eiuUdZddlZddlZddlZddlZddlZddlZddlmZddl m Z ddl m Z m Z mZmZmZddlmZ ddlZn #e$rdZYnwxYwejeZddd d d Zd d dddddZdZdZdZddddddddddddddddZdZde de!fdZ"dee!fdZ# dtde dee!de!fdZ$de de%fd Z&de de%fd!Z'de de%fd"Z(d#d$gZ)d$Z*d%Z+d&d'gZ,d(Z-da.ee e/d)<de fd*Z0d+Z1d,Z2de fd-Z3d.e de%fd/Z4de fd0Z5d1e dzde%fd2Z6d1e dzde%fd3Z7d1e dzde%fd4Z8d1e dzde9e fd5Z:dud6e d1e d7e;fd8Zdee e e ffd<Z?dee fd=Z@d>e e e fde%fd?ZAd@dAdBe dCe%de e e ffdDZBd>e e e fdee fdEZCddFdGe dBe dHe!dIee9ddf dJZDdtd>ee e e fdee fdKZEdLe d>ee e e fdee fdMZFdee fdNZGdee fdOZHdPZIdQZJdRZKdSZLe dTz ZMdeNfdUZOdee e e ffdVZPdee e e ffdWZQde de%fdXZRdvde dYe%de fdZZSd[e de fd\ZTd]ee dee fd^ZUd_e de e e ffd`ZVdae dee e e ffdbZWdddcdde dee!dfeeXde fdgZYdhe e e fdee e e ffdiZZdje de fdkZ[ dtdlee d1e dzdeee ee ffdmZ\ dwde dlee d]eee dnee!doee e e fdpee dqe%dYe%dee!d1e dzdre%de e e ffdsZ]dS)xuAnthropic Messages API adapter for Hermes Agent. Translates between Hermes's internal OpenAI-style message format and Anthropic's Messages API. Follows the same pattern as the codex_responses adapter — all provider-specific logic is isolated here. Auth supports: - Regular API keys (sk-ant-api*) → x-api-key header - OAuth setup-tokens (sk-ant-oat*) → Bearer auth + beta header - Claude Code credentials (~/.claude.json or ~/.claude/.credentials.json) → Bearer auth N)Path)get_hermes_home)AnyDictListOptionalTuple)normalize_proxy_env_varsi}i>@i)xhighhighmediumlowmaxr r rr)rr r rrminimal)4-74.7)z4-6z4.6rriii i)zclaude-opus-4-7zclaude-opus-4-6zclaude-sonnet-4-6zclaude-opus-4-5zclaude-sonnet-4-5zclaude-haiku-4-5z claude-opus-4zclaude-sonnet-4zclaude-3-7-sonnetzclaude-3-5-sonnetzclaude-3-5-haikuz claude-3-opuszclaude-3-sonnetzclaude-3-haikuminimaxmodelreturnc|dd}d}t}tD]-\}}||vr$t |t |kr|}|}.|S)aLook up the max output token limit for an Anthropic model. Uses substring matching against _ANTHROPIC_OUTPUT_LIMITS so date-stamped model IDs (claude-sonnet-4-5-20250929) and variant suffixes (:1m, :fast) resolve correctly. Longest-prefix match wins to avoid e.g. "claude-3-5" matching before "claude-3-5-sonnet". Normalizes dots to hyphens so that model names like ``anthropic/claude-opus-4.6`` match the ``claude-opus-4-6`` table key. .-)lowerreplace_ANTHROPIC_DEFAULT_OUTPUT_LIMIT_ANTHROPIC_OUTPUT_LIMITSitemslen)rmbest_keybest_valkeyvals 9/home/div/.hermes/hermes-agent/agent/anthropic_adapter.py_get_anthropic_max_outputr(dsy  c3''AH.H,2244S !88C3x==00HH Oct|trdSt|ttfsdS ddl}||sdSn#t $rYdSwxYwt|}|dkr|ndS)aReturn ``value`` floored to a positive int, or ``None`` if it is not a finite positive number. Ported from openclaw/openclaw#66664. Anthropic's Messages API rejects ``max_tokens`` values that are 0, negative, non-integer, or non-finite with HTTP 400. Python's ``or`` idiom (``max_tokens or fallback``) correctly catches ``0`` but lets negative ints and fractional floats (``-1``, ``0.5``) through to the API, producing a user-visible failure instead of a local error. Nr) isinstanceboolintfloatmathisfinite Exception)valuer/flooreds r'&_resolve_positive_anthropic_max_tokensr4ys%t ec5\ * *t }}U## 4  tt%jjGkk77t+sA A! A!context_lengthct|}||St|}|dkr|Std|d|d)uResolve the ``max_tokens`` budget for an Anthropic Messages call. Prefers ``requested`` when it is a positive finite number; otherwise falls back to the model's output ceiling. Raises ``ValueError`` if no positive budget can be resolved (should not happen with current model table defaults, but guards against a future regression where ``_get_anthropic_max_output`` could return ``0``). Separately, callers apply a context-window clamp — this resolver does not, to keep the positive-value contract independent of endpoint specifics. Ported from openclaw/openclaw#66664 (resolveAnthropicMessagesMaxTokens). NrzJAnthropic Messages adapter requires a positive max_tokens value for model z; got z and no model default resolved.)r4r( ValueError) requestedrr5resolvedfallbacks r'&_resolve_anthropic_messages_max_tokensr;ss&6i@@H(//H!