+ iHj` a0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI H t H t ^RI H t HtHtHtHtHt]P&!]4tRtRt!RR]P04t] !R R 44tRt.RO]ORN5tRtRtRt] !R RRRRR R RR]RRRRR04t!Rt"Rt#Rt$Rt%Rt&Rt'Rt(Rt)Rt*] !0Rm4t+Rt,Rt-Rt.Rt/RRR R!R"R#]/3t0Rt1Rt2Rt3R'R/t4R(]5R)&Rt6Rt7Rt8Rt9Rt:Rt;RtRt?] !0Rm4t@RtARtBRtCRtD]E]F] 3,tGR*R+ltHR,R-R.R-/tIR/R0R.R-/tJ]tK]H!]KP3R/R0/]IBtM]H!]KP3/]IBtO]H!]KP3R/R0/]IBtQ]H!]KP3/]JBtR]H!]KP3/]JBtT]H!]KP3/]JBtV]H!]KP3/]JBtX]H!]KP3R/R0/]IBtZ]H!]KP3/]JBt\]H!]KP3/]JBt^]H!]KP3/]JBt`]H!]KPR-R17tb]H!]KPR-R17td]e!]H]KP]KP]KP]KP34wtjtktltm]H!]KP4]H!]KP4utptq]H!]KP4]H!]KP4utttu]H!]KPR0R0R27tw]H!]KP3/]JBty]H!]KPR0R0R37tzR4t{Rt|]P!R54t~]P!R64tRtRtR7R8ltR9R:ltR;R<ltR=R>ltR?R@lt])]t3](]q3]']p33t]=]k3]*]j3],]b33t]]M3]9]^3].]T33t]]9]^3].]T3]"]O3]]33,tRt]*]j3]&]d3]1]y3]]\33],t]#]j3]]3]"]O3]=]k3],]b3]<]Q3]9]^3].]T3]>]l3]?]l33 t/]EEPR]H!]KPR-RA74C]EEP]!]M4C]EEPR]T4C]EEPR]b4C]EEP]+]j4CRB]u/CtRC]5RD&RERFRGRHRIRHRJRHRKRHRLRH/tRFRM]k/RHRN]jRO]lRP]k/RQRR]kRS]O//tRT]5RU&R%R&0t]R$0,t];QJd.RV]34FNK 5M !RV]344t] !RWRX44tRYRZltR[R\ltRt] !]P]EP4]P]P]P]EP6]EP804t];];QJd.R]]4FNK 5M !R]]44,tR^R_ltR`RaltRbRcltRdReltRfRgltRhRiltRjRklt]]]]]]]]3tRl]5Rm&RnRoRpRoRq^RrRsRt^RuRoRvR/RwRxlltRyRzlt] !R{04tR|R}ltR~RltRRltRRltRRltERRRlltRRltRRltRRltRRltRRltR]RRRRR]R]RRRRRRR]R]R]RRRR/ tR]5R&ERtERtRRltRRltRRltRRltRtRtRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltR#(a API error classification for smart failover and recovery. A priority-ordered pipeline maps an API exception to a ``ClassifiedError`` whose recovery hints (retry, rotate credential, fallback, compress, abort) the retry loop in run_agent.py consults instead of re-matching strings itself. ) annotationsN) dataclassfield)AnyCallableDictIteratorOptionalSequenceprovider_stream_non_json_dataprovider_stream_empty_framec]tRt^"tRtRtRtRtRtRt Rt Rt R t R t R tR tR tRtRtRtRtRtRtRtRtRtRtRtRtRtRtRtRt Rt!Rt"R t#R!#)"FailoverReasonu8Why an API call failed — determines recovery strategy.authauth_permanentbilling rate_limitupstream_rate_limitupstream_blocked overloaded server_errortimeoutssl_cert_verificationcontext_overflowpayload_too_largeimage_too_large image_corruptmodel_not_foundprovider_policy_blockeddata_policy_deniedcontent_policy_blockedmodel_entitlementincomplete_response format_errorrole_alternationinvalid_encrypted_content#multimodal_tool_content_unsupportedreasoning_mandatorythinking_signaturelong_context_tier!oauth_long_context_beta_forbiddenllama_cpp_grammar_patternunknownN)$__name__ __module__ __qualname____firstlineno____doc__rrrrrrrrrrrrrrrrrr r!r"r#r$r%r&r'r(r)r*r+r,__static_attributes__r-;/home/ubuntu/.hermes/hermes-agent/agent/error_classifier.pyrr"sB D%NGJ/)J!LG3)+'O#M'O7-5+/!L) ;*O'/.+(K% ;Gr4rc]tRt^Ft$RtR]R&RtR]R&RtR]R&RtR]R &R t R ]R &] !] R 7t R]R&Rt R]R&RtR]R&RtR]R&RtR]R&]RRl4t]RRl4tRtR#)ClassifiedErrorz>Structured classification of an API error with recovery hints.rreasonN Optional[int] status_code Optional[str]providermodelstrmessage)default_factoryzdict[str, Any] error_contextTbool retryableFshould_compressshould_rotate_credentialshould_fallbackcV^8dQhRR/#returnrCr-)formats"r5 __annotate__ClassifiedError.__annotate__XsSSSr4c \VP\P\P09#N)r8rrrselfs&r5is_authClassifiedError.is_authWs"{{~22N4Q4QRRRr4cV^8dQhRR/#rIr-)rLs"r5rMrN\sBBDBr4c J\VPPR44#)zDTrue when a ``billing`` verdict rests on an ambiguous body (#82154).billing_unverified)rCrBgetrQs&r5rW"ClassifiedError.billing_unverified[s!D&&**+?@AAr4r-)r.r/r0r1r2__annotations__r:r<r=r@rdictrBrDrErFrGpropertyrSrWr3r-r4r5r7r7FsH !%K%"Hm"E=GS$)$$?M>?It!OT!%*d*!OT! SSBBr4r7 model_not_supported_on_free_tierinsufficient_quotabalance_depletedzhard billing limitz$personal-team-blocked:spending-limit"usage_window_and_credits_exhaustedbilling_not_activepayment_requiredinsufficient_creditsno_usable_creditsmember_spend_cap_exceededterminal_quota_exhaustedcredit_balance_exhausted!organization_spend_limit_exceeded!organization_usage_limit_exceededproject_spend_limit_exceeded#insufficient_credits_for_paid_modelz>model is not supported when using codex with a chatgpt accountzno user query foundzmust have non-empty contentzmessages must have non-emptyinvalid_request_bodyz%text content blocks must be non-emptyzcontent field is requiredz*messages: at least one message is requiredinvalid_request_errorunknown_parameterunsupported_parameterprompt_cache_retentionzdict[str, tuple]_SERVER_INJECTED_PARAM_SENDERSc$V^8dQhRRRRRR/#)rJr8rhintsrrKVerdictr-)rLs"r5rMrMs!''