+ lHjE*a0t$Rt^RIHt^RIt^RIt^RIt^RIt^RIt^RI H t H t ^RI H t ]P!]4t!RR4t]P$!4t/tR]R&R sR ]R &R sR ]R&RsR]R&RsR]R&RtRt]!4tR]R&RARRlltRRltRRlt RR lt!R!R"lt"R#R$lt#R%R&lt$R'R/R(R)llt%R*R+lt&R,R-lt'R.R/lt(RAR0R1llt)R2R3lt*RBR4R/R5R6lllt+R7R8lt,R9R:lt-R;R<lt.R=R>lt/R?R@lt0R#)Cu Server→client JSON-RPC requests: the backend asks the renderer a question and waits for the response frame carrying the same ``id``. JSON-RPC is peer-to-peer; this is the backend's half. Every "ask the renderer" bridge (clarify, approval, sudo, secret, vault prompts, desktop GUI reads, MCP setup consent, the tour) is one :func:`send` (blocking) or :func:`send_async` (queue-backed approvals) and one response frame from the client — no paired ``*.request`` notification / ``*.respond`` method, no per-kind ``*.expire``. Ids are ``srq-<12 hex>``: strings never collide with client-minted integer ids, and the random part keeps a compute-host child's requests distinct from the parent's when both reach one socket. A request that times out or is cancelled (interrupt, session close, shutdown) emits ONE ``request.cancel {id, method, reason}`` notification so every renderer tears the card down the same way. A response for an id that is no longer open is dropped — the wait already returned. Reconnect: unanswered requests are returned as ``open_requests`` by ``session.resume`` / ``session.activate`` / ``session.events.since`` (:func:`open_requests`); the shared TypeScript channel re-delivers them as if they had just arrived, so the notification replay ring never has to carry "a question still waiting for an answer". Batch clarify keeps per-question locks (``clarify.lock`` → :func:`lock_answer`): answers stay editable until every question is locked, locked answers survive a timeout, and the last lock resolves the request with the full answer set. Window-owned bridges (``preview.read`` / ``preview.act`` / ``terminal.read`` / ``window.read`` / ``tour``) are answered only by the window showing the session; every other attached window declines with :data:`NOT_SHOWN_CODE`. A decline does not settle the request — the owner may still answer — until every answering client attached to the session has declined; then the request resolves with :data:`NOT_SHOWN_MESSAGE` at once instead of the agent waiting out the deadline (#119333). Capability: a client says once per connection that it answers server→client requests (``client.capabilities {server_requests: true}`` → :func:`advertise`). A WebSocket client that never did is a build older than this half of the protocol — it drops the frame silently and the agent would wait the full deadline (clarify's 300s) for nothing — so :func:`send` / :func:`send_async` return the same ``None`` an error response produces without writing the frame (#112548). ) annotationsN)AnyCallable) settle_batchcJ]tRt^3tR tRRRR/RRlltRRltRR ltR tR#) ServerRequest on_resultqidsNc 0V^8dQhRRRRRRRRRR R R /#) sidstrmethodparamsdictr list[str] | Nonerz$Callable[[dict | None], None] | NonereturnNone)formats"@/home/ubuntu/.hermes/hermes-agent/tui_gateway/server_requests.py __annotate__ServerRequest.__annotate__Es9**C**d*EU*@*LP*c R\P!4PR, 2VnWnW n\ V4Vn\P!4Vn RVn RVn \P!4VnV'd \V4MRVn/VnWPn\'4VnRVnRVnR#)zsrq-:N NNF)uuiduuid4hexidr rrr threadingEventeventresultansweredtime created_atlistr lockedrsetdeclinedwriting withdrawn)selfr rrr rs&&&&$$r__init__ServerRequest.