iobroker.ai-usage 0.2.0 → 0.3.0

package/build/lib/poll-engine.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/poll-engine.ts"],
-  "sourcesContent": ["import type { AccountConfig } from \"./pure-helpers\";\nimport { FetchError, type UsageProvider, type UsageSnapshot } from \"./provider\";\nimport { mapSnapshot, maxLimitPercent, type ObjectDef } from \"./snapshot-tree\";\nimport { computeTotals, type AccountStatus } from \"./totals\";\n\n/** Consecutive network failures after which an account is judged unreachable. */\nconst MAX_NETWORK_FAILURES = 3;\n/** First backoff after a rate-limit answer (ms); doubles per repeat. */\nconst BACKOFF_START_MS = 10 * 60 * 1000;\n/** Backoff ceiling (ms). */\nconst BACKOFF_MAX_MS = 60 * 60 * 1000;\n/** Stagger between the accounts' first polls (ms) so they never fire in one burst. */\nconst STAGGER_MS = 3000;\n\n/** The adapter callbacks the engine drives \u2014 narrow, so tests need no adapter mock. */\nexport interface EngineDeps {\n  /** Create or update an object. */\n  upsertObject(def: ObjectDef): Promise<void>;\n  /** Write a state value with ack. */\n  setState(id: string, value: boolean | number | string): void;\n  /** Schedule a repeating callback; returns a cancel handle. */\n  schedule(cb: () => void, ms: number): unknown;\n  /** Schedule a one-shot callback; returns a cancel handle. */\n  scheduleOnce(cb: () => void, ms: number): unknown;\n  /** Cancel a handle from schedule/scheduleOnce. */\n  cancel(handle: unknown): void;\n  /** Current time (ms since epoch) \u2014 injected for tests. */\n  now(): number;\n  /** Adapter log. */\n  log: { debug(m: string): void; info(m: string): void; warn(m: string): void; error(m: string): void };\n  /** Raise a user-facing notification (threshold crossing, broken credentials). */\n  notify?(accountName: string, message: string): void;\n}\n\n/** One account's runtime state inside the engine. */\ninterface AccountRuntime {\n  config: AccountConfig;\n  provider: UsageProvider;\n  status: AccountStatus;\n  /** Consecutive network failures. */\n  failCount: number;\n  /** Skip polls until this time (rate-limit backoff). */\n  skipUntil: number;\n  /** Current backoff length (ms). */\n  backoffMs: number;\n  /** Whether the auth-broken notification has been raised (reset on success). */\n  authNotified: boolean;\n  /** Object ids already created for this account (create-once cache). */\n  createdObjects: Set<string>;\n}\n\n/**\n * Drives the polling of all configured accounts: staggered starts, one independent\n * cycle per account, typed failure handling (auth = immediate + one notification,\n * rate-limit = backoff keeping last values, network = tolerant), warn-threshold\n * transitions and the adapter-wide totals. Pure orchestration \u2014 all IO is injected.\n */\nexport class PollEngine {\n  private readonly runtimes: AccountRuntime[] = [];\n  private readonly handles: unknown[] = [];\n  private stopped = false;\n\n  /**\n   * @param accounts the validated account configs\n   * @param providers each account id's provider (accounts without one are skipped)\n   * @param intervalSec the poll interval in seconds\n   * @param deps the injected adapter callbacks\n   */\n  public constructor(\n    accounts: readonly AccountConfig[],\n    providers: ReadonlyMap<string, UsageProvider>,\n    private readonly intervalSec: number,\n    private readonly deps: EngineDeps,\n  ) {\n    for (const config of accounts) {\n      const provider = providers.get(config.id);\n      if (!provider) {\n        deps.log.warn(`${config.name}: provider \"${config.provider}\" is not available \u2014 account skipped`);\n        continue;\n      }\n      this.runtimes.push({\n        config,\n        provider,\n        status: { reachable: false, warning: false },\n        failCount: 0,\n        skipUntil: 0,\n        backoffMs: BACKOFF_START_MS,\n        authNotified: false,\n        createdObjects: new Set(),\n      });\n    }\n  }\n\n  /** Create the static per-account and totals objects, then arm the poll cycles. */\n  public async start(): Promise<void> {\n    for (const runtime of this.runtimes) {\n      await this.createAccountSkeleton(runtime);\n    }\n    await this.createTotalsSkeleton();\n    await this.writeTotals();\n    this.runtimes.forEach((runtime, index) => {\n      this.handles.push(\n        this.deps.scheduleOnce(() => void this.pollAccount(runtime), index * STAGGER_MS),\n        this.deps.schedule(() => void this.pollAccount(runtime), this.intervalSec * 1000),\n      );\n    });\n  }\n\n  /** Cancel every timer. Synchronous \u2014 safe from onUnload. */\n  public stop(): void {\n    this.stopped = true;\n    for (const handle of this.handles) {\n      this.deps.cancel(handle);\n    }\n    this.handles.length = 0;\n  }\n\n  /** The account ids the engine drives (for the stale-object cleanup). */\n  public get accountIds(): string[] {\n    return this.runtimes.map(runtime => runtime.config.id);\n  }\n\n  /**\n   * Poll one account now (also used by the staggered first run).\n   *\n   * @param runtime the account's runtime\n   */\n  private async pollAccount(runtime: AccountRuntime): Promise<void> {\n    if (this.stopped) {\n      return;\n    }\n    const { config } = runtime;\n    if (this.deps.now() < runtime.skipUntil) {\n      this.deps.log.debug(`${config.name}: in rate-limit backoff \u2014 poll skipped`);\n      return;\n    }\n    try {\n      const snapshot = await runtime.provider.fetch();\n      runtime.failCount = 0;\n      runtime.backoffMs = BACKOFF_START_MS;\n      runtime.authNotified = false;\n      runtime.status.snapshot = snapshot;\n      runtime.status.reachable = true;\n      await this.applySnapshot(runtime, snapshot);\n    } catch (e) {\n      this.handleFailure(runtime, e);\n    }\n    this.writeAccountInfo(runtime);\n    await this.writeTotals();\n  }\n\n  /**\n   * Write a successful snapshot: upsert new objects (create-once cache), write the\n   * values, and run the warn-threshold transition.\n   *\n   * @param runtime the account's runtime\n   * @param snapshot the fetched snapshot\n   */\n  private async applySnapshot(runtime: AccountRuntime, snapshot: UsageSnapshot): Promise<void> {\n    const { config } = runtime;\n    const { objects, writes } = mapSnapshot(config.id, config.name, config.provider, snapshot);\n    for (const object of objects) {\n      if (!runtime.createdObjects.has(object.id)) {\n        await this.deps.upsertObject(object);\n        runtime.createdObjects.add(object.id);\n      }\n    }\n    for (const write of writes) {\n      this.deps.setState(write.id, write.value);\n    }\n    const percent = maxLimitPercent(snapshot) ?? 0;\n    const wasWarning = runtime.status.warning;\n    runtime.status.warning = percent >= config.warnThreshold;\n    this.deps.setState(`${config.id}.warning`, runtime.status.warning);\n    this.deps.setState(`${config.id}.limitReached`, percent >= 100);\n    if (runtime.status.warning && !wasWarning) {\n      const message = `${config.name}: usage at ${Math.round(percent)} % (threshold ${config.warnThreshold} %)`;\n      this.deps.log.warn(message);\n      this.deps.notify?.(config.name, message);\n    }\n  }\n\n  /**\n   * Classify a fetch failure: auth = unreachable + ONE notification until it recovers;\n   * rate-limit = backoff, last values stay; network = tolerated MAX_NETWORK_FAILURES times.\n   *\n   * @param runtime the account's runtime\n   * @param error the thrown error\n   */\n  private handleFailure(runtime: AccountRuntime, error: unknown): void {\n    const { config } = runtime;\n    const message = error instanceof Error ? error.message : String(error);\n    if (error instanceof FetchError && error.kind === \"auth\") {\n      runtime.status.reachable = false;\n      if (!runtime.authNotified) {\n        runtime.authNotified = true;\n        const text = `${config.name}: credentials rejected \u2014 ${message}`;\n        this.deps.log.warn(text);\n        this.deps.notify?.(config.name, text);\n      }\n      return;\n    }\n    if (error instanceof FetchError && error.kind === \"rate-limit\") {\n      runtime.skipUntil = this.deps.now() + runtime.backoffMs;\n      this.deps.log.warn(\n        `${config.name}: rate-limited \u2014 backing off for ${Math.round(runtime.backoffMs / 60000)} min, keeping last values`,\n      );\n      runtime.backoffMs = Math.min(BACKOFF_MAX_MS, runtime.backoffMs * 2);\n      return;\n    }\n    runtime.failCount++;\n    this.deps.log.debug(`${config.name}: fetch failed (${message}), attempt ${runtime.failCount}`);\n    if (runtime.failCount >= MAX_NETWORK_FAILURES) {\n      runtime.status.reachable = false;\n    }\n  }\n\n  /**\n   * Write one account's info states (reachable, last update).\n   *\n   * @param runtime the account's runtime\n   */\n  private writeAccountInfo(runtime: AccountRuntime): void {\n    const { config } = runtime;\n    this.deps.setState(`${config.id}.info.reachable`, runtime.status.reachable);\n    if (runtime.status.reachable) {\n      this.deps.setState(`${config.id}.info.lastUpdate`, new Date(this.deps.now()).toISOString());\n    }\n  }\n\n  /** Recompute and write the totals + info.connection. */\n  private async writeTotals(): Promise<void> {\n    const totals = computeTotals(this.runtimes.map(runtime => runtime.status));\n    this.deps.setState(\"total.costs.today\", totals.costsToday);\n    this.deps.setState(\"total.costs.month\", totals.costsMonth);\n    this.deps.setState(\"total.costs.projectedMonth\", totals.costsProjectedMonth);\n    this.deps.setState(\"total.maxLimitPercent\", totals.maxLimitPercent);\n    this.deps.setState(\"total.warningsActive\", totals.warningsActive);\n    this.deps.setState(\"total.limitReached\", totals.limitReached);\n    this.deps.setState(\"total.accountsReachable\", totals.accountsReachable);\n    this.deps.setState(\"total.accounts\", totals.accounts);\n    this.deps.setState(\"info.connection\", totals.accountsReachable > 0);\n    return Promise.resolve();\n  }\n\n  /**\n   * The static per-account objects that exist regardless of what the source delivers.\n   *\n   * @param runtime the account's runtime\n   */\n  private async createAccountSkeleton(runtime: AccountRuntime): Promise<void> {\n    const { config } = runtime;\n    const defs: ObjectDef[] = [\n      { id: config.id, type: \"device\", common: { name: `${config.name} (${config.provider})` } },\n      { id: `${config.id}.info`, type: \"channel\", common: { name: \"Info\" } },\n      {\n        id: `${config.id}.info.provider`,\n        type: \"state\",\n        common: { name: \"Provider\", type: \"string\", role: \"text\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.info.reachable`,\n        type: \"state\",\n        common: { name: \"Reachable\", type: \"boolean\", role: \"indicator.reachable\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.info.lastUpdate`,\n        type: \"state\",\n        common: { name: \"Last successful update\", type: \"string\", role: \"date\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.warning`,\n        type: \"state\",\n        common: { name: \"Above warn threshold\", type: \"boolean\", role: \"indicator\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.limitReached`,\n        type: \"state\",\n        common: { name: \"A limit window is full\", type: \"boolean\", role: \"indicator\", read: true, write: false },\n      },\n    ];\n    for (const def of defs) {\n      await this.deps.upsertObject(def);\n      runtime.createdObjects.add(def.id);\n    }\n    this.deps.setState(`${config.id}.info.provider`, config.provider);\n    this.deps.setState(`${config.id}.info.reachable`, false);\n  }\n\n  /** The totals skeleton (channel + states). */\n  private async createTotalsSkeleton(): Promise<void> {\n    const defs: ObjectDef[] = [\n      { id: \"total.costs\", type: \"channel\", common: { name: \"Costs (USD accounts)\" } },\n      {\n        id: \"total.costs.today\",\n        type: \"state\",\n        common: {\n          name: \"Costs today (all accounts)\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"USD\",\n        },\n      },\n      {\n        id: \"total.costs.month\",\n        type: \"state\",\n        common: {\n          name: \"Costs this month (all accounts)\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"USD\",\n        },\n      },\n      {\n        id: \"total.costs.projectedMonth\",\n        type: \"state\",\n        common: {\n          name: \"Costs projected month-end (computed)\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"USD\",\n        },\n      },\n      {\n        id: \"total.maxLimitPercent\",\n        type: \"state\",\n        common: {\n          name: \"Highest limit utilisation of any account\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"%\",\n        },\n      },\n      {\n        id: \"total.warningsActive\",\n        type: \"state\",\n        common: {\n          name: \"Accounts above their warn threshold\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n        },\n      },\n      {\n        id: \"total.limitReached\",\n        type: \"state\",\n        common: { name: \"Any limit window full\", type: \"boolean\", role: \"indicator\", read: true, write: false },\n      },\n      {\n        id: \"total.accountsReachable\",\n        type: \"state\",\n        common: { name: \"Reachable accounts\", type: \"number\", role: \"value\", read: true, write: false },\n      },\n      {\n        id: \"total.accounts\",\n        type: \"state\",\n        common: { name: \"Configured accounts\", type: \"number\", role: \"value\", read: true, write: false },\n      },\n    ];\n    for (const def of defs) {\n      