Jj2NdZddlmZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z m Z mZmZddlmZddlmZdd lmZmZdd lmZdd lmZdd lmZdd lmZmZm Z m!Z!ej"e#Z$dZ%dZ&e'hdZ(dsdZ)dtdZ*ddddud!Z+dvd#Z,dvd$Z-dwd&Z.ddd'dxd0Z/dyd5Z0d6d7dzd9Z1d{d:Z2e'hd;Z3d|d=Z4dd>d}dEZ5dddddFd~dKZ6ddOZ7ddQZ8 dddZZ9dd]Z:dd^Z; dddbZddhZ?ddjZ@ddlZAd{dmZBddnZCddpZDddqZEgdrZFdS)uAssorted AIAgent runtime helpers — moved out of run_agent.py for clarity. Each function takes the parent ``AIAgent`` as its first argument (``agent``) except for the static helpers (``sanitize_tool_call_arguments``, ``drop_thinking_only_and_merge_users``) which are stateless. AIAgent keeps thin forwarders for backward compatibility. Methods covered: * ``convert_to_trajectory_format`` — internal -> trajectory-file format * ``sanitize_tool_call_arguments`` — repair corrupted JSON in tool_calls * ``repair_message_sequence`` — enforce alternation invariants * ``strip_think_blocks`` — remove inline reasoning from stored content * ``recover_with_credential_pool`` — rotate pool entries on 429 * ``try_recover_primary_transport`` — re-create OpenAI client after rate-limit * ``drop_thinking_only_and_merge_users`` — Anthropic-style cleanup * ``restore_primary_runtime`` — un-do fallback activation * ``extract_reasoning`` — pull reasoning fields out of API responses * ``dump_api_request_debug`` — write request body for post-mortem * ``anthropic_prompt_cache_policy`` — compute cache_control breakpoints * ``create_openai_client`` — build the per-agent OpenAI SDK client ) annotationsN)datetime)Path)AnyDictListOptional)get_provider_request_timeout)format_steer_marker)_trajectory_normalize_msgmake_tool_result_message)convert_scratchpad_to_think)STATUS_EXHAUSTED)FailoverReason)base_url_host_matchesbase_url_hostnameenv_var_enabledatomic_json_writecddl}|S)z4Lazy ``run_agent`` reference for test-patch routing.rN run_agentrs A/home/rurouni/.hermes/hermes-agent/agent/agent_runtime_helpers.py_rar5s >todomemoryclarify delegate_task read_terminalsession_searchagentr function_namestrreturnboolc|tvrdSt|ddr ||jvrdSt|dd}t|o||S)zBReturn True when an agent-level tool path emits its own post hook.T_context_engine_tool_namesN_memory_manager)"AGENT_RUNTIME_POST_HOOK_TOOL_NAMESgetattrr(r&has_tool)r"r#memory_managers r!agent_runtime_owns_post_tool_hookr.@sm:::tu2D99muOo>o>otU$5t<#:#:=#I#I J JJrmessagesList[Dict[str, Any]] user_query completedc d|D}g}d|d}|d|d|d|dd}|t|kr||}|dd krd |vr3|d r*d }|d r&|d r d |d d}|dr5|dr|t |ddzz }|d D]} | rt | ts t | ddtr tj | ddn | dd} nH#tj $r6t d| ddddi} YnwxYw| dd| d} |dtj| ddz }d|vrd|z}|d|dg} |dz} | t|kr8|| ddkr%|| }d }|d} |d!rtj |}n#tj t"f$rYnwxYwt| }|t|d kr|d |ddnd"}|tj|d#d ||d$dz }|d%z }| || dz } | t|kr|| ddk%| r0|dd| d| dz }nd }|d r&|d r d |d d}|dpd }|t |z }d|vrd|z}|d|dn*|dd&kr|d|dd|dz }|t|k|S)'aQ Convert internal message format to trajectory format for saving. Args: messages (List[Dict]): Internal message history user_query (str): Original user query completed (bool): Whether the conversation completed successfully Returns: List[Dict]: Messages in trajectory format c,g|]}t|S)r .0ms r z0convert_to_trajectory_format..Ys!???)!,,???raYou are a function calling AI model. You are provided with function signatures within XML tags. You may call one or more functions to assist with the user query. If available tools are not relevant in assisting with user query, just respond in natural conversational language. Don't make assumptions about what values to plug into functions. After calling & executing the functions, you will be provided with function results within XML tags. Here are the available tools: a For each function call return a JSON object, with the following pydantic model json schema for each: {'title': 'FunctionCall', 'type': 'object', 'properties': {'name': {'title': 'Name', 'type': 'string'}, 'arguments': {'title': 'Arguments', 'type': 'object'}}, 'required': ['name', 'arguments']} Each function call should be enclosed within XML tags. Example: {'name': ,'arguments': } system)fromvaluehumanrole assistant tool_calls reasoningz z content function argumentsz2Unexpected invalid JSON in trajectory conversion: NdnamerIrGz F ensure_asciiz zz gpttoolz ){[unknown tool_call_id)rRrIrDz user) _format_tools_for_system_messageappendlengetstripr isinstancedictr$jsonloadsJSONDecodeErrorloggerwarningdumpsrstrip startswithAttributeErrorjoin)r"r/r1r2 trajectory system_msgimsgrD tool_callrGtool_call_jsontool_responsesjtool_msg tool_response tool_content tool_index tool_name raw_contents rconvert_to_trajectory_formatrsJs.@?h???HJ b ::<< b b b  A c(mm  qk v;+ % %s""s<'8"77;''IC ,<,B,B,D,DIH#k*:HHHG779%%R#i.*>*>*@*@R:3y>JJTQQG"%\!2ppI$QJy$,G,GQ'V`ajkuavxCbDFIWJWJ%rDJy/D[/Q$R$R$RPYZdPefqPr /'''(G\efp\qr}\~@DAD@D]E(G(GHHH$& '!** 5f =%.&&Notz.W\/]/]/]ooooGGG++3g=G!!!$^^--## "$E#h--''HQK,?6,I,I'{H$7M$,I#6L'--//:::FFD+/:l+C+CL 0.A"%^!4!4J&C ,=(>(>>>L)*5jA&II& "TZ(0 ^R(H(H )#/11%* &+&+&++M "%99M"))-888FA5#h--''HQK,?6,I,I:"%% &!%>!:!:''AA 77;''IC ,<,B,B,D,DIH#k*:HHHG")n2 6{CCCG++3g=G!!!$]]__## [F " "   Y    Qi c(mm  l s&:AF  AGG5;J11K  K )r^ session_idlistrtintc |ptjt}t|tsdSd}t jjdfd }d}|t|kr||}t|tr| ddkr|d z }P| d }t|tr|s|d z }|d z} |D] } t| ts| d } t| tsD| d } | | dkrd| d <gt| tr| sd| d <t| ts tj| #tj$r9t j| pd } | dd}| d d}|d|pd|| pd||d| d <d }|d z}|t|krk||}t|tr| ddkrn4| d| kr|}n|d z }|t|kk|3|| t'|dkr|nd| | d z } n |||d z }Y wxYw|d z }|t|k|S)z|d}t|tr)|s|d<n|s d||d<dS||d<dS t j|}n#t $rt|}YnwxYwd||d<dS)NrDrE)rWrYr$rbr[r` TypeError)rmexisting existing_textmarkers r_prepend_markerz5sanitize_tool_call_arguments.._prepend_markers<< ** h $ $  >&,##((00 >)/&=&=8&=&=# F  "(HY  F * Jx00MM * * *MMMMM *!'::=::sA44BBr?r@r>rArFrGNrB{}rI?Pz~Corrupted tool_call arguments repaired before request (session=%s, message_index=%s, tool_call_id=%s, function=%s, preview=%r)-rNrR)rmrZr%rx)logging getLogger__name__rYrurAIAgent&_TOOL_CALL_ARGUMENTS_CORRUPTION_MARKERrVrZrWr$rXr[r\r]_get_tool_call_id_staticr_insertr )r/r^rtlogrepairedr~ message_indexrhrA insert_atrirFrGrRr#previewexisting_tool_msg scan_index candidater}s @rsanitize_tool_call_argumentsrs  /G%h//C h % %qH UU] AF;;;;;;"M #h-- ' '}%#t$$ ;(F(F Q M WW\** *d++ :  Q M !A% #@ @ Ii..  }}Z00Hh--  [11I IOO(,%)S)) )//2C2C (,%i-- /  9%%%%'- - -  #uu}EEiPPXTX ( VS 9 9 #CRC. _%#! 'C!)-%$(!*Q.  3x==00 ( 4I%i66)--:O:OSY:Y:Y }}^44 DD,5)!OJ!3x==00%,OO!0-:c-A-AMMr"(NII#O$5666A [- ^  ] #h-- ' '` Os F!!EK*)K* List[Dict]c|sdSd}dd}g}|D]}|rt|tr|ddkrt|d tr|d ddkrd||sX||d sF|d }t|d pg}t|d pg}|r ||z|d <n|r||d <|d } |d } t| tr`t| trKd d | | fD} | |d <n | s| | |d <|ds |dr |d|d<|dz }||t} g} |D]K}t|ts| |.