,jdZ ddlZn #e$rYnwxYwddlZddlZddlZddlZddlZddlZej e Z ddl Z ddl Z ddlZddlZddlZddlZddlZddlmZmZmZmZddlmZddlmZddlmZddlmZded eefd Z dd l!m"Z"m#Z#m$Z$dd l%m&Z&dd l'm(Z(ddl)m*Z*m+Z+eZ,ee-j.dz Z/e(e,e/Z0e0re0D]Z1e 2de1ne 2dddl3m4Z4m5Z5m6Z6m7Z7ddl8m9Z9ddl:m;Z<ddl=m>Z>ddl?m@Z@ddlAmBZBddlCmDZDddlEmFZFmGZGddlHmIZIddlJmKZKddlLmMZMddlNmOZOmPZPmQZQmRZRmSZSmTZTddl!mUZUdd lVmWZWmXZXmYZYmZZZm[Z[m\Z\m]Z]m^Z^m_Z_m`Z`maZadd!lbmcZdmeZfmgZhmiZidd"ljmkZkmlZlmmZmdd#lnmoZpmqZqdd$lrmsZsmtZudd%lvmwZwmxZxmyZymzZzm{Z{m|Z|m}Z}m~Z~mZmZdd&lmZmZmZmZmZd'ZejZd(Zd efd)Zddd*d+edzd,edzd efd-Zd efd.ZGd/d0eZGd1d2Z dDd7ed8ed9ed,ed:ed;eded?ed@edAefdBZe dCkrddlZejedSdS)Eao AI Agent Runner with Tool Calling This module provides a clean, standalone agent that can execute AI models with tool calling capabilities. It handles the conversation loop, tool execution, and response management. Features: - Automatic tool calling loop until completion - Configurable model parameters - Error handling and recovery - Message history management - Support for multiple model providers Usage: from run_agent import AIAgent agent = AIAgent(base_url="http://localhost:30000/v1", model="claude-opus-4-20250514") response = agent.run_conversation("Tell me about the latest Python updates") N)ListDictAnyOptional)datetime)Path)SimpleNamespace)get_hermes_homesourcereturnc|dkrdStjdpd}|r|dkrdS tjS#t $rYdSwxYw)a*Working directory to stamp on a new session row, or None. Only local CLI sessions get a recorded cwd: the directory the process was launched from is meaningful for ``hermes -c`` / ``--resume`` (relaunch where you left off). Gateway/cron/remote-backend sessions have no stable host cwd to restore, so they record nothing. ``TERMINAL_ENV`` is set by the CLI's config bridge (``load_cli_config``); a non-"local" backend (docker/ssh/modal/...) means the host cwd is irrelevant to the agent's tools, so we skip it there too. cliN TERMINAL_ENVlocal)osenvirongetstriplowergetcwdOSError)r backends ./home/ubuntu/.hermes/hermes-agent/run_agent.py_launch_cwd_for_sessionrDstz~~n--8??AAGGIIG7g%%ty{{ ttsA,, A:9A:)OpenAI _SafeWriter_get_proxy_for_base_url)IterationBudget)load_hermes_dotenv)get_provider_request_timeoutget_provider_stale_timeoutz.env) hermes_home project_envz$Loaded environment variables from %sz7No .env file found. Using system environment variables.)get_tool_definitionsget_toolset_for_toolhandle_function_callcheck_toolset_requirements) cleanup_vm) set_interrupt)cleanup_browser)sanitize_context)FailoverReason)redact_sensitive_text)estimate_request_tokens_roughis_local_endpoint)normalize_usage)ContextCompressor)jittered_backoff)DEFAULT_AGENT_IDENTITYbuild_skills_system_promptbuild_context_files_promptbuild_environment_hintsbuild_nous_subscription_prompt load_soul_md)_get_proxy_from_env) _SURROGATE_RE_sanitize_surrogates_sanitize_structure_surrogates_sanitize_messages_surrogates%_escape_invalid_chars_in_json_strings_repair_tool_call_arguments_strip_non_ascii_sanitize_messages_non_ascii_sanitize_tools_non_ascii_strip_images_from_messages_sanitize_structure_non_ascii)"_derive_responses_function_call_id_deterministic_call_id_split_responses_tool_id_summarize_user_message_for_log)ToolGuardrailDecisionappend_toolguard_guidancetoolguard_synthetic_result)FILE_MUTATING_TOOL_NAMESfile_mutation_result_landed)convert_scratchpad_to_thinksave_trajectory) _should_parallelize_tool_batch_is_destructive_command_extract_parallel_scope_path_paths_overlap_is_multimodal_tool_result_multimodal_text_summary!_append_subdir_hint_to_multimodal_extract_file_mutation_targets_extract_error_preview_trajectory_normalize_msg)atomic_json_writebase_url_host_matchesbase_url_hostnameis_truthy_value"model_forces_max_completion_tokensz0.14.1cddlm}dd|iS)zGReturn the User-Agent RouterMint needs to avoid Cloudflare 1010 blocks.r) __version__ User-Agentz HermesAgent/) hermes_clira)_HERMES_VERSIONs r_routermint_headersres.999999 6_66 )providerbase_urlrgrhc|dS|sdS|dks$t|pddrdSt|dkS)u?Decide whether to wait for credential-pool rotation instead of falling back. The existing pool-rotation path requires the pool to (1) exist and (2) have at least one entry not currently in exhaustion cooldown. But rotation is only meaningful when the pool has more than one entry. With a single-credential pool (common for Gemini OAuth, Vertex service accounts, and any "one personal key" configuration), the primary entry just 429'd and there is nothing to rotate to. Waiting for the pool cooldown to expire means retrying against the same exhausted quota — the daily-quota 429 will recur immediately, and the retry budget is burned. Additionally, Google CloudCode / Gemini CLI rate limits are ACCOUNT-level throttles — even a multi-entry pool shares the same quota window, so rotation won't recover. Skip straight to the fallback for those (#13636). In those cases we must fall back to the configured ``fallback_model`` instead. Returns True only when rotation has somewhere to go. See issues #11314 and #13636. NFgoogle-gemini-clicloudcode-pa://) has_availablestr startswithlenentries)poolrgrhs r!_pool_may_recover_from_rate_limitrtsu0 |u     u&&&#hn"*=*=*H*HIZ*[*[&u t||~~   ""rfcddl}dtd|d|d}|d|dd S) z8Return default HTTP headers required by Qwen Portal API.rNz QwenCode/z (z; )enablez qwen-oauth)rbzX-DashScope-CacheControlzX-DashScope-UserAgentzX-DashScope-AuthType)platform_QWEN_CODE_VERSIONsystemrmachine)_plat_uas r_qwen_portal_headersr~ sf X( X XELLNN,@,@,B,B X Xemmoo X X XC$,!$ ,   rfc feZdZdZdddddedeedeedeeddf fd ZxZS) _StreamErrorEventaSynthesized provider error surfaced from a Responses ``error`` SSE frame. Some Codex-style Responses backends (xAI for subscription/quota failures, custom relays under malformed-tool-call conditions) emit a standalone ``type=error`` frame instead of routing the failure through ``response.failed`` or returning an HTTP 4xx. The fallback streaming path raises this exception so ``_summarize_api_error`` and ``_extract_api_error_context`` see a familiar ``.body`` / ``.status_code`` shape and the entitlement detector can match the underlying provider message ("do not have an active Grok subscription", etc.). N)codeparam status_codemessagerrrr ct|||_||_||_||_d|||ddi|_dS)Nerror)rrrtype)super__init__rrrrbody)selfrrrr __class__s rrz_StreamErrorEvent.__init__'sb !!!   & " %  rf) __name__ __module__ __qualname____doc__rorintr __classcell__)rs@rrrs  "##%)     sm  }  c]             rfrceZdZdZdZedefdZejdeddfdZ ddededededede edzdede edzdede de de ede ede de d e d!ed"ed#e d$ed%e ed&e ed'e ed(ed)e d*ed+ee d,ed-ed.ed/ed0ed1ed2ed3ed4ed5ed6ed7ed8ed9ed:ed;e deeefd?e eeefd@edAedBedCedDedEedFedGedHedIe dJe dKe dLedMdNdOeeefdPe dQe dRe dSe dTe fdUZdVZddWZdddd dXdYdZeed[eed\ee d]e d^e ddf d_Z dd\ee dZeed]e fd`Zddaee ddfdbZddcZddZd dedfe fdgZde fdhZde fdiZdjeddfdkZdjeddfdlZddmZdneddfdoZ djeddfdpZ!djeddfdqZ"ddrZ#ddsZ$ ddtee eeefdeee ffduZ%dvdwl&m'Z(e)deeeffdxZ*dyeeefdzeddfd{Z+e)d|e,defd}Z-d|e,de fd~Z.ddded|e,de de de dyeeeefddfdZ/ddd|e,de de de dyeeeefddf dZ0dede,ddfdZ1deeeffdZ2ddZ3ddZ4ddede fdZ5ddede fdZ6ddede fdZ7de fdZ8de9e e ffdZ:dede fdZ;ddeedeefdZe)dede fdZ?e)dddedeede fdZ@de deAfdZBe)dedee fdZCdede fdZDdedefdZEe)dede fdZFde fdZG ddedtee de fdZHdededte eeefde fdZIdeefdZJdeddfdZKdvdlLmMZMmNZNmOZOe)de ede ede efdZP dde ede de ddfdZQddddddeedeedeedeedeeeff dZRdte eddfdZSddte ede efdZTdte eddfdZUdte ede fdZVddte ede efdZWdte ede efdZXdefdZYdte eeefdede de eeeffdZZdte eeefdede fd„Z[e)deeeefdee de fdńZ\e)dedefdDŽZ]e)d|e^defdȄZ_dnedeefdɄZ`dedefd˄Zae)d|e^deeeffd̄Zbdedeeeeffd΄Zce)de fdτZde)dnede fdЄZeefdvddddԜdede de de de def dلZgefdedefdڄZhdeeeefdeeeffdۄZidededeedeeeffd݄Zjddddddޜdededede de deeeefdededee dee dee dee deeddfdZkdddeeefded|ee^deelfdZme)dedefdZne)dZoddte eeeffdZpddjeddfdZqddZrdede fdZsdeefdZtdedeeefdede ddf dZude fdZvewjxdZyefdedefdZzefdeeeeeffdefdZ{de fdZ|e)dedefdZ}dte de ddfdZ~deddfdZdzeddfdZdZdzeddfdZddZde fdZd Zd Zdzeddfd ZdeAfd Zddte ddfd Zddte ddfdZdddedede dte dzddf dZddZddZde eeefddfdZede fdZddedeeeffdZddedefdZe)defdZe)defdZehdZe)dte eeefde eeeffdZe)d eeefde fd!Ze)dte eeefde eeeffd"Ze)d#e de fd$Ze)d#e de fd%Zdededzfd&Zd'Ze)dd(ed)ed*e defd+Ze)d,ede9eeeeffd-Z dd.ed/eedefd0Zdefd1Zdefd2Zdejfd3Ze)d4ede fd5Ze)ddedefd6Zd7eAded8e defd9Ze)d4ede fd:Zd4eded8e ddfd;Zdede fd<Zdedefd=Zde fd>Ze)deAde fd?Zd@e deAfdAZddBdedeeAdefdCZd4ededdfdDZd4ededdfdEZddeAd4edFefdGZddeAd4efdHZdXdedfe de fdIZdXdedfe de fdJZde fdKZde fdLZdeddfdMZddNZddOZdddPdee dQe dReedeeeefde9e e ff dSZde fdTZdeAfdUZddVZdeAfdWZddXZdeddfdYZe)dedefdZZdede fd[ZĐd\eeefddfd]Zdeddfd^Zdeddfd_Zdeddfd`Zde fdaZddbdeAdFefdcZʐddddde fdeZde fdfZde fdgZ͐dhe^de de de fdiZe)dede fdjZe)dkede9eeelffdlZАdkedmedefdnZde fdoZde fdpZdedmedefdqZԐddefdrZՐdse de fdtZ֐dse de fduZdededefdvZؐdse de fdwZِdse de fdxZde fdyZde fdzZܐdse de fd{Zdte ddfd|Zސdse deAfd}Zde fd~Zde efdZdeefdZdeAdzfdZdedeAfdZde fdZde fdZde fdZde fdZdeAdeAddfdZdse de fdZe)ddeAdddeAfdZe)ddddte d,ede fdZde fdZdddd ddte dede dededfe de9fdZdeddfdZdedefdZdedeAdede def dZdedefdZddte dede ddfdZdeAdefdZ ddedeAdedeedte de de dee eAeefdefdZe)ddedededefdZddte dede ddfdZddte dede ddfdZdte de defdZ ddedede eeefdedeedeedeeeffdZddjedeedefdZd ddededte eeefdede deeeff dZdS(AIAgentz AI Agent with tool calling capabilities. This class manages the conversation flow, tool execution, and response handling for AI models that support function calling. z[hermes-agent: tool call arguments were corrupted in this session and have been dropped to keep the conversation alive. See issue #15236.]r c|jSN) _base_urlrs rrhzAIAgent.base_urlMs ~rfvalueNcv||_|r|nd|_t||_dSNrk)rr_base_url_lowerr\_base_url_hostnamerrs rrhzAIAgent.base_urlQs805=u{{}}}2"3E":":rfrkZ?Falld rhapi_keyrgapi_mode acp_commandacp_argscommandargsmodelmax_iterations tool_delayenabled_toolsetsdisabled_toolsetssave_trajectoriesverbose_logging quiet_modetool_progress_modeephemeral_system_promptlog_prefix_chars log_prefixproviders_allowedproviders_ignoredproviders_order provider_sortprovider_require_parametersprovider_data_collectionopenrouter_min_coding_score session_idtool_progress_callbacktool_start_callbacktool_complete_callbackthinking_callbackreasoning_callbackclarify_callbackread_terminal_callback step_callbackstream_delta_callbackinterim_assistant_callbacktool_gen_callbackstatus_callbacknotice_callbacknotice_clear_callback max_tokensreasoning_config service_tierrequest_overridesprefill_messagesrxuser_id user_id_alt user_namechat_id chat_name chat_type thread_idgateway_session_keyskip_context_filesload_soul_identity skip_memoryparent_session_iditeration_budgetrfallback_modelcheckpoints_enabledcheckpoint_max_snapshotscheckpoint_max_total_size_mbcheckpoint_max_file_size_mbpass_session_idcFddlm}F|F|fid|d|d|d|d|d|d |d |d | d | d | d| d| d|d|d|d|d|d|d|d|d|d|d|d|d|d|d|d|d |d!|d"| d#|!d$|"d%|#d&|$d'|%d(|&d)|'d*|(d+|)d,|*d-|+d.|,d/|-d0|.d1|/d2|0d3|1d4|2d5|3d6|4d7|5d8|6d9|7d:|8d;|9d<|:d=|;d>|<d?|=d@|>dA|?dB|@dC|AdD|BdE|CdF|DdG|EdHS)Iu2Forwarder — see ``agent.agent_init.init_agent``.r) init_agentrhrrgrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrxrrrrrrrrrrr session_dbrrrcredential_poolrrrrrN)agent.agent_initr)GrrhrrgrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrxrrrrrrrrrrrrrrrrrrrrrrsG rrzAIAgent.__init__Ws7R 0///// G G G XG GG X G X G $ G XG GG G %G *>G "zG .-G 0/G 0/G ,O!G ""z#G $ 21%G &%<$;'G (.-)G *"z+G ,0/-G .0//G 0,O1G 2(-3G 4)D(C5G 6&>%=7G 8)D(C9G :"z;G <$:#9=G >!4 3?G @$:#9AG B0/CG D 21EG F.-GG H$:#9IG J(-KG L#8"7MG N(B'AOG P0/QG R,OSG T,OUG V#8"7WG X"zYG Z.-[G \&]G ^0/_G `.-aG bXcG dGeG f$ gG h iiG jGkG l imG n ioG p iqG r!4 3sG t 21uG v 21wG x$ yG z"z{G |0/}G ~.-G @*>AG B,OCG D!4 3EG F&>%=GG H*F)EIG J)D(CKG L,OMG G G G rfc|j|jS ddlm}||_|jS#t$r'}tddYd}~dSd}~wwxYw)aiReturn a SessionDB for recall, lazily creating it if an entrypoint forgot. Most frontends pass ``session_db`` into ``AIAgent`` explicitly, but recall is important enough that a missing constructor argument should degrade by opening the default state DB instead of making the advertised ``session_search`` tool unusable. Nr) SessionDBz SessionDB unavailable for recallTexc_info) _session_db hermes_stater Exceptionloggerdebug)rrexcs r_get_session_db_for_recallz"AIAgent._get_session_db_for_recalls   '# #  . . . . . .(y{{D # #    LL;dL K K K44444 s, AAAc z|js|jsdS|jptjdd} |j|j||j|j |j d|j t|d|_dS#t$r&}td|Yd}~dSd}~wwxYw)zDCreate session DB row on first use. Disables _session_db on failure.NHERMES_SESSION_SOURCEr)rr r model_config system_promptrrcwdTz5Session DB creation failed (will retry next turn): %s)_session_db_createdrrxrrrcreate_sessionrr_session_init_model_config_cached_system_prompt_parent_session_idrrrwarning)rr es r_ensure_db_sessionzAIAgent._ensure_db_sessions  # 4+;  FP"*..1H%"P"P    + +?j!<"8"&"9+F33 ,   (,D $ $ $    NNG          sAB B:B55B:Told_session_idnew_session_idprevious_messagescarry_over_context reset_enginerrrrrc t|dd}|sdS|r\|Zt|drJ |||n2#t$r%}td|Yd}~nd}~wwxYw|rXt|drH |n2#t$r%}td|Yd}~nd}~wwxYwt|p|dup|p|} |pt|ddpd} | r| rt|d r||t|d dptj d d t|d dt|ddt|ddd} | |d| D} |j | fi| n2#t$r%}td|Yd}~nd}~wwxYw|r`|r`| r`t|drR ||| dS#t$r&}td|Yd}~dSd}~wwxYwdSdSdSdS)aNotify the active context engine about a host session transition. Generic host-side lifecycle helper. The built-in compressor keeps its existing reset behavior; plugin engines that implement richer hooks (``on_session_end``, ``on_session_reset``, ``on_session_start``, ``carry_over_new_session_context``) can flush old-session state, reset runtime counters, bind to the new session, and optionally carry retained context forward. context_compressorNon_session_endz3context engine on_session_end during transition: %son_session_resetz5context engine on_session_reset during transition: %srrkon_session_startrxrrrcontext_length_gateway_session_key)rrrxrrconversation_idc"i|] \}}|dv || S)r.0kvs r z>AIAgent._transition_context_engine_session..Is)[[[daqPZGZGZQGZGZGZrfz5context engine on_session_start during transition: %scarry_over_new_session_contextzCcontext engine carry_over_new_session_context during transition: %s)getattrhasattrr rrrr boolrrrupdateitemsr r) rrrrrr extra_contextenginer should_starttarget_session_id start_contexts r"_transition_context_engine_sessionz*AIAgent._transition_context_engine_sessions~&3T::  F  Y/;P`@a@a; Y%%n6GHHHH Y Y Y RTWXXXXXXXX Y  [GF,>?? [ ['')))) [ [ [ TVYZZZZZZZZ [   , !    +SgdL".M.MSQS  [- ['&BT2U2U ["0&8#D*d;;mrz~~Negl?m?m w33")&2BD"I"I#*41G#N#N M   / / /[[m.A.A.C.C[[[M [''(9KK]KKKK [ [ [ TVYZZZZZZZZ [  i i" i @AA i  i55nFWXXXXX i i i bdghhhhhhhhh i i i i i i i i is_A A1 A,,A1B C &CC 'F66 G%G  G%?H I!IIcd|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_ d|_ d|_ | |t|dd||ddS) axReset all session-scoped token counters to 0 for a fresh session. This method encapsulates the reset logic for all session-level metrics including: - Token usage counters (input, output, total, prompt, completion) - Cache read/write tokens - API call count - Reasoning tokens - Estimated cost tracking - Context compressor internal counters The method safely handles optional attributes (e.g., context compressor) using ``hasattr`` checks. When ``previous_messages`` / ``old_session_id`` / ``carry_over_context`` are provided, the active context engine is notified through the full transition lifecycle (``_transition_context_engine_session``) instead of a bare reset. Default callers pass nothing and keep the existing reset-only behavior. rgunknownnonerNTr)session_total_tokenssession_input_tokenssession_output_tokenssession_prompt_tokenssession_completion_tokenssession_cache_read_tokenssession_cache_write_tokenssession_reasoning_tokenssession_api_callssession_estimated_cost_usdsession_cost_statussession_cost_source_user_turn_countr#r)rrrrs rreset_session_statezAIAgent.reset_session_stateZs6%&!