)j0 UdZddlZddlZddlZddlZddlZddlZddlZddlZ ddl Z ddl Z ddl Z ddl Z ddlmZmZddlmZddlmZejeZehdZeddhZed d hZd Zd efd Zdeded efdZ ddedzd e!dzfdZ"d edzfdZ#ddede$d e$fdZ%ded e&fdZ'dede&d efdZ(dede&d e&fdZ)ded e$fdZ*d edzfd Z+d!ed e,ee&dzffd"Z-d e.efd#Z/dd$eded%e&dzd e$fd&Z0d'ee.eze,ed(fze1ezdzd e$fd)Z2 ddd*d+edzd'ee.eze,ed(fze1ezdzd edzfd,Z3d-edzd e!fd.Z4d-edzd e,e!e!ffd/Z5dd0ed1edzd e$fd2Z6ddl7Z7dd3l7m8Z8m9Z9dd4l:m:Z:dd5l;mZ>m?Z?m@Z@mAZAmBZBmCZCmDZDmEZEdd7lFmGZGdd5l;med?e&d efd@ZYdAZZeVdBdCZ[d eededIe&d efdJZ`ddLe&d e&fdMZaeVdNdOZbd eededIe&d efdRZeeVdSdTZfdUdVdWdXdYdZZgd eeefdedede$d df dʄZdZeBegeCe@eEedffZ dde!dededzd edzfdτZ dde!dededzd e.edzfdЄZded efd҄ZGdӄdeZdS)z Base platform adapter interface. All platform adapters (Telegram, Discord, WhatsApp, Weixin, and more) inherit from this and implement the required methods. N)ABCabstractmethod)urlsplit)normalize_proxy_url.m4a.mp3.ogg.wav.flac.opusr rr r >@returncjt|d|}t|pdS)z=Normalize a Platform enum / raw string into a lowercase name.value)getattrstrlower)platformrs ;/home/ubuntu/.hermes/hermes-agent/gateway/platforms/base.py_platform_namer's1 Hgx 0 0E u{   ! ! # ##namedefaultctj|d}|s|S t |S#t t f$r|cYSwxYw)Nr)osenvirongetstripfloat TypeError ValueError)rrraws r _float_envr%-sj *..r " " ( ( * *C Szz z "sAAAreply_to_message_idc2t|dd}|dSd|i}tt|dddkr[t|dddkrFd|d<t|}|r |d vr||d <|pt|d d}|t||d <|S) a Build platform-aware thread metadata for adapter sends. Most platforms route threaded sends with a generic ``thread_id`` metadata value. Telegram private-chat topics created through Hermes' DM-topic helper are exposed in updates as ``message_thread_id`` plus a reply anchor. Live user-message replies route with ``message_thread_id`` + ``reply_to_message_id``; synthetic/resumed sends that have no reply anchor fall back to Telegram's ``direct_messages_topic_id`` when the Bot API supports it. thread_idNrtelegram chat_typedmT telegram_dm_topic_reply_fallback>r1direct_messages_topic_id message_idtelegram_reply_to_message_id)rrr)sourcer&r(metadatatidanchors r_thread_metadata_for_sourcer57s T22ItY'Hgfj$7788JFF7SY[fhlKmKmquKuKu7;34)nn  73i''36H/ 0$K d(K(K  7:6{{H3 4 Orct|dd}tt|dd}t|dd}|dkr9|r7t|dddkr"t|ddpt|d dS|dkr|rdS|d kr$|r"t|d drt|d dSt|ddS) aReturn reply_to id for platforms that need reply semantics. Telegram forum/supergroup topics should be routed by topic metadata, not by replying to the triggering message. Hermes-created Telegram private-chat topic lanes prefer replying to the triggering user message so the answer stays attached to the active lane; synthetic/resumed sends fall back to ``direct_messages_topic_id`` metadata when no message id is available. r1Nrr(r)r*r+r/r&feishu)rr)eventr1rr(s r_reply_anchor_for_eventr9PsUHd + +Fgfj$??@@H T22I:) T0R0RVZ0Z0ZulD11`WUDY[_5`5``:)t8 ge=RTX.Y.Yu3T::: 5, - --rFextis_voicec|pd}|tvrdSt|dkr|tvr|S|tvSdS)aReturn True when a media file should use the platform's audio sender. Other platforms: every recognized audio extension routes through the audio sender. Telegram: the Bot API only accepts MP3/M4A for sendAudio and Opus/OGG for sendVoice. Opus/OGG is only routed as audio when the caller flagged ``is_voice=True`` (so we don't turn a regular audio attachment into a voice bubble just because the file happens to be Opus). Everything else falls through to document delivery by returning ``False``. rFr)T)r _AUDIO_EXTSr_TELEGRAM_VOICE_EXTS_TELEGRAM_AUDIO_ATTACHMENT_EXTS)rr:r;normalized_exts rshould_send_media_as_audiorAgs^iR&&((N[((uh:-- 1 1 1O!@@@ 4rscLt|ddzS)uCount UTF-16 code units in *s*. Telegram's message-length limit (4 096) is measured in UTF-16 code units, **not** Unicode code-points. Characters outside the Basic Multilingual Plane (emoji like 😀, CJK Extension B, musical symbols, …) are encoded as surrogate pairs and therefore consume **two** UTF-16 code units each, even though Python's ``len()`` counts them as one. Ported from nearai/ironclaw#2304 which discovered the same discrepancy in Rust's ``chars().count()``. z utf-16-le)lenencode)rBs r utf16_lenrG~s# qxx $$ % % **rlimitct||kr|Sdt|}}||kr4||zdzdz}t|d||kr|}n|dz }||k4|d|S)uReturn the longest prefix of *s* whose UTF-16 length ≤ *limit*. Unlike a plain ``s[:limit]``, this respects surrogate-pair boundaries so we never slice a multi-code-unit character in half. rrDN)rGrE)rBrHlohimids r_prefix_within_utf16_limitrNs ||u AB r''Bw{q  QttW   & &BBqB r'' SbS6Mrbudgetc|||krt|Sdt|}}||kr0||zdzdz}||d||kr|}n|dz }||k0|S)a8Return the largest codepoint offset *n* such that ``len_fn(s[:n]) <= budget``. Used by :meth:`BasePlatformAdapter.truncate_message` when *len_fn* measures length in units different from Python codepoints (e.g. UTF-16 code units). Falls back to binary search which is O(log n) calls to *len_fn*. rrJrDNrE)rBrOlen_fnrKrLrMs r_custom_unit_to_cprSsvayyF1vv AB r''Bw{q  6!DSD'??f $ $BBqB r'' Irhostc tj|}|jrdSt|ddr|jjrdSdS#t $rYnwxYw t j|dt jt j }|D],\}}}}}tj|d}|jsdS-dS#t j tf$rYdSwxYw)aReturn True if *host* would expose the server beyond loopback. Loopback addresses (127.0.0.1, ::1, IPv4-mapped ::ffff:127.0.0.1) are local-only. Unspecified addresses (0.0.0.0, ::) bind all interfaces. Hostnames are resolved; DNS failure fails closed. F ipv4_mappedNTr) ipaddress ip_address is_loopbackrrVr#_socket getaddrinfo AF_UNSPEC SOCK_STREAMgaierrorOSError)rTaddrresolved_family_type_proto _canonnamesockaddrs ris_network_accessiblergs  #D))   5 4 - - $2B2N 5t       & $)7+>   =E   8GUFJ' 44D# tt u  g &tts/AA A  A AB-*B--CCc2tjdkrdS tjddgddtj}n#t $rYdSwxYwi}|D]\}|}d|vrB|d\}}}|||<]d D]W\}}}| |d kr8| |} | |} | r | r d | d | cSXdS) zRead the macOS system HTTP(S) proxy via ``scutil --proxy``. Returns an ``http://host:port`` URL string if an HTTP or HTTPS proxy is enabled, otherwise *None*. Falls back silently on non-macOS or on any subprocess error. darwinNscutilz--proxyT)timeouttextstderrz : )) HTTPSEnable HTTPSProxy HTTPSPort) HTTPEnable HTTPProxyHTTPPortr-zhttp://:) sysr subprocess check_outputDEVNULL Exception splitlinesr partitionr) outpropslinekey_val enable_keyhost_keyport_keyrTports r_detect_macos_system_proxyrsU |xt% y !14 @R    ttE  --zz|| D==..//KCC!$E#))++ +//& Hh 99Z C ' '99X&&D99X&&D / /........ 4s$9 AArct|pd}|sdSd|vrDt|}|jpdd|jfS|drd|vr|ddd\}}}d}|dr3|dd rt|dd}|d|fS| ddkrc| d\}}}| r6|dt|fS|d ddfS) Nr)rN://.[]rJruz[]) rr rhostnamerrstripr startswithr|isdigitintcount rpartition)rr$parsedrTrrestr maybe_ports r_split_host_portrs ekr   " "C x ||#%2,,..55c::FKGG ~~c.sczzABB))#.. a ??3   !DH$4$4$6$6 !tABBx==Dzz||""3''-- yy~~!nnS11a      =::<<&&s++S__< < 99;;  T " " ) )# . . 44rcg}dD]T}tj|d}|d|dDU|S)N)NO_PROXYno_proxyrc3fK|],}||V-dSNr ).0parts r z$_no_proxy_entries..s7OO$**,,Otzz||OOOOOOr,)rrrextendsplit)entriesrr$s r_no_proxy_entriesrs`G'PPjnnS"%%OO #OOOOOOO Nrentryrc$t|pd}|sdS|dkrdSt|\}}| |||krdS||dS|sdS t j|d} t j||vS#t$rYdSwxYw#t$rYnwxYw t j|} t j||kS#t$rYdSwxYw#t$rYnwxYw|dr|dd}| |S|dr#||ddkp| |S||kp| d|S) NrF*Tstrict*.rJr) rr rrrW ip_networkrXr#rendswith) rrTrtoken token_host token_portnetworktoken_ipsuffixs r_no_proxy_entry_matchesrs     " " $ $ * * , ,E u ||t-e44J $"2zT7I7Iu$,u u &z%@@@ '--8 8   55        ' 33 '--9 9   55       T""%ABB}}V$$$S!!Cz!""~%Bz)B)BB :  @/?:/?/?!@!@@s`+B)B B&"B)%B&&B)) B65B6:C8C'' C51C84C55C88 DD target_hosts.ct}|r|sdSt|tr|g}nt|}|D]C}t t|\s$t fd|DrdSDdS)zReturn True when NO_PROXY/no_proxy matches at least one target host. Supports exact hosts, domain suffixes, wildcard suffixes, IP literals, CIDR ranges, optional host:port entries, and ``*``. Fc3:K|]}t|VdSr)r)rrrTrs rrz&should_bypass_proxy..Ps0OOe&udD99OOOOOOrT)r isinstancerlistrany)rr candidates candidaterTrs @@rshould_bypass_proxyr?s  !!G ,u,$$("^ ,''  %c)nn55 d   OOOOOwOOO O O 44  5r)rplatform_env_varc|rUtj|pd}|r t |rdSt |SdD]Z}tj|pd}|r#t |rdSt |cS[t t }|rt |rdS|S)uReturn a proxy URL from env vars, or macOS system proxy. Check order: 0. *platform_env_var* (e.g. ``DISCORD_PROXY``) — highest priority 1. HTTPS_PROXY / HTTP_PROXY / ALL_PROXY (and lowercase variants) 2. macOS system proxy via ``scutil --proxy`` (auto-detect) Returns *None* if no proxy is found, or if NO_PROXY/no_proxy matches one of ``target_hosts``. rN) HTTPS_PROXY HTTP_PROXY ALL_PROXY https_proxy http_proxy all_proxy)rrrr rrr)rrrrdetecteds rresolve_proxy_urlrUs. 0117R>>@@  ."<00 t&u-- -:..$$*1133  ."<00 tt&u-- - - - .##=#?#?@@H' 55t Or proxy_urlc|siS|drO ddlm}||d}d|iS#t $r t d|icYSwxYwd|iS) uBuild kwargs for ``commands.Bot()`` / ``discord.Client()`` with proxy. Returns: - SOCKS URL → ``{"connector": ProxyConnector(..., rdns=True)}`` - HTTP URL → ``{"proxy": url}`` - *None* → ``{}`` ``rdns=True`` forces remote DNS resolution through the proxy — required by many SOCKS implementations (Shadowrocket, Clash) and essential for bypassing DNS pollution behind the GFW. socksrProxyConnectorTrdns connectorVaiohttp_socks not installed — SOCKS proxy %s ignored. Run: pip install aiohttp-socksproxy)rr aiohttp_socksrfrom_url ImportErrorloggerwarningrrrs rproxy_kwargs_for_botrws  ##G,,   4 4 4 4 4 4&// /EEI+ +    NN1    III   Y s A'A87A8c|siifS ddlm}||d}d|iifS#t$rQ|dr!t d|iifcYSid|ifcYSwxYw) uBuild kwargs for standalone ``aiohttp.ClientSession`` with proxy. Returns ``(session_kwargs, request_kwargs)`` where: - With aiohttp-socks → ``({"connector": ProxyConnector(...)}, {})`` for *all* proxy schemes (SOCKS **and** HTTP/HTTPS). - HTTP without aiohttp-socks → ``({}, {"proxy": url})``. - None → ``({}, {})``. Prefer the connector path: it works transparently with libraries (like mautrix) that call ``session.request()`` without forwarding per-request ``proxy=`` kwargs. Usage:: sess_kw, req_kw = proxy_kwargs_for_aiohttp(proxy_url) async with aiohttp.ClientSession(**sess_kw) as session: async with session.get(url, **req_kw) as resp: ... rrTrrrrr)rrrrrrrrrs rproxy_kwargs_for_aiohttprs( 2v  (000000"++ID+AA Y'++ ((( ??   ' ' 0 0  NN1    r6MMMGY'''''(s"+AB=BBrno_proxy_valuec:|}|@tjdp tjdpd}|}|sdS|}t jd|D]}|}|s+|dkrdS|d r |d d}n|d r |d d}||ks|d |rdSdS) zReturn True when ``hostname`` matches a ``NO_PROXY`` entry. Supports comma- or whitespace-separated entries with optional leading dots and ``*.