sjW! UdZddlZddlZddlZddlZddlZejeZddl Z ddl Z ddl Z ddl Z ddl mZddlmZmZmZmZddlmZmZddlmZddlmZdZdd lmZdd lm Z!dd l"m#Z#m$Z$e%gd Z&d e'de'de'fdZ(d e'de'de'fdZ)dZ*dZ+da,dZ-dZ.e j/Z0da1e2e3d<e j/Z4iZ5ee'ee'effe3d<dZ6iZ7ee'ee'effe3d<dee'deee'effdZ8de2de2fdZ9de2fdZ:dee'efddfd Z;dee'efddfd!Zd#e'de2fd'Z?dddd(d#e'd)e'd*ee'd+ed,ede2f d-Z@d*ee'deAeeffd.ZBdeee'effd/ZCdd1ed2ed3eDde2fd4ZEe%hd5ZFd6ee'd2ede'fd7ZGdee'efd2ede2fd8ZHd9e'd#ee'd:ee'd2ede'f d;ZIdd?ee'efd@eDdAeDdeee'effdBZJdCede'fdDZKe%hdEZLe%hdFZMdGe'dHedefdIZNdJedee'effdKZOdLedee'effdMZPdNedeee'effdOZQdCede2fdPZRdQee'de'fdRZSdeDfdSZTde2fdTZUdaVdeDfdUZWdeeXfdVZYdeDfdWZZde2fdXZ[de2fdYZ\dZe'de2fd[Z]d\e^de^fd]Z_d^ee'd\e^e'dee'fd_Z`d`ZadaZbdbZcdcZddZeeeXe3dd<deZfdfZgdgZhgdhZiGdidje'ejjZkekjlekjlekjmekjnekjodkZpee'ekfe3dl<de2fdmZq dddndoddpdqe'dree'dsee'dte'dueDdveDde'fdwZrdee'fdxZsdyee'dee'fdzZtdte'dee'fd{Zud|e'ddfd}Zv dddddddd~deDdqe'deDd#ee'dee'deeDdee'dyeee'deee'efdeewfdZxdHede'fdZydee'dee'fdZz ddeDdqe'dree'dyeee'dee'deDdeDdee'dee'dee'dee'deee'efdeeDdee'deee'dte'f dZ{dedeDdeXdeXdee j|dqe'dee'fdZ}deDdLe'dee'fdZ~dLe'deDdeDdeAe'ee'ffdZdeDdeeDfdZdeee'efddfdZ ddddd(deDdqe'd*ee'd+ed,edee'eff dZe j/Ze jZe jZdZde jfdZdeee'efdeee'efdeeAeDee'efefddfdZ ddeDdqe'dee'effdZdedeAeeee'efee'ffdZejdejZejdZdZdeee'efdee'fdZ ddqee'dree'deeee'efdeeDdtee'dee2deee'efd9ee'd#ee'd:ee'de'fdZ ddee'dee'fdZdedefdZdefdZde'fdZde'fdZde'fdZdefdZdddddddddddddddddddndgddĜddddƜdqgdǜddɜddndgddĜdddddddgd͢ddĜdddddddќ gdǜdҜZddlmZmZddede2fdՄZddhZdedefd؄ZejddedڄeqdeܦdS)a Delegate Tool -- Subagent Architecture Spawns child AIAgent instances with isolated context, inherited toolsets, and their own terminal sessions. Supports single-task and batch (parallel) modes. Top-level model calls run in the background; orchestrator children wait for their own workers so they can synthesize the results. Each child gets: - A fresh conversation (no parent history) - Its own task_id (own terminal session, file ops cache) - The parent's toolsets, with child-only blocked tools stripped - A focused system prompt built from the delegated goal + context The parent's context only sees the delegation call and the summary result, never the child's intermediate tool calls or reasoning. N) TimeoutError)AnyDictListOptional)urlsplit urlunsplit)TOOLSETS)request_hard_interruptcustom) file_state)set_approval_callback)base_url_hostnameis_truthy_value) delegate_taskclarifymemory send_messagecronjobcommand descriptionreturnc >td||dS)zAuto-deny dangerous commands in subagent threads (safe default). Returns 'deny' so the subagent sees a refusal it can recover from, and never calls input() (which would deadlock the parent TUI). zeSubagent auto-denied dangerous command: %s (%s). Set delegation.subagent_auto_approve: true to allow.denyloggerwarningrrkwargss 7/home/agent/.hermes/hermes-agent/tools/delegate_tool.py_subagent_auto_denyr!Ns+  NN ? 6c >td||dS)zAuto-approve dangerous commands in subagent threads (opt-in YOLO). Only installed when delegation.subagent_auto_approve=true. Returns 'once' so the subagent proceeds without blocking the parent UI. z1Subagent auto-approved dangerous command: %s (%s)oncerrs r _subagent_auto_approver%\s)  NN; 6r"ct}|dd}t|rtStS)aReturn the callback to install into subagent worker threads. Config key: delegation.subagent_auto_approve (bool, default False). Reads via the same _load_config() path as the rest of delegate_task so priority is config.yaml > (no env override for this knob) > default. subagent_auto_approveF) _load_configgetrr%r!cfgvals r _get_subagent_approval_callbackr-is= ..C '')5 1 1Cs&%% r" F _spawn_paused_active_subagents_recent_subagentstask_idc|rt|tsdSt5t|}|8||d|ddcdddSt |}|8||d|ddcdddS dddn #1swxYwYdS)aResolve a process task_id to its originating delegation, if any. Children run their terminal sessions under ``task_id == subagent_id`` (see _run_single_child's child_task_id), so a background process spawned by a subagent carries that id in ``ProcessSession.task_id``. Returns ``{subagent_id, goal, delegation_id}`` for live AND recently-finished children, or None when the task_id is not a known subagent. Ngoal delegation_id) subagent_idr6r7) isinstancestr_active_subagents_lockr1r)r3)r4recordretaineds r get_subagent_attributionr>sc *Wc22t "&&w//  & 6**!'O!!>  4sAC6ACCCpausedcpt5t|atcdddS#1swxYwYdS)zGlobally block/unblock new delegate_task spawns. Active children keep running; only NEW calls to delegate_task fail fast with a "spawning paused" error until unblocked. Returns the new state. N)_spawn_pause_lockboolr0)r?s r set_spawn_pausedrCs| V s +//cRt5tcdddS#1swxYwYdSN)rAr0r"r is_spawn_pausedrGso s   r<c|d}|sdS|ddt5|t|<ddddS#1swxYwYdS)Nr8accepting_steerT)r) setdefaultr;r1r<sids r _register_subagentrMs **] # #C  '... ((!'#((((((((((((((((((s AAAc|d}|sdS|d|d|ddt|<tttkrYtt t tdtttkWdSdS)zCKeep a bounded attribution stub after a child finishes (lock held).r8Nr6r7owner_agent_session_id)r6r7rO)r)r3len_RECENT_SUBAGENTS_CAPpopnextiterrKs r _retain_recent_subagentrUs **] # #C  6""O44"(**-E"F"Fc  #8 8 8d4(9#:#:;;TBBB  #8 8 8 8 8 8 8r"agentr8rWct5t|}|C||d|ur*t|dt |ddddS#1swxYwYdS)NrW)r;r1r)rRrU)r8rWr<s r _unregister_subagentrYs ,,"&&{33  5=FJJw4G4G54P4P  ! !+t 4 4 4 #F + + + ,,,,,,,,,,,,,,,,,,sA A55A9<A9ct5t|}||d|ur ddddSd|d<t|dd}t |s ddddS |}n?