||  M M M ) M M M  r)cDtfdtDS)zBReturn True for Claude 4.6+ models that support adaptive thinking.c3 K|]}|vV dSN.0vrs r' z._supports_adaptive_thinking..s'AAaqEzAAAAAAr))any_ADAPTIVE_THINKING_SUBSTRINGSrs`r'_supports_adaptive_thinkingrGs' AAAA#@AAA A AAr)cDtfdtDS)uJReturn True for models that accept the 'xhigh' adaptive effort level. Opus 4.7 introduced xhigh as a distinct level between high and max. Pre-4.7 adaptive models (Opus/Sonnet 4.6) only accept low/medium/high/max and reject xhigh with an HTTP 400. Callers should downgrade xhigh→max when this returns False. c3 K|]}|vV dSr>r?r@s r'rCz)_supports_xhigh_effort..s'<r?r@s r'rCz+_forbids_sampling_params..s'BBaqEzBBBBBBr))rD_NO_SAMPLING_PARAMS_SUBSTRINGSrFs`r'_forbids_sampling_paramsrOs) BBBB#ABBB B BBr)zinterleaved-thinking-2025-05-14z&fine-grained-tool-streaming-2025-05-14zfast-mode-2026-02-01zclaude-code-20250219zoauth-2025-04-20z2.1.74_claude_code_version_cachecdddl}dD]} ||dgddd}|jdkrj|jrQ|jd}|r|dr|cS#t$rYwxYwtS)a2Detect the installed Claude Code version, fall back to a static constant. Anthropic's OAuth infrastructure validates the user-agent version and may reject requests with a version that's too old. Detecting dynamically means users who keep Claude Code updated never hit stale-version 400s. rN)claude claude-codez --versionTcapture_outputtexttimeout) subprocessrun returncodestdoutstripsplitisdigitr1_CLAUDE_CODE_VERSION_FALLBACK)_spcmdresultversions r'_detect_claude_code_versionres(   WWk"#$F A%%&-*=*=*?*?% ---//5577:#wqz1133#"NNN    D  ((sB B B('B(z9You are Claude Code, Anthropic's official CLI for Claude.mcp_c:ttatS)zKLazily detect the installed Claude Code version when OAuth headers need it.)rPrer?r)r'_get_claude_code_versionrh s")%@%B%B" %%r)r%c|sdS|drdS|drdS|drdS|drdSdS)uCheck if the key is an Anthropic OAuth/setup token. Positively identifies Anthropic OAuth tokens by their key format: - ``sk-ant-`` prefix (but NOT ``sk-ant-api``) → setup tokens, managed keys - ``eyJ`` prefix → JWTs from the Anthropic OAuth flow - ``cc-`` prefix → Claude Code OAuth access tokens (from CLAUDE_CODE_OAUTH_TOKEN) Non-Anthropic keys (MiniMax, Alibaba, etc.) don't match any pattern and correctly return False. Fz sk-ant-apizsk-ant-TeyJzcc- startswith)r%s r'_is_oauth_tokenrmsz u ~~l##u ~~i  t ~~et ~~et 5r)cL|sdSt|S)zNormalize SDK/base transport URL values to a plain string for inspection. Some client objects expose ``base_url`` as an ``httpx.URL`` instead of a raw string. Provider/auth detection should accept either shape. r)strr]base_urls r'_normalize_base_url_textrr0s) r x==    r)rqct|}|sdS|d}d|vrdSdS)a#Return True for non-Anthropic endpoints using the Anthropic Messages API. Third-party proxies (Azure AI Foundry, AWS Bedrock, self-hosted) authenticate with their own API keys via x-api-key, not Anthropic OAuth tokens. OAuth detection should be skipped for these endpoints. F/z anthropic.comT)rrrstriprrq normalizeds r'"_is_third_party_anthropic_endpointrx;sR*(33J u""3''--//J*$$u 4r)ct|}|sdS|ddS)zEReturn True for Kimi's /coding endpoint that requires claude-code