+ jHjPbRt^RIt^RIHt^RIHt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI H t ] P!]4tR(t] P$!4t^tRtRtRtRtR tR tR tR tR tRt!RR4tRt Rt!Rt"Rt#]RR/Rl4t$Rt%Rt&Rt'Rt(Rt)Rt*Rt+Rt,R t-R!t.R"t/R#t0R$t1R%t2R&t3]R'4t4R#))aEditor MCP servers are session state the gateway owns; an ACP connection only requests them. Only a fingerprint and the selected schema manifest are durable. Editors must resupply the exact transport specification after owner restart, including argv: credentials are not reliably distinguishable from ordinary command arguments. A different specification is a ``session.mutate editor_mcp`` (control capability, revision/generation fenced, idle only), never an implicit swap on attach. The frozen manifest is part of the session's prompt-cache prefix, so it only changes at a turn boundary: through that mutation while the session is idle, or through the re-freeze the drain runs at the start of an admission (``refreeze_editor_mcp``). Inside an execution it never changes. N)contextmanager)replace)RuntimeStoreErrorc4\P!VRRR7#)T) sort_keys separators),:)jsondumps)values&>/home/ubuntu/.hermes/hermes-agent/gateway/session_local_mcp.py_jsonr!s ::et CCcx\P!\V4P44P 4#N)hashlibsha256rencode hexdigest)serverss&r fingerprintr%s' >>%.//1 2 < < >>rc^RIHpHpHp^RIHpRVRVRV/p\ V\4'g%\RRR\V4P 2R 7h\V4^8d\RRR \V4 2R 7h\\V44R 8d\RRR R 7h\4pVFupVPR R4pWX,PV4p V P 'dV P V9d \#R4hVP%V P 4Kw R# T\&\(\*\"3dyp \ Y4'd*RP-RT P/RR744p M'\1T 4R8XdRM\T 4Pp \RRRT 2R 7T hRp ? ii;i))McpServerStdio McpServerHttp McpServerSse)ValidationErrorstdiohttpsseinvalid_paramszeditor.mcp_serverszmust be a list, got )fielddetailzat most 16 servers, got iz.the serialized server list exceeds 65536 bytestypezduplicate serverz; c3"TF7pRP\\VR,44 RVR, 2xK9 R#5i).locz: r$N)joinmapstr).0errs& r #validate_servers..As<H'F #xxCU(<=>bV N'Fs?AF) include_inputzunusable server spec: N) acp.schemarrrpydanticr isinstancelistrr$__name__lenrsetgetmodel_validatename ValueErroraddKeyErrorAttributeError TypeErrorr(errorsr*) rrrrrkindsnamesspeckindmodelexcwhys & r validate_serversrG)sFF( nfmUL QE gt $ $ 08L)=d7m>T>T=U'VX X 7|b 08L)A#g,'PR R 5>U" 08L'WY Y EEPD88FG,DK..t4E:::u!4 !344 IIejj !  X~y* MP c + +))H'*zzz'FHHC),C4F(F$DQTIL^L^C 08L)?u'EGLO PPs/A;D,,GA3F;;GcVPR4;'g/pVPR4;'g.pV'gR#Vf \R4h\P!\ V44V\ &/VCRR\ V4//CVR&R#)editor mcp_serversNlaunch_credentials_unavailabler)r7rr loadsr PRIVATE_KEYr)requestprivaterIrs&& r private_editor_requestrPIs| [[ " ( (bFjj'--2G  @AA::eGn5GKX6X==+gBV2WXGHrcVVR8Xd4\V\4'd\V4R08wd \R4hM(VR8wg\V\4'dRV9dVR3#VR,p\ V4\ P !\V44p/VCRR\V4//CV3#)z``(store payload, servers)`` of an ``editor_mcp`` or a ``branch`` naming servers: the list stays in owner memory; the receipt digest and every store write see only its fingerprint. editor_mcprJr!branchNr) r2dictr6rrGr rLrr) operationpayloadrs&& r private_mutation_payloadrWTsL '4((CL]O,K#$45 5-L h j$&?