o;i >UdZddlZddlZddlZddlZddlZddlZddlZddlZ ddl Z ddl Z ddl Z ddl mZmZddlmZddlmZejeZehdZeddhZed d hZd efd Zddeded efdZded efdZ deded efdZ!deded efdZ"ded efdZ#d edzfdZ$ded e%eedzffdZ&d e'efdZ(ddedededzd efdZ)d ee'eze%ed!fze*ezdzd efd"Z+ ddd#d$edzd ee'eze%ed!fze*ezdzd edzfd%Z,d&edzd e-fd'Z.d&edzd e%e-e-ffd(Z/dd)ed*edzd efd+Z0dd,l1m2Z2m3Z3dd-l4m4Z4dd.l5m6Z6dd/l7m8Z8m9Z9m:Z:m;Z;mZ>m?Z?dd0l@mAZAdd.l5m6ZBe jCDdeeBeEFjGd1dd2lHmIZImJZJdd3lKmLZLmMZMdd4lNmOZOd5ZPdd7ed8ed efd9ZQd:ZReOd;d<ZSd e6fd=ZTd>eUd efd?ZVdd>eUded efdAZWdd7ededBed efdCZXddEed efdFZYeOdGdHZZd e6fdIZ[dd>eUded efdJZ\dd7ededBed efdKZ]eOdLdMZ^dNdOdPdQdRdSZ_d e6fdTZ`dd>eUded efdVZaeOdWdXZbidYdZd[d\d]d^d_d`dad^dbdcdddedfdgdhdgdidjdkd^dld^dmdndodpdqdrdsdtZcd e6fduZdd>eUdved efdwZeddEed efdxZfGdydzeAZgGd{d|eAZhe2Gd}d~ZiejjdejkejjdejkejjdejkfZle%ejmed!fend<ddZoe2GddZpGddeZqd dde8eeifdedeided df dZrdZse.wav.flac.m4a.mp3.ogg.opusr r r r returncjt|d|}t|pdS)z=Normalize a Platform enum / raw string into a lowercase name.value)getattrstrlower)platformrs ;/home/ubuntu/.hermes/hermes-agent/gateway/platforms/base.py_platform_namer%s1 Hgx 0 0E u{   ! ! # ##Fextis_voicec|pd}|tvrdSt|dkr|tvr|S|tvSdS)aReturn True when a media file should use the platform's audio sender. Other platforms: every recognized audio extension routes through the audio sender. Telegram: the Bot API only accepts MP3/M4A for sendAudio and Opus/OGG for sendVoice. Opus/OGG is only routed as audio when the caller flagged ``is_voice=True`` (so we don't turn a regular audio attachment into a voice bubble just because the file happens to be Opus). Everything else falls through to document delivery by returning ``False``. rFtelegramT)r _AUDIO_EXTSr_TELEGRAM_VOICE_EXTS_TELEGRAM_AUDIO_ATTACHMENT_EXTS)rrrnormalized_exts rshould_send_media_as_audior +s^iR&&((N[((uh:-- 1 1 1O!@@@ 4rscLt|ddzS)uCount UTF-16 code units in *s*. Telegram's message-length limit (4 096) is measured in UTF-16 code units, **not** Unicode code-points. Characters outside the Basic Multilingual Plane (emoji like 😀, CJK Extension B, musical symbols, …) are encoded as surrogate pairs and therefore consume **two** UTF-16 code units each, even though Python's ``len()`` counts them as one. Ported from nearai/ironclaw#2304 which discovered the same discrepancy in Rust's ``chars().count()``. z utf-16-le)lenencode)r!s r utf16_lenr&Bs# qxx $$ % % **rlimitct||kr|Sdt|}}||kr4||zdzdz}t|d||kr|}n|dz }||k4|d|S)uReturn the longest prefix of *s* whose UTF-16 length ≤ *limit*. Unlike a plain ``s[:limit]``, this respects surrogate-pair boundaries so we never slice a multi-code-unit character in half. rr#N)r&r$)r!r'lohimids r_prefix_within_utf16_limitr-Qs ||u AB r''Bw{q  QttW   & &BBqB r'' SbS6Mrbudgetc|||krt|Sdt|}}||kr0||zdzdz}||d||kr|}n|dz }||k0|S)a8Return the largest codepoint offset *n* such that ``len_fn(s[:n]) <= budget``. Used by :meth:`BasePlatformAdapter.truncate_message` when *len_fn* measures length in units different from Python codepoints (e.g. UTF-16 code units). Falls back to binary search which is O(log n) calls to *len_fn*. rr)r#Nr$)r!r.len_fnr*r+r,s r_custom_unit_to_cpr2dsvayyF1vv AB r''Bw{q  6!DSD'??f $ $BBqB r'' Irhostc tj|}|jrdSt|ddr|jjrdSdS#t $rYnwxYw t j|dt jt j }|D],\}}}}}tj|d}|jsdS-dS#t j tf$rYdSwxYw)aReturn True if *host* would expose the server beyond loopback. Loopback addresses (127.0.0.1, ::1, IPv4-mapped ::ffff:127.0.0.1) are local-only. Unspecified addresses (0.0.0.0, ::) bind all interfaces. Hostnames are resolved; DNS failure fails closed. F ipv4_mappedNTr) ipaddress ip_address is_loopbackrr5 ValueError_socket getaddrinfo AF_UNSPEC SOCK_STREAMgaierrorOSError)r3addrresolved_family_type_proto _canonnamesockaddrs ris_network_accessiblerGws  #D))   5 4 - - $2B2N 5t       & $)7+>   =E   8GUFJ' 44D# tt u  g &tts/AA A  A AB-*B--CCc2tjdkrdS tjddgddtj}n#t $rYdSwxYwi}|D]\}|}d|vrB|d\}}}|||<]d D]W\}}}| |d kr8| |} | |} | r | r d | d | cSXdS) zRead the macOS system HTTP(S) proxy via ``scutil --proxy``. Returns an ``http://host:port`` URL string if an HTTP or HTTPS proxy is enabled, otherwise *None*. Falls back silently on non-macOS or on any subprocess error. darwinNscutilz--proxyT)timeouttextstderrz : )) HTTPSEnable HTTPSProxy HTTPSPort) HTTPEnable HTTPProxyHTTPPort1zhttp://:) sysr subprocess check_outputDEVNULL Exception splitlinesstrip partitionget) outpropslinekey_val enable_keyhost_keyport_keyr3ports r_detect_macos_system_proxyrjsU |xt% y !14 @R    ttE  --zz|| D==..//KCC!$E#))++ +//& Hh 99Z C ' '99X&&D99X&&D / /........ 4s$9 AArct|pd}|sdSd|vrDt|}|jpdd|jfS|drd|vr|ddd\}}}d}|dr3|dd rt|dd}|d|fS| ddkrc| d\}}}| r6|dt|fS|d ddfS) Nr)rN://.[]r)rVz[]) rr]rhostnamerrstripri startswithr^isdigitintcount rpartition)rrawparsedr3rdrestri maybe_ports r_split_host_portr{s ekr   " "C x ||#%2,,..55c::FKGG ~~c.sczzABB))#.. a ??3   !DH$4$4$6$6 !tABBx==Dzz||""3''-- yy~~!nnS11a      =::<<&&s++S__< < 99;;  T " " ) )# . . 44rcg}dD]T}tj|d}|d|dDU|S)N)NO_PROXYno_proxyrc3fK|],}||V-dSNr]).0parts r z$_no_proxy_entries..s7OO$**,,Otzz||OOOOOOr,)osenvironr_extendsplit)entriesrcrws r_no_proxy_entriesrs`G'PPjnnS"%%OO #OOOOOOO Nrentryric$t|pd}|sdS|dkrdSt|\}}| |||krdS||dS|sdS t j|d} t j||vS#t$rYdSwxYw#t$rYnwxYw t j|} t j||kS#t$rYdSwxYw#t$rYnwxYw|dr|dd}| |S|dr#||ddkp| |S||kp| d|S) NrF*T)strict*.r)rm) rr]rr{r6 ip_networkr7r9rrendswith) rr3ritoken token_host token_portnetworktoken_ipsuffixs r_no_proxy_entry_matchesrs     " " $ $ * * , ,E u ||t-e44J $"2zT7I7Iu$,u u &z%@@@ '--8 8   55        ' 33 '--9 9   55       T""%ABB}}V$$$S!!Cz!""~%Bz)B)BB :  @/?:/?/?!@!@@s`+B)B B&"B)%B&&B)) B65B6:C8C'' C51C84C55C88 DD target_hosts.ct}|r|sdSt|tr|g}nt|}|D]C}t t|\s$t fd|DrdSDdS)zReturn True when NO_PROXY/no_proxy matches at least one target host. Supports exact hosts, domain suffixes, wildcard suffixes, IP literals, CIDR ranges, optional host:port entries, and ``*``. Fc3:K|]}t|VdSr)r)rrr3ris rrz&should_bypass_proxy..s0OOe&udD99OOOOOOrT)r isinstancerlistr{any)rr candidates candidater3ris @@rshould_bypass_proxyrs  !!G ,u,$$("^ ,''  %c)nn55 d   OOOOOwOOO O O 44  5r)rplatform_env_varc|rUtj|pd}|r t |rdSt |SdD]Z}tj|pd}|r#t |rdSt |cS[t t }|rt |rdS|S)uReturn a proxy URL from env vars, or macOS system proxy. Check order: 0. *platform_env_var* (e.g. ``DISCORD_PROXY``) — highest priority 1. HTTPS_PROXY / HTTP_PROXY / ALL_PROXY (and lowercase variants) 2. macOS system proxy via ``scutil --proxy`` (auto-detect) Returns *None* if no proxy is found, or if NO_PROXY/no_proxy matches one of ``target_hosts``. rN) HTTPS_PROXY HTTP_PROXY ALL_PROXY https_proxy http_proxy all_proxy)rrr_r]rrrj)rrrrcdetecteds rresolve_proxy_urlrs. 0117R>>@@  ."<00 t&u-- -:..$$*1133  ."<00 tt&u-- - - - .##=#?#?