+ jHja0t$Rt^RIHt^RIt^RIt^RIt^RIt^RI t ^RI t ^RI t ^RI t ^RI t ^RIt^RIHt^RIHtHt^RIHtHt^RIHt^RIHtHtHtHtHtHtH t H!t!H"t"^RI#H$t$H%t%H&t&^R I'H(t(^R I)H*t*^R I+H,t,^R I-H.t.^R I/H0t0^RI1H2t2H3t3^RI4H5t5H6t6H7t7H8t8H9t9H:t:H;t;HH?t?H@t@HAtAHBtBHCtCHDtDHEtEHFtFHGtG^RIHHItIHJtJHKtKHLtLHMtMHNtNHOtOHPtP^RIQHRtRHStSHTtTHUtUHVtVHWtWHXtXHYtYHZtZH[t[H\t\H]t]H^t^H_t_H`t`HataHbtbHctcHdtdHete^RIfHgtgHhth^RIiHjtjHktk^RIlHmtmHntnHotoHptpHqtqHrtrHstsRRltt!RR]u4tv]P!]x4ty]*!R4szRs{RRRllt|]|!40RkRkR kR!kR"kR#kR$kR%kR&kR'kR(kR)kR*kR+kR,kR-kR.kR/kR0kR1kR2kR3kR4kR5kR6kR7kR8kR9kR:kR;kRkR?kR@kRAkRBkRCkRDkREkRFkRGkRHkRIkRJkRKkt}RL]~RM&R/0tRL]~RN&]*t]!4t]!RORP44t!RQRR4tRSt]kFt]!]]^,]!]!4K ARTt]!]!]4EP44FGwtt]!]4'gK]EPRU4'g ]R9gK7]!]]]!]44KI AARVRWlt!RXRY]I]_]g4tRsRZ]~R[&/tR\]~R]&] EP(!4tRsR^]~R_&] EP.!4tRsR^]~R`&] EP.!4tRaRbltRcRdltReRfltRgRhltRiRjltRkRlltRmRnltRoRpltRqRrltRsRtltRuRvltRwRxltRRyRzlltRsR{]~R|&] EP.!4tR}R~ltRRRlltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRltRRRR/RRllt] EPt!4t]!RR7!RR44tRRRlltRRltRRRlltRRltRRltRRltRRRRRR/RRlltRRltRRRRRRRRR^RRRR/RRlltRRRRRRRRRRRRRRRRR^R^R^/ RRlltRRRlltRtRRltRRltRRltRRltR#)uHermes Plugin System — discovers, loads, and manages plugins. Sources, later overriding earlier on key collision: bundled ``/plugins//`` (``memory/`` and ``context_engine/`` have their own discovery), user ``~/.hermes/plugins//``, project ``./.hermes/plugins//`` (opt-in via ``HERMES_ENABLE_PROJECT_PLUGINS``), and pip packages in the ``hermes_agent.plugins`` entry-point group. A directory plugin needs a ``plugin.yaml`` manifest and an ``__init__.py`` exposing ``register(ctx)``. Plugins register callbacks for ``VALID_HOOKS`` (core fires ``invoke_hook(name, **kwargs)``) and tools via ``PluginContext.register_tool()``. ) annotationsN)suppress) dataclassfield)cached_propertywraps)Path) AnyCallableDictListMappingOptionalSetTupleUnion)get_hermes_homeget_process_hermes_homehermes_home_key)replacement_coordinator)env_var_enabled)load_config_readonly)VALID_MIDDLEWARE)plugin_capability_granted)RELAY_PLUGINS_CONFIG_ENVlegacy_relay_plugin_keys) _CONFIG_SCHEMA_TYPESSUPPORTED_MANIFEST_VERSIONPluginManifest_portable_skill_namespace manifest_keyparse_manifest_fileresolve_module_originresolve_plugin_load_ordervalidate_config_schema) ENTRY_POINTS_GROUP_get_disabled_plugins_get_enabled_pluginscollect_directory_manifestsdiscover_entrypoint_manifests gate_manifestplugin_discovery_suppressedresolve_manifest_winnersscan_directory)PluginLoaderMixin_BARE_MODULE_SCOPE_MODULE_NAMESPACE_LOCK _NS_PARENT_evict_modules_plugin_home_scope_serialized_replacementin_plugin_load_worker)'DEFAULT_SYSTEM_PROMPT_SECTION_MAX_CHARSHERMES_EVENT_NAMESPACEMAX_SYSTEM_PROMPT_SECTION_CHARS&MAX_SYSTEM_PROMPT_SECTIONS_TOTAL_CHARSPLUGIN_SECTIONS_ENDPLUGIN_SECTIONS_STARTSYSTEM_PROMPT_SECTION_POSITIONS_EVENT_EMIT_DEPTH_CAP_EVENT_PENDING_CAP_HOOK_CALLBACK_TIMEOUT_SECS!_HOOK_TIMEOUT_SUPPRESSION_SECONDS_MAX_HOOK_CALLBACK_TIMEOUT_SECS$_PRE_TOOL_CALL_TIMEOUT_BLOCK_MESSAGEPluginDispatchMixinPluginSystemPromptSection!RenderedPluginSystemPromptSection_EventSubscriptionformat_system_prompt_sections!is_valid_system_prompt_section_idresolve_plugin_command_result)PluginLedgerMixinPluginRegistration)_NAME_NORMALIZERS_SCOPED_PROVIDER_REGISTRARS) PluginState_locked_plugin_state_nested_plugin_mapping_nested_plugin_value_plugin_relative_segments_plugin_settings_entrysave_plugin_settingcV^8dQhRR/#returnr)formats"7/home/ubuntu/.hermes/hermes-agent/hermes_cli/plugins.py __annotate__r\Ds>>>c\P!R4pV'd \V4#\\4P 4P P R, #)zBundled ``plugins/`` dir: ``HERMES_BUNDLED_PLUGINS`` (Nix wrapper / packaged installs, read-only store paths) first, else the in-repo path.HERMES_BUNDLED_PLUGINSplugins)osgetenvr__file__resolveparent) env_overrides r[get_bundled_plugins_dirrgDsE9956LL!! > ! ! # * * 1 1I ==r]c]tRt^MtRtRtR#)PluginToolOverrideErrorz^Plugin tried to override a built-in tool without ``plugins.entries..allow_tool_override``.rYN)__name__ __module__ __qualname____firstlineno____doc____static_attributes__rYr]r[ririMshr]riHERMES_PLUGINS_DEBUGFc V^8dQhRRRR/#rWforceboolrXNonerY)rZs"r[r\r\YsXXX$Xr]cV'd \R4s\'d \'dR#\P!\ P 4pVP\P4VP\P!R44\PV4\P\P4R\n Rs\PR4R#)zWWhen HERMES_PLUGINS_DEBUG is on, tee plugin logs to stderr at DEBUG (once per process).rpNz#[plugins] %(levelname)s %(message)sTuCHERMES_PLUGINS_DEBUG=1 — verbose plugin discovery logging enabled)r_PLUGINS_DEBUG_DEBUG_HANDLER_INSTALLEDlogging StreamHandlersysstderrsetLevelDEBUG setFormatter Formatterlogger addHandler propagatedebug)rshandlers& r[_install_plugin_debug_handlerrYs ()?@ >55##CJJ/G W]]# **+PQR g OOGMM"F# LLVWr] pre_tool_callpost_tool_calltransform_terminal_outputtransform_tool_resulttransform_llm_output pre_llm_call post_llm_callon_stream_starton_stream_delta on_stream_endon_interim_message pre_verifypre_api_requestpost_api_requestapi_request_errorpre_auxiliary_callpost_auxiliary_call"transform_api_error_classificationon_session_starton_session_endon_session_finalizeon_session_reseton_session_deleteon_skill_lifecyclesubagent_start subagent_stoppre_gateway_dispatchpost_gateway_admissionagent_loop_stoppedpre_approval_requestpost_approval_responseon_human_input_requeston_human_input_resolvedon_room_member_activitypre_transcriptionkanban_task_claimedkanban_task_completedkanban_task_blockedon_kanban_worker_spawnedon_kanban_worker_exitedon_kanban_worker_stale_claimon_kanban_task_updatedon_kanban_dispatch_tickgateway_platform_event pre_commandpost_compactionset[str] VALID_HOOKSSHELL_UNSUPPORTED_HOOKSc]tRt^t$RtR]R&RtR]R&]!]R7t R]R &]!]R7t R]R &]!]R7t R]R &]!]R7t R]R &R t R]R&RtR]R&R tR]R&RtR#) LoadedPluginz)Runtime state for a single loaded plugin.rmanifestNzOptional[types.ModuleType]module)default_factory list[str]tools_registeredhooks_registeredmiddleware_registeredcommands_registeredFrtenabled Optional[str]errordeferredrY)rjrkrlrmrn__annotations__rrlistrrrrrrrrorYr]r[rrst3)-F &-"'"=i="'"=i=',T'B9B%*4%@@GTE=Hdr]rc]tRt^tRtRRltRRlt]RRl4tRR lt R R lt RR Rllt RRlt ] RRl4t] R4tRRRlltRRltRR/RRlltRRlt]3RR lltR!]/R"R#lltR$RR%R&R'R R(R /R)R*llt]R+R,l4t] R-R.l4t] R/R0l4t]R1R2l4tR3R4ltR5R6ltR7R /R8R9lltR:R;lt] RR<R=ll4t!R>R?lt"RR@RAllt#RBt$]%RCRDl4t&]'RERFl4t(RGRHlt)RRIR RJR /RKRLlllt*RMRNlt+RORPlt,RQRRlt-RSRTlt.RURVlt/RWRXlt0] RRYRZll4t1] RR[R\ll4t2R]R^lt3] R_R`l4t4RaRblt5RcRdlt6] ReRfl4t7] RRgRhll4t8RiRjlt9RkRllt:RmRnlt;] RoR RpR /RqRrll4tR{R /R|R}llt?R~Rlt@RRltARRltBRRR]C/RRlltDRRRlltERRltF^RIGHHtHHItIRtJR #) PluginContextz=Facade given to plugins so they can register tools and hooks.c V^8dQhRRRR/#)rWrrmanager PluginManagerrY)rZs"r[r\PluginContext.__annotate__s%%%-%r]c :WnW nRVnRVnR#)NF)r_manager_llm_load_abandoned)selfrrs&&&r[__init__PluginContext.__init__s    %r]cV^8dQhRR/#rWrXrurY)rZs"r[r\rs$$t$r]c RVnR#)z_Mark this load as timed out; every later ``register_*``/``subscribe``/``on_unload`` is ignored.TN)rrs&r[ _abandon_loadPluginContext._abandon_loads #r]cV^8dQhRR/#rWrXstrrY)rZs"r[r\rs++3+r]c ,\VP4#)zCReturn the effective registry id used for this plugin's namespaces.)r rrs&r[ plugin_idPluginContext.plugin_idsDMM**r]c V^8dQhRRRR/#)rWrrrXrtrY)rZs"r[r\rs  C D r]c a\;QJdAV3RlVPPP44F 'gK R# R#!V3RlVPPP444#)zReturn True when another plugin is loaded and enabled (runtime probe for advisory ``requires_plugins``, #64165). Matches on registry key or manifest name.c3<"TFAwrVP;'d'VS8H;'gVPPS8HxKC R#5iN)rrname).0keyloadedrs& r[ +PluginContext.has_plugin..sE =  NN V Vy 0 U UFOO4H4HI4U V=sA  A "A TF)anyr_pluginsitems)rrs&fr[ has_pluginPluginContext.has_pluginsfs #}}55;;= ss s s #}}55;;=   r]c V^8dQhRRRR/#)rWrrrXztuple[str, ...]rY)rZs"r[r\rsS_r]c z\V4# \d#\PRYP4hi;i)zGValidated plugin-relative settings path (warn + re-raise on rejection).z&Rejected config path %r from plugin %s)rR ValueErrorrwarningr)rrs&&r[ _segmentsPluginContext._segmentss7 ,S1 1  NNCS.. Y  s -:Nc$V^8dQhRRRRRR/#)rWrrdefaultr rXrY)rZs"r[r\r s& L Lc LC L3 Lr]c VPV4p\\4;'g/VP4pVfV#\ VP R4V\ 4pV\ JdV#\ VP R4W24#)zRead plugin-relative ``plugins.entries..settings.`` (falls back to the legacy ``config`` subtree for migration compatibility).settingsconfig)rrSrrrQget_UNSET)rrrsegmentsentryvalues&&& r[ get_configPluginContext.get_config sr>>#&&';'='C'CT^^T =N$UYYz%:HfM  L#EIIh$7KKr]c$V^8dQhRRRRRR/#)rWrrrr rXrurY)rZs"r[r\rs&HHcH#H$Hr]c R\VPVPV4V4R#)zAAtomically write one value in this plugin's ``settings`` subtree.N)rTrr)rrrs&&&r[ set_configPluginContext.set_configsDNNDNN3,?Gr]cV^8dQhRR/#)rWrXrNrY)rZs"r[r\rsJJ{Jr]c V\VPVPP4#)z7This plugin's profile-scoped durable JSON state facade.)rNrrskill_namespacers&r[statePluginContext.states4>>4==+H+HIIr]c 2^RIHpV!VP4#)u<Capability-gated platform action facade (``add_reaction``, ``set_thread_title``). Every call re-checks ``gateway.platform_actions`` (legacy ``plugins.entries..allow_platform_actions``, default OFF) and returns ``{"ok": bool, ...