JjP UdZddlZddlZddlZejeZddlZddlZddl Z ddl m Z m Z ddlmZmZmZmZddlmZdZddlmZddlmZdd lmZmZegd Zd e d e d e fdZ!d e d e d e fdZ"dZ#dZ$da%dZ&dZ'ej(Z)da*e+e,d<ej(Z-iZ.ee ee effe,d<de+d e+fdZ/d e+fdZ0dee efd dfdZ1de d dfdZ2de d e+fdZ3d eee effdZ4dd d!d"ee efd#e5d$e5d eee effd%Z6d&ed e fd'Z7d&ed e+fd(Z8d)ee d e fd*Z9d e5fd+Z:da;d e5fd,Zd e5fd.Z?d e+fd/Z@d e+fd0ZAd1e d e+fd2ZBd3eCd eCfd4ZDd5ee d3eCe d ee fd6ZEd7ZFd8ZGd9ZHd:ZIdZJee=e,d;<dZMgd?ZNGd@dAe ejOZPePjQePjQePjRePjSePjTdBZUee ePfe,dC<d e+fdDZV dddEdFddGdHe dIee dJee dKe dLe5dMe5d e fdNZWd ee fdOZXdPee d ee fdQZYdRe d dfdSZZ ddddddddTdUe5dHe dVe5dee dWee dXee5dYee dPeee dZeee efd ee[fd[Z\d\ed e fd]Z]d^ee d ee fd_Z^ ddUe5dHe dIee dPeee dYee d`e5dVe5daee dbee dcee ddee deee dfeee dKe fdgZ_dhedUe5die=dje=dkeej`dHe d ee fdlZadUe5dme d ee fdnZbdme doe5dUe5d ece ee ffdpZddqe5d ee5fdrZedseee efd dfdtZf ddUe5dHe d ee effduZgdved eceeee efee ffdwZh ddHee dIee dveeee efd`ee5dKee dxee+d e fdyZi ddzee d{ee fd|Zjd}ekd ekfd~Zld ekfdZmd e fdZnd e fdZod e fdZpd ekfdZqdddddddddddddddddddEdgddddHgdddddEdgddddddgddZrddlsmtZtmuZuddekd e+fdZvddhZwdved efdZxetjydderdeVdeqdS)a Delegate Tool -- Subagent Architecture Spawns child AIAgent instances with isolated context, restricted toolsets, and their own terminal sessions. Supports single-task and batch (parallel) modes. The parent blocks until all children complete. Each child gets: - A fresh conversation (no parent history) - Its own task_id (own terminal session, file ops cache) - A restricted toolset (configurable, with blocked tools always stripped) - A focused system prompt built from the delegated goal + context The parent's context only sees the delegation call and the summary result, never the child's intermediate tool calls or reasoning. N)ThreadPoolExecutor TimeoutError)AnyDictListOptional)TOOLSETScustom) file_state)set_approval_callback)base_url_hostnameis_truthy_value) delegate_taskclarifymemory send_message execute_codecronjobcommand descriptionreturnc >td||dS)zAuto-deny dangerous commands in subagent threads (safe default). Returns 'deny' so the subagent sees a refusal it can recover from, and never calls input() (which would deadlock the parent TUI). zeSubagent auto-denied dangerous command: %s (%s). Set delegation.subagent_auto_approve: true to allow.denyloggerwarningrrkwargss 9/home/rurouni/.hermes/hermes-agent/tools/delegate_tool.py_subagent_auto_denyr Js+  NN ? 6c >td||dS)zAuto-approve dangerous commands in subagent threads (opt-in YOLO). Only installed when delegation.subagent_auto_approve=true. Returns 'once' so the subagent proceeds without blocking the parent UI. z1Subagent auto-approved dangerous command: %s (%s)oncerrs r_subagent_auto_approver$Xs)  NN; 6r!ct}|dd}t|rtStS)aReturn the callback to install into subagent worker threads. Config key: delegation.subagent_auto_approve (bool, default False). Reads via the same _load_config() path as the rest of delegate_task so priority is config.yaml > (no env override for this knob) > default. subagent_auto_approveF) _load_configgetrr$r cfgvals r_get_subagent_approval_callbackr,es= ..C '')5 1 1Cs&%% r!F _spawn_paused_active_subagentspausedcpt5t|atcdddS#1swxYwYdS)zGlobally block/unblock new delegate_task spawns. Active children keep running; only NEW calls to delegate_task fail fast with a "spawning paused" error until unblocked. Returns the new state. N)_spawn_pause_lockboolr/)r1s rset_spawn_pausedr5s| V s +//cRt5tcdddS#1swxYwYdSN)r3r/r!ris_spawn_pausedr9so s   recordc|d}|sdSt5|t|<ddddS#1swxYwYdS)N subagent_id)r(_active_subagents_lockr0)r:sids r_register_subagentr?s **] # #C  ((!'#((((((((((((((((((s 9==r<c|t5t|dddddS#1swxYwYdSr7)r=r0pop)r<s r_unregister_subagentrBs 11k4000111111111111111111s 155cPt5t|}dddn #1swxYwY|sdS|d}|dS |d|dn4#t$r'}t d||Yd}~dSd}~wwxYwdS)aCRequest that a single running subagent stop at its next iteration boundary. Does not hard-kill the worker thread (Python can't); sets the child's interrupt flag which propagates to in-flight tools and recurses into grandchildren via AIAgent.interrupt(). Returns True if a matching subagent was found. NFagentzInterrupted via TUI ()z!interrupt_subagent(%s) failed: %sT)r=r0r( interrupt Exceptionrdebug)r<r:rDexcs rinterrupt_subagentrJs  44"&&{33444444444444444 u JJw  E }u > >>>????  8+sKKKuuuuu 4s$/33A22 B#<BB#ct5dtDcdddS#1swxYwYdS)uSnapshot of the currently running subagent tree. Each record: {subagent_id, parent_id, depth, goal, model, started_at, tool_count, status}. Safe to call from any thread — returns a copy. cJg|] }d|D!S)c&i|]\}}|dk ||S)rDr8.0kvs r z4list_active_subagents...s# 8 8 8da1<z)list_active_subagents..s>    9 8aggii 8 8 8   r!N)r=r0valuesr8r!rlist_active_subagentsrXs     &--//                     s #8<< i@ max_entries max_charsresultr[r\ct|tr|dnd}t|tsgSg}i}|D]}t|ts|ddkro|dpgD]W}|d}|dpi} |r't | dpd ||<Xt |D]}t ||krnt|tr|dd krFt|d pd } t| } ||d pd d } | d|} | | | | d | |S)u8Pull the last N tool-call results from a child's conversation. Powers the overlay's "Output" section — the cc-swarm-parity feature. We reuse the same messages list the trajectory saver walks, taking only the tail to keep event payloads small. Each entry is ``{tool, preview, is_error}``. messagesNrole assistant tool_callsidfunctionnametoolcontent tool_call_id)rfpreviewis_error) isinstancedictr(liststrreversedlen_stringify_tool_content_looks_like_error_outputappendreverse)r]r[r\r_tailpending_call_by_idmsgtctc_idfnrgrk tool_namerjs r_extract_output_tailr}s*4FD)A)AKvzz*%%%tH h % % "$D)+NN#t$$   776??k ) )ggl++1r N Nt VVJ''-2N03BFF6NN4Lf0M0M&u-!!SS t99 # # E#t$$ 6(A(A  *#'')*<*<*BCC+G44&**377>+B+B+Hb&QQ *9*% Y7QQRRRRLLNNN Kr!rgch|dSt|tr|St|trg}|D]}t|trp|d}t|tr||W|t j|dt|t|d|St|trt j|dtSt|S)a+Return a stable text representation for tool-result content. Most providers store tool results as strings, but some OpenAI-compatible paths can return content-block lists. Delegate observability must never crash while summarising a child run just because the transport used blocks. NrhtextF) ensure_asciidefault ) rlrornrmr(rtjsondumpsjoin)rgpartsitemrs rrrrrsr'3'4    ( (D$%% (xx''dC((TLL&&&&LLDuc!R!R!RSSSS SYY''''yy'4  Dz'sCCCC w<<r!c4t|}|sdS|}|ds|dr tj|}t |t re|drdSt|dpd }|dvrdSn#t$rYnwxYw| r>| d  nd}|d p>|d p)|d p|d S)aConservative stderr/error detector for tool-result previews. The old heuristic flagged any preview containing the substring "error", which painted perfectly normal terminal/json output red. We now only mark output as an error when there is stronger evidence: - structured JSON with an ``error`` key - structured JSON with ``status`` of error/failed - first line starts with a classic error marker F{[errorTstatusrh>rfailedfailuretimeoutrzerror:zfailed:z traceback z exception:) rrlstrip startswithrloadsrlrmr(rostriplowerrG splitlines)rgheadparsedrfirsts