.cjDR DUdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlZddlmZddlmZddlmZddlmZmZmZmZmZddlmZejeZdZ da!eee"d <ej#Z$d efd Z%d e&d dfd Z'dZ(dZ)dZ*dZ+dZ,dZ-dZ. ddl/m0Z0m1Z1ddl2m3Z3dZ( ddl4m5Z5dZ)n #e6$rdZ)YnwxYw ddl4m7Z7dZ8n #e6$rdZ8YnwxYw ddl9m.Z.n #e6$re:dYnwxYw ddl;mZ>m?Z?m@Z@mAZAmBZBmCZCdZ*n #e6$re:dYnwxYw ddl9mDZDmEZEdZ,n #e6$re:dYnwxYw ddl9mFZFmGZGmHZHmIZIdZ+n #e6$re:dYnwxYwn #e6$re:dYnwxYwd eJfd ZKeKZ-e(re-se:d!d eJfd"ZLeLZMejNejOejOejPejQejQejQejQd#ZRd$ZSd%ZTd&ZUd'ZVd%ZWd$ZXd(ZYd)ZZd*e[d e[fd+Z\d,Z]d&Z^e_hd-Z`e_hd.Zae jbd/e jcZde jbd0Zed1e&d e&fd2Zfd3eegd egfd4Zhd5e&d e&fd6Zid7ejd e&fd8Zk dd9l9mlZmn #en$rd:ZmYnwxYwd7ejd eJfd;Zoe jbde jpd?fe jbd@e jpdAfe jbdBe jpdCfe jbdDe jpdEfe jbdFe jpdGfe jbdHe jpdIfe jbdJe jpdKfe jbdLe jpdMfe jbdNe jpdOfg Zqd e&dPe&dQe&d ee&fdRZrdSegdTe&d egfdUZsdVZtdWe&d e&fdXZudYe&dSegd eve&egffdZZwdYe&d[exd eve&exffd\Zyd]e&d e&fd^Zzd e&fd_Z{d`Z|e|dazd'zdazZ}dbe&d]e&d e&fdcZ~d e&fddZdd e&d e&fdfZGdgdheZGdidjeZd7ejd ejfdkZd7ejd eJfdlZd7ejd e&fdmZd e&dned e&fdoZd e&dpegfdqZd7ejd e&fdrZedsfdtZGdudvZdwegd e&d e&fdxZGdydzZGd{d|ZiZee&efe"d}<eZee&e"d~<iZee&e&fe"d<iZee&e[fe"d<iZee&efe"d<dZdZd e&d dfdZd e&d dfdZd e&d eJfdZiZee&efe"d<iZee&e[fe"d<d'ZdZd e&d dfdZd e&d dfdZded eJfdZd e&d eJfdZdd(ddd|dede[d eJfdZd(dd e&dd|de&de[d eJf dZdaeve"d<d evfdZd7ejd eJfdZd e&d7ejde&fdZdZeve"d<dZd7ejd eJfdZd e&d7ejde&fdZeZee"d<iZee&e&fe"d<daeeje"d<daeeje"d<ej#ZiZeee&fe"d<eZee"d<iZeee&fe"d<iZeeefe"d<d efdZdZeve&dfe"d<ded efdZdZdZddZdZdde[fdZd e&fdZdZdee&egfd ee&egffdZd ee&egffdZde&dpegd efdZd e&ded eJfdZd e&d eefdZded dfdZd e&dPe&de[fd„Zd e&de[fdÄZd e&de[fdĄZd e&de[fdńZd e&de[fdƄZd e&fdDŽZdwegdzd egfdȄZde&d e&fdʄZdZdZd e&dPe&d e&fd̈́Zd e&d egfd΄Zd e&d eegfdτZdede&d ee&fdфZddedeJd eJfdӄZdpegde&d ee[fdՄZdddddڜZdddddڜZdPe&d e&d dfd݄ZdPe&d dfdބZd e&dedpegd eegfd߄Zd ee&fdZde&dedpegd ee&fdZde&dpegd ee&fdZdee&egfd ee&fdZd ee&fdZdPe&d eJfdZd eegfdZd ee&eevffdZej#Zd eJfdZd efdZdddddeJd efdZdexded efdZdZ ddeJd ee&d dfdZd eJfdZdddeJd eJfdZdS)a' MCP (Model Context Protocol) Client Support Connects to external MCP servers via stdio, HTTP/StreamableHTTP, or SSE transport, discovers their tools, and registers them into the hermes-agent tool registry so the agent can call them like any built-in tool. Configuration is read from ~/.hermes/config.yaml under the ``mcp_servers`` key. The ``mcp`` Python package is optional -- if not installed, this module is a no-op and logs a debug message. Example config:: mcp_servers: filesystem: command: "npx" args: ["-y", "@modelcontextprotocol/server-filesystem", "/tmp"] env: {} timeout: 120 # per-tool-call timeout in seconds (default: 300) connect_timeout: 60 # initial connection timeout (default: 60) keepalive_interval: 10 # liveness ping cadence in seconds (default: # 180). Set below the server's session TTL for # servers that GC idle sessions quickly (e.g. # Unreal Engine editor MCP, ~15s). Floored at 5s. idle_timeout_seconds: 3600 # optional stdio recycle after idle max_lifetime_seconds: 86400 # optional stdio recycle after age # The recycle settings may also live under lifecycle: {...}. # Use 0 to disable either recycle limit. github: command: "npx" args: ["-y", "@modelcontextprotocol/server-github"] env: GITHUB_PERSONAL_ACCESS_TOKEN: "ghp_..." supports_parallel_tool_calls: true # tools from this server may run concurrently remote_api: url: "https://my-mcp-server.example.com/mcp" headers: Authorization: "Bearer sk-..." timeout: 180 skip_preflight: true # bypass the content-type probe for a valid # Streamable HTTP endpoint that answers HEAD/GET # with a non-MCP content type but serves real # MCP over POST. Default: false. searxng: url: "http://localhost:8000/sse" transport: sse # use SSE transport instead of Streamable HTTP timeout: 180 connect_timeout: 10 command: "npx" args: ["-y", "analysis-server"] sampling: # server-initiated LLM requests enabled: true # default: true model: "gemini-3-flash" # override model (optional) max_tokens_cap: 4096 # max tokens per request timeout: 30 # LLM call timeout (seconds) max_rpm: 10 # max requests per minute allowed_models: [] # model whitelist (empty = all) max_tool_rounds: 5 # tool loop limit (0 = disable) log_level: "info" # audit verbosity Features: - Stdio transport (command + args) and HTTP/StreamableHTTP transport (url) - SSE transport (transport: sse) for MCP servers using the SSE protocol - Automatic reconnection with exponential backoff (up to 5 retries) - Environment variable filtering for stdio subprocesses (security) - Credential stripping in error messages returned to the LLM - Configurable per-server timeouts for tool calls and connections - Thread-safe architecture with dedicated background event loop - Sampling support: MCP servers can request LLM completions via sampling/createMessage (text and tool-use responses) - Parallel tool call opt-in: per-server ``supports_parallel_tool_calls`` flag allows concurrent execution of tools from the same server Architecture: A dedicated background event loop (_mcp_loop) runs in a daemon thread. Each MCP server runs as a long-lived asyncio Task on this loop, keeping its transport context alive. Tool call coroutines are scheduled onto the loop via ``run_coroutine_threadsafe()``. On shutdown, each server Task is signalled to exit its ``async with`` block, ensuring the anyio cancel-scope cleanup happens in the *same* Task that opened the connection (required by anyio). Thread safety: _servers and _mcp_loop/_mcp_thread are accessed from both the MCP background thread and caller threads. All mutations are protected by _lock so the code is safe regardless of GIL presence (e.g. Python 3.13+ free-threading). N)SimpleNamespace)Callable)datetime)Any CoroutineDictListOptional)urlparseg(@_mcp_stderr_log_fhreturnct5ttcdddS ddlm}|dz }|dd|dz }t |dd d d }||anl#t$r_}t d | t tj dd an#t$rtj aYnwxYwYd}~nd}~wwxYwtcdddS#1swxYwYdS)a^Return a shared append-mode file handle for MCP subprocess stderr. Opened once per process and reused for every stdio server. Must have a real OS-level file descriptor (``fileno()``) because asyncio's subprocess machinery wires the child's stderr directly to that fd. Falls back to ``/dev/null`` if opening the log file fails. Nr)get_hermes_homelogsT)parentsexist_okzmcp-stderr.logautf-8replace)encodingerrors bufferingz0Failed to open MCP stderr log, using devnull: %swr)_mcp_stderr_log_lockr hermes_constantsrmkdiropenfileno Exceptionloggerdebugosdevnullsysstderr)rlog_dirlog_pathfhexcs 0/home/ice/.hermes/hermes-agent/tools/mcp_tool.py_get_mcp_stderr_logr-s ""  )%"""""""" 0 8 8 8 8 8 8%o''&0G MM$M 6 6 6!11HhgiSTUUUB IIKKK!#   0 0 0 LLKS Q Q Q 0%)"*cG%L%L%L"" 0 0 0&)Z""" 0  0"/""""""""""""""""""s_C=AA>=C=> C'C"$CC"CC"CC"C="C'' C==DD server_namect} tjd}|d|d|d|dS#t $rYdSwxYw)aWrite a human-readable session marker before launching a server. Gives operators a way to find each server's output in the shared ``mcp-stderr.log`` file without needing per-line prefixes (which would require a pipe + reader thread and complicate shutdown). z%Y-%m-%d %H:%M:%Sz ===== [z] starting MCP server 'z' ===== N)r-rnowstrftimewriteflushr!)r.r*tss r,_write_stderr_log_headerr5s   B \^^ $ $%8 9 9 NRNN NNNOOO       sAA(( A65A6Fz 2025-03-26) ClientSessionStdioServerParameters) stdio_clientT)streamablehttp_client)streamable_http_client)LATEST_PROTOCOL_VERSIONzRmcp.types.LATEST_PROTOCOL_VERSION not available -- using fallback protocol version) sse_clientzAmcp.client.sse.sse_client not available -- SSE transport disabled)CreateMessageResultCreateMessageResultWithTools ErrorDataSamplingCapabilitySamplingToolsCapability TextContentToolUseContentz5MCP sampling types not available -- sampling disabled)ElicitRequestParams ElicitResultz;MCP elicitation types not available -- elicitation disabled)ServerNotificationToolListChangedNotificationPromptListChangedNotificationResourceListChangedNotificationzGMCP notification types not available -- dynamic tool discovery disabledz6mcp package not installed -- MCP tool support disabledctsdS dtjtjvS#t t f$rYdSwxYw)zCheck if ClientSession accepts ``message_handler`` kwarg. Inspects the constructor signature for backward compatibility with older MCP SDK versions that don't support notification handlers. Fmessage_handler_MCP_AVAILABLEinspect signaturer6 parameters TypeError ValueErrorr,_check_message_handler_supportrUsV u G$5m$D$D$OOO z "uu+AAzKMCP SDK does not support message_handler -- dynamic tool discovery disabledctsdS dtjtjvS#t t f$rYdSwxYw)aeCheck if ClientSession accepts the ``logging_callback`` kwarg. Mirrors ``_check_message_handler_support`` for backward compatibility with older MCP SDK versions. Without a logging_callback, the SDK's default handler silently discards every ``notifications/message`` a server emits, so server-side diagnostics never reach Hermes' logs. Flogging_callbackrLrSrTr,_check_logging_callback_supportrY'sV u!W%6}%E%E%PPP z "uurV)r#infonoticewarningerrorcriticalalert emergency,<g.@g?secondsc ntd|tjdtz dtzzS)zHOMELANGPATHTERMUSERSHELLLC_ALLTMPDIR>PROGRAMFILES(X86)COMMONPROGRAMFILES(X86)OSTMPTEMPPUBLICWINDIRAPPDATACOMSPECPATHEXTHOMEPATHUSERNAME HOMEDRIVE SYSTEMROOT USERDOMAIN PROGRAMDATA SYSTEMDRIVE USERPROFILE COMPUTERNAME LOCALAPPDATA PROGRAMFILES PROGRAMW6432ALLUSERSPROFILECOMMONPROGRAMFILESCOMMONPROGRAMW6432NUMBER_OF_PROCESSORSPROCESSOR_ARCHITECTUREz(?:ghp_[A-Za-z0-9_]{1,255}|sk-[A-Za-z0-9_]{1,255}|Bearer\s+\S+|token=[^\s&,;\"']{1,255}|key=[^\s&,;\"']{1,255}|API_KEY=[^\s&,;\"']{1,255}|password=[^\s&,;\"']{1,255}|secret=[^\s&,;\"']{1,255})z \$\{([^}]+)\}refc|}|dr)|tdd}|S)aNormalize a ``${...}`` reference body into an env-var name. Accepts Cursor-style ``${env:VAR}`` in addition to plain ``${VAR}`` by stripping a leading ``env:`` prefix. The result is the bare variable name to look up in the secret scope / ``os.environ``. zenv:N)strip startswithlen)rs r, _env_ref_namersJ ))++C ~~f(#f++,,%%'' JrTuser_envcJ ddlm}n#t$rd}YnwxYwi}tjD]P\}}|t vs=|tvs"| ds |||r|||<Q|r| ||S)aBuild a filtered environment dict for stdio subprocesses. Only passes through safe baseline variables (PATH, HOME, etc.) and XDG_* variables from the current process environment, secrets injected by an external secret source (Bitwarden, 1Password, plugin backends) that Hermes explicitly tagged during dotenv loading, plus any variables explicitly specified by the user in the server config. This prevents accidentally leaking secrets like API keys, tokens, or credentials to MCP server subprocesses. Secret-source-injected vars are an exception: users configured that backend specifically so Hermes and its subprocesses can consume those credentials without duplicating them in every MCP server's ``env:`` block. r)get_secret_sourceNXDG_) hermes_cli.env_loaderrr!r$environitems_SAFE_ENV_KEYSupper_SAFE_ENV_KEYS_CASE_INSENSITIVErupdate)rrenvkeyvalues r,_build_safe_envrs!;;;;;;; !!! ! Cj&&(( U > ! !yy{{===~~f%%>!-2C2CC2H2H-CH 8 J  textc8td|S)zStrip credential-like patterns from error text before returning to LLM. Replaces tokens, keys, and other secrets with [REDACTED] to prevent accidental credential exposure in tool error responses. z [REDACTED])_CREDENTIAL_PATTERNsubrs r,_sanitize_errorrs  " "< 6 66rTr+cjt|}|r|nt|S)aXReturn a non-empty human-readable string for *exc*. Some exception classes (e.g. ``anyio.ClosedResourceError``) are raised without a message argument, so ``str(exc)`` is ``""``. This helper falls back to ``repr(exc)`` so that error messages shown to the user and logged to disk always carry *some* diagnostic information. )strrrepr)r+rs r,_exc_strrs. s88>>  D &44T#YY&rT)METHOD_NOT_FOUNDict|dd}t|dd}|tkrdSt|}|sdStt|vp d|vpd|vpd|vS) uReturn True if *exc* is a JSON-RPC ``method not found`` (-32601). ``ping`` is an *optional* MCP utility (spec: "optional ping mechanism"). A server that doesn't implement it answers a ping with -32601 rather than an empty result. Structurally inspect ``McpError.error.code`` first, then fall back to a substring match so detection survives SDK version drift and servers that surface the condition as a plain message. The substring fallback matters when a server reports method-not-found without a structural ``-32601`` code (e.g. surfaced as a plain exception string). Besides the canonical "method not found", many JSON-RPC implementations phrase it as "Unknown method: " — agentmemory's MCP server is one such case (#50028). Without matching that phrasing the ping→list_tools fallback never latches and the keepalive reconnect-loops. r]NcodeTFzmethod not foundzunknown methodznot found: ping)getattr_JSONRPC_METHOD_NOT_FOUNDrlower)r+errrmsgs r,_is_method_not_found_errorrs" #w % %C 3 % %D (((t c((..  C u %&&#- $  $ $ s " $  # rTz)ignore\s+(all\s+)?previous\s+instructionsz8prompt override attempt ('ignore previous instructions')zyou\s+are\s+now\s+az.identity override attempt ('you are now a...')z1your\s+new\s+(task|role|instructions?)\s+(is|are)ztask override attemptz system\s*:\s*zsystem prompt injection attemptz <\s*(system|human|assistant)\s*>zrole tag injection attemptz'do\s+not\s+(tell|inform|mention|reveal)zconcealment instructionz(curl|wget|fetch)\s+https?://znetwork command in descriptionzbase64\.(b64decode|decodebytes)zbase64 decode referencezexec\s*\(|eval\s*\(zcode execution referencez&import\s+(subprocess|os|shutil|socket)zdangerous import reference tool_name descriptioncg}|s|StD]/\}}||r||0|r1td||d|||S)zxScan an MCP tool description for prompt injection patterns. Returns a list of finding strings (empty = clean). uUMCP server '%s' tool '%s': suspicious description content — %s. Description: %.200s; )_MCP_INJECTION_PATTERNSsearchappendr"r\join)r.rrfindingspatternreasons r,_scan_mcp_descriptionr5s H 2$$ >>+ & & $ OOF # # #  " DIIh$7$7     OrTr directoryc t|pi}|s|S|dd}d|tjD}||vr|g|}|rtj|n||d<|S)z=Prepend *directory* to env PATH if it is not already present.rqcg|]}||SrSrS).0parts r, z!