+ lHj~ Rt^RIHt^RIt^RIt^RIt^RIt^RIHt^RI H t ^RI H t H t HtHtHtHt^RIHt^RIHt^RIHtHt^R IHtHtHtHtHtHtH t H!t!H"t"H#t#H$t$H%t%H&t&^R I'H(t(H)t)H*t*H+t+H,t,H-t-^R I.H/t/H0t0^R I1H2t2H3t3H4t4H5t5]Pl!R 4t7^t8^ t9] !RR7!RR44t:RRRRRRRRRRRR/t;RRltR R!lt?]P!]?R"4tA]P!]?R#4tBR$R%ltC]]P!4,tE]F!]R&,R',R(,4tGRdR)R*lltHR+R,ltIR-R.ltJRdR/R0lltKR1R2ltLR3R4ltMR5R6/R7R8lltNR9R:ltOR;R<ltPR=tQReR>R?lltRRfR@RAlltS] !RBRC44tTRDRRER/RFRGlltURHRIltVRgRJRKlltWRLRMltXRNROltYRPRQltZRERRRRRSR/RTRUllt[RVR/RWRXllt\RERRYRRSR/RZR[llt]R\R]lt^R^R_lt_R`Ralt`RdRbRcllta.RhOtbR#)iuvProgressive tool disclosure ("tool search"): MCP/plugin tools and a curated set of event-triggered core tools are replaced in the model-visible array by three bridge tools — tool_search / tool_describe / tool_call. Invariants: core tools (``toolsets._HERMES_CORE_TOOLS``) and session-gated GUI toolsets never defer unless named in ``defer``; ANY deferrable tool activates the bridge (the listing scales with budget, not activation); the catalog is stateless — rebuilt from the live tool-defs every assembly (a session-keyed one drifts and silently drops tools); bridge calls route through ``model_tools.handle_function_call``.) annotationsN)Counter) dataclass)AnyDictIterableListOptionalTuple)DEFAULT_CONFIG) tool_error)CLIENT_SURFACE_TOOLSETSTOOLSET_SESSION_PLATFORMS) BRIDGE_TOOL_NAMESCHARS_PER_TOKENTOOL_CALL_NAMETOOL_DESCRIBE_NAMETOOL_SEARCH_NAME CatalogEntry_fn_listing_group_label_registry_entry_registry_toolset build_catalogbuild_catalog_listing_with_formsearch_catalog)local_batch_errornormalize_tool_call_entriesnot_deferrable_errorsession_unavailable_errorunavailable_in_session_reasonvalidate_deferred_call_args)CONNECTOR_BATCH_SENTINELis_connector_name)connections_in_scopeconnector_entries_by_groupconnectors_unavailableremote_schemas_forztools.tool_searchT)frozenc]tRt^*t$RtR]R&R]R&R]R&R]R&R tR]R &R tR]R &R tR]R&] RRl4t ] RRl4t Rt R #)ToolSearchConfigzDResolved, validated tool-search configuration for a single assembly.strenabledfloat threshold_pctintsearch_default_limitmax_search_limitautolistinglisting_max_tokensNOptional[frozenset] defer_toolscV^8dQhRR/#)return frozenset)formats"6/home/ubuntu/.hermes/hermes-agent/tools/tool_search.py __annotate__ToolSearchConfig.__annotate__9sYYyYc BVPf\#VP#N)r7_DEFAULT_DEFERRED_TOOLS)selfs&r>effective_defer_tools&ToolSearchConfig.effective_defer_tools8s*.*:*:*B&XHXHXXrAc V^8dQhRRRR/#)r9rawrr:r*r<)r=s"r>r?r@=sRR3R#3RrAc \V\4'g RVRJdRMR/p\VPR4^^^24pVPR4pVe:\V\\ \ 34'g\PRV4RpT!\VPRR44\R \R \VPR 4R 444\VPR 4^^V4T\VPRR44\VPR4R^R4\V\\ \ 34'd\RV44R7#RR7#)uBuild from a raw dict / legacy bool / None; every field is clamped and unknown values fall back to safe defaults — a config typo must not break the agent.r,Foffr2r1deferNztools.tool_search.defer is %r, expected a YAML list of tool names (e.g. [todo_list, computer_use]; [] keeps every tool eager) - using the curated default set.gY@r.g@r0r3r5r4i`c3"TF?p\V4P4'gK$\V4P4xKA R#5irC)r+strip.0ns& r> ,ToolSearchConfig.from_raw..Ts*"W9aA >3q6<<>>9s !A !A )r,r.r0r1r3r5r7) isinstancedict _clamped_intgetlisttuplesetloggerwarning _tri_statemaxmin _safe_floatr;)clsrIr1 defer_raws&& r>from_rawToolSearchConfig.from_raw<sJ#t$$se|e@C'0B(CRBOGGG$  IeS?Q)R)R NN12; =Iswwy&9:c3uk#''/:RTW.X#YZ!