߲jUddlmZddlZddlZddlZddlZddlZddlZddlm Z m Z ddl m Z m Z mZmZmZddlmZmZmZddlmZddlmZmZmZmZddlmZmZdd lm Z m!Z!dd l"m#Z#ejHe%Z&d Z'd Z(d Z)dBdZ*dBdZ+dCdZ,dDdZ-GddZ.dEdZ/dFdZ0dGdZ1e GddZ2GddZ3iZ4de5d<dHdZ6iZ7de5d<dIdJd Z8d!d"d#Z9dKd$Z:dLd%Z;dMd&ZdPdQd)Z?dRdSd*Z@dTd+ZAdUd,ZBdUd-ZCdVd.ZDdUd/ZEdWd0ZF dUd1ZGdXd2ZHdUd3ZIdUd4ZJdYd5ZKdYd6ZLdYd7ZMdUd8ZNeBeCeNd9ZOeNeEeId9ZPeBeEeId9ZQeKeLeMd9ZReBeJeId9ZSdZd:ZTd[d;ZUdZXd^d?ZYddd@ d_dAZZy)`) annotationsN) dataclassfield)AnyCallableDictListOptional)Actor SettleReason TargetState)operation_session_key)ConnectionOperationDetachedOperationIllegalTransitionTarget)Kind run_operation) hosted_namesmisrouted_to_mcp_error) tool_error>@uSettled once; do not re-ask on your own for any target the user skipped or that timed out, but a later request from the USER for that same app is not a re-ask — run it. Connected targets' tools are available now through tool_describe/tool_call and are named under tools_listing. A target with discovery_error is authorized but its tools are unavailable; retry discovery with manage_connections using that target's authorize or install action without asking for consent again.uQNo connection card is drawn for this turn. Show any connect_url to the user so they open it in a browser, then ask them to say when they are done. Connected targets' tools are available now through tool_describe/tool_call and are named under tools_listing. A target with discovery_error is authorized but its tools are unavailable; retry discovery with manage_connections using that target's authorize or install action without asking for consent again. Do not re-ask on your own for skipped or timed-out targets, but a later request from the USER for that same app is not a re-ask — run it.c<ddlm}td|DS)Nr list_catalogc34K|]}|jywN)name).0es 9/home/ubuntu/.hermes/hermes-agent/tools/connectors/mcp.py z!_catalog_names..0s1Q!&&1s)hermes_cli.mcp_catalogrsortedrs r!_catalog_namesr%-s3 1,.1 11c.ddlm}t|S)Nrinstalled_servers)r#r)r$r(s r!_configured_namesr*3s8 #% &&r&c  t}t}dk(r t|n t|}|Dcgc] }||vs| }}|sy|Dcgc]}||vs||vs |}}|rFt xs t} |Dcgc] }|| vs| } }| rdj fd| DSdk(rGddj |ddj |xsdd |rd dj |d zSd zSd d dj |dddj |xsdd |rddj |d zSd zS#t$r}d|cYd}~Sd}~wwxYwcc}wcc}wcc}w)Nz could not read the MCP catalog: install c36K|]}t|ywr)r)rractions r!r"z%validate_mcp_names..HsWT264@Wsz#unknown MCP server(s) for install: , z*. Install works for catalog entries only: z(empty catalog).z, Already configured (use enable/authorize): zunknown MCP server(s) for z: z. z+ works for servers already in mcp_servers: z(none configured)z" Catalog entries you can install: )r%r* Exceptionsetrjoin) r/namescatalog configuredexcallowednunknownforeignhosted misrouteds ` r!validate_mcp_namesr@9s8 "&( % 1c'ls:G4Q1G#3q4G4 !NQQg%5!::MqNGN(35 '711;Q7 7 88WYWW W 1$))G2D1EF%%)YYw%7%L;L$MQ PZd=dii >S=TTUV n km n %VHBtyy/A.B"VHM##'99Z#8#O E(E( E EEEcDddlm}||}|td|d|S)Nr get_entryzno catalog entry '')r#rC ValueErrorrrCentrys r!