rrsrs-s&g..G u >>  D s ts33  Z((F&$'' ::g&& 4VZZ117R88>>@@FFHHFFF4    D 8?7I7I7K7K SG    # ) ) + + 1 1 3 3 3QSE "" *   I & & *   L ) ) *   L ) ) s>C"A C"" C/.C/rUc||sdSt|}|dvr|Std|dS)a/Normalise a caller-provided role to 'leaf' or 'orchestrator'. None/empty -> 'leaf'. Unknown strings coerce to 'leaf' with a warning log (matches the silent-degrade pattern of _get_orchestrator_enabled). _build_child_agent adds a second degrade layer for depth/kill-switch bounds. Nleaf>r orchestratorz1Unknown delegate_task role=%r, coercing to 'leaf')rorrrr)rUr_norms r_normalize_rolerQs\ yyv VV\\^^ ! ! # #F )))  NNFJJJ 6r!ct}|d}| tdt|}|dkr$tsdat d||S#ttf$r+t d|ttcYSwxYwtj d}|r< tdt|S#ttf$r tcYSwxYwtS) ayRead delegation.max_concurrent_children from config, falling back to DELEGATION_MAX_CONCURRENT_CHILDREN env var, then the default (3). Users can raise this as high as they want; only the floor (1) is enforced. Uses the same ``_load_config()`` path that the rest of ``delegate_task`` uses, keeping config priority consistent (config.yaml > env > default). max_concurrent_childrenNr. Tzxdelegation.max_concurrent_children=%d: each child consumes API tokens independently. High values multiply cost linearly.zNdelegation.max_concurrent_children=%r is not a valid integer; using default %d"DELEGATION_MAX_CONCURRENT_CHILDREN) r'r(maxint_HIGH_CONCURRENCY_WARNEDrr TypeError ValueError _DEFAULT_MAX_CONCURRENT_CHILDRENosgetenv)r*r+r]env_vals r_get_max_concurrent_childrenrbs1 ..C ''+ , ,C  4CHH%%F{{//3,NNM M:& 4 4 4 NN#0     4 3 3 3 4i<==G4 4q#g,,'' ':& 4 4 43 3 3 3 4 ++s$AA009B,+B,C##C>=C>ct}|d#tsdatdt S)uConcurrency cap for background (``background=true``) delegations. DEPRECATED KNOB: ``delegation.max_async_children`` has been unified into ``delegation.max_concurrent_children`` — one cap governs both a single synchronous batch's parallelism and how many background delegation units may run at once. When at capacity, a new async dispatch is REJECTED (not queued) so a runaway model can't pile up unbounded background work; the caller falls back to running the work synchronously. A leftover ``max_async_children`` in config.yaml is ignored (the config migration removes it, folding a raised value into ``max_concurrent_children``); we log a one-time deprecation warning if one is still present. max_async_childrenNTzdelegation.max_async_children is deprecated and ignored; delegation.max_concurrent_children now caps background delegations too. Remove the stale key from config.yaml.)r'r(_LEGACY_MAX_ASYNC_WARNEDrrrr*s r_get_max_async_childrenrsV ..C ww#$$09Q0#'  F   ( ) ))r!ct}|d}|Z t|}|dkrdntd|S#tt f$rt d|YnwxYwtj d}|r? t|}|dkrdntd|S#tt f$rYnwxYwtS)uRead delegation.child_timeout_seconds from config. Returns the number of seconds a single child agent is allowed to run before being cut off, or ``None`` when no wall-clock cap applies. Default: ``None`` (no timeout). Subagents doing legitimate heavy work (deep code review, large research fan-outs, slow reasoning models) were routinely killed mid-task by the old blanket cap even though they were making steady progress. Failures should come from what the child is actually doing — API errors, tool errors, iteration budget — not from a generic delegation-level stopwatch. Stuck-child protection is handled separately by the heartbeat staleness monitor, which stops refreshing parent activity so the gateway inactivity timeout can fire. Set ``delegation.child_timeout_seconds`` to a positive number to opt back in to a hard cap (floor 30 s); ``0`` or a negative value means disabled. child_timeout_secondsNrg>@zUdelegation.child_timeout_seconds=%r is not a valid number; using default (no timeout) DELEGATION_CHILD_TIMEOUT_SECONDS) r'r(floatrrrrrrrDEFAULT_CHILD_TIMEOUT)r*r+rrs r_get_child_timeoutrs$ ..C '') * *C  >3ZZF"Q;;44Cf,=,= =:&    NN-      i:;;G> >7^^F"Q;;44Cf,=,= =:&    D  ! s#A,A=<A=B>>CCcxt}|d}|tS t|}n?#tt f$r+t d|ttcYSwxYwtt|}||kr"t d|t||S)uRead delegation.max_spawn_depth from config, floored at 1 (no ceiling). depth 0 = parent agent. max_spawn_depth = N means agents at depths 0..N-1 can spawn; depth N is the leaf floor. Default 1 is flat: parent spawns children (depth 1), depth-1 children cannot spawn (blocked by this guard AND, for leaf children, by the delegation toolset strip in _strip_blocked_tools). Raise to 2+ to unlock nested orchestration. role="orchestrator" removes the toolset strip for spawning children when max_spawn_depth >= 2, enabling them to spawn their own workers. Like max_concurrent_children, there is no upper ceiling — but each extra level multiplies API cost, so raise it deliberately. max_spawn_depthNzFdelegation.max_spawn_depth=%r is not a valid integer; using default %dz6delegation.max_spawn_depth=%d below floor %d; using %d) r'r( MAX_DEPTHrrrrrr_MIN_SPAWN_DEPTH)r*r+ivalflooreds r_get_max_spawn_depthrs ..C ''# $ $C {3xx z " W      "D))G$ D       Ns>9A:9A:ct}|dd}t|tr|St|tr(|dvSdS)aGlobal kill switch for the orchestrator role. When False, role="orchestrator" is silently forced to "leaf" in _build_child_agent and the delegation toolset is stripped as before. Lets an operator disable the feature without a code revert. orchestrator_enabledT>1onyestrue)r'r(rlr4rorrr)s r_get_orchestrator_enabledrsp ..C ''($ / /C#t #sAyy{{  ""&@@@ 4r!cft}t|ddS)zFWhether narrowed child toolsets should keep the parent's MCP toolsets.inherit_mcp_toolsetsTr)r'rr(rs r_get_inherit_mcp_toolsetsr s+ ..C 377#9::D I I IIr!rec"|sdSt|drdS ddlm}|jt|}n#t $rd}YnwxYwt |o!t|dS)zDReturn True for canonical MCP toolsets and their registered aliases.Fzmcp-Tr)registryN)rortools.registryrget_toolset_alias_targetrGr4)rertargets r_is_mcp_toolset_namers u 4yyF##t++++++223t99==  93v;;11&99 : ::s#A AAparent_toolsetsct}|D]A}tj|}|r)||dgB|st|St|}tjD]Y\}}||vr |dg}|r7t||r||Z|S)a@Expand composite toolsets so individual toolset names are recognized. When a parent uses a composite toolset like ``hermes-cli`` (which bundles all core tools), the child may request individual toolsets such as ``web`` or ``terminal``. A simple name-based intersection would reject them because ``"web" != "hermes-cli"``. This helper collects the tool names from each parent toolset, then adds the names of any individual toolsets whose tools are a *subset* of the parent's available tools. The original parent toolset names are preserved. tools)setr r(updaterSissubsetadd)rparent_tool_namests_namets_defexpandedts_toolss r_expand_parent_toolsetsr s!UU">>g&&  >  $ $VZZ%<%< = = = $?###?