~'''r4c RV/VC#)r8r-)r8rss&,r5_vrvs f & &&r4rFTrGrDFrE)rErGrDrGzreasoning is mandatoryz(?Fc3,<"TF qS9xK R#5irPr-.0mnears& r5 /is_reasoning_level_rejection..5sE"DQDy"DT)lower_REASONING_FIELD_TOKENsearchmaxstartendany"_REASONING_LEVEL_REJECTION_MARKERSr{msgtokenrs& @r5is_reasoning_level_rejectionr(s ?? ! ! #C " ) )# .E } s1ekkmb()%))+*: ;D 3E"DE33E3E3E"DE EEr4c V^8dQhRRRR/#rzr-)rLs"r5rMrM8s d ds dt dr4caT;'gRP4p\PV4pVfR#V\^VP 4^0, 4VP 4^`,o\ ;QJd#V3Rl\4F 'gK RM RM!V3Rl\44;'g \V4#)u3Provider 400 saying the model's reasoning cannot be switched OFF ("Reasoning is mandatory for this endpoint and cannot be disabled", the Nous Portal on gpt-6-astra) — or refusing the OFF *level* because the endpoint's closed set starts at ``minimal`` (``is_reasoning_level_rejection``). The opposite of ``is_reasoning_field_rejection``: the field is understood, the *disable* is refused, so the right reaction is to step the effort up to the lowest level rather than drop the field (a dropped field also works, but tells the caller nothing about the next call).r>Fc3,<"TF qS9xK R#5irPr-r~s& r5r2is_reasoning_required_rejection..Es>"=QDy"=rT) rrrrrrr_REASONING_REQUIRED_MARKERSrrs& @r5is_reasoning_required_rejectionr8s ?? ! ! #C " ) )# .E } s1ekkmb()%))+*: ;D 3>"=>333>"=> > c cB^_bBccr4c V^8dQhRRRR/#rzr-)rLs"r5rMrMHsUUCUDUr4caT;'gRP4o\PS4'dR#\PS4pVfR#S\ ^VP 4^ , 4VP 4^ ,pRV9;'gC\;QJd#V3Rl\4F 'gK R# R#!V3Rl\44#)ucProvider 400 rejecting a reasoning wire control by name (``reasoning_effort``, ``reasoning``, ``thinking``/``think``): the field token plus either a generic unsupported marker ("Unrecognized request argument supplied: reasoning_effort", #112781) or a standalone "unsupported" next to the field in either word order ("unsupported reasoning_effort"; "reasoning_effort 'none' unsupported; use minimal|low|medium|high|xhigh", #114460). The route default is the right answer for such a model, so both the main loop and the auxiliary ladder retry once without the disable. A body whose structured ``param``/code names the reasoning field (``'param': 'reasoning.effort'``, ``invalid_reasoning_effort``, #100536) is a rejection whatever the message says — even none. Known trade-off: a 400 about a thinking *state* ("Function calling is not supported when thinking is enabled") also matches — the marker sits right next to the token, so no proximity rule separates it from the forward wordings. Cost is one dropped-disable retry before the spent path takes the fallback chain; the auxiliary ladder already treated it this way.r>TF unsupportedc3,<"TF qS9xK R#5irPr-)rrrs& r5r/is_reasoning_field_rejection..]s'T:SQS:Sr) r_REASONING_PARAM_REJECTIONrrrrrrUNSUPPORTED_PARAM_MARKERS)r{rrrs& @r5is_reasoning_field_rejectionrHs ?? ! ! #C!((-- " ) )# .E } s1ekkmb()%))+*: ;D D T TCC'T:S'TCCTCTC'T:S'T$TTr4c V^8dQhRRRR/#)rJr{r?rKrtr-)rLs"r5rMrM`s00c0g0r4ca/p\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'dRRRR/p/\CRV/C#)zEBilling verdict carrying the #82154 ambiguity marker when applicable.c3,<"TF qS9xK R#5irPr-rpr{s& r5r!_billing_hints..cs @#?a >#?rTFrWpossible_content_filterrB)r_UNVERIFIED_BILLING_PATTERNS _V_BILLING)r{ctxsf r5_billing_hintsr`sLC s @#? @sss @#? @@@#T+DdK /j //3 //r4c$V^8dQhRRRRRR/#)rJr{r?rulesz#Sequence[tuple[Sequence[str], Any]]rKOptional[Verdict]r-)rLs"r5rMrMhs#C(KPar4caVFdwr#\;QJdV3RlV4F 'gK RM RM!V3RlV44'gKG\V4'd V!S4u#Tu# R#)z@Verdict of the first rule whose pattern list hits ``error_msg``.c3,<"TF qS9xK R#5irPr-rs& r5r_first_match..ks0x!I~xrTFN)rcallable)r{rpatternsverdictsf& r5 _first_matchrhsP" 30x03330x0 0 0)1'):):79% G G# r4)rFr%zdict[str, Verdict]_ERROR_CODE_VERDICTS openai-codexopenaigooglegeminiz google-geminizgoogle-ai-studiovertexz google-vertexr unavailabledeadline_exceededinternal anthropic api_errorrate_limit_errorzdict[str, dict[str, Verdict]]_PROVIDER_CODE_VERDICTSc#6"TFqR8wgK VxK R#5i)rmNr-rrs& r5rrs i,HqQhLh,Hs c]tRtRt$RtR]R&R]R&R]R&R ]R &R ]R &R ]R &R ]R&R ]R&R ]R&RtR ]R&RtR]R&RRltRRlt Rt R#)_Ctxizbase_urlFrC anonymouscV^8dQhRR/#)rJrKNoner-)rLs"r5rM_Ctx.__annotate__s==t=r4c \VP4PVn\ VP 4VnVP P4Vn\VP\/4Vn VP;'gRP4P4VnVP;'gRP4P4VnR#r>N)typerr. error_type_extract_error_coder error_codercode_from_cause_chain _headers_ofheadersr<strip provider_slugr= model_slugrQs&r5 __post_init___Ctx.__post_init__stzz*33-dii8OO))+ (["E "mm11r88:@@B::++224::<r4c(V^8dQhRRRRRRRR/#)rJfracfloattokensrmessagesrKrCr-)rLs"r5rMrs(  %    r4c VPVPV,8;'g>VPR8*;'d'VPV8;'gVPV8#)z;Absolute thresholds only proxy for smaller context windows.i)rrr)rRrrrs&&&&r5 large_session_Ctx.large_sessions_!!D$7$7$$>>    6 ) k kt/A/AF/J/j/jdN_N_bjNj r4)rrrrrrN) r.r/r0r1r2rZrrrrr3r-r4r5rrsZF  J HM JHcIt=  r4rc V^8dQhRRRR/#rJcrrKrr-)rLs"r5rMrMst 1r4c^RIHpV!VPVPVPVP VP VPVPVPVPVPVPR7 pTe>\P!RTR,P"TPTP4T# \d"p\PRT4Rp?R#Rp?ii;i)zFirst valid plugin classification (runs before the built-in pipeline so a provider plugin can add or correct verdicts). invoke_hook isolates callback failures; this guard only covers import/dispatch failure.)get_plugin_error_classification) r<r=r:rr error_message error_bodyrrrrz+Plugin error classification unavailable: %sNz@API error classified by plugin hook: %s (provider=%s, status=%s)r8)hermes_cli.pluginsrr<r=r:rrrrrrrrrloggerdebuginfovalue)rrrexcs& r5_plugin_verdictrs F1ZZqwwAMMVWVbVb||155QVVSTSZSZ//!:J:JYZYgYg  VH%++QZZ H N  BCHsBC C8C33C8c V^8dQhRRRR/#rr-)rLs"r5rMrMs(((!2(r4c lVP'gR#^RIHp\V!VP4RR4p\ V4'gR#V!VP VP VPVPVPVPR7p\T\4'gR#TP!R4p\T\"4'd)\%TP'4P)44p\T\$4'gR#\,Uu/uFqfT9gK T\/Y6,4bK ppTP!R4'dRT9dT\09dR TR&\3T3/TBp\TP!R 4\4'd TR ,TR &\P5R TP6TP8TP 4T# \d-p\PRTPT4Rp?R#Rp?ii;i \*dR#i;iuupi) aThe current provider's own ``ProviderProfile.classify_api_error`` verdict, or None. A ``kind: model-provider`` plugin never enters the PluginManager hook lifecycle, so without this a vendor-specific body (a 403 ``quota_exhausted`` that is billing, not auth) could only be corrected by shipping a second plugin component. Scoped to the provider that produced the error; no name table.N)get_provider_profileclassify_api_error)r:rr@rr=z7Provider profile error classification failed for %s: %sr8rGrDFrBzEAPI error classified by provider profile: %s (provider=%s, status=%s))r providersrgetattrrrr:rrrr=rrr isinstancer[rXr?rrr ValueError _HINT_FLAGSrCRETRYABLE_CLIENT_REASONSrvrrr<) rrhookresultrr8krsrs & r5_profile_verdictrs ??? 