ei:DUdZddlZddlZddlZddlZddlZddlmZddlm Z ddl m Z m Z m Z mZmZddlmZmZmZddlmZddlmZdd lmZdd lmZdd lmZmZmZej e!Z"d e#fd Z$da%idddddddddddddddddddddddddd d!d d"d#d$d#d%d&d&d'd'd'd'd(d(d)Z&d*ee#d+e#fd,Z'e(Z)e(e*d-<d.ee#d+e+fd/Z, dd.ee#d0ee#d+d1fd2Z-d3d4d5d6d5d7d7d8d9d:d;d Z.e e#e#fe*d?<d@dAdBZ/e e#e#fe*dC<dDdEdFdGZ0ddHl1m2Z3dDdEdIe3dJZ4dKdLgiZ5da6e+e*dM<dd0e#d+e#fdUZ?d*e#d+ee+ee ffdVZ@dWe d+e#fdXZAddWe dZe#d+e#fd[ZBd\e d+e fd]ZCGd^d_ZDGd`daZEGdbdcZFGdddeZGGdfdgZHGdhdiZIGdjdkZJGdldmZKGdndoZLGdpdqZMGdrdsZNGdtduZOd+eePfdvZQd*ePd+e#fdwZRd+e#fdxZSddydze+d+eeTe#e#ffd{ZUd+ee#fd|ZVd+eeeee#ffd}ZWd+eeeee#ffd~ZXd+e#fdZYdde+d+eeeee#ffdZZd+e#fdZ[d+e#fdZ\d+eee#ee#ee#ffdZ]d+e#fdZ^ddZ_d0e#d+dfdZ`d+eee ee#ffdZad+eee ee#ffdZbd+eee ee#ffdZcddddddZddZedee e#e fd+e e#e#ffdZfd+e eTfdZgdehd+e+fdZidehd+e+fdZjdehd+e+fdZkdehde#d+e+fdZldehd+e+fdZmd*e#d+dfdZnd*e#d+e+fdZo dde#de#de#d+eee ee#e#ffdZpddee e#e fd+eeeee#ffdZqd.e#fdZrdee#d*e#d+ee#fdZs dd*e#d.e#de+de+de#de#de#dee e#e fd+eee ee#ffdZt dddde#dee e#e fd+eeeee#ffdZudddde#dee e#e ffdZvdZwd*ee#d+e#fdZxd*e#d+eee ee#ffdZyd*e#d+e+fdZzd+e e#fdZ{ dddddd*ee#d.ee#d0ee#dee#de+d+eee#ee ee#ff dZ|d+ePfdZ}de~d+ePfdZiZe eTeTfe*d<ejZdZdddddd*e#de+d0ee#dee#dee#dee e#e fd+eTfdZdddeTde dee#de d+df dĄZdddddde#d.ee#de+d0ee#dee#dee#dee e#e fd+eee ee#ffdƄZddDŽZde d+dfdȄZddɄZddʄZde d+e+fd˄Zde d.ee#dee#d+ee#fd̈́Z dd*e#d.e#de+d0e#de#de#dee e#e fd+eee ee#ffd΄Z dde#d*e#d.e#d0e#de#d+ee#ee#ee#ee#ee#ff dτZdZde#d+e e#e ffdфZefde#ded+efdӄZde#d+e e#e ffdԄZedd#hZd*e#d0e#d+e+fdքZded+efd؄Z dd*e#d.e#dedeedee~deededeePd0ee#d+ePfdބZdde de#d+e fdZ dddddddddddd de#d*e#d.e#d0e#de#dee e#e fdedede~dededePd+e fdZd+e#fdZ ddddddddddd de#d*e#d.e#d0e#de#dedede~dededePd+e fdZdS)a,Shared auxiliary client router for side tasks. Provides a single resolution chain so every consumer (context compression, session search, web extraction, vision analysis, browser vision) picks up the best available backend without duplicating fallback logic. Resolution order for text tasks (auto mode): 1. OpenRouter (OPENROUTER_API_KEY) 2. Nous Portal (~/.hermes/auth.json active provider) 3. Custom endpoint (config.yaml model.base_url + OPENAI_API_KEY) 4. Codex OAuth (Responses API via chatgpt.com with gpt-5.3-codex, wrapped to look like a chat.completions client) 5. Native Anthropic 6. Direct API-key providers (z.ai/GLM, Kimi/Moonshot, MiniMax, MiniMax-CN) 7. None Resolution order for vision/multimodal tasks (auto mode): 1. Selected main provider, if it is one of the supported vision backends below 2. OpenRouter 3. Nous Portal 4. Codex OAuth (gpt-5.3-codex supports vision via Responses API) 5. Native Anthropic 6. Custom endpoint (for local vision models: Qwen-VL, LLaVA, Pixtral, etc.) 7. None Per-task overrides are configured in config.yaml under the ``auxiliary:`` section (e.g. ``auxiliary.vision.provider``, ``auxiliary.compression.model``). Default "auto" follows the chains above. Payment / credit exhaustion fallback: When a resolved provider returns HTTP 402 or a credit-related error, call_llm() automatically retries with the next available provider in the auto-detection chain. This handles the common case where a user depletes their OpenRouter balance but has Codex OAuth or another provider available. N)Path)SimpleNamespace)AnyDictListOptionalTuple)urlparseparse_qs urlunparse)OpenAI) load_pool)get_hermes_home)OPENROUTER_BASE_URL)base_url_host_matchesbase_url_hostnamenormalize_proxy_env_varsurlct|}|jrWt|d}dt |jD}||fS|dfS)zNExtract query params from URL, return (clean_url, default_query dict or None).)queryc&i|]\}}||dSr).0kvs 8/home/div/.hermes/hermes-agent/agent/auxiliary_client.py z-_extract_url_query_params..>s"EEEda!QqTEEEN)r rr _replacer items)rparsedcleanparamss r_extract_url_query_paramsr&9so c]]F |6???4455EEhv|&<&<&B&B&D&DEEEf} 9r Fgooglegeminiz google-geminizgoogle-ai-studiozx-aixaizx.aigrokglmzaizz-aizz.aizhipukimi kimi-codingmoonshotzkimi-cnkimi-coding-cnz moonshot-cnz minimax-china minimax-cn minimax_cnclaude anthropiccopilot copilot-acp)z claude-codegithubzgithub-copilotz github-modelz github-modelszgithub-copilot-acpzcopilot-acp-agentproviderreturnc|pd}|dr4|ddd}|sdS|}|dkrdS|dkr?t pd }|r|d vr|}ndSt ||S) Nautocustom::customcodex openai-codexmainr)r<rCr)striplower startswithsplit_read_main_provider_PROVIDER_ALIASESget)r9 normalizedsuffix main_provs r_normalize_aux_providerrNbs$f++--3355JY''!!#q))!,2244 8 W~V)**0b7799??AA  *>>>"JJ8  Z 8 88r OMIT_TEMPERATUREmodelc|pdddd}|dp|dkS)zHTrue for any Kimi / Moonshot model that manages temperature server-side.r/r?zkimi-r.)rDrErsplitrF)rPbares r_is_kimi_modelrV~sS KR   & & ( ( / /Q 7 7 ;D ??7 # # 5tv~5r base_urlzOptional[float] | objectcht|r"td|tSdS)uReturn a temperature directive for models with strict contracts. Returns: ``OMIT_TEMPERATURE`` — caller must remove the ``temperature`` key so the provider chooses its own default. Used for all Kimi / Moonshot models whose gateway selects temperature server-side. ``float`` — a specific value the caller must use (reserved for future models with fixed-temperature contracts). ``None`` — no override; caller should use its own default. z7Omitting temperature for Kimi model %r (server-managed)N)rVloggerdebugrO)rPrWs r_fixed_temperature_for_modelr[s5e  NPUVVV 4r zgemini-3-flash-previewz glm-4.5-flashzkimi-k2-turbo-previewzstep-3.5-flashz MiniMax-M2.7claude-haiku-4-5-20251001zgoogle/gemini-3-flashzgemini-3-flashzglm-5zgoogle/gemini-3-flash-previewznemotron-3-nano:30b) r(r,r/stepfunr1minimaxr2r5z ai-gatewayz opencode-zenz opencode-gokilocodez ollama-cloud_API_KEY_PROVIDER_AUX_MODELSz mimo-v2.5z glm-5v-turbo)xiaomir,_PROVIDER_VISION_MODELSz%https://hermes-agent.nousresearch.comz Hermes Agentzproductivity,cli-agent) HTTP-RefererzX-OpenRouter-TitlezX-OpenRouter-Categories) __version__z HermesAgent/)rczX-Title User-Agenttagsproduct=hermes-agentauxiliary_is_nousz)https://inference-api.nousresearch.com/v1zhttps://api.anthropic.comz auth.jsonz gpt-5.2-codexz%https://chatgpt.com/backend-api/codex access_tokencddd}t|tr|s|S ddl}|d}t |dkr|S|dd t |d d zzz}t j||}| d i d }t|tr|r||d <n#t$rYnwxYw|S)uHeaders required to avoid Cloudflare 403s on chatgpt.com/backend-api/codex. The Cloudflare layer in front of the Codex endpoint whitelists a small set of first-party originators (``codex_cli_rs``, ``codex_vscode``, ``codex_sdk_ts``, anything starting with ``Codex``). Requests from non-residential IPs (VPS, server-hosted agents) that don't advertise an allowed originator are served a 403 with ``cf-mitigated: challenge`` regardless of auth correctness. We pin ``originator: codex_cli_rs`` to match the upstream codex-rs CLI, set ``User-Agent`` to a codex_cli_rs-shaped string (beats SDK fingerprinting), and extract ``ChatGPT-Account-ID`` (canonical casing, from codex-rs ``auth.rs``) out of the OAuth JWT's ``chatgpt_account_id`` claim. Malformed tokens are tolerated — we drop the account-ID header rather than raise, so a bad token still surfaces as an auth error (401) instead of a crash at client construction. z!codex_cli_rs/0.0.0 (Hermes Agent) codex_cli_rs)re originatorrN.r?