߲jldZddlmZddlZddlmZmZmZmZerddl m Z dZ d dZ d dZ Gd d Zy) aModel-scoped rate-limit cooldowns for pooled credentials. Anthropic enforces its API rate limits (requests / tokens per minute) per model, so a generic 429 for one Claude model says nothing about the same credential's standing for its sibling models. Such a 429 is recorded as a cooldown on the requested model only, beside the credential-wide status that auth, billing and payment failures keep benching the whole credential with. ) annotationsN)AnyDictOptional TYPE_CHECKING)PooledCredentiali3c$|jxsi}|s|jn|j|f}tj}|Dcgc]*}t |t t fs||kDs t |,}}|r t|SdScc}w)zActive cooldown blocking *entry* for *model*, or ``None``. Callers that do not know the model stay conservative: any active model cooldown blocks them, so an unscoped route cannot reuse the credential. N)model_cooldownsvaluesgettime isinstanceintfloatmax)entrymodel cooldownsr nowuntilactives J/home/ubuntu/.hermes/hermes-agent/agent/credential_pool_model_cooldowns.pymodel_cooldown_untilrs %%+I',Y   9==3G2IF ))+C(. bu*US%L2QV[^aVaeEl bF b 3v;*d*cs B )B / B c i}|D]j}t|ts|jD]D\}}t|ttfst t ||j |d||<Fl|S)uTLatest reset per model across snapshots — each writer only observed its own model.g)rdictitemsrrrr )mapsmergedrrrs rmerge_model_cooldownsr#su!FJ )T* %OO- JLE5%#u. #E%L&**UC2H Iu  JJ McPeZdZddddZ ddZ d d dZy) CredentialPoolModelCooldownMixinN)rc|j5tfd|jDcdddS#1swYyxYw)a Whether a pool cooldown blocks *token* for *model*. Closes the paths that hand out a native Anthropic token without selecting it from the pool (env / borrowed credentials). Tokens the pool does not know fail open: no row can attribute a cooldown to them. c3\K|]#}|jk(xrt|du%ywN)runtime_api_keyr).0rrtokens r zDCredentialPoolModelCooldownMixin.token_is_blocked..8s:%%.a3Gu3U]a3aas),N)_lockany_entries)selfr(rs ``rtoken_is_blockedz1CredentialPoolModelCooldownMixin.token_is_blocked0s:ZZ !]]   s 8Ac`ddlm}m}|sy|dk(ry|jdk(xr |dk(xr|||fvS)zAnthropic per-model 429s, and a Codex ChatGPT-account model entitlement 400: the account cannot use *model*, but the credential stays valid for every other model (#71970).r)FAILURE_REASON_BILLING!FAILURE_REASON_BILLING_UNVERIFIEDFmodel_entitlementT anthropic)agent.credential_poolr0r1provider)r- status_coderfailure_reasonr0r1s r_is_model_scoped_failurez9CredentialPoolModelCooldownMixin._is_model_scoped_failure=sM d 0 0 MM[ ( b[C-? b'=?`&aa r cddlm}m}|dk(rtjtz}nF||j dxs-tj|d|j z}|j}t|jD]Y} | j|jk7r|r| j|k(s.t| j||i} |j| d| [|jy ) aRecord a cooldown for *model* on *entry* and every sibling sharing its key. Same TTL policy as a credential-wide 429 (provider ``reset_at`` wins, a sole credential keeps its short bench), except a ``model_entitlement`` rejection, which stays benched until the explicit reset path clears it. Siblings matter because a ``model_config`` twin seeded from the same key would otherwise be re-selected for the very model that just failed. Caller holds the lock. r)_exhausted_ttl_normalize_error_contextr2reset_atr4)sole_credentialF)persistr N)r5r;r<r MODEL_ENTITLEMENT_BENCH_SECONDSr _is_sole_credentialr&listr,idrr _adopt_persist) r-rr error_contextr8r;r<r failed_keyscopedrs r_cool_down_modelz1CredentialPoolModelCooldownMixin._cool_down_modelMs S 0 0IIK"AAE,];?? K nS$BZBZB\]] ** 4==) JFyyEHH$jV=S=SWa=a-f.D.DuenUI KKyK I  J r )r(strr Optional[str]returnbool)r7z Optional[int]rrKr8rKrLrMr%) r'PooledCredential'rrJrFzOptional[Dict[str, Any]]r8rKrLNone)__name__ __module__ __qualname__r.r9rIr rr"r"/scEI  ( 1> P]  $)-'03D\% r r")rrNrrKrLzOptional[float])rrrLzDict[str, float])__doc__ __future__rr typingrrrrr5rr@rrr"rSr rrWs:# 556#5 + 99r