await this.deps.upsertObject(def);\n    }\n  }\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,sBAAmE;AACnE,2BAA6D;AAC7D,oBAAkD;AAGlD,MAAM,uBAAuB;AAE7B,MAAM,mBAAmB,KAAK,KAAK;AAEnC,MAAM,iBAAiB,KAAK,KAAK;AAEjC,MAAM,aAAa;AA6CZ,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWf,YACL,UACA,WACiB,aACA,MACjB;AAFiB;AACA;AAEjB,eAAW,UAAU,UAAU;AAC7B,YAAM,WAAW,UAAU,IAAI,OAAO,EAAE;AACxC,UAAI,CAAC,UAAU;AACb,aAAK,IAAI,KAAK,GAAG,OAAO,IAAI,eAAe,OAAO,QAAQ,2CAAsC;AAChG;AAAA,MACF;AACA,WAAK,SAAS,KAAK;AAAA,QACjB;AAAA,QACA;AAAA,QACA,QAAQ,EAAE,WAAW,OAAO,SAAS,MAAM;AAAA,QAC3C,WAAW;AAAA,QACX,WAAW;AAAA,QACX,WAAW;AAAA,QACX,cAAc;AAAA,QACd,gBAAgB,oBAAI,IAAI;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EApBmB;AAAA,EACA;AAAA,EAdF,WAA6B,CAAC;AAAA,EAC9B,UAAqB,CAAC;AAAA,EAC/B,UAAU;AAAA;AAAA,EAkClB,MAAa,QAAuB;AAClC,eAAW,WAAW,KAAK,UAAU;AACnC,YAAM,KAAK,sBAAsB,OAAO;AAAA,IAC1C;AACA,UAAM,KAAK,qBAAqB;AAChC,UAAM,KAAK,YAAY;AACvB,SAAK,SAAS,QAAQ,CAAC,SAAS,UAAU;AACxC,WAAK,QAAQ;AAAA,QACX,KAAK,KAAK,aAAa,MAAM,KAAK,KAAK,YAAY,OAAO,GAAG,QAAQ,UAAU;AAAA,QAC/E,KAAK,KAAK,SAAS,MAAM,KAAK,KAAK,YAAY,OAAO,GAAG,KAAK,cAAc,GAAI;AAAA,MAClF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGO,OAAa;AAClB,SAAK,UAAU;AACf,eAAW,UAAU,KAAK,SAAS;AACjC,WAAK,KAAK,OAAO,MAAM;AAAA,IACzB;AACA,SAAK,QAAQ,SAAS;AAAA,EACxB;AAAA;AAAA,EAGA,IAAW,aAAuB;AAChC,WAAO,KAAK,SAAS,IAAI,aAAW,QAAQ,OAAO,EAAE;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,YAAY,SAAwC;AAChE,QAAI,KAAK,SAAS;AAChB;AAAA,IACF;AACA,UAAM,EAAE,OAAO,IAAI;AACnB,QAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,WAAW;AACvC,WAAK,KAAK,IAAI,MAAM,GAAG,OAAO,IAAI,6CAAwC;AAC1E;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,MAAM,QAAQ,SAAS,MAAM;AAC9C,cAAQ,YAAY;AACpB,cAAQ,YAAY;AACpB,cAAQ,eAAe;AACvB,cAAQ,OAAO,WAAW;AAC1B,cAAQ,OAAO,YAAY;AAC3B,YAAM,KAAK,cAAc,SAAS,QAAQ;AAAA,IAC5C,SAAS,GAAG;AACV,WAAK,cAAc,SAAS,CAAC;AAAA,IAC/B;AACA,SAAK,iBAAiB,OAAO;AAC7B,UAAM,KAAK,YAAY;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,cAAc,SAAyB,UAAwC;AA9J/F;AA+JI,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,EAAE,SAAS,OAAO,QAAI,kCAAY,OAAO,IAAI,OAAO,MAAM,OAAO,UAAU,QAAQ;AACzF,eAAW,UAAU,SAAS;AAC5B,UAAI,CAAC,QAAQ,eAAe,IAAI,OAAO,EAAE,GAAG;AAC1C,cAAM,KAAK,KAAK,aAAa,MAAM;AACnC,gBAAQ,eAAe,IAAI,OAAO,EAAE;AAAA,MACtC;AAAA,IACF;AACA,eAAW,SAAS,QAAQ;AAC1B,WAAK,KAAK,SAAS,MAAM,IAAI,MAAM,KAAK;AAAA,IAC1C;AACA,UAAM,WAAU,+CAAgB,QAAQ,MAAxB,YAA6B;AAC7C,UAAM,aAAa,QAAQ,OAAO;AAClC,YAAQ,OAAO,UAAU,WAAW,OAAO;AAC3C,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,YAAY,QAAQ,OAAO,OAAO;AACjE,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,iBAAiB,WAAW,GAAG;AAC9D,QAAI,QAAQ,OAAO,WAAW,CAAC,YAAY;AACzC,YAAM,UAAU,GAAG,OAAO,IAAI,cAAc,KAAK,MAAM,OAAO,CAAC,iBAAiB,OAAO,aAAa;AACpG,WAAK,KAAK,IAAI,KAAK,OAAO;AAC1B,uBAAK,MAAK,WAAV,4BAAmB,OAAO,MAAM;AAAA,IAClC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,cAAc,SAAyB,OAAsB;AA7LvE;AA8LI,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAI,iBAAiB,8BAAc,MAAM,SAAS,QAAQ;AACxD,cAAQ,OAAO,YAAY;AAC3B,UAAI,CAAC,QAAQ,cAAc;AACzB,gBAAQ,eAAe;AACvB,cAAM,OAAO,GAAG,OAAO,IAAI,iCAA4B,OAAO;AAC9D,aAAK,KAAK,IAAI,KAAK,IAAI;AACvB,yBAAK,MAAK,WAAV,4BAAmB,OAAO,MAAM;AAAA,MAClC;AACA;AAAA,IACF;AACA,QAAI,iBAAiB,8BAAc,MAAM,SAAS,cAAc;AAC9D,cAAQ,YAAY,KAAK,KAAK,IAAI,IAAI,QAAQ;AAC9C,WAAK,KAAK,IAAI;AAAA,QACZ,GAAG,OAAO,IAAI,yCAAoC,KAAK,MAAM,QAAQ,YAAY,GAAK,CAAC;AAAA,MACzF;AACA,cAAQ,YAAY,KAAK,IAAI,gBAAgB,QAAQ,YAAY,CAAC;AAClE;AAAA,IACF;AACA,YAAQ;AACR,SAAK,KAAK,IAAI,MAAM,GAAG,OAAO,IAAI,mBAAmB,OAAO,cAAc,QAAQ,SAAS,EAAE;AAC7F,QAAI,QAAQ,aAAa,sBAAsB;AAC7C,cAAQ,OAAO,YAAY;AAAA,IAC7B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,iBAAiB,SAA+B;AACtD,UAAM,EAAE,OAAO,IAAI;AACnB,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,mBAAmB,QAAQ,OAAO,SAAS;AAC1E,QAAI,QAAQ,OAAO,WAAW;AAC5B,WAAK,KAAK,SAAS,GAAG,OAAO,EAAE,oBAAoB,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE,YAAY,CAAC;AAAA,IAC5F;AAAA,EACF;AAAA;AAAA,EAGA,MAAc,cAA6B;AACzC,UAAM,aAAS,6BAAc,KAAK,SAAS,IAAI,aAAW,QAAQ,MAAM,CAAC;AACzE,SAAK,KAAK,SAAS,qBAAqB,OAAO,UAAU;AACzD,SAAK,KAAK,SAAS,qBAAqB,OAAO,UAAU;AACzD,SAAK,KAAK,SAAS,8BAA8B,OAAO,mBAAmB;AAC3E,SAAK,KAAK,SAAS,yBAAyB,OAAO,eAAe;AAClE,SAAK,KAAK,SAAS,wBAAwB,OAAO,cAAc;AAChE,SAAK,KAAK,SAAS,sBAAsB,OAAO,YAAY;AAC5D,SAAK,KAAK,SAAS,2BAA2B,OAAO,iBAAiB;AACtE,SAAK,KAAK,SAAS,kBAAkB,OAAO,QAAQ;AACpD,SAAK,KAAK,SAAS,mBAAmB,OAAO,oBAAoB,CAAC;AAClE,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,sBAAsB,SAAwC;AAC1E,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,OAAoB;AAAA,MACxB,EAAE,IAAI,OAAO,IAAI,MAAM,UAAU,QAAQ,EAAE,MAAM,GAAG,OAAO,IAAI,KAAK,OAAO,QAAQ,IAAI,EAAE;AAAA,MACzF,EAAE,IAAI,GAAG,OAAO,EAAE,SAAS,MAAM,WAAW,QAAQ,EAAE,MAAM,OAAO,EAAE;AAAA,MACrE;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,YAAY,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,OAAO,MAAM;AAAA,MACrF;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,aAAa,MAAM,WAAW,MAAM,uBAAuB,MAAM,MAAM,OAAO,MAAM;AAAA,MACtG;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,0BAA0B,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,OAAO,MAAM;AAAA,MACnG;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,wBAAwB,MAAM,WAAW,MAAM,aAAa,MAAM,MAAM,OAAO,MAAM;AAAA,MACvG;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,0BAA0B,MAAM,WAAW,MAAM,aAAa,MAAM,MAAM,OAAO,MAAM;AAAA,MACzG;AAAA,IACF;AACA,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,KAAK,aAAa,GAAG;AAChC,cAAQ,eAAe,IAAI,IAAI,EAAE;AAAA,IACnC;AACA,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,kBAAkB,OAAO,QAAQ;AAChE,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,mBAAmB,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,MAAc,uBAAsC;AAClD,UAAM,OAAoB;AAAA,MACxB,EAAE,IAAI,eAAe,MAAM,WAAW,QAAQ,EAAE,MAAM,uBAAuB,EAAE;AAAA,MAC/E;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,yBAAyB,MAAM,WAAW,MAAM,aAAa,MAAM,MAAM,OAAO,MAAM;AAAA,MACxG;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,sBAAsB,MAAM,UAAU,MAAM,SAAS,MAAM,MAAM,OAAO,MAAM;AAAA,MAChG;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,uBAAuB,MAAM,UAAU,MAAM,SAAS,MAAM,MAAM,OAAO,MAAM;AAAA,MACjG;AAAA,IACF;AACA,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,KAAK,aAAa,GAAG;AAAA,IAClC;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { AccountConfig } from \"./pure-helpers\";\nimport { FetchError, type UsageProvider, type UsageSnapshot } from \"./provider\";\nimport { mapSnapshot, maxLimitPercent, type ObjectDef } from \"./snapshot-tree\";\nimport { computeTotals, type AccountStatus } from \"./totals\";\n\n/** Consecutive network failures after which an account is judged unreachable. */\nconst MAX_NETWORK_FAILURES = 3;\n/** First backoff after a rate-limit answer (ms); doubles per repeat. */\nconst BACKOFF_START_MS = 10 * 60 * 1000;\n/** Backoff ceiling (ms). */\nconst BACKOFF_MAX_MS = 60 * 60 * 1000;\n/** Stagger between the accounts' first polls (ms) so they never fire in one burst. */\nconst STAGGER_MS = 3000;\n\n/** The adapter callbacks the engine drives \u2014 narrow, so tests need no adapter mock. */\nexport interface EngineDeps {\n  /** Create or update an object. */\n  upsertObject(def: ObjectDef): Promise<void>;\n  /** Write a state value with ack. */\n  setState(id: string, value: boolean | number | string): void;\n  /** Schedule a repeating callback; returns a cancel handle. */\n  schedule(cb: () => void, ms: number): unknown;\n  /** Schedule a one-shot callback; returns a cancel handle. */\n  scheduleOnce(cb: () => void, ms: number): unknown;\n  /** Cancel a handle from schedule/scheduleOnce. */\n  cancel(handle: unknown): void;\n  /** Current time (ms since epoch) \u2014 injected for tests. */\n  now(): number;\n  /** Adapter log. */\n  log: { debug(m: string): void; info(m: string): void; warn(m: string): void; error(m: string): void };\n  /** Raise a user-facing notification (threshold crossing, broken credentials). */\n  notify?(accountName: string, message: string): void;\n}\n\n/** One account's runtime state inside the engine. */\ninterface AccountRuntime {\n  config: AccountConfig;\n  provider: UsageProvider;\n  status: AccountStatus;\n  /** Consecutive network failures. */\n  failCount: number;\n  /** Skip polls until this time (rate-limit backoff). */\n  skipUntil: number;\n  /** Current backoff length (ms). */\n  backoffMs: number;\n  /** Whether the auth-broken notification has been raised (reset on success). */\n  authNotified: boolean;\n  /** Object ids already created for this account (create-once cache). */\n  createdObjects: Set<string>;\n}\n\n/**\n * Drives the polling of all configured accounts: staggered starts, one independent\n * cycle per account, typed failure handling (auth = immediate + one notification,\n * rate-limit = backoff keeping last values, network = tolerant), warn-threshold\n * transitions and the adapter-wide totals. Pure orchestration \u2014 all IO is injected.\n */\nexport class PollEngine {\n  private readonly runtimes: AccountRuntime[] = [];\n  private readonly handles: unknown[] = [];\n  private stopped = false;\n\n  /**\n   * @param accounts the validated account configs\n   * @param providers each account id's provider (accounts without one are skipped)\n   * @param intervalSec the poll interval in seconds\n   * @param deps the injected adapter callbacks\n   */\n  public constructor(\n    accounts: readonly AccountConfig[],\n    providers: ReadonlyMap<string, UsageProvider>,\n    private readonly intervalSec: number,\n    private readonly deps: EngineDeps,\n  ) {\n    for (const config of accounts) {\n      const provider = providers.get(config.id);\n      if (!provider) {\n        deps.log.warn(`${config.name}: provider \"${config.provider}\" is not available \u2014 account skipped`);\n        continue;\n      }\n      this.runtimes.push({\n        config,\n        provider,\n        status: { reachable: false, warning: false },\n        failCount: 0,\n        skipUntil: 0,\n        backoffMs: BACKOFF_START_MS,\n        authNotified: false,\n        createdObjects: new Set(),\n      });\n    }\n  }\n\n  /** Create the static per-account and totals objects, then arm the poll cycles. */\n  public async start(): Promise<void> {\n    for (const runtime of this.runtimes) {\n      await this.createAccountSkeleton(runtime);\n    }\n    await this.createTotalsSkeleton();\n    await this.writeTotals();\n    this.runtimes.forEach((runtime, index) => {\n      this.handles.push(\n        this.deps.scheduleOnce(() => void this.pollAccount(runtime), index * STAGGER_MS),\n        this.deps.schedule(() => void this.pollAccount(runtime), this.intervalSec * 1000),\n      );\n    });\n  }\n\n  /** Cancel every timer. Synchronous \u2014 safe from onUnload. */\n  public stop(): void {\n    this.stopped = true;\n    for (const handle of this.handles) {\n      this.deps.cancel(handle);\n    }\n    this.handles.length = 0;\n  }\n\n  /** The account ids the engine drives (for the stale-object cleanup). */\n  public get accountIds(): string[] {\n    return this.runtimes.map(runtime => runtime.config.id);\n  }\n\n  /**\n   * Poll one account immediately, by id. Used after a successful sign-in: waiting\n   * up to a full interval there reads as \"the sign-in did not work\".\n   *\n   * @param accountId the account's object id\n   */\n  public async pollNow(accountId: string): Promise<void> {\n    const runtime = this.runtimes.find(entry => entry.config.id === accountId);\n    if (runtime) {\n      // A fresh sign-in clears a previous auth failure and any backoff.\n      runtime.authNotified = false;\n      runtime.skipUntil = 0;\n      await this.pollAccount(runtime);\n    }\n  }\n\n  /**\n   * Poll one account now (also used by the staggered first run).\n   *\n   * @param runtime the account's runtime\n   */\n  private async pollAccount(runtime: AccountRuntime): Promise<void> {\n    if (this.stopped) {\n      return;\n    }\n    const { config } = runtime;\n    if (this.deps.now() < runtime.skipUntil) {\n      this.deps.log.debug(`${config.name}: in rate-limit backoff \u2014 poll skipped`);\n      return;\n    }\n    try {\n      const snapshot = await runtime.provider.fetch();\n      runtime.failCount = 0;\n      runtime.backoffMs = BACKOFF_START_MS;\n      runtime.authNotified = false;\n      runtime.status.snapshot = snapshot;\n      runtime.status.reachable = true;\n      await this.applySnapshot(runtime, snapshot);\n    } catch (e) {\n      this.handleFailure(runtime, e);\n    }\n    this.writeAccountInfo(runtime);\n    await this.writeTotals();\n  }\n\n  /**\n   * Write a successful snapshot: upsert new objects (create-once cache), write the\n   * values, and run the warn-threshold transition.\n   *\n   * @param runtime the account's runtime\n   * @param snapshot the fetched snapshot\n   */\n  private async applySnapshot(runtime: AccountRuntime, snapshot: UsageSnapshot): Promise<void> {\n    const { config } = runtime;\n    const { objects, writes } = mapSnapshot(config.id, config.name, config.provider, snapshot);\n    for (const object of objects) {\n      if (!runtime.createdObjects.has(object.id)) {\n        await this.deps.upsertObject(object);\n        runtime.createdObjects.add(object.id);\n      }\n    }\n    for (const write of writes) {\n      this.deps.setState(write.id, write.value);\n    }\n    const percent = maxLimitPercent(snapshot) ?? 0;\n    const wasWarning = runtime.status.warning;\n    runtime.status.warning = percent >= config.warnThreshold;\n    this.deps.setState(`${config.id}.warning`, runtime.status.warning);\n    this.deps.setState(`${config.id}.limitReached`, percent >= 100);\n    if (runtime.status.warning && !wasWarning) {\n      const message = `${config.name}: usage at ${Math.round(percent)} % (threshold ${config.warnThreshold} %)`;\n      this.deps.log.warn(message);\n      this.deps.notify?.