#t $r2}t d||Yd}~ddddSd}~wwxYwt|tr| r|ndcdddS#1swxYwYdS)aAtomically close steer acceptance and drain its final durable artifact. ``steer_subagent`` holds the same registry lock through ``agent.steer``. Therefore either acceptance wins and this drain sees its exact text, or closure wins and the caller is rejected. Exact agent identity prevents a finishing child with a recycled public id from closing its replacement. NrWFrI_drain_pending_steerz#final steer drain for %s failed: %s) r;r1r)getattrcallable Exceptionrdebugr9r:strip)r8rWr<drainpendingexcs r _close_subagent_steeringrds Q Q"&&{33 >VZZ00== Q Q Q Q Q Q Q Q%* !5t<<  Q Q Q Q Q Q Q Q eggGG    LL> S Q Q Q444 Q Q Q Q Q Q Q Q %Wc22Pw}}PwwD Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q QsA5D &D> B D CC/DC/DDDcJt5t|}dddn #1swxYwY|sdS|d}|dS t|d|dsdSn4#t$r'}t d||Yd}~dSd}~wwxYwdS)aCRequest that a single running subagent stop at its next iteration boundary. Does not hard-kill the worker thread (Python can't); sets the child's interrupt flag which propagates to in-flight tools and recurses into grandchildren via AIAgent.interrupt(). Returns True if a matching subagent was found. NFrWzInterrupted via TUI ()z!interrupt_subagent(%s) failed: %sT)r;r1r)r r^rr_)r8r<rWrcs r interrupt_subagentrg s 44"&&{33444444444444444 u JJw  E }u%e-S[-S-S-STT 5   8+sKKKuuuuu 4s$/33A// B 9BB owner_session_idowner_transportowner_session_recordtextrirjrkc|r|sdSt5t|}|r|dds ddddS|Y|d|ks2|0|d|us||d|ur ddddS|d}| ddddS t ||cdddS#t $r2}td||Yd}~ddddSd}~wwxYw#1swxYwYdS) uQueue steering text into a single running subagent without stopping it. The redirection-side mirror of interrupt_subagent(): resolves the live child in the registry and calls AIAgent.steer(), which appends the text to the child's last tool result at its next iteration boundary — the current tool call is never cut. Returns True if a matching subagent QUEUED the text while the child was still accepting work; False for an unknown/closed id, an ownership mismatch, a record with no live agent, or empty text. ``owner_session_id=None`` deliberately preserves the internal in-process helper contract; gateway callers must pass exact authority. Acceptance and completion are linearized by the registry lock. If acceptance wins but no delivery boundary remains, ``_run_single_child`` drains the exact text into the completion entry as ``missed_steer``. FrINrirjrkrWzsteer_subagent(%s) failed: %s) r`r;r1r)rBsteerr^rr_)r8rlrirjrkr<rWrcs r steer_subagentro"s7. tzz||u "&&{33 VZZ(95AA   ' -..2BBB"*::/00GG'/::455=QQQ 7## =   D))**#$    LL8+s K K K555)$ %sB4E!AE<E"!D E E6EE  EEEcP|sdS ddlm}||S#t$rYdSwxYw)zCapture exact request transport + live session generation, if any. This is intentionally an in-process bridge, not a serializable capability. Non-gateway hosts (including the CLI helper path) receive ``(None, None)``. NNr) _current_session_steer_authority)tui_gateway.serverrrr^)rirrs r _capture_gateway_steer_authorityrtRs\ zGGGGGG//0@AAA zzs  %%ct5dtDcdddS#1swxYwYdS)uSnapshot of the currently running subagent tree. Each record: {subagent_id, parent_id, depth, goal, model, started_at, tool_count, status}. Safe to call from any thread — returns a copy. cJg|] }d|D!S)c"i|] \}}|dv || S)>rWrIrjrirkrF.0kvs r z4list_active_subagents...ls@   Aq1r")itemsryrs r z)list_active_subagents..ksI     GGII      r"N)r;r1valuesrFr"r list_active_subagentsrds     '--//                     s #8<< child_agent parent_agentmax_hopsc||dS|}t|D]<}t|dd}t|r |nd}|dS||urdS|}=dS)u+True when *child_agent* sits below *parent_agent* in the spawn tree. Walks the ``_delegate_parent_ref`` weakref chain stamped at build time. Identity comparison only — a parent may steer/stop its own children and grandchildren, never a sibling tree owned by another conversation. NF_delegate_parent_refT)ranger\r])rrrcur_refancestors r _is_descendant_ofr|sl2u C 8__c1488$SMM333555t  55 | # #44 5r">liststoprn session_idct|pd}|sdSt|dd}||S ||}|rt|n|S#t$r|cYSwxYw)aResolve a session id to the tip of its compression lineage. Best-effort: uses the parent's live SessionDB handle when present so a delegation dispatched before a compression rotation still matches the rotated parent. Returns the input unchanged when resolution fails. _session_dbN)r:r\resolve_resume_session_idr^)rrrLdbresolveds r _resolve_session_lineagers jB  C r }d 3 3B z //44 (1s8}}}c1  s'A A#"A#c<|d}t||rdSt|dpd}|sdStt|ddpd}|sdS||krdSt |||t ||hvS)uTrue when *parent_agent*'s conversation owns this live-child record. Two-tier check: 1. Object identity — the ``_delegate_parent_ref`` weakref chain stamped at build time reaches *parent_agent*. Fast path for the common case where the parent AIAgent object survives the whole run. 2. Durable conversation lineage — the child was registered with the owning conversation's durable session id (``owner_agent_session_id``); match it against the calling parent's ``session_id``, resolving compression-rotation lineage on both sides. Tier 2 exists because the identity chain is BRITTLE across parent-agent rebuilds: the CLI sets ``self.agent = None`` mid-session (route-signature change, credential refresh, /model, MoA one-shots) and constructs a NEW AIAgent for the next turn while the child keeps running with a weakref to the old object. The delivery path always survived this (it routes by durable