߲jAB UdZddlmZddlZddlZddlZddlZddlZddlm Z m Z ddl m Z m Z mZmZmZmZej$eZdZdZGdd ej.Ze Gd d Zd Zd ddddddddddddddddddd ged!Zd"Zd#Zedd$d%d&d'dd(d)d*ed+d,d-d.d/hZd0Z d1Z!d2Z"d3Z#d4Z$d5Z%d6Z&d7Z'd8Z(ehd9Z)d:Z*d;Z+dd?d@dAdBdCe-fZ.dDZ/dEZ0dFZ1dGdHiZ2dIe3dJ<dKZ4dLZ5dMZ6dNZ7dOZ8dPZ9dQZ:dRZ;dSZ<ehdTZ=dUZ>dVZ?dWZ@dXZAeeBe fZCddYZDdZdZd[ZEd\dZd]ZFeZGeDeGjfd^d\ieEZIeDeGjfieEZKeDeGjfd^d\ieEZMeDeGjfieFZNeDeGjfieFZPeDeGjfieFZReDeGjfieFZTeDeGjfd^d\ieEZVeDeGjfieFZXeDeGjfieFZZeDeGjfieFZ\eDeGjdZ_Z^eDeGjdZ_Z`eaeDeGjeGjeGjeGjf\ZfZgZhZieDeGjeDeGjcZlZmeDeGjeDeGjcZpZqeDeGjd\d\`ZseDeGjfieFZueDeGjd\d\]ZvdaZwdbZxejdcZzejddZ{deZ|ddfZ}ddgZ~ddhZddiZe'epfe&emfe%elffZe:egfe(effe*e^ffZeeIfe7eZfe,ePffZee7eZfe,ePfe eKfeeffzZe(effe$e`fe/euffezZe!effeefe eKfe:egfe*e^fe9eMfe7eZfe,ePfe;ehfeStructured classification of an API error with recovery hints.rreasonN Optional[int] status_code Optional[str]providermodelstrmessage)default_factoryzDict[str, Any] error_contextTbool retryableFshould_compressshould_rotate_credentialshould_fallbackcZ|jtjtjhvSN)r6rrrselfs r3is_authzClassifiedError.is_authVs"{{~22N4Q4QRRRr2cJt|jjdS)zDTrue when a ``billing`` verdict rests on an ambiguous body (#82154).billing_unverified)rAr@getrHs r3rLz"ClassifiedError.billing_unverifiedZs!D&&**+?@AAr2)returnrA)r-r.r/r0__annotations__r8r:r;r>rdictr@rBrCrDrEpropertyrJrLr1r2r3r5r5EsH !%K%"Hm"E=GS$)$$?M>?It!OT!%*d*!OT! SSBBr2r5) model_not_supported_on_free_tierznot available on the free tierzinsufficient creditsinsufficient_quotazinsufficient balancezcredit balancezcredits exhaustedzcredits have been exhaustedzrequires available creditszaccount balance is too lowzno usable creditsztop up your creditszpayment requiredzbilling hard limitzexceeded your current quotazaccount is deactivatedzplan does not includeout of extra usagez out of fundszrun out of fundsbalance_depletedzbudget limit exceededzhard billing limit)rTz$personal-team-blocked:spending-limitbilling_not_activepayment_requiredinsufficient_creditsno_usable_creditsrRmember_spend_cap_exceededterminal_quota_exhaustedcredit_balance_exhausted!organization_spend_limit_exceeded!organization_usage_limit_exceededproject_spend_limit_exceeded#insufficient_credits_for_paid_model)z rate limitrztoo many requests throttledzrequests per minuteztokens per minutezrequests per dayz try again inzplease retry afterzresource exhaustedresource_exhaustedzresource-exhaustedresourceexhaustedzrate increased too quicklythrottlingexceptionztoo many concurrent requestsservicequotaexceededexception throttling)rztemporarily overloadedz!service is temporarily overloadedz%service may be temporarily overloadedzserver is overloadedzserver overloadedzserver overloadserver_overloadzservice overloadedzservice is overloadedzupstream overloadedzcurrently overloadedzQupstream model provider is temporarily unavailable. please try again in a moment.z at capacityz over capacity)z usage limitquotazlimit exceededkey limit exceeded) z try againretryz resets atzreset inz resets inz reset afterz available inwaitzrequests remainingperiodicwindowz per minutez per second)zrequest entity too largezpayload too largezerror code: 413request_too_largez request exceeds the maximum size) z image exceedszimage too largerzimage size exceedszimage dimensions exceedz"dimensions exceed max allowed sizezmax allowed size: 8000z media exceedszmedia too largezpatches after processingzmake sure your payload is belowz(streamreadconstraints.getmaxstringlength)zinvalid png imagezinvalid jpeg imagez1base64 string of provided image cannot be decodedzIdownloaded response does not contain a valid jpg, png, webp, or ico image) ztext is not setz%tool message content must be a stringztool content must be a stringztool message must be a stringzexpected string, got listzexpected string, got arrayz tool_call.content must be stringztool.content.strzinput should be a valid string'chatcompletionrequesttoolmessagecontent) z memory guardzmemory