epjlUdZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlmZmZddlmZddlmZmZmZmZmZddlmZerddlZdZn ddlZdZn#e$rd ZdZYnwxYwdd lmZm Z dd l!m"Z"m#Z#m$Z$m%Z%m&Z&dd l'm(Z(m)Z)d dl*m+Z+ddl,m-Z.ddl,m/Z0ddZ1ej2e3Z4dZ5dZ6dZ7dZ8ddZ9ddZ:dd!Z;dd"Zd'Z?d(Z@d d)lAmBZCmDZDdaEd*eFd+<dZGd*eFd,<d-ZHdd.ZIdd/ZJd0ZKd1ZLd2ZMd3ZNd4ZOd5d6gZPGd7d8eQZR ddd=ZSd>ZTddAZUddBZVddDZWddEZXddGZYddJZZddKZ[ddLZ\ddMZ]ddPZ^ddQZ_ddSZ`ddTZaddVZbddWZcddZZddd[Zedd]Zfdd^Zgdd_ZhGd`dae"ZidddZjdedfdgdhdededediZkdjdjdkdldmdndndoZld dpddsZmdduZnddd dvdd~ZoddZpdS)u Photon Spectrum (iMessage) platform adapter for Hermes Agent. Both directions of traffic flow through a small supervised Node sidecar (see ``sidecar/index.mjs``) that runs the ``spectrum-ts`` SDK — the SDK is TypeScript-only and there is no public HTTP message API, so a sidecar is unavoidable. Inbound: The SDK's ``app.messages`` is a long-lived **gRPC** stream. The sidecar serializes each message to a normalized JSON event and streams it to this adapter over a loopback ``GET /inbound`` (NDJSON). A background task here consumes that stream, dedupes on ``messageId``, and dispatches a ``MessageEvent`` to the gateway via ``BasePlatformAdapter.handle_message``. No webhook, no public URL, no signing secret. Outbound: ``send`` / ``send_typing`` are loopback POSTs to the sidecar's control endpoints, authenticated with a shared bearer token. URL-only messages can route through spectrum-ts' ``richlink()`` builder via ``/send-richlink``. Outbound media (images, voice notes, video, documents) goes through spectrum-ts' ``attachment()`` / ``voice()`` content builders via the sidecar's ``/send-attachment`` endpoint. ) annotationsN)datetimetimezone)Path) TYPE_CHECKINGAnyDictListOptional)urlparseTF)PlatformPlatformConfig)BasePlatformAdapter MessageEvent MessageTypeProcessingOutcome SendResult)compile_mention_patternsstrip_markdown)load_project_credentials)UnscopedSecretError) get_secretcz t||}n$#t$rtj|}YnwxYw||n|S)aScope-aware credential read with the default-profile startup fallback. Secondary profiles construct their adapters under a profile secret scope -- the scope is authoritative and a scoped miss returns ``default`` (no cross-profile borrow from ``os.environ``, which may hold another profile's value). The DEFAULT profile's adapter constructs and sends *unscoped* under multiplexing, where a bare ``get_secret`` would raise ``UnscopedSecretError`` and crash this path; there ``os.environ`` is that profile's own value, so fall back to it. Same pattern as the Slack ``SLACK_APP_TOKEN`` read (#59739) and ``gateway/platforms/whatsapp_common.py::_get_wsecret``. )_scoped_get_secret_UnscopedSecretErrorosgetenv)namedefaultvals F/home/thesage/.hermes/hermes-agent/plugins/platforms/photon/adapter.py_get_scoped_secretr#JsR w// ioo/33w.s 44iU"z 127.0.0.1i@zphoton-sidecar.jsonreturnrc8ddlm}|dz tz S)Nrget_hermes_homeruntime)hermes_constantsr'_RUNTIME_RECORD_NAMEr&s r"_runtime_record_pathr+ys-000000 ?  y (+? ??portinttokenstrpidNonecddl} t}|jdd|t |jdd\}} t j|dn#t$rYnwxYwt j |d d 5}tj |||d |dddn #1swxYwYt j ||dS#t$r( t j|n#t$rYnwxYwwxYw#t$r&}t d |Yd}~dSd}~wwxYw)z@Atomically persist ``{port, token, pid}`` with owner-only perms.rNT)parentsexist_okz.photon-sidecar.z.tmp)dirprefixsuffixiwutf-8encoding)r-r/r1z3[photon] failed to write sidecar runtime record: %s)tempfiler+parentmkdirmkstempr0rchmodOSErrorfdopenjsondumpreplace BaseExceptionunlink Exceptionloggerwarning) r-r/r1r=pathfdtmpfhes r"_write_runtime_recordrQsOOOQ#%% $666""DK  );F#  C  e$$$$    2sW555 J 4%DDbIII J J J J J J J J J J J J J J J JsD ! ! ! ! !     #        QQQLaPPPPPPPPPQsADA54C$5 B?C$BC$C6 C$CC$ C C$$ D/DD DDDDD E #EE Optional[Dict[str, Any]]c tjtd}n#tt f$rYdSwxYwt |tr|ndS)Nr:r;)rDloadsr+ read_textrB ValueError isinstancedictraws r"_read_runtime_recordr[spj-//9979KKLL Z ttS$'' 133T1s47A  A cn tddS#t$rYdSwxYw)NT) missing_ok)r+rHrBr,r"_delete_runtime_recordr_sL %%%66666      s "& 44rboolcj t|}n#ttf$rYdSwxYw|dkrdS ddlm}t ||S#t $rYnwxYwtjdkrB tj |dn)#t$rYdSt$rYdSt$rYdSwxYwdSdS)z8Best-effort liveness check for the recorded sidecar pid.Fr) _pid_existsposixT) r. TypeErrorrVgateway.statusrbr`rIrrkillProcessLookupErrorPermissionErrorrB)r1pid_intrbs r"_sidecar_pid_aliverjsc(( z "uu!||u ......KK(()))       w'  GGQ    !   55   44   55 t 4s;''A AA2B B. B.! B.-B.ii.@) dir_writableresolve_sidecar_dirzOptional[Path] _SIDECAR_DIR_NPM_ERROR_LOGi,c:ttatS)zBSidecar runtime dir, resolved once on first use (never at import).)rnrmr^r,r" _sidecar_dirrqs*,, r,c@ttStdz S)zEPath of the persisted npm-failure log (derived from the sidecar dir).Nz.photon-npm-error.log)rorqr^r,r"_npm_error_logrss! >>3 33r,iX)zinternal sidecar errorzupstream connect errorzupstream unavailablezconnection droppedzreset reason: overflowupstream_overflowupstream_unavailable>@z.pluginpayloadattachment@z#(?>  "z#{'C'C "4 S *0022 22r,c*tstddStjt jdpds1tdt jdpddStsttjdrttrdSd} t rAt d d t}n#t $rYnwxYw|r)td t|n'td tdSdS)zEReturn True when both Python deps and the Node sidecar are available.u1photon: httpx not installed — pip install httpxFPHOTON_NODE_BINnodez*photon: node binary '%s' not found on PATHnpmTr:r;NuYphoton: spectrum-ts not installed at %s (last npm error: %s) — run: hermes photon setupuDphoton: spectrum-ts not installed at %s — run: hermes photon setup)rrJrKshutilwhichrrrr` _dir_writablerqrsrrUstrip_NPM_ERROR_LOG_MAX_CHARSrBdebug) npm_errors r"check_requirementsrs JKKKu < "344> ? ? 