(config.name, message);\n    }\n  }\n\n  /**\n   * Classify a fetch failure: auth = unreachable + ONE notification until it recovers;\n   * rate-limit = backoff, last values stay; network = tolerated MAX_NETWORK_FAILURES times.\n   *\n   * @param runtime the account's runtime\n   * @param error the thrown error\n   */\n  private handleFailure(runtime: AccountRuntime, error: unknown): void {\n    const { config } = runtime;\n    const message = error instanceof Error ? error.message : String(error);\n    if (error instanceof FetchError && error.kind === \"auth\") {\n      runtime.status.reachable = false;\n      if (!runtime.authNotified) {\n        runtime.authNotified = true;\n        const text = `${config.name}: credentials rejected \u2014 ${message}`;\n        this.deps.log.warn(text);\n        this.deps.notify?.(config.name, text);\n      }\n      return;\n    }\n    if (error instanceof FetchError && error.kind === \"rate-limit\") {\n      runtime.skipUntil = this.deps.now() + runtime.backoffMs;\n      this.deps.log.warn(\n        `${config.name}: rate-limited \u2014 backing off for ${Math.round(runtime.backoffMs / 60000)} min, keeping last values`,\n      );\n      runtime.backoffMs = Math.min(BACKOFF_MAX_MS, runtime.backoffMs * 2);\n      return;\n    }\n    runtime.failCount++;\n    this.deps.log.debug(`${config.name}: fetch failed (${message}), attempt ${runtime.failCount}`);\n    if (runtime.failCount >= MAX_NETWORK_FAILURES) {\n      runtime.status.reachable = false;\n    }\n  }\n\n  /**\n   * Write one account's info states (reachable, last update).\n   *\n   * @param runtime the account's runtime\n   */\n  private writeAccountInfo(runtime: AccountRuntime): void {\n    const { config } = runtime;\n    this.deps.setState(`${config.id}.info.reachable`, runtime.status.reachable);\n    if (runtime.status.reachable) {\n      this.deps.setState(`${config.id}.info.lastUpdate`, new Date(this.deps.now()).toISOString());\n    }\n  }\n\n  /** Recompute and write the totals + info.connection. */\n  private async writeTotals(): Promise<void> {\n    const totals = computeTotals(this.runtimes.map(runtime => runtime.status));\n    this.deps.setState(\"total.costs.today\", totals.costsToday);\n    this.deps.setState(\"total.costs.month\", totals.costsMonth);\n    this.deps.setState(\"total.costs.projectedMonth\", totals.costsProjectedMonth);\n    this.deps.setState(\"total.maxLimitPercent\", totals.maxLimitPercent);\n    this.deps.setState(\"total.warningsActive\", totals.warningsActive);\n    this.deps.setState(\"total.limitReached\", totals.limitReached);\n    this.deps.setState(\"total.accountsReachable\", totals.accountsReachable);\n    this.deps.setState(\"total.accounts\", totals.accounts);\n    this.deps.setState(\"info.connection\", totals.accountsReachable > 0);\n    return Promise.resolve();\n  }\n\n  /**\n   * The static per-account objects that exist regardless of what the source delivers.\n   *\n   * @param runtime the account's runtime\n   */\n  private async createAccountSkeleton(runtime: AccountRuntime): Promise<void> {\n    const { config } = runtime;\n    const defs: ObjectDef[] = [\n      { id: config.id, type: \"device\", common: { name: `${config.name} (${config.provider})` } },\n      { id: `${config.id}.info`, type: \"channel\", common: { name: \"Info\" } },\n      {\n        id: `${config.id}.info.provider`,\n        type: \"state\",\n        common: { name: \"Provider\", type: \"string\", role: \"text\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.info.reachable`,\n        type: \"state\",\n        common: { name: \"Reachable\", type: \"boolean\", role: \"indicator.reachable\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.info.lastUpdate`,\n        type: \"state\",\n        common: { name: \"Last successful update\", type: \"string\", role: \"date\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.warning`,\n        type: \"state\",\n        common: { name: \"Above warn threshold\", type: \"boolean\", role: \"indicator\", read: true, write: false },\n      },\n      {\n        id: `${config.id}.limitReached`,\n        type: \"state\",\n        common: { name: \"A limit window is full\", type: \"boolean\", role: \"indicator\", read: true, write: false },\n      },\n    ];\n    for (const def of defs) {\n      await this.deps.upsertObject(def);\n      runtime.createdObjects.add(def.id);\n    }\n    this.deps.setState(`${config.id}.info.provider`, config.provider);\n    this.deps.setState(`${config.id}.info.reachable`, false);\n  }\n\n  /** The totals skeleton (channel + states). */\n  private async createTotalsSkeleton(): Promise<void> {\n    const defs: ObjectDef[] = [\n      { id: \"total.costs\", type: \"channel\", common: { name: \"Costs (USD accounts)\" } },\n      {\n        id: \"total.costs.today\",\n        type: \"state\",\n        common: {\n          name: \"Costs today (all accounts)\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"USD\",\n        },\n      },\n      {\n        id: \"total.costs.month\",\n        type: \"state\",\n        common: {\n          name: \"Costs this month (all accounts)\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"USD\",\n        },\n      },\n      {\n        id: \"total.costs.projectedMonth\",\n        type: \"state\",\n        common: {\n          name: \"Costs projected month-end (computed)\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"USD\",\n        },\n      },\n      {\n        id: \"total.maxLimitPercent\",\n        type: \"state\",\n        common: {\n          name: \"Highest limit utilisation of any account\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n          unit: \"%\",\n        },\n      },\n      {\n        id: \"total.warningsActive\",\n        type: \"state\",\n        common: {\n          name: \"Accounts above their warn threshold\",\n          type: \"number\",\n          role: \"value\",\n          read: true,\n          write: false,\n        },\n      },\n      {\n        id: \"total.limitReached\",\n        type: \"state\",\n        common: { name: \"Any limit window full\", type: \"boolean\", role: \"indicator\", read: true, write: false },\n      },\n      {\n        id: \"total.accountsReachable\",\n        type: \"state\",\n        common: { name: \"Reachable accounts\", type: \"number\", role: \"value\", read: true, write: false },\n      },\n      {\n        id: \"total.accounts\",\n        type: \"state\",\n        common: { name: \"Configured accounts\", type: \"number\", role: \"value\", read: true, write: false },\n      },\n    ];\n    for (const def of defs) {\n      await this.deps.upsertObject(def);\n    }\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,sBAAmE;AACnE,2BAA6D;AAC7D,oBAAkD;AAGlD,MAAM,uBAAuB;AAE7B,MAAM,mBAAmB,KAAK,KAAK;AAEnC,MAAM,iBAAiB,KAAK,KAAK;AAEjC,MAAM,aAAa;AA6CZ,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWf,YACL,UACA,WACiB,aACA,MACjB;AAFiB;AACA;AAEjB,eAAW,UAAU,UAAU;AAC7B,YAAM,WAAW,UAAU,IAAI,OAAO,EAAE;AACxC,UAAI,CAAC,UAAU;AACb,aAAK,IAAI,KAAK,GAAG,OAAO,IAAI,eAAe,OAAO,QAAQ,2CAAsC;AAChG;AAAA,MACF;AACA,WAAK,SAAS,KAAK;AAAA,QACjB;AAAA,QACA;AAAA,QACA,QAAQ,EAAE,WAAW,OAAO,SAAS,MAAM;AAAA,QAC3C,WAAW;AAAA,QACX,WAAW;AAAA,QACX,WAAW;AAAA,QACX,cAAc;AAAA,QACd,gBAAgB,oBAAI,IAAI;AAAA,MAC1B,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EApBmB;AAAA,EACA;AAAA,EAdF,WAA6B,CAAC;AAAA,EAC9B,UAAqB,CAAC;AAAA,EAC/B,UAAU;AAAA;AAAA,EAkClB,MAAa,QAAuB;AAClC,eAAW,WAAW,KAAK,UAAU;AACnC,YAAM,KAAK,sBAAsB,OAAO;AAAA,IAC1C;AACA,UAAM,KAAK,qBAAqB;AAChC,UAAM,KAAK,YAAY;AACvB,SAAK,SAAS,QAAQ,CAAC,SAAS,UAAU;AACxC,WAAK,QAAQ;AAAA,QACX,KAAK,KAAK,aAAa,MAAM,KAAK,KAAK,YAAY,OAAO,GAAG,QAAQ,UAAU;AAAA,QAC/E,KAAK,KAAK,SAAS,MAAM,KAAK,KAAK,YAAY,OAAO,GAAG,KAAK,cAAc,GAAI;AAAA,MAClF;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA,EAGO,OAAa;AAClB,SAAK,UAAU;AACf,eAAW,UAAU,KAAK,SAAS;AACjC,WAAK,KAAK,OAAO,MAAM;AAAA,IACzB;AACA,SAAK,QAAQ,SAAS;AAAA,EACxB;AAAA;AAAA,EAGA,IAAW,aAAuB;AAChC,WAAO,KAAK,SAAS,IAAI,aAAW,QAAQ,OAAO,EAAE;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,QAAQ,WAAkC;AACrD,UAAM,UAAU,KAAK,SAAS,KAAK,WAAS,MAAM,OAAO,OAAO,SAAS;AACzE,QAAI,SAAS;AAEX,cAAQ,eAAe;AACvB,cAAQ,YAAY;AACpB,YAAM,KAAK,YAAY,OAAO;AAAA,IAChC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,YAAY,SAAwC;AAChE,QAAI,KAAK,SAAS;AAChB;AAAA,IACF;AACA,UAAM,EAAE,OAAO,IAAI;AACnB,QAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,WAAW;AACvC,WAAK,KAAK,IAAI,MAAM,GAAG,OAAO,IAAI,6CAAwC;AAC1E;AAAA,IACF;AACA,QAAI;AACF,YAAM,WAAW,MAAM,QAAQ,SAAS,MAAM;AAC9C,cAAQ,YAAY;AACpB,cAAQ,YAAY;AACpB,cAAQ,eAAe;AACvB,cAAQ,OAAO,WAAW;AAC1B,cAAQ,OAAO,YAAY;AAC3B,YAAM,KAAK,cAAc,SAAS,QAAQ;AAAA,IAC5C,SAAS,GAAG;AACV,WAAK,cAAc,SAAS,CAAC;AAAA,IAC/B;AACA,SAAK,iBAAiB,OAAO;AAC7B,UAAM,KAAK,YAAY;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAc,cAAc,SAAyB,UAAwC;AA9K/F;AA+KI,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,EAAE,SAAS,OAAO,QAAI,kCAAY,OAAO,IAAI,OAAO,MAAM,OAAO,UAAU,QAAQ;AACzF,eAAW,UAAU,SAAS;AAC5B,UAAI,CAAC,QAAQ,eAAe,IAAI,OAAO,EAAE,GAAG;AAC1C,cAAM,KAAK,KAAK,aAAa,MAAM;AACnC,gBAAQ,eAAe,IAAI,OAAO,EAAE;AAAA,MACtC;AAAA,IACF;AACA,eAAW,SAAS,QAAQ;AAC1B,WAAK,KAAK,SAAS,MAAM,IAAI,MAAM,KAAK;AAAA,IAC1C;AACA,UAAM,WAAU,+CAAgB,QAAQ,MAAxB,YAA6B;AAC7C,UAAM,aAAa,QAAQ,OAAO;AAClC,YAAQ,OAAO,UAAU,WAAW,OAAO;AAC3C,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,YAAY,QAAQ,OAAO,OAAO;AACjE,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,iBAAiB,WAAW,GAAG;AAC9D,QAAI,QAAQ,OAAO,WAAW,CAAC,YAAY;AACzC,YAAM,UAAU,GAAG,OAAO,IAAI,cAAc,KAAK,MAAM,OAAO,CAAC,iBAAiB,OAAO,aAAa;AACpG,WAAK,KAAK,IAAI,KAAK,OAAO;AAC1B,uBAAK,MAAK,WAAV,4BAAmB,OAAO,MAAM;AAAA,IAClC;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,cAAc,SAAyB,OAAsB;AA7MvE;AA8MI,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,QAAI,iBAAiB,8BAAc,MAAM,SAAS,QAAQ;AACxD,cAAQ,OAAO,YAAY;AAC3B,UAAI,CAAC,QAAQ,cAAc;AACzB,gBAAQ,eAAe;AACvB,cAAM,OAAO,GAAG,OAAO,IAAI,iCAA4B,OAAO;AAC9D,aAAK,KAAK,IAAI,KAAK,IAAI;AACvB,yBAAK,MAAK,WAAV,4BAAmB,OAAO,MAAM;AAAA,MAClC;AACA;AAAA,IACF;AACA,QAAI,iBAAiB,8BAAc,MAAM,SAAS,cAAc;AAC9D,cAAQ,YAAY,KAAK,KAAK,IAAI,IAAI,QAAQ;AAC9C,WAAK,KAAK,IAAI;AAAA,QACZ,GAAG,OAAO,IAAI,yCAAoC,KAAK,MAAM,QAAQ,YAAY,GAAK,CAAC;AAAA,MACzF;AACA,cAAQ,YAAY,KAAK,IAAI,gBAAgB,QAAQ,YAAY,CAAC;AAClE;AAAA,IACF;AACA,YAAQ;AACR,SAAK,KAAK,IAAI,MAAM,GAAG,OAAO,IAAI,mBAAmB,OAAO,cAAc,QAAQ,SAAS,EAAE;AAC7F,QAAI,QAAQ,aAAa,sBAAsB;AAC7C,cAAQ,OAAO,YAAY;AAAA,IAC7B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOQ,iBAAiB,SAA+B;AACtD,UAAM,EAAE,OAAO,IAAI;AACnB,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,mBAAmB,QAAQ,OAAO,SAAS;AAC1E,QAAI,QAAQ,OAAO,WAAW;AAC5B,WAAK,KAAK,SAAS,GAAG,OAAO,EAAE,oBAAoB,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,EAAE,YAAY,CAAC;AAAA,IAC5F;AAAA,EACF;AAAA;AAAA,EAGA,MAAc,cAA6B;AACzC,UAAM,aAAS,6BAAc,KAAK,SAAS,IAAI,aAAW,QAAQ,MAAM,CAAC;AACzE,SAAK,KAAK,SAAS,qBAAqB,OAAO,UAAU;AACzD,SAAK,KAAK,SAAS,qBAAqB,OAAO,UAAU;AACzD,SAAK,KAAK,SAAS,8BAA8B,OAAO,mBAAmB;AAC3E,SAAK,KAAK,SAAS,yBAAyB,OAAO,eAAe;AAClE,SAAK,KAAK,SAAS,wBAAwB,OAAO,cAAc;AAChE,SAAK,KAAK,SAAS,sBAAsB,OAAO,YAAY;AAC5D,SAAK,KAAK,SAAS,2BAA2B,OAAO,iBAAiB;AACtE,SAAK,KAAK,SAAS,kBAAkB,OAAO,QAAQ;AACpD,SAAK,KAAK,SAAS,mBAAmB,OAAO,oBAAoB,CAAC;AAClE,WAAO,QAAQ,QAAQ;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,sBAAsB,SAAwC;AAC1E,UAAM,EAAE,OAAO,IAAI;AACnB,UAAM,OAAoB;AAAA,MACxB,EAAE,IAAI,OAAO,IAAI,MAAM,UAAU,QAAQ,EAAE,MAAM,GAAG,OAAO,IAAI,KAAK,OAAO,QAAQ,IAAI,EAAE;AAAA,MACzF,EAAE,IAAI,GAAG,OAAO,EAAE,SAAS,MAAM,WAAW,QAAQ,EAAE,MAAM,OAAO,EAAE;AAAA,MACrE;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,YAAY,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,OAAO,MAAM;AAAA,MACrF;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,aAAa,MAAM,WAAW,MAAM,uBAAuB,MAAM,MAAM,OAAO,MAAM;AAAA,MACtG;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,0BAA0B,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM,OAAO,MAAM;AAAA,MACnG;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,wBAAwB,MAAM,WAAW,MAAM,aAAa,MAAM,MAAM,OAAO,MAAM;AAAA,MACvG;AAAA,MACA;AAAA,QACE,IAAI,GAAG,OAAO,EAAE;AAAA,QAChB,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,0BAA0B,MAAM,WAAW,MAAM,aAAa,MAAM,MAAM,OAAO,MAAM;AAAA,MACzG;AAAA,IACF;AACA,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,KAAK,aAAa,GAAG;AAChC,cAAQ,eAAe,IAAI,IAAI,EAAE;AAAA,IACnC;AACA,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,kBAAkB,OAAO,QAAQ;AAChE,SAAK,KAAK,SAAS,GAAG,OAAO,EAAE,mBAAmB,KAAK;AAAA,EACzD;AAAA;AAAA,EAGA,MAAc,uBAAsC;AAClD,UAAM,OAAoB;AAAA,MACxB,EAAE,IAAI,eAAe,MAAM,WAAW,QAAQ,EAAE,MAAM,uBAAuB,EAAE;AAAA,MAC/E;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,MAAM;AAAA,QACR;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,QACT;AAAA,MACF;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,yBAAyB,MAAM,WAAW,MAAM,aAAa,MAAM,MAAM,OAAO,MAAM;AAAA,MACxG;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,sBAAsB,MAAM,UAAU,MAAM,SAAS,MAAM,MAAM,OAAO,MAAM;AAAA,MAChG;AAAA,MACA;AAAA,QACE,IAAI;AAAA,QACJ,MAAM;AAAA,QACN,QAAQ,EAAE,MAAM,uBAAuB,MAAM,UAAU,MAAM,SAAS,MAAM,MAAM,OAAO,MAAM;AAAA,MACjG;AAAA,IACF;AACA,eAAW,OAAO,MAAM;AACtB,YAAM,KAAK,KAAK,aAAa,GAAG;AAAA,IAClC;AAAA,EACF;AACF;",
   "names": []
 }

package/build/lib/provider.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../src/lib/provider.ts"],