limit exceededmemory_guard_tierzdynamic ceilingzmemory ceilingzavailable memoryz out of memoryzinsufficient memoryzprefill would requirezpredicted peak wouldzprefill safety cap metal_cap>prefill_memory_abortedprefill_memory_exceededomlx_prefill_memory_exceeded)zcontext lengthz context sizezmaximum contextz token limitztoo many tokenszreduce the lengthzexceeds the limitzcontext windowzprompt is too longzprompt exceeds max length max_tokenszmaximum number of tokenszexceeds the max_model_len max_model_lenz prompt lengthinput is too longzmaximum model lengthzcontext length exceededztruncating inputz slot context n_ctx_slotu超过最大长度u上下文长度z.tokens in request more than max tokens allowedrwzmax input tokenz input tokenz*exceeds the maximum number of input tokenszmaximum allowed input lengthz>model is not supported when using codex with a chatgpt account) zis not a valid modelz invalid modelzmodel not foundrzdoes not existz no such modelz unknown modelzunsupported modelz(no endpoints found that support tool usezno user query foundzmust have non-empty contentzmessages must have non-emptyinvalid_request_bodyz%text content blocks must be non-emptyzcontent field is requiredz*messages: at least one message is required) zroles must alternatezrole must alternatezmust alternate betweenzconsecutive user messagesz'consecutive messages with the same rolez%consecutive messages of the same rolezsame role in a rowzmultiple user messages in a rowz$adjacent messages with the same role) zinvalid tool call argumentszinvalid tool_call argumentszinvalid tool_calls argumentszinvalid function call argumentszinvalid function_call argumentsztool call arguments are invalidztool_call arguments are invalidz#function call arguments are invalidz#function_call arguments are invalid)unknown parameterunsupported parameterunrecognized request argumentinvalid_request_errorunknown_parameterunsupported_parameterprompt_cache_retention)metamusemslz model-apibedrockmantlezDict[str, tuple]_SERVER_INJECTED_PARAM_SENDERS) not supported unsupportedr, unrecognized) signaturezcannot be modifiedzmust remain as they were)z.'types.SimpleNamespace' object is not iterablez7'types.SimpleNamespace' object has no attribute 'index')z.no endpoints available matching your guardrailz0no endpoints available matching your data policyz,no endpoints found matching your data policy) z'flagged for possible cybersecurity riskztrusted access for cyberzviolates our usage policiesz violates openai's usage policieszyour request was flagged byz prompt was flagged by our safetyz+responses cannot be generated due to safetycontent_filterresponsibleaipolicyviolation new_sensitivezcontent exists risk) zinvalid api keyinvalid_api_keygateway_auth_failedauthentication unauthorized forbiddenz invalid tokenz token expiredz token revokedz access deniedz&failed to extract accountid from token)zreturned an empty responsezempty response despite retriesz#provider returned an empty responsezmodel returning empty responseszempty response stream)z timed outzturn timed outzrequest timed outzdeadline exceededzoperation timed outzupstream timed out)zconnection refused econnrefusedzno route to hostznetwork is unreachableznetwork unreachablezname or service not knownz$temporary failure in name resolutionznodename nor servname providedzgetaddrinfo failedzgetaddrinfo enotfound eai_againz fetch failedzfailed to fetchzupstream connect error>SSLError ReadError PoolTimeout ReadTimeout SSLEOFError ConnectError TimeoutErrorConnectTimeoutAPITimeoutErrorBrokenPipeErrorConnectionErrorSSLSyscallErrorSSLWantReadErrorSSLWantWriteErrorAPIConnectionErrorSSLZeroReturnErrorRemoteProtocolErrorConnectionResetErrorConnectionAbortedErrorServerDisconnectedError)zserver disconnectedzpeer closed connectionzconnection reset by peerzconnection was closedznetwork connection lostzunexpected eofzincomplete chunked read)zcertificate verify