8 I' ( ( 2F   u ! # #'  U## $ $ |~~)F)F 4   &&(( l*,,666HHNNPPQjRjQjk     D    LLD      LLV   u 4s A!D// D<;D<ctdz }tdz dz } |j|jkS#t$rYdSwxYw)a(True when node_modules exists but is older than the committed lockfile. `hermes update` rewrites ``package-lock.json`` when the spectrum-ts pin is bumped, but does not reinstall ``node_modules``. npm records the state of the last install in ``node_modules/.package-lock.json``; when the top-level lockfile is newer than that marker, the install is out of date. This is the same signal ``npm ci`` uses. Returns False (do nothing) if either file is missing or unreadable, so a first-run or odd filesystem never blocks start. zpackage-lock.jsonrz.package-lock.jsonF)rqstatst_mtimerB)lockfilemarkers r"_sidecar_deps_stalerso~~ 33H ^^n ,/C CF}}'&++--*@@@ uus3A A)(A)c tjd}|stddSddlm} t j|dgttdddd d t| }|j dkr_td t j|d gttdddd d t| }n6#t j $r$t dtYdSwxYw|j dkr=t d|jp|jpddStddS)uReinstall the sidecar's node_modules from the lockfile (blocking). Mirrors ``hermes photon install-sidecar``: ``npm ci`` for an exact, reproducible install, falling back to ``npm install`` if the lockfile is missing or drifted. Runs the postinstall patch as part of the install. Best-effort — a failure here just leaves the (stale) deps in place and the normal ``_start_sidecar`` readiness check reports the real error. rz=[photon] cannot reinstall stale sidecar deps: npm not on PATHNrwindows_hide_flagsciTr:rFF)cwdcapture_outputrr<errorscheckr creationflagsz?[photon] sidecar `npm ci` failed; falling back to `npm install`installz9[photon] sidecar dependency reinstall timed out after %ssz0[photon] sidecar dependency reinstall failed: %srz7[photon] sidecar dependencies reinstalled from lockfile)rrrJrKhermes_cli._subprocess_compatr subprocessrunr0rq_NPM_REINSTALL_TIMEOUT returncodeTimeoutExpiredrstderrstdoutrinfo)rrresults r"_reinstall_sidecar_depsrs ,u  C VWWWA@@@@@  $KLNN## *,,..      ! ! NNQ    ^i  ''#GI.0022F  $     G "     A > ] 1fm 1r 8 8 : :      MNNNNNsB/C**/DDcfgrc|jpi}|dptjd}|dpt d}|r|s"t \}}t |o|SdS)N project_idPHOTON_PROJECT_IDproject_secretPHOTON_PROJECT_SECRETT)extrarrrr#rr`)rrrr stored_id stored_secs r"validate_configrs IOE<((JBI6I,J,JJYY/00_4FG^4_4_N .^. 8 : : :I,*--- 4r,c t|Sr)rrs r" is_connectedr"s 3  r,Optional[dict]ct\}}|r|sdS||d}tjdd}|r|tjddd|d<|S) zSeed PlatformConfig.extra from env so env-only setups appear in status. The special ``home_channel`` key is handled by the core plugin hook and becomes a proper ``HomeChannel`` on ``PlatformConfig``. N)rrPHOTON_HOME_CHANNELrPHOTON_HOME_CHANNEL_NAMEHome)chat_idr home_channel)rrrr)rrseedhomes r"_env_enablementr&s ":!;!;J >t *nMMD 9*B / / 5 5 7 7D  I8&AA  ^ Kr,cxtjdddvS)a:Send agent replies as markdown (spectrum-ts ``markdown()`` builder). iMessage renders it natively; other Spectrum platforms degrade to readable plain text. On-device rendering can't be unit-tested, so ``PHOTON_MARKDOWN=false`` is the kill-switch back to stripped plain text without a release. PHOTON_MARKDOWNtrue>0nofalserrrrr^r,r"_markdown_enabledr9s< 9& / / 5 5 7 7 = = ? ?H r, Optional[str]c|pd}tjd|tjsdS t |}n#t $rYdSwxYw|jdvs|jsdS|S)Nrz https?://\S+)flags>httphttps) rre fullmatch IGNORECASEr rVschemernetloc)r candidaters r"_url_only_candidater Fs""$$I <"- H H Ht)$$ tt }$555V]5t sA AAc@tsdSt|S)a&Return a URL that should be sent via spectrum-ts ``richlink()``. Keep this intentionally narrow: only exact http(s) URL messages become rich links. Prose containing URLs and Markdown links stay on the normal markdown/text path so Hermes does not drop labels or rewrite intent. N)rr )rs r"_richlink_candidater Ss%   t t $ $$r,contentDict[str, Any]ct|dpd}t|dpd}t|dpd}g}|r|||r||kr|||r|||rd|ndS)Nurlrtitlesummary z'[Photon rich link received with no URL])r0rrappendjoin)r rrrpartss r"_format_richlink_contentr_s gkk%  &B ' ' - - / /C  G$$* + + 1 1 3 3E'++i((.B//5577GE  U7e## W  S$ S499U   *SSr,c|d}|dkr$t|dpdS|dkr$t|dpdS|dkrq|dpgD]Y}t|ts|dpi}t|trt |}|r|cSZdS) Nrrrrichlinkrgroupitemsr )rr rWrX_richlink_url_from_content)r ctypeitem item_contentrs r"rrms KK  E "7;;v#6#6#<"=== "7;;u#5#5#;<<< KK((.B  DdD)) 88I..4"L,-- 0>>JJJ 4r,payloadc|ddkrdSt|dpd}t|dpd}|tp+|tpt|vpt|v}|S)Nr attachmentFrrid)rr0rendswith#_RICHLINK_PREVIEW_ATTACHMENT_SUFFIX)r r attachment_idis_preview_payloads r"_is_richlink_preview_attachmentr(s{{6l**u w{{6""(b ) ) / / 1 1D D))/R006688M 9:: @  ! !"E F F @ .$ 6 @ /- ?  r,c\|ddkr9t|dp|dpdS|ddkrg}|dpgD]}t|tr|dnd}t|trL|t|dp|dpdd |pd Sd S) Nrr"rr# (unnamed)rrr z, z(group)z (unknown))rr0rWrXrr)r labelsrrs r"_richlink_preview_labelr,s"{{6l**7;;v&&J'++d*;*;J{KKK{{6g%%KK((.B  D2Z" ddfdD Z# ddfdG Z$ dddIZ% dddKZ& dddMZ' dddPZ( dddRZ) dddVZ* dddXZ+dddYZ,ddZZ-d[Z.d\Z/dd]Z0e1j2d^Z3e4dd_Z5dd`Z6ddaZ7ddbZ8ddcZ9ddeZ:ddfZ; dddgZ< dddhZ=ddjZ>dkZ?dlZ@ddmZAddnZBeddpZCeddrZD dddxZEdd{ZFd|d|d}ddZGddZHd6d6d6ddddZIddZJxZKS) PhotonAdapterzBidirectional bridge to Photon Spectrum via the Node spectrum-ts sidecar. Inbound: consume the sidecar's ``/inbound`` gRPC stream. Outbound: loopback POSTs to the sidecar's control channel. FconfigrcBt|td|jpi}t \}}t jdp|dp|pd|_tdp|dp|pd|_ t|dpt jdt|_ t|_td pt!jd |_t't jd d d v|_t jdpt-jdpd|_t3t5|dt jdd|_t3t5|dt jdd|_t;t5|dt jdd|_|jdk|_tA|_!d|_"d|_#d|_$d|_%d|_&d|_'d|_(d|_)d|_*d|_+d|_,d|_-i|_.i|_/i|_0i|_1i|_2i|_3|d}|t jd}t'|4dv|_5|6d |vr|d nt jd!|_7dS)"Nphotonrrrrr sidecar_portPHOTON_SIDECAR_PORTPHOTON_SIDECAR_TOKENPHOTON_SIDECAR_AUTOSTARTr)rrrrrprobe_interval_secondsPHOTON_PROBE_INTERVAL_SECONDSg@probe_timeout_secondsPHOTON_PROBE_TIMEOUT_SECONDSg$@probe_max_failuresPHOTON_PROBE_MAX_FAILURESrFrkrequire_mentionPHOTON_REQUIRE_MENTION>1onyesrmention_patternsPHOTON_MENTION_PATTERNS)8rrr rrrrr _project_idr#_project_secretr_DEFAULT_SIDECAR_PORT _sidecar_port_DEFAULT_SIDECAR_BIND _sidecar_bindsecrets token_hex_sidecar_tokenr0r_autostart_sidecarrr _node_binrr_probe_interval_probe_timeoutr_probe_max_failures_probe_enabledrsupports_code_blocks _sidecar_proc_sidecar_supervisor_task _inbound_task_sidecar_health_task_inbound_running _http_client_sidecar_health_interval_watchdog_task_watchdog_running_probe_failures_last_upstream_activity _respawn_lock_seen_messages_sent_message_ids_last_inbound_by_chat_recent_richlinks_by_chat_typing_last_sent _pending_fffcrrA_compile_mention_patterns_mention_patterns)rr1rrr_require_mentionrs r"rzPhotonAdapter.