߲jeUdZddlmZddlZddlZddlmZmZmZm Z ddl m Z m Z ddl mZejdZdZd Zd Zd Zd Zd ZdZd ed <d2dZd3dZd3dZdZd4dZd5dZd6dZd6dZ d7dZ!d7dZ"d6dZ#d8dZ$d9dZ%d6dZ&d7dZ'd7dZ(d:dZ)d;dZ*dd"Z- d? d@d#Z.d$Z/e0hd%Z1e0hd&Z2dAd'Z3d2d(Z4dBd)Z5dBd*Z6dCd+Z7d2d,Z8d-Z9e0hd.Z:dDd/Z;dd0 dEd1Zc 2tjd||y)zQAuto-deny (safe default): returns 'deny' so the child sees a recoverable refusal.zeSubagent auto-denied dangerous command: %s (%s). Set delegation.subagent_auto_approve: true to allow.denyloggerwarningcommand descriptionkwargss r_subagent_auto_denyr *s NNo rc 2tjd||y)zPAuto-approve (opt-in YOLO via delegation.subagent_auto_approve): returns 'once'.z1Subagent auto-approved dangerous command: %s (%s)oncerrs r_subagent_auto_approver#2s NNFQ\] rc`ttjddrtStS)zZCallback for subagent worker threads per delegation.subagent_auto_approve (default False).subagent_auto_approveF)r rgetr#r rr_get_subagent_approval_callbackr(7s$tvzz"95AB%% rctj|}| ||S|rt j|nd}|r ||S|S#ttf$rtj |||cYSwxYw#ttf$rY|SwxYw)zdelegation. > > default. A config value that fails ``parse`` logs ``invalid_msg`` (``%r`` = the value) and yields the default; an env value that fails is silently ignored.N)rr& TypeError ValueErrorrrosgetenv)keyenv_varparsedefault invalid_msgvalenv_vals r_knobr5=s &**S/C  : %,bii G > ! N:&  NN; ,N :&   N s#A A8 'A54A58B  B cft|s$dt|<tj|g|yy)zKModule-global one-shot warning (``flag_name`` is the ``_*_WARNED`` global).TN)globalsrr) flag_namemessageargss r _warn_oncer;Os. 9Y # )w&& rc"tdddddS)z\delegation.oneshot_max_children (total children per finite one-shot session; 0 = unlimited).oneshot_max_childrenNc,tdt|S)Nrmaxintvs rz+_get_oneshot_max_children..XsAs1vrzJdelegation.oneshot_max_children=%r is not a valid integer; using default 2)r5r'rr_get_oneshot_max_childrenrFUs &>T rctdddtdt}|dkDr&tjd t dd||S)zdelegation.max_concurrent_children > DELEGATION_MAX_CONCURRENT_CHILDREN env > 10. Floor of 1 is the only bound enforced; there is no ceiling. max_concurrent_children"DELEGATION_MAX_CONCURRENT_CHILDRENc,tdt|S)Nr r?rBs rrDz._get_max_concurrent_children..csSVWXZ]^_Z`SarzLdelegation.max_concurrent_children=%r is not a valid integer; using default r _HIGH_CONCURRENCY_WARNEDzxdelegation.max_concurrent_children=%d: each child consumes API tokens independently. High values multiply cost linearly.)r5 _DEFAULT_MAX_CONCURRENT_CHILDRENrr&r;)results r_get_max_concurrent_childrenrN]s[ !#GIa( VWwVxyF {tvzz";<H &)ABH  MrcHttjddS)zdelegation.independent_completions (bool, default False): split a background call into per-task / per-group completion messages that land as each finishes. Off = one consolidated message when the whole call is done.independent_completionsFr rr&r'rr_get_independent_completionsrRns 46::&?G HHrcHttjddS)zdelegation.worktree_isolation (bool, default False): each child gets its own git worktree off the parent's HEAD so parallel children never contend for one working copy. Git-only and local-backend-only; otherwise silently ignored.worktree_isolationF)boolrr&r'rr_get_worktree_isolationrVss  /7 88rcfddlm}tjd t dd|S)aHConcurrency cap for background delegations == delegation.max_concurrent_children. At capacity a new async dispatch is REJECTED (not queued) so a runaway model can't pile up unbounded background work; the caller then runs synchronously. A leftover ``delegation.max_async_children`` key is ignored with a one-time warning.rrNmax_async_children_LEGACY_MAX_ASYNC_WARNEDzdelegation.max_async_children