+ jHjRt^RIt^RIt^RIHt^RIHt^RIHt]P!] 4t RR/Rlt Rt R tR tR tR tR#) a``@`` references of one turn: expanded once, in the session's workspace, on the text the model reads. The inbound prepare step, the classic CLI's API-only text (``cli_turn_v1.api_text``: voice prefix, model-switch and skills notes) and managed workers (``--safe-mode`` / ``--ignore-user-config``, which never pass the inbound step) all expand here. A local session's refusal is the turn's reply: its adapter delivers through settlement, so a side ``send`` would never reach the viewer. N)suppress)partial)PlatformpluginsTc"^RIHp^RIHp\ WQW!R7pV'd V!V4M V!VRR7GRjxL pTP'd.TR PTP4;'g T!R 43#TP'dTPR3#TR3#Lg \ d'p\ PRTRR 7TR3uRp?#Rp?ii;i5i) z``(text, refusal)``: the expanded text, or the refusal when the injection was refused. A failed expansion leaves the text as typed.)t)#preprocess_context_references_async)cwdcontext_length allowed_rootF)rN(@ context reference expansion failed: %sTexc_info z(gateway.notify.context_injection_refused) agent.i18nragent.context_referencesrr Exceptionloggerwarningblockedjoinwarningsexpandedmessage) textr r rrrexpandresultexcs &$$$ A/home/ubuntu/.hermes/hermes-agent/gateway/session_context_refs.pyexpand_referencesrsP>4$ >> R A3QUVTzsUC0B$B"B$C"C4CC"B$$ C/C C CCCc^RIHp^RIHpV!W4;pe VP#V!R\ PPR44# \d\ P PpLei;i))policy_for_source) terminal_env TERMINAL_CWD~) gateway.session_policyr"tools.terminal_scoper# ImportErrorosenvirongetr path expanduser)runnersourcer"r#policys&& r _inbound_cwdr1"sc8&5 $F33@zz (:(:3(? @@ &zz~~ &sA %A43A4c"\W4pVPW4GRjxL p\ Y4TR7GRjxL #L \d'p\P RTRR7TR3uRp?#Rp?ii;iL:5i)z_``expand_references`` for an inbound turn: a local session's policy cwd, else the terminal cwd.Nr Tr )r r )r1_inbound_model_context_lengthrrrr)r.r/ session_keyrr r rs&&&& rinbound_referencesr5/ss6*%CCFXX#4P PP Y A3QUVTz QsGA5?=?A5A3A5? A0 A+%A0&A5+A00A5c&"^RIHpHpV!VP4P R4pVfTMTpRV9dV#VP \ P8Xd$\WW84GRjxL wrV e Wn R#M VPW#V4GRjxL ;p fR#VfV #V!VPV 4VP4p V PV 4'dV \V 4RMRp V 'dV V 2P4#T#LLz5i)aAn inbound turn's text with the references of the text the model reads expanded; None when refused. The classic CLI's committed ``api_text`` replaces ``text`` at the turn (``TurnRunner._prepare_turn_message``), so ITS references are expanded and rebound for this execution, and the returned text, the stored user row, is ``text`` with the same attached context, as a typed turn stores it: later turns still read the content. A refused local turn leaves its refusal on ``event`` for the prepare step to answer with.)cli_turnrebind_api_textapi_textN@)gateway.session_cli_turnr7r8 message_idr+platformrLOCALr5_gateway_turn_refusal"_expand_inbound_context_referenceslstrip startswithlenstrip) r.eventr/r4rr7r8r9targetrrefusalheadtails &&&&& rturn_referencesrK:s C(()--j9H%T8F &  (..("4V["YY  *1 ' #EEf[abb b( kE$$h/ ?? D#+#6#6t#<#<8CIJ "D&*dVD6? "44Zcs1A)D+D ,(DDA DD7DDc "VPR4;'g/PR4p\V\4'dRV9dR#^RIHpVP V4PR4;'g/p\V\ 4'dVPR4MRp\\\4;_uu_4Ve \V4MRpRRR4T!VPV4;'gRVP;'gRRVP;'gR\V\4'dTMRR 7GRjxL p\#Y2P$TTP&'*R 7GRjxL # +'giL;iLF \d'p\P!R TR R 7TR3uRp?#Rp?ii;iLM5i)a;``(text, refusal)`` for a managed worker's admitted text, expanded against the session's workspace. Built-in kinds only for a bypass session, which loads no plugins; the context length is the frozen policy's, never the profile file a bypass session must not read. ``None`` text means the admitted text as committed.payloadrr:N)get_model_context_length_asyncmodelr r;)base_urlapi_keyproviderconfig_context_lengthr Tr )r r r)NN)r+ isinstancestragent.model_metadatarNconfigdictr TypeError ValueErrorint current_modelrPrRrrrrr ignore_user_config) authorityrowr0rrN model_configpinnedr rs &&& rmanaged_turn_textrbVsw GGI  $ $" ) )& 1D dC CtO G}}Y/33G<BB 7A,PT7U7U!!"23[_ i , ,$*$6S[DF-=   + 1 1rFOOrtsS #   8 $ ?$ ? AQ58J07rk