_prepend_path..Qs A A AdD AT A A ArT)dictgetsplitr$pathsepr)rrupdatedexistingpartss r, _prepend_pathrJs39"ooG {{62&&H A AhnnRZ88 A A AE#U#05Dbjooe,,,9GFO NrT2 items_attrc |Kg}d}ttD]p}|r ||n |d{V}|t||dpgt|dd}t |t r|sn1qt d||tt||S)uDrain a paginated MCP ``list_*`` call by following ``nextCursor``. The MCP spec allows servers to paginate ``tools/list``, ``resources/list``, and ``prompts/list`` responses via an opaque ``nextCursor`` token. The Python SDK's ``ClientSession.list_*`` methods fetch exactly one page per call, so a client that never passes the cursor back silently sees only the first page — on a paginated server every tool/resource/prompt past page 1 would be invisible to the agent. Args: list_method: Bound ``session.list_tools`` / ``list_resources`` / ``list_prompts`` coroutine function. items_attr: Result attribute holding the page's items (``"tools"``, ``"resources"``, or ``"prompts"``). server_name: For log messages. Returns: Combined list of items across all pages. Callers must hold the server's ``_rpc_lock`` for the duration so pages come from a consistent snapshot. N)cursor nextCursorzHMCP server '%s': %s pagination exceeded %d pages; truncating at %d items) range_MCP_LIST_MAX_PAGESextendr isinstancerr"r\r) list_methodrr.rr_results r,_paginate_full_listr^s,E F & ' '   6<O 62222++--PPPPPP WVZ66<"===t44&#&& f  E   % %8#e**   LrTcommandc tjt|}t |pi}tj|vrpd|vr|dnd}tj||}|r|}nF|dvrAtjtj dtj tjdd}tj |dd |tj tjdd d |tj tjd d d |g}|D]D}tj |r#tj |tj r|}nEtj|} | rt|| }||fS) zResolve a stdio MCP command against the exact subprocess environment. This primarily exists to make bare ``npx``/``npm``/``node`` commands work reliably even when MCP subprocesses run under a filtered PATH. rqN)path>npmnpxnode HERMES_HOME~z.hermesrbinz.localusrlocal)r$r expanduserrrrsepshutilwhichgetenvrisfileaccessX_OKdirnamer) rrresolved_command resolved_envpath_arg which_hit hermes_home candidates candidate command_dirs r,_resolve_stdio_commandrs w))#g,,*<*<*>*>?? r??L v%%%+1\+A+A<''tL!1AAA  (   !7 7 7',, !27<<0B0B30G0G#S#SK  [&%9IJJ RW//44hGWXX RVUGU>),,9bg1N1N'0$E'//"233K@$\;?? \ ))rTargsc~tjdkr||fS tj}n#t$r||fcYSwxYwtjtjtjtddt|d|g|}tj |fS)a&Wrap a stdio MCP server command in the parent-death watchdog supervisor. On POSIX, the watchdog records this process's PID and later detects parent death directly through ``getppid()``. Returns the (command, args) unchanged on non-POSIX platforms or if the PID cannot be read. posixzmcp_stdio_watchdog.pyz--ppidz--) r$namegetpidr!rrrabspath__file__rr& executable)rrmy_pid watchdog_argss r,_wrap_command_with_watchdogr s w' } }  RW__RW__X%>%>??AXYY#f++    M >= ((s *;; mime_typecddl}|pdddd}|dvrdS||pdS) z>Return a reasonable file extension for an MCP image MIME type.rNr;r> image/jpg image/jpegz.jpgz.png) mimetypesrrrguess_extension)r r normalizeds r,"_mcp_image_extension_for_mime_typersn/r((a00399;;AACCJ000v  $ $Z 0 0 :F:rTcddl}t|dd}t|dd}t|pdddd}||dsdS ||}n;#ttf$r'}t d ||Yd}~dSd}~wwxYw dd l m }||t| }nY#t$rtd YdSt"$r&}t d |Yd}~dSd}~wwxYwd|S)aCache an MCP ``ImageContent`` block to the shared image cache and return a ``MEDIA:`` tag that Hermes gateways know how to render. Returns an empty string when *block* is not an image, when the base64 payload is malformed, or when the cache helper rejects the bytes (e.g. non-image MIME masquerading as an image). Errors are logged, not raised: a single bad block shouldn't kill the tool result, and the caller will fall through to any text blocks that did parse. rNdatamimeTyperr rzimage/z&MCP image block decode failed (%s): %s)cache_image_from_bytesextu@MCP image caching skipped — gateway.platforms.base unavailablez MCP image block cache failed: %sMEDIA:)base64rrrrrr b64decoderQrRr"r\gateway.platforms.baserr ImportErrorr#r!) blockrrr normalized_mime raw_bytesr+r image_paths r,_cache_mcp_image_blockr#sMMM 5&$ ' 'Dz400I)/r**00a88;AACCIIKKO |?55h??|r$$T** z "?RUVVVrrrrrAAAAAA++ 2?CC      WXXXrr 93???rrrrr !J  s6B&&C7CC" D$E* E3EEi uric ddl}ddl}ddlm}ddlm}m}d}|rQ |||t|jpdj }n#ttf$rd}YnwxYw| dd| }t|dkrf|d\}} } | rAdt| cxkrd kr'nn$|ddt| z d z dz| z}n |dd}|r|d vr^|pdd d d } || pd } d| }|S)uDerive a safe display filename for an MCP resource. Only the last path segment of the URI is considered, and only as a *name hint* — `cache_document_from_bytes` re-sanitizes and prefixes it, so remote path components can't influence the cache location. rN)Path)r unquoterz[\x00-\x1f\x7f]. r>..r*r z.binresource)rrepathlibr' urllib.parser r(rrrrRrQrrr rpartitionrrr) r%r r_rer'r r(rstemdotrrs r,_mcp_resource_filenamer5s........ D  4S 2 2 7 =2>>??DDDI&   DDD  77%r4 0 0 6 6 8 8D 4yy3--c3  1s3xx%%%%2%%%%%,#C.1,,-3c9DD:D  4;&&o2,,S!44Q7==??EEGG '' 33=v# Ks6AA)(A)cddl}t|dd}tt|ddpdddd}||dsdSt|tkrd t|d zd zd S | |}n;#ttf$r'}t d ||Yd}~dSd}~wwxYwt|tkrdt|d S ddlm}ddl}dddd|p||pd}|||} nY#t($rtdYdSt,$r&}t d|Yd}~dSd}~wwxYwd| S)uCache an MCP ``AudioContent`` block and return a ``MEDIA:`` tag. Returns an empty string when *block* is not audio or on any failure — same fail-open contract as ``_cache_mcp_image_block``. rNrrrr rzaudio/z)[MCP audio resource too large to cache: ~rdr$ bytes]z&MCP audio block decode failed (%s): %sz([MCP audio resource too large to cache: )cache_audio_from_bytesz.wav)z audio/wavz audio/x-wavz audio/wavez.oggru@MCP audio caching skipped — gateway.platforms.base unavailablez MCP audio block cache failed: %sr)rrrrrrrr_MCP_RESOURCE_MAX_B64_CHARSrrQrRr"r\_MCP_RESOURCE_MAX_BYTESrr8rrrrr#r!) rrrr r!r+r8rr audio_paths r,_cache_mcp_audio_blockr<<s> MMM 5&$ ' 'DGE:t44:;;AA#qII!LRRTTZZ\\I |9//99|r 4yy...V3t99q=A;MVVVV$$T** z "?CPPPrrrrr 9~~///Q#i..QQQQAAAAAA!v N N R RS\ ] ] ((33  ,+I3???  WXXXrr 93???rrrrr !J  s7?CD &DD Pdd^addddN$$T** z "NNNEt{sTWXXXMt{sMMMMMMMMMN 9~~///_S^^__Y\____ MDDDDDD((4J3PT4U4UVV UUU Z[[[U3y>>UU4KaSaUUU U U U MMM?EEELdkcLLLLLLLLLM #^F |T | |V | |s9~~ | | ||sB4F G %GG G = H  C.s33   S, - -#. JrTct|trtd|jDSt|tjS)z?True if ``exc`` is (or a group containing only) CancelledError.c34K|]}t|VdSN)r\)rrs r, z._contains_only_cancellation..s+NN.s33NNNNNNrT)rrXallrYasyncioCancelledError)r+s r,r\r\sH#)**ONNs~NNNNNN c71 2 22rTcht|}t|rdSt|ttfrdSt|t rdSt|t r!t|ddtj krdStt|dddd}|dvrdSdS)uClassify an MCP connection failure as ``'permanent'`` or ``'transient'``. Permanent failures are deterministic — every retry hits the same wall, so burning the retry ladder (and log lines) on them is pure noise; ``run()`` parks them immediately: - auth failures (401/403) — need new credentials, not a retry; - :class:`NonMcpEndpointError` — the URL serves a web page, not MCP; - :class:`InvalidMcpUrlError` — unusable config; - ``FileNotFoundError`` / ``ENOENT`` — the stdio command doesn't exist. Everything else (network blips, EOF, ``ClosedResourceError``, transport TaskGroup drops, timeouts) is transient and keeps the normal retry-with-backoff ladder. permanenterrnoNresponse status_code)i transient) ra_is_auth_errorrrVrOFileNotFoundErrorOSErrorrrkENOENT)r+rootstatuss r,_classify_mcp_failurervs #3 ' 'Dd{$,.@ABB{$)**{$  WT7D%A%AU\%Q%Q{WT:t44mT J JF { ;rTurlc 0t|ts'td|dt|j|}|std|d t |}n,#t$r}td|d|d|d|d}~wwxYw|j dvrtd|d |jd|d|j std|d |d|j std|d |d|S) utReturn the URL as a string if it's a valid http(s) remote MCP URL. Raises :class:`InvalidMcpUrlError` otherwise with a message naming the offending server, so users can spot the bad entry in their config. Accepts: - ``http://host`` / ``https://host`` with optional port, path, query - IPv4, IPv6 (bracketed), DNS hostnames Rejects: - Non-string values (``None``, dicts, ints) - Missing scheme (``example.com/mcp``) - Non-http(s) schemes (``file://``, ``ws://``, ``stdio:`` — stdio servers use the ``command`` key, not ``url``) - Empty host (``http://``, ``https:///path``) zInvalid MCP URL for 'z': expected a string, got z ': empty url': rD)N>httphttpsz%': scheme must be http or https, got z': missing host (z': missing hostname () rrrOr>rQrr r!schemernetlochostname)r.rwstrippedparsedr+s r,_validate_remote_mcp_urlrs" c3     $K $ $Cyy! $ $   yy{{H   =K = = =   (##  HK H HH H H# H H H   }$555  ;K ; ; - ; ;-5 ; ; ;    =  OK O O( O O O   ?   K         Os'A77 B BB configc|d}|d}||dSdtdtdtffd }t|tt fr|t dd t|d kr(||d d }||d d}||fSt|dkrY||d d }||d d}|d }t|tst dd|||fSt ddt|d||d}|||d}||fS|S)usResolve the ``client_cert`` / ``client_key`` config for mTLS. Returns whatever ``httpx``'s ``cert=`` parameter accepts, or ``None`` when no client certificate is configured: - ``None`` if neither ``client_cert`` nor ``client_key`` is set. - A single absolute path string if ``client_cert`` is a string and ``client_key`` is unset (PEM file with cert + key combined). - A ``(cert_path, key_path)`` tuple when both are set, or when ``client_cert`` is a 2-element list/tuple. - A ``(cert_path, key_path, password)`` tuple when ``client_cert`` is a 3-element list/tuple — the third element is the key passphrase. User paths support ``~`` expansion. Missing files raise ``FileNotFoundError`` with a server-scoped message so the failure surfaces as a clear setup error rather than an opaque TLS handshake error. client_cert client_keyNrlabelr c t|tr|s+tdd|dt |jdt j|}t j |stdd|d||S)N MCP server 'ryz& must be a non-empty string path (got rzz not found at ) rrrrRr>rQr$rrrrq)rrexpandedr.s r,_expandz%_resolve_client_cert.._expandgs$$$ DJJLL ;{;;u;;$(JJ$7;;; 7%%djjll33w~~h'' # {  u     rTrzY': specify either client_cert as a list [cert, key] OR client_cert + client_key, not bothrzclient_cert[0]rzclient_cert[1]rdz3': client_cert[2] (key passphrase) must be a stringz8': client_cert list form must have 2 or 3 elements (got rz)rrrrlisttuplerRr)r.rraw_certraw_keyr cert_pathkey_pathpasswords` r,_resolve_client_certrOs$zz-((Hjj&&GGOt c # #      (T5M**  L{LLL  x==A   -=>>Iwx{,<==Hx( ( x==A   -=>>Iwx{,<==H{Hh,,  4;444x2 2 3; 3 3"%h-- 3 3 3   -00I77L118$$ rTcdtdttffd dtdttffd |}|r;d|d}tj|dvr|dz }t|Sg}|D]}||vr||td |d d S) zERender nested MCP connection errors into an actionable short message.currentr ct|dd}|r|D]}|}|r|cSdSt|tr^t|ddrt|jSt jdt|}|r|dSdD]9}t||d}t|tr|}|r|cS:dS)NrYfilenamez$No such file or directory: '([^']+)'r __cause__ __context__) rrrqrrr.rgroup BaseException)rnestedchildmissingmatchattr nested_exc _find_missings r,rz,_format_connect_error.._find_missings,55   # #'-..#"NNN#4 g0 1 1 &w D11 -7+,,,IEs7||TTE &{{1~~%0 # #D $55J*m44 #'- 33#"NNNtrTct|dd}|r'g}|D] }||!|Sg}t|}|r||dD]F}t||d}t |t r||G|p |jjgS)NrYr) rrrrrrr __class__rQ) rr flattenedrmessagesrrr_flatten_messagess r,rz0_format_connect_error.._flatten_messagess,55  #%I ; ;  !2!25!9!9:::: 7||!!##  " OOD ! ! !0 ? ?D $55J*m44 ? 1 1* = =>>>7G-677rTzmissing executable ''>rrrz (ensure Node.js is installed and PATH includes its bin directory, or set mcp_servers..command to an absolute path and include that directory in mcp_servers..env.PATH)rNrd) rr rr r$rbasenamerrr)r+rmessagededupeditemrrs @@r,_format_connect_errorrs(}#,8=8T#Y888888"mC  G(3333 7  G $ $(> > > A G w'''G!!#&&!! w   NN4 499WRaR[11 2 22rTrc ||}t|trtj|s|St ||S#t t tf$r|cYSwxYw)zCoerce a config value to a numeric type, returning *default* on failure. Handles string values from YAML (e.g. ``"10"`` instead of ``10``), non-finite floats, and values below *minimum*. )rfloatmathisfiniterirQrR OverflowError)rdefaultcoerceminimumrs r, _safe_numericrsw  fe $ $ T]6-B-B N67### z= 1s5AAA$#A$ceZdZdZddddZdedefdZd efd Z d e efd Z e d efd Z d eefd Ze ddedefdZdZdZd efdZdZdS)SamplingHandlera+Handles sampling/createMessage requests for a single MCP server. Each MCPServerTask that has sampling enabled creates one SamplingHandler. The handler is callable and passed directly to ``ClientSession`` as the ``sampling_callback``. All state (rate-limit timestamps, metrics, tool-loop counters) lives on the instance -- no module-level globals. The callback is async and runs on the MCP background event loop. The sync LLM call is offloaded to a thread via ``asyncio.to_thread()`` so it doesn't block the event loop. endTurn maxTokenstoolUse)stoplength tool_callsr.rc&||_t|dddt|_t|dddt |_t|dddt|_t|dddtd |_|d |_ |d g|_ tj tj tjd }|t|ddtj |_g|_d |_d d d d d|_dS)Nmax_rpm timeoutmax_tokens_capimax_tool_roundsrcr)rmodelallowed_models)r#rZr\ log_levelrZ)requestsr tokens_usedtool_use_count)r.rrintrrrrrmodel_overriderloggingDEBUGINFOWARNINGrr audit_level_rate_timestamps_tool_loop_countmetrics)selfr.r _log_levelss r,__init__zSamplingHandler.__init__sM&$VZZ 2%>%>CHH $VZZ 2%>%>EJJ +FJJ7G,N,NPTVYZZ, JJ(! , ,aa   %jj11$jj)92>> ' w|PWP_`` &??  ;// 0 0 6 6 8 8',   .0 !$%1XYZZ rTr ctj}|dz fd|jD|jdd<t|j|jkrdS|j|dS)zASliding-window rate limiter. Returns True if request is allowed.rbc g|] }|k| SrSrS)rtwindows r,rz5SamplingHandler._check_rate_limit..s#S#S#S!F A rTNFT)timerrrr)rr0rs @r,_check_rate_limitz!SamplingHandler._check_rate_limit sxikkr#S#S#S#St/D#S#S#Saaa t$ % % 5 55 $$S)))trTc|jr|jS|rAt|dr1|jr*|jD]"}t|dr|jr |jcS#dS)z3Config override > server hint > None (use default).hintsrN)rrFrr)r preferenceshints r,_resolve_modelzSamplingHandler._resolve_modelsz   '& &  %7;88 %[=N %#) % %4((%TY%9$$$trTct|dr|jdSt|jtr|jn|jg}dd|DS)z,Extract text from a ToolResultContent block.contentNr c3DK|]}t|d|jVdS)rNrFrrrs r,rez.+s3NNtf8M8MNNNNNNNrT)rFrrrr)rrs r,_extract_tool_result_textz)SamplingHandler._extract_tool_result_text%scui(( EM,A2!+EM4!@!@U u}oyyNNuNNNNNNrTc Hg}|jD]}t|dr|jn(t|jt r|jn|jg}d|D}d|D}d|D}|D]3}|d|j||d4|rg} |D]} | t| ddt| d | j t| j trtj| j d nt!| j d d |j| d} d|D} | rd| | d<|| t|rt|dkr@t|ddr*||j|djdg} |D]}t|dr| d|jd0t|dr;t|dr+| ddd|jd|jid{t,dt1|j| r||j| d|S)aLConvert MCP SamplingMessages to OpenAI format. Uses ``msg.content_as_list`` (SDK helper) so single-block and list-of-blocks are handled uniformly. Dispatches per block type with ``isinstance`` on real SDK types when available, falling back to duck-typing via ``hasattr`` for compatibility. content_as_listc2g|]}t|d|S) toolUseIdrFrbs r,rz5SamplingHandler._convert_messages..<s'III!K1H1HIAIIIrTcrg|]4}t|dt|d"t|d2|5S)rinputrrrs r,rz5SamplingHandler._convert_messages..=sIyyyqga.@.