+ lHj2Rt^RIt^RIt^RIt^RIt^RIt^RIt^RIHt^RI H t ^RI H t ^RI HtHtHtHtHtHt^RIHt^RIHtHt^RIHt^R IHtHtHtHt^R I H!t"^R I#H$t$H%t%H&t&H't'H(t(H)t)H*t*H+t+^R I,H-t-H.t.H/t/H0t0]Pb!R 4t2]3!4t4]]n5Rt6Rt7Rt8Rt9Rt:RRlt;RgRRlltRRlt?RR lt@R!R"ltAR#R$ltBR%R&ltCRhR(R)lltDR*R+ltER,R-ltFR.R'/R/R0lltG!R1R2]H4tIR3R4ltJRhR5R6lltK]R7R/R8R9ll4tLRgR:R;lltMR<R=ltNR>R?ltOR@tPRARBltQRgRCRDlltRRER'/RFRGlltSRgRHRIlltTRJRKltURLRMltVRNROltWRPRQltXRRRSltY]T!RTRURV]V4tZ]T!RWRXRY]WRZR[7t[]T!R\R]R^]X4t\]T!R_R`Ra]YRbR[7t]RcRdlt^ReRflt_R#)izRegistry-facing sync handlers for MCP tools and utility tools (resources/prompts), plus the per-call recovery ladder: trust gating, circuit breaker, auth (401) refresh, session-expired reconnect and dead-stdio respawn retry.N)asynccontextmanager)partial)SimpleNamespace)AnyCallableDictListOptionalTuple declaration)invalidate_check_fn_cache tool_error)strip_unicode_tags)_exc_str_sanitize_error mcp_field_core) mcp_tool_loop)_MCP_HARD_RESULT_CAP_CHARS_cache_mcp_audio_block_cache_mcp_image_block_mcp_result_with_native_images _render_mcp_dropped_block_notice_render_mcp_resource_block_strip_reserved_meta_keys_truncate_mcp_text_result)_auth_error_detail_is_auth_error_is_session_expired_error_mcp_call_failed_messageztools.mcp_tooluMCP server '{s}' requires re-authentication.{detail} Run `hermes mcp login {s}` (or delete the tokens file under ~/.hermes/mcp-tokens/ and restart). Do NOT retry this tool — ask the user to re-authenticate.uMCP server '{s}' stdio subprocess had exited (this is not a timeout — the call never reached the server). A respawn was requested but no fresh session came back within {t:.0f}s. Wait a few seconds before retrying; if it keeps failing the server is not starting and needs the user.uMCP server '{s}' respawned its stdio subprocess and it exited again immediately. The server is not starting cleanly — do NOT retry this tool; ask the user to check the server's command and its stderr log.zMCP server '{s}' lost its stdio subprocess after the tool call began. The operation may have completed, so Hermes did not replay it. Do NOT retry automatically; inspect the external state first.umThe MCP transport session to '{s}' expired while this write-capable call was in flight, so the outcome is UNKNOWN — the operation may or may not have taken effect server-side. It was NOT automatically retried to avoid a duplicate side effect. The connection has {state}. Verify whether the operation took effect (e.g. with a read-only tool) before re-invoking it.c<V^8dQhR\R\R\/#) server_name tool_namereturnstrbool)formats"{+KR P T TU^ _cg ggr,c tV^8dQhR\R\R\\,R\\,/#)r"r#r$bookedr%r'r list)r)s"r*r+r+<s9RR3R3RRZbcfZgRr,c |^RIHp^RIHpV!V4p\P P V\P4pV\P8H;'d\W4'*pRpV\P9d^RI H p VPWPW!44pVfV'd\WRV4#R#V'g5VP4^,'dVeVP!V4R#VP#4;_uu_4\WWVR7uuRRR4# +'giR#;i)aZApproval gate for write-capable tools on ``trust: untrusted`` servers, plus the declared spend limit on any server. None to proceed, else a ``tool_error``. Fail-closed: approval-system errors block. An admitted costed call is charged to the chat's tally and appended to *booked* so the caller can refund it