}-jUdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlZddlZddlZddl Z ddlmZddlmZddlmZddlmZmZmZmZddlmZeje Z!e"e#e$e%e&fZ'iZ(e)e*e+fe,d<ej-Z.iZ/e)e*e)fe,d <ej-Z0d Z1d Z2d Z3d eDZ4ddidZ5e)e*e6fe,d<ej-Z7ddhZ8ejdZ9iZ:e)e*e;e+fe,d<ej-ZdZ?ddl@mAZAdeBfdZCdefdZDdededeBfdZEdede;ede*dzfd ZFd!ede;efd"ZGde)fd#ZHd$e*de)fd%ZIdd!ed&e*dzde)fd'ZJd(e*d!edeKedzedzffd)ZLd(e*d!ede)fd*ZMd(e*de)fd+ZNd,ZOde*fd-ZPdeBfd.ZQd/ZRd0ZSde)e*e)ffd1ZTd2e*fd3ZUd2e*fd4ZVd2e*deKeBe+ffd5ZWd6e*deXfd7ZYe2fd6e*d8eXde*fd9ZZd:e)de)fd;Z[de;e)fd<Z\de]e*fd=Z^de*dzfd>Z_d:e)fd?Z`d@ZadAZbdBZcddCZddDdEdFdEdGZedHdIdJdKdLdMdNdOZfdPZgiZhe)eKe*e*feKe+e)ffe,dQ<ejiZjde*fdRZkdSe*deKe*e*ffdTZldUeKe*e*fde)dzfdVZmdUeKe*e*fdWe)ddfdXZnddYZoddZlpmqZqmrZrmsZsmtZtmuZumvZvmwZwmxZxmyZymzZzm{Z{m|Z|m}Z}m~Z~mZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZdd[lmZmZmZmZmZmZmZmZmZmZdd\lmZdd]lmZdd^lmZd_e*deBfd`ZdeBfdaZdeBfdbZddl Zdce*deKe*e*dzffddZdee*dfe*dzdge*dzdeBfdhZde]e*fdiZdeBfdjZde*fdkZddldme+dzdeBfdnZddpeXdeBfdqZdrZdeBfdsZdce*dzde*fdtZdue)deKe]e*e]e*ffdvZdwe*dxe*dye]e*dze]e*deBf d{Zd|e*d}e*deBfd~Zde*d|e*deBfdZdce*dzde*dzfdZd|e*deKe*e*dzffdZd|e*de*due)deBfdZ dde*dzde*dzdeKe*e*dzeBffdZde*dzdeKe*eBffdZde*fdZde*fdZde*dzfdZ dd|e*dzde*dzde*dzdeKe*dze*dzffdZde*de)fdZde*de)fdZdeBfdZde)de*de*fdZde)de*fdZde)deBfdZdeXfdZde)de]e*de]e*deBfdZdeBfdZd$e*deBfdZde)de+fdZde)deBfdZdZefde;e)deXde;e)fdZde)de)de)fdZde)de*dzfdZde;e)de;e)fdZddlmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZddlmZmZmZmZmZmZmZmZmZmZmZmZmZddlmZmZmZddlmZmZmZmZddlmZmZmZmZddlmZmZmZmZddlmZmZmZ ddlmZmZm Z m Z m Z m Z m Z mZmZmZmZmZnN#e$rEdZdZdZ dZ dZ dZdZdZdZiZ ej-Z e]ZYnwxYwiZe)e*e;ejfe,d<de*dejfdZde*dejddfdZde*de)dzdeXddfdZde*de)dzdeXddfdZde*de)ddfdÄZ ddĐlmZmZmZmZ m!Z"n#e$rdńZdƄZdZ dDŽZYnwxYwddddddddΜddddddddΜddddddddΜddddddddΜddddddddΜddddddddΜddddddddΜddddddddΜddddddddΜdddddِdddΜddddddddΜd Z#d e*dzde*fd Z$d Z%d dddZ&hdZ'd Z(dZ)deXfdZ*deBfdZ+dZ,dZ-defdZ.dede*dzfdZ/de)de*de*dzfdZ0de*dzfdZ1dZ2e3dd DZ4deKee*eBffd!Z5d"e+dzde*dzfd#Z6d$edeXfd%Z7d&ede;efd'Z8de)fd(Z9deBfd)Z:deBfd*Z;de)fd+Z<dېd-e+de)fd.Z=de)fd/Z>dאd0e)dzdeKe)eBffd1Z?d2Z@d3ZAe]eAZBd4ZCd5d6de*fd7ZDdde)fd8ZEdeBfd9ZFd:ZGd;eHdeBfd<ZIdeBfd=ZJdeBfd>ZKdeBfd?ZLdeBfd@ZMdAdBdCdDdEdFdFdGdHdIdJdKdL ZNhdMZOdNZPdOZQdPZRdQZSdRZTdSZUdTZVdUZWdVZXdWZYdXZZdYZ[dZZ\d[e*d\e*de*fd]Z]d^e*d_eXdeKeXeXfdzfd`Z^ddadbedce*d[e*dde*dee*dzf dfZ_dgZ`dhZadiZbdjZcdkZddlZedmZfdnZgdoZhdpZidqZjdrZkdd6e*d8eXde*fdsZldtZmduZndvZodwZpdݐdyZqdzZrd{Zsd|e*d}e+dzddfd~Ztddd|e*de*d|e*de*d}e+dzf dZudddxddxdd|e*de*d|e*deBdeBf dZvdZwdאdZxde*fdZydZzdZ{dZ|dZ}dZ~dZdZdZdZdZdZdZdZdZdZdZdZdZdZdZdZGddZdאdZdZdZdZdZdZdZ dd$e*de*de*dzdeXdzdeBde)f dZde)de)dzfdZde)dbe)deBfdZde6de)dzdeBfdZd$e*de)deBfdZd$e*de)deBfdZdd$e*de*de*dzdeXdzdeBde)f dZdZdZdZdZde6de6fdZde6deBfdZde6de6fdZde;de;deBfdZde;de;deBfdZd„ZdÄZddlpmZmZmZmZdńZdeBfdƄZde)e*e)ffdDŽZdאdȄZd8eXde*fdɄZde*fdʄZdːd6d8eXde;e)fd̄Zd̈́Zd΄ZdτZdЄZdфZd҄ZdӄZdԐZdՄZdքZdS(z Hermes Web UI -- Route handlers for GET and POST endpoints. Extracted from server.py (Sprint 11) so server.py is a thin shell. NPath)closing)parse_qs)MESSAGING_SOURCESis_cli_session_rowis_cli_session_row_visibleread_session_lineage_report)visible_messages_for_anchor_RUNNING_CRON_JOBS_MANUAL_COMPRESSION_JOBSXi@cth|]5}t|6Sstrstriplower.0ss /root/hermes-webui/api/routes.py r:s2LLLQ#a&&,,....00LLL)pathmtimeidentity!_MESSAGING_SESSION_METADATA_CACHE session_resetsession_switch csp_report_CSP_REPORT_RATE_LIMIT<di)_profiles_matchreturnct|j}|ddgd}|dvS)zReturn True if the request URL has `?all_profiles=1` (or true/yes). Centralizes the opt-in parsing so /api/sessions and /api/projects use the same shape. Accepts 1/true/yes (case-insensitive) for ergonomics. all_profilesr)1trueyeson)rquerygetrr) parsed_urlqsraws r_all_profiles_query_flagr4^sR *" # #B &&" & &q ) / / 1 1 7 7 9 9C , ,,rc d ddlm}t|dz S#t$r ddlm}t|cYS#t$r]tt jdttj dz  dz cYcYSwxYwwxYw)aReturn the skills directory for the request's active Hermes profile. WebUI profile switches are cookie/thread-local scoped, so the agent module-level ``tools.skills_tool.SKILLS_DIR`` can still point at the server startup profile. Skills UI endpoints must derive the directory from ``get_active_hermes_home()`` for every request instead of reading that process-global constant. rget_active_hermes_homeskills) SKILLS_DIR HERMES_HOME.hermes) api.profilesr7r Exceptiontools.skills_toolr9osgetenvrhome expanduser)r7r9s r_active_skills_dirrCis h777777**,,--88 hhh h 4 4 4 4 4 4 ## # # # h h h -TY[[95L1M1MNNOOZZ\\_gg g g g g g h hs-" B/AB/A"B+&B/*B++B/base_dir candidatec ||dS#ttf$rYdSwxYw)NTF)resolve relative_toOSError ValueError)rDrEs r_skill_path_withinrKs_''(8(8(:(:;;;t Z uus9=AAskill_md skills_dirsc|D]O} ||}n#t$rY%wxYw|j}t|dkr |dcSdSdS)Nr)rHrJpartslen)rLrM skills_dirrel_pathrPs r_skill_category_from_pathrTsz!  ++J77HH    H  u::??8OOOtt 4s  ))rRc|g} ddlm}|d|Dn#t$rYnwxYwd|DS)Nr)get_external_skills_dirsc34K|]}t|VdSNrrps r z,_active_skill_search_dirs..s(@@DGG@@@@@@rc:g|]}||Sr)existsrYs r z-_active_skill_search_dirs..s% * * *!qxxzz *A * * *r)agent.skill_utilsrVextendr=)rRdirsrVs r_active_skill_search_dirsrbs >>>>> @@%=%=%?%?@@@@@@@      * *t * * **s-3 AAc|rt|ddnd}|siSd|d}t|dd}t|dd}|r||d<|r||d<|S)zHReturn explicit no-cleanup metadata for worktree-backed session actions. worktree_pathNT)worktree_retainedrdworktree_branchworktree_repo_root)getattr)sessionrdpayloadrfrgs r_worktree_retained_payloadrks?FPGG_d;;;DM  !&Gg'8$??O *>EE5%4!";(:$% Nrsidc tt|dS#t$ricYSt$r td|icYSwxYw)NT metadata_onlyz7Failed to read worktree metadata for deleted session %s)rk get_sessionKeyErrorr=loggerdebug)rls r)_worktree_retained_payload_for_session_idrtsw)+c*N*N*NOOO   NPSTTT s A&AAcategoryc zddlm}ddlm}mm}m}m}m}| s"| dddggd|ddSg}t} |} t|} | D]} || d D]} tfd | jDr$| j} | d d d}||\}}||sd|d|jd d}|| vs|| vr|dd}|sY|dD]1}|}|r|ds|}n2t-||kr|d |dz dz}| ||||t3| | db#t4t6f$r'}t8d| |Yd }~d }~wt<$r)}t8d| |dYd }~d }~wwxYw߉rfd|D}||}t?td|D}d||t-|d}|rd|d<nd |d!<|S)"aList skills using an explicit local skills directory. This mirrors ``tools.skills_tool.skills_list`` closely, but keeps the local scan root explicit so per-client WebUI profile switches do not race on or leak through the skills tool's module-global ``SKILLS_DIR``. riter_skill_index_files)MAX_DESCRIPTION_LENGTH_EXCLUDED_SKILL_DIRS_get_disabled_skill_names_parse_frontmatter _sort_skillsskill_matches_platformTparentsexist_okz-No skills found. Skills directory created at /)successr8 categoriesmessageSKILL.mdc3 K|]}|vV dSrXrrpartrzs rr[z(_skills_list_from_dir..s)KKD4//KKKKKKrutf-8encodingNname@ descriptionr* #rO...)rrruz Failed to read skill file %s: %sz)Skipping skill at %s: failed to parse: %sexc_infocFg|]}|dk|Srur0)rrrus rr^z)_skills_list_from_dir..s/MMMAquuZ/@/@H/L/La/L/L/Lrc3jK|].}|d|dV/dS)ruNrrs rr[z(_skills_list_from_dir..s?WW!QUU:EVEVWAEE*--WWWWWWr)rr8rcountz@Use skill_view(name) to see full content, tags, and linked fileshintz%No skills found in skills/ directory.r) r_rxr>ryrzr{r|r}r~r]mkdirsetrbanyrPparent read_textr0rrsplit startswithrQaddappendrTUnicodeDecodeErrorPermissionErrorrrrsr=sorted)rRrurxryr{r|r}r~ all_skills seen_namesdisabled search_dirsscan_dirrL skill_dircontent frontmatterbodyrrlineerresultrzs ` @r_skills_list_from_dirrs988888      555TzTTT    J55J((**H+J77K##..xDD" " HKKKKHNKKKKK  I ",,g,>>uuE$6$6w$?$?! T--k::"vy~>>ssC:%%)9)9)oomR@@ "" $ 2 24 8 8""#zz||"(<(<"*.K!E{##&<<<"-.J0F0J.J"Ke"SKt$$$!! $'2$=h $T$T'8 N N N ?1MMMMMMMM    ?1W[ ?" HNMMMMMMM j))JWWzWWWWWXXJ Z F D[vCy Ms157G+-+G+CG++I<H I+IIrc:ddlm}ddlmm}t |pdd}|r|sdS|g}d|vr7|dd\}}|r|r| |d||D]}||z } t|| s| r | d z r | | d z fcS| d } | rt|| r | j | fcS||d D]} tfd | jDr#| j } | j|kr| | fcS || d dd\} }| d|kr| | fcS#t&$rYwxYw|dD]4} | jd kr| j|krt|| r | j | fcS5dS)z?Resolve a WebUI skill name inside an explicit skills directory.rrw)rzr|r*rNN:rz.mdc3 K|]}|vV dSrXrrs rr[z%_find_skill_in_dir..*s)GGt++GGGGGGrrrNrr*.md)r_rxr>rzr|rrr]rrrKis_dir with_suffixrrrPrrr0r=rglobstem)rrRrxr|raw_namecandidate_names namespacebarecandidate_name direct_path legacy_mdrLrr_rzs @r_find_skill_in_dirrs888888JJJJJJJJ4:2$$&&,,S11H :,,..zjO h"..a00 4  : :  " "i#8#8$#8#8 9 9 9)// >1 !*k::        9[:%=$E$E$G$G 9 j 88 8 8 8++E22      /"4Z"K"K /#Y. . . .**:zBB   GGGGGGG G G  O >X % %h& & & & //0B0BG0B0T0TUZVZUZ0[\\NKv&&(22 (****3    H  %%f--// >Z ' '  >X % %*.?s]]]q6]]]rr8FzSkill 'z ' not found.z+Use skills_list to see all available skills)rerroravailable_skillsr)rr0)rrR availables r_skill_not_found_payloadr>sa]]$9*$E$E$I$I(TV$W$WX[Y[X[$\]]]I-4---%=   rcddlm}t}t||\}}|sdt |pdvr ddlm}m}ddlm }m }||\} } || rt||} | || | r6||} t| trtj| n| Sn#t $rYnwxYwt#||S|r|dz |krt |nt |} || } t| trtj| n| }|S)Nr) skill_viewrr*)is_valid_namespaceparse_qualified_name)discover_pluginsget_plugin_managerr)r>rrCrrr_rrhermes_cli.pluginsrrfind_plugin_skilllist_plugin_skills isinstancejsonloadsr=r)r _skill_viewrRrrLrrrrr_barepmr3 target_namedatas r_skill_view_from_active_dirrHs;;;;;;#%%J,T:>>Ix : #djb// ! ! VVVVVVVVSSSSSSSS#7#7#=#= 5%%i00P$$&&&++--B++D11=AVAVW`AaAa=)k$//2t|dtr|dni}t#|d |d } t#|d |d t#|d |d t#|d |d t#|d|dt#|d|d| | d||<t5t |td<|jtd<|td<dddn #1swxYwY|S)Nrrrrrz5Failed to parse gateway sessions metadata from %s: %s session_idoriginplatform session_keykeychat_id thread_id chat_typeuser_id)rrrrrrr)rr]statr _MESSAGING_SESSION_METADATA_LOCKrst_mtimecopyr=rrrrrrsrdictrrr0) rstcache raw_sessions _json_errmapping_entryrrrs r"_load_gateway_session_identity_mapr s ) + +D ;;==  YY[[1 - 0 0V}D ))eGn .K.KZ(--// 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0  z$..'."B"BCC  LdT]^^^  "G,%%"))++  Ffd++ $VZZ %=%=>>J -7 88L8Ld-S-S[VZZ)))Y[F"6::j#9#96::j;Q;QRRH*6::m+D+DfjjQVFWFWXX&vzz)'<'S>STT(K)@)@&**[BYBYZZ(K)@)@&**[BYBYZZ&vzz)'<'S>STT$&##GJ   *@@47II)&157[)'28?)*5@@@@@@@@@@@@@@@ <<>>sl"B1AB% B1 B1%B))B1,B)-B11 C?C(C-- D7DDD1MMMjob_idc|t5tjt|<ddddS#1swxYwYdSrX)_RUNNING_CRON_LOCKtimer r s r_mark_cron_runningrs} 11%)Y[[6"111111111111111111 155c|t5t|dddddS#1swxYwYdSrX)r r poprs r_mark_cron_doners --vt,,,------------------rct5t|}| ddddSdtj|z fcdddS#1swxYwYdS)z%Return (is_running, elapsed_seconds).N)FT)r r r0r )r ts r_is_cron_runningrs %%  " "6 * * 9%%%%%%%%TY[[1_$ %%%%%%%%%%%%%%%%%%sAAAArcg}dD]b}||r|d|d|}|dkr||dzc|rt|ndS)zBReturn the start index of a markdown Response heading, if present.) ## Response # Responserrr)rrfindmin)r candidatesheadingidxs r_cron_response_marker_indexr!sJ0'' ??7 # # !   a iiW'' !88   cAg & & &( 03z???b0rlimitc>|dkrdSt||kr|St|}|dkra|dtt|}||dd}|r|d|n|}|d|S|| dS)a7Return a bounded cron output window that preserves useful response text. Cron output files can contain large skill dumps in the Prompt section. The UI already extracts ``## Response`` when present, so keep that section in the API payload instead of blindly returning the first ``limit`` chars. rr*Nrz ... )rQr!r_CRON_OUTPUT_HEADER_CONTEXTrstriplstrip)rr" response_idxheaderresponsers r_cron_output_content_windowr*s zzr 4yyE .t44LqEs6 EEEFMMOO &--d3328FV..H...hvv =rjobct|pi}|dd|ddu|d<|S)aReturn a cron job payload with optional UI settings normalized. Legacy jobs intentionally persist without ``profile`` so they keep the scheduler's server-default behavior. The API still returns ``profile: None`` so the UI can label that state explicitly instead of guessing. ``toast_notifications`` is a WebUI preference for completion toasts. Legacy jobs default to enabled so existing behavior is preserved unless a job is explicitly muted. profileNtoast_notificationsF)r setdefaultr0)r+rjs r_cron_job_for_apir0sK39"ooG y$'''%,[[1F%G%Gu%TG !" Nrcd|pgDS)Nc,g|]}t|Sr)r0)rr+s rr^z&_cron_jobs_for_api..s! ; ; ;s c " " ; ; ;rr)jobss r_cron_jobs_for_apir4s ; ;tzr ; ; ;;rcddlm}dh}|D]a} t|dpd}n#t $rYFwxYw|r||b|S)Nr)list_profiles_apidefaultrr*)r<r6rr0rAttributeErrorr)r6namesr-rs r_available_cron_profile_namesr: s...... KE$$&& w{{6**0b117799DD    H    IIdOOO Ls6A AAc|dSt|}|sdS|tvrtd||S)NzUnknown profile: )rrr:rJ)rr-s r_normalize_cron_profile_valuer<s^ }t%jj  G t355556W66777 NrcHddlm}m}t|pidpd}|s |S|t vrrr0rr:rrwarning)r+r7r>r3s r_profile_home_for_cron_jobrB"sQPPPPPPP sybooi((.B / / 5 5 7 7C (%%''' /1111 W YBOOD# & &   &%''' & &s + ++rc| fd}| |}n3ddlm}||5|}dddn #1swxYwY|d|fdS#t$rP}ddl}|dt |jd||fYd}~dSd}~wwxYw)zARun one cron job inside a child process pinned to a profile home.c&ddlm}|S)Nr)run_job)cron.schedulerrE)rEr+s r_runz'_cron_job_subprocess_main.._run:s# . . . . . .73<< rNrcron_profile_context_for_homeokrz: )r<rIput BaseException tracebacktype__name__ format_exc)r+execution_profile_home result_queuerGrrIexcrMs` r_cron_job_subprocess_mainrT7sX\     " )TVVFF B B B B B B../EFF                 $((((( \\\'d3ii&8#A#AC#A#A9CWCWCYCYZ[[[[[[[[[\s8#A! = A!AA!AA!! B;+AB66B;cdD]a}|pi|}|dvr t|}n#ttf$rYBwxYw|dkrt d|dzcSbdS)zFReturn how long the manual-run parent waits for child result payloads.)timeout_secondsmax_runtime_secondstimeoutrrN@>@g@)r0float TypeErrorrJmax)r+rr3rs r'_cron_subprocess_result_timeout_secondsr^MsD + +ybooc"" *    #JJEE:&    H  199tUT\** * * *  =s2AAcddl}ddl}|d}|d}|t |||f}|t|}d}dd g} || ^}} ng#|j $rZd}| r4| | d d |d dd g} n d|j dd g} YnwxYw| d | r6| | d |dkrd}dd g} ne#| d | r6| | d |dkrd}dd g} wxYw||n-#||wxYw|dkr| dS| d} t!| dkr| dnd } | rt"d| t'| )aExecute cron.scheduler.run_job without holding the parent cron env lock. cron.scheduler/cron.jobs still rely on process-global HERMES_HOME and module constants, so running the job body in a child process gives each long cron execution its own globals. The parent process only uses cron_profile_context for short metadata reads/writes and remains responsive to unrelated cron UI and API calls while the job runs. rNspawnrmaxsize)targetargsrz4cron run subprocess failed before producing a resultr*rXrz.cron run subprocess produced no result within gzs and was terminatedz%cron run subprocess exited with code z without producing a resultrJz9cron run subprocess did not exit after returning a resultz!Manual cron subprocess failed: %s)multiprocessingqueue get_contextQueueProcessrTstartr^r0Emptyis_alive terminatejoinexitcodeclose join_threadrQrrr RuntimeError) r+rQrgrhctxrRprocessresult_timeoutstatusrjrtraceback_texts r#_run_cron_job_in_profile_subprocessrz^sLLL  % %g . .C99Q9''Lkk()< 8G MMOOO>$FSG LLL # # #!! !!### Q '''T>>$FSG   """"   """" ~~qzajG#&w<JJJ w  s?>BEA!C;8E:C;;E>A!G-A"GG--*Hc ddlm m |dd|p|}d} t ||\  fd}|||np#t $rct d || fdn+#t $rt d YnwxYwYd nd wwxYwtd S#twxYw) asWrapper that tracks running state around cron.scheduler.run_job. ``profile_home`` is the cron store that owns the job row/output metadata. ``execution_profile_home`` is the selected per-job profile used to load agent config/.env while running. When no job profile is selected, both homes are the same and legacy server-default behavior is preserved. r) mark_job_runsave_job_outputr?r*c| |Sddlm}||5|cdddS#1swxYwYdS)NrrH)r<rI)rAfnrIs r_with_cron_homez*_run_cron_tracked.._with_cron_homes <244K>>>>>> * *4 0 0  244                  s 599cR}}|rsd}d}||dS)NFzWAgent completed but produced empty response (model error, timeout, or misconfiguration)r) _success_errorrfinal_responser r|outputr}rs r_persist_successz+_run_cron_tracked.._persist_successsU OFF + + + 'fH s s r L6 2 2 2 2 2rz!Manual cron run failed for job %sc8dtSNFr)rr r|srz#_run_cron_tracked..s,,vucRSff2U2Urz-Failed to mark manual cron run failure for %sN) cron.jobsr|r}r0rzr=rr exceptionrsr) r+ profile_homerQrrrrrr r|rr}rs @@@@@@@@r_run_cron_trackedrs87777777 WWT2  F3C| 1T '2 2 . 3 3 3 3 3 3 3 3 3 3 3  &67777 RRR>rrc^tj}t5t|}|s ddddS|\}}||z t kr)t|d ddddStj|cdddS#1swxYwYdSrX) r  monotonic_LIVE_MODELS_CACHE_LOCKrr0_LIVE_MODELS_CACHE_TTLrrdeepcopy)rnowcachedtsrjs r_get_cached_live_modelsrs* .  C &&#'',, &&&&&&&& G 8- - -  " "3 - - -&&&&&&&&}W%%&&&&&&&&&&&&&&&&&&sB"/B"B""B&)B&rjct5tjtj|ft |<ddddS#1swxYwYdSrX)rr rrrr)rrjs r_set_cached_live_modelsrs MM#'>#3#3T]75K5K"L3MMMMMMMMMMMMMMMMMMs0AA  A cxt5tddddS#1swxYwYdSrX)rrclearrrr_clear_live_models_cachers~ ##  """##################s /33)" STATE_DIR SESSION_DIRDEFAULT_WORKSPACE DEFAULT_MODELSESSIONS SESSIONS_MAXLOCKSTREAMS STREAMS_LOCK CANCEL_FLAGSSERVER_START_TIME_resolve_cli_toolsets_INDEX_HTML_PATHget_available_models IMAGE_EXTSMD_EXTSMIME_MAPMAX_FILE_BYTESMAX_UPLOAD_BYTES CHAT_LOCK_get_session_agent_lockSESSION_AGENT_LOCKSSESSION_AGENT_LOCKS_LOCK load_settings save_settingsset_hermes_default_modelmodel_with_provider_contextget_reasoning_statusset_reasoning_displayset_reasoning_effortcreate_stream_channelget_webui_session_save_modeSTREAM_GOAL_RELATEDPENDING_GOAL_CONTINUATION) requirebad safe_resolvejr read_body_security_headers_sanitize_errorredact_session_data _redact_text)build_agent_health_payload)RequestDiagnostics)build_system_health_payloadmethodcBt|d|d|jddpdS)zHReturn a Kanban-specific 404 for stale clients/obsolete endpoint shapes.zunknown Kanban endpoint:  z. If this appeared after a WebUI update, your browser may be running a stale cached bundle; use Hard refresh now, then reopen Kanban.rxT)rr)handlerparsedrs r_kanban_unknown_endpointrOsU  O O O O O O     rc t|dd}|sdSt5|tv}dddn #1swxYwY|rdS|}t|ddr ddlm}||jd}n<#t $r/td|t|d d YdSwxYw|dSt|dds` d|_ t|d rd|_ t|d rg|_ t|d rd|_ n#t $rYnwxYwdSt|j5t|dd|kr ddddSt|d|_ t|d rd|_ t|d rg|_ t|d rd|_ |n:#t $r-tdt|d d YnwxYwdddn #1swxYwY||ur^ d|_ t|d rd|_ t|d rg|_ t|d rd|_ n#t $rYnwxYwdS)aClear persisted streaming flags when the in-memory stream no longer exists. A server restart or worker crash can leave active_stream_id/pending_* in the session JSON while STREAMS is empty. The frontend then keeps reconnecting to a dead stream and shows a permanent running/thinking state. SAFETY (#1558): If ``session`` was loaded with ``metadata_only=True``, its ``messages`` array is empty by design and calling ``save()`` would atomically overwrite the on-disk JSON, wiping the conversation. In that case we re-load the full session before mutating, so the persisted write carries the real messages forward. active_stream_idNF_loaded_metadata_onlyrrprnu_clear_stale_stream_state: refused to clear stale stream %s for session %s — full reload failed and we will not save a metadata-only stub. See #1558.rr@pending_user_messagepending_attachmentspending_started_atz7_clear_stale_stream_state: save() failed for session %sT)rhrr api.modelsrprr=rrrArhasattrrrrr+_materialize_pending_user_turn_before_errorsaver)ri stream_id stream_alive original_stub _get_sessions r_clear_stale_stream_stater\s!3T::I u ,, G+ ,,,,,,,,,,,,,,,u Mw/77"  > > > > > >"l7#5UKKKGG    NN177L#>>     55  ?5w 2D99  15 .=*@AA>9=M6=*?@@;8:M5=*>??<7;M4    5 !!3 4 4 7. 5 5 B B 4G<<<#' 72 3 3 0+/G ( 71 2 2 -*,G ' 70 1 1 .)