`gj ?UddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlmZddlmZddlmZmZmZddlmZmZmZmZddlmZddlmZddl m!Z!dd l"m#Z#dd l$m%Z%dd l&m'Z'm(Z(m)Z)m*Z*m+Z+ejXe-Z.eZ/ee/ee0jbjbd z e jdjge/ddZ4dZ5e5e _6dZ7e7e _6 ddl8m9Z9e9ddl;mZ>iZ?e@eAe@feBd<iZCe@eAeDfeBd<iZEe@eAeFeAe jffeBd<iZHe@eAeFeAe@ffeBd<iZIe@eAeAfeBd<daJdaKeAdzeBd<e jZMe jZNe jZPe jZQdaRe@dzeBd<daSeTdzeBd<daUe jZV eTe jjdxsdZYe\deYZ] eTe jjd xsd!Z^e\d#e^Z_d$Z`eahd%Zbeahd&Zc e\d'ede jjd(xsd)Zeejjeed+,Zhejd-e jZke je _jGd.d/Zme'd0eMZnemZoGd1d2Zpd3eAfd4Zqd3erfd5Zs d=d6eAd7eAdzd8eAdzd3dfd9Ztd:d;deAd3eFeeAdzffd?Zud@e@dzd3dfdAZvdBeAd@e@dCeAd3erfdDZweahdEZxdFeAd3erfdGZyd>d@e@dzdIeAd3dfdJZzdHdKd@e@dzdIeAd3dfdLZ{dBeAd@e@d3dfdMZ|dBeAd3e@dzfdNZ}dHdKd@e@dzdIeAd3erfdOZ~dHdKdBeAdIeAd3erfdPZd@e@dzd3erfdQZdBeAd3dfdRZdSdKdIeAd3eFededffdTZd?dUZ eTe jjdVxsdWZe\d#eZdXZd3erfdYZdBeAd@e@dZeTd3erfd[Zd?d\Zd3edfd]ZdBeAd@e@d3erfd^Zd?d_Zd?d`Zd?daZejeedbZdcedfddZdeeAdzd3edzfdfZdgZhdhZdie@dzd3eAdzfdjZdkedzd3eAdzfdlZd3eAdzfdmZd3eAfdnZdoe@d3erfdpZd=dqeAdBeAdre@dzfdsZdae jZd3erfdtZd=die@dzd3erfduZd=d@e@die@dzd3erfdvZd=die@dzfdwZdxeAdBeAd@e@dyed3e@f dzZd@e@dzd3e@fd{Zd@e@d|e@dzd3dfd}ZdxeAdBeAd@e@d|e@d3df d~ZdxeAdBeAd@e@dyed3e@f dZdddddBeAdeAdeAdre@dzderd3e@f dZdBeAde@dzd3dfdZd=dBeAdeAdyeAdzfdZdeddedd3edfdZded3e@fdZde@d3e@fdZdceddeAd3e@fdZdeAfdZded3eFeeAe@fe@zfdZde@d3e@dzfdZd=de@dee(d3e@dzfdZd@d@e@dxeAdeTd3e@dzfdZdBeAd@e@d3dfdZdZdZdeAd3eAfdZd=de@dzd3eAfdZd@e@dzd3eAfdZe%jlZe%jpZe%jtZe%jxZe%j|Zd@e@dzd3eAfdZdeAd3eAfdZd3erfdZd@e@dzd3eAfdZd@e@dzd3eAfdZd@e@dzd3dfdZd@e@d3dfdZd@e@d3dfdZejd@e@fdZd@e@deAd3dfdZd@e@deAd3eAfdZdZeFeAdfeBd<dZdZdZdZdededdedd3edfdZѐd=die@dzd3e@eAeffdZd3e@fdZdie@d3e@fdZdie@fdZdeAd?eAd3eFere@dzff d@Z'die@dedd3edfdAZ(d3eeAfdBZ)dCZ*dDZ+d6eAd3e@fdEZ,d6eAd3e@fdFZ-dEd@e@dGeddHedd3ee@fdIZ.deAdeAd3eAfdJZ/dKeAd6eAd3e@fdLZ0dBeAd@e@d3e@fdMZ1dBeAd3dfdNZ2GdOdPeZ3 d=dQe@dzd3e3fdRZ4 dFdBeAdSeAd7eAdzdTe@eAzdzdUeAdzdVe@dzdWeAdzdXeAdzfdYZ5 dGdBeAdSeAdZeאd[eddeAdzdFeAdzf d\Z6d3eAfd]Z7d^Z8deAd_eAd3eAfd`Z9daed3eFeAeAffdbZ:dceAddeeAd3eAfdeZ;dfed3eAfdgZ<dfed3eAfdhZ=dZee@d3ee@fdiZ>ded3ee@fdjZ?dfed3eAfdkZZd?e jdBeAd@e@d3dfd@Zd?dAZdBeAd@e@d3e jfdBZdBeAd@e@dyed3dfdCZedDde@d3e@fdEZJedFde@d3e@fdGZJdHZdIZdJZdKZeFeFeeAfdfeBdL<dMeAdNeAd3edzfdOZdBdPedQeAd3eAfdRZd3eaeAfdSZd@e@dPedTeAdUeAd3ef dVZedWde@d3e@fdXZJedYde@d3e@fdZZJdadeAd3eAfd[Zd@e@d\ed3eAfd]Zd@e@d3efd^ZdeAd3eAfd_Zd`edQeAd3efdaZdMeAd3edzfdbZdceAd3efddZd@e@deeAdceAdeAd3eFeerff dfZedgde@d3e@fdhZJedide@d3e@fdjZJedkde@d3e@fdlZJedmde@d3e@fdnZJedode@d3e@fdpZJddqdrZedsde@d3e@fdtZJedude@d3e@fdvZJedwde@d3e@fdxZJedyde@d3e@fdzZJed{de@d3e@fd|ZJed}de@d3e@fd~ZJdZdZdZGdde:Zd3e@fdZdeAfdZde@fdZedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJedd3e@fdZJd`eAd3erfdZdeAd3erfdZdddderd3ee@fdZedde@d3e@fdZJedde@d3e@fdZJdgZde@d3e@fdZdedderd3eFee@ee@ee@eAdzffdZdedderdedderd3eFe@eAdzff dZedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJd@e@d3efdZedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJed«de@d3e@fdÄZJeahdģZeaeAeBd<gdƢZeeFeAeAeAfeBd<eahdȣZeaeAeBd<eaddhZeaeAeBd<ed̫de@d3e@fd̈́ZJdeeAd3eAdzfdτZedЫde@d3e@fdфZJedҫde@d3e@fdӄZJdeAd3eAfdԄZedիde@d3e@fdքZJdaed׫de@d3e@fd؄ZJdZdِZeahdڣZe jZiZe@eAeFeTeeAffeBd<d`eAd3eeAfd܄ZdeAdeAd3eFededfdzfdބZed߫de@d3e@fdZJdBdeAdeAd3e@fdZdeAdeAderd3e@fdZdyeAd3ee@dzfdZedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJeahdZeahdZd@e@d3eAfdZd@e@d3eAfdZd@e@d3eAfdZd@e@d3eAfdZd@e@d3eAfdZd3eAfdZd@e@d3eAfdZdBeAd@ee@deAdeAd3eeAf dZdBeAd@e@deAd3eAfdZedde@d3e@fdZJe jZdaeAeBd<d=dqeAdre@dzd3dfdZd3erfdZd3erfdZd3e@fdZd3eAfdZedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fdZJedde@d3e@fd ZJed de@d3e@fd ZJed de@d3e@fd ZJedde@d3e@fdZJd3eAfdZd3erfdZːdeAdeTd3erfdZd3eeAfdZd3eAfdZΐdeAdeddeAd3eeAfdZedde@d3e@fdZJde@d3e@fdZd3e@fdZedde@d3e@fdZJedde@d3e@fd ZJed!de@d3e@fd"ZJed#de@d3e@fd$ZJed%de@d3e@fd&ZJed'de@d3e@fd(ZJed)de@d3e@fd*ZJed+de@d3e@fd,ZJed-de@d3e@fd.ZJed/de@d3e@fd0ZJed1de@d3e@fd2ZJed3de@d3e@fd4ZJed5de@d3e@fd6ZJed7de@d3e@fd8ZJed9de@d3e@fd:ZJed;de@d3e@fd<ZJy#e:$rY%wxYw#eZe[f$rdZYY>wxYw#eZe[f$rd"Z^YwxYw#eZe[f$rd*ZeYwxYw#e[eZf$r eTdWZYwxYw#e[eZf$rdZkYwxYw(INdatetimePath)Any NamedTupleOptional)get_hermes_homeget_hermes_home_overridereset_hermes_home_overrideset_hermes_home_override)load_hermes_dotenv)is_truthy_value)hermes_subprocess_env)sanitize_replay_history) git_probe)StdioTransport Transportbind_transportcurrent_transportreset_transportz.env) hermes_home project_envlogsztui_gateway_crash.logcddl}dj|j|||} tjtj j tdttdd5}|jdtjd d |j|dddt|jr*t|jjdn |j }t#d |j d |t$j&d t%j(|||y#1swYxYw#t$rYwxYw)NrTexist_okautf-8encodingu === unhandled exception · %Y-%m-%d %H:%M:%S === z[gateway-crash] : fileflush) tracebackjoinformat_exceptionosmakedirspathdirname _CRASH_LOGopenwritetimestrftime Exceptionstrstrip splitlines__name__printsysstderr__excepthook__)exc_type exc_valueexc_tbr)traceffirsts E/root/.hermes/venv/lib/python3.12/site-packages/tui_gateway/server.py _panic_hookrE;s# GGI..xFK LE  BGGOOJ/$? *cG 4  GG/ >Q0R/SSYZ  GGEN   y>   ! I))+A.     X../r% 9 RVWxF3#      s*A E2:E,EE E EEc~ddl}dj|j|j|j|j } t jt jjtdttdd5}|jdtjd d |jj d |j|dddt%|jj'r4t%|jj'j)dn|jj*}t-d |jj d |jj*d|t.j0dy#1swYxYw#t"$rYwxYw)NrrTrrr r!u === thread exception · r#u · thread=r$z[gateway-crash] thread z raised r%r&)r)r*r+r>r? exc_tracebackr,r-r.r/r0r1r2r3r4threadnamer5r6r7r8r9r:r;r<)argsr)rArB first_lines rD_thread_panic_hookrLXsb GG""4==$..$BTBTU E   BGGOOJ/$? *cG 4  GG,T]];N-O,PQ![[--.f6  GGEN   t~~  $ $ & DNN!!#..03 ]] # #  !$++"2"2!38DMMhiddenexpanded collapsed>(cli.execpet.info pet.cells pet.hatch pet.thumb pet.select shell.exec slash.exec usage.bars llm.oneshot pet.gallery pet.generate process.list session.list setup.status billing.state complete.path model.options projects.tree session.usage skills.managebrowser.managecomplete.slashplugins.managesession.branchsession.resumebilling.step_uplearning.framesprojects.for_cwdsession.compresssubscription.statesession.active_listsetup.runtime_checksubscription.changesubscription.resumesubscription.previewsubscription.upgradeprojects.record_reposprojects.discover_reposprojects.project_sessionsHERMES_TUI_RPC_POOL_WORKERS8ztui-rpc) max_workersthread_name_prefixc0tjddS)NFT)waitcancel_futures)_poolshutdownrDrsE$Grc(eZdZdZdedefdZddZy)_DropTransportzGDetached WS sink: keep sessions resumable without writing stale frames.objreturncyNFr)selfrs rDr2z_DropTransport.writesrNcyNr)rs rDclosez_DropTransport.closesrrN)r9 __module__ __qualname____doc__dictboolr2rrrrDrrsQ$rrctSr) _real_stdoutrrrDrr%s,rcNeZdZdZd dedededzfdZdZdZd ed efd Zd Z y) _SlashWorkerz3Persistent HermesCLI subprocess for slash commands.N session_keymodel profile_homec tj|_d|_g|_t j |_tjddd|g}|r|d|gz }d|_ ddl m }td }|rt||d <tj |tj"tj"tj"dd t%j&||d |_tj*|j,d j/tj*|j0d j/y)Nr-mztui_gateway.slash_workerz --session-keyz--modelFwindows_hide_flagsTinherit_credentials HERMES_HOME) stdinstdoutr<textbufsizecwdenv creationflagsstart_new_sessiontargetdaemon) threadingLock_lock_seq stderr_tailqueueQueue stdout_queuer; executable_closedhermes_cli._subprocess_compatrrr6 subprocessPopenPIPEr,getcwdprocThread _drain_stdoutstart _drain_stderr)rrrrargvrrs rD__init__z_SlashWorker.__init__0s^^%  &(6;kkm NN  &      Y& &D D$= "%\!2C $$ //???? ,."     2 24@FFH 2 24@FFHrc|jjxsgD]1} |jjt j |3|jjdy#tj $rYewxYwr)rrrputjsonloadsJSONDecodeError)rlines rDrz_SlashWorker._drain_stdoutcsrII$$* D !!%%djj&67  d#''  s.A++BBc|jjxsgD].}|jdx}s|j|gzdd|_0y)N i)rr<rstripr)rrrs rDrz_SlashWorker._drain_stderrksRII$$* ED{{4((t($($4$4v$=st#D  Ercommandrc |jj td|j5|xjdz c_|j}|jj j tj||ddz|jj j |jjt}|ns|jd|k7r:|jdst|jd d t|jd d j!cdddStd |j"r0dt%dj'|j"ddzd #tj$r tdwxYw#1swYyxYw)Nzslash worker exitedr)idrrtimeoutzslash worker timed outrokerrorzslash worker failedoutputrzslash worker closed piper% i)rpoll RuntimeErrorrrrr2rdumpsr(rget_SLASH_WORKER_TIMEOUT_SrEmptyr6rrchrr*)rrridmsgs rDrunz_SlashWorker.runps 99>>  '45 5 ZZ  IINI))C IIOO ! !$**CG-L"MPT"T U IIOO ! ! #A++//8O/PC;774=C'wwt}&swww8M'NOO3778R0188:#  &*Y]YiYi4#b',,t?O?OPRPS?T2U+U*rs oq*rs {{A&'?@@A  s,BF:8 FA,F:A F:F77F::Gct|ddryd|_|j} |j#|j  |j d|j|j|jfD]} |jy#t $r6|j |j dn#t $rYnwxYwYxwxYw#t $r6 |j|j dn#t $rYnwxYwYwxYw#t $rYwxYw#|j|j|jfD]"} |j#t $rY wxYwwxYw)NrFTrr) getattrrrr terminaterr5killrrr<r)rrstreams rDrz_SlashWorker.closesV 4E *  yy yy{" IIaI( ::t{{DKK@ LLN !IIK ! ,$      ! $    ! ::t{{DKK@ LLN  s CB=DC*B=<C= C CC  C CCC D"C?>D? D D D  DD#DD# D D #'E- EE- E( %E-'E( (E-r) r9rrrr6rrrrrrrrDrr-sK=1IC1I1I3:1If$E 336rrrctjd}t|tsi}t |jddxsdj j }|dvr|SdS)Ndisplaybusy_input_moder>rsteer interruptr _load_cfgr isinstancerr6r7lowerrraws rD_load_busy_input_modersakooi(G gt $ gkk+R06B 7 = = ? E E GC883IkIrctjd}t|tsyt |jddS)uReturn whether interim assistant commentary should be surfaced to UIs. Honors ``display.interim_assistant_messages`` (default true). When false, the tui_gateway does not install ``interim_assistant_callback``, so interim text from tool-call turns and verify-on-stop candidates is never emitted as ``message.interim`` — mirroring the messaging gateway's gating. rTinterim_assistant_messages)rrrrr)rs rD _load_interim_assistant_messagesr s8kooi(G gt $ 7;;'CTJ KKr event_type session_idplatformcX ddlm}|||t|y#t$rYywxYw)z-Fire session lifecycle hooks with CLI parity.r invoke_hook)r rN)hermes_cli.pluginsr_resolve_agent_platformr5)r r r _invoke_hooks rD_notify_session_boundaryrs4  B !,X6    s  ))tui)surfacerlive_session_idrc ddlm}|||td|iS#t$r }tj d|Yd}~yd}~wwxYw)Nr)try_acquire_active_sessionr)r rconfigmetadataz'Failed to claim active session slot: %sNN)hermes_cli.active_sessionsrrr5loggerwarning)rrrrexcs rD_claim_active_session_slotr"sN I)";'9   @#Fs AAAsessionc|sy|jdd}|y |jy#t$rtj ddYywxYw)Nactive_session_leasez%Failed to release active session slotTexc_info)popreleaser5rdebug)r#leases rD_release_active_session_slotr,sR  KK. 5E }M  M  racpclircrontestlocalwebuidesktopwebhooksubagent api_servermsgraph_webhooksourcec|xsdjj}|tvry ddlm}||y#t $rYywxYw)uTrue when ``source`` names a messaging-gateway platform whose session lifecycle belongs to the gateway, not to this TUI backend. Structural rather than a hardcoded platform list: any source that resolves to a known gateway ``Platform`` (built-in enum member OR a registered platform plugin, via ``Platform._missing_``) counts, so new platforms are covered automatically. Local/self-owned sources are excluded explicitly — ``local``/``webhook``/``api_server`` are Platform members but their sessions are not owned by a remote chat surface that routes by session_key, so reaping them is safe and keeps /resume clean. rFr)PlatformT)r7r_NON_GATEWAY_SOURCESgateway.configrDr5)rBsrcrDs rD_is_gateway_owned_sourcerH1sO ?5"5t<  &&x0   6  "5,=2;;}b1 eWi8  D9BU  W8O)P   ' ' 0++m,K d3B{J2JPW@XY  B~nnZ0)26*B6*J&J#&NN:z: @w{{6*0b1 #",5OO,="( 5 G+'0H!"" 2EK-2.2!)  ^,  LLN m 7 7*  ,       8    ""           s.I< J A J>J) AJ9 &K%K K-K2K:K%#K4<J JJ J&%J&) J65J69 KKK K K"K%!K""K%% K10K14 L?LrJc|syt|| ddlm}|jdx}r|| |jd}|t |dr|j yyy#t$rY>wxYw#t$rYywxYw)aFully tear down a session: finalize, unregister, close agent + worker. Shared by ``session.close`` and the orphaned-WS-session reaper. The slash-worker subprocess is closed inside ``_finalize_session`` (the single finalize chokepoint); this still unregisters the approval notifier and closes the in-process agent. Idempotent: the ``_finalized`` guard in ``_finalize_session`` and the ``poll()`` guard in ``_SlashWorker.close`` make repeat calls harmless. Nrrrunregister_gateway_notifyrrNr)rqtools.approvalrurr5r`r)r#rJrukeyrNs rD_teardown_sessionrxs g*5 <++m, ,3 , %c *  G$  !8 KKM"9        s"!A&/A5& A21A25 BBct5tj||ur||d< dddy ddd|jy#1swYxYw)uStore worker on session iff sid still maps to it, else close it — a concurrent teardown already popped the session and would orphan the worker. Closes the create/close race at every slash-worker spawn site.r]N)rerQrr)r-r#rps rD_attach_workerrzsR  ==  (&,GN #  ( LLN s AAcxt5tj|d}dddy||d<|S#1swYxYw)aAtomically detach one live session from the registry. Detaching is the ownership claim for teardown: once the record is no longer in ``_sessions``, a concurrent close/reaper becomes a no-op. Keep this operation separate from ``_teardown_session`` because finalization can flush SQLite state, invoke plugins, commit memory, interrupt delegations, and close agents/workers. None of that slow external work belongs under the global ``_session_resume_lock``. NrZ)rerQr()r-r#s rD_pop_session_by_idr|sD +--T*+GFO N++s09c$|yt||y)zDFinish a close after the caller has atomically detached the session.FrrT)rx)r#rJs rD_teardown_popped_sessionr~sg*5 rc.tt||S)a}Single idempotent teardown funnel for callers needing no resume race. Resume-sensitive callers first pop under ``_session_resume_lock`` and then call ``_teardown_popped_session`` after releasing it. Other reapers can use this convenience wrapper directly. The pop remains the single atomic ownership claim, so concurrent/repeat close attempts stay harmless. rr)r~r|)r-rJs rD_close_session_by_idr#s $3J rc||r|jdry|jdry|jdtuS)aTrue if a WS session has no live transport and no in-flight turn. After ``handle_ws`` detaches a disconnected client it points the session at ``_detached_ws_transport``. A session left on that transport (and not mid-turn) is genuinely orphaned and safe to reap. rLFrunning transport)r_detached_ws_transportr#s rD_ws_session_is_orphanedr0s9 gkk,/{{9 ;;{ #'= ==rctdkrydfd }tjt|}d|_|j y)a+After a grace window, reap session ``sid`` iff it's still orphaned. Called from the WS-disconnect path. The grace window lets a transient reconnect (or a ``session.resume`` that reattaches the transport) cancel the reap by re-binding a live transport. Disabled when the grace is 0. rNct5ttjs dddyt }dddt dy#1swYxYw)Nws_orphan_reaprr)_session_resume_lockrrQrr|r~r#r-s rD_reapz'_schedule_ws_orphan_reap.._reapHsT" .*9==+=> . .)-G . !5EF  . .s A AATr)_WS_ORPHAN_REAP_GRACE_SrTimerrr)r-rtimers` rD_schedule_ws_orphan_reapr>s9!#G" OO3U ;EEL KKMr ws_disconnectczt5tjDcgc]\}}|jd|us||f}}}dddd}d}D]C\}}|jdrt |||dz }*t |d<|dz } t |E||fScc}}w#1swY_xYw#t$rYgwxYw)uOn transport disconnect, reap the sessions that opted into close_on_disconnect (sidecar/dashboard) immediately via the unified ``_close_session_by_id`` path, and re-point the rest back to stdio so later emits don't hit a dead socket. Non-flagged detached sessions are handed to the grace-windowed WS-orphan reaper (``_schedule_ws_orphan_reap``): a quick reconnect / session.resume that re-binds a live transport cancels the reap, otherwise the orphan is torn down through the same idempotent ``_teardown_session`` path. This is the single WS-disconnect teardown entry point — there is no second independent reap loop in ``handle_ws``. Returns ``(reaped, detached)`` counts for disconnect-path observability.rNrclose_on_disconnectrrr)rerQrfrrrrr5)rrJr-sownedreapeddetachedr#s rD_close_sessions_for_transportr^s ^(1(9]fc1QUU;=OS\=\#q]]^ FH  W ;;, -  < aKF $:GK MH (-  8 #^^^   s3B"BBB" B.B""B+. B:9B:ct5tt}dddD]}t|dy#1swYxYw)N tui_shutdownrr)rer_rQr)sidsr-s rD_shutdown_sessionsrs< I=S^<=s4=HERMES_TUI_SESSION_TTL_Si`Tgr@c2|turyt|ddduS)NTr)rr)rs rD_transport_is_deadrs$ ** 9i .$ 66rnowc|jds t|ry|jd}|"|js|jdsyt|jdsyt |jdxsd}t |jdxsd}||z t kDxr ||z t kDS) NrF agent_readylazyr last_activer] created_at)r_session_pending_kindis_setrfloat_SESSION_TTL_S)r-r#rreadyrrs rD_session_is_evictablers{{9!6s!; KK &E  F8K gkk+6 7 M29c:Kw{{<07C8J +  / WS:5E4WWrc tj}t5tjDcgc]\}}t |||s|}}}dddD]}t |dt ycc}}w#1swY.xYw)N idle_timeoutrr)r3rerQrfrr_enforce_session_cap)rr-rvictimss rD_reap_idle_sessionsrs{ ))+C ^%.__%6]63:OPSUVX[:\3]]^=S^<=^^^s"A=A7 A7 A=7A==Bc ddlm}txsi}|jd}|2|jd}t |t r|jd}||d}|r t |SdS#t$rYywxYw)Nr)coerce_max_concurrent_sessionsmax_live_sessionsgatewayrw)rrrrrrintr5)rcfgr gateway_cfgcoerceds rD_max_live_sessionsrs MkRgg)* ;''),K+t,!oo&9:0:MN&s7|-A- sA/A42A44 B?Bc|jds t|ry|jd}|"|js|jdsyt|jdS)NrFrrr)rrrrr-r#rs rD_session_is_lru_evictablersY{{9!6s!; KK &E  F8K gkk+6 77rc pt}|dkryt5tt}||kr dddytj Dcgc]\}}t ||s||f}}}dddj d|z }|d|D]\}}t|dycc}}w#1swYBxYw)NrcDt|djdxsdS)Nrrr])rr)kvs rDrz&_enforce_session_cap..s%1 -(@(GC"Hrr lru_evictrr)rrelenrQrfrsortr)captotalr-r evictableoverflow_ss rDrrs  C ax  I C<   $-??#4 a8QRUWX8YS!H   NNHNIs{HYh':RS[9:   s(B,B, B&"B&(B,&B,,B5cdd}tjd|}d|_|jy)zHRun the LRU sweep off the response path (eviction can call agent.close).cf ty#t$rtjddYywxYw)Nzsession cap enforcement failedTr&)rr5rr*rrrD_runz/_schedule_session_cap_enforcement.._runs0 J " J LL9DL I Js 00皙?TNrrrr)rrs rD!_schedule_session_cap_enforcementrs*J OOC &EEL KKMrcTd}tj|djy)Ncl tjt t%#t$rY wxYwr)r3sleep_REAPER_SCAN_Srr5rrrD_loopz!_start_idle_reaper.._loops5 JJ~ & #%  s ' 33Tr)rrr)rs rD_start_idle_reaperrs"E$/557rctddlm} |adatStS#t$r+}t |at jd|Yd}~yd}~wwxYw)Nr SessionDBuJTUI session store unavailable — continuing without state.db features: %s)_db hermes_staterrVr5r6rr )rr!s rDrarasX {* +CI J3J CI NN\   s # A!AAcodec6txsd}t||d|S)Nzstate.db unavailablezstate.db unavailable: )rV_err)rrdetails rD_db_unavailable_errorr!s$  00F T3F8< ==rprofilec<|xsdj}|sy ddlm}t|j |}|j ttj k(ry|dz js|jr|SdS#t $rYywxYw)zLResolve a named profile's home on THIS host, or None for the launch profile.rNr)profilesstate.db) r7 hermes_clirrget_profile_dirr5resolve _hermes_homeexists)rrI profiles_modhomes rD _profile_homer.s Mr "D 7L0067 ||~l+3355:%--/4;;=4JdJ s B BBcfd}|S)aBind ``params['profile']``'s HERMES_HOME around a pet RPC handler. Pets are per-profile: ``display.pet.*`` lives in the profile's config.yaml and sprites install under its ``pets/`` dir (both resolve via ``get_hermes_home``). The desktop sends ``profile`` on pet calls so config + pets dir resolve to the focused profile even in app-global remote mode, where one backend serves every profile. No-op for the launch profile (own-profile backends already resolve it). ctt|tr|jdnd}| ||St |} ||t |S#t |wxYw)Nr)rrrrr r )rparamsrtokenhandlers rDwrapperz _profile_scoped..wrapperIs_j6NVZZ 2TXY <3' '(. .3' &u - &u -s A A&r)rrs` rD_profile_scopedr?s. Nr>rauto.rct|tsy|jd}t|tsyt|jdxsdj }|r|t vryt jjt jj|}t jj|r|SdS)zReturn an absolute, existing ``terminal.cwd`` from a config mapping. Returns None for placeholders (``.``/``auto``/``cwd``), missing values, or paths that don't resolve to a real directory. Nterminalrr) rrrr6r7_CWD_PLACEHOLDERSr,r.abspath expanduserisdir)r terminal_cfgrresolveds rD_configured_cwd_from_cfgr\s c4 77:&L lD ) lu%+ , 2 2 4C #**wwrww11#67Hww}}X.88D8rrc|y ddl}t|dz }|jsyt|d5}|j |xsi}dddt S#1swYxYw#t $rYywxYw)aResolve a non-launch profile's ``terminal.cwd`` from its own config.yaml. The desktop's app-global remote mode serves every profile from one backend, so the process-global ``TERMINAL_CWD`` belongs to the *launch* profile. A new session bound to another profile must take its workspace from THAT profile's config, not the stale env var (issue #40334). Returns an absolute, existing directory, or None for placeholders / missing / invalid paths. Nr config.yamlr r!)yamlrrr1 safe_loadrr5)rrprBdatas rD_profile_configured_cwdrns    .xxz !g & +!>>!