*j^4$UdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlZddlZddlZddl Z ddlmZddlmZddlmZmZddlmZmZmZmZddlm Z ddl!m"Z"m#Z#m$Z$ej%e&Z'e(e)e*e+e,fZ-iZ.e/e0e1fe2d <ej3Z4iZ5e/e0e/fe2d <ej3Z6d Z7d Z8d Z9deDZ:ddidZ;e/e0eej%dZ?iZ@e/e0eAe1fe2d<ej3ZBdZCdZDdZEej%dZFiZGe/e0eAe1fe2d<ej3ZHdZIdZJdZKdddddd d!d"ZLdd#ZMdd$lNmOZOd%ePfd&ZQd%efd'ZRd(ed)ed%ePfd*ZSd+ed,eAed%e0dzfd-ZTd.ed%eAefd/ZUd%e/fd0ZVd1e0d%e/fd2ZWdd.ed3e0dzd%e/fd4ZXd5e0d,eAed%eYedzedzffd6ZZd5e0d.ed%eYedzedzffd7Z[d5e0d.ed%e/fd8Z\d9edzd%e/fd:Z]d9edzd+ed%e/fd;Z^d5e0d%e/fd<Z_d=Z`d%e0fd>Zad%ePfd?Zbd@ZcdAZdd%e/e0e/ffdBZedCe0fdDZfdCe0fdEZgdCe0d%eYePe1ffdFZhdGe0d%eifdHZje8fdGe0dIeid%e0fdJZkdKe/d%e/fdLZld%eAe/fdMZmd%ene0fdNZod%e0dzfdOZpdKe/fdPZqdQZrdRZsdSZtddTZudUdVdWdVdXZvdYdZd[d\d]d^d_d`ZwdaZxiZye/eYe0e0feYe1e/ffe2db<ejzZ{d%e0fdcZ|dde0d%eYe0e0ffdeZ}dfeYe0e0fd%e/dzfdgZ~dfeYe0e0fdhe/d%dfdiZddjZddklmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZddllmZmZmZmZmZmZmZmZmZmZddmlmZddnlmZddolmZdpe0d%ePfdqZd%ePfdrZdsdtdue/dvePd%e/fdwZd1e0fdxZd%ePfdyZddl Zdze0d%eYe0e0dzffd{Zd|e0d}e0dzd~e0dzd%ePfdZd%ene0fdZd%ePfdZde0d%ePfdZdZde0d%ePfdZǐddZd%e0fdZd%ePfdZd%e0fdZddde1dzd%ePfdZddde1dzd%ePfdZ͐ddeid%ePfdZdZd%ePfdZdIeid%e0dzfdZd%e0dzfdZdhe/dzd%e/fdZd%e/fdZde/d%ePfdZdze0dzd%e0fdZde/d%eYene0ene0ffdZde0de0dene0dene0d%ePf dZde0de0d%ePfdZd)e0de0d%ePfdZdze0dzd%e0dzfdZde0d%eYe0e0dzffdZde0de0de/d%ePfdZ dde0dzde0dzd%eYe0e0dzePffdZde0dzd%eYe0ePffdZd%e0fdZd%e0fdZd%e0dzfdZ dde0dzdde0dzd%eifdZ dde0dzde0dzde0dzd%eYe0dze0dzffdZde0d%e/fdZde0d%e/fdZde/de0d%e0fdZde/d%e0fdZde/d%ePfdZd%eifdZde/dene0dene0d%ePfdZd%ePfdZd%ePfd„Zdeideid%eAfdńZd%ePfdƄZdd%eYeAeiffdDŽZdd%eAfdȄZd%e/fdɄZdd1e0de0dzd%e/fd˄Zd%ePfd̄Zd1e0d%ePfd̈́Zde/d%e1fd΄Zde/d%ePfdτZdZefdeAe/deid%eAe/fdӄZde/de/d%e/fdքZde/d%e0dzfdׄZdsd؜deAe/dePd%eAe/fdڄZddlmZmZmZmZmZmZmZmZmZmZmZm Z m Z m Z m Z m Z mZmZmZmZddܐlmZmZmZmZmZmZmZmZmZmZmZmZmZm Z ddݐl!m"Z"m#Z#m$Z$ddސl%m&Z&m'Z'm(Z(m)Z)ddߐl*m+Z+m,Z,m-Z-ddl.m/Z/m0Z0m1Z1m2Z2m3Z3ddl4m5Z5m6Z6m7Z7m8Z8ddl9m:Z:m;Z;m<Z< ddl=m>Z?m@Z@mAZAmBZBmCZCmDZDmEZEmFZFmGZGmHZHmIZImJZJmKZKnQ#eL$rHdZ?dZ@dZAdZBdZCdZHdZIdZJdZKiZDej3ZEenZFiZGYnwxYwiZMe/e0eAe jNfe2d<de0d%e jNfdZOde0de jNd%dfdZPde0de/dzdeid%dfdZQde0de/dzdeid%dfdZRde0de/d%dfdZ> ddlSm>ZTmUZVmWZWmXZXmYZZm[Z\n#eL$rdZTdZVdZZdZWdZXYnwxYwddddddddddddddd dd d d d dddddddddddddddddddddddd dd!d"dd#dd$d%dd&d'dd(d)d*dd)d+d,dd-d.d/d0d.d1d2dd3dd4d5dd6d7dd8d9d:d;d9d<d=dd>d?d@dAd?dBdCddD Z]dEe0dzd%e0fdFZ^dGZ_dHdIdJdKZ`hdLZad ZbdMZcd%eifdNZdd%ePfdOZedPZfdQZgd%efdRZhdSed%e0dzfdTZidUe/dVe0d%e0dzfdWZjd%e0dzfdXZkdYZlemdZd[DZnd%eYee0ePffd\Zod]e1dzd%e0dzfd^Zpd_ed%eifd`Zqdaed%eAefdbZrd%e/fdcZsd%ePfddZtd%ePfdeZud%e/fdfZvddhe1d%e/fdiZwd%e/fdjZxd%e/fdkZyddle/dzd%eYe/ePffdmZzdnZ{doZ|ene|Z}dpZ~dqdrd%e0fdsZdd%e/fdtZd%ePfduZdvZdwed%ePfdxZd%ePfdyZd%ePfdzZd%ePfd{Zd%ePfd|Zd%ePfd}Zd%ePfd~Zd%ePfdZddddddddddddd ZhdZhdZiZe/e2d<ej3ZdZdZdZddZdZdZddZde/d%eidzfdZde0deidzd%ePfdZdZdZdZdZdZdZdZdZdZdZde0de0d%e0fdZde0deid%eYeieifdzfdZdddede0de0de0de0dzf dZded%efdZdede0de0fdZdZd1e0de0d%edzfdZd%eifdZd%eifdZdededeideifdZdZdZdZdZd„ZdÄZdĄZdńZdƄZdDŽZdȄZdɄZdGe0d%e/fdʄZddGe0dIeid%e0fd˄Zd̄Zd̈́Zd΄ZdτZddЄZdфZd҄ZÐde0de1dzd%dfdՄZd%ePfdքZŐdde0de0d%e0fdڄZddۜde0de0de0de0de1dzf d݄Zd%ePfdބZdddsddsdߜde0de0de0dePdePf dZɐdZʐdZːde0d%e0fdZ̐dZ͐ddZd%e0fdZϐdZАdZѐdZҐdZӐdZԐdZՐdZ֐dZאdZde0fdZde0fdZde0fdZd%ePfdZd%ePfdZݐdZސdZߐdZddeifdZd%eAe0fdZdZdZdZdde0de0d%e0fdZdZdZdZdZde0fd Zd Zd Zd Zd ZdZdZdZdZdZdZdZdZdZdZd1e0de0de0d%ePfdZdZd1e0de0de0d%ePfdZdZGd d!Zdd"Zd#Zd$Zd%Zd&Zd'Zd(Z dd1e0due0d)e0dzd*eidzdePd%e/f d+Zd,e/d%e/dzfd-Zd.e/de/d%ePfd/Zd0e<d1e/dzd%ePfd2Z d1e0d,e/d%ePfd3Z d1e0d,e/d%ePfd4Z dd1e0due0d)e0dzd*eidzdePd%e/f d5Z d6Z d7Zd8Zd%eAe0fd9Zd5e0d:ePd%eAe0fd;Zd<Zd=Zd,eZd,edZ?dZ@dZAdZBdZCdS(z Hermes Web UI -- Route handlers for GET and POST endpoints. Extracted from server.py (Sprint 11) so server.py is a thin shell. NPath)closing)parse_qsurlsplit)MESSAGING_SOURCESis_cli_session_rowis_cli_session_row_visibleread_session_lineage_report)visible_messages_for_anchor)publish_session_list_changedsubscribe_session_eventsunsubscribe_session_events_RUNNING_CRON_JOBS_MANUAL_COMPRESSION_JOBSXi@cth|]5}t|6Sstrstriplower.0ss -/Users/bertmahoney/hermes-webui/api/routes.py r@s2LLLQ#a&&,,....00LLL)pathmtimeidentity!_MESSAGING_SESSION_METADATA_CACHE session_resetsession_switch csp_report_CSP_REPORT_RATE_LIMIT<di client_event_CLIENT_EVENT_RATE_LIMITi@P )eventsource session_id stream_idvisibility_stateurl_pathreasonczt|tr|||St|||SN isinstancedictgetgetattr)sessionfielddefaults r_session_fieldrD_s:'4  +{{5'*** 7E7 + ++r)_profiles_matchreturnct|j}|ddgd}|dvS)zReturn True if the request URL has `?all_profiles=1` (or true/yes). Centralizes the opt-in parsing so /api/sessions and /api/projects use the same shape. Accepts 1/true/yes (case-insensitive) for ergonomics. all_profilesr)1trueyeson)rqueryr?rr) parsed_urlqsraws r_all_profiles_query_flagrRysR *" # #B &&" & &q ) / / 1 1 7 7 9 9C , ,,rc d ddlm}t|dz S#t$r ddlm}t|cYS#t$r]tt jdttj dz  dz cYcYSwxYwwxYw)aReturn the skills directory for the request's active Hermes profile. WebUI profile switches are cookie/thread-local scoped, so the agent module-level ``tools.skills_tool.SKILLS_DIR`` can still point at the server startup profile. Skills UI endpoints must derive the directory from ``get_active_hermes_home()`` for every request instead of reading that process-global constant. rget_active_hermes_homeskills) SKILLS_DIR HERMES_HOME.hermes) api.profilesrUr Exceptiontools.skills_toolrWosgetenvrhome expanduser)rUrWs r_active_skills_dirras h777777**,,--88 hhh h 4 4 4 4 4 4 ## # # # h h h -TY[[95L1M1MNNOOZZ\\_gg g g g g g h hs-" B/AB/A"B+&B/*B++B/base_dir candidatec ||dS#ttf$rYdSwxYw)NTF)resolve relative_toOSError ValueError)rbrcs r_skill_path_withinris_''(8(8(:(:;;;t Z uus9=AAskill_md skills_dirsc|D]O} ||}n#t$rY%wxYw|j}t|dkr |dcSdSdS)Nr)rfrhpartslen)rjrk skills_dirrel_pathrns r_skill_category_from_pathrrsz!  ++J77HH    H  u::??8OOOtt 4s  ))rpc|g} ddlm}|d|Dn#t$rYnwxYwd|DS)Nr)get_external_skills_dirsc34K|]}t|VdSr;rrps r z,_active_skill_search_dirs..s(@@DGG@@@@@@rc:g|]}||Sr)existsrvs r z-_active_skill_search_dirs..s% * * *!qxxzz *A * * *r)agent.skill_utilsrtextendr[)rpdirsrts r_active_skill_search_dirsrs >>>>> @@%=%=%?%?@@@@@@@      * *t * * **s-3 AAc|rt|ddnd}|siSd|d}t|dd}t|dd}|r||d<|r||d<|S)zHReturn explicit no-cleanup metadata for worktree-backed session actions. worktree_pathNT)worktree_retainedrworktree_branchworktree_repo_rootr@)rArpayloadrrs r_worktree_retained_payloadrs?FPGG_d;;;DM  !&Gg'8$??O *>EE5%4!";(:$% Nrsidc tt|dS#t$ricYSt$r td|icYSwxYw)NT metadata_onlyz7Failed to read worktree metadata for deleted session %s)r get_sessionKeyErrorr[loggerdebug)rs r)_worktree_retained_payload_for_session_idrsw)+c*N*N*NOOO   NPSTTT s A&AAcategoryc xddlm}ddlm}mm}m}m}m}| s"| dddggd|ddSg}t} |} t|} | D]} || d D]} tfd | jDr$| j} | d d d}||\}}||sd|d|jd d}|| vr|dd}|sY|dD]1}|}|r|ds|}n2t-||kr|d |dz dz}| ||||t3| | || vda#t4t6f$r'}t8d| |Yd }~d }~wt<$r)}t8d| |dYd }~d }~wwxYwމrfd|D}||}t?td|D}d||t-|d}|rd|d<nd |d!<|S)"aList skills using an explicit local skills directory. This mirrors ``tools.skills_tool.skills_list`` closely, but keeps the local scan root explicit so per-client WebUI profile switches do not race on or leak through the skills tool's module-global ``SKILLS_DIR``. riter_skill_index_files)MAX_DESCRIPTION_LENGTH_EXCLUDED_SKILL_DIRS_get_disabled_skill_names_parse_frontmatter _sort_skillsskill_matches_platformTparentsexist_okz-No skills found. Skills directory created at /)successrV categoriesmessageSKILL.mdc3 K|]}|vV dSr;rrpartrs rrxz(_skills_list_from_dir..)KKD4//KKKKKKrutf-8encodingNnamer- descriptionrI #rm...)rrrdisabledz Failed to read skill file %s: %sz)Skipping skill at %s: failed to parse: %sexc_infocFg|]}|dk|Srr?)rrrs rr{z)_skills_list_from_dir..s/MMMAquuZ/@/@H/L/La/L/L/Lrc3jK|].}|d|dV/dS)rNrrs rrxz(_skills_list_from_dir..s?WW!QUU:EVEVWAEE*--WWWWWWr)rrVrcountz@Use skill_view(name) to see full content, tags, and linked fileshintz%No skills found in skills/ directory.r) r|rr\rrrrrrrzmkdirsetranyrnparent read_textr?rrsplit startswithroaddappendrrUnicodeDecodeErrorPermissionErrorrrr[sorted)rprrrrrrr all_skills seen_namesr search_dirsscan_dirrj skill_dircontent frontmatterbodyrrlineerresultrs ` @r_skills_list_from_dirrs988888      555TzTTT    J55J((**H+J77K$$..xDD# # HKKKKHNKKKKK  I ",,g,>>uuE$6$6w$?$?! T--k::"vy~>>ssC:%%)oomR@@ "" $ 2 24 8 8""#zz||"(<(<"*.K!E{##&<<<"-.J0F0J.J"Ke"SKt$$$!! $'2$=h $T$T$(H$4 '8 N N N ?1MMMMMMMM    ?1W[ A# JNMMMMMMM j))JWWzWWWWWXXJ Z F D[vCy Ms157G*-'G*CG**I;H I*IIrc^ddlm}ddlmm}t |pdd}|sdS|g}d|vr7|dd\}}|r|r||d||D]}| s|D]} || z } t|| s| r"| d z r | | d z fccS| d } | rt|| r | j | fccS||d D]} tfd | jDr#| j } | j|kr| | fccS || d dd\}}|d|kr| | fccS#t&$rYwxYw|dD]6} | jd kr| j|krt|| r | j | fccS7dS)z>Resolve a WebUI skill name inside explicit skills directories.rr)rrrIrNN:rz.mdc3 K|]}|vV dSr;rrs rrxz&_find_skill_in_dirs..IrrrrNrr*.md)r|rr\rrrrrrrzriis_dir with_suffixrrrnrrr?r[rglobstem)rrkrrraw_namecandidate_names namespacebarerpcandidate_name direct_path legacy_mdrjrr_rs @r_find_skill_in_dirsr,s888888JJJJJJJJ4:2$$&&,,S11H zjO h"..a00 4  : :  " "i#8#8$#8#8 9 9 9!33   ""  - 3 3N$~5K%j+>> !!## =z)A(I(I(K(K ="K*$<<<<<<<#//66I!! 3&8Y&O&O 3 '222222..z:FF  HKKKKHNKKKKK  I~)) (****** !3!3H4F4FPW4F4X4XY^Z^Y^4_!`!` Q??6**h66$h......7    $))&11 3 3I~++~)).@Y.W.W) '222222  3 :sAG GGc$t||gS)z?Resolve a WebUI skill name inside an explicit skills directory.)r)rrps r_find_skill_in_dirr]s tj\ 2 22rcdt|dgddD}dd|d|ddS) Ncg|] }|d Srrrs rr{z,_skill_not_found_payload..cs]]]q6]]]rrVFSkill 'z ' not found.z+Use skills_list to see all available skills)rerroravailable_skillsr)rr?)rrp availables r_skill_not_found_payloadrbsa]]$9*$E$E$I$I(TV$W$WX[Y[X[$\]]]I-4---%=   rrcNrdz siSi}dz }|r5fd|dD}|rt||d<dz }|r\g}dD]6}|fd||D7|rtt ||d<dz }|r5fd |d D}|rt||d<d z } | r\g} d D]6}| fd | |D7| rtt | |d <|S)Nr referencescTg|]$}t|%Srrrfrfrs rr{z+_linked_files_for_skill..ss-SSS!AMM),,--SSSrr templates)r*.pyz*.yamlz*.yml*.jsonz*.tex*.shc3\K|]&}t|V'dSr;rrs rrxz*_linked_files_for_skill..{s7]]qSy!9!9::]]]]]]rassetsc|g|]8}|t|9Sr)is_filerrfrs rr{z+_linked_files_for_skill..s?^^^ARSR[R[R]R]^#ammI..//^^^r*scripts)rrz*.bashz*.jsz*.tsz*.rbc3\K|]&}t|V'dSr;rrs rrxz*_linked_files_for_skill..s7XXQ3q}}Y7788XXXXXXr)rzglobrr}rr) r linked_filesreferences_dirrefs templates_dirrext assets_dirr scripts_dirrs ` r_linked_files_for_skillrls  Y3;;== )+L-N6SSSS~7J7J67R7RSSS  6)/L & +M? Q ^ ^C   ]]]]MDWDWX[D\D\]]] ] ] ] ]  ?(.s9~~(>(>L %X%J4^^^^9I9I#9N9N^^^  4%+F^^L "i'K;E Y YC NNXXXX+BRBRSVBWBWXXX X X X X  ;&,S\\&:&:L # rc 0ddlm}m}m}|d}||\}}||sdddS|d}t |tr|d ini} || d p|d d } || d p|d d } t| |p|j j } n#t$rt|} YnwxYwd |d|s|j n|j |dd | | || |rt|ndt|d S)Nr)r _parse_tagsrrrFz(Skill is not available on this platform.)rrmetadatahermestagsrIrelated_skillsTrr) rrrr rrr rr)r\rr rrr?r=r>rrfrrhrrr) rrjrr rrr_bodyr  hermes_metar rr s r_skill_view_from_filersYYYYYYYYYY  ' 22G++G44K ! !+ . .W +UVVVz**H0:8T0J0JR(,,x,,,PRK ;{v..M+//&"2M2M N ND [())R[__=Mr-R-RN8'')Eho(MNNOO 8}}Y(Z IN[["}b99('0:S^^^d/ ::   s*.DD54D5c6ddlm}t}t|}t ||\}}|sdt |pdvr ddlm}m}ddl m }m } ||\} } || rt|| } | || | r6||} t| t rtj| n| Sn#t"$rYnwxYwt%||St'||S)Nr) skill_viewrrI)is_valid_namespaceparse_qualified_name)discover_pluginsget_plugin_manager)r\rrarrrr|rrhermes_cli.pluginsrrfind_plugin_skilllist_plugin_skillsr=jsonloadsr[rr)r _skill_viewrprrrjrrrrr_barepmrQs r_skill_view_from_active_dirr ss;;;;;;#%%J+J77K-dK@@Ix : #djb// ! ! VVVVVVVVSSSSSSSS#7#7#=#= 5%%i00P$$&&&++--B++D11=AVAVW`AaAa=)k$//2t|dtr|dni}t#|d |d } t#|d |d t#|d |d t#|d |d t#|d|dt#|d|d| | d||<t5t |td<|jtd<|td<dddn #1swxYwY|S)Nr r!r"rrz5Failed to parse gateway sessions metadata from %s: %sr5originplatform session_keykeychat_id thread_id chat_typeuser_id)r7r9r:r;r<r6r%)r3rzstatr# _MESSAGING_SESSION_METADATA_LOCKrst_mtimecopyr[rrrrrr=r>r,r/r?) r stcache raw_sessions _json_errmapping_entryr5r5r6s r"_load_gateway_session_identity_maprGs ) + +D ;;==  YY[[1 - 0 0V}D ))eGn .K.KZ(--// 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0  z$..'."B"BCC  LdT]^^^  "G,%%"))++  Ffd++ $VZZ %=%=>>J -7 88L8Ld-S-S[VZZ)))Y[F"6::j#9#96::j;Q;QRRH*6::m+D+DfjjQVFWFWXX&vzz)'<'S>STT(K)@)@&**[BYBYZZ(K)@)@&**[BYBYZZ&vzz)'<'S>STT$&##GJ   *@@47II)&157[)'28?)*5@@@@@@@@@@@@@@@ <<>>sl"B1AB% B1 B1%B))B1,B)-B11 C?C(C-- D7DDD1MMMjob_idc|t5tjt|<ddddS#1swxYwYdSr;)_RUNNING_CRON_LOCKtimerrHs r_mark_cron_runningrM#s} 11%)Y[[6"111111111111111111 155c|t5t|dddddS#1swxYwYdSr;)rJrpoprLs r_mark_cron_donerQ(s --vt,,,------------------rNct5t|}| ddddSdtj|z fcdddS#1swxYwYdS)z%Return (is_running, elapsed_seconds).N)FT)rJrr?rK)rHts r_is_cron_runningrU-s %%  " "6 * * 9%%%%%%%%TY[[1_$ %%%%%%%%%%%%%%%%%%sAAAAr.cg}dD]b}||r|d|d|}|dkr||dzc|rt|ndS)zBReturn the start index of a markdown Response heading, if present.) ## Response # Responserrr)rrfindmin)r. candidatesheadingidxs r_cron_response_marker_indexr_6sJ0'' ??7 # # !   a iiW'' !88   cAg & & &( 03z???b0rlimitc>|dkrdSt||kr|St|}|dkra|dtt|}||dd}|r|d|n|}|d|S|| dS)a7Return a bounded cron output window that preserves useful response text. Cron output files can contain large skill dumps in the Prompt section. The UI already extracts ``## Response`` when present, so keep that section in the API payload instead of blindly returning the first ``limit`` chars. rrINrz ... )ror_r[_CRON_OUTPUT_HEADER_CONTEXTrstriplstrip)r.r` response_idxheaderresponsers r_cron_output_content_windowrhBs zzr 4yyE .t44LqEs6 EEEFMMOO &--d3328FV..H...hvv =rjobct|pi}|dd|ddu|d<|S)aReturn a cron job payload with optional UI settings normalized. Legacy jobs intentionally persist without ``profile`` so they keep the scheduler's server-default behavior. The API still returns ``profile: None`` so the UI can label that state explicitly instead of guessing. ``toast_notifications`` is a WebUI preference for completion toasts. Legacy jobs default to enabled so existing behavior is preserved unless a job is explicitly muted. profileNtoast_notificationsF)r> setdefaultr?)rirs r_cron_job_for_apirnZsK39"ooG y$'''%,[[1F%G%Gu%TG !" Nrcd|pgDS)Nc,g|]}t|Sr)rn)rris rr{z&_cron_jobs_for_api..ls! ; ; ;s c " " ; ; ;rr)jobss r_cron_jobs_for_apirrks ; ;tzr ; ; ;;rcddlm}dh}|D]a} t|dpd}n#t $rYFwxYw|r||b|S)Nr)list_profiles_apirCrrI)rZrtrr?rAttributeErrorr)rtnamesrkrs r_available_cron_profile_namesrwos...... KE$$&& w{{6**0b117799DD    H    IIdOOO Ls6A AAc|dSt|}|sdS|tvrtd||S)NzUnknown profile: )rrrwrh)r-rks r_normalize_cron_profile_valuery}s^ }t%jj  G t355556W66777 NrcHddlm}m}t|pidpd}|s |S|t vr._runs# . . . . . .73<< rNrcron_profile_context_for_homeokrz: )rZrput BaseException tracebacktype__name__ format_exc)riexecution_profile_home result_queuerrrexcrs` r_cron_job_subprocess_mainrsX\     " )TVVFF B B B B B B../EFF                 $((((( \\\'d3ii&8#A#AC#A#A9CWCWCYCYZ[[[[[[[[[\s8#A! = A!AA!AA!! B;+AB66B;cdD]a}|pi|}|dvr t|}n#ttf$rYBwxYw|dkrt d|dzcSbdS)zFReturn how long the manual-run parent waits for child result payloads.)timeout_secondsmax_runtime_secondstimeoutr#rN@>@g@)r?float TypeErrorrhmax)rir8rQr-s r'_cron_subprocess_result_timeout_secondsrsD + +ybooc"" *    #JJEE:&    H  199tUT\** * * *  =s2AAcddl}ddl}|d}|d}|t |||f}|t|}d}dd g} || ^}} ng#|j $rZd}| r4| | d d |d dd g} n d|j dd g} YnwxYw| d | r6| | d |dkrd}dd g} ne#| d | r6| | d |dkrd}dd g} wxYw||n-#||wxYw|dkr| dS| d} t!| dkr| dnd } | rt"d| t'| )aExecute cron.scheduler.run_job without holding the parent cron env lock. cron.scheduler/cron.jobs still rely on process-global HERMES_HOME and module constants, so running the job body in a child process gives each long cron execution its own globals. The parent process only uses cron_profile_context for short metadata reads/writes and remains responsive to unrelated cron UI and API calls while the job runs. rNspawnrmaxsize)targetargsrz4cron run subprocess failed before producing a resultrIrr!z.cron run subprocess produced no result within gzs and was terminatedz%cron run subprocess exited with code z without producing a resultrz9cron run subprocess did not exit after returning a resultz!Manual cron subprocess failed: %s)multiprocessingqueue get_contextQueueProcessrstartrr?Emptyis_alive terminatejoinexitcodeclose join_threadrorr RuntimeError) rirrrctxrprocessresult_timeoutstatusrrtraceback_texts r#_run_cron_job_in_profile_subprocessrsLLL  % %g . .C99Q9''Lkk()< 8G MMOOO>$FSG LLL # # #!! !!### Q '''T>>$FSG   """"   """" ~~qzajG#&w<JJJ w  s?>BEA!C;8E:C;;E>A!G-A"GG--*Hc  ddl}ddlm m|d}t |ddt |dddd  |p|}d } t|\  f d }|||np#t$rc t d  || fd n+#t$rt d YnwxYwYd nd wwxYwt tddS#t tdwxYw)asWrapper that tracks running state around cron.scheduler.run_job. ``profile_home`` is the cron store that owns the job row/output metadata. ``execution_profile_home`` is the selected per-job profile used to load agent config/.env while running. When no job profile is selected, both homes are the same and legacy server-default behavior is preserved. rN) mark_job_runsave_job_outputzcron.scheduler SILENT_MARKERz[SILENT]_deliver_resultr|rIc| |Sddlm}||5|cdddS#1swxYwYdS)Nrr)rZr)r_fnrs r_with_cron_homez*_run_cron_tracked.._with_cron_homes <244K>>>>>> * *4 0 0  244                  s 599c  r nd d d}t|}|r,r*|vrd}d}|rRP  |}nB#t$r5}t |}t d |Yd}~nd}~wwxYw}}|r sd}d}  |||dS#t$r ||YdSwxYw)Nu⚠️ Cron job 'rz ' failed: Fz*Delivery failed for manual cron job %s: %szWAgent completed but produced empty response (model error, timeout, or misconfiguration))delivery_error) r?boolrupperr[rrrr)deliver_contentshould_deliverrde_success_errorr_silent_markerrfinal_responserirHroutputrrs r_persist_successz+_run_cron_tracked.._persist_success-s OFF + + +UT)@)@TTUTT  "/22N '' 'n@U@U@W@W@]@]@_@_._._!&!N [/"=[%4_S/%J%JNN [[[%(WWNLL!MvWYZZZZZZZZ[ 'fH s s r 7 VXvnUUUUUU 7 7 7  VXv666666  7s*2 A?? B> +B99B>CC:9C:z!Manual cron run failed for job %sc8dtSNFr)rrHrsrz#_run_cron_tracked..Us,,vucRSff2U2Urz-Failed to mark manual cron run failure for %s cron_complete) importlib cron.jobsrr import_moduler@r?rr[r exceptionrrQr )ri profile_homerr_cron_schedulerrrrrrrrrHrrrrs` @@@@@@@@@@r_run_cron_trackedr s77777777--.>??O_ozJJNo/@$GGO WWT2  F3C|561T '2 2 ." 7" 7" 7" 7" 7" 7" 7" 7" 7" 7" 7" 7" 7" 7H  &67777 RRR>rr8c^tj}t5t|}|s ddddS|\}}||z t kr)t|d ddddStj|cdddS#1swxYwYdSr;) rK monotonic_LIVE_MODELS_CACHE_LOCKrr?_LIVE_MODELS_CACHE_TTLrPr@deepcopy)r8nowcachedtsrs r_get_cached_live_modelsrs* .  C &&#'',, &&&&&&&& G 8- - -  " "3 - - -&&&&&&&&}W%%&&&&&&&&&&&&&&&&&&sB"/B"B""B&)B&rct5tjtj|ft |<ddddS#1swxYwYdSr;)rrKrr@rr)r8rs r_set_cached_live_modelsrs MM#'>#3#3T]75K5K"L3MMMMMMMMMMMMMMMMMMs0AA  A cxt5tddddS#1swxYwYdSr;)rrclearrrr_clear_live_models_cachers~ ##  """##################s /33)( STATE_DIR SESSION_DIRDEFAULT_WORKSPACE DEFAULT_MODELSESSIONS SESSIONS_MAXLOCKSTREAMS STREAMS_LOCK CANCEL_FLAGSSTREAM_LAST_EVENT_IDSERVER_START_TIME_resolve_cli_toolsets_INDEX_HTML_PATHget_available_models IMAGE_EXTSMD_EXTSMIME_MAPMAX_FILE_BYTESMAX_UPLOAD_BYTES CHAT_LOCK_get_session_agent_lockSESSION_AGENT_LOCKSSESSION_AGENT_LOCKS_LOCK load_settings save_settingsset_hermes_default_modelmodel_with_provider_contextget_reasoning_statusset_reasoning_displayset_reasoning_effortcreate_stream_channelget_webui_session_save_modeSTREAM_GOAL_RELATEDPENDING_GOAL_CONTINUATION_get_config_path_load_yaml_config_file_save_yaml_config_file reload_config _cfg_lock) requirebad safe_resolvejrT read_body_security_headers_sanitize_errorredact_session_data _redact_text)build_agent_health_payload)RequestDiagnostics)build_system_health_payloadmethodcBt|d|d|jddpdS)zHReturn a Kanban-specific 404 for stale clients/obsolete endpoint shapes.zunknown Kanban endpoint:  z. If this appeared after a WebUI update, your browser may be running a stale cached bundle; use Hard refresh now, then reopen Kanban.rT)r&r )handlerparsedr1s r_kanban_unknown_endpointr8sU  O O O O O O     rc Pt|dd}|sdSt5|tv}dddn #1swxYwY|rdS|}t|ddr ddlm}||jd}n<#t $r/td|t|d d YdSwxYw|dSt|dds` d|_ t|d rd|_ t|d rg|_ t|d rd|_ n#t $rYnwxYwdSt|j5t|dd|kr ddddSt|d dr ddlm}m}|t|dd}|dz d|jdz }||||d} n=#t $r0td|t|d d d} YnwxYw| rp||ur^ d|_ t|d rd|_ t|d rg|_ t|d rd|_ n#t $rYnwxYw ddddSt|dd|kr ddddSt%|d|_ t|d rd|_ t|d rg|_ t|d rd|_ |dn:#t $r-tdt|d d YnwxYwdddn #1swxYwY||ur^ d|_ t|d rd|_ t|d rg|_ t|d rd|_ n#t $rYnwxYwdS)aClear persisted streaming flags when the in-memory stream no longer exists. A server restart or worker crash can leave active_stream_id/pending_* in the session JSON while STREAMS is empty. The frontend then keeps reconnecting to a dead stream and shows a permanent running/thinking state. SAFETY (#1558): If ``session`` was loaded with ``metadata_only=True``, its ``messages`` array is empty by design and calling ``save()`` would atomically overwrite the on-disk JSON, wiping the conversation. In that case we re-load the full session before mutating, so the persisted write carries the real messages forward. active_stream_idNF_loaded_metadata_onlyrrru_clear_stale_stream_state: refused to clear stale stream %s for session %s — full reload failed and we will not save a metadata-only stub. See #1558.r5r}pending_user_messagepending_attachmentspending_started_at) _apply_core_sync_or_error_marker_get_profile_homerkr1session_.json)stream_id_for_rechecktouch_updated_atzR_clear_stale_stream_state: failed to repair stale pending stream %s for session %sTrEz7_clear_stale_stream_state: save() failed for session %s)r@rr api.modelsrr5r[rr~r:hasattrr=r>r?rr@rAr+_materialize_pending_user_turn_before_errorsave) rAr6 stream_alive original_stub _get_sessionr@rAr core_pathrepaireds r_clear_stale_stream_staterPs!3T::I u ,, G+ ,,,,,,,,,,,,,,,u Mw/77"  > > > > > >"l7#5UKKKGG    NN177L#>>     55  ?5w 2D99  15 .=*@AA>9=M6=*?@@;8:M5=*>??<7;M4    5 !!3 4 455 7. 5 5 B B55555555 72D 9 9  !ZZZZZZZZ00)T1R1RSS (:58\7CU8\8\8\\ ;;*3%*   ! ! !  %ww cBB !  !  // 9= 6"=2HIIFAEM>"=2GHHC@BM="=2FGGD?CM<$C55555555Dw 2D99YFFG55555555H 4G<<<#' 72 3 3 0+/G ( 71 2 2 -*,G ' 70 1 1 .)-G &  LL%L 0 0 0 0      Is33      c555555555555555pG## -1M *}&<== :59 2}&;<< 746 1}&:;; 837 0    D  4s 377A//5B('B(A D DD4L9L9+AF.-L9.7G(%L9'G(( L92A H?>L9? I  L9 I  L9L9AL9K32L934L*'L9)L**L99L=L= A N N#"N#FactivesummaryrRcNt|d}|d}|s|sd}|d|d|d|d|d||d S) Nterminalterminal_statezlost-worker-bookkeepingr5run_idlast_seq last_event_id last_event)r5rWrXrYrZrUrV)rr?)rSrRrUrVs r_run_journal_status_payloadr[tsGKK ++,,H[[!122N 3(32kk,//++h''KK ++ _55kk,//(  rct|dds|Stj|}|t|t5|t |<t j|tt tkr2t j dtt tk2dddn #1swxYwY|S)a`Reload cached metadata-only sessions before mutating persisted fields. Session.save() intentionally refuses metadata-only stubs (#1558) because their messages list is empty by design. Mutation routes that save session metadata must upgrade the cached stub first so they do not trip that guard or risk writing an incomplete object. r;FNlast) r@Sessionloadrrr move_to_endrorpopitem)rrA full_sessions r$_ensure_full_session_before_mutationrds 73U ; ;<$$Lsmm ))$ S!!!(mml**  % ( ( ( ((mml**))))))))))))))) sA.B::B>B>crd}|D]}t|ts|d}|r|dsE|ddur] t|d}n-#t$r t d|dYwxYw|t|p|}|S) zIClear stale persisted stream fields before /api/sessions serializes rows.Fr5r: is_streamingTrz>Failed to load session %s while reconciling stale stream stater)r=r>r?rr[rrrP) session_rowschangedrowrrAs r._reconcile_stale_stream_state_for_session_rowsrjsG@@#t$$  ggl## #''"455   77> " "d * *  !#T:::GG    LLP     H   ? +G44? Ns#A55'BBr-c|}|sdS|drs|d}|dkrX|d|}||dzd}|dr(|ddr ||ddfS|dfS|ddkr1|dd\}}|r||fS|dfS)zpSplit a host or host:port string into (hostname, port|None). Handles IPv6 bracket notation, e.g. [::1]:8080.)rIN[]rYrNr)rrrrZisdigitrrsplit)r-endhostrestports r_normalize_host_portrts KKMM   ! !E x jjoo "993> :  $;r origin_scheme origin_port allowed_portcR||krdS|dkrdnd}|s||krdS|s||krdSdS)aReturn True when two ports should be considered equivalent, scheme-aware. Treats an absent port as the scheme default: port 80 for http, port 443 for https. Port 80 is NOT treated as equivalent to 443 (different protocols = different origins). Thttps44380Fr)rurvrwrCs r _ports_matchr|sZ l""t$//eeTG <722t K722t 5rctjdd}t}|dD]}|d}|s>|ds5|ds ddl}td |d d |j | ||S) zParse HERMES_WEBUI_ALLOWED_ORIGINS env var (comma-separated) into a set. Each entry must include the scheme, e.g. https://myapp.example.com:8000. Entries without a scheme are silently skipped and a warning is printed. HERMES_WEBUI_ALLOWED_ORIGINSrI,rhttp://https://rNz4[webui] WARNING: HERMES_WEBUI_ALLOWED_ORIGINS entry zU is missing the scheme (expected https://hostname or http://hostname). Entry ignored.T)flushfile) r]r^rrrrcrrsysprintstderrr)rQrr-rs r_allowed_public_originsrs )2B 7 7C UUF3   $$S))//11    ++ u/?/? /K/K  JJJ ]u]]]      5 Mrct|jdp|jdS)aiReturn True when request headers identify a browser unsafe request. Non-browser API clients, including the MCP bridge and curl-style scripts, normally send no Origin/Referer and remain compatible with the existing same-machine API contract. Browsers send Origin for unsafe fetch/form POSTs; Referer is retained for older paths and proxies. OriginReferer)rheadersr?r6s r_is_browser_unsafe_requestrs7 ##H--O1D1DY1O1O P PPrr c |dvS)z9Paths that cannot or must not carry a session CSRF token.>/api/auth/login/api/csp-report/api/auth/passkey/login/api/auth/passkey/optionsrr s r_csrf_exempt_pathrs  r_hermes_csrf_failure_reasonr9cV t|t|n#t$rYnwxYwdSr)setattr_CSRF_FAILURE_ATTRr[r6r9s r_set_csrf_failure_reasonr sB +V4444      5s  &&c t|trt|tdSdS#t$rYdSwxYwr;)rHrdelattrr[rs r_clear_csrf_failure_reasonrs] 7. / / 1 G/ 0 0 0 0 0 1 1      s *0 >>cRt|td}|dkrdS|dkrdSdS)NrIorigin_mismatchz3Cross-origin mismatch - check reverse proxy headerstoken_mismatchz!Session expired - reload the pageCross-origin request rejected)r@rrs r_csrf_rejection_errorrs> W0" 5 5F """DD !!!22 * *rct||jdd}|jdd}|jdd}t|sdS|p|}t jd|}|st |dS|d}|d d d  }t|\}} d } |d  d  } | tvrd} | ssd ||jdd|jddfD} | D]/} t| \}}||krt|| |rd} n0| st |dSd dlm}m}m}m}|sdS||}|j|p|jd}||pd|pdrdSt |dS)zGReject cross-origin or tokenless authenticated browser unsafe requests.rrIrHostTz^https?://([^/]+)rrrz://Frc^g|]*}||+Srr)rhs rr{z_check_csrf..>s@    wwyy GGII   rzX-Forwarded-Hostz X-Real-Host)CSRF_HEADER_NAMEis_auth_enabled parse_cookieverify_csrf_tokenz X-CSRF-Tokenr)rrr?r_rematchrgrouprrrtrcrr|api.authrrrr)r6r5refererrqrm origin_hostru origin_namervorigin_allowed origin_value allowed_hostsallowed allowed_namerwrrrr cookie_val submitteds r _check_csrfr%sw''' _ 2 . .Fo!!)R00G ?  