_catalog_entryrH[s-0 dOE }-dV1566 Lr&c@eZdZdZd dZd dZd dZd dZd dZddZ y)_CatalogBackendzSThe real work behind an MCP target. One object so a caller can pass another one in.c *ddlm}t|jjxsgDcgc]\}||j sH|j |j |j|j|jrdn |jd^c}Scc}w)zBThe credentials the catalog entry declares that have no value yet.r) get_env_valuer2)rpromptrequiredsecretdefault) hermes_cli.configrLrHauthenvrrMrNrOrP)selfrrLspecs r! required_envz_CatalogBackend.required_envgsz3,D166::@bcW[W`W`Iadkkt}};;2$,,Xc ccsA!Bc4ddlm}|j|dS)Nr mcp_oauth)client_redirect_uri)tools.connectorsrYstart)rTrrYs r! start_oauthz_CatalogBackend.start_oauthos.t>>r&cht|j}|jdk(xr |j S)zA catalog entry whose own OAuth the card must run. Provider-mediated OAuth is not one: its token comes from ``hermes auth ``, so the plain probe covers it.oauth)rHrRtypeprovider)rTrrRs r!installs_with_oauthz#_CatalogBackend.installs_with_oauthus/d#((yyG#9DMM(99r&cddlm}ddlm}t |}t |||j |||fdS)zInstall an OAuth entry through the card's flow. The configuration is built in memory and lands, together with the setup values, only when ``initialize`` accepts the token.r)card_install_configrXctSr) _save_env)rSsr!z5_CatalogBackend.start_install_oauth..s 3r&)cfgrS on_commit)r#rdr[rYrH_check_declaredr\)rTrrSrdrYrGs ` r!start_install_oauthz#_CatalogBackend.start_install_oauth{sH ?.t$eS)t)sAcXddlm}|jD]\}}|s |||y)Nr)save_env_value)rQrru)rSrrzr{s r!rfrfs+0iik' U  3 &'r&ctSr)rJrr&r!_default_backendrs  r&czeZdZUdZdZded<eejZ ded<ee Z ded <d Z d ed <y) _WorkzWOne target's work in flight: an OAuth attempt the watcher polls, or a worker's outcome.Nrattempt)default_factoryzthreading.Eventdonerr~r2rwerror) rrrrr__annotations__r threadingEventrlistr~rrr&r!rrs:aGS!)//BD/BT2E92E3Or&rcReZdZdZd dZ d d dZd dZddZddZddZ dd Z y)_Runnerz6The backend plus the work for one operation's targets.cJ||_||_d|_i|_i|_yr)r/backendop_idwork approved_env)rTr/rs r!__init__z_Runner.__init__s(  $( &( 8:r&Nc<||j||||xsiyr)r/)rTtable operationtargetrSs r!runz _Runner.runsdkk4FCI2>r&c jr,tjdjjyt j j<dfd }tjtjj|fddjdjjy) zRRun one blocking backend call on a worker thread; ``observe`` reports its outcome.z3mcp %s %s: not started, the operation settled firstNcg}d} xsgDcgc] }t|}}jr,tj dj jy||c__ jjjjycc}w#t$r}t|}Yd}~d}~wwxYw)Nr2z7mcp %s %s: outcome dropped, the operation settled first) rwr3_detailsettledloggerdebugr/rr~rrr4wake) r~rrr9callrrTrrs r!bodyz_Runner.spawn..bodys!EE 304 ">tT>>   V![[&++7%*E "DJ IIMMO NN   ? 3T62 3s' B)B$B)$B)) C 2 CC Tmcp--rargsdaemonrrr) rrrr/rrrrThread contextvars copy_contextrr\)rTrrrrrs```` @r!spawnz _Runner.spawns    LLNPTP[P[]c]h]h i w!% &++ ! !$  8 8 : > >dWUY $T[[M6;;-@ BBG%'r&c|t|j<|j|_||_|jdk(r*t |j dkDr|j |y|j D]}|jt||y)N authorize) _RUNNERSrrr/lentargets_prepare_togetherr_PREPARErTrrs r!preparez_Runner.preparesv$(!__ " ;;+ %#i.?.?