$%!%&"%&")*&)*&*+'()%!"*-'#, #) !" //)"4t<</1 0     rfconfig_context_lengthc 2|jpddkrdS ddlm}ddlm}|t|dd}t|pd|}||j |j t|dd|}|rSt|d d}|B| |j ||j t|dd|j|j dSdSdS#t$r&}td |Yd}~dSd}~wwxYw) zT Preload the LM Studio model with at least Hermes' minimum context. rklmstudioNr)MINIMUM_CONTEXT_LENGTH)ensure_lmstudio_model_loaded_config_context_lengthrr )rrrhrrgrzLM Studio preload skipped: %s)rgrragent.model_metadatar8hermes_cli.modelsr9rmaxrrh update_modelrrrr)rr5r8r9 target_ctx loaded_ctxccerrs r_ensure_lmstudio_runtime_loadedz'AIAgent._ensure_lmstudio_runtime_loadeds~ M R & & ( ( . . 0 0J > > F ? C C C C C C F F F F F F$,(/6NPT(U(U%27a9OPPJ55 DM74B+G+GJ  T#7>>>OO"j'1!% 'i <  ? ? ? LL8# > > > > > > > > > ?sB+C&& D0DDc.ddlm}|||||||S)u?Forwarder — see ``agent.agent_runtime_helpers.switch_model``.r) switch_model)agent.agent_runtime_helpersrE)r new_model new_providerrrhrrEs rrEzAIAgent.switch_models.<<<<<<|D)\7HhWWWrfcd |jpt}||i|dS#ttf$rYdSwxYw)a3Print that silently handles broken pipes / closed stdout. In headless environments (systemd, Docker, nohup) stdout may become unavailable mid-session. A raw ``print()`` raises ``OSError`` which can crash cron jobs and lose completed work. Internally routes through ``self._print_fn`` (default: builtin ``print``) so callers such as the CLI can inject a renderer that handles ANSI escape sequences properly (e.g. prompt_toolkit's ``print_formatted_text(ANSI(...))``) without touching this method. N) _print_fnprintr ValueError)rrkwargsfns r _safe_printzAIAgent._safe_printsU (5B B      $    DD s //forcerQct|ddrdS|st|ddrdS|s|r |jsdS|j|i|dS)ueVerbose print — suppressed when actively streaming tokens. Pass ``force=True`` for error/warning messages that should always be shown even during streaming playback (TTS or display). During tool execution (``_executing_tools`` is True), printing is allowed even with stream consumers registered because no tokens are being streamed at that point. After the main response has been delivered and the remaining tool calls are post-response housekeeping (``_mute_post_response``), all non-forced output is suppressed. ``suppress_status_output`` is a stricter CLI automation mode used by parseable single-query flows such as ``hermes chat -q``. In that mode, all status/diagnostic prints routed through ``_vprint`` are suppressed so stdout stays machine-readable. suppress_status_outputFN_mute_post_response)r_has_stream_consumers_executing_toolsrO)rrQrrMs r_vprintzAIAgent._vprints& 415 9 9  F 'S  F$)&)))))rfc|jdSttdd}|dS t|S#t t tf$rYdSwxYw)aReturn True when quiet-mode spinner output has a safe sink. In headless/stdio-protocol environments, a raw spinner with no custom ``_print_fn`` falls back to ``sys.stdout`` and can corrupt protocol streams such as ACP JSON-RPC. Allow quiet spinners only when either: - output is explicitly rerouted via ``_print_fn``; or - stdout is a real TTY. NTstdoutF)rJrsysrisattyAttributeErrorrLr)rstreams r_should_start_quiet_spinnerz#AIAgent._should_start_quiet_spinnersp > %4h-- >5  (( ( G4   55 s AA! A!cJ|jo|j ot|dddkS)aZReturn True when quiet-mode tool summaries should print directly. Quiet mode is used by both the interactive CLI and embedded/library callers. The CLI may still want compact progress hints when no callback owns rendering. Embedded/library callers, on the other hand, expect quiet mode to be truly silent. rxrkr)rrrrs r _should_emit_quiet_tool_messagesz(AIAgent._should_emit_quiet_tool_messagess5 O 7// 7j"--6 rfrc ||j|dn#t$rYnwxYw|jrF |d|dS#t$r tddYdSwxYwdS)uEmit a lifecycle status message to both CLI and gateway channels. CLI users see the message via ``_vprint(force=True)`` so it is always visible regardless of verbose/quiet mode. Gateway consumers receive it through ``status_callback("lifecycle", ...)``. This helper never raises — exceptions are swallowed so it cannot interrupt the retry/fallback logic. TrP lifecyclez%status_callback error in _emit_statusrNrWrrrrrrrs r _emit_statuszAIAgent._emit_statuss  LLDO6W66dL C C C C    D    U U$$['::::: U U U Dt TTTTTT U U U # 00A&A=<A=c ||j|dn#t$rYnwxYw|jrF |d|dS#t$r tddYdSwxYwdS)a+Emit a user-visible warning through the same status plumbing. Unlike debug logs, these warnings are meant for degraded side paths such as auxiliary compression or memory flushes where the main turn can continue but the user needs to know something important failed. TrPwarnz&status_callback error in _emit_warningrNrcrds r _emit_warningzAIAgent._emit_warnings  LLDO6W66dL C C C C    D    V V$$VW55555 V V V EPT UUUUUU V V Vrfc|jrE ||dS#t$r tddYdSwxYwdS)u@Fire a structured ``AgentNotice`` to the active driver (TUI / CLI). Driver-agnostic: the bound ``notice_callback`` renders it however that driver does (TUI status-bar override, CLI console line). Swallows all callback errors — a notice must NEVER break the agent loop (D-D fail-open). z%notice_callback error in _emit_noticeTrN)rrrr)rnotices r _emit_noticezAIAgent._emit_notice's{   U U$$V,,,,, U U U Dt TTTTTT U U U &A  A keyc|jrE ||dS#t$r tddYdSwxYwdS)zEClear a previously-fired sticky notice by ``key`` (e.g. on recovery).z1notice_clear_callback error in _emit_notice_clearTrN)rrrrrrns r_emit_notice_clearzAIAgent._emit_notice_clear4sz  % a a**3///// a a a P[_ `````` a a armc t|dd}| g}||_|d|fdS#t$rYdSwxYw)aBuffer a retry/fallback status message. Stored as a (kind, text) tuple where ``kind`` is one of: - ``"status"`` -> replays via ``_emit_status`` - ``"vprint"`` -> replays via ``_vprint(force=True)`` - ``"warn"`` -> replays via ``_emit_warning`` Used to defer noisy retry chatter until we know whether the turn ultimately recovered or failed. _retry_status_bufferNstatusrrsappendrrrbufs r_buffer_statuszAIAgent._buffer_statusGsj $ 6==C{,/) JJ'* + + + + +    DD 37 AAc t|dd}| g}||_|d|fdS#t$rYdSwxYw)z0Buffer a vprint(force=True) retry/fallback line.rsNvprintrurws r_buffer_vprintzAIAgent._buffer_vprint[sj $ 6==C{,/) JJ'* + + + + +    DD rzc| t|dd}|r|dSdS#t$rYdSwxYw)u=Drop buffered retry messages — call on successful recovery.rsN)rclearr)rrxs r_clear_status_bufferzAIAgent._clear_status_bufferfs^ $ 6==C        DD s '- ;;c| t|dd}|sdSt|}||D]n\}} |dkr||n<|dkr||n ||j|d_#t$rYkwxYwdS#t$rYdSwxYw)uEmit buffered retry messages — call on terminal failure. Surfaces the full retry/fallback trace so the user can see what was tried before the turn gave up. rsNrtrhTrP)rlistrrerirWrr)rrxmessageskindmsgs r_flush_status_bufferzAIAgent._flush_status_bufferos   $ 6==C CyyH IIKKK%   cx''))#....**3//// %>%>%>d KKK D      DD s;B-*B-ABB- B(%B-'B((B-- B;:B;rcDd}d}t|tr|ng}|D]u}t|tr|ddkr1|dd}t|tr|r|dz }|t |z }vd|_||dS) u&Disable Responses encrypted reasoning replay and strip cached state. Called from the conversation_loop retry path when the provider rejects a replayed ``codex_reasoning_items`` blob with HTTP 400 ``invalid_encrypted_content``. Sets ``self._codex_reasoning_replay_enabled`` to ``False`` (consumed by ``codex_responses_adapter._chat_messages_to_responses_input`` and ``transports/codex.py`` to drop ``reasoning.encrypted_content`` from subsequent requests) and pops ``codex_reasoning_items`` from every assistant message in ``messages`` so they cannot be replayed again later in the session. Returns a small stats dict ``{"messages": int, "items": int}`` counting what was stripped — purely for diagnostic logging. rrole assistantcodex_reasoning_itemsNrmF)rr) isinstancerdictrpoprq_codex_reasoning_replay_enabled)rrstripped_messagesstripped_itemstarget_messagesrrs r_disable_codex_reasoning_replayz'AIAgent._disable_codex_reasoning_replays$&04&@&@H((b" - -Cc4(( CGGFOO{,J,JGG3T::E%&& -5 -!Q&!#e**,/4,-GGGrfr)STREAM_DIAG_HEADERSc"ddlm}|S)u9Forwarder — see ``agent.stream_diag.stream_diag_init``.rstream_diag_init)agent.stream_diagrrs r_stream_diag_initzAIAgent._stream_diag_inits% 766666!!!rfdiag http_responsec,ddlm}||||dS)uEForwarder — see ``agent.stream_diag.stream_diag_capture_response``.r)stream_diag_capture_responseN)rr)rrrrs r_stream_diag_capture_responsez%AIAgent._stream_diag_capture_responses2 CBBBBB$$T4?????rfrc$ddlm}||S)u@Forwarder — see ``agent.stream_diag.flatten_exception_chain``.r)flatten_exception_chain)rr)rrs r_flatten_exception_chainz AIAgent._flatten_exception_chains' >=====&&u---rfct|dddkrdSt|tsdSt|ttjfrdSt |}d|vS)aReturn True for malformed provider streaming data from SDK parsers. Some Anthropic-compatible streaming providers can send a malformed event-stream frame. The Anthropic SDK surfaces that as a plain ``ValueError`` such as ``expected ident at line 1 column 149``. That is provider wire-format trouble, not local request validation, so it should follow the same retry path as a truncated JSON body. rNanthropic_messagesFexpected ident at line) rrrLUnicodeEncodeErrorjsonJSONDecodeErrorrorr)rrrs r_is_provider_stream_parse_errorz'AIAgent._is_provider_stream_parse_errors 4T * *.B B B5%,, 5 e0$2FG H H 5e**""$$**,,'722rf)rrattempt max_attempts mid_tool_callc 6ddlm}||||||||dS)u9Forwarder — see ``agent.stream_diag.log_stream_retry``.r)log_stream_retry)rrrrrrN)rr)rrrrrrrrs r_log_stream_retryzAIAgent._log_stream_retrysJ 766666 t5'%]      rfc4ddlm}|||||||dS)u9Forwarder — see ``agent.stream_diag.emit_stream_drop``.r)emit_stream_drop)rrrrrN)rr)rrrrrrrs r_emit_stream_dropzAIAgent._emit_stream_dropsH 766666 w\'d      rftaskrcL ||}n#t$rt|}YnwxYw|p |jj}t |dkr|dddz}|d|d|dS)z4Surface a compact warning for failed auxiliary work.N...u⚠ Auxiliary z failed: ) _summarize_api_errorrrorrrrqrstripri)rrrdetails r_emit_auxiliary_failurezAIAgent._emit_auxiliary_failures ..s33FF   XXFFF 2CM299;; v;;  DSD\((**U2F CDCC6CCDDDDDs 44c t|ddpdt|ddpdt|ddpdt|ddpdt|ddpddS)zBReturn the live main runtime for session-scoped auxiliary routing.rrkrgrhrr)rrgrhrr)rrs r_current_main_runtimezAIAgent._current_main_runtimeswT7B//52j"55;j"55;tY339rj"55;    rfc(ddlm}||dS)uYForwarder — see ``agent.conversation_compression.check_compression_model_feasibility``.r)#check_compression_model_feasibilityN)agent.conversation_compressionr)rrs r$_check_compression_model_feasibilityz,AIAgent._check_compression_model_feasibility s+VVVVVV++D11111rfc(ddlm}||dS)uPForwarder — see ``agent.conversation_compression.replay_compression_warning``.r)replay_compression_warningN)rr)rrs r_replay_compression_warningz#AIAgent._replay_compression_warnings+MMMMMM""4(((((rfc|t|}n/t|ddptt|dd}|dkS)z8Return True when a base URL targets OpenAI's native API.Nrrkrzapi.openai.comr\rrrhhostnames r_is_direct_openai_urlzAIAgent._is_direct_openai_urls[  (22HHt%92>>BS/44CCH+++rfcx|"t|}nt|ddpd}d|vS)uReturn True when a base URL targets Azure OpenAI. Azure OpenAI exposes an OpenAI-compatible endpoint at ``{resource}.openai.azure.com/openai/v1`` that accepts the standard ``openai`` Python client. Unlike api.openai.com it does NOT support the Responses API — gpt-5.x models are served on the regular ``/chat/completions`` path — so routing decisions must treat Azure separately from direct OpenAI. Nrrkzopenai.azure.com)rorr)rrhurls r_is_azure_openai_urlzAIAgent._is_azure_openai_urlsE  h--%%''CC$ 1266<"C!S((rfc|t|}n/t|ddptt|dd}|dkS)zKReturn True when a base URL targets GitHub Copilot's OpenAI-compatible API.Nrrkrapi.githubcopilot.comrrs r_is_github_copilot_urlzAIAgent._is_github_copilot_url-s[  (22HHt%92>>BS/44CCH222rfct|j|j}||Stt jddS)aResolve the effective per-call request timeout in seconds. Priority: 1. ``providers..models..timeout_seconds`` (per-model override) 2. ``providers..request_timeout_seconds`` (provider-wide) 3. ``HERMES_API_TIMEOUT`` env var (legacy escape hatch) 4. 1800.0s default Used by OpenAI-wire chat completions (streaming and non-streaming) so the per-provider config knob wins over the 1800s default. Without this helper, the hardcoded ``HERMES_API_TIMEOUT`` fallback would always be passed as a per-call ``timeout=`` kwarg, overriding the client-level timeout the AIAgent.__init__ path configured. NHERMES_API_TIMEOUTg @)r rgrfloatrgetenv)rcfgs r_resolved_api_call_timeoutz"AIAgent._resolved_api_call_timeout7s<+4=$*EE ?JRY3V<<===rfct|j|j}||dfStjd}|t |dfSdS)auResolve the base non-stream stale timeout and whether it is implicit. Priority: 1. ``providers..models..stale_timeout_seconds`` 2. ``providers..stale_timeout_seconds`` 3. ``HERMES_API_CALL_STALE_TIMEOUT`` env var 4. 90.0s default (time-to-first-byte for non-streaming / Codex internal-streaming requests; lowered from 300s in May 2026 so fallback providers kick in faster when upstream providers stall). The detector still scales up for large contexts in ``_compute_non_stream_stale_timeout``. Returns ``(timeout_seconds, uses_implicit_default)`` so the caller can preserve legacy behaviors that only apply when the user has *not* explicitly configured a stale timeout, such as auto-disabling the detector for local endpoints. NFHERMES_API_CALL_STALE_TIMEOUT)gV@T)r!rgrrrr)rr env_timeouts r%_resolved_api_call_stale_timeout_basez-AIAgent._resolved_api_call_stale_timeout_baseKsT$) CC ?: i ?@@  "%%u, ,zrf api_payloadc&|\}}t|ddp|jpd}|r |rt|rt dSddlm}||}|dkrt|dS|d krt|d S|S) a^Compute the effective non-stream stale timeout for this request. Accepts either the full ``api_kwargs`` dict (Chat Completions or Responses API) or a legacy ``messages`` list. Context-size scaling applies the same way to both shapes via :func:`agent.chat_completion_helpers.estimate_request_context_tokens`. rNrkinfr)estimate_request_context_tokensign@Pgb@)rrrhr/ragent.chat_completion_helpersrr=)rr stale_baseuses_implicit_defaultrhr est_tokenss r!