failedcertificate_verify_failedz&unable to get local issuer certificatezself-signed certificatezself signed certificatezcertificate has expiredz+hostname mismatch, certificate is not validz&unable to verify the first certificate) zbad record macz ssl alertz tls alertzssl handshake failurez tlsv1 alertz sslv3 alertbad_record_mac ssl_alert tls_alerttls_alert_internal_errorz[ssl:) zyour request was blockedzrequest blockedzsorry, you have been blockedz)enable javascript and cookies to continuezcdn-cgi/challenge-platformzcf-browser-verificationzchallenge-error-text__cf_chlzcf-error-detailsz attention required! | cloudflarec d|i|S)Nr6r1)r6hintss r3_vrs f & &&r2T)rDrEF)rBrErBrC)rCrEzreasoning is mandatory) r{rrzdoes not supportzdoesn't supportzis deprecated for this modelrzr|zunrecognized parameterzinvalid parameterzextra inputs are not permittedzinvalid option: expected one ofz(?z2is_reasoning_required_rejection..s>QqDy>)lower_REASONING_FIELD_TOKENsearchmaxstartendany_REASONING_REQUIRED_MARKERS) error_msgmsgtokenrs @r3is_reasoning_required_rejectionrsj ? ! ! #C " ) )# .E } s1ekkmb()%))+*: ;D >"=> >>r2c&|xsdjtjrytj}|yt d|j dz |j dz}d|vxstfdtDS)uProvider 400 rejecting a reasoning wire control by name (``reasoning_effort``, ``reasoning``, ``thinking``/``think``): the field token plus either a generic unsupported marker ("Unrecognized request argument supplied: reasoning_effort", #112781) or a standalone "unsupported" next to the field in either word order ("unsupported reasoning_effort"; "reasoning_effort 'none' unsupported; use minimal|low|medium|high|xhigh", #114460). The route default is the right answer for such a model, so both the main loop and the auxiliary ladder retry once without the disable. A body whose structured ``param``/code names the reasoning field (``'param': 'reasoning.effort'``, ``invalid_reasoning_effort``, #100536) is a rejection whatever the message says — even none. Known trade-off: a 400 about a thinking *state* ("Function calling is not supported when thinking is enabled") also matches — the marker sits right next to the token, so no proximity rule separates it from the forward wordings. Cost is one dropped-disable retry before the spent path takes the fallback chain; the auxiliary ladder already treated it this way.r<TFr rc3&K|]}|v ywrGr1)rrrs r3rz/is_reasoning_field_rejection..1s'TQS'Tr) r_REASONING_PARAM_REJECTIONrrrrrrUNSUPPORTED_PARAM_MARKERS)rrrrs @r3is_reasoning_field_rejectionrs ? ! ! #C!((- " ) )# .E } s1ekkmb()%))+*: ;D D TC'T:S'T$TTr2cZi}tfdtDrddd}itd|iS)zEBilling verdict carrying the #82154 ambiguity marker when applicable.c3&K|]}|v ywrGr1rprs r3rz!_billing_hints..7s @a1 > @rT)rLpossible_content_filterr@)r_UNVERIFIED_BILLING_PATTERNS _V_BILLING)rctxs` r3_billing_hintsr4s3C @#? @@%)dK /j //3 //r2ct|D]2\}}tfd|Dst|r |cS|cSy)z@Verdict of the first rule whose pattern list hits ``error_msg``.c3&K|]}|v ywrGr1rs r3rz_first_match..?s0!qI~0rN)rcallable)rrulespatternsverdicts` r3 _first_matchr<sC"H' 0x0 0)1'):79% G GH r2)rbrarate_limit_exceeded)rD)rmodel_not_available invalid_model)context_length_exceededmax_tokens_exceededr%zDict[str, Verdict]_ERROR_CODE_VERDICTSopenaigemini) openai-codexgooglez google-geminizgoogle-ai-studiovertexz google-vertexr) unavailabledeadline_exceededinternal) api_errorrate_limit_error)rr anthropiczDict[str, Dict[str, Verdict]]_PROVIDER_CODE_VERDICTSr~rr}c#,K|] }|dk7s |yw)r}Nr1rrs r3rrs iqAQhLh is ceZdZUdZded<ded<ded<ded <ded <ded <d ed <d ed<d ed<dZded<dZded<ddZddZy)_Ctxz>   6 ) kt/A/AF/J/jdN_N_bjNj r2N)rNNone)r floatrrrrrNrA) r-r.r/r0rOrrr rr1r2r3rrsUF  J HM JHcIt= r2rc  ddlm}||j|j|j|j |j |j|j|j|j|j|j }|9tj!d|dj"|j|j|S#t$r }tjd|Yd}~yd}~wwxYw)zFirst valid plugin classification (runs before the built-in pipeline so a provider plugin can add or correct verdicts). invoke_hook isolates callback failures; this guard only covers import/dispatch failure.r)get_plugin_error_classification) r:r;r8rr error_message