UA.Frtzhttps://api.kimi.com/codingrrrurrlrvs r'_is_kimi_coding_endpointr{KsK)(33J u   S ! ! ' ' ) ) 4 45R S SSr)ct|}|sdS|d}|dS)a@Return True for Anthropic-compatible providers that require Bearer auth. Some third-party /anthropic endpoints implement Anthropic's Messages API but require Authorization: Bearer *** of Anthropic's native x-api-key header. MiniMax's global and China Anthropic-compatible endpoints follow this pattern. Frt)z https://api.minimax.io/anthropicz"https://api.minimaxi.com/anthropicrzrvs r'_requires_bearer_authr}SsR*(33J u""3''--//J  !k l llr)cPt|rdtDStS)ufReturn the beta headers that are safe for the configured endpoint. MiniMax's Anthropic-compatible endpoints (Bearer-auth) reject requests that include Anthropic's ``fine-grained-tool-streaming`` beta — every tool-use message triggers a connection error. Strip that beta for Bearer-auth endpoints while keeping all other betas intact. c(g|]}|tk |Sr?)_TOOL_STREAMING_BETArAbs r' z._common_betas_for_base_url..js#FFFaA1E,E,E,E,E,Er))r} _COMMON_BETASrps r'_common_betas_for_base_urlras/X&&GFF=FFFF r)api_keyrXcttdtddlm}t |}t |ttfr|dkr|nd}d|t|di}|rAd | v}|r$d |vr | d |d <d d i|d<n||d <t|}t|r(||d<ddi|rdd |ini|d<nt|r"||d<|rdd |i|d<nt|r"||d<|rdd |i|d<nlt!|r<|t"z} ||d<d | dt%ddd|d<n!||d<|rdd |i|d<tjdi|S)aCreate an Anthropic client, auto-detecting setup-tokens vs API keys. If *timeout* is provided it overrides the default 900s read timeout. The connect timeout stays at 10s. Callers pass this from the per-provider / per-model ``request_timeout_seconds`` config so Anthropic-native and Anthropic-compatible providers respect the same knob as OpenAI-wire providers. Returns an anthropic.Anthropic instance. NzpThe 'anthropic' package is required for the Anthropic provider. Install it with: pip install 'anthropic>=0.39.0'rTimeout @rX$@rXconnectz azure.comz api-versionrtrqz 2025-04-15 default_queryr User-Agentzclaude-code/0.1.0anthropic-beta,default_headers auth_token claude-cli/ (external, cli)cli)rz user-agentzx-appr?)_anthropic_sdk ImportErrorr httpxrrrr+r-r.rrurr{joinr}rxrm_OAUTH_ONLY_BETASrh Anthropic) rrqrXrnormalized_base_url _read_timeoutkwargs_is_azure_endpoint common_betas all_betass r'build_anthropic_clientrns ?   28<< *7S%L A A]gPQkkGGX]M775#7#7FFFF 5 ),?,E,E,G,GG  5-7J"J"J!4!;!;C!@!@F: '4l&CF? # #!4F: -.ABBL))*S$y -% >JR!388L#9#9::PR%  !! 2 3 3!S '|  S)9388L;Q;Q(RF$ % +H 5 5S $y  S)9388L;Q;Q(RF$ %  ! !S!#44 &|!hhy11T(@(B(BTTT% %  !!$y  S)9388L;Q;Q(RF$ %  # - -f - --r)regioncttdttdstdddlm}tj||dd  S) uhCreate an AnthropicBedrock client for Bedrock Claude models. Uses the Anthropic SDK's native Bedrock adapter, which provides full Claude feature parity: prompt caching, thinking budgets, adaptive thinking, fast mode — features not available via the Converse API. Auth uses the boto3 default credential chain (IAM roles, SSO, env vars). NznThe 'anthropic' package is required for the Bedrock provider. Install it with: pip install 'anthropic>=0.39.0'AnthropicBedrockzWanthropic.AnthropicBedrock not available. Upgrade with: pip install 'anthropic>=0.39.0'rrrrr) aws_regionrX)rrhasattrrrr)rrs r'build_anthropic_bedrock_clientrs ?    >#5 6 6  <     *t444   r)cddl}ddl}|jdkrdS |jgdddd}n2#t|jf$rt dYdSwxYw|jdkrt d dS|j }|sdS tj |}n0#tj $rt d YdSwxYw|d }|r\t|t rG|d d }|r/||dd |ddddSdS)aRead Claude Code OAuth credentials from the macOS Keychain. Claude Code >=2.1.114 stores credentials in the macOS Keychain under the service name "Claude Code-credentials" rather than (or in addition to) the JSON file at ~/.claude/.credentials.json. The password field contains a JSON string with the same claudeAiOauth structure as the JSON file. Returns dict with {accessToken, refreshToken?, expiresAt?