vr * *D %g . .t  wF &//A D'1BCCC''!**KGGAJJ$$U++A.4466M3K@@KN771::$$S))//11L.0000   ##$6;;##M266   %  G)=g)F)F &L,l**|M;Xd/e/e*!% D'1BCCC[[[[[[[[[[[[ ?  tg&&J##$455\9L9L^9\9\I)r9?;;t #G-= > >>rcz t|dd}|rt|dSn#t$rYnwxYwdS)Nclient_addressrunknown)r@rr[)r6addresss r_client_ip_for_rate_limitrZs[ '#3T::  #wqz?? " #      9s '+ 88)rrc|tjn|}t|}|tz t5fdt|gD}t |tkr|t|< ddddS|||t|<dddn #1swxYwYdS)Nc g|] }|k| Srrrrcutoffs rr{z,_csp_report_rate_limited..isWWWR"PV,,b,,,rTF) rKr%_CSP_REPORT_RATE_LIMIT_WINDOW_SECONDS_CSP_REPORT_RATE_LIMIT_LOCKr'r?ro_CSP_REPORT_RATE_LIMIT_MAXrr6rr8 timestampsrs @r_csp_report_rate_limitedrds#$)+++#C #G , ,C 8 8F $11WWWW#9#=#=c2#F#FWWW z??8 8 8*4 "3 ' 11111111 #&0s# 111111111111111 5A B<B<<CCc|tjn|}t|}|tz t5fdt|gD}t |tkr|t|< ddddS|||t|<dddn #1swxYwYdS)Nc g|] }|k| Srrrs rr{z._client_event_rate_limited..wsYYYRBRXLLbLLLrTF) rKr'_CLIENT_EVENT_RATE_LIMIT_WINDOW_SECONDS_CLIENT_EVENT_RATE_LIMIT_LOCKr+r?ro_CLIENT_EVENT_RATE_LIMIT_MAXrrs @r_client_event_rate_limitedrrs#$)+++#C #G , ,C : :F &33YYYY#;#?#?R#H#HYYY z??: : :,6 $S ) 33333333 #(2 % 333333333333333 5rrc|||dd|dS)NContent-Length0T) send_response send_header end_headers)r6rs r_send_no_contentrsD &!!! (#...  4rc t|jdd}n#t$rd}YnwxYw|tkr6 |jtn#t$rYnwxYwd|dS|r|j|nd} tj| dS#t$rdt|dcYSwxYw) Nrrbody_too_large) discardedbytes{}rT)invalidr) intrr?r[_CSP_REPORT_MAX_BODY_BYTESrfilereadrrdecodero)r6lengthrQs r_read_csp_report_payloadrsW_(()91==>>  ***  M  9 : : : :    D -???(. 9'-  V $ $ $EC4z#**W--... 444#c((333334s0(+ :: A)) A65A6&CC#"C#ct|r7tdt|t |St |}tdt||t |S)zBCollect browser CSP report-only violations without requiring auth.z/Dropped CSP report from %s: rate limit exceededzCSP report from %s: %s)r_CSP_REPORT_LOGGERr~rrrinfo)r6rs r_handle_csp_reportrs(()"" = %g . .    (((&w//G46OPW6X6XZabbb G $ $$rch|dSt|}|sdS|d|Sr;r+r-r`r.s r_bounded_client_event_stringrs> }t u::    D t <rc>t|d}|sdS t|}|jpd}n.#t$r!|dddpd}YnwxYw|dsd|dz}|dtdS)Nrr}rrr8)rrr r[rrrd_CLIENT_EVENT_ALLOWED_FIELDS)r-r.r7r s r_sanitize_client_event_url_pathrs 't 4 4D t,${!c ,,,zz#q!!!$+, ??3  &T[[%%% :.z:: ;;s/(AAct|tsddiSi}tD]X\}}|dkr#t ||}n#t |||}||||<Y|d}t|trn*t|trd|cxkrdkrnn||d<|d}t|tr||d<nNt|tr9| }|d vrd |d<n |d vrd |d<d|vrd|d<|S) a1Whitelist tiny browser diagnostic events and discard sensitive content. Client-side SSE diagnostics should explain transport failures without persisting prompts, cookies, query strings, headers, or arbitrary browser payloads. This helper intentionally keeps only bounded scalar metadata. r3rr8N ready_staterrmonline>rJrMrLrKT>rnoofffalseF) r=r>ritemsrr?rrrrrr)r sanitizedrBr`r-rrlowereds r_sanitize_client_event_payloadrs gt $ $$###%I4::<<%% u J  3GKK4F4FGGEE0U1C1CUKKE  $Ie ++m,,K+t$$/ K % %/!{*?*?*?*?a*?*?*?*?*?#. - [[ " "F&$($ ( FC (,,..&&(( 0 0 0"&Ih   3 3 3"'Ih i& ' rc" t|jdd}n#t$rd}YnwxYw|tkrO |jtn#t$rYnwxYw d|_n#t$rYnwxYwdddS|r|j|nd} |d}tj |}n#t$rd d dcYSwxYwt|tr|nd d dS) NrrTrr)r3r9rrr invalid_json not_object) rrr?r[_CLIENT_EVENT_MAX_BODY_BYTESrrclose_connectionrrrr=r>)r6rrQdecodedrs r_read_client_event_payloadrsnW_(()91==>>  ,,,  M  ; < < < <    D   '+G $ $    D $0@AAA(. 9'-  V $ $ $EC>**W%%*W%% >>>"n=====> $// a77yT`5a5aasB(+ :: A)) A65A6:B BB6)C C21C2rc^t|r?tdt|t |ddddpdSt |}tdt||t |d|d d pdS) Nz1Dropped client event from %s: rate limit exceededF rate_limited)rrr5TzClient event from %s: %sr3)rr3)r_CLIENT_EVENT_LOGGERr~rr(rrr?)r6rrs r_handle_client_event_logrs!'**V$$ ? %g . .   @@MMMUQUU,T22G8:ST[:\:\^efff WTGKK,@,@AA B B JdJrct|pd}|sdS|tvr t|SdD]\}}||r|cSdS)NrI))rr)rr)rr)rr)rr)rr) openrouterr )customr )rrr_PROVIDER_ALIASESr)r-rQprefix normalizeds r_normalize_provider_idr s ekr   " " ( ( * *C r  %%     >>& ! !      2rcatalogct}t}|dpgD]}t|dpd}|sM||t |}|r||||fS)Ngroups provider_idrI)rr?rrrrr)rraw_provider_idsnormalized_provider_idsrrQr s r_catalog_provider_id_setsr!s!$(+X&&,"44%))M**0b117799??AA  S!!!+C00  4 # ' ' 3 3 3 4 44r provider_rawprovider_normalizedrrc"||vp |o||vp|o||vSr;r)rrrrs r_catalog_has_providerr/s< (( T  K$7;K$K T  R$7;R$Rrmodelactive_providerc|}dD],}||rt||kcS-dS)NrrrF)rrr)rr model_lower bare_prefixs r%_model_matches_active_provider_familyr <s]++--K2JJ  ! !+ . . J)+66/I I I I J 5rct|pd}|dr d|vr|ddd}d|vr|ddd}|dd|ddkS)NrI@rrr-.)rrrrorreplacer)rcrs r_catalog_model_id_matchesr&GsIO$$**,,IC  0SI%5%5$$S!,,Q/  iOOC++A.   S# & & , , . .%--S2I2I2O2O2Q2Q QQrct|pd}|r|dkrdS|dr |dd}|pdS)NrIrCr"r)rrrr)r-rs r_clean_session_model_providerr(Psp5;B%%''--//H x9,,t3 ABB<  trct|pd}|drPd|vrL|dddd\}}t |}|}|r|r||fS|dfS)NrIr"rr)rrrror()r provider_hint bare_modelrrs r_split_provider_qualified_modelr,Ys     " " $ $E "$)!""I$4$4S!$<$<! z0??!!  " "> ! $;rraw_active_providerc|dkrdSdsdS|dpgD]}t|dpddkrOt fd|dgDcSdS) aReturn True when a bare Codex model needs separate provider context. OpenAI, OpenAI Codex, Copilot, and OpenRouter can all expose GPT-looking bare names. If a session stores only ``gpt-...`` while Codex is active, a later provider-list/default-model round trip can lose the user's Codex choice. Store the provider separately instead of converting the persisted model to ``@openai-codex:model``. rFrrrrIc3K|]<}t|tt|dV=dSr|N)r=r>r&r?)rentryrs rrxz8_should_attach_codex_provider_context..ts[  %&& %eiioou = =      rmodels)rrr?rrr)rr-rrs` r%_should_attach_codex_provider_contextr3dsn,,u ;;== # #E * *uX&&,"   uyy''-2 . . 4 4 6 6 < < > >. P P     8R00        5rmodel_idmodel_providerc@t|pd}t|}|ro|rmt|\}}d|vr@|dddnd}|dko|dk}|s|s||dfSt }t|dptpd} |s| |t| fSt|d } t|d pd} | s| st|\}}||p|dfSt|\} }|ra|s_d|vr@|dddnd}| dko |dko|dk}|s||dfS| d rd |vr|pd} t| }| }| r|s||dfSt|\}}| | kp | | kp|o|| k}|r|| dfSt| |||r|| dfSt|| rt|| |r| nd }||d fS| rt| | |r| nd }| |d fS|| dfS|d}|dkr|}dD]h}| |rQt|}|r$|| kr| rt| | |r| nd }| |d fcSt|| |r| n|}||dfcSi||dfSt|d |}| dvr\|dvr||dfS|dpg}d|D}t#d|D}||vs|r||dfS| r| |d fS||dfS| dkr|dkr |dvr| r| | d fS| p| }|r|dvr ||kr| r| |d fS||dfS)u}Return (effective_model, effective_provider, model_was_normalized). Sessions can outlive provider changes. When an older session still points at a different provider namespace (for example `gemini/...` after switching the agent to OpenAI Codex), reusing that stale model causes chat startup to hit the wrong backend and fail. Normalize only obvious cross-provider mismatches. When a model has an explicit provider context, keep the model string itself in its picker/API shape and carry the provider as separate state. Fast path (#1855): when the caller supplies both a model and an explicit ``model_provider`` AND the model is not itself ``@provider:model``-qualified, we can return the inputs verbatim without calling ``get_available_models()``. The slow path below would arrive at the same answer via ``if requested_provider and not explicit_provider: return model, requested_provider, False`` after paying the full catalog-build cost. Avoiding the catalog here keeps ``POST /api/chat/start`` snappy even when the model catalog is cold and the rebuild has to make network calls (custom OpenAI-compat endpoints, OpenRouter ``/models``, LM Studio ``/models``, credential pool refresh) — those used to wedge the handler for >100s and trigger 502s on default-60s reverse proxies, even though the WebUI itself eventually responded. rIrrrrrF default_modelrr"rNTr>r r >rIr r rcVh|]&}t|dpd'S)rrI)rr?rrs rrz:_resolve_compatible_session_model_state..s?! ! ! CD "155#7#7#=2 > >! ! ! rc3LK|]}|dpddkV dS)rrIr Nrr9s rrxz:_resolve_compatible_session_model_state..sI# # =>QUU= ! ! 'RL 8# # # # # # r>Nr)rrr(r,rrr r?rrrrrrr r3rZr)r4r5rrequested_providerr+explicit_provider model_prefixstale_codex_openai_slash_idrr7rr-bare_for_contextrrrrhint_matches_activeprovider_contextslashrrrroutable_provider_idshas_openrouter_group_active_for_compares r'_resolve_compatible_session_model_staterF|sG2 B   % % ' 'E6~FF 4# 4)H(N(N% %ADu{{3**1-3355;;===SU . 0 )( $! 4)D 4,e3 3"$$G O44K KLLRRTTM F0$}2E2EEE,W[[9J-K-KLLO gkk*;<<BCCIIKKQQSS E#6E(G(N(N% %'=+=uDD*I%*P*P''4"34ADu{{3**1-3355;;===SU > 1 )"n4 )( $ + 4,e3 3 -*(.B 4\BB%++--  4: 4,e3 34Mg4V4V11 / / P. P#N(;(N   .,- -    #    . ,- - 0_ M M 69EXZabb##  /5 5  99H[]dee##  !"2D8 8lE)) JJsOOE qyykkmm 6 6 6K%%k22 6!7 !D!D!An&G&GM&GAPcelmm"++!% )*:D@@@@=UDWY`aa,''+! .5555 6(%//+E&5&M::N222 9 9 9,e3 3X&&,"! ! HN! ! !  ## # BH# # #    2 2 26J 2,e3 3  ; "4d: :(%// ~-- h & & "8 8 8  91477 *@-@7.0LLLQ_cvQvQv|IQv0$66 $e ++rc0t|\}}}||fS)zBReturn (effective_model, model_was_normalized) for legacy callers.)rF)r4effective_model _providerrhs r!_resolve_compatible_session_modelrJ@s"*QRZ*[*['OY G ##rct|ddpd}tt|dd}t|pd|\}}}||k}|r8|r6|r||ks|r,|r ||kr||_||_|d|S)NrrIr5FrF)r@r(rFrr5rJ)rAoriginal_modeloriginal_providerrHeffective_providerrhprovider_changeds r!_normalize_session_model_in_placerPFsWgt44:N5)4004[$440O'*->>-/- -#66;K6  ,~88+GM!3 e ,,, rczt|ddpd}t|pdt|dd\}}}|p|S)a;Resolve the model a session should display without mutating persisted state. `GET /api/session` should stay side-effect free. If a stale persisted model needs normalization for the current provider configuration, return the effective model for the response payload only and leave disk state alone. rNrIr5r@rF)rArLrHrI_changeds r,_resolve_effective_session_model_for_displayrT]sUWgt44:N+R$)400,,(OY  ,n,rcvt|ddpd}t|pdt|dd\}}}|S)NrrIr5rR)rArL_modelrrSs r5_resolve_effective_session_model_provider_for_displayrWksMWgt44:N!H$)400""FHh Orct|pd}|sdS ddlm}ddlm}|}d}d} t |tr|dini}t |trG|d} | 0 t| } | dkr| }n#ttf$rYnwxYwt |tr|dnd} t | tr| }n#t$rYnwxYw ||d||pd| pdS#t$r||dpdcYSwxYw#t$rYdSwxYw) a Best-effort current context window for a session model. Persisted session context metadata is a snapshot from a prior model call. During session hydration/model switching, the current model metadata should be allowed to replace that stale snapshot. rIr)get_model_context_length get_configNrcontext_lengthcustom_providers)config_context_lengthrr])rragent.model_metadatarY api.configr[r=r>r?rrrhlistr[) rrmodel_for_lookup_get_cl_get_config_for_cl _cfg_for_cl_cfg_ctx_len_load_cfg_custom_providers_load_model_cfg_load_raw_cfg_ctx_load _parsed_load _raw_cp_loads r)_resolve_context_length_for_session_modelrlts5;B''--// q#LLLLLL??????((**  %)" >HVZ>[>[ckoogr:::acO/400 $3$7$78H$I$I!$0'*+<'='= '!++0<-%z2BL[Z^B_B_i;??+=>>>eiL,-- :-9*    D  67 &7!R!;     6 6 67+R005A 5 5 5 6 qqsyEADB65D6C D C  ADE DEDE"D66EEEE E"!E"r;current_providerc|!t|nd}|t|nd}|r)r5r s r _lookup_gateway_session_identityrrsG  13377JHHH!(D11 988r9rc|siS tD]}|d|kr|cS n#t$ricYSwxYwiS)Nr5)get_cli_sessionsr?r[)r5ris r_lookup_cli_session_metadatarus~  #%%  Cww|$$ 22 3    Is,55 AArAr%ct|d}t|d|d|d}|r|d|St|d|d|d}t|d|d}t|d|d}t|d |d |d }g}|r|d ||r|d ||r|d ||r|d||r|dd|zS|S)Nr5r7gateway_session_keyz |session_key:r9origin_chat_idr:r;r<origin_user_idz chat_type:zchat_id:z thread_id:zuser_id:|)rrr?r/rr) rAr%r r7r9r:r;r<identity_partss r_messaging_session_identityr|s / L0I0IJJH ]## M"" )**K 988;888 Y I $%%G HLL55w{{;7O7OPPIHLL55w{{;7O7OPPI Y I $%%G N869667774222333869667774222333;#((>":"::: rct|d|d|d|d}|s|dpd}t|S)Nr% source_tagr4r6 source_label messaging)r/r?r&rArQs r_session_messaging_raw_sourcers{  L!! L!! H J   C 9kk.))8[ &s + ++rct|d}tt|d|d|d|d|d|d|d|dS)Nr5r7rwr9rxr:)rrr?rr/)rAr s r_has_durable_messaging_identityrs/ L0I0IJJH   ]## M"" )** Y I $%% [!! K       rc ttt|dpdS#ttf$rYdSwxYwNr)rrr/rrhr-s r_numeric_countrsS5UA..3!44555 z "qq+.AAactive_gateway_session_idsactive_gateway_sourcesct|}t|sdS|r||vrdSt|d}|r||vrdSt|dtvrdSt |sdS|drdSt |d}t |d}|dkr|dkrdSdS) aHide stale Gateway-owned internal rows after an external chat moved on. Hermes Gateway keeps the external conversation identity in sessions.json. Compression/session-reset can leave old Agent state.db rows behind; those rows are implementation segments, not distinct conversations users chose. Only apply this aggressive hiding when Gateway is currently advertising an active session for the same messaging source. Without that source-of-truth file we keep the old fallback behavior. Fr5 end_reasonTparent_session_id message_countactual_message_countr)rr)r/r?_STALE_MESSAGING_END_REASONSrr)rArrr%rr actual_counts r$_should_hide_stale_messaging_sessionrs/w77J %j 1 1u %;Q)Q)Qu gkk,// 0 0C s000u7;;|,,--1MMMt *7 3 3t{{&''t"7;;#?#?@@M!'++.D"E"EFFLla//t 5rc x|sdSt|tst|ddn|ddkrdSt t|tst|ddn|dt|tst|ddn|dt|tst|ddn|dt|tr|d nd}t |S) z?Return true for sessions backed by external messaging channels.Fsession_sourceNrTr%r~r4r)r=r>r@r?r/r)rs r_is_messaging_session_recordrBs3 u9CGT9R9R u*D 1 1 1X_XcXcdtXuXu{F F Ft 4>w4M4Mlt,,,SZS^S^_kSlSl4>w4M4Mlt,,,SZS^S^_kSlSl0:7D0I0Id4(((w{{[cOdOd'1'4'@'@J N###d   C &c * **rct|tsdS|D]}t|tr|ddkr1t|dtr|drdS|d}t|trt d|DrdSdS)zHReturn true when returned messages can reconstruct their own tool cards.Frole assistant tool_callsTrc3rK|]2}t|to|ddkV3dS)rtool_useNr=r>r?rrs rrxz2_messages_include_tool_metadata..]sV- -  tT " " Etxx'7'7:'E- - - - - - r)r=rar>r?r)messagesmsgrs r_messages_include_tool_metadatarSs h % %u  #t$$ ;(F(F  cggl++T 2 2 sww|7L7L 44'')$$ gt $ $ - - - - - * *  44 5r start_idxrcNt|tr|dkrgS||z}g}|D]}}t|ts|d}t|tst|t sX||cxkr|krnh||~|S)zHKeep session-level tool calls that point into a returned message window.rassistant_msg_idx)r=rar>r?rrr)rrrend_idxfiltered tool_call assistant_idxs r_tool_calls_for_message_windowres j$ ' '=A+=+= -'GH'' )T**  ! &9:: mT * * *]C2P2P    / / / / / / / / / OOI & & & Orct|tsdSt|dpd}t |o|dkS)aReturn true when a paginated window should include this transcript row. Tool result rows are rendered through their assistant anchor or hidden as raw tool output. A tail page containing only tool rows makes the frontend set ``S.messages`` to a non-empty array while the visible transcript and topbar count stay empty. Anchor small tail windows on the newest non-tool row so long sessions do not open to a blank chat with only transient metadata. FrrItool)r=r>rr?rrr)rrs r(_message_counts_as_renderable_for_windowrvsh gt $ $u w{{6""(b ) ) / / 1 1 7 7 9 9D ' ( ((rc Tt|pg}|9tdtt|t |}nt |}|d|}|sgdfS|s|dfStdt|}t |}td||z }|||}|rit d|DsPt |dz ddD];} t|| r$| dz}td||z }|||}n<||fS)aReturn a paginated message window plus its offset in ``messages``. The normal fast path is a raw tail window. If that window contains no renderable transcript rows because state.db appended hidden tool rows after the visible assistant tail, shift the window end back to the newest renderable row. This preserves the raw index cursor while avoiding the WebUI blank-transcript trap. Nrrc34K|]}t|VdSr;)r)rrs rrxz._message_window_for_display..s+ZZCB3GGZZZZZZrrY)rarr[rrorranger) r msg_limit msg_before before_idxr4r`rrwindowr^s r_message_window_for_displayrs\HN##HCJX??@@ ]] kzk "F 1u qy 3y>> " "E&kkGAw''I Ig% &F cZZSYZZZZZ1b"--  C7s DD '7U?33  ' 12   9 rct|pg}tt|dgpg}|r|r||krg}t}tt|t|zdD]@}t |}||vr||||A|St|t|kr|n|S|S)acReturn the message coordinate space exposed by ``GET /api/session``. Messaging sessions can have a WebUI sidecar transcript plus messages from the Agent/CLI store. The frontend computes fork keep-counts against this merged display list, so branch/fork must slice the same list rather than the sidecar-only ``session.messages`` array. rct|dpdt|dpdt|dpdfS)N timestamprrrIr)rr?r)rs rrz6_merged_session_messages_for_display..s\aeeK((-A..AEE&MM'R((AEE)$$*++Zrr8)rar@rr_session_message_merge_keyrrro)rA cli_messagessidecar_messagesmerged_messagesseen_message_keysrr8s r$_merged_session_messages_for_displayrs *++LGGZ<<BCC_  # 0L @ @ O # d<0048H3I3IIPP , , 155+++!%%c***&&s++++" "#&'7#8#83|;L;L#L#LR^^ rc t|pg}d}|D]b}t|ts t|t |dpd}L#t tf$rY_wxYwt||dS)NrSrrrlast_message_at) rar=r>rrr?rrhro)rrrs r_message_summaryrsHN##HO#t$$   !/59M9M9RQR3S3STTOO:&    D  ]] O OOs2A""A65A6rkctj|}d}d}|rtt|dd}|dkr4t|d} t t|ddpd}n#ttf$rd}YnwxYwt|dd||dSt|| }t|d} t |d pd}n#ttf$rd}YnwxYw||kr ||kr||dS||dS) uReturn the cheap message summary used by metadata-only session loads. Threads ``profile=`` through to ``get_state_db_session_summary`` so background-thread reads land on the correct profile's state.db (per the cookie-bound profile selector — fixes the same TLS-vs-thread race the #2762 fix addressed for write paths). This intentionally does not full-read or merge transcripts. If state.db has grown beyond the sidecar count, report that growth so active-session polling can refresh. If state.db only contains restamped replay rows at or below the sidecar count, keep the sidecar metadata so polling does not loop forever on a false "newer transcript" signal. rrS_metadata_message_countNr updated_attruncation_watermarkrrkr) r_load_metadata_onlyrr@compactr?rrrhget_state_db_session_summary)rrksidecar_session sidecar_countsidecar_last_message_at state_summary state_countstate_last_message_ats r_metadata_only_message_summaryrs055OM!&w@Y[_'`'`aa A  *?+B+B+D+D+H+H+Y+YZZM *&+GO\ST,U,U,ZYZ&[&[ # #:& * * *&) # # # * ?$:D A A M"/#: 1gFFFM !2!2?!C!CDDK$ %m&7&78I&J&J&Oa P P z "$$$ #$]""'._field s7$.w$=$=_w{{4   77TXZ^C_C__rTis_cli_session read_onlyr>external-agentrexternal_agentr~r%r4rr6)rrr&r/)rArrs` r%_session_requires_cli_metadata_lookupr s u`````$G,,t FF# $ $%%ff[.A.A)B)Bt0VVDT=U=U1V1VWWNJJJt  ||x~z   rc tj|}t|rdSn#t$rYnwxYwtt |S)zCDetect messaging-backed sessions from WebUI metadata or Agent rows.T)r_r`rr[ru)rrAs r_is_messaging_session_idr) sg ,s## ' 0 0 4       '(DS(I(I J JJs #( 55c tt|d|d|d|ddpdpdS)Nrr created_at started_atrrS)rr/r?rAs r_session_sort_timestampr4 su  KK) * * KK % % KK % % KK % %          rct|tsdSt|rdS|dsdSt |dpd}|tvrdSt |dpd}|dvp|do| p|d kS) zOReturn True for importable CLI sessions that are safe to classify for settings.FTrr4rItitle)rIuntitledcliz cli sessionz sessionr) r=r>r r?rrrrendswith)rAr4rs r_is_cli_session_for_settingsr@ s gt $ $u'""t ;;' ( (u X&&," - - 3 3 5 5 ; ; = =F """u  G$$* + + 1 1 3 3 9 9 ; ;E : : ennZ>X>X?  %forrr1cli_capc|dkr|Sg}d}|D]2}t|r |dz }||kr||3|S)z?Keep only the most recent CLI-visible sessions after filtering.rr)rr)r1rkeptcli_seenrAs r_cap_recent_cli_sessionsrW sj!|| DH ' 0 0  MH'!! G Kr ui_sessioncli_metac,|s|S|st|St|}d|d<dD]+}t||}|r|||<,|d |d|d<|d |d|d<|d |d|d<|dTtt |dt |d|d<nh|d Stt |dt |d |d<|d r(|d }|r|d kr |d |d <|d r9|d r|d d kr |d |d <|S)zMerge source-of-truth CLI metadata into a sidebar session row. Preserve UI-owned state (archived/pinned) while replacing metadata that can legitimately drift in WebUI snapshots. Tr)r~r%rrr<r9r;r:r7r6rrr_lineage_root_id_lineage_tip_id_compression_segment_countrNrrrrrUntitledrr)r>r/r?rr)rrmergedr8r- current_titles r_merge_cli_sidebar_metadatarf s+   J *  F#F   $HLL--..  F3K||L!!-' 5|||L!!-' 5|||%&&2$,->$? !||O$$0"% 6::o66 7 7 8<<88 9 9# #  , - - 9"% 6::o66 7 7 8<<(>?? @ @# #  ||G0 7++  0  ; ;&w/F7O||G0zz'"" 0fjj&9&9Y&F&F&w/F7O Mrcbt|}t|sdSt||Sr;)rr)r|rs r_messaging_source_keyr s4 ' 0 0C %c * *t &w 4 44r show_previous_messaging_sessionsrc |rt|tdSt}d|D}d|D}||z fd|D}d|D}t }i}g}|D]} t | } | s|| )t| |r;| |vrR| | | | } | t| t| kr| || <| | | || <| | | td|S)z@Keep only the newest sidebar row per messaging session identity.Tr8reversec0h|]}|t|Srr)rrs rrz<_keep_latest_messaging_session_per_source.. s$!U!U!UsQT!U#c((!U!U!Urc|h|]9}t|tt|d:Sr5)r=r>r/r?)rrAs rrz<_keep_latest_messaging_session_per_source.. sL  gt $ $GKK --..rc h|]a\}}|v t|ttt|d|dbS)r%r6)r=r>r&r/r?)rrmeta"visible_active_gateway_session_idss rrz<_keep_latest_messaging_session_per_source.. sm C 4 4 4D$9O9O 4 $K0F0FQ[H\H\$]$]^^ 4 4 4rc0h|]}t||Sr)r))rr4s rrz<_keep_latest_messaging_session_per_source.. s'pppMghnMoMopfpppr)rrrGkeysrrrrrrr?r}r,sort) r1rgateway_metadatar session_idsr kept_sourcesbest_by_sourcerrAr8currentrs @r)_keep_latest_messaging_session_per_sourcer  s (Kh$;TJJJJ9;;!U!U6F6K6K6M6M!U!U!UK *Dk)Q&)//11 qp3Ippp UUL&(ND&&#G,,  KK  /9[]s t t   ,     S ! ! !$((--G"9'"B"BE\]dEeEe"e"e&-s# %sKK%%''(((II)4I888 Kr)r_r new_session all_sessions title_from_write_session_indexSESSION_INDEX_FILE_active_state_db_path load_projects save_projectsimport_cli_sessionrtget_cli_session_messagesget_state_db_session_messagesr"merge_session_messages_append_onlyrprune_session_from_indexensure_cron_projectis_cron_session)load_workspacessave_workspacesget_last_workspaceset_last_workspacelist_dir dir_signaturelist_workspace_suggestionsread_file_contentsafe_resolve_wsresolve_trusted_workspacevalidate_workspace_to_add_is_blocked_system_path_strip_surrounding_quotes_workspace_blocked_roots) handle_uploadhandle_upload_extracthandle_transcribe)_sse_run_agent_streaming cancel_streamrI)find_run_summaryread_run_eventsstale_interrupted_event) get_providersget_provider_quotaget_provider_cost_historyset_provider_keyremove_provider_key)apply_onboarding_setupget_onboarding_statuscomplete_onboardingprobe_provider_endpoint)cancel_onboarding_oauth_flowpoll_onboarding_oauth_flowstart_onboarding_oauth_flow) submit_pendingapprove_sessionapprove_permanentsave_permanent_allowlist is_approved_pending_lock_permanent_approved_gateway_queuesresolve_gateway_approvalenable_session_yolodisable_session_yolois_session_yolo_enabledcdSr;raks rrr, $rcdSr;rrLs rrr- sdrcdSr;rrLs rrr. srcdSr;rrLs rrr/ strcdSNTrrLs rrr0 s$rcdSrrrLs rrr1 sqrcdSr;rrLs rrr2 rOrcdSr;rrLs rrr3 s4rcdSrrrLs rrr4 ser_approval_sse_subscribersctjd}t5t|g|dddn #1swxYwY|S)zBRegister an SSE subscriber for approval events on a given session.rN)rrrDrYrmr)r5qs r_approval_sse_subscriber]? s BA GG!,,Z<<CCAFFFGGGGGGGGGGGGGGG Hs/AAAr\ct5t|}|r6||vr2|||st|dddddS#1swxYwYdS)zRemove an SSE subscriber.N)rDrYr?removerP)r5r\subss r_approval_sse_unsubscriberaG s @@(,,Z88  @AII KKNNN @)--j$??? @@@@@@@@@@@@@@@@@@sAA((A,/A,headtotalc|rt|nd|d}t|d}|D]-} ||#tj$rY*wxYwdS)uPush an approval event to all SSE subscribers for a session. CALLER MUST HOLD `_lock`. Snapshots the subscriber list under the held lock and then calls `q.put_nowait()` on each (which is itself thread-safe). `head` is the approval entry currently at the head of the queue (the one the UI should display) — NOT the just-appended entry. With multiple parallel approvals (#527), the just-appended entry is at the TAIL, but `/api/approval/pending` always returns the HEAD, so SSE must match. `total` is the total number of pending approvals. Pass `head=None` and `total=0` when the queue has just been emptied (e.g. `_handle_approval_respond` popped the last entry) so the client knows to hide its approval card. Npending pending_countr)r>rYr? put_nowaitrFull)r5rbrcrr`r\s r_approval_sse_notify_lockedrjQ s")-6$t***$OOG $ ( (R 8 8D   LL ! ! ! !z    D sA  AAcht5t|||ddddS#1swxYwYdS)aConvenience wrapper that takes `_lock` itself. Use only from contexts that don't already hold `_lock`. Production call sites (submit_pending, _handle_approval_respond) MUST hold the lock and call `_approval_sse_notify_locked` directly to avoid a notify-ordering race where a later append's notify can fire before an earlier append's notify (resulting in stale `pending_count`). N)rDrj)r5rbrcs r_approval_sse_notifyrlk s ==#Je<<<==================s '++r7approvalct|}|dtjjt 5t j|g}t|ts|gt |<t |}| |t|}|d}t|||ddddS#1swxYwYdS)aAppend a pending approval to the per-session queue. Wraps the agent's submit_pending to: - Add a stable approval_id (uuid4 hex) so the respond endpoint can target a specific entry even when multiple approvals are queued simultaneously. - Change the storage from a single overwriting dict value to a list, so parallel tool calls each get their own approval slot (fixes #527). - Notify any connected SSE subscribers immediately. approval_idrN) r>rmuuiduuid4hexrDrCr=rarrorj)r7rmr1 queue_listrcrbs rr>r>x s NNE ]DJLL$4555  > >(b99 *d++ /%/LH[ !!+.J%   J!} $Ku=== > > > > > > > > > > > > > > > > > >sBCCC)r> get_pendingresolve_clarifyresolve_clarify_by_id sse_subscribesse_unsubscribecdSr;rrLs rrr sTrcdSr;rrLs rrr rOrcdSrrrLs rrr sarcdSrrrLs rrr sErenzSign inzEnter your password to continuePasswordInvalid passwordzConnection failed)langrsubtitle placeholderbtn invalid_pw conn_failedzfr-FRz Se connecterz(Entrez votre mot de passe pour continuerz Mot de passezMot de passe invalideuÉchec de la connexionzes-ESuIniciar sesiónu'Introduce tu contraseña para continuaru ContraseñaEntraruContraseña inválidauError de conexiónzde-DEAnmeldenz+Geben Sie Ihr Passwort ein, um fortzufahrenPasswortuUngültiges PasswortzVerbindung fehlgeschlagenzru-RUu Войтиu<Введите пароль, чтобы продолжитьu ПарольuНеверный парольu,Не удалось подключитьсяzzh-CNu登录u输入密码继续使用u密码u 密码错误u 连接失败zzh-TWu輸入密碼繼續使用u密碼u 密碼錯誤u 連接失敗zit-ITAccediz$Inserisci la password per continuarezPassword non validazConnessione fallitazja-JPuサインインu$パスワードを入力して続行uパスワードuパスワードが無効ですu 接続失敗zpt-BRzDigite sua senha para continuarSenhauSenha inválidauFalha na conexãozko-KRu 로그인u/계속하려면 비밀번호를 입력하세요u 비밀번호u)비밀번호가 올바르지 않습니다u 연결 실패ztr-TRu Oturum açu"Devam etmek için şifrenizi girinuŞifreuGeçersiz şifreuBağlantı başarısız) r}fresrruzhzh-Hantitjaptkotrraw_langc|sdSt|}|sdS|tvr|S|dd}|}tD]}||kr|cS|dks?|ds*|ds|drdS|ds?|d s*|d s|d r d tvrd ndS|dd d}tD]}||kr|cSdS)z7Resolve settings.language to a known _LOGIN_LOCALE key.r}rr#rzzh-cnzzh-sgzzh-hanszzh-twzzh-hkzzh-mozzh-hantrrr)rr _LOGIN_LOCALEr%rrr)rrr rr8bases r_resolve_login_locale_keyr s t x==   D t } c3''J     E 99;;%  JJJ  }}((11}U5E5Eg5N5N}RWRbRbclRmRm}t   AE$4$4W$=$=AAQAQRYAZAZA^c^n^nox^y^yA%66yyD@ ;;sA  q !D 99;;$  JJJ  4ru {{BOT_NAME}} — {{LOGIN_TITLE}}

{{BOT_NAME}}

{{LOGIN_SUBTITLE}}