when the call never reaches the server.) _server_key)mcp_tool_costsN)get_current_session_key)gated)r0r9toolsr:r_server_trust_levelsr2 _TRUST_FULL_TRUST_UNTRUSTEDr3_server_cost_policiestools.approval_contextr;pending_charge _ask_for_callreserve_within_limitappendasking) r#r$r5r9_costskeytrustr<charger;s &&& r*_trust_gate_checkrL<s 1. k "C  & & * *30A0A BE U++ + ^ ^4F{4^0^E F e)))B&&sD[D]^ ~FK}[T6BUQUU V002155   MM& ! [V5Q s D** D; r<Tc V^8dQhR\R\R\\,R\R\\,/#)r"r#r$r5r<r%)r'r r7r()r)s"r*r+r+Us@2r2rs2rs2rHTN2r2r)1#2rr,c RRreVe^V'd#VP4pVPV4pM3VP4wruV'dVeVPV4R#RpVeVP V4M.pV'd?RV RV R2p Rp R P V .V'dR .M.OVOV N4p R V R V R 2p RV R2p M*R P RV RV R2.VO4p R V RV R2p RV R2p ^RIHpV!WRV 2V R7pTR8Xd,Te&TP4TeTPT4R#\PRTR8XdRMR Y'dR!MR"T4T'dTe\TPT44#\R#T RT R$24# \dap\PRYTRR7T'd$Te \TPT44uRp?#\RT RT R24uRp?#Rp?ii;i)%zYAsk the user about one gated and/or costed call; book the charge only on an explicit yes.FNTz MCP tool 'z' on UNTRUSTED server 'z' wants to run.z[This tool is write-capable (no readOnlyHint=true annotation) and may modify external state. z+This call goes past the chat's spend limit.zServer 'z4' is configured 'trust: untrusted'. Approve to run 'z' once, or deny to block it. MCP server 'z ' is askingz ' on server 'z,' would take this chat past its spend limit.z3' declares a spend limit per chat. Approve to run 'zN' once (every further paid call in this chat asks again), or deny to block it.z ' spend limit)request_elicitation_consentz mcp-trust/)surfacetitlez3MCP trust gate: approval check failed for %s.%s: %s)exc_infoz' on untrusted server 'zA' was blocked: the approval system was unavailable (fail-closed).acceptz.MCP trust gate: user %s '%s' on %s server '%s'cancel cancelleddenied untrustedz spend-limitedz9The user did not approve running write-capable MCP tool 'zI'. The command was NOT run. Do not retry without explicit user direction.)spent over_limitrErFlinesjointools.approval_promptrR Exceptionloggererrorrrefusalbookinfo)r#r$rKr5r<r[overreservedextraheadtailmessage descriptionrTrRanswerexcs&&&&$ r*rDrDUssu4  LLNE$$U+D$99;OH%MM&)D#)#5FLL 2E I;&=k]/Zl((DsW[%R$Sacsglsnrst!+/**34PR {m;7((j = N+,5.356!+.abkalmfg {m=9DE,WZXcWdKemrs   KKM! f% KK@QW[cQc+iq%;_kS "&../00 QR[Q\]%&oq rr! D JKdgrv w F&fnnU34 4Jyk1H VBCD D Ds*-F H!>G<H%G<6H<HcFV^8dQhR\R\\,/#r"r#r%r'r )r)s"r*r+r+s"ppp pr,c ^RIHpV!V4p\PP V^4p\ P !4\PP VR4, pV\P8gV\P8dR#\^\\PV, 44p\PP V4'd\RV RV RV R24#\RV RV R V R 24#) zOpen-breaker error, or None when calls may proceed. After the cooldown the breaker is half-open: the next call probes; success resets, failure re-bumps and re-arms the cooldown.r.rONrQz' rejected the last zO calls (it is reachable; see the error text those calls returned). Paused for ~u\s. Do NOT repeat the same call — fix the arguments/URL/target or use a different approach.z' is unreachable after z0 consecutive failures. Auto-retry available in ~ues. Do NOT retry this tool yet — use alternative approaches or ask the user to check the MCP server.)r0r/r_server_error_countsr2time monotonic_server_breaker_opened_at_CIRCUIT_BREAKER_THRESHOLD_CIRCUIT_BREAKER_COOLDOWN_SECmaxint_server_errors_all_applicationr)r#r/rIfailuresageretry_ins& r*_check_circuit_breakerrs 