session id); the control path must use the same durable spine or running children go invisible/unsteerable (observed live: deleg_88454b70 / sa-0-dc0100f4, 2026-08-17). rWTrOrFr)r)rr:r\r)r<rrW owner_sid parent_sids r _owns_subagent_recordrs, JJw  E --tFJJ788>B??I uW\<<<BCCJ uJt #I| < < \::A r"actionmessagec|dkrt5tt}dddn #1swxYwYg}|D]+}|d}t ||s)|d}||d|d|d|d|d t|ttfr$ttj |z d ndt|d d t|d dd-dt||d} |sd| d<tj| d S|pd} | st%d|dSt5t| } dddn #1swxYwY| t | |st%d| dS|dkr=t'| rtjd| dddd St%d| dS|dkre|pd} | st%dSt)| | rtjd| d d!dd St%d"| d#St%d$|d%S)&uSynchronous control plane for delegate_task: list/steer/stop. Runs in-turn (never backgrounded) and only over subagents descended from *parent_agent* — the same registry the TUI overlay drives, but scoped so a conversation can only control its own spawn tree. rNrW started_atr8 parent_idr6modelstatusr/rIF_live_transcript_path)r8rr6rrrunning_secondsrIlive_transcript)rcount subagentsuNo live subagents right now. Children that already finished have delivered (or will deliver) their results as normal completion messages — there is nothing to steer or stop.note ensure_asciirzaction='zK' requires subagent_id (from the spawn dispatch response or action='list').zNo live subagent 'z' in this conversation's spawn tree. It may have already finished (its result arrives as a normal completion message). Use action='list' to see live children.rinterrupt_requesteduThe subagent stops at its next iteration boundary (in-flight tool calls are asked to cancel). Its partial result still re-enters the conversation as a completion message — do not wait or poll.)rr8rrzCould not interrupt 'u_' — it likely finished in the last moment. Its result arrives as a normal completion message.rnzOaction='steer' requires a non-empty 'message' describing the course correction.queueduSteering text queued. The subagent sees it appended to its next tool result — the current tool call is never cut. If the child finishes before a delivery boundary remains, the text is reported back as missed_steer in its completion entry.z Subagent 'z' is no longer accepting steering (finishing or already finished). Its result arrives as a normal completion message; re-delegate a follow-up task if more work is needed.Unknown action 'z#'. Use spawn, list, steer, or stop.)r;rr1rr)rappendr9intfloatroundtimerBr\rPjsondumpsr` tool_errorrgro) rr8rrrecordsentriesrrWstartedpayloadrLr<rls r _handle_control_actionrs3 # 7 7,335566G 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7  AEE'NNE(L99 eeL))G NN#$55#7#7!"{!3!3EE&MMUU7^^eeHoo&gU|<<"dikkG3Q777!'+AEE2CU,K,K'L'L'.u6Mt'T'T      "\\ # #   M FO z'6666  " # # % %C   *v * * *    ,,"&&s++,,,,,,,,,,,,,,, ~26<HH~ K K K K    c " " :$#&3F  #     IC I I I    2$$&& %  #t $ $ :%#&&@  #  L L L L   TTTT U UUs#'AA A HH H  i@ max_entries max_charsresultrrct|tr|dnd}t|tsgSg}i}|D]}t|ts|ddkro|dpgD]W}|d}|dpi} |r't | dpd ||<Xt |D]}t ||krnt|tr|dd krFt|d pd } t| } ||d pd d } | d|} | | | | d | |S)u8Pull the last N tool-call results from a child's conversation. Powers the overlay's "Output" section — the cc-swarm-parity feature. We reuse the same messages list the trajectory saver walks, taking only the tail to keep event payloads small. Each entry is ``{tool, preview, is_error}``. messagesNrole assistant tool_callsidfunctionnametoolcontentr tool_call_id)rpreviewis_error) r9dictr)rr:reversedrP_stringify_tool_content_looks_like_error_outputrreverse)rrrrtailpending_call_by_idmsgtctc_idfnrr tool_namers r _extract_output_tailrIs*4FD)A)AKvzz*%%%tH h % % "$D)+NN#t$$   776??k ) )ggl++1r N Nt VVJ''-2N03BFF6NN4Lf0M0M&u-!!SS t99 # # E#t$$ 6(A(A  *#'')*<*<*BCC+G44&**377>+B+B+Hb&QQ *9*% Y7QQRRRRLLNNN Kr"rch|dSt|tr|St|trg}|D]}t|trp|d}t|tr||W|t j|dt|t|d|St|trt j|dtSt|S)a+Return a stable text representation for tool-result content. Most providers store tool results as strings, but some OpenAI-compatible paths can return content-block lists. Delegate observability must never crash while summarising a child run just because the transport used blocks. NrrlF)rdefault ) r9r:rrr)rrrjoin)rpartsitemrls r rrsr'3'4    ( (D$%% (xx''dC((TLL&&&&LLDuc!R!R!RSSSS SYY''''yy'4  Dz'sCCCC w<<r">cwddstsrcurlpathurlsendpointnew_pathold_path directory file_path source_path target_pathdestination_path>rrrkeyvaluect|tr$dfd|ddDD}|pdSt|tr|sdS|dd}tvrw t |}|jrN|jrG|j}|sdSd|vrd|dn|}|j}||d|n|}t|j||j d d fSn#t$rYdSwxYw|S) z.s(    r"c38K|]}t|VdSrE)_sanitize_tool_target)ryrrs r z(_sanitize_tool_target..s.VV43C>>VVVVVVr"Ni:[]r) r9rr:_TOOL_INPUT_URL_KEYSrschemenetlochostnameportr r ValueError) rrcleanedboundedparsedrhostrrs ` r rrsT%  VVVV5QTRTQT:VVV   $ eS ! !tETElG """ g&&F} P P!? 4 +.//8x{-1-=D))4)))4!6=&&+r2"NOOO   44  Ns(&C ;C CC argumentsct|tsgidS tj|}n#tt f$rgidcYSwxYwt|t sgidStd|Ddd}i}|D]G\}}t| }|tvr0t||}||||<H||dS)zFSummarize argument names and side-effect targets without raw payloads. argument_keystargetsc3DK|]}t|ddVdSNr:ryrs r rz,_summarize_tool_arguments..s033S#c((4C4.333333r"N@) r9r:rloads TypeErrorrrsortedr}lower_TOOL_INPUT_TARGET_KEYSr)rrkeysrraw_keyrrrs r _summarize_tool_argumentsrs$ i % %4!#3334I&& z "444!#333334 fd # #4!#333 33F333 3 3CRC 8D G ,,..##'ll  "" - - - 'U33  "GCL!g 6 66s1A  A summaryct|tsgidS|d}t|trd|ddDng}|d}i}t|tr\|D]G\}}t |}|tvr0t||}||||<H||dS)Nrrc<g|]}t|ddSr r r s r rz0_sanitize_tool_input_summary..s&---CS$3$---r"rr) r9rr)rr}r:rrr) rr safe_keysr safe_targetsrrrrs r _sanitize_tool_input_summaryrs gt $ $4!