z agent.logz errors.logz gateway.log)agenterrorsgateway>r)ri@c tt|pd}n#ttf$r t cYSwxYw|t vr|nt Sr#)rrrrrh_LOG_DEFAULT_TAIL_LOG_TAIL_VALUES)raw_tailtails r_normalize_logs_tailrs sp!3x~2&&,,..// z "!!!    !+++441BBs03A Ac 8t|j}|ddgdpd}t |}|st |ddSt|ddgd} dd lm }t| }nd#t$rWttjd ptjd z  }YnwxYw|d z }||z } | d j|d krt |ddS| r| st)|||gd ddd|ddS| } t-| j} t1| t2} | d5} | | kr| | | z | | }dddn #1swxYwY|dd}|| d}t)||||| | k| | jddS#t$rD}t@!d|t |tE|dcYd}~Sd}~wwxYw)zCReturn a bounded tail window for an active-profile Hermes log file.rrrzUnknown log filer5rNrTrXrYlogsF)strictzInvalid log filez Log file for z not found yet.)rrlines truncated total_bytesr!rrbrr%rrIz&Failed to read whitelisted log file %sr)#rrNr?rr_LOG_FILE_WHITELISTr&rrZrUrr`r[r]environr_rerrzrr(r=rst_sizer[_LOG_MAX_BYTESopenseekrr splitlinesr?rrr+)r6r7rNfile_keyfilenamerrUr2log_dirlog_pathrAr read_bytesfhrQr.rrs r _handle_logsr{ s V\ " "E &7),,Q/:7AACCIIKKH"&&x00H <7.s;;;;  &4& 9 9! < = =Dd777777113344??AA ddd2:>>-88UTY[[9=TVVaacc dF"G!H#>   5  ) ) 0GOO5O4Q4Q Q Qw 23??? ?  (8(8(:(: W " AAAA ]]__"*oo n55 ]]4  &BZ'' j0111''*%%C & & & & & & & & & & & & & & &zz')z44!!4%&&)$z1&[      >>>A8LLL7OC00=========>se1/C!!AEEAK AK AK +4I+ K +I//K 2I/3AK L9LLLz_https://hermes-agent.nousresearch.com/docs/user-guide/skills/bundled/research/research-llm-wiki)entitiesconcepts comparisonsqueriesc , ddlm}t|S#t$rXtt jdttjdz cYSwxYw)NrrTrXrY) rZrUrr`r[r]r^rr_rTs r_llm_wiki_active_hermes_homer sY777777**,,--88::: YYYBImSy1H-I-IJJKKVVXXXXXYs.1ABBr2c$|dz }|r|sdS |ddD]}|}|r|dsd|vr2|dd\}}|dkrd|d d }|pdcSn#t$rYdSwxYwdS) Nz.envrr%rrr=r WIKI_PATH"')rzrrrrrrr[)r2env_pathrstrippedr8r-s r_llm_wiki_env_file_pathr s4V#H ??  H$4$4$6$6t && &JJUUWW ! !Dzz||H x22377 3h;N;N!Q//JCyy{{k))KKMM'',,22377E=D  ! tt 4sC C?? D  D config dotted_keycHt|tsdS||vr7||r"t||S|}|dD]&}t|tr||vrdS||}'|rt|ndS)Nr$)r=r>r?rr)rrcurrs r_llm_wiki_get_config_path_valuer s fd # #tV : 6 66::j))*** C  %%#t$$ C44$i $3s888$rc ddlm}|}n#t$rYdSwxYwt|dpt|dS)NrrZskills.config.wiki.pathz wiki.path)r`r[r[r)_get_cfgcfgs r_llm_wiki_config_pathr so555555hjj tt (-FGG = *3 < <s  !!i'c#K|]D}tt|VEdSr;)rrr`rervs rrxrx sY&&,-CQ$$&&''&&&&&&r)rz/etcz/usrz/varz/optz/sysz/proccDt}tjdpt|}|rdnd}t |}|st }|rd}d}|sd}t tj| ||fS)NrrCrTz~/wiki) rr]r^rrrrr expandvarsr`)r2rQr4 configureds r_llm_wiki_resolve_pathr s.00K )K H$;K$H$HC .[[YFcJ #%%  .FJ  ""3'' ( ( 3 3 5 5vz IIrrc|sdS ddlm}m}|||jddS#t $rYdSwxYw)Nr)datetimetimezone)tz+00:00Z)rr fromtimestamputc isoformatr%r[)rrrs r_llm_wiki_safe_isor s t////////%%bX\%::DDFFNNxY\]]] ttsA A AArootc|r|sdS t|tvrdSn#t $rYdSwxYwd}d}|dD]o}|dz }|tkrn\ |r6td| |j Ds|dz }`#t $rYlwxYw|S)Nrrrc3@K|]}|dVdSr$Nrrs rrxz(_llm_wiki_count_files.. s.)h)h4$//#*>*>)h)h)h)h)h)hr) rzrrre_LLM_WIKI_FORBIDDEN_ROOTSr[r_LLM_WIKI_MAX_FILESrrrfrn)rriterateditems r_llm_wiki_count_filesr s$ ;;== q t||~~  "; ; ;1 < qq EH 3A  ) ) ) E ||~~ c)h)h4K[K[\`KaKaKg)h)h)h&h&h      H  Ls$(A A%$A%A C!! C.-C. wiki_pathc0g} t|tvr|Sn#t$r|cYSwxYwd}tD]}||z }|r|s0|dD]}|dz }|tkr|ccS | |}| r3td|j Ds| |v#t$rYwxYw|S)Nrrrc3@K|]}|dVdSrrrs rrxz'_llm_wiki_page_files..: s.-Y-Ytdooc.B.B-Y-Y-Y-Y-Y-Yr)rrerr[_LLM_WIKI_PAGE_DIRSrzrrrrfrrrnr)rpagesrdirnamesectionrrels r_llm_wiki_page_filesr' scE y  "" # #'@ @ @L A  H&  g%~~ w~~'7'7  MM&))  D MH---  &&w//<<>>'#-Y-Ysy-Y-Y-Y*Y*Y'LL&&&      Ls)/ >>(AD DDc t\}}}dddddddd||ddtd }|s|S|sd|d<|St |}d |d z |d z |d z fD}||d}|D]A} |j}n#t$rY)wxYw||nt||}B| d d |rdndt|t|t|dz t|d|S#t$r2} ddddddddddddtt| jdcYd} ~ Sd} ~ wwxYw)zIReturn private-safe LLM Wiki status metadata without reading page bodies.FmissingrNzoHermes Agent exposes WIKI_PATH/wiki.path for location, but no stable on/off config flag is currently available.) renabledr entry_count page_countraw_source_count last_updated last_writerpath_configured path_sourcetoggle_available toggle_reasondocs_url not_directoryrcbg|],}||*|-Sr)rzrrvs rr{z*_build_llm_wiki_status..[ sdJJJanonvnvnxnxJ}~~G~G~I~IJJJJrz SCHEMA.mdzindex.mdzlog.mdTreadyemptyrQ)rrrrrrrrrz)Unable to inspect LLM Wiki status safely.)rrrrrrrrrrrrrr)r_LLM_WIKI_DOCS_URLrzrrr}r=r?r[rupdaterorrrr) rrrr page_files status_fileslatestrr!rs r_build_llm_wiki_statusr A s-< 2H2J2J/ ; ! .& %O*  !! K!! ,DNK))44 JJI $;Y=SU^aiUi#jJJJ J'''  E ED  ,    $nUU#fe2D2DFF !+8ggz??j// 5i%6G H H.v66          ! $$ %H*#YY'         sNt|tdSrT)r(r )r6r7s r_handle_llm_wiki_statusr sg%''((( 4rc 012ddl}ddl}t|j} t t t |ddgddd}n#ttf$rd}YnwxYw|}| |}| |j |j |jddd|j|j|jf }d} ||dz | zz } | } d t fd } d t$fd } d t&d t$fd }g}t(dz }|r< t-j|d}n#t2$rg}YnwxYwg}|D]\}|ddpd}|ddpd}t ||| krG||]t7|}d}d}d}d}i}i}|0|2|D]}| |d}| |d}| |d}|| |dz }||z }||z }||z }|dpd} || ddddd}!|!dxxdz cc<|!dxx|z cc<|!dxx|z cc<|!dxx|z cc<||}"|"r | |"}#|d|#}$||$ddddd}%|%dxx|z cc<|%dxx|z cc<|%dxxdz cc<|%dxx|z cc<0|#jxxdz cc<2|#jxxdz cc<#t2$rYwxYw||z}&g}'| D]\} }(|(d|(dz})tC|(dd}*|'| |(d|(d|(d|)|*|r(t tC|(d|z d znd|&r"t tC|)|&z d znd|r"t tC|*|z d zndd! |'"d"#g}+tG|D]},| |,| zz}-|d| |-}$||$ddddd}!|+|$|!d|!d|!dtC|!ddd$gd%101fd&tGd'D}.2fd(tGd)D}/tI|||||||&tC|d|'|+|.|/d* S)+z5Return usage analytics from local WebUI session data.rNdays30rmr,iQrFc ttt|pddS#ttf$rYdSwxYwr)rrrrrhrs r_safe_usage_intz)_handle_insights.._safe_usage_int sR s5!,,--q11 1:&   11 rc |dS t|tr@|dddd}|sdSt t |dS#t tf$rYdSwxYw)NrS$rIr)r=rrr%rrrrhrs r_safe_cost_floatz*_handle_insights.._safe_cost_float s =3 %%%  --c266>>sBGG3uU||S)) ):&   33 sAA8A88B  B rAc|d|ddp|ddpdS)Nrrrrrs r_session_usage_tsz+_handle_insights.._session_usage_ts s?{{<\1)E)EFFk'++VbdeJfJfkjkkrz _index.jsonrrrrrS input_tokens output_tokensestimated_costrrr)r1rrcostr1rz%Y-%m-%d)rrr1rr)) rr1rr total_tokensr session_share token_share cost_sharec4|d |d |dfS)Nrr1rr)rs rrz"_handle_insights.. s!F)a m^QwZ(Prr)daterrr1r)MonTueWedThuFriSatSuncNg|]!}||dd"S)r)dayr1r)ri dow_activity dow_labelss rr{z$_handle_insights.. s5]]]q 1 <3C3CAq3I3IJJ]]]rcBg|]}||ddS)r)hourr1r)rr hod_activitys rr{z$_handle_insights.." s1SSSA (8(8A(>(>??SSSr) period_daystotal_sessionstotal_messagestotal_input_tokenstotal_output_tokensr  total_costr2 daily_tokensactivity_by_dayactivity_by_hour)% collectionsrKrrNr[rrr?rhr localtimemktimetm_yeartm_montm_mdaytm_wdaytm_ydaytm_isdstrr>rrzrrrr[rroCounterrmstrftimetm_hourrroundrrr()3r6r7rA_timerNrrtodaytoday_midnightday_secs first_day_tsrrrr sessions_dataidx_pathr^r1createdupdatedr9r:r;r<r= model_statsr>rrr cost_valuerbucketrdtday_key daily_bucketr models_breakdownstatsrow_total_tokensrow_cost daily_seriesr0day_tsdow_datahod_datar1r2r6s3 @@@r_handle_insightsre s V\ " "E3s599VdV44Q788!<(>?? %%aee,<&=&=>> //!%%*@*@AAAl*},j g+)'' 0 0    za~,.=0v*$ q ! !   __R((..R88+66w$%%& ! AA   ^,,, <,,,_--->---Z(((A-(((V$$$ 2$$$RZ(((A-(((RZ(((A-((((    ! (&(;;L#))++   u 053IIv**j)!.1"?3,WelSj(9N(Jc'Q!R!RSSSklR^e3u&6&E%LMMNNNdeGQX#eX %:c$ABBCCCWX ! ! PPQQQL 4[[  X...U__V-D-DEE!!' , ,    ">2#O4z*&.!,,       CBBJ]]]]]TYZ[T\T\]]]HTSSSrSSSH W((02$J**"$#$     s7AA((A>=A>>(E'' E65E6,B0O O,+O,c t|dd}tt|ddpdttt|ddpdddS)Nserveraccept_loop_requests_totalraccept_loop_last_request_atrSrm)requests_totallast_request_at)r@rrMr)r6rgs r_accept_loop_healthrl6 sj Wh - -Fgf.JANNSRSTT wv7TVY'Z'Z'a^a!b!bdeff  r?rc8tj}tj|}ttj|z dzd}|sd||dS dt t |dtjS#tjwxYw)Nrrrblocked)rrmsr)ractive_streamsrp)rKracquirerMrorrelease)rt0acquired elapsed_mss r_streams_lock_healthrw> s B#O<<.r s ${"3rr)rqtotal_subscriberstotal_offline_buffered_eventsstreams)rrarrr@callabler=r>r[rr?rrrro) rr~rrr6streamsnapshotry raw_snapshotrzr{s r_stream_runtime_diagnosticsrR sG$%! &&W]__%%&&&&&&&&&&&&&&&"   6%f.CTJJ ' ( (  2244 lD11,+H    x||,>??D1EE"%hll3L&M&M&RQR"S"S--%)@@%Y 0'>       LL33L444g,,.)F   s!;??0!B B! B!c ddlm}tj}|j5g}|jpiD]\}}t |pi}|d} td|t|z }n#t$rd}YnwxYw| d|t|d|d<| ||j}dddn #1swxYwY|d t!|||d } |r |ddd| d <n3|r1ttd|t|z d| d <| S)zBReturn active worker-run state independent of SSE stream presence.r)rrrSr6r age_secondsNcJt|dpdS)NrrS)rr?r}s rrz'_run_lifecycle_health.. suTXXl%;%;%BsCCrr) active_runsrunslast_run_finished_atoldest_run_age_secondsidle_seconds_since_last_run)apirrKACTIVE_RUNS_LOCK ACTIVE_RUNSrr>r?rrr[rmrMrLAST_RUN_FINISHED_ATrro) _live_configrrr6rQrrage last_finishedrs r_run_lifecycle_healthr{ s+***** )++C  & : :+7=2DDFF  NIs r??D,//J #sU:%6%6677     OOK 3 3 3"'Q--D  KK    $9  : : : : : : : : : : : : : : : IICCIDDD4yy -G  `,0GKK s,K,K()) `16s3eMFZFZ@Z7[7[]^1_1_-. Ns7A C0+ B  C0 BC0BA C00C47C4 stream_checkci}||n t|d<ddit|d<|dddkr|dfStj} t }dt |t tj|z dzdd |d <nW#t$rJ}d t|j t tj|z dzdd |d <Yd}~nd}~wwxYwtj} td }dt |t tj|z dzdd |d<nW#t$rJ}d t|j t tj|z dzdd |d<Yd}~nd}~wwxYwtj} t}| s.dt tj|z dzdd|d<nttjt!|5}|ddddn #1swxYwYdt tj|z dzdd|d<nW#t$rJ}d t|j t tj|z dzdd |d<Yd}~nd}~wwxYwt'd|D}||fS)aRRun cheap probes that exercise the state paths used by the UI shell. Plain /health intentionally stays tiny. /health?deep=1 is for supervisors and watchdogs that need to know whether the process can still touch the shared stream map, sidebar/session path, project state, and Hermes state.db without hitting the RST-before-write failure mode from #1458. `stream_check` is the result from a prior `_streams_lock_health()` call; if provided, it's reused so we don't acquire `STREAMS_LOCK` twice on the same /health?deep=1 request (per Opus advisor on stage-297). N streams_lockrrstream_runtimeFrr)rrrpr1r)rrrp)_migrateprojectsr)rrpstate_dbzPRAGMA schema_versionc3DK|]}|ddvVdS)r>rrNr)rchecks rrxz&_deep_health_checks.. sH   (00r)rwrr?rKr rorMr[rrrrrzrsqlite3connectrexecutefetchoneallr,) rchecksrtr1rrdb_pathconnhealthys r_deep_health_checksr s!F-9-E\\K_KaKaF>$  % ' ' F n!!(++t33u} B  >>]]r)T1155  z    #YY'r)T1155  z  B   %000]]r)T1155  z    #YY'r)T1155  z  B '))~~ #TY[[2-5q99""F:   W6677 A4 455>>@@@ A A A A A A A A A A A A A A ATY[[2-5q99""F:     #YY'r)T1155  z ]]__G 7?sr$A B.. D8AC==DA E%% F9/AF44F9A>J;(J6 J;JJ; J 0J;; LAL  Lc t|jpdddgddv}t }t }|ddkrdndt tt|dpdt|d pd|d g|d ttj tz d t|d }d|vr |d|d<d|vr |d|d<|rc|ddkrd|i|d<t||dSt|\}}||d<|sd|d<t||dS|ddkrt||dSt||S)NrIdeepr>rJrMrLrKrrdegradedrqrrrr)rr1rqrrruptime_seconds accept_looprrrrr5)r)rrNr?rrwrrorrrMrKrrlr(r)r6r7rr run_checkrrrs r_handle_healthr s FL&B ' ' + +FRD 9 9! < B B D DHb bD'))L%''I&**844<<$$*MMl../?@@EAFF9==77<1== fb)) ) .D E E .? ?CC*733  G 9,,,56N,O()$ 111:;X1Y-. 3   H % % - -!/ >GH Wgc222 2-<HHH" 3 *GH Wgc222 2xD  '#.... Wg  r) pre_tool_callpost_tool_call pre_llm_call post_llm_callc"ddlm}|S)zDReturn Hermes Agent's plugin manager for read-only WebUI visibility.rr)rrrs r"_get_plugin_manager_for_visibilityrs#555555    rr`c0|dSt|dd}d|}t ||kr"|d|dz dz}|S)zAReturn bounded display text without path/callback-like internals.NrIr3r…)rr%rrrrorcrs r_clean_plugin_visibility_textrs }r u::  fb ) ) / / 1 1D 88DJJLL ! !D 4yy5KeaiK ''))E1 Krc |p t}|dg}t|dipi}t|dD]\}}t|dd}|t t|ddp|pt|d d d }t t|d d p|d }t t|d d d }t t|dd d } t t|dd pdd } t t|dd} | dkrd} n| dkr| rd} n| rdnd} g} tt|dgpgtt|dgpgzD]G}t|pd  }|tvr|| vr| |H| tj| ||p||| | | | | d|t | ttddS)aBuild a sanitized plugin/hook visibility payload for Settings. The Hermes Agent manager stores manifests and callback objects internally. This endpoint intentionally exposes only safe, user-facing metadata and the four lifecycle hook names called out by the Settings visibility MVP. It never includes plugin source paths, callback names, callback reprs, or raw load errors because those can contain private filesystem details. Exclusive plugins (e.g. memory providers) are activated through their category's ``.provider`` config, not through ``plugins.enabled``. Their ``loaded.enabled`` stays False by design and they register hooks outside the four visibility hooks below. The payload surfaces ``kind`` and ``activation`` so the panel can render them distinctly instead of mislabeling them as "Disabled" with no hooks (issue #2659). Fforce_pluginsc,t|dSrrr}s rrz,_plugin_visibility_payload..@sCQLLrrmanifestNr8rrIxrversionr.rikind standalone(r exclusivezmodel-providerrrprovides_hookshooks_registered)rr8rrrr activationhooksT)pluginsrsupported_hooksr)rdiscover_and_loadr@rrrrrarr_PLUGIN_VISIBILITY_HOOK_SETrr_PLUGIN_VISIBILITY_HOOKSindex)managerr raw_pluginsr8loadedr plugin_keyrrrr enabled_flagr registeredhook hook_names r_plugin_visibility_payloadr+s =;==G E***G':r228bKk//117P7PQQQ$ $ V6:t44   2 HeT * * Rc RWXvr5R5R   -WXvr-J-J-Xj`cddd/)R0P0PXZ[[[3GHmUW4X4X`cddd ,WXvr-J-J-ZlbdeeeGFIu==>> ;  $JJ % % %, %#JJ&2B J +;R@@FBGG$wW]_qsuOvOvO|z|J}J}} - -DDJB--//I777IZ Hermes is restarting

Hermes is restarting…

The WebUI shell could not load cleanly. Refresh in a moment if this page does not update automatically.

rcltd|t|tdddS)z?Return HTML for shell-route failures so `/` never renders JSON.z%Failed to serve WebUI shell route: %srtext/html; charset=utf-8)r content_typeT)rr~rT_SHELL_ERROR_HTML)r6rs r_serve_shell_unavailablersA NN:C@@@/  4rct|ddiddlddl}fd}|j|ddS)z#Shut down the WebUI server process.r shutting_downrNcddl}|jdtjtjjdS)Nrg333333?)rKsleepr]killgetpidSIGINT)rKsignals r _do_shutdownz&_handle_shutdown.._do_shutdowns;  3  V]+++++rTrdaemon)r(r threadingThreadr)r6rrrs @r_handle_shutdownrsqg/*+++MMM,,,,, IL666<<>>> 4rc,ttjjdz }|dz }|r|}|d|dd|dd|dtt|| |j |d St|d d id S)aCServe static/manifest.json with the correct PWA Content-Type. Shared by the root (/manifest.json, /manifest.webmanifest) and session-prefixed (/session/manifest.json, /session/manifest.webmanifest) routes so Firefox Android can fetch the manifest when installing from a /session/ page. See #2226. staticz manifest.jsonr Content-Typez(application/manifest+json; charset=utf-8 Cache-Controlno-storerTr not foundr4r5)r__file__rrerzrrrrrorwfilewriter()r6 static_root manifest_pathdatas r_serve_manifestrsx..'.9K ?2;;==M''))c"""N,VWWWOZ888,c#d))nn=== D!!!t Ww ,S 9 9 99rclf|jdr@||jtdd}t ||S|jdvrt |S|jdvs|jdr( dd lm}dd lm }||d }dd l m }d } ddl m }m} m} m} | r%| |} | r| | r || pd }n#t"$rd }YnwxYwt%jdd|dt+t,dt/j|} t3||| dS#t"$r}t5||cYd}~Sd}~wwxYw|jdkr!t7}t9j|dpd}|dd}t>tA|}dd lm}dd lm }||d }tBd|d|d"d|dt9j|dd t9j|d!d"t9j|d#d$t9j|d%d&t9j|d'd(t9j|d)d*t9j|d+}t3||dS|jd,krdd-l m#}m$}m} m} m} dd.l%m&}d/}| }|r%| |}tO|o | |}|}|r |ng}|du}tQ||||tO|o| tO|t||d0S|jd1vrt |S|jd2krptStTj+j+d3z }|d4z ,}|-rdd lm}dd lm }||d }|dd|}|.d} |/d5|0d6d7|0d8d9|0d:d;|0dd?id@AS|jdBkr?tStTj+j+d3z }|dCz ,}!|!-r|!4r|!5} |/d5|0d6dD|0ddvidWAS|&ddgddk}6|6rdnd}7|&d|7gddk}8|&ddgd}9 |9rtdbt|9nd}:n#ttf$rd}:YnwxYw|&ddgd}; |;rt|;nd}t|1t|1rt|0ni}?t|1pt|?}@g}Ag}Bd}Ct|1ddpd}D|@rt|0}An'|6rt|0|D}Bn|@st|0|D}C|3e}E|8rt|1nd}F|8rt|1nd}G|3e}H|6r<|@r|Art|1|A}Int|1js|Bt|1dd}In\|@r&|Ar$t|1dgpg}Jt|A|J}In4|C tt|1dgpg}C|Cd}K|Cd}Lg}I|6sq|Ct|I}C|Cd}K|Cd}L|KdkrI t|1dd}M|Mtdt|M}Kn#ttf$rYn wxYwnd}Kd}L|6rZt|I|:|<\}N}O|rU t|>}[n#t"$rd}[YnwxYw|[r0t|[tOt|1dd|Zd<|Yrjtt|Zdpd|Y|Zd<tt|Zdpd|Y|Zd<|?r$t|?rt|Z|?}Z|X|Zd<|<|6o|:duot|Q|:k}\n|6o|:duot|I|:k}\|\|Zd<|O|Zd<|3e}]|Fr|F|Zdm<|Gr|G|Zd<t|Z}^|3e}_tQ|d|^i}`|3e}a|5rEtd|0|E|=z dz|H|Ez dz|]|Hz dz|_|]z dz|a|_z dz|a|4z dz|`S#t$rt|0}?t|0}b|bridu|0d!|?pid!dd|?pidd dm|?pidmddt|bd|?piddd|?piddd|?pidp9|?piddp!|br|bdnddidddd/dd/ddd|?piddd=d|?pidd|?pidd|?pidd|?pidtO|?pid|bgd}ct|c|?}ctQ|dt|cicYSt|dxd@cYSwxYw|jdkrt|jLdud gd}0|0st|ddWStt|0}d|ddst|dxd@StQ||dS|jdkr4ddlm}etQ||ettS|jdkrt|jLdud gd}0|0st|dS ddlm}ftt|0d=wtQ||f|0S#t$rt|dxd@cYSwxYw|jdkrat|jLdud gd}0|0st|dStQ|dt|0iS|jdkrt|jLdud gd}0|0st|dS ddlm}gtQ||g|0S#t$rt|dxd@cYSwxYw|jdkrbt|jLdud gd}0|0st|dSddlm}htQ|d|h|0iS|jdkrtjdJ|jt¦}i |idæt|iĦ}j|idŦt|jr&|idƦt|iĦ}j|idǦt7}+tO|+dȦ}k|krT|idɦt!}l|idʦd˄|lD}m|jD]}1|m|1du}n|ns-t|nrh|1t|1|n|1du|ndukr|ndu|1du<dD]7}o|1|os |n|or |n|o|1|o<8d̈́|jD}jd΄|jDddlmfdЄ|lD}pn#|idѦd҄|jD}jg}p|idӦ|j|pz}q|qdԄd=զ|id֦ddlm}r|rt/|}s|idئ|sr|q}td}un-fdل|qD}tt|qt|tz }u|idڦt1|ttO|+dۦܦ}t|kr-|idݦt3|tt4ަ}t|idߦg}v|tD]i}1t7|1}wt9|wd!t*rt;|wd!|wd!<|v|wj|idtQ||vt|p|s|utjdtjdd|iS#|iwxYw|jdkrtddlm}r|rtC}xt/|}s|sr|x}tnfd|xD}ttQ||t|st|xt|tz dS|jdkrtE||S|jdkr-tQ|tGtIdS|jdkrRt|jL}y|ydd gd}ztQ|tK|z|zdS|jdkrtM||S|jdkrtO||S|jdkrtQ||S|jdkrtS||S|jdkrtU||S|jdkrddlAm}{|{ddlAm}|||}}|}di}~|~di}g}t9|t6r|D]\}}d }t9|t6r|dd }n8t9|t*r"|ddt|dkrdnd z}|||dtQ|d|iS|jdkrt|jL}y|ydud gd}0|0st|dS t|0}1n!#t$rt|dxd@cYSwxYwddlm}m} |tS|1j}n##|$r}te||cYd}~Sd}~wwxYw|dpi}|dsdn|d|dd|ddpd|ddpdz|dd|dd|ddd=d}tQ|d|iS|jdkr"ddlm}tQ|d |iS|jd kr"t7}+|+d d=stQ|d d=iStO|+d  }t|jL}y|yddgddk}|yddgddkrK|jddkr9tQ|ddddddddd|rdbnd| ddddddddSddlm}tQ|||| S|jd!krt|jLd"d gd}|tnv}||d/d#} |rt|nd}[n#t"$rd}[YnwxYw|[rd=|d$<t|[||d%<tQ||S|jd&krt|jLd"d gd}|st|d'Sdd(lm}m}|r.|tv)}||j}ntw|}tQ|d=||d*S|jd+krt}||S|jd,krt||S|jd-krt||S|jd.krt|S|jd/krt||S|jd0krt||S|jd1krt||S|jd2krt||S|jd3krt||S|jd4krt||S|jd5kr7|jddkrtQ|d>d?id@ASt||S|jd6krt||S|jd7krt||S|jd8kr7|jddkrtQ|d>d?id@ASt||S|jd9krt|jL}y|yd:d gd} tQ|t|d8d9i;S#t$r'}t|t+|cYd}~Sd}~wt$r(}t|t+|d@cYd}~Sd}~wwxYw|jdlm}|5tQ|d?t|d=@icdddS#1swxYwY|jdAkr:dd>lm}|5t||cdddS#1swxYwY|jdBkr:dd>lm}|5t||cdddS#1swxYwY|jdCkr:dd>lm}|5t||cdddS#1swxYwY|jdDkr:dd>lm}|5t||cdddS#1swxYwY|jdEkr:dd>lm}|5t||cdddS#1swxYwY|jdFkr9dd>lm}|5t|cdddS#1swxYwY|jdGkrzt|jL}y|ydHdgd}tt|I} tQ|dJ| dJgiS|jdKkrt|jL}y|ydLd gd}|stQ|d>dMidWAS|ydNd gd}|r1ddl}|jdO|rt|dPdWSt}t|t|\}}|st|dQd@S||z ,} ||,n"#t$rt|dRdWcYSwxYw|-r|4st|dSd@StQ||d|dTSt|} t9| dUt6si| dU<tQ|| S|jdVkrt|S|jdWkr-ddXlm}m}rtQ|||rdYS|jdZkr:dd[lm}rm}tQ||rt+|d\S|jd]krddl}t}t}t{}|d^}|d=urd=}d=}n'|d/urd/}d=}ntO|}tO|}t}|D]V}n|ndp|nd_pd }Zt|Z}|r||Wd`dadbdcdddedftfdg|Ddhi}d }|rk|-rW |j}|j|}n#t"$rYnwxYwtQ|||||t|djS|jdkkrt|S|jdlkrt|S|jdmkrt|S|jdnkrt||S|jdokrt||S|jdpkrt|jL}y|ydd gd}|st|dqS ddrlm}tQ|||S#t$r'}t|t+|cYd}~Sd}~wt"$rD}tadst|t+|d|AcYd}~Sd}~wwxYw|jdtkrt|jL}y|ydd gd}|ydud gd}|r|st|dvS ddwlm}tQ||||S#t$r'}t|t+|cYd}~Sd}~wt"$rD}tadxt|t+|d|AcYd}~Sd}~wwxYwd/S(yz>Handle all GET routes. Returns True if handled, False for 404.z/session/static/z/sessionNr)z/session/manifest.jsonz/session/manifest.webmanifest)rz /index.htmlz /session/r)quote) WEBUI_VERSIONrIsafe)inject_extension_tags)csrf_token_for_sessionrrverify_sessionrr__WEBUI_VERSION____MAX_UPLOAD_BYTES____CSRF_TOKEN_JSON__r)rz/loginbot_nameHermeslanguager}z {{BOT_NAME}}z{{BOT_NAME_INITIAL}}z{{WEBUI_VERSION}}z{{LANG}}rz{{LOGIN_TITLE}}rz{{LOGIN_SUBTITLE}}rz{{LOGIN_PLACEHOLDER}}rz {{LOGIN_BTN}}rz{{LOGIN_INVALID_PW}}rz{{LOGIN_CONN_FAILED}}rz/api/auth/status)_passkey_feature_flag_enabledget_password_hashrrrregistered_credentialsF) auth_enabled logged_inpassword_auth_enabledpasswordless_enabledpasskeys_enabledpasskeys_countpasskey_feature_flag)z/manifest.jsonz/manifest.webmanifestz/sw.jsrzsw.jsrrz%application/javascript; charset=utf-8rrzService-Worker-AllowedrrTrrr4r5z /favicon.icoz favicon.ico image/x-iconzpublic, max-age=86400rz /api/insights /api/kanban/)handle_kanban_getGETz/api/wiki/statusz /api/logsz/healthz/api/health/agentz/api/system/healthz /api/modelsz/api/models/livez/api/model/auxiliary)get_auxiliary_modelsz/api/dashboard/statusdashboard_probe/api/dashboard/configr/api/providersz /api/pluginsz/api/provider/quotarrefresh>rJrMrLrK)r"z/api/provider/cost-historyr7rrr3 /api/settings password_hashHERMES_WEBUI_PASSWORDpassword_env_var) AGENT_VERSIONr webui_version agent_version/api/reasoningrbase_url)r4rr,z/api/onboarding/statusz /extensions/)serve_extension_static/static/z/api/session/worktree/statusr5session_id is requiredrSession not found)worktree_status_for_sessionrz-failed to read worktree status for session %srz/api/session/compress/statusz /api/sessionHERMES_DEBUG_SLOWrrJr resolve_modelrrr:rkrr)rrrr)rrr\threshold_tokensr5rc3K|]?}t|tt|pidpdV@dS)rrN)r=r>rr?rrs rrxzhandle_get..sc22%a..2qwBmmK88=A>>222222rr=r>r?last_prompt_tokens) rrrr:r=r>r?r\r4r7rQruntime_journalr_messages_truncated_messages_offsetrAzx[SLOW] session_id=%s get_session=%.1fms model_resolve=%.1fms compact=%.1fms redact=%.1fms json_write=%.1fms total=%.1fmsr CLI Session workspacerrrYrpinnedarchived project_idrr~r%rrr)rrrz/api/session/lineage/reportsession_id requiredfoundz/api/session/recovery/audit)audit_session_recovery state_db_pathz/api/session/statuszMissing session_id)session_status/api/session/yolo yolo_enabledz/api/session/usage) session_usagez/api/background/status) get_resultsresultsz /api/sessionsrr diagreconcile_stale_stream_state)all_sessions_after_stale_stream_reconcilershow_cli_sessionsrtmerge_cli_sessionsc i|] }|d| Srrrs r zhandle_get..Fs===AQ|_a===r)r~r%rrc0g|]}t||Srr rs rr{zhandle_get..Us'!]!]!]?YZ[?\?\!]!!]!]!]rch|] }|d Srrrs rrzhandle_get..VsEEEQ|_EEEr)_hide_from_default_sidebarc\g|](}|dv t||&|)SrrU)rr _cron_hide webui_idss rr{zhandle_get..XseKKKQ< 1Q1QVpqrVsVs1Q}G}GHI}J}J1Qq1Q1Q1Qrfilter_webui_sessionsc0g|]}t||Sr)rrs rr{zhandle_get..[s'!c!c!cC_`aCbCb!c!!c!c!cr sort_sessionsc\|dp|ddpdS)Nrrrrrs rrzhandle_get..`s,aee$566U!%% a:P:PUTUrractive_profilerprofile_filtercZg|]'}t|d%|(SrrEr?)rrr`s rr{zhandle_get..zsJPPP,QUU9-=-=~NNP!PPPrmessaging_deduperrr)rredact_sessionsresponse_writez%z)r1 cli_countrHr`other_profile_count server_time server_tzz /api/projectscZg|]'}t|d%|(Srrc)rrwr`s rr{zhandle_get..sJLLLA(y)9)9>JJLaLLLr)rrHr`rhz/api/session/exportz/api/workspaces) workspacesr^z/api/workspaces/suggestr ) suggestionsr z/api/sessions/searchz /api/listz/api/git/statusz/api/git/branchesz /api/git/diffz/api/personalitiesr#rZr personalitiesrr.rrrz /api/git-infoGitWorkspaceError git_statustotalsis_gitbranchrhstagedunstaged untrackedaheadbehind)rvdirtymodifiedryrzr{rugitz /api/commands) list_commandscommandsz/api/updates/checkcheck_for_updatesrignore_agent_updatesrsimulatez 127.0.0.1webuirmabc1234def5678masterz(https://github.com/nesquena/hermes-webuizBhttps://github.com/nesquena/hermes-webui/compare/abc1234...def5678)rr{ current_sha latest_sharvrepo_url compare_urlaaa0001bbb0002z,https://github.com/NousResearch/hermes-agentzFhttps://github.com/NousResearch/hermes-agent/compare/aaa0001...bbb0002)rr{ignoredrrrvrr)rr checked_at)r)r include_agentz/api/chat/stream/statusr6)rRr6replay_availablerjournalz/api/chat/cancelzstream_id requiredLegacyJournalRuntimeAdapterruntime_adapter_enabled)cancel_delegate)r cancelledr6z/api/chat/streamz/api/terminal/outputz/api/sessions/gateway/streamz/api/sessions/eventsz /api/mediaz /api/file/rawz/api/folder/downloadz /api/filez/api/approval/pendingz/api/approval/streamz/api/approval/inject_testz/api/clarify/pendingz/api/clarify/streamz/api/clarify/inject_testz/api/onboarding/oauth/pollflow_id extra_headersz /api/crons list_jobscron_profile_contextrqinclude_disabledz/api/crons/outputz/api/crons/history/api/crons/runz/api/crons/recentz/api/crons/statusz/api/crons/delivery-optionsz /api/skillsrrrVz/api/skills/contentr name requiredrz[*?\[\]]Invalid skill nameSkill not foundzInvalid file pathFile not found)rr rz /api/memoryz /api/profiles)rtr)profilesrRz/api/profile/active)rrU)rr z/api/gateway/statusaliver6TelegramDiscordSlackEmailWebAPI)telegramdiscordslackemailwebrcfg|]-}|||d.S))rlabel)r?r)rrw_PLATFORM_LABELSs rr{zhandle_get..$s: ] ] ]!a"2"6"6q!''))"D"D E E ] ] ]rc|dS)Nrr)xs rrzhandle_get..%s !G*rr)runningr platforms last_active session_countz/api/mcp/serversz/api/mcp/toolsz/api/notes/sourcesz/api/notes/searchz/api/notes/itemz/api/rollback/listz%workspace query parameter is required)list_checkpointszrollback/list failedz/api/rollback/diff checkpointz6workspace and checkpoint query parameters are required)get_checkpoint_diffzrollback/diff failed)r r_replacero _serve_staticr urllib.parser api.updatesrapi.extensionsrrrrrrr[r rr%rrrdumpsrTrr_htmlescaper?rr_LOGIN_PAGE_HTMLrrr api.passkeysrrr(rrrrerzencoderrrrrrrreapi.kanban_bridgerr8rrrr.r0r _handle_live_modelsr`rrrget_dashboard_statusget_dashboard_configrhr&r2rrrNrrr3rr[rrr4rPr]r^r(rr8r-rr api.worktreesr1rrr+_handle_session_compress_statusrKrrr@rPrrurrrrrTrWrrrrrrlrrrr/r[rrr,r~r rapi.session_recoveryrBrapi.session_opsrErJrHapi.backgroundrIr/ maybe_startstager rjrtr rGrWrrZrrRr rCLI_VISIBLE_SESSION_CAPr>r=r-rrKfinishr_handle_session_exportrrr!_handle_sessions_search_handle_list_dir_handle_git_status_handle_git_branches_handle_git_diffr#r[rapi.workspace_gitrrrsr<_git_bad api.commandsrrrrapi.runtime_adapterrrr. cancel_runaccepted_handle_sse_stream_handle_terminal_output_handle_gateway_sse_stream_handle_session_events_stream _handle_media_handle_file_raw_handle_folder_download_handle_file_read_handle_approval_pending_handle_approval_sse_stream_handle_approval_inject_handle_clarify_pending_handle_clarify_sse_stream_handle_clarify_injectr<rrrrr_handle_cron_output_handle_cron_history_handle_cron_run_detail_handle_cron_recent_handle_cron_status_handle_cron_delivery_optionsrraresearchrrrfr _handle_memory_readrtrUrrGr3rr,r&rrr=r?rr_handle_mcp_servers_list_handle_mcp_tools_list_handle_notes_sources_list_handle_notes_search_handle_notes_item api.rollbackrr)r6r7rrr version_tokenr csrf_tokenrrrrrhtmlr _settings_bn_lang_login_strings_pagerrrrrcv passkey_flagpasskeysrrsw_pathr.rico_pathrrrrrNrr"days_rawrsettingsr(r4r,r-rrr1rN_t0 _debug_slow load_messagesresolve_model_defaultr3 _msg_limitr _msg_beforer_t1original_stream_idris_messaging_sessionrstate_db_messagesmetadata_summary_session_profile_t2rHrN_t3 _all_msgsr_summary_message_count_summary_last_message_atmetadata_count_truncated_msgsr: _before_idx_slice_windowed_messages _persisted_cl_threshold_tokens_model_for_lookup_fb_cl_session_tool_calls_merged_message_count_merged_last_message_atrQr _truncated_t4redact_t5resp_t6msgssessreportrBrErHrIrMwebui_sessionsrPr cli_by_idrr8 deduped_clirrrHscopedrh safe_mergedr all_projectsrPr  _reload_cfgr_cfg agent_cfgraw_personalitiesrorr-descrrrsrrrtrrinclude_agent_updatesrrr6rRrrradapterrrrrr file_pathrrpr _skill_mdrrtrUr identity_map sessions_pathhealthrrr platforms_setnormrrr!r<rrrrrYr`rZs @@@@r handle_getrIsa={0110?? C OO4D4D(E?FFWh///{QQQw''' {***fk.D.D[.Q.Q* : * * * * * * 1 1 1 1 1 1!E-b999M < < < < < <J jjjjjjjjjjjj"?$$N!-g!6!6J!NnnZ&@&@N%;%;J%G%G%M2      !*G<<<,m<</5E1F1FGG. :0F0FGG  %%d++7   : : :+GS99 9 9 9 9 9 9 :{h!OO l9==44@AA j$//& %e , ,  '&&&&&------m"555  $ $^S 9 9 W+SV\\^^ < < W(- 8 8 WZnV.D!E!E F F W& ^G5L(M(M N N W)5<z8R+S+S T T W'n]6S)T)TW_el>%3H&I&I J J W+U\.:V-W-W X X W'n]6S)T)T  %.HIIII {(((||||||||||||||777777 &((  8g&&BR6NN2$6$677I4466 /;C))+++ 1 1 3 34 ?("%:$(NN$P;P7P $X!(mm$0     {AAAw''' {h8nn+2X= (1133 >>    + * * * * * 1 1 1 1 1 1!E-b999M$$g$66>>#]D;;w''D  ! !# & & &   0W X X X    < < <    8# > > >    0#c$ii.. A A A    ! ! ! M   % % %47K0==== {n$$8nn+2X= -/88:: ??   "!1!1!3!3 "&&((D  ! !# & & &    ? ? ?    0#c$ii.. A A A   1H I I I    ! ! ! M   % % % %  ! !# & & &    ! ! !t{o%%000 {n-- 777777 #"7F33 U??+GVUCC Ct {(((&w777 {k!!GV,,, {igv... {)))466777 {*** '.00111t {m##.00111 {((("7F333{,,,333333..00111 {---'''''' '?7799:::t {---'''''' / g;;== > > > > / / / S# . . . . . . . . . /t{&&&-//***{n$$w/// {+++&&yybT2215= 99Y--a06B==??EEGGKee,['JJJKKK {222&&yybT2215= IIfse,,Q/63==?? q#c(mmS1122DDI&   DDD 3KFFGGG {o%% ?? _d+++ (, I-r 2 2 8 8 : :( ( #$   @ @ @ @ @ @ @ @(5H_ %(5H_ % %    D (### {&&&&&IIgt,,Q/52<<>>F$yybT2215;BBDDL IIj2$//28b??AAIT  !'!      {.../11222 {n--7999999%%gv666 {j)).Wf---{444&&ii rd++A. Fw 8EEE E ACt444AA A A Aw 3C@@@ @ @ @ A B A A A A A AWx)D)DQ)G)GHII I 6 6 6wC555 5 5 5 5 5 5 B B B   Lc R R Rw 4 4SAAA A A A A A A B{444&&'<"1N1Nq1QRRRt {n$$oojnn%8"== &&ii rd++A. OWw(@A#NNN N  *se44Q73> '4 =# /4I3JKKANRUU YY{TF33A6  3=GAs:///4III&   III  ii tf55a8  -8B[)))dJJI&   JJJ ~ ://##CCM0ACCCA!(,>!E!E  %a ( ( ('>D"%''"C%&R'!5Et*L*LRPR+$.=)@)@-.)$*MBO"W'!\2">">">UW  )3ODD* ')### &D'$((''# ?U>`$:$:fijsftft !BZBf&>&>lm #'/I/0.122!*222//++ ":.000./+++0))+++!61$+A/A4$H$H(/3I4(P(PP]'ewq2G'L'L'Lce&-a1Et&L&L"/$5&-a1Eq&I&I&NQ ! ! C" #./ABBGG ###"GGG#-H#GA/A4$H$HII...C)*' ),#''"3449::+**%&%(#'',//4155+%%L! =8BB =1#x@@(=O$ %*`y/D`VW`I` *cy/DcYZcIc )3C% &&6C" #//##C /.G ! ;(:$%(--F//##CWy&122D//##C RWdNSWdNSWdNWdNSWdNSWdN K : : :3C88H+C00D J #hn"11'=II (.b!5!5k2!F!Fhn"11'9EE  $SYY  !8>r"6"6|Q"G"G !8>r"6"6|Q"G"G&B';';R{A.