@yWQPWEXEXyahijlwaxaxyyyyrTcrg|]4}t|dt|drt|d2|5S)rrrrrs r,rz5SamplingHandler._convert_messages..>srEEEAwq+7N7NEX_`aciXjXjEovwx{BpCpCEaEEErTtool)role tool_call_idridcall_functionF ensure_asciir arguments)rr>r)rrc<g|]}t|d|jSrrrs r,rz5SamplingHandler._convert_messages..Vs)SSS6@R@RSafSSSrTrrrrrrrr>rrr image_urlrwzdata:z;base64,)r>rz5Unsupported sampling content block type: %s (skipped))rrFrrrrrrrrrrrrjsondumpsrrrrrrr"r\r>rQ)rparamsrrblocks tool_results tool_usescontent_blockstrtc_listtumsg_dict text_partsrrs r,_convert_messagesz!SamplingHandler._convert_messages-si "?8 N8 NC,3C9J,K,KS(()#+t<<O 3;-  JIvIIILyyFyyyIEEEEEN#  "$&L#==bAA!!% N#BNN%b$0FG 0F0FGG *$&GU_`b`hjnUoUo*CBH5)Q)Q)Q)Quxy{zBvCvC%%$$+.('!J!JSSnSSS @*.))J*?*?HY')))) N~&&!++q8I60R0R+OOSX.QRBSBX$Y$YZZZZE!/  "5&11 !LL&%*)M)MNNNN$UF33 z8R8R !LL(3.35aU^5a5aUZU_5a5a-b** #NN W $U 4N e(L(LMMMrTrrcPtrt||St|)z1Return ErrorData (MCP spec) or raise as fallback.)rr)_MCP_SAMPLING_TYPESr?r!)rrs r,_errorzSamplingHandler._errorts-  9$888 8   rTc |jdxxdz cc<|jdkr%d|_|d|jdS|xjdz c_|j|jkr-d|_|d|jd|jdSg}|jjD]}|jj}t|trW tj |}ni#tj tf$r(td |j|d |i}Yn,wxYwt|t"r|nd t|i}|t'd |j|jj| t|jd |j|jt3t3|ddddt5|t7d||jdS)zEBuild a CreateMessageResultWithTools from an LLM tool_calls response.rrrz Tool loops disabled for server 'z' (max_tool_rounds=0)z%Tool loop limit exceeded for server 'z' (max z rounds)zRMCP server '%s': malformed tool_calls arguments from LLM (wrapping as raw): %.100s_rawtool_use)r>rrrzEMCP server '%s' sampling response: model=%s, tokens=%s, tool_calls=%dusageN total_tokens? assistantrrrr stopReason)rrrrr.rrrrrrrloadsJSONDecodeErrorrRr"r\rrrCrrlogrrrrr>)rchoicerlr tcrrs r,_build_tool_use_resultz&SamplingHandler._build_tool_use_result}sO %&&&!+&&&  1 $ $$%D !;;Z43CZZZ  "  4#7 7 7$%D !;;78H77,777  .+  B;(D$$$ Q,!Z--FF,j9,,,NN=($ %d^FFF ,",D$!7!7Pfc$ii=P  ! !.5[% ###        S  hn GHgt44nc J J       ,".     sC;DDc fd|_|jjpd}t|jd|j|jtt|ddddtdtd t| |j|j |jd  S) z8Build a CreateMessageResult from a normal text response.rrz6MCP server '%s' sampling response: model=%s, tokens=%srNrrrrrrr)rrrr"r!rr.rrr=rBr_STOP_REASON_MAPr finish_reason)rr"rl response_texts r,_build_text_resultz"SamplingHandler._build_text_results !.4"    D  hn GHgt44nc J J    #V/-2P2PQQQ.,001EyQQ     rTc@|ttdS)zjdxxdz cc<djdjdcYSt<$rQ}jdxxdz cc<dt?tA|cYd}~Sd}~wwxYwt|dds3jdxxdz cc<djdS|j!d }jd xxdz cc<tt|d!dd"d } tE| tFrjd#xx| z cc<|j$d$kr7t|j%d$r"|j%j&r'||S(||S)%zSampling callback invoked by the MCP SDK. Conforms to ``SamplingFnT`` protocol. Returns ``CreateMessageResult``, ``CreateMessageResultWithTools``, or ``ErrorData``. z5MCP server '%s' sampling rate limit exceeded (%d/min)rrz)Sampling rate limit exceeded for server 'z' (z requests/minute)modelPreferencesNr)call_llmrz:MCP server '%s' requested model '%s' not in allowed_modelszModel 'z' not allowed for server 'z '. Allowed: rE systemPromptsystemr temperaturer+c g|]G}dt|ddt|ddpdtt|ddddHS)rrrr inputSchemaNrrrPr>r)r_normalize_mcp_input_schemarrs r,rz,SamplingHandler.__call__.. s}   ' '62 6 6'.q-'D'D'J&A#A}d;;''!!     rTzFMCP server '%s' sampling request: model=%s, max_tokens=%d, messages=%dc 6dpdjS)Nmcp)taskrrr5 max_tokensr+rr)r2call_temperature call_toolsr?rresolved_modelrsr, _sync_callz,SamplingHandler.__call__.._sync_call!s88$,!,%   rTr@z"Sampling LLM call timed out after zs for server 'rzSampling LLM call failed: choicesz5LLM returned empty response (no choices) for server 'rrrrr))rr"r\r.rrrrragent.auxiliary_clientr2rrrrrFr3insertminrrr5r!rrrgwait_for to_threadr TimeoutErrorr!rrrErrr'rrr$r))rcontextrr server_toolsrDrlr+r"rr2rArBr?rrCs` @@@@@@r,__call__zSamplingHandler.__call__st%%''  NNG $,    L " " "a ' " " ";;4D nDL_6_6_ NNL .    L " " "a ' " " ";;S.SS$SS26))D * * Sv/B S OOAV=PQQ R R R)4+>??  6= ) ) 2f.@.L%1  vw55    &   J    T  nj#h--               $-!*--t|HH#    L " " "a ' " " ";;3T\33#/333       L " " "a ' " " ";;M_Xc]]-K-KMM       xD11  L " " "a ' " " ";;($(((  !!$ Z   A%   wx$??QRSS lC ( ( 8 L ' ' '< 7 ' ' '  L 0 0 55 1) 1..vx@@ @&&vx888s&3IA K8 K8'AK3-K83K8N)r)rQrRrSrTr&rrrboolrr r staticmethodrr rrrr$r)r/rNrSrTr,rrse  !*[PYZZ[C[[[[[.4Xc]OCOOO\OC4:CCCCN!!!3!!!\!7 7 7 r   *     }9}9}9}9}9rTrschemacNt|tr|dnd}t|tr|sd|dSd|dg}|D]\}}d}d}t|trJt |ddpd}t |d dpd}|rd |d nd}|r|d ||d ||d ||d|S)a%Render a JSON-schema-ish requested_schema to a human-readable field list. Elicitation schemas are restricted to a flat object with named top-level properties. We surface field names, types, and descriptions so the user can tell what the server is asking for before approving. propertiesNz"Approval requested by MCP server 'z'.z Fields requested by MCP server 'z':rr>rrDrzz - : r)rrrrrrr) rQr.propslines field_name field_spec field_type field_descsuffixs r,"_format_elicitation_schema_summaryr\Zsd)364(@(@ JFJJ| $ $ $dE eT " "D%DCKCCCC ? ? ? ? @E"'++-- 6 6 J  j$ ' ' FZ^^FB77=2>>JZ^^M2>>D"EEJ'19#j####r  6 LLB BFBBjBB C C C C LL4 4F44 5 5 5 5 99U  rTcJeZdZdZdZd dedededfdZd efd Z d Z dS) ElicitationHandleraHandles ``elicitation/create`` requests for a single MCP server. Each ``MCPServerTask`` that has elicitation enabled creates one handler. The handler is callable and passed directly to ``ClientSession`` as the ``elicitation_callback`` (added in mcp Python SDK 1.11.0). Elicitation lets a server ask the client to collect structured input from the user mid-tool-call (e.g. payment authorization, OAuth confirmation). Form-mode elicitations are routed through Hermes' existing approval system (``tools.approval.prompt_dangerous_approval``), which surfaces the prompt on whichever surface the active session uses -- CLI, TUI, Telegram, Slack, etc. URL-mode elicitations are declined as unsupported. Failure modes are fail-closed: any timeout, exception, or unexpected state returns ``decline``/``cancel`` rather than silently accepting. The server treats this as the user not approving. rcNr.rowner MCPServerTaskc||_t|dddt|_||_ddddd|_dS)Nrrar)raccepteddeclinedr)r.rrrrr_r)rr.rr_s r,rzElicitationHandler.__init__sT&%VZZ 3%?%?eLL      rTr c d|iS)z?Return kwargs to pass to ClientSession for elicitation support.elicitation_callbackrSr.s r,r/z!ElicitationHandler.session_kwargss &--rTc Kjdxxdz cc<t|dd}|dkrEtdjjdxxdz cc<t d St|d d p d jd  t|dipi}t |j tdjt dd ddlm n]#t$rP}t dj|jdxxdz cc<t d cYd}~Sd}~wwxYwj rtj ddnddtf fd } tjtj|jjzd{V}n#tj$r[tdjt+jjdxxdz cc<t d cYSt$rR}t dj|djdxxdz cc<t d cYd}~Sd}~wwxYw|dkr&jd xxdz cc<t di!S|dkr%jdxxdz cc<t d Sjdxxdz cc<t d S)"zElicitation callback invoked by the MCP SDK. Conforms to ``ElicitationFnT`` protocol. Returns ``ElicitResult`` or ``ErrorData``. rrmodeformrwz`MCP server '%s' requested URL-mode elicitation; declining (URL-mode elicitation not implemented)rcdecline)actionrrrz' is requesting your approvalrequested_schemaz'MCP server '%s' elicitation request: %sNr)request_elicitation_consentz._invoke_consents22$' $5$5At/?AA ==??&&+ #DL 1 1=4+;== ' rTr@z/MCP server '%s' elicitation timed out after %dscancelz&MCP server '%s' elicitation failed: %sTexc_infoacceptrb)rjr)rrr"rZr.rEr\rtools.approvalrmr!r]r_rrgrIrJr_OUTER_TIMEOUT_GRACE_SECONDSrKr\r) rrLrrgrQr+ruanswerrtrrrms ` @@@@r,rNzElicitationHandler.__call__s Z   A%   vvv.. 5== KKC     L $ $ $ ) $ $ $y111 1&)R00 J4+ J J J !3R88>B8AQRR  5  og66tt<    2 B B B B B B B 2 2 2 LLN #    L " " "a ' " " "y111 1 1 1 1 1 1  2*JN]74:'>EEEY]           $ 2"+!/22 t'HHFF# 1 1 1 NNA #dl"3"3    L " " "a ' " " "x000 0 0 0 2 2 2 LL8 #     L " " "a ' " " "y111 1 1 1 1 1 1  2 X   L $ $ $ ) $ $ $x<<< < X   L " " "a ' " " "x000 0 Z   A%   9----sE4C;; EAE EE ;GA'J . J 7AJ>J J rd) rQrRrSrTr{rrr rr/rNrSrTr,r^r^ts,$%   C  h>W    ".....l.l.l.l.l.rTr^c eZdZdZdZdefdZdefdZdefdZ defdZ d/d Z d/d Z d0d e ede efd Zde efdZdedd fdZdZdejfdZdZdZdZd/dZd/dZdefdZ d0de edefdZdefdZdZd dd dd d!ed"e ed#ededd f d$Z d%e!defd&Z"defd'Z#d(Z$d/d)Z%defd*Z&defd+Z'd,Z(d/d-Z)d/d.Z*d S)1r`acManages a single MCP server connection in a dedicated asyncio Task. The entire connection lifecycle (connect, discover, serve, disconnect) runs inside one asyncio Task so that anyio cancel-scopes created by the transport client are entered and exited in the same Task context. Supports both stdio and HTTP/StreamableHTTP transports. )rsession tool_timeout_task_ready_shutdown_event_reconnect_event_toolsr_config _sampling _elicitation_registered_tool_names _auth_type _refresh_lock _rpc_lock_pending_refresh_tasksrn_lifecycle_started_at_last_tool_call_at_idle_timeout_seconds_max_lifetime_seconds_recycled_reasoninitialize_result_ping_unsupported_reconnect_retries_session_proven _was_parkedrc||_d|_t|_d|_t j|_t j|_t j|_ g|_ d|_ i|_ d|_ d|_g|_d|_d|_d|_d|_t j|_t j|_t/|_d|_t5j}||_||_d|_d|_d|_ d|_!d|_"dS)NrFr)#rr~_DEFAULT_TOOL_TIMEOUTrrrgEventrrrrrrrrrrrrrLockrrsetrrnr monotonicrrrrrrr)rrr0s r,rzMCPServerTask.__init__-s &* #8-1 moo &} !(  +/  48:>13#'(&+"'!$\^^!9<#EI"n,/"),6:"6:"/3 15 (-rTr cd|jvS)z)Check if this server uses HTTP transport.rw)rr.s r,_is_httpzMCPServerTask._is_httpts $$rTch|j}|t|ddnd}|dSt|ddduS)uWhether the server advertises the ``tools`` capability. Per the MCP spec, ``InitializeResult.capabilities.tools`` is non-None iff the server implements the ``tools/*`` request family. Prompt-only or resource-only servers omit it, and calling ``tools/list`` against them raises ``McpError(-32601 Method not found)`` — which previously killed the connection during discovery and made every keepalive fail. (Ported from anomalyco/opencode#31271.) Returns True when no capability info was captured (legacy fallback: preserve the old always-call-list_tools behavior rather than regress any server that was working before this gate). N capabilitiesTr+)rr)r init_resultcapss r,_advertises_toolszMCPServerTask._advertises_toolsxsI, =H=Tw{ND999Z^ <4tWd++477rTc>| o|jduS)z;Return True when a stdio server was intentionally recycled.N)rrr.s r,_is_recycled_stdioz MCPServerTask._is_recycled_stdios ==??"Ht's r,_schedule_tools_refreshz%MCPServerTask._schedule_tools_refreshsT"4#;#;#=#=>> #''--- t:BCCC rTcfd}|S)aBuild a ``logging_callback`` for ``ClientSession``. Routes MCP ``notifications/message`` log notifications from the server into Hermes' logging (agent.log via hermes_logging), tagged with the server name. Without this, the SDK's default callback silently discards them, so server-side warnings/errors during a tool call were invisible. Port of anomalyco/opencode#34529. c K ttt|ddt j}t|dd}t|tsD tj |dt}n&#ttf$rt|}YnwxYwt|dkr |dddz}t|dd}|r j d |nj }t|d ||dS#t $r&td j d YdSwxYw)NlevelrZrF)rriz... [truncated]r"/zMCP server log [%s]: %sz/Failed to handle MCP log notification from '%s'Trw)_MCP_LOG_LEVEL_MAPrrrrrrrrrrQrRrrr"r!r!r#)rrr logger_nameoriginrs r,_on_logz5MCPServerTask._make_logging_callback.._on_logs *..8899??AA7<vvt44!$,,))#z$UCPPP%z2)))"4yy)t99t##;)::D%fh== 9DSDI55 555$) 5";VTJJJJJ    EI s7A9D'?BD' B?<D'>B??A&D'',EErS)rrs` r,_make_logging_callbackz$MCPServerTask._make_logging_callbacks#     .rTcfd}|S)aBuild a ``message_handler`` callback for ``ClientSession``. Dispatches on notification type. Only ``ToolListChangedNotification`` triggers a refresh; prompt and resource change notifications are logged as stubs for future work. cK t|tr#tdj|dSt rt|t r|jxtdxS\t dj tj dd{VdSxtdx%\tdjdStdx$\tdjdS dSdSdS#t$r$tdjYdSwxYw)Nz'MCP message handler (%s): exception: %srSz9MCP server '%s': received tools/list_changed notificationrz/MCP server '%s': prompts/list_changed (ignored)z1MCP server '%s': resources/list_changed (ignored)z%Error in MCP message handler for '%s')rr!r"r#r_MCP_NOTIFICATION_TYPESrFrtrGrZrrgsleeprHrIr)rrs r,_handlerz5MCPServerTask._make_message_handler.._handlers Ugy11LL!JDIW^___F*!z'CU/V/V!!,:8::::::"KK [ $ !88:::#*-"2"2222222222%;&=:<<<<<<"LL)Z\`\efffff=<>>>>>"LL)\^b^ghhhhh? D5!!!!6 U U U  !H$)TTTTTT Us)6D%A>D%=/D%.-D%D%%*EErS)rrs` r,_make_message_handlerz#MCPServerTask._make_message_handlers)! U! U! U! U! UDrTc <Kddlm}sdSj4d{Vt j}j4d{Vtjj dj d{V}dddd{Vn#1d{VswxYwY|fd|Dz }|D]&}| |t|'|_ tj j_t j}||z }||z }g} |r8| ddt%||r8| ddt%|| r5t&d j d | n3t&d j t-jdddd{VdS#1d{VswxYwYdS) uaRe-fetch tools from the server and update the registry. Called when the server sends ``notifications/tools/list_changed``. The lock prevents overlapping refreshes from rapid-fire notifications. After the initial ``await`` (list_tools), all mutations are synchronous — atomic from the event loop's perspective. rregistryNr+cDh|]}tj|jSrS)rGr)rrrs r, z/MCPServerTask._refresh_tools..;s7111'ty$)<<111rTzadded: rEz removed: uUMCP server '%s': tools changed dynamically — %s. Verify these changes are expected.rz>MCP server '%s': dynamically refreshed %d tool(s) (no changes))tools.registryrrrrrrrr~ list_toolsr deregister_forget_mcp_tool_serverr_register_server_toolsrrrsortedr"r\rZr) rrold_tool_names new_mcp_toolsstale_tool_namesrnew_tool_namesaddedremovedchangess ` r,rzMCPServerTask._refresh_toolss ,+++++%%''  F%2 2 2 2 2 2 2 2  !<==N~        &9L+Wdi''!!!!!!                             .1111)111  . 3 3 ##I...' 2222(DK*@ 4++D ' !!<==N"^3E$~5GG EC6%==)A)ACCDDD IG499VG__+E+EGGHHH 9Ityy11  TIs4#>??_2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 s6"H 'B6H  B H B E"H  HHcK|js tj|jdd{VdS#t $rV}t |s|sd|_t d|j Yd}~nd}~wwxYwtj|j dd{VdS)ubExercise the session to detect a stale/expired connection. Uses ``ping`` (cheap, transport-agnostic liveness) by default. ``ping`` is an OPTIONAL MCP utility: a server that doesn't implement it answers JSON-RPC -32601. The first time that happens we latch ``_ping_unsupported`` and fall back to the pre-ping probe — capability permitting, ``list_tools``; otherwise ``ping`` is the only option and the -32601 propagates (a server advertising neither a working ping nor tools has no liveness primitive left). The latch resets on each fresh transport connection so a server that gains ping support after a reconnect is re-probed with the cheap path. Raises on a genuine connection failure so the caller triggers a reconnect; returns normally when the session is alive. >@r@NTz~MCP server '%s': does not implement the optional 'ping' utility (-32601); using 'list_tools' for keepalive on this connection.) rrgrIr~ send_pingr!rrr"rZrr)rr+s r,_keepalive_probezMCPServerTask._keepalive_probe^s %  &t|'='='?'