߲jIUdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddlZddlZddlZddlZddlZddlmZmZddlmZddlmZddlmZmZej<eZ ddZ!d d d d d d ddZ"e#e"Z$e#hdZ%e#hdZ&e#ddhZ'e#ddhZ(ddddde)de)de*ddddf dZ+dZ,d Z-d!Z.ej^e.Z0de)fd"Z1e2e3ffd#Z4d$Z5d%Z6dd&e)dzde7dzfd'Z8de7dzfd(Z9d)e7dzde7fd*Z:de)dzfd+Z;dd,e)d-dde)fd.Z<dd0e)d1e=de=fd2Z>de)fd3Z?d4e)de*fd5Z@d4e)d6e*de*fd7ZAd4e)d8e*de)fd9ZBd:e)de=fd;ZCde)dzfd<ZDd=e)eEe)zeFe)d>fzeGe)zdzde=fd?Z dddd@dAe)dzd=e)eEe)zeFe)d>fzeGe)zdzdBe)dzde)dzfdCZHdDe)fdEZIdDe)dzde7fdFZJdGe)de7fdHZKde=fdIZLdDe)dzdeFe7e7ffdJZMddKe)dLe)dzde=fdMZNddlOZOddNlOmPZPmQZQddOlRmSZSddPlTmUZUmVZVmWZWmXZXmYZYmZZZm[Z[m\Z\m]Z]e jjde)eSe`jjd!ddQlcmdZdmeZeddRlfmgZgddSlhmiZimjZjmkZkmlZlddTlmmnZnmoZompZpddUlqmrZrddVlsmtZtmuZuddWlvmwZwddXlxmyZymzZzm{Z{eUrddYl|m}Z}ePGdZd[Z~ePGd\d]Zddd^d_e)dzd`eYdaeYde)dzfdbZ ddd^dceGe)d_e)dzd`eYdaeYde=f ddZdeZdfZdgeYde)fdhZddie)dje*de)fdkZdlZezdmdnZdoZde*fdpZdqddrdse*dte)dueXe*ddfdvZdte)defdwZd,e)dxe)dye)dze)fd{Zed|d}dmdn\ZZd~ede=fdZdeSde)d0e)d~ede)f dZdd~ed0e)de)fdZdd~ed0e)de)fdZdie)d0e)de*dte)de)de)de)fdZddie)d0e)de*de)fdZdeSde*de*fdZezddZedddd\ZZdd~ed0e)de)fdZdd~ed0e)de)fdZddie)d0e)de*de)fdZezddZedddd\ZZddddddZdd~ed0e)de)fdZdd~ed0e)de)fdZezddZezddZedddd\ZZedddd\ZZeeeeedZe{ZeyZdZdZdZdZdZeeeeegddDdeDZdZdZdZdGe)deFe)d>ffdZddddddddejjmdddejjmddejjmddddddgedƫedǫZdeWeSfdȄZdeWeSfdɄZdeWeSfdʄZdeSfd˄ZdeWeSfd̄ZdeWeSfd̈́ZdeWeSfd΄ZdefdτZdeWeSfdЄZdeWeSfdфZd/d/dҜdeSde=de=deXeSfdՄZdeSde=fdׄZdeSdede=fdلZdeSdeSde=fdۄZƐddGe)de)de)fdބZdeWe\eSeSffd߄ZȐdd_e)deWe)fdZhdZde=fdZde=fdZd_e)de)deWeSfdZ͐dd_e)deWeSfdZdeWe\eSeSffdZdeSd_e)de)ddfdZАddeSd_e)deXeSfdZѐdde)d_e)deXe)fdZe jdZde)de)fdZ dd_e)de)deXeWe7deXe)fdZde)de=fdZidddddddddddddddddddddddddd d d d d ddddddddddZhdZِddddddZڐdZe\e)d>feܐd<djmeݐdeDeސd Zߐd!Ze jd"ezd#zezd$ze jZe jd%ezd&ze jZd'e)d(d)deXe\e)e*ffd*Zde)de)fd+Zde)de=fd,Zd-e)de=fd.Zd/Zd-e)de*fd0Zd-e)de)fd1Zd-e)deEfd2Zd3e)fd4Zd3e)deEfd5Ze jd6e jZe jd7Zd8e)deEfd9Zd-e)d:eEde)fd;Zd-e)d:eEde)fd<Zd-e)de)fd=Zd~ed>e)de)fd?Zd~ed>e)de)fd@ZePGdAdBZeeefDcic]$}e|jD]\}}|| &c}}}ZeVe)e)feܐdC<d>e)dDe)de)fdEZddddFd~ed>e)dDe)dGeXe)deXef dHZddddFd~ed>e)dDe)dGeXe)deXef dIZePGdJdKZdLeXe)dMeXe)de)fdNZePGdOdPZe jdQe je jdRe je jdSe jfZeFe je)d>feܐdT<ddUZePGdVdWZePGdXdYZdZZe#hd[Zd\Zd]Z dd^eXe d_e)de)fd`Z dae)dbe)de=fdcZ dddefdfdgfdhdifdjdkfdldmfdndoffZ e\e\e)eZe)ge=ffd>feܐdp<dd^eXe d_e)de)fdqZdd^eXe d_e)de=fdrZGdsdte)Zd/dudveVe)enfd_e)daendwe=ddf dxZdyZeZenge[eXe]e)dtffZddze7d{e)d|e)dzde)dzfd}Z ddze7d{e)d|e)dzdeEe)dzfd~ZdeYde\eXe*eYffdZdeYdGe)deZgeYfdeYfdZeZGddeZycc}}}w(zZBase platform adapter interface; every platform adapter inherits from BasePlatformAdapter.N)ABCabstractmethod)urlsplit)normalize_proxy_url)first_proxy_env_valueshould_bypass_proxyreturnc||jry|j}|tjd||yy)zDone-callback for a detached fatal-error handler task (carrier cancelled in ``_notify_fatal_error``): retrieve its exception so asyncio never logs "never retrieved".Nz,Detached fatal-error handler task failed: %sexc_info) cancelled exceptionloggererror)taskexcs ;/home/ubuntu/.hermes/hermes-agent/gateway/platforms/base.py#_consume_detached_handler_exceptionrs; ~~ .. C  CSSV Wz audio/oggz audio/opusz audio/mpegz audio/wavz audio/m4az audio/flac).ogg.opus.mp3.m2a.wav.m4a.flac>.3gp.avi.mkv.mov.mp4.webm>.gif.jpg.png.jpeg.webprrrr32k<)bitratetimeout output_pathpathr*r+r,z str | Nonecddl}|jd}|sy|0tjdd\}}t j |n|}tj jt|tj j|k(}|r|dzn|} tj|dd d d t|d d ddd|dddddddd| gd|tj} | jdk(r@@cVt|d|}t|xsdjS)z=Normalize a Platform enum / raw string into a lowercase name.value)getattrrFlower)platformr_s r_platform_namerd`s( Hgx 0E u{  ! ! ##rc, |S#|$r|cYSwxYw)zX``thunk()``, or ``default`` when it raises one of ``exc`` (numeric config/env coercion).)thunkdefaultrs r _or_defaultrifs"w s  gffffff??reply_to_message_idct|dd}tt|dd}|d|ini}|dk(r t|ddnd}|rt||d<|sy|dk(rQt|ddd k(rAd |d <t|d vrt||d <|xs t|dd}|t||d<tt|ddxsdj}|r||d<|S)zPlatform-aware thread metadata for adapter sends. Telegram DM topics route with ``message_thread_id`` + a reply anchor; anchorless synthetic/resumed sends fall back to ``direct_messages_topic_id`` when supported. thread_idNrcslackscope_id slack_team_idtelegram chat_typedmT telegram_dm_topic_reply_fallback>r`r4direct_messages_topic_id message_idtelegram_reply_to_message_idprofiler`hermes_profile)rardrFstrip)sourcerkrmrcmetadataroanchorrxs r_thread_metadata_for_sourcer~rs T2Igfj$?@H+4+@ Y'bH5=4Gwvz40TH$'M! :'&+t"D"L7;34 y> *36y>H/ 0$K d(K  7:6{H3 4'&)T28b9??AG%,!" Orc@t|jt|S)zG``_thread_metadata_for_source`` for an event, anchored on its reply id.)r~r{_reply_anchor_for_eventevents r_thread_metadata_for_eventrs &u||5LU5S TTrr|c.|r t|ni}d|d<|S)z>Clone metadata and mark a user-visible reply as notify-worthy.Tnotify)dict)r|notify_metadatas r_mark_notify_metadatars(0d8nbO $OH rct|dd}||St|dd}tt|dd}t|dd}t|dd}|dk(r"t|tr|j dry|d k(r/|r-t|d dd k7ryt|d dxs t|d dS|dk(r|rt|d dr t|d dSt|d dS)z;Return reply_to id for platforms that need reply semantics.reply_anchor_overrideNr{rcrm raw_messagern_hermes_no_thread_responserqrrrsrvrkfeishu)rard isinstancerget)roverrider{rcrmrs rrrsu5tz(is_network_accessible..s,b!Xy++HQK8DDDb02T)rPrQ ValueErrorrrrar_socket getaddrinfo AF_UNSPEC SOCK_STREAManygaierrorrR)raddrmappedresolveds ris_network_accessiblers   Z (I##D)}d3$$G)FF4F4FH III &&tT73D3DgFYFYZbYabbb   g &sAA%%A.2AB88CCctjdk7ry tjddgddddtj }d |j DDcic]'\}}}|r|j|j)}}}}d D]N\}}}|j|d k(s|j|s.|j|s@d ||d||cSy#t $rYywxYwcc}}}w)zRead the macOS system HTTP(S) proxy via ``scutil --proxy``: ``http://host:port`` when an HTTP(S) proxy is enabled, else None (non-macOS or any subprocess error).darwinNscutilz--proxyTr;r<)r+textencodingr>rMc3ZK|]#}|jjd%yw)z : N)rz partition)rlines rrz-_detect_macos_system_proxy..s!Ydjjl44U;Ys)+)) HTTPSEnable HTTPSProxy HTTPSPort) HTTPEnable HTTPProxyHTTPPortr4zhttp://:) sysrcrG check_outputrIrO splitlinesrzr)outkeysepvalprops enable_keyhost_keyport_keys r_detect_macos_system_proxyrs ||x%%x&;QT\c-6z?Q?QS ZHXY b b Cc]` SYY[  bE b+]A& Hh 99Z C 'EIIh,?EIIhDWU8_-QuX.?@ @A   bs+C ,C/ C,+C, target_hosts.ct|S)zTrue when NO_PROXY/no_proxy matches at least one target host (exact hosts, domain / wildcard suffixes, IP literals, CIDR ranges, optional host:port entries, ``*``)._should_bypass_proxy)rs rrrs --r)r configuredplatform_env_varrcddlm}|r||dxsdjnd}|st|xsdj}|st syt }t |xs t}|r t|rdS|S)uProxy URL: *platform_env_var* (e.g. ``DISCORD_PROXY``) first, then the adapter's own YAML value *configured* (``telegram.proxy_url``), then HTTPS_PROXY / HTTP_PROXY / ALL_PROXY (any case), then the macOS system proxy — the latter two only when ``gateway.trust_env`` is true. None when nothing is found or NO_PROXY matches a target. *platform_env_var* is a per-adapter, per-profile-configurable setting (each proxy URL can embed credentials, e.g. ``http://user:pass@host``) so it is read scope-aware: under a secondary multiplex profile it comes from that profile's own ``.env``, not the shared process env another profile's ``TELEGRAM_PROXY``/``DISCORD_PROXY``/etc. may hold; the YAML value is the same profile's, so a secondary keeps its configured route without any env bridge (#108440). The generic ``HTTPS_PROXY``/``HTTP_PROXY``/``ALL_PROXY`` fallback stays a raw process-env read — those are OS/system-level network settings, not a per-profile Hermes concept.r)get_scoped_secretr`N) gateway.platforms._sharedrrzrFgateway_trust_envrrrr)rrr_get_scoped_proxy_varr_proxys rresolve_proxy_urlr!s UK[ "#3R 8 >B E E GacE J$"%++-  "%'  E)C)E FE0>4IEIr proxy_urlc ddlm}|j|dS#t$r8|j j drt jd|YywxYw)u``aiohttp_socks.ProxyConnector`` for ``proxy_url``, or None when aiohttp_socks is missing (SOCKS logs a warning; HTTP callers fall back to ``proxy=``). ``rdns=True`` forces remote DNS through the proxy — required by Shadowrocket/Clash-style SOCKS and against GFW DNS pollution.r)ProxyConnectorT)rdnssocksuVaiohttp_socks not installed — SOCKS proxy %s ignored. Run: pip install aiohttp-socksN) aiohttp_socksrfrom_url ImportErrorrb startswithrrL)rrs r_aiohttp_socks_connectorr =s\0&&yt&<<  ??  ' ' 0 NN<=F H s>AAcv|siS|jjdrt|}|d|iSiSd|iS)uKwargs for ``commands.Bot()`` / ``discord.Client()``: SOCKS → ``{"connector"}``, HTTP → ``{"proxy": url}``, None → ``{}``.r connectorr)rbr r rr s rproxy_kwargs_for_botrKsK  ##G,,Y7 +4+@ Y'HbH Y rnamec ddlm}|}t|tr|j |nd}t|tr|SiS#t$ricYSwxYw)zVRead-only ``config.yaml`` section ``name``; ``{}`` when unreadable/missing/not a dict.r)load_config_readonlyN)hermes_cli.configrrOrrr)r _load_configcfgsections r_config_sectionrVsUJn *#t4cggdm$G $/77R7  s A AActdjdd}t|tr |j j dvS| t |SdS)z``gateway.trust_env`` from config.yaml (default True): whether gateway ``aiohttp.ClientSession``s honor HTTP(S)_PROXY / NO_PROXY / SSL_CERT_FILE. Set false when the gateway inherits a proxy env it must not use. Fail-open to default.gateway trust_envT>0noofffalse)rrrrFrzrbboolr_s rrrasT I & * *; =E%{{}""$,GGG+4;55rc|siifSt|}|d|iifS|jjdriifSid|ifS)a``(session_kwargs, request_kwargs)`` for a standalone ``aiohttp.ClientSession``. With aiohttp-socks every scheme uses a connector (mautrix-style libs never forward per-request ``proxy=``); without it HTTP falls back to ``({}, {"proxy": url})`` and SOCKS is ignored.r rr)r rbr r s rproxy_kwargs_for_aiohttpr!ks^ 2v (3IY'++ (33G` on the host (`hermes pairing list` shows the id).rccbt|d|}tjt|xsdS)zL``UNAUTHORIZED_ACTION_NOTICE`` for a ``Platform`` member or its string name.r_z )rc)raUNAUTHORIZED_ACTION_NOTICEformatrF)rcrs runauthorized_action_noticercs. 8Wh /D % , ,c$:N,6O , PPrurlmax_lenc|dkDr | t|nd}|sy t|}|}|jrp|jrd|j xsd}|j ddd}|dvrdn|rd|nd }|jd |jj d dd|}t||kr|S|d krd |zS|d|d z dS#t$r|d|cYSwxYw)z?Return a URL string safe for logs (no query/fragment/userinfo).rNr`/r)r`rgz/.../z/...z://@rr...)rFrrOschemenetlocr-rsplitr)rdrerawparsedsafer-basenametails rsafe_url_for_logrsskco#c(2C # D }}{{ b;;sA&r*Y&r(eH:,>PV--FMM$8$8a$@$D#EdVL 4yG #qL3=Hlw{1C0DC.HH 8G}s CCCcpKddlm}m}||}|r ||stdt |yyw)zRe-validate each redirect target (a public URL 302-ing to http://169.254.169.254/ would bypass the pre-flight is_safe_url()). Async because httpx awaits response event hooks.r) is_safe_urlredirect_target_from_responsez.Blocked redirect to private/internal address: N)tools.url_safetyrurvrrs)responserurv redirect_urls r_ssrf_redirect_guardrzsBL0:LK 5IJZ[gJhIijkk6|s46z cache/images image_cacheicDtdttttfS)uMax inbound media bytes held in memory (``gateway.max_inbound_media_bytes``); ``0`` / negative / unparseable disables the cap; unreadable config → default.c0ttddS)Nrmax_inbound_media_bytes)rNrrfrrz-get_inbound_media_max_bytes..ss?9#=>W#XYr)riDEFAULT_INBOUND_MEDIA_MAX_BYTESKeyError TypeErrorrrfrrget_inbound_media_max_bytesrs" Y69j8Y [[rmedia media_type max_bytessizerrc Z| tn|}|r||kDrtd|d|d|dyy)zRaise ``ValueError`` if an inbound payload exceeds the cap (``max_bytes`` of ``0`` disables it; pass it explicitly to resolve the limit once across an incremental read).NzInbound z payload is too large (z bytes > z bytes))rr)rrrrs rvalidate_inbound_media_sizersH.7-> ' )IE 8J_cache_dir, cleanup__cache)`` pair. The getter resolves fresh via get_hermes_dir (active profile) unless a test monkeypatched the module constant away from its import-time default, and creates the directory; ``cleanup(max_age_hours=24)`` deletes older files and returns the count.r ct}tj}tj}||||k7r t |}|j dd|S)NT)parentsr)rBglobalsr_CACHE_DIR_IMPORT_DEFAULTSr)mkdir)dcurrentrhrrrs rget_dirz%_cache_dir_accessors..get_dir(s_ ; 1)-- .,00?  7#67g;MW A t,r max_age_hoursc&t|SN)_cleanup_cache_dir)rrs rcleanupz%_cache_dir_accessors..cleanup1s!')];;rget_ _cache_dircleanup__cache))r)rNrJrL)rrrrrrs ``` @r_cache_dir_accessorsr#s_ TGIF87aGIF89ar]sBMsRIFFrsWEBPr)rs r_looks_like_imager<s t9> WtBQx+?? V48C^ Vr(44 V8/_``; return the path string.rNr)rrr write_bytesrF)rr1rrfilepaths r_write_cache_filerCsGfXQtzz|'7'7'<&=cUCCH  x=rctt|dt|s(|ddjdd}t d|d |d t t d ||S) zSave raw image bytes to the cache and return the absolute path; raises ValueError when *data* isn't an image (e.g. an upstream HTML error page).rrNPr;r<r=z$Refusing to cache non-image data as z (starts with: rimg)rrrrNrrget_image_cache_dir)rrsnippets rcache_image_from_bytesrJsh D g> T "s)""79"=?uOT[S^^_`aa 02E3 EErcTKtjt||d{S7w)z;Cache image bytes without blocking the caller's event loop.N)asyncio to_threadrrrs rcache_image_from_bytes_asyncrT"""#94E EE E (&(retriesaccept log_labelc Kddlm}m}ddl} ||st dt |d|d} |ddd t gi 4d{} t|d zD]} | jd || 4d{} | jt| |d{}dddd{tj||d{ccdddd{Sdddd{y777\7N#1d{7swY^xYw7F76#| j| jf$r}t|| jr|j j"dkr| |krSd| d zz}t$j'd|| d z|t |||tj(|d{7Yd}~^d}~wwxYw7#1d{7swYyxYww)zShared downloader behind ``cache_*_from_url``: SSRF-checked (pre-flight + per-redirect; raises ValueError), size-capped, linear-backoff retries on timeouts / 429 / 5xx.r)create_ssrf_safe_async_clientruNz&Blocked unsafe URL (SSRF protection): z)Mozilla/5.0 (compatible; HermesAgent/1.0))z User-AgentAcceptr[Trx)r+follow_redirects event_hooksrGET)rri?z'%s cache retry %d/%d for %s (%.1fs): %s)rwrruhttpxrrsrzrangestreamraise_for_statusrrrTimeoutExceptionHTTPStatusErrorrrx status_coderrsleep)rdrrrrcache_fnrrrurrclientattemptrxcontentrwaits r_cache_media_from_urlrYsL s ABRSVBWAXYZZHTZ[G,t*G[F\9] Wq[) G !==W=Eaa--/$?U_$``Gaa%..x#FFF  a`aaaaG**E,A,AB c5#8#89cll>V>VY\>\W$'A+.DLL!JIW^abWb!(*:3*?sL!----- s AG C6 G G D8C8 9DC: C>" D-C<.D D DG GDG$G% G0G1G8D:C><D>D DD DGG2A 02G_TSV=WY] ^^rcTKtjt||d{S7w)z;Cache audio bytes without blocking the caller's event loop.N)rrrrs rcache_audio_from_bytes_asyncrrrc JKt|||ddtdd{S7w)zEDownload an audio URL into the audio cache; return the absolute path.rzaudio/*,*/*;q=0.8AudiorN)rrrs rcache_audio_from_urlrrrz cache/videos video_cachevideoVIDEO_CACHE_DIRz video/mp4zvideo/quicktimez video/webmzvideo/x-matroskazvideo/x-msvideo)r!r r"rrcZtt|dttd||S)zDSave raw video bytes to the cache and return the absolute file path.rr)rrrget_video_cache_dirrs rcache_video_from_bytesrs%D g> 02GS$ GGrcTKtjt||d{S7w)z;Cache video bytes without blocking the caller's event loop.N)rrrrs rcache_video_from_bytes_asyncrrrzcache/documentsdocument_cachezcache/screenshotsbrowser_screenshotsdocumentDOCUMENT_CACHE_DIR screenshotSCREENSHOT_CACHE_DIR)rrrr r HERMES_MEDIA_ALLOW_DIRSHERMES_MEDIA_TRUST_RECENT_FILES!HERMES_MEDIA_TRUST_RECENT_SECONDSHERMES_MEDIA_DELIVERY_STRICT)imagesrvideos documents screenshotsc#.K|] }t|z ywr _HERMES_HOMErrs rrrs_1lQ_s)r{rrrrc#4K|]}tdz |z yw)cacheNrrs rrrsHQlWq HsiX) z/etcz/procz/sysz/dev/rootz/bootz/var/logz/var/libz/var/run) z.sshz.awsz.gnupgz.kubez.dockerz.configz.azurez.gcloudzLibrary/Keychainsc ||d|d|dfS)z:A SQLite store plus its WAL/SHM/rollback-journal sidecars.z-walz-shmz-journalrf)rs r _sqlite_filesrs$ TF$-D64&0A BBr.envz auth.jsonz auth.lock credentialsz config.yamlz.anthropic_oauth.jsonzgoogle_token.jsonzgoogle_oauth_pending.jsonauthzgoogle_oauth.jsonzwebhook_subscriptions.jsonrzbws_cache.jsonzbws_cache.enc.jsonpairingz mcp-tokenssessionszbrowser-profilezstate.db kanban.dbcdtDcgc]}tD] }|dz |z  c}}Scc}}w)aPer-profile cache roots ``/profiles//cache/{images,...