=zhttps://api.openai.com/authchatgpt_account_idzChatGPT-Account-ID) isinstancestrrDbase64rGlenjsonloadsurlsafe_b64decoderJ Exception)riheadersrtparts payload_b64claimsacct_ids r_codex_cloudflare_headersrs%&:$G lC ( ( 0B0B0D0D   ""3'' u::>>NAhU1X(:!;; F44[AABB**:B??CCDXYY gs # # 4 4,3G( )      Ns-C2 BC22 C?>C?ct|pdd}|dr9|dt d dz}t d|||S|S)uNormalize an Anthropic-style base URL to OpenAI-compatible format. Some providers (MiniMax, MiniMax-CN) expose an ``/anthropic`` endpoint for the Anthropic Messages API and a separate ``/v1`` endpoint for OpenAI chat completions. The auxiliary client uses the OpenAI SDK, so it must hit the ``/v1`` surface. Passing the raw ``inference_base_url`` causes requests to land on ``/anthropic/chat/completions`` — a 404. rrR /anthropicNz/v1u,Auxiliary client: rewrote base URL %s → %s)rsrDrstripendswithrurYrZ)rWr rewrittens r_to_openai_base_urlrs hn"   # # % % , ,S 1 1C ||L!!,3|,,,,-5  CS)TTT Jr cR t|}n4#t$r'}td||Yd}~dSd}~wwxYw|r|sdS d|fS#t$r'}td||Yd}~dSd}~wwxYw)z2Return (pool_exists_for_provider, selected_entry).z0Auxiliary client: could not load pool for %s: %sN)FNTz8Auxiliary client: could not select pool entry for %s: %s)TN)rryrYrZhas_credentialsselect)r9poolexcs r_select_pool_entryrs""  GSVWWW{{{{{ t++--{T[[]]""  OQY[^___zzzzzs* A>AA55 B&?B!!B&entryc|dSt|ddpt|dd}t|pdS)Nrruntime_api_keyri)getattrrsrD)rkeys r_pool_runtime_api_keyr"sN }r %*D 1 1 WWUNTV5W5WC syb>>   ! !!r rfallbackcH|6t|pddSt|ddp#t|ddpt|ddp|}t|pddS)NrrRruntime_base_urlinference_base_urlrW)rsrDrr)rrrs r_pool_runtime_base_urlr+s }8>r""((**11#666 )400  5. 5 5  5*d + +    syb>>   ! ! ( ( - --r contentc8t|tr|St|ts|rt|ndSg}|D]R}t|ts|dd}|dkr-|d|dddb|dkr|di}t|tr|ddnt|}d|d }t|tr|d nd }|r||d <|||d vr||"|dd}|r|d|dT|pdS) aConvert chat.completions content to Responses API format. chat.completions uses: {"type": "text", "text": "..."} {"type": "image_url", "image_url": {"url": "data:image/png;base64,..."}} Responses API uses: {"type": "input_text", "text": "..."} {"type": "input_image", "image_url": "data:image/png;base64,..."} If content is a plain string, it's returned as-is (the Responses API accepts strings directly for text-only messages). rtypetext input_textrr image_urlr input_image)rrdetailN)rr)rrrslistdictrJappend) r convertedpartptype image_datarrrrs r_convert_content_for_responsesr?s'3 gt $ $/&.s7|||B.&(IGG$%%  $$ F??   lDHHVRCodex auxiliary: backfilled %d output items from stream eventsmessage assistant completed output_textr)rrstatusrz6Codex auxiliary: synthesized from %d deltas (%d chars)objrdefaultr:ct||d}|+t|tr|||}||n|Sr)rrrrrJ)rrrvals r _item_getz2_CodexCompletionsAdapter.create.._item_getsGc3--;:c4#8#8;''#w//C!oss7:r )rrrcall_id argumentsz{})rr)idrrusage input_tokensr output_tokens total_tokens prompt_tokenscompletion_tokensrz-Codex auxiliary Responses API call failed: %s)rr tool_callsstoprindexr finish_reasonchoicesrPrrr)rJrrrrsrrrr responsesstreamrget_final_responserrrYrZrujoinrrryrD)&rkwargsrrPr input_msgsmsgrr resp_kwargsrrtfnr text_partstool_calls_rawrcollected_output_itemscollected_text_deltashas_function_callsr_event_etype_done_deltafinal_output assembledrr item_typerr resp_usagerrchoices& rcreatez_CodexCompletionsAdapter.createws::j"-- 7DK00 6 +-   C7766**Dggi((.BGx*4Wc*B*BTwwG !! =gFF## (DV$C$C#D ' '  7##  1I  .8D.A.AIQUU:r***rvvf~~  & #%66-#<#<"$&&r":": ""  1'0 G$!# $&P 13 "/1 !!& .'.==== 4$ 2 2F$VVR88F!<<< ' = = ,299%@@@,66!("!=!=!A188@@@(F22-1*1133 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 eXt44G'4((  )#'(>#?#?ELLLX233+ 3E !#(= > >I$3&[!0m)!T!T!T U%%%$ELLLP122C NN ; ;s ; ;s ;c ; ; ; ;  x44  %IdF33  ))!*4!;!;!ArKK ) $ 7 7 $;;;&--iifb.I.IJJJK/11"))/$9T9b99'!0!*4!:QB H0$ Q0H44Q7H48HQ Q<Q77Q<N) __name__ __module__ __qualname____doc__r rsrrrrr rrrosb>>F3X #X X X X X X r rceZdZdZdefdZdS)_CodexChatShimz>Wraps the adapter to provide client.chat.completions.create().adapterc||_dSr completionsrrs rrz_CodexChatShim.__init__"r N)rrrrrrrr rrrs6HH# 8######r rc(eZdZdZdedefdZdZdS)CodexAuxiliaryClientzOpenAI-client-compatible wrapper that routes through Codex Responses API. Consumers can call client.chat.completions.create(**kwargs) as normal. Also exposes .api_key and .base_url for introspection by async wrappers. rrPc||_t||}t||_|j|_|j|_dSr) _real_clientrrchatapi_keyrW)rrrPrs rrzCodexAuxiliaryClient.__init__ s@'*;>>"7++ "* #, r c8|jdSr)rclosers rr zCodexAuxiliaryClient.close's !!!!!r N)rrrrr rsrr rr rrrsO -F-3----"""""r rc*eZdZdZdefdZdefdZdS)_AsyncCodexCompletionsAdapterzAsync version of the Codex Responses adapter. Wraps the sync adapter via asyncio.to_thread() so async consumers (web_tools, session_search) can await it as normal. sync_adapterc||_dSr_syncrrs rrz&_AsyncCodexCompletionsAdapter.__init__2 ! r r:cJKddl}|j|jjfi|d{VSNrasyncio to_threadrrrrrs rrz$_AsyncCodexCompletionsAdapter.create5A&W&tz'8CCFCCCCCCCCCr N)rrrrrrrrrr rr r +s\ "%=""""DDDDDDDr r ceZdZdefdZdS)_AsyncCodexChatShimrc||_dSrrrs rrz_AsyncCodexChatShim.__init__;rr N)rrrr rrr rrr:s0# =######r rceZdZdZddZdS)AsyncCodexAuxiliaryClientzHAsync-compatible wrapper matching AsyncOpenAI.chat.completions.create(). sync_wrapperrc|jj}t|}t||_|j|_|j|_dSr)rrr rrrWrr r async_adapters rrz"AsyncCodexAuxiliaryClient.__init__BsA#(4 5lCC ' 66 #+ $- r N)r r)rrrrrrr rrr?s.RR......r rc4eZdZdZd dededefdZdefdZd S) _AnthropicCompletionsAdapterzr<nonerequired)rPrrr-reasoning_configr,r&_forbids_sampling_paramsanthropic_messages)strip_tool_prefix)rr reasoningrrrrrrrr)agent.anthropic_adapterr*agent.transportsr+rJrrrrsrrEr(r4rrrnormalize_responserrrr7rhasattrrr)rrr*r+rrPrr,r-r/normalized_tool_choice choice_typeanthropic_kwargsr4response _transport_nrassistant_messagerrrrrrs rrz#_AnthropicCompletionsAdapter.createRsBBBBBB222222::j"-- 7DK00 7##jj// ZZ --\2= //4<(/CC2BCC"]#788 ++ ,   ,K~m    )  8W % % (. #HNNAFFK!M ' K K Pq "8>>1EEl-ZkJkL#+"3)E !%'    H    r NF) rrrrrrsboolrrrr rr%r%JsjFF""C""t"""" I #I I I I I I r r%ceZdZdefdZdS)_AnthropicChatShimrc||_dSrrrs rrz_AnthropicChatShim.__init__rr N)rrrr%rrr rrFrFs0# <######r rFc 6eZdZdZd dededededef dZd Zd S) AnthropicAuxiliaryClientz@OpenAI-client-compatible wrapper over a native Anthropic client.FrrPrrWr&c|||_t|||}t||_||_||_dS)Nr&)rr%rFrrrW)rrrPrrWr&rs rrz!AnthropicAuxiliaryClient.__init__s?'.{EHUUU&w//    r cht|jdd}t|r |dSdS)Nr )rrcallable)rclose_fns rr zAnthropicAuxiliaryClient.closes?4,gt<< H    HJJJJJ  r NrC) rrrrrrsrDrr rr rrIrIsfJJ!!C!!c!S!\`!!!!r rIc&eZdZdefdZdefdZdS)!_AsyncAnthropicCompletionsAdapterrc||_dSrrrs rrz*_AsyncAnthropicCompletionsAdapter.__init__rr r:cJKddl}|j|jjfi|d{VSrrrs rrz(_AsyncAnthropicCompletionsAdapter.createrr N)rrrr%rrrrr rrPrPsR"%A""""DDDDDDDr rPceZdZdefdZdS)_AsyncAnthropicChatShimrc||_dSrrrs rrz _AsyncAnthropicChatShim.__init__rr N)rrrrPrrr rrTrTs0# A######r rTceZdZddZdS)AsyncAnthropicAuxiliaryClientr rIc|jj}t|}t||_|j|_|j|_dSr)rrrPrTrrWr"s rrz&AsyncAnthropicAuxiliaryClient.