FjdZ ddlZn #e$rYnwxYwddlZddlZddlZddlZddlZddlZej e Z ddl Z ddl Z ddlZddlZddlZddlZddlZddlmZmZmZmZddlmZddlmZddlmZddlmZmZm Z ddl!m"Z"dd l#m$Z$dd l%m&Z&m'Z'eZ(ee)j*d z Z+e$e(e+ Z,e,re,D]Z-e .d e-ne .dddl/m0Z0m1Z1m2Z2m3Z3ddl4m5Z5ddl6m7Z8ddl9m:Z:ddl;mZ>ddl?m@Z@ddlAmBZBmCZCddlDmEZEddlFmGZGddlHmIZIddlJmKZKmLZLmMZMmNZNmOZOmPZPddlmQZQddlRmSZSmTZTmUZUmVZVmWZWmXZXmYZYmZZZm[Z[m\Z\m]Z]ddl^m_Z`maZbmcZdmeZeddlfmgZgmhZhmiZiddljmkZlmmZmdd lnmoZompZqdd!lrmsZsmtZtmuZumvZvmwZwmxZxmyZymzZzm{Z{m|Z|dd"l}m~Z~mZmZd#ZejZd$Zd%efd&Zddd'd(edzd)edzd%efd*Zd%efd+ZGd,d-eZGd.d/Z dAd4ed5ed6ed)ed7ed8ed9ed:ed;edefd?Ze d@krddlZejedSdS)Bao AI Agent Runner with Tool Calling This module provides a clean, standalone agent that can execute AI models with tool calling capabilities. It handles the conversation loop, tool execution, and response management. Features: - Automatic tool calling loop until completion - Configurable model parameters - Error handling and recovery - Message history management - Support for multiple model providers Usage: from run_agent import AIAgent agent = AIAgent(base_url="http://localhost:30000/v1", model="claude-opus-4-20250514") response = agent.run_conversation("Tell me about the latest Python updates") N)ListDictAnyOptional)datetime)Path)get_hermes_home)OpenAI _SafeWriter_get_proxy_for_base_url)IterationBudget)load_hermes_dotenv)get_provider_request_timeoutget_provider_stale_timeoutz.env) hermes_home project_envz$Loaded environment variables from %sz7No .env file found. Using system environment variables.)get_tool_definitionsget_toolset_for_toolhandle_function_callcheck_toolset_requirements) cleanup_vm) set_interrupt)cleanup_browser)sanitize_context)FailoverReason)redact_sensitive_text)estimate_request_tokens_roughis_local_endpoint)normalize_usage)ContextCompressor)jittered_backoff)DEFAULT_AGENT_IDENTITYbuild_skills_system_promptbuild_context_files_promptbuild_environment_hintsbuild_nous_subscription_prompt load_soul_md)_get_proxy_from_env) _SURROGATE_RE_sanitize_surrogates_sanitize_structure_surrogates_sanitize_messages_surrogates%_escape_invalid_chars_in_json_strings_repair_tool_call_arguments_strip_non_ascii_sanitize_messages_non_ascii_sanitize_tools_non_ascii_strip_images_from_messages_sanitize_structure_non_ascii)"_derive_responses_function_call_id_deterministic_call_id_split_responses_tool_id_summarize_user_message_for_log)ToolGuardrailDecisionappend_toolguard_guidancetoolguard_synthetic_result)FILE_MUTATING_TOOL_NAMESfile_mutation_result_landed)convert_scratchpad_to_thinksave_trajectory) _should_parallelize_tool_batch_is_destructive_command_extract_parallel_scope_path_paths_overlap_is_multimodal_tool_result_multimodal_text_summary!_append_subdir_hint_to_multimodal_extract_file_mutation_targets_extract_error_preview_trajectory_normalize_msg)atomic_json_writebase_url_host_matchesbase_url_hostnamez0.14.1returncddlm}dd|iS)zGReturn the User-Agent RouterMint needs to avoid Cloudflare 1010 blocks.r) __version__ User-Agentz HermesAgent/) hermes_clirO)_HERMES_VERSIONs (/usr/local/lib/hermes-agent/run_agent.py_routermint_headersrTs.999999 6_66 )providerbase_urlrVrWc|dS|sdS|dks$t|pddrdSt|dkS)u?Decide whether to wait for credential-pool rotation instead of falling back. The existing pool-rotation path requires the pool to (1) exist and (2) have at least one entry not currently in exhaustion cooldown. But rotation is only meaningful when the pool has more than one entry. With a single-credential pool (common for Gemini OAuth, Vertex service accounts, and any "one personal key" configuration), the primary entry just 429'd and there is nothing to rotate to. Waiting for the pool cooldown to expire means retrying against the same exhausted quota — the daily-quota 429 will recur immediately, and the retry budget is burned. Additionally, Google CloudCode / Gemini CLI rate limits are ACCOUNT-level throttles — even a multi-entry pool shares the same quota window, so rotation won't recover. Skip straight to the fallback for those (#13636). In those cases we must fall back to the configured ``fallback_model`` instead. Returns True only when rotation has somewhere to go. See issues #11314 and #13636. NFgoogle-gemini-clicloudcode-pa://) has_availablestr startswithlenentries)poolrVrWs rS!_pool_may_recover_from_rate_limitrcsu0 |u     u&&&#hn"*=*=*H*HIZ*[*[&u t||~~   ""rUcddl}dtd|d|d}|d|dd S) z8Return default HTTP headers required by Qwen Portal API.rNz QwenCode/z (z; )enablez qwen-oauth)rPzX-DashScope-CacheControlzX-DashScope-UserAgentzX-DashScope-AuthType)platform_QWEN_CODE_VERSIONsystemlowermachine)_plat_uas rS_qwen_portal_headersrnsf X( X XELLNN,@,@,B,B X Xemmoo X X XC$,!$ ,   rUc feZdZdZdddddedeedeedeeddf fd ZxZS) _StreamErrorEventaSynthesized provider error surfaced from a Responses ``error`` SSE frame. Some Codex-style Responses backends (xAI for subscription/quota failures, custom relays under malformed-tool-call conditions) emit a standalone ``type=error`` frame instead of routing the failure through ``response.failed`` or returning an HTTP 4xx. The fallback streaming path raises this exception so ``_summarize_api_error`` and ``_extract_api_error_context`` see a familiar ``.body`` / ``.status_code`` shape and the entitlement detector can match the underlying provider message ("do not have an active Grok subscription", etc.). N)codeparam status_codemessagerqrrrsrMct|||_||_||_||_d|||ddi|_dS)Nerror)rtrqrrtype)super__init__rtrqrrrsbody)selfrtrqrrrs __class__s rSryz_StreamErrorEvent.__init__ sb !!!   & " %  rU) __name__ __module__ __qualname____doc__r^rintry __classcell__)r|s@rSrprps  "##%)     sm  }  c]             rUrpc2eZdZdZdZedefdZejdeddfdZ ddededededede edzdede edzdede de de ede ede de de d ed!e d"ed#e ed$e ed%e ed&ed'e d(ed)ee d*ed+ed,ed-ed.ed/ed0ed1ed2ed3ed4ed5ed6e d7eeefd8ed9eeefd:e eeefd;eded?ed@edAedBedCedDe dEe dFe dGedHdIdJeeefdKe dLe dMe dNe dOe f~dPZdQZddRZdddd dSdTdUeedVeedWee dXe dYe ddf dZZ ddWee dUeedXe fd[Zdd\ee ddfd]Zdd^Zd_Zd d`dae fdbZde fdcZde fddZdeeddfdfZdeeddfdgZdeeddfdhZdeeddfdiZ ddjZ!ddkZ" ddlee eeefdeee ffdmZ#dndol$m%Z&e'deeeffdpZ(dqeeefdreddfdsZ)e'dte*defduZ+dte*de fdvZ,ddwdxedte*dye dze d{e dqeeeefddfd|Z-ddwdte*dye dze d{e dqeeeefddf d}Z.d~ede*ddfdZ/deeeffdZ0ddZ1ddZ2ddede fdZ3ddede fdZ4ddede fdZ5de fdZ6de7e e ffdZ8dede fdZ9ddeedeefdZ:de fdZ;ddddddeedeedeedeede7e e ff dZde de?fdZ@dede fdZAdedefdZBe'dede fdZCde fdZD ddedlee de fdZEdededle eeefde fdZFdeefdZGdeddfdZHdndlImJZJmKZKmLZLe'de ede ede efdZM dde ede de ddfdZNddddddeedeedeedeedeeeff dZOdle eddfdZPddle ede efdZQdle eddfdZRdle ede fdZSddle ede efdZTdle ede efdZUdefdZVdle eeefdede de eeeffdZWdle eeefdede fdZXe'deeeefdee de fdZYe'dteZdefdZ[dedeefdZ\dedefdZ]e'dteZdeeeffdZ^dedeeeeffdÄZ_ddĜdeeefdedteeZdee`fdDŽZae'dedefdȄZbe'dɄZcddle eeeffdʄZdddeeddfd˄Zedd̄Zfdede fd΄ZgdeefdτZhdedeeefdede ddf dӄZide fdԄZje'deeeeeffdefdքZkdle de ddfd؄ZldeddfdڄZmdreddfdۄZnd܄Zodreddfd݄Zpde?fdބZqddle ddfd߄Zrddle ddfdZsdddedede dle dzddf dZtddZuddZvde eeefddfdZwede fdZxddedeeeffdZyddedefdZze'defdZ{e'defdZ|e}hdZ~e'dle eeefde eeeffdZe'deeefde fdZe'dle eeefde eeeffdZe'de de fdZe'de de fdZdededzfdZdZe'ddedede defdZe'dede7eeeeffdZ ddedeedefdZdefdZdefdZdejfdZe'dede fdZe'ddedefdZd e?ded e defd Ze'dede fd Zdeded e ddfd Zdede fdZdedefdZde fdZe'de?de fdZde de?fdZdddedee?defdZdededdfdZdededdfdZdde?dedefdZdde?defdZdSd`dae de fdZdSdddae dedzde fdZde fdZde fd Zdeddfd!Zdd"Zddd#dee d$e d%eedeeeefde7e e ff d&Zde fd'Zde?fd(Zdd)Zde?fd*Zdd+Zdeddfd,Ze'dedefd-Zdede fd.Zd/eeefddfd0Zdeddfd1Zdeddfd2Zdeddfd3Zde fd4Zdd5de?defd6ZddƐd7de fd8Zde fd9Zd:eZd;e dZe'd?ede7eee`ffd@Zd?edAedefdBZde fdCZdedAedefdDZddefdEZdFe de fdGZdFe de fdHZdededefdIZdFe de fdJZdFe de fdKZde fdLZde fdMZdFe de fdNZdle ddfdOZĐdFe de?fdPZde fdQZde efdRZdeefdSZde?dzfdTZdede?fdUZde fdVZde fdWZde fdXZde fdYZΐdZe?d[e?ddfd\ZϐdFe de fd]Ze'd[e?de?fd^Ze'ddd_dle d*ede fd`Zde fdaZddbdd dcdle dedde dedeedae de7fdfZԐdgeddfdhZ֐dgedefdiZdedje?dkede def dlZؐdgedefdmZِddle dnedoe ddfdpZڐdje?defdqZ ddredje?dnedeedle dse defdtZe'ddvededwedefdxZݐddle dnedoe ddfdyZސddle dnedoe ddfdzZdle doe defd{Z ddedede eeefded|eed}eedeeeffd~Zddeed|eedefdZd ddededle eeefdnede deeeff dZdS(AIAgentz AI Agent with tool calling capabilities. This class manages the conversation flow, tool execution, and response handling for AI models that support function calling. z[hermes-agent: tool call arguments were corrupted in this session and have been dropped to keep the conversation alive. See issue #15236.]rMc|jSN) _base_urlr{s rSrWzAIAgent.base_url3s ~rUvalueNcv||_|r|nd|_t||_dSNrZ)rrj_base_url_lowerrK_base_url_hostnamer{rs rSrWzAIAgent.base_url7s805=u{{}}}2"3E":":rUrZZ?Fd rWapi_keyrVapi_mode acp_commandacp_argscommandargsmodelmax_iterations tool_delayenabled_toolsetsdisabled_toolsetssave_trajectoriesverbose_logging quiet_modeephemeral_system_promptlog_prefix_chars log_prefixproviders_allowedproviders_ignoredproviders_order provider_sortprovider_require_parametersprovider_data_collectionopenrouter_min_coding_score session_idtool_progress_callbacktool_start_callbacktool_complete_callbackthinking_callbackreasoning_callbackclarify_callback step_callbackstream_delta_callbackinterim_assistant_callbacktool_gen_callbackstatus_callback max_tokensreasoning_config service_tierrequest_overridesprefill_messagesrguser_id user_id_alt user_namechat_id chat_name chat_type thread_idgateway_session_keyskip_context_filesload_soul_identity skip_memoryparent_session_iditeration_budgetr fallback_modelcheckpoints_enabledcheckpoint_max_snapshotscheckpoint_max_total_size_mbcheckpoint_max_file_size_mbpass_session_idcBddlm}B|B|fid|d|d|d|d|d|d |d |d | d | d | d| d| d|d|d|d|d|d|d|d|d|d|d|d|d|d|d|d|d |d!|d"| d#|!d$|"d%|#d&|$d'|%d(|&d)|'d*|(d+|)d,|*d-|+d.|,d/|-d0|.d1|/d2|0d3|1d4|2d5|3d6|4d7|5d8|6d9|7d:|8d;|9d<|:d=|;d>|<d?|=d@|>dA|?dB|@dC|AdDS)Eu2Forwarder — see ``agent.agent_init.init_agent``.r) init_agentrWrrVrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrgrrrrrrrrrrr session_dbrrrcredential_poolrrrrrN)agent.agent_initr)Cr{rWrrVrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrgrrrrrrrrrrrrrrrrrrrrrrsC rSryzAIAgent.__init__=sJ 0///// C C C XC GC X C X C $ C XC GC C %C *>C "zC .-C 0/C 0/C ,O!C ""z#C $%<$;%C &.-'C ("z)C *0/+C ,0/-C .,O/C 0(-1C 2)D(C3C 4&>%=5C 6)D(C7C 8"z9C :$:#9;C <!4 3=C >$:#9?C @0/AC B 21CC D.-EC F(-GC H#8"7IC J(B'AKC L0/MC N,OOC P"zQC R.-SC T&UC V0/WC X.-YC ZX[C \G]C ^$ _C ` iaC bGcC d ieC f igC h iiC j!4 3kC l 21mC n 21oC p$ qC r"zsC t0/uC v.-wC x*>yC z,O{C |!4 3}C ~&>%=C @*F)EAC B)D(CCC D,OEC C C C rUc|j|jS ddlm}||_|jS#t$r'}tddYd}~dSd}~wwxYw)aiReturn a SessionDB for recall, lazily creating it if an entrypoint forgot. Most frontends pass ``session_db`` into ``AIAgent`` explicitly, but recall is important enough that a missing constructor argument should degrade by opening the default state DB instead of making the advertised ``session_search`` tool unusable. Nr) SessionDBz SessionDB unavailable for recallTexc_info) _session_db hermes_stater Exceptionloggerdebug)r{rexcs rS_get_session_db_for_recallz"AIAgent._get_session_db_for_recalls   '# #  . . . . . .(y{{D # #    LL;dL K K K44444 s, AAAc Z|js|jsdS |j|j|jpt jdd|j|j |j d|j d|_dS#t$r&}td|Yd}~dSd}~wwxYw)zDCreate session DB row on first use. Disables _session_db on failure.NHERMES_SESSION_SOURCEcli)rsourcer model_config system_promptrrTz5Session DB creation failed (will retry next turn): %s)_session_db_createdrcreate_sessionrrgosenvirongetr_session_init_model_config_cached_system_prompt_parent_session_idrrwarning)r{es rS_ensure_db_sessionzAIAgent._ensure_db_sessions  # 4+;  F    + +?}V 7NPU(V(Vj!<"8"&"9 ,   (,D $ $ $    NNG          sA&A:: B*B%%B*Told_session_idnew_session_idprevious_messagescarry_over_context reset_enginerrrrrc t|dd}|sdS|r\|Zt|drJ |||n2#t$r%}td|Yd}~nd}~wwxYw|rXt|drH |n2#t$r%}td|Yd}~nd}~wwxYwt|p|dup|p|} |pt|ddpd} | r| rt|d r||t|d dptj d d t|d dt|ddt|ddd} | |d| D} |j | fi| n2#t$r%}td|Yd}~nd}~wwxYw|r`|r`| r`t|drR ||| dS#t$r&}td|Yd}~dSd}~wwxYwdSdSdSdS)aNotify the active context engine about a host session transition. Generic host-side lifecycle helper. The built-in compressor keeps its existing reset behavior; plugin engines that implement richer hooks (``on_session_end``, ``on_session_reset``, ``on_session_start``, ``carry_over_new_session_context``) can flush old-session state, reset runtime counters, bind to the new session, and optionally carry retained context forward. context_compressorNon_session_endz3context engine on_session_end during transition: %son_session_resetz5context engine on_session_reset during transition: %srrZon_session_startrgrrrcontext_length_gateway_session_key)rrrgrrconversation_idc"i|] \}}|dv || S)r).0kvs rS z>AIAgent._transition_context_engine_session..%s)[[[daqPZGZGZQGZGZGZrUz5context engine on_session_start during transition: %scarry_over_new_session_contextzCcontext engine carry_over_new_session_context during transition: %s)getattrhasattrrrrrrboolrrrupdateitemsrr) r{rrrrr extra_contextenginer should_starttarget_session_id start_contexts rS"_transition_context_engine_sessionz*AIAgent._transition_context_engine_sessions~&3T::  F  Y/;P`@a@a; Y%%n6GHHHH Y Y Y RTWXXXXXXXX Y  [GF,>?? [ ['')))) [ [ [ TVYZZZZZZZZ [   , !    +SgdL".M.MSQS  [- ['&BT2U2U ["0&8#D*d;;mrz~~Negl?m?m w33")&2BD"I"I#*41G#N#N M   / / /[[m.A.A.C.C[[[M [''(9KK]KKKK [ [ [ TVYZZZZZZZZ [  i i" i @AA i  i55nFWXXXXX i i i bdghhhhhhhhh i i i i i i i i is_A A1 A,,A1B C &CC 'F66 G%G  G%?H I!IIcd|_d|_d|_d|_d|_d|_d|_d|_d|_d|_ d|_ d|_ d|_ | |t|dd||ddS) axReset all session-scoped token counters to 0 for a fresh session. This method encapsulates the reset logic for all session-level metrics including: - Token usage counters (input, output, total, prompt, completion) - Cache read/write tokens - API call count - Reasoning tokens - Estimated cost tracking - Context compressor internal counters The method safely handles optional attributes (e.g., context compressor) using ``hasattr`` checks. When ``previous_messages`` / ``old_session_id`` / ``carry_over_context`` are provided, the active context engine is notified through the full transition lifecycle (``_transition_context_engine_session``) instead of a bare reset. Default callers pass nothing and keep the existing reset-only behavior. rgunknownnonerNTr)session_total_tokenssession_input_tokenssession_output_tokenssession_prompt_tokenssession_completion_tokenssession_cache_read_tokenssession_cache_write_tokenssession_reasoning_tokenssession_api_callssession_estimated_cost_usdsession_cost_statussession_cost_source_user_turn_countrr)r{rrrs rSreset_session_statezAIAgent.reset_session_state6s6%&!$%!%&"%&")*&)*&*+'()%!"*-'#, #) !" //)"4t<</1 0     rUconfig_context_lengthc 2|jpddkrdS ddlm}ddlm}|t|dd}t|pd|}||j |j t|dd|}|rSt|d d}|B| |j ||j t|dd|j|j dSdSdS#t$r&}td |Yd}~dSd}~wwxYw) zT Preload the LM Studio model with at least Hermes' minimum context. rZlmstudioNr)MINIMUM_CONTEXT_LENGTH)ensure_lmstudio_model_loaded_config_context_lengthrr)rrrWrrVrzLM Studio preload skipped: %s)rVstriprjagent.model_metadatar&hermes_cli.modelsr'rmaxrrW update_modelrrrr)r{r#r&r' target_ctx loaded_ctxccerrs rS_ensure_lmstudio_runtime_loadedz'AIAgent._ensure_lmstudio_runtime_loadedjs~ M R & & ( ( . . 0 0J > > F ? C C C C C C F F F F F F$,(/6NPT(U(U%27a9OPPJ55 DM74B+G+GJ  T#7>>>OO"j'1!% 'i <  ? ? ? LL8# > > > > > > > > > ?sB+C&& D0DDc.ddlm}|||||||S)u?Forwarder — see ``agent.agent_runtime_helpers.switch_model``.r) switch_model)agent.agent_runtime_helpersr4)r{ new_model new_providerrrWrr4s rSr4zAIAgent.switch_models.<<<<<<|D)\7HhWWWrUcd |jpt}||i|dS#ttf$rYdSwxYw)a3Print that silently handles broken pipes / closed stdout. In headless environments (systemd, Docker, nohup) stdout may become unavailable mid-session. A raw ``print()`` raises ``OSError`` which can crash cron jobs and lose completed work. Internally routes through ``self._print_fn`` (default: builtin ``print``) so callers such as the CLI can inject a renderer that handles ANSI escape sequences properly (e.g. prompt_toolkit's ``print_formatted_text(ANSI(...))``) without touching this method. N) _print_fnprintOSError ValueError)r{rkwargsfns rS _safe_printzAIAgent._safe_printsU (5B B      $    DD s //forcerAct|ddrdS|st|ddrdS|s|r |jsdS|j|i|dS)ueVerbose print — suppressed when actively streaming tokens. Pass ``force=True`` for error/warning messages that should always be shown even during streaming playback (TTS or display). During tool execution (``_executing_tools`` is True), printing is allowed even with stream consumers registered because no tokens are being streamed at that point. After the main response has been delivered and the remaining tool calls are post-response housekeeping (``_mute_post_response``), all non-forced output is suppressed. ``suppress_status_output`` is a stricter CLI automation mode used by parseable single-query flows such as ``hermes chat -q``. In that mode, all status/diagnostic prints routed through ``_vprint`` are suppressed so stdout stays machine-readable. suppress_status_outputFN_mute_post_response)r_has_stream_consumers_executing_toolsr?)r{rArr=s rS_vprintzAIAgent._vprints& 415 9 9  F 'S  F$)&)))))rUc|jdSttdd}|dS t|S#t t tf$rYdSwxYw)aReturn True when quiet-mode spinner output has a safe sink. In headless/stdio-protocol environments, a raw spinner with no custom ``_print_fn`` falls back to ``sys.stdout`` and can corrupt protocol streams such as ACP JSON-RPC. Allow quiet spinners only when either: - output is explicitly rerouted via ``_print_fn``; or - stdout is a real TTY. NTstdoutF)r9rsysr isattyAttributeErrorr<r;)r{streams rS_should_start_quiet_spinnerz#AIAgent._should_start_quiet_spinnersp > %4h-- >5  (( ( G4   55 s AA! A!cJ|jo|j ot|dddkS)aZReturn True when quiet-mode tool summaries should print directly. Quiet mode is used by both the interactive CLI and embedded/library callers. The CLI may still want compact progress hints when no callback owns rendering. Embedded/library callers, on the other hand, expect quiet mode to be truly silent. rgrZr)rrrrs rS _should_emit_quiet_tool_messagesz(AIAgent._should_emit_quiet_tool_messagess5 O 7// 7j"--6 rUrtc ||j|dn#t$rYnwxYw|jrF |d|dS#t$r tddYdSwxYwdS)uEmit a lifecycle status message to both CLI and gateway channels. CLI users see the message via ``_vprint(force=True)`` so it is always visible regardless of verbose/quiet mode. Gateway consumers receive it through ``status_callback("lifecycle", ...)``. This helper never raises — exceptions are swallowed so it cannot interrupt the retry/fallback logic. Tr@ lifecyclez%status_callback error in _emit_statusrNrGrrrrrr{rts rS _emit_statuszAIAgent._emit_statuss  LLDO6W66dL C C C C    D    U U$$['::::: U U U Dt TTTTTT U U U # 00A&A=<A=c ||j|dn#t$rYnwxYw|jrF |d|dS#t$r tddYdSwxYwdS)a+Emit a user-visible warning through the same status plumbing. Unlike debug logs, these warnings are meant for degraded side paths such as auxiliary compression or memory flushes where the main turn can continue but the user needs to know something important failed. Tr@warnz&status_callback error in _emit_warningrNrSrTs rS _emit_warningzAIAgent._emit_warnings  LLDO6W66dL C C C C    D    V V$$VW55555 V V V EPT UUUUUU V V VrVc t|dd}| g}||_|d|fdS#t$rYdSwxYw)aBuffer a retry/fallback status message. Stored as a (kind, text) tuple where ``kind`` is one of: - ``"status"`` -> replays via ``_emit_status`` - ``"vprint"`` -> replays via ``_vprint(force=True)`` - ``"warn"`` -> replays via ``_emit_warning`` Used to defer noisy retry chatter until we know whether the turn ultimately recovered or failed. _retry_status_bufferNstatusrr[appendrr{rtbufs rS_buffer_statuszAIAgent._buffer_statussj $ 6==C{,/) JJ'* + + + + +    DD 37 AAc t|dd}| g}||_|d|fdS#t$rYdSwxYw)z0Buffer a vprint(force=True) retry/fallback line.r[Nvprintr]r_s rS_buffer_vprintzAIAgent._buffer_vprint"sj $ 6==C{,/) JJ'* + + + + +    DD rbc| t|dd}|r|dSdS#t$rYdSwxYw)u=Drop buffered retry messages — call on successful recovery.r[N)rclearr)r{r`s rS_clear_status_bufferzAIAgent._clear_status_buffer-s^ $ 6==C        DD s '- ;;c| t|dd}|sdSt|}||D]n\}} |dkr||n<|dkr||n ||j|d_#t$rYkwxYwdS#t$rYdSwxYw)uEmit buffered retry messages — call on terminal failure. Surfaces the full retry/fallback trace so the user can see what was tried before the turn gave up. r[Nr\rXTr@)rlistrgrUrYrGrr)r{r`messageskindmsgs rS_flush_status_bufferzAIAgent._flush_status_buffer6s   $ 6==C CyyH IIKKK%   cx''))#....**3//// %>%>%>d KKK D      DD s;B-*B-ABB- B(%B-'B((B-- B;:B;rkcDd}d}t|tr|ng}|D]u}t|tr|ddkr1|dd}t|tr|r|dz }|t |z }vd|_||dS) u&Disable Responses encrypted reasoning replay and strip cached state. Called from the conversation_loop retry path when the provider rejects a replayed ``codex_reasoning_items`` blob with HTTP 400 ``invalid_encrypted_content``. Sets ``self._codex_reasoning_replay_enabled`` to ``False`` (consumed by ``codex_responses_adapter._chat_messages_to_responses_input`` and ``transports/codex.py`` to drop ``reasoning.encrypted_content`` from subsequent requests) and pops ``codex_reasoning_items`` from every assistant message in ``messages`` so they cannot be replayed again later in the session. Returns a small stats dict ``{"messages": int, "items": int}`` counting what was stripped — purely for diagnostic logging. rrole assistantcodex_reasoning_itemsNr\F)rkr ) isinstancerjdictrpopr`_codex_reasoning_replay_enabled)r{rkstripped_messagesstripped_itemstarget_messagesrmr s rS_disable_codex_reasoning_replayz'AIAgent._disable_codex_reasoning_replayPs$&04&@&@H((b" - -Cc4(( CGGFOO{,J,JGG3T::E%&& -5 -!Q&!#e**,/4,-GGGrUr)STREAM_DIAG_HEADERSc"ddlm}|S)u9Forwarder — see ``agent.stream_diag.stream_diag_init``.rstream_diag_init)agent.stream_diagr~r}s rS_stream_diag_initzAIAgent._stream_diag_initus% 766666!!!rUdiag http_responsec,ddlm}||||dS)uEForwarder — see ``agent.stream_diag.stream_diag_capture_response``.r)stream_diag_capture_responseN)rr)r{rrrs rS_stream_diag_capture_responsez%AIAgent._stream_diag_capture_response{s2 CBBBBB$$T4?????rUrvc$ddlm}||S)u@Forwarder — see ``agent.stream_diag.flatten_exception_chain``.r)flatten_exception_chain)rr)rvrs rS_flatten_exception_chainz AIAgent._flatten_exception_chains' >=====&&u---rUct|dddkrdSt|tsdSt|ttjfrdSt |}d|vS)aReturn True for malformed provider streaming data from SDK parsers. Some Anthropic-compatible streaming providers can send a malformed event-stream frame. The Anthropic SDK surfaces that as a plain ``ValueError`` such as ``expected ident at line 1 column 149``. That is provider wire-format trouble, not local request validation, so it should follow the same retry path as a truncated JSON body. rNanthropic_messagesFexpected ident at line) rrsr<UnicodeEncodeErrorjsonJSONDecodeErrorr^r)rj)r{rvrts rS_is_provider_stream_parse_errorz'AIAgent._is_provider_stream_parse_errors 4T * *.B B B5%,, 5 e0$2FG H H 5e**""$$**,,'722rU)rrlattempt max_attempts mid_tool_callc 6ddlm}||||||||dS)u9Forwarder — see ``agent.stream_diag.log_stream_retry``.r)log_stream_retry)rlrvrrrrN)rr)r{rlrvrrrrrs rS_log_stream_retryzAIAgent._log_stream_retrysJ 766666 t5'%]      rUc4ddlm}|||||||dS)u9Forwarder — see ``agent.stream_diag.emit_stream_drop``.r)emit_stream_drop)rvrrrrN)rr)r{rvrrrrrs rS_emit_stream_dropzAIAgent._emit_stream_dropsH 766666 w\'d      rUtaskrcL ||}n#t$rt|}YnwxYw|p |jj}t |dkr|dddz}|d|d|dS)z4Surface a compact warning for failed auxiliary work.N...u⚠ Auxiliary z failed: ) _summarize_api_errorrr^r|r}r)r`rstriprY)r{rrdetails rS_emit_auxiliary_failurezAIAgent._emit_auxiliary_failures ..s33FF   XXFFF 2CM299;; v;;  DSD\((**U2F CDCC6CCDDDDDs 44c t|ddpdt|ddpdt|ddpdt|ddpdt|ddpddS)zBReturn the live main runtime for session-scoped auxiliary routing.rrZrVrWrr)rrVrWrr)rrs rS_current_main_runtimezAIAgent._current_main_runtimeswT7B//52j"55;j"55;tY339rj"55;    rUc(ddlm}||dS)uYForwarder — see ``agent.conversation_compression.check_compression_model_feasibility``.r)#check_compression_model_feasibilityN)agent.conversation_compressionr)r{rs rS$_check_compression_model_feasibilityz,AIAgent._check_compression_model_feasibilitys+VVVVVV++D11111rUc(ddlm}||dS)uPForwarder — see ``agent.conversation_compression.replay_compression_warning``.r)replay_compression_warningN)rr)r{rs rS_replay_compression_warningz#AIAgent._replay_compression_warnings+MMMMMM""4(((((rUc|t|}n/t|ddptt|dd}|dkS)z8Return True when a base URL targets OpenAI's native API.NrrZrzapi.openai.comrKrr{rWhostnames rS_is_direct_openai_urlzAIAgent._is_direct_openai_urls[  (22HHt%92>>BS/44CCH+++rUcx|"t|}nt|ddpd}d|vS)uReturn True when a base URL targets Azure OpenAI. Azure OpenAI exposes an OpenAI-compatible endpoint at ``{resource}.openai.azure.com/openai/v1`` that accepts the standard ``openai`` Python client. Unlike api.openai.com it does NOT support the Responses API — gpt-5.x models are served on the regular ``/chat/completions`` path — so routing decisions must treat Azure separately from direct OpenAI. NrrZzopenai.azure.com)r^rjr)r{rWurls rS_is_azure_openai_urlzAIAgent._is_azure_openai_urlsE  h--%%''CC$ 1266<"C!S((rUc|t|}n/t|ddptt|dd}|dkS)zKReturn True when a base URL targets GitHub Copilot's OpenAI-compatible API.NrrZrapi.githubcopilot.comrrs rS_is_github_copilot_urlzAIAgent._is_github_copilot_urls[  (22HHt%92>>BS/44CCH222rUct|j|j}||Stt jddS)aResolve the effective per-call request timeout in seconds. Priority: 1. ``providers..models..timeout_seconds`` (per-model override) 2. ``providers..request_timeout_seconds`` (provider-wide) 3. ``HERMES_API_TIMEOUT`` env var (legacy escape hatch) 4. 1800.0s default Used by OpenAI-wire chat completions (streaming and non-streaming) so the per-provider config knob wins over the 1800s default. Without this helper, the hardcoded ``HERMES_API_TIMEOUT`` fallback would always be passed as a per-call ``timeout=`` kwarg, overriding the client-level timeout the AIAgent.__init__ path configured. NHERMES_API_TIMEOUTg @)rrVrfloatrgetenv)r{cfgs rS_resolved_api_call_timeoutz"AIAgent._resolved_api_call_timeouts<+4=$*EE ?JRY3V<<===rUct|j|j}||dfStjd}|t |dfSdS)auResolve the base non-stream stale timeout and whether it is implicit. Priority: 1. ``providers..models..stale_timeout_seconds`` 2. ``providers..stale_timeout_seconds`` 3. ``HERMES_API_CALL_STALE_TIMEOUT`` env var 4. 