߲jgUdZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl m Z ddl m Z ddlmZmZmZmZmZddlmZej,eZdZdZd Zd ed efd Zd ed efdZdej>d e fdZ!de d e fdZ"de d ee fdZ#dCdee d eefdZ$d ee fdZ%d eee&ffdZ'deee&fd dfdZ(e ddGddZ)Gd d!Z*d"Z+d#Z,d$Z-d%Z.iZ/ee0eeefe0e1e ffe2d&<iZ3ee0eeefe1fe2d'<e4Z5ee0eeefe2d(<e4Z6ee0eeefe2d)<ejnZ8d*Z9e4Z:eee2d+<d,Z;d-ed efd.Zd0e1d dfd1Z?d eefd2Z@d-ed e fd3ZAd-ed e fd4ZBd-ed eefd5ZCd-ed6eee fd e fd7ZDdDd8ZEd-ed ee fd9ZFGd:d;ZGdZJdCd efd?ZKd@edAeLd eLfdBZMy)EaCentral registry for all hermes-agent tools: each tool file calls ``registry.register()`` at import to declare schema, handler, toolset membership and availability check; ``model_tools.py`` queries the registry instead of keeping parallel data structures. Cycle-safe import chain: this module imports nothing from model_tools or tool files; tools/*.py import it at module level; model_tools.py imports both; run_agent/cli import model_tools.N) dataclass)Path)CallableDictListOptionalSethermes_home_keyiu… [truncated]i textreturnct|tkr|Stjdt||dt|dtt zS)zJBound an error body destined for model context; logs keep a longer prefix.z4tool error body truncated for context (%d chars): %sN)len_MAX_TOOL_ERROR_CHARSloggerdebug_MAX_LOGGED_ERROR_CHARS_TOOL_ERROR_TRUNCATION_MARKER)r s 3/home/ubuntu/.hermes/hermes-agent/tools/registry.py_bound_error_textr sL 4y))  LL> D 40013 && '*G GGresultcXt|tksd|vr|S tj|}t |t r|jdnd}t |trt|tkr|St||d<tj|dS#t$r|cYSwxYw)zTrim an oversized ``error`` field in a JSON string result: handlers that ``json.dumps({"error": str(exc)})`` directly bypass ``tool_error``'s cap, so this runs at the dispatch boundary to stop unbounded errors stacking across retries.z"error"errorNF ensure_ascii) rrjsonloads ValueError isinstancedictgetstrrdumps)rpayloadrs r_bound_json_error_resultr&*s 6{++y/F **V$%/w$=GKK 4E eS !SZ3H%H (/GG ::gE 22  sB B)(B)nodect|tjr$t|jtjsy|jj }t|tj xrP|jdk(xr?t|jtjxr|jjdk(S)zATrue when *node* is a ``registry.register(...)`` call expression.Fregisterregistry) r astExprvalueCallfunc AttributeattrNameid)r'r/s r_is_registry_register_callr4;s dCHH %Z CHH-M ::??D4' MDII,C M tzz388 , M15*1LNr module_pathc |jd}d|vsd|vrytj|t|}t d|jDS#tt f$rYywxYw)zTrue when the module body (or a module-level ``for``) calls ``registry.register(...)``. Only module-body statements count, so helpers registering inside a function are skipped; a text prefilter avoids ``ast.parse`` for files lacking both words.utf-8encodingr*r)F)filenamec3K|]I}t|xs8t|tjxrt d|j DKyw)c32K|]}t|ywN)r4).0ss r z4_module_registers_tools...Ss-_PQ.H.K-_sN)r4r r+Foranybody)r>stmts rr@z*_module_registers_tools..QsP  #4( a tSWW % _#-_UYU^U^-_*_ asAA) read_textr+parser#OSError SyntaxErrorrBrC)r5sourcetrees r_module_registers_toolsrKEs|&&&8 V #z'?yy#k*:; II  [ !sA AA+*A+ tools_pathct|jdt|jdz}t|S)ahFlat ``tools/*.py`` modules plus the package entry point ``tools//tool.py``, in one sorted list. Only ``tool.py`` is scanned in a package, so every other file in it is a library by construction. Sorted after