-  "sourcesContent": ["/** The provider kinds the adapter speaks. */\nexport type ProviderKind = \"claude-sub\" | \"openrouter\" | \"deepseek\" | \"openai\" | \"anthropic-api\";\n\n/** One limit window (session, week, per-model) \u2014 the same shape for every provider. */\nexport interface LimitWindow {\n  /** Window name; becomes the object id segment (session, week, a model name, month). */\n  name: string;\n  /** Human-readable label for the object name. */\n  label: string;\n  /** Utilisation in percent (0-100+). */\n  percent: number;\n  /** When the window resets (ISO timestamp), if the source reports it. */\n  resetAt?: string;\n}\n\n/** Granted budget (prepaid money or request credits). */\nexport interface CreditInfo {\n  /** Used amount. */\n  used?: number;\n  /** Granted ceiling; undefined = unlimited/unknown. */\n  limit?: number;\n  /** Remaining amount. */\n  remaining?: number;\n  /** Utilisation in percent, when both used and limit are known. */\n  percent?: number;\n  /** Granted (gifted) part of the balance, where the source distinguishes it (DeepSeek). */\n  granted?: number;\n  /** Topped-up (paid) part of the balance. */\n  toppedUp?: number;\n  /** Currency code (\"USD\", \"CNY\") \u2014 or a unit word for piece-counters. */\n  currency: string;\n  /** True when the credits are pieces (requests), not money \u2014 excluded from cost totals. */\n  pieces?: boolean;\n}\n\n/** Real money spent. */\nexport interface CostInfo {\n  /** Spent today. */\n  today?: number;\n  /** Spent this month (or billing period). */\n  month?: number;\n  /** Lifetime counter, where the source only reports that. */\n  total?: number;\n  /** Projected month-end spend (computed by the provider module, marked in the object name). */\n  projectedMonth?: number;\n  /** Currency code. */\n  currency: string;\n}\n\n/** Token counters (API accounts). */\nexport interface TokenInfo {\n  /** Input tokens today. */\n  inputToday?: number;\n  /** Output tokens today. */\n  outputToday?: number;\n  /** Per-model breakdown. */\n  perModel?: { model: string; tokens?: number; cost?: number }[];\n}\n\n/**\n * A transport-neutral usage snapshot \u2014 one fetch result. Only what the source\n * actually delivered is present; the tree builder creates nothing for absent parts.\n */\nexport interface UsageSnapshot {\n  /** Limit windows (subscription accounts). */\n  limits?: LimitWindow[];\n  /** Granted budget. */\n  credits?: CreditInfo;\n  /** Real money spent. */\n  costs?: CostInfo;\n  /** Token counters. */\n  tokens?: TokenInfo;\n  /** Provider-specific extra flags (e.g. DeepSeek `available`). */\n  available?: boolean;\n}\n\n/** Why a fetch failed \u2014 drives reachability, backoff and notifications. */\nexport type FetchErrorKind = \"auth\" | \"rate-limit\" | \"network\";\n\n/** A typed fetch failure. */\nexport class FetchError extends Error {\n  /**\n   * @param kind the failure class\n   * @param message the human-readable reason\n   */\n  public constructor(\n    public readonly kind: FetchErrorKind,\n    message: string,\n  ) {\n    super(message);\n    this.name = \"FetchError\";\n  }\n}\n\n/** One account's usage source. Implementations are pure fetch+parse \u2014 no ioBroker inside. */\nexport interface UsageProvider {\n  /** Which provider this is. */\n  readonly kind: ProviderKind;\n  /** Fetch the current snapshot; throws {@link FetchError} on failure. */\n  fetch(): Promise<UsageSnapshot>;\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAgFO,MAAM,mBAAmB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,EAK7B,YACW,MAChB,SACA;AACA,UAAM,OAAO;AAHG;AAIhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAMpB;",
+  "sourcesContent": ["/** The provider kinds the adapter speaks. */\nexport type ProviderKind =\n  \"claude-sub\" | \"chatgpt-sub\" | \"gemini-sub\" | \"openrouter\" | \"deepseek\" | \"openai\" | \"anthropic-api\";\n\n/**\n * How a subscription account is signed in. Each provider dictates its own flow \u2014\n * the admin panel renders the matching instructions, the adapter drives the rest.\n *\n * - `paste-code`: the user opens a link, signs in and pastes the code shown there (Claude).\n * - `device-code`: the adapter shows a short code the user types on the provider's page,\n *   then polls until the user confirmed (ChatGPT/Codex).\n * - `paste-url`: the user opens a link, signs in and lands on a browser error page whose\n *   ADDRESS carries the code \u2014 the whole address is pasted back (Gemini, the only redirect\n *   Google accepts for the usable client; measured 2026-08-26).\n */\nexport type SignInFlow = \"paste-code\" | \"device-code\" | \"paste-url\";\n\n/** One limit window (session, week, per-model) \u2014 the same shape for every provider. */\nexport interface LimitWindow {\n  /** Window name; becomes the object id segment (session, week, a model name, month). */\n  name: string;\n  /** Human-readable label for the object name. */\n  label: string;\n  /** Utilisation in percent (0-100+). */\n  percent: number;\n  /** When the window resets (ISO timestamp), if the source reports it. */\n  resetAt?: string;\n}\n\n/** Granted budget (prepaid money or request credits). */\nexport interface CreditInfo {\n  /** Used amount. */\n  used?: number;\n  /** Granted ceiling; undefined = unlimited/unknown. */\n  limit?: number;\n  /** Remaining amount. */\n  remaining?: number;\n  /** Utilisation in percent, when both used and limit are known. */\n  percent?: number;\n  /** Granted (gifted) part of the balance, where the source distinguishes it (DeepSeek). */\n  granted?: number;\n  /** Topped-up (paid) part of the balance. */\n  toppedUp?: number;\n  /** Currency code (\"USD\", \"CNY\") \u2014 or a unit word for piece-counters. */\n  currency: string;\n  /** True when the credits are pieces (requests), not money \u2014 excluded from cost totals. */\n  pieces?: boolean;\n}\n\n/** Real money spent. */\nexport interface CostInfo {\n  /** Spent today. */\n  today?: number;\n  /** Spent this month (or billing period). */\n  month?: number;\n  /** Lifetime counter, where the source only reports that. */\n  total?: number;\n  /** Projected month-end spend (computed by the provider module, marked in the object name). */\n  projectedMonth?: number;\n  /** Currency code. */\n  currency: string;\n}\n\n/** Token counters (API accounts). */\nexport interface TokenInfo {\n  /** Input tokens today. */\n  inputToday?: number;\n  /** Output tokens today. */\n  outputToday?: number;\n  /** Per-model breakdown. */\n  perModel?: { model: string; tokens?: number; cost?: number }[];\n}\n\n/**\n * A transport-neutral usage snapshot \u2014 one fetch result. Only what the source\n * actually delivered is present; the tree builder creates nothing for absent parts.\n */\nexport interface UsageSnapshot {\n  /** Limit windows (subscription accounts). */\n  limits?: LimitWindow[];\n  /** Granted budget. */\n  credits?: CreditInfo;\n  /** Real money spent. */\n  costs?: CostInfo;\n  /** Token counters. */\n  tokens?: TokenInfo;\n  /** Provider-specific extra flags (e.g. DeepSeek `available`). */\n  available?: boolean;\n}\n\n/** Why a fetch failed \u2014 drives reachability, backoff and notifications. */\nexport type FetchErrorKind = \"auth\" | \"rate-limit\" | \"network\";\n\n/** A typed fetch failure. */\nexport class FetchError extends Error {\n  /**\n   * @param kind the failure class\n   * @param message the human-readable reason\n   */\n  public constructor(\n    public readonly kind: FetchErrorKind,\n    message: string,\n  ) {\n    super(message);\n    this.name = \"FetchError\";\n  }\n}\n\n/** One account's usage source. Implementations are pure fetch+parse \u2014 no ioBroker inside. */\nexport interface UsageProvider {\n  /** Which provider this is. */\n  readonly kind: ProviderKind;\n  /** Fetch the current snapshot; throws {@link FetchError} on failure. */\n  fetch(): Promise<UsageSnapshot>;\n}\n\n/** Persisted OAuth tokens of one subscription account. */\nexport interface TokenSet {\n  /** The bearer token used for the usage call. */\n  accessToken: string;\n  /** The token used to obtain a fresh access token. */\n  refreshToken: string;\n  /** Absolute expiry of {@link accessToken} in ms since epoch. */\n  expiresAt: number;\n  /** Provider-specific extra the usage call needs (e.g. ChatGPT account id). */\n  accountRef?: string;\n}\n\n/** Where a subscription's tokens live. Keyed by PROVIDER, never by account name. */\nexport interface TokenStore {\n  /** Read the stored tokens, or null when never signed in. */\n  load(): Promise<TokenSet | null>;\n  /** Persist tokens (encrypted by the adapter). */\n  save(tokens: TokenSet): Promise<void>;\n  /** Forget the tokens (sign out / unusable refresh token). */\n  clear(): Promise<void>;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AA8FO,MAAM,mBAAmB,MAAM;AAAA;AAAA;AAAA;AAAA;AAAA,EAK7B,YACW,MAChB,SACA;AACA,UAAM,OAAO;AAHG;AAIhB,SAAK,OAAO;AAAA,EACd;AAAA,EALkB;AAMpB;",
   "names": []
 }

package/build/lib/providers/chatgpt-auth.js

@@ -0,0 +1,125 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var chatgpt_auth_exports = {};
+__export(chatgpt_auth_exports, {
+  CHATGPT_OAUTH: () => CHATGPT_OAUTH,
+  exchangeDeviceCode: () => exchangeDeviceCode,
+  pollDeviceCode: () => pollDeviceCode,
+  refreshChatgptTokens: () => refreshChatgptTokens,
+  startDeviceCode: () => startDeviceCode
+});
+module.exports = __toCommonJS(chatgpt_auth_exports);
+var import_jwt = require("../jwt");
+var import_provider = require("../provider");
+const CHATGPT_OAUTH = {
+  clientId: "app_EMoamEEZ73f0CkXaXp7hrann",
+  deviceCodeUrl: "https://auth.openai.com/api/accounts/deviceauth/usercode",
+  devicePollUrl: "https://auth.openai.com/api/accounts/deviceauth/token",
+  tokenUrl: "https://auth.openai.com/oauth/token",
+  deviceRedirectUri: "https://auth.openai.com/deviceauth/callback",
+  /** Where the user types the code. */
+  verificationUrl: "https://auth.openai.com/codex/device",
+  /** The code is valid for 15 minutes (prompt text in the CLI). */
+  windowMs: 15 * 6e4,
+  /** Fallback lifetime when the access token carries no expiry. */
+  fallbackLifetimeMs: 60 * 6e4
+};
+function str(body, key) {
+  if (typeof body !== "object" || body === null) {
+    return "";
+  }
+  const value = body[key];
+  return typeof value === "string" ? value : typeof value === "number" ? String(value) : "";
+}
+async function startDeviceCode(post, now) {
+  const body = await post(CHATGPT_OAUTH.deviceCodeUrl, { client_id: CHATGPT_OAUTH.clientId });
+  const userCode = str(body, "user_code");
+  const deviceAuthId = str(body, "device_auth_id");
+  if (!userCode || !deviceAuthId) {
+    throw new import_provider.FetchError("network", "unexpected device-code response");
+  }
+  const advised = Number(str(body, "interval"));
+  return {
+    userCode,
+    deviceAuthId,
+    intervalSec: Number.isFinite(advised) && advised >= 1 ? advised : 5,
+    expiresAt: now + CHATGPT_OAUTH.windowMs
+  };
+}
+async function pollDeviceCode(start, post) {
+  let body;
+  try {
+    body = await post(CHATGPT_OAUTH.devicePollUrl, {
+      device_auth_id: start.deviceAuthId,
+      user_code: start.userCode
+    });
+  } catch (e) {
+    if (e instanceof import_provider.FetchError && e.kind === "auth") {
+      return { status: "pending" };
+    }
+    throw e;
+  }
+  const code = str(body, "authorization_code");
+  const codeVerifier = str(body, "code_verifier");
+  if (!code || !codeVerifier) {
+    return { status: "pending" };
+  }
+  return { status: "ready", code, codeVerifier };
+}
+async function exchangeDeviceCode(code, codeVerifier, post, now) {
+  const body = await post(CHATGPT_OAUTH.tokenUrl, {
+    grant_type: "authorization_code",
+    client_id: CHATGPT_OAUTH.clientId,
+    code,
+    code_verifier: codeVerifier,
+    redirect_uri: CHATGPT_OAUTH.deviceRedirectUri
+  });
+  return toTokenSet(body, now, "");
+}
+async function refreshChatgptTokens(tokens, post, now) {
+  const body = await post(CHATGPT_OAUTH.tokenUrl, {
+    client_id: CHATGPT_OAUTH.clientId,
+    grant_type: "refresh_token",
+    refresh_token: tokens.refreshToken
+  });
+  return toTokenSet(body, now, tokens.refreshToken, tokens.accountRef);
+}
+function toTokenSet(body, now, previousRefresh, previousAccount) {
+  var _a;
+  const accessToken = str(body, "access_token");
+  if (!accessToken) {
+    throw new import_provider.FetchError("auth", "no access token in the answer");
+  }
+  const idToken = str(body, "id_token");
+  return {
+    accessToken,
+    refreshToken: str(body, "refresh_token") || previousRefresh,
+    expiresAt: (0, import_jwt.jwtExpiry)(accessToken, CHATGPT_OAUTH.fallbackLifetimeMs, now),
+    accountRef: (_a = idToken ? (0, import_jwt.chatgptAccountId)(idToken) : void 0) != null ? _a : previousAccount
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CHATGPT_OAUTH,
+  exchangeDeviceCode,
+  pollDeviceCode,
+  refreshChatgptTokens,
+  startDeviceCode
+});
+//# sourceMappingURL=chatgpt-auth.js.map

package/build/lib/providers/chatgpt-auth.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/providers/chatgpt-auth.ts"],