}`` — verbs never raise into hook dispatch; no adapter handles or raw SDK objects.)PlatformActions)hermes_cli.platform_actionsr r)rr s& r[platform_actionsPluginContext.platform_actionss @t~~..r]ac ,V^8dQhRRRRRRRRRR /#) rWobjr base_classtypelabelrarticlerXrtrY)rZs"r[r\r's0sS3Y]r]c \W4'dR#\PRVPPWCVP 4R#)zJWarn-and-ignore gate shared by every registrar that requires a base class.FzLPlugin '%s' tried to register %s %s that does not inherit from %s. Ignoring.T) isinstancerrrrrj)rrrrrs&&&&&r[ _wrong_typePluginContext._wrong_type's: c & &e}}))7:;N;N Pr]c V^8dQhRRRR/#)rWwhatrrXrrY)rZs"r[r\r/sVVCVJVr]c N\RVPP RV R24#)zY``ValueError`` for a malformed registration (``what`` completes "tried to register ...").Plugin 'z' tried to register .)rrr)rrs&&r[_refusePluginContext._refuse/s)HT]]%7%7$88LTFRSTUUr] persistentFc ,V^8dQhRRRRRRRRRR /#) rWkindrrreleaseCallable[[], None]r"rtrXrKrY)rZs"r[r\r3s;kkk!k,>kOSk kr]c RVPPVPWW4R7#)z[Record host-owned cleanup for a registration (``persistent``: see ``_track_registration``).r")r_track_registrationr)rr$rr%r"s&&&&$r[_trackPluginContext._track3s$}}0070jjr]c4V^8dQhRRRRRRRRRRR R R R /#) rWr$rrslottuplecurrentr previousrestorezCallable[[Any], bool]rXrKrY)rZs"r[r\r9sF555!5,154PluginContext._track_mapping_entry..Ls (F(FwPSUZ\g(hr]r-r/r0r1)rrr6id)rr$rr9rr0sf&fff&r[_track_mapping_entry"PluginContext._track_mapping_entryAsW v {{3'H && #.7 SA5[ch'  r]r0c8V^8dQhRRRRRRRRRRR RR RR R /#) rWr$rrr9r:rr log_fmtlog_argsr0rXrKrY)rZs"r[r\rOsN!,:CFQTad r]c VPWW4V4p\P!WPPP.VO5!V#)z]Store + lease a manager-mapping entry, then debug-log ``log_fmt % (plugin name, *log_args)``.)rDrrrr) rr$rr9rrGr0rHhandles &&&&&&$* r[_register_entryPluginContext._register_entryOs8 **4ghO Wmm00<8< r]r normalizec "VP4#r)strip)ns&r[r@PluginContext.ZsRSRYRYR[r]registerreject_messagec@V^8dQhRRRRRRRRRRR RR R R R RRRR/ #)rWproviderr r$rrrregistryrrrMzOptional[Callable[[str], str]]rRzOptional[Callable[..., Any]]rSrrXOptional[PluginRegistration]rY)rZs"r[r\rXsd&)7;GJSV'E/HU & r]c VPWWV4'dR#Vf VPMV!VP4p VPPp VP WR7p T;'g VP !WR7p Te T 'dTP YR7TJdR#TPPTPY*YAT 4p\PRTPPYZ4T# \ d;pT fh\PYPPT4Rp?R#Rp?ii;i)a9Shared body of the ``register__provider`` methods: type-check (warn + ignore), register in the scope-keyed ``registry``, lease the slot so unload restores the displaced entry. ``None`` when the registry refused/replaced the provider (``ValueError`` with ``reject_message`` set, or a falsy ``register``).NscopezPlugin '%s' registered %s: %s) rrr scope_keysnapshot_registrationregister_providerrrrr_track_scoped_registrationinfo)rrUr$rrVrrrMrRrS registry_namerZr0acceptedexcrJs&&$$$$$$$$ r[_register_scoped_provider'PluginContext._register_scoped_providerXs   H% A A)2): (--@X  ''11-1M  >>H$>$>>VH  h6T6T 7U7 799 MM4H   3T]]5G5G^  % NN>==+=+=s C  s&C</C<< E/D<<EcV^8dQhRR/#rWrXr rY)rZs"r[r\rxsSr]c rVPf^RIHpV!VPR7VnVP#)zHost-owned :class:`agent.plugin_llm.PluginLlm` facade: completions on the user's active model/auth. Overrides (model, agent id, auth profile) are fail-closed, gated by ``plugins.entries..llm.*``.) PluginLlm)r)ragent.plugin_llmrhr)rrhs& r[llmPluginContext.llmws+ 99  2!DNN;DIyyr]cV^8dQhRR/#rfrY)rZs"r[r\rsDDCDr]c "^RIHpHpV!V4#)z}Plugin-safe subagent lifecycle service: serializable handles and immutable snapshots, never a live agent or private registry.)SubagentLifecycleServiceget_active_subagent_parent)agent.subagent_lifecyclernro)rrnros& r[subagent_lifecycle PluginContext.subagent_lifecycles b'(BCCr]cV^8dQhRR/#rfrY)rZs"r[r\rs$$S$r]c ^RIHpV!4#)z``agent.delegation_backends.DelegationBackends``: list delegation backends and switch them per session or globally (a ``/delegation`` command); a host remote facade, so it acts on the owner process.)DelegationBackends)agent.delegation_backendsru)rrus& r[delegation_backends!PluginContext.delegation_backendss A!##r]cV^8dQhRR/#rrY)rZs"r[r\rscr]c B^RIHpV!4# \dR#i;i)uActive profile name (``"default"``, the ``~/.hermes/profiles/`` id, or ``"custom"``), derived from ``HERMES_HOME`` — not ``_cli_ref``, which is None outside the interactive CLI — so gateway and kanban workers get it too.)get_active_profile_namer)hermes_cli.profilesr{ Exception)rr{s& r[ profile_namePluginContext.profile_names%   C*, ,  s  cV^8dQhRR/#rfrY)rZs"r[r\rs(((r]c ^RIHpV!4#)zVThe cron run executing now (``cron.execution_identity.CronExecution``), else ``None``.)current_cron_execution)cron.execution_identityr)rrs& r[r$PluginContext.current_cron_executionsB%''r]c V^8dQhRRRR/#)rWcallbackr&rXrKrY)rZs"r[r\rs"49Kr]c \V4'g \R4hVPR\VRR4V4p\P RVP P4V#)zRegister a cleanup callback for unload: runs in reverse acquisition order interleaved with registration teardown; exceptions are logged, never propagated.z#on_unload callback must be callable on_unloadrjrz'Plugin %s registered on_unload callback)callable TypeErrorr*getattrrrrr)rrrJs&& r[rPluginContext.on_unloadsU!!AB B['(J *SU]^ > @R@RS r]rc V^8dQhRRRR/#)rWrrrXz asyncio.TaskrY)rZs"r[r\rs    r]c aa\P!V4'g \R4h\P!4pT;'gRVP R2pVP WR7oVP RVV3Rl4oSPV3Rl4\PRVPPV4S#) zVSpawn a supervised asyncio task; unload/force reload cancels it. Needs a running loop.zspawn_task expects a coroutineplugin:z:task)rbackground_taskcT<SP4;'gSP4#r)donecancel)tasksr[r@*PluginContext.spawn_task..s 499;C_C_RVR]R]R_C_r]c$<SP4#r)r4)_trJs&r[r@rs &..*:r]z%Plugin %s spawned supervised task: %s) asyncio iscoroutinerget_running_loopr create_taskr*add_done_callbackrrrr)rcororloop task_namerJrs&&$ @@r[ spawn_taskPluginContext.spawn_tasks""4((<= ='');;gdnn%5U; 5. ;_` :; P>PR[\ r]c$V^8dQhRRRRRR/#)rWrr present_fnr rXrurY)rZs"r[r\rs&XXXXdXr]c  `^RIHpVPPp\ V4P 4P 4pVR8Xd \R4h\P!RV4'g \R4h\V4'g \R4hWT9d&WE,Pp\RV: RV: 24hV!WRVP\ \4P44R 7p\P!R VPV4VP#R WTVR 4R #) zRegister a human approval transport, inactive until ``security.approval.transport: `` selects it. It receives a redacted ``ApprovalRequest`` and returns only a correlated decision; policy and persistence stay host-owned. ``present_fn`` may be async.RegisteredApprovalTransportbuiltin-approval transport name 'builtin' is reserved[a-z0-9][a-z0-9_-]{0,63};approval transport name must match [a-z0-9][a-z0-9_-]{0,63}.approval transport present_fn must be callableapproval transport  is already registered by rpresentr profile_home+Plugin %s registered approval transport: %sapproval_transportN)hermes_cli.approval_transportrr_approval_transportsrrOlowerrre fullmatchrrrrrdrr_rD)rrrr transportscleanownerrs&&& r[register_approval_transport)PluginContext.register_approval_transports N]]77 D !'') I LM M||7??Z[ [ ##LM M  %//E25);UV[U^_` `+dnn_.6689   A4>>SXY !!"65RVWr]cDV^8dQhRRRRRRRRRR R R R R RRRRRR RR/ #)rWrrtoolsetschemadictrr check_fnCallable | None requires_env list | Noneis_asyncrt descriptionemojioverriderXrWrY)rZs"r[r\rsl%%%"%%/3%>F%!%8C%VZ%%'*%;?% & %r]c  XaaV 'dMSPS4'g6\RSPP: RS: RSP R24h^RIHp SPPp V PSV R7p V fKV 'gCV PSV R7e.\PRSPPS4R#V PSW#WEWgWWR 7 V PSV R7pRpVekWJdfVPVJdVSPPP!S4SPP#SPR SWV VV3R lR 7p\P%R SPPSV 'd R4V#R4V#)uwRegister a tool in the global registry and track it as plugin-provided. ``override=True`` replaces a same-named built-in (without it a name claimed by another toolset is rejected) and needs operator opt-in via ``plugins.entries..allow_tool_override: true`` — otherwise any enabled plugin could silently replace a privileged built-in like ``write_file`` (#23194).Plugin z cannot override built-in tool z. Set plugins.entries.zY.allow_tool_override: true in config.yaml to allow this plugin to replace built-in tools.rVrYNz>Plugin %s tried to shadow global tool %s without override=True) rrrrrrrrrrrZtoolc:<SPPS4#r)r_remove_tool_name_if_unownedrrsr[r@-PluginContext.register_tool..s!K!KD!Qr]finalizezPlugin %s registered tool: %s%sz (override))_tool_override_allowedrirrrtools.registryrVrr[r\ get_entryrrrRr_plugin_tool_namesaddr^r)rrrrrrrrrrrrVrZr0 registeredrJsff&&&&&&&&& r[ register_toolPluginContext.register_tools D77==)$--,,//NthW##'>>"23QR  , ''11$e1D  H1C1CDPU1C1V1b NN[==--t 5ww%k  33D3F   !j&@ZEWEW[bEb MM , , 0 0 6]]== vtX8Q>F  6 8J8JD&.] 8 57 8 r]c V^8dQhRRRR/#)rW capabilityrrXrtrY)rZs"r[r\rsEEEEr]c vVPPR8Xd VR8XdR#\VPV4#)aTrue when *capability* is live for this plugin (probe, then degrade gracefully). Bundled plugins are trusted for ``tools.override``; otherwise granted_capabilities or the legacy ``allow_*`` key decides. Unknown ids / unreadable consent -> False (fail closed).bundledtools.overrideT)rsourcerr)rrs&&r[has_capabilityPluginContext.has_capabilitys2 ==  9 ,?O1O(DDr]c ,V^8dQhRRRRRRRRRR /#) rWserverrr argumentsOptional[dict[str, Any]]timeoutfloatrXr:rY)rZs"r[r\rs6'''!$'1I'' 'r]c  WPVP49d6\RVPP: RV: RVP R24h\ V4p\R\VR44p^RI H pV!WV4!