merging: ``register()`` lets a same-name, same-toolset duplicate overwrite silently, so the import order must not depend on file depth.z*.pyz */tool.py)listglobsorted)rL candidatess r_tool_module_candidatesrRWs5 joof-.jook6R1SSJ * r tools_dirc| t|n&ttjjj}t }i}d}g}t |D]m}|j dvr|j|jdj}t|dkDrI|jdz js,tjd||jj t|j} |j} | j | j"f} |j'|} t)| t*t,fr.t| dk(r t-| dd | k(rt/| d } n t1|} d }| d | d| g||<| sJ|j3d j5d g|p|st7|t7|k7r t9|g} |D])} t;j<|| j3|+| S#t$$rYwxYw#t>$r!}tjd||Yd}~cd}~wwxYw)aKImport built-in self-registering tool modules and return their module names. The per-file AST scan costs ~145 ms over ~100 files, so verdicts are memoized on disk keyed by ``(mtime_ns, size)``; a mismatch or corrupt cache re-scans that file. The write is best-effort and atomic, so concurrent processes race harmlessly.NF> mcp_tool.py registry.py __init__.pyrWz*Skipping %s: package %s has no __init__.pyTr.toolsz#Could not import tool module %s: %s) r__file__resolveparent_load_discovery_cacherRname relative_to with_suffixpartsrexistsrwarningr#stat st_mtime_nsst_sizerGr"r rNtupleboolrKappendjoinset_save_discovery_cache importlib import_module Exception)rSrLcache fresh_cache cache_dirty module_namespath rel_partsabs_pathststat_keycached registersimportedmod_namees rdiscover_builtin_toolsr`s* &/%:$y/X@V@V@X@_@_hhjJ ! #E#%KK L' 3A 99E E $$Z0<A t{{]'B&J&J&L NNGt{{O_O_ ` t||~& B 3H8$ ftUm ,V1AeFSUTUJFW[cFcVAYI/5IK!)!hqk9 E H    ')>I)> ? @/A4c+&#e*4k*H O O  # #H - OOH %O O-   ( O NN@(A N N Os* (H%;&H5% H21H25 I>IIcZ ddlm}t|dz dz S#t$rYywxYw)zBPath of the tool-discovery verdict cache, or None if unresolvable.rget_hermes_homertztool_discovery_cache.jsonN)hermes_constantsrrrsrs r_discovery_cache_pathrs54O%&03NNN s  **ct}|iS t|dd5}tj|}dddt t r|SiS#1swYxYw#t tf$ricYSwxYw)u?Read the discovery cache; any error → empty dict (full scan).Nrr7r8)ropenrloadr r!rGr)rxfhdatas rrarasw "D |  $g . !"99R=D !!$-t525 ! ! Z  s-AAAAAAA0/A0rtct}|y ddlm}ddlm}||j |||dy#t $r!}tjd||Yd}~yd}~wwxYw)z>Best-effort atomic write of the discovery cache. Never raises.Nr)atomic_json_write)mkdir_under_hermes_home)indentz+Could not write tool discovery cache %s: %s) rutilsrrrr`rsrr)rtrxrrrs rrprps\ "D |M+< ,$a0 M BD!LLMs)9 A#AA#FT)eqslotsceZdZUdZeed<eed<eed<eed<eeed<e ed<e ed<eed <eed <d Z e e zd zed <d Zeeed <y ) ToolEntryzXMetadata for one registered tool (identity semantics: restore/CAS paths compare ``is``).rbtoolsetschemahandlercheck_fn requires_envis_async descriptionemojiNmax_result_size_charsdynamic_schema_overrides)__name__ __module__ __qualname____doc__r#__annotations__r!rrrNrlrintfloatrrrrrsab I L L x  N J043;-448hx07rrc$eZdZdZdZdeddfdZy)_PluginOverridePolicyz@Identity-bearing authorization record for one plugin generation.)allowedrr Nc$t||_yr=)rlr)selfrs r__init__z_PluginOverridePolicy.