$*D +'-- + + s-"A* A*A A*A'#A** A65A6cH ttS#t$rYywxYw)u3Resolve the launch profile's ``terminal.cwd`` from config.yaml. Dashboard ``/chat`` for the launch profile attaches to the dashboard process's in-memory TUI gateway. The Node PTY child receives a bridged ``TERMINAL_CWD`` env var, but this in-memory process does not — so reading the process env alone leaves a fresh chat starting in ``os.getcwd()`` (wherever ``hermes dashboard`` was launched) instead of the configured ``terminal.cwd``. Read config directly so changing ``terminal.cwd`` affects new in-memory TUI sessions too. N)rrr5rrrD_launch_configured_cwdrs&' 44 s  !!cptxs+tjdxstjS)aOFallback cwd for a session with no explicit / stored / profile cwd. Mirrors the launch-config-aware tail of :func:`_completion_cwd` so freshly created AND resumed sessions land in the configured ``terminal.cwd`` rather than ``os.getcwd()`` when the in-memory gateway's process env has no bridged ``TERMINAL_CWD``. TERMINAL_CWD)rr,getenvrrrrD_default_session_cwdr s& " # Oryy'@ OBIIKOrrc6|jddk(re|jdxsijdxsd}|r;tj|xsijdx}|j|Stxstj|S)uAEmit one JSON frame. Routes via the most-specific transport available. Precedence: 1. Event frames with a session id → the transport stored on that session, so async events land with the client that owns the session even if the emitting thread has no contextvar binding. 2. Otherwise the transport bound on the current context (set by :func:`dispatch` for the lifetime of a request). 3. Otherwise the module-level stdio transport, matching the historical behaviour and keeping tests that monkey-patch ``_real_stdout`` green. methodeventrr rr)rrQr2r_stdio_transport)rr-ts rD write_jsonrs wwxG#!'R,,\:Ar )--,277 DDAQ773<    3#3 : :3 ??rr payloadc:||d}|||d<tdd|dy)N)typer r2.0r )jsonrpcr r)r)r r-rrs rD_emitrs+3 /F#y5GvFGrcFtjjddk(S)NHERMES_COMPUTE_HOST_CHILD1)r,environrrrrD_inside_compute_host_childrs ::>>5 6# ==rchtry|xs t}t|jdS)NFturn_isolation)r(_load_dashboard_process_isolation_configrr)r isolation_cfgs rD_turn_isolation_enabledrs0!#ECEM  !!"23 44rct|syt|jdxs(|jdduxr|jdduS)NF_compute_host_activerNr)rrr)r#rs rD_session_uses_compute_hostr"sO "3 '  23 4  G$O])C4)Orc |xs t}t5tMddlm}|t t |jdxsdt |jdxsdatcdddS#1swYyxYw)Nr)HostSupervisorcompute_host_heartbeat_secscompute_host_respawn_max)rpc_sinkheartbeat_secs respawn_max)r_compute_host_supervisor_lock_compute_host_supervisortui_gateway.host_supervisorr$rrr)rrr$s rD_get_compute_host_supervisorr/sxECEM & ( # + B'5#"=#4#45R#S#YWYZ 1 12L M RQRS( $ ( ( ( (s AA88Brrc|d5t|jdg}t|jdd}t|jdg}dddd|||jdxs||t|jdd xsd t||jd xsd |jd |jd |jdt |dS#1swYxYw)NrOrPhistory_versionrattached_imagesz turn.startrcolsPrrmodel_overridecreate_reasoning_overridecreate_service_tier_override)rr- request_idrrrPr1r3rrr5reasoning_config_overrideservice_tier_overriderBr2)r_rr _session_cwdr2)rr-r#rrPr1r2s rD_compute_host_turn_framer<s  Cw{{9b12gkk*;Q?@w{{+r>s+m !3 4F-6525rframec t|tsy|jdtj5|jdrt |jd|d<|jdE t t|jddt|jdxsd|d<|jd" t|jdxsd|d<ddd|jd}t|trBtt|}|j|||d <tj|d <yy#t$rYwxYw#t$rYwxYw#1swYxYw) a%Mirror host-owned session metadata in the serving process. The compute host is the only writer of live agent/history state while turn isolation is active. The serving process keeps read metadata from the last host frame so UI reads do not construct a second in-process agent. NrOrr1r message_count_metadata_message_count session_infor>_metadata_mirror_updated_at) rrrrrr6maxrr5r>updater3)r#r@infor?s rD#_apply_compute_host_metadata_mirrorrIsb eT " ^Y^^%5 6 99] #%(=)A%BGM " 99& ' 3 -0 $5q9: "349:.)* 99_ % 1 58?9S9XWX5Y12 99^ $D$&w/0 d&,"#15-.      sOAE87AE;E8 !E) E&#E8%E&&E8) E52E84E55E88Fc 2|jddk(}|d5|jdrt|jd|d<|jdE tt|jddt|jdxsd|d<d|d<t j |d <t |ddd|r1t|jd xsd }td |d |ddt|| t|jd|}|jds td||t|||y#t$rYwxYw#1swYxYw#t$rt|jd}YlwxYw)Nrz turn.errorrOrr1rFrrmessagezcompute host turn failedmessage.completeError: r)rstatusrNsession_info_emitted session.info) rr6rFrr5r3_clear_inflight_turnrrI _session_info TypeError_drain_queued_prompt)rr-r#r@is_errorrKrHs rD_on_compute_host_turn_donerV%syy L0H  & 99] #%(=)A%BGM " 99& ' 3 -0 $5q9: "349:.)* # !% W% &eii *H.HI  #''0Cw'WX'73W[[17; 99+ , nc4(c7+   & &( 3W[[123sCAE$AE'E$E0 E!E$ E!!E$$E-0#FFcDt}t|}dtddffd } t|j ||d5dd <gd <dddtd dd S#t $r}t dd|cYd}~Sd}~wwxYw#1swY>xYw) NdonercL|jddk(ryt|y)Nr\ send_failed)rrV)rXrr#r-s rD _completez1_submit_prompt_to_compute_host.._completeFs' 88H  . "3Wd;r) on_completezcompute-host dispatch failed: rOTr!r2 streamingrNr)rr<rr/ submit_turnr5r_ok)rr-r#rrr@r[r!s``` rD_submit_prompt_to_compute_hostrbBs 2 4C $S#w =E<<<G$S)55e5S  (*.&'%'!"( s{dC DD GC!?uEFFG((s)A0 B0 B9BBBBrT)rrr route_namerrct|xsi}|jdd|jd|tj||||S)Nrcontrolr)rcrr)r setdefaultr/re)r-rcrrrr@s rD_send_compute_host_controlrgYsY B E VY' Y( ' ) 1 1   2 rrc t|xsi}d|vr?|jdrddg|d<n&|jddurgd|d<n d|vrgd|d<d |vr d d lm}||jd |d <t d ||y )uEmit an ``approval.request`` event to the TUI client with the command redacted. The approval payload is built from the RAW command string, so a credential-shaped value Tirith flagged would otherwise be echoed verbatim to the TUI client (#48456 — third egress transport alongside the chat platforms and the SSE/API stream fixed in #50767). Reuse the shared gateway seam so all approval transports redact consistently.choices smart_deniedoncedenyallow_permanentF)rkr#rl)rkr#alwaysrlrr)_redact_approval_commandzapproval.requestN)rr gateway.runror)r-rrros rD_emit_approval_requestrqls4:2G ;;~ &"(&!1GI  [[* +u 4!AB >BB BBresultcd||dS)Nr)rrrr)rrs rDrarasC6 ::rrcd|||ddS)Nr)rrK)rrrr)rrrs rDrrsC4C2P QQrrIcfd}|S)Nc|t<|Sr)rR)fnrIs rDdeczmethod..decs rr)rIrs` rDr r s Jrreqc0t|ts tdddS|jd}|jd}t|tr|s t|ddS|jdi}|i}nt|ts t|dd S|||fS) z;Validate a JSON-RPC request enough for safe local dispatch.Niz#invalid request: expected an objectrr z2invalid request: method must be a non-empty stringriz"invalid params: expected an object)rrrrr6)rrr rs rD_normalize_requestrs c4 D&"GHH ''$-C WWX F fc "&C!UVV WWXr "F ~  %C!EFF  rct|}t|tr|S|\}}}tj |}|st |dd|S|||S)Nizunknown method: )rrrrRrr)r normalizedrr rrs rDhandle_requestrs\#C(J*d#$C f B C#3F8!<== c6?rrcn |xst t } t}t|tr |t |S|\}}}|t vrtt |Stj fdtjfd t |y#t |wxYw)uRoute inbound RPCs — long handlers to the pool, everything else inline. Returns a response dict when handled inline. Returns None when the handler was scheduled on the pool; the worker writes its own response via the bound transport when done. *transport* (optional): pins every write produced by this request — including any events emitted by the handler — to the given transport. Omitting it falls back to the module-level stdio transport, preserving the original behaviour for ``tui_gateway.entry``. c t}|j |yy#t$r)}tjddd|}Yd}~Bd}~wwxYw)Nrizhandler error: )rr5rrr2)respr!rrs rDrzdispatch..runs\ L%c*   LCGGDM6_SE3JK Ls # AAAc&jSr)r)ctxrsrDrzdispatch..sSWWS\rN) r rrrrr_LONG_HANDLERSr contextvars copy_contextrsubmit) rrrr_ridr _paramsrrrs ` @@@rDdispatchrs %%A 1 E', j$ '* '!+fg  '!#&" &&(   )*sB'B''3B'' B4rc|jd}||j|s t|ddS|jd}|r t|d|SdS)Nrrzagent initialization timed out agent_error)rrr)r#rrrerrs rD _wait_agentrsW KK &E G!<C?@@ ++m $C#&4T3 0D0rc|jdy|jdr(tt|jdxsdry|jdt j }|5j s|jdr dddyd|d<|jddddd|dd fd }t j|d jy#1swY._build..zs&._build..sU$dVS\,BNr)seed_credits_at_session_startrMon_session_resetconfig_warningrPrrrKzagent init failed: rt)*rerQrr^_set_session_contextr rrrr5r2rrrG _make_agent_clear_session_context_config_model_targetrr_resolve_modelrzrvrr_wire_callbacksbackground_review_callback_load_memory_notificationsmemory_notificationsagent.credits_trackerr_start_notification_pollerrrR_probe_config_healthrrr r_schedule_mcp_late_refreshr6r ru)currentrpnotify_registered home_tokenrtokensrrkw resume_sidresume_overridesoverride reasoningtierrNrrrrHcfg_warnereplacedrurwrr-s rD_buildz"_start_agent_build.._build+sd  )mmC(G ) ? IIK ! {{>2 D )#.FJ5lC &6!*4 3E 3R!SJ /#J/!(-@!AA:A'1B|$*9'*B&'#*;;/I#J .5:J II./ $+;;/?#@@x@/7+,%,[[1L%MM Z:C67 ' ,J KKX6:23#C33&v. %GG ,@+AG' ( %E7N,<=!(^!< sGV4  (G%)!(* C  HK40.H-I*  O-e4  d)#4NsT]^aTb4cIcN=1 d %%7og>V W 0D+IK8H)1%&x( .#t , 'sE 2 %*:6  =$==-W< =-H-c2 IIK] ) ),!&!%J&<'v.          d d  H%(VGM " '3.A!,E F G G H = =!%*:6  =$==-W< = = =-H-c2  IIKscKM,K+B4K=<M=L L5 ML-L=)M/&M A2MN?NK(+ K:6M9K::M= L  M LMLM L*&M)L**M- L:6M9L::M= M M M  M MM N# N N, NN,N N)(N),P!O! P!!O* & P!2PP! P  P! P  P!rr) r_child_run_activer6rfrrrr(rr)r-r#rhrrwrs` @@rD_start_agent_buildr s KK &E }{{60W[[5O5USU1VW   0)..2B CD " <<>W[[)>? ""*.%&  FD! " - CObF40668u""s7#C5#C55C>c|tj|jdxsd}|r|dfSdt|ddfS)Nr rsession not found)rQrr)rrrs rD _sess_nowaitrs> fjj.4"5AAt9Kd36I&JKKrct||\}}|rd|fSt|jdxsd||t||fS)Nr r)rrrr)rrrrs rD_sessrsI &# &FAs c{vzz,/52q9 {1c" ##r path_partc(tjj|}tjdk7r_|j dd}t |dk\r?|ddk(r7|ddk(r/|dj rd |djd|ddS|S) Nnt\/r(r:rrz/mnt/)r,r.rrIreplacerisalphar)rrdrs rD_normalize_completion_pathrsww!!),H ww$%%dC0  Oq 1 $1 $1 %%':a=..01:ab>2BC C Orrc|xsi}|jdxstj|jdxsdijdxsftt|jdxsAt xs5t j jdxst j} t jjt jjt|}t jj|r|S t jS#t$rYt jSwxYw)Nrr rrr)rrQrrrr,rrr.rrr6rr5)rrrs rD_completion_cwdrs  \rF 5  ==L17R < @ @ G  #=I1F#G H  " #  ::>>. )  99; 77??277#5#5c#h#?@ 77== "O # 99;   99; s;A%D66 EEctjjdxsdjj }|r|dk(rn t jdi}t |trCt|jdxsdjj }|r|dk7r|}|r|dk7rtjjddj}|sW t jdi}t |tr,t|jdxsdj}|r|dvr|St|S#t$rYwxYw#t$rd}Y/wxYw) aReturn the cwd that terminal_tool should use for this TUI session. ``_completion_cwd`` validates paths on the host so file completion does not point at nonsense. Non-local terminal backends are different: their cwd is inside the target environment, so an SSH path like /home/user/workspace may not exist on the local macOS host but is still the correct execution cwd. When ``TERMINAL_ENV`` is unset (dashboard/TUI process) the config's ``terminal.backend`` is consulted as a fallback so the non-local cwd resolution path is taken even when the dashboard entrypoint did not call ``apply_terminal_config_to_env`` on its own ``os.environ``. TERMINAL_ENVrr;rbackendrr>rrr) r,rrr7rrrrr6r5r;)r#rr cfg_backendrs rD_terminal_task_cwdrsIzz~~n-3::<BBDG g( $;??:r:L,-!,"2"29"="CDJJLRRT ;'#9)G7g%jjnn^R0668 ({z2> lD1l..u5;<BBDC 322J        s&A-E-AE% E"!E"% E32E3cX|r|jdrt|dStS)Nr)rr6rrs rDr;r;&s(7;;u%75>""  rrc|xsdj}|rtjj|r|S|}t dD]M}tjj |}|r||k(rn%|}tjj|sMntjj|s|S t |xs t|}|xs|S#t$rd}YwxYw)uResolve a session cwd that points at a now-deleted directory. A session anchored to a linked worktree (``/.worktrees/``) keeps that path after the worktree is removed (branch merged, `git worktree remove`, etc). The literal dir is gone, so a probe of it returns nothing and the composer shows no branch — while the sidebar still folds the path up to the repo's main lane. Heal the mismatch: walk up to the first existing ancestor, then resolve its common git root, so a dead-worktree cwd collapses to the live repo root (and its real current branch). Only meaningful for local backends; a remote/SSH cwd may legitimately not exist on the host, so callers must skip healing there. r@) r7r,r.rranger/_git_common_repo_root_for_cwd_git_repo_root_for_cwdr5)rrprobe_parentroots rD_heal_dead_cwdr,s 9"   C "''--$ E 2Y'5  77==    77==  ,U3T7Me7T =5 s7C C#"C#ctjjdxsdjj }| xs|dk(S)Nrrr;)r,rrr7r)rs rD_is_local_terminal_backendrSs=zz~~n-3::<BBDG; ,'W,,rcTt|}ts|St|}|rQ||k7rL|J||d< t|5}|"|j |j dd|dddt|||S#1swYxYw#t $rtjddY))'++mR*H&Q R "'62 M R R P LL?$L O Ps( B%A8"B8B=B B'&B'cz|r0t|jdxsdj}|r|StS)NrBr)r6rr7_resolve_session_platform)r#rBs rDr2r2qs7W[[*0b1779 M $ &&rcd|sy ddlm}||ddt|iy#t$rYywxYw)Nrregister_task_env_overridesrr)tools.terminal_toolr rr5)r#r s rD_register_session_cwdrysA  C# M "U,>w,G$H     s # //c .|jd}|sy|jd}|rddlm} |t|dz }d }n t}d }|y|jd }t|tr|ni}t|jd xsdjxs t}i}dD]'\} } |j| x} st| || <)t|jdxsdjjdk(r* ddlm} | |jdxsd} | r| |d<|jdx}||d<|jd}| |xsd|d<|jdxsd}|r||d< |j!|t#|||xsd||jdr t%|nd|r |j'yy#t$rt j dd YywxYw#t$rt j dd YwxYw#t$rt j dd YwxYw#t$rYywxYw#|r! |j'w#t$rYwwxYwwxYw) u Idempotently persist the session's DB row on first real activity. Called from prompt.submit so a row only exists once the user actually sends a message — abandoned drafts never leave an empty "Untitled" session behind. Uses INSERT OR IGNORE under the hood, so re-calls (and the AIAgent's own lazy create) are no-ops. Only an *explicitly chosen* workspace is persisted as the session's cwd. The agent still runs in the auto-detected directory (session["cwd"]), but we don't stamp that onto the row — otherwise every session the user never picked a folder for gets grouped under whatever directory the desktop happened to launch in (e.g. "desktop"). Leaving it null groups them under "No workspace", which is the desired default. rNrrrrrz)failed to open profile db for session rowTr&Fr5rr))rr)providerr)base_urlr)api_moderrcustomcanonical_custom_identityrrz1custom provider identity recovery failed (db row)r6reasoning_configr7normal service_tierparent_session_id_branched_from explicit_cwdrBr model_configrrz%failed to persist desktop session row)rrrrr5rr*rarrr6r7rrhermes_cli.runtime_providerrcreate_sessionr2r;r)r#rwrrrkclose_dbr row_modelrsrc_keycfg_keyvalrrrr7rs rD_ensure_session_db_rowr&s ++m $C ;;~.L* 4 #5 #BCB Y z{{+,H%h5x2HHLL)/R0668LN(J  M.%))*5=F+1 Z( [[!<== J+4 '(#*;;/M#N #/ (D'Ox ^$ $78@D): %&  "7+%-/)0^)D W%$      _  LLDtL T  `  LLCd   8 M ._runDs R(-F05DdZ( JB>))+sFDI J J J R LLADL Q Rs3A AA A AAA A87A8zgit-metaTrrIrr)rrrr)r#rrr7rs ` @@rDrr0sU++mR0K c"-gkk.>YZJ RDz$?EEGrcbddlm}|t|}tjj tjj |}tjj|std|||d<d|d<t|t|5}|# |j|jdd|dddt!|| dd lm}||d|S#t$rtjd d YJwxYw#1swYOxYw#t$rY|SwxYw) Nr)translate_cwd_for_wsl_backend"working directory does not exist: rTrrrzfailed to persist session cwdr&) cleanup_vm)hermes_constantsr:r6r,r.rrr ValueErrorrrrrr5rr*rr r<)r#rr:rrkr<s rD_set_session_cwdr?Ss!> 'C 1Cwwrww11#67H 77== "=cUCDDGEN#GN'" W M > M%%gkk-&DhOMgx0 27=)* O M )rErFrGrs rD_coerce_int_config_valuerI~s?e**777 z "s **cL| tn|}t|tr|jdni}t|tsi}t |jdt t |jdtdt |jdtdd S) a^Return dashboard process-isolation config with read-site defaults. ``_load_cfg()`` intentionally returns raw ``config.yaml`` plus the managed overlay; it does not deep-merge ``hermes_cli.config.DEFAULT_CONFIG``. Keep the Phase-0 defaults here so dashboard runtime and the REST editor's DEFAULT_CONFIG-backed schema cannot drift. dashboardrrFr%r)rGr'r)rr%r') rrrrr!_DASHBOARD_TURN_ISOLATION_DEFAULTrI._DASHBOARD_COMPUTE_HOST_HEARTBEAT_SECS_DEFAULT+_DASHBOARD_COMPUTE_HOST_RESPAWN_MAX_DEFAULT)rrrKs rDrrs+9;3D)3D$)?%RI i & ) MM* +5 (@ MM7 8 :( %= MM4 5 7%  rc ddl}t}t|tr|r|nt}t |dz }|j r|jjnd}t5t=t|k(r4t|k(r+ttjtcdddSddd|j r,t!|d5}|j#|xsi}dddni}t5tja |a |a dddtS#1swYzxYw#1swYHxYw#1swY,xYw#t$$rYiSwxYw)Nrrr r!)rr rr6rrrstatst_mtime _cfg_lockrWrX _cfg_path_apply_managedcopydeepcopyr1rr5)rrrrmtimerBrs rDrrs=  ,-%h4x| J &%&XXZ!!T  A%**=)q.%dmmJ&?@ A A A 88:a'* /a~~a(.B / /D   t,JJI d##! A A / /     I s`A(E *:D'$ E .%E D3)E :D?E 'D0,E 3D<8E ?EE EEc ddlm}|jt|tr|SiS#t $r|cYSwxYw)utOverlay administrator-pinned managed-scope values on a config dict. The TUI/desktop backend builds config independently of hermes_cli.config.load_config, so without this a managed skin / reasoning_effort / service_tier / provider_routing would be silently ignored here. Read-side only — the raw user config is what gets cached and saved. Fail-open. r) managed_scope)rrZapply_managed_overlayrrr5)rrZs rDrUrUsA,22*S$:O3XXUWXX  s&// ==cddlm}tdz }|||t5t j |a|a |jja dddy#t$rda YwxYw#1swYyxYw)Nr)atomic_config_writer) hermes_cli.configr]rrSrVrWrWrTrQrRrXr5)rr]r.s rD _save_cfgr_sw6 - 'Dc" ]]3'   --J   J  s(A,A A)&A,(A))A,,A5c|syt5ttjD]?}|j d|k(st |j dxsdccdddS dddy#1swYyxYw)zReverse-map session_key to the session's logical cwd. Snapshots ``_sessions`` first: concurrent RPC handlers mutate it from the thread pool, so iterating the live view risks ``RuntimeError: dictionary changed size during iteration``. rrrN)rer_rQvaluesrr6)rsesss rD_cwd_for_session_keyrcsw  2))+, 2Dxx &+5488E?0b1122 22  2 s5A4A4)A44A= ui_session_idrec8 ddlm}||n t|}t}t5t t jD]#}|jd|k(st|}nddd|||||S#1swYxYw#t$rgcYSwxYw)Nr)set_session_varsr)rrBrre) gateway.session_contextrgrcr rer_rQrarr2r5)rrrergrrBrbs rDrrs < /3/CK/P*,  Y--/0 88M*k9,T2F    #'       s.%B 5A?A?+B ?BB BBrcF|sy ddlm}||y#t$rYywxYw)Nr)clear_session_vars)rhrjr5)rrjs rDrr s*  >6"    s   cvdtjd<dtjd<dtjd<y)zARoute approvals through gateway callbacks instead of CLI input().rHERMES_GATEWAY_SESSIONHERMES_EXEC_ASKHERMES_INTERACTIVEN)r,rrrrD_enable_gateway_promptsro s/+.BJJ'($'BJJ !'*BJJ#$rc*tjjdd}tj}t 5||ft |<||d<|t|ft|<dddd}d}d} t||||j|}t 5t j|dtj|d|tv}tj|d}ddd|s'|s%|dvr!t|jdd|d|i|S#1swYxYw#1swY@xYw#t 5t j|dtj|d|tv}tj|d}dddw#1swYwxYwxYw) Nrr8Frr> sudo.requestsecret.request.requestz.expire)uuiduuid4hexrEvent _prompt_lockrSrrTrrr(rU removesuffix) r r-rrrevansweredansweranswer_presents rD_blockr~* sw **,  2A C  B ?b  # ).W (> %?H FN+ eS'"7777+  + LLd # $ ( (d 3 H_N\\#r*F  + Nu8Z/Z !!*-.g 6  3  M/?? + +\ + LLd # $ ( (d 3 H_N\\#r*F  + + +s=%D0D+A DDD(+F2A F= FF Fct5ttjD])\}\}}|||k(sdt|<|j + dddy#1swYyxYw)u|Release pending prompts with an empty answer. When *sid* is provided, only prompts owned by that session are released — critical for session.interrupt, which must not collaterally cancel clarify/sudo/secret prompts on unrelated sessions sharing the same tui_gateway process. When *sid* is None, every pending prompt is released (used during shutdown). Nr)rxr_rSrfrUr^)r-r owner_sidrzs rD_clear_pendingrG s^ $()9$:  C)R{i3. "  s.AAA$c , ddlm}m}|t|}|j|j |j |j|j|j|j xsijdddS#t$ricYSwxYw)Nr)init_skin_from_configget_active_skin help_headerr)rIcolorsbranding banner_logo banner_hero tool_prefixr) hermes_cli.skin_enginerrrrIrrrrrrr5)rrskins rD resolve_skinrZ sQik* IIkk ++++++ MM/R44]BG    sBB BBctjjddxs tjjddj}|r|St jdd}t |t r-t|jddxsdjSt |tr|r|jS ddlm }|S#t$rYywxYw) N HERMES_MODELrHERMES_INFERENCE_MODELrrFr)"get_preferred_silent_default_modelz z-ai/glm-5.2) r,rrr7rrrr6hermes_cli.modelsrr5)rmrs rDrrm s ~r* 8 ::>>2B 7 eg   $A!T155B'-2.4466!SawwyH133 s C C('C(cttjjdr)ttjjdsyy)uResolve the platform tag for a tui_gateway-routed session. The desktop app's chat panel and the standalone TUI both speak to this gateway; without a branch they all get stamped ``platform="tui"``, which makes the agent think it's talking to a terminal user. That mis-tag is the root cause of the desktop chat agent suggesting TUI-only slash commands (``/reload-mcp``, …) to chat-panel users. Resolution: * ``HERMES_DESKTOP=1`` and ``HERMES_DESKTOP_TERMINAL`` unset → "desktop" (the chat-panel backend — a graphical React surface, not a terminal). * ``HERMES_DESKTOP_TERMINAL=1`` → "tui" (``hermes --tui`` running in the desktop's embedded terminal pane; it IS a TUI, just embedded. The clarifier attached to the tui hint in system_prompt.py tells the agent about the embedding.) * neither set → "tui" (standalone ``hermes --tui``.) HERMES_DESKTOPHERMES_DESKTOP_TERMINALr=r)rr,rrrrrDr r  s;&rzz~~&678 01B rexplicitc|r|StS)uQDefault the session DB ``source`` field from the resolved platform. A caller that explicitly passes ``source`` (e.g. a plugin session tagged ``"telegram"``) keeps its value. Only an empty/None ``source`` falls back to the env-resolved platform — so env-driven resolution never silently rewrites a caller's intent. )r )rs rD_resolve_session_sourcer s $ &&rct|Sr)r)rBs rDrr s "6 **rctjd}d}d}t|trrt |jddxsdj }t |jdxsdj }|j dk(rd}||fSt|tr|j }||fS)u(model, provider) currently selected by config.yaml — and ONLY config. Unlike `_resolve_model()`, this never reads HERMES_MODEL / HERMES_INFERENCE_MODEL. Those env vars are a launch-scoped seed (`hermes --tui -m `, hosted-instance provisioning); if they fed the per-turn sync, the seed would be replayed as a /model switch and persisted globally, or would pin the session so dashboard/CLI model changes never reach an open chat. rrrFrrr) cfg_modelrrs rDrr s (I EH)T"IMM)R06B7==?y}}Z06B7==? >> v %H (? Is #! (?rct}tjjddj }|r||fStjjddxs tjjddj }|s|dfS ddlm}tjdxsi}t|tr:t|jdxsdj jndxs@tjjd dj jxsd }|||}|r |\}}||fS |dfS#t$rY|dfSwxYw) NHERMES_TUI_PROVIDERrrrr) detect_static_provider_for_modelrrHERMES_INFERENCE_PROVIDERr) rr,rrr7rrrrrr6rr5) rexplicit_providerexplicit_modelrrcurrent_providerdetectedrdetected_models rD_resolve_startup_runtimer sf  E '>2B 7 eg d{ Fkoog&,"c4(CGGJ'-2.446<<>  zz~~92>DDFLLN    4NDTU '/ $Hn!8+ +  $;   $; sCE E/.E/>rr openrouterrlcj|siS|jd}i}t|tr|}nHt|tr8|j r( t j |}t|tr|}i}t|jdxs|jdxsdj }t|jdxsdj }t|jdxs|jdxsdj }|}|s|jtvr|}t|jd xsdj } t|jd xsdj } |jd } t|jd xsdj } |j jd k(r d} ddl m }|| xsd} | xs| sdn|}|r||xsd| xsd| xsdd|d<|r||d<t| tr| |d<| jdk(rd|d<|S| r| |d<|S#t$rtjddYwxYw#t$rtjddYwxYw)aReturn runtime fields persisted with a stored session. ``session.resume`` is a session-scoped operation: reopening an older chat must restore the model/provider/reasoning state that chat actually used, not whatever global model the user most recently selected in another chat. The durable session row stores the model directly, the billing provider in ``billing_provider``, and richer runtime knobs in JSON ``model_config``. rz+failed to parse stored session model_configTr&rrrbilling_providerrrrrrNrrrz(custom provider identity recovery failed)rrrrr5provider_overrider9rr:)rrrr6r7rrr5rr*r_BARE_BILLING_PROVIDERSrr)rl raw_configrparsed overridesrrrrrrrrrrs rD!