__init__s (!3!3444 " !9 : : : I) * * yy&&    6 7 7 yy)**   * IIn % % I3H)I)I !  3 5 6 6 O':KB:O:O #& I0& 9 9# # %''-#.#455Wf9M9MWQW( -  233 9::      ,  122 899      $/  .// 566    $ $  #2Q6%6$7$7!:>@D%59<@! %;?(,%6:!& (+$59134668"<>&35;= !99%677  #!y)ABB "#344::<<BBDDI  "&!?!?!U** $ % %455" " r,rZrr$'list[re.Pattern]'c<t|dttS)aDCompile group-mention wake words from config/env. ``raw`` is a list (config or env JSON), a string (env var: JSON list, or comma/newline-separated), or None (use Hermes defaults). Mirrors the BlueBubbles implementation so both iMessage channels accept the same configuration shapes. r3) log_prefixdefaultslogger_)r_DEFAULT_MENTION_PATTERNSrJrYs r"rjz'PhotonAdapter._compile_mention_patternsIs'( .     r,rr0r`cZr|jsdStfd|jDS)NFc3BK|]}|VdSr)search).0patternrs r" zBPhotonAdapter._message_matches_mention_patterns..\s/NNG7>>$''NNNNNNr,)rkany)rrs `r"!_message_matches_mention_patternsz/PhotonAdapter._message_matches_mention_patternsYs@ 41 5NNNNt7MNNNNNNr,c|s|S|jD]r}||}|rG||dd}|p|cSs|S)zStrip a leading wake word before dispatch. Custom mention patterns are regexes, so we only strip a leading match to avoid deleting ordinary words later in the prompt. Nz ,:-)rkmatchlstripend)rrrwr|cleaneds r"_clean_mention_textz!PhotonAdapter._clean_mention_text^s  K- ' 'GMM$++--00E '++-- 5< ``disconnect()``. ``disconnect()`` cancels ``self._sidecar_health_task`` and awaits it to make sure it's really gone -- but when the *health task itself* is what's driving this whole notification (the common case: the health poll is what detected the fatal condition), that task IS the one awaiting several frames up the stack, so ``disconnect()`` cancels and awaits its own caller. ``disconnect()``'s ``task is not asyncio.current_task()`` guard doesn't catch this, because the wrapper task ``_await_adapter_cleanup_with_timeout`` creates around ``disconnect()`` (via ``asyncio.ensure_future``) is the current task there, not the health/supervisor task further up the plain-await chain. The self-cancellation throws an unhandled ``CancelledError`` through the health/supervisor task with nothing to catch it -- ``CancelledError`` stopped subclassing ``Exception`` in Python 3.8, so the ``except Exception`` around the notify call never saw it -- and the task dies silently mid-handoff: no log line, no retry, the platform stranded with no automated way back. Dispatching the notification onto a brand-new task instead -- the same pattern ``DiscordAdapter._handle_bot_task_done`` already uses -- means ``disconnect()`` can cancel the health/supervisor task freely without that cancellation ever reaching back into the code that's still running the handoff, so the handoff always reaches the reconnect queue. N)rr_notify_fatal_error_loggedrs r"_dispatch_fatal_notificationz*PhotonAdapter._dispatch_fatal_notifications(B D;;==>>>>>r,cK |d{VdS#t$r&}td|Yd}~dSd}~wwxYw)Nz,[photon] fatal-error notification failed: %s)_notify_fatal_errorrIrJrK)rrs r"rz(PhotonAdapter._notify_fatal_error_loggeds P**,, , , , , , , , , , P P P NNI3 O O O O O O O O O Ps AA  AcK|j}|dSd|jd|jd}d|ji}d}|jrI |d||d4d{V }|jd krtd |jd}|23d{V}|jsn4| }|s'| |d{VC6 dddd{Vn#1d{VswxYwYn|#tj $rt$r`}|jsYd}~dStd ||tj|d{Vt#|d zd }Yd}~nd}~wwxYw|jGdSdS)zConsume the sidecar's ``/inbound`` NDJSON stream, with reconnect. The sidecar owns the gRPC reconnect/heartbeat to Photon; this loop only has to re-open the loopback HTTP stream if it drops (e.g. the sidecar restarts). Nhttp://:z/inboundX-Hermes-Sidecar-Tokeng?GETheadersrrz/inbound returned z;[photon] inbound stream dropped (%s); reconnecting in %.1fsrv)r]rMrKrPr\streamr~ RuntimeError aiter_linesr_on_inbound_linerrrIrJrKsleepmin)rrrrbackoffresplinerPs r"rzPhotonAdapter._inbound_loops" > FI*IIT-?III+T-@A# 1 1!==3) : : : : : : : :'3..*+R@P+R+RSSS!G&*&6&6&8&8:::::::d#4"!E#zz||#%$"33D9999999999 '9&8 : : : : : : : : : : : : : : : : : : : : : : : : : : :)    1 1 1,EEEEEQwmG,,,,,,,,,gk400 1## 1 1 1 1 1sNC79C%C>C%C7% C//C72C/3C77E0E+A E++E0cFK|jrtj|jd{V|jsdS |did{V}nA#tj$rt $r%}td|Yd}~d}~wwxYwt|tr| dnd}t|ts| d}t|trY| ddurBt d| d | d | d d urmt| d pd}| d}t| dpd}d|d|d|}td||d|d|dSdS)aPromote degraded upstream Photon stream health into reconnect. The sidecar HTTP process can stay alive while spectrum-ts repeatedly fails to maintain the upstream inbound gRPC stream. Polling `/healthz` keeps that from becoming a silent inbound outage. N/healthzz([photon] sidecar health check failed: %sr stalenesszombieSuspectedTzV[photon] sidecar reports suspected zombie stream (silentForMs=%s, lastProbeOutcome=%s) silentForMslastProbeOutcomeokFstateunknown degradedForMs lastIssuezunknown stream issuez'Photon upstream stream degraded (state=z, degradedForMs=r [photon] %sUPSTREAM_STREAM_DEGRADEDr)r\rrr^ _sidecar_callrrIrJrrWrXrrKr0rrr) rrrrrrdegraded_for_ms last_issuemessages r"rz%PhotonAdapter._monitor_sidecar_health-s{#2 - =>> > > > > > > >(  !// B????????)       GMMM ,6dD+A+AKTXXh'''tFfd++   ;//I9d++ MM"344<<=MM-00MM"455 zz$u,, 7++8y99E$jj99OVZZ 44N8NOOJ    2A      LL 0 0 0  ! !* "     - - / / / Ee2 2 sAB*B  BrcK| tj|}n0#tj$rtdYdSwxYw|d}|r||rdS ||d{VdS#t$rt dYdSwxYw)Nz'[photon] skipping non-JSON inbound line messageIdz [photon] inbound dispatch failed) _note_upstream_activityrDrTJSONDecodeErrorrJrr _is_duplicate_dispatch_inboundrI exception)rreventmsg_ids r"rzPhotonAdapter._on_inbound_linehs  $$&&& Jt$$EE#    LLB C C C FF ;''  d((00  F A((// / / / / / / / / / A A A   ? @ @ @ @ @ @ As!