90.0s default (time-to-first-byte for non-streaming / Codex internal-streaming requests; lowered from 300s in May 2026 so fallback providers kick in faster when upstream providers stall). The detector still scales up for large contexts in ``_compute_non_stream_stale_timeout``. Returns ``(timeout_seconds, uses_implicit_default)`` so the caller can preserve legacy behaviors that only apply when the user has *not* explicitly configured a stale timeout, such as auto-disabling the detector for local endpoints. NFHERMES_API_CALL_STALE_TIMEOUT)gV@T)rrVrrrr)r{r env_timeouts rS%_resolved_api_call_stale_timeout_basez-AIAgent._resolved_api_call_stale_timeout_basesT$) CC ?: i ?@@  "%%u, ,zrU api_payloadc&|\}}t|ddp|jpd}|r |rt|rt dSddlm}||}|dkrt|dS|d krt|d S|S) a^Compute the effective non-stream stale timeout for this request. Accepts either the full ``api_kwargs`` dict (Chat Completions or Responses API) or a legacy ``messages`` list. Context-size scaling applies the same way to both shapes via :func:`agent.chat_completion_helpers.estimate_request_context_tokens`. rNrZinfr)estimate_request_context_tokensign@iPgb@)rrrWrragent.chat_completion_helpersrr,)r{r stale_baseuses_implicit_defaultrWr est_tokenss rS!_compute_non_stream_stale_timeoutz)AIAgent._compute_non_stream_stale_timeout.s-1,V,V,X,X) )4d33Jt}J  X 2CH2M2M << QQQQQQ44[AA   z5)) )   z5)) )rUc |jdkrdS|jdkp)t|dddkodt|ddpdv}|sdS||n|jpd}|}t jd |sdSd |d S) uzReturn an actionable hint when this request matches a known Codex silent-reject configuration, else ``None``. The ChatGPT Codex backend (``chatgpt.com/backend-api/codex``) has historically silently dropped certain model requests: the connection is accepted but no stream events are emitted and no error is raised. The stale-call detector ends the hang, but a generic "timed out" message gives the user no path forward. This helper substitutes an actionable hint into the stale-timeout warning when the request matches a known silent-reject pattern. Currently flagged: ``gpt-5.5`` family on the Codex backend. See hermes-agent #21444 for the symptom history. The upstream backend behavior has historically come and gone with ChatGPT entitlement changes — the heuristic stays in place as future-proofing even when the symptom is dormant. Does NOT fix the backend issue. Only converts an opaque stale-timeout into actionable text so users learn the workaround in seconds rather than digging through logs. codex_responsesN openai-codexrrZ chatgpt.comz/backend-api/codexrz(?:^|[/\-_])gpt-5\.5(?:$|[\-_])z/Codex backend appears to be silently rejecting a on chatgpt.com/backend-api/codex (no stream events, no error). This is a known backend-side pattern that has affected ChatGPT Plus accounts intermittently. Workaround: try `gpt-5.4` on the same OAuth profile, or `gpt-5.3-codex`, or switch to a different model/provider in your fallback chain. Some ChatGPT Codex accounts do not support `gpt-5.4-codex`. See hermes-agent#21444 for symptom history.)rrVrrrjresearch)r{ris_codex_backend eff_model model_lowers rS_codex_silent_hang_hintzAIAgent._codex_silent_hang_hintCs, =- - -4 M^ + 2B77=HY(WT;Lb-Q-Q-WUWX   4#/UUTZFB oo'' y;[II 4 :i : : : rUc,t|jdS)z1Return True when the base URL targets OpenRouter. openrouter.airJrrs rS_is_openrouter_urlzAIAgent._is_openrouter_urlws$T%9?KKKrUrVrWrrc.ddlm}||||||S)uPForwarder — see ``agent.agent_runtime_helpers.anthropic_prompt_cache_policy``.r)anthropic_prompt_cache_policyr)r5r)r{rVrWrrrs rS_anthropic_prompt_cache_policyz&AIAgent._anthropic_prompt_cache_policy{s5 NMMMMM,,THxbjrwxxxxrUc|}d|vr|ddd}|dS)a>Return True for models that require the Responses API path. GPT-5.x models are rejected on /v1/chat/completions by both OpenAI and OpenRouter (error: ``unsupported_api_for_model``). Detect these so the correct api_mode is set regardless of which provider is serving the model. /r\zgpt-5)rjrsplitr_)rms rS_model_requires_responses_apiz%AIAgent._model_requires_responses_apisD KKMM !88a  $A||G$$$rUrVc|pd}|dkrdS|dkr" ddlm}||S#t$rYnwxYwt |S)zCReturn True when this provider/model pair should use Responses API.rZnousFcopilotr)!_should_use_copilot_responses_api)r)rjr+rrrr)rrVnormalized_providerrs rS&_provider_model_requires_responses_apiz.AIAgent._provider_model_requires_responses_apis (~24466<<>> & ( (5 ) + + OOOOOO88???    44U;;;sA AAc|s(|s|rd|iSd|iS)avReturn the correct max tokens kwarg for the current provider. OpenAI's newer models (gpt-4o, o-series, gpt-5+) require 'max_completion_tokens'. Azure OpenAI also requires 'max_completion_tokens' for gpt-5.x models served via the OpenAI-compatible endpoint. OpenRouter, local models, and older OpenAI models use 'max_tokens'. max_completion_tokensr)rrrrs rS_max_tokens_paramzAIAgent._max_tokens_paramsT  % % ' ' 44+D+D+F+F 4$JeJeJgJg 4+U3 3e$$rUcontentcv|sdS||}t|S)a Check if content has actual text after any reasoning/thinking blocks. This detects cases where the model only outputs reasoning but no actual response, which indicates an incomplete generation that should be retried. Must stay in sync with _strip_think_blocks() tag variants. Args: content: The assistant message content to check Returns: True if there's meaningful content after think blocks, False otherwise F)_strip_think_blocksr r))r{rcleaneds rS_has_content_after_think_blockz&AIAgent._has_content_after_think_blocks> 5**733GMMOO$$$rUc&ddlm}|||S)uEForwarder — see ``agent.agent_runtime_helpers.strip_think_blocks``.r)strip_think_blocks)r5r)r{rrs rSrzAIAgent._strip_think_blockss'BBBBBB!!$000rUc|sdS|}|sdS|drdS|drdS|d}|dvrdSt|dkrdSdS)zCHeuristic: does visible assistant text look intentionally finished?Fz```T^ru%.!?:)"']}。！？：）】」』》^i)rendswithord)rstrippedlasts rS_has_natural_response_endingz$AIAgent._has_natural_response_endings 5>>## 5   U # # 4   S ! ! 4| ; ; ;4 t99  4urUc|jpd}|jpd}d|vr|dkrdSd|jvs d|jvrdSt |jot |jS)zHDetect the narrow backend family affected by Ollama/GLM stop misreports.rZglmzaiFollamaz:11434T)rrjrVrr rWr)r{rprovider_lowers rS_is_ollama_glm_backendzAIAgent._is_ollama_glm_backendsz'R..00 --24466  # #%(?(?5 t+ + +x4;O/O/O4DMF&7 &F&FGGGrU finish_reasonc|dks |jdkrdS|sdStd|pgDsdS|t|ddrdSt|dd}t |t sdS||}|sdSt|dkstj d |sdS| | S) zIDetect conservative stop->length misreports for Ollama-hosted GLM models.stopchat_completionsFc3rK|]2}t|to|ddkV3dS)rptoolN)rsrtr)rrms rS z:AIAgent._should_treat_stop_as_truncated..sT   sD ! ! ?cggfoo&?      rUN tool_callsrrz\s) rranyrrsr^rr)r`rrr)r{rassistant_messagerkr visible_texts rS_should_treat_stop_as_truncatedz'AIAgent._should_treat_stop_as_truncateds& F " "dm7I&I&I5**,, 5   B      5  $0A>@@  5 |  r ! !5,)G)G !544\BBBBrU user_messageassistant_contentc*ddlm}|||||S)uTForwarder — see ``agent.agent_runtime_helpers.looks_like_codex_intermediate_ack``.r)!looks_like_codex_intermediate_ack)r5r)r{r r rkrs rS"_looks_like_codex_intermediate_ackz*AIAgent._looks_like_codex_intermediate_acks0 RQQQQQ00|EVX`aaarUc&ddlm}|||S)uDForwarder — see ``agent.agent_runtime_helpers.extract_reasoning``.r)extract_reasoning)r5r)r{rrs rS_extract_reasoningzAIAgent._extract_reasonings(AAAAAA  '8999rUtask_idc&ddlm}|||S)uKForwarder — see ``agent.chat_completion_helpers.cleanup_task_resources``.r)cleanup_task_resources)rr)r{rrs rS_cleanup_task_resourceszAIAgent._cleanup_task_resources!s'HHHHHH%%dG444rU)_MEMORY_REVIEW_PROMPT_SKILL_REVIEW_PROMPT_COMBINED_REVIEW_PROMPTreview_messagesprior_snapshotc&ddlm}|||S)uRForwarder — see ``agent.background_review.summarize_background_review_actions``.r)#summarize_background_review_actions)agent.background_reviewr)rrrs rS$_summarize_background_review_actionsz,AIAgent._summarize_background_review_actions/s* POOOOO22?NSSSrUmessages_snapshot review_memory review_skillscddlm}|||||\}}tj|dd}|dS)u^Spawn the background memory/skill review thread. Thin wrapper — the heavy lifting lives in ``agent.background_review.spawn_background_review_thread`` which returns the thread target. ``threading.Thread`` is constructed here so existing tests that patch ``run_agent.threading.Thread`` keep working. r)spawn_background_review_thread)r!r"Tz bg-review)targetdaemonnameN)rr$ threadingThreadstart)r{r r!r"r$r%_promptts rS_spawn_background_reviewz AIAgent._spawn_background_review8sh KJJJJJ88  ''      F4k J J J  rU write_originexecution_contextr tool_call_idr/r0r1c.ddlm}||||||S)uJForwarder — see ``agent.background_review.build_memory_write_metadata``.r)build_memory_write_metadatar.)rr3)r{r/r0rr1r3s rS_build_memory_write_metadataz$AIAgent._build_memory_write_metadataPs@ HGGGGG** %/%     rUct|dd}t|dd}||dSd|cxkrt|krAndS||}t|tr"|ddkr ||d<dSdSdSdS)aRewrite the current-turn user message before persistence/return. Some call paths need an API-only user-message variant without letting that synthetic text leak into persisted transcripts or resumed session history. When an override is configured for the active turn, mutate the in-memory messages list in place so both persistence and returned history stay clean. _persist_user_message_idxN_persist_user_message_overriderrpuserr)rr`rsrtr)r{rkidxoverriderms rS$_apply_persist_user_message_overridez,AIAgent._apply_persist_user_message_overridebsd7>>4!A4HH  s{ F  # # # #c(mm # # # # # #3-C#t$$ *F)B)B!)I $ # * *)B)BrUconversation_historyc||||||_|||||dS)zSave session state to both JSON log and SQLite on any exit path. Ensures conversations are never lost, even on errors or early returns. N))_drop_trailing_empty_response_scaffoldingr;_session_messages_save_session_log_flush_messages_to_session_db)r{rkr<s rS_persist_sessionzAIAgent._persist_sessiontse 66x@@@ 11(;;;!) x((( **85IJJJJJrUcd}|rt|dtr|dds|ddri|d}|rQt|dtr6|ddN|ddi|sdS|rt|dtro|dddkrP||r:t|dtr|dddkP|rkt|dtrR|ddd kr5|dd r|dSdSdSdSdS) uRemove private empty-response retry/failure scaffolding from transcript tails. Also rewinds past any trailing tool-result / assistant(tool_calls) pair that the failed iteration left hanging. Without this, the tail ends at a raw ``tool`` message and the next user turn lands as ``...tool, user, user`` — a protocol-invalid sequence that most providers silently reject (returns empty content), causing the empty-retry loop to fire forever. See #. Fr_empty_recovery_synthetic_empty_terminal_sentinelTNrprrqr)rsrtrru)r{rkdropped_scaffoldings rSr>z1AIAgent._drop_trailing_empty_response_scaffoldings$  '8B<.. '   !<== ' B<##$>?? ' LLNNN"&   '8B<.. '   !<== ' B<##$>?? '"#  F  8B<..    ((F22 LLNNN  8B<..    ((F22  8B<..    ((K77   ..8 LLNNNNN     8777rUc&ddlm}|||S)uJForwarder — see ``agent.agent_runtime_helpers.repair_message_sequence``.r)repair_message_sequence)r5rH)r{rkrHs rS_repair_message_sequencez AIAgent._repair_message_sequences'GGGGGG&&tX666rUc|jsdS|| |js||rt |nd}t ||j}||dD]}|dd}|d}t|rt|}nt|trg}|D]} t| trP| ddkr7| t| ddgt| tr,| dd vr| d |rd |nd}d} t!|d r3t|jtr|jrd |jD} n0t|d tr|d } |j|j|||d| |d|d|dkr|dnd|dkr|dnd|dkr|dnd|dkr|dnd|dkr|dnd t ||_dS#t($r&} t*d| Yd} ~ dSd} ~ wwxYw)u%Persist any un-flushed messages to the SQLite session store. Uses _last_flushed_db_idx to track which messages have already been written, so repeated calls (from multiple exit paths) only write truly new messages — preventing the duplicate-write bug (#860). NrrprrrwtextrZ>image image_url input_imagez [screenshot] rc@g|]}|jj|jjdS))r' arguments)functionr'rQrtcs rS z9AIAgent._flush_messages_to_session_db..s:'''"$!1 @UVV'''rU tool_namer1rrq reasoningreasoning_contentreasoning_detailsrrcodex_message_items) rrprrVrr1rrWrXrYrrrZz$Session DB append_message failed: %s)rr;rrr`r,_last_flushed_db_idxrrCrDrsrjrtr^r^joinrrappend_messagerrrr) r{rkr< start_idx flush_fromrmrpr_txtptool_calls_datars rSrAz%AIAgent._flush_messages_to_session_dbs~  F 11(;;;/ F+ *'')))5IP0111qIY(ABBJ ,& & wwvy11''),,.g66 @6w??GG..@D$88%a..8155==F3J3J KKAEE&",=,=(>(>????'4008QUU6]]Fk5k5k KK77715?diiooo4G"&3 --8*S^T2R2R8WZWe8''"%.'''OO  5 5t<<8&),&7O //##!ggk22.!$!8!8"%''/":":6:k6I6Icggk222tFJkFYFYcgg.A&B&B&B_cFJkFYFYcgg.A&B&B&B_cNRVaNaNa#''2I*J*J*JgkJNR]J]J]0E(F(F(Fcg0    ),H D % % % F F F NNA1 E E E E E E E E E FsK+L L=L88L=c|sgSd}tt|dz ddD]%}||ddkr|}n&||S|d|S)a Get messages up to (but not including) the last assistant turn. This is used when we need to "roll back" to the last successful point in the conversation, typically when the final assistant message is incomplete or malformed. Args: messages: Full message list Returns: Messages up to the last complete assistant turn (ending with user/tool message) Nr\rrprq)ranger`rcopy)r{rklast_assistant_idxis rS"_get_messages_up_to_last_assistantz*AIAgent._get_messages_up_to_last_assistants I"s8}}q("b11  A{v&&+55%&"6  %==?? "+++,,rUc$ddlm}||S)uJForwarder — see ``agent.system_prompt.format_tools_for_system_message``.r)format_tools_for_system_message)agent.system_promptrj)r{rjs rS _format_tools_for_system_messagez(AIAgent._format_tools_for_system_messages%GGGGGG..t444rU user_query completedc*ddlm}|||||S)uOForwarder — see ``agent.agent_runtime_helpers.convert_to_trajectory_format``.r)convert_to_trajectory_format)r5rp)r{rkrmrnrps rS_convert_to_trajectory_formatz%AIAgent._convert_to_trajectory_formats+LLLLLL++D(J RRRrUcr|jsdS||||}t||j|dS)a Save conversation trajectory to JSONL file. Args: messages (List[Dict]): Complete message history user_query (str): Original user query completed (bool): Whether the conversation completed successfully N)rrq_save_trajectory_to_filer)r{rkrmrn trajectorys rS_save_trajectoryzAIAgent._save_trajectorysE%  F77*iXX  TZCCCCCrU error_contextrsc|dvrdSt|tsdSt|dpd}t|dpd}t|dpd}t|dpd}|d|d|d|}|sdSd |vrdSd |vrdSd |vrd Sd |vrd|vrd Sd|vrd|vrd SdS)uMDetect subscription/entitlement 403s that masquerade as auth failures. Returned True only when the body text matches a known entitlement shape AND the status is 401/403. Refreshing an OAuth token cannot fix an unsubscribed account, so callers should surface the error instead of looping the credential pool. Current matches: * xAI OAuth: "do not have an active Grok subscription" / "out of available resources" / "does not have permission" + "grok" Disambiguator for xAI (#29344): the same ``code`` text ("The caller does not have permission to execute the specified operation") is returned for BOTH an unsubscribed account AND a stale OAuth access token. xAI ships an explicit signal in the ``error`` field that tells the two apart: a ``[WKE=unauthenticated:...]