__init__s G} r)rrrr __slots__rlrrrrrrsJI%%%rrzmPlugin module {owner!r} cannot override built-in tool {name!r} without operator opt-in (allow_tool_override).g>@gN@i_check_fn_cache_check_fn_last_good_check_fn_ever_good_check_fn_core_drop_warnedrX_NO_CACHE_CHECK_FNS)HERMES_SESSION_ID HERMES_BROWSER_CONTROL_PRINCIPAL'HERMES_BROWSER_CONTROL_TRANSPORT_FAMILYfnc0tj||S)z;Mark a local, config-backed availability check as uncached.)raddrs rno_cache_check_fnrsB Irct|d|S)Nr)getattrrs r _fn_labelrs 2~r **rnowcdttdfttdffD]\}}}t |j D]&\}}|||z |k\s|j |d(t|tk\s\|j tt|t|tk\r6y)zUExpire stale entries and cap profile-dimensional cache growth. Caller holds the lock.c |dSNrrvs rz(_prune_check_fn_caches..s 1Q4rc|Sr=rrs rrz(_prune_check_fn_caches..srN) r_CHECK_FN_TTL_SECONDSr_CHECK_FN_FAILURE_GRACE_SECONDSrNitemspopr_CHECK_FN_CACHE_MAXnextiter)rrtttlstampkeyr-s r_prune_check_fn_cachesrs /@ ={KM)sEu{{}- %JCU5\!S( #t$ %%j// IId4;' (%j// )rcX ddlmtfdtDrddlm}|rt S ddlm }ddl m }|sy|}|r0tt|jjSt S#t$rY_wxYw#t$r t cYSwxYw)u Return the active profile key when availability is profile-scoped. Browser-controller availability is request-bound (changes on every attach/detach), so a fully bound browser-control request bypasses this cache AND model_tools' outer definition cache (same sentinel) — one Browser session's live tools must not leak into another. Single-profile processes keep the process-wide cache; a multiplex gateway installs a Hermes-home override per profile turn, so the canonical profile key is the boundary.r)get_session_envc3fK|](}t|dxsdj*yw)rXN)r#strip)r>krs rr@z'check_fn_cache_scope..s+YQs?1b)/R0668Ys.1)browser_control_enabled)serves_routed_profile)get_hermes_home_overrideN)gateway.session_contextrall_BROWSER_IDENTITY_KEYSgateway.browser_control_brokerrCHECK_FN_CACHE_BYPASSrsagent.secret_scoperrrr#r expanduserr_)rrroverriders @rcheck_fn_cache_scopers  ; YBXY Y O&(,, %<=$&+-=Es4>,,.6689`K``     %%$%s.0BB 8BB BBB)(B)c2ddlm}m} t|S#|$rL|!tj dt |Yytjdt |dYyt$r$tjdt |dYywxYw) z7Run an availability check without cache/grace handling.r)UnscopedSecretErrorcurrent_secret_scopezcheck_fn %s hit the multiplex fail-closed path with no profile secret scope active; dependent tools re-probe on the first scoped turnzcheck_fn %s raised UnscopedSecretError while the profile cache scope was resolved; dependent tools will be unavailable this turnTexc_infozAcheck_fn %s raised; dependent tools will be unavailable this turnF) rrrrlrrrrgrs)rrrs r_run_check_fn_uncachedr&sL*BDz . ! ) LLa"    NNT"   .  * O bMD  *  *s+B!B*)BBc Xtj}|tvr t|St }|t k(r t|S||f}t 5t|tj|}||dcdddS dddd} t|d}}|stt|ng} t 5t||r3|t|<tj!||dft|< dddytj|} | ;|| z t"kr/t$j'dt)||t" dddy| rX|tvrP|t*vrHt*j!|t$j'dt)||d j-| | n7|rt$j&nt$j.} | d t)||| |dft|< dddy#1swYvxYw#t$r}dd|}}}Yd}~yd}~wwxYw#1swYyxYw) z+Return bool(fn()), TTL-cached across calls.NrYzreturned FalseFraisedTzicheck_fn %s failed (%s) within %.0fs of last success; treating as transient and keeping tool(s) availablezcheck_fn %s %s; previously available core tool(s) %s dropped (non-deferrable, so not searchable either); dependent tools will be unavailable this turnz, rz=check_fn %s %s; dependent tools will be unavailable this turn)time monotonicrrrr_check_fn_cache_lockrrr"rlrsrP_core_tools_gated_byrrrrrrgrrrninfo) rrscope cache_keyr}rr-outcomeexc core_dropped last_goodlogs r_check_fn_cachedrEs& .. C  %b)) "E %%%b))U I s# $$Y/  !9   H8bd%5w'G6 H=8H >A H BH 6H H HH H)c ddlm}t|}t j Dchc],}|j|us|j|vs!