-G &  LLNNNN      Is33      (G## -1M *}&<== :59 2}&;<< 746 1}&:;; 837 0    D  4s 377A//5B('B(A D DD4HAH4G H 4H=H?HHHHA I,, I98I9crd}|D]}t|ts|d}|r|dsE|ddur] t|d}n-#t$r t d|dYwxYw|t|p|}|S) zIClear stale persisted stream fields before /api/sessions serializes rows.Frr is_streamingTrnz>Failed to load session %s while reconciling stale stream stater)rrr0rpr=rrrsr) session_rowschangedrowrlris r._reconcile_stale_stream_state_for_session_rowsrsG@@#t$$  ggl## #''"455   77> " "d * *  !#T:::GG    LLP     H   ? +G44? Ns#A55'BBrc|}|sdS|drs|d}|dkrX|d|}||dzd}|dr(|ddr ||ddfS|dfS|ddkr1|dd\}}|r||fS|dfS)zpSplit a host or host:port string into (hostname, port|None). Handles IPv6 bracket notation, e.g. [::1]:8080.)r*N[]rrNr)rrrrisdigitrrsplit)rendhostrestports r_normalize_host_portrs KKMM   ! !E x jjoo "993> :  $;r origin_scheme origin_port allowed_portcR||krdS|dkrdnd}|s||krdS|s||krdSdS)aReturn True when two ports should be considered equivalent, scheme-aware. Treats an absent port as the scheme default: port 80 for http, port 443 for https. Port 80 is NOT treated as equivalent to 443 (different protocols = different origins). Thttps44380Fr)r r r r7s r _ports_matchrsZ l""t$//eeTG <722t K722t 5rctjdd}t}|dD]}|d}|s>|ds5|ds ddl}td |d d |j | ||S) zParse HERMES_WEBUI_ALLOWED_ORIGINS env var (comma-separated) into a set. Each entry must include the scheme, e.g. https://myapp.example.com:8000. Entries without a scheme are silently skipped and a warning is printed. HERMES_WEBUI_ALLOWED_ORIGINSr*,rhttp://https://rNz4[webui] WARNING: HERMES_WEBUI_ALLOWED_ORIGINS entry zU is missing the scheme (expected https://hostname or http://hostname). Entry ignored.T)flushfile) r?r@rrrr%rrsysprintstderrr)r3rrrs r_allowed_public_originsrs )2B 7 7C UUF3   $$S))//11    ++ u/?/? /K/K  JJJ ]u]]]      5 Mrc8|jdd}|jdd}|jdd}|s|sdS|p|}tjd|}|sdS|d}|d d d }t|\}} |d d } | tvrdSd ||jd d|jddfD} | D].} t| \} }|| krt|| |rdS/dS)z6Reject cross-origin POST requests. Returns True if OK.Originr*RefererHostTz^https?://([^/]+)Frrz://rc^g|]*}||+Srr)rhs rr^z_check_csrf..4s@ 7799  rzX-Forwarded-Hostz X-Real-Host) headersr0_rematchgrouprrrr%rr)rrrefererrrcm origin_hostr  origin_namer  origin_value allowed_hostsallowed allowed_namer s r _check_csrfr/s _ 2 . .Fo!!)R00G ?  vr * *D 't  wF &//A u''!**KGGAJJ$$U++A.4466M3K@@K771::$$S))//11L.0000t  O   2B 7 7 O   r 2 2 M!%9'%B%B" l , & &< {T`+a+a &44 5rcz t|dd}|rt|dSn#t$rYnwxYwdS)Nclient_addressrunknown)rhrr=)raddresss r_client_ip_for_rate_limitr4Ds[ '#3T::  #wqz?? " #      9s '+ 88)rrc|tjn|}t|}|tz t5fdt|gD}t |tkr|t|< ddddS|||t|<dddn #1swxYwYdS)Nc g|] }|k| Srr)rrcutoffs rr^z,_csp_report_rate_limited..SsWWWR"PV,,b,,,rTF) r r4%_CSP_REPORT_RATE_LIMIT_WINDOW_SECONDS_CSP_REPORT_RATE_LIMIT_LOCKr#r0rQ_CSP_REPORT_RATE_LIMIT_MAXr)rrr timestampsr7s @r_csp_report_rate_limitedr<Ns#$)+++#C #G , ,C 8 8F $11WWWW#9#=#=c2#F#FWWW z??8 8 8*4 "3 ' 11111111 #&0s# 111111111111111 5sA B<B<<CCrxc|||dd|dS)NContent-Length0T) send_response send_header end_headers)rrxs r_send_no_contentrD\sD &!!! (#...  4rc t|jdd}n#t$rd}YnwxYw|tkr6 |jtn#t$rYnwxYwd|dS|r|j|nd} tj| dS#t$rdt|dcYSwxYw) Nr?rbody_too_large) discardedbytess{}rT)invalidrH) intr#r0r=_CSP_REPORT_MAX_BODY_BYTESrfilereadrrdecoderQ)rlengthr3s r_read_csp_report_payloadrPcsW_(()91==>>  ***  M  9 : : : :    D -???(. 9'-  V $ $ $EC4z#**W--... 444#c((333334s0(+ :: A)) A65A6&CC#"C#ct|r7tdt|t |St |}tdt||t |S)zBCollect browser CSP report-only violations without requiring auth.z/Dropped CSP report from %s: rate limit exceededzCSP report from %s: %s)r<_CSP_REPORT_LOGGERrAr4rDrPinfo)rrjs r_handle_csp_reportrTus(()"" = %g . .    (((&w//G46OPW6X6XZabbb G $ $$rct|pd}|sdS|tvr t|SdD]\}}||r|cSdS)Nr*))rr)rr)rr)rr)rr)rr) openrouterrV)customrW)rrr_PROVIDER_ALIASESr)rr3prefix normalizeds r_normalize_provider_idr[s ekr   " " ( ( * *C r  %%     >>& ! !      2rcatalogct}t}|dpgD]}t|dpd}|sM||t |}|r||||fS)Ngroups provider_idr*)rr0rrrrr[)r\raw_provider_idsnormalized_provider_idsr&r3rZs r_catalog_provider_id_setsrbs!$(+X&&,"44%))M**0b117799??AA  S!!!+C00  4 # ' ' 3 3 3 4 44r provider_rawprovider_normalizedr`rac"||vp |o||vp|o||vSrXr)rcrdr`ras r_catalog_has_providerrfs< (( T  K$7;K$K T  R$7;R$Rrmodelactive_providerc|}dD],}||rt||kcS-dS)NrrrF)rrr[)rgrh model_lower bare_prefixs r%_model_matches_active_provider_familyrms]++--K2JJ  ! !+ . . J)+66/I I I I J 5rct|pd}|dr d|vr|ddd}d|vr|ddd}|dd|ddkS)Nr*@rrr-.)rrrrrreplacer)rErgs r_catalog_model_id_matchesrssIO$$**,,IC  0SI%5%5$$S!,,Q/  iOOC++A.   S# & & , , . .%--S2I2I2O2O2Q2Q QQrct|pd}|r|dkrdS|dr |dd}|pdS)Nr*r7ror)rrrr)rrs r_clean_session_model_providerrusp5;B%%''--//H x9,,t3 ABB<  trct|pd}|drPd|vrL|dddd\}}t |}|}|r|r||fS|dfS)Nr*rorr)rrrrru)rg provider_hint bare_modelrrs r_split_provider_qualified_modelrys     " " $ $E "$)!""I$4$4S!$<$<! z0??!!  " "> ! $;rraw_active_providerc|dkrdSdsdS|dpgD]}t|dpddkrOt fd|dgDcSdS) aReturn True when a bare Codex model needs separate provider context. OpenAI, OpenAI Codex, Copilot, and OpenRouter can all expose GPT-looking bare names. If a session stores only ``gpt-...`` while Codex is active, a later provider-list/default-model round trip can lose the user's Codex choice. Store the provider separately instead of converting the persisted model to ``@openai-codex:model``. rFrr^r_r*c3K|]<}t|tt|dV=dS)r?N)rrrsr0)rentryrgs rr[z8_should_attach_codex_provider_context..s[  %&& %eiioou = =      rmodels)rrr0rrr)rgrzr\r&s` r%_should_attach_codex_provider_contextrsn,,u ;;== # #E * *uX&&,"   uyy''-2 . . 4 4 6 6 < < > >. P P     8R00        5rmodel_idmodel_providerct}t|dptpd}t|pd}t |}|s||t |fSt|d}t|dpd}|s|st|\}} || p|dfSt|\} } |r| s||dfS| drd|vr| pd} t| } | }| r|s||dfSt|\} }| |kp | |kp| o| |k}|r|| dfSt| | | |r|| dfSt||rt|||r|nd}||dfS|rt|||r|nd}||dfS|| dfS|d }|d kr|}d D]h}| |rQt|}|r$||kr|rt|||r|nd}||dfcSt|||r|n|}||dfcSi||dfSt|d|}|d vr\|d vr||dfS|dpg}d|D}t!d|D}||vs|r||dfS|r||dfS||dfS|dkr|dkr ||r||dfS|p|}|r|d vr ||kr|r||dfS||dfS)a#Return (effective_model, effective_provider, model_was_normalized). Sessions can outlive provider changes. When an older session still points at a different provider namespace (for example `gemini/...` after switching the agent to OpenAI Codex), reusing that stale model causes chat startup to hit the wrong backend and fail. Normalize only obvious cross-provider mismatches. When a model has an explicit provider context, keep the model string itself in its picker/API shape and carry the provider as separate state. default_modelr*rhFrorNTrrrj>rWrV>r*rWrVr^cVh|]&}t|dpd'S)r_r*)r[r0rrfs rrz:_resolve_compatible_session_model_state..is?! ! ! CD "155#7#7#=2 > >! ! ! rc3LK|]}|dpddkV dS)r_r*rVNrrs rr[z:_resolve_compatible_session_model_state..msI# # =>QUU= ! ! 'RL 8# # # # # # rrr)rrr0rrruboolr[rryrrbrfrmrrr)rrr\rrgrequested_providerrhrzrxexplicit_providerbare_for_contextrcrdr`rahint_matches_activeprovider_contextslashrkrlr^routable_provider_idshas_openrouter_group_active_for_compares r'_resolve_compatible_session_model_staters4#$$G O44K KLLRRTTM B   % % ' 'E6~FF F0$}2E2EEE,W[[9J-K-KLLO gkk*;<<BCCIIKKQQSS E#6E(G(N(N% %'=+=uDD*I%*P*P''0"30(%// -*(.B 4\BB%++--  4: 4,e3 34Mg4V4V11 / / P. P#N(;(N   .,- -    #    . ,- - 0_ M M 69EXZabb##  /5 5  99H[]dee##  !"2D8 8lE)) JJsOOE qyykkmm 6 6 6K%%k22 6!7 !D!D!An&G&GM&GAPcelmm"++!% )*:D@@@@=UDWY`aa,''+! .5555 6(%//+E&5&M::N222 9 9 9,e3 3X&&,"! ! HN! ! !  ## # BH# # #    2 2 26J 2,e3 3  ; "4d: :(%// ~-- h & &  &  '1477 *@-@7.0LLLQ_cvQvQv|IQv0$66 $e ++rc0t|\}}}||fS)zBReturn (effective_model, model_was_normalized) for legacy callers.)r)reffective_model _providerrs r!_resolve_compatible_session_modelrs"*QRZ*[*['OY G ##rct|ddpd}tt|dd}t|pd|\}}}||k}|r8|r6|r||ks|r,|r ||kr||_||_|d|S)Nrgr*rFtouch_updated_at)rhrurrgrr)rioriginal_modeloriginal_providerreffective_providerrprovider_changeds r!_normalize_session_model_in_placersWgt44:N5)4004[$440O'*->>-/- -#66;K6  ,~88+GM!3 e ,,, rczt|ddpd}t|pdt|dd\}}}|p|S)a;Resolve the model a session should display without mutating persisted state. `GET /api/session` should stay side-effect free. If a stale persisted model needs normalization for the current provider configuration, return the effective model for the response payload only and leave disk state alone. rgNr*rrhr)rirrr_changeds r,_resolve_effective_session_model_for_displayrsUWgt44:N+R$)400,,(OY  ,n,rcvt|ddpd}t|pdt|dd\}}}|S)Nrgr*rr)rir_modelrrs r5_resolve_effective_session_model_provider_for_displayrsMWgt44:N!H$)400""FHh Orrcurrent_providerc|!t|nd}|t|nd}|r":"::: rct|d|d|d|d}|s|dpd}t|S)Nr source_tagsourcer source_label messaging)rr0rrir3s r_session_messaging_raw_sourcer*s{  L!! L!! H J   C 9kk.))8[ &s + ++rct|d}tt|d|d|d|d|d|d|d|dS)Nrrrrrr)rr0rr)rirs r_has_durable_messaging_identityr6s/ L0I0IJJH   ]## M"" )** Y I $%% [!! K       rc ttt|dpdS#ttf$rYdSwxYwNr)rJr[rr\rJrs r_numeric_countrDsS5UA..3!44555 z "qq+.AAactive_gateway_session_idsactive_gateway_sourcesct|}t|sdS|r||vrdSt|d}|r||vrdSt|dtvrdSt |sdS|drdSt |d}t |d}|dkr|dkrdSdS) aHide stale Gateway-owned internal rows after an external chat moved on. Hermes Gateway keeps the external conversation identity in sessions.json. Compression/session-reset can leave old Agent state.db rows behind; those rows are implementation segments, not distinct conversations users chose. Only apply this aggressive hiding when Gateway is currently advertising an active session for the same messaging source. Without that source-of-truth file we keep the old fallback behavior. Fr end_reasonTparent_session_id message_countactual_message_countr)rrrr0_STALE_MESSAGING_END_REASONSrr)rirrrrlr actual_counts r$_should_hide_stale_messaging_sessionrKs/w77J %j 1 1u %;Q)Q)Qu gkk,// 0 0C s000u7;;|,,--1MMMt *7 3 3t{{&''t"7;;#?#?@@M!'++.D"E"EFFLla//t 5rc x|sdSt|tst|ddn|ddkrdSt t|tst|ddn|dt|tst|ddn|dt|tst|ddn|dt|tr|d nd}t |S) z?Return true for sessions backed by external messaging channels.Fsession_sourceNrTrrrr)rrrhr0rrrs rrrts3 u9CGT9R9R u*D 1 1 1X_XcXcdtXuXu{F F Ft 4>w4M4Mlt,,,SZS^S^_kSlSl4>w4M4Mlt,,,SZS^S^_kSlSl0:7D0I0Id4(((w{{[cOdOd'1'4'@'@J N###d   C &c * **rc tj|}t|rdSn#t$rYnwxYwtt |S)zCDetect messaging-backed sessions from WebUI metadata or Agent rows.T)Sessionloadrr=r)rlris r_is_messaging_session_idrsg ,s## ' 0 0 4       '(DS(I(I J JJs #( 55c tt|d|d|d|ddpdpdS)Nlast_message_at updated_at created_at started_atrr)r[rr0ris r_session_sort_timestamprsu  KK) * * KK % % KK % % KK % %          rct|tsdSt|rdS|dsdSt |dpd}|tvrdSt |dpd}|dvp|do| p|d kS) zOReturn True for importable CLI sessions that are safe to classify for settings.FTrrr*title)r*untitledcliz cli sessionz sessionr) rrrr0rrrrendswith)rirrs r_is_cli_session_for_settingsrs gt $ $u'""t ;;' ( (u X&&," - - 3 3 5 5 ; ; = =F """u  G$$* + + 1 1 3 3 9 9 ; ;E : : ennZ>X>X?  %forrrcli_capc|dkr|Sg}d}|D]2}t|r |dz }||kr||3|S)z?Keep only the most recent CLI-visible sessions after filtering.rr)rr)rrkeptcli_seenris r_cap_recent_cli_sessionsrsj!|| DH ' 0 0  MH'!! G Kr ui_sessioncli_metac,|s|S|st|St|}d|d<dD]+}t||}|r|||<,|d |d|d<|d |d|d<|d |d|d<|dTtt |dt |d|d<nh|d Stt |dt |d |d<|d r(|d }|r|d kr |d |d <|d r9|d r|d d kr |d |d <|S)zMerge source-of-truth CLI metadata into a sidebar session row. Preserve UI-owned state (archived/pinned) while replacing metadata that can legitimately drift in WebUI snapshots. Tr)rrrrrrrrrrrrr_lineage_root_id_lineage_tip_id_compression_segment_countrNrrrrrUntitledrgr2)rrr0r]r)rrmergedrr current_titles r_merge_cli_sidebar_metadatars+   J *  F#F   $HLL--..  F3K||L!!-' 5|||L!!-' 5|||%&&2$,->$? !||O$$0"% 6::o66 7 7 8<<88 9 9# #  , - - 9"% 6::o66 7 7 8<<(>?? @ @# #  ||G0 7++  0  ; ;&w/F7O||G0zz'"" 0fjj&9&9Y&F&F&w/F7O Mrcbt|}t|sdSt||SrX)rrrrs r_messaging_source_keyrs4 ' 0 0C %c * *t &w 4 44rct}d|D}d|D}d|D}t}i}g}|D]}t |}|s||)t |||r;||vrR||||} | t|t| kr|||<|||||<| || td|S)z@Keep only the newest sidebar row per messaging session identity.c0h|]}|t|Srr)rrls rrz<_keep_latest_messaging_session_per_source.. s$!U!U!UsQT!U#c((!U!U!Urc h|]Z}t|ttt|d|d[S)rr)rrrrr0)rmetas rrz<_keep_latest_messaging_session_per_source.. sc  dD ! !#K0F0FQ[H\H\$]$]^^rc0h|]}t||Sr)r)rrs rrz<_keep_latest_messaging_session_per_source..s'pppMghnMoMopfppprNTrreverse) r keysrrrrrrr0rr`sort) rgateway_metadatarr kept_sourcesbest_by_sourcerrircurrents r)_keep_latest_messaging_session_per_sourcers9;;!U!U6F6K6K6M6M!U!U!U$++-- qp3Ippp UUL&(ND&&#G,,  KK  /9SUk l l   ,     S ! ! !$((--G"9'"B"BE\]dEeEe"e"e&-s# %sKK%%''(((II)4I888 Kr)rrp new_session all_sessions title_from_write_session_indexSESSION_INDEX_FILE_active_state_db_path load_projects save_projectsimport_cli_sessionrget_cli_session_messagesensure_cron_projectis_cron_session) load_workspacessave_workspacesget_last_workspaceset_last_workspacelist_dirlist_workspace_suggestionsread_file_contentsafe_resolve_wsresolve_trusted_workspacevalidate_workspace_to_add_is_blocked_system_path_strip_surrounding_quotes_workspace_blocked_roots) handle_uploadhandle_upload_extracthandle_transcribe)_sse_run_agent_streaming cancel_streamr) get_providersget_provider_quotaset_provider_keyremove_provider_key)apply_onboarding_setupget_onboarding_statuscomplete_onboardingprobe_provider_endpoint)cancel_onboarding_oauth_flowpoll_onboarding_oauth_flowstart_onboarding_oauth_flow) submit_pendingapprove_sessionapprove_permanentsave_permanent_allowlist is_approved_pending_lock_permanent_approvedresolve_gateway_approvalenable_session_yolodisable_session_yolois_session_yolo_enabledcdSrXraks rrro$rcdSrXrr<s rrrpsdrcdSrXrr<s rrrqsrcdSrXrr<s rrrrstrcdSNTrr<s rrrss$rcdSrrr<s rrrtsqrcdSrXrr<s rrrur?rcdSrXrr<s rrrvs4rcdSrrr<s rrrwser_approval_sse_subscribersctjd}t5t|g|dddn #1swxYwY|S)zBRegister an SSE subscriber for approval events on a given session.raN)rhrjr5rIr/r)rqs r_approval_sse_subscriberMs BA GG!,,Z<<CCAFFFGGGGGGGGGGGGGGG Hs/AAArLct5t|}|r6||vr2|||st|dddddS#1swxYwYdS)zRemove an SSE subscriber.N)r5rIr0remover)rrLsubss r_approval_sse_unsubscriberQs @@(,,Z88  @AII KKNNN @)--j$??? @@@@@@@@@@@@@@@@@@sAA((A,/A,headtotalc|rt|nd|d}t|d}|D]-} ||#tj$rY*wxYwdS)uPush an approval event to all SSE subscribers for a session. CALLER MUST HOLD `_lock`. Snapshots the subscriber list under the held lock and then calls `q.put_nowait()` on each (which is itself thread-safe). `head` is the approval entry currently at the head of the queue (the one the UI should display) — NOT the just-appended entry. With multiple parallel approvals (#527), the just-appended entry is at the TAIL, but `/api/approval/pending` always returns the HEAD, so SSE must match. `total` is the total number of pending approvals. Pass `head=None` and `total=0` when the queue has just been emptied (e.g. `_handle_approval_respond` popped the last entry) so the client knows to hide its approval card. Npending pending_countr)rrIr0 put_nowaitrhFull)rrRrSrjrPrLs r_approval_sse_notify_lockedrZs")-6$t***$OOG $ ( (R 8 8D   LL ! ! ! !z    D sA  AAcht5t|||ddddS#1swxYwYdS)aConvenience wrapper that takes `_lock` itself. Use only from contexts that don't already hold `_lock`. Production call sites (submit_pending, _handle_approval_respond) MUST hold the lock and call `_approval_sse_notify_locked` directly to avoid a notify-ordering race where a later append's notify can fire before an earlier append's notify (resulting in stale `pending_count`). N)r5rZ)rrRrSs r_approval_sse_notifyr\s ==#Je<<<==================s '++rapprovalct|}|dtjjt 5t j|g}t|ts|gt |<t |}| |t|}|d}t|||ddddS#1swxYwYdS)aAppend a pending approval to the per-session queue. Wraps the agent's submit_pending to: - Add a stable approval_id (uuid4 hex) so the respond endpoint can target a specific entry even when multiple approvals are queued simultaneously. - Change the storage from a single overwriting dict value to a list, so parallel tool calls each get their own approval slot (fixes #527). - Notify any connected SSE subscribers immediately. approval_idrN) rr/uuiduuid4hexr5r4rlistrrQrZ)rr]r} queue_listrSrRs rr/r/s NNE ]DJLL$4555  > >(b99 *d++ /%/LH[ !!+.J%   J!} $Ku=== > > > > > > > > > > > > > > > > > >sBCCC)r/ get_pendingresolve_clarify sse_subscribesse_unsubscribecdSrXrr<s rrrsTrcdSrXrr<s rrrr?rcdSrrr<s rrrsarenzSign inzEnter your password to continuePasswordInvalid passwordzConnection failed)langrsubtitle placeholderbtn invalid_pw conn_failedzfr-FRz Se connecterz(Entrez votre mot de passe pour continuerz Mot de passezMot de passe invalideuÉchec de la connexionzes-ESuIniciar sesiónu'Introduce tu contraseña para continuaru ContraseñaEntraruContraseña inválidauError de conexiónzde-DEAnmeldenz+Geben Sie Ihr Passwort ein, um fortzufahrenPasswortuUngültiges PasswortzVerbindung fehlgeschlagenzru-RUu Войтиu<Введите пароль, чтобы продолжитьu ПарольuНеверный парольu,Не удалось подключитьсяzzh-CNu登录u输入密码继续使用u密码u 密码错误u 连接失败zzh-TWu輸入密碼繼續使用u密碼u 密碼錯誤u 連接失敗zit-ITAccediz$Inserisci la password per continuarezPassword non validazConnessione fallitazja-JPuサインインu$パスワードを入力して続行uパスワードuパスワードが無効ですu 接続失敗zpt-BRzDigite sua senha para continuarSenhauSenha inválidauFalha na conexãozko-KRu 로그인u/계속하려면 비밀번호를 입력하세요u 비밀번호u)비밀번호가 올바르지 않습니다u 연결 실패) rlfresderuzhzh-Hantitjaptkoraw_langc|sdSt|}|sdS|tvr|S|dd}|}tD]}||kr|cS|dks?|ds*|ds|drdS|ds?|d s*|d s|d r d tvrd ndS|dd d}tD]}||kr|cSdS)z7Resolve settings.language to a known _LOGIN_LOCALE key.rlrrpr~zzh-cnzzh-sgzzh-hanszzh-twzzh-hkzzh-mozzh-hantrrr)rr _LOGIN_LOCALErrrrr)rrorZrrbases r_resolve_login_locale_keyrVs t x==   D t } c3''J     E 99;;%  JJJ  }}((11}U5E5Eg5N5N}RWRbRbclRmRm}t   AE$4$4W$=$=AAQAQRYAZAZA^c^n^nox^y^yA%66yyD@ ;;sA  q !D 99;;$  JJJ  4ru {{BOT_NAME}} — {{LOGIN_TITLE}}

{{BOT_NAME}}

{{LOGIN_SUBTITLE}}

