+ lHj]Rt^RIt]P!R4tRRRRRRR R /tR R ltR RltRRltRRltRRlt RRlt RRlt R#)aOne-shot keyless-ring rescue for failed keyed/configured web calls. Stateless by design: a rescue routes THIS call through the free-tier ring (plugins/web/keyless_mcp.py); the next web_search/web_extract call attempts the chosen backend again. Callers must never cache a rescue-served response, or the one-shot rescue becomes sticky for a whole TTL. Logs under the origin (tools.web_tools) logger. Nztools.web_toolsexa EXA_API_KEYparallelPARALLEL_API_KEY firecrawlFIRECRAWL_API_KEYkeenableKEENABLE_API_KEYc$V^8dQhR\/#returnbool)formats";/home/ubuntu/.hermes/hermes-agent/tools/web_tools_rescue.py __annotate__rs   c^RIHpV!4PRR4'gR#^RIHpV!4# \ d"p\ PRT4Rp?R#Rp?ii;i)zV``web.keyless_rescue`` (default on), implicitly off when the keyless tier is disabled.)_load_web_configkeyless_rescueTF)_keyless_tier_enabledz$keyless rescue tier check failed: %sN)tools.web_toolsrgetagent.web_search_registryr Exceptionloggerdebug)rrexcs r_keyless_rescue_enabledrsR0   ! !"2D 9 9C$&&  ;SAs 4 A AA c0V^8dQhR\R\/#)r namer )strr)rs"rrr!sKKsKtKrcVR8Xd^RIHpV!4#^RIHp^RIHp\ PVR4pT!Y'd V!V44#R4#)uDid *name*'s own provider route this call through the anonymous keyless ring? Mirrors the predicate each ring provider evaluates before calling, so eligibility reflects what actually happened. Firecrawl owns extra routes that bypass the ring without a key — the managed Nous Tool Gateway (persisted ``nous`` selection, or the legacy never-configured fallback when the gateway is ready) and a self-hosted ``FIRECRAWL_API_URL`` — so it is asked directly. r)_use_keyless_ringget_provider_env) use_keyless)plugins.web.firecrawl.providerr$agent.web_search_providerr&plugins.web.keyless_mcpr'_RING_KEY_VARSr)r!r$r&r'key_vars& r_ring_vendor_keylessr.!sM {D "":3  r*G t'-g6 JJr JJrc<V^8dQhR\R\R\/#)r original_errorquerylimit)r"int)rs"rrr2s!s3src ^RIHp^RIHp\ VRR4R8wg;V!R4'g-VP 4'dVP 4'gR#\PRT;'gRR ,4^R I H pV!R 4PW#4pVPR 4'g9\PR\VPRR44R ,4R#VPR/4P!RRT;'gRR, R2R7V# \dpR R R\T4/pRp?LRp?ii;i)zTry managed Firecrawl for this call only; None leaves the original error for keyless rescue. Managed Firecrawl is billed, so a caller on free fast search alone never reaches it.r%) web_toolsr!r( perplexityPERPLEXITY_API_KEYNzSweb_search managed Perplexity failed (%s); serving this call from managed FirecrawlNN) get_providerrsuccessFerrorz)managed Firecrawl fallback failed too: %sdatamanaged_primaryz)Primary managed search failed this call ( unknown errorNi,NzS); result served by the managed fallback. The next call will use the primary again.) fallback_from backend_error)r*r&toolsr5getattr_managed_web_search_is_tool_gateway_readyrwarningrr:searchrr"r setdefaultupdate) providerr0r1r2r&_wtr:resprs &&&& r_managed_search_fallbackrN2s9;&&"%5 455S=T=T=V=V^a^x^x^z^z NNhkykk}BFkGH5:K(//= 88I  BCQXZ\H]D^_cDdeOOFB&&'A>CdCdUdfjBkAlmii' K 55'3s845sD)) E 4EE c$V^8dQhR\/#r r)rs"rrrKs$rc\4'dVfR#^RIHp\VRR4pW!9;'g\ V4'*# \ d"p\ PRT4Rp?R#Rp?ii;i)ucTrue when a failed call on *provider* should get a one-shot rescue. Eligible: any call that did NOT go through the keyless ring — a non-ring backend, a ring vendor in keyed mode, or a ring vendor routed through the managed gateway / a self-hosted instance. A ring vendor that walked the ring is NOT eligible: its failure means the ring already failed. NF) _KEYLESS_RINGr!r(z#rescue eligibility check failed: %s)rr+rQrDr.rrr)rKrQr!rs& r_rescue_eligiblerRKsg # $ $(89x,(JJ0DT0J,JJ  :C@sAA A3A..A3c TV^8dQhR\R\R\R\R\/#)r provider_namer0r1r2r )r"r3dict)rs"rrr]s0#s3sW[rc h^RIHp\PRY;'gRR,4V!WV4pVP R4'dAVP R/4P TRT RT;'gR R , R V R 2R 7V#RRRT;'gR RVP RR4 R2/#)zSRescue a failed search via the ring; annotate the result with the original failure.)search_with_failoverz?++8/C .  50012,,3KK,K+LA O rc0V^8dQhR\R\/#)r resultr )rUr)rs"rrrysYY4YDYrc\VPR4;'gR4P4p\VPR44;'gRV9#)ubTrue for a website-policy refusal — intentional, never rescued (it would fetch blocked content).r<r(blocked_by_policyzblocked by website policy)r"rlowerr)r^r<s& r_policy_blocked_resultrbysJ  7#))r * 0 0 2E  ./ 0 X X4OSX4XXrcHV^8dQhR\R\R\R\/#)r rTurlsresultsr )r"list)rs"rrrs(  3 d T d rca^RIHp\S4\V48Hp\S4UUu.uF"wrVV'd\ V4'dK VNK$ pppV'gS#V'dVUu.uF qQV,NK upM \ V4pV3RlV4p \ V R4p \PRT\V4T ;'gRR,4V!V\ V44p V 'd=\;QJdRV 4F 'dK RM R M !RV 44'dS#V F`pVPR 4'dR MVPR /4p \V \4'gKFW R &T ;'gRR,V R&Kb V'd\\V 4\V48XdC\\W{44p \S4UUu.uFwrVV PWV4NK upp#V #uuppiuupiuuppi)aRescue a whole-batch extract failure via the ring. Only genuine failures are re-fetched; policy-blocked entries are preserved verbatim. If the provider broke url/result order parity, every entry is treated as rescueable and the ring's list replaces the batch wholesale. )extract_with_failoverc3<"TF=pSV,PR4'gK#SV,PR4xK? R#5i)r<Nr).0ires& r "_rescue_extract..s3 Uz!WQZ^^G=T%gajnnW%%zs A Azextract failedzKweb_extract backend '%s' failed all %d URL(s) (%s); one-shot keyless rescuer(r8c3D"TFqPRR4xK R#5i)r<r(Nrj)rkrs& rrmrns;7auuWb))7s FTr<NmetadatarXr@rB)r+rhlen enumeraterbrfnextrrGallrrI isinstancerUzip)rTrdrerhparityrlrp rescue_idx rescue_urlserrorsr0r[meta replacementss&&f r_rescue_extractr~s> \SY &F )' 2b 2&H^_`Ha!! 2Jb 39J/Jq77J/tDzK Uz UF&"23N NNUs;'.*>*>B)E$M4 3DEG33;7;333;7;;; uuW~~t1<< B+G dD ! !#0 %3%9%9r4$@D !  #g,#j/1C 45 3H) __doc__logging getLoggerrr,rr.rNrRr\rbr~rrrsc   , - =*&8$j2D K"2$8Y r