i ` UdZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlmZddlmZmZmZmZejeZdaeeed<e jZdefdZdeddfd Zd Zd Zd Z d Z!d Z"d Z# dd l$m%Z%m&Z&dd l'm(Z(dZ ddl)m*Z*dZn #e+$rd ZYnwxYw ddl)m,Z,dZ-n #e+$rd Z-YnwxYw ddl.m#Z#n #e+$re/dYnwxYw ddl.m0Z0m1Z1m2Z2m3Z3m4Z4m5Z5m6Z6dZ n #e+$re/dYnwxYw ddl.m7Z7m8Z8m9Z9m:Z:dZ!n #e+$re/dYnwxYwn #e+$re/dYnwxYwde;fdZ<e<Z"ere"se/ddZ=dZ>dZ?dZ@dZAeBhdZCe jDde jEZFd eeGdeGfd!ZHd"edefd#ZIe jDd$e jJd%fe jDd&e jJd'fe jDd(e jJd)fe jDd*e jJd+fe jDd,e jJd-fe jDd.e jJd/fe jDd0e jJd1fe jDd2e jJd3fe jDd4e jJd5fe jDd6e jJd7fg ZKded8ed9edeefd:ZLd;eGded;eGdeNeeGffd?ZOd@ePdefdAZQeRdBfdCZSGdDdEZTGdFdGZUiZVeeeUfedH<iZWeeeRfedI<iZXeeeYfedJ<dZZdKZ[deddfdLZ\deddfdMZ]dNa^eNedO<deNfdPZ_d@ePde;fdQZ`ded@ePdRefdSZadTZbeNedU<d@ePde;fdVZcded@ePdRefdWZddaeeejfedX<dagee jhedY<e jZiiZjeeRefedZ<ekZleked[<dekfd\Zmd]Znd^Zodd`eYfdaZpdefdbZqdcZrdeeeGffddZsdeedfeGdeUfdgZtded8edheYfdiZudedheYfdjZvdedheYfdkZwdedheYfdlZxdedheYfdmZydefdnZzdoeGdzdeGfdpZ{dqedefdrZ|dedeGfdsZ}dedeeGfdtZ~dqeduedekefdvZddqedwe;de;fdxZdydzd{d|d}Zded~eUdfeGdeeGfdZdeefdZdeed~eUdfeGdeefdZdeedfeGdeefdZdeeeGfdeefdZdeefdZdeeGfdZdeeeeNffdZdZdde;ddfdZdZdS)a MCP (Model Context Protocol) Client Support Connects to external MCP servers via stdio or HTTP/StreamableHTTP transport, discovers their tools, and registers them into the hermes-agent tool registry so the agent can call them like any built-in tool. Configuration is read from ~/.hermes/config.yaml under the ``mcp_servers`` key. The ``mcp`` Python package is optional -- if not installed, this module is a no-op and logs a debug message. Example config:: mcp_servers: filesystem: command: "npx" args: ["-y", "@modelcontextprotocol/server-filesystem", "/tmp"] env: {} timeout: 120 # per-tool-call timeout in seconds (default: 120) connect_timeout: 60 # initial connection timeout (default: 60) github: command: "npx" args: ["-y", "@modelcontextprotocol/server-github"] env: GITHUB_PERSONAL_ACCESS_TOKEN: "ghp_..." remote_api: url: "https://my-mcp-server.example.com/mcp" headers: Authorization: "Bearer sk-..." timeout: 180 analysis: command: "npx" args: ["-y", "analysis-server"] sampling: # server-initiated LLM requests enabled: true # default: true model: "gemini-3-flash" # override model (optional) max_tokens_cap: 4096 # max tokens per request timeout: 30 # LLM call timeout (seconds) max_rpm: 10 # max requests per minute allowed_models: [] # model whitelist (empty = all) max_tool_rounds: 5 # tool loop limit (0 = disable) log_level: "info" # audit verbosity Features: - Stdio transport (command + args) and HTTP/StreamableHTTP transport (url) - Automatic reconnection with exponential backoff (up to 5 retries) - Environment variable filtering for stdio subprocesses (security) - Credential stripping in error messages returned to the LLM - Configurable per-server timeouts for tool calls and connections - Thread-safe architecture with dedicated background event loop - Sampling support: MCP servers can request LLM completions via sampling/createMessage (text and tool-use responses) Architecture: A dedicated background event loop (_mcp_loop) runs in a daemon thread. Each MCP server runs as a long-lived asyncio Task on this loop, keeping its transport context alive. Tool call coroutines are scheduled onto the loop via ``run_coroutine_threadsafe()``. On shutdown, each server Task is signalled to exit its ``async with`` block, ensuring the anyio cancel-scope cleanup happens in the *same* Task that opened the connection (required by anyio). Thread safety: _servers and _mcp_loop/_mcp_thread are accessed from both the MCP background thread and caller threads. All mutations are protected by _lock so the code is safe regardless of GIL presence (e.g. Python 3.13+ free-threading). N)datetime)AnyDictListOptional_mcp_stderr_log_fhreturnct5ttcdddS ddlm}|dz }|dd|dz }t |dd d d }||anl#t$r_}t d | t tj dd an#t$rtj aYnwxYwYd}~nd}~wwxYwtcdddS#1swxYwYdS)a^Return a shared append-mode file handle for MCP subprocess stderr. Opened once per process and reused for every stdio server. Must have a real OS-level file descriptor (``fileno()``) because asyncio's subprocess machinery wires the child's stderr directly to that fd. Falls back to ``/dev/null`` if opening the log file fails. Nr)get_hermes_homelogsT)parentsexist_okzmcp-stderr.logazutf-8replace)encodingerrors bufferingz0Failed to open MCP stderr log, using devnull: %sw)r)_mcp_stderr_log_lockrhermes_constantsr mkdiropenfileno Exceptionloggerdebugosdevnullsysstderr)r log_dirlog_pathfhexcs 3/home/ubuntu/.hermes/hermes-agent/tools/mcp_tool.py_get_mcp_stderr_logr'os ""  )%"""""""" 0 8 8 8 8 8 8%o''&0G MM$M 6 6 6!11HhgiSTUUUB IIKKK!#   0 0 0 LLKS Q Q Q 0%)"*cG%L%L%L"" 0 0 0&)Z""" 0  0"/""""""""""""""""""s_C=AA>=C=> C'C"$CC"CC"CC"C="C'' C==DD server_namect} tjd}|d|d|d|dS#t $rYdSwxYw)aWrite a human-readable session marker before launching a server. Gives operators a way to find each server's output in the shared ``mcp-stderr.log`` file without needing per-line prefixes (which would require a pipe + reader thread and complicate shutdown). z%Y-%m-%d %H:%M:%Sz ===== [z] starting MCP server 'z' ===== N)r'rnowstrftimewriteflushr)r(r$tss r&_write_stderr_log_headerr/s   B \^^ $ $%8 9 9 NRNN NNNOOO       sAA(( A65A6Fz 2025-03-26) ClientSessionStdioServerParameters) stdio_clientT)streamablehttp_client)streamable_http_client)LATEST_PROTOCOL_VERSIONzRmcp.types.LATEST_PROTOCOL_VERSION not available -- using fallback protocol version)CreateMessageResultCreateMessageResultWithTools ErrorDataSamplingCapabilitySamplingToolsCapability TextContentToolUseContentz5MCP sampling types not available -- sampling disabled)ServerNotificationToolListChangedNotificationPromptListChangedNotificationResourceListChangedNotificationzGMCP notification types not available -- dynamic tool discovery disabledz6mcp package not installed -- MCP tool support disabledctsdS dtjtjvS#t t f$rYdSwxYw)zCheck if ClientSession accepts ``message_handler`` kwarg. Inspects the constructor signature for backward compatibility with older MCP SDK versions that don't support notification handlers. Fmessage_handler)_MCP_AVAILABLEinspect signaturer0 parameters TypeError ValueErrorr&_check_message_handler_supportrKsV u G$5m$D$D$OOO z "uus+AAzKMCP SDK does not support message_handler -- dynamic tool discovery disabledx<>HOMELANGPATHTERMUSERSHELLLC_ALLTMPDIRz(?:ghp_[A-Za-z0-9_]{1,255}|sk-[A-Za-z0-9_]{1,255}|Bearer\s+\S+|token=[^\s&,;\"']{1,255}|key=[^\s&,;\"']{1,255}|API_KEY=[^\s&,;\"']{1,255}|password=[^\s&,;\"']{1,255}|secret=[^\s&,;\"']{1,255})user_envci}tjD](\}}|tvs|dr|||<)|r|||S)aBuild a filtered environment dict for stdio subprocesses. Only passes through safe baseline variables (PATH, HOME, etc.) and XDG_* variables from the current process environment, plus any variables explicitly specified by the user in the server config. This prevents accidentally leaking secrets like API keys, tokens, or credentials to MCP server subprocesses. XDG_)renvironitems_SAFE_ENV_KEYS startswithupdate)rXenvkeyvalues r&_build_safe_envrcso Cj&&(( U . CNN6$:$: CH 8 JrJtextc8td|S)zStrip credential-like patterns from error text before returning to LLM. Replaces tokens, keys, and other secrets with [REDACTED] to prevent accidental credential exposure in tool error responses. z [REDACTED])_CREDENTIAL_PATTERNsubrds r&_sanitize_errorri's  " "< 6 66rJz)ignore\s+(all\s+)?previous\s+instructionsz8prompt override attempt ('ignore previous instructions')zyou\s+are\s+now\s+az.identity override attempt ('you are now a...')z1your\s+new\s+(task|role|instructions?)