+ lHjRRt^RIt^RIt^RIt^RIt^RIHt^RIHt^RI H t H t H t H t HtHtHt^RIHtHtHtHtHt^RIHt^RIHt^RIHt^R IHt^R I H!t!H"t"H#t#H$t$H%t%^R I&H't'H(t(H)t)H*t*^R I+H,t,H-t-H.t.H/t/] 'd^R I0H1t1]Pd!R4t3]4;QJd.R]5!^44FNK 5M!R]5!^444t6Rt7R]$R]%R]#R]"R]PpR]PrR]Pt/t;RRltR[RRllt?R R!lt@R"R#ltAR$R%ltBR&R'ltCR(R)ltDR*R+ltER,R-ltFR.R/ltGR0R1ltHR2R3ltIR4R5ltJR6R7ltK]!R8R944tLR:R;ltMR<R=ltNR>R?ltOR@RRAR/RBRClltPRDREltQRFRGltRRHRIltSRJRKltTRLRMltURNROltVRPRQRRR/RSRTlltWRURVltXRWRXltYRYRZltZR#)\avRegistering a connected (or schema-cached) MCP server's tools into the tool registry: include/exclude filtering, trust-tier metadata capture, utility-tool selection, name-collision resolution and the schema-cache write-through. Both entry points (``_register_server_tools`` live, ``_register_from_cache_sync`` lazy) build ``_Candidate`` records for ``_register_candidates``.N) dataclass)SimpleNamespace) TYPE_CHECKINGAnyCallableDictIterableListOptional)_parse_boolish_core_resolve_tool_timeout mcp_fieldmcp_server_enabled)mcp_tool_config)mcp_tool_events)mcp_tool_handlers)mcp_tool_schema)_make_check_fn_make_get_prompt_handler_make_list_prompts_handler_make_list_resources_handler_make_read_resource_handler)_UTILITY_CAPABILITY_ATTRS_build_utility_schemas_normalize_name_filtermatches_name_filter) _key_name _key_scope_resolve_server_key _server_key) MCPServerTaskztools.mcp_toolc#L"TFp\P!4xK R#5iN) threadingRLock).0_s& @/home/ubuntu/.hermes/hermes-agent/tools/mcp_tool_registration.py r)sB 1Y__.. s"$zgenerated utility list_resources read_resource list_prompts get_promptlist_event_typessubscribe_eventunsubscribe_eventc0V^8dQhR\R\/#)valuereturn)rstr)formats"r( __annotate__r7(s " "3 "3 "cVf\P#\V4P4P 4pV\P\P 39dV#\ PRV4\P #)ziConfig ``trust`` -> tier. None -> ``full`` (compat default); unrecognized -> ``untrusted`` (fail closed).ubMCP trust: unrecognized trust value %r — treating as 'untrusted' (valid values: full, untrusted))r _TRUST_FULLr5striplower_TRUST_UNTRUSTEDloggerwarning)r3texts& r(_normalize_server_trustrA(sj }   u:    # # %D !!5#9#9::  NNw  ! !!r8c0V^8dQhR\R\/#)r2mcp_toolr4)rbool)r6s"r(r7r74s    r8c\VRR4p\V\4'd&VPRVPR44pVRJ#\ VRR4pVRJ#)aTrue only when annotations (SDK object or cache dict) carry an exact ``True`` read-only hint; unknown = write-capable. mcp 2.x exposes the attribute as ``read_only_hint`` (camelCase is only a serialization alias), so reading camelCase alone gated every read on an untrusted server. annotationsN readOnlyHintread_only_hintT)getattr isinstancedictgetr)rCrFhints& r(_annotation_read_only_hintrN4s`(M48K+t$$~{?O/PQ 4<&6G 4<r8c4V^8dQhR\R\RR/#r2 server_nameconfigr4Nr5rK)r6s"r(r7r7@s! 2 2S 2$ 2 2r8c^RIHpV!W4pVf#\PP