#333 ;; ' 'D dD ! ! --49----  kk)$$G#%L'4  ,%mmoo , ,NGUg,,$$&&C111+C77G"$+ S!&< @ @@r" tool_tracec t|tsgSg}|D]ttstdpddd}tdpd}|dvrd}dtdt ffd }||td |d |d |d |S)zABuild a detached, metadata-only tool history for lifecycle hooks.runknownNr>okerrorrrc|d}t|ttfrt|trdSt dt|S)Nr)r)r9rrrBmax)rrrs r _byte_countz5_subagent_stop_tool_call_history.._byte_count sXHHS!$$Eec5\22 j6M6M qq#e**%% %r" input_summary args_bytes result_bytes)r tool_input input_bytes output_bytesr) r9rrr:r)rrrr)rhistoryrrr%rs @r _subagent_stop_tool_call_historyr-s5 j$ ' ' $&G  $%%  ((5I66tt< TXXh''4955;;==  ( (F &S &S & & & & & & "6txx7P7PQQ&;|44'K77        Nr"c4t|}|sdS|}|ds|dr tj|}t |t re|drdSt|dpd }|dvrdSn#t$rYnwxYw| r>| d  nd}|d p>|d p)|d p|d S)aConservative stderr/error detector for tool-result previews. The old heuristic flagged any preview containing the substring "error", which painted perfectly normal terminal/json output red. We now only mark output as an error when there is stronger evidence: - structured JSON with an ``error`` key - structured JSON with ``status`` of error/failed - first line starts with a classic error marker F{rr"Trr>r"failedfailuretimeoutrzerror:zfailed:z traceback z exception:) rlstrip startswithrrr9rr)r:r`rr^ splitlines)rheadrrfirsts r rrs&g..G u >>  D s ts33  Z((F&$'' ::g&& 4VZZ117R88>>@@FFHHFFF4    D 8?7I7I7K7K SG    # ) ) + + 1 1 3 3 3QSE "" *   I & & *   L ) ) *   L ) ) s>C"A C"" C/.C/rc||sdSt|}|dvr|Std|dS)a/Normalise a caller-provided role to 'leaf' or 'orchestrator'. None/empty -> 'leaf'. Unknown strings coerce to 'leaf' with a warning log (matches the silent-degrade pattern of _get_orchestrator_enabled). _build_child_agent adds a second degrade layer for depth/kill-switch bounds. Nleaf>r9 orchestratorz1Unknown delegate_task role=%r, coercing to 'leaf')r:r`rrr)rr_norms r _normalize_roler<=s\ yyv VV\\^^ ! ! # #F )))  NNFJJJ 6r"ct}|d}| tdt|}|dkr$tsdat d||S#ttf$r+t d|ttcYSwxYwtj d}|r< tdt|S#ttf$r tcYSwxYwtS) azRead delegation.max_concurrent_children from config, falling back to DELEGATION_MAX_CONCURRENT_CHILDREN env var, then the default (10). Users can raise this as high as they want; only the floor (1) is enforced. Uses the same ``_load_config()`` path that the rest of ``delegate_task`` uses, keeping config priority consistent (config.yaml > env > default). max_concurrent_childrenNr/r.Tzxdelegation.max_concurrent_children=%d: each child consumes API tokens independently. High values multiply cost linearly.zNdelegation.max_concurrent_children=%r is not a valid integer; using default %d"DELEGATION_MAX_CONCURRENT_CHILDREN) r(r)r$r_HIGH_CONCURRENCY_WARNEDrrrr _DEFAULT_MAX_CONCURRENT_CHILDRENosgetenv)r+r,renv_vals r _get_max_concurrent_childrenrENs1 ..C ''+ , ,C  4CHH%%F{{//3,NNM M:& 4 4 4 NN#0     4 3 3 3 4i<==G4 4q#g,,'' ':& 4 4 43 3 3 3 4 ++s$AA009B,+B,C##C>=C>cdt}t|ddS)uRead delegation.worktree_isolation from config (bool, default False). Inspired by Muse Code's ``--subagent-worktree-isolation`` (Meta, Aug 2026): when enabled, each delegated child gets its own git worktree checked out from the parent's current commit so parallel children never contend for the same working copy. Opt-in and git-only — in a non-git workspace or on a non-local terminal backend the flag is ignored without an error and children share the parent's workspace as before. worktree_isolationF)r(rBr)r+s r _get_worktree_isolationrIws* ..C ,e44 5 55r"ct}|d#tsdatdt S)uConcurrency cap for background (``background=true``) delegations. DEPRECATED KNOB: ``delegation.max_async_children`` has been unified into ``delegation.max_concurrent_children`` — one cap governs both a single synchronous batch's parallelism and how many background delegation units may run at once. When at capacity, a new async dispatch is REJECTED (not queued) so a runaway model can't pile up unbounded background work; the caller falls back to running the work synchronously. A leftover ``max_async_children`` in config.yaml is ignored (the config migration removes it, folding a raised value into ``max_concurrent_children``); we log a one-time deprecation warning if one is still present. max_async_childrenNTzdelegation.max_async_children is deprecated and ignored; delegation.max_concurrent_children now caps background delegations too. Remove the stale key from config.yaml.)r(r)_LEGACY_MAX_ASYNC_WARNEDrrrErHs r _get_max_async_childrenrMsV ..C ww#$$09Q0#'  F   ( ) ))r"ct}|d}|Z t|}|dkrdntd|S#tt f$rt d|YnwxYwtj d}|r? t|}|dkrdntd|S#tt f$rYnwxYwtS)uRead delegation.child_timeout_seconds from config. Returns the number of seconds a single child agent is allowed to run before being cut off, or ``None`` when no wall-clock cap applies. Default: ``None`` (no timeout). Subagents doing legitimate heavy work (deep code review, large research fan-outs, slow reasoning models) were routinely killed mid-task by the old blanket cap even though they were making steady progress. Failures should come from what the child is actually doing — API errors, tool errors, iteration budget — not from a generic delegation-level stopwatch. Stuck-child protection is handled separately by the heartbeat staleness monitor, which stops refreshing parent activity so the gateway inactivity timeout can fire. Set ``delegation.child_timeout_seconds`` to a positive number to opt back in to a hard cap (floor 30 s); ``0`` or a negative value means disabled. child_timeout_secondsNrg>@zUdelegation.child_timeout_seconds=%r is not a valid number; using default (no timeout) DELEGATION_CHILD_TIMEOUT_SECONDS) r(r)rr$rrrrrBrCDEFAULT_CHILD_TIMEOUT)r+r,rrDs r _get_child_timeoutrRs$ ..C '') * *C  >3ZZF"Q;;44Cf,=,= =:&    NN-      i:;;G> >7^^F"Q;;44Cf,=,= =:&    D  ! s#A,A=<A=B>>CCcxt}|d}|tS t|}n?