|d}|dkrt} |d pgD]I}t|tsdD].}||}|r| |/J| ||dkrN|d}|r0|| vr,| || ||dz }"|dkrt} | |Mg}| D]}|rt|tr|ddkrt|d tr|d ddkrw|d }|d d} |d d} t| tr.t| tr| r | r| dz| zn| p| |d <|dz }|||dkr||dd<|S)uCollapse malformed role-alternation left in the live history. Providers (OpenAI, OpenRouter, Anthropic) expect strict alternation: after the system message, user/tool alternates with assistant, with no two consecutive user messages and no tool-result that doesn't follow an assistant-with-tool_calls. Violations cause silent empty responses on most providers, which triggers the empty-retry loop. This runs right before the API call as a defensive belt — by the time it fires, the scaffolding strip should already have prevented most shapes, but external callers (gateway multi-queue replay, session resume, cron, explicit conversation_history passed in by host code) can feed in already-broken histories. Repairs applied: 0. Consecutive ``assistant`` messages with no intervening ``tool``/``user`` turn — merged into a single assistant turn (union of ``tool_calls``, concatenated ``content``). Strict OpenAI-compatible providers (DeepSeek v4, Moonshot/Kimi) reject a history where an ``assistant`` message carrying ``tool_calls`` is immediately followed by another ``assistant`` message instead of its ``tool`` results — HTTP 400 "An assistant message with 'tool_calls' must be followed by tool messages…". The split shape is produced by recovery/continuation paths that append an interim assistant turn (thinking-prefill, codex incomplete-continuation) or by host-fed / legacy-persisted / resumed histories. Refs #29148, #49147. 1. Stray ``tool`` messages whose ``tool_call_id`` doesn't match any preceding assistant tool_call — dropped. 2. Consecutive ``user`` messages — merged with newline separator so no user input is lost. Deliberately does NOT rewind orphan ``assistant(tool_calls)+tool`` pairs that precede a user message — that pattern IS valid when the previous turn completed normally and the user jumped in to redirect before the model got a continuation turn (the ongoing dialog pattern). The empty-response scaffolding stripper handles the genuinely-broken variant via its flag-gated rewind. Returns the number of repairs made (for logging/telemetry). rr8rr%r&ct|dp-|dp|ddkS)Ncodex_reasoning_itemscodex_message_items finish_reason incomplete)r&rW)r8s r_is_codex_interimz2repair_message_sequence.._is_codex_interimsR EE) * * 6uu*++ 6uu_%%5   rr?r@rArDrEc3K|]}||V dSNr5)r7ps r z*repair_message_sequence..s;##a#######rNreasoning_contentr>)idcall_idrNrRrSrB )r8rr%r&) rYrZrWrur$rdrXrUsetadddiscard)r"r/repairsr collapsedrhprev prev_calls new_calls prev_content new_contentjoinedknown_tool_idsfilteredr?tckeytc_idmergeds rrepair_message_sequencerisT qG     I&& $ 3%%$ ;..9R=$///" !!&))[88%%c**9%%im449R=Ddhh|44:;;JSWW\228b99I 0%/)%;\"" 0%/\" 88I..L''),,K,,, .K1M1M .## , 2 2 4 4k6G6G6I6IJ####)Y! .k&="-Y 88/00 ESWW=P5Q5Q E,/0C,D() qLG (%%NH!!!!#t$$  OOC wwv ;   UUNww|,,2 2 2!"d++,22CFF3KKE2&**51112 OOC V^^GGN++E .00$$$ &&u----1 v~~"% OOC F  3%% 6))6":t,,*r v&&&00":D88Ir22L'')R00K,,, K1M1M $7(37\F*[88&5+Y 1  c{{ Nrcldt|dd}t|tr|dkrd|d|Dt||}|dkrZt |drJ!t fd|D|_n't|jt||_|S)uRun :func:`repair_message_sequence` and keep the SessionDB flush cursor consistent with the compacted list (#44837). ``repair_message_sequence`` merges/drops messages in place, shrinking the list. ``_last_flushed_db_idx`` (the DB-write cursor) indexes into that list, so after compaction it can point past the new end — the turn-end flush would then skip the assistant/tool chain entirely — or past unflushed messages shifted to lower indexes. Repair preserves object identity for surviving messages, so counting the survivors from the previously-flushed prefix gives the exact new cursor even when messages are dropped/merged at indexes *before* the cursor — a plain ``min()`` clamp would silently skip that many unflushed rows. Falls back to the clamp when no prefix snapshot is available. Returns the number of repairs made (same as ``repair_message_sequence``). N_last_flushed_db_idxrc,h|]}t|Sr5rr6s r z6repair_message_sequence_with_cursor..Fs!I!I!IA"Q%%!I!I!Irc3>K|]}t|vdVdS)r>Nr)r7r8pre_repair_flushed_idss rrz6repair_message_sequence_with_cursor..Ls=--r!uu0F'F'F'F'F'F'F--r) r+rYrvrhasattrsumrminrV)r"r/ flush_cursorrrs @r#repair_message_sequence_with_cursorr0s&"5"8$??L,$$J)9)9!I!I-<-1H!I!I!I%eX66G{{wu&<=={ ! -),----#---**E & &*-*CMM**E & NrrDc|sdStjdd|tjtjz}tjdd|tjtjz}tjdd|tjtjz}tjdd|tjtjz}tjdd|tjtjz}dD]8}tjd |d |d d|tjtjz}9tjd d|tjtjz}tjd d|tjtjz}tjdd|tj}tjdd|tj}|S)uWRemove reasoning/thinking blocks from content, returning only visible text. Handles four cases: 1. Closed tag pairs (``…``) — the common path when the provider emits complete reasoning blocks. 2. Unterminated open tag at a block boundary (start of text or after a newline) — e.g. MiniMax M2.7 / NIM endpoints where the closing tag is dropped. Everything from the open tag to end of string is stripped. The block-boundary check mirrors ``gateway/stream_consumer.py``'s filter so models that mention ```` in prose aren't over-stripped. 3. Stray orphan open/close tags that slip through. 4. Tag variants: ````, ````, ````, ````, ```` (Gemma 4), all case-insensitive. Additionally strips standalone tool-call XML blocks that some open models (notably Gemma variants on OpenRouter) emit inside assistant content instead of via the structured ``tool_calls`` field: * ``…`` * ``…`` * ``…`` * ``…`` * ``…`` * ``…`` (Gemma style) Ported from openclaw/openclaw#67318. The ```` variant is boundary-gated (only strips when the tag sits at start-of-line or after punctuation and carries a ``name="..."`` attribute) so prose mentions like "Use in JavaScript" are preserved. rBz.*?flagsz.*?z.*?z0.*?z.*?)rirA tool_result function_callfunction_calls]*>.*?zd(?:(?<=^)|(?<=[\n\r.!?:]))[ \t]*]*\bname\s*=[^>]*>(?:(?:(?!).)*)zS(?:^|\n)[ \t]*<(?:think|thinking|reasoning|thought|REASONING_SCRATCHPAD)\b[^>]*>.