VR4R#V\PV&R#)zDeclared ``tool_costs``/``spend_limit`` for *key*. Load-time validation already dropped malformed entries (``_filter_suspicious_mcp_servers``); a direct caller's bad table still fails loudly. Caller holds ``_core._lock``.)config_cost_policyN)tools.mcp_tool_costsrUr _server_cost_policiespop)rQrRkeyrUpolicys&&& r(_record_cost_policyr[@s<8  4F ~ ##''T2+1##C(r8cVV^8dQhR\R\R\\,RR/#)r2rQrRtoolsr4N)r5rKlistr)r6s"r(r7r7Ls3 i iS i$ itCy i_c ir8c \P;_uu_4Vf \V4p\T;'g/P R44\P V&\ WV4\PPV/4pTPVUu/uF.p\VRR4'gKVP\V4bK0 up4RRR4R#uupi +'giR#;i)uCapture per-server trust and per-tool readOnlyHint at discovery — the security boundary: the call-time gate classifies from data we control, never re-read server-supplied state. *key* is the connection (default: the registering profile's own); the ``trust`` policy is recorded under it for the profile that owns it — an adopting profile records its own policy in ``_record_scope_trust``.Ntrustname) r _lockr rArL_server_trust_levelsr[_tool_read_only_hints setdefaultupdaterIrarN)rQrRr]rYhintsts&&&& r(_record_tool_trust_metadatariLs  ;k*C*A6<r?)rQrYrkrmunknowns&&& r(_warn_unknown_cost_keysroZsG7#E$?$?$C$CC$H*UUwU,-8; PVr8c@V^8dQhR\R\R\RR/#)r2rQrRscoper4NrS)r6s"r(r7r7ds(66S6$6s6t6r8c \P;_uu_4\WRR7p\T;'g/P R44\P V&\ WV4RRR4R# +'giR#;i)z``trust`` (and the cost policy) is the CONSUMING profile's policy, never the connection's: an ``untrusted`` profile that adopts a ``full`` profile's live connection must still be asked before every write-capable call.Fcurrentr`N)r rbr rArLrcr[)rQrRrqrYs&&& r(_record_scope_trustrudsV +e<*A6<>c>>>r8c\P;_uu_4V\PV&RRR4R# +'giR#;i)z>Remember the exact raw MCP server that registered *tool_name*.N)r rb_mcp_tool_server_names)rwrQs&&r(_track_mcp_tool_serverr{ns' 2=$$Y/ s 7 A c(V^8dQhR\RR/#r2rwr4Nrx)r6s"r(r7r7ts::s:t:r8c\P;_uu_4\PPVR4RRR4R# +'giR#;i)z5Forget MCP server provenance for a deregistered tool.N)r rbrzrX)rws&r(_forget_mcp_tool_serverrts-  $$((D9 s !A A c$V^8dQhR\/#r2r4)object)r6s"r(r7r7zs$$F$r8c\P;_uu_4\PP4FwrW JgK VuuuRRR4# RRR4\ VP 4# +'giL%;i)zConnection key of a live ``MCPServerTask`` (teardown runs on the MCP loop without the discovering profile's context, so the key is found by identity, never re-derived).N)r rb_serversitemsr ra)serverrYlives& r(_server_key_for_taskrzsS --/IC~  /  v{{ ## s&A1A1A11 B c(V^8dQhR\RR/#r}rx)r6s"r(r7r7s ' 's 't 'r8c^RIHp\V\\34'dTM \ V4p\ P;_uu_4\\ PPVR44pV'g\ P!V40pRRR4XFpVPWR7K \V4\V4R# +'giLC;i)zrDeregister one server tool from every profile overlay that owns it. *server* is the live task or a connection key.registryNrq)tools.registryrrJr5tuplerr rbset_server_tool_scopesrL_server_registry_scope deregisterr_restore_server_toolset_alias)rrwrrYscopesrqs&& r(_deregister_mcp_tool_all_scopesrs(vU|44&:Nv:VC U..223;<22378F I3I&!