`` wildcards, which match both the apex domain and subdomains. NrrrFz[\s,]+rTrrDrrJ) rrrr rrerrr)rrr$lower_hostnamer normalizeds ris_host_excluded_by_no_proxyrs5 C {jnnZ((LBJNN:,F,FL" ))++C u^^%%N)S))  [[]]((**      44   & & (#ABBJJ  " "3 ' ' (#ABBJ Z ' '>+B+BCSzCSCS+T+T '44 ( 5r) dataclassfield)datetimePath)DictListOptionalAnyCallable AwaitableTupleUnion)EnumrD)PlatformPlatformConfig) SessionSourcebuild_session_key)get_default_hermes_rootget_hermes_dirget_hermes_homezSecure secret entry is not supported over messaging. Load this skill in the local CLI to be prompted, or add the key to ~/.hermes/.env manually.Purlmax_lenc|dkrdS|dSt|}|sdS t|}n#t$r |d|cYSwxYw|jrs|jrl|jddd}|jd|}|jpd}|r1|dkr+|ddd}|r|d |n|d }n|}n|}t||kr|S|d krd |zS|d|d z d S)z?Return a URL string safe for logs (no query/fragment/userinfo).rrN@rJr/z/.../z/...rkr...)rrrzschemenetlocrsplitpathrE) rrr$rrbaserbasenamesafes rsafe_url_for_logrsc!||r {r c((C r# 8G8}}  %%c1--b1-,,F,,{ b  DCKK{{3**2.H/7Jd+++++]]]DDDD 4yyG !||W}GIF87aGIF89arDsBMsRIFF sWEBPrQ)rs r_looks_like_imager!:s 4yy1}}u BQBx'''t BQBx?""t BQBx)))t BQBx5t BQBx7s4yyB4":3H3Ht 5r.jpgcBt|s5|dddd}td|d|dt}d t jjdd |}||z }||t|S) a Save raw image bytes to the cache and return the absolute file path. Args: data: Raw image bytes. ext: File extension including the dot (e.g. ".jpg", ".png"). Returns: Absolute path to the cached image file as a string. Raises: ValueError: If *data* does not look like a valid image (e.g. an HTML error page returned by the upstream server). Nrzutf-8replace)errorsz$Refusing to cache non-image data as z (starts with: )img_r ) r!decoder#ruuiduuid4hex write_bytesr)rr:snippet cache_dirfilenamefilepaths rcache_image_from_bytesr1Ks T " " ss)""79"== *3 * *$ * * *   $%%I2djll&ss+2S22H8#H  x==rretriesc PKddlm}||stdt|ddl}t jt}|dddtgi4d{V }t|d zD]} | |d d d  d{V}| t|j|ccdddd{VS#|j|jf$r} t#| |jr| jjdkr||krQd|d zz} |d|d z|t|| | t+j| d{VYd} ~ d} ~ wwxYw dddd{VdS#1d{VswxYwYdS)a@ Download an image from a URL and save it to the local cache. Retries on transient failures (timeouts, 429, 5xx) with exponential backoff so a single slow CDN response doesn't lose the media. Args: url: The HTTP/HTTPS URL to download from. ext: File extension including the dot (e.g. ".jpg", ".png"). retries: Number of retry attempts on transient failures. Returns: Absolute path to the cached image file as a string. Raises: ValueError: If the URL targets a private/internal network (SSRF protection). rr&Blocked unsafe URL (SSRF protection): NrTr rlfollow_redirects event_hooksrJ)Mozilla/5.0 (compatible; HermesAgent/1.0)zimage/*,*/*;q=0.8z User-AgentAcceptheaders?z*Media cache retry %d/%d for %s (%.1fs): %s)r rr#rhttpxlogging getLogger__name__ AsyncClientrrangerraise_for_statusr1contentTimeoutExceptionHTTPStatusErrorrr  status_codedebugasynciosleep rr:r2rr?_logclientattemptr excwaits rcache_image_from_urlrSg$-,,,,, ;s  [YBRSVBWBWYYZZZLLL  X & &D  "6!78! Wq[))  G !'&Q"5",""))+++-h.>DDDD *E,AB   c5#899cl>VY\>\>\W$$'A+.DJJD! (-- "----------HHHH   D7F AC*F*E>;A8E93F8E99E>>F F"F max_age_hoursc>ddl}t}|j|dzz }d}|D]^}|rH|j|kr+ ||dz }N#t$rYZwxYw_|S)zd Delete cached images older than *max_age_hours*. Returns the number of files removed. rNrJ)timeriterdiris_filestatst_mtimeunlinkr_rWrZr.cutoffremovedfs rcleanup_image_cacherds KKK#%%I TY[[MD0 1FG     99;; 16688,v55  1      N2B  BBz cache/audio audio_cachecHtddtS)zBReturn the audio cache directory, creating it if it doesn't exist.Tr)AUDIO_CACHE_DIRrrrrget_audio_cache_dirrirrct}dtjjdd|}||z }||t |S)a Save raw audio bytes to the cache and return the absolute file path. Args: data: Raw audio bytes. ext: File extension including the dot (e.g. ".ogg", ".mp3"). Returns: Absolute path to the cached audio file as a string. audio_Nr )rir)r*r+r,rrr:r.r/r0s rcache_audio_from_bytesrms]$%%I4 ("-4s44H8#H  x==rc PKddlm}||stdt|ddl}t jt}|dddtgi4d{V }t|d zD]} | |d d d  d{V}| t|j|ccdddd{VS#|j|jf$r} t#| |jr| jjdkr||krQd|d zz} |d|d z|t|| | t+j| d{VYd} ~ d} ~ wwxYw dddd{VdS#1d{VswxYwYdS)aE Download an audio file from a URL and save it to the local cache. Retries on transient failures (timeouts, 429, 5xx) with exponential backoff so a single slow CDN response doesn't lose the media. Args: url: The HTTP/HTTPS URL to download from. ext: File extension including the dot (e.g. ".ogg", ".mp3"). retries: Number of retry attempts on transient failures. Returns: Absolute path to the cached audio file as a string. Raises: ValueError: If the URL targets a private/internal network (SSRF protection). rrr4NrTr r5rJr8zaudio/*,*/*;q=0.8r9r;r=r>z*Audio cache retry %d/%d for %s (%.1fs): %s)r rr#rr?r@rArBrCrrDrrErmrFrGrHrr rIrJrKrLrMs rcache_audio_from_urlrorTrUz cache/videos video_cache video/mp4zvideo/quicktimez video/webmzvideo/x-matroskazvideo/x-msvideo).mp4.mov.webm.mkv.avicHtddtS)zBReturn the video cache directory, creating it if it doesn't exist.Tr)VIDEO_CACHE_DIRrrrrget_video_cache_dirry&rrrrct}dtjjdd|}||z }||t |S)zDSave raw video bytes to the cache and return the absolute file path.video_Nr )ryr)r*r+r,rrls rcache_video_from_bytesr|,s[#%%I4 ("-4s44H8#H  x==rzcache/documentsdocument_cachezcache/screenshotsbrowser_screenshotsHERMES_MEDIA_ALLOW_DIRSHERMES_MEDIA_TRUST_RECENT_FILES!HERMES_MEDIA_TRUST_RECENT_SECONDSHERMES_MEDIA_DELIVERY_STRICTcacheimagesaudiovideos documents screenshotsiX) z/etcz/procz/sysz/devz/rootz/bootz/var/logz/var/libz/var/run) z.sshz.awsz.gnupgz.kubez.dockerz.configz.azurez.gcloudzLibrary/KeychainscdtD}tjtd}|tjD]}|dD]n}|}|sttj |}| r| |o|S)zCReturn roots from which model-emitted local media may be delivered.c,g|]}t|Srr)rroots r z1_media_delivery_allowed_roots..s > > >DT$ZZ > > >rrr) MEDIA_DELIVERY_SAFE_ROOTSrrrMEDIA_DELIVERY_ALLOW_DIRS_ENVrpathsepr rr expanduser is_absoluteappend)roots extra_rootschunkraw_rootrs r_media_delivery_allowed_rootsrs > >$= > > >E*..!>CCK""2:..## C(( # #H~~''H **84455D!! # T"""  # Lrctjtd}|dvrdS tjt d}|rt|}td|Sn#ttf$rYnwxYwttS)zReturn the recency window for trusting freshly-produced files. 0 disables recency-based trust entirely (pure-allowlist mode). r-)0falsenooffrr) rrrMEDIA_DELIVERY_TRUST_RECENT_ENVr r'MEDIA_DELIVERY_TRUST_RECENT_SECONDS_ENVr!maxr"r#,_MEDIA_DELIVERY_TRUST_RECENT_DEFAULT_SECONDS)r$customsecondss r_media_delivery_recency_secondsrs *..8# > > D D F F L L N NC ---s  GLLRRTT  %FmmGsG$$ $ % z "     = > >>sAB**B>=B>ctjtd}|dvS)u"Return True when path validation should require allowlist/recency match. Off by default. In non-strict mode, ``validate_media_delivery_path`` accepts any existing regular file that isn't under the credential / system-path denylist — restoring the pre-#29523 behavior for the single-user case. Strict mode preserves the original allowlist+recency-window logic for operators running public-facing gateways where prompt injection from one user shouldn't be able to exfiltrate the host's secrets to that same user. r)r-trueyeson)rrrMEDIA_DELIVERY_STRICT_ENVr r)r$s r_media_delivery_strict_moders> *..2C 8 8 > > @ @ F F H HC , ,,rcdtD}ttjd}t D]}|||z ttfD]b}||dz ||dz ||dz ||dz c|S)zEReturn absolute denylist paths under which delivery is never allowed.c,g|]}t|Srr)rps rrz0_media_delivery_denied_paths..s ? ? ?!d1gg ? ? ?r~z.envz auth.json credentialsz config.yaml) _MEDIA_DELIVERY_DENIED_PREFIXESrrrr$_MEDIA_DELIVERY_DENIED_HOME_SUBPATHSr _HERMES_HOME _HERMES_ROOT)deniedhomesub hermes_roots r_media_delivery_denied_pathsrs ? ?> ? ? ?F ""3'' ( (D3"" dSj!!!!%l333  kF*+++ kK/000 kM1222 kM12222 Mrrac ttjdd}n#t t tf$rd}YnwxYwtD]k} |d}n#t t tf$rYEwxYwt||s||ks`|||kridSdS)u2Return True if ``resolved`` lives under a deny-listed system path. One narrow exception: when a denied prefix IS the running user's own home, the home itself is not treated as denied. ``/root`` is on the system-path denylist so that a non-root gateway can't deliver another user's home, but on a root-run gateway ``$HOME=/root`` and the operator's own deliverables (``/root/work/proposal.docx``) live directly under it. The credential sub-directories inside home (``~/.ssh``, ``~/.aws``, ...) and Hermes secrets (``~/.hermes/.env``, ``auth.json``) are *separate, more-specific* denied paths, so they stay blocked regardless of this exception — it can only un-block a plain file sitting in the running user's home tree, never a credential location or another user's home. rFrNT) rrrrresolver_ RuntimeErrorr#r_path_is_within)rarrresolved_denieds r_path_under_denied_prefixrsBG&&s++,,44E4BB \: ..00   $//11999GGOOz2    H /:: h/>Y>Y   4 7 7 tt 5s$AAAA3(BB65B6window_secondsc|dkrdS |j}n#t$rYdSwxYwtj|z |kS)a^Return True if the file's mtime is within ``window_seconds`` of now. Used as a session-scoped trust signal: agents almost always produce delivery artifacts within seconds of asking to send them, while prompt-injection paths pointing at pre-existing host files (/etc/passwd, ~/.ssh/id_rsa) have mtimes measured in days or months. rF)r]r^r_rZ)rarmtimes r_file_is_recently_producedrscu ( uu IKK% N 22s $ 22rrcT ||dS#t$rYdSwxYw)NTF) relative_tor#)rrs rrrsB t uus  ''cl|sdSt|}t|dkr8|d|dkr&|ddvr|dd}|dd}|sdS t t j|}n#tttf$rYdSwxYw| sdS | d }n#tttf$rYdSwxYw|sdStD]j} | d }n#tttf$rYEwxYwt!||rt|cSkt#s t%|rdSt|St'}|dkr.t%|st)||rt|SdS) uReturn a safe absolute file path for native media delivery, else None. Default mode (single-user / private gateway): accept any existing regular file that isn't under the credential / system-path denylist (``_MEDIA_DELIVERY_DENIED_PREFIXES`` + ``~/.ssh``, ``~/.aws``, etc.). This matches the symmetry of inbound delivery — Telegram/Discord/Slack will hand the agent any file the user uploads, and the agent can hand back any file that isn't a credential. Strict mode (opt-in via ``gateway.strict`` in ``config.yaml`` or ``HERMES_MEDIA_DELIVERY_STRICT=1``): the file MUST live under a Hermes-managed cache, under an operator-allowlisted root (``HERMES_MEDIA_ALLOW_DIRS``), or be freshly produced inside the configured recency window. Suitable for public-facing bots where prompt injection from one user shouldn't be able to exfiltrate the host's secrets to that same user. Symlinks are resolved before any containment / denylist check. NrDrr`"'rJ `"',.;:)}]TrF)rr rElstriprrrrrr_rr#rrr\rrrrrr)rrexpandedrar resolved_rootwindows rvalidate_media_delivery_pathrsm( tD !!I 9~~y|y}<<1QWAWAWadO))++   ((// >>I t**95566 \: .tt    ! !t##4#00 \: .tt     t.//!!  OO--55U5CCMMz2    H  8] 3 3 !x==  ! ' ( ( $X . . 