+ lHj6*Rt^RIHt^RIt^RIt^RIt^RIt^RIHtH t H t H t H t H t ^RIHt^RIHtHt]P&!R4t]!0Rm4tRRltR R ltR R ltR RltRRltRRltRtRRltRRltRRlt RRRllt!R#)zMLocal argument validation for ``tool_call`` against a deferred tool's schema.) annotationsN)AnyDictIterableListOptionalTuple tool_error)BRIDGE_TOOL_NAMES_registry_entryztools.tool_searchc V^8dQhRRRR/#)noderreturn)formats"A/home/ubuntu/.hermes/hermes-agent/tools/tool_search_validation.py __annotate__rs55s5s5c8\V\4'dVUu.uFp\V4NK up#\V\4'gV#VP 4UUu/uF:wr#VR8wgKY"\ 9d\ P!V4M \V4bK< pppVPR4RJdV#VPR4p\V\4'dV.p\V\4'dRV9d .VORNVR&V#RVRR/./#uupiuuppi)zJSON-Schema-compatible copy honoring OpenAPI ``nullable: true`` (the normal coercion path accepts that shape, so local validation must too).nullableTtypenullanyOf) isinstancelist_schema_for_local_validationdictitems_SCHEMA_LITERAL_KEYScopydeepcopygetstr)ritemkeyvalue normalized schema_types& rrrs $?CDtt,T2tDD dD ! ! %)JJLG$0jcC:4EA#7K0K e,9%@A$0G xx 4'..(K+s##"m +t$$  $!7;!7!7Jv  j66"23 44%EGsD D-0Dc V^8dQhRRRR/#)rrrrboolr)rs"rrr,s , ,3 ,4 ,rc\V\4'd5\;QJdRV4F 'gK R# R#!RV44#\V\4'gR#VP R4p\V\ 4;'dVP R4'*;'gQ\;QJd*RVP44F 'gK R# R#!RVP444#)uTrue when *node* contains a non-local ``$ref`` — local validation must never turn a tool call into an implicit network/file fetch (fail open).c38"TFp\V4xK R#5iN)_schema_has_external_ref).0r%s& r +_schema_has_external_ref..0sCdd+D11dTFz$ref#c3V"TFwrV\9gK\V4xK! R#5ir.)r r/)r0r&r's& rr1r24s-E,:FJC * * ( '',s)))rranyrr#r$ startswithr)rrefs& rr/r/,s$sCdCssCsCsCdCCC dD ! ! ((6 C sC < <)<%< , ,E,:>**,E,,,E,:>**,E,B,,rc V^8dQhRRRR/#)rerrorrrr$r)rs"rrr9sCCrc*Rp\VRR 4Fp\V\4'd,\P!RV4'dVRV 2, pKDTR\V\ 4'dTM\ P!VRR7 R2, pK V#) z:Format a jsonschema error path as a compact argument path. arguments absolute_pathz[A-Za-z_][A-Za-z0-9_]*.[F ensure_ascii]r)getattrrr$re fullmatchintjsondumps)r:pathparts& r_validation_pathrK9s~ D3 dC R\\2KT%R%R avJ D a 4 5 54::dY^;_``ab bD 4 Krc ,V^8dQhRRRRRRRRRR/#)rmessager$rI constraint parametersrrr)rs"rrrDs7WWsWSWcWsWWZWrc\WW#RR7#)zFRetry tool_call with 'arguments' matching the parameters schema above.)rIrNrOhintr )rMrIrNrOs&$$$r_validation_errorrRDs z U WWrc$V^8dQhRRRRRR/#)rnamer$argsdict[str, Any]r Optional[str]r)rs"rrrJs!>>c>>M>rc ^RIHpVPV4p\V\4'gR#VP R4R8XdVP R4MTp\V\4'dVP R4MRp\V\4'gR#VP R4p\V\ 4'd3VUu.uF%p\V\4'gKWq9gK#VNK' upM.pV'd&\RV RR PV4 R 2R RVR 7#\V4p \V 4'd\PR V4R#^RIHp V !V\ V44p ^RIHp ^RIHp T !T 4pTP-T 4T !T!T 4P/T 44pTfR#\1T4p\\3TRR4;'gR4p\4P6!RR\TP844P;4p\=T4R8dTR,R,p\RT RT RT RT R 2 TTTR 7#uupi \ d(\PRTRR7\ T4p ELi;i \*d\PRT4R#i;i \ d\PRTRR7R#i;i) a{Validate ``tool_call`` arguments against the deferred tool's schema. Models invoke deferred tools "blind" (schema unseen) and omit required args; without this, the opaque downstream failure makes cheap models loop. Required-field probe first, then the same schema-guided coercion normal dispatch applies, then jsonschema on the repaired copy. Missing/malformed schemas, no validator, and external refs all fail OPEN. Returns a JSON error string when invalid, ``None`` when the call should dispatch. This restores the concrete-schema checks that the provider cannot perform