-./A7G"I-swwy&9:+CGG4H,I4QTV[\&y42DEE#"W9"WW R RLP R RrAr<)__name__ __module__ __qualname____firstlineno____doc____annotations__r3r5r7propertyrF classmethodrd__static_attributes__r<rAr>r*r**shN LGS""'+K$+ YYRRrAr*trueon1yesfalserK0noc V^8dQhRRRR/#)r9valuerr:r+r<)r=s"r>r?r?[s[[c[c[rAc\V4P4P4p\P YR9dV4#R4#)zINormalize an ``auto``/``on``/``off`` setting (bool-ish aliases accepted).r2)r2rprK)r+rOlower_TRI_STATE_ALIASESrX)rwtexts& r>r^r^[s? u:    # # %D  ! !$8M0M ZZSY ZZrAc ,V^8dQhRRRRRRRRRR/#)r9rwrfallbackr/lohir:r<)r=s"r>r?r?as/###s####rAcv\V4p\V\ W044# \\3dTpL*i;i)zJ``int(value)`` (or ``fallback`` when unparseable) clamped to ``[lo, hi]``.)r/ TypeError ValueErrorr_r`)rwr}r~rs&&&&r>rWrWas>E  r3r> "" z "s "88c$V^8dQhRRRRRR/#)r9rwrr}r-r:r<)r=s"r>r?r?js!serAcL\V4# \\3dTu#i;irC)r-rr)rwr}s&&r>rarajs*U| z "s ##c V^8dQhRRRR/#)r9 loader_namer+r:r*r<)r=s"r>r?r?qs / /S /-= /rAcd^RIHp\W4!4;'g/PR4p\ V\ 4'dTM/p\ PVPR44# \d6p\PRT4\ PR4uRp?#Rp?ii;i)zUTool-search config via ``hermes_cli.config.`` (defaults on any failure).Ntools tool_searchz%Failed to load tool-search config: %s) hermes_cli.configconfiggetattrrXrUrVr*rd Exceptionr\debug)r_cfg_mod tools_cfges& r>_config_from_loaderrqs/,X35;;@@I !+It!r?r?s.rAc\^RIHp\V4# \d\4u#i;i)zRNames that never defer by default (lazy: ``toolsets`` imports ``tools.registry``)._HERMES_CORE_TOOLS)toolsetsrr;rrs r>_core_tool_namesrs-/+,, {s ++rrrLc$V^8dQhRRRRRR/#)r9namer+r7r6r:boolr<)r=s"r>r?r?s( O O# O4G OSW OrAcV\9dR#Ve W9dR#V\49dR#\V4pVRJ;'d#VPR4;'g V\9#)zTrue if a tool is *eligible* for deferral: named in ``defer_tools`` (curated set or user override), OR an MCP tool, OR neither core nor a session-gated GUI surface (i.e. a plugin tool). Bridge names never defer.FNTzmcp-)rrr startswith_DIRECT_SURFACE_TOOLSETS)rr7toolsets&& r>is_deferrable_tool_namersm   4#6 !!%G $  O O6"MMg5M&MOrAc V^8dQhRRRR/#)r9 tool_defsIterable[dict[str, Any]]r:z Iterable[str]r<)r=s"r>r?r?s9979M9rAcRV4#)z?Function names of a tool-defs list (``""`` for a nameless def).c3X"TF p\V4PRR4xK" R#5i)rN)rrX)rQtds& r>rS"_tool_def_names..s" 8iCGKK # #is(*r<rs&r>_tool_def_namesrs 8i 88rAc V^8dQhRRRR/#)r9rrr:rr<)r=s"r>r?r?sAA":A~ArAc8\R\V444#)uEvery tool name in the session's ``tool_defs`` — what this session can actually reach. Public wrapper over the private name extractor so callers outside this module (the ``model_tools`` dispatcher) can scope error messages to the real session.c38"TFq'gK VxK R#5irCr<rPs& r>rS%session_tool_names..s@ :1aQQ :s  )r;rrs&r>session_tool_namesrs @ :@ @@rAc$V^8dQhRRRRRR/#)r9rlist[dict[str, Any]]r7r6r:z1tuple[list[dict[str, Any]], list[dict[str, Any]]]r<)r=s"r>r?r?s$  2 AT I rAc.p.p\V\V44F6wrEV\9gK\WQ4'dTMTP V4K8 W#3#)zlSplit a tool-defs list into (visible, deferrable); bridge tools are dropped (re-added after classification).)ziprrrappend)rr7visible deferrablerrs&& r>classify_toolsrsU%'G')J ?9#=> ( (24EEZ7 Z Z[] ^?  