__init__sA#(4 9,GG +M:: #+ $- r N)r rI)rrrrrr rrWrWs(......r rWc td\}}|r|dSt|ddt|ddt|ddt|tt|ddt|ddt|d dt|d d d d S tsdSt jt}| ddkrdS| di di}| ds| dsdS|S#t$r&}t d|Yd}~dSd}~wwxYw)zRead and validate ~/.hermes/auth.json for an active Nous provider. Returns the provider state dict if Nous is active with tokens, otherwise None. nousNrir refresh_token agent_keyportal_base_url client_idscope token_typeBearerr) rir[r\rr]r^r_r`sourceactive_provider providerszCould not read Nous auth: %s) rrr_NOUS_DEFAULT_BASE_URL_AUTH_JSON_PATHis_filervrw read_textrJryrYrZ) pool_presentrdatar9rs r_read_nous_authrks -V44L%  =4#E>2>>$UOTBB  T::"8@V"W"W&u.?FF  T::UGT22!%x@@    &&(( 4z/335566 88% & && 0 0488K,,00<<||K(( n1M1M 4  3S999ttttts,"E=AEAEE F %FF cX|dp|ddS)z9Extract the best API key from a Nous provider state dict.r\rirrJr9s r _nous_api_keyros' << $ $ H ^R(H(HHr c6tjdtS)z8Resolve the Nous inference base URL from env or default.NOUS_INFERENCE_BASE_URL)osgetenvrerr r_nous_base_urlrts 9.0F G GGr  force_refreshrvc B ddlm}|tdtt jddt t jdd|}n3#t$r&}t d |Yd }~d Sd }~wwxYwt| d pd  }t| d pd  d}|r|sd S||fS)a2Return fresh Nous runtime credentials when available. This mirrors the main agent's 401 recovery path and keeps auxiliary clients aligned with the singleton auth store + mint flow instead of relying only on whatever raw tokens happen to be sitting in auth.json or the credential pool. r resolve_nous_runtime_credentials<HERMES_NOUS_MIN_KEY_TTL_SECONDS1800HERMES_NOUS_TIMEOUT_SECONDS15min_key_ttl_secondstimeout_seconds force_mintz7Auxiliary Nous runtime credential resolution failed: %sNrrrWrR)hermes_cli.authrymaxintrrrsfloatryrYrZrsrJrDr)rvrycredsrrrWs r_resolve_nous_runtime_apirs7 DDDDDD00 #BBI6WY_,`,`(a(a b b!"),I4"P"PQQ$     NPSTTTttttt%))I&&,"--3355G599Z((.B//5577>>sCCH (t H sA"A%% B/BBc&td\}}|rt|}|r|S ddlm}|}|di}|d}t |t r|sdS ddl}| dd}|d t| d zzz }tj | |} | d d} | r4tj| krtd | dSn#t"$rYnwxYw|S#t"$r&} td | Yd} ~ dSd} ~ wwxYw)aRead a valid, non-expired Codex OAuth access token from Hermes auth store. If a credential pool exists but currently has no selectable runtime entry (for example all pool slots are marked exhausted), fall back to the profile's auth.json token instead of hard-failing. This keeps explicit fallback-to-Codex working when the pool state is stale but the stored OAuth token is still valid. rBr)_read_codex_tokenstokensriNrmr?rorpexpz-Codex access token expired (exp=%s), skippingz2Could not read Codex auth for auxiliary client: %s)rrrrrJrrrsrDrtrGrurvrwrxtimerYrZry) rirtokenrrjrrirtpayloadr}rrs r_read_codex_access_tokenrs-^<<L%%e,,  L666666!!##(B''zz.11 ,,, L4F4F4H4H 4  MMM"((--a0G ss7||ma/0 0GZ 8 8 A ABBF**UA&&C ty{{S(( LcRRRt    D !!###  I3OOOttttts=A$E B)D<;E < E E E  E F*F  Fc  ddlm}m}n+#t$rtdYdSwxYw|D]\}}|jdkr|dkr4 ddlm}|ds+n#t$rYnwxYwtcSt|\}}|rt|}|srtt||jp|j}t|} | td |j| |d kr$dd lm} m} | |r| || | fcSi} t+|d rddi| d<n#t+|drddlm} | | d<t1d||d | | fcS||}t3|dd}|stt3|dddp|j}t|} | td|j| |d kr$dd lm} m} | |r| || | fcSi} t+|d rddi| d<n#t+|drddlm} | | d<t1d||d | | fcSdS)zTry each API-key provider in PROVIDER_REGISTRY order. Returns (client, model) for the first provider with usable runtime credentials, or (None, None) if none are configured. r)PROVIDER_REGISTRY$resolve_api_key_provider_credentialsz7Could not import PROVIDER_REGISTRY for API-key fallbackNNrr5)!is_provider_explicitly_configuredNz'Auxiliary text client: %s (%s) via poolr(GeminiNativeClientis_native_gemini_base_urlrrW api.kimi.comreclaude-code/0.1.0default_headersapi.githubcopilot.comcopilot_default_headersrrWrRzAuxiliary text client: %s (%s)r)rrr ImportErrorrYrZr" auth_typer_try_anthropicrrrrrr`rJragent.gemini_native_adapterrrrhermes_cli.modelsrr rsrDr)rr provider_idpconfigrrirrrWrPrrextrarrs r_resolve_api_key_providerr@s [[[[[[[[[  NOOOzz!2 7 7 9 9BJBJ W   ) )  + % % MMMMMM88EE    !## # # #0== e  N+E22G *&ug.HIIgWMgH144[AAE} LLBGLRW X X Xh&&eeeeeeee,,X66Y--gQQQSXXXXXE$X~>> E,8:M+N'((&x1HII EEEEEEE+B+B+D+D'(F'HFFFFM M M M44[AAeii 2..//5577  &  *b)) * * 0 0 2 2 9 9# > > \'B\  -00== =  5w|UKKK ( " " a a a a a a a a((22 U))'HMMMuTTTT > : : A(46I'JE# $ $ "8-D E E A A A A A A A'>'>'@'@E# $BgBBEBBEIIII :s $33#A66 BBctd\}}|rgt|}|sdSt|tpt}tdt ||ttfStj d}|sdStdt |tttfS)N openrouterrz%Auxiliary client: OpenRouter via poolrrWrOPENROUTER_API_KEYzAuxiliary client: OpenRouter) rrrrrYrZr _OR_HEADERS_OPENROUTER_MODELrrrs)riror_keyrWs r_try_openrouterrs,\::L%G&u-- :)%1DEE\I\ <===fx'24445FG GY+ , ,F z LL/000 &+>#. 0 0 01B CCr ctd\}}|r|dSt|sdSttjdpdsdSdS) z>Return a more precise OpenRouter auth failure reason for logs.rNzOOpenRouter credential pool has no usable entries (credentials may be exhausted)z=OpenRouter credential pool entry is missing a runtime API keyrrzOPENROUTER_API_KEY not setz&no usable OpenRouter credentials found)rrrsrrrsrD)rirs r _describe_openrouter_unavailablersw,\::L%S =dd$U++ SRR ry-..4" 5 5 ; ; = =,++ 3 3r visionc" ddlm}|}|#|dkrtd|dSn#t$rYnwxYwt }t d}||sdSdatdt} dd l m }|| }|r#|}td |rd nd |n td|rd nd |n8#t$r+}td|rd nd ||Yd}~nd}~wwxYw||\} } nVt|pi} t|pi dp td} t!| | |fS)Nr)nous_rate_limit_remainingz?Auxiliary: skipping Nous Portal (rate-limited, resets in %.0fs)rFruTzAuxiliary client: Nous Portal)get_nous_recommended_aux_modelrz/Auxiliary/%s: using Portal-recommended model %srrz:Auxiliary/%s: no Portal recommendation, falling back to %szGAuxiliary/%s: recommended-models lookup failed (%s); falling back to %srrRr)agent.nous_rate_guardrrYrZryrkrrh _NOUS_MODELrrrorsrJrtrr ) rr _remainingrZruntimerPr recommendedrrrWs r _try_nousrs<  CCCCCC..00  !j1nn LLQ   :         D'e<<>>  MsSSS gt $ $ i 1266<<>>EEcJJ Y/44::<<  $###!   ++j))KY''J++j))K k3 ' ' {/@/@/B/B ##%%,,S11K[/::   j# & &'j.>.>.@.@'& k3 ' '{/@/@/B/B  ((**K 77s AAAc.t\}}}|pdS)Nr)r)r_s r_current_custom_base_urlrSs/11KA  "r c Dddlm}tdD]}ttj|pd}|sE ||}|jr|j }`#t$r}td|d|d|d}~wwxYwdS) aFail fast with a clear error when proxy env vars have malformed URLs. Common cause: shell config (e.g. .zshrc) with a typo like ``export HTTP_PROXY=http://127.0.0.1:6153export NEXT_VAR=...`` which concatenates 'export' into the port number. Without this check the OpenAI/httpx client raises a cryptic ``Invalid port`` error that doesn't name the offending env var. rr ) HTTPS_PROXY HTTP_PROXY ALL_PROXY https_proxy http_proxy all_proxyrz%Malformed proxy environment variable roz1. Fix or unset your proxy settings and try again.N) urllib.parser rrsrrenvironrJrDschemeport ValueError RuntimeError)r rvaluer#rrs r_validate_proxy_env_urlsrXs&%%%%%:  BJNN3''-2..4466   Xe__F} K   BBBeBBB    sA77 BBBcddlm}t|pd}|r|drdS ||}|jdvr |j}dSdS#t$r}td|d|d}~wwxYw) zEReject obviously broken custom endpoint URLs before they reach httpx.rrrzacp://N>httphttpszMalformed custom endpoint URL: zJ. Run `hermes setup` or `hermes model` and enter a valid http(s) base URL.) rr rsrDrFrrrr)rWr candidater#rrs r_validate_base_urlrus%%%%%%HN##))++I  ,,X66)$$ =- - - AAA . -  Wi W W W   sA## B-BBct}t|dkr|\}}d}n|\}}}|r|sdS|trdSt pd}t d||pdt|\}}|rd|ini}|dkr!td||d|}t|||fS|d kre d d l m } | ||}n;#t$r.t d td||d||fcYSwxYwt||||d |fStd||d||fS)Nrnr gpt-4o-miniz3Auxiliary client: custom endpoint (%s, api_mode=%s)chat_completions default_querycodex_responsesrr5rbuild_anthropic_clientu|Custom endpoint declares api_mode=anthropic_messages but the anthropic SDK is not installed — falling back to OpenAI-wire.FrKr)rrurErF_CODEX_AUX_BASE_URLrrYrZr&r rr8rrwarningrI) rrrrrP _clean_base_dq_extrarrs r_try_custom_endpointrs%''G 7||q") Z /6, Z jz%%&9&?