}`` (the static safe roots cover only the active HERMES_HOME). Enumerated at check time so profiles created after startup count and are allowlisted BEFORE the ``/root`` denylist (HERMES_HOME symlinked). ``HERMES_HOME=/opt/data``) while the model emits a profile-scoped path silently fails delivery. Enumerated dynamically at check time so profiles created after startup are covered, and so the resolved profile path is allowlisted *before* the ``/root`` system denylist is consulted (which otherwise wins when HERMES_HOME is symlinked under a denied prefix and $HOME is not that prefix). See issue #31733. r) _profile_dirs_MEDIA_DELIVERY_CACHE_SUBDIRS)psubdirs r_profile_cache_rootsr)s1+8/ fQHe ffAK& f ff fs,c tdz jDcgc]}|js|c}Scc}w#t$rgcYSwxYw)z?Every ``/profiles/`` directory, read at check time.profiles) _HERMES_ROOTris_dirrRr's rr%r% sE(:5>>@OaAHHJOOO  s=88== A  A cpttjttgt S)uEvery Hermes home whose credential stores the denylist must cover: the ACTIVE home (the per-turn HERMES_HOME override under ``gateway.multiplex_profiles``), the shared root and every ``/profiles/*``. Enumerated at check time like ``_profile_cache_roots`` on the allow side — a denylist frozen at import covers only the launch profile, so a ``MEDIA:/profiles//.env`` emitted in any profile's turn would upload it.)listrfromkeysrCr,r%rfrr_credential_home_rootsr2s'  0,QQR SSrcttjjddj xst j S)zLKanban is root-shared across profiles by design (``kanban_db.kanban_home``).HERMES_KANBAN_HOMEr`)r)rCenvironrrzr, expanduserrfrr _kanban_rootr7s4  3R8>>@PL Q \ \ ^^rctjt5tdz dz j Dcgc]}|j s|c}cdddScc}w#1swYgSxYw)zEvery directory under ``/kanban/boards`` (lax on purpose: the DENY side must catch a board whatever its name; the allow side filters further).kanbanboardsN)rPrQrRr7rr-r.s r_kanban_board_dirsr;s^   W %[(NX5@IIKZaqxxzZ[[Z[ Is"!A&A!A!A&!A&&A0ctjjddj}|rt |j gSt dz dz g}|jdtD|S)zCReturn durable Kanban attachment roots without importing kanban_db.HERMES_KANBAN_ATTACHMENTS_ROOTr`r9 attachmentsc3K|]L}|js:tjd|jr|dz j r|dz Nyw)z[a-z0-9][a-z0-9_-]{0,63}r#r>N) is_symlinkre fullmatchrr)rr-s rrz+_kanban_attachment_roots..-sL5$)bll;VX\XaXa.b[(113 %5sAA) rCr5rrzr)r6r7extendr;)rrootss r_kanban_attachment_rootsrE'spzz~~>CIIKHX))+,, ^h & 6 7E LL52D2F55 Lrcddlm}fd|jtjD}gt t ttt|S)zCReturn roots from which model-emitted local media may be delivered.r)media_delivery_allow_dirsc3K|]b}|jdD]L}ttjj |j xj rNdyw),N)splitr)rCr-r6rz is_absolute)rrraw_rootroots rrz0_media_delivery_allowed_roots..6seO C(O ++HNN,<=> >D K K M O OsA(A+) gateway.media_policyrGrJrCpathsepmapr)MEDIA_DELIVERY_SAFE_ROOTSr)rE)rGoperator_rootsrMs @r_media_delivery_allowed_rootsrS3s`>O35;;BJJGON :S0 1 :4H4J : % ' :*8 ::rcddlm}m}|sy|jt t t fdS)zKRecency window (seconds) for trusting fresh files; 0 = pure-allowlist mode.r)media_delivery_trust_recent#media_delivery_trust_recent_secondsc6rtdtSSNrW)maxfloat)customrhsrrz1_media_delivery_recency_seconds..Es&s3f 6gr)rNrUrVrzr[,_MEDIA_DELIVERY_TRUST_RECENT_DEFAULT_SECONDSri)rUrVr\rhs @@r_media_delivery_recency_secondsr^>s9e & ( 0 2 8 8 :F@AG Mw WWrchtDcgc]}tdD]}||z  c}}Scc}}w)zNamed-board ``kanban.db`` stores (+ sidecars): they sit beside the ATTACHMENTS dir ``_kanban_attachment_roots`` allowlists and hold every task, comment and run transcript.r#)r;r)boardrs r_kanban_board_db_pathsraHs1'9&: bU}U`Ga btEDL bL bb bs.cttjjdgt tt fdt DdtDtS)zEReturn absolute denylist paths under which delivery is never allowed.~c3(K|] }|z  ywrrf)rsubhomes rrz/_media_delivery_denied_paths..Rs ISdSj Isc3<K|]}tD] }||z  ywr)_ROOT_CREDENTIAL_PATHS)rrrels rrz/_media_delivery_denied_paths..Ss! Z!CY ZCa#g Zg Z) r)rCr-r6rP_MEDIA_DELIVERY_DENIED_PREFIXES$_MEDIA_DELIVERY_DENIED_HOME_SUBPATHSr2ra)rfs@r_media_delivery_denied_pathsrnNsa ""3' (D 'S6 7 ' I$H I ' Z57 Z '$ % ''r)strictexpandrorpc |r|jn|j|S#tttf$rYywxYw)u``path[.expanduser()].resolve(strict)`` or None when it fails (OSError / RuntimeError / ValueError — embedded NUL, symlink loop, undeterminable home, missing file under ``strict``).roN)r6resolverR RuntimeErrorr)r-rorps r _resolve_pathruWs?%+!>>f>MM \: .s #&==rctttjj d}t D]/}t|d}|||k(xs t ||}|s)||k7s/yy)utTrue if ``resolved`` lives under a deny-listed system path — except a denied prefix that IS the running user's own home: ``/root`` is listed so a non-root gateway can't deliver another user's home, but a root-run gateway's own deliverables live under ``$HOME=/root``. Credential sub-dirs (``~/.ssh``, ``~/.hermes/.env``) stay blocked (more-specific entries).rcTrpF)rur)rCr-r6rn_path_is_within)rrfdeniedresolved_deniedhits r_path_under_denied_prefixr|`sq bgg0056 7D.0't<  " /)W_X-W ?d*  rwindow_secondsc|dkry tj|jjz |kS#t$rYywxYw)uTrue if mtime is within ``window_seconds`` — a session-scoped trust signal: agents produce artifacts seconds before sending; pre-existing host files are days/months old.rF)rrrrR)rr}s r_file_is_recently_producedrpsH hmmo666>II s1: AArMctjt5|j| dddy#1swYyxYw)NTF)rPrQr relative_to)r-rMs rrxrx{s;   Z (  s6?r`rhcl ddlm}|||S#t$rtj||cYSwxYw)uScope-aware TERMINAL_* read: the per-turn scope carries the ACTIVE profile's settings while os.getenv reads whatever a prior turn pinned into the process env. Only ImportError falls back — a refusal scope must raise rather than rebuild another profile's policy from the env.r) terminal_env)tools.terminal_scoperrrCgetenv)rrhrs r_tenvrs;(5 g && (yyw''(s 33ctddj} ddl}|r|j|ng}g}t |t r|ndD]}t |tr|jnd}|jd}|dkr<||dzdjddd}tjj|d|}|jd st|dkDr|ddk(stt!|t!|} } | | j#s|j%| | f|S#t$rgcYSwxYw) zParse ``TERMINAL_DOCKER_VOLUMES`` (JSON list of ``host:container[:mode]``) into ``(host_path, container_path)``; named volumes / non-absolute hosts can't resolve here.TERMINAL_DOCKER_VOLUMESr`rNrfz:/rrrg)rrzjsonloadsrOrr0rFfindrJrCr-r6r rrur)rKr) rn_jsonromountsentryspecr container_raw host_expanded host_pathcontainer_paths r_parse_docker_volume_mountsrs? )2 . 4 4 6C%(S!b')F%fd3 7 *5# 6u{{}Biio !8 S1WX,,S!4Q7 **4:6 ((-#m2Dq2H][\M]adMd $1$}2E$F]H[>  ^%?%?%A MM9n5 6 7 M#  sD66 EEc ddlm} ddlm}|xsd}g}t ddj x}r|j|d||dk7r|j|d||jd|r|j|d ||S#t$rdgcYSwxYw#t$rd}YwxYw) u|Candidate host sandbox dir names for the delivering session, best first. Mirrors ``_resolve_container_task_id`` (tools/terminal_tool.py): containers are PROFILE-scoped (``default``, else ``profile:``); legacy ``session:`` sandboxes stay as a fallback. The key is passed explicitly because delivery runs after the turn's contextvars were cleared. Takes the key explicitly because the delivery pipeline runs after ``_handle_message_with_agent`` cleared the turn's session contextvars (#93950) — an ambient lookup here would silently collapse onto ``default`` and miss the session's real sandbox. r)sanitize_task_id_for_pathrh)get_active_profile_name$TERMINAL_DOCKER_SHARED_CONTAINER_KEYr`zshared:zprofile:zsession:)tools.environments.path_utilsrrOhermes_cli.profilesrrrzr)rWrrrx candidatesshareds r_docker_sandbox_dir_candidatesrsK?)+8yJ=rBHHJJvJ3gfX4FGH)3hwi4HIJi 3h{m4LMN ! { s"B B2 B/.B/2 C?C>r4r5yestruecXtddjjdk(S)N TERMINAL_ENVr`docker)rrzrbrfrr_docker_env_activers&  $ * * , 2 2 4 @@rcvtxr.tddjjtvS)z@Docker backend with persistent containers (the default) enabled.TERMINAL_CONTAINER_PERSISTENTr)rrrzrb_TRUTHYrfrr_docker_persistent_activers0   mE*I6$R$X$X$Z$`$`$bfm$mmrleafctsgS ddlm}|dz }t|Dcgc],}||z |z j dx}j r|.c}Scc}w#t $rgcYSwxYw)zExisting ``/docker//`` host dirs in candidate order; the translator tries each until the file resolves. Empty unless Docker + persistent.r)get_sandbox_dirrFrr)rtools.environments.baserrrsr-rO)rWrrbasercands r _docker_persistent_sandbox_rootsrs % & ; 8+!? !LR!D[4/888FFDNNPR RR  s"A$1AA$A$$ A21A2ctsgStddjjtvrotdxst j } tt jj|jd}|jr|gSgSt|dS#tttf$rgcYSwxYw)zExisting host candidates for ``/workspace``: the explicit cwd mount (``TERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACE``) if set, else the persistent sandbox layouts.&TERMINAL_DOCKER_MOUNT_CWD_TO_WORKSPACEr TERMINAL_CWDFrr workspace)rrrzrbrrCgetcwdr)r-r6rsrRrtrr-r)rWcwdrs r$_default_docker_workspace_host_rootsrs % &  5w?EEGMMOSZZN#2ryy{ **3/0888FDv.B. +K EEz2 I s8B66CCctsgS ddlm}|Dcgc]}t|dt|df c}Scc}w#t$rgcYSwxYw)z(host, container) pairs for the auto-mounted Hermes cache dirs (``/root/.hermes/...`` in MEDIA tags); longer prefixes than the ``/root`` home mount, so longest-prefix match wins.r)get_cache_directory_mountsrr)rtools.credential_filesrr)rO)rms r_cache_dir_container_mountsrs[   EKeKghaa n%tA.>,?'@Ahhh  s"A#AAA AA candidatereasonctsytjdtt |||r d|ydy)zName WHY a container-absolute MEDIA path failed translation (otherwise the only signal is the generic "Skipping unsafe MEDIA directive path" line). Docker-only; host rejections quiet. See #93950. NzDocker MEDIA path %s did not resolve to a host sandbox file (%s%s); the producing container's sandbox directory may not exist yet or was prunedz, session_key=r`)rrrL_log_safe_pathrF)rrWrs r_warn_unresolved_docker_mediarsF   NN !/I!?5@^K=1JGIJrc |jsytjt5ddlm}|dddgt t}|Dchc]\}}|j}}}d|vr!|jdt|Dd|vrA|jjds"|jdt|d D|st||d y|j}|D cgc]O\}} | jjd xsd } || k(s|j| d zr|| t| fQ} } }} | st||d yt!| d D]=\}} } t#||j%| z d} | )| |k(s t'| |s;| cSt||dy#1swYxYwcc}}wcc} } }w)zContainer-absolute path -> host path via longest-prefix match over ``docker_volumes``, the auto-mounted cache dirs (``/root/.hermes/...``), persistent ``/workspace`` and ``/root``.Nr)_ensure_terminal_env_bridged /workspacec36K|]}|tdfyw)rNr(rrMs rrz9_translate_docker_container_media_path..soTtT,/0orz /root/.hermesc36K|]}|tdfyw)rNr(rs rrz9_translate_docker_container_media_path..s e&*T4= !errfzno sandbox mounts resolvedrgzno mounted prefix matchesc|d S)Nr]rf)rs rrz8_translate_docker_container_media_path..*s AaD5r)rTrrzhost file missing from sandbox)rKrPrQrOtools.terminal_toolrrras_posixrCrr rrrstriprsortedrurrx)rrWrrrcmountedcandidate_posix host_rootcontainer_rootr1matched_score translateds r&_translate_docker_container_media_pathr s  "   Y ''D$&'N*, M/J/L MF(./1qzz|/G/7" o=abm=noogi&8&8&:&E&Eo&V e.N{\b.ce e %i>Z[((*OY_YY>sCJs6!V+/I/I&SV,/W>3v;7YGY %i>YZ-3G-Q) >6"9y/D/D^/T#T]ab  !i'?:y+Q   ")[:Z[ ?''0YsG G AG  GcBt|}|sy ttjj |}|jsyt||}| t|d}||jsytD]+}t|d}|t||s t|cSddlm}|st#|rdSt|St%}|dkDr"t#|st'||r t|Sy#t t tf$rYywxYw)aSafe absolute file path for native media delivery, else None. Default: any existing regular file outside the credential / system denylist (symmetric with inbound). Strict (``HERMES_MEDIA_DELIVERY_STRICT=1``, public bots where prompt injection must not exfiltrate host secrets): MUST be under a Hermes cache, an operator root (``HERMES_MEDIA_ALLOW_DIRS``), or freshly produced within the recency window. Symlinks are resolved before any check.NrWTrrrwr)media_delivery_strict)_normalize_media_tag_pathr)rCr-r6rRrtrrKrrurrSrxrFrNrr|r^r) r-rWrexpandedrrM resolved_rootrwindows rvalidate_media_delivery_pathr3s *$/I **956    !5hKXH $7x//1-/!%d48  $=)Qx= ! ; "0:tMH M , .F 4X>*8V<8} 3 \: .s(DDDz[\x00-\x1f\x7f\x85\u2028\u2029]cFtjdt|ddS)z9Return a single-line, length-bounded path for log output.?N)_LOG_UNSAFE_CHARSrerFr-s rrr_s  c$i 0# 66rlabeldroppedct|}t||}|sddlm}||}|sFt |sdnd}t j d||t|||j||d|S)ak``validate_media_delivery_path`` plus the shared "Skipping unsafe ..." warning. A path the host cannot see is retried against the active remote sandbox (ssh/modal/...; #466). When ``dropped`` is a list, a rejected path is appended as ``{"path", "reason"}`` so the caller can report the drop instead of booking a delivery that never happened (#115908).rr)fetch_remote_mediaznot found on this hostzdenied by the delivery policyzSkipping %s (%s): %s)r-r) rFrgateway.media_fetchr_existing_regular_filerrLrr)raw_pathrWrrrn safe_pathrrs r_validated_delivery_pathrdst h-C,SkJI :&s+ 2H1L)Rq-ufnS>QR   NNC6: ; rrnc ttjj|j S#t t tf$rYywxYw)NF)r)rCr-r6rrRrtr)rns rrrysCBGG&&s+,4466 \: .s58AA.pdfzapplication/pdf.mdz text/markdown.txtz text/plain.csvztext/csv.log.jsonzapplication/json.xmlzapplication/xml.yamlzapplication/yaml.yml.tomlzapplication/toml.ini.cfg.zipzapplication/zip.doczapplication/msword.xlszapplication/vnd.ms-excel.pptzapplication/vnd.ms-powerpoint.docxzGapplication/vnd.openxmlformats-officedocument.wordprocessingml.documentzAapplication/vnd.openxmlformats-officedocument.spreadsheetml.sheetzIapplication/vnd.openxmlformats-officedocument.presentationml.presentation).xlsx.pptx.ts.py.sh>L.c.h.m.r.cc.cs.ex.go.jl.js.kt.pl.rb.rs.tf.bat.cjs.clj.cpp.css.erl.exs.hcl.hpp.jsx.lua.mjs.php.ps1.pyi.rst.sql.srt.tex.tsx.vtt.zsh.bash.conf.diff.fish.java.less.sass.scss.cmake.jsonl.patch.proto.scala.swift.gradle.ndjson.graphql .makefile .markdown .dockerfile .propertiesrrrrrrr.htmrr.tsvrrr.htmlrrrz image/jpegz image/pngz image/webpz image/gif)r$r&r%r'r#):r%r$r&r#r'z.bmpz.tiffz.svgr!r rrr"rrrrrrrrrrrz.odtz.rtfrrz.epubrrz.odsrr=rrrrz.kmzz.kmlz.geojsonz.gpxrrz.odpz.keyrz.tarz.gzz.tgzz.bz2z.xzz.7zz.rarz.apkz.ipar>r<MEDIA_DELIVERY_EXTS|c#>K|]}|jdywrNlstripres rrrs)UA!((3-)UT)rreverseu9（）〈〉《》：，。；！？、“”‘’【】zq[`"'*_]{0,3}MEDIA:\s*(?P`[^`\n]+?`|"[^"\n]+?"|'[^'\n]+?'|(?:~/|/|[A-Za-z]:[/\\])\S+?(?:[^\S\n]+\S+?)*?\.(?:z))(?=[\s`"'*_,;:)\]}\[z%]|MEDIA:|\.(?:\s|$)|$)[`"'*_]{0,3}\.?zp[`"'*_]{0,3}MEDIA:\s*(?P`[^`\n]+`|"[^"\n]+"|'[^'\n]+'|(?:~/|/|[A-Za-z]:[/\\])[^\s\n`"']+?)(?=[`"'\s,;:)\]}z]|MEDIA:|$)[`"'*_]{0,3}\s* scan_textmatchzre.Matchct|jd}|syt|}|r||jdfS|j d}||dj ddd}|j dd}|dk7r|d|}|jd|z }tdD]V}tjd ||d} | sy|| jz} tt|d| }|r ||| zfcS| }Xy) aExtensionless MEDIA tag match -> validated on-disk ``(safe_path, end_offset)`` or None: the captured path first, then extended across single spaces (max 8 tokens, never past a newline or the next ``MEDIA:``). When that fails validation, the candidate is progressively extended forward across single spaces (validation-gated, bounded at 8 tokens, never past a newline or a subsequent ``MEDIA:`` keyword) so unknown-extension paths containing spaces deliver (#24032). Returns ``(safe_path, end_offset)`` where ``end_offset`` is the index in ``scan_text`` just past the matched path, or ``None`` when nothing validates. r-N rrMEDIA:rhrz [ \t]*[^ \t]+) rgrouprendstartrJrrrArJ) rIrJr-rprPsegmentnxtposrtokentok_ends r_match_extensionless_pathrVs %U[[%8 9D  ' -D UYYv&&& KK E%%dA.q1G ,,x #C by$3- ))F e #C 1X)734=9    #+,EghwFW,XY ( ( rct|xsdj}t|dk\r%|d|dk(r|ddvr|ddj}|jdj dS)Nr`r]rrhz`"'rz `"',.;:)}])rFrzrrDr)rnr-s rrrsk syb>   !D 4yA~$q'T"X-$q'V2CAbz! ;;v  % %m 44rcTt|jjtvS)uCTrue when ``path`` has no extension or one outside MEDIA_DELIVERY_EXTS — such paths take the validated delivery pass so nonexistent / denylisted ones stay visible. ``path`` — either the basename has no extension at all (Caddyfile, Makefile, …) or the extension is not in MEDIA_DELIVERY_EXTS (.py, .log, .weirdext, …). Such paths route through the validated delivery pass (``validate_media_delivery_path``) instead of the unconditional one, so every file type is deliverable (#36060) while nonexistent / denylisted paths stay visible in the text. )r)r2rbr?rs r!