through the generic ``arguments: object`` bridge. See #5149. registryNrfunctionrOrequiredztool_call to 'z#' is missing required argument(s): , z. The tool was NOT invoked.r<)rIrNrOzASkipping local deferred-argument validation for %s: external $ref)coerce_tool_argsz(Deferred-argument coercion failed for %sT)exc_info) best_match) validator_forz?jsonschema unavailable; keeping required-only validation for %s validatorschemaz\s+ iX:NiUNz...z ' failed argument validation at z (z): z)validate_deferred_call_args failed for %s)tools.registryrZ get_schemarrr#rr$rRjoinrr/loggerdebug model_toolsr^ Exceptionjsonschema.exceptionsr`jsonschema.validatorsra ImportError check_schema iter_errorsrKrCrDsubrMstriplen)rTrU _registryrcfnparamsr\rmissingvalidation_schemar^candidate_argsr`ra validator_clsvalidation_errorrIrNdetails&& rvalidate_deferred_call_argsr~Js38%%d+&$'''-zz&'9Z'GVZZ #V)3B)=)= %4&$''::j) 400 (Px!:a+=A!-AAxP68  $ &I99W%&&AC ZFL L9@ #$5 6 6 LL\^b c ( 4-dDJ?N  8 ;&&78 ""#45%m4E&F&R&RSa&bc  # 01!1;EQQR S)9)A)A%BCIIK v; D\E)F TF"B4&I|3vh&A C*A AGQ  ( LLCTTXL Y!$ZN (   LLZ\` a "  @$QU Vs-J;A(J;+J;I#I+I1 J;>$J;#2J;I1 J=:J;9BJ;J;.J J;JJ;!J84J;7J88J;;#K"!K"c V^8dQhRRRR/#)rrUrVrz*tuple[list[dict[str, Any]], Optional[str]]r)rs"rrrs33n39c3rcVPR4pVfb\VPR4;'gR4P4'g.R3#RVPR4RVPR4/.p\V\4'd\P !V4p\V\4'dV.p\V\4'd V'g.R3#.p\V4EF$wrE\V\4'g .R V R 23u#\VPR4;'gR4P4pV'g .R V R 23u#V\9d .R V R 23u#VPR4pVe-\V\4'dVP4'g/p\V\4'd\P !V4p\V\4'g .R V R23u#VPRVRV/4EK' VR3# \P dp.RT 23uRp?#Rp?ii;i \P dp.R T RT 23uRp?u#Rp?ii;i)uNormalize ``tool_call`` arguments into a ``calls[]`` list of entries. Accepts the advertised batch shape ``{"calls": [{"name", "arguments"}, ...]}`` and, tolerantly, the legacy single shape ``{"name": ..., "arguments": ...}`` (a single call is a batch of one). Each entry's ``arguments`` is coerced to a dict (JSON strings parsed, ``None`` → ``{}``). Returns ``(entries, None)`` or ``([], error_message)``. callsNrTz:tool_call requires 'calls' (an array of {name, arguments})r<z%tool_call 'calls' is not valid JSON: z@tool_call 'calls' must be a non-empty array of {name, arguments}ztool_call calls[z/] must be an object with 'name' and 'arguments'z] requires a 'name'ztool_call cannot invoke 'z' (it is itself a bridge tool)z].arguments is not valid JSON: z].arguments must be an object) r#r$rrrrGloadsJSONDecodeErrorrr enumerater append)rU raw_callseentriespositionrawrTraw_argss& rnormalize_tool_call_entriesrsN!I488F#))r*0022SS Sdhhv. TXXk=RST )S!! C 9-I)T""K i & &iUUU$&G"9- #t$$)(3bcc c3776?((b)//1)(3FGG G $ $24&8VWW W77;'   8S 9 9(..BRBR H h $ $ [::h/(D)))(3PQQ Qk8<=-.. D=?## C>qcBB B C4'' [-hZ7VWXVYZZZ [s<HIH?.H:4H?:H?I- I( I-(I-ic V^8dQhRRRR/#)rrzlist[dict[str, Any]]rr$r)rs"rrrs3rchV^,p\P!VPR/4RRR7p\V4\8dRpRP \P!VR,RR7V4p\V4^8dR\V4^, R 2MR pR \V4 R V V R 2#)zRejection for a multi-entry batch that names a local tool. Restates the valid shape with the caller's OWN first entry: small models re-send an identical batch when told only the constraint, and the echoed payload is what gets them unstuck.r<F)rA separatorsz{...