߲j,/UdZddlZddlmZddlmZddlmZmZe Z ee d<da e e d<d e fd Zed d DxZ\ZZZZZZZZZZZZZZZZ Z!Z"Z#ed e Z$ede Z%ede Z&ede Z'ede Z(gee&e'e(Dcic]}|jR|c}Z*de+ded dfdZ,de+d dfdZ-ed>de+dzd edfdZ.dede/dzd e/dzfdZ0ddddddddddddddddddde ddfde+de+de+d e+d!e+d"e+d#e+d$e+d%e+d&e+d'e+de+d(e+d)e+d*e+d+e+d,e+d-e d.e+d/ed0e+d1e+dzd e1f.d2Z2d3e1d dfd4Z3d?d5Z4d@d6e+d7e+d e+fd8Z5e6hd9Z7d e fd:Z8d?d;Z9d e fd<Z:d e fd=Z;ycc}w)AaISession-scoped context variables for the Hermes gateway. Replaces the old ``os.environ``-based ``HERMES_SESSION_*`` state with task-local ``ContextVar``s (inherited by ``run_in_executor`` threads), so concurrently handled messages no longer clobber each other's routing ids. ``get_session_env`` is a drop-in for ``os.getenv``. N)contextmanager) ContextVar)AnyIterator_UNSETF_session_context_engagedreturnctS)zHTrue if any session has been bound via set_session_vars in this process.)rK|]}t|tyw)defaultN)rr).0names r r(s t*T6 * * s)HERMES_SESSION_PLATFORMHERMES_SESSION_SOURCEHERMES_SESSION_CHAT_IDHERMES_SESSION_CHAT_TYPEHERMES_SESSION_CHAT_NAMEHERMES_SESSION_THREAD_IDHERMES_SESSION_USER_IDHERMES_SESSION_USER_ID_ALTHERMES_SESSION_USER_NAMEHERMES_SESSION_SCOPE_IDHERMES_SESSION_KEYHERMES_SESSION_IDHERMES_UI_SESSION_IDHERMES_SESSION_MESSAGE_IDHERMES_SESSION_PROFILE HERMES_BROWSER_CONTROL_PRINCIPAL'HERMES_BROWSER_CONTROL_TRANSPORT_FAMILYHERMES_CRON_SESSIONHERMES_SESSION_PARENT_CHAT_IDHERMES_SESSION_ASYNC_DELIVERYrHERMES_SESSION_HISTORY_DELIVERY!HERMES_CRON_AUTO_DELIVER_PLATFORM HERMES_CRON_AUTO_DELIVER_CHAT_ID"HERMES_CRON_AUTO_DELIVER_THREAD_IDfuncargscN ddlm}t|||y#t$rYywxYw)zVBest-effort call of ``agent.runtime_cwd.``; import/runtime failures are ignored.r) runtime_cwdN)agentr0getattr Exception)r-r.r0s r _runtime_cwdr4Hs- %" T"D)    s  $$ session_idctj| ddlm}|ry |t j d<y#t$rYwxYw)zSynchronize ``HERMES_SESSION_ID`` across ContextVar and ``os.environ`` (tools read it with an os.environ fallback). Delegated subagent children (built in the parent process) get ONLY the task-local write, or they would clobber the parent's id.r)is_delegated_child_contextNr ) _SESSION_IDsetagent.delegation_contextr7r3osenviron)r5r7s r set_current_session_idr=QsKOOJ G % '  ('1BJJ"#    s : AAc#Ktj}|tj| dtj|y#tj|wxYww)zBind a task-local session id and restore the prior value on exit; never touches ``os.environ``. ``session_id=None`` is a pure save/restore boundary.N)r8getr9)r5previouss r scoped_current_session_idrA_sF H #" ! !s,A#A A# A  A#sourcemetadatacxdDcic]}t||dx}r |t|}}|r i|xsi|S|Scc}w)zKKeep inbound route anchors for durable deliveries after the source is gone.)scope_idparent_chat_idN)r2str)rBrCkeyvalueanchorss r source_route_metadatarKls[*H93#FC6656CJ9G9.5 *x~2 *' *C8C9s"7Tplatformchat_id chat_type chat_name thread_iduser_id user_id_alt user_namerE session_key message_idprofilebrowser_control_principal browser_control_transport_familycwdasync_delivery ui_session_id cron_sessionrFsession_history_deliveryclda|||||||||| | | || | ||||f}tt|Dcgc]\}}|j|}}}|j t jt ||j tj|tn|td||Scc}}w)uSet all session context variables and return reset tokens. Call ``clear_session_vars(tokens)`` in a ``finally``; not nestable, clearing resets every var to ``""`` rather than restoring prior values (tokens are accepted only for API compat). ``session_history_delivery`` declares whether the bound chat id is one the client can address again: ``"1"`` (audited producers — explicit session-id header, native API sessions, /v1/runs) or ``""`` / omitted (default-deny, #98619). ``None`` leaves the var at ``_UNSET`` ("never declared"), which ``session_history_delivery_supported()`` treats as NOT capable — an omitted declaration cannot grant wake authority.Tset_session_cwd) rzip _SESSION_VARSr9append_SESSION_ASYNC_DELIVERYbool_SESSION_HISTORY_DELIVERYrr4)rMrBrNrOrPrQrRrSrTrErUr5rVrWrXrYrZr[r\r]rFr^valuesvarrItokenss r set_session_varsrjss& $&'9iG[8[*mZQX!