is deprecated and ignored; delegation.max_concurrent_children now caps background delegations too. Remove the stale key from config.yaml.)rrNrr&r;rXs r_get_max_async_childrenr[ys6A vzz&'3 &)F ( ))rc>t|}|dkrdStd|S)uJSeconds → None (<= 0 disables) or max(30, value). Raises on non-numeric.rNg>@)floatr@)rawparseds r_parse_timeoutr`s# 3ZFQ;45Cf$55rc0tddttdS)uInactivity cap for one child (seconds of NO progress), or None (default: no cap). Failures should come from what the child does (API/tool errors, iteration budget), not a stopwatch: the cap restarts on every sign of progress — a completed call, a tool change, an activity-clock tick — so a slow provider serving multi-minute completions never loses a live child, and a child frozen for the whole window is still caught. A configured value pre-empts nothing the heartbeat staleness monitor would not also catch. delegation.child_timeout_seconds > 0 opts in (floor 30 s); 0 or negative disables. Env fallback: DELEGATION_CHILD_TIMEOUT_SECONDS.child_timeout_seconds DELEGATION_CHILD_TIMEOUT_SECONDSzUdelegation.child_timeout_seconds=%r is not a valid number; using default (no timeout))r5r`rr'rr_get_child_timeoutrds !C^Uj_ rc<d}tdd|tdtS)zdelegation.max_spawn_depth floored at 1 (no ceiling). Depth 0 is the parent; agents at depths 0..N-1 may spawn, depth N is the leaf floor. Default 1 is flat. Each extra level multiplies API cost.ct|}|tkr tjd|ttt t|S)Nz6delegation.max_spawn_depth=%d below floor %d; using %d)rA_MIN_SPAWN_DEPTHrrr@)rCivals r_flooredz&_get_max_spawn_depth.._flooreds81v " " NNSUY[km} ~#T**rmax_spawn_depthNzDdelegation.max_spawn_depth=%r is not a valid integer; using default )r5 MAX_DEPTH)ris r_get_max_spawn_depthrls)+ 49 NykZ rctjdd}t|tr|St|tr |j j dvSy)z]delegation.orchestrator_enabled kill switch (default True): False forces every child to leaf.orchestrator_enabledT>1onyestrue)rr& isinstancerUstrstriplower)r3s r_get_orchestrator_enabledrwsL &**+T 2C#t #syy{  "&@@@ rcJttjddS)zFWhether narrowed child toolsets should keep the parent's MCP toolsets.inherit_mcp_toolsetsT)r1rQr'rr_get_inherit_mcp_toolsetsrzs 46::&<=t LLrcZt|xsdjjdS)N/)rtrurstrip)values r_normalized_runtime_urlrs% u{  ! ! # * *3 //rc|s|ryt|dd}t|tsy|jDcic]*\}}t|tst|t s(||,c}}Scc}}w)aEParent's endpoint-trust capability map for a child, or None. ``agent.capabilities`` is a trust decision scoped to one provider+endpoint: inherited ONLY when the child runs the parent's exact route; any provider or base_url override stays DEFAULT-DENY (matches the /model switch posture). See #94036, #97292. N capabilities)getattrrsdictitemsrtrU) parent_agentoverride_provideroverride_base_url parent_capsr.rs r_inherit_parent_capabilitiesrsc-,=K k4 ()4):):)< q:3 3PS@TYcdikoYpCJ qq qsA*A*!A*cPt|dd}t|dd}t|tr"|jd|jdfnd|t|ddt|ddfndf}|D].\}}t |}|s|j ds&||xs|fcS|xsd|fS) uc``(base_url, api_key)`` the parent is actually calling, taken from ONE source. ``parent_agent.base_url`` / ``api_key`` can lag the live client (old OpenRouter URL vs local Ollama; a fallback runtime the surface attributes have not caught up with), and pairing the live endpoint with the surface key hands the child a (base_url, key) pair that was never valid anywhere — an instant, non-retryable 401 (#90009). The live client's key travels with its URL; the surface attributes are used only when there is no live OpenAI-wire client (native Anthropic/Bedrock runtimes keep ``client=None``)._client_kwargsNclientbase_urlapi_keyNNr|)zhttp://zhttps://)rrsrr&r startswith) rsurface_base_urlsurface_api_key client_kwargsrlive_candidatesraw_urllive_keyurls r_inherit_parent_endpointrsL*:DAM \8T 2FISTacgIh  : & (9(9)(DEnzOUOaR ('&)T*JKgsO -6%g. 3>>"9:4_5 56  $ 66rcJddlm}||}||jr|SdS)z8``load_pool(key)`` when it holds credentials, else None.r) load_poolN)agent.credential_poolrhas_credentials)r.rpools r _loaded_poolrs)/ S>D#(<(<(>4HDHrcddlmm}|||syt|dd}t |sy|}t |t  xstfd|DS) zeProvider identity AND at least one entry for the child's endpoint; pools without entry metadata pass.r)%credential_pool_entry_serves_endpoint credential_pool_matches_provider)rFentriesNTc30K|] }|yw)Nr').0entry_entry_serves_endpointrs r z(_pool_serves_endpoint..s/m\a0Fuh0W/ms)rrrrcallablerslistany)rproviderrr entries_fnrrs ` @r_pool_serves_endpointrsZ ,D(X Ny$/J J lG'4( ( mC/mel/m,mmrct|dd}|s|St|ddxsd} |dk(rNddlm}|||}|y|t|d dt|d d}||dk(r |||k(r|St|S|-||k(r(|r t |||r|St j d ||t|} | |rt | ||sy| S#t$r>} |dk(rt j d || nt j d || Yd} ~ yd} ~ wwxYw)uCredential pool for the child: parent's pool (same provider), that provider's own pool, or None (child keeps its fixed credential). Custom endpoints all collapse to ``provider="custom"``, so they are matched by endpoint identity (the ``custom:`` pool key) — sharing the parent's pool across different custom endpoints would overwrite the child's delegated base_url on lease; an unregistered custom endpoint (no custom_providers entry) keeps the child's fixed credential rather than inherit the parent's. Custom endpoints are a special case: every direct ``delegation.base_url`` runtime collapses to ``provider="custom"``, so bare provider equality would treat two *different* custom endpoints as interchangeable and let the child inherit the parent's pool. We therefore resolve custom runtimes by endpoint identity (the ``custom:`` pool key derived from the base_url) and only share the parent's pool when both resolve to the *same* custom endpoint. See #7833. Named custom providers may share one gateway URL with different credentials, so the inherited ``requested_provider`` identity takes precedence over URL-only matching (#45763): the child must not lease the first pool registered for the shared endpoint. _credential_poolNrr|r r)get_custom_provider_pool_key) provider_namerrequested_providerzAParent %s pool has no entry for child endpoint %s; not sharing itzDCould not resolve custom credential pool for child endpoint '%s': %sz:Could not load credential pool for child provider '%s': %s)rrrrrrdebug Exception) effective_providerreffective_base_urleffective_requested_provider parent_poolparent_providerr child_key parent_keyrexcs r_resolve_child_credential_poolrsR(,(:DAK lJ=COp  ) J45GWstI 5 j$7w|]qswGxJ&?h+F:Kafpt}f}"" * *  "'9_'L%)>{L^`r)s"" LL\+-? A./   2;PQUWik};~ p  ) LL_asux y LLUWikn o  ps4C/C, C7C3CC D 4DD cddl}t|tr|nd}t|tr|nd}|s|sy|r|j|ni}|r|j|ni}|j d}|j dd}|j |t|tr't|tr|j |||d<n|||d<|xsdS)aMerge explicit ``delegation.request_overrides`` OVER runtime-derived ones. Explicit top-level keys win; ``extra_body`` is deep-merged ONE level so provider personality (e.g. ``thinking: {type: disabled}``) survives unless the explicit dict redefines that exact key. Both sides are deep-copied so transport-side mutation can't leak into the config/runtime cache. None when both are empty.rN extra_body)copyrsrdeepcopyr&popupdate)runtime_overridesexplicit_overrides_copymergedexplicit