z agent.logz errors.logz gateway.log)agenterrorsgateway>r%ri@c tt|pd}n#ttf$r t cYSwxYw|t vr|nt Sr)rJrrr\rJ_LOG_DEFAULT_TAIL_LOG_TAIL_VALUES)raw_tailtails r_normalize_logs_tailrsp!3x~2&&,,..// z "!!!    !+++441BBs03A Ac 8t|j}|ddgdpd}t |}|st |ddSt|ddgd} dd lm }t| }nd#t$rWttjd ptjd z  }YnwxYw|d z }||z } | d j|d krt |ddS| r| st)|||gd ddd|ddS| } t-| j} t1| t2} | d5} | | kr| | | z | | }dddn #1swxYwY|dd}|| d}t)||||| | k| | jddS#t$rD}t@!d|t |tE|dcYd}~Sd}~wwxYw)zCReturn a bounded tail window for an active-profile Hermes log file.rrrzUnknown log filerrNr6r:r;logsF)strictzInvalid log filez Log file for z not found yet.)rrlines truncated total_bytesrrrbrrr)rr*z&Failed to read whitelisted log file %sr)#rr/r0rr_LOG_FILE_WHITELISTrrr<r7rrBr=r?environrArGrr]is_filerrrJst_sizer_LOG_MAX_BYTESopenseekrMrN splitlinesrrrrr)rrr/file_keyfilenamerr7rlog_dirlog_pathrr read_bytesfhr3rrrSs r _handle_logsrs V\ " "E &7),,Q/:7AACCIIKKH"&&x00H <7.s;;;;  &4& 9 9! < = =Dd777777113344??AA ddd2:>>-88UTY[[9=TVVaacc dF"G!H#>   5  ) ) 0GOO5O4Q4Q Q Qw 23??? ?  (8(8(:(: W " AAAA ]]__"*oo n55 ]]4  &BZ'' j0111''*%%C & & & & & & & & & & & & & & &zz')z44!!4%&&)$z1&[      >>>A8LLL7OC00=========>se1/C!!AEEAK AK AK +4I+ K +I//K 2I/3AK L9LLLz_https://hermes-agent.nousresearch.com/docs/user-guide/skills/bundled/research/research-llm-wiki)entitiesconcepts comparisonsqueriesc , ddlm}t|S#t$rXtt jdttjdz cYSwxYw)Nrr6r:r;) r<r7rrBr=r?r@rrAr6s r_llm_wiki_active_hermes_homersY777777**,,--88::: YYYBImSy1H-I-IJJKKVVXXXXXYs.1ABBrc$|dz }|r|sdS |ddD]}|}|r|dsd|vr2|dd\}}|dkrd|d d }|pdcSn#t$rYdSwxYwdS) Nz.envrrrrrr=r WIKI_PATH"')r]rrrrrrr=)renv_pathrstrippedrrs r_llm_wiki_env_file_pathrs4V#H ??  H$4$4$6$6t && &JJUUWW ! !Dzz||H x22377 3h;N;N!Q//JCyy{{k))KKMM'',,22377E=D  ! tt 4sC C?? D  D config dotted_keycHt|tsdS||vr7||r"t||S|}|dD]&}t|tr||vrdS||}'|rt|ndS)Nrq)rrr0rr)rrcurrs r_llm_wiki_get_config_path_valuer s fd # #tV : 6 66::j))*** C  %%#t$$ C44$i $3s888$rc ddlm}|}n#t$rYdSwxYwt|dpt|dS)Nr get_configskills.config.wiki.pathz wiki.path) api.configrr=r)_get_cfgcfgs r_llm_wiki_config_pathr so555555hjj tt (-FGG = *3 < <s  !!i'c#K|]D}tt|VEdSrX)rrrBrGrYs rr[r[% sY&&,-CQ$$&&''&&&&&&r)rz/etcz/usrz/varz/optz/sysz/proccDt}tjdpt|}|rdnd}t |}|st }|rd}d}|sd}t tj| ||fS)Nrr7rTz~/wiki) rr?r@rrrrr expandvarsrB)rr3r configureds r_llm_wiki_resolve_pathr* s.00K )K H$;K$H$HC .[[YFcJ #%%  .FJ  ""3'' ( ( 3 3 5 5vz IIrrc|sdS ddlm}m}|||jddS#t $rYdSwxYw)Nr)datetimetimezone)tz+00:00Z)rr fromtimestamputc isoformatrrr=)rrrs r_llm_wiki_safe_isor9 s t////////%%bX\%::DDFFNNxY\]]] ttsA A AArootc|r|sdS t|tvrdSn#t $rYdSwxYwd}d}|dD]o}|dz }|tkrn\ |r6td| |j Ds|dz }`#t $rYlwxYw|S)Nr*rc3@K|]}|dVdSrqNrrrs rr[z(_llm_wiki_count_files..U s.)h)h4$//#*>*>)h)h)h)h)h)hr) r]rrrG_LLM_WIKI_FORBIDDEN_ROOTSr=r_LLM_WIKI_MAX_FILESrrrHrP)rriterateditems r_llm_wiki_count_filesrC s$ ;;== q t||~~  "; ; ;1 < qq EH 3A  ) ) ) E ||~~ c)h)h4K[K[\`KaKaKg)h)h)h&h&h      H  Ls$(A A%$A%A C!! C.-C. wiki_pathc0g} t|tvr|Sn#t$r|cYSwxYwd}tD]}||z }|r|s0|dD]}|dz }|tkr|ccS | |}| r3td|j Ds| |v#t$rYwxYw|S)Nrrrc3@K|]}|dVdSrrrs rr[z'_llm_wiki_page_files..o s.-Y-Ytdooc.B.B-Y-Y-Y-Y-Y-Yr)rrGrr=_LLM_WIKI_PAGE_DIRSr]rrrrHrrrPr)rpagesrdirnamesectionrrels r_llm_wiki_page_filesr\ scE y  "" # #'@ @ @L A  H&  g%~~ w~~'7'7  MM&))  D MH---  &&w//<<>>'#-Y-Ysy-Y-Y-Y*Y*Y'LL&&&      Ls)/ >>(AD DDc t\}}}dddddddd||ddtd }|s|S|sd|d<|St |}d |d z |d z |d z fD}||d}|D]A} |j}n#t$rY)wxYw||nt||}B| d d |rdndt|t|t|dz t|d|S#t$r2} ddddddddddddtt| jdcYd} ~ Sd} ~ wwxYw)zIReturn private-safe LLM Wiki status metadata without reading page bodies.FmissingrNzoHermes Agent exposes WIKI_PATH/wiki.path for location, but no stable on/off config flag is currently available.) renabledrx entry_count page_countraw_source_count last_updated last_writerpath_configured path_sourcetoggle_available toggle_reasondocs_url not_directoryrxcbg|],}||*|-Sr)r]rrYs rr^z*_build_llm_wiki_status.. sdJJJanonvnvnxnxJ}~~G~G~I~IJJJJrz SCHEMA.mdzindex.mdzlog.mdTreadyemptyr3)rrrxrrrrrr2z)Unable to inspect LLM Wiki status safely.)rrrxrrrrrrrrrrr)r_LLM_WIKI_DOCS_URLr]rrr`rrr=r]updaterQrrrNrO) rrrr page_files status_fileslatestrrrSs r_build_llm_wiki_statusrv s-< 2H2J2J/ ; ! .& %O*  !! K!! ,DNK))44 JJI $;Y=SU^aiUi#jJJJ J'''  E ED  ,    $nUU#fe2D2DFF !+8ggz??j// 5i%6G H H.v66          ! $$ %H*#YY'         sNt|tdSrD)rr)rrs r_handle_llm_wiki_statusr sg%''((( 4rc 012ddl}ddl}t|j} t t t |ddgddd}n#ttf$rd}YnwxYw|}| |}| |j |j |jddd|j|j|jf }d} ||dz | zz } | } d t fd } d t$fd } d t&d t$fd }g}t(dz }|r< t-j|d}n#t2$rg}YnwxYwg}|D]\}|ddpd}|ddpd}t ||| krG||]t7|}d}d}d}d}i}i}|0|2|D]}| |d}| |d}| |d}|| |dz }||z }||z }||z }|dpd} || ddddd}!|!dxxdz cc<|!dxx|z cc<|!dxx|z cc<|!dxx|z cc<||}"|"r | |"}#|d|#}$||$ddddd}%|%dxx|z cc<|%dxx|z cc<|%dxxdz cc<|%dxx|z cc<0|#jxxdz cc<2|#jxxdz cc<#t2$rYwxYw||z}&g}'| D]\} }(|(d|(dz})tC|(dd}*|'| |(d|(d|(d|)|*|r(t tC|(d|z d znd|&r"t tC|)|&z d znd|r"t tC|*|z d zndd! |'"d"#g}+tG|D]},| |,| zz}-|d| |-}$||$ddddd}!|+|$|!d|!d|!dtC|!ddd$gd%101fd&tGd'D}.2fd(tGd)D}/tI|||||||&tC|d|'|+|.|/d* S)+z5Return usage analytics from local WebUI session data.rNdays30rimiQr'c ttt|pddS#ttf$rYdSwxYwr)r]rJr[r\rJrs r_safe_usage_intz)_handle_insights.._safe_usage_int sR s5!,,--q11 1:&   11 rc |dS t|tr@|dddd}|sdSt t |dS#t tf$rYdSwxYw)Nr$r*r)rrrrrr]r[r\rJrs r_safe_cost_floatz*_handle_insights.._safe_cost_float s =3 %%%  --c266>>sBGG3uU||S)) ):&   33 sAA8A88B  B ric|d|ddp|ddpdS)Nrrrrrs r_session_usage_tsz+_handle_insights.._session_usage_ts s?{{<\1)E)EFFk'++VbdeJfJfkjkkrz _index.jsonrrrrr input_tokens output_tokensestimated_costrrgr2)rrrcostrrz%Y-%m-%d)rrrrr%) rgrrr total_tokensr session_share token_share cost_sharec4|d |d |dfS)Nrrrgr)rs rrz"_handle_insights..> s!F)a m^QwZ(Prr)daterrrr)MonTueWedThuFriSatSuncNg|]!}||dd"S)r)dayrr)ri dow_activity dow_labelss rr^z$_handle_insights..T s5]]]q 1 <3C3CAq3I3IJJ]]]rcBg|]}||ddS)r)hourrr)rr" hod_activitys rr^z$_handle_insights..W s1SSSA (8(8A(>(>??SSSr) period_daystotal_sessionstotal_messagestotal_input_tokenstotal_output_tokensr total_costr~ daily_tokensactivity_by_dayactivity_by_hour)% collectionsr rr/rr]rJr0rJr\ localtimemktimetm_yeartm_montm_mdaytm_wdaytm_ydaytm_isdstr[rrr]rrrr=rrQCounterr/strftimetm_houritemsroundrranger)3rrr6_timer/rrtodaytoday_midnightday_secs first_day_tsr7r r r sessions_dataidx_pathr r}createdupdatedr.r/r0r1r2 model_statsr3rrr cost_valuergbucketrdtday_key daily_bucketrmodels_breakdownstatsrow_total_tokensrow_cost daily_seriesr%day_tsdow_datahod_datar&r'r+s3 @@@r_handle_insightsr\ s V\ " "E3s599VdV44Q788!<(>?? %%aee,<&=&=>> //!%%*@*@AAAl*},j g+)'' 0 0    za~,.=0v*$ q ! !   __R((..R88+66w$%%& ! AA   ^,,, <,,,_--->---Z(((A-(((V$$$ 2$$$RZ(((A-(((RZ(((A-((((    ! (&(;;L#))++   u 053IIv**j)!.1"?3,WelSj(9N(Jc'Q!R!RSSSklR^e3u&6&E%LMMNNNdeGQX#eX %:c$ABBCCCWX ! ! PPQQQL 4[[  X...U__V-D-DEE!!' , ,    ">2#O4z*&.!,,       CBBJ]]]]]TYZ[T\T\]]]HTSSSrSSSH W((02$J**"$#$     s7AA((A>=A>>(E'' E65E6,B0O O,+O,c t|dd}tt|ddpdttt|ddpdddS)Nserveraccept_loop_requests_totalraccept_loop_last_request_atrrO)requests_totallast_request_at)rhrJrCr[)rr^s r_accept_loop_healthrck sj Wh - -Fgf.JANNSRSTT wv7TVY'Z'Z'a^a!b!bdeff  r?rVc8tj}tj|}ttj|z dzd}|sd||dS dt t |dtjS#tjwxYw)Nrerrblocked)rxrVmsrJ)rxactive_streamsrg)r racquirerCrQrrelease)rVt0acquired elapsed_mss r_streams_lock_healthrns s B#O<<. suTXXl%;%;%BsCCrr) active_runsrunslast_run_finished_atoldest_run_age_secondsidle_seconds_since_last_run)apirr ACTIVE_RUNS_LOCK ACTIVE_RUNSrBrr0r]r[r=r/rCrLAST_RUN_FINISHED_ATrrQ) _live_configrrtrr3rrage last_finishedrjs r_run_lifecycle_healthr s+***** )++C  & : :+7=2DDFF  NIs r??D,//J #sU:%6%6677     OOK 3 3 3"'Q--D  KK    $9  : : : : : : : : : : : : : : : IICCIDDD4yy -G  `,0GKK s,K,K()) `16s3eMFZFZ@Z7[7[]^1_1_-. Ns7A C0+ B  C0 BC0BA C00C47C4 stream_checkcXi}||n t|d<|dddkr|dfStj} t}dt |t tj|z dzdd|d <nW#t $rJ}d t|jt tj|z dzdd |d <Yd}~nd}~wwxYwtj} td }dt |t tj|z dzdd|d <nW#t $rJ}d t|jt tj|z dzdd |d <Yd}~nd}~wwxYwtj} t}| s.dt tj|z dzdd|d<nttjt|5}|ddddn #1swxYwYdt tj|z dzdd|d<nW#t $rJ}d t|jt tj|z dzdd |d<Yd}~nd}~wwxYwt%d|D}||fS)aRRun cheap probes that exercise the state paths used by the UI shell. Plain /health intentionally stays tiny. /health?deep=1 is for supervisors and watchdogs that need to know whether the process can still touch the shared stream map, sidebar/session path, project state, and Hermes state.db without hitting the RST-before-write failure mode from #1458. `stream_check` is the result from a prior `_streams_lock_health()` call; if provided, it's reused so we don't acquire `STREAMS_LOCK` twice on the same /health?deep=1 request (per Opus advisor on stage-297). N streams_lockrxrJFrr)rxrrgrr)rxrrg)_migrateprojectsr)rxrgstate_dbzPRAGMA schema_versionc3DK|]}|ddvVdS)rx>rJrNr)rchecks rr[z&_deep_health_checks.. sH   (00r)rnr0r rrQrCr=rNrOr r r]rsqlite3connectrexecutefetchoneallr) rchecksrkrrSrdb_pathconnhealthys r_deep_health_checksr s!F-9-E\\K_KaKaF> n!!(++t33u} B  >>]]r)T1155  z    #YY'r)T1155  z  B   %000]]r)T1155  z    #YY'r)T1155  z  B '))~~ #TY[[2-5q99""F:   W6677 A4 455>>@@@ A A A A A A A A A A A A A A ATY[[2-5q99""F:     #YY'r)T1155  z ]]__G 7?srA B C-#AC((C-A E F$AFF$;A>J&9(I-! J&-I11J&4I150J&& K:0AK55K:c t|jpdddgddv}t }t }|ddkrdndt tt|dpdt|d pd|d g|d ttj tz d t|d }d|vr |d|d<d|vr |d|d<|rc|ddkrd|i|d<t||dSt|\}}||d<|sd|d<t||dS|ddkrt||dSt||S)Nr*deepr>r+r.r-r,rxrJdegradedrhrsrtrur)rxrrhrsrtruuptime_seconds accept_looprvrwrrr)r)rr/r0rrnrrQrrJrCr rrcrr)rrrr run_checkrjrrs r_handle_healthr s FL&B ' ' + +FRD 9 9! < B B D DHb bD'))L%''I&**844<<$$*MMl../?@@EAFF9==77<1== fb)) ) .D E E .? ?CC*733  G 9,,,56N,O()$ 111:;X1Y-. 3   H % % - -!/ >GH Wgc222 2-<HHH" 3 *GH Wgc222 2xD  '#.... Wg  r) pre_tool_callpost_tool_call pre_llm_call post_llm_callc"ddlm}|S)zDReturn Hermes Agent's plugin manager for read-only WebUI visibility.rr)rrrs r"_get_plugin_manager_for_visibilityr s#555555    rr"c0|dSt|dd}d|}t ||kr"|d|dz dz}|S)zAReturn bounded display text without path/callback-like internals.Nr*rr…)rrrrrprrQr%)rr"rs r_clean_plugin_visibility_textr& s }r u::  fb ) ) / / 1 1D 88DJJLL ! !D 4yy5KeaiK ''))E1 Krc:|p t}|dg}t|dipi}t|dD]\}}t|dd}|t t|ddp|pt|d d d }t t|d d p|d }t t|d d d }t t|dd d } g} t t|dgpgt t|dgpgzD]G} t| pd } | tvr| | vr| | H| tj | ||p||| tt|dd| d|t| t tddS)aBuild a sanitized plugin/hook visibility payload for Settings. The Hermes Agent manager stores manifests and callback objects internally. This endpoint intentionally exposes only safe, user-facing metadata and the four lifecycle hook names called out by the Settings visibility MVP. It never includes plugin source paths, callback names, callback reprs, or raw load errors because those can contain private filesystem details. Fforce_pluginsc,t|dSrrrrs rrz,_plugin_visibility_payload..A sCQLLrrmanifestNrrr*xrversionPriprovides_hookshooks_registeredr)rrrrrhooksT)pluginsrsupported_hooks read_only)rdiscover_and_loadrhrrBrrcrr_PLUGIN_VISIBILITY_HOOK_SETrr_PLUGIN_VISIBILITY_HOOKSindexr) managerr raw_pluginsrloadedr plugin_keyrrr registeredhook hook_names r_plugin_visibility_payloadr3 s_=;==G E***G':r228bKk//117P7PQQQ  V6:t44   2 HeT * * Rc RWXvr5R5R   -WXvr-J-J-Xj`cddd/)R0P0PXZ[[[3GHmUW4X4X`cddd  +;R@@FBGG$wW]_qsuOvOvO|z|J}J}} - -DDJB--//I777IZ>       ']]" 899   rc  t|tS#t$rM}td|t|gdt t dddcYd}~Sd}~wwxYw)Nz-Failed to build plugin visibility payload: %sT)rrrr unavailable)rrr=rrrArcr)rrrSs r_handle_pluginsrc s  466777     FLLL #'(@#A#A!#        s A5AA0*A50A5u Hermes is restarting

Hermes is restarting…

The WebUI shell could not load cleanly. Refresh in a moment if this page does not update automatically.

rScltd|t|tdddS)z?Return HTML for shell-route failures so `/` never renders JSON.z%Failed to serve WebUI shell route: %srtext/html; charset=utf-8)rx content_typeT)rrrAr_SHELL_ERROR_HTML)rrSs r_serve_shell_unavailabler sA NN:C@@@/  4rc\|jdr@||jtdd}t ||S|jdvs|jdr ddlm}dd lm}||d }dd l m }tj d  d|}t|||dS#t$r}t!||cYd}~Sd}~wwxYw|jdkr!t#} t%j| dpd} | dd} t*t-| } ddlm}dd lm}||d }t. d|  d| d d| dt%j| d dt%j| d dt%j| d d t%j| d! d"t%j| d# d$t%j| d% d&t%j| d'} t|| dS|jd(krVdd)lm}m}m}d*}|r%||}t;|o ||}t=|||d+S|jd,vrt?t@j!j!d-z }|d.z "}|#r|$}|%d/|&d0d1|&d2d3|&d4tOt||(|j)*|d5St=|d6d7id89S|jd:krpt?t@j!j!d-z }|d;z "}|#rddlm}dd lm}||d }| d  d|}|+d }|%d/|&d0d<|&d2d3|&d=d>|&d4tOt||(|j)*|d5St=|d6d7id89S|jd?kr?t?t@j!j!d-z }|d@z "}|#r|,r|$}|%d/|&d0dA|&d4tOt||&d2dB|(|j)*|n)|%dC|(d5S|jdDkrt[||S|jdEr)ddFl.m/}|||}|d*urta||dGSd5S|jdHkrtc||S|jdIkrte||S|jdJkrtg||S|jdKkrt=|tiS|jdLkrt=|tkd5S|jdMkrt=|tmS|jdNkrto||S|jdOkr*ddPl8m9}t=||:d5S|jdQkrbddPl8m9} t=||;n6#tx$r)}t{|tO|dR9Yd}~nd}~wwxYwd5S|jdSkrt=|t}S|jdTkrt||S|jdUkrPt|jA}|dVd gdpd}t=|t|S|jdWkrt#}|CdXdt;tjEdYd F|dZ< dd[lmG}m}||d\<||d]<n#t$rYnwxYwt=||S|jd^krt=|tS|jd_krt=|tS|jd`rddal mJ} | ||S|jdbrt ||S|jdckrt|jA}|ddd gd}!|!st{|dedR9S t|!d5f}"n"#t$rt{|dgd89cYSwxYw ddhlMmN}#t=|di|#|"iS#tx$r)}t{|tO|dR9cYd}~Sd}~wt$rD}tPdj|!t{|t|dk9cYd}~Sd}~wwxYw|jdlkr?t|jA}t||ddd gdS|jdmk rddlS}$|$T}%tjUdnd }&t|jA}|ddd gd}!|!st=|d6deidR9S|dodpgddqk}'|'rdpndq}(|dr|(gddqk})|dsdgd}* |*rtdtt|*nd}+n#txtf$rd}+YnwxYw|dudgd}, |,rt|,nd}-n#txtf$rd}-YnwxYw |$T}.t|!|' f}"t|"t|"rt|!ni}/t|"pt|/}0g}1|0rt|!}1|$T}2|)rt|"nd}3|)rt|"nd}4|$T}5|'r|0r|1rt|"dogpg}6|6r|6|1kr|g}7t}8tt|1t|6zdvwD]8}9|9dxp|9dy}:|:rdytO|:f};ndztO|9d{pd tO|9d|pd tO|9d}pd tO|9d~pd tO|9dp|9dpd f};|;|8vr|8d|;|7e|9:|7}|+r |>|+ dn|>}?n&|+rt|<|+kr |<|+ d}?n|<}?n|<}?t|"ddpd}@|@slt|"dd p|3pd F}A|ArB ddlhmi}Bddljmk}C|C}Dd}Ed}F t|Dtr|Ddini}Gt|GtrG|Gd}H|H0 t|H}I|Idkr|I}En#ttxf$rYnwxYwt|Dtr|Ddnd}Jt|Jtr|J}Fn#t$rYnwxYw |B|Ad |E|4pd |Fpd}Kn#t$r|B|Ad pd}KYnwxYw|Kr|K}@n#t$rYnwxYw|"n|?|'rt|"dgngt|"ddt|"dd|'rt|"dgngt|"dd|@t|"ddpdt|"ddpdd z}L|/rt|/rt|L|/}L|-|'o|+duot|>|+k}Mn|'o|+duot|<|+k}M|M|Ld<|-$td|=t|?z |Ld<n0tdt|<t|?z |Ld<|$T}N|3r|3|Ld<|4r|4|Ld<t|L}O|$T}Pt=|d|Oi}Q|$T}R|&rEtqd|!|2|.z dz|5|2z dz|N|5z dz|P|Nz dz|R|Pz dz|R|%z dz|QS#t$rt|!}/t|!}S|Sridd|!d|/piddd|/pidd d|/pidddt|Sd|/piddd|/piddd|/pidp9|/piddp!|Sr|Sdnd}did}ddd*dd*ddd|/piddd5d|/pidd|/pidd|/pidd|/pidt;|/pid|Sgd}Tt|T|/}Tt=|dt|TicYSt{|dgd8cYSwxYw|jdkrt|jAddd gd}!|!st{|ddRStt|!}U|Udst{|dgd8St=||US|jdkr2ddltmu}Vt=||VttS|jdkrt|jAddd gd}!|!st{|dS ddlwmx}Wtt|!d5ft=||W|!S#t$rt{|dgd8cYSwxYw|jdkr`t|jAddd gd}!|!st{|dSt=|dt|!iS|jdkrt|jAddd gd}!|!st{|dS ddlwmz}Xt=||X|!S#t$rt{|dgd8cYSwxYw|jdkrbt|jAddd gd}!|!st{|dSddl{m|}Yt=|d|Y|!iS|jdkratj~dG|jt}Z |Zdt|Z}[|Zdt|[r&|Zdt|Z}[|Zdt#}t;|d}\|\rT|Zdt}]|Zdd„|]D}^|[D]}"|^|"dd}_|_s-t|_rh|"t|"|_|"dd|_ddkr|_dd|"dd<dD]7};|"|;s |_|;r |_|;|"|;<8dĄ|[D}[dń|[DddlmfdDŽ|]D}`n#|ZdȦdɄ|[D}[g}`|Zdʦ|[|`z}a|ad˄d5̦|Zdͦddlm}b|bt|}c|ZdϦ|cr|a}dd}en-fdЄ|aD}dt|at|dz }e|ZdѦt|d}d|\r-|ZdҦt|dtӦ}d|ZdԦg}f|dD]g}"t|"}gt|gdtNrt|gd|gd<|fe|gh|Zdզt=||ft|`|c|etjStjd֦dל|ZS#|ZwxYw|jdkrtddlm}b|bt!}ht|}c|cr|h}dnfdل|hD}dt=||d|ct|ht|dz dڜS|jdkrt#||S|jdkr-t=|t%t'dݜS|jdkrRt|jA}i|idd gd}jt=|t)|j|jdS|jdkrt+||S|jdkrt-||S|jdkr ddljm}k|kddljmk}l|l}m|mdi}n|ndi}og}pt|otr|oD]\}q}rd }st|rtr|rdd }sn7t|rtNr"|rddt|rdkrdnd z}s|pe|q|sdt=|d|piS|jdkrt|jA}i|iddd gd}!|!st{|dS t|!}"n!#t$rt{|dgd8cYSwxYwddlm}t|tt?|"j}ut=|d|uiS|jdkr ddlm}vt=|d|viS|jdkrt#}|dd5st=|dd5iSt|jA}i|iddqgddpk}w|iddqgddpkr1|jddkr t=|ddddddddtddddddSddlm}xt=||x|wS|jdkrLt|jAdd gd}yt=||yt@v|ydS|jdkrht|jAdd gd}y|yst{|dStC|y}zt=|d5|z|ydS|jdkrtE||S|jd krtG||S|jd krtI||S|jd krtK||S|jd krtM||S|jd krtO||S|jdkrtQ||S|jdkrtS||S|jdkr6|jddkrt=|d6d7id89StU||S|jdkrtW||S|jdkrtY||S|jdkr6|jddkrt=|d6d7id89St[||S|jdkrt|jA}i|idd gd}{ t=|t]|{d2d3iS#tx$r'}|t{|tO||cYd}|~|Sd}|~|wt$r(}|t{|tO||d8cYd}|~|Sd}|~|wwxYw|jdkr\ddlm}}ddlm}~|~5t=|dte|}d5icdddS#1swxYwY|jdkr:ddlm}~|~5tg||cdddS#1swxYwY|jdkr:ddlm}~|~5ti||cdddS#1swxYwY|jdkr:ddlm}~|~5tk||cdddS#1swxYwY|jdkr:ddlm}~|~5tm||cdddS#1swxYwY|jd kr:ddlm}~|~5to||cdddS#1swxYwY|jd!krzt|jA}i|id"dgd}tqts|#}t=|d$|d$giS|jd%krt|jA}i|idd gd}q|qst=|d6d&idR9S|id'd gd}|r#ddl}|jd(|qrt{|d)dRSts}ty|q|\}}|st{|d*d8S||z "} ||"n"#tx$rt{|d+dRcYSwxYw|#r|,st{|d,d8St=|| d |d-St}|q}t|d.tsi|d.<t=||S|jd/krt|S|jd0kr-dd1lm}m}bt=|||bd2S|jd3kr:dd4lm}bm}t=||btO|d5S|jd6krddl}t}t}ti}|d7}|d5urd5}d5}n|d*urd*}d5}nt;|}d*}t}|D]V}_|_dp|_d8pd }Lt|L}|r|d|Wd9d:d;d<d=d>tfd?|Dd@w}d }|rk|#rW |j}|j|}n#t$rYnwxYwt=|||||t|dAS|jdBkrt|S|jdCkrt|S|jdDkrt|jA}i|idd gd}|st{|dES ddFlm}t=|||S#tx$r'}|t{|tO||cYd}|~|Sd}|~|wt$rD}|tPdGt{|tO||dk9cYd}|~|Sd}|~|wwxYw|jdHkrt|jA}i|idd gd}|idId gd}|r|st{|dJS ddKlm}t=||||S#tx$r'}|t{|tO||cYd}|~|Sd}|~|wt$rD}|tPdLt{|tO||dk9cYd}|~|Sd}|~|wwxYwd*S(Mz>Handle all GET routes. Returns True if handled, False for 404.z/session/static/z/sessionNr)rz /index.htmlz /session/r)quote) WEBUI_VERSIONr*safe)inject_extension_tagsrr__WEBUI_VERSION__r)rz/loginbot_nameHermeslanguagerlz {{BOT_NAME}}z{{BOT_NAME_INITIAL}}z{{WEBUI_VERSION}}z{{LANG}}roz{{LOGIN_TITLE}}rz{{LOGIN_SUBTITLE}}rpz{{LOGIN_PLACEHOLDER}}rqz {{LOGIN_BTN}}rrz{{LOGIN_INVALID_PW}}rsz{{LOGIN_CONN_FAILED}}rtz/api/auth/statusis_auth_enabled parse_cookieverify_sessionF) auth_enabled logged_in)z/manifest.jsonz/manifest.webmanifeststaticz manifest.jsonr Content-Typez(application/manifest+json; charset=utf-8 Cache-Controlno-storer?Tr not foundrrz/sw.jszsw.jsz%application/javascript; charset=utf-8zService-Worker-Allowedrz /favicon.icoz favicon.ico image/x-iconzpublic, max-age=86400r=z /api/insights /api/kanban/)handle_kanban_getGETz/api/wiki/statusz /api/logsz/healthz/api/health/agentz/api/system/healthz /api/modelsz/api/models/livez/api/dashboard/statusdashboard_probe/api/dashboard/configr/api/providersz /api/pluginsz/api/provider/quotar /api/settings password_hashHERMES_WEBUI_PASSWORDpassword_env_var) AGENT_VERSIONr webui_version agent_version/api/reasoningz/api/onboarding/statusz /extensions/)serve_extension_static/static/z/api/session/worktree/statusrsession_id is requiredrnSession not found)worktree_status_for_sessionrxz-failed to read worktree status for session %srz/api/session/compress/statusz /api/sessionHERMES_DEBUG_SLOWmessagesr+r@ resolve_model msg_limitr msg_beforect|dpdt|dpdt|dpdfS)N timestamprroler*r)r[r0r)r(s rrzhandle_get.. s\!!%% "4"4"9::f 344i 0 0 6B77frrr? message_idlegacyrrr tool_call_id tool_namercontext_lengthrg)get_model_context_lengthrcustom_providers)config_context_lengthrr tool_callsrrrrthreshold_tokenslast_prompt_tokens) rrrrrrrrr_messages_truncated_messages_offsetrrizx[SLOW] session_id=%s get_session=%.1fms model_resolve=%.1fms compact=%.1fms redact=%.1fms json_write=%.1fms total=%.1fmsr CLI Session workspacer2rrrrrpinnedarchived project_idr-rrrrrr)rrrz/api/session/lineage/reportsession_id requiredfoundz/api/session/recovery/audit)audit_session_recovery state_db_pathz/api/session/statuszMissing session_id)session_status/api/session/yolo yolo_enabledz/api/session/usage) session_usagez/api/background/status) get_resultsresultsz /api/sessionsrrrdiagreconcile_stale_stream_state)all_sessions_after_stale_stream_reconcilershow_cli_sessionsrmerge_cli_sessionsc i|] }|d| Srrrs r zhandle_get.. s===AQ|_a===r)rrrrc0g|]}t||Srr rs rr^zhandle_get.. s'!]!]!]?YZ[?\?\!]!!]!]!]rch|] }|d Sr"rrs rrzhandle_get.. sEEEQ|_EEEr)_hide_from_default_sidebarc\g|](}|dv t||&|)Sr"r%)rr _cron_hide webui_idss rr^zhandle_get.. seKKKQ< 1Q1QVpqrVsVs1Q}G}GHI}J}J1Qq1Q1Q1Qrfilter_webui_sessionsc0g|]}t||Sr)rrs rr^zhandle_get.. s'!c!c!cC_`aCbCb!c!!c!c!cr sort_sessionsc\|dp|ddpdS)Nrrrr)rs rrzhandle_get.. s,aee$566U!%% a:P:PUTUrractive_profilerprofile_filtercZg|]'}t|d%|(Sr-r&r0)rrr/s rr^zhandle_get.. sJPPP,QUU9-=-=~NNP!PPPrmessaging_deduper)rredact_sessionsresponse_writez%z)r cli_countr)r/other_profile_count server_time server_tzz /api/projectscZg|]'}t|d%|(Sr2r3)rrZr/s rr^zhandle_get..sJLLLA(y)9)9>JJLaLLLr)rr)r/r8z/api/session/exportz/api/workspaces) workspaceslastz/api/workspaces/suggestrY) suggestionsrYz/api/sessions/searchz /api/listz/api/personalities reload_configr personalitiesrrr)rrz /api/git-info)git_info_for_workspacegitz /api/commands) list_commandscommandsz/api/updates/checkcheck_for_updatesrrsimulatez 127.0.0.1webuirOabc1234def5678master)rbehind current_sha latest_shabranchaaa0001bbb0002)rHr checked_at)rFrz/api/chat/stream/statusr)activerz/api/chat/cancelzstream_id required)rJ cancelledrz/api/chat/streamz/api/terminal/outputz/api/sessions/gateway/streamz /api/mediaz /api/file/rawz /api/filez/api/approval/pendingz/api/approval/streamz/api/approval/inject_testz/api/clarify/pendingz/api/clarify/streamz/api/clarify/inject_testz/api/onboarding/oauth/pollflow_id extra_headersz /api/crons list_jobscron_profile_contextr3include_disabledz/api/crons/outputz/api/crons/history/api/crons/runz/api/crons/recentz/api/crons/statusz /api/skillsrurr8z/api/skills/content name requiredrz[*?