9 k *C))--c15H .. U<<@@cJ JC%222cU=`=`6`1c%==CDEH ++//44L 5I(TKKS*UVWX X  [M1H S22: ask the server task to rebuild (probing a dead transport would re-arm the breaker forever).mcp_tool_discoveryrQ' is not connected)unavailable_detailsNnameversionpath)serverstateapp user_actionretryg@timeoutut' transport is down; reconnect requested. Do NOT retry this tool immediately — give it a few seconds to come back.)r=rrtools.mcp_livenessrrr availabilityrrrr_get_connected_server_for_callminrsession_loop_wait_for_server_session_readyr_bump_server_error_signal_reconnect) r#r _discovery not_connectedrdetailsdeclcurrentsentencerwaits && r*_acquire_call_serverrs67k]:LMNM6!+.G")x" -- 7//77,,11  ++--   6 6{ CF sE,--#. /D 6>>>U%I%I&%_%_t| [) %))&11Z,{m<[!\]] ]  r,c$V^8dQhR\/#r"r%r()r)s"r*r+r+sr,czR\P!V49# \P\3dR#i;i)zLTrue only for a JSON payload carrying an ``error`` key (non-JSON = success).rbF)jsonloadsJSONDecodeError TypeError)results&r*_result_is_errorrs8$**V,,,  ) ,s ::c0V^8dQhR\R\/#rp)r'r)r)s"r*r+r+sccr,c\V4'd\P!VRR7V#\P!V4V#)zBreaker bookkeeping: an error payload from the tool itself still counts as a strike (#10447), flagged as an application error so the open-breaker message stays truthful.T) application)rrr_reset_server_error)r#rs&&r*_record_call_outcomers;   $? M !!+. Mr,c<V^8dQhR\R\R\/#)r"r#rkr%r')r)s"r*r+r+s!(((s((r,c F\P!V4\V3/VB#)z:Breaker strike + the ``tool_error`` payload for *message*.)rrr)r#rkrhs&&,r*_strikers  [) g ' ''r,c$V^8dQhR\/#rr)r)s"r*r+r+sHH4Hr,cr\PRJ;'d\PP4#N)r _mcp_loop is_runningr,r*_mcp_loop_runningrs& ??$ & G G5??+E+E+GGr,Fc0V^8dQhR\R\/#)r"r# require_loopr&)r)s"r*r+r+scr,cJ^RIHp\P;_uu_4\PP V!V44pRRR4XRJ;'d.\ VR4;'d\4;'gV'*pV'dV#R# +'giLU;i)zThe registered server object when it can be signalled to reconnect, else None. With *require_loop*, also None unless the MCP loop is running (nothing to wait on).r.N_reconnect_event)r0r/r_lock_serversr2hasattrr)r#rr/srvoks&& r*_lookup_reconnectable_serverrsu9 nn  !4[!AB  D k kWS*<= k kCTCVCjCj^jZjB3$ s &B B" c<V^8dQhR\R\R\/#)r"r#op_descriptionwhatr)r)s"r*r+r+s! 5 5S 5c 5 5r,cV!4p\Y4# \d#p\PRYY54Rp?R#Rp?ii;i)zRe-run ``retry_call`` after a recovery step. Returns the result when the RPC completed (an application error is still the tool's real answer, and still a breaker strike per #10447); None when the retry raised (caller falls through).z#MCP %s/%s retry after %s failed: %sN)r`rawarningr)r# retry_callrrr retry_excs&&&& r* _retry_oncersB 44 ._handle_auth_error_and_retry..s;=3K3KKY]3^r,rz+MCP OAuth '%s': recovery attempt failed: %sFz after OAuth recoveryrrz auth recovery)sdetailT) needs_reauthr)rtools.mcp_oauth_managerrr_run_on_mcp_loopr`rarr_signal_reconnect_and_waitrrrr_NEEDS_REAUTH_MSGr)r) r#rnrr recoveredrec_excrrrs f&&& @r*_handle_auth_error_and_retryrs #  3**+^hjk *;7 ?u??S3CCX1Yce g g  % %k 2[*oV  M ; 1 8 8;OabeOf 8 g $[ :: DkSZ[ sC C7C22C7call_may_have_side_effectscHV^8dQhR\R\R\R\/#)r"r#rnrr)r'rr()r)s"r*r+r+ s0+U+U3+U]+Uhk+UEI+Ur,ch\V4'gR#\VRR7pV'dVRJ;'d\P!WV R2^R7pV'd\P !V4M\P !V4\PRYV'dRMR4\\PY'dR