&?&A&ABBz    /-E LLF{Op^pqqq0==K'* 2os # #F'''PZ+PPPP #K77>>*** U F F F F F F00[IIKK U U U NNR   M*{MMfMMuT T T T  U %[%[[` a a a     E*{ E Ef E Eu LLs,C??5D76D7ctd\}}|rHt|}|rt|tpt}n3t }|sdSt}nt }|sdSt}t dtt||t|}t|ttfS)NrBrz4Auxiliary client: Codex OAuth (%s via Responses API)r) rrrrrrYrZ_CODEX_AUX_MODELr rr)rir codex_tokenrWrs r _try_codexrs,^<<L% '+E22  +-e5HII`M`HH244K "!z*HH.00  :& LLGIYZZZ1+>>K -= > >@P PPr c ddlm}m}n#t$rYdSwxYwt d\}}|r|dSt |}n d}|}|sdS|rt |tnt} ddlm }|}| d}t|trt| dpd} | dkr@| d pdd } | r| }n#t"$rYnwxYwdd lm} | |} t& dd } t(d | ||  |||}n#t$rYdSwxYwt-|| ||| | fS)Nr)rresolve_anthropic_tokenrr5rrPr9rrWrR)_is_oauth_tokenr\z8Auxiliary client: Anthropic native (%s) at %s (oauth=%s)rK)r8rrrrrr_ANTHROPIC_DEFAULT_BASE_URLrrrJrrrrsrDrErryrr`rYrZrI)rrrirrrWrrr cfg_provider cfg_base_urlrr&rPrs rrrsQ[[[[[[[[[ zz-[99L%* =:%e,,'')) z NZz%e-HIII_zH  111111kmmGGG$$ i & & ,y}}Z88>B??EEGGMMOOL{** ) j 9 9 ?RFFHHOOPSTT ,+H      877777u%%H ( , ,[:U V VE LLKUT\^fggg,,UH== zz  $KxRZ [ [ []b bbs1 3CD<< E E  F## F10F1rrZ local/customrBapi-keyrrrrr)r9rPrWrr main_runtimecRt|tsiSi}tD]W}||}t|tr+|r|||<X|d}|r||d<|S)z8Return a sanitized copy of a live main-runtime override.r9)rrr_MAIN_RUNTIME_FIELDSrJrsrDrE)rrKfieldrr9s r_normalize_main_runtimer s lD ) ) !#J%..  '' eS ! ! .ekkmm . % Ju ~~j))H2!)!1!1 : r cVdtfdtfdtfdtfdtfgS)zReturn the ordered provider detection chain. Built at call time (not module level) so that test patches on the ``_try_*`` functions are picked up correctly. rrZrrBrrrr r_get_provider_chainrs8 '  -. $ -.  r rct|dd}|dkrdSt||dvrtfddDrdSdS) zDetect payment/credit/quota exhaustion errors. Returns True for HTTP 402 (Payment Required) and for 429/other errors whose message indicates billing exhaustion rather than rate limiting. status_codeNT)riNc3 K|]}|vV dSrrrkw err_lowers r z$_is_payment_error..,s?@@2rY@@@@@@r )creditszinsufficient fundszcan only affordbillingzpayment requiredF)rrsrEanyrrrs @r_is_payment_errorrs S- . .F }}tC  I!!! @@@@*?@@@ @ @ 4 5r c ddlm}m}t|||frdSt |jt fddDrdSt|t fddDrdSdS) aEDetect connection/network errors that warrant provider fallback. Returns True for errors indicating the provider endpoint is unreachable (DNS failure, connection refused, TLS errors, timeouts). These are distinct from API errors (4xx/5xx) which indicate the provider IS reachable but returned an error. r)APIConnectionErrorAPITimeoutErrorTc3 K|]}|vV dSrr)rrerr_types rrz'_is_connection_error..As' L Lb2> L L L L L Lr ) ConnectionTimeoutDNSSSLc3 K|]}|vV dSrrrs rrz'_is_connection_error..Ds7  r2?      r )zconnection refusedzname or service not knownzno route to hostznetwork is unreachablez timed outzconnection resetF) openairrrrrrrrsrE)rrrrr s @@r_is_connection_errorr'3s;:::::::#*O<==tCyy!H L L L L$K L L LLLtC  I     &    t 5r ct|dd}|dkrdSt|}d|vp'dt|jvS)zCDetect auth failures that should trigger provider-specific refresh.rNiTzerror code: 401authenticationerror)rrsrErrrs r_is_auth_errorr*Msa S- . .F }}tC  I  ) `-Bd3iiFXF^F^F`F`-``r paramc|pd}|sdSt||vrdStfddDS)a/Detect provider 400s for an unsupported request parameter. Different OpenAI-compatible endpoints phrase the same class of error a few ways: ``Unsupported parameter: X``, ``unsupported_parameter`` with a ``param`` field, ``X is not supported``, ``unknown parameter: X``, ``unrecognized request argument: X``. We match on both the parameter name and a generic "unsupported/unknown/unrecognized parameter" marker so call sites can reactively retry without the offending key instead of surfacing a noisy auxiliary failure. Generalizes the temperature-specific detector that originally shipped with PR #15621 so the same retry strategy can cover ``max_tokens``, ``seed``, ``top_p``, and any future quirk. Credit @nicholasrae (PR #15416) for the generalization pattern. rFc3 K|]}|vV dSrr)rmarkerrs rrz2_is_unsupported_parameter_error..ls8  vv"      r )zunsupported parameterunsupported_parameterz not supportedzdoes not supportzunknown parameterzunrecognized request argumentzunrecognized parameterzinvalid parameter)rErsr)rr+ param_lowerrs @r_is_unsupported_parameter_errorr1Vs ;B%%''K uC  I)##u      2      r c"t|dS)zBack-compat wrapper: detect API errors where the model rejects ``temperature``. Delegates to :func:`_is_unsupported_parameter_error`; kept as a separate public symbol because existing tests and call sites import it by name. r/)r1)rs r!_is_unsupported_temperature_errorr3xs +3 > >>r ct|t5fdtD}|D]}t|dd}|Kt | t |dd}t |r |n#t$rYnwxYwt|d ddddS#1swxYwYdS)zEDrop cached auxiliary clients for a provider so fresh creds are used.c`g|]*}tt|dk(|+Sr)rNrs)rrrKs r z)_evict_cached_clients..s@   &s3q6{{33zAA AAAr rrNr ) rN_client_cache_lock _client_cacherJ_force_close_async_httpxrrMrypop)r9 stale_keysrclientrNrKs @r_evict_cached_clientsr=sR(22J ))    (    ) )C"&&s,>??BF!(000&vw==H))#   D   c4 ( ( ( ( ) ))))))))))))))))))s6A C#*B C BCBCC C c  t|} |dkr\ddlm}|d}t|ddpdsdSt |dS|d krdd lm}|td ttj d d ttj ddd}t|ddpdsdSt |dS|dkrddl m}m}m}|}t#|t$r |dr ||nd}t|pds |}t|pdsdSt |dSn4#t&$r'} t(d|| Yd} ~ dSd} ~ wwxYwdS)zERefresh short-lived credentials for OAuth-backed auxiliary providers.rBr)!resolve_codex_runtime_credentialsTrurrFrZrxrzr{r|r}r~rr5)read_claude_code_credentials_refresh_oauth_tokenr refreshTokenNz7Auxiliary provider credential refresh failed for %s: %s)rNrr?rsrJrDr=ryrrrrrsrr8r@rArrrrryrYrZ) r9rKr?rryr@rArrrs r_refresh_provider_credentialsrCsn(22J"  ' ' I I I I I I55DIIIEuyyB//5266<<>> u !* - - -4    H H H H H H44$'C :[]c0d0d,e,e$f$f %bi0Mt&T&T U UE uyyB//5266<<>> u !* - - -4  $ $ { { { { { { { { { {0022E3=eT3J3JruyyYgOhOhr((///nrEu{##))++ 2//11u{##))++ u !* - - -4 %  NPZ\_```uuuuu 5s8AG"G3BGG%B!GG H $HH  payment errorfailed_providertaskreasonc Z |}t}|h}|r=||vr'||ddddddd fd|D}g}t D]X\}} ||vr | \} } | *t d|pd |||| pd | | |fcS||Yt d |pd ||d |d S)zTry alternative providers after a payment/credit or connection error. Iterates the standard auto-detection chain, skipping the provider that failed. Returns: (client, model, provider_label) or (None, None, "") if no fallback. rrZrBr)rrZrBrAr@rc<h|]}||Srrm)rs_alias_to_labels r z(_try_payment_fallback..s)HHHq,,Q22HHHr Nu2Auxiliary %s: %s on %s — falling back to %s (%s)callrzr c dat|}|dd}|dd}|dd}|dd}|dd}tstt jdd}|p t}|r;|r9|d kr3|d st d ||d a|p t} |p t} | rp| rn| d vrj| } d} d} |r#| d ks| d rd } |} |pd} t| | | | |pd\}}|$t d| |p| ||p| fSg}tD]\}}|\}}|Y|r3t d||pdd|nt d||pd||fcS||t dd|dS)uFull auto-detection chain. Priority: 1. User's main provider + main model, regardless of provider type. This means auxiliary tasks (compression, vision, web extraction, session search, etc.) use the same model the user configured for chat. Users on OpenRouter/Nous get their chosen chat model; users on DeepSeek/ZAI/Alibaba get theirs; etc. Running aux tasks on the user's picked model keeps behavior predictable — no surprise switches to a cheap fallback model for side tasks. 