*@1*D  " "9 - '' 2F HHXy& 1 2r&c |jDcgc]V}tjtjj |j t ||fdd|jX}}|D]}|jtjtz}|D]2}|jtd|tjz 4ycc}w)a2Start every OAuth flow at once and wait for the URLs once. Each flow blocks until its provider publishes an authorization URL, so a sequential prepare would keep the card empty for one wait per target. The wait bounds how long prepare blocks, not how long a provider may take: a row still pending afterwards is left to its own thread, which is the only writer of that row and ends with the URL or the flow's own failure. Failing it here as well would make two writers of one row, and a URL that arrives a moment later would have no row to land on. Each thread runs in its own copy of the calling thread's context: a named-profile turn binds its home through a contextvar, and the flow resolves ``mcp_servers`` and stores the token by that home.Tz mcp-prepare-rgN) rrrrrrrrr\timePREPARE_WAIT_SECONDSr5max)rTrrthreadsthreaddeadlines r!rz_Runner._prepare_togethersV_UfUfhKQ##;+C+C+E+I+I*.((Hi)PY]+7 })EGhh F LLN 99;!55 :F KKCDIIK!78 9 : hsACc|jD]U}|js,|jtjtj fvr.cs-UAAWDTa-Us )rrrrrrupollrtools.mcp_tool_configrtools.mcp_tool_discoveryrrrvappendr3rrr) agentrattemptsadoptedrrsnapshotrrrrs @r!adopt_late_connectionsrEsT(|T(JKK!!+.H  Ghnn./X g<<> H  *  T4 H  +x|| E%'++D1F&$'$dF^4t$X" ;-e/6G7&87+B!V7!V-U-U!V N X LLA4RVL W XsA D**!EEzDict[str, _Runner]rc2t||xs tS)uThe runner for one MCP operation. ``prepare`` binds it to the operation, so the card's answer and its Try again — both of which arrive on another thread — find the same work.)rr)r/rs r! open_runnerrks 678&6&8 99r&zKtool discovery was interrupted; run the same action again to list the toolsz!the server did not answer in time)CancelledError TimeoutErrorcddlm}t|xsPt|tr>t j |jj|jjnd}t j ||}|jj |jijD]}|s|j|d}||dxsdS)zThe user-facing text of a failure. Every value the card submitted for this target is replaced by exact match before the pattern redactor runs: an opaque credential has no recognizable shape, so only the runner knows what to remove.r)redact_sensitive_textrz [REDACTED]T)force) agent.redactr rwr BaseException _BARE_ERRORSr __class__rrrvaluesreplace)r9runnerrr textr{s r!rrxs3 s8 H%c=9%(()?)?AWAWX?F   D$ 'D$$((b9@@B5 <<|4D5 !T 2 =g=r&cXddlm}||}|t|jxsdSdS)z]The manifest's ``post_install`` text for a catalog name; a custom configured server has none.rrBr2)r#rCrw post_installrFs r!_catalog_instructionsrs.0 dOE,1,=3u!!'R (E2Er&c  |j|j||fi|y#t$r;|jstj d|j|j YywxYw)aRMove one target from the prepare, worker-outcome or observe path. Continue on the RPC thread can settle the operation between any read of the target's state and this call. A settled operation has a frozen result, so the lost move is dropped rather than raised into the tool result; anything else is a real contract violation.Tz6mcp target %s: %s dropped, the operation settled firstF) transitionrrrrrr{)rrtoactorfieldss r!_moversa  V[["e>v>    Mv{{\^\d\de s"AA&%A&cZ|jr!tjd|jy|jt j k(r.|j|jd|tjyd|_ t||t j tj|y)zrReport a failure, whatever the row was doing: a repeated failure has no state change to emit, only newer text.z;mcp target %s: failure dropped, the operation settled firstN) connect_urldetailrr) rrrrrr failedrefreshr backend_watcherrr)rrrs r!_failr#s RTZT_T_` ||{)))&++4eNcNcdF )V[//1F1FvVr&c ddlm}ddlm}|j |}t |t std|d|||it|dfS#t$r}gt|||fcYd}~Sd}~wwxYw)zYRegister one committed server in the current profile scope and report its callable names.rrrz$no committed MCP configuration for 'rDr2N) rrrrrrrvrx_registered_tool_namesr3r)rrrrrrr9s r!