#tt f$r+t d|ttcYSwxYwtt|}||kr"t d|t||S)uRead delegation.max_spawn_depth from config, floored at 1 (no ceiling). depth 0 = parent agent. max_spawn_depth = N means agents at depths 0..N-1 can spawn; depth N is the leaf floor. Default 1 is flat: parent spawns children (depth 1), depth-1 children cannot spawn (blocked by this guard AND, for leaf children, by the delegation toolset strip in _strip_blocked_tools). Raise to 2+ to unlock nested orchestration. role="orchestrator" removes the toolset strip for spawning children when max_spawn_depth >= 2, enabling them to spawn their own workers. Like max_concurrent_children, there is no upper ceiling — but each extra level multiplies API cost, so raise it deliberately. max_spawn_depthNzFdelegation.max_spawn_depth=%r is not a valid integer; using default %dz6delegation.max_spawn_depth=%d below floor %d; using %d) r(r) MAX_DEPTHrrrrrr$_MIN_SPAWN_DEPTH)r+r,ivalflooreds r _get_max_spawn_depthrYs ..C ''# $ $C {3xx z " W      "D))G$ D       Ns>9A:9A:ct}|dd}t|tr|St|tr(|dvSdS)aGlobal kill switch for the orchestrator role. When False, role="orchestrator" is silently forced to "leaf" in _build_child_agent and the delegation toolset is stripped as before. Lets an operator disable the feature without a code revert. orchestrator_enabledT>1onyestrue)r(r)r9rBr:r`rr*s r _get_orchestrator_enabledr`sp ..C ''($ / /C#t #sAyy{{  ""&@@@ 4r"cft}t|ddS)zFWhether narrowed child toolsets should keep the parent's MCP toolsets.inherit_mcp_toolsetsTr)r(rr)rHs r _get_inherit_mcp_toolsetsrds+ ..C 377#9::D I I IIr"rc"|sdSt|drdS ddlm}|jt|}n#t $rd}YnwxYwt |o!t|dS)zDReturn True for canonical MCP toolsets and their registered aliases.Fzmcp-Tr)registryN)r:r4tools.registryrfget_toolset_alias_targetr^rB)rrftargets r _is_mcp_toolset_namerj s u 4yyF##t++++++223t99==  93v;;11&99 : ::s#A AAparent_toolsetsct}|D]A}tj|}|r)||dgB|st|St|}tjD]Y\}}||vr |dg}|r7t||r||Z|S)a@Expand composite toolsets so individual toolset names are recognized. When a parent uses a composite toolset like ``hermes-cli`` (which bundles all core tools), the child may request individual toolsets such as ``web`` or ``terminal``. A simple name-based intersection would reject them because ``"web" != "hermes-cli"``. This helper collects the tool names from each parent toolset, then adds the names of any individual toolsets whose tools are a *subset* of the parent's available tools. The original parent toolset names are preserved. tools)setr r)updater}issubsetadd)rkparent_tool_namests_namets_defexpandedts_toolss r _expand_parent_toolsetsrws!UU">>g&&  >  $ $VZZ%<%< = = = $?###?##H#>++"" h   ::gr**  "H ../@AA " LL ! ! ! Or"child_toolsetsct|}t|D]*}t|r||vr||+|S)zFAppend any parent MCP toolsets that are missing from a narrowed child.)rrrjr)rxrk preserved toolset_names r _preserve_parent_mcp_toolsetsr|9s]^$$I//++  - - +,i2O2O   \ * * * r"i]?irQ()terminalfilewebc.eZdZdZdZdZdZdZdZdZ dZ d S) DelegateEventuFormal event types emitted during delegation progress. _build_child_progress_callback normalises incoming legacy strings (``tool.started``, ``_thinking``, …) to these enum values via ``_LEGACY_EVENT_MAP``. External consumers (gateway SSE, ACP adapter, CLI) still receive the legacy strings during the deprecation window. TASK_SPAWNED / TASK_COMPLETED / TASK_FAILED are reserved for future orchestrator lifecycle events and are not currently emitted. zdelegate.task_spawnedzdelegate.task_progresszdelegate.task_completedzdelegate.task_failedzdelegate.task_thinkingzdelegate.tool_startedzdelegate.tool_completedN) __name__ __module__ __qualname____doc__ TASK_SPAWNED TASK_PROGRESSTASK_COMPLETED TASK_FAILED TASK_THINKINGTASK_TOOL_STARTEDTASK_TOOL_COMPLETEDrFr"r rrpsA  +L,M.N(K,M/3r"r) _thinkingzreasoning.availablez tool.startedztool.completedsubagent_progress_LEGACY_EVENT_MAPcdS)z > t    nd33 eT** J     7??27#5#5c)nn#E#EFFDD    H  7==   27==#6#6 KKK 4sA B'' B43B4toolsetsctdhfdtjDdfd|DS)a^Remove toolsets that contain only blocked tools. The strip set is derived from DELEGATE_BLOCKED_TOOLS plus the explicit composite/scenario toolsets (delegation, code_execution) that have no one-to-one tool. This keeps the blocklist and the strip set in lockstep so new blocked tools can't silently leak through as toolset names. delegationc |h|]8\}}|vs-td|dgD6|9S)c3(K|] }|tvVdSrE)DELEGATE_BLOCKED_TOOLSryts r rz1_strip_blocked_tools... s(JJqq**JJJJJJr"rm)allr))ryrdefn_COMPOSITE_BLOCKED_TOOLSETSs r z'_strip_blocked_tools.. s` D$ . . . JJDHHWb4I4IJJJ J J / . . .r"kanbancg|]}|v| SrFrF)ryrblocked_toolset_namess r rz(_strip_blocked_tools..s$ B B B!1,A#A#AA#A#A#Ar") frozensetr r}rq)rrrs @@r _strip_blocked_toolsrsw#,\N";";".