?NNNNNNNNNN   2#66--//)-& 'I  $t|6688$GGGGGGGGGGGGs3A B  A BB c|js>d|_d|_|jr+d|_td|jdSdSdS)uRecord that the current session demonstrated real health. Called from the keepalive success path (session survived at least one full keepalive interval) and the tool-call success path. Only then is the reconnect budget cleared: a handshake that completes but drops moments later must keep consuming ``_reconnect_retries`` so a flapping transport still reaches the park instead of respawning forever (#62212 — 6212 spawns in 63h). TrFu^MCP server '%s': revived — session healthy again after parking (state: parked → connected)N)rrrr"r\rr.s r,_mark_session_provenz"MCPServerTask._mark_session_provensp# #'D &'D # #( <I    rTc ZKttt|jdt }t j|j }t j|j } | }|m| | ||fD]P}| s:| |d{V4#t jt f$rYLwxYwQdS|}|}|2tdt%||t'jz }t j ||h|t jd{V\}} |rn/| }|m| | ||fD]P}| s:| |d{V4#t jt f$rYLwxYwQdS|jr |d{Vns#t $rf} t1| } t2d|jt9| j| |j Yd} ~ nd} ~ wwxYw|,||fD]P}| s:| |d{V4#t jt f$rYLwxYwQnZ#||fD]P}| s:| |d{V4#t jt f$rYLwxYwQwxYw|j rdS|j !d S) uBlock until either _shutdown_event or _reconnect_event fires. Returns: "shutdown" if the server should exit the run loop entirely. "reconnect" if the server should tear down the current MCP session and re-enter the transport (fresh OAuth tokens, new session ID, etc.). The reconnect event is cleared before return so the next cycle starts with a fresh signal. "recycle" if a stdio idle/max-lifetime limit elapsed. The current transport is torn down and restarted lazily on the next tool call. Shutdown takes precedence if both events are set simultaneously. Periodically sends a lightweight keepalive (``ping``, with a ``list_tools`` fallback for servers that don't implement the optional ping utility — see :meth:`_keepalive_probe`) to prevent TCP/session state from going stale during idle periods (#17003). If the keepalive fails, triggers a reconnect. The cadence is ``keepalive_interval`` from server config (default :data:`_DEFAULT_KEEPALIVE_INTERVAL`, floored at :data:`_MIN_KEEPALIVE_INTERVAL`). Servers that GC idle sessions on a short TTL (e.g. Unreal Engine's editor MCP, ~15s) need an interval below that TTL, otherwise every idle tool call lands on an already-expired session and pays the full reconnect path. keepalive_intervalTNrecyclerg)r return_whenu^MCP server '%s' keepalive failed, triggering reconnect (state: connected → degraded): %s: %sshutdown reconnect)"ri_MIN_KEEPALIVE_INTERVALrrr_DEFAULT_KEEPALIVE_INTERVALrgrrwaitrrrdonervrhr!rrHrrFIRST_COMPLETEDr~rrar"r\rr>rQrris_setclear) rr shutdown_taskreconnect_taskrecycle_reasonrrrecycle_deadliner_pendingr+rts r,_wait_for_lifecycle_eventz'MCPServerTask._wait_for_lifecycle_eventsF! # $,""#79TUU V V    +D,@,E,E,G,GHH  ,T-B-G-G-I-IJJ8 / 0!%!;!;!=!=!---n===$Z$^4  vvxxHHJJJ#2I>   W-#'#D#D#F#F #/!#s74Dt~GWGW4W'X'XYYG'.|"N3# ' 7(((""""""h !%!;!;!=!=!---n===$6$^4  vvxxHHJJJ#2I>   #<0 "335555555555$6s;;P ItDzz':D -11333--///_/ 0b$^4  vvxxHHJJJ#2I>  m^4  vvxxHHJJJ#2I>     & & ( ( : ##%%%{s,L6C??DDB%L3G<<HHL#H>=L> J.AJ)$L)J..L6K??LL/M4 MM4M/ ,M4.M/ /M4rcKtj|j}tj|j} tj||htj|d{V||fD]P}|s:| |d{V4#tjtf$rYLwxYwQnZ#||fD]P}|s:| |d{V4#tjtf$rYLwxYwQwxYw|j rdS|j dS)u<Block until a reconnect or shutdown is requested while parked. Used by :meth:`run` after the reconnect budget is exhausted. The task stays alive (so ``_reconnect_event`` always has a listener) but does no work until something explicitly asks it to come back — OAuth recovery, a manual ``/mcp`` refresh — or, when ``timeout`` is given, until the timeout elapses (a periodic self-probe). The timed wake matters because parking deregisters this server's tools, so no tool call can ever reach the circuit-breaker's half-open probe or ``_signal_reconnect`` — without a self-probe a parked server would be unrevivable short of a full reload. Returns: ``"shutdown"`` if the server should exit the run loop entirely, ``"reconnect"`` if it should rebuild the transport (explicit request or self-probe timeout). The reconnect event is cleared before returning so the next park cycle starts from a fresh signal. Shutdown takes precedence. )rrNrr) rg ensure_futurerrrrrrvrhr!rr)rrrrrs r,_wait_for_reconnect_or_shutdownz-MCPServerTask._wait_for_reconnect_or_shutdown s, -d.B.G.G.I.IJJ  .t/D/I/I/K/KLL ,/#3        $^4  vvxxHHJJJ#2I>  m^4  vvxxHHJJJ#2I>     & & ( ( : ##%%%{sB)C2B;;CC/D0 DD0D+ (D0*D+ +D0rc Ktstd|jd|d}|dg}|d}|st d|jdt |}t ||\}}ddlm} tj tj |||t d {V}n=#tj $r+td |jtd }YnwxYw|rt d|jd |t!||\}}t#|||r|nd }|jr|jni} |jr,| |jt,rt.r|| d<t2r|| d<tj t6d {Vt9} t;} t=|jt?} tA|| 4d {V\} }tCt9| z } | ri}| D]7} tEj#|||<#tHtJtLf$rY4wxYwtN5| D]}|jtP|<tR|d d d n #1swxYwYtU| |fi| 4d {V }tW|dtX}tj |-| d {V|_.||_/|0|1d {V|j2tg|jd|_4|5d {Vcd d d d {Vcd d d d {V| rddl6m7}tqtDdd }tN5| D]}tP9|d | D]}||}d}tR|}|s3|1|/ ||dd}n#tJtttLf$rd}YnwxYw|s|r*tv<||jtz|<tR9|d  d d d S#1swxYwYSS#1d {VswxYwY d d d d {Vn#1d {VswxYwY| r ddl6m7}tqtDdd }tN5| D]}tP9|d | D]}||}d}tR|}|s3|1|/ ||dd}n#tJtttLf$rd}YnwxYw|s|r*tv<||jtz|<tR9|d  d d d d S#1swxYwYd Sd S#| rddl6m7}tqtDdd }tN5| D]}tP9|d | D]}||}d}tR|}|s3|1|/ ||dd}n#tJtttLf$rd}YnwxYw|s|r*tv<||jtz|<tR9|d  d d d w#1swxYwYwwxYw)z%Run the server using stdio transport.rzp' requires the 'mcp' Python SDK, but it is not installed. Run `hermes setup` to install MCP support, then retry.rrrz' has no 'command' in configr)check_package_for_malwarer@NuyMCP server '%s': OSV malware preflight timed out after %.0fs (network slow/unreachable) — proceeding without the check.ry)rrrrKrX)errlogconnect_timeoutF _pid_existskillpgT)>rMrrrrRrrtools.osv_checkrrgrIrJ_OSV_MALWARE_CHECK_TIMEOUT_SrKr"r\r r7rr/rrr_MCP_MESSAGE_HANDLER_SUPPORTEDr_MCP_LOGGING_CALLBACK_SUPPORTEDr_kill_orphaned_mcp_children_snapshot_child_pidsrr5r-r8_filter_mcp_childrenr$getpgidAttributeErrorProcessLookupErrorrr_lock _stdio_pids _stdio_pgidsr6r_DEFAULT_CONNECT_TIMEOUT initializerr~r_discover_toolsr_reset_server_errorrrgateway.statusrrpopPermissionError_orphan_stdio_pidsr_orphan_stdio_pid_servers)rrrrrsafe_envr malware_error server_paramssampling_kwargs pids_beforenew_pids_errlog read_stream write_stream new_pgids_pidr~rr_killpgpid pid_alive pgroup_alivepgids r, _run_stdiozMCPServerTask._run_stdio/ s=  ty  **Y''zz&"%%::e$$ FtyFFF #8,,27HEE >===== !")"2!";WdKK4###MM# ! ! ! NNO 7    !MMM  !  B^S$.77999QS   G  " "4#4#C#C#E#E F F F " N'E N151K1K1M1MO- . * P262M2M2O2OO. / ;<<<<<<<<<+,,  !+++%''h 8#M'BBBD BD BD BD BD BD BD BG0(**[87 13I (!!!.0j.>.>IdOO .0BGL!!!!D!77$,::D04 K--$++I666777777777777777)1@%B%B%B%B%B%B%B%B', #46NOO''O4;3C**,,o444......D*$+DL00222..000000000KOO%%%( 222 ,1D("&!?!?!A!AAAAAAAK%B%B%B%B%B%B%B%B%B%B%B%B%B?D BD BD BD BD BD BD BD BD BD BD BD BD BV 8666666!"h5588 (44#d3333'88%0K$4$4 ', +//44( 5T-='BU 5 'a 0 0 0/3 $6#Q555/4 5$8 8.223777=AY5c::),,S$7777-88888888888888888 8Y%B%B%B%B%B%B%B%B%B%B%B%B%B%B%B?D BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BD BV 8666666!"h5588 (44#d3333'88%0K$4$4 ', +//44( 5T-='BU 5 'a 0 0 0/3 $6#Q555/4 5$8 8.223777=AY5c::),,S$7777-8888888888888888888 8 8x 8666666!"h5588 (44#d3333'88%0K$4$4 ', +//44( 5T-='BU 5 'a 0 0 0/3 $6#Q555/4 5$8 8.223777=AY5c::),,S$7777-88888888888888888 8so%5C7DDY<**UJ-,U-KUK U/L  U L UL U,CT9 UY<AT,'R65T,6S T,S A T,,T0 3T0 9 U UU U Y< U''Y<*U'+Y<AY-'W65Y-6XY-XA Y--Y14Y1<'^#A];6\];\! ]; \! !A ];/ ^;]? ?^]? ^)application/jsonztext/event-streamT@)headers ssl_verifyrrrwr-r.c LK ddl}n#t$rYdSwxYw|d||d}|||d<|rt|ni} |jdi|4d{V} | ||d{V} | jdvr| ||d{V} | jdd  d d } | r| |j vrd | jcxkrd krnn| |i|d dddd{V} d | jcxkrd krfnnc| jdd  d d } | |j vr| } dddd{Vn#1d{VswxYwYn#|j$rYdSwxYwd | jcxkrd ksndS| jdd  d d }|sdS||j vrdStd|jd|d|dd|j d )uProbe *url* for an MCP-shaped response before the SDK connects. A misconfigured ``mcp_servers..url`` pointed at a plain web app returns HTML (or some other non-MCP body). The MCP SDK then sits on the connection for the full ``connect_timeout`` (default 60 s) before surfacing an opaque ``CancelledError``. A cheap, short-timeout probe here catches that in ≤ ``timeout`` seconds and raises :class:`NonMcpEndpointError` with an actionable message. Detection is allow-list based: a 2xx response is rejected only when it carries a definite content type that is NOT one an MCP endpoint uses (``application/json`` / ``text/event-stream``). When HEAD/GET returns a non-MCP content type (e.g. ``text/html``), a lightweight JSON-RPC ``initialize`` POST is attempted before giving up — some servers (e.g. DocuSeal) serve a web UI on GET but speak Streamable HTTP only via POST. A missing or empty content type, non-2xx status, or any network/transport error passes through silently — the probe is strictly best-effort, and the real handshake remains the source of truth for everything except the unambiguous "this is a web page, not MCP" case. Runs on its own httpx client OUTSIDE the SDK's anyio task group, so the raised error propagates as itself rather than being wrapped in an ``ExceptionGroup`` (which is what defeats hooks installed inside the SDK transport). rNT)verifyfollow_redirectsrcert)r-)iiz content-typerr rlrar+z#application/json, text/event-stream)z Content-TypeAcceptz{"jsonrpc":"2.0","id":"_probe","method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"hermes-probe","version":"0.1"}}})r-rrz' at z returned Content-Type 'z)', not an MCP response (expected one of: rEu). The URL most likely points at a web page rather than an MCP endpoint — check it resolves to a Streamable HTTP / SSE endpoint (e.g. https://host/mcp, not https://host/).rS)httpxrTimeoutr AsyncClientheadrmrr-rrr_MCP_CONTENT_TYPESpost HTTPErrorrVrr)rrwr-r.rr_httpx client_kwargs probe_headersclientrespct post_resppost_ctct_bases r,_preflight_content_typez%MCPServerTask._preflight_content_type sJ  " " " " "    FF ! $~~g..   "$/M& !)08W b 1 )v)::M::. -. -. -. -. -. -. -f$[[m[DDDDDDDD#z11!'C!G!GGGGGGGDL$$^R88U3ZZ#UWWUWW -$"999t/5555#55555&,kk!+!,>&K!!! 1'2''!!!!!!I i39999c99999%-11."EE"U3ZZ+"UWW"UWW  #d&===#,D,]. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -. -^    FF  t'----#---- F,"">266<. s0LLS399;;"88LLLLLLrTrKrr.TNoauthr get_managerz#MCP OAuth setup failed for '%s': %srKrX transportssezt' requires SSE transport but mcp.client.sse.sse_client is not available. Upgrade the mcp package to get SSE support.r@)rwr-rsse_read_timeoutauthcdd}|||d<ndd|d<|||d<|||d<|d <jd i|S) NT)r1r0rrrQreadr-rSr2rS)r5r6)r-rrSkwargs_cert_for_factory _httpx_mod_verify_for_factorys r,_mcp_http_client_factoryz9MCPServerTask._run_http.._mcp_http_client_factory s-1"5$$F*,3y)),6,>,>t%,>,P,Py)*,3y)')-v(4):v1:1;;F;;;rThttpx_client_factoryr@FruAMCP server '%s': reconnect requested — tearing down SSE sessionc K|jr|jrz|jj}|j|j|jfjjjfkrF|jjdd|jjdddSdSdSdS)zBStrip Authorization headers when redirected to a different origin. authorizationN Authorization) is_redirect next_requestrwr}hostportr-r)rltarget _original_urls r,$_strip_auth_on_cross_origin_redirectzEMCPServerTask._run_http.._strip_auth_on_cross_origin_redirect4 s'QH,AQ%26F v{FK@%,m.@-BTE!-599/4PPP -599/4PPPPP QQQQrTrUrl)r1rr0 event_hooksr2) http_clientuBMCP server '%s': reconnect requested — tearing down HTTP session)r-rr0uIMCP server '%s': reconnect requested — tearing down legacy HTTP session)NNNrS)1_MCP_HTTP_AVAILABLErrrranyr;rrrtools.mcp_oauth_managerrNget_or_build_providerr!r"r\rr/rrrrrrrr<rr4r6rgrIrrr~rrrrrrrZrXrH _MCP_NEW_HTTPURLr5r6r:r9)rrrwr-rr.r _oauth_authrNr+r _sse_kwargsr[r!r"r~r_egr4rfr<rh_get_session_id _http_kwargsrXrYrerZs @@@@r, _run_httpzMCPServerTask._run_http s " ?ty???  Umvzz),,233 LLGLLLLL F.EG* + **%68PQQZZ d33 *49f==  ?g % % ??????)kmmAAIsFJJw$7$7    DdiQTUUU >B^S$.77999QS   G  " "4#4#C#C#E#E F F F " N'E N151K1K1M1MO- . * P262M2M2O2OO. / ::k " "e + +!!B49BBB"?d 11$) !!K &'2 F#&*D*@*@ +***$/!&0#6:<<<<<<<<&7O 23 ?%44 448Sl,#\  5D   8?7G#..00%:P:P888222222.(/ "22444444444 ))),DI666/4,'+'E'E'G'G!G!G!G!G!G!G![00"KK!;<@I+4& ? ? ?99#>> ?M c  LLL!IIcNNM Q Q Q Q Q%) ==)?)?e=LL$ *-Q,RS ##M  3+2 i(&(3 f%&(3 f% ?,5,==}=="""""""5c{SSS"""""""X#\?#0l#^#^o#^#^"""""""bi;B;K ' 2 2 4 4eO>T>T<<<666666D2,3DL"&"6"6"8"88888888 KOO---0 :::38D0+/+I+I+K+K%K%K%K%K%K%KF%44 & %@AE!"!"!"!"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""0& ? ? ?99#>> ?M# 11$""L &'2 V$ ?0EE EEJ,[,ZZ/ZZ^e7>7G#..00%:P:P888222222.(/ "22444444444 ))),DI666/4,'+'E'E'G'G!G!G!G!G!G!G![00"KK!CDHI!.& ? ? ?99#>> ?Ms_ =D D8"D33D8NM<1CMM< M# #M<&M# 'M<*N< NN N N N7N22N7$V(7VU3(CU>U3 U U3U U3!V3 U= =VU= VV( V  V(#V $V(( W2W  W1\:\(C\3\( \ \(\ \(\:( \22\:5\26\:: ]#]]#cKd|_|jdS|s=td|jg|_|dS|j4d{Vt|jj d|jd{V|_dddd{Vn#1d{VswxYwY|dS)uDiscover tools from the connected session. Capability-gated: prompt-only / resource-only MCP servers don't implement ``tools/list``, and calling it raises ``McpError(-32601)``, which previously aborted the connection — those servers could never stay connected for their prompts/resources. Skip the call when the server doesn't advertise the ``tools`` capability. (Ported from anomalyco/opencode#31271.) FNusMCP server '%s': does not advertise 'tools' capability — skipping tools/list (prompts/resources remain available)r+) rr~rr"rZrr$_register_discovered_tools_if_neededrrrr.s r,rzMCPServerTask._discover_tools s"' <  F%%''  KKK     DK  5 5 7 7 7 F>         3 '$)!!DK                            1133333s1,B// B9<B9c(|jrdS|jsOt5t|j|ur ddddS dddn #1swxYwYt|j||j|_dS)aRe-register tools after a post-ready reconnect if needed. Initial registration is performed by ``_discover_and_register_server`` after ``start()`` completes. During a later reconnect, outage handling may clear ``_ready`` before discovery and may deregister stale tools. A managed server can still be identified by its entry in ``_servers``; publish its freshly discovered tools before transport readiness is restored so a successful revival cannot come back with zero tools. N) rrrr_serversrrrrr.s r,rvz2MCPServerTask._register_discovered_tools_if_needed s  &  F{!!