_register_connectedr&s 0:A!#''-&$'!EdV1MN NdF^,%d+R// 073///0sAA A<#A71A<7A<cddlm}ddlm}ddlm}ddlm}||}tj|z}d} |jd|} | stj|k\r| S||jvrR|jj|} | d uxrt| d d d uxr t| d } | r| S|s | ||s| Sd}tjd ) a;The server's callable names, read from the registry once its registration has finished. Registration is a no-op for a server the process already holds, and that includes one another task is still connecting: saving the configuration wakes the config watcher, which starts its own connect, so a large server (hundreds of tools) was reported with no tools three seconds before they were registered. A server that failed discovery earlier is parked with no tools and is woken once. A server that finished registering with no tools is a valid empty list.r)mcp_tool)reconnect_mcp_server)_resolve_server_key)registryFTrNsessionr%g?)r~r(tools.mcp_tool_loopr)tools.mcp_tool_scoper*tools.registryr+rget_tool_names_for_toolset_server_connecting_serversrrhasattrsleep) r wait_seconds_corer)r*r+rzrwokenr6serverfinisheds r!r%r%s(88' d #Cyy{\)H E 33d4&MB DIIK8+L e.. .^^'',FT)>gfi.NVZ.Z>F$<=  .B4.H E 4 r&cpd|i}|r||d<t||tjtjfi|y)Nr~r)rr connectedr r")rrr~rextras r!_connectr=s9$e,E#2  )V[22E4I4ISUSr&c||jtjk(rtjStj S)z?Try again is the user's move; a first attempt is the backend's.)rr r r userr")rs r!_actorr@s(););;5::VAVAVVr&c t|}t|j|_ |jj |j}t||j|j<t||tj||jt|ddy#t $r"}t||t|||Yd}~yd}~wwxYw)Nrrr2rr)r@rr instructionsrr]r3r#rrrrr rauth_urlr)rrrrSrrr9s r! _start_oauthrFs 6NE/ s%B$$ C-C  Cc t|j|_ |jj |j}||_y#t $r"}t ||t|||Yd}~yd}~wwxYw)zTThe install row waits pending; the card draws a field per credential it still needs.N)rrrDrrVr3r#r)rrrrSrNr9s r! _declare_envrHsd/ >..v{{;#F  iff!=>s%A A4A//A4c |jj|j}|Dcgc]C}|jddr/|jt |jdxsds|Ec}Scc}w)zThe declared credentials that still have no value. The install runs on a worker thread, where ``install_entry``'s prompt for a missing credential would block on stdin forever.rNTrr2)rrVrrrw)rrrSrrUs r!_missing_requiredrJsl~~**6;;7H% XTxx D)#''#dhhv>N>TRT:U2V  XX XsAA5c ijjji| t}|rX|_|jjjtjddjd|Dyjj<t}g_t|tj |dsyt#rt%|yj'|fdy#t$r"}t |t |Yd}~yd}~wwxYw)Nz waiting for r0c38K|]}t|dyw)rN)rw)rrUs r!r"z!_start_install..s9`PT#d6l:K9`srrrr2rcPjjjSr)rr,r)rrrsr!rgz _start_install..sFNN,B,B6;;PX,Yr&)rrrrJr3r#rrVr!rr r"r5r@rr r_installs_with_oauth_start_install_oauthr)rrrrSmissingr9rrs` ` @r!_start_installrRs'B&%%))&++r:BcBH#FFH=&&++63E3EUMbMb#/ 9`X_9`0`/a!b  d'/F $ 6NEF FK$9$95 LFF+VYA LLF$YZ%  iff!=>s D D?D::D?c~ t|jj|jS#t$rYywxYw)NF)rrrbrr3)rrs r!rOrO s7FNN66v{{CDD s -0 <<c ~ |jj|j|}t ||j |j<|jry|j|j|jtjt|ddy#t$r}t ||||Yd}~yd}~wwxYw)zThe row is already ``initiated``; publish the authorization link onto it. The same ``initiated`` + ``connect_url`` pair is what every card reads as its URL step.NrBrr2rM) rrkrr3 _fail_installrrrr!rEr r"r)rrrrSrr9s r!rPrP's..44V[[#F %W5FKK  fkkw/?/?uG\G\$Wh;= fi5s&B B<$B77B<c tjt5|jj |j |_dddt ||t|||y#1swY"xYw)zA failed install asks for its fields again, so the card can reopen the form over the draft it kept. Nothing was saved, so every declared field is still missing.N) contextlibsuppressr3rrVrr#r)rrrrs r!rUrU7s[   Y 'G$nn99&++FG )VWUFF;<GGs +A&&A/c Pt|}t||tj|dsy |jj |j t|||j \}}t||||y#t$r"}t||t|||Yd}~yd}~wwxYw)Nr2r) r@rr rrrrr3r#rr&r=)rrrrSrr9r~rs r! _do_enablerZ?s 6NE FK$9$95 Lfkk*1ME? Y7  iff!