*$z@\s*zP\s*)resubDOTALL IGNORECASE)r"rD_tc_names rstrip_think_blocksrXs> rf*Bry2=?XYYYGf0"gRYQSQ^E^___Gf2BrySUS`G`aaaGfH"g]_]fikiv]vwwwGf.G29r}C\]]]G9  & 3 3 3 3 3 3  )bm+    f 0 i"-' Gf^ i"-' GfK m Gf[ m G Nr)classified_reason error_context status_code Optional[int]has_retried_429rOptional[FailoverReason]rOptional[Dict[str, Any]]tuple[bool, bool]c Z |j}|d|fSt|ddpd}t|ddpd}|r|r||krd}|dkr|dr ddlm} t|d dpd} t| o4| | pd|k}n#t$rd}YnwxYw|s,tj d ||d|fS|} | 6|d kr tj } n#|d kr tj} n|d vr tj} | tjkrorpidnd} | r(tj d| n&tj dd|fS| tj krq||nd } || }|Ntj d| t|dd||dSd|fS| tjkr|}|rt|ddnd}|t,krtj d|||nd } || }|Ntj d| t|dd||dSdSd}r|t/dpd}t/dpd}d|vp d|vpd|vpd|v}|s|sdS||nd } || }|Ntj d | t|dd||dSdS| tjkr9||}d!fd"d#D}|s |d$krd%|vrd&}|s*|d$kr$|jpdd'krt|d(dd)krd&}|s|d$kr|jpdd*kr d+|vpd,|v}|sd&}|r7tj d-||nd.|jpdd|fS|}|t|dd}|t|d/d}| i}||_|j|f}||dd0z||<||t:kr5tj d1||d0z |d|fStj d2t|dd||d&|fS||nd3} || }|Ntj d4| t|dd||dSd|fS)5aAttempt credential recovery via pool rotation. Returns (recovered, has_retried_429). On rate limits: first occurrence retries same credential (sets flag True). second consecutive failure rotates to next credential. On billing exhaustion: immediately rotates. On auth failures: attempts token refresh before rotating. `classified_reason` lets the recovery path honor the structured error classifier instead of relying only on raw HTTP codes. This matters for providers that surface billing/rate-limit/auth conditions under a different status code, such as Anthropic returning HTTP 400 for "out of extra usage". NFproviderrBcustomzcustom:rget_custom_provider_pool_keybase_urluuCredential pool provider mismatch: pool=%s, agent=%s — skipping pool mutation to avoid cross-provider contaminationii>upstream_providerunUpstream provider %s rate-limited via aggregator — skipping credential rotation, deferring to fallback chainuhUpstream aggregator 429 (provider unknown) — skipping credential rotation, deferring to fallback chain)rru4Credential %s (billing) — rotated to pool entry %srrTF last_statusuZCredential already exhausted (last_status=%s) — rotating immediately instead of retryinguFCredential %s (rate limit, pre-exhausted) — rotated to pool entry %s)FTreasonmessageusage_limit_reached gousagelimitzusage limit reachedzusage limit has been reachedu7Credential %s (rate limit) — rotated to pool entry %s c3K|]O}ttt|pdVPdS)rBN)rYrZr$rWlower)r7krs rrz/recover_with_credential_pool..isn" " -.."  !!!$$* + + 1 1 3 3" " " " " " r)rrcodeerrorrzCoauth authentication is currently not allowed for this organizationT anthropicapi_modeanthropic_messagesz xai-oauthz[wke=unauthenticated:z*oauth2 access token could not be validateduCredential %s — entitlement-shaped 403 from %s; skipping pool refresh (account lacks subscription, not a transient auth failure).auth_auth_pool_refresh_countsr>uCredential auth failure persists after %s refreshes for pool entry %s — treating as unrecoverable and allowing fallback to activate.u1Credential auth failure — refreshed pool entry ru@Credential %s (auth refresh failed) — rotated to pool entry %s)_credential_poolr+rXrrbagent.credential_poolrr& Exceptionrr^r_rbilling rate_limitrupstream_rate_limitrWinfomark_exhausted_and_rotate_swap_credentialcurrentrr$_is_entitlement_failurerdrtry_refresh_currentr_MAX_AUTH_REFRESH_ATTEMPTS)r"rrrrpoolcurrent_provider pool_provider _custom_matchr _agent_baseeffective_reasonupstream rotate_status next_entry current_entrycurrent_last_statusrcontext_reasoncontext_messageis_entitlement_auth_haystack_is_xai_auth_failure refreshed refreshed_idrefresh_counts refresh_keys ` rrecover_with_credential_poolrsV,  !D |o%% z266<"CCEEKKMMT:r228b??AAGGIIM*M*.>-.O.O x ' 'M,D,DY,O,O ' &NNNNNN&uj"==CJJLL $[ 1 1!11+>>D"KKMMSSUU$%  & & & %  & * EEL O/    /) )( #  -5   C  -8   J & &-2 >=== FS\M'R,,-@AAAX\   EEL  C     EEL  C   o%%>111'2'> C 33 ]j3kk  ! EEL  F D#..     " ": . . .;o%%>444   MZdgm]DIII`d "2 2 2 EEL  l#   ,7+BKKM77Man7ooJ% !!\!Jc22 &&z222"{;#   !2!28!">"D"EEKKMMO%7E!^3E(O;E2_D  ': ;'2'> C 33 ]j3kk  ! EEL  I D#..     " ": . . .;{>...,66}kRR" " " " ;" " "     "s""UYggg!N "s""%2+55z2..2FFF!N &+"4"4%.:NBS^9^9^'>9R?>Q !( &!%  * EEL  1 +6 F,*    /) ),,..  #9dD99L'!(0KT!R!R!)%'N6DE3$~|< .<.@.@a.P.PST.T{+!+.1KKKEEL((0'{3a7$ !/11 EEL  qRYZceiknRoRoqq r r r  " "9 - - -( ((3'> C 33 ]j3kk  ! EEL  R D#..     " ": . . .; / !!s%A/D D$#D$ api_errorr retry_count max_retriesc |jrdSt|j}|tvrdS|rdS|jpd}|dvrdS t|dd/ | |j ddn#t$rYnwxYw|j }t|d |_|d |_|d |_|d |_|d |_t%|dr|j|d|_|jdkrlddlm}|d|_|d|_||d|dt5|j|j|_|d|_d|_ n0|t|d dd|_ t=d|zd}||j d|d|jd|ddtCj"|dS#t$r&} tF$d| Yd} ~ dSd} ~ wwxYw)ujAttempt one extra primary-provider recovery cycle for transient transport failures. After ``max_retries`` exhaust, rebuild the primary client (clearing stale connection pools) and give it one more attempt before falling back. This is most useful for direct endpoints (custom, Z.AI, Anthropic, OpenAI, local models) where a TCP-level hiccup does not mean the provider is down. Skipped for proxy/aggregator providers (OpenRouter, Nous) which already manage connection pools and retries server-side — if our retries through them are exhausted, one more rebuilt client won't help. FrB> nous-researchnousclientNprimary_recoveryTrshared client_kwargsmodelrrr_transport_cacheapi_keyrrbuild_anthropic_clientanthropic_api_keyanthropic_base_urltimeoutis_anthropic_oauthu🔁 Transient z on u — rebuilt client, waiting z"s before one last primary attempt.forcez%Primary transport recovery failed: %s)%_fallback_activatedtyper_TRANSIENT_TRANSPORT_ERRORS_is_openrouter_urlrrXrr+_close_openai_clientrr_primary_runtimerZ_client_kwargsrrrrr clearr!agent.anthropic_adapterr#_anthropic_api_key_anthropic_base_urlr _anthropic_client_is_anthropic_oauth_create_openai_clientr_vprint log_prefixtimesleepr^r_) r"rrr error_typeprovider_lowerrtr# wait_timees rtry_recover_primary_transportrDs  ui)J444u !!un*113399;;N222u0 5(D ) ) 5 **L);D+     ##B$788k JJJ 5, - - +  " ( ( * * *9  >1 1 1 F F F F F F')*='>E $(*+?(@E %&<&<&',@)A4U^U[QQ'''E #)++?(@E %ELL 66R()))7EL K++   U U  U U U U'0 U U U    9t >BBBuuuuus=3H;B#"H;# B0-H;/B00F H;; I+I&&I+Tdrop_codex_reasoning_itemsrFc|s|Sfd|D}t|t|z }|dkr|Sg}d}|D]}|r|dnd}||ddkr|ddkr|dd}|dd} t|} t|tr*t| tr|r| rd nd} || z| z| d<nt|t r8t| t r#t |t | z| d<nt|t rDt| tr/| rt |d | d gz| d<nt || d<nxt|trLt| t r7g} |r| d |d | | | | d<n||| |d<|d z }||tj d |||S)ahDrop thinking-only assistant turns; merge any adjacent user messages left behind. Runs on the per-call ``api_messages`` copy only. The stored conversation history (``agent.messages``) is never mutated, so the user still sees the thinking block in the CLI/gateway transcript and session persistence keeps the full trace. Only the wire copy sent to the provider is cleaned. Why drop-and-merge rather than inject stub text: - Fabricating ``"."