>CCKQRSSe!$B33I>>%d !8>r"6"6|"D"D!"!8>r"6"6|"D"D#$%x~2&:&:;K&L&L%&#X^$8$8$H$H'("&x~2&:&:;&G&G!H!H $"$-034BB9.A$.G.G"HIIIIIw 3S99 9 9 9? :B{333v|$$((t<+B3+G+GHIII {***v|$$((t<15LL!CDD22F ! [ 9%%%1&BYZZZ JJ( ) ) )K ) )Awwdhhw//55@$0g$?$?DM""4(((( JJ' ( ( (W' -- ,"0':#y{{!]400 KKMMMMDKKMMMM {o%% 9888880022$ /77  L!FFLLLLLLLF(,#&|#4#4s6{{#B      {+++%gv666 {''' O$5$5?Q?S?STT   {/// fl # #2$''* 9&AA      {,,,&w777 {k!!000 {'''!'6222 {)))#GV444 {o%%000 {*** <;;;;; 555555xzzHHWb)) %MM/2>> ' . . J06688 J J eeT**K 99]B77DDs++K ":#e**r//rJD$$d4%H%HIIII?M:;;; {o%% fl # #ff\B4((+ 7w 566 6 :C  AA : : :w 3S99 9 9 9 :CCCCCCCC (ZQ[ 1 122FF  ( ( (GQ'' ' ' ' ' ' ' (H%%+!::h// ttjj**ZZ 1--Ha005A&**ZQR:S:S:XWXYK33ZZ++jj1--6 6 5$-((( {o%%......:}}7888 {*** ??||/66 2Wz4011 1$(6L)M)M$N$N N fl # #w&&q)S0 FF:u % %a (C / /&q)[88!("#'0&/"*$N'k!('<"C!!!'<#<'0&/"*$R'o  #$) 2 211111++%G\]]]^^^ {///V\**..{RDAA!D g%#)QVWW 5>H&y111DGG   GGG   U*.G& '!II%i00IIIVVWWW {(((!'6222 {,,,&w777 {444)'6::: {,,,,W555 {l""Wf--- {o%%000 {,,,&w777 {k!! &111 {---'888 {,,,*7F;;; {111  !! $ 3 3Ww 4SAAA A&w777 {,,,&w777 {+++)'6::: {000  !! $ 3 3Ww 4SAAA A%gv666 {222 fl # #&&RD))!, -*733. ;   ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{l""''''''555555 ! ! # # ^ ^Wv'9))UY:Z:Z:Z'['[\]] ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^{)))555555 ! ! # # 8 8&w77 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8{***555555 ! ! # # 9 9'88 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9{&&&555555 ! ! # # < <*7F;; < < < < < < < < < < < < < < < <{)))555555 ! ! # # 8 8&w77 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8{)))555555 ! ! # # 8 8&w77 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8{333555555 ! ! # # : :099 : : : : : : : : : : : : : : : :{m## fl # #66*tf--a0$%7%9%9HMMM8TXXh%;%;<=== {+++ fl # #vvfrd##A& FWw8EEE EFF6B4((+      sz+t,, ?7$8#>>>+--J#6/ ;;$$ Iy <7$5s;;;)+4466F >""9#4#4#6#67777 > > >7$7===== >==?? ;&..*:*: ;7$4c:::",,g,>> RR +400$((>22D99 &#%D ${m##"7+++{o%%KKKKKKKK **,,8O8O8Q8Q R R   {+++PPPPPPPP ,,..;C:9F: D FD  BF G&F;5G;G8"e f%f  f'+ll)(l)1o oo vv<;v< w!! y +x y  y 9yy y  !9A@ @ A@#@"A@#@'G'AYH0AIH?AYIAIIAYIAIIEAYPAPPA8AYQ:AR R AYR ARRAYRARRF9AYYG+AaaAaaAafCK KCL1K CL1K-9CL,L&CL1L,CL1c tjd|jt}|jdkrZ|r|d t ||r|SS#|r|wwxYw|r|dt|jsdt|sU t|dt|id|r|SS#|r|wwxYw|jd krt|S|jd krt|S|jd krt|S|jd krt|S|jd kr4|r|dt|t!|S|r|d t#|n%#t$$r|r|wxYw|jdkrMddlm}|t*t-}t|||drdndS|jdr*ddlm}|||}|durt7||dSdS|jdkrddlm} t||n#t>$r)}tA|tC|dYd}~nSd}~wt$$rC}t"dtA|tC|d Yd}~nd}~wwxYwdS|jd!kr d"r/tCtGd"nd}n;#tHt>f$r'} tA|tC| cYd} ~ Sd} ~ wwxYwd} d#dupGtCd#%&d$v} | r dd%l'm(} |} | s(tCtGtS} | | } | d&}n~#tHt>f$r)} tA|tC| dcYd} ~ Sd} ~ wt$$r9} t"d'tA|d(| d cYd} ~ Sd} ~ wwxYwtUd)d*\}}d+}|r dd,l+m,}dd-l-m.}m/}d}|5||}|r|d}dddn #1swxYwY|||.n-#t$$r t0d/|d0YnwxYwtc|||d1pdd2pd| 3}| rted4t|d5|3d6|j4iziS|jd7kr d8}|stA|d9Stkj6|}|stA|d:d;Stkdid8toj8j9dd<d=|j:pd>d?zd"|j;d)|j<d*|j=d6t}j?|j4d@t}j?|j@dAddBdd2|jAd1|jBdC|jCdD|jDdE|jEdF|jFdGt|dGddHt|dHddIt|dIddJtjHdKtjH}t5|t|jK<tjL|jKtttkr2tjOdLtttk2dddn #1swxYwY|PtedMt|d5|3d6|j4iziS#t$$r'} tA|tC| cYd} ~ Sd} ~ wwxYw|jdNkr t|td)S#t>$r'} tA|tC| cYd} ~ Sd} ~ wt$r(} tA|tC| d cYd} ~ Sd} ~ wwxYw|jdOkrtCdPpdQ%}tCdRpdQ%}tCdSpdT%}tCd)pdQ%}|dUkrXddVl-mS} t|||||S#t$$r)}tA|tC|dcYd}~Sd}~wwxYw|dWkrT t|t|S#t>$r)}tA|tC|dcYd}~Sd}~wwxYwtA|dX|dS|jdYkrdSpdQ%&}dZ}|stA|d[S|#tC|%pd}t||}|d\s$tA||dd]St||S|jd^krdSpdQ%&}|stA|d[St|}|d\s$tA||dd]St||S|jd_krI d`} da}!| tC| %&}"|"dbvrt|tdS|"dcvrt|tdStA|dd| deS|!t|t|!StA|dfS#t>$r'} tA|tC| cYd} ~ Sd} ~ wt$r(} tA|tC| d cYd} ~ Sd} ~ wwxYw|jdgkr\ddlX}#ddhlmY}$|#Z|$ddl[m\}%|$j]|%_]|$j5|%_5|$j3|%_3t|d\didjS|jdkkrt|dlS|jdmkrt|dlS|jdnkr? td8d=n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw td8}td8|}n!#t$rtA|d:d;cYSwxYwtd85tCd=%ddopd>|_:|Pdddn #1swxYwYtedpt|d5|3iS|jdqkr{ td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwdrvrtA|dsSd8}dr%}& t|}t||}n!#t$rtA|d:d;cYSwxYwdQ}'|&rYddtl-mc}(|(ddul-md})|)}*|*dvi}+|+dwi},t|,tr|&|,vrtA|dx|&dyd;S|,|&}-t|-tr|-dzdQp|-d{dQg}.|-d|r|.gd}|-d||-d~r|.gd|-d~dhd|.D}'ntC|-}'t|5|&r|&nd|_F|Pdddn #1swxYwYt|d|jF|'dS|jdkrB td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwd8}d}/|/Pt|/tr|/stA|dStd|/DstA|dS t|}n!#t$rtA|d:d;cYSwxYwt|5|/|_k|Pdddn #1swxYwYt|d|jkdS|jdkrq|jldkrt|jn}0|jnr|0d8dQgdndQ}|stA|d9dS t|}n!#t$rtA|d:d;cYSwxYwt|dipi}1t|d|1iS td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwd8}d}2d}3d}4d}5|2t|2tBsdQ}2t|2tBrt|2|4kr |2d|4}2|3t|3tsg}3t|3trt|3|5kr |3d|5}3 t|}n!#t$rtA|d:d;cYSwxYwt|5t|dipi}1|2|2|1d<|3|3|1d<|1|_o|Pdddddn #1swxYwYt|d|jodS|jdkr4 td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw td8}n!#t$rtA|d:d;cYSwxYwt|d"dQ}6t|d)d}7t|d*d}8 tCtGd"|j;}9n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwtd85|9|_;d)vsd*vr#tUd)|j<d*vrd*ndt|d*d\}}|||_<||_=tC|7pdQtCt|d)dQpdQks3tC|8pdQtCt|d*dQpdQkrXtt|d)dt|d*d|_qd|_rd|_sddl-mt}:|:d8|Pdddn #1swxYwYtC|6pdQtC|9pdQkrC ddlumv};|;d8n*#t$$rt0dYnwxYwt|9t|d5|3d6|j4iziS|jdkrd8dQ}|r)t|tBr|%stA|ddS|%}td|DstA|ddS t|d}n"#t$rtA|d:d;cYSwxYwtdd}< ddl'my}=|=||<}t||S#t>$r)}tA|tC|dcYd}~Sd}~wt$$rD}t"d|tA|t|d cYd}~Sd}~wwxYw|jdkr'd8dQ}|stA|d9Std|DstA|ddSt|}>|>drtA|ddSt|}?t|}@t5tj~|ddddn #1swxYwYddl-mt}:|:| t*|dz }A|At+jn!#t$$rtA|ddcYSwxYw |Ad|Addn+#t$$rt0d|AYnwxYw t|n-#t$$r t0d|d0YnwxYw ddlm}Bt j|B|dn+#t$$rt0d|YnwxYwt5tj~|ddddn #1swxYwY ddlumv};|;|n+#t$$rt0d|YnwxYw|?s> ddlm}C|C|n+#t$$rt0d|YnwxYwtedt|d\di|@S|jdkr td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw td8}n!#t$rtA|d:d;cYSwxYwd8}t|5g|_4g|_@d>|_:|Pdddn #1swxYwYddl-mt}:|:|t|d|3dS|jdkrq td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwdtA|dS td8}n!#t$rtA|d:d;cYSwxYwtd}Dtd85|j4d|D|_4 ddlm}E|E|j4|_n#t$$r d|_YnwxYw|Pdddn #1swxYwYt|d|3d6|j4izdS|jdkr= td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwtd8tBstA|dS td8}Fn!#t$rtA|d:d;cYSwxYwd}G|GO t|G}Gn'#t>tHf$rtA|dcYSwxYw|GdkrtA|dSd=}H|Hr+tC|H%ddopd}H |FPn#t$$rYnwxYwt!|Frt|FjKni}It#|Fpt#|I}?|?rt%|FjKng}J|?r|Jrt'|F|Jnt|Fj4pg}K|G |Kd|G}Lnt|K}L|Hr|H}Mn|Fj:pd>}N|Nd}Mtk|Fj;|Fj<t|Fd1d|M|L|FjKd}Ot5|Ot|OjK<tjL|OjKtttkr2tjOdLtttk2dddn #1swxYwY|Lr#|OPtedt||OjK|M|FjKdS|jdkrt)|S|jdkrt+|S|jdkrt-|S|jdkrt/|S|jdkr td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw ddlm}P|Pd8}t|d\di|S#t$rtA|d:d;cYSt>$r)} t|dtC| icYd} ~ Sd} ~ wwxYw|jdkr td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw ddlm}Q|Qd8}t|d\di|S#t$rtA|d:d;cYSt>$r)} t|dtC| icYd} ~ Sd} ~ wwxYw|jdkr td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwd8}tdd}R|Rrnt5| ddlm}Sm}T|T5|S~|ddddn #1swxYwYn#t$$rYnwxYwt=|dd̦nt?|t|d|Rd͜S|jdkrtA|S|jdkrtC|S|jdkrtE|S|jdkrtG||ҦS|jdkrtI|S|jdkrddlm}U|U|S|jdkrtO|S|jdkrtQ|S|jdkrtS|S|jdkrtU|S|jdkr9ddlm}V|V5t[|cdddS#1swxYwY|jdkr9ddlm}V|V5t]|cdddS#1swxYwY|jdkr9ddlm}V|V5t_|cdddS#1swxYwY|jdkr9ddlm}V|V5ta|cdddS#1swxYwY|jdkr9ddlm}V|V5tc|cdddS#1swxYwY|jdkr9ddlm}V|V5te|cdddS#1swxYwY|jdkrtg|S|jdkrti|S|jdkrtk|S|jdkrtm|S|jdkrto|S|jdkrtq|S|jdkrts|S|jdkrtu|dS|jdkrtu|dS|jdkrtu|dS|jdkrtw|S|jdkrty|S|jdkrt{|S|jdkrt}|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrddlm}WtCddQpdQ%}X|XstA|dS t|d|W|XiS#t>$r(} tA|tC| dcYd} ~ Sd} ~ wt$rtA|dd;cYSt$r(} tA|t| d cYd} ~ Sd} ~ wwxYw|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkr drdQ%}&|&stA|d S dd lm}Ym}Zdd lm}[|&d kr |Z|&|Y|&d }ddl-m}\|\t||d|[|&iS#t>tf$r(} tA|t| d;cYd} ~ Sd} ~ wt$r(} tA|tC| dcYd} ~ Sd} ~ wwxYw|jdkrzdrdQ%}&|&stA|d Sddl}]|]jd|&stA|dSd}^|^DtC|^%}^|]jd|^stA|dSdr)ddQ%nd}_dZr(dZdQ%nd}dr)ddQ%nd}`d*r(d*dQ%nd}|_r'|_dstA|dS ddlm}a|a|&|^tdd|_||`|}t|d|dS#t>ttf$r'} tA|tC| cYd} ~ Sd} ~ wwxYw|jdkr׉drdQ%}&|&stA|d S ddlm}bm}Z|Z|&|b|&}t||S#t>tf$r'} tA|t| cYd} ~ Sd} ~ wt$r(} tA|tC| dcYd} ~ Sd} ~ wwxYw|jd kr,dd!lm}cm}dm}em}fm}gd"vr1tCd"pdQ%pd#d"<|d}h|e|}it|io |g|i}jttd$tBo(d$dQ%}kt~d%d}ltd&p|l}m|lrdd&<|ks|mr;tjd'dQ%rtA|d(dS|lrGdd)lm}ndd*lm}o|nstA|d+dS|ostA|d,dSn|mrdd-lm}p|pt}q|q~d.d|d}rt|ko|ro|h }s|j}td}u|sr|js |c}ud}t|r|qd/<|t|qd0<|s|qd1<|ust||qStj|qdd23d4}v|d|d5d6|d7tCt|v|d8d9|f||ut|||j|vdS|jd:krdd;lm}dddl}w|ds|wd<sddl}x |jd=dQd>d%}y|jd?dQ%}z|jd}{|x|yp|zp|{}|||jp||j}}n#t>$rd}}YnwxYw|}stA|d@dS t|td8d9iS#t>$r'} tA|tC| cYd} ~ Sd} ~ wt$r(} tA|tC| d cYd} ~ Sd} ~ wwxYw|jdAkrZ t|td8d9iS#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw|jdBkrdd;lm}dddl}w|ds|wd<sddl}x |jd=dQd>d%}y|jd?dQ%}z|jd}{|yp|zp|{}~|x|~}|||jp||j}}n#t>$rd}}YnwxYw|}stA|dCdS t|tS#t>$r'} tA|tC| cYd} ~ Sd} ~ wt$r(} tA|tC| d cYd} ~ Sd} ~ wwxYw|jdDkrt|tS|jdEkrdd;lm}dddl}w|ds|wd<sddl}x |jd=dQd>d%}y|jd?dQ%}z|jd}{|yp|zp|{}~|x|~}|||jp||j}}n#t>$rd}}YnwxYw|}stA|dFdStCpidSpdQ%&}tCpidpdQ}_tCpidZpdQ%pd} t|t||_|S#t$$r} tA|dG| d cYd} ~ Sd} ~ wwxYw|jdHkr td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw td8}td8|}n!#t$rtA|d:d;cYSwxYwtdAd}|r`t|dAdsNdItD}t5t|}|dJtjD|d8ttdKdLpdL}t||kr#tA|dM|dNdcdddSd|_dddn #1swxYwYtd85|Pdddn #1swxYwYnItd85||_|Pdddn #1swxYwYtedOt|d|3dS|jdPkr td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwd8} t|}t|dQdrNtkj6|}|t|t5|t|<dddn #1swxYwYn7#t$r)t|}I|IstA|d:d;cYS|IdrtA|dRdcYSt#|Irtk||Id=pt t%|dStSg|Id)pdT|IdJ|IdKU}d|_|IdV|_|IdWp|IdV|_|IdX|_ |IdY|_ |IdZ|_ |Id[|_ |Id\|_ |Id]|_|Id^|_|Id_|_|Pd`nt%|}|stA|d:d;cYSt#||Id=pt |dS||Id)pdT|Id1|IdJ|IdKa}d|_|IdV|_|IdWp|IdV|_|IdX|_ |IdY|_ |IdZ|_ |Id[|_ |Id\|_ |Id]|_|Id^|_|Id_|_YnwxYwt|5tdBd|_|Pd`dddn #1swxYwYtedbt|d|3dt'|S|jdckr td8n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYw td8}n!#t$rtA|d:d;cYSwxYwd2pdrdddlm}|}t+fdet-Dd}|stA|dfd;St/|d1|stA|dfd;Std85|_A|Pdddn #1swxYwYtedgt|d|3dS|jdhkrN tdrn4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwddl}]dddlm}dr%ddi}&|&stA|djSdk}|r#|]jdl|stA|dmSt-}toj8j9dd<|&||pd tjHdn}|g|t1|t|d|doS|jdpkrW td2drn4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwddl}]dddlm}t-}t+fdq|Dd}|stA|dfd;S|}t/|d1|stA|dfd;Sdr%ddi|dr<dkvr4dk}|r#|]jdl|stA|dmS||dk<t1|t|d|doS|jdrkr td2n4#t>$r'} tA|tC| cYd} ~ Sd} ~ wwxYwdddlm}t-}t+fds|Dd}|stA|dfd;S|}t/|d1|stA|dfd;Sfdt|D}t1|t3jr tjt3jd4u}|D]}|d2d2krq t|d8}d|_A|PS#t$$r2t0dv|d8YwxYwn+#t$$rt0dwYnwxYwt|d\diS|jdxkrt;|S|jdykrOdzdQ}|d{vrtA|d|Sdd}lm}t|||S|jd~krOdzdQ}|d{vrtA|d|Sddlm }t|||S|jdkrddlm!}ttrdni}ttrdznd}dztBdtBdtBfd}t|||||S|jdkrtE|S|jdkrddlܐm#}m}cm}fm}dddlܐm$}m%}|dst|dddS|jd}||st|ddidSddQ}||s||tA|ddS|c}tjd\di|d|d5d|d7tCt|d8d9t||f||||jdS|jdkrddlm}nm}dddlm&}m'}|nst|ddid;S|dst|ddidS t|d||dS#|$r)} tA|tC| dcYd} ~ Sd} ~ wwxYw|jdkrddlm}nm}cm}dm}fddlܐm$}m%}ddlm&}m(}|nst|ddid;S|dst|ddidS|jd}||st|ddidS ||n=#|$r5} ||tA|tC| dcYd} ~ Sd} ~ wwxYw|c}|d|d5d|d8d9t||f||||jtjd\didS|jdkrKdd)lm}nddlm)}|nst|ddid;St|d||dS|jdkrdd)lm}nddlm&}m*}m}o|nst|ddid;S ||}|o|d<t||S#|$r)} tA|tC| dcYd} ~ Sd} ~ wwxYw|jdkrddlm}nm+}ddlm&}m,}m}o|nst|ddid;S tCdpdQ|o}|Ct|dkr/t[fd|DrtA|ddSt||S#|$r)} tA|tC| d;cYd} ~ Sd} ~ wwxYw|jdkrGdd)lm}ndd*lm}o|nst|gddSt|d|oiS|jdkrddlܐm.}m/}m}e|e|}|r ||tjd\di|d|d5d|d7tCt|d8d9t|||||jdS|jdkrstA|dSd"dQ}ddQ}|r|stA|dS ddl0m1}t||||S#t>$r'} tA|tC| cYd} ~ Sd} ~ wt$$rD} t"dtA|tC| d cYd} ~ Sd} ~ wwxYwdS(z?Handle all POST routes. Returns True if handled, False for 404.POSTrKrr&csrfrr5z /api/shutdownz /api/uploadz/api/upload/extractz/api/transcribez/api/client-events/logread_client_event_bodyr)z!/api/session/recovery/repair-safer)repair_safe_session_recoveryrCcleanrr)handle_kanban_postFTr rrNzdashboard config save failedrz/api/session/newr<worktree>rJrMrLrK)create_worktree_for_workspacer z(failed to create worktree-backed sessionzFailed to create worktree: rr5prev_session_id)commit_session_memory)SESSION_AGENT_CACHESESSION_AGENT_CACHE_LOCK)rz+Lifecycle commit for prev_session %s failedrrkr?)r<rr5rkr? worktree_info session_newrArz/api/session/duplicater5r/r0r4 rrz (copy)rr=r>rrr personalityenabled_toolsetsr\r4rrr]session_duplicatez/api/default-modelz/api/model/setscoperItaskrauto auxiliary)set_auxiliary_modelmainzunknown scope: r!api_keyzprovider is requiredrz Unknown errorz/api/providers/deleter+displayeffort)showrMrKrJ)hiderrrz'display must be show|hide|on|off (got 'z')z,reasoning: must supply 'display' or 'effort'z/api/admin/reload)r2z api.models)rreloadedz/api/sessions/cleanup) zero_onlyz"/api/sessions/cleanup_zero_messagez/api/session/renamer.session_renamez/api/personality/setrzMissing required field: namernrZrroz Personality "z" not found in config.yaml system_promptprompttonezTone: stylezStyle: rc3K|]}||V dSr;rrvs rrxzhandle_post..s'"9"9q"91"9"9"9"9"9"9r)rr\rnz/api/session/toolsetstoolsetsz)toolsets must be a non-empty list or nullc3DK|]}t|to|VdSr;)r=rrrTs rrxzhandle_post..s1BBAz!S))/aBBBBBBrz'each toolset must be a non-empty string)rr]z/api/session/draftrcomposer_draftdraftr.filesP2)rE skip_index)rrvz/api/session/update)_evict_session_agentclose_terminalz9Failed to close workspace terminal after workspace updatez/api/session/worktree/removez%session_id must be a non-empty stringc3K|]}|dvV dS%0123456789abcdefghijklmnopqrstuvwxyz_Nrrcs rrxzhandle_post..M(MMA1??MMMMMMrzInvalid session_idrr)remove_worktree_for_sessionrz(failed to remove worktree for session %sz/api/session/deletec3K|]}|dvV dSrrrs rrxzhandle_post..crrrz8Read-only imported sessions cannot be deleted from WebUIrC missing_okz .json.bakz Failed to unlink session file %sz.Failed to prune deleted session from index: %s_session_attachment_dir) ignore_errorsz5Failed to clean attachment dir for deleted session %sz9Failed to close workspace terminal for deleted session %s)delete_cli_sessionzFailed to delete CLI session %ssession_deletez/api/session/clearrrAz/api/session/truncate keep_countz%Missing required field(s): keep_count)_truncation_watermark_forrSz/api/session/branchzsession_id must be a stringzkeep_count must be an integerzkeep_count must be non-negativez (fork)fork)r<rrkrrrrsession_branch)r5rrz/api/session/compress/startz/api/session/compressz /api/session/conversation-roundsz/api/session/handoff-summaryz/api/session/retry) retry_lastz/api/session/undo) undo_lastrFr)rCrDonce resolve_all)rrGz/api/btwz/api/backgroundz /api/goal/api/chat/startrLz /api/chatz/api/chat/steer)_handle_chat_steerz/api/terminal/startz/api/terminal/inputz/api/terminal/resizez/api/terminal/closez/api/crons/createrz/api/crons/updatez/api/crons/deleterz/api/crons/pausez/api/crons/resumez/api/git/stagez/api/git/unstagez/api/git/discardz/api/git/commit-messagez /api/git/commit-message-selectedz/api/git/commitz/api/git/commit-selectedz/api/git/fetchfetchz /api/git/pullpullz /api/git/pushpushz/api/git/checkoutz/api/git/stash-checkoutz/api/file/deletez/api/file/savez/api/file/createz/api/file/renamez/api/file/create-dirz/api/file/revealz/api/file/pathz/api/file/open-vscodez/api/workspaces/addz/api/workspaces/removez/api/workspaces/renamez/api/workspaces/reorderz/api/approval/respondz/api/clarify/respondz/api/commands/exec)execute_plugin_commandcommandzcommand is requiredrzPlugin command not foundz/api/skills/savez/api/skills/deletez/api/skills/togglez/api/memory/writez/api/profile/switchname is required)switch_profile_validate_profile_name)build_profile_cookierC) process_wide)invalidate_models_cachez Set-Cookierz/api/profile/createz^[a-z0-9][a-z0-9_-]{0,63}$zKInvalid profile name: lowercase letters, numbers, hyphens, underscores only clone_fromzInvalid clone_from namer,r7)rrz,base_url must start with http:// or https://)create_profile_api clone_config)rrr,rer7r5)rrkz/api/profile/delete)delete_profile_apirr$)create_sessionrrset_auth_cookierr r  _set_password _passwordless_clear_passwordr&uHERMES_WEBUI_PASSWORD env var is set — it overrides the settings password. Unset the env var and restart the server before changing the password here.)rrzSPasskey support is disabled. Enable HERMES_WEBUI_PASSKEY before going passwordless.z-Register a passkey before going passwordless.)clear_credentialsr%rrauth_just_enabled ensure_asciiindentrrapplication/json; charset=utf-8rrrz/api/onboarding/oauth/start)rHERMES_WEBUI_ONBOARDING_OPENzX-Forwarded-Forrz X-Real-IPzOnboarding OAuth is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.z/api/onboarding/oauth/cancelz/api/onboarding/setupzOnboarding setup is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.z/api/onboarding/completez/api/onboarding/probezOnboarding probe is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.zprobe failed: z/api/session/pincth|]5}t|ddt|dd$t|dd6S)r=Fr>r5N)rD)rexistings rrzhandle_post..4s]$$$AI!(He<<$EST\^hjoEpEp$xt<<$$$rc3dK|]+\}}t|ddt|dd'|V,dS)r=Fr>Nr)rrrs rrxzhandle_post..>sb"")Cx599"BI(T^`eBfBf"""""""rpinned_sessions_limitrmzUp to z: sessions can be pinned. Unpin one before pinning another. session_pinz/api/session/archiver;z9Read-only imported sessions cannot be archived from WebUIr;r)r5rr<rrrrr~r%rrr<r9r;r:r7r6rF)rkrrsession_archivez/api/session/moverc34K|]}|dk|VdSr?Nr)rrw target_pids rrxzhandle_post..s1MMqq*/L/L/L/L/L/LMMrzProject not found session_movez/api/projects/creater/rcolorz^#[0-9a-fA-F]{3,8}$zInvalid color format)r?rrrkr)rprojectz/api/projects/renamec3@K|]}|ddk|VdSrrrrwrs rrxzhandle_post..6 J J1AlOtL7I$I$IQ$I$I$I$I J Jrz/api/projects/deletec3@K|]}|ddk|VdSrrrs rrxzhandle_post..rrc8g|]}|ddk|S)r?rrs rr{zhandle_post..s,QQQ!1\?d<>P+P+PA+P+P+PrrzFailed to update session %sz/Failed to load session index for project unlinkz/api/session/importz/api/updates/applyr)rrz!target must be "webui" or "agent") apply_updatez/api/updates/force)apply_force_updatez/api/updates/summary)summarize_update_payloadupdates user_promptrFcrddlm}|pd}||dt5ddlm}m}m}d|dd |dg}||\}} } d} dd l m } dd l m } | | | }| d } | s| d} | s| d} n2#t$r%}td|Yd}~nd}~wwxYwt!| t"r/| dr|| \}}| s|r|} | s|r|} | || | d} ddlm}|d|\}}|g|re|jj||}t#|jdjjpdcdddSn2#t$r%}td|Yd}~nd}~wwxYwddlm}||| | | ddgdt=jj dd}|!||gdt=jj dd}t#| d pdcdddS#1swxYwYdS)!NrrrCzupdate summarylogger_override)get_effective_default_modelresolve_model_provider"resolve_custom_provider_connectionsystemrruser0resolve_runtime_provider_with_anthropic_env_lockresolve_runtime_provider requestedrerr,z5update summary runtime provider resolution failed: %scustom:rrr,reget_text_auxiliary_client compression main_runtimerrrIzEupdate summary auxiliary model failed; falling back to main model: %sAIAgentrTzupdates-summary-rrr,rer6 quiet_moder]r5 user_messagesystem_messageconversation_historytask_idr)"rrr!profile_env_for_background_workerrr`rrr api.oauthrhermes_cli.runtime_providerrr?r[rr=rragent.auxiliary_clientrchat completionscreatechoicesrrr run_agentrrprqrrrun_conversation)rmr profiles_apir`rrrr _main_model_main_provider_main_base_url _main_api_keyrr_rtr_cp_key_cp_baserr aux_client aux_modelrgrrrs r_llm_update_summaryz(handle_post.._llm_update_summary0s 4 4 4 4 4 4)AACCPyN?? &@U GU G &-@@# << ?U>TUpUpUrUr>s>s; ^^ $ ^ZZZZZZTTTTTTJJ0"0C%(GGI$6$6M)=),)<)<)=),)<)< ^^^LL!XZ\]]]]]]]]^nc222~7P7PQZ7[7[2(J(J>(Z(Z%GX(0W0(/ )2h2)1!/( .,    nPPPPPP -F,E%%1---)J "-)-#-?#>#E#E"+%-$F$$ #8#3A#6#>#F#L"MMSSUUU GU GU GU GU GU GU GU G@!nnnLL!hjlmmmmmmmmn.-----%++)$#%'H$*,,2B2A22FHH   //!,#0)+Etz||/?/CEE 0 6::&677=2>>DDFFkU GU GU GU GU GU GU GU GU GU GU GU GU GU GU GU GU GU Gsi.J,)ACJ, C5C0+J,0C55AJ,A2GJ, G3G.)J,.G33B,J,,J03J0) llm_callbackrz/api/session/import_clir)verify_passwordrrr)_check_login_rate_record_login_attemptzAuth not enabled)rrz)Too many attempts. Try again in a minute.rpasswordrapplication/jsonr)rr) PasskeyErrorauthentication_optionszaPasskey support is disabled. Set HERMES_WEBUI_PASSKEY=1 or webui_passkey_enabled: true to enable.)r publicKeyr)rrrr)r  finish_loginzPasskey support is disabled.z"/api/auth/passkey/register/options)registration_optionsz/api/auth/passkey/register)r finish_registrationr credentialsz/api/auth/passkey/delete)rr)r delete_credentialrr|rc3JK|]}|dkVdSr0r)rr credential_ids rrxzhandle_post..s4FsFshiquuT{{VcGcFsFsFsFsFsFsrz@Set a password or disable auth before removing the last passkey.z/api/auth/passkeys)rrz/api/auth/logout)clear_auth_cookieinvalidate_sessionrz/api/rollback/restorezrequest body is requiredrz%workspace and checkpoint are required)restore_checkpointzrollback/restore failedr(2r/rr rrrrrrr(rrr)r*r+rrr)r[rrOrrr?rrrRr8rrsave_dashboard_configrhr&rrr$rrrrrTrrpapi.session_lifecyclerVr`rWrXrr r rrr_r`rprqrrrr<rr5r@rrr?rkrrrr\r@rKrrr5rarorrbrJrrrcr5r6rrrr2reload api.routesroutesr_handle_sessions_cleanupr%rdrrr#r[r=r>rrrarr]rrrNrurlr\r4r7r{ api.terminalr}rrrr+rurrrPrerfunlinkrr api.uploadrshutilrmtreerrrGrrrrrrrrr_handle_session_compress_start_handle_session_compress_handle_conversation_rounds_handle_handoff_summaryrrrHtools.approvalrCrDrGrI _handle_btw_handle_background_handle_goal_command_handle_chat_start_handle_chat_sync api.streamingr_handle_terminal_start_handle_terminal_input_handle_terminal_resize_handle_terminal_closerZr_handle_cron_create_handle_cron_update_handle_cron_delete_handle_cron_run_handle_cron_pause_handle_cron_resume_handle_git_stage_handle_git_unstage_handle_git_discard_handle_git_commit_message#_handle_git_commit_message_selected_handle_git_commit_handle_git_commit_selected_handle_git_remote_action_handle_git_checkout_handle_git_stash_checkout_handle_file_delete_handle_file_save_handle_file_create_handle_file_rename_handle_create_dir_handle_file_reveal_handle_file_path_handle_file_open_vscode_handle_workspace_add_handle_workspace_remove_handle_workspace_rename_handle_workspace_reorder_handle_approval_respond_handle_clarify_respondrr_handle_skill_save_handle_skill_delete_handle_skill_toggle_handle_memory_writerr api.helpersrrFileNotFoundErrorrrrFileExistsErrorrrrrrrrr]r^rrrrrrrrrrr*rrr ipaddressrrr ip_address is_loopback is_privater=r;r7r9r:r rr rdiscardrr=rrr~r%rrr<r9r;r:r7r6rr>rrnextrrErrrzrr_handle_session_importrrrr_handle_session_import_clirrrr r r r rrrrrrrr)r6r7rMrOrrRrrr<rrYworktree_requestedrTbase_workspacerr5rUrVrWrX prev_agent_cachedrrrAcopied_sessionr_r`rrcrrerfrgflagr_models_routesrrn _reload_cfg2 _get_cfg2_cfg2r=r>r-rnrrrNrvr.rw_MAX_DRAFT_TEXT_MAX_DRAFT_FILESold_ws old_model old_providernew_wsr{r}rrcli_meta_for_deleterrrwrrkeeprr4r custom_titlerrsource_messagesforked_messages branch_title source_titlervrrr_p_lrrrrrrrrrrr,r7rrrrrrrauth_enabled_beforecurrent_cookielogged_in_beforerequested_passwordrequested_passwordlessrequested_clear_passwordrrrsavedauth_enabled_afterrlogged_in_after new_cookie response_body_osrU_xff_xri_rawaddris_local_ip_str pin_requestedpersisted_pinned_ids pinned_idsrr2rr`rrrprojrr1rrrrrrrr client_iprrr r r r rrrcredsrrrrrrrs @@@r handle_postrish  )&&+f M M MD {'''  % JJ| $ $ $ %g..   t      6 V[ ) )+g2F2F Ww(=g(F(FGPSTTT   t   {o%%((( {m##W%%% {+++$W--- {''' ))) {...  1 JJ/ 0 0 0'1KG1T1TUUU   ;!!    KKMMM  {999EEEEEE--kI^I`I`aaa& 70C0C)LMMMM {n--888888##GVT:: U??+GVVDD Dt {---'''''' / g< (((<((C >7$<===l3''G E7$7DDDD%:<<+CRC00}2 i??  "++  mm  '55w'7888 =);<<<u#--  !"%11#$&33%& '55'0$//12")2Dd!K!K!K34 'w0@$GGG56")2Dd!K!K!K78 9;;;9: 9;;;;N@ 1 16D23$^%>???(mml22$%0000(mml22 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1    ! ! ! ()< = = =Wy.*@*@*B*BjR`RiEj*jkll l ( ( (wA'' ' ' ' ' ' ' ({*** -W6txx7H7HIIJJ J ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{&&&DHHW%%+,,2244488F##)r**0022txx ++5v66<<>>DHHW%%+,,2244 K   6 6 6 6 6 6 :"5"5dHe"L"LMMM : : :7CHHS999999999 : F?? :":5"A"ABBB : : :7CHHS999999999 :75e55cBBBB{&&&xx ++1r88::@@BB ((9%% 8w 677 7  'll((**2dG!+w77zz$ Fw 7O D DEE E&!!! {---xx ++1r88::@@BB  8w 677 7$[11zz$ Fw 7O D DEE E&!!! {&&& -hhy))GXXh''F"7||))++1133666W&;D&A&ABBB888W&;E&B&BCCC7$Yg$Y$Y$YZZZ!"6v">">???w NOO O ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{)))))))))!!! %$$$$$%1!/!/T|DDEEE {---'GGGG {:::'FFFF {+++ ( D, 0 0 0 0 ( ( (wA'' ' ' ' ' ' ' ( :D.//A4T,5GKKAA : : :w 3S99 9 9 9 : $T,%7 8 8  $w-((..00"5CAG FFHHH                %%56669aiikk2333 {,,, ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (   w >?? ?< F|!!## :C  A4S!<!;!;<<<"9"9e"9"9"999U $S ) )  $(2DDdAM FFHHH               amvVVWWW {---  ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< 88J''  h-- QX Q7$OPPPBBBBBBB O7$MNNN :C  AA : : :w 3S99 9 9 9 : $S ) )  !)A  FFHHH               1;MNNOOO {*** ?e # #V\**E6$$ > > >7$7===== >A/44:EWw.// / ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< xx!! !  JtS$9$9 D dC  *SYY%@%@(()D  Zt%<%< E eT " " -s5zz4D'D'D+++,E :C  AA : : :w 3S99 9 9 9 : $S ) ) < <A/44:E $f  !&g$A  FFEdF ; ; ; < < < < < < < < < < < < < < <0@AABBB {+++ ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 :K,,Aw-- q"2D99  (2488K3U3UVVWWFF ( ( (wA'' ' ' ' ' ' ' ( $T,%7 8 8   AK$"2d":":"CHHWag..2Bd2J2JDHH-...PTA/66##x $#AG#+  R((C7B0G0G0M2,N,NNN<-2..#gaAQSU6V6V6\Z\2]2]]]'P7D11#3T::((A$*+A&+,A(??????((l);<<< FFHHH1               2 v|  FLb 1 1 1 1 Z777777tL12222 Z Z Z XYYYYY Z6"""9aiikkZ4L&LMNNN {444hh|R(( U*S#.. Uciikk Uw GPSTTT TiikkMMMMMMM ;w 4c:: : ACt444AA A A Aw 3C@@@ @ @ @ ATXXgu--.. B A A A A A A00%@@@FWf%% % 6 6 6wC555 5 5 5 5 5 5 B B B   G M M Mw 4 4SAAA A A A A A A B{+++hh|R(( :w 899 9MMMMMMM ;w 4c:: ::3??  " "; / / aw Z\_`` `7<<EcJJ  $ $ Ld # # # $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 433333S!!! ;#}}},5577A MM+-// 0 0 0 0 ; ; ;w 4c:: : : : ; @ HHH % % % MM+ & & - - - > > > > @ @ @ LL;Q ? ? ? ? ? @ _ $S ) ) ) ) _ _ _ LLI3Y]L ^ ^ ^ ^ ^ _ W : : : : : : M11#66d K K K K K W W W LLPRU V V V V V W& / /  #C . . . / / / / / / / / / / / / / / / [ 3 3 3 3 3 3 N3     [ [ [ LLTVY Z Z Z Z Z [$ E E999999""3'''' E E E >DDDDD E$%56664;):;<<< {*** ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 :<  $S ) )  AJAL AG FFHHH                 433333S!!!!))++>>??? {--- ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( 88L ! ! )w GHH H :D.//AA : : :w 3S99 9 9 9 :4 %&& $T,%7 8 8  ETE*AJ -EEEEEE)B)B1:)N)N&& - - -),&&& - FFHHH                DQYY[[J ;S-STT   {+++  ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( $|,c22 ?w =>> > : l!344FF : : :w 3S99 9 9 9 :XXl++  ! E __  * E E E7$CDDDDD E A~~7$EFFFxx((  B|,,2244SbS9ATL   KKMMMM    D FklrFsFs{/0ABBBy{;FCCmGcdlGmGmFZb/0ABBB`b $ -(4 - 0 F F Ffo+,,   !-kzk:OO"?33O  4'LL!<5:L*333L&,FIt44$$/!    - -*0HV& '  !2 3 3 3h--,.. e,,,,h--,.. - - - - - - - - - - - - - - -  ; KKMMM ()9 : : : +!!'!2     {333-gt<<< {---'666 {888*7D999 {444&w555 {*** ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( 1 2 2 2 2 2 2Z\ 233FWtT4V455 5 : : :w 3S99 9 9 9 1 1 1WwA/00 0 0 0 0 0 0 1{))) ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( 1 1 1 1 1 1 1YtL122FWtT4V455 5 : : :w 3S99 9 9 9 1 1 1WwA/00 0 0 0 0 0 0 1{))) ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< txx 40011  &  $ $ $ FFFFFFFF&&FF3%%%&&&&&&&&&&&&&&&     $S&d C C C C C  % % %w??