|j.c}S#t$r t cYSwxYwcc}w)zNNames of ``_HERMES_CORE_TOOLS`` members whose registered ``check_fn`` is *fn*.r)_HERMES_CORE_TOOLS) toolsetsr frozensetrsror*_snapshot_entriesrrb)rrcorers rrrsi/+,%668 `qAJJ"Z3edefd?Z4d dded@e+d e edee+zfdAZ5dedBefdCZ6dPdedDe-e.zd zde-e.zfdEZ7deefdFZ8dede e+fdGZ9dede efdHZ:dSdedDedefdIZ;de eeffdJZde ee+ffdMZ?de ee+ffdNZ@dRd=e fdOZAy )T ToolRegistryzISingleton registry that collects tool schemas + handlers from tool files.ci|_i|_i|_i|_i|_i|_t j|_d|_ yr) _tools _scoped_tools_plugin_override_policy_plugin_module_scopes_toolset_checks_toolset_aliases threadingRLock_lock _generationrs rrzToolRegistry.__init__sK,. >@`b$DF"4602__& !rr ctSr=r rrrcurrent_scope_keyzToolRegistry.current_scope_keys   rentriescni}|D]-}|j|jgj|/|S)z1``{toolset: entries}`` in first-appearance order.) setdefaultrrm)rgroupsentrys r_groupedzToolRegistry._groupeds<.0 ?E   emmR 0 7 7 > ? rFcreaterrc| |jS|r|jj|iS|jj|iS)zPThe registration map for *scope*: global when None, else that profile's overlay.)r r rr")rrrs r_slotzToolRegistry._slotsF =;;  %%00; ;!!%%eR00rrNc|jjDcic]\}}||k7s ||c}}|_ycc}}wr=)rr)rraliastargets r_drop_toolset_aliasesz"ToolRegistry._drop_toolset_aliasessB/3/D/D/J/J/L!c+eVPVZaPaE6M!c!cs ;;czi|j|jj|xs|jiS)z=Return global tools overlaid with one profile's plugin tools.)r r r"r)rrs r _merged_toolszToolRegistry._merged_toolss8_$++_!3!3!7!78YAWAWAY[]!^__rc~|j|j|jj|gSr=)rr&valuesr")rrrs r_toolset_entrieszToolRegistry._toolset_entriess2}}T//6==?@DDWbQQrcT|j5t|j|j}t |j }|j |Dcic]&}|j|j|j(c}||fcdddScc}w#1swYyxYw)zBReturn a coherent snapshot of registry entries and toolset checks.N) rrNr&r(r!rupdaterr)rrrchecksrs r_snapshot_statezToolRegistry._snapshot_statesZZ #4--e4;;=>G$../F MM'\QQZZE[199ajj0\ ]F?  # #] # #s$A BB ,B  BBB'c(|jdSr)r-rs rrzToolRegistry._snapshot_entriess##%a((rcHifd|D}tfd|DS)aTrue when at least one tool in *toolset* would be exposed. Mirrors :meth:`get_definitions` per-tool filtering so doctor/banners agree with runtime: mixed toolsets (``terminal`` + desktop-only ``read_terminal``) must not be gated by the first ``check_fn``.c3BK|]}|jk(s|ywr=rr>rrs rr@z.s>g)=1>sc3hK|])}|j xst|j+ywr=)rr)r>rrs rr@z.s*Tqqzz>B[T%BBTs/2)rB)rrrmembersrs ` @r_toolset_has_exposable_toolsz)ToolRegistry._toolset_has_exposable_toolss% &(>g>TGTTTrrrbc|j5|j|j|cdddS#1swYyxYw)z7Active profile's entry by name, falling back to global.N)rr&r"rrbrs r get_entryzToolRegistry.get_entrys7 ZZ 7%%e,006 7 7 7 7Ac|j5|j|j|cdddS#1swYyxYw)u-Local slot state only — no global fallback.N)rr r"r8s rsnapshot_registrationz"ToolRegistry.snapshot_registrations7ZZ /::e$((. / / /r:cRt|j|jSr=)rPrrrs rget_registered_toolset_namesz)ToolRegistry.get_registered_toolset_namessdmmD$:$:$<=>>rc"|jSr=)rrs