rAc V^8dQhRRRR/#)r9rrr:r<)r=s"r>r?r?s VV2V7KVrAcL\V\4P4^,#)zPDeferrable subset of pre-assembly ``tool_defs`` under the read-only user config.)rrrFrs&r>_deferrable_inrs )%9%;%Q%Q RST UUrAc V^8dQhRRRR/#)r9rrr:r/r<)r=s"r>r?r?sDD,DDDrActRRlp\P!\\W44\, 4#)zHToken cost via the chars/4 rule (order-of-magnitude precision suffices).c V^8dQhRRRR/#)r9rdict[str, Any]r:r/r<)r=s"r>r?2estimate_tokens_from_schemas..__annotate__s  > c rAc\\P!VRRR74# \\3d\\ T44u#i;i)F) ensure_ascii separators),:)lenjsondumpsrrr+)rs&r>_chars,estimate_tokens_from_schemas.._charssA tzz"5ZPQ Q:& s2w<  s!$%A  A )mathceilsummapr)rrs& r>estimate_tokens_from_schemasrs' 99SV/0?B CCrAconnections_grantedFc ,V^8dQhRRRRRRRRR R/#) r9rr*deferrable_tokensr/context_length Optional[int]rrr:r<)r=s"r>r?r?s3  ,  $1 KO \` rAc>VPR8XdR#V^8dR#V#)u``"off"`` never activates; ``"on"``/``"auto"`` activate whenever any deferrable tool exists ("auto" is reserved for a future budget-gated mode — do not distinguish them without that design). ``context_length`` is kept for caller compatibility.rKFT)r,)rrrrs&&&$r>should_activaters$ ~~1 rAc$V^8dQhRRRRRR/#)r9rr*rrr:r/r<)r=s"r>r?r?s#;;!1;=;UX;rAcV'd*V^8d#\WPR, ,4MRp\^\VPV44#)z``min(listing_max_tokens, threshold_pct% of context)``; unknown context uses a 10K percentage leg (5% of a typical 200K window).rMi')r/r.r_r`r5)rrpct_legs&& r>listing_token_budgetrsH!^a%7>%9%9E%ABC=C q#f//9 ::rAc ,V^8dQhRRRRRRRRRR/#) r9rr+ description propertiesrrequiredz list[str]r:r<)r=s"r>r?r?s8[[[3[N[&[+9[rAc&RRRRVRVRRRRVRV///#) zIOne OpenAI-style function schema (key order is part of the frozen bytes).typefunctionrr parametersobjectrrr<)rrrrs&&&&r>_bridge_schemars8 J m[vxz:xX-Z [[rAz `connectors__` names are tools of the user's app accounts (Gmail, Linear, ...); `manage_connections` checks or authorizes an account.c ,V^8dQhRRRRRRRRR R/#) r9deferred_countr/r3 Optional[str] listing_formr+rrr:r<)r=s"r>r?r?s2###m#SV#-1#>A#rAc,V'dRV R2MRR\ R\ R2,V'd\MR,pV'gV#VR8XdVR V,,#VR \ R 2, pVR 8XdVR \ R2, pVR,V,#)atool_search bridge description with the listing embedded (framing per ``listing_form``). ``connections_granted`` adds the one sentence that ties ``connectors__`` names to ``manage_connections``; without that tool in the session the sentence would name a tool the model cannot call.zSearch z- additional tools that are loaded on demand. zLSearch remote connector tools (email, calendars, issue trackers, and more). zdSend one keyword query per capability you need; returns matching tool names and descriptions. Then `z` loads schemas and `z:` invokes. Tools already