MR R 7RVR 7#VfR#\PR WV4\P!WV^R7'g\PRV4R#\WVR4#)u"Transport reconnect + one retry on session expiry; None to fall through. Skips ``handle_401``: the token is valid, only the server-side session is stale. Unlike :func:`_handle_auth_error_and_retry`, this does **not** call the OAuth manager's ``handle_401`` — the access token is still valid, only the server-side session state is stale. Setting ``_reconnect_event`` causes the server task's lifecycle loop to tear down the current ``streamablehttp_client`` + ``ClientSession`` and rebuild them, reusing the existing OAuth provider instance. See #13383. At-most-once for writes: a session-expired shape can be synthesized by a proxy AFTER the upstream executed the request, and the transport errors this classifier also matches (``ClosedResourceError``, broken pipe) routinely fire mid-response. With ``call_may_have_side_effects`` the transport is still healed but the call is never re-run; the model gets an ``outcome_uncertain`` error instead (same contract as the mid-call stdio death path). Callers pass True unless the tool is positively read-only. NT)rz (write, no auto-retry)rzMCP server '%s': %s failed with a session-expired/transport error after the request may have been dispatched; NOT auto-retrying a write-capable tool (reconnect %s). succeededfailedzbeen re-establishedznot recovered yet)rr)outcome_uncertainrzmMCP server '%s': %s failed with session-expired error (%s); signalling transport reconnect and retrying once.zsMCP server '%s': reconnect did not ready within 15s after session-expired error; falling through to error response.zsession reconnect)rrrrrrrrarr_SESSION_OUTCOME_UNCERTAIN_MSGr)rer)r#rnrrrr reconnecteds&&&&$ r*!_handle_session_expired_and_retryr s&" %S ) ) &{ FC!oee%*J*J /??V-Wac+e   % %k 2  $ $[ 1f";KT\ ^8??+!6K^@`";8 8 { KK%&13H  + +K^eg h h<=H J {@S TTr,cBaa]tRtRtoRtV3RlV3RlltRtVtV;t#)_StdioChildExitedi:zRStdio subprocess gone when (or while) a call ran. Deliberately NOT a TimeoutError.c&<V^8dQhRS[RS[/#)r"rk in_flightr&)r) __classdict__s"r*r+_StdioChildExited.__annotate__=s###4#r,c2<\SV`V4W nR#r)super__init__r)selfrkr __class__s&&$r*r_StdioChildExited.__init__=s !"r,r) __name__ __module__ __qualname____firstlineno____doc__r__static_attributes____classdictcell__ __classcell__)rrs@@r*rr:s\###r,rc<V^8dQhR\R\R\/#r)r'r`)r)s"r*r+r+Bs'4C4Cc4C 4Cgj4Cr,c\V\4'gR#Rp\V4pVe|VP'dRMRp\P RWW4\ 4'd)\P!WV\PR7pM\P!V4VP'd#\V\PVR7RR 7#V'g0\V\PV\PR 74#\!W!44# \d{p\P#R YT4TP'd(\T\PTR7RR 7uRp?#\T\$PTR74uRp?#Rp?i\&d\p\P#R YT4\T\)R T R\+T4P, R\/T4 244uRp?#Rp?ii;i)aHRespawn a dead stdio child; retry once only when it was dead before dispatch. A mid-call exit is ambiguous: the server may have applied a side effect before its response pipe disappeared. Reconnect for future calls but never replay that operation. None means this is not our error. This function never spawns itself: it sets ``_reconnect_event`` and waits, so spawn frequency stays governed by ``run()``'s rapid-drop budget. A pre-dispatch retry whose child dies again reports and stops. Why retrying here cannot hot-cycle respawns: this