\T;'g/44p\PR VPPYT\T;'gR 44VP!V4# \ \3dRpLi;i) u7Call ``tool`` on MCP ``server`` synchronously through :mod:`tools.mcp_tool`'s native client (same trust gates, breaker, reconnect — never a parallel connection). Servers not in ``plugins.entries..mcp_allowlist`` raise ``PermissionError`` (default-deny). ``timeout`` clamps to 1–600s; results over ~64KB are truncated with a marker. This is a per-server grant, deliberately not ambient authority over every configured server. TODO(#64228): swap the per-server allowlist for the declared capability model once it lands (per-tool grants, expiry, ro/rw). rz# is not allowed to call MCP server z. Add it to plugins.entries.zI.mcp_allowlist in config.yaml to grant access (default is no MCP access).>@g?g@)_make_tool_handlerz;Plugin %s called MCP %s/%s (timeout=%ss, %d chars returned)r)_mcp_allowlistrPermissionErrorrrrrrmaxmintools.mcp_tool_handlersrrrrlen _mcp_envelope)rrrrrrraws&&&&& r[call_mcpPluginContext.call_mcps ,,T^^< <!$--,,/0 $##'>>"23>?   GnGc3w./> w7Y__"8MN R]]''wCII2 P!!#&&:& G s C00DDic V^8dQhRRRR/#)rWrr rXr:rY)rZs"r[r\r sJJJJr]c *\V\4'gVfRM \V4p\V4VP8pV'dVRVPR,p\P !V4p\V\4'dRV9dRRRVR,/pMJ\V\4'd)RV9d"RRRVR,/pR V9d VR ,VR &M RRRVeTMT/pV'd /VCR R/C#T# \ \3dRpLi;i) z>Normalize an MCP handler result string into a stable envelope.Nru… [truncated]rokFresultTstructuredContent truncated) rrr_MCP_RESULT_CHAR_CAPjsonloadsrrr)clsrrparsedenvelopes&& r[rPluginContext._mcp_envelopes#s## "SCHs777 00014EEC **S/F fd # #6(9(,eWfWo'NH  % %(f*<dHfX.>?H"f,067J0K,-dH8JfPSTH2;.(.K.III& F sC<<DDc V^8dQhRRRR/#)rWrrrXrrY)rZs"r[r\r6sXX#X)Xr]c ^RIHpV!4;'g/p\Y 4;'g/P R4p\ T\ 4'dTUu.uFp\T4NK up#.# \d.u#i;iuupi)zOOperator-granted MCP server allowlist; missing/unreadable -> [] (default-deny). load_config mcp_allowlist)hermes_cli.configrr}rSrrrr)rrcfg allowlistitems& r[rPluginContext._mcp_allowlist5s}  5-%%2C,C;AArFFW 4>y$4O4Oi0idD i0WUWW I 1sA0A0B0 B?Bc V^8dQhRRRR/#)rW tool_namerrXrtrY)rZs"r[r\r@sWWWWr]c FVPPR8XdR#^RIHp\ VP P 4;_uu_4V!4;'g/pRRR4\TPRXR7# +'giL(;i \dR#i;i)a4Whether this plugin may override built-in tools: bundled plugins are trusted (a maintainer choice, not privilege escalation); others need ``tools.override`` via :func:`plugin_capability_granted` (granted_capabilities OR legacy ``allow_tool_override: true``, still honored for backward compatibility; #64228).rTrNFr)r) rrr rr3r home_pathr}rr)rrrr s&& r[r$PluginContext._tool_override_allowed@s{ ==  9 ,  5#DMM$;$;<<!m))r= )9IRUVV =<  s/-B A>B> B BB B B  session_keyoriginc ,V^8dQhRRRRRRRRRR /#) rWcontentrroler str | NonerzMapping[str, Any] | NonerXrtrY)rZs"r[r\rTs=bbb"%b@Jb(b br]c $^RIHpV!WW#VR7#)zQueue *content* for a session (``session_key``) or a chat in this plugin's own profile (``origin``); ``True`` means a host accepted it. Contract: plugins_injection.py, plugin docs.)inject_plugin_message)rr)hermes_cli.plugins_injectionr)rrrrrrs&&&$$ r[inject_messagePluginContext.inject_messageTs G$TDZ`aar]cV^8dQhRR/#rrY)rZs"r[r\r]s**S*r]c 2^RIHpV!VP4#)zQThe calling session's recorded cwd, never the gateway's own (``plugin_session``).) context_cwd)hermes_cli.plugin_sessionr r)rr s& r[ session_cwdPluginContext.session_cwd]s94==))r]cV^8dQhRR/#rrY)rZs"r[r\rbs...r]c 2^RIHpV!VP4#)zYThe calling session's client (``cli``/``tui``/``desktop``/``acp``) or messaging platform.)context_surface)r!r&r)rr&s& r[session_surfacePluginContext.session_surfacebs=t}}--r]c V^8dQhRRRR/#rWtextrrXr rY)rZs"r[r\rgs    r]c ^RIHpV!W4#)zPost *text* into the session bound to this call; the handle's ``edit(text)`` updates it in place. Never raises (``ok=False`` + ``error`` with no conversation): ``plugin_messages.py``.)post)hermes_cli.plugin_messagesr-)rr+r-s&& r[ post_messagePluginContext.post_messagegs 4Dr]c V^8dQhRRRR/#r*rY)rZs"r[r\rms''''r]c :"^RIHpV!W4GRjxL #L5i)zW``post_message`` for async code on the gateway loop (edit with ``await handle.aedit``).)apostN)r.r3)rr+r3s&& r[ apost_messagePluginContext.apost_messagems44&&&&s c$V^8dQhRRRRRR/#)rWquestionrchoicesrrXrrY)rZs"r[r\rrs!--3----r]c ^RIHpV!W4#)zFrom a sync slash-command handler: ask its user to pick one of *choices* (``str`` or ``{value, label?, description?}``); the value, or None if unanswerable: ``plugin_choices.py``.) ask_choice)hermes_cli.plugin_choicesr:)rr7r8r:s&&& r[r:PluginContext.ask_choicers 9(,,r]cV^8dQhRR/#rWrXrtrY)rZs"r[r\rxsjjDjr]c 8\VPP4;_uu_4\4;'g/pRRR4\ XTP 4;'g/PR4RJ# +'giLA;i \dR#i;i)zReturn whether this plugin may trigger gateway session turns (read from the plugin's own profile config, never the calling thread's ambient home).NFallow_gateway_injectionT)r3rrrr}rSrr)rr s& r[_gateway_injection_allowed(PluginContext._gateway_injection_allowedxsx #DMM$;$;<<*,22='sDNN;AArFFG`aeiii =<  s-'B A7B 7 B B B BBc 0V^8dQhRRRRRRRRRRR R /#) rWrrhelpsetup_fnr handler_fnrrrXrKrY)rZs"r[r\rsF R R R" R.6 RDS R R  Rr]c RVRVRVRVRVRVPPRVP/pVPRWPP VR V4#) zRegister a CLI subcommand (``hermes ...``). *setup_fn* receives the argparse subparser; *handler_fn* becomes ``set_defaults(func=...)``.rrDrrErFplugin plugin_key cli_commandz$Plugin %s registered CLI command: %s)rrrrKr _cli_commands)rrrDrErFrrs&&&&&& r[register_cli_command"PluginContext.register_cli_commandsh D&$ {JPX *h 0B0BLRVR`R` ##M49T9TV[$JDR Rr]c 0V^8dQhRRRRRRRRRRR R /#) rWrrrr r args_hint argument_moderrXrWrY)rZs"r[r\rsFPPP"*P9<PNQP!P &Pr]c  VP4P4PR4PRR4pV'g-\P RVP P4R#\\4;_uu_4^RI H pV!V4e7\P RVP PV4RRR4R#RRR4T;'gRP4pR TR T;'gR R VP PR VPRTRVR9dTM V'dRMR/p VPRW`PPV RV4# +'giL;i)aiRegister an in-session slash command (``/name``); handler ``fn(raw_args: str) -> str | None`` (sync or async), plus the session-context keywords it declares (``plugin_command_dispatch``). ``args_hint`` (e.g. ``""``) lets adapters like Discord surface an argument field; without it the command registers parameterless there but still accepts trailing text./ -z;Plugin '%s' tried to register a command with an empty name.N)resolve_commandz^Plugin '%s' tried to register command '/%s' which conflicts with a built-in command. Skipping.rrrzPlugin commandrHrIrOrPr+commandz!Plugin %s registered command: /%s>r+mixedoptions)rrOlstripreplacerrrrrr}hermes_cli.commandsrUrrKr_plugin_commands) rrrrrOrPrrUhintrs &&&&&& r[register_commandPluginContext.register_commands6 ""$++C088cB NNXZ^ZgZgZlZl m  i ;u%1 DEI]]EWEWY^` ! 1! R&&( w {/N/N>N dmm((, UY m?[.[] &d   ##Iumm6T6TV[$GP P! s =E%% E5 c$V^8dQhRRRRRR/#)rWrrargsrrXrY)rZs"r[r\rs& [ [s [$ [S [r]c ^RIHpRV9d*\VPPRR4pVeWSR&VP !W3RVPP /VB#)zDispatch a tool call through the registry with the parent agent (when available) resolved automatically; returns the handler's JSON string. ``kwargs`` forward to dispatch.r parent_agentagentNrZ)rrVrr_cli_refdispatchr[)rrrakwargsrVrds&&&, r[ dispatch_toolPluginContext.dispatch_tools[ ,  'DMM22GTBE ).~&  Z 8O8OZSYZZr]cV^8dQhRR/#rWrXrWrY)rZs"r[r\rs1Mr]c  aaSPPe-\PRSPP 4R#^RIHpSPSVR4'dR#SPPpSSPnSPRSP R\SP4R3SVVV3RlR 7p\PR SPP SP 4V#) zRegister the (single) ``agent.context_engine.ContextEngine`` replacing the built-in ContextCompressor; a second registration is rejected with a warning.NzyPlugin '%s' tried to register a context engine, but one is already registered. Only one context engine plugin is allowed.) ContextEnginezcontext enginecontext_engine manager_value_context_enginec><SPPRSV4#)rp)r_restore_value)r?enginers&r[r@7PluginContext.register_context_engine..s (D(DEVX^`k(lr]rBz)Plugin '%s' registered context engine: %s) rrprrrragent.context_enginermrr6rCr_)rrsrmr0rJsff r[register_context_engine%PluginContext.register_context_engines == ( ( 4 NN\==-- / 6   FM3C D D ==00(. %(( fkk"T]]BSUf0gXl)   ?ASASU[U`U`a r]cV^8dQhRR/#rrY)rZs"r[r\rskkdkr]c N^RIHpHpVPWR4'dR#V!V4\ PRTPPTP4R# \d7p\ P RTPPT4Rp?R#Rp?ii;i)zRegister a :class:`agent.context_references.ContextReferenceProvider`; ``provider.prefix`` defines ``@:``. Built-in prefixes (diff, staged, file, folder, git, url) are rejected.)ContextReferenceProvider#register_context_reference_providerzcontext reference providerNz5Plugin '%s' context reference registration failed: %sz.Plugin '%s' registered context reference: @%s:) agent.context_referencesrzr{rrrrrrr_prefix)rrU_CRP _registerrbs&& r[register_context_reference(PluginContext.register_context_references    H,H I I   h   DdmmFXFXZbZiZij  NNRTXTaTaTfTfhk l  sA## B$.+BB$cV^8dQhRR/#rrY)rZs"r[r\rs 5 5D 5r]c  ^RIHpVPWR4'dR#Wn\P RVP P\VRR44R#)zRecord a memory provider (inert). Activation is owned by ``plugins/memory`` via ``memory.provider``; a provider reaching here was loaded by the general manager, and without this method its ``register()`` would fail on a missing attribute.)MemoryProviderzmemory providerNz*Plugin '%s' registered memory provider: %sr?) agent.memory_providerrr_memory_providerrrrrr)rrUrs&& r[register_memory_provider&PluginContext.register_memory_providersK 9   H6G H H  ( A4==CUCUXvs3 5r]cV^8dQhRR/#rkrY)rZs"r[r\rs''. s %? x%Xr]Tr(z7Plugin '%s' registered dashboard-auth provider: %s (%s))hermes_cli.dashboard_authr"hermes_cli.dashboard_auth.registryrrrrrrr[rrrrrrrr*r_ display_name) rrUrr launch_scopeerJr`rs &f @@r[ register_dashboard_auth_provider.PluginContext.register_dashboard_auth_providers* Dk   H&;=V W W &'>'@A == " "l 2 NN/ ""  ''     %X . 