in your tool list need no search.rgroupsu The servers below are connected and their tools ARE available through this bridge. For any request in these domains, search here FIRST — do not claim the capability is unavailable and do not substitute a generic tool (terminal/browser) without searching. zQ Every tool listed below exists: never call it unavailable, and go straight to `z` when you see the exact name.mixeduP For servers marked 'names not listed', the tools exist too — find them with `z(` before concluding anything is missing.z )rr_CONNECTIONS_HINTr)rr3rrdescs&&&& r>_search_descriptionrs  >""O P n ##5"66KNK[\C C C !4   =   x  '  '( (    = ?@Dw  ''7&89. . / &=7 ""rAc ,V^8dQhRRRRRRRRR R /#) r9rr/r3rrr+rrr:rr<)r=s"r>r?r?s2999m9&)9EI9Vj9rAc \\\WW#4RRRRRR/RR/RRR RR //R.4\\R \ R \ R 2RRRRRR/RR//R.4\\R\ R2RRRRRRRRRRRR/RRRRR//RRR./RR//R.4.#)uBridge tool schemas injected in place of deferred tools; kept short — every byte is paid every turn. ``listing`` is embedded in the tool_search description; per-tool forms say "skip search when you see the exact name", "groups" says search is mandatory.queriesrarrayitemsstringrzOne query per capability: service + action + object keywords (e.g. ['gmail send email', 'github create issue']), never a question; every word must match tool text. Searched in parallel.limitintegerz"Max matches per query (default 5).z2Load the full JSON schemas for tools returned by `z`. Required before `zP` if a tool's parameters are unknown. Batch every schema you need into one call.nameszcExact tool names (as returned by tool_search). A single string is accepted and treated as one name.zInvoke deferred tools: `calls` is an array of {name, arguments}, one entry per invocation (batch independent calls; results come back in order). Arguments match the schema from `z&`; approvals and hooks apply as usual.callsrrrzExact tool name to invoke. argumentsz#Arguments matching the tool schema.rz2One or more independent deferred tool invocations.)rrrrr)rr3rrs&&&&r>bridge_tool_schemasrsA    [Gfh/!$_ I!#G K  @AQ@RS ./09 9Gfh/!$I I    233Y [G$"VX}Fb$c'&(MKp)q'#V[$9 "#W  I' ?4 4rAcv]tRtRt$RtR]R&R]R&^tR]R&^tR]R &^tR]R &^t R]R &R t R ]R&Rt R#)AssemblyResultiJz2Outcome of one assembly (tests and observability).rrr activatedr/rdeferred_tokensthreshold_tokenstiernoner+rr<N) rfrgrhrirjrkrrrrrrnr<rAr>rrJsB<##ONCOScD#ML#rArrrc(V^8dQhRRRRRRRR/#) r9rrrrrOptional[ToolSearchConfig]r:rr<)r=s"r>r?r?Ws+#.#."6#.=#.9#.ES#.rAc nT;'g \4p\V\V44UUu.uFwr4V\9gKVNK ppp\ WRP 4wrg\ V4pV'gB\V^WR7'd!\V\^VR7,R^R7#\VRR7#\V4p \W)V4'gF\TR\V4T \T;'g^VPR, ,4^R7#RR r\W!4p VPR 8wd\!W|R 7wr\\V4WVR 7p V R9d^M^p\"P%R V\V4\V4WV 4\Wm,R\V4WWR7#uuppi)uTool-defs the model should see: passthrough when inactive, else deferrable tools replaced by the three bridge tools. Idempotent — existing bridge tools are stripped first.)rT)rrrF)rrrM)rrrrrrNrrK) max_tokens)r3rrzutool_search activated (tier %d): %d core/visible tools kept, %d deferred (~%d tokens), listing %s (budget ~%d tokens))rrrrrrr)fullrr)rrrrrrFr$rrrrrr/r.rr3rr\info)rrrrrincomingrrrrr3rlisting_budgetbridgers&$$ r>assemble_tool_defsr Ws $ ${}F#&y/)2L#M2#Mxr00#MH2(3O3OPG.x8  61n ^ ^!H7J1bu7v,v,0q: :EBB4Z@ 6n E E%J- ."5"5A&:N:NQV:V!WX_`b b!