_compute_non_stream_stale_timeoutz)AIAgent._compute_non_stream_stale_timeoutgs-1,V,V,X,X) )4d33Jt}J  X 2CH2M2M << QQQQQQ44[AA   z5)) )   z5)) )rfc |jdkrdS|jdkp)t|dddkodt|ddpdv}|sdS||n|jpd}|}t jd |sdSd |d S) uzReturn an actionable hint when this request matches a known Codex silent-reject configuration, else ``None``. The ChatGPT Codex backend (``chatgpt.com/backend-api/codex``) has historically silently dropped certain model requests: the connection is accepted but no stream events are emitted and no error is raised. The stale-call detector ends the hang, but a generic "timed out" message gives the user no path forward. This helper substitutes an actionable hint into the stale-timeout warning when the request matches a known silent-reject pattern. Currently flagged: ``gpt-5.5`` family on the Codex backend. See hermes-agent #21444 for the symptom history. The upstream backend behavior has historically come and gone with ChatGPT entitlement changes — the heuristic stays in place as future-proofing even when the symptom is dormant. Does NOT fix the backend issue. Only converts an opaque stale-timeout into actionable text so users learn the workaround in seconds rather than digging through logs. codex_responsesN openai-codexrrk chatgpt.comz/backend-api/codexrz(?:^|[/\-_])gpt-5\.5(?:$|[\-_])z/Codex backend appears to be silently rejecting a on chatgpt.com/backend-api/codex (no stream events, no error). This is a known backend-side pattern that has affected ChatGPT Plus accounts intermittently. Workaround: try `gpt-5.4` on the same OAuth profile, or `gpt-5.3-codex`, or switch to a different model/provider in your fallback chain. Some ChatGPT Codex accounts do not support `gpt-5.4-codex`. See hermes-agent#21444 for symptom history.)rrgrrrresearch)rris_codex_backend eff_model model_lowers r_codex_silent_hang_hintzAIAgent._codex_silent_hang_hint|s, =- - -4 M^ + 2B77=HY(WT;Lb-Q-Q-WUWX   4#/UUTZFB oo'' y;[II 4 :i : : : rfc,t|jdS)z1Return True when the base URL targets OpenRouter. openrouter.air[rrs r_is_openrouter_urlzAIAgent._is_openrouter_urls$T%9?KKKrfrgrhrrc.ddlm}||||||S)uPForwarder — see ``agent.agent_runtime_helpers.anthropic_prompt_cache_policy``.r)anthropic_prompt_cache_policyr)rFr)rrgrhrrrs r_anthropic_prompt_cache_policyz&AIAgent._anthropic_prompt_cache_policys5 NMMMMM,,THxbjrwxxxxrfc|}d|vr|ddd}|dS)a>Return True for models that require the Responses API path. GPT-5.x models are rejected on /v1/chat/completions by both OpenAI and OpenRouter (error: ``unsupported_api_for_model``). Detect these so the correct api_mode is set regardless of which provider is serving the model. /rmzgpt-5)rrsplitrp)rms r_model_requires_responses_apiz%AIAgent._model_requires_responses_apisD KKMM !88a  $A||G$$$rfrgc|pd}|dkrdS|dkr" ddlm}||S#t$rYnwxYwt |S)zCReturn True when this provider/model pair should use Responses API.rknousFcopilotr)!_should_use_copilot_responses_api)rrr<rrrr)rrgnormalized_providerrs r&_provider_model_requires_responses_apiz.AIAgent._provider_model_requires_responses_apis (~24466<<>> & ( (5 ) + + OOOOOO88???    44U;;;sA AAc|s<|s(|st|jrd|iSd|iS)uReturn the correct max tokens kwarg for the current provider. OpenAI's newer models (gpt-4o, gpt-4.1, gpt-5+, o-series) require 'max_completion_tokens'. Azure OpenAI and GitHub Copilot also require 'max_completion_tokens' for those families served via their OpenAI-compatible endpoints. OpenRouter, local models, and older OpenAI models use 'max_tokens'. The check is URL-first (api.openai.com / Azure / Copilot all use the new kwarg), then falls back to a model-name check so third-party OpenAI-compatible endpoints fronting those models are recognised — URL-only detection misses that case and silently sends the wrong kwarg, which the upstream model rejects with a 400. max_completion_tokensr)rrrr^rrs r_max_tokens_paramzAIAgent._max_tokens_paramsn  & & ( ( 4((** 4**,, 42$*==  4 ,U3 3e$$rf api_kwargsct|tsdSdD]I}||} t|}n#tt f$rY;wxYw|dkr|cSJdS)z@Extract the outgoing response token cap from a prepared request.N)max_output_tokensrrr)rrrr TypeErrorrL)rrnrawrs r%_requested_output_cap_from_api_kwargsz-AIAgent._requested_output_cap_from_api_kwargss*d++ 4O  C..%%C Cz*    qyy tsAAAcontentcv|sdS||}t|S)a Check if content has actual text after any reasoning/thinking blocks. This detects cases where the model only outputs reasoning but no actual response, which indicates an incomplete generation that should be retried. Must stay in sync with _strip_think_blocks() tag variants. Args: content: The assistant message content to check Returns: True if there's meaningful content after think blocks, False otherwise F)_strip_think_blocksrr)rr cleaneds r_has_content_after_think_blockz&AIAgent._has_content_after_think_block s> 5**733GMMOO$$$rfc&ddlm}|||S)uEForwarder — see ``agent.agent_runtime_helpers.strip_think_blocks``.r)strip_think_blocks)rFr)rr rs rr zAIAgent._strip_think_blocks#s'BBBBBB!!$000rfc|sdS|}|sdS|drdS|drdS|d}|dvrdSt|dkrdSdS)zCHeuristic: does visible assistant text look intentionally finished?Fz```T^ru%.!?:)"']}。！？：）】」』》^i)rendswithord)r strippedlasts r_has_natural_response_endingz$AIAgent._has_natural_response_ending(s 5>>## 5   U # # 4   S ! ! 4| ; ; ;4 t99  4urfc|jpd}|jpd}d|vr|dkrdSd|jvs d|jvrdSt |jot |jS)zHDetect the narrow backend family affected by Ollama/GLM stop misreports.rkglmzaiFollamaz:11434T)rrrgrrrhr/)rrprovider_lowers r_is_ollama_glm_backendzAIAgent._is_ollama_glm_backend<sz'R..00 --24466  # #%(?(?5 t+ + +x4;O/O/O4DMF&7 &F&FGGGrf finish_reasonc|dks |jdkrdS|sdStd|pgDsdS|t|ddrdSt|dd}t |t sdS||}|sdSt|dkstj d |sdS| | S) zIDetect conservative stop->length misreports for Ollama-hosted GLM models.stopchat_completionsFc3rK|]2}t|to|ddkV3dS)rtoolN)rrr)rrs r z:AIAgent._should_treat_stop_as_truncated..QsT   sD ! ! ?cggfoo&?      rfN tool_callsr rz\s) rranyrrror rrqrrr)rrassistant_messagerr  visible_texts r_should_treat_stop_as_truncatedz'AIAgent._should_treat_stop_as_truncatedFs& F " "dm7I&I&I5**,, 5   B      5  $0A>@@  5 |  r ! !5,)G)G !544\BBBBrf user_messageassistant_contentc*ddlm}|||||S)uTForwarder — see ``agent.agent_runtime_helpers.looks_like_codex_intermediate_ack``.r)!looks_like_codex_intermediate_ack)rFr-)rr*r+rr-s r"_looks_like_codex_intermediate_ackz*AIAgent._looks_like_codex_intermediate_ackes0 RQQQQQ00|EVX`aaarfc&ddlm}|||S)uDForwarder — see ``agent.agent_runtime_helpers.extract_reasoning``.r)extract_reasoning)rFr0)rr'r0s r_extract_reasoningzAIAgent._extract_reasoningos(AAAAAA  '8999rftask_idc&ddlm}|||S)uKForwarder — see ``agent.chat_completion_helpers.cleanup_task_resources``.r)cleanup_task_resources)rr4)rr2r4s r_cleanup_task_resourceszAIAgent._cleanup_task_resourcests'HHHHHH%%dG444rf)_MEMORY_REVIEW_PROMPT_SKILL_REVIEW_PROMPT_COMBINED_REVIEW_PROMPTreview_messagesprior_snapshotc&ddlm}|||S)uRForwarder — see ``agent.background_review.summarize_background_review_actions``.r)#summarize_background_review_actions)agent.background_reviewr<)r9r:r<s r$_summarize_background_review_actionsz,AIAgent._summarize_background_review_actionss* POOOOO22?NSSSrfmessages_snapshot review_memory review_skillscddlm}|||||\}}tj|dd}|dS)u^Spawn the background memory/skill review thread. Thin wrapper — the heavy lifting lives in ``agent.background_review.spawn_background_review_thread`` which returns the thread target. ``threading.Thread`` is constructed here so existing tests that patch ``run_agent.threading.Thread`` keep working. r)spawn_background_review_thread)r@rATz bg-review)targetdaemonnameN)r=rC threadingThreadstart)rr?r@rArCrD_promptts r_spawn_background_reviewz AIAgent._spawn_background_reviewsh KJJJJJ88  ''      F4k J J J  rf write_originexecution_contextr2 tool_call_idrNrOrPc.ddlm}||||||S)uJForwarder — see ``agent.background_review.build_memory_write_metadata``.r)build_memory_write_metadatarM)r=rR)rrNrOr2rPrRs r_build_memory_write_metadataz$AIAgent._build_memory_write_metadatas@ HGGGGG** %/%     rfct|dd}t|dd}||dSd|cxkrt|krAndS||}t|tr"|ddkr ||d<dSdSdSdS)aRewrite the current-turn user message before persistence/return. Some call paths need an API-only user-message variant without letting that synthetic text leak into persisted transcripts or resumed session history. When an override is configured for the active turn, mutate the in-memory messages list in place so both persistence and returned history stay clean. _persist_user_message_idxN_persist_user_message_overriderruserr )rrqrrr)rridxoverriders r$_apply_persist_user_message_overridez,AIAgent._apply_persist_user_message_overridesd7>>4!A4HH  s{ F  # # # #c(mm # # # # # #3-C#t$$ *F)B)B!)I $ # * *)B)Brfconversation_historyc||||||_|||||dS)zSave session state to both JSON log and SQLite on any exit path. Ensures conversations are never lost, even on errors or early returns. N))_drop_trailing_empty_response_scaffoldingrZ_session_messages_save_session_log_flush_messages_to_session_db)rrr[s r_persist_sessionzAIAgent._persist_sessionse 66x@@@ 11(;;;!) x((( **85IJJJJJrfcd}|rt|dtr|dds|ddri|d}|rQt|dtr6|ddN|ddi|sdS|rt|dtro|dddkrP||r:t|dtr|dddkP|rkt|dtrR|ddd kr5|dd r|dSdSdSdSdS) uRemove private empty-response retry/failure scaffolding from transcript tails. Also rewinds past any trailing tool-result / assistant(tool_calls) pair that the failed iteration left hanging. Without this, the tail ends at a raw ``tool`` message and the next user turn lands as ``...tool, user, user`` — a protocol-invalid sequence that most providers silently reject (returns empty content), causing the empty-retry loop to fire forever. See #. Fr_empty_recovery_synthetic_empty_terminal_sentinelTNrr#rr%)rrrr)rrdropped_scaffoldings rr]z1AIAgent._drop_trailing_empty_response_scaffoldings$  '8B<.. '   !<== ' B<##$>?? ' LLNNN"&   '8B<.. '   !<== ' B<##$>?? '"#  F  8B<..    ((F22 LLNNN  8B<..    ((F22  8B<..    ((K77   ..8 LLNNNNN     8777rfc&ddlm}|||S)uJForwarder — see ``agent.agent_runtime_helpers.repair_message_sequence``.r)repair_message_sequence)rFrg)rrrgs r_repair_message_sequencez AIAgent._repair_message_sequences'GGGGGG&&tX666rfc|jsdS|| |js||rt |nd}t ||j}||dD]}|dd}|d}t|rt|}nt|trg}|D]} t| trP| ddkr7| t| ddgt| tr,| dd vr| d |rd |nd}d} t!|d r3t|jtr|jrd |jD} n0t|d tr|d } |j|j|||d| |d|d|dkr|dnd|dkr|dnd|dkr|dnd|dkr|dnd|dkr|dnd t ||_dS#t($r&} t*d| Yd} ~ dSd} ~ wwxYw)u%Persist any un-flushed messages to the SQLite session store. Uses _last_flushed_db_idx to track which messages have already been written, so repeated calls (from multiple exit paths) only write truly new messages — preventing the duplicate-write bug (#860). Nrrr%r rtextrk>image image_url input_imagez [screenshot] r%c@g|]}|jj|jjdS))rF arguments)functionrFrprtcs r z9AIAgent._flush_messages_to_session_db../s:'''"$!1 @UVV'''rf tool_namerPrr reasoningreasoning_contentreasoning_detailsrcodex_message_items) rrr rur%rPrrvrwrxrryz$Session DB append_message failed: %s)rrZrrrqr=_last_flushed_db_idxrrTrUrrrrvrojoinrr%append_messagerrrr) rrr[ start_idx flush_fromrrr _txtptool_calls_datars rr`z%AIAgent._flush_messages_to_session_db s~  F 11(;;;/ F+ *'')))5IP0111qIY(ABBJ ,& & wwvy11''),,.g66 @6w??GG..@D$88%a..8155==F3J3J KKAEE&",=,=(>(>????'4008QUU6]]Fk5k5k KK77715?diiooo4G"&3 --8*S^T2R2R8WZWe8''"%.'''OO  5 5t<<8&),&7O //##!ggk22.!$!8!8"%''/":":6:k6I6Icggk222tFJkFYFYcgg.A&B&B&B_cFJkFYFYcgg.A&B&B&B_cNRVaNaNa#''2I*J*J*JgkJNR]J]J]0E(F(F(Fcg0    ),H D % % % F F F NNA1 E E E E E E E E E FsK+L L=L88L=c|sgSd}tt|dz ddD]%}||ddkr|}n&||S|d|S)a Get messages up to (but not including) the last assistant turn. This is used when we need to "roll back" to the last successful point in the conversation, typically when the final assistant message is incomplete or malformed. Args: messages: Full message list Returns: Messages up to the last complete assistant turn (ending with user/tool message) Nrmrrr)rangerqrcopy)rrlast_assistant_idxis r"_get_messages_up_to_last_assistantz*AIAgent._get_messages_up_to_last_assistantGs I"s8}}q("b11  A{v&&+55%&"6  %==?? "+++,,rfc$ddlm}||S)uJForwarder — see ``agent.system_prompt.format_tools_for_system_message``.r)format_tools_for_system_message)agent.system_promptr)rrs r _format_tools_for_system_messagez(AIAgent._format_tools_for_system_messagefs%GGGGGG..t444rf user_query completedc*ddlm}|||||S)uOForwarder — see ``agent.agent_runtime_helpers.convert_to_trajectory_format``.r)convert_to_trajectory_format)rFr)rrrrrs r_convert_to_trajectory_formatz%AIAgent._convert_to_trajectory_formatks+LLLLLL++D(J RRRrfcr|jsdS||||}t||j|dS)a Save conversation trajectory to JSONL file. Args: messages (List[Dict]): Complete message history user_query (str): Original user query completed (bool): Whether the conversation completed successfully N)rr_save_trajectory_to_filer)rrrr trajectorys r_save_trajectoryzAIAgent._save_trajectorypsE%  F77*iXX  TZCCCCCrf error_contextrc|dvrdSt|tsdSt|dpd}t|dpd}t|dpd}t|dpd}|d|d|d|}|sdSd |vrdSd |vrdSd |vrd Sd |vrd|vrd Sd|vrd|vrd SdS)uMDetect subscription/entitlement 403s that masquerade as auth failures. Returned True only when the body text matches a known entitlement shape AND the status is 401/403. Refreshing an OAuth token cannot fix an unsubscribed account, so callers should surface the error instead of looping the credential pool. Current matches: * xAI OAuth: "do not have an active Grok subscription" / "out of available resources" / "does not have permission" + "grok" Disambiguator for xAI (#29344): the same ``code`` text ("The caller does not have permission to execute the specified operation") is returned for BOTH an unsubscribed account AND a stale OAuth access token. xAI ships an explicit signal in the ``error`` field that tells the two apart: a ``[WKE=unauthenticated:...]`` suffix (and/or the ``OAuth2 access token could not be validated`` phrasing) means the credentials failed validation — that's recoverable by refreshing the token, NOT by surfacing an entitlement message. When either signal is present we return False eagerly so the credential-pool refresh path runs, letting long-running TUI sessions recover from stale tokens without an exit/reopen cycle. Extend here for new providers as we discover them (Anthropic's Claude Max OAuth entitlement errors look distinct enough today that the existing 1M-context-beta branch handles them; revisit if other subscription tiers start producing the same loop signature). >NFrrkreasonrr z[wke=unauthenticated:z*oauth2 access token could not be validated'do not have an active grok subscriptionTout of available resourcesgrokdoes not have permission)rrrorrr)rrrrrrBhaystacks r_is_entitlement_failurezAIAgent._is_entitlement_failuresB . . .5-.. 5 m'' 228b99??AA]&&x006B77==??=$$V,,23399;;-##G,,23399;;55555555~~ 5 #h . .5 78 C C5 4 @ @4 '8 3 3(8J8J4 % 1 1f6H6H4urfrc~|s|S|}d|vpd|vod|vpd|vod|v}|s|Sd}d|vr|S||S)uAppend a neutral hint when xAI's OAuth surface returns the permission-denied 403. xAI's ``/v1/responses`` endpoint replies to several distinct failure modes with the SAME body:: {"code": "The caller does not have permission to execute the specified operation", "error": "You have either run out of available resources or do not have an active Grok subscription. Manage subscriptions at https://grok.com/?_s=usage or subscribe at https://grok.com/supergrok"} That body covers several real causes we cannot distinguish without more info from xAI. The most common (and least obvious) one is that **X Premium+ does NOT include API access** — only standalone SuperGrok subscribers can use Hermes against xai-oauth. Lots of users see Grok in their X app, assume it works here too, and hit this 403 with no idea why. Lead the hint with that. Other possible causes: * No Grok subscription at all * SuperGrok tier doesn't include the requested model (e.g. grok-4.3 may need a higher tier) * Monthly quota exhausted (the ``?_s=usage`` URL hints at this) Surface the raw xAI text verbatim and point at https://grok.com/?