__init__Es))#./0 6l __& #'  ))+"&DJD -/ " U  %)rcV^8dQhRR/#r rrr)rs"rrrYsCCtCrc  nRRRVPRVPRRVP/VPC/#)jsonrpcz2.0rrr session_id)rrr r)r-s&rframeServerRequest.frameYs:5$4;;<AT[[AC CrcV^8dQhRR/#r1r)rs"rrr]sHH$Hrc RVP/VPCpVP'd\VP4VR&RVPRVP RV/#)u``open_requests`` entry: the request as sent, plus the batch answers locked so far so a reconnecting client restores its ✓ state.r4answersrrr)r rr(rrr)r-rs& rsnapshotServerRequest.snapshot]sR8DKK8 ;;; $T[[ 1F9 dggxhGGr)r$r&r*r"rr(rrrr r#r r,r+) __name__ __module__ __qualname____firstlineno__ __slots__r.r5r:__static_attributes__rrrrr3s0I"*X\*CG*(CHHrrzdict[str, ServerRequest]_opencR#Nr)r5s&rrElsdrCallable[[dict], Any]_writecR#rDr)r"r payloads&&&rrErEmsTrCallable[[str, str, dict], Any]_emitcR#)Trr s&rrErEpsrCallable[[str], bool] _answerablec.#rDrrMs&rrErEssbrzCallable[[str], list]_clientsi4zNo Hermes Desktop window is showing this chat, so its preview, terminal and tour are out of reach. Ask the user to open this chat in the Desktop app, then retry.r)_answering_clientsc ,V^8dQhRRRRRRRRR R /#) r write_jsonrFemitrJ answerablerNclientszCallable[[str], list] | Nonerrr)rs"rrrs408W0;Wcgrc"WVusssVeVsR#R#rD)rGrKrOrQ)rTrUrVrWs&&&&r bind_sinksrYs"",:FE;rc$V^8dQhRRRRRR/#)r transportrserver_requestsboolrrr)rs"rrrs!222t22rc\;_uu_4V'd\PV4M\PV4RRR4R# +'giR#;i)u_Record whether *transport*'s client answers server→client requests (``client.capabilities``).N)_lockrRadddiscard)r[r\s&&r advertiserbs2    " "9 -  & &y 1 s 4A  A c V^8dQhRRRR/#)r r[rrrr)rs"rrrs..c.d.rc\;_uu_4\PV4RRR4R# +'giR#;i)z.Drop a disconnected transport's advertisement.N)r_rRrar[s&rforgetrfs! ""9- s / A c V^8dQhRRRR/#)r r[rrr]r)rs"rrrs////rcn\;_uu_4V\9uuRRR4# +'giR#;irD)r_rRres&ranswers_requestsris .. s # 4 c$V^8dQhRRRRRR/#)r rr r rr]r)rs"rrrs!#CDrcX\V4'dR#\PRW4R#)Fupserver request %s for %s not sent: the attached client predates server→client requests (update the Hermes app)T)rOloggerinfo)rr s&&r _unanswerablerns'3 KK*+18 rc$V^8dQhRRRRRR/#)r reqrreasonr rrr)rs"rrrs&]]m]S]T]rc h\RVPRVPRVPRV/4R#)zrequest.cancelrrrqN)rKr rr)rprqs&&r _emit_cancelrss) CGGdCFFHcjj(TZ%[\rc V^8dQhRRRR/#)r rprrrr)rs"rrrs%%=%T%rc ^RIHpVPPVP4pVf\ RVP: R24hVP VRVP/VPC4wr4Ve \V4h\;_uu_4RVn V\VP&RRR4\VP44\;_uu_4RVn VP pRRR4Xe\#Y4R#R# +'giLg;i +'giL6;i \;_uu_4RTn TP pRRR4i +'gii;i;i))registryNzserver request z) has no contract in tui_gateway/contractsr4TF)tui_gateway.contractsrwSERVER_REQUESTSgetr RuntimeErrorvalidate_paramsr r ValueErrorr_r+rBrrGr5r,rs)rp contractscontract_problemr,s& r _registerrs;((,,SZZ8H_SZZN:cdee**8lCGG5Zszz5Z[JA!!  cff  &syy{ UCK IS$  UUUCK IUUUs<D 7D3D  D D0 3E2E  E2 E/ *E2r c 0V^8dQhRRRRRRRRRR R R /#) r rr r rrtimeoutz float | Noner rrz dict | Noner)rs"rrrs8$$$3$$,$$+6$rc\W4'dR#\WW$R7p\V4VPP V4\ ;_uu_4\PTPR4TJpTPTP\TP4rpRRR4X'dX #X'd(\TR4TPe\!X RR7#R# \ dd\ ;_uu_4\PTPR4TJpRRR4M +'giM;iX'd \TR4hi;i +'giL;i)uSend one request and block for the response ``result`` (a dict). Returns ``None`` when the renderer never answered (timeout, cancel, or an error response — e.g. a client without a handler for ``method``). ``timeout`` semantics: None → wait until answered or cancelled, 0 → return immediately, > 0 → bounded wait. A batch (``qids``) that settled returns ``{"answers": , "outcome"}`` (``submitted`` / ``cancelled`` / ``timed_out``). N)r interruptedr timed_outended)rnrrr"wait BaseExceptionr_rBpoprrsr$r#rr(r r) rr rrr rp still_openrr$r#r(s &&&$$ rsendrsV!! V 7C cN  w IIcffd+s2 #&<<T#**=M&   S)$ 88 k: : + U36640C7JUUU  m ,  s6C(AE(E#D-$ E- D= 8EE E) c ,V^8dQhRRRRRRRRRR /#) r rr r rrrzCallable[[dict | None], None]rzCallable[[str], None]r)rs"rrrs1sd?\avrca\W4'd V!R4R#\WW#R7o\S4RV3RllpV#)a!Send one request whose wait is owned elsewhere (the approval queue's own timeout). ``on_result`` runs on the dispatching thread when the response lands. Returns ``settle(reason)``: call it when the underlying wait ends; if the request is still open it is withdrawn with ``request.cancel``.NcR#rDr)rqs&rrEsend_async..sdr)rc V^8dQhRRRR/#)r rqr rrr)rs"rr send_async..