\[\]]Invalid skill nameSkill not foundzInvalid file pathFile not found)rr linked_filesz /api/memoryz /api/profiles)r6r)profilesrSz/api/profile/active)rr7)rrz/api/gateway/statusaliverTelegramDiscordSlackWebAPI)telegramdiscordslackwebrxcfg|]-}|||d.S))rlabel)r0r)rrZ_PLATFORM_LABELSs rr^zhandle_get..Rs: ] ] ]!a"2"6"6q!''))"D"D E E ] ] ]rc|dS)Nrpr)xs rrzhandle_get..Ss !G*r)runningr platforms last_active session_countz/api/mcp/serversz/api/mcp/toolsz/api/rollback/listz%workspace query parameter is required)list_checkpointszrollback/list failedz/api/rollback/diff checkpointz6workspace and checkpoint query parameters are required)get_checkpoint_diffzrollback/diff failed)rr_replacerQ _serve_static urllib.parser api.updatesrapi.extensionsrrrrrrr=rr_htmlescaper0rr_LOGIN_PAGE_HTMLupperapi.authrrrrrr__file__rrGr]rrArBrrCwfilewriteencoderr\api.kanban_bridgerrrrrrrr_handle_live_modelsrxrget_dashboard_statusget_dashboard_configrJrr$rrr/r%rr?r@rrrr)rrprq api.worktreesrrrrr_handle_session_compress_statusr rrr]rJr\rrrrrrrrhrrrcrrrragent.model_metadatarrrrrcompactrrrAr r api.session_recoveryrrapi.session_opsrr:rapi.backgroundrr maybe_startstagerrrrrr'rr<rr4rrCLI_VISIBLE_SESSION_CAPrr@finishr _handle_session_exportrrr_handle_sessions_search_handle_list_dirr@rB api.workspacerBr  api.commandsrDr1rFrr#_handle_sse_stream_handle_terminal_output_handle_gateway_sse_stream _handle_media_handle_file_raw_handle_file_read_handle_approval_pending_handle_approval_sse_stream_handle_approval_inject_handle_clarify_pending_handle_clarify_sse_stream_handle_clarify_injectr-rrYr[r4_handle_cron_output_handle_cron_history_handle_cron_run_detail_handle_cron_recent_handle_cron_statusrrCresearchrrHr_handle_memory_readr6r7rr rrrrrrr_handle_mcp_servers_list_handle_mcp_tools_list api.rollbackrxrz)rrrrr version_tokenrhtmlrS _settings_bn_lang_login_strings_pagerrrrcv static_root manifest_pathrsw_pathrico_pathrrrr/r_settingsrrrlrrrE_t0 _debug_slow load_messagesresolve_model_defaultr _msg_limitr _msg_beforer_t1ris_messaging_session cli_messages_t2rr_t3sidecar_messagesmerged_messagesseen_message_keysmsgmessage_identityr _all_msgs _before_idx_slice_truncated_msgs _persisted_cl_model_for_lookup_get_cl_get_config_for_cl _cfg_for_cl_cfg_ctx_len_load_cfg_custom_providers_load_model_cfg_load_raw_cfg_ctx_load _parsed_load _raw_cp_load_fb_clr3 _truncated_t4redact_t5resp_t6msgssessreportrrrrrwebui_sessionsrr cli_by_idr deduped_clirrr)scopedr8 safe_mergedr all_projectsr2rY _reload_cfgr_cfg agent_cfgraw_personalitiesrArrdescrBrSrDrrFrrTrUrrYr[ru file_pathr$rRr _skill_mdrcr6r7r identity_map sessions_pathhealthrertr platforms_setnormrurvrr rxryrzrqr)r/r*s @@@@r handle_getr s6{0110?? C OO4D4D(E?FFWh/// {***fk.D.D[.Q.Q* : * * * * * * 1 1 1 1 1 1!E-b999M < < < < < <#-w???GGH[]jkkD%%d++7   : : :+GS99 9 9 9 9 9 9 :{h!OO l9==44@AA j$//& %e , ,  '&&&&&------m"555  $ $^S 9 9 W+SV\\^^ < < W(- 8 8 WZnV.D!E!E F F W& ^G5L(M(M N N W)5<z8R+S+S T T W'n]6S)T)TW_el>%3H&I&I J J W+U\.:V-W-W X X W'n]6S)T)T  %.HIIII {(((JJJJJJJJJJ ?   8g&&BR6NN2$6$677I??+<+<9UUVVV {AAA8nn+2X= $6??AA    ! !  ++--D  ! !# & & &   0Z [ [ [    < < <    0#c$ii.. A A A    ! ! ! M   % % %47K0==== {h8nn+2X= (1133 >>    + * * * * * 1 1 1 1 1 1!E-b999M$$g$66>>#]D;;w''D  ! !# & & &   0W X X X    < < <    8# > > >    0#c$ii.. A A A    ! ! ! M   % % %47K0==== {n$$8nn+2X= -/88:: ??   "!1!1!3!3 "&&((D  ! !# & & &    ? ? ?    0#c$ii.. A A A   1H I I I    ! ! ! M   % % % %  ! !# & & &    ! ! !t{o%%000 {n-- 777777 #"7F33 U??+GVUCC Ct {(((&w777 {k!!GV,,, {igv... {)))466777 {*** '.00111t {m##.00111 {((("7F333 {---'''''' '?7799:::t {---'''''' / g;;== > > > > / / / S# . . . . . . . . . /t{&&&-//***{n$$w/// {+++&&yybT2215= ,[99::: {o%% ?? _d+++ (, I-r 2 2 8 8 : :( ( #$   @ @ @ @ @ @ @ @(5H_ %(5H_ % %    D (### {&&&.00111 {.../11222 {n--7999999%%gv666 {j)).Wf---{444&&ii rd++A. Fw 8EEE E ACt444AA A A Aw 3C@@@ @ @ @ A B A A A A A AWx)D)DQ)G)GHII I 6 6 6wC555 5 5 5 5 5 5 B B B   Lc R R Rw 4 4SAAA A A A A A A B{444&&.w ,QSPT8U8UVW8XYYY {n$$oojnn%8"== &&ii rd++A. OWw(@A#NNN N  *se44Q73> '4 =# /4I3JKKANRUU YY{TF33A6  3=GAs:///4III&   III  ii tf55a8  -8B[)))dJJI&   JJJ R ://##CCM0ACCCA %a ( ( ($>$' (:(:(@b$A$A$' (<(<(B$C$C$'(?(?(E2$F$F$' (<(<(U(USU$V$V '" #&777 (-11#666+2237777$3 8;>I#=#=&/ &%C%C%HqFFFI"3,2M$))+++>KSgar:::QS$+A/A4$H$H(/3I4(P(PP]'ewq2G'L'L'Lce&-a1Et&L&L"/$+A/A1$E$E$J&-a1Eq&I&I&NQ ! ! C A8BB A1#x@@ %*`y/D`VW`I` *cy/DcYZcIc )3C% &%*-as??S?S1S*T*T&''*-aY#oBVBV1V*W*W&'//##C /.G ! ;(:$%(--F//##CWy&122D//##C RWdNSWdNSWdNWdNSWdNSWdN K : : :3C88H+C00D J #hn"11'=II (.b!5!5k2!F!Fhn"11'9EE  $SYY  !8>r"6"6|Q"G"G !8>r"6"6|Q"G"G&B';';R{A.>CCKQRSSe!$B33I>>%d !8>r"6"6|"D"D!"!8>r"6"6|"D"D#$%x~2&:&:;K&L&L%&#X^$8$8$H$H'("&x~2&:&:;&G&G!H!H $"$-034BB9.A$.G.G"HIIIIIw 3S99 9 9 9? :B{333v|$$((t<+B3+G+GHIII {***v|$$((t<vFFF  [ 9%%%1&BYZZZ JJ( ) ) )K ) )Awwdhhw//55@$0g$?$?DM""4(((( JJ' ( ( (W' -- ,"0':#y{{!]400 KKMMMMDKKMMMM {o%% 9888880022$ /77  L!FFLLLLLLLF(,#&|#4#4s6{{#B      {+++%gv666 {''' O$5$5?Q?S?STT   {/// fl # #2$''* 9&AA      {,,,&w777 {k!!000 {*** <;;;;; 555555xzzHHWb)) %MM/2>> ' . . J06688 J J eeT**K 99]B77DDs++K ":#e**r//rJD$$d4%H%HIIII?M:;;; {o%% fl # #ff\B4((+ 7w 566 6 :C  AA : : :w 3S99 9 9 9 :888888%%d1;&7&7885$-((( {o%%......:}}7888 {*** ??||/66 2Wz4011 1 fl # #w&&q)S0 FF:u % %a (C / /&q)[88!("#'0&/"* !("#'0&/"* #$ ( 211111++%888999 {///V\**..{RDAA!D Y'%9 RRSSS {(((V\**..{RDAA!D  6w 455 5!),, IIVVWWW {(((!'6222 {,,,&w777 {444)'6::: {l""Wf--- {o%%000 {k!! &111 {---'888 {,,,*7F;;; {111  !! $ 3 3Ww 4SAAA A&w777 {,,,&w777 {+++)'6::: {000  !! $ 3 3Ww 4SAAA A%gv666 {222 fl # #&&RD))!, -*733. ;   ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{l""''''''555555 ! ! # # ^ ^Wv'9))UY:Z:Z:Z'['[\]] ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^{)))555555 ! ! # # 8 8&w77 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8{***555555 ! ! # # 9 9'88 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9 9{&&&555555 ! ! # # < <*7F;; < < < < < < < < < < < < < < < <{)))555555 ! ! # # 8 8&w77 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8{)))555555 ! ! # # 8 8&w77 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8{m## fl # #66*tf--a0$%7%9%9HMMM8TXXh%;%;<=== {+++ fl # #vvfrd##A& FWw8EEE EFF6B4((+      sz+t,, ?7$8#>>>+--J#5dJ#G#G Iy <7$5s;;;)+4466F >""9#4#4#6#67777 > > >7$7===== >==?? ;&..*:*: ;7$4c:::",,g,>> RR +400$((>22D99 &#%D ${m##"7+++{o%%KKKKKKKK **,,8O8O8Q8Q R R   {+++PPPPPPPP ,,..F(AAI5HAHHAI5HAH.H+AI5H-AH.H.AAI5I4AJ>I5 AJI?AJ>JAJJAJ>JAJJAJ>JAJ6J3AJ>J5AJ6J6AJ>J=AS J> AK KAS K AK K G=AS S G+A[ Z6A[ [ A[ _6t4f$r'} t7|t9| cYd} ~ Sd} ~ wwxYwd} d!dupGt9d! !d"v} | r dd#l"m#} |} | s(t9t=tI} | | } | d$}n~#t>t4f$r)} t7|t9| d cYd} ~ Sd} ~ wt$r9} td%t7|d&| d cYd} ~ Sd} ~ wwxYwtKd'd(\}}tM|||d)pdd*pd| +}t|d,|'d-|j(iziS|jd.kru d/}|st7|d0StSj*|}|st7|d1d2 StSdWid/tWj,j-dd3d4|j.pd5d6zd |j/d'|j0d(|j1d-tej3|j(d7tej3|j4d8dd9dd*|j5d)|j6d:|j7d;|j8d<|j9d=|j:d>tw|d>dd?tw|d?dd@tw|d@ddAtyj<dBtyj<}tz5|t||j?<t}j@|j?tt|tkr2t}jCdCtt|tk2dddn #1swxYwY|Dt|d,|'d-|j(iziS#t$r'} t7|t9| cYd} ~ Sd} ~ wwxYw|jdDkr t|td'S#t4$r'} t7|t9| cYd} ~ Sd} ~ wt$r(} t7|t9| dcYd} ~ Sd} ~ wwxYw|jdEkrdFpdG !}dH}|st7|dIS|#t9| pd}t||}|dJs$t7||ddKSt||S|jdLkrdFpdG !}|st7|dISt|}|dJs$t7||ddKSt||S|jdMkrI dN}dO}|t9| !}|dPvrt|tdS|dQvrt|tdSt7|dR|dSS|t|t|St7|dTS#t4$r'} t7|t9| cYd} ~ Sd} ~ wt$r(} t7|t9| dcYd} ~ Sd} ~ wwxYw|jdUkr\ddlK}ddVlmL}|M|ddlNmO}|jP|_P|j)|_)|j'|_'t|dJdWdXS|jdYkrt|dZS|jd[krt|dZS|jd\kr td/d4n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw td/}n!#t$rt7|d1d2cYSwxYwtd/5t9d4 dd]pd5|_.|Ddddn #1swxYwYt|d,|'iS|jd^krk td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwd_vrt7|d`Sd/}d_ } t|}n!#t$rt7|d1d2cYSwxYwdG}|rYddalUmV}|ddblUmW}|} | dci}!|!ddi}"t|"tr||"vrt7|de|dfd2S|"|}#t|#tr|#dgdGp|#dhdGg}$|#dir|$Zdj|#di|#dkr|$Zdl|#dkdm[dn|$D}nt9|#}t|5|r|nd|_:|Ddddn #1swxYwYt|d|j:|doS|jdpkrB td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwd/}dq}%|%Pt|%tr|%st7|drStds|%Dst7|dtS t|}n!#t$rt7|d1d2cYSwxYwt|5|%|_^|Ddddn #1swxYwYt|d|j^duS|jdvkrn|j_dwkrt|ja}&|jar|&d/dGgdndG}|st7|d0dS t|}n!#t$rt7|d1d2cYSwxYwtw|dxipi}'t|dy|'iS td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwd/}dz}(d{})d|}*d}}+|(t|(t8sdG}(t|(t8rt|(|*kr |(d|*}(|)t|)tsg})t|)trt|)|+kr |)d|+}) t|}n!#t$rt7|d1d2cYSwxYwt|5tw|dxipi}'|(|(|'dz<|)|)|'d{<|'|_b|Ddddn #1swxYwYt|d|jbd~S|jdkrS td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw td/}n!#t$rt7|d1d2cYSwxYwtw|d dG}, t9t=d |j/}-n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwtd/5|-|_/d'vsd(vretKd'|j0d(vrd(ndtw|d(d\}}.|||_0|.|_1|Ddddn #1swxYwYt9|,pdGt9|-pdGkrC ddlcmd}/|/d/n*#t$rtedYnwxYwt|-t|d,|'d-|j(iziS|jdkrd/dG}|r)t|t8r| st7|dd S| }td|Dst7|ddS t|d}n"#t$rt7|d1d2 cYSwxYwtdd}0 ddl"mh}1|1||0}t||S#t4$r)}t7|t9|d cYd}~Sd}~wt$rD}td|t7|t|d cYd}~Sd}~wwxYw|jdkrʼnd/dG}|st7|d0Std|Dst7|ddSt|}2|2drt7|ddSt|}3t|}4tz5t}jm|ddddn #1swxYwY tjodn*#t$rtedYnwxYwddlUmp}5|5| t |dz q}6|6rt!jqn!#t$rt7|ddcYSwxYw |6od|6sdodn+#t$rted|6YnwxYwt5tjm|ddddn #1swxYwY ddlcmd}/|/|n+#t$rted|YnwxYw|3s> ddlvmw}7|7|n+#t$rted|YnwxYwt|dJdi|4S|jdkr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw td/}n!#t$rt7|d1d2cYSwxYwtd/5g|_(g|_4d5|_.|DddlUmp}5|5d/dddn #1swxYwYt|d|'dS|jdkr< td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwdt7|dS td/}n!#t$rt7|d1d2cYSwxYwtd}8td/5|j(d|8|_(|Ddddn #1swxYwYt|d|'d-|j(izdS|jdkr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwtd/t8st7|dS td/}9n!#t$rt7|d1d2cYSwxYwd}:|:N t|:}:n'#t4t>f$rt7|dcYSwxYw|:dkrt7|dSd4};|;r+t9|; dd]pd};|9j(pg}<|: |n|9j.pd5}?|?d}>tS|9j/|9j0tw|9d)d|>|=|9j?d}@tz5|@t||@j?<t}j@|@j?tt|tkr2t}jCdCtt|tk2dddn #1swxYwY|=r|@Dt||@j?|>|9j?dS|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw ddl}m~}A|Ad/}t|dJdi|S#t$rt7|d1d2cYSt4$r)} t|dt9| icYd} ~ Sd} ~ wwxYw|jdkr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw ddl}m}B|Bd/}t|dJdi|S#t$rt7|d1d2cYSt4$r)} t|dt9| icYd} ~ Sd} ~ wwxYw|jdkr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwd/}tdd}C|Crnt| ddlm}Dm}E|E5|Dm|ddddn #1swxYwYn#t$rYnwxYwt |ddnt |t|d|CdS|jdkrt |S|jdkrt|S|jdkrt|S|jdkrt||S|jdkrt|S|jdkrddlm}F|F|S|jdkrt|S|jdkrt|S|jdkrt|S|jdkrt!|S|jdkr9ddlm}G|G5t'|cdddS#1swxYwY|jdkr9ddlm}G|G5t)|cdddS#1swxYwY|jdkr9ddlm}G|G5t+|cdddS#1swxYwY|jdkr9ddlm}G|G5t-|cdddS#1swxYwY|jdkr9ddlm}G|G5t/|cdddS#1swxYwY|jdkr9ddlm}G|G5t1|cdddS#1swxYwY|jdkrt3|S|jdkrt5|S|jdkrt7|S|jdkrt9|S|jdkrt;|S|jdkrt=|S|jdkrt?|S|jdkrtA|S|jdkrtC|S|jdkrtE|S|jdkrtG|S|jdkrtI|S|jdkrtK|S|jdkrddlm}Ht9ddGpdG }I|Ist7|d֦S t|d|H|IiS#t4$r(} t7|t9| dcYd} ~ Sd} ~ wt$rt7|dd2cYSt$r(} t7|t| dcYd} ~ Sd} ~ wwxYw|jdkrtQ|S|jdkrtS|S|jdkrtU|S|jdkrd_dG }|st7|dݦS ddlm}Jm}Kddlm}L|dkr |K||J|d}ddlUm}M|Mt||d|L|iS#t4t`f$r(} t7|t| d2cYd} ~ Sd} ~ wt$r(} t7|t9| dcYd} ~ Sd} ~ wwxYw|jdkrꉁd_dG }|st7|dݦSddl}N|Njd|st7|dSd}O|OBt9|O }O|Njd|Ost7|dSdr(ddG nd}PdHr(dHdG nd}|Pr%|Pdst7|dS ddlm}Q|Q||Otdd|P|}t|d|dS#t4thtf$r'} t7|t9| cYd} ~ Sd} ~ wwxYw|jdkrՉd_dG }|st7|dݦS ddlm}Rm}K|K||R|}t||S#t4t`f$r'} t7|t| cYd} ~ Sd} ~ wt$r(} t7|t9| dcYd} ~ Sd} ~ wwxYw|jdkrddlm}Sm}Tm}Um}Vm}Wdvr.t9dpdG pdd<|T}X|U|}Yt|Yo |W|Y}Zttdt8o'ddG }[td}\|[s|\r9tyjddG rt7|ddSt}}]|]mdd|T}^t|[o|^o|X }_|Z}`d}a|_r|Zs |S}ad}`|^|]d<|`|]d<|_|]d<|ast||]Stj|]ddd}b|d|dd|dt9t|b|dd|V||at|||j|bdS|jdkrddlm}Tddl}c|Ts|cd sddl}d |jd dGd d }e|jd dG }f|jd}g|d|ep|fp|g}h|hjp|hj}in#t4$rd}iYnwxYw|ist7|d dS t|tddiS#t4$r'} t7|t9| cYd} ~ Sd} ~ wt$r(} t7|t9| dcYd} ~ Sd} ~ wwxYw|jdkrY t|tddiS#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw|jdkrddlm}Tddl}c|Ts|cd sddl}d |jd dGd d }e|jd dG }f|jd}g|ep|fp|g}j|d|j}h|hjp|hj}in#t4$rd}iYnwxYw|ist7|ddS t|tS#t4$r'} t7|t9| cYd} ~ Sd} ~ wt$r(} t7|t9| dcYd} ~ Sd} ~ wwxYw|jdkrt|tS|jdkrddlm}Tddl}c|Ts|cd sddl}d |jd dGd d }e|jd dG }f|jd}g|ep|fp|g}j|d|j}h|hjp|hj}in#t4$rd}iYnwxYw|ist7|ddSt9pidFpdG !}.t9pidpdG}Pt9pidHpdG pd} t|t|.|P|S#t$r} t7|d| dcYd} ~ Sd} ~ wwxYw|jdkr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw td/}n!#t$rt7|d1d2cYSwxYwtd/5td8d|_|Ddddn #1swxYwYt|d|'dS|jdkr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwd/} t|}n!#t$rt|}k|kst7|d1d2cYS|kdrt7|ddcYSt|krtS||kd4ptt|dtIg|kd'pd|kdA|kdB}d|_|kd|_|kdp|kd|_|kd|_|kd|_|kd|_|kd |_|kd!|_|kd"|_|kd#|_|kd$|_|Dd%nܐt|}l|lst7|d1d2cYSt||kd4pt|ld|l|kd'pd|kd)|kdA|kdB&}d|_|kd|_|kdp|kd|_|kd|_|kd|_|kd|_|kd |_|kd!|_|kd"|_|kd#|_|kd$|_YnwxYwt|5td9d|_|Dd%dddn #1swxYwYt|d|'dt|S|jd'kr td/n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYw td/}n!#t$rt7|d1d2cYSwxYwd*pdrdd(lm}m|m}ntfd)tDd}o|ost7|d*d2St|od)|nst7|d*d2Std/5|_5|Ddddn #1swxYwYt|d|'dS|jd+krL td_n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwddl}Ndd(lm}md_ dd,}|st7|d-Sd.}p|pr#|Njd/|pst7|d0St}qtWj,j-dd3||p|mpdtyj<d1}r|qZ|rt|qt|d|rd2S|jd3krV td*d_n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwddl}Ndd(lm}mt}qtfd4|qDd}r|rst7|d*d2S|m}nt|rd)|nst7|d*d2Sd_ dd,|rd_<d.vr4d.}p|pr#|Njd/|pst7|d0S|p|rd.<t|qt|d|rd2S|jd5kr td*n4#t4$r'} t7|t9| cYd} ~ Sd} ~ wwxYwdd(lm}mt}qtfd6|qDd}r|rst7|d*d2S|m}nt|rd)|nst7|d*d2Sfd7|qD}qt|qtjr tjtjd8}s|sD]}t|td*d*krq t|td/}d|_5|DS#t$r2ted9|td/YwxYwn+#t$rted:YnwxYwt|dJdiS|jd;krt|S|jdvrt7|d?Sdd@lm}ut||u|oS|jdAkrMd=dG}o|od>vrt7|d?SddBlm}vt||v|oS|jdCkrt|S|jdDkreddElm}wm}Sm}Vm}TddFlm}xm}y|Tst|ddGdHS|jd}z|x|zst|ddIidJ SdKdG}{|w|{s|y|zt7|dLdMS|S}||d|ddN|ddt||V|||||jtjdJdidS|jdOkrddPlm}}m}~m}U|U|}|||r |~|||d|ddN|ddt||}|||jtjdJdidS|jdQkrst7|dRSd dG}dSdG}|r|st7|dTS ddUlm}t||||S#t4$r'} t7|t9| cYd} ~ Sd} ~ wt$rD} tdVt7|t9| d cYd} ~ Sd} ~ wwxYwdS(Xz?Handle all POST routes. Returns True if handled, False for 404.POSTrz/api/csp-reportr"csrfrCross-origin request rejectedrz /api/uploadz/api/upload/extractz/api/transcriberz!/api/session/recovery/repair-safer)repair_safe_session_recoveryrcleanrr)handle_kanban_postFTrrrNzdashboard config save failedrz/api/session/newr worktree>r+r.r-r,)create_worktree_for_workspacerz(failed to create worktree-backed sessionzFailed to create worktree: rgrr-r)r rgrr-r worktree_inforirz/api/session/duplicaterrrr rrz (copy)rr r rrr personalityenabled_toolsetsrrrrr=z/api/default-modelrrr*api_keyzprovider is requiredrJz Unknown errorz/api/providers/deleterdisplayeffort)showr.r,r+)hideofffalser@z'display must be show|hide|on|off (got 'z')z,reasoning: must supply 'display' or 'effort'z/api/admin/reload)r~z api.models)rxreloadedz/api/sessions/cleanup) zero_onlyz"/api/sessions/cleanup_zero_messagez/api/session/renamerz/api/personality/setrzMissing required field: namer?rrrAz Personality "z" not found in config.yaml system_promptprompttonezTone: stylezStyle: rc3K|]}||V dSrXrrYs rr[zhandle_post..s'"9"9q"91"9"9"9"9"9"9r)rJr rz/api/session/toolsetstoolsetsz)toolsets must be a non-empty list or nullc3DK|]}t|to|VdSrX)rrrrs rr[zhandle_post..s1BBAz!S))/aBBBBBBrz'each toolset must be a non-empty string)rJr z/api/session/draftrcomposer_draftdraftrfilesiP2)rJrz/api/session/updateclose_terminalz9Failed to close workspace terminal after workspace updatez/api/session/worktree/removez%session_id must be a non-empty stringc3K|]}|dvV dS%0123456789abcdefghijklmnopqrstuvwxyz_Nrrcs rr[zhandle_post..0(MMA1??MMMMMMrzInvalid session_idrnr)remove_worktree_for_sessionrz(failed to remove worktree for session %sz/api/session/deletec3K|]}|dvV dSr%rr's rr[zhandle_post..Fr)rrz8Read-only imported sessions cannot be deleted from WebUI missing_okzFailed to unlink session index)_evict_session_agent.jsonz .json.bakz Failed to unlink session file %sz9Failed to close workspace terminal for deleted session %s)delete_cli_sessionzFailed to delete CLI session %sz/api/session/clearrJriz/api/session/truncate keep_countz%Missing required field(s): keep_countz/api/session/branchzsession_id must be a stringzkeep_count must be an integerzkeep_count must be non-negativez (fork)fork)r rgr-rrrr)rrrz/api/session/compress/startz/api/session/compressz /api/session/conversation-roundsz/api/session/handoff-summaryz/api/session/retry) retry_lastz/api/session/undo) undo_lastrr)r4r5once resolve_all)rJrz/api/btwz/api/backgroundz /api/goalz/api/chat/startrz /api/chatz/api/chat/steer)_handle_chat_steerz/api/terminal/startz/api/terminal/inputz/api/terminal/resizez/api/terminal/closez/api/crons/createrZz/api/crons/updatez/api/crons/deleter^z/api/crons/pausez/api/crons/resumez/api/file/deletez/api/file/savez/api/file/createz/api/file/renamez/api/file/create-dirz/api/file/revealz/api/file/pathz/api/workspaces/addz/api/workspaces/removez/api/workspaces/renamez/api/workspaces/reorderz/api/approval/respondz/api/clarify/respondz/api/commands/exec)execute_plugin_commandcommandzcommand is requiredrzPlugin command not foundz/api/skills/savez/api/skills/deletez/api/memory/writez/api/profile/switchname is required)switch_profile_validate_profile_name)build_profile_cookier7) process_wide)invalidate_models_cachez Set-CookierVz/api/profile/createz^[a-z0-9][a-z0-9_-]{0,63}$zKInvalid profile name: lowercase letters, numbers, hyphens, underscores only clone_fromzInvalid clone_from namebase_url)rrz,base_url must start with http:// or https://)create_profile_api clone_config)rBrErCr )rJr-z/api/profile/delete)delete_profile_apir>r)create_sessionrrset_auth_cookierrr _set_password_clear_passwordruHERMES_WEBUI_PASSWORD env var is set — it overrides the settings password. Unset the env var and restart the server before changing the password here.rrrauth_just_enabled ensure_asciiindentrrapplication/json; charset=utf-8r?rrz/api/onboarding/oauth/start)rHERMES_WEBUI_ONBOARDING_OPENzX-Forwarded-Forrz X-Real-IPzOnboarding OAuth is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.z/api/onboarding/oauth/cancelz/api/onboarding/setupzOnboarding setup is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.z/api/onboarding/completez/api/onboarding/probezOnboarding probe is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.zprobe failed: z/api/session/pinz/api/session/archivez9Read-only imported sessions cannot be archived from WebUIr r2)rrr rrgrrrrrrrrrrrrr)r-rrz/api/session/moverc34K|]}|dk|VdSrNr)rrZ target_pids rr[zhandle_post..s1MMqq*/L/L/L/L/L/LMMrzProject not foundz/api/projects/creater_colorz^#[0-9a-fA-F]{3,8}$zInvalid color format)rrrVr-r)rJprojectz/api/projects/renamec3@K|]}|ddk|VdSrSrrrZrs rr[zhandle_post..66 J J1AlOtL7I$I$IQ$I$I$I$I J Jrz/api/projects/deletec3@K|]}|ddk|VdSrSrrYs rr[zhandle_post..OrZrc8g|]}|ddk|S)rrrYs rr^zhandle_post..Ws,QQQ!1\?d<>P+P+PA+P+P+PrrzFailed to update session %sz/Failed to load session index for project unlinkz/api/session/importz/api/updates/applyrc)rHrz!target must be "webui" or "agent") apply_updatez/api/updates/force)apply_force_updatez/api/session/import_cliz/api/auth/login)verify_passwordrGrHr)_check_login_rate_record_login_attemptzAuth not enabled)rJrz)Too many attempts. Try again in a minute.ipasswordrnapplication/jsonz/api/auth/logout)clear_auth_cookieinvalidate_sessionrz/api/rollback/restorezrequest body is requiredryz%workspace and checkpoint are required)restore_checkpointzrollback/restore failedr)rrrrrrrTrr/rrrr rr=rrrr r0rrrrrxrsave_dashboard_configrJrrrrr\rrrrrrrrrrrr`rarbrr rgrrrrrr-rrrr rhr rrr move_to_endrQrpopitemrrrtr&r'rr importlibr~reload api.routesroutesrp_handle_sessions_cleanuprrqrrr@rrrrrprcrr r;rr/r api.terminalr#rsrrr*rrrrtrr unlinkr.rGrHrrrrr0rJ_handle_session_compress_start_handle_session_compress_handle_conversation_rounds_handle_handoff_summaryrr4r5r8tools.approvalr4r5r7r9 _handle_btw_handle_background_handle_goal_command_handle_chat_start_handle_chat_sync api.streamingr9_handle_terminal_start_handle_terminal_input_handle_terminal_resize_handle_terminal_closer<r[_handle_cron_create_handle_cron_update_handle_cron_delete_handle_cron_run_handle_cron_pause_handle_cron_resume_handle_file_delete_handle_file_save_handle_file_create_handle_file_rename_handle_create_dir_handle_file_reveal_handle_file_path_handle_workspace_add_handle_workspace_remove_handle_workspace_rename_handle_workspace_reorder_handle_approval_respond_handle_clarify_respondrr:_handle_skill_save_handle_skill_delete_handle_memory_writer=r> api.helpersr?rAFileNotFoundErrorrr%rDFileExistsErrorrFrrGrrrHrr?r@rrdumpsrrArBrrCrr ipaddressr#rr1 ip_address is_loopback is_privater.r,r(r*r+r rrrrrrrrrrrrrrr r rkrnextr r&r r]rr_handle_session_importr~r]r^_handle_session_import_clir_r`rarerfrrg)rrrrrrrrSr rrworktree_requestedrbase_workspacergrrrlricopied_sessionr_r rrflagrk_models_routesrr _reload_cfg2 _get_cfg2_cfg2rrrrPrr/rrr _MAX_DRAFT_TEXT_MAX_DRAFT_FILESold_wsnew_wsrr#rr*cli_meta_for_deleterrer.rZr0keeprr2 custom_titlesource_messagesforked_messages branch_title source_titlerOr4r5r_p_lr9r[r:r;r=r>r?rAr$rBrCrDrFrGrrrHrauth_enabled_beforecurrent_cookielogged_in_beforerequested_passwordrequested_clear_passwordsavedauth_enabled_afterrKlogged_in_after new_cookie response_body_osr_xff_xri_rawaddris_local_ip_strrrrr/rcrVrprojrr}r]r^r_r`ra client_iprb cookie_valrerfryrgrrTs @@r handle_postrsT  )&&+f M M MD {'''  % JJ| $ $ $ %g..   t     6 w   Ww(GHQTUUU   t   {m##W%%% {+++$W--- {''' )))   ;!!    