6 Xeik Mt}}OaOa!8#8#8 : :&  NNZ==--wx/Mq R  s5DE#!7EE#c<V^8dQhRRRRRRRRRRR R R RR R RR/ #)rWrrradapter_factoryr rvalidate_configr required_envr install_hint entry_kwargsr rXrWrY)rZs"r[r\rsZ #6>JR(?J14 & r]c (aa^RIHp Hp Hp VP R4'd?SP P R8wd$V !S4'dSPRS R24hVPRSP P4T !RRSRTR TR TR TR T;'g.R VRR/VBp SPPp V PSV R7pV PWR7V PSV R7pV^,V Jg V^,eR#SPPPS4SPP!SP RSWVVV3RlR7p\"P%RSP PS4V#)aRegister a gateway platform adapter (``adapter_factory(PlatformConfig) -> BasePlatformAdapter``). ``check_fn`` is a PASSIVE "deps importable?" probe that must never install (status displays call it freely); an ACTIVE installer goes in ``ensure_deps_fn`` (called from ``create_adapter()`` when ``check_fn`` is False). Extra kwargs (``setup_fn``, ``emoji``, ``allowed_users_env``, ``platform_hint``, ``ensure_deps_fn``) forward to ``PlatformEntry``; unknown keys raise TypeError.)core_ships_platformplatform_registry PlatformEntrytrusted_inboundrzcore platform 'z>' with trusted_inbound (it would waive allowlists and pairing) plugin_namerrrrrrrrrHrYNplatformc:<SPPS4#r)r _remove_platform_name_if_unownedrsr[r@1PluginContext.register_platform../sT]]KKDQr]rz!Plugin %s registered platform: %srY)gateway.platform_registryrrrrrrr  setdefaultrrr[r\rR_plugin_platform_namesrr^rr)rrrrrrrrrrrrrrZr0r/rJsff&&&&&&, r[register_platformPluginContext.register_platforms dc   - . .4==3G3G93TYlmqYrYr,,6tuv v t}}/A/AB  " 4C NV + :F:L:L" & /7 ;G   ''$::4u:M""5"6#99$e9L 1:U "gaj&< ,,00699 MM:t->Q:   8$--:L:LdS r]c$V^8dQhRRRRRR/#)rW action_idr rr rXrKrY)rZs"r[r\r4s$(0 r]c aaa\V4'gSPR4hVe-\V\4'd(VP 4'gSPR4hWSP P 3oSPPoSPS4SPR\V4VVV3Rl4p\PRSP P V4V#)a8Register a Slack Block Kit action handler, wired into ``slack_bolt.AsyncApp`` at connect. ``action_id`` is anything ``slack_bolt.App.action()`` accepts; ``callback`` is ``async def handler(ack, body, action)`` (``await ack()`` within 3s). Raises ``ValueError`` for a non-callable callback or empty ``action_id``.z3a Slack action handler with a non-callable callbackz.a Slack action handler with an empty action_idslack_action_handlerc<<SPPSS4#r)r_remove_identity)rhandlersrsr[r@=PluginContext.register_slack_action_handler..CsT]]%C%CHe%Tr]z-Plugin %s registered Slack action handler: %s)rr rrrOrrr_slack_action_handlersappendr*reprrr)rrrrJrrsf&& @@r[register_slack_action_handler+PluginContext.register_slack_action_handler4s!!,,TU U  Is!;!;IOODUDU,,OP Pdmm&8&89==773T)_TV DdmmFXFXZcd r]c$V^8dQhRRRRRR/#)rWrrfactoryr rXrurY)rZs"r[r\rGs&BB#BBTBr]c  \V4'gVPR4hT;'gRP4P4pV'gVPR4hVPP P V.4PW PP34\PRVPPV\VR\V444R#)a-Register ``factory(native, adapter)``, invoked at ``connect()`` before/as the core handlers register (``adapter`` read-only). ``native``: telegram PTB ``Application``, discord ``commands.Bot``, slack ``AsyncApp``, matrix client, teams ``App``, dingtalk ``DingTalkStreamClient``, line aiohttp ``web.Application``, others ``None``. Keep SDK imports inside the factory; exceptions are logged and the platform still connects. Scope handlers in first-match dispatch tables so core flows keep working. Raises ``ValueError`` when not callable or platform is empty.z6a platform handler factory with a non-callable factoryrz6a platform handler factory with an empty platform namez+Plugin %s registered %s handler factory: %srjN)rr rOrr_platform_handler_factoriesrrrrrrrr)rrrrs&&& r[register_platform_handler'PluginContext.register_platform_handlerGs  ,,WX X~~2$$&,,.,,WX X 11<7*7$7  7r]c  .^RIHpVPPP V4pV!VP P VPWVWEVPPR7pVPRWPPVRWVR7#)aRegister an auxiliary LLM task with its own ``auxiliary.`` config block (picker entry, ``AUXILIARY__*`` env bridge, defaults merged into loaded configs). ``defaults`` may override provider/model/base_url/api_key/timeout/extra_body (unknown keys kept verbatim). ``inherit_from`` names a built-in or already-registered auxiliary task whose effective configuration becomes the base for this one; it is resolved at read time, so the task tracks the base's current config instead of snapshotting it (precedence: inherited base, then ``defaults``, then user config in ``auxiliary.``). An unknown or self-referential ``inherit_from`` logs a warning and registers the task without inheritance. Raises ``ValueError`` for an empty/invalid key, a built-in key, or another plugin's key.)build_auxiliary_task_entry)rrrrrauxiliary_taskz,Plugin %s registered auxiliary task: %s (%s)r0) hermes_cli.plugins_aux_tasksrr _aux_tasksrrrrrK) rrrrrrrexistingrs &&$$$$ r[register_auxiliary_task%PluginContext.register_auxiliary_task^s L==++//4* MM  \gT]]E]E]_##$4c==;S;SUZ$RTW-5$7 7r]cV^8dQhRR/#)rWrXintrY)rZs"r[r\rvs  s r]c 4^RIHpV!VRVPP 2R7p\ PRTPPT4T# \d7p\ P RTPPT4Rp?^#Rp?ii;i)a+Additively register secret-token regexes with :mod:`agent.redact`; returns the count accepted. Plugins can over-redact, never weaken built-ins; ``security.redact_secrets: false`` applies equally. Each pattern must compile and start with >= 2 literal characters; invalid entries warn and are skipped.)register_redaction_patternsr)rz5Plugin '%s' redaction pattern registration failed: %sNz,Plugin %s registered %d redaction pattern(s)) agent.redactrrrr}rrr)rpatternsrcountrbs&& r[r)PluginContext.register_redaction_patternsvs J h9K9K8L/MNE  CT]]EWEWY^_   NNRTXTaTaTfTfhk l s!A B!+BBendonymrtlsurfacecorec 0V^8dQhRRRRRRRRR RR R /#) rWlangrrzstr | Path | Mapping[str, Any]rrrrtrrXrKrY)rZs"r[r\rs>!?MZ $' r]c  aa^RIHpHpHpHp Hp HoV !V4p V!V 4'gVPRV: R24hWV9d-VPRV : RV: RRPV4 R24hV!V4p V !WV R VPP 2W4R 7oVPR V R V 2VV3R l4p \PRVPPW\V 44V #)aRegister a language-pack layer for ``lang`` (``pl``, ``pt-br``): ``source`` is a YAML file path or a nested/flat mapping of ``dotted.key: text``. ``surface`` is ``core`` (Python ``t()``), ``tui`` or ``desktop`` (served to the renderers over ``i18n.catalog``). Partial catalogs are fine; the last registration wins key by key. Resets the i18n caches; never changes ``display.language``. Raises ``ValueError`` for a malformed id/surface/file and ``FileNotFoundError`` for a missing path.)SURFACESis_language_idload_locale_sourcenormalize_language_id register_packunregister_packz locale with invalid language id z (expected e.g. 'pl', 'pt-br')zlocale z for unknown surface z (one of , )r)rrrlocalerc<S!S4#rrY)rrsr[r@/PluginContext.register_locale..s W\G]r]z,Plugin %s registered locale: %s/%s (%d keys))agent.i18n_layersrrrrrrr joinrrr*rrr)rrrrrrrrrrrlang_idmessagesrJrrs&&&$$$ @@r[register_localePluginContext.register_locales  (-g&&,,!A$Ighi i  ",, 3H S\]a]f]fgo]p\qqrst t%f-g74==K]K]J^A_&-8X'!G9'=?]^ CT]]EWEWY`] $ r]metadatac$V^8dQhRRRRRR/#)rWpathz str | Pathrz)Optional[Mapping[str, Mapping[str, Any]]]rXzlist[PluginRegistration]rY)rZs"r[r\rs$-V !r]c ^RIHp.pV!\V44FwrVp\T;'g/P V4;'g/4pVP VP WWWhP R4\VP RR44R74K V# \d7p \PRTPPYy4Rp ? KRp ? ii;i)aRegister every ``[.tui|.desktop].yaml`` under ``path`` (a pack's ``locales/`` dir). The loader calls this for plugins declaring ``provides_locales``; ``metadata`` maps ids to ``{endonym, rtl}``. A broken file is skipped with a warning so one typo never disables the pack.)scan_locale_dirrrF)rrrz&Plugin '%s' locale file %s skipped: %sN) rrrrrrrrtr}rrrr) rrrrhandlesrrfilemetarbs &&$ r[register_locale_dir!PluginContext.register_locale_dirs 6,.&5d4j&A "GdR,,W5;;   ! -5 @Y    r]c  taaaaSV9dF\PRSPPVSRP \ V444SP S.4PS4SPVSVVVV3Rl4p\PRSPPVS4V#)zUAppend ``callback`` under ``key`` (warning on unknown ``key``) and lease its removal.z2Plugin '%s' registered unknown %s '%s' (valid: %s)rc><SPPSSS4#r)r_remove_callback)rrr9rsr[r@/PluginContext._track_callback..s 0N0NwX[]e0fr]zPlugin %s registered %s: %s) rrrrrsortedrrr*r)rr$rrr9r rJsf&fff& r[rPluginContext._track_callbacks e  NNOQUQ^Q^QcQcei &- 8 :3#**84T3(fg 2DMM4F4FcR r]position after_memory max_charsc ,V^8dQhRRRRRRRRRR /#) rWrCrrz(str | Callable[[Mapping[str, Any]], str]rrrrXrKrY)rZs"r[r\rs6777 H77367 7r]c  \V4'g \R4h\V\4'g\ V4'g \ R4hV\ 9d/\RRP\\ 44,4h\V\4'g,\V\4'd^Tu;8d \8:gM\R\ 24hVPPPV4pVe\RV: RVP: 24h\!WW4VP"R7pVP%R WPPVR VVR 7#) zRegister bounded context frozen into each new session prompt. Callables receive a read-only session-info mapping; the rendered prompt is persisted by core verbatim.zdsystem prompt section id must be 1-128 lowercase characters using letters, numbers, '.', '_', or '-'z:system prompt section content must be a string or callablez/system prompt section position must be one of: rz6system prompt section max_chars must be between 1 and zsystem prompt section z! is already registered by plugin )rCrrrrHsystem_prompt_sectionz.Plugin %s registered system prompt section: %sr)rHrrrrrr<rrrtrr8r_system_prompt_sectionsrrHrDrrK)rrCrrrrsections&&&$$ r[register_system_prompt_section,PluginContext.register_system_prompt_sectionsE 144HI I'3''0A0AXY Y : :N#yy0O)PQRS S y$ ' 'z)S/I/I9G(GGUVuUvwx x==88<:`` (namespace FORCED to this plugin); return the subscriber count scheduled. Any ``':'`` in the name (``hermes:x`` is reserved for core, foreign namespaces forbidden) raises ``ValueError``. Delivery is fire-and-forget via a single-worker queue: order preserved, a blocking subscriber cannot stall the emitter.z2Plugin '%s' tried to emit an invalid event name %rrz(' emit() requires a non-empty event name:uPlugin '%s' tried to emit namespaced/reserved event '%s' — a plugin may only emit bare event names under its own '%s:' namespace (the '%s:' prefix is reserved for core, and foreign namespaces are forbidden)z' may not emit 'z>': emit only the bare event name; the namespace is forced to 'z :' and the 'z:' prefix is reserved for corez'' emit() payload must be a dict or None) rrrrrrr7rrr_dispatch_event)rrrrIs&&& r[emitPluginContext.emits ^^ Juc22 NNOQ[ cx |3[\] ] %< NNM&j:P Rx |3CE7K<:`` name (unrestricted — only emitting is namespace-gated). Owner-tagged so unload removes zombie callbacks.rz-' subscribe() requires a non-empty event namez!Plugin %s subscribed to event: %sN) rrrrrr_subscribe_eventrrr)rrrs&&&r[ subscribePluginContext.subscribesfJuc22x (:(:';;hij j &&t~~uG 8$--:L:LeTr])register_automation_blueprintregister_skill)rrrrrr)r)NNFrrF)N)user)Nr)rrN)NNr)Krjrkrlrmrnrrpropertyrrrrrrr rrr r*r6rrDrKrcrjrqrwr~rrrrr4rrrr classmethodr staticmethodrrrr"r'r/r4r:rArLr^rhrvrrrrrrrrrrrrrrr6rr"r'hermes_cli.plugins_contentr)r*rorYr]r[rrsG%$++  LHJJ//VkV[k 5Y_  H[26X\>DD $$ (   X2%%PE'>!JJ*XXW(bMQb+/bb* .  ' - j R RPP6 [*k 5''RB&B"< 7-17'+77. ]a*02Y]$d  7&79`76U*UYXr]rc Faaaaa a a a a VPR4wo o \SPRR4,o SPR4o RV V VVV VV V3Rllo RV 3RllpSPR 4R 8XdTMS pVR V 2VuVnVnVn\ V4#) z]Build one ``register__provider`` method from a ``_SCOPED_PROVIDER_REGISTRARS`` row.r rMrOrRcV^8dQhRR/#rkrY)rZs"r[r\5_make_scoped_provider_registrar..__annotate__ s  $@ r]c <\P!S 4pTPTS\\P!S4S4TSSP RR4SS 'd \VS 4MRSP R4R7 #)rrNrS)r$rrVrrrMrRrS) importlib import_modulercrr) rrUrV base_attrbase_modr$r normalize_fnrX register_name registry_mods && r[rR1_make_scoped_provider_registrar..register su**<8-- 4GI4K4KH4UW`,aUGKK 34O[g9FWX}5D";;'78 .  r]cV^8dQhRR/#rkrY)rZs"r[r\r3s&&)E&r]c<S!W4#rrY)rrrRs&&r[register_source8_make_scoped_provider_registrar..register_sources%%r]paramrzPluginContext.)splitrLrrjrlrnr4) method_namer$r;base_refrdocrXr?methodr7r8r9rRr:s&ff&f&f @@@@@r[_make_scoped_provider_registrarrGs"..-Hi$W[[g%FGLKK +M  &&!( G 4 @_hF;F.YdXeHfhk8FOV(&. "6 **r]c0a\S4V3Rl4pV#)zTurn a registrar into a no-op once the context's load timed out: the abandoned worker thread may still be executing register(), and a late registration would land in registries that the failure path already swept (#108139).c<\VRR4'd8\PRVPPSP 4R#S!V.VO5/VB#)rFz9Plugin '%s' called %s() after its load timed out; ignoredN)rrrrrrj)rrargrFs&*,r[wrapped-_ignore_after_abandoned_load..wrapped&sO 4*E 2 2 NNKT]]M_M_ d,T,V,,r])r)rFrJsf r[_ignore_after_abandoned_loadrL"s" 6]-- Nr] register_cV^8dQhRR/#)rWrXrrY)rZs"r[r\r\;sr]c\p\4;'g/PR4p\V\4'dVPR4fV#\ VR,4pT^8d\PRY 4T#T\8d"\PRT\4\#T# \ \3d\PRT4Tu#\dTu#i;i)aoEffective hook-callback timeout from ``plugins.hook_callback_timeout`` (default 30s; ``<= 0`` disables the threaded path; clamped to ``_MAX_HOOK_CALLBACK_TIMEOUT_SECS``). ``invoke_hook`` calls this once per hook invocation; ``load_config_readonly()`` serves cache hits without ``_CONFIG_LOCK``, so this is a stat + dict lookup per call and needs no memo of its own. r`hook_callback_timeoutz@plugins.hook_callback_timeout is not a number; using default %gsz?plugins.hook_callback_timeout=%g is negative; using default %gsz:plugins.hook_callback_timeout=%g exceeds max %gs; clamping) r?rrrrrrrrrr}rA)r plugins_cfgrs r[_resolve_hook_callback_timeoutrR;s*G +-3388C +t,, @W0X0`N $;<= {XZak00SU\6 8.. N z "Y[bc s(B5R?lt#R@RAlt$RBRClt%RDt&R#)GriWz;Central manager that discovers, loads, and invokes plugins.Nc V^8dQhRRRR/#)rWr[rrXrurY)rZs"r[r\PluginManager.__annotate__ZsS;S;-S;4S;r]c \V4Vn\VP4Vn\P !4VnRVnRVnRVn RVn RVn RVn /Vn /Vn/Vn/Vn\#4Vn\#4Vn/Vn/Vn/Vn/Vn/Vn/Vn/Vn/Vn/Vn.Vn/Vn.Vn/Vn \P !4Vn!\PD!VPB4Vn#^Vn$^^/Vn%\LPN!\PR7Vn)RVn*\PV!4Vn,/Vn-/Vn./Vn/\P`!4Vn1\dVn3\#4Vn4/Vn5.Vn6.Vn7/Vn8/Vn9R#)FN)maxsize):rr[rr threadingRLock_discovery_lock _discovered!_plugin_secret_sources_reconciledre_gateway_message_injector_tui_message_injectorrprr_memory_hook_registrationsrsetrrrKr\r_plugin_skills_automation_blueprints_portable_mcp_servers_portable_mcp_server_pluginsrrrr_plugin_loaded_listeners_subscriptions _event_lock Condition _event_idle_event_generation_event_pending_by_generationqueueQueuer> _event_queue _event_workerlocal _emit_depth_hook_running_callbacks_hook_abandoned_hook_timeout_suppressed_untilLock_hook_timeout_lockr@!_hook_timeout_suppression_seconds_hook_failures_reported_ownership_ledger_registration_order_persistent_carryover_predeclared_modules_predeclared_tools)rr[s&&r[rPluginManager.__init__Zs )3dnn-(0!&8=. IM&FJ"# 24 13 []'68,/E03#.013MO$9;68#@B"<>)5746!35#CE(8:%DF$??,$..t/?/?@!"=>F).3kkBT.U9=$??,=?$13BD+"+.."21R.,/E$GI=? @B"BD!8:r]cV^8dQhRR/#r>rY)rZs"r[r\rUs::d:r]c VPRJ#)z@Return whether a live gateway can accept plugin-triggered turns.Nr]rs&r[has_gateway_message_injector*PluginManager.has_gateway_message_injectors--T99r]c$V^8dQhRRRRRR/#rWrobjectinjectorzCallable[..., bool]rXrurY)rZs"r[r\rUs#;;&;DW;\`;r]c W3VnR#)z8Publish a live gateway injector and its lifecycle owner.Nrrrrs&&&r[set_gateway_message_injector*PluginManager.set_gateway_message_injectors */):&r]c V^8dQhRRRR/#rWrrrXrurY)rZs"r[r\rUs22F2t2r]c fVPe#VP^,VJd RVnR#R#R#)z;Clear the injector only when it still belongs to ``owner``.Nrrrs&&r[clear_gateway_message_injector,PluginManager.clear_gateway_message_injectors3  ) ) 5$:X:XYZ:[_d:d-1D *;e 5r]c V^8dQhRRRR/#rWrgr rXrtrY)rZs"r[r\rUsHHsHtHr]c bVPpVRJ;'d\V^,!R/VB4#)z3Submit a plugin-triggered turn to the live gateway.NrY)r]rtrrgrs&, r[inject_gateway_message$PluginManager.inject_gateway_messages133 %GG$z!}/Fv/F*GGr]cV^8dQhRR/#r>rY)rZs"r[r\rUs66$6r]c VPRJ#)zOReturn whether a live Ink TUI / desktop host can accept plugin-triggered turns.Nr^rs&r[has_tui_message_injector&PluginManager.has_tui_message_injectors))55r]c$V^8dQhRRRRRR/#rrY)rZs"r[r\rUs#77f7@S7X\7r]c W3VnR#)zOPublish a live TUI/desktop injector. Does not touch the messaging-gateway slot.Nrrs&&&r[set_tui_message_injector&PluginManager.set_tui_message_injectors &+%6"r]c V^8dQhRRRR/#rrY)rZs"r[r\rUs...4.r]c fVPe#VP^,VJd RVnR#R#R#)z?Clear the TUI injector only when it still belongs to ``owner``.Nrrs&&r[clear_tui_message_injector(PluginManager.clear_tui_message_injectors3  % % 1d6P6PQR6SW\6\)-D &7] 1r]c V^8dQhRRRR/#rrY)rZs"r[r\rUsHH3H4Hr]c bVPpVRJ;'d\V^,!R/VB4#)z.s*%l4IDAQRQXQXaabakakaa4Is ;; ;HERMES_SAFE_MODEu/HERMES_SAFE_MODE=1 — plugin discovery skippedTF)agent.safe_worker_policyrr+r[r5rZr3r frozensetrrunloadrrr__discover_and_load_inner%_evict_stale_persistent_registrations'_refresh_secret_sources_after_discovery%_re_register_config_hooks_after_force BaseException_notify_plugin_loaded)rrsr loaded_befores&& r[discover_and_loadPluginManager.discover_and_loads_ A  $?$A$A     E.C.E.E   ! ! !#5dnn#E#E$F ! ! &%lDMM4G4G4I%llM 122 MN#' $F ! ! $D  --/ ::<<<> >>@C$F !L ""=1 ! #(  E$F#E ! !s[&GF> F> G2A0F> "G4F> <7F'4F'G'F; ;F> > G G G! cV^8dQhRR/#rrY)rZs"r[r\rU sTTtTr]c RF*wr\P!V4P4K, R# \d"p\P RY4Rp?KWRp?ii;i)zRestore config-owned shell hooks/outbound webhooks after a force clear; each guarded independently so one failing does not skip the other.z'force-reload %s re-register skipped: %sN))z shell-hookzagent.shell_hooks)zoutbound-webhookzagent.outbound_webhooks)r5r6re_register_config_hooksr}rr)rr module_namerbs& r[r3PluginManager._re_register_config_hooks_after_force sV#T E T'' 4MMO#T T FSS Ts$3 AAAcV^8dQhRR/#rrY)rZs"r[r\rUs8S8S8Sr]c a ^RIHp^RIHpHpV!4p.pT'df^RIHpT!4;'g/PR4;'g/o RT 3RllpTUu.uFq!T4'gK\TRR 4NK! ppT'gTP'gR#MR Tn ^R I H p T !4p T!T 4T!T R 7^R I Hp T !\T 44T'gRTn \ P#RRP%\'T44;'gR4R# \ dR#i;i \ d/o Li;iuupi \ d"p \ P#RT 4Rp ? R#Rp ? ii;i)zIf any plugin secret source is enabled (per its own ``is_enabled(cfg)``, honoring custom activation), reset the cache and re-apply. Fail-open: never raises into discover_and_load.)list_plugin_sources)load_hermes_dotenvreset_secret_source_cacheNrsecretscV^8dQhRR/#r>rY)rZs"r[r\KPluginManager._refresh_secret_sources_after_discovery..__annotate__&s ! !D !r]c<SP\VRR44p\TP\ V\ 4'd V44#/44# \ dR#i;i)rrF)rrrt is_enabledrrr})rrrs& r[_enabledGPluginManager._refresh_secret_sources_after_discovery.._enabled&s`!