin = input.accountOrigin;
+    // Local providers run on the user's own hardware (LM Studio, Ollama,
+    // ComfyUI, Automatic1111). The vibes.dev billing subject should not be
+    // charged for compute the user is providing themselves. Recognized via
+    // the explicit `hardware: 'consumer'` flag, the legacy `pricingTier:
+    // 'local'`, or a `lmstudio:` / `ollama:` / etc. modelId prefix.
+    const isConsumer = input.hardware === 'consumer' || input.pricingTier === 'local' || isLocalModelId(input.modelId);
+    if (isConsumer) {
+        log(runtime).debug('recordGenerationUsage: consumer hardware; skipping billing', {
+            surface: input.surface,
+            feature: input.featureSlug,
+            modelId: input.modelId
+        });
+        return Promise.resolve();
+    }
+    const tier = input.pricingTier ?? resolvePricingTier(input.modelId);
+    const effectiveHardware = input.hardware ?? 'cloud';
+    // Ride the ACCOUNT_SERVICE service binding when the calling worker has one
+    // registered (chat-web and ai-web both do) — the public-origin fetch is a
+    // paid egress subrequest on EVERY generation. If binding is absent, use the
+    // optional caller-supplied fetch, else throw a CapabilityError.
+    const accountServiceBinding = runtime.getBinding('ACCOUNT_SERVICE', AccountServiceBindingSchema);
+    const usageFetch = accountServiceBinding
+        ? accountServiceBinding.fetch.bind(accountServiceBinding)
+        : input.fetch;
+    if (!usageFetch) {
+        return Promise.reject(new CapabilityError('recordGenerationUsage: neither the ACCOUNT_SERVICE binding nor an input.fetch is declared.', 'INVALID_INPUT', { reason: 'account-transport-undeclared' }));
+    }
+    const authorization = input.authorization?.trim();
+    const serviceHeaders = {
+        'Content-Type': 'application/json',
+        Accept: 'application/json',
+        Origin: input.callerOrigin
+    };
+    const headers = authorization ? { ...serviceHeaders, Authorization: authorization } : serviceHeaders;
+    return settle(() => runtime.lifecycle.wait((signal) => usageFetch(`${accountOrigin.replace(/\/$/, '')}/api/account/billing/usage/record`, {
+        method: 'POST',
+        headers,
+        body: JSON.stringify({
+            featureSlug: input.featureSlug,
+            measuredUnits: input.measuredUnits,
+            costBasis: input.costBasis,
+            hardware: effectiveHardware,
+            memberActiveOrgId: input.memberActiveOrgId ?? null,
+            metadata: {
+                surface: input.surface,
+                modelId: input.modelId ?? null,
+                pricingTier: tier,
+                hardware: effectiveHardware,
+                inputTokens: input.inputTokens ?? null,
+                outputTokens: input.outputTokens ?? null,
+                ...input.metadata
+            }
+        }),
+        signal
+    }), { timeoutMs: USAGE_RECORD_TIMEOUT_MS, reason: 'account billing usage record' })).then((delivered) => {
+        const failure = deliveryFailure(delivered);
+        if (!failure)
+            return;
+        const context = {
+            surface: input.surface,
+            feature: input.featureSlug,
+            quantity: totalMeasuredQuantity(input.measuredUnits)
+        };
+        // Every failure logs at `error`: a silent miss here undercharges.
+        if (failure.reason === 'http') {
+            log(runtime).error('recordGenerationUsage: rejected', { ...context, tier, status: failure.status });
+        }
+        else if (failure.reason === 'timeout') {
+            log(runtime).error('recordGenerationUsage: timed out', {
+                ...context,
+                timeoutMs: USAGE_RECORD_TIMEOUT_MS,
+                accountOrigin: input.accountOrigin,
+                modelId: input.modelId ?? null
+            });
+        }
+        else {
+            log(runtime).error('recordGenerationUsage: failed', {
+                ...context,
+                error: failure.error,
+                accountOrigin: input.accountOrigin,
+                modelId: input.modelId ?? null
+            });
+        }
+    });
+}
+/**
+ * Record rated usage from inside a request handler, keeping the HTTP call alive
+ * past the response via `ctx.waitUntil`.
+ *
+ * Pass `event.platform` (SvelteKit) — the Cloudflare ExecutionContext lives at
+ * `platform.context`. When `waitUntil` is unavailable (dev / non-worker), the
+ * promise is left to run on the loop. This is the canonical call site for
+ * metering: a bare `recordGenerationUsage(...)` whose promise is dropped gets
+ * cancelled on isolate teardown in workerd and never charges (the prod
+ * `0 usage_records` bug). `waitUntil` is called on the platform's own context:
+ * workerd throws "Illegal invocation" for an unbound call, which once floated
+ * every record.