#& s A C  C cV^8dQhRR/#)r2r4Nr)r6s"r(r7r7sKK$Kr8c $a^RIHo\V4p\P;_uu_4\P P 4UUu.uFBwr#\V4V8XgKV\\PPVR443NKD pppRRR4\;QJdV3RlX4F 'gK RM RM!V3RlX44'dSPVRV 24R#R#uuppi +'giLo;i)uKeep the process-global alias while any profile still owns tools of a server with this name — including another profile's same-named connection (the alias is per NAME; the registry deregister dropped it after checking only one scope).rNc3<"TF8wrVF-p\VRR4FpSPWCR7RJxK K/ K: R#5i)_registered_tool_namesrNr)rIsnapshot_registration)r&rrrqrwrs& r(r)0_restore_server_toolset_alias..sR #NF )A2FI &&y&>dJF K17 K#sAATFmcp-r) rrrr rbrrrrrLanyregister_toolset_alias)rYrQkrownedrs& @r(rrs(C.K "'.."6"6"8Y"8YQIaLKRemove one profile's MCP overlay for a shared live connection.rrrNFrsr)rrrget_tool_names_for_toolsetrr rbrrrLdiscardrXrcr rWr)rYrqrrQrwrs&& r(_remove_server_scopers'C.K884 }9MN I3O U..223;<u -3E % %c *  % % ) )#t 4 ""&&{;u'UW[\ ##'' KPU(VX\] "#& s C D99 E c VV^8dQhR\RRR\R\\,/#)r2rQrr!rRr4r5rKr^)r6s"r(r7r7s/otX\]aXbr8c aaa a SPR4;'g/pR Uu/uFqD\VPV4RR7bK! upo \\SRR4RR4o RV VV V3Rllp.p\V4FKpV!VR ,4pV'd!\P R WR ,V4K:VP V4KM V#uupi) aJUtility schemas allowed by config (``tools.resources``/``tools.prompts``) and advertised capabilities. ``initialize_result.capabilities`` is the truth (sub-object non-None iff the family is served); without it fall back to the legacy session-method check, which never filters anything since ClientSession defines all four methods.r]T)defaultinitialize_resultN capabilitiescFV^8dQhR\R\\,/#)r2 handler_keyr4)r5r )r6s"r(r7-_select_utility_schemas..__annotate__s" ` `# `(3- `r8c<\V,pVR8Xd!\P!S4'dR#R#SV,'gV R2#Se\SVR4fRV R2#R#\ SP V4'dR#RV 2#)eventsNzevents not enabledz disabledzserver does not advertise 'z ' capabilityzsession lacks )r_eventsevents_enabledrIhasattrsession)rfamily advertisedrRenabledrs& r( _skip_reason-_select_utility_schemas.._skip_reasons*;7 X "11&994 S?S SvXY' '  !z64084VHLIIv~~{;;t_>R]Q^A__r8rz+MCP server '%s': skipping utility '%s' (%s)) resourcesprompts)rLr rIrr>debugappend) rQrrR tools_filterfrselectedentryreasonrrs &ff @@r(_select_utility_schemasrs ::g&,,"LMefMe.!1!1!!4dCCMefG).sC *G3enn,161O1OPSUZ1[ #*GsAAArrc3t<"TF-p\P!SPV4R,xK/ R#5i)raN)_schema_convert_mcp_schemara)r&rhrs& r(r)rs-fXeST766v{{AFvNNXes58c3j"TF)wrV\P9gKVFpVxK K+ R#5ir#)r r)r&rYrkns& r(r)rs8G.S?35>>1;Ea;E.Ss33)r _mcp_registry_scoperrrbrrrextend_lazy_server_tool_namessortedrvaluesrr_toolsr)rrY server_namesrQrwnamesrqrs @@r(_existing_tool_namesrs  % % 'E + [[[*/..*8311#u= #.     */*G*G   + + %@@4 }AUV  V +   E..'') gfF^6_6_V22fX^XeXef h*  Ge.K.K.Q.Q.SG G  L+[[   Ls5F1 F,1F,+F1=&G -5G ,F11 G G c`V^8dQhR\R\R\\.\3,/#)r2rarRr4)r5rKrrD)r6s"r(r7r7s1__C__(C5$;2G_r8c aaVPR4;'g/pVPR4p\VRV R24o\VPR4RV R24o\V\\\ \ 34'dV3Rl#V3Rl#) zInclude/exclude predicate for a server's tool names: ``tools.include`` is a whitelist (``[]`` = register nothing), ``tools.exclude`` a blacklist; entries are exact names or fnmatch globs; include wins over exclude.r]includez mcp_servers.z.tools.includeexcludez.tools.excludec<\VS4#r#r)rw include_sets&r(#_make_tool_filter..s !4Y !Lr8c:<S;'d \VS4'*#r#r)rw exclude_sets&r(rrs+"]"]2EiQ\2]^r8)rLrrJr5r^rr)rarRr include_rawrrs&& @@r(_make_tool_filterrs::g&,,"L""9-K( TF.6YZK()9)9))D UYTZZhFijK+T5#677LL ^^r8c\V^8dQhR\\,R\\,/#)r2rawsr4)rrr^r)r6s"r(r7r7 s'JJ J$*?Jr8c VUu.uFp\V\4'gKVPR4'gK4\VR,VPR4;'gR\VPR4\4'd VR,M/\VPR4\4'd VR,MRR7NK up#uupi)zSchema-cache rows -> stand-ins for MCP Tool objects; rows that are not dicts or lack a name are dropped. Missing or non-dict ``annotations`` (older cache files) fail closed to write-capable.ra description inputSchemarFN)rarrrF)rJrKrLr)rraws& r( _cached_toolsr s  Jz#t4 r:= rOV#''-:P:V:VTV>HQ^I_ae>f>fM(:ln>HQ^I_ae>f>fM(:lp r JJ JsC C $C  A*C cLa]tRtRtoRt]V3RlRl4tV3RltRtVt R#) _CandidateiznOne registration attempt (native tool or generated utility); ``origin`` is the provenance text in diagnostics.c <V^8dQhRS[/#r)rD)r6 __classdict__s"r(r7_Candidate.__annotate__s>>D>r8c@VPP\4#r#)origin startswith_UTILITY_ORIGIN_PREFIX)selfs&r( is_utility_Candidate.is_utilitys{{%%&<==r8cJ<V^8dQh/S[;R&S[;R&S[;R&S[;R&#)r2 registry_namerschemahandler)r5rKr)r6rs"r(r7rs7  K  L r8rN) __name__ __module__ __qualname____firstlineno____doc__propertyr__annotate_func____static_attributes____classdictcell__)rs@r(rrs#x>>r8rc V^8dQhR\R\\,R\\.\3,R\ \ ,/#)r2rar]should_registerr4)r5rrrrDr^r)r6s"r(r7r7 sA  3 x} xQTPUW[P[G\ &*:&6 r8c .pVFpV!VP4'g#\PRWP4K=\P!YPVP ;'gR4\P !W4p\P!WPVRR7pVP\VR,RVP: 2Wg44K V#)zNative tools (live SDK objects or cache stand-ins) -> candidates. The injection scan runs on BOTH paths: the cache file is user-writable JSON.z8MCP server '%s': skipping tool '%s' (filtered by config)rT) native_imagesraztool ) rar>rr_scan_mcp_descriptionrr _handlers_make_tool_handlerrr)rar]r  tool_timeoutoutrhrrs&&&& r(_tool_candidatesr sC qvv&& LLSUY[a[a b %%dFFAMM4G4GRH,,T5..tVV\Y]^ :fVnaffZ.