_s=usage where the user can see WHICH applies. Matched once per detail string — won't double-decorate if the upstream already concatenated the same text. rrrruZ — xAI rejected this OAuth account. NOTE: X Premium+ does NOT include xAI API access — only standalone SuperGrok subscribers can use this provider. Other possible causes: no Grok subscription, your tier doesn't include this model, or your quota is exhausted. Check https://grok.com/?_s=usage to see which, or run `/model` to switch providers.zX Premium+ does NOT include)r)rris_entitlementhints r_decorate_xai_entitlement_errorz'AIAgent._decorate_xai_entitlement_errorsB M  5 > I,5I&E/ I*e3G%   M :  )F 2 2M $   rfct|}t|tr#d|vr d|ddSd|vsd|vrt jd|tj}|r'|dnd }t jd |}|r'|dnd}t|d d}g}|r| d || ||r| d |d |St|dd}t|trt| dtr)| di dn| d} | rAt|d d}|rd |dnd} t| | ddSt|d d}|rd |dnd} t| |ddS)zExtract a human-readable one-liner from an API error. Handles Cloudflare HTML error pages (502, 503, etc.) by pulling the tag instead of dumping raw HTML. Falls back to a truncated str(error) for everything else. r��z'Malformed provider streaming response: Ni,��z <!DOCTYPE<htmlz<title[^>]*>([^<]+)rmz!HTML error page (title not found)z2Cloudflare Ray ID:\s*]*>([^<]+)rzHTTP zRay u — rrr: rkr)rorrLrrr IGNORECASEgrouprrrvr{rrrr) rrrtitlerayray_idrpartsrrprefixs rrzAIAgent._summarize_api_errors|%jj uj ) ) I(CIIKK77HS#YHH H #  C 8#r}MMA*+TAGGAJJ$$&&&1TE)QSVWWC-0:SYYq\\'')))dF!%==KE 4 2[22333 LL    . _F__---<<&& &ufd++ dD ! ! W:DTXXgEVEVX\:]:]v$((7B''++I666cgckcklucvcvC W%e]DAA 4?G00000R>>&?U#dsd)?U?UVVVe]D99 ,7?(((((R66&7M#dsd)7M7MNNNrfct|rt|tsdS|sdSt|dkrdS|ddd|ddS)Nz z***r_r)callablerrorqrps r_mask_api_key_for_logszAIAgent._mask_api_key_for_logs*sn C== 'C!5!5 '&& 4 s88r>>5bqb'((c"##h(((rf error_msgc|sdS|dsd|vrdSd|}t |dkr |dddz}|S) a Clean up error messages for user display, removing HTML content and truncating. Args: error_msg: Raw error message from API or exception Returns: Clean, user-friendly error message z Unknown errorzcookier set_cookie authorizationproxy_authorization_api_key)rrorreplacer)rnloweredexacts r_is_sensitive_hook_keyzAIAgent._is_sensitive_hook_keymsg#s## 5))++%%c3//   %?7#3#3J#?#??rfr_i@depth max_depth max_string max_sequencerrrrckrdt|jdS|"t|ttt fr|St|t r6t|kr!|ddt|z dzS|St|ttfrdt|dSt|tri}t| D]o\}\}} |krt|z |d<nKt |} | rd|| <O| dz || <p|St|tt t"fret|} fd | dD}t| kr'|dt| z i|S t'|d rY |d } n$#t*$r|} YnwxYw| dz Sn#t,$rYnwxYw ddlm} m}||r&| |dz Sn#t,$rYnwxYwt|t4r*t7|dz St'|drY dt7| D}|dz S#t,$rYnwxYwt |dS)Nz...[truncated z chars]z bytes>_truncated_itemsz rmrc Jg|]}|dz S)rmr)_hook_jsonable)ritemclsrrrrs rrtz*AIAgent._hook_jsonable..sS   ""!)')!- #   rf model_dumpr)moder)r is_dataclass__dict__c^i|]*\}}t|d'||+S)rrorprs rrz*AIAgent._hook_jsonable..sH   1q66,,S11 q   rf)rrrrrrrorqbytes bytearrayr enumeraterrrrtuplesetrvrrrrrrrr vars)rrrrrroutrXrnrstr_keyseqdumpedrr public_attrss` ```` rrzAIAgent._hook_jsonable{s 9  :tE{{+::: : =JutS%.@AA=L eS ! ! 5zzJ&&[j[),]SZZ*=T,],],]]]L eeY/ 0 0 +*s5zz*** * eT " " "$C$-ekkmm$<$<   [c4,&&.1%jj<.GC*+Ec((--g66 #/CLL##5#ai"+#-%1 $6$$CLLJ edE3/ 0 0 u++C          .   C3xx,&& .C<0GHIIIJ ul++ 0"--6-::FF 000"--//FFF0))!)')!- *     D   8 8 8 8 8 8 8 8|E"" ))F5MM!)')!- *     D  e_ - - %%U ai#%) &  5* % %     $U 1 1 3 3    )) !)')!- *    5zz+:+&&s[6I HI H?<I >H??I I-,I-18J++ J87J8 AM M M c,||}|} tj|dt}n'#t $rt |d|cYSwxYwt ||kr|S||dd} tj|dt}n'#t $rt |d|cYSwxYwt ||kr|Sdt|j|d|dS)NF) ensure_asciidefaultr2)rrT) _truncated original_typepreview) rrrdumpsrorrqrr)rrpayloadlimitencodeds r_sanitize_hook_payloadzAIAgent._sanitize_hook_payloads;$$U++++-- (jucJJJGG ( ( (w<<' ' ' ' ( w<<5 N$$Ut"$MM (jucJJJGG ( ( (w<<' ' ' ' ( w<<5 N!%[[1vv   s#A!A,+A,B::!CCcrd|piD}|d|dS)Nc"i|] \}}|dv || S)>timeout http_clientr)rrnrs rrz9AIAgent._api_request_payload_for_hook..s4   U444 444rfPOST)methodr)rr)rrrs r_api_request_payload_for_hookz%AIAgent._api_request_payload_for_hooks[  )/R6688    **      rfr'c t|ddpg}|t|dd|t|ddt|dd|d||dS)Nr%rrrr )rr r%)rrr'r)rrr)rrr'rr%s r_api_response_payload_for_hookz&AIAgent._api_response_payload_for_hook s. dCCIr ** 7D99!.#$5v{KK&'8)TJJ",&& AA(KK     rf)r retry_count max_retries retryablerturn_idapi_request_idapi_call_countapi_start_time error_type error_messager r r rc T ddlm}|dsdStj}|d||||jpd|jpd|j|j|j |j |||z ||| | | | | ||d| |dS#t$rYdSwxYw)Nr)pluginsapi_request_errorrk)rr)r2rrrrxrrgrhrr api_duration started_atended_atrr r r rrrequest) rcrhas_hooktime invoke_hookrrxrrgrhrrr)rr2rrrrrrrrr r r r_pluginsrs r_invoke_api_request_error_hookz&AIAgent._invoke_api_request_error_hook%s*!  6 6 6 6 6 6$$%899 y{{H  #-?0b,"j-%6)!'''#&,:::FF1 !     4    DD sBA8B B'&B')rc,ddlm}|||||S)uIForwarder — see ``agent.agent_runtime_helpers.dump_api_request_debug``.r)dump_api_request_debug)rr)rFr!)rrrrr!s r_dump_api_request_debugzAIAgent._dump_api_request_debug]s1 GFFFFF%%dJvUSSSSrfc|s|St|}tjdd|}tjdd|}|S)zCConvert REASONING_SCRATCHPAD to think tags and clean up whitespace.z \n+()z\n\1z ()\n+z\1\n)rNrsubr)r s r_clean_session_contentzAIAgent._clean_session_contenthsS N-g66&'7;;&)7G<<}}rfc||St|trt|St|trg}|D]}t|trt |}t|dtrt|d|d<t|dtrt|d|d<|||S|S)uDApply secret redaction to message content (str or list-of-parts). Handles both plain-string content and the OpenAI/Anthropic multimodal shape where ``content`` is a list of ``{"type": "text", "text": ...}`` / ``{"type": "image_url", ...}`` / ``{"type": "input_text", "content": ...}`` parts. Image / binary parts are left untouched; only text fields are passed through ``redact_sensitive_text``. Respects ``HERMES_REDACT_SECRETS`` via ``redact_sensitive_text`` — when disabled the helper is effectively a no-op. Nrjr )rror-rrrrv)r redactedparts r_redact_message_contentzAIAgent._redact_message_contentrs ?N gs # # 2(11 1 gt $ $ H & &dD))Q::D!$((6"2"2C88K'>&A4HH  M$= . .#H~~  . . . . . . . . . . . . . . .%  "4//// D ' 8 8 !677M 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8" T TE T(((( T T T OQRSSSSSSSS T V -W2TY\]dYeYehjYjYj1Iwss|1I1I1I1IELqTqAv}qAqAqAqARTU V V V V V V VsN"A>>BBB B,+B,6CCC'C== D,D''D,cd|_d|_d|_|jt d|jt |dd}t |dd}|Q|O|5t |}dddn #1swxYwY|D]#} t d|#t$rY wxYwt |dd}|$|5d|_ddddS#1swxYwYdSdS)zMClear any pending interrupt request and the per-thread tool interrupt signal.FNrCrD_pending_steer_lock) rGrHrKrIrJrrr_pending_steer)rrOrPrQrR _steer_locks rclear_interruptzAIAgent.clear_interrupt* s$)!"&05-  $ 0 5$"; < < <4!7>>&A4HH  M$= . .#H~~  . . . . . . . . . . . . . . .%  "5%0000 D d$94@@  " + +&*# + + + + + + + + + + + + + + + + + + # "s6A66A:=A:B B$#B$<CCCrjcB|r|sdS|}t|dd}|$t|dd}|r|dz|zn||_dS|5|jr|jdz|z|_n||_dddn #1swxYwYdS)a Inject a user message into the next tool result without interrupting. Unlike interrupt(), this does NOT stop the current tool call. The text is stashed and the agent loop appends it to the LAST tool result's content once the current tool batch finishes. The model sees the steer as part of the tool output on its next iteration. Thread-safe: callable from gateway/CLI/TUI threads. Multiple calls before the drain point concatenate with newlines. Args: text: The user text to inject. Empty strings are ignored. Returns: True if the steer was accepted, False if the text was empty. FrVNrWrnT)rrrW)rrjr _lockr?s rsteerz AIAgent.steerK s$ 4::<< 5**,,3T:: =t%5t<0noofffalse load_configdisplayfile_mutation_verifierT rrrrrhermes_cli.configrqrrrrr_osenv _load_config_cfg_displays r_file_mutation_verifier_enabledz'AIAgent._file_mutation_verifier_enabled s     +//"ABBCyy{{((**2MMM IIIIII#|~~+    .8t.D.DNtxx ***$H(D)) D.F(.R.RHLL)ABBCCC    D t7AC AC A-*C,A--A)C C%$C%zE(?z2AIAgent._neutralize_footer_paths.. s1BQWWQZZ1B1B1Brf)_FOOTER_PATH_REr$)rrjs r_neutralize_footer_pathsz AIAgent._neutralize_footer_paths s. K"&&'B'BDIIIrffailedc 0|sdSdt|dg}d}|D]\}}|dkrn|dpd}|dpd}|r|d |d |d |n|d |d |d |d z }t||z }|dkr|d|d|d|S)uRender the per-turn failed-mutation dict as a user-facing footer. Displays up to 10 paths with their first error preview, then a count of any additional failures. Returns an empty string when the dict is empty so callers can concatenate unconditionally. Every file path that reaches the user-facing text — both the bullet path and any path echoed inside the tool's error preview — is backtick-wrapped via ``_neutralize_footer_paths`` so the gateway's bare-path media extractor can never auto-attach a protected file (e.g. ``~/.hermes/config.yaml``) to a messaging channel (#35584). rku⚠️ File-mutation verifier: z file(s) were NOT modified this turn despite any wording above that may suggest otherwise. Run `git status` or `read_file` to confirm.rrrcr#patchu • `u` — [z] z] failedrmu • … and z morern)rqrrrrvrr{) rrlinesshownrhinforr# remainings r$_format_file_mutation_failure_footerz,AIAgent._format_file_mutation_failure_footer s^ 2 &6{{ & & &   ,,..  JD${{xx006B==??G88F##.wD D EtEEDEEGEEFFFF BtBBDBBBCCC QJEEKK%' q== LL:)::: ; ; ;++DIIe,<,<===rfc ddl}|jd}|(|dvS ddlm}|pi}n#t$ri}YnwxYwt|tr|dnd}t|tr&d|vr"t|dSn#t$rYnwxYwdS) aYCheck whether the end-of-turn completion explainer footer is on. Config path: ``display.turn_completion_explainer`` (bool, default True). ``HERMES_TURN_COMPLETION_EXPLAINER`` env var overrides config. Exposed as a method so tests can patch a single seam, mirroring ``_file_mutation_verifier_enabled``. rN HERMES_TURN_COMPLETION_EXPLAINER>rlrmrnrorprrturn_completion_explainerTrtrvs r"_turn_completion_explainer_enabledz*AIAgent._turn_completion_explainer_enabled s     +//"DEECyy{{((**2MMM IIIIII#|~~+    .8t.D.DNtxx ***$H(D)) G.IX.U.UHLL)DEEFFF    D tr}turn_exit_reasoncv|sdSt|}|drdSd}|dkr|dzS|dkr|dzS|dkr|d zS|d kr|d zS|d kr|d zS|dkr|dzS|dkr|dzS|dr|dzS|dr|dzS|dkr|dzSdS)uRender a user-facing explanation for an abnormal turn ending. Maps the internal ``turn_exit_reason`` to a short, actionable message so a turn that produced no usable assistant reply (empty content after retries, a partial/truncated stream, a still-pending tool result, or an iteration/budget limit) is never silent from the UI's perspective — the symptom users report in #34452. Returns an empty string for reasons that are NOT abnormal (e.g. a normal ``text_response(...)`` exit), so callers can concatenate or substitute unconditionally without warning on healthy turns like a terse ``Done.``. rk text_responseu⚠️ No reply: empty_response_exhaustedzthe model returned empty content after retries and any fallback providers. Try `continue`, switch model/provider, or inspect the tool output above.!all_retries_exhausted_no_responsezall API retries were exhausted before a response was produced (provider errors / rate limits). Try `continue` or switch provider.partial_stream_recoveryzsstreaming stopped early and only a partial response was recovered. Send `continue` to resume from where it stopped.fallback_prior_turn_contentzano new content was produced this turn; showing recovered prior context. Send `continue` to retry.interrupted_during_api_callz[the request was interrupted mid-call before a reply was received. Send `continue` to retry.budget_exhaustedzfthe per-turn iteration/cost budget was exhausted before a final answer. Send `continue` to keep going. ollama_runtime_context_too_smallzjthe local model's context window was too small to finish. Increase the context size or use a larger model.max_iterations_reachedz}the maximum tool-iteration limit was reached before a final answer. Send `continue` to keep going, or raise `max_iterations`.error_near_max_iterationsztan error occurred near the iteration limit before a final answer. Check the tool output above, then send `continue`.pending_tool_resultzthe turn stopped while a tool result was still pending and the model produced no follow-up text. Send `continue` to let it summarize.r)rrrs r#_format_turn_completion_explanationz+AIAgent._format_turn_completion_explanation" s  2%&&   _ - - 2$ / / /44  8 8 8&&  . . .NN  2 2 2;;  2 2 266  ' ' '??  7 7 7CC    5 6 6 $$    8 9 9 MM  * * *$$ rrf num_tool_msgsc(ddlm}||||S)uVForwarder — see ``agent.agent_runtime_helpers.apply_pending_steer_to_tool_results``.r)#apply_pending_steer_to_tool_results)rFr)rrrrs r$_apply_pending_steer_to_tool_resultsz,AIAgent._apply_pending_steer_to_tool_results s)SSSSSS224=QQQrfdescctj|_||_tjdr$ ddlm}|dS#t$rYdSwxYwdS)uUpdate the last-activity timestamp and description (thread-safe). Also bridges to the kanban board's heartbeat fields when this process is a dispatcher-spawned worker (HERMES_KANBAN_TASK set), so the dispatcher watchdog doesn't reclaim an actively-running worker as stale (#31752). Bridge is rate-limited (60s) and best-effort — it never raises into the agent loop. HERMES_KANBAN_TASKr)!heartbeat_current_worker_from_envN) r_last_activity_ts_last_activity_descrrrtools.kanban_toolsrr)rrrs r_touch_activityzAIAgent._touch_activity s"&#' :>>. / /  PPPPPP1133333        sA A A c|dSt|dd}|sdS ddlm}|||j}| ||_dSdS#t $rYdSwxYw)zParse x-ratelimit-* headers from an HTTP response and cache the state. Called after each streaming API call. The httpx Response object is available on the OpenAI SDK Stream via ``stream.response``. Nheadersr)parse_rate_limit_headersr)ragent.rate_limit_trackerrrg_rate_limit_stater)rrrrres r_capture_rate_limitszAIAgent._capture_rate_limits s  F-D99  F  I I I I I I,,Wt}MMME ).&&&!     DD s!A A Ac|jS)z1Return the last captured RateLimitState, or None.)rrs rget_rate_limit_statezAIAgent.get_rate_limit_state s %%rfc H ddlm}|}n#t$rd}YnwxYw|||_|j |j|_t |dd}t|trd|d<|j }t d|j|j pd|j |j|d |d zznd |dS|dSt |d d}|sdSt!t"jd } ddlm}|||j} n#t$rYdSwxYw| |rt ddS| |_|j | j|_|r|} | j } t d| j| j pd| j | j| d | d zznd | d| dz znd | jt1dkr d| jznd | jr d| jznd |dS)uParse x-nous-credits-* headers, cache CreditsState, fire threshold notices. Fail-open throughout — header issues never break the agent loop. The PARSE is swallowed (any error → treated as a miss → keep last-known). The notice EVALUATION/EMIT is a SEPARATE block that WARNS on failure (R1-M2): a bug in the depletion-notice path must not vanish silently under the parse swallow. r)dev_fixture_credits_stateN_credits_latchT seen_below_90ucredits ▸ [FIXTURE] remaining=%d (%s) · paid=%s · denom=%s · used=%s (real headers bypassed — `echo clear` / unset HERMES_DEV_CREDITS_FIXTURE to restore)?z%.0f%%rzn/arHERMES_DEV_CREDITS)parse_credits_headersruocredits ▸ response had no valid x-nous-credits-* headers (miss — producer off / non-Nous path / >TTL stale)uYcredits ▸ remaining=%d (%s) · paid=%s · denom=%s · used=%s · Δspent=%s · age=%s%su%.1f¢i'rz%.0fsu · disabled=%srk)agent.credits_trackerrr_credits_state_credits_session_start_microsremaining_microsrrr used_fractionrr remaining_usd paid_accessdenominator_kind_emit_credits_noticesr]rrrrrgget_credits_spent_micros age_secondsrdisabled_reason) rrr_fixture_latch_usedr_devrrespentuseds r_capture_creditszAIAgent._capture_credits s  G G G G G G0022HH   HHH   "*D 195=5N2T#3T::F&$'' /*.'*E KKi)&-#$).3.?US[))U     & & ( ( ( F  F-D99  Frz~~.BCCDD  C C C C C C))'DMJJJEE    FF  =  K F$  - 5161GD .  1133E&D KK,&#*s!