48}}- . .F zz3H==z %h 7 7 !x== 4s6,C C&%C&DD21D2(FFFz[\x00-\x1f\x7f\x85\u2028\u2029]cbtdt|ddS)z9Return a single-line, length-bounded path for log output.?N)_LOG_UNSAFE_CHARSrrrs r_log_safe_pathrXs'  c$ii 0 0# 66r.pdfzapplication/pdf.mdz text/markdown.txtz text/plain.csvztext/csvz.log.jsonzapplication/json.xmlzapplication/xml.yamlzapplication/yaml.ymlz.tomlzapplication/tomlz.iniz.cfg.zipzapplication/zip.docxzGapplication/vnd.openxmlformats-officedocument.wordprocessingml.document.xlsxzAapplication/vnd.openxmlformats-officedocument.spreadsheetml.sheet.pptxzIapplication/vnd.openxmlformats-officedocument.presentationml.presentationz.ts)z.pyz.sh image/jpegz image/pngz image/webpz image/gif)r".jpeg.png.webp.gif)4rr"rrrz.bmpz.tiffz.svgrrrsrvrurtr r r r rr rrz.docz.odtz.rtfrrz.epubrz.xlsz.odsrz.tsvrrrrrz.pptz.odpz.keyrz.tarz.gzz.tgzz.bz2z.xzz.7zz.rarz.apkz.ipaz.htmlz.htmMEDIA_DELIVERY_EXTS|c#@K|]}|dVdSrNrres rrrs, 7 7aAHHSMM 7 7 7 7 7 7rT)rreversezf[`"']?MEDIA:\s*(?P`[^`\n]+`|"[^"\n]+"|'[^'\n]+'|(?:~/|/|[A-Za-z]:[/\\])\S+(?:[^\S\n]+\S+)*?\.(?:z))(?=[\s`"',;:)\]}]|$)[`"']?cHtddtS)zEReturn the document cache directory, creating it if it doesn't exist.Tr)DOCUMENT_CACHE_DIRrrrrget_document_cache_dirrs!TD999 rr/ct}|rt|jnd}|dd}|r|dvrd}dt jjddd|}||z }| |std || |t|S) a Save raw document bytes to the cache and return the absolute file path. The cached filename preserves the original human-readable name with a unique prefix: ``doc_{uuid12}_{original_filename}``. Args: data: Raw document bytes. filename: Original filename (e.g. "report.pdf"). Returns: Absolute path to the cached document file as a string. Raises: ValueError: If the sanitized path escapes the cache directory. documentr>..rdoc_Nr rzPath traversal rejected: ) rrrr$r r)r*r+ris_relative_tor#r,r)rr/r. safe_name cached_namer0s rcache_document_from_bytesrs"'((I'/?X##ZI!!&"--3355I  [00 <)#2#.<<<->-@-@ A ACAXAABBB  x==rc>ddl}t}|j|dzz }d}|D]^}|rH|j|kr+ ||dz }N#t$rYZwxYw_|S)zg Delete cached documents older than *max_age_hours*. Returns the number of files removed. rNrYrJ)rZrr[r\r]r^r_r_r`s rcleanup_document_cachers KKK&((I TY[[MD0 1FG     99;; 16688,v55  1      NrecHeZdZUdZeed<eed<eed<eed<defdZdS) CachedMediaz)Result of caching one attachment's bytes.r media_typekind display_namerc8d|jd|jd|jdS)z>One-line transcript annotation pointing the agent at the file.rz 'z ' saved at: r)rrrselfs r context_notezCachedMedia.context_notes*K49KK 1KKtyKKKKrN)rB __module__ __qualname____doc__r__annotations__rrrrrrse33 IIIOOO IIILcLLLLLLrr mime_typec.|r;tj|d}|r|S|pd}|sdStt t fD](}|D]\}}||kr|ccS)dS)z=Best-effort file extension from filename, then MIME fallback.rJr)rrsplitextrSUPPORTED_IMAGE_DOCUMENT_TYPESSUPPORTED_VIDEO_TYPESSUPPORTED_DOCUMENT_TYPESitems)r/rr:mimetablems r_resolve_media_extr#sgx((+1133  J O " " $ $D r&  kkmm  FCDyy   2rr)r/r default_kindrcddlm}t||}|pd}|rt jdd|n|dpd}|dp|tvp|d k}|d p|tvp|d k} |d p|d k} |r~|tvr|nd} t|| } n#t$rYdSwxYw|dr|nt | d} t|| | d |S| rR|tvr|nd}t||} t|| t |dd |S| rc|dvr|nd}t||} |d r|nd |d} t|| | d |S|t vrdSt#||pd|} t|| t |d|pd|S)uClassify and cache raw attachment bytes; return a CachedMedia or None. ``default_kind`` ("image"/"video"/"audio"/"document") biases classification when the extension/MIME are ambiguous — e.g. a Telegram native photo whose file has no usable name. Unsupported document types return None so the caller can record an "unsupported" note. Images that fail validation (``cache_image_from_bytes`` raises ValueError) also return None. r)to_agent_visible_cache_pathrz [^\w.\- ]rrfilezimage/imagezvideo/videozaudio/rr")r:Nrrrrqrr r)tools.credential_filesrrrrrrrr r r1r#rrr|rmr r)rr/rrrr:rdisplayis_imageis_videois_audioimg_extrout_mimevid_extaud_exts rcache_media_bytesr!7sCBBBBB Xy 1 1C O " " $ $D5=^bf\3111CJJsOOD]W]G !! # 0 0 # 7 " x((cC3H,HcL\cLcHx((CLG,CHZ >>>##F )$G<<S>W>WX_al>m>movxAA AZ RRR##X^%d888??844X44:X7>>RUCVCV:X:X66t<>uQxxr||ND1199(DIIQQRZ\_`` r)#rBrrrrrr#r)r<r1rr=rr/rr>rrrr@rrAr&rBrCrDrErFboolrnowrGrIrNrRrrrr;r;s III + 0L+000!FM   K $J $$$)- ,,,"E$777JS 777"U4888Kc888*.#---#'M8C='''-1JtCy)000%)NHSM((( &*OXc])))Hd % ===Ix===)D)))) Xc]    #rr;cHeZdZUeed<ejdzed<eed<eed<dS)TextDebounceStater8Ntaskfirst_tslast_ts)rBrrr;rrKTaskr!rrrrVrVsA  , OOO NNNNNrrVz4^(?:please\s+)?restart\s+(?:the\s+)?gateway[.!?\s]*$z=^(?:please\s+)?restart\s+(?:the\s+)?hermes\s+gateway[.!?\s]*$z(^(?:please\s+)?restart\s+hermes[.!?\s]*$#_PLAINTEXT_GATEWAY_RESTART_PATTERNSr8cf ||jtjkrdS|jpd}|r|drdSt |dd}t |dddkrdStD]!}||r d|_dS"dS#t$rYdSwxYw)aRewrite a tiny set of DM plaintext admin phrases into slash commands. This keeps high-impact operational phrases like ``restart gateway`` out of the LLM/tool path, where they can trigger a self-restart from inside the currently running agent and leave the gateway stuck in ``draining`` while it waits for that same agent to finish. Scope is intentionally narrow: DM text messages only, exact restart-style phrases only. Group chats keep natural-language semantics. Nrrr1r*r+z/restart) r<r#r)rmr rrr[matchrz)r8rmr1patterns r coerce_plaintext_gateway_commandr_s =E.+2BBB F  b'')) ts++  F$// 6; - - 5 5 F:  G}}T"" '     s(B"2B"&B"7&B"B"" B0/B0c|eZdZUdZeed<dZeeed<dZ eeed<dZ e ed<dZ eed<d Z eed <dS) SendResultzResult of sending a message.r4Nr/error raw_responseF retryablercontinuation_message_ids)rBrrrrSrr/rrrbrcrrdretuplerrrraras~&& MMM $J $$$E8C=L#It')e(((((rracneZdZUdZeeed<ddedeeffd Ze defdZ xZ S) EphemeralReplyuSystem-notice reply that auto-deletes after a TTL. Slash-command handlers in ``gateway/run.py`` can return this wrapper instead of a plain string to request that the reply message be deleted after ``ttl_seconds`` on platforms that support ``delete_message``. Subclassing ``str`` keeps the wrapper transparent to anything that treats handler return values as text (existing tests use ``in`` / ``startswith`` / equality; the ``_process_message_background`` pipeline extracts attachments from the string content). ``isinstance(r, EphemeralReply)`` still distinguishes ephemeral replies from plain strings so the send path can schedule deletion. Platforms that don't override :meth:`BasePlatformAdapter.delete_message` silently ignore the TTL — the message is sent normally and left in place. When ``ttl_seconds`` is ``None``, the pipeline uses the configured ``display.ephemeral_system_ttl`` default. A default of ``0`` disables auto-deletion globally, preserving prior behavior. ttl_secondsNrmcZt||}||_|Sr)super__new__ri)clsrmriinstance __class__s rrlzEphemeralReply.__new__4s'77??3--*rrc6t|S)zReturn the underlying text. Provided for call sites that want an explicit string conversion, though ``str(reply)`` and using ``reply`` directly where a string is expected both work identically. )r__str__rs rrmzEphemeralReply.text9s{{4   rr) rBrrrrrrrrlpropertyrm __classcell__)ros@rrhrhs(#3Xc] !c!!!X!!!!!rrh merge_textpending_messages session_keyrucj||}|rt|ddtjk}|jtjk}t |j}t |j}|rs|rq|j|j|j|j|j r*t |j |j |_ dS|s|r|r>|j|j|j|j|j r>|j r+t |j |j |_ n |j |_ |s|rtj|_n@t|ddtj kr!|jtj kr |j|_dS|rat|ddtj krB|jtj kr-|j r$|j r|j d|j n|j |_ dS|||<dS)aStore or merge a pending event for a session. Photo bursts/albums often arrive as multiple near-simultaneous PHOTO events. Merge those into the existing queued event so the next turn sees the whole burst. When ``merge_text`` is enabled, rapid follow-up TEXT events are appended instead of replacing the pending turn. This is used for Telegram bursty follow-ups so a multi-part user thought is not silently truncated to only the last queued fragment. r<N ) rrr#r+r<rSr@rrArmBasePlatformAdapter_merge_captionr)) rvrwr8ruexistingexisting_is_photoincoming_is_photoexisting_has_mediaincoming_has_medias rmerge_pending_message_eventrDs=$ ##K00H&#HndCC{GXX!.+2CC!("566!%"233  !2    & &u'7 8 8 8  ' '(9 : : :z ^ 3 B B8=RWR\ ] ] F  !3 ! ?#**5+;<<<$++E,=>>>z /=/$7$F$Fx}V[V`$a$aHMM$)JHM  ;$5 ;(3(9%%.$77;;KKK&+*:::(-(:% F  .$77;;KKK"k&666z bDLM a8= @ @EJ @ @ @W\Wa F$)[!!!r) connecterrorconnectionerrorconnectionresetconnectionrefusedconnecttimeoutrz broken piperemotedisconnectedeoferror config_extra channel_id parent_idc|dpi}t|tsdS||fD]D}|s||}|t|}|r|cSEdS)aResolve a per-channel ephemeral prompt from platform config. Looks up ``channel_prompts`` in the adapter's ``config.extra`` dict. Prefers an exact match on *channel_id*; falls back to *parent_id* (useful for forum threads / child channels inheriting a parent prompt). Returns the prompt string, or None if no match is found. Blank/whitespace- only prompts are treated as absent. channel_promptsN)rrdictrr )rrrpromptsrprompts rresolve_channel_promptrs0117RG gt $ $tI&  S!! > V""$$  MMM  4rc,|dpg}t|tr|sdSt}|r"|t ||r"|t ||sdS|D]}t|t st |dd}||vr|dp|d}t|t r|}|r|gndcSt|trT|rRg} |D]G} t| t s| } | r| | vr| | H| pdcSdS)aResolve auto-loaded skill(s) for a channel/thread from platform config. Looks up ``channel_skill_bindings`` in the adapter's ``config.extra`` dict. Config format:: channel_skill_bindings: - id: "C0123" # Slack channel ID or Discord channel/forum ID skills: ["skill-a", "skill-b"] - id: "D0ABCDE" skill: "solo-skill" # single string also accepted Prefers an exact match on *channel_id*; falls back to *parent_id* (useful for forum threads / Slack threads inheriting the parent channel's binding). Returns a deduplicated list of skill names (order preserved), or None if no match is found. channel_skill_bindingsNidrskillsskill) rrrsetaddrrr r) rrrbindings ids_to_checkrentry_idrrBseenrnms rresolve_channel_skillsrs0 899?RH h % %Xt UUL*Z))))Y((( t$$%&&  uyyr**++ | # #YYx((>EIIg,>,>F&#&& *LLNN)ssT)))&$'' $F $"$"((D%dC00! B(bnn B|t### 4rrmc|s|S|dddd}td|S)aStrip internal delivery directives ([[audio_as_voice]], [[as_document]], MEDIA:) so they never render as visible text. Backstop only: run ``extract_media`` first. MEDIA cleanup uses the shared ``MEDIA_TAG_CLEANUP_RE`` (only tags whose path has a known deliverable extension are removed; an unknown-extension tag is intentionally left so the bare-path detector downstream can still pick it up, per #34517). [[...]] is exact. [[audio_as_voice]]r[[as_document]])r$MEDIA_TAG_CLEANUP_RErrms r_strip_media_directivesrsL  <<,b 1 1 9 9:KR P PD  # #B - --rc eZdZUdZdZeed<dZeed<de de fdZ e d e egeffd Ze d efd Z dd eedeeeefd efdZ ddedededeeeefd ef dZdeded d fdZddddededed eefdZe d efdZe d eefdZe d eefdZe d efd Zded efd!Zd"e dged d zfd d fd#Zdd$Z dd%Z!d&ed'ed(ed d fd)Z"d*ed d fd+Z#dd,Z$d-ed.ed/ed efd0Z%dd1Z&e d efd2Z'e d efd3Z(d"e)d d fd4Z*d5ee egeefd d fd6Z+de,d d fd7Z-d"ee e,egeefd d fd8Z.d9ed d fd:Z/e0d efd;Z1e0dd<Z2e0 ddeded=eedeeeefd ef d>Z3dZ4eed?