+  "sourcesContent": ["import { jwtExpiry, chatgptAccountId } from \"../jwt\";\nimport { FetchError, type TokenSet } from \"../provider\";\n\n/** Constants of the Codex device-code sign-in (openai/codex, login/src/auth/manager.rs). */\nexport const CHATGPT_OAUTH = {\n  clientId: \"app_EMoamEEZ73f0CkXaXp7hrann\",\n  deviceCodeUrl: \"https://auth.openai.com/api/accounts/deviceauth/usercode\",\n  devicePollUrl: \"https://auth.openai.com/api/accounts/deviceauth/token\",\n  tokenUrl: \"https://auth.openai.com/oauth/token\",\n  deviceRedirectUri: \"https://auth.openai.com/deviceauth/callback\",\n  /** Where the user types the code. */\n  verificationUrl: \"https://auth.openai.com/codex/device\",\n  /** The code is valid for 15 minutes (prompt text in the CLI). */\n  windowMs: 15 * 60_000,\n  /** Fallback lifetime when the access token carries no expiry. */\n  fallbackLifetimeMs: 60 * 60_000,\n} as const;\n\n/** A JSON POST seam (injected so the modules stay testable). */\nexport type JsonPost = (\n  url: string,\n  body: Record<string, unknown>,\n  headers?: Record<string, string>,\n) => Promise<unknown>;\n/** A form POST seam. */\nexport type FormPost = (\n  url: string,\n  form: Record<string, string>,\n  headers?: Record<string, string>,\n) => Promise<unknown>;\n\n/** What the device-code start handed back \u2014 the user-facing half plus the polling handle. */\nexport interface DeviceCodeStart {\n  /** The short code the user types on {@link CHATGPT_OAUTH.verificationUrl}. */\n  userCode: string;\n  /** Opaque handle for the polling calls. */\n  deviceAuthId: string;\n  /** Seconds between polls, as advised by the server. */\n  intervalSec: number;\n  /** Absolute end of the sign-in window (ms since epoch). */\n  expiresAt: number;\n}\n\n/**\n * Read a field out of an untrusted JSON answer.\n *\n * @param body the parsed answer\n * @param key the field name\n * @returns the string value, or \"\"\n */\nfunction str(body: unknown, key: string): string {\n  if (typeof body !== \"object\" || body === null) {\n    return \"\";\n  }\n  const value = (body as Record<string, unknown>)[key];\n  return typeof value === \"string\" ? value : typeof value === \"number\" ? String(value) : \"\";\n}\n\n/**\n * Start the device-code sign-in: ask OpenAI for a user code.\n *\n * @param post the JSON POST seam\n * @param now current time in ms\n * @returns what the admin panel has to show plus the polling handle\n */\nexport async function startDeviceCode(post: JsonPost, now: number): Promise<DeviceCodeStart> {\n  const body = await post(CHATGPT_OAUTH.deviceCodeUrl, { client_id: CHATGPT_OAUTH.clientId });\n  const userCode = str(body, \"user_code\");\n  const deviceAuthId = str(body, \"device_auth_id\");\n  if (!userCode || !deviceAuthId) {\n    throw new FetchError(\"network\", \"unexpected device-code response\");\n  }\n  // The server sends the interval as a STRING; never poll faster than once a second.\n  const advised = Number(str(body, \"interval\"));\n  return {\n    userCode,\n    deviceAuthId,\n    intervalSec: Number.isFinite(advised) && advised >= 1 ? advised : 5,\n    expiresAt: now + CHATGPT_OAUTH.windowMs,\n  };\n}\n\n/** One polling result: still waiting, or the authorization code plus its verifier. */\nexport type DevicePollResult = { status: \"pending\" } | { status: \"ready\"; code: string; codeVerifier: string };\n\n/**\n * Ask once whether the user confirmed the code.\n *\n * \"Not confirmed yet\" arrives as an auth failure (403/404 in the CLI) \u2014 that is a\n * WAIT, not an error, so it must not bubble up as a broken sign-in.\n *\n * @param start the handle from {@link startDeviceCode}\n * @param post the JSON POST seam\n * @returns pending or the redeemable code\n */\nexport async function pollDeviceCode(start: DeviceCodeStart, post: JsonPost): Promise<DevicePollResult> {\n  let body: unknown;\n  try {\n    body = await post(CHATGPT_OAUTH.devicePollUrl, {\n      device_auth_id: start.deviceAuthId,\n      user_code: start.userCode,\n    });\n  } catch (e) {\n    if (e instanceof FetchError && e.kind === \"auth\") {\n      return { status: \"pending\" };\n    }\n    throw e;\n  }\n  const code = str(body, \"authorization_code\");\n  const codeVerifier = str(body, \"code_verifier\");\n  if (!code || !codeVerifier) {\n    return { status: \"pending\" };\n  }\n  return { status: \"ready\", code, codeVerifier };\n}\n\n/**\n * Redeem the authorization code for tokens (form-encoded, unlike the refresh call).\n *\n * @param code the authorization code\n * @param codeVerifier the verifier the server handed back\n * @param post the form POST seam\n * @param now current time in ms\n * @returns the token set including the ChatGPT account id\n */\nexport async function exchangeDeviceCode(\n  code: string,\n  codeVerifier: string,\n  post: FormPost,\n  now: number,\n): Promise<TokenSet> {\n  const body = await post(CHATGPT_OAUTH.tokenUrl, {\n    grant_type: \"authorization_code\",\n    client_id: CHATGPT_OAUTH.clientId,\n    code,\n    code_verifier: codeVerifier,\n    redirect_uri: CHATGPT_OAUTH.deviceRedirectUri,\n  });\n  return toTokenSet(body, now, \"\");\n}\n\n/**\n * Get a fresh access token. The answer carries no lifetime \u2014 it comes out of the\n * token itself \u2014 and often no new refresh token, in which case the old one stays.\n *\n * @param tokens the current tokens\n * @param post the JSON POST seam (refresh is JSON, not form-encoded)\n * @param now current time in ms\n * @returns the refreshed token set\n */\nexport async function refreshChatgptTokens(tokens: TokenSet, post: JsonPost, now: number): Promise<TokenSet> {\n  const body = await post(CHATGPT_OAUTH.tokenUrl, {\n    client_id: CHATGPT_OAUTH.clientId,\n    grant_type: \"refresh_token\",\n    refresh_token: tokens.refreshToken,\n  });\n  return toTokenSet(body, now, tokens.refreshToken, tokens.accountRef);\n}\n\n/**\n * Build a token set from a token answer.\n *\n * @param body the parsed answer\n * @param now current time in ms\n * @param previousRefresh refresh token to keep when the answer omits one\n * @param previousAccount account id to keep when no id token came back\n * @returns the token set\n */\nfunction toTokenSet(body: unknown, now: number, previousRefresh: string, previousAccount?: string): TokenSet {\n  const accessToken = str(body, \"access_token\");\n  if (!accessToken) {\n    throw new FetchError(\"auth\", \"no access token in the answer\");\n  }\n  const idToken = str(body, \"id_token\");\n  return {\n    accessToken,\n    refreshToken: str(body, \"refresh_token\") || previousRefresh,\n    expiresAt: jwtExpiry(accessToken, CHATGPT_OAUTH.fallbackLifetimeMs, now),\n    accountRef: (idToken ? chatgptAccountId(idToken) : undefined) ?? previousAccount,\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,iBAA4C;AAC5C,sBAA0C;AAGnC,MAAM,gBAAgB;AAAA,EAC3B,UAAU;AAAA,EACV,eAAe;AAAA,EACf,eAAe;AAAA,EACf,UAAU;AAAA,EACV,mBAAmB;AAAA;AAAA,EAEnB,iBAAiB;AAAA;AAAA,EAEjB,UAAU,KAAK;AAAA;AAAA,EAEf,oBAAoB,KAAK;AAC3B;AAkCA,SAAS,IAAI,MAAe,KAAqB;AAC/C,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,WAAO;AAAA,EACT;AACA,QAAM,QAAS,KAAiC,GAAG;AACnD,SAAO,OAAO,UAAU,WAAW,QAAQ,OAAO,UAAU,WAAW,OAAO,KAAK,IAAI;AACzF;AASA,eAAsB,gBAAgB,MAAgB,KAAuC;AAC3F,QAAM,OAAO,MAAM,KAAK,cAAc,eAAe,EAAE,WAAW,cAAc,SAAS,CAAC;AAC1F,QAAM,WAAW,IAAI,MAAM,WAAW;AACtC,QAAM,eAAe,IAAI,MAAM,gBAAgB;AAC/C,MAAI,CAAC,YAAY,CAAC,cAAc;AAC9B,UAAM,IAAI,2BAAW,WAAW,iCAAiC;AAAA,EACnE;AAEA,QAAM,UAAU,OAAO,IAAI,MAAM,UAAU,CAAC;AAC5C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,aAAa,OAAO,SAAS,OAAO,KAAK,WAAW,IAAI,UAAU;AAAA,IAClE,WAAW,MAAM,cAAc;AAAA,EACjC;AACF;AAeA,eAAsB,eAAe,OAAwB,MAA2C;AACtG,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,KAAK,cAAc,eAAe;AAAA,MAC7C,gBAAgB,MAAM;AAAA,MACtB,WAAW,MAAM;AAAA,IACnB,CAAC;AAAA,EACH,SAAS,GAAG;AACV,QAAI,aAAa,8BAAc,EAAE,SAAS,QAAQ;AAChD,aAAO,EAAE,QAAQ,UAAU;AAAA,IAC7B;AACA,UAAM;AAAA,EACR;AACA,QAAM,OAAO,IAAI,MAAM,oBAAoB;AAC3C,QAAM,eAAe,IAAI,MAAM,eAAe;AAC9C,MAAI,CAAC,QAAQ,CAAC,cAAc;AAC1B,WAAO,EAAE,QAAQ,UAAU;AAAA,EAC7B;AACA,SAAO,EAAE,QAAQ,SAAS,MAAM,aAAa;AAC/C;AAWA,eAAsB,mBACpB,MACA,cACA,MACA,KACmB;AACnB,QAAM,OAAO,MAAM,KAAK,cAAc,UAAU;AAAA,IAC9C,YAAY;AAAA,IACZ,WAAW,cAAc;AAAA,IACzB;AAAA,IACA,eAAe;AAAA,IACf,cAAc,cAAc;AAAA,EAC9B,CAAC;AACD,SAAO,WAAW,MAAM,KAAK,EAAE;AACjC;AAWA,eAAsB,qBAAqB,QAAkB,MAAgB,KAAgC;AAC3G,QAAM,OAAO,MAAM,KAAK,cAAc,UAAU;AAAA,IAC9C,WAAW,cAAc;AAAA,IACzB,YAAY;AAAA,IACZ,eAAe,OAAO;AAAA,EACxB,CAAC;AACD,SAAO,WAAW,MAAM,KAAK,OAAO,cAAc,OAAO,UAAU;AACrE;AAWA,SAAS,WAAW,MAAe,KAAa,iBAAyB,iBAAoC;AAxK7G;AAyKE,QAAM,cAAc,IAAI,MAAM,cAAc;AAC5C,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,2BAAW,QAAQ,+BAA+B;AAAA,EAC9D;AACA,QAAM,UAAU,IAAI,MAAM,UAAU;AACpC,SAAO;AAAA,IACL;AAAA,IACA,cAAc,IAAI,MAAM,eAAe,KAAK;AAAA,IAC5C,eAAW,sBAAU,aAAa,cAAc,oBAAoB,GAAG;AAAA,IACvE,aAAa,mBAAU,6BAAiB,OAAO,IAAI,WAAtC,YAAoD;AAAA,EACnE;AACF;",
+  "names": []
+}

package/build/lib/providers/chatgpt-sub.js

@@ -0,0 +1,121 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var chatgpt_sub_exports = {};
+__export(chatgpt_sub_exports, {
+  CHATGPT_OAUTH: () => import_chatgpt_auth.CHATGPT_OAUTH,
+  CHATGPT_USAGE_URL: () => CHATGPT_USAGE_URL,
+  chatgptSubProvider: () => chatgptSubProvider,
+  parseChatgptUsage: () => parseChatgptUsage
+});
+module.exports = __toCommonJS(chatgpt_sub_exports);
+var import_http = require("../http");
+var import_provider = require("../provider");
+var import_chatgpt_auth = require("./chatgpt-auth");
+const CHATGPT_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
+function readWindow(raw, name, label) {
+  if (typeof raw !== "object" || raw === null) {
+    return void 0;
+  }
+  const entry = raw;
+  const percent = Number(entry.used_percent);
+  if (!Number.isFinite(percent)) {
+    return void 0;
+  }
+  const window = { name, label, percent };
+  const resetAt = Number(entry.reset_at);
+  if (Number.isFinite(resetAt) && resetAt > 0) {
+    const ms = resetAt > 1e12 ? resetAt : resetAt * 1e3;
+    window.resetAt = new Date(ms).toISOString();
+  }
+  return window;
+}
+function parseChatgptUsage(body) {
+  var _a, _b;
+  if (typeof body !== "object" || body === null) {
+    throw new import_provider.FetchError("network", "unexpected usage response");
+  }
+  const raw = body;
+  const limits = [];
+  const rateLimit = (_a = raw.rate_limit) != null ? _a : {};
+  const session = readWindow(rateLimit.primary_window, "session", "Session (5 h)");
+  const week = readWindow(rateLimit.secondary_window, "week", "Week");
+  if (session) {
+    limits.push(session);
+  }
+  if (week) {
+    limits.push(week);
+  }
+  for (const extra of Array.isArray(raw.additional_rate_limits) ? raw.additional_rate_limits : []) {
+    if (typeof extra !== "object" || extra === null) {
+      continue;
+    }
+    const entry = extra;
+    const label = typeof entry.limit_name === "string" ? entry.limit_name : "";
+    const name = label.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+    if (!name || limits.some((window2) => window2.name === name)) {
+      continue;
+    }
+    const window = readWindow(entry.rate_limit, name, label);
+    if (window) {
+      limits.push(window);
+    }
+  }
+  const snapshot = {};
+  if (limits.length) {
+    snapshot.limits = limits;
+  }
+  const credits = (_b = raw.credits) != null ? _b : {};
+  const balance = Number(credits.balance);
+  if (Number.isFinite(balance) && credits.unlimited !== true) {
+    snapshot.credits = { remaining: balance, currency: "USD" };
+  }
+  return snapshot;
+}
+function chatgptSubProvider(store, fetchJson = import_http.getJson, postJson, now = Date.now) {
+  let cached = null;
+  return {
+    kind: "chatgpt-sub",
+    fetch: async () => {
+      cached != null ? cached : cached = await store.load();
+      if (!cached) {
+        throw new import_provider.FetchError("auth", "not signed in \u2014 start the ChatGPT sign-in in the instance settings");
+      }
+      if (now() >= cached.expiresAt - 6e4) {
+        cached = await (0, import_chatgpt_auth.refreshChatgptTokens)(cached, postJson, now());
+        await store.save(cached);
+      }
+      const headers = {
+        Authorization: `Bearer ${cached.accessToken}`,
+        "User-Agent": "ioBroker.ai-usage"
+      };
+      if (cached.accountRef) {
+        headers["ChatGPT-Account-Id"] = cached.accountRef;
+      }
+      return parseChatgptUsage(await fetchJson(CHATGPT_USAGE_URL, headers));
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CHATGPT_OAUTH,
+  CHATGPT_USAGE_URL,
+  chatgptSubProvider,
+  parseChatgptUsage
+});
+//# sourceMappingURL=chatgpt-sub.js.map

package/build/lib/providers/chatgpt-sub.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/lib/providers/chatgpt-sub.ts"],
+  "sourcesContent": ["import { getJson, type JsonFetch } from \"../http\";\nimport {\n  FetchError,\n  type LimitWindow,\n  type TokenSet,\n  type TokenStore,\n  type UsageProvider,\n  type UsageSnapshot,\n} from \"../provider\";\nimport { CHATGPT_OAUTH, refreshChatgptTokens, type JsonPost } from \"./chatgpt-auth\";\n\n/** Where the subscription usage lives (the endpoint OpenAI's own Codex client uses). */\nexport const CHATGPT_USAGE_URL = \"https://chatgpt.com/backend-api/wham/usage\";\n\n/**\n * Read one rate-limit window.\n *\n * Both windows may be null when they do not apply to the account, and `reset_at`\n * is in Unix SECONDS \u2014 a value that already looks like milliseconds is passed\n * through, so a future format change cannot produce a year-58000 timestamp.\n *\n * @param raw the window object\n * @param name the object id segment\n * @param label the human-readable label\n * @returns the window, or undefined when unusable\n */\nfunction readWindow(raw: unknown, name: string, label: string): LimitWindow | undefined {\n  if (typeof raw !== \"object\" || raw === null) {\n    return undefined;\n  }\n  const entry = raw as Record<string, unknown>;\n  const percent = Number(entry.used_percent);\n  if (!Number.isFinite(percent)) {\n    return undefined;\n  }\n  const window: LimitWindow = { name, label, percent };\n  const resetAt = Number(entry.reset_at);\n  if (Number.isFinite(resetAt) && resetAt > 0) {\n    const ms = resetAt > 1e12 ? resetAt : resetAt * 1000;\n    window.resetAt = new Date(ms).toISOString();\n  }\n  return window;\n}\n\n/**\n * Parse a `/wham/usage` answer into a snapshot.\n *\n * Fields follow OpenAI's own generated models: `plan_type`, `rate_limit` with a\n * 5-hour `primary_window` and a weekly `secondary_window`, plus `credits` whose\n * balance arrives as a string in the schema but as a number in practice.\n *\n * @param body the parsed answer\n * @returns the snapshot\n */\nexport function parseChatgptUsage(body: unknown): UsageSnapshot {\n  if (typeof body !