##H#>++"" h   ::gr**  "H ../@AA " LL ! ! ! Or!child_toolsetsct|}t|D]*}t|r||vr||+|S)zFAppend any parent MCP toolsets that are missing from a narrowed child.)rnsortedrrt)rr preserved toolset_names r_preserve_parent_mcp_toolsetsr?s]^$$I//++  - - +,i2O2O   \ * * * r!2i]?ir()terminalfilewebc.eZdZdZdZdZdZdZdZdZ dZ d S) DelegateEventuFormal event types emitted during delegation progress. _build_child_progress_callback normalises incoming legacy strings (``tool.started``, ``_thinking``, …) to these enum values via ``_LEGACY_EVENT_MAP``. External consumers (gateway SSE, ACP adapter, CLI) still receive the legacy strings during the deprecation window. TASK_SPAWNED / TASK_COMPLETED / TASK_FAILED are reserved for future orchestrator lifecycle events and are not currently emitted. zdelegate.task_spawnedzdelegate.task_progresszdelegate.task_completedzdelegate.task_failedzdelegate.task_thinkingzdelegate.tool_startedzdelegate.tool_completedN) __name__ __module__ __qualname____doc__ TASK_SPAWNED TASK_PROGRESSTASK_COMPLETED TASK_FAILED TASK_THINKINGTASK_TOOL_STARTEDTASK_TOOL_COMPLETEDr8r!rrrpsA  +L,M.N(K,M/3r!r) _thinkingzreasoning.availablez tool.startedztool.completedsubagent_progress_LEGACY_EVENT_MAPcdS)z > t    nd33 eT** J     7??27#5#5c)nn#E#EFFDD    H  7==   27==#6#6 KKK 4sA B'' B43B4toolsetsctddhfdtjDfd|DS)a^Remove toolsets that contain only blocked tools. The strip set is derived from DELEGATE_BLOCKED_TOOLS plus the explicit composite/scenario toolsets (delegation, code_execution) that have no one-to-one tool. This keeps the blocklist and the strip set in lockstep so new blocked tools can't silently leak through as toolset names. delegationcode_executionc |h|]8\}}|vs-td|dgD6|9S)c3(K|] }|tvVdSr7)DELEGATE_BLOCKED_TOOLSrOts r z1_strip_blocked_tools... s(JJqq**JJJJJJr!r)allr()rOredefn_COMPOSITE_BLOCKED_TOOLSETSs r z'_strip_blocked_tools.. s` D$ . . . JJDHHWb4I4IJJJ J J / . . .r!cg|]}|v| Sr8r8)rOrblocked_toolset_namess rrVz(_strip_blocked_tools..s$ B B B!1,A#A#AA#A#A#Ar!) frozensetr rS)rr!r$s @@r_strip_blocked_toolsr&sh#,\;K,L"M"M".** C B B Bx B B BBr!linect|dd}t|r ||dS#t$rYnwxYwt|dS)aWEmit a human-readable progress line to the parent's console. Routes through ``parent_agent._safe_print`` when available so headless stdio hosts (ACP, gateway API) can redirect non-protocol output to stderr via their configured ``_print_fn``. A bare ``print()`` would otherwise land on stdout and corrupt JSON-RPC framing. _safe_printN)r callablerGprint)rr'printers r_emit_parent_consoler-sklM488G  GDMMM F    D  $KKKKKs / <<r< parent_iddepthmodelr session_ref task_index task_countr/r0r1r2c  t|ddt|ddssdSdkr ddzdnd|pdd g d gd tttff f d  dd td tdtffd  dd tdtf f d } fd} | | _| S)uBuild a callback that relays child agent tool calls to the parent display. Two display paths: CLI: prints tree-view lines above the parent's delegation spinner Gateway: batches tool names and relays to parent's progress callback The identity kwargs (``subagent_id``, ``parent_id``, ``depth``, ``model``, ``toolsets``) are threaded into every relayed event so the TUI can reconstruct the live spawn tree and route per-branch controls (kill, pause) back by ``subagent_id``. All are optional for backward compat — older callers that ignore them still produce a flat list on the TUI. Returns None if no display mechanism is available, in which case the child agent runs with no progress callback (identical to current behavior). _delegate_spinnerNtool_progress_callbackr.r] rhrrc d}|d<|d<|d<|d< t |d<r-drtd|d<d |d <|S) N)r3r4rr<r/r0r1r session_idchild_session_idr tool_count)rnr(ro) kw _tool_countr0 goal_labelr1r/r2r<r4r3rs r_identity_kwargsz8_build_child_progress_callback.._identity_kwargsOs$$    " +B}   'B{O  BwK  BwK  !(^^BzN  D;??<88 D%(\)B%C%CB! "&q>< r! event_typer|rjcsdS}|| ||||fi|dS#t$r&}td|Yd}~dSd}~wwxYw)NzParent callback failed: %s)rrGrrH) rBr|rjargsrpayloaderA parent_cbs r_relayz._build_child_progress_callback.._relaygs  F""$$v : Ij)Wd F Fg F F F F F : : : LL5q 9 9 9 9 9 9 9 9 9 :s 4 A$AA$c |dkrrsrqtdkr dddzn} dd|n2#t$r%}td|Yd}~nd}~wwxYwdd|ppdi|dS|d kr dd|i|dS|d krd | dSt |t r|}nEt|}|) t |}n#ttf$rYdSwxYw|t j kr|p|pd}rrt|dkr |dddzn|} dd |d n2#t$r%}td|Yd}~nd}~wwxYwd| dS|t j krdS|t j kr|p|pd} rQ| rO dd| n2#t$r%}td|Yd}~nd}~wwxYwrD d| n2#t$r%}td|Yd}~nd}~wwxYwdSdxxdz cc<Mt5t} | d| d<|pd| d<dddn #1swxYwYr|r t|dkr |dddzn|pd}ddlm} | |pd} dd| d|} |r | d|d z } | n2#t$r%}td|Yd}~nd}~wwxYwrud||||pdtkr?d}dd| dSdSdS)Nsubagent.start7z... u ├─ 🔀 zSpinner print_above failed: %srjrhsubagent.complete subagent.textrju ├─ 💭 ""zsubagent.thinkingrz Parent callback relay failed: %srr.r= last_tool#)get_tool_emojiu├─ z "z subagent.tool, subagent.progress🔀 )rJrM)rq print_aboverGrrHrlrrr(rrrrrr=r0 agent.displayrSrtrclear)rBr|rjrDrshortrFeventr summary_textrecrSemojir'summary _BATCH_SIZE_batchrHr?r@rGprefixspinnerr<s r _callbackz1_build_child_progress_callback.._callbackss ) ) ) F: F14Z21E1EZ_u,,:F''(GF(G(G(G(GHHHH FFFLL!A1EEEEEEEEF F S SW-H -Hb SF S S S F , , , F B B B6 B B B F  ( ( F?G 4 4 4 4 F j- 0 0 EE%))*55E})*55EE"I.FF M/ / /-i-2D F/24yy2~~crcU**4F''(IF(I(I(I(I(IJJJJ FFFLL!A1EEEEEEEEF F& 5 5 5 5 F M5 5 5 F M/ / /%552L F< FF''(NF(N(N (N(NOOOO FFFLL!A1EEEEEEEEF HHI1f3Ll3L3LMMMM HHHLL!CQGGGGGGGGH F A!  "' 7 7'++K88?(3AC %'0BC $  7 7 7 7 7 7 7 7 7 7 7 7 7 7 7  B%"7||b00"%%m  5 4 4 4 4 4"N9?33E9v99e99i99D 'e& B##D)))) B B B =qAAAAAAAA B   F?Iw = = = MM)/r * * *6{{k))))F++*4MF4MG4M4MNNNN    *)sA A:A55A:)C99D D E)) F3FFG33 H"=HH"(H99 I(I##I(/KKKL44 M#>MM#cr?r?d}dd|dSdSdS)z._flushsl   ii''G F&0I0I0I0I J J J J LLNNNNN    r!)NNN)r rrrorrg)r3rrr4r<r/r0r1rr2rergrarbrArHr?r@rGrcrds` ``````` @@@@@@@@@r_build_child_progress_callbackrh$s8l$7>>G &>EEI 9t(2A~~ #a # # # #2F*"##%%JKF#Kd38n2KO : : :$' :9< : : : : : : :FJnn"n47nnnnnnnnnnnnnn`I r!valuecnt|pddS)Nrh/)rorrstrip)ris r_normalized_runtime_urlrms. u{   ! ! # # * *3 / //r!fallback_base_urlct|}t|dd}t|trAt|d}|r||kr|dr|St|dd}|=tt|dd}|r||kr|dr|S|pdS)alReturn the base URL the parent is actually calling, not a stale attribute. ``parent_agent.base_url`` can still carry a leftover OpenRouter URL from an old config while the live OpenAI client in ``_client_kwargs`` already points at local Ollama. Subagents must inherit the active endpoint or they 401 against OpenRouter with a dummy/local key. _client_kwargsNbase_url)zhttp://zhttps://clientrh)rmr rlrmr(r)rrn surface_url client_kwargs kwargs_urlrrlive_urls r_inherit_parent_base_urlrws**;<->z-J-JKK  k))%%&=>>*  \8T 2 2F +76:r+J+JKK  K''##$;<<(O  $$r!max_iterationsoverride_provideroverride_base_urloverride_api_keyoverride_api_modeoverride_acp_commandoverride_acp_argsc  =>?@ddlm}ddl}t|dddz}t }t o||k}|dkr|r|nd}d|d |jdd }t|d d}td|dz }t}t|d d}|t|}n?|r)t|d rddl ??@fd|j D}ntt}|rKt|>>fd|D}t!rt#||}t%|}nG|r|t%|}n3|rt%t'|}nt%t}|dkrd|vr|dt+|}t-||||||}t|dd}|s*t|dr|jd}|pt|dd}i} t3||||||||||  =d}!=rdt4ddf=fd }"|"}!|p|j}#|pt|dd}$| p|j}%| st;||%}%| p|}&t|ddpd}'| | }(n|$|'krd}(nt|dd}(| r8ddl})|)| st@!d| d} d} | pt|dd}*tE| | nt|dgpg}+|r| sd}*g}+| rd}$d }(t|d!d},|,}- |d"}.|.s|.d#ur1dd$l#m$}/|/|.