KKMMM  {999EEEEEE--kI^I`I`aaa& 70C0C)LMMMM {n--888888##GVT:: U??+GVVDD Dt {---'''''' / g<7$<===l3''G E7$7DDDD%:<<+CRC00}2 i??  "++  mm  '55w'7888 =);<<<u#--  !"%11#$&33%& '55'0$//12")2Dd!K!K!K34 'w0@$GGG56")2Dd!K!K!K78 9;;;9: 9;;;;N@ 1 16D23$^%>???(mml22$%0000(mml22 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1    ! ! !Wy.*@*@*B*BjR`RiEj*jkll l ( ( (wA'' ' ' ' ' ' ' ({*** -W6txx7H7HIIJJ J ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{&&&xx ++1r88::@@BB ((9%% 8w 677 7  'll((**2dG!+w77zz$ Fw 7O D DEE E&!!! {---xx ++1r88::@@BB  8w 677 7$[11zz$ Fw 7O D DEE E&!!! {&&& -hhy))GXXh''F"7||))++1133666W&;D&A&ABBB888W&;E&B&BCCC7$Yg$Y$Y$YZZZ!"6v">">???w NOO O ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{)))))))))!!! %$$$$$%1!/!/T|DDEEE {---'GGGG {:::'FFFF {+++ ( D, 0 0 0 0 ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 : $T,%7 8 8  $w-((..00"5CAG FFHHH               9aiikk2333 {,,, ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (   w >?? ?< F|!!## :C  AA : : :w 3S99 9 9 9 :  $ @ @ @ @ @ @ LNNN : : : : : :IKKE '2..I ) or B B /66 $FW:W:WMTMMMs&d+E%&& $?B77R599Xr;R;RS99V$$;LL!9%-!9!9:::99W%%=LL!;5>!;!;<<<"9"9e"9"9"999U $S ) )  $(2DDdAM FFHHH               amvVVWWW {---  ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< 88J''  h-- QX Q7$OPPPBBBBBBB O7$MNNN :C  AA : : :w 3S99 9 9 9 : $S ) )  !)A  FFHHH               1;MNNOOO {*** ?e # #V\**E6$$ > > >7$7===== >A/44:EWw.// / ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< xx!! !  JtS$9$9 D dC  *SYY%@%@(()D  Zt%<%< E eT " " -s5zz4D'D'D+++,E :C  AA : : :w 3S99 9 9 9 : $S ) )  A/44:E $f  !&g$A  FFHHH               0@AABBB {+++ ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 :K,, (2488K3U3UVVWWFF ( ( (wA'' ' ' ' ' ' ' ( $T,%7 8 8   AK$"2d":":"CHHWag..2Bd2J2JDHH-...PTA/66##x $#AG#+ FFHHH                v|  FLb 1 1 1 1 Z777777tL12222 Z Z Z XYYYYY Z6"""9aiikkZ4L&LMNNN {444hh|R(( U*S#.. Uciikk Uw GPSTTT TiikkMMMMMMM ;w 4c:: : ACt444AA A A Aw 3C@@@ @ @ @ ATXXgu--.. B A A A A A A00%@@@FWf%% % 6 6 6wC555 5 5 5 5 5 5 B B B   G M M Mw 4 4SAAA A A A A A A B{+++hh|R(( :w 899 9MMMMMMM ;w 4c:: ::3??  " "; / / aw Z\_`` `7<<EcJJ  $ $ Ld # # # $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ ;  % 6 6 6 6 6 ; ; ; LL9 : : : : : ; 433333S!!! ;#}}},5577A MM+-// 0 0 0 0 ; ; ;w 4c:: : : : ; @ HHH % % % MM+ & & - - - > > > > @ @ @ LL;Q ? ? ? ? ? @& / /  #C . . . / / / / / / / / / / / / / / / [ 3 3 3 3 3 3 N3     [ [ [ LLTVY Z Z Z Z Z [$ E E999999""3'''' E E E >DDDDD E4;):;<<< {*** ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 : $T,%7 8 8 5 5AJAL AG FFHHH 7 7 7 7 7 7 l!3 4 4 4 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5!))++>>??? {--- ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( 88L ! ! )w GHH H :D.//AA : : :w 3S99 9 9 9 :4 %&& $T,%7 8 8  ETE*AJ FFHHH                DQYY[[J ;S-STT   {+++  ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( $|,c22 ?w =>> > : l!344FF : : :w 3S99 9 9 9 :XXl++  ! E __  * E E E7$CDDDDD E A~~7$EFFFxx((  B|,,2244SbS9ATL!//R  !-kzk:OO"?33O  4'LL!<5:L*333L&,FIt44$$/!    - -*0HV& '  !2 3 3 3h--,.. e,,,,h--,.. - - - - - - - - - - - - - - -   KKMMM +!!'!2     {333-gt<<< {---'666 {888*7D999 {444&w555 {*** ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( 1 2 2 2 2 2 2Z\ 233FWtT4V455 5 : : :w 3S99 9 9 9 1 1 1WwA/00 0 0 0 0 0 0 1{))) ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( 1 1 1 1 1 1 1YtL122FWtT4V455 5 : : :w 3S99 9 9 9 1 1 1WwA/00 0 0 0 0 0 0 1{))) ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< txx 40011  &  $ $ $ FFFFFFFF&&FF3%%%&&&&&&&&&&&&&&&     $S&d C C C C C  % % %w??@@@ {j  7D))) {'''!'4000 {k!!#GT222 {'''!'4d;;;; {k!! $/// {'''444444!!'4000 {+++%gt444 {+++%gt444 {,,,&w555 {+++%gt444 {)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{&&&555555 ! ! # # 3 3#GT22 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3{(((555555 ! ! # # 5 5%gt44 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5 5{)))555555 ! ! # # 6 6&w55 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6{((("7D111 {&&& $/// {((("7D111 {((("7D111 {,,,!'4000 {((("7D111 {&&& $///{+++$Wd333 {...'666 {...'666 {///($777{---'666{,,,&w555{***777777dhhy"--344::<< 7w 566 6 9Wx)?)?)H)HIJJ J - - -wA,, , , , , , , A A Aw :C@@ @ @ @ 9 9 9w 2 2C88 8 8 8 8 8 8 9{(((!'4000 {***#GT222{)))#GT222{+++xx##))++ 4w 233 3 - K K K K K K K K 8 8 8 8 8 8y  &&t,,,$^Du===F ; : : : : : # # % % %Wf224885 -. 9 9 9w 2 2C88 8 8 8 8 8 8 - - -wA,, , , , , , , -{+++xx##))++ 4w 233 3sy6== ] XXl++  !Z..00J39:JGG ?7$=>>>7;xx 7K7KU488J++11333QU59XXi5H5HR$((9b))//111d  PH//0GHH Pw NOO O ( 7 7 7 7 7 7''%!$((>5"A"ABB! FWTf==>> >O\: ( ( (wA'' ' ' ' ' ' ' ({+++xx##))++ 4w 233 3 - O O O O O O O O " "4 ( ( (''--FWf%% %-. 4 4 4w 2 233 3 3 3 3 3 3 - - -wA,, , , , , , , -{o%%                  #D$4 5 5 ;BBDDPD -o//%g.. Q>>.3Q3QRR! txx00# 6 6 6"--3355  $(1B(C(C#D#D   !9 y0"55;;== b d## /4(((,_..  Q#5 Q>Q:Q  +  #%5 #'))J"O 2n,k%6!" %We$$ $ 5uQGGGNNwWW c"""N,MNNN,c#m2D2D.E.EFFFOZ888,,,'""" M***t {333,,,,,,  D4R)S)S D     !**+t ! ! !  ! D7%~@CDDD -W9$??P_akOlmmm m ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{444 (W:4@@Q`blPmnnn n ( ( (wA'' ' ' ' ' ' ' ({--- -,,,,,  D4R)S)S D     !**+t ! ! !  ! D7%~@CDDD -W4T::;; ; ( ( (wA'' ' ' ' ' ' ' - - -wA,, , , , , , , -{000-//000 {--- -,,,,,  D4R)S)S D     !**+t ! ! !  ! D7%~@CDDD '' 339r::@@BBHHJJ '' 339r::tzr&&y117R88>>@@HD ;W5h'RRSS S ; ; ;w 4 4 4c:: : : : : : : ;{((( ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 : $T,%7 8 8  DHHXt4455AH FFHHH               !))++>>???{,,, ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' (< 5 6C  AA3 63 63 63C88H >7$7=====||K(( f7$_adeeeee+H55- 6"",,w//k:>VWZ>[>[]j3k3k022",,w//<9'||L99'||L99$( '||L99 '||L99WX\\,=W=W #+<<0@#A#A !)n!=!=$LL33 $LL33 ≪77 ≪77 ( ] ; ; %\\*55 ..../44Bw(;SAAAAA&LL))LZm-L-LLL))6Y$LL33'||L99'||L99$( '||L99 '||L99WX\\,=W=W #+<<0@#A#A !)n!=!=$LL33 $LL33 ≪77 ≪77 ( ] ; ; %\\*55 g3 6h%S ) ) + +dhhz48899AJ FFEF * * * + + + + + + + + + + + + + + +!))++__A[\]A^A^_```{))) ( D, ' ' ' ' ( ( (wA'' ' ' ' ' ' ' ( :D.//AA : : :w 3S99 9 9 9 :XXl++3t  > < < < < < <4466NMMMMMOOMMMF >7$7==="6::i#8#8.II >7$7=== $T,%7 8 8  %AL FFHHH               !))++>>???{,,, ( D& ! ! ! ! ( ( (wA'' ' ' ' ' ' ' (888888F|!!##DSD) 1w00 0!!  8#95AA 8w 677 7 ??*,,*3B3/..00=I)++    h$77888 {,,, ( D, / / / / ( ( (wA'' ' ' ' ' ' ' (888888 ?? J J J J J J JD   :w 3S99 90022txx 22NCC :w 3S99 9F|))++DSD1V d??ME ???OZ888'""",,, DJd|44;;==>>>t {(((PPPPPPPPPP!\'**  +  z * * *c"""N,>???OZ888'"""'""" DJd|44;;==>>>t{--- <w :;; ;HH["-- XXlB//  I  Iw GHH H 4 7 7 7 7 7 7W00JGGHH H ( ( (wA'' ' ' ' ' ' ' 4 4 4   6 7 7 7wAs333 3 3 3 3 3 3 4 5sB A--B0CC4E--"F#I$$ K".J K"9KK"4AL;;M3 M.(M3.M3AP R1QR R".RRR&^8'^ D ^A8]8 ^]^ ] A^ _^=7_=_/` a" `-'a"- a":aa"a" A?k1 k1.k1k1!k11 m;lm m*m m mp qq;qq q q>=q>A s--s14s1)t:: u+u& u+&u+%v55ww }//}36}3!~22 #<##AAA&A&ABBABBAB>B>ACCACEAEEAE4E3AE4FAF.F. AGF8AGGAGGAGJ/AJ?J?AKKAKK/=AL8L8AL<L?AL<M(AM9M9 AN*NAN%NAN*N%AN*N.AOOAO"O!AO"O75AP-P- AQP7AQQAQQAQQ6B AT T ATTATT;AUU$AU:U9AU:YAY*Y*AZ ZAZ Z0"A[[ A][A\[;A]\ A]\9A] ]A]] A]` A`/`/A`3`6A`3`;Aaa$Aa8a7Aa8b AAccAc1c0Ac1c5?Ad5d5%AeeAee'Af f Af fAf fAf'f'%AggAggAg'g'%AhhAhh3Aii Ai5iAi0i*Ai5i0Ai5i9AjjAj-j,Aj-kAAllAllAlmAm m Anm*An nAnn Ann:AooAo.o-Ao.p)AqqAqqAqrAr(r( Asr2AssAssAstAttAt<t;At<uAu'u'!Av v Av yA8A{{A{!{$A{!~A~%~% A~/A AA*B@@BA@" BA@+BAA BAABAA#BA4A4 BB%A>BB BBB%B BB%B)*BCCBD#C1 BD#C:BDDBD#DBD#D3BEE BE5EBE0E*BE5E0BE5F6 BG/GBG#G BG/G#BG'G'BG/G*BG'G+BG/G/ BG<G;BG<M,BN N BNNBNN0BOOBOOBOO4BPPBPPBPP8BQQBQQBQQ<BRRBRR!BRSBSSBS"S%BS"Z0B[ [ B] [B[8[2B] [8B] \ B] \!B]\>B] ]B] _'ABaaBb*aBa5a/Bb*a5 Bb*bBb%bBb*b%Bb*hA Bi!i!Bj i9BjjBj jBj k)-BllBnl)Bm mBnm BnmBm;m5Bnm;BnyB*B| | B||B||1#B}} B~6}B~};B~6~ B~6~B~1~+B~6~1B~6#B** C@4C@@C@@C@AB,CDD CDDCDD/CE E CF.ECE9E3CF.E9 CF.FCF)F#CF.F)CF.HB,CKK CKKCKNCN5N5 CON?COOCOOCOO/CPP CP1P CP,P&CP1P,CP1P5CQ Q CQ)Q(CQ)R=CS S CSSCSTCTT CU T#CUT?CU UCU UCU'U'-CfV'CfV?H Cf_ F7CffCffACg#g#Cg'g*Cg'h1Cii Ci3i Ci.i(Ci3i.Ci3i7Cj j Cj+j*Cj+m"Cn n CnnCnoCoo Cp o#Cpo?Cp pCp t!Ct3t3 Cu$t=CuuCu$uCu$zCzz C{zC{z;C{{C{~A DA0D@@DA@9D@?@<DA@>D@?@?DAA%DA,A+DA,P' DQQ DSQDQ4Q.DSQ4 DSR9DSR:DSSDSct|st|ddidSt|}|jdr*ddlm}||||}|durt||d Sd SdS) z@Handle all PATCH routes. Returns True if handled, False for 404.rrrrrr)handle_kanban_patchFPATCHT)r/rrrrrrr)rrrrrs r handle_patchrs w  R7$CDSQQQQ W  D {n--999999$$Wfd;; U??+GVWEE Et 5rct|st|ddidSt|}|jdr*ddlm}||||}|durt||d Sd SdS) zAHandle all DELETE routes. Returns True if handled, False for 404.rrrrrr)handle_kanban_deleteFDELETET)r/rrrrrrr)rrrrrs r handle_deleters w  R7$CDSQQQQ W  D {n--::::::%%gvt<< U??+GVXFF Ft 5rtext/cssapplication/javascript text/html image/svg+xml image/png image/jpegr image/gif image/webpz font/woffz font/woff2) cssjsrsvgpngjpgjpegicogifwebpwoffwoff2>rr text/plainrrcttjjdz }|jt dd}||z } ||n$#t$rt|ddidcYSwxYw| r| st|ddidS|j }t|dd}|t vr|d n|}|d |d ||d d |}|dt)t |||j|dS)Nrrrrrrrqrz; charset=utf-8rrrrr?T)rrrrGrrQrHrJrr]rsuffixr _STATIC_MIMEr0r&_TEXT_MIME_TYPESrArBrrrCrr) rrrr static_fileextct ct_headerr3s rr|r|s>>(/(:CCEEK +c*oo'' (C$--//K> ,,,, >>>7K0======>     >{':':'<'<>7K0====   " " $ $C   #**S//< 8 8B*,0@*@*@2&&&&bI #  222 444  " "C (#c#hh--888  M 4s(A>>BBc t|jddgd}|st|dS t |}n!#t $rt|ddcYSwxYwt |j}tj |dd }| d | d d | d d|d| dtt|d| dd||j|ddS)Nrr*rrrrFrLrMrrrPContent-Dispositionzattachment; filename="hermes-z.json"r?rrrT)rr/r0rrprqr__dict__rrrArBrrQrrCrr)rrrlrrrjs rrrs 6< $ $\B4 8 8 ;C 6745556    6667/555556 qz * *DjE!<<.Dse%% !)!T22%89uuV}}7N7NEE&"--7N7N7N7N%%r)rr/r)rr/r0rrrJrrrrrrrrprrcrprqr=rQ)rrr2rLcontent_searchr safe_sessionsrrr title_matchrrr(r(s rrr's &,  B sRD!""$$**,,AVVIu--a0C7N w&&q) * *E 7  ' 'A77D$((7++S11 < ,T'] ; ;W   & & & &:}5666G ^^AEE'NN0b77999  g...D$((7++S11 < ,T'] ; ;W NN4    "1\?3305Ht}VeV,,4=  Ai((.BA!!T**HH%%%&%%% CFFLLNN**#A)<<<%dhhw&7&7==H,8g,G,GDMt,,, + i(    % ( W7QWNN O OOsDK!!K65K6c t|j}|ddgd}|st|dS t |}|j}n#t $rv d}tD]}|d|kr|}n|st|ddcYS|dd}n##t$rt|ddcYcYSwxYwYnwxYw t|tt||dd gd|dd gdd S#ttf$r(}t|t|dcYd}~Sd}~wwxYw) Nrr*rrrrr rrq)entriesr)rr/r0rrpr rqrr=rrrrrJr) rrr2rlrr rcsrs rrrTs &,  B &&t $ $Q 'C 674555:   K  : : : :H&((  l#s**!HE+ >7$7===== ["55II : : :w 3S99 9 9 9 9 9 : I : 5 #DOORVVFSE5J5J15MNNvu--a0      z *5557OA..444444445saA C'5B6CB65C6CCCCC A#EE=E82E=8E=c$t|jddgd}tj|}|t |ddidSt |dr|n|}|d |d d |d d |dd|dd|  |t\}}nH#tj $r6|j d|j YewxYwt!||||dvrnn#t"$rYnwxYw||ur7t |dr' ||nR#t&$rYnFwxYwnA#||ur7t |dr( ||w#t&$rYwwxYwwwxYwdS)Nrr*rrzstream not foundrr subscriberr text/event-stream; charset=utf-8rno-cacheX-Accel-Bufferingno Connection keep-aliveTres : heartbeat ) stream_endrcancel unsubscribe)rr/r0rrrrrArBrC_SSE_HEARTBEAT_INTERVAL_SECONDSrhrmrrrr!_CLIENT_DISCONNECT_ERRORSr r=)rrrstream subscribereventrs rrrus&&**;==a@I [ # #F ~7$67DDDD'.v{'C'CO!!###J # (JKKK 444 +T222  l333   (nn5TnUU tt;    ##$6777 ##%%%  % & & &999  $      V # # (F(F # "":....     V # # (F(F # "":....     $ # 4sFD#"F#AE(%F'E((FG F GFG(F>> G  G H %G;:H ; HH HH c2t|dd}|std t |}n#t $rt dwxYwt t|ddpd}||fS)Nrr*rrr )rr0rrJrprqrrh) body_or_queryrlrr s r_terminal_session_and_workspacers m b11 2 2 8 8 : :C 0.///,    ,,,*+++,)'!["*E*E*KLLI  >s AA2c  t|\}}ddlm}|||t|dpdt|dpdt |d}t |d ||j|d S#t$r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wwxYw)Nr)start_terminalrowsr,colsrrestart)rrrT)rJrr rtrrr)rrprrJr0rrr rnrqrrrJr=r)rrrlr rtermrs rr}r}s58>>Y//////~  TXXf%%+,,TXXf%%+,,),,--     !!^==??       )))7CFFC(((((((( )))7CFFC(((((((( 5557OA..444444445sBB7B:: E C'!E ' E 4DE  E $EE E c0 t|dt|dd}t|dkrt |ddSddlm}||d|t|d d iS#t$r(}t |t|d cYd}~Sd}~wt$r(}t |t|d cYd}~Sd}~wt$r(}t |t|d cYd}~Sd}~wwxYw)Nrrr*i zinput too largeir)write_terminalrJTrrr) rrr0rQrrprrrqrJr=r)rrrrrs rr~r~sU 5l###488FB''(( t99t  w 1377 7//////tL)40004,''' )))7CFFC(((((((( )))7CFFC(((((((( 5557OA..444444445sHAB)B D B0*D0 D=C D D-D DDc . t|dddlm}||dt|dpdt|dpdt |d d iS#t $r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wt$r(}t|t|d cYd}~Sd}~wwxYw)Nrr)resize_terminalrr,rr)rrrJTrrr) rrprrJr0rrqrrrJr=r)rrrrs rrrsZ5l###000000  TXXf%%+,,TXXf%%+,,    4,''' )))7CFFC(((((((( )))7CFFC(((((((( 5557OA..444444445sBA?B D B/)D/ D<CD D,D DDc t|dddlm}||d}t|d|dS#t$r(}t |t |dcYd}~Sd}~wwxYw)Nrrr"T)rJclosedr)rrpr#rrJrr)rrr#rrs rrrs)l###//////\ 23388999 )))7CFFC(((((((()s9< A.A)#A.)A.ct|j}|ddgd}|st|dSddlm}||}|t |ddid S|d |d d |d d|dd|dd|  |j t\}}n#tj $r|jd|j|jrE|j r,t)|dd|jiYnYwxYwt)||||dvrnn#t.t0t2f$rYnwxYwdS)Nrr*rr) get_terminalrzterminal not runningrrrrrrrrrrrTres: terminal heartbeat terminal_closed exit_code)r!terminal_error)rr/r0rrpr rrArBrCrr rhrmrrrris_setrr!procpollBrokenPipeErrorConnectionResetErrorConnectionAbortedError)rrr2rlr rrrs rrrs* &,  B &&t $ $Q 'C 371222)))))) <  D |7$:;CHHHH # (JKKK 444 +T222  l333    "koo6UoVV tt;    ##$?@@@ ##%%%;%%''DK,=,=,?,?"3k49>>CSCS5TUUUE   % & & &===  13I J     4s7-G/#DGBF61G5F66GG+*G+ct|d}|d}nxt|dr?tt |dr"t|}n)t |dd}|duo|}|d|o||d}|s d|d<|d fS|s d |d<|d fS|d fS) NrFrn_threadi0u)rfallback_poll_msrJwatcher_runningagent sessions not enabledrrwatcher not startedrr)rr0rcallablerhrn)rwatcherr watcher_alive_trjs r_gateway_sse_probe_payloadr4s8<< 34455G  * % %9(77J3O3O*P*P9W--//00 Wi . .$82;;== !'-( G 7| 0| C<rct}ddlm}|}t|jddgddv}|r%t||\}}t|||S|dst|dd id St||\}} |d st|dd id S| d| dd| dd| dd| dd| | } ddl m} | } t|dd| i | t } nH#t"j$r6|jd|jYbwxYw| n&t|| dd| n#t,$rYnwxYw|| n#|| wxYwdS)zSSE endpoint for real-time gateway session updates. Streams change events from the gateway watcher background thread. Only active when show_cli_sessions (show_agent_sessions) setting is enabled. r) get_watcherprober*>r+r-r,rrrr.rr-r/rrrrrrrrrr)rsessions_changedrTre : keepalive NrN)rapi.gateway_watcherr6rr/r0rr4rrArBrCrrrr!r rhrmrrrr r )rrrr6r1r7rjrx _probe_body _probe_statusrLrinitial event_datas rrr+s H//////kmmG V\ " " & &w 5 5a 8 > > @ @DX XE 24XwGG'&1111 <<+ , ,O7$@A#NNNN"r\rNordrchs rr[z-_content_disposition_value..hsk CGG!!!!c!!!!!b &;&;rz .c3`K|])}dt|cxkrdkr nn|dvr|ndV*dSrCrGrIs rr[z-_content_disposition_value..nsk  B%%%%#%%%%%"K*?*?BBS      rdownloadrz ; filename="z"; filename*=UTF-8'') r}parserrrrrprrr)r?r_up safe_nameascii_fallbackr ascii_suffix quoted_names r_content_disposition_valuerScs$X#++D"55==dBGGIWW eDkk Si'ww       7CR2L222 ))IB)//K  * *N * *' * *r range_header file_sizec|r|dr|dkrdS|ddd}d|vsd|vrdS|dd\}} |dkr0t|}|dkrdSt d||z }|dz }n@t|}|rt|n|dz }|dkrdSt ||dz }||ks||krdS||fS#t $rYdSwxYw) zAParse a single HTTP bytes range into inclusive start/end offsets.zbytes=rNrrrpr*r)rrrrJr]rrJ)rTrUspecstart_send_s suffix_lenrlrs r_parse_range_headerr[zsN |66x@@IPQMMt   c1 % %a ( . . 0 0D d{{cootZZQ''NGU b==UJQt9z122Ea-CCLLE %8#e***9q=Cqyytc9q=))C 3;;%9,,4cz tts%2C:AC:C:6C:: DDcsprcmime cache_controlr]c L |j}n=#t$rt|ddcYSt$rt|ddcYSwxYwt |jdd|}|jdrk|i|d| d d || d d t|| d S|r|ndtd|dz f\}} |r| |z dznd} ||rdnd| d|| dt| | d d |r| d d|d| d|| d|| dt||j|rY| d|| dd| dd| ddnt|| | r |d 5} | || } | rT| t'd!| } | sn.|j| | t-| z} | Tdddn #1swxYwYn#t$rYd SwxYwd S)"zKServe a file with correct MIME/disposition and optional byte-range support.zPermission deniedrzCould not stat filerRanger*Niz Content-Rangezbytes */z Accept-RangesrHTrrrrr?zbytes rprrrzContent-Security-PolicyzX-Content-Type-OptionsnosniffzReferrer-Policyz same-originzPermissions-PolicyzDcamera=(), microphone=(self), geolocation=(), clipboard-write=(self)ri)rrrrr=r[r#r0rArBrrCr]rrSrrrrMrrrrQ)rrcr^r?r_r]rU byte_rangerlrcontent_lengthf remainingchunks r_serve_file_bytesris8KKMM) 6667/55555 888713777778%W_%8%8"%E%EyQQJ7## (:c"""O-C -C-CDDDOW555'"""t)I3q)a-3H3H/IJE3(18S5[1__qN 4##555 --- (#n*=*=>>> 111QO-Oe-O-Oc-O-OI-O-OPPP 777 -/I+W]Wb/c/cddd # 5s;;;4i@@@-}=== R    '"""   T"" ,au * ,FF3{I#>#>??E M''...U+I  , , , , , , , , , , , , , , , ,   44  4sKAAA8L A.L; LL  LL L L! L!c  ddlddlm}m}m}t jd}t dt|dz }|rs||}|r ||s[| d| dd | |j d dSt|j}|d d gd} | st'|d dS t | n!#t*$rt'|ddcYSwxYw|t d|dz g} ddlm} t | } | r| | n#t*$rYnwxYwjdd } | r| jD]t}|}|r\ t |}|r| |d#t*$rYpwxYwut;fd| D}|st'|ddSrstA|ddidSj!"}tGj|d}hd}|hdz}dh}|dd gddk}|o|d k}||vr||vs|r||vs|rdnd!