** h''' B B B Bx B B BBr"ctt|dkrdtfdt jDS)aReturn one-tool deny toolsets for a delegated child role. ``_strip_blocked_tools`` can remove fully blocked toolsets, but it must keep mixed platform bundles such as ``hermes-cli`` because those also contain useful tools. Passing these exact deny toolsets to AIAgent lets ``model_tools`` subtract blocked names *after* composite expansion, and the restriction survives later registry/MCP refreshes through the agent's stored ``disabled_toolsets``. r:rc3K|]T\}}|dt|ddP|VUdS)rmrFN)r)rnrp)ryrr blocked_namess r rz-_blocked_toolsets_for_role.. s{ D$ 88G   "%% & & / / > >  r")rnrdiscardrr r})rrs @r _blocked_toolsets_for_rolersr.//M ~o... ".**  r"linect|dd}t|r ||dS#t$rYnwxYwt|dS)aWEmit a human-readable progress line to the parent's console. Routes through ``parent_agent._safe_print`` when available so headless stdio hosts (ACP, gateway API) can redirect non-protocol output to stderr via their configured ``_print_fn``. A bare ``print()`` would otherwise land on stdout and corrupt JSON-RPC framing. _safe_printN)r\r]r^print)rrprinters r _emit_parent_consoler(sklM488G  GDMMM F    D  $KKKKKs / <<r8rdepthrr session_ref task_index task_countrrrrc  t|ddt|ddssdSdkr ddzdnd|pdd g d gd tttff f d  dd td tdtffd  dd tdtf f d } fd} | | _| S)uBuild a callback that relays child agent tool calls to the parent display. Two display paths: CLI: prints tree-view lines above the parent's delegation spinner Gateway: batches tool names and relays to parent's progress callback The identity kwargs (``subagent_id``, ``parent_id``, ``depth``, ``model``, ``toolsets``) are threaded into every relayed event so the TUI can reconstruct the live spawn tree and route per-branch controls (kill, pause) back by ``subagent_id``. All are optional for backward compat — older callers that ignore them still produce a flat list on the TUI. Returns None if no display mechanism is available, in which case the child agent runs with no progress callback (identical to current behavior). _delegate_spinnerNtool_progress_callbackr/r] rrrc d}|d<|d<|d<|d< t |d<r-drtd|d<d |d <|S) N)rrr6r8rrrrrchild_session_idr tool_count)rr)r:) kw _tool_countr goal_labelrrrr8rrrs r _identity_kwargsz8_build_child_progress_callback.._identity_kwargses$$    " +B}   'B{O  BwK  BwK  !(^^BzN  D;??<88 D%(\)B%C%CB! "&q>< r" event_typerrcsdS}|| ||||fi|dS#t$r&}td|Yd}~dSd}~wwxYw)NzParent callback failed: %s)ror^rr_) rrrargsrrer parent_cbs r _relayz._build_child_progress_callback.._relay}s  F""$$v : Ij)Wd F Fg F F F F F : : : LL5q 9 9 9 9 9 9 9 9 9 :s 4 A$AA$c |dkrrsrqtdkr dddzn} dd|n2#t$r%}td|Yd}~nd}~wwxYwdd|ppdi|dS|d kr dd|i|dS|d krd | dSt |t r|}nEt|}|) t |}n#ttf$rYdSwxYw|t j kr|p|pd}rrt|dkr |dddzn|} dd |d n2#t$r%}td|Yd}~nd}~wwxYwd| dS|t j krdS|t j kr|p|pd} rQ| rO dd| n2#t$r%}td|Yd}~nd}~wwxYwrD d| n2#t$r%}td|Yd}~nd}~wwxYwdSdxxdz cc<Mt5t} | d| d<|pd| d<dddn #1swxYwYr|r t|dkr |dddzn|pd}ddlm} | |pd} dd| d|} |r | d|d z } | n2#t$r%}td|Yd}~nd}~wwxYwrud||||pdtkr?d}dd| dSdSdS)Nsubagent.start7z... u ├─ 🔀 zSpinner print_above failed: %srrsubagent.complete subagent.textru ├─ 💭 ""zsubagent.thinkingrz Parent callback relay failed: %srr/r last_tool#)get_tool_emojiu├─ z "z subagent.tool, subagent.progress🔀 )rr)rP print_abover^rr_r9rrr)rrrrrr;r1 agent.displayrrrclear)rrrrrshortreventrl summary_textrecremojirr _BATCH_SIZE_batchrrrrprefixspinnerr8s r _callbackz1_build_child_progress_callback.._callbacks ) ) ) F: F14Z21E1EZ_u,,:F''(GF(G(G(G(GHHHH FFFLL!A1EEEEEEEEF F S SW-H -Hb SF S S S F , , , F B B B6 B B B F  ( ( F?G 4 4 4 4 F j- 0 0 EE%))*55E})*55EE"I.FF M/ / /-i-2D F/24yy2~~crcU**4F''(IF(I(I(I(I(IJJJJ FFFLL!A1EEEEEEEEF F& 5 5 5 5 F M5 5 5 F M/ / /%552L F< FF''(NF(N(N (N(NOOOO FFFLL!A1EEEEEEEEF HHI1f3Ll3L3LMMMM HHHLL!CQGGGGGGGGH F A!  "' 7 7'++K88?(3AC %'0BC $  7 7 7 7 7 7 7 7 7 7 7 7 7 7 7  B%"7||b00"%%m  5 4 4 4 4 4"N9?33E9v99e99i99D 'e& B##D)))) B B B =qAAAAAAAA B   F?Iw = = = MM)/r * * *6{{k))))F++*4MF4MG4M4MNNNN    *)sA A:A55A:)C99D D E)) F3FFG33 H"=HH"(H99 I(I##I(/KKKL44 M#>MM#cr?r?d}dd|dSdSdS)z._flushsl   ii''G F&0I0I0I0I J J J J LLNNNNN    r")NNN)r\r`rr:rr)rr6rrr8rrrrrrrrrrrrrrrrs` ``````` @@@@@@@@@r _build_child_progress_callbackr:s8l$7>>G &>EEI 9t(2A~~ #a # # # #2F*"##%%JKF#Kd38n2KO : : :$' :9< : : : : : : :FJnn"n47nnnnnnnnnnnnnn`I r"cnt|pddS)Nr/)r:r`rstrip)rs r _normalized_runtime_urlrs. u{   ! ! # # * *3 / //r"fallback_base_urlct|}t|dd}t|trAt|d}|r||kr|dr|St|dd}|=tt|dd}|r||kr|dr|S|pdS)alReturn the base URL the parent is actually calling, not a stale attribute. ``parent_agent.base_url`` can still carry a leftover OpenRouter URL from an old config while the live OpenAI client in ``_client_kwargs`` already points at local Ollama. Subagents must inherit the active endpoint or they 401 against OpenRouter with a dummy/local key. _client_kwargsNbase_url)zhttp://zhttps://clientr)rr\r9rr)r4)rr surface_url client_kwargs kwargs_urlrlive_urls r _inherit_parent_base_urlr s**;<->z-J-JKK  k))%%&=>>*  \8T 2 2F +76:r+J+JKK  K''##$;<<(O  $$r"max_iterationsoverride_provideroverride_base_urloverride_api_keyoverride_api_modeoverride_request_overridesoverride_max_tokensoverride_acp_commandoverride_acp_argsc :MNOPddlm}ddl}t|dddz}t }t o||k}|dkr|r|nd}d|d |jdd }t|d d}td|dz }t}t|d d}|t|}n?|r)t|d rddl OOPfd|j D}ntt}|rKt|NNfd|D}t!rt#||}t%|}nG|r|t%|}n3|rt%t'|}nt%t}t|dd}t)|t*t,tfr d|D}ng}|dkr d|D}t+t.|t3|zdgz} |dkrd|vr|dt7|}!t9|||!