error_bodyrrrrz+Plugin error classification unavailable: %sNz@API error classified by plugin hook: %s (provider=%s, status=%s)r6)hermes_cli.pluginsrr:r;r8rrrrrrrrrloggerdebuginfovalue)crrexcs r3_plugin_verdictrs F1ZZqwwAMMVWVbVb||155QVVSTSZSZ//!:J:JYZYgYg  VH%++QZZ H N  BCHsBC C/C**C/c|jsy ddlm}t||jdd}t |sy||j |j |j|j|j|j}t|tsy|j!d}t|t"r( t%|j'j)}t|t$syt,Dcic]}||vs|t/||}}|j!drd |vr |t0vrd |d <t3|fi|}t|j!d tr|d |d <tj5d |j6|j8|j |S#t$r+}tjd|j|Yd}~yd}~wwxYw#t*$rYywxYwcc}w) aThe current provider's own ``ProviderProfile.classify_api_error`` verdict, or None. A ``kind: model-provider`` plugin never enters the PluginManager hook lifecycle, so without this a vendor-specific body (a 403 ``quota_exhausted`` that is billing, not auth) could only be corrected by shipping a second plugin component. Scoped to the provider that produced the error; no name table.Nr)get_provider_profileclassify_api_error)r8rr>rr;z7Provider profile error classification failed for %s: %sr6rErBFr@zEAPI error classified by provider profile: %s (provider=%s, status=%s))r  providersr getattrrrr8rrrr;rrr isinstancerPrMr=rrr ValueError _HINT_FLAGSrARETRYABLE_CLIENT_REASONSrrrr:) rr hookresultrr6krrs r3_profile_verdictr+s ?? 2+AOO<>RTXY~agg1==Q\\[\[`[`662 fd # ZZ !F&# #FLLN$8$8$:;F fn -)4 DAV QVAY  DE D  yy"# 5(@VSkEk"k!5!G&**_-t4#)/#:  KKW ajj!--9 N3  NPQP_P_ade   Es;.F%A F%;'G; G+G+% G.!GG G('G()rBrCrDrEc#2K|]}|tvs |ywrG)_FREE_TIER_REFUSAL_PATTERNSrs r3rrs!GJ A-H$HAGJs cddlm}m}m}j}j sJj dk(r:|dk(r5||jdk(rttjddddi Sy |d k(r~|j}|y d |i}|d |vrttjdd| S|ddkDrtj|dz|d<ttjd|Stfdt D }||j|r j"nd }|y d|i}|dk(rttj$dd| Sttjdd| S)uThe Nous inference gateway's welcome-tier (free tier) refusals, read from the structured body. A 429 carrying a fairshare ``reason`` is either a tier gate (``model_not_free`` / ``feature_not_free``: the model or feature is never served on the free tier, so retrying is pointless — abort this route and fall back) or capacity (``at_capacity`` / ``admission_closed`` / ``rate_limited``: honour ``retry_after``, never rotate the free tier's only credential). A 400/403 whose message names the wrong host or a dark tier is deterministic for the request. The parsed refusal rides ``error_context`` so the terminal copy can say what happened. r)WELCOME_TIER_GATE_REASONSparse_welcome_refusalwelcome_route_refusalnousnamed_on_welcome_hostFT welcome_route)rBrEr@Nwelcome_refusalr6 retry_afterreset_atrEr@c3:K|]}|jvywrGrrrrs r3rz%_nous_welcome_tier..#sHqQUU H)hermes_cli.anon_authr/r0r1r8rr:rr_Rr#rrtimerr_WELCOME_403_NAMED_PATTERNSrr) rr/r0r1statusrefusalr plain_403kinds ` r3_nous_welcome_tierrHslQQ ]]F ;; :: FcM6KFTUTYTY6Z^u6uboo%46M$NP P }'/ ? '* 8  9 9b((E4_bc c = !A %"iikGM,BBC O"--SIIH,GHHHI i T RD | D !C }"##udZ]^^ booTW XXr2c|j|jc}t|}||StfdtDrt St |rttjfitS|dk(r|jdk(sdvrtS|dk(r5dvr1tfdtDrttjS|dk(r#dvrd vrttjd S|dk(r!d vrd vrttj Sdvxs"dvxsdvxrdvxsdvxr dvxrdv}|dk(r#|r!t"vrttj$Sdvsdvr dvrt&Sy)zLHighest-priority provider-specific shapes that a status code would misroute.Nc3&K|]}|v ywrGr1rrrs r3rz*_provider_special_cases..5s >18 >rr3thinking_signature_invalidthinkingc3&K|]}|v ywrGr1rKs r3rz*_provider_special_cases..Es2^182^rr6z extra usagez long contextTrzlong context betaznot yet availablezerror parsing grammarzjson-schema-to-grammarzunable to generate parsertemplatezinvalid json schemazregex lookaroundrz'do not have an active grok subscriptionzout of available resourcesgrok)rr8rHr _CONTENT_POLICY_BLOCKED_PATTERNS_V_CONTENT_BLOCKED!_is_codex_masked_replay_rejectionrrAr%_ABORT_FALLBACKr_V_INVALID_ENCRYPTED_THINKING_MUTATION_WORDSr(r)r*_NO_USER_QUERY_SIGNALr+_V_AUTH_FALLBACK)rrDwelcome grammar_hitrs @r3_provider_special_casesr[-s%%KC #G >= >>!! )+"..B/BB}!&&$@@D`dgDg##}s*s2^E]2^/^"''(( }#-.C2G"&&== },38Ks8R"6677*S0a4LPS4Sa#s*@zS/@a 3 & _+=+D _\_I_})>c)I"..//1C7.cs'[aS\(9'[s!