\s+(is|are)ztask override attemptz system\s*:\s*zsystem prompt injection attemptz <\s*(system|human|assistant)\s*>zrole tag injection attemptz'do\s+not\s+(tell|inform|mention|reveal)zconcealment instructionz(curl|wget|fetch)\s+https?://znetwork command in descriptionzbase64\.(b64decode|decodebytes)zbase64 decode referencezexec\s*\(|eval\s*\(zcode execution referencez&import\s+(subprocess|os|shutil|socket)zdangerous import reference tool_name descriptioncg}|s|StD]/\}}||r||0|r1td||d|||S)zxScan an MCP tool description for prompt injection patterns. Returns a list of finding strings (empty = clean). uUMCP server '%s' tool '%s': suspicious description content — %s. Description: %.200s; )_MCP_INJECTION_PATTERNSsearchappendrwarningjoin)r(rjrkfindingspatternreasons r&_scan_mcp_descriptionrvOs H 2$$ >>+ & & $ OOF # # #  " DIIh$7$7     OrJr` directoryc t|pi}|s|S|dd}d|tjD}||vr|g|}|rtj|n||d<|S)z=Prepend *directory* to env PATH if it is not already present.rRcg|]}||SrIrI).0parts r& z!_prepend_path..ks A A AdD AT A A ArJ)dictgetsplitrpathseprr)r`rwupdatedexistingpartss r& _prepend_pathrds39"ooG {{62&&H A AhnnRZ88 A A AE#U#05Dbjooe,,,9GFO NrJcommandc tjt|}t |pi}tj|vrDd|vr|dnd}tj||}|r|}n|dvrtjtj dtj tjdd}tj |dd |tj tjdd d |g}|D]D}tj |r#tj |tj r|}nEtj|} | rt|| }||fS) zResolve a stdio MCP command against the exact subprocess environment. This primarily exists to make bare ``npx``/``npm``/``node`` commands work reliably even when MCP subprocesses run under a filtered PATH. rRN)path>npmnpxnode HERMES_HOME~z.hermesrbinz.local)rr expanduserstrstripr~sepshutilwhichgetenvrrisfileaccessX_OKdirnamer) rr`resolved_command resolved_envpath_arg which_hit hermes_home candidates candidate command_dirs r&_resolve_stdio_commandrrs w))#g,,*<*<*>*>?? r??L v%%%+1\+A+A<''tL!1AAA  (   !7 7 7',, !27<<0B0B30G0G#S#SK  [&%9IJJ RW//44hGWXXJ(   7>>),,9bg1N1N'0$E'//"233K@$\;?? \ ))rJr%cdtdttffd dtdttffd |}|r;d|d}tj|dvr|dz }t|Sg}|D]}||vr||td |d d S) zERender nested MCP connection errors into an actionable short message.currentr ct|dd}|r|D]}|}|r|cSdSt|tr^t|ddrt|jSt jdt|}|r|dSdD]9}t||d}t|tr|}|r|cS:dS)N exceptionsfilenamez$No such file or directory: '([^']+)'r __cause__ __context__) getattr isinstanceFileNotFoundErrorrrrerogroup BaseException)rnestedchildmissingmatchattr nested_exc _find_missings r&rz,_format_connect_error.._find_missings,55   # #'-..#"NNN#4 g0 1 1 &w D11 -7+,,,IEs7||TTE &{{1~~%0 # #D $55J*m44 #'- 33#"NNNtrJct|dd}|r'g}|D] }||!|Sg}t|}|r||dD]F}t||d}t |t r||G|p |jjgS)Nrr) rextendrrrprr __class____name__) rr flattenedrmessagesrdrr_flatten_messagess r&rz0_format_connect_error.._flatten_messagess,55  #%I ; ;  !2!25!9!9:::: 7||!!##  " OOD ! ! !0 ? ?D $55J*m44 ? 1 1* = =>>>7G-677rJzmissing executable ''>rrrz (ensure Node.js is installed and PATH includes its bin directory, or set mcp_servers..command to an absolute path and include that directory in mcp_servers..env.PATH)rmNrO) rrrrrrbasenamerirprr)r%rmessagededupeditemrrs @@r&_format_connect_errorrs(}#,8=8T#Y888888"mC  G(3333 7  G $ $(> > > A G w'''G!!#&&!! w   NN4 499WRaR[11 2 22rJrc ||}t|trtj|s|St ||S#t t tf$r|cYSwxYw)zCoerce a config value to a numeric type, returning *default* on failure. Handles string values from YAML (e.g. ``"10"`` instead of ``10``), non-finite floats, and values below *minimum*. )rfloatmathisfinitemaxrGrH OverflowError)rbdefaultcoerceminimumresults r& _safe_numericrsw  fe $ $ T]6-B-B N67### z= 1s5AAA$#A$ceZdZdZddddZdedefdZd efd Z d e efd Z e d efd Z d eefd Ze ddedefdZdZdZd efdZdZdS)SamplingHandlera+Handles sampling/createMessage requests for a single MCP server. Each MCPServerTask that has sampling enabled creates one SamplingHandler. The handler is callable and passed directly to ``ClientSession`` as the ``sampling_callback``. All state (rate-limit timestamps, metrics, tool-loop counters) lives on the instance -- no module-level globals. The callback is async and runs on the MCP background event loop. The sync LLM call is offloaded to a thread via ``asyncio.to_thread()`` so it doesn't block the event loop. endTurn maxTokenstoolUse)stoplength tool_callsr(configc&||_t|dddt|_t|dddt |_t|dddt|_t|dddtd |_|d |_ |d g|_ tj tj tjd }|t|ddtj |_g|_d |_d d d d d|_dS)Nmax_rpm timeoutmax_tokens_capimax_tool_roundsrNr)rmodelallowed_models)rinforq log_levelr)requestsr tokens_usedtool_use_count)r(rrintrrrrrmodel_overriderloggingDEBUGINFOWARNINGrlower audit_level_rate_timestamps_tool_loop_countmetrics)selfr(r _log_levelss r&__init__zSamplingHandler.__init__sM&$VZZ 2%>%>CHH $VZZ 2%>%>EJJ +FJJ7G,N,NPTVYZZ, JJ(! , ,aa   %jj11$jj)92>> ' w|PWP_`` &??  ;// 0 0 6 6 8 8',   .0 !$%1XYZZ rJr ctj}|dz fd|jD|jdd<t|j|jkrdS|j|dS)zASliding-window rate limiter. Returns True if request is allowed.rMc g|] }|k| SrIrI)r{twindows r&r}z5SamplingHandler._check_rate_limit..s#S#S#S!F A rJNFT)timerlenrrp)rr*rs @r&_check_rate_limitz!SamplingHandler._check_rate_limit sxikkr#S#S#S#St/D#S#S#Saaa t$ % % 5 55 $$S)))trJc|jr|jS|rAt|dr1|jr*|jD]"}t|dr|jr |jcS#dS)z3Config override > server hint > None (use default).hintsnameN)rhasattrrr)r preferenceshints r&_resolve_modelzSamplingHandler._resolve_modelsz   '& &  %7;88 %[=N %#) % %4((%TY%9$$$trJct|dr|jdSt|jtr|jn|jg}dd|DS)z,Extract text from a ToolResultContent block.contentNry c3DK|]}t|d|jVdS)rdNrrdr{rs r& z.)s3NNtf8M8MNNNNNNNrJ)rrrlistrr)blockr\s r&_extract_tool_result_textz)SamplingHandler._extract_tool_result_text#scui(( EM,A2!+EM4!@!@U u}oyyNNuNNNNNNrJc Hg}|jD]}t|dr|jn(t|jt r|jn|jg}d|D}d|D}d|D}|D]3}|d|j||d4|rg} |D]} | t| ddt| d | j t| j trtj| j d nt!| j d d |j| d} d|D} | rd| | d<|| t|rt|dkr@t|ddr*||j|djdg} |D]}t|dr| d|jd0t|dr;t|dr+| ddd|jd|jid{t,dt1|j| r||j| d|S)aLConvert MCP SamplingMessages to OpenAI format. Uses ``msg.content_as_list`` (SDK helper) so single-block and list-of-blocks are handled uniformly. Dispatches per block type with ``isinstance`` on real SDK types when available, falling back to duck-typing via ``hasattr`` for compatibility. content_as_listc2g|]}t|d|S) toolUseIdrr{bs r&r}z5SamplingHandler._convert_messages..:s'III!K1H1HIAIIIrJcrg|]4}t|dt|d"t|d2|5S)rinputrrrs r&r}z5SamplingHandler._convert_messages..;sIyyyqga.@.@yWQPWEXEXyahijlwaxaxyyyyrJcrg|]4}t|dt|drt|d2|5S)rrrrrs r&r}z5SamplingHandler._convert_messages..<srEEEAwq+7N7NEX_`aciXjXjEovwx{BpCpCEaEEErJtool)role tool_call_idridcall_functionF ensure_asciir arguments)rtyper)rrc<g|]}t|d|jSrhrrs r&r}z5SamplingHandler._convert_messages..Ts)SSS6@R@RSafSSSrJrrrrrdrrr!rddatamimeType image_urlurlzdata:z;base64,)r!r'z5Unsupported sampling content block type: %s (skipped))rrrrrr rprr rrrrr~jsondumpsrrrrrdr&r%rrqr!r)rparamsrmsgblocks tool_results tool_usescontent_blockstrtc_listtumsg_dict text_partsrr s r&_convert_messagesz!SamplingHandler._convert_messages+si "?8 N8 NC,3C9J,K,KS(()#+t<<O 3;-  JIvIIILyyFyyyIEEEEEN#  "$&L#==bAA!!% N#BNN%b$0FG 0F0FGG *$&GU_`b`hjnUoUo*CBH5)Q)Q)Q)Quxy{zBvCvC%%$$+.('!J!JSSnSSS @*.))J*?*?HY')))) N~&&!++q8I60R0R+OOSX.QRBSBX$Y$YZZZZE!/  "5&11 !LL&%*)M)MNNNN$UF33 z8R8R !LL(3.35aU^5a5aUZU_5a5a-b** #NN W $U 4N e(L(LMMMrJrcodecPtrt||St|)z1Return ErrorData (MCP spec) or raise as fallback.)r8r)_MCP_SAMPLING_TYPESr8r)rr8s r&_errorzSamplingHandler._errorrs-  9$888 8   rJc |jdxxdz cc<|jdkr%d|_|d|jdS|xjdz c_|j|jkr-d|_|d|jd|jdSg}|jjD]}|jj}t|trW tj |}ni#tj tf$r(td |j|d |i}Yn,wxYwt|t"r|nd t|i}|t'd |j|jj| t|jd |j|jt3t3|ddddt5|t7d||jdS)zEBuild a CreateMessageResultWithTools from an LLM tool_calls response.rrrz Tool loops disabled for server 'z' (max_tool_rounds=0)z%Tool loop limit exceeded for server 'z' (max z rounds)zRMCP server '%s': malformed tool_calls arguments from LLM (wrapping as raw): %.100s_rawtool_use)r!rrrzEMCP server '%s' sampling response: model=%s, tokens=%s, tool_calls=%dusageN total_tokens? assistantrrrr stopReason)rrrr;r(rrrr rrr)loadsJSONDecodeErrorrHrrqr~rpr<rrlogrrrrr7)rchoiceresponser0tcargsparseds r&_build_tool_use_resultz&SamplingHandler._build_tool_use_result{sO %&&&!