@@H' 55t Or proxy_urlc|siS|drO ddlm}||d}d|iS#t $r t d|icYSwxYwd|iS) uBuild kwargs for ``commands.Bot()`` / ``discord.Client()`` with proxy. Returns: - SOCKS URL → ``{"connector": ProxyConnector(..., rdns=True)}`` - HTTP URL → ``{"proxy": url}`` - *None* → ``{}`` ``rdns=True`` forces remote DNS resolution through the proxy — required by many SOCKS implementations (Shadowrocket, Clash) and essential for bypassing DNS pollution behind the GFW. socksrProxyConnectorTrdns connectorVaiohttp_socks not installed — SOCKS proxy %s ignored. Run: pip install aiohttp-socksproxy)rrr aiohttp_socksrfrom_url ImportErrorloggerwarningrrrs rproxy_kwargs_for_botr;s  ##G,,   4 4 4 4 4 4&// /EEI+ +    NN1    III   Y s A'A87A8c|siifS ddlm}||d}d|iifS#t$rQ|dr!t d|iifcYSid|ifcYSwxYw) uBuild kwargs for standalone ``aiohttp.ClientSession`` with proxy. Returns ``(session_kwargs, request_kwargs)`` where: - With aiohttp-socks → ``({"connector": ProxyConnector(...)}, {})`` for *all* proxy schemes (SOCKS **and** HTTP/HTTPS). - HTTP without aiohttp-socks → ``({}, {"proxy": url})``. - None → ``({}, {})``. Prefer the connector path: it works transparently with libraries (like mautrix) that call ``session.request()`` without forwarding per-request ``proxy=`` kwargs. Usage:: sess_kw, req_kw = proxy_kwargs_for_aiohttp(proxy_url) async with aiohttp.ClientSession(**sess_kw) as session: async with session.get(url, **req_kw) as resp: ... rrTrrrrr)rrrrrrrrrrs rproxy_kwargs_for_aiohttprYs( 2v  (000000"++ID+AA Y'++ ((( ??   ' ' 0 0  NN1    r6MMMGY'''''(s"+AB=BBrpno_proxy_valuec:|}|@tjdp tjdpd}|}|sdS|}t jd|D]}|}|s+|dkrdS|d r |d d}n|d r |d d}||ks|d |rdSdS) zReturn True when ``hostname`` matches a ``NO_PROXY`` entry. Supports comma- or whitespace-separated entries with optional leading dots and ``*.`` wildcards, which match both the apex domain and subdomains. Nr}r~rFz[\s,]+rTrr#rmr)) rrr_r]rrerrrr)rprrwlower_hostnamer normalizeds ris_host_excluded_by_no_proxyrs5 C {jnnZ((LBJNN:,F,FL" ))++C u^^%%N)S))  [[]]((**      44   & & (#ABBJJ  " "3 ' ' (#ABBJ Z ' '>+B+BCSzCSCS+T+T '44 ( 5r) dataclassfield)datetime)Path)DictListOptionalAnyCallable AwaitableTupleUnion)Enumr#)PlatformPlatformConfig) SessionSourcebuild_session_key)get_hermes_dirzSecure secret entry is not supported over messaging. Load this skill in the local CLI to be prompted, or add the key to ~/.hermes/.env manually.Purlmax_lenc|dkrdS|dSt|}|sdS t|}n#t$r |d|cYSwxYw|jrs|jrl|jddd}|jd|}|jpd}|r1|dkr+|ddd}|r|d |n|d }n|}n|}t||kr|S|d krd |zS|d|d z d S)z?Return a URL string safe for logs (no query/fragment/userinfo).rrN@r)rl/z/.../z/...rKrmz...)rrr[schemenetlocrsplitpathr$) rrrwrxrbaserbasenamesafes rsafe_url_for_logrsc!||r {r c((C r# 8G8}}  %%c1--b1-,,F,,{ b  DCKK{{3**2.H/7Jd+++++]]]DDDD 4yyG !||W}@TrrLfollow_redirects event_hooksr))Mozilla/5.0 (compatible; HermesAgent/1.0)zimage/*,*/*;q=0.8z User-AgentAcceptheaders?z*Media cache retry %d/%d for %s (%.1fs): %s)rrr9rhttpxlogging getLogger__name__ AsyncClientrranger_raise_for_statusrcontentTimeoutExceptionHTTPStatusErrorrr status_codedebugasynciosleep rrrrr_logclientattemptrexcwaits rcache_image_from_urlr3*$-,,,,, ;s  [YBRSVBWBWYYZZZLLL  X & &D  "6!78! Wq[))  G !'&Q"5",""))+++-h.>DDDD *E,AB   c5#899cl>VY\>\>\W$$'A+.DJJD! (-- "----------HHHH   D7F AC*F*E>;A8E93F8E99E>>F F"F max_age_hourscHddl}t}||dzz }d}|D]^}|rH|j|kr+ ||dz }N#t$rYZwxYw_|S)zd Delete cached images older than *max_age_hours*. Returns the number of files removed. rNr))timeriterdiris_filestatst_mtimeunlinkr?r7r:r cutoffremovedfs rcleanup_image_cacherDes KKK#%%I YY[[MD0 1FG     99;; 16688,v55  1      N7B BBz cache/audio audio_cachecHtddtS)zBReturn the audio cache directory, creating it if it doesn't exist.Tr)AUDIO_CACHE_DIRrrrrget_audio_cache_dirrIrrct}dtjjdd|}||z }||t |S)a Save raw audio bytes to the cache and return the absolute file path. Args: data: Raw audio bytes. ext: File extension including the dot (e.g. ".ogg", ".mp3"). Returns: Absolute path to the cached audio file as a string. audio_Nr)rIrr r r rrrr rrs rcache_audio_from_bytesrMs]$%%I4 ("-4s44H8#H  x==rc PKddlm}||stdt|ddl}t jt}|dddtgi4d{V }t|d zD]} | |d d d  d{V}| t|j|ccdddd{VS#|j|jf$r} t#| |jr| jjdkr||krQd|d zz} |d|d z|t|| | t+j| d{VYd} ~ d} ~ wwxYw dddd{VdS#1d{VswxYwYdS)aE Download an audio file from a URL and save it to the local cache. Retries on transient failures (timeouts, 429, 5xx) with exponential backoff so a single slow CDN response doesn't lose the media. Args: url: The HTTP/HTTPS URL to download from. ext: File extension including the dot (e.g. ".ogg", ".mp3"). retries: Number of retry attempts on transient failures. Returns: Absolute path to the cached audio file as a string. Raises: ValueError: If the URL targets a private/internal network (SSRF protection). rrrNrTrrr)rzaudio/*,*/*;q=0.8rrrrz*Audio cache retry %d/%d for %s (%.1fs): %s)rrr9rrr r!r"r#rr$r_r%rMr&r'r(rrr)r*r+r,r-s rcache_audio_from_urlrOr4r5z cache/videos video_cachez video/mp4zvideo/quicktimez video/webmzvideo/x-matroskazvideo/x-msvideo).mp4.mov.webm.mkv.avicHtddtS)zBReturn the video cache directory, creating it if it doesn't exist.Tr)VIDEO_CACHE_DIRrrrrget_video_cache_dirrXrrrQct}dtjjdd|}||z }||t |S)zDSave raw video bytes to the cache and return the absolute file path.video_Nr)rXrr r r rrLs rcache_video_from_bytesr[s[#%%I4 ("-4s44H8#H  x==rzcache/documentsdocument_cachez.pdfzapplication/pdfz.mdz text/markdownz.txtz text/plainz.csvztext/csvz.logz.jsonzapplication/jsonz.xmlzapplication/xmlz.yamlzapplication/yamlz.ymlz.tomlzapplication/tomlz.iniz.cfgz.zipzapplication/zipz.docxzGapplication/vnd.openxmlformats-officedocument.wordprocessingml.documentz.xlsxzAapplication/vnd.openxmlformats-officedocument.spreadsheetml.sheetz.pptxzIapplication/vnd.openxmlformats-officedocument.presentationml.presentationcHtddtS)zEReturn the document cache directory, creating it if it doesn't exist.Tr)DOCUMENT_CACHE_DIRrrrrget_document_cache_dirr_s!TD999 rrct}|rt|jnd}|dd}|r|dvrd}dt jjddd|}||z }| |std || |t|S) a Save raw document bytes to the cache and return the absolute file path. The cached filename preserves the original human-readable name with a unique prefix: ``doc_{uuid12}_{original_filename}``. Args: data: Raw document bytes. filename: Original filename (e.g. "report.pdf"). Returns: Absolute path to the cached document file as a string. Raises: ValueError: If the sanitized path escapes the cache directory. documentr)rmz..doc_NrrdzPath traversal rejected: ) r_rnamerr]rr r resolveis_relative_tor9r r)rrr  safe_name cached_namers rcache_document_from_bytesris"'((I'/?X##ZI!!&"--3355I  [00 <)#2#.