} or None. rNDarwin)securityzfind-generic-passwordz-szClaude Code-credentialsz-wTrTrUz5Keychain: security command not available or timed outz6Keychain: no entry found for 'Claude Code-credentials'z/Keychain: credentials payload is not valid JSON claudeAiOauth accessTokenr refreshToken expiresAtmacos_keychainrrrsource)platformrYsystemrZOSErrorTimeoutExpiredloggerdebugr[r\r]jsonloadsJSONDecodeErrorgetr+dict)rrYrcrawdata oauth_data access_tokens r'+_read_claude_code_credentials_from_keychainrsOOOxH$$t          Z. / LMMMttA MNNNt -    C tz#   FGGGtt/**JjT22!~~mR88  + *~r B B'^^K;;*   4s!6+A%$A%-C)C/.C/cFt}|r|Stjdz dz }|r t j|d}|d}|r\t|trG|dd}|r/||dd|d d d d SnD#tj ttf$r%}td |Yd}~nd}~wwxYwdS)u4Read refreshable Claude Code OAuth credentials. Checks two sources in order: 1. macOS Keychain (Darwin only) — "Claude Code-credentials" entry 2. ~/.claude/.credentials.json file This intentionally excludes ~/.claude.json primaryApiKey. Opencode's subscription flow is OAuth/setup-token based with refreshable credentials, and native direct Anthropic provider usage should follow that path rather than auto-detecting Claude's first-party managed key. Returns dict with {accessToken, refreshToken?, expiresAt?} or None. .claude.credentials.jsonutf-8encodingrrrrrrclaude_code_credentials_filerz.Failed to read ~/.claude/.credentials.json: %sN)rrhomeexistsrr read_textrr+rrrIOErrorrr)kc_creds cred_pathrrres r'read_claude_code_credentialsrsF;<D+9D D+D# #D+&D# 'D++ E5EEc~|dd}|stddS t|d}t |d|d|d td |dS#t $r&}td |Yd}~dSd}~wwxYw) z6Attempt to refresh an expired Claude Code OAuth token.rru-No refresh token available — cannot refreshNFrrrrz.Successfully refreshed Claude Code OAuth tokenz'Failed to refresh Claude Code token: %s)rrrr_write_claude_code_credentialsr1)rr refreshedrs r'_refresh_oauth_tokenr sIInb11M  DEEEt 0OOO & n % o & o &    EFFF((  >BBBtttttsAB B<B77B<)scopesrrr ctjdz dz } i}|r(tj|d}|||d}|||d<nd|vrd|dvr|dd|d<||d<|jd d |d }| tj |d d| || ddS#ttf$r&}td|Yd}~dSd}~wwxYw)aqWrite refreshed credentials back to ~/.claude/.credentials.json. The optional *scopes* list (e.g. ``["user:inference", "user:profile", ...]``) is persisted so that Claude Code's own auth check recognises the credential as valid. Claude Code >=2.1.81 gates on the presence of ``"user:inference"`` in the stored scopes before it will use the token. rrrr)rrrNr rT)parentsexist_okz.tmp)indentiz)Failed to write refreshed credentials: %s)rrrrrrparentmkdir with_suffix write_textrrchmodrrrr) rrrr rexistingr _tmp_credrs r'r r s i'*==IE      Iz)"5"5w"5"G"GHHH()&& &  #)Jx  ( (X/9R-R-R$,O#U>Ut 99^ $ $t:5AAHH )) g    4r)ct}tjdd}|rt ||}|r|S|Stjdd}|rt ||}|r|S|St |}|r|Stjdd}|r|SdS)uResolve an Anthropic token from all available sources. Priority: 1. ANTHROPIC_TOKEN env var (OAuth/setup token saved by Hermes) 2. CLAUDE_CODE_OAUTH_TOKEN env var 3. Claude Code credentials (~/.claude.json or ~/.claude/.credentials.json) — with automatic refresh if expired and a refresh token is available 4. ANTHROPIC_API_KEY env var (regular API key, or legacy fallback) Returns the token string or None. ANTHROPIC_TOKENrCLAUDE_CODE_OAUTH_TOKENANTHROPIC_API_KEYN)rosgetenvr]rr)rtoken preferredcc_tokenresolved_claude_tokenrs r'resolve_anthropic_tokenr(s ) * *E I' , , 2 2 4 4E 9%GG    y2B77==??H9(EJJ   HNN%$$i+R006688G 4r)clddl}ddl}|d}|std |j|dgn#t t f$rYdSwxYwt}|rt|r|dSdD]/}tj |d }|r|cS0dS) aRun 