2+AOO<>RTXY~~agg1==Q\\[\[`[`662 fd # # ZZ !F&# #FLLN$8$8$:;F fn - -)4 DAV QVY E D  yy"## 5(@VSkEk"k!5!G&**_-t44#)/#:  KKW ajj!--9 N3  NPQP_P_ade   Es<4G% A G%'HH1*H1% H0!HH H.-H.c#>"TFq\9gKVxK R#5irP)_FREE_TIER_REFUSAL_PATTERNSrs& r5rr/sGJ !-H$HAA s  c V^8dQhRRRR/#rr-)rLs"r5rMrM3s0Y0Y$0Y#40Yr4ca^RIHpHpHpHpSP pSP 'gRSPR8Xd?VR8Xd8V!VSP4R8Xd \\PRRRR/R7#R #VR 8XdBV!SP4'd*R R R ^R.RR/p\\PRRRV/R7#VR8Xd^RIHpV!SP 4;'g>V!SP"\%SPSP SP"4R7pRV/pVR ,V9d\\P&RRVR7#VR ,^8d'\(P(!4VR ,,VR&\\P*RVR7#\,;QJd#V3Rl\.4F 'gK RM RM!V3Rl\.44'*p T!TSPV 'd SPMR 4p V fR #RV /pVR8Xd\\PRRVR7#\\PRRVR7#)uThe Nous inference gateway's welcome-tier (free tier) refusals, read from the structured body. A 429 carrying a fairshare ``reason`` is either a tier gate (``model_not_free`` / ``feature_not_free``: the model or feature is never served on the free tier, so retrying is pointless — abort this route and fall back) or capacity (``at_capacity`` / ``admission_closed`` / ``rate_limited``: honour ``retry_after``, never rotate the free tier's only credential). A 400/403 whose message names the wrong host or a dark tier is deterministic for the request. The parsed refusal rides ``error_context`` so the terminal copy can say what happened. )WELCOME_TIER_GATE_REASONSparse_welcome_refusalroute_is_welcome_hostwelcome_route_refusalnousnamed_on_welcome_hostFT welcome_route)rDrGrBNr8refused retry_after alternates upgrade_urlr>welcome_refusal)welcome_refusal_from_headers) body_waitreset_atrGrBc3@<"TFqSP9xK R#5irPrrrrs& r5r%_nous_welcome_tier..\sH,GqQUU ,G)hermes_cli.anon_authrr r r r:rr<rrv_Rr#rragent.nous_rate_guardrrr_rate_limit_reset_secondsrtimerr_WELCOME_403_NAMED_PATTERNS) rrr r r statusrefusalrr plain_403kinds f r5_nous_welcome_tierr+3shh ]]F ;;; :: FcM6KFTUTYTY6Z^u6uboo%46M$NP P }.qzz::Y q,M[]^"##ud!2G <> > } G'/VV3O II!:155!&&!))!T4V '* 8  9 9b((E4_bc c = !A %"iikGM,BBC O"--SIICH,GHCCCH,GHHHI i T RD | D !C }"##udZ]^^ booTW XXr4c V^8dQhRRRR/#rr-)rLs"r5rMrMfs66t6(96r4craVPVPuopVPR8Xd\\P RRR7#\ V4pVeV#\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'd\#\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'd\#\V4'd\\P3/\B#VR8XdVPR 8XgR S9d\#VR8XdiR S9db\;QJd#V3R l\ 4F 'gK RM RM!V3R l\ 44'd\\P"4#VR 8Xd*R S9d#RS9d\\P$RR7#VR8Xd(RS9d!RS9d\\P&4#RS9;'gGRS9;'g:RS9;'dRS9;'g RS9;'dRS9;'dRS9pVR8Xd-V'd%\(S9d\\P*4#RS9gRS9dRS9d\,#R#)zLHighest-priority provider-specific shapes that a status code would misroute.rFrxNc3,<"TF qS9xK R#5irPr-rrrs& r5r*_provider_special_cases..qs >=8=rTc3,<"TF qS9xK R#5irPr-r/s& r5rr0t <;8;rr thinking_signature_invalidthinkingc3,<"TF qS9xK R#5irPr-r/s& r5rr0s2^E]8E]rrz extra usagez long contextrwzlong context betaznot yet availablezerror parsing grammarzjson-schema-to-grammarzunable to generate parsertemplatezinvalid json schemazregex lookaround not supportedz'do not have an active grok subscriptionzout of available resourcesgrok)rr:rrvr"rr+r _CONTENT_POLICY_BLOCKED_PATTERNS_V_CONTENT_BLOCKED_ACCOUNT_POLICY_BLOCK_PATTERNS_V_POLICY_BLOCKED!_is_codex_masked_replay_rejectionr%_ABORT_FALLBACK_V_INVALID_ENCRYPTED_THINKING_MUTATION_WORDSr(r)r*_NO_USER_QUERY_SIGNALr+_V_AUTH_FALLBACK)rr'welcome grammar_hitrs& @r5_provider_special_casesrEfs9%%KCvv%%"''5%PP #G s >= >sss >= >>>!! s <; c)I"..//1C7.s'[CZaS\(9CZs$'TF)rD)MoAPresetNotFoundErrorN) rr_MOA_ADAPTER_SHAPE_BUGSrvr"r# agent.errorsrLrrr)rrLsf r5_moa_special_casesrOsq %CC'[CZ'[CCC'[CZ'[$[$["//U3336@J`6a6a2b  E 2kgkkr4c V^8dQhRRRR/#rr-)rLs"r5rMrMs  d 0 r4cVVP\8XdRVP9d\#\P VP4pVfZ\ P VPVP4p\P V/4P VP4pV#)z.Structured error codes from the response body.zrequest validation failed:) r#PROVIDER_STREAM_NON_JSON_ERROR_CODEr_V_FORMAT_ERRORrrX_PROVIDER_CODE_FAMILIESrr)rrfamilys& r5_by_error_coderVs vv449UYZY^Y^9^"&&qvv.G(,,Q__aooN)--fb9==affE Nr4c V^8dQhRRRR/#rr-)rLs"r5rMrMscc4c-cr4c@a\SP\4pVeV#\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44pV'd\ SP\ 4#\SP\4#)zmMessage patterns when no status code settled it; status-less usage limits get the same disambiguation as 402.c3@<"TFqSP9xK R#5irPrrs& r5r_by_message..s@*?Q155j*?rTF)rr_MESSAGE_HEAD_RULESr_USAGE_LIMIT_PATTERNS _classify_402r[_MESSAGE_TAIL_RULES)rhead usage_limitsf r5 _by_messagerasg 2 3D  #@*?@###@*?@@K)4= %b,quuNa:bbr4c V^8dQhRRRR/#rr-)rLs"r5rMrMs--T-/-r4caVPo\S\\3\\ 334pVeV#\ ;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'dXVP'gF^RI H pV!VP4e\ #VPRR^4'd\#\ #VPR8Xd-R S9d&R S9d\\ P"3/\$B#VP\&9;'g&\)VP*\,\.\034pV'd\ #R#) zNSSL, disconnect, circuit-breaker and transport-type heuristics, in that order.Nc3,<"TF qS9xK R#5irPr-r/s& r5r _by_transport..s 9888rTF)!get_reasoning_stale_timeout_floorg333333?i RuntimeErrorzconsecutive stale attemptszaborting this call)rr_SSL_CERT_VERIFY_PATTERNS _V_SSL_CERT_SSL_TRANSIENT_PATTERNS _V_TIMEOUTr_SERVER_DISCONNECT_PATTERNSr:agent.reasoning_timeoutsrfr=r_V_CONTEXT_OVERFLOWrrvr"rr>_TRANSPORT_ERROR_TYPESrr TimeoutErrorConnectionErrorOSError)rsslrf transportrs& @r5 _by_transportrus %%C s7EH_akGlm nC   s 98 9sss 98 999!