_stored_session_runtime_overridesr s  (JL*d#! J $)9)9); WZZ +F&$'% I  CL$4$4W$=C D J J LE L,,Z8>B?EEG+,Q8J0KQr eg!H (..08OO#<##J/526<<>H<##J/526<<>H#''(:;|''7=2>DDFL~~8+  M.8HDIF ?bh  (D (D (D ' "# )1 %&"D)1A -.x'.0 )*  -9 )* G W LLFQUL V WL  LL:T   s$ 'I(4J( J  J  J21J2existingcXt|xsi}tt|ddxsdj}tt|ddxsdj}tt|ddxsdj}tt|ddxsdj}t|dd}t|dd}|r||d<|r:|jj dk(r d d lm} | | xs|}||d<|r||d<n|jdd|r||d<n|jddt|tr||d<n|jdd|r||d<|S|jdd|S#t$rtjd d YwxYw)Nrrrrrrrrrrrz&custom provider identity lookup failedTr&) rr6rr7rrrr5rr*r(r) rNrrrrrrrrrs rD_runtime_model_configrR s (.b !F w+1r 2 8 8 :E75*b17R8>>@H75*b17R8>>@H75*b17R8>>@Hu&8$?5.$7L w >>  ! ! #x /  .x@LH&z%z :t$%z :t$"D)%5!" %t,!-~ M  >4( M-   2, -  " "; <0H%-SW X wr#9:  # #K 7;U N = MNs#DF, F F21F2c|sy|jd}t|jdxsdj}||r t|dsyt |ddxs t }| t|dsy |j d}||_|jt |ddxs||y#t$rtjd d YywxYw) zFRefresh the stored system prompt after a live runtime identity change.NrNrr_build_system_promptrupdate_system_promptr z,failed to persist live session system promptTr&) rr6r7r`rrar_cached_system_promptrr5rr*)r#rNrrkprompts rD#_persist_live_session_system_promptr s  KK Egkk-06B7==?K }Kwu>T/U  t , 9 B z%;<T++D1&,# |T B QkSYZ T Cd STs;9B55 CCrrc4|syt|jdxsdj}|sy|rd|nd}d||d}d|d}|jd }|N|5|jd gj |t |jd d d z|d <dddnB|jd gj |t |jd d d z|d < |jd}| t |ddnd} | | j|d|yt|t|5} | | j|d|dddy#1swYyxYw#1swYyxYw#t$rtjddYywxYw)z=Record a real system-history pivot after a live model switch.Nrrz via provider z7[System: The active model for this chat has changed to zs. From this point forward, use this runtime metadata when answering questions about what model/provider is active.]r*r)r+rOrPr1rrrNrr,z%failed to persist model switch markerTr&) r6rr7rfappendrrr-r&rr5rr*) r#rrr provider_partmarkerentryrhrNrk scoped_dbs rD_append_model_switch_markerr s gkk-06B7==?K 3;nXJ/MA '-!R R  /E ;;~ &D   T   y" - 4 4U ;),W[[9JA-N)ORS)SG% & T T 9b)007%(5F)J%Ka%O!"M G$494EWUM4 04 >   66  R w'  ! Y$((*)   T T   M ># DCRy g Z C0@$%GGCL#,GDH cNr>offtopbottom>rsmartmanualcddlm}m}ddlm}t }||t |tr|ni}|jd}t |tr|jdnd}||}|tvr|SdS)Nr)DEFAULT_CONFIG _deep_merge_normalize_approval_mode approvalsmoder) r^rrrvrrrrr_APPROVAL_MODES)rrrraw_cfgrrrrs rD_load_approval_moder sj=7kG nGT1JgPR SC $I#-i#>)-- DC #C (D?*488rc~|duryt|tr(|jjx}tvr|Sy)NFrr)rr6r7r_STATUSBAR_MODES)rrs rD_coerce_statusbarr s: e|#sciik&7&7&9!9>N N r0rrallanybuttonbuttonsclickfalsefullnoonscrollwheeltrueyesrcJt|tsyd|vr|jd}n|jdd}|dus|dk(ry|dus|yt|ttfryt|t r2t j|jjdSy)uResolve display.mouse_tracking to one of ``off|wheel|buttons|all``. Boolean values keep their legacy meaning (``True`` → ``all``, ``False`` → ``off``). The ``wheel`` preset (DEC 1000+1006) is the tmux-friendly subset — wheel + click only, no hover events to trigger prompt-row clipboard probes. Legacy ``tui_mouse`` is honored only when ``mouse_tracking`` is absent. rmouse_tracking tui_mouseTFrr) rrrrrr6_MOUSE_TRACKING_ALIASESr7rrs rD_display_mouse_trackingr. s gt $7"kk*+kk+t, e|sax d{ck#U|$#s&**399;+<+<+>FF rc0ddlm}|t|S)aLoad reasoning effort from config.yaml, respecting per-model overrides. Thin wrapper over the shared chokepoint :func:`hermes_constants.resolve_reasoning_config` (per-model override > global ``agent.reasoning_effort``; YAML boolean False = disabled). Closes #21256. r)resolve_reasoning_config)r=rr)rrs rD_load_reasoning_configrH s: #IK 77rcttjdxsijddxsdjj }|r|dvry|dvryy)NrNrr>rnonerrFstandard>rfastpriorityr)r6rrr7rrs rD_load_service_tierrU s^ Y[__W % + 0 0 D JK   #II (( rcb tjdixsiS#t$ricYSwxYw)aOpenRouter provider-routing prefs from config.yaml (``provider_routing``). Parity with the messaging gateway (``gateway/run.py::_load_provider_routing``) and the classic CLI: without this the desktop/TUI backend builds agents with no routing prefs, so OpenRouter falls back to its default (effectively random) provider selection even when the user configured ``provider_routing``. provider_routing)rrr5rrrD_load_provider_routingrb s4{126<"<  s  ..cnttjdxsijddS)Nrshow_reasoningT)rrrrrrD_load_show_reasoningrp s- +1r667GN OOrctjdxsijd}t|tr|rdSdS|rt |j SdS)uSelf-improvement review notification mode from config.yaml. Parity with the messaging gateway (``gateway/run.py``) and the classic CLI: ``display.memory_notifications`` controls whether the background review's "💾 Self-improvement review: …" summary is surfaced. Without this the TUI/desktop backend always behaved as ``"on"`` and silently ignored a user who set ``off``. Accepts ``off`` / ``on`` (default) / ``verbose``; a bool is normalized for back-compat. rrrr)rrrrr6rrs rDrrv sT ;??9 % + 0 01G HC#tt%%"3s8>> ,,rcZtjjddjj }|dvr|St jdxsijdd}|dury|d uryt |xsdjj }|dvr|SdS) NHERMES_TUI_TOOL_PROGRESSr>rnewrverboser tool_progressrFrT)r,rrr7rrr6)rrrs rD_load_tool_progress_moder s **..3R 8 > > @ F F HC .. ;??9 % + 0 0% HC e| d{ s|e  " " $ * * ,D;;4FFrctjjddjdDcgc]"}|j r|j $}}d}d}|s* ddlm}|t}|th|dS ddl m }|rV|S|Dcgc] }||s |}}|Dcgc] }||vs| } }| rM dd l m } | | Dcgc] }||s |} }| r%|j| | Dcgc] }|| vs| } }td |DrE|Dcgc] }|d vs| } }| r.t!d d j#| t$j&dy| s|St)} t)} ddlm}ddlm}|}t3|jdt4r|jdni}|j7D]e\}}t3|t4s||jdddr| j9t;|L|j9t;|g | Dcgc] }|| vs| }}| Dcgc] }||vs| }}| Dcgc] }|| vr||vr|}}||z}|r.t!dd j#|t$j&d|r.t!dd j#|t$j&d|r|Sd} ddlm}ddlm}||n|}||dd}|t!|t$j&d|syt|dhzScc}w#t$rYwxYw#t$rd}YwxYwcc}wcc}wcc}w#t$rg} YwxYwcc}wcc}w#t$rt)} t)}YowxYwcc}wcc}wcc}w#t$r!|t!dt$j&dYywxYw)NHERMES_TUI_TOOLSETSr,r)coding_selection)rproject)validate_toolset)discover_pluginsc3$K|]}|dv yw)>*rNr.0rIs rD z)_load_enabled_toolsets.. s9t|#9>rrzR[tui] HERMES_TUI_TOOLSETS=all enables every toolset; ignoring additional entries: , Tr&read_raw_config)_parse_enabled_flag mcp_serversenabledrLz4[tui] ignoring unknown HERMES_TUI_TOOLSETS entries: zf[tui] ignoring disabled MCP servers in HERMES_TUI_TOOLSETS (set enabled: true in config.yaml to use): zI[tui] no valid HERMES_TUI_TOOLSETS entries; using configured CLI toolsets load_config)_get_platform_toolsr8include_default_mcp_serverszq[tui] no valid HERMES_TUI_TOOLSETS entries and configured CLI toolsets could not be loaded; enabling all toolsets) r,rrrr7agent.coding_contextr r sortedr5toolsetsr rrextendrr:r*r;r<r^r^rhermes_cli.tools_configrrrrfaddr6rr)itemrrfallback_noticer  selectionr rIbuilt_in unresolvedr plugin_validignored mcp_names mcp_disabledrrrr server_cfg mcp_validdisabledrTvalidrrrs rD_load_enabled_toolsetsr3 sAJJNN#8"=CCCH  ::< H CO   =(2K2MNI$ 5 59566 % -$0%-HT1A$1GDHH'/Ht4x3GdH H  "? "1;V?OPT?UV V -/9VtT=UdV V 99 9(0MD 4LtMGM448IIg4F3GI  O!e !$  ! 9 C%'Ggkk-8$? M*  %0$5$5$7 0 j!*d3&z~~i'FPTUMM#d), $$SY/  0'1FdDI4ETF F%/HT4<3GDHH# 9$\)A   9$  FtyyQXGYFZ[ZZ   >99X&')ZZ   L X 1?_c+-&c5dS  & / $ ?g +,,[2      IH W "!  " WN@ !I5L !GH j   & DZZ  s'L>"'M M M%*M%4 M*>M*M4 M/&M/*M4 N N) N 3N B=N N4N4 N9#N9-N>,AO/O MM M"!M"/M44 NNN10N1'O-,O-chttj|ijddxsdS)Ntool_progress_moder)r6rQrr-s rD_session_tool_progress_moder7, s+ y}}S"%))*>FO% PPrct|dk(S)Nrr7r6s rD_session_verboser:0 s &s +y 88rct|dk7S)Nrr9r6s rD_tool_progress_enabledr<4 s &s +u 44rc 2|jd}|r |j t|dt |jddt |jd}t |||y#t$rY\wxYw#t$rd|d<YywxYw)Nr]rrNrrr)rrr5rrrrz)r-r#rp new_workers rD_restart_slash_workerr?8 s [[ (F   LLN! M " GKK('>3C D ^4 3,    "&s#A6AB6 BBBBcddlm}|d|j|d|j|jr|d|jy|ddy)Nrsave_config_valuez model.defaultzmodel.providerzmodel.base_url)r8rB new_modeltarget_providerr)rrBs rD_persist_model_switchrEO sK &ov'7'78&(>(>? *FOO< *D1rc t|ddt|ddt|ddt|ddt|ddtjt|ddd S) z?Capture the current agent model runtime for a one-turn restore.rrrapi_keyrr_primary_runtimeN)rrrGrrprimary_runtime)rrVrWrNs rD_snapshot_agent_model_runtimerKc s`,E:r25)R0E:r2E:r2==8JD)QR  rric |r|y|jd}|rGt|dr; tj||_d|_d|_|jry t|drg|j|jd d |jd d |jd d |jd d |jdd yy#t$rtjddYwxYw)zCRestore an agent model runtime captured before a one-turn override.NrI_restore_primary_runtimeTrz5TUI one-turn model restore via primary runtime failedr& switch_modelrrrrGrrrC new_providerrGrr) rr`rVrWrH_fallback_activated_rate_limited_untilrMr5rr*rN)rNriprimarys rD_restore_agent_model_runtimerTo s u}ll,-G75"<= a%)]]7%;E "(,E %()E %--/0un% ll7B/!j"5LLB/\\*b1\\*b1  & a LLP[_L ` as8C C76C7)confirm_expensive_modelpin_session_override parsed_flagspersist_override raw_inputrUrVrWrXc * ddlm}m}m} ddlm} |||}t |dr=|j} |j} |j} |j}|j}n |\} } } }}d}| r |r td||n || ||| }| s td|jd }|r |s td |rEt|d d xsd }t|d d xsd }t|dd xsd }t|dd xsd }nt}| j!}d }d }| s| d}t#|jd d xsd }t#|jdd xsd }|jdd }t%|rt'|t"s|}nt#|xsd }d}d}d} ddlm}m}|}|jd}||}| | |||||| || }|j0st|j2xsd|r |r t5|nd}|r ddlm} d}!t'|t:rA|jd i}"t'|"t:r|"jdt=|"d}!| ||t?|jdg||!|s ddl"m#}$|$|jH|jJ|jLxs||jNxs||jP}%|%:|%jR}&|jTr|&d|jT}&|jH|&d|&dS|r |j|jH|jJ|jN|jL|jVt[||t]|t_|ta||jH|jJ%tcd&|te|||r||d'<n|jgd'd|rOt'|t:r?|s=|jH|jJ|jL|jN|jVd(|d)<|r ti||jH|jTxsd d|rd*d-S|rd+d-Sd,d-S#t.$rYwxYw#t.$r!}#t@jCd|#Yd}#~# d}#~#wwxYw#t.$rd}%YwxYw#t.$rF}#t@jYd |#td!|jHd"|#d#t|d |d$|#d}#~#wwxYw).Nr)parse_model_flags_detailedresolve_persist_behaviorrNresolve_runtime_provider model_inputFz./model --once cannot be combined with --global)is_oncermodel value requiredrNz%/model --once requires a live sessionrrrrrG requested)get_compatible_custom_providersr providers) rYr current_modelcurrent_base_urlcurrent_api_key is_globalruser_providerscustom_providerszmodel switch failed)#merge_preflight_compression_warningcontext_lengthrP)rNmessagesrkconfig_context_lengthz/preflight-compression switch warning failed: %s)expensive_model_warning)rrrG model_info T)rEr confirm_requiredconfirm_messagerOz.In-place model switch failed for TUI agent: %szModel switch to z failed (z); staying on rrrrPone_turn_model_restorerrrrGrr5rkglobalr#)rEr rsscope)5hermes_cli.model_switchr[r\rNrr^r`r_rri is_sessionr`r>rrrr7r6callablerr^rdrr5success error_messagerKhermes_cli.context_switch_guardrlrrr_rr*hermes_cli.model_cost_guardrprCrDrrGrqrKwarning_messagerr r?rrrrrRr(rE)'r-r#rYrUrVrWrXr[r\rNr^r_ris_global_flagr{one_turn_force_refreshpersist_globalrNrrfrgrhruntime _runtime_key user_provs custom_provsrrdrrrestore_snapshotrl_cfg_ctx_mcr!rpr  confirm_msgs' rD_apply_model_switchr sr E1)< |]+".. (::%//!,, ''UaR & (IJJ  '  %  /   /00 KK E@AA "5*b9?Rw39r "5*b9?R!%B7=2&( ,224 .>G"7;;z2#>#D"E "7;;z2#>#D"E  #;;y"5L %js.K"."%l&8b"9JL C RmWW[) 6s; )#)' +!% F >>--F1FGG@HU4U;Y]  Q [H#t$gggr*c4(SWW5E-F-R"3'7#89H /gkk)R89!-&.   #  K-  //<,<9/!,, G  !//K%%!, T&2H2H1IJ ))&$(#.        **#33  ( c7+%g.+G4# 6++f6L6L  nc=#@A 0@G, - KK0$ 7 7D 9(%%..~~ %  !f%!!))/R!#  7E(  KT  o    F Q LLJC P P Q G ,  NNKS Q"6#3#3"4IcUC%eWmDEQH  sX.(Q4 A?R"A R1.AS4 RR R. R))R.1 S?S T AT  Tc |jd}||jdryt}|dsy|jd}||d<||k(ry|\}}|t|ddk(r|r|t|ddk(ry|r|d |n|} t|||d d d y#t$r}t d |dd|d|iYd}~yd}~wwxYw)zAdopt a config.yaml model change at turn start, like gateways do per message. Sessions pinned with /model keep their choice; a failed switch keeps the current model and never blocks the turn. rNNr5rrrrr --provider TFrUrVrXrrKz%Could not switch to configured model r%)rrrrr5r) r-r#rNrseenrrrrs rD_sync_agent_model_with_configrX s KK E } $45 ! #F !9 ;;* +D#)G   ~OE8 w++ GE:r$BB.6UG<z *EC    $(!& #      ?wbL M   sB C!B;;C focus_topic approx_tokensbefore_messagesr1cddlm}|d}||D|d5t|jdg}t |jdd}ddd|}t |dkrt |}d|fS|-t|dd xsd } t|d dxsd} ||| | }|j|d||xsd \} } |d5t |jdd|k7rt |}d|fcdddS| |d<|d z|d<dddt |}t |t | z |fS#1swYxYw#1swY9xYw)Nrestimate_request_tokens_roughrNrOrPr1rrr` system_promptr`)rrr) agent.model_metadatarr_rrr _get_usager_compress_context) r#rrrr1rrNrPusage _sys_prompt_tools compressedrs rD_compress_session_historyr sC G E /"9 ^ $ E"7;;y"#=>O!'++.?"CDO EG 7|a5!%xe%.s3C>r pending_title) rrr6rr rvrrrrrur5r?)r-r#rrrNr.old_keylease_reanchoredrrrrru yolo_was_ons` rD _sync_session_key_after_compressr s0 KK EUL$7=2Nkk-,2G ^w64 %  e     #0    %g ."0  1':K  #N3$W-  #> #'   !#w /9     K       0"0  0   s+D:CDCDC($ C7: D CDCD C%"D$C%%D( C41D3C44D7 DDDDDD D&%D&c dfd }tddxsd|dd|dd|d|d|d|d |d d }td d}|rst|d dxsd}|dkrd}t|ddxsd}|r4|r2||d<||d<tdtdt||z dz|d<t|ddxsd|d< ddlm}||d<ttjjdr# j}|t||d<|S|S#t $rYXwxYw#t $rY|SwxYw)NcDt|dxs|r t|dSdS)Nrr)kfbrNs rDrz_get_usage..s%75!Q/WRGE2q4IUVrrrsession_input_tokenssession_prompt_tokenssession_output_tokenssession_completion_tokenssession_reasoning_tokenssession_total_tokenssession_api_calls)rinputrrr completionrcallscontext_compressorlast_prompt_tokensrrm context_used context_maxdcontext_percentcompression_count compressions) active_countactive_subagentsHERMES_DEV_CREDITSdev_credits_spent_microsr) rrFminroundrdrr5rr,rrget_credits_spent_microsr)rNgrcomp last_promptctx_max_async_active_countspents` rDrrsWA,2)+BC+-HI12+,34)*&' E 5. 5D $d$8!<A ?K$ 0!49 {$/E. !#*E- '*1c#u[7=RUX=X7Y.Z'[E# $ '.A1 E Jn N$7$9 ! rzz~~&:;< 224E 47J01 L5L       L s$D. D=. D:9D:= E  E c t|ddxsd}t|ddxsd}|r|dk(rd|dS y#t$rYywxYw)uELight credential check at session creation — returns warning or ''.rGrrno-key-requiredz$No API key configured for provider 'z'. First message will fail.)rr5)rNrwrs rD_probe_credentialsrQsi eY+1r5*b17Rc..9(C^_ _/     s .3 ??cPt|tsyg}td|jD}|sn-dj d|D}|j d|d|j d}|j d}t|trst|j d dxsdjj}|r6|d vr2t|tr"|j d |j d d j |jS)utFlag bare YAML keys (`agent:` with no value → None) that silently drop nested settings. Returns warning or ''.rc3,K|] \}}| |ywrr)rrvs rDrz'_probe_config_health..cs>TQAIq>s rc3(K|] }d|d yw`Nr)rrs rDrz'_probe_config_health..gs5a1QCq5z"config.yaml has empty section(s): uZ. Remove the line(s) or set them to `{}` — empty sections silently drop nested settings.rrN personality>rrFneutral personalitieszj`display.personality` is set but `agent.personalities` is empty/null; personality overlay will be skipped. ) rrr!rfr*rrr6r7r)rwarnings null_keysr display_cfg agent_cfgrs rDrr]s c4 H>SYY[>>I  yy595507< = '')$K I+t$+//-<BCIIKQQS #AA9d+ o.6 OO7  88H  # # %%rcD ddlm}|xsdS#t$rYywxYw)Nrget_active_profile_namerF)hermes_cli.profilesrr5rs rD_current_profile_namer~s*?&(5I5 s  rc|xsijd}t|jd}|xsijdrt|tr t|S| t |St|tr t|SiS)NrNrr!)rr>rrr)r#rN mirror_usages rD_session_usage_snapshotrs} ]   (E#G,009L 212z,PT7UL!! %  !+L$!?4 GRGrcjt|xsdjsy ddlm}|j 5}|j ||}dddy|j |j|j|jdS#1swY;xYw#t$rtjddYywxYw) uReturn the first-class Project owning ``cwd`` for UI status surfaces. Backed by the per-profile projects.db (the same store the desktop's project tree caches), so the TUI status label, the desktop status bar, and ``/status`` all name the session's workspace identically. Only explicit, named projects resolve here — an auto-discovered repo root has no projects.db row, so it falls back to the cwd leaf on every surface. rNr projects_db)rslugrI primary_pathz!failed to resolve project for cwdTr&) r6r7rrconnect_closingproject_for_pathrrrIrr5rr*)rpdbconnr s rD_project_info_for_cwdrs syb>   !1  " 6d**45G 6 ?**LLLL#00    6 6  84 Hs.BB B.BB B B21B2c * |0tjD]}|jd|us|}nt|}t |}t |xsijdxst |ddxsd}tjdxsijdxsd}|xsijd|}t |dd}d} t|tr5|jdd urd } nt |jd dxsd} t |d dxs|jd xsd} d } d } ddl m } m }|rt||nd }t} t| xs |xs| dk(} id|jdt |ddd|jdt |ddd| d | d| dk(d| d| dt|jdtrt|jdxsinidt|jdtrt|jdxsinid|dt!|dt#|dt |xsddt|xsijdd|rt%|xsi|ndd|xsdd t&ddddt)|t+d!} dd"lm}m}m}|}||r |||d#< dd$lm}m}||d%<||d&<||xsijd'sj dd(lm}i|d<t |dgxsgD]8}|d)d*}|dj?||xsd+gjA|: dd,l!m"}||d< dd-l#m$}||d.< d/|vr|jd/nt |d0dxsd|d/< dd1l!m%}dd2lm&}|d34|d5<||d6<|'|xsijd'stO|}|r||d7<|S#t$rd } YwxYw#t$rY;wxYw#t$rY8wxYw#t$rYwxYw#t$rYwxYw#t$rg|d.<YwxYw#t$rYwxYw#t$rYwxYw)8NrNrr rrrrrFreffortrrr)_YOLO_MODE_FROZENrrrrreasoning_effortrryolo approval_moder`skillsrr6r rtitlestored_session_iddesktop_contract)version release_date update_behindupdate_commandr profile_name)detect_install_method"format_unsupported_install_warningis_unsupported_install_methodinstall_warning) __version____release_date__rrr!)get_toolset_for_toolfunctionrIotherget_available_skills)get_mcp_statusrrr)get_update_result)recommended_update_command?rrrcredential_warning)(rQrarr>rr6rrrrrvrrrrr5r5r_session_live_titleDESKTOP_BACKEND_CONTRACTrrr^r r r rr r model_toolsrrfrhermes_cli.bannerrtools.mcp_toolrrrr)rNr# candidater?rrcfg_personalityrrrrrrrr session_yolorHr r r _install_methodr rrrrIrrrrwarns rDrRrRsp"))+ I}}W%.# g &F w 'C BM*Tge\2.NTRTK"  28b==mLRPRO=b%%m_EKu&8$?"D)    *e 3 & "#3#7#7"#E#KL 5.$7[6::n;U[Y[L DM M;FD(5 65 ,- %&P,P-5:PGWUGR%@AFJJz75*b+IJ ,    *     Jvzz'?RTX4Yfjj)/R0_a jHAUW[6\$vzz(+1r2bd s %c* (- s;,"- 4B++I67 K$W]K@UW [.B!" 4#$(1-//D2    01 ( 9&H&YD" # <%Y/^ '-R!4!45K!L  8DMUGR06B }V,W (()=d)C)NwPRSZZ   >13DN!1,.] &( JJ ' 7<B _ 7@ 1# >_!;!=  '-R!4!45K!L!%( )-D% & Ku J                ! ]!        s==P$P%7P5!AQ:Q Q#)Q7"R P"!P"% P21P25 QQ QQ Q Q #Q43Q47 RR RRrJcL ddlm}|||dxsdS#t$rYywxYw)Nr)build_tool_labelr4)max_lenr) agent.displayr$r5)rIrJr$s rD _tool_ctxr'>s02dB7=2= s  ##c|jd}| t|sy td|t||y#t$rYywxYw)NrNrP)rr>rrRr5)r-r#rNs rD_emit_session_info_for_sessionr)GsJ KK E }-g6  nc=#@A    s9 AAcFt|tkr|jdtkr|St|}d}t tD]#}|j dd|}|dkrd}n|dz}%|}t |t|tz }||kDr1|jd|}d|cxkrt|dz krnn|dz}||dj}t dt|t|z }|d|jd}|r d|d|d} nd|d} | |S)Nrrrz[showing verbose tail; omitted z lines / z chars] ) r_TUI_VERBOSE_TEXT_MAX_CHARScount_TUI_VERBOSE_TEXT_MAX_LINESrrfindrFfindlstrip) ridxrr line_start next_breaktail omitted_chars omitted_lineslabels rD_cap_tui_verbose_textr:\sF D 00 JJt : : d)C E . /jjq#& 7E a J  CI(CC DE zYYtU+ *SY] *NE <   D3t9s4y01M%L&&t,M -oY}oY @  2- JWTF rcj ddlm}|t|d}t |S#t$rYywxYw)Nrredact_sensitive_textT)forcer) agent.redactr=r6r5r:)rr=redacteds rD_redact_tui_verbose_textrAs;6(T$? ! ** s & 22c tj|xsiddt}t |S#t$rt|xsi}Yt |SwxYw)NrF)indent ensure_asciirF)rrr6r5rA)rJrs rD_tool_args_textrEsUjjAE3O $C (( $*"o #C ((s!.AAc~ ddlm}||}t |S#t$rt|}Yt |SwxYw)Nr)_multimodal_text_summary)agent.tool_dispatch_helpersrGr5r6rA)rrGrs rD_tool_result_textrIsFH&v. $C (( &k #C ((s <<secondsc|y|dkr|ddS|dkrt|dSttt|d\}}|r|d|dS|dS)Nrr.1fr<zm r)rdivmodr)rJminssecss rD_fmt_tool_durationrQsr|#a  |.!##E'N+R0JD$!%dV2dV1 5dV1:5rc|}|D]%}t|tsy|j|}'t|tr t |SdSr)rrrr_r)rr.currws rD _count_listrTsJ C#t$ggcl"#t,3s86$6r duration_sc$ tj|}t|}|rd|nd}d}|dk(r/t |t rt |dd}|Qd|d|dk(rd nd }nA|d k(rdhh128b9??A Yvh' ' $dVF8 .$.