rget_all_entrieszToolRegistry.get_all_entriess%%''rctd|j|jj|gDS)Nc34K|]}|jywr=rb)r>rs rr@z:ToolRegistry.get_tool_names_for_toolset..s_aff_)rPrrr"rrs rget_tool_names_for_toolsetz'ToolRegistry.get_tool_names_for_toolsets4_dmmD4J4J4L&M&Q&QRY[]&^___rr"c|j5|jj|}|r||k7rtj d|||||j|<|xj dz c_dddy#1swYyxYw)z8Register an explicit alias for a canonical toolset name.z4Toolset alias collision: '%s' (%s) overwritten by %srYN)rrr"rrgr)rr"rexistings rregister_toolset_aliasz#ToolRegistry.register_toolset_aliassx ZZ ",,007HH/JES[]d,3D ! !% (    !  " " "s AA55A>cp|j5t|jcdddS#1swYyxYwr=)rr!rrs rget_registered_toolset_aliasesz+ToolRegistry.get_registered_toolset_aliasess, ZZ /--. / / /s,5c||j5|jj|cdddS#1swYyxYwr=)rrr")rr"s rget_toolset_alias_targetz%ToolRegistry.get_toolset_alias_targets2 ZZ 4((,,U3 4 4 4s2;module_namespacerc|j5t|}||j||f<|jj |t j ||cdddS#1swYyxYw)zBind a plugin module namespace to its current operator opt-in. The identity-bearing result lets unload/reload revoke a stale authorization without losing attribution.N)rrr r rror)rrNrrpolicys rregister_plugin_override_policyz,ToolRegistry.register_plugin_override_policysg ZZ *73FFLD ( (%1A)B C  & & 1 12BCE J N Nu U    s AA((A1c|j5|jj||fcdddS#1swYyxYw)z;Return one local authorization generation without fallback.N)rr r")rrNrs rsnapshot_plugin_override_policyz,ToolRegistry.snapshot_plugin_override_policy&s>ZZ O//33Ue/1155t=M6NOFF-v~~..rrcN|j|}|r|j|SdS)a9Plugin namespace that DEFINED *handler* (None for built-in/MCP handlers). Bound to ``handler.__globals__["__name__"]``, fixed at definition time so it cannot drift with call site/thread/timing; lambdas and nested functions inherit it, so a plugin cannot launder an override via a callback.N)_callable_module_plugin_namespace_of_module)rrmods r_plugin_owner_ofzToolRegistry._plugin_owner_ofAs, ##G,8;t//4EErc|}t}t||vr|jt|t|dd}t |t j r |j}net|dd |j}nKt |tr |jddrt|dSt|dd |j}nnt||vrt|dd}t|xstt|ddxsdS)z@Resolve defining module through wrappers, partials, and objects. __globals__N__func__rrX __wrapped__r)ror3rrr functoolspartialr/rar!r"r#rbtype)rrTseen globals_dict module_names rr[zToolRegistry._callable_moduleIsk% HHR[ !"7M4@L'9#4#45!,,*d3?!**L$/L4D4DZQS4T< 344-6B!--k%g|R8 ;P'$w-r"JPbQQrcV|j5|jDcgc]}||k(s|j|dr|}}|rt|tcdddS ddd|jdr#dj |j dddSycc}w#1swYCxYw)z;Resolve a module/submodule to its durable plugin namespace.r\)rNzhermes_plugins.r[)rr  startswithmaxrrnsplit)rrN namespacematchess rr\z(ToolRegistry._plugin_namespace_of_module^s ZZ -+/+E+Eb'#y04D4O4OS\R]]^P_4`bGb7,  - -  -  & &'8 988,2237;< <b - -sB"BBBB(c4|j5|jj|}|s dddy|j}||vr |cdddSt |dk(rt t |cdddStd|d#1swYyxYw)z9Return the profile scope bound to a loaded plugin module.NrYPlugin module zP is active in multiple profiles and cannot register outside one of those scopes.)rr r"rrrrPermissionError)rrNscopes active_scopes r_plugin_scope_ofzToolRegistry._plugin_scope_ofls ZZ 9//334DEF 9 9 113Lv%# 9 96{aDL) 9 9" !1 45889 9 9 9sBB!B?BBcN|j|}|j|xs|S)z@Public host lookup for a loaded plugin module's immutable scope.)r\rt)rrNowners rplugin_scope_for_modulez$ToolRegistry.plugin_scope_for_module{s*001AB$$U%>.