'claude setup-token' interactively and return the resulting token. Checks multiple sources after the subprocess completes: 1. Claude Code credential files (may be written by the subprocess) 2. CLAUDE_CODE_OAUTH_TOKEN / ANTHROPIC_TOKEN env vars Returns the token string, or None if no credentials were obtained. Raises FileNotFoundError if the 'claude' CLI is not installed. rNrRz\The 'claude' CLI is not installed. Install it with: npm install -g @anthropic-ai/claude-codez setup-tokenr)r rr) shutilrYwhichFileNotFoundErrorrZKeyboardInterruptEOFErrorrrr"r#r])r*rY claude_pathrenv_varr&s r'run_oauth_setup_tokenr13s MMM,,x((K   H     ]34444 x (tt ) * *E $+E22$]##Bi$$**,,  JJJ  4sAAArrz1https://console.anthropic.com/oauth/code/callbackz.org:create_api_key user:profile user:inferencez.anthropic_oauth.jsoncddl}ddl}ddl}||dd}||| d}||fS)z6Generate PKCE code_verifier and code_challenge (S256).rN =) base64hashlibsecretsurlsafe_b64encode token_bytesrursha256rdigest)r5r6r7verifier challenges r'_generate_pkcer>fsMMMNNNNNN''(;(;B(?(?@@GGMMTTVVH((x(())0022 fTll6688 Y r)c ddl}ddl}t\}}dtdtt |d|d}ddlm}d||}ttd ttd td td td ttd|t | |tdn#t$rYnwxYwttdt td }n#ttf$rYdSwxYw|stddS|d}|d} t!|dkr|dnd} ddl} t%jdt| | t|d} | jt.| ddt1ddd} | j| d5}t%j|}dddn #1swxYwYn*#t$r}td |Yd}~dSd}~wwxYw|d!d}|d"d}|d#d$}|std%dSt=|d&z|d&zz}|||d'S)(z>Run Hermes-native OAuth PKCE flow and return credential state.rNtruecodeS256)rAr response_type redirect_uriscopecode_challengecode_challenge_methodstate)rz"https://claude.ai/oauth/authorize?z7Authorize Hermes with your Claude Pro/Max subscription.uc╭─ Claude Pro/Max Authorization ────────────────────╮u9│ │u9│ Open this link in your browser: │u╰───────────────────────────────────────────────────╯z z (Browser opened automatically)z5After authorizing, you'll see a code. Paste it below.zAuthorization code: zNo code entered.#rauthorization_code)rrrArHrD code_verifierrrrrrrrzToken exchange failed: rrrrzNo access token in response.rr)r webbrowserr>_OAUTH_CLIENT_ID_OAUTH_REDIRECT_URI _OAUTH_SCOPESrrprintopenr1inputr]r-r.r^r!rrrrrr_OAUTH_TOKEN_URLrhrrrrrr-)rrNr<r=paramsrauth_url auth_codesplitsrArHr exchange_datarrrcrrrrrs r'run_hermes_oauth_login_purer[ssKKK(**Hi%+#!'  F'&&&&&GIIf4E4EGGH GGG CDDD GGG oppp EFFF EFFF lmmm GGG /x// GGG !!! 01111       GGG ABBB GGG0117799 x (tt   !!!t __S ! !F !9DVqF1IIbE .)/% $ $    688 n$$  2X,D,F,FXXX%  ^ # #C # 4 4 6Z 2 2 4 455F 6 6 6 6 6 6 6 6 6 6 6 6 6 6 6  +++,,,ttttt::nb11LJJ33ML$//J  ,---t d*++zD/@AM$&&  sa$D DD?!E!!E65E6B J%9J J%JJ% J!J%% K /KK cLtr tjtd}|dr|SnD#tjttf$r%}t d|Yd}~nd}~wwxYwdS)zKRead Hermes-managed OAuth credentials from ~/.hermes/.anthropic_oauth.json.rrrz+Failed to read Hermes OAuth credentials: %sN) _HERMES_OAUTH_FILErrrrrrrrrr)rrs r'read_hermes_oauth_credentialsr^s  ""K K:0::G:LLMMDxx &&   $gw7 K K K LLF J J J J J J J J K 4sAA B!<BB!c|tfddDrdSdrdSdS)atDetect AWS Bedrock model IDs that use dots as namespace separators. Bedrock model IDs come in two forms: - Bare: ``anthropic.claude-opus-4-7`` - Regional (inference profiles): ``us.anthropic.claude-sonnet-4-5-v1:0`` In both cases the dots separate namespace components, not version numbers, and must be preserved verbatim for the Bedrock API. c3BK|]}|VdSr>rk)rAprs r'rCz'_is_bedrock_model_id..s1 P P15  A   P P P P P Pr))zglobal.zus.zeu.zap.zjp.Tz anthropic.F)rrDrl)rrs @r'_is_bedrock_model_idrbs] KKMME P P P P(O P P PPPt  %%t 5r) preserve_dotsc|}|dr|tdd}|s't|r|S|dd}|S)uNormalize a model name for the Anthropic API. - Strips 'anthropic/' prefix (OpenRouter