runtime_extraexplicit_extras r_merge_request_overridesrs -78I4-P)VZ/9:Ld/S+Y] %72CU^^- .F5Gu~~01RHJJ|,M\\,5N MM(-&:nd+K^,,|  #-| >Tr> google-genaigooglevertexbedrock>codex_responseschat_completionsanthropic_messagescJddl}|r|j|s t|yy)uA pinned ACP transport command must exist on PATH — refuse loudly rather than let the child silently fall back to another transport.rN)shutilwhichr+)rr9_shutils r_require_pinned_commandr:s'w}}W-!!.wrc ||||||d|S)zVThe child credential dict every branch of ``_resolve_delegation_credentials`` returns.)modelrrrapi_moderequest_overridesr')rrrrrrextras r_credential_bundlerAs%H(wdl. 27 rc &ddlm}|dj}t|d}d}||dxsd}|dk(r d|vrd\}}n|d k(rd \}}nd |vrd }dd lm}|dt vs|dr|d|vr|d}d}|dr9 ddlm} | |d|d} t| jdxsixsd}t|d||d|d|t||S#t$r$} tjd|d| Yd} ~ Kd} ~ wwxYw)zF``delegation.base_url`` branch: provider/api_mode from URL heuristics.r)_detect_api_mode_for_urlrr rz chatgpt.comz/backend-api/codex)z openai-codexrzapi.anthropic.com) anthropicrzapi.kimi.com/codingr)registered_api_modesrNrresolve_runtime_providerr requested target_modelrzjdelegation.base_url: runtime resolution for provider '%s' failed; proceeding without request_overrides: %sr)hermes_cli.runtime_providerrrvragent.transportsr_EXPLICIT_API_MODESrrr&rrrrr) rCexplicit_request_overridesr base_lowerhostrrrrrruntimers r_direct_endpoint_credentialsrHsZ E:$$&J Qz] +DH'* 6L:LH }!5!C>( $ $>( * ,'6}++* !J-SgSiBiZ=}  L.:UVW^U_`G $W[[1D%E%K L TPT   ' Ha mQy\8 !24NO    LL|* s   s8C## D,D  Dc|d} ddlm}|||d}|j d d }|std |d |j d}t |d |d|d|j ds5|s3|j jtvrtd |dt|dxs|j dxsd |j dtk(r|n|j d|j d||j dt|j d|xsi|t|j dxsgS#t$r}td|d|d|d }~wwxYw)zL``delegation.provider`` branch: full bundle via the runtime provider system.rrrrrz$Cannot resolve delegation provider 'z': z. Check that the provider is configured (API key set, valid provider name), or set delegation.base_url/delegation.api_key for a direct endpoint. Available providers: openrouter, nous, zai, kimi-coding, minimax.Nrr|zDelegation provider 'z]' resolved but has no API key. Set the appropriate environment variable or run 'hermes auth'.rz' is pinned to the 'z]' command, which was not found on PATH. Install it or choose a different delegation provider.ru' resolved without a base_url. Refusing to build a subagent with an incomplete credential bundle — check the provider's configuration / auth, or set delegation.base_url for a direct endpoint.rrr:)rr:) rrrr+r&rrurv_NATIVE_SDK_PROVIDERSr_RUNTIME_PROVIDER_CUSTOMrr)rCrconfigured_providerrrrrpinned_commands r_runtime_provider_credentialsrrsJ- H*5HWXY`Wabkk)R(G #$7#89M N  [[+N/0C/DE  @A KK #N#))+113;PP#$7#89V W   ' 2gkk'*2d&{{:6:RRX_XcXcdnXo J'++j*A -@!AC]^dbdT'++f*=*C%D  A 23F2Gs3%PP Q   sE E5E00E5c\dDcic]3}|t|j|xsdjxsd5}}t|jdxsdjjxsd|d<t |jdt r|jdnd}|dxsdjjt v}|dr|s t||S|ds(t|dddddtt|dd|St||Scc}w) uChild credential bundle from the ``delegation`` config section. Three branches: ``base_url`` set → direct endpoint (``api_key`` None means inherit the parent's key, so providers keyed outside OPENAI_API_KEY work); ``provider`` set → full bundle via the runtime provider system (same path as CLI/gateway startup); neither → None values, child inherits everything. ``request_overrides`` is honored on every branch. Raises ValueError with a user-facing message.)rrrrr|Nrrrrr) rtr&rurvrsrrrrrrr)cfgrkvaluesris_native_sdk_providers r_resolve_delegation_credentialsrs* Am m1aSWWQZ%2&,,.6$6 mF