2. OpenRouter → Nous → custom → Codex → API-key providers (fallback chain, only used when the main provider has no working client). Fr9rrPrWrrrr@r=zOPENAI_BASE_URL is set (%s) but model.provider is '%s'. Auxiliary clients may route to the wrong endpoint. Run: hermes model to reconfigure, or remove OPENAI_BASE_URL from ~/.hermes/.envTr<rN)explicit_base_urlexplicit_api_keyrz2Auxiliary auto-detect: using main provider %s (%s)u4Auxiliary auto-detect: using %s (%s) — skipped: %srrNz$Auxiliary auto-detect: using %s (%s)zAuxiliary auto-detect: no provider available (tried: %s). Compression, summarization, and memory flush will not work. Set OPENROUTER_API_KEY or configure a local model in config.yaml.r)rhr rJ_stale_base_url_warnedrrrsrDrHrFrYrrresolve_provider_clientrPrrr)rrruntime_provider runtime_modelrrruntime_api_mode _env_base _cfg_providerrR main_modelresolved_providerr[r\r<resolvedrUrVrWrPs r _resolve_autorgs%l33G{{:r22KK,,M{{:r22kk)R00O{{:r22 " *I/44::<< (A,?,A,A  *- *!X--%00;;. NN6=    &* "%=(;(=(=M4"2"4"4J2*2\11)   7(!:!:m>V>VW`>a>a!: (  0 .6$ 2  /-%-       KKL%x'=: ? ? ?81z1 1 E,..   v    _ R!5#5Ityy7G7GIIII BE5K]T]^^^5=  U NNW99U##%%% :r cddlm}t|trt ||fSt|t rt ||fS ddlm}m }t||r |||fSn#t$rYnwxYw ddl m }t||r||fSn#t$rYnwxYw|j t|jd}t|j}t!|drt#t$|d<n;t!|drdd lm}||d<nt!|d rd d i|d<|d i||fS)zIConvert a sync client to its async counterpart, preserving Codex routing.r) AsyncOpenAI)rAsyncGeminiNativeClientCopilotACPClientrrrrrrrerr)r&rirrrrrIrWrrrjragent.copilot_acp_clientrlrrsrWrrrrr) sync_clientrPrirrjrl async_kwargs sync_base_urlrs r_to_async_clientrqTs""""""+344=(55u<<+788A,[995@@ [[[[[[[[ k#5 6 6 ?**;77> > ?       ====== k#3 4 4 &% % &      & ,--L ,--M]O<<N*.{*;*; &'' }.E F FN======*A*A*C*C &'' }n = =N+79L*M &' ; & & & & --s$$A:: BB B&& B32B3 model_namecT|s|S ddlm}|||S#t$r|cYSwxYw)zANormalize a resolved model for the provider that will receive it.r)normalize_model_for_provider)hermes_cli.model_normalizertry)rrr9rts r_normalize_resolved_modelrvzsa KKKKKK++JAAA s  '' async_mode raw_codexr[r\rc7tt|}dtdtdtffd 7dZdtdtf7fd }|dkr[t | \} } | d S|r(d |vr$| r"d | vrt d || d }|p| } |rt| | n| | fS|dkrdt\} } | )t dtd St|p| |} |rt| | n| | fS|dkr|t vp+|pddk} t!| \} } | t dd St|p| |} |rt| | n| | fS|dkrĉrkt#}|st dd St|pt$|} t'|t(t+|}|| fSt-\} } | t dd St|p| |} |rt| | n| | fS|dkr|r|}|pdp(t/jddpd}|st dd St|pt3pd|} i}t5|\}}|r||d<t7|drddi|d <n#t7|d!rd"d#lm}||d <t'd[||d$|} || | |} |rt| | n| | fSt<t,t>fD]h}|\} } | Wt|p| |} ttA| d%dpd}|| | |} |rt| | n| | fcSit d&d S d"d'l!m"}||}|rS|#d%d}|#d(d}|#d)d}|s)|r't/j|d}|pd}p|#d*pd}|rat|p$|#d+pt3pd|} t5|\}}|rd|ini}t d,|| |pd-|d.kr d"d/l$m%}|||} nP#tL$rCt d0|t'd[||d$|} |rt| | n| | fcYSwxYwtO| | ||d12}!|rtQ|!| fS|!| fSt'd[||d$|} |d3kr&tS| tTstU| | } n || | |} |rt| | n| | fSt d4|d Sn#tL$rYnwxYw d"d5l+m,}"m-}#m.}$n,#tL$rt d6|Yd SwxYw|"#|}%|%t d7|d S|%j/d(kr|d8krWta\} }&| t d9d St|p|&|} |rt| | n| | fS|#|}'t|'#d(d}(|(s`tc|%j2})|d:kr|)3d;t d<|d=4|)d Stkt|'#d%d6d p|%j7}*tp#|d}&t|p|&|} |d>krRd"d?l9m:}+m;},|,|*r?|+|(|*$} t d@|| |rt| | n| | fSi}-t7|*drd|-d<n3t7|*d!r#d"d#lm}|-<|t'd[|(|*d$|-rd |-ini} |d:krR| rPsN d"dAlm=}.|.| r+t dB| tU| | } n#tL$rYnwxYw|| | |*} t d@|| |rt| | n| | fS|%j/dCkr|$|}'t|p t3|} |dDkrJt|'#d(d}(t|'#d%d}*t|'#dEdpd }/tc|'#dFpg}0| st dGd S|(r|*st dHd Sd"dIl>m?}1|1|(|*|/|0J} t d@|| |rt| | n| | fSt dK|d S|%j/dLkr d"dMl@mA}2mB}3d"dNl$mC}4n+#tL$rt dOYd SwxYw|2st dPd S|3}5dQ}&t|p|&|} |4|5} n3#tL$r&}6t dR|6Yd }6~6d Sd }6~6wwxYwtO| | dSdT|5dU$} t dV| |5|rt| | n| | fS|%j/dWvrK|dkrtd||S|dkrtd||St dX|d St dY|%j/|d S)\uCentral router: given a provider name and optional model, return a configured client with the correct auth, base URL, and API format. The returned client always exposes ``.chat.completions.create()`` — for Codex/Responses API providers, an adapter handles the translation transparently. Args: provider: Provider identifier. One of: "openrouter", "nous", "openai-codex" (or "codex"), "zai", "kimi-coding", "minimax", "minimax-cn", "custom" (OPENAI_BASE_URL + OPENAI_API_KEY), "auto" (full auto-detection chain). model: Model slug override. If None, uses the provider's default auxiliary model. async_mode: If True, return an async-compatible client. raw_codex: If True, return a raw OpenAI client for Codex providers instead of wrapping in CodexAuxiliaryClient. Use this when the caller needs direct access to responses.stream() (e.g., the main agent loop). explicit_base_url: Optional direct OpenAI-compatible endpoint. explicit_api_key: Optional API key paired with explicit_base_url. api_mode: API mode override. One of "chat_completions", "codex_responses", or None (auto-detect). When set to "codex_responses", the client is wrapped in CodexAuxiliaryClient to route through the Responses API. Returns: (client, resolved_model) or (None, None) if auth is unavailable. base_url_str model_strr:ct|trdSrdSdkrdSrdkrdSt|dkr|pd}d|vrdSdS)a(Decide if a plain OpenAI client should be wrapped for Responses API. Returns True when api_mode is explicitly "codex_responses", or when auto-detection (api.openai.com + codex-family model) suggests it. Already-wrapped clients (CodexAuxiliaryClient) are skipped. FrTapi.openai.comrrA)rrrrrE) client_objrzr{ model_lowerrrxs r_needs_codex_wrapz2resolve_provider_client.._needs_codex_wraps j"6 7 7 5  5 ( ( (4  $5555 \ * *.> > >$?1133K+%%tur rfinal_model_strc|||r;tdpd||r |ddndt||S|S)zNWrap a plain OpenAI client in CodexAuxiliaryClient if Responses API is needed.zeresolve_provider_client: wrapping client in CodexAuxiliaryClient (api_mode=%s, model=%s, base_url=%s)z auto-detectedNrzr)rYrZr)r~rrzrrs r_wrap_if_neededz0resolve_provider_client.._wrap_if_neededsn  Z G G E LL7+O_%19 SbS!!r  ; ; ; ( ODD Dr r<rNrrRz\Dropping OpenRouter-format model %r for non-OpenRouter auxiliary provider (using %r instead)rz4resolve_provider_client: openrouter requested but %srZz mimo-v2-omnirzYresolve_provider_client: nous requested but Nous Portal not configured (run: hermes auth)rBzbresolve_provider_client: openai-codex requested but no Codex OAuth token found (run: hermes model)rr@rrzQresolve_provider_client: explicit custom endpoint requested but base_url is emptyrrrrerrrrrrrWzPresolve_provider_client: custom/main requested but no endpoint credentials found)_get_named_custom_providerrkey_envrrPzCresolve_provider_client: named custom provider %r (%s, api_mode=%s)rr5ruNamed custom provider %r declares api_mode=anthropic_messages but the anthropic SDK is not installed — falling back to OpenAI-wire.FrKrzAresolve_provider_client: named custom provider %r has no base_url)rr-resolve_external_process_provider_credentialsz-hermes_cli.auth not available for provider %sz,resolve_provider_client: unknown provider %rr5zOresolve_provider_client: anthropic requested but no Anthropic credentials foundr6z gh auth tokenzJresolve_provider_client: provider %s has no API key configured (tried: %s)rNr(rz resolve_provider_client: %s (%s))!