format, case-insensitive) - Converts dots to hyphens in version numbers (OpenRouter uses dots, Anthropic uses hyphens: claude-opus-4.6 → claude-opus-4-6), unless preserve_dots is True (e.g. for Alibaba/DashScope: qwen3.5-plus). - Preserves Bedrock model IDs (``anthropic.claude-opus-4-7``) and regional inference profiles (``us.anthropic.claude-*``) whose dots are namespace separators, not version separators. z anthropic/Nrr)rrlr!rbr)rrcrs r'normalize_model_nameresx KKMME  %%*c,''(() (  & & L c3'' Lr)tool_idcHddl}|sdS|dd|}|pdS)zSanitize a tool call ID for the Anthropic API. Anthropic requires IDs matching [a-zA-Z0-9_-]. Replace invalid characters with underscores and ensure non-empty. rNtool_0z[^a-zA-Z0-9_-]_)resub)rfrj sanitizeds r'_sanitize_tool_idrms; III x(#w77I   r)toolsc |sgSg}|D]p}|di}||dd|dd|ddiddq|S) z4Convert OpenAI tool definitions to Anthropic format.functionnamer description parametersobject)type properties)rqrr input_schema)rappend)rnrctfns r'convert_tools_to_anthropicr{!s  F    UU:r " " FF62&&66-44FF<(RT1U1UVV      Mr)urlct|pd}|sdddS|dr|d\}}}d}|drZ|t dddd d }|d r|}d ||d Sd|dS)zGConvert an OpenAI-style image URL/data URL into Anthropic image source.rr|)rur|zdata:rz image/jpegN;rJrzimage/r5)ru media_typer)ror]rl partitionr!r^)r|headerrirr mime_parts r'_image_source_from_openai_urlr0s ciR..   C *b))) ~~g  --,,4!   W % % 's7||}}-33C;;A>DDFFI##H-- '& $   # & &&r)partcr|dSt|trd|dSt|tsdt|dS|d}|dkrd|ddd}nx|dvre|di}t|tr|d dnt|pd}d t |d }nt|}t|d trd |vrt|d |d <|S) z?Convert a single OpenAI-style content part to Anthropic format.NrWrurWru input_textr> image_url input_imagerr|image)rur cache_control)r+rorrr)rptypeblock image_valuer|s r'"_convert_content_part_to_anthropicrFsG |t$.--- dD ! !3D 222 HHV  E )/&"9M9M N N . . .hh{B// ,6{D,I,IekooeR(((sS^SdbdOeOe ,I#,N,NOOT $((?++T22=e7S7S!%d?&;!z"_to_plain_data..ys2aaa41a!^AfqjFFFaaar)c:g|]}t|dzSrr)rArBrrs r'rz"_to_plain_data..~s,SSS.6A:UCCCSSSr)__dict__cli|]0\}}|d|t|dz1S)rirJr)rlrrs r'rz"_to_plain_data..sT   1<<$$ ~a %@@@   r))rosetidraddrrdiscardr+rr listtuplevars)r2rr _MAX_DEPTHobj_idrcs `` r'rr_sJ 5zz } YYF 5zzul## & 0 0 2 26A:USSS f % &aaaaaSXS^S^S`S`aaa f %$'' &SSSSSUSSS f uj!! &     U ))++     f Lr)messagec|d}t|tsgSg}|D]}t|tst |ddpd}|dvrf|tj ||S)zEReturn Anthropic thinking blocks previously preserved on the message.reasoning_detailsrur>thinkingredacted_thinking) rr+rrror]rrxcopydeepcopy)r raw_details preserveddetail block_types r'"_extract_preserved_thinking_blocksrs++122K k4 ( ( &(I00&$''  FB//5266<<>>DDFF > > > v..//// r)contentct|ts|Sg}|D](}t|}|||)|S)zCConvert OpenAI-style multimodal content arrays to Anthropic blocks.)r+rrrx)r convertedrrs r'_convert_content_to_anthropicrs[ gt $ $I$$2488     U # # # r)messagesc #$%d}g}|D]}|dd}|dd}|dkr`t|trHtd|D}|r d|D}n"d d |D}n|}|d krt |}|rtt|tr:t |} t| tr|| n%|d t|d |dgD]} | rt| ts| di} | dd} t| trtj | n| } n#tj tf$ri} YnwxYw|dt| dd| dd| d|d}td|D}t|tr|s|dd|d|p|}|r|dkrd dd g}|d |d|dkrAt|tr|ntj|}|sd}dt|d d|d!}t|d"trt|d"|d"<|r|d#ddkr|t|d#dtr[|d#drM|d#ddd$dkr"|d#d|n|d|gdt|trJt |}|rt%d%|Drd d&d g}|d|dI|r)t|tr|sd&}|d|dt)$|D]u}|ddkrgt|dtrL|dD]C}|d$dkr($|d'Dv|D]Q}|dd krCt|dtr($fd(|dD|d<|ds d d)d g|d<Rt)%|D]u}|dd krgt|dtrL|dD]C}|d$dkr(%|dDv|D]Q}|ddkrCt|dtr(%fd*|dD|d<|ds d d+d g|d<Rg}|D]}|r|d#d|dkr|ddkr|d#d}|d}t|tr't|tr|d z|z|d#d<}t|tr$t|tr||z|d#d<t|trd |d g}t|trd |d g}||z|d#d<t|dtrd,|dD|d<|d#d}|d}t|tr%t|tr||z|d#d<{t|tr(t|tr|d z|z|d#d<t|trd |d g}t|trd |d g}||z|d#d<|||}t-d-#t/|}t1|}d}t3t5|d.z d#d#D]%}||dd kr|}n&t7|D]T\}}|dd ks(t|dtsH|rg}|dD]} t| tr| d$#vr|| D| d/s| d0ro|| |pd dd g|d<n!