߲j+jdZddlmZddlZddlZddlmZmZddlm Z dZ d dZ e dd d Z dd Z dd Zy)aCodex request identity helpers shared by agent client builders. Leaf module with no dependency on the large auxiliary-client router, so a long-lived process can import a newly added client builder without resolving a new symbol from an older cached ``auxiliary_client`` module. ) annotationsN)AnyDict)urlparsez%https://chatgpt.com/backend-api/codexc t|}|jjd}|jdk(xr9|jdk(xr(|j dvxr|dk(xs|j dS#ttf$rYywxYw)zAIdentify OpenAI's Codex endpoint without matching custom proxies./httpsz chatgpt.com)Niz/backend-api/codexz/backend-api/codex/F) rpathrstripschemehostnameport startswith TypeError ValueError)base_urlparsedr s 8/home/ubuntu/.hermes/hermes-agent/agent/codex_headers.pyis_official_codex_base_urlrs (#{{!!#& MMW $ Y=0 Y {* Y--WAV1W  z "sA/A22BBrcxt|rddlm}d|dd}nddd}|jt ||S)a^Identity and account headers for chatgpt.com/backend-api/codex. OpenAI requires third-party harnesses to identify themselves: the official endpoint gets Hermes' originator and version, custom endpoints keep the codex_cli_rs compatibility identity. The account headers come from the OAuth JWT (see :func:`codex_account_headers`). r) __version__z HermesAgent/z hermes-agent)z User-Agent originatorz!codex_cli_rs/0.0.0 (Hermes Agent) codex_cli_rs)r hermes_clirupdatecodex_account_headers) access_tokenrrheaderss rcodex_cloudflare_headersr "sB"(+*#/ }!=^\!DTbc NN(67 NcVi}t|tr|js|S |jd}t |dkr|S|ddt |d dzzz}t j tj|jdi}|jd}t|tr|r||d<|jd xs|jd }t|tr#|jr|j|d <|S#t$rY|SwxYw) uWorkspace headers the Codex backend derives from the OAuth JWT. ``ChatGPT-Account-ID`` (canonical casing, from codex-rs ``auth.rs``) comes from ``chatgpt_account_id``; ``x-openai-internal-codex-residency`` from ``chatgpt_data_residency`` (fallback ``chatgpt_compute_residency``) — without it residency-enforced workspaces answer 401 "Workspace is not authorized in this region". A malformed token drops the headers rather than raising, so it surfaces as a 401 instead of a crash at client construction. .=zhttps://api.openai.com/authchatgpt_account_idzChatGPT-Account-IDchatgpt_data_residencychatgpt_compute_residencyz!x-openai-internal-codex-residency) isinstancestrstripsplitlenjsonloadsbase64urlsafe_b64decodeget Exception)rrparts payload_b64authacct_id residencys rrr3s!G lC ( 0B0B0D  ""3' u:>NAhU1X(:!;; zz&22;?@DDEbdfg((/0 gs #,3G( )HH56_$((C^:_ i %)//*;;D??;LG7 8 N   N s DCD D('D(c>t|syt||}|Dchc]}|j}}|jdxsi}i|j Dcic]$\}}t |j|vs"||&c}}||d<ycc}wcc}}w)zBKeep required Codex identity after user/provider header overrides.Nrdefault_headers)rr lowerr4itemsr,) client_kwargsrrrequirednamerequired_namesexistingvalues rapply_required_codex_headersrEQs %h /' xHH/78tdjjl8N8  !239rH(*2..*: f;4c$ioo>OWe>e4; f( (M#$9 gsB #BB)rr,returnbool)rr,rr,rFDict[str, str])rr,rFrH)r?zDict[str, Any]rr,rr,rFNone)__doc__ __future__rr2r0typingrr urllib.parserCODEX_AUX_BASE_URLrr rrEr!rrPs># != DV"< r!