_path_lacks_deliverable_extensionrY"s# :   " " $,? ??rrc"d|vxs d|vxsd|vS)NrM[[audio_as_voice]][[as_document]]rfrs r_has_media_directivesr^.s$ t  X3t; X?PTX?XXrz<|eos|>c(t|jx}}|ttk\r]||ttz |tk(rA|ttz}|ttk\r||ttz |tk(rA||kr|SdS)zOffset where the run of exact ``<|eos|>`` tokens closing ``text`` (trailing whitespace ignored) begins, else -1; the run ends at ``len(text.rstrip())``.rh)rr_TERMINAL_SENTINEL)rrOrPs r_terminal_sentinel_startra:sdkkm$$C% 3)* *tEC@R`` sentinel, so a tag glued to it ends on whitespace like any other. BasePlatformAdapter is defined later in this module; resolved at call time.r)BasePlatformAdapter_mask_json_string_media_mask_protected_spansra _blank_spansrr)rAmaskedrPs r_mask_media_scan_textriCsY A  & &q'>'>t'D EF $T *E zfs4;;=/A'B&CD Mrctt|}t|}|r/|dk\r*|j|t |j f|S)zSpans to delete from ``text``: its deliverable MEDIA tags (located on the masked copy) plus a terminal ``<|eos|>`` sentinel, which is a control token and never user content.r)_real_media_tag_spansrirarrr)rspansrPs r_deliverable_tag_spansrmOsH ""7"= >E $T *E ! eS/01 Lrrhc#Ktj|D]G}t|jd}|s t |s,t ||}|;||d|dfIyw)zYield ``(match, safe_path, end_offset)`` for every extension-less / unknown-extension MEDIA tag in ``masked`` that ``validate_media_delivery_path`` accepts.r-Nrr)MEDIA_EXTENSIONLESS_TAG_REfinditerrrNrYrV)rhrJr-rs r_extensionless_media_matchesrqYsg,44V<6(V)<= 5d;0?H#Xa[(1+55 6s5A# A#A#A#ctj|Dcgc]}|j}}|jdt |D|Scc}w)z(start, end) spans of deliverable MEDIA tags on a masked copy: known-extension tags unconditionally, extension-less / unknown ones only if validate_media_delivery_path accepts.c3HK|]\}}}|j|fywrrP)rrJrrOs rrz(_real_media_tag_spans..hs!`-%C%++-%`s ")MEDIA_TAG_CLEANUP_RErpspanrCrq)rhrrls rrkrkdsL&:%B%B6%JK1668KEK LL`;WX^;_`` LLsAz```[^\n]*\n.*?```z `[^`\n]+`rcttfDcgc](}|j|D]}|j*c}}Scc}}w)zH(start, end) spans of fenced code blocks and inline code in ``content``.)_FENCED_CODE_RE_INLINE_CODE_RErprv)rrxrs r _code_spansr{ps7 /A `2;;W^K_ `aAFFH `H `` `s-Arlct|}|D]"\}}|||Dcgc] }|dk(r|nd c}|||$dj|Scc}w)zQReplace every non-newline char inside ``spans`` with a space (offsets preserved).rL r`)r0r)rrlcharsrPrOrs rrfrfus] JEO s=B5=MNdA3NeCO 775>OsAc|s|Sg}t|D]C\}}|r)||ddkr|ddt|dd|f|d<1|j||fEt|}t |D] \}}|||= dj |S)zDelete ``spans`` from ``text``, merging overlapping/nested ones first so multi-pattern matches over the same tag never double-delete adjacent text.rhrrr`)rrZrr0reversedr)rrlmergedrrFr~rPrOs r _delete_spansr}s  Fu "1 a6":a=( *Q-VBZ]A)>?F2J MM1a& ! " JEv& s %)  775>rc|r t|s|S|jddjdd}t|t|S)u`Remove MEDIA: tags and [[audio_as_voice]] / [[as_document]] markers so they never render as text (backstop after ``extract_media``). Protected spans are mask-located only — tags inside them are neither stripped nor mangled, matching ``extract_media`` so display and delivery agree. Empty/None text is returned as-is. See #16434. r[r`r\)r^r<rrm)rcleaneds r_strip_media_tag_directivesrsG ,T2 ll/4<<=NPRSG "8"A BBrfilenamect}|rt|jndjddj }|r|dvrd}|dt j jddd|z }|jj|jstd ||j|t|S) zSave raw document bytes to the cache as ``doc_{uuid12}_{original_name}`` and return the absolute path; raises ValueError if the sanitized path escapes the cache directory.r r`>..rdoc_NrrzPath traversal rejected: ) get_document_cache_dirr)rr<rzrrrrsis_relative_torrrF)rrr safe_namers rcache_document_from_bytesrs'(I(0h$$jII&RTU[[]I  [0 T$**,"2"23B"7!8)EEH     , ,Y->->-@ A4XLABB  x=rcTKtjt||d{S7w)z>Cache document bytes without blocking the caller's event loop.N)rrr)rrs rcache_document_from_bytes_asyncrs"""#One-line transcript annotation pointing the agent at the file.[z 'z ' saved at: ])rrr-selfs r context_notezCachedMedia.context_notes,499+R 1 12,tyykKKrN)rJrKrLrMrFrOrrfrrrrs(3 IO ILcLrr _MIME_TO_EXT mime_typec|r0tjj|djnd}|xs(tj |xsdjdS)z=Best-effort file extension from filename, then MIME fallback.rr`)rCr-splitextrbrr)rrrs r_resolve_media_extrsM3;"''  8 $Q ' - - /C  A,""IO#:#:# CachedMedia (None only for images failing validation). ``default_kind`` biases ambiguous ext/MIME (Telegram native photo, no name); anything not image/video/audio is a document.r)to_agent_visible_cache_pathr`z [^\w.\- ]rrfilerr$Trr!Frrrg)rNr z document.binzapplication/octet-stream)rrrrbrArerDSUPPORTED_IMAGE_DOCUMENT_TYPESrSUPPORTED_VIDEO_TYPESr_AUDIO_MIME_TYPESrr rrrSUPPORTED_DOCUMENT_TYPESr)rrrrrrmimedisplayrtable default_extr passthroughkind_extr-out_mime fallback_names rcache_media_bytesrs C Xy 1C O " " $D5=bff\31CJJsOD]W]G4f>TVZ [ +V5KU S '1G NBrrexistingnewc|r|d|S|S)zC``existing\nnew`` when both non-empty; the non-empty one otherwise.rLrf)rrs r _append_textr s#+hZr# 44rcNeZdZUdZeed<eed<eed<eed<eed<eed<y) _ExtractedResponsezLDeliverable parts of a handler response (see ``_extract_response_content``). text_contentr media_files local_filesforce_document_attachments pre_extractN)rJrKrLrMrFrOr0rrfrrrrs(V L $$rrz4^(?:please\s+)?restart\s+(?:the\s+)?gateway[.!?\s]*$z=^(?:please\s+)?restart\s+(?:the\s+)?hermes\s+gateway[.!?\s]*$z(^(?:please\s+)?restart\s+hermes[.!?\s]*$#_PLAINTEXT_GATEWAY_RESTART_PATTERNSctjt5||jtj k7r dddy|j xsdjrjdr dddytt|dddddk7r dddytfdtDrd|_dddy#1swYyxYw) aRewrite a tiny set of DM plaintext admin phrases (exact matches only) into slash commands so ``restart gateway`` never reaches the LLM/tool path (a self-restart from inside the running agent leaves the gateway stuck in ``draining`` waiting on that agent).Nr`rgr{rrrsc3@K|]}|jywr)rJ)rpatternrs rrz3coerce_plaintext_gateway_command...sVww}}T"Vsz/restart) rPrQrO message_typer;TEXTrrzr rarr)rrs @r coerce_plaintext_gateway_commandr"s   Y ' $ =E..+2B2BB  $ $  b'')ts+  $ $ 75(D1; E M  $ $ V2UV V#EJ $ $ $s!C 2C C %C  CceZdZUdZeed<eed<eed<eeeeefed<eed<eed<eed<d Z e e ee fed <e d eefd Zy ) ExecApprovalPromptutOne exec-approval prompt, ready for a platform to render natively (see ``BasePlatformAdapter.send_exec_approval``). ``actions`` rows are ``(label, choice, style)`` with ``choice`` in ``once`` / ``session`` / ``always`` / ``deny`` — the vocabulary ``tools.approval.resolve_gateway_approval`` accepts — and ``style`` in ``primary`` / ``danger`` / ``""``.rRrWractionscommand description smart_deniedNr|r cN|jDcgc]\}}}| c}}Scc}}wr)r)rrchoices rchoiceszExecApprovalPrompt.choicesBs +/<<8<1fa888s !)rJrKrLrMrFrOr,r1rr|r-r+r.propertyrrfrrrr2st L I %S# & '' L)-HhtCH~&- 9c99rrceZdZUdZeed<dZeeed<dZ eeed<dZ e ed<dZ eed<dZ eeed <d Zeed <dZeeed <y) SendResultzResult of sending a message.successNrvr raw_responseF retryable retry_afterrfcontinuation_message_ids error_kind)rJrKrLrMrrOrvr-rFrrr.rrr[rtuplerrfrrrrGsg& M $J $E8C=L#It#'K%'')e(!%J $rrgN@>unknowntoo_long forbidden not_found transient bad_format rate_limited)zchat not found)zmessage to edit not foundzmessage to reply not foundzthread not found topic_deletedmessage_id_invalidr error_textc|r|gng}|7|jdt||jjfDdj |j S)uLowercased blob (error_text + str(exc) + exception class name) that both send-error classifiers match against — one builder so they can never drift.c3&K|] }|s| ywrrfrr's rrz_error_blob..ssH1aQHsr})rCrF __class__rJrrb)rrpartss r _error_blobrnsP'ZLBE  HS3==+A+A BHH 88E? ""rblobneedlesc,tfd|DS)Nc3&K|]}|v ywrrf)rnrs rrz_any_in..xs*QqDy*)r)rrs` r_any_inrws *'* **rrct|dddS)Nmessage_too_longztoo longzmessage is too longrbs rrr}s71&8*F[\rrcPt|ddddxsd|vxrd|vxs d|vxrd|vS) Nzcan't parse entitieszcant parse entitieszcan't find endzunsupported start tagentityparsez bad requestentitrrs rrr~sF)+@BRTkl 1 M *gl 1 Q  /7a<rrc &t|dddddddS)Nrzbot was blockedzblocked by the userzuser is deactivatedznot enough rightszhave no rightsz not a memberrrs rrrs!G ;)+@BW-~?rrc.t|gttSr)r _CHAT_LEVEL_NOT_FOUND_SUBSTRINGS_SUBCHAT_NOT_FOUND_SUBSTRINGSrs rrrsGAi(HiKhirrc t|ddddS)Nfloodztoo many requestsz retry afterz rate limitrrs rrrswq'3F Wcdrrc&t|gtdS)Nconnecttimeout)r_RETRYABLE_ERROR_PATTERNSrs rrrsGAT(ATCSTr_SEND_ERROR_CLASSIFIERScNt||tfdtDdS)zMap a send exception / error string to a :data:`SEND_ERROR_KINDS` value; anything unrecognized is ``"unknown"`` so an unclassified failure is never mistaken for a benign one.c3:K|]\}}|s|ywrrf)rrmatchesrs rrz&classify_send_error..sT-$gdmTsr)rnextr rrrs @rclassify_send_errorrs& sJ 'D T+BTV_ ``rc`t||}t|gt xrt|gtS)zWhether a ``not_found`` failure means the *whole chat* is gone (only that marks a target dead; a deleted topic / edited-away message leaves the parent chat reachable). When both markers are present the sub-chat reading wins.)rrrrrs ris_chat_level_not_foundrs; sJ 'D=<= = A@?@Brc\eZdZUdZeeed<ddedeeffd Ze defdZ xZ S)EphemeralReplyafSystem-notice reply that auto-deletes after ``ttl_seconds`` on platforms implementing ``delete_message`` (others leave it). ``None`` ttl uses ``display.ephemeral_system_ttl`` (``0`` disables globally). Subclassing ``str`` keeps it transparent to everything that treats handler results as text; ``isinstance`` lets the send path schedule deletion. ttl_secondsrc6t|||}||_|Sr)super__new__r)clsrrinstancers rrzEphemeralReply.__new__s 7?3-*rr c,tj|S)z6The underlying text (explicit form of ``str(reply)``).)rF__str__rs rrzEphemeralReply.texts{{4  rr) rJrKrLrMr-rNrOrFrrr __classcell__)rs@rrrsG\#3Xc] !c!!rr merge_textpending_messagesr!c|j|}|r(t|dd}|tjk(}|jtjk(}|xr|}t |j } dtdttt fd} g} | r| ||_ | |} |s|j s| r |s| re|j j|j |jj|j|jj| |jr/tj|j|j|_ |s|rtj|_nA|tj k(r.|jtj k7r|j|_dD]} t#|| st%|| y|tj k(xr|jtj k(} |r4| r2|jr%t'|j|j|_ y|||<y)zStore or merge a pending event: photo bursts/albums merge into the queued event so the next turn sees the whole burst; with ``merge_text`` rapid TEXT follow-ups append instead of replace.rNmsgr ctt|dgxsg}|dgt|jt|z zzS)Nmedia_text_inlined)r0rar media_urls)r$flagss r_padded_inline_flagsz9merge_pending_message_event.._padded_inline_flagss?&:B?E2FED6S%83u:%EFF Fr)_gateway_pending_stt_text _gateway_pending_stt_transcripts)rrar;PHOTOrrr'r:r,r-r&rC media_typesrrc_merge_captionrhasattrdelattrr)r"rWrr!r existing_typeexisting_is_photoincoming_is_photo both_photoincoming_has_mediar)incoming_inline_flagsattr both_texts rmerge_pending_message_eventr9s  ##K0H.$? )[->->>!..+2C2CC&<+< !%"2"23 Gl GtHTN7K G79 *>x*HH '$8$? ! ,,0B/##**5+;+;<$$++E,=,=>++223HIzz 3 B B8==RWR\R\ ]  $5(3(9(9%+"2"22u7I7I[M]M]7](-(:(:%Z ,8T*Hd+ , ![%5%55`%:L:LP[P`P`:` )zz ,X]]EJJ G $)[!r) connecterrorconnectionerrorconnectionresetconnectionrefusedr networkz broken piperemotedisconnectedeoferror config_extra channel_id parent_idc|jdxsi}t|tsy||fD]9}|r|j|nd}|t|j x}s7|cSy)zPer-channel ephemeral prompt from ``config.extra["channel_prompts"]``: exact *channel_id* first, then *parent_id* (threads inherit the parent prompt). Blank prompts count as absent.channel_promptsN)rrrrFrz)rArBrCpromptsrprompts rresolve_channel_promptrHst017RG gt $I&%(S!d  S[->->-@#@6#@M rcD |jdxsg}t|tr|sy||fDchc]}|st|}}|sy|D]}t|trt|jdd|vr1|jdxs|jd}t|tr'|j r|j gcSdcSt|ts|stj fd|D}t|xsdcSycc}w)aAuto-loaded skill(s) for a channel/thread from ``channel_skill_bindings`` (entries ``{id: "", skills: [...]}``; ``skill: ""`` also accepted). Exact *channel_id* first, then *parent_id* (threads inherit). Deduplicated ordered list or None.channel_skill_bindingsNidr`skillsskillc3jK|]*}t|ts|jxs',ywr)rrFrz)rrnms rrz)resolve_channel_skills..s1!YD#)>$**,DVBDV!Ys 333)rrr0rFrrzr1) rArBrCbindingsr ids_to_checkrrLseenrOs @rresolve_channel_skillsrSs  89?RH h %X)3Y(?G3CHGLG  &%&#eiib.A*B,*V 8$: '(: fc "'-||~FLLN# ?4 ? fd #==!Y%!YYD:% % & Hs D DrcJt|trt|dk(r|Sd|fS)zc``(generation, callback)`` from a post-delivery slot; legacy bare callbacks have no generation.r]N)rrr)rs r_split_post_delivery_entryrU s&ue,Uq5StUmSrobjfactorycLt||d}||}t||||S)u``getattr(obj, name)`` or create it via ``factory`` — the getattr-guard for tests that build adapters via ``object.__new__`` and never run ``__init__``.N)rasetattr)rVrrWr_s r _lazy_attrrZs/ Ct $E } T5! Lrc%eZdZUdZdZeed<dZeed<dede eddfd Z d Z eed <dZ eed <d Z eed<dZeed<d Zeed<dZeed<dZdedefdZedeegeffdZdedefdZdedeegeffdZedefdZedefdZ dde ede eeefde edefdZddede eeefdefdZ de efdZ! dded edede eeefde"f d!Z#d"ed#eddfd$Z$d%d&d'd"ed(ed)ede efd*Z%d+d,defd-Z&ed.Z'ed/Z(ed0Z)ed1Z*dedefd2Z+d3edge,ddzfddfd4Z-d5Z.edefd6Z/dd7d8e eddfd9Z0dd:Z1dd;Z2deddfd?Z3d@eddfdAZ4ddBZ5dCedDedEedefdFZ6ddGZ7dZ8eedH<dZ9e e:edI<ddJeddfdKZ;ddLZd3e?ddfdOZ@d3e eeeefege,dfddfdPZAdQe eege efddfdRZBd"eCddfdSZDd3e eeCege,efddfdTZEd3e eeeefge,dfddfdUZFdVe eee ee egefddfdWZG ddddXdYe ede ede edZed[e ede ef d\ZHd]eddfd^ZId_e eddfd`ZJde efdaZKdbe dcfddZLd"dedefdfZMddbe ede efdgZNdhZOeedi<djZPeQedk<djZReQedl<dmZSeQedn<doZTeQedp<dqZUeQedr<dsZVeQedt<djddudvedweQdxeQdye eQdeQf dzZWdd{ZXd"dedefd|ZYdbdcdefd}ZZd"dedefd~Z[ddZ\de dedeQfdZ]dvede defdZ^ddZ_dveddfdZ`dveddfdZadede e:fdZbdede e:fdZceddddedefdZeedddZfed ddedede ede eeefde"f dZgdZheed<dedede efdZidddedededede"f dZjdededefdZkdefdZldedededdfdZmdendZoeed<dZpeed<dZqeed<erdZseed<dZteed<dZueed<dZveed<dZweed<exddedededefdZydedefdZzddededede eegefdef dZ{dededefdZ|defdZ} ddedededefdZ~dddddZeeefed<dddZeeefed<dedededeeeeeffdÄZedefdĄZ ddedededede eeefdededede"fdńZddde"fdȄZexdedededdfd̈́Z ddeded=ededede eeefde"fdЄZ ddedede ededede eeefde"fdԄZ ddedYe edede ede eeefde"f dՄZddeddfdքZdeddfdׄZexdQededededef dڄZddeddfdۄZ ddedeeeefde eeefdeQde"f dބZ ddedede ede ede eeefde"f dZ ddedede ede ede eeefde"f dZexdedefdZexdedeeeeefeffdZ ddedede ede ede eeefde"f dZdddedededede ede ede eeefde ede"fdZdddddedede e"fdZddddddedede"fdZddddddede ede efdZdddddefdZdedefdZdedede"fdZdededefdZ ddedede eeefde efdZdededdfdZdddededdfdZddede eddfdZddddedzded"ededzfd Zddddedzded"eddfd Zddddedzded"edefd Z dded ede ede ede eeefde"f d Z ddedede ede ede ede eeefde"fdZddddededede eeefddf dZ ddedede ede ede eeefde"f dZexddedede efdZex ddede eedeeeeffdZexddedeefdZexdedefdZexdedefdZexdedeeeeefeffdZexdedefdZexdedeeeeffdZ ddedeQd ejndzddfd!Z ddd"d#d$ded%ejrdzd&eQd'eddf d(Zddeddfd)Zdeddfd*Zdeddfd+Zddededdfd,Zdd-dedVed.edzddfd/Zexd0edege,dffd1Zdd-ded.edzdedzfd2ZdZe eed3<dZe eed4<dZe eed5<d"eCddfd6Zd"eCd7eddfd8Zǐd9ed:ed;eddfd<Zexde edefd=Zexde edefd>Zexde edefd?Zːd@edee eeffdAZddBd"eCdCe eddfdDZdbe efdEZdbe eddfdFZ ddedede ededGedHeQddIfdJZѐdKdIdefdLZexdKdIdefdMZdedKdIde ededdNf dOZdedede ededdIf dPZexdQe edRedefdSZdeeeffdTZd"eCdefdUZِdVeCd"eCdefdWZdedeQfdXZded"eCddfdYZdedZeQddfd[Zdedefd\Zdeddfd]Zdd^ded_e ejnddfd`ZdedefdaZdedefdbZddcd"eCdedde ejndefdeZdedfedefdgZd d dhdediedjeddfdkZdedlejnddfdmZd"eCdedneddfdoZd"eCddfdpZd"eCdeddfdqZdeQfdrZdsedeeee effdtZd"eCdeddejndseduedef dvZd"eCdsedwedxedeeefdyedefdzZd"eCdedsed{dd|ede ef d}Zd~edKed"eCd{dddf dZd"eCduedededeQdeeefdyeddfdZd"eCdedeeefdeQdyeddf dZddd"eCdedsedeeefde ed|eddfdZd"eCdedsedeeefd|ededyeddfdZd"eCdede efdZd"eCdddeeefdedyeddf dZd"eCddejnde ede ejrfdZd@ed"eCded|eddf dZdeddejnddfdZdeddejnddfdZd"eCdeddfdZdeCdeddfdZdeddfdZdedde ejnddfdZddZdedefdZdede eCfdZ ddede ededYe ede ed[e ede ede ede edZede ede ede ede ededede edef$dZeddedeeeffdZdbdcde eefdZdedefdZex ddedede ddeefdZy(rczLBase class for platform adapters: connect/auth, receive, send, handle media.Fsupports_code_blockssupports_status_textrRrr Nc~t|dt}|r||t|<y|jt|dy)zSet or clear (``None``) the live working-state phrase for a chat. In-memory only: the next typing refresh renders it; a no-op store on adapters that never read ``_status_text``. _status_textN)rZrrFpop)rrRrstores rset_status_textz#BasePlatformAdapter.set_status_text&s546 "&E#g,  IIc'lD )rTsupports_async_deliverysplits_long_messagesrgtyped_command_prefixsupports_inchannel_continuableinteractive_resumeserves_profile_prefixconfigrcc||_||_d|_d|_d|_d|_d|_d\|_|_d|_ d|_ d|_ t|_ dx|_|_i|_i|_i|_i|_i|_d|_t,|_t0|_d|_i|_t|_i|_t|_d|_d|_ d|_!d|_"d|_#ttc|_$|_%t|_&t|_'i|_(y)NF)FT interrupt))rirc_message_handler_no_message_handler_logged_reaction_handler_platform_event_handler_topic_recovery_fn_running_fatal_error_retryable_fatal_error_code_fatal_error_message_fatal_error_handlerset_detached_fatal_tasks_platform_lock_takeover_allowed!