function never spawns anything. It sets ``_reconnect_event`` (one signal, same as before) and waits for the server task to publish a fresh session. Spawn frequency stays governed entirely by ``run()``'s rapid-drop budget, which parks a transport that keeps dropping without proving healthy (#62212). NFzreconnecting without replayzrespawning and retrying oncez=MCP server '%s': %s found the stdio subprocess dead (%s); %s.r)rT)r)rtzaMCP server '%s': %s stdio subprocess exited again right after respawn (%s); not retrying further.z.MCP %s/%s retry after stdio respawn failed: %sz;MCP call failed after respawning the stdio subprocess for 'z': z: ) isinstancerrrrarerrrr_STDIO_RESPAWN_WAIT_SECrr_STDIO_OUTCOME_UNCERTAIN_MSGr)_STDIO_NO_RESPAWN_MSGrr_STDIO_DIED_AGAIN_MSGr`rtyperr)r#rnrrrractionrs&&&& r*$_handle_stdio_child_exited_and_retryr Bs c, - -K &{ 3C 25---.Ec S >   ::IfIfhK  # #C ( }}}  ( / /+ / >"  {$9$@$@;RWRoRo$@$pqqC#K>>  Q"#.  K    ,33k3B"&  {$9$@$@;$@$OPP CGfop{OI+VYI''(8I+>*? A%BC CCsDD!! H ,A F!6H <F!H ! H .H /AH?H H cV^8dQhR\R\R\R\R\\.R3,R\ R\/#) r"r#ropron_final_failureNrecord_outcomer%)r'rrrrr()r)s"r*r+r+ysL993999%9 (-$)> ?9QU9be9r,czaa\\VRR44'dVP4VV3RlpV!4p V'd \W 4#T # \d\ R4u#\ dFp TFp T !Y Y4p T fKT uuRp ? # T!T 4\ \T 44uRp ? #Rp ? ii;i)aMark the call started on *server* (doubles may lack ``mark_tool_call``), run coroutine function *call* on the MCP loop and, on failure, walk ``recoverers`` (``(server_name, exc, retry_call, op) -> Optional[str]``, None = not its kind; order matters). Unrecovered exceptions go through ``on_final_failure`` and become the generic call-failed error. ``record_outcome`` applies breaker bookkeeping to the FIRST attempt only.mark_tool_callNc4<\P!SSR7#)r)rr)callrsr* call_once_dispatch..call_onces%%dLAAr,z-MCP call interrupted: user sent a new message)callablegetattrrrInterruptedErrorrr`r ) r#rrrr recoverersrrrrrnrecoverrs &&&ff&&& r* _dispatchrys  0$788B 9 }} OO nnXTJJJ= i" K vz48H!!hjE&9>WX[>\>\'0 =\]"   }} OO nnXTJJJsB(J+JJ G 7J*H=/G0!H=!H=4G9G:G=AJGJH=GJ H:(A H55H::H==AJJJJc$V^8dQhR\/#rr)r)s"r*r+r+s//#/r,clRVP;'g.4pRPRV44#)zzConcatenated text of an ``isError`` result's blocks (EmbeddedResource error payloads carry text under ``.resource.text``).c3|"TF2p\VRR4;'g\\VRR4RR4xK4 R#5i)textNresource)r).0bs& r* %_error_result_text..s: }g{abWQ % \ \J1MvW[)\ \g{s<!<c3J"TFq'gK \V4xK R#5irr)rNrs& r*rPrQs.5aA63q665s ##)contentr^)rtextss& r*_error_result_textrVs7 ~gmgugug{g{y{g{ }E 77.5. ..r,crV^8dQhR\R\\\\\,3,/#rp)r'tuplerzr7)r)s"r*r+r+s.'R'R'Rc3S >Q8R'Rr,cR.p^p.pVP;'g.EFkp\VRR4'dPVP\VP44VPP 4'd V^, pKf\ V4pVPR4'dVPV\R4R4T;'g\V4;'g \WQ4pV'dVPV4V^, pK\VRR4;'g\V4PpVR9d\PRW4EK;\PRW4VP\!WX44EKn \#RP%V44W43#) u%Text passes through; image/audio blocks are cached (MEDIA: tags); resource blocks are materialized rather than silently dropped; unsupported blocks become an inline drop notice (kimi-code#3227). Returns ``(text, usable_parts, image_paths)``: ``usable_parts`` counts REAL rendered blocks (whitespace-only text and drop notices excluded) for the structuredContent arbitration; ``image_paths`` are the files THIS call's image blocks were cached to — never parsed back out of the text, where a server-written ``MEDIA:`` line could name any local file.rLNzMEDIA:r z,MCP %s: content block type %r rendered emptyz2MCP %s: dropping unsupported content block type %r >rLaudioimagerM)rTrrFrrLstripr startswithlenrrr rradebugrrrr^) rr#parts usable_parts image_pathsblockr\rendered block_types && r*_render_content_blocksrgs\ELK..