|||}"t|dd}#|#s*t|dr|jd}#|pt|dd}$i}%t?||||||||$||% Md}&Mrdt@ddfMfd }'|'}&|p|j!}(|pt|dd})| p|j"}*| stG||*}*| p|#}+t|ddpd},|)pd$%}-| | }.n0|-dvrdd l&m'}/|/|(}.n|)|,krd}.nt|d!d}.|r,ddl(}0|0)|stUd"|d#|pt|d$d}1t+||nt|d%gpg}2|r|sd}1g}2|rd&})d'}.t|d(d}3|3}4 |d)}5|5s|5d*ur1dd+l+m,}6|6|5}7|7|7}4ntZ.d,|5n2#t^$r%}8tZ0d-|8Yd}8~8nd}8~8wwxYw|rdnt|d.dpd}9t|d/d}:t|d0d};t|d1d}t|d4dpd}?t|d5d}@|r d}:d};d}d}?| | nt|d6d}Ai}Bt)|Atbr|A|Bd6<d}Ct|d7d}D|D_ dd8l2m3}Et|Dd9d}F|F |E|F:n |E}Cn.#t^$r!tZ0d;d<=d}CYnwxYwdd>l4m5}G|G5 |daid?|*d|+d|(d|)d!|.d$|1d%|2d@|d(|4dAt|dAddB|9d |d| dCd<dD|"dEdF|dGdHdIdJd<dKd<dLddM|&dN|CdOt|dPdd/|:d0|;d1|<d2|=d3|>d4|?dQ|rt/| pint/t|dQipid5|@dRMdSd|B}Hn7#tl$r*|C& |C7n#t^$rYnwxYwwxYw dddn #1swxYwYt|dTd|H_8|Cd<|H_9t|HdPdpd|%dP<||H_:||H_;||H_<||H_=||H_>t|dUdpd|H_? tjA||H_Bn#t$r d|H_BYnwxYwt|dPd}I|Irt|HdVd |I|HjDdW<t|)||*}J|J|J|H_Ft|dXrbt|dYd}K|Kr5|K5|jG|Hdddn #1swxYwYn|jG|HMrA MdZ|[n2#t^$r%}8tZ0d\|8Yd}8~8nd}8~8wwxYw dd]lHmI}L|Ld^t|dPdt|dUdpd|t|HdPd|||_n,#t^$rtZ0d`d<=YnwxYw|HS)ba Build a child AIAgent on the main thread (thread-safe construction). Returns the constructed child agent without running it. When override_* params are set (from delegation config), the child uses those credentials instead of inheriting from the parent. This enables routing subagents to a different provider:model pair (e.g. cheap/fast model on OpenRouter while the parent runs on Nous Portal). r)AIAgentN_delegate_depthr/r:r9zsa--r _subagent_idenabled_toolsetsvalid_tool_namescBh|]}|xSrE)get_toolset_for_tool)ryr model_toolstss r rz%_build_child_agent..os<   !66t<<<I IIIr"cg|]}|v| SrFrF)ryrexpanded_parents r rz&_build_child_agent..|s#FFFo1E1E!1E1E1Er"disabled_toolsetsc,g|]}t|SrFr ryrs r rz&_build_child_agent..sHHHDc$iiHHHr"cg|] }|dk| S)rrFr#s r rz&_build_child_agent..s)   4<3G3GD3G3G3Gr"rrrapi_keyrrrrlrc|sdS d|dS#t$r&}td|Yd}~dSd}~wwxYw)Nrz(Child thinking callback relay failed: %sr^rr_)rlrchild_progress_cbs r _child_thinkingz+_build_child_agent.._child_thinkingsy  L!!+t44444 L L L GKKKKKKKKK Ls  AAAproviderr> nous-portalnous nousresearch) nous_api_modeapi_modezPinned delegation command 'zR' was not found on PATH. Install it or remove delegation.command from config.yaml. acp_commandacp_argsz copilot-acpchat_completionsreasoning_configreasoning_effortF)parse_reasoning_effortzAUnknown delegation.reasoning_effort '%s', inheriting parent levelz.Could not load delegation reasoning_effort: %s_fallback_chainproviders_allowedproviders_ignoredproviders_order provider_sortprovider_require_parametersprovider_data_collectionopenrouter_min_coding_score max_tokensr) SessionDBdb_path)r@zHsubagent: failed to open dedicated SessionDB; child persistence disabledTexc_infodelegated_child_contextrr prefill_messagesfallback_model quiet_modeephemeral_system_prompt log_prefix [subagent-rplatformsubagentskip_context_files skip_memoryclarify_callbackthinking_callback session_dbparent_session_idrrequest_overridesriteration_budget _print_fn_current_turn_id_session_init_model_config_delegate_from_active_children_active_children_lockzsubagent.spawn_requestedrz spawn_requested relay failed: %s invoke_hooksubagent_start)rRparent_turn_idparent_subagent_idrchild_subagent_id child_role child_goalz%subagent_start hook invocation failedrF)J run_agentruuidr\rYr`uuid4hexr$r(rnhasattrrrDEFAULT_TOOLSETSrwrdr|rrr9rtuplerfromkeysrrrrrr)rr:rrr r`rhermes_cli.providersr.shutilwhichrhermes_constantsr5rrr^r_r hermes_stater?agent.delegation_contextrD BaseExceptioncloserU_owns_session_dbr_delegate_roler_parent_subagent_id_subagent_goal_parent_turn_idweakrefrrrrW_resolve_child_credential_pool_credential_poolrYhermes_cli.lifecycler\)Qrr6rrrr rrr r rrrrrrrr_uuidr max_spawnorchestrator_okeffective_roler8r_ tui_depthdelegation_cfgparent_enabledrkrxraw_parent_disabledinherited_disabledchild_disabled_toolsetsworkspace_hint child_promptparent_api_keyeffective_model_for_cbchild_session_refchild_thinking_cbr)effective_modeleffective_providereffective_base_urleffective_api_key_parent_provider_effective_provider_normeffective_api_moder._shutileffective_acp_commandeffective_acp_argsparent_reasoningchild_reasoningdelegation_effortr5rrcparent_fallbackchild_providers_allowedchild_providers_ignoredchild_providers_orderchild_provider_sort!child_provider_require_parameterschild_provider_data_collection!child_openrouter_min_coding_scorechild_max_tokenschild_optional_kwargschild_session_dbparent_session_dbr?_parent_db_pathrDchildr child_poollock _invoke_hookr(r rrsQ @@@@r _build_child_agentr*sB"!!!!!,(91==AK$&&I/11MkI6MO"n444TTvN= <??",0CTJJ%eS'9:: HH4GHHH''  /   # !;N!K!K Kxj X  ''L,N,Nl+++,\::N- % ! L\9d;;N D 6F G GD%488CC#JglGT&J&J )+6 $$%   $ , L# L$ L L L L L L,1|1O*UglJPT.U.U*Cl.C X5lDVWW(:N|Z>>D" 2 8b??AAGGII$. !%L L L666666*]?;; / / /!$\:tDD    }}122  .B     1GmT55  ( lJ339r !5 $0+/|-?FF&OL+../ABB   1U : : ? ? ? ? ? ?++,=>>F!"(W% LLL EsKKKKKKKKL"  Fl$5t<<D&l4GNN%l4GNN#L2CTJJ!,FF(/3U))%&-0$&&& #)0 >[]a(b(b%,"&"& $",1))+&  *  \< 6 6 -/"C((?.>l+  mTBB$ $ . . . . . .%&7DIIO#. /2222Y[[    $ $ $ LLZ     $     $A@@@@@ " "443 G(((++())(&o(,+ ( ,+ ( 21 (,+( .~("1(")7I4!P!P!P( /("0(#:"9( 4( )5 !("6 5555#($$%(&$(4'((!D)(*"&+(,#4"3-(.,+/(0#*, d"K"K"K1(2#:"93(4#:"95(6!6 57(8219(:-N,M;(<*H)G=(B)TD39r:::gl4GLLRPRSSE(H-N,MI(J(9'8K(L"&'O((EER    +$**,,,, D  S 444444444444444jlK>>EO#!