@&RS Jr8chV^8dQhR\R\\,R\\,/#)r2raentriesr4)r5rrr^r)r6s"r(r7r70s+cHSMDQ[L\r8c .pVFp\V\4'd#VPR4VPR43MRwrV\V\4'gKWV\9gKdVPR4'gK}VP \ VR,\ V: 2V\V,!W444K V#)z_``{schema, handler_key}`` rows (live selection or cache) -> candidates; malformed rows dropped.rrra)NN)rJrKrL_UTILITY_HANDLER_FACTORIESrrr)rarrrrrrYs&&& r(_utility_candidatesr0sCEOPSUYEZEZswwx(#''-*@A`l  fd # #/I(IfjjY_N`N` JJz&.5K4LSG2TV\".Vs \Gq||DZ7[Gs- -c3,<"TF pSV3xK R#5ir#r)r&rrs& r(r)rYsH1]A.suMCP server '%s': generated utility %s normalizes onto server-native %s — keeping the native tool and dropping the utility (the utility only applies when the server has no such tool of its own)z, zMCP server '%s': name normalization collision for '%s' from %s; skipping every colliding entry instead of choosing an arbitrary handler)rerrrr>raddrrlenrrfinfojoinerror) raruniqueorigins_by_namecorigins ambiguousshadowedutility_originsnative_originsrs && @r(_resolve_name_collisionsr+;s "F+-O !,,Q__ceD 88w  LLexx :  AHH a')I%(UH#2"7"7"9 w w<1   \G \\#o*> >? ~ ! # OOHH H KKrdii0.2C E (.gIm $#:#)):"; w FGK]\`\e\efm\n p#< rv! !AAqXYX`X`FaiqFqAAv rr rsHH7HrYexecution_timeoutc V^8dQhR\R\\,R\R\.\\,3,R\ R\\,/#)r2rarcheck_fnrqlazyr4)r5r^rrr rD)r6s"r(r7r7fsR))s)Z0@)x) (Xc]): ;)CG)nrsvnw)r8c ^RIHpRV 2p.p V!4p Vf\W RR7pVEFp VPV P4p V 'dW8wdV'd5V P 'g"\ PRW PV 4MpV PR4'd.\ PRW PV PV 4M,\ PRW PV PV 4KTPV PYPV PTRV PPR 4;'gR V VR 7 VPV P4V8Xd\V PV4V eY\ P";_uu_4\ P$P'V\)44P+V 4RRR4V P-V P4EKV'dEK\ PR W PV P4EK V 'dVP/W4V # +'giL;i) a\Register candidates under toolset ``mcp-{name}``; returns the names that landed. The ownership pre-check is advisory (servers connect in parallel): ``registry.register()`` is the atomic gate and its verdict is re-read after every call. *key* is the connection whose ``_server_tool_scopes`` records the registering scope (default: this scope's own).rrNFrsuPMCP server '%s' (lazy): cached tool '%s' collides with toolset '%s' — skippinguuMCP server '%s': %s normalizes to '%s', already owned by MCP toolset '%s' — skipping to preserve the existing ownerulMCP server '%s': %s (→ '%s') collides with built-in tool in toolset '%s' — skipping to preserve built-inrr) ratoolsetrrr.is_asyncrrqr,zkMCP server '%s': registration of %s as '%s' was rejected by the registry; skipping provenance/count updates)rrr get_toolset_for_toolrrr>r?rr"rregisterrrrLr{r rbrrerrrr) rarr.rqr/rYr,r toolset_name registered scope_valuer%existing_toolsets &&$$$$$ r(_register_candidatesr9fs ($=LJ'K {$U; #88I  0 @|||NN#u#':JL!,,V44 ;<@((AOO]mo 348((AOOUeg ,xxQRQZQZem ](C(I(IrQ\/  1  ( ( 9\ I "1??D 9&[[[--88ceDHHU!   