&-1-=TCZ((5050AUU]++u161BeEll1R1R5,,,X]?D?T\"U%:::Z\    ""$$$$$s ""D'' D54D5cNt|ddt|dddS|sdSt|dd}|dS ddlm}m}t|dd}|t ddd x}|_|t|d d pd t|d d pd }|||| \}}|D]}|||D]} || dS#t$r t ddYdSwxYw)uPRun the threshold policy on the current credits state and emit notices. Shared by the warm path (_capture_credits) and the L3 cold-start seed, so a session that opens already depleted warns immediately — not only after the first inference header. Runs only when a notice consumer is bound (messaging binds none → state still cached for /usage, no policy). WARNS on failure rather than swallowing (R1-M2): a depletion-path bug must not vanish silently. Emits clears FIRST, then shows (so depleted lands last in a latest-wins slot). rNrrr)evaluate_credits_noticesis_free_tier_modelrF)activer usage_bandrrkrh) model_is_freez%credits notice evaluation/emit failedTr) r_credits_notices_enabledrrrrrrqrlrrr) rrerrlatchrto_showto_clearrnrks rrzAIAgent._emit_credits_notices s 4*D 1 1 9gdLcei>j>j>r F,,..  F.55 = F S Z Z Z Z Z Z Z ZD"2D99E}9<QVfj.k.kk+/.gr**0bj"--3M!9 8Ub c c c GX - -'',,,,! * *!!&)))) * * S S S NNBTN R R R R R R SsB'C::&D$#D$c\t|dd}||Sd} ddlm}|pi}t|tr|dnd}t|tr&d|vr"t |d}n#t$rd}YnwxYw||_|S)uhWhether credits notices are enabled (config display.credits_notices). Read once per agent and cached — the policy runs after every API response, and the setting governs UI noise, not correctness, so a config flip applying on the next session is fine. Fail-open True (preserve current behaviour) on any config error. _credits_notices_enabled_cacheNTrrprrcredits_notices) rrurqrrrrrr)rcachedenabledryrzr{s rrz AIAgent._credits_notices_enabled' s?FF  M  E E E E E E<>>'RD.8t.D.DNtxx ***$H(D)) @.?8.K.Kx||,=>>??   GGG .5+sA9B B"!B"c|jS)z/Return the last captured CreditsState, or None.)rrs rget_credits_statezAIAgent.get_credits_state> s ""rfcJ|j|jdS|j|jjz S)z\Session-cumulative micros spent = first_seen_remaining - current_remaining. None if no data.N)rrrrs rrz AIAgent.get_credits_spent_microsB s,  - 59L9T41D4G4XXXrfc||dSt|dd}|sdS |d}|sdS|dkr2|xjdz c_td|jdStd|dS#t$rYdSwxYw)zRead X-OpenRouter-Cache-Status from response headers and log it. Increments ``_or_cache_hits`` on HIT so callers can report savings. Nrzx-openrouter-cache-statusHITrmz)OpenRouter response cache HIT (total: %d)zOpenRouter response cache %s)rrupper_or_cache_hitsrrrr)rrrrts r_check_openrouter_cache_statusz&AIAgent._check_openrouter_cache_statusH s  F-D99  F [[!<==F ||~~&&##q(## GI\]]]]] ;V\\^^LLLLL    DD sB-AB->-B-- B;:B;c tj|jz }|j|jt|d|j|j|j|jj|jj dS)zReturn a snapshot of the agent's current activity for diagnostics. Called by the gateway timeout handler to report what the agent was doing when it was killed, and by the periodic "still working" notifications. rm)last_activity_tslast_activity_descseconds_since_activity current_toolrr budget_used budget_max) rrrround _current_tool_api_call_countrrr max_total)relapseds rget_activity_summaryzAIAgent.get_activity_summary^ sc )++ 66 $ 6"&":&+GQ&7&7 ."2"105/9   rfch|jrY |j|pgn#t$rYnwxYw |jn#t$rYnwxYwt |dr?|jr: |j|jpd|pgdS#t$rYdSwxYwdSdS)uCShut down the memory provider and context engine — call at actual session boundaries. This calls on_session_end() then shutdown_all() on the memory manager, and on_session_end() on the context engine. NOT called per-turn — only at CLI exit, /reset, gateway session expiry, etc. r rkN)_memory_managerr r shutdown_allrr rrrs rshutdown_memory_providerz AIAgent.shutdown_memory_providerp s!    $33HNCCCC     $113333     4- . . 43J  '66O)rN         s/& 33A AA9$B B-,B-c|jr. |j|pgn#t$rYnwxYwt|dr?|jr: |j|jpd|pgdS#t$rYdSwxYwdSdS)uTrigger end-of-session extraction without tearing providers down. Called when session_id rotates (e.g. /new, context compression); providers keep their state and continue running under the old session_id — they just flush pending extraction now.r rkN)rr rrr rrs rcommit_memory_sessionzAIAgent.commit_memory_session s    $33HNCCCC     4- . . 43J  '66O)rN         s& 33$A44 BB)roriginal_user_messagefinal_response interruptedc.|rdS|jr|r|sdSt|d}t|d}|r|sdS d|jpdi}|||d<|jj||fi||j||jpddS#t $rYdSwxYw)usMirror a completed turn into external memory providers. Called at the end of ``run_conversation`` with the cleaned user message (``original_user_message``) and the finalised assistant response. The external memory backend gets both ``sync_all`` (to persist the exchange) and ``queue_prefetch_all`` (to start warming context for the next turn) in one shot. Uses ``original_user_message`` rather than ``user_message`` because the latter may carry injected skill content that bloats or breaks provider queries. Interrupted turns are skipped entirely (#15218). A partial assistant output, an aborted tool chain, or a mid-stream reset is not durable conversational truth — mirroring it into an external memory backend pollutes future recall with state the user never saw completed. The prefetch is gated on the same flag: the user's next message is almost certainly a retry of the same intent, and a prefetch keyed on the interrupted turn would fire against stale context. Normal completed turns still sync as before. The whole body is wrapped in ``try/except Exception`` because external memory providers are strictly best-effort — a misconfigured or offline backend must not block the user from seeing their response. Nrn)seprrkr)r)rrHrsync_allqueue_prefetch_allr)rrrrr user_text response_text sync_kwargss r_sync_external_memory_for_turnz&AIAgent._sync_external_memory_for_turn sD   F$  B?K#*2 J' )D )       3 3?0b 4         DD sA B BBc |j5t|j}|jdddn #1swxYwY|D]M} |#t $r) |n#t $rYnwxYwYJwxYwn#t $rYnwxYw t|dd}|!||ddd|_ dSdS#t $rYdSwxYw)uRelease LLM client resources WITHOUT tearing down session tool state. Used by the gateway when evicting this agent from _agent_cache for memory-management reasons (LRU cap or idle TTL) — the session may resume at any time with a freshly-built AIAgent that reuses the same task_id / session_id, so we must NOT kill: - process_registry entries for task_id (user's bg shells) - terminal sandbox for task_id (cwd, env, shell state) - browser daemon for task_id (open tabs, cookies) - memory provider (has its own lifecycle; keeps running) We DO close: - OpenAI/httpx client pool (big chunk of held memory + sockets; the rebuilt agent gets a fresh client anyway) - Active child subagents (per-turn artefacts; safe to drop) Safe to call multiple times. Distinct from close() — which is the hard teardown for actual session boundaries (/new, /reset, session expiry). Nclient cache_evictTrshared) rLrrMrrelease_clientsrcloser_close_openai_clientr)rchildrenrTrs rrzAIAgent.release_clients s, + . . 566%++--- . . . . . . . . . . . . . . ."  ))++++  $      D  T8T22F!))&t)TTT" "!    DD sB.A BAB A BA('B( B3BB BBBBBBB B,+B,02C&& C43C4ct|ddpd} ddlm}||n#t$rYnwxYw t |n#t$rYnwxYw t |n#t$rYnwxYw |j5t|j }|j dddn #1swxYwY|D]'} | #t$rY$wxYwn#t$rYnwxYw t|dd}|| |dd d|_ n#t$rYnwxYw g|_dS#t$rYdSwxYw) aRelease all resources held by this agent instance. Cleans up subprocess resources that would otherwise become orphans: - Background processes tracked in ProcessRegistry - Terminal sandbox environments - Browser daemon sessions - Active child agents (subagent delegation) - OpenAI/httpx client connections Safe to call multiple times (idempotent). Each cleanup step is independently guarded so a failure in one does not prevent the rest. rNrkr)process_registry)r2r agent_closeTr)rtools.process_registryr kill_allrr(r*rLrrMrrr rr^)rr2r r rTrs rrz AIAgent.close s_$ d339r  ? ? ? ? ? ?  % %g % 6 6 6 6    D   w        D   G $ $ $ $    D  + . . 566%++--- . . . . . . . . . . . . . . ."  KKMMMM D      D  T8T22F!))&t)TTT"     D  %'D " " "    DD s2 ??A A A $A44 BBC< .C: C<C  C< C C<C+*C<+ C85C<7C88C<< D D  2E E  E E E('E(historycd}t|D]}|ddkr|dd}d|vr7 tj|}d|vr%t |dt r |d}nv#tjtf$rYwxYw|rP|j |d |j s-| |j d t|d tddS) a Recover todo state from conversation history. The gateway creates a fresh AIAgent per message, so the in-memory TodoStore is empty. We scan the history for the most recent todo tool response and replay it to reconstruct the state. Nrr#r rkz"todos"todosF)mergeu📋 Restored z todo item(s) from history)reversedrrr9rrrr _todo_storewriterrWrrqrJ)rrlast_todo_responserr datas r_hydrate_todo_storezAIAgent._hydrate_todo_storeS s6"G$$  Cwwv&((ggi,,G'' z'**d??z$w-'F'F?)-g&E()4      t   " "#5U " C C C? t rrsCU?V?Vrrrsssus ;BB! B!c|jS)z)Check if an interrupt has been requested.)rGrs ris_interruptedzAIAgent.is_interrupteds s ((rfsystem_messagec(ddlm}|||S)uDForwarder — see ``agent.system_prompt.build_system_prompt_parts``.r)build_system_prompt_partsr)rr)rrrs r_build_system_prompt_partsz"AIAgent._build_system_prompt_parts s*AAAAAA((nMMMMrfc(ddlm}|||S)u>Forwarder — see ``agent.system_prompt.build_system_prompt``.r)build_system_promptr)rr")rrr"s r_build_system_promptzAIAgent._build_system_prompt s*;;;;;;""4GGGGrfct|tr.|ddp|ddpdSt|ddpt|ddpdS)z8Extract call ID from a tool_call entry (dict or object).call_idrkidrrrr)rss r_get_tool_call_id_staticz AIAgent._get_tool_call_id_static sk b$   C66)R((BBFF4,<,<B Br9b))HWRr-B-BHbHrfct|trD|d}t|tr|ddpdSdSt|dd}t|ddpdS)abExtract function name from a tool_call entry (dict or object). Gemini's OpenAI-compatibility endpoint requires every `role: tool` message to carry the matching function name. OpenAI/Anthropic/ollama tolerate its absence, so the field is best-effort: callers fall back to "" and the message still works elsewhere. rqrFrkNr')rsrNs r_get_tool_call_name_staticz"AIAgent._get_tool_call_name_static s b$    ##B"d## 0vvfb))/R/2 RT * *r62&&,",rf>r#rWrzrqr developerc$ddlm}||S)uHForwarder — see ``agent.agent_runtime_helpers.sanitize_api_messages``.r)sanitize_api_messages)rFr-)rr-s r_sanitize_api_messageszAIAgent._sanitize_api_messages s( FEEEEE$$X...rfrcft|tr|ddkrdS|drdS|d}t|tr|rdSnt|t r|D]}t|ts|rdS|d}|dvr7|dkrC|dd }t|tr|rdSdSn ||d krdS|d p|d }t|tr|rd S|d}t|t r|rd SdS)umReturn True if ``msg`` is an assistant turn whose only payload is reasoning. "Thinking-only" means the model emitted reasoning (``reasoning`` or ``reasoning_content``) but no visible text and no tool_calls. When sent back to providers that convert reasoning into thinking blocks (native Anthropic, OpenRouter Anthropic, third-party Anthropic-compatible gateways), the resulting message has only thinking blocks — which Anthropic rejects with HTTP 400 "The final block in an assistant message cannot be `thinking`." Symmetric with Claude Code's ``filterOrphanedThinkingOnlyMessages`` (src/utils/messages.ts). We drop the whole turn from the API copy rather than fabricating stub text — the message log (UI transcript) keeps the reasoning block; only the wire copy is cleaned. rrFr%r r>thinkingredacted_thinkingrjrkNrwrvTrx)rrrrorr)rr blockbtyperjrvrds r_is_thinking_only_assistantz#AIAgent._is_thinking_only_assistant s"#t$$ ;(F(F5 77<  5'')$$ gs # # }} u   & &    !%..%$uu &))===F?? 99VR00D!$,,%%$uuuu  W]]5GG/00HCGGK4H4H i % % )//*;*; 4 WW( ) ) b$   B 4urfc$ddlm}||S)uUForwarder — see ``agent.agent_runtime_helpers.drop_thinking_only_and_merge_users``.r)"drop_thinking_only_and_merge_users)rFr7)rr7s r#_drop_thinking_only_and_merge_usersz+AIAgent._drop_thinking_only_and_merge_users s( SRRRRR11(;;;rfr%cDddlm}|}td|D}||kr|Sd}g}|D]H}|jjdkr!||kr|||dz }3||It d||z ||S)ajTruncate excess delegate_task calls to max_concurrent_children. The delegate_tool caps the task list inside a single call, but the model can emit multiple separate delegate_task tool_calls in one turn. This truncates the excess, preserving all non-delegate calls. Returns the original list if no truncation was needed. r)_get_max_concurrent_childrenc3:K|]}|jjdkdVdS) delegate_taskrmN)rqrFrrs rr$z3AIAgent._cap_delegate_task_calls.. s1[[2r{7G?7Z7ZQ7Z7Z7Z7Z[[rfr<rmzUTruncated %d excess delegate_task call(s) to enforce max_concurrent_children=%d limit)tools.delegate_toolr:sumrqrFrvrr)r%r: max_childrendelegate_countkept_delegates truncatedrss r_cap_delegate_task_callsz AIAgent._cap_delegate_task_calls s EDDDDD3355 [[[[[[[ \ ) )   % %B{?22!L00$$R((("a'N  $$$$ / \ )<   rfcLt}g}|D]n}|jj|jjf}||vr+||||It d|jjot|t|kr|n|S)zRemove duplicate (tool_name, arguments) pairs within a single turn. Only the first occurrence of each unique pair is kept. Returns the original list if no duplicates were found. zRemoved duplicate tool call: %s) rrqrFrpaddrvrrrq)r%seenuniquersrns r_deduplicate_tool_callszAIAgent._deduplicate_tool_calls sEE T TB;#R[%:;C$  b!!!!@"+BRSSSSVs:66vvJFrfc&ddlm}|||S)uCForwarder — see ``agent.agent_runtime_helpers.repair_tool_call``.r)repair_tool_call)rFrJ)rrurJs r_repair_tool_callzAIAgent._repair_tool_call s'@@@@@@i000rfc(ddlm}||dS)uCForwarder — see ``agent.system_prompt.invalidate_system_prompt``.r)invalidate_system_promptN)rrM)rrMs r_invalidate_system_promptz!AIAgent._invalidate_system_prompt s+@@@@@@  &&&&&rffn_namerpindexc$t|||S)uGenerate a deterministic call_id from tool call content. Used as a fallback when the API doesn't provide a call_id. Deterministic IDs prevent cache invalidation — random UUIDs would make every API call's prefix unique, breaking OpenAI's prompt cache. )_codex_deterministic_call_id)rOrprPs rrFzAIAgent._deterministic_call_id$ s,GYFFFrfraw_idc t|S)z8Split a stored tool id into (call_id, response_item_id).)_codex_split_responses_tool_id)rSs rrGz AIAgent._split_responses_tool_id. s.f555rfr%response_item_idc"t||S)zCBuild a valid Responses `function_call.id` (must start with `fc_`).)(_codex_derive_responses_function_call_id)rr%rVs rrEz*AIAgent._derive_responses_function_call_id3 s 8AQRRRrfcJtj}|jd|jS)N:)rGcurrent_threadrFident)rthreads r_thread_identityzAIAgent._thread_identity; s()+++.. ...rfct|dd}t|dd}t|dd}d|d|d|d|S) Nrgr%rhrzthread=z provider=z base_url=z model=)rr^)rrgrhrs r_client_log_contextzAIAgent._client_log_context? s}4Y774Y77gy11 1d++-- 1 1 1 1  1 1). 1 1 rfc`t|dd}|tj}||_|S)N _client_lock)rrGRLockrb)rlocks r_openai_client_lockzAIAgent._openai_client_lockH s2t^T22 <?$$D $D  rfrcddlm}t||rdSt|dd}|-t |r |rdSnt |rdSt|dd}|t t|ddSdS)aCheck if an OpenAI client is closed. Handles both property and method forms of is_closed: - httpx.Client.is_closed is a bool property - openai.OpenAI.is_closed is a method returning bool Prior bug: getattr(client, "is_closed", False) returned the bound method, which is always truthy, causing unnecessary client recreation on every call. rMockF is_closedNT_client) unittest.mockrhrrrr)rrhis_closed_attrrs r_is_openai_client_closedz AIAgent._is_openai_client_closedO s '&&&&& fd # # 5 d;;  %'' !>## 4 n%% tfi66  " [%@@AA Aurfc ddl}ddl}|j|jdfg}t |drg||j|jdf||j|jdf||j|j dfn2t |dr"||j|j dft|}| | || S#t$rYdSwxYw) Nrrm TCP_KEEPIDLEr TCP_KEEPALIVE)socket_options) transportproxy)httpxsocket SOL_SOCKET SO_KEEPALIVErrv IPPROTO_TCPro TCP_KEEPINTVL TCP_KEEPCNTrrrClient HTTPTransportr)rh_httpx_socket _sock_opts_proxys r_build_keepalive_http_clientz$AIAgent._build_keepalive_http_clientm sF  " " " " $ $ $ $"-w/CQGHJw// T!!7#68Lb"QRRR!!7#68Mr"RSSS!!7#68KQ"OPPPP/22 T!!7#68Mr"RSSS -X66F== ..j.II!    44 sC:C== D  D  client_kwargsrc,ddlm}|||||S)uGForwarder — see ``agent.agent_runtime_helpers.create_openai_client``.r)create_openai_clientr)rFr)rrrrrs r_create_openai_clientzAIAgent._create_openai_client s.DDDDDD##D-vVVVVrfc$ddlm}||S)uJForwarder — see ``agent.agent_runtime_helpers.force_close_tcp_sockets``.r)force_close_tcp_sockets)rFr)rrs r_force_close_tcp_socketsz AIAgent._force_close_tcp_sockets s( HGGGGG&&v...rfcR|dS||} |td||||dS#t $r;}td||||Yd}~dSd}~wwxYw)Nz F44V<<   LLNNN KKN((**          LLH((**           sAA!! B&+0B!!B&c|5t|dd} ||j|d}nR#t$rE}t d|||Yd}~ddddSd}~wwxYw||_dddn #1swxYwY| |d|ddS)NrTrz7Failed to rebuild shared OpenAI client (%s) %s error=%sFzreplace:) rerr_client_kwargsrrrr`rr )rr old_client new_clientrs r_replace_primary_openai_clientz&AIAgent._replace_primary_openai_client sU  % % ' ' % % x66J !778KTZcg7hh    M,,..  