$F)rBr)MoAPresetNotFoundError) r r_MOA_ADAPTER_SHAPE_BUGSrrAr# agent.errorsr`r$rr)rr`s` r3_moa_special_casesrc`sZ %C'[CZ'[$["//U3336@J`6a2b  E 2kgkkr2cH|jtk(rd|jvrtStj |j}|Yt j |j|j}tj |ij |j}|S)z.Structured error codes from the response body.zrequest validation failed:) r#PROVIDER_STREAM_NON_JSON_ERROR_CODEr_V_FORMAT_ERRORrrM_PROVIDER_CODE_FAMILIESr r)rrfamilys r3_by_error_coderijs vv449UYZY^Y^9^"&&qvv.G(,,Q__aooN)--fb9==affE Nr2ctjt}||StfdtD}|rt jt StjtS)zqMessage patterns when no status code settled it; status-less usage limits get the same disambiguation as 402.c3:K|]}|jvywrGr<r=s r3rz_by_message..}s@Qa155j@r>)rr_MESSAGE_HEAD_RULESr_USAGE_LIMIT_PATTERNS _classify_402rP_MESSAGE_TAIL_RULES)rhead usage_limits` r3 _by_messagerrwsV 2 3D  @*?@@K)4= %b,quuNa:bbr2c|jtttftt ff}||St fdtDrI|js=ddl m }||jt S|jdddrtSt S|jdk(r&d vr"d vrtt j"fit$S|jt&vxs%t)|j*t,t.t0f}|rt SdS) zNSSL, disconnect, circuit-breaker and transport-type heuristics, in that order.Nc3&K|]}|v ywrGr1rKs r3rz _by_transport..s 918 9rr)!get_reasoning_stale_timeout_floorg333333?i RuntimeErrorzconsecutive stale attemptszaborting this call)rr_SSL_CERT_VERIFY_PATTERNS _V_SSL_CERT_SSL_TRANSIENT_PATTERNS _V_TIMEOUTr_SERVER_DISCONNECT_PATTERNSr8agent.reasoning_timeoutsrur;r_V_CONTEXT_OVERFLOWrrrArrT_TRANSPORT_ERROR_TYPESr$rrrOSError)rsslru transportrs @r3 _by_transportrs %%C s7EH_akGlm nC   98 99!-- O ,QWW 5 A &'ooc63&G"WZW ||~%*F#*MRfjmRm"**000 66w*QWW|]lnuNv:wI":,,r2c|j}|yd|cxkrdkr nntnd|cxkrdkr nntnd}|tvrt||S|S)uNHTTP status code with message-aware refinement (unlisted 4xx/5xx → generic).Nr3X)r8rf_V_SERVER_ERROR_STATUS_HANDLERS)rrDdefaults r3 _by_statusrsU ]]F ~!$!4!4oSTZM`]`M`/fjG*04D*D F #A &Q'Qr2z-Sequence[Callable[[_Ctx], Optional[Verdict]]]_STAGESr<i@ )r:r;rrrrapi_keycddlm}t|} | t|jdk(rd} t |} t || | t|| |||||t|xsd||| tdfdtDDt} t|| } | d tjtjfvrt!} | r| d | d } | ||| d }t#d ii|| S)aClassify an API error into a structured recovery recommendation (see ``_STAGES``). ``base_url`` (optional) is the route the call went to; the Nous welcome tier keys its dark-tier 403 on it because that refusal carries no distinguishing message. ``api_key`` identifies an anonymous request; a host or fairshare reason alone does not. The credential is never included in the returned context.r)is_anonymous_requestRateLimitErrorr6r<)rc3&K|] }|| ywrGr1)rvs r3rz%classify_api_error..sP!!-APc3.K|] }|ywrGr1)rstagers r3rz%classify_api_error..s>Ua>sr6z (endpoint: ))r8r:r;r>r1)r@r_extract_status_coderr-_extract_error_bodyr_build_error_msgr=nextr _V_UNKNOWN_extract_messagerArr_off_route_hostr5)rr:r;rrrrrrr8rrr>hostbasers @r3r!r!s:&u-KtE{337GG u %D  {D"25$"?5~|SR5H&x9 A P>g>PR\]Gud+GxRWWb&7&788q!  dV15G&HuY` aD  1000 11r2cddlm}ddlm}||j}|r||j |jdury|S)zeThe contacted host when ``base_url`` is set and is not the provider's own endpoint; ``""`` otherwise.r)provider_owns_route)base_url_hostnameTr<)hermes_cli.route_identityrutilsrrr )rrrrs r3rrs8=' QZZ (D &q CtK Kr2upstream_unavailablecjtvrtSjdk(xrjtk(}|xst fddt zD}|rtSt fdtDrtStS)Nz xai-oauthc3:K|]}|jvywrGr<r=s r3rz_status_403..spaqAEEzpr>)rizspending limitc3:K|]}|jvywrGr<r=s r3rz_status_403..s :!1: :r>) r_403_TRANSIENT_CODES _V_OVERLOADEDr _XAI_SPENDING_LIMIT_ERROR_CODEr_BILLING_PATTERNSr_UPSTREAM_BLOCKED_PATTERNS_V_UPSTREAM_BLOCKEDrX)r xai_spendrs` r3 _status_403rsuvv%%;.[166=[3[Ip3p3[^o3oppG :9 ::"" r2c|jtvrtSt|jt }||St |j|jrtStSrG) r_BILLING_ERROR_CODESrrr _404_RULES_model_id_missing_known_prefixr r _V_MODEL_NOT_FOUNDr)rrs r3 _status_404rsS vv%%155*-G"@ aoo!^ ndnnr2cjtvrtStfdtDrt St jjr9tj}|rd|ini}ttjd|Sjdk(xs"tfddtztzD}tfdtD}|r3|s1t!j"jj$stSt'j"jj$}|r9ttj(fit*d d t-j,|ziiSt.S) Nc3:K|]}|jvywrGr<r=s r3rz_status_429..s 4!1: 4r>upstream_providerTr:usage_limit_reachedc3:K|]}|jvywrGr<r=s r3rz_status_429..s8QUU 8r>)rc3:K|]}|jvywrGr<r=s r3rz_status_429..sGQa155jGr>r@r9)rrrr_OVERLOADED_PATTERNSr_is_openrouter_upstream_errorrr _extract_upstream_provider_namerrArrmr_RATE_LIMIT_PATTERNS!