aoo . LL=>BHHaoo _36''; ![s /8I## I3 c8V^8dQhR\RRR\RR/#)r2rarr!rRr4NrS)r6s"r(r7r7s/NNcN?NDN^bNr8c^RIHpHp.pVPFpV!VP4'gK\ VRR4pTP RVPRVP;'gRR\V\4'dTM/RR\V4//4K \WV4U u.uFp R V R ,R V R ,/NK p p \VR R 4;'g/p V!W!V4WjV PR 4V PR4R7R #uup i \d"p \P!RY 4R p ? R #R p ? ii;i)znWrite-through: persist the manifest so the next startup registers this server lazily (no spawn). Never raises.)config_fingerprintwrite_cache_entry input_schemarrarrrFrGrr_list_cache_metaNttl_ms cache_scope)r] utility_toolsr@rAz*MCP schema cache write failed for '%s': %s)tools.mcp_schema_cacher<r=rrarrrrJrKrNrrIrL Exceptionr>r) rarrRr r<r= tools_payloadrh schema_objeutility_payload cache_metaexcs &&&& r(_write_schema_cacherKs?N Q A"166** #1nmDJ   q}}/B/BZ D-I-Izr0J10MN" %DD" $ 26 :-!+!9z~~VcGd fS N A4MMNs7A*D-AD.D D!3DD E&EEc VV^8dQhR\RRR\R\\,/#)r2rarr!rRr4r)r6s"r(r7r7s/otPTUXPYr8c a \W4p\V4o \WVPS 4\ TS VPUu.uF$p\ VRR4'gKVP NK& up4\WPW1P4pV\V\WV4VP4, p\P!S 4;'gRPR4'dd^RIp^RIHpVP"!VUu/uFqP$VP&bK upRR7p \ VRV 4p W8wd V!R 4hWn\+V\-W4\/V4V 3R lR S VP1R 4R 7p V 'dB\P!S 4;'gRPR4'g \3WW#4V #uupiuupi)aRegister a connected server's tools plus utilities (initial discovery and list_changed refresh); returns the names. Toolset aliases derive from the live registry, not ``toolsets.TOOLSETS``; lossy normalization collisions (``read-file``/``read_file``) fail closed.raNrzeditor-session:)RuntimeStoreErrorT) sort_keys_editor_frozen_manifestacp_mcp_schema_changedc0<\P!S4#r#)r r)rYsr(r(_register_server_tools..sU5Q5QRU5Vr8Ftimeoutr.rqr/rYr,)rrrirrorIrarrrrr rrjsonhermes_state_runtimerNdumpsrrrPr9r+rrLrK) rarrRr rhrrVrNr%manifestfrozenr6rYs &&& @r(_register_server_toolsr[s(5O v &CfmmSAD# 'b 1QRTZ\`Ia 'bc!$ H[H[\J%d,CDRX,Y[a[n[nooJ $$S)//R;;^RIHpRpV!V4V!VPR44V!VPR44\V4V!VPR44V!VPR44VPRR4\ VPR 443#) aWhat makes one live connection reusable for another profile: the route fingerprint PLUS everything that authenticates or secures it (``config_fingerprint`` deliberately excludes credentials so the schema cache survives a token rotation). Two profiles pointing at the same URL with different headers/env/auth/client certificates/TLS policy are two identities; borrowing across them would call tools as the other user, or under the other profile's ``ssl_verify`` / ``strict_redirect_headers``.)r<cP\P!T;'g/R\R7#)TrOr)rVrXr5)r3s&r(_frozen%_connection_identity.._frozenszz%++2sCCr8envheaders client_cert client_key ssl_verifyTstrict_redirect_headers)rCr<rL _auth_typerD)rRr<ras& r(_connection_identityrjs:D v & 50A(BGFJJW`LaDb v  =(A BGFJJWcLdDe JJ|T *D>$**XsKRRT U _ _ aar8cJV^8dQhR\R\R\R,/#rPrS)r6s"r(r7r7s%$$#$t$d $r8c^RIHpHpRV9dVPR4'gR#V!W4wrE\T4# TdR#\d"p\ P RY4Rp?R#Rp?ii;i)aDigest of what a connection is opened with that the config does not show, resolved in the CURRENT profile's scope by the transport's own resolvers: a stdio child's executable (bare ``npx``/``node`` may resolve under the profile's home), env (external secret-source values) and default cwd; an HTTP connection's URL and headers after a ``server_json`` live