-)AA B))$CCrcXtj}|j}||}|||z tkrdS||vr||=|||<t |t krDt |dt |t z D]}||=dS)NTF)rrdr_DEDUP_WINDOW_SECONDSlen_DEDUP_MAX_SIZErkeys)rrnowseentolds r"rzPhotonAdapter._is_duplicate|sikk" HHV   =S1W'<<<4 T>>V V t99 & &DIIKK(()F3t99+F)FG  IIur,r message_idcKtjtd{V|j|drt d||dSdS)Nz_[photon] wait for attachment was too long, can't retrieve attachment data (message %s, chat %s))rr_FFFC_WAIT_SECONDSripoprJrK)rrrs r"_fffc_timeout_handlerz#PhotonAdapter._fffc_timeout_handlersxm./////////   ! !(D 1 1  NN()3X       r,rrc K|dpi}|dpi}|dpi}|dpd}|stddS|dd krd nd }|dp|d p|}|d pd} |r(tj|d dntjtj} n/#t$r"tjtj} YnwxYwg} g} d9d} |d} | dkr|d}|ddkp |o||j v}|st ddS|dpd}| |||||pd}| td|tj||d||dpdd|| d{VdS| d!kr|d!pdd"kr|}|j|d}|r<|d#r4|d#s|d#t-j|||dpd}t3j|f|j|<t d$dS| d%vrs|j|d}|rV|d#rN|d#s4|d#t d&|||r*td't;|dS|||d| d(kr|d)d*urt d+dS|d,pd}|st d-dS| |||||pd}| t|tj||d|| .d{VdS| d!kr%|d!pd}tj}n| d%vr| |\}}} } n| d/krt?|}tj}n| d krg}tj}|d0pgD]=}tA|tBs|dpi}tA|tBsF|d}|d!kr/|d!pd}|r|"||d/kr#|"t?||d%vre| |\}}}} |tjkr|}| #|| #| |s|"|"|r|"d1|d2?| r|tjkr tj$}d3%d4|D}|s| rd5nd6}nd1| d2}tj}|d krM|j&rF|'|st d7dS|(|}|)|tU|p|| |||||pd}t||||d|| | | 8}!| |!d{VdS):uqNormalize a sidecar inbound event and dispatch it to the gateway. Event shape (from ``sidecar/index.mjs``):: { "messageId": "...", "platform": "iMessage", "space": {"id": "...", "type": "dm"|"group", "phone": "+E164"}, "sender": {"id": "+E164"}, "content": {"type": "text", "text": "..."} | {"type": "attachment"|"voice", "id", "name", "mimeType", "size", "duration"?, "data"?, "encoding"?} | {"type": "reaction", "emoji": "❤️", "targetMessageId": "..." | null, "targetDirection": "inbound"|"outbound" | null, "targetText": "..." | null}, "timestamp": "2026-05-14T19:06:32.000Z" Attachment and voice content carry the bytes inline as base64 ``data`` (with ``encoding == "base64"``) when the sidecar could read them within its size cap; otherwise only metadata is present and we surface a marker. } spacesenderr r#rz![photon] inbound missing space.idNrrdmphone timestampZz+00:00)tzr rr$-tuple[str, MessageType, List[str], List[str]]c(|ddk}|dp|rdnd}|dpd}|s/|ds|dkrd }|r tjnt |}t |||| }|r|rd nd ||g|p|rd ndgfS|rdnd}|d}t|ttfrd|dnd}d|d|d|pd|d|ggfS)Nrvoicerr*mimeTyper.caf audio/x-cafT force_audioz(voice) (attachment) audio/mp4zapplication/octet-streamr"durationz , duration: sz[Photon z received: rz unknown MIMEz)]) rrr$rVOICE_attachment_message_type_cache_inbound_attachmentrWr.r) r is_voicermimemtypecachedlabelr duration_texts r"_normalize_binary_payloadzBPhotonAdapter._dispatch_inbound.._normalize_binary_payloads{{6**g5H;;v&&Ph+O77KD;;z**0bD !6!6v!>!> $-BWBW)1UK%%7OPT7U7UE.tF !)=II~HVXUkk;UW  (9GG\E{{:..Hhe 55*x****  >5>>T>>*N>,9>>>  r,reactiontargetMessageIdtargetDirectionoutboundz6[photon] ignoring reaction on a message we didn't sendemoji)r chat_name chat_typeuser_id user_namezreaction:added:r targetTextT) r message_typesourcerreply_to_message_id reply_to_textreply_to_is_own_message raw_messagerruru?[photon] U+FFFC placeholder received — waiting for attachment>rr"u9[photon] attachment arrived — cancelling U+FFFC timeoutz5[photon] suppressing rich-link preview attachment: %s poll_optionselectedFz"[photon] ignoring poll deselectionrz,[photon] ignoring poll vote with empty title)rrrrrrrrz"[Photon content type not handled: ]rc3K|]}||V dSrr^)rvparts r"rxz2PhotonAdapter._dispatch_inbound..s'AAdDATAAAAAAr,rz[Photon empty group received]zR[photon] ignoring group message (require_mention=true, no mention pattern matched))rrrrrr media_urls media_types)r rr$r)+rrJrKr fromisoformatrFrrutcrVrer build_sourcehandle_messagerrTEXTrrirrrrrrrr_is_recent_richlink_previewrr,_record_last_inboundrrWrXrextendDOCUMENTrrArzr_record_recent_richlinkr)"rrrrr space_idr  sender_idts_strrrrrr target_idis_oursr rrprevrchoicerr text_partsrr item_type item_textr item_mtype item_urls item_types message_events" r"rzPhotonAdapter._dispatch_inbounds 4 '""(b8$$*))I&&,"99T??(b  NN> ? ? ? F %yy00G;;GG JJt$$F '(:(:Fh ;''-2 63&v~~c8'D'DEEE\X\222 I  6 6 6  555III 6 !# !# # # # # J F## J    $566Ikk"344 BAi4+AA   LKK((.BE&& "#!#+t 'F%%2522!,!1!$yy55(1")++l";";"Ct,0 %'             F F?? F 3 3 9r@@BBhNNH%))(D99D !Q !Q  !Q   &**8UYY{5K5K5QrRRD-1N,<, >  KKG'00    F !!(EIIk,B,BCCC M ! ! {{:&&%// ABBBkk'**0b7799F  KLLL&& "#!#+t 'F%%!,!1!$yy55 %'           F F??;;v&&,"D$EE - - -3L3LW3U3U 0D%[[ j +G44D$EE g  $&J$E G,,2 Y Y!$--#xx 228b !,55(,,V44 && , 0 0 8 8 >BI 5")))444 **%%&>|&L&LMMM 777@Y@Y$AA=FJ : 000 *%%i000&&z222$2"))&111Y%%&W9&W&W&WXXX -e{'777#,99AAjAAAAAGGIID Y)3X~~9X@@@@D$E   D$8 99$??  I++D11D $$X/I'/R/R/ZVZ[[[""'4 #  %yy--!#    !!-00000000000sA D(()EEr-r. List[int]c  tjddd|dgdddddd }n#ttjf$rgcYSwxYwd |jDS) zBPIDs listening on a local TCP port (empty if none/undeterminable).lsofz-tiztcp:z -sTCP:LISTENTr:rFrwFrrr<rrrcxg|]7}|(t|8Sr^)risdigitr.)rvtoks r" z5PhotonAdapter._find_listener_pids..s7PPPS#))++:M:M:O:OPCPPPr,)rrrBrrsplit)r-outs r"_find_listener_pidsz!PhotonAdapter._find_listener_pidss . t ~>#$\_glCC23   III PPCJ$4$4$6$6PPPPs"%AAr1c  tjddt|ddgdddddd }n#ttjf$rYd SwxYwd |jvS) z;True if ``pid``'s command line is a Photon sidecar process.psz-pz-ozcommand=Tr:rFrwFr8zphoton/sidecar/index.mjs)rrr0rBrr)r1r>s r"_pid_is_sidecarzPhotonAdapter._pid_is_sidecars} .tSXXtZ8#$\_glCC23   55 *SZ77s-0A  A cT tj|ddS#t$rYdSwxYw)NrTF)rrfrB)r1s r" _pid_alivezPhotonAdapter._pid_alives=  GCOOO4   55 s  ''cKtjdkrdS tjdd4d{V}|djdjdd ji d{Vdddd{Vn#1d{VswxYwYn#tj$rYdSwxYwfd }tj |d{V\}}|std jd |pdd|D]S}t d|j tj|t jD#t$$rYPwxYwt'jdz}t'j|krgt)fd|DrLtjdd{Vt'j|krt)fd|DL|D]H}|r1 tj|t j8#t$$rYDwxYwItjdd{V|rtd jd|ddS)u:Kill an orphaned sidecar squatting our port before spawning ours. A hard gateway exit (crash, SIGKILL, supervisor restart) used to leave the detached sidecar running with a token the new gateway doesn't know, so it can't be told to ``/shutdown`` — and every replacement spawn died on EADDRINUSE, failing each reconnect attempt. The stdin-EOF watch prevents new orphans; this reclaims the port from orphans that predate it (or survived it). Listeners are verified by command line before being signalled. win32N@Frrrrrrcvj}fd|Dfd|DfS)Nc>g|]}||Sr^)rB)rvr1rs r"r<zGPhotonAdapter._reap_stale_sidecar.._inspect..s,FFFCD,@,@,E,EFCFFFr,cg|]}|v| Sr^r^)rvr1mines r"r<zGPhotonAdapter._reap_stale_sidecar.._inspect..sBBB##T//#///r,)r?rK)foundrLrs @r"_inspectz3PhotonAdapter._reap_stale_sidecar.._inspectsS,,T-?