_has_usage_limit_transient_signalrr_rate_limit_reset_secondsr_ROTATE_FALLBACKrB _V_RATE_LIMIT)rupstreamr quota_wallexplicit_rate_limitresets` r3 _status_429r s< vv%% 43 44$QVVQ__=2166:19"H-r"(($cRR 00C847LLO``85JG2FGG-6WXYX]X]_`_e_eghgpgp6q %aeeQVVQYY ?E "--e#3eJPTPYPYP[^cPcCdee r2ctfdtDxsjtv}|r&t j j stStj txstS)Nc3:K|]}|jvywrGr<r=s r3rz_status_5xx..,sFAQ!%%ZFr>) r_REQUEST_VALIDATION_PATTERNSr_5XX_VALIDATION_CODES#_is_server_injected_param_rejectionrr rfr_OVERFLOW_AS_5XX_RULESr)r validations` r3 _status_5xxr)sWF)EFFi!&&TiJiJ=aeeQ__U 5 6 I/Ir2ctfdtDxrtfdtD}|di|rtStS)zYDisambiguate 402: "usage limit, try again in 5 minutes" is a periodic quota, not billing.c3&K|]}|v ywrGr1rs r3rz _classify_402..4sBqANBrc3&K|]}|v ywrGr1rs r3rz _classify_402..4sKYKrr1)rrm_USAGE_LIMIT_TRANSIENT_SIGNALSrr)r result_fn transients` r3rnrn2sJB,ABBsK >KHI  D DD DDr2c4ddlm}t|tr|ndD]{}t|tr|j dnd}t|tr|j dn|}t|t sZ|jdslt||kDs{yy ) zTrue when a rejected ``content`` list carries a ``data:image/`` part the shrink pass would rewrite (over ``conversation_compression._IMAGE_SHRINK_TARGET_BYTES``; below it a shrink retry is a no-op).r)_IMAGE_SHRINK_TARGET_BYTESr1 image_urlNurlz data:image/TF) agent.conversation_compressionrr$listrPrMr= startswithlen)contentrpartimagers r3_has_large_inline_imager:s}J%gt4")3D$)?%T",UD"9eiiu c3 CNN=$Ac#hQkFk  r2ct|tr|jdnd}t|tr|ndD]}t|tr|jdnd}|jddk7st|trt |dkrY|Dcgc]}t |j }}|dddd gk(s|d dd d gk(std |Drt|jdsyycc}w)u400 rejecting a *message* ``content`` field whose rejected value carries a large inline image. Nebius Token Factory caps a single image at 10 MiB and reports the violation through the field that failed to coerce — pydantic ``{"type": "string_type", "loc": ["body","messages",N,"content","str"], "msg": "Input should be a valid string", "input": [...]}`` — naming no size vocabulary, so the keyword multimodal *tool*-content rule (#104731) claimed it and spent its retry stripping tool images that were never there (#112473). The same list-shaped content with a small image succeeds, so the image bytes are the trigger. Tool-scoped locs (``messages.N.tool.content.str``) stay with #104731. detailNr1locr string_typerrrr=c3>K|]}|jdyw)toolN)rrxs r3rz7_oversized_message_content_rejection..Ws ^ %&ALL ^ sinputTF) r$rPrMrrr=rrr)rdetailsrrrpartss r3$_oversized_message_content_rejectionrGs%/tT$:dhhx G'6'B#-fd#;fjj ::f  .jd6KsSVxZ[| ),-AQ-- !9, ,rs 5?Q1QZ]^ */^ [ %fjj&9:  .s C?c|j|jc}t|jrtSt t }||StvrtS|dk(s dvsdvrdvsdvsdvs dvrdvsdvrtStvs trtSt|jrtSt!fd t"Drt$St!fd t&Drt(St!fd t*Ds|t,vrt.St!fd t0Ds|d k(r2t2j5d|j6|j8t.S|t:vrt<St t>}||StAddtC|jDDd}tE|dkxs|dv}|r|jGdddrtHSt.S)uV400 Bad Request — image/tool shapes, request-shape rejections, overflow, or generic.r%zencrypted content for itemzcould not be verifiedz0could not decrypt the provided encrypted_contentz2encrypted content could not be decrypted or parsedencrypted_contentzwas not issued to this callerz1conflicting authenticated continuation identitiesc3&K|]}|v ywrGr1rKs r3rz _classify_400..s ;18 ;rc3&K|]}|v ywrGr1rKs r3rz _classify_400..s 818 8rc3&K|]}|v ywrGr1rKs r3rz _classify_400..s 618 6rc3&K|]}|v ywrGr1rKs r3rz _classify_400..s <18 .sn1lmQnrc3rK|]/}t|xsdjj1yw)r<Nr=rrrs r3rz _classify_400..s* h!QW"!3!3!5!;!;!= hs57r<>r<rg?i8P)%rrrr_V_IMAGE_TOO_LARGEr_IMAGE_TOOL_RULES&CODEX_ACCOUNT_MODEL_ENTITLEMENT_MARKER_V_MODEL_ENTITLEMENTrU_REASONING_MANDATORY_PATTERNr_V_REASONING_MANDATORYrr rr_MALFORMED_TOOL_ARGS_PATTERNS_V_MALFORMED_TOOL_ARGS_ROLE_ALTERNATION_PATTERNS_V_ROLE_ALTERNATION_400_VALIDATION_PATTERNS_400_VALIDATION_CODESrf_INVALID_MESSAGE_BODY_PATTERNSrwarningrr_MEMORY_CEILING_ERROR_CODESr_400_TAIL_RULESr_body_message_candidatesrrr~)rrrbody_msg is_genericrs @r3 _classify_400r^sqvvIC,AFF3!!3 12G.4## **.IS.P$+0G30N ;s B<C s"'F#'M O-r2cFt|jtxstSrGrrs r3rrrr2) r3iir?iiiir6riiiz$Dict[int, Callable[[_Ctx], Verdict]]r)resets_in_seconds resets_atr9r8)z retry-afterz Retry-Afterzx-ratelimit-resetzX-RateLimit-Resetc tfdtDry|t|fDcgc]}t|ts|}}td|Dryr$t drtfdt DSycc}w)z\Whether a usage-limit response