endpoint and ``identity_header`` (``value_from: profile``). The transport publishes the digest of the very inputs each attempt connects with; an adopter recomputes it here. A resolver failure refuses adoption for this server only, never discovery for the whole scope. None is the one refuse sentinel: no connectable config, no live endpoint, or a resolver failure.)LiveEndpointUnavailable_connect_inputsurlcommandNzrMCP server '%s': cannot resolve this profile's connection identity (%s); not adopting another profile's connection)tools.mcp_tool_transportrxryrLrDr>r?ru)rQrRrxryinputsr'rJs&& r(_adopter_identity_digestr~suR F6::i#8#8#K8  F ## # CDO Vs! ?A4 A4A4A//A4 cross_profileFresolved_identityc bV^8dQhR\R\R\R\R,R\/#)r2rrRrrNr4)rrKrDr5)r6s"r(r7r7s<QQsQDQDQ*-*Q@DQr8c\\VR/4;'g/4\V48wdR#V'gR#\VRR4p\V4R8g;'dVRJ;'dVRJ;'dWC8H#)aWhether *server* matches *config*. Across profiles the static config is not enough: OAuth tokens live in the owner's token store (never reusable), and secret-source env, the profile identity header and the default cwd resolve per profile, so the adopter's resolution (*resolved_identity*, computed by the caller outside the registry lock; None refuses) must hash to what the owner connected with. Within one profile the connection is the profile's: its default cwd resolves in the connection task's own context, never per session._configFT_resolved_identityNoauth)rjrIri)rrRrrrecordeds&&$$ r(_same_server_routersGFIr:@@bAEYZ`Eaa v3T:H v ' ) P Phd.B P P!- P P2:2OQr8c0V^8dQhR\R\/#r2serversr4rKint)r6s"r(r7r7s??4?C?r8c\P!4pVf^#\\V4\ \4,,;_uu_4\ V4uuRRR4# +'giR#;i)zNSerialize shared-scope reconciliation and registration for one discovery pass.N)r r_SCOPE_REFRESH_LOCKShashr&_register_connected_into_current_scope)rrqs& r(%register_connected_into_current_scopersJ  % % 'E } d5kC0D,EE F F5g> G F F Fs  A$$ A5 c0V^8dQhR\R\/#rr)r6s"r(r7r7sYYDYSYr8cn a^RIHp\P!4oSf^#\P;_uu_4\P P 4UUu0uF+wr#SV9gK\V4V9gK \V4kK- ppp\PUu0uF p\V4S8wgK\V4kK" ppRRR4^RI H pV!4;_uu_4X'd\P!4M/p/VUu/uFqVPV4bK upCVCp V P 4UU u/uF3wrVX9gKV fK\V 4'gK'V\!W4bK5 p pp RRR4\P;_uu_4.p \P P 4Fwr#SV9dK\V4pVX 9dK"\PPV4p W,p \V4S8gpV eJ\V 4'd9V e5\#V RR4e&\%WVX PV4R7'dKV P'V4K RRR4X Fp\)VS4K ^pVP 4EFvwr\V 4'gK\P;_uu_4\+VSRR7\P9d RRR4K^\PP 4UUu.uFSwpp\V4V8XgK\#VRR4fK)\%VV RX PV4R7'gKOVV3NKU pppRRR4X'gKV^,wr-\P;_uu_4\P P-V\/44P1S4RRR4\3WS4VP5R V 24'dEKy\7WP8\;W4V P<4pV\?V\AWV 4V P<4, p\CV\EVV4\GV4V3R lRVV PR 4R 7pV'gEKV^, p\P;_uu_4\I\/\#V R .4;'gR4\/V4,4V n%RRR4EKy V#uuppiuupi +'giELk;iuupiuup pi +'giEL;i +'giEL;iuuppi +'giEL;i +'giEL;i +'giEK;i)aHeal the current profile's MCP overlay from already-connected shared servers. A shared live