<<<->-@-@ A ACAXAABBB  x==rcHddl}t}||dzz }d}|D]^}|rH|j|kr+ ||dz }N#t$rYZwxYw_|S)zg Delete cached documents older than *max_age_hours*. Returns the number of files removed. rNr9r))r:r_r;r<r=r>r?r?r@s rcleanup_document_cacherk;s KKK&((I YY[[MD0 1FG     99;; 16688,v55  1      NrEc6eZdZdZdZdZdZdZdZdZ dZ d Z d Z d S) MessageTypezTypes of incoming messages.rMlocationphotovideoaudiovoicerastickercommandN) r" __module__ __qualname____doc__TEXTLOCATIONPHOTOVIDEOAUDIOVOICEDOCUMENTSTICKERCOMMANDrrrrmrmPsA%% DH E E E EHGGGGrrmceZdZdZdZdZdZdS)ProcessingOutcomez=Result classification for message-processing lifecycle hooks.successfailure cancelledN)r"rurvrwSUCCESSFAILURE CANCELLEDrrrrr]s#GGGGIIIrrceZdZUdZeed<ejZeed<dZ e ed<dZ e ed<dZ eeed<dZeeed<ee Zeeed <ee Zeeed <dZeeed <dZeeed <dZeeeezed<dZeeed<dZeed<eej Zeed<defdZdeefdZ defdZ!dS) MessageEventzi Incoming message from a platform. Normalized representation that all adapters produce. rM message_typeNsource raw_message message_idplatform_update_id)default_factory media_urls media_typesreply_to_message_id reply_to_text auto_skillchannel_promptFinternal timestampr c6|jdS)z8Check if this is a command message (e.g., /new, /reset).r)rMrrselfs r is_commandzMessageEvent.is_commandsy##C(((rc|sdS|jd}|r"|dddnd}|r d|vr|ddd}|rd|vrdS|S)z2Extract command name if this is a command message.Nr)maxsplitrrr)rrMrr)rpartsrws r get_commandzMessageEvent.get_commands   4 ++&+5eAhqrrl  """  '3#::))C##A&C  3#::4 rc(|s|jS|jd}t|dkr|dnd}|dddddd}|S) z"Get the arguments after a command.r)rru——z--u—u–-)rrMrr$r)rrargss rget_command_argszMessageEvent.get_command_argss   9  ++u::>>uQxxr||ND1199(DIIQQRZ\_`` r)"r"rurvrwr__annotations__rmrxrrrrrrrrrtrrrrrrrrrrboolrnowrrrrrrrrres III + 0L+000!FM   K $J $$$)- ,,,"E$777JS 777"U4888Kc888*.#---#'M8C='''-1JtCy)000%)NHSM(((Hd % ===Ix===)D)))) Xc]    #rrz4^(?:please\s+)?restart\s+(?:the\s+)?gateway[.!?\s]*$z=^(?:please\s+)?restart\s+(?:the\s+)?hermes\s+gateway[.!?\s]*$z(^(?:please\s+)?restart\s+hermes[.!?\s]*$#_PLAINTEXT_GATEWAY_RESTART_PATTERNSeventcf ||jtjkrdS|jpd}|r|drdSt |dd}t |dddkrdStD]!}||r d|_dS"dS#t$rYdSwxYw)aRewrite a tiny set of DM plaintext admin phrases into slash commands. This keeps high-impact operational phrases like ``restart gateway`` out of the LLM/tool path, where they can trigger a self-restart from inside the currently running agent and leave the gateway stuck in ``draining`` while it waits for that same agent to finish. Scope is intentionally narrow: DM text messages only, exact restart-style phrases only. Group chats keep natural-language semantics. Nrrr chat_typedmz/restart) rrmrxrMr]rrrrmatchr[)rrMrpatterns r coerce_plaintext_gateway_commandrs =E.+2BBB F  b'')) ts++  F$// 6; - - 5 5 F:  G}}T"" '     s(B"2B"&B"7&B"B"" B0/B0cneZdZUdZeed<dZeeed<dZ eeed<dZ e ed<dZ eed<dS) SendResultzResult of sending a message.rNrerror raw_responseF retryable) r"rurvrwrrrrrrrrrrrrrrsi&& MMM $J $$$E8C=L#ItrrcneZdZUdZeeed<ddedeeffd Ze defdZ xZ S) EphemeralReplyuSystem-notice reply that auto-deletes after a TTL. Slash-command handlers in ``gateway/run.py`` can return this wrapper instead of a plain string to request that the reply message be deleted after ``ttl_seconds`` on platforms that support ``delete_message``. Subclassing ``str`` keeps the wrapper transparent to anything that treats handler return values as text (existing tests use ``in`` / ``startswith`` / equality; the ``_process_message_background`` pipeline extracts attachments from the string content). ``isinstance(r, EphemeralReply)`` still distinguishes ephemeral replies from plain strings so the send path can schedule deletion. Platforms that don't override :meth:`BasePlatformAdapter.delete_message` silently ignore the TTL — the message is sent normally and left in place. When ``ttl_seconds`` is ``None``, the pipeline uses the configured ``display.ephemeral_system_ttl`` default. A default of ``0`` disables auto-deletion globally, preserving prior behavior. ttl_secondsNrMcZt||}||_|Sr)super__new__r)clsrMrinstance __class__s rrzEphemeralReply.__new__s'77??3--*rr c6t|S)zReturn the underlying text. Provided for call sites that want an explicit string conversion, though ``str(reply)`` and using ``reply`` directly where a string is expected both work identically. )r__str__rs rrMzEphemeralReply.texts{{4   rr) r"rurvrwrrtrrrpropertyrM __classcell__)rs@rrrs(#3Xc] !c!!!X!!!!!rr) merge_textpending_messages session_keyrcj||}|rt|ddtjk}|jtjk}t |j}t |j}|rs|rq|j|j|j|j|j r*t |j |j |_ dS|s|r|r>|j|j|j|j|j r>|j r+t |j |j |_ n |j |_ |s|rtj|_n@t|ddtj kr!|jtj kr |j|_dS|rat|ddtj krB|jtj kr-|j r$|j r|j d|j n|j |_ dS|||<dS)aStore or merge a pending event for a session. Photo bursts/albums often arrive as multiple near-simultaneous PHOTO events. Merge those into the existing queued event so the next turn sees the whole burst. When ``merge_text`` is enabled, rapid follow-up TEXT events are appended instead of replacing the pending turn. This is used for Telegram bursty follow-ups so a multi-part user thought is not silently truncated to only the last queued fragment. rN ) r_rrmrzrrrrrrMBasePlatformAdapter_merge_captionrx) rrrrexistingexisting_is_photoincoming_is_photoexisting_has_mediaincoming_has_medias rmerge_pending_message_eventr s=$ ##K00H&#HndCC{GXX!.+2CC!("566!%"233  !2    & &u'7 8 8 8  ' '(9 : : :z ^ 3 B B8=RWR\ ] ] F  !3 ! ?#**5+;<<<$++E,=>>>z /=/$7$F$Fx}V[V`$a$aHMM$)JHM  ;$5 ;(3(9%%.$77;;KKK&+*:::(-(:% F  .$77;;KKK"k&666z bDLM a8= @ @EJ @ @ @W\Wa F$)[!!!r) connecterrorconnectionerrorconnectionresetconnectionrefusedconnecttimeoutrz broken piperemotedisconnectedeoferror config_extra channel_id parent_idc|dpi}t|tsdS||fD]D}|s||}|t|}|r|cSEdS)aResolve a per-channel ephemeral prompt from platform config. Looks up ``channel_prompts`` in the adapter's ``config.extra`` dict. Prefers an exact match on *channel_id*; falls back to *parent_id* (useful for forum threads / child channels inheriting a parent prompt). Returns the prompt string, or None if no match is found. Blank/whitespace- only prompts are treated as absent. channel_promptsN)r_rdictrr])rrrpromptsrcprompts rresolve_channel_promptras0117RG gt $ $tI&  S!! > V""$$  MMM  4rc,|dpg}t|tr|sdSt}|r"|t ||r"|t ||sdS|D]}t|t st |dd}||vr|dp|d}t|t r|}|r|gndcSt|trT|rRg} |D]G} t| t s| } | r| | vr| | H| pdcSdS)aResolve auto-loaded skill(s) for a channel/thread from platform config. Looks up ``channel_skill_bindings`` in the adapter's ``config.extra`` dict. Config format:: channel_skill_bindings: - id: "C0123" # Slack channel ID or Discord channel/forum ID skills: ["skill-a", "skill-b"] - id: "D0ABCDE" skill: "solo-skill" # single string also accepted Prefers an exact match on *channel_id*; falls back to *parent_id* (useful for forum threads / Slack threads inheriting the parent channel's binding). Returns a deduplicated list of skill names (order preserved), or None if no match is found. channel_skill_bindingsNidrskillsskill) r_rrsetaddrrr]append) rrrbindings ids_to_checkrentry_idrr!seenrdnms rresolve_channel_skillsrs0 899?RH h % %Xt UUL*Z))))Y((( t$$%&&  uyyr**++ | # #YYx((>EIIg,>,>F&#&& *LLNN)ssT)))&$'' $F $"$"((D%dC00! B(bnn B|t### 4rc eZdZUdZdedefdZedefdZ ede e fdZ ede e fdZ edefd Zd e defd Zd edged d zfdd fdZddZddZde de dedd fdZddZde de de defdZddZede fdZedefdZd edd fdZd e eee geefdd fdZdedd fd Z e!defd!Z"e!dd"Z#e! dd e d#e d$e e d%e e$e efde%f d&Z&d'Z'ee(d(<d'd)d e d*e d#e d+ede%f d,Z)d e