+&&&  1 $ $$%D !;;Z43CZZZ  "  4#7 7 7$%D !;;78H77,777  .+  B;(D$$$ Q,!Z--FF,j9,,,NN=($ %d^FFF ,",D$!7!7Pfc$ii=P  ! !.5[% ###        S  hn GHgt44nc J J       ,".     sC;DDc fd|_|jjpd}t|jd|j|jtt|ddddtdtd t| |j|j |jd  S) z8Build a CreateMessageResult from a normal text response.rryz6MCP server '%s' sampling response: model=%s, tokens=%sr?Nr@rArBrdr$rrC)rrrrrGrr(rrr6r;ri_STOP_REASON_MAPr finish_reason)rrHrI response_texts r&_build_text_resultz"SamplingHandler._build_text_results !.4"    D  hn GHgt44nc J J    #V/-2P2PQQQ.,001EyQQ     rJc@|ttdS)zjdxxdz cc<djdjdcYSt<$rQ}jdxxdz cc<dt?tA|cYd}~Sd}~wwxYwt|dds3jdxxdz cc<djdS|j!d }jd xxdz cc<tt|d!dd"d } tE| tFrjd#xx| z cc<|j$d$kr7t|j%d$r"|j%j&r'||S(||S)%zSampling callback invoked by the MCP SDK. Conforms to ``SamplingFnT`` protocol. Returns ``CreateMessageResult``, ``CreateMessageResultWithTools``, or ``ErrorData``. z5MCP server '%s' sampling rate limit exceeded (%d/min)rrz)Sampling rate limit exceeded for server 'z' (z requests/minute)modelPreferencesNr)call_llmryz:MCP server '%s' requested model '%s' not in allowed_modelszModel 'z' not allowed for server 'z '. Allowed: , systemPromptsystemr# temperaturerTc g|]G}dt|ddt|ddpdtt|ddddHS)rrryrk inputSchemaNrrkrF)r!r)r_normalize_mcp_input_schema)r{rs r&r}z,SamplingHandler.__call__.. s}   ' '62 6 6'.q-'D'D'J&A#A}d;;''!!     rJzFMCP server '%s' sampling request: model=%s, max_tokens=%d, messages=%dc 6dpdjS)Nmcp)taskrrr_ max_tokensrTrr)r[call_temperature call_toolsrgrresolved_modelrsr& _sync_callz,SamplingHandler.__call__.._sync_calls88$,!,%   rJrhz"Sampling LLM call timed out after zs for server 'rzSampling LLM call failed: choicesz5LLM returned empty response (no choices) for server 'rr?r@rr))rrrqr(rrr;rragent.auxiliary_clientr[rrrrr6rr]insertminrrr_rGrrasynciowait_for to_threadr TimeoutErrorrrirrmrrrPrrrMrR)rcontextr+r server_toolsrlrIr%rHr@r[rirjrgrrks` @@@@@@r&__call__zSamplingHandler.__call__st%%''  NNG $,    L " " "a ' " " ";;4D nDL_6_6_ NNL .    L " " "a ' " " ";;S.SS$SS26))D * * Sv/B S OOAV=PQQ R R R)4+>??  6= ) ) 2f.@.L%1  vw55    &   J    T  nj#h--               $-!*--t|HH#    L " " "a ' " " ";;3T\33#/333       L " " "a ' " " ";;H_SXX-F-FHH       xD11  L " " "a ' " " ";;($(((  !!$ Z   A%   wx$??QRSS lC ( ( 8 L ' ' '< 7 ' ' '  L 0 0 55 1) 1..vx@@ @&&vx888s&3IA K8 K8'AK3-K83K8N)r7)r __module__ __qualname____doc__rOrr~rboolrrr staticmethodr rr6rr;rMrRrXrwrIrJr&rrse  !*[PYZZ[C[[[[[.4Xc]OCOOO\OC4:CCCCN!!!3!!!\!7 7 7 r   *     }9}9}9}9}9rJrceZdZdZdZdefdZdefdZdZ de j fdZ d Z d Zdefd Zd efd Zd efdZdZd efdZd efdZdZdS) MCPServerTaskacManages a single MCP server connection in a dedicated asyncio Task. The entire connection lifecycle (connect, discover, serve, disconnect) runs inside one asyncio Task so that anyio cancel-scopes created by the transport client are entered and exited in the same Task context. Supports both stdio and HTTP/StreamableHTTP transports. )rsession tool_timeout_task_ready_shutdown_event_reconnect_event_toolsr;_config _sampling_registered_tool_names _auth_type _refresh_lock _rpc_lock_pending_refresh_tasksrc||_d|_t|_d|_t j|_t j|_t j|_ g|_ d|_ i|_ d|_ g|_d|_t j|_t j|_t'|_dS)Nry)rr_DEFAULT_TOOL_TIMEOUTrrrqEventrrrrr;rrrrLockrrsetr)rrs r&rzMCPServerTask.__init__js &* #8-1 moo &} !(  +/  4813#!$\^^!9<###rJr cd|jvS)z)Check if this server uses HTTP transport.r()rrWs r&_is_httpzMCPServerTask._is_https $$rJcK |d{VdS#tj$rt$r$td|jYdSwxYw)zBRun a dynamic tool refresh and log failures from background tasks.Nz,MCP server '%s': dynamic tool refresh failed)_refresh_toolsrqCancelledErrorrr exceptionrrWs r&_refresh_tools_taskz!MCPServerTask._refresh_tools_tasks X%%'' ' ' ' ' ' ' ' ' '%     X X X   KTY W W W W W W Xs 9AActj|}|j|||jj|S)zCSchedule a background tool refresh and keep it strongly referenced.)rq create_taskrraddadd_done_callbackdiscard)rrfs r&_schedule_tools_refreshz%MCPServerTask._schedule_tools_refreshsT"4#;#;#=#=>> #''--- t:BCCC rJcfd}|S)aBuild a ``message_handler`` callback for ``ClientSession``. Dispatches on notification type. Only ``ToolListChangedNotification`` triggers a refresh; prompt and resource change notifications are logged as stubs for future work. cK t|tr#tdj|dSt rt|t r|jxtdxS\t dj tj dd{VdSxtdx%\tdjdStdx$\tdjdS dSdSdS#t$r$tdjYdSwxYw)Nz'MCP message handler (%s): exception: %srIz9MCP server '%s': received tools/list_changed notificationrz/MCP server '%s': prompts/list_changed (ignored)z1MCP server '%s': resources/list_changed (ignored)z%Error in MCP message handler for '%s')rrrrr_MCP_NOTIFICATION_TYPESr=rootr>rrrqsleepr?r@r)rrs r&_handlerz5MCPServerTask._make_message_handler.._handlers Ugy11LL!JDIW^___F*!z'CU/V/V!!,:8::::::"KK [ $ !88:::#*-"2"2222222222%;&=:<<<<<<"LL)Z\`\efffff=<>>>>>"LL)\^b^ghhhhh? D5!!!!6 U U U  !H$)TTTTTT Us)6D%A>D%=/D%.-D%D%%*EErI)rrs` r&_make_message_handlerz#MCPServerTask._make_message_handlers)! U! U! U! U! UDrJc Kddlm}j4d{Vtj}j4d{Vjd{V}dddd{Vn#1d{VswxYwYt|dr|j ng}|fd|Dz }|D]}| ||_ tj j_tj}||z }||z } g} |r8| ddt#|| r8| ddt#| | r5t$d j d | n3t$d j t+jdddd{VdS#1d{VswxYwYdS) uaRe-fetch tools from the server and update the registry. Called when the server sends ``notifications/tools/list_changed``. The lock prevents overlapping refreshes from rapid-fire notifications. After the initial ``await`` (list_tools), all mutations are synchronous — atomic from the event loop's perspective. rregistryNrTchh|].}dtjdt|j/S)mcp__)sanitize_mcp_name_componentr)r{rrs r& z/MCPServerTask._refresh_tools..sY111<249==<<.ty99<<111rJzadded: r\z removed: uUMCP server '%s': tools changed dynamically — %s. Verify these changes are expected.rmz>MCP server '%s': dynamically refreshed %d tool(s) (no changes))tools.registryrrrrrr list_toolsrrT deregisterr_register_server_toolsrrrprrsortedrrqrr) rrold_tool_names tools_result new_mcp_toolsstale_tool_namesrjnew_tool_namesaddedremovedchangess ` r&rzMCPServerTask._refresh_toolssp ,+++++%1 1 1 1 1 1 1 1  !<==N~ ? ? ? ? ? ? ? ?%)\%<%<%>%>>>>>>>  ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?29,2P2PXL..VXM .1111*111   . / / ##I....(DK*@ 4++D ' !!<==N"^3E$~5GG EC6%==)A)ACCDDD IG499VG__+E+EGGHHH 9Ityy11  TIs4#>??]1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 s5"G8 A+G8+ A5 5G88A5 9E,G88 HHcKtj|j}tj|j} tj||htjd{V||fD]P}|s:| |d{V4#tjtf$rYLwxYwQnZ#||fD]P}|s:| |d{V4#tjtf$rYLwxYwQwxYw|j rdS|j dS)a<Block until either _shutdown_event or _reconnect_event fires. Returns: "shutdown" if the server should exit the run loop entirely. "reconnect" if the server should tear down the current MCP session and re-enter the transport (fresh OAuth tokens, new session ID, etc.). The reconnect event is cleared before return so the next cycle starts with a fresh signal. Shutdown takes precedence if both events are set simultaneously. ) return_whenNshutdown reconnect) rqrrwaitrFIRST_COMPLETEDdonecancelrris_setclear)r shutdown_taskreconnect_taskrs r&_wait_for_lifecycle_eventz'MCPServerTask._wait_for_lifecycle_events +D,@,E,E,G,GHH  ,T-B-G-G-I-IJJ ,/#3        $^4  vvxxHHJJJ#2I>  m^4  vvxxHHJJJ#2I>     & & ( ( : ##%%%{sB(C1B::CC/D/DD/D* 'D/)D* *D/rc TK|d}|dg}|d}|std|jdt|}t ||\}}ddlm}|||}|rtd|jd|t|||r|nd }|jr|j ni} trtr| | d <t} t} t|jt!} t#|| 4d {V\} }t| z } | r4t$5| D]}|jt&|< d d d n #1swxYwYt)| |fi| 4d {V }|d {V||_|d {V|j|d {Vd d d d {Vn#1d {VswxYwYd d d d {Vn#1d {VswxYwY| rt$5| D]}t&|d | D]P} t7j|dn#t:t<t>f$rY2wxYwt@!