_platform_lock_takeover_attempted_active_sessions_pending_messages_pending_text_batches_pending_text_batch_tasks_session_tasks_busy_text_mode"DEFAULT_BUSY_TEXT_DEBOUNCE_SECONDS_busy_text_debounce_seconds"DEFAULT_BUSY_TEXT_HARD_CAP_SECONDS_busy_text_hard_cap_seconds_human_delay_range_ms_text_debounce_background_tasks_post_delivery_callbacks_expected_cancelled_tasks_busy_session_handler_owner_profile_shared_listener_profile_authorization_check_auto_tts_default_auto_tts_enabled_chats_auto_tts_disabled_chats_streaming_tts_completed_turns_typing_pausedr_)rrircs r__init__zBasePlatformAdapter.__init__NsO   :>05'X\cg$LP5@2 t20437!im! +.%"X]],t/U;=:<>@"BD&79 %02T(2T(AE"<>47E9;%.s3wt5I4'P'XTX#YrrrirrRs` rmax_message_length_for_chatz/BasePlatformAdapter.max_message_length_for_chatsY[_``rc|jS)zPer-chat length function (companion to max_message_length_for_chat); the relay adapter overrides it per the chat's fronting platform.)rrs rmessage_len_fn_for_chatz+BasePlatformAdapter.message_len_fn_for_chats"""rcy)uWhether this adapter enforces its own config-driven access policy at intake (``dm_policy``/``group_policy``/``allow_from``: WeCom, Weixin, QQBot, WhatsApp…). The gateway env allowlist runs *after* the adapter; without one it trusts this flag ONLY when the effective policy is a real ``"allowlist"`` — never ``"open"`` (the default), which would be a network-exposed fail-open (SECURITY.md §2.6). Open access still requires ``{PLATFORM}_ALLOW_ALL_USERS`` / ``GATEWAY_ALLOW_ALL_USERS``.Frfrs renforces_own_access_policyz.BasePlatformAdapter.enforces_own_access_policysrcy)u`Whether inbound was already authorized by a TRUSTED UPSTREAM (relay only): the Team Gateway connector authenticates the WebSocket and resolves owner-only author binding BEFORE delivery, so the no-allowlist default-deny would be wrong. Authorization DELEGATED, not ABSENT — every network-exposed direct adapter leaves it False.Frfrs rauthorization_is_upstreamz-BasePlatformAdapter.authorization_is_upstream rrrr|cy)zWhether native streaming-draft updates (``send_draft``) work for this chat type; ``chat_id`` lets the relay adapter answer per negotiated capabilities. Consumers fall back to ``send`` + ``edit_message`` when False or ``send_draft`` raises.Frf)rrrr|rRs rsupports_draft_streamingz,BasePlatformAdapter.supports_draft_streamingrrrcy)zWhether the stream consumer should finalize with a *fresh* final message (best-effort deleting the preview) instead of final-editing it (Telegram: keeps rich rendering).Frf)rrr|s rprefers_fresh_final_streamingz1BasePlatformAdapter.prefers_fresh_final_streamingrcy)zMax single-message length (``message_len_fn`` units) the stream consumer may accumulate before splitting, for rich send/draft paths exceeding the legacy cap (Telegram Rich Messages: 32,768 vs 4,096). ``None`` = use ``MAX_MESSAGE_LENGTH``.Nrfrs rstreaming_overflow_limitz,BasePlatformAdapter.streaming_overflow_limitsrdraft_idcLKtt|jdw)u{Send or update an animated streaming-draft preview. Reuse one non-zero ``draft_id`` across a response so the platform animates (different responses need different ids). Drafts have no message_id (no edit/reply/delete) — the final answer goes out as a regular ``send``. Must be overridden by adapters returning True from :meth:`supports_draft_streaming`.z does not implement send_draft)NotImplementedErrortyperJ)rrRrrr|s r send_draftzBasePlatformAdapter.send_drafts& "T$Z%8%8$99W"XYYs"$rsinkc<ddlm}m}m}t ||r(|j r|j |j yt ||r|js|jyt ||r)|j r|j|j yyy)zRender a MessageChunk / MessageStop / Commentary onto the sink (a GatewayStreamConsumer), mapping 1:1 onto its existing primitives.r) MessageChunk MessageStop CommentaryN) gateway.stream_eventsrrrrron_deltafinalon_segment_break on_commentary)rrrrrrs rrender_message_eventz(BasePlatformAdapter.render_message_eventsq PO e\ *uzz MM%** % { +EKK  ! ! # z *uzz   uzz *0: *rall()modepreview_max_lenrrcbddlm}t||syddlm}m}||j dd|j }|dk(r{|jroddl}|j|jd t } |dkDrt| |kDr | d|d z d z} |d t|jjd| S|js|d S|dk(r|d|jdS|dkDr|nd} ||j |j|j| } |d|j| dS)aRendered chrome for a ToolCallChunk, or None to eat it (adapters without editing/rich text override to None). ``mode``: tool-progress mode ("all"/"new"/"verbose"); ``preview_max_len`` mirrors ``tool_preview_length`` (0 = no cap in verbose).r) ToolCallChunkN)get_tool_emojiprepare_tool_previewu⚙️)rhr}verboseF) ensure_asciirhrrj(z) z: ""r)fallbackre)rrr agent.displayrr tool_nameargsrdumpsrFrr0keyspreviewformat_tool_preview) rrrrrrrheadrargs_strcapprepareds rformat_tool_eventz%BasePlatformAdapter.format_tool_events2 8%/F (CDAeooEVW 9  zz%**5#zNH"s8}'F#$8_q%89EAV1T%**//"345S C C}}V3<  9 V3u}}oQ/ /!01!4o"' OOUZZ%--Ns433H=>a@@rrrDc|jS)zPlatform-native formatting of a compact tool preview; rich-text adapters may use the preview's metadata (e.g. a URL shortened for display).r])rrs rrz'BasePlatformAdapter.format_tool_previews||rc|jduSrrtrs rrzBasePlatformAdapter.sD,E,ET,Qrc|jSrrrs rrzBasePlatformAdapter.s 0I0Irc|jSr)rsrs rrzBasePlatformAdapter.s T-C-Crc|jSr)rrrs rrzBasePlatformAdapter.s $2M2Mrcl||jvxs%||jvxrt|jS)u=Whether auto-TTS fires for ``chat_id``: explicit ``/voice on|tts`` wins, then explicit ``/voice off``, then the global ``voice.auto_tts`` default. Decision layers (Issue #16007): 1. Explicit ``/voice on`` or ``/voice tts`` → always fire (even if ``voice.auto_tts`` is False). 2. 3. )rrrrrs r_should_auto_tts_for_chatz-BasePlatformAdapter._should_auto_tts_for_chats<$666[ 488 8 YT$BXBX=Y [rhandlerc||_yr)rurrs rset_fatal_error_handlerz+BasePlatformAdapter.set_fatal_error_handler s $+!rz@connected but not yet confirmed active; recovering in backgroundcy)zTrue while connect() succeeded but delivery is not confirmed. Adapters with a separately-proven receive path override this; the default adapter is either connected or not. Frfrs rsend_path_degradedz&BasePlatformAdapter.send_path_degradedsr) listener_basercd|_dx|_|_d|_|jr|j y|rd|ini}|j ddddd|y)a``listener_base`` (``http://host:port``) is stamped by port-binders after a REAL bind: under the multiplexer it is the shared listener a served profile's ``/p//`` mirror hangs off, and what the dashboard/Desktop report as that profile's api_server/webhook URL.TNr connectedplatform_state error_code error_message)r)rqrsrtrrr_mark_degraded_write_runtime_status_safe)rrextras r_mark_connectedz#BasePlatformAdapter._mark_connectedsq =AA!:&*#  " "    !8E_m42E +D + + g,7DX\ g`e grcB|jddd|jy)zKPublish ``retrying`` for a running adapter whose delivery path is unproven.connected_degradedretryingNr)rDEGRADED_STATUS_MESSAGErs rrz"BasePlatformAdapter._mark_degraded*s' '' %66 ( rcVd|_|js|jddddyy)NF disconnectedr)rqhas_fatal_errorrrs r_mark_disconnectedz&BasePlatformAdapter._mark_disconnected3s5 ##  + +~$^b , d$rcodemessagerchd|_||c|_|_||_|j dd||y)NFfatalr)rqrsrtrrr)rrrrs r_set_fatal_errorz$BasePlatformAdapter._set_fatal_error9s< <@'9 9&/# ''TXho'prcontextc  ddlm}t|ddxs|jj}|d d|i|y#t $r}t |dt}|jj|f|v}|j|jj|f|rtjntjd|rdnd z||jj|Yd}~yd}~wwxYw) zPPublish runtime status; log preparation failures without disrupting the adapter.r)publish_runtime_status_runtime_status_platform_keyNrc_status_write_loggedz.Failed to write runtime status (%s) for %s: %sz" (further failures at debug level)r`rf) gateway.statusrrarcr_rOrZrvaddrrLr)rrkwargsr platform_keyrloggedfirsts rrz.BasePlatformAdapter._write_runtime_status_safe?s 3 =#4)GNeRVR_R_ReReL " CL CF C 3&> 2 nnT*** '+)) yy{**+NO  s0A?C B#B!B#C !B##:CC scopeidentity resource_desccddlm}m}m}||c|_|_d|j ji}||||\}} |ry|jr|js}t| trmd|_d|_ || } | Utjd|j|| ||||\}} |r#tjd |j|| yt| tr| j!d nd} || } | rd | d nd } | rd| d| n| } | rd| dnd}|d| d|}tj#d|j||j%|d|dy)zAcquire a scoped lock for this adapter; True on success. A live cross-HERMES_HOME holder is replaced only when the runner armed this adapter for its initial ``--replace`` connect (the status module validates ownership and terminates).r)acquire_scoped_lockscoped_lock_owner_labeltake_over_scoped_lock_holderrcr|TFNuK[%s] %s was held by gateway PID %d — explicit --replace handoff completedz)[%s] Acquired %s after taking over PID %dpidz (PID rr`z by the 'z' profile gatewayz+ Stop that gateway first (hermes --profile z gateway stop).z Stop the other gateway first.z already in userz[%s] %s_lock)r)rrrr_platform_lock_scope_platform_lock_identityrcr_rxryrrrrLrinforrr)rr rrrrr lock_metaacquiredr owner_pid owner_profilepid_partholderremedyrs r_acquire_platform_lockz*BasePlatformAdapter._acquire_platform_lockjs X XBG?!4#?!4!45 09U(   0 09_9_x.38D 059D 24X>I$aII}i9&9S\%]"(KK KTYYXegpq+5h+EHLL'4 09 ,5VI;a(2KX9]O+#>?rcJ|jjjS)z%Human-readable name for this adapter.)rcr_titlers rrzBasePlatformAdapter.names}}""((**rc|jS)z(Check if adapter is currently connected.)rqrs r is_connectedz BasePlatformAdapter.is_connecteds}}rc||_y)zISet the incoming-message handler (MessageEvent -> optional response str).N)rlrs rset_message_handlerz'BasePlatformAdapter.set_message_handlers 'rc||_y)zInstall the gateway-owned normalized platform-event boundary (stable dicts + internal ``SessionSource``); the runner owns authorization and plugin dispatch: no callback = fail closed.N)rors rset_platform_event_handlerz.BasePlatformAdapter.set_platform_event_handlers (/$rfnc||_y)zInstall a thread_id-recovery hook (Telegram DM topic mode): called with ``event.source`` before session keying; a non-None return replaces ``source.thread_id``. ``None`` clears it.N)rp)rr:s rset_topic_recovery_fnz)BasePlatformAdapter.set_topic_recovery_fns #%rc|t|dd}t|dd}||y ||}|%t|t|jxsdk(ry dd lm}||t| |_y#t$rtj ddYywxYw#t$rtj d dYywxYw) zDRewrite ``event.source.thread_id`` in place if the hook returns one.rpNr{r`ztopic recovery hook failedTr r)replace_source)rmztopic recovery rewrite failed) rarFrmrOrrgateway.session_identityr>r{)rrrecoverr{ recoveredr>s r_apply_topic_recoveryz)BasePlatformAdapter._apply_topic_recoverys$ 4d;$/ ?fn  I C Nc&:J:J:Pb6Q$Q%R  I ?)&C NKEL   LL5L E    I LL84L H Is#/A2B2 BB B;:B;c||_y)zESet an optional handler for messages arriving during active sessions.N)rrs rset_busy_session_handlerz,BasePlatformAdapter.set_busy_session_handlers %,"rc||_y)a7Set the handler for platform-native emoji-reaction events: a normalised dict (``platform``, ``event_name`` "reaction:added"/"reaction:removed", ``reaction``, ``user_id``, ``item_user_id``, ``channel_id``, ``message_ts``, ``event_ts``, ``raw_event``) fanned out via ``HookRegistry.emit``.N)rnrs rset_reaction_handlerz(BasePlatformAdapter.set_reaction_handlers ")rcallbackc||_y)zRegister ``(user_id, chat_type, chat_id) -> bool``; adapters pulling external context (Slack thread replies) use it to flag non-allowlisted senders as unverified background.N)r)rrGs rset_authorization_checkz+BasePlatformAdapter.set_authorization_check s %-!r)is_botrmuser_idrJrmcP|r |jyi}|rd|d<|||d< |j|||fi|}|dus|dur|Stjd|jt |j |y#t$r&tjd|j|dYywxYw) akTrue/False from the registered check, or None when no check exists ("trust unknown", legacy). ``is_bot``/``thread_id`` are forwarded as keywords only when set so legacy three-positional callbacks keep working. Only literal booleans propagate: a truthy non-boolean is "unknown", never an authorization that gates a credentialed side effect.NTrJrmz@[%s] Authorization check raised for user %s; treating as unknownr FzE[%s] Authorization check returned %s for user %s; treating as unknown)rrOrrLrrrJ)rrKrrrRrJrmrrYs r_is_sender_authorizedz)BasePlatformAdapter._is_sender_authorized s$33; " "E(O  !*E+  .T..w 7TeTF T>Vu_M^yy$v,"7"7 B  NN]99g  > sA66,B%$B% session_storec||_y)ztSet the session store (e.g. Slack checks for an active thread session before handling un-mentioned replies).N)_session_store)rrNs rset_session_storez%BasePlatformAdapter.set_session_store" s ,r profile_namec\|xsdjxsdx}dk(rd|_y||_y)zDeclare the owning multiplex profile (secondary profiles only); read by :meth:`_session_key_profile` so adapter-level keys leave ``agent:main:``.r`Nrh)rzr)rrRrs rset_owner_profilez%BasePlatformAdapter.set_owner_profile' s41=0B/I/I/K/St'StXa&adgkrcdt|dd}t|tr|jr|SdS)zTransport profile for :func:`resolve_identity`: the owner name, or ``None`` = derive it from the registry (the primary's identity then spells ``"default"`` out itself).rN)rarrFrz)rowners r_owner_transport_profilez,BasePlatformAdapter._owner_transport_profile, s/.5"5#.5;;=uJdJrr{r>c|yddlm}m}||}||St|dd}|t t|ddsy |||||j S#t $r%tjd|jd YywxYw) aPin the source's :class:`RoutingIdentity` before anything derives a key from it. Every ingress path (fresh event, batch merge, busy path, control command, callback) calls this FIRST. Returns the identity, or ``None`` when it cannot be resolved (a rejected route under multiplexing marks ``source.profile_route_rejected``; ``_drop_unresolved`` reads it) or when no runner seam exists (hand-built adapters, restored sources: the legacy readers stay).Nr)canonical_identity identity_ofgateway_runner_transport_owner)runneradaptertransport_profilez9[%s] identity resolution failed; using legacy key readersTr ) r?rYrZracallablerWrOrrr)rr{rYrZrr]s r _canonicalizez!BasePlatformAdapter._canonicalize2 s >Lv&  O/6 >'&:Ld*S!T %vttGdGdGfh h  LLTVZV_V_jnL o  sA+BBr:c t|dd}|j|yt|dddurytjd|jt|ddy) uTrue when *event* must be dropped: its identity could not be resolved because the route targets an unserved profile. Same disposition as the runner's ingress gate — one WARNING, never a fall-through to ``agent:main``.r{NFprofile_route_rejectedTzV[%s] Dropping inbound event for %s: explicit profile route targets an unserved profilerRr)rararrLr)rrr{s r_drop_unresolvedz$BasePlatformAdapter._drop_unresolvedJ sa$/   f % 1 63U ;4 G d IIwvy#6 8rcddlm}||}| |jS| t|ddndt|ddfD]'}t |t s|j s%|cSt|dd}|r t|ddnd}t|sy ||}t |t r|j r|SdS#t$rYywxYw)uProfile namespace for an adapter-derived session key. Ingress runs BEFORE the runner stamps ``source.profile``, so without this every bot in a multiplexed gateway shares one ``agent:main:`` lane. Order: pinned ``RoutingIdentity`` → ``source.profile`` → ``_owner_profile`` → session-store resolver; getattr-guarded (object.__new__ in tests), type-checked (no MagicMock in the key).r)rZNrxrrP_resolve_profile_for_key) r?rZsession_key_profilerarrFrzr`rO)rr{rZrrraresolverrs r_session_key_profilez(BasePlatformAdapter._session_key_profileX s 9v&  // /060BGFIt , D*D 13 !I)S)ioo.?   ! .5GL75"*F}}V$ 7^FVY'  Vi%7 NNBCQZ [F :& $7^F $sB B('B(c|jd|j|j|_|jd|j|j|j |_y)zsRead ``text_batch_delay_seconds`` / ``text_batch_split_delay_seconds`` from ``config.extra`` at the shared cadence.text_batch_delay_seconds)rttext_batch_split_delay_secondsrrN)rxrmrorkrprqrlrs r_configure_text_batch_delaysz0BasePlatformAdapter._configure_text_batch_delays sf)-)A)A &(H(HTXTpTp*B*r&/3/G/G ,d.T.T44@b@b0H0d,rc8|j|jS)zOAdapter-level session key for ``event``, profile-namespaced like the agent run.)