epjVUdZddlmZddlZddlZddlZddlZddlZddlZddl m Z ddl m Z ddl m Z mZmZmZmZddlmZddlmZdd lmZmZdd lmZdd lmZmZdd lmZdd l m!Z!ddl"m#Z#m$Z$m%Z%m&Z&ej'e(Z)dZ*dZ+dZ,e-de+DZ.e-de,DZ/ej0dej1ej2zZ3ej0dd4e+dej1ej2zZ5ej0dd4e+dej2Z6ej0dd4e,dej2Z7dZ8e9hdZ:dd$Z;dd)Zd1e?d2<ej@ZAdd4ZBd5ZCdd7ZDdd8ZEdd:ZFdd<ZGddd=ddFZHddKZIdLdMddOZJddPZKe9hdQZLddSZMddTdd[ZNddddd\ddaZOddcZPdddZQdddgZRddhddlZSddddd\ddmZTddqZUddsZV ddd}ZWddZXdZYddZZddZ[ddZ\ dddZ]ddZ^ddZ_ddZ`ddZaddZbddZcddZdddZeddZfddZgddZhgdZidS)uAssorted AIAgent runtime helpers — moved out of run_agent.py for clarity. Each function takes the parent ``AIAgent`` as its first argument (``agent``) except for the static helpers (``sanitize_tool_call_arguments``, ``drop_thinking_only_and_merge_users``) which are stateless. AIAgent keeps thin forwarders for backward compatibility. Methods covered: * ``convert_to_trajectory_format`` — internal -> trajectory-file format * ``sanitize_tool_call_arguments`` — repair corrupted JSON in tool_calls * ``repair_message_sequence`` — enforce alternation invariants * ``strip_think_blocks`` — remove inline reasoning from stored content * ``recover_with_credential_pool`` — rotate pool entries on 429 * ``try_recover_primary_transport`` — re-create OpenAI client after rate-limit * ``drop_thinking_only_and_merge_users`` — Anthropic-style cleanup * ``restore_primary_runtime`` — un-do fallback activation * ``extract_reasoning`` — pull reasoning fields out of API responses * ``dump_api_request_debug`` — write request body for post-mortem * ``anthropic_prompt_cache_policy`` — compute cache_control breakpoints * ``create_openai_client`` — build the per-agent OpenAI SDK client ) annotationsN)datetime)Path)AnyDictListOptionalTuple)get_provider_request_timeout)format_steer_marker)_trajectory_normalize_msgmake_tool_result_message)convert_scratchpad_to_think)STATUS_EXHAUSTED credential_pool_matches_provider)FailoverReason)drop_stale_api_content)base_url_host_matchesbase_url_hostnameenv_var_enabledatomic_json_write)thinkthinking reasoningREASONING_SCRATCHPADthought) tool_call tool_calls tool_result function_callfunction_callsc#|K|]7}tjd|d|dtjtjzV8dS).*?NrecompileDOTALL IGNORECASE.0names A/home/thesage/.hermes/hermes-agent/agent/agent_runtime_helpers.py r/:s_"" J'D'''''R])BCC""""""c#|K|]7}tjd|d|dtjtjzV8dS)r$z \b[^>]*>.*?]*\bname\s*=[^>]*>(?:(?:(?!).)*)z(?:^|\n)[ \t]*<(?:|z )\b[^>]*>.*$z\s*z\s*cddl}|S)z4Lazy ``run_agent`` reference for test-patch routing.rN run_agentr4s r._rar6^s r0>todomemoryclarify delegate_task read_terminalsession_searchagentr function_namestrreturnboolc|tvrdSt|ddr ||jvrdSt|dd}t|o||S)zBReturn True when an agent-level tool path emits its own post hook.T_context_engine_tool_namesN_memory_manager)"AGENT_RUNTIME_POST_HOOK_TOOL_NAMESgetattrrCrAhas_tool)r=r>memory_managers r.!agent_runtime_owns_post_tool_hookrIism:::tu2D99muOo>o>otU$5t<#:#:=#I#I J JJr0messagesList[Dict[str, Any]] user_query completedc d|D}g}d|d}|d|d|d|dd}|t|kr||}|dd krd |vr1|d r(d }|d r&|d r d |d d}|dr5|dr|t |ddzz }|d D]} | rt | ts t | ddtr tj | ddn | dd} nF#tj $r4t d| ddddi} YnwxYw| dd| d} |dtj| ddz }d|vrd|z}|d|dg} |dz} | t|kr8|| ddkr%|| }d }|d} |d!rtj |}n#tj t"f$rYnwxYwt| }|t|d kr|d |ddnd"}|tj|d#d ||d$dz }|d%z }| || dz } | t|kr|| ddk%| r0|dd| d| dz }nd }|d r&|d r d |d d}|dpd }|t |z }d|vrd|z}|d|dn*|dd&kr|d|dd|dz }|t|k|S)'aQ Convert internal message format to trajectory format for saving. Args: messages (List[Dict]): Internal message history user_query (str): Original user query completed (bool): Whether the conversation completed successfully Returns: List[Dict]: Messages in trajectory format c,g|]}t|S)r r,ms r. z0convert_to_trajectory_format..s!???)!,,???r0aYou are a function calling AI model. You are provided with function signatures within XML tags. You may call one or more functions to assist with the user query. If available tools are not relevant in assisting with user query, just respond in natural conversational language. Don't make assumptions about what values to plug into functions. After calling & executing the functions, you will be provided with function results within XML tags. Here are the available tools: a For each function call return a JSON object, with the following pydantic model json schema for each: {'title': 'FunctionCall', 'type': 'object', 'properties': {'name': {'title': 'Name', 'type': 'string'}, 'arguments': {'title': 'Arguments', 'type': 'object'}}, 'required': ['name', 'arguments']} Each function call should be enclosed within XML tags. Example: {'name': ,'arguments': } system)fromvaluehumanrole assistantrrz z content function argumentsz4Unexpected invalid JSON in trajectory conversion: %sNdr-r-r_z F ensure_asciiz zz gpttoolz ){[unknown tool_call_id)rir-r\z user) _format_tools_for_system_messageappendlengetstripr isinstancedictr?jsonloadsJSONDecodeErrorloggerwarningdumpsrstrip startswithAttributeErrorjoin)r=rJrLrM trajectory system_msgimsgr\rr_tool_call_jsontool_responsesjtool_msg tool_response tool_content tool_index tool_name raw_contents r.convert_to_trajectory_formatrss'@?h???HJ b ::<< b b b  A c(mm  qk v;+ % %s""s<'8"77;''IC ,<,B,B,D,DIH#k*:HHHG779%%R#i.*>*>*@*@R:3y>JJTQQG"%\!2ppI$QJy$,G,GQ'V`ajkuavxCbDFIWJWJ%rDJy/D[/Q$R$R$RPYZdPefqPr /'''']_his_tvA`BCGDGCG`HIII$& '!** 5f =%.&&Notz.W\/]/]/]ooooGGG++3g=G!!!$^^--## "$E#h--''HQK,?6,I,I'{H$7M$,I#6L'--//:::FFD+/:l+C+CL 0.A"%^!4!4J&C ,=(>(>>>L)*5jA&II& "TZ(0 ^R(H(H )#/11%* &+&+&++M "%99M"))-888FA5#h--''HQK,?6,I,I:"%% &!%>!:!:''AA 77;''IC ,<,B,B,D,DIH#k*:HHHG")n2 6{CCCG++3g=G!!!$]]__## [F " "   Y    Qi c(mm  l s&:AF  AG  G 3;J//KK)ru session_idcursorlistrrOptional[dict]intc @|ptjt}t|tsdSd}||d}t|tr[t t|t|}||kr+||||ur|dz }||kr||||ud}tj j dfd } |} | t|kr|| } t| tr| d d kr| dz } P| d } t| tr| s| dz } | dz} | D] }t|ts|d }t|tsD|d}||dkrd|d<gt|tr| sd|d<t|ts tj|#tj$r9tj |pd}|dd}|dd}|d|pd| |pd||d|d<d}| dz}|t|krk||}t|tr|d dkrn4|d|kr|}n|dz }|t|kk|3|| t)|dkr|nd|| dz } n | ||dz }Y wxYw| dz } | t|k| |dd|d<|S)uWRepair corrupted assistant tool-call argument JSON in-place. ``cursor`` (optional) is a caller-owned dict used to skip re-validating messages already validated on a previous call. It stores, under ``"prefix"``, the exact message *objects* (strong references) validated last time, in order. On the next call, the longest contiguous prefix of ``messages`` whose objects are ``is``-identical to the stored prefix is skipped; scanning starts at the first divergence (conservative: any reordering, truncation, compression rewrite, or mid-list insertion breaks identity at that index and everything from there is re-scanned). Safety argument for skipping: a message in the matched prefix was fully scanned before — every tool_call argument was either already valid JSON or was rewritten to ``"{}"`` (valid). The only code paths that mutate ``function["arguments"]`` on live history dicts between calls are the surrogate / non-ASCII sanitizers, which substitute characters *inside* JSON string values and cannot invalidate JSON syntax. Compression, repair, undo, and steer paths replace or reorder message dicts, which breaks the identity match and forces a re-scan. Holding strong references (the objects themselves, not ``id()``s) makes address reuse aliasing (#50372-style) impossible. rNprefixrXrrqr@Nonec>|d}t|tr)|s|d<n|s d||d<dS||d<dS t j|}n#t $rt|}YnwxYwd||d<dS)Nr\r])rnrpr?ryrrrw TypeError)rexisting existing_textmarkers r._prepend_markerz5sanitize_tool_call_arguments.._prepend_markerJs<< ** h $ $  >&,##((00 >)/&=&=8&=&=# F  "(HY  F * Jx00MM * * *MMMMM *!'::=::sA44BBrYrZrr^r_r[{}r-?Pz~Corrupted tool_call arguments repaired before request (session=%s, message_index=%s, tool_call_id=%s, function=%s, preview=%r)-reri)rrqr@r)logging getLogger__name__rprrnminrmr6AIAgent&_TOOL_CALL_ARGUMENTS_CORRUPTION_MARKERrqr?rorrrsrt_get_tool_call_id_staticrvinsertr)rJrurrlog start_index prev_prefixlimitrepairedr message_indexrr insert_atrr^r_rir>previewexisting_tool_msg scan_index candidaters @r.sanitize_tool_call_argumentsrsK:  /G%h//C h % %qK jj** k4 ( ( !K((#h--88E%%(;*?;{C[*[*[q %%(;*?;{C[*[*[H UU] AF;;;;;;" M #h-- ' '}%#t$$ ;(F(F Q M WW\** *d++ :  Q M !A% #@ @ Ii..  }}Z00Hh--  [11I IOO(,%)S)) )//2C2C (,%i-- /  9%%%%'- - -  #uu}EEiPPXTX ( VS 9 9 #CRC. _%#! 'C!)-%$(!*Q.  3x==00 ( 4I%i66)--:O:OSY:Y:Y }}^44 DD,5)!OJ!3x==00%,OO!0-:c-A-AMMr"(NII#O$5666A [- ^  ] #h-- ' '`$AAA;x OsH**EM32M3zDict[str, Tuple[str, float]]_INFLIGHT_TURNS_BY_SESSIONturn_idc t|dd}t|dd}||_tj|_d}|rO||krItd|||rtj|z ndt|ddpd|}t|dd}|rt|d d stj}t 5t|}||ft|<dddn #1swxYwY||_ |rM|d ||fvrAtd ||d |d r ||d z nd||p|d }|S)uTripwire: detect a turn starting while a previous turn of the same agent — or of the same underlying *session* on a different agent object — has not completed its turn-end persist. Two turns interleaving on one session corrupt the durable transcript: their flushes race (user rows can persist out of arrival order), a row can be swallowed by the identity-marker dedup over shared history dicts, and the second turn runs on a history base that never saw the first turn's exchange. This helper does NOT prevent any of that — it names the occurrence, with both turn ids, so the dispatch route that let the second turn through the busy guard can be identified from logs. Returns the previous in-flight turn_id when an overlap is detected, else None. Takes ownership of the in-flight slot either way, so a turn that crashed before its persist produces at most one warning._inflight_turn_idN_inflight_turn_startedguturn %s starting while turn %s (started %.0fs ago) has not completed its turn-end persist (session=%s) — concurrent turns on one session; transcript writes may interleavegrr_persist_disabledFruturn %s starting while turn %s (started %.0fs ago) is still in flight on session %s under a different agent object — two routing keys are mapped to one session_id; concurrent turns on one session; transcript writes may interleaverX) rFrtimerrurv_INFLIGHT_TURNS_LOCKrrn_inflight_turn_session_id)r=rprev prev_startedoverlaprnowentrys r.note_turn_startrs 5-t 4 4D5":C@@L%E#'9;;E G  ?  *6 @DIKK, & &D E< . . 5#    d33J*'%)>E6=s^ &z 2 D D D D D D D D D D D D D D D +5'  *U1Xgt_44 NNIa"'(4eAh   )qG Ns'DD  D cd|_t|dds^t|ddpt|dd}|r:t5t|ddddn #1swxYwYd|_dS)udClear the in-flight marker at turn-end persist (see note_turn_start). Called from the single persist funnel; unconditional by design — when two turns genuinely overlap, the first persist clears the second turn's slot and the tripwire under-reports instead of double-reporting. A diagnostic must never be noisier than the defect it hunts.NrFrr)rrFrrpopr)r=rs r.note_turn_persistedrs#E 5-u 5 5AU$?FF ' <K K   A% A A*..z4@@@ A A A A A A A A A A A A A A A&*E###sA,,A03A0 List[Dict]c$ |sdSd}dd}dd}g}|D]}|rt|tr|dd krt|d tr|d dd krz||sn||d s\|d }||r ||d <|d z }t|d pg}t|d pg} | r || z|d <n|r||d <|d } |d } t| tr`t| trKdd| | fD} | |d <n | s| | |d <|ds |dr |d|d<|d z }||t} g}|D]K}t|ts||.|d}|d krt} |d pgD]I}t|tsdD].}||}|r| |/J|||dkrN|d}|r0|| vr,||| ||d z }"|dkrt} ||Mg}|D]}|rt|tr|ddkrt|d tr|d ddkr|d }|d d} |d d} t| tr=t| tr(| r | r| dz| zn| p| |d <t||d z }|| |dkr||dd<|S)uCollapse malformed role-alternation left in the live history. Providers (OpenAI, OpenRouter, Anthropic) expect strict alternation: after the system message, user/tool alternates with assistant, with no two consecutive user messages and no tool-result that doesn't follow an assistant-with-tool_calls. Violations cause silent empty responses on most providers, which triggers the empty-retry loop. This runs right before the API call as a defensive belt — by the time it fires, the scaffolding strip should already have prevented most shapes, but external callers (gateway multi-queue replay, session resume, cron, explicit conversation_history passed in by host code) can feed in already-broken histories. Repairs applied: 0. Consecutive ``assistant`` messages with no intervening ``tool``/``user`` turn — merged into a single assistant turn (union of ``tool_calls``, concatenated ``content``). Strict OpenAI-compatible providers (DeepSeek v4, Moonshot/Kimi) reject a history where an ``assistant`` message carrying ``tool_calls`` is immediately followed by another ``assistant`` message instead of its ``tool`` results — HTTP 400 "An assistant message with 'tool_calls' must be followed by tool messages…". The split shape is produced by recovery/continuation paths that append an interim assistant turn (thinking-prefill, codex incomplete-continuation) or by host-fed / legacy-persisted / resumed histories. Refs #29148, #49147. 1. Stray ``tool`` messages whose ``tool_call_id`` doesn't match any preceding assistant tool_call — dropped. 2. Consecutive ``user`` messages — merged with newline separator so no user input is lost. Deliberately does NOT rewind orphan ``assistant(tool_calls)+tool`` pairs that precede a user message — that pattern IS valid when the previous turn completed normally and the user jumped in to redirect before the model got a continuation turn (the ongoing dialog pattern). The empty-response scaffolding stripper handles the genuinely-broken variant via its flag-gated rewind. Returns the number of repairs made (for logging/telemetry). rrRrr@rAct|dp-|dp|ddkS)Ncodex_reasoning_itemscodex_message_items finish_reason incomplete)rArnrRs r._is_codex_interimz2repair_message_sequence.._is_codex_interimYsR EE) * * 6uu*++ 6uu_%%5   r0c0|ddvS)Nr>verify_hook_continueverification_required)rnrs r._is_verification_candidatez;repair_message_sequence.._is_verification_candidate`s uu_%%*   r0rYrZrXrr\r]c3K|]}||V dSNrP)r,ps r.r/z*repair_message_sequence..s;##a#######r0Nreasoning_content)idcall_idrerirjr[ )rRrr@rA) rprqrnrr?r{rorlsetadddiscardr)r=rJrepairsrr collapsedrr prev_calls new_calls prev_content new_contentjoinedknown_tool_idsfilteredrYtckeytc_idmergeds r.repair_message_sequencerscT qG         I00 . 3%%. ;..9R=$///" !!&))[88%%c**9%%im449R=D*)$//  # " 1 dhh|44:;;JSWW\228b99I 0%/)%;\"" 0%/\" 88I..L''),,K,,, .K1M1M .## , 2 2 4 4k6G6G6I6IJ####)Y! .k&="-Y 88/00 ESWW=P5Q5Q E,/0C,D() qLG (%%NH!!!!#t$$  OOC wwv ;   UUNww|,,2 2 2!"d++,22CFF3KKE2&**51112 OOC V^^GGN++E .00$$$ &&u----1 v~~"% OOC F  3%% 6))6":t,,*r v&&&00":D88Ir22L'')R00K,,, K1M1M $7(37\F*[88&5+Y't,,,1  c{{ Nr0cldt|dd}t|tr|dkrd|d|Dt||}|dkrZt |drJ!t fd|D|_n't|jt||_|S)uRun :func:`repair_message_sequence` and keep the SessionDB flush cursor consistent with the compacted list (#44837). ``repair_message_sequence`` merges/drops messages in place, shrinking the list. ``_last_flushed_db_idx`` (the DB-write cursor) indexes into that list, so after compaction it can point past the new end — the turn-end flush would then skip the assistant/tool chain entirely — or past unflushed messages shifted to lower indexes. Repair preserves object identity for surviving messages, so counting the survivors from the previously-flushed prefix gives the exact new cursor even when messages are dropped/merged at indexes *before* the cursor — a plain ``min()`` clamp would silently skip that many unflushed rows. Falls back to the clamp when no prefix snapshot is available. Returns the number of repairs made (same as ``repair_message_sequence``). N_last_flushed_db_idxrc,h|]}t|SrPrrQs r. z6repair_message_sequence_with_cursor.. s!I!I!IA"Q%%!I!I!Ir0c3>K|]}t|vdVdS)rXNr)r,rRpre_repair_flushed_idss r.r/z6repair_message_sequence_with_cursor..s=--r!uu0F'F'F'F'F'F'F--r0) rFrprrhasattrsumrrrm)r=rJ flush_cursorrrs @r.#repair_message_sequence_with_cursorrs&"5"8$??L,$$J)9)9!I!I-<-1H!I!I!I%eX66G{{wu&<=={ ! -),----#---**E & &*-*CMM**E & Nr0r\cV|sdSt|tsbt|trg}|D]}t|tr||-t|trt|dpd}|dvr|d}t|tr|r||d|}n^t|tr:t|dp|dpd}nt|}|sdStD]}| d|}tD]}| d|}t d|}t d|}t d|}t d|}|S)uSRemove reasoning/thinking blocks from content, returning only visible text. Handles four cases: 1. Closed tag pairs (`` … ``) — the common path when the provider emits complete reasoning blocks. 2. Unterminated open tag at a block boundary (start of text or after a newline) — e.g. MiniMax M2.7 / NIM endpoints where the closing tag is dropped. Everything from the open tag to end of string is stripped. The block-boundary check mirrors ``gateway/stream_consumer.py``'s filter so models that mention `` `` in prose aren't over-stripped. 3. Stray orphan open/close tags that slip through. 