&&B& 5&$ ' ' LL+EJJ7 8zz!!! &u-   H % %   uS]^4 5kk259kk=WX]=k  LL " A L UFD1IIT%[5I5I ? ? LLG a NNOQ\ i LL9%L M+'. %TYYu%5 6 QQr,c\VRR4pVe\P!VR\R7MRp\ T4\8d \T4#T# \\ 3dTu#i;i)z``structuredContent`` (or None); over the hard cap it degrades to the head+tail truncated JSON string (multi-MB JSON flood guard).structured_contentstructuredContentF) ensure_asciidefaultrR) rrdumpsr'r ValueErrorr_rr)r structuredas_jsons& r*_capped_structured_contentrqso6#79LMJMWMc$**ZeSIik25W@Z1Z $W -j`jj z "s#AA)(A)c$V^8dQhR\/#rr)r)s"r*r+r+.s$r,cVP;'g.F9p\VRR4pV'gK\P!V4V8XdR#K; R# \\ 3dKSi;i)uATrue when some text block is ``structuredContent`` serialized as JSON — the spec's backwards-compat dual-emit ("a tool that returns structured content SHOULD also return the serialized JSON in a TextContent block"). Compared as parsed JSON so whitespace, indent, key order and ``ensure_ascii`` escaping do not matter; checked per block because the spec puts the copy in *a* block and a server may add a status line next to it. Deterministic equality, not a richness heuristic: a prose summary or a reorganised rendering fails it and keeps its ``structuredContent`` (#115430).rLNTF)rTrrrrrn)rrordrLs&& r*_content_dual_emits_structuredrt.sm..&&B&ufd+  zz$:-. ' :&   sAA+*A+chV^8dQhR\R\\\,,R\/#)r"r#rcr%r6)r)s"r*r+r+Bs1&G&G#&GHTRUYDW&Gcf&Gr,c \VRRR4'd1\\\\ V4;'gR444#\ W4wr4pVeVP V4\V4p\\VRR44pVe1V^8d*\V\4'g\W4'dRpVfVf\P!RV/RR7#V'dRV/M/pVeYhV'dR MR&VeWxR &VPRV4\P!VRR7# \\ 3d\P!RT/RR7u#i;i) uPure: ``CallToolResult`` -> handler JSON (``image_paths``, when given, receives the files this call's image blocks were cached to). ``content`` and ``structuredContent`` are both forwarded, except that a ``structuredContent`` whose JSON also sits verbatim in a text block (the spec's backwards-compat dual-emit; compared as parsed JSON) is dropped, because that copy would reach the model twice (kimi-code#3234). Any other usable text — a status line, a prose summary, a reorganised rendering — keeps ``structuredContent`` alongside it (#115430): the earlier "content wins whenever it rendered anything" rule irreversibly lost servers whose data lived only in ``structuredContent``, while the residual duplicate for a faithful reorganisation costs only tokens, so data-preservation wins. No richness or size heuristic is used. ``structuredContent`` fills ``result`` when the blocks rendered effectively empty (structuredContent-only servers); ``_meta`` minus reserved keys is always surfaced.is_errorisErrorFzMCP tool returned an errorNmetarrkrj_meta)rrrrrVrgextendrqrrr'rtrrm setdefaultrrn) rr#rc text_resultrb cached_imagesrorypayloads &&& r*_render_call_tool_resultrBs\Y66/*CDVW]D^D~D~b~*AB B/Ef/Z,K}=)+F3J $Yvvv%F GD,"2 :s8S8SWuv|XJXJ dlzz8[1FF9Dx5"GDN{#A  x-Gzz'66 z "Gzz8[1FFGsD22+E E  native_imagescHV^8dQhR\R\R\R\/#)r"r#r$rr)r'rr()r)s"r*r+r+ks)77C7C7u7`d7r,c4aaaaaRS 2oRVVVVV3RllpV#)aSync handler (``handler(args_dict, **kwargs)``) calling an MCP tool via the background loop. Always a JSON string, except with ``native_images`` (the registry handler the agent loop dispatches): a result carrying images then becomes the ``_multimodal`` envelope when the active route takes images in tool results. Direct callers (plugins' ``ctx.call_mcp``) keep the string contract and the ``MEDIA:`` paths.z tools/call c0V^8dQhR\R\/#r"r/r%)r1r)r)s"r*r+(_make_tool_handler..__annotate__rs/{/{t/{#/{r,c <aa a a a a.p\SSV4pVeV#R\S4uopVf\SS4wopSfVFpVP4K V#\ SS4o .o ^RIHpV!4o V 3Rlo V VV VV V VVV3 RlpVV3Rlp\\S '*R7p\SSSVS\\V3VRR7p S'd\V 4'g \V S 4#T #)N)current_tool_progressc.<"Se S!WV4R#R#5irr)progresstotalrkreports&&&r* _on_progress:_make_tool_handler.._handler.._on_progresss!x0"sc X< "SP;_uu_4GRjxL \SSSSR7;_uu_4GRjxL \P!4Sn\ SSS SSeSMR4GRjxL pRSnRRR4GRjxL RRR4GRjxL \ SRR4eSP4SP4\XSS4#LLLk RSni;iLb +GRjxL 'giLy;iLp +GRjxL 'giL;i5i)N)r_mark_session_proven) _rpc_lockr- contextvars copy_context_pending_call_contextrHrrclearr) rrr/rcr read_onlyrrr#r$s r*_call3_make_tool_handler.._handler.._calls'''')._handler.._on_failures%  $ $[ 1 LL9; SV Wr,)rT)r)rLrrrefundr3agent.tool_progress_relayrrrrr rrr)r/kwargsr5rbrKrrrsession_expiredrLrrcrrrrrr#r$rsf, @@@@@r*_handler$_make_tool_handler.._handlerrs!+y&A  L4[A  =0lKMFE >  !L'{I> !# C&( 1 N N X""Cdm`mn UL 13OQ` a . ERZjkoZpZp-dK@zvzzr,r)r#r$rrrrsfffd @r*_make_tool_handlerrks% yk "B/{/{` Or,cRV^8dQhR\R\R\\,/#)r"r log_labelrequiredrq)r)s"r*r+r+s&cc(SV-r,c*aaaaaRVVVVV3RllpV#)z``(server_name, tool_timeout) -> sync handler`` for one utility tool: ``rpc(session, args, server_name)`` awaited under ``_rpc_lock``, ``render(result, server_name)`` -> JSON-able payload, ``required`` validated before any transport work.c0V^8dQhR\R\/#rr)r)s"r*r++_make_utility_handler..__annotate__scr,c*<aaRVVVVVVV3RllpV#)c0V^8dQhR\R\/#r)r1r')r)s"r*r+=_make_utility_handler.._factory..__annotate__s _ _4 _c _r,c 8<aa^RIHpVPS 4oS'dSP'g\ RS R24#S'd'SP S4'g\ RS R24#VVV VV 3Rlp\ S SSVS \\3VV 3Rl4#)rrQrzMissing required parameter ''c <"SP;_uu_4GRjxL S!SPSS4GRjxL pRRR4GRjxL \P!S!XS4RR7#LOL5L' +GRjxL 'giL>;i5i)NFrz)rrrrm)rr/renderrpcrr#s r*rH_make_utility_handler.._factory.._handler.._calls`!++++#&v~~t[#IIF,+zz&"=ERR,I,+++sYBA,BA2A.A2 BA0 $B.A20B2B 8A;9 B B Bc4<\PRSSV4#)zMCP %s/%s failed: %s)rarb)rnrr#s&r*rK_make_utility_handler.._factory.._handler..sFLL)?iY\]r,) r=rrrrr2rrr) r/rrrrrrrrrr#rs f, @r*r9_make_utility_handler.._factory.._handlers >>>{KF!L =O"PQQ 2 2!