_source_session_keyr{rrs r_event_session_keyz&BasePlatformAdapter._event_session_key s'' 55rc|j||jj}t||j dd|j dd|j |S)Ngroup_sessions_per_userTthread_sessions_per_userF)rrrx)rarirr?rri)rr{rs rr~z'BasePlatformAdapter._source_session_key s[ 6" !! EII6OQU,V%*YY/I5%Q--f57 7rc$|j|S)z?Session-scoped key for text batching (subclasses may override).)rrs r_text_batch_keyz#BasePlatformAdapter._text_batch_key s&&u--rc|j|ry|j|}|jj|}||x}|j|<n|jr%t |j|j|_|j rJ|j j|j |jj|jt|jxsd|_ |jj|}|r |js|jtj|j!||j|<y)zMBuffer a text event (merging into a pending one) and restart the flush timer.Nr`)rdrr|rrrr'rCr-r_last_chunk_lenr}rrr create_task_flush_text_batch)rrrr prior_tasks r_enqueue_text_eventz'BasePlatformAdapter._enqueue_text_event s   ' ""5)--11#6  9> >Ht11#6zz ,X]]EJJ G ##**5+;+;<$$++E,=,=>#&uzz'7R#8 3377< joo/    .5.A.A$BXBXY\B].^&&s+rpendingcr| t|ddnd}||jk\r |jS|jS)zMQuiet period before ``pending`` is dispatched; near-split chunks wait longer.rr)rarjrlrk)rrlast_lens r_text_batch_delay_forz)BasePlatformAdapter._text_batch_delay_for s>=D=P77$5q9VW7?4CXCX7Xt33|^b^|^||rc:|jj|dS)zURemove and return the pending batch for ``key`` (adapters with side tables override).N)r|r`)rrs r_pop_text_batchz#BasePlatformAdapter._pop_text_batch s))--c488rcBK|j|d{y7w)zNHand a flushed batch to the pipeline (adapters with per-chat guards override).N)handle_messagers r_dispatch_text_batchz(BasePlatformAdapter._dispatch_text_batch s!!%(((s cjK|j|}||j|d{yy7w)zEDispatch the pending batch for ``key`` immediately (no quiet period).N)rr)rrrs r_flush_text_batch_nowz)BasePlatformAdapter._flush_text_batch_now s8$$S)  ++E2 2 2  2s (313c Ktj} tj|j|jj |d{|j j |}|@||ur< |j j ||ur|j j|dyy|j|}|< |j j ||ur|j j|dyytjd|j|t|jxsdtj|j|d{|j j ||ur|j j|dyy7Q7B#tj $rYUwxYw#|j j ||ur|j j|dwwxYww)uWait for the quiet period, then dispatch the batch for ``key``. Two races share this body. (1) ``_enqueue_text_event`` cancels the prior flush task on each new chunk; when ``Task.cancel()`` lands after ``sleep()`` already completed, CancelledError is delivered at the *next* await — after a superseded task would have popped the event, so the successor finds nothing and the message is lost. The identity check therefore runs synchronously between the sleep and the pop. (2) A cancel that lands while the dispatch is in flight would abort the agent turn (#12444), so the dispatch is shielded and the outer CancelledError swallowed.Nz&[%s] Flushing text batch %s (%d chars)r`)r current_taskrrr|rr}r`rrrrrrr rr )rrrrVrs rrz%BasePlatformAdapter._flush_text_batch s++-  >-- : :4;U;U;Y;YZ];^ _` ` `2266s;E U,%>--11#6,F..223=G((-E} --11#6,F..223=G KK@$))SRUV[V`V`VfdfRg h..!:!:5!AB B B--11#6,F..223=G a C%%   --11#6,F..223=GsrHAF.F)%F.?;H:F.;H A F.)F,*F..;H)F.,F..GGGG. s& \171:>>&;QU[;[Q \s''rrhc3JK|]}|jddk(s|yw)r assistantNr)rr$s rrzGBasePlatformAdapter._history_media_paths_for_session.. s bs3776?VaCasbs##r)_collect_history_media_paths)rar`load_transcriptr@rrLrOr0rrrrremove gateway.runr) rrWrapeek session_id transcript last_user_idx last_replyrrs @r _history_media_paths_for_sessionz4BasePlatformAdapter._history_media_paths_for_session s.5 5"3T:D.6tnk*$J..z/H[IJz" \c'lQ.B7 \^bd  $n}-Gbhw.?bdhiJ%z*<+G443#  NN67B   s7C C8-C87C8cDKdddtdtddffd}tjds |d yt j j dfd fd } tj|d d j t jtd{S#t$rj|dd YywxYw7-#tj$r |dYyt$r |dd YywxYww)zCRun best-effort history lookup in a bounded isolated daemon thread.Fr rr r NcXtjd|zdzj|y)Nz[%s] z= %s; delivering bare local file path(s) without history dedupr )rrLr)rr rrWs r _fail_openzPBasePlatformAdapter._bounded_history_media_paths_for_session.._fail_open s- NN& #bb ;  ;r)blockingz4Media-delivery history lookup capacity exhausted forcpjs%|j|nj|yyr)r set_exception set_result)rYr result_futures r_publish_resultzUBasePlatformAdapter._bounded_history_media_paths_for_session.._publish_result s6 %%'7<7H,,U3#..v6(rc2d\}} j} tjt5j ||dddj y#t$r }|}Yd}~Wd}~wwxYw#1swY2xYw#j wxYw)NNN)r BaseExceptionrPrQrtcall_soon_threadsaferelease)rYrrr admissionlooprrWs r_workerzMBasePlatformAdapter._bounded_history_media_paths_for_session.._worker# s&MFE >>{K $((6N--ovuMN!!# !  NN!!#s9A BA8B A5)A00A58B=BBzmedia-history-lookupT)targetrdaemonz8Could not start media-delivery history lookup worker forr+z,Timed out loading media-delivery history forz(Media-delivery history lookup failed forr)rFr_HISTORY_MEDIA_LOOKUP_ADMISSIONacquirerget_running_loop create_future threadingThreadrPrOrwait_for%_HISTORY_MEDIA_LOOKUP_TIMEOUT_SECONDS TimeoutError)rrWrrrrrrs`` @@@@r(_bounded_history_media_paths_for_sessionz.n sC 2667MqQRrrrrs r!_get_ephemeral_system_ttl_defaultz5BasePlatformAdapter._get_ephemeral_system_ttl_defaultj s RTUW Wrrcdfd }|} tj|y#t$r|jYywxYw)zSpawn a detached task that deletes ``message_id`` after ``ttl_seconds``; best-effort (gateway restart, permission denied, Telegram 48h window) swallowed at debug level.Nc K tjtdtd{j d{y7 7#t $r-}t jdj|Yd}~yd}~wwxYww)Nr)rRrvz*[%s] Ephemeral delete failed for %s/%s: %s) rrrZrNrrOrrr)rFrRrvrrs r _run_deletezCBasePlatformAdapter._schedule_ephemeral_delete.._run_deletes s} nmmC3{+;$<===))'j)QQQ>Q n I499V]_iklmm nsPB+AAA A ABAA B #BBB  Br N)rrrtrD)rrRrvrrcoros```` r_schedule_ephemeral_deletez.BasePlatformAdapter._schedule_ephemeral_deletep sC n n }     %  JJL s,AAu⚠️  _EA_HEADERz``` _EA_CODE_OPENz ``` _EA_CODE_CLOSEz: _EA_REASON_LABEL_EA_DEADLINE_PREFIXz@ Smart DENY: owner override applies to this one operation only._EA_SMART_DENY_LINEi _EA_CMD_BUDGETr_EA_REASON_BUDGETrr2cPt|xsd}t||kDr|d||zS|S)zETruncate ``text`` to ``budget`` chars, appending ``suffix`` when cut.r`N)rFr)rrr2s r_truncate_previewz%BasePlatformAdapter._truncate_preview s24:2),TV);tGV}v%EErc|S)zPEscape hook for command preview/reason; HTML-mode platforms (Telegram) override.rf)rrs r _ea_escapezBasePlatformAdapter._ea_escape s rescapec t|xsd}|xs |j}|j}||||kr|Sdt|}}||kr-||zdzdz}|||d||kr|}n|dz }||kr-|d||zS)uf``_truncate_preview`` measured after ``escape`` (default ``_ea_escape``) in ``message_len_fn`` units: the platform cap applies to the wire payload, and escaping expands (``&`` → ``&``), so a raw-length cut can still overflow. Returns raw text (the caller escapes); ``suffix`` rides outside ``budget`` like ``_truncate_preview``.r`rrr]N)rFrrr) rrrr2rrrrrs r_ea_fitzBasePlatformAdapter._ea_fit s 4:2*4??$$ &, 6 )KCIB2g7Q;1$CfT$3Z()V31W 2g CRy6!!rrrc|jS)zPChars of command preview that fit; platforms with a hard message cap compute it.)r)rrrs r_exec_approval_cmd_budgetz-BasePlatformAdapter._exec_approval_cmd_budget s"""rc`|j|jttzS)zVThe "doing nothing means it will NOT run" line, with the configured approvals.timeout.)rrr9r8rs r_ea_deadline_linez%BasePlatformAdapter._ea_deadline_line s&''$//:WXpXr:s*tttrrc|jr)|jt|xsd|j}|jt|xsd|j||}|j|j |j ||j|j|j ||j}|r||jzS|S)zShared exec-approval prompt text: header + fenced (truncated) command + why it was flagged + the deadline line, plus the smart-deny line. Buttons/trailing instructions stay platform-local.r`) rrrFrrrrrrrr)rrrr cmd_previewrs r_format_exec_approvalz)BasePlatformAdapter._format_exec_approval s  ! !,,s;+<"'=t?U?UVKll  2  > >{L Y[ ??#%%&t{'C&DTEXEXDY(()$//+*F)G))+,.3?td...HDHrz Allow Oncez Allow Sessionz Always AllowDeny)oncesessionalwaysdeny_EA_ACTION_LABELSprimarydanger)rr_EA_ACTION_STYLESallow_permanent allow_sessionc dg}|s&|r$|jd|r|jd|jd|Dcgc].}|j|||jj|df0c}Scc}w)z``(label, choice, style)`` rows for the approval buttons. A smart deny is an owner override for one operation only, so it offers neither the session nor the permanent tier; the permanent tier is never offered without the session tier.rrrrr`)rr r r)rr rrrrs r_exec_approval_actionsz*BasePlatformAdapter._exec_approval_actions sq ( NN9 %x(v[bcVW''*At/E/E/I/I!R/PQcccs3A7c:|jtjuS)zTrue when the adapter renders native approval buttons (overrides the prompt hook); the runner otherwise sends the plain-text ``/approve`` prompt.)_send_exec_approval_promptrc)rs rsupports_exec_approval_buttonsz2BasePlatformAdapter.supports_exec_approval_buttons s--5H5c5cccrc Kt|||t|xsd|||j||||j|||} |j | d{S7w)zInteractive exec-approval prompt; a press resolves via ``tools.approval.resolve_gateway_approval``. Text and choice set are shared; adapters render them natively in ``_send_exec_approval_prompt``.r`)r rr)rRrWr|rrrrrN)rrFrrr) rrRrrWrr|r rrrGs rsend_exec_approvalz&BasePlatformAdapter.send_exec_approval su$xQTU\Ub`bQc#,++G[,O// /}[g0i j 44V<<< ``(page_options, meta)`` with ``page``/``total_pages``/``start``/``end``/``total``/``page_info`` (`` (N–M of T)``, empty for one page).rrru–z of rr`)r total_pagesrPrOr page_info)rrZmin) rrrrrrPrOrmetas r_format_choice_pagez'BasePlatformAdapter._format_choice_page s G !eh.2x?@ 1c$ a01H_c$/H*De&Ls[`%a bIcQDZ.9 s,1N89AFFg''33 31Nr)rA signature parametersrrrvalues)r:rr>rparamss r_accepts_kwargz"BasePlatformAdapter._accepts_kwarg1 sr &&r*55Fv~O&#NS1N=C]]_1N.N O:& N sA AAcK|r;|j|jdddr|j||d{y|j|d{y77w)zStop typing, forwarding ``metadata`` only if ``stop_typing`` accepts it (Slack AI status is per thread, so dropping metadata could clear a sibling thread; introspecting keeps legacy ``stop_typing(chat_id)`` adapters working).r|TFr>rrN)rHr=r:s r_stop_typing_with_metadataz.BasePlatformAdapter._stop_typing_with_metadata< sf ++  *T5,J""7X"> > > w''' ?'s!8AAAAAAr human_delayc Kddlm}d}|D] \}}|dkDrtj|d{ tj d|j t||r|ddnd|jdr|jd ||d di} } n2|j|r|jd |i} } n|jd |i} } | dd |i| |xsd|dd{} | js,tjd|j | jnd}|s t!ddSt!||rdSdS77i#t$r.} tjd|j | dYd} ~ md} ~ wwxYww)uSend ``(url, alt)`` images (``http(s)://`` or ``file://``) one by one (GIFs via ``send_animation``, local files via ``send_image_file``); override to bundle natively (Signal). Returns success when at least one image was delivered — the outcome the turn-level delivery tracker records; every override must return the same aggregate, or a media-only turn on that platform reports FAILURE (#106153).r)unquoteFNz[%s] Sending image: %s (alt=%s)r`file:// image_path animation_url image_urlrR)captionr|z[%s] Failed to send image: %sTz[%s] Error sending image: %sr zno images to sendrzall images failed to sendrf) urllib.parserNrrrrrrsr send_image_file_is_animation_urlsend_animation send_imagerrrOr) rrRrr|rL_unquote deliveredrTalt_textsenderurl_kw img_resultimg_errs rsend_multiple_imagesz(BasePlatformAdapter.send_multiple_imagesF s 5 #) ` IxQmmK000 ` =tyy,Y7(#2XZ\'' 2%)%9%9L(S\]^]_S`Ja;bFF++I6%)%8%8?I:VFF%)__{I6NFF#)$\#$\'-$\7?7G4RZ$\\ !))LL!@$))ZM]M]^ $I# `(e3FG G#$F F)DF F)1\  ` ;TYYZ^ __ `sK/FEFB%EE>E)FE E?#E:4F:E??FrTrUc^K|r|d|n|}|j||||d{S7w)zFSend an image natively; default falls back to sending the URL as text.rLr5Nr6)rrRrTrUrr|rs rrZzBasePlatformAdapter.send_imagej s:-4'"YK(YYwxZbYccccs $-+-rScJK|j|||||d{S7w)z_Send a GIF as a native animation (auto-plays inline); default falls back to send_image.)rRrTrUrr|N)rZ)rrRrSrUrr|s rrYz"BasePlatformAdapter.send_animationq s9 __}gPXck%mm mmrrdcd|jjddjdS)z=Check if a URL points to an animated GIF (vs a static image).rrr#)rbrJendswith)rds rrXz%BasePlatformAdapter._is_animation_urly s+yy{  %a(11&99rc d}d}d}tj||Dcgc]8tfd|Dr"jdjdf:}}|j dtj||D|s||fS|Dchc]\}}| c}} fd}|} ||fD]} tj | || } |tj d d | j fScc}wcc}}w) zExtract ``![alt](url)`` and ```` image URLs from a response; returns ``([(url, alt_text), ...], content with those tags removed)``.z$!\[([^\]]*)\]\((https?://[^\s\)]+)\)zA]+)["\']?\s*/?>\s*(?:)?)r%r$r&r#r'z fal.mediazfal-cdnzreplicate.deliveryc3K|]U}jdjj|xs!|jdjvWyw)r]N)rNrbrf)rrrs rrz5BasePlatformAdapter.extract_images.. sS- ))+44S9VSAGGAJDTDTDV=VV-sAAr]rc3BK|]}|jddfyw)rr`N)rN)rrJs rrz5BasePlatformAdapter.extract_images.. s[uu{{1~r*[sc|jdk\r|jdn|jd}|vrdS|jdS)Nr]rr`r) lastindexrN)rJrdextracted_urlss r_remove_if_extractedz@BasePlatformAdapter.extract_images.._remove_if_extracted s?$)OOq$8%++a.ekk!nC.2 BEKKN Br\n{3,}r)rArprrNrCrerz) r md_pattern html_patternmarkersrrrdrrmrrrls ` @rextract_imagesz"BasePlatformAdapter.extract_images~ s = [ )46KK G4T.q-$+--771:qwwqz*..  [ LRY8Z[[7? ",23&#q#3 C"L1 EGffW&:GDG Ervvi9??AAA.4s =C6 C;rc LK|jdd|||||d{S7w)zvSend audio as a native voice message (Telegram bubble / Discord attachment). Default: friendly failure notice. send_voicerN_send_media_fallback_notice)rrRrrUrr|rs rrtzBasePlatformAdapter.send_voice s8 55 ':w8UU UU $"$rmethodrr-rcKtjd|j|||t||} |j || ||||d{S7w)zShared default for send_voice/send_video/send_document/send_image_file. The local path is logged but NEVER echoed into chat (host layout leak); only the caller's ``file_name`` is shown.z3[%s] %s fallback: native %s send unavailable for %srUrr|shown_metadataN)rrLrremit_media_warning) rryrr-rRrUrr|rrs rrvz/BasePlatformAdapter._send_media_fallback_notice se LdiiY_aegkl"43,,WdGV^iqZb - cN rrc:ddlm}||xs |jS)zNPresentation policy under the caller's owning profile; old plugins inherit it.rr)gateway.warning_notificationsrrc)rr~rRr|rs rrz1BasePlatformAdapter.warning_notifications_enabled sO,-=-NOOrc ddlm}||dS#t$rOtjdd|tj }tjdd |j cYSwxYw) zChat Markdown -> transcript-like spoken script (reasoning blocks removed, headings/bullets flattened, units expanded). Chunking and delivery limits are the TTS tool's job.r)prepare_spoken_textN) max_charsz].*?r})r(z [*_`#\[\]()]r`)tools.tts_text_normalizerrOrAreDOTALLrz)rrrs rprepare_tts_textz$BasePlatformAdapter.prepare_tts_text s[ = D&tt< < =663S$biiPD66/2t4::< < =sAA*)A*cHK|jd||d|d{S7w)zSPlay auto-TTS audio; override for invisible playback (Web UI). Default: send_voice.)rRrNrf)rt)rrRrrs rplay_ttszBasePlatformAdapter.play_tts s'$T__VWVvVVVVr8rTcy)zEReturn True when this adapter can accept streaming PCM for *chat_id*.Frf)rrRrTs rsupports_streaming_ttsz*BasePlatformAdapter.supports_streaming_tts src Kyw)zOpen a streaming-audio session; returns an opaque handle for the write/finish/abort calls, or ``None`` to decline (whole-file fallback).Nrf)rrRrTr|s rbegin_streaming_ttsz'BasePlatformAdapter.begin_streaming_tts rhandlerc Kyw)z:Write one PCM chunk to the adapter's outbound audio track.Nrf)rrrs rwrite_streaming_ttsz'BasePlatformAdapter.write_streaming_tts rr) interruptedrc Kyw)z&Signal normal end of the audio stream.Nrf)rrrs rfinish_streaming_ttsz(BasePlatformAdapter.finish_streaming_tts rrrc Kyw)zAbort the stream due to an error or cancellation. Must be idempotent: late producer chunks after abort are silently dropped, not raised. Restores state to "not streaming".Nrf)rrrs rabort_streaming_ttsz'BasePlatformAdapter.abort_streaming_tts rrrrXct|||S)Nr)r[rrWrXrs r_streaming_tts_turn_keyz+BasePlatformAdapter._streaming_tts_turn_key s%k;eLLrcr|j|||}|!t|dtj|yy)Nrr)rrZrvr)rrWrXrr^s r"_mark_streaming_tts_completed_turnz6BasePlatformAdapter._mark_streaming_tts_completed_turn s=// [PU/V   t=s C G G Q rcFtt|dt|||S)Nrr)r_rarvrs r_streaming_tts_turn_completedz1BasePlatformAdapter._streaming_tts_turn_completed s(3 D:CE BKQ\dik kr video_pathc LK|jdd|||||d{S7w)zJSend a video natively (inline playable). Default: friendly failure notice. send_videorNru)rrRrrUrr|rs rrzBasePlatformAdapter.send_video s855 ':w8UU UUrw file_pathc PK|jdd||||||d{S7w)z@Send a document/file natively. Default: friendly failure notice. send_documentrrxNru)rrRrrUrrr|rs rrz!BasePlatformAdapter.send_document s@55 VY(H`i6kk kks &$&rr| media_pathrcKt|jj}|st|j||r t d}n=|t vr t d}n)t dtjj|} |j|||d{}| |jrdn |j}|"tjd|j |yy7E#t$r } | }Yd} ~ 7d} ~ wwxYww)aUser-visible notice when a MEDIA attachment upload failed: the tag was already stripped from the text, so silence would be a silent drop. The non-streaming dispatch loop strips ``MEDIA:`` tags before sending attachments. When the subsequent upload returns ``success=False`` (for example Discord accepted the message but attached nothing), the user must see a failure notice instead of a silent drop (#66797). rrrrrNz5[%s] Could not send media-delivery-failure notice: %s)r)r2rbrrcr _VIDEO_EXTSrCr-rqrrrrOrrr) rrRrrr|rrrproblem notify_errs r_notify_media_delivery_failurez2BasePlatformAdapter._notify_media_delivery_failure# s:%%++- 1$--xX&w/D K &w/D&vrww/?