+ */
+export function meterGenerationUsage(runtime, platform, input) {
+    // Metering never rejects: a refused record (no declared account transport) is logged here.
+    const recording = settle(() => recordGenerationUsage(runtime, input)).then((recorded) => {
+        if (recorded.ok)
+            return;
+        log(runtime).error('meterGenerationUsage: usage not recorded', {
+            surface: input.surface,
+            feature: input.featureSlug,
+            error: valueFreeFailure(CaughtFailureSchema.parse(recorded.cause))
+        });
+    });
+    keepAlive(log(runtime), 'meterGenerationUsage', platform, recording);
+}
+export { resolvePricingTier };
+/** The token counters providers report, read raw; each is coerced the way `Number()` reads it. */
+const providerTokenCountersSchema = z
+    .object({
+    totalTokens: z.unknown(),
+    promptTokens: z.unknown(),
+    completionTokens: z.unknown(),
+    inputTokens: z.unknown(),
+    outputTokens: z.unknown()
+})
+    .partial()
+    .loose();
+/** Generation response metadata: `usage` counters plus the flat token fields some providers use. */
+const generationTokenMetadataSchema = z
+    .object({
+    usage: providerTokenCountersSchema.optional().catch(undefined),
+    tokensPrompt: z.unknown(),
+    promptTokens: z.unknown(),
+    tokensCompletion: z.unknown(),
+    completionTokens: z.unknown(),
+    totalTokens: z.unknown(),
+    tokensUsed: z.unknown()
+})
+    .partial()
+    .loose();
+/**
+ * Pull `{ inputTokens, outputTokens, totalTokens }` out of a generation
+ * response's `.metadata.usage` / `.metadata.tokens*` best-effort, handling
+ * the shapes returned by Workers AI, LM Studio, OpenAI-compat providers,
+ * and the chat fallback path.
+ *
+ * Returns `{ total: 0 }` when nothing can be extracted — the caller should
+ * then decide whether to skip the record or charge a per-request minimum.
+ */
+export function extractTokenUsage(metadata) {
+    const read = generationTokenMetadataSchema.safeParse(metadata);
+    if (!read.success)
+        return { input: 0, output: 0, total: 0 };
+    const fields = read.data;
+    const usage = fields.usage;
+    const input = Number(usage?.promptTokens) ||
+        Number(usage?.inputTokens) ||
+        Number(fields.tokensPrompt) ||
+        Number(fields.promptTokens) ||
+        0;
+    const output = Number(usage?.completionTokens) ||
+        Number(usage?.outputTokens) ||
+        Number(fields.tokensCompletion) ||
+        Number(fields.completionTokens) ||
+        0;
+    const total = Number(usage?.totalTokens) || Number(fields.totalTokens) || Number(fields.tokensUsed) || input + output;
+    return { input, output, total };
+}
+//# sourceMappingURL=record-generation-usage.js.map

package/dist/billing/usage/record-generation-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-generation-usage.js","sourceRoot":"","sources":["../../../src/billing/usage/record-generation-usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,SAAS,EAA6B,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,2BAA2B,EAAE,MAAM,yCAAyC,CAAC;AAOtF,SAAS,GAAG,CAAC,OAAmB;IAC/B,OAAO,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAIrC;;;;;;;;;;;GAWG;AACH,MAAM,uBAAuB,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;AAEvF,SAAS,cAAc,CAAC,OAAkC;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7E,CAAC;AAoFD;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAS;IACzC,0BAA0B;IAC1B,0BAA0B;IAC1B,0CAA0C;IAC1C,yCAAyC;CACzC,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS;IACvC,2BAA2B;IAC3B,iBAAiB;IACjB,2BAA2B;IAC3B,+BAA+B;IAC/B,mCAAmC;IACnC,gCAAgC;CAChC,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,OAAkC;IAC7D,IAAI,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IAChC,IAAI,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAoB;IAClD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,KAAK,IAAI,KAAK,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAmB,EAAE,KAAiC;IAC3F,IAAI,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAE9E,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,wDAAwD,EAAE;YAC5E,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,WAAW;SAC1B,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;IAE1C,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,qEAAqE;IACrE,gEAAgE;IAChE,MAAM,UAAU,GACf,KAAK,CAAC,QAAQ,KAAK,UAAU,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjG,IAAI,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,4DAA4D,EAAE;YAChF,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,WAAW;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,IAAI,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,iBAAiB,GAAiB,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC;IAElE,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IACjG,MAAM,UAAU,GAAG,qBAAqB;QACvC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC;QACzD,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACf,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,OAAO,CAAC,MAAM,CACpB,IAAI,eAAe,CAClB,4