##   << **$66        6               '= ItT\' ' ###s#A''A+.A+c ,K||_|dt|_|dpd|_t|d|_t|d|_ |di}|ddr"trt|j ||_ nd |_ |d i}|ddr$trt|j || |_nd |_d |vr$d |vr t"d|j |r t)|j |d nS#t*$rF}t"d|||_|jYd }~d Sd }~wwxYw|ddkr|ds|js|jdkr t5|dpi}||d ||ddt9|j |d {VnS#t:$rF}t"d|||_|jYd }~d Sd }~wwxYwd|_d}d} |r||d {V}n| |d {V}|j!r d |_"d S|dkrt"#d|j |j$d |_"|%d {V|j!r d |_"d S|j&' d |_"t"(d|j |j)r d|_d}n|xjdz c_|jtTkrt"d|j tTtVd|_,|-|j&'|.tVd {V} | dkr d |_"d St"(d |j tT|_d}|j'd |_" d |_"=#t^j0$r d |_"tb$r}d |_"te|} tg| } |4r;t"d!|j tk| j6| d |_$|jsto| rat"d"|j tk| j6| ||_|jYd }~d |_"d S| d#krt"d$|j tk| j6| ||_|jd|_,|-|j&'|.tVd {V} | dkr Yd }~d |_"d St"(d%|j d}d|_d}d |_|j'Yd }~d |_"w|dz }|tpkrt"d&|j tptk| j6| ||_|jd|_,|-|j&'|.tVd {V} | dkr Yd }~d |_"d St"(d'|j d}d|_d}d |_|j'Yd }~d |_"t"(d(|j |tp|tk| j6| t_j9tu|d {Vtw|d)ztx}|j!r-||_|jYd }~d |_"d SYd }~d |_"p|j!rAt"(d*|j tk| j6| Yd }~d |_"d S| d#krt"d+|j tVtk| j6| d|_,|-|j&'|.tVd {V} | dkr Yd }~d |_"d St"(d,|j tT|_d}Yd }~d |_"|xjdz c_|jtTkrt"d-|j tTtVtk| j6| d|_,|-|j&'|.tVd {V} | dkr Yd }~d |_"d St"(d |j tT|_d}Yd }~d |_"t"(d.|j |jtT|tk| j6| t_j9tu|d {Vtw|d)ztx}|j!r Yd }~d |_"d SYd }~nd }~wwxYw d |_"n #d |_"wxYw y)/zLong-lived coroutine: connect, discover tools, wait, disconnect. Includes automatic reconnection with exponential backoff if the connection drops unexpectedly (unless shutdown was requested). rrSrrrsamplingenabledTN elicitation)r_rwrzMCP server '%s' has both 'url' and 'command' in config. Using HTTP transport ('url'). Remove 'command' to silence this warning.z%srOrPskip_preflightrLr-r.)r-r.rrrhrzLMCP server '%s': stdio session recycled after %s; waiting for lazy reconnectz@MCP server '%s': reconnecting (OAuth recovery or manual refresh)ruMCP server '%s': %d consecutive reconnects without a healthy session (rapid-drop budget exhausted), parking; will self-probe every %ds until it recovers (state: degraded → parked)r@rzwMCP server '%s': attempting revival from parked state (self-probe or explicit reconnect request); rebuilding transport.zfMCP server '%s': lazy reconnect after stdio recycle failed, marking unavailable while retrying: %s: %szWMCP server '%s' failed initial OAuth authentication, not retrying automatically: %s: %srjuMCP server '%s' failed initial connection with a permanent error, parking without retries (state: connecting → parked): %s: %szMCP server '%s': attempting revival after permanent initial failure (self-probe or explicit reconnect request); rebuilding transport.uMCP server '%s' failed initial connection after %d attempts, parking until a reconnect is requested (state: connecting → parked): %s: %szMCP server '%s': attempting revival after initial connection failures (self-probe or explicit reconnect request); rebuilding transport.zTMCP server '%s' initial connection failed (attempt %d/%d), retrying in %.0fs: %s: %srz4MCP server '%s' disconnected during shutdown: %s: %suMCP server '%s' hit a permanent error, parking without retries; will self-probe every %ds (state: connected → parked): %s: %szMCP server '%s': attempting revival from parked state (permanent error; self-probe or explicit reconnect request); rebuilding transport.uMCP server '%s' failed after %d reconnection attempts, parking; will self-probe every %ds until it recovers (state: degraded → parked): %s: %szNMCP server '%s' connection lost (attempt %d/%d), reconnecting in %.0fs: %s: %s)=rrrrrrr_get_lifecycle_secondsrrrrrr_MCP_ELICITATION_TYPESr^rr"r\rrrOrrrrrrDrrVrrtr*rr~rZr_wait_for_lazy_reconnectrrr#r_MAX_RECONNECT_RETRIES_PARKED_RETRY_INTERVALr_deregister_toolsrrgrhr!rarvrr>rQrp_MAX_INITIAL_CONNECT_RETRIESrrmrH_MAX_BACKOFF_SECONDS) rrsampling_configelicitation_configr+_probe_headersinitial_retriesbackofflifecycle_reasonparkedrt failure_classs r,rszMCPServerTask.run sq  "JJy2GHH!::f--3::<<BBDD%;FDZ%[%["%;FDZ%[%["!**Z44   y$ / / "4G ",TYHHDNN!DN $ZZ r::  ! !)T 2 2 %7M % 249>PX\ ] ] ]D   $D  F??yF22 NN      ==??"  (FJJu4E4EFFFF%   tS)))!  !!!  $zz+&&%// CS8T8T/]a]h]o]o]q]q/vzwFJQwQwQ %)&**Y*?*?*E2%F%FN66u .#)::lD#A#A$8F$K$K 7 +NN4---"%DKKOO%%%FFFFF  #$s $r $==??E-1^^F-C-C'C'C'C'C'C'C$$-1__V-D-D'D'D'D'D'D'D$ '..00N $ M $y00KK5 4#8 $(DL77999999999+2244z $ y)//111v $ o &I'!&./D+!GG++q0++.1GGGM!I'=2 ,0(..000-33555'+'K'K$:(L(("""""""Z//!d $ c 4!I 3I/"%  !!#### B $ A)    $ R R R # /s33 5d ; ; **,,1NNM 4::#6 -1D) {))++\%d++A ItDzz':D '*  )))j $ g% 33 E!ItDzz':D  '*  )))+/(..000-33555'+'K'K$:(L(("""""""Z//"FFF~ $ } H!I  +,23/"%&*  ))+++ f $ c$q(O&)EEEO!I'C JJ/ '*  )))+/(..000-33555'+'K'K$:(L(("""""""Z//"FFF~ $ } H!I  +,23/"%&*  ))+++ f $ cLLE ?4gT +T "- '(:(:;;;;;;;;;!'A+/CDDG+2244&)  )))F $ EHHHD $ '..00LLN 4::#6FFFt $ q!K// NN@ #9T +T (,D$**,,,)//111#'#G#G 6$H$$F++J $ ILL:  /ED+!GHHHx $ u''1,''*-CCCNN? #9.T +T &(,D$**,,,)//111#'#G#G 6$H$$F++< $ ;LL0 /ED+!GHHH$ $  4It68NT$ZZ0$  mIg$6$6777777777gk+?@@'..00FFF# cR b $ t ####g s $s>(F'' G71;G22G7 A0J>> L;L  LA$U A&U<UCUAU!q<:C1q7+r8B6q7.r;A q7rCq7r&A q71r>B4q72r?r A q7r&Bq7r.q7<r B;q7r.q7?r Bq7%r2r7q<<r rcZKtj|||_ |jd{VnM#tj$r;|jr2|js|jwxYw|j r|j dS)z>>>>>>>>>>'   II !!###*$$$$$$$$-D   & 0T899   .$"=VQUVV V V V V V V V  ' - - / / /     s7!A88AC' CC'C!C' C!!C'&C'cddlm}tt|dgD]&}||t |'g|_dS)aDrop this server's tools from the global registry (idempotent). Pulls the server's tool schemas out of the registry so the agent stops advertising them to the model. Called on shutdown AND when the reconnect budget is exhausted, so a dead server never leaves phantom tool definitions bloating the prompt cache and producing "not connected" errors on every turn. rrrN)rrrrrrr)rrrs r,rzMCPServerTask._deregister_tools~ sm ,+++++gd,DbIIJJ / /I    * * * #I . . . .&(###rTcfKtj|j}tj|j} tj||htjd{V||fD]P}|s:| |d{V4#tjtf$rYLwxYwQdS#||fD]P}|s:| |d{V4#tjtf$rYLwxYwQwxYw)z=Wait while an intentionally recycled stdio server is dormant.)rN) rgrrrrrrrvrhr!)rrrr>s r,rz&MCPServerTask._wait_for_lazy_reconnect s+D,@,E,E,G,GHH  ,T-B-G-G-I-IJJ ,/#3        '7  yy{{KKMMM" #2I>   7  yy{{KKMMM" #2I>  sB(C1B::CC/D0 DD0D+ (D0*D+ +D0r Nrd)+rQrRrSrT __slots__rrrOrrrrrr rrrrrrgTaskrrrrrrrrrr*r8rDrXrHrtrrvrsrrrrrSrTr,r`r`s IE-SE-E-E-E-N%$%%%%848888(IDIIII3333%%%% %HSM" 5huo 5 5 5 534XXX   D)))VBBBH&H&H&H&HP*gggggT*.))) ))))VF8tF8F8F8F8VC #'x x x x $ x  x x  x x x x t*.@*S****Xndnnnn`444>    (F$F$F$F$F$P $&<)))) rTr`rx_server_connecting_server_connect_errors_server_connect_retry_after_server_connect_failuresrg@ct|ddz}|t|<ttd|dz zzt}t j|zt|<dS)aStamp an exponential-backoff cooldown after a failed connect. Called (under ``_lock``) when a server fails its discovery/connect attempt. The cooldown grows geometrically with the consecutive failure count and is capped at :data:`_CONNECT_RETRY_MAX_BACKOFF_SEC`, so a permanently-broken server settles into infrequent retries rather than a tight respawn loop. rrrN)rrrH_CONNECT_RETRY_BASE_BACKOFF_SEC_CONNECT_RETRY_MAX_BACKOFF_SECrrr)r.nrs r,_record_connect_failurer sk !$$[!44q8A,-[)'1Q<8&G04~/?/?'/I ,,,rTcrt|dt|ddS)z?Clear the connect-cooldown state after a successful connection.N)rrrr.s r,_clear_connect_failurer s4  d333##K66666rTclt|}|duotj|kS)zBReturn True if ``server_name`` is still within its retry cooldown.N)rrrr)r.deadlines r,_connect_cooldown_activer s2*..{;;H 4  ?DN$4$4x$??rT_server_error_counts_server_breaker_opened_atgN@ct|ddz}|t|<|tkrtjt |<dSdS)aIncrement the consecutive-failure count for ``server_name``. When the count crosses :data:`_CIRCUIT_BREAKER_THRESHOLD`, stamp the breaker-open timestamp so the cooldown clock starts (or re-starts, for probe failures in the half-open state). rrN)rr_CIRCUIT_BREAKER_THRESHOLDrrr)r.rs r,_bump_server_errorr sV   a0014A()% &&&151A1A!+...'&rTcPdt|<t|ddS)zFully close the breaker for ``server_name``. Clears both the failure count and the breaker-open timestamp. Call this on any unambiguous success signal (successful tool call, successful reconnect, manual /mcp refresh). rN)rrrrs r,rrs+)*%!!+t44444rTserverct|dd}|dSt}|/|r||jn|dS)a*Ask a server task to rebuild its transport, thread-safely. The tool handlers run on caller threads, while the server task and its ``_reconnect_event`` live on the background MCP loop. Setting an asyncio.Event from another thread must go through ``loop.call_soon_threadsafe``; only fall back to a direct ``.set()`` when the loop isn't running (e.g. unit tests that drive the handler synchronously). Returns True if a reconnect signal was delivered, False if the server has no reconnect machinery (nothing to revive). rNFT)r _mcp_loop is_runningcall_soon_threadsafer)reventloops r,_signal_reconnectrse F. 5 5E }u D DOO-- !!%),,,, 4rTct5t|}dddn #1swxYwY|dSt|S)zBAsk a currently-live MCP server to rebuild after external re-auth.NF)rrxrrr.rs r,reconnect_mcp_serverr's ++k**+++++++++++++++ ~u V $ $$s /33 old_sessionrsrvrrc d}tdttt|d|z }t|D]}t |dd}t |dd}d}|Et |dr5 t |}n#t$rd}YnwxYw| ||ur|rdS||dz krtj |d S) aWait for an MCP server to expose a usable session. Tool handlers run in normal worker threads while the MCP transport lives on the module's background asyncio loop. During a reconnect there is a short window where ``srv.session`` is ``None`` (or still points at the stale session until the lifecycle coroutine has left the transport context). A handler that blindly retries in that window can burn circuit-breaker strikes and return ``not connected`` even though the reconnect is already in progress. When ``old_session`` is supplied, require the observed session object to be different so callers do not mistake the pre-reconnect, stale session for a fresh one. g?rrgr~NrTrF) rirrrrrFrOrr!rr) rrr poll_interval iterationsir~readyis_readys r,_wait_for_server_session_readyr0s .MQCg44}DEEFFJ :   & &#y$//Xt,,  !9!9   //     7+#=#=(#=44 zA~   J} % % % 5s!B(( B76B7r@op_descriptionct}||sdStdd}dfd }td||||t ||S) a#Ask a live MCP server task to rebuild its transport session. The important detail is clearing ``_ready`` on the MCP event loop before setting ``_reconnect_event``. Older code left ``_ready`` set across reconnects, so the caller's readiness poll could return immediately and retry against the same dead HTTP/stream session. That was observed as repeated ``Session terminated`` / ``not connected`` / circuit-breaker failures in long-lived gateway sessions even though a fresh CLI process could connect successfully. NFr~r ctdd}|$t|dr|tdd}|&t|dr|dSdSdS)Nrrrr)rrFrr)rreconnect_eventrs r,_request_reconnectz6_signal_reconnect_and_wait.._request_reconnectpsXt,,  !8!8  KKMMM!#'94@@  &7?E+J+J &    ! ! ! ! ! ' & & &rTz2MCP server '%s': %s requesting transport reconnectrr)rrrr"rZrr)r.rrrrrrs ` r,_signal_reconnect_and_waitrYs" D |4??,,|u#y$//K"""""" KK<^ 0111 )    rTrS_AUTH_ERROR_TYPESctrtSg} ddlm}m}|||gn#t $rYnwxYw ddlm}||n#t $rYnwxYw ddlm }||n#t $rYnwxYw ddl }||j n#t $rYnwxYwt|atS)uReturn a tuple of exception types that indicate MCP OAuth failure. Cached after first call. Includes: - ``mcp.client.auth.OAuthFlowError`` / ``OAuthTokenError`` — raised by the SDK's auth flow when discovery, refresh, or full re-auth fails. - ``mcp.client.auth.UnauthorizedError`` (older MCP SDKs) — kept as an optional import for forward/backward compatibility. - ``tools.mcp_oauth.OAuthNonInteractiveError`` — raised by our callback handler when no user is present to complete a browser flow. - ``httpx.HTTPStatusError`` — caller must additionally check ``status_code == 401`` via :func:`_is_auth_error`. r)OAuthFlowErrorOAuthTokenError)UnauthorizedError)OAuthNonInteractiveErrorN) rmcp.client.authrrrrrrtools.mcp_oauthrr4HTTPStatusErrorr)typesrrrrr4s r,_get_auth_error_typesrs`!  E CCCCCCCC no67777       555555 &''''       <<<<<< -....         U*++++      e  sB2 ??A A,+A,0B BBB<< C C ct}|rt||sdS ddl}t||jrt |jdddkSn#t $rYnwxYwdS)zReturn True if ``exc`` indicates an MCP OAuth failure. ``httpx.HTTPStatusError`` is only treated as auth-related when the response status code is 401. Other HTTP errors fall through to the generic error path in the tool handlers. FrNrmrnT)rrr4rrrlr)r+rr4s r,rprps " # #E  3..u  c50 1 1 E3<==D D E      4s2A A%$A%cb t|sdSddlm}| fd} t|d}n5#t$r(}t d|d}Yd}~nd}~wwxYw|r t5t }dddn #1swxYwYd} |&t|d rt||d d } | rt |} tj| } d | vrt| Sn-#tjt f$rt| cYSwxYwn4#t$r'} t d|| Yd} ~ nd} ~ wwxYwt#tjddddddS)aQAttempt auth recovery and one retry; return None to fall through. Called by the 5 MCP tool handlers when ``session.()`` raises an auth-related exception. Workflow: 1. Ask :class:`tools.mcp_oauth_manager.MCPOAuthManager.handle_401` if recovery is viable (i.e., disk has fresh tokens, or the SDK can refresh in-place). 2. If yes, set the server's ``_reconnect_event`` so the server task tears down the current MCP session and rebuilds it with fresh credentials. Wait briefly for ``_ready`` to re-fire. 3. Retry the operation once. Return the retry result if it produced a non-error JSON payload. Otherwise return the ``needs_reauth`` error dict so the model stops hallucinating manual refresh. 