@@EFFFF5FFFDBBBBBBBB Br,zport z% is in use by another process (pids: ruR, not a Photon sidecar) — free it or set PHOTON_SIDECAR_PORT to a different portz5[photon] reaping orphaned sidecar (pid %d) on port %d@c3BK|]}|VdSr)rD)rvprs r"rxz4PhotonAdapter._reap_stale_sidecar..s/,O,OAT__Q-?-?,O,O,O,O,O,Or,g?皙?z. is also held by non-sidecar processes (pids: u<) — free it or set PHOTON_SIDECAR_PORT to a different port)sysplatformrrpostrMrKrP RequestErrorr to_threadrrJrKrrfsignalSIGTERMrBrryrrDSIGKILL)rrrNstaleforeignr1deadlines` r"_reap_stale_sidecarz!PhotonAdapter._reap_stale_sidecars <7 " " F (FFF       &kkOd0OO43EOOO5t7JK"                            !    FF  C C C C C '0::::::::w J*JJ!.YJJJ    C NNGT'    V^,,,,    9;;$ikkH$$,O,O,O,O,O,O,O)O)O$-$$ $ $ $ $ $ $ $ikkH$$,O,O,O,O,O,O,O)O)O$  Cs## GC0000D  mC          ;*;;$+;;;   sXB 6A;)B ; BB B B B B  D** D76D7(H HHc  Ktstdtt jt d{Vts.tdtdtdtr9t dt jt d{V| d{Vtj }|j|d<|j|d<t!|j|d<|j|d <|j|d <d |d <d dlm} t jt,j|jt!tdz t!tgdddddd| d{V}|jd kr/t|jp|jpd|jr2td|jn2#t<$r%}t d|Yd}~nd}~wwxYwt-j|jt!tdz gt,j t,j t,j!|tDj#dk||_$t j%}|&|'|j$|_(tSj)dz}d}tUj+dd4d{V}tSj)|kr|j$,+t[td|j$jd  |.d!|jd"|jd#d$|ji%d{V} | j/d&kr9ta|j|j|j$j1 dddd{VdSn#tTj2$r } | }Yd} ~ nd} ~ wwxYwt j3d'd{VtSj)|k dddd{Vn#1d{VswxYwYt[td(|))Nz7[photon] sidecar deps not installed; installing into %sz0Photon sidecar deps could not be installed into z& (see log for the npm error). Run: cd z' && npm ci (or `hermes photon setup`)zX[photon] sidecar deps are stale (lockfile newer than install); reinstalling before startrrr5PHOTON_SIDECAR_BINDr6rCPHOTON_SIDECAR_WATCH_STDINrrz$patch-spectrum-mixed-attachments.mjsTr:rF F)rrr<rrrrrrz<[photon] failed to apply Spectrum mixed attachment patch: %sz index.mjsrF)stdinrrenvstart_new_sessionrrkrGrz Photon sidecar exited with code z before becoming readyrrrrrHrrRz0Photon sidecar did not become ready within 15s: )4rrJrrqrrWrrrrKr^renvironcopyrHrIr0rKrMrPrrrrrRrrrrrrIPopenPIPESTDOUTrSrTrXrr_supervise_sidecarrYrrrpollr_rUr~rQr1rVr) rrdrpatchrloopr]last_errrrrPs r"rzPhotonAdapter._start_sidecarsV%''  KKI   #$;<< < < < < < < <)++ "W#~~WW+~~WWW   = NN,   #$;<< < < < < < < <&&(((((((((joo#'#3  '+'; #$%();%<%< !"%)%7 !"&*&9 "#-0 () EDDDDD "+N )OOPP '' $GI1022E1$$"EL$FEL$FB#M#M#O#OPPP|!!## B ]EL,>,>,@,@AAA    NNN          (- ^S+!=>> ?/?$"|w6-,..    %''(,(8(8  # #D$6 7 7) ) % 9;;%(,$SEBBB ) ) ) ) ) ) )f)++((%**,,8*,,,&Q-8QQQ!!'S$"4SSt7ISSS!94;N O"-""D'3... . / .2 - ) ) ) ) ) ) ) ) ) ) ) ) ) )/)!!! HHHHHH!mC(((((((((1)++((( ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) ) )4     Ix I I   sWC7I JI??J7AR2A%QR2Q*Q% R2%Q**5R22 R<?R<procsubprocess.PopencVK|jdS|j}tj} |d|jd{V}|snBt d|ddfn2#t$r%}t d|Yd}~nd}~wwxYw|j ra| }t d||dd |d d |dSdS) z1Pump the sidecar's stdout/stderr into our logger.NTz[photon-sidecar] %sr:rFz&[photon-sidecar] supervisor exited: %suG[photon] sidecar exited unexpectedly (code %s) — triggering reconnectSIDECAR_CRASHEDz)Photon sidecar exited unexpectedly (code )r)rrrrun_in_executorreadlinerJrdecoderstriprIrKr\rlrrr)rrprrnrrP exit_codes r"rkz PhotonAdapter._supervise_sidecarst ;  F%'' H ]!11$HHHHHHHH 14;;w 3R3R3Y3Y3[3[\\\  ] H H H NNCQ G G G G G G G G H  0 I LLY     ! !!HIHHH "     - - / / / / / 0 0sA'B B>B99B>cK|j}|tdS |j+ |jn#t$rYnwxYw|jM |jd|jd|jdd|j idd{Vn#t$rYnwxYw | dn#tj $rtjd krc tjtj|jt&jn?#t*t,f$r|YnwxYw| | dn)#tj $r|YnwxYwYnwxYwd|_t|j>t5j}|j|ur|jd|_dSdS#d|_t|j!>G*GGT-?GGG "143FG+%DD %     " " " ##  @!DDDvvvvv LLLa P P P!>>>>>  " *c11ww~Es*A B<&*B7B77B<reasoncK|j}|tjx}|_|rtddS|4d{Vtd| |d{Vn*#t$rt dYnwxYw | d{Vn<#t$r/t dYdddd{VdSwxYw| tddddd{VdS#1d{VswxYwYdS)aTear down and restart the sidecar to recover a dead gRPC stream. A fresh ``Spectrum()`` re-subscribes the inbound stream and re-registers presence with Photon cloud. The inbound loop's existing reconnect logic re-opens the loopback NDJSON stream automatically once the new sidecar's ``/inbound`` is up. Guarded by a lock so overlapping triggers (watchdog + a manual call) can't double-spawn. Nz.[photon] respawn already in progress; skippingu5[photon] presence watchdog: %s — respawning sidecarz.[photon] error stopping sidecar during respawnz7[photon] failed to respawn sidecar; watchdog will retryzB[photon] presence watchdog: sidecar respawned, gRPC stream renewed) rcrrlockedrJrrKrrIrrr)rrlocks r"_respawn_sidecarzPhotonAdapter._respawn_sidecar3s! <(/  6D4% ;;==  KKH I I I F ^ ^ ^ ^ ^ ^ ^ ^ NNG    S((********** S S S  !QRRRRR S ))++++++++++     M ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^   ( ( * * * KK\ ] ] ]% ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^sZE;BE$B=:E<B==ECE$DED1E E#&E#c0Ktj|jd{V|jrl t j|jz }||jkr#tj|j|z d{VR|d{V}|dkr|n|dkrj|xj dz c_ t d|j |j |j |j kr#| |j dd{Vntdn9#tj$rt $rtdYnwxYwtj|jd{V|jjdSdS) u!Periodically confirm the sidecar (and its stream) is responsive. The sidecar owns primary zombie-stream detection (silence tracking + upstream probe -> degraded /healthz -> exit 75). This loop is the adapter's conservative second layer: it probes on a long interval, skips the probe when natural inbound traffic already proved liveness, and only counts a *hung* probe (the sidecar HTTP call itself timing out) toward a respawn. Inconclusive probes — the sidecar answered but couldn't prove upstream liveness — reset nothing and trigger nothing: the network may just be down, and restarting can't fix that. After ``_probe_max_failures`` consecutive hung probes we respawn the sidecar to force a fresh stream. Nrrrz$[photon] presence probe hung (%d/%d)z consecutive hung probesz6[photon] presence probe inconclusive; taking no actionz+[photon] presence watchdog iteration failed)rrrSr`rrrbrrrarJrKrUrrrrIr)ridleverdicts r"rz PhotonAdapter._presence_watchdogVs( mD0111111111$" 6 P~''$*FF$...!