/? /KLD !,,WdX,NNF$ndFLLG   LLPRVR[R[]d e  O ! G !sBBD C)!C'" C)%D'C)) C>2C94D9C>>DrQc LK|jdd|||||d{S7w)zTSend a local image file natively (send_image takes a URL). Default: friendly notice.rWrNru)rrRrQrUrr|rs rrWz#BasePlatformAdapter.send_image_file< s955 w GWhPXZZ ZZrwct||S)zBReturn a resolved path if it is safe for native attachment upload.r)r)r-rWs rrz0BasePlatformAdapter.validate_media_delivery_pathC s,DkJJrrc v|xsgDcgc]"\}}t||d|x}r |t|f$c}}Scc}}w)zWDrop unsafe MEDIA paths and normalize accepted paths; ``dropped`` collects the rejects.zMEDIA directive path)rr)rrWrrrrs rfilter_media_delivery_pathsz/BasePlatformAdapter.filter_media_delivery_pathsH sU EPDUSUr,@J5j+Oegnoo oX 'r rrs'5cRfd|xsgD}|Dcgc]}|s| c}Scc}w)z?Drop unsafe bare local file paths and normalize accepted paths.c38K|]}t|dyw)zlocal file pathN)r)rr'rWs rrzBBasePlatformAdapter.filter_local_delivery_paths..S slVW.q+?PQlsrf) file_pathsrW safe_pathsr's ` rfilter_local_delivery_pathsz/BasePlatformAdapter.filter_local_delivery_pathsP s-m[e[kikl %+a+++s$$c tj|Dcgc]}|j}}tj|D]}|j }t j d|td|dz |r:|jdddj}|jjdrt|dd}|r t|r|j||jf|j!d t jd |t j"Dt%||Scc}w) zBlank fenced code, inline code and blockquotes (length-preserving so regex offsets stay valid) against MEDIA: false positives; backtick-quoted paths inside MEDIA: tags stay scannable.z MEDIA:\s*$rrrhrMrNc3<K|]}|jywr)rv)rrs rrz.i sT!QVVXTrkz^>.*$)rxrprvryrPrAsearchrZrNrzupperr rrrrOrC MULTILINErf)rrrlrPinnerrs rrez)BasePlatformAdapter._mask_protected_spansV s *9)A)A')JKAqvvxKK ))'2 +AGGIEyyAurz0B5(IJGGAJq$**,E{{}''15eABi@ !=i!H LL%) * +  Tr{{8Wbll'STTGU++LsEc d|vsd|vr|Stjd|Dcgc]8}tjd|jdr|j d:}}t ||Scc}w)ajBlank ``MEDIA:`` tags inside JSON string *values* (stored tool-result text like ``{"result": "MEDIA:/x/stale.png"}``) so they are never re-delivered. Only value-context strings (``:,{[`` before the ``"``) and bare paths (``/``, ``~/``, ``X:\``) count; ``MEDIA:"..."`` quoted tags and line-start/prose tags are untouched. Offsets preserved. Here the ``MEDIA:`` is part of stored text, not an outbound directive, but the bare-path branch of ``MEDIA_TAG_CLEANUP_RE`` would still match it and re-deliver a stale file. (Regression report #34375.) rrMz$(?<=[:,{\[])\s*"((?:[^"\\\n]|\\.)*)"z MEDIA:\s*(?:~/|/|[A-Za-z]:[/\\])r)rArprrNrvrf)rrrls rrdz+BasePlatformAdapter._mask_json_string_medial s{ g !8N "{{+RT[\Kyy`` tags and strip ``[[audio_as_voice]]`` / ``[[as_document]]`` -> ``([(path, is_voice), ...], cleaned)``. Both directives are message-global; ``[[as_document]]`` (unmodified sendDocument for large images) is detected by dispatch sites on the ORIGINAL response and only stripped here.r[r`r\r-r Nc|vr]j|j|xr6tjj |dj t vfyy)Nr)rrrCr-rrbr)r- has_voice_tagr seen_pathss r_addz/BasePlatformAdapter.extract_media.._add sU:%t$ dM$fbgg6F6Ft6LQ6O6U6U6W[f6fgh&rrnr)r<rirvrFrurprrNrCr-r6rRrtrrqrmrArerrz) rr scan_contentrrJr-rrrlrrrs @@@r extract_mediaz!BasePlatformAdapter.extract_media s) ,7 //"6;CCDUWYZ-W5 %  is it i *22<@ E,U[[-@AD++D12   ``(expanded_paths, cleaned_text)``. Candidates must exist on disk (URLs / hallucinated paths ignored); paths inside fenced or inline code are skipped so code samples are never mutilated. Dispatch by type lives in ``gateway/run.py``.r@c3>K|]}|jdywrBrCrEs rrz:BasePlatformAdapter.extract_local_files.. sGaAHHSMGrGzB(?. s(Ada1 )))As+.rz6Skipping bare file path in reply (no file on disk): %sr`rnr)rr?rAcompile IGNORECASEr{rprrNrCr-r6isfile setdefaultrrrrFr<r0rerz) rext_partpath_re code_spansuniquernrrrJs @rextract_local_filesz'BasePlatformAdapter.extract_local_files s5 88G3FGG ** QT\ \_e e MM!) %%g. kEAjAA++a.Cww))#.Hww~~h'!!(C0 TVdehVij kw; ==? /Cooc2.G /F|RVVIvw?EEGGGrinterval stop_eventcHKtdtd|dz } |m|jr] |j||d{|jj |t |dijt|dy||jvr1 tj|j|||d{|tj"|d{tj$}|j'|z}|jsQ||j'z } | dkrn8tj"td| d{|jsQX707#tj$rYt$r+}tjd|j |Yd}~d}~wwxYw77i#tj($rYnwxYw |j||d{7|jj |t |dijt|dy#|j||d{7|jj |t |dijt|dwxYww) uRefresh the typing indicator every ``interval`` seconds until cancelled (platform typing state expires after ~5s). Chats in ``_typing_paused`` are skipped (approval waits — Slack's setStatus disables the compose box). Each ``send_typing`` is bounded by a sub-interval timeout so one slow round-trip is abandoned before the next tick, not the bubble lapsing.g?rNr_rrz&[%s] send_typing error (non-fatal): %sr)rZris_set_stop_typing_quietlyrrrar`rFrrr;rrOrrrrrrr ) rrRrr|r_send_typing_timeout typing_errrdeadline remainings r _keep_typingz BasePlatformAdapter._keep_typing s] #4S(T/)BC F)j.?.?.A2++GX> > >    ' ' 0 D." - 1 1#g, E7$"5"55f%..t/?/?RZ/?/[7KMMM %!--111//199;1$++- (499; 6I A~"--D)(<=== %++-!6 ?-M"//$f %MtyyZdeef2>%%    ++GX> > >    ' ' 0 D." - 1 1#g, E++GX> > >    ' ' 0 D." - 1 1#g, EsJ"G J"E6AJ" G +E;E9E; G &G'A7G GG 4G 6J"9E;;GG G!F>9G >GG G G IG  I$J"9G<:AJ"JIAJJ"g?r])r|r+ stop_attempts typing_taskr+rcK|jj| ||js}|jt j t jt j5t jt j||d{dddttd|D];}|rt jdd{|j||d{= |jj|y7|#1swY{xYw7K73#|jj|wxYww)zAStop the refresh task and platform typing state as one operation.Nrrr)rrrrrPrQrr rrr rrZrrr)rrRrr|r+rrs r_stop_typing_refreshz(BasePlatformAdapter._stop_typing_refresh s ( 1&{/?/?/A""$(()?)?AUAUVY!**7>>++FPWXXXY Q !67 C!--***//BBB C    ' ' 0 YYY+B    ' ' 0seEAD03.D !D"D &:D0 D,!D0:D.;D0ED  D)%D0.D00E  EcKtjt5|j||d{dddy7 #1swYyxYww)z?Best-effort platform stop_typing; adapter errors are swallowed.N)rPrQrOrKr:s rrz(BasePlatformAdapter._stop_typing_quietly sL   + E11'8D D D E E D E Es+AAAA AAA Ac:|jj|y)zNPause typing for a chat (approval waits); GIL-safe from the sync agent thread.N)rrrs rpause_typing_for_chatz)BasePlatformAdapter.pause_typing_for_chat s (rc:|jj|y)z;Resume typing indicator for a chat after approval resolves.N)rrrs rresume_typing_for_chatz*BasePlatformAdapter.resume_typing_for_chat s ##G,rcK|r+||jvr|j|j|j||d{y7w)zDSignal the active session loop to stop and clear typing immediately.N)rzrvr)rrWrRr|s rinterrupt_session_activityz.BasePlatformAdapter.interrupt_session_activity sC ;$*?*??  ! !+ . 2 2 4'':::sAA A A  generationrcZ|r t|sy|jj|}|bt|\}}||t |t |kryt|r-||t |t |k(r|j ||}||n t ||f|j|<y)u.Register a deferred callback to fire after the main response. Same-key registrations are chained (both fire in order, per-callback exception isolation) so independent features coexist; ``generation`` ties it to a gateway run — stale generations never overwrite a fresher slot.N)r`rrrUrN_chain_callbacks)rrWrGrr existing_gen existing_cbs rregister_post_delivery_callbackz3BasePlatformAdapter.register_post_delivery_callback! s (8"4 0044[A  (B8(L %L+'J,Bs:Y\]iYjGj $$ (:c,>OSVWaSb>b00hG"*HZ(0K %%k2r callbackscdfd }|S)zAsync wrapper running ``callbacks`` in order with per-callback exception isolation; async so coroutines returned by async hooks are awaited, not dropped.cKD])} |}tj|r |d{+y7#t$rtj ddYQwxYww)NzPost-delivery callback failedTr )rA isawaitablerOrr)_cb_resultrs r_chainedz6BasePlatformAdapter._chain_callbacks.._chained9 sa  QQ!eG**73%  Q& QLL!@4LPQs1A!535A5 AAAArrf)rrs` rrz$BasePlatformAdapter._chain_callbacks5 s Qrc|r|jj|nd}|yt|\}}||t|t|k7ry|jj |dt |r|SdS)zCPop a deferred callback, optionally requiring generation ownership.N)rrrUrNr`r`)rrWrrentry_generationrGs rpop_post_delivery_callbackz.BasePlatformAdapter.pop_post_delivery_callbackC sCN--11+>SW =%?%F"(  !'7'?3GWCX\_`j\kCk %%))+t<#H-x747r _ACK_EMOJI _OK_EMOJI _FAIL_EMOJIc Kyw)z.Hook called when background processing begins.Nrfrs ron_processing_startz'BasePlatformAdapter.on_processing_startV rroutcomec K|j |jyt|dd}t|dd}t|dd}t|jdd}t|dd}t |r!t |rt |r|r|r|sy|||d{t j |jt j|jij|}|r||||d{yy7_7w)uvHook called when background processing completes. Default: opt-in reaction ack — with ``_OK_EMOJI``/``_FAIL_EMOJI`` set and ``_add_reaction``/``_remove_reaction`` present, swap the in-progress reaction for the outcome one. Remove-then-add is deterministic whether the platform replaces or stacks a sender's reactions. CANCELLED leaves it unreacted.N _add_reaction_remove_reaction_reactions_enabledrRrv) rrrar{r`r<SUCCESSFAILUREr) rrr rrenabledrRrvemojis ron_processing_completez*BasePlatformAdapter.on_processing_completeY s >> !d&6&6&> 4$7d$6=$ 4d;%,, 48UL$7  Xf%5(7:KT[T]j Wj)))"**DNN"**D,<,<>>Ac'l  gz51 1 1  * 2s%BD D!AD9D:DD hook_namerrcKt||d}t|sy ||i|d{y7#t$r,}tj d|j ||Yd}~yd}~wwxYww)zARun a lifecycle hook without letting failures break message flow.Nz[%s] %s hook failed: %s)rar`rOrrLr)rrrrhookrFs r_run_processing_hookz(BasePlatformAdapter._run_processing_hookn sbtY-~  O'' ' ' O NN4diiA N N Os6A( 0.0A(0 A%"A A( A%%A(c\|xsdjtfdtDS)zGReturn True if the error string looks like a transient network failure.r`c3&K|]}|v ywrrfrpatlowereds rrz:BasePlatformAdapter._is_retryable_error..| sGc3'>Gr)rbrr rrs @r_is_retryable_errorz'BasePlatformAdapter._is_retryable_errorx s);B%%'G-FGGGrc(td|xsddk(S)aReturn True if the error string classifies as a rate limit / flood cap. Single wrapper around :func:`classify_send_error` so the call sites in :meth:`_send_with_retry` share one notion of "is this a rate limit" instead of inline copies that could drift. Nr`r)r)rs r_is_rate_limited_errorz*BasePlatformAdapter._is_rate_limited_error~ s#4"5GGrcT|xsdjtfddDS)uReturn True for read/write timeouts — NOT retryable and NOT a plain-text fallback trigger, because the request may already have been delivered.r`c3&K|]}|v ywrrfrs rrz8BasePlatformAdapter._is_timeout_error.. sZc3'>Zr)z timed out readtimeout writetimeout)rbrrs @r_is_timeout_errorz%BasePlatformAdapter._is_timeout_error s);B%%'Z-YZZZrrxct|ts|dfS|j}|tfddt}|r,|dkDr't j tj urd}|jt|xsdfS)a)Unwrap a str/None/:class:`EphemeralReply` response into ``(text, ttl)``. ``ttl > 0`` means schedule ``_schedule_ephemeral_delete`` after a successful send; forced to 0 when the adapter doesn't override ``delete_message`` so non-supporting platforms degrade to normal sends.rc6tjSr)rNrrsrrz7BasePlatformAdapter._unwrap_ephemeral.. sc$*P*P*R&Sr) rrrrirOrrrcrrN)rrxttls` r_unwrap_ephemeralz%BasePlatformAdapter._unwrap_ephemeral sw (N3Q; "" ;SUVXabC 37tDz88>f.?.?  + +ELL,@,@&BSBSU\ ]/@>;69s# DDBD>D?ADDct|jdd}t|r|tjS ||S#t $r9t jd|jdtjcYSwxYw)zRouted home + terminal policy for post-handler text, media and error delivery; a no-op without a runner or outside multiplexing. _media_delivery_scope_for_sourceNz+[%s] Failed to resolve media delivery scopeTr ) rar[r`rP nullcontextrOrrr)rr{rss r_media_delivery_scopez)BasePlatformAdapter._media_delivery_scope sz$--/QSWX FN))+ + ,6? " , LLF \`L a))+ + ,sA?BBct|jdd}t|s|S ||}t|tr|j|jk(r|S|S#t$r%tj d|j |cYSwxYw)aThe runner's CURRENT adapter for a new final-response send: a reconnect can swap the registry adapter mid-task; an unsent final response belongs on the replacement transport, while message IDs, edits and deletes stay owned by the old one (nothing is migrated)._delivery_adapter_forNz6[%s] Failed to resolve live adapter for final delivery) rar[r`rOrrrrrcrc)rr{rs live_adapters r_final_delivery_adapterz+BasePlatformAdapter._final_delivery_adapter s$--/FM K "6?L l$7 8\=R=RVZVcVc=c    LLQSWS\S\ ]K sA+B B  max_retries base_delayrc Kdtddffd dfd }d{}|jsj|r|S|jxsd} j | } |j xs%| xs!|j duxsj| } | sj| r|S| r$|j } td|dzD]} | }| |d | dz zz}n4|tkDr+tjd j|t| |cS|tjd dz}d} tjd j| ||| t!j"|d{||d{}|%tjd j| |cS|}|jr%tj%dj| |cS|jxsd} j|r|cS|j |j } j | } |j rj| rn|j |j| rnxj | s |j #tjdj| |Stjdj|| d} |d{|Sj+|r#tjdj| |Stjdj| j-d{}|js+tjdj|j|S7_77 7#t&$r,}tj)dj|Yd}~|Sd}~wwxYw7w)zSend with exponential-backoff retry on transient network errors; permanent failures fall back to a plain-text send, exhausted retries notify the user.rr rcJKj|d{S7w)Nr5r6)rrRr|rrs r_sendz3BasePlatformAdapter._send_with_retry.._send s%7D8^fgg ggs #!#cKj|sd{Sj|d{S7!7w)u'Retry: the whole payload normally; only the undelivered remainder after a partial split delivery (``raw_response["partial_overflow"]``). ``None`` when the adapter cannot resume — the caller then keeps the partial failure rather than re-sending the already-visible head.Nr)_is_partial_delivery_resume_partial_send)previousr<rRrr|rrs r _send_againz9BasePlatformAdapter._send_with_retry.._send_again sK,,X6"7^++227Hxbj2kk k,ksAAAAAANr`rr]z{[%s] Server asked to retry after %.0fs (> %.0fs inline cap); returning typed failure for redelivery instead of sleeping: %srz7[%s] Send failed (attempt %d/%d, retrying in %.1fs): %sz[%s] Split send partly delivered and the remainder cannot be resumed safely; not re-sending the whole payload (would duplicate the visible head): %sz[%s] Send succeeded on retry %dz[%s] Rate-limited send exhausted retries; returning typed failure for redelivery (no notice sent inside active flood penalty): %sz4[%s] Failed to deliver response after %d retries: %su⚠️ Message delivery failed after multiple attempts. Please try again — your request was processed but the response could not be sent.z/[%s] Could not send delivery-failure notice: %suL[%s] Send failed after partial delivery: %s — not re-sending as plain textu3[%s] Send failed: %s — trying plain-text fallbackrz"[%s] Fallback send also failed: %s)r@rr Optional[SendResult])rFr_send_retry_is_finalrrrrrr$r _SEND_RETRY_INLINE_WAIT_CAP_SECSrrrandomuniformrLrrrrOrr>_send_plain_fallback)rrRrrr|r8r9rArY error_stris_rate_limited is_networkserver_retry_afterrbackoffdelayresumedrrfallback_resultr<s````` @rr,z$BasePlatformAdapter._send_with_retry s  hc hl h h l lW~% >>T66v>MLL&B 55i@    3 3!!- 3'' 2 d44Y?M !'!3!3  K!O4G ,?