--- O ,QWW 5 A &'ooc63&G&G"WZW ||~%*F#*MRfjmRm"**000 66ww*QWW|]lnuNv:wI":,,r4c V^8dQhRRRR/#rr-)rLs"r5rMrMsRR$R,Rr4cVPpVfR#RTu;8:dR8d MM\MRTu;8:dR8d MM\MRpV\9d\V,!V4#T#)uNHTTP status code with message-aware refinement (unlisted 4xx/5xx → generic).Nr X)r:rS_V_SERVER_ERROR_STATUS_HANDLERS)rr'defaults& r5 _by_statusr}sU ]]F ~!$!4!4oSTZM`]`M`/fjG*04D*D F #A &Q'Qr4z-Sequence[Callable[[_Ctx], Optional[Verdict]]]_STAGESr<r>r=rri@ rrapi_keyc<V^8dQhRRRRRRRRRRR RR RR R R R/ #)rJrrr<r?r=rrrrrrrrKr7r-)rLs"r5rMrMsZ!2!2 !2#&!247!2!2,/!2HK!2!2 !2  !2r4ca^RIHp\V4p V f\V4PR8XdRp \ V4p \ Y T \W 4YY4T\T;'gR4V!W4R7 o\RV3Rl\44\4p \W 4p V R,\P\P39d\!S4p V 'd V R V R 2p R V R VR VRV /p\#R//VCV CB#)aClassify an API error into a structured recovery recommendation (see ``_STAGES``). ``base_url`` (optional) is the route the call went to; the Nous welcome tier keys its dark-tier 403 on it because that refusal carries no distinguishing message. ``api_key`` identifies an anonymous request; a host or fairshare reason alone does not. The credential is never included in the returned context.)is_anonymous_requestRateLimitErrorrr>)rc30"TF qfKVxK R#5irPr-)rvs& r5r%classify_api_error.. sP>!AA>s c32<"TF q!S4xK R#5irPr-)rstagers& r5rr s>gUagsr8z (endpoint: )r:r<r=r@r-)r!r_extract_status_coderr._extract_error_bodyr_build_error_msgr?nextr~ _V_UNKNOWN_extract_messager"rr_off_route_hostr7)rr<r=rrrrrrr:rrr@hostbasers&$$$$$$$ @r5rrs:&u-KtE{337GG u %D  D"25"?|SR5H&x9 A P>g>PR\]Gu+GxRWWb&7&788q!  dV15G ; HguiY` aD  1000 11r4c V^8dQhRRRR/#)rJrrrKr?r-)rLs"r5rMrMstr4c^RIHp^RIHpV!VP4pV'd"V!VP VP4RJdR#V#)zeThe contacted host when ``base_url`` is set and is not the provider's own endpoint; ``""`` otherwise.)provider_owns_route)base_url_hostnameTr>)hermes_cli.route_identityrutilsrrr)rrrrs& r5rrs8=' QZZ (D &q CtK Kr4upstream_unavailablec V^8dQhRRRR/#rJrrrKrtr-)rLs"r5rMrM*s  4 G r4caSP\9d\#SPR8H;'dSP\8HpT;'gQ\ ;QJd*V3RlR\ ,4F 'gK RM RM!V3RlR\ ,44pV'd\#\ ;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'd\#\#)z xai-oauthc3@<"TFqSP9xK R#5irPrrs& r5r_status_403../sp3oaAEEz3orTFc3@<"TFqSP9xK R#5irPrrs& r5rr5s :9!:9r)key limit exceededzspending limit) r_403_TRANSIENT_CODES _V_OVERLOADEDr_XAI_SPENDING_LIMIT_ERROR_CODEr_BILLING_PATTERNSr_UPSTREAM_BLOCKED_PATTERNS_V_UPSTREAM_BLOCKEDrB)r xai_spendrsf r5 _status_403r*svv%%;.[[166=[3[Ipp33p3[^o3op333p3[^o3oppG s :9 :sss :9 :::"" r4c V^8dQhRRRR/#rr-)rLs"r5rMrM:s o o4 oG or4cVP\9d\#\VP\ 4pVeV#\ VPVP4'd\#\#rP) r_BILLING_ERROR_CODESrrr _404_RULES_model_id_missing_known_prefixrr_V_MODEL_NOT_FOUNDr)rrs& r5 _status_404r:sV vv%%155*-G"@ aoo!^!^ ndnnr4c V^8dQhRRRR/#rr-)rLs"r5rMrMHs4Gr4caSP\9d\#\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'd\ #\ SPSP4'd@\SP4pV'dRV/M/p\\PRVR7#SPR8H;'gg\;QJd5V3RlR \,\,4F 'gK RM* RM&!V3RlR \,\,44p\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44pV'd@V'g8\!SP"SPSP$4'g\#\'SP"SPSP$4pV'd?\\P(3/\*BRR \,P,!4V,//B#\.#) c3@<"TFqSP9xK R#5irPrrs& r5r_status_429..Ps 43!:3rTFupstream_providerrusage_limit_reachedc3@<"TFqSP9xK R#5irPrrs& r5rr[s8`qQUU `rc3@<"TFqSP9xK R#5irPrrs& r5rr^sG2FQ155j2FrrBr)r)rrrr_OVERLOADED_PATTERNSr_is_openrouter_upstream_errorrr_extract_upstream_provider_namervr"rr\r_RATE_LIMIT_PATTERNS!_has_usage_limit_transient_signalrrr$r_ROTATE_FALLBACKr% _V_RATE_LIMIT)rupstreamr quota_wallexplicit_rate_limitresetsf r5 _status_429rHs vv%% s 43 4sss 43 444$QVVQ__==2166:19"H-r"(($cRR 00CC847LLO``8CCC847LLO``85J#G2FG###G2FGG-6WXYX]X]_`_e_eghgpgp6q6q %aeeQVVQYY ?E "--e#3eJPTPYPYP[^cPcCdee r4c V^8dQhRRRR/#rr-)rLs"r5rMrMhsJJ4JGJr4cva\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44;'gSP\9pV'd-\ SP SP 4'g\#\SP \4;'g\#)c3@<"TFqSP9xK R#5irPrrs& r5r_status_5xx..ksF)EA!%%Z)ErTF) r_REQUEST_VALIDATION_PATTERNSr_5XX_VALIDATION_CODES#_is_server_injected_param_rejectionrrrSr_OVERFLOW_AS_5XX_RULESrz)r validationsf r5 _status_5xxrhsqF)EFF)EFFii!&&TiJiJ=aeeQ__UU 5 6 I I/Ir4c V^8dQhRRRR/#rJrrrKrCr-)rLs"r5rMrMqsVVdVtVr4cVP;'gRP4P4R8XdR#^RIHp\ VP 4;'dV!VP R4#)z[The usage-window 402 code is Nous's: any other upstream sending it keeps main's text rules.r>r T)base_url_host_matchesznousresearch.com)r<rrrrrCr)rrs& r5_is_nous_routerqsR b!'')V3+   U U 5ajjBT UUr4c ,V^8dQhRRRRRRRRRR/#) rJr{r? result_fnzCallable[..., Any]rrrrKr-)rLs"r5rMrMys9EESE-?EsEWZEfiEr4caV\8Xd2RR/p\V4;p'dWTR&V!R //\CRR/CBRV/B#\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44;'dC\;QJd#V3Rl\ 4F 'gK RM RM!V3Rl\ 44pT!R /V'd \ B#\B#) atDisambiguate 402: "usage limit, try again in 5 minutes" is a periodic quota, not billing. The Nous usage-window code is decisive (its prose names the reset time, which must not demote it to a transient rate limit); every other 402 keeps the text rules. A usage-window 402's optional ``display_message`` (server-set wording) rides in ``error_context`` for the refusal line. usage_windowTdisplay_messagerGFrBc3,<"TF qS9xK R#5irPr-rs& r5r _classify_402..sB,AqN,Arc3,<"TF qS9xK R#5irPr-rs& r5rrsK >1Y >rr-)_NOUS_USAGE_WINDOW_402_CODE_usage_window_display_messagerrr\_USAGE_LIMIT_TRANSIENT_SIGNALSr)r{rrrcontextdisplay transientsf&&& r5r]r]ys  **#14"83D9 97 9)0% &[CjC*;UC[SZ[[B,ABB,ABBssK >KsssK >KHI  D DD DDr4c V^8dQhRRRR/#)rJrrrKr?r-)rLs"r5rMrMs    r4cH\V\4'gR#WPR43Fsp\V\4'dVPR4MRp\V\4'gKDVP 4'gK\VP 4R,u# R#)zxThe server's optional wording for a usage-window 402 (top level or under ``error``), trimmed and capped; "" when absent.r>rrNNiN)rr[rXr?r)rholderrs& r5rrst dD ! !'