- sD DD tool_call_idcxtj|}|N ddlm}|||}|||j di|<t j |j di|<t|r;||t||d}t|rt|}|r||d<td||yy#t $rYywxYw)Nr)capture_local_edit_snapshotedit_snapshotstool_started_at)tool_idrIcontext args_text tool.start) rQrr&rgrfr5r3r<r'r:rEr) r-rerIrJr#rgrirrls rD_on_tool_startrnsmmC G  A24>H#IQ""#3R8FCG))+,b1,?c"# t,  C '-I'0 $ lC)#   s&B-- B98B9c|||d}tj|}d}d}|D|jdij|d}|jdij|d}|rt j|z nd} | | |d< t j ||d<t||| } | r| |d<t|rt|} | r| |d<|dk(rY t j |} t| tr3t| jd tr| jd |d < d d lm} g}| |||||j rd j#||d<t%|s|jdrt'd||yy#t$r||d<YwxYw#t$rY~wxYw#t$rYYwxYw)N)rjrIrJrhrirUrsummary result_texttodotodosr)render_edit_diff_with_delta) function_argsriprint_fnr inline_diff tool.complete)rQrrfr(r3rrr5rdr:rIrrr_r&rtrr*r<r)r-rerIrJrrr#ri started_atrUrprqrrtrendereds rD_on_tool_completer{s&dCGmmC GHJ%%&6;?? dS''(92>BB=F>preview_argsc T t|sy|dk(r|ry|dk(r|r|jd}t|tsyt |jdxsdt |t |jdxsd|jdgDcgc] }t |c}t |jd d d }t d||y|d k(r-|r+d t |i}t|rd|d<t d ||y|dk(ru|rst |t |xsdd} |jd|jd| d<|jd|jd| d<t d|| y|dk(rt d|dt |xsdiy|jdrt |jdxsdt|jdxsdt|jdxsdd}|jdrt |d|d<|jd rt |d |d <|jd!rt |d!|d!<|jd"t|d"|d"<|jd#rt |d#|d#<|jd$t|d$|d$<|jd%r|d%D cgc] } t | c} |d%<d&D]%} |j| } |  t| || <'|jd'r|d'D cgc] } t | c} |d'<|jd(r|d(D cgc] } t | c} |d(<|jd)rt|d)|d)<|rt ||d*<|rt ||d <|jd+rt |d+|d+<|jd,rt |d,|d,<|jd-t|d-|d-<|r!|d.k(rt ||d/<t ||d <|d0k7r t |||t||yycc}wcc} w#ttf$rYwxYwcc} wcc} w)1Nz tool.startedztool.output_risk risk_metadatarerrisklowfindingsr@F)rjrIrrr@zreasoning.availablerTrz moa.reference)r9r moa_indexindex moa_countr.zmoa.aggregating aggregatorz subagent.goal task_countr task_indexr)rrr subagent_id parent_idchild_session_iddepthr tool_countr") input_tokens output_tokensreasoning_tokens api_calls files_read files_written output_tail tool_namerNrpduration_seconds subagent.tool tool_preview subagent.text)r<rrrr6rrr: startswithrrSr>r_r_mirror_subagent_to_child)r-r rIr|r}_kwargsrr&r ref_payloadrint_keyr%rs rD_on_tool_progressrs "# &^# ''D;;/(D) 7;;~6<"=I V,56/7||J/KLtTLX\\*e<= &   #w/**w&,c'l%; C !%GI  #S'2_$ Y 2&*  ;;{ # /#*;;{#;K ;;{ # /#*;;{#;K  osK0&& |S_&EF[) F+1r2gkk,7<1=gkk,7<1=  ;;} %%()?%@GM " ;;{ ##&w{';#GL ! ;;z "3::3F"Ga3q6"GGJ  G ++g&C'*3xGG$  ;;| $5<\5J$KSV$KGL ! ;; '8?8P'Q1A'QGO $ ;;} %%)'-*@%AGM " #&t9GK !'lGFO ;;x #GH$5 6GH  ;;y !!$WY%7!8GI  ;;) * 6*/8J0K*LG& ' z_4&)'lGN #!'lGFO  ( *c7 +!*g6}*;Md#H":.%L'Qs*R 3R%R  R =R% RR_child_mirrors_active_child_runsg @ child_keycttj|}|duxrtj|z tkSr)rrr3_CHILD_RUN_STALE_S)rtss rDrrs2    *B T> Etyy{R/3EEErcdt|jdxsd}|sy|dk(rtj|dnt jt|<t |}||djd&t 5tj|ddddy|d}t 5tj|dddd}|d sd |d <td ||d k(r2t|jd xsdx}rtd|d |in~|dk(r2t|jd xsdx}rXtd|d |inG|dk(r5t|jd xsdx}r!td|d |din |dk(r|drtd||d|dxxdz cc<t|jdxsdd|d|did}t|jdxs|jd xsdx}r||d<||d<td||np|dk(rk|drtd||dt|jdxs|jd xsd} td |d | itj|ddddy#1swYyxYw#1swYyxYw)!Nrrzsubagent.completerrNrF)seq open_toolstartedrT message.startzsubagent.thinkingrreasoning.deltar message.deltazsubagent.startrrrrxrrtoolz submirror:r)rIrjrJrr|rmrprL) r6rrr(r3_find_live_session_by_key_child_mirrors_lockrrfr) r rrlivecsidstrrr|rps rDrrsGKK 239r:I ((y$/(, 9% %Y /D |tAw{{7+7  0   y$ / 0 7D %0  & &y!$[`2a b)} ByM /4 ( , ,7;;v.4"55t5'~> ? *7;;v.4"55t5otfd^< + +7;;v.4"55t5otfbk-BC ? *+otR _= uINIGKK 4>?' {!BuI;?D gkk.9VW[[=PVTVWWwW")Y"B{O ,d + . .+otR _='++i0MGKK4GM2NG $dVW,= >   y$ /K%0%0  0%0%0sJ+G&J&J#&J/cfdfddfd fdfdfdfddfd fd fd fd dfd d }tr ddfd |d<|S)Nc t|||Sr)rn)tc_idrIrJr-s rDrz_agent_cbs..s d: rc"t||||Sr)r{)rrIrJrr-s rDrz_agent_cbs..sDU dFE rc$t||||fi|Sr)r)r rIr|rJkwargsr-s rDrz_agent_cbs..s"ct T7Dd 4:d rc<txrtdd|iS)Nztool.generatingrI)r<r)rIr-s rDrz_agent_cbs..s&*@*E+: #S64. 9rc"tdd|iS)Nzthinking.deltarrrr-s rDrz_agent_cbs..s%0@#PT~*Vrc"tdd|iS)Nreactionrrr)rrr-s rDrz_agent_cbs..s% C&$*PrcNtdd|itr ddiSiS)NrrrT)rr:rs rDrz_agent_cbs..s=5   T R3CC3Hy$/ R, OQ R, rcRtt||dSt|Sr)r|r6)rrrr-s rDrz_agent_cbs..s)> TDLD4 69$i4 rc td|j|j|j|j|j |j dS)Nznotification.show)rlevelrrttl_msrwr)rrrrrrrwr)rcr-s rDrz_agent_cbs..sAU  ((uudd   & rc"tdd|iS)Nznotification.clearrwr)rwr-s rDrz_agent_cbs.. sU #s|. rc$td||dS)Nzclarify.request)questionrir~)qcr-s rDrz_agent_cbs..s sq$A* rc htdd|fd|ffDcic] \}}| || c}}dScc}}w)Nzterminal.read.requestrr.rr)rr.rrr-s rDrz_agent_cbs..sE #  '/'51AB TdaamQT T B  Us ..) tool_start_callbacktool_complete_callbacktool_progress_callbacktool_gen_callbackthinking_callbackreaction_callbackreasoning_callbackstatus_callbacknotice_callbacknotice_clear_callbackclarify_callbackread_terminal_callbackFalready_streamedcHtdt|t|dSNzmessage.interim)rr)rr6rrrr-s rDrz_agent_cbs.."s$E!T=M8NO5rinterim_assistant_callbackNNNrr)r )r- callbackss` rD _agent_cbsrsj # # :VQ   "  # _5Ix()-2  ./ rtask_id_namec|syt|xsd}d}d}t5|tvr |t|}}nUtjD]>\}}|j d|k(s t |j ddd|k(s:||}}nddd|yt jjt jjt|}t jj|sy||d<d|d<t|t|5} | # | j|j dd|dddt#|| |j d} | t%| |n|t'|t)|dd } t+d || y#1swYxYw#t$rtj!d d YwxYw#1swYxYw#t$rtj!d d YywxYw)u1Intentional workspace move from the project_* tools: re-anchor the live session's cwd to the chosen project's folder and push session.info so the desktop follows (refresh tree + scope into the project). This is the ONLY auto-cwd path — driven by an explicit tool call, never a terminal `cd`.NrrrNr rTrz'failed to persist project workspace cwdr&rr6r rrPz8failed to emit session.info after project workspace move)r6rerQrfrrr,r.rrrrrrr5rr*rrRr5rr) rr.rrwr-r#cand_sidcandrrkrNrHs rD_apply_project_workspacer,s  gm C CG  )  #C"+//"3 $88M*c1WTXXg=NP\^b5cgj5j#+TC  wwrww11#d)<=H 77== "GEN"GN'" W W > W%%gkk-&DhOWgx0` G$  % ) -h70:   nc4(S0 W FQU V W WW, ` OZ^ _`sOA"FFG "F%AGF"% GG GG  G G:9G:ctddlm}ddlm}ddlm}|fd|t dfd }||y)Nr)set_sudo_password_callback)set_secret_capture_callback)set_project_workspace_callbackc"tdidS)Nrqxrrr6srDrz!_wire_callbacks..lsvnc2s'Srcv||d}|r||d<td|}|sd|ddddSdd lm}i|||dd d S) N)renv_varrrrTFskipped)r} stored_as validatedrrKr)save_env_value_securer)rrK)r~r^r)rrrplr%rr-s rD secret_cbz"_wire_callbacks..secret_cbosm7 3 %BzN%sB/$"$   < #GS1   rr)r rtools.skills_toolrtools.project_toolsrr)r-rrrrs` rDrrgs->=BST"#;< * *rc.t|tr{|jddg}|jdr|jd|d|jdr|jd|ddj d|DSt |S) NrrtonezTone: stylezStyle: rc3&K|] }|s| ywrrrrs rDrz-_render_personality_prompt..s/qQ/)rrrrr*r6)rEpartss rD_render_personality_promptrs%?B/0 99V  LL6%-1 2 99W  LL75>"23 4yy/E/// u:rc ddlm}|jdxsijdixsiS#t$r ddlm}|jdxsijdixsicYS#t$r<|xs t }|jdxsijdixsicYcYSwxYwwxYw)Nr)load_cli_configrNrr)r8rrr5r^rr)rr_load_full_cfgs rD_available_personalitiesrs K'!%%g.4"99/2NTRTT K K G"$((17R<<_bQWUW W K$CGGG$*//DJ J K Ks.36 B?3A63B?6AB;6B?:B;;B?cDt|xsdj}|j}|r|dvryt|}||vrNt |}dj d|D}d|d}|r|d|z }t ||d z }t ||t||fS) Nr>rrFr)rrrc3(K|] }d|d ywrr)rrcs rDrz(_validate_personality..s61!Ah6rzUnknown personality: `z`.z Available: `none`, z No personalities configured.)r6r7rrr!r*r>r)rErrrIrnames availablebases rD_validate_personalityr s ekr  "C 99;D 499,S1M = }%II666 'uB/  -i[9 9D 6 6D +M$,?@ @@rc|yt|tr|jSt|trdj d|DSt|jS)zHNormalize config prompt values from YAML before handing them to AIAgent.rrc3K|]7}t|jst|j9ywr)r6r7rr&s rDrz_prompt_text..s(RtD @QT*Rs??)rr6r7r_r*rEs rD _prompt_textrsR }%{{}%yyRuRRR u:   r new_promptrcB|sy||d<|jd}|rx|xsd|_|rd|d}nd}|d5|d jd |d t|jd d dz|d <dddt |}t d||d|fSy#1swY&xYw)uApply a personality change to an existing session without resetting history. Updates the agent's ephemeral system prompt in-place so the new personality takes effect on the next turn. The cached base system prompt is left intact (ephemeral_system_prompt is appended at API-call time, not baked into the cache), which preserves prompt-cache hits. Also injects a system-role marker into the conversation history so the model knows to pivot its style from this point forward (without this, LLMs tend to continue the tone established by earlier messages in the transcript). Returns (history_reset, info) — history_reset is always False since we preserve the conversation. )FNrrNNz[System: The user has changed the assistant's personality. From this point forward, adopt the following persona and respond accordingly: ]zv[System: The user has cleared the personality overlay. From this point forward, respond in your normal default style.]rOrPr*rr1rrrPF)rephemeral_system_promptrrrRr)r-r#rrrNrrHs rD_apply_personality_to_sessionrs" (GM KK E (2(:d%  *|1. R ^ $ T I  % %v&&I J),W[[9JA-N)ORS)SG% & TU# nc4(d{   T Ts 9BBc$ ttjjddxsd}|dkDr|S |jdxsi}t|jdxs|jdxs|S#tt f$rYWwxYw)NHERMES_TUI_MAX_TURNSrrrN max_turns)rr,rrrSr>)rrFenv_maxrs rD_cfg_max_turnsrs bjjnn%;R@EAF Q;N  &BI y}}[)LSWW[-ALW MM z "   s3A==BBctjjdd}g}t}|j ddj dD]<}|j }|s||vs|j||j|>|S)NHERMES_TUI_SKILLSrrr ) r,rrr^rrr7r%r)rrrpartr&s rD_parse_tui_skills_envrs{ **..,b 1CFUD D#&,,S1 zz| D$ HHTN MM$   Mrc.ddlm}|tS)aReturn the configured fallback chain for TUI-created agents. Delegates to the shared ``get_fallback_chain`` helper so the TUI path stays in parity with ``HermesCLI.__init__`` and ``gateway/run.py``: ``fallback_providers`` is the primary source of truth and keeps its order, with legacy ``fallback_model`` entries merged in afterwards (deduped on provider/model/base_url). rget_fallback_chain)hermes_cli.fallback_configr rrs rD_load_fallback_modelr"s> ik **rct|drt|dxsgSt|dr t|ddStS)zOReturn an agent's fallback chain without rehydrating deliberately empty chains._fallback_chain_fallback_modelN)r`rr"rJs rD_agent_fallback_modelr&sDu'(u/06B6u'(u/66  !!rc Tt}idt|ddxsddt|ddxsddt|ddxsddt|ddxsddt|ddxsddt|ddxsddt|ddxs tdt|d d t|d dxs t d d d ddt|ddxsddt|dddt|dddt|dddt|dddt|ddt|ddt|dd|t|ddxs#t t t|ddxsdt|ddxs ttt|dixsidtt|d S)NrrGrr acp_commandacp_argsrmax_iterationsenabled_toolsets quiet_modeTverbose_loggingFrproviders_allowedproviders_ignoredproviders_order provider_sortprovider_require_parametersprovider_data_collectionopenrouter_min_coding_scorerrrrequest_overridesr) r4r5r rrr6rrfallback_model) rrrrr3rr6rrrar&)rNrrs rD_background_agent_kwargsr8s1 +C GE:t4< 75)T2:d  GE:t4<  GE:t4<  wumT:Bd  GE:t4<  .B.2B  .b1  GE+=tD$ ! #  d  5  "752KT#R$   WU,?F  WU,?F! " 75*;TB# $ >% & &w 0%( ' ,%,E3Mt$T'.u6SUY'Z#E+=tDJ !#geWb&A&GR"H I~t<T@R@T!'%1Db"I"ORPi/6?  rcLt||}|jddgddd|S)Nrr'T)r,r skip_memory)r8rG)rNrrs rD_ephemeral_preview_agent_kwargsr;Bs4 %eW 5F MM!+V 4  Mr max_messagesmax_tool_charsc$ |d5t|jdgxsg}dddsgSd}tt |dz ddD]}||jddk(s|}nt dt ||z }| t ||}g}||dD]}t|ts|jd} | d vr*|jD cic]\} } | d k7s | | } } } | d k(rH| jd } t| tr&t | |kDr| d|d t | dz| d <|j| |S#1swY+xYw#t$r#t|jdgxsg}YYwxYwcc} } w)uDistill the parent session's recent history into a context the ephemeral preview-restart agent can actually use. The restart agent has no idea what app the user was building, what server they ran, what cwd was active, or which port belongs to which project. Without this, it would take the bare URL + console logs and guess — usually starting the wrong thing. We keep the last ``max_messages`` messages from the parent session so the restart agent sees recent user prompts, assistant replies, and most importantly any terminal/tool calls. Tool result payloads are truncated so we don't blow the context window with file dumps. rOrPNrrr)r*r)r* assistantrsystemrrr+z ... (truncated, original z chars)) r_rr5rrrFrrrrfr6r)r#r<r=rP last_user_idxr3rtrimmedrr)rrrVr+s rD_preview_restart_historyrCNs9 ^ $ =7;;y"5; > !$AA[0@1AA 6>dhhy)G'3'CL>,IO^,3CL>IJY t#& NS = = 9w{{9b17R896Bs3E EE F &F EE(F F c tj|}t|tsy|dk(rpt |j dxsdj}|j d}|r|ddS|j drd|j dS|d|St |j d xsdjdd S#t$rYywxYw) Nrrr exit_codeiPr zBackground process started: zterminal exited with code r)rrr5rrr6rr7)rIrrrrEs rD_preview_tool_result_previewrGszz&! dD ! zTXXh'-2.446HH[) %&> ! 88L !1$((<2H1IJ J  / {; ; txx &B ' - - / 66! sC CCrc iddtdtddffd dtdtdtddffd }dtdtd td tddf fd }dd tdtdzd tdzddffd }|||fddfd dS)NrKrrcht|xsdj}|rtd||dyy)Nrpreview.restart.progress)rrr)r6r7r)rKrrrrs rDprogressz,_preview_restart_callbacks..progresss87=b!'')  ,f'TYcg6h i rrerIrJcttj|<t||}d||rd|ndy)NzRunning r%r)r3r')rerIrJrrKrys rD tool_startz._preview_restart_callbacks..tool_starts=#'99; < d#8D6Bse*!<=>rr}rctjj|tjz }t|||xsd||rdt|nd}t ||}||r d|zydzy)Nz Finished rWrr)r3rrdrQrG) rerIr}rrUrprrKrys rD tool_completez1_preview_restart_callbacks..tool_completesYY[:>>, #LL fj9Oy{EQUVhisVtUuOvKMON>O-dF;VbM<=<=rr r|cn|rt|y|r|jddd|yy)Nrrr%)r6r)r rIr|rrKs rDrz1_preview_restart_callbacks..tool_progresss;  S\ "   **345Rv> ?rcd|S)Nz Preparing r)rIrKs rDrz,_preview_restart_callbacks..s(Zv3F*Grc$||S|Srr)rrrrKs rDrz,_preview_restart_callbacks..s8DDTD3_Z^3_r)rrrrr)rHrr)r6r)rrrMrOrrKrys`` @@rD_preview_restart_callbacksrSs#%Jj#jcjtj ??C?t?? >C>s>4>>QU> @#@S4Z@t@jn@ *"/"/G_  rczt|d} |jdd|jdd|jdd|jddt||d|dt|}t |||d<t |d<g|d <i|d <d |d <d |d<t |d<t|d<i|d<|d5g|d<t|jdd dz|d<dddt||}td||t|||S#t |wxYw#1swY@xYw)Nrr5r6r7rvr rrNrr2rhr image_counterFrrr5rirOrPr1rrP) rr(rr2rrrrrrrRrr?)r-r#r new_agentrHs rD_reset_session_agentrXsm !'-"8 9F'  $d+ /6 2D9 ,d3  M "}--g6   v& GG#7#9G  !#G  "G  GOGI 4 6G $<$>G !!#G   P %(5F)J%Ka%O!"P G ,D .#t$#w' K! v&PPsA&D! 'D1! D.1D:c ddlm}m|sydfd }t j |ddj y#t$rYywxYw) u Refresh a session's tool snapshot when MCP discovery lands late. The agent snapshots ``agent.tools`` once at build time and never re-reads the registry (run_agent/agent_init). ``_make_agent`` briefly joins the background MCP discovery thread (``wait_for_mcp_discovery``, bounded by the ``mcp_discovery_timeout`` config value, default 1.5s) so already-spawning servers land in that snapshot — but a server that takes longer than the bound to connect (common for an HTTP MCP server on first connect) lands *after* the agent is built. Its tools are then absent from both the agent and the banner for the whole session, even though the classic CLI shows them (the CLI re-derives ``get_tool_definitions`` at banner render time, which re-waits, so it picks them up). This schedules an off-critical-path daemon that waits for discovery to finish, then rebuilds the snapshot and re-emits ``session.info`` so both the agent's callable tools and the banner count catch up — the same rebuild ``/reload-mcp`` performs, but automatic. Cache safety: the rebuild only runs while the session is still pre-first- turn (no API call made yet → nothing cached to invalidate). If the user has already sent a message, we leave the snapshot frozen rather than invalidate the prompt cache mid-conversation — those late tools then require an explicit ``/reload-mcp`` (which gates on user consent), exactly as today. No-op when discovery already finished before the agent build. r)mcp_discovery_in_flightjoin_mcp_discoveryNcdsyt5tj}||jdur dddytt ddxsddkDstt ddxsddkDr dddy ddlm}|d }|s dddyt|}dddtd y#t$r)}tjd |Yd}~dddyd}~wwxYw#1swYLxYw) N>@rrN_user_turn_countr_api_call_countrefresh_agent_mcp_toolsT)r-z9Late MCP refresh: tool snapshot rebuild failed for %s: %srP) rerQrrrrrar5rr rRr)r#raaddedr!rHrNr[r-s rD_wait_then_refreshz6_schedule_mcp_late_refresh.._wait_then_refresh s"$/   1mmC(G'++g"6e"C  1 1GE#5q9>Q?!Cwu&7;@qAAE 1 1 B/$G3 1 14!0D5 18 nc4( O - 1 1  ! 1 1sA,C?;C? C C?( C? C<C7*C?7C<<C??Dztui-mcp-late-refresh-Tr8r)tui_gateway.entryrZr[r5rrr)r-rNrZrcr[s`` @rDrrsZ4Q # $!)D!$SE * egW sA AAc2eZdZUeed<edzed<eed<y)_RuntimeFallbackResolutionrNselected_model used_fallback)r9rrr__annotations__r6rrrrDrfrf3s M$Jrrfresolve_kwargscddlm}ddlm}|xsi} t |di|ddS#|$r}t xsg}|D]}t |tst|jdxsdj}t|jdxsdj}|r|sq dd l m } ||d } |jd r|d | d <| |} | r| | d <|di| } ddl } | jtj!d|||t | |dccYd}~S#t"$rYwxYwd}~wwxYw)adResolve the primary runtime or one complete provider/model fallback. Setup-time auth fallback only accepts entries with both fields. Provider- only entries are skipped so the unavailable primary model can never leak into a different runtime. ``used_fallback`` remains explicit rather than overloading a nullable model as control flow. r) AuthErrorr]NFrrr)resolve_entry_api_keyrc target_modelrexplicit_base_urlexplicit_api_keyz5Primary auth failed (%s), falling back to %s model %sTr)hermes_cli.authrlrr^rfr"rrr6rr7r!rmlogging getLoggerr9r r5)rjrlr^r primary_excfb_chainr fb_providerfb_modelrm fb_kwargs fb_api_keyrrss rD_resolve_runtime_with_fallbackr{9si*D  !rF') $ .v .    !')/R EeT*eii 39r:@@BK599W-34::I012?Y?!!!(+33K  2'8TJJ  ; > C!s@'EBD;/A3D*"D;$E* D63D;5D66D;;Erwr5rr9r:rc  ddlm} | |xs||} | | Sddlm}  ddlm} |  ddlm} | t} | jdxsi}t|jdd}t}|rddl m }|||xs| \}}}|rHd j|}|r'tj!d |d j|nt#d ||r(d jd||fDj%}t'|t(r5|jdr#t+|jdxsd}|jdxs|xsd}|jd}|jd}|jd}i}t+|xsdj%j-dk(rddlm}||xsd}|r|}|r||d<||d<|xsd|d<t3|}|j4}|j6r$|j8s t;d|j8}n|r||d<|r||d<|rx||d<nrt=\}}t'|t*r|r|}|r|}t3||xsdd}|j4}|j6r#|j8s t;d|j8}t?} | dBid|dtA| dd|jdd|jdd|jdd|jdd|jdd |jd!d"|jd"d#d$d%d&d'||ntCt+|xsdd(||n tEd)tGd*| jd+d,| jd-d.| jd/d0| jd1d2| jd3d&d4| jd5d6tI|d7|xs|d8||n tKd9|xsdd:tMtNjPjd;dtMtNjPjd?d@tMtNjPjd?dAtStU|S#t $rYwxYw#t $rYwxYw)CNr)maybe_build_synthetic_agentAIAgent)wait_for_mcp_discoveryrNrr)build_preloaded_skills_promptrrzoUnknown skill(s) requested, skipping: %s. Continuing with: %s. List available skills with `hermes skills list`.zUnknown skill(s): rrc3&K|] }|s| ywrr)rrs rDrz_make_agent..s(4(rrrrrGrrrrrprcroz&Auth fallback resolved without a modelrnr*Zr(rr)rJcredential_poolr-Tr.Frrr,r/onlyr0ignorer1orderr2rr3require_parametersr4data_collectionrr rrcheckpoints_enabledHERMES_TUI_CHECKPOINTSpass_session_idHERMES_TUI_PASS_SESSION_IDskip_context_filesHERMES_IGNORE_RULESr:r7r)+tui_gateway.synthetic_turnr} run_agentrhermes_cli.mcp_startuprr5rdrrrragent.skill_commandsrr*rr r>r7rrr6rrrr{rrhrgrrrrrrr3rrarr,rr"r)!r-rwr rr5rr9r:rr} syntheticrrrrrstartup_skillsr skills_prompt loaded_skillsmissing_skillsmissing_displayrrequested_provideroverride_base_urloverride_api_keyoverride_api_moderjr recovered resolutionr_prs! rDrrqsG+J,=#~NI! A  <  +C &BI !CDM*,NF7T %#8 4 }n "ii7OG$IIm, !#5o5F!GHH "KK("/!?(eg  .$'N,>,>w,GN&&w/526+// ;X?PXTX*..z:)--i8*..z: !'R ( . . 0 6 6 8H D N1;L;TPTUI%." 7H23&8{#).$~&3NC $$  # #,,"#KLL--E !&7 #%5 " &7 #$<$>!! nc *~"E !2 3+!MT5  $$  # #,,"#KLL--E "C . . %c2.. Z(. Z( .   I& .  Z( . KK *. V$.  $56. . . $)4 &'EKR(89'. .%0 "#%1. 4015. <''&/=. >''(+?. @(A. BggfoC. D%(GG,@%$HE. F"%):!;G. H)):;I. J$K. L",!7:WYM. N!. 5O. P,BJJNN;S,TUQ. R( 7S(TUS. T+2::>>:O+PQU. V$BJJNN3H$IJW. X,- S/[. .Q       s" S/ S?/ S<;S<? T  T rPr3c tj}t5id|d|d|dtjddddd|d |d d d gd dd|xs t d|dddt dt |dtiidtxstdt<ddd||n t} | }| j|} | r8| jdr't5tvr| dtd<dddn2 td} | j|| tt| t't t)tt+|t-|dt/tjd ddlm} m} | |fd|  fd|_t9|_t=t5tvrt?ttd<dddtAd|tCtjitEd tG|tjitI|y#1swYxYw#1swYJxYw#t $rt"j%ddYpwxYw#t $rdtd<Y0wxYw#t $rY$wxYw#t $rYwxYw#1swYxYw)!NrNrrPrOr1r inflight_turnrrrFr2rVrr3r]rrBr5)rhrir5rz%failed to persist resumed session cwdTr&rrrrct|Srrrs rDrz_init_session..rs2Hd2Src2td|dt|iSrrrs rDrz_init_session..|sU dVS\$:F rrMrrP)%r3rerrrrrrrr rQrarbrrrr5rr*rrzrrrrvrrrrrrrrr2rrRr)r-rwrNrPr3rrrBrrkrl_cwdrrs` rD _init_sessionr*sW ))+C   U 3  w  INN,  q  T   #  3  u  r  Q  3+/+  D  D  24 -f5! " !":"<# $!!#+,@0@5 # :"-79B ~nnS! 3775> 7)#,/JIcN5) 7 7 U ~e,%%c40))C.$?)C.) .  cN w(89&s^//?   T%ST "  @C, ( &@%A" C \ ) ,FsIVYN,[IcN= )\/oimmTWY[F\6]^ .#}UIMM#r4JKLsE*q  B 7 7 U Dt T U .)- #~&.        \\smB I/)I< 1J A J0K 5K&K,/I9<J J-,J-0K K  KK K)(K),K5ctjjddtjj ddS)N %Y%m%d_%H%M%Sr)rrr4rtrurvrrrD_new_session_keyrs9lln%%o6 7q9I9I"19M8N OOrc@||djt|S)NrN)_checkpoint_mgrr;)r#rs rD_with_checkpointsrs gg.. W0E FFrrefc |j|}t|dz }d|cxkrt|krnn||j d|Stdt|d#t$r|cYSwxYw)Nrrhashz!Invalid checkpoint number. Use 1-r)list_checkpointsrr>rr)mgrrr checkpointsr3s rD_resolve_checkpoint_hashrs**3/ #hl C"#k""3##FC00 8[9I8J!L MM  sA%% A32A3rNcjddlm}m}t|ddxs|t|ddxs|fS)zBReturn the live provider/model, falling back before agent startup.r)_read_main_model_read_main_providerrrr)agent.auxiliary_clientrrr)rNrrs rD_active_image_routing_identityrs;L z2&?