|Q d d d d S#1swxYwYd Sd S#| rt$5| D]}t&|d | D]P} t7j|dn#t:t<t>f$rY2wxYwt@!|Q d d d w#1swxYwYwwxYw) z%Run the server using stdio transport.rrKr` MCP server 'z' has no 'command' in configr)check_package_for_malwarez': N)rrKr`rB)errlog)"rrHrrcrtools.osv_checkrr1rrXr_MCP_MESSAGE_HANDLER_SUPPORTEDr_snapshot_child_pidsrr/r'r2_lock _stdio_pidsr0 initializer_discover_toolsrrpoprkillProcessLookupErrorPermissionErrorOSError_orphan_stdio_pidsr)rrrrKrXsafe_envr malware_error server_paramssampling_kwargs pids_beforenew_pids_errlog read_stream write_stream_pidrpids r& _run_stdiozMCPServerTask._run_stdio'sQ**Y''zz&"%%::e$$ FtyFFF #8,,27HEE >=====11'4@@  B^S$.77999QS " N'E N151K1K1M1MO- .+,,  !+++%''% 4#M'BBB ; ; ; ; ; ; ;G011K?:::$,::D04 K--::::::::::::::::)1@ ; ; ; ; ; ; ; ;!,,.........#*DL..000000000KOO%%%88::::::::: ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;6 444 (44#d3333'44%GCOOOO 2OWM%%%$H%*..s3333 4444444444444444444 4 4x 444 (44#d3333'44%GCOOOO 2OWM%%%$H%*..s3333 44444444444444444 4s L I$>F  I$ F$ $I$'F$ (I$A/I/I$ I I$I I$L$ I..L1I.2L>%L$J:9L:KLKLLL N'%N?MNM/ ,N.M/ /N N'N N'!N "N'cfKtstd|jd|d}t|dpi}t d|Ds t |d<|dt}|dd }d }|jd krs d d l m }| |j||d }n4#t$r'}td|j|d }~wwxYw|jr|jni} t"rt$r|| d<t(rd d l} | |fd} d | t1|d|d| gid} |r|| d<||| d<| jdi| 4d {V} t5|| 4d {V\}}}t7||fi| 4d {V}|d {V||_|d {V|j |!d {V}|dkr t"d|jd d d d {Vn#1d {VswxYwYd d d d {Vn#1d {VswxYwYd d d d {Vd S#1d {VswxYwYd S|t1||d}|||d<tG|fi|4d {V\}}}t7||fi| 4d {V}|d {V||_|d {V|j |!d {V}|dkr t"d|jd d d d {Vn#1d {VswxYwYd d d d {Vd S#1d {VswxYwYd S)z3Run the server using HTTP/StreamableHTTP transport.rzw' requires HTTP transport but mcp.client.streamable_http is not available. Upgrade the mcp package to get HTTP support.r(headersc3FK|]}|dkVdS)mcp-protocol-versionN)r)r{ras r&r z*MCPServerTask._run_http..s0LLS399;;"88LLLLLLrJrconnect_timeout ssl_verifyTNoauthr get_managerz#MCP OAuth setup failed for '%s': %srBc K|jr|jrz|jj}|j|j|jfjjjfkrF|jjdd|jjdddSdSdSdS)zBStrip Authorization headers when redirected to a different origin. authorizationN Authorization) is_redirect next_requestr(schemehostportrr)rItarget _original_urls r&$_strip_auth_on_cross_origin_redirectzEMCPServerTask._run_http.._strip_auth_on_cross_origin_redirects'QH,AQ%26F v{FK@%,m.@-BTE!-599/4PPP -599/4PPPPP QQQQrJgr@)readrI)follow_redirectsrverify event_hooksauth) http_clientruBMCP server '%s': reconnect requested — tearing down HTTP session)rrruIMCP server '%s': reconnect requested — tearing down legacy HTTP sessionrI)$_MCP_HTTP_AVAILABLE ImportErrorrr~ranyr5_DEFAULT_CONNECT_TIMEOUTrtools.mcp_oauth_managerrget_or_build_providerrrrqrrXrrr _MCP_NEW_HTTPhttpxURLTimeoutr AsyncClientr4r0rrrrrrrr3)rrr(rrr _oauth_authrr%rrr client_kwargsrrr_get_session_idrru _http_kwargsrs @r& _run_httpzMCPServerTask._run_httpws" ?ty???  Umvzz),,233 LLGLLLLL F.EG* + **%68PQQZZ d33  ?g % % ??????)kmmAAIsFJJw$7$7    DdiQTUUU >B^S$.77999QS " N'E N151K1K1M1MO- . C  LLL!IIcNNM Q Q Q Q Q%) ==)?)?e=LL$ *-Q,RS ##M  3+2 i(&(3 f%)u(99=99       [1#;OOO       T,[,ZZ/ZZ       ^e%00222222222'. "22444444444 )))'+'E'E'G'G!G!G!G!G!G!G![00"KK!<=AY                                                                                    $# 11$""L &'2 V$,SAALAA       F\?(lVVoVV       Za!,,.........#*DL..000000000KOO%%%#'#A#A#C#CCCCCCCF,, ?@D                                                          s1=C// D 9"DD K<5KBJ5#K5 J? ?KJ? KK< K" "K<%K" &K<< L L<P BO<*P < P P  P P  P*-P*cK|jdS|j4d{V|jd{V}dddd{Vn#1d{VswxYwYt|dr|jng|_dS)z*Discover tools from the connected session.NrT)rrrrrTr)rrs r&rzMCPServerTask._discover_toolss <  F> ; ; ; ; ; ; ; ;!%!8!8!:!:::::::L ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ;|W-- L   s A  AAc K||_|dt|_|dpd|_|di}|ddr"trt|j ||_ nd|_ d|vr$d |vr t d |j d }d }d } | r||d{Vn||d{V|jr d|_dStd |j d|_ d|_#t($rI}d|_|js|dz }|t,krTt d|j t,|||_|jYd}~d|_dSt d|j |t,||t3j|d{Vt7|dzt8}|jr-||_|jYd}~d|_dSYd}~d|_|jr.td|j |Yd}~d|_dS|dz }|t<kr4t d|j t<|Yd}~d|_dSt d|j |t<||t3j|d{Vt7|dzt8}|jr Yd}~d|_dSYd}~nd}~wwxYw d|_n #d|_wxYw )zLong-lived coroutine: connect, discover tools, wait, disconnect. Includes automatic reconnection with exponential backoff if the connection drops unexpectedly (unless shutdown was requested). rrrysamplingenabledTNr(rzMCP server '%s' has both 'url' and 'command' in config. Using HTTP transport ('url'). Remove 'command' to silence this warning.rg?z@MCP server '%s': reconnecting (OAuth recovery or manual refresh)rzJMCP server '%s' failed initial connection after %d attempts, giving up: %szPMCP server '%s' initial connection failed (attempt %d/%d), retrying in %.0fs: %sz0MCP server '%s' disconnected during shutdown: %szDMCP server '%s' failed after %d reconnection attempts, giving up: %szJMCP server '%s' connection lost (attempt %d/%d), reconnecting in %.0fs: %s)rrrrrrrr:rrrrrqrrrrrrrrr_MAX_INITIAL_CONNECT_RETRIESr;rrqrrp_MAX_BACKOFF_SECONDSr_MAX_RECONNECT_RETRIES)rrsampling_configretriesinitial_retriesbackoffr%s r&runzMCPServerTask.runs  "JJy2GHH!::f--3::<<BBDD!**Z44   y$ / / "4G ",TYHHDNN!DN F??yF22 NN      Z $Y $==??2..0000000000//&111111111 '..00\ $ [ &I $ D $ C? ? ? # {))++#q(O&)EEE9 I'CS '*  )))` $ ]NNA ?4gs  "-000000000!'A+/CDDG+2244&)  )))B $ AHHH@ $ ;'..00LLJ 3FFF0 $ -1 333NN( #93 FFF $ 0Iw(>S  mG,,,,,,,,,gk+?@@'..00FFF# }? | $ t ####uZ $sp/A$F 'F O!A8OO-BO1O->O- :OO-7O O-A4O O-O-O!!O-- O6cKtj|||_|jd{V|jr|jdS)z>>>>>>>>>>'   II !!###*$$$$$$$$-D   & 0T899   .$"=VQUVV V V V V V V V  ' - - / / /gd,DbIIJJ + +I    * * * *&(# s7!A>>AC- CC-C'$C-&C''C-,C-N)rrxryrz __slots__rrr{rrrqTaskrrrrr~rrrrrrrIrJr&r~r~XsbI?S????:%$%%%% XXX)))V;;;z     DN4tN4N4N4N4`ldllll\    w$w$w$w$w$r$     rJr~_servers_server_error_counts_server_breaker_opened_atgN@ct|ddz}|t|<|tkrtjt |<dSdS)aIncrement the consecutive-failure count for ``server_name``. When the count crosses :data:`_CIRCUIT_BREAKER_THRESHOLD`, stamp the breaker-open timestamp so the cooldown clock starts (or re-starts, for probe failures in the half-open state). rrN)r%r_CIRCUIT_BREAKER_THRESHOLDr monotonicr&)r(ns r&_bump_server_errorr+sV   a0014A()% &&&151A1A!+...'&rJcPdt|<t|ddS)zFully close the breaker for ``server_name``. Clears both the failure count and the breaker-open timestamp. Call this on any unambiguous success signal (successful tool call, successful reconnect, manual /mcp refresh). rN)r%r&r)r(s r&_reset_server_errorr-s+)*%!!+t44444rJrI_AUTH_ERROR_TYPESctrtSg} ddlm}m}|||gn#t $rYnwxYw ddlm}||n#t $rYnwxYw ddlm }||n#t $rYnwxYw ddl }||j n#t $rYnwxYwt|atS)uReturn a tuple of exception types that indicate MCP OAuth failure. Cached after first call. Includes: - ``mcp.client.auth.OAuthFlowError`` / ``OAuthTokenError`` — raised by the SDK's auth flow when discovery, refresh, or full re-auth fails. - ``mcp.client.auth.UnauthorizedError`` (older MCP SDKs) — kept as an optional import for forward/backward compatibility. - ``tools.mcp_oauth.OAuthNonInteractiveError`` — raised by our callback handler when no user is present to complete a browser flow. - ``httpx.HTTPStatusError`` — caller must additionally check ``status_code == 401`` via :func:`_is_auth_error`. r)OAuthFlowErrorOAuthTokenError)UnauthorizedError)OAuthNonInteractiveErrorN) r.mcp.client.authr0r1rrr2rptools.mcp_oauthr3rHTTPStatusErrortuple)typesr0r1r2r3rs r&_get_auth_error_typesr9s`!  E CCCCCCCC no67777       555555 &''''       <<<<<< -....         