*+1;FD1I1I ,-t eS ! !ekkmm;;=& &, r4c V^8dQhRRRR/#)rJcontentrrKrCr-)rLs"r5rMrMs  S T r4c^RIHp\V\4'dTMRFp\V\4'dVP R4MRp\V\4'dVP R4MTp\V\ 4'gKmVPR4'gK\V4V8gKR# R#) zTrue when a rejected ``content`` list carries a ``data:image/`` part the shrink pass would rewrite (over ``conversation_compression._IMAGE_SHRINK_TARGET_BYTES``; below it a shrink retry is a no-op).)_IMAGE_SHRINK_TARGET_BYTES image_urlNurlz data:image/TFr-) agent.conversation_compressionrrlistr[rXr? startswithlen)rrpartimagers& r5_has_large_inline_imagersJ%gt44"<)3D$)?)?%T",UD"9"9eiiu c3  CNN=$A$Ac#hQkFk = r4c V^8dQhRRRR/#)rJrrrKrCr-)rLs"r5rMrMsstr4c\V\4'dVPR4MRp\V\4'dTMREFp\V\4'dVPR4MRpVPR4R8wg'\V\4'd\ V4^8dKkVUu.uFp\ V4P 4NK ppVR,RR.8XgKVRRR R .8XgK\;QJdR V4F 'gK R M R M !R V44'dK\VPR44'gEKR # R #uupi)u400 rejecting a *message* ``content`` field whose rejected value carries a large inline image. Nebius Token Factory caps a single image at 10 MiB and reports the violation through the field that failed to coerce — pydantic ``{"type": "string_type", "loc": ["body","messages",N,"content","str"], "msg": "Input should be a valid string", "input": [...]}`` — naming no size vocabulary, so the keyword multimodal *tool*-content rule (#104731) claimed it and spent its retry stripping tool images that were never there (#112473). The same list-shaped content with a small image succeeds, so the image bytes are the trigger. Tool-scoped locs (``messages.N.tool.content.str``) stay with #104731. detailNlocr string_type:NrJNrrrr?c3B"TFqPR4xK R#5i)toolN)rrxs& r5r7_oversized_message_content_rejection..s^ */QLL %sTFinputr-) rr[rXrrr?rrr)rdetailsrrrpartss& r5$_oversized_message_content_rejectionrs%/tT$:$:dhhx G'66'B>#-fd#;#;fjj ::f  .jd6K6KsSVxZ[| ),-AQ- 9, ,rs 5?Q1QZ]Z]^ */^ Z]Z]Z]^ */^ [ [ %fjj&9::?  .s3"Ec V^8dQhRRRR/#rr-)rLs"r5rMrMsIITIgIr4caVPVPuop\VP4'd\#\ S\ 4pVeV#\S9d\#VR8Xg9RS9g2RS9dRS9g$RS9gRS9gRS9dRS9gRS9d\#\S9g#\S4'g\S4'd\#\SVP4'd\ #\";QJd#V3R l\$4F 'gK R M R M!V3R l\$44'd\&#\";QJd#V3R l\(4F 'gK R M R M!V3R l\(44'd\*#\";QJd#V3R l\,4F 'gK R M R M!V3R l\,44'g V\.9d\0#\";QJd#V3Rl\24F 'gK R M R M!V3Rl\244'gVR8Xd3\4P7RVP8VP:S4\0#V\<9d\>#\ S\@4pVeV#\CRR\EVP444R4p\GV4^8;'gVR9pV'd VPIRR^P4'd\J#\0#)uV400 Bad Request — image/tool shapes, request-shape rejections, overflow, or generic.r%zencrypted content for itemzcould not be verifiedz0could not decrypt the provided encrypted_contentz2encrypted content could not be decrypted or parsedencrypted_contentzwas not issued to this callerz1conflicting authenticated continuation identitiesc3,<"TF qS9xK R#5irPr-r/s& r5r _classify_400..s ;:8:rTFc3,<"TF qS9xK R#5irPr-r/s& r5rrs 8787rc3,<"TF qS9xK R#5irPr-r/s& r5rrs 6585rc3,<"TF qS9xK R#5irPr-r/s& r5rrr2rrlu%Malformed message array 400 (invalid request body) classified as format_error, NOT context overflow — failing fast + falling back instead of entering the compression loop. This usually means an empty-content assistant stub is in the transcript; num_messages=%s approx_tokens=%s. error=%.200sc38"TFq'gK VxK R#5irPr-rrs& r5rrsn h1lmQQ hs  c3"TF6p\T;'gR4P4P4xK8 R#5irr?rrrs& r5rrs1 hGg!QWW"!3!3!5!;!;!=!=Ggs A+Ar>g?i8>r>r)&rrrr_V_IMAGE_TOO_LARGEr_IMAGE_TOOL_RULES&CODEX_ACCOUNT_MODEL_ENTITLEMENT_MARKER_V_MODEL_ENTITLEMENTr?_REASONING_MANDATORY_PATTERNrr_V_REASONING_MANDATORYrrrzr_MALFORMED_TOOL_ARGS_PATTERNS_V_MALFORMED_TOOL_ARGS_ROLE_ALTERNATION_PATTERNS_V_ROLE_ALTERNATION_400_VALIDATION_PATTERNS_400_VALIDATION_CODESrS_INVALID_MESSAGE_BODY_PATTERNSrwarningrr_MEMORY_CEILING_ERROR_CODESr_400_TAIL_RULESr_body_message_candidatesrrrn)rrrbody_msg is_genericrs& @r5 _classify_400r sOqvvIC,AFF33!!3 12G.4## **.IS.P$+0G30N ;s B<C s"'F#'M r's~r4rc\VP\\V4'dVPVP 4#RVP 4#)r>)r]rr[rrrr#s&r5r'r's6=q8I8IaffSTSYSYZrSTSYSYZr4r iic\#rP)rkr#s&r5r'r'szr4ic\#rP)_V_PAYLOAD_TOO_LARGEr#s&r5r'r'sRfr4ic\V4#rP)r$r#s&r5r'r's +A.r4rrxiicR\VP\4;'g\#rPrrrrr#s&r5r'r'<'=>OO-Or4icR\VP\4;'g\#rPr.r#s&r5r'r'r/r4z$dict[int, Callable[[_Ctx], Verdict]]r{c$V^8dQhRRRRRR/#)rJr{r?rr[rKrCr-)rLs"r5rMrM#s"   D W[ r4c@aa\;QJd#V3Rl\4F 'gK RM RM!V3Rl\44'dR#V\V43Uu.uFp\V\4'gKVNK pp\;QJdRV4F 'gK RM RM !RV44'dR#S'dU\ SR4'dC\;QJd#V3Rl\ 4F 'gK R# R#!V3Rl\ 44#R#uupi)z\Whether a usage-limit response identifies a reset window (message, body fields, or headers).c3,<"TF qS9xK R#5irPr-)rpatternr{s& r5r4_has_usage_limit_transient_signal..%s N/MGi /MrTFc3b"TF%p\Fq!PV4R9xK K' R#5iNNr>) _RESET_FIELDSrX)rpayloadfs& r5rr5(s$ [8];;q> +] +8s-/rXc3L<"TFpSPV4R9xK R#5ir7rX)rhresponse_headerss& r5rr5+s"Un#''**.3sO7!:a;NAA7s) )_atgr8) agent.retry_utilsrFrGr@r9rXendswithrrrrr%) r{rr?rFrGr:namersecondss &&& r5r$r$/sVOj&67O!DKK%E "}}U## 53,(G(G3e tyy{ :;;4U;;H"P--=>>K #I ..r4c$V^8dQhRRRRRR/#)rJr=r?r<rKrCr-)rLs"r5rMrMAs!  #   r4cT;'gRP4pV'dRV9dR#^RIHp\T!T;'gRP4V44# \dR#i;i)zTrue when a bare model id is only known to the provider as ``vendor/id``. Never guesses: an id absent from the curated catalogue returns False so real endpoint problems keep their retryable ``unknown`` classification. r>/F)suggest_prefixed_model_id)rhermes_cli.model_normalizerRrCr)r=r<rMrRs&& r5rrAs` KKR   D 3$;H-x~~2.D.D.FMNN sAA A,+A,c$V^8dQhRRRRRR/#)rJr{r?r<rKrCr-)rLs"r5rMrMQs!  3 # $ r4caaT;'gRP4P4o\P4Fwr#S'gKVS9gK\;QJd#V3Rl\ 4F 'gK RM RM!V3Rl\ 44'gKb\;QJdV3RlV4F 'gK RM RM!V3RlV44'*u# R#)zTrue when a 400 blames a one-route-only parameter this route never sends. Conservative: known parameters only, and only when ``provider`` is not a sender, so a genuine bad parameter (``max_tokens`` on GPT-5) stays format_error. r>c3,<"TF qS9xK R#5irPr-)rwr{s& r5r6_is_server_injected_param_rejection..Ys3cLbqNLbrTFc3,<"TF qS9xK R#5irPr-)rsenderrs& r5rrXZsIv]2r)rrrqitemsr_PARAM_REJECTION_WORDS)r{r<paramsendersrsf& @r5rrQs ^^**,224M8>>@ 9)+3cLb3c3cLb3c0c0csIIsssIIII IA r4zrequest blocked.zunsupported content typec V^8dQhRRRR/#rr-)rLs"r5rMrMbs$r4chVPR8wgVPR 9dR#\VP\4'd VPM/p\ VP R4;'gR4P4P4\8Xg/V'g)\VP9dRVP9dR#\R\V44R4pVPR8H;'dV\8H;'g%VPP4R\ 28H#) uHTTP 400 / status-less ``{code: invalid_prompt, message: "Request blocked."}`` from ``openai-codex`` — as an SDK error body, a Responses ``error`` SSE frame, or the ``response.failed`` text ``"invalid_prompt: Request blocked."`` — or the bare ``{"detail": "Unsupported content type"}`` envelope the same backend returns for a rejected encrypted-reasoning replay (#51512). Both are exact envelopes, provider-gated.rFrr>Tc3"TF5q'gK \V4P4P4xK7 R#5irPr r s& r5r4_is_codex_masked_replay_rejection..ps.Y5SWX+SV\\^))++5Ss ?/?invalid_promptzinvalid_prompt: )Nr )rr:rrr[r?rXrr!_CODEX_UNSUPPORTED_CONTENT_DETAILrrrr_CODEX_MASKED_REPLAY_MESSAGE)rrrs& r5r=r=bs  .(AMM,L--1662D 488H  # #$**,2248YY 6!%%?HPQPUPUDUY5Md5SY[]^H FF& & S S87S+S    +,H+IJJr4c V^8dQhRRRR/#)rJrrrKr[r-)rLs"r5rMrMvs00S0T0r4c\V\4'dVPR4MRp\V\4'dV#/#)z1``body["error"]`` when it is a dict, else ``{}``.rN)rr[rX)rerrs& r5r@r@vs5)$55$((7 4CS$''3/R/r4c V^8dQhRRRR/#)rJtextrrKOptional[dict]r-)rLs"r5rMrM|s66S6^6r4c\V\4'dVP4'gR#\P!V4p\T\4'dT#R# \P \ 3dR#i;i)zVParse a JSON object string; None for non-strings, blanks, invalid JSON or non-objects.N)rr?rjsonloadsJSONDecodeError TypeErrorr[)rjinners& r5 _json_dictrr|sg tS ! !djjll 4 ud++555  ) ,sA A?>A?c V^8dQhRRRR/#)rJerr_objr[rKr?r-)rLs"r5rMrMsPPP#Pr4cVPR/4p\V\4'd\VPR44MRpV'd<\ \ V4PR4;'gR4P 4#R#)zOLowercased inner message from OpenRouter's ``error.metadata.raw`` JSON wrapper.metadatarawNr@r>)rXrr[rrr?r@r)rtrvrqs& r5_openrouter_wrapped_messagerxsf{{:r*H/9(D/I/IJx||E* +tEBG3z% $$Y/552 6 < < >OROr4c$V^8dQhRRRRRR/#)rJrrrrrKr?r-)rLs"r5rMrMs!ISSr4c.\V4P4pR;r4\V\4'd\ V4p\VP R4;'gR4P4;'g3\VP R4;'gR4P4pV'd \ V4MRpV.pV'dW29dVPV4V'dWB9dWC9dVPV4RPV4#)zLowercased str(error) + body message + OpenRouter-wrapped upstream message (OpenAI SDK's APIStatusError.__str__ omits the body, so it is appended).r>r@ ) r?rrr[r@rXrxappendjoin)rrraw_msgr metadata_msgrtrs&& r5rrs%j G  H$T"w{{9-334::<ffDHHYDWD]D][]@^@d@d@f?F27;B IEH+ X 3 8T \" 88E?r4c V^8dQhRRRR/#)rJrr[rKz Iterator[Any]r-)rLs"r5rMrMs m m4 mM mr4c#"\V4PR4xVPR4xVPR4xVPR4p\V\4'dVPR4MRxVPR4p\V\4'dVPR4M\V\4'dTMRxR#5i)z\Body message fields in priority order (OpenAI, flat, litellm/Bedrock proxy, FastAPI shapes).r@ errorMessage errorArgsr8Nr)r@rXrr[r?)rargsrs& r5rrs T   y )) ((9  ((> "" 88K D *4 6 6$((8 D@ XXh F#-fd#;#;&**Y :V\^aKbKbhllsCCc(V^8dQhRRRRRRRR/#)rJrrpickzCallable[[Any], Any]r|rrKr-)rLs"r5rMrMs*  Y .B S UX r4cTp\^4FCpV!V4pVeVu#\VRR4;'g\VRR4pVeWcJdV#TpKE V#)z]First non-None ``pick(exc)`` over the error and its __cause__/__context__ chain (max 5 deep).N __cause__ __context__)ranger)rrr|current_foundcauses&&& r5rrsiG 1XW   Ld3\\ww W[7\ =E,  N Nr4c V^8dQhRRRR/#)rJrrrKr9r-)rLs"r5rMrMsIICIMIr4c\VRR4p\V\4'dV#\VRR4p\V\4'd^dTu;8:d R8dV#R#)r:Nr'ry)rrr)rrs& r5 _status_ofrsV 3 t ,D$ 3$ 'DdC((SD->3->4H->DHr4c V^8dQhRRRR/#)rJrrrKrkr-)rLs"r5rMrMs > ># >. >r4c\VRR4p\V\4'dV#\VRR4pVeVP4MRp\T\4'dT#R# \dR#i;i)rNresponse)rrr[rmr)rrr json_bodys& r5_body_ofrst 3 %D$ sJ-H'/';HMMO #9d339== sA$$ A32A3c V^8dQhRRRR/#)rJrrrKr-)rLs"r5rMrMsDDSDSDr4cn\\VRR4RR4pV'd\VR4'dV#R#)rNrrX)rrA)rrs& r5rrs2gc:t4iFG''5"9"97CtCr4c V^8dQhRRRR/#)rJrrrKr9r-)rLs"r5rMrMsr4c\V\4'gR#\V4pRUu.uFq!PV4NK upVPR4.,p\ RV4R4#uupi)uNumeric HTTP error status (400-599) from ``error.code``/``code`` in a structured body. An aggregator/relay can deliver the upstream failure only this way — as an error object inside an HTTP-200 SSE stream — leaving the SDK to raise a status-less ``APIError`` whose ``body`` carries the status (#121270). String codes stay symbolic (``_code_from_payload``'s ``"400" is not a code``), unlike the string-parsing text-SSE sibling ``chat_completion_helpers._status_code_from_payload``.Nrc3"TFLp\V\4'gK\V\4'dK3RTu;8:d R8gKDMKHVxKN R#5i)r ryN)rrrC)rrs& r5r)_status_code_from_body..s:dJq*Q"4Z4=PUX\]Uc`cUcUcJsAA AA A)r:r' http_statusr)rr[r@rXr)r error_objr candidatess& r5_status_code_from_bodyrsn dD ! !4 I,\],\q--",\]aeaiaijpaq`rrJ dJd  ^sA.c V^8dQhRRRR/#)rJrrrKr9r-)rLs"r5rMrMs mr4cd\V\R4pVf\\V\/44pV#)zHTTP status code from the error or its cause chain; a body-carried numeric ``code`` counts when the exception itself carries no status (#121270).N)rrrr)rr's& r5rrs0uj$ 7F ~'(9%2(NO Mr4c V^8dQhRRRR/#)rJrrrKr[r-)rLs"r5rMrMs22y2T2r4c$\V\/4#)z?Structured error body from an SDK exception or its cause chain.)rr)rs&r5rrs UHb 11r4c(V^8dQhRRRRRRRR/#) rJr:rtop_keysz Sequence[str] peek_messagerCrKr?r-)rLs"r5rMrMs)222}2D2UX2r4ca\S\4'gR#SPR/4p\V\4'Ed+VPR4;'gVPR4;'gRp\V\4'gVPR4;'gTp\V\4'd<VP 4'd&VP 4R8wdVP 4#VPR4pV'd\\V\4'dFVP 4P R4'd!