4. Tag variants: `` ``, ````, ````, ````, ```` (Gemma 4), all case-insensitive. Additionally strips standalone tool-call XML blocks that some open models (notably Gemma variants on OpenRouter) emit inside assistant content instead of via the structured ``tool_calls`` field: * ``…`` * ``…`` * ``…`` * ``…`` * ``…`` * ``…`` (Gemma style) Ported from openclaw/openclaw#67318. The ```` variant is boundary-gated (only strips when the tag sits at start-of-line or after punctuation and carries a ``name="..."`` attribute) so prose mentions like "Use in JavaScript" are preserved. r[type>rrredacted_thinkingtextr\)rpr?rrlrqrnrolowerr{_REASONING_BLOCK_PATTERNSsub_TOOL_CALL_BLOCK_PATTERNS_NAMED_FUNCTION_BLOCK_PATTERN%_UNTERMINATED_REASONING_BLOCK_PATTERN_ORPHAN_REASONING_TAG_PATTERN_STRAY_TOOL_CALL_CLOSER_PATTERN)r=r\_parts_part_ptype_text_patterns r.strip_think_blocksrs> r gs # # gt $ $ # "F - -eS)) -MM%((((t,, - 6!2!2!8b99??AAGGIIF!OOO !IIf--E!%---%- e,,,ggfooGG  & & #'++f--MY1G1GM2NNGG'llG 2.,,,,r7++.,,,,r7++ ,//G<>G Nr0rct|dd} |$|t|ddnd|_dS#t$r d|_YdSwxYw)aRebind ``agent._credential_pool_entry_id`` from the current pool + key. OAuth refreshes can replace the runtime token before a failed request is recovered, so the mutable API-key value alone cannot reliably attribute the failure to its source entry. This resolves the stable pool-entry ID for the agent's current ``api_key`` and clears it when no pool is bound. _credential_poolNapi_key)rFentry_id_for_api_key_credential_pool_entry_id Exception)r=pools r.sync_credential_pool_entry_idr s 5,d 3 3D/  % %geY&E&E F F F ''' ///*.''''/s-AAA)classified_reason error_context status_code Optional[int]has_retried_429r Optional[FailoverReason]rOptional[Dict[str, Any]]tuple[bool, bool]c  !|j!!d|fSt|ddpd}t!ddpd}|r||krd}|dkr|dr ddlm}t|d dpd} t| o4|| pd|k}n#t$rd}YnwxYw|s,tj d ||d|fSt|d dpdt|d d} t| tr| r| nd sS!} | r=t| d d s*t| dd} t| tr| r| d> !fd } |}|6|dkr tj}n#|dkr tj}n|dvr tj}|tjkrorpidnd}|r(tj d|n&tj dd|fS|tjkre||nd}| |}|Ntj d|t|dd||dSd|fS|tjkr d} r.t/ fd!Dd}r0|p-t/fd!Dd}|!}|rt|ddnd}|t2krtj d|||nd}| |}|Ntj d|t|dd||dSd Sd}r|td!pd}td"pd}d#|vp d$|vpd%|vpd&|v}|s|sd S||nd}| |}|Ntj d'|t|dd||dSd S|tjkr/||}d(fd)d*D}|s |d+krd,|vrd-}|s*|d+kr$|jpdd.krt|d/dd0krd-}|s|d+kr|jpdd1kr d2|vpd3|v}|sd-}|r7tj d4||nd5|jpdd|fSd6i} r |d7<!jd?i|}|t|dd}|t|d8d}| i}||_|j|f}||dd9z||<||t>kr5tj d:||d9z |d|fStj d;t|dd||d-|fS||nd<}| |}|Ntj d=|t|dd||dSd|fS)@aAttempt credential recovery via pool rotation. Returns (recovered, has_retried_429). On rate limits: first occurrence retries same credential (sets flag True). second consecutive failure rotates to next credential. On billing exhaustion: immediately rotates. On auth failures: attempts token refresh before rotating. `classified_reason` lets the recovery path honor the structured error classifier instead of relying only on raw HTTP codes. This matters for providers that surface billing/rate-limit/auth conditions under a different status code, such as Anthropic returning HTTP 400 for "out of extra usage". NFproviderr[customcustom:rget_custom_provider_pool_keybase_urluuCredential pool provider mismatch: pool=%s, agent=%s — skipping pool mutation to avoid cross-provider contaminationrr runtime_api_keyr rotate_statusrc8|d}r|d<jdi|S)N)rr api_key_hint credential_idrP)mark_exhausted_and_rotate)rkwargs _api_key_hint_credential_idrr s r._rotate_failed_credentialz?recover_with_credential_pool.._rotate_failed_credentialsE(*)    5&4F? #-t-77777r0ii>upstream_providerunUpstream provider %s rate-limited via aggregator — skipping credential rotation, deferring to fallback chainuhUpstream aggregator 429 (provider unknown) — skipping credential rotation, deferring to fallback chainu4Credential %s (billing) — rotated to pool entry %srTFc32K|]}|jk |VdSrr)r,er$s r.r/z/recover_with_credential_pool..7s/EEqadn.D.D.D.D.D.DEEr0c32K|]}|jk |VdSr)r)r,r+r#s r.r/z/recover_with_credential_pool..<s0QQqa.?=.P.P.P.P.P.PQQr0 last_statusuZCredential already exhausted (last_status=%s) — rotating immediately instead of retryinguFCredential %s (rate limit, pre-exhausted) — rotated to pool entry %s)FTreasonmessageusage_limit_reached gousagelimitzusage limit reachedzusage limit has been reachedu7Credential %s (rate limit) — rotated to pool entry %s c3K|]O}ttt|pdVPdS)r[N)rprqr?rnr)r,krs r.r/z/recover_with_credential_pool..sn" " -.."  !!!$$* + + 1 1 3 3" " " " " " r0)r/r.codeerrorr'zCoauth authentication is currently not allowed for this organizationT anthropicapi_modeanthropic_messagesz xai-oauthz[wke=unauthenticated:z*oauth2 access token could not be validateduCredential %s — entitlement-shaped 403 from %s; skipping pool refresh (account lacks subscription, not a transient auth failure).authrr _auth_pool_refresh_countsrXuCredential auth failure persists after %s refreshes for pool entry %s — treating as unrecoverable and allowing fallback to activate.u3Credential auth failure — refreshed pool entry %sr&u@Credential %s (auth refresh failed) — rotated to pool entry %s)rrrP) rrFrorryagent.credential_poolrrAr r6rurvrpr?currentrbilling rate_limitr:upstream_rate_limitrninfo_swap_credentialnextentriesr_is_entitlement_failurer{rtry_refresh_matchingr;_MAX_AUTH_REFRESH_ATTEMPTS)"r=rrr rcurrent_provider pool_provider _custom_matchr _agent_base_raw_credential_id_cur _current_idr%effective_reasonupstreamr next_entry current_entrycurrent_last_statusr0context_reasoncontext_messageis_entitlement_auth_haystack_is_xai_auth_failurerefresh_kwargs refreshed refreshed_idrefresh_counts refresh_keyr#r$r s" ` @@@r.recover_with_credential_poolr^s ,  !D |o%% z266<"CCEEKKMMT:r228b??AAGGIIM*)]:: x ' 'M,D,DY,O,O ' &NNNNNN&uj"==CJJLL $[ 1 1!11+>>D"KKMMSSUU$%  & & & %  & * EEL O/    /) )E9d33;tM (CTJJ (# . . 3E   1||~~  1#D*;TBBM! 1%dD$77 k3//1K1%0N888888888) #  -5   C  -8   J & &-2 >=== FS\M'R,,-@AAAX\   EEL  C     EEL  C   o%%>111'2'> C /.}==  ! EEL  F D#..     " ": . . .;o%%>444   EEEEDLLNNEEEM  )TQQQQDLLNNQQQ..M   LLNNMMZdgm]DIII`d "2 2 2 EEL  l#   ,7+BKKM22=AAJ% !!\!Jc22 &&z222"{;#   !2!28!">"D"EEKKMMO%7E!^3E(O;E2_D  ': ;'2'> C ..}==  ! EEL  I D#..     " ": . . .;{>...,66}kRR" " " " ;" " "     "s""UYggg!N "s""%2+55z2..2FFF!N &+"4"4%.:NBS^9^9^'>9R?>Q !( &!%  * EEL  1 +6 F,*    /) ) )-8  =. C ..}==  ! EEL  R D#..     " ": . . .; / !!s&A/D D%$D% api_errorr  retry_count max_retriesc |jrdSt|j}|tvrdS|rdS|jpd}|dvrt|dddkrdS t|dd. | |j d n#t$rYnwxYw|j }t|d |_|d |_|d |_|d |j|_|d|_|d|_t)|dr|j|d|_|jdkrlddlm}|d|_|d|_||d|dt9|j|j|_|d|_d|_ n~|jpddkrddlm }|||j|_ n0|!t|d dd|_ tEd|zd} |#|j$d|d|jd| d d!tKj&| dS#t$r&} tN(d"| Yd} ~ dSd} ~ wwxYw)#ujAttempt one extra primary-provider recovery cycle for transient transport failures. After ``max_retries`` exhaust, rebuild the primary client (clearing stale connection pools) and give it one more attempt before falling back. This is most useful for direct endpoints (custom, Z.AI, Anthropic, OpenAI, local models) where a TCP-level hiccup does not mean the provider is down. Skipped for proxy/aggregator providers (OpenRouter, Nous) which already manage connection pools and retries server-side — if our retries through them are exhausted, one more rebuilt client won't help. Fr[> nous-portalnous nousresearchr8Nr9clientprimary_recoveryr. client_kwargsmodelrrequested_providerr_transport_cacherrbuild_anthropic_clientanthropic_api_keyanthropic_base_urltimeoutis_anthropic_oauthmoabuild_moa_facadeTr.sharedu🔁 Transient z on u — rebuilt client, waiting z"s before one last primary attempt.forcez%Primary transport recovery failed: %s))_fallback_activatedrr_TRANSIENT_TRANSPORT_ERRORS_is_openrouter_urlrrorrF_retire_shared_openai_clientrfr _primary_runtimerq_client_kwargsrjrnrkrr8rrlclearragent.anthropic_adapterrn_anthropic_api_key_anthropic_base_urlr _anthropic_client_is_anthropic_oauthagent.moa_looprv_create_openai_clientr_vprint log_prefixrsleeprurv) r=r_r`ra error_typeprovider_lowerrtrnrv wait_timer+s r.try_recover_primary_transportrs  ui)J444u !!un*113399;;N AAA E:t , ,0D D Du? 5(D ) ) 5 22L);3     ##B$788k J#%66*>#O#O JJ 5, - - +  " ( ( * * *9  >1 1 1 F F F F F F')*='>E $(*+?(@E %&<&<&',@)A4U^U[QQ'''E #)++?