(A'A+,>?G??LLO 7,Li "M&..A"66%)"XZ^ZcZc& UIGmmE*** +F 33?NNbcgclclnwy"M >>KK A499gV!M"LL.B ,,V4!M%%1)/););& #'"="=i"H$$&))5// :]G n..y9V=O=O=[LLZ 9 "M SUYU^U^`kmvwmk-''   $ $V , NNikoktktv AMLdiiYbc $ 9 9'7U]hp 9 qq&& LL=tyy/J_J_ `U&R+3b( kLL!RTXT]T]_ijj krs(ONE O:N;O N B8OO OO*A'O NNN"A/OO>OOON O#!O O OOrYcy)zTrue when a failed send must be returned as-is: neither a retry nor the plain-text fallback can fix it (a structured auth/target refusal). Default: never.Frf)rrYs rrCz(BasePlatformAdapter._send_retry_is_finalFrrctt|dd}t|txrt|j dS)zTrue when a split payload was PARTLY delivered (``raw_response["partial_overflow"]``, the contract Telegram's send/edit-overflow paths set and the stream consumer reads): the visible head must never be sent again.rNpartial_overflow)rarrrr)rYrns rr>z(BasePlatformAdapter._is_partial_deliveryKs3 fnd3#t$Jcgg6H.I)JJrrBc Kyw)a(Deliver only the remainder of a partially delivered split payload. ``None`` (the default) means this adapter cannot resume; ``_send_with_retry`` then returns the partial failure instead of re-sending the whole payload. Override only where non-delivery of the remainder is CERTAIN.Nrf)rrRrYrr|s rr?z(BasePlatformAdapter._resume_partial_sendSrrc K|j||jd|dd|dd||||d{S7w)zLast-resort send after a non-transient failure; platforms whose markup is not the likely culprit override it (Photon drops rich links instead of adding the banner).z+(Response formatting failed, plain text:) Ni rr5)rrrs rrGz(BasePlatformAdapter._send_plain_fallbackZsfYYT%6%6??OPRYZ_[_R`(&7&4 22 22s 5><> existing_textnew_textc|s|S|j|jdDcgc]}|jc}vr|S|d|jScc}w)uMerge a new caption into existing text unless an identical (stripped) caption already exists — exact match per caption, not substring ("Meeting" isn't swallowed by "Meeting agenda").r)rzrJ)rUrVrs rr.z"BasePlatformAdapter._merge_captionds] O >> =3F3Fv3NOa O O XJ/5577 PsAc$t|dtS)Nr)rZrrs r_text_debounce_storez(BasePlatformAdapter._text_debounce_storeos$ 0$77rc t|dddk(xri|jtjk(xrJt|dd xr:|j xr't |j xsdj}|rDtjd|jt|dd t|j xsd|S) z=Return True for normal text eligible for queue-mode debounce.rrkqueueinternalFr`zC[%s] Queue-text debounce candidate accepted: session=%s text_len=%drWr) rarr;r is_commandrrrzrrrr)rrrYs r!_is_queue_text_debounce_candidatez5BasePlatformAdapter._is_queue_text_debounce_candidaters D+[ 9W D L""k&6&66 L?FujZ_?`;` L$$&& L+/1Ar0H0H0J+K   LL^GE=#$FEJJL\Z\H] _ rrcldtdttdfdzfd}||}|duxr |||k(S)zDReturn True when two text debounce events came from the same sender.rr .Nct|dd}|ytt|dd}t|ddxs t|dd}|r |t|fSt|dddvr%t|ddr|dt|jfSy) Nr{rc user_id_altrKrr>rsprivaterRrs)rardrFrR)rr{rcr^s r _identityzFBasePlatformAdapter._can_merge_text_debounce_events.._identitysY$7F~%gfj$&GHHV]D9]WVYX\=]F #f+..v{D15FF7SY[dfjKk $FNN(;<<r)r:rrF)rrrrcexisting_senders r_can_merge_text_debounce_eventsz3BasePlatformAdapter._can_merge_text_debounce_events}sH  %S/D2H $H-d*R)EBR/RRrc|jj|}|yt|j|jz|j |j z}td|tjz S)z>#3344rcK|j}|j|}||j|j|s|j |d{|j|}|e|j|j|sI|j j|}|+|j||rt |j ||dytj}|t|d||}|||<n|jr9t|jj|j|j_ t|dd}|xs t|dd}|t||j_|0t|jdrt||j_||_|j%|j'|} t)j*|j-|| |_y7w)z@Buffer normal queue-mode busy text and schedule a bounded flush.NTr )rrrrrvrk)rYrrer_flush_text_debounce_nowr{r9rrgrrrrarFrvr/rkrrrirr_flush_text_debouncer) rrWrrarhexisting_pendingnowlatest_message_id latest_anchorrMs r_queue_text_debouncez(BasePlatformAdapter._queue_text_debounces))+ +&  T%I%I%++W\%]// < < <IIk*E )M)Mekk[`)a#'#9#9#=#=k#J #/D4X4XYikp4q/0F0F UZgklnn =%EsTWXE!&E+ zz#/ 0@0@%**#M  '|T B -\@UW[1\M ,),->)? &(WU[[BW-X25m2D /EM ))+6(()B)B;PU)VW / =sAHHF,HrMcK tj|d{|j|d{ tj}|j j |}||j|urd|_yyy7k7T#tj$rOYtj}|j j |}||j|urd|_yyywxYw#tj}|j j |}||j|urd|_wwwxYww)z2Timer task that flushes the debounced text buffer.N)rrrkr rrYrr)rrWrMrrhs rrlz(BasePlatformAdapter._flush_text_debounces+ "--& & &// < < <**,G--/33K@E UZZ7%:! &;  ' <%%  **,G--/33K@E UZZ7%:! &;  **,G--/33K@E UZZ7%:! &; s\EB BB B B A EB B C.C1 A E-C..C11AD??EcK|j}|j|}|y|jtjd|_|j j|}||j||jsy|j|dt|j ||jdyw)z@Force-flush one debounced busy-text burst into the pending slot.NFrTr ) rYrrrrrr{rerr`r9)rrWrarhrs rrkz,BasePlatformAdapter._flush_text_debounce_nows))+ +& = '"6"6"89 ((,,[9  t'K'KGUZU`U`'a +t$#D$:$:KaefsCCcj|jj|d}||jyy)zACancel and drop pending text debounce state for control commands.N)rYr`r)rrWrhs r_discard_text_debouncez*BasePlatformAdapter._discard_text_debounces4))+// TB       rguardrwcf|jj|}||||ury|j|=y)zRelease the session guard; with ``guard`` given, only if the entry is still that exact Event (an old task's unwind must not clear the guard a reset-like command swapped in).N)rzr)rrWrw current_guards r_release_session_guardz*BasePlatformAdapter._release_session_guards>--11+>  U%6=PU;U   ! !+ .rcvt|jj|dd}t|xr|S)zTrue if the recorded owner task for ``session_key`` has exited. No owner task at all is NOT stale (guards installed outside handle_message, as tests do, must not be healed).rN)rar~rr)rrWrs r_session_task_is_stalez*BasePlatformAdapter._session_task_is_stales4t**..{;VTJDOTV$$rcP||jvs|j|sytjd|j||jj |d|j j |d|jj |d|j|y)zClear a stale session lock; True if healed. On-entry safety net: without it a split-brain (guard held, nothing processing) traps the chat in "Interrupting..." until restart.FzB[%s] Healing stale session lock for %s (owner task is done/absent)NT) rzr|rrLrr`r{r~rurrWs r_heal_stale_session_lockz,BasePlatformAdapter._heal_stale_session_locks d33 34;V;VWb;c[yy+ / !!+t4 "";5  T2 ##K0r)interrupt_eventrc |xstj}||j|<tj|j ||}|j ||s0|j j|d|j||yy)zSpawn a background processing task under the session guard; True on success. If ``create_task`` is stubbed with a non-Task sentinel (tests), the guard is rolled back (False).NrvFT) rEventrzr_process_message_background_track_session_taskr~r`rz)rrrWrrwrs r_start_session_processingz-BasePlatformAdapter._start_session_processings  27==?-2k*""4#C#CE;#WX'' T:    # #K 6  ' ' 5 ' Arrc$||j|< |jj|t |drJ|j |jj |j |jj y#t$rYywxYw)uRecord ``task`` as the session owner and track it for shutdown; False when ``create_task`` was stubbed with an unhashable sentinel (tests) — the owner entry is left for the caller.FrT)r~rrrr/rrr)rrWrs rrz'BasePlatformAdapter._track_session_tasks,0K(   " " & &t , 4, -  " "4#9#9#A#A B  " "4#A#A#I#I J   sB BB release_guarddiscard_pendingrrcK|jj|d}||jstj d|j ||j j||j tjtj|dd{|r-|j j|d|j#||r|j%|yy7H#tj$rY[tj$r$tjd|j |Yt$r&tj d|j |dYwxYww) zCancel in-flight processing for one session. ``release_guard=False`` keeps the guard so reset-like commands finish atomically; the await is bounded (5s) so a wedged finally can't stall.Nz0[%s] Cancelling active processing for session %sr\rzt[%s] Cancelled task for %s did not exit within 5s; unblocking dispatch and letting the task unwind in the backgroundz3[%s] Session cancellation raised while unwinding %sTr )r~r`rrrrrrrrrr r rrLrOr{rurz)rrWrrrs rcancel_session_processingz-BasePlatformAdapter.cancel_session_processings6 ""&&{D9  DIIK LLKTYYXc d  * * . .t 4 KKM 9&&w~~d';SIII   " " & &{D 9  ' ' 4   ' ' 4 J)) '' 7 c#yy+7 9 RTXT]T](49 9sUA;E1>-C6+C4,C60AE14C66E. E1 3E.>E1+E.+E1-E..E1 command_guardcK|j|d{|jj|d}|j||||j ||yy7Iw)zTail of /stop, /new, /reset: release the command-scoped guard, then spawn a fresh processing task for any follow-up queued meanwhile.Nrv)rkr{r`rzr)rrWr pending_events r$_drain_pending_after_session_commandz8BasePlatformAdapter._drain_pending_after_session_command.sg++K888..22;E  ##K}#E  $  * *=+ F % 9sA#A!A A#cmdc8Ktjd|j|||jj |}t j }||j|< |j||d{|j|ddd{|j||d{y7;7!#t$rR|jj ||ur3||jvr|||j|<|j||wxYw7gw)zDispatch a reset-like bypass command (/stop, /new, /reset): keep a guard installed while the runner handles it (follow-ups stay queued), cancel the old task AFTER the response, drain once.8[%s] Command '/%s' bypassing active-session guard for %sr)NFrrv) rrrrzrrrr/rrOr~rzr)rrrWrryrs r _dispatch_active_session_commandz4BasePlatformAdapter._dispatch_active_session_command8s!  OQUQZQZ\_alm--11+>   -:k* --eS-A A A00Ech0i i i77 ]SSS B i $$((5F$"5"55-:S9FD))+6 // =/Q   TsOA!D$B::B6;B:B8B:D0D1D6B:8B::ADDcvKd|_|js5t|dds'd|_tj d|j y|jr t||j|ryt|jxsijdxsdj}|sut|ddh|jjt j"k(rA|jj$d k(r(t'j(|j*|d{|j-|}|r||k7rtj/d ||y||j0vr|j3|||j0vr|j5||d{y|j7|||_y77w) zProcess an incoming message; returns quickly by spawning a background task so new messages (and interrupts) can arrive while an agent runs.FrmTz[%s] Dropping inbound message: no gateway message handler is installed on this adapter. The adapter is connected and can send, but every inbound message is discarded.Ngateway_session_keyr`rprsz@Dropping internally routed event: expected session=%s derived=%s)_gateway_acceptedrlrarmrrrallow_gateway_controlrrdrFr|rrzr{rcr3TELEGRAMrrrrrBrrLrzr_handle_message_while_activer)rrexpected_session_keyrWs rrz"BasePlatformAdapter.handle_messageOs#($$4!=uE26/ HII    & & ,U 3   ' "ENN$8b#=#=>S#T#ZXZ[aac%7KT)R)^LL))X->->>5<$>F F F--e4 K3G$G NN]/ >  $// /  ) )+ 6 $// /33E;G G G "&"@"@ "T G Hs%DF9 F5!A6F9F7F97F9cK|j|j|j}ddlm}m}||ru |r5||r-|j ||j|||d{ytjd|j|||j|d{ y|sf|jrZ ddlm}|j#|d du}|r55e<<< u22 *A$0$H$H%I%>EI%J!! TVZV_V_almq55e<<<  % % 1 b33E;GGGH >>kT-C-CC    !2!2 2 LLXZ^ZcZcep q '(>(> U S&*E #   1 1% 8 LLUVZV_V_$d&F&F H++K? ? ? LLKLPIIWb d '(>(> U383E3EIYIY3Y [&*E #mY= i EtyyRUWXcg hh  i *$)! * = qLL!RTXT]T]_`koLppq H b CTYYPQ\` aa b @sLC L?L<A"L?1I74I77 J.$J)$L?)J..L?1 K<L??KL?K K<#K72L?7K<<L??L L9 #L4.L?4L99L?cb|j}|sy|\}}tj|dz |dz S)zRandom human-like pacing delay (s) from this adapter's ``human_delay`` config range (ms), installed per profile by the runner (``_wire_adapter_handlers``); ``None`` = off.rWg@@)rrErF)rboundsrrs r_get_human_delayz$BasePlatformAdapter._get_human_delays7++B~~b6k2;77rrc`Kg}d} ddlm}m}|rddl}|j |}|s t dt |j}|jtj|||d{}|jddrZ|jdxs|jd g} | D cgc]*} | st| js t| ,}} ||fS7xcc} w#t$r.} t j#d |j$| Yd} ~ ||fSd} ~ wwxYww) zSynthesize auto-TTS audio -> ``(existing_paths, requested_path)``; empty/None on failure (logged, never raised). Path built platform-aware HERE: HERMES_SESSION_PLATFORM is cleared post-handler.Nr)text_to_speech_toolcheck_tts_requirementsz!Empty text after markdown cleanup)rr,rTrrz[%s] Auto-TTS failed: %s)rrrrrrrrcrrrrr)existsrFrOrrLr) rrpathsrequested_pathrrr speech_texttts_data raw_tts_pathsr-tts_errs r_synthesize_auto_ttsz(BasePlatformAdapter._synthesize_auto_ttss K R%'$"33LA "$%HII!;DMM!J ;;W->->'k~.W(WX<< 40$,LL$>$]8<:::\\F!(;TBJ!$UL"= 1S!1r2LBM##!KWV__gvOP'&+t2T$ '(8:JD Q S S S ##O]C C C #; S D  LL84L H smA E/ $E 1E2E 6E/7B'E EE <E=E E/E E E E,)E/+E,,E/rcK ddlm}ddlm}m}m}t |ddrtj||d{ytt |ddxsd} tj||| d{|| rst |jd d} |j|j} | |urt| r| |jjt |d d d{y|| Mt |jd d} t| r*| |jjt |d d yyyyy777b#t$rt j#d dYywxYww)aMark the ledger row delivered/failed (best-effort). On ``send_path_degraded`` with a replacement adapter live, trigger another redelivery sweep (the watcher's may have run before this failure landed; atomic claiming keeps it idempotent). On any other rejection arm the runner's timed redelivery, so the reply goes out once the flood penalty or the retry backoff has passed instead of waiting for the next restart (#91653).r)classify_dead_error)is_reconnect_onlymark_delivered mark_failedrFNrr`*_redeliver_failed_obligations_for_platformr)rx_schedule_flood_redeliveryzdelivery ledger update failedTr )gateway.dead_targetsrrrrrrarrrFr[r7r{r`rcrOrr) rrrYrrrrrrr redeliverliveschedules r_finalize_delivery_obligationz1BasePlatformAdapter._finalize_delivery_obligationsw I @ ^ ^vy%0'' FFF4:;E##KF F F '#'')UW[] 33ELLA//HY4G#ELL$9$9,34DFVX\,]___$U+3"4#6#68TVZ[H%U\\22%,-=?OQU%VX&45H/G G _ I LL84L H IsuE96EE EE94E4E5A9E.E/E3E94AEE9 EEE E63E95E66E9rrc 2Kddlm}dtdtffd } |D cgc]\} } | r | | s| } } } | |D cgc] } | | s | c} z } | r6j || D cgc]} d|| dfc} ||d{|j j dtd td tdtffd } |D cgc]\} }|s | | r| |d f}} }|r*tjd jt|||D cgc]} | | r | ddfc} z }|D]B\}} }|dkDrtj|d{ || || |d{Dycc} } wcc} wcc} w7cc}} wcc} w7>7*#t$rl}|tdt||r"tjdj|n"tj!dj||Yd}~d}~wwxYww)upDeliver MEDIA-tag files and detected local files by type: images batched via ``send_multiple_images`` unless ``[[as_document]]``; otherwise audio → send_voice (MEDIA tags only, never bare local files), video → send_video, else send_document. Every failure is reported. Each send feeds ``record_delivery`` so media-only turns report SUCCESS.r)quoter-r c`t|jjtvxr Sr)r)r2rb _IMAGE_EXTS)r-rs r _as_imagezABasePlatformAdapter._deliver_media_attachments.._as_imageEs*:$$**, ;^D^@^ ^rrPr`Nr media_tagcTKt|jj}|r6tj||rj ||d{}ne|t vrA|r"tjdj|j|d{}nj|d{}|jsNtjdj|rdnd ||jj|| d{|S777d7 w) z_MEDIA-tag files (``media_tag``) may route to send_voice; bare local files never do.r)rRrr|rNz([%s] Sending video attachment (%s) to %s)rRrr|)rRrr|z[%s] Failed to send %s (%s): %srz local filer)r)r2rbrrcrtrrrrrrrrLrr)r-rrrrYrRr|rs r _send_onezABasePlatformAdapter._deliver_media_attachments.._send_oneOst*##))+C7 sU]^#w4Zbmuvv #KK JDIIWZ\cd#w4Zbcc#11'T\d1ee>>@$))*3wsFLLZ99'4RZem9nnnMwdeosJAD(D AD("D"#D(?D$AD(D&D("D($D(&D(Tz0[%s] Delivering %d non-image MEDIA attachment(s)F)rrrz[%s] Error sending media: %sz$[%s] Error sending local file %s: %s)rVrrFr_send_image_batchr{rRrrrrrrrrOrLr)rrrrrrLr|r_quoterr'r _image_pathsrvr[r-rerrrRs` ` ` @r_deliver_media_attachmentsz.BasePlatformAdapter._deliver_media_attachments;s 1 _C _D _-8ZkaYWX\Z ZK@q9Q<@@ ((\J76!9+.3JHVa! ! !,,&& # D T j "+6O$!Q)A,!QOO  KKJDIIWZ[`Wa b [M ! 1eU#MM). _ %D(IQmmK000 _ixS\&] ]^ _;[@K !,PN1 ] _ 5C IJNN#A499cRLL!GTXZ]^  _sH E>E>E>H FFH-F  HF?HF!F(4H F*F1+HFH"F2F 3F;H HF H(A"H HHHc .K |j|jj|||d{}||y7 #t$rI}tj d|j |d|tdt|Yd}~yd}~wwxYww)zBatch-send images; a failure is logged (never raised) so other attachments still go. The batch result feeds ``record_delivery`` so media-only turns report their real outcome instead of FAILURE.)rRrr|rLNz[%s] Error batching images: %sTr Fr) rbr{rRrOrrLrrrF)rrrr|rLrrY batch_errs rrz%BasePlatformAdapter._send_image_batchps  44 ,,Vh\g5iiF  i  NN;TYY \`N a JuC NK L  s;B,A>A BA B ?B B BBrz&tuple[SendResult, BasePlatformAdapter]cK|j|j}tjd|jt ||jj |j|||||d{}|j|jj |||d{} ||j|| ||d{| |fS7W7(7 w)uoThe delivery-ledger bracket every final text goes through, on the CURRENT transport (a reconnect may have replaced this adapter): record the obligation before the send, send with retry, finalize from the result — so a refused final (flood control, a dead transport) leaves a ledger row the boot sweep / runtime redelivery can act on. ``event`` supplies the source and the ledger identity (``ledger_message_id`` or ``message_id``). Returns the result with the adapter that sent it: that adapter owns ``result.message_id`` (an ephemeral delete must go to the same transport).z&[%s] Sending response (%d chars) to %sNr5) r7r{rrrrrRrr,r) rrrWrr|rrrrrYs rsend_final_ledgeredz'BasePlatformAdapter.send_final_ledgereds 77 E <>N>S>S %u||';'; =">> ; .>@UWW '88LL((,\d9ff  $44]FEScd d d''' Wf es6A3C5C 60C&C'CC CCC ephemeral_ttlc K|j||||t||d{\}} |||rR|dkDrL|jr?|jr2| j |j j |j|yyyyy7dw)zSNormal-lane final: the ledger bracket plus the message-id owner's ephemeral delete.)rrNr)rrrrvrr{rR) rrrWrr|rrrrYrs r_send_final_textz$BasePlatformAdapter._send_final_texts*.)A)A ; h,U3K`*B*b$b    ]Q.6>>fFWFW  7 7 8L8LfN_N_an oGX>.= $bs$B B A%B rFcjKd} t|}t|rt|ddnd}|j|j5t |rdnW|j dt |jd|dd|jj|jj|}ddd|S|j|jj|| d{|S#1swY?xYw7#t$r.