_should_use_copilot_responses_apiudresolve_provider_client: copilot model %s needs Responses API — wrapping with CodexAuxiliaryClientexternal_processr7commandargszVresolve_provider_client: copilot-acp requested but no model was provided or configuredz^resolve_provider_client: copilot-acp requested but external process credentials are incompleterk)rrWrrzLresolve_provider_client: external-process provider %s not directly supportedaws_sdk)has_aws_credentialsresolve_bedrock_region)build_anthropic_bedrock_clientzSresolve_provider_client: bedrock requested but boto3 or anthropic SDK not installedzGresolve_provider_client: bedrock requested but no AWS credentials foundz(anthropic.claude-haiku-4-5-20251001-v1:0z9resolve_provider_client: cannot create Bedrock client: %szaws-sdkzhttps://bedrock-runtime.z.amazonaws.comz)resolve_provider_client: bedrock (%s, %s))oauth_device_codeoauth_externalzMresolve_provider_client: OAuth provider %s not directly supported, try 'auto'z6resolve_provider_client: unhandled auth_type %s for %srr)ErrNrsrDrgrYrZrqrrrrvrbvaluesrDrErrrr rrrrrrsrr&rrrrrrrrrJr8rrrIrWrrrrrrrrrrapi_key_env_varsrrrrrr`rrrupdaterrmrlagent.bedrock_adapterrrrr^)8r9rPrwrxr[r\rrrr<rf final_modelr _is_visionr raw_clientrrrrrrrW_cbaser custom_entrycustom_key_enventry_api_mode _clean_base2_dq2_extra2rrsync_anthropicrrrr default_modelrr tried_sourcesrWrrrzrrrrlrrrregionrrs8 ` ` @rr^r^sP&x00HCCD,  S        6(lCCC >:  SE\\h\3h3F3F LL89> J J JE'x 9C+ 555k* ,<)++ > NNF022   :/0@(KK 9C+ 555k* ,6 ,3355 5 ? ""$$**,,> $:666 > NNO P P P:/0@(KK 9C+ 555k* ,>!!  -344K " TUUU!z3E4M=MxXXK#, 9+ F FJ  , ,$,, > NNP Q Q Q:/0@(KK 9C+ 555k* ,8  0+1133K!'R..00%9-r2288::%$   ","z3<)++<}KE8EE K -),o&$[.AA E,8:M+N'((&{4KLL EEEEEEE+B+B+D+D'(NJNNNNF$_V[+FFF=G/$V[999 +. 0,Z02 4 4F$fhhOFG!78H(SS WVZ<<BCC(fEEAK3(===$k2444 " ; < < <z@ JJJJJJ11(;; ; &**:r::@@BBK%)))R88>>@@J)--i<<BBDDN C. CY~r::@@BB #8'8J'L,*:*::*F*FL"SSUUN- 47]\--g66]:J:L:L]P] &?{%K%K" d59A?D11r Yk>+O=OQQQ "%999 <RRRRRR&<&#[*kTY&&&N"Z<^LLkYY);66U \UUWUU "%666z0@@62&+FFFF,_V[+NNFAK3(===$k24 NNS   :w; x                  DhOOOzz ##H--GExPPPzI%% { " "$2$4$4 !FM~pqqq!z3E4J]HUUK=Gb$V[999fVaMb c44X>>eii 2..//5577  !9::M9$$$$_555 LL6!499]#;#; = = =:&  *b)) * * 0 0 2 2 9 9# > > \'B\  5882FF /0FQQ x   a a a a a a a a((22 4++GhOOO ?;WWWAK3(===$k24 > : : 6$7GL ! ! "8-D E E 6 A A A A A A NN2244 5 5 5M(MM;BJ-w77MM y [   OOOOOO44[AAGLLO#%%%2&+FFF     !h?? 7;OOO9C+ 555k* ,...==hGG/0K9I9K9KXVV } $ $%))Ir223399;;G599Z4455;;==H%))Ir223399;;CtG &))/R00D "1"z "( "9"z A A A A A A%%! F LL;X{ S S S=G/$V[999 +. 0,-5 7 7 7z  i ' '  Y Y Y Y Y Y Y Y N N N N N N N    NNB C C C::  #"$$  LL4 5 5 5:''))B /0FQQ  88@@KK    NN(), . . .::::: * iFFFF     @+vVVV9C+ 555k* ,  E E E v  *65*EE E ~ % %*>5*MM M89A C C Cz NNK$h000 :s EZ3)V<;Z3!!||;8#%%% :r c0t|dduSr)rrns r _strict_vision_backend_availablers )( 3 3A 6d BBr c^g}t}|rh|dvrd|tvr%t|r||n6t |t \}}|||tD]*}||vr$t|r||+|S)uReturn the currently available vision backends in auto-selection order. Order: active provider → OpenRouter → Nous → stop. This is the single source of truth for setup, tool gating, and runtime auto-routing of vision tasks. rZ)rH_VISION_AUTO_PROVIDER_ORDERrrr^r) availablerRr<rps rget_available_vision_backendsrsI'))M0l:: 7 7 7/ >> 0  //// ?O?Q?QRRIFA!  /// (   I  "B1"E"E    Q    r )rWrrwrctd||||\}}}}t|}dtdtdttffd } |r!t d|||\} } | d Sd| | fS|d krt } t} | r| d vr| d krBt| \}}|-t d | |pp| | | ||Sn_t | | }t | ||\}}|-t d | |p|| | ||p|StD],}|| kr t|\}}|| |||cS-tddS|tvrt|\}}| |||St||\} } | |ddfS|| | fS)arResolve the client actually used for vision tasks. Direct endpoint overrides take precedence over provider selection. Explicit provider overrides still use the generic provider router for non-standard backends, so users can intentionally force experimental providers. Auto mode stays conservative and only tries vision backends known to work today. rrernrcX||ddfSp|}rt||\}}|||fS|||fSr)rq)rernrr async_client async_modelrwresolved_models r _finalizez1resolve_vision_provider_client.._finalizesW  $dD0 0$5  @(8k(R(R %L+$lK? ? +{::r r@)rPrwr[r\rN)r@NNr<rZrZz/Vision auto-detect: using main provider %s (%s))rz'Auxiliary vision client: none availabler)rrrsrrr^rHrrrYrPrbrJrrZ_get_cached_client)r9rPrWrrwrresolved_base_urlresolved_api_keyresolved_api_moderr<rrRrdrnr vision_model rpc_client rpc_modelrrs ` @rresolve_vision_provider_clientrsYu(E8WYYUI~02BDU+955I;S;s;8TW=;;;;;;; -5  !/-&      >'',,F,-- %''  N],>>&&-KM-Z-Z* ]*KKI%}'T'T*%9]KOOO + 7::=*UU (?!<.)0)0)0% I)KKI%y'@L%9%z93L NNN 5 H HIM)))G )R)R &K& yKGGGGG'  >???///%CI%N%N" ]yK???,Y 6GIIIFK ~$$$ fk ))r c<trttniS)zReturn extra_body kwargs for auxiliary API calls. Includes Nous Portal product tags when the auxiliary client is backed by Nous Portal. Returns empty dict otherwise. )rhrNOUS_EXTRA_BODYrr rget_auxiliary_extra_bodyr s %6 =4 2=r rct}tjd}|s%tt |dkrd|iSd|iS)aFReturn the correct max tokens kwarg for the auxiliary client's provider. OpenRouter and local models use 'max_tokens'. Direct OpenAI with newer models (gpt-4o, o-series, gpt-5+) requires 'max_completion_tokens'. The Codex adapter translates max_tokens internally, so we use max_tokens for it as well. rNr}r.r-)rrrrsrkr)rrrs rauxiliary_max_tokens_paramr s]+,,K Y+ , ,F 0!!)!+..2BBB'// %  r r8@rWrrrct||dkr tfdtDnd}|||pd|pd|pd|fS)Nr<c3DK|]}|dVdS)rNrm)rr rs rrz$_client_cache_key..@ s1QQ5 E2..QQQQQQr rr)r tupler )r9rwrWrrr runtime_keyrs @r_client_cache_keyr6 sf&l33GU]agUgUg%QQQQz(neuter_async_httpx_del.. str N)openai._base_clientr__del__rAttributeErrorrs rneuter_async_httpx_delr| sR4 ??????*;*;'''  (     s ''c ddlm}t|dd}|t|dds|j|_dSdSdS#t $rYdSwxYw)uMark the httpx AsyncClient inside an AsyncOpenAI client as closed. This prevents ``AsyncHttpxClientWrapper.__del__`` from scheduling ``aclose()`` on a (potentially closed) event loop, which causes ``RuntimeError: Event loop is closed`` → prompt_toolkit's "Press ENTER to continue..." handler. We intentionally do NOT run the full async close path — the connections will be dropped by the OS when the process exits. r) ClientStaterN is_closedT) httpx._clientrrCLOSED_statery)r<rinners rr9r9 s ------ 400  WUK%F%F &-ELLL          s6> A  A cddl}t5ttD]b\}}|d}|t | t |dd}|r||s |S#t$rY_wxYwt ddddS#1swxYwYdS)zClose all cached clients (sync and async) to prevent event-loop errors. Call this during CLI shutdown, *before* the event loop is closed, to avoid ``AsyncHttpxClientWrapper.