}0|0|0}-nt@!d%|.n2#tJ$r%}1t@&d&|1Yd}1~1nd}1~1wwxYwt|d'dpd}2t|d(d}3t|d)d}4t|d*d}5t|d+d}6t|d,d}7|rd}3d}4d}5d}6|dRid-|%d|&d|#d|$d|(d|*d|+d.|d/t|d/dd!|-d0t|d0dd1|2d |d2d3d4|d5d6|d7d8d9d:d3d;d3dt|d?dd@t|dAdd(|3d)|4d*|5d+|6d,|7dB=dCd}8t|dDd|8_'t|8dAdpd| dA<||8_(||8_)||8_*||8_+||8_,t|dEdpd|8_-t|dAd}9|9rt|8dFd |9|8j.dG<t_|$||%}:|:|:|8_0t|dHrbt|dId};|;r5|;5|j1|8dddn #1swxYwYn|j1|8=rA =dJ|Kn2#tJ$r%}1t@&dL|1Yd}1~1nd}1~1wwxYw ddMl2m3}<|.Ws<   !66t<<<I IIIr!cg|]}|v| Sr8r8)rOrexpanded_parents rrVz&_build_child_agent..ds#FFFo1E1E!1E1E1Er!rrapi_keyrpr1r.rrc|sdS d|dS#t$r&}td|Yd}~dSd}~wwxYw)Nrz(Child thinking callback relay failed: %srGrrH)rrFchild_progress_cbs r_child_thinkingz+_build_child_agent.._child_thinkingsy  L!!+t44444 L L L GKKKKKKKKK Ls  AAAproviderrhapi_modezUIgnoring acp_command=%r: binary not found on PATH; falling back to default transport. acp_commandacp_argsz copilot-acpchat_completionsreasoning_configreasoning_effortF)parse_reasoning_effortzAUnknown delegation.reasoning_effort '%s', inheriting parent levelz.Could not load delegation reasoning_effort: %s_fallback_chainproviders_allowedproviders_ignoredproviders_order provider_sortopenrouter_min_coding_scorerqrx max_tokensprefill_messagesfallback_model quiet_modeTephemeral_system_prompt log_prefix [subagent-]platformsubagentskip_context_files skip_memoryclarify_callbackthinking_callback session_db _session_dbparent_session_idr;r7iteration_budget _print_fn_current_turn_id_session_init_model_config_delegate_from_active_children_active_children_lockzsubagent.spawn_requestedrOz spawn_requested relay failed: %s invoke_hooksubagent_start)rparent_turn_idparent_subagent_idr<child_subagent_id child_role child_goalz%subagent_start hook invocation failedexc_infor8)4 run_agentruuidr rruuid4hexrr'rhasattrrrDEFAULT_TOOLSETSrrrr&rrtrrrpr(rhror1rqrwshutilwhichrrrnhermes_constantsrrGrHrr_delegate_roler_parent_subagent_id_subagent_goal_parent_turn_idr_resolve_child_credential_pool_credential_poolrhermes_cli.pluginsr)Ar3rrrr1rxr4rryrzr{r|r}r~r`r_uuidr max_spawnorchestrator_okeffective_roler<r tui_depthdelegation_cfgparent_enabledrrworkspace_hint child_promptparent_api_keyeffective_model_for_cbchild_session_refchild_thinking_cbreffective_modeleffective_providereffective_base_urleffective_api_key_parent_providereffective_api_mode_shutileffective_acp_commandeffective_acp_argsparent_reasoningchild_reasoningdelegation_effortrrrIparent_fallbackchild_providers_allowedchild_providers_ignoredchild_providers_orderchild_provider_sort!child_openrouter_min_coding_scorechild parent_sid child_poollock _invoke_hookrrrrsA @@@@r_build_child_agentrs >"!!!!!,(91==AK$&&I/11MkI6MO"n444TTvN= <?? ''L,N,Nl+++,\::N- % ! L\9d;;N D 6F G GD%488CC#JglGT&J&J )+6 $$%   $ , L# L$ L L L L L L,1|1O*UglJPT.U.U*Cl.C X5lDVWW(:N |Z>>D"$. / / /!$\:tDD %    }}122 % NN5$    $( $ 0GmT55  ( lJ339r !5 $0+/|-?FF&OL+../ABB   1U : : ? ? ? ? ? ?++,=>>F!"(W% LLL EsKKKKKKKKLl,=tDDLO&l4GNN%l4GNN#L2CTJJ!,FF(/ >[]a(b(b%#"&"& $" G   ## !! o $#   $#   *)  $# &~ <t<<< ) !/A4HHH ' ( 4 !-   . ----! "# $ 4% &D' () *,++ ,<===- .", dCCC/ 0211 2213 4.-5 6*)7 8%F$E9 : 10; <= E@lK>>EO'.e\2&F&F&L"l#'E*E%E 2EE#L2DbIIORE |T::JHge%A4HHT=G()9:0L*<J!+|/008|%|d |d?|d@|dA|dB|dC|d;!d.Dt|S#t $r&}t<dE|Yd}~dSd}~wwxYw)Ga,Write a structured diagnostic dump for a subagent that timed out before making any API call. See issue #14726: users hit "subagent timed out after 300s with no response" with zero API calls and no way to inspect what happened. This helper writes a dedicated log under ``~/.hermes/logs/subagent--.log`` capturing the child's config, system-prompt / tool-schema sizes, activity tracker snapshot, and the worker thread's Python stack at timeout. Returns the absolute path to the diagnostic file, or None on failure. r)get_hermes_homeNlogsTparentsexist_okridxz %Y%m%d_%H%M%Szsubagent-timeout-rz.logrhr'rc2|dSr7)rt)r'liness r_wz-_dump_subagent_timeout_diagnostic.._ws LL     r!u.# Subagent timeout diagnostic — issue #14726z # Generated: z ## Timeoutz task_index: z subagent_id: z configured_timeout: sz actual_duration: z.2fz## Goalz ...[truncated](empty)z## Child config) r1rrrqrxrrrrrrrq z: z: z ## Toolsetsrz enabled_toolsets: rz loaded tool count: z loaded tools: z## Prompt / schema sizesr system_promptz system_prompt_bytes: utf-8zn/az system_prompt_chars: z system_prompt: rrz tool_schema_count: z tool_schema_bytes: z tool_schema: z z z## NoteszG This file is written ONLY when a subagent times out with 0 API calls.zI 0-API-call timeouts mean the child never reached its first LLM request.zG Common causes: oversized prompt rejected by provider, transport hang,z< credential resolution stuck. See issue #14726 for context.encodingz+Subagent timeout diagnostic dump failed: %s)rh) rrdatetimesys tracebackmkdirrGr nowstrftimero isoformatrrqrlrencoderrget_activity_summaryrSis_alive_current_framesr(ident format_stackrlsplit write_textrrr)"rr3rrrrr_dt_sys _traceback hermes_homelogs_dirr<r dump_pathr _goal_previewattrr+enabled tool_names sys_promptrI tools_schema _schema_jsonr`rPrQframes worker_framestack frame_linesubrs" @r!_dump_subagent_timeout_diagnosticr.xsw(y444444&&&&%o'' '  NN4$N 7 7 7 7   44 e^T::P>PJ>P>P \     ( ( 9 9I;IIIIII   S $        ;<<<  ;3<++--7799 ; ;<<< 2 <  /: / /000  0; 0 0111  6O 6 6 6777  :#3 : : : :;;; 2 9 **,, }   $ $)%4%03DDM = %I&&& 2   . .D  .eT400c3''DJ,>,>'''''(((( . . .,,,,----- . 2 =%!3T::  .7 . .///U$6==   B8s:88 9 9 9 ?6*+=+=??@@@@     2  %&&& 3 (A4HH5/488  BtJWacfLgLg)rZ->->w-G-G)H)H)Hmrtt u u u BdJzSV3|+<+<>>???N3|/B/B7/K/K+L+LNNOOO 1 1 1 B//// 0 0 0 0 0 0 0 0 1 2  !!! :0022G  $ $1???Q??#### $ : : : B8#888 9 9 9 9 9 9 9 9 : 2  .///  $)?)?)A)A $))++F!::m&9::L'"// =="'''J)002288>>'':::''34444  " B, - - - - B1 2 2 2 2 :  TUUU  VWWW  TUUU  IJJJTYYu--@@@9~~ DcJJJttttts!W'=W' A W' A  E)W'5>G43W'4H W'HA&W'7JW' J W'J  W':BMW' M9 M4/W'4M99W'=A7O54W'5 P?PW'PW'2?Q21W'2 R<R W'REW'' X1XXr`c ddlm}ddl}|dd}|dd|jd}|d |d |d z }||d t|S#t$r&}t d|Yd}~dSd}~wwxYw)aWrite a subagent's full summary to the delegation cache and return path. Mirrors web_extract's ``_store_full_text``: the file lands in ``cache/delegation`` which is mounted read-only into remote backends (Docker/Modal/SSH) via ``credential_files._CACHE_DIRS``, so the parent's terminal/``read_file`` tools can page through the complete text on any backend. Returns the absolute path, or None on failure (best-effort: the trimmed head+tail is still returned to the parent regardless). r)get_hermes_dirNzcache/delegationdelegation_cacheTrz%Y%m%d_%H%M%S_%fzsubagent-summary-rz.txtr r z,Failed to spill subagent summary to file: %s) rr0r rrrrrorGrrH)r3r`r0r cache_dirrr rIs r_spill_summary_to_filer3s 333333"N#57IJJ t444 \     ( (); < <DzDDBDDDD '2224yy  CSIIItttttsB B B=B88B=capc t|}t|dz}||z }|d|}|| d}|d}||dzkr |d|}|d}d|cxkr |dzkrnn ||dzd}t ||} ddd t|d d t|d d |d