d*e defd-Z*de+fd.Z,d e d*e d/e+dd fd0Z- dd e d1e de d2e d3e d%e e$e efde%fd4Z. dd e d5e e d#e d$e e d%e e$e efde%f d6Z/dd e dd fd7Z0d e dd fd8Z1 dd e d:e2e3e e fd%e e$e efd;e4dd f d<Z5 dd e d=e d>e e d$e e d%e e$e efde%f d?Z6 dd e d@e d>e e d$e e d%e e$e efde%f dAZ7e8dBe defdCZ9e8d#e de3e2e3e e fe ffdDZ: dd e dEe d>e e d$e e de%f dFZ;d e dEe de%fdGZ< dd e dHe d>e e d$e e de%f dIZ= dd e dJe d>e e dKe e d$e e de%f dLZ> dd e dMe d>e e d$e e de%f dNZ?e8d#e de3e2e3e efe ffdOZ@e8d#e de3e2e e ffdPZA dd e dRe4dSeBjCd zdd fdTZDd e dd fdUZEd e dd fdVZFd2e d e dd fdWZGd dXd2e dYedZe+d zdd fd[ZHd dXd2e dZe+d zded zfd\ZId]edd fd^ZJd]ed_eKdd fd`ZLdae dbedcedd fddZMe8dee e defdfZNe8dee e defdgZOdhede3e e e+ffdiZP dd e d#e d$e e d%edke+dle4ddmfdnZQe8doe e dpe de fdqZRd drd2e dse eBjCdd fdtZSd2e defduZTd2e defdvZUd dwd]ed2e dxe eBjCdefdyZVdzdzd{d2e d|ed}edd fd~ZWd2e deBjCdd fdZXd]ed2e de dd fdZYd]edd fdZZe8de4fdZ[d]ed2e dd fdZ\ddZ]d2e defdZ^d2e de efdZ_ dd e de e de d5e e de e de e de e de e de e dede e de e d*e e de`fdZae!d e de$e effdZbd#e de fdZce8 dd#e de+de dde2e fdZdd S)rz Base class for platform adapters. Subclasses implement platform-specific logic for: - Connecting and authenticating - Receiving messages - Sending messages/responses - Handling media configrc||_||_d|_d|_d|_d|_d|_d|_i|_i|_ i|_ t|_ i|_ t|_d|_d|_t|_t|_t|_dS)NFT)rr_message_handler_running_fatal_error_code_fatal_error_message_fatal_error_retryable_fatal_error_handler_active_sessions_pending_messages_session_tasksr_background_tasks_post_delivery_callbacks_expected_cancelled_tasks_busy_session_handler_auto_tts_default_auto_tts_enabled_chats_auto_tts_disabled_chats_typing_paused)rrrs r__init__zBasePlatformAdapter.__init__s   :> 0437!&*#im!;=:<7958EE 9;%|jjS)z%Human-readable name for this adapter.)rrtitlers rrdzBasePlatformAdapter.name`s}"((***rc|jS)z(Check if adapter is currently connected.)rrs r is_connectedz BasePlatformAdapter.is_connectedes }rc||_dS)z Set the handler for incoming messages. The handler receives a MessageEvent and should return an optional response string. N)rrs rset_message_handlerz'BasePlatformAdapter.set_message_handlerjs!(rc||_dS)zESet an optional handler for messages arriving during active sessions.N)rrs rset_busy_session_handlerz,BasePlatformAdapter.set_busy_session_handlerss%,"""r session_storec||_dS)a  Set the session store for checking active sessions. Used by adapters that need to check if a thread/conversation has an active session before processing messages (e.g., Slack thread replies without explicit mentions). N)_session_store)rrFs rset_session_storez%BasePlatformAdapter.set_session_storews,rc KdS)z Connect to the platform and start receiving messages. Returns True if connection was successful. Nrrs rconnectzBasePlatformAdapter.connect  rc KdS)zDisconnect from the platform.Nrrs r disconnectzBasePlatformAdapter.disconnects  rr&reply_tor3c KdS)ar Send a message to a chat. Args: chat_id: The chat/channel ID to send to content: Message content (may be markdown) reply_to: Optional message ID to reply to metadata: Additional platform-specific options Returns: SendResult with success status and message ID Nr)rr r&rOr3s rsendzBasePlatformAdapter.sends ( rFREQUIRES_EDIT_FINALIZE)finalizerrSc(KtddS)uL Edit a previously sent message. Optional — platforms that don't support editing return success=False and callers fall back to sending a new message. ``finalize`` signals that this is the last edit in a streaming sequence. Most platforms (Telegram, Slack, Discord, Matrix, etc.) treat it as a no-op because their edit APIs have no notion of message lifecycle state — an edit is an edit. Platforms that render streaming updates with a distinct "in progress" state and require explicit closure (e.g. rich card / AI assistant surfaces such as DingTalk AI Cards) use it to finalize the message and transition the UI out of the streaming indicator — those should also set ``REQUIRES_EDIT_FINALIZE = True`` so callers route a final edit through even when content is unchanged. Callers should set ``finalize=True`` on the final edit of a streamed response (typically when ``got_done`` fires in the stream consumer) and leave it ``False`` on intermediate edits. F Not supportedrrr)rr rr&rSs r edit_messagez BasePlatformAdapter.edit_messages6%????rc KdS)u Delete a previously sent message. Optional — platforms that don't support deletion return ``False`` and callers fall back to leaving the message in place. Used by the stream consumer's fresh-final cleanup path (see openclaw/openclaw#72038) to remove long-lived preview messages after sending the completed reply as a fresh message so the platform's visible timestamp reflects completion time. Returns ``True`` on successful deletion, ``False`` otherwise. Subclasses should override for platforms with a deletion API (e.g. Telegram ``deleteMessage``). Fr)rr rs rdelete_messagez"BasePlatformAdapter.delete_messages &urcr ddlm}n#t$rYdSwxYw |}n#t$rYdSwxYwt|tr|dini}t|tsdS|dd} t |S#ttf$rYdSwxYw)aRead ``display.ephemeral_system_ttl`` from config. Returns the TTL in seconds to use when an :class:`EphemeralReply` does not specify one explicitly. ``0`` (the default) disables auto-deletion. Non-fatal if config is unreadable. r) load_configdisplayephemeral_system_ttl) hermes_cli.configr\r[rrr_rt TypeErrorr9)r _load_configcfgr]rws r!_get_ephemeral_system_ttl_defaultz5BasePlatformAdapter._get_ephemeral_system_ttl_defaults  E E E E E E E   11  ,..CC   11 ,6sD,A,AI#'')R(((r'4(( 1kk0!44 s88O:&   11 s*  & 44B!!B65B6rcdfd }|} tj|dS#t$r|YdSwxYw)u Spawn a detached task that deletes ``message_id`` after ``ttl_seconds``. Best-effort — failures (gateway restart, permission denied, message too old for Telegram's 48h window) are swallowed at debug level. Does not block the caller. r NcFK tjtdtd{Vd{VdS#tj$rt $r.}tdj |Yd}~dSd}~wwxYw)Nr))r rz*[%s] Ephemeral delete failed for %s/%s: %s) r+r,maxrtrZCancelledErrorr[rr*rd)er rrrs r _run_deletezCBasePlatformAdapter._schedule_ephemeral_delete.._run_deletes mC3{+;+;$<$<=========))'j)QQQQQQQQQQQ)       @Iw A sAAB 2#BB r N)r+ create_task RuntimeErrorclose)rr rrricoros```` r_schedule_ephemeral_deletez.BasePlatformAdapter._schedule_ephemeral_deletes         {}}    % % % % %    JJLLLLLL  s/AAr?r confirm_idc(KtddS)uSend a three-option slash-command confirmation prompt. Used by the gateway's generic slash-confirm primitive (see ``GatewayRunner._request_slash_confirm``) for commands that have a non-destructive but expensive side effect the user should explicitly acknowledge — the current caller is ``/reload-mcp``, which invalidates the provider prompt cache. Platforms with inline-button support (Telegram, Discord, Slack, Matrix, Feishu) should override this to render three buttons: Approve Once / Always Approve / Cancel. Button callbacks MUST be routed back through the gateway by calling ``GatewayRunner._resolve_slash_confirm(confirm_id, choice)`` where ``choice`` is ``"once"`` / ``"always"`` / ``"cancel"``. Platforms without button UIs leave this as the default and fall through to the gateway's text fallback (which sends ``message`` as plain text and intercepts the next ``/approve`` / ``/always`` / ``/cancel`` reply). ``confirm_id`` is a short string generated by the gateway; the adapter stores it alongside any platform-specific state needed to route the callback (e.g. Telegram's ``_approval_state`` dict). FrUrVrW)rr r?r%rrpr3s rsend_slash_confirmz&BasePlatformAdapter.send_slash_confirmsB%????ruser_idcDK|||||d{VS)zSend a notice privately when the platform supports it. The default implementation falls back to a normal send so callers can use one code path across platforms. r r&rOr3NrQ)rr rsr&rOr3s rsend_private_noticez'BasePlatformAdapter.send_private_notice<sMYY          rc KdS)z Send a typing indicator. Override in subclasses if the platform supports it. metadata: optional dict with platform-specific context (e.g. thread_id for Slack). Nr)rr r3s r send_typingzBasePlatformAdapter.send_typingPrLrc KdS)zStop a persistent typing indicator (if the platform uses one). Override in subclasses that start background typing loops. Default is a no-op for platforms with one-shot typing indicators. Nrrs r stop_typingzBasePlatformAdapter.stop_typingYs rimages human_delayc Kddlm}|D]p\}}|dkrtj|d{V td|jt||r |ddnd|dr5| |||dd|r|nd| d{V}n\| |r$| |||r|nd| d{V}n#| |||r|nd| d{V}|j s&td |j|j7#t$r.} td |j| dYd} ~ jd} ~ wwxYwdS)aSend a batch of images. Accepts ``http(s)://``, ``file://`` URIs in the first tuple element. Default implementation sends each item individually, routing animated GIFs through ``send_animation`` and local files through ``send_image_file``. Override in subclasses to bundle into a single native API call (e.g. Signal's multi-attachment RPC) r)unquoteNz[%s] Sending image: %s (alt=%s)rfile://)r  image_pathcaptionr3)r  animation_urlrr3)r  image_urlrr3z[%s] Failed to send image: %sz[%s] Error sending image: %sTexc_info) urllib.parserr+r,rinfordrrrsend_image_file_is_animation_urlsend_animation send_imagerrr[) rr r}r3r~_unquoteralt_text img_resultimg_errs rsend_multiple_imagesz(BasePlatformAdapter.send_multiple_imagesasS& 544444#)" `" ` IxQmK000000000 ` 5I$Y//%-5HSbSMM2  '' 22'+';'; '#+8IabbM#:#:,4 >$!) (<((""""""JJ ++I66 '+':': '&/,4 >$!) (;((""""""JJ(, '"+,4 >$!) (7((""""""J ")_LL!@$)ZM]^^^ ` ` ` ;TYZ^ ________ `C" `" `sDE E: #E55E:rrcXK|r|d|n|}||||d{VS)z Send an image natively via the platform API. Override in subclasses to send images as proper attachments instead of plain-text URLs. Default falls back to sending the URL as a text message. rr r&rONrv)rr rrrOr3rMs rrzBasePlatformAdapter.send_imagesO -4B'((Y(((YYwxYPPPPPPPPPrrcFK||||||d{VS)z Send an animated GIF natively via the platform API. Override in subclasses to send GIFs as proper animations (e.g., Telegram send_animation) so they auto-play inline. Default falls back to send_image. )r rrrOr3N)r)rr rrrOr3s rrz"BasePlatformAdapter.send_animationsX__W W^iq}E_FFFFFFFF Frrc|dd}|dS)z=Check if a URL points to an animated GIF (vs a static image).?r.gif)rrr)rrs rrz%BasePlatformAdapter._is_animation_urls6 !!#&&q)~~f%%%rc\ g}|}d}tj||D]^}|d}|d t fddDr| |f_d}tj||D].}|d | df/|red|Dfd }tj|||}tj|||}tjd d |}||fS) a Extract image URLs from markdown and HTML image tags in a response. Finds patterns like: - ![alt text](https://example.com/image.png) - - Args: content: The response text to scan. Returns: Tuple of (list of (url, alt_text) pairs, cleaned content with image tags removed). z$!\[([^\]]*)\]\((https?://[^\s\)]+)\)r)r#c3K|]A}|p|vVBdSr)rr)rrrs rrz5BasePlatformAdapter.extract_images..scmms399;;'',,Bsyy{{0Bmmmmmmr).pngr.jpegr.webpz fal.mediazfal-cdnzreplicate.deliveryzA]+)["\']?\s*/?>\s*(?:)?rch|]\}}|Srr)rrrds r z5BasePlatformAdapter.extract_images..s777fc1c777rc|jdkr|dn|d}|vrdn|dS)Nr#r)rr) lastindexgroup)rrextracted_urlss r_remove_if_extractedz@BasePlatformAdapter.extract_images.._remove_if_extractedsJ(-1(<(>@@Gwr audio_pathc^Kd|}|r|d|}||||d{VS)a  Send an audio file as a native voice message via the platform API. Override in subclasses to send audio as voice bubbles (Telegram) or file attachments (Discord). Default falls back to sending the file path as text. u 🔊 Audio: rrNrv)rr rrrOkwargsrMs r send_voicezBasePlatformAdapter.send_voicesZ+j**  (''''DYYwxYPPPPPPPPPrc2K|jd||d|d{VS)z Play auto-TTS audio for voice replies. Override in subclasses for invisible playback (e.g. Web UI). Default falls back to send_voice (shows audio player). )r rNr)r)rr rrs rplay_ttszBasePlatformAdapter.play_ttss9%T_VWVVvVVVVVVVVVr video_pathc^Kd|}|r|d|}||||d{VS)z Send a video natively via the platform API. Override in subclasses to send videos as inline playable media. Default falls back to sending the file path as text. u 🎬 Video: rrNrv)rr rrrOrrMs r send_videozBasePlatformAdapter.send_videosZ+j**  (''''DYYwxYPPPPPPPPPr file_path file_namec^Kd|}|r|d|}||||d{VS)z Send a document/file natively via the platform API. Override in subclasses to send files as downloadable attachments. Default falls back to sending the file path as text. u 📎 File: rrNrv)rr rrrrOrrMs r send_documentz!BasePlatformAdapter.send_document)sZ)Y((  (''''DYYwxYPPPPPPPPPrrc^Kd|}|r|d|}||||d{VS)a Send a local image file natively via the platform API. Unlike send_image() which takes a URL, this takes a local file path. Override in subclasses for native photo attachments. Default falls back to sending the file path as text. u🖼️ Image: rrNrv)rr rrrOrrMs rrz#BasePlatformAdapter.send_image_file=sZ.--  (''''DYYwxYPPPPPPPPPrcg}|}d|v}|dd}tjd}||D]}|d}t |dkr8|d|dkr&|ddvr|d d}|dd }|r4| tj ||f|r>| d|}tj d d |}||fS) a Extract MEDIA: tags and [[audio_as_voice]] directives from response text. The TTS tool returns responses like: [[audio_as_voice]] MEDIA:/path/to/audio.ogg Args: content: The response text to scan. Returns: Tuple of (list of (path, is_voice) pairs, cleaned content with tags removed). [[audio_as_voice]]rz[`"']?MEDIA:\s*(?P`[^`\n]+`|"[^"\n]+"|'[^'\n]+'|(?:~/|/)\S+(?:[^\S\n]+\S+)*?\.(?:png|jpe?g|gif|webp|mp4|mov|avi|mkv|webm|ogg|opus|mp3|wav|m4a|flac|epub|pdf|zip|rar|7z|docx?|xlsx?|pptx?|txt|csv|apk|ipa)(?=[\s`"',;:)\]}]|$)|\S+)[`"']?rr#rrz`"'r)z `"',.;:)}]rr)rrcompilerrr]r$lstriprqrrr expanduserr)r&mediar has_voice_tag media_patternrrs r extract_mediaz!BasePlatformAdapter.extract_mediaQsf-7 //"6;;  B  #++G44 H HE;;v&&,,..D4yyA~~$q'T"X"5"5$q'V:K:KAbDz''));;v&&--m<>@@Gg~rcd}dd|D}tjd|zdztj}gtjd|tjD]=}||f>tjd|D]=}||f>dtd tffd }g}||D]}||r | d }tj |} tj | r||| ft!} g} |D]5\}} | | vr,| | | || f6d | D} |} | rF| D]\}}| |d } tjdd| } | | fS)aW Detect bare local file paths in response text for native media delivery. Matches absolute paths (/...) and tilde paths (~/) ending in common image or video extensions. Validates each candidate with ``os.path.isfile()`` to avoid false positives from URLs or non-existent paths. Paths inside fenced code blocks (``` ... ```) and inline code (`...