mSWWZ06B7==?EEGO4F:AKCGGTgLhjnAo)&(,,\:@bC#t$ %"nn\*0b d+s33      s)1B,BB BB B$#B$))providers_allowedN)providers_ignoredN)providers_orderN) provider_sortN)provider_require_parametersF)provider_data_collectionr|> nous-portalnous nousresearchc|rdnt|ddxsd}t|tr|jdnd}||S|gk(ryt d|i}|st j d|rdnd|xs|S)aeFallback chain for a child, owned by the same config block as its route. Pinned children (provider, endpoint or model override) never borrow the parent chain; unpinned children inherit it when ``fallback_providers`` is absent/null. An explicit ``[]`` disables fallback either way. Malformed entries are dropped by the canonical normalizer. N_fallback_chainfallback_providerszHdelegation fallback_providers has no usable routes; using the %s defaultpinned inherited)rrsrr&r rr)r routing_cfgrr1declared normalizeds r_resolve_child_fallback_chainrsd7<9JD#Q#YUYG8B;PT8U{34[_H2~#%98$DEJ a#)x{ <   r)rc|xs |j} |r|} |} n9|rt|dd} |} n't|dd} t||j|\} }t|ddxsd}||}nL| xsdj j t vrddlm}|| }n| |k7rd}n t|dd}t|d|d|xs t|d d}t| | nt|d gxsg}|r|sdg}}|r(dd l m }|| xsd}||jd k7rd \} }| }|s|s|st|ddxs| }t|dd} |jd}|s|dur)ddlm}||}|t"j%d|n|}| |xs|| | |t+|||||||t-|| |n| t/|xs|xs|t|ddd t0Dcic]\}}||r|n t|||c}}}|s |dxsd|d<t|dd}t3|t4r||d<|S#t&$r }t"j)d|Yd}~d}~wwxYwcc}}w)aChild credentials, transport and routing (config override > parent inherit) as ``AIAgent`` kwargs. Rules that are easy to break: api_mode is re-derived (not inherited) when the child's provider differs from the parent's or is Nous Portal (dual-wire); a pinned ``delegation.command`` must exist on PATH or the spawn fails loudly; ``override_provider`` clears the parent's ACP transport, fallback chain and OpenRouter routing filters so the pinned provider is actually honoured.rNr|r) nous_api_moderzPinned delegation command 'zR' was not found on PATH. Install it or remove delegation.command from config.yaml. acp_commandacp_args)get_provider_profileexternal_process)z copilot-acprrreasoning_configreasoning_effortF)parse_reasoning_effortzAUnknown delegation.reasoning_effort '%s', inheriting parent levelz.Could not load delegation reasoning_effort: %s)ropenrouter_min_coding_score) rrrrrrrrrrfallback_modelrr  max_tokens)rrrrrurv_NOUS_PROVIDERShermes_cli.providersrrr providersr auth_typer&hermes_constantsrrrrrrrrU_ROUTING_FILTER_DEFAULTSrsrA)rdelegation_cfgparent_api_keyrrroverride_api_keyoverride_api_modeoverride_acp_commandoverride_acp_argsreffective_modelrr_parent_providereffective_api_modereffective_acp_commandeffective_acp_argsrprofilerchild_reasoningdelegation_effortrr_radrchild_max_tokenss r_resolve_child_runtimer9s1|11O .. $\:tD.$\:tD-ElT`TiTiky-z*N|Z>D"$.  " ) ) + 1 1 3 F6*?; / /!$\:tD ;EO L*../AB  1U : ?+,=>F~bduv"( '3C3U~`o&>Z4\CTVgh&7LZl+8 K,?.[)G->G%HJ(/|=Z\`'aSk k$!Q1$a',1*E E kF -34N-O-USU)*|\4@"C(/| M/ L EsKKL ls AH0I0 I9II)returnr)rrtrrtr:rt)r.rtr/ Optional[str]r2rt)r8rtr9rtr:rr:None)r:rA)r:rU)r^rr:r)r:r)rrr:rt)r:zOptional[dict])rr;rrr:tuple)r.r)rrrr;rr;r:rUr)rr;rr;rr;)rr;r9rtr:r<)rCrr:r)rrr:r)rrrrUr:zOptional[List[Dict[str, Any]]])r(rr)rrr;rr;rr;r*r;r+r;r,r;r-zOptional[List[str]]rzOptional[Dict[str, Any]]r:zDict[str, Any])=__doc__ __future__rloggingr,typingrrrrutilsrr hermes_cli.fallback_configr getLoggerrrrLrKrkrgrZr__annotations__rr r#r(r5r;rFrNrRrVr[r`rdrlrwrzrrrrrrr frozensetrrrrrrrrr'r"rr9r'rrrGs[" ,,49   0 1$#% !  *.-  $' "I 9 *6  M0 r7(I nZ^262%2IV2"/2h0""QR ]^"(T,\M*. CD!0-1 s"&s8;sGTsivs$s8EsZgs(s=Ps* s  sr