++gffb&AB! 1 1ZQU=V=V' _``\^ _`` ! !s/A A A('A(rrTr) hermes_home)refresh_installed_secret_scopeFz8Re-applied secret sources after plugin discovery for: %sru,z1secret source re-apply after discovery failed: %s)agent.secret_sources.registryrhermes_cli.env_loaderrrr}r rrrr\hermes_constantsragent.secret_scoperrrrrr)rrrrplugin_sources enabled_namesrrsrhomerrbrs& @r[r5PluginManager._refresh_secret_sources_after_discoverys`  I [02N$&  9&=..B33I>DD" ! !>L[^xXY{3WQ3^M[ 999: 6:D 2 S 9"$D %d + 4 0 J *4: 6 9>6 LLS6-#89kk=k m]     \> S LLLc R R SsXD*D<D<D< E4E,A4E!E* D98D9< E  E  FE;;FcV^8dQhRR/#rrY)rZs"r[r\rUOs M M$ Mr]c  VP4pVUu0uFp\V4kK ppVP4Uu.uFp\V4V9gKVNK pp\P R\ V44VP V4\4p\4p\V4pV'd+\PRRPV4\4\V4pVP4U Uu/uF!wrVPW%V4'gKWbK# p p p\!V 4F>p W,p VP#V 4VP%V 4VP'V 4K@ V'dU\P)R\ VP*4\-RVP*P/4444R#R#uupiuupiuupp i)u=The actual discovery sweep — see :meth:`discover_and_load`.z entrypoints: %d manifest(s)zRemoved Hermes plugin %s is still listed in plugins.enabled; remove it and configure a standard user or system Relay plugins.toml, or use %s for an explicit user-file overriderz/Plugin discovery complete: %d found, %d enabledc3L"TFqP'gK^xK R#5i)N)r)rrs& r[r9PluginManager._discover_and_load_inner..osK'=!AA'=s$ $N)_collect_directory_manifestsr _scan_entry_pointsrrrextendr&r'rrrrr,r_gate_manifestr#_warn_python_dependencies_validate_plugin_config_schema _load_pluginr_rsumvalues) r manifestsmdirectory_keys ep_manifestsdisabledrstale_relay_keyswinnersrto_load lookup_keyrs & r[r&PluginManager._discover_and_load_innerOs*.*K*K*M 4==9a,q/9=#'#:#:#<f#fbsGGG;GGc(V^8dQhRRRRRRRR/#) rWrrrrrOptional[set[str]]rXrtrY)rZs"r[r\rUqs,&2:EW r]c \WV4pVPR8XdR#VPR8XdVPV4MZVPR8XdVPV4M7\ WP VP R7VP\V4&VP'd\P!VP!R#)zRoute one winning manifest per :func:`gate_manifest`: load now, defer, or record as skipped (introspection-only placeholder). Returns True only for plugins that go through the dependency-ordered load pass.loadTload_nowdefer)rrrF) r*actionr_register_deferred_platformrrrrr logr)rrrrverdicts&&&& r[rPluginManager._gate_manifestqs  G< >>V # >>Z '   h ' ^^w &  , ,X 64@!??'--5QDMM,x0 1 ;;; JJ $r]c(V^8dQhRRRRRRRR/#)rWrrrr rrXrurY)rZs"r[r\rUs0UUUUY\UaeUr]c  &^RIHp\V4P4P 4pVR8Xd \ R4h\ P!RV4'g \ R4h\V4'g \R4hWPP9d1VPV,Pp\ RV: RV: 24hV!WRV\\4P44R 7VPV&\PR W54R #) zManager-level registration (public API kept for out-of-tree plugins); the PluginContext method is the tracked path plugins normally use. Same validation, no unload tracking.rrrrrrrrrrN)rrrrOrrrrrrrrrrdrr_)rrrrrrrs&&&$ r[r)PluginManager.register_approval_transports ND !'') I LM M||7??Z[ [ ##LM M -- ---e4>>E25);UV[U^_` `+FicRaRcRkRkRmNn, !!%(  A9Tr]cV^8dQhRR/#)rWrrrY)rZs"r[r\rUs3r]c VPP\V4P4P 44pVe1VP \\ 4P448wdR#V#)z>Return a transport only inside the profile that registered it.N)rrrrOrrrrd)rrrs&& r[get_approval_transport$PluginManager.get_approval_transportsY..223t9??3D3J3J3LM  !8!8C@Q@Y@Y@[<\!\r]cV^8dQhRR/#rWrXlist[PluginManifest]rY)rZs"r[r\rUs--.B-r]c \4#)zVDirectory manifests in full-discovery order (see :func:`collect_directory_manifests`).)r(rs&r[r*PluginManager._collect_directory_manifestss *,,r]c V^8dQhRRRR/#rW raw_configMapping[str, Any]rXrtrY)rZs"r[r\rUs3Dr]c \R4'dR#VPR4p\V\4'gR#RRlpV!VPR44pV!VPR.44pV'gR#VP 4Uu/uFp\ V4VbK upP 4FwrxWxP0p VP'dW,'gW,'gKB^RI H p T !\VP4\4R , VP;'gT, .RR 7'dR #K R#uupi \\ \"3dKi;i) zProbe enabled portable MCP packages without loading plugins (shares the full-discovery manifest collection so precedence/gating cannot diverge).rFr`c V^8dQhRRRR/#)rWrr rXrrY)rZs"r[r\.__annotate__s b b# b( br]c\V\4'd+VUu0uFp\V\4'gKVkK up#\4#uupir)rrrr`)rvs& r[_names6PluginManager.has_enabled_portable_mcp.._namess;?I%QU?V?Vu;u! 1c(:AAu; a\_\a a;s A A rr) _discover_mcpz plugin-data) create_dataT) _env_enabledrrrrr rrportablehermes_cli.agent_pluginsrrrrrOSError RuntimeErrorr) rr plugins_configrrrrrrnamesrs && r[has_enabled_portable_mcp&PluginManager.has_enabled_portable_mcpsF * + +# 2.$// b++I67.,,Z<=AEAbAbAd$eAdA\!_a%7Ad$e$k$k$m J/E$$$(8(8 B hmm!4o6G-6W$,$<$<$J$J 7LMO]bddd %n%f\:6  sE7>E6EE43E4c(V^8dQhRRRRRRRR/#) rWrrrr skip_namesrrXrrY)rZs"r[r\rUs2CCC"%C3EC Cr]c \WVR7#)z9Read manifests under *path* (see :func:`scan_directory`).)r!)r-)rrrr!s&&&&r[_scan_directoryPluginManager._scan_directorysdzBBr]cV^8dQhRR/#rrY)rZs"r[r\rUs//$8/r]c \4#)zORead installed plugin entry points (see :func:`discover_entrypoint_manifests`).)r)rs&r[r PluginManager._scan_entry_pointss ,..r]cV^8dQhRR/#rWrX list[tuple]rY)rZs"r[r\rUs11;1r]c ,\VP4#)zW``(action_id, callback, plugin_name)`` tuples for the Slack adapter to wire at connect.)rrrs&r[get_slack_action_handlers'PluginManager.get_slack_action_handlerssD//00r]c V^8dQhRRRR/#)rWrrrXr*rY)rZs"r[r\rUs``s`{`r]c \VPPT;'gRP4P 4.44#)z``(factory, plugin_name)`` tuples for one platform; adapters call ``factory(native, adapter)`` at connect (see :meth:`PluginContext.register_platform_handler`).r)rrrrOr)rrs&&r[get_platform_handler_factories,PluginManager.get_platform_handler_factoriess;D4488(..b9O9O9Q9W9W9Y[]^__r]cV^8dQhRR/#r)rY)rZs"r[r\rUs?? ?r]c $VPR4#)zEBack-compat alias for ``get_platform_handler_factories("telegram")``.r)r0rs&r[get_telegram_handler_factories,PluginManager.get_telegram_handler_factoriess22:>>r]cV^8dQhRR/#rWrXzlist[dict[str, Any]]rY)rZs"r[r\rUs   2  r]c Z\VPP44UUu.uFwrRVPPR\ VP4RVPP RVPPRVPPRVPPRVPR\VP4R \VP4R \VP4R \VP4R VP / NK upp#uuppi) z7Return a list of info dicts for all discovered plugins.rrr$versionrrrtoolshooksrcommandsr)rrrrrr r$r9rrrrrrrrr)r_keyrs& r[ list_pluginsPluginManager.list_pluginss$DMM$7$7$9: ;'$   QZZ0H&RSR\R\RaRa1::--}ajj>T>T!**++Y 7CPQPbPbLcQ//0,AD[D[@\C 5 56   ;   sCReturn the ``Path`` to a plugin skill's SKILL.md, or ``None``.rN)rar)rrArs&& r[find_plugin_skillPluginManager.find_plugin_skills)##''7 %uV}/4/r]c V^8dQhRRRR/#)rWrrrXrrY)rZs"r[r\rUshhchihr]c haV R2o\V3RlVPP444#)zCReturn sorted bare names of all skills registered by *plugin_name*.r c3l<"TF)wrVPS4'gKVR,xK+ R#5i) bare_nameN) startswith)rqnrr}s& r[r3PluginManager.list_plugin_skills..s,g2MQSQ^Q^_eQfna nn2Ms44)rrar)rrr}s&&@r[list_plugin_skills PluginManager.list_plugin_skillss/="g$2E2E2K2K2Mgggr]cV^8dQhRR/#r7rY)rZs"r[r\rUs  ,@ r]c \VPP44UUu.uFAwrRVR\VP RR44RRR\ VP R/44/NKC upp#uuppi)zDReturn progressive-disclosure metadata for registered plugin skills.rrrcategoryrH frontmatter)rrarrrr)r qualifiedrs& r[list_plugin_skill_metadata(PluginManager.list_plugin_skill_metadatas{ '-T-@-@-F-F-H&I  'J") =#eii r6R2SHmT%))MSU:V5W 'J    sAA2cV^8dQhRR/#)rWrX list[Any]rY)rZs"r[r\rUsPPIPr]c |\VPP44UUu.uFwrVNK upp#uuppi)z:Plugin-registered ``AutomationBlueprint``s, sorted by key.)rrbr)rr=bps& r[list_automation_blueprints(PluginManager.list_automation_blueprintss2#)$*E*E*K*K*M#NO#Nxt#NOOOs 8cV^8dQhRR/#r>rY)rZs"r[r\rUs00$0r]c ,\VP4#r)rtrcrs&r[has_portable_mcp_servers&PluginManager.has_portable_mcp_serverssD..//r]cV^8dQhRR/#)rWrXzdict[str, dict[str, Any]]rY)rZs"r[r\rUs[[*C[r]c ~VPP4UUu/uFwrV\V4bK upp#uuppi)z?Return a defensive copy of enabled portable MCP server configs.)rcrr)rrrs& r[get_portable_mcp_servers&PluginManager.get_portable_mcp_serverss67;7Q7Q7W7W7YZ7Y|td6l"7YZZZs9cV^8dQhRR/#)rWrXzdict[str, str]rY)rZs"r[r\rUs777r]c ,\VP4#r)rrdrs&r[get_portable_mcp_server_plugins-PluginManager.get_portable_mcp_server_pluginssD5566r]c V^8dQhRRRR/#)rWrArrXrurY)rZs"r[r\rUs66#6$6r]c >VPPVR4R#)z>Remove a stale registry entry (silently ignores missing keys).N)rapop)rrAs&&r[remove_plugin_skill!PluginManager.remove_plugin_skills 5r]).rrbrrKrerpr[rZrqrjrirgrkrnror]rsrxrrrvrtrwrr_rryr{rr\rerr\rarrrdrcr|r}rzrrfrr^rr[rF)'rjrkrlrmrnrr-rrrrrrrrrrrrrrrrrr#rr,r0r4r>rCrLrSrYr]rarerjrorYr]r[rrWsES;j::;2 H 667. H 42lT8St MD(U&-:C /1` ?  0 h  P0[766r]rOptional[PluginManager]_plugin_managerzdict[Path, PluginManager]_plugin_managers_by_homeztuple[object, Callable] | None#_published_gateway_message_injector_published_tui_message_injectorcV^8dQhRR/#rVrY)rZs"r[r\r\!s..$.r]c\4P4P4# \d\4P4u#i;i)uResolved active Hermes home — the key for per-profile plugin managers (plugins capture the home at registration, so a process serving several profiles cannot share one manager).)r expanduserrdr}rYr]r[_plugin_home_keyru!sC. ++-5577 . ++--.s%(#A Ac V^8dQhRRRR/#)rWrrmrXrurY)rZs"r[r\r\*s : :&= :$ :r]cVfR#\VR/4P4Fp\\VRR4RR4pV'dVP\ R24'gKC\ V4\ ;_uu_4\ P!V4VP8Xd\ P!VR4RRR4K R# +'giK;i)uPurge ``sys.modules`` entries for this manager's directory plugins (package AND submodules — otherwise a same-slug plugin in another profile reuses the previous profile's submodule state). Nrrrjr) rrrIr1r2r0r/rr[ri)rrrs& r[_clear_plugin_submodulesrx*s':r299;gfh=z4P +"8"8J=C  C cV^8dQhRR/#)rWrXzlist[PluginManager]rY)rZs"r[r\r\:s 3r]c \;_uu_4\\P\P 444p\ e!\ V9dVP\ 4RRR4V# +'giX#;ir)_plugin_managers_lockrrfromkeysrorrnr)managerss r[_known_plugin_managersr~:sZ   &>&E&E&GHI  &?