&\)&AN ~~ ? !3 Z'5HJF ::1D KK 7 c'lC O->n^ "d3z?)  ..72s F1F1c V^8dQhRRRR/#)r9rr+r:rr<)r=s"r>r?r?}s%%%%rAcV\9#rC)rrs&r>is_bridge_toolr}s $ $$rAc$V^8dQhRRRRRR/#)r9r{r+capr/r:r<)r=s"r>r?r?s!<\V4V8:dV#VRVR,#)u\Cap a record description, marking the cut so it reads as deliberate. A bare slice ends mid-word ("apply exponential bac") and looks like corruption; the ellipsis says "there is more — tool_describe has it". 500 keeps 9 in 10 vendor connector descriptions whole and every first sentence (measured p90 575, first-sentence max 329 over 353 tools). Nu…)r)r{rs&&r>_clip_descriptionrs%t9#4;dse);;rAc V^8dQhRRRR/#)r9entryrr:rr<)r=s"r>r?r?s 6 6| 6 6rAcVPR,R,R,pRVPRVP R\ VP;'gR4R\V\4'dTM.Uu.uF$p\V\4'gKVR,NK& upR ,/# \\\3d.pLi;iuupi) zOne record for the shared ``tools`` map (per-query groups carry names only); ``required`` lets the model attempt a trivial call without a ``tool_describe`` round-trip.rrrsource source_namerr:N@N:N N) schemarKeyErrorAttributeErrorrrrrrUrYr+)rrrs& r>_shared_tool_recordr!s<< +L9*E ellM53D3D ,U->->-D-D"E j46P6P(VX*X0*XA&q#. 3*X0035 66 x 00s!B,7C  C ,CCc V^8dQhRRRR/#)r9catalogzlist[CatalogEntry]r:rr<)r=s"r>r?r?s QQ'9Q>RQrAc^RIHp\RV44p\V4Uu.uFpRVRW#,/NK pp\WA!4,RR7#uupi)zFDeterministic summaries of connected and declared unavailable sources.)hidden_declared_sourcesc3L"TFp\VP4xK R#5irC)rr)rQrs& r>rS,_available_source_summary..sR')%*;*;<<'s"$r tool_countcVR,#rr<)rows&r>+_available_source_summary..sCKrA)key)tools.tool_search_catalogr%rsorted)r#r%countsrrowss& r>_available_source_summaryr2sUA R'R RFCI&> R>4VT< 6>D R $0228O PP SsAc 0V^8dQhRRRRRRRRR RR R /#) r9argsrr-r+deduper max_itemsr/ retry_hintr:z)tuple[Optional[list[str]], Optional[str]]r<)r=s"r>r?r?s9>QT!$)RrAc VPV4p\V\4'dV.MTp\V\4'gR\ V R243#.pVFQp\T;'gR4P 4pV'gK0V'd W9gK@VP V4KS V'gR\ V R243#\V4V8d#R\ RV R\V4 RV RV 243#VR3#) zRead a list-of-strings bridge argument -> ``(items, error_json)``. A bare string (a common model slip) is a one-item list; rejects non-lists, all-blank lists, > ``max_items``.Nz, is required and must be an array of stringsrz; is required and must contain at least one non-empty stringz too many z: z > max z. )rXrUr+rYr rOrr) r4r-r5r6r7rIoutitemr{s &&$$$ r>_string_list_argr;s ((3-Cc3''3%SC c4 Z3%'S TUUUC4::2$$& 44? JJt  Z3%'b cddd 3x)Z)C53s8*GI;bQ[P\ ]^^^ 9rAconnector_searchcallc 0V^8dQhRRRRRRRRR RR R /#) r9r4rcurrent_tool_defsrrrr< Optional[Any]r=r:r+r<)r=s"r>r?r?s;+3+3~+3EY+3!;+3+8+3GT+3`c+3rAc0T;'g \4p\VRR\RR7wrVV'd\V^RR7V#VP R4pVf VP M \ WrP ^VP4p\\V44p VU u.uFp .NK p p Rp \V4'd\WSVR7wr.p /p\V 4p\V4FwppWV,,p\VVVR 7pVF(pVPVP \#V44K* VUu.uFpVP