U*++++      e  sB2 ??A A,+A,0B BBB<< C C ct}|rt||sdS ddl}t||jrt |jdddkSn#t $rYnwxYwdS)zReturn True if ``exc`` indicates an MCP OAuth failure. ``httpx.HTTPStatusError`` is only treated as auth-related when the response status code is 401. Other HTTP errors fall through to the generic error path in the tool handlers. FrN status_codeiT)r9rrr6rrIr)r%r8rs r&_is_auth_errorr<s " # #E  3..u  c50 1 1 E3<==D D E      4s2A A%$A%op_descriptionct|sdSddlm}|fd} t|d}n5#t$r(}t d|d}Yd}~nd}~wwxYw|rt5t }dddn #1swxYwY|t|d rt} | | r| |jjt!jd z} t!j| krL|j|jrn+t!jd t!j| kLt- |} t/j| } d | vrt-| Sn-#t.jt4f$rt-| cYSwxYwn4#t$r'} t d || Yd} ~ nd} ~ wwxYwt7t/jddddddS)aQAttempt auth recovery and one retry; return None to fall through. Called by the 5 MCP tool handlers when ``session.()`` raises an auth-related exception. Workflow: 1. Ask :class:`tools.mcp_oauth_manager.MCPOAuthManager.handle_401` if recovery is viable (i.e., disk has fresh tokens, or the SDK can refresh in-place). 2. If yes, set the server's ``_reconnect_event`` so the server task tears down the current MCP session and rebuilds it with fresh credentials. Wait briefly for ``_ready`` to re-fire. 3. Retry the operation once. Return the retry result if it produced a non-error JSON payload. Otherwise return the ``needs_reauth`` error dict so the model stops hallucinating manual refresh. 4. Return None if ``exc`` is not an auth error, signalling the caller to use the generic error path. Args: server_name: Name of the MCP server that raised. exc: The exception from the failed tool call. retry_call: Zero-arg callable that re-runs the tool call, returning the same JSON string format as the handler. op_description: Human-readable name of the operation (for logs). Returns: A JSON string if auth recovery was attempted, or None to fall through to the caller's generic error path. Nrrc@Kdd{VSN) handle_401)managerr(sr&_recoverz._handle_auth_error_and_retry.._recover6s/'' T:::::::::rJrrhz+MCP OAuth '%s': recovery attempt failed: %sFr?errorz.MCP %s/%s retry after auth recovery failed: %srz4' requires re-authentication. Run `hermes mcp login u` (or delete the tokens file under ~/.hermes/mcp-tokens/ and restart). Do NOT retry this tool — ask the user to re-authenticate.T)rF needs_reauthserverr)r<rr_run_on_mcp_looprrrqrr$rr _mcp_loop is_runningcall_soon_threadsaferrrr)rrrrr-r)rErFrGr+r*)r(r% retry_callr=rrC recoveredrec_excsrvloopdeadlinerrL retry_excrBs` @r&_handle_auth_error_and_retryrTsAD #  t333333kmmG;;;;;;$XXZZ<<<  9     (  , ,,,{++C , , , , , , , , , , , , , , , ?ws,>???DDOO$5$5))#*>*BCCC >++b0n&&11{.3:3D3D3F3F.Jt$$$n&&11 K((( Z\\F F++&((' 444!M)()4   #K000  )     NN@^Y         {### : >; > >%0 > > >       seA A7A22A7B++B/2B/ G0(GG0'G,)G0+G,,G00 H!:HH!)zinvalid or expired sessionzexpired sessionzsession expiredzsession not foundzunknown session_SESSION_EXPIRED_MARKERSct|trdSt|sdSt fdt DS)uReturn True if ``exc`` looks like an MCP transport session expiry. Streamable HTTP MCP servers may garbage-collect server-side session state while the OAuth token remains valid — idle TTL, server restart, horizontal-scaling pod rotation, etc. The SDK surfaces this as a JSON-RPC error whose message contains phrases like ``"Invalid or expired session"``. This class of failure is distinct from :func:`_is_auth_error`: re-running the OAuth refresh flow would be pointless because the access token is fine. What's needed is a transport reconnect — tear down and rebuild the ``streamablehttp_client`` + ``ClientSession`` pair, which is exactly what ``MCPServerTask._reconnect_event`` triggers. Fc3 K|]}|vV dSr@rI)r{markerr,s r&r z,_is_session_expired_error..s'DDv}DDDDDDrJ)rInterruptedErrorrrrrU)r%r,s @r&_is_session_expired_errorrZse#'((u c((..  C u DDDD+CDDD D DDrJct|sdSt5t|}dddn #1swxYwY|t |dsdSt }||sdStd|||| |j j tj dz}d}tj |krN|j|jrd}n+tjdtj |kN|std|dS |} t'j|} d | vr d t*|<|Sn(#t&jt.f$rd t*|<|cYSwxYwn4#t0$r'} td ||| Yd} ~ nd} ~ wwxYwdS) uOTrigger a transport reconnect and retry once on session expiry. Unlike :func:`_handle_auth_error_and_retry`, this does **not** call the OAuth manager's ``handle_401`` — the access token is still valid, only the server-side session state is stale. Setting ``_reconnect_event`` causes the server task's lifecycle loop to tear down the current ``streamablehttp_client`` + ``ClientSession`` and rebuild them, reusing the existing OAuth provider instance. See #13383. Args: server_name: Name of the MCP server that raised. exc: The exception from the failed call. retry_call: Zero-arg callable that re-runs the operation, returning the same JSON string format as the handler. op_description: Human-readable name of the operation (logs). Returns: A JSON string if reconnect + retry was attempted and produced a response, or ``None`` to fall through to the caller's generic error path (not a session-expired error, no server record, reconnect didn't ready in time, or retry also failed). NrzmMCP server '%s': %s failed with session-expired error (%s); signalling transport reconnect and retrying once.rDFTrEzsMCP server '%s': reconnect did not ready within 15s after session-expired error; falling through to error response.rFrz2MCP %s/%s retry after session reconnect failed: %s)rZrr$rrrJrKrrrLrrrr)rrrrrqr)rEr%rFrGr) r(r%rMr=rPrQrRreadyrrLrSs r&!_handle_session_expired_and_retryr]s~: %S ) )t ((ll;''((((((((((((((( {'#'9::{t D |4??,,|t KK <^S c26777~"$H E .  X % % ; "sz'8'8':': "E  4 .  X % %  H    t  Z''Ff$$45$[1 %$i0   01  -MMM %     @          4sMAAA F0"#FF0"F,)F0+F,,F00 G!:GG!rJ _mcp_threadrrctj} d|d|d}t|5}d|DcdddS#1swxYwYn#t t tf$rYnwxYw ddl}d| | DS#t$rYnwxYwtS)zReturn a set of current child process PIDs. Uses /proc on Linux, falls back to psutil, then empty set. Used by _run_stdio to identify the subprocess spawned by stdio_client. z/proc/z/task/z /childrencTh|]%}|t|&SrI)rr)r{ps r&rz'_snapshot_child_pids..s+BBBq BCFFBBBrJNrch|] }|j SrI)r)r{cs r&rz'_snapshot_child_pids..sAAA!AAArJ) rgetpidrrrrrrHpsutilProcesschildrenrr)my_pid children_pathfres r&rr sW Y[[F @@@v@@@ -  CABBAFFHHNN$4$4BBB C C C C C C C C C C C C C C C C C w 3       AAv~~f55>>@@AAAA       55LsFA60A* A6*A..A61A.2A66BB4C CCc|d}t|trdt|vrdS||dS)aSuppress benign 'Event loop is closed' noise during shutdown. When the MCP event loop is stopped and closed, httpx/httpcore async transports may fire __del__ finalizers that call call_soon() on the dead loop. asyncio catches that RuntimeError and routes it here. We silence it because the connection is being torn down anyway; all other exceptions are forwarded to the default handler. rzEvent loop is closedN)rr RuntimeErrorrdefault_exception_handler)rQrur%s r&_mcp_loop_exception_handlerrn%sW ++k " "C#|$$)?3s88)K)K""7+++++rJczt5t'tr ddddStjatt tjtj dda t ddddS#1swxYwYdS)z>Start the background event loop thread if not already running.Nzmcp-event-loopT)rrdaemon) rrJrKrqnew_event_loopset_exception_handlerrn threadingThread run_foreverr^rrIrJr&_ensure_mcp_looprv4s      Y%9%9%;%;         *,, ''(CDDD&(!                     s"B0A,B00B47B4rrcLddlm}t5t}dddn #1swxYwY||st dt j||}|dntj |z} |r#| tdd}|B|tj z }|dkr| dSt||} | |S#tjj$rYwxYw) zSchedule a coroutine on the MCP event loop and block until done. Poll in short intervals so the calling agent thread can honor user interrupts while the MCP work is still running on the background loop. r)is_interruptedNzMCP event loop is not runningTzUser sent a new messageg?rh)tools.interruptrxrrJrKrlrqrun_coroutine_threadsaferr)rrYrrp concurrentfuturesrt)cororrxrQfuturerR wait_timeout remainings r&rIrIDs} /.....  |4??,,|:;;;  -dD 9 9FttDN,<,   > MMOOO"#<== =   4>#3#33IA~~}}Q}///|Y77L ===66 6!.    