#C\SaF 03=&/I Jecggen JF J MM)--d>.BCD MM+//:R:Z`xyz"C( M KsB0rictD]}|jdtjttjtt dy)uMark session context variables as explicitly cleared (``""``, not ``_UNSET``), so ``get_session_env`` returns empty instead of stale ``os.environ`` values. Async-delivery goes back to ``_UNSET``: a cleared context is default-supported, not opted-out. Wake capability goes back to ``_UNSET`` too — but for the opposite reason: a cleared context has declared nothing, and an undeclared capability FAILS CLOSED (#98619).rLclear_session_cwdN)rbr9rdrrfr4)rirhs r clear_session_varsrmsC   '!!&)$%r ctjD]}|jttjtt jtt dy)aReset every session var to ``_UNSET`` ("never bound here") for THIS context. Call at the top of a fresh task *before* it binds: ``create_task`` snapshots the context, so B's task inherits A's already-set vars and a subprocess spawned before B binds would read A's identity. ``_SESSION_ASYNC_DELIVERY`` and ``_SESSION_HISTORY_DELIVERY`` (outside ``_VAR_MAP``) are reset explicitly too.rlN)_VAR_MAPrgr9rrdrfr4rhs r reset_session_varsrqsJ   '!!&)$%r rrctj|}||jx}tur|Stj||S)zRead a session var by legacy ``HERMES_SESSION_*`` name; drop-in for os.getenv. The ContextVar wins if ever set here (even to ``""``); else ``os.environ``; else *default*.)ror?rr;getenv)rrrhrIs r get_session_envrts? ,,t C SWWY.Ev= 99T7 ##r > rLclituitoolcodexlocalkanbandesktopgatewaywebhook api_servermsgraph_webhookctjdxs tdd}|tddf}d|D}td|DS)zWhether this turn is delivered over a human messaging channel (checks ``HERMES_PLATFORM``, then the session platform, then the session source).HERMES_PLATFORMrrLrc3rK|]/}t|xsdjj1yw)rLN)rGstriplower)rvs r rz/session_is_messaging_surface..s* ;qc!'rl  "((* ;s57c34K|]}|xr|tvywN)NON_MESSAGING_SESSION_SURFACES)ridents r rz/session_is_messaging_surface..sYuD&DDDYs)r;rsrtany)rMidentss r session_is_messaging_surfacersOyy*+]?XZ\/]H(?D EF ;F ;F YRXY YYr c.tjdy)aGDeclare that this session cannot receive an async background completion. Unlike ``set_session_vars(async_delivery=False)`` this does NOT latch ``_session_context_engaged`` (flipping the subprocess env bridge), which a one-shot CLI must not do as a side effect. See NousResearch/hermes-agent#53027 and #63142. FN)rdr9r r r declare_stateless_channelrs&r ctjjdrytj}|turdSt |S)zWhether the current session can deliver a background completion later. False for stateless channels (:func:`declare_stateless_channel`) and Kanban workers (``HERMES_KANBAN_TASK``: one-shot subprocesses whose parent disappears after the turn).HERMES_KANBAN_TASKFT)r;r<r?rdrre)rIs r async_delivery_supportedrs; zz~~*+ # ' ' )EF?43U 3r c0tjdk(S)zWhether this request declares a server-history consumer for detached results. Fail closed on omitted bindings; never borrow authority from the environment.1)rfr?r r r "session_history_delivery_supportedrs % ( ( *c 11r r)r N)rL)<__doc__r; contextlibr contextvarsrtypingrrobjectr__annotations__rrertuplerb_SESSION_PLATFORM_SESSION_SOURCE_SESSION_CHAT_ID_SESSION_CHAT_TYPE_SESSION_CHAT_NAME_SESSION_THREAD_ID_SESSION_USER_ID_SESSION_USER_ID_ALT_SESSION_USER_NAME_SESSION_SCOPE_ID _SESSION_KEYr8_SESSION_UI_SESSION_ID_SESSION_MESSAGE_ID_SESSION_PROFILE_BROWSER_CONTROL_PRINCIPAL!_BROWSER_CONTROL_TRANSPORT_FAMILY _CRON_SESSION_SESSION_PARENT_CHAT_IDrdrf_CRON_AUTO_DELIVER_PLATFORM_CRON_AUTO_DELIVER_CHAT_ID_CRON_AUTO_DELIVER_THREAD_IDrrorGr4r=rAdictrKlistrjrmrqrt frozensetrrrrrrps0r rs9 %" h"'$&$$&  8   (8:L*,<>R)</1A A=Ri%%DfU''HRXY))LV\]'(JTZ[)*NX^_&&/&1K& & cCHHcM   s 3 4  1s 1t 1 "#* " " "D#DDDbb"RTVVXb,.2VZr+/ #36HK$'7:NQ$';>QT $' IL  '*  69  PT    ,/  JM "Dj @ &t & & &$#$$S$"+," ZdZ'4$42D2u sE*