-(,d.F+t/GGG"33#3MMMLLP)    P P P  !NOOOOO P- 455 5 5 5 5 5 5 5E$" 6" 6" 6" 6" 6sAD44B?D443E*)E*cKd|_|jQ|j |jd{Vn #tj$rYnt $rYnwxYwd|_dSdSr)r`r_rrrrIrs r"rzPhotonAdapter._stop_watchdogs!&   *   & & ( ( ( ))))))))))       "&D    + *s 9A AANrr reply_tormetadatarRrcdK||||d{VSr) _sidecar_sendformat_message)rrr rrs r"sendzPhotonAdapter.sends>''1D1DW1M1MNNNNNNNNNr,questionchoicesOptional[list] clarify_id session_keycK|s,t||||||d{VSddlm}|||||t |d{V}|jsLtd|j t||||||d{VS|S)Nr)mark_awaiting_textz<[photon] poll clarify failed (%s); falling back to text list) r send_clarifytools.clarify_gatewayr_sidecar_send_pollrsuccessrJrKr) rrrrrrrrrrs r"rzPhotonAdapter.send_clarifys( --7J X  =<<<<<:&&&..w$w--PPPPPPPP~  NNN    --7J X  r, image_urlcaptioncK ddlm}||d{V}n:#t$r-t||||d{VcYSwxYw||||d{VS)Nr)cache_image_from_urlr)gateway.platforms.baserrIr send_image_sidecar_send_attachment) rrrrrrr local_pathrs r"rzPhotonAdapter.send_images S C C C C C C33I>>>>>>>>JJ S S S++GYRRRRRRRR R R R S22 Z3         s4AA image_pathcBK||||d{VSNrr)rrrrrrkwargss r"send_image_filezPhotonAdapter.send_image_fileJ22 Z3         r, audio_pathcDK||||dd{VS)Nr)rkindr)rrrrrrrs r" send_voicezPhotonAdapter.send_voicesL22 Zw3         r, video_pathcBK||||d{VSrr)rrrrrrrs r" send_videozPhotonAdapter.send_videorr, file_path file_namecDK|||||d{VS)N)rrr)rrrrrrrrs r" send_documentzPhotonAdapter.send_documentsL22 YY3         r, animation_urlcDK||||||d{VSr)r)rrrrrrs r"send_animationzPhotonAdapter.send_animation sG__ ]GXx         r,roptions list[str]c^K|||t|pgd{VS)zSend a native iMessage poll through Photon Spectrum. Thin public wrapper over :meth:`_sidecar_send_poll`, the single implementation of the sidecar's ``/send-poll`` primitive (also used by the poll-backed clarify path). N)rr)rrrrrs r" send_pollzPhotonAdapter.send_poll-s>,,WeT'-R=P=PQQQQQQQQQr,effectcK|r|stddS |d|||dd{V}n5#t$r(}tdt |cYd}~Sd}~wwxYwtd|d S) z9Send text with a native iMessage bubble or screen effect.Fztext and effect are requiredrrz /send-effect)spaceIdrrNTrrr)rrrrIr0r)rrrrrrrPs r" send_effectzPhotonAdapter.send_effect<szz|| S6<<>> Se3QRRR R ;++#TZZ\\V\\^^TTDD ; ; ;e3q66::: : : : : : : ;$488K3H3HIIIIsAB B4 B/)B4/B4c<Ktj}||j|dz tkrdS||j|< |d|ddd{VdS#t $r&}t d|Yd}~dSd}~wwxYw)Nr@/typingstartrrz[photon] send_typing failed: %s)rrhr_TYPING_COOLDOWN_SECONDSrrIrJr)rrrrrPs r" send_typingzPhotonAdapter.send_typingOsikk '++GS99 9 > > > > > > > > ?s A++ B5BBcK|j|d |d|ddd{VdS#t$r&}td|Yd}~dSd}~wwxYw)Nrstoprz[photon] stop_typing failed: %s)rhrrrIrJr)rrrPs r" stop_typingzPhotonAdapter.stop_typing[s ""7D111 ?$$w@@          ? ? ? LL:A > > > > > > > > > ?sA A0 A++A0irc|sdS|j}||vr||=tj||<t||jkrDt |dt||jz D]}||=dSdSr)rerr _SENT_IDS_MAXrr)rrsentrs r"_record_sent_messagez"PhotonAdapter._record_sent_messagems  F%   Z 9;;Z t99t) ) )DIIKK(()I3t99t7I+I)IJ  II * )  r,z^any;-;(\+\d{6,})$ch|j|}|r|dn|S)Nr)_DM_CHAT_GUID_REr|r)clsrr|s r"_normalize_chat_keyz!PhotonAdapter._normalize_chat_keys1$**733!&3u{{1~~~G3r,c|r|sdS||}|j}||vr||=|||<t||jkrDt |dt||jz D]}||=dSdSr)rrfr_LAST_INBOUND_CHATS_MAXrr)rrrkeylastrs r"r#z"PhotonAdapter._record_last_inbounds j  F&&w//) $;;S S t99t3 3 3DIIKK((:#d))d:::  II 4 3  r,cZ|rt|sdS||}|j}||vr||=tj||<t ||jkrDt |dt ||jz D]}||=dSdSr)r rrgrrrrr)rrrrrecentrs r"r&z%PhotonAdapter._record_recent_richlinks 1$77  F&&w/// &==s ikks v;;5 5 5FKKMM**<#f++ <<<  3KK 6 5  r,c |rt|sdS||}|j|}|dSt j|z t kr|j|ddSdS)NFT)r.rrgrr"_RICHLINK_PREVIEW_SUPPRESS_SECONDSr)rrr rrs r"r"z)PhotonAdapter._is_recent_richlink_previews :7CC 5&&w//-11#66 <5 9;;  B B B  * . .sD 9 9 95tr,cxtjdddvS)NPHOTON_REACTIONSr>rCrDrErrrs r"_reactions_enabledz PhotonAdapter._reactions_enableds:y+W55;;==CCEEJ   r,r cK |d|||dd{VdS#t$r&}td|Yd}~dSd}~wwxYw)zCTapback ``emoji`` onto a message. Soft-fails (False), never raises.z/react)rrr NTz [photon] add_reaction failed: %sFrrIrJr)rrrr rPs r" _add_reactionzPhotonAdapter._add_reactions $$#*uMM       4    LL;Q ? ? ?55555 s & AAAcK |d||dd{VdS#t$r&}td|Yd}~dSd}~wwxYw)a+Retract our tapback from a message. Soft-fails (False), never raises. The sidecar tracks one reaction handle per target message; after a sidecar restart the handle is gone and removal is best-effort (the stale tapback self-heals when the next reaction replaces it). z/unreact)rrNTz#[photon] remove_reaction failed: %sFr)rrrrPs r"_remove_reactionzPhotonAdapter._remove_reactions $$jII       4    LL> B B B55555 s% AAAcK|p,|j||}|sdddS||||d{V}|sdddSd|dS)uATapback ``emoji`` onto a message in ``chat_id``. Without ``message_id``, targets the chat's most recent inbound message (typically the one the agent is responding to). iMessage maps ❤️👍👎😂‼️❓ to native tapbacks; anything else uses Apple's custom-emoji reaction. Fukno message to react to — pass message_id (no inbound message seen in this chat since the gateway started)rNz'reaction failed (see gateway debug log)Tr)rfrrr)rrr rtargetrs r" add_reactionzPhotonAdapter.add_reactions t9==  $ $W - -    O  %%gvu== = = = = = =  B  v666r,cK|p,|j||}|sdddS|||d{V}|sdddSd|dS)z1Retract our tapback from a message (best-effort).Fu)no message to unreact — pass message_idrNz&unreact failed (see gateway debug log)Tr)rfrrr)rrrrrs r"remove_reactionzPhotonAdapter.remove_reactions t9==  $ $W - -    D ((&99 9 9 9 9 9 9  A  v666r,rcK|sdSt|jdd}t|dd}|r!