<d@edAed eefdBZ5ddCdedDededEed ef dFZ6dedDed efdGZ7d efdHZ8dedDedIed d fdJZ9 ddedKed'edLedMedeeeefd efdNZ: ddedOedPee;dQedLedeeeefd efdRZ< ddedSeeded=eedeeeefd ef dTZ=dded d fdUZ>ded d fdVZ? ddedXe@eAeefdeeeefdYeBd d f dZZC dded[ed\eed=eedeeeefd ef d]ZD dded^ed\eed=eedeeeefd ef d_ZEeFd`ed efdaZGeFded eAe@eAeefeffdbZH ddedced\eed=eedeeeefd ef ddZIdeed efdfZJdedced efdgZK ddedhed\eed=eedeeeefd ef diZL ddedjed\eedkeed=eedeeeefd efdlZM ddedmed\eed=eedeeeefd ef dnZNeFdoed eefdpZOeFd e@eAeeffdqZPeFd e@efdrZQeFded efdsZReFded efdtZSeFded eAe@eAeefeffduZTeFded eAe@eeffdvZU ddedxeBdyeVjWd zd d fdzZXded d fd{ZYded d fd|ZZdLeded d fd}Z[d d~dLede ded zd d fdZ\d d~dLeded zd e d zfdZ]de,d d fdZ^de,de_d d fdZ`dededed d fdZaeFdeed efdZbeFdeed efdZcded eAeeeffdZd ddeded=eedededeBd dfdZeeFdeeded efdZfd egeehffdZide,d efdZjde,de,d efdZkdLed eBfdZldLede,d d fdZmdLedeBd d fdZndLed efdZodLed d fdZpd ddLedeeVjWd d fdZqdLed efdZrdLed efdZsd dde,dLedeeVjWd efdZtddddLededed d fdZudLedeVjWd d fdZvde,dLeded d fdZwde,d d fdZxeFd eBfdZyde,dLed d fdZzddZ{dLed efdZ|dLed ee,fdZ} ddedeed edSeedeedeedeedeedeededeed@eedDeeded e~fd„Ze0ded eeeffdÄZded efdĄZeF ddedededd e@efdɄZd S)rzz Base class for platform adapters. Subclasses implement platform-specific logic for: - Connecting and authenticating - Receiving messages - Sending messages/responses - Handling media Fsupports_code_blocksrtyped_command_prefixconfigrc||_||_d|_d|_d|_d|_d|_d|_d|_i|_ i|_ i|_ tj ddpd|_t%dd|_t%dd|_i|_t-|_i|_t-|_d|_d|_t-|_t-|_t-|_dS) NFTHERMES_GATEWAY_BUSY_TEXT_MODE interrupt)HERMES_GATEWAY_BUSY_TEXT_DEBOUNCE_SECONDSgffffff?)HERMES_GATEWAY_BUSY_TEXT_HARD_CAP_SECONDSg?)rr_message_handler_topic_recovery_fn_running_fatal_error_code_fatal_error_message_fatal_error_retryable_fatal_error_handler_active_sessions_pending_messages_session_tasksrrrr r_busy_text_moder%_busy_text_debounce_seconds_busy_text_hard_cap_seconds_text_debouncer_background_tasks_post_delivery_callbacks_expected_cancelled_tasks_busy_session_handler_auto_tts_default_auto_tts_enabled_chats_auto_tts_disabled_chats_typing_paused)rrrs r__init__zBasePlatformAdapter.__init__"sA   :>MQ 0437!&*#im!;=:<79 JNN:K H H N N P P V V X X  3= 73 3 (3= 73 3 (=?58EE 9;%>eo>>7>>> >..%/....rc|jduSrrrs rhas_fatal_errorz#BasePlatformAdapter.has_fatal_errors(44rc|jSrrrs rfatal_error_messagez'BasePlatformAdapter.fatal_error_message s ((rc|jSr)rrs rfatal_error_codez$BasePlatformAdapter.fatal_error_code s %%rc|jSr)rrs rfatal_error_retryablez)BasePlatformAdapter.fatal_error_retryables **rcV||jvrdS||jvrdSt|jS)ueWhether auto-TTS on voice input should fire for ``chat_id``. Decision layers (Issue #16007): 1. Explicit ``/voice on`` or ``/voice tts`` → always fire (even if ``voice.auto_tts`` is False). 2. Explicit ``/voice off`` → never fire. 3. Fall back to the global ``voice.auto_tts`` config default. TF)rrrSrrrs r_should_auto_tts_for_chatz-BasePlatformAdapter._should_auto_tts_for_chats; d2 2 24 d3 3 35D*+++rhandlerc||_dSr)rrrs rset_fatal_error_handlerz+BasePlatformAdapter.set_fatal_error_handler$s$+!!!rcpd|_d|_d|_d|_|dddddS)NT connectedplatform_state error_code error_messagerrrr_write_runtime_status_safers r_mark_connectedz#BasePlatformAdapter._mark_connected'sF !%$(!&*# '' K\`pt'uuuuurcXd|_|jrdS|dddddS)NF disconnectedr)rrr rs r_mark_disconnectedz&BasePlatformAdapter._mark_disconnected.s>    F ''~bfvz'{{{{{rcodemessagerdcpd|_||_||_||_|dd||dS)NFfatalrr)rrrrds r_set_fatal_errorz$BasePlatformAdapter._set_fatal_error4sF !%$+!&/# ''TXho'ppppprcontextc  ddlm}|dd|jji|dS#t$r}t |dd}|'t } ||_n#t$rYnwxYw|jj|f}||vr=t d||jj|| |n-t d||jj|Yd}~dSYd}~dSd}~wwxYw) aWrite runtime status; log first failure per context at warning, rest at debug. Status writes can fail on permissions, ENOSPC, missing status dir, etc. A persistently failing status dir used to be silent (``except: pass``). Logging every failure would spam the log on reconnect loops, so this surfaces the first failure per (platform, context) at warning level and downgrades subsequent failures to debug. r)write_runtime_statusr_status_write_loggedNzPFailed to write runtime status (%s) for %s: %s (further failures at debug level)z.Failed to write runtime status (%s) for %s: %sr) gateway.statusrrrrzrrrrrrrJ)rrkwargsrrQloggedrs rr z.BasePlatformAdapter._write_runtime_status_safe;sJ r ; ; ; ; ; ; H H$-*= H H H H H H r r rT#94@@F~06D-- D=&0C&  fT]0# 3 MwX\XeXkmpqqqqqqqqq ! rs9 C)!C$ AC$ AC$AA9C$$C)crK|j}|sdS||}tj|r |d{VdSdSr)rrK iscoroutine)rrresults r_notify_fatal_errorz'BasePlatformAdapter._notify_fatal_error[sZ+  F  v & & LLLLLLLLL  rscopeidentity resource_desccfddlm}||_||_|||d|jji\}}|rdSt |tr|dnd}|d|rd |d nd zd z}t d |j || |d|ddS)z@Acquire a scoped lock for this adapter. Returns True on success.r)acquire_scoped_lockrr2TpidNz already in usez (PID r&rz. Stop the other gateway first.z[%s] %s_lockF)rd) rr"_platform_lock_scope_platform_lock_identityrrrrrrrbrr) rrrr r"acquiredr| owner_pidrs r_acquire_platform_lockz*BasePlatformAdapter._acquire_platform_lockcs666666$)!'/$00 8z4=3F&G   (  4+5h+E+EOHLL'''4  - - -(19$ $$$$r ;/ 0   Y 7333 ooow%HHHurclt|dd}|sdSddlm}||j|d|_dS)z;Release the scoped lock acquired by _acquire_platform_lock.r'Nr)release_scoped_lock)rrr,r&r')rrr,s r_release_platform_lockz*BasePlatformAdapter._release_platform_lockwsW4!:DAA  F666666D5x@@@'+$$$rc>|jjS)z%Human-readable name for this adapter.)rrtitlers rrzBasePlatformAdapter.names}"((***rc|jS)z(Check if adapter is currently connected.)rrs r is_connectedz BasePlatformAdapter.is_connecteds }rc||_dS)z Set the handler for incoming messages. The handler receives a MessageEvent and should return an optional response string. N)rrs rset_message_handlerz'BasePlatformAdapter.set_message_handlers!(rfnc||_dS)zInstall a thread_id-recovery hook (Telegram DM topic mode). The hook is called with ``event.source`` before session keying; a non-None return value replaces ``source.thread_id``. Pass ``None`` to clear the hook. N)r)rr4s rset_topic_recovery_fnz)BasePlatformAdapter.set_topic_recovery_fns#%rct|dd}|dSt|dd}|dS ||}n-#t$r tddYdSwxYw|'t |t |jpdkrdS t j|t ||_dS#t$r td dYdSwxYw) zDRewrite ``event.source.thread_id`` in place if the hook returns one.rNr1ztopic recovery hook failedTexc_infor)r(ztopic recovery rewrite failed) rrzrrJrr( dataclassesr$r1)rr8recoverr1 recovereds r_apply_topic_recoveryz)BasePlatformAdapter._apply_topic_recoverys$ 4d;; ? F$// > F II    LL5L E E E FF   I#f6F6L"2M2M M M F I&.vYPPPELLL I I I LL84L H H H H H H Is! 8&A"!A"(B;;&C%$C%c||_dS)zESet an optional handler for messages arriving during active sessions.N)rrs rset_busy_session_handlerz,BasePlatformAdapter.set_busy_session_handlers%,"""r session_storec||_dS)a  Set the session store for checking active sessions. Used by adapters that need to check if a thread/conversation has an active session before processing messages (e.g., Slack thread replies without explicit mentions). N)_session_store)rr@s rset_session_storez%BasePlatformAdapter.set_session_stores,rc KdS)z Connect to the platform and start receiving messages. Returns True if connection was successful. Nrrs rconnectzBasePlatformAdapter.connect  rc KdS)zDisconnect from the platform.Nrrs r disconnectzBasePlatformAdapter.disconnects  rreply_toc KdS)ar Send a message to a chat. Args: chat_id: The chat/channel ID to send to content: Message content (may be markdown) reply_to: Optional message ID to reply to metadata: Additional platform-specific options Returns: SendResult with success status and message ID Nr)rrrFrIr2s rsendzBasePlatformAdapter.sends ( rREQUIRES_EDIT_FINALIZEparent_chat_idrc KdS)uCreate a fresh thread under ``parent_chat_id`` for a session handoff. Used by the gateway's handoff watcher when transferring a CLI session to a thread-capable platform — the new thread isolates the handed-off conversation from any pre-existing chat in the home channel and gives users a clean per-handoff scrollback. Returns the new thread/topic id (as a string) on success, or ``None`` if the platform doesn't support threading or the attempt failed (permissions, topics-mode off, etc.). When ``None`` is returned the watcher falls back to using ``parent_chat_id`` directly. Default implementation returns ``None`` — adapters that support threads override this. See: - Telegram: forum topics in groups, DM topics with bot API 9.4+ - Discord: text-channel threads (1440-min auto-archive) - Slack: seed-message thread anchoring Nr)rrMrs rcreate_handoff_threadz)BasePlatformAdapter.create_handoff_threads 0tr)finalizer/rPc(KtddS)uL Edit a previously sent message. Optional — platforms that don't support editing return success=False and callers fall back to sending a new message. ``finalize`` signals that this is the last edit in a streaming sequence. Most platforms (Telegram, Slack, Discord, Matrix, etc.) treat it as a no-op because their edit APIs have no notion of message lifecycle state — an edit is an edit. Platforms that render streaming updates with a distinct "in progress" state and require explicit closure (e.g. rich card / AI assistant surfaces such as DingTalk AI Cards) use it to finalize the message and transition the UI out of the streaming indicator — those should also set ``REQUIRES_EDIT_FINALIZE = True`` so callers route a final edit through even when content is unchanged. Callers should set ``finalize=True`` on the final edit of a streamed response (typically when ``got_done`` fires in the stream consumer) and leave it ``False`` on intermediate edits. F Not supportedr4rbra)rrr/rFrPs r edit_messagez BasePlatformAdapter.edit_message s6%????rc KdS)u Delete a previously sent message. Optional — platforms that don't support deletion return ``False`` and callers fall back to leaving the message in place. Used by the stream consumer's fresh-final cleanup path (see openclaw/openclaw#72038) to remove long-lived preview messages after sending the completed reply as a fresh message so the platform's visible timestamp reflects completion time. Returns ``True`` on successful deletion, ``False`` otherwise. Subclasses should override for platforms with a deletion API (e.g. Telegram ``deleteMessage``). Fr)rrr/s rdelete_messagez"BasePlatformAdapter.delete_message' s &urcr ddlm}n#t$rYdSwxYw |}n#t$rYdSwxYwt|tr|dini}t|tsdS|dd} t |S#ttf$rYdSwxYw)aRead ``display.ephemeral_system_ttl`` from config. Returns the TTL in seconds to use when an :class:`EphemeralReply` does not specify one explicitly. ``0`` (the default) disables auto-deletion. Non-fatal if config is unreadable. r) load_configrephemeral_system_ttl) hermes_cli.configrYrzrrrrr"r#)r _load_configcfgrr$s r!