i]$"UdZddlmZddlZddlZddlZddlZddlmZm Z ddl Z ej e Z dZdZdedd id d edd d d id gZded<dgZded<d.d/dZGdde jZd0dZd1dZd2dZd3d#Zd4d$Zd5d)Zd6d-ZdS)7aYTelegram-specific network helpers. Provides a hostname-preserving fallback transport for networks where api.telegram.org resolves to an endpoint that is unreachable from the current host. The transport keeps the logical request host and TLS SNI as api.telegram.org while retrying the TCP connection against one or more fallback IPv4 addresses. ) annotationsN)IterableOptionalzapi.telegram.orgg@zhttps://dns.google/resolveA)nametype)urlparamsheadersz$https://cloudflare-dns.com/dns-queryAcceptzapplication/dns-jsonz list[dict]_DOH_PROVIDERSz149.154.167.220 list[str]_SEED_FALLBACK_IPSreturn str | Nonec(ddlm}|d|S)Nr)resolve_proxy_urlTELEGRAM_PROXY target_hosts)gateway.platforms.baser)rrs G/home/ubuntu/.hermes/hermes-agent/gateway/platforms/telegram_network.py_resolve_proxy_urlr.s+888888  -L I I IIc*eZdZdZd dZdd Zdd Zd S)TelegramFallbackTransportadRetry Telegram Bot API requests via fallback IPs while preserving TLS/SNI. Requests continue to target https://api.telegram.org/... logically, but on connect failures the underlying TCP connection is retried against a known reachable IP. This is effectively the programmatic equivalent of ``curl --resolve api.telegram.org:443:``. fallback_ips Iterable[str]c ^dtt|D|_t t g|j}|r dvr|d<t jdi|_fd|jD|_ d|_ tj |_ dS)Ncg|]}|Sr!).0ips r z6TelegramFallbackTransport.__init__..>s```Rb```rrproxyc4i|]}|tjdiS)r!)httpxAsyncHTTPTransport)r"r#transport_kwargss r z6TelegramFallbackTransport.__init__..Cs:   ACB(<<+;<<   rr!)dictfromkeys_normalize_fallback_ips _fallback_ipsr_TELEGRAM_API_HOSTr'r(_primary _fallbacks _sticky_ipasyncioLock _sticky_lock)selfrr) proxy_urls ` r__init__z"TelegramFallbackTransport.__init__=s``4==9PQ]9^9^+_+_```&5G4]$J\4]^^^  2(888(1 W %0DD3CDD     GKGY   *.#LNNrrequest httpx.Requestrhttpx.Responsec K|jjtks|js |j|d{VS|j}|r|gndg}|jD]}||kr||d}|D]8}||nt||}||jn |j |} ||d{V}|i|j|kr^|j 4d{V|j|kr"||_t d|dddd{Vn#1d{VswxYwY|cS#t$ru} | }t| s|:t d| d|jYd} ~ t d|| Yd} ~ 2d} ~ wwxYw|t!d|)NzQ[Telegram] Primary api.telegram.org path unreachable; using sticky fallback IP %szR[Telegram] Primary api.telegram.org connection failed (%s); trying fallback IPs %s, z$[Telegram] Fallback IP %s failed: %sz=All Telegram fallback IPs exhausted but no error was recorded)r hostr/r.r0handle_async_requestr2append_rewrite_request_for_ipr1r5loggerwarning Exception_is_retryable_connect_errorjoin RuntimeError) r6r9 sticky_ip attempt_orderr# last_error candidate transportresponseexcs rr?z.TelegramFallbackTransport.handle_async_requestIs ; 1 1 19K 1;;GDDDDDDDD DO do&;&;#0?b00.0DO"NN s "     2377:NNl $"455 HHHHEr3OOO   ^__ _sC%5D/.DD/ D$ $D/'D$ (D// F.9AF)F))F.NonecK|jd{V|jD]}|d{VdSN)r0acloser1values)r6rLs rrRz TelegramFallbackTransport.aclosetszm""$$$$$$$$$//11 % %I""$$ $ $ $ $ $ $ $ $ % %rN)rr)r9r:rr;)rrO)__name__ __module__ __qualname____doc__r8r?rRr!rrrr4s[ + + + +))))V%%%%%%rrrSrcg}|D]}t|}|s& tj|}n+#t$rt d|YcwxYw|jdkrt d||js|j s|j s|j rt d|| t||S)Nz)Ignoring invalid Telegram fallback IP: %rz*Ignoring non-IPv4 Telegram fallback IP: %sz2Ignoring private/internal Telegram fallback IP: %s) strstrip ipaddress ip_address ValueErrorrBrCversion is_private is_loopback is_link_localis_unspecifiedr@)rS normalizedvaluerawaddrs rr-r-zsJ%%%jj     ',,DD    NNF L L L H  <1   NNG M M M  ? d. $2D H[  NNOQT U U U #d))$$$$ sA%A)(A)recf|sgSd|dD}t|S)Nc6g|]}|Sr!)r[)r"parts rr$z)parse_fallback_ip_env..s 7 7 7dTZZ\\ 7 7 7r,)splitr-)repartss rparse_fallback_ip_envrns<  7 7ekk#&6&6 7 7 7E "5 ) ))rset[str]c tjtdtj}d|DS#t$rt cYSwxYw)zJReturn the IPv4 addresses that the OS resolver gives for api.telegram.org.ic*h|]}|ddS)rYrr!)r"rgs r z&_resolve_system_dns..s ///tQ ///r)socket getaddrinfor/AF_INETrDset)resultss r_resolve_system_dnsrxsZ$%7fnMM//w//// uu s03A Aclienthttpx.AsyncClientproviderr+c`K ||d|d|dd{V}||}g}|dgD]~}|ddkr|d d } t j|||o#t$rY{wxYw|S#t$r.}t d |d|gcYd}~Sd}~wwxYw) z/Query one DoH provider and return A-record IPs.r r r )r r NAnswerrdatazDoH query to %s failed: %s) getraise_for_statusjsonr[r\r]r@r^rDrBdebug)ryr{respripsanswerrfrNs r_query_doh_providerrsgZZ UOHX$6@S          yy{{hhx,,  Fzz&!!Q&&**VR((..00C $S))) 3      18E?CHHH sBB4C59)C#"C5# C0-C5/C00C55 D-?#D("D-(D-c Ktjtjt4d{V fdtD}t jt}t j|g|Rddid{V}dddd{Vn#1d{VswxYwYt|dtr|dn t}g}|ddD],}t|tr| |-t}g}|D]4}||vr.||vr*| |||5t|} | r0t dd | | St d d |pd d t(tt(S) a<Auto-discover Telegram API IPs via DNS-over-HTTPS. Resolves api.telegram.org through Google and Cloudflare DoH, collects all unique IPs, and excludes the system-DNS-resolved IP (which is presumably unreachable on this network). Falls back to a hardcoded seed list when DoH is also unavailable. )timeoutNc0g|]}t|Sr!)r)r"prys rr$z)discover_fallback_ips..s$LLL(33LLLrreturn_exceptionsTrr~z,Discovered Telegram fallback IPs via DoH: %sr=zMDoH discovery yielded no new IPs (system DNS: %s); using seed fallback IPs %sunknown)r' AsyncClientTimeout _DOH_TIMEOUTr r3 to_threadrxgather isinstancervlistextendaddr@r-rBrrFinfor) doh_taskssystem_dns_taskrw system_ipsdoh_ipsrseen candidatesr# validatedrys @rdiscover_fallback_ipsrs |)D)DEEE\\\\\\\LLLL^LLL !+,?@@[[[[VZ[[[[[[[[\\\\\\\\\\\\\\\\\\\\\\\\\\\ *4GAJ)D)DO71::#%%JG QRR[ a    NN1   UUDJ"" T>>b 22 HHRLLL   b ! ! !( 33I CTYYyEYEYZZZ KKW ** $%% " # ##sAB BBr9r:r#rZc|jjpt}|j|}|j}||d<t |j}||d<tj |j |||j |S)N)r>r> sni_hostname)methodr r stream extensions) r r>r/ copy_withr copyr+rr'Requestrr)r9r# original_hostr r rs rrArAsK$:(:M +  R  ( (Co""$$G#GFOg())J!.J~ =~ ~    rrNrDboolcNt|tjtjfSrQ)rr'ConnectTimeout ConnectError)rNs rrErEs cE0%2DE F FFrrQ)rr)rSrrr)rerrr)rro)ryrzr{r+rr)rr)r9r:r#rZrr:)rNrDrr)rW __future__rr3r\loggingrstypingrrr' getLoggerrTrBr/rr __annotations__rrAsyncBaseTransportrr-rnrxrrrArEr!rrrs#""""" %%%%%%%%  8 $ $' ,-s;; 6-s;;45     "3 33333JJJJJ C%C%C%C%C% 8C%C%C%L*****4)$)$)$)$X     GGGGGGr