@@@ {j  7D))) {'''!'4000 {k!!#GT222 {'''!'4d;;;; {k!! $/// {'''444444!!'4000 {+++%gt444 {+++%gt444 {,,,&w555 {+++%gt444 {)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{&&&555555 ! ! # # 3 3#GT22 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3{(((555555 ! ! # # 5 5%gt44 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5{)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{&&& $/// {((("7D111 {((("7D111 {///)'4888 {88827DAAA {'''!'4000 {000*7D999 {&&&($@@@ {o%%($??? {o%%($??? {)))#GT222 {///)'4888{((("7D111 {&&& $/// {((("7D111 {((("7D111 {,,,!'4000 {((("7D111 {&&& $/// {---'666{+++$Wd333 {...'666 {...'666 {///($777{---'666{,,,&w555{***777777dhhy"--344::<< 7w 566 6 9Wx)?)?)H)HIJJ J - - -wA,, , , , , , , A A Aw :C@@ @ @ @ 9 9 9w 2 2C88 8 8 8 8 8 8 9{(((!'4000 {***#GT222 {***#GT222{)))#GT222{+++xx##))++ 4w 233 3 - K K K K K K K K 8 8 8 8 8 8y  &&t,,,$^Du===F ; : : : : : # # % % %Wf224885 -. 9 9 9w 2 2C88 8 8 8 8 8 8 - - -wA,, , , , , , , -{+++xx##))++ 4w 233 3sy6== ] XXl++  !Z..00J39:JGG ?7$=>>>7;xx 7K7KU488J++11333QU59XXi5H5HR$((9b))//111dAE/AZAZd"55;;===`d CG88L\C]C]g"2B77==???cg  PH//0GHH Pw NOO O ( 7 7 7 7 7 7''%!$((>5"A"ABB!+-FWTf==>> >O\: ( ( (wA'' ' ' ' ' ' ' ({+++xx##))++ 4w 233 3 - O O O O O O O O " "4 ( ( (''--FWf%% %-. 4 4 4w 2 233 3 3 3 3 3 3 - - -wA,, , , , , , , -{o%%                  #D$4 5 5 ;BBDDPD -o//%g.. Q>>.3Q3QRR! txx00# 6 6 6"--3355  "&dhh&F&F!G!G#'1B(C(C(]G]#^#^ ! +&*D" #  !9 y0"55;;== b  " > > > > > > ; ; ; ; ; ;0022 @7$y{~))++ Z7$SUXYYY Z % 6 6 6 6 6 6     d## /4(((,_..  Q#5 Q>Q:Q  +  #%5 #'))J"O 2n,k%6!" %We$$ $ 5uQGGGNNwWW c"""N,MNNN,c#m2D2D.E.EFFFOZ888,,,'""" M***t {333,,,,,,  D4R)S)S D     !**+t ! ! !  ! D7%~@CDDD -W9$??P_akOlmmm m ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{444 (W:4@@Q`blPmnnn n ( ( (wA'' ' ' ' ' ' ' ({--- -,,,,,  D4R)S)S D     !**+t ! ! !  ! D7%~@CDDD -W4T::;; ; ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{000-//000 {--- -,,,,,  D4R)S)S D     !**+t ! ! !  ! D7%~@CDDD '' 339r::@@BBHHJJ '' 339r::tzr&&y117R88>>@@HD ;W5h'RRSS S ; ; ;w 4 4 4c:: : : : : : : ;{((( ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//A4T,5GKKAA : : :w 3S99 9 9 9 :TXXh5566   He!>???{,,, ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< ? 6C  A q1599 &L%%9"3--'&&$%HSM&&&&&&&&&&&&&&&3 63 63 63C88H >7$7=====||K(( f7$_adeeeee+H55- 6"",,w//k:>VWZ>[>[]j3k3k022",,w//<9'||L99'||L99$( '||L99 '||L99WX\\,=W=W #+<<0@#A#A !)n!=!=$LL33 $LL33 ≪77 ≪77 ( ] ; ; %\\*55 ..../44Bw(;SAAAAA&LL))LZm-L-LLL))6Y$LL33'||L99'||L99$( '||L99 '||L99WX\\,=W=W #+<<0@#A#A !)n!=!=$LL33 $LL33 ≪77 ≪77 ( ] ; ; %\\*55 g3 6h%S ) ) + +dhhz48899AJ FFEF * * * + + + + + + + + + + + + + + + %%6777!))++__A[\]A^A^_```{))) ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 :XXl++3t  > < < < < < <4466NMMMMMOOMMMF >7$7==="6::i#8#8.II >7$7=== $T,%7 8 8  %AL FFHHH                %^444!))++>>???{,,, ( D& ! ! ! ! ( ( (wA'' ' ' ' ' ' ' (888888F|!!##DSD) 1w00 0!!  8#95AA 8w 677 7 ??*,,*3B3/..00=I)++    h$77888 {,,, ( D, / / / / ( ( (wA'' ' ' ' ' ' ' (888888 ?? J J J J J J JD   :w 3S99 90022txx 22NCC :w 3S99 9F|))++DSD1V d??ME ???,c#d))nn===OZ888'""",,, D!!!t {111KKKKKKKKEEEEEEEE,,.. ZWw)LMVYZZZ Z   IWw(:;CHHH H 4WT8N8Nw8W8WXXYY Y 4 4 4wAs333 3 3 3 3 3 3 4{///llllllllllllEEEEEEEE;;;;;;;;,,.. UWw(FGPSTTT T   IWw(:;CHHH H*1-   ++ bWw(ST]`aaa a 4 Lw ' ' ' ' 4 4 4 ! !) , , ,wAs333 3 3 3 3 3 3 4$^%% c"""N,>???OZ888'""",,, DJd|44;;==>>>t {:::::::::555555,,.. UWw(FGPSTTT T4H4H4Q4QRRSSS {222::::::ZZZZZZZZZZ,,.. UWw(FGPSTTT T 4((w77F$:$:$<$>?? ? 4 4 4wAs333 3 3 3 3 3 3 4{***::::::777777,,.. EWbdCCDD D=*@*@*B*BCDDD {(((PPPPPPPPPP!\'**  +  z * * *z4,''..00c"""N,>???,c#d))nn===OZ888'"""'""" D!!!t{--- <w :;; ;HH["-- XXlB//  I  Iw GHH H 4 7 7 7 7 7 7W00JGGHH H ( ( (wA'' ' ' ' ' ' ' 4 4 4   6 7 7 7wAs333 3 3 3 3 3 3 4 5sG A..B C==DG(("H ;#K M)L  M9MM/AN66O.O)#O.)O.ART,S T T.T TT*W< V( W(V,,W/V,0W'W+*W+9&c 'cD c(A8a, c,a00c3a04Ac c9c4.c94c9/d88 fe$f$ f1fff j(( k2kkk%l l5 l0*l50l55A?w5 ww*w w x:#x?x: x:x5/x:5x:+{== |.|)#|.)|.2+}}<;}<A ++/2/@6AAA AA8AAA3A-AA8A3AA8B2ACCAC0C/AC0I AJ J AJJAJJ>AKK ALKAK;K5ALK;ALM3ANNAN!N AN!N3AOOAOO"AOQ#AQ3Q3ARRARR:AS S AS<SAS7S1AS<S7AS<W AWWAW:W9AW:X AAYYAYYAYZAZZ A[ Z#A[Z?A[ [A[ [A[$[$A\\A\\95A]/]/ A^ ]9A^^A^ ^A^ ^8EAd d AddAdd<Aee$Ae;e:Ae;iAi+i+Aj j Aj j1"Akk AmkAlk<Aml Aml9AmmAmmAmpAp0p0Ap4p7Ap4q AArrAr1r0Ar1r5?As5s5%AttAtt!At2t2'AuuAuu &Avv%Av/v.Av/v:AwwAw!w$Aw!w)Aw;w;%Ax#x"Ax#x)Ax;x;%Ay#y"Ay#zAz'z' A{z1A{{ A{{A{{A{2{2A||A||**A} } A}$}'A}$~.A~?~? A0 A+%A0+A0@B@/@/BA A BA A;BC$BBB-B,BC$B-BCB>BC$CBCCBC$C$BC(C+BC(D+BD<D< BE-EBE(E"BE-E(BE-FBF2F2BGGBGG+BG<GBT TBT%T BT%T)*BUUBV#U1 BV#U:BVVBV#VBV#V2BWW BW4W BW/W)BW4W/BW4W8*BX#X#BY2Y BY2Y BY-Y'BY2Y-BY2ZBZZ B[ZBZ?Z9B[Z?B[\ B\>\B\2\& B\>\2B\6\6B\>\9B\6\:B\>\> B] ] B] b;BccBcc Bcc?BddBd!d$Bd!eBe!e!Be%e(Be%fBf%f%Bf)f,Bf)g Bg)g)Bg-g0Bg-hBh-h-Bh1h4Bh1u0Bv v Bx vBv9v3Bx v9Bx w Bx w#BxxBx xBx { AB|+|+B~|=B} }B~} B~}-B~~ B~~B~F ACGGCHG5CHHCHHCHI'.CJJCK?J(CK KCK?K CK?KCK:K4CK?K:CK?Y8B*C\#\# C\2\1C\2] $C]/]/ C_]9C^^C_^ C_^(C_ _C__ C__ $C`` C`6`C`1`+C`6`1C`6a6B,Cd#d# Cd2d1Cd2e Ce(e( Cg e2CffCg f Cg f!Cgf>Cg gCg h2B,Ckk Ck.k-Ck.n1Coo Co:oCo5o/Co:o5Co:p Cpp Cq p&CqqCq qCq q+Cq=q=CrrCrs7B?CwwCwwCwwCww7CxxCxxCxx9Cy"y"Cy&y)Cy&z0C{{ C{2{ C{-{'C{2{-C{2{>A C}/} C}"} C}/}"C}&}&C}/})C}&}*C}/}/-DN#~'DN#HDN#GGDN#N"DN#N5ADPPDPP DPQ DQ1Q1 DR"Q;DRRDR"RDR"R&DR<R<DSSDSVDV:V:DV>WDV>XDXX DY X#DYX?DY YDY ]#D]5]5 D^&]?D^!^D^&^!D^&cDcc Dd c"Ddc>Dd dDd g ADj h0Di i Dj i 9DjjDj jDjjDj j %Dj5j4Dj5y)DzzDz4z Dz/z)Dz4z/Dz4} D}!}!D~}&*D~~D~~D~C7)ED!D!EED&EE EEEE EEFA;EH*HEH*H*EIH/EII EIIEIP,"EQQ ES QEQ;Q5ES Q; ES R9ESSES SES ct|s!t|dt|idSt|}|jdr-|jt dd}t|||S|jdr*ddlm }||||}|d urt||d Sd Sd S) z@Handle all PATCH routes. Returns True if handled, False for 404.rrMr5/api/mcp/servers/Nrr)handle_kanban_patchFPATCHT) rr(rr)r rro_handle_mcp_server_togglerrr8)r6r7rrrrs r handle_patchr.s w  Q7$9'$B$BCCPPPP W  D {122>{3233445($=== {n--999999$$Wfd;; U??+GVWEE Et 5rct|s!t|dt|idSt|}|jdr,|jt dd}t||S|jdr*ddlm }||||}|d urt||d Sd Sd S) zAHandle all DELETE routes. Returns True if handled, False for 404.rrMr5rNrr)handle_kanban_deleteFDELETET) rr(rr)r rro_handle_mcp_server_deleterrr8)r6r7rrrrs r handle_deleter@s w  Q7$9'$B$BCCPPPP W  D {1228{3233445($777 {n--::::::%%gvt<< U??+GVXFF Ft 5rct|st|ddidSt|}|jdr-|jt dd}t |||SdS)z>Handle all PUT routes. Returns True if handled, False for 404.rrrMr5rNF)rr(r)r rro_handle_mcp_server_update)r6r7rrs r handle_putrRs w  R7$CDSQQQQ W  D {122>{3233445($=== 5rtext/cssapplication/javascript text/html image/svg+xml image/png image/jpegr image/gif image/webpz font/woffz font/woff2) cssjsrsvgpngjpgjpegicogifwebpwoffwoff2>rr text/plainrr>rrrrrr _STATIC_CACHEc|ttjjdz }|jt dd}||z } ||n$#t$rt|ddidcYSwxYw| r| st|ddidS|j }t|dd}|t vr|d n|}|}|j|jf} t)|} dx} x} } t*5t,| }|r|d | kr|\}} } } dddn #1swxYwY| |} d | d d d | dd d} |t0vr)t | dkrt3j| dnd} t*5| | | | ft,| <dddn #1swxYwYt7|jdddg}t;|d }|rdnd}|jd| kro|d| d| | d|| | dd|!dS|jdpd }| duod|v}|r| n| }|d | d!|| d"t)t || d| | d|| | dd|r| d#d|!|j"#|dS)$Nrr.rrr4r5r$rz; charset=utf-8rzW/"rr#rrrr) compresslevelT)keep_blank_valuesvrIz#public, max-age=31536000, immutablezpublic, max-age=300z If-None-Matchi0ETagrVaryzAccept-EncodinggziprrrzContent-Encoding)$rrrrer rorfrhr(rzrsuffixr _STATIC_MIMEr?rd_TEXT_MIME_TYPESr=r st_mtime_nsr_STATIC_CACHE_LOCKrr_COMPRESSIBLE_MIMErcompressrrNrrrrrrr)r6r7rr static_filerct ct_headerrAsig cache_keyrQgzetagrrversion_valueshas_fingerprint cache_control accept_encuse_gziprs rrrs>>(/(:CCEEK +c*oo'' (C$--//K> ,,,, >>>7K0======>     >{':':'<'<>7K0====   " " $ $C   #**S//< 8 8B*,0@*@*@2&&&&bI     B :r~ &CK  IC"t &&""9--  &fQi3&&% AsB&&&&&&&&&&&&&&& {$$&&+SV+++A++++)))c#hhoomCq1111   < <(+S"d';M) $ < < < < < < < < < < < < < < <fldCCCGGbTRRN>!,--O1@ #-- " ?++t33c"""FD)))O];;; >   (9 : : :t/%%&788>BEEGGJ~6&J"6H "22sD #  222 (#c$ii..999 %%% 777 ~F$56668.777  M 4s6(A>>BB30F//F36F3"H==IIc t|jddgd}|st|dS t |}n!#t $rt|ddcYSwxYwt |j}tj |dd }| d | d d | d d|d| dtt|d| dd||j|ddS)Nr5rIrr/r0r4FrrrrrContent-Dispositionzattachment; filename="hermes-z.json"rrrrT)rrNr?r&rrr,__dict__rrrrrrorrrr)r6r7rrrrs rrrs 6< $ $\B4 8 8 ;C 6745556    6667/555556 qz * *DjE!<<|ddk0t|ddVVdS)rr.rINr=r>r?rrs rrxz/_session_search_message_text..so  $%% +/((6*:*:f*D*D $$ % %*D*D*D*D  rr=r>r?rarr)rrs r_session_search_message_textrs(27D(A(AIgkk)$$$rG'4   xx        w}"  r|ctjddt|pd}tjddt|pd}|r|sdS||}|dkrdSt dt|pd}t||kr|St d|t|z dz}t d||z }tt||t|z|z}|dkrB||kr#||dkr|d z }||kr ||dk||krt d||z }|t|kr||t|zkr9||d z dkr*|d z}||t|zkr||d z dk*||t|zkr0tt||t|z|z}|||} |dkrd | z} |t|kr| d z} | S) N\s+r3rIrr0rr[rrr) rsubrrrrZrrror[) r.rNmax_lenr r\r^contextrrpexcerpts r_session_search_previewrswS__55;;==J vsC ,,--3355A Qr      ! !!'')) , ,C Qwwr"c'.S))**G :'!!"wQ'A-..G 3= ! !E c*oosSVV|g5 6 6C qyyckkj/366 QJEckkj/366 C<<3=))E S__C#a&&L  Za%8C%?%? 1HCC#a&&L  Za%8C%?%? #A,  c*oosSVV|g'=>>Cs#))++G qyy'/ S__E/ Nrct|j}|ddgd}|ddgddk}t |ddgd}|sg}t D]f}t|}t|dtrt|d|d<| |gt|d |iSg} t D]}||dpdv} | rgt|d }t|dtrt|d|d<| ||r t|d } |r| jd|n| j} | D]} t| }|t|vrt|d }t!||}|rt||d <t|dtrt|d|d<| |n#t"t$f$rYwxYwt|| |t'| d S)Nr\rIrrrJdepth5rr1) match_typer5 match_preview)r1rNr)rrNr?rrrr r>r=rr-rr(rrrrrr[ro)r6r7rPr\content_searchr safe_sessionsrrrJ title_matchr3r2rrpreviews rrr s &,  B sRD!""$$**,,AVVIu--a0C7N w&&q) * *E 7  ' 'A77D$((7++S11 < ,T'] ; ;W   & & & &:}5666G ^^AEE'NN0b77999  g...D$((7++S11 < ,T'] ; ;W NN4    "1\?3305Ht}VeV,,4=  A4Q77ACFFLLNN**#A)<<<"9!Q"?"?"J4@4I4ID1%dhhw&7&7==H,8g,G,GDMt,,,+i(     " W7QWNN O OOsC0K  KKc  t|j}|ddgd}|st|dS t |}|j}n#t $rv d}tD]}|d|kr|}n|st|ddcYS|dd}n##t$rt|ddcYcYSwxYwYnwxYw |dd gd}tt||} t|| tt||| |d S#ttf$r(} t|t| dcYd} ~ Sd} ~ wwxYw) Nr5rIrr/r0r4r<r r$)entries signaturer )rrNr?r&rr<rrtr[rrr(r rSrhr+) r6r7rPrrr<rcsrqrrs rrr7s &,  B &&t $ $Q 'C 674555:   K  : : : :H&((  l#s**!HE+ >7$7===== ["55II : : :w 3S99 9 9 9 9 9 : I : 566&3%((+4 ??H55 "*4 ??HgNN       z *5557OA..444444445saA C'5B6CB65C6CCCCC A)E FE>8F>Fc|r1|jd|ddt|||dS)Nzid: rr)rrrr,)r6r3revent_ids r _sse_with_idr[sSA /8///66w??@@@%rrPc|ddgd}|dvrdS tdt|S#ttf$rYdSwxYw)N after_seqrr#)r?rrrrh)rPrQs r_parse_run_journal_after_seqrasn &&tf % %a (C jt1c#hh z "qqsAAAr6rc jt|}|sdStt|dpd||}|dpgD]d}t ||dp|dpd|d |d e|d sZt t|dpd||}|r$t ||d|d |d d S) NFr5rI)reventsr3rrrrrUT)r/r0rr?rr1)r6r6rrSrr1stales r_replay_run_journalrksPy))G u GKK % % +,,G X&&,"    IIg   @%))F"3"3 @y IIi IIj ! !     ;;z " "W'  L))/R 0 0      W %.% 2BE*DU V V V 4rcLt|j}|ddgd}tj|}| |rt t |nd}n#t $rd}YnwxYw|st|ddidS|d | d d | d d | dd| dd|  t||t|n#t$rYnwxYwdSt|dr|n|}|d | d d | d d | dd| dd|  |t \}}nH#t"j$r6|jd|jYewxYwt-j|} | rt/|||| nt1||||dvrnn#t$rYnwxYw||ur7t|dr' ||nR#t $rYnFwxYwnA#||ur7t|dr( ||w#t $rYwwxYwwwxYwdS)Nr6rIrFrzstream not foundr4r5rr text/event-stream; charset=utf-8rno-cacheX-Accel-Bufferingr ConnectionrT subscribers : heartbeat ) stream_endrcancel unsubscribe)rrNr?rrr/r[r(rrrrr_CLIENT_DISCONNECT_ERRORSrHr_SSE_HEARTBEAT_INTERVAL_SECONDSrrrrrrrr,r) r6r7rPr6rjournal_available subscriberr3rrs rrrs &,  B{RD))!,I [ # #F ~ &EN Y%5i%@%@ A A ATY   & & & %    &  IWw(:;CHHH Hc"""N,NOOOOZ888/666L'222  4PQS4T4T U U U U(    D t'.v{'C'CO!!###J # (JKKK 444 +T222  g...   (nn5TnUU tt;    ##$6777 ##%%% ,/ ::H +WeT8<<<<WeT***999# " $      V # # (F(F # "":....     V # # (F(F # "":....     $ # 4s A** A98A9D33 E?E-J/H JAIJIAJK# J$!K##J$$K#<K KK#L!9LL! LL!LL!c2t|dd}|std t |}n#t $rt dwxYwt t|ddpd}||fS)Nr5rIr@r0r<)rr?rrhrrr$r@) body_or_queryrrr<s r_terminal_session_and_workspacer s m b11 2 2 8 8 : :C 0.///,    ,,,*+++,)'!["*E*E*KLLI  >s AA2c  t|\}}ddlm}|||t|dpdt|dpdt |d}t |d ||j|d S#t$r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wwxYw)Nr)start_terminalrowsr7colsr.restart)r r r T)rr5r<rr4rr)r rr rr?rr(r<rrr&rrhr[r+)r6rrr<r termrs rr,r,s58>>Y//////~  TXXf%%+,,TXXf%%+,,),,--     !!^==??       )))7CFFC(((((((( )))7CFFC(((((((( 5557OA..444444445sBB7B:: E C'!E ' E 4DE  E $EE E c0 t|dt|dd}t|dkrt |ddSddlm}||d|t|d d iS#t$r(}t |t|d cYd}~Sd}~wt$r(}t |t|d cYd}~Sd}~wt$r(}t |t|d cYd}~Sd}~wwxYw)Nr5rrIi zinput too larger)write_terminalrTr4rr) r%rr?ror&rr r(rrhr[r+)r6rrr rs rr-r-sU 5l###488FB''(( t99t  w 1377 7//////tL)40004,''' )))7CFFC(((((((( )))7CFFC(((((((( 5557OA..444444445sHAB)B D B0*D0 D=C D D-D DDc . t|dddlm}||dt|dpdt|dpdt |d d iS#t $r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wwxYw)Nr5r)resize_terminalr r7r r.)r r rTr4rr) r%rr rr?r(rr&rrhr[r+)r6rr rs rr.r.sZ5l###000000  TXXf%%+,,TXXf%%+,,    4,''' )))7CFFC(((((((( )))7CFFC(((((((( 5557OA..444444445sBA?B D B/)D/ D<CD D,D DDc t|dddlm}||d}t|d|dS#t$r(}t |t |dcYd}~Sd}~wwxYw)Nr5rr|T)rclosedr)r%rr}r(rhr&r)r6rr}r rs rr/r/ s)l###//////\ 23388999 )))7CFFC(((((((()s9< A.A)#A.)A.ct|j}|ddgd}|st|dSddlm}||}|t |ddid S|d |d d |d d|dd|dd|  |j t\}}n#tj $r|jd|j|jrE|j r,t)|dd|jiYnYwxYwt)||||dvrnn#t.t0t2f$rYnwxYwdS)Nr5rIrr@) get_terminalrzterminal not runningr4r5rrrrrrrrrTrs: terminal heartbeat terminal_closed exit_code)r terminal_error)rrNr?r&rr r(rrrrrrrrrrr is_setrr,procpollBrokenPipeErrorConnectionResetErrorConnectionAbortedError)r6r7rPrr r r3rs rrrs* &,  B &&t $ $Q 'C 371222)))))) <  D |7$:;CHHHH # (JKKK 444 +T222  g...    "koo6UoVV tt;    ##$?@@@ ##%%%;%%''DK,=,=,?,?"3k49>>CSCS5TUUUE   % & & &===  13I J     4s7-G/#DGBF61G5F66GG+*G+ct|d}|d}nxt|dr?tt |dr"t|}n)t |dd}|duo|}|d|o||d}|s d|d<|d fS|s d |d<|d fS|d fS) NrPFr_threadi0u)rfallback_poll_msrwatcher_runningagent sessions not enabledrr4watcher not startedrr)rr?rHrr@r)rwatcherr watcher_alive_trs r_gateway_sse_probe_payloadr% 9s8<< 34455G  * % %9(77J3O3O*P*P9W--//00 Wi . .$82;;== !'-( G 7| 0| C<rct}ddlm}|}t|jddgddv}|r%t||\}}t|||S|dst|dd id St||\}} |d st|dd id S| d| dd| dd| dd| dd| | } ddl m} | } t|dd| i | t } nH#t"j$r6|jd|jYbwxYw| n&t|| dd| n#t,$rYnwxYw|| n#|| wxYwdS)zSSE endpoint for real-time gateway session updates. Streams change events from the gateway watcher background thread. Only active when show_cli_sessions (show_agent_sessions) setting is enabled. r) get_watcherproberI>rJrLrKr5rPrr r4r r! rrrrrrrrrr)rtsessions_changedr1Tr : keepalive Nr)rapi.gateway_watcherr' rrNr?rr% r(rrrrrGrtr,rrrrrrrr)r6r7rr' r" r( rr _probe_body _probe_statusr\rtinitial event_datas rrrUs H//////kmmG V\ " " & &w 5 5a 8 > > @ @DX XE 24XwGG'&1111 <<+ , ,O7$@A#NNNN"SSE endpoint for lightweight session-list invalidation events.rrrrrrrrrTrr* rr) )rrrrr?rrrrrrr,rr)r6r\r/ s rrrsy # (JKKK 444 +T222  g...  ""A & R UU+JUKK ;    ##$6777 ##%%%  *..1CDDj Q Q Q R %      "1%%%%"1%%%% 4sIDB/.D/AC41D3C44)D D*'D>)D**D>>E dispositionrcddlm}t|jdddd}dd|Dd}|sr\rNordrchs rrxz-_content_disposition_value..sk CGG!!!!c!!!!!b &;&;rz .c3`K|])}dt|cxkrdkr nn|dvr|ndV*dSr5 r8 r: s rrxz-_content_disposition_value..sk  B%%%%#%%%%%"K*?*?BBS      rdownloadrz ; filename="z"; filename*=UTF-8'') rparserrr%rrrr)r1 r_up safe_nameascii_fallbackr ascii_suffix quoted_names r_content_disposition_valuerD s$X#++D"55==dBGGIWW eDkk Si'ww       7CR2L222 ))IB)//K  * *N * *' * *r range_header file_sizec|r|dr|dkrdS|ddd}d|vsd|vrdS|dd\}} |dkr0t|}|dkrdSt d||z }|dz }n@t|}|rt|n|dz }|dkrdSt ||dz }||ks||krdS||fS#t $rYdSwxYw) zAParse a single HTTP bytes range into inclusive start/end offsets.zbytes=rNrrr#rIr)rrrrrr[rh)rE rF specstart_send_s suffix_lenrrps r_parse_range_headerrL sN |66x@@IPQMMt   c1 % %a ( . . 0 0D d{{cootZZQ''NGU b==UJQt9z122Ea-CCLLE %8#e***9q=Cqyytc9q=))C 3;;%9,,4cz tts%2C:AC:C:6C:: DDcsprmimerrN c x |j}n=#t$rt|ddcYSt$rt|ddcYSwxYwt |jdd|}|jdr||d| d d || d d | d dt|| dS|r|ndtd|dz f\}} |r| |z dznd} ||rdnd| d|| d t| | d d |r| d d|d| d|| d|| dt||j|rY| d|| dd| dd| dd nt|| | r |d!5} | || } | rT| t'd"| } | sn.|j| | t-| z} | Tdddn #1swxYwYn#t$rYdSwxYwdS)#zKServe a file with correct MIME/disposition and optional byte-range support.Permission deniedrMzCould not stat filerRangerINiz Content-Rangezbytes */ Accept-RangesrrrTrrrrzbytes r#rrrContent-Security-PolicyX-Content-Type-OptionsnosniffReferrer-Policy same-originPermissions-PolicyDcamera=(), microphone=(self), geolocation=(), clipboard-write=(self)ri)r=rrr&r[rL rr?rrr*rrrrD rrrrr[rrro)r6rrO r1 rrN rF byte_rangerrpcontent_lengthr remainingchunks r_serve_file_bytesr` s8KKMM) 6667/55555 888713777778%W_%8%8"%E%EyQQJ7## (:c"""O-C -C-CDDDOW555,c222'"""t)I3q)a-3H3H/IJE3(18S5[1__qN 4##555 --- (#n*=*=>>> 111QO-Oe-O-Oc-O-OI-O-OPPP 777 -/I+W]Wb/c/cddd # 5s;;;4i@@@-}=== R    '"""   T"" ,au * ,FF3{I#>#>??E M''...U+I  , , , , , , , , , , , , , , , ,   44  4sKAAAL)#A.L L)L!!L)$L!%L)) L76L7rQcd}|dd}tjd|tjr'tjdd|z|d tj }nVtjd |tjr*tjd d |zdz|d tj }n d|zdz|z}|dS)Nzrr%rz]*)?>flagsz(]*>)z\1r)rrc z]*>z(]*>)z\1zz)rrr IGNORECASErr)rQrr.s r_html_preview_with_blank_basere s #D ::gi: 0 0D y&BMBBB 2v(%$,AR][[[ %t2= A A A 2v $  * -    $*T1 ;;w  rc2 t|}n=#t$rt|ddcYSt$rt|ddcYSwxYw|d|dd|dtt||d d |d ||d td |j |d||dd|dd|dd| |j |dS)zFServe sandboxed workspace HTML preview with links targeting a new tab.rQ rMzCould not read filerrrrrrS nonerrinlinerU rV rW rX rY rZ r[ T)re rrr&r[rrrrorD rrrr)r6rrrN rs r_serve_inline_html_previewri (s8,V->->-@-@AA 6667/55555 888713777778 # (BCCC (#c$ii..999 000 777 -/I(TZT_/`/`aaa 13777 0)<<< )=999 N  M 4s!$AAAc pddlddlm}m}m}t jd}t dt|dz }|r||}|r ||sd}| d| d d | d tt|| |j|dSt!|j} | d d gd} | st)|ddS t | n!#t,$rt)|ddcYSwxYw|t d|dz g} ddlm} t | } | r| | n#t,$rYnwxYwjdd }|r|jD]t}|}|r\ t |}|r| |d#t,$rYpwxYwut=fd| D}|st)|ddSr stC|ddidSj"#}tIj|d}hd}|hdz}dh}| dd gdd k}|o|d!k}||vr||vs|r||vs|rdnd"}|rd#nd}tK|||d$|%S)&a!Serve a local file by absolute path for inline display in the chat. Security: - Path must resolve to an allowed root (hermes home, /tmp, common dirs) - Auth-gated when auth is enabled - Only image MIME types are served inline; all others force download - SVG always served as attachment (XSS risk) - No path traversal: resolved path must stay within an allowed root - Additional roots can be added via MEDIA_ALLOWED_ROOTS env var (os.pathsep-separated list of absolute paths; ":" on POSIX, ";" on Windows) rN)rrr~rXrYs#{"error":"Authentication required"}rrrrr rIzpath parameter requiredrz Invalid pathz/tmp)rMEDIA_ALLOWED_ROOTSc3K|]_}|jtt|gt|kV`dSr;)rzr commonpathr)rrrrs rrxz _handle_media..sq  ;;== S[[#d))455TBrzPath not in allowed locationrMrrr4r5application/octet-stream> image/bmprrrrr> audio/aac audio/mp4 audio/ogg audio/wav video/mp4 video/ogg audio/flac audio/mpeg audio/opus video/webm audio/x-wavapplication/pdfvideo/quicktimerrh rJr attachmentzsandbox allow-scriptszprivate, max-age=3600rM )&r]rrrrrr r`r^rrrrorrrrrNr?rr&rer[ api.workspacerrrrrpathseprrzrr(rrrr` )r6r7rrr_HOME _HERMES_HOMErrrPraw_path allowed_rootsrws extra_rootsrrpwithin_allowedrrO _INLINE_IMAGE_TYPES_INLINE_PREVIEW_TYPES_DOWNLOAD_TYPESinline_previewhtml_inline_okr1 rN rrs @@rrrCsFFFFFFFFFF $$S)) * *E =#ei6G2H2HIIJJUUWWL  \' " " ~~b)) 9D  ! !# & & &   0B C C C    0#c$ii.. A A A    ! ! ! M   % % % F &,  Bvvfrd##A&,,..H <75s;;;1h'')) 1117NC000001  V   ##%%M  444444 $$&& ' ' / / 1 1 99;; %   $ $ $      +//"7<<BBDDK %%ck22  D::<&.."2"2>7K0==== -    C <7 8 8D 0333 ''OVVHrd++A.#5N#; (;N O## ' ' 'N 'tG\?\?\@](  &4 = ! !C WfdKAX^a b b bbs8!F%%GGAI++ I87I8A L(( L54L5rc tt|j|}n#t$rd}YnwxYw|r*|r|r|S ddlm}t|||}n#t$rYdSwxYw|r|r|SdS)zIResolve /api/file/raw paths from the workspace or this session's uploads.Nrr) r'rr<rhrzrrrr[)rArrrrattachment_targets r_file_raw_targetr sd7#455s;;  &--//fnn&6&6 666666()@)@)E)EsKK tt!!!&7&?&?&A&A!  4s"% 44$B BBc ttjdd}n#t$rd}YnwxYwt d|dzdzS)NHERMES_WEBUI_FOLDER_ZIP_MAX_MB1024rr)rr]r^rhr)mbs r_folder_zip_max_bytesr s_ ;VDD E E   q":: t ##s "% 44c  tdttjddS#t$rYdSwxYw)Nr!HERMES_WEBUI_FOLDER_ZIP_MAX_FILES50000rx)rrr]r^rhrrr_folder_zip_max_filesr sN1c")$GQQRRSSS uus/2 AAworkspace_root max_bytes max_filesc,ddl}g}d}||dD]o\}}} t|} | |sg|dd<Fn#t t f$r g|dd<YawxYw| D]} | | z } | rA | |sEn#t t f$rYYwxYw | j } n#t $rYwxYwt||kr ||dfccS|| z|kr ||dfccS | |}n#t $rYwxYw| | t|f|| z }q||dfS)zWalk target dir; return (files, total_bytes, hit_limit_reason_or_None). files is a list of (filesystem_path, archive_name) tuples ready for ZipFile.write. Symlinks escaping the workspace are skipped. rNF) followlinksr r )r]walkrreis_relative_torhrg is_symlinkr=rrorfrr)rr r r rrwrrr~rv root_pathrfpsizearcnames r_folder_download_collectr s5 EK XXf%X@@  dEJJ  $$&&55nEE QQQ G$   DG H   DT!B}} ::<<66~FF! !"G,H wwyy(    5zzY&&k;666666T!I--k;666666 ..00     LL"c'll+ , , , 4 KK+ , +t ##sG.A''BB$'C  C! C!%C?? D  D >E E! E!c@ddl}ddlm}||j}|ddgd}|st |dS t |}n!#t$rt |ddcYSwxYw|d dgd} tt|j |}n!#t$rt |d d cYSwxYw| st|d d idS|st |dd St|j } t!} t#} t%|| | | \} } }|dkrt|d| dddS|dkrt|d| dddS|jpddz}|d|dd|dt-d||d d!|d"d#|d}||jd$|jd%&5}| D]\\}} |||'|d(z }##t8t:f$r&}t<d)||Yd}~Ud}~wwxYw dddn #1swxYwYt< d*|tC| | |dS)+aGET /api/folder/download?session_id=...&path=... Streams a zip of /. Symlinks escaping the workspace are skipped. Empty folders return an empty (valid) zip. Respects HERMES_WEBUI_FOLDER_ZIP_MAX_MB and HERMES_WEBUI_FOLDER_ZIP_MAX_FILES. Pre-flights the walk so size/count failures return a clean 413 with JSON body BEFORE any zip bytes are sent. rN)rr5rIr/r0r4r z invalid pathrrrr5z7K0==== ==??a7Z\_```!+&&..00N%''I%''I$< 9%%!E; K%<     K'$9      *{f4H # (9::: "<:: 444  g... G Sg>R_c d dJhj  J JKB JW---1 _- J J JA2qIIIIIIII J  JJJJJJJJJJJJJJJJ KKCU[&s` AA98A9"B==CC;K(J! K(!K2KK(KK((K,/K,ct|j}|ddgd}|st|dS t |}n!#t $rt|ddcYSwxYw|ddgd}|ddgdd k}t |||}|t|d d id S|j }tj|d } |ddgdd k} hd} | o| dk} |s| | vr| sdnd} | rdnd}| rt||d|St||| | d|S)Nr5rIrr/r0r4r r= rJrrr5ro rh >application/xhtml+xmlrrrr~ zAsandbox allow-scripts allow-popups allow-popups-to-escape-sandboxrrM ) rrNr?r&rrr r(rrrri r` )r6r7rPrrrforce_downloadrrrO r dangerous_typesr r1 rN s rrr`s &,  B &&t $ $Q 'C 6745556    6667/555556 &&"  q !CVVJ--a0C7N ac * *F ~7K0==== -    C <7 8 8D VVHrd++A.#5NMMMO#; (;N"0rT_5L5LUc5L,,jrKR` i M MeiCP)'6:3OOOO WfdKQT U U UUsAA32A3c$t|j}|ddgd}|st|dS t |}n!#t $rt|ddcYSwxYw|ddgd}|st|dS t |tt|j |S#ttf$r(}t|t|dcYd}~Sd}~wwxYw) Nr5rIrr/r0r4r path is required) rrNr?r&rrr(r"rr<rSrhr+)r6r7rPrrrrs rrrs6 &,  B &&t $ $Q 'C 6745556    6667/555556 &&"  q !C 07.///5+D,=,=sCCDDD z *5557OA..444444445s0AA32A3&/CD'D D Dct|jddgd}t5t j|}t |t r|r|dnd}t|}n |r|}d}nd}d}dddn #1swxYwY|r t|t||dSt|dddS)Nr5rIrrre) rrNr?rDrCr=raror(r>)r6r7rrrwrcs rrrs" 6< $ $\B4 8 8 ;C    S!! eT " " !+atAJJEE  AEEAE                Hd1ggFFGGG W$;; < <rorrrr+r,rrrrrrra) r6r7rr\initial_pending initial_countq_listr,rs rrrs 6< $ $\B4 8 8 ;C 674555  BAOM !,,S"55<r()r6r7rPrr8cmds rrrs &,  B &&t $ $Q 'C && 0 1 1! 4C &&/0 1 1! 4C ; "!$-      S99::: Ww 56s C C CCrct|jddgd}t|}|rt |d|iSt |ddiS)Nr5rIrrf)rrNr?get_clarify_pendingr()r6r7rrfs rrrsg 6< $ $\B4 8 8 ;C!#&&G09g./// Wy$' ( ((rctt|dSt|jddgd}|st|dSddlm}m}m}m }tj d }d}d} |5| |g |||pg} | r*t| dj}t!| } n(||} | rt| }d } dddn #1swxYwY|d |d d |dd|dd|dd|ddlm} | |d|| d |t,} nH#tj$r6|jd|jYbwxYw| n| |d| vn#t6$rYnwxYwt9||dS#t9||wxYw)aSSE endpoint for real-time clarify notifications. Long-lived connection that pushes clarify events the moment they arrive, replacing the 1.5s polling loop. The frontend uses EventSource and falls back to HTTP polling if the connection fails. Nzclarify SSE not availabler5rIrr/)rD_clarify_sse_subscribersrFrCr[rrrrrrrrrrrr r. reTrr* clarify)clarify_sse_subscriber&rrNr? api.clarifyrDr rFrCrrrmrr>rrorrrr+r,rrrrrrclarify_sse_unsubscribe)r6r7r _clarify_lock _clarify_subs_clarify_gateway_queues_clarify_pendingr\r r gw_q_legacyr,rs rrrs9$77888 6< $ $\B4 8 8 ;C 674555  BAOM  " "  b))00333&**3//52  ""47<00OIIMM&**3//G ""&w-- !  " " " " " " " " " " " " " " " # (JKKK 444 +T222  g... """""" D)=YYZZZ( . %%(G%HH;    ##$6777 ##%%%  D)W - - - . $      Q'''''Q''''sbBD!!D%(D%H<G"!H<"AH'$H<&H''H<;I< I II  II0cFt|j}|ddgd}|ddgd}|dg}|r(t||||ddt |d |d St |d d id S)zOInject a fake pending clarify prompt -- loopback-only, used by automated tests.r5rIrquestionz Which option?rr )r choices_offeredr5rTr rr@rr5)rrNr?submit_clarify_pendingr()r6r7rPrr rs rrrKs &,  B &&t $ $Q 'Cvvj?"344Q7HffY##G ; $#*!!      S99::: Ww 56s C C CCrc ,()*+,t|j}|ddgdpd, ddlm}|+,s++didpd,,stdgdSddlm}|,,t,*t*}|t|Sd tf*fd } dd l }dd l }|j|j|j|jt$d d d d} |j| } | |jvr|jd| ddlm} | ,} n5#t.$r(} t0d,| g} Yd } ~ nd } ~ wwxYw| sd } +,fd}d}d},dks,dr/|D]$}| |} | ||%| s&,dks,dr d }d }| r!| d}|| }n@+di}|d}|d}|r|r dd l}dd l}|d}|dr|d}n|d}|j !|dd|i}|j "|d 5}|j#|$}d d d n #1swxYwYtK|tr8|d!g}tK|tLr d"|D} n!tK|tLr d#|D} | r*t0d$tO| |nt0d%|n2#t.$r%}t0d&|Yd }~nd }~wwxYw| stP,}|r dd l}+d'i}tK|tr|,ini}tK|tr|dnd } | s)+did} | r|j !|ddd| i}|j "|d 5}|j#|$}d d d n #1swxYwYd(|d!gD} t0d)tO| ,n3#t.$r&}t0d*,|Yd }~nd }~wwxYw| s&dd+lm)}!d,|!,gD} | s|,gdd-S,d.kr dd/lm*}"tK+dtr++dipidnd }#|"| |#0\}$}%|$} n*#t.$rt0d1YnwxYwdd2lm+((,fd3))fd4| D}&|,|&tO|&d-S#t.$rF}'t0d5,|'ttY|'gdcYd }'~'Sd }'~'wwxYw)6uReturn the live model list for a provider. Delegates to the agent's provider_model_ids() which handles: - OpenRouter: live fetch from /api/v1/models - Anthropic: live fetch from /v1/models (API key or OAuth token) - Copilot: live fetch from api.githubcopilot.com/models with correct headers - openai-codex: Codex OAuth endpoint + local ~/.codex/ cache fallback - Nous: live fetch from inference-api.nousresearch.com/v1/models - DeepSeek, kimi-coding, opencode-zen/go, custom: generic OpenAI-compat /v1/models - ZAI, MiniMax, Google/Gemini: fall back to static list (non-standard endpoints) - All others: static _PROVIDER_MODELS fallback The agent already maintains all provider-specific auth and endpoint logic in one place; the WebUI inherits it rather than duplicating it. Query params: provider (optional) — provider ID; defaults to active profile provider rrIrrZr no_provider)rr2)_resolve_provider_aliasNrcDt|t|Sr;)rr()rrr6s r_finishz$_handle_live_models.._finishs# #Iw 7 7 7Wg&& &r..rYz hermes-agent)provider_model_idsz+provider_model_ids import failed for %s: %scdksdsgS ddlm}dg}t |t sgSg}|D]}t |t s||dd}dr|kr||hdkr|s|||S#t$rgcYSwxYw)Nr rr)_custom_provider_slug_from_namer]rrI) rr`r r?r=rar>rr[)r _cp_entries_matches_cp_slugrrs r$_custom_provider_entries_for_requestzA_handle_live_models.._custom_provider_entries_for_requests0 H,,0C0CI0N0N,IJJJJJJ"%''*._custom_provider_model_ids.._appendsXtzr??0022D*D 0 0 D)))))** 0 0rrrIr2r|r)r?r=r>rra)r r rcr _itemr s @r_custom_provider_model_idsz7_handle_live_models.._custom_provider_model_idss7***** ,,---''(++gt,, ` '**%dC00*#GDMMM* ..`!