}|rd"nd}tI|||d#|$S)%a!Serve a local file by absolute path for inline display in the chat. Security: - Path must resolve to an allowed root (hermes home, /tmp, common dirs) - Auth-gated when auth is enabled - Only image MIME types are served inline; all others force download - SVG always served as attachment (XSS risk) - No path traversal: resolved path must stay within an allowed root - Additional roots can be added via MEDIA_ALLOWED_ROOTS env var (os.pathsep-separated list of absolute paths; ":" on POSIX, ";" on Windows) rNr~r:r;rcrrds#{"error":"Authentication required"}rr*zpath parameter requiredrz Invalid pathz/tmp)rMEDIA_ALLOWED_ROOTSc3K|]_}|jtt|gt|kV`dSrX)r]r commonpathr)rrrrcs rr[z _handle_media..sq  ;;== S[[#d))455TBrzPath not in allowed locationrrrrrapplication/octet-stream> image/bmprrrrr> audio/aac audio/mp4 audio/ogg audio/wav video/mp4 video/ogg audio/flac audio/mpeg audio/opus video/webm audio/x-wavapplication/pdfvideo/quicktimerinliner+r attachmentsandbox allow-scriptszprivate, max-age=3600r\)%r?rrrrrrrBr@rrArBrCrrrr/r0rrrGr=rrrrrrpathseprr]rrrrrri)rrrrr_HOME _HERMES_HOMErr2raw_path allowed_rootsrws extra_rootsrrpwithin_allowedrr^_INLINE_IMAGE_TYPES_INLINE_PREVIEW_TYPES_DOWNLOAD_TYPESinline_previewhtml_inline_okr?r]rrcs @@rrrsFFFFFFFFFF $$S)) * *E =#ei6G2H2HIIJJUUWWL \' " " ~~b))   ! !# & & &   0B C C C    ! ! ! M   F G G G F &,  Bvvfrd##A&,,..H <75s;;;1h'')) 1117NC000001  V   ##%%M  444444 $$&& ' ' / / 1 1 99;; %   $ $ $      +//"7<<BBDDK %%ck22  D::<&.."2"2>7K0==== -    C <7 8 8D 0333 ''OVVHrd++A.#5N#; (;N O## ' ' 'N 'tG\?\?\@](   &4 = ! !C WfdKAX^a b b bbs8!E33FF AH99 II+A K66 LLc(t|j}|ddgd}|st|dS t |}n!#t $rt|ddcYSwxYw|ddgd}|ddgdd k}t t|j|}| r| st|d d id S|j }tj|d } |ddgdd k} hd} | o| dk} |s| | vr| sdnd} | rdnd}t||| | d|S)Nrr*rrrrrrLr+rrrror~>application/xhtml+xmlrrrrrrr\)rr/r0rrprqrrr r]rrrrrri)rrr2rlrrforce_downloadrcrr^rdangerous_typesrr?r]s rrr?s &,  B &&t $ $Q 'C 6745556    6667/555556 &&"  q !CVVJ--a0C7N $q{++S 1 1F ==??>&.."2"2>7K0==== -    C <7 8 8D VVHrd++A.#5NMMMO#; (;N"0rT_5L5LUc5L,,jrK&4 = ! !C WfdKQT U U UUsAA32A3c$t|j}|ddgd}|st|dS t |}n!#t $rt|ddcYSwxYw|ddgd}|st|dS t |tt|j |S#ttf$r(}t|t|dcYd}~Sd}~wwxYw) Nrr*rrrrrpath is required) rr/r0rrprqrrrr rrJr)rrr2rlrrrs rrrcs6 &,  B &&t $ $Q 'C 6745556    6667/555556 &&"  q !C 07.///5+D,=,=sCCDDD z *5557OA..444444445s0AA32A3&/CD'D D Dct|jddgd}t5t j|}t |t r|r|dnd}t|}n |r|}d}nd}d}dddn #1swxYwY|r t|t||dSt|dddS)Nrr*rrrU) rr/r0r5r4rrcrQrr)rrrlrhrZrSs rrrus" 6< $ $\B4 8 8 ;C    S!! eT " " !+atAJJEE  AEEAE                Hd1ggFFGGG W$;; < <._finishgs# #Iw 7 7 7Wg&& &r..r;z hermes-agent)provider_model_idsz+provider_model_ids import failed for %s: %scdksdsgS ddlm}dg}t |t sgSg}|D]}t |t s||dd}dr|kr||hdkr|s|||S#t$rgcYSwxYw)NrWcustom:r)_custom_provider_slug_from_namerrr*) rrrr0rrcrrr=)r _cp_entries_matches_cp_slugrrs r$_custom_provider_entries_for_requestzA_handle_live_models.._custom_provider_entries_for_requests0 H,,0C0CI0N0N,IJJJJJJ"%''*._custom_provider_model_ids.._appendsXtzr??0022D*D 0 0 D)))))** 0 0rrgr*r~r?r)r0rrrrc)rrrr_itemrs @r_custom_provider_model_idsz7_handle_live_models.._custom_provider_model_idss7***** ,,---''(++gt,, ` '**%dC00*#GDMMM* ..`!(``%eS11`#GENNNN't44`#GEIIdOO$^uyy7I7I$^UYYW]M^M^___ rc|d}|t|}|drW|drBt |dkr/t j|ddd}|r|St|dpd}|r't j|dndS) Nr z${}rOrLrr*key_env)r0rrrrrQr?r@)rr_key_envs r_custom_provider_api_keyz5_handle_live_models.._custom_provider_api_keyswwy))#t99??,,Dt,,As1C1CAD TU !yadR88>>@@$# 3779--344::<<6:Bryr**00222BrrWrrCr rz/v1z/modelsz /v1/models AuthorizationzBearer )r#rercdg|]-}|d|dd.Sr?r*rrr(s rr^z'_handle_live_models..s3&U&U&U1t&UquuT2&U&U&Urchg|]/}t|tr|d|n|0Sr?rrs rr^z'_handle_live_models..s8"_"_"_TUZ45H5H#O155q>>>a"_"_"_rz.Live-fetched %d models from custom provider %sz*Custom provider returned no models from %sz*Live fetch from custom provider failed: %s providerscdg|]-}|d|dd.Srrrs rr^z'_handle_live_models..s9]]]1QRQVQVW[Q\Q\]quuT2]]]rz)Live-fetched %d models from %s /v1/modelszLive fetch from %s failed: %s)_PROVIDER_MODELScg|] }|d Srrrs rr^z'_handle_live_models..s:::q1T7:::r)rr~rnous)_build_nous_featured_set)selected_model_idz:Failed to apply Nous featured-set cap for /api/models/live)_format_ollama_labelc dvr |Sd|vr|ddn|}|d}g}|D]}|}|dkr|d2|dvr(||^|dd r||||d |}d D]*}|||}+|S) z/Best-effort human label from a model ID string.)ollamaz ollama-cloudrrrprGPT) rrgemmallamamistralqwenrgrokkimiglmNrr)rGLMrjAIXLMoE)rrr capitalizerrprrr) midrrPrrZplrporig _fmt_ollamars r _make_labelz(_handle_live_models.._make_label3sN555"{3''',/3JJciinnR((CGMM#&&EF 2 2WWYY;;MM%((((GGGMM!,,..1111rrU]]__2MM!$$$$MM!,,..1111HHV$$E@ : : djjllD99Lrc0g|]}|||dS))r?rpr)rrrs rr^z'_handle_live_models..Ls0SSSsSS;;s+;+;<<SSSrz%_handle_live_models failed for %s: %s)-rr/r0rrrrrrrrrrr?rrprabspathrnormpathinserthermes_cli.modelsrr=rrrsrr`urllib.requestrr%rrequestRequesturlopenrrMrrcrQ_OPENAI_COMPAT_ENDPOINTSrrrr)-rrr2_gcrrr_sysr _agent_dir_pmiids _import_errcustom_provider_entryrrrr _base_url_api_key _model_cfgurllibr_ep _models_url_req_resp_body_data _fetch_err_providers_cfg_provr_pmr_default_model _featuredr models_outrrrrrrs-` @@@@@rrr<s & &,  BzB4((+1r88::@@BBH@<000000cee Bwww++// ;;ArH FW DDEE E 766666**844*844 (33  Wf%% % 'T ' ' ' ' ' ' '         sx'7'78H8HIYIYZbIcIc8d8d'e'e'+T9nNNJ**:66J**   J/// D D D D D D$x..CC    LLFR] ^ ^ ^CCCCCC t _$( !      ,   , C C C 8##x':':9'E'E#??AA@@C,403-JJ99#>>????. _H00H4G4G 4R4R0 (9 5 9 9* E EI778MNNHH!$"!5!5J *z : :I)~~i88H$_$_#_----# (..s33<<..=-0///KK-0*<*<*[_@`@`hN..x<<eT3J3JT599Y///PTDC"www3377 BBf%~55"OOO%46F6F6F$G 6  $^33D!3DD=$.DJuzz||$<$ Q NQ NB8Q ] Q:Q50]5Q::#]C X>#V-! X-V11X4V15A X] X2 X-(]-X22;].]5A-[#"]#$\ ] \  8] ^ ;^^^c ddlm}ddl}t|j}|ddgd}|st |ddid S|jd |r|d vrt |dd id S tdt|d dgd}tdtdt|ddgd}n+#ttf$rt |ddid cYSwxYw||z }g} d} | rt|ddd} t!| } | |||z} | D]j} | }| | j|j|jd@#t,$rt.d| YgwxYwt ||| | |dS)zList cron run output files with metadata (no content). Returns lightweight file listing so the frontend can render a run history without fetching full output for every run. r OUTPUT_DIRNr r*rjob_id requiredrr![A-Za-z0-9_-][A-Za-z0-9_.-]{0,63}rqrinvalid job_idoffsetr@rrr"50z!offset and limit must be integersrc4|jSrXrrrfs rrz&_handle_cron_history..tsqvvxx?PrTr)rsizemodifiedz"Failed to stat cron output file %s)r rtrSr)rrrrr/r0r fullmatchr]rJrrJr\r]rglobrQrrrrrrIrrrs)rrCRON_OUTr$r2r rr"out_dirrtrS all_filespagerfrs rrrUsz 100000 &,  B VVHrd # #A &F D7$56sCCCC 3==v F FC&T_J_J_7$45cBBBBVQBFF8cU33A67788As3BFF7TF$;$;A$> ? ?@@AA  "VVV7$GHQTUUUUUUVG D E~~ F7<<//5P5PZ^___ I./ F FA FVVXX !J "   F F F A1EEEEE F WQWXX Y YYs%C;;%D#"D# >B7O4SAAAA9//79/EE&w//V&-'CCDD D 9997CFF+C8888888889s:E F F=FFch|d}d}t|D]3\}}|ds|dr|}n4|dkr d||dzdnd|}|d|pdS) uExtract the response body from a cron output .md file for preview. Contract: cron output files use markdown front-matter followed by a ``## Response`` (or ``# Response``) heading that marks the start of the agent's reply. This function locates that heading and returns everything after it (up to *limit* chars). If no heading is found the entire text is returned — callers should be aware that front-matter fields (model, timestamp, …) may appear in the snippet. rrrrrrNz(empty))r enumeraterrpr)rr"rr'r%rrs rr/r/s JJt  ELU##4 ??= ) ) T__\-J-J L E 4@13D3DDIIeL1,--. / / /$))TYJZJZ a a c cD < $9$rcddlm}t|j}|ddgd}t |ddgd}|st |ddid S||z }g}|rt| d d d d|}|D]o} | dd} | | j t| dE#t$rtd| YlwxYwt |||dS)Nrrr r*r"rrrrrrc4|jSrXr"r#s rrz%_handle_cron_output..s16688;LrTrrrrr)rrz"Failed to read cron output file %s)r outputs)rrrr/r0rJrr]rr'rrrr*r=rrrs) rrr(r2r r"r)r5r rftxts rrrs}000000 &,  B VVHrd # #A &F w&&q) * *E D7$56sCCCCGG~~Fw||F++1L1LVZ[[[\b]b\bc F FA Fkk79kEEAF?Z[^?_?_``aaaa F F F A1EEEEE F WG<< = ==sAD%D0/D0c xt|j}|ddgd}|r4t|\}}t |||t |ddSt 5dtD}dddn #1swxYwYt |d|iS) z/Return running status for one or all cron jobs.r r*rr)r rtelapsedc^i|]*\}}|ttj|z d+S)r)rCr )rjidrs rr#z'_handle_cron_status..s2___&#qsE$)++/155___rNrt) rr/r0rrrCr r rB)rrr2r rtr8 all_runnings rrrs  &,  B VVHrd # #A &F `+F33VERY[\L]L]^^___ ``__DVD\D\D^D^___ ``````````````` Wy+. / //s/$BB#&B#c 8ddl}t|j}t|ddgd} ddlm}|d}g}|D] }|d} | st| trY |j | d d  } n&#ttf$rYwxYwt| } | |krl||d d |d d|dd| |ddud t|||dS#t $rt|g|dcYSwxYw)z=Return cron jobs that have completed since a given timestamp.rNsincer@rXTr\ last_run_atrrr?r*rUnknown last_statusr2r.F)r rrx completed_atr.) completionsr=)rrr/r[r0rrYrr fromisoformatrrrrJr\rr ImportError) rrrr2r=rYr3rBr+last_runrs rrrsOOO &,  B "&&3%((+ , ,E?''''''y$///   Cww}--H (C(( %!*88 ((h77ikkB#I.H8__Ezz"""%''$"3"3 # : :"%''-"C"C(*/2ww7L/M/MUZ/Z +FFGGG ???"u==>>>>>?s9AE9 AC  E9 C E9C  BE99FFc  ddlm}|dz }n)#t$rtjdz dz }YnwxYw|dz }|dz }|r|dd nd }|r|dd nd }t|t|t|t|t||r| j nd|r| j ndd S) Nrr6memoriesr; MEMORY.mdUSER.mdrrrrr*)memoryuser memory_path user_path memory_mtime user_mtime) r<r7rDrrAr]rrrrrr)rr7mem_dirmem_file user_filerJrKs rrrsq7777777((**Z7 777)++ )J67$H)#I ??   GI>>>         WY???  "6** &&x==Y8@8I8ISHMMOO44t7@7G7G7I7IS)..**33t      s #<<Fcd}tjdD]}|jdr t j|j}|r|ot|jdk}n%|o"|j dkot|jdk}|rTt5tj |jddddn #1swxYwY| d|dz }#t$rtd|YwxYwt#jrt#j dt'|d|d S) Nrz*.jsonrrTr,rz"Failed to clean up session file %s)rJcleaned)rr'rrrrrrQrrrrrrqr=rrrsr r]r)rrrrTrZr should_deletes rroro#sG  h ' 'BB 6  S ! !   B QV$$A U ! :c!*oo&: ! Tag&; TAJST@T  //L...///////////////D)))1  B B B LL=q A A A A A B ""3!T2222 WTg66 7 77s6A$C'C4 C'C C'C C''%DDc 8 t|dt|dn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYwt|d}|st|dSt|dd}|rPt5|tvr t|dd id cdddS dddn #1swxYwYd|_ d d l m }t|dd}||j|j|t|dd}t!|jpg|_d|dd|_|t)jj} | |_ |t/} t5| t| <dddn #1swxYwYd dlm} | |d|j| |t7jt:|j||j|j| dfd|dd} | t|| |j|ddS)uPOST /api/btw — ephemeral side question using session context. Creates a temporary hidden session, streams the answer via SSE, then discards the session. The parent session is not modified. rrNrrzquestion is requiredrr$session already has an active streamrrrrrr-r rgrr-zbtw: r$) track_btwT) ephemeralrrcrdkwargsdaemon)rrr)rrJrrrprqrrhrrrrrrr rgrcrrrr`rarbrrrZr threadingThreadr"rl) rrrrrcurrent_stream_id _new_sessionrr[rr rZthrs rrwrw:s $l###j!!!! $$$7CFF########$6 \* + + 6667/5555564 #$$**,,H 472333#5t<<"  a a G++7,R"S\_``` a a a a a a a a+ a a a a a a a a a a a a a a a"666666Q 0$77N +g%9d++ Iaj.B//I-hssm--IO NN  I!*I NN " $ $F $$# $$$$$$$$$$$$$$$(((((( Id< )"6 8LLL  #"Hagq{It T!^DD    C IIKKK WIY=Qhlmyhz{{ | ||sP # AA AAA..B  B "DD D3 H  HHc h  t|dt|dn4#t$r'}t|t|cYd}~Sd}~wwxYw t |dn!#t $rt|ddcYSwxYwt|d st|dSddlm}td d |j j td d }d dd |_ | tjj|_| t%}t&5|t(<dddn #1swxYwYtjjddddlm}m |d |j |   fd}t3j|d}|t9||jdS)uPOST /api/background — run prompt in parallel background agent. Creates a hidden session, starts streaming in a daemon thread. Frontend polls /api/background/status for completed results. rrNrrzprompt is requiredrrXrr-rYzbg: r$r)track_backgroundcomplete_backgroundc  t j j d ddlm}|}d}t |r|jndpgD]}t|tr| ddkr1| drGt| d pd }|r|}n |pd n#t$r d YnwxYw td z d dS#t$rYdSwxYw#t$r$  d YdS#t$rYYdSwxYwwxYw)u?Run the background agent, then mark the tracked task `done` with the last assistant reply so `/api/background/status` can surface it. Without this, `complete_background()` is never called and the result is lost — `get_results()` would see a forever-`running` task and return nothing. N)rr)rr*r assistantrrz(no answer produced)z(background task failed)r/Tr,)r"rgr rrrreversedrrrr0rrr=rrq) _Sessionr_answer_m_contentbg_sidrfr parent_sidrrrtask_ids r_run_bg_and_notifyz._handle_background.._run_bg_and_notifys! &   -     U::::::#==00"$KH$5$5t#RPRSSB%b$//!266&>>[3P3P vvh''! "266)#4#4#:;;AACCH"*$#J9ZDZ[[[[ U U U##J9STTTTT U  &////7747HHHHH        ##J9STTTTTT     sk EC C/.E/D ED  E !D00 D>:E=D>>E E/ E E+&E/*E++E/T)rcr^)rprr)rrJrrrprqrrrrhr rgrrr`rarbrrrrrrerfrr_r`rlr)rrrrbbgr rerqrcrnrfrrorrrrps @@@@@@@@rrxrxrs $l###h $$$7CFF########$6 \* + + 6667/555556 h & & ( (F 270111666666Q 0$77N +g%9d++    B $fSbSk##BHGGIII  I#BGGIII " $ $F $$# $$$$$$$$$$$$$$$jllrr"GDDDDDDDDl#J ]FZGVDDD,,,,,,,,,,,,\  "4T B B BCIIKKK W' QSQ^__ ` ``s> + AAAA A66BB= FFFrrc|sdStt|ddpg}|r|d}t|tr|ddkrdt |dpd}dt |pd}||krdSd|d }t|ttfr|d krt||d <|rt||d <|j |dS) a2Materialize the current user turn for eager first-turn persistence. The streaming thread still receives ``pending_user_message`` so existing cancel/recovery/final-merge paths keep their current contract. Eager mode only adds a durable display-message checkpoint before the agent launches. NrrrrKrrr*rrrr attachments) rcrhrrr0rprrrJr[rr) rrrurexistingr latest_textmsg_textuser_msgs r/_checkpoint_user_message_for_eager_session_saverzsF GAz4006B77H" fd # #  6(:(:f(D(D((3vzz)'<'<'B#C#C#I#I#K#KLLKxxCI2 4 4 6 677Hh&&3//H*sEl++0 Q #J4"&{"3"3Jhr)rr rc ||_||_||_||_||_||_||nt j|_tdkrt||||j| dS)a Persist chat-start state according to webui.session_save_mode. ``deferred`` keeps the existing sidecar/WAL-backed behaviour: save pending fields but leave the display transcript empty until the agent merges the result. ``eager`` additionally writes the current user turn into messages so a process restart immediately after /api/chat/start preserves the prompt as a normal session message. Empty sessions are never saved here because this helper only runs after a non-empty message is validated. Neager) r rgrrrrr rrrzr)rrrur rgrrrs r&_prepare_chat_start_session_for_streamr}s(AKAG%A"A A'A)3)?::TY[[A"$$//7      FFHHHHHr)rurnormalized_modelr goal_relatedr~rc |pg}|r|dndt|dd} | r|r|dndt5| tv} dddn #1swxYwY| r|r|dndd| ddS|r|d ndt ||s)|jt vrd }t j|jtj j } t|j} |r|d nd| 5|r|d ndt||||||| dddn #1swxYwY|r|dndi} ddl m}||jd| d||||||jd } n,#t $rt"dd YnwxYw|r|dndt'||r|dndt)}t5|t| <dddn #1swxYwY|r d t*| <|r|dndt-jt0|j|||| |f||dd }|| |j|j| dd}|r||d<|r||d<|S)zHPersist pending state, register an SSE channel, and start an agent turn.active_stream_checkNractive_stream_lock_waitr6rWr)rr_statusstale_stream_cleanupTsession_lock_waitsave_pending_state)rrur rgrrturn_journal_submittedr)append_turn_journal_event submittedrK) rrrrrur rgrrz-Failed to append submitted turn journal eventrrstream_registrationworker_thread_start)rrr\turn_id)rrrrreffective_model_provider)rrhrrrrrdiscardr`rarbrr}api.turn_journalrrr=rrrArrrr_r`r"rlr0)rrrur rgrr~rrracurrent_activer session_lock journal_eventrr rcr)s r_start_chat_stream_for_sessionr st#K*.7DJJ$%%%4#5t<< %15? ,---4  : :.'9N : : : : : : : : : : : : : : :  ,0 :DJJ' ( ( (d?$5  /3< )***!!$$$ 8AL,EEE !)!,777  I*1<88L'+5DJJ"###    ,0: '(((d. #)                    -1:DJJ'(((dMW>>>>>>11 L$&*&"02      WWWFQUVVVVVW(,6DJJ#$$$$y!!!)-7DJJ$%%%4 " $ $F $$# $$$$$$$$$$$$$$$.)-I&)-7DJJ$%%%4  #lC 9k J"0,OO    C IIKKKl2 $$Y// H ,&+"#>/=+, OsH A''A+.A+-0E))E-0E-&F77&G G 9 IIIc  t|dn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYwt|dpd}|rF ddlm }|d kr&| |st|d d Sn#t$rd}YnwxYw|rhtt|dd|sItt|d dp!t|d dpt|dd}|s||_t|dd}d}|r9t 5|t"v}dddn #1swxYwY|st%| ddlm} | t|dd} n#t($rd} YnwxYwddlm} m} m} t|ddp|ddpd}|}t|o|dvo| }dx}x}x}}d}|r tt5|dp|j}n4#t$r'}t|t|cYd}~Sd}~wwxYw|dp|j}d|vr|dnt|dd}t;||\}}}| |j| }| |j||| }|dds/|ddkrdnd }t?||| St|d!pd}|rK|l tt5|dp|j}n4#t$r'}t|t|cYd}~Sd}~wwxYw|Z|dp|j}d|vr|dnt|dd}t;||\}}}tA||g||||d"}tC|"d#d$pd$}|#||d kr*| |j|| d|d<t?||| St?||S)%z@Handle WebUI /goal command controls and optional kickoff stream.rNrrr-r*r_PROFILE_ID_REr7invalid profilerrcontext_messagesrrF)r>)goal_command_payloadgoal_state_snapshotrestore_goal_staterdr)rxpauseresumerstopdoner rgr)r)stream_runningrrJTr agent_runningrrkickoff_prompt)rrur rgrr~rrr)$rrJrrrprqr0rr<rr&rDr&rhrr-rrrr>r= api.goalsrrrrrr rgrrrrrJrr)rrrrrequested_profilerhas_persisted_turnsrarr>rrrr goal_args goal_action will_kickoffr rgrr~previous_goal_staterequested_modelrrjrxrstream_responses rryryts$l#### $$$7CFF########$6 \* + + 6667/555556DHHY//5266<<>># # 3 3 3 3 3 3 I--n6N6NO`6a6a-7$5s;;; # # # "    #*It1L1LN_!`!`*" Az4 ( ( 8q,d33 8q0$77   # *)AI#5t<<N)  : :.'9N : : : : : : : : : : : : : : : ) %a ( ( (<<<<<<2271i3N3NOO  XWWWWWWWWWDHHVR((FDHHVR,@,@FBGGI//##))++K  U U  L =A@I@@)9[ (5dhh{6K6K6Zq{[[\\II ( ( (wA'' ' ' ' ' ' ' (((7++6qw 4'' HH% & & &,d33  3Z  3 3 /~/21!,\ZZZ"" %! G ;;tT " "2 G,,??S'&1111%566<"==CCEEN 6   , 9$((;:O:O:^STS^ _ _``  , , ,7CFF++++++++ , ="hhw//:17O$t++)***Q 0$77  7^"77 3E>#39 )-    _((C88?C@@''' S==  q|-@| \ \ \ \!GDMWgf555 5 Wg  s A?AAAA<;A<81C++ C:9C: FF F6 G G&%G& 6K K1 K,&K1,K156P,, Q6QQQc  |r|dnd t|dnK#t$r>}t|t |cYd}~|r|SSd}~wwxYw|r|dnd t |d}n8#t$r+t|ddcY|r|SSwxYw|r|dndt |dpd }|r] d d l m }|d kr=| |s(t|d d |r|SSn#t$rd}YnwxYw|rhtt|dd|sIt!t|ddp!t|ddpt|dd}|s||_|r|dndt |dd }|s't|d|r|SS|r|dndt%|dpgdd} |r|dnd t'||d} nK#t$r>}t|t |cYd}~|r|SSd}~wwxYw|dp|j} d|vr|dnt|dd} |r|dndt+| | \} }}t-||| | | |||}t/|ddpd}|r|dndt3||| |r|SS#|r|wwxYw)!Nvalidate_session_idrrprrvalidate_profiler-r*rrr7rrrrrnormalize_messagerzmessage is requirednormalize_attachmentsrurresolve_workspacer rgrresolve_model_provider)rrur rgrr~rrrr6r)rrrJrrrrprqr0rr<rr&rDr&rhrr-_normalize_chat_attachments%_resolve_chat_workspace_with_recoveryrgrrrJrr)rrrrrrrrrrur rrrgrr~r)rxs rrzrzsF-1; ()))t ( D, ' ' ' ' ( ( (wA'' ' ' ' ' '@   KKMMMM C (%)3 =!!!t :D.//AA : : :w 3S99 9 9v   KKMMMM y :*.8 %&&&D 3 3 9r::@@BB  ' '777777$ 11.:R:RSd:e:e1w(93??f   KKMMMM e ' ' '$&!!! '  ._WQ 45P5PRc%d%d ."&:t,,<10$77<14d;;##  ' . . +/9 &'''T$((9b))**0022 7w 566B   KKMMMM A04= *+++1$((=2I2I2ORPPQTRTQTU +/9 &'''T (=a+AVAVWWII ( ( (wA'' ' ' ' ' '4   KKMMMM 7 (((7++6qw 4'' HH% & & &,d33  15> +,,,$2Y  3 3 /~/2 #)-    X\\)S118S99(,6 #$$$$(6222   KKMMMM 4  KKMMMM sP.-P. A5A0A5P.0A55P.B('P.(CP.CAP.21E<;P.< F P. F  C P./AP.#K21P.2 L:<L5L:P.5L::CP..QcB|dv}|r|nt|dd} tt|S#t$r|rYnwxYwttt }||_ |n#t$rYnwxYw|S)zIRecover stale implicit session workspaces without hiding explicit errors.rr N)rhrrrJrr rr=)rrequested_workspaceexplicitrEfallbacks rrr7s"*4H'/R##WQ T5R5RI,Y77888      ,-?-A-ABBCCHAK        Os!7 AA:B BBcRg}t|ts|S|D]}t|tr4t|dp|dpd}t|dpd}t|dpd}|p|||d}|d}t|t r||d<|d}t|tr||d<||Mt|} | r|| ddd|S) aNormalize attachment payloads from the browser. Older clients send a list of filenames. Newer clients send upload result objects containing name/path/mime/size so image attachments can be supplied to Hermes as native multimodal inputs for the current turn. rrr*rr^)rrr^r$is_image) rrcrrr0rrJrr) raw_attachmentsrZrrrr^attr$rrs rrrIsJ ot , ,KK dD ! ! Ktxx''E488J+?+?E2FFLLNNDtxx''-2..4466Dtxx''-2..4466D<4tDDC88F##D$$$ #"F xx ++H(D)) +"*J   c " " " "IIOO%%E K!!5"b"I"IJJJ rc dt|d}t|dd}|st |ddidS tt |dp|j}n4#t$r'}t|t|cYd }~Sd }~wwxYwt|j 5||_t|d p|j d |vr|d nt|d d d d \}}||_ ||_d d d n #1swxYwYd dlm}|5t"jd} t|t"jd<t"jd} t"jd} dt"jd<|j t"jd<d d d n #1swxYwY d dlm} t*5d dlm} m}| t3|j t|d d \}}}d } d dlm}d dlm}|||}|d}|s|d}|s|d}n+#t<$r}t?d|dYd }~nd }~wwxYwtA|tr/|!dr||\}}|s|r|}|s|r|}| ||||ddtE|j }d d!lm#}m$}m%}m&}m'}|t|j}d"|jd#} tQ|j)pg}!tQ||}"|*||z| ||"|j |$}#d d d n #1swxYwY|5| !t"j+dd n| t"jd<| !t"j+dd n| t"jd<| !t"j+dd n| t"jd<d d d n #1swxYwYn#|5| !t"j+dd n| t"jd<| !t"j+dd n| t"jd<| !t"j+dd n| t"jd<d d d w#1swxYwYwxYwt|j 5|#d%p|"}$||"|$}%|%|_,||!|"||!|$||_)|j-d&krt]|j)|j-|_-|/d d d n #1swxYwY tad'rLd d(l1m2}&|&|j |j3pd |j4pd |j5|j |j-tm|j))n*#t<$rtn8d*YnwxYwt ||#d+pd|#d,drd-nd.