identifies a reset window (message, body fields, or headers).c3&K|]}|v ywrGr1)rpatternrs r3rz4_has_usage_limit_transient_signal..s NG7i  NrTc3XK|]"}tD]}|j|dv$ywrN) _RESET_FIELDSrM)rpayloadfs r3rz4_has_usage_limit_transient_signal..s* [] [7;;q> + [ + [s(*rMc3DK|]}j|dvywr&rM)rhresponse_headerss r3rz4_has_usage_limit_transient_signal..s"U#''**<Us F)rr _error_objr$rPhasattr_RESET_HEADERS)rrr-rpayloadss` ` r3rrss N/M NN *T"23Kaz!T7JKHK [8 [[G$4e<UnUUU  Ls BBcxddlm}m}d|t|fDD]}tD]}}|j |}|dvr|j drDt|ttfr.tdt|tjz ccS||x}y|ccS||x}|S||S)zSeconds until a 429's window reopens, from the body's reset fields, ``Retry-After`` or the message grammar (``retry after Ns`` / ``resets in 4hr``); None when the response names none.r)parse_retry_after_secondsreset_delay_from_messagec3BK|]}t|ts|ywrG)r$rPrs r3rz,_rate_limit_reset_seconds..sO!:a;NAOsr_atg) agent.retry_utilsr3r4r.r'rMendswithr$rrrrB) rrr-r3r4r(namersecondss r3rrsVOj&67O! DKK%E "}}U# 53,(G3e tyy{ :;;4U;;H --=>>K #I ..r2c|xsdj}|rd|vry ddlm}t||xsdj|S#t$rYywxYw)zTrue when a bare model id is only known to the provider as ``vendor/id``. Never guesses: an id absent from the curated catalogue returns False so real endpoint problems keep their retryable ``unknown`` classification. r</Fr)suggest_prefixed_model_id)rhermes_cli.model_normalizer=rAr)r;r:r9r=s r3rrs\ KR   D 3$;H-x~2.D.D.FMNN s)A AAc|xsdjjtjD]<\}}s |vst fdt Ds't fd|D cSy)zTrue when a 400 blames a one-route-only parameter this route never sends. Conservative: known parameters only, and only when ``provider`` is not a sender, so a genuine bad parameter (``max_tokens`` on GPT-5) stays format_error. r<c3&K|]}|v ywrGr1)rwrs r3rz6_is_server_injected_param_rejection..s3cqAN3crc3&K|]}|v ywrGr1)rsenderr s r3rz6_is_server_injected_param_rejection..sIv6]2IrF)rrritemsr_PARAM_REJECTION_WORDS)rr:paramsendersr s` @r3rrso ^**,224M8>>@Jw )+3cLb3c0cIIII IJ r2zrequest blocked.zunsupported content typec|jdk7s|jdvryt|jtr |jni}t |j dxsdjjtk(s"|s!t|jvrd|jvrytdt|Dd}|jdk(xr |tk(xs$|jjd tk(S) uHTTP 400 / status-less ``{code: invalid_prompt, message: "Request blocked."}`` from ``openai-codex`` — as an SDK error body, a Responses ``error`` SSE frame, or the ``response.failed`` text ``"invalid_prompt: Request blocked."`` — or the bare ``{"detail": "Unsupported content type"}`` envelope the same backend returns for a rejected encrypted-reasoning replay (#51512). Both are exact envelopes, provider-gated.r)Nr3Frr<Tc3pK|].}|st|jj0ywrGrrs r3rz4_is_codex_masked_replay_rejection..s&YWXSV\\^))+Ys6,6invalid_promptzinvalid_prompt: )r r8r$rrPr=rMrr!_CODEX_UNSUPPORTED_CONTENT_DETAILrrr r_CODEX_MASKED_REPLAY_MESSAGE)rrrs r3rSrSs  .(AMM,L-1662D 488H  #$**,2248YY 6!%%?HPQPUPUDUY5Md5SY[]^H FF& & S87S+S   +,H+IJJr2cpt|tr|jdnd}t|tr|SiS)z1``body["error"]`` when it is a dict, else ``{}``.rN)r$rPrM)rerrs r3r.r.s/)$5$((7 4CS$'3/R/r2ct|tr|jsy tj|}t|tr|SdS#tj t f$rYywxYw)zVParse a JSON object string; None for non-strings, blanks, invalid JSON or non-objects.N)r$r=rjsonloadsJSONDecodeError TypeErrorrP)textinners r3 _json_dictrVs_ tS !djjl 4 ud+555  ) ,sA A('A(c|jdi}t|trt|jdnd}|r5t t |jdxsdj SdS)zOLowercased inner message from OpenRouter's ``error.metadata.raw`` JSON wrapper.metadatarawNr>r<)rMr$rPrVr=r.r)err_objrXrUs r3_openrouter_wrapped_messager[%s`{{:r*H/9(D/IJx||E* +tEBG3z% $$Y/52 6 < < >OROr2ct|j}dx}}t|trtt |}t|j dxsdjxs,t|j dxsdj}|r t |nd}|g}|r||vr|j||r||vr||vr|j|dj|S)zLowercased str(error) + body message + OpenRouter-wrapped upstream message (OpenAI SDK's APIStatusError.