(``%eS11`#GENNNN't44`#GEIIdOO$^uyy7I7I$^UYYW]M^M^___ rc|d}|t|}|drW|drBt |dkr/t j|ddd}|r|St|dpd}|r't j|dndS) Nrez${}rmrrYrIkey_env)r?rrrrror]r^)r r_key_envs r_custom_provider_api_keyz5_handle_live_models.._custom_provider_api_keyswwy))#t99??,,Dt,,As1C1CAD TU !yadR88>>@@$# 3779--344::<<6:Bryr**00222Brr rr,rerz/v1z/modelsz /v1/models AuthorizationzBearer rrrrcdg|]-}|d|dd.Sr|rIrr6s rr{z'_handle_live_models.. s3&U&U&U1t&UquuT2&U&U&Urchg|]/}t|tr|d|n|0Sr|rr6s rr{z'_handle_live_models.. s8"_"_"_TUZ45H5H#O155q>>>a"_"_"_rz.Live-fetched %d models from custom provider %sz*Custom provider returned no models from %sz*Live fetch from custom provider failed: %s providerscdg|]-}|d|dd.Sr rr6s rr{z'_handle_live_models..3 s9]]]1QRQVQVW[Q\Q\]quuT2]]]rz)Live-fetched %d models from %s /v1/modelszLive fetch from %s failed: %s)_PROVIDER_MODELScg|] }|d Sr rr6s rr{z'_handle_live_models..< s:::q1T7:::r)rr2rnous)_build_nous_featured_set)selected_model_idz:Failed to apply Nous featured-set cap for /api/models/live)_format_ollama_labelc dvr |Sd|vr|ddn|}|d}g}|D]}|}|dkr|d2|dvr(||^|dd r||||d |}d D]*}|||}+|S) z/Best-effort human label from a model ID string.)ollamaz ollama-cloudrrYr#rGPT) rrgemmallamamistralqwenrgrokkimiglmNrr3)r GLMrAIXLMoE)rrr capitalizernrr%r) midrfrnrrwplrorig _fmt_ollamars r _make_labelz(_handle_live_models.._make_labelV sN555"{3''',/3JJciinnR((CGMM#&&EF 2 2WWYY;;MM%((((GGGMM!,,..1111rrU]]__2MM!$$$$MM!,,..1111HHV$$E@ : : djjllD99Lrc0g|]}|||dS))r|rr)rr r s rr{z'_handle_live_models..o s0SSSsSS;;s+;+;<<SSSrz%_handle_live_models failed for %s: %s)-rrNr?rrr`r[r(r rrr>rr]r rrabspathrnormpathinserthermes_cli.modelsr r[rrrr}urllib.requestrrcrrequestRequesturlopenrrr=raro_OPENAI_COMPAT_ENDPOINTSr r r r)-r6r7rP_gcr rr _sysr _agent_dir_pmiids _import_errcustom_provider_entryr r r r _base_url_api_key _model_cfgurllibr_ep _models_url_req_respr_data _fetch_err_providers_cfg_provr _pmr _default_model _featuredr models_outrr r rrrs-` @@@@@rrr_s & &,  BzB4((+1r88::@@BBH@<000000cee Bwww++// ;;ArH FW DDEE E 766666**844*844 (33  Wf%% % 'T ' ' ' ' ' ' '         sx'7'78H8HIYIYZbIcIc8d8d'e'e'+T9nNNJ**:66J**   J/// D D D D D D$x..CC    LLFR] ^ ^ ^CCCCCC t _$( !      ,   , C C C 8##x':':9'E'E#??AA@@C,403-JJ99#>>????. _H00H4G4G 4R4R0 (9 5 9 9* E EI778MNNHH!$"!5!5J *z : :I)~~i88H$_$_#_----# (..s33<<..=-0///KK-0*<*<*[_@`@`hN..x<<eT3J3JT599Y///PTDC"www3377 BBf%~55"OOO%46F6F6F$G 6  $^33D!3DD=$.DJuzz||$<$ Q NQ NB8Q ] Q:Q50]5Q::#]C X>#V-! X-V11X4V15A X] X2 X-(]-X22;].]5A-[#"]#$\ ] \  8] ^ ;^^^c Xddlm}ddl}t|j}|ddgd}|st |ddid S|jd |r|d vrt |dd id S tdt|d dgd}tdtdt|ddgd}n+#ttf$rt |ddid cYSwxYw||z }g} d} | rt|ddd} t!| } | |||z} | D]} | }t%| dd}| | j|j|j|de#t0$rt2d| YwxYwt ||| | |dS)zList cron run output files with metadata (no content). Returns lightweight file listing so the frontend can render a run history without fetching full output for every run. r OUTPUT_DIRNrHrIrjob_id requiredrr5![A-Za-z0-9_-][A-Za-z0-9_.-]{0,63}r$r invalid job_idoffsetrrrr`50z!offset and limit must be integersrc4|jSr;r=r?rs rrz&_handle_cron_history.. sqvvxx?PrTrrr%r)rr r}usagez"Failed to stat cron output file %s)rHrrcr= )rr8 rrrNr?r( fullmatchrrr[rhrrzrrror=_cron_output_usage_metadatarrrrr?rgrr)r6r7CRON_OUTrrPrHr= r`out_dirrrc all_filespagerrArB s rrrx s 100000 &,  B VVHrd # #A &F D7$56sCCCC 3==v F FC&T_J_J_7$45cBBBBVQBFF8cU33A67788As3BFF7TF$;$;A$> ? ?@@AA  "VVV7$GHQTUUUUUUVG D E~~F7<<//5P5PZ^___ I./ F FA FVVXX3KKKCC !J " "   F F F A1EEEEE F WQWXX Y YYs&C;;%D#"D# A!G,,%HHc 6ddlm}ddl}t|j}|ddgd}|ddgd}|r|st |ddid S|jd |r|d vrt |dd id S||z |z }| |st |ddid S| st |ddid S | dd}t|} t|} t ||||| | dS#t$r+} t |dt| id cYd} ~ Sd} ~ wwxYw)z5Return full content of a single cron run output file.rr7 NrHrIrrzjob_id and filename requiredrr5r: r; r< zinvalid filenamez run not foundr4rr%r)rHrrsnippetrB r)rr8 rrrNr?r(rC rer rzr_cron_output_snippetrD r[r) r6r7rE rrPrHrfpathrrJ rB rs rrr s000000 &,  B VVHrd # #A &Fvvj2$''*H QQ7$BCCPPPP 3==v F FC&T_J_J_7$45cBBBB   ) 2 2 4 4E    0 0 2 2 3 3E7$67DDDD <<>>B7O4SAAAA9//79/EE&w//+G44V&-'$)++,, , 9997CFF+C8888888889sA E## F- F FFc*ddl|dddddd}idtffd }dtffd }|D]}|}jd |j}|r+|dd <[jd |j}|r+|dd <jd |j}|r&||d} | | d<jd|j} | r'|| d} | | d<jd|j} | r| d} jd| j}jd| j}jd| j}|r!||dd<|r!||dd<|r%dvr!||dd<dvr"tfddD}|r|d<S)zFExtract optional token/cost metadata from a cron output markdown file.rNrWrrXr-cRjdd|pd}|rt|ndS)Nz[^0-9]rI)rr)r-cleanedrs r_intishz,_cron_output_usage_metadata.._intish s1#')R"55&0s7|||D0rcjd|pddd}|r"t|dndS)Nz[-+]?\d+(?:\.\d+)?rIrr)rr%rr)r-rrs r _floatishz._cron_output_usage_metadata.._floatish sM 05;B2G2GR2P2PQQ(-7uU[[^^$$$47rz%\*\*(?:Model|Model Used):\*\*\s*(.+)$rz\*\*Provider:\*\*\s*(.+)$rz(\*\*(?:Estimated cost|Cost):\*\*\s*(.+)$estimated_cost_usdz%\*\*(?:Duration|Elapsed):\*\*\s*(.+)$duration_secondsz\*\*Tokens:\*\*\s*(.+)$z([0-9][0-9,]*)\s*(?:input|in)\bz!([0-9][0-9,]*)\s*(?:output|out)\bz'([0-9][0-9,]*)\s*(?:total\s*)?tokens?\brrr c3`K|](}t|pdV)dS)rN)rr?)rrNrB s rrxz._cron_output_usage_metadata.. s:VVqC ! )**VVVVVVr)rr) rrrrrrIrrsum)r.rbrP rR raw_liner model_matchprovider_match cost_matchrduration_matchseconds tokens_matchr- input_match output_match total_matchrcrrB s @@rrD rD sA ::mQ ' ' * 0 0q A A! DDE1s1111118888888OO%%!F!F~~ci H$PSPUVV  (..q117799E'N "#?suMM   . 4 4Q 7 7 = = ? ?E*  SYJDRURWXX  9Z--a0011D.2*+ "#KTSVSXYY  i 4 4Q 7 788G",3()  sy!;T35II  F &&q))E$#*%GPSPUVVK%3:&JESVSXYYL$#*%OQVX[X]^^K F(/ 0A0A!0D0D(E(En% H)01C1CA1F1F)G)Go& F~U::(/ 0A0A!0D0D(E(En%U""VVVV4UVVVVV  *$)E. ! Lrch|d}d}t|D]3\}}|ds|dr|}n4|dkr d||dzdnd|}|d|pdS) uExtract the response body from a cron output .md file for preview. Contract: cron output files use markdown front-matter followed by a ``## Response`` (or ``# Response``) heading that marks the start of the agent's reply. This function locates that heading and returns everything after it (up to *limit* chars). If no heading is found the entire text is returned — callers should be aware that front-matter fields (model, timestamp, …) may appear in the snippet. rrYrWrXrrNz(empty))r enumeraterrr)r.r`rrer0rrs rrK rK !s JJt  ELU##4 ??= ) ) T__\-J-J L E 4@13D3DDIIeL1,--. / / /$))TYJZJZ a a c cD < $9$rcddlm}t|j}|ddgd}t |ddgd}|st |ddid S||z }g}|rt| d d d d|}|D]o} | dd} | | j t| dE#t$rtd| YlwxYwt |||dS)Nrr7 rHrIr`rrr9 rr5rc4|jSr;r@ rA s rrz%_handle_cron_output..$!s16688;LrTrrr%r)rrz"Failed to read cron output file %s)rHoutputs)rr8 rrNr?rr(rzrrrrrrhr[rr) r6r7rE rPrHr`rF rf rwrtxts rrr!s}000000 &,  B VVHrd # #A &F w&&q) * *E D7$56sCCCCGG~~Fw||F++1L1LVZ[[[\b]b\bc F FA Fkk79kEEAF?Z[^?_?_``aaaa F F F A1EEEEE F WG<< = ==sAD%D0/D0c xt|j}|ddgd}|r4t|\}}t |||t |ddSt 5dtD}dddn #1swxYwYt |d|iS) z/Return running status for one or all cron jobs.rHrIrr)rHrelapsedc^i|]*\}}|ttj|z d+S)r)rMrK)rjidrTs rrSz'_handle_cron_status..7!s2___&#qsE$)++/155___rNr) rrNr?rUr(rMrJrr)r6r7rPrHrri all_runnings rrr.!s  &,  B VVHrd # #A &F `+F33VERY[\L]L]^^___ ``__DVD\D\D^D^___ ``````````````` Wy+. / //s/$BB#&B#c 8ddl}t|j}t|ddgd} ddlm}|d}g}|D] }|d} | st| trY |j | d d  } n&#ttf$rYwxYwt| } | |krl||d d |d d|dd| |ddud t|||dS#t $rt|g|dcYSwxYw)z=Return cron jobs that have completed since a given timestamp.rNsincerrTr last_run_atrrr|rIrUnknown last_statusrrlF)rHrr completed_atrl)rrn )rrrNrr?rrr=r fromisoformatr%rrhrrr( ImportError) r6r7rrPrn rrqrrilast_runrs rrr;!sOOO &,  B "&&3%((+ , ,E?''''''y$///   Cww}--H (C(( %!*88 ((h77ikkB#I.H8__Ezz"""%''$"3"3 # : :"%''-"C"C(*/2ww7L/M/MUZ/Z +FFGGG ???"u==>>>>>?s9AE9 AC  E9 C E9C  BE99FFc ddlm}|}|dz }n+#t$rtjdz }|dz }YnwxYw|dz }|dz }|dz }|r|dd nd }|r|dd nd }|r|dd nd } t|t|t|t| t|t|t||r| j nd|r| j nd|r| j ndtd S) NrrTmemoriesrY MEMORY.mdUSER.mdSOUL.mdrr%rrI) memoryrsoul memory_path user_path soul_path memory_mtime user_mtime soul_mtimeexternal_notes_enabled) rZrUrt rr_rzrr(r-rr=r?_external_notes_sources_enabled) r6rUr_mem_dirmem_file user_file soul_filer{ rr| s rrrb!s$777777%%''# $$$y{{Y&#$$H)#Iy I ??   GI>>>         WY???         WY???  "6** && &&x==YY8@8I8ISHMMOO44t7@7G7G7I7IS)..**33t7@7G7G7I7IS)..**33t&E&G&G   s%AAcd}tjdD]}|jdr t j|j}|r|ot|jdk}n%|o"|j dkot|jdk}|rTt5tj |jddddn #1swxYwY| d|dz }#t$rtd|YwxYwt#jrt#j dt'|d|d S) NrrrrTrrz"Failed to clean up session file %s)rrO )rrrrr_r`rrorrrrrPrr[rrrrzr()r6rrkrO rwr should_deletes rrr!sG  h ' 'BB 6  S ! !   B QV$$A U ! :c!*oo&: ! Tag&; TAJST@T  //L...///////////////D)))1  B B B LL=q A A A A A B ""3!T2222 WTg66 7 77s6A$C'C4 C'C C'C C''%DDc 8 t|dt|dn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYwt|d}|st|dSt|dd}|rPt5|tvr t|dd id cdddS dddn #1swxYwYd|_ d d l m }t|dd}||j|j|t|dd}t!|jpg|_d|dd|_|t)jj} | |_ |t/} t5| t| <dddn #1swxYwYd dlm} | |d|j| |t7jt:|j||j|j| dfd|dd} | t|| |j|ddS)uPOST /api/btw — ephemeral side question using session context. Creates a temporary hidden session, streams the answer via SSE, then discards the session. The parent session is not modified. r5r Nr0r4zquestion is requiredr:r$session already has an active streamrQr5rr r5rkr<rr5rkzbtw: r() track_btwT) ephemeralr5rrkwargsr)r6r5r)r%rhr&rrrrr@rrr(r:rGr r<rrarrrJrprqrrrrr r5rrr-r) r6rrrr current_stream_id _new_sessionr5r r6rr thrs rr&r&!s $l###j!!!! $$$7CFF########$6 \* + + 6667/5555564 #$$**,,H 472333#5t<<"  a a G++7,R"S\_``` a a a a a a a a+ a a a a a a a a a a a a a a a"666666Q 0$77N +g%9d++ Iaj.B//I-hssm--IO NN  I!*I NN " $ $F $$# $$$$$$$$$$$$$$$(((((( Id< )"6 8LLL  #"Hagq{It T!^DD    C IIKKK WIY=Qhlmyhz{{ | ||sP # AA AAA..B  B "DD D3 H  HHc h  t|dt|dn4#t$r'}t|t|cYd}~Sd}~wwxYw t |dn!#t $rt|ddcYSwxYwt|d st|dSddlm}td d |j j td d }d dd |_ | tjj|_| t%}t&5|t(<dddn #1swxYwYtjjddddlm}m |d |j |   fd}t3j|d}|t9||jdS)uPOST /api/background — run prompt in parallel background agent. Creates a hidden session, starts streaming in a daemon thread. Frontend polls /api/background/status for completed results. r5rnNr0r4zprompt is requiredrr r5rkr zbg: r(r)track_backgroundcomplete_backgroundc  t j j d ddlm}|}d}t |r|jndpgD]}t|tr| ddkr1| drGt| d pd }|r|}n |pd n#t$r d YnwxYw td z d dS#t$rYdSwxYw#t$r$  d YdS#t$rYYdSwxYwwxYw)u?Run the background agent, then mark the tracked task `done` with the last assistant reply so `/api/background/status` can surface it. Without this, `complete_background()` is never called and the result is lost — `get_results()` would see a forever-`running` task and return nothing. N)r5r)r_rIrrrrz(no answer produced)z(background task failed)rCTr)r-rr<rGr_r`reversedrr=r>r?rrr[rr) _Sessionrj_answer_m_contentbg_sidr r5 parent_sidrnrr6rs r_run_bg_and_notifyz._handle_background.._run_bg_and_notify"s! &   -     U::::::#==00"$KH$5$5t#RPRSSB%b$//!266&>>[3P3P vvh''! "266)#4#4#:;;AACCH"*$#J9ZDZ[[[[ U U U##J9STTTTT U  &////7747HHHHH        ##J9STTTTTT     sk EC C/.E/D ED  E !D00 D>:E=D>>E E/ E E+&E/*E++E/Tr)rr6r5)r%rhr&rrrrrGr r@r<rrrJrprqrrr:rrrrr r r5rrrr()r6rrr bgrr r r r r r5r rnrr6rs @@@@@@@@rr'r'!s $l###h $$$7CFF########$6 \* + + 6667/555556 h & & ( (F 270111666666Q 0$77N +g%9d++    B $fSbSk##BHGGIII  I#BGGIII " $ $F $$# $$$$$$$$$$$$$$$jllrr"GDDDDDDDDl#J ]FZGVDDD,,,,,,,,,,,,\  "4T B B BCIIKKK W' QSQ^__ ` ``s> + AAAA A66BB= FFFrrc|sdStt|ddpg}|r|d}t|tr|ddkrdt |dpd}dt |pd}||krdSd|d }t|ttfr|d krt||d <|rt||d <|j |dS) a2Materialize the current user turn for eager first-turn persistence. The streaming thread still receives ``pending_user_message`` so existing cancel/recovery/final-merge paths keep their current contract. Eager mode only adds a durable display-message checkpoint before the agent launches. NrrYrrr3rrIrrr attachments) rar@r=r>r?rrrrrrr) rrr rrr  latest_textmsg_textuser_msgs r/_checkpoint_user_message_for_eager_session_saver ;"sF GAz4006B77H" fd # #  6(:(:f(D(D((3vzz)'<'<'B#C#C#I#I#K#KLLKxxCI2 4 4 6 677Hh&&3//H*sEl++0 Q #J4"&{"3"3JhrcLt|pddvS)NrI)rIrzNew Chatr+)rs r"_is_default_or_empty_session_titler T"s& u{   ! ! # #'C CCrrrnfallbackc|t|pd}|s|Std|dg|p|S)NrIrr)rrr)rnr r.s r_provisional_title_from_promptr X"sL v|   " " $ $D  48898 D D PPr)rr<c||_||_||_||_||_||_||nt j|_t|dd}t|r*t||pd} | rt| s| |_ tdkrt||||j|dS)a Persist chat-start state according to webui.session_save_mode. ``deferred`` keeps the existing sidecar/WAL-backed behaviour: save pending fields but leave the display transcript empty until the agent merges the result. ``eager`` additionally writes the current user turn into messages so a process restart immediately after /api/chat/start preserves the prompt as a normal session message. Empty sessions are never saved here because this helper only runs after a non-empty message is validated. Nrreager)r<rr5r:r=r>rKr?r@r r rrr rJ) rrr r<rr5r6rrprovisional_titles r&_prepare_chat_start_session_for_streamr _"s(AKAG%A"A A'A)3)?::TY[[AAw--M)-88(:3 @[Q[\\  (%GHY%Z%Z ('AG"$$//7      FFHHHHHrct|dddkoGt|dd o5t|dd o#t|dd ot|dd S)Nrrrr:r=rrr_s r_is_hidden_empty_sessionr "s}7J'':5 2:t,, , 2-t44 4 21488 8 2?D11 1 r)r r5normalized_modelrM goal_relatedr r c 2|pg}|r|dndt|dd} | r|r|dndt5| tv} dddn #1swxYwY| r|r|dndd| ddS|r|d ndt ||s)|jt vrd }t j|jtj j } t|j} |r|d nd| 5|r|d ndt|} t||||||| dddn #1swxYwY| rtd|r|dndi} ddlm}||jd| d||||||jd }n,#t$$rt&dd YnwxYw|r|dndt+||r|dndt-}t5|t| <dddn #1swxYwY|r d t.| <|r|dndt1jt4|j|||| |f||dd }|| |j|j|d|jd}|r||d<|r||d<|S) zHPersist pending state, register an SSE channel, and start an agent turn.active_stream_checkNr:active_stream_lock_waitrfr rQ)rr:_statusstale_stream_cleanupTsession_lock_waitsave_pending_state)rr r<rr5r6rZturn_journal_submittedr)append_turn_journal_eventrr) r3r6rrr r<rr5rz-Failed to append submitted turn journal eventrrstream_registrationworker_thread_start)r5r r turn_id)r6r5r?r rrHeffective_model_provider)rr@rrrPr5rrYrprqrrrr r r api.turn_journalr r?r[rr~rrrrrr-rr?r)rrr r<rr5r rMr r current_activer6 session_lockwas_hidden_empty_session journal_eventr rr rgs r_start_chat_stream_for_sessionr "s#K*.7DJJ$%%%4#5t<< %15? ,---4  : :.'9N : : : : : : : : : : : : : : :  ,0 :DJJ' ( ( (d?$5  /3< )***!!$$$ 8AL,EEE !)!,777  I*1<88L'+5DJJ"###    ,0: '(((d#;A#>#> . #)                     4$]333,0:DJJ'(((dMW>>>>>>11 L$&*&"02      WWWFQUVVVVVW(,6DJJ#$$$$y!!!)-7DJJ$%%%4 " $ $F $$# $$$$$$$$$$$$$$$.)-I&)-7DJJ$%%%4  #lC 9k J"0,OO    C IIKKKl2 $$Y// H,&+"#>/=+, OsH A''A+.A+-?E88E<?E<0&G&H?H I00I47I4c td)aReturn the runner-local client when a supervised backend exists. Slice 4d wires the `/api/chat/start` selection point without silently falling back to the legacy in-process runtime when `runner-local` is explicitly requested. The supervised runner backend itself is intentionally not created in this helper yet; a later slice can replace this factory with the concrete client while keeping the route contract stable. z+runner-local chat backend is not configured)NotImplementedErrorrrr_runtime_runner_client_factoryr #s K L LLrctt|dipi}i}dD]}||vr ||||<|d|j|d|j|S)zAExpose only the legacy browser-facing chat-start response fields.r) r6r5r?r rrHr rr:r r6r5)r>r@rmr6r5)rrrgr8s r#_chat_start_response_from_run_startr #s769b117R88GH  ) ) '>>#CLHSM  V%5666  f&7888 Or goal_argsct|pd}|r|dkrdS|dvr|S|dvrdSdS)zCReturn the bounded RuntimeAdapter goal action for WebUI /goal args.rIr)pauseresume)rstopdonerrr)r actions r_runtime_adapter_goal_actionr ##si b ! ! ' ' ) ) / / 1 1F Vx''x $$$  ***w 5rc   ! t|dn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYwt|dpd}|rF ddlm }|d kr&| |st|d d Sn#t$rd}YnwxYw|rhtt|dd|sItt|d dp!t|d dpt|dd}|s||_t|dd}d!|r9t 5|t"v!dddn #1swxYwY!st%| ddlm}|t|dd n#t($rd YnwxYwddlmm} m} t|ddp|ddpd} | } t| o| dvo! } dx}x}x}}d}| r tt5|dp|j}n4#t$r'}t|t|cYd}~Sd}~wwxYw|dp|j}d|vr|dnt|dd}t;||\}}}| |j }ddlm }m!}dtdtdtdtDf !fd }tG| }|r=||}|$|j|| }tE|j%}n||j|| }|dd s/|d!d"krd#nd }tM|||$St|d%pd}|rK|l tt5|dp|j}n4#t$r'}t|t|cYd}~Sd}~wwxYw|Z|dp|j}d|vr|dnt|dd}t;||\}}}tO||g||||d &}tQ|)d'd(pd(}|*||d kr*| |j| d|d<tM|||$StM||S))z@Handle WebUI /goal command controls and optional kickoff stream.r5Nr0r4rkrIr_PROFILE_ID_RErCinvalid profilerrcontext_messagesr=r:F)r{)goal_command_payloadgoal_state_snapshotrestore_goal_staterr.)rr r rr r r<rr5)rr_actionrFc"||S)N)stream_runningrr)r5r r.r rr s r_legacy_goal_updatez1_handle_goal_command.._legacy_goal_updatey#s)##  )%     r) goal_delegaterTr agent_runningrQr5kickoff_prompt)rr r<rr5r r r r)+r%rhr&rrrr?rrZr rC rt rEr@rrkrrrPr{r[ api.goalsr r r rr$r<rrFr5rrrr>r update_goalrr(r rrPr )"r6rrrrequested_profiler has_persisted_turnsr r{r r r goal_action will_kickoffr<rr5r previous_goal_staterequested_modelr;rrr goal_adapter_actionrAcontrol_resultrrr stream_responser rr s" @@@rr(r(/#s$l#### $$$7CFF########$6 \* + + 6667/555556DHHY//5266<<>># # 3 3 3 3 3 3 I--n6N6NO`6a6a-7$5s;;; # # # "    #*It1L1LN_!`!`*" Az4 ( ( 8q,d33 8q0$77   # *)AI#5t<<N)  : :.'9N : : : : : : : : : : : : : : : ) %a ( ( (<<<<<<2271i3N3NOO  XWWWWWWWWWDHHVR((FDHHVR,@,@FBGGI//##))++K  U U  L =A@I@@)9[ (5dhh{6K6K6Zq{[[\\II ( ( (wA'' ' ' ' ' ' ' (((7++6qw 4'' HH% & & &,d33  3Z  3 3 /~/21!,\ZZZXXXXXXXX  c          7yAA  T--#39 )-    _((C88?C@@''' S==  q|-@| \ \ \ \!GDMWgf555 5 Wg  s AAAA A!!A?>A?;1C.. C=<C= FF #F 9 G G)(G) 6K K4 K/)K4/K486R// S 9SS S c  rdnd t|dnK#t$r>}t|t |cYd}~rSSd}~wwxYwrdnd t |dn8#t$r+t|ddcYrSSwxYwrdndt |dpd }|r] d d l m }|d kr=| |s(t|d d rSSn#t$rd}YnwxYw|rhttdd|sIt!tddp!tddptdd}|s|_rdndt |dd }|s't|drSSrdndt%|dpgdd}rdnd t'|dnK#t$r>}t|t |cYd}~rSSd}~wwxYw|dpj} d|vr|dntdd} rdndt+| | \d dlmm} m} m} m}| s |rd| dt8ffd fd } | |t:!}|t=d"|| j ||tddd#d$d%i& }nO#t<$rB}tC|d't |id()cYd}~rSSd}~wwxYwtE|}ntG||*}tI|%d+d,pd,}rd-ndtC|||)rSS#rwwxYw).Nvalidate_session_idr5rr0r4validate_profilerkrIrr rCr rrr r=normalize_messagerzmessage is requirednormalize_attachmentsr rresolve_workspacer<rr5r)rStartRunRequestbuild_runtime_adapterrruntime_adapter_runner_enabledr rFc pt|j|j|jp|jp|jpS)Nrr r<rr5r rM)r rr r<rr)r rMrr5r rr<s r_legacy_start_runz-_handle_chat_start.._legacy_start_run#sN5 ' 3%/<9!-05#*#3#E~%5    rcS)N)start_run_delegater)rr sr_legacy_adapter_factoryz3_handle_chat_start.._legacy_adapter_factory$s22FWXXXXr)legacy_adapter_factoryrunner_client_factoryz-runtime adapter selection returned no adapterrrouter) r5rr r<rkrrr4r rir5r r rrf)&rr%rhr&rrrrr?rrZr rC rt rEr@rrk_normalize_chat_attachments%_resolve_chat_workspace_with_recoveryrrFrrr r rr r>r r start_runr5r(r r rrP)r6rrMrr r r rr r r;r r rr r rArrrgrrr rr5r rr<s ` @@@@@@@rr)r)#sv-1; ()))t ( D, ' ' ' ' ( ( (wA'' ' ' ' ' '`   KKMMMM c (%)3 =!!!t :D.//AA : : :w 3S99 9 9V   KKMMMM Y :*.8 %&&&D 3 3 9r::@@BB  ' '777777$ 11.:R:RSd:e:e1w(93??F   KKMMMM E ' ' '$&!!! '  ._WQ 45P5PRc%d%d ."&:t,,<10$77<14d;;##  ' . . +/9 &'''T$((9b))**0022 7w 566b   KKMMMM a04= *+++1$((=2I2I2ORPPQTRTQTU +/9 &'''T (=a+AVAVWWII ( ( (wA'' ' ' ' ' 'T   KKMMMM W (((7++6qw 4'' HH% & & &,d33  15> +,,,$2Y  3 3 /~/               # " $ $1 (F(F(H(H1  ? t            Y Y Y Y Y Y C//+B*H?-.]^^^ **#O#$< #$/"+ '9d ; ;!/#&")+rr?rrrr) raw_attachmentsr rrr rO attr r r-s rr r F$sJ ot , ,KK dD ! ! Ktxx''E488J+?+?E2FFLLNNDtxx''-2..4466Dtxx''-2..4466D<4tDDC88F##D$$$ #"F xx ++H(D)) +"*J   c " " " "IIOO%%E K!!5"b"I"IJJJ rct|d}t|dd}|st |ddidS tt |dp|j}n4#t$r'}t|t|cYd }~Sd }~wwxYwt|j 5||_t|d p|j d |vr|d nt|d d d d \}}||_ ||_d d d n #1swxYwYd dlm}|5t"jd} t|t"jd<t"jd} t"jd} dt"jd<|j t"jd<d d d n #1swxYwY d dlm} t*5d dlm} m}| t3|j t|d d \}}}d } d dlm}d dlm}|||}|d}|s|d}|s|d}n+#t<$r}t?d|dYd }~nd }~wwxYwtA|tr/|!dr||\}}|s|r|}|s|r|}| ||||ddtE|j }d d!lm#}m$}m%}m&}m'}m(}m)} | t|j}!d"|jd#}"tU|j+pg}#tU|||}$|,|!|z|"||$t[$|j |%}%d d d n #1swxYwY|5| !t"j.dd n| t"jd<| !t"j.dd n| t"jd<| !t"j.dd n| t"jd<d d d n #1swxYwYn#|5| !t"j.dd n| t"jd<| !t"j.dd n| t"jd<| !t"j.dd n| t"jd<d d d w#1swxYwYwxYwt|j 5|%d&p|$}&||$|&}'||$|'}'|'|_/||#|$||#|&||_+|j0d'krtc|j+|j0|_0|2d d d n #1swxYwY tgd(r\d d)l4m5}(|(|j |j6pd |j7pd |j8|j |j0ts|j+t|d*d +n*#t<$rtt;d,YnwxYwt ||%d-pd|%d.drd/nd0|<d&|j+izd1|%=Dd2S)3zJFallback synchronous chat endpoint (POST /api/chat). Not used by frontend.r5rrIrz empty messagerr5r<Nrr5rr) _ENV_LOCK TERMINAL_CWDHERMES_EXEC_ASKHERMES_SESSION_KEYrJr)rrrrrrerr,z2[webui] WARNING: resolve_runtime_provider failed: T)rrrr)!_dedupe_replayed_context_messages*_merge_display_messages_after_agent_result#_restore_display_reasoning_metadata_restore_reasoning_metadata_sanitize_messages_for_api_context_messages_for_new_turn_workspace_context_prefixz#Active workspace at session start: aj Every user message is prefixed with [Workspace::v1: /absolute/path] indicating the workspace the user has selected in the web UI at the time they sent that message. This tag is the single authoritative source of the active workspace and updates with every message. It overrides any prior workspace mentioned in this system prompt, memory, or conversation history. Always use the value from the most recent [Workspace::v1: ...] tag as your default working directory for ALL file operations: write_file, read_file, search_files, terminal workdir, and patch. Never fall back to a hardcoded path when this tag is present.)r)rrrrpersist_user_messagerrsync_to_insights)sync_session_usagerk)r5rrrrrrrkz&Failed to update session cost trackingr completedr partialc&i|]\}}|dk ||S)rr)rrNrs rrSz%_handle_chat_sync..%s#JJJ1!z//q!///r)answerrrAr)>rrr?rr(r$r<rhr&rr5rFrr@r5r+r r]rrrrr`rrrrrrrr[rr=rr r r r r r r r rarrr[rPr rrrJrapi.state_syncr rrrrorrrr))r6rrrr<rrr5r old_cwd old_exec_askold_session_keyrrrrVrIr& r' rrrrrrrr r r r r r r workspace_ctxworkspace_system_msg_previous_messages_previous_context_messagesr_result_messages_next_context_messagesr s) rr*r*d$sf D&''A dhhy"%% & & , , . .C B7O4SAAAA$1$((;2G2G2V1;WWXX $$$7CFF########$  . .** G HHW   (*:d*B*BDHH% & & &PQSceiHjHj! !  1"!~)***************(''''' 88*..00%(^^ >"z~~&788 *..)=>>(+ $%+,< '( 888888888888888`C%%%%%% O O          ,B+A+AGWQ@PRV5W5WXX,, (FIyH VVVVVVPPPPPPFF,'779-- 4 # 3 3I 4 # 3 3I   MMM  )S)) )i.B.B9.M.M )$F$Fy$Q$Q!'G'&H )X) (IG"" !!6!8!8<   E                  65c!+6F6FGGMPakPPP !"&aj&6B!7!7 )-.L.LQPS.T.T)U)U &++*S03%?%?@Z`j`l`l%m%m%m %( ,FSO O O O O O O O O O O O O O O b C C ~t4444-4 >*# 0$77770< ,-& 3T::::3B /0 C C C C C C C C C C C C C C CY C C ~t4444-4 >*# 0$77770< ,-& 3T::::3B /0 C C C C C C C C C C C C C C C C ! . .!::j11O5O!>>>>? jj!1228b & ; = =Lff9yy{{j!*%==JJ JJJ     s"6B C #C?C C !A3E  E$'E$3BHH #H ( S 5BU2& U>2U6 6U>9U6 :U>BX33X7:X7?A=Z==$[$#[$c  t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw ddlm}m}t|d}|ddu}||d|d|dpd|d pd |d pg|d pd }i}|||d<|sd|d<|r||d|p|}t|dt|dS#t$r+}t|dt|idcYd}~Sd}~wwxYw)Nrnscheduler) create_job update_jobrkrlFrdeliverlocalrVr)rnr* rr- rVrr|Trrirrr5) r%rhr&rrr+ r, ryr?r(rnr[) r6rrr+ r, rkrlripost_create_updatess rr0r0%s$h ++++ $$$7CFF########$944444444/0C0CDD"hh'<==UJj>*%&!!)THHY''2788H%%+((7##+t    !  -4  *" ?9>  5 6  D*SY(;<<CC.?.D.DEEFFF 9997CFF+C8888888889s8 AAAA C7E E6 E1+E61E6c ddlm}n#t$rt}YnwxYwddddddg}t |D],}|||d-t|d|iS) z2Return available delivery platforms for cron jobs.r)_KNOWN_DELIVERY_PLATFORMSr. zLocal (save output only))r-rr5zOrigin (reply to creator)r)rr2 r[ frozensetrrr r()r6r2 rrs rrr4%s0<<<<<<< 000$-KK!!!0$>??%@AAI011FF4$//2C2CDDEEEE W{I. / //s  $$c t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwddlm} i}|D],\}}|dkr |dkrt|||<%||||<-n4#t$r'}t|t|cYd}~Sd}~wwxYw||d|}|st|ddSt|dt|dS) NrHr)r, rk Job not foundr4Tr/ ) r%rhr&rrr, rryr(rn)r6rrr, rrNrris rr1r1C%sg$h $$$7CFF########$$$$$$$ $JJLL  DAqH}}I~~:1==    $$$7CFF########$ *T(^W - -C 27OS111 WT*;C*@*@AA B BBs6 A?AAAB CB>8C>Cc t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwddlm}||d}|st|ddSt |d|ddS)NrHr) remove_jobr5 r4T)rrH)r%rhr&rrr7 r()r6rrr7 rs rr2r2[%s$h $$$7CFF########$$$$$$$ DN # #B 27OS111 WTT(^<< = == A?AAc |dd}|st|dSddlm}||}|st|ddSt |\}}|r#t |d|d t |d d St|dd lm }|}t|} tj t||| fd t |d |ddS)NrHrIr9 r)get_jobr5 r4Falready_runningr)rrHrri rTT)rrrr)rrHr)r?r&rr: rUr(rMrMrZrUrrrrr) r6rrHr: rir; ri rU _profile_home_execution_profile_homes rr3r3h%s9 XXh # #F /7-...!!!!!! '&//C 27OS111/77OW;&DU',Wa'8'8::;; ;v433333**,,M8== -S-I`4ajnooouuwww WTVyII J JJrc|dd}|st|dSddlm}|||d}|rt |d|d St|d d S) NrHrIr9 r) pause_jobr9r9Tr/ r5 r4)r?r&rr? r()r6rrHr? rs rr4r4%s XXh # #F /7-...###### Yvdhhx&8&8 9 9 9F 7f55666 w - --rc|dd}|st|dSddlm}||}|rt |d|dSt|dd S) NrHrIr9 r) resume_jobTr/ r5 r4)r?r&rrB r()r6rrHrB rs rr5r5%s XXh # #F /7-...$$$$$$ Z  F 7f55666 w - --rc|st|ddS t|S#t$rt|ddYdSwxYw)Nr@r0r4)r&rr)r6r5s r _git_sessionrD %sh  G*+++t:&&&  G(#...tts%AAcRt||}|dSt|jSr;rD rr<r6r5rAs r_git_session_workspacerH %s,7J//Gt ! " ""rcVt||}|dS|t|jfS)NrrF rG s r_git_session_and_workspacerJ %s17J//Gz D*++ ++rct|dd}|sdS ddlm}m}|5||vcdddS#1swxYwYdS#t$rYdSwxYw)Nr:Fr)rr)r@r`rrr[)rAr6rrs r_git_locked_by_active_streamrL %s!3T::I u44444444  ( (' ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( ( uus' ?2 ?6?6? A  A cddlm}m}m}|s"t ||d|ddddSt |rt ||d d d dSd S) Nr)rrWORKSPACE_GIT_DESTRUCTIVE_ENV!workspace_git_destructive_enabledz7Destructive workspace Git operations are disabled. Set z=1 to enable them.destructive_git_disabledrMr5TzQA session run is active. Wait for it to finish before running this Git operation. active_streamrQF)rrrrN rO rrL )r6rArrrN rO s r!_git_reject_destructive_if_unsaferR %s - , . .    {Jg{{{*       t#G,,    c       t 5rct|j}t||ddgd}|dS ddlm}m}t|d||iS#|$r}t||cYd}~Sd}~wwxYw)Nr5rIrTrqr~) rrNrH r?rrrrsr(r)r6r7rPr<rrrsrs rrr%s &,  B&w|bT0J0J10MNNIt$CCCCCCCC5**Y"7"78999 $$$########$"A((B-B<BBct|j}t||ddgd}|dS ddlm}m}t|d||iS#|$r}t||cYd}~Sd}~wwxYw)Nr5rIrT)rr git_branchesbranches) rrNrH r?rrrrV r(r)r6r7rPr<rrrV rs rrr%s &,  B&w|bT0J0J10MNNIt$EEEEEEEE:||I'>'>?@@@ $$$########$rT c t|j}t||ddgd}|dS|ddgd}|ddgd}|st |dS dd lm}m}t|d ||||iS#|$r}t||cYd}~Sd}~wwxYw) Nr5rIrTr rrxz path required)rrgit_diffdiff) rrNrH r?r&rrrrY r(r) r6r7rPr<r rrrrY rs rrr&s  &,  B&w|bT0J0J10MNNIt 66&2$   "D 66&:, ' ' *D -7O,,,$AAAAAAAA688ItT#B#BCDDD $$$########$s$B66C;C CCrc ht|t|t|ddpdd|S)Ncode git_failed)rr\ r5)r(r+r@)r6errrs rrr&sJ $S))C66F,      rc|d}|+|dr|dg}t|tr|g}t|tst dd|DS)Npathsr zpaths must be a listc,g|]}t|Srr)rr s rr{z(_git_paths_from_body..%&s , , ,$CII , , ,r)r?r=rrarh)r raw_pathss r_git_paths_from_bodyrc &s!!ITXXf--XXf%%& )S!! K i & &1/000 , ,) , , ,,rc t|dt|}t||d\}}|dSt||rdSddlm}m}t|d|||dS#t$r'}t|t|cYd}~Sd}~w|$r}t||cYd}~Sd}~wwxYw)Nr5Tr)rr git_stagerr~) r%rc rJ rR rrrre r(rhr&rr)r6rr` rAr<rrre rs rr6r6(&s$l###$T**7lASTT  4 ,Wg > > 4BBBBBBBBii 5.I.IJJKKK $$$7CFF######## $$$########$::A5A5$A55 C?B!C!C)B>8C>Cc t|dt|}t||d\}}|dSt||rdSddlm}m}t|d|||dS#t$r'}t|t|cYd}~Sd}~w|$r}t||cYd}~Sd}~wwxYw)Nr5Tr)rr git_unstagerf ) r%rc rJ rR rrrri r(rhr&rr)r6rr` rAr<rrri rs rr7r7:&s$l###$T**7lASTT  4 ,Wg > > 4DDDDDDDDkk)U.K.KLLMMM $$$7CFF######## $$$########$rg c  t|dt|}t||d\}}|dSt||rdSddlm}m}t|d|||t| ddS#t$r'}t|t|cYd}~Sd}~w|$r}t||cYd}~Sd}~wwxYw)Nr5Tr)rr git_discarddelete_untracked)rl rf )r%rc rJ rR rrrrk r(rr?rhr&rr)r6rr` rAr<rrrk rs rr8r8L&sF$l###$T**7lASTT  4 ,Wg > > 4DDDDDDDD "{%)$((3E*F*F%G%G      $$$7CFF######## $$$########$s;:BBAB C%!C=C%C% C C% C%rmrcbddlm}|pd}||dt5ddlm}m}m}m }tt|ddpd } tt|d dpd pd} | r || | n |} || \} } }d} dd l m}dd lm}||| }|d }| s|d} |s|d}n2#t$$r%}td|Yd}~nd}~wwxYwt)| tr/| dr|| \}}|s|r|}|s|r|}d|dd|dg}| | ||d} ddlm}|d|\}}|g|re|jj||}t|jdjjpd cdddSn2#t$$r%}td|Yd}~nd}~wwxYwddlm}|| | ||ddgdtAj!j"dd }|#||gdtAj!j"dd!