_get_ephemeral_system_ttl_defaultz5BasePlatformAdapter._get_ephemeral_system_ttl_default< s  E E E E E E E   11  ,..CC   11 ,6sD,A,AI#'')R(((r'4(( 1kk0!44 s88O:&   11 s*  & 44B!!B65B6ricdfd }|} tj|dS#t$r|YdSwxYw)u Spawn a detached task that deletes ``message_id`` after ``ttl_seconds``. Best-effort — failures (gateway restart, permission denied, message too old for Telegram's 48h window) are swallowed at debug level. Does not block the caller. rNcFK tjtdtd{Vd{VdS#tj$rt $r.}tdj |Yd}~dSd}~wwxYw)NrJ)rr/z*[%s] Ephemeral delete failed for %s/%s: %s) rKrLrrrWCancelledErrorrzrrJr)rrr/rris r _run_deletezCBasePlatformAdapter._schedule_ephemeral_delete.._run_deletea s mC3{+;+;$<$<=========))'j)QQQQQQQQQQQ)       @Iw A sAAB 2#BB rN)rK create_taskrclose)rrr/rirbcoros```` r_schedule_ephemeral_deletez.BasePlatformAdapter._schedule_ephemeral_deleteT s         {}}    % % % % %    JJLLLLLL  s/AAr/rw confirm_idc(KtddS)uSend a three-option slash-command confirmation prompt. Used by the gateway's generic slash-confirm primitive (see ``GatewayRunner._request_slash_confirm``) for commands that have a non-destructive but expensive side effect the user should explicitly acknowledge — the current caller is ``/reload-mcp``, which invalidates the provider prompt cache. Platforms with inline-button support (Telegram, Discord, Slack, Matrix, Feishu) should override this to render three buttons: Approve Once / Always Approve / Cancel. Button callbacks MUST be routed back through the gateway by calling ``GatewayRunner._resolve_slash_confirm(confirm_id, choice)`` where ``choice`` is ``"once"`` / ``"always"`` / ``"cancel"``. Platforms without button UIs leave this as the default and fall through to the gateway's text fallback (which sends ``message`` as plain text and intercepts the next ``/approve`` / ``/always`` / ``/cancel`` reply). ``confirm_id`` is a short string generated by the gateway; the adapter stores it alongside any platform-specific state needed to route the callback (e.g. Telegram's ``_approval_state`` dict). FrRrSrT)rrr/rrwrhr2s rsend_slash_confirmz&BasePlatformAdapter.send_slash_confirmv sB%????rquestionchoices clarify_idcdK|rd|dg}t|dD] \}} |d|d| !|d|dd|} d d lm} | |nd|} ||| | d {VS) uSend a clarify prompt to the user. Two render modes: * **Multiple choice** (``choices`` is a non-empty list) — adapters that override this should render inline buttons (one per choice plus a final "Other" / free-text option). Button callbacks MUST resolve via ``tools.clarify_gateway.resolve_gateway_clarify(clarify_id, response)`` with the chosen string. Picking the "Other" button calls ``mark_awaiting_text(clarify_id)`` so the next message in the session is captured as the response. * **Open-ended** (``choices`` is None or empty) — render the question as a plain text message; the next user message in the session is captured by the gateway's text-intercept and resolves the clarify automatically (see ``GatewayRunner._maybe_intercept_clarify_text``). The default implementation falls back to a numbered text list, which works on every platform — the user replies with a number ("2") or with the literal choice text, and the gateway intercepts and resolves. For the text fallback path, the default calls ``mark_awaiting_text()`` so that the gateway text-intercept (:meth:`GatewayRunner._maybe_intercept_clarify_text`) catches the user's reply instead of timing out. Adapters with native button UIs (Telegram, Discord) SHOULD override this for a richer UX. u❓ rrJ)startz z. z;Reply with the number, the option text, or your own answer.ryr)mark_awaiting_textrrFr2N) enumeraterjointools.clarify_gatewayrprK) rrrkrlrmrwr2linesichoicermrps r send_clarifyz BasePlatformAdapter.send_clarify sL  %&H&&+E&wa888 1 1 6 /!//v//0000 LL    LLV W W W99U##D A @ @ @ @ @  z * * * *$($$DYY         ruser_idcDK|||||d{VS)zSend a notice privately when the platform supports it. The default implementation falls back to a normal send so callers can use one code path across platforms. rrFrIr2NrK)rrryrFrIr2s rsend_private_noticez'BasePlatformAdapter.send_private_notice sMYY          rc KdS)z Send a typing indicator. Override in subclasses if the platform supports it. metadata: optional dict with platform-specific context (e.g. thread_id for Slack). Nr)rrr2s r send_typingzBasePlatformAdapter.send_typing rFrc KdS)zStop a persistent typing indicator (if the platform uses one). Override in subclasses that start background typing loops. Default is a no-op for platforms with one-shot typing indicators. Nrrs r stop_typingzBasePlatformAdapter.stop_typing s rrr human_delayc Kddlm}|D]p\}}|dkrtj|d{V td|jt||r |ddnd|dr5| |||dd|r|nd| d{V}n\| |r$| |||r|nd| d{V}n#| |||r|nd| d{V}|j s&td |j|j7#t$r.} td |j| dYd} ~ jd} ~ wwxYwdS)aSend a batch of images. Accepts ``http(s)://``, ``file://`` URIs in the first tuple element. Default implementation sends each item individually, routing animated GIFs through ``send_animation`` and local files through ``send_image_file``. Override in subclasses to bundle into a single native API call (e.g. Signal's multi-attachment RPC) r)unquoteNz[%s] Sending image: %s (alt=%s)rfile://)r image_pathcaptionr2)r animation_urlrr2)r image_urlrr2z[%s] Failed to send image: %sz[%s] Error sending image: %sTr8) urllib.parserrKrLrinforrrsend_image_file_is_animation_urlsend_animation send_imager4rbrz) rrrr2r_unquoteralt_text img_resultimg_errs rsend_multiple_imagesz(BasePlatformAdapter.send_multiple_images sS& 544444#)" `" ` IxQmK000000000 ` 5I$Y//%-5HSbSMM2  '' 22'+';'; '#+8IabbM#:#:,4 >$!) (<((""""""JJ ++I66 '+':': '&/,4 >$!) (;((""""""JJ(, '"+,4 >$!) (7((""""""J ")_LL!@$)ZM]^^^ ` ` ` ;TYZ^ ________ `C" `" `sDE E: #E55E:rrcZK|r|d|n|}|||||d{VS)z Send an image natively via the platform API. Override in subclasses to send images as proper attachments instead of plain-text URLs. Default falls back to sending the URL as a text message. ryr{Nr|)rrrrrIr2rms rrzBasePlatformAdapter.send_image0 sR -4B'((Y(((YYwxZbYcccccccccrrcFK||||||d{VS)z Send an animated GIF natively via the platform API. Override in subclasses to send GIFs as proper animations (e.g., Telegram send_animation) so they auto-play inline. Default falls back to send_image. )rrrrIr2N)r)rrrrrIr2s rrz"BasePlatformAdapter.send_animationC sX__W W^iq}E_FFFFFFFF Frrc|dd}|dS)z=Check if a URL points to an animated GIF (vs a static image).rrr)rrr)rrs rrz%BasePlatformAdapter._is_animation_urlT s6 !!#&&q)~~f%%%rc\ g}|}d}tj||D]^}|d}|d t fddDr| |f_d}tj||D].}|d | df/|red|Dfd }tj|||}tj|||}tjd d |}||fS) a Extract image URLs from markdown and HTML image tags in a response. Finds patterns like: - ![alt text](https://example.com/image.png) - - Args: content: The response text to scan. Returns: Tuple of (list of (url, alt_text) pairs, cleaned content with image tags removed). z$!\[([^\]]*)\]\((https?://[^\s\)]+)\)rJrDc3K|]A}|p|vVBdSr)rr)rr:rs rrz5BasePlatformAdapter.extract_images..s scmms399;;'',,Bsyy{{0Bmmmmmmr)rr"rrrz fal.mediazfal-cdnzreplicate.deliveryzA]+)["\']?\s*/?>\s*(?:)?rch|]\}}|Srr)rrrs r z5BasePlatformAdapter.extract_images.. s777fc1c777rc|jdkr|dn|d}|vrdn|dS)NrDrJrr) lastindexgroup)r]rextracted_urlss r_remove_if_extractedz@BasePlatformAdapter.extract_images.._remove_if_extracted sJ(-1(<(>@@Gwr audio_pathc`Kd|}|r|d|}|||||d{VS)a  Send an audio file as a native voice message via the platform API. Override in subclasses to send audio as voice bubbles (Telegram) or file attachments (Discord). Default falls back to sending the file path as text. u 🔊 Audio: ryr{Nr|)rrrrrIr2rrms r send_voicezBasePlatformAdapter.send_voice s] +j**  (''''DYYwxZbYcccccccccrrmcbtjdd|ddS)zPrepare text for TTS. Override to filter tool output, code, etc. Default strips markdown formatting and truncates to 4000 chars. z [*_`#\[\]()]rNi)rrr )rrms rprepare_tts_textz$BasePlatformAdapter.prepare_tts_text s- vor400$7==???rc2K|jd||d|d{VS)z Play auto-TTS audio for voice replies. Override in subclasses for invisible playback (e.g. Web UI). Default falls back to send_voice (shows audio player). )rrNr)r)rrrrs rplay_ttszBasePlatformAdapter.play_tts s9%T_VWVVvVVVVVVVVVr video_pathc`Kd|}|r|d|}|||||d{VS)z Send a video natively via the platform API. Override in subclasses to send videos as inline playable media. Default falls back to sending the file path as text. u 🎬 Video: ryr{Nr|)rrrrrIr2rrms r send_videozBasePlatformAdapter.send_video s]+j**  (''''DYYwxZbYcccccccccr file_path file_namec`Kd|}|r|d|}|||||d{VS)z Send a document/file natively via the platform API. Override in subclasses to send files as downloadable attachments. Default falls back to sending the file path as text. u 📎 File: ryr{Nr|) rrrrrrIr2rrms r send_documentz!BasePlatformAdapter.send_document s] )Y((  (''''DYYwxZbYcccccccccrrc`Kd|}|r|d|}|||||d{VS)a Send a local image file natively via the platform API. Unlike send_image() which takes a URL, this takes a local file path. Override in subclasses for native photo attachments. Default falls back to sending the file path as text. u🖼️ Image: ryr{Nr|)rrrrrIr2rrms rrz#BasePlatformAdapter.send_image_file s] .--  (''''DYYwxZbYcccccccccrrc t|S)zBReturn a resolved path if it is safe for native attachment upload.)rrs rrz0BasePlatformAdapter.validate_media_delivery_path s,D111rcg}|pgD]r\}}t|}t|}|r%||t|fJtdt |s|S)z5Drop unsafe MEDIA paths and normalize accepted paths.z(Skipping unsafe MEDIA directive path: %s)rrrrSrrr) media_files safe_media media_pathr;r$ safe_paths rfilter_media_delivery_pathsz/BasePlatformAdapter.filter_media_delivery_paths s.0 $/$52 ` ` Jj//C4S99I `!!9d8nn"=>>>>I>Z]K^K^____rcg}|pgD]`}t|}t|}|r||8tdt |a|S)z?Drop unsafe bare local file paths and normalize accepted paths.z#Skipping unsafe local file path: %s)rrrrrr) file_paths safe_pathsrr$rs rfilter_local_delivery_pathsz/BasePlatformAdapter.filter_local_delivery_paths s~!# #)r [ [Ii..C4S99I [!!),,,,DnUXFYFYZZZZrcHt|}t|}g}tjd|tjD]=}|||f>tjd|D]p}|}|td|dz |}tj d|rG|||fqtjd|tj D]=}|||f>|D])\}}t||D]}||dkrd||<*d |S) a_Replace content inside fenced code blocks, inline code spans, and blockquotes with spaces to prevent MEDIA: false positives. Preserves character count so regex match offsets stay valid. Skips masking backtick-quoted paths in MEDIA: tags (e.g. ``MEDIA:`/path/to/file.png` ``) to avoid breaking path extraction. ```[^\n]*\n.*?``` `[^`\n]+`rz MEDIA:\s*$z^>.*$ryrr) rrErrDOTALLrroendrsearch MULTILINErDrs) rFcharsnspansrroprefixrrvs r_mask_protected_spansz)BasePlatformAdapter._mask_protected_spans sW  JJ17BIFF / /A LL!''))QUUWW- . . . .