$@ !"LMM S SVR -/PQ]_ _r,r)r#rrrrrrrsff r*_factory'_make_utility_handler.._factorys _ _ r,r)rrrrrrsfffff r*_make_utility_handlerrs$ Or,c$V^8dQhR\/#r)r1)r)s"r*r+r+s$r,c/pVFFvr4p\W\4pV\JgK!V'gV'dV^,'dKBWbV&KH V#)z``{out_key: value}`` for each ``(out_key, attr[, truthy])`` present on *obj* (presence check so SDK models and stubs behave alike; ``truthy`` also skips falsy). Key order = spec order.)r_MISSING)objspecsentryout_keyattrtruthyvalues&* r*_pickrsF E"'8,  eFvayy"'N#( Lr,c0V^8dQhR\R\/#rpr0)r)s"r*r+r+s $ $c $d $r,c.pVFWp\VRRR4pRV9d\VR,4VR&\VRR4pV'dWTR&VPV4KY RV/#)uri mime_typemimeType resources)rrrrrlrlT)rr'rrF) all_resourcesr#rrrmimes&& r*_render_resource_listrspI a)9;_` E>uU|,E%LK4  $*   ##r,c0V^8dQhR\R\/#rpr0)r)s"r*r+r+s((s(t(r,cr.p\VR.4Fp\VRR4e'VP\VP44K8\VRR4fKI\ \ RVR7V4pTPT;'gR\ VP4 R24K RR PV4/#) contentsrLNblobrM)r rMz[binary data, z bytes]rrZ) rrFrrLrrr_rr^)rr#rardres&& r*_render_read_resourcersER0 5&$ ' 3 LL+EJJ7 8 UFD ) 51/z\a2bdopH LLNN~c%**o5Fg%N O 1 dii& ''r,c0V^8dQhR\R\/#rpr0)r)s"r*r+r+s  # $ r,c .pVFlp\VRR4p\VRR4'd9VPUu.uFpRVP/\VRR4CNK upVR&VP V4Kn RV/#uupi)rr5Npromptsrr)rr)rrr5rrF) all_promptsr#rpras&& r*_render_prompt_listrsG a)+OP 1k4 ( (+,;;"8+6a$*166"~U1>bd|5}"~+6"8E+ u  w "8s$A9c0V^8dQhR\R\/#rpr0)r)s"r*r+r+sYYCYDYr,cR.p\VR.4Fp\VR4p\VR4'dT\\VPR4'dVPP M\ VP44VR&VPV4K RV/\VR4C#)messagesrTrL)rolerr)rrrrrTrLr'rF)rr#rmsgrs&& r*_render_get_promptrsHvz2.c+, 3 " "1gckk[aFbFb#++2B2BhklolwlwhxyE)  /  XE&2V$W XXr,zresources/listlist_resourcescF\P!VPRV4#)r)r_paginate_full_listrrr/sns&&&r*rrse778N8NP[]_`r,zresources/read read_resourcec2VPVR,4#)r)rrs&&&r*rrsg33DK@r,r)rz prompts/list list_promptscF\P!VPRV4#)r)rrrrs&&&r*rrse778L8LiY[\r,z prompts/get get_promptcVVPVR,VPR/4R7#)rr5)r5)rr2rs&&&r*rrs%g00fR]_aIb0cr,rc$V^8dQhR\/#)r"r#r)r)s"r*r+r+sr,c@aaa^RIHoRVV3RlloRVV3RllpV#)aConnection-alive check; lazy (schema-cache registered) servers count as available. When the server's owner registered an application declaration (`requires.app`), the application must also be present on this host, or the tools are not offered even while a stale connection lingers. With no declaration registered the check is the connection check alone. Returns a plain bool: the registry caches ``bool(fn())``. r.c$V^8dQhR\/#rr)r)s"r*r+$_make_check_fn..__annotate__s:::r,cZ<\P;_uu_4S!S4p\PPV4pVRJ;'d/VPRJ;'g,VP 4;'gV\P 9uuRRR4# +'giR#;ir)rrrr2r_is_recycled_stdio_lazy_server_configs)rIrr/r#s r* _connected"_make_check_fn.._connectedsz [[[%k2C^^'',F4'ggV^^4-G9-f6KdKdKf99e888 [[[sAB#B;B B* c$V^8dQhR\/#rr)r)s"r*r+rs44D4r,c8<S!4'gR#\S4#F)_declared_app_offerable)rr#sr*_check_make_check_fn.._checks||&{33r,)r0r/)r#rrr/sf @@r*_make_check_fnrs#9::44 Mr,c0V^8dQhR\R\/#rpr&)r)s"r*r+r+s . . . .r,c^RIHp^RIHpVP!V4pVfR#\ V!V4P 4#)zTrue unless the registered declaration is unavailable on this host. Called only for a connected server, so a reachable loopback port outranks the interactive-session rule.r )rT)hermes_platformr %hermes_platform.resolver.availabilityrlookupr( offerable)r#r rrs& r*rrs8,B   k *D |  T",, --r,rr)`rloggingr#rr;rrt contextlibr functoolsrtypesrtypingrrrrr r rr tools.registryr rtools.ansi_striprtools.mcp_tool_commonrrrrr=rrtools.mcp_tool_contentrrrrrrrrtools.mcp_tool_errorsrrrr getLoggerraobjectr on_changerr r rrr3rLrDrrrrrrrrrrr'rr rr-rHrVrgrqrtrrrrrrrr_make_list_resources_handler_make_read_resource_handler_make_list_prompts_handler_make_get_prompt_handlerrrrr,r*rsv *!=='@/MM(]]   + , 81 fC i^4hR22r $2rjp*B( H 5:4+ULQ+U\# #4Cn94#\`##83Kp/'RTk*(&GR7gl7t2 $( Y 5&`bw y4o@BWbgi3N\^qs1<c) 0 .r,