FAA4F,EAC5F,eAAe,EACf,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAC1C,CACD,CAAC;IACH,CAAC;IACD,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG;QACtB,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE,KAAK,CAAC,YAAY;KACO,CAAC;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;IAErG,OAAO,MAAM,CAAC,GAAG,EAAE,CAClB,OAAO,CAAC,SAAS,CAAC,IAAI,CACrB,CAAC,MAAM,EAAE,EAAE,CACV,UAAU,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,mCAAmC,EAAE;QAClF,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,iBAAiB;YAC3B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,IAAI,IAAI;YAClD,QAAQ,EAAE;gBACT,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;gBAC9B,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,iBAAiB;gBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;gBACtC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;gBACxC,GAAG,KAAK,CAAC,QAAQ;aACjB;SACD,CAAC;QACF,MAAM;KACN,CAAC,EACH,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAC9E,CACD,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACpB,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,OAAO,GAAG;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,WAAW;YAC1B,QAAQ,EAAE,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC;SACpD,CAAC;QACF,kEAAkE;QAClE,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,CAAC;aAAM,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,kCAAkC,EAAE;gBACtD,GAAG,OAAO;gBACV,SAAS,EAAE,uBAAuB;gBAClC,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;aAC9B,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,+BAA+B,EAAE;gBACnD,GAAG,OAAO;gBACV,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;aAC9B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CACnC,OAAmB,EACnB,QAAkB,EAClB,KAAiC;IAEjC,2FAA2F;IAC3F,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvF,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,0CAA0C,EAAE;YAC9D,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,WAAW;YAC1B,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SAClE,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,sBAAsB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AACtE,CAAC;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B,kGAAkG;AAClG,MAAM,2BAA2B,GAAG,CAAC;KACnC,MAAM,CAAC;IACP,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CACzB,CAAC;KACD,OAAO,EAAE;KACT,KAAK,EAAE,CAAC;AAEV,oGAAoG;AACpG,MAAM,6BAA6B,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,KAAK,EAAE,2BAA2B,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9D,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACvB,CAAC;KACD,OAAO,EAAE;KACT,KAAK,EAAE,CAAC;AASV;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAW,QAAkB;IAC7D,MAAM,IAAI,GAAG,6BAA6B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAE3B,MAAM,KAAK,GACV,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC;QAC3B,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC3B,CAAC,CAAC;IAEH,MAAM,MAAM,GACX,MAAM,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAC/B,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC;QAC3B,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC/B,CAAC,CAAC;IAEH,MAAM,KAAK,GACV,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC;IAEzG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACjC,CAAC"}

package/dist/billing/usage/record-marketplace-tool-royalty.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Record a marketplace-tool royalty against the account billing subject.
+ *
+ * Mirrors `./record-generation-usage.ts`'s cross-service emitter shape:
+ * the caller (e.g. `apps/ai-web`, where a tool actually executes and the
+ * `tools` row — `marketplaceListed` / `creditRate` / `createdById` — is
+ * already in hand) POSTs to `apps/account-web`'s billing API rather than
+ * writing to the ledger directly (ai-web and account-web are separate
+ * deployed workers with separate D1 bindings).
+ *
+ * Unlike `recordGenerationUsage` (which deducts from the CALLING user's
+ * own balance), this is a two-sided ledger operation: charge the buyer
+ * `creditRate` credits AND credit the tool's creator their royalty share,
+ * in one request. The receiver (`payMarketplaceToolRoyalty` in
+ * account-web) does both writes and is the single place that enforces
+ * "no self-credit when buyer === creator" and "no royalty on a failed
+ * buyer charge".
+ *
+ * Design constraints (same rationale as `recordGenerationUsage`):
+ * - MUST NOT fail the calling tool execution. A billing hiccup cannot
+ *   fail a tool run that already succeeded. Always resolves, never
+ *   rejects; failures log structured context.
+ * - MUST be time-bounded (5s hard cap) so a wedged account service can't
+ *   stall the response to the caller.
+ * - MUST send the buyer `userId` in the JSON body. The live caller authenticates
+ *   as the tools service (`Authorization: Bearer` + `x-vibes-service-token`);
+ *   account-web charges `body.userId` on that bearer path. The creator id also
+ *   travels in the payload (ai-web already resolved it from its own `tools` table).