\ \V4R R 4pV'dV#\V3R lV4R4p\V\\34'd\V4P 4MRpV'd VR8wdV#R#) aaCode/type from ``payload.error`` or a top-level key; ``"400"`` is not a code. ``peek_message`` also parses a JSON ``error.message`` for a nested code (Responses API surfaces ``invalid_encrypted_content`` this way). Gemini puts the HTTP status in ``error.code`` and the symbolic code (``UNAVAILABLE``) in ``error.status``, so a numeric code defers to it.r>rrrr'400r@{Fc3x<"TF/pSPV4'gKSPV4xK1 R#5irPr=)rrr:s& r5r%_code_from_payload..s'DAW[[^Qs::)rr) rr[rXr?rr_code_from_payloadrrrr)r:rrrrr@ nested_coderjsf&& r5rrsE gt $ $ GR(I)T""}}V$CC f(=CC$$$==*22dD dC TZZ\\djjle6K::< -- * Jw449S9STW9X9X,Z-@BXZ_`K"" DDb ID *4#s < <3t9?? "DDEM41r1r4c V^8dQhRRRR/#)rJrr[rKr?r-)rLs"r5rMrM s__d_s_r4c0V'd\VRR4#R#)z4Extract an error code string from the response body.Tr>)rr errorCode)r)rs&r5rr sRV d$G N^\^^r4c$V^8dQhRRRRRR/#)rJrrrr[rKr?r-)rLs"r5rMrMs!66I6T6c6r4c\R\T;'g/44R4pV'dVP4R,#\V4R,#)zCExtract the most informative error message (structured body first).c3"TF7p\V\4'gKVP4'gK3VxK9 R#5irP)rr?rr s& r5r#_extract_message..s,d?a:aQTCUZ[ZaZaZc?sAA ANr)rrrr?)rrrs&& r5rrsB d3DJJB?dfj kCCIIK 55CJ 55r4c$V^8dQhRRRRRR/#)rJrrr<r?rKrCr-)rLs"r5rMrMs& ] ] ]s ]t ]r4cz\V4p\VPR4;'gR4P4P 4R8wdR#T;'gRP4P 4R8XdR#VPR4p\ V\ 4;'dRV9;'gR V9#) zOpenRouter's "Provider returned error" wrapper: the key is healthy, the upstream failed, so credential rotation is the wrong recovery.r@r>zprovider returned errorF openrouterTrvrw provider_name)r@r?rXrrrr[)rr<rhrvs&& r5rrs T C 3779  # #$**,2248QQB%%'<7wwz"H h % \ \5H+<+[+[S[@[\r4c V^8dQhRRRR/#)rJrrrKr;r-)rLs"r5rMrM%sLL#L-Lr4c\V4PR4p\V\4'dVPR4MRp\V\4'd'VP 4'dVP 4#R#)zCPull the upstream provider name out of OpenRouter's error metadata.rvrN)r@rXrr[r?r)rrvrMs& r5rr%sZ$##J/H,6x,F,F8<< (DD%dC00TZZ\\4::<KtKr4)r]znot available on the free tier)zinsufficient creditsr^zinsufficient balancezcredit balancezcredits exhaustedzcredits have been exhaustedzrequires available creditszaccount balance is too lowzno usable creditsztop up your creditszpayment requiredzbilling hard limitzexceeded your current quotazaccount is deactivatedzplan does not includeout of extra usagez out of fundszrun out of fundsr_zbudget limit exceeded)r)z rate limitrztoo many requests throttledzrequests per minuteztokens per minutezrequests per dayz try again inzplease retry afterzresource exhaustedresource_exhaustedzresource-exhaustedresourceexhaustedzrate increased too quicklythrottlingexceptionztoo many concurrent requestsservicequotaexceededexception throttling)rztemporarily overloadedz!service is temporarily overloadedz%service may be temporarily overloadedzserver is overloadedzserver overloadedzserver overloadserver_overloadzservice overloadedzservice is overloadedzupstream overloadedzcurrently overloadedzQupstream model provider is temporarily unavailable. please try again in a moment.z at capacityz over capacity)z usage limitquotazlimit exceededr) z try againretryz resets atzreset inz resets inz reset afterz available inwaitzrequests remainingperiodicwindowz per minutez per second)zrequest entity too largezpayload too largezerror code: 413request_too_largez request exceeds the maximum size) z image exceedszimage too largerzimage size exceedszimage dimensions exceedz"dimensions exceed max allowed sizezmax allowed size: 8000z media exceedszmedia too largezpatches after processingzmake sure your payload is belowz(streamreadconstraints.getmaxstringlength)zinvalid png imagezinvalid jpeg imagez1base64 string of provided image cannot be decodedzIdownloaded response does not contain a valid jpg, png, webp, or ico image) ztext is not setz%tool message content must be a stringztool content must be a stringztool message must be a stringzexpected string, got listzexpected string, got arrayz tool_call.content must be stringztool.content.strzinput should be a valid string'chatcompletionrequesttoolmessagecontent) z memory guardzmemory limit exceededmemory_guard_tierzdynamic ceilingzmemory ceilingzavailable memoryz out of memoryzinsufficient memoryzprefill would requirezpredicted peak wouldzprefill safety cap metal_cap>prefill_memory_abortedprefill_memory_exceededomlx_prefill_memory_exceeded)zcontext lengthz context sizezmaximum contextz token limitztoo many tokenszreduce the lengthzexceeds the limitzcontext windowzprompt is too longzprompt exceeds max length max_tokenszmaximum number of tokenszexceeds the max_model_len max_model_lenz prompt lengthinput is too longzmaximum model lengthzcontext length exceededztruncating inputz slot context n_ctx_slotu超过最大长度u上下文长度z.tokens in request more than max tokens allowedrzmax input tokenz input tokenz*exceeds the maximum number of input tokenszmaximum allowed input length) zis