+ kHj{pRt^RIHt^RIt^RIHtHt^RIHtH t Rt RRlt RR lt !R R ]4t R#) uOpenAI native web search — declares the Responses API server-side ``web_search`` built-in. Config: ``web.search_backend: openai-native`` (or ``web.backend``). Auth: openai-codex OAuth (``hermes auth add openai-codex``); no API key of its own. Unlike every other provider here, this one never executes a search itself. Selecting it tells the Codex Responses transport to declare the provider-executed ``web_search`` tool (``{"type": "web_search"}``) in place of the client-side ``web_search`` function, so the model drives search server-side. The transport performs that swap; this class exists so ``web.search_backend`` has a real provider name to point at. Auth gating lives here rather than in the transport because the transport must stay reachable for a user who configured this backend but has not signed in yet — they get the clear "sign in" error from :meth:`search` rather than a silently different backend. ) annotationsN)AnyDict)BaseWebSearchProvider search_failzopenai-native declares OpenAI's server-side web_search tool; it cannot run as a client-side search and requires the Codex Responses transport (provider openai-codex). For client-side search use firecrawl (default) or another backend.c$V^8dQhRRRRRR/#)objrkeystrreturn)formats"G/home/ubuntu/.hermes/hermes-agent/plugins/web/openai_native/provider.py __annotate__rs!;;s;;;cT\V\4'dVPV4#R#N) isinstancedictget)r r s&&r_dgetrs!%c4003773<:d:rcV^8dQhRR/#rr boolr )rs"rrr#strc:^RIHpV!4R, pVP4'gR#\P!VP RR74p\ \ \ VR4R4R4p\\ VR 4;'gR 4P4'dR #\ \ VR 4R4p\V\4;'d5\;QJdR V4F 'gK R # R#!R V44# \dR#i;i)uXCheap probe: True when openai-codex OAuth tokens are *likely* usable. Mirrors ``tools/xai_http.has_xai_credentials`` — deliberately avoids ``resolve_codex_runtime_credentials`` (disk locks, OAuth network refresh), because this runs on every ``hermes tools`` repaint. Checks, fast-to-slow: ``providers.openai-codex.tokens.access_token`` in ``auth.json``, then any ``credential_pool.openai-codex`` entry carrying an ``access_token`` (pool-only multi-account grants never write the providers singleton). Returns False on any exception so a corrupted auth store cannot block other availability scans. )get_hermes_homez auth.jsonFz utf-8-sig)encoding providersz openai-codextokens access_tokenTcredential_poolc3"TFPp\V\4;'d4\VPRR4;'gR4P 4xKR R#5i)r r!N)rrr rstrip).0es& r (has_codex_credentials..9sH1 ZaUVJq$  P PCnb(A(G(GR$H$N$N$P PZasAAA) hermes_constantsrexistsjsonloads read_textrr r$rlistany Exception)r auth_pathstorerentriess rhas_codex_credentialsr4#s4#% 3 !! 9.. .DEuU5+6GR uV^,22 3 9 9 ; ;e%67H'4(  SS1 Za1 SS S S1 Za1 .   s5)D A8D )8D "D 6D 9D = D DDcJ]tRt^@tRtRtRtRRltR RRlltRR lt R t R #) OpenAINativeWebSearchProviderzMarker provider: the Codex Responses transport swaps the client ``web_search`` function for the server-executed built-in when this backend is active.z openai-nativez*OpenAI Native Web Search (Codex Responses)cV^8dQhRR/#rr )rs"rr*OpenAINativeWebSearchProvider.__annotate__Gs''d'rc \4#r)r4)selfs&r is_available*OpenAINativeWebSearchProvider.is_availableGs $&&rc$V^8dQhRRRRRR/#)rqueryr limitintr dict[str, Any]r )rs"rrr8Js!--C--N-rc \\4#)uNever called on a successful native turn — the transport replaces the tool before the request goes out. Reached only when the active transport cannot host the built-in, so fail loudly instead of returning an empty result set.)r_UNSUPPORTED_MSG)r:r>r?s&&&rsearch$OpenAINativeWebSearchProvider.searchJs+,,rcV^8dQhRR/#)rr rAr )rs"rrr8Ps  . rc 8^RIHpV!VPRRR4#)) setup_schemanativezSearch runs on the provider side (needs the Codex Responses transport + an openai-codex login); search only, extraction still uses another backendr!)plugins.web._commonrI DISPLAY_NAME)r:rIs& rget_setup_schema.OpenAINativeWebSearchProvider.get_setup_schemaPs'4     a    rr N)) __name__ __module__ __qualname____firstlineno____doc__NAMErLr;rDrM__static_attributes__r rrr6r6@s(N D?L'-   rr6)rT __future__rr+typingrrrKrrrCrr4r6r rrrYs: # BX;: $9 r