}t|d"pd cdddS#1swxYwYdS)#NrrrCzgit commit messager)rrrrrrIr5rrrrerr,z9git commit message runtime provider resolution failed: %srrrrrrrrrzIgit commit message auxiliary model failed; falling back to main model: %srrTzgit-commit-message-rrrr)$rrrrrr`rrrrrr@rrrrrr?r[rr=rrrrrrrrrrrrprqrrr)rmrrArr`rrrr session_modelsession_providermodel_for_resolutionrrrrrrrrrrrrrrrrgrrrs r_llm_git_commit_messagerq h&s,,,,,,!99;;HyN  7 7 8  W?W?             GGWb99?R@@FFHH ww0@"EEKLLRRTT\X\ / ' ' 7G H H H,,..  7M6LMa6b6b3 ^^  Z R R R R R R L L L L L LBB((C GGI..M! 5!$!4!4! 5!$!4!4 Z Z Z LLTVX Y Y Y Y Y Y Y Y Z nc * * *~/H/H/S/S * B B> R R GX  (W ( ' ! *h *!)- 8 8 4 4  ' &$    j H H H H H H$=$=)%%% !J %)%%?6==#%>8+A.6>D"EEKKMMCW?W?W?W?W?W?W?W?D j j j LLdfh i i i i i i i i j &%%%%%##!CTZ\\-=bqb-ACC    ''$(!#@$*,,*:2A2*>@@ (   6::.//5266<<>>oW?W?W?W?W?W?W?W?W?W?W?W?W?W?W?W?W?W?sjBL$AD43L$4 E#>EL$E##AL$ > 4CCCCCCCC**YB0G0GHHIII $$$7CFF######## $$$########$s:,A8A85A88 CB$C$C,C;CCc  t|ddt|}t||d\}}|dSt||rdSddlm}m}t||||dd|S#t$r'}t|t|cYd}~Sd}~w|$r}t||cYd}~Sd}~wwxYw)Nr5rTr)rrgit_commit_selectedrI) r%rc rJ rR rrrr| r(r?rhr&rr)r6rr` rAr<rrr| rs rr<r<'s!$lI...$T**7lASTT  4 ,Wg > > 4LLLLLLLL--i)R9P9PRWXXYYY $$$7CFF######## $$$########$s:;BB6B CB4.C4C<C CCr c t|dt||d\}}|dS|dvrt||rdSddlm}m}m}m}|||d} t|| ||S#t$r'} t|t| cYd} ~ Sd} ~ w|$r} t|| cYd} ~ Sd} ~ wwxYw)Nr5T>rrr)rr git_fetchgit_pullgit_push)rrr) r%rJ rR rrrr~ r r r(rhr&rr) r6rr rAr<rrr~ r r actionsrs rr=r=&'s1$l###7lASTT  4 % % %*KGU\*]*] %4VVVVVVVVVVVV   /'&/)44555 $$$7CFF######## $$$########$s:+A6A60A66 CB"C"C*B?9C?Cc L t|dddt||d\}}|dSt||rdSddlm}m}||t |ddt |dd|d t|d t |d d  }t|d|d|d|d|dddS#t$r'}t|t |cYd}~Sd}~w|$r}t||cYd}~Sd}~wwxYw)Nr5refr Tr)rr git_checkoutrIr. new_branchtrack dirty_modeblock)r r r rrW current_branchr)rr~rW r r) r%rJ rR rrrr rr?rr(rhr&r)r6rrAr<rrr rrs rr>r><'s$lE62227lASTT  4 ,Wg > > 4EEEEEEEE  ## $ $ )) * *xx --txx(())488L'::;;     zz(++"JJz22"(**-=">">!::i44       $$$7CFF######## $$$########$s;-EEDE F#F;F#F# FF#F#c0 t|dddt||d\}}|dSt||rdSddlm}m}||t |ddt |dd|d t|d  }t|d|d |d |d|dd|ddt|d|dt|d|dd|dd S#t$r'}t|t |cYd}~Sd}~w|$r}t||cYd}~Sd}~wwxYw)Nr5r r Tr)rrgit_stash_and_checkoutrIr. r r )r r rrW r r stash_namestashedrestored_stashrestore_failed restore_error restore_stash) rr~rW r rr r r r r r ) r%rJ rR rrrr rr?rr(rhr&r)r6rrAr<rrr rrs rr?r?^'s.#$lE62227lASTT  4 ,Wg > > 4OOOOOOOO''  ## $ $ )) * *xx --txx(())     zz(++"JJz22"(**-=">">!::i44$jjr:: 9 5 566"(**-=">">"&vzz2B'C'C"D"D!'OR!@!@!'O!>}} 7w 0#66 6 ==?? 88K(( P7$NOOO M& ! ! ! ! MMOOOtF|<<===  (0007OA..////////0sW AAAA AA=<A=A E 8E AE FE<6F<Fc t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|ddS| rt|dS| | ddd t|d |d|jd S#tt f$r'}t|t#|cYd}~Sd}~wwxYw) Nr5r r0r4rz Cannot save: path is a directoryrrIrrT)rr r )r%rhr&rrrr'rr<rzr write_textr?r(r=rrr+r s rrArA's$lF++++ $$$7CFF########$6 \* + + 6667/555556 0d1;//f>>}} 7w 0#66 6 ==?? Dw BCC C$((9b11GDDD D$v, @UVV     (0007OA..////////0sW AAAA AA=<A=A E#E2AEFF;FFc ( t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| rt|dS|j dd| | dd d t|dt|t|jd S#tt f$r'}t|t#|cYd}~Sd}~wwxYw) Nr5r r0r4zFile already existsTrrrIrrr )r%rhr&rrrr'rr<rzrrr r?r(rfrr+r s rrBrB's$lF++++ $$$7CFF########$6 \* + + 6667/555556 0d1;//f>> ==?? 7w 566 6 D4888$((9b11GDDD D#f.@.@akARAR.S.S*T*TUU     (0007OA..////////0sQ AAAA AA=<A=A E B EF*F F Fc t|dddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|ddS|d }|rd|vsd|vrt|d S|j |z }| rt|d |d S| |t| t|j}t|d |d|d S#ttt f$r'}t|t#|cYd}~Sd}~wwxYw)Nr5r new_namer0r4rrr zInvalid file namezA file named "z" already existsT)rold_pathnew_path)r%rhr&rrrr'rr<rzrrrenamerfr(rrgr+)r6rrrr4r destnew_rels rrCrC's$lFJ7777 $$$7CFF########$6 \* + + 6667/5555560d1;//f>>}} 7w 0#66 6 #))++ 53(??dh.>.>w 344 4}x' ;;== Mw K K K KLL L dd&&tAK'8'899::4=A>A F3F1F5A"FG/G GGc  t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| rt|dS| dt|dt| t|jdS#tttf$r'}t|t|cYd}~Sd}~wwxYw) Nr5r r0r4zPath already existsT)rr )r%rhr&rrrr'rr<rzrr(rfrrgr+r s rrDrD's$lF++++ $$$7CFF########$6 \* + + 6667/555556 0d1;//f>> ==?? 7w 566 6 T """ D#f.@.@akARAR.S.S*T*TUU     10007OA..////////0sQ AAAA AA=<A=A D( AD((E&?E!E&!E&c| t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|d|dStj }|dkr%tj ddt|gnU|d kr'tj d d t|zgn(tj d t|jgt|d |ddS#tt t"f$r'}t|t%|cYd}~Sd}~wwxYw)Nr5r r0r4File not found: Darwinrz-RWindowsz explorer.exez/select,zxdg-openTr )r%rhr&rrrr'rr<rzr6r subprocessPopenrr(rrgr+)r6rrrrrs rrErE's$lF++++ $$$7CFF########$6 \* + + 6667/5555560d1;//f>>}} Bw ;6 ; ;SAA A"" X    fdCKK8 9 9 9 9 y  nj3v;;.FG H H H H  j#fm*<*<= > > >tF|<<===  10007OA..////////0sQ AAAA AA=<A=AE=B+E==F;F60F;6F;c t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}t|dt|dS#tttf$r'}t|t|cYd}~Sd}~wwxYw)u"Resolve a relative workspace-rooted path into an absolute on-disk path. The right-click "Copy file path" action (#1764) wants to put the absolute path on the user's clipboard so they can paste it into a terminal, editor, or anywhere else without having to round-trip through the OS file browser. The frontend can't compute the absolute path on its own — `safe_resolve` joins against the session's workspace root which only the server knows. The handler here is a thin lookup; no filesystem mutation, no OS-specific dispatch. We do NOT require the target to exist (unlike `_handle_file_reveal`) — copying the path of a just-deleted file is still useful, and refusing would force callers to special-case 404s for an action that cannot fail destructively. r5r Nr0r4Tr ) r%rhr&rrrr'rr<r(rrgr+r s rrFrF(s:$lF++++ $$$7CFF########$6 \* + + 6667/5555560d1;//f>>s6{{;;<<<  10007OA..////////0sJ AAAA AA=<A=AC D D<DDc D t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|d|dSt|}ddl m }| d i}t|tsi}| d d }| d d } |r1| r/||r| |t!|dz}| d d} t#j| } | t&j dd } t&j dd} t&j dd}ddddt&j| ddddt&j| dddt&j|dddg}|D])}|r%t| r|} n*| t|d| dSt/j| |gt3|d|ddS#tt4t6f$r'}t|t9|cYd}~Sd}~wwxYw) aOpen a workspace file or folder in VS Code (#2735). Reads optional ``vscode`` config block from config.yaml: vscode: command: code # executable on PATH; defaults to "code" host_path_prefix: /home/user/projects # Docker host path container_path_prefix: /app/workspace # matching container path If ``host_path_prefix`` and ``container_path_prefix`` are both set, paths that begin with ``container_path_prefix`` are translated to the host prefix before being handed to VS Code. This lets users running Hermes WebUI inside Docker still open files in their local editor. r5r Nr0r4r rrZvscodecontainer_path_prefixrIhost_path_prefixrr\ LOCALAPPDATA PROGRAMFILESzC:\Program FileszPROGRAMFILES(X86)zC:\Program Files (x86)z/usr/local/bin/codezD/Applications/Visual Studio Code.app/Contents/Resources/app/bin/codez /usr/bin/codez/snap/bin/codeProgramszMicrosoft VS Codebinzcode.cmdzVS Code command not found: zn. Install VS Code and ensure the 'code' CLI is on PATH, or set vscode.command in config.yaml to the full path.Tr )r%rhr&rrrr'rr<rzr`r[r?r=r>rrorwhichr]rr rr r r(rrgr+)r6rrrr target_strr vscode_cfgcontainer_prefix host_prefixr resolved_cmd_local_app_data _prog_files_prog_files_x86_vscode_fallbacksfbs rrGrG8(sy$lF++++ $$$7CFF########$6 \* + + 6667/555556:0d1;//f>>}} Bw ;6 ; ;SAA A[[  655555XZZ^^Hb11 *d++ J%>>*A2FF nn%7<<  J  J 0E0EFV0W0W J$z#6F2G2G2H2H'IIJnnY//|C((   !jnn^R@@O*..9LMMK jnn-@B[\\O&V  _j:MuV`aa [*=ujQQ _.A5*UU ! (  $r((//++#%LE  IcIII  , 3444tF|<<===  10007OA..////////0sW AAAA AA=<A=AK!G K!2.K!!L8LLLct|dd}|dd}|dd}|st|dSt |}t|rt|d|S|rW |dd n>#ttf$r*}t|d t|cYd}~Sd}~wwxYw t|n4#t$r'}t|t|cYd}~Sd}~wwxYwt}t!fd |Drt|d S|t|pjd t'|t)|d|dS)Nr rIrrFr z#Path points to a system directory: TrzCould not create directory: c3JK|]}|dtkVdS)r Nr)rr rws rrxz(_handle_workspace_add..(s2 , ,11V9A  , , , , , ,rzWorkspace already in list)r rrrl)r'r?rr&rr`rer&rrgrr+r%rhrrrrrrr() r6rpath_strr auto_creatercrwssrws @rrHrH(s+)&")=)=)C)C)E)EFFH 88FB   % % ' 'D((8U++K 07./// X))++3355Iy))O7M)MMNNNU U OOD4O 8 8 8 8) U U Uw Sq?Q?Q S STT T T T T T T U$ %h / / $$$7CFF########$   C , , , , , , ,,,977888JJA77888C WT55 6 66s<C77D2D-'D2-D26E E7E2,E72E7c|ddst|dSt}fd|D}t |t |d|dS)Nr rIr c,g|]}|dk|Srr)rr r s rr{z,_handle_workspace_remove..(s' 3 3 3QvY(221222rTr r?rr&rrr()r6rr r s @rrIrI(sxx##))++H 07.///   C 3 3 3 3c 3 3 3CC WT55 6 66rc||dd}|dd}|r|st|dSt}|D]}|d|kr||d<nt|ddSt |t |d|dS) Nr rIrzpath and name are requiredzWorkspace not foundr4Tr r )r6rr rr r s rrJrJ(sxx##))++H 88FB   % % ' 'D :4:78999   C 88 V9 AfI E !713777C WT55 6 66rc|dg}|rt|tst|dSt }d|D}g}t }|D]N}|}||vr4||vr0|||||O|D]!}|d|vr||"t|t|d|dS)aReorder workspaces by providing an ordered list of paths. Accepts {"paths": ["path1", "path2", ...]}. The workspaces list is rewritten so that entries appear in the given order. Any workspace not included in the request is appended at the end (preserves data). r` z$paths is required and must be a listc i|] }|d| Srr)rr s rrSz-_handle_workspace_reorder..(s)))qy!)))rr Tr ) r?r=rar&rrrrrrr() r6rr` r by_path reorderedseenrwr s rrKrK(s HHWb ! !E D 5$//D7BCCC   C))S)))GI 55D  GGII <|d kr8| D]!}t||t|"ttd}|s|st||dpd}t!|pt!|pt!| S)zResolve an approval through the existing callback path. Slice 3b keeps the RuntimeAdapter as a protocol translator: it delegates to this legacy helper rather than owning approval queues or callback state. NFroTrrr r rIcg|]}||SrrrrNs rr{z,_resolve_approval_legacy..2)s222a2222rcg|]}||Srrr s rr{z,_resolve_approval_legacy..2)s5S5S5SAQR5Sa5S5S5Sr)rrAalwaysr)rDrCr?r=rarc rPrFror@rjr?r@rArErGr)rror rf found_target gateway_keysrr0r1gw_queuegw_entrygw_datakeys_from_pendingall_keysrNgateway_resolveds r_resolve_approval_legacyr (sGLL :6:6 S!! eT " " 3 3 )% 0 0 # #HAuyy//;>>"+%)A,,'+ ?#G*/9)%)A,,,T&d2  ( S$'''  3 3)%)M":":k"I"I",sD11&d2  $&*3//H $CMMA--#A;"(FD99?R&{{>::^w{{=Z\?]?]>^ $  hl3'' . . 68C= 6 'Xc]1-=s8C=?Q?Q R R R R 'T1 5 5 5u:6:6:6:6:6:6:6:6:6:6:6:6:6:6:6z\cj N33W MSU8V8V7Whj22,2225S5S5S5S5SSH $$$ $ $A C # # # # $ 8   ! !A C # # # a  !4555Y;Y3CUSSSXWX == KD!122 K${:K:K6KKsGG  G$'G$c|dd}|st|dS|dd}|dvrt|d|S|dd}d d lm}m}|r.|t }||||j}nt |||}t|||d S) Nr5rIr/r deny)rrAr r zInvalid choice: rorr)approval_delegate)rr ) r?r&rrrr respond_approvalrr() r6rrr rorrrArs rrLrLF)s ((< $ $C 674555 XXh ' 'F :::77v77888((="--KXXXXXXXX  @--@XYYY  % %c; ? ? H %c; ? ? WR622 3 33r clarify_idrgcn|rddlm}||||St||d}t|S)zEResolve clarify through the existing callback path without new state.r)rvFr)r rvrur)rr rgrvresolveds r_resolve_clarify_legacyr Y)sV@555555$$S*h???sH%@@@H >>rcf|dd}|st|dS|d}||d}||d}t|pd}|st|dS|dd}d d lm}m}|r.|t }||||j }nt|||}|st|d d dddSt|d|dS)Nr5rIr/rgr r zresponse is requiredr rr)clarify_delegateFzPClarification prompt expired or not found. The agent may have already proceeded.T)rrrrQr5)rrg) r?r&rrrrrr respond_clarifyrr() r6rrrgr rrrArs rrMrMg)sv ((< $ $C 674555xx ##H88H%%88H%%8>r""((**H 472333,++JXXXXXXXX  @--?VWWW  $ $S*h ? ? H $S*h ? ? g     WTx88 9 99rc,eZdZdZdZdZdZdZdS)_ManualCompressionMemoryHandlercRtj|_d|_i|_dSr;)ioBytesIOrr sent_headersselfs r__init__z(_ManualCompressionMemoryHandler.__init__)s$Z\\  rc||_dSr;r5)r rs rrz-_ManualCompressionMemoryHandler.send_response)s  rc||j|<dSr;)r )r r8r-s rrz+_ManualCompressionMemoryHandler.send_header)s!&#rcdSr;rr s rrz+_ManualCompressionMemoryHandler.end_headers)s rc|jd}|rtj|niS)Nr)rgetvaluerrr)r rQs rrz'_ManualCompressionMemoryHandler.payload)s:j!!##**733"%-tz#2-rN)r __module__ __qualname__r rrrrrrrr r )s_ '''   .....rr c|tjn|}ttD]\}}|ddkrt |dp|dp|}||z t krt|ddS)Nrrrr)rKrarrr?r#_MANUAL_COMPRESSION_JOB_TTL_SECONDSrP)rrrirs r"_manual_compression_cleanup_lockedr )s$)+++#C17799::44S 778   ) ) 377<00PCGGL4I4IPSQQ  A A A $ ( (d 3 3 3 44rc|dpd}|dv||d|d|d|dd}|d krJ|d }t|tr||d |d<d |d <n|d krGd|d <|d pd|d <t |dpd|d<nL|dkrFd|d <|d pd|d <t |dpd|d<|S)Nrr>rrr5 focus_topicrr)rrr5r rrr rTrrFCompression failed error_statusrrzCompression cancelledrQ)r?r=r>r r)rirrrs r"_manual_compression_status_payloadr )sq WWX   +)F22ggl++ww}--ggl++ggl++ G"" fd # # # NN6 " " "" 7   777++C/C"%cggn&=&=&D"E"E ;   777++F/F"%cggn&=&=&D"E"E Nrc t} t|}n#t$rd}YnwxYw|Lddlm}||dt 5t||dddn #1swxYwYnt||t|j pd}| }t5t |}|s ddddStj}|dks*t|t r| dr?|dt%|pi dpd||d n|d ||d ddddS#1swxYwYdS#t&$r} t d || t5t |}|r;|dd t+| dtjd dddn#1swxYwYYd} ~ dSYd} ~ dSd} ~ wwxYw)Nrrzmanual compressionrrrrr )rrr rr )rrrz3Manual compression worker failed for session %s: %sCompression failed: )r rrrrrrr"rrr_MANUAL_COMPRESSION_JOBS_LOCKrr?rKr=r>r rr[r~r+) rrmemory_handlerrArrrrirrs r_run_manual_compression_jobr )s466N0 !#&&GG   GGG    4 4 4 4 4 4??I]ou?vv ? ?(>>> ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? %^T : : :^*1c22 ((** *  *..s33C         )++C}}Jw$=$=}WAUAU} ")!$gm%8%8%A%A%YEY!Z!Z(.&)  "(")&)                  ,    LcSVWWW *  *..s33C  ")!N8L8L!N!N(+&*ikk                             s!F" 0F"0(F"A5) F"5A99F"<A9=AF"F F"-BF F"FF"FF"" I,#I AH3' I 3H7 7I :H7 ;I  Ic L t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwt|dpd}|st|dS t |}n!#t$rt|ddcYSwxYwt|ddrt|ddSt|d p|d pddd pd}d|i}|r||d <tj }t5t|t|}|r_t|} | d d krt|| cdddSt|d||d ||d} | t|<dddn #1swxYwYt!jt$||fd|ddd} | t5t|tt|| cdddS#1swxYwYdS)Nr5rIr/r0r4r:@Session is still streaming; wait for the current turn to finish.rQr topicrrr)r5r rrrzmanual-compress-rT)rrrr)r%rhr&rr?rrrr@rKr r rr r(rPrrr r) r6rrrrr job_bodyrrexisting_payloadriworkers rr!r!)s$l#### $$$7CFF########$ dhh|$$* + + 1 1 3 3C 6745556    6667/555556q$d++e7^`cddddhh}--H'1B1BHbIIOOQQRVSVRVW_[_Kc"H."- )++C &,,*3///+//44  4A(KK ##H--::"233 ,,,,,,,, % ( (d 3 3 3&   ), %-,,,,,,,,,,,,,,,0 *8_ )BQB ) ) F  LLNNN &ff<=U=Y=YZ]_b=c=cddeeffffffffffffffffffsT A?AAB B>=B>A#H -HH  H 6JJ Jct|pd}|st|dSt5t t |}|s t|dd|dcdddSt|}t||cdddS#1swxYwYdS)NrIr/Tidle)rrr5) rrr&r r rr?r(r )r6rrirs rrr2*s% ciR..   C 674555 & # #*,,,&**3// QWTV3OOPP # # # # # # # # 5S99'"" # # # # # # # # # # # # # # # # # #s>B3B33B7:B7c $%d}d}d} t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwt|dpd}|st|dSt|dp|dpddd pd} t |}n!#t$rt|d d cYSwxYwt|d drt|d dS ddl m } | |j } t| dkrt|dSd$d7$fd %$fd} d7%fd } ddl m} ddlm}ddlm}ddl}| | |jt|dd\}}}d} ||j|}|d}|s|d}|s|d}n2#t0$r%}t2d|Yd}~nd}~wwxYwt7|tr9|dr$| |\}}|s|r|}|s|r|}|st|dSt=| }t|d dt|d dt?j t|d!dt|d"df}| |}|!||||d#d$tE|%}|j#$|||&}| |}| |||||'}| %|5t|d dt|d dt?j t|d!dt|d"df} | |krt|d(dcdddS| |j |krt|d)dcdddS||_ ||_&g|_'d|_(d|_)g|_*d|_+tY|d*+}!|!r t[dt|!d,z nd|_.|!r||!d-nd|_/d}"t7|t`r?|d.p)|d/p|d0}"||"p ||pd|_1|2dddn #1swxYwYtg|4|j |j'|j(|j)|j*|j+t|d1dt|d2dd3z}#tk|d$|#||d4S#t0$rE}t2d5|t|d6tm|cYd}~Sd}~wwxYw)8Nct|tsdSt|dpd}|r|dkrdS|dd}t|tr dd|D}nt|pd}d|dd}|d p|d }|d }t|trt|nd }|s|s|sdS||||d S)NrrIrrrc3K|]k}t|trT|ddk0t|dp|dpdVldS)rr.rrINrrvs rrxzH_handle_session_compress.._anchor_message_key..N*sa&&,-55==F+B+BAEE&MM;QUU9%5%5;<<+B+B+B+Brr3r2_tsrr r)rrr.r ) r=r>rr?rarrrro)rrrr.rHrr attach_counts r_anchor_message_keyz5_handle_session_compress.._anchor_message_keyF*s`!T"" 4155==&B'' tv~~4%% 2&& gt $ $ &99 DD w}"%%Dxx %%++--dsd3 UU5\\ /QUU;//eeM** +5k4+H+HOs;'''a  L  4B\RRRrcPd}t|pgD]}t|tst|dpd}|dkrVt|dtst|dpd}|stjdd|}d|vsd|vr|cSdS) NrrIrrrr3zcontext compactionzcontext compression) r r=r>rr?rrrr)rr.rrrrHs r"_compression_summary_from_messageszD_handle_session_compress.._compression_summary_from_messages]*s(.b))  Aa&& quuV}}*++1133D{""aeeI..44 !%% **0b117799G 6&#w//5577D$ 44(DJJLL88 9trct|tsdS|}|sdStjdd|}t |dkr |ddd}|S)Nrr3i@i:r)r=rrrrro)raw_textrg s r_compact_summary_textz7_handle_session_compress.._compact_summary_textr*sr(C(( 4nn 4fVS#&& s88c>>#Y###C rr5rIr/r r rr0r4r:r rQr)r z?Not enough conversation to compress (need at least 4 messages).c`d}|pgD]}t|ts|dd}t|tr dd|D}nt |pd}|t |z }td|S)a0Fallback heuristic token estimate when runtime metadata helpers are absent. Uses whitespace token-like word counting only. This intentionally over/under-estimates BPE token counts (roughly around x3/x4 scale), and is only for resilient fallback behavior. rrrIrc3K|]R}t|tt|dp|dpdVSdSr.rrINr=r>rr?rvs rrxz]_handle_session_compress.._fallback_estimate_messages_tokens_rough..*sn--%a..-AEE&MMCQUU9-=-=CDD------rr) r=r>r?rarrrorr)r2rcrr content_texts r(_fallback_estimate_messages_tokens_roughzJ_handle_session_compress.._fallback_estimate_messages_tokens_rough*sEZR 3 3!!T**%% 2..gt,,6#'99--!(---$$LL $'w}"#5#5L\//11222q%== rc||n |}dt|dt|d}|d|d|d|rd|ndd }d |d |d d |d r |d d zndzdz|d<|S)zOLightweight fallback summary to keep /session/compress usable in tests/runtime.Nz Compressed: u → z messageszRough transcript estimate: ~u → ~z tokenszFocus: )headline token_linenoteu([CONTEXT COMPACTION — REFERENCE ONLY] rr r rIzCompression completed.reference_message)ror?)original_messagescompressed_messages before_tokens after_tokensr r rSr s r&_fallback_summarize_manual_compressionzH_handle_session_compress.._fallback_summarize_manual_compression*s+7+C<H/+///DG -h--<(----4[[-@-@H76?T))bJ++ ' ( Nrc^ ddlm}||S#t$r|cYSwxYw)Nr)estimate_messages_tokens_rough)r_r& r[)r2r& r s r_estimate_messages_tokens_roughzA_handle_session_compress.._estimate_messages_tokens_rough*sb FOOOOOO55d;;; F F F??EEEEE Fs ,,cl ddlm}|||||S#t$r|||||cYSwxYw)Nr)summarize_manual_compression)!agent.manual_compression_feedbackr) r[)r r! r" r# r r) r$ s r_summarize_manual_compressionz?_handle_session_compress.._summarize_manual_compression*s ZZZZZZ33%'!     ==%'!   s 33rr5rrerr,z3resolve_runtime_provider failed for compression: %srz*No provider configured -- cannot compress.r=r>r?rTr)current_tokensr )r z>Session stream state changed during compression; please retry.z6Session was modified during compression; please retry.F)auto_compressionrrYr r r compression_anchor_visible_idxcompression_anchor_message_key)rrr:r=r>r?r. r/ )rrArSr z%Manual session compression failed: %sr r;)7r%rhr&rr?rrrr@r+r rror`rrrrruntime_providerrrrrrr[rr~r=rrrar@rrr context_compressorrrr rr:r=r>r?r rr. r/ r>compression_anchor_summaryrJr,rr(r+)&r6rr r r rrr rr rr' r+ r<r_runtime_provider _run_agentresolved_modelresolved_providerresolved_base_urlresolved_api_keyrrrrr original_stream_state approx_tokensr compressed new_tokensrScurrent_stream_state visible_after summary_textsession_payloadr r$ s& @@rr"r"E*sSSS.*   $l#### $$$7CFF########$ dhh|$$* + + 1 1 3 3C 674555dhh}--H'1B1BHbIIOOQQRVSVRVW_[_K6    6667/555556q$d++e7^`cdddOI<<<<<<--aj99 x==1  w abb b ! ! !.      " F F F F F       2 "!!!!!NNNNNN??????&&&&?C?Z?Z  , ,QWgaAQSW6X6X Y Y@ @ <)+<  VBB!:+C #wwy11 $ 8$'GGJ$7$7!$ 8$'GGJ$7$7! V V V NNPRT U U U U U U U U V ' - - -2C2N2Ny2Y2Y - $ G GHY Z Z GX# + +#* $ - -$,! Nw LMM M !NN A)4 0 0 A-t 4 4 M'!%:DAA B B A+T 2 2 !  878IJJ "" &&$244#   -66 (#7  54Z@@ //    #     ) )# . .  -t441488 ga)>EEFF/66 $ $'<<<7$dfijj        *)!*559JJJ7$\^abb        $AJ!+A AL!%A %)A "$&A !#'A 7 UZ[[[MQ^/hs1c-6H6H16L/M/M/MdhA ,Yf/p/B/B=QSCT/U/U/UlpA ,L'4(( x&{{+>??w7;;|C\C\w`g`k`klv`w`w +@+@T B B: N NTRT,,A ( FFHHH=               @. IIKKJl$%$6()(>'('<&'&:29!=]_c2d2d29!=]_c2d2d       *"*       III>BBB7G?13E3EGGHHHHHHHHIs AA A A0DDD8X=A.X,AIX I1 I,'X,I11A"XC$X8A+U9# X0$U9 X!D U9- X9U==XU=BX Y :Y Y Yc t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwt|dpd}|st|dS|d}|8 t |}n'#ttf$rt|dcYSwxYwddlm }m }||| }t|d ||||kd S) zReturn conversation-round count for a gateway session. Request body:: { "session_id": "...", "since": } Response:: { "ok": true, "rounds": 12, "threshold": 10, "should_show": true } r5NrIr/rn 'since must be a unix timestamp (number)r)count_conversation_roundsCONVERSATION_ROUND_THRESHOLDrn T)rrounds threshold should_show) r%rhr&rr?rrrrGrC rD r()r6rrrrn rC rD rF s rr#r#g+sh$l#### $$$7CFF########$ dhh|$$* + + 1 1 3 3C 674555 HHW  E  K%LLEE:& K K Kw IJJ J J J KSRRRRRRR & &s% 8 8 8F W1!==   s) A?AA'B77!CCchannelrF ctj}ddd||tjd|t|pdt|pdpd|t ||ddd S) zr?rrr[rr)rrrs r _extract_handoff_summary_payloadrR +sm gt $ $t{{6f$$ F(;(;?P(P(Ptkk)$$G'4   jB//GG   44  gt $ $GKK8O,P,Pt{{<  (t'++l3344w{{9b1122;;y))++h''Z0011!%   s:B BBrcZt|}t|}|r|sdS|d|dko|d|dko|d|dko|d|dkoW|d|dko+|d|dkS)zIReturn True when two message payloads represent the same handoff summary.Fr5rSrI rF r rL )rR r?)rrr target_payloads r$_is_matching_handoff_summary_messagerU +s47AA5f==N >u\**n.@.@.N.NN eY''>+=+=i+H+HH eY''>+=+=i+H+HH e X&&.*<*,>z,J,JJ  e 4559K9KLc9d9dd rrrT c@|dS tj|pd}n#t$rYdSwxYwt|tsdS|ddS|dduo+t |dt |dkot |ddt |ddko|d|dkoq|d |d koEt|d t|d kS) zKReturn True if DB content JSON matches an expected handoff summary payload.NFrIr5rL TrSrI rF r )rrr[r=r>r?rr)rrT rs r$_is_matching_handoff_summary_contentrW +su*W]++ uu gt $ $u{{<  (u +,,4 N GKK % %&&#n.@.@.N.N*O*OO N GKK 2 & &''3~/A/A)R/P/P+Q+QQ N  I."4"4Y"?"?? N  H!3!3H!=!==  N W[[ $ $%%n.@.@.L.L)M)MM s  ++c\ ddlm}||}n#t$rYdSwxYw |jrt |jd|rdS|j||dS#t$r'}t d||Yd}~dSd}~wwxYw)zAPersist a handoff summary marker into a local WebUI session file.rr<FrYTz@Failed to persist handoff summary marker in local session %s: %sN) rGrrrrU rrJr[rr~)rrrrrs r _persist_handoff_summary_locallyrY +s****** K   uu : >qz"~wWW 4 '""" t Y[^`abbbuuuuus) """A: .A:: B+B&&B+c Bddl} ddl}n#t$rYdSwxYw ddlm}t |}ns#t$rft |j dtt j dz }YnwxYw|dz }| sdS| dtj}| d d }t|tst!j|d }t%|} t'|jt|5} | Q| d |f} | } | $t/| d| r dddd Sn+#t$rt0d|YnwxYw| d|||f| d|f| dddn #1swxYwYd S#t$r'} t0d|| Yd} ~ dSd} ~ wwxYw)zPersist a handoff summary marker into CLI sessions state.db. This keeps summary cards available after hard-refresh for imported gateway sessions that are not in local session JSON yet. rNFrTrXrYzstate.dbrrrIrN z_SELECT content FROM messages WHERE session_id = ? AND role = 'tool' ORDER BY rowid DESC LIMIT 1Tz7Unable to read tail handoff marker from state.db for %szTINSERT INTO messages (session_id, role, content, timestamp) VALUES (?, 'tool', ?, ?)zOUPDATE sessions SET message_count = COALESCE(message_count, 0) + 1 WHERE id = ?z?Failed to persist handoff summary marker in state.db for %s: %s)r]rrt rZrUrr`rer[r^rr_rzr?rKr=rrrR rrrrrW rrcommitr~)rrr]rrUr2rrrmarker_payloadrrrirs r$_persist_handoff_summary_to_state_dbr] ,sK III uuj777777113344??AAIIKK jjj929]C i8O4P4PQQRR]]__ggii jJ&G >>  u [$)++ . .Bkk)R((G gs # #:*W59995g>>N! _W_S\\22 3 3 t ]!-,,6C ,,..C+OPSTUPVXf+g+g#         ] ] ] VX[\\\\\ ] LL+gr"    LL    KKMMM9               :t XZ]_`aaauuuuus AAA-CC%*I-I AG% I-$I %%H  I  H  AI  I- I$$I-'I$(I-- J7JJct|||||}t|}|r"t||t|||St||}|r|St||r|n|S)z?Persist a handoff summary marker across local/session backends.)rP rr] rY )rrSrI rF r markerrpersisted_locals r_persist_handoff_summaryra D,s 0gwPX Y YF3C88,S&999(f555 6sFCCO 9#vFF R66FRrc @ ,-./01 t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwt|dpd00st|dS|d}|8 t |}n'#ttf$rt|dcYSwxYwddlm }m }m }|0| }||krt|d d S|0}|ddl } g} |D]} | d } |  t| tt frt | } nM| j t| d d} | |kr| | #t&$rYwxYw| }n|}|dd}t)|dkrt|dd Sd.d-t+-.fd|D1g}|D]|} | dd}.| d}t|pddd}|dvr|r||}d|}.1fd}d//fd,0fd}d7,/fd } ddlm}dd lm}ddlm}ddl}d}d}d} dd!lm}|0}t?|d"d}n#t&$rYnwxYw| |\}}}d} ||j!|#} | d$}|s| d%}|s| d&}n2#t&$r%}!tD#d'|!Yd}!~!nd}!~!wwxYwt|tr9|$d(r$|%|\}"}#|s|"r|"}|s|#r|#}|s\||}$ tM0|$||d)*n#t&$rYnwxYwtO|d)|$t)||d)d+S|(||||d,d)g0-}%d.}&d/|}' ||%|&|'d0}(t|(tRr|(d1nd}$,|(rW||%|&|'d20})t|)tRr|)d1nd}$,|)r||}$d)}*nd3}*nd3}* |%*n:#t&$rYn.wxYw# |%*w#t&$rYwwxYwxYw|$s||}$d)}*n/|$r|*sd)}*|}+tM0|$|+||**tO|d)|$t)|||*d+S#t&$r}tD#d4|||}$ tM0|$||d)*n#t&$rYnwxYwtO|d)|$t)||d)d5tW|d6cYd}~Sd}~wwxYw)8aGGenerate an on-demand handoff summary for a gateway session. Request body:: { "session_id": "...", "since": } Uses the session's configured model to produce a concise summary of recent conversation activity. Returns the summary text so the caller can display it in a tool-card. r5NrIr/rn rB r)rrC rD rE z5Not enough conversation rounds to generate a summary.rrrrirz!Not enough messages to summarize.ct|tr1dd|DSt |pdS)Nr3c3K|]R}t|tt|dp|dpdVSdSr r rvs rrxzI_handle_handoff_summary.._extract_handoff_text..,sna&&AEE&MM;QUU9%5%5;<<rrI)r=rarrr) raw_contents r_extract_handoff_textz6_handle_handoff_summary.._extract_handoff_text,sr k4 ( ( 88$egg   ;$"%%++---rcNtdt|DS)Nc36K|]}d|cxkodkncVdS)u一u鿿Nrr: s rrxzE_handle_handoff_summary.._contains_chinese..,s>BB"8r----X----BBBBBBr)rr)r.s r_contains_chinesez2_handle_handoff_summary.._contains_chinese,s%BBD BBBBBBrc3fK|]+}|dV,dS)rNr)rrri rf s rrxz*_handle_handoff_summary..,sZ    //i0@0@AABB      rrrrrrrcg}g}dd}|D]w}|dd}||dd}|dvr3|r1|dkr||b||x|s|s rd nd S rg}|r|d |d d |r|d|d d t|t|zdkr|dn|dd|Sg}|r|d|d d|r|d|d dt|t|zdkr|dn|dd|S)zJReturn a deterministic summary when LLM summary generation is unavailable.Ncdt|pd}|sdSt ||kr|S|d|dz dzS)Nr3rIrr)rrrrrorc)r rr.s r_summarize_snippetzV_handle_handoff_summary.._fallback_handoff_summary.._summarize_snippet,s~88CB//557788>>@@D r4yyG##  'A+ &--//%7 7rrrIrRrk ruc近期可读文本不足，无法生成更完整的交接摘要，请补充一条消息后重试。zdNot enough readable text to create a useful handoff summary; please send one more message and retry.u- 你刚讨论了：rYu。u- 助手已回复：ru2- 当前对话存在尚未确认的后续动作。u;- 当前信息偏少，建议补充关键点后再切换。rz - You asked: r$z- The assistant responded: z,- There is pending context to continue next.zH- The conversation is still short; add one more turn before summarizing.)rm )r?rror) r user_pointsassistant_pointsro rrrbulletsrf transcript_is_chineses r_fallback_handoff_summaryz:_handle_handoff_summary.._fallback_handoff_summary,s[  8 8 8 8 5 5A55$$D(()>)>quuY?O?O)P)PRTUUG,,,,6>>&&w////$++G444 #3 )|uu{  ! &G LJk"oJJJKKK QO6Fr6JOOOPPP;#&6"7"771<<STTTT\]]]99W%% %  ? NN=;r?=== > > >  R NNP9I"9MPPP Q Q Q {  c"233 3q 8 8 NNI J J J J NNe f f fyy!!!rct|tst|pd}|}|sdS|ds|drdSd|D}|sdS|d}t jd|rdSt|d kr"t jd |t jsdStt jd |t jS) zKBest-effort guard for truncated summaries when LLM signals are unavailable.rITrrc^g|]*}||+Srr)rrs rr{zO_handle_handoff_summary.._summary_output_incomplete..,s-LLL$tzz||LLLLrrYu[。！？；!?.；]$F8z/\b(and|or|so|then|because|if|when|but|so|as)\b$z"\b(and|or|but|so|because|if|when)$) r=rrrrrrrord r)r.r last_lines r_summary_output_incompletez;_handle_handoff_summary.._summary_output_incomplete,s$$$ #tzr??Dzz|| 4 ==   4==#7#7 4LL$//*;*;LLL 4"I 9-y 9 9 5 y>>R   2dfoqsq~(( 4BICYPRP]^^___rcxt|tsdS|dpd}|dkrdS|dpd}|dvrdS|ddS)NT finish_reasonrIr stop_reason>r max_tokensr.)r=r>r?rr)summary_resultr9r} rz s r_agent_summary_incompletez:_handle_handoff_summary.._agent_summary_incomplete,s.