>??rcallbackcN|j|}|r|j|SdS)zAReturn the durable plugin scope for any supported callable shape.N)r[rw)rrxrhs rplugin_scope_for_callablez&ToolRegistry.plugin_scope_for_callables*++H5 .allow_tool_override: true in config.yaml to allow it.zOTool '%s': toolset '%s' overriding existing toolset '%s' (override=True opt-in)zTool registration REJECTED: '%s' (toolset '%s') would shadow existing tool from toolset '%s'. Pass override=True to register() if the replacement is intentional, or deregister the existing tool first.rrX) rbrrrrrrrrrrrY)r r!rrerr"r^r\rrtrr r r&rYrrrq_OVERRIDE_DENIED_MSGformatrrrrr)rrbrrrrrrrrrrrrparams handler_owner caller_ownerrvr#rHplugin_override_deniedshadows_globals rr)zToolRegistry.registers&$'xx F|,,-/0 0--g6 778K8K8MN -  =U.))%0E ZZ3 "ZZdZ3F',} $:L:LU:SXXY]^HT!U$*G*Gu*U&U #T!?e4&7?&?+/4;;+> LL016>3 "3 "*)*>*E*EEX\*E*]^^H,,7- +"4)9)9 ; ..B.I.IPU\`.I.abbKK126AQAQS LL]gx'7'7 9 M3 "3 "N%767U])/R('H6::mR+HPU&;)A CF4L}gT=Q=Q.Q08$$W-    ! g3 "3 "3 "sBJ+3B?J+;A'J++J4c $|j5|j}|j|}||j|nd}||||k7rt d|d||}|j |}|j |}|.|"| ||jvrt d|d|d dddy|jjds|j|j}t|xr||k(} |V| sT|j||sBtjd|||j|t d|d |d |jd ||=||s|j j#|d|j%|j|sA|j&j#|jd|j)|j|xj*d z c_dddtj-d |y#1swY xYw)ufRemove a tool; drops the toolset check/aliases if it was the last in its toolset. ``scope`` selects a profile overlay explicitly (multiplexed MCP tools live in the owning profile's overlay); plugin callers may not name another scope, non-plugin callers default to the process-global map. Gated by the same opt-in as ``register(override=True)``, else a plugin could deregister a tool it doesn't own and re-register over the empty slot (the override check only runs when an entry exists). ``mcp-*`` toolsets are exempt — discovery repaves its own tools per refresh.Nrpz7 cannot deregister tools outside its own profile scope.zScoped plugin module z' cannot deregister process-global tool z%; register a scoped override instead.zmcp-zTool deregistration REJECTED: plugin %r attempted to remove tool %r (toolset %r) it does not own, without operator opt-in. Set plugins.entries.%s.allow_tool_override: true in config.yaml to allow it.z cannot deregister tool z (toolset z0) without operator opt-in (allow_tool_override).rYzDeregistered tool: %s)rrr\rtrqr r"r rrjr^rrlrYrrr rr)rr$rr) rrbr caller_modr caller_scoper#rrv same_plugins r deregisterzToolRegistry.deregisters;ZZ- ",,.J;;JGLBNBZ400>`dL'E,=% $x'LNOO#- "- "$==++F3--emm<#5#B\U-BC  ,' 99, ULLc#D%-- E *(6NthV` ==++[]^^t  ""&&ud3((>$$((=**5==9    ! [- "\  ,d3]- "- "sBH2D5HHc |j5|j|d}|j||ur dddy||j|dn|||<||s|jj|d|j h}||j |j |D] |j |}td|Dd}|.||jj dn||j <d|jjD} |r|t fd| Dr|j |xjdz c_ dddtjd |y#1swY xYw) aCRestore a host-owned registration if it is still current (plugin ownership ledger). The identity check is deliberate: another plugin (or ``PluginManager`` in a multi-profile process) may have registered a newer entry under the same name, and unloading this entry must leave that newer one untouched.TrNFc3NK|]}|js|jywr=)rr>rs rr@z4ToolRegistry.restore_registration../s YE%.. Ys%%c3JK|]}|jD]}|ywr=)r()r>mrs rr@z4ToolRegistry.restore_registration..5s"ZQqxxzZ!qZqZs!