߲jfdZddlmZddlZddlmZmZddlmZm Z dZ d dZ d dZ Gd d eZ y) uOpenAI native web search — declares the Responses API server-side ``web_search`` built-in. Config: ``web.search_backend: openai-native`` (or ``web.backend``). Auth: openai-codex OAuth (``hermes auth add openai-codex``); no API key of its own. Unlike every other provider here, this one never executes a search itself. Selecting it tells the Codex Responses transport to declare the provider-executed ``web_search`` tool (``{"type": "web_search"}``) in place of the client-side ``web_search`` function, so the model drives search server-side. The transport performs that swap; this class exists so ``web.search_backend`` has a real provider name to point at. Auth gating lives here rather than in the transport because the transport must stay reachable for a user who configured this backend but has not signed in yet — they get the clear "sign in" error from :meth:`search` rather than a silently different backend. ) annotationsN)AnyDict)BaseWebSearchProvider search_failzopenai-native declares OpenAI's server-side web_search tool; it cannot run as a client-side search and requires the Codex Responses transport (provider openai-codex). For client-side search use firecrawl (default) or another backend.cHt|tr|j|SdSN) isinstancedictget)objkeys G/home/ubuntu/.hermes/hermes-agent/plugins/web/openai_native/provider.py_dgetrs%c403773<:d:c ddlm}|dz }|jsytj|j d}t t t |ddd }tt |d xsd jry t t |d d}t|txrtd|DS#t$rYywxYw)uxCheap probe: True when openai-codex OAuth tokens are *likely* usable. Mirrors ``tools/xai_http.has_xai_credentials`` — deliberately avoids ``resolve_codex_runtime_credentials`` (disk locks, OAuth network refresh), because this runs on every ``hermes tools`` repaint. Checks, fast-to-slow: ``providers.openai-codex.tokens.access_token`` in ``auth.json``, then any ``credential_pool.openai-codex`` entry carrying an ``access_token`` (pool-only multi-account grants never write the providers singleton). Returns False on any exception so a corrupted auth store cannot block other availability scans. r)get_hermes_homez auth.jsonFz utf-8-sig)encoding providersz openai-codextokens access_tokenTcredential_poolc3K|]C}t|txr-t|jddxsdj Eyw)rrN)r r strr strip).0es r z(has_codex_credentials..9sB1 UVJq$  PCnb(A(GR$H$N$N$P P1 sA A ) hermes_constantsrexistsjsonloads read_textrrrr listany Exception)r auth_pathstorerentriess rhas_codex_credentialsr+#s4#% 3 ! 9.. .DEuU5+6GR uV^,2 3 9 9 ;e%67H'4( S1 Za1 .   s C A,C 9C CCc2eZdZdZdZdZddZd d dZd dZy) OpenAINativeWebSearchProviderzMarker provider: the Codex Responses transport swaps the client ``web_search`` function for the server-executed built-in when this backend is active.z openai-nativez*OpenAI Native Web Search (Codex Responses)ctSr )r+)selfs r is_availablez*OpenAINativeWebSearchProvider.is_availableGs $&&rc ttS)uNever called on a successful native turn — the transport replaces the tool before the request goes out. Reached only when the active transport cannot host the built-in, so fail loudly instead of returning an empty result set.)r_UNSUPPORTED_MSG)r/querylimits rsearchz$OpenAINativeWebSearchProvider.searchJs+,,rc8ddlm}||jdddS)Nr) setup_schemanativezSearch runs on the provider side (needs the Codex Responses transport + an openai-codex login); search only, extraction still uses another backendr)plugins.web._commonr7 DISPLAY_NAME)r/r7s rget_setup_schemaz.OpenAINativeWebSearchProvider.get_setup_schemaPs'4     a    rNreturnbool))r3rr4intr=Dict[str, Any])r=rA) __name__ __module__ __qualname____doc__NAMEr:r0r5r;rrr-r-@s#N D?L'-  rr-)r rrrr=rr<)rE __future__rr"typingrrr9rrr2rr+r-rGrrrJs: # BX;: $9 r