NK ppR VR V/pV'gV'd VVR &R VR&V P%V4K \'RV44pRVR\)V 4V,RV RV/pV 'd\+V RR7VR&\Y\)V4V 'dRM V'dRMRR7\,P.!VRR7#uup iuupi)rFz(Retry with fewer, more targeted queries.r5r6r7error)hitsoutcomerN)r<r=)rquerymatchesavailable_sourceszThis query returned no lexical matches, but the sources above are connected and their tools remain available. Retry tool_search with the service name plus a concrete action or object before concluding the capability is unavailable.hintc3L"TFp\V4'gK^xK R#5i)Nr#)rQrs& r>rS'dispatch_tool_search..sJYT2CD2IqqYs$ $total_availableresultsrsearched)verb connectorsconnector_unavailablerDno_hits)r#rDrEr)rr;_MAX_QUERIES_PER_CALL_record_search_metricrXr0rWr1rrr$r%r2 enumerater setdefaultrr!rrrr&rr)r4r?rr<r=rerr raw_limitrr#_remote_entrieshosted_failurerO tools_maprHpositionrFcorpusrDhrGgroup remote_countpayloads&$$$$ r>dispatch_tool_searchrfs $ ${}F#D)EMb/Y[LG /aI !I,5,=V ( (y*E*Eq&JaJab N+<=>G=K"9[dQWjsu ::gE 22=0E)s  H;Hr#c ,V^8dQhRRRRRRRRR R /#) r9r?rrDr/rEr+r#zOptional[list[CatalogEntry]]r:Noner<)r=s"r>r?r?s:@@-A@C@Z]@#?@KO@rAc^RIHp\VeTM \V44p\ V4pV'd V'dRM V'dRMRpV!WqVR7R#)zUOne ``hermes.tool_search.count`` row: which corpora the search read, never the query.)record_tool_searchNboth connectorlocal)scoperDrE).hermes_cli.observability.shared_metrics_eventsrjrrr$)r?rDrEr#rjrmhostedrns&$$$ r>rWrWsCR G/^DU5V WE !"3 4FF6KwEUw?rAconnector_describec 0V^8dQhRRRRRRRRR RR R /#) r9r4rr?rrrrqr@r=r:r+r<)r=s"r>r?r?s;.2.2.2G[.2#=.2/<.2KX.2dg.2rAcrT;'g \4p\VRR\RR7wrVV'dV#\V4p\ V\ V44UU u/uFwrV 'gKV \ V4bK p pp \WQW4R7wr/p .p.p/p\V4pVEF:p V PV 4pV PV 4pVe+RVPRR4RVPR/4/W&KT\V\4'd4R\VPRR44RVPR/4/W&K\V 4'dV 'dTMTPV 4K\V V4;p'dVVV &K\!V 4e7\#V \4P$4'g\'V V4VV &EK)VPV 4EK= RV /pV'd VVR &R VR &V'dVVR &V 'd\)V R VR7VR&\*P,!VRR7#uup pi)rTz Retry with fewer names per call.rB)r=rrrr not_foundzNNames in not_found are not currently available. Re-run tool_search to refresh.rIerrors described)rQrrRFrU)rr;_MAX_DESCRIBE_NAMES_PER_CALLrrrrr'rrXrUrVr+r#rrrrrFrr&rr)r4r?rrqr=rrZrrrby_nameremote_schemasr^rrt undescribedru session_namesfn remote_fn unavailableresults&$$$$ r>dispatch_tool_describers - -+-F! gd.J57JE   12J-0_Z=X-Yb-Y]a}tSW}-YGb%7Rd%p"N')EIKF&'89M [[ "&&t, >("&&*C' b)ACEK  4 ( ((#immM2.N*O'|R)HJEK t $ $*[ A A$ G5dMJ J[ J&F4L T " .7N &(>>8@8@0mDF4L   T "'(&u-F'{iv !x5n;^ij| ::f5 11Ics  H3)H3c V^8dQhRRRR/#)r9rrr:rr<)r=s"r>r?r? sGG';GGrAcha\4Po\V3Rl\V444#)uDeferrable names in the *pre-assembly* ``tool_defs`` of the session scope — the universe ``tool_call`` may reach. Gates bridge dispatch AND the executor unwrap so a restricted session cannot invoke an out-of-scope tool via the bridge.c3d<"TF%pV'gK \VS4'gK!VxK' R#5irC)r)rQrRr7s& r>rS*scoped_deferrable_names..