`` / ``"(continued)"`` text lies in the history and makes future turns see model output the model didn't emit. - Dropping the turn preserves honesty; merging adjacent user messages preserves the provider's role-alternation invariant. - This is the pattern used by Claude Code's ``normalizeMessagesForAPI`` (filterOrphanedThinkingOnlyMessages + mergeAdjacentUserMessages). cdg|],}tj|*|-S)rE)rr_is_thinking_only_assistant)r7r8rFs rr9z6drop_thinking_only_and_merge_users..&sP   uu}88 'A9       rrrNr?rSrDrBrtextr.rJr>zbPre-call sanitizer: dropped %d thinking-only assistant turn(s), merged %d adjacent user message(s)) rVrWrZrYr$rurUextendrr^debug) r/rFkeptdroppedrmergesr8rr cur_content prev_copysep new_blockss ` r"drop_thinking_only_and_merge_usersrU s*        D(mmc$ii'G!||$&F F ++#-vbzz    F**f ''88Ir22L%% 2..K T I,,, K1M1M  ,DDff"'3c'9K'G )$$L$// J{D4Q4Q '+L'9'9D+/ +=+=!'==A,Ii((,0 +=+=Ii((L#.. :k43P3P 35 N%%v|&L&LMMM!!+...'1 )$$ a   "F2J aKFF MM!    EEL -  Mrc  |js d|_dSt|ddtjkrdS|j} |d|_|d|_|d|_|d|_ t|dr|j |d |_ t|d |_|d |_|d |j d ko |jdk|_|j d krlddlm}|d|_|d|_||d|dt/|j|j|_|d|_d|_n0|t|d dd|_|j}||d|d|d|d|d|ddt|d d}|/|r|}|tAt|ddpd!"}tA|dpd!"}||k}dd!l#m$} |d"kr|%| rd} dd#l#m&} tA|dpd!} | | pd!"} tO| o| |k}n#tP$rd}YnwxYwt|d$dpt|d%d} | rR|rP|)|tT+d&t|d'd(t|d)d(nB| r@tT+d*t|d'd(t|d)d(|pd(|pd(d|_d|_dd+l,m-}|||d|dtT+d,|j|jdS#tP$r&}tT.d-|Yd}~dSd}~wwxYw).aRestore the primary runtime at the start of a new turn. In long-lived CLI sessions a single AIAgent instance spans multiple turns. Without restoration, one transient failure pins the session to the fallback provider for every subsequent turn. Calling this at the top of ``run_conversation()`` makes fallback turn-scoped. The gateway caches agents across messages (``_agent_cache`` in ``gateway/run.py``), so this restoration IS needed there too. rF_rate_limited_untilrrrrr r!ruse_prompt_cachinguse_native_cache_layoutrrr"r$r%r&r(Nrestore_primaryTrcompressor_modelcompressor_context_lengthcompressor_base_urlcompressor_api_keycompressor_providercompressor_api_moderBrcontext_lengthrr!rrr)CUSTOM_POOL_PREFIXrrruntime_api_key access_tokenz&Restore re-selected pool entry %s (%s)rrlabelzRRestore skipped pool entry %s (%s): provider %s does not match primary provider %s)rewrite_prompt_model_identityz.Primary runtime restored for new turn: %s (%s)z%Failed to restore primary runtime: %s)/r-_fallback_indexr+r= monotonicr2rrrrrr r4r!rZr3_use_prompt_cachingrW_use_native_cache_layoutr5r#r6r7r r8r9rr:context_compressor update_model has_availableselectr$rXrrrcrbrr&rrr^ragent.chat_completion_helpersrgr_)r"rAr#ccrentryentry_providerprimary_providerentry_matches_primaryrcrprimary_base_url primary_key entry_keyrgrCs rrestore_primary_runtimeryksc  $ !"uu+Q//$.2B2BBBu  B~k JJJ 5, - - +  " ( ( * * *9  #B$788$&';$<!*, % N2 2 Tu~7T* * & >1 1 1 F F F F F F')*='>E $(*+?(@E %&<&<&',@)A4U^U[QQ'''E #)++?(@E %ELL 66R())(7EL % '(9:-.+,-.VV1266    $u0$77   2 2 4 4 KKMME !$WUJ%C%C%Ir!J!J!P!P!R!R!X!X!Z!Z#&rvvj'9'9'?R#@#@#F#F#H#H#N#N#P#P (6:J(J%EDDDDD$00&112DEE1-2)6VVVVVV+.rvvj/A/A/GR+H+H+N+N+P+P(889IJJPb%''%%''$15[0A0A0ckUcFc--$66605---6E#4d;;:unb99!6**5111KK@tS11w44 KKltS11w44&-#(/C %*! ! POOOOO%%eR["Z.III < K   t >BBBuuuuus?J0R2BM54R5 NRNDR SR??S> PoolTimeout ReadTimeout ConnectErrorConnectTimeoutAPITimeoutErrorAPIConnectionErrorRemoteProtocolError Optional[str]cg}t|dr!|jr||jt|dr*|jr#|j|vr||jt|dr|jr|jD]}t |t ro|dp>|dp)|dp|d}|r||vr||t|dd}|st |tr|D]}t |t rt|d dkr[|dp|dpd }| }|r||vr|||st |trk|rid }|D]d} tj tjz} tj| || D]1}| } | r| |vr|| 2e|rd |SdS)aE Extract reasoning/thinking content from an assistant message. OpenRouter and various providers can return reasoning in multiple formats: 1. message.reasoning - Direct reasoning field (DeepSeek, Qwen, etc.) 2. message.reasoning_content - Alternative field (Moonshot AI, Novita, etc.) 3. message.reasoning_details - Array of {type, summary, ...} objects (OpenRouter unified) Args: assistant_message: The assistant message object from the API response Returns: Combined reasoning text, or None if no reasoning found rCrreasoning_detailssummarythinkingrDrJNr.rB)z(.*?)z(.*?)z(.*?)z(.*?)z2(.*?)rr)rrCrUrrrYrZrWr+rurXr$rrrfindallrd) r"assistant_messagereasoning_partsdetailrrDblock thinking_textinline_patternspatternrcleaneds rextract_reasoningrsO +..<3D3N<0:;;; "566H;L;^H  .o E E  " "#4#F G G G "566 4;L;^ 4'9 4 4F&$'' 4JJy))*zz*--*zz),,*zz&))  4wo==#**7333 'D99G  :z'488 : : :E%&& :599V+<+< +J+J % * 5 5 P69J9J Pb - 3 3 5 5  :]/%I%I#**=999  4z'377 4G 4 ' 4 4GI -EGWEBBB 4 4++--4wo==#**7333 4 ,{{?+++ 4r)r api_kwargsDict[str, Any]rrOptional[Exception]Optional[Path]c j tj|}|ddd|D}d} t |jdd}n>#t $r1}tj d|Yd}~nd}~wwxYwtj |j |d|jd|jdkrd nd d ||d d |dd}|t%|jt)|d}dD]} t || d} | | || <t |dd} | | |d<t |dd} | ^ t | dd|d<| j|d<n>#t $r1}tj d|Yd}~nd}~wwxYw||d<tj d} t|j }|jd|d| dz }ddlm}t7j|dd t(!}t7j||d"#}t=||t($||j d%|tCd&r*tEt7j|dd t(!|S#t $r/}|j#rt$d'|Yd}~dSd}~wwxYw)(a Dump a debug-friendly HTTP request record for the active inference API. Captures the request body from api_kwargs (excluding transport-only keys like timeout). Intended for debugging provider-side 4xx failures where retries are not useful. r'Nci|] \}}||| Srr5r7rvs r z*dump_api_request_debug..rs???A1rr!z,Could not extract API key for debug dump: %sPOST/codex_responsesz /responsesz/chat/completionszBearer zapplication/json) Authorizationz Content-Type)methodurlheadersbody) timestamprtrrequest)r.r)r request_idrparamr.rresponserresponse_status response_textz,Could not extract error response details: %srz%Y%m%d_%H%M%S_%f request_dump__z.jsonr)redact_sensitive_textFr)rLindentdefaultTr+)ru$🧾 Request debug dump written to: HERMES_DUMP_REQUEST_STDOUTz*Failed to dump API request debug payload: )%copydeepcopypopitemsr+rrrr^rMrnow isoformatrtrrar_mask_api_key_for_logsr.rr$rJstrftime _safe_session_filename_componentlogs_dir agent.redactrr[r`r\rr;r<rprintverbose_loggingr_)r"rrrrr!rC dump_payload error_info attr_name attr_value body_attr response_objrsafe_sid dump_filer _serialized_redacted_payload dump_errors rdump_api_request_debugrasN}Z(( D!!!????? RelIt<2CJ// ZZZEEL&&'UWXYYYYYYYYZ%/L !LNN++,>?? 