`` suffix (and/or the ``OAuth2 access token could not be validated`` phrasing) means the credentials failed validation — that's recoverable by refreshing the token, NOT by surfacing an entitlement message. When either signal is present we return False eagerly so the credential-pool refresh path runs, letting long-running TUI sessions recover from stale tokens without an exit/reopen cycle. Extend here for new providers as we discover them (Anthropic's Claude Max OAuth entitlement errors look distinct enough today that the existing 1M-context-beta branch handles them; revisit if other subscription tiers start producing the same loop signature). >NFrtrZreasonrqrv z[wke=unauthenticated:z*oauth2 access token could not be validatedz'do not have an active grok subscriptionTzout of available resourcesgrokzdoes not have permission)rsrtr^rrjr))rvrsrtrzrqr1haystacks rS_is_entitlement_failurezAIAgent._is_entitlement_failure,sB . . .5-.. 5 m'' 228b99??AA]&&x006B77==??=$$V,,23399;;-##G,,23399;;55555555~~ 5 #h . .5 78 C C5 4 @ @4 '8 3 3(8J8J4 % 1 1f6H6H4urUcXt|}t|tr#d|vr d|ddSd|vsd|vrt jd|tj}|r'|dnd }t jd |}|r'|dnd}t|d d}g}|r| d || ||r| d |d |St|dd}t|trt| dtr)| di dn| d} | r)t|d d}|rd |dnd} | | ddSt|d d}|rd |dnd} | |ddS)zExtract a human-readable one-liner from an API error. Handles Cloudflare HTML error pages (502, 503, etc.) by pulling the tag instead of dumping raw HTML. Falls back to a truncated str(error) for everything else. r��z'Malformed provider streaming response: Ni,��z <!DOCTYPE<htmlz<title[^>]*>([^<]+)r\z!HTML error page (title not found)z2Cloudflare Ray ID:\s*]*>([^<]+)rszHTTP zRay u — rzrvrt: rZr)r^rsr<rjrr IGNORECASEgroupr)rr^r\rtr) rvrawrtitlerayray_idrspartsrzrmprefixs rSrzAIAgent._summarize_api_errorps^%jj uj ) ) I(CIIKK77HS#YHH H #  C 8#r}MMA*+TAGGAJJ$$&&&1TE)QSVWWC-0:SYYq\\'')))dF!%==KE 4 2[22333 LL    . _F__---<<&& &ufd++ dD ! ! .:DTXXgEVEVX\:]:]v$((7B''++I666cgckcklucvcvC .%e]DAA 4?G00000R -#dsd)---e]D99 ,7?(((((R%#dsd)%%%rUkeyct|rt|tsdS|sdSt|dkrdS|ddd|ddS)Nz z***rLr)callablersr^r`)r{rs rS_mask_api_key_for_logszAIAgent._mask_api_key_for_logssn C== 'C!5!5 '&& 4 s88r>>5bqb'((c"##h(((rU error_msgc|sdS|dsd|vrdSd|}t |dkr |dddz}|S) a Clean up error messages for user display, removing HTML content and truncating. Args: error_msg: Raw error message from API or exception Returns: Clean, user-friendly error message z Unknown errorz)z\n\1z ()\n+z\1\n)r=rsubr))rs rS_clean_session_contentzAIAgent._clean_session_contentsS N-g66&'7;;&)7G<<}}rUc||St|trt|St|trg}|D]}t|trt |}t|dtrt|d|d<t|dtrt|d|d<|||S|S)uDApply secret redaction to message content (str or list-of-parts). Handles both plain-string content and the OpenAI/Anthropic multimodal shape where ``content`` is a list of ``{"type": "text", "text": ...}`` / ``{"type": "image_url", ...}`` / ``{"type": "input_text", "content": ...}`` parts. Image / binary parts are left untouched; only text fields are passed through ``redact_sensitive_text``. Respects ``HERMES_REDACT_SECRETS`` via ``redact_sensitive_text`` — when disabled the helper is effectively a no-op. NrKr)rsr^rrjrtrr^)rredactedparts rS_redact_message_contentzAIAgent._redact_message_contents ?N gs # # 2(11 1 gt $ $ H & &dD))Q::D!$((6"2"2C88K'>&A4HH  M$= . .#H~~  . . . . . . . . . . . . . . .%  "4//// D ' 8 8 !677M 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8" T TE T(((( T T T OQRSSSSSSSS T V -W2TY\]dYeYehjYjYj1Iwss|1I1I1I1IELqTqAv}qAqAqAqARTU V V V V V V VsN"A>>BBB B,+B,6CCC'C== D,D''D,cd|_d|_d|_|jt d|jt |dd}t |dd}|Q|O|5t |}dddn #1swxYwY|D]#} t d|#t$rY wxYwt |dd}|$|5d|_ddddS#1swxYwYdSdS)zMClear any pending interrupt request and the per-thread tool interrupt signal.FNrr_pending_steer_lock) rrrrrrrjr_pending_steer)r{rrrr _steer_locks rSclear_interruptzAIAgent.clear_interrupts$)!"&05-  $ 0 5$"; < < <4!7>>&A4HH  M$= . .#H~~  . . . . . . . . . . . . . . .%  "5%0000 D d$94@@  " + +&*# + + + + + + + + + + + + + + + + + + # "s6A66A:=A:B B$#B$<CCCrKcB|r|sdS|}t|dd}|$t|dd}|r|dz|zn||_dS|5|jr|jdz|z|_n||_dddn #1swxYwYdS)a Inject a user message into the next tool result without interrupting. Unlike interrupt(), this does NOT stop the current tool call. The text is stashed and the agent loop appends it to the LAST tool result's content once the current tool batch finishes. The model sees the steer as part of the tool output on its next iteration. Thread-safe: callable from gateway/CLI/TUI threads. Multiple calls before the drain point concatenate with newlines. Args: text: The user text to inject. Empty strings are ignored. Returns: True if the steer was accepted, False if the text was empty. FrNrrOT)r)rr)r{rKr_lockrs rSsteerz AIAgent.steers$ 4::<< 5**,,3T:: =t%5t<0noofffalse load_configdisplayfile_mutation_verifierT) rrrr)rjhermes_cli.configrrrsrtr )r{_osenv _load_config_cfg_displays rS_file_mutation_verifier_enabledz'AIAgent._file_mutation_verifier_enabled"s     +//"ABBCyy{{((**2MMM IIIIII#|~~+    .8t.D.DNtxx ***$H(D)) D.F(.R.RHLL)ABBCCC    D ts7AC AC A-*C,A--A)C C%$C%failedc  |sdSdt|dg}d}|D]\}}|dkrn|dpd}|dpd}|r|d |d |d |n|d |d |d |d z }t||z }|dkr|d|dd|S)a Render the per-turn failed-mutation dict as a user-facing footer. Displays up to 10 paths with their first error preview, then a count of any additional failures. Returns an empty string when the dict is empty so callers can concatenate unconditionally. rZu⚠️ File-mutation verifier: z file(s) were NOT modified this turn despite any wording above that may suggest otherwise. Run `git status` or `read_file` to confirm.rrrrpatch • u — [z] z] failedr\u • … and z morerO)r`r rr)r^r\)rlinesshownrinforr remainings rS$_format_file_mutation_failure_footerz,AIAgent._format_file_mutation_failure_footer=sN 2 &6{{ & & &   ,,..  JD${{xx006B==??G88F##.wD B CdCC$CC'CCDDDD @d@@$@@@AAA QJEEKK%' q== LL:)::: ; ; ;yyrU num_tool_msgsc(ddlm}||||S)uVForwarder — see ``agent.agent_runtime_helpers.apply_pending_steer_to_tool_results``.r)#apply_pending_steer_to_tool_results)r5r )r{rkr r s rS$_apply_pending_steer_to_tool_resultsz,AIAgent._apply_pending_steer_to_tool_results]s)SSSSSS224=QQQrUdescctj|_||_tjdr$ ddlm}|dS#t$rYdSwxYwdS)uUpdate the last-activity timestamp and description (thread-safe). Also bridges to the kanban board's heartbeat fields when this process is a dispatcher-spawned worker (HERMES_KANBAN_TASK set), so the dispatcher watchdog doesn't reclaim an actively-running worker as stale (#31752). Bridge is rate-limited (60s) and best-effort — it never raises into the agent loop. HERMES_KANBAN_TASKr)!heartbeat_current_worker_from_envN) time_last_activity_ts_last_activity_descrrrtools.kanban_toolsrr)r{rrs rS_touch_activityzAIAgent._touch_activitybs"&#' :>>. / /  PPPPPP1133333        sA A A c|dSt|dd}|sdS ddlm}|||j}| ||_dSdS#t $rYdSwxYw)zParse x-ratelimit-* headers from an HTTP response and cache the state. Called after each streaming API call. The httpx Response object is available on the OpenAI SDK Stream via ``stream.response``. Nheadersr)parse_rate_limit_headersr)ragent.rate_limit_trackerrrV_rate_limit_stater)r{rrrrs rS_capture_rate_limitszAIAgent._capture_rate_limitsxs  F-D99  F  I I I I I I,,Wt}MMME ).&&&!     DD s!A A Ac|jS)z1Return the last captured RateLimitState, or None.)rrs rSget_rate_limit_statezAIAgent.get_rate_limit_states %%rUc||dSt|dd}|sdS |d}|sdS|dkr2|xjdz c_td|jdStd|dS#t$rYdSwxYw)zRead X-OpenRouter-Cache-Status from response headers and log it. Increments ``_or_cache_hits`` on HIT so callers can report savings. Nrzx-openrouter-cache-statusHITr\z)OpenRouter response cache HIT (total: %d)zOpenRouter response cache %s)rrupper_or_cache_hitsrrrr)r{rrr\s rS_check_openrouter_cache_statusz&AIAgent._check_openrouter_cache_statuss  F-D99  F [[!<==F ||~~&&##q(## GI\]]]]] ;V\\^^LLLLL    DD sB-AB->-B-- B;:B;c tj|jz }|j|jt|d|j|j|j|jj|jj dS)zReturn a snapshot of the agent's current activity for diagnostics. Called by the gateway timeout handler to report what the agent was doing when it was killed, and by the periodic "still working" notifications. r\)last_activity_tslast_activity_descseconds_since_activity current_toolapi_call_countr budget_used budget_max) rrrround _current_tool_api_call_countrrused max_total)r{elapseds rSget_activity_summaryzAIAgent.get_activity_summarysc )++ 66 $ 6"&":&+GQ&7&7 ."2"105/9   rUch|jrY |j|pgn#t$rYnwxYw |jn#t$rYnwxYwt |dr?|jr: |j|jpd|pgdS#t$rYdSwxYwdSdS)uCShut down the memory provider and context engine — call at actual session boundaries. This calls on_session_end() then shutdown_all() on the memory manager, and on_session_end() on the context engine. NOT called per-turn — only at CLI exit, /reset, gateway session expiry, etc. rrZN)_memory_managerrr shutdown_allrrrr{rks rSshutdown_memory_providerz AIAgent.shutdown_memory_providers!    $33HNCCCC     $113333     4- . . 43J  '66O)rN         s/& 33A AA9$B B-,B-c|jr. |j|pgn#t$rYnwxYwt|dr?|jr: |j|jpd|pgdS#t$rYdSwxYwdSdS)uTrigger end-of-session extraction without tearing providers down. Called when session_id rotates (e.g. /new, context compression); providers keep their state and continue running under the old session_id — they just flush pending extraction now.rrZN)r4rrrrrr6s rScommit_memory_sessionzAIAgent.commit_memory_sessions    $33HNCCCC     4- . . 43J  '66O)rN         s& 33$A44 BB)rkoriginal_user_messagefinal_response interruptedc|rdS|jr|r|sdS d|jpdi}|||d<|jj||fi||j||jpddS#t$rYdSwxYw)usMirror a completed turn into external memory providers. Called at the end of ``run_conversation`` with the cleaned user message (``original_user_message``) and the finalised assistant response. The external memory backend gets both ``sync_all`` (to persist the exchange) and ``queue_prefetch_all`` (to start warming context for the next turn) in one shot. Uses ``original_user_message`` rather than ``user_message`` because the latter may carry injected skill content that bloats or breaks provider queries. Interrupted turns are skipped entirely (#15218). A partial assistant output, an aborted tool chain, or a mid-stream reset is not durable conversational truth — mirroring it into an external memory backend pollutes future recall with state the user never saw completed. The prefetch is gated on the same flag: the user's next message is almost certainly a retry of the same intent, and a prefetch keyed on the interrupted turn would fire against stale context. Normal completed turns still sync as before. The whole body is wrapped in ``try/except Exception`` because external memory providers are strictly best-effort — a misconfigured or offline backend must not block the user from seeing their response. NrrZrk)r)r4rsync_allqueue_prefetch_allr)r{r:r;r<rk sync_kwargss rS_sync_external_memory_for_turnz&AIAgent._sync_external_memory_for_turnsD   F$  B?K#*2 J' )D )%       3 3%?0b 4         DD sA A A,+A,c |j5t|j}|jdddn #1swxYwY|D]M} |#t $r) |n#t $rYnwxYwYJwxYwn#t $rYnwxYw t|dd}|!||ddd|_ dSdS#t $rYdSwxYw)uRelease LLM client resources WITHOUT tearing down session tool state. Used by the gateway when evicting this agent from _agent_cache for memory-management reasons (LRU cap or idle TTL) — the session may resume at any time with a freshly-built AIAgent that reuses the same task_id / session_id, so we must NOT kill: - process_registry entries for task_id (user's bg shells) - terminal sandbox for task_id (cwd, env, shell state) - browser daemon for task_id (open tabs, cookies) - memory provider (has its own lifecycle; keeps running) We DO close: - OpenAI/httpx client pool (big chunk of held memory + sockets; the rebuilt agent gets a fresh client anyway) - Active child subagents (per-turn artefacts; safe to drop) Safe to call multiple times. Distinct from close() — which is the hard teardown for actual session boundaries (/new, /reset, session expiry). Nclient cache_evictTrzshared) rrjrrgrelease_clientsrcloser_close_openai_clientrC)r{childrenrrCs rSrGzAIAgent.release_clients! s, + . . 566%++--- . . . . . . . . . . . . . . ."  ))++++  $      D  T8T22F!))&t)TTT" "!    DD sB.A BAB A BA('B( B3BB BBBBBBB B,+B,02C&& C43C4ct|ddpd} ddlm}||n#t$rYnwxYw t |n#t$rYnwxYw t |n#t$rYnwxYw |j5t|j }|j dddn #1swxYwY|D]'} | #t$rY$wxYwn#t$rYnwxYw t|dd}|!| |dd d|_ dSdS#t$rYdSwxYw) aRelease all resources held by this agent instance. Cleans up subprocess resources that would otherwise become orphans: - Background processes tracked in ProcessRegistry - Terminal sandbox environments - Browser daemon sessions - Active child agents (subagent delegation) - OpenAI/httpx client connections Safe to call multiple times (idempotent). Each cleanup step is independently guarded so a failure in one does not prevent the rest. rNrZr)process_registry)rrC agent_closeTrE)rtools.process_registryrLkill_allrrrrrjrrgrHrIrC)r{rrLrJrrCs rSrHz AIAgent.closeP s9$ d339r  ? ? ? ? ? ?  % %g % 6 6 6 6    D   w        D   G $ $ $ $    D  + . . 566%++--- . . . . . . . . . . . . . . ."  KKMMMM D      D  T8T22F!))&t)TTT" "!    DD s2 ??A A A $A44 BBC< .C: C<C  C< C C<C+*C<+ C85C<7C88C<< D D  2E EEhistorycd}t|D]}|ddkr|dd}d|vr7 tj|}d|vr%t |dt r |d}nv#tjtf$rYwxYw|rP|j |d |j s-| |j d t|d tddS) a Recover todo state from conversation history. The gateway creates a fresh AIAgent per message, so the in-memory TodoStore is empty. We scan the history for the most recent todo tool response and replay it to reconstruct the state. NrprrrZz"todos"todosF)mergeu📋 Restored z todo item(s) from history)reversedrrrrsrjr TypeError _todo_storewriterrGrr`r)r{rPlast_todo_responsermrdatas rS_hydrate_todo_storezAIAgent._hydrate_todo_store s6"G$$  Cwwv&((ggi,,G'' z'**d??z$w-'F'F?)-g&E()4      t   " "#5U " C C C? t rrsCU?V?Vrrrsssus ;BB! B!c|jS)z)Check if an interrupt has been requested.)rrs rSis_interruptedzAIAgent.is_interrupted s ((rUsystem_messagec(ddlm}|||S)uDForwarder — see ``agent.system_prompt.build_system_prompt_parts``.r)build_system_prompt_partsr])rkr_)r{r]r_s rS_build_system_prompt_partsz"AIAgent._build_system_prompt_parts s*AAAAAA((nMMMMrUc(ddlm}|||S)u>Forwarder — see ``agent.system_prompt.build_system_prompt``.r)build_system_promptr`)rkrc)r{r]rcs rS_build_system_promptzAIAgent._build_system_prompt s*;;;;;;""4GGGGrUct|tr.|ddp|ddpdSt|ddpt|ddpdS)z8Extract call ID from a tool_call entry (dict or object).call_idrZidrsrtrr)rTs rS_get_tool_call_id_staticz AIAgent._get_tool_call_id_static sk b$   C66)R((BBFF4,<,<B Br9b))HWRr-B-BHbHrUct|trD|d}t|tr|ddpdSdSt|dd}t|ddpdS)abExtract function name from a tool_call entry (dict or object). Gemini's OpenAI-compatibility endpoint requires every `role: tool` message to carry the matching function name. OpenAI/Anthropic/ollama tolerate its absence, so the field is best-effort: callers fall back to "" and the message still works elsewhere. rRr'rZNrh)rTr>s rS_get_tool_call_name_staticz"AIAgent._get_tool_call_name_static s b$    ##B"d## 0vvfb))/R/2 RT * *r62&&,",rU>rr8rirRrq developerc$ddlm}||S)uHForwarder — see ``agent.agent_runtime_helpers.sanitize_api_messages``.r)sanitize_api_messages)r5rn)rkrns rS_sanitize_api_messageszAIAgent._sanitize_api_messages s( FEEEEE$$X...rUrmcft|tr|ddkrdS|drdS|d}t|tr|rdSnt|t r|D]}t|ts|rdS|d}|dvr7|dkrC|dd }t|tr|rdSdSn ||d krdS|d p|d }t|tr|rd S|d}t|t r|rd SdS)umReturn True if ``msg`` is an assistant turn whose only payload is reasoning. "Thinking-only" means the model emitted reasoning (``reasoning`` or ``reasoning_content``) but no visible text and no tool_calls. When sent back to providers that convert reasoning into thinking blocks (native Anthropic, OpenRouter Anthropic, third-party Anthropic-compatible gateways), the resulting message has only thinking blocks — which Anthropic rejects with HTTP 400 "The final block in an assistant message cannot be `thinking`." Symmetric with Claude Code's ``filterOrphanedThinkingOnlyMessages`` (src/utils/messages.ts). We drop the whole turn from the API copy rather than fabricating stub text — the message log (UI transcript) keeps the reasoning block; only the wire copy is cleaned. rprqFrrrw>thinkingredacted_thinkingrKrZNrXrWTrY)rsrtrr^r)rj)rmrblockbtyperKrWrds rS_is_thinking_only_assistantz#AIAgent._is_thinking_only_assistant s"#t$$ ;(F(F5 77<  5'')$$ gs # # }} u   & &    !%..%$uu &))===F?? 99VR00D!$,,%%$uuuu  W]]5GG/00HCGGK4H4H i % % )//*;*; 4 WW( ) ) b$   B 4urUc$ddlm}||S)uUForwarder — see ``agent.agent_runtime_helpers.drop_thinking_only_and_merge_users``.r)"drop_thinking_only_and_merge_users)r5rx)rkrxs rS#_drop_thinking_only_and_merge_usersz+AIAgent._drop_thinking_only_and_merge_users s( SRRRRR11(;;;rUrcDddlm}|}td|D}||kr|Sd}g}|D]H}|jjdkr!||kr|||dz }3||It d||z ||S)ajTruncate excess delegate_task calls to max_concurrent_children. The delegate_tool caps the task list inside a single call, but the model can emit multiple separate delegate_task tool_calls in one turn. This truncates the excess, preserving all non-delegate calls. Returns the original list if no truncation was needed. r)_get_max_concurrent_childrenc3:K|]}|jjdkdVdS) delegate_taskr\N)rRr'rSs rSrz3AIAgent._cap_delegate_task_calls..* s1[[2r{7G?7Z7ZQ7Z7Z7Z7Z[[rUr}r\zUTruncated %d excess delegate_task call(s) to enforce max_concurrent_children=%d limit)tools.delegate_toolr{sumrRr'r^rr)rr{ max_childrendelegate_countkept_delegates truncatedrTs rS_cap_delegate_task_callsz AIAgent._cap_delegate_task_calls s EDDDDD3355 [[[[[[[ \ ) )   % %B{?22!L00$$R((("a'N  $$$$ / \ )<   rUcLt}g}|D]n}|jj|jjf}||vr+||||It d|jjot|t|kr|n|S)zRemove duplicate (tool_name, arguments) pairs within a single turn. Only the first occurrence of each unique pair is kept. Returns the original list if no duplicates were found. zRemoved duplicate tool call: %s) setrRr'rQaddr^rrr`)rseenuniquerTrs rS_deduplicate_tool_callszAIAgent._deduplicate_tool_calls= sEE T TB;#R[%:;C$  b!!!!@"+BRSSSSVs:66vvJFrUc&ddlm}|||S)uCForwarder — see ``agent.agent_runtime_helpers.repair_tool_call``.r)repair_tool_call)r5r)r{rVrs rS_repair_tool_callzAIAgent._repair_tool_callO s'@@@@@@i000rUc(ddlm}||dS)uCForwarder — see ``agent.system_prompt.invalidate_system_prompt``.r)invalidate_system_promptN)rkr)r{rs rS_invalidate_system_promptz!AIAgent._invalidate_system_promptT s+@@@@@@  &&&&&rUfn_namerQindexc$t|||S)uGenerate a deterministic call_id from tool call content. Used as a fallback when the API doesn't provide a call_id. Deterministic IDs prevent cache invalidation — random UUIDs would make every API call's prefix unique, breaking OpenAI's prompt cache. )_codex_deterministic_call_id)rrQrs rSr5zAIAgent._deterministic_call_idY s,GYFFFrUraw_idc t|S)z8Split a stored tool id into (call_id, response_item_id).)_codex_split_responses_tool_id)rs rSr6z AIAgent._split_responses_tool_idc s.f555rUrfresponse_item_idc"t||S)zCBuild a valid Responses `function_call.id` (must start with `fc_`).)(_codex_derive_responses_function_call_id)r{rfrs rSr4z*AIAgent._derive_responses_function_call_idh s 8AQRRRrUcJtj}|jd|jS)N:)r(current_threadr'ident)r{threads rS_thread_identityzAIAgent._thread_identityp s()+++.. ...rUct|dd}t|dd}t|dd}d|d|d|d|S) NrVrrWrzthread=z provider=z base_url=z model=)rr)r{rVrWrs rS_client_log_contextzAIAgent._client_log_contextt s}4Y774Y77gy11 1d++-- 1 1 1 1  1 1). 1 1 rUc`t|dd}|tj}||_|S)N _client_lock)rr(RLockr)r{locks rS_openai_client_lockzAIAgent._openai_client_lock} s2t^T22 <?$$D $D  rUrCcddlm}t||rdSt|dd}|-t |r |rdSnt |rdSt|dd}|t t|ddSdS)aCheck if an OpenAI client is closed. Handles both property and method forms of is_closed: - httpx.Client.is_closed is a bool property - openai.OpenAI.is_closed is a method returning bool Prior bug: getattr(client, "is_closed", False) returned the bound method, which is always truthy, causing unnecessary client recreation on every call. rMockF is_closedNT_client) unittest.mockrrsrrr )rCris_closed_attr http_clients rS_is_openai_client_closedz AIAgent._is_openai_client_closed s '&&&&& fd # # 5 d;;  %'' !>## 4 n%% tfi66  " [%@@AA AurUc ddl}ddl}|j|jdfg}t |drg||j|jdf||j|jdf||j|j dfn2t |dr"||j|j dft|}| | || S#t$rYdSwxYw) Nrr\ TCP_KEEPIDLEr TCP_KEEPALIVE)socket_options) transportproxy)httpxsocket SOL_SOCKET SO_KEEPALIVErr^ IPPROTO_TCPr TCP_KEEPINTVL TCP_KEEPCNTrr Client HTTPTransportr)rW_httpx_socket _sock_opts_proxys rS_build_keepalive_http_clientz$AIAgent._build_keepalive_http_client sF  " " " " $ $ $ $"-w/CQGHJw// T!!7#68Lb"QRRR!!7#68Mr"RSSS!!7#68KQ"OPPPP/22 T!!7#68Mr"RSSS -X66F== ..j.II!    44 sC:C== D  D  client_kwargsrFc,ddlm}|||||S)uGForwarder — see ``agent.agent_runtime_helpers.create_openai_client``.r)create_openai_clientrE)r5r)r{rrzrFrs rS_create_openai_clientzAIAgent._create_openai_client s.DDDDDD##D-vVVVVrUc$ddlm}||S)uJForwarder — see ``agent.agent_runtime_helpers.force_close_tcp_sockets``.r)force_close_tcp_sockets)r5r)rCrs rS_force_close_tcp_socketsz AIAgent._force_close_tcp_sockets s( HGGGGG&&v...rUcR|dS||} |td||||dS#t $r;}td||||Yd}~dSd}~wwxYw)Nz F44V<<   LLNNN KKN((**          LLH((**           sAA!! B&+0B!!B&c|5t|dd} ||j|d}nR#t$rE}t d|||Yd}~ddddSd}~wwxYw||_dddn #1swxYwY| |d|ddS)NrCTrEz7Failed to rebuild shared OpenAI client (%s) %s error=%sFzreplace:) rrr_client_kwargsrrrrrCrI)r{rz old_client new_clientrs rS_replace_primary_openai_clientz&AIAgent._replace_primary_openai_client sU  % % ' ' % % x66J !778KTZcg7hh    M,,..  uuu % % % % % % % % %DK % % % % % % % % % % % % % % % !!*5H5H5HQU!VVVts:B+AB+ B/B?B+B B++B/2B/c|5t|dd}|#||s|cdddSdddn #1swxYwYtd|||d|std|5|jcdddS#1swxYwYdS)NrCzCDetected closed shared OpenAI client; recreating before use (%s) %szrecreate_closed:rzz'Failed to recreate closed OpenAI client) rrrrrrr RuntimeErrorrC)r{rzrCs rS_ensure_primary_openai_clientz%AIAgent._ensure_primary_openai_client s  % % ' '  T8T22F!$*G*G*O*O!                         Q   $ $ & &   22:UV:U:U2VV JHII I  % % ' '  ;                  s#*AAA C!!C%(C%c$ddlm}||S)uKForwarder — see ``agent.agent_runtime_helpers.cleanup_dead_connections``.r)cleanup_dead_connections)r5r)r{rs rS_cleanup_dead_connectionsz!AIAgent._cleanup_dead_connections s%HHHHHH''---rUct|tsdSg}|d}t|tr|||d}t|tr||dt dt ffd tfd|DS)zHReturn True when the outbound request still contains native image parts.FrkinputrrMc"t|trH|d}|dvrdStfd|DSt|t rtfd|DSdS)Nrw>rMrNTc3.K|]}|VdSrrrr_contains_images rSrzPAIAgent._api_kwargs_have_image_parts.._contains_image.. s-FF!??1--FFFFFFrUc3.K|]}|VdSrrrs rSrzPAIAgent._api_kwargs_have_image_parts.._contains_image.. s-==!??1--======rUF)rsrtrrvaluesrj)rptypers rSrz=AIAgent._api_kwargs_have_image_parts.._contains_image s%&& G &))8884FFFFu||~~FFFFFF%&& >====u======5rUc3.K|]}|VdSrr)ritemrs rSrz7AIAgent._api_kwargs_have_image_parts.. s-@@T??4((@@@@@@rU)rsrtrrjextendrr r)r candidatesrkresponse_inputrs @rS_api_kwargs_have_image_partsz$AIAgent._api_kwargs_have_image_parts s*d++ 5 >>*-- h % % (   h ' ' '$00 nd + + .   n - - - 3 4      @@@@Z@@@@@@rU is_visionc(ddlm}|d|S)Nr)copilot_request_headersT) is_agent_turnr)hermes_cli.copilot_authr)r{rrs rS_copilot_headers_for_requestz$AIAgent._copilot_headers_for_request s*CCCCCC&&TYOOOOrU)rcddlm}||}t||r|S|5t |j}dddn #1swxYwYd|d<tt| dddr0| |pir| d |d <| ||d S) Nrrr max_retriesrWrZrT)rdefault_headersFrE) rrrrsrrtrrJr^rrrr)r{rzrrprimary_clientrequest_kwargss rS_create_request_openai_clientz%AIAgent._create_request_openai_client$ sH&&&&&&;;6;JJ nd + + "! !  % % ' ' 7 7!$"566N 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7)*}% !#n&8&8R&H&H"I"IKb c c b11*2BCC b150Q0Q\`0Q0a0aN, -)).PU)VVVsA$$A(+A(c6|||ddS)NFrE)rI)r{rCrzs rS_close_request_openai_clientz$AIAgent._close_request_openai_client> s# !!&!FFFFFrUc&|dS ||}td|||dS#t$r:}td|||Yd}~dSd}~wwxYw)uCross-thread abort: shut sockets down without releasing FDs. Companion to :meth:`_close_request_openai_client` for stranger-thread callers (interrupt-check loop, stale-call detector). Calling ``client.close()`` from a thread that does not own the active httpx connection raced the still-live SSL BIO and corrupted unrelated file descriptors when the kernel recycled the just-freed TCP FD (#29507). Here we only ``shutdown(SHUT_RDWR)`` the pool's sockets. That unblocks the owning worker thread's pending ``recv``/``send`` with an EOF or ``EPIPE`` so it can unwind and close ``client`` from its own context — which is where the FD release belongs. Nz`OpenAI client aborted (%s, shared=False, tcp_force_closed=%d, deferred_close=stranger_thread) %sz9OpenAI client abort failed (%s, shared=False) %s error=%s)rrrrrr)r{rCrzshutdown_countrs rS_abort_request_openai_clientz$AIAgent._abort_request_openai_clientA s > F !::6BBN KK5((**          LLK((**           sAA B/B  Bon_first_deltac*ddlm}|||||S)u;Forwarder — see ``agent.codex_runtime.run_codex_stream``.r)run_codex_stream)agent.codex_runtimer)r{rrCrrs rS_run_codex_streamzAIAgent._run_codex_streamb s+888888j&.IIIrUc(ddlm}||||S)uKForwarder — see ``agent.codex_runtime.run_codex_create_stream_fallback``.r) run_codex_create_stream_fallback)rr)r{rrCrs rS!