|9d%|j)izd/|#:Dd0S)1zJFallback synchronous chat endpoint (POST /api/chat). Not used by frontend.rrr*rz empty messagerrr NrgrrLr) _ENV_LOCK TERMINAL_CWDHERMES_EXEC_ASKHERMES_SESSION_KEYr+)AIAgent)r"resolve_custom_provider_connection0resolve_runtime_provider_with_anthropic_env_lock)resolve_runtime_provider requestedr rrCz2[webui] WARNING: resolve_runtime_provider failed: T)rrrHrgrrCr r quiet_moder r)*_merge_display_messages_after_agent_result_restore_reasoning_metadata_sanitize_messages_for_api_session_context_messages_workspace_context_prefixz#Active workspace at session start: aj Every user message is prefixed with [Workspace::v1: /absolute/path] indicating the workspace the user has selected in the web UI at the time they sent that message. This tag is the single authoritative source of the active workspace and updates with every message. It overrides any prior workspace mentioned in this system prompt, memory, or conversation history. Always use the value from the most recent [Workspace::v1: ...] tag as your default working directory for ALL file operations: write_file, read_file, search_files, terminal workdir, and patch. Never fall back to a hardcoded path when this tag is present.) user_messagesystem_messageconversation_historyrppersist_user_messagerrsync_to_insights)sync_session_usage)rrrrrgrrz&Failed to update session cost trackingr completedrpartialc&i|]\}}|dk ||S)rr)rr>vs rr#z%_handle_chat_sync..s#JJJ1!z//q!///r)answerrxrir);rprr0rrrr rJrrrrrgrhrr|rr?r run_agentrrrrrr api.oauthrhermes_cli.runtime_providerrr=rrrrrrrrrrcrrun_conversationrrrrrrapi.state_syncrrrrrQrrrsrrB)'rrrrr rrgrrold_cwd old_exec_askold_session_keyrrrrrrrrr_rtr_cp_key_cp_baserrrrrr workspace_ctxworkspace_system_msg_previous_messages_previous_context_messagesr_result_messages_next_context_messagesrs' rr{r{gs D&''A dhhy"%% & & , , . .C B7O4SAAAA$1$((;2G2G2V1;WWXX $$$7CFF########$  . .** G HHW   (*:d*B*BDHH% & & &PQSceiHjHj! !  1"!~)***************(''''' 88*..00%(^^ >"z~~&788 *..)=>>(+ $%+,< '( 888888888888888^C%%%%%% M M          ,B+A+AGWQ@PRV5W5WXX,, (FIyH VVVVVVPPPPPPFF,'779-- 4 # 3 3I 4 # 3 3I   MMM  )S)) )i.B.B9.M.M )$F$Fy$Q$Q!'G'&H )X) (IG"" !!6!8!8<   E              65c!+6F6FGGMPakPPP !"&aj&6B!7!7 )-.G.G.J.J)K)K &++*S03%?%?@Z%[%[ %( ,FOM M M M M M M M M M M M M M M ^ C C ~t4444-4 >*# 0$77770< ,-& 3T::::3B /0 C C C C C C C C C C C C C C CY C C ~t4444-4 >*# 0$77770< ,-& 3T::::3B /0 C C C C C C C C C C C C C C C C ! . .!::j11O5O!>>>>? jj!1228b & ; = =Lff9yy{{j!*%==JJ JJJ     s"6B C #C?C C !A3E  E$'E$3BHH #H ( R95*%&!!)THHY''2788H%%+((7##+t    !  -4  *" ?9>  5 6  D*SY(;<<CC.?.D.DEEFFF 9997CFF+C8888888889s8 AAAA C7E E6 E1+E61E6c t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwddlm} i}|D],\}}|dkr |dkrt|||<%||||<-n4#t$r'}t|t|cYd}~Sd}~wwxYw||d|}|st|ddSt|dt|dS) Nr r)rr- Job not foundrTr) rrJrrrrrBr<rr0)rrrrupdatesr>rr+s rrr+sg$h $$$7CFF########$$$$$$$ $JJLL  DAqH}}I~~:1==    $$$7CFF########$ *T(^W - -C 27OS111 WT*;C*@*@AA B BBs6 A?AAAB CB>8C>Cc t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwddlm}||d}|st|ddSt |d|ddS)Nr r) remove_jobrrT)rJr )rrJrrrrr)rrrrrJs rrrCs$h $$$7CFF########$$$$$$$ DN # #B 27OS111 WTT(^<< = == A?AAc |dd}|st|dSddlm}||}|st|ddSt |\}}|r#t |d|d t |d d St|dd lm }|}t|} tj t||| fd t |d |ddS)Nr r*rr)get_jobrrFalready_runningr)rJr rxr8r6T)rcrdr^rt)rJr rx)r0rrrrrrCrr<r7rBr_r`rrl) rrr rr+rr8r7 _profile_home_execution_profile_homes rrrPs9 XXh # #F /7-...!!!!!! '&//C 27OS111/77OW;&DU',Wa'8'8::;; ;v433333**,,M8== -S-I`4ajnooouuwww WTVyII J JJrc|dd}|st|dSddlm}|||d}|rt |d|d St|d d S) Nr r*rr) pause_jobreasonr Trrr)r0rrr r)rrr r rs rrrss XXh # #F /7-...###### Yvdhhx&8&8 9 9 9F 7f55666 w - --rc|dd}|st|dSddlm}||}|rt |d|dSt|dd S) Nr r*rr) resume_jobTrrr)r0rrr r)rrr r rs rrrs XXh # #F /7-...$$$$$$ Z  F 7f55666 w - --rc t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|ddS| r:| dst|dStj |n|t|d|dd S#tt f$r'}t|t#|cYd}~Sd}~wwxYw) Nrrrrrb recursivez(Set recursive=true to delete directoriesTrJr)rrJrrrprqrrr r]rr0shutilrmtreerqrrrrrrrrcs rrrs$lF++++ $$$7CFF########$6 \* + + 6667/555556 0d1;//f>>}} 7w 0#66 6 ==?? 88K(( P7$NOOO M& ! ! ! ! MMOOOtF|<<===  (0007OA..////////0sW AAAA AA=<A=A E 8E AE FE<6F<Fc t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|ddS| rt|dS| | ddd t|d |d|jd S#tt f$r'}t|t#|cYd}~Sd}~wwxYw) Nrrrrrbz Cannot save: path is a directoryrr*rrT)rJrr$)rrJrrrprqrrr r]r write_textr0rrrrrr s rrrs$lF++++ $$$7CFF########$6 \* + + 6667/555556 0d1;//f>>}} 7w 0#66 6 ==?? Dw BCC C$((9b11GDDD D$v, @UVV     (0007OA..////////0sW AAAA AA=<A=A E#E2AEFF;FFc ( t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| rt|dS|j dd| | dd d t|dt|t|jd S#tt f$r'}t|t#|cYd}~Sd}~wwxYw) NrrrrzFile already existsTrrr*rrr )rrJrrrprqrrr r]rrr r0rrHrrr s rrrs$lF++++ $$$7CFF########$6 \* + + 6667/555556 0d1;//f>> ==?? 7w 566 6 D4888$((9b11GDDD D#f.@.@akARAR.S.S*T*TUU     (0007OA..////////0sQ AAAA AA=<A=A E B EF*F F Fc t|dddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|ddS|d }|rd|vsd|vrt|d S|j |z }| rt|d |d S| |t| t|j}t|d |d|d S#ttt f$r'}t|t#|cYd}~Sd}~wwxYw)Nrrnew_namerrrbrrzInvalid file namezA file named "z" already existsT)rJold_pathnew_path)rrJrrrprqrrr r]rrrenamerHrrrIr)rrrrrr destnew_rels rrrs$lFJ7777 $$$7CFF########$6 \* + + 6667/5555560d1;//f>>}} 7w 0#66 6 #))++ 53(??dh.>.>w 344 4}x' ;;== Mw K K K KLL L dd&&tAK'8'899::4=A>A F3F1F5A"FG/G GGc  t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| rt|dS| dt|dt| t|jdS#tttf$r'}t|t|cYd}~Sd}~wwxYw) NrrrrzPath already existsT)rr )rrJrrrprqrrr r]rrrHrrIrr s rrrs$lF++++ $$$7CFF########$6 \* + + 6667/555556 0d1;//f>> ==?? 7w 566 6 T """ D#f.@.@akARAR.S.S*T*TUU     10007OA..////////0sQ AAAA AA=<A=A D( AD((E&?E!E&!E&c| t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}| st|d|dStj }|dkr%tj ddt|gnU|d kr'tj d d t|zgn(tj d t|jgt|d |ddS#tt t"f$r'}t|t%|cYd}~Sd}~wwxYw)NrrrrzFile not found: Darwinrz-RWindowsz explorer.exez/select,zxdg-openTr )rrJrrrprqrrr r]rsystem subprocessPopenrrrrIr)rrrrrcr s rrrs$lF++++ $$$7CFF########$6 \* + + 6667/5555560d1;//f>>}} Bw ;6 ; ;SAA A"" X    fdCKK8 9 9 9 9 y  nj3v;;.FG H H H H  j#fm*<*<= > > >tF|<<===  10007OA..////////0sQ AAAA AA=<A=AE=B+E==F;F60F;6F;c t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw t |d}n!#t $rt|ddcYSwxYw t t|j|d}t|dt|dS#tttf$r'}t|t|cYd}~Sd}~wwxYw)u"Resolve a relative workspace-rooted path into an absolute on-disk path. The right-click "Copy file path" action (#1764) wants to put the absolute path on the user's clipboard so they can paste it into a terminal, editor, or anywhere else without having to round-trip through the OS file browser. The frontend can't compute the absolute path on its own — `safe_resolve` joins against the session's workspace root which only the server knows. The handler here is a thin lookup; no filesystem mutation, no OS-specific dispatch. We do NOT require the target to exist (unlike `_handle_file_reveal`) — copying the path of a just-deleted file is still useful, and refusing would force callers to special-case 404s for an action that cannot fail destructively. rrNrrTr ) rrJrrrprqrrr rrrIrr s rrr!s:$lF++++ $$$7CFF########$6 \* + + 6667/5555560d1;//f>>s6{{;;<<<  10007OA..////////0sJ AAAA AA=<A=AC D D<DDct|dd}|dd}|dd}|st|dSt |}t|rt|d|S|rW |dd n>#ttf$r*}t|d t|cYd}~Sd}~wwxYw t|n4#t$r'}t|t|cYd}~Sd}~wwxYwt}t!fd |Drt|d S|t|pjd t'|t)|d|dS)Nrr*rcreateFrz#Path points to a system directory: TrzCould not create directory: c3JK|]}|dtkVdS)rNr)rwrZs rr[z(_handle_workspace_add..^s2 , ,11V9A  , , , , , ,rzWorkspace already in list)rrrJr<)rr0rrrrBrGrrrIrrrrJrrrrrrr) rrpath_strr auto_createrErwssrZs @rrr>s+)&")=)=)C)C)E)EFFH 88FB   % % ' 'D((8U++K 07./// X))++3355Iy))O7M)MMNNNU U OOD4O 8 8 8 8) U U Uw Sq?Q?Q S STT T T T T T T U$ %h / / $$$7CFF########$   C , , , , , , ,,,977888JJA77888C WT55 6 66s<C77D2D-'D2-D26E E7E2,E72E7c|ddst|dSt}fd|D}t |t |d|dS)Nrr*rc,g|]}|dk|Srr)rr r" s rr^z,_handle_workspace_remove..js' 3 3 3QvY(221222rTr! r0rrrrr)rrr$ r" s @rrresxx##))++H 07.///   C 3 3 3 3c 3 3 3CC WT55 6 66rc||dd}|dd}|r|st|dSt}|D]}|d|kr||d<nt|ddSt |t |d|dS) Nrr*rzpath and name are requiredzWorkspace not foundrTr! r' )rrr" rr$ r s rrrosxx##))++H 88FB   % % ' 'D :4:78999   C 88 V9 AfI E !713777C WT55 6 66rc|dg}|rt|tst|dSt }d|D}g}t }|D]N}|}||vr4||vr0|||||O|D]!}|d|vr||"t|t|d|dS)aReorder workspaces by providing an ordered list of paths. Accepts {"paths": ["path1", "path2", ...]}. The workspaces list is rewritten so that entries appear in the given order. Any workspace not included in the request is appended at the end (preserves data). pathsz$paths is required and must be a listc i|] }|d| Srr)rr s rr#z-_handle_workspace_reorder..s)))qy!)))rrTr! ) r0rrcrrrrrrrr) rrr* r$ by_path reorderedseenrZr s rrrs HHWb ! !E D 5$//D7BCCC   C))S)))GI 55D  GGII <|d kr8| D]!} t|| t| "ttt||dt|d|dS)Nrr*rchoicedeny)r6rialwaysr1 zInvalid choice: r_rrr)r6rir2 Fr7T)rJr0 )r0rr5r4rrcr2rrZrQr0r1r2r6r7r) rrrlr0 r_rVrhr%r}rr>s rrrs ((< $ $C 674555 XXh ' 'F :::77v77888((="--KG 66 S!! eT " " . : )% 0 0>>HAuyy//;>>"+%)A,,? /4=ieilllG*/9)%)A,,,T ( S$'''  .l3--G hl3'' . . 68C= 6 'Xc]1-=s8C=?Q?Q R R R R 'T1 5 5 59666666666666666< :{{>**Nw{{="/M/M.N ( ( ( ( (Q'''' ( x   % %Q'''!!$$$$ $%8 9 9 9S&e<<<< WTV44 5 55s5EGG  G c|dd}|st|dS|d}||d}||d}t|pd}|st|dSt ||d t |d |d S) Nrr*rr)rr0 zresponse is requiredFr7T)rJr))r0rrrrfr)rrrlr)s rrrs ((< $ $C 674555xx ##H88H%%88H%%8>r""((**H 472333Cu5555 WTx88 9 99rc,eZdZdZdZdZdZdZdS)_ManualCompressionMemoryHandlercRtj|_d|_i|_dSrX)ioBytesIOrrx sent_headersselfs r__init__z(_ManualCompressionMemoryHandler.__init__s$Z\\  rc||_dSrXr)r; rxs rrAz-_ManualCompressionMemoryHandler.send_responses  rc||j|<dSrX)r9 )r; rrs rrBz+_ManualCompressionMemoryHandler.send_headers!&#rcdSrXrr: s rrCz+_ManualCompressionMemoryHandler.end_headerss rc|jd}|rtj|niS)Nr)rgetvaluerNrr)r; r3s rrjz'_ManualCompressionMemoryHandler.payloads:j!!##**733"%-tz#2-rN)rO __module__ __qualname__r< rArBrCrjrrrr5 r5 s_ '''   .....rr5 c|tjn|}ttD]\}}|ddkrt |dp|dp|}||z t krt|ddS)Nrxrtrr)r rcr rBr0r[#_MANUAL_COMPRESSION_JOB_TTL_SECONDSr)rrlr+rs r"_manual_compression_cleanup_lockedrF s$)+++#C17799::44S 778   ) ) 377<00PCGGL4I4IPSQQ  A A A $ ( (d 3 3 3 44rc|dpd}|dv||d|d|d|dd}|d krJ|d }t|tr||d |d<d |d <n|d krGd|d <|d pd|d <t |dpd|d<nL|dkrFd|d <|d pd|d <t |dpd|d<|S)Nrxrt>rrTr focus_topicrr)rJrxrrH rrrrTrJrFCompression failed error_statusrrTzCompression cancelledr)r0rrrrJ)r+rxrjrs r"_manual_compression_status_payloadrK sq WWX   +)F22ggl++ww}--ggl++ggl++ G"" fd # # # NN6 " " "" 7   777++C/C"%cggn&=&=&D"E"E ;   777++F/F"%cggn&=&=&D"E"E Nrc t} t||t|jpd}|}t 5t |}|s ddddStj}|dks*t|tr|dr?| dt|pidpd||dn| d||dddddS#1swxYwYdS#t$r}td||t 5t |}|r;| dd t!|dtjddddn#1swxYwYYd}~dSYd}~dSd}~wwxYw) NrrrrI )rxrrJ rr)rxrrz3Manual compression worker failed for session %s: %sCompression failed: )r5 rsrJrxrj_MANUAL_COMPRESSION_JOBS_LOCKr r0r rrrrr=rrrAr)rlrmemory_handlerrxrjr+rrSs r_run_manual_compression_jobrP s466N& 666^*1c22 ((** *  *..s33C         )++C}}Jw$=$=}WAUAU} ")!$gm%8%8%A%A%YEY!Z!Z(.&)  "(")&)                  ,    LcSVWWW *  *..s33C  ")!N8L8L!N!N(+&*ikk                             snAD1D$/ D1=B>A#H -HH  H 6JJ Jct|pd}|st|dSt5t t |}|s t|dd|dcdddSt|}t||cdddS#1swxYwYdS)Nr*rTidle)rJrxr) rrrrN rF r r0rrK )rrlr+rjs rrrs% ciR..   C 674555 & # #*,,,&**3// QWTV3OOPP # # # # # # # # 5S99'"" # # # # # # # # # # # # # # # # # #s>B3B33B7:B7c $%d}d}d} t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwt|dpd}|st|dSt|dp|dpddd pd} t |}n!#t$rt|d d cYSwxYwt|d drt|d dS ddl m } | |j } t| dkrt|dSd$d7$fd %$fd} d7%fd } ddl m} ddlm}ddlm}ddl}| | |jt|dd\}}}d} ||j|}|d}|s|d}|s|d}n2#t0$r%}t2d|Yd}~nd}~wwxYwt7|tr9|dr$| |\}}|s|r|}|s|r|}|st|dSt=| }t|d dt|d dt?j t|d!dt|d"df}| |}|!||||d#d$tE|%}|j#$|||&}| |}| |||||'}| %|5t|d dt|d dt?j t|d!dt|d"df} | |krt|d(dcdddS| |j |krt|d)dcdddS||_ ||_&g|_'d|_(d|_)g|_*d|_+tY|d*+}!|!r t[dt|!d,z nd|_.|!r||!d-nd|_/d}"t7|t`r?|d.p)|d/p|d0}"||"p ||pd|_1|2dddn #1swxYwYtg|4|j |j'|j(|j)|j*|j+t|d1dt|d2dd3z}#tk|d$|#||d4S#t0$rE}t2d5|t|d6tm|cYd}~Sd}~wwxYw)8Nct|tsdSt|dpd}|r|dkrdS|dd}t|tr dd|D}nt|pd}d|dd}|d p|d }|d }t|trt|nd }|s|s|sdS||||d S)Nrr*toolrrc3K|]k}t|trT|ddk0t|dp|dpdVldS)rNrrr*Nrrr0rrYs rr[zH_handle_session_compress.._anchor_message_key..sa&&,-55==F+B+BAEE&MM;QUU9%5%5;<<+B+B+B+Brr_tsrrur)rrrru) rrrr0rcrprrrQ)r(rrrrrru attach_counts r_anchor_message_keyz5_handle_session_compress.._anchor_message_keys`!T"" 4155==&B'' tv~~4%% 2&& gt $ $ &99 DD w}"%%Dxx %%++--dsd3 UU5\\ /QUU;//eeM** +5k4+H+HOs;'''a  L  4B\RRRrcPd}t|pgD]}t|tst|dpd}|dkrVt|dtst|dpd}|stjdd|}d|vsd|vr|cSdS) Nrr*rhr\s+rzcontext compactionzcontext compression) rirrrr0rrrsub)rrr(rrrs r"_compression_summary_from_messageszD_handle_session_compress.._compression_summary_from_messagess(.b))  Aa&& quuV}}*++1133D{""aeeI..44 !%% **0b117799G 6&#w//5577D$ 44(DJJLL88 9trct|tsdS|}|sdStjdd|}t |dkr |ddd}|S)Nrc ri@i:r)rrrrrd rQ)raw_textr6s r_compact_summary_textz7_handle_session_compress.._compact_summary_textsr(C(( 4nn 4fVS#&& s88c>>#Y###C rrr*rrH rS rrrrrR rr)rz?Not enough conversation to compress (need at least 4 messages).c`d}|pgD]}t|ts|dd}t|tr dd|D}nt |pd}|t |z }td|S)a0Fallback heuristic token estimate when runtime metadata helpers are absent. Uses whitespace token-like word counting only. This intentionally over/under-estimates BPE token counts (roughly around x3/x4 scale), and is only for resilient fallback behavior. rrr*rc3K|]R}t|tt|dp|dpdVSdSrrr*Nrrrr0rYs rr[z]_handle_session_compress.._fallback_estimate_messages_tokens_rough..sn--%a..-AEE&MMCQUU9-=-=CDD------rr) rrr0rcrprrQrr])rrSr(r content_texts r(_fallback_estimate_messages_tokens_roughzJ_handle_session_compress.._fallback_estimate_messages_tokens_roughsEZR 3 3!!T**%% 2..gt,,6#'99--!(---$$LL $'w}"#5#5L\//11222q%== rc||n |}dt|dt|d}|d|d|d|rd|ndd }d |d |d d |d r |d d zndzdz|d<|S)zOLightweight fallback summary to keep /session/compress usable in tests/runtime.Nz Compressed: u → z messageszRough transcript estimate: ~u → ~z tokenszFocus: )headline token_linenoteu([CONTEXT COMPACTION — REFERENCE ONLY] rrr rs r*zCompression completed.reference_message)rQr0)original_messagescompressed_messages before_tokens after_tokensrH rq summaryro s r&_fallback_summarize_manual_compressionzH_handle_session_compress.._fallback_summarize_manual_compression s+7+C<H/+///DG -h--<(----4[[-@-@H76?T))bJ++ ' ( Nrc^ ddlm}||S#t$r|cYSwxYw)Nr)estimate_messages_tokens_rough)rr| r=)rr| ro s r_estimate_messages_tokens_roughzA_handle_session_compress.._estimate_messages_tokens_rough sb FOOOOOO55d;;; F F F??EEEEE Fs ,,cl ddlm}|||||S#t$r|||||cYSwxYw)Nr)summarize_manual_compression)!agent.manual_compression_feedbackr r=)ru rv rw rx rH r rz s r_summarize_manual_compressionz?_handle_session_compress.._summarize_manual_compression s ZZZZZZ33%'!     ==%'!   s 33rrrr rrCz3resolve_runtime_provider failed for compression: %srz*No provider configured -- cannot compress.rrrrHTr)current_tokensrH )rH z>Session stream state changed during compression; please retry.z6Session was modified during compression; please retry.F)auto_compressionrrrt rr rq compression_anchor_visible_idxcompression_anchor_message_key)rrrrrrr r )rJriry rH z%Manual session compression failed: %srM rX)7rrJrrr0rrprqrhr|rrrQrrrrrruntime_providerrrrrgrr=rrrArrrrcrrrrcontext_compressorcompressrrrrrrrr r]r r rcompression_anchor_summaryrrrrr)&rrra re rh rrlrH rrrr} r rr_runtime_provider _run_agentresolved_modelresolved_providerresolved_base_urlresolved_api_keyrrrrru original_stream_state approx_tokensr compressed new_tokensry current_stream_state visible_after summary_textsession_payloadro rz s& @@rrsrssSSS.*   $l#### $$$7CFF########$ dhh|$$* + + 1 1 3 3C 674555dhh}--H'1B1BHbIIOOQQRVSVRVW_[_K6    6667/555556q$d++e7^`cdddOI<<<<<<--aj99 x==1  w abb b ! ! !.      " F F F F F       2 "!!!!!NNNNNN??????&&&&?C?Z?Z  , ,QWgaAQSW6X6X Y Y@ @ <)+<  VBB!:+C #wwy11 $ 8$'GGJ$7$7!$ 8$'GGJ$7$7! V V V NNPRT U U U U U U U U V ' - - -2C2N2Ny2Y2Y - $ G GHY Z Z GX# + +#* $ - -$,! Nw LMM M !NN A)4 0 0 A-t 4 4 M'!%:DAA B B A+T 2 2 !  878IJJ "" &&$244#   -66 (#7  54Z@@ //    #     ) )# . .  -t441488 ga)>EEFF/66 $ $'<<<7$dfijj        *)!*559JJJ7$\^abb        $AJ!+A AL!%A %)A "$&A !#'A 7 UZ[[[MQ^/hs1c-6H6H16L/M/M/MdhA ,Yf/p/B/B=QSCT/U/U/UlpA ,L'4(( x&{{+>??w7;;|C\C\w`g`k`klv`w`w +@+@T B B: N NTRT,,A ( FFHHH=               @. IIKKJl$%$6()(>'('<&'&:29!=]_c2d2d29!=]_c2d2d       *"*       III>BBB7G?13E3EGGHHHHHHHHIs AA A A0DDD8X=A.X,AIX I1 I,'X,I11A"XC$X8A+U9# X0$U9 X!D U9- X9U==XU=BX Y :Y Y Yc t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwt|dpd}|st|dS|d}|8 t |}n'#ttf$rt|dcYSwxYwddlm }m }||| }t|d ||||kd S) zReturn conversation-round count for a gateway session. Request body:: { "session_id": "...", "since": } Response:: { "ok": true, "rounds": 12, "threshold": 10, "should_show": true } rNr*rr='since must be a unix timestamp (number)r)count_conversation_roundsCONVERSATION_ROUND_THRESHOLDr=T)rJrounds threshold should_show) rrJrrr0rr[r\rr r r)rrrrlr=r r r s rrtrt sh$l#### $$$7CFF########$ dhh|$$* + + 1 1 3 3C 674555 HHW  E  K%LLEE:& K K Kw IJJ J J J KSRRRRRRR & &s% 8 8 8F W1!==   s) A?AA'B77!CCry channelr rctj}ddd||tjd|t|pdt|pdpd|t ||ddd S) zu\**n.@.@.N.NN eY''>+=+=i+H+HH eY''>+=+=i+H+HH e X&&.*<*,>z,J,JJ  e 4559K9KLc9d9dd rrr c@|dS tj|pd}n#t$rYdSwxYwt|tsdS|ddS|dduo+t |dt |dkot |ddt |ddko|d|dkoq|d |d koEt|d t|d kS) zKReturn True if DB content JSON matches an expected handoff summary payload.NFr*rr Try r r r)rrr=rrr0rr)rr rjs r$_is_matching_handoff_summary_contentr *!su*W]++ uu gt $ $u{{<  (u +,,4 N GKK % %&&#n.@.@.N.N*O*OO N GKK 2 & &''3~/A/A)R/P/P+Q+QQ N  I."4"4Y"?"?? N  H!3!3H!=!==  N W[[ $ $%%n.@.@.L.L)M)MM s  ++c\ ddlm}||}n#t$rYdSwxYw |jrt |jd|rdS|j||dS#t$r'}t d||Yd}~dSd}~wwxYw)zAPersist a handoff summary marker into a local WebUI session file.rrFrTz@Failed to persist handoff summary marker in local session %s: %sN) rrprqrr rrr=rrrA)rlrrprrs r _persist_handoff_summary_locallyr @!s****** K   uu : >qz"~wWW 4 '""" t Y[^`abbbuuuuus) """A: .A:: B+B&&B+c (ddl} ddl}n#t$rYdSwxYw ddlm}t |}ns#t$rft |j dtt j dz }YnwxYw|dz }| sdS| dtj}| d d }t|tst!j|d }t%|} |jt|5} | Q| d |f} | } | $t-| d| r dddd Sn+#t$rt.d|YnwxYw| d|||f| d|f| dddn #1swxYwYd S#t$r'} t.d|| Yd} ~ dSd} ~ wwxYw)zPersist a handoff summary marker into CLI sessions state.db. This keeps summary cards available after hard-refresh for imported gateway sessions that are not in local session JSON yet. rNFr6r:r;zstate.dbrrr*r z_SELECT content FROM messages WHERE session_id = ? AND role = 'tool' ORDER BY rowid DESC LIMIT 1Tz7Unable to read tail handoff marker from state.db for %szTINSERT INTO messages (session_id, role, content, timestamp) VALUES (?, 'tool', ?, ?)zOUPDATE sessions SET message_count = COALESCE(message_count, 0) + 1 WHERE id = ?z?Failed to persist handoff summary marker in state.db for %s: %s)r?rrDr<r7rrBrGr=r@rrAr]r0r rrrr rrrr rrrscommitrA)rlrr?rr7rrrrmarker_payloadrrrrs r$_persist_handoff_summary_to_state_dbr T!sC III uuj777777113344??AAIIKK jjj929]C i8O4P4PQQRR]]__ggii jJ&G >>  u [$)++ . .Bkk)R((G gs # #:*W59995g>>N! W_S\\ * * d ]!