%s-G :15aEQ :s 00 0)rrFr;r)rr7s&@r>scoped_deferrable_namesr s5'(>>K G :G GGrAc V^8dQhRRRR/#)r9rr+r:rr<)r=s"r>r?r?)s  c m rAcb\V4\9dRV R2#R# \dR#i;i)uFail-fast reason for a registered session-gated GUI tool outside this session's scope (#120413). The generic scope block ("not available ... Use tool_search") sends the model on a round-trip tool_search can never satisfy — the tool is not in this session's catalog at all. Name the missing surface instead. None for anything else (the generic message still applies). Fail-open: never raises.'z' needs a desktop-app session with a GUI surface (preview/terminal panes). This session has none: use it only from the Hermes desktop app, not via tool_search.N)rrrrs&r>out_of_scope_reasonr)sO  T "&> >vkk l ?     s  ..c V^8dQhRRRR/#)r9rr+r:r<)r=s"r>r?r?8sjjSjSjrAc\V4;'g8V\49d\V4e \V4MR;'gRV R2#)zBlock message for a ``tool_call`` naming a tool outside the session's scope. A core tool (deferred by ``defer:`` or not) names its real reason, since tool_search cannot surface it here; anything else keeps the search hint.NrzO' is not available in this session. Use tool_search to find tools you can call.)rrrr rs&r>scope_block_reasonr8s\  % i i+--/$2G2S.d3Y] i i4&ghjrAc$V^8dQhRRRRRR/#)r9r4rrzOptional[Iterable[str]]r:z3tuple[Optional[str], dict[str, Any], Optional[str]]r<)r=s"r>r?r?Bs#% % .% F]% !T% rAc\V4wr#V'dR/V3#\V4^8dI\;QJdRV4F 'gK RM RM !RV44'dR/\V43#\ V^,R,4'd \ RV/R3#V^,R,pV^,R,p\ WA4pV'dR/V3#\V\4P4'gR/\WA43#WER3#)u?Parse a ``tool_call`` invocation into (underlying_name, args, error_msg). Used by: * the dispatcher in ``model_tools.handle_function_call``, * the display layer (so the activity feed shows the underlying tool), * the trajectory recorder. A connector-only batch resolves to ``(CONNECTOR_BATCH_SENTINEL, {"calls": [...]}, None)``: the batch is one dispatch unit owned by the ``model_tools`` bridge branch, and the sentinel is what planners/display layers see. A single local entry keeps the historical single-tool contract unchanged. ``session_tool_names`` is the session's own tool list, when the caller has it. Passed through so a core tool this session cannot reach reports *unavailable* rather than "call it directly" — the static core list cannot tell the two apart. On parse error, returns ``(None, {}, error_message)``. Nc3P"TFp\VR,4'*xK R#5i)rNrL)rQrs& r>rS*resolve_underlying_call..[s R'Q$5ai$@ @ @'s$&TFrrr) rranyrr#r"rrrrFr)r4rentriesrZrraw_argsr~s&& r>resolve_underlying_callrBs*/t4LG R} 7|aCCR'RCCCR'RRRR*7333F+,,''7);TAA 1:f Dqz+&H+DEKR$$ "4)=)?)U)U V VR-dGGG 4 rArC)F)NrF)i)rr"rrrrrr*r rrrrrrfrrr#rrrrrrrrrrr!)crj __future__r functoolsrloggingr collectionsr dataclassesrtypingrrrrr r hermes_cli.config_defaultsr tools.registryr rr rr.rrrrrrrrrrrrrtools.tool_search_validationrrrrr r!tools.connectorsr"r#tools.connectors.searchr$r%r&r' getLoggerr\rVrwr*rzr^rWrarpartialrrrkeysrr;rDrrrrrrrrrrrrrr rrr!r2r;rfrWrrrrr__all__r<rAr>rsG[#  !==5%GDDDD@@Ibb   . / ! $*R*R*RZdCudGUCQVX\^cd[ # / 3]C  (()<>TU35N5S5S5UU$N7$;M$J7$ST O9 A V D RW ;[< #B9x     #.[_#.<@#.L%< 6Q(+3>B+3;?+3W[+3\@BF@.2@D.2?C.2[_.2bG j% P rA