*=*?w#9'7'9 r user_text image_pathsc ddl}ddl}ddlm}d}g}|D]}t |}|j sd|d} |j |j|t||} | jdr| jd d nd} |j| rd | d | nd | |xsd } dj|} | r | r| d| S| S| xsdS#t$r|jd | YwxYw)zMPre-analyze attached images via vision and prepend descriptions to user text.rN)vision_analyze_toolzDescribe everything visible in this image in thorough detail. Include any text, code, data, objects, people, layout, colors, and any other notable visual information.z9[You can examine it with vision_analyze using image_url: r) image_url user_promptr}analysisrz[The user attached an image: z] z2[The user attached an image but analysis failed.] rrzWhat do you see in this image?) asynciortools.vision_toolsrrrrrr6rrr5r*)rrr_jsonrrrr.rhintrdescrprefixs rD_enrich_with_attached_imagesrs*!6 4 EW Jxxz J1#QO W  /#a&fUVA-.EE),<155R($D LL1c$@J4&Q W$ ?D [[ F (,&dV$8&8  333 W LLNtfU V WsA4CC;:C;r+cH|yt|tr|St|ttfr t|St|trGg}|D]/}t |j }|s|j|1dj|St|tr{|jd}|dvr1t|jdxs|jdxsdS|dvry|d vry |rd |d Sd|vrt|jdxsdSy t|SNrrr>r input_text output_textrr+>imager input_image[image]>audio input_audio[audio][r[structured content] rr6rrr__content_display_textr7rr*rrr+rrrrrs rDrr!'3'C<(7|'4  #D(.446D T" #yy'4 {{6" 8 8w{{6*Jgkk).DJK K 8 8 + + tfA;  W w{{6*0b1 1% w<rc|yt|tr|St|ttfr t|St|trg}|D]z}t|tr|j |&t|t s7|jd}t|tr|j |j|jd}|dvrE|jdxs|jdxsd}|r|j t||dvr|jd}d}t|t r$|jd}t|tr|}nt|tr|}|r|j d |n|j d K|d vr|j d b|sf|j d |d}dj|St|t r|jd}|dvr1t|jdxs|jdxsdS|dvr_|jd}d}t|t r$|jd}t|tr|}nt|tr|}|xsdS|d vry|rd|dSd|vrt|jdxsdSyt|S)uRender ``message['content']`` as a plain string for transport. Provider-side, ``content`` may be a string (most common), a list of multimodal parts (e.g. ``[{"type": "text", "text": "..."}, {"type": "image_url", "image_url": {...}}]``), or a single structured dict. Calling ``.strip()`` on a list raises ``'list' object has no attribute 'strip'`` and breaks session resume entirely. Image parts (``image_url``) are preserved by appending the underlying URL (data: or http:) into the text. The desktop renderer pulls these back out via ``extractEmbeddedImages`` so the user sees the image instead of the URL — and it stops the resume payload from disagreeing with the cached message (which would otherwise cause the inline image to flash, then disappear when the resume payload overwrites the cache). Other structured dict shapes (audio, unknown types) fall back to a bracketed placeholder so resume doesn't drop the message entirely. rrr>rrrr+>rrrrurlrz [image]>rrz [audio]z [rrrrr) rr6rrr_rrrr*) r+chunksrrrrrrrrs rD_coerce_message_textrs&'3'C<(7|'4 " -D$$ d#dD)88F#D$$ d#88F#D<<HHV$A(;ArMM#a&)<< HH[1 i. ) e 4I!)S1' 3/#CMMBse*-MM+.// k* D6m,E" -Fwwv'4 {{6" 8 8w{{6*Jgkk).DJK K 8 8 K0IC)T*%MM%0 i-#CIs+#) # + + tfA;  W w{{6*0b1 1% w<rc  g}i}|D]ttsjd}|dvr+tjd}|dk(rjdrdD]k}|jdi}|jdd}|s*|jd s< t j |jd d }|d |f||<m|js|d k(rujd d}|r|j|nd} | r| dndxsjdxsd } | r| dndxsi}|jd | t| |dYd} |dk(xrtfd| D} |js| s||d} |dk(r2| D]-}|vsj|j|| |</|j| |S#tj tf$ri}Y8wxYw)Nr)>rr*r@r?r+r? tool_callsrrrrI argumentsz{}rrerrr)r)rIrk)rreasoning_contentreasoning_detailscodex_reasoning_itemsc3@K|]}j|ywrr)rrwrs rDrz'_history_to_messages..ts4 AEE#J4 s)r)r) rrrrrrrrSr7rr'r)rPrntool_call_argsr) content_texttcrrrJtc_inforIreasoning_keys has_reasoningrrwrs @rD_history_to_messagesrGs)HN 3!T" uuV} > > +AEE),<= ; 155#6 o ?VVJ+tR(RVVF^"#zz"&&d*CD.0Z,>N5) ? %%' 6>EE."-E38n((/dG")GAJtTk8JTfD")GAJt:D OO)D$:OP     + 4 "04 1 !!#M \2 ; % *!8c 6 uuSzCH * g3j OO!00)<"!"s%%G$$HHc<t|tsgSg}|D]}t|ts|jd}|dvr*|jd}||jd}t|tr|j so|j ||d|S)Nr))r*r?r@r+rr)rr_rrr6r7r)rErPr&r)r+s rD_coerce_seed_historyrs eT " G;$% xx 6 6 ((9% ?hhv&G'3'w}} 9:; NrcH|yt|tr|St|ttfr t|St|trGg}|D]/}t |j }|s|j|1dj|St|tr{|jd}|dvr1t|jdxs|jdxsdS|dvry|d vry |rd |d Sd|vrt|jdxsdSy t|Srrrs rDrrrrc4t|jSr)rr7rs rD_inflight_textrs  ' - - //rcTtj}d|d|t|d|d<y)NrT)r?ryr^ updated_atr*r)r3r)r#rrs rD_start_inflight_turnrs- ))+Ct$  GOrdeltac|dn t|}|sy|jd}t|tsdddd}|jdxsd||d<d|d<t j|d<||d<y)NrrTr?r^r*r?r^r)r6rrrr3)r#rrturns rD_append_inflight_deltars2CJD  ;; 'D dD !dB?88K06B7v>DDD#GOrcd|d<y)Nrrrs rDrQrQs #GOrc|jd}|rEt|jdtr&t|tr|d}|r |r|d|n|xs|}||d|d<y)aStash a message to run as the very next turn once the live one ends. Used when a prompt arrives mid-turn (see ``_handle_busy_submit``). A single slot is kept; a second arrival is merged (lossless, mirroring the consecutive-user merge in ``repair_message_sequence``) so nothing the user typed is dropped. ``transport`` is pinned so the drained turn streams back to the client that sent it even if the session transport is rebound meanwhile. queued_promptrrr)rrN)rrr6)r#rrrprevs rD_enqueue_promptrse{{?+H x||F+S 1 tS !&*t$tD6"$,$(,9EGOrc2duxr td xr t}s|syd5jdr dddydd<dddd fd }tj|ddj y#1swY.interrupts ;!,.88=( ;5:12 ; ;    ; ;( ;5:12 ; ; ;sF,AA A AAAAA?$A3* A?3A< 8A?zbusy-interrupt-)rrrIr)r`r"rrrr)r-r#rNuse_compute_hostrrs``` @rD_interrupt_busy_sessionrsT!Age[&AI$}L)CG)L -  2 ;;0 1 22.2)*2 ; ;Id?3%9PQWWY#22sB  B  Bc~t}|jd}|d5|jds dddy ddd|dk(rT|Rt|drF |j|r3|d5t j|d<dddt |ddiS |d5|jds dddyt|||t j|d<ddd|d k7r t|||t |dd iS#1swYxYw#1swYxYw#t $rYwxYw#1swYPxYw) uApply the ``display.busy_input_mode`` policy to a prompt that lands while a turn is in flight, instead of rejecting it with ``session busy``. The old rejection forced clients into a deadline-bounded busy-retry that silently dropped the send when turn teardown outlived the deadline (e.g. a slow, non-interruptible tool like ``web_search`` running when the user hits stop). The message is instead queued to run as the next turn — and, for the default ``interrupt`` policy, the live turn is interrupted so it winds down promptly. Drained in ``run``'s tail (see ``_run_prompt_submit``). Modes: ``interrupt`` (default) → interrupt + queue; ``queue`` → queue without interrupting; ``steer`` → inject into the live turn if accepted, else queue. rNrOrNrrrNsteeredrqueued) rrr`rr3rar5rr)rr-r#rrrrNs rD_handle_busy_submitrsQ" ! "D KK E  {{9% %  w5,1H {{4 ^,9-1YY[GM*939 566!  -{{9%-- y1!%  -  wWe4 sXx( ))199    --sGD D$0DD$$D3$D3 DD!D$$ D0/D03D<c|d5|jd}|r|jdr dddyd|d<d|d<|jd|d|d<ddd t|rt|||d}|jd rqt|jd xsijd xsd }|d5d|d<t |dddt d |d |i yt |||dy#1swYxYw#1swY8xYw#t$r^}td t|jd |tj|d5d|d<dddn #1swYnxYwYd}~yd}~wwxYw)u6Fire a queued next-turn prompt if one is waiting and the session is idle. Returns True if a queued prompt was dispatched (the caller should then skip lower-priority follow-ups this cycle — the user's message wins). Mirrors the claim-under-lock pattern used by the goal-continuation re-fire. rOrrNFTrrrrKzqueued prompt failedz-[tui_gateway] queued prompt dispatch failed: r%r') rr"rbr6rQr_run_prompt_submitr5r:rr9r;r<)rr-r#rrrKr!s rDrTrT>s  7_-Y/77$( !  ::k " .#)+#6GK 7' %g .1#sGVF^TDxx  1 7R<+t+rzsession.createc" tjjdd}t}t |j dd}t |j d}t|j dxsdj}t|j dxsdjxsd}t|j dxsdj} t|xrYtjjtjjtjj|} t!|} t#t|j d xsdjxsd} t%|j d xsdjxsd} t'| } t|j d xsdj}|r3|t|j d xsdjxsddnd}d}t|j dxsdjx}r ddlm}||}d}d|vrt-|j drdnd}t/j0}t3j2}t5||| \}}| t7|d|St85iddddd|dgdt-|j dd d|d|d|did| d|d t/j:d!dd"dd| d#dd$||||||xsd| t| ndd |t=| dt?itAxstBd%tD|<tGtD|dddtI|tKtM|||tO|tQ|d |r|j d n tSi|r|j d rd |d iniiitD|dtUtD|dtWtD|dd&tXt[d'd(S#t$rd } YwxYw#t$rd}YwxYw#1swYxYw))Nrr3r4rnrrrrFrBrrrrurrparse_reasoning_effortrrr1rNrrr2rr%rrhrrPrOr1rVrr)r5r6r7rrrrrrrBr]r5rirT)r`rrr6r rrr)r rrBrnrH).rtrurvrrrrr6r7rr,r.rrrr5rrrorr=rrrrwr3r"rrerrrrr rQr_schedule_agent_buildrrarrrr5rrr)rrr-rwr3rPrrraw_cwdr resolved_cwdrBrr create_modelsession_model_overrider6rrr7rrr+r4s rDrrs **,  2A C  C vzz&"% &D"6::j#9:G  7#)r * 0 0 2EFJJ':;ArBHHJRd &**U#)r*002GG}drwwrwwGYGYZaGb7c)d #6*L $SH)=)C%D%J%J%L%TPT UF zz)$*113;tG )Lvzz'*0b1779L C :0F0L",M,S,S,U,]Y]^  !%VZZ 239r:@@BBvB - ?(>v(F % $(  )&**V*<=J2 % OO E ))+C5 S&E= C}-- ".  T  4   5   r  "?6::>SUZ3[#\  #E   D   #   b   L   w   INN,   q   Q   <  T!  " 3#  $5)B,H!2"]d1=1IC -t24 ":"<!*,@0@?  #B in-E".^#%'  !$ \,W5 -+..w7').2H2L2LZ2X !7 !CD ~e,-inU.CD031FG$< 5 7-    G  < -(, % -&".".s2*A&Q!$Q3$BQ)*)?)D1"#%%/"7R        'Cs1v&&'s=AD=,B!  "!  !  7!   (!  1!  !! " #! $(-9-EL)4$<(".068&(<,._runs&--$   sG , rTNr)r-r7rrs` rDrrs*- OOE4 (EEL KKMrrc$%|jdd%%s t|ddS t|jdd$|jdxsdj xsd}t |}|dd lm}||d z }n t}| t|d S|j%}|sO|j%}|r|d%n6t|jddrt%ri}n t|ddS|rKt|jdds0 |j%}|r|%k7r|%|j%xs|}t#|jdxsdj xs t%|}dt"dt&dt&f$%fd } t(5t+%} | t-|| | cdddS dddt|jddrEt/j0j2dd} t5t#|jdxsdj xsd} t7%| | \} }| t|d|S |j9%|j;%d}|xs t?}tA%$||| | t|jdd|d }tC| %|| x} t-|| | St%}tE|}t-|| %tG||tI|d|%|d!|rd"d$ Sd#d$ St|jd%dst/j0j2dd} t5t#|jdxsdj xsd} t7%| | \} }| t|d|StK |j9%|jM%\}}|jO%}tQ|}tS|xsi}|jd&xsi}|xs t?}tA%$||| | t|jdd|||jd&|xsd' }tC| %|| x} t-|| | StU| tWtE|}t-|| %tG||tI||jd(xsd|jd)xsd*dd%|d!d#d$ St/j0j2dd} t5t#|jdxsdj xsd} t7%| | \} }| t|d|StK|tYt#|nd} |j9%|jM%\}}|jO%}tQ|}tE|}t[%} tS|}t]| %f%|| d+|}t_| | ta| t(5t+%} | n tc|d,r|je| | j=| \}} tg|| $dtixstj-}!%|!d.<t-||!cdddS |tYt#|nd}" tm| %||$||| /|" ta|" | tnvrO|jd&|d&tn| d&<|tn| d0<|t#|tn| d1<| tn| d2<tnj| xsi}#dddt-|| %tG||tq|#dd%ts|#jd!xstujtd#d$ S#ttf$rd$YwxYw#t $r%}YwxYw#1swY7xYw#t $r,}| | j=t|d d|cYd}~Sd}~wwxYw#t $r,}| | j=t|d d|cYd}~Sd}~wwxYw#t_|wxYw#t $r:}| | j=t|d d|cYd}~| ta|SSd}~wwxYw#| ta|wwxYw#t $rYxwxYw#|" ta|"wwxYw#t $r5}| | j=t|d d|cYd}~cdddSd}~wwxYw#1swYxYw)3Nr rsession_id requiredr3r4rrrrrrrrFrrr-r#rct||dtxst}|d<|jdt r d|d<d|d<|S)NTr3touchrresumedrNrr^rN)_live_session_payloadrr rr)r-r#rr3rs rD_reuse_live_payloadz_.._reuse_live_payloadPsc'  ')=-=  $  ;;w  ',=f,E!%GI  +GH rrrBr1rTrepair_alternationzresume failed: r)r3rrPr+rBrrrrr^idle) r rBrBrnrHinflightrrryrN eager_buildr5) r3rrPr+rBrr1rr5rrrru)r rrrr@rB)r3rrrBr1rr%);rrrrSr>r7rrrrarrbget_session_by_titlerrresolve_resume_session_idr5r6rrrrrartrurvrr"reopen_sessionget_messages_as_conversationr)r r3r6rrr0roget_resume_conversationsget_ancestor_display_prefixrrrrr rrrr r`rrCrr rrQrRrr3)&rrrrrrkfoundtipprofile_resume_cwdrDrr-rBr+r4rPrrr4 child_runningrn raw_historydisplay_historyrrr5rr1rstored_runtime_overridesrN other_sid other_sessionrinit_home_tokenr#r3rs& @@rDrr s ZZ b )F C4556::fb)* zz)$*113;tG )L* |j8 9 Y z$St44 NN6 "E ''/ 4[F VZZ6 7? ..v6C 3&=FNN6*3eEUYYu-34::<@WAt$ 8(0  s/6788 8vzz&%01jjlr"(VZZ-A-GR)H)N)N)P)XTXY9 C }  $T=1 1 :   f %55fQU5VG !:$8$:)  / ;PRW0X Y%  )ffeD DD Qs/67 7*&1 '0 !!!$X$)#. (%$\2)6+   =C   : 6::mU; <jjlr"(VZZ-A-GR)H)N)N)P)XTXY9 C }  $T=1 1 ! :   f % ,.+F+Fv+N (K//7)+66e<B "'78>B :$8$:)  / ;PRW0X Y#)%$==)9:%.%6$  )ffeD DD Qs/67 7c")+'8 !!!$X$)(,,W5;&]]+>?E2 ! %$\2    0 **,  2A C $SH)=)C%D%J%J%L%TPT UF5VE= C}--7C7O \!23UY(3 &!(*'B'B6'J$ _"$!?!?!G)+6'8%f- + (I'O $""(  + E #6 *  ! &z 2 8+(0   5'*KKM  '+ $I}++-A1A G"(GI sG$'8+8+(# : +)\):;  @*!! #..?i+//0@AM7O(8IcN#3429> #56 --$*q8+r   ] !%1! L 9 HTYY[I  A z "j C 888: :  T_QC#89 9 :L :  T_QC#89 9 :N #6 * 6   MMOC455  ! &z 2 " 6  ! &z 2 "  @#..?/ :  T_QC#89 9o8+8+h :i8+8+s._ _1'`-$`%a>Abb2 be !c)=Ae d (c9;A%d  e _.-_.1 `?``  a!a:aa a=!a82a=8a= b  b c!c:c;cccc&) c62e 5c66e 9d  d  e !e6e 7e e  e  ezsession.cwd.setct||\}}|r|S|jdr t|ddSt|jddxsdj }|s t|ddS t ||}|jd }| t||n|t|t|d d }td |jd d|t||S#t $r }t|dt|cYd}~Sd}~wwxYw)Nrz session busyrr cwd requiredrNTrrPr ) rrrr6r7r?r>rRr5rrra) rrr#rrrrrNrHs rDrrs,LGS  {{9C~.. fjj#)r * 0 0 2C C~..'w, KK E,1,== (%c*(- DD  .&**\26= sD> 'Cs1v&&'s/ C D%D:DDcttjD]D\}\}}||k7rtj |dif\}}t |j dcSy)Nz input.requestrsr)r_rSrfrTrr6ry)r-rr_evr _payloads rDrrsg!%hnn&6!73 i   266s_brdeleted) rrrarrer_rQrar5r delete_sessionra) rrrrkrirractiverrs rDrrgsRZZ b )F C455 B z$St44L  0I,,./H 0-5 Mqm8LaeeM" MF M C@AA"$z1L6##F#F C233 sY' (( 0 0 LC!FqcJKKL M 6C4556s_C3C' C3,DD7D'C0,C33 D<D DD E'D<6E<E session.titlect||\}}|r|St}| t|dS|d}d|vr|jdxsd} |j |xsd}|rd|j ||rd|d<|}nQ|j |}|xsijdxsdj} | |k(rd|d<|}n |s |}n|rd|d<t|jdd|t|||dS|jddxsdj} | s t|d d S |j || r0d|d<t|jdd|t|d | d S|j |}|rCd|d<t|jdd|t|d |jdxs| d St|t|5} | K| j || r9d|d<t|jdd|t|d | d cdddSddd| |d<t|jdd|t|d | d S#t$r|}YwxYw#1swYKxYw#t$r } t|dt| cYd} ~ Sd} ~ wt$r } t|dt| cYd} ~ Sd} ~ wwxYw)Nrrrrrr )rriztitle requiredF)pendingrTi)rrarrrlset_session_titlerbr7r5r)rarr&rr>r6) rrr#rrkrwrpresolved_title existing_rowexisting_titlerrrs rDrrs,LGS  B z$St44 - Cf;;/52 &11#6<"N''X6/3GO,%-N#%>>##6L'3'9r&>&>w&G&M2%T%T%VN%1370)1+)1+/( 'vzz,'CWM '"   ZZ $ * 1 1 3E C/00)'  U +'+GO $ *6::lB+G Qs>? ?~~c* '+GO $ *6::lB+G Q$*..w7@5 " w'  ! DY$)D)DS%)P+/(.vzz,/KWU3EE BC  D D D$) &vzz,'CWM3D59::e &%N &R D D 'Cs1v&& 'Cs1v&&'sp BI!-AI?/AI?I?AI3 I?)7I?! I0/I03I<8I?? KJ#K# K/K K Kc|yi}dD]Z}t||d}t|tr$|jr|j||<D|dk(sJt |sV|||<\|xsdS)aBuild an aux-client main_runtime override from a live agent. Lets a one-shot inherit the session's provider/model/credentials so its output matches the model the user is actually coding with, instead of falling back to the cheapest auto-detected backend. N)rrrrGr auth_moderG)rrr6r7r|)rNrfieldrEs rD_main_runtime_from_agentrsr }GV#ud+ eS !ekkm"[[]GEN i HUO"GEN # ?drroc |jdxsdjxsd}|jdxsd}|jdxsd}t|jdtr|jdni}|jdxsdjxsd} t |jd xsd }|jd }| t|}|s?t|js&t|js t|d d Stj|jdxsd} | rt| jdnd} ddl m } | ||||||||nd| } t%|d| iS#t t f$rd }YwxYw#t t f$rd}YwxYw#t$r } t|dt| cYd} ~ Sd} ~ wt $r } t|dt| cYd} ~ Sd} ~ wt$r0} t j#d| t|dd| cYd} ~ Sd} ~ wwxYw)aRun a single stateless LLM request outside any conversation. Generic helper for small generative chores (e.g. a commit message from a diff). Accepts either a named ``template`` + ``variables`` or an explicit ``instructions`` / ``input`` pair. When ``session_id`` resolves to a live session the call inherits that agent's model; otherwise it uses the configured auxiliary ``task`` backend. Never mutates session history, so prompt caching is untouched. templaterN instructionsr variablestasktitle_generation max_tokensi temperaturez5llm.oneshot requires a template or instructions/inputr rNr) run_oneshotg333333?)r user_inputrrrrr main_runtimeiizllm.oneshot failed: %szone-shot generation failed: r)rr7rrrrSr>rr6rrQr agent.oneshotrKeyErrorr5rr ra)rrrrrrrrrr#rrrrs rDrrs* :&,"335=H::n-3LG$*J+5fjj6Mt+T ;'Z\I JJv  4"4 ; ; = SASDL19T: **]+K  ,K C -335c*o>S>S>UCVWWmmFJJ|4:;GEL+GKK,@ARVLC-%!!'2'> C%  $ sVTN ##K z "  :& K . 'Cs1v&& 'Cs1v&& C/3C!=aSABBCsf,F F01GF-,F-0GG IG+%I+ I7H I I%I I Izhandoff.requestc t||\}}|r|S|jdr t|ddS|jddxsdjj }|s t|ddS dd lm}m} ||} |} | jj|} | r | jst|dd|dS| j|} | r | jst|dd|dSt|t!|5} | t#|dcd d d S|d} | j%| s| j'| d| d d| j)| |} d d d s t|ddSt-|d || j.dS#t$r}t|d d |cYd }~Sd }~wwxYw#ttf$rt|d d|dcYSwxYw#t$r}t|d d |cYd }~Sd }~wwxYw#t$r)}t|dt+|cYd }~cd d d Sd }~wwxYw#1swYxYw)aQueue a handoff of this session to a messaging platform. Desktop parity with the CLI ``/handoff`` command: we only write ``handoff_state='pending'`` onto the persisted session row. The actual transfer is performed by the separate ``hermes gateway`` process, whose ``_handoff_watcher`` claims the row, re-binds the session to the platform's home channel, and forges a synthetic turn. The desktop then polls ``handoff.state`` for the terminal result. rr[uLsession busy — wait for the current turn to finish, then retry the handoffrrr~zplatform requiredr)rDload_gateway_configzcould not load gateway config: Nizunknown platform ''iz platform 'z*' is not configured/enabled in the gatewayizno home channel configured for u8 — set one with /sethome on the destination chat firstrrrzhandoff-riuNsession is already in flight for handoff — wait for it to settle, then retryT)rrr home_name)rrrr7rrFrDrr5r>r platformsrget_home_channelchat_idr&rrrbrrequest_handoffr6rarI)rrr#r platform_namerDrrr gw_configpcfgrrkrwrs rDrr3s ,LGS  {{9   Z  ZZ B/52<<>DDFM C233 F@FM*F')     " "8 ,D t||  'Q R   % %h /D t||  -m_=5 5  7# W  + :(48 + +m$ +>>#&$$SHS!WI*>?##C7B +    \   %   _ FC!@DEEF  !FC!3M?!DEEF FC!@DEEF< +T3q6* * + + + + +s4F=GG& I&I,;H  F=#F82F=8F= G#"G#& H /H>H H  H>H9*H>+I9H>>II z handoff.statec^t||\}}|r|St|5}|t|dcdddS|j|d}dddxsi}t ||j dxsd|j dxsd|j dxsdd S#1swYXxYw) zPoll the handoff state for a session. Returns ``{state, platform, error}`` where ``state`` is one of ``pending|running|completed|failed`` (or empty when no handoff record exists). Desktop polls this after ``handoff.request``. Nrrrstaterrr)rrr)rrrget_handoff_staterar)rrr#rrkr4s rDrrs ,LGS  W > :(48>>%%gm&<=> \rF  ZZ(.B :.4"ZZ(.B   >>sB#B##B,z handoff.failct||\}}|r|St|jdxsdjdd}t |5}|t |dcdddS|d}|j |xsi}|jdxsd }|d vr*|j||t|d d d cdddS dddt|dd S#1swYxYw)zMark an in-flight handoff as failed so the user can retry. Desktop calls this when its bounded poll times out. Only pending/running rows are changed so a late success from the gateway watcher is not clobbered. rzhandoff failedNrrrrr>rrTfailed)rrF) rr6rr7rrr fail_handoffra) rrr#rr\rkrwr4rs rDrrs ,LGS  G$8(8 9 ? ? A$3 GF W A :(48AAm$%%c*0b 7#)r * * OOC (sth?@AA + A suu5 66AAsC'ACC%ryct||\}}|r|S|jd}t|}| |sddddd} ddlm}|}|r||d<t ||S#t $rYwxYw)NrNr)rrrr)nous_credits_lines credits_lines)rrragent.account_usagerr5ra)rrr#rrNrrcreditss rDrrs,LGS  KK E)'2E }Ua1qA  :$& %,E/ " sE?    sA A('A(zsession.context_breakdownc t||\}}|r|S|jd}|t|xs td}t |g|jddxsd|jddxsd|jddxsd|jddxs|jddxsdt |jddd S|d 5t |jd g}ddd dd lm}||}t ||S#1swY%xYw#t$r} t|d d| cYd} ~ Sd} ~ wwxYw)NrNrrrrrrr) categoriesrrrestimated_totalrrOrP)!compute_session_context_breakdownr=z%Could not compute context breakdown: ) rrrrrar>r_agent.context_breakdownrr5r) rrr#rrNrrPrrr!s rDrrsO,LGS  KK E }'0DJt4D  $yy:?a#(99->#B#Ga % .! < A#(99^Q#?#]599WVWCX#]\])'266wC      3w{{9b123NM3E7C sG 33 NC!FseLMMNs*D9D D E)D>8E>Ecf ddlm}|jt|S#t$ricYSwxYw)zReal (padding-trimmed) frame count per state, for the desktop canvas. Fail-open: a decode hiccup returns ``{}`` and the canvas falls back to its static ``framesPerState`` rather than breaking the (cosmetic) pet. r)render) agent.petrstate_frame_countsr6r5) spritesheetrs rD_pet_frame_countsrs4 $(([)9::  s " 00_pet_payload_cachecx |j}|jd|jS#t$rYywxYw)z,Stable revision id for one spritesheet file.rz0:0)rQ st_mtime_nsst_sizer5)rrQs rD_pet_sheet_revisionrsC!""#1T\\N33 s *- 99scalec  |jj}t|j|j|j |j |jt|dfS#t$rYywxYw)z1Cache key for the expensive sprite payload build.Nr) rrQr5r6rrr display_namer)petrrQs rD_pet_payload_cache_keyrsn##% COO     eQ   sA)) A54A5c<t|}t|jdtrt|d|d<t|jdtrt|d|d<t|jdtrt|d|d<|S)zCShallow-clone cached payloads so callers can't mutate shared state. framesByState framesByRow stateRows)rrrr_)routs rD_clone_pet_payloadrs w-C'++o.5#GO$<=O'++m,d3!'-"89M'++k*D1 45K Jrc  ddlm}ddlm}m}|j |5}|j d}dddtdj|jz}td|j|jz}|j|}i} t|d|D]\} } | |jz} d} t|D]X}||jz}|j|| ||jz| |jzf}|j!|rn| dz } Z| | | <| S#1swYxYw#t"$ricYSwxYw)z3Real frame count per concrete spritesheet row name.rr) constantsrRGBANr)rrrrrr1convertrFr}FRAME_Wr~FRAME_Hstate_rows_for_grid enumeratercrop_frame_is_blankr5)rrrropenedrr3 row_countr$rrow_idxrIrr.colleftr@s rD_pet_row_frame_countsr+sN/ ZZ $ +NN6*E +1ekkY%6%6675<<9+<+<<= ,,Y7 &tJY'78 MGTI---CET{ Y... D#ti6G6G/GyO`O`I`#ab))%0    CI  ! + +"  s(D4D(C4D4(D1-D44 EEcddlm} ddlm}|}t |j dt r|j dini}t |j dt r|j dini}t|j d|jxs |jS#t$r|jcYSwxYw)zGConfigured ``display.pet.scale`` (or the engine default), never raises.rrrrrr) rrr^rrrrr DEFAULT_SCALEr5)rrrrpet_cfgs rD_pet_config_scalerGs#'1m,6swwy7I4,P#'')R(VX,6w{{57I4,P'++eR(VXW[[)*A*AB]iF]F]^^ '&&&'sB%B..CCcddl}ddlm}t||}|1t5t j |}ddd t|S|jj}|jjj}|dk(rdnd}|j|j||j|jdt!