__str__ omits the body, so it is appended).r<r> ) r=rr$rPr.rMr[appendjoin)rrraw_msgr metadata_msgrZrs r3rr,s%j G  H|$T"w{{9-34::<fDHHYDWD][]@^@d@d@f?F27;B IEHG+ X G3 H8T \" 88E?r2c#Kt|jd|jd|jd|jd}t|tr|jdnd|jd}t|tr|jdyt|tr|ydyw)z\Body message fields in priority order (OpenAI, flat, litellm/Bedrock proxy, FastAPI shapes).r> errorMessage errorArgsr6Nr)r.rMr$rPr=)rargsrs r3r r =s T   y )) ((9  ((> "" 88K D *4 6$((8 D@ XXh F#-fd#;&**Y l:V\^aKblhllsCC c|}tdD]7}||}||cSt|ddxs t|dd}|||ur|S|}9|S)z]First non-None ``pick(exc)`` over the error and its __cause__/__context__ chain (max 5 deep).N __cause__ __context__)ranger#)rpickrcurrent_foundcauses r3rrLsmG 1XW   Ld3\ww W[7\ =EW,  N Nr2ct|dd}t|tr|St|dd}t|trd|cxkrdkr|SdS)Nr8rDdr)r#r$r)rrs r3 _status_ofrrZsP 3 t ,D$ 3$ 'DdC(SD->3->4H->DHr2ct|dd}t|tr|St|dd} ||jnd}t|tr|SdS#t$rYywxYw)Nrresponse)r#r$rPrPr)rrrt json_bodys r3_body_ofrvbsn 3 %D$ sJ-H'/';HMMO #9d39== sA A"!A"cVtt|dddd}|rt|dr|SdS)NrtrrM)r#r/)rrs r3rrns/gc:t4iFG''5"97CtCr2c$t|tdS)z3HTTP status code from the error or its cause chain.N)rrrrs r3rrss UJ 55r2c$t|tiS)z?Structured error body from an SDK exception or its cause chain.)rrvrys r3rrxs UHb 11r2cttsyjdi}t|tr|jdxs|jdxsd}t|ts|jdxs|}t|tr3|j r#|j dk7r|j S|jd}|rIt|tr9|j j drt t|d d }|r|Stfd |Dd}t|ttfrt|j nd}|r|dk7r|SdS) aqCode/type from ``payload.error`` or a top-level key; ``"400"`` is not a code. ``peek_message`` also parses a JSON ``error.message`` for a nested code (Responses API surfaces ``invalid_encrypted_content`` this way). Gemini puts the HTTP status in ``error.code`` and the symbolic code (``UNAVAILABLE``) in ``error.status``, so a numeric code defers to it.r<rrrrD400r>{)rrFc3dK|]'}j|sj|)ywrGr+)rr*r(s r3rz%_code_from_payload..s#DAW[[^QDs00) r$rPrMr=rr_code_from_payloadrVrr)r(top_keys peek_message error_objrr> nested_coderTs` r3rr}s% gt $ GR(I)T"}}V$C f(=C$$==*2dD dC TZZ\djjle6K::< -- * Jw49S9STW9X,Z-@BXZ_`K"" DDb ID *4#s <3t9?? "DDEM41r1r2c$|r t|ddSdS)z4Extract an error code string from the response body.)rr errorCodeTr<)r)rs r3rrsRV d$G N^\^^r2ctdt|xsiDd}|r|jddSt|ddS)zCExtract the most informative error message (structured body first).c3dK|](}t|ts|js%|*ywrG)r$r=rrs r3rz#_extract_message..s&da:aQTCUZ[ZaZaZcds 000Nr)rr rr=)rrrs r3rrsD d3DJB?dfj kCCIIK 55CJ 55r2c:t|}t|jdxsdjj dk7ry|xsdjj dk(ry|jd}t |t xr d|vxsd |vS) zOpenRouter's "Provider returned error" wrapper: the key is healthy, the upstream failed, so credential rotation is the wrong recovery.r>r<zprovider returned errorF openrouterTrXrY provider_name)r.r=rMrrr$rP)rr:rNrXs r3rrs T C 3779  #$**,2248QQB%%'<7wwz"H h % \5H+<+[S[@[\r2ct|jd}t|tr|jdnd}t|tr |j r|j SdS)zCPull the upstream provider name out of OpenRouter's error metadata.rXrN)r.rMr$rPr=r)rrXr9s r3rrsR$##J/H,6x,F8<< (DD%dC0TZZ\4::<KtKr2)r6rrrrNVerdict)rr=rNrA)rr=rNr)rr=rz#Sequence[tuple[Sequence[str], Any]]rNOptional[Verdict])rrrNr)rrr:r=r;r=rrrrrrrr=rrrNr5)rrrNr=)rrrNr)rr=rzCallable[..., Any]rNr)rrrNrA)rrrNrA)rr=rrPrNrA)rr=rrPrNzOptional[float])r;r=r:r=rNrA)rr=r:r=rNrA)rz'_Ctx'rNrA)rrrNrP)rTrrNOptional[dict])rZrPrNr=)rrrrrNr=)rrPrNz Iterator[Any])rrrkzCallable[[Any], Any]rrrNr)rrrNr7)rrrNr)rrrNr)rrrNr7)rrrNrP)r(rrz Sequence[str]rrArNr=)rrPrNr=)rrrrPrNr=)rrr:r=rNrA)rrrNr9)r0 __future__renumrPloggingrerB dataclassesrrtypingrrrr r r getLoggerr-rre&PROVIDER_STREAM_EMPTY_FRAME_ERROR_CODEEnumrr5r-rrr frozensetrrrrmr_PAYLOAD_TOO_LARGE_PATTERNS_IMAGE_TOO_LARGE_PATTERNS_IMAGE_CORRUPT_PATTERNS!_MULTIMODAL_TOOL_CONTENT_PATTERNS_MEMORY_CEILING_PATTERNSr _CONTEXT_OVERFLOW_PATTERNSr_MODEL_NOT_FOUND_PATTERNSrWr rrrrrOrErVra!_PROVIDER_POLICY_BLOCKED_PATTERNSrQ_AUTH_PATTERNS!_EMPTY_PROVIDER_RESPONSE_PATTERNS_TIMEOUT_MESSAGE_PATTERNS_CONNECTION_MESSAGE_PATTERNSrr|rxrzrr=rrrrTrArrrrrrrXrrrrr rRr!rr#rfr_V_POLICY_BLOCKEDrryrr~rrmaprrrr,rrr{rrrr_V_IMAGE_CORRUPTr&r% _V_MULTIMODALrUr'rr$rrrrcompilerrrrrrrrrrr rlrorPfromkeysrrgrrrtuplerrrr+r&rr)r(r'rCrHr[rcrirrrrrr!rrrrrrrnrrrrrr'r0rrrrrLrKrSr.rVr[rr rrrrvrrrrrrrrr1r2r3rs{ #  (DD   8 $'F#*G& TYY F BB B@e02HJZ68T "57LN`79QSj.*<>P!( 7"H!.0BDZ+-O!;=[ C')G) " Y"*%!(() $*j&. "#ACY+-H02G"! W4 0U[ %!$ %!  #$ sCx.'15N %$?  @e @/? @ 2==5$45 BGGAuA0@Abgg11**>o>,,@@11E_E"..T%TCSTR__88r11E_E))=_= ,,dC"..E9C\C\##^%E%E~GgGg%%&?GJ GJBJJ(YV0fl c-DR%'> L^K: 6*,"&a !2 !2#&!247!2!2,/!2HK!2!2 !2  !2H!"8!9:  o@JE .EPE 5<` ;-AHf . ;[ O O :6N Y /$   2$>!(0 6P" m I >D 6 2 22_ 6 ]Lr2