connection remains owned by the profile that opened it, but a profile with the same route must still receive its callable tool entries. The current profile's config is the allowlist, and route fingerprints prevent borrowing a differently-authenticated connection. Missing or changed config entries remove only this profile's overlay. rN)_owner_secret_scoper)rrFrsTrc<S#r#rrsr(r8_register_connected_into_current_scope..lsr8rTrUrr)&rrr rrbrrrrrtools.mcp_tool_discoveryrr_load_mcp_configrLrr~rIrrrr rerrrurrrrrrrr9r+rrr)rrrYromittedforeignrprofile_serversrajudgedrR resolved_idsstalerrregistered_serversrsharedrrrqs& @r(rrs(  % % 'E } 5:5N5N5T5T5VI5Vkcvo"*3C.*G"9S>5VI.3^^X^cz#RW?W>9S>^X =   8?'224RUI?..t44IUWU,2LLNb,:LD7?E/5EFXY_F`E6tDD,: b   44::D6!^^'',F\F&sOu4M&8&@&@FNvy$7?-fM@L@P@PQU@VXX S!=  S%(  !&))  [[[46%..H[49>>3G3G3IX3Iic4"34/"4;D)T4R",T6?K?O?OPT?UWW"sDk3IFX  Qi  [[[  % % 0 0ce < @ @ GD%0  . .dV} = = %dMM;LT;Z\b\o\op ) )$?ATATV V $ *4<#D)UPS$jj35 5 ! # 06(@"EKKLsSXzY1[-;(@ OIY Jb    6X [[[[s"T- T" - T" ?T" T-#T(:T( T-(%U  U 'U  U U U )U 9U CU !U #U:!U:$U4 > U4 !U4 5U4 =U:58V?V"" T-- T>  U  U U1 4U:: V  V " V4 c ^V^8dQhR\R\R\R\\,/#)r2rarRrr4r)r6s"r(r7r7vs,CdtCyr8c ^RIHpHpHp\ V4p\ V!V44p\ WV4\W\W4V4pV\W!V4V4, p\W\V4\PRVPR4R7p V 'd\P;_uu_4\!V4p \#V4\P$V &V!V4\P&V &\)V 4\P*V &RRR4\,P/RV\1V 44V # +'giL2;i)uLazy startup: register from a cached manifest with no child process (first real call goes through ``_ensure_lazy_server_connected``). Trust metadata is recorded first so the call-time gate is identical for live and cached registrations. Lazy startup (#56832, design by Vansh5632): tools appear in the registry immediately; the first real call routes through ``_get_connected_server_for_call`` → ``_ensure_lazy_server_connected``. )r<tools_from_cache_entryutility_tools_from_cache_entryTrT)r.rqr/r,Nz?MCP server '%s' (lazy): registered %d tool(s) from schema cache)rCr<rrr rrirrrr9rr rrLrbr rK_lazy_server_configs_lazy_server_fingerprintsr^rr>r r) rarRrr<rrr cached_toolsrr6rYs &&& r(_register_from_cache_syncrvsrq(0L !7!>?Ll;!$6G6UWcdJ%d,J5,QS_``J% >$#7u?X?X_c **Y/1J [[[d#C.26lE & &s +3Ef3ME + +C 015j1AE ) )# .   UW[]`ak]lm  [s 8AD?? E r#)[rrqrVloggingr$ dataclassesrtypesrtypingrrrrrr r tools.mcp_tool_commonr r r rrr]rrrrrr rrtools.mcp_tool_handlersrrrrrtools.mcp_tool_schemarrrrtools.mcp_tool_scoperrrr tools.mcp_toolr! getLoggerr>rrangerr_make_list_event_types_handler_make_subscribe_event_handler_make_unsubscribe_event_handlerrrArNr[rirorur{rrrrrrrrrrrrr+r9rKr[rjrirur~rrrrrr8r(rsh  !!OOOmm,,0,??ddXX,   + ,uBb BuuBb BB-2OE`. >V>>@QSZSxSx@@ B "  2 iP6> : $ ' K$'&>>_$J  > >  >  (sV)MQ)ei)XN<:Y"6b $0Q5Q7;Q$?Yxr8