}z*{{"calls":[{{"name":{},"arguments":{}}}]}}rTr@z then issue the remaining z* call(s) as separate tool_call invocationsrz-??ij*, Gs7|nU!79+-_ arc V^8dQhRRRR/#)rrTr$rr)rs"rrrsRRRRrcRV R2#)aJWhy a registered tool absent from THIS session cannot be reached, whatever its door. Deferral is a property of the tool, availability one of the session: a deferred tool the session does not carry (``defer: [delegate_task]`` in a worker) is no more findable through ``tool_search`` than a stripped core tool is callable directly.'up' is not available in this execution context. Don't retry it — state the assumption and proceed with the work.r)rTs&runavailable_in_session_reasonrs vQ QRrc$V^8dQhRRRRRR/#)rrTr$session_tool_namesOptional[Iterable[str]]rrWr)rs"rrrs( L LC L=T LYf LrcVeV\V49dR#^RIHpHpW!49g\ V4fR#V!V4;'g \ V4#)aiThe unavailability message when a core tool is missing from the session's own tool list, whether or not ``defer:`` moved it behind the bridge; None without session context, when the session carries it, or for MCP/plugin/unregistered names (an absent one may be a stale catalog that ``tool_search`` can still refresh). A missing GUI surface keeps its own reason.N)_core_tool_namesout_of_scope_reason)settools.tool_searchrrr r)rTrrrs&& rsession_unavailable_errorrsO !TS1C-D%DG #%%)>)F t $ K K(Ed(KKrc$V^8dQhRRRRRR/#)rrTr$rrrr)rs"rrrs(\\s\8O\[^\rcja^RIHpW!49g\V4e&VeV\V49d \ V4#RV R2#RV 2o^RIHp\V3RlVP444pV'dRRPR V44 R 2MR pRV R V 2# \d.pL=i;i) uRejection for a ``tool_call`` naming something that is not a deferred tool. Two different mistakes reach here and need opposite corrections: a directly-listed tool (call it without the bridge) vs. an unknown name — typically a deferred MCP tool cited by its bare suffix instead of the full ``mcp____{tool}`` name. Telling the second group 'call it directly' is the opposite of what they must do. ``_HERMES_CORE_TOOLS`` is a *static* list, so a core tool stripped from this session's toolset (clarify in a subagent, kanban worker) otherwise gets told "call it directly" — an instruction that can never resolve, burning a turn on a confident wrong answer. When the caller passes the session-scoped names, absence is reported as unavailability instead. Stays None for callers with no session context; deliberately never consults the global blocklist, because a top-level session legitimately has these tools. )rrz[' is a directly-listed tool, not a deferred one. Call it directly instead of via tool_call.__rYc3X<"TFqPS4'gKVxK! R#5ir.)endswith)r0nsuffixs& rr1'not_deferrable_error..s['D! SYHZAA'Ds* *z Did you mean r]c38"TFp\V4xK R#5ir.)repr)r0cs& rr1rs&C 1tAww r3?z( Use tool_search to find the exact name.z' is not a known tool name. Deferred tools must be invoked through tool_call by the exact name tool_search returns (e.g. mcp____{tool}).) rrr rrrerZsortedget_all_tool_namesrkrg)rTrrrZ candidatesrQrs&& @rnot_deferrable_errorrs3 !!_T%:%F  )d#>P:Q.Q06 6D6== >$[F+'B'B'D[[ KUnTYY&C &CCDA F; vTTXSY [\  s )B"" B21B2>enumconstdefaultexampleexamplesr.)"__doc__ __future__rr!rGloggingrDtypingrrrrrrrer tools.tool_search_catalogr r getLoggerrh frozensetr rr/rKrRr~rrrrrrrrrrsS"  ==%H   . / !TU52 ,W >B3l"R L\\r