d g} | rM|ddz} | d| | d| d| dn| d| d|dz|zd| z} | | fS)aReturn (model_text, spill_path) for one over-budget summary. Mirrors web_extract's ``_truncate_with_footer``: keep a head+tail window (~75% head / ~25% tail, snapped to line boundaries) so the subagent's opening AND its closing (outcomes / files-changed / issues, which live at the end) both survive, spill the full text to disk, and append a footer telling the parent exactly how much it's seeing and the precise ``read_file offset=`` to page into the omitted middle. Deterministic. g?Nrrrr.rhuE──────── [SUMMARY TRUNCATED] ────────zShowing ,z chars (head) + z chars (tail) of u: total — trimmed to protect the parent's context window.rzFull subagent output saved to: z,To read the omitted middle: read_file path="z " offset=zV limit=200 (the file is the complete summary; raise/lower offset to page through it).zWFull output could not be stored to disk; the head+tail above is all that was preserved.uo─────────────────────────────────────u+ [... middle omitted — see footer ...] )rqrrfindfindr3countrtr) r`r4r3 original_len head_budget tail_budgetrrvnl spill_path footer_linesmiddle_start_line model_texts r_trim_summary_with_footerrB!sw<.sdjD116@yAQAQSV6W6W\]^g\h r!Nmax_summary_charsc"g|] }||dk | S)rr8)rOcs rrVz)_apply_summary_budget..s"MMMMq1uu!uuur!r`r3Tsummary_truncatedsummary_full_pathu9[subagent-%s] summary trimmed %d → ~%d chars (spill=%s)?none) r'rr(DEFAULT_MAX_SUMMARY_CHARSrrrRrqminrBrrH) rSr summariesr*static_ceilingdynamic_budgetrr4entryr`r:rAr>s r_apply_summary_budgetrdsI  ..C3SWW%8:STTUU z "333231s9~~NNNNMnn=MMMJ  j//C   " w<<3   7|| !: S%))L"55" "  J&i%)!"  4)3E% & G IIlC ( (    &       s(A A$#A$c )HIJKLMNOtj}tddNddl}tdt |j}tdd}d} ||} | o |} | %tdr | n2#t$r%} t d| Yd} ~ nd} ~ wwxYwtjHdgIdgJdgLHIJLfd} tj| d } td d}t!|t"r|nd}|rtd d }t!|t$rt'd|d z nd}tdd}t)|t!|t"r|nd|t!tddt"rtddndtjddd  | NrA Ndn2#t$r%}t d|Yd}~nd}~wwxYwddl}|p&dd|jddOtdd}tj}|r!t t3j|ng}t7}ddlm}|d t<t?f}ddiMdt"ddfNfd KKMOfd}| |} |!| }n#t$r} td!r"ntd"rd _#n#t$rYnwxYwt!|tHtJf}tMtj|z d#} t'd$|rd%nd&tQ|j)| d}!d}" *}#t%|#+d'dpd}"n#t$rYnwxYw|rh|"dkrbtYt[|pd(t[| M+d)}!|!rt'd*|!Nr; Nd+|rd,| d-nt#||rd.nd/| d01n#t$rYnwxYw|r!|"dkrd2|d3}$|!r|$d4|!z }$nd2|d5|"d6}$nt#|}$|rd.nd/d|$|rd.nd/|"| td7d|!d8 cYd}~|.d9:H/| j0| 1d; |rte||K| I |3| n2#t$r%} t d<| Yd} ~ nd} ~ wwxYwddl}tdd}%t!|%trt |%|_td=r td>d}&|&r5|&5j45dddn #1swxYwYnj45n9#tltnf$r%}t d?|Yd}~nd}~wwxYw td@r8SS#t$rt dAYSwxYwd}~wwxYw |.d9:n#|.d9:wxYwNrXtNdBrH N9n2#t$r%}t dC|Yd}~nd}~wwxYwtMtj|z d#} |+dDpd0}'|+dEd9}(|+dFd9})|+dGd}*|':dHk}+|)rdF},n |'r|+sdE},ndI},g}-i}.|+dJpg}/t!|/tr|/D]}0t!|0tvs|0+dKdLkr|0+dMpgD]}1|1+dNi}2|2+dOdPty|2+dQd0dR}3|-=|3|1+dS}4|4r|3|.|4<|0+dKdTkrt}|0+dUd0}5t|5}6ty|5|6rd/ndVdW}7|0+dX}4|4r|.+|4nd}8|8|8@|7v|-r|-dY@|7|)rdF}9n|(rdE}9ndZ}9td[d}:td\d};tdd}<|,|'|*| t!||>rtda|>CD}?|?rxdbdc1|?ddzty|?dkrddty|?dz dend0zdfz}@|=+dgr|=dg|@z|=dg<n|?|=dh<n,#t$rt did jYnwxYwtd^d}Atdkd}B t t3jOddl}Cn#t$rg}CYnwxYw t3jAd0|g}Dn#t$ri}DYnwxYwtOfdm|DDDddl}Et|ddno}F|'r |'ddpn|=+d/d0|,| |'r |'ddqn|=+d/d0t!|:t$tZfrt%|:ndt!|;t$tZfrt%|;ndt!|Bt$tZfrt%|Bndt!|*t$tZfrt%|*nd|C|E|Fdr }G|A+ t[|A|Gds<n#ttlf$rYnwxYwNr< Ndyi|Gn2#t$r%}t dt|Yd}~nd}~wwxYw|=H/| j0| 1d; |rte||K| I |3| n2#t$r%} t d<| Yd} ~ nd} ~ wwxYwddl}tdd}%t!|%trt |%|_td=r td>d}&|&r5|&5j45dddn #1swxYwYnj45n9#tltnf$r%}t d?|Yd}~nd}~wwxYw td@r8SS#t$rt dAYSwxYw#t$r} tMtj|z d#} tjHdudvNr^ Nd+t#| dI| t#| 1n2#t$r%}t dw|Yd}~nd}~wwxYwd/dt#| d| td7ddxcYd} ~ H/| j0| 1d; |rte||K| I |3| n2#t$r%} t d<| Yd} ~ nd} ~ wwxYwddl}tdd}%t!|%trt |%|_td=r td>d}&|&r5|&5j45dddn #1swxYwYnj45n9#tltnf$r%}t d?|Yd}~nd}~wwxYw td@r8SS#t$rt dAYSwxYwd} ~ wwxYw#H/| j0| 1d; |rte||K| I |3| n2#t$r%} t d<| Yd} ~ nd} ~ wwxYwddl}tdd}%t!|%trt |%|_td=r td>d}&|&r5|&5j45dddn #1swxYwYnj45n9#tltnf$r%}t d?|Yd}~nd}~wwxYw td@r8ww#t$rt dAYwwxYwxYw)zzi Run a pre-built child agent. Called from within a thread. Returns a structured result dict. r7Nr_delegate_saved_tool_namesr_swap_credentialz-Failed to bind child to leased credential: %sc tsptdd}|s2dd} }|d}|dd}|dd}| dk}| dk}|s|r| d<| d<d d<n dxxdz cc<|rt nt } d|kr'td  d|pd dS|r d |d |d |d}n$|dd} | r d| d |d |d}n#t$rYnwxYw ||n#t$rYnwxYw tndSdS)N_touch_activityzdelegate_task: subagent z working current_toolapi_call_countrrxr.u_Subagent %d appears stale (no progress for %d heartbeat cycles, tool=%s) — stopping heartbeatzz delegate_task: subagent running z (iteration rkrElast_activity_descrh) wait_HEARTBEAT_INTERVALr rr(_HEARTBEAT_STALE_CYCLES_IN_TOOL_HEARTBEAT_STALE_CYCLES_IDLErrrG)touchdesc child_summary child_tool child_iter child_max iter_advanced tool_changed stale_limit child_desc_heartbeat_stop_last_seen_iter_last_seen_tool _stale_countrrr3s r_heartbeat_loopz*_run_single_child.._heartbeat_loops!&&':;;B #L*;TBBE BjBBBD6  % : : < < *..~>> *../?CC )--.>BB !+_Q-? ? )_Q-??  )L))3OA&)3OA&&'LOO OOOq(OOO"6335  ?k11NNL"$Q".h E @:@@&0@@3<@@@D "/!2!23G!L!LJ!DzDD*4DD7@DDD     d     C"&&':;;B B B B B s*CE3E EE E E-,E-T)rdaemonrrr.rr1running) r<r/r0rr1 started_atrr=rDrJrOz"Progress callback start failed: %sz subagent-rr_current_task_idDaemonThreadPoolExecutor) max_workers initializerinitargsrdeltarc|rsdS d|dS#t$r&}td|Yd}~dSd}~wwxYw)NrNrOzChild text relay failed: %sr)rrFrs r_relay_child_textz,_run_single_child.._relay_child_textts  1  ?!!/5AAAAAA ? ? ? :A>>>>>>>>> ?s  AAAc`tjd<S)Nr) user_messagetask_idstream_callback) threadingcurrent_threadrun_conversation)r_worker_thread_holderr child_task_idrsr_run_with_thread_capturez3_run_single_child.._run_with_thread_captures=)2)A)C)C !# &))!% 1* r!)rrF_interrupt_requestedrzSubagent %d %s after %.1fsz timed outzraised rk)rr3rrrru;Subagent %d 0-API-call timeout — diagnostic written to %srMzTimed out after rrrrh)rjrrr`zSubagent timed out after us without making any API call — the child never reached its first LLM request (prompt construction, credential resolution, or transport may be stuck).z Diagnostic: zs with u[ API call(s) completed — likely stuck on a slow API call or unresponsive network request.r) r3rr`r exit_reason api_callsr _child_rolediagnostic_pathF)rmr9z&Failed to release credential lease: %srrz/Could not remove child from active_children: %sclosez,Failed to close child agent after delegationrgz"Progress callback flush failed: %sfinal_response completed interruptedrrrr_r`rarbrdreunknown arguments)rf args_bytesrcrfrgok) result_bytesrrirYrxrGsession_completion_tokens)inputoutputsession_estimated_cost_usd) r3rr`rrr1rtokens tool_tracer_child_cost_usdz$Subagent did not produce a response.ch|] }|D]}| Sr8r8)rOpathsps rr"z$_run_single_child..os%OOOuOOAOOOOr!uX [NOTE: subagent modified files the parent previously read — re-read before editing: rTz (+z more)rr` stale_pathsz%file_state sibling-write check failedrsession_reasoning_tokensrc0h|]\}}|k |D]}|Sr8r8)rOtidrrrs rr"z$_run_single_child..sC   