+ * - The returned promise MUST be kept alive past the response in a
+ *   Cloudflare Worker (see `meterMarketplaceToolRoyalty` /
+ *   `ctx.waitUntil`) — a floated promise gets cancelled on isolate
+ *   teardown and the royalty silently never lands.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+export interface RecordMarketplaceToolRoyaltyInput {
+    /** Stable identity of the agent execution that used the listing. */
+    runId: string;
+    /** Marketplace listing identity; for custom tools this is the tool id. */
+    listingId: string;
+    /** Origin of the account app. Omit to skip metering (dev without account). */
+    accountOrigin: string | null | undefined;
+    /** Verified Bearer header to forward. Live callers send the internal service token. */
+    authorization?: string;
+    /**
+     * Buyer charged for the listing use. Required on the bearer path;
+     * account-web answers 400 without it.
+     */
+    userId: string;
+    /** Origin header — Better Auth rejects cross-origin POSTs without one. */
+    callerOrigin: string;
+    /** The tool's id (ai-web `tools.id`). Stamped into ledger metadata. */
+    toolId: string;
+    /** The tool's display name, for ledger descriptions. */
+    toolName?: string | null;
+    /** Whether the tool is currently marketplace-listed (`tools.marketplaceListed`). */
+    marketplaceListed: boolean;
+    /** The tool's flat per-use royalty rate in credits (`tools.creditRate`). */
+    creditRate: number;
+    /** The tool's creator (`tools.createdById`). Null/undefined → no royalty (no owner to pay). */
+    creatorUserId: string | null | undefined;
+    /**
+     * Internal service token (`VIBES_INTERNAL_SERVICE_TOKEN`, resolved via
+     * `runtime.resolveCredential`) proving the tool facts above came from the
+     * tool-execution service's own DB read. account-web fail-closes the
+     * royalty (403) without it. Buyer identity is `userId` in the JSON body.
+     * Missing/empty → skip client-side (a misconfigured caller must not burn
+     * a doomed round trip).
+     */
+    serviceToken: string | null | undefined;
+}
+export interface MarketplaceToolRoyaltyOutcome {
+    skipped: boolean;
+    skipReason?: 'not-listed' | 'zero-rate' | 'self-use' | 'missing-creator';
+    buyerCharged: boolean;
+    buyerChargeCredits: number;
+    creatorCredited: boolean;
+    royaltyCredits: number;
+    platformFeeCredits: number;
+}
+/**
+ * POST the royalty event to account-web. Returns the in-flight promise
+ * (never rejects — failures log at `error` and resolve to void).
+ *
+ * Callers that only care about "fire and forget, keep the isolate alive"
+ * should use `meterMarketplaceToolRoyalty(runtime, platform, input)` below.
+ */
+export declare function recordMarketplaceToolRoyalty(runtime: RuntimeRef, input: RecordMarketplaceToolRoyaltyInput): Promise<void>;
+/**
+ * Record the royalty from inside a request handler, keeping the HTTP call
+ * alive past the response via `ctx.waitUntil` (same pattern and same "0
+ * usage_records" failure mode as `meterGenerationUsage` — see that
+ * function's docstring for why the bound-vs-unbound `waitUntil` call
+ * matters).
+ */
+export declare function meterMarketplaceToolRoyalty<Platform>(runtime: RuntimeRef, platform: Platform, input: RecordMarketplaceToolRoyaltyInput): void;
+//# sourceMappingURL=record-marketplace-tool-royalty.d.ts.map

package/dist/billing/usage/record-marketplace-tool-royalty.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-marketplace-tool-royalty.d.ts","sourceRoot":"","sources":["../../../src/billing/usage/record-marketplace-tool-royalty.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EAA4D,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAUhH,MAAM,WAAW,iCAAiC;IACjD,oEAAoE;IACpE,KAAK,EAAE,MAAM,CAAC;IACd,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,uFAAuF;IACvF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oFAAoF;IACpF,iBAAiB,EAAE,OAAO,CAAC;IAC3B,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,6BAA6B;IAC7C,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,iBAAiB,CAAC;IACzE,YAAY,EAAE,OAAO,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC3C,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,iCAAiC,GACtC,OAAO,CAAC,IAAI,CAAC,CAiGf;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,QAAQ,EACnD,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,QAAQ,EAClB,KAAK,EAAE,iCAAiC,GACtC,IAAI,CAEN"}