H s"&&6D D#"D#c2tjddidS)z=Standardized JSON error for a user-interrupted MCP tool call.rFz-MCP call interrupted: user sent a new messageFr)r)r*rIrJr&_interrupted_call_resultres) :@   rJc t|trd}tjd||St|trd|DSt|t r d|DS|S)z@Recursively resolve ``${VAR}`` placeholders from ``os.environ``.ctj|d|dS)Nrr)rr[rr)ms r&_replacez'_interpolate_env_vars.._replacess,:>>!''!**aggajj99 9rJz \$\{([^}]+)\}c4i|]\}}|t|SrI_interpolate_env_varsr{kvs r& z)_interpolate_env_vars..ws'FFF1(++FFFrJc,g|]}t|SrIr)r{rs r&r}z)_interpolate_env_vars..ys!888Q%a((888rJ)rrrrgr~r\r )rbrs r&rrps%9 : : :v&%888%GFF FFFF%988%8888 LrJch ddlm}|}|d}|rt|tsiS ddlm}|n#t$rYnwxYwd|DS#t$r'}t d|icYd}~Sd}~wwxYw)aRead ``mcp_servers`` from the Hermes config file. Returns a dict of ``{server_name: server_config}`` or empty dict. Server config can contain either ``command``/``args``/``env`` for stdio transport or ``url``/``headers`` for HTTP transport, plus optional ``timeout``, ``connect_timeout``, and ``auth`` overrides. ``${ENV_VAR}`` placeholders in string values are resolved from ``os.environ`` (which includes ``~/.hermes/.env`` loaded at startup). r) load_config mcp_servers)load_hermes_dotenvc4i|]\}}|t|SrIrr{rcfgs r&rz$_load_mcp_config..s'RRRYT3+C00RRRrJzFailed to load MCP config: %sN) hermes_cli.configrrrr~hermes_cli.env_loaderrrr\rr)rrserversrr%s r&_load_mcp_configr}s111111**]++ j$77 I  @ @ @ @ @ @       D RR'--//RRRR  4c::: sA=BAB ABA B B1 B,&B1,B1rrc^Kt|}||d{V|S)aCreate an MCPServerTask, start it, and return when ready. The server Task keeps the connection alive in the background. Call ``server.shutdown()`` (on the same event loop) to tear it down. Raises: ValueError: if required config keys are missing. ImportError: if HTTP transport is needed but not available. Exception: on connection or initialization failure. N)r~r)rrrHs r&_connect_serverrs>4 F ,,v   MrJrc8dtdtffd }|S)zReturn a sync handler that calls an MCP tool via the background loop. The handler conforms to the registry's dispatch interface: ``handler(args_dict, **kwargs) -> str`` rKr c  t dtkrt d}t j|z }|t krRtdtt |z }tj dd dt d|did St5t  dddn #1swxYwY r j s+t tj dd d id S fd  fd } |} tj|}d|vrt nt! n+#tjt$f$rt! YnwxYw|S#t&$rt)cYSt*$r}t- ||d } | | cYd}~St/ ||d } | | cYd}~St t0d |tj dt5dt7|jd|id cYd}~Sd}~wwxYw)NrgrrFrz' is unreachable after z0 consecutive failures. Auto-retry available in ~ues. Do NOT retry this tool yet — use alternative approaches or ask the user to check the MCP server.Fr' is not connectedcKj4d{Vjd{V}dddd{Vn#1d{VswxYwY|jrOd}|jpgD]}t |dr ||jz }tjdt|pdidSg}|jpgD],}t |dr| |j-|rd |nd}t|d d}|3|rtj||d dStjd |idStjd |idS) Nr ryrdrFzMCP tool returned an errorFrrstructuredContent)rrr) rr call_toolisErrorrrrdr)r*rirprrr) r error_textr r text_result structuredrKrHrjs r&_callz3_make_tool_handler.._handler.._callst' S S S S S S S S%~77 T7RRRRRRRR S S S S S S S S S S S S S S S S S S S S S S S S S S S~ ' $n211Euf--1"ej0 z_"B&B#!& '''' "E ..B - -5&))-LL,,,.3;$))E***K !)._handler.._call_once#EEGG\BBB BrJz tools/call zMCP tool %s/%s call failed: %sMCP call failed: : )r%rr(r&rr)_CIRCUIT_BREAKER_COOLDOWN_SECrrr)r*rr$rr+rEr-rFrGrYrrrTr]rrFrir!r)rKkwargs opened_atagerrrrLr%rNrrHr(rjrs` @@r&rz$_make_tool_handler.._handlers # #K 3 37Q Q Q155k3GGI.""Y.C2223'Ds'J#K#KLL zO{OO/ <OO>GOOO#!&'''' / /\\+..F / / / / / / / / / / / / / / / #V^ # { + + +:G GGG!### #" K" K" K" K" K" K" KH C C C C C C, #Z\\F 1F++f$$&{3333' 444()4 1 1 1#K00000 1M . . .+-- - - - # # #5S*)i))I$       :S*)i))I$       { + + + LL0Y   :CS (:CCcCC" ### # # # # # #5 #ss>C%%C),C)2 F"=7E54F"5%FF"FF""I4< I4I/I4#I/;I4A(I/)I4/I4r~r)r(rjrrs``` r&_make_tool_handlerrsMv#tv##v#v#v#v#v#v#v#v#p OrJc4dtdtffd }|S)z>Return a sync handler that lists resources from an MCP server.rKr c nt5tdddn #1swxYwYrjst jdddidSfdfd} |S#t $rtcYSt$r}t||d}||cYd}~St||d}||cYd}~St d |t jdtd t|jd |idcYd}~Sd}~wwxYw) NrFrrFrcHKj4d{Vjd{V}dddd{Vn#1d{VswxYwYg}t|dr|jngD]}i}t|drt |j|d<t|dr |j|d<t|dr|jr |j|d<t|dr|j r |j |d<| |tj d|idS)N resourcesurirrkr&Fr) rrlist_resourcesrrrrrrkr&rpr)r*)rrrentryrHs r&rz=_make_list_resources_handler.._handler.._call?s' ? ? ? ? ? ? ? ?%~<<>>>>>>>> ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ?I*1&+*F*FNf&&B ( (1e$$.#&qu::E%L1f%%+$%FE&M1m,,99+,=E-(1j))3aj3() E*%  '''':{I6UKKK K A A A c6tSrrrsr&rzB_make_list_resources_handler.._handler.._call_oncePrrJzresources/listz MCP %s/list_resources failed: %srrrr$rrr)r*rYrrrTr]rrFrir!r rKrrr%rNrrHr(rs @@r&rz._make_list_resources_handler.._handler7s<  / /\\+..F / / / / / / / / / / / / / / / #V^ #:G GGG!### # L L L L L" C C C C C C #:<<  . . .+-- - - - # # #4S*.>I$       9S*.>I$       LL2K   :CS (:CCcCC" ### # # # # # # #I266. A88D4 D4D/0D46D/ D4AD/)D4/D4rr(rrs`` r&_make_list_resources_handlerr4s=2#t2##2#2#2#2#2#2#2#h OrJc4dtdtffd }|S)zFReturn a sync handler that reads a resource by URI from an MCP server.rKr c ddlm}t5t dddn #1swxYwYrjst jdd didS|ds |d Sfd  fd } |S#t$rtcYSt$r}t ||d }||cYd}~St ||d }||cYd}~Std |t jdtdt!|jd|idcYd}~Sd}~wwxYw)Nr tool_errorrFrrFrrz Missing required parameter 'uri'cKj4d{Vjd{V}dddd{Vn#1d{VswxYwYg}t|dr|jng}|D]h}t|dr||j-t|dr+|dt|jditj d|rd |ndid S) Ncontentsrdblobz[binary data, z bytes]rrryFr) rr read_resourcerrrprdrrr)r*rr)rrrr rHrs r&rz<_make_read_resource_handler.._handler.._calls' A A A A A A A A%~;;C@@@@@@@@ A A A A A A A A A A A A A A A A A A A A A A A A A A A "E*1&**E*EMv2H! L L5&))LLL,,,,UF++LLL!J#ej//!J!J!JKKK:xU)J5)9)9)9KZ_``` `s!A AAc6tSrrrsr&rzA_make_read_resource_handler.._handler.._call_oncerrJzresources/readzMCP %s/read_resource failed: %srrrrrr$rrr)r*rYrrrTr]rrFrir!r) rKrrrr%rNrrHrr(rs @@@r&rz-_make_read_resource_handler.._handlerqs------  / /\\+..F / / / / / / / / / / / / / / / #V^ #:G GGG!### #hhuoo B:@AA A a a a a a a C C C C C C #:<<  . . .+-- - - - # # #4S*.>I$       9S*.>I$       LL1;   :CS (:CCcCC" ### # # # # # # #sJ9== B""E< EEE E5E;AEEErrs`` r&_make_read_resource_handlerrns=4#t4##4#4#4#4#4#4#4#l OrJc4dtdtffd }|S)z._handler.._call..s***  #AFAHMAZAZt_`_lt q}==rt._handler.._calls' = = = = = = = =%~::<<<<<<<< = = = = = = = = = = = = = = = = = = = = = = = = = = =G(/ (B(BJfnn & &1f%%+$%FE&M1m,,99+,=E-(1k**q{** "# ***E+&u%%%%:y'2GGG Grc6tSrrrsr&rz@_make_list_prompts_handler.._handler.._call_oncerrJz prompts/listzMCP %s/list_prompts failed: %srrrrs @@r&rz,_make_list_prompts_handler.._handlers:  / /\\+..F / / / / / / / / / / / / / / / #V^ #:G GGG!### # H H H H H, C C C C C C #:<<  . . .+-- - - - # # #4S*nI$       9S*nI$       LL0+s   :CS (:CCcCC" ### # # # # # # #rrrs`` r&_make_list_prompts_handlerrs=7#t7##7#7#7#7#7#7#7#r OrJc4dtdtffd }|S)zDReturn a sync handler that gets a prompt by name from an MCP server.rKr c  ddlm}t5t  dddn #1swxYwY r jst jdd didS|ds |d S|d i fd  fd } |S#t$rtcYSt$r}t ||d }||cYd}~St ||d }||cYd}~Std |t jdtdt!|jd|idcYd}~Sd}~wwxYw)NrrrFrrFrrz!Missing required parameter 'name'r cKj4d{Vjd{V}dddd{Vn#1d{VswxYwYg}t|dr|jngD]}i}t|dr |j|d<t|drO|j}t|dr |j|d<n-t|tr||d<nt||d<| |d|i}t|dr|j r |j |d<tj |dS) NrrrrrdrkFr)rr get_promptrrrrrdrrrprkr)r*) rrr,rrrespr rrHs r&rz9_make_get_prompt_handler.._handler.._calls!' T T T T T T T T%~888SSSSSSSS T T T T T T T T T T T T T T T T T T T T T T T T T T TH+26:+F+FNB ' '3''-$'HE&M3 **8!kGw//8+2<i((#GS118+2i((+.w<<i(&&&&)Dv}-- 9&2D 9&,&8]#:d777 7rc6tSrrrsr&rz>_make_get_prompt_handler.._handler.._call_once rrJz prompts/getzMCP %s/get_prompt failed: %srrr) rKrrrr%rNrr rrHr(rs @@@@r&rz*_make_get_prompt_handler.._handlers------  / /\\+..F / / / / / / / / / / / / / / / #V^ #:G GGG!### #xx C:ABB BHH["--  8 8 8 8 8 8 8. C C C C C C #:<<  . . .+-- - - - # # #4S*mI$       9S*mI$       LL. S   :CS (:CCcCC" ### # # # # # # #sJ:>>0 B::E6 E6E12E68E1 E6AE1+E61E6rrs`` r&_make_get_prompt_handlerrs=?#t?##?#?#?#?#?#?#?