|j|j"|j$|j&t)|jt+|j|j,|t/|jd } |st5| t |<t1t d kDr>t j3t5t7t t1t d kDr>dddt| St| S#1swYxYw#1swYt| SxYw) zBuild the renderer payload (spritesheet bytes + geometry) for *pet*. Shared by ``pet.info`` (the active mascot) and ``pet.hatch`` (the unadopted preview) so both feed the desktop canvas / TUI from one shape. rNrr.pngz image/pngz image/webpr@) r displayNamemimespritesheetBase64spritesheetRevisionframeWframeHframesPerStaterrloopMsrrr)base64rrr_pet_payload_cache_lockrrrr read_bytesrbrrrstandard_b64encodedecoderrrFRAMES_PER_STATErrLOOP_MS_pet_state_rowsrr(nextiter) rrrr cache_keycachedrrbrrs rD_pet_sprite_payloadrVs #&s%8I $ 7'++I6F 7  %f- - // $ $ &C __ # # ) ) +F F*; D''#66s;BB7K23??C#####44*3??;,S__=##$S__5G $ G,3 y )()A-"&&tD1C,D'EF()A- G g && g &&9 7 70 G g &&sGAGGG(c(ddlm}m} ddlm}|}t |j dtr|j dini}t |j dtr|j dini}t|j d}t|j ddxsd}|r|j|nd }t|j d |jxs |j} ||| fS#t$ri}YwxYw) z2Resolve configured active pet + scale from config.r)rstorerrrrrrNr)rrrr^rrrrr5rr6resolve_active_petrr) rrrrrrrconfigured_slugrrs rD_pet_active_selectionrs*1m,6swwy7I4,P#'')R(VX,6w{{57I4,P'++eR(VX7;;y)*G'++fb17R8O7>% " "? 3DC '++gy'>'>?Z9CZCZ [E C  sA3D DDc6 ddlm}ddlm}|j |5}t d|j |jz}dddt|jS#1swY#xYw#t$rddlm}t|jcYSwxYw)aRow taxonomy for the concrete active pet sheet. Hermes has to support both the legacy 8-row petdex atlas and the current Codex/petdex 9-row atlas. The desktop canvas gets this list and indexes it with the same `PetState` names the Python renderer uses. rrrrN) rrrrr1rFr~rr_rr5 STATE_ROWS)rrrrrs rDrrs *' ZZ $ BAu||y/@/@@AI BI11)<== B B *'I(())*s(A1$A%!A1%A.*A11$BBrgc t\}}}|r| |jst|ddiSt|ddit||S#t$r.}t j d|t|ddicYd}~Sd}~wwxYw)u=Return the active petdex pet for surfaces that render sprites. Shared by the desktop (canvas) and the TUI (half-block). Carries the spritesheet bytes (base64) plus the engine's frame geometry + state-row taxonomy so the renderer is a thin, framework-native consumer. The activity→state decision is mirrored from ``agent.pet.state`` client-side. Agent-independent (reads config + disk), so it works on any session and before the agent finishes building. Fail-open: returns ``enabled=False`` on any error rather than erroring the surface. NrFTrzpet.info failed: %s)rrrarr5rr*rrrrrr!s rDrrs ,35e#+SZZsY./ /3DR,?5,QRSS , *C03E*++,s"+A A B#A;5B;Bz pet.info.metac B t\}}}|r| |jst|ddiSt|d|j|j|t |j dS#t$r.}tjd|t|ddicYd}~Sd}~wwxYw)z?Cheap active-pet metadata used to avoid full payload refreshes.NrFT)rrrrrzpet.info.meta failed: %s) rrrarrrrr5rr*rs rDrrs,35e#+SZZsY./ / "//':3??'K     , /53E*++,s"+A'8A'' B0#BBBrhc ddlm}m}m}ddlm} ddlm}|}t|jdtr|jdini}t|jdtr|jdini} t| jdst|ddiS|jt| jd d xsd } | | j st|ddiSt|jd xs |j"j$j&} t)| jd |j*xs |j*} t-|jdxsdxs"|j/| | jdd} |jdrt| jddxsdj1}|dvr|j3n|}|dk(r|j5| j6}|t| j8d| j;| |}|rrt=|dxsd}t|d| j6| j>| d||jA||d|d|d|d|jBtEd|z | d S|t| j8d| | }|jG| xsd}g}tI|D]P}|jK| || }|jM|Dcgc]}|Dcgc] \}}g|| c}}c}}}Rt|d| j6| j>| | |jBtEd|z || d S#t$ri} YwxYwcc}}wcc}}}w#t$r.}tNjQd!|t|ddicYd }~Sd }~wwxYw)"aReturn half-block cell frames for one pet state (TUI renderer). The TUI can't draw a canvas, so the engine downsamples the spritesheet to a grid of half-block cells and the Ink side paints them with native color props. Each cell is ``[tr,tg,tb,ta, br,bg,bb,ba]`` (top + bottom pixel). Params: ``state`` (idle/run/review/failed/wave/jump), ``cols`` (width). Fail-open: ``enabled=False`` on any problem. r)rrr) PetRendererrrrrFrrNrrr3 unicode_colsgraphics render_moder)rrkitty)rr)image_idframesrTr$ placeholder) rrrrr imageIdcolorr3r$rrframeMsrrC)rrr )r3)rrrrr3rrrzpet.cells failed: %s))rrrragent.pet.renderr r^rrrrr5rrarr6rPetStateIDLErErrr resolve_colsrdetect_terminal_graphicskitty_image_idrr kitty_payloadrrkitty_color_hexrrF frame_countrcellsrrr*)rrrrrr rrrrrrrr3 configuredgmoderrkcountrendererr.rigridrlrrr!s rDrrsZ,660  5-C0:3779;Mt0Tcggi,Z\G0:7;;u;Mt0Tgkk%,Z\GGKK *+sY./ /&&s7;;vr+B+Hb'IJ ;cjjsY./ /FJJw'H9+=+=+B+B+H+HIgkk'9+B+BC^yG^G^_6::f%*+ly/E/EeW[[YgijMk/l ::j !W[[?I6JPPRJ9C|9SF335YcE!00:%(we--9 !238qF'+$'HH+.+;+;%*(/'/%+%;%;H%E$+FO$+FO+2=+A&-h&7'0'8'83q&>'I%*&     $$U+0qu A>>%>6D MMGKLLs;msF/C/&/;L    "//$,,s1e}<    C G |<L , +S13E*++,s{N4A3N'N4.A N48GN4A)N4* N-4N'N- A N4 N$ N4#N$$N4'N--N44 O+=#O& O+&O+rpc t|jd} ddlm} ddlm}|}t |jdtr|jdini}t |jdtr|jdini}|jDcic]}|j|} }g} t} ddl m } m} |r| |rgn| D]}| j|j| j!|j|j"|j| v|j$d|j$v|j| vxr| |jj&d  | j-D]5\}}|| vs | j!||j"d d |j&d7t/|t|jdt1|jdd xsd | dS#t$ri}YwxYwcc}w#t$r }t(j+d |Yd }~d }~wwxYw#t$r0}t(j+d|t/|dd gdcYd }~Sd }~wwxYw)a0List adoptable pets for the desktop appearance picker. Returns the petdex gallery merged with local install state plus the current config (active slug + enabled). Agent-independent. Fail-open: returns whatever is installed locally if the gallery can't be reached, so the picker still works offline. Param ``localOnly`` (bool): skip the remote petdex manifest fetch and return only locally-installed pets. The desktop loads this first so the user's own pets render instantly instead of waiting on the (possibly slow) manifest. localOnlyrrrrr)fetch_manifestprefetchz /curated/)rr installedspritesheetUrlcurated generatedz%pet.gallery manifest fetch failed: %sNTr)rrr)r*r,rr)rrpetszpet.gallery failed: %sF)rrrrr^rrrr5installed_petsrr^agent.pet.manifestr'r(r%rrspritesheet_urlr,rr*rfrar6)rr local_onlyrrrrrrr)galleryrr'r(rr!rrs rDrrDsTfjj-.JAF#  5-C0:3779;Mt0Tcggi,Z\G0:7;;u;Mt0Tgkk%,Z\G).(<(<(>?1QVVQY? ?  G C )~/? $ % ','9'9%*ZZ9%<*/*?*?$/%2G2G#G%*ZZ9%<%`5::AVA`A`   &#* ID#4 $'*'7'7%)*,%(]]    I 67gkk&"5;<   ] G @6 G LL@# F F G0 F -s33ERDEEFsI A3H I (H<I B1H!<I A1I HI HI ! I *II I  I J%J;JJrkc t|jdxsdj}|s t|ddS ddlm}ddlm}ddlm } |j|}||t|d ||jdS#|j|f$r}t|d d |d |cYd }~Sd }~wwxYw#t$r0}tj!d|t|d d|cYd }~Sd }~wwxYw)zAdopt a pet from the desktop picker: install (if needed) + activate. Params: ``slug`` (required). Writes ``display.pet.*`` to config and returns ``{ok, slug, displayName}``. The surface re-pulls ``pet.info`` to render it. rr missing slugrr&) ManifestError) _set_activezcould not adopt 'z': NTrrrzpet.select failed: %szpet.select failed: )r6rr7rrrr/r6hermes_cli.petsr7 install_pet PetStoreErrorrarr5rr*)rrrrr6r7rr!s rDrrs vzz&!'R ( . . 0D C~.. <#4/ G##D)C D3tT#BRBRSTT##]3 GT%6tfCu#EF F G < ,c2C!4SE:;; remove_petr5rr*ra)rrrrr>removedr!s rDrrs vzz&!'R ( . . 0D C~..<#4""4( E T "3w566 E LL> D D E < ,c2C!4SE:;;`` (which the desktop CSP / R2 hotlink rules break). Params: ``slug`` (required), ``url`` (optional petdex spritesheet URL used only for not-yet-installed pets). Fail-open: ``{ok: false}`` with no error. rrr4r5rNr&r) source_urlFr?Tdata:image/png;base64,r@)rrdataUrizpet.thumb failed: %s)r6rr7rrrr thumbnail_pngrarrr5rr*)rrrrrrr!s rDrrs vzz&!'R ( . . 0D C~..5#""4C 58I8OR4P"Qs5$78 8 3f6O6OPT6U6\6\]d6ee    5 +S13ud3445s$A B80B88 C0$C+%C0+C0z pet.disablec ddlm}|dt|ddiS#t$r0}tj d|t |dd|cYd }~Sd }~wwxYw) zITurn the pet off from the desktop picker (``display.pet.enabled=false``).r) _set_enabledFrTzpet.disable failed: %sr8zpet.disable failed: N)r:rQrar5rr*r)rrrQr!s rDrr4sY=0U3t %% = -s3C!5cU;<<=s A%A AAz pet.scalec ddlm}||jd\}}|r t|d|St |d|dS#t $r0}t jd|t|dd |cYd }~Sd }~wwxYw) aPersist ``display.pet.scale`` from the desktop slider. Params: ``scale``. Clamped to the engine bounds. The renderer updates its own ``$petInfo`` for instant feedback; this just makes the change durable + visible to the other terminal surfaces on their next read. r) set_pet_scalerr4T)rrzpet.scale failed: %sr8zpet.scale failed: N)r:rSrrrar5rr*)rrrSrrr!s rDrrBs{ ;1"6::g#67 s T3' '3te455 ; +S1C!3C59::;s".AA A9 %A4.A94A9cRddlm}|dz dz }|jdd|S)z=Profile-scoped staging dir for in-progress generation drafts.rr cachezpet-genTparentsrr=r mkdirr rs rD _pet_gen_rootr\Ws,0  w & 2DJJtdJ+ Kr) max_age_sr]cDddl}ddl} |j}|jD]G}|js||j j z |kDs5|j |dIy#t$r }tjd|Yd}~yd}~wwxYw)z=Drop stale draft staging dirs so cache never grows unbounded.rNT) ignore_errorszpet-gen sweep failed: %s) shutilr3iterdiris_dirrQrRrmtreer5rr*)rr]r`r3rchildr!s rD_pet_gen_sweepre`s6diik\\^ 9E||~# (=(="= "I e4 8 9 6 /556s"4A6 A6 A66 B?BBrh)max_pxrfcpddl}ddl}ddlm}|j |5}|j d}dddj ||f|j|j}|j|dd|j|jjdzS#1swY{xYw) zBDownscaled PNG data URI for a draft image (small preview payload).rNrrPNG)formatrMr@) riorrr1r thumbnailLANCZOSBytesIOsavergetvaluer)r.rfrrjrrrbufs rD_pet_png_data_urirqns  D %VnnV$%MM66"EMM2 **,CHHSH #f&?&? &O&V&VW^&_ __ %%s B,,B5_pet_cancelledpngjpgwebpgif)rsjpegrtrurvrHERMES_PET_REFERENCE_MAX_BYTESiref_rawcddl}ddl}ddl}|jd||j}|s t d|j dj}tj|}| t ddj|j dj}t|d zd z} | tkDr t d  |j|d } t| tkDr t d |d|z } | j!| | gS#|jt f$r} t d| d} ~ wwxYw)z@Decode + validate a reference-image data URL into the stage dir.rNz*^data:image/([a-zA-Z0-9.+-]+);base64,(.*)$zinvalid reference image formatrz unsupported reference image typerrr(rzreference image too largeTvalidatezinvalid reference image dataz reference.)rbinasciirematchDOTALLr>groupr_PET_REFERENCE_MIME_EXTrr*rr_PET_REFERENCE_MAX_BYTES b64decodeError write_bytes) rystagerr}_rerrextrapproxrr!ref_paths rD#_pet_reference_images_from_data_urlrs7 IICWcjj YE 9:: ;;q>   !D ! % %d +C {;<<ggekk!n**,-G'lQ1 $F ((455Bw6 3x**455C5))H  : NNJ 'B78cABs DD>- D99D>rcdt5tj|dddy#1swYyxYw)z?Clear a stale cancel flag at the start of a generate/hatch run.N_pet_cancel_lockrrdiscardrs rD_pet_cancel_armrs( &u%&&&&/cdt5tj|dddy#1swYyxYwr)rrrr%rs rD_pet_cancel_requestrs( "5!"""rcJt5|tvcdddS#1swYyxYwr)rrrrs rD_pet_is_cancelledrs" '&'''s"cdt5tj|dddy#1swYyxYwrrrs rD_pet_cancel_releasers( &u%&&&rz pet.cancelct|jdxsdj}|r t|t |ddiS)a Signal an in-flight ``pet.generate``/``pet.hatch`` (by token) to stop. Best-effort + idempotent: cancelling an unknown/finished token is a no-op. Stays off the worker pool so it lands while a heavy generation is occupying it. Returns ``{ok: True}``. rrrT)r6rr7rra)rrrs rDrrsA  7#)r * 0 0 2E E" sT4L !!rzpet.generate.statuscJ ddlm}m}m} |dd} |}t|||dS#|$rd}Y wxYw#t$r"}t j d|g}Yd}~Bd}~wwxYw#t$r/}t j d |t|dgdcYd}~Sd}~wwxYw) u#Whether pet generation is possible right now. True only when a reference-capable image backend (Nous Portal / OpenRouter / OpenAI gpt-image) is configured — the desktop checks this on open so it can offer setup instead of a dead prompt. Cheap (config + plugin discovery). r)GenerationErrorlist_sprite_providersresolve_providerT)require_referencesFzpet provider list failed: %sN)rrezpet.generate.status failed: %s)agent.pet.generate.imagegenrrrr5rr*ra)rrrrrrrer!s rDrrs?     5I -/I3iiHII I   LL7 =I  ? 5s;3e"=>>?sY A* /<A*9A*9A* A'A"A*"A''A** B"3$BB"B"rqc t|jdxsdj}t|jdxsdj}|s|s t|ddS t dt dt |jdxsdt|jd xsd jxsd } d d l d d l }d d l m }d dl m}m}t!} t#| |j$j&d dt)| z j+ddd } |r t-|} t|jdxsdj} d } | r |t1| | } |xsd}g t3ddddt dd ffd } |||| | |fdt;}t/|r t|ddSs t|ddSj=d !t?|dd"S#ttf$rdYwxYw#t$r+} t/t|dt| cYd } ~ Sd } ~ wwxYw#|$r+} t/t|dt| cYd } ~ Sd } ~ wwxYw#t4$r!} t6j9d| Yd } ~ #d } ~ wwxYw#|$r+} t/t|dt| cYd } ~ Sd } ~ wwxYw#t4$r0} t6j9d#| t|dd$| cYd } ~ Sd } ~ wwxYw)%uGenerate candidate base looks for a new pet (the draft/variant step). Params: ``prompt`` (required unless ``referenceImage`` is given), ``count`` (default 4), ``style`` (default ``auto``), ``referenceImage`` (optional data URL — a user photo/reference every draft is grounded on, e.g. to make *their* pet). Returns ``{ok, token, drafts:[{index, dataUri}]}`` — the token keys the staged base images for a later ``pet.hatch``. Heavy (network): worker pool. rrreferenceImager4zmissing promptrrr.rrrN)generate_base_draftsrr TrWrrpreferr8z"a pet based on the reference imagepet.generate.progress)rr.z!pet.generate init emit failed: %srrc Td|dz } j||t|}j ||d t dd ||dy#t$r!}tj d||Yd}~yd}~wwxYw#t$r }tj d|Yd}~yd}~wwxYw) Ndraft-rz pet.generate draft %d failed: %s)rrNrr)rrrNr.z%pet.generate progress emit failed: %s)copyfilerqr5rr*rr) rrGdestdata_urir!r.rr`rrs rD _on_draftz_.._on_draft8sVE7$//D T*,T2 JJ8< = K+#eSXY  ?L  K DcJJ Ks.AA> A;A66A;> B'B""B'ctSrrrsrDrz_..Ts %6u%=r)rcrreference_imagesron_draft is_cancelledzgeneration cancelledz$generation produced no usable draftsc |dS)Nrr)ds rDrz_..`s qzrr)rrdraftszpet.generate failed: %szpet.generate failed: ) r6rr7rrFrrrSr>r`rtagent.pet.generaterrrrr\rerurvrrZrrrrr5rr*rrra)rrrryrrtrrrrrr! provider_namespriteconceptr cancelledr.rr`rrs @@@@@rDrrs/H%+ , 2 2 4F&**-.4"5;;=G 'C/00As1c&**W"5":;<=  7#-v . 4 4 6 @&EZ>;Qt   "%u  D4 0  1#FwPU#V FJJz28b9??A   1)TBR=S\ij @@ C )2/O P KS K$ K K( - !1"= &e, E" T#9: :T#IJ J )*3tesCDDw z "2 1#E*Cs3x00 1# 1#E*Cs3x00 1 C LL .4C!6se<==>s02H)A0L  I0L I8L J+-L K$L 7L "L )H>=H> I5 I0*I5+L 0I55L 8J(= J#J(L #J((L + K4K L KL L L=L>L LL M%L?9M?Mric ^t|jdxsdj}t|jdxsdjxs||jdd}t|jdxsdj}|s t|ddS|s t|dd S t |} dd lm}dd l m }dd l m }m }t|z d |dz } | js t|ddSt|jdxsdj} d} | r |d| } t!|j#|} dtdtddfd} || | |t|jdxsdt|jdxs|t|jdxsdjxsd| |fd } t%|j'|j(}|rt+|t-ni}t/|d|j(|j0|j2jd g|d!S#t t f$rd}YwxYw#|$r } t|dt| cYd} ~ Sd} ~ wwxYw#|$r+} t|dt| cYd} ~ t%Sd} ~ wwxYw#t%wxYw#t4$r0} t6j9d"| t|dd#| cYd} ~ Sd} ~ wwxYw)$uTurn a chosen base draft into a full pet — installed but NOT yet active. Generation is expensive and the result varies, so hatch produces a *preview* the surface plays (all frames) before the user commits: the pet is written to the store (so it can be rendered + later activated) but the active pet is left untouched. Adopt with ``pet.select`` or throw it away with ``pet.remove``. Params: ``token`` + ``index`` (from ``pet.generate``), ``name`` (required), ``description`` (optional), ``prompt`` (optional concept for row prompts), ``style`` (optional). Returns ``{ok, slug, displayName, warnings, pet}`` where ``pet`` is the renderer payload. Heavy (network + raster): worker pool. rr cancelTokenrrrIr4z missing tokenrGr&) hatch_petrrru draft expired — generate againrNTrr8r rrc||d}|dk(r0|jddk(r|jd\}}}d|||d} tdd|y#t$r }tj d|Yd}~yd}~wwxYw) N)r rrlrr)r rrXrzpet.hatch.progressrz"pet.hatch progress emit failed: %s)r.rrr5rr*)r rrrrXrr!s rD _on_progressz_.._on_progresss',v>G~&,,s"3q"8%+\\#%6"tU$)E4RWX H*B8 H A3GG Hs A A3A..A3 descriptionrrrctSrr) cancel_tokensrDrz_..s %6|%Dr) base_imagerrrrrr on_progressrrr)rrrrrzpet.hatch failed: %szpet.hatch failed: )r6rr7rrrSr>rrrrrrrr\is_filer unique_slugrload_petrrrrar validationr5rr*)rrrrrIrrrrr rrr!rrrrrrs @rDrrgs  7#)r * 0 0 2E vzz-06B7==?H5L JJw "E vzz&!'R ( . . 0D C// C~..E A;#0Q&6%)==||~T#EF FFJJz28b9??A   1)T-X  %  & H HS HT H .! = 9 ?R@FJJx08D9&**W-78>>@JF(D F -nnV[[)IL%c1B1DERT  %22"--11*bA    q z "$# 1Cs3x00 1> -T3s8, ,  - - - ; +S1C!3C59::;s; I0AK3 0K3= J.K36A:J01A>K30JJJ- J("J-#K3(J--K30K 5K K  K# K3K  K## K00K33 L,<%L'!L,'L,c ddlm}m}m}m}d}t ||rd}nqt ||rd}nbt ||rd}nSt ||r%t |ddrt|jnd}n"t |ddrt|j}d |t|t |d dt |d dt |d ixsit |d dt |ddt |ddd S)zFMap a BillingError into the result.error envelope the TUI branches on.r)BillingRemoteSpendingRevokedBillingScopeRequiredBillingSessionRevokedBillingTransientrremote_spending_revokedsession_revokedinsufficient_scopeN rate_limitedF portal_url retry_afterractorrrecovery) rrrKrrrrrr) hermes_cli.nous_billingrrrrrrr6r)r!rrrrrrs rD_serialize_billing_errorrs D#34( C. /  C- .# C) *!(gt!tA|dScc} wcc} w)uISerialize a BillingState for the wire (Decimals → strings, money-safe).r format_moneyc |dSt|Srr6rs rDrz$_serialize_billing_state.._s}t4#e*4rN)brandlast4maskedr resolved_via) limit_usd limit_displayspent_this_month_usd spent_displayis_default_ceilingdistinct)rrpayment_method_idrrrr)r threshold_usdthreshold_display reload_to_usdreload_to_displaycardrT logged_inorg_nameorg_slugr)is_admincan_change_plan can_charge balance_usdbalance_displaycli_billing_enabledcharge_presetscharge_presets_displaymin_usdmax_usdr monthly_cap) auto_reloadrrr)!agent.billing_viewrrrrrrrrrrrrrrrrrrrrrr)rrrrrrrrrr_usage_payload) rrrrrmcrarcard_outrs rD_serialize_billing_stater s/5 D zzZZ%%ZZ%%jj'' zz))!JJ33  K $   BLL))",,7$&r'>'>$?)"*A*AB"$"7"7  K $    77 ww||z)&)+)B)BWW]]WW]] #BGGLL1zz 0 01!-b.>.>!? 0 01!-b.>.>!?    d U__  ENN  ENN      ENN   500  e&&  r%++,  <(9(9:  u88  %*>*>?Q2a5?  !E//,,____!%)94@bMRWRaRaDb44._s rrN) tier_id tier_namemonthly_creditscredits_remaining cycle_ends_atpending_downgrade_tier_namepending_downgrade_atpending_downgrade_displaycancel_at_period_endcancellation_effective_atcancellation_effective_display)r* rI tier_orderdollars_per_month_displayr, is_current is_enabledT) rrrrrorg_idr)rkrtiersrrr)r r rrrr* r+ r, r- r. r/ r0 r2 r3 r: rIr5 dollars_per_monthr7 r8 rrrrr9 r)rkrrr)rr rrrrrr: s rD_serialize_subscription_stater< sl1/5G }} MMyy!!"3"34!#A$7$7!8__+,+H+H$%$:$:)6q7M7M)N$%$:$:)*)D)D.;A rar< r5)rrr> rs rDrr sLhD(*35e<== h3t%Befgghr c d|j|j|j|j|j|j |j dnt|j |j|jd S)uHSerialize a SubscriptionChangePreview for the wire (Decimal → string).TN) reffectr\current_tier_idcurrent_tier_nametarget_tier_idtarget_tier_namemonthly_credits_deltaamount_due_now_cents effective_at) rA r\rB rC rD rE rF r6rG rH )rs rD_serialize_subscription_previewrI sn((((,,00**..++3DQ=T=T9U ! 6 6  rrc Pddlm}ddlm}m}|j d}|st |ddddS ||| }t |t|S#|$r}t |t|cYd }~Sd }~wt$r#}t |dd t|dcYd }~Sd }~wwxYw) u(POST /api/billing/subscription/preview → serialized quote or typed error. params: {subscription_type_id: str}. Chargeless effect quote. Requires billing:manage (live Stripe calls + amounts), so a 403 → insufficient_scope drives the device step-up exactly like the mutations. r)(subscription_change_preview_from_payload) BillingErrorpost_subscription_previewsubscription_type_idFinvalid_request subscription_type_id is requiredrrrK)rN Nr) r? rK rrL rM rrarI rr5r6)rrrK rL rM r* r|r!s rDrr !sQOjj/0G 3u/@MopqqN: %7 C 37@AA 730566 N3uw3s8LMMNs/#AB%A60B%6 B%B B% B%rc ddlm}m}t|j d}|j d}|s|st |ddddS ||| }t |d |j d |d S#|$r}t |t |cYd }~Sd }~wt$r#}t |ddt|dcYd }~Sd }~wwxYw)uPUT /api/billing/subscription/pending-change → {ok, message} or typed error. params: {subscription_type_id?: str, cancel?: bool}. Schedules a downgrade / same-price change OR a cancellation at period end (chargeless). Requires billing:manage. r)rL put_subscription_pending_changecancelrN FrO z*subscription_type_id or cancel is requiredrQ )rN rT TrKrrKrNr) rrL rS rrrarr5r6)rrrL rS rT r* rr!s rDrr"!sV &**X& 'Fjj/0G '3u/@Myz{{N0gV\]3t 90ERXYZZ 730566 N3uw3s8LMMNs0 (A22C7B C CB;5C;Crc ddlm}m} |}t|d|j d|dS#|$r}t|t |cYd}~Sd}~wt $r#}t|ddt|d cYd}~Sd}~wwxYw) uDELETE /api/billing/subscription/pending-change → {ok, message} or typed error. Clears a scheduled downgrade or cancellation (resume / undo). Chargeless, but it re-enables recurring spend → requires billing:manage and honors the kill-switch. r)rL "delete_subscription_pending_changeTrKrU NFrrQ )rrL rW rarrr5r6)rrrL rW rr!s rDrr9!szYN353t 90ERXYZZ 730566 N3uw3s8LMMNs,%0A>A A> A>A93A>9A>rc ddlm}ddlm}m}|j d}|st |ddddS|j d xs|} ||| }t |d |j d |j d |j d|j d|dS#|$r&}t|} || d <t || cYd}~Sd}~wt$r$}t |ddt||dcYd}~Sd}~wwxYw)uPOST /api/billing/subscription/upgrade → {ok, status, ...} or typed error. params: {subscription_type_id: str, idempotency_key?: str}. The single money route: prorate + charge the card on the subscription + flip the plan. SCA / decline come back as status requires_action / payment_failed with a recovery_url to finish in the portal. The idempotency key is minted if absent and echoed so the TUI reuses it on retry of the SAME upgrade. Requires billing:manage. rnew_idempotency_key)rL post_subscription_upgraderN FrO rP rQ idempotency_key)rN r\ TrNtargetTierName recoveryUrlr\)rrNrE recovery_urlr\r\ NrrrrKr\ ) rrZ rrL r[ rrarr5r6) rrrZ rL r[ r* rwrr!rs rDrrK!s7Ojj/0G 3u/@Mopqq **& ' @+>+@Cf*Y\]  **X.$*JJ/?$@ & = 9 **X.#&     &s+!$ 3} f3uw3s8`cdeefs1 AB&&C<+C C< C<C71C<7C<zbilling.chargec ddlm}m}ddlm}|j d}|t |dddd S|j d xs|} ||| }t |d |j d |dS#|$r&}t|} || d <t || cYd}~Sd}~wt$r$}t |ddt||dcYd}~Sd}~wwxYw)uPOST /api/billing/charge → {ok, chargeId} or a typed error envelope. params: {amount_usd: str|number, idempotency_key?: str}. If no key is supplied, the server-side core mints a fresh one and returns it so the TUI can reuse it on retry of the SAME purchase. r)rL post_chargerY amount_usdNFrO zamount_usd is requiredrQ r\ )rc r\ TchargeId)r charge_idr\ rr` ) rrL rb rrZ rrarr5r6) rrrL rb rZ amountrwrr!rs rDrrr!sB6 ZZ %F ~3u/@Mefgg **& ' @+>+@CfD3t&**Z2H]`abb &s+!