`) are ignored so that code samples are never mutilated. Returns: Tuple of (list of expanded file paths, cleaned text with the raw path strings removed). ) rrrrrrQrRrUrTrS|c3@K|]}|dVdS)rmN)r)rrhs rrz:BasePlatformAdapter.extract_local_files..s,EEaAHHSMMEEEEEErz/(?K|]\}}|cxko|kncVdSrr)rr!rhrs rrzLBasePlatformAdapter.extract_local_files.._in_code..s;;;1qC||||!||||;;;;;;r)r)r code_spanss`r_in_codez9BasePlatformAdapter.extract_local_files.._in_codes';;;; ;;;;; ;rrcg|]\}}|Srr)rrdexpandeds r z;BasePlatformAdapter.extract_local_files..s444ka444rrrr)joinrr IGNORECASErDOTALLrstartendrtrrrrrisfilerrrrr])r&_LOCAL_MEDIA_EXTSext_partpath_remrfoundrrwrruniquepathsr_exprs @rextract_local_filesz'BasePlatformAdapter.extract_local_files{st" 88EE3DEEEEE * > IF R M    17BIFF 4 4A   qwwyy!%%''2 3 3 3 3\733 4 4A   qwwyy!%%''2 3 3 3 3 <# <$ < < < < < <%%g.. . .Ex && ++a..Cw))#..Hw~~h'' . c8_---EE" / /MCt##""" sHo...44V444  A# 3 3 T!//#r22fY88>>@@Gg~r@interval stop_eventc4Ktdtd|dz } |n|rZ t|dr- ||d{Vn#t $rYnwxYw|j|dS||jvr tj | |||d{VnW#tj $rYnFtj $rt $r+}td|j|Yd}~nd}~wwxYw|tj|d{V"tj}||z}|sZ||z } | d krn (499;; 6I A~~ "-D)(<(<=========%++-->$$&&t]++ **73333333333 D   ' ' 0 0 0 0 0a# H%    D   t]++ **73333333333 D   ' ' 0 0 0 0 0 t]++ **73333333333 D   ' ' 0 0 0 0sIA** A76A7 I 1CID&!I#D&;!D!I!D&&C IH!! H.-H. II!J> I!!J>6J JJ>LK,+L, K96L8K99Lc:|j|dS)uPause typing indicator for a chat (e.g. during approval waits). Thread-safe (CPython GIL) — can be called from the sync agent thread while ``_keep_typing`` runs on the async event loop. N)rrrs rpause_typing_for_chatz)BasePlatformAdapter.pause_typing_for_chats! (((((rc:|j|dS)z;Resume typing indicator for a chat after approval resolves.N)rrrs rresume_typing_for_chatz*BasePlatformAdapter.resume_typing_for_chats ##G,,,,,rcK|r0|j|}|| ||d{VdS#t$rYdSwxYw)zDSignal the active session loop to stop and clear typing immediately.N)rr_rr{r[)rrr interrupt_events rinterrupt_session_activityz.BasePlatformAdapter.interrupt_session_activitys  &"377 DDO*##%%% ""7++ + + + + + + + + +    DD sA A! A! generationcallbackrcz|rt|sdS| ||j|<dSt||f|j|<dS)zRegister a deferred callback to fire after the main response. ``generation`` lets callers tie the callback to a specific gateway run generation so stale runs cannot clear callbacks owned by a fresher run. N)callablerrt)rrrrs rregister_post_delivery_callbackz3BasePlatformAdapter.register_post_delivery_callback(sW (8"4"4  F  9AD )+ 6 6 6:=j//89TD )+ 6 6 6rc|sdS|j|}|dSt|trjt |dkrW|\}}|"t |t |krdS|j|dt|r|ndS|dS|j|dt|r|ndS)zCPop a deferred callback, optionally requiring generation ownership.Nr#)rr_rtupler$rtpopr)rrrrentry_generationrs rpop_post_delivery_callbackz.BasePlatformAdapter.pop_post_delivery_callback;s 4-11+>> =4 eU # # <E a). & h%#.>*?*?3z??*R*Rt  ) - -k4 @ @ @'11;88t ;  !4 %))+t<<< 1uuT1rrc KdS)z.Hook called when background processing begins.Nr)rrs ron_processing_startz'BasePlatformAdapter.on_processing_startV routcomec KdS)z1Hook called when background processing completes.Nr)rrrs ron_processing_completez*BasePlatformAdapter.on_processing_completeYrr hook_namerrcKt||d}t|sdS ||i|d{VdS#t$r-}td|j||Yd}~dSd}~wwxYw)zARun a lifecycle hook without letting failures break message flow.Nz[%s] %s hook failed: %s)rrr[rrrd)rr rrhookrhs r_run_processing_hookz(BasePlatformAdapter._run_processing_hook\stY--~~  F O$''' ' ' ' ' ' ' ' ' ' O O O NN4diA N N N N N N N N N Os6 A-"A((A-rct|sdS|tfdtDS)zGReturn True if the error string looks like a transient network failure.Fc3 K|]}|vV dSrr)rpatlowereds rrz:BasePlatformAdapter._is_retryable_error..ls'GGc3'>GGGGGGr)rr_RETRYABLE_ERROR_PATTERNSrrs @r_is_retryable_errorz'BasePlatformAdapter._is_retryable_errorfsC 5++--GGGG-FGGGGGGrcJ|sdS|}d|vpd|vpd|vS)uReturn True if the error string indicates a read/write timeout. Timeout errors are NOT retryable and should NOT trigger plain-text fallback — the request may have already been delivered. Fz timed out readtimeout writetimeout)rrs r_is_timeout_errorz%BasePlatformAdapter._is_timeout_errorns> 5++--g%^')A^^W^E^^rrc4t|tr|j}|5 t|}n#t $rd}YnwxYw|r(|dkr"t |jtjurd}|j t|pdfS|dfS)aUnwrap a handler response into (text, ttl_seconds). Accepts a plain string, ``None``, or an :class:`EphemeralReply`. Returns ``(text, ttl)`` where ``ttl > 0`` means the caller should schedule a deletion via :meth:`_schedule_ephemeral_delete` after the send succeeds. ``ttl`` is forced to 0 when the adapter doesn't override :meth:`delete_message` so non-supporting platforms silently degrade to normal sends. Nr) rrrrtrcr[typerZrrM)rrttls r_unwrap_ephemeralz%BasePlatformAdapter._unwrap_ephemeralzs h / / 0&C{dDDFFGGCC CCC sQww4::#<@S@b#b#b=#chQ--/ /{s!A AAr# max_retries base_delayrc K|||||d{V}|jr|S|jpd}|jp||} | s||r|S| rft d|dzD]} |d| dz zztjddz} t d|j | || |tj | d{V|||||d{V}|jr%td|j | |cS|jpd}|js||sntd |j ||d } ||| ||d{Vn8#t$r+} td |j | Yd} ~ nd} ~ wwxYw|St d |j |||d |dd||d{V}|js&td|j |j|S)ax Send a message with automatic retry for transient network errors. On permanent failures (e.g. formatting / permission errors) falls back to a plain-text version before giving up. If all attempts fail due to network errors, sends the user a brief delivery-failure notice so they know to retry rather than waiting indefinitely. ruNrr)r#rz7[%s] Send failed (attempt %d/%d, retrying in %.1fs): %sz[%s] Send succeeded on retry %dz4[%s] Failed to deliver response after %d retries: %su⚠️ Message delivery failed after multiple attempts. Please try again — your request was processed but the response could not be sent.z/[%s] Could not send delivery-failure notice: %su3[%s] Send failed: %s — trying plain-text fallbackz+(Response formatting failed, plain text:) i z"[%s] Fallback send also failed: %s)rQrrrrrr$randomuniformrrrdr+r,rr[r*)rr r&rOr3rrr+ error_str is_networkr0delaynotice notify_errfallback_results r_send_with_retryz$BasePlatformAdapter._send_with_retrys.$yy !         > ML&B %L)A)A))L)L  d44Y?? M   K!O44  "aGaK&89FN1a"KK A49gVVV!MMM"L.B (D,D,DY,O,OE SUYU^`kmvwwwmk))GVhai)jjjjjjjjjj kkkLL!RTXT]_ijjjjjjjjk  LdiYbccc $ TGETENTT !*! !        & a LL=ty/J_ ` ` `s8F G "!GG  existing_textnew_textc|s|Sd|dD}||vr|d|S|S)a`Merge a new caption into existing text, avoiding duplicates. Uses line-by-line exact match (not substring) to prevent false positives where a shorter caption is silently dropped because it appears as a substring of a longer one (e.g. "Meeting" inside "Meeting agenda"). Whitespace is normalised for comparison. c6g|]}|Srr)rcs rrz6BasePlatformAdapter._merge_caption..s LLL1QWWYYLLLrr)rr])r)r*existing_captionss rrz"BasePlatformAdapter._merge_captionso OLL 0C0CF0K0KLLL >>  #4 4 4#333399;; ;rguardr0cb|j|}|dS|||urdS|j|=dS)acRelease the adapter-level guard for a session. When ``guard`` is provided, only release the entry if it still points at that exact Event. This lets reset-like commands swap in a temporary guard while the old processing task unwinds, without having the old task's cleanup accidentally clear the replacement guard. N)rr_)rrr0 current_guards r_release_session_guardz*BasePlatformAdapter._release_session_guardsK-11+>>  F  e!;!; F  !