+ jHj54Rt^RIt^RIHt]!0Rm4tRtRtRtRt Rt !RR ] 4t !R R 4t R tR tRtRtRtRtRR/RltRtRtRtR#)aAgent-construction inputs the owner resolves for a managed worker (``construct_v1``). The in-process turn passes these to ``AIAgent`` from the owner's runner state; a fresh worker cannot reconstruct them (its config readers serve the frozen session snapshot, and a bypass worker must never reload the profile), so the owner resolves them per turn, mode-appropriately, and they ride the hydrated request beside ``turn_v1``. The child validates the closed shape. N)Pathc ^RIHpV!V4;_uu_4R\W4R\WV4R\ WV4/uuRRR4# +'giR#;i)z8Owner side, per turn (off the owner loop: config reads).) owner_scopefallback_modelephemeral_system_promptprefill_messagesN)gateway.session_authoritiesr_fallback_chain_ephemeral_promptsession_prefill) authoritypolicychat_idrs&&& E/home/ubuntu/.hermes/hermes-agent/gateway/session_worker_construct.pyconstruct_inputsrsI7 Y   /)"D)+$_ephemeral_prompt../sJ"DQqq"Ds  ) rrrgateway.configrclient_env_scopeLOCALjoin skills_prompt)r r r configuredresolvers&&& rr r $s Ji&&(H$OG  $ $ $)<+  $ $ & & B?J' ;;J:/C/C"DJ J R RdR' &s B!! B1 czVPVRR7PR4p\V\4'dV#/#)zThe session's ``provider_routing``: its own profile's, as of its creation (main's CLI read it once at startup). Never the runner's daemon-start copy.Fsecretsprovider_routing)rget isinstancedict)r r routings&& rsession_routingr62s9mmIum599:LMG $//77R7rcVP'dR#\V4pW#9dVPV\W434W2,^,#)aXThe session's prefill examples, for the in-process turn and a managed worker alike: the snapshot ``stage_session_prefill`` took when the session was created (main's CLI read the file once at startup). A session this owner did not create (restored after a restart, a branch) reads it on first use and keeps that. A bypass session never loads it.N)r _held_prefill setdefault _read_prefill)r r session_idhelds&&& rr r 9sG      #D  ]9%E$GH  A rc8a]tRt^FtoRtRtRtV3RltRtVt R#) StagedReceiptzA creation receipt plus owner memory ``commit_local_session`` publishes only from the transaction that creates the session (never persisted: the receipt itself is the dict).Nc.<V^8dQh/R;R&R;R&#)z_PrefillPublication | None on_createz dict | Noneclient_requestr")format __classdict__s"r __annotate__StagedReceipt.__annotate__Fs,2 "( rr") __name__ __module__ __qualname____firstlineno____doc__rArB__annotate_func____static_attributes____classdictcell__rDs@rr>r>Fs_.2I$(N rr>c8a]tRt^NtoRtRtRtRtRtVt R#)_PrefillPublicationcBWVR3wVnVnVnVnR#r!)r r r;box)selfr r r;s&&&&r__init___PrefillPublication.__init__Os!AJT^`dAd> T_dhrc R\VPVP43VnR#)zXThis attempt's snapshot, read by its commit before the transaction (off the owner loop).N)r:r r rSrTs&rread_PrefillPublication.readSs!$..$++>@rc^VP\VP4VP&R#r!)rSr8r r;rXs&rpublish_PrefillPublication.publishWs9= dnn%doo6rc\VP4pVPVP4VPJdVP VPR4R#R#r!)r8r r2r;rSpop)rTr<s& rwithdraw_PrefillPublication.withdrawZs@T^^, 88DOO $ 0 HHT__d + 1r)r rSr r;N) rGrHrIrJrUrYr\r`rMrNrOs@rrQrQNs!eAB,,rrQcp\V4pVP'g\WVR,4VnV#)a<Stage a new session's prefill snapshot: the ``prefill_messages_file`` of its config, relative to its own profile home, read by this attempt's commit (``commit_local_session``, which the async creates run in ``tracked_write``'s worker thread), never on the owner loop. The snapshot is held in the authority's memory only if this attempt's commit creates the session: an overlapping retry or conflicting create never replaces the winner's, and a refused or failed create leaves nothing. Never evicted by other sessions; ``release_session_prefill`` drops it with the session.r;)r>rrQrA)r r receiptstageds&&& rstage_session_prefillre`s37 #F  $ $ $.y',BWX Mrc|\VRR4;'g/pVFpVP\V4R4K R#_local_prefillN)rr_str)r session_idsr<sids&& rrelease_session_prefillrlms5 9. 