#B OrJc"dtffd }|S)zBReturn a check function that verifies the MCP connection is alive.r ct5t}dddn #1swxYwY|duo|jduSr@)rr$rr)rHr(s r&_checkz_make_check_fn.._check3 s  / /\\+..F / / / / / / / / / / / / / / /T!@fnD&@@s 044)r{)r(rs` r&_make_check_fnr0 s6ADAAAAAA MrJschemac|sdidSfdd}fd|}||}|}t|tsdidS|ddkr d|vri|dii}|S)adNormalize MCP input schemas for LLM tool-calling compatibility. MCP servers can emit plain JSON Schema with ``definitions`` / ``#/definitions/...`` references. Kimi / Moonshot rejects that form and requires local refs to point into ``#/$defs/...`` instead. Normalize the common draft-07 shape here so MCP tool schemas remain portable across OpenAI-compatible providers. Additional MCP-server robustness repairs applied recursively: * Missing or ``null`` ``type`` on an object-shaped node is coerced to ``"object"`` (some servers omit it). See PR #4897. * When an ``object`` node lacks ``properties``, an empty ``properties`` dict is added so ``required`` entries don't dangle. * ``required`` arrays are pruned to only names that exist in ``properties``; otherwise Google AI Studio / Gemini 400s with ``property is not defined``. See PR #4651. * MCP/Pydantic optional fields commonly arrive as ``anyOf: [{...}, {"type": "null"}], default: null``. Anthropic rejects nullable branches in tool input schemas, so nullable unions are collapsed to the non-null branch and optionality remains represented solely by the parent object's ``required`` list. All repairs are provider-agnostic and ideally produce a schema valid on OpenAI, Anthropic, Gemini, and Moonshot in one pass. objectr! propertiesct|tri}|D]\}}|dkrdn|}|||<|d}t|tr2|drd|t ddz|d<|St|trfd|DS|S)N definitionsz$defsz$refz#/definitions/z#/$defs/c&g|] }|SrIrI)r{r_rewrite_local_refss r&r}zL_normalize_mcp_input_schema.._rewrite_local_refs..h s%???$''--???rJ)rr~r\rrr^rr )r normalizedrarbout_keyrefrs r&rz8_normalize_mcp_input_schema.._rewrite_local_refs] s dD ! ! J"jjll A A U%(M%9%9''s&9&9%&@&@ 7##..((C#s## N7G(H(H N%/#c:J6K6K6L6L2M%M 6"  dD ! ! @????$??? ? rJc(ddlm}||dS)aCollapse JSON Schema nullable unions to provider-safe non-null schemas. Delegates to ``tools.schema_sanitizer.strip_nullable_unions`` so MCP ingestion, the Anthropic guard, and the global sanitizer all share one implementation. Keeps the ``nullable: true`` hint so runtime argument coercion can still map a model-emitted ``"null"`` string to Python ``None`` for this optional field. r)strip_nullable_unionsT)keep_nullable_hint)tools.schema_sanitizerr)rrs r&_strip_nullable_unionz:_normalize_mcp_input_schema.._strip_nullable_unionk s- A@@@@@$$TdCCCCrJc"t|trfd|DSt|ts|Sfd|D}|ds d|vsd|vrd|d<|ddkrd|vs(t|dts>d|vrin|d|d<t|dtsi|d<|d}t|trc|dpifd|D}t |t |kr|r||d<n|dd|S) zBRecursively repair object-shaped nodes: fill type, prune required.c&g|] }|SrIrI)r{r_repair_object_shapes r&r}zM_normalize_mcp_input_schema.._repair_object_shape..{ s%@@@4((..@@@rJc.i|]\}}||SrIrI)r{rrrs r&rzM_normalize_mcp_input_schema.._repair_object_shape.. s+HHH41aA++A..HHHrJr!rrrcFg|]}t|t|v|SrI)rr)r{rpropss r&r}zM_normalize_mcp_input_schema.._repair_object_shape.. s-RRRq 1c0B0BRqEzzzzzrJN)rr r~r\rrr)rrepairedrvalidrrs @r&rz9_normalize_mcp_input_schema.._repair_object_shapex s dD ! ! A@@@@4@@@ @$%% KHHHH4::<<HHH||F## ( H $ $ h(>(>'HV  <<  8 + +8++: \**D44+0<8/K/KQYZfQg&!(,,|"<"+>>n>>M+]/]8=/]/]P[/]/]1'(MSW2X2XYY  rJc t|}d|dd|ddidddd d|d d |ddd d ddid gdddd d|dd|ddidddd d|dd|ddd ddddiddddgdddd gS)zBuild schemas for the MCP utility tools (resources & prompts). Returns a list of (schema, handler_factory_name) tuples encoded as dicts with keys: schema, handler_key. r_list_resourcesz*List available resources from MCP server 'rrrrbr)r handler_key_read_resourcez(Read a resource by URI from MCP server 'rstringzURI of the resource to read)r!rk)r!rrr _list_promptsz(List available prompts from MCP server 'r _get_promptz&Get a prompt by name from MCP server 'zName of the prompt to retrievez(Optional arguments to pass to the promptT)r!rkradditionalPropertiesrrr)r)r( safe_names r&_build_utility_schemasr s ,K88I:y999ZKZZZ$"$, 9y888X+XXX$$,+H  # "'    +  &8y777X+XXX$"$* 6y555V VVV$%-+K!! %-+U*,48 && # #"(((+  Q? ?rJlabelc|tSt|tr|hSt|tttfr d|DSt d||tS)z8Normalize include/exclude config to a set of tool names.Nc,h|]}t|SrI)rrs r&rz)_normalize_name_filter.. s,,,dD ,,,rJz>MCP config %s must be a string or list of strings; ignoring %r)rrrr r7rrq)rbrs r&_normalize_name_filterr sx }uu %w%$s+,,-,,e,,,, NNSUZ\abbb 55LrJrc||St|tr|St|tr2|}|dvrdS|dvrdSt d|||S)z2Parse a bool-like config value with safe fallback.N>1onyestrueT>0noofffalseFzAMCP config expected a boolean-ish value, got %r; using default=%s)rr{rrrrrq)rbrlowereds r&_parse_boolishr s }% %++--%%'' 0 0 04 1 1 15 NNVX]_fggg NrJrrrrrrrrrHc2|dpi}t|dd}t|dd}g}t|D]}|d}|dvr|std||-|d vr|std ||Pt |} t |j| std ||| |||S) z?Select utility schemas based on config and server capabilities.rTrTrrr>rrz;MCP server '%s': skipping utility '%s' (resources disabled)>rrz9MCP server '%s': skipping utility '%s' (prompts disabled)z9MCP server '%s': skipping utility '%s' (session lacks %s)) rrrrr_UTILITY_CAPABILITY_METHODSrrrp) r(rHr tools_filterresources_enabledprompts_enabledselectedrrrequired_methods r&_select_utility_schemasr'8 s9::g&&,"L&|'7'7 'D'DdSSS$\%5%5i%@%@$OOOOH' 44M* = = =FW = LLVXcep q q q  8 8 8 8 LLTVacn o o o 5kBv~77  LLK      OrJcg}tD]j\}}t|dr||j0|jD]2}t |j|}||d3k|S)z6Return tool names for all currently connected servers.rr) r$r\rrrrrrrp)names_snamerHrrs r&_existing_tool_namesr+U sE"..**)) 63 4 4  LL6 7 7 7   ) )H(h??F LL ( ( ( ( ) LrJc dddlm}g}d|}|dpi}t|dd|dt|dd|d d td t ffd }|jD]}||js"t d ||j5t||j|j pdt||} | d} | | } | r9| ds$td||j| | || || t#||j|jt'|d| d|| t*t,t.t0d} t'|} t3|||D]}|d} |d}| |||j}| d}| |} | r3| dstd||| {|||| || d| d|||r||||S)aRegister tools from an already-connected server into the registry. Handles include/exclude filtering and utility tools. Toolset resolution for ``mcp-{server}`` and raw server-name aliases is derived from the live registry, rather than mutating ``toolsets.TOOLSETS`` at runtime. Used by both initial discovery and dynamic refresh (list_changed). Returns: List of registered prefixed tool names. rrzmcp-rTincludez mcp_servers.z.tools.includeexcludez.tools.excluderjr c r|vSr|vSdS)NTrI)rj exclude_set include_sets r&_should_registerz0_register_server_tools.._should_register} s.  , + +  0K/ /trJz8MCP server '%s': skipping tool '%s' (filtered by config)ryrusMCP server '%s': tool '%s' (→ '%s') collides with built-in tool in toolset '%s' — skipping to preserve built-inFrk)rtoolsetrhandlercheck_fnis_asyncrkrrrupMCP server '%s': utility tool '%s' collides with built-in tool in toolset '%s' — skipping to preserve built-in)rrrrrr{rrrrrvrkrget_toolset_for_toolr^rqregisterrrrrprrrrr'register_toolset_alias)rrHrrregistered_names toolset_namer"r2rrtool_name_prefixedexisting_toolset_handler_factoriesr5rrr4 util_namer0r1s @@r&rrb s]('''''"$ $==L::g&&,"L()9)9))D)DFiUYFiFiFijjK()9)9))D)DFiUYFiFiFijjKCDM44 ..  LLSUY[c[h i i i  dHM83G3M2NNN$T844#F^$889KLL  $4$?$?$G$G  NNIhm%79I    # &tX]F>++xM* 1$[1$8KLL6N $88CC  $4$?$?$G$G  NNIi!1     }-      ****<''l;;; rJc K|dt}tjt |||d{V}t 5|t |<dddn #1swxYwYt|||}t||_ d|vrdnd}t d||t|d ||S) zsConnect to a single MCP server, discover tools, and register them. Returns list of registered tool names. rrhNr(HTTPstdioz/MCP server '%s' (%s): registered %d tool(s): %sr\)rrrqrrrrr$rr rrrrrr)rrrrHr:transport_types r&_discover_and_register_serverrD s? jj!24LMMO#f%%F                  .dFFCC$()9$:$:F!