uuu % % % % % % % % %DK % % % % % % % % % % % % % % % !!*5H5H5HQU!VVVts:B+AB+ B/B?B+B B++B/2B/c|5t|dd}|#||s|cdddSdddn #1swxYwYtd|||d|std|5|jcdddS#1swxYwYdS)NrzCDetected closed shared OpenAI client; recreating before use (%s) %szrecreate_closed:rz'Failed to recreate closed OpenAI client) rerrmrrr`r RuntimeErrorr)rrrs r_ensure_primary_openai_clientz%AIAgent._ensure_primary_openai_client s  % % ' '  T8T22F!$*G*G*O*O!                         Q   $ $ & &   22:UV:U:U2VV JHII I  % % ' '  ;                  s#*AAA C!!C%(C%c$ddlm}||S)uKForwarder — see ``agent.agent_runtime_helpers.cleanup_dead_connections``.r)cleanup_dead_connections)rFr)rrs r_cleanup_dead_connectionsz!AIAgent._cleanup_dead_connections s%HHHHHH''---rfct|tsdSg}|d}t|tr|||d}t|tr||dt dt ffd tfd|DS)zHReturn True when the outbound request still contains native image parts.Frinputrr c"t|trH|d}|dvrdStfd|DSt|t rtfd|DSdS)Nr>rlrmTc3.K|]}|VdSrrrr_contains_images rr$zPAIAgent._api_kwargs_have_image_parts.._contains_image.. s-FF!??1--FFFFFFrfc3.K|]}|VdSrrrs rr$zPAIAgent._api_kwargs_have_image_parts.._contains_image.. s-==!??1--======rfF)rrrr&valuesr)rptypers rrz=AIAgent._api_kwargs_have_image_parts.._contains_image s%&& G &))8884FFFFu||~~FFFFFF%&& >====u======5rfc3.K|]}|VdSrr)rrrs rr$z7AIAgent._api_kwargs_have_image_parts.. s-@@T??4((@@@@@@rf)rrrrextendrrr&)r candidatesrresponse_inputrs @r_api_kwargs_have_image_partsz$AIAgent._api_kwargs_have_image_parts s*d++ 5 >>*-- h % % (   h ' ' '$00 nd + + .   n - - - 3 4      @@@@Z@@@@@@rf is_visionc(ddlm}|d|S)Nr)copilot_request_headersT) is_agent_turnr)hermes_cli.copilot_authr)rrrs r_copilot_headers_for_requestz$AIAgent._copilot_headers_for_request s*CCCCCC&&TYOOOOrf)rcddlm}||}t||r|S|5t |j}dddn #1swxYwYd|d<tt| dddr0| |pir| d |d <| ||d S) Nrrgrr rhrkrT)rdefault_headersFr) rkrhrrrerrr[rorrrr)rrrrhprimary_clientrequest_kwargss r_create_request_openai_clientz%AIAgent._create_request_openai_client sH&&&&&&;;6;JJ nd + + "! !  % % ' ' 7 7!$"566N 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7)*}% !#n&8&8R&H&H"I"IKb c c b11*2BCC b150Q0Q\`0Q0a0aN, -)).PU)VVVsA$$A(+A(c6|||ddS)NFr)r )rrrs r_close_request_openai_clientz$AIAgent._close_request_openai_client s# !!&!FFFFFrfc&|dS ||}td|||dS#t$r:}td|||Yd}~dSd}~wwxYw)uCross-thread abort: shut sockets down without releasing FDs. Companion to :meth:`_close_request_openai_client` for stranger-thread callers (interrupt-check loop, stale-call detector). Calling ``client.close()`` from a thread that does not own the active httpx connection raced the still-live SSL BIO and corrupted unrelated file descriptors when the kernel recycled the just-freed TCP FD (#29507). Here we only ``shutdown(SHUT_RDWR)`` the pool's sockets. That unblocks the owning worker thread's pending ``recv``/``send`` with an EOF or ``EPIPE`` so it can unwind and close ``client`` from its own context — which is where the FD release belongs. Nz`OpenAI client aborted (%s, shared=False, tcp_force_closed=%d, deferred_close=stranger_thread) %sz9OpenAI client abort failed (%s, shared=False) %s error=%s)rrrr`rr)rrrshutdown_countrs r_abort_request_openai_clientz$AIAgent._abort_request_openai_client s > F !::6BBN KK5((**          LLK((**           sAA B/B  Bon_first_deltac*ddlm}|||||S)u;Forwarder — see ``agent.codex_runtime.run_codex_stream``.r)run_codex_stream)agent.codex_runtimer)rrrrrs r_run_codex_streamzAIAgent._run_codex_stream-s+888888j&.IIIrfc(ddlm}||||S)uKForwarder — see ``agent.codex_runtime.run_codex_create_stream_fallback``.r) run_codex_create_stream_fallback)rr)rrrrs r!_run_codex_create_stream_fallbackz)AIAgent._run_codex_create_stream_fallback2s)HHHHHH//j&IIIrfc|jdks |jdvrdS |jdkrddlm}|d}nddlm}|d}n9#t $r,}t d |j|Yd}~dSd}~wwxYwt| d pd  }t|j pd  }|r*|r(||kr"t d |jdS |jdkrddlm}|| }nddlm}|| }n9#t $r,}t d|j|Yd}~dSd}~wwxYw| d } | d} t| tr| sdSt| tr| sdS| |_ | d|_|j |jd <|j|jd<||jdsdSdS)Nr> xai-oauthrFrr)!resolve_codex_runtime_credentials)refresh_if_expiring)%resolve_xai_oauth_runtime_credentialsz%s singleton read failed: %srrkz%s singleton tokens differ from the active api_key; skipping singleton force-refresh to avoid silent account swap. Reactive credential rotation should go through the pool.) force_refreshz %s credential refresh failed: %srhr_credential_refreshrT)rrghermes_cli.authrrrrrrorrrrrrhrr) rrQr singleton_nowrr singleton_key active_keycredsrrhs r%_try_refresh_codex_client_credentialsz-AIAgent._try_refresh_codex_client_credentials7s =- - -Fc1c1c5 }..MMMMMM A A(-!!! RQQQQQ E E(-!!!     LL7 L L L55555 M--i88>B??EEGG +,,2244  Z MZ,G,G LLK     5 }..MMMMMM99NNNQQQQQQ==ERRR    LL;T]C P P P55555 ))I&&99Z(('3'' w}} 5(C(( 0@0@ 5}}  ((//44 )-I&*.-J'22T]:_:_:_2`` 5ts/0A A?!A::A? 0D>> E4!E//E4c2|jdks |jdkrdS ddlm}|t t jdd|}n3#t$r&}t d |Yd}~dSd}~wwxYw| d }| d }t|tr| sdSt|tr| sdS| |_| d |_|j|jd <|j|jd <|jd d|dsdSdS)Nr!rFr) resolve_nous_runtime_credentialsHERMES_NOUS_TIMEOUT_SECONDS15)timeout_secondsrz"Nous credential refresh failed: %srrhrrnous_credential_refreshrT)rrgrrrrrrrrrrrorrrrhrrr)rrQrrrrrhs r$_try_refresh_nous_client_credentialsz,AIAgent._try_refresh_nous_client_credentialss =. . .$-62I2I5  H H H H H H44 %bi0Mt&T&T U U#EE    LL=s C C C55555 ))I&&99Z(('3'' w}} 5(C(( 0@0@ 5}}  ((//44 )-I&*.-J'  1488822:S2TT 5ts3A A>A99A>c0|jdkrdS ddlm}|\}}n3#t$r&}td|Yd}~dSd}~wwxYwt |tr|sdS|}||_ |j |j d<|j |j d<| t|j pd | d sdStd |d S)a]Refresh Copilot credentials and rebuild the shared OpenAI client. Copilot tokens may remain the same string across refreshes (`gh auth token` returns a stable OAuth token in many setups). We still rebuild the client on 401 so retries recover from stale auth/client state without requiring a session restart. rFr)resolve_copilot_tokenz%Copilot credential refresh failed: %sNrrhrkcopilot_credential_refreshrz%Copilot credentials refreshed from %sT)rgrrrrrrrorrrrh"_apply_client_headers_for_base_urlrr)rr new_token token_sourcers r'_try_refresh_copilot_client_credentialsz/AIAgent._try_refresh_copilot_client_credentialss= =I % %5  E E E E E E&;&;&=&= #I||    LL@# F F F55555 )S)) 1B1B 5OO%%   )-I&*.-J' //DM4GR0H0HIII22:V2WW 5 ;\JJJts# AAAc:|jdkst|dsdS|jdkrdSt|ddpd}d|vrdS dd lm}m}|}n3#t$r&}t d |Yd}~dSd}~wwxYwt|tr| sdS| }||j krdS |jn#t$rYnwxYw ||t|ddt!|j|j |_n3#t$r&}td |Yd}~dSd}~wwxYw||_ dd lm}|jdkr ||nd|_dS)Nr_anthropic_api_keyF anthropic_anthropic_base_urlrkz azure.comr)resolve_anthropic_tokenbuild_anthropic_clientz'Anthropic credential refresh failed: %srz?Failed to rebuild Anthropic client after credential refresh: %s)_is_oauth_tokenT)rrrgragent.anthropic_adapterrrrrrrrorr_anthropic_clientrr rrr_is_anthropic_oauth)r_baserrrrrs r)_try_refresh_anthropic_client_credentialsz1AIAgent._try_refresh_anthropic_client_credentialss+ =0 0 0FZ8[8[ 05 =K ' '53R88>B %  5  _ _ _ _ _ _ _ _//11II    LLBC H H H55555 )S)) 1B1B 5OO%% / / /5   " ( ( * * * *    D  %;%;3T::4T]DJOO&&&D " "     NN\^a b b b55555 #, <;;;;;AER]A]A]??9#=#=#=ch tsBA B"BBC22 C?>C?:D>> E.E))E.c^ddlm}m}t|dr||jd<nlt|dr|||jd<nGt|drt |jd<nt|drddlm}||jd<nt|d r d d i|jd<nt|d rt|jd<nt|d r3ddlm }||j dd|jd<nod} ddl m }||j }|r|jrt|j}n#t $rYnwxYw|r ||jd<n|jdd|dS)Nr)build_nvidia_nim_headersbuild_or_headersrrzintegrate.api.nvidia.comzapi.routermint.comr)copilot_default_headers api.kimi.comrbzclaude-code/0.1.0portal.qwen.air)_codex_cloudflare_headersrrkget_provider_profile)agent.auxiliary_clientrrr[rrer<rr~rr providersrrgrrrr_apply_user_default_headers) rrhrrrr _ph_headers_gpf2_ph2s rrz*AIAgent._apply_client_headers_for_base_urlsb        !? ; ; A5E5E5G5GD  1 2 2 "8-G H H A5M5Mh5W5WD  1 2 2 "8-A B B A5H5J5JD  1 2 2 "8-D E E A A A A A A A5L5L5N5ND  1 2 2 "8^ < < A6BDW5XD  1 2 2 "8-= > > A5I5K5KD  1 2 2 "8] ; ; A H H H H H H5N5N#'' 26666D  1 2 2 K CCCCCCuT]++=D0="&t';"<"|S4Q4Qc ++C000Wc )-I&*.-J' // >>> ++3H+IIIIIs A:: BB)classified_reasonrhas_retried_429rc.ddlm}||||||S)uOForwarder — see ``agent.agent_runtime_helpers.recover_with_credential_pool``.r)recover_with_credential_pool)rrrr)rFr)rrrrrrs r_recover_with_credential_poolz%AIAgent._recover_with_credential_poolfsJ MLLLLL++Dk[jP`mnnn nrfc|j}|dS|jdks1tt|dddrdS|S)zEWhether a rate-limit retry should wait for same-provider credentials.NFrjrhrkrl)_credential_poolrgrorrprn)rrss r'_credential_pool_may_recover_rate_limitz/AIAgent._credential_pool_may_recover_rate_limitrsf$ <5 M0 0 074R0011<<=NOO 1 5!!###rfc|jdkr|ddlm}||t |dd|jjjdi|S)Nrr)sanitize_anthropic_kwargsrrk)rr)rrrr rrrcreate)rrr s r_anthropic_messages_createz"AIAgent._anthropic_messages_creates =0 0 0  : : < < < FEEEEE!! 74r#B#B    6t%.5CC CCCrfcNtt|dd}t|dddkr+ddlm}t|dd pd }|||_dSdd lm}||jt|d dt|j|j | |_dS) u)Rebuild the Anthropic client after an interrupt or stale call. Handles both direct Anthropic and Bedrock-hosted Anthropic models correctly — rebuilding with the Bedrock SDK when provider is bedrock, rather than always falling back to build_anthropic_client() which requires a direct Anthropic API key. Honors ``self._oauth_1m_beta_disabled`` (set by the reactive recovery path when an OAuth subscription rejects the 1M-context beta) so the rebuilt client carries the reduced beta set. _oauth_1m_beta_disabledFrgNbedrockr)build_anthropic_bedrock_client_bedrock_regionz us-east-1)rr)rdrop_context_1m_beta) rrrrrrrr rgr)r_drop_1mrregionrs r_rebuild_anthropic_clientz!AIAgent._rebuild_anthropic_clients&?GGHH 4T * *i 7 7 N N N N N NT#4kBBQkF%C%CF%K%KD " " " F F F F F F%;%;'3T::4T]DJOO%- &&&D " " "rfc&ddlm}|||S)uKForwarder — see ``agent.chat_completion_helpers.interruptible_api_call``.r)interruptible_api_call)rr)rrrs r_interruptible_api_callzAIAgent._interruptible_api_calls'HHHHHH%%dJ777rfcDt|dd}||}|rxt|dd}|||}|rNd|j|jfD}|D]} ||#t $rYwxYw||t|dd}|d|}|rNd|j|jfD}|D]} ||#t $rYwxYw||d|_dS)zDReset tracking for text delivered during the current model response._stream_think_scrubberN_stream_context_scrubbercg|]}||Srrrcbs rrtz;AIAgent._reset_stream_delivery_tracking..s t t tegesesesesrfcg|]}||Srrrs rrtz;AIAgent._reset_stream_delivery_tracking..spppBacaoRaoaoaorfrk)rflushfeedr_stream_callbackr_record_streamed_assistant_text _current_streamed_assistant_text)rthink_scrubber think_tail ctx_scrubber callbacksrscrubbertails r_reset_stream_delivery_trackingz'AIAgent._reset_stream_delivery_trackings!'?FF  %'--//J E 't-GNN +!-!2!2:!>!>JE t tt/I4K`.a t t tI'!!!BzNNNN(!!! D!88DDD4!;TBB  >>##D ;pp4+EtG\*]ppp #B4$44T:::02---s$1 A== B  B ( C44 DDcnt|tr|rt|dd|z|_dSdSdS)zCAccumulate visible assistant text emitted through stream callbacks.r%rkN)rrorr%)rrjs rr$z'AIAgent._record_streamed_assistant_textsR dC  T @"EEL  1 1 1    rfct|tsdStjdd|S)Nrkz\s+r)rrorr$r)rjs r_normalize_interim_visible_textz'AIAgent._normalize_interim_visible_texts9$$$ 2vfc4((..000rfc |||pd}|sdS||t|ddpd}t|o||kS)NrkFr%)r/r rr)rr visible_contentstreameds r_interim_content_was_streamedz%AIAgent._interim_content_was_streameds>>  $ $W] 3 3   577  $ $WT3UWY%Z%Z%`^` a a  H~~=(o"==rf assistant_msgct|dd}|t|tsdS|d}||pd}|r|dkrdS||} |||dS#t$r t dd YdSwxYw) zESurface a real mid-turn assistant commentary message to the UI layer.rNr rkz(empty))already_streamedz interim_assistant_callback errorTr) rrrrr rr3rrr)rr4rr visibler6s r_emit_interim_assistant_messagez'AIAgent._emit_interim_assistant_messages T7 > > :Z t<<: F##I..**7=b99??AA 'Y.. F==gFF L Bw)9 : : : : : : L L L LL;dL K K K K K K Ls B&CCct|ddr%|r#|rd|_d|z}d}nd}t|trt|dd}|||pd}n||pd}t|dd}|||}nt|}|s&t|d ds|d }|sdSd |j |j fD}d}|D] } ||d}#t$rYwxYw|r| |dSdS) z;Fire all registered stream delta callbacks (display + TTS)._stream_needs_breakF TrNrkrr%rncg|]}||Srrrs rrtz.AIAgent._fire_stream_delta..(shhhBY[YgRYgYgYgrf) rrr:rror"r r+lstriprr#rr$)rrjprepended_breakr&r*r) deliveredrs r_fire_stream_deltazAIAgent._fire_stream_deltas 4. 6 6 $4 $DJJLL $',D $D=D"OO#O dC  )%T+CTJJN)%**4:266// ;;t%?FFH#}}T**(--" )78",, ){{4((  Fhh4#=t?T"Uhhh    B 4       7  0 0 6 6 6 6 6 7 7s D!! D.-D.cV|j}| ||dS#t$rYdSwxYwdS)z&Fire reasoning callback if registered.N)rr)rrjrs r_fire_reasoning_deltazAIAgent._fire_reasoning_delta3sN  $ > 4     >  &&cV|j}| ||dS#t$rYdSwxYwdS)aNotify display layer that the model is generating tool call arguments. Fires once per tool name when the streaming response begins producing tool_call / tool_use tokens. Gives the TUI a chance to show a spinner or status line so the user isn't staring at a frozen screen while a large tool payload (e.g. a 45 KB write_file) is being generated. N)rr)rrurs r_fire_tool_gen_startedzAIAgent._fire_tool_gen_started<sP # > 9      >rCc:|jdupt|ddduS)z4Return True if any streaming consumer is registered.Nr#)rrrs rrUzAIAgent._has_stream_consumersKs/  &d 2 Ct/66dB rfrc*ddlm}||||S)uUForwarder — see ``agent.chat_completion_helpers.interruptible_streaming_api_call``.r) interruptible_streaming_api_callrG)rrI)rrrrIs r!_interruptible_streaming_api_callz)AIAgent._interruptible_streaming_api_callRs0 SRRRRR//jQ_````rfzFailoverReason | Nonec&ddlm}|||S)uJForwarder — see ``agent.chat_completion_helpers.try_activate_fallback``.r)try_activate_fallback)rrL)rrrLs r_try_activate_fallbackzAIAgent._try_activate_fallbackYs'GGGGGG$$T6222rfcpt|ddpg}t|dd}|t|kS)aWWhether a fallback provider is actually available to switch to. Used to gate user-facing "trying fallback..." status so we don't announce a fallback that will never be attempted (the user has no fallback chain configured). Mirrors the early-return guard in ``try_activate_fallback`` (#35314, #17446). _fallback_chainN_fallback_indexr)rrq)rchainrPs r_has_pending_fallbackzAIAgent._has_pending_fallback^s>/66<"/33s5zz!!rfc$ddlm}||S)uJForwarder — see ``agent.agent_runtime_helpers.restore_primary_runtime``.r)restore_primary_runtime)rFrT)rrTs r_restore_primary_runtimez AIAgent._restore_primary_runtimels%GGGGGG&&t,,,rf api_errorc,ddlm}|||||S)uPForwarder — see ``agent.agent_runtime_helpers.try_recover_primary_transport``.r)try_recover_primary_transport)r r )rFrX)rrVr r rXs r_try_recover_primary_transportz&AIAgent._try_recover_primary_transportqs2 NMMMMM,,T9+cnoooorfct|tsdS|D]1}t|tr|ddvrdS2dS)NFr>rlrmT)rrrr)r r(s r_content_has_image_partsz AIAgent._content_has_image_partsxs^'4(( 5  D$%% $((6*:*:>Z*Z*Ztturfrlct|pdd\}}}d}|drZ|tddddd}|dr|}d d d d d d |d }tjd|d} |5| tj |dddn #1swxYwYn:#t$r- tj|jn#t $rYnwxYwwxYwt#|j}t||fS)Nrk, image/jpegdata:;rmrzimage/z.pngz.gifz.webpz.jpg)z image/pngz image/gifz image/webpr^z image/jpganthropic_image_F)rsuffixdelete)ro partitionrprqrrrtempfileNamedTemporaryFilerbase64 b64decoderrunlinkrFrr) rlheaderrrmime mime_partrbtmprhs r _materialize_data_url_for_visionz(AIAgent._materialize_data_url_for_visionsio2..88==4   W % % !s7||}}-33C;;A>DDFFI##H-- ! !    #dF   )1CF[`aaa  2 2 &*400111 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2     #(####      CH~~4yy$sTD(D8 DDD D D ED54E5 E?EEErcDtjt|pdd}|j|}|r|Sddd|d}d}t|pd}d}|dr||\}}d} d d l m } tj | || } t| trtj| ni} | d pd} n#t"$r} d | } Yd} ~ nd} ~ wwxYw|r:|r& |nS#t($rYnGwxYwnB#|r:|r' |w#t($rYwwxYwwwxYw| sd} d|d| d}|r-t|pdds |d|dz }||j|<|S)Nrkr.rz tool result)rr#rWzDescribe everything visible in this image in thorough detail. Include any text, code, UI, data, objects, people, layout, colors, and any other notable visual information.r_r)vision_analyze_tool)rl user_promptanalysiszImage analysis failed: zImage analysis failed.z[The z- attached an image. Here's what it contains: ]z@ [If you need a closer look, use vision_analyze with image_url: )hashlibsha256roencode hexdigest_anthropic_image_fallback_cacherrprntools.vision_toolsrpasynciorunrrr9rrr8rir)rrlr cache_keyr role_labelanalysis_prompt vision_source cleanup_path descriptionrp result_jsonr_rnotes r&_describe_image_for_anthropic_fallbackz.AIAgent._describe_image_for_anthropic_fallbacksN3yB#7#7#>#>w#G#GHHRRTT 599)DD  M%!   #dF     8  IO,, '+  # #G , , _*.*O*OP]*^*^ 'M<   > > > > > >!+##mYYYK1;;0L0LTTZ ,,,RTF!::j117R>>@@KK 8 8 87A77KKKKKK 8  3 3 5 5  ''))))D  3 3 5 5  ''))))D    32K_z__Q\___  Y_"!5!5!@!@!I!I  dTaddd D;?,Y7 sgA9D?>F? E EFEF2F FFG0GG GGGGc ddlm}ddlm}|}t |ddpd}t |ddpd}||||duS#t $rYdSwxYw) aReturn True if the active provider+model reports native vision. Used to decide whether to strip image content parts from API-bound messages (for non-vision models) or let the provider adapter handle them natively (for vision-capable models). Resolution order (see ``agent.image_routing._supports_vision_override``): 1. ``model.supports_vision`` (top-level, single-model shortcut) 2. ``providers..models..supports_vision`` 3. models.dev capability lookup Custom/local models absent from models.dev would otherwise be misclassified as non-vision and have their images stripped. rrp)_lookup_supports_visionrgrkrTF)rurqagent.image_routingrrrr)rrqrrrgrs r_model_supports_visionzAIAgent._model_supports_visions  5 5 5 5 5 5 C C C C C C+--Cj"55;BBDDHT7B//52<<>>E**8UC@@DH H   55 sA.A11 A?>A?c ddlm}t|ddpd}||}|t|ddSn#t$rYnwxYwdS)a/Return True if the active provider accepts list-type tool content. Some providers (e.g. Xiaomi MiMo) support multimodal user messages but reject list-type tool message content with 400 errors. This checks the provider profile's ``supports_vision_tool_messages`` field. rrrgrkNsupports_vision_tool_messagesT)rrrrr)rrrgprofiles r'_provider_supports_vision_tool_messagesz/AIAgent._provider_supports_vision_tool_messagess  6 6 6 6 6 6j"55;BBDDH**844G"w(GNNN#    D tsAA AAc||s|Sg}g}|D]}t|tr<|r'||Tt|t sj|d}|dvrOt|ddpd}|r|||dvr|di}t|t r|ddnt|pd} | r*||| |n|dkt|ddpd}|r||d d |D} d d |D} | r | r| d | S| r| S| r| Sd S)Nr>rj input_textrjrk>rlrmrlrz:[An image was attached but no image source was available.]r;c3K|]}||V dSrr)rrs rr$z8AIAgent._preprocess_anthropic_content..s'BBdTBTBBBBBBrfrnc3K|]}||V dSrr)rrjs rr$z8AIAgent._preprocess_anthropic_content..s'??D$?4??????rfzI[A multimodal message was converted to text for Anthropic compatibility.]) r[rrorrvrrrr{) rr r text_parts image_notesr(rrj image_datarlrrbs r_preprocess_anthropic_contentz%AIAgent._preprocess_anthropic_contentsy,,W55 N " !#  ( (D$$$ ::<<4%%djjll333dD)) HHV$$E...488FB//5266<<>>,%%d+++444!XXk266 9CJPT9U9UpJNN5"555[^_i_omo[p[p e&&t'R'RS\^b'c'cdddd&&'cdddtxx++1r2288::D (!!$'''BBkBBBBBHHJJ??J?????EEGG  +f +**&** *  M  MZZrfc|p|j}t|dd}| i}||_||}|ddlm}||}|||<|S)zReturn the cached transport for the given (or current) api_mode. Lazy-initializes on first call per api_mode. Returns None if no transport is registered for the mode. _transport_cacheNr) get_transport)rrrragent.transportsr)rrrcacherKrs r_get_transportzAIAgent._get_transport'sw (4=0$77 =E$)D ! IIdOO 9 6 6 6 6 6 6 d##AE$Krf api_messagesc jtfd|Ds|Sr|Stj|}|D]g}t |t s|dt|ddpd|d<h|S)Nc3K|]A}t|to'|dVBdSr Nrrr[rrrrs rr$z>AIAgent._prepare_anthropic_messages_for_api..;`   sD ! ! Wd&C&CCGGIDVDV&W&W      rfr rrW r&rrdeepcopyrrrrrorr transformedrs` r#_prepare_anthropic_messages_for_apiz+AIAgent._prepare_anthropic_messages_for_api9s    #         & & ( (  mL11   Cc4(( !?? ""CGGFF++5v66C NNrfc jtfd|Ds|Sr|Stj|}|D]g}t |t s|dt|ddpd|d<h|S)aStrip native image parts when the active model lacks vision. Runs on the chat.completions / codex_responses paths. Vision-capable models pass through unchanged (provider and any downstream translator handle the image parts natively). Non-vision models get each image replaced by a cached vision_analyze text description so the turn doesn't fail with "model does not support image input". c3K|]A}t|to'|dVBdSrrrs rr$zAAIAgent._prepare_messages_for_non_vision_model..^rrfr rrWrrs` r&_prepare_messages_for_non_vision_modelz.AIAgent._prepare_messages_for_non_vision_modelUs    #         & & ( (  mL11   Cc4((  "?? ""CGGFF++5v66C NNrfc Ht|s|S|dpg}||s|S|r|s:t d|t|ddt|St|ddpd t|ddpd f}t|dd}|r<||vr8t d||d |d t|S|St|}|d krtj d |d St d||j|j|S)aReturn the tool message content that is safe for the active model. Multimodal tool results normally unwrap to OpenAI-style content parts so vision-capable models can inspect screenshots. Text-only providers must not receive those image parts, because a rejected tool result becomes part of the canonical history and can make the next user turn fail before the agent has a chance to recover. r uTTool %s: provider %s does not accept list-type tool content — sending text summaryrgrkr_no_list_tool_content_modelsNuaTool %s: model %s/%s known to reject list-type tool content this session — sending text summaryrrm computer_usezcomputer_use returned screenshot/image content, but the active model/provider does not support image input. Switch to a vision-capable model for desktop computer use, or use browser tools for browser tasks.)r text_summaryzWTool %s returned image content for non-vision model %s/%s; falling back to text summary)rTrr[rrrrrrUrrrrrrgr)rrur_r rnno_listrs r%_tool_result_content_for_active_modelz-AIAgent._tool_result_content_for_active_modelus*&11 M**Y''-2,,W55 N  & & ( (  ??AA 8 7wtZ<< 0777z2..4";;==CCEEw++1r88::Cd$BDIIG 83'>> Ds1vs1v 0777N*622  & &:/ !(   +  M J    rfc$ddlm}||S)uXForwarder — see ``agent.conversation_compression.try_shrink_image_parts_in_messages``.r)"try_shrink_image_parts_in_messages)rr)rrrs r#_try_shrink_image_parts_in_messagesz+AIAgent._try_shrink_image_parts_in_messagess%UUUUUU11,???rfcPt|tsdSt|ddpdt|ddpdf}t |dst |_|dr|j|d}|D]g}t|tr| ddkr2| d }t|ts]g}d}|D]}t|tsQt|tr;|r'| |h| d } | d ks| d krd }| dvrMt| dpd} | r| | |sE|rd ||d <nd|d <d }i|S)uDowngrade list-type tool messages to text summaries in-place. Recovery path for providers that reject list-type tool message content (e.g. Xiaomi MiMo's 400 "text is not set"; see issue #27344). Walks ``api_messages`` for any ``role: "tool"`` message whose ``content`` is a list containing image parts, replaces the content with the existing text part(s) (or a minimal placeholder if none survive), and records the active (provider, model) in ``self._no_list_tool_content_models`` so subsequent ``_tool_result_content_for_active_model`` calls in this session preemptively downgrade screenshots without a round-trip. Returns True when at least one tool message was downgraded — the caller (the 400 recovery branch in ``agent.conversation_loop``) uses this to decide whether to retry the API call with the modified history or surface the original error. Frgrkrrrmrr#r rrlrmT>rjrrjr;uS[image content removed — provider does not accept list-type tool message content])rrrrrrrrrErrrorvr{) rrrnchangedrr r had_imager(rrjs r)_try_strip_image_parts_from_tool_messagesz1AIAgent._try_strip_image_parts_from_tool_messagessM",-- 5T:r * * 0b 7 7 9 9 ? ? A A T7B ' ' -2 4 4 6 6 t;<< 603D - q6 7  - 1 1# 6 6 6' ' Cc4(( CGGFOOv,E,Eggi((Ggt,, %'JI 0 0!$--!$,,88"))$**,,777((K''5M+A+A $I222txx//5266<<>>D0"))$///   !'Z!8!8I6IGGrfct|ddpddvrdSt|ddpd}d|vpd|vpd|vpd |vp d |vpd |vpd |vS) aTrue when using an anthropic-compatible endpoint that preserves dots in model names. Alibaba/DashScope keeps dots (e.g. qwen3.5-plus). MiniMax keeps dots (e.g. MiniMax-M2.7). Xiaomi MiMo keeps dots (e.g. mimo-v2.5, mimo-v2.5-pro). OpenCode Go/Zen keeps dots for non-Claude models (e.g. minimax-m2.5-free). ZAI/Zhipu keeps dots (e.g. glm-4.7, glm-5.1). AWS Bedrock uses dotted inference-profile IDs (e.g. ``global.anthropic.claude-opus-4-7``, ``us.anthropic.claude-sonnet-4-5-20250929-v1:0``) and rejects the hyphenated form with ``HTTP 400 The provided model identifier is invalid``. Regression for #11976; mirrors the opencode-go fix for #5211 (commit f77be22c), which extended this same allowlist.rgrk> minimax-cn opencode-go opencode-zenrxiaomialibabarminimaxTrh dashscopealiyuncsrzopencode.ai/zen/z bigmodel.cnxiaomimimo.comzbedrock-runtime.)rr)rbases r_anthropic_preserve_dotsz AIAgent._anthropic_preserve_dotss D*b ) ) /R 6 6 8 8=   4j"--3::<< 4  *T! *D  *"T) *$  *  4'  *"T) rfc,t|jdS)z2Return True when the base URL targets Qwen Portal.rrrs r_is_qwen_portalzAIAgent._is_qwen_portal%s$T%9;KLLLrfctj|}|s|S|D]}t|ts|d}t|t r d|dg|d<Lt|t rfg}|D]Z}t|t r|d|d0t|tr||[|r||d<|D]}t|tro|ddkrV|d}t|t r*|r(t|dtr ddi|dd <n|S) Nr rjrrjrrzrr ephemeral cache_control)rrrrrrorrv)rrpreparedrr normalized_partsr(s r_qwen_prepare_chat_messagesz#AIAgent._qwen_prepare_chat_messages)s=.. O 6 6Cc4(( ggi((G'3'' 6+17"C"C!DIGT** 6$& #66D!$,,6(//0N0NOOOO#D$//6(//555#6%5C N  C#t$$ H)D)D''),,gt,,IIZPR UY=Z=ZI4:K3HGBK0rfc|sdS|D]}t|ts|d}t|tr d|dg|d<Lt|trfg}|D]Z}t|tr|d|d0t|tr||[|r||d<|D]}t|trp|ddkrW|d}t|tr*|r(t|dtr dd i|dd <dSdS) u<In-place variant — mutates an already-copied message list.Nr rjrrrzrrrr)rrrrorrv)rrrr rr(s r#_qwen_prepare_chat_messages_inplacez+AIAgent._qwen_prepare_chat_messages_inplaceJs  F 6 6Cc4(( ggi((G'3'' 6+17"C"C!DIGT** 6#% #66D!$,,6(//0N0NOOOO#D$//6(//555#6%5C N  C#t$$ H)D)D''),,gt,,IIZPR UY=Z=ZI4:K3HGBK0   rfc&ddlm}|||S)uEForwarder — see ``agent.chat_completion_helpers.build_api_kwargs``.r)build_api_kwargs)rr)rrrs r_build_api_kwargszAIAgent._build_api_kwargsfs'BBBBBBl333rfcHt|jdrdSt|jdst|jdr5 ddlm}t ||jS#t $rYdSwxYw|jpd d kr-| }td |DSd |jvrdSd |jvrdS|jpd d }tfd|DS)a3Return True when reasoning extra_body is safe to send for this route/model. OpenRouter forwards unknown extra_body fields to upstream providers. Some providers/routes reject `reasoning` with 400s, so gate it to known reasoning-capable model families and direct Nous Portal. znousresearch.comTzmodels.github.airrgithub_model_reasoning_effortsFrkr7c3&K|] }|o|dkV dS)rnNr)ropts rr$z9AIAgent._supports_reasoning_extra_body..s+<<s+se|<<<<<.s1SS5##F++SSSSSSrf) r[rr<rrrrrgrr"_lmstudio_reasoning_options_cachedr&)rroptsreasoning_model_prefixesrs @r_supports_reasoning_extra_bodyz&AIAgent._supports_reasoning_extra_bodykse !!57I J J 4 !$"68J K K $T%9;RSS  LLLLLL::4:FFGGG   uu  M R & & ( ( . . 0 0J > >::< NNNrfc$|j|jt|d|jf}t|dd}||d|kr|dS|p'|p|}||f|_|S)u Return True when the active provider enforces reasoning_content echo-back. DeepSeek v4 thinking and Kimi / Moonshot thinking both reject replays of assistant tool-call messages that omit ``reasoning_content`` (refs #15250, #17400). Xiaomi MiMo thinking mode has the same requirement. Result cached on the AIAgent instance keyed by (provider, model, base_url); invalidated whenever ``switch_model()`` / ``_try_activate_fallback()`` mutate any of those. This is hot — the agent loop hits ~16 invocations per turn, each of which would otherwise re-run ~5 ``base_url_host_matches`` (and therefore ``urlparse``) calls under it. Caching drops the per-turn cost from ~5us × 16 = ~80us to <1us. r_thinking_pad_cacheNrrm)rgrrrh_needs_deepseek_tool_reasoning_needs_kimi_tool_reasoning_needs_mimo_tool_reasoningr)rrnrr_s r_needs_thinking_reasoning_padz%AIAgent._needs_thinking_reasoning_pads}dj'$8I4=*Y*YZ4d;;  &)s"2"2!9   / / 1 1 1..00 1..00  %(=  rfc|jdvp>t|jdp)t|jdpt|jdS)aReturn True when the current provider is Kimi / Moonshot thinking mode. Kimi ``/coding`` and Moonshot thinking mode both require ``reasoning_content`` on every assistant tool-call message; omitting it causes the next replay to fail with HTTP 400. Detection is host-driven, not model-name-driven: aggregators like OpenRouter that re-export Kimi/Moonshot models speak their own protocol and reject ``reasoning_content`` echoes. We only enable the kimi-reasoning replay when the request actually targets a kimi/moonshot endpoint or the dedicated kimi-coding provider. > kimi-codingkimi-coding-cnrz moonshot.aiz moonshot.cn)rgr[rhrs rrz"AIAgent._needs_kimi_tool_reasoningsU M> > C$T]NCC C$T]MBB C%T]MBB  rfc|jpd}|jpd}|dkpd|vpt|jdS)aReturn True when the current provider is DeepSeek thinking mode. DeepSeek V4 thinking mode requires ``reasoning_content`` on every assistant tool-call turn; omitting it causes HTTP 400 when the message is replayed in a subsequent API request (#15250). rkdeepseekzapi.deepseek.comrgrrr[rhrrgrs rrz&AIAgent._needs_deepseek_tool_reasoningseM'R..00!r((**  " HU" H$T]4FGG rfc|jpd}|jpd}|dkp-d|vp)t|jdpt|jdS)aMReturn True when the current provider is Xiaomi MiMo thinking mode. MiMo thinking mode requires ``reasoning_content`` on every assistant tool-call message when replaying history; omitting it causes HTTP 400. Refs: https://platform.xiaomimimo.com/docs/zh-CN/usage-guide/passing-back-reasoning_content rkrmimozapi.xiaomimimo.comrrrs rrz"AIAgent._needs_mimo_tool_reasoning's|M'R..00!r((**   F F$T]4HII F%T]4DEE  rf source_msgapi_msgc(ddlm}||||S)uQForwarder — see ``agent.agent_runtime_helpers.copy_reasoning_content_for_api``.r)copy_reasoning_content_for_api)rFr)rrrrs r_copy_reasoning_content_for_apiz'AIAgent._copy_reasoning_content_for_api7s)NNNNNN--dJHHHrfc&ddlm}|||S)uVForwarder — see ``agent.agent_runtime_helpers.reapply_reasoning_echo_for_provider``.r)#reapply_reasoning_echo_for_provider)rFr )rrr s r$_reapply_reasoning_echo_for_providerz,AIAgent._reapply_reasoning_echo_for_provider<s'SSSSSS224FFFrfz str | Nonec|d}t|ts|Sddlm}ddh||sdhzfd|D|d<|S)uYStrip Codex Responses API fields from tool_calls for strict providers. Providers like Mistral, Fireworks, and other strict OpenAI-compatible APIs validate the Chat Completions schema and reject unknown fields (call_id, response_item_id) with 400 or 422 errors. These fields are preserved in the internal message history — this method only modifies the outgoing API copy. ``extra_content`` (Gemini thought_signature) is also stripped — strict providers reject it with "Extra inputs are not permitted" — UNLESS the outgoing ``model`` is itself Gemini-family, in which case it must be replayed (Gemini 3 thinking models 400 without it). Defaults to stripping when no model is supplied. Creates new tool_call dicts rather than mutating in-place, so the original messages list retains call_id/response_item_id for Codex Responses API compatibility (e.g. if the session falls back to a Codex provider later). Fields stripped: call_id, response_item_id, extra_content (model-gated) r%r)!_model_consumes_thought_signaturer%rV extra_contentc~g|]9}t|tr fd|Dn|:S)c$i|] \}}|v || Srr)rrr _STRIP_KEYSs rrzJAIAgent._sanitize_tool_calls_for_strict_api...