not a valid modelz invalid modelzmodel not foundrzdoes not existz no such modelz unknown modelzunsupported modelz(no endpoints found that support tool usezis no longer free) zroles must alternatezrole must alternatezmust alternate betweenzconsecutive user messagesz'consecutive messages with the same rolez%consecutive messages of the same rolezsame role in a rowzmultiple user messages in a rowz$adjacent messages with the same role) zinvalid tool call argumentszinvalid tool_call argumentszinvalid tool_calls argumentszinvalid function call argumentszinvalid function_call argumentsztool call arguments are invalidztool_call arguments are invalidz#function call arguments are invalidz#function_call arguments are invalid)unknown parameterunsupported parameterunrecognized request argumentrmrnro)metamusemslz model-apibedrockmantle)r7rr, unrecognized) signaturezcannot be modifiedzmust remain as they were)z.'types.SimpleNamespace' object is not iterablez7'types.SimpleNamespace' object has no attribute 'index')z.no endpoints available matching your guardrailz0no endpoints available matching your data policyz,no endpoints found matching your data policy)z'blocked for a previous policy violation) z'flagged for possible cybersecurity riskztrusted access for cyberzviolates our usage policiesz violates openai's usage policieszyour request was flagged byz prompt was flagged by our safetyz+responses cannot be generated due to safetycontent_filterresponsibleaipolicyviolation new_sensitivezcontent exists riskz&data may contain inappropriate contentdata_inspection_failed) zinvalid api keyinvalid_api_keygateway_auth_failedauthentication unauthorized forbiddenz invalid tokenz token expiredz token revokedz access deniedz&failed to extract accountid from token)zreturned an empty responsezempty response despite retriesz#provider returned an empty responsezmodel returning empty responseszempty response stream)z timed outzturn timed outzrequest timed outzdeadline exceededzoperation timed outzupstream timed out)zconnection refused econnrefusedzno route to hostznetwork is unreachableznetwork unreachablezname or service not knownz$temporary failure in name resolutionznodename nor servname providedzgetaddrinfo failedzgetaddrinfo enotfound eai_againz fetch failedzfailed to fetchzupstream connect error>SSLError ReadError PoolTimeout ReadTimeout SSLEOFError ConnectErrorrpConnectTimeoutAPITimeoutErrorBrokenPipeErrorrqSSLSyscallErrorSSLWantReadErrorSSLWantWriteErrorAPIConnectionErrorSSLZeroReturnErrorRemoteProtocolErrorConnectionResetErrorConnectionAbortedErrorServerDisconnectedError)zserver disconnectedzpeer closed connectionzconnection reset by peerzconnection was closedznetwork connection lostzunexpected eofzincomplete chunked read)zcertificate verify failedcertificate_verify_failedz&unable to get local issuer certificatezself-signed certificatezself signed certificatezcertificate has expiredz+hostname mismatch, certificate is not validz&unable to verify the first certificate) zbad record macz ssl alertz tls alertzssl handshake failurez tlsv1 alertz sslv3 alertbad_record_mac ssl_alert tls_alerttls_alert_internal_errorz[ssl:) zyour request was blockedzrequest blockedzsorry, you have been blockedz)enable javascript and cookies to continuezcdn-cgi/challenge-platformzcf-browser-verificationzchallenge-error-text__cf_chlzcf-error-detailsz attention required! | cloudflare) rror7zdoes not supportzdoesn't supportzis deprecated for this modelrrzunrecognized parameterzinvalid parameterzextra inputs are not permittedzinvalid option: expected one of) mandatoryzcannot be disabledzcan't be disabledzmust be enabledz is requiredzalways enabledzcannot be turned off)zmust be one ofzinvalid value for)zerror renderingzrendering promptzjinja templatez jinja render)rrrate_limit_exceeded)rmodel_not_available invalid_model)context_length_exceededmax_tokens_exceeded)rDrErFrGr)resets_in_seconds resets_atrr)z retry-afterz Retry-Afterzx-ratelimit-resetzX-RateLimit-Reset)__conditional_annotations__r2 __future__renumrmloggingrer% dataclassesrrtypingrrrrr r getLoggerr.rrR&PROVIDER_STREAM_EMPTY_FRAME_ERROR_CODEEnumrr7rrrrr frozensetrrrr\r_PAYLOAD_TOO_LARGE_PATTERNS_IMAGE_TOO_LARGE_PATTERNS_IMAGE_CORRUPT_PATTERNS!_MULTIMODAL_TOOL_CONTENT_PATTERNS_MEMORY_CEILING_PATTERNSr_CONTEXT_OVERFLOW_PATTERNSr_MODEL_NOT_FOUND_PATTERNSrArrrrrqrZr\r@rM!_PROVIDER_POLICY_BLOCKED_PATTERNSr;r9_AUTH_PATTERNS!_EMPTY_PROVIDER_RESPONSE_PATTERNS_TIMEOUT_MESSAGE_PATTERNS_CONNECTION_MESSAGE_PATTERNSrorlrhrjrr[r?rtrvrr>r"rrrrrr&rBrrrrr r:r!rr#rSrr<rrirrnrr+maprrrr,rrzrkrrrr _V_IMAGE_CORRUPTr&r% _V_MULTIMODALr?r'rr$rrrrcompilerrrrrrrrrrrrr_STREAM_RENDER_ERROR_PATTERNSr[r^fromkeysrrTrrrtuplerrrrrrr)r(rr&r+rErOrVrarur}r~rrrrrrrrr]rrrr r$r{r9rBrr$rrrerdr=r@rrrxrrrrrrrrrrrrrr)r s@r5r's #  (DD   8 $'F#*G& !TYY!H BB B@e!( 7"HC!.0BDZ+-O!;=[ C')G) " Y"*%!(() $*j&. "#ACY+-H02G"! W4 0U[ %!"N$ %!  #$ sCx.'/6GN'8$?  @e @/? @ 2==5$45 BGGAuA0@Abgg11**>o>,,@@11E_E"..T%TCSTR__88r11E_E))=_= ,,dC"..E9C\C\##^%E%E~GgGg%%&?GJ GJGJ GJBJJ0Yf6rl c-DR%'> L^K: 6 !2)+!2:<!2!228!2NO!2!2 !2H!"8!9:  o@JVEE$  .IXE5 Zc;-A3Hf .c;[ O O:6N Y /$   2$>!(0 6P" m I >D "2 22_ 6 ]Lr4