_run_codex_create_stream_fallbackz)AIAgent._run_codex_create_stream_fallbackg s)HHHHHH//j&IIIrUc|jdks |jdvrdS |jdkrddlm}|d}nddlm}|d}n9#t $r,}t d |j|Yd}~dSd}~wwxYwt| d pd  }t|j pd  }|r*|r(||kr"t d |jdS |jdkrddlm}|| }nddlm}|| }n9#t $r,}t d|j|Yd}~dSd}~wwxYw| d } | d} t| tr| sdSt| tr| sdS| |_ | d|_|j |jd <|j|jd<||jdsdSdS)Nr> xai-oauthrFrr)!resolve_codex_runtime_credentials)refresh_if_expiring)%resolve_xai_oauth_runtime_credentialsz%s singleton read failed: %srrZz%s singleton tokens differ from the active api_key; skipping singleton force-refresh to avoid silent account swap. Reactive credential rotation should go through the pool.) force_refreshz %s credential refresh failed: %srWr_credential_refreshrT)rrVhermes_cli.authrrrrrr^rr)rrsrrWrr) r{rAr singleton_nowrr singleton_key active_keycredsrrWs rS%_try_refresh_codex_client_credentialsz-AIAgent._try_refresh_codex_client_credentialsl s =- - -Fc1c1c5 }..MMMMMM A A(-!!! RQQQQQ E E(-!!!     LL7 L L L55555 M--i88>B??EEGG +,,2244  Z MZ,G,G LLK     5 }..MMMMMM99NNNQQQQQQ==ERRR    LL;T]C P P P55555 ))I&&99Z(('3'' w}} 5(C(( 0@0@ 5}}  ((//44 )-I&*.-J'22T]:_:_:_2`` 5ts/0A A?!A::A? 0D>> E4!E//E4)rAinference_auth_moderc |jdks |jdkrdS ddlm}m}m}|p|r|n|}|t dttj ddttj d d | }n3#t$r&}t d |Yd}~dSd}~wwxYw|d } |d} t| t r| sdSt| t r| sdS| |_| d|_|j|jd <|j|jd<|jdd|dsdSdS)NrrFr)NOUS_INFERENCE_AUTH_MODE_AUTONOUS_INFERENCE_AUTH_MODE_LEGACY resolve_nous_runtime_credentials<HERMES_NOUS_MIN_KEY_TTL_SECONDS1800HERMES_NOUS_TIMEOUT_SECONDS15)min_key_ttl_secondstimeout_secondsrz"Nous credential refresh failed: %srrWrrnous_credential_refreshrT)rrVr rrrr,rrrrrrrrrsr^r)rrrWrrur) r{rArrrrselected_auth_moderrrrWs rS$_try_refresh_nous_client_credentialsz,AIAgent._try_refresh_nous_client_credentials s =. . .$-62I2I5            "5"3//2  54$'C :[]c0d0d,e,e$f$f %bi0Mt&T&T U U$6EE     LL=s C C C55555 ))I&&99Z(('3'' w}} 5(C(( 0@0@ 5}}  ((//44 )-I&*.-J'  1488822:S2TT 5tsA.B B9B44B9c0|jdkrdS ddlm}|\}}n3#t$r&}td|Yd}~dSd}~wwxYwt |tr|sdS|}||_ |j |j d<|j |j d<| t|j pd | d sdStd |d S)a]Refresh Copilot credentials and rebuild the shared OpenAI client. Copilot tokens may remain the same string across refreshes (`gh auth token` returns a stable OAuth token in many setups). We still rebuild the client on 401 so retries recover from stale auth/client state without requiring a session restart. rFr)resolve_copilot_tokenz%Copilot credential refresh failed: %sNrrWrZcopilot_credential_refreshrz%Copilot credentials refreshed from %sT)rVrr!rrrrsr^r)rrrW"_apply_client_headers_for_base_urlrr)r{r! new_token token_sourcers rS'_try_refresh_copilot_client_credentialsz/AIAgent._try_refresh_copilot_client_credentials s= =I % %5  E E E E E E&;&;&=&= #I||    LL@# F F F55555 )S)) 1B1B 5OO%%   )-I&*.-J' //DM4GR0H0HIII22:V2WW 5 ;\JJJts# AAAc:|jdkst|dsdS|jdkrdSt|ddpd}d|vrdS dd lm}m}|}n3#t$r&}t d |Yd}~dSd}~wwxYwt|tr| sdS| }||j krdS |jn#t$rYnwxYw ||t|ddt!|j|j |_n3#t$r&}td |Yd}~dSd}~wwxYw||_ dd lm}|jdkr ||nd|_dS)Nr_anthropic_api_keyF anthropic_anthropic_base_urlrZz azure.comr)resolve_anthropic_tokenbuild_anthropic_clientz'Anthropic credential refresh failed: %stimeoutz?Failed to rebuild Anthropic client after credential refresh: %s)_is_oauth_tokenT)rrrVragent.anthropic_adapterr+r,rrrrsr^r)r(_anthropic_clientrHrrrr/_is_anthropic_oauth)r{_baser+r,r$rr/s rS)_try_refresh_anthropic_client_credentialsz1AIAgent._try_refresh_anthropic_client_credentials s+ =0 0 0FZ8[8[ 05 =K ' '53R88>B %  5  _ _ _ _ _ _ _ _//11II    LLBC H H H55555 )S)) 1B1B 5OO%% / / /5   " ( ( * * * *    D  %;%;3T::4T]DJOO&&&D " "     NN\^a b b b55555 #, <;;;;;AER]A]A]??9#=#=#=ch tsBA B"BBC22 C?>C?:D>> E.E))E.c@ddlm}m}t|dr||jd<dSt|dr|||jd<dSt|drt |jd<dSt|drddlm}||jd<dSt|d rd d i|jd<dSt|d rt|jd<dSt|d r4ddlm }||j dd|jd<dSd} ddl m }||j }|r|jrt|j}n#t $rYnwxYw|r ||jd<dS|jdddS)Nr)build_nvidia_nim_headersbuild_or_headersrrzintegrate.api.nvidia.comzapi.routermint.comr)copilot_default_headers api.kimi.comrPzclaude-code/0.1.0portal.qwen.air)_codex_cloudflare_headersrrZ)get_provider_profile)agent.auxiliary_clientr6r7rJrrTr+r8rnr;r providersr<rVrrtrru) r{rWr6r7r8r; _ph_headers_gpf2_ph2s rSr#z*AIAgent._apply_client_headers_for_base_url= sf        !? ; ; A5E5E5G5GD  1 2 2 2 "8-G H H A5M5Mh5W5WD  1 2 2 2 "8-A B B A5H5J5JD  1 2 2 2 "8-D E E A A A A A A A5L5L5N5ND  1 2 2 2 "8^ < < A6BDW5XD  1 2 2 2 "8-= > > A5I5K5KD  1 2 2 2 "8] ; ; A H H H H H H5N5N#'' 26666D  1 2 2 2 K CCCCCCuT]++=D0="&t';"<"|S4Q4Qc ++C000Wc )-I&*.-J' // >>> ++3H+IIIIIs A:: BB)classified_reasonrvhas_retried_429rJc.ddlm}||||||S)uOForwarder — see ``agent.agent_runtime_helpers.recover_with_credential_pool``.r)recover_with_credential_pool)rsrKrJrv)r5rM)r{rsrKrJrvrMs rS_recover_with_credential_poolz%AIAgent._recover_with_credential_pool sJ MLLLLL++Dk[jP`mnnn nrUc|j}|dS|jdks1tt|dddrdS|S)zEWhether a rate-limit retry should wait for same-provider credentials.NFrYrWrZr[)_credential_poolrVr^rr_r])r{rbs rS'_credential_pool_may_recover_rate_limitz/AIAgent._credential_pool_may_recover_rate_limit sf$ <5 M0 0 074R0011<<=NOO 1 5!!###rUcn|jdkr||jjjdi|S)Nrr)rr4r1rkcreate)r{rs rS_anthropic_messages_createz"AIAgent._anthropic_messages_create sA =0 0 0  : : < < <5t%.5CC CCCrUcNtt|dd}t|dddkr+ddlm}t|dd pd }|||_dSdd lm}||jt|d dt|j|j | |_dS) u)Rebuild the Anthropic client after an interrupt or stale call. Handles both direct Anthropic and Bedrock-hosted Anthropic models correctly — rebuilding with the Bedrock SDK when provider is bedrock, rather than always falling back to build_anthropic_client() which requires a direct Anthropic API key. Honors ``self._oauth_1m_beta_disabled`` (set by the reactive recovery path when an OAuth subscription rejects the 1M-context beta) so the rebuilt client carries the reduced beta set. _oauth_1m_beta_disabledFrVNbedrockr)build_anthropic_bedrock_client_bedrock_regionz us-east-1)r,r*)r.drop_context_1m_beta) r rr0rXr1r,r(rrVr)r{_drop_1mrXregionr,s rS_rebuild_anthropic_clientz!AIAgent._rebuild_anthropic_client s&?GGHH 4T * *i 7 7 N N N N N NT#4kBBQkF%C%CF%K%KD " " " F F F F F F%;%;'3T::4T]DJOO%- &&&D " " "rUc&ddlm}|||S)uKForwarder — see ``agent.chat_completion_helpers.interruptible_api_call``.r)interruptible_api_call)rr_)r{rr_s rS_interruptible_api_callzAIAgent._interruptible_api_call s'HHHHHH%%dJ777rUcDt|dd}||}|rxt|dd}|||}|rNd|j|jfD}|D]} ||#t $rYwxYw||t|dd}|d|}|rNd|j|jfD}|D]} ||#t $rYwxYw||d|_dS)zDReset tracking for text delivered during the current model response._stream_think_scrubberN_stream_context_scrubbercg|]}||Srrrcbs rSrUz;AIAgent._reset_stream_delivery_tracking.. s t t tegesesesesrUcg|]}||Srrres rSrUz;AIAgent._reset_stream_delivery_tracking.. spppBacaoRaoaoaorUrZ)rflushfeedr_stream_callbackr_record_streamed_assistant_text _current_streamed_assistant_text)r{think_scrubber think_tail ctx_scrubber callbacksrfscrubbertails rS_reset_stream_delivery_trackingz'AIAgent._reset_stream_delivery_tracking s!'?FF  %'--//J E 't-GNN +!-!2!2:!>!>JE t tt/I4K`.a t t tI'!!!BzNNNN(!!! D!88DDD4!;TBB  >>##D ;pp4+EtG\*]ppp #B4$44T:::02---s$1 A== B  B ( C44 DDcnt|tr|rt|dd|z|_dSdSdS)zCAccumulate visible assistant text emitted through stream callbacks.rlrZN)rsr^rrl)r{rKs rSrkz'AIAgent._record_streamed_assistant_text sR dC  T @"EEL  1 1 1    rUct|tsdStjdd|S)NrZz\s+r{)rsr^rrr))rKs rS_normalize_interim_visible_textz'AIAgent._normalize_interim_visible_text s9$$$ 2vfc4((..000rUc |||pd}|sdS||t|ddpd}t|o||kS)NrZFrl)rvrrr )r{rvisible_contentstreameds rS_interim_content_was_streamedz%AIAgent._interim_content_was_streamed s>>  $ $W] 3 3   577  $ $WT3UWY%Z%Z%`^` a a  H~~=(o"==rU assistant_msgct|dd}|t|tsdS|d}||pd}|r|dkrdS||} |||dS#t$r t dd YdSwxYw) zESurface a real mid-turn assistant commentary message to the UI layer.rNrrZz(empty))already_streamedz interim_assistant_callback errorTr) rrsrtrrr)rzrrr)r{r{rfrvisibler}s rS_emit_interim_assistant_messagez'AIAgent._emit_interim_assistant_message s T7 > > :Z t<<: F##I..**7=b99??AA 'Y.. F==gFF L Bw)9 : : : : : : L L L LL;dL K K K K K K Ls B&CCct|ddr%|r#|rd|_d|z}d}nd}t|trt|dd}|||pd}n||pd}t|dd}|||}nt|}|s&t|d ds|d }|sdSd |j |j fD}d}|D] } ||d}#t$rYwxYw|r| |dSdS) z;Fire all registered stream delta callbacks (display + TTS)._stream_needs_breakF TrbNrZrcrlrOcg|]}||Srrres rSrUz.AIAgent._fire_stream_delta..> shhhBY[YgRYgYgYgrU) rr)rrsr^rirrlstriprrjrrk)r{rKprepended_breakrmrqrp deliveredrfs rS_fire_stream_deltazAIAgent._fire_stream_delta s 4. 6 6 $4 $DJJLL $',D $D=D"OO#O dC  )%T+CTJJN)%**4:266// ;;t%?FFH#}}T**(--" )78",, ){{4((  Fhh4#=t?T"Uhhh    B 4       7  0 0 6 6 6 6 6 7 7s D!! D.-D.cV|j}| ||dS#t$rYdSwxYwdS)z&Fire reasoning callback if registered.N)rr)r{rKrfs rS_fire_reasoning_deltazAIAgent._fire_reasoning_deltaI sN  $ > 4     >  &&cV|j}| ||dS#t$rYdSwxYwdS)aNotify display layer that the model is generating tool call arguments. Fires once per tool name when the streaming response begins producing tool_call / tool_use tokens. Gives the TUI a chance to show a spinner or status line so the user isn't staring at a frozen screen while a large tool payload (e.g. a 45 KB write_file) is being generated. N)rr)r{rVrfs rS_fire_tool_gen_startedzAIAgent._fire_tool_gen_startedR sP # > 9      >rc:|jdupt|ddduS)z4Return True if any streaming consumer is registered.Nrj)rrrs rSrEzAIAgent._has_stream_consumersa s/  &d 2 Ct/66dB rUrc*ddlm}||||S)uUForwarder — see ``agent.chat_completion_helpers.interruptible_streaming_api_call``.r) interruptible_streaming_api_callr)rr)r{rrrs rS!_interruptible_streaming_api_callz)AIAgent._interruptible_streaming_api_callh s0 SRRRRR//jQ_````rUzFailoverReason | Nonec&ddlm}|||S)uJForwarder — see ``agent.chat_completion_helpers.try_activate_fallback``.r)try_activate_fallback)rr)r{rzrs rS_try_activate_fallbackzAIAgent._try_activate_fallbacko s'GGGGGG$$T6222rUc$ddlm}||S)uJForwarder — see ``agent.agent_runtime_helpers.restore_primary_runtime``.r)restore_primary_runtime)r5r)r{rs rS_restore_primary_runtimez AIAgent._restore_primary_runtimev s%GGGGGG&&t,,,rU api_error retry_countrc,ddlm}|||||S)uPForwarder — see ``agent.agent_runtime_helpers.try_recover_primary_transport``.r)try_recover_primary_transport)rr)r5r)r{rrrrs rS_try_recover_primary_transportz&AIAgent._try_recover_primary_transport{ s2 NMMMMM,,T9+cnoooorUct|tsdS|D]1}t|tr|ddvrdS2dS)NFrw>rMrNT)rsrjrtr)rrs rS_content_has_image_partsz AIAgent._content_has_image_parts s^'4(( 5  D$%% $((6*:*:>Z*Z*ZtturUrMct|pdd\}}}d}|drZ|tddddd}|dr|}d d d d d d |d }tjd|d} |5| tj |dddn #1swxYwYn:#t$r- tj|jn#t $rYnwxYwwxYwt#|j}t||fS)NrZ, image/jpegdata:;r\rzimage/z.pngz.gifz.webpz.jpg)z image/pngz image/gifz image/webprz image/jpganthropic_image_F)rsuffixdelete)r^ partitionr_r`rr)rtempfileNamedTemporaryFilerWbase64 b64decoderrunlinkr'r;r) rMheader_rYmime mime_partrtmprs rS _materialize_data_url_for_visionz(AIAgent._materialize_data_url_for_vision sio2..88==4   W % % !s7||}}-33C;;A>DDFFI##H-- ! !    #dF   )1CF[`aaa  2 2 &*400111 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2     #(####      CH~~4yy$sTD(D8 DDD D D ED54E5 E?EEErpcDtjt|pdd}|j|}|r|Sddd|d}d}t|pd}d}|dr||\}}d} d d l m } tj | || } t| trtj| ni} | d pd} n#t"$r} d | } Yd} ~ nd} ~ wwxYw|r:|r& |nS#t($rYnGwxYwnB#|r:|r' |w#t($rYwwxYwwwxYw| sd} d|d| d}|r-t|pdds |d|dz }||j|<|S)NrZrrqz tool result)rqrr8zDescribe everything visible in this image in thorough detail. Include any text, code, UI, data, objects, people, layout, colors, and any other notable visual information.rr)vision_analyze_tool)rM user_promptanalysiszImage analysis failed: zImage analysis failed.z[The z- attached an image. Here's what it contains: ]z@ [If you need a closer look, use vision_analyze with image_url: )hashlibsha256r^encode hexdigest_anthropic_image_fallback_cacherr_rtools.vision_toolsrasynciorunrsrrr)rrrr;)r{rMrp cache_keycached role_labelanalysis_prompt vision_source cleanup_path descriptionr result_jsonrrnotes rS&_describe_image_for_anthropic_fallbackz.AIAgent._describe_image_for_anthropic_fallback sN3yB#7#7#>#>w#G#GHHRRTT 599)DD  M%!   #dF     8  IO,, '+  # #G , , _*.*O*OP]*^*^ 'M<   > > > > > >!+##mYYYK1;;0L0LTTZ ,,,RTF!::j117R>>@@KK 8 8 87A77KKKKKK 8  3 3 5 5  ''))))D  3 3 5 5  ''))))D    32K_z__Q\___  Y_"!5!5!@!@!I!I  dTaddd D;?,Y7 sgA9D?>F? E EFEF2F FFG0GG GGGGc ddlm}ddlm}|}t |ddpd}t |ddpd}||||duS#t $rYdSwxYw) aReturn True if the active provider+model reports native vision. Used to decide whether to strip image content parts from API-bound messages (for non-vision models) or let the provider adapter handle them natively (for vision-capable models). Resolution order (see ``agent.image_routing._supports_vision_override``): 1. ``model.supports_vision`` (top-level, single-model shortcut) 2. ``providers..models..supports_vision`` 3. models.dev capability lookup Custom/local models absent from models.dev would otherwise be misclassified as non-vision and have their images stripped. rr)_lookup_supports_visionrVrZrTF)rragent.image_routingrrr)r)r{rrrrVrs rS_model_supports_visionzAIAgent._model_supports_vision s  5 5 5 5 5 5 C C C C C C+--Cj"55;BBDDHT7B//52<<>>E**8UC@@DH H   55 sA.A11 A?>A?c||s|Sg}g}|D]}t|tr<|r'||Tt|t sj|d}|dvrOt|ddpd}|r|||dvr|di}t|t r|ddnt|pd} | r*||| |n|dkt|ddpd}|r||d d |D} d d |D} | r | r| d | S| r| S| r| Sd S)Nrw>rK input_textrKrZ>rMrNrMrz:[An image was attached but no image source was available.]rc3K|]}||V dSrr)rrs rSrz8AIAgent._preprocess_anthropic_content..s'BBdTBTBBBBBBrUrOc3K|]}||V dSrr)rrKs rSrz8AIAgent._preprocess_anthropic_content..s'??D$?4??????rUzI[A multimodal message was converted to text for Anthropic compatibility.]) rrsr^r)r^rtrrr\) r{rrp text_parts image_notesrrrK image_datarMrrs rS_preprocess_anthropic_contentz%AIAgent._preprocess_anthropic_content sy,,W55 N " !