+ . . .rc|j|}|dSt|dd}t|o |S)ukReturn True if the owner task for ``session_key`` is done/cancelled. A lock is "stale" when the adapter still has ``_active_sessions[key]`` AND a known owner task in ``_session_tasks`` that has already exited. When there is no owner task at all, that usually means the guard was installed by some path other than handle_message() (tests sometimes install guards directly) — don't treat that as stale. The on-entry self-heal only needs to handle the production split-brain case where an owner task was recorded, then exited without clearing its guard. NFdone)rr_rr)rrtaskr5s r_session_task_is_stalez*BasePlatformAdapter._session_task_is_stale sM"&&{33 <5tVT**DOTTVV$$$rc.||jvrdS||sdStd|j||j|d|j|d|j|ddS)uClear a stale session lock if the owner task is already gone. Returns True if a stale lock was healed. Returns False if there is no lock, or the owner task is still alive (the normal busy case). This is the on-entry safety net sidbin's issue #11016 analysis calls for: without it, a split-brain — adapter still thinks the session is active, but nothing is actually processing — traps the chat in infinite "Interrupting current task..." until the gateway is restarted. FzB[%s] Healing stale session lock for %s (owner task is done/absent)NT)rr7rrrdrrrrrs r_heal_stale_session_lockz,BasePlatformAdapter._heal_stale_session_lock s d3 3 35**;77 5 P I    !!+t444 "";555  T222tr)rrc|ptj}||j|<tj|||}||j|< |j|nC#t$r6|j |d| ||YdSwxYwt|dr>| |jj | |jj dS)aHSpawn a background processing task under the given session guard. Returns True on success. If the runtime stubs ``create_task`` with a non-Task sentinel (some tests do this), the guard is rolled back and False is returned so the caller isn't left holding a half-installed session lock. Nr/Fadd_done_callbackT)r+Eventrrk_process_message_backgroundrrrr`rr3rr<rr)rrrrr0r6s r_start_session_processingz-BasePlatformAdapter._start_session_processing9 s 27=??-2k*"4#C#CE;#W#WXX+/K(   " & &t , , , ,      # #K 6 6 6  ' ' 5 ' A A A55   4, - - K  " "4#9#A B B B  " "4#A#I J J JtsA..>   -:k*?D|?U_{EL$:;;[_ + !22599999999H"44X>>OE8   JIJJL(  00!L0!"-( 1 a<|$|&r)|?|jj ||d{V}%nU|$|vr)|@|jj ||'d{V}%n(|A|jj ||(d{V}%|%j3s't&*d)|j|$|%jB#tR$r,}&t&*d*|j|&Yd}&~&Cd}&~&wwxYw|!D]}"|dkrtj<|d{V tW|"j9:}$|$|vr)|@|jj |"|'d{Vn(|A|jj |"|(d{V#tR$r,}'t&Bd+|j|"|'Yd}'~'d}'~'wwxYw6r7nt|  }(|d,||(r tjEn tjFd{V||jvrZ|jG|})t&d-|j|j|}*|*|*H|d{Vtj |I|)|}+|+|jJ|< |jKL|+|+M|jKjNn#t$rYnwxYw t|d.d},t|d/r|Q||,0}-n%t|d1iG|d}-t|-r |-n#tR$rYnwxYw|d{V t|d2r%|S|jj d{Vn#tR$rYnwxYw|jG|d}.|.tjT}/|jJ|}0|0|0|/ur |.|j|<dSt&d3|j|j|}*|*|*Htj |I|.|}+|+|jJ|< |jKL|+|+M|jKjNdS#t$rYdSwxYwtjT}/|/=|jJ||/ur#|jJ|=|U||4dSdSdSn\#tjV$rUtjT}/tjW}1|/ |/|jXvr tjF}1|d,||1d{VtR$r}2|d,|tjFd{Vt&Bd5|j|2d ! t|2jZ}3t|2rt|2dd6nd7}4|jjrd|jjind}|\|jj d8|3d9|4d:|;d{Vn#tR$rYnwxYwYd}2~2nd}2~2wwxYwt|d.d},t|d/r|Q||,0}-n%t|d1iG|d}-t|-r |-n#tR$rYnwxYw|d{V t|d2r%|S|jj d{Vn#tR$rYnwxYw|jG|d}.|.tjT}/|jJ|}0|0|0|/ur |.|j|<dSt&d3|j|j|}*|*|*Htj |I|.|}+|+|jJ|< |jKL|+|+M|jKjNdS#t$rYdSwxYwtjT}/|/=|jJ||/ur#|jJ|=|U||4dSdSdS#t|d.d},t|d/r|Q||,0}-n%t|d1iG|d}-t|-r |-n#tR$rYnwxYw|d{V t|d2r%|S|jj d{Vn#tR$rYnwxYw|jG|d}.|. tjT}/|jJ|}0|0|0|/ur |.|j|<wt&d3|j|j|}*|*|*Htj |I|.|}+|+|jJ|< |jKL|+|+M|jKjNw#t$rYwwxYwtjT}/|/<|jJ||/ur!|jJ|=|U||4wwwxYw)=z4Background task that actually processes the message.Fc>|dSdt|ddrddSdS)NTrF)r)r+delivery_attempteddelivery_succeededs r_record_deliveryzIBasePlatformAdapter._process_message_background.._record_deliveryv s=~!% vy%00 *%)""" * *rrONr3rr cK tjtjdd{VdS#tjtjf$rYdSwxYw)Ng?r)rEr+rrFrgr) typing_tasksr_stop_typing_taskzJBasePlatformAdapter._process_message_background.._stop_typing_task s     &w~k'B'BCPPPPPPPPPPPP*G,@A     s.A A('A(rz:[%s] Suppressing stale response for interrupted session %sz0[%s] Handler returned empty/None response for %srrz MEDIA:\s*\S+z<[%s] extract_images found %d image(s) in response (%d chars)z5[%s] extract_local_files found %d file(s) in responser)text_to_speech_toolcheck_tts_requirementsz [*_`#\[\]()]iz!Empty text after markdown cleanup)rMrz[%s] Auto-TTS failed: %s)r rr3z&[%s] Sending response (%d chars) to %srurPz1[%s] Extracted %d image(s) to send as attachments)r r}r3r~z[%s] Error batching images: %sTr>.3gprUrTrRrQrS>rrrrr)quotec0g|]}d|dfS)rrr)rp_quotes rrzCBasePlatformAdapter._process_message_background..= s/!T!T!T!#8VVAYY#8#8""=!T!T!Tr)r)r rr3)r rr3z"[%s] Failed to send media (%s): %sz[%s] Error sending media: %sz$[%s] Error sending local file %s: %sr z-[%s] Processing queued message from interrupt_hermes_run_generationrrrr{uH[%s] Late-arrival pending message during cleanup — spawning drain taskr/z[%s] Error handling message: %si,zno details availablezSorry, I encountered an error (z). z2 Try again or use /reset to start a fresh session.)r r&r3rj)]rr_r+r=rrOinspect signaturerr`r9 parametersrkr r rrrrrrrdr*rrrr]rrr$rrrrmr}tools.tts_toolrvrwjson to_threadloadsr[rrexistsrrremover?r(rrrormrrryrrrr,r rrrrrrrrrrclearr>rrrr<rrrrrr{ current_taskr3rgrrrr"rrQ)9rrrrrr_thread_metadata_keep_typing_kwargs_keep_typing_sigrur_ephemeral_ttl media_filesr} text_content local_files _tts_pathrvrw_json speech_texttts_result_strtts_datatts_errr+r~ batch_err _VIDEO_EXTS _IMAGE_EXTS _image_paths_non_image_media media_pathr_ext_non_image_localr_batchr media_result media_errfile_err processing_okrJ_active drain_task_callback_generation_post_cb late_pendingr existing_taskrrh error_type error_detailr|rprqrts9 @@@@rr>z/BasePlatformAdapter._process_message_backgroundp s#" * * * * * */33K@@SGMOO-<k*EJLDZdK)?@@`d)+;< $&01BCC  :& $ $ $#    $  #|7G7R'R'R0?  -) D  $  %          M T++,A5II I I I I I I I"22599999999H(,'='=h'G'G $Hn #**,,  4#999 PI   r OQUQZ\a\h\pqqqu m(,(:(:8(D(D% X(,':':8'D'D$ +334H"MMSSUU !vor<HHNNPP GKK ^`d`iknoukvkvx{}EyFyFGGG-1,D,D\,R,R) \vKK WY]Ybdghsdtdtuuu ! 225<3GHHW!.+2CCC(D +D W^^^^^^^^1133 B0000*,&"l*S*STYUYTY*Z*`*`*b*bK#.V&01T&U&U U3:3D 3+444......N(-{{>'B'BH(0 [(A(AI$WWW'A49gVVVVVVVVW !i!7!7!9!9 ! !"mm$)L$8'0%5, !Ii0000&!!! D!!Ii0000&!!! D! KK H$)UXYeUfUfhmhth|}}}#'#8#8 % 4 ,!&!1!1 $9$$F %$V,,, ' *Q.."N/"-/77$)L$8'-'8(68#3355  nKK SUYU^`cdj`k`kllln"77$)L$8#)%5(3 8 %nnn'GT]hlmmmmmmmmn POO HHH 988888%' )+ ,7HH(J ++288::D{**8*$++J7777(//X0FGGGG)+ !,;;II-3355DD$++I6666(// :::: n n!T!T!T!T|!T!T!T"77$)L$8#)%5(3 8 %nnn'GT]hlmmmmmmmmn-=]](J"Q%mK888888888]":..5;;==5dmSS[\\\15(- (<+5)92A22,,,,,,LL !K//15(- (<+5)92A22,,,,,,LL 261C1C(- (<*4)92D22,,,,,,L ,3u"NN+OQUQZ\_amasttt$]]]'EtyR[\\\\\\\\]"2mmI"Q%mK888888888m"9oo4::<<+--"&//(- (<+4)9#2## #'"4"4(- (<*3)9#5## %mmm %KTYXackllllllllm3E\..dS[nnJ\M++(-:Y!))