$VVGN KK9 nc"233 "## s A&&A*-A*rc$tstdgS|stdgSt5d|Ddddn #1swxYwYst St dtdtdttfdfd }t|d t5d D}td |D}dddn #1swxYwYtt|z }|s|r;d|dt|d}|r |d|dz }t |t S)a[Connect to explicit MCP servers and register their tools. Idempotent for already-connected server names. Servers with ``enabled: false`` are skipped without disconnecting existing sessions. Args: servers: Mapping of ``{server_name: server_config}``. Returns: List of all currently registered MCP tool names. z;MCP SDK not available -- skipping explicit MCP registrationz No explicit MCP servers providedcvi|]6\}}|tvt|ddd3||7SrTr r$rrrs r&rz(register_mcp_servers.. sT   1  ^AEE)T4J4JTX%Y%Y%Y  q   rJNrrr c2Kt||d{VS)z@Connect to a single server and return its registered tool names.N)rD)rrs r& _discover_onez+register_mcp_servers.._discover_one s(24=========rJc Kt}tjfdDddid{V}t ||D]u\}}t |tr[|id}t d||rd|dndt|vdS) Nc36K|]\}}||VdSr@rI)r{rrrJs r&r z>register_mcp_servers.._discover_all.. s3 L L94mmD#&& L L L L L LrJr Trz*Failed to connect to MCP server '%s'%s: %sz (command=)ry) r keysrqr!r\ziprrrrrqr) server_namesresultsrrrrJ new_serverss r& _discover_allz+register_mcp_servers.._discover_all sK,,..//  L L L L 8I8I8K8K L L L "         g66  LD&&),, %//$3377 BB@/6>+++++B)&11   rJrLrhc$g|] }|tv |SrIr$r{r*s r&r}z(register_mcp_servers..) s===1qH}}Q}}}rJc3hK|]-}ttt|dgV.dSrNrrr$rVs r&r z'register_mcp_servers..* sO    %=rBB C C      rJzMCP: registered  tool(s) from server(s) ( failed))rCrrrr\r+rvrr~rrIsumrr)rrS connectednew_tool_countfailedsummaryrJrRs @@r&register_mcp_serversrc sq  RSSS  7888                          &#%%%>#>D>T#Y>>>>&]]__c2222   == ===                         I .F]^]]3y>>]]]  - ,F,,, ,G G  ! !!s$ A66A:=A:)&DD"DctstdgSt}|stdgSt5d|D}dddn #1swxYwYt |}|s|St5d|D}td|D}dddn #1swxYwYt|t|z }|s|r;d|dt|d }|r |d |d z }t ||S) aEntry point: load config, connect to MCP servers, register tools. Called from ``model_tools`` after ``discover_builtin_tools()``. Safe to call even when the ``mcp`` package is not installed (returns empty list). Idempotent for already-connected servers. If some servers failed on a previous call, only the missing ones are retried. Returns: List of all registered MCP tool names. z4MCP SDK not available -- skipping MCP tool discoveryzNo MCP servers configuredctg|]5\}}|tvt|ddd3|6SrGrHrs r&r}z&discover_mcp_tools..N sR   c8##swwy$7O7OY](^(^(^# ###rJNc$g|] }|tv |SrIrUr{rs r&r}z&discover_mcp_tools..Y s"!X!X!X4txGWGW$GWGWGWrJc3hK|]-}ttt|dgV.dSrXrYrgs r&r z%discover_mcp_tools..Z sO   (@"EE F F      rJz MCP: rZr[r\r]) rCrrrrr\rcr^rr)rnew_server_names tool_namesconnected_server_namesr` failed_countrbs r&discover_mcp_toolsrm8 s   KLLL   G  0111     $]]__                  &g..J    !X!X3C!X!X!X  .                    '((3/E+F+FFLaNaa#>T:U:Uaaa  3 2L222 2G G s$BB B'&CC Cc4g}t}|s|St5tt}dddn #1swxYwY|D]\}}d|vrdnd}||}|r}|jv||t|drt|j nt|j dd}|j rt|j j |d<| || ||d d d|S) zReturn status of all configured MCP servers for banner display. Returns a list of dicts with keys: name, transport, tools, connected. Includes both successfully connected servers and configured-but-failed ones. Nr(httprBrT)r transportrTr_rrF)rrr~r$r\rrrrrrrrrp)r configuredactive_serversrrrprHrs r&get_mcp_statusrsi s F"##J  ((h((((((((((((((( %%'' c#sllFF ##D))  fn0&?FvOg?h?hAV:;;;nqrxroAoA! E  C$()9)A$B$Bj! MM% MM&"      Ms=AActsiSt}|siSd|DsiStigfd} t |dn2#t $r%}t d|Yd}~nd}~wwxYwtn#twxYwS)uTemporarily connect to configured MCP servers and list their tools. Designed for ``hermes tools`` interactive configuration — connects to each enabled server, grabs tool names and descriptions, then disconnects. Does NOT register tools in the Hermes registry. Returns: Dict mapping server name to list of (tool_name, description) tuples. Servers that fail to connect are omitted from the result. cdi|]-\}}t|ddd*||.SrG)rrrs r&rz*probe_mcp_server_tools.. sOA !%% 400$ ? ? ? 1rJc Kt }g} D]W\}}|dt}|t jt|||Xt j |ddid{V}t||D]\}}t|trtd||7 |g}|jD]1}t!|ddpd} ||j| f2| |<t j d Dddid{VdS) Nrrhr Tz$Probe: failed to connect to '%s': %srkryc3>K|]}|VdSr@r)r{ss r&r z=probe_mcp_server_tools.._probe_all.. s* 3 3qajjll 3 3 3 3 3 3rJ)r rNr\rrrprqrrrr!rOrrrrrrr) r)corosrrctoutcomesoutcomerTrdescrprobed_serversrs r& _probe_allz*probe_mcp_server_tools.._probe_all sW\\^^$$  S SID#*,DEEB LL)/$*D*DbQQQ R R R R G$GGGGGGGG 11 ! !MD''9--  CT7SSS  ! !' * * *E^ - -q-44: afd^,,,, F4LLn 3 3N 3 3 3 "           rJrLrhzMCP probe failed: %sN) rCrr\rvrIrrr_stop_mcp_loop)servers_configrr%rrrs @@@r&probe_mcp_server_toolsr s*  %''N  '--//G  %'F*,N       4s33333 222 +S111111112  Ms0A54B65 B$?BB6B$$B66Cc"t5ttdddn #1swxYwYst dSfd}t5t }dddn #1swxYwY|{|rg tj||}| dn2#t$r%}t d|Yd}~nd}~wwxYwt dS)aClose all MCP server connections and stop the background loop. Each server Task is signalled to exit its ``async with`` block so that the anyio cancel-scope cleanup happens in the same Task that opened it. All servers are shut down in parallel via ``asyncio.gather``. NcXKtjdDddid{V}t|D];\}}t|tr!t d|j|K|]}|VdSr@rx)r{rHs r&r z:shutdown_mcp_servers.._shutdown.. s, ? ?Ffoo ? ? ? ? ? ?rJr Tz!Error closing MCP server '%s': %s) rqr!rOrrrrrrr$r)rQrHrservers_snapshots r& _shutdownz'shutdown_mcp_servers.._shutdown s ? ?.> ? ? ? "        ""2G<<  NFF&),,  7f   NN                     s8BB#&B#rDrhzError during MCP shutdown: %s) rr r$valuesrrJrKrqrzrrrr)rrQr~r%rs @r&shutdown_mcp_serversr s 33 1 122333333333333333        DOO-- ?5iikk4HHF MM"M % % % % ? ? ? LL8# > > > > > > > > ?s9'<AA%A99A=A=3C C>C99C>include_activecbddl}ddl}t5i}tD]}d||<t|r@|t ttdddn #1swxYwY|sdS|D]Y\}} tj ||j t d||=#ttt f$rYVwxYw|dt%|d|j }|D]i\}} tj |dtj ||td||M#ttt f$rYfwxYwdS)u5Best-effort graceful shutdown of stdio MCP subprocesses to reap orphans. Orphans are PIDs that survived their session context exit (SDK teardown did not terminate the process — common on Linux when stdio children escape the parent cgroup on cancellation). By default only entries in ``_orphan_stdio_pids`` are reaped so concurrent cron jobs and live user sessions are not disrupted. Sends SIGTERM, waits 2 seconds, then escalates to SIGKILL for any survivors, avoiding shared-resource collisions when multiple hermes processes run on the same host (each has its own ``_stdio_pids`` dict). With ``include_active=True`` also kills every PID in ``_stdio_pids`` — used only at final shutdown, after the MCP event loop has stopped and no sessions can still be in flight. rNorphanz,Sent SIGTERM to orphaned MCP process %d (%s)rSIGKILLz6Force-killed MCP process %d (%s) after SIGTERM timeout)signalrrrrr_r~rr\rrSIGTERMrrrrrrrrq)r_signal_timepidsopidrr(_sigkills r&_kill_orphaned_mcp_childrenr s!"   !& " "D!DJJ  """  KK[)) * * *                      !JJLL[  GC ) ) ) LLGk Z Z Z Z"OW=    D  KKNNNw 7?;;H JJLL  [  GCOOO GC " " " NNH[    #OW=    D   s7A-B  B B 26C))DD AFF,+F,c@t5t}t}dadadddn #1swxYwY|j||j||d |n#t$rYnwxYwtddSdS)z3Stop the background event loop and join its thread.NrNrhT)r) rrJr^rLrrrcloserr)rQthreads r&rr6 s      !!$),,,   KKK " " "  JJLLLL    D  $4888888s'++'A<< B B )r)T)F)rzrqconcurrent.futuresr{rDr)rrrrrr rsrrtypingrrrr getLoggerrrr__annotations__rrr'rr/rCrr:rrr5rer0r1mcp.client.stdior2mcp.client.streamable_httpr3rr4r mcp.typesrr6r7r8r9r:r;r<r=r>r?r@r{rKrrrrr frozensetr]compile IGNORECASErfr~rcriIrnrvrr7rrrrrrr~r$r%r&rr(rr+r-r.r9r<rTrUrZr]rJAbstractEventLoopr^rtrrrrrrnrvrIrrrrrrrrrrrcrrrrrr!r'r+rrDrcrmrsrrrrrIrJr&rs DDDL   ,,,,,,,,,,,,  8 $ $(%)HSM(((%y~'' "S " " " "F  #  $     &!&'.K88888888------N$DDDDDD" $$$#$EEEEEE  k5555555 kkk ijjjjjk N                  # NNN LMMMMMN `            #' ``` ^_____`KKK LLIJJJJJK     "@!?!A!A`8` LL^___   !bj  M  &htn&7#7#7777"RZ=E>CECE CEC0-E/C00E4D E D&#E%D&&E*D98E9EEEEE76E7