(@E %ELLn" ) ) + + 1 1 3 3u < < 8 7 7 7 7 7++E5;??ELL 66R()))7EL K++   U U  U U U U'0 U U U    9t >BBBuuuuus=J=B76J=7 CJ=CG7J== K-K((K-Tdrop_codex_reasoning_itemsrc|s|Sfd|D}t|t|z }|dkr|Sg}d}|D]}|r|dnd}||ddkr|ddkr|dd}|dd} t|} t|tr*t| tr|r| rd nd} || z| z| d<nt|t r8t| t r#t |t | z| d<nt|t rDt| tr/| rt |d | d gz| d<nt || d<nxt|trLt| t r7g} |r| d |d | | | | d<n||| |d<|d z }||tj d |||S)ahDrop thinking-only assistant turns; merge any adjacent user messages left behind. Runs on the per-call ``api_messages`` copy only. The stored conversation history (``agent.messages``) is never mutated, so the user still sees the thinking block in the CLI/gateway transcript and session persistence keeps the full trace. Only the wire copy sent to the provider is cleaned. Why drop-and-merge rather than inject stub text: - Fabricating ``"."`` / ``"(continued)"`` text lies in the history and makes future turns see model output the model didn't emit. - Dropping the turn preserves honesty; merging adjacent user messages preserves the provider's role-alternation invariant. - This is the pattern used by Claude Code's ``normalizeMessagesForAPI`` (filterOrphanedThinkingOnlyMessages + mergeAdjacentUserMessages). cdg|],}tj|*|-S)r)r6r_is_thinking_only_assistant)r,rRrs r.rSz6drop_thinking_only_and_merge_users..]sP   uu}88 'A9       r0rrNrYrjr\r[rrrrrXzbPre-call sanitizer: dropped %d thinking-only assistant turn(s), merged %d adjacent user message(s)) rmrnrqrpr?rrlextendr6rudebug) rJrkeptdroppedrmergesrRrr cur_content prev_copysep new_blockss ` r."drop_thinking_only_and_merge_usersrDs*        D(mmc$ii'G!||$&F F ++#-vbzz    F**f ''88Ir22L%% 2..K T I,,, K1M1M  ,DDff"'3c'9K'G )$$L$// J{D4Q4Q '+L'9'9D+/ +=+=!'==A,Ii((,0 +=+=Ii((L#.. :k43P3P 35 N%%v|&L&LMMM!!+...'1 )$$ a   "F2J aKFF MM!    EEL -  Mr0c |js d|_dSt|ddtjkrdSd} t |jpidpd }t|dd}t||t |jpidpd sdd l m }|r ||nd}|}t|d d }||tjkrjt|d dsWd|_ td|pdt!j|d|j|jdSn,#t*$rtddYnwxYwd|_ |j} |d|_|d|_|d|j|_|d|_|d|_t5|dr|j|d|_t=|d|_|d|_ |d|jdko |jdk|_!t|ddrd|_ d|_!|jd kr$dd!l"m#}|||j|_$d|_%n|jdkrldd"l&m'}|d#|_(|d$|_)||d#|d$tU|j|j%|_%|d&|_+d|_$n0|,t=|dd'd(|_$|j-} | .|d)|d*|d+|d,|d-|d.d/t |dpd }t|dd}t t|ddpd } | |k} |d0kr| /d1r dd2l m0} | t |dpdpd } tc| o| | k} n#t*$rd} YnwxYw|g| re| scd|_2d|_3 |||_2ndd l m }|||_2n3#t*$r&}t4d3||Yd}~nd}~wwxYwd|_3t|dd}||5r|6}|t t|ddpd }||k}dd4l m7}|d0kr|/|rd} dd2l m0} t |dpd}| |pd } tc| o| |k}n#t*$rd}YnwxYwt|d5dpt|d6d}|rR|rP|8|td7t|d8dt|d9dnB|r@td:t|d8dt|d9d|pd|pd|d;}|t=||_9d|_d|_d|_:dd|j|jdS#t*$r&}t4d?|Yd}~dSd}~wwxYw)@aRestore the primary runtime at the start of a new turn. In long-lived CLI sessions a single AIAgent instance spans multiple turns. Without restoration, one transient failure pins the session to the fallback provider for every subsequent turn. Calling this at the top of ``run_conversation()`` makes fallback turn-scoped. The gateway caches agents across messages (``_agent_cache`` in ``gateway/run.py``), so this restoration IS needed there too. rF_rate_limited_untilNrr[rr)r load_poolnext_available_atcdSrrPrPr0r.z)restore_primary_runtime..sTr0_restore_wait_loggedTzSPrimary %s rate-limited until %s; staying on fallback %s/%s until the reset elapsesrseconds)timespecz?Reset-aware restore gate failed; falling back to per-turn retryexc_inforjrkr8rlrriuse_prompt_cachinguse_native_cache_layoutr9r7_cache_disabledrtrurmrorprqrsrestore_primaryrwcompressor_modelcompressor_context_lengthcompressor_base_urlcompressor_api_keycompressor_providercompressor_api_moderjcontext_lengthrrrr8rrrz;Restore could not reload primary credential pool for %s: %s)CUSTOM_POOL_PREFIXr access_tokenz&Restore re-selected pool entry %s (%s)rlabelzRRestore skipped pool entry %s (%s): provider %s does not match primary provider %sreasoning_config_reset_stale_streak)rewrite_prompt_model_identityz.Primary runtime restored for new turn: %s (%s)z%Failed to restore primary runtime: %s)>r}_fallback_indexrFr monotonicr?rrnrorrr<rrrurAr fromtimestamp isoformatrrjr rrkrr8rrlrrrqr_use_prompt_caching_use_native_cache_layoutrrvrfrrrnrrr rrcontext_compressor update_modelryrrArr rv has_availableselectrrBr_rate_limit_backoff_countagent.chat_completion_helpersrr)r=prefetched_primary_poolprimary_providerr rnext_atrrvrnccrIpool_matches_primaryr primary_keyexcrentry_providerentry_matches_primaryrprimary_base_url entry_keysaved_reasoningrrr+s r.restore_primary_runtimers   $ !"uu+Q//$.2B2BBBu.#!   # )r . .z : : @b  %''%%'' u0$77/  %06B;;JGGM2NN   + 8 7 7 7 7 70@I *+++T $+DB'$ 3\\BBDD  7TY[[#8#85"8%@@ -1* 4$+*733==y=QQNK 5     M       "'E  BGk J#%66*>#O#O JJ 5, - - +  " ( ( * * *9  #B$788$&';$<!*, % N2 2 Tu~7T* * & 5+U 3 3 3(-E %-2E * >U " " 8 7 7 7 7 7++E5;??EL&*E # # ^3 3 3 F F F F F F')*='>E $(*+?(@E %&<&<&',@)A4U^U[QQ'''E #)++?(@E %ELL 66R())(7EL % '(9:-.+,-.VV1266    rvvj117R88>>@@FFHHu0$77GD*b99?R@@FFHHNNPP ,0@@  ( (((33 ) -NNNNNN10RVVJ5G5G5M21N1NOOUSU%''%%''(,K'8'8'Y[M=Y$$ - - -',$$$ -   6J %)E ".2E + *6.EE**??????-6Y7G-H-HE*   Q$ +/'u0$77   2 2 4 4 KKMME !$WUJ%C%C%Ir!J!J!P!P!R!R!X!X!Z!Z(6:J(J%EDDDDD$00&112DEE1-2)6VVVVVV+.rvvj/A/A/GR+H+H+N+N+P+P(889IJJPb%''%%''$15[0A0A0ckUcFc--$66605---6E#4d;;:unb99!6**5111KK@tS11w44 KKltS11w44&-#(/C &&!344  &%)/%:%:E "%*! !*+' FEEEEEE""" POOOOO%%eR["Z.III < K   t >BBBuuuuusE F &F54F5K'`3/A.T`3 T-*`3,T--`3 U&%`3& V0V `3VB7`3B[`3 [ `3[  E`33 a#=aa#> PoolTimeout ReadTimeout ConnectErrorConnectTimeoutAPITimeoutErrorAPIConnectionErrorRemoteProtocolError Optional[str]cg}t|dr!|jr||jt|dr*|jr#|j|vr||jt|dr|jr|jD]}t |t ro|dp>|dp)|dp|d}|r||vr||t|dd}|st |tr|D]}t |t rt|d dkr[|dp|dpd }| }|r||vr|||st |trk|rid }|D]d} tj tjz} tj| || D]1}| } | r| |vr|| 2e|rd |SdS)aE Extract reasoning/thinking content from an assistant message. OpenRouter and various providers can return reasoning in multiple formats: 1. message.reasoning - Direct reasoning field (DeepSeek, Qwen, etc.) 2. message.reasoning_content - Alternative field (Moonshot AI, Novita, etc.) 3. message.reasoning_details - Array of {type, summary, ...} objects (OpenRouter unified) Args: assistant_message: The assistant message object from the API response Returns: Combined reasoning text, or None if no reasoning found rrreasoning_detailssummaryrr\rNrr[)z(.*?)z(.*?)z(.*?)z(.*?)z2(.*?))flagsr)rrrlrrrprqrnrFrror?r'r)r*findallr{) r=assistant_messagereasoning_partsdetailrr\block thinking_textinline_patternspatternrcleaneds r.extract_reasoningrsO +..<3D3N<0:;;; "566H;L;^H  .o E E  " "#4#F G G G "566 4;L;^ 4'9 4 4F&$'' 4JJy))*zz*--*zz),,*zz&))  4wo==#**7333 'D99G  :z'488 : : :E%&& :599V+<+< +J+J % * 5 5 P69J9J Pb - 3 3 5 5  :]/%I%I#**=999  4z'377 4G 4 ' 4 4GI -EGWEBBB 4 4++--4wo==#**7333 4 ,{{?+++ 4r0)r6 api_kwargsDict[str, Any]r.r6Optional[Exception]Optional[Path]c f tj|}|ddd|D}d} t |jdd}n>#t $r1}tj d|Yd}~nd}~wwxYwtj |j |d|jd|jdkrd nd d ||d d |dd}|t%|jt)|d}dD]} t || d} | | || <t |dd} | | |d<t |dd} | ^ t | dd|d<| j|d<n>#t $r1}tj d|Yd}~nd}~wwxYw||d<tj d} t|j }|jd|d| dz }ddlm}t7j|dd t(!}t7j||d"#}t=||t($||j d%|tCd&r*tEt7j|dd t(!|S#t $r-}|j#rt$d'|Yd}~dSd}~wwxYw)(a Dump a debug-friendly HTTP request record for the active inference API. Captures the request body from api_kwargs (excluding transport-only keys like timeout). Intended for debugging provider-side 4xx failures where retries are not useful. rrNci|] \}}||| SrrPr,r4vs r. z*dump_api_request_debug..,s???A1r0rz,Could not extract API key for debug dump: %sPOST/codex_responsesz /responsesz/chat/completionszBearer zapplication/json) Authorizationz Content-Type)methodurlheadersbody) timestamprr.request)rr/)r request_idr5paramrrresponserresponse_status response_textz,Could not extract error response details: %sr6z%Y%m%d_%H%M%S_%f request_dump__z.jsonr)redact_sensitive_textFr)rcindentdefaultTr{)r u$🧾 Request debug dump written to: HERMES_DUMP_REQUEST_STDOUTz,Failed to dump API request debug payload: %s)%copydeepcopyritemsrFrfr r6rurrrrrrrxr8_mask_api_key_for_logsrrr?rstrftime _safe_session_filename_componentlogs_dir agent.redactr rrrwrsrrrrprintverbose_loggingrv)r=rr.r6rrr+ dump_payload error_info attr_name attr_value body_attr response_objrsafe_sid dump_filer  _serialized_redacted_payload dump_errors r.dump_api_request_debugr$sN}Z(( D!!!????? RelIt<2CJ// ZZZEEL&&'UWXYYYYYYYYZ%/L !LNN++,>?? 