|r!|||dd{VdSdSdS)u=Tapback 👀 on the triggering message while the agent works.Nrru👀)rrrr)rrrrs r"on_processing_startz!PhotonAdapter.on_processing_start s&&((  F%, 488UL$77  Hz H$$Wj,GG G G G G G G G G G H H H Hr,u👍u👎cK|d|dS)zReturn whatever we know about a Spectrum space id. Photon's ``space.id`` is opaque; the inbound event also carries the DM/group type, but here we only have the id, so infer conservatively. r)rrr#r^)rrs r" get_chat_infozPhotonAdapter.get_chat_info s  W===r,c@tr|St|Sr)rr)rr s r"rzPhotonAdapter.format_message" s%    Ng&&&r,rctj|rdS|sdS|dvsdvrdStfdtDS)NTFzretryable=falseauth_or_configc3 K|]}|vV dSrr^)rvpatlowereds r"rxz4PhotonAdapter._is_retryable_error..3 s'HHc3'>HHHHHHr,)r_is_retryable_errorrry_PHOTON_RETRYABLE_PATTERNS)rrs @r"rz!PhotonAdapter._is_retryable_error* st  25 9 9 4 5++--  ' '+;w+F+F5HHHH-GHHHHHHr,rc|j}t|to-|dduo|ddvS)uTrue when the sidecar classified the failure as permanent. ``auth_or_config`` and ``target_not_allowed`` cannot be fixed by retrying or by the plain-text fallback resend — attempting either just double-sends a doomed request (issue #50971). r}Fr|)rr) raw_responserWrXr)rrZs r"_is_permanent_sidecar_failurez+PhotonAdapter._is_permanent_sidecar_failure5 sS! sD ! ! S $$- S &&*RR r,rrG max_retries base_delayrcK||}|||||d{V}|jr|S||r|S|jpd} |jp|| } | s|| r|S| rtd|dzD]} |d| dz zz} t d| || | tj | d{V|||||d{V}|jr|cS|jpd} ||r|cS|js|| sntd|| t d| | ||d|jd d d{V} | js td | j| S) uRetry sends without the generic Markdown banner. Photon replies are markdown (rendered by iMessage) or stripped plain text under ``PHOTON_MARKDOWN=false`` — either way the gateway's generic banner never applies. )rr rrNrrrz;[photon] Send failed (attempt %d/%d, retrying in %.1fs): %sz8[photon] Failed to deliver response after %d retries: %sz6[photon] Send failed: %s - retrying plain-text messageFrmarkdownz)[photon] Plain-text retry also failed: %s)rrrrrr}rrrangerJrKrrrMAX_MESSAGE_LENGTH)rrr rrrrrr error_str is_networkattemptdelayfallback_results r"_send_with_retryzPhotonAdapter._send_with_retryD s""7++yy !         > M  - -f 5 5  ML&B %L)A)A))L)L  d44Y?? M   K!O44  "aGaK&89Q[%mE*********#yy# %% )   >"!MMM"L.B 55f==""MMM(D,D,DY,O,OE N  D    !% 2 2  *4** + !3! !        & ] LLDoF[ \ \ \r,r'rcJK |d||dd{V}n5#t$r(}tdt|cYd}~Sd}~wwxYw||dtd|dS)N/send-richlinkrrFrrTr)rrIrr0rr)rr'rrrPs r"_sidecar_send_richlinkz$PhotonAdapter._sidecar_send_richlink s ;++ hs"C"CDD ; ; ;e3q66::: : : : : : : ; !!$((;"7"7888$488K3H3HIIIIs$ AA AATrrrcbK|rt|nd}|rG|||d{V}|jr|Std|jd}t ||jkr=tdt ||j|d|j}||d}|rtrd|d< | d|d{V}ny#t$r<} tdt| | j | jd| j cYd} ~ Sd} ~ wt$r(} tdt|  cYd} ~ Sd} ~ wwxYw||d td |d  S)Nz>[photon] rich-link send failed, falling back to plain text: %sFz0[photon] truncating outbound from %d to %d charsrrrformat/sendr{rrrr}rrTr)r r rrJrKrrrrrryrr0r|r}rIrr) rr'rrrrich_url rich_resultbodyrrPs r"rzPhotonAdapter._sidecar_send s'19B&t,,,d   $ ; ;Hh O OOOOOOOK" #"" NNP!   H t99t. . . NNBD 42   1$112D+3TBB  ()++ ('DN ;++GT::::::::DD!   !ff#$=!"+       ; ; ;e3q66::: : : : : : : ; !!$((;"7"7888$488K3H3HIIIIs0C,, E"61D-'E"- E":EE"E"rc@Kd|pgD}|r|stddSt|dkrtddS||d|j|d} |d |d{V}n5#t $r(}tdt |cYd}~Sd}~wwxYw||d td |d  S) zPOST a poll to the sidecar's ``/send-poll`` endpoint. Renders a native iMessage poll. ``options`` are choice strings; the sidecar's ``poll()`` builder degrades to a numbered text list on platforms without native polls. cg|]D}t|#t|ESr^)r0r)rvos r"r<z4PhotonAdapter._sidecar_send_poll.. s9JJJ13q66<<>>JA JJJr,Fzpoll title is requiredrrzpoll needs at least two optionsN)rrrz /send-pollrTr) rrrrrrIr0rr)rr'rroptsrrrPs r"rz PhotonAdapter._sidecar_send_poll sOKJBJJJ MEKKMM Me3KLLL L t99q==e3TUUU U[[]]#EEEEEEEEDD!   !ff#$=!"+       ; ; ;e3q66::: : : : : : : ; !!$((;"7"7888$488K3H3HIIIIs0B D(1CD D,D DDrcK|jtdd|jd|j|}d|ji}t jdd4d{V}||||d{V}dddd{Vn#1d{VswxYwY|jd krt||j|j | pi}| d st||j|j ||S) NzPhoton adapter not connectedrrrrvFrrDrrr) r]rrMrKrPrrrUr~rrrDr)rrLrrrrrrs r"rzPhotonAdapter._sidecar_call% s   $=>> > H*GGT-?GGG+T-@A$TUCCC F F F F F F FvStWEEEEEEEED F F F F F F F F F F F F F F F F F F F F F F F F F F F  s " ".tT5EtyQQ Qyy{{ bxx~~ X.tT5EtyRVWW W sB B B )r1r)rZrr$rm)rr0r$r`)rr0r$r0)rr`r$r`r$r2)rr0r$r2)rr0r$r`)rr0rr0r$r2)rrr$r2)r-r.r$r5)r1r.r$r`)rprqr$r2)r$r0)rr0r$r2)NN) rr0r r0rrrrRr$rr)rr0rr0rrrr0rr0rrRr$r)NNN) rr0rr0rrrrrrRr$r) rr0rr0rrrrrrRr$r) rr0rr0rrrrrrRr$r) rr0rr0rrrrrrRr$r)NNNN)rr0rr0rrrrrrrrRr$r) rr0rr0rrrrrrRr$r) rr0rr0rrrrRr$r) rr0rr0rr0rrRr$r)rr0r$r2)rrr$r2)rr0r$r0)rrrrr$r2)rr0rr0r$r2)rr0r rr$r`r$r`)rr0rr0r r0r$r`)rr0rr0r$r`)rr0r r0rrr$r)rr0rrr$r)rrr$r2)rr0r$r)r r0r$r0)rrr$r`)rrr$r`)NNrrG)rr0r r0rrrrrr.rrr$r)r'r0rr0r$r) r'r0rr0rr`rr`r$r)r'r0rr0rrr$r)r'r0rLr0rrrrrrrr0r$r)rLr0rrr$r)Lrrrr_MAX_MESSAGE_LENGTHrSUPPORTS_MESSAGE_EDITINGr staticmethodrjrzrrrrrrrrrrrr?rBrDr^rrkrrrrrrrrrrrrrrrrrrrrrrcompiler classmethodrr#r&r"rrrrrr _OK_EMOJI _FAIL_EMOJIrrrrr r rrrrrrs@r"r0r0s - %C C C C C C N    \  OOOO    "5:@@@@@@D'"'"'"'"R!?!?!?!?FPPPP&1&1&1&1P9999vAAAA("Z1Z1Z1Z1| Q Q Q\ Q 8 8 8\ 8\BBBBHH H H H T00006G5G5G5G5V!!!!!F!F!F!FF!^!^!^!^F36363636j ' ' ' '$#'-1 OOOOO6.2!!!!!!!^"&"&-1        ."&"&-1      ""&"&-1      ""&"&-1      ""&#'"&-1      $"&"&-1      $.2 R R R R R(.2 JJJJJ& ? ? ? ? ?????M!     "rz"788444[4                4%) 77777>9=77777(HHHHIK>>>>''''III\I    \  $#'RRRRRhJJJJ ,J,J,J,J,J,J\JJJJ>##'!