&?=X_C_}m$GWjjw(G Lg L}}k'6J&K Lg UUrcR\P!VP RV 2P44P 4,#)z]A session's own ledger scope: never shared with another session (a fork included) or profile.zeditor-session:r )rr profile_idrr) authoritysids&&r session_scoper\bs: w~~1E1E0Fau.M.T.T.VWaac ccrc ^RIHp\V4UUu/uFWwr4VRV!VR,4 R\P!V RV 2P 44P 4R, 2bKY upp#uuppi)zIndex -> ledger name: the editor's own server name (the model sees ``mcp__editor_github___x``) plus a per-session tag, so two sessions borrowing same-named servers never adopt one connection.)sanitize_mcp_name_componenteditor_r9_r :NN)tools.mcp_tool_schemar^ enumeraterrrr)scoperr^irBs&& r _server_namesrfgsB[del[m o[mPWPQ 4T&\BC1..E7!A3!6!6!89CCEbIJL L[m oo osAA6cdRV9d6VR,P4UUu/uFwr#\V4VbK upp#\P!VR,P 44P 4R,p\ \V44Uu/uF q"RV RV 2bK up#uuppiuupi)zZThe names a session's manifest was frozen under; manifests without ``names`` predate them.rArdNNr_r`)itemsintrrrrranger5)datarrer9prefixs&& r _frozen_namesroos$,0M,?,?,AB,AA ,ABB ^^DM002 3 = = ? DF/4S\/B C/B!!% %/B CCC Cs B'B-c,V'gR#RV9d-YR,P4Uu0uFpRV 2kK up9#VPR\P!VR,P 44P 4R, R24#uupi)zVWhether *toolset* is one of the editor toolsets frozen in *data* (a manifest or None).FrAmcp-z mcp-editor_rdrhr`)values startswithrrrr)rmtoolsetr9s&& r _frozen_toolsetruws $']5I5I5KL5KTT$=5KLLL    GNN4=;O;O;Q,R,\,\,^_b,c+ddef ggMsBc /pVP4FwrEW,pVPRR4R8XdHRVR,RVR,RVPR.4Uu/uFqwR,VR,bK upRV/pMNRVR,R VPR .4Uu/uFqwR,VR,bK up/pVR,R 8XdR VR &VP^^R R 7WV&K V#uupiuupi)r$rcommandargsenvr9r cwdurlheadersr transportF)connect_timeout tool_timeoutlazy)rjr7update) rrArzconfigsrer9rBeconfigs &&& r _configsrsG;;=z 88FG $ /i&$v,TXXeR=PQ=Pi73=PQSXZ]_FT%[)UYU]U]^gikUl5mUlPQi76KUl5mnFF|u$&+{# abu E ! NR5ms C*C/ c*a]tRt^toRtRtRtVtR#)_HeldzOne session scope's editor connections. ``users`` executions borrow them right now; between executions they stay connected only while the session has a viewer (``_viewed``).cV\P!4Vn^VnRVnR#)rN) threadingLocklockusersr)selfs&r __init___Held.__init__sNN$  r)rrrN)r4 __module__ __qualname____firstlineno____doc__r__static_attributes____classdictcell__) __classdict__s@r rrsY  rrc\;_uu_4\VRR4pVf /;q nVPV\ 44uuRRR4# +'giR#;i)_editor_mcp_heldN) _HELD_LOCKgetattrr setdefaultr)rZrdtables&& r _heldrsD  #5t< =13 3E.uw/ s 3A  A c aa\;QJdBVV3Rl\\SR/4P444F 'gK R# R#!VV3Rl\\SR/4P4444#)c3n<"TF*wrVP;'d\SV4S8HxK, R#5ir) subscribersr\)r+r[liverZrds& r r-_viewed..s8R P93JJM)S$AU$JJ Ps55sessionsTF)anyr3rrj)rZrdsffr _viewedrst 3R $WY B%G%M%M%O PR33R3R3R $WY B%G%M%M%O PR RRrc ^RIHp^RIHpVP 4UUu.uF6wrEV!WP4V9gKW#!WP4,P 'gK4VNK8 upp#uuppi)r)_servers _server_key)tools.mcp_toolrtools.mcp_tool_scoperrjsession)rdrArrrer9s&& r _connectedrs^'0"[[] d]'!4'83 8@TAY8Z8b8b A] dd dsA A A c2^RIHpV!VR7RVnR#)r)shutdown_mcp_servers)rdN)tools.mcp_tool_lifecyclerr)heldrdrs&& r _disconnectrs=u%DrpartialFc #"^RIHpHp^RIHp\ W4p \ W$.4p V!V4;_uu_4V P;_uu_4V P RV 39d)V P'd \R4h\W4\W4p \V 4\V48wdV!