#c3<K|]}|jk(ywr=r1r2s rr@z4ToolRegistry.restore_registration..6s,WaQYY'-A,WsrYzRestored tool registration: %s)rr r"rr rrr)rrr(rBr$rrr) rrbrTrUrr#affected_toolsets survivingr in_overlaysrs @rrestore_registrationz!ToolRegistry.restore_registrationszZZ "ZZdZ3Fzz$w. " " 4&'t  ""&&ud3") 1 #!%%h&6&67, 8 11'5A  YY Y[_`=',,00$?8@,,W5Z$*<*<*C*C*EZ  ,W;,W)W..w7 8    ! 7 "8  5t<; " "s(E=C!E=!E=6(E==F tool_namesquietc`g}i}|jDcic]}|j|}}t|D]}|j|}|s|jr/t |j|s|st jd|Ri|jd|ji}|j2 |j} t| tr|j| |jd|d|Scc}w#t$r#} d} t jd|| Yd} ~ ed} ~ wwxYw)zOpenAI-format schemas for the requested tools whose ``check_fn`` passes (or is absent). Probes use the ~30 s TTL cache so ``hermes tools enable`` lands quickly.z"Tool %s unavailable (check failed)rbNzCdynamic_schema_overrides for tool %s raised %s; using static schemafunction)rer)rrbrPr"rrrrrrrsrgr r!r+rm) rrrr check_resultsrentries_by_namerbschema_with_name overridesrs rget_definitionszToolRegistry.get_definitions>s,.0 :>:P:P:RS5::u,SS:& ND#''-E~~k%..-&PLL!EtLC%,,C C --9# % > > @I i.$++I6 MM:;KL M+ N, /T!# $INN]c###sC<3D D- D((D-c<t|tr t|St|tr4|j ddur!t|j dt r|St |j}tjd||td|d||S)zResults must be a string or the multimodal envelope; anything else becomes a string error so logging/hooks/budgeting/persistence never receive values they cannot slice or size. _multimodalTcontentz4Tool %s handler returned unsupported result type: %sz/Tool handler returned unsupported result type: tool_result_contract) error_typetool result_type) r r#r&r!r"rNrerrr tool_error)rbrrs r_normalize_handler_resultz&ToolRegistry._normalize_handler_result^s fc "+F3 3 vt $ =)T16::i0$7M6l++  KTS^_=k] K-DkS Srargsc $|j||}|std|S t|j|}|jr ddlm}||j|fi|}n|j|fi|}|j||S#t$rz}tjd|tt|dt|jd|} ddlm} | | } n#t$r| } YnwxYwt| cYd }~Sd }~wwxYw) zExecute a tool handler by name: async handlers bridged via ``_run_async()``, results normalized, every exception returned as ``{"error": ...}``.r6zUnknown tool: r) _run_asynczTool %s dispatch error: %szTool execution failed: z: )_sanitize_tool_errorN)r9r_kwargs_accepted_byrr model_toolsrrrsr exceptionrr#rerr) rrbrrkwargsrrrrrawr sanitizeds rdispatchzToolRegistry.dispatchps t51tf56 6 ))?F~~2#MEMM$$A&$AB&t6v611$? ? )   94ARSVWXSYAZ [+DG,<,<+=RsCC <05    i( ( )sCA&B DAD C)(D ) C74D 6C77 D D Dr1c:t|j||dSr=)rr9)rrbr1s r_attrzToolRegistry._attrst~~d+T488rdefaultcF|j|d}||S||Sddlm}|S)zBReturn per-tool max result size, or *default* (or global default).rr)DEFAULT_RESULT_SIZE_CHARS)rtools.budget_configr)rrbrsizers rget_max_result_sizez ToolRegistry.get_max_result_sizes2zz$ 78  K  NA((rcBtd|jDS)Nc34K|]}|jywr=rCrs rr@z2ToolRegistry.get_all_tool_names..sGUejjGrD)rPrrs rget_all_tool_nameszToolRegistry.get_all_tool_namessGd.D.D.FGGGrc&|j|dS)zORaw schema dict, bypassing check_fn filtering (token estimates, introspection).rrrrbs r get_schemazToolRegistry.get_schemaszz$))rc&|j|dS)Nrrrs rget_toolset_for_toolz!ToolRegistry.get_toolset_for_toolszz$ **rc.