(+J OOO ,  O   Os AA22 B c$V^8dQhRRRRRR/#rrY)rZs"r[r\r\Bs(BBB:MBRVBr]c\;_uu_4W3s\4FpVPW4K RRR4R# +'giR#;i)zHRemember the process gateway host and stamp managers that already exist.N)_published_gateway_host_lockrpr~rrrrs&& r[publish_gateway_message_hostrBs= & %/4.?+-/G  0 0 A0 & % % %s &? A c V^8dQhRRRR/#rrY)rZs"r[r\r\Ms:::4:r]c\;_uu_4\e\^,VJdRs\4FpVPV4K RRR4R# +'giR#;i)zKForget this owner's process gateway host without clobbering a newer runner.N)rrpr~rrrs& r[$clear_published_gateway_message_hostrMsM & % / ;7:eC26 /-/G  2 25 90 & % % %s >A A( c V^8dQhRRRR/#rWrrrXrurY)rZs"r[r\r\Xs88M8d8r]c\;_uu_4\pVeVPfVP!V!RRR4R# +'giR#;i)zLGive a newly resolved profile manager the live process gateway host, if any.N)rrpr]rrhosts& r[_attach_published_gateway_hostrXs; % %2   A A I  0 0$ 7 & % % %s )A A c$V^8dQhRRRRRR/#rrY)rZs"r[r\r\`s" : :F :6I :d :r]c\;_uu_4W3sRRR4\4FpVPW4K R# +'giL4;i)z~Remember the process TUI/desktop host and stamp managers that already exist. Does not call ``set_gateway_message_injector``. N)_published_tui_host_lockrqr~rrs&& r[publish_tui_message_hostr`s< " !+0*;' ")+((9, " !s ? A c V^8dQhRRRR/#rrY)rZs"r[r\r\ls22F2t2r]c\;_uu_4\e\^,VJdRsRRR4\4FpVPV4K R# +'giL4;i)zOForget the process TUI host and clear it where this owner still holds the slot.N)rrqr~rrs& r[ clear_published_tui_message_hostrlsN " ! + 73A6%?.2 + "*+**51, " !s A A' c V^8dQhRRRR/#rrY)rZs"r[r\r\ws-- -$-r]c\;_uu_4\pRRR4XeVPf WnR#R#R# +'giL.;i)z^Give a newly resolved manager the process TUI host, if one is installed and the slot is empty.N)rrqr^rs& r[_attach_published_tui_hostrws; ! !. " G99A(,%B " !s < A cV^8dQhRR/#rWrXrrY)rZs"r[r\r\sMr]c~\4p\;_uu_4\e2\\P 49d\\V&\pM9\P V4pVf\ \V4R7pV\V&VsRRR4\X4\V4V# +'giL(;i)zReturn the plugin manager for the active Hermes profile/home (cached per resolved home; a profile switch gets its own manager and plugin submodules).N)r[) rur{rnrorrrrrr) current_homers r[get_plugin_managerrs$%L    &?BZBaBaBc+c5D $\ 2%G.22<@G'/,2OP9@(6%O #7+w' N  s A3B,, B< cV^8dQhRR/#rrY)rZs"r[r\r\sLL$Lr]c \;_uu_4\\P\P 444p\ e!\ V9dVP\ 4VFp\V4VP4K! \P4RsRRR4\;_uu_4RsRRR4\ ;_uu_4RsRRR4^RIHpV!4R# \d\PRRR7Ki;i +'giL{;i +'giLu;i +'giLo;i \d\PRRR7R#i;i)zPTest-only: drop every cached manager and its submodules for a fully clean slate.Nz!test plugin-manager unload failedTexc_info)clear_providersz$dashboard-auth registry clear failed)r{rrr|rorrnrrxrr}rrclearrrprrqrr)r}rrs r[ _reset_plugin_managers_for_testsrs    &>&E&E&GHI  &?(+J OOO ,G $W - Q  !&&(  & %.2+ & ! !*.' "LF Q @4 P Q   & % ! ! L ;d KLsZA)D9C- D9D)D< E-"D DD D D& ) D9 < E "E54E5c V^8dQhRRRR/#r rY)rZs"r[r\r\s@@->@4@r]c4\4PV4#)zWhether config enables a portable package with MCP servers (manifest-only scan on a fresh manager; imports nothing, mutates no registry).)rr)r s&r[has_enabled_agent_plugin_mcprs ? 3 3J ??r]c V^8dQhRRRR/#rrrY)rZs"r[r\r\s88D8T8r]cx^RIHpV!4'dR#\4\4P VR7R#)zDiscover and load all plugins (idempotent; ``force=True`` rescans). Joins an in-flight background discovery instead of racing a second scan.rNrs)rr_join_background_discoveryrr)rsrs& r[discover_pluginsrs-= ***7r]zOptional[threading.Thread]_background_discovery_threadcV^8dQhRR/#rrY)rZs"r[r\r\s--4-r]ca^RIHpV!4'dR#\4oSP'dR#\;_uu_4\ e&\ P 4'd RRR4R#RV3Rllp\P!VRRR7s\ P4RRR4R# +'giR#;i)zRun discovery in a daemon thread to overlap the rest of CLI startup (~150ms). Every synchronous consumer joins it via :func:`discover_plugins`, so no one sees a half-loaded registry. No-op when already done or in flight.rNcV^8dQhRR/#rrY)rZs"r[r\7start_background_plugin_discovery..__annotate__s T Td Tr]c<SP4\4R# \d\P RRR7R#i;i)z"background plugin discovery failedTrN)r_persist_plugin_toolset_keysr}rrrsr[_run/start_background_plugin_discovery.._runs= T))+,. TCdS Ts"AAzplugin-discoveryT)targetrdaemon) rrrr[_background_discovery_lockris_aliverXThreadstart)rrrs @r[!start_background_plugin_discoveryrs= "G # # ' 38T8]8]8_8_  $ # T T(1'7'7tJ\ei'j$$**, $ # # #s"B1&B116B11 C c V^8dQhRRRR/#)rWrrrXrurY)rZs"r[r\r\sr]c\pVe@VP4'd*V\P!4Jg\ 4'dR#VP VR7R#)uWait for an in-flight background discovery (no-op from its own thread or a plugin-load worker it spawned — that worker's parent is blocked waiting on it).N)r)rrrXcurrent_threadr5r)rts& r[rrsB %Ay Y-E-E-G(GK`KbKbFF7Fr]cV^8dQhRR/#rVrY)rZs"r[r\r\sDDDr]c2\4R, R, #)cachezplugin_toolset_keys.jsonrrYr]r[_plugin_toolset_keys_cache_pathrs  w &)C CCr]cV^8dQhRR/#rrY)rZs"r[r\r\s I Id Ir]c \^RIHp\\4UUu0uFwpq!kK upp4p\\ 4P 44pV!\4RVRV/RRR7R#uuppi \ d.pL/i;i \ d\PRRR 7R#i;i) zJPersist discovered plugin toolset keys + portable MCP names (best-effort).)atomic_json_write toolset_keys portable_mcpNi)indentmodez!plugin toolset key persist failedTr) utilsrrget_plugin_toolsetsrrar}rrr)rts_key_keysrs r[rrs I+2E2GH2G,&!Qv2GHI 02KKMNH 9;ndTbdl=mvzBG H I H  I 84 HIsDBA, B!A2B,B2 B?BBB"B+*B+c$V^8dQhRRRRRR/#)rW cache_fieldrlivez#Callable[[PluginManager], set[str]]rXrrY)rZs"r[r\r\s#C/RW_r]c\4p\pVRJ;'dVP4pVP'dV'g V!V4#V'd\ \ 4;_uu_4\ P!\4PRR74p\V\4'dVPV4MRp\V\4'dP\;QJdRV4F 'dK RM RM !RV44'd\V4uuRRR4#RRR4\!4V!V4# +'giL";i)z\Shared body of the ``*_nowait`` probes: live registry, else last launch's cache, else block.Nz utf-8-sig)encodingc3B"TFp\V\4xK R#5ir)rr)rrs& r[r%_nowait_plugin_set..s/SFq 1c0B0BFsFT)rrrr[rr}rrr read_textrrrrallr`r)rrrr in_flightblobrs&& r[_nowait_plugin_setrs "G$A ..!**,I9G} i ::=?IIS^I_`D.8t.D.DTXXk*$F&$''CC/SF/SCCC/SF/S,S,S6{ !  = ! s.A8E'E;E E E cV^8dQhRR/#rWrXrrY)rZs"r[r\r\ smmmr]c\RR4#)zPlugin toolset keys without blocking on in-flight discovery: live registry when done, last launch's persisted set while a background scan runs (callers only EXCLUDE these keys, so a stale set is harmless and self-heals), else block via discover_plugins().rcL\4UUu0uFwpq!kK upp#uuppir)r)_mrrs& r[r@0get_plugin_toolset_keys_nowait..s#UhUj9kUj\VQPQ&Uj9k9ks rrYr]r[get_plugin_toolset_keys_nowaitr s n.k llr]cV^8dQhRR/#rrY)rZs"r[r\r\s[[h[r]c\RR4#)zSPortable MCP server names; same contract as :func:`get_plugin_toolset_keys_nowait`.rc4\VP44#r)r`ra)rs&r[r@6get_portable_mcp_server_names_nowait..sAs TT0ATFmTr]c4\4PV4#)z@Render plugin prompt sections after idempotent plugin discovery.)_ensure_plugins_discoveredrender_system_prompt_sections)rs&r[rr>s % ' E El SSr]c$V^8dQhRRRRRR/#)rWr$rrgr rXrVrY)rZs"r[r\r\Cs&AACA3A9Ar]c 8\4P!V3/VB#)uInvoke registered middleware callbacks (lazy-discovers like :func:`invoke_hook`). Lazy-discovers plugins on first use — same delivery-parity guarantee as :func:`invoke_hook` (tracking #64178). )rinvoke_middleware)r$rgs&,r[rrCs   0 0 @ @@r]c V^8dQhRRRR/#)rWr$rrXrtrY)rZs"r[r\r\Ls ? ? ? ?r]c\4p\VRR4p\V4'd\V!V44#\\VR/4P V44#)a<True when middleware is registered for ``kind``; lazy-discovers first since callers gate :func:`invoke_middleware` on it. Lazy-discovers first: callers use this as a gate before :func:`invoke_middleware`, so a pre-discovery ``False`` here would silently skip delivery on surfaces that never ran discovery (#64178). has_middlewareNr)rrrrtr)r$rrFs& r[rrLsT !G W. 5FF4L!! 377= >>r]c V^8dQhRRRR/#)rWrrrXrtrY)rZs"r[r\r\Zs3333r]c4\4PV4#)uTrue when a loaded plugin handles a hook (lazy-discovers first, like :func:`has_middleware`). Lazy-discovers first — same gate-before-invoke rationale as :func:`has_middleware` (tracking #64178). )rhas_hookrs&r[rrZs   ' ' 22r]c V^8dQhRRRR/#)rWrrrXztuple[Callable, ...]rY)rZs"r[r\r\bs??3?+??r]c4\4PV4#)z>r]rrc4V^8dQhRRRRRRRRRRRRR R /#) rWrrrV alias_usedargs_rawrrrrXrurY)rZs"r[r\r\gsONNN!N/2N>ANN1>N Nr]c h\4pVPR4'gR#VPRWVW4VR7pVFBp\V\4'gKRV9g RV9gK+\ P RWV4KD R# \d"p \ P RT 4Rp ? R#Rp ? ii;i)zFire the observer-only ``pre_command`` hook; never raises. Directive-shaped returns are logged at debug so future block/rewrite adopters are discoverable.rN)rrVrr rrrdecisionzpre_command is observer-only in v1: ignoring directive %r for /%s (surface=%s). Block/rewrite will arrive with the command middleware variant (#64204/#64231).z0pre_command hook dispatch failed (non-fatal): %s)rrrrrrrr}) rrVrr rrrresultsrrbs $$$$$$ r[fire_pre_command_hookr gs N$& .. %% 7 & F&$''X-?:QWCW n#g7 N GMMNs(!B.B B(B B1B,,B1T)frozencP]tRtRt$RtR]R&RtR]R&RtR]R&RtR]R&R t R#) _PreToolCallDirectiveiNrrmessagerule_keyr modified_argsrY) rjrkrlrmrrrrrrorYr]r[rrs+ FM !G]!"Hm".2M+2r]rc$V^8dQhRRRRRR/#)rWallowedr deny_msg_fmtrrXrurY)rZs"r[r\r\s&.. .. .r]c2V\nV\nR#r)_thread_tool_whitelistrfmt)rrs&&r[set_thread_tool_whitelistrs&-"!-r]cV^8dQhRR/#rrY)rZs"r[r\r\s**T*r]cR\nR#r)rrrYr]r[clear_thread_tool_whitelistrs %)"r]rc<V^8dQhRRRRRRRRRRRRR RR R R R / #)rWrrrartask_id session_id tool_call_idturn_idapi_request_idmiddleware_tracezOptional[list[dict[str, Any]]]rXrrY)rZs"r[r\r\sX4>4>4>24>=@4>SV4>4>%(4>?B4>54> 4>r]c\\RR4pVe5W9d/\\RR4p \RV PVR7R7#^RIHp T !R T\ V\4'dTM/Y#YET\T;'g.4R 7 p Rp Rp V EF8p\ V\4'gKVPR 4pVR 8XdVVPR 4p\ V\4'd-V'd%/V eT M\ V\4'dTM/CVCp KVR9dKVPR4p\ V\4'd V'dTMRpVR8Xd V'gKVR8Xd\RVV R7u#V eKVPR4pT\ V\4'dVP4;'gRMR3p EK; V e\RV ^,V ^,V R7#\V R7#)aCheck ``pre_tool_call`` hooks for ``{"action": "block", "message"}`` (veto; message becomes the tool result) or ``{"action": "approve", "message", "rule_key"?