|s||kr #fd1|dD}!|!pd d2d g|d<ng}|dD]} t| tr| d$#vr|| D| d$d3kr+| d0r|| | d/r|| | dd}"|"r|d |"d |pd dd g|d<|dD]D} t| tr-| d$#vr| d"dEV||fS)4uEConvert OpenAI-format messages to Anthropic format. Returns (system_prompt, anthropic_messages). System messages are extracted since Anthropic takes them as a separate param. system_prompt is a string or list of content blocks (when cache_control present). When *base_url* is provided and points to a third-party Anthropic-compatible endpoint, all thinking block signatures are stripped. Signatures are Anthropic-proprietary — third-party endpoints cannot validate them and will reject them with HTTP 400 "Invalid signature in thinking block". Nroleuserrrrc3jK|].}t|t|dV/dS)rNr+rrrAras r'rCz0convert_messages_to_anthropic..sQ  /0z!T?R?R EE/**      r)c<g|]}t|t|Sr?)r+rrs r'rz1convert_messages_to_anthropic..s'HHHAJq$4G4GHaHHHr) c3XK|]%}|ddk|dV&dS)rurWNrrs r'rCz0convert_messages_to_anthropic..sC''&'aeeFmmv6M6M& 6M6M6M6M''r) assistantrWr tool_callsrp argumentsz{}tool_userrq)rurrqrTreasoning_contentc3nK|]0}t|to|ddvV1dS)rurrNrrs r'rCz0convert_messages_to_anthropic..sU((1d##Zf 9Z(Z((((((r)rr)rurz(empty))rrtoolz (no output) tool_result tool_call_id)ru tool_use_idrrruc3K|]^}t|trG|ddk0|dddkV_dS)rurWrN)r+rrr]rs r'rCz0convert_messages_to_anthropic..&sv++a&&+,-55==F+B+Bfb!!''))R/+B+B+B+B++r)z(empty message)rctg|]4}|ddks|dv2|5S)rurrr)rArtool_result_idss r'rz1convert_messages_to_anthropic..<sL55==J..!%%++2P2P2P2P2Pr)z(tool call removed)ctg|]4}|ddks|dv2|5S)rurrr)rAr tool_use_idss r'rz1convert_messages_to_anthropic..PsN55==M11QUU=5I5I\5Y5Y5Y5Y5Yr)z(tool result removed)cjg|]0}t|tr|ddv.|1S)rurrrs r'rz1convert_messages_to_anthropic..qsJ$$$ *1d 3 3$89f Ij8j8j8j8j8jr)rrJ signaturerclg|]0}t|tr|dv.|1S)rur)rAr_THINKING_TYPESs r'rz1convert_messages_to_anthropic..sJ"1d++01f 0P0P0P0P0Pr)z(thinking elided)r)rr+rrDrrrextendrxrorrrrr7rminsertrallr]rr frozensetrxr{ranger! enumeratepop)&rrqrrcr"rr has_cacheblocksconverted_contenttcrzargs parsed_argsr_already_has_thinking effectiveresult_contentrconverted_blocksrfixed prev_content curr_content prev_blocks curr_blocks_is_third_party_is_kimilast_assistant_idxiidx new_contentrstripped thinking_textrrrs& @@@r'convert_messages_to_anthropicrsj F F t@t@uuVV$$%% 2&& 8  '4(( !  4;    HHHHHFF!YY''+2'''FF!  ;  7::F Jgt,,J(Eg(N(N%!"3T::9 &7888MM63w<<"H"HIIIeeL"--  B!5!5VVJ++vvk400%6@s6K6K"U$*T"2"2"2QUKK,j9%%%"$KKK% &+BFF4,<,<==FF62..( 0!"&9 : : $'(((((%% !+S11 V:O V a*BS!T!TUUU)'I B R&,i@@A MM;9EE F F F  6>>(27C(@(@YWWdjQXFYFYN! /!.%0~r1J1JKK)K !%%00$77 H/3Ao4F/G/G O, J2Jv&&00vbz)4d;;12Jy)12Jy)!,0088MIIr 9%,,[9999 v;-HHIII  gt $ $ @> ? ? ? ?eeO BB V9  :a lD#A#A 9 B B99V$$ 55#'' -(@(@AAA QQ V9 # # 1Y<(F(F #9AiL Y< Q)/9N O OP) 55L 66 V9 # # 1Y<(F(F #9 6 699V$$ 22 $$UYYt__555 SS V9  :a lD#A#A 9AiL Y< S)/9P Q QR)  E )) ( U2Yv&!F)33yF""$Ry3  | lC00 GZ c5R5R G+7$+>+ME"Ii(( d33G s+F44GG max_tokensreasoning_config tool_choiceis_oauth fast_modec t|| \} } |rt|ng} t||}t|||}|r||krt |dz d}|rdt d}t | tr|g| z} n"t | tr | r|d| dg} n|g} | D]}t |tr| ddkrs| dd}| d d }| d d }| d d }| dd}||d<| r| D]}d|vrt|dz|d<| D]}| d}t |tr|D]}t |tro| ddkr8d|vr4|d tst|dz|d<h| ddkrd|vr || |d}| r| |d<| r]| |d<|dks|ddi|d<nH|dkrddi|d<n:|dkr|ddnt |trd|d|d<t| }|rt |tr|s| d d!urd"|vrt| d#d$}t" |d%}t%|rBd&d'd(|d)<t& |d$}|d*krt)|sd+}d#|i|d,<n#d |d-|d)<d|d.