== \"object\" || body === null) {\n    throw new FetchError(\"network\", \"unexpected usage response\");\n  }\n  const raw = body as Record<string, unknown>;\n  const limits: LimitWindow[] = [];\n  const rateLimit = (raw.rate_limit ?? {}) as Record<string, unknown>;\n  const session = readWindow(rateLimit.primary_window, \"session\", \"Session (5 h)\");\n  const week = readWindow(rateLimit.secondary_window, \"week\", \"Week\");\n  if (session) {\n    limits.push(session);\n  }\n  if (week) {\n    limits.push(week);\n  }\n  for (const extra of Array.isArray(raw.additional_rate_limits) ? raw.additional_rate_limits : []) {\n    if (typeof extra !== \"object\" || extra === null) {\n      continue;\n    }\n    const entry = extra as Record<string, unknown>;\n    const label = typeof entry.limit_name === \"string\" ? entry.limit_name : \"\";\n    // The name becomes an object-id segment, so it must survive sanitizing and must\n    // not collide with a window already collected \u2014 a name of \"Session\" would\n    // otherwise overwrite the 5-hour window with an unrelated counter.\n    const name = label\n      .toLowerCase()\n      .replace(/[^a-z0-9]+/g, \"-\")\n      .replace(/^-+|-+$/g, \"\");\n    if (!name || limits.some(window => window.name === name)) {\n      continue;\n    }\n    const window = readWindow(entry.rate_limit, name, label);\n    if (window) {\n      limits.push(window);\n    }\n  }\n\n  const snapshot: UsageSnapshot = {};\n  if (limits.length) {\n    snapshot.limits = limits;\n  }\n\n  const credits = (raw.credits ?? {}) as Record<string, unknown>;\n  const balance = Number(credits.balance);\n  if (Number.isFinite(balance) && credits.unlimited !== true) {\n    snapshot.credits = { remaining: balance, currency: \"USD\" };\n  }\n  return snapshot;\n}\n\n/**\n * The ChatGPT/Codex subscription provider.\n *\n * @param store where the tokens live (keyed by provider, shared by no one else)\n * @param fetchJson the JSON-GET seam\n * @param postJson the JSON-POST seam (token refresh)\n * @param now clock (ms)\n * @returns the provider\n */\nexport function chatgptSubProvider(\n  store: TokenStore,\n  fetchJson: JsonFetch = getJson,\n  postJson: JsonPost,\n  now: () => number = Date.now,\n): UsageProvider {\n  let cached: TokenSet | null = null;\n  return {\n    kind: \"chatgpt-sub\",\n    fetch: async (): Promise<UsageSnapshot> => {\n      cached ??= await store.load();\n      if (!cached) {\n        throw new FetchError(\"auth\", \"not signed in \u2014 start the ChatGPT sign-in in the instance settings\");\n      }\n      if (now() >= cached.expiresAt - 60_000) {\n        cached = await refreshChatgptTokens(cached, postJson, now());\n        await store.save(cached);\n      }\n      const headers: Record<string, string> = {\n        Authorization: `Bearer ${cached.accessToken}`,\n        \"User-Agent\": \"ioBroker.ai-usage\",\n      };\n      // Only send the account id when we have one \u2014 an empty header is rejected.\n      if (cached.accountRef) {\n        headers[\"ChatGPT-Account-Id\"] = cached.accountRef;\n      }\n      return parseChatgptUsage(await fetchJson(CHATGPT_USAGE_URL, headers));\n    },\n  };\n}\n\nexport { CHATGPT_OAUTH };\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAwC;AACxC,sBAOO;AACP,0BAAmE;AAG5D,MAAM,oBAAoB;AAcjC,SAAS,WAAW,KAAc,MAAc,OAAwC;AACtF,MAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C,WAAO;AAAA,EACT;AACA,QAAM,QAAQ;AACd,QAAM,UAAU,OAAO,MAAM,YAAY;AACzC,MAAI,CAAC,OAAO,SAAS,OAAO,GAAG;AAC7B,WAAO;AAAA,EACT;AACA,QAAM,SAAsB,EAAE,MAAM,OAAO,QAAQ;AACnD,QAAM,UAAU,OAAO,MAAM,QAAQ;AACrC,MAAI,OAAO,SAAS,OAAO,KAAK,UAAU,GAAG;AAC3C,UAAM,KAAK,UAAU,OAAO,UAAU,UAAU;AAChD,WAAO,UAAU,IAAI,KAAK,EAAE,EAAE,YAAY;AAAA,EAC5C;AACA,SAAO;AACT;AAYO,SAAS,kBAAkB,MAA8B;AAtDhE;AAuDE,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,UAAM,IAAI,2BAAW,WAAW,2BAA2B;AAAA,EAC7D;AACA,QAAM,MAAM;AACZ,QAAM,SAAwB,CAAC;AAC/B,QAAM,aAAa,SAAI,eAAJ,YAAkB,CAAC;AACtC,QAAM,UAAU,WAAW,UAAU,gBAAgB,WAAW,eAAe;AAC/E,QAAM,OAAO,WAAW,UAAU,kBAAkB,QAAQ,MAAM;AAClE,MAAI,SAAS;AACX,WAAO,KAAK,OAAO;AAAA,EACrB;AACA,MAAI,MAAM;AACR,WAAO,KAAK,IAAI;AAAA,EAClB;AACA,aAAW,SAAS,MAAM,QAAQ,IAAI,sBAAsB,IAAI,IAAI,yBAAyB,CAAC,GAAG;AAC/F,QAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C;AAAA,IACF;AACA,UAAM,QAAQ;AACd,UAAM,QAAQ,OAAO,MAAM,eAAe,WAAW,MAAM,aAAa;AAIxE,UAAM,OAAO,MACV,YAAY,EACZ,QAAQ,eAAe,GAAG,EAC1B,QAAQ,YAAY,EAAE;AACzB,QAAI,CAAC,QAAQ,OAAO,KAAK,CAAAA,YAAUA,QAAO,SAAS,IAAI,GAAG;AACxD;AAAA,IACF;AACA,UAAM,SAAS,WAAW,MAAM,YAAY,MAAM,KAAK;AACvD,QAAI,QAAQ;AACV,aAAO,KAAK,MAAM;AAAA,IACpB;AAAA,EACF;AAEA,QAAM,WAA0B,CAAC;AACjC,MAAI,OAAO,QAAQ;AACjB,aAAS,SAAS;AAAA,EACpB;AAEA,QAAM,WAAW,SAAI,YAAJ,YAAe,CAAC;AACjC,QAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,MAAI,OAAO,SAAS,OAAO,KAAK,QAAQ,cAAc,MAAM;AAC1D,aAAS,UAAU,EAAE,WAAW,SAAS,UAAU,MAAM;AAAA,EAC3D;AACA,SAAO;AACT;AAWO,SAAS,mBACd,OACA,YAAuB,qBACvB,UACA,MAAoB,KAAK,KACV;AACf,MAAI,SAA0B;AAC9B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,YAAoC;AACzC,yCAAW,MAAM,MAAM,KAAK;AAC5B,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,2BAAW,QAAQ,yEAAoE;AAAA,MACnG;AACA,UAAI,IAAI,KAAK,OAAO,YAAY,KAAQ;AACtC,iBAAS,UAAM,0CAAqB,QAAQ,UAAU,IAAI,CAAC;AAC3D,cAAM,MAAM,KAAK,MAAM;AAAA,MACzB;AACA,YAAM,UAAkC;AAAA,QACtC,eAAe,UAAU,OAAO,WAAW;AAAA,QAC3C,cAAc;AAAA,MAChB;AAEA,UAAI,OAAO,YAAY;AACrB,gBAAQ,oBAAoB,IAAI,OAAO;AAAA,MACzC;AACA,aAAO,kBAAkB,MAAM,UAAU,mBAAmB,OAAO,CAAC;AAAA,IACtE;AAAA,EACF;AACF;",
+  "names": ["window"]
+}

package/build/lib/providers/claude-auth.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/providers/claude-auth.ts"],
-  "sourcesContent": ["import { createHash, randomBytes } from \"node:crypto\";\nimport { FetchError } from \"../provider\";\n\n/**\n * Claude subscription OAuth \u2014 the flow Claude Code and the HA reference integration\n * (trickv/hass-claude-usage, source-verified 2026-08-25) use: PKCE authorize on\n * claude.ai, the user pastes the resulting code, tokens come from the console\n * token endpoint and are refreshed with the refresh token.\n */\nexport const CLAUDE_OAUTH = {\n  clientId: \"9d1c250a-e61b-44d9-88ed-5944d1962f5e\",\n  authorizeUrl: \"https://claude.ai/oauth/authorize\",\n  tokenUrl: \"https://console.anthropic.com/v1/oauth/token\",\n  redirectUri: \"https://console.anthropic.com/oauth/code/callback\",\n  scopes: \"org:create_api_key user:profile user:inference\",\n  usageUrl: \"https://api.anthropic.com/api/oauth/usage\",\n  profileUrl: \"https://api.anthropic.com/api/oauth/profile\",\n  betaHeader: \"oauth-2025-04-20\",\n} as const;\n\n/** A PKCE pair for one sign-in attempt. */\nexport interface PkcePair {\n  /** The secret verifier (sent in the code exchange). */\n  verifier: string;\n  /** The S256 challenge (sent in the authorize URL). */\n  challenge: string;\n  /** The CSRF state. */\n  state: string;\n}\n\n/** The token set the flow yields. */\nexport interface TokenSet {\n  /** Bearer token for the usage/profile calls. */\n  accessToken: string;\n  /** Long-lived token to obtain fresh access tokens. */\n  refreshToken: string;\n  /** When the access token expires (ms since epoch). */\n  expiresAt: number;\n}\n\n/** The JSON-POST seam (tests inject a fake). */\nexport type JsonPost = (url: string, body: Record<string, unknown>) => Promise<unknown>;\n\n/**\n * Generate a PKCE verifier/challenge pair plus CSRF state.\n *\n * @returns the pair\n */\nexport function generatePkce(): PkcePair {\n  const verifier = randomBytes(32).toString(\"base64url\");\n  const challenge = createHash(\"sha256\").update(verifier).digest(\"base64url\");\n  return { verifier, challenge, state: randomBytes(24).toString(\"base64url\") };\n}\n\n/**\n * Build the authorize URL the user opens to sign in.\n *\n * @param pkce the sign-in attempt's PKCE pair\n * @returns the URL\n */\nexport function buildAuthorizeUrl(pkce: PkcePair): string {\n  const params = new URLSearchParams({\n    code: \"true\",\n    client_id: CLAUDE_OAUTH.clientId,\n    response_type: \"code\",\n    redirect_uri: CLAUDE_OAUTH.redirectUri,\n    scope: CLAUDE_OAUTH.scopes,\n    code_challenge: pkce.challenge,\n    code_challenge_method: \"S256\",\n    state: pkce.state,\n  });\n  return `${CLAUDE_OAUTH.authorizeUrl}?${params.toString()}`;\n}\n\n/**\n * Read a token response body into a {@link TokenSet}.\n *\n * @param body the token endpoint response\n * @param now current time (ms)\n * @param previousRefresh the refresh token to keep when the response carries none\n * @returns the token set\n */\nfunction tokenSetFrom(body: unknown, now: number, previousRefresh = \"\"): TokenSet {\n  const data = body as Record<string, unknown> | null;\n  const accessToken = typeof data?.access_token === \"string\" ? data.access_token : \"\";\n  if (!accessToken) {\n    throw new FetchError(\"auth\", \"token response carries no access token\");\n  }\n  const refreshToken =\n    typeof data?.refresh_token === \"string\" && data.refresh_token ? data.refresh_token : previousRefresh;\n  const expiresIn = Number(data?.expires_in);\n  return {\n    accessToken,\n    refreshToken,\n    expiresAt: now + (Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn : 3600) * 1000,\n  };\n}\n\n/**\n * Exchange a pasted authorization code (possibly in the `code#state` form) for tokens.\n *\n * @param pastedCode what the user pasted\n * @param pkce the sign-in attempt's PKCE pair\n * @param postJson the JSON-POST seam\n * @param now current time (ms)\n * @returns the token set\n */\nexport async function exchangeCode(\n  pastedCode: string,\n  pkce: PkcePair,\n  postJson: JsonPost,\n  now: number,\n): Promise<TokenSet> {\n  const [code, state = \"\"] = pastedCode.trim().split(\"#\");\n  if (!code) {\n    throw new FetchError(\"auth\", \"empty authorization code\");\n  }\n  if (state && state !== pkce.state) {\n    throw new FetchError(\"auth\", \"state mismatch \u2014 start the sign-in again\");\n  }\n  const body = await postJson(CLAUDE_OAUTH.tokenUrl, {\n    grant_type: \"authorization_code\",\n    code,\n    state,\n    client_id: CLAUDE_OAUTH.clientId,\n    redirect_uri: CLAUDE_OAUTH.redirectUri,\n    code_verifier: pkce.verifier,\n  });\n  return tokenSetFrom(body, now);\n}\n\n/**\n * Obtain a fresh access token with the refresh token.\n *\n * @param tokens the current token set\n * @param postJson the JSON-POST seam\n * @param now current time (ms)\n * @returns the new token set (keeps the old refresh token when none is returned)\n */\nexport async function refreshTokens(tokens: TokenSet, postJson: JsonPost, now: number): Promise<TokenSet> {\n  if (!tokens.refreshToken) {\n    throw new FetchError(\"auth\", \"no refresh token \u2014 sign in again\");\n  }\n  const body = await postJson(CLAUDE_OAUTH.tokenUrl, {\n    grant_type: \"refresh_token\",\n    refresh_token: tokens.refreshToken,\n    client_id: CLAUDE_OAUTH.clientId,\n  });\n  return tokenSetFrom(body, now, tokens.refreshToken);\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAwC;AACxC,sBAA2B;AAQpB,MAAM,eAAe;AAAA,EAC1B,UAAU;AAAA,EACV,cAAc;AAAA,EACd,UAAU;AAAA,EACV,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,YAAY;AACd;AA8BO,SAAS,eAAyB;AACvC,QAAM,eAAW,gCAAY,EAAE,EAAE,SAAS,WAAW;AACrD,QAAM,gBAAY,+BAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,WAAW;AAC1E,SAAO,EAAE,UAAU,WAAW,WAAO,gCAAY,EAAE,EAAE,SAAS,WAAW,EAAE;AAC7E;AAQO,SAAS,kBAAkB,MAAwB;AACxD,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,MAAM;AAAA,IACN,WAAW,aAAa;AAAA,IACxB,eAAe;AAAA,IACf,cAAc,aAAa;AAAA,IAC3B,OAAO,aAAa;AAAA,IACpB,gBAAgB,KAAK;AAAA,IACrB,uBAAuB;AAAA,IACvB,OAAO,KAAK;AAAA,EACd,CAAC;AACD,SAAO,GAAG,aAAa,YAAY,IAAI,OAAO,SAAS,CAAC;AAC1D;AAUA,SAAS,aAAa,MAAe,KAAa,kBAAkB,IAAc;AAChF,QAAM,OAAO;AACb,QAAM,cAAc,QAAO,6BAAM,kBAAiB,WAAW,KAAK,eAAe;AACjF,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,2BAAW,QAAQ,wCAAwC;AAAA,EACvE;AACA,QAAM,eACJ,QAAO,6BAAM,mBAAkB,YAAY,KAAK,gBAAgB,KAAK,gBAAgB;AACvF,QAAM,YAAY,OAAO,6BAAM,UAAU;AACzC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,OAAO,OAAO,SAAS,SAAS,KAAK,YAAY,IAAI,YAAY,QAAQ;AAAA,EACtF;AACF;AAWA,eAAsB,aACpB,YACA,MACA,UACA,KACmB;AACnB,QAAM,CAAC,MAAM,QAAQ,EAAE,IAAI,WAAW,KAAK,EAAE,MAAM,GAAG;AACtD,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAW,QAAQ,0BAA0B;AAAA,EACzD;AACA,MAAI,SAAS,UAAU,KAAK,OAAO;AACjC,UAAM,IAAI,2BAAW,QAAQ,+CAA0C;AAAA,EACzE;AACA,QAAM,OAAO,MAAM,SAAS,aAAa,UAAU;AAAA,IACjD,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,aAAa;AAAA,IACxB,cAAc,aAAa;AAAA,IAC3B,eAAe,KAAK;AAAA,EACtB,CAAC;AACD,SAAO,aAAa,MAAM,GAAG;AAC/B;AAUA,eAAsB,cAAc,QAAkB,UAAoB,KAAgC;AACxG,MAAI,CAAC,OAAO,cAAc;AACxB,UAAM,IAAI,2BAAW,QAAQ,uCAAkC;AAAA,EACjE;AACA,QAAM,OAAO,MAAM,SAAS,aAAa,UAAU;AAAA,IACjD,YAAY;AAAA,IACZ,eAAe,OAAO;AAAA,IACtB,WAAW,aAAa;AAAA,EAC1B,CAAC;AACD,SAAO,aAAa,MAAM,KAAK,OAAO,YAAY;AACpD;",