4. Return None if ``exc`` is not an auth error, signalling the caller to use the generic error path. Args: server_name: Name of the MCP server that raised. exc: The exception from the failed tool call. retry_call: Zero-arg callable that re-runs the tool call, returning the same JSON string format as the handler. op_description: Human-readable name of the operation (for logs). Returns: A JSON string if auth recovery was attempted, or None to fall through to the caller's generic error path. NrrMc@Kdd{VSrd) handle_401)managerr.sr,_recoverz._handle_auth_error_and_retry.._recovers/'' T:::::::::rTrr@z+MCP OAuth '%s': recovery attempt failed: %sFrz after OAuth recoveryrrr]z.MCP %s/%s retry after auth recovery failed: %srz4' requires re-authentication. Run `hermes mcp login u` (or delete the tokens file under ~/.hermes/mcp-tokens/ and restart). Do NOT retry this tool — ask the user to re-authenticate.T)r] needs_reauthrr)rprkrN_run_on_mcp_loopr!r"r\rrxrrFrrrrr rQrr)r.r+ retry_callrrNr recoveredrec_excr reconnectedrr retry_excrs` @r,_handle_auth_error_and_retryrsD #  t333333kmmG;;;;;;$Xr:::  9     $  , ,,,{++C , , , , , , , , , , , , , , , ?ws,>???4"0GGG K  -  , , , Z\\F F++&((' 444!M)()4   #K000  )     NN@^Y         {### : >; > >%0 > > >       sc= A/A**A/<B##B'*B'* E 5(DE 'E E E  E E>E99E>) zinvalid or expired sessionzexpired sessionzsession expiredzsession not foundzunknown sessionzsession terminatedclosedresourceerrorzclosed resourceztransport is closedzconnection closedz broken pipez end of file_SESSION_EXPIRED_MARKERSi'c ddlm}m}m}|||f}n#t$rd}YnwxYw|g}t }d}t }|r/|dkr(|} | !t| } | |vr5| | |dz}t| trdSt| |rd}t|  r"t fdtDrd}|t#| d d|t#| d d|t#| d d|r|dk(|S) uReturn True if ``exc`` looks like an MCP transport session expiry. Streamable HTTP MCP servers may garbage-collect server-side session state while the OAuth token remains valid — idle TTL, server restart, horizontal-scaling pod rotation, etc. The SDK surfaces this as a JSON-RPC error whose message contains phrases like ``"Invalid or expired session"``. This class of failure is distinct from :func:`_is_auth_error`: re-running the OAuth refresh flow would be pointless because the access token is fine. What's needed is a transport reconnect — tear down and rebuild the ``streamablehttp_client`` + ``ClientSession`` pair, which is exactly what ``MCPServerTask._reconnect_event`` triggers. r)BrokenResourceErrorClosedResourceError EndOfStreamrSFNrTc3 K|]}|vV dSrdrS)rmarkerrs r,rez,_is_session_expired_error..s'LLv}LLLLLLrTrYrr)anyiorrrrr_EXC_TRAVERSAL_MAX_NODESrrrrInterruptedErrorrrrjrrrr) r+rrrtransport_error_typesstackseentransport_error_foundbudgetridentityrs @r,_is_session_expired_errorrPs" #OOOOOOOOOO  !  ### "#,/%EUUD! %F .&s+BBBq BCFFBBBrTNrch|] }|j SrS)r&)rcs r,rz'_snapshot_child_pids..-sAAA!AAArT) r$rrrVrrqrrrRpsutilProcesschildrenr!r)r children_pathfrs r,r r s\ Y[[F @@@v@@@ -' 2 2 2 CaBBAFFHHNN$4$4BBB C C C C C C C C C C C C C C C C C w 3       AAv~~f55>>@@AAAA       55LsFA80A, A8,A00A83A04A88BB4C CC)ztui_gateway.slash_workerztui_gateway.entryz-dorg.eclipse.equinox.launcherzeclipse.jdt.lszorg.eclipse.equinox.launcher_._NON_MCP_CHILD_CMDLINE_MARKERSpidsc^|s|S ddl}n#t$r|cYSwxYwt}|D]} ||}n#|j|jtf$rYDwxYwtd|ddDrj| ||S)aRemove non-MCP children from a PID snapshot delta. _snapshot_child_pids() returns *all* direct children of the gateway. When a stdio MCP server spawns concurrently with a slash_worker or LSP server spawn, the delta ``_snapshot_child_pids() - pids_before`` can include PIDs that are NOT the MCP server. Tracking those PIDs in _stdio_pgids is catastrophic if a future child lacks start_new_session: its pgid can be the TUI parent's PID, so the shutdown sweep's killpg() kills the TUI itself. rNc32K|]}tD]}||vV dSrd)r)rargrs r,rez'_filter_mcp_children..\sQ  8   cM       rTr) rrrrcmdline NoSuchProcess AccessDeniedrrrjr)rrfilteredr&argvs r,r r Cs     EEH   >>#&&..00DD$f&97C    H    ABBx        S Os 'AA21A2c|d}t|trdt|vrdS||dS)aSuppress benign 'Event loop is closed' noise during shutdown. When the MCP event loop is stopped and closed, httpx/httpcore async transports may fire __del__ finalizers that call call_soon() on the dead loop. asyncio catches that RuntimeError and routes it here. We silence it because the connection is being torn down anyway; all other exceptions are forwarded to the default handler. rzEvent loop is closedN)rr RuntimeErrorrdefault_exception_handler)rrLr+s r,_mcp_loop_exception_handlerrfsW ++k " "C#|$$)?3s88)K)K""7+++++rTczt5t'tr ddddStjatt tjtj dda t ddddS#1swxYwYdS)z>Start the background event loop thread if not already running.Nzmcp-event-loopT)rdrdaemon) rrrrgnew_event_loopset_exception_handlerr threadingThread run_foreverrrrSrTr,_ensure_mcp_looprus      Y%9%9%;%;         *,, ''(CDDD&(!                     s"B0A,B00B47B4cororc ddlm}mm|n#t$rcYSwxYwsSfd}|S)uWCarry the caller's context-local HERMES_HOME override into ``coro``. Returns ``coro`` unchanged when no override is active. Otherwise wraps it so the override is set inside the coroutine's own (task-local) context on the MCP loop and reset when it completes — concurrent calls carrying different scopes don't interfere. r)get_hermes_home_overridereset_hermes_home_overrideset_hermes_home_overridechK} d{V |S#|wxYwrdrS)tokenr home_overriderrs r,_scopedz)_wrap_with_home_override.._scopedsZ((77 .::::::  & &u - - - - & &u - - - -s$ 1)rrrrr!)rrr"r!rrs` @@@r,_wrap_with_home_overrider#s           1022    ........ 799s  **c~ ddlmm}|n#t$rcYSwxYwSfd}|S)zBPropagate a dashboard OAuth flow onto the dedicated MCP loop task.r)dashboard_oauth_flowget_dashboard_oauth_flowNcbK5d{VcdddS#1swxYwYdSrdrS)rr%flowsr,r"z0_wrap_with_dashboard_oauth_flow.._scopeds ! !$ ' '  ::::::                  s $(()tools.mcp_dashboard_oauthr%r&r!)rr&r"r%r(s` @@r,_wrap_with_dashboard_oauth_flowr*s        ('))   |  799s  ''rcddlm}ddlm}t5t }dddn #1swxYwY||s7tj|r| tdt|r |n|}t|}t|}|||td}|tdtj}|dn||z} |r#|t%d d } |{|tjz } | dkrO|tj|z } t'd | d dt)|d dt+| | } || S#t.jj$r.|r|cYSYwxYw)aSchedule a coroutine on the MCP event loop and block until done. Accepts either a coroutine object or a zero-arg callable that returns one. Callers can pass a factory to avoid constructing coroutine objects when the MCP loop is unavailable (which would otherwise leak the coroutine frame and emit ``"coroutine was never awaited"`` warnings). Poll in short intervals so the calling agent thread can honor user interrupts while the MCP work is still running on the background loop. r)is_interruptedsafe_schedule_threadsafeNzMCP event loop is not runningzMCP scheduling failedr" log_messagez/MCP event loop unavailable (failed to schedule)TzUser sent a new messageg?zMCP call timed out after z.1fzs (configured timeout: zs)r@)tools.interruptr,agent.async_utilsr.rrrrg iscoroutineclosercallabler#r*r"rrrvrrKrrHr concurrentfuturesr) coro_or_factoryrr,r.rrfuture start_timer wait_timeout remainingelapseds r,rrs/.....::::::  |4??,,|   / / $  ! ! # # #:;;; ( 9 9 N??   D $D ) )D *4 0 0D % % d+F ~LMMM!!JttJ,@H >   > MMOOO"#<== =   4>#3#33IA~~ .**Z7"C?CC,1'NNBCCC|Y77L ===66 6!.    {{}} '}}&&& H s(,,(F>>._replacesE ,,D;tQWWQZZ00>AGGAJJ >rTc4i|]\}}|t|SrS_interpolate_env_varsrkvs r, z)_interpolate_env_vars..#s'FFF1(++FFFrTc,g|]}t|SrSrG)rrKs r,rz)_interpolate_env_vars..%s!888Q%a((888rT) agent.secret_scoperArr_ENV_VAR_PATTERNrrrr)rrErDs @r,rHrHs=<<<<<%5 ? ? ? ? ? ##He444%GFF FFFF%988%8888 LrTserversc6 ddlm}n#t$rd}YnwxYw||Si}|D]c\}}t |t s|||< |||}|r0t d|d|^|||<d|S)zADrop exfiltration-shaped MCP configs before any stdio spawn path.r)validate_mcp_server_entryNz'Skipping suspicious MCP server '%s': %sr) hermes_cli.mcp_securityrRr!rrrr"r\r)rP_validate_mcp_server_entry safe_serversrcfgissuess r,_filter_suspicious_mcp_serversrX)s]ccccccc ]]]X\"""]")L]]__ ! ! c#t$$ !$L  ++D#66   NN9 &!!     T rc ddlm}ddlm}|driS|}|d}|rt |t siS ddlm}|n#t$rYnwxYwi}t| D].\}}t|}t |t r|||</|S#t$r'} td| icYd} ~ Sd} ~ wwxYw) aRead ``mcp_servers`` from the Hermes config file. Returns a dict of ``{server_name: server_config}`` or empty dict. Server config can contain either ``command``/``args``/``env`` for stdio transport or ``url``/``headers`` for HTTP transport, plus optional ``timeout``, ``connect_timeout``, and ``auth`` overrides. ``${ENV_VAR}`` placeholders in string values are resolved from ``os.environ`` (which includes ``~/.hermes/.env`` loaded at startup). r) load_config)env_var_enabledHERMES_SAFE_MODE mcp_servers)load_hermes_dotenvzFailed to load MCP config: %sN)hermes_cli.configrZutilsr[rrrrr^r!rXrrHr"r#) rZ _env_enabledrrPr^rUrrV interpolatedr+s r,_load_mcp_configrcDse111111999999 <* + + I**]++ j$77 I  @ @ @ @ @ @       D (* 7@@FFHH 2 2ID#055L,-- 2%1 T"  4c::: sGC 7C A%$C % A2/C 1A22AC C:C5/C:5C:rc^Kt|}||d{V|S)aCreate an MCPServerTask, start it, and return when ready. The server Task keeps the connection alive in the background. Call ``server.shutdown()`` (on the same event loop) to tear it down. Raises: ValueError: if required config keys are missing. ImportError: if HTTP transport is needed but not available. Exception: on connection or initialization failure. N)r`r)rrrs r,_connect_serverrens>4 F ,,v   MrTcsdSt5t}dddn #1swxYwY||sdSdfd }||dt ffd } t t |tS#t$r'}t d||Yd}~dSd}~wwxYw) zBWake a recycled stdio server and wait briefly for a fresh session.FNr cljjdSrd)rrrr)rsr,rz2_request_lazy_reconnect.._signal_reconnects2 ##%%%%%rTcKtjtz}tj|krSjjrdSt jdd{Vtj|kSdS)NTg?F)rr_RECYCLED_RECONNECT_TIMEOUTr~rrrgr)rrs r, _await_readyz-_request_lazy_reconnect.._await_readys>##&AAn))~)fm.B.B.D.D)t-%% % % % % % % %n))urTr@z>MCP server '%s': lazy reconnect after stdio recycle failed: %sr) rrrrrrOrrir!r"r\)r.rrrrjr+s ` r,_request_lazy_reconnectrks\  $ $ & &u  |4??,,|u&&&&&& /000$\;VWWWXXX  L    uuuuu s$377?"B"" C,CCcDt5t|}dddn #1swxYwY|d|j]|rIt ||t5t|}dddn #1swxYwY|S)zDReturn a connected server, lazily reconnecting recycled stdio state.N)rrxrr~rrkrs r,_get_connected_server_for_callrms  ++k**+++++++++++++++ fn49R9R9T9T4 V444  / /\\+..F / / / / / / / / / / / / / / / Ms/33.BBBc^t|dd}t|r |dSdS)z@Record a user-visible MCP operation when the server supports it.rN)rr5)rrs r,_mark_server_call_startedrosBV%5t< str`` rr c  t dtkrt d}t j|z }|t krRtdtt |z }tj dd dt d|did St  s+t tj dd d id S j st td t!pd  rnVt t# rtj dd did Stj dd d id S fd fd} |} tj|}d|vrt nt' n+#tjt*f$rt' YnwxYw|S#t,$rt/cYSt0$r}t3 ||d } | | cYd}~St5 ||d } | | cYd}~St t6d |tj dt;dt=|jdtA|id cYd}~Sd}~wwxYw)Nrrgrr]rz' is unreachable after z0 consecutive failures. Auto-retry available in ~ues. Do NOT retry this tool yet — use alternative approaches or ask the user to check the MCP server.Fr' is not connectedr,r@ut' transport is down; reconnect requested. Do NOT retry this tool immediately — give it a few seconds to come back.cKt  j4d{Vtj _ j d{V}d _n #d _wxYw dddd{Vn#1d{VswxYwYt dd}| ||jrd}|j pgD]R}t|ddr ||j z }tt|dddd}|r|t|z }Stj dt|pdid Sg}|j pgD] }t|dr"|j r||j 5t#|}|r||\t%|}|r||t'|}|r||t|d dpt)|j} | d vrt,d | t,d | |rd|nd} t|dd} | 3| rtj | | dd Stj d| id Stj d| id S)Nrrrrr-r]zMCP tool returned an errorFrr>>raudioimager-z,MCP %s: content block type %r rendered emptyz2MCP %s: dropping unsupported content block type %rrstructuredContent)rrwr)ror contextvars copy_contextrnr~ call_toolrisErrorrrrrrrrFrr#r<rMr>rQr"r#r\r)r _mark_proven error_textrres_textr image_tag audio_tag resource_textrH text_result structuredrrr.rs r,_callz3_make_tool_handler.._handler.._calls %f - - -' 8 8 8 8 8 8 8 8 0;/G/I/I,8#)>#;#;IQU#;#V#VVVVVVVF37F004F077777 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8#6+A4HHL' ~ ' $n2 4 4Eufd33!"ej0   'wuj$'G'GQUVVH4"c(mm3 z_"B&B#!& ''''" "E ..B" " 5&))ejLL,,,2599 LL+++2599 LL+++ !;5+ N N  LL/// %UFD99QT%[[=Q !GGGLLF#Z NNL#Z/4;$))E***K !)._handler.._call_oncee#E<@@@ @rTz tools/call zMCP tool %s/%s call failed: %sMCP call failed: rT)!rrrrrr_CIRCUIT_BREAKER_COOLDOWN_SECrirrrrmrr~rrHrrrrr rQrr?r!rrr"r]rr>rQr)rrW opened_atager<rrrr+rrrr.rrs` @@r,rz$_make_tool_handler.._handlersP # #K 3 37Q Q Q155k3GGI.""Y.C2223'Ds'J#K#KLL zO{OO/ <OO>GOOO#!&''''0 << # { + + +:G GGG!### #~ ' .C|/Bs)C)C D D '#;///$V,,+:S;SSS' %* ++++zKKKKK# %''''b Kb Kb Kb Kb Kb Kb Kb KH A A A A A A, #Z\\F 1F++f$$&{3333' 444()4 1 1 1#K00000 1M . . .+-- - - - # # #5S*)i))I$       :S*)i))I$       { + + + LL0Y   :MS (:MMhsmmMM" ### # # # # # #5 #sa G>7GG>%G96G>8G99G>>K K!K9K?KKA5KKKrr)r.rrrs``` r,_make_tool_handlerrsMW#tW##W#W#W#W#W#W#W#W#r OrTc4dtdtffd }|S)z>Return a sync handler that lists resources from an MCP server.rr c 6trjstjdddidSfdfd} |S#t$rt cYSt $r}t||d}||cYd}~St||d}||cYd}~St d |tjdtd t|j d t|idcYd}~Sd}~wwxYw) Nr]rrrFrc<Ktj4d{Vtjjdd{V}dddd{Vn#1d{VswxYwYg}|D]}i}t |drt |j|d<t |dr |j|d<t |dr|j r |j |d<t |dr|j r |j |d<| |tj d|idS)N resourcesr%rrrFr)rorrr~list_resourcesrFrr%rrrrrr) all_resourcesrrentryrr.s r,rz=_make_list_resources_handler.._handler.._calls %f - - -'        &9N1; ''!!!!!!                            I" ( (1e$$.#&qu::E%L1f%%+$%FE&M1m,,99+,=E-(1j))3aj3() E*%  '''':{I6UKKK K"A A!Ac&tSrrrsr,rzB_make_list_resources_handler.._handler.._call_oncerrTzresources/listz MCP %s/list_resources failed: %srrTrmr~rrrr?r!rrr"r]rr>rQr rrWrr+rrrr.rs @@r,rz._make_list_resources_handler.._handlers/ << #V^ #:G GGG!### # L L L L L L( A A A A A A #:<<  . . .+-- - - - # # #4S*.>I$       9S*.>I$       LL2K   :MS (:MMhsmmMM" ### # # # # # # #= AD) D2DD D"D(A%D DDrr.rrs`` r,_make_list_resources_handlerrs=4#t4##4#4#4#4#4#4#4#l OrTc4dtdtffd }|S)zFReturn a sync handler that reads a resource by URI from an MCP server.rr c ddlm}t rjst jdd didS|ds |d S fd  fd } |S#t$rtcYSt$r}t ||d }||cYd}~St ||d }||cYd}~St d |t jdtdt|jdt#|idcYd}~Sd}~wwxYw)Nr tool_errorr]rrrFrr%z Missing required parameter 'uri'cxKtj4d{Vjd{V}dddd{Vn#1d{VswxYwYg}t |dr|jng}|D]}t |dd||j.t |ddLttd|}||pdt|j dtjd|rd |nd id S) NcontentsrrBr-)r>r-z[binary data, r7rrrFr)rorr~r@rFrrrrrMrrrBrrr)rrrrrenderedrr.r%s r,rz<_make_read_resource_handler.._handler.._calls %f - - -' A A A A A A A A%~;;C@@@@@@@@ A A A A A A A A A A A A A A A A A A A A A A A A A A A "E*1&**E*EMv2H! X X5&$//;LL,,,,UFD11= :'Z%HHH#  HLL!V-Vc%*oo-V-V-VWWW:xU)J5)9)9)9KZ_``` `s!A A Ac&tSrrrsr,rzA_make_read_resource_handler.._handler.._call_oncerrTzresources/readzMCP %s/read_resource failed: %srrTrrrmr~rrrrr?r!rrr"r]rr>rQr) rrWrrr+rrrr%r.rs @@@r,rz-_make_read_resource_handler.._handlers-------/ << #V^ #:G GGG!### #hhuoo B:@AA A a a a a a a a* A A A A A A #:<<  . . .+-- - - - # # #4S*.>I$       9S*.>I$       LL1;   :MS (:MMhsmmMM" ### # # # # # # #s=/ A99E ED=1E7D= EA%D=7E=Errs`` r,_make_read_resource_handlerrs=;#t;##;#;#;#;#;#;#;#z OrTc4dtdtffd }|S)z._handler.._call..0s***  #AFAHMAZAZt_`_lt q}==rt._handler.._call"s %f - - -'        $7N/K%%                            G  & &1f%%+$%FE&M1m,,99+,=E-(1k**q{** "# ***E+&u%%%%:y'2GGG Grc&tSrrrsr,rz@_make_list_prompts_handler.._handler.._call_once;rrTz prompts/listzMCP %s/list_prompts failed: %srrTrrs @@r,rz,_make_list_prompts_handler.._handlers/ << #V^ #:G GGG!