5599%:JKKN%PX%P%P %P%P%PP  766666jE!UXYYY  J'<'<[PT'U'U'UVV)%6DDDD )ZZyZZ[[[ 7 8 8 \ $*.U1VYZZZ [ [ [    W NNI: V V VtttttsnA K9 A$#K9$ B.'BK9BC'K9F&%K9& G!0'GK9G!!DK99 L0"L++L0rrr8rjrrr8rjch||n|jpd}||n|jpd}|dkot|dkS)zEReturn whether this resolved destination accepts native tool markers.Nr[r9api.anthropic.com)rr8r)r=rrr8rj eff_base_url eff_api_modes r.._direct_native_anthropic_tool_cache_capabilityr*{sS (388%.:NBL'388%.:NBL,, C l + +/B Br0ttlcd|dvrdS|dus|dSt|dvS)uReturn True when a ``prompt_caching.cache_ttl`` value means caching off. Single source of truth for the disable-synonym detection shared by ``agent_init`` (live-agent ``_cache_disabled`` flag) and the stub policy paths below. Keeping one predicate prevents the two sites from drifting (a synonym added in only one place would recreate #76085). Unknown values (e.g. ``"2h"``, integers) are NOT a disable — callers keep caching enabled with the default TTL, matching ``agent_init``. )5m1hFNT)offfalsedisablednonone)r?r)r+s r.cache_ttl_means_disabledr4sB lu e||s{t s88>>  I IIr0c ddlm}|dipi}|dd}n#t$rYdSwxYwt |S)aFReturn True when ``prompt_caching.cache_ttl`` is configured as off. Same disable detection as ``agent_init`` (via ``cache_ttl_means_disabled``) so stub-based policy paths (MoA slot decoration, auxiliary fallback replan) honor the same config contract without holding a live ``AIAgent`` (#76085 / #33555). r)load_config_readonlyprompt_caching cache_ttlr-F)hermes_cli.configr6rnr r4)r6pc_cfgr+s r.#prompt_caching_disabled_from_configr;s::::::%%''++,> ?^,,    r0)r<toolsOptional[list]Tuple[list, list]c  ddlm}m}m} t |} t | ||||\} } | s.t j|pg} || | | |fS|||| t| ||||}|j |j fS)uPPlan request-local cache sections for one resolved destination. Shared core of the synchronous acting-aggregator (MoA) and auxiliary fallback senders: resolve the cache policy for the destination's real provider/base_url/api_mode/model, then either return stripped canonical copies (non-caching route) or a :func:`build_prompt_cache_plan` layout (caching route, with the direct-native tool marker when the destination is api.anthropic.com on the Messages wire). Never mutates ``messages`` or ``tools`` — both return values are request-local copies. ``cache_disabled`` threads the operator's ``prompt_caching.cache_ttl`` disable into the blank policy stub. When omitted, the live config is consulted so MoA/auxiliary paths cannot re-enable markers after the user turned caching off (#76085). r)build_prompt_cache_planstrip_anthropic_cache_control"strip_anthropic_tool_cache_controlr%)native_anthropicdirect_native_tool_cache) agent.prompt_cachingrFrGrHrAanthropic_prompt_cache_policyrrr*rJrB)rJrBrrr8rjr<rFrGrHstub should_cache native_layoutcanonical_messagesplans r.#plan_cache_sections_for_destinationrRs6 #> 2 2D"?  ###L- M!]8>r::%%&8999!#E#Ee#L#LLL " " &!O  " " "   D =$* $$r0cht|ddrdS||n|jpd}||n|jpd}||n|jpd}||n|jpd}|dkr_ ddlm} dd l m } dd l m } | | dpi|pd} | d pi} t| d pd}t| d pd}|rg|red}d} | ||}| dpd}| dpd}n#t$rYnwxYwt!|||||Sn2#t$r%}t"d|Yd}~nd}~wwxYwdS|}|}d|v}ddlm}||pd|v}t+|d}d|v}|dk}|o|dkpt-|dk}|rdS|s|r|s|r|sdS|rd|vrdS|r|rdS|r*|dv}t+|dpt+|d }|s|rdSd|v}|d!v} | r|rdSdS)"utDecide whether to apply Anthropic prompt caching and which layout to use. Returns ``(should_cache, use_native_layout)``: * ``should_cache`` — inject ``cache_control`` breakpoints for this request (applies to OpenRouter Claude, native Anthropic, and third-party gateways that speak the native Anthropic protocol). * ``use_native_layout`` — place markers on the *inner* content blocks (native Anthropic accepts and requires this layout); when False markers go on the message envelope (OpenRouter and OpenAI-wire proxies expect the looser layout). Third-party providers using the native Anthropic transport (``api_mode == 'anthropic_messages'`` + Claude-named model) get caching with the native layout so they benefit from the same cost reduction as direct Anthropic callers, provided their gateway implements the Anthropic cache_control contract (MiniMax, Zhipu GLM, LiteLLM's Anthropic proxy mode all do). Qwen / Alibaba-family models on OpenCode, OpenCode Go, and direct Alibaba (DashScope) also honour Anthropic-style ``cache_control`` markers on OpenAI-wire chat completions. Upstream pi-mono #3392 / pi #3393 documented this for opencode-go Qwen. Without markers these providers serve zero cache hits, re-billing the full prompt on every turn. If the operator has set ``prompt_caching.cache_ttl`` to a falsy value (``false``, ``null``, ``"off"``, etc.) in config.yaml, prompt caching is fully disabled — this early return ensures the disable survives ``/model`` switches, fallback re-derivation, and runtime snapshot restoration (#33555). We check ``"_cache_disabled"`` (set by init_agent when the disable is detected) rather than ``_cache_ttl`` directly, because ``_cache_ttl`` is not yet set when the policy runs during the initial ``init_agent`` call. rF)FFNr[rtr load_config)resolve_moa_preset)resolve_runtime_provider aggregatorrrj) requested target_modelrr8r%z1MoA aggregator cache-policy resolution failed: %sclaude)_model_name_is_kimi_familymoonshotz openrouter.airer9r7r')TTr)qwen> minimax-cnminimaxzapi.minimax.iozapi.minimaxi.com>alibabaopencode opencode-go opencode-zen)rFrrr8rjrorr9rUhermes_cli.moa_configrVhermes_cli.runtime_providerrWrnr?r rLrurrr\rr)!r=rrr8rj eff_providerr(r) eff_model _load_moa_cfgrVrW_preset_agg _agg_provider _agg_model _agg_base_url _agg_api_mode_rt_moa_exc model_lowerr is_clauder\is_kimi is_openrouteris_nous_portalis_anthropic_wireis_native_anthropicis_minimax_provideris_minimax_host model_is_qwenprovider_is_alibaba_familys! r.rLrLs*Tu'//~ ( 4HH%.ORL'388%.:NBL'388%.:NBL+CI!!##u,, X F F F F F F @ @ @ @ @ @ L L L L L L(( ##E**0b)2CtG;;|,,2D 4 4 :;;AACCMTXXg..4"55;;==J   " " 22"/jC%(GGJ$7$7$=2M$'GGJ$7$7$=2MM D4***$  X X X LLLh W W W W W W W W X|//##K!''))NK'ICBBBBB""9--J{1J *,HHM$|'9'9';';;N$(<< d [ ( b,=l,K,KOb,b z ( !" {&K//{Yz,0II !,0@ A A G$\3EFF   / :k)M!/4""m{ rrrr http_clientdefault_headersrPrs r.rz(create_openai_client..s4A\\\1\\\r0r)verifyz/Gemini native client created (%s, shared=%s) %srazgithubcopilot.com)copilot_default_headersrc6h|]}|SrP)r)r,r4s r.rz'create_openai_client.. s :::Aaggii:::r0z$Copilot default-header guard skippedTrz(OpenAI client created (%s, shared=%s) %srP)agent.auxiliary_clientr~ragent.ssl_verifyrrqrrnrr?ryagent.copilot_acp_clientrr6rurA_client_log_contextagent.gemini_native_adapterrrr_build_keepalive_http_client setdefaultrhermes_cli.modelsrrr rOpenAI)r=rir.rxr~rrrssl_verify_cfg httpx_verifyrrfrrr safe_kwargskeepalive_httprrexisting_lowerhkhvs r.create_openai_clientrs)SSSSSSSS555555''M##M488K"&&|T::N''+.YYYL}((44555 ~&&#m.?.? B.O.O*P*P*[*[\k*l*l&======!!22M22   ;    % % ' '      ~!!]]]]]]]]}((R88>B?? $ $X . . !.!4!4!6!6KK//!&!C!C\"D"""-1?K .''66+66F EEL  A))++     M$M));;   j" - -l<    %+9M- (]A... R ]%6%6z2%F%F!G!GI\ ] ] 8 A A A A A AM--.?@@FBGGH:::::N113399;; & &B88::^33#%HRL/7M+ , RRR  ADQQQQQRSUU\ * *M * *FEEL2 !!##  Ms B)K 2K?>K?r[c /012ddlm}|s||||}|dkr1|dvr-t|tr|rt jdd|}j}j}t//fdd D0ttd ipi0d <td /0d <td /0d <dS/0fd } d_ |_|_|_ |pd } |pd } |r|_n| | krt!d|d|d|_t%drj|r|_|pd 2|pd 121kstd dYd_d_ ddlm} | |_n3#t4$r&} t6d|| Yd} ~ nd} ~ wwxYw|pd dkrt%d0rj?rdd1l@mA}#|/ dd2l/m1}m8}||}n#t4$rd}YnwxYwtjtrjnd}$|#jj|$j|"|3}%j?Bj|%jjjj4 dd5lCmD}&dd6l/m8}'|'pi}(|&|(j_Et6Fd7jjEn2#t4$r%})t63d8|)Yd})~)nd})~)wwxYwd_Gdd9lHmI}*|*t%d0rj?rj?nd}+id:jd;jd<j d=jd>jd?td?dd@tjdAj=dBj>dCtdCdrtjEnddD|+rt|+d:jnjdE|+rt|+d=jnjdF|+rt|+d?dnddG|+rt|+d;jnjdH|+r|+jJnddI|+rt|+d>jnjdJ|+r|+jKnd_L|dkr-jLMj*j+j.dKd#_Nd_O|pd 2|pd 1ttdLgpg},2r1r21kr12fdM|,D},|,_Q|,r|,dnd_Rt6FdN||||tdOd}-tdPd}.|-d|.rd |-S|.jjtd>dQdS#t4$r t6dRd'(YdSwxYwdSdS)Ta5Switch the model/provider in-place for a live agent. Called by the /model command handlers (CLI and gateway) after ``model_switch.switch_model()`` has resolved credentials and validated the model. This method performs the actual runtime swap: rebuilding clients, updating caching flags, and refreshing the context compressor. The implementation mirrors ``_try_activate_fallback()`` for the client-swap logic but also updates ``_primary_runtime`` so the change persists across turns (unlike fallback which is turn-scoped). r)determine_api_mode)rjr9>rcrdz/v1/?