\W#V44\W4p WnV ;P^, unRRR4\X 4\V48wdV'g \R4hV U u0uFp RW<, 2kK p p VP4Uu.uFqPV4V 9gKVNK pp\!V4Uu/uFqVP#V4bK upV 3xV P;_uu_4V ;P^,unV P'g\%W4'g \W4RRR4RRR4R# +'giEL*;iuup iuupiuupi +'giL=;i T P;_uu_4T ;P^,unT P'g\%Y4'g \Y4RRR4i +'gii;i;i +'giR#;i5i)aYield ``(schemas, connected indexes)`` inside the session's tool scope. Only ``partial`` (a selection being frozen) may leave a server out; an execution needs every server its manifest was frozen with. A held connection is reused; the last borrower closes it unless a viewer remains.)registrysession_tool_scope)register_mcp_serversN session_busyacp_mcp_discovery_failedrq)tools.registryrrtools.mcp_tool_discoveryrrrrrrrrr5rget_all_tool_namesget_toolset_for_toolsorted get_schemar)rZrdrrArzrrrrrwanted connectedretoolsetsntoolss&&&&&$ r _borrowedrs <=  "D ' (F E " " YYYf~5:::+N;;D("50I9~U+$Xgc%BC&u4 %  JJ!OJ -9~U+G'(BCC3<=9a$uxj)9H= ( ; ; =n =1A^A^_`AaemAmQQ =En6nD a zzz')*C*C,+ # " "s6KJ< %H 3A6H )J<2 II"H6I H#&H#,I;H(IJ<0AH- 8J< K H  J<I- H= 8J<J9AJ&  J9& J61J99J<< K  Kcd\VRR4;'g/pVF~p\W4pVPV4pVfK%VP;_uu_4VP'g+VP e\ W4'g \WT4RRR4K R# +'giK;i)zThe last viewer left (or the sessions retired): close their held editor connections. One an execution still borrows is closed by that execution when it ends.rN)rr\r7rrrrr)rZ session_idsrr[rdrs&& r release_editor_mcprs I14 8 > >BEi-yy <  YYY:::$"2"2">wyG`G`D(Y  YYs =B B/ c0\P!VP;'gR4pVPUu0uFp\ WE4'dKVkK ppRpV'Edi\ W4p\ W4p V P;_uu_4V P'd \R4h\W4RRR4\W4p \WW:VPRR7;_uu_4wr\\V 4\V 4, 4F/p \ P#RW=,P%R4V4K1 RRR4X U u/uF qW,bK p p RTR \'V4R X R V P)4U Uu/uFwr\+V 4VbK upp /pYjP-4Uu0uFpR V 2kK up,p\/Y''d \1V4MR\3\V44R 7pT;'g/P%R /4T;'g/P%R /48g;'gVPVP8gpW3#uupi +'giEL;i +'giEL8;iuup iuupp iuupi)z``(policy, manifest changed)``: *policy* with its editor selection freshly discovered from *servers* under *sid*'s own scope (blocking). A broken server is left out of the frozen selection (main skipped it too), so no later execution respawns it.nullNrTrzFEditor MCP server %r failed discovery; session %s continues without itr9rdrschemasrArq)editor_mcp_jsonr)r rLrrrur\rrrrrrfrrzrr6loggerwarningr7rrjr*rrrrtuple)rZr[policyroldr9rrmrdrrArrrereboundchangeds&&&& r rebind_editor_mcprs  **V++55v 6C!'S8RHS Dwi-Y& YYYzzz'77  $  e- yT R RVjW^CJY78g&z~~f5s<9S'00iEHi0 {7/CYPWekkmDm71#a&$,mDF||~>~ttD6]~>>fTeDktV[\bck\lVmnG ry"-$**"1A1A)R1PP66""foo5  -T YY S R R1D>s6II)I +AI4JJ 5J I1 4 J cNV'gV#\WW#4wr$\WV4V#r)rattach_editor_mcp)rZr[rrr`s&&&& r bind_editor_mcprs'  !)&BIFi1 Mrcr\V4\P!VP;'gR4pV'd.\P !VR,\ V44'g \R4h\VRR4pVf /;q@n \P!