__del__`` raising on a dead loop. rNr ) inspectr7rr8r"r9riscoroutinefunctionryclear)rrrr<rNs rshutdown_cached_clientsr s0 NNN }224455  JC1XF~ %V , , , "67D99G$?$?$I$IHJJJ    !s6AB<2BB< BB<BB<<CCc$t5g}tD]E\}}|\}}}|8|r$t |||F|D] }t|= ddddS#1swxYwYdS)uKForce-close cached async clients whose event loop is closed. Call this after each agent turn to proactively clean up stale clients before GC can trigger ``AsyncHttpxClientWrapper.__del__`` on them. This is defense-in-depth — the primary fix is ``neuter_async_httpx_del`` which disables ``__del__`` entirely. N)r7r8r"rr9r)r;rrr<_default cached_loops rcleanup_stale_async_clientsr s ## '--// ' 'JC,1 )FHk&;+@+@+B+B&(000!!#&&& # #Cc"" ###################sA/BB  B c |t|ddt|ddfD]5}|r1ttt|ddpddrdS6dS)Nrr<rWrrTF)rrrs)r<rs r_is_openrouter_clientr sr 488'&(TX:Y:YZ  (WS*b-I-I-OR)P)PRabb 44 5r cached_defaultc8|rd|vrt|s|S|p|S)zDrop OpenRouter-format model slugs (with '/') for non-OpenRouter clients. Mirrors the guard in resolve_provider_client() which is skipped on cache hits. rR)r)r<rPrs r _compat_modelr s2  &;F&C&C  "N"r c d}|r* ddl}|}n#t$rYnwxYwt|} t ||||||} t 5| t vrt | \} } } |rX| duo| |uo|  }|r!t| || }| |fcdddSt| t | =n!t| || }| |fcdddSdddn #1swxYwYt||||||| \}}||}t 5| t vrtt tkrpttt \}}t|dt |=tt tkp|||ft | <nt | \}}}dddn #1swxYwY||p|fS)aGet or create a cached client for the given provider. Async clients (AsyncOpenAI) use httpx.AsyncClient internally, which binds to the event loop that was current when the client was created. Using such a client on a *different* loop causes deadlocks or RuntimeError. To prevent cross-loop issues, the cache validates on every async hit that the cached loop is the *current, open* loop. If the loop changed (e.g. a new gateway worker-thread loop), the stale entry is replaced in-place rather than creating an additional entry. This keeps cache size bounded to one entry per unique provider config, preventing the fd-exhaustion that previously occurred in long-running gateways where recycled worker threads created unbounded entries (#10200). Nrr)r[r\rr)rrrr rr7r8rrr9r^ru_CLIENT_CACHE_MAX_SIZEnextiterr")r9rPrwrWrrrrrrr cached_clientrrloop_ok effectiver<rr evict_key evict_entryrs rrr s>:L  " " " "..00LL    D %l33G!! I 00  % %9Fy9Q 6M>; 0  t+4#|34'11333 4 -mUN S SI()300000000 )777!),,)-OO $i/)00000000000000000000000,4 " FM"  D D ---((,BBB-1$}7J7J7L7L2M2M-N-N*I{,[^<<<%i0-((,BBB-3M:+N i((+8+C( q D D D D D D D D D D D D D D D 5)M ))s8 ,,AC<7,C<<DD+B6G--G14G1cd}d}d}d}d} |r"t|} t| ddpd}t| ddpd}t| ddpd}t| ddpd}t| ddpd} |p|} | } |rd| ||| fS|r|| ||| fS|r|rd| ||| fS|r |d kr|| dd| fSd | dd| fSd | dd| fS) aDetermine provider + model for a call. Priority: 1. Explicit provider/model/base_url/api_key args (always win) 2. Config file (auxiliary.{task}.provider/model/base_url) 3. "auto" (full auto-detection chain) Returns (provider, model, base_url, api_key, api_mode) where model may be None (use provider default). When base_url is set, provider is forced to "custom" and the task uses that direct endpoint. api_mode is one of "chat_completions", "codex_responses", or None (auto-detect). Nr9rrPrWrrr@r<)_get_auxiliary_task_configrsrJrD) rFr9rPrWrr cfg_modelr cfg_api_key cfg_api_mode task_configrrs rrrN s&LILKL L066 ;??:r::;;AACCKt  4455;;==E ;??:r::;;AACCKt +//)R8899??AAIT ;??:r::;;AACCKt 'iN$N74/@ @@r >@c8|siS ddlm}|}n#t$ricYSwxYwt|tr|dini}t|tr||ini}t|tr|niS)zDReturn the config dict for auxiliary., or {} when unavailable.rr auxiliary)rrrrrrrJ)rFrconfigauxr s rrr s  111111  )3FD)A)A I&**[" % % %rC'1#t'<'<D#''$###"K$[$77 ?;;R?s  &&rc|s|St|}|d}|' t|S#ttf$rYnwxYw|S)zPRead timeout from auxiliary.{task}.timeout in config, falling back to *default*.timeout)rrJrr TypeError)rFrr raws r_get_task_timeoutr sm ,T22K //) $ $C  :: I&    D  Ns;AAct|}|d}t|trt|SiS)zFRead auxiliary..extra_body and return a shallow copy when valid. extra_body)rrJrrr)rFr rs r_get_task_extra_bodyr sC,T22K //, ' 'C#tCyy Ir r^cL|tvrdS|pd}d|vS)zDetect if an endpoint expects Anthropic-format content blocks. Returns True for known Anthropic-compatible providers (MiniMax) and any endpoint whose URL contains ``/anthropic`` in the path. Trr)_ANTHROPIC_COMPAT_PROVIDERSrE)r9rW url_lowers r_is_anthropic_compat_endpointr s5 ...tR&&((I 9 $$r rc g}|D]o}|d}t|ts||Cg}d}|D]}|ddkr|dpidd}|drv|d\}} } d } d |vr:d |vr6|d d d d d d } |dd| | ddn|dd|ddd}||||ri|d|in|q|S)zConvert OpenAI ``image_url`` content blocks to Anthropic ``image`` blocks. Only touches messages that have list-type content with ``image_url`` blocks; plain text messages pass through unchanged. rFrrrrzdata:,z image/pngr>;r?rimagert)r media_typerj)rrb)rrT)rJrrrrrF partitionrG) rrrr new_contentchangedblock image_url_valheaderrb64datar"s r#_convert_openai_images_to_anthropicr* s I$N$N'')$$'4((    S ! ! !   * *Eyy  K//!&;!7!7!=2 B B5" M M  ++G44)6)@)@)E)E&FAw!,Jf}}%+\\#q%9%9!%<%B%B3%J%J1%M && '$,*4$+##(( && '$)#0##((""5))))GL8C8K888MMMM r r/r-rrrc |||d} t||} | turd}n| | }|ddlm} | |rd}||| d<|:|dkr/|p t } t | dkr|| d<n || d <n|| d <|r|| d <t |pi} |d kstr*| d g d g| r| | d<| S)zLBuild kwargs for .chat.completions.create() with model/provider adjustments.)rPrrNrr3r/r@r}r.r-rrZrfrgr) r[rOr8r4rrrrh setdefaultextend)r9rPrr/r-rrrrWrfixed_temperaturer4r merged_extras r_build_call_kwargsr0 s]F 5UHEE,,,  &' DDDDDD # #E * * K +} x  "@&>&@&@K --1AAA2<.//'1|$$#-F<   w (b))L6.++224J3KLLL,+| Mr r?c `|td|pdd |j}|rt|ddstdnf#ttt f$rL}t |j}t|dd}td|pdd |d |d |d}~wwxYw|S) a3Validate that an LLM response has the expected .choices[0].message shape. Fails fast with a clear error instead of letting malformed payloads propagate to downstream consumers where they crash with misleading AttributeError (e.g. "'str' object has no attribute 'choices'"). See #7264. Nz Auxiliary rMz: LLM returned None responserrzmissing choices[0].messagexz&: LLM returned invalid response (type=z): ug. Expected object with .choices[0].message — check provider adapter or custom endpoint compatibility.) rrr;rr IndexErrorrrrs)r?rFrr response_typeresponse_previews r_validate_llm_responser6- s E E E E   " ?ggaj)<< ? !=>> > ? Iz 2X/ x==#. 9 9 9" 9 9'7 9 9 9     Os.AB+AB&&B+) r9rPrWrrr/r-rrrc  t|||||\} } }}}t|}|| pi|dkr~t| dkr| n|| p||p||p|d\}}}|9| dkr3|s1td| td| d\}}}|t d|d | d |p| } nt| | |||| \}}|| pd  }|r,|d vr(t d|d| d|s2t d|pd| td|\}}|t d|d | d | | nt|}tt|d|pd }|r-t d|| pd|pd|r d|vrd|nd t| ||||| |||p| }tt|dd pd }t!| |rt#|d|d< t%|jjjd,i||S#t,$r}d|vrt/|rt1|}|ddt d|pd t%|jjjd,i||cYd}~S#t,$rS}t|}t5|s't7|st9|s d|vsd|vs|}|}Yd}~nd}~wwxYwt|}|d|vsd|vst;|dr~|dd||d< t%|jjjd,i||cYd}~S#t,$r+}t5|st7|s|}Yd}~nd}~wwxYw| d kpt=|d!}t9|r|rt?| pd |d||||"\} }!| gt d#|pd|!r|!| d$kr|!|d$<t%| jjjd,i||cYd}~St9|r| d%vr|stC| rt d&|pd| |dkrt| |dd'dnt| | |||| \}"}#|"t| |#p||||| ||| }tt|"dd pd }$t!