$r[c4i|]}|t|SrPrF)r,r-_MISSINGr=s r.rz switch_model..e s7  geT8,,r0) rjrrkrr8rrfrrrr_config_context_lengthrrr r@rcD],\}}|ur t||#t$rY)wxYwdSr)rsetattrr )_name_valuer _snapshotr=s r._restore_snapshotz'switch_model.._restore_snapshot sr&__..  ME6!! uf----       s3 AANz1switch_model: no base_url resolved for provider 'z' (switching from 'z5'); refusing to keep the previous provider's endpointrlrzcswitch_model: credential pool reload failed for %s (%s); continuing without pool rotation this turnrtruchat_completionszmoa-virtual-providerz moa://local)rnresolve_anthropic_token_is_oauth_tokenr7z minimax-oauth)"build_minimax_oauth_token_providerz`MiniMax OAuth: failed to install per-request token provider on switch (%s); using static bearer.rrqF)rr)*apply_custom_provider_tls_to_client_kwargsget_compatible_custom_providersr6z6custom-provider TLS resolution skipped on switch_modelTrrr switch_modelrw)r"get_custom_provider_context_lengthrU)rjrcustom_providerszLM Studio model activation was rejected or completed without a verifiable active context length during model switch; continuing with configured contextr%r)get_model_context_length)rrU)rrrconfig_context_lengthrr)resolve_reasoning_configrTz2switch_model: reasoning_config resolved for %s: %sz7switch_model: could not re-resolve reasoning_config: %srrjrrkrr8rrirrrrrrrrrcompressor_threshold_tokens)rorprs_fallback_chaincg|]C}|dpdhvA|DS)rr[)rnror)r,rnew_normold_norms r.rSz switch_model.. s\    *%%+2244::< %s (%s) _session_dbr)rr billing_modez2Failed to persist billing route after model switchr@r)Thermes_cli.providersrrpr?r'rrjrobjectrqrFrrkrorr ValueErrorr8rrlrrrr r<rr rurvrrvrrfrrnrrhermes_cli.authrrrrrrr rrr9rrr6r"_apply_client_headers_for_base_urlrr rrU_ensure_lmstudio_runtime_loaded_lmstudio_load_was_unverified"_effective_lmstudio_context_length_anthropic_prompt_cache_policyrrragent.model_metadatarrhermes_constantsrrrA_cached_system_promptrrrthreshold_tokensrupdater}rrr_fallback_modelupdate_session_billing_route)3r= new_model new_providerrrr8r old_model old_providerrold_norm_providernew_norm_providerr _pool_excrvrnrr_is_native_anthropic effective_keyr_mm_exc_loggingeffective_baserrr6 _sm_timeout_sm_custom_providersrrU_sm_cfg_destination_context_intent_runtime_context_length_effective_context_lengthr _ctx_api_keynew_context_lengthr_sm_load_config_reasoning_cfg_reasoning_errr_ccfallback_chainr _session_idrrrrs3` @@@@r.rr2 s877777 O%%lHINNN ((( ; ; ; x % % <  <6)R22 I>LxxH  I&#'wu6F'K'K'Qr"R"RI%,E3Ex$P$PI !-4 *H..I)*i(,$  %#/ */R6688>>@@)/R6688>>@@  %ENN "3 3 3D DD5ADDD  " 5, - - +  " ( ( * * *  $#EM!&B--//5577 &B--//5577 x  752Dd#K#K#S&*E ".2E + ;;;;;;)2<)@)@&&   A )   B % % ' ' - - / /5 8 8 7 7 7 7 7 70EN#='=EM*EN#%E ++E5;??ELL - - -          $0;#> ]qXWX X9P9P9R9RXVXxyWDIDQyWUWM ..:mS3Q3Q.Vc. RRRRRR$F$F$H$HMM ....&&x0088?*EM'4E $(0(_GECXZ^4_4_E %&<&<u84U^U[QQ'''E #L`)Odno|BeCeC)O (F(F(FJOE %EL#%E #4u}M%7N(*$$E  f;:(,"--334H4H4J4JKK  f f f U`d eeeee f6u~u{SSK&2=$Y/  4 4^ D D D 66U)**%7EL &e,,,,    +          +-->>wGG&H&H+^1' ' ' ## +++&*###+#>E #CC# **+BCC  &   !& H H#!! ,,!^ -  >Eu=u*++ 0H AAAAAA  ' ,ZZZZZZZZ'F'F{{}}'U'U$$ , , ,'+$$$ ,)35=#(F(FNu}}B 55 K^ ^";1      --+-^M^^ .    `======DDDDDD(**0b!9!9.%+!V!V @ K/     ``` NP^________`#'EBAAAAA'.e5I&J&J quOg q% " "mqCEN e6 EN  EN  75)R00  e233 e7 "5#A GEK]_c>>5; 3bwsJGGGTYTb SHgc9b999b 3bwsJGGGTYTb $3%ES%7%7A 3bwsJGGGTYTb!" &s'Is';';#E&''' %%!&!9"'";"'";' '    !&EE"))++1133H"))++1133H'%):B??E2FFN H X!5!5     -   +E1?IN1--TE KK5<L%55K%t44K;   4 4$UJ== 5          NND        sETH*)T* I4ITICTL-,T- M372M.)T.M33B-T!rresultrrrirrstatusr error_messagerrr observed_argsrr@cdt|tr|n} ddlm}|||pdt ddpd pdt ddpdt ddpdt t j z dzt n#t$rYnwxYw|S) Nrrr[rrri) r>rrrrrirr duration_msr) rprq model_toolsrrFrrrrr ) rr hook_argsr_tool_middleware_tracer=rrr>ritool_start_times r._finish_agent_toolz'invoke_tool.._finish_agent_tool7 s%/ t%D%DWMM-   = = = = = = % %+')/R"5,;;Ar)/R'92>>D"&u.GLLRPR!1!1O!Ct KLL!%&._executeL si ? ? ? ? ? ?%% #--00#--77+   r0r<c }|s/ddlm}tjd|d|Sddlm}||dd|d|d d |d |d |d d|d|j |S)Nr)format_session_db_unavailableF)successr6)r<queryr[ role_filterrryraround_message_idwindowsort) rrrrrrrdbcurrent_session_id) _get_session_db_for_recall hermes_staterrrrwtools.session_search_toolr<rnr)r session_dbr_session_searchrr=s r.rzinvoke_tool.._executeW s99;;J FFFFFF))$*QnQnQpQp5q5q*r*rt}~~~ S S S S S S%%#--44 ) m < <#--33(}}\::&/mm4G&H&H$==155"v..!','7      r0r8cn|dd}|d}ddlm}||d||d|d|j }jr"j||fd  ||S) Ntargetr8 operationsr) memory_toolactionr\old_text)r%r"r\r&r#r c2S)N)rri)_build_memory_write_metadata)r=rrisr.rz/invoke_tool.._execute.. s#5+M+M 1%1,N,,r0)build_metadata)rntools.memory_toolr$ _memory_storerDnotify_memory_tool_write) rr"r# _memory_toolrrr=rris r.rzinvoke_tool.._executel s]]8X66F"|44J E E E E E E!\ }}X..! i00"z22%) F$ %>>$$$$$$?&%fi88 8r0cNj||Sr)rDhandle_tool_call)rrr=r>s r.rzinvoke_tool.._execute s+%%e&;&L&L]\e&f&fhqrr rr0r9c ddlm}||dd|d|ddj|S) Nr) clarify_toolquestionr[choices multi_selectF)r2r3r4callback)tools.clarify_toolr1rnclarify_callback)r _clarify_toolrr=s r.rzinvoke_tool.._execute sz H H H H H H%% &]]:r::%MM)44!*~u!E!E"3   r0r;c ddlm}||d|dtdd|S)Nr)read_terminal_tool start_linecountread_terminal_callback)r;r<r5)tools.read_terminal_toolr:rnrF)r_read_terminal_toolrr=s r.rzinvoke_tool.._execute sr Z Z Z Z Z Z%%##(}}\::#--00$U,DdKK   r0r:cB||Sr)_dispatch_delegate_task)rrr=s r.rzinvoke_tool.._execute s%%%e&C&CI&N&NPYZZ Zr0cZtjpdtddpdtddpdjrt jndddtddtddt  }rd|d<t j|fi|S) Nr[rrTenabled_toolsetsdisabled_toolsets) rirrr enabled_toolsskip_pre_tool_call_hookrrCrDrr)rqrrFvalid_tool_namesrr6handle_function_call)rdispatch_kwargsrr=rr>rris r.rzinvoke_tool.._execute s") +1r'92>>D"&u.GLLRPR>C>T^d5#9:::Z^(,-1!(0BD!I!I")%1Dd"K"K.23I.J.J   O. IDH @A-355-!"  r0)run_tool_execution_middlewarecHt|tr|nSr)rprq)rrrs r.rzinvoke_tool.. s%(( 9d0K0K#^99Q^__r0) original_argsrrrirrr)rrrrr@r)rrqr@r)rprqrhermes_cli.middlewarerrFpayloadtracer rurhermes_cli.pluginsrrrrwrrrrrDrGrJ)r=r>rrrirJrrrrr_tool_request_mw_mw_err block_messagerrrrJrrrrs````` ` @@@@r. invoke_toolrT s mT * * !"?"E2FFCGGGGGG+ <<<)/R"5,;;Ar)/R'92>>D"&u.GLLRPR    -4M%5%; " CCC 8'BBBBBBBBC$(M !! ! A A A A A A22)/R"5,;;Ar)/R'92>>D"&u.GLLRPR!%&>D"&u.GLLRPR )+!%&AB CB>>C AD)) D87D8A!F88 GGr str | Nonecddlddlm}|sdSdD]'}||}|dkr |d|}(|sdSdd}dfd }dd }|}||jvr|S||} | |jvr| S||| ||h} t d D]x} t} | D]`} || }|rQ| || ||| ||a| | z} y| D]} | r | |jvr| cS|||jd d}|r|dSdS)atAttempt to repair a mismatched tool name before aborting. Models sometimes emit variants of a tool name that differ only in casing, separators, or class-like suffixes. Normalize aggressively before falling back to fuzzy match: 1. Lowercase direct match. 2. Lowercase + hyphens/spaces -> underscores. 3. CamelCase -> snake_case (TodoTool -> todo_tool). 4. Strip trailing ``_tool`` / ``-tool`` / ``tool`` suffix that Claude-style models sometimes tack on (TodoTool_tool -> TodoTool -> Todo -> todo). Applied twice so double-tacked suffixes like ``TodoTool_tool`` reduce all the way. 5. Fuzzy match (difflib, cutoff=0.7). See #14784 for the original reports (TodoTool_tool, Patch_tool, BrowserClick_tool were all returning "Unknown tool" before). Returns the repaired name if found in valid_tool_names, else None. rN)get_close_matches)"'r$r%sr?r@cz|ddddS)Nrr r2)rreplace)rZs r._normzrepair_tool_call.._norm s0wwyy  c**223<<._camel_snake s&rv(#q1177999r0rUc|}dD]D}||r-|dt| dcSEdS)N)_toolz-toolrez_-)rendswithrmrx)rZlcsuffixs r._strip_tool_suffixz,repair_tool_call.._strip_tool_suffix sg WWYY0 6 6F{{6"" 6CKK<(//55555 6tr0rrXgffffff?)ncutoff)rZr?r@r?)rZr?r@rU) r'difflibrWfindrrGrangerr)r=rrW_xml_sep_idxr]r_relowered normalizedcandsr extracstrippedmatchesr's @r.repair_tool_callrt s*III)))))) t )))~~h'' !88!%4%(I t====::::::ooG%(((y!!JU+++!':||I7N7NOE 1XX%% 2 2A))!,,H 2 (### %%//*** ,,x00111    e,,,HHH )?1SQQQGqz 4r0z[response interrupted]rc(|d}t|tr|rdSnt|tr|D]~}t|t rb|ddkrFt|dtr|drdSvdS|rdSn|dvrdS|drdSt|dtr|drdS|ds|d rdS|d s|d rdSd S) atTrue if ``msg`` carries anything the API treats as non-empty content. Covers string content, non-empty multimodal content lists, tool_calls, tool_call_id linkage (tool results), and reasoning payloads. Mirrors the emptiness checks used by ``AIAgent._is_thinking_only_assistant`` but is role-agnostic so it can vet user/assistant/tool turns uniformly. r\Trr)Nr[rrrrrrF)rnrpr?rorrq)rr\rs r._msg_has_payloadrv2 sggi  G'3 ==?? 