5599%:JKKN%PX%P%P %P%P%PP  766666jE!UXYYY  J'<'<[PT'U'U'UVV)%6DDDD )ZZyZZ[[[ 7 8 8 \ $*.U1VYZZZ [ [ [    V NNT TT U U UtttttsnA K9 A$#K9$ B.'BK9BC'K9F&%K9& G!0'GK9G!!DK99 L2$L--L2rrrrrrrrc||n|jpd}||n|jpd}||n|jpd}||n|jpd}|dkr_ ddlm} ddlm } ddl m } | | dpi|pd} | dpi} t| d pd}t| d pd}|rg|red}d} | || }| d pd}| d pd}n#t$rYnwxYwt|||||Sn2#t$r%}t d|Yd}~nd}~wwxYwdS|}|}d|v}t%|d}d|v}|dk}|o|dkpt'|dk}|rdS|s|r|rdS|rd|vrdS|r|rdS|r*|dv}t%|dpt%|d}|s|rdSd|v}|dv}|r|rdSdS)uRDecide whether to apply Anthropic prompt caching and which layout to use. Returns ``(should_cache, use_native_layout)``: * ``should_cache`` — inject ``cache_control`` breakpoints for this request (applies to OpenRouter Claude, native Anthropic, and third-party gateways that speak the native Anthropic protocol). * ``use_native_layout`` — place markers on the *inner* content blocks (native Anthropic accepts and requires this layout); when False markers go on the message envelope (OpenRouter and OpenAI-wire proxies expect the looser layout). Third-party providers using the native Anthropic transport (``api_mode == 'anthropic_messages'`` + Claude-named model) get caching with the native layout so they benefit from the same cost reduction as direct Anthropic callers, provided their gateway implements the Anthropic cache_control contract (MiniMax, Zhipu GLM, LiteLLM's Anthropic proxy mode all do). Qwen / Alibaba-family models on OpenCode, OpenCode Go, and direct Alibaba (DashScope) also honour Anthropic-style ``cache_control`` markers on OpenAI-wire chat completions. Upstream pi-mono #3392 / pi #3393 documented this for opencode-go Qwen. Without markers these providers serve zero cache hits, re-billing the full prompt on every turn. NrBmoar) load_config)resolve_moa_preset)resolve_runtime_provider aggregatorrr) requested target_modelrrrz1MoA aggregator cache-policy resolution failed: %s)FFclaudez openrouter.ai nousresearchrrzapi.anthropic.com)TTrqwen> minimax-cnminimaxzapi.minimax.iozapi.minimaxi.com>alibabaopencode opencode-go opencode-zen)rrrrrXrhermes_cli.configrhermes_cli.moa_configrhermes_cli.runtime_providerrrWr$ranthropic_prompt_cache_policyr^rMrr)r"rrrr eff_provider eff_base_url eff_api_mode eff_model _load_moa_cfgrr_preset_agg _agg_provider _agg_model _agg_base_url _agg_api_mode_rt_moa_exc model_lowerr@ is_claude is_openrouteris_nous_portalis_anthropic_wireis_native_anthropicis_minimax_provideris_minimax_host model_is_qwenprovider_is_alibaba_familys rrrsB!) 4HH%.ORL'388%.:NBL'388%.:NBL+CI!!##u,, X F F F F F F @ @ @ @ @ @ L L L L L L(( ##E**0b)2CtG;;|,,2D 4 4 :;;AACCMTXXg..4"55;;==J   " " 22"/jC%(GGJ$7$7$=2M$'GGJ$7$7$=2MM D4***$  X X X LLLh W W W W W W W W X|//##K!''))NK'I),HHM$|'9'9';';;N$(<< d [ ( b,=l,K,KOb,b zY{&K//{Yz,0II !,0@ A A G$\3EFF   / :k)M!/4""m{ r!r'r http_clientdefault_headersr5rs rrz(create_openai_client..ts4A\\\1\\\rr)verifyz/Gemini native client created (%s, shared=%s) %srz(OpenAI client created (%s, shared=%s) %sr5)agent.auxiliary_clientrragent.ssl_verifyrrZrrWrr$rbagent.copilot_acp_clientrrr^r_client_log_contextagent.gemini_native_adapterrrr_build_keepalive_http_client setdefaultOpenAI)r"rrrrrrrssl_verify_cfg httpx_verifyrrrrr safe_kwargskeepalive_https rcreate_openai_clientrSsSSSSSSSS555555''M##M488K"&&|T::N''+.YYYL}((44555 ~&&#m.?.? B.O.O*P*P*[*[\k*l*l&======!!22M22   ;    % % ' '      ~!!]]]]]]]]}((R88>B?? $ $X . . !.!4!4!6!6KK//!&!C!C\"D"""-1?K .''66+66F EEL  A))++     M$M));;   j" - -l<    %+9M- (]A...SUU\ * *M * *FEEL2 !!##  MrrBc&'(ddlm}|s |||}|dkr1|dvr-t|tr|rt jdd|}j}j}t&&fddD} ttd ipi| d <td &| d < d _ |_|_|r|_ |_ td rj|r|_|pd(|pd'('kstd d K dd lm} | |_n3#t.$r&} t0d|| Yd } ~ nd } ~ wwxYw|pddkr=ddlm} d_ |pd_d_ i_| jpd_n|dkr8ddlm} m }m!}|dk}|r|pjp |pdn |pjpd}|dkrrt|tr]|r[ ddl"m#}|}nI#t.$r<}dd l$}|%tLd|Yd }~nd }~wwxYw|_|_'|ptdd _(| |j(tSjj_*|r t|tr ||nd_+d _i_n|pj}|pj }||d_ ddl,m-}m.}m/}|jt|pd||n,#t.$rt00dd !YnwxYwtSjj}| |jd"<1tjd#d $_nP#t.$rC| 2D],\}}|&ur tg||#t.$rY)wxYwwxYw4|j ||%\_5_67td&rˉj8rdd'l9m:}d } dd(l,m;}m.}|}||}n#t.$rd }YnwxYwtjtrjnd} |jj | jtd)d |*}!j8<j|!j jjj +d _=td&rj8rj8nd }"jjj j td,dtjj5j6|"rt|"d-jnj|"rt|"d.j nj |"rt|"d,dnd|"rt|"d/jnj|"r|"j>nd|"rt|"d0j nj |"r|"j?ndd1_@|dkr-j@Aj'j(j+d2d_Bd_C|pd(|pd'ttd3gpg}#(r'r('kr'(fd4|#D}#|#_E|#r|#dnd _Ft0Gd5||||td6d }$td7d }%|$d|%rd |$H|%jj td0d 8d S#t.$r t0d9d !Yd SwxYwd Sd S):a5Switch the model/provider in-place for a live agent. Called by the /model command handlers (CLI and gateway) after ``model_switch.switch_model()`` has resolved credentials and validated the model. This method performs the actual runtime swap: rebuilding clients, updating caching flags, and refreshing the context compressor. The implementation mirrors ``_try_activate_fallback()`` for the client-swap logic but also updates ``_primary_runtime`` so the change persists across turns (unlike fallback which is turn-scoped). r)determine_api_moder>rrz/v1/?$rBc4i|]}|t|Sr5)r+)r7rI_MISSINGr"s rrz switch_model..s7  geT8,,r) rrrrr!rr8r6r7r9_config_context_lengthr3rNr ) load_poolzcswitch_model: credential pool reload failed for %s (%s); continuing without pool rotation this turnr) MoAClientchat_completionszmoa-virtual-providerz moa://localr)r#resolve_anthropic_token_is_oauth_tokenrz minimax-oauth)"build_minimax_oauth_token_providerz`MiniMax OAuth: failed to install per-request token provider on switch (%s); using static bearer.r7r&F)r!r)*apply_custom_provider_tls_to_client_kwargsget_compatible_custom_providersload_config_readonlyz6custom-provider TLS resolution skipped on switch_modelT)exc_infor' switch_modelrrrl)get_model_context_length)rrr)rr!rconfig_context_lengthcustom_providersrar!rrrr)rrrrr!rrXrYr[r]r^r_r\r`compressor_threshold_tokens)r$r%r(_fallback_chaincg|]C}|dpdhvA|DS)rrB)rWrXr)r7rrnew_normold_norms rr9z switch_model..s\    *%%+2244::< %s (%s) _session_dbrt)rr billing_modez2Failed to persist billing route after model switch)Ihermes_cli.providersrrYr$rrrrobjectrZr+rrrrr r4r!rXrrrrrr^r_agent.moa_looprr3rr5r#rrhermes_cli.authrrrrr6r7r r8r9rrrrrMr:rsetattr_anthropic_prompt_cache_policyrjrk_ensure_lmstudio_runtime_loadedrlagent.model_metadatar rrm_cached_system_promptrbthreshold_tokensr2updater-rhrur$_fallback_modelrupdate_session_billing_route))r" new_model new_providerr!rrr old_model old_provider _snapshotr _pool_excrr#rr_is_native_anthropic effective_keyr_mm_exc_loggingeffective_baserrr _sm_timeout_name_valuer _sm_custom_providersr_sm_cfg _ctx_api_keynew_context_length_ccfallback_chainr( _session_idrr&r's)` @@@rrrs~ 877777 >%%lH== ((( ; ; ; x % % <  <6)R22 I>LxxH  I$#'wu6F'K'K'Qr"R"RI%,E3Ex$P$PI !T(,$  %  &%EN! 5, - - +  " ( ( * * *  $#EM!&B--//5577 &B--//5577 x  752Dd#K#K#S ;;;;;;)2<)@)@&&   A )   B % % ' ' - - / /5 8 8 0 0 0 0 0 00EN#='=EM*EN#%E $9U[%=I>>ELL - - -          $0;#> ]qXWX X9P9P9R9RXVXxyWDIDQyWUWM ..:mS3Q3Q.Vc. RRRRRR$F$F$H$HMM ....