$// 4 $$_55;BBDDJJLL X  4%))-88>BEEGGMMOO 2 2 24)).*<*|dp)|dp|d}nrn#t$rYnwxYw|S)Nr)rrtr5rr%r~r4) rGrrtrr%r~rr?r[) channel_labelrMrt session_metarcrs r_resolve_handoff_channel_labelz?_handle_handoff_summary.._resolve_handoff_channel_label,s"   P P P P P P P P'<,,L)/*/*/ .  ! !1!1!3!3I }}\22c99%MM.997(}}\::7(}}\::7 )}}X66 & :    D sB-B33 C?Ccd|dd|dg}ddddd}dd i}t|d d} ||_t|d dd kr||}|d d||d<||} || \} } t | r | jpdnd|d<|d|d<|||_St|d ddkrddl m } m } | |j |d||t|dd | t|dd}||} | | t|dd \} } t | r | jpdnd|d<|d|d<|||_S||}|d dd|d<d|d<d|vr||d<n||d<|djjjd%i|} t| d dpdgd}|t|d!dnd}t t|d"dpd|d<t|d#d|d#<t|d$d|d$<||d<|||_S#||_wxYw)&zMUse the current Hermes Agent transport without mutating conversation history.rrrrINT)r.r| r} incompleterFreasoning_configapi_modecodex_responsestoolsmax_output_tokensr.r anthropic_messagesr)build_anthropic_kwargsnormalize_anthropic_response_is_anthropic_oauth_anthropic_base_url)rrr r~ r is_oauth preserve_dotsr,)strip_tool_prefixg? temperaturerrmax_completion_tokensr~ rK r@ rrrr| r} r)r@r _build_api_kwargsrP_run_codex_stream_normalize_codex_responserrragent.anthropic_adapterr r r_anthropic_preserve_dots_anthropic_messages_create_ensure_primary_openai_clientrrr)rrm user_textr~ api_messagesrdisabled_reasoningprevious_reasoning codex_kwargsr0assistant_messagerr r ant_kwargs api_kwargsr rr rz s r_agent_text_completionz7_handle_handoff_summary.._agent_text_completion-s- 8 8 2 2 !    (/$U,>EE5 8%7E "uj"--1BBB$66|DD   $///4> 01..|<<','F'Ft'L'L$!1!$J[%c&7&?&E2ac!d!d!j!j!l!lv'A'A&.'Q'Q|$V&8E " "Suj"--1EEEhhhhhhhh33+))%7$U,A5II"'"@"@"B"B$U,A4HH    77 CC'C'C&-e5JE&R&R((($!1"%J[%c&7&?&E2ac!d!d!j!j!l!lv'A'A&.'Q'Q|$*&8E " "'00>>J NN7D ) ) )(+J} %$(Jy !&*446@ 233+5 <(h566>O6PPUahDdIt44>BF6<6H'&)T222dC i!release_clientsr+)2r6rrrn rrC rD rF all_msgs_dtrrts_rawts_valr2rrr transcriptru r r r<rr3 r4 r5 r6 r7 rs_objr8 rrrrr? rsummary_system_promptsummary_user_text first_pass second_passr r r ri rf rz rrt s2 @@@@@@rr$r$R,s" $l#### $$$7CFF########$ dhh|$$* + + 1 1 3 3C 674555 HHW  E  K%LLEE:& K K Kw IJJ J J J Kmlllllllll & &s% 8 8 8F ,,,7SUXYYY(',,H   AUU;''F~ fsEl33""6]]FF \77F ++C::ikkE>>OOA&&&     :D 4yy1}}7?EEE...CCC          E ""uuVR  ''i(8(899gm$$**,,UdU3 ( ( (W ( LL ! ! !5!!J1"1"1"1"1"1"f```& J J J J J4C8C8C8C8C8C8C8L` !!!!!!NNNNNN??????&&&&    . . . . . .K$$E$UGT::NN    D @D?Z?Z[i?j?j<)+< ZBB!:+C #wwy11 $ 8$'GGJ$7$7!$ 8$'GGJ$7$7! Z Z Z NNTVX Y Y Y Y Y Y Y Y Z ' - - -2C2N2Ny2Y2Y - $ G GHY Z Z GX# + +#* $ - -$,! 44T::L ( 2244!     W'!$T   "" &&$#    &  FEE //%! J 6@ D5Q5QY:>>&111WYL((44 !44)%#  ;E[RV:W:W_{v666]_ ,,[99%#<#BBB0066   $..00          D # YYV/RSBTBTVV            sV A AA A -B==!C! C!BG G$#G$-X "L-,X- L:7X9L::XAN/.X/ O9OXOAX=QX Q'$X&Q''%X $X2BU7U'&X' U41X3U44X7V9V V VVVVA"X Z &Z2YZ YZY6ZZZcn t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw|ddd}|rd|vsd|vrt|dS|dd }|rd|vsd|vrt|d St}|r ||z |z }n||z } | | n #t$rt|d cYSwxYw| d d |dz }| |ddt|d |t|dS)Nrrr3r#rr rrrIzInvalid categoryzInvalid skill pathTrrrr)rrr )r%rhr&rrrr%r?rarerfrr r()r6rr skill_namerrpr skill_files rrNrN-s$fi(((( $$$7CFF########$f##%%++--55c3??J 2 **dj.@.@70111xx B''--//H0SH__(8(87.///#%%J,)J6 + 2'' (:(:(<(<==== 22270111112 OOD4O000Z'J$y/G<<< WT:s:OO P PPs+ AAAA9D==EEcp t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwddl}t|dddrdvsdvrt|dSt}fd| d D}|st|d d S|dj }|j t|t|d |dd S)Nrrr3r#rr rc4g|]}|jjk|Sr)rr)rrwr s rr{z(_handle_skill_delete..&.s'VVVQ!(-::U:Uq:U:U:Urrrr4T)rr) r%rhr&rrrrr%rarrr r()r6rrrrpmatchesrr s @rrOrO.s[$f $$$7CFF########$MMMT&\""((**0022::3DDJ 2 **dj.@.@70111#%%JVVVV***:66VVVG 47-s333 !IFM#i..!!! WT4<88 9 99s AAAAc|gSt|tr|g}n(t|ts|rt|ng}ttd|DS)zFNormalize a config value (None/str/list) into a deduplicated str list.Nc3K|]F}t|#t|VGdSr;r+)rds rrxz(_normalize_names_list..6.sCNNs1vv||~~Nc!ffllnnNNNNNNr)r=rrar>fromkeys)rvs r_normalize_names_listr ..sv } %- t $ $-$,U "  NNeNNNNN O OOrrcxt|}|rfd|DS|vr||S)z8Add or remove *name* from *names*, returning a new list.c g|] }|k| Srr)rr rs rr{z(_toggle_name_in_list..=.s...aAIIIIIr)r r)rvrrs ` r_toggle_name_in_listr 9.sT !% ( (E/....5.... 5 T Lrc t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw|d}t |d}t }t|}t||\}}|st|d|ddSt} t5t| } d| vst| dtsi| d<| d} t| d||| d<| d } t| trd | vrt| d ||| d <| | d<t!| | dddn #1swxYwYt#t%|d ||d S) aSToggle a skill's enabled/disabled state in the active profile's config.yaml. Writes through to ``skills.platform_disabled.webui`` when that key exists so the toggle takes effect for WebUI sessions (the agent's ``get_disabled_skill_names`` checks platform-specific lists first when ``HERMES_SESSION_PLATFORM`` is set). rrNr ' not foundr4rVrplatform_disabledrTrrr)r%rhr&rrrrarrr r$r!r=r>r r?r"r#r() r6rrrrrprrrj config_pathr skills_cfgr s rrPrPC.s>$fi(((( $$$7CFF########$ <    D4 ?##G$%%J+J77K-dK@@Ix >77d777==="$$K 11$[11 3  jX&E&E CM] "6 NN: & &g" " :'NN+>?? ' . . 7>O3O3O)=!'*D'** g &#H {C000/1111111111111112OOO WT4GDD E EEs, AAAACFF#&F#c6 t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw ddlm}|}|dz }n+#t $rtjdz }|dz }YnwxYw| dd|d}|d kr|d z }n(|d kr|d z }n|d kr|dz }nt|dS| |ddt|d|t|dS)NrrrrTrw rYTrr{ rx rry r| rz z+section must be "memory", "user", or "soul"rr)rrr ) r%rhr&rrZrUrt rr_rr r()r6rrrUr_r rrs rrQrQy.s~$i++++ $$$7CFF########$$777777%%''# $$$y{{Y&#$ MM$M...9oG(;& F  9$ F   !7IJJJ d9o888 WTgs6{{KK L LLs+ AAAA A%BBct|ts|St|}|dd|dd|S)aCNormalize message payloads for import refresh prefix checks. The strict dict comparison previously failed when existing messages held integer timestamps while refreshed messages held floating-point timestamps. Strip timing keys before comparison so we can safely treat semantic prefixes as equivalent. rNr )r=r>rP)rr s r%_normalize_message_for_import_refreshr .sT gt $ $gJNN;%%%NN5$ rcHt|tsdS|ddkr|drdS|ddkrA|ds*|ds|d rdSdS) NFrrrTrrO tool_namerr)rs r_message_has_cli_tool_metadatar .s gt $ $u{{6k))gkk,.G.G)t{{6f$$'++n*E*E$U`IaIa$elepepqwexex$t 5rct|tst|St|}t|ts|SdD]}||d|S)N)rrO r r)r=r>r rP)rr r8s r$_strip_cli_tool_metadata_for_refreshr .ss gt $ $>4W===6w??J j$ ' 'B""sD!!!! rexisting_messagesfresh_messagesct|trt|tsdSt|t|krdStd|DrdStd|DsdSt |D].\}}t |t ||krdS/dS)afReturn True when fresh messages only add CLI tool metadata. Older imports from get_cli_session_messages() persisted assistant/tool rows without tool_calls, tool_call_id, or tool_name. After #1772 the refreshed transcript can have the same length but richer metadata, so re-imports must rebuild the stored sidecar even without a new row. Fc34K|]}t|VdSr;r r6s rrxz3_is_cli_tool_metadata_enrichment...s+ H H )! , , H H H H H Hrc34K|]}t|VdSr;r r6s rrxz3_is_cli_tool_metadata_enrichment...s+IIQ-a00IIIIIIrT)r=rarorrc r )r r r^existing_messages r _is_cli_tool_metadata_enrichmentr .s ' . .jQU6V6Vu ^!4!444u H H6G H H HHHu II.III I Iu!*+r?r)rrrr)rkrrr)rr))r%rhr&rr_r`rrartrorr r r~r?r%rrrrr@rrJr r(rrrrrrrr?rr<r9r;r:r7r6 _cli_origin)"r6rrrr fresh_msgsrhrrrattrr-r2rkrr cli_titlecli_source_tagrcli_raw_sourcecli_session_sourcecli_source_label cli_user_id cli_chat_id cli_chat_type cli_thread_idcli_session_key cli_platformcli_parent_session_id cli_read_onlyrcron_project_idr@ rs" rr\r\.s!$l#### $$$7CFF########$ d< ! !C|C  H/ -c22 '))**  B,3&&'  #j//C0A,B,BBB11BJOO $.!   > > #++-- ( 1&*!%x~2&:&:;&G&G!H!H "      $C ( (D C7$?$? !  !4!455M E% #*  8D-88EOsN++0-//K # U  /1122  U  SYY  *   *  z7Z  e    $  w  d  .  .:N 0! " ,# $"7+   .o5IIJJJ    /   A'& A!AL!3^AL)A%ANAIAIAKAK#AMAJAMFFEF""" !5666 yy{{ "&       r8 c z|rt|tst|dS|d}t|tst|dS|dd} t t |dt t}n;#ttf$r'}t|t |cYd}~Sd}~wwxYw|dt}t|||||d g }|d d |_ t5|t|j<tj|jt#tt$kr2tjd t#tt$k2dddn #1swxYwY|t+dt-|d|d|jizdS)zIImport a session from a JSON export. Creates a new session with a new ID.z"Request body must be a JSON objectrz$JSON must contain a "messages" arrayrzImported sessionr<Nrr)rr<rrrr=Fr]session_importTr)r=r>r&r?rarr$rrrhrr_r=rrr5rarorrbrJr r(rr)r6rrrr<rrrs rr[r[/sK Bz$--B7@AAAxx ##H h % %D7BCCC HHW0 1 1E$1$((;L]H^H^2_2_``aa z "$$$7CFF########$ HHWm , ,E88L"--    Axx%((AH ))!"Q\***(mml**  % ( ( ( ((mml**))))))))))))))) FFHHH !1222 WTaiikkZ./s/%H%Ha17799n%H%H%H%H%H%Hr••••••)r=r>rrr _mask_secrets)obj sensitivemaskedrrNs @rr r /s c4  LI F 1 a   #%H%H%H%Hi%H%H%H"H"H ,F1II 4  %a((F1IIF1II Mrc|dSt|tr|St|ttfr|dkSt|tr2|}|dvrdS|dvrdSdS)zBParse Hermes MCP ``enabled`` values without raising on bad config.NTr>rJrMrLrK>rrrrF)r=rrrrrr)r-r s r_parse_mcp_enabledr /s }t% %#u&&z%[[]]((** 3 3 34 4 4 45 4rc ddlm}|}n#t$ricYSwxYwt|tsiSd|DS)a/Return already-known MCP runtime status without starting servers. ``tools.mcp_tool.get_mcp_status()`` only reads the existing MCP registry and configuration; it does not probe or spawn MCP subprocesses. If Hermes Agent is unavailable, fall back to an empty map so the API remains safe. r)get_mcp_statusci|]O}t|t|d,t|d|PSrr)rr1s rrSz/_mcp_runtime_status_by_name../sd     eT " " (-yy'8'8  EIIf     r)tools.mcp_toolr r[r=ra)r statusess r_mcp_runtime_status_by_namer /s111111!>##   h % %      s  ""c \t|tr|ni}d|i}t|ts|dddddddd|St|d d }|r"t |d nd}d |vr-d |d<d|vrt |d|d<|d |d <nad|vrTd|d<|dd|d<|dg|d<d|vrt |d|d<n d|d<d}d}|dd|d<|dd|d<||d <||d<|ddkrd|d<n|sd|d<n |rd|d<nd|d<|r|dnd|d<|S)z.Return a safe summary of an MCP server config.rrrr(Finvalid_configN) transportrconnect_timeoutrrRr tool_countrT connectedurlhttpr rrstdiorIrenvrr rRrrrr r )r=r>r r r?rr )rrruntime_statusoutrr s r_server_summaryr /s'1.$'G'GO^^RN 4.C c4  "!&       D!9!9::G9@K^'' 44555eI ||!K   *3y>::C NZE c  "KB//Iggfb))F C<<&s5z22CJ$K WWY,,C N WW%6;;CC NCM ;9$$(H %"H % H $H 7EO**73334C  Jrcbt|ts|dnt|}t|}t jdd|tj}t||kr0|dtd|dz  dz}|S) z@Return redacted, bounded MCP text safe for WebUI inventory rows.NrIzAuthorization:\s*Bearer\s+\S+z[REDACTED CREDENTIAL]rb rrr) r=rr-rrrrV rorrc)r-r`s r_mcp_safe_display_textr 0s eS ! !4mU    % % ' 'E F35Le[][_ ` ` `E 5zzE)Auqy)))*1133e; Lrcvt|tsdS|d}t|trdd|D}t|t r|r|SdD]6}t||tr ||r|cS7d|vrdSdS)zDReturn a compact, non-sensitive display type for a JSON schema node.rrrc38K|]}|t|VdSr;rrts rrxz#_mcp_schema_type...0s-00!a0s1vv000000r)anyOfoneOfallOfenumr)schematyp composites r_mcp_schema_typer (0s fd # #y **V  C#t1hh00s00000#s 0 fjj++T 2 2 vi7H     v 9rr[ct|tsgS|d}t|tsgS|d}t|trt |n t }g}|D]\}}t ||krnt|ts0t|tr|ni}|dd}t|tsd}t|d}| |t|||v|d|S)aVSummarize an MCP input schema without exposing raw defaults/examples. The WebUI only needs searchable/displayable argument hints. Returning raw JSON Schema can overexpose server-provided defaults, examples, enums, or vendor extensions, so this strips each parameter down to name/type/required and a redacted description. propertiesrequiredrrIr)rrr r) r=r>r?rarrrorr rr ) r r`r r required_namesr rpropr?s r_mcp_schema_summaryr! 90s^ fd # # L))J j$ ' ' zz*%%H&04&@&@KS]]]ceeN C &&((  d s88u   E$$$  !$--5tt2xx r**$$$ D%d#666 $T**.       Jrc t|tsiSdD]h}||}t|tr<|dkr2t|dtr |dcS|cSiiS)N) parameters inputSchema input_schemar r r# r)rr8r-s r_mcp_tool_schema_from_payloadr& \0s dD ! ! F  eT " " h:eii .E.Et#L#L\****LLL  Irc t|tr|ni}t|trd|i}nt|tsi}t|dp|pd}|dpd}t|tst|}t |d}|t|dpd|t |dt |d|dpd t t|d S) z4Return a safe global inventory row for one MCP tool.rrIrihrrRrrr)rrgrrRrrschema_summary)r=r>rr?r rr! r& )rrserver_summaryr rs r_mcp_tool_summaryr* h0sG'1.$'G'GO^^RN$~ d # #DHHV$$2233I((=))/RK k3 ' ''+&& (C@@@Kn((006B77"~))(3344**95566 $$X..;)-.KD.Q.QRR  rc:g}t|ts|S|D]\}}t|ts|d}t|ts|d}t|tsp|t |dt |i}t |D]:\}}|d|} t| ||} | dr|| ;|S)zCRead detailed MCP tool payloads from runtime status when available.r tool_schemasrr) r=r>rr?rarrc r* r) runtime_by_nameserver_summariesr server_nameruntime raw_toolsr) rr fallback_namerSs r_mcp_tools_from_runtime_statusr3 0s0 E ot , , / 5 5 7 7 & & W'4((  KK(( )T** 4 N33I)T**  )--c+.>.>[IYIY@Z[[$Y// & &KE4*44U44M' t^LLGv & W%%%  & Lrc  ddlm}n#t$rgcYSwxYwg} |}n#t$rgcYSwxYw|D]} ||}n#t$rY%wxYwt |t r|dsT|tdd}| |pi}| ||dddd}| t||||S) zERead already-registered MCP tool schemas without probing MCP servers.r)registryzmcp-NTFr)rrrRr) tools.registryr5 r[get_all_tool_namesget_toolset_for_toolr=rrro get_schemar?rr* ) r. r5 r rvr toolsetr/ r r) s r_mcp_tools_from_registryr; 0sx+++++++   E++--  KK  33I>>GG    H '3'' w/A/A&/I/I  c&kkll+ $$Y//52)--k" < <     &y&.IIJJJJ Ls- 3 AA A  A-,A-c t}|di}t|tsi}t fd|D}t |}d}|st|}|rdnd}|dd| D}t||t||d |d S) zCList known MCP tools from already-available runtime inventory only. mcp_serversc i|]Q\}}t|tt||t|RSrrr r?rrscfgr0 s rrSz*_handle_mcp_tools_list..0Y D$ D ?3t99dGKKD 4J4JKKrmcp_runtime_status tool_registryrg cZ|dd|ddfS)NrgrIrrris rrz(_handle_mcp_tools_list..0s'" 5 5swwvr7J7JKrrcrg|]4}|d|d,|d5S)rrRrr)rrSs rr{z*_handle_mcp_tools_list..0sR# ;;y ! !*1++h*?*?ralready_known_runtime_only)r rcr4inventory_scopeunavailable_servers) r[r?r=r>r rr3 r; rr,r(ro)r6rserversr. r r4rJ r0 s @rrr0s% ,,CggmR((G gt $ $)++G!--// +74D E EE !F 6()9::$)5v JJKKJLLL'7'>'>'@'@ WU72   rcpt|pddvS)NrI>rJrMrLrKrrs r _webui_truthyrM 0s2 u{   ! ! # # ) ) + +/I IIr config_datac^tjdd}|rt|St|tr|n t }t|tsdSt|dp)|dp|dS)zReturn whether the third-party notes drawer is explicitly enabled. The Memory panel is a primary surface, so this power-user drawer stays default-off unless a deployment opts in through config or environment. #HERMES_WEBUI_EXTERNAL_NOTES_SOURCESrIFwebui_external_notes_sourcesexternal_notes_sourcesnotes_sources_drawer)r]r^rM r=r>r[r?)rN env_valuers rr r 0s  ?DDI(Y'''#K66 H++JLLC c4 u  .// + 77+ , , + 77) * *  r> kbr wikinotesjoplinlogseqnotionllmwikiobsidianreadwise knowledgellm-wiki> r rH rV rW rget_notenotebookr^ read_note list_notes search_notesrd zSearch Joplin notes by keyword.rprc z"List notes from a Joplin notebook.r` z"Read a specific Joplin note by ID.z!Search Obsidian notes by keyword.rb z&Read a specific Obsidian note or file. search_pagesz!Search Notion pages or databases.get_pagezRead a specific Notion page.query_knowledge_basez"Query the LLM Wiki knowledge base. read_pagezRead a specific wiki page.)rX r\ rZ r_ r[ c>dddddddd}t|pd}||t|pdd d d d S) NJoplinObsidianNotionzLLM WikiReadwiseLogseq)rX r\ rZ r_ r[ r] rY rIrr3r#)rrrr?r%r)rlabelsrs r_note_source_labelrp 1sF$*"oo##%%++--G ::gs4:266sC@@HHcRRXXZZ [ [[rr/ tool_rowsc t|pdtfdtDrdS|D]}dt|dpdt|dpdgtfdt DrdSdS) NrIc3 K|]}|vV dSr;rrrserver_ls rrxz+_looks_like_notes_source..1s( C C48  C C C C C CrTr3rrc3 K|]}|vV dSr;r)rrhaystacks rrxz+_looks_like_notes_source.. 1s(EEDtxEEEEEErF)rrr_NOTES_SOURCE_SERVER_HINTSrr?_NOTES_SOURCE_TOOL_HINTS)r/ rq rrw ru s @@r_looks_like_notes_sourcerz 1s;$"%%++--H C C C C(B C C CCCt88   &B ' ' ''-2 . .    577  EEEE,DEEE E E 44  5rcZt|pdt}|Nt fddDr ddddd dg}n(t fd d Dr d d ddddg}ng}d|DS)zBReturn safe expected note-tool hints for configured known sources.rINc3 K|]}|vV dSr;rrt s rrxz._configured_note_tool_hints..*1s(HHDtxHHHHHHr)rV r^ rU rz(Search this configured knowledge source.rprz3Read an item from this configured knowledge source.c3 K|]}|vV dSr;rrt s rrxz._configured_note_tool_hints../1s(@@d!@@@@@@r)r rW rd z$Search this configured notes source.rb z.Read a note from this configured notes source.cg|]e}t|tt|dpddt|dpddddfS)rrI`rrr T)rrinferred)r=r>r r?)rris rr{z/_configured_note_tool_hints..61s     c4  *3776??+@bKKK1#''-2H2H2NBVYZZZ     r)rrr#_NOTES_SOURCE_CONFIGURED_TOOL_HINTSr?r)r/ hintsru s @r_configured_note_tool_hintsr %1s;$"%%++--3355H / 3 3H = =E } HHHH,GHHH H H !2\]]0effEE@@@@.?@@@ @ @ '8^__$5effEE E       rr. r c Li}|pgD]z}t|tst|dpd}|sQ||g|{t|trj|D]U\}}t|pd}|r||vr/t|gr||gVg}|D]t\}}t||st|tr||d|ind|i}g} d} |ddD]z}t|dpdd } tj d d | } | t|dpdd | d {| st|} | rd} ||t|t|ddt|d|dpdt| | | dv|d|S)aBuild a safe notes/knowledge-source inventory from MCP servers/tools. Some WebUI deployments can read ``mcp_servers`` from config before their local runtime/tool registry has hydrated MCP tool metadata. Still show configured note/knowledge servers (for example Joplin) in that case so the drawer reflects connection/configuration state instead of appearing empty. rgrIrr0 Nrrr rz6(?i)\b(api[_-]?key|token|password|secret)\s*[:=]\s*\S+z [REDACTED]r rpconfigured_hintrTrRrr)rrrrRrr tool_sourcer cZ|d |ddfS)NrRrrIrrF s rrz3_notes_sources_from_mcp_inventory..v1s(cggh&7&7"7"9M9M!Nrr)r=r>rr?rrmrrrz r rrr rp rror) r. r by_serverrrgrSr/ sourcesrq safe_toolsr r?s r!_notes_sources_from_mcp_inventoryr A1s(*I 66$%%  TXXh''-2..4466  VR((//5555"D))6/5577 6 6OFGfl++1133K +":":' R88 6$$["555G&__..   ' ::  DNO_aeDfDf|"&&v/?@@@msu{l|  bqbM  D)$((=*A*A*GRsSSSD6SUacghhD   .txx/?/?/E2RPPP#     04V<.1rB rrC rD rg rH rr) r[r r(r?r=r>r rr3 r; r _joplin_recent_ai_notes)r6rrK r. r r4r0 s @rrrz1s; ,,C *3 / /   4 %*.!     ggmR((G gt $ $)++G!--// +74D E EE !F 6()9::$)5v W45EuMM7!&*2;;;  rr4ct}t|tr|dini}t|tsiSt |pd}|D]W\}}t |pd|krt|tr|cSXiS)Nr= rI)r[r=r>r?rrrr)r4rrK source_lr server_cfgs r_notes_configured_serverr 1s ,,C,6sD,A,AIcggmR(((rG gt $ $ 6r?rr]rrc)rr r r s r_joplin_connection_from_configr 1s "8 , ,C *3 5 5 =#''%   2C c4  cggl##_rz~~l'C'C_G_ ` ` g ghk l lC ''O2:>>.+I+IOR P PE :rparamscddlm}ddlm}m}ddlm}m}t\}}|stddt|pd dz} t|pi} || d|| } || d d |i } || d 5} | ddd}dddn #1swxYwYn=#|$r}td|jdd}~w|$r}tddd}~wwxYw t!j|}n#t$$rtddwxYwt'|tr|niS)zBCall the local Joplin Web Clipper API without logging credentials.r) urlencode)r r ) HTTPErrorURLErrorzJoplin token is not configuredrrIr}r ztoken r rrirr%rNzJoplin API returned HTTP zJoplin API is not reachablez Joplin API returned invalid JSON)rr r r r urllib.errorr r r rhrrdr>rrr\ rrr[r=)r r r r r r r r,r safe_pathrNr r rgrQrrs r_joplin_api_getr 1sI&&&&&&////////00000000466OHe ;9:::c$*"oo,,S111I 2  E  5y 5 599U#3#3 5 5CgcO5Ee5E5E#FGGGGB WWa ( ( ( MH-- **11')1LLC M M M M M M M M M M M M M M M KKK?SX??@@dJ BBB677TABGz# GGG;<<$FGdD)) 144r1sT C&#+C C&CC&!C"C&&D +DD  DD $D99ErIrNctjddt|pd}|sdSt|pd}|rK||}|dkrd|t d|dz dz}t||kr|d|dzS|S)Nrr3rIrrrr() rrrrrrZrrorc)rrNr`r.r\r^s r _note_snippetr 1s 6&#s4:2 / / 5 5 7 7D r EKR  &&((A3jjll"" 884AsRx 0 0 1 122D 4yy5FUF|""$$u,, Krc ^t|pd}|sgStdtt |pdd}t d|dd|d}t |tr|d ng}g}t |tr|ngD]}t |tst|d pdd }|sAt|d pdd }t|dpd}| ||tt||d t|dpdd |ddd|S)NrIrrryz/searchr z$id,title,body,parent_id,updated_time)rNrfieldsr`rr|r-rrrr ri parent_id updated_timerX )r|rrJ r r r4) rrrr[rr r=r>r?rar rr ) rNr`rr rJrinote_idrrs r_joplin_search_notesr 1s     " " $ $E  3s5;B'',, - -E 98 ''  D !+4 6 6 >488G   BDG!$--5tt2  #t$$  ()<"BGGG  &swww'7'7'E:SQQQ3776??(b))-mD%.H.HPSTTT/ 0D0D0JRTUUUGGN33        Nrr ct|pd}tjd|st dt d|ddi}|dst dt|d pd}t|d kr|dd d z}t|dpdd t|dpdd t|t|dpdd |d|dddS)NrIz[A-Za-z0-9]{16,64}zInvalid Joplin note id/notes/r z1id,title,body,parent_id,updated_time,created_timer|zJoplin note not foundrrxz* [Preview truncated at 50,000 characters]r-rrrr r r created_timerX )r|rrr r r r4) rrrrC rhr r?rorcr r-)r rrs r_joplin_get_noter 1su'-R  &&((G <-w 7 731222 .W..E1  D 88D>>20111 txx%2 & &D 4yy6GVG}##%%(VV$TXXd^^%9rDDD'(9(9(GZsSSST""+DHH[,A,A,GRrRRR0000  r))CURRENT_CONTEXT_IDzCurrent Context)OPEN_ISSUES_IDz Open Issues)AGENT_MEMORY_IDz Agent Memory)CONVENTIONS_IDzConventions / Preferences)INFRA_IDInfrastructure) SERVICES_IDServicesct}t|tr|dnd}|sdS t t |S#t$rYdSwxYw)Nprefill_messages_script)r[r=r>r?rrr`r[)r path_values r_joplin_prefill_script_pathr 2s ,,C7A#t7L7LV2333RVJ tC OO$$//111 tts-A.. A<;A< script_pathc |p t}|r(|r|sgS |dd}n#t$rgcYSwxYwdt jd|D}g}t}tD]Q\}}| |}|r||vr!| || |||dddR|S) aFind stable Joplin note IDs referenced by the configured recall script. This keeps the WebUI generic: it does not hard-code a user's note IDs, but can still surface the notes that the configured AI prefill/recall script is known to read for automatic context. rr%rc`i|]+}|d|d,S)rr)r)rrs rrSz,_joplin_recall_note_refs..82s>   A Arz<(?m)^\s*([A-Z0-9_]+_ID)\s*=\s*["\']([A-Fa-f0-9]{16,64})["\'] ai_prefillautomatic_recall)r|rconstantused_by used_reason) r rzrrr[rfinditerr_JOPLIN_AI_RECALL_NOTE_PRIORITYr?rr)r r. constantsrr const_namerr s r_joplin_recall_note_refsr *2sL>!!>K k0022+:M:M:O:O $$gi$HH  [!`bfggI D 55D<    E-- ++ 'T//   "#-        KsA A%$A%rc tdtt|pdd}n#t$rd}YnwxYwg}t d|D]s} t d|dddi}n#t$rY,wxYwt |dp|dpd d }|sn||t |d p|d pdd t |d pd d t |dpd d |dp|d|dd|dpd|dpdd u|S)zJReturn safe Joplin notes that the configured AI recall path recently uses.rrrNr r|r z>id,title,parent_id,updated_time,user_updated_time,created_timerIr-rrrrr rr user_updated_timer r rX r r r r ) r|rrr r r r4r r ) rr[rr[r r r r?r)r`rW r rr s rr r M2sAs3uz??B//00  E'))&5&1   "#8SY#8#8Z;DD    H ($)N3774==)NBVXYYY   +DHHW,=,=,_AQAQ,_U_gjkkk+CGGG,<,<,B#NNN/0E0E0KSUVVV HH%899UTXXn=U=U HH^44wwy))9\77=11G5G    Ls-0 ??A:: BBc tst|dgdddSt|jpd}t |ddgd pd}t |d dgd pd} t|d d gd pd }n#t$rd }YnwxYw|dkrt||gdddS t|d|t||dS#t$r.}t|d|gt |ddcYd}~Sd}~wwxYw)Nr$External notes sources are disabled.)r4rJrr4r5rIr4rX rr\r`20rz8Search is currently implemented for Joplin sources only.rr)r4rNrJ)r4rNrJr) r r(rrNrr?rrrr[r rh)r6r7rNr4r\r`rs rrrl2s * , ,~ZBIoppy|}}}} V\'R ( (E 8hZ003?x @ @ F F H H N N P PF EIIcB4  # )r**0022AEIIgv..q17R88  VEAAJMNNN NjXFZ[\diFjFjFjkklll jjjXbSVWZS[S[\\ehiiiiiiiiijs0 ,C77 DD&"E F#E<6F<Fcztst|ddddSt|jpd}t |ddgd pd}t |d dgd pd}|dkrt||d dd S t|dt|d S#t$r,}t|dt |ddcYd}~Sd}~wwxYw)Nrr )r4rr4r5rIr4rX rr|z9Preview is currently implemented for Joplin sources only.r)r4r r ) r r(rrNrr?rrr rh)r6r7rNr4r rs rrr~2s\ * , ,oZ:`aajmnnnn V\'R ( (E 8hZ003?x @ @ F F H H N N P PF%))D2$''*0b117799G V6qrr{~OX7G7P7PQQRRR OOOXCAA#NNNNNNNNNOs$D D:!D5/D:5D:ct}|di}t|tsi}t fd|D}t ||dddS)zDList configured MCP servers with safe, read-only runtime visibility.r= c xg|]6\}}t||t|7Sr)r r?rr@ s rr{z,_handle_mcp_servers_list..2sK D$ dGKKD $:$:;;rT)rK toggle_supportedreload_required)r[r?r=r>r rr()r6rrK rr0 s @rrr2s ,,CggmR((G gt $ $)++G!--//F W   rczddlm}||}|st|dSt}|di}t |t si}||vrt|d|ddS||=||d<tt|tt|d|d S) zDelete an MCP server by name.runquoterr= MCP server 'r r4T)rdeleted) rr r&r[r?r=r>r"r r#r()r6rr rrK s rrr2s$$$$$$ 74==D 07./// ,,CggmR((G gt $ $ 77<4<<ddlm}||}|st|dSd|vrt|dSt|d}t }|di}t |tsi}||vrt|d|dd St ||tst|d|d d S|||d<||d<tt|tt|d ||d S)zGToggle enabled state for an MCP server (PATCH /api/mcp/servers/{name}).rr rrzenabled field is requiredr= r r r4z' has invalid configrTr ) rr r&rr[r?r=r>r"r r#r()r6rrr rrrK s rrr2sJ$$$$$$ 74==D 07.///778884 ?##G ,,CggmR((G gt $ $ 77<4<<rr_MASKED_PLACEHOLDER_strip_masked_values)rrrO rNrs rr r 2s i & &j4.H.HG!!1 a   !':":":H}}HQK!=!=}%a[  4  Q(]]z(1+t7T7T]-a!==GAJJGAJJ Nrcddlm}||}|st|dSi}t}|di}t |t si}||i}|dr`|d|d<|dr-t|d|di|d<n|dr|d|d<|dr/t |dtr|dn|dg|d<|d r-t|d |d i|d <nt|d S|d 1 t|d |d <n#ttf$rYnwxYw|||<||d<tt|tt!|d t#||dS)zAdd or update an MCP server.rr rr= r rrrr zurl or command is requiredrNT)rrg)rr r&r[r?r=r>rr rarrhrr"r r#r(r )r6rrr r rrK existing_cfgs rrr2s\$$$$$$ 74==D 07.///J ,,CggmR((G gt $ $;;tR((L xx : K--// 5 88I   k$8i,JZJZ[dfhJiJi$j$jJy ! )  : $Y 5 5 7 7 9 88F   d1;DL$1O1O!cfVZ[aVbUcJv  88E?? _ 4T%[,BRBRSXZ\B]B] ^ ^Ju 78999 xx & $'Y$8$8Jy ! !I&    D GDM C +--s333OOO WT_T:-N-NOO P PPs G$$G87G8r;r)rFN)r)rm)r)r)F)r)rr)rI(D__doc__rrr@r rrloggingr]rrr6rrr rrrKrppathlibr contextlibrrrrapi.agent_sessionsrr r r api.compression_anchorr api.session_eventsr rr getLoggerrrr r r TimeoutErrorrgrrr>rr__annotations__LockrJrr r _CRON_OUTPUT_CONTENT_LIMITrbr(r#objectr>rrr'rarrrrrr+rrrrrrDrZrErrRrarirrrrrrtuplerrrrrr rr&r)r/r3rGrMrQrUrr_rhrnrrrrwryrrrrrr r rrRLockrrrrrrr`rrrrrrrrrrrrr r r r r rrrrrrrrrrrrrrrrrrr r!r"r#r$rRr%r&r'r(rTr)r*r+r,r-api.agent_healthr.api.request_diagnosticsr/api.system_healthr0r8rPr[rdrjrrtr|rrrrrrrrrrrrrrrrrrrrrrr r&r(r,r3rFrJrPrTrWrlrprrrur|rrrrrrrrrrrrrrrrrrrrr rGr_rr r rrrrrrrrtrrrrrrrrr rrrrrr r!r"r#r$r%r&r'r(rr)r*r+r+r,r-r.rIapi.run_journalr/r0r1 api.providersr2r3r4r5r6api.onboardingr7r8r9r:rr;r<r=r%r>_submit_pending_rawr?r@rArBrCrDrErFrGrHrIrJrt rYrr]rarjrlr r rtr rurvrwr rxr rrrrrrrrrrrrrrrrr3 rrrrrr rrerlrwrrrrrrrrrrrr[rrrrIrrrrrrrrrrrrrrrrrrrr r,r-r.r/rr% rrrD rL r` rre ri rr r r r rrrrrrrrrrrrrD rK rrrrrr&r'r r r r r r r r r r(r)r r r*r0rr1r2r3r4r5rD rH rJ rL rR rrrrrc r6r7r8rq r9r:r;r<r=r>r?r@rArBrCrDrErFrGrHrIrJrKr rLr rMr r r r r!rr"r#rP rR rU rW rY r] ra r$rNrOr r rPrQr r r r r r\r[r[r r r r r r r! r& r* r3 r; rrM r rx ry r rp rz r r rr r r r r r r r r r rrrrrr r rrrrr se5      ++++++++ ?>>>>>  8 $ $ (*De$)))#Y^%%,.$sDy/... .  0 0&-#!!LL:KLLL  88!4V #4 $29>#3#3 /1AB&W&|4413S$u+-.333,in..(*% &(w(8835$sDK/0555 .  0 0*,'!'   ,,,,.)(((((-D----hDhhhh,$4  4: #PT*    +$+4:++++4$34SSdScDjSDSSSSl.c.T .uTD[RVY]R]E]?^....b3S3d3uTD[$QU+=U7V3333 3DT!td{!t!!!!HTD[DT@6c6d6666L#$1s1111MdMMMM666,DdO,,,,^1s1111 -C---- %S%U4;%7%%%% 1c 1c 1 1 1 19Sc#WZ04D"<T <<<< s3x    C$J,D,,,,*\\\,"B B B JQ6Q6Q6Q6h   !,, *G3@BDsCx%t *<<=BBB))/++ s    ?S?U38_???? &sCx &TD[ & & & &MsCxM4MDMMMM ####))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))T                        877777666666999999 c d    H$HHHHVBG    $ 4     c*D4c3:o(>*#*CRVJ[_"S0Q4QQQQCD3cd    +c++++2?D2?2?2?2?j#>B   edl d    @D        cD444$ %4 % % % %ssTz >t>>>>>@222211.. ''O11 25!(*  >%-3  &A(5/  A!02  1C=/mZ  F%01  F%01:!+,  1^7/T1  5+.  %r1#h2  !@#0D  Opp fd s@&V )(( CcCCCC5>T5>5>5>5>rwHYdYYYY#*& %D %c %cDj % % % % sTz    %I&&1g&&& JdCo 6 J J J J54<C$J2DT$Z4> > > > > B iiiii^D%$(&T&&&&RtBNNdTkNU4:=NNNNNbB "c":;;   36   #    @@@@@@F     "   9          :::::,c4ccccR%BDBBBBJ6T$d$4  "             fee t#Y^%%GGGT,D'P'P'PT!5!5!5H TcDjCC$J46888v   5558555"555$)))   F8555p4C33.cceCHoPT>T:tx888t838S8Y\8filpfp8888v u     $SRU6ncncncb3STD[:$s$$$$s)$T)$4)$),)$9<)$)$)$)$XQQQh#V#V#VL555$===&9*9*9*xDDD()))E(E(E(PDDD(V<V<V>>* 0 0 0$?$?$?N)))^8888.5}5}5}pXaXaXav C Z_bfZf ko    2DDDDDQQ3Q#QsQQQQ $' ' '  '  '  ' '  ' ' ' ' T4" jjj j  j  jjjjjjZ M M M. C C    GGGTwwwwvS$ > > K K KF . . . . . .c#####,C,,,, T    4< $ $ $ $ $ $$$$"3-$s)----$$$$$$$$$$$8[?[?3[?S[?SV[?[?[?[?|555<555>$$$"$$$$$S$$$$,$$$D$$$$$$N0000000.000,0004000*000D000:Q0Q0Q0h$7$7$7N777 7 7 7 ===8ZL#ZLCZLZLZLZLZLZLz444&  #       : : :F........(44446222j7f7f7ft###&_I_I_ID ###T   4Z $J     :dtd{< 4  $     &$QU+Z^,#(?c?D?T????D S S# S ScDj SRUX\R\ Shl Sy} S S S Sj j j Z QQQ8:::&PDIPPPPcDT#Y3F3F3FlMMM6 6 f     Ft&VdW[,tX\$nnnbWWW@[ZZZZZZZZZZZ    "T#t)_*0000fCC"13   # tDz    F   .,<<JDJJJJ&  0QRR.RSS,PQQ  0STT-UVV  0STT,JKK (8\]]-IJJ (8\]]-IJJ%''#2 \S \S \ \ \ \ # $t*     ST$Z866T$Z6TXY]T^6666r"""J S T    c3h22#2td{2d22226 c    C  c    68sDJ@cd.###TD[  $+ d    F-.c$t*>jjj$ O O O$555&FFF0+""Q"Q"Q"Q"Qs%69_00A `>=`>)cc#"c#