߲jjDUdZddlZddlZddlZddlZddlmZejeZ Gdde Z ejZ daeeed<eZeeed<ded efd Zd ed efd Zd ed eefdZd ed efdZded efdZded efdZddZd eefdZy)u5Why an auxiliary client could not be built — and the Nous credential failure behind it. ``_resolve_nous_runtime_api`` must swallow the resolver's ``AuthError`` and return None so the ladder can still fall back (stored token, fallback_chain). Swallowing it at DEBUG left the goal loop reporting ``judge error: RuntimeError`` while the real cause was an ``invalid_grant`` refresh (#42177). This module remembers the latest failure so the ladder's raise and the goal judge can name it, and warns ONCE per distinct message so operators see it without debug logging. N)OptionalceZdZdZy)AuxiliaryClientUnavailablezQNo auxiliary client could be built for the task (missing credentials / provider).N)__name__ __module__ __qualname____doc__@/home/ubuntu/.hermes/hermes-agent/agent/auxiliary_unavailable.pyrrs[r r_last_nous_detail_warned_nous_detailsexcreturncddlm}m}ddlm}t j t5||dxsi}|rA|jdr0|t|dd|jddcd d d Sd d d t||rI|t||j|j|j|j|j S|S#1swY`xYw) uPrefer the persisted terminal quarantine marker over *exc*; sentence-terminate either message. The pool rung swallows the real ``invalid_grant`` and wipes the dead tokens, so by the time the auth-store resolver runs it can only say "No access token found"; the marker it wrote still carries the message and code the user needs (#42177). ``format_auth_error`` appends the remediation sentence with a space, so an unterminated message reads "Invalid refresh token Run …". r) AuthErrorget_provider_auth_state)_terminal_quarantine_markernousmessagecodeT)providerrrelogin_requiredN)rrr retry_after retryable)hermes_cli.authrrhermes_cli.auth_nousr contextlibsuppress Exceptionget _sentence isinstancerrrrr)rrrrmarkers r _quarantined_nous_errorr%sC@   Y '4,-DV-L-RPRS fjj+Yvi'89FQWQ[Q[\bQc.24444 #y!3#,,SXX*-*>*>COO#&==2 2 J44s A CC&textcXt|jjddzS)N.)strstriprstrip)r&s r r"r"3s# t9??  # #C (3 ..r provider_idc ddlm}m}m}ddlm}g}t jt5||Dcgc]$}t|tr|j||&}}ddd|Dcgc]}|j|k7s|}}|sytj}|D cgc]!}||t|dk(} | | |kDr| #} }} t| t|k7rytjdtj t#| } t|dk(rdnd t|d } d |d | d | d|d Scc}w#1swYxYwcc}wcc} }w)uThe "all N credentials … are cooling down" error when the provider's pool is fully benched. ``resolve_provider_client()`` returns ``None`` both when no credential exists and when every pool entry sits in a 429/quota cooldown, so the raise sites could only say "no credentials were found. Run hermes auth add …" — wrong on both counts for a valid OAuth grant that is merely rate-limited (#56810). Read the persisted pool state (no seeding, no writes) and name the cooldown and its reset time instead; ``None`` when the pool is empty or a credential is usable (the caller keeps the missing-credential diagnostic). r) STATUS_DEADPooledCredential_exhausted_until)read_credential_poolN)sole_credentialz%Y-%m-%d %H:%M %Zzits only credential iszall z credentials are Provider '' is set in config.yaml but zM cooling down after a rate limit / quota error (429); the next one resets at zC. Wait for the reset, add another credential with `hermes auth add z9`, or switch to a different provider with `hermes model`.)agent.credential_poolr.r/r0rr1rrr r#dict from_dict last_statustimelenstrftime localtimemin) r,r.r/r0r1entrieselivenowuntilresetswhenwhichs r pool_cooldown_messagerG7s~VU4G   Y 'V0=VAtAT$--k1=VVV ?!!--;">A ?D ?  ))+C!4,QD QO%"us{4F4 6{c$i ==,dnnS[.I JD),Ta %T #34  %A%IFFJVL< K--/77SABB_` W    * *7 359N{m[g7h- BF %A'" M+1&vh' LM7=7H7H7J LM55s C33C<ct|ddryddlm}tjt 5t |dcdddS#1swYyxYw)uTrue when a Nous credential exists that failed — a coded error (``invalid_grant``, a quarantine marker, ``refresh_failed``) or persisted Nous auth state. The uncoded "not logged into Nous Portal" with no stored state is the normal condition for users who never chose Nous; the auto-route walk hits it on every discovery pass and must not warn (the ladder already logs its own summary). rNTr)rrF)rPrrrrr bool)rrs r _nous_credential_presentr_ysJ sFD!7   Y '5+F34555 s A  Ac ddlm}t|}t|tr||n t |}|j xst|j}t|dd}|rt ||vr|d|d}d|}t5|a |tv}tj|dddrBt|rtj ntj"}t$j'|d||S#1swYOxYw) zRemember *exc* as the latest Nous credential failure. Logged once per distinct message: WARNING when a real credential failed, DEBUG when Hermes was simply never logged into Nous. r)format_auth_errorrNz (code: )z-Nous Portal runtime credentials unavailable: z%Auxiliary Nous client unavailable: %s)rrar%r#r r)r*typerrP_lockr raddr_loggingWARNINGDEBUGloggerlog)rrarrdetail first_timelevels r record_nous_credential_failurerns 2 !# &C(23 (B$CGmmo3c!3!3G 3 %D D (IXdV1-t5dadddy#1swYyxYw)Nrdr r r r clear_nous_credential_failurerqs ! !!!scFt5tcdddS#1swYyxYw)zXThe latest recorded Nous credential failure, or None when the last resolution succeeded.Nrpr r r nous_credential_failure_detailrss ! !!!s )rN)r rrf threadingr:typingr getLoggerrri RuntimeErrorrLockrdr r)__annotations__setr BaseExceptionr%objectr"rGr\r^r_rnrqrsr r r r}s    8 $\\  #'8C='!$c#h&=./F/s/ 7s 7x} 7FMcMcM> - D  #4! ! !r