4  GT " "   E%&& 99V$$..!%))F"3"3S99$eFm>Q>Q>S>S$#tttt tt    " "t ww|t#''-..44=P9Q9W9W9Y9Yt ww{sww':;;t ww$%%1H)I)It 5r0c|rt|dkr|Sg}d}t|dz }t|D]\}}||krot|trZ|ddvrCt |s4t|}t |d<|||dz }z|||r)tj d||S|S)ukHeal empty-content non-final messages before they reach the provider. Root-cause context: a stream that dies with 0 recovered characters (peer reset, stall-kill) could persist an assistant turn with ``content=None`` and no tool_calls. The Anthropic message schema — and the litellm/Bedrock proxies in front of it — reject ANY request whose transcript contains an empty non-final message: "all messages must have non-empty content except for the optional final assistant message" (HTTP 400 INVALID_REQUEST_BODY) Once such a message lands mid-transcript it poisons EVERY subsequent turn of that session until it scrolls out of context. The write-time guard in ``chat_completion_helpers`` stops NEW stubs, but sessions already carrying one (persisted before the guard, or fed in from a host history) stay stuck and previously needed a manual DB edit + gateway restart to recover. This pass is the self-healing counterpart: it runs unconditionally on the per-call ``api_messages`` copy, so a poisoned transcript repairs itself IN MEMORY on the very next send — no restart, no DB surgery. The final message is left untouched (an empty final assistant turn is legal). The stored conversation history is never mutated; only the wire copy is repaired, so the UI/session trace stays faithful. Repair strategy is substitution, not deletion: dropping a mid-transcript turn can break role alternation and tool-call pairing, whereas an honest minimal placeholder keeps the sequence intact and reads correctly as an interrupted turn on replay. rrrXrY)rZrjr\u-Pre-call sanitizer: healed %d empty non-final message(s) by substituting placeholder content — an empty-content turn was in the transcript and would 400 the request ('messages must have non-empty content' / INVALID_REQUEST_BODY). Self-recovering the poisoned transcript in memory; no restart needed.) rm enumeraterprqrnrv_INTERRUPTED_PLACEHOLDERrlr6rurv)rJrhealedlast_idxidxrfixeds r.repair_empty_non_final_messagesr~b s @ s8}}q((%'H F8}}q Hh''!!S 8OO3%% #888$S))9IIE7E)  OOE " " " aKFF OOC     @      Or0c  g}|D]n}|d}|tjjvr(tjd|Y||o|}t|}g}d}|D]}t|trc|ddkrJd|vrFt|dtr|ds#d| D}|dz }|||r)|}tjd|d }|D]}|ddkr|dpg}|s7|D]k}t|trQ|d } t| tr| d nt| d d } n&t|d d } | rt| d d nd } t| tr| rtjd |tj|t| tr|| d <!| +t#| d r || _=#t&$rYJwxYwt|tr|dd|d <mt)} |D]r}|ddkrW|dpgD]?}tj|} | r| | @st)} |D][}|ddkr@|dpd} | r| | \| | z rBfd|D}tjdt-| | z }|rg}|D]}|||ddkr|dpgD]j}tj|} | |vr>|dtj|d| dk|}tjdt-|t)}t)}g}d}|D]}|d}|dkr|drg}|dpgD]`}tj|} | r | |vr|dz }4| r|| ||at-|t-|dpgkri|d|i}|||dkrd|dpd} | r | |vr|dz }=| r|| ||k|||r)|}tjd||S)uFix orphaned tool_call / tool_result pairs before every LLM call. Runs unconditionally — not gated on whether the context compressor is present — so orphans from session loading or manual message manipulation are always caught. rYz9Pre-call sanitizer: dropping message with invalid role %rrrZrc&i|]\}}|dk ||S)rrPrs r.rz)sanitize_api_messages.. s(EEEDAq1 3D3D1a3D3D3Dr0rXzOPre-call sanitizer: dropped empty/invalid tool_calls on %d assistant message(s)invalid_tool_callr^r-NzNPre-call sanitizer: repairing tool_call with empty function.name -> %r (id=%s)rrarerir[cg|]H}|ddkr+|dpdvF|IS)rYrerir[)rnro)r,rRorphaned_resultss r.rSz)sanitize_api_messages..( s`   EE&MMV++~1F1F1L"0S0S0U0UYi0i0i 0i0i0ir0z6Pre-call sanitizer: removed %d orphaned tool result(s)u2[Result unavailable — see context summary above])rYr-r\riz0Pre-call sanitizer: added %d stub tool result(s)zBPre-call sanitizer: removed %d duplicate tool_call_id reference(s))rnr6r_VALID_API_ROLESrurrlr~rprqrrrFr?rorvrrr-r rrrm_get_tool_call_name_static)rJrrrYrndropped_empty_tool_calls_EMPTY_NAME_SENTINELtcsrfnr-surviving_call_idscidresult_call_idsmissing_resultspatchedseen_assistant_call_idsseen_result_call_idsdeduped removed_dupeskept_tcsrs @r.sanitize_api_messagesr sHwwv suu}5 5 5 EEL  K    H/x88H"(*J    sD ! ! *;..##L 1488$=@=N$FECIIKKEEEC $ ) $#    # $   ,/SS 776??k ) ) ggl##)r   S SB"d## AVVJ'')3B)=)=\rvvf~~~72vW[C\C\RT2246@wr64000D$$$   EEL .$ 66r::     "d## S16 GB$7$72BGG DB%% S*>T!R!R:/ S2"ee00 776??k ) )ggl++1r 0 0eem<**0b7799C )##C(((');;           D  ! !   )?:O (*  C NN3   wwv+--'',//52B%%-@@DDCo--$*$'EEM$L$LR$P$P'[,/ ((    >     $'55 #$&GM  wwv ;  377<#8#8 Hggl++1r $ $eem<**0b7799C s222"  .$((--- NN3     NN3        P     Os8K KK user_messageassistant_contentrequire_workspacecl td|DrdS||pd sdSt dkrdSt t jd }|sdSd}d}t fd|D}|sdS|sd Sd d lm } | | t fd |Dpd vpd v} t fd|D} | p| S)u@Detect a planning/ack message that should continue instead of ending the turn. ``require_workspace`` (default True) keeps the original codex-coding scope: the ack must reference a filesystem/repo workspace. The conversation loop passes ``require_workspace=False`` when the user has explicitly opted into intent-ack continuation for all api_modes (``agent.intent_ack_continuation`` is ``true`` or a model-list), so general autonomous workflows ("I'll run a health check on the server", "I'll start the deployment") — which carry a future-ack and an action verb but no filesystem reference — are caught too. The future-ack + short-content + no-prior-tools + action-verb requirements always apply, which is what keeps conversational "I'll help you brainstorm" replies from tripping it. c3rK|]2}t|to|ddkV3dS)rYreN)rprqrn)r,rs r.r/z4looks_like_codex_intermediate_ack.. s@ S S3:c4 >SWWV__%> S S S S S Sr0Fr[iu@\b(i['’]ll|i will|let me|i can do that|i can help with that)\b)z look intozlook atinspectscancheckanalyzreviewexplorereadopenruntestfixrsearchri walkthroughz report back summarize) directoryzcurrent directoryz current dircwdrepo repositorycodebaseprojectfolder filesystemz file treefilespathc3 K|]}|vV dSrrPr,rassistant_texts r.r/z4looks_like_codex_intermediate_ack.. s(#Z#ZFn$<#Z#Z#Z#Z#Z#Zr0Tr)_summarize_user_message_for_logc3 K|]}|vV dSrrP)r,r user_texts r.r/z4looks_like_codex_intermediate_ack.. s( @ @FFi  @ @ @ @ @ @r0z~/rc3 K|]}|vV dSrrPrs r.r/z4looks_like_codex_intermediate_ack.. s9&&%+. &&&&&&r0) any_strip_think_blocksrorrmrAr'ragent.codex_responses_adapterr)r=rrrJrhas_future_ackaction_markersworkspace_markersassistant_mentions_actionruser_targets_workspaceassistant_targets_workspacerrs @@r.!looks_like_codex_intermediate_ackrv s( S S( S S SSSu../@/FBGGMMOOUUWWN u >T!!u UWeffN uN* !$#Z#Z#Z#Z>#Z#Z#Z Z Z $u tNMMMMM// ==CCEEKKMMI @ @ @ @.? @ @ @@@  9   )  #&&&&&/@&&&## " @%@@r0ct|dd}|dus+t|tr|dvrdS|dus+t|tr|dvrdSt|tr:|jpd t fd |DrdndS|jd krd ndS) uClassify the resolved intent-ack continuation mode for this turn. Returns one of: * ``"off"`` — never continue. * ``"codex_only"`` — historical scope: continue only on the ``codex_responses`` api_mode, and only for codebase/workspace acks (``require_workspace=True``). * ``"all"`` — user opted in for every api_mode; continue on any future-ack + action verb (``require_workspace=False``). Mirrors the four-mode shape of ``agent.tool_use_enforcement``: ``"auto"`` (default) → codex_only; ``True``/"true"/"always"/"yes"/"on" → all; ``False``/"false"/"never"/"no"/"off" → off; ``list`` → all when a substring matches the active model name, else off. _intent_ack_continuationautoT>onyestruealwaysallF>r2r/r0neverr/r[c3nK|]/}t|t|vV0dSr)rpr?r)r,rrrs r.r/z/intent_ack_continuation_mode.. sAYYjQRTWFXFXYAGGII4YYYYYYr0r codex_only)rFrpr?rrrjrr8)r=moderrs @r.intent_ack_continuation_moder s 54f = =D t|| 4--|$**,,Ba2a2au u}}D#..}4::<->>><._emitEsK < FD Z   Fv r0 transportc3K|dSt|dd}||Ed{VdSt|dd|Ed{VdSdS)N_pool _connectionsr)rr rs r._pools_for_transportz6_iter_httpx_pool_objects.._pools_for_transportNs   F y'400  uT{{ " " " " " " " F 9nd 3 3 ?uY'' ' ' ' ' ' ' ' ' ' @ ?r0 _transportN_mounts)r r)rr)rrFrrr )rrmountsrmountedrrs @@r._iter_httpx_pool_objectsr8s55J ( ( ( ( ( ('' \4(P(PQQQQQQQQQi66<"!