### # H H H H H H2 A A A A A A #:<<  . . .+-- - - - # # #4S*nI$       9S*nI$       LL0+s   :MS (:MMhsmmMM" ### # # # # # # #rrrs`` r,_make_list_prompts_handlerrs=9#t9##9#9#9#9#9#9#9#v OrTc4dtdtffd }|S)zDReturn a sync handler that gets a prompt by name from an MCP server.rr c  ddlm}t  r jst jdd didS|ds |d S|d i fd  fd } |S#t$rtcYSt$r}t ||d }||cYd}~St ||d }||cYd}~St d |t jdtdt|jdt#|idcYd}~Sd}~wwxYw)Nrrr]rrrFrrz!Missing required parameter 'name'rcKtj4d{Vjd{V}dddd{Vn#1d{VswxYwYg}t |dr|jngD]}i}t |dr |j|d<t |drO|j}t |dr |j|d<n-t|tr||d<nt||d<| |d|i}t |dr|j r |j |d<tj|dS) NrtrrrrrFr)rorr~ get_promptrFrrrrrrrrrr) rrrrrr?rrrs r,rz9_make_get_prompt_handler.._handler.._calljs/ %f - - -' T T T T T T T T%~888SSSSSSSS T T T T T T T T T T T T T T T T T T T T T T T T T T TH+26:+F+FNB ' '3''-$'HE&M3 **8!kGw//8+2<i((#GS118+2i((+.w<<i(&&&&)Dv}-- 9&2D 9&,&8]#:d777 7s#A A"Ac&tSrrrsr,rz>_make_get_prompt_handler.._handler.._call_oncerrTz prompts/getzMCP %s/get_prompt failed: %srrTr) rrWrrr+rrrrrr.rs @@@@r,rz*_make_get_prompt_handler.._handler\s:------/ << #V^ #:G GGG!### #xx C:ABB BHH["--  8 8 8 8 8 8 80 A A A A A A #:<<  . . .+-- - - - # # #4S*mI$       9S*mI$       LL. S   :MS (:MMhsmmMM" ### # # # # # # #s= BE* E3EEE#E)A%EEErrs`` r,_make_get_prompt_handlerrYs=?#t?##?#?#?#?#?#?#?#B OrTc"dtffd }|S)zBReturn a check function that verifies the MCP connection is alive.r ct5t}dddn #1swxYwY|duo|jdup|Srd)rrxrr~r)rr.s r,_checkz_make_check_fn.._checks  / /\\+..F / / / / / / / / / / / / / / / $  Lt+Jv/H/H/J/J s 044)rO)r.rs` r,_make_check_fnrs/ D       MrTc|sdidSfdd}fd|}||}|}t|tsdidS|ddkr d|vri|dii}|S)adNormalize MCP input schemas for LLM tool-calling compatibility. MCP servers can emit plain JSON Schema with ``definitions`` / ``#/definitions/...`` references. Kimi / Moonshot rejects that form and requires local refs to point into ``#/$defs/...`` instead. Normalize the common draft-07 shape here so MCP tool schemas remain portable across OpenAI-compatible providers. Additional MCP-server robustness repairs applied recursively: * Missing or ``null`` ``type`` on an object-shaped node is coerced to ``"object"`` (some servers omit it). See PR #4897. * When an ``object`` node lacks ``properties``, an empty ``properties`` dict is added so ``required`` entries don't dangle. * ``required`` arrays are pruned to only names that exist in ``properties``; otherwise Google AI Studio / Gemini 400s with ``property is not defined``. See PR #4651. * MCP/Pydantic optional fields commonly arrive as ``anyOf: [{...}, {"type": "null"}], default: null``. Anthropic rejects nullable branches in tool input schemas, so nullable unions are collapsed to the non-null branch and optionality remains represented solely by the parent object's ``required`` list. All repairs are provider-agnostic and ideally produce a schema valid on OpenAI, Anthropic, Gemini, and Moonshot in one pass. objectr>rSct|tri}|D]Z\}}|dvr9t|tr$fd|D||<B|dkrdn|}|||<[|d}t|tr2|drd|t ddz|d<|St|trfd |DS|S) aWalk the schema, promoting legacy ``definitions`` to ``$defs``. The promotion is contextual: ``definitions`` is renamed only when it appears as a JSON Schema *meta-keyword* (sibling of ``properties`` / ``$ref`` at a schema node), never when it appears as the *name of a property* (i.e., as a key inside a ``properties`` dict). Without this gate, MCP servers that legitimately expose a tool parameter named ``definitions`` (e.g. a CI/pipelines tool that uses ``definitions`` for an array of pipeline-definition IDs) would have that user-facing property name silently rewritten to ``$defs``. Anthropic and OpenAI both reject ``$`` in property names (``^[a-zA-Z0-9_.-]{1,64}$``), so the whole tool array gets a 400 and every conversation breaks. The gate works by treating ``properties`` and ``patternProperties`` specially during descent: we iterate the property-name -> schema map directly, leaving the property names verbatim, then recurse into each property's schema where ordinary JSON Schema semantics resume (so any legitimately-nested ``definitions`` meta-keyword inside a property's schema is still promoted). )rSpatternPropertiesc.i|]\}}||SrSrS)r prop_name prop_schema_rewrite_local_refss r,rLzL_normalize_mcp_input_schema.._rewrite_local_refs..s;'''2I{"#6#6{#C#C'''rT definitionsz$defsz$refz#/definitions/z#/$defs/Nc&g|] }|SrSrS)rrrs r,rzL_normalize_mcp_input_schema.._rewrite_local_refs..s%???$''--???rT)rrrrrrrr)rrrrout_keyrrs r,rz8_normalize_mcp_input_schema.._rewrite_local_refssL. dD ! ! J"jjll E E U===*UTXBYBY= ''''6;kkmm'''JsOO *- )=)=gg3G*=*=e*D*DJw''..((C#s## N7G(H(H N%/#c:J6K6K6L6L2M%M 6"  dD ! ! @????$??? ? rTc(ddlm}||dS)aCollapse JSON Schema nullable unions to provider-safe non-null schemas. Delegates to ``tools.schema_sanitizer.strip_nullable_unions`` so MCP ingestion, the Anthropic guard, and the global sanitizer all share one implementation. Keeps the ``nullable: true`` hint so runtime argument coercion can still map a model-emitted ``"null"`` string to Python ``None`` for this optional field. r)strip_nullable_unionsT)keep_nullable_hint)tools.schema_sanitizerr)rrs r,_strip_nullable_unionz:_normalize_mcp_input_schema.._strip_nullable_unions- A@@@@@$$TdCCCCrTc"t|trfd|DSt|ts|Sfd|D}|ds d|vsd|vrd|d<|ddkrd|vs(t|dts>d|vrin|d|d<t|dtsi|d<|d}t|trc|dpifd|D}t |t |kr|r||d<n|dd|S) zBRecursively repair object-shaped nodes: fill type, prune required.c&g|] }|SrSrS)rr_repair_object_shapes r,rzM_normalize_mcp_input_schema.._repair_object_shape..s%@@@4((..@@@rTc.i|]\}}||SrSrS)rrJrKrs r,rLzM_normalize_mcp_input_schema.._repair_object_shape..s+HHH41aA++A..HHHrTr>rSrrcFg|]}t|t|v|SrS)rr)rrrUs r,rzM_normalize_mcp_input_schema.._repair_object_shape..(s-RRRq 1c0B0BRqEzzzzzrTN)rrrrrrr)rrepairedrvalidrUrs @r,rz9_normalize_mcp_input_schema.._repair_object_shape s dD ! ! A@@@@4@@@ @$%% KHHHH4::<<HHH||F## ( H $ $ h(>(>'HV  <<  8 + +8++: \**D44+0<8/K/KQYZfQg&!(,,|"<"rS)rrr)rQrrrrs @@r,r:r:s6 4 333,,,,,\ D D D$$$$$L%$V,,J&&z22J%%j11J j$ ' '4 333~~f))l*.L.L5 5L"55 rTrcLtjddt|pdS)a5Return an MCP name component safe for tool and prefix generation. Preserves Hermes's historical behavior of converting hyphens to underscores, and also replaces any other character outside ``[A-Za-z0-9_]`` with ``_`` so generated tool names are compatible with provider validation rules. z [^A-Za-z0-9_]rr)r.rr)rs r,sanitize_mcp_name_componentr>s% 6"CU[b)9)9 : ::rTmcp____cft|}t|}t|t|S)zmBuild the registry/wire name for an MCP tool. Produces ``mcp____``. )rMCP_TOOL_NAME_PREFIX_MCP_NAME_DELIM)r.r safe_server safe_tools r,rGrGTs9 .k::K+I66I" MK M M) M MMrTc t||j}||jp d|jd|tt |dddS)aSConvert an MCP tool listing to the Hermes registry schema format. Args: server_name: The logical server name for prefixing. mcp_tool: An MCP ``Tool`` object with ``.name``, ``.description``, and ``.inputSchema``. Returns: A dict suitable for ``registry.register(schema=...)``. z MCP tool z from r7Nr8)rGrrr:r)r.mcp_tool prefixed_names r,_convert_mcp_schemar^s^+; FFM+]/]8=/]/]P[/]/]1'(MSW2X2XYY  rTc t|dd|ddiddddt|dd |ddd d d d id gddddt|dd|ddiddddt|dd|ddd dd ddiddddgddddgS)zBuild schemas for the MCP utility tools (resources & prompts). Returns a list of (schema, handler_factory_name) tuples encoded as dicts with keys: schema, handler_key. rz*List available resources from MCP server 'rrrr8)rQ handler_keyr@z(Read a resource by URI from MCP server 'r%stringzURI of the resource to read)r>r)r>rSrrz(List available prompts from MCP server 'rz&Get a prompt by name from MCP server 'zName of the prompt to retrievez(Optional arguments to pass to the promptT)r>rrSadditionalPropertiesrr)rGrs r,_build_utility_schemasrqsz/{.s,,,dD ,,,rTz>MCP config %s must be a string or list of strings; ignoring %r)rrrrrr"r\)rrs r,_normalize_name_filterrsx }uu %w%$s+,,-,,e,,,, NNSUZ\abbb 55LrTrc||St|tr|St|tr2|}|dvrdS|dvrdSt d|||S)z2Parse a bool-like config value with safe fallback.N>1onyestrueT>0noofffalseFzAMCP config expected a boolean-ish value, got %r; using default=%s)rrOrrrr"r\)rrlowereds r,_parse_boolishrs }% %++--%%'' 0 0 04 1 1 15 NNVX]_fggg NrTrc||}|d}|*t|tr||}|dS t|}n4#tt f$r t d||YdSwxYw|dkrdS|dkrt d||dS|S)zKReturn an optional positive lifecycle timeout from top-level/nested config. lifecycleNz6MCP config %s must be a number of seconds; ignoring %rrz+MCP config %s must be positive; ignoring %r)rrrrrQrRr"r\)rrrawrres r,r~r~s **S//C ;''I {z)T22{mmC   {t** z "OQTVYZZZtt!||t{{Dc3OOOt NsA,,-BBrr@rrrr@rrrrcxt|}t5|t|<ddddS#1swxYwYdS)z:Remember the exact MCP server that registered *tool_name*.N)rrr)rr.safe_server_names r,_track_mcp_tool_serverrs2;?? ==,<y)==================s /33c|t5t|dddddS#1swxYwYdS)z5Forget MCP server provenance for a deregistered tool.N)rrr)rs r,rr s 44""9d333444444444444444444s 155c|dpi}t|dd}t|dd}d}t|dd}|t|dd}g}t|D]} | d } | d vr|std || -| d vr|std || P|=t | } t|| dtd|| | n@t| } t|j | std|| | | | |S)z?Select utility schemas based on config and server capabilities.r+rTrrNrrr>r@rz;MCP server '%s': skipping utility '%s' (resources disabled)>rrz9MCP server '%s': skipping utility '%s' (prompts disabled)zRMCP server '%s': skipping utility '%s' (server does not advertise '%s' capability)z9MCP server '%s': skipping utility '%s' (session lacks %s)) rrrrr"r#_UTILITY_CAPABILITY_ATTRS_UTILITY_CAPABILITY_METHODSrFr~r) r.rr tools_filterresources_enabledprompts_enabledadvertised_capsrselectedrrcap_attrrequired_methods r,_select_utility_schemasr s::g&&,"L&|'7'7 'D'DdSSS$\%5%5i%@%@$OOOOO&"5t<?;;  O#   OrTcg}tD]j\}}t|dr||j0|jD]2}t |j|}||d3k|S)z6Return tool names for all currently connected servers.rr) rxrrFrrrrrr)names_snamerrrQs r,_existing_tool_namesr IsE"..**)) 63 4 4  LL6 7 7 7   ) )H(h??F LL ( ( ( ( ) LrTc ddlm}g}d|}|dpi}t|dd|dt|dd|d d td t ffd }|jD]'}||js"t d ||j5t||j|j pdt||} | d} | | } | r9| ds$td||j| | || || t#||j|jt'|d| dt)| ||| )t,t.t0t2d} t'|} t5|||D]}|d} |d}| |||j}| d}| |} | r3| dstd||| {|||| || d| dt)|||||r||||S)aRegister tools from an already-connected server into the registry. Handles include/exclude filtering and utility tools. Toolset resolution for ``mcp-{server}`` and raw server-name aliases is derived from the live registry, rather than mutating ``toolsets.TOOLSETS`` at runtime. Used by both initial discovery and dynamic refresh (list_changed). Returns: List of registered prefixed tool names. rrzmcp-r+includez mcp_servers.z.tools.includeexcludez.tools.excluderr c r|vSr|vSdS)NTrS)r exclude_set include_sets r,_should_registerz0_register_server_tools.._should_registerqs.  , + +  0K/ /trTz8MCP server '%s': skipping tool '%s' (filtered by config)rrusMCP server '%s': tool '%s' (→ '%s') collides with built-in tool in toolset '%s' — skipping to preserve built-inFr)rtoolsetrQhandlercheck_fnis_asyncrrrQrupMCP server '%s': utility tool '%s' collides with built-in tool in toolset '%s' — skipping to preserve built-in)rrrrrrOrrr"r#rrrget_toolset_for_toolrr\registerrrrrrrrrrr register_toolset_alias)rrrrregistered_names toolset_namerrrrQtool_name_prefixedexisting_toolset_handler_factoriesrrrr util_namerrs @@r,rrVs~('''''"$ $==L::g&&,"L()9)9))D)DFiUYFiFiFijjK()9)9))D)DFiUYFiFiFijjKCDM44 ..  LLSUY[c[h i i i  dHM83G3M2NNN$T844#F^$889KLL  $4$?$?$G$G  NNIhm%79I    # &tX]F>++xM* 1$[1$8KLL6N $88CC  $4$?$?$G$G  NNIi!1     }-     y$/// ****<''l;;; rTc &K|dt}tjt |||d{V}t 5t |t |d|t|<dddn #1swxYwYt|||}t||_ d|vrdnd}td||t!|d||S) zsConnect to a single MCP server, discover tools, and register them. Returns list of registered tool names. rr@NrwHTTPstdioz/MCP server '%s' (%s): registered %d tool(s): %srE)rrrgrIrerrrrrrxrrrr"rZrr)rrrrrtransport_types r,_discover_and_register_serverr&si jj!24LMMO#f%%F   ""4(((""4...               .dFFCC$()9$:$:F!$VVGN KK9 nc"233 "## sABB"Bc tstdgSt|}|stdgSt5d|Dd|D}t D]}t |d|D]y\}}t| dddr(t t|Rtt|z dddn #1swxYwY|D]}t!|st#St%d t&d t(d t*t&fd  fd }ddlm}m}|}|r |d t3|d|r |dn#|r |dwwxYwt5dD} t5d| D} dddn #1swxYwYt7t7| z } | s| r;d| dt7| d} | r | d| dz } t| t#S)a[Connect to explicit MCP servers and register their tools. Idempotent for already-connected server names. Servers with ``enabled: false`` are skipped without disconnecting existing sessions. Args: servers: Mapping of ``{server_name: server_config}``. Returns: List of all currently registered MCP tool names. z;MCP SDK not available -- skipping explicit MCP registrationz No explicit MCP servers providedci|]E\}}|tvt|ddd3t|B||FSr{Tr)rxrrrrIs r,rLz(register_mcp_servers..sh    1  quuY55tDDD!-Q//! q   rTcrg|]4}|tv tt|dd't|5S)r~N)rxr)rrJs r,rz(register_mcp_servers.. sD   H}}!i!F!F!N QK!N!N!NrTNsupports_parallel_tool_callsFrrrVr c2Kt||d{VS)z@Connect to a single server and return its registered tool names.N)r&)rrVs r, _discover_onez+register_mcp_servers.._discover_one%s(24=========rTc8Kt}tjfdDddid{V}t ||D].\}}t |tr|id}t|}t5t ||t|<t|dddn #1swxYwYtd||rd|dnd|t5t |t|dt%|dddn #1swxYwY0dS) Nc36K|]\}}||VdSrdrS)rrrVr-s r,rez>register_mcp_servers.._discover_all..-s3 L L94mmD#&& L L L L L LrTrTrz*Failed to connect to MCP server '%s'%s: %sz (command=rzr)rkeysrgrrziprrrrrrrrrr"r\rr) server_namesresultsrrrrr- new_serverss r, _discover_allz+register_mcp_servers.._discover_all)sBK,,..//  L L L L 8I8I8K8K L L L "         g66 1 1LD&&-00 1%//$3377 BB/7722&..t4443:*40 ,D111222222222222222@/6>+++++B 11&..t444*..tT:::*4000111111111111111' 1 1s%4DD D .Zs===1qH}}Q}}}rTc3hK|]-}ttt|dgV.dSrNrrrxr:s r,rez'register_mcp_servers..[sO    %=rBB C C      rTzMCP: registered  tool(s) from server(s)rD failed))rMr"r#rXrrrrrrrrrrrrrr rrrr r1r,r6rsumrrZ)rP stale_cachedsrv_namesrv_cfgrr5_is_interrupted_set_interrupt_was_interrupted connectednew_tool_countfailedsummaryr-r4s @@r,register_mcp_serversrLs  RSSS ,W55G  7888   V V        $     !!+...# 7 7H " & &x 6 6 6 6!( V V Hggkk*H%PPZ_``` V&**+Fx+P+PQQQQ&../J8/T/TUUUU  V9 V V V V V V V V V V V V V V VD# &#%%%>#>D>T#Y>>>>111111Jcbbbbbbb&((u!4444  ! N4   ! N4  !   == ===                         I .F]^]]3y>>]]]  - ,F,,, ,G G  ! !!s1C3EE!E!HH&I  IIctstdgSt}|stdgSt5d|D}dddn #1swxYwYt |}|s|St5d|D}td|D}dddn #1swxYwYt|t|z }|s|r;d|dt|d }|r |d |d z }t ||S) aEntry point: load config, connect to MCP servers, register tools. Called from ``model_tools`` after ``discover_builtin_tools()``. Safe to call even when the ``mcp`` package is not installed (returns empty list). Idempotent for already-connected servers. If some servers failed on a previous call, only the missing ones are retried. Returns: List of all registered MCP tool names. z4MCP SDK not available -- skipping MCP tool discoveryzNo MCP servers configuredctg|]5\}}|tvt|ddd3|6Sr))rxrr)rrrVs r,rz&discover_mcp_tools..sR   c8##swwy$7O7OY](^(^(^# ###rTNc$g|] }|tv |SrSr9rrs r,rz&discover_mcp_tools..s"!X!X!X4txGWGW$GWGWGWrTc3hK|]-}ttt|dgV.dSr<r=rPs r,rez%discover_mcp_tools..sO   (@"EE F F      rTz MCP: r>r?rDr@) rMr"r#rcrrrLrArrZ)rPnew_server_names tool_namesconnected_server_namesrI failed_countrKs r,discover_mcp_toolsrVis   KLLL   G  0111     $]]__                  &g..J    !X!X3C!X!X!X  .                    '((3/E+F+FFLaNaa#>T:U:Uaaa  3 2L222 2G G s$BB B'&CC Cc|tsdSt5t|}t |o|t vcdddS#1swxYwYdS)aCheck if an MCP tool belongs to a server that supports parallel tool calls. MCP tool names follow the pattern ``mcp__{server}__{tool}``, but that string shape is ambiguous when server names contain underscores. Use the exact server provenance captured at registration time rather than prefix matching, then check whether that server's config includes ``supports_parallel_tool_calls: true``. Returns False for non-MCP tools or tools from servers without the flag. FN)rrrrrrOr)rr.s r,is_mcp_tool_parallel_saferXs    4 5 5u KK,00;; KIK3I$IJJKKKKKKKKKKKKKKKKKKs2A##A'*A'c g}t}|s|St5tt}t t }tt }dddn #1swxYwY|D]c\}}d|vr|ddnd}t|ddd}||} | r| j x||t| d rt| j nt| jdd d d } | jrt| jj| d <|| |s|||dd ddd ||vr|||dd d dd ||vr%|||dd d d||dG|||dd d dd e|S)a`Return status of all configured MCP servers for banner display. Returns a list of dicts with keys: name, transport, tools, connected, disabled, and status. Includes connected servers, disabled servers, in-flight connection attempts, recorded failures, and servers that are configured but have not been started in this process yet. NrwrOr{r$r{TrrFrH)rrOr+rHdisabledrurzrrZ connectingrJ)rrOr+rHrZrur] configured)rcrrrxrrrrrrr~rFrrrrrr) rr\active_serversr[connect_errorsrrVrOr{rrs r,get_mcp_statusr_sF"##J  66h+,, 455666666666666666  %%''77 c49SLLCGGK000g  D!9!94HHH##D)) 3 fn0&?FvOg?h?hAV:;;;nqrxroAoA!!% E C$()9)A$B$Bj! MM% '  MM&" $     Z   MM&"!&     ^ # # MM&"!"'-     MM&"!&      Ms=A%%A),A)ctsiSt}|siSd|DsiStigfd} t |dn2#t $r%}t d|Yd}~nd}~wwxYwtn#twxYwS)uTemporarily connect to configured MCP servers and list their tools. Designed for ``hermes tools`` interactive configuration — connects to each enabled server, grabs tool names and descriptions, then disconnects. Does NOT register tools in the Hermes registry. Returns: Dict mapping server name to list of (tool_name, description) tuples. Servers that fail to connect are omitted from the result. cdi|]-\}}t|ddd*||.Sr))rrrIs r,rLz*probe_mcp_server_tools..sOA !%% 400$ ? ? ? 1rTc Kt }g} D]W\}}|dt}|t jt|||Xt j |ddid{V}t||D]\}}t|trtd||7 |g}|jD]1}t!|ddpd} ||j| f2| |<t j d Dddid{VdS) Nrr@rTz$Probe: failed to connect to '%s': %srrc3>K|]}|VdSrdr)rss r,rez=probe_mcp_server_tools.._probe_all..0s* 3 3qajjll 3 3 3 3 3 3rT)rr0rrrrrgrIrerr1rr!r"r#rrr) r corosrrVr@outcomesoutcomer+rdescr{probed_serversrs r, _probe_allz*probe_mcp_server_tools.._probe_allsW\\^^$$  S SID#*,DEEB LL)/$*D*DbQQQ R R R R G$GGGGGGGG 11 ! !MD''9--  CT7SSS  ! !' * * *E^ - -q-44: afd^,,,, F4LLn 3 3N 3 3 3 "           rTr7r@zMCP probe failed: %sN) rMrcrrrr!r"r#_stop_mcp_loop_if_idle)servers_configrkr+r{rjrs @@@r,probe_mcp_server_toolsrns%  %''N  '--//G  %'F*,N       4!S11111 222 +S111111112         Ms0A-,B.- B7BB.BB..B>clt5ttcdddS#1swxYwYdS)uTrue if any MCP server has actually registered tools into the registry. Cheap — checks the global MCP-tool→server name map under ``_lock``, no registry walk. Used by the per-turn refresh hook so a session with no MCP tools (the common case, and also a connected-but-zero-tool/prompt-only server) skips the ``get_tool_definitions`` rebuild entirely. Checks registered TOOLS, not connected servers, so a server that registers no tools doesn't keep the hook firing every turn. N)rrOrrSrTr,has_registered_mcp_toolsrpFsz ,,*++,,,,,,,,,,,,,,,,,,s )--ct5ttcdddS#1swxYwYdS)aReturn the set of MCP server names that have actually registered at least one tool into the registry (post-connection, post check_fn/include- exclude filtering) -- i.e. the real, availability-filtered signal, not just what's present in config.yaml under ``mcp_servers``. Used by capability-aware prompt building (e.g. gateway/session.py's Slack platform note) to detect an MCP server that provides a given platform's capability regardless of what its config key is named. N)rrrvaluesrSrTr,get_registered_mcp_server_namesrsTs 44)002233444444444444444444s &;??)enabled_overridedisabled_override quiet_modervcddlm}ddlm}||9||nt |dd}||nt |dd}||_||_n"t |dd}t |dd}|j}t||||pg} d| D} t|| | } t5t |d d } t| tr| nd } || krtcdddSd t |d dpgD}| |kr/t| ||_tcdddS| |_| |_t |d d}t|tr)||| t| ||_| |z cdddS#1swxYwYdS)u Re-derive an already-built agent's tool snapshot from the live registry. The agent snapshots ``agent.tools`` once at build time and never re-reads the registry (see ``run_agent`` / ``agent_init``). When MCP servers connect *after* that snapshot — a slow HTTP/OAuth server that misses the bounded startup wait, or a ``/reload-mcp`` — their tools are invisible until the snapshot is rebuilt. This is the single shared rebuild used by every such caller (the TUI ``reload.mcp`` RPC, the gateway reload, the late-binding refresh thread, and the per-turn between-turns refresh) so they can't drift apart again. The rebuild respects the agent's own ``enabled_toolsets`` / ``disabled_toolsets`` (the same filtering it was built with) and diffs by tool **name** (not count — a count compare misses an equal-size add/remove swap). Crucially it is **additive-preserving**: ``get_tool_definitions`` returns only the registry-derived tools, but ``agent_init`` appends two further families directly onto ``agent.tools`` *after* that — external memory-provider tools (mem0/honcho/…) and context-engine tools (``lcm_*``). A naive ``agent.tools = get_tool_definitions(...)`` would silently DELETE those. So after rebuilding the registry set we re-run the same post-build injectors ``agent_init`` used, reconstructing the full surface. The new ``(tools, valid_tool_names)`` pair is published together under ``_agent_tools_lock`` so a concurrent reader never sees a cross-attribute half-swap. Returns the set of newly-added tool names (empty when nothing changed), so callers can decide whether to notify the user / re-emit session info. The caller owns the prompt-cache contract: this helper does NOT check turn state, because each caller has a different policy (``/reload-mcp`` rebuilds after explicit user consent; the late-binding and between-turns paths only rebuild at a turn boundary, before that turn's ``tools=`` prefix is assembled). r)get_tool_definitionsrNenabled_toolsetsdisabled_toolsets)ryrzrvc*h|]}|ddSrrrSr;s r,rz*refresh_agent_mcp_tools..s!9991:v&999rT_tool_snapshot_generationrc*h|]}|ddSr|rSr;s r,rz*refresh_agent_mcp_tools..s1    jM& !   rTr+_context_engine_tool_names) model_toolsrxrrrryrz _generationr_reinject_post_build_tools_agent_tools_lockrrrrir}r+valid_tool_namesrr)agentrtrurvrxrr{rZsnapshot_generationnew_defs new_namesstaged_engine_namespublished_gen_raw published_genr engine_namess r,refresh_agent_mcp_toolsrcsR100000'''''' #'8'D&6&B""PUWikoHpHp(9(E$$7SXZmosKtKt!("*%!3T::5"5t<<#. $&!      H:9999I5UHiPP ## $E+FKK-78I3-O-OW))UW  . .55########  eWd339r      /2-AT.U.UE +55%########& !*u&BDII lC ( ( 5       3 4 4 4*-m=P*Q*Q'7"7##################s 4>G?AGA6GGG tools_listname_setcdtdtffd } t|dd}|rt|ddnd}t|raddlm}|t|d dt|d dd v r-|D]"}t |tr ||#n,#t$rt d dYnwxYwt} t|d d} | dupd| v} t|dd} | rt| ddnd} | rjt| r[| D]P}t |ts| dd} ||r| r| | Qn,#t$rt ddYnwxYw|S)uAppend memory-provider and context-engine tools onto staged locals. Mirrors the post-``get_tool_definitions`` injection in ``agent_init`` so a snapshot rebuild reconstructs the FULL tool surface, not just the registry-derived subset. Operates ONLY on the caller's staged ``tools_list`` / ``name_set`` (never the live agent attributes) so the rebuild stays atomic. Idempotent (skips names already present) and fail-soft. Returns the set of context-engine routing names actually appended by THIS rebuild — matching ``agent_init``'s dedup behavior (a name already provided by a registry/plugin tool is NOT claimed for context-engine routing). The caller publishes this into ``agent._context_engine_tool_names`` atomically with the snapshot. rQr c|dd}|r|vrdSd|d|dS)NrrFrr9T)rrr)rQrrrs r,_addz(_reinject_post_build_tools.._adds`zz&"%% tx''5:6BBCCC TtrT_memory_managerNget_all_tool_schemasr)memory_provider_tools_enabledryrzmemory)memory_tool_presentz)Memory-provider tool re-injection skippedTrwcontext_enginecontext_compressorget_tool_schemasrrz(Context-engine tool re-injection skipped) rrOrr5agent.memory_managerrrr!r"r#rrr)rrrrmemory_managerget_mem_schemasrrQrr{context_engine_allowed compressor get_schemasrs `` r,rrssTdQ (94@@Sak'.2H$OOOgk O $ $ % J J J J J J,,14882D99$,$8 % .o//%%F!&$//%V QQQ @4 PPPPPQ #uuP%!3T::!(D!O4D4OU$8$?? GQ[gj*K|]}|VdSrdrd)rrs r,rez:shutdown_mcp_servers.._shutdown..;s, ? ?Ffoo ? ? ? ? ? ?rTrTz!Error closing MCP server '%s': %s) rgrr1rr!r"r#rrrxrrr)r3rrservers_snapshots r, _shutdownz'shutdown_mcp_servers.._shutdown9sD ? ?.> ? ? ? "        ""2G<<  NFF&),,  7f - - NN    ( - - / / / $ * * , , ,  - - - - - - - - - - - - - - - - - -s8A CCCrr-z MCP shutdown: failed to scheduler/rr@zError during MCP shutdown: %s)rrrxrrrrr_stop_mcp_looprrr2r.r"rrr#)rrr.r9r+rs @r,shutdown_mcp_serversr"s 33 1 122333333333333333   - - ' - - / / / $ * * , , , - - - - - - - - - - - - - - - -----$  DOO-->>>>>>)) IKK:      C b ))))  C C C .s4"U +++++rTc<i|]}|tv |t|SrS)r)rr&s r,rLz/_kill_orphaned_mcp_children..s* _ _ _C3R^K^K^l3&7K^K^K^rTr&sigr.r c|}ttdd}|x|v#|krtd||nQ |||dS#t t tf$r(}td||||Yd}~nd}~wwxYw tj ||dS#t t tf$rYdSwxYw)z=SIGTERM/SIGKILL via pgroup on POSIX, fall back to pid signal.rNuMCP server '%s' pgid %d matches gateway pgid; skipping killpg to avoid self-kill and using per-pid kill — any grandchildren in this group may not be reapedzHkillpg(%d, %d) failed for MCP server '%s': %s; falling back to kill(pid)) rrr$r"r\r rrrr#kill)r&rr.r)rr+_my_pgidpgidss r, _send_signalz1_kill_orphaned_mcp_children.._send_signals-yy~~Xt,,   2#(8(8D   F4%%%F*OWELLbc;  GC     "OW=    DD s* A%%B$<BB$(B??CCz,Sent SIGTERM to orphaned MCP process %d (%s)rSIGKILLrz6Force-killed MCP process %d (%s) after SIGTERM timeout)signalrrrrrrrrrrrr$getpgrpr rrrrSIGTERMr"r#rrrrrr\) rr._signalropidr_activer&r_sigkillrrrs ` @@r,rres=< ((!&  D-11$AAE&5K+?+?DJJ 6 6D  & &t , , , % ) )$ 5 5 5 5  ++&&F&&,llnn KK    + +T****!` _4 _ _ _ ( (C   S$ ' ' ' ' (1(((((((((((((((: :<< G $!#!C!c!d!!!!!!!H!JJLLWW[ S'/;777 CS+VVVV JqMMMw 7?;;H+***** JJLL  [{3   S(K000 D       s$D D%%D),D)5E EEc"tdS)aStop the MCP loop only when no registered server still owns it. Probe paths create temporary MCPServerTask instances that are not placed in ``_servers``. They should clean up an otherwise-idle loop, but must not tear down the process-global loop when live agent tools are registered on it. Otherwise a dashboard/CLI probe can make later MCP tool calls fail with ``MCP event loop is not running``. T only_if_idle)rrSrTr,rlrls t , , ,,rTrrct5|r6tstr(td ddddSt }t }dadadddn #1swxYwY|h||j|| d | n#t$rYnwxYwtddS)z3Stop the background event loop and join its thread.zKLeaving MCP event loop running; active servers are registered or connectingNFrcr@T)r) rrxrr"r#rrrrrr4r!r)rrthreads r,rrsN   X );  LLf g g g    !!$),,,   KKK " " "  JJLLLL    D  $48888 4s),AAA#&A#B44 CC)r)rrr r)r)T)FN)rTrgrxconcurrent.futuresr6rkrNrrrr$rjr.rr&rrrrtypingrrrrrr r r0r getLoggerrQr"rr __annotations__rrr-rr5rMrirrrrr;r=r6r7mcp.client.stdior8mcp.client.streamable_httpr9rr:rm mcp.typesr#mcp.client.sser<r=r>r?r@rArBrCrDrErFrGrHrIrOrUrYrrrrERRORrrrrrrrrirlrrmrr frozensetrrcompile IGNORECASErrOrrrrrrrrr!rIrrrrrrrrr rr#r:r9r5r<rMrRrOConnectionErrorrVrar\rvrrrrrrr\r^r`rxrrrrrrrrrrrrrrrrrrrrrrrprrrrrrrrAbstractEventLooprrrrrrrr rr rrr#r*rr?rHrXrcrerkrmrorrrrrrr:rrrrGrrrrr~rrrrr r rr&rLrVrXr_rnrrprsrrrrrlrrSrTr,rsuXXXt    !!!!!!77777777777777!!!!!!  8 $ $ $(%)HSM(((%y~'' "S " " " "F  #  $     &!&'>K88888888------N$DDDDDD" $$$#$EEEEEE  k5555555 kkk ijjjjjkZ------- ZZZ  XYYYYYZ N                  # NNN LMMMMMNT????????!% TTT RSSSSST `            #' ``` ^_____`KKK LLIJJJJJK     "@!?!A!A`8` LL^___      #B"A"C"C ] Ll ] ]    "EuEEEEE"#,)---##B!bj  M  "2:.// s s    "htnB7#7#7777 '- 'C ' ' ' ' 'GGGGGGG''' &'MdPRZB       F%!S%!%!%!%!PH}H}3H}H}H}H}H}`     /   ##=####L3]3t3333}D1#1C1C1111hFcF4FFFFR93}9393939393@*-a    l9l9l9l9l9l9l9l9f t##4Z.Z.Z.Z.Z.Z.Z.Z.BIIIIIIII`4&($sM! "'''"suuCH$$$)+S#X+++,13T#u*-222+-$sCx.---"&!&JJJJJJ$777777 @#@$@@@@,(*d38n))).04U +000 $ BC BD B B B B5S5T5555cd0%c%d%%%% &&& && &  &&&&\ (((( ( (  (  ((((`5'u''''T $&gg g gggg\ #%   ,"F!=F!TF!F!F!F!RMM M MMMMf"cee###*,S#X+++26 8G- .555*. Xi& '...   ! T#s(^ #%%C,.4S>... " d38n!!!c@3c3h s s    F , , ,    >*IIuIIIIX#2DdOS$Y6#$sDy/####T  T m    (mD8Ocd`C`C`u````F9c99999x@S@@@@@F>C>u>>>>BD#DUDDDDN     $It IIIIIX;s;s;;;;$NNNNNNNSt&EET EEEEP # c c#h      #       4chuo,'$" $"  =c======4s4t4444 66m6T6VZ[_V`6666r d3i    kkmkTkdSVikkkk\c4DI>C"$sDy/C"d3iC"C"C"C"L.DI....bKKKKKK$MT MMMM`?S$u+%5 6????N#IN$$ ,$ , , , , 4 4 4 4 4$ w#w#w#  w#  w#w#w#w#tB$B#B#BBBBJ@@@H!!%} } } #}  } } } } @ - - - - -,1DTs 1GC G CGCGC"!G"C,)G+C,,G0C76G7DGDGDGD>;G=D>>GEGE41G3E44G8 FGF GF  G$F32G3G GGGG10G1#K**K43K4