$ 3} f3uw3s8`cdeefs0 (A66C ;BC  C (CC C zbilling.charge_statusc ddlm}m}|jd}|st |ddddS ||}t |d|jd |jd |jd |jd d S#|$r}t |t |cYd}~Sd}~wt $r#}t |ddt|dcYd}~Sd}~wwxYw)uGET /api/billing/charge/{id} → {ok, status, ...} or typed error. The poll. Caller drives the 2s/5-min cadence; this is a single status read. r)rL get_charge_statusre Finvalid_charge_idzcharge_id is requiredrQ TrN amountUsd settledAtr\)rrNrc settled_atr\Nr)rrL rh rrarr5r6)rrrL rh re rr!s rDrr!s H ;'I 3u/BOfghhN"9-  **X.$jj5$jj5 **X.     730566 N3uw3s8LMMNs0ABCB"C" C.C C Czbilling.auto_reloadc ddlm}m} t|j d}|j d}|j d}||t |ddd d S|||| t |d d iS#|$r}t |t |cYd}~Sd}~wt$r#}t |ddt|d cYd}~Sd}~wwxYw)uPATCH /api/billing/auto-top-up → {ok:true} or typed error (Screen 2). params: {enabled: bool, threshold: number, top_up_amount: number}. r)rL patch_auto_top_upr threshold top_up_amountNFrO z(threshold and top_up_amount are requiredrQ )rro rp rTr) rrL rn rrrarr5r6)rrrL rn rro rp r!s rDrr!s H Nvzz),-JJ{+  ?3   5s53DQ{|} }'Ym\3t %% 730566 N3uw3s8LMMNs6AA3A33C8B C CB<6C<Crc f|jdxsd ddlm}ddlm}dt dt dd ffd }|d | }t |d t|dS#$r&}t|}d |d<t ||cYd }~Sd }~wt$r$}t |d dt |d dcYd }~Sd }~wwxYw)uRun the lazy billing:manage step-up device flow → {ok, granted}. Triggered by the TUI after a billing call returns error=insufficient_scope. Returns granted:false when the server silently downscopes (non-admin / unticked). Runs on the thread pool (in _LONG_HANDLERS): the device flow blocks for the whole device-code lifetime (minutes), so it must not stall the main stdin loop. The verification URL/code reach the TUI via an out-of-band ``billing.step_up. verification`` event (a plain print would be dropped by the JSON-RPC stdout pipe), and the browser is opened TUI-side via openExternalUrl — never with the gateway's headless webbrowser.open (hence open_browser=False). r rr)step_up_nous_billing_scope)rL rrrNc&td||dy)Nzbilling.step_up.verification)verification_url user_coder)rrr-s rD_on_verificationz_.._on_verification!s .%(t< rF) open_browseron_verificationT)rgrantedry r)rrrKry ) rrrrr rrL r6rarrr5) rrrr rL rv ry r!rr-s @rDrr!s **\ " (bC`>8 # S T -0@ 3tW >?? 's+I3} `3uw3s8X]^__`s0AAB0B:B0 B0 B+%B0+B0session.statusc t||\}}|r|Sddlm}|jdxs|jdxsd}|jd}i}t }|r|r |j |xsi}d&dtdzdtfd } | |jd } | } d D]-} |j| s| |j| | } nt|} t|}t|d dxs| jd xsd }t|ddxs| jdxsd}tt|}ddd|d|g}|r|jd|d|jdxsdj}|r|jd||jd|d|dd| j!dd| j!ddt#|jdxsddd |jd!rd"nd#gt%|d$d%j'|iS#t $ri}YwxYw)'Nrdisplay_hermes_homerr rrNrprc|r tjt|S|xstjS#t$rY#wxYwr)r fromtimestamprr5r)rErps rD_dtz_.._dt!sF  --eEl;;)8<<>)  s: AAry)rlast_updated_atlast_activity_atrrTr (unknown)zHermes TUI Statusz Session ID: zPath: z Project: rIrzTitle: Model:  ()z Created: z%Y-%m-%d %H:%MzLast Activity: zTokens: rr zAgent Running: rYesNorrr)rr=r} rrarbr5rr>rrrrrr7r#r4rrar*)rrr#rr} rwrNrrkr createdupdatedrr?rrrr linesrs rDrr!sq,LGS  4 ++m $ F <(@ FBC KK E D B c >>#&,"D*X_**$((<()GGF 88E?$((5/73G  g &F #G ,Euj$/V6::j3IVYH E7D ) OVZZ-@ OKE#$8$ABG se $&'(  E  y 123 XXg  $" + + -E  wug&' LLeWBxj *(()9:; <g../?@A Bs599W-23A6 7w{{9'=e4H I   sXtyy/0 11W D s$I IIzsession.historyc&t||\}}|r|St|jdg}t}|(|jdr |j |dd}t |t|t|dS#t $rY,wxYw)NrPrTinclude_ancestors)r.rn) rr_rrarMr5rarr)rrr#rrPrks rDrr%"s,LGS  7;;y"-.G B ~'++m4 55 &$6G  \,W5     s B BBz session.undoc t||\}}|r|S|jdr t|ddSd}|d5|jdg}|rD|djdd vr.|j|d z }|r|djdd vr.|r,|djdd k(r|j|d z }|r!t |jd dd z|d <dddt |d |iS#1swYxYw)Nrr[9session busy — /interrupt the current turn before /undorrOrPrr)>rr?rr*r1rA)rrrr(rra)rrr#rrArPs rDrr<"s%LGS  {{9 R  G  T++i,'"+//&15JJ KKM qLG'"+//&15JJ wr{v.&8 KKM qLG ),W[[9JA-N)ORS)SG% & T sY( )) T TsAC9AC99Drct||\}}|r|St|rt|jdxsd}t|jddxsdj }d|rd|ndz} t |d|d}|jd d vr)t|d t|jdxsdSt||t|dd|dSt||\}}|r|S|jdr t|d dS|jdd}t|jddxsdj } ddl m } ddl m} |d5t|jdg} t!|jdd} dddt# } |d}t%|ddxsd}t%|ddxsd}| r | | ||nd}| dk\r"|rd|d nd}t'|d!d"| d#|d$d%|d& t)||||  '\}}|d5t|jdg}dddt#}t%|ddxs|}t%|ddxs|}|r | |||nd}|d}t+||| | |||t%|d(d)}t-||}t/d*||t||d+rd+nd|| |||||||d, t'|d-S#t $r}t|d d |cYd}~Sd}~wwxYw#1swY}xYw#1swYxYw#t'|d-wxYw#t $r }t|d.t|cYd}~Sd}~wwxYw)/Nr rrz /compressrrTrcrrr]zcompute-host compress failed: r>r control.errorr[rKzcompute-host compress failedrrNrhost_ackr=session busy — /interrupt the current turn before /compressrsummarize_manual_compressionrrOrPr1rNrr`rrz , focus: "" compressingu⠋ compressing z messages (~r z tok)…rrr1rcompression_staterPaborted) rNrArafter_messages before_tokens after_tokensrprrHrnri)rr"r6rr7rgr5rrIrar!agent.manual_compression_feedbackr rrr_rrrr|rrrRr)rrr#rr-rrackr!r rrr1 before_count_agentrrr focus_suffixrArrn after_count_sys_prompt_after _tools_afterr rNrprHrs rDrrX"s,LGS  !'*&**\*0b1&**]B7=2>DDF k1[M!2rJ K,- C 776?8 8T3swwy'9'[=[#\] ]+GS93<4UXYZZ%LGS  {{9 V   **\2 &Cfjj39r:@@BKV'RF ^ $ E"7;;y"#=>O!'++.?"CDO E?+ !f&=rBHb $/74  *{&   1 :EZ }A62L "<.1"1%U<.= 8 )6+ / / NGU( < Ir :; <h-K 7<K  #67D9CVL ."3&  G$E ,S' :2")%1Et"L G!0D .#t ,+29+=i<&'3&1%2$0&" ( & 3 (G KT%CC5#IJ J K& E E@ < <` 3 ( 'Cs1v&&'s7K,L< 7LA0L<L+ L >D  4 Ir234 d3Ww{{=7QWUWJ%$7K+x(#--/ [[. *sEl3  " ": . 8 8 :  ' $g . ! II$UGR8",%2%,U4KR%P%VTV ( "  3T+,,K TC!A)BqcRSST 44$   'Cs1v&&'s_F.G1G?:G9G F>!F93F>9F>G GG H#G>8H>Hz session.closec|jdd}t5t|}dddtd}t |d|iS#1swY$xYw)Nr rrIrrclosed)rrr|r~ra)rrr-r#r s rDrr#sT **\2 &C *$S)* %g+ FF sXv& ''**s AAr~c 2t||\}}|r|St}| t|dS|d}|d5|jdgDcgc] }t |}}ddds t |ddSt }tjjdd} t|} t|| | \} } | t |d | S|jd d } | r| }n7|j|xsd }t|dr|j|n|d}|j|| t!d|i|t#||D]5}|j%||jdd|jd7|j'|| t-|} t/| ||| }t1|t3| ||t5||jdd| | t6vr | t6| d<t9|| ||dScc}w#1swYxYw#t($r,}| | j+t |dd|cYd}~Sd}~wwxYw#t1|wxYw#t($r,}| | j+t |dd|cYd}~Sd}~wwxYw)NrrrOrPiu*nothing to branch — send a message firstrr1rrIrr6get_next_title_in_lineagez (branch)rrr)r*r+r,zbranch failed: rUr3r4)r3rBr%r=zagent init failed on branch: )r rr)rrarrrrrrtrurvr2r"rlr`r r rr;r-rr5r)rrrrr_rQra)rrr#rrkrrrPnew_keynew_sidrBr+r4 branch_namerrrrrNs rDrr#s%LGS  B z$St44m$G  D(/ Ir(BC49CCD CKLL Gjjlr"G W %F5&E= C}--**VR(K!6 E**73?xG2:;,,W5y *    " +G4%W%   C   "WWVV, *    We, D%g. +""( E #6 *    MVR(   i 9>Ig 5 6 s7UgN OOODDDV 6   MMOC4556 #6 * D   MMOC!>qcBCCDssH  HH  B2H I!I.A I!H  H I"!I I I II!! J*!J JJzsession.interruptc:t||\}}|r|St|rt|jdxsd}|jdr t j |d||d5d |d <d|d <dddt| d d l m }||ddd t|dd dSt||\}}|r|S|jd}|duxr|j}t|jd} | r"t|ddr|dj |d5d |d <d|d <ddd|s/|d5|jdrd|d<t!|dddt|jdd d d l m }||ddd t|ddiS#t $r}t|dd|cYd}~Sd}~wwxYw#1swY^xYw#t $rYMwxYw#1swYxYw#1swYxYw#t $rYtwxYw)Nr rrz interrupt-r8r]zcompute-host interrupt failed: rOT_turn_cancel_requestedrrresolve_gateway_approvalrrl resolve_allrVr_ _run_threadrNrFrN)rr"r6rr/rr5rrrvr raris_aliverr`rQ) rrr#rr-r!r run_threadrun_thread_aliveshould_interrupts rDrrg#sT,LGS  !'*&**\*0b1 ;;y ! P,.88:VYUZI[8\^ $ ,04G, -'+GO $ , s  ? $W]%;VQU V3=DIJJ%LGS  ]+J!-G*2E2E2GGKK 23GGG$4kB""$  (,0()#' (  ^ $ .{{9%%* "$W- .6::lB/0 ; !7TR sX}- ..i PC)H'NOO P , ,   $(( . .$    sfF32 GG&1 G6 "HH3 G<G GGG#& G32G36G?H  HHzdelegation.statuscdddlm}m}m}m}t |||||dS)Nr)is_spawn_pausedlist_active_subagents_get_max_concurrent_children_get_max_spawn_depth)rpausedmax_spawn_depthmax_concurrent_children)tools.delegate_toolr r r r ra)rrr r r r s rDrr#s;  +-%'35'C'E   rzdelegation.pauseclddlm}t|jdd}t |d||iS)Nr)set_spawn_pausedr T)r r rrra)rrr r s rDrr#s24 &**Xt, -F sX/78 99rzsubagent.interruptcddlm}t|jdxsdj }|s t |ddS||}t |||dS)Nr)interrupt_subagentrrzsubagent_id required)rPr)r r r6rr7rra)rrr rrs rDrr#sU6fjj/526<<>K C566 K (B sb= >>rcLddlm}|dz }|jdd|S)NrrUz spawn-treesTrWrYr[s rD_spawn_trees_rootr #s'0  } ,DJJtdJ+ Krc~djd|Dxsd}t|z }|jdd|S)Nrc3LK|]}|js|dvr|ndyw)z-_rN)isalnum)rrs rDrz*_spawn_tree_session_dir..#s#K1QYY[AI36Ks"$rTTrW)r*r rZ)r safers rD_spawn_tree_session_dirr #sB K KKXy  d"AGGD4G( Hrz _index.jsonlrc |tz jdd5}|jtj|ddzdddy#1swYyxYw#t $r }t jd|Yd}~yd}~wwxYw)Nrr r!FrDrz"spawn_tree index append failed: %s)_SPAWN_TREE_INDEXr1r2rrOSErrorrr*) session_dirrrBr!s rD_append_spawn_tree_indexr #s}@-- 3 3C' 3 J Ba GGDJJu59D@ A B B B @  93??@s4A*AAAAA B$A??Bch|tz }|jsgSg} |jdd5}|D]:}|j}|s |j t j |< ddd|S#t j$rY]wxYw#1swY|SxYw#t$rgcYSwxYw)Nrr r!) r rr1r7rrrrr )r index_pathrrBrs rD_read_spawn_tree_indexr #s00J     C  __S7_ 3 q zz|JJtzz$/0    J ++  J  sRB#B $A=0B3B#=BBBBB B# B## B10B1zspawn_tree.savec `t|jdxsdj}|jdxsg}t|tr|s t |ddSddlm}|jd}|jd xstj}t|jd xsd}|jt|jd }|d } t|xsd } | | z } ||r t|ndt|||d} | jtj| ddt!| t| || d| d |t#|dt%|t| |dS#t$r} t |dd| cYd} ~ Sd} ~ wwxYw)Nr rrar zsubagents list requiredrrry finished_atr9z %Y%m%dT%H%M%Sr rF)r ryr r9raFr r r!r=zspawn_tree.save failed: )r.r ryr r9r.)r.r )r6rr7rr_rrr3utcfromtimestamprr4r write_textrrr r rra)rrr rarryr r9rfnamerr.rr!s rDrr$sVZZ -34::.O$s5AEE&M'9q'9tAw~~?Os ===z*.jsonr r!rar ryr9r)r.r r ryr9r.c,|jdxsdS)Nr rr)rs rDrz_..m$squu]38qrTrwreverseentries)r6rr7rrr rarbr r r#globrIr rQrr read_textr5rrRrr_rr rra)rrr rr rrrootsr rindexedrQrras ` rDrr>$sVZZ -34::r rrr rra)rrrraw_pathrrr!rs rDrrq$s6::f%+,224H C//   & & (DH>))+T"A**X///AB sG   HC!@FGGH T)) *AC!9#?@@As<'B4%C 4CCCC D9DDDz session.steercz|jdxsdj}|s t|ddSt||\}}|r|S|jd}| t |ds t|dd S |j |}t||rd nd |dS#t $r}t|d d |cYd}~Sd}~wwxYw)uGInject a user message into the next tool result without interrupting. Mirrors AIAgent.steer(). Safe to call while a turn is running — the text lands on the last tool result of the next tool batch and the model sees it on its next iteration. No interrupt, no new user turn, no role alternation violation. rrztext is requiredrNNrizagent does not support steerr=zsteer failed: rrejected)rNr)rr7rrr`rr5ra)rrrr#rrNacceptedr!s rDrr$s JJv  $" + + -D C122,LGS  KK E }GE73C=>>7;;t$ s8xTR SS 7Cu5667s3B B: B5/B:5B:zterminal.resizect||\}}|r|St|jdd|d<t|d|diS)Nr3r4)rrrra)rrr#rs rDrr$sI,LGS  &**VR01GFO sVWV_- ..rz prompt.submitcddlm}|jdd|jdd}t|tr||n||jd}t |\}|r|St }t|}tx}|d< d} d 5jd r|xsjd} n dddn dddt| } | | SVd 5jd r=tt jd xsdrtd dcdddS| t|} jdg} t| D cgc]\} }|jddk(s| }} }| dks| t!|k\rtddcdddS| d|| }|d<tjdddzd<t#x} |j%d |dd <dd<t/j.d<t1ddd|rKt3}|jds|St4j7d|djdd t9t;t=d&fd! }t?j@|d"}|d#<|jCtEd$d%iS#1swY$xYw#ttf$rtddcYcdddSwxYwcc}} w#t&$r)}t)d|t*j,Yd}~Rd}~wwxYw#1swY/xYw)'Nr)sanitize_user_prompt_textr rrtruncate_before_user_ordinalrTrOrrrr[u0subagent still running — wait for it to finishr4z/truncate_before_user_ordinal must be an integerrPr)r*z3target user message is no longer in session historyr1rz6[tui_gateway] prompt.submit: replace_messages failed: r Fr rrzDcompute-host dispatch failed for session %s; falling back inline: %srKz unknown errorc t}|rNtdd|jdijddid5dd<tdddyd5jdsjdsdd<t dddy dddt y#1swYyxYw#1swY$xYw)NrrKagent initialization failedrOFrr )rrrrQr )rrr#r-rs rDrun_after_agent_readyz _..run_after_agent_ready%s'3'  swww377!#@  ( .%* "$W- .  ^ $ {{34GKK rrrareplace_messagesr5r:r;r<r3rrbrr r&r/rrrrra)rrr raw_texttruncate_user_ordinalrrrrbusy_transport busy_responseordinalrPr"r user_indices truncatedrkr!isolated_responser r r#r-rs` @@@rDrr$sC **\2 &Czz&"%H2M/GN  -    ^ $ {{9% "#!>gkk+&>     ,Cgt^T  $  $  !, ;;v #4S]9S9YWY5Z#[T#UV!,!, ! , Z34kk)R0G*3G*<X$!Qf QW@WAXLX {g\)::C'\]+!,!,, 7,w"78I!*GI ),W[[9JA-N)ORS)SG% &i,k'' (> J" ,1()!% Wd+C!,F:3WdS $$W-$ $ R  g & * *9o F 7#!sG$44.!!)>tLJ(GM sX{+ ,,A  6z* ZC'XYY!,!, ZY!kRSVRWX_b_i_ijjk9!,!,s)K10AM$?M$ K> M$-L) L)"M$::M$5L/ -M$1K;>L&M$%L&& M$/ M!8MM$M!!M$$M.evtc t|jdxsd}|rZ|t|xsdk(rjdsy t5|tvxrt|jd }dddryt|jdxsd sytjdxsdt |h} t }||j xs k7r> |vry t5t fd tjD}dddry |vry t5ttj}dddt fd DS#1swYxYw#t$rd}YwxYw#t$r YwxYw#1swYxYw#t$rd}YwxYw#1swYlxYw#t$rYywxYw) aTrue if ``evt`` is owned by a *different* live session. Background completions carry the ``session_key`` of the session that started the work. Async delegation completions from the desktop also carry ``origin_ui_session_id``: the live TUI tab/window that commissioned them. Since all desktop sessions share one process-wide completion queue, each poller must skip events it doesn't own so a detached result surfaces in the launching session, not whichever poller happened to dequeue first. r[rrLFNTrroc3K|]K}|jd xr3t|jdxsdk(xst|dk(MywrLrrroNrr6rq)rr resolved_keys rDrz8_notification_event_belongs_elsewhere..[%sa(  l++AEE-06B7<GO.q2>,N(sAAc3K|]S}|uxrI|jd xr5t|jdxsdhvxst|dhvUywr r )rrevt_keyr r#s rDrz8_notification_event_belongs_elsewhere..s%sz   l# #  m$* +/F F N"1r2w 6MM  sAA) r6rrerQr5rqrarKrrar_) r-r#r evt_ui_sid owner_live current_keysrkcontinuation_liverir r s ` @@rD%_notification_event_belongs_elsewherer %%s SWW34:;J SYB ' L0I  e'94dYz=R=V=VWc=d9d  e  #''-(.B/G  GKK & ,"-Gc2LL Y >77@KGLw < ' & $'( '--/ (%!  ,  0I,,./H 0   e e J 4     & %  & 0 0 s F$E93F !F9F5?'F)&F57G=GG9F>F FF F&%F&)F2.F55 GGG G GGc|jdryt|jdxsdt|xsdk(ryt|jdxsd}|syt|jdxsdt||h}||vry t}||j |n|xs|}||vS#t $r|}Y||vSwxYw)uTrue iff *this* session PROVABLY owns ``evt``. Positive ownership — the mirror of ``_notification_event_belongs_elsewhere`` minus its orphan-adoption fallback. An event owns-matches when its ``origin_ui_session_id`` is this live session, or its ``session_key`` (raw or resolved through the compression chain) matches this session's key/lineage. Used as the fail-closed gate for every addressed notification: "not provably elsewhere" is NOT good enough to inject a payload into this chat (#55578). rLFr[rTrro)rr6rqrarKr5)r-r#r r r rkr s rD _session_owns_notification_eventr" ~%s{{<  377) * 0b1S^C#''-(.B/G  GKK & ,"-Gc2L, Y57^B ( ( 1   < ''  < ''s#B;; C  C c|jddk(xsGtt|jdxsdxst|jdxsdS)z?Whether ``evt`` must be positively claimed before TUI delivery.rasync_delegationr[rr)rrr6)r s rD"_notification_event_requires_ownerr% %sV 776?0 0 D CGG* + 1r2 - sww}%+ ,5rc |jdd}|jdd}|dk(rY|||jdd|jdd|jdd|jd d |jd dfS|jd s|d k(r7|||jdd|jdd|jd d fS|dk(r|jdd|fS||fS)aReturn the UI-emission identity for a process notification event. Completion events are terminal notifications for a background process, so they remain one-shot per process session. Watch-match events are not terminal: a single background process can legitimately match the same or different patterns many times, so include event-specific content to avoid suppressing later distinct matches from the same process. rrr r watch_matchrpatternr suppressedr message_idwatch_overflow_watch_disabledrKr$ delegation_id)rr)r evt_typeevt_sids rD_notification_event_dedup_keyr0 %swwv|,HgglB'G=   GGIr " GGIr " GGHb ! GGL! $ GGL" %  ,-=M1M   GGIr " GGIr " GGL! $   %%,h77 X rrgc  ddlm}m}t}|j sd|j dsR |j j d}t|||r1|j j|tjd~t|}|rt|||s|j ddk(rtjntj }|d |j dd t#|j d xsd t#|j d xsd |"|j dd } |j dd k(r|j%| r[||} | sgt'|} | |vr!t)d|d| d|j+| d} |d5|j dr|j j|d} nd|d<ddd| rtjddt-tjdz} ddlm}m}m}||d}|. t)d|t7| ||| ||||j s|j dsRg}|j jCs |j jE}t|||r|jG|Ut|}|rt|||s|j ddk(r|jG|n`tj!d |j dd t#|j d xsd t#|j d xsd |j dd } |j dd k(r|j%| r/||} | s;t'|} | |vr!t)d|d| d|j+| |d5|j dr%|j j| dddnd|d<ddddt-tjdz} ddlm}m}m}||d}| t)d|t7| ||| ||||j jCs|D]}|j j|y#t$rYwxYw#1swYxYw#t$rh}|||t9dt;|j<d|t>j@|d5d|d<dddn #1swYnxYwYd}~d}~wwxYw#t$rYwxYw#1swYGxYw#t$rh}|||t9dt;|j<d|t>j@|d5d|d<dddn #1swYnxYwYd}~Xd}~wwxYw)!aPoll completion_queue and dispatch notifications autonomously. Runs in a daemon thread started by _init_session(). Emits a status.update (kind=process) for user visibility, then chains an agent turn via _run_prompt_submit if the session is idle. The completion_queue is process-global. In multi-session Desktop each poller requeues events owned by another live session and drops addressed events whose owner is gone; ownerless legacy notifications remain global. r)process_registryformat_process_notificationrLrrrrr$ zWDropping unowned %s notification (origin=%r key=%r) instead of delivering to session %srr[rrr rwprocessrxFrOrTNg? __notif__r*claim_event_deliverycomplete_event_deliveryrelease_event_deliveryz tui-pollerrz3[tui_gateway] notification poller dispatch failed: r%r zIDropping unowned %s notification during shutdown drain (origin=%r key=%r))$tools.process_registryr2 r3 r^rrcompletion_queuer5r rr3rr% r" rr r*r6is_completion_consumedr0 rr%rrdr7 r8 r9 r r:rr9r;r<empty get_nowaitr)rgr-r#r2 r3 _emittedr requires_ownerlog_evt_sidr _dedup_key _requeuedrr7 r8 r9 _claimr!deferreds rD_notification_poller_looprG %sUuH!'++l*C "33777DC 1gs C  - - 1 1# 6 JJsO   + /3 ' sC$ 7 #C 0_!'++l*C|H//557 "33>>@C 1gs C OOC  .4"5  77<, 776?l */?/V/VW_/` *3/ 237 X % /3D(I J LL $ ^ $ &{{9% 1155c: & &"&GI   & #diikD0123  &c<8 >  + /3 ' sC$ 7 #C 0i//557@3))--c23y   j * *0 + "3 / E9%%&b/ZZ  ( +%* " + + + +$   B & &" + "3 / E9%%&b/ZZ  ( +%* " + + + +sS15S+#S8&U,:.U;1U;9#V S('S(+S58 U)AU$U U$U U$$U), U87U8;V W9AW4W" W4"W+ 'W44W9cddlm}t|dddu}t|dddu}|r|rydtfdfd}fd }|s||_|s||_yy) a(Idempotently route background-process output (and tab-close requests) to the desktop, keyed by process id. Read-only agent terminal tabs stream `agent.terminal.output` chunks live instead of polling the output tail, and `process_registry.request_close_terminal` emits `terminal.close` so the agent can drop a tab without killing the process. Events are routed to the window that owns the process (its gateway session); `_emit`/`write_json` is `_stdout_lock`-guarded, so calling it from the registry's reader threads is safe.rr2 on_outputNon_closerc tt|ddxsd}|syt5tj D]3\}}t|j dxsd|k(s(|ccdddS dddy#1swYyxYw)Nrr)r6rrerQrfr)r#rr- tui_sessions rD_owner_sid_for_processz;_wire_agent_terminal_output.._owner_sid_for_process&s''="=CD   $-OO$5  [{}5;< KJ      s._emit_agent_terminal_output&s" # "7 +":: 6 rc<||nd}td|d|iy)Nrzterminal.closerP r)r#rP r-rN s rD_emit_agent_terminal_closez?_wire_agent_terminal_output.._emit_agent_terminal_close&s)291D$W-" lJ%?@r)r: r2 rr6rJ rK )r2 has_output_sinkhas_close_sinkrR rT rN s @rD_wire_agent_terminal_outputrW &sn8. TB$NO-z4@LN>3 A %@" $>! rcttj}tjt|||fd}|j |S)z;Start the background notification poller for a TUI session.TrrJr)rW rrwrrG r)r-r#stoprs rDrr&sD! ?? D(C ! A GGI Krc d5tdtjddtjdg gd<tjdts t ddddt dr jtd  fd }tj|d }|d <|jy#1swYpxYw#t$rY\wxYw)NrOrPr1rr2rrNclear_interruptrcr QRSd}g}d}d}Yjdd} ddlm}m}|Yd}t YdZ}Yj d}|r t |}tZ|s tZYtY}tYYj dd} t| S[} t| trfd | vradd lm} dd lm} | t%Td d xs t't%Tdd xsd t%Tdd xsd t%Tdd xsd t%Tdd} | | ||| }|j(rt+dZddj-|j.xsdi |r/ t1T|t3ZYt5Yt7Y |||| t?|tA|dT_!Yd5dYd<tEjDYd<tGYdddt+dZtITYy|jJ} | }Wr dd l&m'}m(}dd!l)m*}|}tWT\}}||||}t%Td"d d#k(rd$}|d'k(rY | W\}}|r(tYd(t_|d)tZj\&tad*|Dr|}n tc| W}n tc| W}YZSfd,}terdd-d$td.tfd/dfZfd0}|T_!ndT_!tiU|d1} d2tkjlTjnjpvrYd|d2<Tjn|fi|}d3YvrYjd3d}t|tvrv|j d4}|j d } |j d}!|Yjd5dn|Yd5<| rA|!r| d6|!n| }" tyZY|"dtg|d7n|Yjd5dn|Yd5<d}$d}%t|tvrVt|j d9thrcYd5t}Yj d:d}&|&Vk(r|d9Yd;<Vd|&d?tZj\&d@}%dddtZYddA|j dBd }'|j dCrdCn|j drdndD}(|'sG|j dr6|j dEs|j dFrdG|j d}'|j dH})t|)tr.|)jr|)j}$n t|}'dD}(|'tT|(dI}*|$r|$|*dJ<|%r|%|*dK<|j dLrd|*dL<t|'| }+|+r|+|*dM<Yd5tGYdddt+dNZ|*|(dDk(rt|'tr|'jr ddOlCmD},Yj dxsd }-|-r tj dPxsi}.t}|.j dQdRxsdR}/|,|-|/S}0|0jrs ddTlCmG}1|1}2|0j|'d|2U}3|3j dxsd }4|4rt+dVZdW|4dX|3j dYr|3j dZxsd }5|5r|5}Yj d]}7|7r>|(dDk(r9t}8|8r-Yj dxsZ}9 |8j|9|7rdYd]<|(dDk(rt|'tr|'jrt[tr[jr dd_lNmO};Yj dxsZ}tj|=|>fdej|r/ t1T|t3ZYt5Yt7Y ||| t?|tA|dT_!Yd5dYd<tEjDYd<tGYdddt+dZtITYtXZYry|rIYd5Yj dr dddydYd<ddd t+drZtXZY| ddtlcmd}D|DjYj dd YZfdudv}Et|ED]\}F\}G}HYd5Yj dr3EFdD] \}I}JDjj|I" dddydYd<dddddwlimj}Kmk}Lml}M|KGdx}N|Nv t+drZtXZYHLGNy#t8$rt:j=ddYwxYw#t8$rYwxYw#1swYxYw#t8$r+}tYd%|tZj\&d$}Yd}~d}~wwxYw#t8$r5}tYd+|tZj\&tc| W}Yd}~Yd}~wwxYw#trttf$rYwxYw#t8$r!