}`` (escalate ANY tool to the human-approval gate; ``rule_key`` picks the ``[a]lways`` allowlist grain). Precedence is ``block`` > ``approve`` > none, not registration order: any plugin's valid veto wins over an earlier plugin's request for human confirmation (#87420); among approves the first valid one wins. Irrelevant returns are ignored.rNrzTool '{tool_name}' deniedblock)r)rr)rr)rrarr r!r"r#r$rmodifyraapprover)rrrr)rrrr)r)r&r() rrrrZhermes_cli.lifecyclerrrrrrrO)rrarr r!r"r#r$rrinvoke_lifecycle_hook hook_resultsr first_approverrpartialrrs&&&&&&&& r[$_get_pre_tool_call_directive_detailsr.s,i>Gy7,e5PQ$GSZZR[Z=\]]I(9:dD;Q;Q4WY\%=M=S=SQS8TL /3MCGM&$'' H% X jj(G'4((W!Z]5NM-7d-C-CT!ZQX!Z  - - **Y''55''t W W  W (Xef f  zz*-H$JxY\D]D]x~~'7'?'?4cghM34 $I}Q?OZghiZj3@B B } ==r]c(V^8dQhRRRRRRRR/#) rWrrrar hook_kwargsr rXz#tuple[Optional[str], Optional[str]]rY)rZs"r[r\r\s,---2-CF-(-r]c J\W3/VBpVPVP3#)zBack-compat: ``(directive, message)`` with directive ``"block"`` / ``"approve"`` / ``None``. ``hook_kwargs`` are the observability ids of :func:`_get_pre_tool_call_directive_details`.)r.rr)rrar0detailss&&, r[get_pre_tool_call_directiver3s& 39RkRG NNGOO ,,r]c(V^8dQhRRRRRRRR/# rWrrrarr0r rXrrY)rZs"r[r\r\s,55525CF55r]c 4\W3/VBwr4VR8XdV#R#)zYDeprecated shim: only the ``block`` message (or ``None``); ``approve`` is invisible here.r&N)r3)rrar0 directivers&&, r[get_pre_tool_call_block_messager8s(5YT TI7*744r]c(V^8dQhRRRRRRRR/#r5rY)rZs"r[r\r\s2LLL2LCFLLr]c (\W3/VB^,#)zResolve the pre_tool_call directive to a final block message (or ``None`` to proceed), running the human-approval gate for ``approve``. See :func:`_resolve_block_from_details`.)_dispatch_pre_tool_call_hooks)rrar0s&&,r[resolve_pre_tool_blockr<s ) HK H KKr]r"r!r c 0V^8dQhRRRRRRRRRRRR /#) rWr2rrrr"r!r rXrrY)rZs"r[r\r\s> "/2@CX[r]c VPR8Xd VP#VPR8wdR#^RIHp^RIHpHpRp\\4;_uu_4V!W#VR7pRRR4T!YP;'gRVP;'gTR7p Ve*\\4;_uu_4V!V4RRR4MV PR 4'g(\V PR 4;'gR V 24#R# +'giL;i +'giLc;i Te=\\4;_uu_4T!T4RRR4i +'gii;ii;i \d R T 2u#i;i) zThe ONE place for the fail-closed approval logic: ``block`` blocks with its message; an ``approve`` whose gate errors, denies, or times out is blocked; anything else proceeds.r&r(N)request_tool_approval)#reset_current_observability_context!set_current_observability_contextr"r!r r)rz)BLOCKED: plugin approval gate failed for approvedrz&BLOCKED: plugin approval required for ) rrtools.approvalr?tools.approval_contextr@rArr}rrr) r2rr"r!r r?r@rAapproval_tokensrs &&$$$ r[_resolve_block_from_detailsrGsK ~~ ~~"G8q i ?zSO! I*9oo6K6KV]VfVfVsVsjstF*i((7H)(+ ::j ! !6::i(``.TU^T_,`aa ! )(*i((7H)(((+ G;9+FFGs'E8 D $E8-D3D3D3E8: D E8 D E8 D0 +E80E83E5 E!  E5! E1 , E55E88F  F c(V^8dQhRRRRRRRR/#) rWrrrarr0r rXz.tuple[Optional[str], Optional[dict[str, Any]]]rY)rZs"r[r\r\s,...2.CF.3.r]c \W3/VBp\W03/RUu/uFqDVPVR4bK upBpWSP3#uupi)uInvoke ``pre_tool_call`` hooks once; return ``(block_message, modified_args)`` — the resolved block/approve message (``None`` to proceed) and merged ``modify`` args (``None`` if none).rrB)r.rGrr)rrar0r2r block_msgs&&, r[r;r;s^ 39RkRG+nBklBkQ+//!R"88BklnI ,, --msA modelcodingattemptfinal_response changed_pathsc8V^8dQhRRRRRRRRRRR RR R R R /#)rWr rrrKrLrtrMrrNrOzOptional[list[str]]rXrrY)rZs"r[r\r\sN'*8;JN &)?Rr]c &\RYY#YE\T;'g.4R7pVFp\V\4'gK\ VP R4;'gVP R4;'gR4P 4P4p VP R4;'gVP R4p V R 9gK\V \4'gKV P 4'gKV P 4u# R#) aCheck ``pre_verify`` hooks for ``{"action": "continue", "message"}`` (or Claude-Code Stop ``{"decision": "block", "reason"}``) to keep the turn going; first non-empty message wins, any other return lets the turn finish. ``coding``/``attempt`` let hooks scope and self-throttle.r)r rrKrLrMrNrOrr rrreasonN)continuer&)rrrrrrrOr) r rrKrLrMrNrOr+rrrs $$$$$$$ r[get_pre_verify_continue_messagerTsed=K^K^\^F_L&$'' VZZ)IIVZZ -CIIrJPPRXXZ**Y'??6::h+? * *z'3/G/GGMMOO==? "  r]rU status_code error_type error_code error_message error_bodyr approx_tokenscontext_length num_messagescHV^8dQhRRRRRRRRRRRRR R R R R RRRRRRR / #)rWrUrrKrUz Optional[int]rVrWrXrYrrzOptional[BaseException]rZrr[r\rXrY)rZs"r[r\r\%sx555"%59F5[^55),5?W5 #5;>5TW5 5  5r]c a^RIHo\RYY#TT\V\4'dTM/WxV V R7 p RV3Rllp V U u.uFq!V 4;pfKW3NK pp V'gR#V^,wrRV/pR F!pVV 9gK \ V V,4VV&K# V P R4p\V\4'd1VP4'dVP4R ,VR&\V P R 4\4'd V R ,VR &\V4^8d'\PR \V4^, 4V#uup i) uqConsult ``transform_api_error_classification`` hooks BEFORE the built-in classifier. Run-all-then-pick-first: the first valid result in registration order wins, losing valid results warn (conflicts visible, not shadowed). Returns a sanitized dict (``reason`` -> ``FailoverReason``, hint flags -> bool, ``message`` capped at 500) or ``None``. Privacy: inputs may be unredacted. A callback returns ``None`` to decline, or a dict with a required ``"reason"`` (a :class:`agent.error_classifier.FailoverReason` member or its string name) plus optional recovery-hint overrides. Dispatch is run-all-then-pick-first: ``invoke_hook`` runs every registered callback with failures isolated, then the first result carrying a valid reason wins in registration order — mirroring :func:`get_pre_tool_call_block_message`, invalid or irrelevant returns are silently ignored so a misbehaving plugin degrades to a no-op. When more than one callback returns a valid classification, the losing results are skipped with a runtime warning (the #64714 skipped-transform rule) so conflicting provider plugins are visible in logs instead of silently shadowed. )FailoverReasonr) rUrKrUrVrWrXrYrrZr[r\c V^8dQhRRRR/#)rWrr rXrY)rZs"r[r\5get_plugin_error_classification..__annotate__BsFFFFr]cb<\V\4'dVPR4MRp\V\4'dG\ \ 4;_uu_4S!VP 4P44uuRRR4#\VS4'dV#R# +'giR#;i)rRN)rrrrrrrOr)rrRr_s& r[_reason0get_plugin_error_classification.._reasonBs{)3FD)A)AH%t fc " "*%%%flln&:&:&<=&%$FN;;vEE&%s $B B. NrRr:NiN error_contextztransform_api_error_classification: skipped %d valid classification(s) after the first result in registration order won (run-all-then-pick-first)) retryableshould_compressshould_rotate_credentialshould_fallback) agent.error_classifierr_rrrrtrrrOrrr)rUrKrUrVrWrXrYrrZr[r\r+rcrrRr winnerrrr_s$$$$$$$$$$$ @r[get_plugin_error_classificationrl%sD(6,x:#jUY>Z>Z `b! LFF-9 dL&wv=VV f LE d 1XNF&/F^ &=vc{+F3K_jj#G'3GMMOO#MMOD1y&**_-t44"("9 5zA~Z[^_d[ehi[i k M! es  EEc V^8dQhRRRR/#)rWrsrtrXrrY)rZs"r[r\r\]sd}r]c>\4pVPVR7V#)zEReturn the global manager after idempotent (or ``force``d) discovery.r)rr)rsrs& r[rr]s  "G E* Nr]c*\4P#)z5Return the plugin-registered context engine, or None.)rrprYr]r[get_plugin_context_enginerpds % ' 7 77r]c V^8dQhRRRR/#)rWrrrXzOptional[Callable]rY)rZs"r[r\r\is//S/-?/r]cn\4PPV4pV'd VR,#R#)zFReturn the handler for a plugin-registered slash command, or ``None``.rN)rr\r)rrs& r[get_plugin_command_handlerrsis- & ( 9 9 = =d CE$5 .$.r]cV^8dQhRR/#)rWrXzdict[str, dict]rY)rZs"r[r\r\os99_9r]c*\4P#)zYPlugin commands dict (name -> {handler, description, plugin}) after idempotent discovery.)rr\rYr]r[get_plugin_commandsrvos % ' 8 88r]cV^8dQhRR/#r7rY)rZs"r[r\r\tsGG$8Gr]c\4p\VP4Uu.uFqPV,NK up#uupi)zXPlugin auxiliary-task registration dicts sorted by ``key`` (after idempotent discovery).)rrr)rrs r[get_plugin_auxiliary_tasksryts;(*G+1'2D2D+E F+Ea  q ! !+E FF FsAcV^8dQhRR/#r)rY)rZs"r[r\r\zs[r]c \4pVP'g.#^RIHp/pTPFSpTP T4pT'gKTP TP.4PTP4KU /pTPP4F`pTPFMpTP T4pT'gKTPT9gK1TP TPT4KO Kb .p\T4FpTPT4p T 'dT PP MR;'g!RP#\Y(,44p TPTRTP%RR4P'4 2T 34K T# \d.u#i;i)zUPlugin toolsets as ``(key, label, description)`` tuples for the ``hermes tools`` TUI.rrru🔌 rrS)rrrrVr}rrrrrrrrrrrrrrZtitle) rrV toolset_toolsrrtoolset_pluginrrrrHdescs r[rrzsu "G  % % % + +-M// ""9- 5  $ $U]]B 7 > >uzz J0/1N""))+00I&&y1Eu-7))%--@1, F'##F+/5++2jj$))FS`ShLiBj vv~~c3'?'E'E'G&HI4PQ( M)  sF// F?>F?rl>rr')r)z>Tool '{tool_name}' denied: not in this thread's tool whitelist)rrrrrN)__conditional_annotations__rn __future__rrimportlib.metadatar5rryrarlrr{rXtypes contextlibr dataclassesrr functoolsrrpathlibrtypingr r r r r rrrrrrrrregistration_lifecyclerrrr rhermes_cli.middlewarerhermes_cli.plugin_capabilitiesrhermes_cli.relay_plugin_cutoverrrhermes_cli.plugins_manifestrrrrr r!r"r#r$hermes_cli.plugins_discoveryr%r&r'r(r)r*r+r,r-hermes_cli.plugins_loaderr.r/r0r1r2r3r4r5hermes_cli.plugins_dispatchr6r7r8r9r:r;r<r=r>r?r@rArBrCrDrErFrGrHrIhermes_cli.plugins_ledgerrJrKhermes_cli.plugins_registrarsrLrMhermes_cli.plugins_staterNrOrPrQrRrSrTrgrri getLoggerrjrrwrxrrrrrrrrrrG_rowsetattrrLrvarsr_name_methodrrIrRrrnrorYr{rprurrqrrurxr~rrrrrrrrrrrrrrrrrrrrrrrrrrrr rprrrrr.r3r8r<rGr;rTrlrrprsrvryr)rs@r[rs#   (,RRRVV:!22D^  LX >ioi   8 $!!78 X"__%_'B_D[__+_-<_  _ ) _ +: _ >+. : B:8 :2-,L8@ 8<@8?&^^--6D I"m[ " @G T A ?3? N!%NAEN.#* $333.*4>n-5LFH^`@.-/>@QV,.UY*55(*5IM5ac55/15Z^5&*5AB5Z[5 5p8 / 9 G r]