+  "sourcesContent": ["import { createHash, randomBytes } from \"node:crypto\";\nimport { FetchError, type TokenSet } from \"../provider\";\n\n/**\n * Claude subscription OAuth \u2014 the flow Claude Code and the HA reference integration\n * (trickv/hass-claude-usage, source-verified 2026-08-25) use: PKCE authorize on\n * claude.ai, the user pastes the resulting code, tokens come from the console\n * token endpoint and are refreshed with the refresh token.\n */\nexport const CLAUDE_OAUTH = {\n  clientId: \"9d1c250a-e61b-44d9-88ed-5944d1962f5e\",\n  authorizeUrl: \"https://claude.ai/oauth/authorize\",\n  tokenUrl: \"https://console.anthropic.com/v1/oauth/token\",\n  redirectUri: \"https://console.anthropic.com/oauth/code/callback\",\n  scopes: \"org:create_api_key user:profile user:inference\",\n  usageUrl: \"https://api.anthropic.com/api/oauth/usage\",\n  profileUrl: \"https://api.anthropic.com/api/oauth/profile\",\n  betaHeader: \"oauth-2025-04-20\",\n} as const;\n\n/** A PKCE pair for one sign-in attempt. */\nexport interface PkcePair {\n  /** The secret verifier (sent in the code exchange). */\n  verifier: string;\n  /** The S256 challenge (sent in the authorize URL). */\n  challenge: string;\n  /** The CSRF state. */\n  state: string;\n}\n\n/** The JSON-POST seam (tests inject a fake). */\nexport type JsonPost = (url: string, body: Record<string, unknown>) => Promise<unknown>;\n\n/**\n * Generate a PKCE verifier/challenge pair plus CSRF state.\n *\n * @returns the pair\n */\nexport function generatePkce(): PkcePair {\n  const verifier = randomBytes(32).toString(\"base64url\");\n  const challenge = createHash(\"sha256\").update(verifier).digest(\"base64url\");\n  return { verifier, challenge, state: randomBytes(24).toString(\"base64url\") };\n}\n\n/**\n * Build the authorize URL the user opens to sign in.\n *\n * @param pkce the sign-in attempt's PKCE pair\n * @returns the URL\n */\nexport function buildAuthorizeUrl(pkce: PkcePair): string {\n  const params = new URLSearchParams({\n    code: \"true\",\n    client_id: CLAUDE_OAUTH.clientId,\n    response_type: \"code\",\n    redirect_uri: CLAUDE_OAUTH.redirectUri,\n    scope: CLAUDE_OAUTH.scopes,\n    code_challenge: pkce.challenge,\n    code_challenge_method: \"S256\",\n    state: pkce.state,\n  });\n  return `${CLAUDE_OAUTH.authorizeUrl}?${params.toString()}`;\n}\n\n/**\n * Read a token response body into a {@link TokenSet}.\n *\n * @param body the token endpoint response\n * @param now current time (ms)\n * @param previousRefresh the refresh token to keep when the response carries none\n * @returns the token set\n */\nfunction tokenSetFrom(body: unknown, now: number, previousRefresh = \"\"): TokenSet {\n  const data = body as Record<string, unknown> | null;\n  const accessToken = typeof data?.access_token === \"string\" ? data.access_token : \"\";\n  if (!accessToken) {\n    throw new FetchError(\"auth\", \"token response carries no access token\");\n  }\n  const refreshToken =\n    typeof data?.refresh_token === \"string\" && data.refresh_token ? data.refresh_token : previousRefresh;\n  const expiresIn = Number(data?.expires_in);\n  return {\n    accessToken,\n    refreshToken,\n    expiresAt: now + (Number.isFinite(expiresIn) && expiresIn > 0 ? expiresIn : 3600) * 1000,\n  };\n}\n\n/**\n * Exchange a pasted authorization code (possibly in the `code#state` form) for tokens.\n *\n * @param pastedCode what the user pasted\n * @param pkce the sign-in attempt's PKCE pair\n * @param postJson the JSON-POST seam\n * @param now current time (ms)\n * @returns the token set\n */\nexport async function exchangeCode(\n  pastedCode: string,\n  pkce: PkcePair,\n  postJson: JsonPost,\n  now: number,\n): Promise<TokenSet> {\n  const [code, state = \"\"] = pastedCode.trim().split(\"#\");\n  if (!code) {\n    throw new FetchError(\"auth\", \"empty authorization code\");\n  }\n  if (state && state !== pkce.state) {\n    throw new FetchError(\"auth\", \"state mismatch \u2014 start the sign-in again\");\n  }\n  const body = await postJson(CLAUDE_OAUTH.tokenUrl, {\n    grant_type: \"authorization_code\",\n    code,\n    state,\n    client_id: CLAUDE_OAUTH.clientId,\n    redirect_uri: CLAUDE_OAUTH.redirectUri,\n    code_verifier: pkce.verifier,\n  });\n  return tokenSetFrom(body, now);\n}\n\n/**\n * Obtain a fresh access token with the refresh token.\n *\n * @param tokens the current token set\n * @param postJson the JSON-POST seam\n * @param now current time (ms)\n * @returns the new token set (keeps the old refresh token when none is returned)\n */\nexport async function refreshTokens(tokens: TokenSet, postJson: JsonPost, now: number): Promise<TokenSet> {\n  if (!tokens.refreshToken) {\n    throw new FetchError(\"auth\", \"no refresh token \u2014 sign in again\");\n  }\n  const body = await postJson(CLAUDE_OAUTH.tokenUrl, {\n    grant_type: \"refresh_token\",\n    refresh_token: tokens.refreshToken,\n    client_id: CLAUDE_OAUTH.clientId,\n  });\n  return tokenSetFrom(body, now, tokens.refreshToken);\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAwC;AACxC,sBAA0C;AAQnC,MAAM,eAAe;AAAA,EAC1B,UAAU;AAAA,EACV,cAAc;AAAA,EACd,UAAU;AAAA,EACV,aAAa;AAAA,EACb,QAAQ;AAAA,EACR,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,YAAY;AACd;AAoBO,SAAS,eAAyB;AACvC,QAAM,eAAW,gCAAY,EAAE,EAAE,SAAS,WAAW;AACrD,QAAM,gBAAY,+BAAW,QAAQ,EAAE,OAAO,QAAQ,EAAE,OAAO,WAAW;AAC1E,SAAO,EAAE,UAAU,WAAW,WAAO,gCAAY,EAAE,EAAE,SAAS,WAAW,EAAE;AAC7E;AAQO,SAAS,kBAAkB,MAAwB;AACxD,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,MAAM;AAAA,IACN,WAAW,aAAa;AAAA,IACxB,eAAe;AAAA,IACf,cAAc,aAAa;AAAA,IAC3B,OAAO,aAAa;AAAA,IACpB,gBAAgB,KAAK;AAAA,IACrB,uBAAuB;AAAA,IACvB,OAAO,KAAK;AAAA,EACd,CAAC;AACD,SAAO,GAAG,aAAa,YAAY,IAAI,OAAO,SAAS,CAAC;AAC1D;AAUA,SAAS,aAAa,MAAe,KAAa,kBAAkB,IAAc;AAChF,QAAM,OAAO;AACb,QAAM,cAAc,QAAO,6BAAM,kBAAiB,WAAW,KAAK,eAAe;AACjF,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,2BAAW,QAAQ,wCAAwC;AAAA,EACvE;AACA,QAAM,eACJ,QAAO,6BAAM,mBAAkB,YAAY,KAAK,gBAAgB,KAAK,gBAAgB;AACvF,QAAM,YAAY,OAAO,6BAAM,UAAU;AACzC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,WAAW,OAAO,OAAO,SAAS,SAAS,KAAK,YAAY,IAAI,YAAY,QAAQ;AAAA,EACtF;AACF;AAWA,eAAsB,aACpB,YACA,MACA,UACA,KACmB;AACnB,QAAM,CAAC,MAAM,QAAQ,EAAE,IAAI,WAAW,KAAK,EAAE,MAAM,GAAG;AACtD,MAAI,CAAC,MAAM;AACT,UAAM,IAAI,2BAAW,QAAQ,0BAA0B;AAAA,EACzD;AACA,MAAI,SAAS,UAAU,KAAK,OAAO;AACjC,UAAM,IAAI,2BAAW,QAAQ,+CAA0C;AAAA,EACzE;AACA,QAAM,OAAO,MAAM,SAAS,aAAa,UAAU;AAAA,IACjD,YAAY;AAAA,IACZ;AAAA,IACA;AAAA,IACA,WAAW,aAAa;AAAA,IACxB,cAAc,aAAa;AAAA,IAC3B,eAAe,KAAK;AAAA,EACtB,CAAC;AACD,SAAO,aAAa,MAAM,GAAG;AAC/B;AAUA,eAAsB,cAAc,QAAkB,UAAoB,KAAgC;AACxG,MAAI,CAAC,OAAO,cAAc;AACxB,UAAM,IAAI,2BAAW,QAAQ,uCAAkC;AAAA,EACjE;AACA,QAAM,OAAO,MAAM,SAAS,aAAa,UAAU;AAAA,IACjD,YAAY;AAAA,IACZ,eAAe,OAAO;AAAA,IACtB,WAAW,aAAa;AAAA,EAC1B,CAAC;AACD,SAAO,aAAa,MAAM,KAAK,OAAO,YAAY;AACpD;",
   "names": []
 }

package/build/lib/providers/claude-sub.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/lib/providers/claude-sub.ts"],
-  "sourcesContent": ["import { getJson, type JsonFetch } from \"../http\";\nimport { FetchError, type LimitWindow, type UsageProvider, type UsageSnapshot } from \"../provider\";\nimport { sanitizeId } from \"../pure-helpers\";\nimport { CLAUDE_OAUTH, refreshTokens, type JsonPost, type TokenSet } from \"./claude-auth\";\n\n/**\n * Parse a Claude subscription `GET /api/oauth/usage` response into a snapshot.\n *\n * Source-verified against the HA reference integration (trickv/hass-claude-usage):\n * the LIVE per-scope meters are the top-level `limits[]` array (kind session /\n * weekly_all / weekly_scoped + scope.model/surface, percent, resets_at); the flat\n * `five_hour`/`seven_day*` keys are placeholders on current accounts and serve only\n * as a fallback. Extra usage arrives as `extra_usage` (credits \u00D7 decimal_places) or\n * the newer `spend` schema (money objects with amount_minor/exponent).\n *\n * @param body the usage response\n * @returns the snapshot\n */\nexport function parseClaudeUsage(body: unknown): UsageSnapshot {\n  if (typeof body !== \"object\" || body === null) {\n    throw new FetchError(\"network\", \"unexpected usage response\");\n  }\n  const raw = body as Record<string, unknown>;\n  const limits: LimitWindow[] = [];\n  const seen = new Set<string>();\n  const push = (name: string, label: string, percent: unknown, resetsAt: unknown): void => {\n    const id = sanitizeId(name);\n    const value = Number(percent);\n    if (!id || seen.has(id) || !Number.isFinite(value)) {\n      return;\n    }\n    seen.add(id);\n    const window: LimitWindow = { name: id, label, percent: value };\n    if (typeof resetsAt === \"string\" && resetsAt) {\n      window.resetAt = resetsAt;\n    }\n    limits.push(window);\n  };\n\n  // The live meters: limits[] \u2014 buckets keyed by kind + model + surface.\n  if (Array.isArray(raw.limits)) {\n    for (const entry of raw.limits) {\n      if (typeof entry !== \"object\" || entry === null) {\n        continue;\n      }\n      const limit = entry as Record<string, unknown>;\n      const kind = typeof limit.kind === \"string\" ? limit.kind : \"\";\n      if (!kind) {\n        continue;\n      }\n      const scope = (limit.scope ?? {}) as Record<string, unknown>;\n      const model = ((scope.model ?? {}) as Record<string, unknown>).display_name;\n      const surface = scope.surface;\n      const nameParts = [kind === \"session\" ? \"session\" : kind === \"weekly_all\" ? \"week\" : kind];\n      const labelParts = [\n        kind === \"session\" ? \"Session (5 h)\" : kind === \"weekly_all\" ? \"Week (all models)\" : kind.replace(/_/g, \" \"),\n      ];\n      if (typeof model === \"string\" && model) {\n        nameParts.push(model);\n        labelParts.push(model);\n      }\n      if (typeof surface === \"string\" && surface) {\n        nameParts.push(surface);\n        labelParts.push(`(${surface})`);\n      }\n      push(nameParts.join(\"-\"), labelParts.join(\" \"), limit.percent, limit.resets_at);\n    }\n  }\n\n  // Fallback for older payloads without the limits[] array.\n  if (limits.length === 0) {\n    const flat = (key: string, name: string, label: string): void => {\n      const block = raw[key];\n      if (typeof block === \"object\" && block !== null) {\n        const data = block as Record<string, unknown>;\n        push(name, label, data.utilization, data.resets_at);\n      }\n    };\n    flat(\"five_hour\", \"session\", \"Session (5 h)\");\n    flat(\"seven_day\", \"week\", \"Week (all models)\");\n    flat(\"seven_day_sonnet\", \"week-sonnet\", \"Week Sonnet\");\n  }\n\n  const snapshot: UsageSnapshot = {};\n  if (limits.length > 0) {\n    snapshot.limits = limits;\n  }\n  applyExtraUsage(raw, snapshot);\n  return snapshot;\n}\n\n/**\n * Map the extra-usage block (either schema) onto credits + monthly costs.\n *\n * @param raw the usage response\n * @param snapshot the snapshot to extend\n */\nfunction applyExtraUsage(raw: Record<string, unknown>, snapshot: UsageSnapshot): void {\n  const extra = raw.extra_usage as Record<string, unknown> | undefined | null;\n  const spend = raw.spend as Record<string, unknown> | undefined | null;\n  if (extra && extra.is_enabled === true) {\n    const divisor = 10 ** (Number.isFinite(Number(extra.decimal_places)) ? Number(extra.decimal_places) : 2);\n    const used = Number(extra.used_credits);\n    const limit = Number(extra.monthly_limit);\n    const percent = Number(extra.utilization);\n    snapshot.credits = {\n      used: Number.isFinite(used) ? used / divisor : undefined,\n      limit: Number.isFinite(limit) ? limit / divisor : undefined,\n      percent: Number.isFinite(percent) ? percent : undefined,\n      currency: \"USD\",\n    };\n    if (snapshot.credits.used !== undefined) {\n      snapshot.costs = { month: snapshot.credits.used, currency: \"USD\" };\n    }\n    return;\n  }\n  if (spend && spend.enabled === true) {\n    const money = (value: unknown): number | undefined => {\n      const obj = value as Record<string, unknown> | null | undefined;\n      const amount = Number(obj?.amount_minor);\n      const exponent = Number(obj?.exponent);\n      return Number.isFinite(amount) ? amount / 10 ** (Number.isFinite(exponent) ? exponent : 2) : undefined;\n    };\n    const used = money(spend.used);\n    const percent = Number(spend.percent);\n    snapshot.credits = {\n      used,\n      limit: money(spend.limit),\n      percent: Number.isFinite(percent) ? percent : undefined,\n      currency: \"USD\",\n    };\n    if (used !== undefined) {\n      snapshot.costs = { month: used, currency: \"USD\" };\n    }\n  }\n}\n\n/** Persistent token storage \u2014 the adapter keeps the tokens in its data directory. */\nexport interface TokenStore {\n  /** Read the stored token set, or null when never signed in. */\n  load(): Promise<TokenSet | null>;\n  /** Persist a token set. */\n  save(tokens: TokenSet): Promise<void>;\n}\n\n/**\n * The Claude subscription provider: keeps the access token fresh (refresh 60 s\n * before expiry, persisted via the store) and reads the usage meters.\n *\n * @param store the token storage\n * @param fetchJson the JSON-GET seam\n * @param postJson the JSON-POST seam (token refresh)\n * @param now clock (ms) \u2014 injected for tests\n * @returns the provider\n */\nexport function claudeSubProvider(\n  store: TokenStore,\n  fetchJson: JsonFetch = getJson,\n  postJson: JsonPost,\n  now: () => number = Date.now,\n): UsageProvider {\n  let cached: TokenSet | null = null;\n  return {\n    kind: \"claude-sub\",\n    fetch: async (): Promise<UsageSnapshot> => {\n      cached ??= await store.load();\n      if (!cached) {\n        throw new FetchError(\"auth\", \"not signed in \u2014 run the Claude sign-in in the instance settings\");\n      }\n      if (now() >= cached.expiresAt - 60_000) {\n        cached = await refreshTokens(cached, postJson, now());\n        await store.save(cached);\n      }\n      const body = await fetchJson(CLAUDE_OAUTH.usageUrl, {\n        Authorization: `Bearer ${cached.accessToken}`,\n        \"anthropic-beta\": CLAUDE_OAUTH.betaHeader,\n        // Identify ourselves \u2014 an unset/odd user agent lands in a harder-throttled\n        // bucket of this endpoint (community-measured; sources in the concept doc).