C-''('''''r!iXrZi) rjrrr` input_tokens output_tokensreasoning_tokensr files_read files_written output_tailcost_usdz'Progress callback completion failed: %srz] failedz*Progress callback failure relay failed: %sr3rr`rrrrrW)Itime monotonicr rrn_last_resolved_tool_names acquire_leasecurrentrrgrGrrHrEventThreadrlrorrr?startrrrr known_readsrtools.daemon_poolr_set_subagent_approval_cbr,submitr]rFrFuturesTimeoutErrorrroundrtyperrr(r.rshutdownrrrrB release_leaserremoverUnboundLocalErrorrrgrrmrqrtrrrsr writes_sincerrWrSr}rlogging exception)Pr3rrr_kwargs child_startr_saved_tool_namesrleased_cred_id leased_entryrIr_heartbeat_thread_raw_sidr _raw_depth _tui_depth _parent_sidrFrparent_task_id wall_startparent_reads_snapshot child_timeoutr_timeout_executorr _child_futurer] _timeout_exc is_timeoutdurationrchild_api_calls_summary_errsaved_tool_namesrr`rrr_empty_sentinelrr trace_by_idr_rxryr{entry_trzrgrk result_metarr _input_tokens_output_tokens_modelrcsibling_writes mod_pathsreminder _cost_usd_reasoning_tokens _files_read_files_written_map_files_written _output_tailcomplete_kwargsr{r|r}rr~rrrsP```` @@@@@@@@r_run_single_childrsF.""K '?FF +T+2W-X-X 2D99JN#1133  % S)1133 +?Q0R0R+**<888 S S S LcRRRRRRRR S o''OcOfO3LCCCCCCCCCCCJ"(MMM und33H)(C88B88dL U$5q99 /9*c/J/JQSJN+++PQ e%:DAA +,6{C,H,HR[[d#"'%$"?"?EEGE7D111"ikk#     $BI!!!  F F!!"2DAAAAA F F F A1EEEEEEEE F $X(XJ(X(XARSUTUSUAV(X(X  /A4HHY[[ >>>>44 25779   ILT{ ?S ?T ? ? ? ? ? ?         *001IJJ b 3"))-)@@FF\ \ \  5+..6OO%%%%U$:;;615E.    $L3F 2UVVJT^-- ;Q??H NN,)V /Vl9K9K9T/V/V    .2OO  5577"%hll3CQ&G&G&L1"M"M     o22"C)%*-*>3$?$?%*8__"7";";C"@"@ # # ##NNU"' !  %%+ *3:x::::!$\!2!2,6CyyG)1 "     !D )"a''CMCCC 'B A A AAUMUU*UUUD <(()'1>))w,6CyyG,$,&u.>EE#2         & &E & 2 2 2l   " .  " "1 " - - -  /  . . .  !n&@ L((8888 L L L EsKKKKKKKK L "5*FMM & - - K489I4J4JK 1 BB  (CQGG..%" ()&#66@VVD&&0 U|%L%LSMMRS'1#u&N&NUNNTU %#5*:DAAE#?EE%Lge%A3GGN3OOO A"! "! F X  #ZZ1WXXE'N Q ="7 =!+!8"J0E"""= &OO(=(=(?(?OOO!!I!=K"ii "1" 667 $'y>>A#5#5!Ac)nnq&8 @ @ @ @%' ""!!99Y//=/4Y/?(/JE),,3>%&&&+5i#u+N+NUYTU%+''+ + *   .3I.>.> ++z*      K K!!IIIIII K K K FJJJJJJJJ K@   " .  " "1 " - - -  /  . . .  !n&@ L((8888 L L L EsKKKKKKKK L "5*FMM & - - K489I4J4JK 1 N??A=](=9Q76](7 R](RA/](4)T]( T+(](*T++A](]-^AA4$W:: X)X$$X);[Z7+ [7Z; ;[>Z; ?[\/\\$\>>$]%$]%(]--^1AA4^  AA46_ AA4 _:_50AA45_::N AA4CqAA4&q0-AA4/q00%AA4)s?AA4 s AA4sAA4s*)AA4* s96AA48s99EAA4yAA4y'$AA4&y''AA4-y65AA46 z%z AA4 z%%AA40| |5|00|5*7 * *  **A@ ;A@@A@ @$$AA A $AA1A0AA1A4 ALA?>ALB>*AC)C(ALC) ADC3ADDALDADD(ALEALEALF AF"F" AGF,AG G AGH#AJH8AII AJIAI# I#AJI&AI# I'AJJAJ<JAJ7J7AJ<K$AK&K&$AL L AL LALLALLAAS$M AM6M5AS$M6 AN%NAN NAS$N AN%N%AAS$O7AQP AP3P' AQP3AP7 P7AQP:AP7 P;AQQAS$QARQ+AR RAS$R ARRAS$R$AR:R8AS$R:$AS!SAS$S AS!S!AS$taskscDt|tsdS|}|sdS tj|}n)#tj$r}dd|jdfcYd}~Sd}~wwxYwt|tsddt|j dfS|dfS)NNN)N7Provide either 'goal' (single task) or 'tasks' (batch).z`tasks must be a JSON array of task objects; received a string that could not be parsed as JSON (z).z3tasks must be a JSON array of task objects; parsed z instead.) rlrorrrJSONDecodeErrorrxrnrr)rrawrrIs r_recover_tasks_from_json_stringr s eS ! !z ++--C ONN C      =14 = = =        fd # #  0F||$ 0 0 0   4<sAA, A'!A,'A, backgroundcR ()*+,-./0tdStrtdSt|}|t|dnd}t dd}t } || krt jdd |d | d iSt} | d t} |"|| krt d || | } t| } n3#t$r&}tt|cYd}~Sd}~wwxYwt!+t#|\}}|rt|S||}|rNt%|t&r9t)|+kr#tdt)|d+dS|0nB|r1t%|tr|r|||dg0ntdS0stdSt-0D]\}}t%|t.s*td|dt1|jdcS| ddstd|dcSt5j-g.t)0,d0D/ddl}t'|j}g* t-0D]\}}t| dp|}t=||d| dd| d| ,| d| d| d | d!| d"| d#|$}||_* |||f ||_n #||_wxYwd%t.f*+,-./0fd& )|r%dd'l!m"}dd(l#m$} dd)l%m&}|}n#tN$rd*}YnwxYw|sTt(d+)}t%|t.rd,|d-<t j|d.S|d}d/*D(tSd0rxt d1d}(D]d} |r5|5j*+|dddn #1swxYwYnj*+|U#t$rYawxYw)fd2} (fd3}!d40D}"||"|d|| d|| |!tY5 }#|# d6d7krAt)|"}$|$d8krd9n|$d:}%d7d;|$|#d<|"|%d=}&t j|&d.St(d>|# dd?)}'t%|'t.rd@|'d-<t j|'d.St j)d.S)Aa- Spawn one or more child agents to handle delegated tasks. Supports two modes: - Single: provide goal (+ optional context, toolsets, role) - Batch: provide tasks array [{goal, context, toolsets, role}, ...] The 'role' parameter controls whether a child can further delegate: 'leaf' (default) cannot; 'orchestrator' retains the delegation toolset and can spawn its own workers, bounded by delegation.max_spawn_depth. Per-task role beats the top-level one. Returns JSON with results array, one entry per task. Nz.delegate_task requires a parent agent context.zzDelegation spawning is paused. Clear the pause via the TUI (`p` in /agents) or the `delegation.pause` RPC before retrying.Frrrrz&Delegation depth limit reached (depth=z, max_spawn_depth=z). Raise delegation.max_spawn_depth in config.yaml if deeper nesting is required (no hard ceiling, but each level multiplies API cost).rxzidelegate_task: ignoring caller-supplied max_iterations=%s; using delegation.max_iterations=%s from configzToo many tasks: z* provided, but max_concurrent_children is z. Either reduce the task count, split into multiple delegate_task calls, or increase delegation.max_concurrent_children in config.yaml.rrr`rzNo tasks provided.Task z must be an object, got .rrhz is missing a 'goal'.c.g|]}|dddS)rNrr8rs rrVz!delegate_task.. s$555a1V9SbS>555r!r`rr1rrqrrrrD)r3rrrr1rxr4rryrzr{r|r}r~r`rc (dkr;&d\}}}t||d|*}+|nnd}t*dd}ddlm}|'5}i}&D]0\} } }|t| | d|*} | || <1d &D} t |} | rt*d d d ur| D]}||}|rf | }n|#t$rC}|d dt|ddt| |ddd}Yd}~n4d}~wwxYw|dddddt| |ddd}+||dz }ːnddl m}m}|| d|\}} |D]} | }nX#t$rK}|| }|d dt|ddt| |ddd}Yd}~nd}~wwxYw+||dz }|d}|t!,kr,|nd|}| dd}| dd}|dkrdnd}(|z }|d|dzd(d|d |d! }|r: ||n6#t$rt%*d"|YnwxYwt%*d"||r`|dkrZ |d#|d$|dkrd%nd&d'#t$r&}t(d(|Yd}~d}~wwxYw| dddn #1swxYwY+d)*t/+**rt1*d+r*jr+D]} |dt!-kr-|ddnd&}*j|| d,d&pd&|dt!&kr#t&|dd-d.d&nd&/#t$rYwxYwt*d.d} dd0lm}n#t$rd}YnwxYwd1}+D]c}|d2d} |d3d1}! |!r|t=|!z }n#t>t@f$rYnwxYw|_ | dd4}"tC|"tDr+d|"cxkrt!&krnn&|"d-nd}#|d5|t*d6d&pd&t|#d.d| | d,| dtE| dpdd7z88#t$r t(d9d :YawxYw|d1kr t=t*d;d1pd1}$|$|z*_#t*dvrd?