@Q@Y       d444 $ 6 : :; G G  LdiXXX/33K@@&MMOOO'')))))))))%044]KPP 4>#K0*..z:::001G1OPPPP DP$+($$ t9:: `::3; #4)CRHHLL[Z^__!! HJJJJ D$#%% % % % % % % % 4//A**5<+?@@@@@@@@@     155k4HHL'&355 $ 3 7 7 D D !-%\99;GD*;777LLb #377 DDG* !(!488{SS""J 8BD' 4.22:>>>"44T5K5STTTTT$. '355 +0C0G0G 0T0TXd0d0d+K8// ?/SSSSS,+0d0dO5L%   "/11L'1G#|4;Y'Y'Y+3++,DeWUU U U U U U U U    ++,DeM^Mfgg g g g g g g g LL:DIqSWL X X X !!WW- /21vvQs1vvdsd||;Q LQLLb#lK1G#H#Hhl ii!L0L*LL'LLL.     # >$+($$ t9:: `::3; #4)CRHHLL[Z^__!! HJJJJ D$#%% % % % % % % % 4//A**5<+?@@@@@@@@@     155k4HHL'&355 $ 3 7 7 D D !-%\99;GD*;777LLb #377 DDG* !(!488{SS""J 8BD' 4.22:>>>"44T5K5STTTTT$. '355 +0C0G0G 0T0TXd0d0d+K8// ?/SSSSS,+0d0dw$+($$ t9:: `::3; #4)CRHHLL[Z^__!! HJJJJ D$#%% % % % % % % % 4//A**5<+?@@@@@@@@@     155k4HHL'&355 $ 3 7 7 D D !-%\99;GD*;77LLb #377 DDG* !(!488{SS""J 8BD' 4.22:>>>"44T5K5STTTT$. '355 +0C0G0G 0T0TXd0d0d+K8// ?/SSSS,0ds)BBBHsBM=<s= N2!N-(s-N22&s(P'Ps P$!s#P$$s'Q)P>=Q> Q Q Q  QC8s)U10s1 V(;#V#s#V((Cs;7Z32s3 [*=#[% s%[**+sC)`?s `7 !`2,s2`77'sA;cs d%"d s dDs9i s isis k k%$k%95l// l<;l<9q q('q(ABA,x/A x:Bxx x xxxABxAB z z%$z%95{// {<;{<9A@@ A@(@'A@(BA.AKC0 AC;C:AKC; ADDAKDADDAKD5AEEAKE AEEAKEAEEC!AKI9AI;I:AKI; AJJAKJAJJAAKc Kd}t|D]}d|jD}|sn|D]0}|j||1 t jt jd|Dddidd{V#t j$r<t d |j td |DYnwxYw|j |j |j |j |j dS) aCancel any in-flight background message-processing tasks. Used during gateway shutdown/replacement so active sessions from the old process do not keep running after adapters are being torn down. Each cancelled task is awaited with a 5s bound so a wedged finally (typing-task cleanup, on_processing_complete hook) can't stall the whole shutdown path. Stragglers are released from our tracking and allowed to finish unwinding on their own. c:g|]}||Srr5)rr6s rrz?BasePlatformAdapter.cancel_background_tasks..C s%PPPdDIIKKPTPPPrc3>K|]}tj|VdSr)r+rFrts rrz>BasePlatformAdapter.cancel_background_tasks..L s,;;'.++;;;;;;rreturn_exceptionsTrDrNzo[%s] %d background task(s) did not exit within 5s; releasing tracking and letting them unwind in the backgroundc:g|]}||Srrrs rrz?BasePlatformAdapter.cancel_background_tasks..U s%#E#E#E!AFFHH#EA#E#E#Er)r$rrrrEr+rgatherrrrrdr$rrrr)rMAX_DRAIN_ROUNDSrdtasksr6s rcancel_background_tasksz+BasePlatformAdapter.cancel_background_tasks- s('((  APPd&<PPPE   .224888  &N;;U;;;*. '   SIs#E#Eu#E#E#EFF    $$&&& &,,... !!### $$&&& ##%%%%%s5BAC C cR||jvo|j|S)z3Check if there's a pending interrupt for a session.)rrr9s rhas_pending_interruptz)BasePlatformAdapter.has_pending_interrupt` s)d33c8Mk8Z8a8a8c8ccrc8|j|dS)z0Get and clear any pending message for a session.N)rrr9s rget_pending_messagez'BasePlatformAdapter.get_pending_messaged s%))+t<<s:$    rc KdS)z Get information about a chat/channel. Returns dict with at least: - name: Chat name - type: "dm", "group", "channel" Nrrs r get_chat_infoz!BasePlatformAdapter.get_chat_info s  rc|S)z Format a message for this platform. Override in subclasses to handle platform-specific formatting (e.g., Telegram MarkdownV2, Discord markdown). Default implementation returns content as-is. r)rr&s rformat_messagez"BasePlatformAdapter.format_message s r max_lengthr1zCallable[[str], int]c|pt}|||kr|gSd}d}g}|}d}|r|d|dnd} ||z || z ||z } | dkr|dz} || ||z||z kr|| |zn |turt|| |} n| } |d| } | d} | | dzkr| d } | dkr| } |d| }|d |d z }|dzdkr|d }|d kr;||dz d kr,|d d |}|d kr||dz d k,|d krI|d d |}|dd |}t ||}|| dzkr|} |d| }|| d}| |z}|du}|pd}|dD]n}|}| drC|rd}d}2d}|dd}|r|d nd}o|r||z }|}nd}|||t|dkr*t|fdt|D}|S)a9 Split a long message into chunks, preserving code block boundaries. When a split falls inside a triple-backtick code block, the fence is closed at the end of the current chunk and reopened (with the original language tag) at the start of the next chunk. Multi-chunk responses receive indicators like ``(1/3)``. Args: content: The full message content max_length: Maximum length per chunk (platform-specific) len_fn: Optional length function for measuring string length. Defaults to ``len`` (Unicode code-points). Pass ``utf16_len`` for platforms that measure message length in UTF-16 code units (e.g. Telegram). Returns: List of message chunks z ```Nz```rrr)r# `z\`r\rFTrKc2g|]\}}|d|dzddS)z (r)rrr)richunktotals rrz8BasePlatformAdapter.truncate_message..! sG19E5,,AE,,E,,,r) r$rr2rfindrurfrrr]rr enumerate)r&rr1_lenINDICATOR_RESERVE FENCE_CLOSEchunksr carry_langprefixheadroom _cp_limitregionsplit_atrbacktick_countlast_bt safe_splitnl_split chunk_body full_chunkin_codelangrbstrippedtagrs @rtruncate_messagez$BasePlatformAdapter.truncate_message s2} 4==J & &9   %) S &.8-C):))))F"$55V DttKGXGXXH!||%?tF||dd9oo->O1OOO fy01113.y(DII $ z z*F||D))H)q.((!<<,,!||$")8),I&__S11IOOE4J4JJN!Q&&#//#..kki! &<&D&D'ooc1g>>Gkki! &<&D&DQ;;!*a!A!AJ(tQ@@H!$Z!:!:J!IN22#-"9H9-J!()),3355I*,J!,G#D"((.. = =::<<&&u--=="'!"&&qrrl002214rrrrrrrrrrrrrs1)~1)1)1)1)1)f5555X5)Xc])))X)&(3-&&&X&+t+++X+ , , , , , ,,x9N8OQZ[_Q`cgQg8g/h,mq,,,,    S3dt C3sW[(,,,,+c+++X+dX(>(d((((-*      ^ 6$)D((( @@@@@ @  @ @@@@:  *30         R.2!@!@!@!@ !@  !@  !@4S>*!@ !@!@!@!@P#'-1    #   3-  4S>*       (             .2 7`7`7`U38_%7`4S>* 7`  7`  7`7`7`7`z"&"&-1 QQQQ# Q 3- Q 4S>* Q QQQQ."&"&-1 FFFF# F 3- F 4S>* F FFFF"&s&t&&&\& --d5c?.CS.H(I---\-f"&"& QQQQ# Q 3- Q QQQQ( W W W  W W W W$"&"& QQQQ# Q 3- Q QQQQ."&#'"& QQQQ# Q C= Q 3- Q QQQQ0"&"& QQQQ# Q 3- Q QQQQ('s'uT%T 2B-CS-H'I'''\'RASAU49c>-BAAA\AL+/ P1P1P1P1 MD( P1  P1P1P1P1d)S)T))))-c-d---- C # RV     "& UUUUU $J U  UUUU."& 2222$J 2 D 22226=|=====@,@IZ@_c@@@@OCOOsOW[OOOOH8C=HTHHH\H _# _4 _ _ _\ _#% s8J2K4#'PPPP3- P  P  PP PPPPd hsm s s   \ 6*. //// & /  ////(%#%$%%%%"CD>48  "'-0   H# $ 05050505 05  05  05050505dCC}C  CCCC"KTKTKT KT  KTKTKTKTZr;,r;4r;r;r;r;h@e@@@\@${T|{TRU{TZ^{T{T{T{Tz 1&1&1&1&fdddddd=s=x 7M====$(!%#'#'$(%)%)"&(,$(# # # C=#  # # # C= # C=# SM# c]# c]# # 3-# ! # SM#  # # # # J 3 4S>   ^  c c    37AAAA/0A c AAA\AAArr)Fr)r)r)rr#)r6)r )r r#)rQ)rrr N)xrwr+r~r6r rr rsocketr:rXrWrabcrrrrutilsrr!r"r frozensetrrrrrrr rtr&r-r2rGrjrr{rrrrrrrrrr dataclassesrrrpathlibrtypingrrrrrrrrenumr_Pathrinsert__file__rergateway.configrrgateway.sessionrrhermes_constantsr*GATEWAY_SECRET_CAPTURE_UNSUPPORTED_MESSAGErrrrbytesrrr3rDrHrIrMrOrWSUPPORTED_VIDEO_TYPESrXr[r^SUPPORTED_DOCUMENT_TYPESr_rirkrmrrrrrPatternrrrrrrrrrrrrrrs^   ########!!!!!!%%%%%%  8 $ $ iJJJKK #,)VV,<"="= y&'!233$$$$$ cTd. + + + + + +#cc&#ss&      F!C$J!!!!H5C5E#sTz/$:5555(49&A&A3&Ac&At&At&A&A&A&ARcDIoc3h&G#c(&RUY&Y^b.$(IMDjS /E#s(O3c#h>E 4Z D C$J 4    <#(d #(uT4Z7H#(#(#(#(L3d VZB)(((((((OOOOOOOOOOOOOOOOOOOO!!!!!!33uuX..008;<<===33333333<<<<<<<<++++++b+ "&"&#"&"&S"&"&"&"&J6!.??T Ed"Sc888C8c8S8QT8888vsC8!. >>T Sc$88C8c8S8QT8888D!.??      T Sc $^$57GHH  ? L J   L         L L  V P  X!( ESS@#s*     $    LLLLLLL L`BJF VVBJOQSQ^__BJ:BMJJD#U2:c?C+?%@8  $!$!$!$!$!S$!$!$!X ;*;*;*3 ,-;*;* ;*  ;*  ;*;*;*;*J  <.)HU3HXCX=Y4Z*[[\ !Tz 4Z B!4444Tz4 #Y 4444no!o!o!o!o!#o!o!o!o!o!r