&&x0088?*EM'4E $(0(_GECXZ^4_4_E %&<&<u84U^U[QQ'''E #L`)Odno|BeCeC)O (F(F(FJOE %EL#%E #4u}M%7N(*$$E  f;:(,"--334H4H4J4JKK  f f f U`d eeeee f6u~u{SSK&2=$Y/ 66U)**%7EL  '__..  ME6!! uf----     $ ,,!^ -  >Eu= ))+++u*++! 0H! AAAAAA $ ( V V V V V V V V!kmmG#B#B7#K#K  ( ( (#'  ()35=#(F(FNu}}B 55 K^ ^")%1I4"P"P1      --+-^M^^ .   #'E'.e5I&J&J quOg q% " "mqCNNN5)R00e233#7#(#ABEVGC%+>>>5;KNbwsJGGGTYTb=@Hgc9b999bKNbwsJGGGTYTb;>%ES%7%7AKNbwsJGGGTYTb?B'Is';';E"''' %%!&!9"'";"'";' '    !&EE"))++1133H"))++1133H'%):B??E2FFN H X!5!5     -   +E1?IN1--TE KK5<L%55K%t44K;   4 4$UJ== 5          NND        s3B>Q2F Q F9F4/Q4F99CQ<J Q K2K QKB-Q=Q>&O'$Q&O''AQ(R )Q;:R ; RR RR /T TT'2`&aaF function_argseffective_task_idrRpre_tool_block_checkedskip_tool_request_middlewaretool_request_middleware_traceOptional[List[Dict[str, Any]]]c ttsit|pg ddlm} |sW| pdt ddpdpdt ddpdt ddpd} | j| jn2#t$r%} t d| Yd } ~ nd } ~ wwxYwd } |so dd l m } | pdt ddpdpdt ddpdt ddpdt } n#t$rYnwxYw| tjd | id } ddlm}||pdt ddpdpdt ddpdt ddpddd| t n#t$rYnwxYw|St#jd,d-fd dkrd.fd n|dkrd.fd nndkr d.fd n^jr#jr d.fd! n4d"krd.fd# n&d$krd.fd% nd&krd.fd' n d.fd( dd)lm}|fd*pdt ddpdpdt ddpdt ddpd+ S)/a0Invoke a single tool and return the result string. No display logic. Handles both agent-level tools (todo, memory, etc.) and registry-dispatched tools. Used by the concurrent execution path; the sequential path retains its own inline invocation for backward-compatible display handling. r)apply_tool_request_middlewarerBrt_current_turn_id_current_api_request_id)task_idrtrRturn_idapi_request_idz!tool_request middleware error: %sN)get_pre_tool_call_block_message)rVrtrRrWrXmiddleware_tracerFrK_emit_post_tool_call_hookblocked plugin_block) r#rLresultrVrtrRrWrXstatusr? error_messagerZr_r observed_argsOptional[dict]r%cdt|tr|n} ddlm}|||pdt ddpd pdt ddpdt ddpdt t j z dzt n#t$rYnwxYw|S) Nrr[rBrtrTrUi) r#rLr_rVrtrRrWrX duration_msrZ) rYrZ model_toolsr\r+rvr=rirur) r_rb hook_argsr\_tool_middleware_tracer"rMrLr#rRtool_start_times r_finish_agent_toolz'invoke_tool.._finish_agent_toolZs%/ t%D%DWMM-   = = = = = = % %+')/R"5,;;Ar)/R'92>>D"&u.GLLRPR!1!1O!Ct KLL!%&._executeosi ? ? ? ? ? ?%% #--00#--77+   rr!c }|s/ddlm}tjd|d|Sddlm}||dd|d|d d |d |d |d d|d|j |S)Nr)format_session_db_unavailableF)successr)r!queryrB role_filterlimitr)rtaround_message_idwindowsort) rxryrzrtr{r|r~dbcurrent_session_id) _get_session_db_for_recall hermes_statervr[r`tools.session_search_toolr!rWrt)rk session_dbrv_session_searchrjr"s rrtzinvoke_tool.._executezs99;;J FFFFFF))$*QnQnQpQp5q5q*r*rt}~~~ S S S S S S%%#--44 ) m < <#--33(}}\::&/mm4G&H&H$==155"v..!','7      rrcn|dd}|d}ddlm}||d||d|d|j }jr"j||fd  ||S) Ntargetr operationsr) memory_toolactionrDold_text)rrrDrrrpc2S)N)rVrR)_build_memory_write_metadata)r"rMrRsrz/invoke_tool.._execute..s#5+M+M 1%1,N,,r)build_metadata)rWtools.memory_toolr _memory_storer)notify_memory_tool_write) rkrr _memory_toolr_rjr"rMrRs rrtzinvoke_tool.._executes]]8X66F"|44J E E E E E E!\ }}X..! i00"z22%) F$ %>>$$$$$$?&%fi88 8rcNj||Sr)r)handle_tool_call)rkrjr"r#s rrtzinvoke_tool.._executes+%%e&;&L&L]\e&f&fhqrr rrrcddlm}||dd|dj|S)Nr) clarify_toolquestionrBchoices)rrcallback)tools.clarify_toolrrWclarify_callback)rk _clarify_toolrjr"s rrtzinvoke_tool.._executesi H H H H H H%% &]]:r::%MM)44"3   rr c ddlm}||d|dtdd|S)Nr)read_terminal_tool start_linecountread_terminal_callback)rrr)tools.read_terminal_toolrrWr+)rk_read_terminal_toolrjr"s rrtzinvoke_tool.._executesr Z Z Z Z Z Z%%##(}}\::#--00$U,DdKK   rrcB||Sr)_dispatch_delegate_task)rkrjr"s rrtzinvoke_tool.._executes%%%e&C&CI&N&NPYZZ Zrc>t|jpdtddpdtddpdjrt jndddtddtddt  S)NrBrTrUTenabled_toolsetsdisabled_toolsets) rRrtrWrX enabled_toolsskip_pre_tool_call_hookrOrrrP)rhandle_function_callrtr+valid_tool_namesru)rkrhr"rMr#rRs rrtzinvoke_tool.._executes55--y*;) +1r'92>>D"&u.GLLRPR>C>T^d5#9:::Z^(,-1!(0BD!I!I")%1Dd"K"K.23I.J.J.   r)run_tool_execution_middlewarecHt|tr|nSr)rYrZ)rkrtrLs rrzinvoke_tool..s%(( 9d0K0K#^99Q^__r) original_argsrVrtrRrWrXr)r_rrbrcr%r)rkrZr%r)rYrZruhermes_cli.middlewarerSr+payloadtracerr^rMhermes_cli.pluginsrYr[r`rfr\r=rir)r,r)r"r#rLrMrRr/rNrOrPrS_tool_request_mw_mw_err block_messagerYr_r\rrtrjrhris````` @@@@r invoke_toolrs mT * * !"?"E2FFCGGGGGG+ <<<)/R"5,;;Ar)/R'92>>D"&u.GLLRPR    -4M%5%; " CCC 8'BBBBBBBBC$(M !  J J J J J J;;)/R"5,;;Ar)/R'92>>D"&u.GLLRPR!%&>D"&u.GLLRPR )+!%&AB CB==C AD(( D54D5A!F55 GGrq str | Nonecddlddlm}|sdSdD]'}||}|dkr |d|}(|sdSdd}dfd }dd }|}||jvr|S||} | |jvr| S||| ||h} t d D]x} t} | D]`} || }|rQ| || ||| ||a| | z} y| D]} | r | |jvr| cS|||jd d}|r|dSdS)atAttempt to repair a mismatched tool name before aborting. Models sometimes emit variants of a tool name that differ only in casing, separators, or class-like suffixes. Normalize aggressively before falling back to fuzzy match: 1. Lowercase direct match. 2. Lowercase + hyphens/spaces -> underscores. 3. CamelCase -> snake_case (TodoTool -> todo_tool). 4. Strip trailing ``_tool`` / ``-tool`` / ``tool`` suffix that Claude-style models sometimes tack on (TodoTool_tool -> TodoTool -> Todo -> todo). Applied twice so double-tacked suffixes like ``TodoTool_tool`` reduce all the way. 5. Fuzzy match (difflib, cutoff=0.7). See #14784 for the original reports (TodoTool_tool, Patch_tool, BrowserClick_tool were all returning "Unknown tool" before). Returns the repaired name if found in valid_tool_names, else None. rN)get_close_matches)"'rrsr$r%cz|ddddS)Nrrr)rreplace)rs r_normzrepair_tool_call.._norm s0wwyy  c**223<<._camel_snake s&rv(#q1177999rrc|}dD]D}||r-|dt| dcSEdS)N)_toolz-toolrNz_-)rendswithrVra)rlcsuffixs r_strip_tool_suffixz,repair_tool_call.._strip_tool_suffix sg WWYY0 6 6F{{6"" 6CKK<(//55555 6trrr>gffffff?)ncutoff)rr$r%r$)rr$r%r) rdifflibrfindrrrangerr)r"rqr_xml_sep_idxrrrlowered normalizedcandsrextracstrippedmatchesrs @rrepair_tool_callrs*III)))))) t )))~~h'' !88!%4%(I t====::::::ooG%(((y!!JU+++!':||I7N7NOE 1XX%% 2 2A))!,,H 2 (### %%//*** ,,x00111    e,,,HHH )?1SQQQGqz 4rc @ g}|D]n}|d}|tjjvr(tjd|Y||o|}d}|D]}|ddkr|dpg}|s7|D]k}t|trQ|d}t|tr|dnt|dd}n&t|dd}|rt|ddnd}t|tr| rtj d |tj |t|tr||d<!|+t|dr ||_=#t $rYJwxYwt|tr|d d |d<mt#} |D]r}|ddkrW|dpgD]?