*_$t*d@dAdBvrdC*_%n,#t$rt(dDd :YnwxYwtMtOj()z d-}%+|%dES)FuORun all built children (1 or N), join on them, aggregate results, fire subagent_stop hooks + cost rollup, and return the combined result dict. Used by BOTH the synchronous path and the background runner. In the background case this whole function runs on the daemon executor, so the parent turn isn't blocked — but the batch still JOINS on itself here (all children must finish) before producing ONE consolidated results block. That is the contract: fan-out runs in the background, waits on each other, and returns together. r.rrr6Nr)r)r3rrrci|] \}}}|| Sr8r8)rOi_rs rrRzAdelegate_task.._execute_and_aggregate.. s "J"J"J Au1e"J"J"Jr!rFTrrrru9Parent agent interrupted — child did not finish in time)rmFIRST_COMPLETEDr)r return_whenr3rrrr\ru✓u✗z [rkr8z (zs)rrVz taskrrhz remainingzSpinner update_text failed: %sc|dS)Nr3r8)rUs rz?delegate_task.._execute_and_aggregate..Z s qr!)key_memory_managerr`rr;)taskr]r<rrrrrY subagent_stoprr)rrr<rrs child_status duration_msz$subagent_stop hook invocation failedrrsession_cost_sourcer]>Nrhr]rsession_cost_statusr>Nrhr estimatedzSubagent cost rollup failed)rStotal_duration_seconds))rrtr rrrrkeysdoner]rGror(concurrent.futuresrmr rqrXr- update_textrrHsortrdrr on_delegationrrrArrrrlrrrrrrr)._i_trr]completed_count spinner_refrexecutorfuturesr rfuture_child_by_indexpendingfrrcrI_cf_waitr rlabeldurricon remainingcompletion_linerF _task_goal_parent_session_idr_children_cost_totalr child_cost _child_index _child_agentrtotal_durationchildren max_childrenn_tasks overall_startrrS task_labels task_lists. r_execute_and_aggregatez-delegate_task.._execute_and_aggregate s  a<<$QKMBE&r2f:ulKKF NN6 " " " " O!,0CTJJK C B B B B B))lCCCm Rx#+((KAq%%__)#$vY#%1 -F'(GFOO#K"J"J"J"Jgllnn--WR|-CUKKtSS")11A")!*C vvxx" !&,-HHJJEE'0 !& !& !&69293714S56<=7>,;,?,?,D,DFVX\8*8* -& -&EEEEEE !&36.;/3-h12893:(7(;(;C(@(@BRTX4&4& )" )"$NN5111+q0OOTTTTTTTT$,H/%%%MD'#',R,R$*MMOOEE(   ")&/C.1*1+/),S-.45/6$3$7$7$<$<>NPT0"0" % %EEEEEE  u---'1,$L103c+6F6F0F0FK,,MTWMM$ii(:A>>!&8S!9!9(.+(=(=uu5$+o$= -1*Y*YSU*Y*YW*Y*Y*Y*YRU*Y*Y*Y&W[ + 7 7 H H H H#,[[[ 4\CYCYCY Z Z Z Z Z[1?UO?U?UVVV'R9q==R + 7 7$eI$e$e9PQ>>CCWY$e$e$e!"!"!"!"$-RRR & -Mq Q Q Q Q Q Q Q QRmWR-m Rm Rm Rm Rm Rm Rm Rm Rm Rm Rm Rm Rm Rm Rm R` LL66L 7 7 7 g|444   &788 ,  !  !.Y??"% "56v>> !0>>'$yyB77=2 %\2S]]BB$HU<-@$A!$DlTVWWW!# ?!D%\<FF F F F F F F F   LLL  # T TE=$77J#4c::J >(E*,=,==(z*    # T$yyr:: ",449:l9Z9Z9Z9ZSQY]]9Z9Z9Z9Z9Z\*1--  #&8#*<9KR#P#P#VTV%,\<%N%N)"'))I"6"6!&8!4!4 #UYY/A%B%B%Ga4$O P P      T T T Cd SSSSS T # % % K 6RTW X X _\_``:ADX:X 7 <)>GGK]]]7AL4<)> JJNccc7BL4 K K K :T JJJJJ Kt~//-?CC&4   s(BNDN E$!9ENE$$A*NG$#N$ H9.AH4/N4H99BNK&%N&LNLN%$M  N M;M60N6M;;NNNBQ>> R  R  R'' R65R6-TTTCW55&XX)AZ&Z10Z1)dispatch_async_delegation_batch)get_current_session_key)async_delivery_supportedTzxdelegate_task: async delivery unsupported on this session (stateless HTTP API); running the batch synchronously instead.ubackground=true is not available on this endpoint (stateless HTTP API — no channel to deliver a detached subagent result after the turn ends), so the subagent(s) ran SYNCHRONOUSLY and the result is included above.note)rcg|]\}}}| Sr8r8)rOr rXs rrVz!delegate_task.. s555y1a555r!rrcSr7r8)r=sr _batch_runnerz$delegate_task.._batch_runner s))++ +r!cD]P} t|dr|dnt|drd|_A#t$rYMwxYwdS)NrFzAsync delegation cancelledrT)rrFrrG)_c _child_agentss r_batch_interruptz'delegate_task.._batch_interrupt s#  r;//7 %ABBBB %;<<726/ D   s=A AAcg|] }|d S)rr8rs rrVz!delegate_task.. s///!F)///r!) goalsrrr`r1 session_keyrunner interrupt_fnrr dispatchedr.uSubagent is running in the background. You and the user can keep working; its full result re-enters the conversation as a new message when it finishes. Do not wait or poll — just continue.u subagents are running in parallel in the background. You and the user can keep working; they wait on each other and their consolidated results re-enter the conversation as a single message once ALL of them finish. Do not wait or poll — just continue.r delegation_id)rmoder9rOrJrAzZdelegate_task: async pool at capacity (%s); running the whole batch synchronously instead.rejectedaThe background delegation pool was at capacity (delegation.max_concurrent_children), so the subagent(s) ran SYNCHRONOUSLY and the result is included above. Raise delegation.max_concurrent_children in config.yaml to allow more concurrent background delegations.)- tool_errorr9rrr rrrr'r(DEFAULT_MAX_ITERATIONSrrH_resolve_delegation_credentialsrrorrrlrnrqr enumeratermrrrrrrrrfrttools.async_delegationr>tools.approvalr?gateway.session_contextr@rGinforrrr)1rrrrxr`rrtop_roler0rr*default_max_itereffective_max_itercredsrIrecovered_tasks tasks_errorr r _model_tools_parent_tool_namesrrrr>r?r@ _async_ok _sync_result _session_key_ac_lockrFrDrH_goalsdispatchnrArE _cap_resultrGr=r7r8r9r:rSr;r<s1 ` @@@@@@@@@rrr& s.JKKK   N   t$$H@J?UU;;;;[`J L"3Q 7 7E$&&I z-U--'0---     ..Cww/1GHH !n8H&H&H  = ,   *$/\BB $$$#c((########$011L#B5#I#I O['+&&&" UE4(( U u:: $ $F3u::FF.:FFF  U*T3''UDJJLLU"wIIJ STTT 0.///Y''@@4$%% III4::3FIII   xx##))++ @>a>>>?? ? ? ? @N$$MG)nnG559555K '&&&lDEE HDi(( + +DAq-QUU6]]-FhGGN&vYi((Gn1")"' "3"' "3!&y!1"' "3%*YYy%9%9"'))F"3"3##E(0BE , OOQ5M * * * *3 +82D ..1C .CCCCs Ds s s s s s s s s s s s s xw;JJJJJJ::::::  H H H H H H0022II   III  @ KKQ   2133L,-- 4V$ :l??? ?..r::: 55H555  share the parent's pool so cooldown state and rotation stay synchronized. 2. Different provider -> try to load that provider's own pool. 3. No pool available -> return None and let the child keep the inherited fixed credential behavior. Custom endpoints are a special case: every direct ``delegation.base_url`` runtime collapses to ``provider="custom"``, so bare provider equality would treat two *different* custom endpoints as interchangeable and let the child inherit the parent's pool. Leasing from that pool then overwrites the child's delegated ``base_url`` with the parent's endpoint (issue #7833). We therefore resolve custom runtimes by endpoint identity (the ``custom:`` pool key derived from the base_url) and only share the parent's pool when both resolve to the *same* custom endpoint. rNrrhr r)get_custom_provider_pool_key load_poolrqzDCould not resolve custom credential pool for child endpoint '%s': %s)rlz:Could not load credential pool for child provider '%s': %s)r agent.credential_poolrkrlhas_credentialsrGrrH) rrrparent_provider parent_poolrkrl child_key parent_keypoolrIs rrrK s. ?|%7>>>lJ==CO,(:DAAK X%%  U U U U U U U U445GHHI t65 j$77J'#x//*)++""9Y''DD$8$8$:$:     LLV"          t#5#H#H  333333y+,,   4 4 6 6 K     H           4s;B&+B&"B&& C0CC&(D ED;;Er*c t|dpdpd}t|dpdpd}t|dpdpd}t|dpdpd}t|dpdpd}hd}|pd}||v} |rw| su|} d d lm} |} d } | |pd }t |d kr d| vrd} d}n t |dkrd} d}nd| vrd } d}|dvr|}|| || |dS|s|dddddS d dlm}|||}n)#t$r}td|d|d|d}~wwxYw|dd} | std|d|p|dpd|dtkr|n|d|d| |d|dt|dpgd S)!uResolve credentials for subagent delegation. If ``delegation.base_url`` is configured, subagents use that direct OpenAI-compatible endpoint. ``delegation.api_key`` overrides the key; when omitted, ``api_key`` is returned as ``None`` so ``_build_child_agent`` inherits the parent agent's key (``effective_api_key = override_api_key or parent_api_key``). This lets providers that store their key outside ``OPENAI_API_KEY`` (e.g. ``MINIMAX_API_KEY``, ``DASHSCOPE_API_KEY``) work without a duplicate config entry. Otherwise, if ``delegation.provider`` is configured, the full credential bundle (base_url, api_key, api_mode, provider) is resolved via the runtime provider system — the same path used by CLI/gateway startup. This lets subagents