<t ||d/z|d0<t+|rd1D]}||d| rt-| sd2|d3id4<tt1| }|r|t4|t8d5d6|i|d7<|S)8uZBuild kwargs for anthropic.messages.create(). Naming note — two distinct concepts, easily confused: max_tokens = OUTPUT token cap for a single response. Anthropic's API calls this "max_tokens" but it only limits the *output*. Anthropic's own native SDK renamed it "max_output_tokens" for clarity. context_length = TOTAL context window (input tokens + output tokens). The API enforces: input_tokens + max_tokens ≤ context_length. Stored on the ContextCompressor; reduced on overflow errors. When *max_tokens* is None the model's native output ceiling is used (e.g. 128K for Opus 4.6, 64K for Sonnet 4.6). When *context_length* is provided and the model's native output ceiling exceeds it (e.g. a local endpoint with an 8K window), the output cap is clamped to context_length − 1. This only kicks in for unusually small context windows; for full-size models the native output cap is always smaller than the context window so no clamping happens. NOTE: this clamping does not account for prompt size — if the prompt is large, Anthropic may still reject the request. The caller must detect "max_tokens too large given prompt" errors and retry with a smaller cap (see parse_available_output_tokens_from_error + _ephemeral_max_output_tokens). When *is_oauth* is True, applies Claude Code compatibility transforms: system prompt prefix, tool name prefixing, and prompt sanitization. When *preserve_dots* is True, model name dots are not converted to hyphens (for Alibaba/DashScope anthropic-compatible endpoints: qwen3.5-plus). When *base_url* points to a third-party Anthropic-compatible endpoint, thinking block signatures are stripped (they are Anthropic-proprietary). When *fast_mode* is True, adds ``extra_body["speed"] = "fast"`` and the fast-mode beta header for ~2.5x faster output throughput on Opus 4.6. Currently only supported on native Anthropic endpoints (not third-party compatible ones). rp)rc)r5rJrWrrurz Hermes Agentz Claude Codez Hermes agentz hermes-agentrSz Nous Researchrrqrrrr)rrrrrnautoNrrequiredrDnoner)rurqenabledFhaikueffortrr adaptive summarized)rudisplayrr r output_config)ru budget_tokens temperaturerr)r top_ptop_kfast extra_bodyspeedrr extra_headers)rr{rer;r_CLAUDE_CODE_SYSTEM_PREFIXr+rrorrr_MCP_TOOL_PREFIXrlrr{rTHINKING_BUDGETrGADAPTIVE_EFFORT_MAPrKrOrx setdefaultrrrrx_FAST_MODE_BETAr)rrrnrrrrrcr5rqrranthropic_messagesanthropic_toolseffective_max_tokenscc_blockrrWrmsgrr_is_kimi_codingrbudgetadaptive_effort _sampling_keybetass r'build_anthropic_kwargsr s{f"?xRZ![![![F ;@H0777bO m D D DE BE.:.??">A#5q99%!",FGG fd # # Z&(FF  $ $   @ @AFFZF % %E%&& %599V+<+<+F+Fyy,,||NMBB||NMBB||NMBB||O[AA $f   C' C CT>>#3d6l#BDL& ! !Cggi((G'4(( !$!!E!%..! 99V,, ::v#(=#;#;>PP    * *% 7 7G5;;== , ,M JJ}d + + + + F;HEEF7=,++G4/99::  , LL* + + + _%%%#3SXXe__"E Mr)r>)NN)F)NFFNNF)^__doc__rrloggingr"rrYpathlibrhermes_constantsrtypingrrrrr utilsr anthropicrr getLogger__name__rrrrJrErNrrror-r(r4r;r,rGrKrOrrrrr`rP__annotations__rerrrhrmrrrxr{r}rrr.rrrrrrrr r rrr(r1rOrUrPrQr]rr>r[r^rbrermr{rrrrrrrr r?r)r'r+s      ,,,,,,33333333333333******&&&&&NNN  8 $ $!5DNN * !="0!             !/8#*SS*,Xc],,,,:%) SM >BsBtBBBB =#=$====CCCDCCCC"&, @ ) !),0HSM000)S))))2Y&#&&&&8!#!!!! t      TsTzTdTTTT mC$J m4 m m m m t S    S.S.CS.3S.S.S.S.S.l369Xd38n5M9999x%htCH~&>%%%%P #     *d38n * * * * *JO=7=7=7=7$=7SWX[]`X`Sa=7=7=7=7@S#X8C=4" *E*E*E*E*E*E TN *E  *E*E*E*EZ  xS#X7O [cdg[h    S$sTWx.AY^fgj^k,)#))))X%x}%%%%X:AI@ $_&&)@@     _Xd38n%=____D xS#X'?    "(DS4 !s !s ! ! ! ! d4j T$Z    's'tCH~'''',SXd38n5M212$+++#+#+(3-+SV++++\S#X4SRUXCW" 3 3     ww4jwDjw 8C=$t* $%wwww@ "&$(LL L4jL DJ L L tCH~. L # LLLSMLDjLL #s(^LLLLLLsAA  A