\733 + +AGGIIESEBJ//56Fy//  LL%) * * * *Xw == / /A LL!''))QUUWW- . . . .  # #JE35#&& # #8t##"E!H #wwu~~rcvd|vsd|vr|St|}tjd|D]v}|d}tjd|rJt |d|dD]}||dkrd||<wd|S) uBlank out ``MEDIA:`` occurrences that sit inside a JSON string *value* so they are never delivered as real attachments. Serialized tool results frequently embed a previous reply's text, e.g.:: {"result": "MEDIA:/Users/x/.hermes/media/generated/stale.png"} Here the ``MEDIA:`` is part of stored text, not an outbound directive, but the bare-path branch of ``MEDIA_TAG_CLEANUP_RE`` would still match it and re-deliver a stale file. (Regression report #34375.) The discriminator is precise so legitimate tags are untouched: * Only spans opened by a JSON value-context quote (``:``, ``,``, ``{`` or ``[`` immediately before the ``"``) are considered. * Within such a span, only a ``MEDIA:`` followed by a **bare** path (``/``, ``~/`` or ``X:\``) is masked. A ``MEDIA:"..."`` quoted-path tag — a real LLM output format the extractor supports — is not bare and is left alone. * Tags at line start, after prose whitespace, or indented are outside any JSON value span and are never affected. Offsets are preserved (matched chars replaced with spaces, newlines kept) so downstream match positions stay valid. rzMEDIA:z$(?<=[:,{\[])\s*"((?:[^"\\\n]|\\.)*)"rJz MEDIA:\s*(?:~/|/|[A-Za-z]:[/\\])ryrr) rrrrrrDrorrs)rFrrsegrvs r_mask_json_string_mediaz+BasePlatformAdapter._mask_json_string_media; s6 g  !8!8NW DgNN ' 'A''!**Cy tags and [[audio_as_voice]] directives from response text. The TTS tool returns responses like: [[audio_as_voice]] MEDIA:/path/to/audio.ogg Skills that produce large/lossless images (e.g. info-graph, where a rendered JPG is 1-2 MB but Telegram's sendPhoto recompresses to ~200 KB at 1280px) can use ``[[as_document]]`` to request unmodified delivery via sendDocument instead of sendPhoto/sendMediaGroup. The directive is detected at the dispatch sites (which have access to the original response); this method just strips it so it never leaks into user-visible text. Per-file granularity is intentionally not exposed — when an agent emits ``[[as_document]]`` once, every image path in the same response is delivered as a document, mirroring the all-or-nothing scope of ``[[audio_as_voice]]``. Args: content: The response text to scan. Returns: Tuple of (list of (path, is_voice) pairs, cleaned content with tags removed). rrrrrDrrrrJrc6g|]}|Sr)span)rrs rrz5BasePlatformAdapter.extract_media.. s NNN!QVVXXNNNrT)rrr)r$rrzrrrrr rErrrrrrr_rr#rsortedrsrr) rFmediar has_voice_tag media_pattern scan_contentr]rmasked_cleanedrrrors r extract_mediaz!BasePlatformAdapter.extract_mediac sF4-7 //"6;;//"3R88 - +@@II *BB<PP "++L99  E;;v&&,,..D4yyA~~$q'T"X"5"5$q'V:K:KAbDz''));;v&&--m<tjd|D]=}|| f>dtdtffd }g}||D]}||r | d }tj|} tj| r||| ft"d t'|t)} g} |D]5\}} | | vr,| | | || f6d | D} |} | rF| D]\}}| |d } tjdd| } | | fS)aD Detect bare local file paths in response text for native delivery. Matches absolute paths (/...) and tilde paths (~/) ending in common image, video, audio, or document extensions. Validates each candidate with ``os.path.isfile()`` to avoid false positives from URLs or non-existent paths. The extension list is broader than just images/video so the agent can produce arbitrary artifacts (charts, PDFs, spreadsheets, code archives, CSVs) and have them ship to the user as native uploads without needing an explicit ``MEDIA:`` tag. Image / video extensions still embed inline where the platform supports it; document extensions route through ``send_document``. The dispatch partition lives in ``gateway/run.py``. Paths inside fenced code blocks (``` ... ```) and inline code (`...`) are ignored so that code samples are never mutilated. Returns: Tuple of (list of expanded file paths, cleaned text with the raw path strings removed). rc3@K|]}|dVdSrrrs rrz:BasePlatformAdapter.extract_local_files.. s,EEaAHHSMMEEEEEErzB(?K|]\}}|cxko|kncVdSrr)rrBrrs rrzLBasePlatformAdapter.extract_local_files.._in_code.. s;;;1qC||||!||||;;;;;;r)r)r code_spanss`r_in_codez9BasePlatformAdapter.extract_local_files.._in_code s';;;; ;;;;; ;rrz6Skipping bare file path in reply (no file on disk): %scg|]\}}|Srr)rrrs rrz;BasePlatformAdapter.extract_local_files.. s444ka444rrrr)rrsrcompile IGNORECASErrrrorrrSrrrrisfilerrrrrr$rr )rF_LOCAL_MEDIA_EXTSext_partpath_rerrfoundr]r$rruniquepathsr_exprs @rextract_local_filesz'BasePlatformAdapter.extract_local_files s2088EE3DEEEEE * QT\ \_e e M    17BIFF 4 4A   qwwyy!%%''2 3 3 3 3\733 4 4A   qwwyy!%%''2 3 3 3 3 <# <$ < < < < < <%%g..  Ex && ++a..Cw))#..Hw~~h''  c8_---- L"3'' EE" / /MCt##""" sHo...44V444  A# 3 3 T!//#r22fY88>>@@Gg~r@interval stop_eventc4Ktdtd|dz } |n|rZ t|dr- ||d{Vn#t $rYnwxYw|j|dS||jvr tj | |||d{VnW#tj $rYnFtj $rt $r+}td|j|Yd}~nd}~wwxYw|tj|d{V"tj}||z}|sZ||z } | d krnTNrr#rlz&[%s] send_typing error (non-fatal): %sr)rminis_sethasattrrrzrdiscardrKwait_forr TimeoutErrorrarrJrrLget_running_looprZ) rrrr2r_send_typing_timeout typing_errloopdeadline remainings r _keep_typingz BasePlatformAdapter._keep_typing sM< #4S(T/)B)BCC1 1# )j.?.?.A.A)Rt]++ **73333333333 D   ' ' 0 0 0 0 0[$"555%. ,,Wx,HH$8#/"1$ D Iz %!-111111111/1199;;1$++--> (499;; 6I A~~ "-D)(<(<=========%++-->$$&&t]++ **73333333333 D   ' ' 0 0 0 0 0a# H%    D   t]++ **73333333333 D   ' ' 0 0 0 0 0 t]++ **73333333333 D   ' ' 0 0 0 0sIA** A76A7 I 1CID&!I#D&;!D!I!D&&C IH!! H.-H. II!J> I!!J>6J JJ>LK,+L, K96L8K99Lc:|j|dS)uPause typing indicator for a chat (e.g. during approval waits). Thread-safe (CPython GIL) — can be called from the sync agent thread while ``_keep_typing`` runs on the async event loop. N)rrrs rpause_typing_for_chatz)BasePlatformAdapter.pause_typing_for_chat^ s! (((((rc:|j|dS)z;Resume typing indicator for a chat after approval resolves.N)rrrs rresume_typing_for_chatz*BasePlatformAdapter.resume_typing_for_chatf s ##G,,,,,rcK|r0|j|}|| ||d{VdS#t$rYdSwxYw)zDSignal the active session loop to stop and clear typing immediately.N)rrrrrz)rrwrinterrupt_events rinterrupt_session_activityz.BasePlatformAdapter.interrupt_session_activityj s  &"377 DDO*##%%% ""7++ + + + + + + + + +    DD sA A! A! generationcallbackr c |rt|sdS|j|}|t|trt |dkr|\}}nd|}}|$|"t |t |krdSt|r1|"| t |t |kr | |d fd }|}| ||j|<dSt ||f|j|<dS)uRegister a deferred callback to fire after the main response. ``generation`` lets callers tie the callback to a specific gateway run generation so stale runs cannot clear callbacks owned by a fresher run. If a callback for the same ``session_key`` (and generation, when set) is already registered, the new callback is chained — both fire, in registration order, with per-callback exception isolation. This lets independent features (background-review release + temporary-bubble cleanup) coexist without clobbering each other. Stale-generation callers never overwrite a fresher generation's slot. NrDrc n,#t$rtddYnwxYw dS#t$r tddYdSwxYw)NzPost-delivery callback failedTr8)rzrrJ)_new_prevsr_chainedzEBasePlatformAdapter.register_post_delivery_callback.._chained sU$UUU %Dt TTTTTUU$UUU %Dt TTTTTTUs &77 A&A10A1rc)callablerrrrfrEr) rrwr r r| existing_gen existing_cbrrrs @@rregister_post_delivery_callbackz3BasePlatformAdapter.register_post_delivery_callbacku sJ& (8"4"4  F044[AA  (E** ;s8}}/A/A,4) kk,0(k (* OOc,&7&777 $$ $$%|$$J77#UUUUUUU$  9AD )+ 6 6 6:=j//89TD )+ 6 6 6rc|sdS|j|}|dSt|trjt |dkrW|\}}|"t |t |krdS|j|dt|r|ndS|dS|j|dt|r|ndS)zCPop a deferred callback, optionally requiring generation ownership.NrD)rrrrfrErpopr)rrwr rentry_generationr s rpop_post_delivery_callbackz.BasePlatformAdapter.pop_post_delivery_callback s 4-11+>> =4 eU # # <E a). & h%#.>*?*?3z??*R*Rt  ) - -k4 @ @ @'11;88t ;  !4 %))+t<<< 1uuT1rc KdS)z.Hook called when background processing begins.Nr)rr8s ron_processing_startz'BasePlatformAdapter.on_processing_start routcomec KdS)z1Hook called when background processing completes.Nr)rr8rs ron_processing_completez*BasePlatformAdapter.on_processing_complete rr hook_namerQrcKt||d}t|sdS ||i|d{VdS#t$r-}td|j||Yd}~dSd}~wwxYw)zARun a lifecycle hook without letting failures break message flow.Nz[%s] %s hook failed: %s)rrrzrrr)rr rQrhookrs r_run_processing_hookz(BasePlatformAdapter._run_processing_hook stY--~~  F O$''' ' ' ' ' ' ' ' ' ' O O O NN4diA N N N N N N N N N Os6 A-"A((A-rbct|sdS|tfdtDS)zGReturn True if the error string looks like a transient network failure.Fc3 K|]}|vV dSrr)rpatlowereds rrz:BasePlatformAdapter._is_retryable_error.. s'GGc3'>GGGGGGr)rr_RETRYABLE_ERROR_PATTERNSrbr's @r_is_retryable_errorz'BasePlatformAdapter._is_retryable_error sC 5++--GGGG-FGGGGGGrcJ|sdS|}d|vpd|vpd|vS)uReturn True if the error string indicates a read/write timeout. Timeout errors are NOT retryable and should NOT trigger plain-text fallback — the request may have already been delivered. Fz timed out readtimeout writetimeout)rr)s r_is_timeout_errorz%BasePlatformAdapter._is_timeout_error s> 5++--g%^')A^^W^E^^rr c4t|tr|j}|5 t|}n#t $rd}YnwxYw|r(|dkr"t |jtjurd}|j t|pdfS|dfS)aUnwrap a handler response into (text, ttl_seconds). Accepts a plain string, ``None``, or an :class:`EphemeralReply`. Returns ``(text, ttl)`` where ``ttl > 0`` means the caller should schedule a deletion via :meth:`_schedule_ephemeral_delete` after the send succeeds. ``ttl`` is forced to 0 when the adapter doesn't override :meth:`delete_message` so non-supporting platforms silently degrade to normal sends. Nr) rrhrirr^rzrrWrzrm)rr ttls r_unwrap_ephemeralz%BasePlatformAdapter._unwrap_ephemeral s h / / 0&C{dDDFFGGCC CCC sQww4::#<@S@b#b#b=#chQ--/ /{s!A AArD max_retries base_delayrac K|||||d{V}|jr|S|jpd}|jp||} | s||r|S| rft d|dzD]} |d| dz zztjddz} t d|j | || |tj | d{V|||||d{V}|jr%td|j | |cS|jpd}|js||sntd |j ||d } ||| ||d{Vn8#t$r+} td |j | Yd} ~ nd} ~ wwxYw|St d |j |||d |dd||d{V}|js&td|j |j|S)ax Send a message with automatic retry for transient network errors. On permanent failures (e.g. formatting / permission errors) falls back to a plain-text version before giving up. If all attempts fail due to network errors, sends the user a brief delivery-failure notice so they know to retry rather than waiting indefinitely. r{NrrJrDrz7[%s] Send failed (attempt %d/%d, retrying in %.1fs): %sz[%s] Send succeeded on retry %dz4[%s] Failed to deliver response after %d retries: %su⚠️ Message delivery failed after multiple attempts. Please try again — your request was processed but the response could not be sent.z/[%s] Could not send delivery-failure notice: %su3[%s] Send failed: %s — trying plain-text fallbackz+(Response formatting failed, plain text:) i z"[%s] Fallback send also failed: %s)rKr4rbrdr*r.rDrandomuniformrrrrKrLrrzrJ)rrrFrIr2r2r3r error_str is_networkrPdelaynotice notify_errfallback_results r_send_with_retryz$BasePlatformAdapter._send_with_retry s.