#  ( (D$$$ ::<<4%%djjll333dD)) HHV$$E...488FB//5266<<>>,%%d+++444!XXk266 9CJPT9U9UpJNN5"555[^_i_omo[p[p e&&t'R'RS\^b'c'cdddd&&'cdddtxx++1r2288::D (!!$'''BBkBBBBBHHJJ??J?????EEGG  +f +**&** *  M  MZZrUc|p|j}t|dd}| i}||_||}|ddlm}||}|||<|S)zReturn the cached transport for the given (or current) api_mode. Lazy-initializes on first call per api_mode. Returns None if no transport is registered for the mode. _transport_cacheNr) get_transport)rrrragent.transportsr)r{rmodecacher,rs rS_get_transportzAIAgent._get_transport sw (4=0$77 =E$)D ! IIdOO 9 6 6 6 6 6 6 d##AE$KrU api_messagesc jtfd|Ds|Sr|Stj|}|D]g}t |t s|dt|ddpd|d<h|S)Nc3K|]A}t|to'|dVBdSrNrsrtrrrrmr{s rSrz>AIAgent._prepare_anthropic_messages_for_api..4`   sD ! ! Wd&C&CCGGIDVDV&W&W      rUrrpr8 rrredeepcopyrsrtrrr^r{r transformedrms` rS#_prepare_anthropic_messages_for_apiz+AIAgent._prepare_anthropic_messages_for_api2s    #         & & ( (  mL11   Cc4(( !?? ""CGGFF++5v66C NNrUc jtfd|Ds|Sr|Stj|}|D]g}t |t s|dt|ddpd|d<h|S)aStrip native image parts when the active model lacks vision. Runs on the chat.completions / codex_responses paths. Vision-capable models pass through unchanged (provider and any downstream translator handle the image parts natively). Non-vision models get each image replaced by a cached vision_analyze text description so the turn doesn't fail with "model does not support image input". c3K|]A}t|to'|dVBdSrrrs rSrzAAIAgent._prepare_messages_for_non_vision_model..WrrUrrpr8rrs` rS&_prepare_messages_for_non_vision_modelz.AIAgent._prepare_messages_for_non_vision_modelNs    #         & & ( (  mL11   Cc4((  "?? ""CGGFF++5v66C NNrUct|s|S|dpg}||s|S|rt |ddpdt |ddpdf}t |dd}|r<||vr8td||d|d t|S|St|}|d krtj d |d St d ||j |j|S)aReturn the tool message content that is safe for the active model. Multimodal tool results normally unwrap to OpenAI-style content parts so vision-capable models can inspect screenshots. Text-only providers must not receive those image parts, because a rejected tool result becomes part of the canonical history and can make the next user turn fail before the agent has a chance to recover. rrVrZr_no_list_tool_content_modelsNuaTool %s: model %s/%s known to reject list-type tool content this session — sending text summaryrr\ computer_usezcomputer_use returned screenshot/image content, but the active model/provider does not support image input. Switch to a vision-capable model for desktop computer use, or use browser tools for browser tasks.)rv text_summaryzWTool %s returned image content for non-vision model %s/%s; falling back to text summary)rCrrrrr)rjrrrDrdumpsrrVr)r{rVrrrno_listrs rS%_tool_result_content_for_active_modelz-AIAgent._tool_result_content_for_active_modelns*&11 M**Y''-2,,W55 N  & & ( ( z2..4";;==CCEEw++1r88::Cd$BDIIG 83'>> Ds1vs1v 0777N*622  & &:/ !(   +  M J    rUc$ddlm}||S)uXForwarder — see ``agent.conversation_compression.try_shrink_image_parts_in_messages``.r)"try_shrink_image_parts_in_messages)rr)r{rrs rS#_try_shrink_image_parts_in_messagesz+AIAgent._try_shrink_image_parts_in_messagess%UUUUUU11,???rUcPt|tsdSt|ddpdt|ddpdf}t |dst |_|dr|j|d}|D]g}t|tr| ddkr2| d }t|ts]g}d}|D]}t|tsQt|tr;|r'| |h| d } | d ks| d krd }| dvrMt| dpd} | r| | |sE|rd ||d <nd|d <d }i|S)uDowngrade list-type tool messages to text summaries in-place. Recovery path for providers that reject list-type tool message content (e.g. Xiaomi MiMo's 400 "text is not set"; see issue #27344). Walks ``api_messages`` for any ``role: "tool"`` message whose ``content`` is a list containing image parts, replaces the content with the existing text part(s) (or a minimal placeholder if none survive), and records the active (provider, model) in ``self._no_list_tool_content_models`` so subsequent ``_tool_result_content_for_active_model`` calls in this session preemptively downgrade screenshots without a round-trip. Returns True when at least one tool message was downgraded — the caller (the 400 recovery branch in ``agent.conversation_loop``) uses this to decide whether to retry the API call with the modified history or surface the original error. FrVrZrrr\rprrrwrMrNT>rKrrKruS[image content removed — provider does not accept list-type tool message content])rsrjrr)rjrrrrrtrr^r^r\) r{rrchangedrmrr had_imagerrrKs rS)_try_strip_image_parts_from_tool_messagesz1AIAgent._try_strip_image_parts_from_tool_messagessM",-- 5T:r * * 0b 7 7 9 9 ? ? A A T7B ' ' -2 4 4 6 6 t;<< 603D - q6 7  - 1 1# 6 6 6' ' Cc4(( CGGFOOv,E,Eggi((Ggt,, %'JI 0 0!$--!$,,88"))$**,,777((K''5M+A+A $I222txx//5266<<>>D0"))$///   !'Z!8!8I6IGGrUct|ddpddvrdSt|ddpd}d|vpd|vpd|vpd |vp d |vpd |vpd |vS) aTrue when using an anthropic-compatible endpoint that preserves dots in model names. Alibaba/DashScope keeps dots (e.g. qwen3.5-plus). MiniMax keeps dots (e.g. MiniMax-M2.7). Xiaomi MiMo keeps dots (e.g. mimo-v2.5, mimo-v2.5-pro). OpenCode Go/Zen keeps dots for non-Claude models (e.g. minimax-m2.5-free). ZAI/Zhipu keeps dots (e.g. glm-4.7, glm-5.1). AWS Bedrock uses dotted inference-profile IDs (e.g. ``global.anthropic.claude-opus-4-7``, ``us.anthropic.claude-sonnet-4-5-20250929-v1:0``) and rejects the hyphenated form with ``HTTP 400 The provided model identifier is invalid``. Regression for #11976; mirrors the opencode-go fix for #5211 (commit f77be22c), which extended this same allowlist.rVrZ> minimax-cn opencode-go opencode-zenrxiaomialibabarWminimaxTrW dashscopealiyuncsrzopencode.ai/zen/z bigmodel.cnxiaomimimo.comzbedrock-runtime.)rrj)r{bases rS_anthropic_preserve_dotsz AIAgent._anthropic_preserve_dotss D*b ) ) /R 6 6 8 8=   4j"--3::<< 4  *T! *D  *"T) *$  *  4'  *"T) rUc,t|jdS)z2Return True when the base URL targets Qwen Portal.r:rrs rS_is_qwen_portalzAIAgent._is_qwen_portals$T%9;KLLLrUctj|}|s|S|D]}t|ts|d}t|t r d|dg|d<Lt|t rfg}|D]Z}t|t r|d|d0t|tr||[|r||d<|D]}t|tro|ddkrV|d}t|t r*|r(t|dtr ddi|dd <n|S) NrrKrwrKrprirrw ephemeral cache_control)rerrsrtrr^rjr^)r{rpreparedrmrnormalized_partsrs rS_qwen_prepare_chat_messagesz#AIAgent._qwen_prepare_chat_messagess=.. O 6 6Cc4(( ggi((G'3'' 6+17"C"C!DIGT** 6$& #66D!$,,6(//0N0NOOOO#D$//6(//555#6%5C N  C#t$$ H)D)D''),,gt,,IIZPR UY=Z=ZI4:K3HGBK0rUc|sdS|D]}t|ts|d}t|tr d|dg|d<Lt|trfg}|D]Z}t|tr|d|d0t|tr||[|r||d<|D]}t|trp|ddkrW|d}t|tr*|r(t|dtr dd i|dd <dSdS) u<In-place variant — mutates an already-copied message list.NrrKr rprirrwr r )rsrtrr^rjr^)r{rkrmrr rs rS#_qwen_prepare_chat_messages_inplacez+AIAgent._qwen_prepare_chat_messages_inplace?s  F 6 6Cc4(( ggi((G'3'' 6+17"C"C!DIGT** 6#% #66D!$,,6(//0N0NOOOO#D$//6(//555#6%5C N  C#t$$ H)D)D''),,gt,,IIZPR UY=Z=ZI4:K3HGBK0   rUc&ddlm}|||S)uEForwarder — see ``agent.chat_completion_helpers.build_api_kwargs``.r)build_api_kwargs)rr)r{rrs rS_build_api_kwargszAIAgent._build_api_kwargs[s'BBBBBBl333rUcHt|jdrdSt|jdst|jdr5 ddlm}t ||jS#t $rYdSwxYw|jpd d kr-| }td |DSd |jvrdSd |jvrdS|jpd d }tfd|DS)a3Return True when reasoning extra_body is safe to send for this route/model. OpenRouter forwards unknown extra_body fields to upstream providers. Some providers/routes reject `reasoning` with 400s, so gate it to known reasoning-capable model families and direct Nous Portal. znousresearch.comTzmodels.github.airrgithub_model_reasoning_effortsFrZr%c3&K|] }|o|dkV dS)rNr)ropts rSrz9AIAgent._supports_reasoning_extra_body..vs+<<s+se|<<<<<.s1SS5##F++SSSSSSrU) rJrr+rr rrrVr)rj"_lmstudio_reasoning_options_cachedr)r{roptsreasoning_model_prefixesrs @rS_supports_reasoning_extra_bodyz&AIAgent._supports_reasoning_extra_body`se !!57I J J 4 !$"68J K K $T%9;RSS  LLLLLL::4:FFGGG   uu  M R & & ( ( . . 0 0J > >::< NNNrUc$|j|jt|d|jf}t|dd}||d|kr|dS|p'|p|}||f|_|S)u Return True when the active provider enforces reasoning_content echo-back. DeepSeek v4 thinking and Kimi / Moonshot thinking both reject replays of assistant tool-call messages that omit ``reasoning_content`` (refs #15250, #17400). Xiaomi MiMo thinking mode has the same requirement. Result cached on the AIAgent instance keyed by (provider, model, base_url); invalidated whenever ``switch_model()`` / ``_try_activate_fallback()`` mutate any of those. This is hot — the agent loop hits ~16 invocations per turn, each of which would otherwise re-run ~5 ``base_url_host_matches`` (and therefore ``urlparse``) calls under it. Caching drops the per-turn cost from ~5us × 16 = ~80us to <1us. r_thinking_pad_cacheNrr\)rVrrrW_needs_deepseek_tool_reasoning_needs_kimi_tool_reasoning_needs_mimo_tool_reasoningr8)r{rrrs rS_needs_thinking_reasoning_padz%AIAgent._needs_thinking_reasoning_pads}dj'$8I4=*Y*YZ4d;;  &)s"2"2!9   / / 1 1 1..00 1..00  %(=  rUc|jdvp>t|jdp)t|jdpt|jdS)aReturn True when the current provider is Kimi / Moonshot thinking mode. Kimi ``/coding`` and Moonshot thinking mode both require ``reasoning_content`` on every assistant tool-call message; omitting it causes the next replay to fail with HTTP 400. Detection is host-driven, not model-name-driven: aggregators like OpenRouter that re-export Kimi/Moonshot models speak their own protocol and reject ``reasoning_content`` echoes. We only enable the kimi-reasoning replay when the request actually targets a kimi/moonshot endpoint or the dedicated kimi-coding provider. > kimi-codingkimi-coding-cnr9z moonshot.aiz moonshot.cn)rVrJrWrs rSr:z"AIAgent._needs_kimi_tool_reasoningsU M> > C$T]NCC C$T]MBB C%T]MBB  rUc|jpd}|jpd}|dkpd|vpt|jdS)aReturn True when the current provider is DeepSeek thinking mode. DeepSeek V4 thinking mode requires ``reasoning_content`` on every assistant tool-call turn; omitting it causes HTTP 400 when the message is replayed in a subsequent API request (#15250). rZdeepseekzapi.deepseek.comrVrjrrJrWr{rVrs rSr9z&AIAgent._needs_deepseek_tool_reasoning seM'R..00!r((**  " HU" H$T]4FGG rUc|jpd}|jpd}|dkp-d|vp)t|jdpt|jdS)aMReturn True when the current provider is Xiaomi MiMo thinking mode. MiMo thinking mode requires ``reasoning_content`` on every assistant tool-call message when replaying history; omitting it causes HTTP 400. Refs: https://platform.xiaomimimo.com/docs/zh-CN/usage-guide/passing-back-reasoning_content rZrmimozapi.xiaomimimo.comrrBrCs rSr;z"AIAgent._needs_mimo_tool_reasonings|M'R..00!r((**   F F$T]4HII F%T]4DEE  rU source_msgapi_msgc(ddlm}||||S)uQForwarder — see ``agent.agent_runtime_helpers.copy_reasoning_content_for_api``.r)copy_reasoning_content_for_api)r5rI)r{rFrGrIs rS_copy_reasoning_content_for_apiz'AIAgent._copy_reasoning_content_for_api,s)NNNNNN--dJHHHrUc&ddlm}|||S)uVForwarder — see ``agent.agent_runtime_helpers.reapply_reasoning_echo_for_provider``.r)#reapply_reasoning_echo_for_provider)r5rL)r{rrLs rS$_reapply_reasoning_echo_for_providerz,AIAgent._reapply_reasoning_echo_for_provider1s'SSSSSS224FFFrUc|d}t|ts|Sddhfd|D|d<|S)uStrip Codex Responses API fields from tool_calls for strict providers. Providers like Mistral, Fireworks, and other strict OpenAI-compatible APIs validate the Chat Completions schema and reject unknown fields (call_id, response_item_id) with 400 or 422 errors. These fields are preserved in the internal message history — this method only modifies the outgoing API copy. Creates new tool_call dicts rather than mutating in-place, so the original messages list retains call_id/response_item_id for Codex Responses API compatibility (e.g. if the session falls back to a Codex provider later). Fields stripped: call_id, response_item_id rrfrc~g|]9}t|tr fd|Dn|:S)c$i|] \}}|v || Srr)rrr _STRIP_KEYSs rSrzJAIAgent._sanitize_tool_calls_for_strict_api...Ls) A A AdaA[,@,@Q,@,@,@rU)rsrtr )rrTrQs rSrUz?AIAgent._sanitize_tool_calls_for_strict_api..Ks_! ! ! "d## , A A A Abhhjj A A A A)+! ! ! rU)rrsrj)rGrrQs @rS#_sanitize_tool_calls_for_strict_apiz+AIAgent._sanitize_tool_calls_for_strict_api6sn"[[.. *d++ N "45 ! ! ! ! !! ! !   rUrrc*ddlm}||||S)uOForwarder — see ``agent.agent_runtime_helpers.sanitize_tool_call_arguments``.r)sanitize_tool_call_argumentsrS)r5rU)rkrrrUs rS_sanitize_tool_call_argumentsz%AIAgent._sanitize_tool_call_argumentsRs0 MLLLLL++HVPZ[[[[rUc|jdkS)aDetermine if tool_calls need sanitization for strict APIs. Codex Responses API uses fields like call_id and response_item_id that are not part of the standard Chat Completions schema. These fields must be stripped when calling any other API to avoid validation errors (400 Bad Request). Returns: bool: True if sanitization is needed (non-Codex API), False otherwise. r)rrs rS_should_sanitize_tool_callsz#AIAgent._should_sanitize_tool_calls]s} 111rUr approx_tokensr focus_topicrArZr[c 2ddlm}||||||||S)u:Forwarder — see ``agent.conversation_compression.compress_context``. ``force=True`` is passed by the manual ``/compress`` slash command so users can bypass the summary-failure cooldown after an auto-compress abort. Auto-compress callers use the default ``force=False``. r)compress_contextrY)rr])r{rkr]rZrr[rAr]s rS_compress_contextzAIAgent._compress_contextjsB DCCCCC (N'k    rUdecisionc8|jr|j ||_dSdSdS)z?Record the first guardrail decision that should stop this turn.N) should_halt_tool_guardrail_halt_decisionr{r_s rS_set_tool_guardrail_haltz AIAgent._set_tool_guardrail_haltys3   :D$F$N19D . . . : :$N$NrUc@|jpd}d|d|jd|jdS)Nza toolzI stopped retrying z) because it hit the tool-call guardrail (z) after z repeated non-progressing attempts. The last tool result explains the blocker; the next step is to change strategy instead of repeating the same call.)rVrqcount)r{r_rs rS#_toolguard_controlled_halt_responsez+AIAgent._toolguard_controlled_halt_response~sP!