`s) A A AdaA[,@,@Q,@,@,@rf)rrr)rrsrs rrtz?AIAgent._sanitize_tool_calls_for_strict_api.._s_! ! ! "d## , A A A Abhhjj A A A A)+! ! ! rf)rrr!agent.transports.chat_completionsr )rrr%r rs @r#_sanitize_tool_calls_for_strict_apiz+AIAgent._sanitize_tool_calls_for_strict_apiAs.[[.. *d++ NWWWWWW "45 0077 :%(99K! ! ! ! !! ! !   rfrrc*ddlm}||||S)uOForwarder — see ``agent.agent_runtime_helpers.sanitize_tool_call_arguments``.r)sanitize_tool_call_argumentsr)rFr)rrrrs r_sanitize_tool_call_argumentsz%AIAgent._sanitize_tool_call_argumentsfs0 MLLLLL++HVPZ[[[[rfc|jdkS)aDetermine if tool_calls need sanitization for strict APIs. Codex Responses API uses fields like call_id and response_item_id that are not part of the standard Chat Completions schema. These fields must be stripped when calling any other API to avoid validation errors (400 Bad Request). Returns: bool: True if sanitization is needed (non-Codex API), False otherwise. r)rrs r_should_sanitize_tool_callsz#AIAgent._should_sanitize_tool_callsqs} 111rfr approx_tokensr2 focus_topicrQrrc 2ddlm}||||||||S)u:Forwarder — see ``agent.conversation_compression.compress_context``. ``force=True`` is passed by the manual ``/compress`` slash command so users can bypass the summary-failure cooldown after an auto-compress abort. Auto-compress callers use the default ``force=False``. r)compress_contextr)rr)rrrrr2rrQrs r_compress_contextzAIAgent._compress_context~sB DCCCCC (N'k    rfdecisionc8|jr|j ||_dSdSdS)z?Record the first guardrail decision that should stop this turn.N) should_halt_tool_guardrail_halt_decisionrrs r_set_tool_guardrail_haltz AIAgent._set_tool_guardrail_halts3   :D$F$N19D . . . : :$N$Nrfc@|jpd}d|d|jd|jdS)Nza toolzI stopped retrying z) because it hit the tool-call guardrail (z) after z repeated non-progressing attempts. The last tool result explains the blocker; the next step is to change strategy instead of repeating the same call.)rurcount)rrr#s r#_toolguard_controlled_halt_responsez+AIAgent._toolguard_controlled_halt_responsesP!-X E$ E E  E E'/~ E E E rf function_argsfunction_resultc|j||||}|jdvrt||}|jr|||S)N)r>haltrh)_tool_guardrails after_callactionrJr!r$)rrur(r)rrs r_append_guardrail_observationz%AIAgent._append_guardrail_observationsq(33    4   ?. . .7RRO   4  ) )( 3 3 3rfcJ||t|Sr)r$rKr#s r_guardrail_block_resultzAIAgent._guardrail_block_results$ %%h///)(333rfeffective_task_idc|j}d|_ t|s|||||d|_S|||||d|_S#d|_wxYw)a=Execute tool calls from the assistant message and append results to messages. Dispatches to concurrent execution only for batches that look independent: read-only tools may always share the parallel path, while file reads/writes may do so only when their target paths do not overlap. TF)r%rVrP_execute_tool_calls_sequential_execute_tool_calls_concurrent)rr'rr2rr%s r_execute_tool_callszAIAgent._execute_tool_callss'1 !% *1*== ::%x1BN%*D ! ! 66!8->%*D ! !ED ! ) ) ) )s&AA A&c fddlm}||d|d|d|d|d|d|d |d | S) zSingle call site for delegate_task dispatch. New DELEGATE_TASK_SCHEMA fields only need to be added here to reach all invocation paths (concurrent, sequential, inline). r)r<goalcontexttoolsetstasksrrrr) r8r9r:r;rrrr parent_agent)r=r<r)rr(_delegate_tasks r_dispatch_delegate_taskzAIAgent._dispatch_delegate_tasks HGGGGG~""6**!%%i00"&&z22##G,,(,,-=>>%))-88"&&z22""6**    rf function_namepre_tool_block_checkedskip_tool_request_middlewaretool_request_middleware_tracec 4ddlm} | ||||||||| S)u>Forwarder — see ``agent.agent_runtime_helpers.invoke_tool``.r) invoke_tool)rFrD) rr?r(r2rPrr@rArBrDs r _invoke_toolzAIAgent._invoke_toolsE <;;;;;{       " ( )   rf labelr6cddl}ddl}|dj}t d|t |z }g}|dD]\}t ||kr||+|||dd} | | p|g]d|z |} ||| S) aFWord-wrap verbose tool output to fit the terminal width. Splits *text* on existing newlines and wraps each line individually, preserving intentional line breaks (e.g. pretty-printed JSON). Returns a ready-to-print string with *label* on the first line and continuation lines indented. rN)xrErnTF)widthbreak_long_wordsbreak_on_hyphens) shutiltextwrapget_terminal_sizecolumnsr=rqrrvwraprr{) rGrjr6_shutil_twcols wrap_width out_linesraw_linewrappedrs r _wrap_verbosezAIAgent._wrap_verboses !   ((33;TCKK/00 !  4(( 8 8H8}} **  ****((8:4849#;;  !6XJ7777v ##I..'%''''rfc,ddlm}||||||S)uHForwarder — see ``agent.tool_executor.execute_tool_calls_concurrent``.r)execute_tool_calls_concurrent)agent.tool_executorr\)rr'rr2rr\s rr5z&AIAgent._execute_tool_calls_concurrent 0EEEEEE,,T3DhPacqrrrrfc,ddlm}||||||S)uHForwarder — see ``agent.tool_executor.execute_tool_calls_sequential``.r)execute_tool_calls_sequential)r]r`)rr'rr2rr`s rr4z&AIAgent._execute_tool_calls_sequentialr^rfc(ddlm}||||S)uJForwarder — see ``agent.chat_completion_helpers.handle_max_iterations``.r)handle_max_iterations)rrb)rrrrbs r_handle_max_iterationszAIAgent._handle_max_iterationss)GGGGGG$$T8^DDDrfstream_callbackpersist_user_messagec 0ddlm}||||||||S)u?Forwarder — see ``agent.conversation_loop.run_conversation``.rrun_conversation)agent.conversation_looprh)rr*rr[r2rdrerhs rrhzAIAgent.run_conversationsD =<<<<<lNDXZacruIJJ Jrfc@|||}|dS)a Simple chat interface that returns just the final response. Args: message (str): User message stream_callback: Optional callback invoked with each text delta during streaming. Returns: str: Final assistant response )rdrrg)rrrdr_s rchatz AIAgent.chat%s(&&w&PP&''rf)should_review_memoryrlc0ddlm}|||||||S)uDForwarder — see ``agent.codex_runtime.run_codex_app_server_turn``.r)run_codex_app_server_turn)r*rrr2rl)rrn)rr*rrr2rlrns r_run_codex_app_server_turnz"AIAgent._run_codex_app_server_turn3sQ BAAAAA((L`uAI]nEYZZZ Zrf)ENNNNNNNNrkrrNNFFFrNrrkNNNNFNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNFFFNNNNNFrrrF)r N)NNFr)rkrkrk)FF)r)rk)NN)NNFFN)rF)NNNNN)rrrr&_TOOL_CALL_ARGUMENTS_CORRUPTION_MARKERpropertyrorhsetterrrrrrrrrrrrrr#r4rCrErOrWr^r`rerirlrqryr}rrrrr_STREAM_DIAG_HEADERS staticmethodrr BaseExceptionrrrrrrrrrrrrrrrrrrrrrrr rr rrr)r.r1r5r=r6r7r8r>rLrSrZrar]rhr`rrrrrrrrrrrrrr classmethodrrrr rrr"r%r)r_rNrYr\r^rir|rcompilerrrrrrrrrrrrrrrrrrrrrrrr r#r(r* frozenset_VALID_API_ROLESr.r5r8rCrHrKrNrFrGrEr^r`rGrcrermrrrr rrrrrrrrrrrrrrrrrr,rr r rrr,r$r/r3r8r@rBrErUrJrMrRrUrYr[rnrrrrrrrrrrrrrrrrrrrrrrrrrr rrrrrIr$r'r/r1r6r>rErZr5r4rcrhrkrorrfrrr@s, O+ #X_;c;d;;;_;%)!% &*'+"' % "''+ #'+'+%)!,1(,7;+/(,+/&*'+%)+/"&*./3&*$($(*.+/ ,015#'#(#(!!%.2)-$)(*,/+- %MQ Q Q Q  Q  Q  Q s)d"Q Q 3i$Q Q Q Q s)Q  9Q  Q !Q "#Q $ %Q &"%'Q ()Q *+Q , 9-Q . 9/Q 0c1Q 23Q 4&*5Q 6#&7Q 8&.e_9Q :;Q <!)=Q >&?Q @!)AQ B$CQ D%EQ F#GQ H!)IQ J KQ L (MQ N%-OQ P$QQ R"SQ T"UQ V (WQ XYQ ZsCx.[Q \]Q ^ S>_Q `tCH~.aQ bcQ deQ fgQ hiQ jkQ lmQ noQ pqQ r!sQ t!uQ v!wQ xyQ |}Q ~,Q @S#XAQ D"EQ F#&GQ H'*IQ J&)KQ LMQ Q Q Q f&6)-(,,0#(!CiCiCi! Ci! Ci $D> Ci ! CiCi CiCiCiCiN-1(,#( 2 2 #D>2 ! 2 ! 2 2 2 2 h??Xc]?^b????BXXXX $,1***D****6T&  $     UCUDUUUU(VSVTVVVV" U U U Uacadaaaa&cd( c d    848HH4S#X/0H c3hHHHHFNMMMMM"tCH~"""\" @cN@36@ @@@@. .#...\. 3]3t33334*.           tCH~&      0*.          tCH~&      EC Em E E E E E tCH~    2222 )))) ,,c,T,,,,))S)D)))) 33s3d3333>E>>>>(uUD[7I8SU*2 2 Xc]2 hsm2 2 2 2 hLDLLLL#'"&"&# y y y3- y3- y 3- y } y tTz  y y y y %S %T % % %\ %#'<<<<3-<  <<<\<*%s%t%%%%0 # (3-   \ %c%d%%%%.13131111 cd\&HHHHH$( CCC4. C  CCCC>bbbtCH~& b  bbbb:x}:::: 5s5t5555 TdTT T cTTT\T$# :   6'++/!%&*    sm $C=  #  sm   c3h    $*T$Z*D****$ K Kd K4PT: K K K K3$t*3QU3333j7d77777 9F9Fd4j9FX\]aXb9F9F9F9Fv-4:-$t*---->5#5555 Sd4S>6JSX[ShlSquvz{~AD|DwErFSSSS Dd38n)= D3 D[_ D D D DAS#X/Ac]A AAA\AF6!6!6!6!6!\6!p+OI+O#+O+O+O\+OZ )# )(3- ) ) ) )cc40)0S#X000\0 CHTRUWZRZ^D\ S\ @C @D @ @ @\ @ g'g'g'g' g'  g'  g'g' g'g'g'[g'R 3 3   [ ,  c3h8P  UYZ]_bZbUc         }  c3h     N&*%)%)$( $6666 6  6  66T#s(^,666c]6c]6c]6D>6 6 !6666z&* T T TcN T T  " T $ T T T T\\:SDSD$tCH~*>SDSDSDSDlBVBVBVBVBVBVBVH++++B"#"$""""Hhsm %&%&38n%& %&  %&  %&%&%&%&NF!bjPOJCJCJJJ[J &>$sDcN?R:S&>X[&>&>&>[&>PD6ZcZcZZZ\ZxRTRRURZ^RRRR CD,#$&&&&O%cO%dO%O%O%O%b#S#S#S#SJ$.###YYY CD, d    $6dd>!% ;;; #; ;  ; + ; ;;;;z----^AAAAF4S#X+?D@))))X)NNNSRUXNNNN HH3H#HHHH IIII\I -#---\- !y!a!a!abb/d38n)=/$tCQTH~BV///\/ 3c3h3D333\3j<tCH~&< d38n <<<\<Td\<GDGTGGG\G"1313:1111 ''' GGGGCGPSGGG\G66x}hsm7S1T666\6+/SSS#3-S SSSS/#//// S    Y_\:sC\0W4WCWQUWZ]WWWW /////\/ 33QU0"ss .4.... AA$AAA\A4PP$PPPP Z^WWWsWQUWbeWWWW4G3G3G4GGGG334BJJDJ#JV^JJJJ JJDJ#JJJJ FJHHHdHdHHHHZ$$$$  $$$$L!!!!!F141111f++3++4++++++++Z<<<<<JJJJF7;26 n n nc] n n $N3 n  S#X/ n tTz  n n n n $ $ $ $ $ DT D D D D48$8888'3'3'3'3RCD1c1c111\1 >S >T > > > > LT#s(^ LPT L L L L37s37t37373737j#$       t    ?Caaaa3;aaaa33-D3PT3333 "t " " " "-$---- p"p47pFIp pppp#$\CE#xPT~BU2 J  J "(+ J'sm J c3h J J J J ( (C ((82D (PS ( ( ( (*&+ Z Z Z Z # Z tCH~& Z  Z# Z c3h Z Z Z Z Z ZrfrrkrFrqueryrr max_turnsrr list_toolsr save_sampleverboserc  tdtd|rddlm} m} ddlm}m}tdtdtdtd |}g}g}g}|D]_\}}||}|rM||f}|d vr||0|d vr||J||`td |D]X\}}|d rd |d nd}td|dd|dtd|Ytd|D]p\}}|drd |dnd}td|dd|dtd|td|dqtd|D]9\}}td|dd|dtd|d:td| }|D]b\}}|drdnd}td |d!|d"|d|ds+td#d |d$c| }td%t|d&t|D]'}t|}td'|d(|d)(td*td+td,td-td.td td/td0td td1td2td td3td4d5Sd5}d5}|r1d6| d7D}td8||r1d9| d7D}td:||r-td;td<td= t|||||||| | > } n*#t$r}!td?|!Yd5}!~!d5Sd5}!~!wwxYw|d@}"n|}"tdA|"tdB| |"}#tdBtdCtdtdD|#dEtdF|#dGtdHt|#dI|#dJr3tdKtdLt|#dJ| rt#t%jd5dM}$dN|$dO}%| |#dI|"|#dE}&|&t+j||#dE|"dP} t1|%dQdRS5}'|'t5j|dTdUVd5d5d5n #1swxYwYtdW|%n)#t8$r}!tdX|!Yd5}!~!nd5}!~!wwxYwtdYd5S)Za Main function for running the agent directly. Args: query (str): Natural language query for the agent. Defaults to Python 3.13 example. model (str): Model name to use (OpenRouter format: provider/model). Defaults to anthropic/claude-sonnet-4.6. api_key (str): API key for authentication. Uses OPENROUTER_API_KEY env var if not provided. base_url (str): Base URL for the model API. Defaults to https://openrouter.ai/api/v1 max_turns (int): Maximum number of API call iterations. Defaults to 10. enabled_toolsets (str): Comma-separated list of toolsets to enable. Supports predefined toolsets (e.g., "research", "development", "safe"). Multiple toolsets can be combined: "web,vision" disabled_toolsets (str): Comma-separated list of toolsets to disable (e.g., "terminal") list_tools (bool): Just list available tools and exit save_trajectories (bool): Save conversation trajectories to JSONL files (appends to trajectory_samples.jsonl). Defaults to False. save_sample (bool): Save a single trajectory sample to a UUID-named JSONL file for inspection. Defaults to False. verbose (bool): Enable verbose logging for debugging. Defaults to False. log_prefix_chars (int): Number of characters to show in log previews for tool calls/responses. Defaults to 20. Toolset Examples: - "research": Web search, extract, crawl + vision tools u🤖 AI Agent with Tool Callingz2==================================================r)get_all_tool_namesget_available_toolsets)get_all_toolsetsget_toolset_infou 📋 Available Tools & Toolsets:z2--------------------------------------------------u' 🎯 Predefined Toolsets (New System):z(---------------------------------------->webvisioncreativeterminalrv>rrresearch full_stack developmentcontent_creationu 📌 Basic Toolsets:resolved_toolsz, r&u • rz - rz Tools: u5 📂 Composite Toolsets (built from other toolsets):includesz Includes: z Total tools: tool_countu! 🎭 Scenario-Specific Toolsets:20u3 📦 Legacy Toolsets (for backward compatibility): availableu✅u❌z rrz Requirements: requirementsu 🔧 Individual Tools (z available):u 📌 z (from rvu 💡 Usage Examples:z # Use predefined toolsetszR python run_agent.py --enabled_toolsets=research --query='search for Python news'zN python run_agent.py --enabled_toolsets=development --query='debug this code'zP python run_agent.py --enabled_toolsets=safe --query='analyze without terminal'z # Combine multiple toolsetszM python run_agent.py --enabled_toolsets=web,vision --query='analyze website'z # Disable toolsetszQ python run_agent.py --disabled_toolsets=terminal --query='no command execution'z& # Run with trajectory saving enabledzF python run_agent.py --save_trajectories --query='your question here'Nc6g|]}|SrrrrKs rrtzmain..s P P Pq P P Prfr]u🎯 Enabled toolsets: c6g|]}|Srrrs rrtzmain..s !R!R!R!''))!R!R!Rrfu🚫 Disabled toolsets: u💾 Trajectory saving: ENABLEDu: - Successful conversations → trajectory_samples.jsonlu7 - Failed conversations → failed_trajectories.jsonl) rhrrrrrrrru ❌ Failed to initialize agent: zTell me about the latest developments in Python 3.13 and what new features developers should know about. Please search for current information and try it out.u 📝 User Query: z3 ==================================================u📋 CONVERSATION SUMMARYu✅ Completed: ru📞 API Calls: api_callsu💬 Messages: rru 🎯 FINAL RESPONSE:z------------------------------r_sample_r-) conversations timestamprrrzwr.r/Fr5)rr6u" 💾 Sample trajectory saved to: u ⚠️ Failed to save sample: u 👋 Agent execution completed!)rK model_toolsrrr:rrrrvr{rqsortedr%rrrrhrouuiduuid4rrr=r<openrrrr)(rzrrrhr{rrr|rr}r~rrrrr all_toolsetsbasic_toolsetscomposite_toolsetsscenario_toolsetsrFtoolsetrrA tools_str includes_strlegacy_toolsetsrt all_toolsruenabled_toolsets_listdisabled_toolsets_listagentrrr_ sample_idsample_filenamerfs( rmainr@sH +,,, (OOOPJJJJJJJJ???????? 0111 h 8999 h'')) )//11 4 4MD'##D))D 4t QQQ"))%0000fff&--e4444%,,U333 &'''( - -JD$=ABR=S_ $'7"8999Y_I <4<<z:JV499T*%5666PVL <4<< > > $ NL499T.5I+J+JLLMMM'&((  F#i..FFFGGG ** : :I*955G 8I88g888 9 9 9 9 &''' +,,, bccc ^___ `aaa d  -... ]^^^ d  $%%% abbb d  6777 VWWW!!A P P4D4J4J34O4O P P P ?(=??@@@C!R!R5F5L5LS5Q5Q!R!R!R A)?AABBBI /000 JKKK GHHH$24/#-      444555  } b    , , ,--- / # #J / /F / %&&& (OOO 1F;/ 1 1222 2VK0 2 2333 5Cz 233 5 5666 ( &''' h f%&''': %%bqb) 4I44488 :   ;   (!1133 ,    :osW=== I 5uQGGGHHH I I I I I I I I I I I I I I I III J J J J : : : 8Q88 9 9 9 9 9 9 9 9 : -.....sTR!! S+SS Z2+Z Z2ZZ2ZZ22 [<[[__main__) NrkNrkrNNFFFFr)rhermes_bootstrapModuleNotFoundErrorrzrgrrtrr; getLoggerrrrrrZrerrGrtypingrrrrrpathlibrtypesr hermes_constantsr roragent.process_bootstraprrragent.iteration_budgetrhermes_cli.env_loaderrhermes_cli.timeoutsr r! _hermes_home__file__parent _project_env_loaded_env_paths _env_pathrrr$r%r&r'tools.terminal_toolr(tools.interruptr)rJtools.browser_toolr*agent.memory_managerr+agent.error_classifierr, agent.redactr-r;r.r/agent.usage_pricingr0agent.context_compressorr1agent.retry_utilsr2agent.prompt_builderr3r4r5r6r7r8r9agent.message_sanitizationr:r;r<r=r>r?r@rArBrCrDagent.codex_responses_adapterrErXrFrRrGrUrHagent.tool_guardrailsrIrJrK agent.tool_result_classificationrLrdrMagent.trajectoryrNrOragent.tool_dispatch_helpersrPrQrRrSrTrUrVrWrXrYutilsrZr[r\r]r^_MAX_TOOL_WORKERSEvent_openrouter_prewarm_doneryrrerrtr~rrrrrfireFirerrfrrs.     D      8 $ $   ,,,,,,,,,,,,!!!!!!,,,,,,CHSM< 322222544444   tH~~$v- &&<\ZZZK&GG  :IFFFFG KKIJJJ +*****;;;;;;......211111111111......0/////666666......877777                                                    CCCCCCCCCCCCCC +9?,,T%) # # #Tz #47$J #  # # # #F d    $ $ $ $ $ $ $ $ N~KZ~KZ~KZ~KZ~KZ~KZ~KZ~KZBX !#S/S/ S/ S/S/ S/  S/  S/S/S/S/S/S/S/S/S/S/l zKKK DIdOOOOOs