\V44WCR,&R#){}racp_mcp_policy_conflict_local_editor_mcpNrd) rGr rLrhmaccompare_digestrrrrr)rZrrrmborroweds&&& r rrsW ::f,,44 5D t**4 +> G@TUU 9::y"5tS "F+A$B/DPg " i8rc"^RIHp^RIHpVR,R,pV!VR,4pVPR8wd \ R4h\ P!\WR,W4GR jxL wr\P!V P;'gR 4PR /4p T!YYT \V \R 7U u.uFq\V 4,R ,NK up R7#Luup i5i)z``session.mutate editor_mcp``: discover the new list and freeze it into the policy the next turn runs under. Equal schemas leave the manifest, and so the prompt-cache prefix, as it was; only the fingerprint and the borrowed credentials swap.)_rebindrsnapshotreceiptracpr!rNrrA)keyr9)rrJ)gateway.session_mutation_policyrrrrrasyncio to_threadrr rLrr7rrk) rZrrVpreparedrrrrrrrrAres &&&&$ r prepare_editor_mcprMs85z"9-G * +C zzU 011#--.?T`LacfppOF JJv--55 6 : :7B GE 97AGSVAWXAWAA 7 7AWX ZZq Ys*A.C90C21(C9/C9 !C4* C94C9caaaaa a a ^RIHp^RIHoHo^RIHoRo VVV3RlVP44Uu.uF pVfK VNK upo V3Rlo V V 3RlpVPV\^,R7p\;QJdT 3R lT4F 'gK R # R #!T 3R lT44#uupi \\\3d\PR SR R 7R #i;i)zWhether a held server's live ``tools/list`` differs from the tools its connection was discovered with. Editor servers ignore ``tools/list_changed`` (the manifest is frozen), so the admission start asks; an unanswered list (bounded) counts as unchanged.) mcp_tool_loop)_paginate_full_listrrc `\VUu.uFqPRR7NK up4#uupi)r )mode)r model_dump)rtools& r dump!_live_tools_changed..dumpes(uEutoo6o2uEFFEs+c3T<"TFpSPS!VS44xK R#5ir)r7)r+r9rrrds& r r-&_live_tools_changed..hs&!dUcT(,,{4/G"H"HUcs%(cV<"VP;_uu_4GRjxL VPfRRR4GRjxL R#S!VPPRVP4GRjxL uuRRR4GRjxL #LgLJLL +GRjxL 'giR#;i5i)Nr) _rpc_lockr list_toolsr9)serverr s&r relist#_live_tools_changed..relistksn####~~%$##-V^^-F-FQWQ\Q\]]$##^$###swB)BB)B  B)BB)+B -B.B 1 B)>B ?B)B)B  B) B& B B& B& B)c<"SUu.uFp\P!S!V44NK! ppV'd%\P!V\R7GRjxL VFpVP 4K .p\ SV4FwrVP 4;'dVP4'*pV'dVP4MRpV'd'Vf#VPWP434Kz\PRVPVR7K V#uupiL TFpTP 4K i;i5i)timeoutNz;Editor MCP server %r: tools/list for the drift check failedexc_info)r ensure_futurewait_RELIST_TIMEOUTcancelzipdone cancelled exceptionappendrrrr9)rtaskstaskansweredsettlederrorrrs r relist_all'_live_tools_changed..relist_allqsEIJT6&&vf~6TJ ll5/BBB e,LFiik::$..*:&:G(/DNN$TE5= 78\^d^i^i(-/ -!KC sLE %D%E 'D,D*D,AE E =E AE *D,,EE rz#Editor MCP drift check of %s failedTrFc3v<"TF.wrVRJ;'dS!V4S!VP48gxK0 R#5ir)_tools)r+rrrs& r r-rs7f]eMFuD GGT%[D4G%GG]es9$9)rr rr rrrrr_run_on_mcp_loopr  RuntimeError TimeoutErrorInterruptedErrorrrr) rdrAr rr,r)r rrrrrs f& @@@@@@r _live_tools_changedr4]s$<0G"eUZUaUaUc!d #!dv F!d #D^ & 11*oXYFY1Z 3f]ef33f3f3f]ef ffE #> ,(8 9.probesrdG, y$w-%UY Z Z^r_f9~U3Hh&\&\3FtG}V[3\\[ Z Z Zs 8A;; B r)rrrrrrrrrr rLrr7_commit_refreeze) rZrrrrr<rr;driftedrmrrs f& @@@r r6r6s50%%mY\\3>>RRG GH- .F  ! ! ! ::f,, -D))--d7mr>s90##M<<P PE!!),,":":CNNK KC/ }g>VWGCNNL:PSWS]S]S_ScSc:c!3'9#:r[rerhrVrr rns. %  2   8 $ ^^  D?P@Y Vd oDh"  0R d !-!-!-H )<96(! =i Z -g` 644 ^b"DJ  r