}#t:j{d8|#Yd}#~#Zd}#~#wwxYw#1swYxYw#1swYxYw#t8$rdR}/Y%wxYw#t8$rd}2YwxYw#t8$r?}6tYd[t|6jd\|6tZj\&Yd}6~6d}6~6wwxYw#tt$r'}:dYd]<t:jd^|9|:Yd}:~:d}:~:wt8$rYwxYw#t8$rYwxYw#t$rt:j{dfYt8$r!}?t:j{dg|?Yd}?~?d}?~?wwxYw#t8$r}?ddlW}@|@j}A tjtjjtdhttdidjk5}B|BjdltEjdmdnZdo|BjAdddn #1swYnxYwn#t8$rYnwxYwtYdpt|?jd\|?tZj\dqt+dZdt|?iYd}?~?d}?~?wwxYw#t8$rt:j=ddYwxYw#t8$rYwxYw#1swYxYw#|rV t1T|t3ZYt5Yt7Yn&#t8$rt:j=ddYnwxYw ||n#t8$rYnwxYw| t?|tA|dT_!Yd5dYd<tEjDYd<tGYdddn #1swYnxYwt+dZtITYwxYw#1swYyxYw#t8$r_}CtYdstCjd\|CtZj\&Yd5dYd<dddn #1swYnxYwYd}C~Cd}C~CwwxYw#1swY}PtYdztPjd\|PtZj\&Yd}P~Pyd}P~PwwxYw){Nrvr)reset_current_session_keyset_current_session_keyrrdrr3r4@)preprocess_context_references)get_model_context_lengthrrrrGr_config_context_length)rrGrro)r allowed_rootrmrrKrzContext injection refused.z!TUI one-turn model restore failedTr&rOFrrrP)decide_image_input_modebuild_native_content_partsrrcodex_app_serverrzA[tui_gateway] image_routing decision failed, defaulting to text: r nativez.[tui_gateway] native image attachment skipped z unreadable path(s)c3DK|]}|jddk(yw)rrNrrs rDrz2_run_prompt_submit..run..<'sLquuV} ;Ls z:[tui_gateway] native attach failed, falling back to text: cd5t|dddd|i}rj|x}||d<td|y#1swY5xYw)NrOrrzr)rfeedr)rrrr#r-streamers rD_streamz0_run_prompt_submit..run.._streamI's_^,;*7E:;!5/hmmE&:!: G*+GJ'osG4 ;;s AArrrc&td||dyrrrs rD_interim_assistant_cbz>_run_prompt_submit..run.._interim_assistant_cbW's+S $,<3r)conversation_historystream_callbackrmoa_one_shot_restorerr5rrz%MoA one-shot model restore failed: %srnr1rPrz@[tui_gateway] prompt.submit: history_version mismatch (expected=z current=u1) — agent output NOT written to session historyuhHistory changed during this turn — the response above is visible but was not saved to session history.rfinal_responserVcompleterpartialrMlast_reasoning)rrrNrr response_previewedrzrL GoalManagergoalsrr default_max_turns)gather_background_processes)user_initiatedbackground_processesrwrrxshould_continuecontinuation_promptz-[tui_gateway] goal continuation hook failed: r%rz)Dropping pending title for session %s: %s)maybe_auto_titlerwcHtddk(xrtddk(S)Nrrr) _title_model_title_providerrNsrDrz1_run_prompt_submit..run..M(s0#E7D9\IT 'z4 @O Src$td||dS)Nr)r rr)r_kr-s rDrz1_run_prompt_submit..run..T(s+Sa2PAr)rruntime_validatortitle_callback speak_textrY z/voice TTS skipped: hermes_cli.voice unavailablezvoice TTS dispatch failed: %srrr r!u" === turn-dispatcher exception · r#u · sid=r$z[gateway-turn] r&rz1[tui_gateway] goal continuation dispatch failed: rI ct|Sr)r" )rr#r-s rDrz1_run_prompt_submit..run..(s%Ec7TU%Vr)r owns_eventskip_poll_observedr6 z tui-post-turnz7[tui_gateway] completion notification dispatch failed: z-[tui_gateway] completion queue drain failed: )mr(rvr^ r_ rrr rrr;rrNrr6agent.context_referencesra rrb rrblockedrr*rrTr?rrr5rr*r rrr3rQrRrKagent.image_routingre rf r^rrr:r;r<rrrr rr_inspect signaturerun_conversation parametersrSr>rrr rrr7rrPhermes_cli.goalsry r is_activer~ evaluate_after_turnrr9rarrHagent.title_generatorr _voice_tts_enabledhermes_cli.voicer rrr ImportErrorr) format_excr,r-r.r/r0r1r2r4rTr r: r2 drain_notificationsrr; rrdr7 r8 r9 )\approval_tokensession_tokensr goal_followupone_turn_restorer^ r_ _profile_home_strrr3rra rb ctx_lenr run_messagere rf _tui_load_config_cfg _provider_model_mode_img_exc_parts_skippedrm ro run_kwargsr_restore_prev_override _prev_model_prev_provider_raw_moa_restore_excrv status_notecurrent_versionrrNlrrrzry sid_key goals_cfggoal_max_turnsgoal_mgr _gather_bg _bg_procsdecision verdict_msg cont_prompt _goal_excrS_pdb _session_keyr!r _title_keyr spokenrr)rArB _cont_excr2 drainedr_evtsynth pending_evt_pending_synthr7 r8 r9 rE _n_exc _drain_excr r rl rNrPr1imagesrr#r-rs\ @@@rDrz_run_prompt_submit..run&s  ";;'?FJ F  5W]5KLN1 &!N!( N ;  56GH  C $-c7;w'C !' *;;vr*D+D1HF&#&3&=RI2E7B/C>3C$UJ;Ar#E9b9?R$UJ;Ar*17+ 4!$#*  ;;%tyy'>(<;f  U08HI)#w71':7@ !--n=%*:6 "> 204E ,( .%* ")- &$W- . .#}UG'D ES  &K#R+-D(Fu(M%Iv3!E uj"59KK &H$S+E"",($!"PQTU]Q^P__r s%(ZZLVLL*0K*Fvv*VK#?vv"NK 501QV$[_ 4I0370)-W #*J  1 1%2H2H I T TT,3M,BJy),U++KF:FF%0";;'=tD h-%-\\*%=N"*,,w"7K%-\\*%=N%- $4d;4B 01" . +m<7GH!, / # ' $8=59.5I27 %KK 0$708G,-!NK&$'fjj4d; 0*-gkk:KQ.O*P*o=17 1CGI.9H19LG$56"#--<,=YFWXN!O&)ZZ !H()>1eRVjj!126zz-0"$*JJw$7ZG!4JJx(FJJy,A#FJJw$7#89CZZ 01b#&288:%'XXZN&k#"Z->&QG'5 $%0 "zz./04,-%c40H&. #( .$W- . $c7 3# 3(<)<%kk-8>BG0(1 (@(FBI-0{B1O1USU-VN$/'..<$$--/1 f,6L (0'C'C #/35>(D(H +3,,y*A*GRK* %$3$'-3[$I!" (||,=>.6ll;P.Q.WUW #.4?M{{?3HFj0y#*;;}#=#DL 11,I7;GO4*$sC(IIKtS)JJL&F!(]!;!BsJ$+5'4#@L&-eZ&FO$ " Ir2 &-UGT%B(/z4(H(/z4(H'.ui'F(/z4(H &+5?(1H*$sC(IIK&( G; F$$) $eg0 U08HI)#w71':7@ !--n=%*:6 "> 204E ,( .%* ")- &$W- . .#}UG'D E S' 2  ( *;;y)  * * &* "  * /os+"3WmD$,  ?'::#KK r:V#(;G )2'(: 3$}e^,.{{9-;B56?O7K,==AA+NO .. *.GI& . .dOD> 3/3/&sC%@+D&9! 3O!ULL!DtLTU    . .Y !#[\d[ef ZZ#E #,%SXYaXbc!$'C66&R SPz*  F )"NN G 0L . .* )0-/N0$-1,0 1$!G ?334BykC ZZ &480 G(#%`!(#VNN#TU GNN#BAFFG 5 ((*E  BGGOOJ7$G*cG<#GG===)<=>hse6SGGEN ###    !$q'"2"2!32aS9 RV  '3CF 3 4 4# 52!ULL!DtLTU    . .' U08HI)#w71':7@ ULL!DtLTU !--n=  %*:6 "> 204E ,( .%* ")- &$W- . . . .#}UG'D E * * /GI//09+? ^,/).GI&///  />.. !3*48Q<001F8= ZZ !03-2 *3333  ? #,,-R |=ZZ   sEr5.i9$ j (j0r+?j=*r0Ak4Ar3l5 Br!m ;ArAm8%D4r n%;r!n6??4o93r9o>>r p< p,&r, p<8r;p<<r? q r q  rr-r0r8rrrr v?&v:;A u=u  u u uv: u$!v:#u$$Av:4x:v??x w&%w&) w65w69x{3 .x98{39 y{3y{3 y+*{3+ y74{36y77'{3({ {3{ {36| }+ 9}&} }&} }&&}+.}8 3/; ,A' ' '!/',,// A@684A@1@1A@6Trr ) r_rrrrrr`r\ r5rrrr) rr-r#rrr rNrPr1r s ```` @@@@rDr r &s  0wy)*gkk*;Q?@gkk"3R89%'!"'++o6= $ / 0 G Eu'(   ! ! # /3eeN!!T:J'GMq00   sA5C2C>2C;> D  D zclipboard.pastec pt||\}}|r|S ddlm}m}|j dddz|d<tdz }|jdd |d tjjd d |dd z }||s/td|ddz |d<|rdnd} t|d| dS|jdgjt!|t|dt!|t#|ddt%|S#t$r}t |dd|cYd}~Sd}~wwxYw)Nr)has_clipboard_imagesave_clipboard_imagezclipboard unavailable: rVrr TrWclip_rrrz)Clipboard has image but extraction failedzNo image found in clipboardF)attachedrKr2)r r.r.)rhermes_cli.clipboardr r r5rrrrZrrr4rFrarfrr6rr) rrr#rr r rimg_dirimg_pathrs rDrr(sd%LGS  >R '{{?A>BGOX%G MM$M. (,,.))/:;1W_=UC!8<==>sD D5D0*D50D5z image.attachc t||\}}|r|St|jddxsdj}|s t |ddS ddlm}m}m}m }||} | r | d} | d} n%||\} } || } | t |dd | S| jj|vrt |dd | jS|jd gjt| t|d t| t!|d | | xsd | jddt#| S#t$$r } t |dt| cYd} ~ Sd} ~ wwxYw)Nr.rr r)_IMAGE_EXTENSIONS_detect_file_drop_resolve_attachment_path_split_path_input remainderr\zimage not found: zunsupported image: r2T[User attached image: r)r r.r.r rr )rr6rr7rr8r r r r rbrrIrfrrarrr5)rrr#rrr r r r dropped image_pathr path_tokenrs rDrr)s%LGS  fjj$* + 1 1 3C C// '  $C(  J ,I$5c$: !J 1*=J!C)::,'GHH    " " $,= =T%88I#JK K,b188ZI  JW%678&!P'=joo=Na%P   j)     'Cs1v&&'s,AD;5D; A-D;; E$EE$E$ii r+))sPNG  r)s.jpg)sGIF87a.gif)sGIF89ar )sBM.bmp _IMAGE_MAGICr mime_prefixc$ddl}ddl}|j}|jd|j |d||j }|r|j d}|jdd|} |j|d S#t$rYywxYw) zDecode a base64 (optionally data-URL-wrapped) payload. Accepts ``data:...;base64,`` plus embedded whitespace. Returns the decoded bytes, or ``None`` when the input isn't valid base64. rNz^data:z[a-zA-Z0-9.+-]*;base64,(.*)$r\s+rTr{) rr~r7rescaperrsubrr5)rr _base64rcleanedrs rD_decode_attach_base64r Y)s iikG #**[)**FG  A  ''!*ggfb'*G  4 88 s0B BB img_bytesrCc|r't|jj}|r|S|dd}|jdr |dddk(rytD]\}}|j|s|cSy) zResolve an image extension from a filename hint, else magic bytes. Falls back to ``.png``. WebP needs the RIFF/WEBP container check, handled before the generic table. Nr+sRIFFrrsWEBP.webpr)rrbrrr )r rCrbheadsigrs rD_sniff_image_extr q)sw h&&,,. M Sb>D wD2J'$9 S ??3 J rc^ ddlm}t|S#t$rthdcYSwxYw)Nrr >.jpegr r r rr )r8r r!r5r s rD_allowed_image_extensionsr )s4M)*++ MKLLMs ,,rrc|jdddz|d<tdz }|jddtjj d}||d|d|d|z } |j ||jd gjt||S#t$rtd|ddz |d<wxYw) a#Write image bytes into the gateway's images dir and queue them. Mirrors what ``image.attach`` does for a local path: appends to ``session["attached_images"]`` so the next ``prompt.submit`` picks it up via the existing native-image-attach pipeline. Returns the written path. rVrrr TrWrrr2) rrrZrrr4rr5rFrfrr6)r#r rrr rr s rD_queue_attached_imager )s '{{?A>BGOX%G MM$M.   1BF81RD'/*B)CC5IIHY' ("-44S]C O #&q'/*BQ*F#G  s +B(( Czimage.attach_bytesc t||\}}|r|St|jdxs|jdxsdj}|s t |ddSt |d}| t |d d S|s t |d d St |tkDr&td z}t |d dt |d|dSt|jddxsd}t|jddxsdjj}|r|jdsd|z}t||xs |rd|nd} | tvrt |dd| S t||| d} t|dt| t |ddd| jdt |dt!| S#t$r} t |dd| cYd} ~ Sd} ~ wwxYw) uAttach an image to the session from base64 bytes (remote-client path). A desktop app or web dashboard running on a DIFFERENT machine than the gateway can't hand us a local path — that file only exists on the client's disk. So it uploads the raw image bytes (base64) and we write them into the gateway's own images dir. The response shape mirrors ``image.attach`` so the client treats both identically. Params: content_base64 / data (str, required): base64 image bytes. Accepts a ``data:image/...;base64,`` prefix and embedded whitespace. ``data`` is an accepted alias for older desktop builds. filename / ext (str, optional): extension hint. Without it, magic bytes identify PNG/JPEG/GIF/WebP/BMP, falling back to ``.png``. content_base64rrr zcontent_base64 requiredzimage/r Nr^data is not valid base64zimage is emptyr zimage too large ( bytes; cap is  MB)rCrrxr\zunsupported image extension: uploadrr zwrite failed: Tr2r r)r r.r.r rbytes)rr6rr7rr r_ATTACH_BYTES_MAX_BYTESrrr r r r5rarIr) rrr#rraw_b64r mbrCext_hintrr rs rDrr)s"%LGS  &**-.J&**V2DJKQQSG C899%g8DIC9:: C/00 9~// $ 5C!23y>2B/RTQUUYZ[[6::j"-34H6::eR(.B/557==?H++C0> 9h&VXQxj>SU WC +--C!>seDEE5()SR  M!234,X]]O1=^  (#    5Cs3445s+G G' G"G'"G'z pdf.attachc\ ddl}ddl}ddl}t||\}}|r|S|j d t |ddSt |jddxsdj}t |jdxs|jd xsdj}|s|s t |d d S|jd 5} t| } |rt|d} | t |ddcdddS| st |ddcdddSt| tkDr/tdz} t |ddt| d| dcdddS| dddk7rt |ddcdddS| dz } | j| t |jddxsd}n ddlm}||}|t|j%st |dd |cdddSt|j&j)d!k7r,t |dd"t|j*cdddSt|j-j.tkDr#tdz} t |dd#| d$cdddSt|} | j*} t1|jd%xsd&}|jd'}| t1|nd}|d&krt |d d)cdddS| |t6zd&z }||krt |d d*cdddS||z d&zt6kDrt |d+d,t6d-cdddS| d.z }dd/d0d1d2t |d3t |t | t |g }dd4lm} |j<|d5d5d6|j>|7}|jBdk7re|jDxs|jFxsdjjId9d}t |dd:d;jK|zcdddStM| jOd<}|st |dd=cdddSg}|D]u}|jPjSd>d&d?} t1|}tU||jWd@dA| }|jYt ||dBt[|wt]|d5|t||t|dCdD|dEt|dFdGcdddS#t"$rd}YnwxYw#t2t4f$rt |d d(cYcdddSwxYw#|j@$rt |dd8cYcdddSwxYw#t4$r|t|z}Y wxYw#1swYyxYw)HaAttach a PDF by rendering each page to PNG and queuing the pages. Anthropic's vision pipeline accepts images, not PDFs, so this runs ``pdftoppm`` (poppler-utils) at 150 DPI per page and queues each rendered page as an attached image. Accepts either a host ``path`` (local mode) or base64 ``content_base64`` (remote upload). Caps at 50 MB / 25 pages per call. Requires ``pdftoppm`` on $PATH (``apt install poppler-utils``); returns 5028 if missing. rNpdftoppmz7pdftoppm not installed (poppler-utils package required)r.rr rr zpath or content_base64 required pdf_attach_r zapplication/pdfr r^r zdecoded PDF is emptyr r zPDF too large (r r s%PDF-z0payload is not a PDF (missing %PDF- magic bytes)z input.pdfrCz uploaded.pdf)r r\zPDF not found: z.pdfz not a PDF: zPDF too large; cap is z MB first_pager last_pagez%first_page/last_page must be integerszfirst_page must be >= 1zlast_page must be >= first_pagezpage range exceeds cap of z pages per attach callr^z-pngz-r150z-fz-lrTr)capture_outputrrrrzpdftoppm timed out (>120s)zpdftoppm failed: z | z page-*.pngz)pdftoppm produced no pages (corrupt PDF?)-rrpdf_p)r.r^r2z[User attached PDF: r z page(s))])r rCpages_attachedr_r.r)/r`rtempfilerwhichrr6rr7TemporaryDirectoryrr r_PDF_ATTACH_MAX_BYTESrr8r r5rrbrrIrQrrrSr>_PDF_ATTACH_MAX_PAGESrrrDEVNULLTimeoutExpired returncoder<rr8r*r!r stemrr rrrra)rrr`rr r#rr r tdtd_path pdf_bytesr pdf_pathrr rr last_page_paramr out_prefixrrresr6rzattached_pagesrGpage_numpage_intdsts rDrr)s%LGS   ||J'CXYY6::fb)/R0668H&**-.J&**V2DJKQQSG GC@AA  $ $M $ :\ br( -gCTUI C'AB \ \ C'=>\ \ 9~ 55*{;CY8HXZW[[_'`a\ \ !}(C'YZ\ \ ,H   +vzz*b9K^LL 83H=tH~'='='?C 'CD1\ \ 2H~$$**,6CT(^5H5H4I'JK5\ \ 6H~""$,,/DD*{;C)?t3'GH;\ \ <H~H#==L LVZZ 5:;J$jj5O0?0KO,QUI >T#<=S\ \ T  "%::Q>I z !T#DE[\ \ \ z !A %(= =T%?@U?VVl#mn_\ \ bv% e #j/4Y M3z?  E A *..TcI[I[02C >>Q JJ2#**299;FFHMDT#6D9I#IJE\ \ H',,|45T#NOM\ \ P \Cxx~~c1-b1H <x=(1A6TYZbYcRdeC  ! !3s8X"ZUXIY"Z [ \  ("%n"5'W%678.|nBs>?R>SS]^    e\ \ *  :& LT#JK KM\ \ J L2(( AT#?@ @\ \ | A <%N(;; <[\ \ s )V"V"7V"V"76V".T<*V"0AV"AV"V"'>T.%V"V")#V";V"'U9A*V"-(V"&V" VBV" T+'V"*T++V".U V"UV"V5V"VV"VV"VV""V+cddl}t|jda|rtj|s|Sd|vrd|dSd|vrd|dSd|vrd|dS|S)zQuote a context-ref value when it contains whitespace or bracket chars. Mirrors the desktop ``formatRefValue`` so the staged ``@file:`` ref round-trips through ``agent.context_references`` cleanly. rNz[\s()\[\]{}<>"'`]rr r)r~ _ATTACHMENT_REF_NEEDS_QUOTING_REcompilerZ)rErs rD_format_ref_valuer0 ]*s| (/+.;;7O+P( 8??F  %5'| %5'| %5'| Lrrc(tt|j} |jj|}t |j t jdS#t$rt |jcYSwxYw)zKWorkspace-relative path for an attachment, or the absolute path if outside.r) rr;rr r6rr,sepr>)r#r workspacerels rD_attachment_ref_pathr5 s*sr\'*+335I%nn**953x,, %6>>#$$%sAA,,"BBc|tt|jdz dz }|jdd|S)Nz.hermeszdesktop-attachmentsTrW)rr;rrZ)r#rs rD_desktop_attachment_dirr7 }*s:  W% & . . 09 *sxI     >   .,D (^ " "FG 4&'6( ;;$$&! !1  rc|sy ddlm}m}m}||}|rt |dj S||\}}||}|t |j SdS#t$rYywxYw)z ! ! #EE s A%% A10A1data_urlc\ddl}ddl}ddl}|xsdj}|j d||j |j z}|r|jd}|jdd|} |j|dS#t|jf$r}td |d}~wwxYw) u,Decode a ``data:;base64,`` payload to bytes. Unlike ``_decode_attach_base64`` (image-mime-specific), this accepts any media type — text/csv, application/pdf, etc. — so non-image file uploads round-trip. Also tolerates a bare base64 string with no data-URL prefix. rNrz-^data:[^;,]*(?:;[^;,=]+=[^;,]+)*;base64,(.*)$rr Tr{zinvalid data_url payload) rr}r~r7rrIrr rr>r)rB r _binasciirr rr!s rD_decode_attachment_data_urlrF *s ~2$$&G BGSZZZ]Z_Z_M_`A''!*ggfb'*G>  4 88   (>34#=>s2BB+ B&&B+r ctt|j}t|}| |j ||dfS|s t dt|}t|xs"tt|xsdj}t|}t|t|} | j|| jdfS#t $r|j }|j}YjwxYw)uMake a desktop file attachment available to the remote gateway agent. Three cases: 1. The path resolves to a file already INSIDE the session workspace — use it as-is (no copy, ``uploaded=False``). 2. The path resolves to a gateway-visible file OUTSIDE the workspace — copy it into ``.hermes/desktop-attachments/`` so the ``@file:`` ref resolves. 3. The path doesn't exist on the gateway (the common remote case: it's a path on the CLIENT's disk) — decode the uploaded ``data_url`` bytes and write them into ``.hermes/desktop-attachments/``. Returns ``(stored_path, uploaded)``. Fz2file not found on gateway and no data_url providedrT)rr;rrA r r>rrIrF r: r6r7 r> r) r#r rB rIr3 rrrC upload_dirrs rD_stage_session_file_attachmentrI *s(\'*+335I/9H %   +U? " QR R-h7,T-ST#hn":M5N5S5ST(1J $Z1J81T UF w >> T !! %))+G}}H %sC%C87C8z file.attachc Rt||\}}|r|St|jddxsdj}t|jddxsdj}t|jddxsdj}|s|s t |ddS t ||||\}}t ||} t|d|jt|| d t| |d S#t$r } t |d t| cYd } ~ Sd } ~ wwxYw) aBStage a non-image file attachment into the session workspace. The image/PDF path renders to vision tiles; this one keeps the file as a readable artifact and returns a workspace-relative ``@file:`` ref so the agent's file tools (and ``agent.context_references``) can read it. Solves the remote-gateway case where the desktop passes a path that only exists on the CLIENT's disk: the client uploads ``data_url`` bytes and we materialize the file on the gateway. Params: session_id (str, required) path (str): client/host path of the file (used for naming + local-mode gateway-visible resolution). data_url (str): ``data:;base64,`` upload of the file bytes, required when the path isn't visible to the gateway. name (str, optional): preferred filename. r.rrB rIr zpath or data_url required)r rB rIT@file:)r rIr.rref_textuploadedr N) rr6rr7rrI r5 rarIr0 r5) rrr#rrrB rI stored_pathrM rrs rDrr*s*&%LGS  fjj$* + 1 1 3C6::j"-34:: cH4!  X(=  #((K($$%6x%@$AB$     'Cs1v&&'s-AC== D&D!D&!D&z image.detachcjt||\}}|r|St|jddxsdj}|s t |ddS|j dg}t |}|Dcgc] }||k7s | c}|d<t|t |d|k7t |ddScc}w)Nr.rr r r2)rr.)rr6rr7rrfrra)rrr#rrr beforer.s rDrr+s%LGS  fjj$* + 1 1 3C C//    12 6F [F39!I4TS[$!IG   G$5676A!234  "Js 1 B0<B0zinput.detect_dropc dt||\}}|r|S ddlm}t|j ddxsd}||}|st |ddiS|d}|d}|d rp|j d gjt||xsd |jd } t |d d t|t|d | dt|Sd|d |rd|ndz} t |d dt||j| dS#t$r } t|dt| cYd} ~ Sd} ~ wwxYw)Nr)r rrmatchedFr.r is_imager2r rT)rR rS r.r.rz[User attached file: r)rR rS r.rIrr ) rr8r r6rrarfrrIrrr5r) rrr#rr rr drop_pathr rrs rDrr-+sg,LGS  '')&**VR(.B/#C(sY./ /FO K( :    0" 5 < D4D D/D*$D/*D/zprompt.backgroundcVt||\}|r|S|jdd|jddcs t|ddSdtjj ddfd}t j|d jt|d iS) Nrrr  text requiredbg_rc tt} ddlm}|d it dj }t dt|tr|jdt|n t|dt|y#t$r}t dd |dYd}~-d}~wwxYw#t|wxYw) Nrrr~rN) user_messagerzbackground.completers rrerror: r) rr;rrr8r rrrrr6r5r)r rrrrr#rrs rDrz_..runf+s-g<;PQ 3 )*77+;WE!  %&&fd3 #3S[A [  & #> 2  %#wqc];    #> 2s*A0B B;B61B>6B;;B>> C Trr) rrrrtrurvrrrra)rrrrrr#rrs @@@@rDrr\+s%LGS  ::fb)6::lB+GLD& C//DJJL$$Ra()*G3@C-335 sY( ))rzpreview.restartc t||\ }|r|St|jdxsdj}t|jdxsdj}t|jdxsdj}|s t |ddSdt j jdd |jd dt  t }d jd d dd |d|xsdd|rd|nd|rdnd|rdndddddddddddddddfD |r.+s 8 ; rz8The desktop preview pane cannot load a local server URL.z Preview URL: zCurrent working directory: r zPreview console: uCThe conversation history above is from the user's main session — including the commands you (the assistant) previously ran to start servers, edit files, or check ports. Use it to figure out exactly which server should be running at this Preview URL. The user did not start a brand new task; recover what they had working.zPRestart exactly the app intended for the Preview URL, not Hermes Desktop itself.zcThe Preview URL and port are the target. Preserve that target unless you conclude it is impossible.zIf the prior conversation shows a specific command that bound this URL/port, prefer re-running THAT exact command (in the same cwd) over guessing a new one.zFirst inspect what process, if any, owns the Preview URL port. If a stale server exists, inspect its cwd and prefer that cwd over the Hermes/Desktop process cwd.zThe Current working directory is only a hint. Do not assume it is the preview app root when the port owner or files indicate another root.zIf the console shows a module-script MIME error for src/main.tsx or similar, a static server is serving source files. Do not restart python -m http.server or any dumb static server for that app.zFor module-script MIME failures, inspect package.json/vite config in the candidate app root and start the real dev server/bundler (for example npm/pnpm/yarn dev) so module transforms happen.zBefore declaring success, verify the Preview URL responds with the intended app, not Hermes Desktop. If it serves Hermes/Desktop UI or another unrelated app, stop that process and report failure.z8Do not modify files. Do not ask the user unless blocked.z@Prefer existing project scripts or commands when they are clear.z:If a stale process owns the needed port, handle it safely.zOStart long-running servers detached/in the background, then return immediately.zLDo not run a foreground dev server command that blocks this background task.zaKeep the final response short: what command/server was started, or why it could not be restarted.ct xs t } ddlm}ddlm} r | d i rdt dnd}td  d |d |dit d  t j xsd }t|tr|jdt|n t|}td |d  ddlm}| t#|y#t$r}td d|d Yd}~