}tj |} | r| | @st#} |D][}|dd kr@|d pd } | r| | \| | z rBfd|D}tjdt'| | z } | rg} |D]}| ||ddkr|dpgD]j}tj |} | | vr>| d tj|d| dk| }tjdt'| t#}t#}g}d}|D]}|d}|dkr|drg}|dpgD]`}tj |} | r | |vr|dz }4| r|| ||at'|t'|dpgkri|d|i}|||d krd|d pd } | r | |vr|dz }=| r|| ||k|||r)|}tjd||S)uFix orphaned tool_call / tool_result pairs before every LLM call. Runs unconditionally — not gated on whether the context compressor is present — so orphans from session loading or manual message manipulation are always caught. r?z9Pre-call sanitizer: dropping message with invalid role %rinvalid_tool_callr@rArFrINzNPre-call sanitizer: repairing tool_call with empty function.name -> %r (id=%s)rrJrNrRrBcg|]H}|ddkr+|dpdvF|IS)r?rNrRrB)rWrX)r7r8orphaned_resultss rr9z)sanitize_api_messages.. s`   EE&MMV++~1F1F1L"0S0S0U0UYi0i0i 0i0i0irz6Pre-call sanitizer: removed %d orphaned tool result(s)u2[Result unavailable — see context summary above])r?rIrDrRz0Pre-call sanitizer: added %d stub tool result(s)rr>zBPre-call sanitizer: removed %d duplicate tool_call_id reference(s))rWrr_VALID_API_ROLESr^rMrUrYrZr+r$rXr_rrrIrrrrV_get_tool_call_name_static)r/rrhr?_EMPTY_NAME_SENTINELtcsrfnrIsurviving_call_idscidresult_call_idsmissing_resultspatchedseen_assistant_call_idsseen_result_call_idsdeduped removed_dupeskept_tcsrs @rsanitize_api_messagesrC sHwwv suu}5 5 5 EEL  K    H$/SS 776??k ) ) ggl##)r   S SB"d## AVVJ'')3B)=)=\rvvf~~~72vW[C\C\RT2246@wr64000D$$$   EEL .$ 66r::     "d## S16 GB$7$72BGG DB%% S*>T!R!R:/ S2"ee00 776??k ) )ggl++1r 0 0eem<**0b7799C )##C(((');;           D  ! !   )?:O (*  C NN3   wwv+--'',//52B%%-@@DDCo--$*$'EEM$L$LR$P$P'[,/ ((    >     $'55 #$&GM  wwv ;  377<#8#8 Hggl++1r $ $eem<**0b7799C s222"  .$((--- NN3     NN3        P     Os(G11 G?>G? user_messageassistant_contentrequire_workspacecl td|DrdS||pd sdSt dkrdSt t jd }|sdSd}d}t fd|D}|sdS|sd Sd d lm } | | t fd |Dpd vpd v} t fd|D} | p| S)u@Detect a planning/ack message that should continue instead of ending the turn. ``require_workspace`` (default True) keeps the original codex-coding scope: the ack must reference a filesystem/repo workspace. The conversation loop passes ``require_workspace=False`` when the user has explicitly opted into intent-ack continuation for all api_modes (``agent.intent_ack_continuation`` is ``true`` or a model-list), so general autonomous workflows ("I'll run a health check on the server", "I'll start the deployment") — which carry a future-ack and an action verb but no filesystem reference — are caught too. The future-ack + short-content + no-prior-tools + action-verb requirements always apply, which is what keeps conversational "I'll help you brainstorm" replies from tripping it. c3rK|]2}t|to|ddkV3dS)r?rNN)rYrZrW)r7rhs rrz4looks_like_codex_intermediate_ack.. s@ S S3:c4 >SWWV__%> S S S S S SrFrBiu@\b(i['’]ll|i will|let me|i can do that|i can help with that)\b)z look intozlook atinspectscancheckanalyzreviewexplorereadopenruntestfixrMsearchr walkthroughz report back summarize) directoryzcurrent directoryz current dircwdrepo repositorycodebaseprojectfolder filesystemz file treefilespathc3 K|]}|vV dSrr5r7r}assistant_texts rrz4looks_like_codex_intermediate_ack../ s(#Z#ZFn$<#Z#Z#Z#Z#Z#ZrTr)_summarize_user_message_for_logc3 K|]}|vV dSrr5)r7r} user_texts rrz4looks_like_codex_intermediate_ack..B s( @ @FFi  @ @ @ @ @ @rz~/rc3 K|]}|vV dSrr5r s rrz4looks_like_codex_intermediate_ack..F s9&&%+. &&&&&&r) any_strip_think_blocksrXrrVr&rragent.codex_responses_adapterr )r"rrr/rhas_future_ackaction_markersworkspace_markersassistant_mentions_actionr user_targets_workspaceassistant_targets_workspacer rs @@r!looks_like_codex_intermediate_ackr s( S S( S S SSSu../@/FBGGMMOOUUWWN u >T!!u UWeffN uN* !$#Z#Z#Z#Z>#Z#Z#Z Z Z $u tNMMMMM// ==CCEEKKMMI @ @ @ @.? @ @ @@@  9   )  #&&&&&/@&&&## " @%@@rct|dd}|dus+t|tr|dvrdS|dus+t|tr|dvrdSt|tr:|jpd t fd |DrdndS|jd krd ndS) uClassify the resolved intent-ack continuation mode for this turn. Returns one of: * ``"off"`` — never continue. * ``"codex_only"`` — historical scope: continue only on the ``codex_responses`` api_mode, and only for codebase/workspace acks (``require_workspace=True``). * ``"all"`` — user opted in for every api_mode; continue on any future-ack + action verb (``require_workspace=False``). Mirrors the four-mode shape of ``agent.tool_use_enforcement``: ``"auto"`` (default) → codex_only; ``True``/"true"/"always"/"yes"/"on" → all; ``False``/"false"/"never"/"no"/"off" → off; ``list`` → all when a substring matches the active model name, else off. _intent_ack_continuationautoT>onyestruealwaysallF>noofffalseneverr$rBc3nK|]/}t|t|vV0dSr)rYr$r)r7rrs rrz/intent_ack_continuation_mode..d sAYYjQRTWFXFXYAGGII4YYYYYYrr codex_only)r+rYr$rrurrr)r"moders @rintent_ack_continuation_moder*L s 54f = =D t|| 4--|$**,,Ba2a2au u}}D#..}4::<->>><>(~~122H(C  ! 4 KK+T 2 2 2 2 ^^+.G' ( (+3G' (&>>+66 NN< ( ( +S 1 1 !  (+#$&,,1E  3+?G' ( ( KK+T 2 2 2'*#$ KK#T*****r api_messagesc6|}d}|D]}|ddkr|rB|dr4t||||dr|dz }`d|vr|dd|dz }|S)u0Re-pad (or strip) assistant turns' reasoning_content for the active provider. ``api_messages`` is built once, before the retry loop, while the *primary* provider is active. A mid-conversation fallback can then switch providers, so the reasoning fields baked into ``api_messages`` are shaped for the *prior* provider and must be reconciled against the *current* one: * Switching TO a require-side provider (DeepSeek / Kimi / MiMo thinking mode): assistant turns built when the prior provider did NOT need the echo-back go out without ``reasoning_content`` and the new provider rejects them with HTTP 400 ("The reasoning_content in the thinking mode must be passed back"). Re-apply the pad. * Switching TO a strict provider that rejects the field (Mistral, Cerebras, Groq, SambaNova, …): assistant turns built under a reasoning primary carry a ``reasoning_content`` pad (often a single space ``" "``), and the strict provider rejects it with HTTP 400/422 ("Extra inputs are not permitted"). Strip the field. This is the exact cross-provider fallback bug from #45655 — a DeepSeek primary pads history with ``" "``, the request falls back to Mistral, and Mistral 422s on the stale pad. Calling this immediately before building the request kwargs reconciles the fields against the *current* provider. It is idempotent and safe to call every iteration; it covers every fallback path. Returns the number of assistant turns whose reasoning_content was added or removed. rr?r@rr>N)r0rWr3r)r"r4 needs_padchangedr.s r#reapply_reasoning_echo_for_providerr8 s:3355IG ;;v  + - -   {{.//  *5'7 C C C{{.