$yy !         > ML&B %L)A)A))L)L  d44Y?? M   K!O44  "aGaK&89FN1a"KK A49gVVV!MMM"L.B (D,D,DY,O,OE SUYU^`kmvwwwmk))GVhai)jjjjjjjjjj kkkLL!RTXT]_ijjjjjjjjk  LdiYbccc $ TGETENTT !*! !        & a LL=ty/J_ ` ` `s8F G "!GG  existing_textnew_textc|s|Sd|dD}||vr|d|S|S)a`Merge a new caption into existing text, avoiding duplicates. Uses line-by-line exact match (not substring) to prevent false positives where a shorter caption is silently dropped because it appears as a substring of a longer one (e.g. "Meeting" inside "Meeting agenda"). Whitespace is normalised for comparison. c6g|]}|Srr)rcs rrz6BasePlatformAdapter._merge_caption..e s LLL1QWWYYLLLrr)rr )r>r?existing_captionss rr{z"BasePlatformAdapter._merge_captionZ so OLL 0C0CF0K0KLLL >>  #4 4 4#333399;; ;rc>t|dd}| i}||_|S)Nr)rr)rstores r_text_debounce_storez(BasePlatformAdapter._text_debounce_storej s+.55 =E"'D  rc t|dddkoc|jtjkoNt|dd o<| o't |jpd}|rEt d|j t|dd t|jpd|S) z=Return True for normal text eligible for queue-mode debounce.rrqueuerFFrzC[%s] Queue-text debounce candidate accepted: session=%s text_len=%drwr) rr<r#r)rIrSrmr rrJrrE)rr8rs r!_is_queue_text_debounce_candidatez5BasePlatformAdapter._is_queue_text_debounce_candidateq s D+[ 9 9W D 1"k&66 1E:u555 1$$&&& 1ej&B--//00    LLU }c22EJ$"%%      rr|cdtdttdfdzfd}||}||}|duo||kS)zDReturn True when two text debounce events came from the same sender.rr.NcLt|dd}|dStt|dd}t|ddpt|dd}|r|t|fSt|dddvr(t|ddr|dt|jfSdS) Nr1r user_id_altryr*>r+privaterr+)rrrr)rr1rsenders r _identityzFBasePlatformAdapter._can_merge_text_debounce_events.._identity sY$77F~t%gfj$&G&GHHHV]D99]WVYX\=]=]F / #f++..v{D115FFF7SY[dfjKkKkF $FN(;(;<<4r)r;rfr)rr|r8rOexisting_senderincoming_senders r_can_merge_text_debounce_eventsz3BasePlatformAdapter._can_merge_text_debounce_events sf  %S/D2H    $)H--#)E**d*Q//QQrc||}|dStj}|j|jz}|j|jz}tdt|||z S)z??#EFFFrczK|}||}|||j|s||d{V||}|g||j|sL|j|}|.|||rt |j||ddStj}|t|d||}|||<n|j r3|jj r|jj d|j n|j |j_ t|dd}|pt|dd}|t||j_ |.t|jdrt||j_||_|j2|js|j||} t+j||| |_dS)z@Buffer normal queue-mode busy text and schedule a bounded flush.NTrt)r8rWrXrYryr/r&)rFrrRr8_flush_text_debounce_nowrrrZrTrVrmrrr/rr&rYrWdonecancelrXrKrd_flush_text_debounce) rrwr8rErUexisting_pendingrTlatest_message_id latest_anchorr9s r_queue_text_debouncez(BasePlatformAdapter._queue_text_debounce s^))++ +&&  T%I%I%+W\%]%] // << < < < < < < <IIk**E )M)Mek[`)a)a #'#9#=#=k#J#J #/D4X4XYikp4q4q//.##'  n =% E "'E+  z {'$u{'775:777  !(|T B B -\@UW[1\1\M ,),->)?)? &(WU[BW-X-X(25m2D2D /EM : !%*//*;*; ! J     ))+66()B)B;PU)V)VWW rr9cK tj|d{V||d{Vnf#tj$rTYtj}||}||j|ur d|_dSdSdSwxYw tj}||}||j|ur d|_dSdSdS#tj}||}||j|urd|_wxYw)z2Timer task that flushes the debounced text buffer.N)rKrLrZra current_taskrFrrW)rrwr9currentrUs rr]z(BasePlatformAdapter._flush_text_debounce s "-&& & & & & & & &// << < < < < < < < <%    *,,G--//33K@@E UZ7%:%:! ! %:%:   =*,,G--//33K@@E UZ7%:%:! ! %:%:*,,G--//33K@@E UZ7%:%:! !!!!s'5:C3B C3BC33AEcK|}||}|dStj}|j;|j|ur2|js|jd|_|j|}||||j sdS| |d}|dSt|j||j ddS)z@Force-flush one debounced busy-text burst into the pending slot.NFTrt) rFrrKrcrWr[r\rrRr8rr)rrwrErUrdr^s rrZz,BasePlatformAdapter._flush_text_debounce_now s ))++ +&& =5&(( : !ej&?&? HYHY&? J      155kBB  (889I5;WW )5 +t,, =5#  "  K     trc||d}|;|j6|js|jdSdSdSdS)zACancel and drop pending text debounce state for control commands.N)rFrrWr[r\)rrwrUs r_discard_text_debouncez*BasePlatformAdapter._discard_text_debounce so))++// TBB  !7 @Q@Q!7 J         !7!7!7!7rguardricb|j|}|dS|||urdS|j|=dS)acRelease the adapter-level guard for a session. When ``guard`` is provided, only release the entry if it still points at that exact Event. This lets reset-like commands swap in a temporary guard while the old processing task unwinds, without having the old task's cleanup accidentally clear the replacement guard. N)rr)rrwri current_guards r_release_session_guardz*BasePlatformAdapter._release_session_guard sK-11+>>  F  e!;!; F  !+ . . .rc|j|}|dSt|dd}t|o |S)ukReturn True if the owner task for ``session_key`` is done/cancelled. A lock is "stale" when the adapter still has ``_active_sessions[key]`` AND a known owner task in ``_session_tasks`` that has already exited. When there is no owner task at all, that usually means the guard was installed by some path other than handle_message() (tests sometimes install guards directly) — don't treat that as stale. The on-entry self-heal only needs to handle the production split-brain case where an owner task was recorded, then exited without clearing its guard. NFr[)rrrrS)rrwrWr[s r_session_task_is_stalez*BasePlatformAdapter._session_task_is_stale!sM"&&{33 <5tVT**DOTTVV$$$rcX||jvrdS||sdStd|j||j|d|j|d|j|d||dS)uClear a stale session lock if the owner task is already gone. Returns True if a stale lock was healed. Returns False if there is no lock, or the owner task is still alive (the normal busy case). This is the on-entry safety net sidbin's issue #11016 analysis calls for: without it, a split-brain — adapter still thinks the session is active, but nothing is actually processing — traps the chat in infinite "Interrupting current task..." until the gateway is restarted. FzB[%s] Healing stale session lock for %s (owner task is done/absent)NT) rrnrrrrrrrgrrws r_heal_stale_session_lockz,BasePlatformAdapter._heal_stale_session_lock2s d3 3 35**;77 5 P I    !!+t444 "";555  T222 ##K000tr)rrc|ptj}||j|<tj|||}||j|< |j|nC#t$r6|j |d| ||YdSwxYwt|dr>| |jj | |jj dS)aHSpawn a background processing task under the given session guard. Returns True on success. If the runtime stubs ``create_task`` with a non-Task sentinel (some tests do this), the guard is rolled back and False is returned so the caller isn't left holding a half-installed session lock. NrhFadd_done_callbackT)rKEventrrd_process_message_backgroundrrrr"rrlrrsrr)rr8rwrrirWs r_start_session_processingz-BasePlatformAdapter._start_session_processingMs 27=??-2k*"4#C#CE;#W#WXX+/K(   " & &t , , , ,      # #K 6 6 6  ' ' 5 ' A A A55   4, - - K  " "4#9#A B B B  " "4#A#I J J JtsA..>   -:k*1%,@WX]@^@^__ + !22599999999H"44X>>OE8   JIJJL(  00!L0!4U;;( 1 a<E>>AGcv K|jsdSt|||t|j|jjdd|jjdd}||jvr| |||jvrx| }ddl m }||r|d vrq| | ||||d{Vn;#t$r.}t d |j||d Yd}~nd}~wwxYwdSt d |j|| t)|jt+|}||d{V}||\}} |rq||jj|t+|| d{V} | dkr5| jr.| jr'||jj| j| n;#t$r.}t d |j||d Yd}~nd}~wwxYwdS|s[ ddlm} | |du} n#t$rd} YnwxYw| r't d|j| t)|jt+|}||d{V}||\}} |rq||jj|t+|| d{V} | dkr5| jr.| jr'||jj| j| n:#t$r-}t d|j|d Yd}~nd}~wwxYwdS|jZ |||d{VrdSn:#t$r-}t d|j|d Yd}~nd}~wwxYw|j tBj"kr9t d|j|tG|j$||dS|%|rDt d|j||j&|'||d{VnLt d|j|tG|j$|||j tBj(kdS|)||dS)z Process an incoming message. This method returns quickly by spawning background tasks. This allows new messages to be processed even while an agent is running, enabling interruption support. Ngroup_sessions_per_userTthread_sessions_per_userF)rrr)should_bypass_active_session>newstopresetz&[%s] Command '/%s' dispatch failed: %sr8rr{r)clarify_gatewayz5[%s] Routing message to clarify text-intercept for %sz/[%s] Clarify text-intercept dispatch failed: %sz$[%s] Busy-session handler failed: %sz=[%s] Queuing photo follow-up for session %s without interruptun[%s] New text message while session %s is active — debouncing follow-up (busy_text_mode=queue, window=%.2fs)uq[%s] New message while session %s is active — queuing follow-up (no interrupt, will cascade after current turn)rt)*rr_r=rr1rextrarrrqrNhermes_cli.commandsrrgrrzrrbrrJr5r9r1r=rr4r/rgtoolsrget_pending_for_sessionrr<r#r+rrrIrrar)rv) rr8rwrrr _thread_metar rrr _clarify_mod_has_text_clarifys rhandle_messagez"BasePlatformAdapter.handle_messages$  F(/// ""5)))' L$(K$5$9$9:SUY$Z$Z%)[%6%:%:;UW\%]%]    $/ / /  ) )+ 6 6 6 $/ / /##%%C H H H H H H++C00*  222// <<<"CCE;X[\\\\\\\\\\$ D IsA% F  NIsKm#>u|MdejMkMk#l#lL%)%:%:5%A%AAAAAAAH&*&<&)>u)E)E#E#E#E#E#E#E*.*@*@*J*Jx "'+'<'<(- (<(-)@)G)G)5 (=((""""""B (!|| |r}| $ ? ?,1L,@/1}08!@!"!"!" % M Iq4% F)5f!77{KKKKKKKK fffLL!GTU`dLeeeeeeeef ![%666 \^b^gituuu+D,BKQVWWW55e<<  PI4 // UCCCCCCCCCC FI  ,*$1[5EE  F &&uk:::::st+D E$D<<E)CH22 I*<$I%%I*3J J J CN O#OOO44 P+>#P&&P+ctjdd}|dkrdS|dkr d\}}tj|dz |dz S t tjdd}n#t tf$rd }YnwxYw t tjd d }n#t tf$rd }YnwxYwtj|dz |dz S) ac Return a random delay in seconds for human-like response pacing. Reads from env vars: HERMES_HUMAN_DELAY_MODE: "off" (default) | "natural" | "custom" HERMES_HUMAN_DELAY_MIN_MS: minimum delay in ms (default 800, custom mode) HERMES_HUMAN_DELAY_MAX_MS: maximum delay in ms (default 2500, custom mode) HERMES_HUMAN_DELAY_MODErrnatural)  g@@HERMES_HUMAN_DELAY_MIN_MS800rHERMES_HUMAN_DELAY_MAX_MS2500r)rgetenvrr5r6rr"r#)rmin_msmax_mss r_get_human_delayz$BasePlatformAdapter._get_human_delays y2E::@@BB 5==3 9  &NFF>&6/6F?CC C #>FFGGFF:&   FFF  #>GGHHFF:&   FFF ~fvov???s$"A::BB"B77C  C c L,?@ABKd@dA@Afd}|j|ptj}||j|<t |jt |}d|i} tj|j }n#ttf$rd}YnwxYw| d|j vr||d<tj |j |jjfi|Bd>Bfd } |d|d{V||d{V} t#| t$} || \} } | r@|r,||jvr#t,d |j|d} | s+t,d |j|jj| rd | v} | } || \}} ||}|| \}}t;|}|r|jj|j=| |?} |rt,d|jt?| |@|jj||| d{Vn:#t\$r-}!t,"d|j|!d Yd}!~!nd}!~!wwxYwhd!}"hd"}#dd#lAmB?g}$g}%|D]`\}&}'t_|&jCD}(|(|#vr|'s| s|$E|&I|%E|&|'fag})|D]W}*t_|*jCD|#vr| s|$E|*B|)E|*X|$rs ?fd$|$D}+|@|jj|+|| d{Vn:#t\$r-}!t,"d|j|!d Yd}!~!nd}!~!wwxYw|%D]I\}&}'| dkrtjF| d{V t_|&jCD},t|j1|,|'%r)|H|jj|&|&d{V}-nU|,|"vr)|I|jj|&|'d{V}-n(|J|jj|&|(d{V}-|-j<s't,"d)|j|,|-jK#t\$r,}.t,"d*|j|.Yd}.~.Cd}.~.wwxYw|)D]}*| dkrtjF| d{V t_|*jCD},|,|"vr)|I|jj|*|'d{Vn(|J|jj|*|(d{V#t\$r,}/t,Kd+|j|*|/Yd}/~/d}/~/wwxYw@p|p|p|p|}0|0sM| r9t,Kd,|jt?| |jj@rAntk|  }1|d-||1r tjMn tjNd{V|O|d{V||jvr|jP|}2t,d.|j|j|}3|3|3Q|d{Vtj |R|2|}4|4|jS|< |jTU|4|4V|jTjWn#t$rYnwxYw |d{V t|d/r%|Y|jjd{Vn#t\$rYnwxYwtm|d0d}5t|d1r|Z||52}6n%tm|d3iP|d}6t|6r] |6}7tj\|7r!tj]|7t4d{Vn#tj_t\f$rYnwxYw t|d/r%|Y|jjd{Vn#t\$rYnwxYw|O|d{V|jP|d}8|8tj`}9|jS|}:|:|:|9ur |8|j|<dSt,d5|j|j|}3|3|3Qtj |R|8|}4|4|jS|< |jTU|4|4V|jTjWdS#t$rYdSwxYwtj`}9|9=|jS||9ur#|jS|=|a||6dSdSdSnb#tjb$rUtj`}9tjc};|9 |9|jdvr tjN};|d-||;d{Vt\$r}<|d-|tjNd{Vt,Kd7|j|t |jt |}|h|jjd:|=d;|>d<|=d{Vn#t\$rYnwxYwYd}<~|dSdt|ddrddSdS)NTr4F)r)rdelivery_attempteddelivery_succeededs r_record_deliveryzIBasePlatformAdapter._process_message_background.._record_deliverys=~!