|j|dxs|S)z3Return the emoji for a tool, or *default* if unset.rr)rrbrs r get_emojizToolRegistry.get_emojiszz$(3G3rcr|jDcic]}|j|jc}Scc}wr=)rrbr)rrs rget_tool_to_toolset_mapz$ToolRegistry.get_tool_to_toolset_maps,7;7M7M7OPe EMM)PPPs4cB|j||jS)zCTrue when a toolset has at least one exposable tool (never raises).)r5rrEs ris_toolset_availablez!ToolRegistry.is_toolset_availables00$:P:P:RSSrc|j}t|j|Dcic]}||j||c}Scc}wr=)rrPrr5)rrrs rcheck_toolset_requirementsz'ToolRegistry.check_toolset_requirementssR((*"$--"89; T66wH H; ;;sA c|j}i}|j|jD]@\}}|j|||Dcgc]}|jc}dt |d||<B|Scc}w)z'Return toolset metadata for UI display.rX) availabler]r requirements)rrrr5rb _unique_env)rrrrr4rs rget_available_toolsetsz#ToolRegistry.get_available_toolsetss((*$& $ g 6 < < > 6 GW!>>wP29:%**:! +G 4 !6HW  6 ;s A7c |j\}}i}|j|jD]@\}}|t||j |d|Dcgc]}|j c}d||<B|Scc}w)zABuild a TOOLSET_REQUIREMENTS-compatible dict for backward compat.N)rbenv_varsr setup_urlr])r-rrrr"rb)rrtoolset_checksrrr4rs rget_toolset_requirementsz%ToolRegistry.get_toolset_requirementss"&"6"6"8"$ $ g 6 < < > < GW'0*..w7!29:%**: r@rFrIrKrMrrQrSrWrYr^r[r\rtrwrzrr!rNrrr)rrr rrrrrrrrrrrrrrrrrrrrs+S" !s!!$y/d3Y3G.H=B18C=1T1d3PY>FZ1cScTc`8C=`DiB7c7Xc]7hyFY7 48//#+C=/Fsm   @DO #O/7}O ' (ONR  # .C 01 =Ec] VZ /hsm/s/W[/ FFXc]FR(RsRR( C HSM  9 9# 9@@ @ R(Rx}R CPU\`DI# L"L""%L"/3L">FL"L"15L"HLL"L"'*L"HKU{UYGYL"#+ L">B L" } L"\?C74s74hsm74t74v $$$"+$7? 7J$}$(,$P#c(4DQUJ@SSS$@D))#)/7})RUX\R\)@9#9S9))cEkD6H)TWZ_T_)HDIH*s*x~*++#+4c4C4C4Qc3hQTCTDT ;DdO; S$Y  $sDy/  &T &rrrcjg|D]*}jfd|jxsgD,S)zLUnion of ``requires_env`` across *entries*, first-seen order, no duplicates.c3,K|] }|vs| ywr=r)r>routs rr@z_unique_env..sIASL1Is )extendr)rrrs @rrrs;CJ Iu117RIIJ Jrc \tjdtt|i|dS)u~``'{"error": "", **extra}'`` — the error body is bounded so a raw exception can't bloat history across retries.rFr)rr$rr#)messageextras rrrs* ::w 1#g, ?I5IX] ^^rc Dtj||dS|dS)zDJSON-encode a dict positional arg *or* keyword arguments (not both).Fr)rr$)rrs r tool_resultrs" ::d.d OOF OOrrrc tj|j}t d|j Dr|Stjjtjjh}|jDcic]\}}||vs ||j|vs||!c}}S#ttf$r|cYSwxYwcc}}w)z*kwargs* narrowed to what *handler*'s signature declares; everything when it takes ``**kwargs`` or cannot be introspected (builtins, some C callables).c3hK|]*}|jtjju,ywr=)kindinspect Parameter VAR_KEYWORD)r>ps rr@z&_kwargs_accepted_by..s% Pq166W&&22 2 Ps02) r signaturer TypeErrorrrBr(rPOSITIONAL_OR_KEYWORD KEYWORD_ONLYrr)rrr keyword_kindsrrs rrrs&&w/::  PJO>O>\>\]M#\\^ gTQqJ:a=CUCUYfCfAqD gg z "  hs#B2 C C )C 2CCr=)r N)Nrr+rcrqrrloggingr|rr dataclassesrpathlibrtypingrrrrr rr getLoggerrrrrrr#rr&ASTrlr4rKrRrrrNrarprrrrrrrrkrrrrorrLockrrrrrobjectrrrrrrrrrrrr*rrr!rrrrrs`    !66,   8 $ 1HCHCH3S3S3"NSWWNN$$d-htn-S -`x~ tCI  Mc4i MT M e4 88!8$%%5#'LNeHhsm34eE4K6HHINCET%(3- 78%?@E;>5Sx#678@BE%Ch &= >?G%y~~'%(US]*/ (x +(+v+ ) )$ )%hsm%>xD><<d<~aXa#c(aHD4$8T+ a8 a as&s&liT >_C_ PP h h4 hD hr