%fllnn!5!5 5 5 Hg++G44 4 4 4 4 4 4 4 4 5 5 sA+B BBconnc#2Kt}|g}|r|}|t|}||vr-|||Vt |dd}|&t||vr|||dSdS)uAWalk nested ``_connection`` wrappers (proxy tunnel → HTTP11/2).N _connection)rrrrrFrl)rseenstackrrinners r._connection_candidatesresUUD FE   IIKK   I T>>   =$77  E$!6!6 LL          r0rfc#K t|dd}||}tt|}n#t$rYdSwxYw|sdSt }|D]{}t|ddpt|ddpg}t|D]C}t |D]/}t|ddpt|dd}|(t|dd} | ?t|dd} t | r | d } n#t$rd} YnwxYw| $t|d d} | t| dd} | [t|dd} t| d d} t | r* d d lm} | | j } n#t$rd} YnwxYw| t| }||vr| || V1E}dS)uYield raw sockets reachable from an OpenAI/httpx client pool. httpcore 1.x stores the concrete HTTP11/HTTP2 connection under ``conn._connection``; older versions exposed stream attributes directly on the pool entry. Proxy tunnels wrap another layer (``TunnelHTTPConnection`` / ``ForwardHTTPConnection``). Keep the traversal defensive because these are private transport internals and vary across httpx/httpcore releases. Also walks ``httpx`` mount transports — see ``_iter_httpx_pool_objects``. _clientNrr_network_stream_stream_sockget_extra_infosocketstreamrpr)SocketAttribute) rFrrr rrcallable anyio.abcr raw_socketrr)rfrpoolsrr  connectionsrrrsockrwrappedrprrs r._iter_pool_socketsrwsfi66  !K-k::;;  UUD++ D.$ / / tWd++   %%% % D3D99$ $  I'8$??;y)T::>vw55<%,V5Et%L%LN//((#1>(#;#;DD((((#'DDD(<%fh==G*&w>><&fi>>G#GWd;;E((AAAAAA#(5)C#D#DDD((((#'DDD(<DT>>    I$ %  ++s316 AA? D  D D 7F F F ct|dd}|dS d}t|D]}ddl} |d|d|j|jz}|dkr|dz }n #t$rYnt$r|dz }YnwxYw |d#t$rYwxYw# |dw#t$rYwwxYwxYw|dkr?tj d|| d dSn>#t$r1}tj d |Yd}~nd}~wwxYwdS) aEDetect and clean up dead TCP connections on the primary client. Inspects the httpx connection pool for sockets in unhealthy states (CLOSE-WAIT, errors). If any are found, force-closes all sockets and rebuilds the primary client from scratch. Returns True if dead connections were found and cleaned up. rfNFrrXr0Tu@Found %d dead connection(s) in client pool — rebuilding clientdead_connection_cleanuprhzDead connection check error: %s)rFrr setblockingrecvMSG_PEEK MSG_DONTWAITBlockingIOErrorOSErrorr6rurv_replace_primary_openai_clientr r)r=rf dead_countr_socketdatars r.cleanup_dead_connectionsrsUHd + +F ~uC &v..  D $ $ $ $   '''yyG$4w7K$KLL3;;!OJ"      a  $$T****D$$T****D >> EEL R     0 08Q 0 R R R4  CCC  Nr[r retry_afterrrz retry-afterz Retry-Afterzx-ratelimit-resetir[z,quotaResetDelay[:\s\"]+(\d+(?:\.\d+)?)(ms|s)rXrmsg@@zresets?\s+in\s+(?:(\d+(?:\.\d+)?)\s*(?:h|hr|hrs|hour|hours)\b\s*)?(?:(\d+(?:\.\d+)?)\s*(?:m|min|mins|minute|minutes)\b\s*)?(?:(\d+(?:\.\d+)?)\s*(?:s|sec|secs|second|seconds)\b)?rryi<z?retry\s+(?:after\s+)?(\d+(?:\.\d+)?)\s*(?:sec|secs|seconds|s\b))rFrprqrnr?rorfloatrrr'rr*grouprrgroups)r6contextrrNr.r/rrVrrrratelimit_reset raw_message delay_matchrresets_in_matchhoursminutes sec_matchs r.extract_api_error_contextr"s G 5&$ ' 'DG$U'1$((72C2CT'J'JT$((7###PT'4  V$$S F(;(;Sw{{7?S?S fc " " /v||~~ / & GH ++i((LGKK8K,L,L +:gkk'&:&:C@@ +kk'**G gs # # 1  1!(GI ,  CKK$$EJ&&&+ #'kk-00 j ( (Zw-F-F &*ikkE+4F4F&F ##z*    uj$//Hh 400G 2kk-00NGKK 4N4N  :W44 &*ikkE+4F4F&F ##z*    !++&9::  2z88"1GJ %jj&&((  3!,TcT!2GI   ++i((.B gs # # V)$SU\^`^kllK Vk//2233,7,=,=a,@,@,F,F,H,HD,P,P%&..V[&*ikkG&; ##"$)NM ### Vs?+A+A+C+C'D'D V!/"7"7":":"?a@@E#O$9$9!$<$<$ABBG#O$9$9!$<$<$ABBG*.)++*F'TV,*WZa*aGJ'' " Z !!I !V.2ikkE)//RSBTBT&J%%J98J9 num_tool_msgscN|dks|sdS|}|sdSd}tt|dz tt||z dz ddD]<}||}t |t r|ddkr|}n=|st|dd}|<|5|jr|jdz|z|_n||_dddn #1swxYwYn"t|d d}|r|dz|zn||_dSt|} ||d d } t | tsi | rt| ng} | d | d | ||d <n-#t$r| | ||d <YnwxYw| | z||d <tjdt||ddt|dkrdnd zdS)uQAppend any pending /steer text to the last tool result in this turn. Called at the end of a tool-call batch, before the next API call. The steer is appended to the last ``role:"tool"`` message's content with a clear marker so the model understands it came from the user and NOT from the tool itself. Role alternation is preserved — nothing new is inserted, we only modify existing content. Args: messages: The running messages list. num_tool_msgs: Number of tool results appended in this batch; used to locate the tail slice safely. rNrXrrYre_pending_steer_lockr]_pending_steerr\r[rrz9Delivered /steer to agent after tool batch (%d chars): %sxz...)_drain_pending_steerrjrmmaxrprqrnrFr&r r?rrllstripr r6rurA) r=rJr# steer_text target_idxrr_lockrrexisting_contentblockss r.#apply_pending_steer_to_tool_resultsr0?s++--J J 3x==1$c#h---*G!*KR&P&PRT U Uqk c4  SWWV__%>%>J E4d;;   6 6'6+0+?$+F+SE((+5E(  6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 u&6==HEM#]HtOj$@$@S]E   , ,F +// 2>> & , , D L/?GT*+++RF MM66==??CC D D D.4HZ  + + L L L1A.K6.K.KHZ  + + + L+;V*CY'EELC J4C4S__s%:%:EECs%;"C))C-0C-AF##F?>F?cddl}d} t|D]3} ||jn#t$rYnwxYw|dz }4n>#t $r1}t jd|Yd}~nd}~wwxYw|S)u&Abort in-flight TCP I/O by shutting down sockets WITHOUT closing FDs. When a provider drops a connection mid-stream — or the user issues an interrupt — we want to unblock httpx's reader/writer immediately rather than waiting for the kernel's per-connection timeout. ``shutdown(SHUT_RDWR)`` achieves that: it sends FIN, breaks any pending ``recv``/``send`` with EOF or ``EPIPE``, but does NOT release the file descriptor. Historically this helper also called ``socket.close()`` so the FD got released immediately, but that's unsafe when (as is the case for both the interrupt-abort path and stale-call kill path) the helper runs on a different thread than the one driving the request: * The Python ``socket.socket`` we close here is the SAME object held by httpx's pool, so closing it via Python sets its ``_fd`` to -1 and future operations on that Python object fail safely. * BUT the SSL wrapper (``ssl.SSLSocket``'s underlying OpenSSL ``BIO``) caches the raw integer FD. Once ``os.close(fd)`` runs, the kernel may immediately recycle that integer to the next ``open()`` call — e.g. the kanban dispatcher opening ``kanban.db``. * The owning worker thread then unwinds httpx, the SSL layer flushes a pending TLS record, and the encrypted bytes get written into the wrong file (issue #29507: 24-byte TLS application-data record clobbering SQLite header bytes 5..28). The fix is to let the owning thread own the close. ``shutdown()`` from any thread is FD-safe; ``close()`` is not. The httpx connection's own close path — which runs from the worker thread when it unwinds — will release the FD via the same ``socket.socket`` object, and because Python's socket close atomically swaps ``_fd`` to -1 *before* issuing ``os.close``, there is no FD-aliasing window when only one thread closes. Returns the number of sockets shut down. (Field kept as ``tcp_force_closed=N`` in the log line for backwards-compatible parsing.) rNrXz'Force-close TCP sockets sweep error: %s) rrshutdown SHUT_RDWRr r r6rur)rfr shutdown_countrrs r.force_close_tcp_socketsr5sHN K&v..  D  g/0000     a NN  KKK  DcJJJJJJJJK s6A 5A AA A A B'BB)rrrrr^rrrrr$r;rArRrLrrrTrtrrrrr"r0rr5)r=rr>r?r@rA)rJrKrLr?rMrAr@rK)rJrrr?rrr@r)rr?)rJrr@r)r\r?r@r?r) rrrrAr rrrr@r)r_r r`rrarr@rA)rJrKrrAr@rK)r@rA)r@r)rrr.r?r6rr@r) rrrrr8rrjrr@rA)r+rr@rAr)r<r=)rJrrBrCrr?rr?r8r?rjr?r<r=r@rD) rrrrr8rrjrr@r)rirqr.r?rxrAr@r)r[r[r[)NNFFNF)r>r?rrqrr?rirrJrrrArrArrrrAr@r?)rr?r@rU)rrr@rA)rJrKr@rK)T) rrrr?rJrKrrAr@rA)r@r?)rrqrrqr@r)rrr@r)rr)rr)rfr)r6r r@r)rJrr#rr@r)rfrr@r)j__doc__ __future__rrrrrr' threadingrrpathlibrtypingrrrr r hermes_cli.timeoutsr agent.prompt_builderr agent.tool_dispatch_helpersr ragent.trajectoryrr<rragent.error_classifierragent.turn_contextrutilsrrrrrrrurG_REASONING_TAG_NAMES_TOOL_CALL_TAG_NAMEStuplerrr(r)r*rr{rrrr6 frozensetrErIrrr__annotations__Lockrrrrrrr r^rrrr~rr$r*r4r;rArRrLrrrTrtryrvr~rrrrrrrrrrr"r0r5__all__rPr0r.rIs,#"""""   33333333333333<<<<<<444444[[[[[[[[888888TTTTTTTT111111555555^^^^^^^^^^^^  8 $ $]d!E""$""" "E""$"""!+ ,I  !!)3 F#((#788FFFI ))% !+ 3chh+,,333M!! #-"*;SXX* + +;;;M##  &/YUUU&&" KKKKgggg\ ! TTTTTTD<>====%y~''????D+++,XXXXv$$$$P^^^^D////037.2 A"A"A"A"A"A"J eeee\(,ZZZZZZ|[[[[~(i)))NNNNn"& \\\\\\F#"" "JJJJ$))))$@&*9%9%9%9%9%9%~#"" rrrrrrluuuupwwwwv GK056;QU8= \\\\\@[[[[F4----`AAAAHLLLLj# bAbAbAbAbAJJJJJ: 8 8 8 8    !!!!H****Z    $EEEEP((((XPPPPh====B2222l   r0