| |$rt#|d|d<t%|"jjjd,i||cYd}~St5|pt7|}%| d%v}&|%r|&rt5|rd(nd)}'t d*|pd|'| |tE| ||'+\}(})}*|(`t|*|)|||| ||tt|(dd pd  }+t%|(jjjd,i|+|cYd}~Sd}~wwxYw)-aCentralized synchronous LLM call. Resolves provider + model (from task config, explicit args, or auto-detect), handles auth, request formatting, and model-specific arg adjustments. Args: task: Auxiliary task name ("compression", "vision", "web_extract", "session_search", "skills_hub", "mcp", "title_generation"). Reads provider:model from config/env. Ignored if provider is set. provider: Explicit provider override. model: Explicit model override. messages: Chat messages list. temperature: Sampling temperature (None = provider default). max_tokens: Max output tokens (handles max_tokens vs max_completion_tokens). tools: Tool definitions (for function calling). timeout: Request timeout in seconds (None = read from auxiliary.{task}.timeout config). extra_body: Additional request body fields. Returns: Response object with .choices[0].message.content Raises: RuntimeError: If no provider is configured. rr<Fr9rPrWrrwNDVision provider %s unavailable, falling back to auto vision backendsr9rPrw$No LLM provider configured for task= provider=. Run: hermes setuprrr<rr@ Provider ':' is set in config.yaml but no API key was found. Set the U_API_KEY environment variable, or switch to a different provider with `hermes model`.BAuxiliary %s: provider %s unavailable, trying auto-detection chainrMrrWzAuxiliary %s: using %s (%s)%srrz at r/r-rrrrWrr/zEAuxiliary %s: provider rejected temperature; retrying once without itr-r/r.rZinference-api.nousresearch.com)rrPrwrWrrrzDAuxiliary %s: refreshed Nous runtime credentials after 401, retryingrPr<rNzAAuxiliary %s: refreshed %s credentials after auth error, retryingr?rDconnection errorz,Auxiliary %s: %s on %s (%s), trying fallbackrGr)#rrrrrYrrrrDrEupperrPrrsrr0rr*r6rrrryr3rr:rr'r*r1rrrJrCrX),rFr9rPrWrrrr/r-rrrrerrrreffective_extra_bodyeffective_providerr<r _expliciteffective_timeout _base_infor _client_base first_err retry_kwargs retry_err retry_err_strerr_strclient_is_nousrefreshed_clientrefreshed_model retry_client retry_model _retry_baseshould_fallbackis_autorG fb_clientfb_modelfb_label fb_kwargss, rcall_llmr`L s& Na} hxa2a2]~'8:JL]/55 0b111 x2P*;v*E*E&&8 )E&2($/ 3 3 3 /FK >/699BS9 NNV!   7U$ 777 3  >%t%%GX%%% /C2C0  &$&%      >+0b7799??AAI Y.NNN"XXX*3//*;*;XXX% \ ` NF,=???&8l&[&[&[# >%t%%GX%%%&& &$+#6??% T WNF$5x'' 3!2)#(bb  ,)&!2 0!2%1 * k  +#5)#2{ $/#-# 1#7!2 $ $ $L#&glJ&K&K&Qr"R"RK45F TTq3VWcdnWo3p3p Z01< )5<LL|LLdTTTTTTTT,I66Y:Ny:Y:Y$'99  Jw J(9)(D(D\__J\F KKF0A9 N N N,A!4-8-8-8 )Ix$.h + ):3 J!C!C!IrJJ LLL .5IN.5BB BBDJJJJJJJJ aPs$I** Z5AZ $K5/Z5 M?A M Z MAZ$O>Z O9!O4/Z4O99B(Z!Z'DZ)Z/C Z:ZZZcddl}|jdj}|jpd}|r<|dd||j|jz}|r|Sg}dD]i}t||d}|rTt|tr?|r+||vr'| |jt|dd}|rt|tr|D]} t| tr| dp)| d p| d } | rO| |vrK| t| tr| nt| |rd |SdS) uExtract content from an LLM response, falling back to reasoning fields. Mirrors the main agent loop's behavior when a reasoning model (DeepSeek-R1, Qwen-QwQ, etc.) returns ``content=None`` with reasoning in structured fields. Resolution order: 1. ``message.content`` — strip inline think/reasoning blocks, check for remaining non-whitespace text. 2. ``message.reasoning`` / ``message.reasoning_content`` — direct structured reasoning fields (DeepSeek, Moonshot, Novita, etc.). 3. ``message.reasoning_details`` — OpenRouter unified array format. Returns the best available text, or ``""`` if nothing found. rNrzz<(?:think|thinking|reasoning|thought|REASONING_SCRATCHPAD)>.*?)flags)r7reasoning_contentreasoning_detailssummaryrrz )rerrrrDsubDOTALL IGNORECASErrrrsrrrrJr) r?rfrrcleanedreasoning_partsr rdetailsrres rextract_content_or_reasoningrma sIII  1  %C{ b''))G && L ry2=8   %''   N"$O300c5$''  0:c3'' 0CIIKK 0CV>V+h7==???\_`g\h\hiii,{{?+++ 2r ) r9rPrWrr/r-rrrc " Kt|||||\} } } }}t|}|| pi|dkr~t| dkr| n|| p|| p||p|d\}}}|9| dkr3| s1td| td| d\}}}|t d|d | d |p| } nt| | d| || \}}|| pd  }|r,|d vr(t d|d| d| s2t d|pd| tdd\}}|t d|d | d | | nt|}tt|dd pd }t| ||||||||p|  }t!| |rt#|d|d< t%|jjjd'i|d{V|S#t,$r`}d|vrt/|rt1|}|ddt d|pd t%|jjjd'i|d{V|cYd}~S#t,$rS}t|}t5|s't7|st9|s d|vsd|vs|}|}Yd}~nd}~wwxYwt|}|d|vsd|vst;|dr|dd||d< t%|jjjd'i|d{V|cYd}~S#t,$r+}t5|st7|s|}Yd}~nd}~wwxYw| dkpt=|d}t9|r|rt?| pd|d| ||\}}|mt d|pd|r|| d kr||d <t%|jjjd'i|d{V|cYd}~St9|r| d!vr|stC| rt d"|pd| |dkrt| |d\} }!}"nt| | d| || \}!}"|!t| |"p||||||||  }tt|!dd pd }#t!| |#rt#|d|d<t%|!jjjd'i|d{V|cYd}~St5|pt7|}$| d!v}%|$r|%rt5|rd#nd$}&t d%|pd|&| |tE| ||&&\}'}(})|'t|)|(||||||tt|'dd pd  }*tG|'|(pd \}+},|,r|,|* d kr|,|*d <t%|+jjjd'i|*d{V|cYd}~Sd}~wwxYw)(zqCentralized asynchronous LLM call. Same as call_llm() but async. See call_llm() for full documentation. rr<Tr8Nr9r:r;r<r=)rwrWrrrr>r?r@rArBrM)rwrWrCrr/zMAuxiliary %s (async): provider rejected temperature; retrying once without itr-r/r.rZrD)rrPrwrWrrzLAuxiliary %s (async): refreshed Nous runtime credentials after 401, retryingrPrEzIAuxiliary %s (async): refreshed %s credentials after auth error, retryingrDrFz4Auxiliary %s (async): %s on %s (%s), trying fallbackrGr)$rrrrrYrrrrDrErHrPrrsrr0rr*r6rrrryr3rr:rr'r*r1rrrJrCrXrq)-rFr9rPrWrrr/r-rrrrerrrrrIrJr<rrKrLrNrrOrPrQrRrSrTrUrVrrWrXrYrZr[rGr\r]r^r_async_fbasync_fb_models- rasync_call_llmrq sM $a} hxa2a2]~'8:JL]/55 0b111 x2P*;v*E*E&&8 )E&2($/ 3 3 3 /FK >/699BS9 NNV!   7U$777 3  >%t%%GX%%% /C2C0  &$&      >*0b7799??AAI Y.NNN"XXX*3//*;*;XXX % R ` NF,=???&8D&Q&Q&Q# >%t%%GX%%%&& &$+#6??$ Z _NF$58##3Q!2)#'4440A|[[ 1C)&#'!2 0!2 111-L+ +#5)#2{ $/#-# 1#7!2 $ $ $L#&glJ&K&K&Qr"R"RK45F TTq3VWcdnWo3p3p Z01Bl/;BRR\RRRRRRRRTXZZZZZZZZ,I66Y:Ny:Y:Y#'99  Ow O(9)(D(D\__J\F KKN0A9 N N N,A!4-8-8-8 )Ix$.h + ):3 J!C!C!IrJJ LLL ,A L Z  LAZ *N Z N>!N94Z 9N>>B-Z +Z1DZ 6Zrs"""H   !!!!!!333333333333337777777777++++++------000000TTTTTTTTTT  8 $ $3 hX E   E   E  5 E E U M #\ ,!" k#$'&189hsm999992"688&###6(3-6D6666# C=sm *' *- ,)$/)00d38n* ++c3h<(7 655555<222234 44- D9!/##k1#=$C$DcN$$$$N##"  tXc]/B)C     """""" . .# . .c . . . .(-C-C----`` ` ` ` ` ` ` ` F########""""""""$ D D D D D D D D######## ........Q Q Q Q Q Q Q Q h########         DDDDDDDD######## ........#$####LIDISIIII HHHHH 8=%PSUXPX/AZ6((3-((((VP5&)98C=)H#IPPPPnCx/#>?CCCC& 4# 4 4 4 4??d?uXf-=x}-L'M????D#*S&/8x}hsmXc]'R!S/8/8/8/8d# :$#MeHSM8C=$@A#M#M#M#MLQE(3-#67QQQQ2-chsmXc]:;-c-c-c-cb$* !* P (4S>*B tCQTH~     T%[    9(iD4a adaaaa34D?9?????)C)D))))*&C&D&&&&V!,,, , , 8C=(3- ,- ,,,,^XXc3h 8XE(SYJZ\deh\iJiDjXXXXL#.#.#.#.#.L (3- 3 8TW=    ! -1rrr rr r  r  rr4S>*r 8C=(3- '(rrrrp .2 4S>* 8F Xc] *+ 2`d#XdSVX[S[nE]& -#-3---- S U8C=(SV-;W5X    CsCtCCCCtCy4#b*#! b*b*b*smb* C=b*sm b* c] b*  b* 8C=(3-# 67b*b*b*b*J>$>>>>!c!d!!!!H%' tE5L!&&&#Y^%%#!"-1 ^ ^ ^ ^ ^sm ^ c] ^ sm ^4S>* ^  ^ ^ ^ ^lp G G GE G3 GxPS} Geh Gtx G G G G&#!"-1'''' C=' ' sm ' c] 'sm'4S>*' 8C=(3- '(''''T    B S T    (6####&#$###hsm#Xc]#W_`cWd####-1[*[*[* [*[* [*  [*  [*4S>*[* 8C=(3- '([*[*[*[*~ 2A2A 2A2A 2A 2A  2A  3 x}hsmXc] JK 2A2A2A2Aj @S @T#s(^ @ @ @ @3G  C % 5    stCH~(iL(ABB %C %3 %4 % % % %,$,4,,,,h$( $ !%"::: ::% :  : D> :::sm: ::::zSs@R-1RRR RR  R  R  R4S>*RRRR RRR RRRRj5c5555r\\\\ \\  \  \  \\\\ \\\ \\\\\\r