// 1  #g-- /6661  Nrrc#K t|dd}|dSt|dd}|dSt|dd}|dSt|ddpt|ddpg}n#t$rYdSwxYwt}t|D]a}|g}t|dd}||||D]/} t| ddpt| dd} | (t| d d} | ?t| d d} t | r | d } n#t$rd} YnwxYw| $t| d d} | t| d d} | [t| dd} t| d d}t |r* ddlm}||j} n#t$rd} YnwxYw| t| }||vr| || V1cdS)aaYield raw sockets reachable from an OpenAI/httpx client pool. httpcore 1.x stores the concrete HTTP11/HTTP2 connection under ``conn._connection``; older versions exposed stream attributes directly on the pool entry. Keep the traversal defensive because these are private transport internals and vary across httpx/httpcore releases. _clientN _transport_pool _connections _connection_network_stream_stream_sockget_extra_infosocketstreamrr)SocketAttribute) r+rrrurUcallable anyio.abcrE raw_socketrr)rr transportr connectionsseenconn candidatesinnerrrDsockrBwrappedrrEr}s r_iter_pool_socketsrQ sfi66   FKt<<   Fy'400 < F D.$ / / tWd++   UUD[!!))V mT22     e $ $ $#$ $ I #4d;;79i66 ~67D11D|!(1A4!H!HN++$$-~h77$$$$#$|!&(D99&"7GT::D|"&)T::$77E??$$======$u_%?@@$$$$#$|XXF~~ HHV   JJJJI$  ))sEA(A(A($A(( A65A6" D.. D=<D=F11 G?Gct|dd}|dS d}t|D]}ddl} |d|d|j|jz}|dkr|dz }n #t$rYnt$r|dz }YnwxYw |d#t$rYwxYw# |dw#t$rYwwxYwxYw|dkr?tj d|| d dSn>#t$r1}tj d |Yd}~nd}~wwxYwdS) aEDetect and clean up dead TCP connections on the primary client. Inspects the httpx connection pool for sockets in unhealthy states (CLOSE-WAIT, errors). If any are found, force-closes all sockets and rebuilds the primary client from scratch. Returns True if dead connections were found and cleaned up. rNFrr>rTu@Found %d dead connection(s) in client pool — rebuilding clientdead_connection_cleanup)rzDead connection check error: %s)r+rQrC setblockingrecvMSG_PEEK MSG_DONTWAITBlockingIOErrorOSErrorrr^r__replace_primary_openai_clientrrM)r"r dead_countrO_socketdataexcs rcleanup_dead_connectionsr_F sUHd + +F ~uC &v..  D $ $ $ $   '''yyG$4w7K$KLL3;;!OJ"      a  $$T****D$$T****D >> EEL R     0 08Q 0 R R R4  CCC  NrBrc retry_afterrrz retry-afterz Retry-Afterzx-ratelimit-resetirBz,quotaResetDelay[:\s\"]+(\d+(?:\.\d+)?)(ms|s)r>rmsg@@zresets?\s+in\s+(?:(\d+(?:\.\d+)?)\s*(?:h|hr|hrs|hour|hours)\b\s*)?(?:(\d+(?:\.\d+)?)\s*(?:m|min|mins|minute|minutes)\b\s*)?(?:(\d+(?:\.\d+)?)\s*(?:s|sec|secs|second|seconds)\b)?rr)i<z?retry\s+(?:after\s+)?(\d+(?:\.\d+)?)\s*(?:sec|secs|seconds|s\b))r+rYrZrWr$rXr=floatrz ValueErrorrrrgrouprrgroups)rcontextrrrrrr<rdrrratelimit_reset raw_message delay_matchsecondsresets_in_matchhoursminutes sec_matchs rextract_api_error_contextrtr s G 5&$ ' 'DG$U'1$((72C2CT'J'JT$((7###PT'4  V$$S F(;(;Sw{{7?S?S fc " " /v||~~ / & GH ++i((LGKK8K,L,L gs # # 1  1!(GI ,  CKK$$EJ&&&+ #'kk-00 j ( (Zw-F-F &*ikkE+4F4F&F ##z*    uj$//Hh 400G 2kk-00NGKK 4N4N  :W44 &*ikkE+4F4F&F ##z*    !++&9::  2z88"1GJ %jj&&((  3!,TcT!2GI   ++i((.B gs # # V)$SU\^`^kllK Vk//2233,7,=,=a,@,@,F,F,H,HD,P,P%&..V[&*ikkG&; ##"$)NM ### Vs?+A+A+C+C'D'D V!/"7"7":":"?a@@E#O$9$9!$<$<$ABBG#O$9$9!$<$<$ABBG*.)++*F'TV,*WZa*aGJ'' " Z !!I !V.2ikkE)//RSBTBTrr?rN_pending_steer_lockrE_pending_steerrDrBrJrKz9Delivered /steer to agent after tool batch (%d chars): %sxz...)_drain_pending_steerrrVmaxrYrZrWr+rxr r$rurUlstriprrr^r) r"r/ru steer_text target_idxrlrh_lockr{r}existing_contentblockss r#apply_pending_steer_to_tool_resultsr s++--J J 3x==1$c#h---*G!*KR&P&PRT U Uqk c4  SWWV__%>%>J E4d;;   6 6'6+0+?$+F+SE((+5E(  6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 u&6==HEM#]HtOj$@$@S]E   , ,F +// 2>> & , , D L/?GT*+++RF MM66==??CC D D D.4HZ  + + L L L1A.K6.K.KHZ  + + + L+;V*CY'EELC J4C4S__s%:%:EECs%;"C))C-0C-AF##F?>F?cddl}d} t|D]3} ||jn#t$rYnwxYw|dz }4n>#t $r1}t jd|Yd}~nd}~wwxYw|S)u&Abort in-flight TCP I/O by shutting down sockets WITHOUT closing FDs. When a provider drops a connection mid-stream — or the user issues an interrupt — we want to unblock httpx's reader/writer immediately rather than waiting for the kernel's per-connection timeout. ``shutdown(SHUT_RDWR)`` achieves that: it sends FIN, breaks any pending ``recv``/``send`` with EOF or ``EPIPE``, but does NOT release the file descriptor. Historically this helper also called ``socket.close()`` so the FD got released immediately, but that's unsafe when (as is the case for both the interrupt-abort path and stale-call kill path) the helper runs on a different thread than the one driving the request: * The Python ``socket.socket`` we close here is the SAME object held by httpx's pool, so closing it via Python sets its ``_fd`` to -1 and future operations on that Python object fail safely. * BUT the SSL wrapper (``ssl.SSLSocket``'s underlying OpenSSL ``BIO``) caches the raw integer FD. Once ``os.close(fd)`` runs, the kernel may immediately recycle that integer to the next ``open()`` call — e.g. the kanban dispatcher opening ``kanban.db``. * The owning worker thread then unwinds httpx, the SSL layer flushes a pending TLS record, and the encrypted bytes get written into the wrong file (issue #29507: 24-byte TLS application-data record clobbering SQLite header bytes 5..28). The fix is to let the owning thread own the close. ``shutdown()`` from any thread is FD-safe; ``close()`` is not. The httpx connection's own close path — which runs from the worker thread when it unwinds — will release the FD via the same ``socket.socket`` object, and because Python's socket close atomically swaps ``_fd`` to -1 *before* issuing ``os.close``, there is no FD-aliasing window when only one thread closes. Returns the number of sockets shut down. (Field kept as ``tcp_force_closed=N`` in the log line for backwards-compatible parsing.) rNr>z'Force-close TCP sockets sweep error: %s) rCrQshutdown SHUT_RDWRrYrrr^rM)rr\shutdown_countrOr^s rforce_close_tcp_socketsr sHN K&v..  D  g/0000     a NN  KKK  DcJJJJJJJJK s6A 5A AA A A B'BB)rsrrrrrDrUryrrrrrrrrrr3r_rtrrQr)r"rr#r$r%r&)r/r0r1r$r2r&r%r0)r/rurtr$r%rv)r/rr%rv)rDr$r%r$) rrrr&rrrrr%r)rrrrvrrvr%r&)r/r0rFr&r%r0)r%r&)r%r)rrrr$rrr%r) rrrrrrrrr%r)rrZrr$rr&r%r)rBrBrB)NNFFN)r#r$rLrZrMr$rRrr/rurNr&rOr&rPrQr%r$)rqr$r%r)r/r0r%r0)T) rrrr$r/r0rr&r%r&)r%r$)r-rZr.rZr%rx)r4rur%rv)rr)rrr%r)r/rururvr%rx)rrr%rv)G__doc__ __future__rrr[rrr=rpathlibrtypingrrrr hermes_cli.timeoutsr agent.prompt_builderr agent.tool_dispatch_helpersr r agent.trajectoryrrragent.error_classifierrutilsrrrrrrr^rr frozensetr*r.rsrrrrrrDrUryr/rrrrrrrrrr*r,r3r8rQr_rtrr__all__r5rrrs,#"""""  ,,,,,,,,,,,,<<<<<<444444[[[[[[[[888888222222111111^^^^^^^^^^^^  8 $ $ &/YUUU&&" KKKKgggg\  pppppphDDDDN$$$$P\\\\J37.2 }"}"}"}"}"}"BNNNNn(,ZZZZZZ|XXXXx(i)))NNNNn"& \\\\\\F#"" NNNNNNd\\\\~[[[[~ GK056;QU PPPPPh[[[[~````R# bAbAbAbAbAJJJJJ: 8 8 8 8S+S+S+S+l////dDDDDN((((XLLLL`====B2222l   r