=>s%A:: B%B  B%c  |jj|jDcgc]}|jdds|d}}|r/ddlm}t ||ddj|d |d yt|}t||r |jj|ji} t| |j|j<t||t j"|| j$t'| d d yt||t j"| |jj)|jit+|||j\} } t-||| | ycc}w#t$r"}t ||t |||Yd}~yd}~wwxYw#t$r"}t ||t |||Yd}~yd}~wwxYw#t$r"}t ||t |||Yd}~yd}~wwxYw)zPOff the desktop nobody can fill a credential in, so a missing one is the answer.rNTrNr)display_hermes_homezset r0z in the environment or z/.env, then install againrBrr2rC)rrVrrr3r#rhermes_constantsr\r5r@rOrkrrrr rrErr,r&r=) rrrrSrUrQr9r\rrr~rs r! _install_nowr^Ls,2NN,G,G ,TsDX\X`X`akmqXr4<ss8 i4 '(:';;R$7$9#::S"U V 6NEFF+ nn88bIG$)#9 FKK  i!6!67K[K[Wh3 5 )V[22E:v{{B/1ME? Y7;t  iff!=>  )VWS&&%A B    iff!=>s^'FE=E=F&F0.&G=F F- F((F-0 G9GG H 'HH c l|jj|j}| |jy|jj }|jd}|dvry|jj |jd|dk(rZ|jdxsd}|rt ||gt|||yt|||j\}}t ||||y|jdxsd} |jdk(rt|||| yt||t| ||y) Nr)rrrrr2rzthe authorization flow failedr,) rrrrrrr=rr&r/rUr#) rrrrrrrr~registration_errorrs r!_observe_oauthraos ;;??6;; 'D |t||+||  "H \\( #F ** KKOOFKK& ",,'89?R  YGOVV,T U )j@jBk(r-|jDs |jGt>j@yyy#ttf$ri}Y0wxYw#t($r|j*s |j,sYwxYw) zFold the card's ``connection.respond`` payload into the operation: a skip, an approval that starts the backend's work, and Continue. The card never reports an outcome, so any other claim moves nothing.rrrr2Nrskippedrrr)$jsonloads TypeErrorrErrvrrrrrwstriplower_cancel_attemptrrr rmr r?rresolvedrrrr_APPROVErkr expired_RETRYr continue_r{ all_resolvedsettle)rrjanswerrrGrrkepts r! apply_answerr}sC fd # \\)// *FI&,"J%& !!#eii&7&=2">"D"D"F"L"L"NO > UYYx(.B/557 Y #662D $ $$V[[+2E2EuzzK<@4(8bK z !f&8||{222 8Y E8JK+"4"4k6I6I!JJ 69fk%6HI/J0zz,<#9#9#?#?? H^H^//0I_?; z "(% y/@/@ s$H3.s *gPQ177k6K6K+K*gs')rrrnoteF) ensure_ascii) rrrr_NO_CARDresultany NO_CARD_NOTErndumps)rr6r/rr;rrpayloads r!_no_card_resultrs!U"K6!UF#;"KYdeI##0 8Y/0.G'**gU^UfUf*g'g mvGH"GFO ::gE 22 #LsB$) tool_call_idrc tt||}|r t|St||}t|}|t ||||S t |D cgc]} t | d|c} t|j|jt|||d|jScc} w#|jwxYw)Nr)rrrF)rrconnection_callbackwith_urls_in_result) r@rrrrrrrrrNOTEr) r6r/rrrrrrrr;s r!run_mcp_operationrs vu -E %   )F' 3K"vufkBB/4 5!VAuf % 5 d K#, 3     6  s B% B 0B% B%%B7)rr)r/rwr6rr Optional[str])rrw)rrwrGrrSrrr)rSrrr)rr)rrrrr)r/rwrrrr)r9rrrrrrrw)rrwrrw) rrrrrr rr rrrr)rrrrrrwrr)rrrrrrwrztuple[List[str], str])r)rrwr5floatrr)r2) rrrrr~rrrwrr)rrrr ) rrrrrrrSrrr)rrrrrSrrr)rrrrrr) rrrrrrrrrr)rrrrrrrr)rGzDict[str, Any]rr)rrrjrwrr)rzOptional[_Runner]rrrrw)rrr6rrr) rrr6rr/rwrrwrrw)r6rr/rwrz3Optional[Callable[[Dict[str, Any]], Optional[str]]]rrrrrrrrw)[ __future__rrWrrnloggingrr dataclassesrrtypingrrrr r tools.connectors.contractr r r tools.connectors.gateway.configrtools.connectors.operationrrrrtools.connectors.runrrtools.connectors.targetsrrr/r getLoggerrrrrrr%r*r@rHrJrjrfrrrrrrrrr rrrr#r&r%r=r@rFrHrJrRrOrPrUrZr^rardrcrhrrurwrrrkr}rrsrrrrr&r!rs+"  (66FFAhh4I%   8 $(= 2 ' DJ J Z -'  ffT-/).F " !:d7 >F  W 0@TW 1#X[2 =, =15 = = 8 8F=0' 8^&,( S!n S#* U'4DP_ `%,* UU $1NJ > *3 #'  M      r&