__annotate__s&&s&t&rc<\;_uu_4\PSPR4RJpRRR4X'd\ SV4R#R# +'giL(;irD)r_rBrrrs)rqrrps& rsettlesend_async..settles@ U36640 $   LL  Y 'g5   #ttzz9eWFW*XYZ    }}  cjj!IIMMO '  s*E9F (&F F *AF 9 F F c$V^8dQhRRRRRR/#)r r5rr[rrr]r)rs"rrrs!##D#S#D#rc tVPR4p\V\4'gR#\V4'd \ W!4#\ ;_uu_4\ PV4pVf"\PRV4RRR4R#\ PVR4RV9dA\PRW#PVPR44RRuVn Vn MnVPR4p\V\4'dTM/Vn VP'd&\VP VP4Vn RVn RRR4XP"eVP#VP4VP$P'4R# +'giLU;i) uRoute one client response frame to its open request. False when nothing is waiting for that id (already timed out / cancelled, or owned by another process — see the compute-host bridge). *transport* is the client connection the frame arrived on (counts a NOT_SHOWN_CODE decline).rFNz;server request %s: response dropped, request no longer openrz.server request %s (%s) answered with error: %sr#T)rzrr rrr_rBrlrrrr#r$rr rr(rr"r))r5r[rrpr#s&& rresolve_responsers: ))D/C c3  U'' iin ; LLVX[ \   #t e  LLI3PZPZ\a\e\efm\n o'+U $CJ YYx(F#-fd#;#;CJxxx*#**cjjA CL- . }}  cjj!IIMMO 5 s1F'BF'.,F'' F7 c(V^8dQhRRRRRRRR/#)r request_idr question_idanswer str | Nonerrr)rs"rrr?s)Cc:JZrcD\;_uu_4\PV4pVeVPf RRR4R#WP9d\ RV: 24hW#P V&VPUu.uFqDVP 9gKVNK ppV'g;\ VP RR7RuVnVn\PVR4RRR4X'gXPP4V#uupi +'giL9;i)aLock one batch-clarify answer (update-in-place; ``None`` = skipped). Returns the question ids still unanswered; the last lock resolves the request with the full ``{"answers"}`` set. ``None`` when no open batch has that id (expired or foreign); ``ValueError`` for an unknown question id.Nzunknown question_id submittedrT) r_rBrzr r}r(rr#r$rr"r))rrrrpqid remainings&&& r lock_answerr?s ii # ;#((*  hh &3K?CD D"( ;$'HHFHS3::0ESSH F'3CJJk'RTX $CJ IIj$ '     G s*)D;D=D D AD D D rc(V^8dQhRRRRRRRR/#)r r rrqr rrintr)rs"rrrSs) 3:adrcH\;_uu_4\P4Uu.uF3pVeVPV8XgKVeVPV8XgK1VNK5 ppVFp\P VP R4VPe&\VPRR7RuVn Vn MRRuVn Vn VP'gKyWn K VUu0uF"q3P'dKVP kK$ ppRRR4XFZpVPeVPR4VPP!4VP X9gKO\#W14K\ \%V4#uupiuupi +'giL;i)usWithdraw open requests — only *sid*'s (session.interrupt must not touch other sessions'), or every one when *sid* is None (shutdown); *method* narrows it to one request kind. Blocked waits return None (a batch returns its locked answers with ``outcome: cancelled``); queue-backed requests run ``on_result(None)`` so their owner can settle. Returns the number withdrawn.N cancelledrTF)r_rBvaluesr rrrr rr(r#r$r+r,rr"r)rslen)r rqrrptargets announceds&&$ rcancelrSs; "',,.d.3{cggn;A>SZZ[aMa3.dC IIcffd #xx#+7 ++VX\( CL+/( CL{{{ & (/BwkkVSVVw B  == $ MM$   66Y   %  w<#dC sAFFFFA8FF*F F F F F! c V^8dQhRRRR/#)r r r rz list[dict]r)rs"rrrms,,s,z,rca\;_uu_4\V3Rl\P44RR7pRRR4XUu.uFq"P 4NK up# +'giL/;iuupi)z,Unanswered requests for *sid*, oldest first.c3L<"TFqPS8XgKVxK R#5irDrM).0rpr s& r open_requests..psGns3ssns$ $cVP#rDr&rs&rrEopen_requests..ps WXWcWcrkeyN)r_sortedrBrr:)r reqsrpsf r open_requestsrmsI GellnGMcd &* +dsLLNd ++  +s+A"A5" A2 cV^8dQhRR/#)r rrr)rs"rrrtsCrcz\;_uu_4\\4uuRRR4# +'giR#;i)uUnanswered server→client requests across every session: the process is waiting on a human (clarify, approval, sudo, secret, ...) and must not be treated as idle.N)r_rrBrrropen_request_countrts 5z s) : c V^8dQhRRRR/#)r r r rr)rs"rrr{sHHcHcHrc\;_uu_4\P4Uu.uFqPV8XgKVNK ppRRR4X'd\ VRR7P #R#uupi +'giL7;i)uaMethod of the oldest open request for *sid* ("" when none) — the session is waiting on a human.NcVP#rDrrs&rrEpending_kind..s1<rs'"H#  ,   8 $0H0Hf "$$ !32)I&I&6 "5#1 0` %C2. / ]%.$"&$N&K 6#L(X\4,Hq #r