+ lHj$ Rt^RIHtHtHtHt^RIHtHt^RI H t ^RI H t ^RIHt^RIHtHtHtHtHt^RIHtHtRR R R R R R R R R RR RR RR/RRlltRRRRRRRRRRRR]!]4RR/R RR!R"R#RR/RRRRRR/R$RR%RR&/R'RRRR(/R)RRR*]RR+//R,R.R-R/./RR./R/RR%RR0//R,.//t]P8!RR1]R2R3R4R57]P8!R6R7]R8R9R:7R #);zConnection lifecycle tool for managed gateway accounts and local MCP servers. Disconnecting accounts remains a portal-only user decision. )AnyCallableDictOptional)MANAGE_CATALOG_SCHEMAmanage_catalog)config)run_managed_action)run_mcp_operation) ALIAS_PATTERN ALL_ACTIONS MCP_ACTIONSnormalize_targetsvalidate_action)registry tool_errorclient_factoryN mcp_backend session_id tool_call_idturn_idconnection_callbackconnectors_available card_surfaceFcV^8dQhR\\\3,R\\.\3,,R\\,R\\,R\\,R\\,R\\\\\3,.\\,3,,R\\.\ 3,,R \ R \/ #) argsrrrrrrrrreturn)dictstrrrrbool)formats":/home/ubuntu/.hermes/hermes-agent/tools/connectors/tool.py __annotate__r#s sCx.Xb#g./#    3- c]"(DcN+;Xc]+J"KL#8BH#56 c v\VPR4;'gR4P4P4p \ VPR44wrp V 'd \ V 4#\ WV 4p V 'd \ V 4#V \9d\WVWcVR7#\WVWWEWgVR7 #)actionstatus connectors)backendrrr)rrrrrrr) rgetstriplowerrrrr r r )rrrrrrrrrr&managed mcp_targets target_error action_errors&$$$$$$$$ r"manage_connectionsr1s(#//x 0 6 6 8 > > @F):488L;Q)R&G,,''"6K@L,''   3Ye  %</!  r$namer1 descriptionu Connect the user to apps. Two kinds: a hosted connector account (Gmail, Notion, ...) served through the tool gateway, and a local MCP server from the bundled catalog. Targets go in 'connectors': a bare slug or {"name": "gmail"} is a hosted connector account; {"name": "linear", "mcp": true} is a local MCP server. Many names exist on both sides, so the user's own words decide. Pass "mcp": true only when the user asks for an MCP server, a local server or an install, or when the name exists only as a catalog entry; otherwise the target is hosted. 'connect' and 'reconnect' are hosted actions; 'install', 'enable' and 'authorize' are MCP actions. A target the other side owns is refused with the call that does work. Hosted actions: 'display' (desktop only; elsewhere returns status) shows every connector and waits for Continue (300 s); put slugs to suggest in 'connectors'. Returns connected/newly_connected (+timed_out); the user saw the list, so do not repeat it. 'connect' is for an app the user names. 'status' lists connectors and whether each is connected; 'connect' starts an authorization for the given connectors; 'reconnect' checks each one and repairs only what is not connected ('force': true restarts even a working one, for an account switch). A second account of one app is 'connect' with a new 'alias': pick a short lowercase name from the user's words (e.g. 'work'), and ask the user if unsure. 'status' lists each connector's accounts; 'rename' names or renames one. Pass SEVERAL slugs in one call. In the desktop app, the terminal UI and the interactive CLI the call shows the user a card and blocks until every app is connected, skipped, or the deadline passes; the result lists each target as connected / skipped / not_connected and never carries a link. Where no card exists (a one-shot run, a scheduled job, a messaging platform) the result carries a connect_url per app for the USER to open in a browser (never open it yourself); ask them to say when they are done, then use 'status'. When a hosted connector tool call returns CONNECTION_REQUIRED, use 'connect'. MCP actions (every target must carry "mcp": true): 'install' adds a catalog entry, 'enable' re-enables a disabled configured server, 'authorize' runs its OAuth. They show the user an approval card and block until it settles. Never hand-edit mcp_servers config — always use this tool. After a skip or a timeout, do not re-ask on your own: continue without the app or ask in chat. A later request from the USER for that same app is not a re-ask — run it. A connected server's tools are named in the result and are callable at once through tool_describe/tool_call. Where no card exists an MCP target runs at once and the result says what happened, with a link for the user to open when one is needed. This tool can NOT disconnect, delete, or revoke an account — that is deliberately user-only. When asked, say so and direct the user to the Nous Portal (their org's Connectors page) or the desktop app. parameterstypeobject propertiesr&stringenumzDefaults to status. connect, reconnect and rename take hosted connector slugs only. install, enable and authorize take mcp:true targets only.r(arrayitemsanyOfmcpbooleanzYtrue = a local MCP server from the catalog; absent or false = a hosted connector account.aliaszHosted only: the account's name. connect: a new name adds another account; reconnect: repairs that account; rename: its current name (or its label when unnamed). One aliased target per call.topatternzrename only: the new name.requiredadditionalPropertieszTargets. REQUIRED for every action but status and display (e.g. ["gmail", {"name": "linear", "mcp": true}]); optional filter for status. A bare slug is a hosted connector, so an MCP server needs the object form with "mcp": true.forcezXreconnect only: restart the authorization even if the app is connected (account switch). connectionsc v\WPR4VPR4\PR7#)rr)rrr)r1r*gateway_configrrkws&,r"rJs*1  -BFF>r_s 10O=72pp/37"&  !%  #' "PT:>F " HH [)P  *"H( &(: %$*I$1)N("!($*H$1)d*"!%$*H$-}$13O'"#+.'2E5 B/I)T  yg7 p Bu;OcL    $  ; $    T  r$