-X E$ E E  E E'/~ E E E rU function_argsfunction_resultc|j||||}|jdvrt||}|jr|||S)N)r>haltrX)_tool_guardrails after_callactionr9rard)r{rVrhrirr_s rS_append_guardrail_observationz%AIAgent._append_guardrail_observationsq(33    4   ?. . .7RRO   4  ) )( 3 3 3rUcJ||t|Sr)rdr:rcs rS_guardrail_block_resultzAIAgent._guardrail_block_results$ %%h///)(333rUeffective_task_idr)c|j}d|_ t|s|||||d|_S|||||d|_S#d|_wxYw)a=Execute tool calls from the assistant message and append results to messages. Dispatches to concurrent execution only for batches that look independent: read-only tools may always share the parallel path, while file reads/writes may do so only when their target paths do not overlap. TF)rrFr?_execute_tool_calls_sequential_execute_tool_calls_concurrent)r{rrkrrr)rs rS_execute_tool_callszAIAgent._execute_tool_callss'1 !% *1*== ::%x1BN%*D ! ! 66!8->%*D ! !ED ! ) ) ) )s&AA A&c fddlm}||d|d|d|d|d|d|d |d | S) zSingle call site for delegate_task dispatch. New DELEGATE_TASK_SCHEMA fields only need to be added here to reach all invocation paths (concurrent, sequential, inline). r)r}goalcontexttoolsetstasksrrrrp) rxryrzr{rrrrp parent_agent)r~r}r)r{rh_delegate_tasks rS_dispatch_delegate_taskzAIAgent._dispatch_delegate_tasks HGGGGG~""6**!%%i00"&&z22##G,,(,,-=>>%))-88"&&z22""6**    rU function_namepre_tool_block_checkedc 0ddlm}||||||||S)u>Forwarder — see ``agent.agent_runtime_helpers.invoke_tool``.r) invoke_tool)r5r)r{rrhrrr1rkrrs rS _invoke_toolzAIAgent._invoke_toolsC <;;;;;{4 ?PR^`hkABB BrU labelrcddl}ddl}|dj}t d|t |z }g}|dD]\}t ||kr||+|||dd} | | p|g]d|z |} ||| S) aFWord-wrap verbose tool output to fit the terminal width. Splits *text* on existing newlines and wraps each line individually, preserving intentional line breaks (e.g. pretty-printed JSON). Returns a ready-to-print string with *label* on the first line and continuation lines indented. rN)xrrOTF)widthbreak_long_wordsbreak_on_hyphens) shutiltextwrapget_terminal_sizecolumnsr,r`rr^wraprr\) rrKr_shutil_twcols wrap_width out_linesraw_linewrappedrzs rS _wrap_verbosezAIAgent._wrap_verboses !   ((33;TCKK/00 !  4(( 8 8H8}} **  ****((8:4849#;;  !6XJ7777v ##I..'%''''rUc,ddlm}||||||S)uHForwarder — see ``agent.tool_executor.execute_tool_calls_concurrent``.r)execute_tool_calls_concurrent)agent.tool_executorr)r{rrkrrr)rs rSruz&AIAgent._execute_tool_calls_concurrent0EEEEEE,,T3DhPacqrrrrUc,ddlm}||||||S)uHForwarder — see ``agent.tool_executor.execute_tool_calls_sequential``.r)execute_tool_calls_sequential)rr)r{rrkrrr)rs rSrtz&AIAgent._execute_tool_calls_sequentialrrUc(ddlm}||||S)uJForwarder — see ``agent.chat_completion_helpers.handle_max_iterations``.r)handle_max_iterations)rr)r{rkr)rs rS_handle_max_iterationszAIAgent._handle_max_iterationss)GGGGGG$$T8^DDDrUstream_callbackpersist_user_messagec 0ddlm}||||||||S)u?Forwarder — see ``agent.conversation_loop.run_conversation``.rrun_conversation)agent.conversation_loopr)r{r r]r<rrrrs rSrzAIAgent.run_conversationsD =<<<<<lNDXZacruIJJ JrUc@|||}|dS)a Simple chat interface that returns just the final response. Args: message (str): User message stream_callback: Optional callback invoked with each text delta during streaming. Returns: str: Final assistant response )rr;r)r{rtrrs rSchatz AIAgent.chats(&&w&PP&''rU)should_review_memoryrc0ddlm}|||||||S)uDForwarder — see ``agent.codex_runtime.run_codex_app_server_turn``.r)run_codex_app_server_turn)r r:rkrrr)rr)r{r r:rkrrrrs rS_run_codex_app_server_turnz"AIAgent._run_codex_app_server_turnsQ BAAAAA((L`uAI]nEYZZZ ZrU)ANNNNNNNNrZrrNNFFFNrrZNNNNFNNNNNNNNNNNNNNNNNNNNNNNNNNNNFFFNNNNNFrrrF)rMN)NNFr)rZrZrZ)FF)r)rZ)NN)r)NNNNN)r}r~rr&_TOOL_CALL_ARGUMENTS_CORRUPTION_MARKERpropertyr^rWsetterrjrrrr rrrrryrrrr"r2r4r?rGrNrPrUrYrarerhrnrzrr{_STREAM_DIAG_HEADERS staticmethodrr BaseExceptionrrrrrrrrrrrrtuplerrrrrrrrtrrrrrr rrrrrrrrr-r4r;rBr>rIrArhrlrqrur~rrrrrrrrrrr@rrrrrrr r rrrr#r2r7r9rArGrHrZr\rardrirk frozenset_VALID_API_ROLESrorvryrrrrr5r6r4rrr(rrrrrrrIrrrrrrrrrrrrr&r4r#rIrrNrQrTr]r`rsrkrvrzrrrrrErrrrrrrrrrrrrrrrrrrrrrr(r3r6r<r:r9r;rJrMrRrVrXr^r8rdrgrorqrvr~rrrurtrrrrrrUrSrr&s$( O+ #X_;c;d;;;_;%)!% &*'+"' % '+ #'+'+%)!,1(,7;+/(,+/&*'+%)"&*./3&*$(+/ ,015#'#(#(!!%.2)-$)(*,/+- %EI I I I  I  I  I s)d"I I 3i$I I I I s)I  9I  I !I "#I $"%%I &'I ()I * 9+I , 9-I .c/I 01I 2&*3I 4#&5I 6&.e_7I 89I :!);I <&=I >!)?I @$AI B%CI D#EI F GI H (II J%-KI L$MI N"OI PQI RsCx.SI TUI V S>WI XtCH~.YI Z[I \]I ^_I `aI bcI deI fgI hiI j!kI l!mI n!oI pqI tuI v,wI xS#XyI |"}I ~#&I @'*AI B&)CI DEI I I I V&2)-(,,0#(!CiCiCi! Ci! Ci $D> Ci ! CiCi CiCiCiCiN-1(,#( 2 2 #D>2 ! 2 ! 2 2 2 2 h??Xc]?^b????BXXXX $,1***D****6T&  $     UCUDUUUU(VSVTVVVV8cd( c d    848HH4S#X/0H c3hHHHHFNMMMMM"tCH~"""\" @cN@36@ @@@@. .#...\. 3]3t33334*.           tCH~&      0*.          tCH~&      EC Em E E E E E tCH~    2222 )))) ,,c,T,,,,))S)D)))) 33s3d3333>E>>>>(uUD[7I8SU*2 2 Xc]2 hsm2 2 2 2 hLDLLLL#'"&"&# y y y3- y3- y 3- y } y tTz  y y y y %S %T % % %\ %#'<<<<3-<  <<<\<* %s %t % % % %%c%d%%%%.13131111 cd\&HHHHH$( CCC4. C  CCCC>bbbtCH~& b  bbbb:x}:::: 5s5t5555 TdTT T cTTT\T$# :   6'++/!%&*    sm $C=  #  sm   c3h    $*T$Z*D****$ K Kd K4PT: K K K K3$t*3QU3333j7d77777 9F9Fd4j9FX\]aXb9F9F9F9Fv-4:-$t*---->5#5555 Sd4S>6JSX[ShlSquvz{~AD|DwErFSSSS Dd38n)= D3 D[_ D D D DAS#X/Ac]A AAA\AF+&I+&#+&+&+&\+&Z )# )(3- ) ) ) )cc40)0S#X000\0 CHTRUWZRZ^D\*&* T T TcN T T  " T $ T T T T\\:SDSD$tCH~*>SDSDSDSDlBVBVBVBVBVBVBVH++++B"#"$""""Hhsm %&%&38n%& %&  %&  %&%&%&%&N6 T#tCH~:M5N SV   \ >RTRRURZ^RRRR CD,#$&&&&CD, d    $6dd>!% 444 #4 4  4 + 4 4444l----^6666p4S#X+?D@))))X)NNNSRUXNNNN HH3H#HHHH IIII\I -#---\- !y!a!a!abb/d38n)=/$tCQTH~BV///\/ 3c3h3D333\3j<tCH~&< d38n <<<\<Td\<GDGTGGG\G"1313:1111 ''' GGGGCGPSGGG\G66x}hsm7S1T666\6+/SSS#3-S SSSS/#//// S    Y_\:sC\0W4WCWQUWZ]WWWW /////\/ 33QU0"ss .4.... AA$AAA\A4PP$PPPP Z^WWWsWQUWbeWWWW4G3G3G4GGGG334BJJDJ#JV^JJJJ JJDJ#JJJJ FJHHHdHdHHHHZ*. ////!4Z /  ////b!!!!!F141111f&A3&A4&A&A&A&APJJJJF7;26 n n nc] n n $N3 n  S#X/ n tTz  n n n n $ $ $ $ $DTDDDD 48$8888'3'3'3'3RCD1c1c111\1 >S >T > > > > LT#s(^ LPT L L L L37s37t37373737j#$       t    ?Caaaa3;aaaa33-D3PT3333-$---- p"p47pFIp pppp#$\CE#xPT~BUABBBB((S((S(s(((\(0ss$scfsx{sEIssss ss$scfsx{sEIssss EtESESEEEE#59.2.2 J J J J#4S>2 J  J "(+ J'sm J c3h J J J J ( (C ((82D (PS ( ( ( (*&+ Z Z Z Z # Z tCH~& Z  Z# Z c3h Z Z Z Z Z ZrUrrZrFrqueryrr max_turnsrr list_toolsr save_sampleverboserc  tdtd|rddlm} m} ddlm}m}tdtdtdtd |}g}g}g}|D]_\}}||}|rM||f}|d vr||0|d vr||J||`td |D]X\}}|d rd |d nd}td|dd|dtd|Ytd|D]p\}}|drd |dnd}td|dd|dtd|td|dqtd|D]9\}}td|dd|dtd|d:td| }|D]b\}}|drdnd}td |d!|d"|d|ds+td#d |d$c| }td%t|d&t|D]'}t|}td'|d(|d)(td*td+td,td-td.td td/td0td td1td2td td3td4d5Sd5}d5}|r1d6| d7D}td8||r1d9| d7D}td:||r-td;td<td= t|||||||| | > } n*#t$r}!td?|!Yd5}!~!d5Sd5}!~!wwxYw|d@}"n|}"tdA|"tdB| |"}#tdBtdCtdtdD|#dEtdF|#dGtdHt|#dI|#dJr3tdKtdLt|#dJ| rt#t%jd5dM}$dN|$dO}%| |#dI|"|#dE}&|&t+j||#dE|"dP} t1|%dQdRS5}'|'t5j|dTdUVd5d5d5n #1swxYwYtdW|%n)#t8$r}!tdX|!Yd5}!~!nd5}!~!wwxYwtdYd5S)Za Main function for running the agent directly. Args: query (str): Natural language query for the agent. Defaults to Python 3.13 example. model (str): Model name to use (OpenRouter format: provider/model). Defaults to anthropic/claude-sonnet-4.6. api_key (str): API key for authentication. Uses OPENROUTER_API_KEY env var if not provided. base_url (str): Base URL for the model API. Defaults to https://openrouter.ai/api/v1 max_turns (int): Maximum number of API call iterations. Defaults to 10. enabled_toolsets (str): Comma-separated list of toolsets to enable. Supports predefined toolsets (e.g., "research", "development", "safe"). Multiple toolsets can be combined: "web,vision" disabled_toolsets (str): Comma-separated list of toolsets to disable (e.g., "terminal") list_tools (bool): Just list available tools and exit save_trajectories (bool): Save conversation trajectories to JSONL files (appends to trajectory_samples.jsonl). Defaults to False. save_sample (bool): Save a single trajectory sample to a UUID-named JSONL file for inspection. Defaults to False. verbose (bool): Enable verbose logging for debugging. Defaults to False. log_prefix_chars (int): Number of characters to show in log previews for tool calls/responses. Defaults to 20. Toolset Examples: - "research": Web search, extract, crawl + vision tools u🤖 AI Agent with Tool Callingz2==================================================r)get_all_tool_namesget_available_toolsets)get_all_toolsetsget_toolset_infou 📋 Available Tools & Toolsets:z2--------------------------------------------------u' 🎯 Predefined Toolsets (New System):z(---------------------------------------->webvisioncreativeterminalrW>rresearch full_stack developmentcontent_creationu 📌 Basic Toolsets:resolved_toolsz, rrrz - rz Tools: u5 📂 Composite Toolsets (built from other toolsets):includesz Includes: z Total tools: tool_countu! 🎭 Scenario-Specific Toolsets:20u3 📦 Legacy Toolsets (for backward compatibility): availableu✅u❌z r{rz Requirements: requirementsu 🔧 Individual Tools (z available):u 📌 z (from reu 💡 Usage Examples:z # Use predefined toolsetszR python run_agent.py --enabled_toolsets=research --query='search for Python news'zN python run_agent.py --enabled_toolsets=development --query='debug this code'zP python run_agent.py --enabled_toolsets=safe --query='analyze without terminal'z # Combine multiple toolsetszM python run_agent.py --enabled_toolsets=web,vision --query='analyze website'z # Disable toolsetszQ python run_agent.py --disabled_toolsets=terminal --query='no command execution'z& # Run with trajectory saving enabledzF python run_agent.py --save_trajectories --query='your question here'Nc6g|]}|Srr)rr,s rSrUzmain..s P P Pq P P PrUru🎯 Enabled toolsets: c6g|]}|Srrrs rSrUzmain..s !R!R!R!''))!R!R!RrUu🚫 Disabled toolsets: u💾 Trajectory saving: ENABLEDu: - Successful conversations → trajectory_samples.jsonlu7 - Failed conversations → failed_trajectories.jsonl) rWrrrrrrrru ❌ Failed to initialize agent: zTell me about the latest developments in Python 3.13 and what new features developers should know about. Please search for current information and try it out.u 📝 User Query: z3 ==================================================u📋 CONVERSATION SUMMARYu✅ Completed: rnu📞 API Calls: api_callsu💬 Messages: rkr;u 🎯 FINAL RESPONSE:z------------------------------rLsample_r) conversations timestamprrnrwrrFr) ensure_asciiru" 💾 Sample trajectory saved to: u ⚠️ Failed to save sample: u 👋 Agent execution completed!)r: model_toolsrrrzrrr r^r\r`sortedrrrrrr^uuiduuid4rqrrropenrWrrr)(rrrrWrrrrrrrrrrrr all_toolsetsbasic_toolsetscomposite_toolsetsscenario_toolsetsr'toolsetrr tools_str includes_strlegacy_toolsetsr\ all_toolsrVenabled_toolsets_listdisabled_toolsets_listagentrrmr sample_idsample_filenamertfs( rSmainr sH +,,, (OOOPJJJJJJJJ???????? 0111 h 8999 h'')) )//11 4 4MD'##D))D 4t QQQ"))%0000fff&--e4444%,,U333 &'''( - -JD$=ABR=S_ $'7"8999Y_I <4<<z:JV499T*%5666PVL <4<< > > $ NL499T.5I+J+JLLMMM'&((  F#i..FFFGGG ** : :I*955G 8I88g888 9 9 9 9 &''' +,,, bccc ^___ `aaa d  -... ]^^^ d  $%%% abbb d  6777 VWWW!!A P P4D4J4J34O4O P P P ?(=??@@@C!R!R5F5L5LS5Q5Q!R!R!R A)?AABBBI /000 JKKK GHHH$24/#-      444555  } b    , , ,--- / # #J / /F / %&&& (OOO 1F;/ 1 1222 2VK0 2 2333 5Cz 233 5 5666 ( &''' h f%&''': %%bqb) 4I44488 :   ;   (!1133 ,    :osW=== I 5uQGGGHHH I I I I I I I I I I I I I I I III J J J J : : : 8Q88 9 9 9 9 9 9 9 9 : -.....sTR!! S+SS Z2+Z Z2ZZ2ZZ22 [<[[__main__) NrZNrZrNNFFFFr)rhermes_bootstrapModuleNotFoundErrorrrrerrr getLoggerr}rrrrJrrr(rtypingrrrrrpathlibrhermes_constantsr agent.process_bootstrapr r r agent.iteration_budgetr hermes_cli.env_loaderrhermes_cli.timeoutsrr _hermes_home__file__parent _project_env_loaded_env_paths _env_pathrrrrrrtools.terminal_toolrtools.interruptrrtools.browser_toolragent.memory_managerragent.error_classifierr agent.redactrr*rragent.usage_pricingragent.context_compressorr agent.retry_utilsr!agent.prompt_builderr"r#r$r%r&r'r(agent.message_sanitizationr)r*r+r,r-r.r/r0r1r2r3agent.codex_responses_adapterr4rr5rr6rr7agent.tool_guardrailsr8r9r: agent.tool_result_classificationr;rr<agent.trajectoryr=r>rsagent.tool_dispatch_helpersr?r@rArBrCrDrErFrGrHutilsrIrJrK_MAX_TOOL_WORKERSEvent_openrouter_prewarm_donerhrtrTr^r rcrnrrprrrfireFirerrUrSrsx.     D      8 $ $   ,,,,,,,,,,,,,,,,,, 322222544444   tH~~$v- &&<\ZZZK&GG  :IFFFFG KKIJJJ +*****;;;;;;......211111111111......0/////666666......877777                                                    NMMMMMMMMM +9?,,T%) # # #Tz #47$J #  # # # #F d    $ $ $ $ $ $ $ $ Nx?Zx?Zx?Zx?Zx?Zx?Zx?Zx?Zv !#S/S/ S/ S/S/ S/  S/  S/S/S/S/S/S/S/S/S/S/l zKKK DIdOOOOOs