% 9J9J9J9J9J9Jvr,r0rrcN|pd}|dr tjS|dr tjS|dr tjS|dr tjStjS)Nrimage/zvideo/audio/z application/)r startswithrPHOTOVIDEOAUDIOr%)rs r"rr= s JB    D x  !   x  !   x  !   ~&&$##  r,.jpgz.pngz.gifz.webp)z image/jpegz image/pngz image/gifz image/webpz image/heicz image/heifz image/tiff.mp3z.oggz.wavr.m4a)z audio/mp3z audio/mpegz audio/oggz audio/wavrrz audio/aacrrrc|d}|sdS tj|}n:#ttf$r&}t d|Yd}~dSd}~wwxYwddlm}m }m } |pd }|rt|j nd} |drF| pt|d} | || S#t$r|||cYSwxYw|s|d r-| pt ||rd nd } ||| S|||S#t"$r'}t d ||Yd}~dSd}~wwxYw) aDecode a base64-inlined inbound attachment and cache it locally. The sidecar inlines the attachment bytes as ``content["data"]`` (base64). We decode them and route to the shared media cache by MIME type, returning the cached absolute path so the caller can populate ``media_urls`` (which the gateway then hands to the model). Returns ``None`` when there are no bytes (over the sidecar's inline cap or a failed read) or when caching fails, so the caller can fall back to a text marker. rNz6[photon] failed to decode inbound attachment bytes: %sr)cache_audio_from_bytescache_document_from_bytescache_image_from_bytesrr/r5r0r7r6z2[photon] failed to cache inbound attachment %s: %s)rbase64 b64decoderVrdrJrKrr9r:r;rrr8r1_IMAGE_EXT_BY_MIME_AUDIO_EXT_BY_MIMErI) r rrrdata_b64rZrr9r:r;r8exts r"rr` s {{6""H tx((  "OQTUUUttttt JB    D"& .T$ZZ  BF ??8 $ $ <@.224@@C <--c3777 < < <10d;;;;; <  4$//(33 4.22 7ffC*)#s33 3((d333 KTSVWWWtttttsR0A'A""A'#2E C""C;8E:C;;AE E E?E::E?rc |pi}n#t$ri}YnwxYwt|tsi}t |dpd}t |d}|dkr t}d}nJ|jdkrd|jd|j d d}n$t |d pd }|||d S) a9Build the structured error dict for a failed standalone sidecar call. Mirrors ``_sidecar_error_from_response``: parse the sidecar body independently, carry the error class + retryability, and swap in the canonical user-facing message for ``target_not_allowed`` (never the raw upstream text). r|rzr}rFrzsidecar returned z: Nrzsidecar reported failure)rr|r}) rDrIrWrXr0rr`rr~r)rrr|r}rs r"_standalone_errorrC syy{{ b  dD ! !dhh}--@AAKTXXk**++I***+ S ID$4II $3$IIDHHW%%C)CDD;Y O OOs  (() thread_id media_filesforce_documentpconfigrrrDrErrFc>KtsddiSt|jpidpt jdt }td}|st}d} |r|drtt|dr9t|d}t|d |}nd |dd } |sdd td | ziSdtd|} d|i} d} tjdd4d{V} |rjt|}|ru| | d||d| d{V}|jdkrD|pi}|dr|d} nd}nd}|s||dt&d}t)rt|sd|d<| | d|| d{V}|jdkr!t+|cdddd{VS|pi}|ds!t+|cdddd{VS|d} ddl}|pgD]!\}}t/jt|}|st2dD||\}}|||rd nd!d"}|r||d#<| | d$|| d{V}|jdkr#t+|ccdddd{VS|pi}|ds#t+|ccdddd{VS|dp| } # dddd{Vn#1d{VswxYwYd%| d&S#t8$r}dd'|icYd}~Sd}~wwxYw)(Nrrr4r5r6rr/r1r-z/ A stale sidecar runtime record was found (pid u4 is not running) — the gateway appears to be down.zPhoton standalone send requires a running sidecar. Start the Hermes gateway (which spawns the sidecar and records its address under /runtime/z=), or set PHOTON_SIDECAR_TOKEN in this process's environment.rrrrvFrr r r$rrrrrrrrz-[photon] standalone send skipping unsafe pathrr"rrrTrzPhoton standalone send failed: )rrrrrrrJr#r[rjr0r*rLrrr rUr~rDr'rrCrrrrJrKr rI)rGrrrDrErFr-r/record stale_hintbaserlast_message_idrrrr send_bodyr media_pathrr!r"ratt_bodyrPs r"_standalone_sendrP s  0.//   "!!.11URY?T5U5U  D 5 6 6E  &''  fjj)) !&**U"3"344 F7O,,#FJJv$6$6==*zz%((***  5,5558B B  4* 3 3T 3 3D'/G%)OB@$TUCCC= K= K= K= K= K= K= Kv <.w77 (!'///)0BB '"-""D '3..#yy{{0b88D>>,.2hh{.C.COO'+HH#'<#* '(<)<(< =11I)**93Fw3O3O9.8 (+!'Y"-""D'3..066;= K= K= K= K= K= K= K= K= K= K= K= K= K= K< 99;;,"D88D>>7066A= K= K= K= K= K= K= K= K= K= K= K= K= K= KB'+hh{&;&;O    (3(9r K K$ H/LSQ[__]]  NN#RSSS&11)<< &%'/AGG\,, 3+2HZ(#[[---Hg)#s**,T2222s= K= K= K= K= K= K= K= K= K= K= K= K= K= Ktyy{{(bxx~~3,T2222y= K= K= K= K= K= K= K= K= K= K= K= K= K= Kz#'((;"7"7"J?+ KQ= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K= K~ ??? @@@>1>>???????@st#P?C:O+9P 9O+PCO+P1;O+,P?O+P+ O55P8O59P P PPPcddlm}|dddttt ddgd|jtd td d td d d d| dd|j |j dS)z.Called by the Hermes plugin loader at startup.r)clir3ziMessage via Photonc t|Sr)r0rs r"zregister..5 sM#$6$6r,rrzRun: hermes photon setup (logs in via device flow, creates a Spectrum project, links your phone number, installs the spectrum-ts sidecar).rPHOTON_ALLOWED_USERSPHOTON_ALLOW_ALL_USERSu📱TuaYou are communicating via Photon Spectrum (iMessage). Treat replies like regular text messages — short and friendly. Markdown is rendered (bold, italics, lists, code), but keep formatting light and conversational. Recipient identifiers are E.164 phone numbers; never expose them in responses unless the user asked. Attachments arrive as metadata only.)rradapter_factorycheck_fnrr required_env install_hintsetup_fnenv_enablement_fncron_deliver_env_varstandalone_sender_fnallowed_users_env allow_all_envmax_message_lengthr pii_safeallow_update_command platform_hintz1Set up and manage the Photon iMessage integration)rhelpr[ handler_fnN) rrRregister_platformrrr gateway_setuprrPr'register_cli_command register_clidispatch)ctx_clis r"registerrn, s #66#'!)+BC $ #)2-0..! ?;$$$N  @"= r,r)r$r)r-r.r/r0r1r.r$r2)r$rRr%)r1rr$r`) rLr0r~r.rr0rrRr$ry)rrr r.r$r.r&)rrr rr$r)rrr$r)rrGr$r`)rrr$r`)r$r)rr0r$r)r rr$r0)r rr$r)r rr$r`)r rr$r`)rr0r$r) r rrr0rr0rr`r$r)rrr$r)rGrrr0rr0rDrrErrFr`r$r)qr __future__rrr<rDloggingrrrNrrXrrSrrrpathlibrtypingrrr r r urllib.parser rr ImportErrorgateway.configr rrrrrrrgateway.platforms.helpersrrauthragent.secret_scoperrrrr# getLoggerrrJrJrLr'r*r+rQr[r_rjrrr sidecar_pathsrlrrmrn__annotations__rorrqrsrrrr%rrrrryrrrrrrrrrrrrrrrr r rrr(r,r.r0rr>r?rrCrPrnr^r,r"r|s0#"""""    '''''''';;;;;;;;;;;;;;!!!!!! LLLOO  43333333ONNNNNNN******JJJJJJ??????////(  8 $ $ # -@@@@QQQQ>2222    @!NMMMMMMM $ ####!%%%%%4444 &*"&@# +"        6&* BN  F F F F    33333333l$8O8O8O8Ov    &         % % % % T T T T$"    ,BBBBB'BBBP<       444444xPPPP> $"& p@p@p@p@p@p@l222222s&A-- A98A9