run on a completely different provider:model pair. If neither base_url nor provider is configured, returns None values so the child inherits everything from the parent agent. Raises ValueError with a user-friendly message on credential failure. r1rhNrrqrr> google-genaigooglevertexbedrockr)_detect_api_mode_for_urlr rz chatgpt.comz/backend-api/codexz openai-codexcodex_responseszapi.anthropic.com anthropicanthropic_messageszapi.kimi.com/coding>rzrr|)r1rrqrr)resolve_runtime_provider) requested target_modelz$Cannot resolve delegation provider 'z': z. Check that the provider is configured (API key set, valid provider name), or set delegation.base_url/delegation.api_key for a direct endpoint. Available providers: openrouter, nous, zai, kimi-coding, minimax.zDelegation provider 'z]' resolved but has no API key. Set the appropriate environment variable or run 'hermes auth'.rrD)r1rrqrrrrD) ror(rrhermes_cli.runtime_providerryr r}rGr_RUNTIME_PROVIDER_CUSTOMrn)r*rconfigured_modelconfigured_providerconfigured_base_urlconfigured_api_keyconfigured_api_mode_NATIVE_SDK_PROVIDERS_provider_lower_is_native_sdk_providerrry base_lowerrrr}runtimerIs rrTrT s*3777++1r2288::Bdcggj117R88>>@@HDcggj117R88>>@@HDSWWY//5266<<>>F$cggj117R88>>@@FFHHPDLKK*0b7799??AAO-1FF, #:, % IHHHHH(..00 ++,?@@VDV 1 2 2m C C$ 22%H(HH 2 3 37J J J"H+HH "j 0 0H+H "_ _ _*H& +      &     HHHHHH**5HWghhh  Q3F Q Q3 Q Q Q    kk)R((G   N$7 N N N   "AW[[%9%9AT+2;;z+B+BF^+^+^''dkdodopzd{d{KK ++KK ++;;y))W[[((.B//  sG33 H=HHc ddlm}|dpi}|r|Sn#t$rYnwxYw ddlm}|}|dpiS#t$ricYSwxYw)aNLoad delegation config from CLI_CONFIG or persistent config. Checks the runtime config (cli.py CLI_CONFIG) first, then falls back to the persistent config (hermes_cli/config.py load_config()) so that ``delegation.model`` / ``delegation.provider`` are picked up regardless of the entry point (CLI, gateway, cron). r) CLI_CONFIGr) load_config)clirr(rGhermes_cli.configr)rr*rfulls rr'r' s """"""nn\**0b  J       111111{}}xx %%++  s $ 11&A A+*A+cN t}n#t$r t}YnwxYw t}n#t$r t}YnwxYw t }n#t$rd}YnwxYw|dkr|r d|d|dz d}n|dkr |sd|d}nd |d }d |d |d |dS)aCompose the delegate_task tool description with current runtime limits. The model needs to know its actual ceilings (not the framework defaults), otherwise it self-caps at "default 3" / "default 2" even when the user has raised delegation.max_concurrent_children / max_spawn_depth. Called both at module import (to seed DELEGATE_TASK_SCHEMA) and on every get_definitions() call via dynamic_schema_overrides. Trz use execute_code - Single tool call -> just call the tool directly - Tasks needing user interaction -> subagents cannot use clarify - Durable long-running work that must outlive the current turn -> use cronjob (action='create') or terminal(background=True, notify_on_complete=True) instead. Background delegations are NOT durable: if the parent session is closed (/new) or the process exits before a subagent finishes, that subagent's work is discarded, and /stop cancels every running background subagent. IMPORTANT: - Subagents have NO memory of your conversation. Pass all relevant info (file paths, error messages, constraints) via the 'context' field. - If the user is writing in a non-English language, or asked for output in a specific language / tone / style, say so in 'context' (e.g. "respond in Chinese", "return output in Japanese"). Otherwise subagents default to English and their summaries will contaminate your final reply with the wrong language. - Subagent summaries are SELF-REPORTS, not verified facts. A subagent that claims "uploaded successfully" or "file written" may be wrong. For operations with external side-effects (HTTP POST/PUT, remote writes, file creation at shared paths, publishing), require the subagent to return a verifiable handle (URL, ID, absolute path, HTTP status) and verify it yourself — fetch the URL, stat the file, read back the content — before telling the user the operation succeeded. - Leaf subagents (role='leaf', the default) CANNOT call: delegate_task, clarify, memory, send_message, execute_code. - Orchestrator subagents (role='orchestrator') retain delegate_task so they can spawn their own workers, but still cannot use clarify, memory, send_message, or execute_code. Orchestrators are bounded by max_spawn_depth=a for this user and can be disabled globally via delegation.orchestrator_enabled=false. - Subagent model is NOT selectable per call: children inherit the parent model (plus its fallback chain) unless you pin all subagents to a model via delegation.provider / delegation.model in config.yaml. - Each subagent gets its own terminal session (separate working directory and state). - Results are always returned as an array, one entry per task.)rrGrrrr)r8 max_depthorchestrator_onnesting_clauses r_build_top_level_descriptionr: sv8355 8887 8(**  355 A~~/~ ) ) ) ). s1&&&q!477&&&r! propertiesrrr`)rr)DELEGATE_TASK_SCHEMArSrrr)overrides_paramss r_build_dynamic_schema_overridesr s | ,&&3LA,OUUWW&&&\">\=]=]\"7+M: 0), which needs its workers' results within its own turn. The live path is ``run_agent._dispatch_delegate_task``; this lambda mirrors it for the rare case the intercept is bypassed. Direct Python callers of ``delegate_task`` keep the historical synchronous default. rr)r )rDr is_subagents r_model_background_valuer? s#,(91==AK?r!rrcNt|ts|Sg}d}|D]}t|ts||-d|D}|pt |t |k}|||r|n|S)NFc,i|]\}}|tv||Sr8)_MODEL_HIDDEN_TASK_FIELDS)rOrris rrRz3_strip_model_hidden_task_fields..[ s4   U333 333r!)rlrnrmrtrSrq)rstripped_taskschangedrstrippeds r_strip_model_hidden_task_fieldsrR s eT " " NG ( ($%%   ! !$ ' ' '   "jjll    7S]]c$ii7h''''$ />>%/r!rc nt|d|dt|d|d|dt||d|dS)Nrrrrxr`r)rrrrxr`rr)rr(rr)rDr>s rrri s} XXf  ##-dhhw.?.?@@xx 011 XXf  *41G1GHHVVN++   r!u🔀)retoolsetschemahandlercheck_fnr_dynamic_schema_overridesr7)r.)NNNNNNrr)NNNNNNN)zrrrr getLoggerrrrrrrrrrtypingrrrrrr rrr tools.terminal_toolr rutilsr rr%rror r$r,rrrrLockr3r/r4__annotations__r=r0r5r9r?rBrJrXrr}rrrsrrrrrrrrrrrrrrSr^rJrIrrnrprorEnumrrrrrrrrrr&r-r*rhrmrwrrr.r3tuplerBrRrdrrrrrmrTr'rrrrrrrrRrrrregisterr8r!rrs"   8 $ $  -,,,,,,,,,,, $RRRRRR44444444#  :  3 S     C c        "$% ! #IN$$ t'))024T#s(^+,111 T d     (tCH~($((((1c1d1111 CD.  tDcN3      444 cN44 4  $sCx. 4444nSS8!c!d!!!!Hx}"&,c&,&,&,&,R!*****6'!HUO'!'!'!'!T$c$$$$N4"J4JJJJ ;s ;t ; ; ; ;SS>I03C #Y" ! *.x--- ""$...44444C4440,(6!3#7&4 //4]*+T"K%)KKK K c]KSM K  K  KK KKKK\Xc]6C49CcCCCC(ST, G "&#$(,0GGGG G G # G}G C=G C=GtCy!G$sCx.)GhGGGGT03030000%hsm%PXY\P]%%%%X(,'+&*'+*.-1)aaa ac]atCy! a C= a  aa }a }asma }a#3-a  S *!a( )aaaaH M MM M  M I,- M Mc]MMMM`sSXc]24" 4"4"(+4" 3 4"4"4"4"n%3%8C=%%%%P4 4S#X#74 $4 4 4 4 t  U IU IU I U I  #s(^ U IU IU IU Ip  8Dc3h( )8C= 890!,0$(!%bDbD 3-bD c]bD Dc3h( )bDSM bD 3- bD  bD bDbDbDbDP)-RR  R! RRRRjyyyyyyxd