-,,6C ,,..C+OPSTUPVXf+g+g#         ] ] ] VX[\\\\\ ] LL+gr"    LL    KKMMM9               :t XZ]_`aaauuuuus AAA-CC%I IAG I I%H=I?HAI I II II J*J  Jct|||||}t|}|r"t||t|||St||}|r|St||r|n|S)z?Persist a handoff summary marker across local/session backends.)r rr r )rlry r r rmarkerrpersisted_locals r_persist_handoff_summaryr !s 0gwPX Y YF3C88,S&999(f555 6sFCCO 9#vFF R66FRrc @ ,-./01 t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwt|dpd00st|dS|d}|8 t |}n'#ttf$rt|dcYSwxYwddlm }m }m }|0| }||krt|d d S|0}|ddl } g} |D]} | d } |  t| tt frt | } nM| j t| d d} | |kr| | #t&$rYwxYw| }n|}|dd}t)|dkrt|dd Sd.d-t+-.fd|D1g}|D]|} | dd}.| d}t|pddd}|dvr|r||}d|}.1fd}d//fd,0fd}d7,/fd } ddlm}dd lm}ddlm}ddl}d}d}d} dd!lm}|0}t?|d"d}n#t&$rYnwxYw| |\}}}d} ||j!|#} | d$}|s| d%}|s| d&}n2#t&$r%}!tD#d'|!Yd}!~!nd}!~!wwxYwt|tr9|$d(r$|%|\}"}#|s|"r|"}|s|#r|#}|s\||}$ tM0|$||d)*n#t&$rYnwxYwtO|d)|$t)||d)d+S|(||||d,d)g0-}%d.}&d/|}' ||%|&|'d0}(t|(tRr|(d1nd}$,|(rW||%|&|'d20})t|)tRr|)d1nd}$,|)r||}$d)}*nd3}*nd3}* |%*n:#t&$rYn.wxYw# |%*w#t&$rYwwxYwxYw|$s||}$d)}*n/|$r|*sd)}*|}+tM0|$|+||**tO|d)|$t)|||*d+S#t&$r}tD#d4|||}$ tM0|$||d)*n#t&$rYnwxYwtO|d)|$t)||d)d5tW|d6cYd}~Sd}~wwxYw)8aGGenerate an on-demand handoff summary for a gateway session. Request body:: { "session_id": "...", "since": } Uses the session's configured model to produce a concise summary of recent conversation activity. Returns the summary text so the caller can display it in a tool-card. rNr*rr=r r)rr r r z5Not enough conversation rounds to generate a summary.rrrrirLz!Not enough messages to summarize.ct|tr1dd|DSt |pdS)Nrc3K|]R}t|tt|dp|dpdVSdSrl rm rYs rr[zI_handle_handoff_summary.._extract_handoff_text..!sna&&AEE&MM;QUU9%5%5;<<rr*)rrcrprr) raw_contents r_extract_handoff_textz6_handle_handoff_summary.._extract_handoff_text!sr k4 ( ( 88$egg   ;$"%%++---rcNtdt|DS)Nc36K|]}d|cxkodkncVdS)u一u鿿NrrIs rr[zE_handle_handoff_summary.._contains_chinese..!s>BB"8r----X----BBBBBBr)rr)rs r_contains_chinesez2_handle_handoff_summary.._contains_chinese!s%BBD BBBBBBrc3fK|]+}|dV,dS)rNr)rr(r r s rr[z*_handle_handoff_summary..!sZ    //i0@0@AABB      rrrrrKrhrcg}g}dd}|D]w}|dd}||dd}|dvr3|r1|dkr||b||x|s|s rd nd S rg}|r|d |d d |r|d|d d t|t|zdkr|dn|dd|Sg}|r|d|d d|r|d|d dt|t|zdkr|dn|dd|S)zJReturn a deterministic summary when LLM summary generation is unavailable.Ncdt|pd}|sdSt ||kr|S|d|dz dzS)Nrr*rr)rprrrrQr%)rg max_lenrs r_summarize_snippetzV_handle_handoff_summary.._fallback_handoff_summary.._summarize_snippet"s~88CB//557788>>@@D r4yyG##  'A+ &--//%7 7rrr*rRr rKuc近期可读文本不足，无法生成更完整的交接摘要，请补充一条消息后重试。zdNot enough readable text to create a useful handoff summary; please send one more message and retry.u- 你刚讨论了：ru。u- 助手已回复：rLu2- 当前对话存在尚未确认的后续动作。u;- 当前信息偏少，建议补充关键点后再切换。rz - You asked: rqz- The assistant responded: z,- There is pending context to continue next.zH- The conversation is still short; add one more turn before summarizing.)r )r0rrQrp) rB user_pointsassistant_pointsr r(rrbulletsr transcript_is_chineses r_fallback_handoff_summaryz:_handle_handoff_summary.._fallback_handoff_summary!s[  8 8 8 8 5 5A55$$D(()>)>quuY?O?O)P)PRTUUG,,,,6>>&&w////$++G444 #3 )|uu{  ! &G LJk"oJJJKKK QO6Fr6JOOOPPP;#&6"7"771<<STTTT\]]]99W%% %  ? NN=;r?=== > > >  R NNP9I"9MPPP Q Q Q {  c"233 3q 8 8 NNI J J J J NNe f f fyy!!!rct|tst|pd}|}|sdS|ds|drdSd|D}|sdS|d}t jd|rdSt|d kr"t jd |t jsdStt jd |t jS) zKBest-effort guard for truncated summaries when LLM signals are unavailable.r*Trrc^g|]*}||+Srr!)rrs rr^zO_handle_handoff_summary.._summary_output_incomplete..9"s-LLL$tzz||LLLLrru[。！？；!?.；]$F8z/\b(and|or|so|then|because|if|when|but|so|as)\b$z"\b(and|or|but|so|because|if|when)$) rrrrrrrrQ IGNORECASEr)rr last_lines r_summary_output_incompletez;_handle_handoff_summary.._summary_output_incomplete0"s$$$ #tzr??Dzz|| 4 ==   4==#7#7 4LL$//*;*;LLL 4"I 9-y 9 9 5 y>>R   2dfoqsq~(( 4BICYPRP]^^___rcxt|tsdS|dpd}|dkrdS|dpd}|dvrdS|ddS)NT finish_reasonr*rO stop_reason>rO max_tokensr)rrr0rr)summary_resultr r r s r_agent_summary_incompletez:_handle_handoff_summary.._agent_summary_incompleteC"s.$// 4 $$_55;BBDDJJLL X  4%))-88>BEEGGMMOO 2 2 24)).*<*|dp)|dp|d}nrn#t$rYnwxYw|S)Nr)rprrrrrr) rrprrrrrr0r=) channel_labelrr session_metarErls r_resolve_handoff_channel_labelz?_handle_handoff_summary.._resolve_handoff_channel_labelN"s"   P P P P P P P P'<,,L)/*/*/ .  ! !1!1!3!3I }}\22c99%MM.997(}}\::7(}}\::7 )}}X66 & :    D sB-B33 C?Ccd|dd|dg}ddddd}dd i}t|d d} ||_t|d dd kr||}|d d||d<||} || \} } t | r | jpdnd|d<|d|d<|||_St|d ddkrddl m } m } | |j |d||t|dd | t|dd}||} | | t|dd \} } t | r | jpdnd|d<|d|d<|||_S||}|d dd|d<d|d<d|vr||d<n||d<|djjjd%i|} t| d dpdgd}|t|d!dnd}t t|d"dpd|d<t|d#d|d#<t|d$d|d$<||d<|||_S#||_wxYw)&zMUse the current Hermes Agent transport without mutating conversation history.r rtrKr*NT)rr r incompleterFreasoning_configapi_modecodex_responsestoolsmax_output_tokensrr anthropic_messagesr)build_anthropic_kwargsnormalize_anthropic_response_is_anthropic_oauth_anthropic_base_url)rgrr r r is_oauth preserve_dotsrC)strip_tool_prefixg? temperaturerZrXmax_completion_tokensr r r rrrr r r)rhr _build_api_kwargsr_run_codex_stream_normalize_codex_responserrragent.anthropic_adapterr r rg_anthropic_preserve_dots_anthropic_messages_create_ensure_primary_openai_clientchatrBr )rr user_textr api_messagesrdisabled_reasoningprevious_reasoning codex_kwargsrassistant_messagerr r ant_kwargs api_kwargsr0 rr r s r_agent_text_completionz7_handle_handoff_summary.._agent_text_completionh"s- 8 8 2 2 !    (/$U,>EE5 8%7E "uj"--1BBB$66|DD   $///4> 01..|<<','F'Ft'L'L$!1!$J[%c&7&?&E2ac!d!d!j!j!l!lv'A'A&.'Q'Q|$V&8E " "Suj"--1EEEhhhhhhhh33+))%7$U,A5II"'"@"@"B"B$U,A4HH    77 CC'C'C&-e5JE&R&R((($!1"%J[%c&7&?&E2ac!d!d!j!j!l!lv'A'A&.'Q'Q|$*&8E " "'00>>J NN7D ) ) )(+J} %$(Jy !&*446@ 233+5 <(h566>O6PPUahDdIt44>BF6<6H'&)T222dC i!>OOA&&&     :D 4yy1}}7?EEE...CCC          E ""uuVR  ''i(8(899gm$$**,,UdU3 ( ( (W ( LL ! ! !5!!J1"1"1"1"1"1"f```& J J J J J4C8C8C8C8C8C8C8L` !!!!!!NNNNNN??????&&&&    . . . . . .K$$E$UGT::NN    D @D?Z?Z[i?j?j<)+< ZBB!:+C #wwy11 $ 8$'GGJ$7$7!$ 8$'GGJ$7$7! Z Z Z NNTVX Y Y Y Y Y Y Y Y Z ' - - -2C2N2Ny2Y2Y - $ G GHY Z Z GX# + +#* $ - -$,! 44T::L ( 2244!     W'!$T   "" &&$#    &  FEE //%! J 6@ D5Q5QY:>>&111WYL((44 !44)%#  ;E[RV:W:W_{v666]_ ,,[99%#<#BBB0066   $..00          D # YYV/RSBTBTVV            sV A AA A -B==!C! C!BG G$#G$-X "L-,X- L:7X9L::XAN/.X/ O9OXOAX=QX Q'$X&Q''%X $X2BU7U'&X' U41X3U44X7V9V V VVVVA"X Z &Z2YZ YZY6ZZZcn t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw|ddd}|rd|vsd|vrt|dS|dd }|rd|vsd|vrt|d St}|r ||z |z }n||z } | | n #t$rt|d cYSwxYw| d d |dz }| |ddt|d |t|dS)Nrrrrprrr`rur*zInvalid categoryzInvalid skill pathTrrrr)rJrr)rrJrrrrrrr0rCrGrHrr r)rrr skill_namerurRr skill_files rrrQ#s$fi(((( $$$7CFF########$f##%%++--55c3??J 2 **dj.@.@70111xx B''--//H0SH__(8(87.///#%%J,)J6 + 2'' (:(:(<(<==== 22270111112 OOD4O000Z'J$y/G<<< WT:s:OO P PPs+ AAAA9D==EEcp t|dn4#t$r'}t|t|cYd}~Sd}~wwxYwddl}t|dddrdvsdvrt|dSt}fd| d D}|st|d d S|dj }|j t|t|d |dd S)Nrrrrprrr`c4g|]}|jjk|Sr)rr)rrZr s rr^z(_handle_skill_delete..x#s'VVVQ!(-::U:Uq:U:U:UrrrarT)rJr) rrJrrr rrrrrCrrr r)rrrr rRmatchesrr s @rrrm#s[$f $$$7CFF########$MMMT&\""((**0022::3DDJ 2 **dj.@.@70111#%%JVVVV***:66VVVG 47-s333 !IFM#i..!!! WT4<88 9 99s AAAAc t|ddn4#t$r'}t|t|cYd}~Sd}~wwxYw ddlm}|dz }n)#t $rtjdz dz }YnwxYw| dd|d}|d kr|d z }n|d kr|d z }nt|d S| |ddt|d|t|dS)Nrrrr6rGr;TrrJrHrKrIz"section must be "memory" or "user"rr)rJrr) rrJrrr<r7rDrrArr r)rrrr7rPrrcs rrr#s[$i++++ $$$7CFF########$7777777((**Z7 777)++ )J67 MM$M...9oG(;& F  9$7@AAA d9o888 WTgs6{{KK L LLs+ AAAA A#BBct|ts|St|}|dd|dd|S)aCNormalize message payloads for import refresh prefix checks. The strict dict comparison previously failed when existing messages held integer timestamps while refreshed messages held floating-point timestamps. Strip timing keys before comparison so we can safely treat semantic prefixes as equivalent. rNr_ )rrr)rrZs r%_normalize_message_for_import_refreshr #sT gt $ $gJNN;%%%NN5$ rcHt|tsdS|ddkr|drdS|ddkrA|ds*|ds|d rdSdS) NFrrhrTr[ rrrr)rs r_message_has_cli_tool_metadatar #s gt $ $u{{6k))gkk,.G.G)t{{6f$$'++n*E*E$U`IaIa$elepepqwexex$t 5rct|tst|St|}t|ts|SdD]}||d|S)N)rrrr)rrr r)rrZrs r$_strip_cli_tool_metadata_for_refreshr #ss gt $ $>4W===6w??J j$ ' 'B""sD!!!! rexisting_messagesfresh_messagesct|trt|tsdSt|t|krdStd|DrdStd|DsdSt |D].\}}t |t ||krdS/dS)afReturn True when fresh messages only add CLI tool metadata. Older imports from get_cli_session_messages() persisted assistant/tool rows without tool_calls, tool_call_id, or tool_name. After #1772 the refreshed transcript can have the same length but richer metadata, so re-imports must rebuild the stored sidecar even without a new row. Fc34K|]}t|VdSrXr rs rr[z3_is_cli_tool_metadata_enrichment..#s+ H H )! , , H H H H H Hrc34K|]}t|VdSrXr rs rr[z3_is_cli_tool_metadata_enrichment..#s+IIQ-a00IIIIIIrT)rrcrQrr2r )r r r existing_messages r _is_cli_tool_metadata_enrichmentr #s ' . .jQU6V6Vu ^!4!444u H H6G H H HHHu II.III I Iu!*+$?$? !  !4!455M E% #*  8D-88EOsN++0-//K # U  /1122  U  SYY  *   *  z7Z  e    $  w  d  .  .:N 0! " ,# $"7+   .o5IIJJJ    /   A'& A!AL!3^AL)A%ANAIAIAKAK#AMAJAMFFEF""" yy{{ "&       rc \|rt|tst|dS|d}t|tst|dS|dd} t t |dt t}n;#ttf$r'}t|t |cYd}~Sd}~wwxYw|dt}t|||||d g }|d d |_ t5|t|j<tj|jt#tt$kr2tjd t#tt$k2dddn #1swxYwY|t+|d|d|jizdS)zIImport a session from a JSON export. Creates a new session with a new ID.z"Request body must be a JSON objectrz$JSON must contain a "messages" arrayrzImported sessionr Nrgr)rr rgrrr Fr Tr1)rrrr0rcrrrr\rJrrr rrrrirQrrjrrrr)rrrrr rrgrs rrr$s< Bz$--B7@AAAxx ##H h % %D7BCCC HHW0 1 1E$1$((;L]H^H^2_2_``aa z "$$$7CFF########$ HHWm , ,E88L"--    Axx%((AH ))!"Q\***(mml**  % ( ( ( ((mml**))))))))))))))) FFHHH WTaiikkZs rr[z _mask_secrets..$s/%H%Ha17799n%H%H%H%H%H%Hr••••••)rrrBrr _mask_secrets)obj sensitivemaskedrr>s @rrB rB $s c4  LI F 1 a   #%H%H%H%Hi%H%H%H"H"H ,F1II 4  %a((F1IIF1II Mrc|dSt|tr|St|ttfr|dkSt|tr2|}|dvrdS|dvrdSdS)zBParse Hermes MCP ``enabled`` values without raising on bad config.NTr>r+r.r-r,>r@rrrF)rrrJr[rrr)rrZs r_parse_mcp_enabledrG $s }t% %#u&&z%[[]]((** 3 3 34 4 4 45 4rc ddlm}|}n#t$ricYSwxYwt|tsiSd|DS)a/Return already-known MCP runtime status without starting servers. ``tools.mcp_tool.get_mcp_status()`` only reads the existing MCP registry and configuration; it does not probe or spawn MCP subprocesses. If Hermes Agent is unavailable, fall back to an empty map so the API remains safe. r)get_mcp_statusci|]O}t|t|d,t|d|PSrr] )rr}s rr#z/_mcp_runtime_status_by_name..$sd     eT " " (-yy'8'8  EIIf     r)tools.mcp_toolrI r=rrc)rI statusess r_mcp_runtime_status_by_namerM $s111111!>##   h % %      s  ""c \t|tr|ni}d|i}t|ts|dddddddd|St|d d }|r"t |d nd}d |vr-d |d<d|vrt |d|d<|d |d <nad|vrTd|d<|dd|d<|dg|d<d|vrt |d|d<n d|d<d}d}|dd|d<|dd|d<||d <||d<|ddkrd|d<n|sd|d<n |rd|d<nd|d<|r|dnd|d<|S)z.Return a safe summary of an MCP server config.rrIrr$Finvalid_configN) transportrXconnect_timeoutrrSrx tool_countrT connectedurlhttprP r#r;stdior*rdenvrXrQ rSrxrrr rR )rrrrG r0rrB )rrruntime_statusoutrrS s r_server_summaryrZ $s'1.$'G'GO^^RN 4.C c4  "!&       D!9!9::G9@K^'' 44555eI ||!K   *3y>::C NZE c  "KB//Iggfb))F C<<&s5z22CJ$K WWY,,C N WW%6;;CC NCM ;9$$(H %"H % H $H 7EO**73334C  Jrcbt|ts|dnt|}t|}t jdd|tj}t||kr0|dtd|dz  dz}|S) z@Return redacted, bounded MCP text safe for WebUI inventory rows.Nr*zAuthorization:\s*Bearer\s+\S+z[REDACTED CREDENTIAL])flagsrrr) rrrrrrd IrQr]r%)rr"s r_mcp_safe_display_textr^ %s eS ! !4mU    % % ' 'E F35Le[][_ ` ` `E 5zzE)Auqy)))*1133e; Lrcvt|tsdS|d}t|trdd|D}t|t r|r|SdD]6}t||tr ||r|cS7d|vrdSdS)zDReturn a compact, non-sensitive display type for a JSON schema node.r2rNrc38K|]}|t|VdSrXrrs rr[z#_mcp_schema_type...%s-00!a0s1vv000000r)anyOfoneOfallOfenum)rrr0rcrpr)schematyp composites r_mcp_schema_typerh (%s fd # #y **V  C#t1hh00s00000#s 0 fjj++T 2 2 vi7H     v 9rr ct|tsgS|d}t|tsgS|d}t|trt |n t }g}|D]\}}t ||krnt|ts0t|tr|ni}|dd}t|tsd}t|d}| |t|||v|d|S)aVSummarize an MCP input schema without exposing raw defaults/examples. The WebUI only needs searchable/displayable argument hints. Returning raw JSON Schema can overexpose server-provided defaults, examples, enums, or vendor extensions, so this strips each parameter down to name/type/required and a redacted description. propertiesrequiredrr*r)rrNrk r) rrr0rcrrBrQrr^ rrh ) re r"rj rk required_namesrY rproprs r_mcp_schema_summaryro 9%s^ fd # # L))J j$ ' ' zz*%%H&04&@&@KS]]]ceeN C &&((  d s88u   E$$$  !$--5tt2xx r**$$$ D%d#666 $T**.       Jrc t|tsiSdD]h}||}t|tr<|dkr2t|dtr |dcS|cSiiS)N) parameters inputSchema input_schemare re rq r)r[ rrs r_mcp_tool_schema_from_payloadrt \%s dD ! ! F  eT " " h:eii .E.Et#L#L\****LLL  Irc t|tr|ni}t|trd|i}nt|tsi}t|dp|pd}|dpd}t|tst|}t |d}|t|dpd|t |dt |d|dpd t t|d S) z4Return a safe global inventory row for one MCP tool.rr*rihrrSrrxr2)rr^rrSrrxschema_summary)rrrr0r^ rro rt )rr[ server_summaryrrs r_mcp_tool_summaryrx h%sG'1.$'G'GO^^RN$~ d # #DHHV$$2233I((=))/RK k3 ' ''+&& (C@@@Kn((006B77"~))(3344**95566 $$X..;)-.KD.Q.QRR  rc:g}t|ts|S|D]\}}t|ts|d}t|ts|d}t|tsp|t |dt |i}t |D]:\}}|d|} t| ||} | dr|| ;|S)zCRead detailed MCP tool payloads from runtime status when available.r tool_schemasrr) rrrBr0rcrr2rx r) runtime_by_nameserver_summariesr server_nameruntime raw_toolsrw rr[ fallback_namery s r_mcp_tools_from_runtime_statusr %s0 E ot , , / 5 5 7 7 & & W'4((  KK(( )T** 4 N33I)T**  )--c+.>.>[IYIY@Z[[$Y// & &KE4*44U44M' t^LLGv & W%%%  & Lrc  ddlm}n#t$rgcYSwxYwg} |}n#t$rgcYSwxYw|D]} ||}n#t$rY%wxYwt |t r|dsT|tdd}| |pi}| ||dddd}| t||||S) zERead already-registered MCP tool schemas without probing MCP servers.r)registryzmcp-NTFr)rrrSrx) tools.registryr r=get_all_tool_namesget_toolset_for_toolrrrrQ get_schemar0rrx ) r| r r r9rtoolsetr} re rw s r_mcp_tools_from_registryr %sx+++++++   E++--  KK  33I>>GG    H '3'' w/A/A&/I/I  c&kkll+ $$Y//52)--k" < <     &y&.IIJJJJ Ls- 3 AA A  A-,A-c t}|di}t|tsi}t fd|D}t |}d}|st|}|rdnd}|dd| D}t||t||d |d S) zCList known MCP tools from already-available runtime inventory only. mcp_serversc i|]Q\}}t|tt||t|RSr)rrZ r0rrscfgr~ s rr#z*_handle_mcp_tools_list..%sY D$ D ?3t99dGKKD 4J4JKKrmcp_runtime_status tool_registrynonecZ|dd|ddfS)Nr^r*rr)rs rrz(_handle_mcp_tools_list..%s'" 5 5swwvr7J7JKrrcrg|]4}|d|d,|d5S)rrSrr)rry s rr^z*_handle_mcp_tools_list..%sR# ;;y ! !*1++h*?*?ralready_known_runtime_only)r rSrinventory_scopeunavailable_servers) rr0rrrM rBr r rrrrQ)rrserversr| r rr r~ s @rrr%s% ,,CggmR((G gt $ $)++G!--// +74D E EE !F 6()9::$)5v JJKKJLLL'7'>'>'@'@ WU72   rct}|di}t|tsi}t fd|D}t ||dddS)zDList configured MCP servers with safe, read-only runtime visibility.r c xg|]6\}}t||t|7Sr)rZ r0rr s rr^z,_handle_mcp_servers_list..%sK D$ dGKKD $:$:;;rFT)r toggle_supportedreload_required)rr0rrrM rBr)rrr rr~ s @rrr%s ,,CggmR((G gt $ $)++G!--//F W!  rczddlm}||}|st|dSt}|di}t |t si}||vrt|d|ddS||=||d<tt|tt|d|d S) zDelete an MCP server by name.runquoter<r z MCP server 'z ' not foundrT)rJdeleted) r}r rrr0rrr9 r: r@r)rrr rr s r_handle_mcp_server_deleter %s$$$$$$ 74==D 07./// ,,CggmR((G gt $ $ 77<4<<rs rr r %s i & &j4.H.HG!!1 a   !':":":H}}HQK!=!=}%a[  4  Q(]]z(1+t7T7T]-a!==GAJJGAJJ Nrcddlm}||}|st|dSi}t}|di}t |t si}||i}|dr`|d|d<|dr-t|d|di|d<n|dr|d|d<|dr/t |dtr|dn|dg|d<|d r-t|d |d i|d <nt|d S|d 1 t|d |d <n#ttf$rYnwxYw|||<||d<tt|tt!|d t#||dS)zAdd or update an MCP server.rr r<r rT r#r;rdrW zurl or command is requiredrXNT)rJr^)r}r rrr0rrrr rcrJrJr\r9 r: r@rrZ )rrrr server_cfgrr existing_cfgs r_handle_mcp_server_updater &s\$$$$$$ 74==D 07.///J ,,CggmR((G gt $ $;;tR((L xx : K--// 5 88I   k$8i,JZJZ[dfhJiJi$j$jJy ! )  : $Y 5 5 7 7 9 88F   d1;DL$1O1O!cfVZ[aVbUcJv  88E?? _ 4T%[,BRBRSXZ\B]B] ^ ^Ju 78999 xx & $'Y$8$8Jy ! !I&    D GDM C +--s333OOO WT_T:-N-NOO P PPs G$$G87G8rXr)r'N)r=)rd)r)Fr(__doc__rrrr7 rloggingr?rhrrr rr rr_r r`pathlibr contextlibrr}rapi.agent_sessionsrrr r api.compression_anchorr getLoggerrOrrr'r(r) TimeoutErrorrIr r rrr[__annotations__Lockr r rN rE _CRON_OUTPUT_CONTENT_LIMITr$rrobjectrrrRr#rcr9r8r:rKr<r&rr4rCrKrTrbrkrtrtuplerrrr rrrrr rrrrJr!r*r0r4rr:r<rBrTr^rzrrXrrrRLockrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrapi.agent_healthrapi.request_diagnosticsrapi.system_healthrrrrr$rrrr/r4r<rDrPrTr[rbrfrmrsruryrrrrrrrrrrrrrrrrrrrrrrrrrrrprrrrr r r r r rrrrrrrrrrrrrrrrrr api.uploadrrr r|r!r"r#r api.providersr$r%r&r'api.onboardingr(r)r*r+rr,r-r.rvr/_submit_pending_rawr0r1r2r3r4r5r6r7r8r9r:rDrIrjrMrQrZr\rrrerrfrgrrhrrrrrrrrrrrrrrrrr frozensetrrrrrrrr\rcrnrrrrrrrrrrr=rrrrrrrr|rrrrrr}r~rrrr4rrSr[rirrrrrrrrrrrrr/rrrrrorwrxrzr}rryrzrrr{rrrrrrrrrrrrrrrrrrrr5 rF rK rP rrrrsrtr r r r r r r rurrrr r r r r# rrrr9 r: r@rB rG rM rZ r^ rh ro rt rx r r rrr r r r rrrr s2&      !!!!!! ?>>>>>  8 $ $ (*De$)))#Y^%%,.$sDy/... .  0 0&-#!!LL:KLLL  88!4V #4 $29>#3#3 /1AB&W&|4413S$u+-.333,in..(*% &()(((((-D----hDhhhh,$4  4: #PT*    +$+4:++++4$34RRdRcDjRDRRRRj+S+d+uTD[$QU+=U7V++++\3DTcdP#$1s1111MdMMMM666,DdO,,,,^1s1111 -C---- %S%U4;%7%%%% 1c 1c 1 1 1 19Sc#WZ04D"<T <<<< s3x    C$J,D,,,,*\\\,"B B B J0 0 0 0 f   !,, *G3@BDsCx%t *<<=BBB))/++ s    ?S?U38_???? &sCx &TD[ & & & &MsCxM4MDMMMM ############################################################################H                        877777666666999999 c d    d$ddddND4c3:o(>*#*CRVJ[_"S0#D####L#>B   edl d    cD444$ %4 % % % %#*. 5t 5c#hC6H0I 5 5 5 5   #h !X        RRSRTRRRRtd 35cDj3I3Y]bf4"&a,a,Dja,$Ja, 3d D !a,a,a,a,H$d $uS$Y?O$$$$ #. -S - - - -cDj$(!! :!d !Dj! 3:sTz !" !!!!0:::::: S T     ;D ; ; ; ;##3#3####L ,4 ,C , , , , T d    S& & #C& H& &&&&R+T++++"K#K$KKKK  T  e     $4(CZ  tDz C ^bcg^h    ;D;D;T;;;;|545C$J5555 T tDz    F"ONNNNNNNNN cbbbbbbbbbbb                                   ..**O,,33&&K00..//33H IN  E#%%  ;=4T%+%6 67<<<       @#@%+@$@@@@Ctd{3SW4 =S =t =C =D = = = =>>t>>>>>@ ((((11.. ''OOO (5!(*  >%-3  &A(5/  A!02  1C=/mZ  F%01  F%01:!+,  1^7/T1  5+.  %r1#h2  }gg Td s@$R )(( CcCCCC5>T5>5>5>5>rwHYdYYYY#*& %D %c %cDj % % % % sTz    %I&&1g&&& JdCo 6 J J J J54<C$J2DT$Z4> > > > > B iiiii^D%$(tBJJdTkJU4:=NJJJJZB "c":;;   36   #    ------`     "   9     z4zzzz@ sDssssl) T     d    &  "             fee0,*P*P*PZ555BD   5558555"555$)))   F8555pC33.cceCHoPT>T:tx777t737S7Y\7filpfp7777tkckckc\!V!V!VH555$===&9*9*9*xDDD()))E(E(E(PDDD(V<V<V%%s%3%%%%%(>>>* 0 0 0$?$?$?NF8888.5}5}5}pXaXaXav C Z_bfZf ko    D $" " "  "  "  " "  " " " " R" fff f  f  ffffffRuuupGGGGVS$ > > K K KF . . . . . .0000000.000,0004000*000D000:$7$7$7N777 7 7 7 ===8868686v : : : ........(44446(((V7f7f7ft###&_I_I_ID ###T   4Z $J     :dtd{< 4  $     &$QU+Z^,#(?c?D?T????D S S# S ScDj SRUX\R\ Shl Sy} S S S Sj j j Z QQQ8:::&MMM. 6 f     Ft&VdW[,tX\$lll^WWW>[ZZZZZZZZZZZ    "T#t)_*0000fCC"13   # tDz    F   .,<<$555&+""Q"Q"Q"Q"Qs% 5XAY Y9[[+*[+