}tjd |j|d Yd}~|Sd}~wwxYww) zTell the user a turn failed rather than leaving radio silence (last resort: a failing notice is logged, never raised). Returns the thread metadata used.Ni,zno details availablezSorry, I encountered an error (z). z2 Try again or use /reset to start a fresh session.zSorry, I encountered an error.rr*z2[%s] Failed to send error notification to user: %sTr )rrFr3r{r=rrrJrcrRrrOrrr)rrrF_thread_metadata error_detailrrs r_notify_turn_errorz&BasePlatformAdapter._notify_turn_errorsF  l9%@ +.q63q6$3<7ML++ELL9 u"7">$DDUDU5d1g6F6F5GtL>ZHH4%*\\%:%:ELLDXDXcs EVEu u ''))ELL$8$8'Td)e e e  u u f l LLDdiiQ[fj  l l ls`D3AC9A&C+- C98D39+C9$C7%C9)D3+C40C99 D0#D+%D3+D00D3 extractedr anything_sentc BK|j}|j|j|j} }}|rGtj d|j t||j|||||d{|j||| |j|||d{|sn|sk| sh|se|jjrJtjd|j t|j|jjyyyyyy77ww)zSend extracted image URLs, MEDIA files and bare local files (human-paced), then fail loudly if a non-empty response produced nothing deliverable. Attachment results feed ``record_delivery`` so the turn outcome reflects them.z1[%s] Extracted %d image(s) to send as attachmentsN)rrLr|rz[%s] response_delivery_dropped: non-empty response (%d chars) produced no delivered message or attachment for %s (empty after extract, recovery yielded nothing).)rrrrrrrrrrrrrzrr{rR) rrrr|rrrLrrrs r_deliver_attachmentsz(BasePlatformAdapter._deliver_attachmentss ++- +4+;+;Y=R=RT]TiTi[   KKKTYYX[\bXc d((+_ _ _-- ; '0'K'K#h.Y Y Y;+9K`K`KfKfKh LLSTXT]T]Y223U\\5I5I KLi+; ` Ys%A9D;D<)D%D&A6DDct|jddr t|ddryd|i}|j|jdddr||d<t j |j|j jfi|S) zSpawn the typing-refresh task, or None when ``typing_indicator=False``. ``stop_event`` is passed only when the (possibly overridden) ``_keep_typing`` accepts it.typing_indicatorT_heartbeat_session_idNr|rFrJ)rarirHrrrr{rR)rrrr|rs r_start_typing_refreshz)BasePlatformAdapter._start_typing_refreshs t{{$6=PgimAn",h!7   t00,uVZ  [#2F< ""#44#4#4U\\5I5I#TV#TUUrc &Kd|v}|}|j|j5|j|\}}|j||}|j |\}} t | j } |r4tjd|jt|t|g} |s'|j| \} } |j| |} ddd r|j|d{nd} | rU| D cgc] } | | vs|  } } | r?tjd|jt| | | D cgc] } | | vs|  } } | r*tjd|jt|  sbs`| s^s\t |j }|rAtjd|jt||jj|} t!| | ||S#1swYxYw7 cc} wcc} ww) uSplit a handler response into deliverable text + attachments. Order matters: MEDIA tags → image URLs → residual directives → bare local paths (skipped for ephemeral notices so config paths stay text; unknown-extension MEDIA tags survive for the bare-path detector). History dedup is bare-path only, off-loop, fail-open. An emptied non-empty response is recovered.r\rz<[%s] extract_images found %d image(s) in response (%d chars)NzQ[%s] Suppressing %d bare local file path(s) already delivered in this session: %sz5[%s] extract_local_files found %d file(s) in responsez[%s] response_delivery_recovered: extract pipeline reduced a non-empty response (%d chars) to empty with no attachment; delivering recovered original to %s)rrrrrr)r3r{rrrr_strip_media_directivesrzrrrrrrrrLrRr)rrxrrWrforce_documentrrrrrrr' suppressed _recovereds r_extract_response_contentz-BasePlatformAdapter._extract_response_contents*+h6  ' ' 5 e$($6$6x$@ !K::;T_:`K#'#6#6x#@ FL3<@FFHL Z\`\e\egjkqgrtwyAuBCK(,0,D,D\,R) \">>{Xc>d  e"FF{SSS'+  %0AAL!AJA /04 3z?JX*5JQ'9IqJ J  KKOQUQZQZ\_`k\l m+0:@@BJ TUYU^U^";/1E1EG * !%f+#\gi iG e eTBKsT"HB6G7H8H9 H HH3H H H B#H7H< H Hc\K|j|t|dd}t|rqtjt j t5|}tj|r#t j|td{dddyy7#1swYyxYww)uRun the one-shot post-delivery callback (bounded, errors swallowed). The generation is read HERE — stamped on the interrupt event DURING the handler await; an earlier snapshot would let stale runs fire a fresher run's callbacks.rNrr) rrar`rPrQrrrOrArr'_POST_DELIVERY_CALLBACK_TIMEOUT_SECONDS)rrWr_post_cb _post_results r_fire_post_delivery_callbackz0BasePlatformAdapter._fire_post_delivery_callback s22 GO=UW[$\3^ H $$W%9%99E j'z &&|4!**5tAjB|dddc|s9|7t;j<t>5tAjB|ddd| s(| jDs| j.s| jFs|s|r%|jI|jj(| r!|s|jK||| | || |d{|jM|| | xs|| d{rn tO| }|jPjS|jU|tW|d d| xsd |j d ||rtXjZntXj\d{|j_|d{||jvr6|jja|}t j'd|j$|jc||je|jj(||d{|jg|| |je|jj(||d{|ji||d{|je|jj(d|dd{|j_|d{|jk||y |je|jj(||d{|ji||d{|je|jj(d|dd{|j_|d{|jk||y717#1swYxYw7=77#1swYxYw#t;j<t>5tAjB|dddw#1swYwxYwxYw#1swYxYw72777y7777l7V#tjl$r^tjn|jpv}|j d ||rtXjrntXj\d{7tt$r}|j d |tXj\d{7t jwd|j$|d|jy||d{7xs|}t|tzt|frYd}~Ad}~wwxYw7777#|je|jj(||d{7|ji||d{7|je|jj(d|dd{7|j_|d{7|jk||wxYww)z4Background task that actually processes the message.FcD|dxstt|ddyy)NTrF)rra)rYdelivery_attempteddelivery_succeededs r_record_deliveryzIBasePlatformAdapter._process_message_background.._record_delivery2s/!%)"%7%b4PY[`@a;b""rrNz:[%s] Suppressing stale response for interrupted session %sz0[%s] Handler returned empty/None response for %srr)rrrrr`rz([%s] Processing queued follow-up messagerr)r|rz[%s] Error handling message: %sTr )?rzrrrrrrrlr3r{r=rrr(rr{rrrrrRrrrrrrr-rrPrQrRrCrrrrrrrrrrrar<rrrkr`_clear_session_guardrrrrr rr CANCELLEDrrr SystemExitKeyboardInterrupt)rrrWr rrrrxr_ephemeral_ttlrrr_final_thread_metadata _tts_paths_tts_requested_path_tts_caption_delivered _tts_index _tts_path processing_okrexpectedrFr r s @@rrz/BasePlatformAdapter._process_message_background.s277/ c //33K@SGMMO-<k*5e<00IYZ f D++,A5I I I!22599H++ELL9 $(/#H $%/x$H !'+'='=h'G $HnO224H^H^9^ XZ^ZcZc') OQUQZQZ\a\h\h\p\pq"&"@"@e[H]#A#__ ,5,B,BIDYDYk )>?O)P&24d/ ''{O\;X<@//{L:P-~?OQQQ//9&<"4"N8N$406663E.dS[nJ\M  / / 7 78T8TW_6NPTU9U99# " $++(%-:!))@Q@Y@Y[ [ [ // < < <d444 $ 6 6 : :; G  GS))+6// 0D0Dk\l/mmm&&}kB"++ELL,@,@+Xh+i i i33KQ Q Q++ $$d5EUV,X X X// < < <  % %k? C=5.++ELL,@,@+Xh+i i i33KQ Q Q++ $$d5EUV,X X X// < < <  % %k? CK J9 $ $_7d 3.11Z0091IIi011177Q6 [ = n& j Q X =-%% ++-1O1OOH++(%/7!++=N=V=VX X X  ++,DeM^MfMfg g g LL:DIIqSWL X&*&=&=eQ&G G G\L\ !j*;<=>   j Q X = ++ELL,@,@+Xh+i i i33KQ Q Q++ $$d5EUV,X X X// < < <  % %k? CsRA)`.Y V4Y V7Y <V: CY W AY W  Y ;WW WY 8W'Y 5X% A5Y X2!Y "X5#BY )X8*Y X;B Y X>Y %+`Y`*Y+0`Y`4Y 5` ]" +`8]9`]0`]`]`4Y 7Y :W? Y Y WW Y X"7X X"X X""Y %X/* Y 5Y 8Y ;Y >Y ``` ` A)]6Z97]$])[,*=]'\*( ]]"]]"````",`^`)^,*1`_`5_86``rc |j||j|tj|j ||y)u Hand the session to a fresh task for a queued follow-up — never recurse (chained follow-ups grew the C stack to SIGSEGV). Clearing (not deleting) the Event keeps the guard live for concurrent inbound; ownership moves so stale-lock detection works.N)r rrrr)rrrWs rrz%BasePlatformAdapter._spawn_drain_tasks@ !!+.       @ @P[ \ ] _rc`|jj|}||jyy)zUClear (not delete) the session's interrupt Event so the guard stays live for inbound.N)rzrclear)rrW_actives rr z(BasePlatformAdapter._clear_session_guards,''++K8   MMO rc|j||||jvr|jj|dyy)uRelease a finished owner task's guard, dropping its ``_session_tasks`` entry ONLY if the guard was released: after a concurrent guard swap the done-task entry lets ``_session_task_is_stale`` heal the orphan. Release-then-conditional-delete is the #48300 fix: when a concurrent path (reset/new command, drain handoff) swapped ``_active_sessions[key]`` to a different guard, ``_release_session_guard`` skips on the guard mismatch and the lock stays installed. If we deleted ``_session_tasks`` unconditionally (the old order), ``_session_task_is_stale`` would later see no owner task and report "not stale", so the orphaned guard would never be healed — a permanent session deadlock. Keeping the done-task entry when the guard survives lets the on-entry self-heal detect the stale lock and clear it on the next inbound message. rvN)rzrzr~r`)rrWrs rrz2BasePlatformAdapter._cleanup_finished_session_tasks@ ##K#G d33 3    # #K 6 4rc KtdD]}|jDcgc]}|jr|}}|snn|D]-}|jj ||j / t jt jd|Dddidd{tjt 5d d lm}||j&d ddd|j)j+D]}|j-|j|j|j.|j&|j0|j)fD]}|j3ycc}w7#t j$r6tjd|jtd |DYwxYw#1swYxYww)z}Cancel in-flight background tasks (shutdown/replacement); 5s bound each, stragglers are untracked and left to unwind.c3FK|]}tj|ywr)rr rts rrz>BasePlatformAdapter.cancel_background_tasks..s$F1W^^A%6$Fs!return_exceptionsTr\rNzo[%s] %d background task(s) did not exit within 5s; releasing tracking and letting them unwind in the backgroundc3>K|]}|j ywr)rr"s rrz>BasePlatformAdapter.cancel_background_tasks..s-Jq!&&(l-JrGr)flush_pending_to_fileadapter_shutdown)r)rrrrrrrrgatherrrrLrsumrPrQrOgateway.shutdown_flushr&r{rYrFrr~rzr)rrrtasksr&rhbuckets rcancel_background_tasksz+BasePlatformAdapter.cancel_background_taskss q A&*&<&<PdDIIKTPEP ..2248   &&NN$F$F_Z^_!!!    + U D !$"8"8AS T U..0779 !E     !--t/M/MtObOb--t/D/DdF_F_Fac F LLN )Q!''  ^#yy#-JE-J*JL    U UsdGE:E:8G24F&E?'F+GG !BG?FAG G G  G GGc\||jvxr|j|jS)z3Check if there's a pending interrupt for a session.)rzrr~s rhas_pending_interruptz)BasePlatformAdapter.has_pending_interrupts,d333c8M8Mk8Z8a8a8ccrc:|jj|dS)z0Get and clear any pending message for a session.N)r{r`r~s rget_pending_messagez'BasePlatformAdapter.get_pending_messages%%))+t<t$r&tjd |j|d YkwxYw)zBuild a SessionSource; with ``gateway.profile_routes`` configured the matching profile is stamped on ``source.profile`` for per-profile HERMES_HOME isolation.r c |r t|SdSr)rFrs r_optz.BasePlatformAdapter.build_source.._opts!&3u: 0D 0rNr`)rcrRr2rrrKr3rmr4rar5rJror6rrvrFr)ProfileRouteRejected)rTzAProfile resolution failed for %s/%s, defaulting to active profiler )rxr7r8r9rf)r-rFrrcrzrar[gateway.profile_routingr=_profile_name_for_sourcer>rOrrLweakrefref_transport_adapter_refrc)rrRr2rrrKr3rmr4rar5rJror6rrvr7r8r9r<fieldsrrxrcr=r{s r build_sourcez BasePlatformAdapter.build_sourceso 18C= 1]]CLIYb#Ow"}D#g,4 ?"(b//19T{#FT(^(^D4HJ') &6= *7'    * D F--FF!+F+]GL]O\RR/3F8PR )0 D(9%(>% ( .)-& Fb#}}gF Fs)*DD?+D?>D?c Kyw)zrGet information about a chat/channel; dict with at least ``name`` and ``type`` ("dm", "group", "channel").Nrfrs r get_chat_infoz!BasePlatformAdapter.get_chat_inforrcy)zPer-source toolset override REPLACING ``platform_toolsets.``, or None (default); validated via ``_get_platform_tools`` (webhook adapter pins per-route).Nrf)rr{s rtoolsets_for_sourcez'BasePlatformAdapter.toolsets_for_sourcesrc|S)zrFormat a message for this platform (override for e.g. Telegram MarkdownV2); default returns content as-is.rf)rrs rformat_messagez"BasePlatformAdapter.format_message!s r max_lengthrzCallable[[str], int]c |xst}|||kr|gSd}d}g}|}d}|r|d|dnd} ||z || z ||z } | dkrtd|dz} || ||z||z kr/| |z} |t|d |d r| |z } |j| n^|tur t || |n| } |d| } | j d}|| dzkr| j d }|dkr td| }|d|}|j d |j d z }|dzdk(r|j d }|d kDr/||dz dk(r$|j d d |}|d kDr ||dz dk(r$|d kDr8t|j d d ||j dd |}|| dzkDr|}|d|}||dj}| |z}t||du|xsd\}}|r|nd}|j|r||zn||rt|dkDr2t|Dcgc]\}}|d|dzdt|d}}}|Scc}}w)aSplit a long message into chunks preserving code blocks: a split inside a fence closes it at the chunk end and reopens it (same language tag) in the next; multi-chunk output gets ``(1/3)`` indicators. ``len_fn`` overrides ``len`` (``utf16_len`` for Telegram). z ```Nz```rLr`rr]Trr}`z\`\rrrgr) rrZr5rrrfindcountrDr-)rrKr_lenINDICATOR_RESERVE FENCE_CLOSErr carry_langr1headroom final_chunk _cp_limitregionsplit_atrbacktick_countlast_bt safe_split chunk_body full_chunkin_codelangrrs rtruncate_messagez$BasePlatformAdapter.truncate_message&s } =J &9   $( -7-Cs:,b)F!$55V DtKGXXH!|q*/2F|d9o->O1OO$y0 ).? 4Q[.\]^._;.K k*BFS"9h=V^ z *F||D)H)q.(!<<,!|q),!)8,I&__S1IOOE4JJN!Q&#//#.ki! &<&D'ooc1g>Gki! &<&DQ;!$!Q8)//$PQSZ:["]J!IN2#-"9H-J!(),335I*,J-j*D:PR\Rb`bcMGT!(dJ MMg*{2: NYZ v;?IRSYIZ[XQr!a%#f+a8[F[ \s!I)NNNrrrrr:r N)rj)rjN)dangerous commandF)rdNTTFrYr`)NNNN)r`N)rnNN)NNr]rn)NrsNNNNNNFNNNNFFN)rN(rJrKrLrMr\rrOr]rFr-rbrcrdrerfrgrhr[r4r3rrr/rNrrrrrr+r.rrrrrrrrrfatal_error_messagefatal_error_codefatal_error_retryablerr0rrrrrrrrr r!r$r%r&rvr/r1rr5MessageHandlerr7r9r<r:rBrDrFrIrMrQrTrWrardrirjrkr[rlrmrorprqrxr|rr~rrrrrrrrrrrrrrrrrrrr6rrrr7rrrrr staticmethodrrrrrrr r r,r1r classmethodrrrr0rr"r3r7r;r=rHrKrbrZrYrXrrrtrvrr}rrrrrFrrQrbytesrrrrrrrrrrWrrrrrerdrrrrrrrrrrrrrrrrrrrr<rrrrr$r(r/r>r3r7r,rCr>r?rGr.rrYr^rerirqrlrkrurzr|rrrrrrrrrrrrrrrrrrrrrrrrrrrr rr-r/r1rDrFrHrJrbrfrrrcrcs& V"'$&!&$&*s*(3-*D*%)T(!&$& ###,1"D0 $# #(4'N@/~@/@/D# 4 a3a3a #s#xs 7K# D4UY!%!#9A$sCx.9Q#*.SHTRUWZRZ^D\hl (3-?CZZsZSZ#+DcN#;ZGQZ +# +S +T +(d(/$sCx.#)> $)O PQ/VZ/%3%#:N1O(P%UY% I<IDI&-NPYZ^P_>_5`,a)fj)- 3 x}*Mt*S!TU-Z^- X\7;OT9=Xc]xPS}'/}HL)1#BJ4.4,s,t, lhsmll K(3-K H_$=0 n  T8C=THSMT>!c '*u*-0#U0*-,%(U(/2%u2+.!5.RUtx s U % bjkpbq ~C d66367/7c7.^.._(}Xn-E}%} 9398N+C9)3s3t3 >3>4>6$5C$5HSM$5L,#,RZ[^R_,\49FTFdFF ,,OS8<`#``x}`%d38n5`AK`` $)D(#SXVY]PU@@(+@69@HL@Yc@ C S T W3W #3UX]a& /t4J4 M3 #NC#34B7c7%%ccNCsFFSF#F#FF ss"C""c"8T\^a]bdg]gThKi"ux"&#S##QT#u3u Z_ I I), IRV Icf I$N\b)dtCH~d1:H(MtCH~M d&* d;? dOS dX\]bcfhkmpcp]qXr ddtdd Pcgk"==%(=7:=IL=4S>*=DH=`d==  = @7K@PZ@ (T ( ( (He ( (.2@@#&@14@CF@TW@4S>*@6@@@DQQ&)Q4*g6@g ```XXXO8O3O4O$OSWOO((t(IL"F"F$(sCx$9"F4S>*"F@E"FPZ"FJFJMQdd'*d5=c]d3-d2:4S>2JdV`dJNMQmm+.m9A#m3-m2:4S>2JmV`m:s:t::BBd5c?.CS.H(IBB6GKMQUU(+U6>smU3-U2:4S>2JU`jUdh F F!$ F,/ F:= FHPQT  F3- F+3DcN+C FS[\_S` F  F7;T\` W W%( W *  W594RV77$'7 7&Y]gkvzC#@HIL@MPd]aPfjP =S =S =WcWsWWcQU ]a*5AI$sTWx.AY $ %I0BI5IUYI]b51C5UY5fj5c0Bc8TW=cdhcMhlM3:MCMbeMqtw{q{MRswRcDjRWZRmpR}AR knrktkRUkhkkw{k GKMQUU(+U6>smU3-U2:4S>2JU`jUZ^W[AEk3k3kRUk'/}kGOPS}k&.tCH~&>kT^kBG-1ff(+f:>f4S>*f6:f4GKMQZZ(+Z6>smZ3-Z2:4S>2JZ`jZK3KSK(SV-KKDFDHrcr-5d4j-ArMQRWX[]aXaRbMcrr,S,$s),, ,s,s,,*,,,,(&s&uT%T 2B-CS-H'I&&PUUUUHSHU49c>-BHH@PT>B&F#&F&F'.}}t';&FGK&FR@D1QU111)0)<11-019=1$E#EE )S)T)-c-d-;C;#;ae;QUMM*2MCF:MY]M( X (2y;N2O  =A 8 8/2Tz 8EMPT_ 8!%J $#Ix}#!%K#%=|==2,2IZ2_c2*OCOOsOW[OH8C=HTHH HhsmHHH[#[4[[ ,# ,% s8J2K ,]a^,^HUXM^ei^" ,H],C ,h}.EJ_"[_25zz%(z43_!3_043_CG3_$(3_7<3_HLSRUX3_"3_'+3_j  !  +/  ;?S>  X]  !  &*  "@E(!(03(CF(RVWZ\_W_R`(3-(8<( 2(, p! p03 pCF pRVWZ\_W_R` p# p47 pJR pW[ p l } QYZ^Q_ .K KI]K-1#s(^KOSK4<KAEK* V< V'-- V(0 V;CGLL;Q V0i0iL0i_b0iBF0iK_0id jc jT[TaTa jfj jNNgmmNX\N0tD|tDRUtDZ^tDl_|_#_RV_ 7719'--1H7MQ7$<ddd=s=x 7M= OSBFEI]bBFJNCH26**'/}*HK*#*2:3-*C=*6>c]*c] *9A *W[ * 3- * 3;3- * ! * ;C3- **=A*#+3-*44/htCy>Q cc 9=DH<#<3<!)*@!A<MQRUY<<rrc)rz asyncio.Taskr Nr)F)r)r$)r$r])r)rr])r!rerc)Nr`(rMrrPrArloggingrvrCrErAsocketrrGrrArrrr@abcrrrVrutilsragent.proxy_bypassrrr getLoggerrJrrr frozensetrrrr_TELEGRAM_VOICE_EXTSrFrNrZrr!_HISTORY_MEDIA_LOOKUP_MAX_WORKERSBoundedSemaphorerrdrrrirrrr~rrrrrrrrrrrrr0rrvrr rrrr!r% dataclassesr&r'pathlibr)typingr*r+r,r-r.r/r0r1r2r-insert__file__rsrgateway.configr3r4gateway.platforms.helpersr5$gateway.platforms.base_exec_approvalr6r7r8r9gateway.platforms.eventr:r;r<rr=gateway.sessionr>r?gateway.session_transcriptr@hermes_constantsrArBrCrrDrFrQr[r_*GATEWAY_SECRET_CAPTURE_UNSUPPORTED_MESSAGErarcrsrzrrrrrlrrrcleanup_image_cacherrrrrrrrrcleanup_audio_cacherrrrrcleanup_video_cacherrrr r rcleanup_document_cacheget_screenshot_cache_dircleanup_screenshot_cacherrr,MEDIA_DELIVERY_ALLOW_DIRS_ENVMEDIA_DELIVERY_TRUST_RECENT_ENV'MEDIA_DELIVERY_TRUST_RECENT_SECONDS_ENVMEDIA_DELIVERY_STRICT_ENVr&rQr]rlrmrrrhr)r%r2r7r;rErSr[r^rarnrur|rrxrrrrrrrrrrrrrrrrrr_TEXT_INJECT_EXTENSIONSrr?rOrr_MEDIA_EXT_ALTERNATION_MEDIA_CJK_TERMINATORSrrurorVrrYr^r`rarirmrqrkrrxryr{rfrrrrrritemsrrrrrrrrPatternrrrrDSEND_ERROR_KINDSrrrrrr rrrr9r rirHrSrUrZrrc)rrrs000rrs`   #!%a   8 $X , l |E)* IJ BC "+VV,<"= &'!238=R6:!!!s!'3!?K!D+/'(+%%&!"<)"<"<=^"_$$ &/ $;&*"%("S4ZSWZ^S^:UU D4KD.cDj.2EcElEcE Ic IT Id IC&+++ # s s 7#7c7c7    C$J*.cDIoc3h&G#c(&RUY&Y.^b.$(JHL!JDjJS /E#s(O3c#h>EJd J'*DjJ8   C$J 4 8#8$8646 ]d ]uT4Z7H ]I3Id IVZI (^^^3tH~--/77:;<37ccPP?<:UU)    K]aKd KKWZKfilpfpK=A:RV:#c(:QTW[Q[:69:LO:[_:b+i QQQ I#IISI*l!?#4[S[%,f f!f8@ fQUfsu*s3STW*,@  ,?((WEWdWsEcFFSFcFFUFF#F SsSQT^a58=@<+?  },>((__S_c_FUFF#F P02 &( 9"C*M'; Y_o7IK_J_!^_J I*GH J03,#[($CCc3hC Km]D[4bggll6K^6_ "'',,w8H"IGGLL./L!\%2*$=\ANk@Z\ gd4j gtDzTT T_d_ DJ $t* :tDz:XXcT c 'd4j'16etPXY]P^    u$dt''c'3'T%d *;%<6T#Y> %ADAn4n # S T$Z  Fc F4: F T%d *;%<  JT J JS JUY J&d&&V^_cVd&R$s$$hsm$RBJJAB777 >BC&.tDz&:FNsm* C  C$o C7=| CMSU_ C L C!#5 C7=?P C  C"(); C>EFX C L C!, C178I C  C #)*D C  + C V CQ X  \ C <| "& (U38_ &)UAT)U[^hl"mn2a!rzz>@VWZ  #9936F-#F-y  .s )k8