% vy%00 *%)""" * *rr2NrrcK tjtjdd{VdS#tjtjf$rYdSwxYw)Ng?r)r\rKrr|rar) typing_tasksr_stop_typing_taskzJBasePlatformAdapter._process_message_background.._stop_typing_tasks     &w~k'B'BCPPPPPPPPPPPP*G,@A     s.A A('A(rz:[%s] Suppressing stale response for interrupted session %sz0[%s] Handler returned empty/None response for %srz<[%s] extract_images found %d image(s) in response (%d chars)z5[%s] extract_local_files found %d file(s) in responsez[%s] response_delivery_recovered: extract pipeline reduced a non-empty response (%d chars) to empty with no attachment; delivering recovered original to %sr)text_to_speech_toolcheck_tts_requirementsz!Empty text after markdown cleanuprrz[%s] Auto-TTS failed: %si)rrrr2r4z&[%s] Sending response (%d chars) to %sTnotifyr{rz1[%s] Extracted %d image(s) to send as attachments)rrr2rz[%s] Error batching images: %sr8>.3gprvrursrrrt>rr"rrr)quotec0g|]}d|dfS)rrr)rr_quotes rrzCBasePlatformAdapter._process_message_background..s/!T!T!T!#8VVAYY#8#8""=!T!T!Tr)r;)rrr2)rrr2)rrr2z"[%s] Failed to send media (%s): %sz[%s] Error sending media: %sz$[%s] Error sending local file %s: %sz[%s] response_delivery_dropped: non-empty response (%d chars) produced no delivered message or attachment for %s (empty after extract, recovery yielded nothing).rz([%s] Processing queued follow-up messager_hermes_run_generationrr rruH[%s] Late-arrival pending message during cleanup — spawning drain taskrhz[%s] Error handling message: %si,zno details availablezSorry, I encountered an error (z). z2 Try again or use /reset to start a fresh session.rqrc)irrrKrtr5r1r9inspect signaturerr"r# parametersrdrr#rrrhr1rrrrrrJrrrrr rErrrrr<r#r.tools.tts_toolrrrr to_threadloadsrzrexistsrrTELEGRAMrrSrrremover_rr=r4r/rgrrrrrrrrLrArrrrbr3r7r8rZrclearrurrrrsrrrrr isawaitabler'_POST_DELIVERY_CALLBACK_TIMEOUT_SECONDSrrcrlrar9rrrBrrK)Crr8rwrr_thread_metadata_keep_typing_kwargs_keep_typing_sigrr is_ephemeral_response_ephemeral_ttlforce_document_attachments_response_pre_extractrr text_content local_files _recovered _tts_pathrr_json speech_texttts_result_strtts_datatts_err_tts_caption_deliveredtelegram_tts_caption tts_result _reply_anchorrr batch_err _VIDEO_EXTS _IMAGE_EXTS _image_paths_non_image_mediarr;_ext_non_image_localr_batchr: media_result media_errfile_err_anything_delivered processing_okr_active drain_task_callback_generation_post_cb _post_result late_pendingrc existing_taskrr error_type error_detailrrrrsC @@@@rruz/BasePlatformAdapter._process_message_backgroundsj#" * * * * * */33K@@SGMOO-<k*7u|E\]bEcEcdd)+;< $&01BCC  :& $ $ $#    $  #|7G7R'R'R0?  -) D  $  %          t T++,A5II I I I I I I I"22599999999H$.x$H$H !(,'='=h'G'G $Hn #**,,  4#999 PI   r OQUQZ\a\h\pqqqG  .?(-J*)1%)-(:(:8(D(D% X">>{KK (,':':8'D'D$ 7|DDJJLL GKK ^`d`iknoukvkvx{}EyFyFGGG ,z 150H0H0V0V-K"&"B"B;"O"OK"z $[]a]fhklwhxhxyyy % 2 2+ 2 2"9!B!B!H!H!J!JJ!2Q!Is+@'A'A5'B'BH(0 [(A(AI$WWW'A49gVVVVVVVVW*/&!i!7!7!9!9!!/3, MX->>> ,? ,UdU 3| C C3?0+/==$)L$8'0$8%5 ,9,,&&&&&& 260ZWZTY5Z5Z22.!Ii0000&!!! D!!Ii0000&!!! D! $(>$KK H$)UXYeUfUfhmhth|}}}$;E$B$BM(3+/0@+A+A(59(22,4d+;(#'#8#8 % 4 ,!.!1 $9$$F %$V,,, ' *Q.."N/"-/77$)L$8'-'8(68#3355  nKK SUYU^`cdj`k`kllln"77$)L$8#)%5(3 8 %nnn'GT]hlmmmmmmmmn POO HHH 988888%' )+ ,7HH(J ++288::D ++$,,$>,%++J7777(//X0FGGGG)+ !,;;IY.4466+EE$>F$++I6666(// :::: n n!T!T!T!T|!T!T!T"77$)L$8#)%5(3 8 %nnn'GT]hlmmmmmmmmn-=]](J"Q%mK888888888]":..5;;==5dmSS[\\\15(- (<+5)92A22,,,,,,LL !K//15(- (<+5)92A22,,,,,,LL 261C1C(- (<*4)92D22,,,,,,L ,3u"NN+OQUQZ\_amasttt$]]]'EtyR[\\\\\\\\]"2mmI"Q%mK888888888m"9oo4::<<+--"&//(- (<+4)9#2## #'"4"4(- (<*3)9#5## %mmm %KTYXackllllllllm '<*@<#K0*..z:::001G1OPPPP D@$#%% % % % % % % % 4//A**5<+?@@@@@@@@@    $+($$ t9:: `::3; #4)CRHHLL[Z^__!! #+8::L*<88%.($K ,i8D 4//A**5<+?@@@@@@@@@    // << < < < < < < < 155k4HHL'&355 $ 3 7 7 D D !-%\99;GD*;777LLb #377 DDG* !(!488{SS""J 8BD' 4.22:>>>"44T5K5STTTTT$. '355 +0C0G0G 0T0TXd0d0d+K8// ?/SSSSS,+0d0dm5L%   "/11L'1G#|4;Y'Y'Y+3++,DeWUU U U U U U U U    ++,DeM^Mfgg g g g g g g g LL:DIqSWL X X X !!WW- /21vvQs1vvdsd||;Q #>u|MdejMkMk#l#l ii!L0L*LL'LLL.     # .$#%% % % % % % % % 4//A**5<+?@@@@@@@@@    $+($$ t9:: `::3; #4)CRHHLL[Z^__!! #+8::L*<88%.($K ,i8D 4//A**5<+?@@@@@@@@@    // << < < < < < < < 155k4HHL'&355 $ 3 7 7 D D !-%\99;GD*;777LLb #377 DDG* !(!488{SS""J 8BD' 4.22:>>>"44T5K5STTTTT$. '355 +0C0G0G 0T0TXd0d0d+K8// ?/SSSSS,+0d0de$#%% % % % % % % % 4//A**5<+?@@@@@@@@@    $+($$ t9:: `::3; #4)CRHHLL[Z^__!! #+8::L*<88%.($K ,i8D 4//A**5<+?@@@@@@@@@    // << < < < < < < < 155k4HHL'&355 $ 3 7 7 D D !-%\99;GD*;77LLb #377 DDG* !(!488{SS""J 8BD' 4.22:>>>"44T5K5STTTT$. '355 +0C0G0G 0T0TXd0d0d+K8// ?/SSSS,0dsB/B BB#Jz<%BO('z<( P2!Pz<P(z<A2S9S z< Sz<Sz<T S54T5 T?TTTDz<%)Yz< Z#Z<z<ZCz<7^z< _ #_z<_  +z<8C)c#!z<# d-!dz<d'z<A;f=<z<= g3"g.)z<.g33E6z<*9n$#z<$ n1.z<0n11z<5o<< p p :?r::ss5t tt9y y! y!:AL#.s%PPPdDIIKKPTPPPrc3>K|]}tj|VdSr)rKr|rts rrz>BasePlatformAdapter.cancel_background_tasks..s,;;'.++;;;;;;rreturn_exceptionsTr{rNzo[%s] %d background task(s) did not exit within 5s; releasing tracking and letting them unwind in the backgroundc:g|]}||Srrrs rrz?BasePlatformAdapter.cancel_background_tasks..&s%#E#E#E!AFFHH#EA#E#E#Er)rDrrrr\rKrgatherrrrrrErrrrrrFvaluesrWr[)rMAX_DRAIN_ROUNDSrtasksrWrUs rcancel_background_tasksz+BasePlatformAdapter.cancel_background_taskss<('((  APPd&<PPPE   .224888  &N;;U;;;*. '   SIs#E#Eu#E#E#EFF    $$&&& &,,... !!### $$&&& ##%%%$3355<<>>?? $ $Ez%ejoo.?.?% !!### !!##))+++++s5BAC C cR||jvo|j|S)z3Check if there's a pending interrupt for a session.)rrrps rhas_pending_interruptz)BasePlatformAdapter.has_pending_interrupt5s)d33c8Mk8Z8a8a8c8ccrc8|j|dS)z0Get and clear any pending message for a session.N)rrrps rget_pending_messagez'BasePlatformAdapter.get_pending_message9s%))+t<<s:$+    rc KdS)z Get information about a chat/channel. Returns dict with at least: - name: Chat name - type: "dm", "group", "channel" Nrrs r get_chat_infoz!BasePlatformAdapter.get_chat_infods  rc|S)z Format a message for this platform. Override in subclasses to handle platform-specific formatting (e.g., Telegram MarkdownV2, Discord markdown). Default implementation returns content as-is. r)rrFs rformat_messagez"BasePlatformAdapter.format_messageos r max_lengthrRzCallable[[str], int]c|pt}|||kr|gSd}d}g}|}d}|r|d|dnd} ||z || z ||z } | dkr|dz} || ||z||z kr|| |zn |turt|| |} n| } |d| } | d} | | dzkr| d } | dkr| } |d| }|d |d z }|dzdkr|d }|d kr;||dz d kr,|d d |}|d kr||dz d k,|d krI|d d |}|dd |}t ||}|| dzkr|} |d| }|| d}| |z}|du}|pd}|dD]n}|}| drC|rd}d}2d}|dd}|r|d nd}o|r||z }|}nd}|||t|dkr*t|fdt|D}|S)a9 Split a long message into chunks, preserving code block boundaries. When a split falls inside a triple-backtick code block, the fence is closed at the end of the current chunk and reopened (with the original language tag) at the start of the next chunk. Multi-chunk responses receive indicators like ``(1/3)``. Args: content: The full message content max_length: Maximum length per chunk (platform-specific) len_fn: Optional length function for measuring string length. Defaults to ``len`` (Unicode code-points). Pass ``utf16_len`` for platforms that measure message length in UTF-16 code units (e.g. Telegram). Returns: List of message chunks z ```Nz```ryrrJrDr`z\`r\rFTrkc2g|]\}}|d|dzddS)z (rJrr&r)rrvrtotals rrz8BasePlatformAdapter.truncate_message..sG19E5,,AE,,E,,,r) rErrSrfindrrrrr rrr)rFrrR_lenINDICATOR_RESERVE FENCE_CLOSEchunksr carry_langrheadroom _cp_limitregionsplit_atrbacktick_countlast_bt safe_splitnl_split chunk_body full_chunkin_codelangrstrippedtagrs @rtruncate_messagez$BasePlatformAdapter.truncate_messagezs2} 4==J & &9   %) S &.8-C):))))F"$55V DttKGXGXXH!||%?tF||dd9oo->O1OOO fy01113.y(DII $ z z*F||D))H)q.((!<<,,!||$")8),I&__S11IOOE4J4JJN!Q&&#//#..kki! &<&D&D'ooc1g>>Gkki! &<&D&DQ;;!*a!A!AJ(tQ@@H!$Z!:!:J!IN22#-"9H9-J!()),3355I*,J!,G#D"((.. = =::<<&&u--=="'!"&&qrrl002214*  0.2       4S>*       T/#/S/T////*(d(((( % XseXc]23 4 %  % % % %I<IDIIII(-*      ^ 6$)D((( # B @@@@@ @  @ @@@@:  *30         R.2!@!@!@!@ !@  !@  !@4S>*!@ !@!@!@!@T.27 7 7 7 $ 7  7  7 4S>*7  7 7 7 7 |#'-1    #   3-  4S>*       (             .2 7`7`7`U38_%7`4S>* 7`  7`  7`7`7`7`z"&"&-1 dddd# d 3- d 4S>* d dddd."&"&-1 FFFF# F 3- F 4S>* F FFFF"&s&t&&&\& --d5c?.CS.H(I---\-f"&"&-1 dddd# d 3- d 4S>* d dddd*@S@S@@@@ W W W  W W W W$"&"&-1 dddd# d 3- d 4S>* d dddd0"&#'"&-1dddd# d C= d 3- d4S>*d dddd2"&"&-1 dddd# d 3- d 4S>* d dddd*2328C=222\2 DsDy9I4J   \  49   \ %s%s%%%\%P%%%%%\%NQsQuT%T 2B-CS-H'IQQQ\QfRSRU49c>-BRRR\Rn+/ P1P1P1P1 MD( P1  P1P1P1P1d)S)T))))-c-d---- C # RV     "& <U<U<U<U<U $J <U  <U<U<U<UD"& 2222$J 2 D 22226=|=====@,@IZ@_c@@@@OCOOsOW[OOOOH8C=HTHHH\H _# _4 _ _ _\ _#% s8J2K4#'PPPP3- P  P  PP PPPPd hsm s s   \ d30A+A&B|$R R\R^bRRRR&GGGGGG2Xc2X,2XSW2X2X2X2Xh "c "% "D " " " "#$< # $    $*. //// & /  ////(%#%$%%%%"CD@48  "'-0   H# $ 15151515 15  15  15151515fCC}C  CCCC$KTKTKT KT  KTKTKTKTZ~;,~;4~;~;~;~;@@e@@@\@4bT|bTRUbTZ^bTbTbTbTH5,5,5,5,ndddddd=s=x 7M====$(!%#'#'$(%)%)"&(,$( %% % % C=%  % # % C= % C=% SM% c]% c]% % 3-% ! % SM% % !% % % % N 3 4S>   ^  c c    37AAAA/0A c AAA\AAArrzr)F)r)r")r"rD)rV)r )r rD)rr)r8r;rN)rrKrrWr@rr5rsocketrZrwrvrZr)abcrrrrutilsrrArBr frozensetr=r?r>rrrr!r%rr5r9rSrArrGrNrSrgrrfrrrrrrrrrrr:rrrpathlibrtypingrrrrrrrrenumr_Pathrinsert__file__rrgateway.configrrgateway.sessionrrhermes_constantsrrr*GATEWAY_SECRET_CAPTURE_UNSUPPORTED_MESSAGErrrrbytesr!r1rSrdrhrirmrorxr ryr|rSCREENSHOT_CACHE_DIRrrrrrrrrrrrrrrrrrrrrrr r rrrsrrE_MEDIA_EXT_ALTERNATIONrrrrrrrr!r#r3r;rVr[Patternr_rarhrr(r*rrrrzrrrr>s/  ########!!!!!!%%%%%%  8 $ $ iJJJKK #,)VV,<"="= y&'!233*.'$$$$$ S5US4ZSWZ^S^2.cDj.....cTd. + + + + + +#cc&#ss&      F!C$J!!!!H5C5E#sTz/$:5555(49&A&A3&Ac&At&At&A&A&A&ARcDIoc3h&G#c(&RUY&Y^b.$(IMDjS /E#s(O3c#h>E 4Z D C$J 4    <#(d #(uT4Z7H#(#(#(#(L3d VZB((((((((OOOOOOOOOOOOOOOOOOOO!!!!!!33uuX..008;<<===33333333<<<<<<<<UUUUUUUUUUb+ "&"&#"&"&S"&"&"&"&J6!.??T Ed"Sc888C8c8S8QT8888vsC8!. >>T Sc$88C8c8S8QT8888D!.??      T Sc $^$57GHH%~&9;PQQ  &&(( 9"C*M';= = = ##((7X%7W$7X%7[(7]*#603, # ($ tDz    ?????$ -T - - - -d4j"B33u33333"$dtKsKx}KKKKbBJABB777777   ? L J   L         L L  V P  X!" <#$  'F      ""F(U38_. F 7 7#6 7 7 7S$OOO"rz<>TUX&&M  ESS@#s@  L L L L L L L  L."& 5B5B5B 5B5B 5B 3- 5B k 5B5B5B5Bp     $    RRRRRRR Rj  BJF VVBJOQSQ^__BJ:BMJJD#U2:c?C+?%@8 ))))))) ).$!$!$!$!$!S$!$!$!X ;*;*;*3 ,-;*;* ;*  ;*  ;*;*;*;*J  <.)HU3HXCX=Y4Z*[[\ !Tz 4Z B!4444Tz4 #Y 4444n .# .# . . . . {/{/{/{/{/#{/{/{/{/{/r