`gjdZddlmZddlZddlZddlmZmZddlZeje Z dZ dZ e e d d dZd d Ze e d d d Zy)utBounded reads of HTTP error response bodies. When a provider returns a non-OK status on a *streaming* request, Hermes reads the response body to build a useful diagnostic error. A bare ``response.read()`` on a streaming httpx response is unbounded in two dangerous ways: 1. A server can declare (or stream) an arbitrarily large body, so the read can balloon memory. 2. A server can open the body and then stall forever (no ``Content-Length``, no further bytes), so the read hangs the agent indefinitely. Both are realistic against a misbehaving proxy, a hijacked endpoint, or a provider having a bad day. The diagnostic body is only ever shown to the user truncated to a few hundred characters, so reading megabytes — or blocking forever — buys nothing. ``read_streaming_error_body`` bounds the read to a byte cap and enforces a hard wall-clock deadline, returning the decoded text snippet. Callers pass the returned text into their existing error builders instead of touching ``response.text`` (which would be unbounded / would raise after a partial stream read). A subtlety the implementation must respect: ``httpx``'s ``iter_bytes()`` blocks *inside* the C/socket read while waiting for the next chunk. A wall-clock check placed only between yielded chunks cannot interrupt a server that opens the body and then stalls mid-chunk — control never returns to Python until httpx's own (often 30s+) read timeout fires. To guarantee a bounded stop regardless of socket behavior, the read runs on a daemon worker thread and the caller waits on it with a hard deadline; on timeout we close the response (which unblocks / cancels the read) and return whatever partial bytes were collected. Ported and adapted from openclaw/openclaw#95108 ("bound Anthropic error streams"), generalized to cover Hermes's three streaming error-body sites (native Gemini, Gemini Cloud Code, Antigravity Cloud Code). ) annotationsN)ListOptionalig$@ max_bytes timeout_scgdditjdfd }tj|dd}|jj |}|s3t j d|td Dtn tdr't j d td Dd jjd dS)aRead a non-OK streaming response body with a byte cap and a hard deadline. Returns the decoded body text (UTF-8, errors replaced), truncated to ``max_bytes``. Never raises: any transport error, stall, or oversize condition is swallowed and the best-effort partial text (or an empty string) is returned, because this runs on the error path and must not mask the original HTTP failure with a read error. The byte cap protects against huge bodies; the wall-clock deadline (enforced via a worker thread so it can interrupt a socket read that stalls mid-chunk) protects against bodies that open and then hang. truncatedFcd} jD]c}|s|z }|dkrdd<nOt||kDr j|d|||z }dd<n!j||t|z }ej y#t$r }tj d|Yd}~5d}~wwxYw#j wxYw)NrTr z"bounded error-body read failed: %s) iter_byteslenappend Exceptionloggerdebugset) totalchunk remainingexcchunksdonerresponsestates I/root/.hermes/venv/lib/python3.12/site-packages/agent/bounded_response.py_drainz)read_streaming_error_body.._drainNs !,,. $%- >)-E+&u: )MM% "34Y&E)-E+& e$U# $" HHJ D LL=s C C D HHJs*A6B B5B0+B80B55B88C zbounded-error-body-readT)targetnamedaemon)timeoutzCbounded error-body read: hard timeout after %.1fs (%d bytes so far)c32K|]}t|ywNr .0cs r z,read_streaming_error_body..n'1A'z4bounded error-body read: capped at %d bytes (max=%d)c32K|]}t|ywr"r#r$s rr'z,read_streaming_error_body..zr(r)zutf-8replace)errors)returnNone) threadingEventThreadstartwaitrrsum _safe_closejoindecode) rrrrworkerfinishedrrrs `` @@@rread_streaming_error_bodyr;8s$F % E ?? D,  5dF LLNyyy+H  Q  '' '  HH [ B '' '  88F  " "79 " ==r+cD |jy#t$rYywxYwr")closer)rs rr6r6s#     s  c*t|||}|xsdS)zLike ``read_streaming_error_body`` but returns ``None`` on empty body. Convenience for callers that distinguish "no body" from "empty string". rN)r;)rrrtexts rread_error_body_or_defaultr@s! %I D <4r+)rhttpx.Responserintrfloatr.str)rrAr.r/)rrArrBrrCr.z Optional[str])__doc__ __future__rloggingr0typingrrhttpx getLogger__name__rDEFAULT_ERROR_BODY_MAX_BYTESDEFAULT_ERROR_BODY_TIMEOUT_Sr;r6r@r+rrOs"H#!   8 $ ) $ 23 E>E>E> E>  E>P 23      r+