\n        \"User-Agent\": \"ioBroker.ai-usage\",\n      });\n      return parseClaudeUsage(body);\n    },\n  };\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAwC;AACxC,sBAAqF;AACrF,0BAA2B;AAC3B,yBAA0E;AAenE,SAAS,iBAAiB,MAA8B;AAlB/D;AAmBE,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,UAAM,IAAI,2BAAW,WAAW,2BAA2B;AAAA,EAC7D;AACA,QAAM,MAAM;AACZ,QAAM,SAAwB,CAAC;AAC/B,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,OAAO,CAAC,MAAc,OAAe,SAAkB,aAA4B;AACvF,UAAM,SAAK,gCAAW,IAAI;AAC1B,UAAM,QAAQ,OAAO,OAAO;AAC5B,QAAI,CAAC,MAAM,KAAK,IAAI,EAAE,KAAK,CAAC,OAAO,SAAS,KAAK,GAAG;AAClD;AAAA,IACF;AACA,SAAK,IAAI,EAAE;AACX,UAAM,SAAsB,EAAE,MAAM,IAAI,OAAO,SAAS,MAAM;AAC9D,QAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,aAAO,UAAU;AAAA,IACnB;AACA,WAAO,KAAK,MAAM;AAAA,EACpB;AAGA,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAG;AAC7B,eAAW,SAAS,IAAI,QAAQ;AAC9B,UAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C;AAAA,MACF;AACA,YAAM,QAAQ;AACd,YAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,WAAM,UAAN,YAAe,CAAC;AAC/B,YAAM,UAAU,WAAM,UAAN,YAAe,CAAC,GAA+B;AAC/D,YAAM,UAAU,MAAM;AACtB,YAAM,YAAY,CAAC,SAAS,YAAY,YAAY,SAAS,eAAe,SAAS,IAAI;AACzF,YAAM,aAAa;AAAA,QACjB,SAAS,YAAY,kBAAkB,SAAS,eAAe,sBAAsB,KAAK,QAAQ,MAAM,GAAG;AAAA,MAC7G;AACA,UAAI,OAAO,UAAU,YAAY,OAAO;AACtC,kBAAU,KAAK,KAAK;AACpB,mBAAW,KAAK,KAAK;AAAA,MACvB;AACA,UAAI,OAAO,YAAY,YAAY,SAAS;AAC1C,kBAAU,KAAK,OAAO;AACtB,mBAAW,KAAK,IAAI,OAAO,GAAG;AAAA,MAChC;AACA,WAAK,UAAU,KAAK,GAAG,GAAG,WAAW,KAAK,GAAG,GAAG,MAAM,SAAS,MAAM,SAAS;AAAA,IAChF;AAAA,EACF;AAGA,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,OAAO,CAAC,KAAa,MAAc,UAAwB;AAC/D,YAAM,QAAQ,IAAI,GAAG;AACrB,UAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,cAAM,OAAO;AACb,aAAK,MAAM,OAAO,KAAK,aAAa,KAAK,SAAS;AAAA,MACpD;AAAA,IACF;AACA,SAAK,aAAa,WAAW,eAAe;AAC5C,SAAK,aAAa,QAAQ,mBAAmB;AAC7C,SAAK,oBAAoB,eAAe,aAAa;AAAA,EACvD;AAEA,QAAM,WAA0B,CAAC;AACjC,MAAI,OAAO,SAAS,GAAG;AACrB,aAAS,SAAS;AAAA,EACpB;AACA,kBAAgB,KAAK,QAAQ;AAC7B,SAAO;AACT;AAQA,SAAS,gBAAgB,KAA8B,UAA+B;AACpF,QAAM,QAAQ,IAAI;AAClB,QAAM,QAAQ,IAAI;AAClB,MAAI,SAAS,MAAM,eAAe,MAAM;AACtC,UAAM,UAAU,OAAO,OAAO,SAAS,OAAO,MAAM,cAAc,CAAC,IAAI,OAAO,MAAM,cAAc,IAAI;AACtG,UAAM,OAAO,OAAO,MAAM,YAAY;AACtC,UAAM,QAAQ,OAAO,MAAM,aAAa;AACxC,UAAM,UAAU,OAAO,MAAM,WAAW;AACxC,aAAS,UAAU;AAAA,MACjB,MAAM,OAAO,SAAS,IAAI,IAAI,OAAO,UAAU;AAAA,MAC/C,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ,UAAU;AAAA,MAClD,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,MAC9C,UAAU;AAAA,IACZ;AACA,QAAI,SAAS,QAAQ,SAAS,QAAW;AACvC,eAAS,QAAQ,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,MAAM;AAAA,IACnE;AACA;AAAA,EACF;AACA,MAAI,SAAS,MAAM,YAAY,MAAM;AACnC,UAAM,QAAQ,CAAC,UAAuC;AACpD,YAAM,MAAM;AACZ,YAAM,SAAS,OAAO,2BAAK,YAAY;AACvC,YAAM,WAAW,OAAO,2BAAK,QAAQ;AACrC,aAAO,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,OAAO,SAAS,QAAQ,IAAI,WAAW,KAAK;AAAA,IAC/F;AACA,UAAM,OAAO,MAAM,MAAM,IAAI;AAC7B,UAAM,UAAU,OAAO,MAAM,OAAO;AACpC,aAAS,UAAU;AAAA,MACjB;AAAA,MACA,OAAO,MAAM,MAAM,KAAK;AAAA,MACxB,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,MAC9C,UAAU;AAAA,IACZ;AACA,QAAI,SAAS,QAAW;AACtB,eAAS,QAAQ,EAAE,OAAO,MAAM,UAAU,MAAM;AAAA,IAClD;AAAA,EACF;AACF;AAoBO,SAAS,kBACd,OACA,YAAuB,qBACvB,UACA,MAAoB,KAAK,KACV;AACf,MAAI,SAA0B;AAC9B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,YAAoC;AACzC,yCAAW,MAAM,MAAM,KAAK;AAC5B,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,2BAAW,QAAQ,sEAAiE;AAAA,MAChG;AACA,UAAI,IAAI,KAAK,OAAO,YAAY,KAAQ;AACtC,iBAAS,UAAM,kCAAc,QAAQ,UAAU,IAAI,CAAC;AACpD,cAAM,MAAM,KAAK,MAAM;AAAA,MACzB;AACA,YAAM,OAAO,MAAM,UAAU,gCAAa,UAAU;AAAA,QAClD,eAAe,UAAU,OAAO,WAAW;AAAA,QAC3C,kBAAkB,gCAAa;AAAA;AAAA;AAAA,QAG/B,cAAc;AAAA,MAChB,CAAC;AACD,aAAO,iBAAiB,IAAI;AAAA,IAC9B;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { getJson, type JsonFetch } from \"../http\";\nimport {\n  FetchError,\n  type LimitWindow,\n  type TokenSet,\n  type TokenStore,\n  type UsageProvider,\n  type UsageSnapshot,\n} from \"../provider\";\nimport { sanitizeId } from \"../pure-helpers\";\nimport { CLAUDE_OAUTH, refreshTokens, type JsonPost } from \"./claude-auth\";\n\n/**\n * Parse a Claude subscription `GET /api/oauth/usage` response into a snapshot.\n *\n * Source-verified against the HA reference integration (trickv/hass-claude-usage):\n * the LIVE per-scope meters are the top-level `limits[]` array (kind session /\n * weekly_all / weekly_scoped + scope.model/surface, percent, resets_at); the flat\n * `five_hour`/`seven_day*` keys are placeholders on current accounts and serve only\n * as a fallback. Extra usage arrives as `extra_usage` (credits \u00D7 decimal_places) or\n * the newer `spend` schema (money objects with amount_minor/exponent).\n *\n * @param body the usage response\n * @returns the snapshot\n */\nexport function parseClaudeUsage(body: unknown): UsageSnapshot {\n  if (typeof body !== \"object\" || body === null) {\n    throw new FetchError(\"network\", \"unexpected usage response\");\n  }\n  const raw = body as Record<string, unknown>;\n  const limits: LimitWindow[] = [];\n  const seen = new Set<string>();\n  const push = (name: string, label: string, percent: unknown, resetsAt: unknown): void => {\n    const id = sanitizeId(name);\n    const value = Number(percent);\n    if (!id || seen.has(id) || !Number.isFinite(value)) {\n      return;\n    }\n    seen.add(id);\n    const window: LimitWindow = { name: id, label, percent: value };\n    if (typeof resetsAt === \"string\" && resetsAt) {\n      window.resetAt = resetsAt;\n    }\n    limits.push(window);\n  };\n\n  // The live meters: limits[] \u2014 buckets keyed by kind + model + surface.\n  if (Array.isArray(raw.limits)) {\n    for (const entry of raw.limits) {\n      if (typeof entry !== \"object\" || entry === null) {\n        continue;\n      }\n      const limit = entry as Record<string, unknown>;\n      const kind = typeof limit.kind === \"string\" ? limit.kind : \"\";\n      if (!kind) {\n        continue;\n      }\n      const scope = (limit.scope ?? {}) as Record<string, unknown>;\n      const model = ((scope.model ?? {}) as Record<string, unknown>).display_name;\n      const surface = scope.surface;\n      const nameParts = [kind === \"session\" ? \"session\" : kind === \"weekly_all\" ? \"week\" : kind];\n      const labelParts = [\n        kind === \"session\" ? \"Session (5 h)\" : kind === \"weekly_all\" ? \"Week (all models)\" : kind.replace(/_/g, \" \"),\n      ];\n      if (typeof model === \"string\" && model) {\n        nameParts.push(model);\n        labelParts.push(model);\n      }\n      if (typeof surface === \"string\" && surface) {\n        nameParts.push(surface);\n        labelParts.push(`(${surface})`);\n      }\n      push(nameParts.join(\"-\"), labelParts.join(\" \"), limit.percent, limit.resets_at);\n    }\n  }\n\n  // Fallback for older payloads without the limits[] array.\n  if (limits.length === 0) {\n    const flat = (key: string, name: string, label: string): void => {\n      const block = raw[key];\n      if (typeof block === \"object\" && block !== null) {\n        const data = block as Record<string, unknown>;\n        push(name, label, data.utilization, data.resets_at);\n      }\n    };\n    flat(\"five_hour\", \"session\", \"Session (5 h)\");\n    flat(\"seven_day\", \"week\", \"Week (all models)\");\n    flat(\"seven_day_sonnet\", \"week-sonnet\", \"Week Sonnet\");\n  }\n\n  const snapshot: UsageSnapshot = {};\n  if (limits.length > 0) {\n    snapshot.limits = limits;\n  }\n  applyExtraUsage(raw, snapshot);\n  return snapshot;\n}\n\n/**\n * Map the extra-usage block (either schema) onto credits + monthly costs.\n *\n * @param raw the usage response\n * @param snapshot the snapshot to extend\n */\nfunction applyExtraUsage(raw: Record<string, unknown>, snapshot: UsageSnapshot): void {\n  const extra = raw.extra_usage as Record<string, unknown> | undefined | null;\n  const spend = raw.spend as Record<string, unknown> | undefined | null;\n  if (extra && extra.is_enabled === true) {\n    const divisor = 10 ** (Number.isFinite(Number(extra.decimal_places)) ? Number(extra.decimal_places) : 2);\n    const used = Number(extra.used_credits);\n    const limit = Number(extra.monthly_limit);\n    const percent = Number(extra.utilization);\n    snapshot.credits = {\n      used: Number.isFinite(used) ? used / divisor : undefined,\n      limit: Number.isFinite(limit) ? limit / divisor : undefined,\n      percent: Number.isFinite(percent) ? percent : undefined,\n      currency: \"USD\",\n    };\n    if (snapshot.credits.used !== undefined) {\n      snapshot.costs = { month: snapshot.credits.used, currency: \"USD\" };\n    }\n    return;\n  }\n  if (spend && spend.enabled === true) {\n    const money = (value: unknown): number | undefined => {\n      const obj = value as Record<string, unknown> | null | undefined;\n      const amount = Number(obj?.amount_minor);\n      const exponent = Number(obj?.exponent);\n      return Number.isFinite(amount) ? amount / 10 ** (Number.isFinite(exponent) ? exponent : 2) : undefined;\n    };\n    const used = money(spend.used);\n    const percent = Number(spend.percent);\n    snapshot.credits = {\n      used,\n      limit: money(spend.limit),\n      percent: Number.isFinite(percent) ? percent : undefined,\n      currency: \"USD\",\n    };\n    if (used !== undefined) {\n      snapshot.costs = { month: used, currency: \"USD\" };\n    }\n  }\n}\n\n/**\n * The Claude subscription provider: keeps the access token fresh (refresh 60 s\n * before expiry, persisted via the store) and reads the usage meters.\n *\n * @param store the token storage\n * @param fetchJson the JSON-GET seam\n * @param postJson the JSON-POST seam (token refresh)\n * @param now clock (ms) \u2014 injected for tests\n * @returns the provider\n */\nexport function claudeSubProvider(\n  store: TokenStore,\n  fetchJson: JsonFetch = getJson,\n  postJson: JsonPost,\n  now: () => number = Date.now,\n): UsageProvider {\n  let cached: TokenSet | null = null;\n  return {\n    kind: \"claude-sub\",\n    fetch: async (): Promise<UsageSnapshot> => {\n      cached ??= await store.load();\n      if (!cached) {\n        throw new FetchError(\"auth\", \"not signed in \u2014 run the Claude sign-in in the instance settings\");\n      }\n      if (now() >= cached.expiresAt - 60_000) {\n        cached = await refreshTokens(cached, postJson, now());\n        await store.save(cached);\n      }\n      const body = await fetchJson(CLAUDE_OAUTH.usageUrl, {\n        Authorization: `Bearer ${cached.accessToken}`,\n        \"anthropic-beta\": CLAUDE_OAUTH.betaHeader,\n        // Identify ourselves \u2014 an unset/odd user agent lands in a harder-throttled\n        // bucket of this endpoint (community-measured; sources in the concept doc).\n        \"User-Agent\": \"ioBroker.ai-usage\",\n      });\n      return parseClaudeUsage(body);\n    },\n  };\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAAwC;AACxC,sBAOO;AACP,0BAA2B;AAC3B,yBAA2D;AAepD,SAAS,iBAAiB,MAA8B;AAzB/D;AA0BE,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,UAAM,IAAI,2BAAW,WAAW,2BAA2B;AAAA,EAC7D;AACA,QAAM,MAAM;AACZ,QAAM,SAAwB,CAAC;AAC/B,QAAM,OAAO,oBAAI,IAAY;AAC7B,QAAM,OAAO,CAAC,MAAc,OAAe,SAAkB,aAA4B;AACvF,UAAM,SAAK,gCAAW,IAAI;AAC1B,UAAM,QAAQ,OAAO,OAAO;AAC5B,QAAI,CAAC,MAAM,KAAK,IAAI,EAAE,KAAK,CAAC,OAAO,SAAS,KAAK,GAAG;AAClD;AAAA,IACF;AACA,SAAK,IAAI,EAAE;AACX,UAAM,SAAsB,EAAE,MAAM,IAAI,OAAO,SAAS,MAAM;AAC9D,QAAI,OAAO,aAAa,YAAY,UAAU;AAC5C,aAAO,UAAU;AAAA,IACnB;AACA,WAAO,KAAK,MAAM;AAAA,EACpB;AAGA,MAAI,MAAM,QAAQ,IAAI,MAAM,GAAG;AAC7B,eAAW,SAAS,IAAI,QAAQ;AAC9B,UAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C;AAAA,MACF;AACA,YAAM,QAAQ;AACd,YAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,WAAM,UAAN,YAAe,CAAC;AAC/B,YAAM,UAAU,WAAM,UAAN,YAAe,CAAC,GAA+B;AAC/D,YAAM,UAAU,MAAM;AACtB,YAAM,YAAY,CAAC,SAAS,YAAY,YAAY,SAAS,eAAe,SAAS,IAAI;AACzF,YAAM,aAAa;AAAA,QACjB,SAAS,YAAY,kBAAkB,SAAS,eAAe,sBAAsB,KAAK,QAAQ,MAAM,GAAG;AAAA,MAC7G;AACA,UAAI,OAAO,UAAU,YAAY,OAAO;AACtC,kBAAU,KAAK,KAAK;AACpB,mBAAW,KAAK,KAAK;AAAA,MACvB;AACA,UAAI,OAAO,YAAY,YAAY,SAAS;AAC1C,kBAAU,KAAK,OAAO;AACtB,mBAAW,KAAK,IAAI,OAAO,GAAG;AAAA,MAChC;AACA,WAAK,UAAU,KAAK,GAAG,GAAG,WAAW,KAAK,GAAG,GAAG,MAAM,SAAS,MAAM,SAAS;AAAA,IAChF;AAAA,EACF;AAGA,MAAI,OAAO,WAAW,GAAG;AACvB,UAAM,OAAO,CAAC,KAAa,MAAc,UAAwB;AAC/D,YAAM,QAAQ,IAAI,GAAG;AACrB,UAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,cAAM,OAAO;AACb,aAAK,MAAM,OAAO,KAAK,aAAa,KAAK,SAAS;AAAA,MACpD;AAAA,IACF;AACA,SAAK,aAAa,WAAW,eAAe;AAC5C,SAAK,aAAa,QAAQ,mBAAmB;AAC7C,SAAK,oBAAoB,eAAe,aAAa;AAAA,EACvD;AAEA,QAAM,WAA0B,CAAC;AACjC,MAAI,OAAO,SAAS,GAAG;AACrB,aAAS,SAAS;AAAA,EACpB;AACA,kBAAgB,KAAK,QAAQ;AAC7B,SAAO;AACT;AAQA,SAAS,gBAAgB,KAA8B,UAA+B;AACpF,QAAM,QAAQ,IAAI;AAClB,QAAM,QAAQ,IAAI;AAClB,MAAI,SAAS,MAAM,eAAe,MAAM;AACtC,UAAM,UAAU,OAAO,OAAO,SAAS,OAAO,MAAM,cAAc,CAAC,IAAI,OAAO,MAAM,cAAc,IAAI;AACtG,UAAM,OAAO,OAAO,MAAM,YAAY;AACtC,UAAM,QAAQ,OAAO,MAAM,aAAa;AACxC,UAAM,UAAU,OAAO,MAAM,WAAW;AACxC,aAAS,UAAU;AAAA,MACjB,MAAM,OAAO,SAAS,IAAI,IAAI,OAAO,UAAU;AAAA,MAC/C,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ,UAAU;AAAA,MAClD,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,MAC9C,UAAU;AAAA,IACZ;AACA,QAAI,SAAS,QAAQ,SAAS,QAAW;AACvC,eAAS,QAAQ,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,MAAM;AAAA,IACnE;AACA;AAAA,EACF;AACA,MAAI,SAAS,MAAM,YAAY,MAAM;AACnC,UAAM,QAAQ,CAAC,UAAuC;AACpD,YAAM,MAAM;AACZ,YAAM,SAAS,OAAO,2BAAK,YAAY;AACvC,YAAM,WAAW,OAAO,2BAAK,QAAQ;AACrC,aAAO,OAAO,SAAS,MAAM,IAAI,SAAS,OAAO,OAAO,SAAS,QAAQ,IAAI,WAAW,KAAK;AAAA,IAC/F;AACA,UAAM,OAAO,MAAM,MAAM,IAAI;AAC7B,UAAM,UAAU,OAAO,MAAM,OAAO;AACpC,aAAS,UAAU;AAAA,MACjB;AAAA,MACA,OAAO,MAAM,MAAM,KAAK;AAAA,MACxB,SAAS,OAAO,SAAS,OAAO,IAAI,UAAU;AAAA,MAC9C,UAAU;AAAA,IACZ;AACA,QAAI,SAAS,QAAW;AACtB,eAAS,QAAQ,EAAE,OAAO,MAAM,UAAU,MAAM;AAAA,IAClD;AAAA,EACF;AACF;AAYO,SAAS,kBACd,OACA,YAAuB,qBACvB,UACA,MAAoB,KAAK,KACV;AACf,MAAI,SAA0B;AAC9B,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,YAAoC;AACzC,yCAAW,MAAM,MAAM,KAAK;AAC5B,UAAI,CAAC,QAAQ;AACX,cAAM,IAAI,2BAAW,QAAQ,sEAAiE;AAAA,MAChG;AACA,UAAI,IAAI,KAAK,OAAO,YAAY,KAAQ;AACtC,iBAAS,UAAM,kCAAc,QAAQ,UAAU,IAAI,CAAC;AACpD,cAAM,MAAM,KAAK,MAAM;AAAA,MACzB;AACA,YAAM,OAAO,MAAM,UAAU,gCAAa,UAAU;AAAA,QAClD,eAAe,UAAU,OAAO,WAAW;AAAA,QAC3C,kBAAkB,gCAAa;AAAA;AAAA;AAAA,QAG/B,cAAc;AAAA,MAChB,CAAC;AACD,aAAO,iBAAiB,IAAI;AAAA,IAC9B;AAAA,EACF;AACF;",
   "names": []
 }