5 ; ;D S4 rc8\VRR4pVf /;qnV#rg)rrh)r r<s& rr8r8ss& 9. 5D |*,,' Krc T^RIHpHp\\ VP 44pVP 4'g^RIHpV!4pVP4;_uu_4V!VPVRR74pRRR4V!XV4;'gR# +'giL#;i))_load_prefill_messages_resolve_prefill_messages_file)get_hermes_homeFr/N) hermes_cli.cli_config_loadrprqrri profile_id is_absolutehermes_constantsrrr(r)r r rprqhomerrpaths&& rr:r:zs}a I(() *D     4   " "-fmmIum.UV # !$ - 5 55 # "s "B B' c\P!VR,PR4;'gR4PR4pVf/#\V\4'dm\ V4\ 8wgY\VR,4'dA\VR,4'd)\VR,\\R434'g \R 4h\ V4#) zChild side: the validated ``AIAgent`` keyword arguments; a frame without the object (older owner) constructs exactly as before.r request_jsonz{} construct_v1Nrrr invalid_managed_worker_bootstrap) jsonloadsr2r3r4setKEYS _dict_listritype ValueError)frameinputss& rconstruct_kwargsrsZZh++N;CCt D H H XF ~ vt $ $F t(;f%5677z&QcJd?e?ef%>?#tDzARSS;<< <rcVRJ;'gM\V\4;'d5\;QJdRV4F 'dK R# R#!RV44#)Nc3B"TFp\V\4xK R#5ir!)r3r4)r#es& rr%_dict_list..s<`Z_UVZ4=P=PZ_sFT)r3listall)values&rrrsH D= a aZt4``<`Z_<`aa<`Z_<`9`arfallbackTc T^RIHpHpHp^RIHpVP R4;'g/P R4p \P!VP4P R4p V 'dD^RI H p V !V 4T !VP R4;'g/P R448wdRp V!V4;_uu_4V!V W:W!R7p V eV R3uuRRR4#V'gV!WWR 7R3uuRRR4#V!WW:VR 7uuRRR4# +'giR#;i) av``(runtime, fallback_entry)`` for a launch-policy route: the session's FROZEN config and launch credential, walking its own fallback chain on an AuthError unless ``fallback=False`` (a session control asking which route the session itself runs). The one resolver an in-process turn (``_resolve_policy_agent_runtime``) and a key-less managed worker (``worker_api_key``) share.)frozen_runtime_configresolve_runtime_providerresolve_runtime_with_fallback)_resolve_named_custom_runtimemodelproviderbase_url)normalize_route_base_urlN)requested_providerexplicit_api_keyexplicit_base_url target_modelr) requestedrrr)rrrr) hermes_cli.runtime_providerrrr"hermes_cli.runtime_provider_customrr2r}r~rzhermes_cli.route_identityr) r frozenrkeyrrrrrr launch_urlrruntimes &&&&$ r route_runtimers  Q 7#))r..z:HF//044Z@J G #J /3KVZZX_M`MfMfdfLkLklvLw3x xJ v & &/8 /  D= ' &+h",DEIJ! ' &$-V UT% ' & & &sD#D+ D D D' cVP4wr#RV9d/VCRVR,;'g.RR/Cp\WVR4wrEVfVPR4#R#)aUChild side, for a worker launched without a key (every Kanban run): the route's own credential, resolved as the in-process turn resolves it, from this process's profile home (its HERMES_HOME and ``.env``). A fallback entry's key belongs to another provider and model, so the primary never carries it; the agent's own fallback chain switches all three together (#139155). A primary AuthError walks the chain the agent will actually get: the owner's per-turn ``construct_v1`` chain (an ordinary session's refreshed profile fallbacks) when it was sent, the frozen snapshot's otherwise (older owner).rfallback_providersNapi_key) effectiverr2)r constructrrrfallback_entrys&& rworker_api_keyrsm$$&MF9$lFl0)SWYlnw )JusEl4S4SXY]bXgfgXg5 ssYhmq ssr>rrr)rKr}pathlibr frozensetrrr r r6r r4r>rQrerlr8r:rrrrrrr"rrrs RSQ 6 S8 )D),,$ ! 6 b'T$'TT F e$ sr