%'.e\2&F&F&L"l#'E*E%E 2EE#L2DbIIORE *%,[%>%>"" ***&*"""*|T::JHge%A4HHT=G()9:0L*<J!+|/008|%Z76[;7 [+[[+ [&#[+%[&&[++[;;[?[?7^^%$^%`<<aa% a33 b"=bb"&Ac//&ddrtimeout_secondsduration_seconds worker_threadc* ddlm}ddl}ddl}ddl} ddl} |} | dz } | ddn#t$rYdSwxYwt|ddpd|} |j d }| d | d |d z }g*dRdtddf*fd }|d|d|j |d |d|d||d| |d|d|d|dd|d |d|pd }t|dkr |dddz}||pd|d |ddD]`} t||d}t|tr|d kr |d!|d"|B#t$r|d!|d#Y]wxYw|d |d$t|d%d}|d&|t|d'd}|rH|d(t| |d)t!|n#t$rYnwxYw|d |d* t|d+dpt|d,dpd }|d-t|tr"t|d.nd/|d0t|trt|nd/n&#t$r}|d1|d2Yd}~nd}~wwxYw t|d3d}|dt%j|t4}|d5t||d6t|d.n&#t$r}|d7|d2Yd}~nd}~wwxYw|d |d8 |}|D]\}}|d!|d"|n&#t$r}|d9|d2Yd}~nd}~wwxYw|d |d:||r|}||j}|S| |}|D]:} | d;D]}!|d!|!;n%|d<n| |d=n |d>|d |d? |}d@| D}"|r|jnd}#d}$|D]\}%}&|%|#kr |$dAkr$|dBt||$z dCz dDn|"|%}'|'r|'jndE|%}(|'r |'jrdFnd })|dG|(|)dH| |&D]:} | d;D]}!|dI|!;|$dCz }$n&#t$r}|dJ|d2Yd}~nd}~wwxYw|d |dK|dL|dM|dN|dO| d;!*d.Pt|S#t$r&}tD#dQ|Yd}~dSd}~wwxYw)Sa,Write a structured diagnostic dump for a subagent that timed out before making any API call. See issue #14726: users hit "subagent timed out after 300s with no response" with zero API calls and no way to inspect what happened. This helper writes a dedicated log under ``~/.hermes/logs/subagent--.log`` capturing the child's config, system-prompt / tool-schema sizes, activity tracker snapshot, and the worker thread's Python stack at timeout. Returns the absolute path to the diagnostic file, or None on failure. r)get_hermes_homeNlogsTparentsexist_okridxz %Y%m%d_%H%M%Szsubagent-timeout-rz.logrrrc2|dSrE)r)rliness r _wz-_dump_subagent_timeout_diagnostic.._w=s LL     r"u.# Subagent timeout diagnostic — issue #14726z # Generated: z ## Timeoutz task_index: z subagent_id: z configured_timeout: sz actual_duration: z.2fz## Goalz ...[truncated](empty)z## Child config) rr*r/rr rGrNrMrKrtrr z: z: z ## Toolsetsrz enabled_toolsets: rz loaded tool count: z loaded tools: z## Prompt / schema sizesrH system_promptz system_prompt_bytes: zutf-8zn/az system_prompt_chars: z system_prompt: rmrcz tool_schema_count: z tool_schema_bytes: z tool_schema: z z z## All thread stacks at timeoutc,i|]}|j |j|SrF)ident)ryths r r|z5_dump_subagent_timeout_diagnostic..s3!#"r"rz zident=z daemonz --- z ---z z PJ>P>P \     ( ( 9 9I;IIIIII   S $        ;<<<  ;3<++--7799 ; ;<<< 2 <  /: / /000  0; 0 0111  6O 6 6 6777  :#3 : : : :;;; 2 9 **,, }   $ $)%4%03DDM = %I&&& 2   . .D  .eT400c3''DJ,>,>'''''(((( . . .,,,,----- . 2 =%!3T::  .7 . .///U$6==   B8s:88 9 9 9 ?6*+=+=??@@@@     2  %&&& 3 (A4HH5/488  BtJWacfLgLg)rZ->->w-G-G)H)H)Hmrtt u u u BdJzSV3|+<+<>>???N3|/B/B7/K/K+L+LNNOOO 1 1 1 B//// 0 0 0 0 0 0 0 0 1 2  !!! :0022G  $ $1???Q??#### $ : : : B8#888 9 9 9 9 9 9 9 9 : 2  .///  $)?)?)A)A $))++F!::m&9::L'"// =="'''J)002288>>'':::''34444  " B, - - - - B1 2 2 2 2  ,--- 5))++F'1';';'='=H3@I=..TLF &    uL((R<<BMS[[61A5MMMNNNE\\%(("$:rww*:5*:*:')@bi@b.D.&...///","9"9%"@"@))J)002288>>))<#<<(((()!  5 5 5 B3S333 4 4 4 4 4 4 4 4 5 2 :  TUUU  VWWW  TUUU  IJJJTYYu--@@@9~~ DcJJJttttts1%] A]  A ] AE)] 9>G87] 8H] HA&] ;J]  J$!] #J$$] >BM]  M=$M83] 8M==] A7O98] 9 PP] P] 6?Q65] 6 RR] RC-] D Z('] ( [ 2[] [  A=] ]9]44]9cz ddlm}ddl}|dd}|dd|jd}|d |d |d z }dd lm}|||d t|S#t$r&}t d|Yd}~dSd}~wwxYw)aWrite a subagent's full summary to the delegation cache and return path. Mirrors web_extract's ``_store_full_text``: the file lands in ``cache/delegation`` which is mounted read-only into remote backends (Docker/Modal/SSH) via ``credential_files._CACHE_DIRS``, so the parent's terminal/``read_file`` tools can page through the complete text on any backend. Returns the absolute path, or None on failure (best-effort: the trimmed head+tail is still returned to the parent regardless). r)get_hermes_dirNzcache/delegationdelegation_cacheTrz%Y%m%d_%H%M%S_%fzsubagent-summary-rz.txt)write_text_exclusiveF)privatez,Failed to spill subagent summary to file: %s) rnrrrrrtools.spill_safetyrr:r^rr_) rrrr cache_dirrrrrcs r _spill_summary_to_filers333333"N#57IJJ t444 \     ( (); < <DzDDBDDDD;;;;;; T7E::::4yy  CSIIItttttsBB B:B55B:capc t|}t|dz}||z }|d|}|| d}|d}||dzkr |d|}|d}d|cxkr |dzkrnn ||dzd}t ||} ddd t|d d t|d d |d d g} | rM|ddz} | d| | d| d| dn| d| d|dz|zd| z} | | fS)aReturn (model_text, spill_path) for one over-budget summary. Mirrors web_extract's ``_truncate_with_footer``: keep a head+tail window (~75% head / ~25% tail, snapped to line boundaries) so the subagent's opening AND its closing (outcomes / files-changed / issues, which live at the end) both survive, spill the full text to disk, and append a footer telling the parent exactly how much it's seeing and the precise ``read_file offset=`` to page into the omitted middle. Deterministic. g?Nrr~rr/ruE──────── [SUMMARY TRUNCATED] ────────zShowing ,z chars (head) + z chars (tail) of u: total — trimmed to protect the parent's context window.rzFull subagent output saved to: z,To read the omitted middle: read_file path="z " offset=zV limit=200 (the file is the complete summary; raise/lower offset to page through it).zWFull output could not be stored to disk; the head+tail above is all that was preserved.uo─────────────────────────────────────u+ [... middle omitted — see footer ...] )rPrrfindfindrrrr) rrr original_len head_budget tail_budgetr6rnl spill_path footer_linesmiddle_start_line model_texts r _trim_summary_with_footerrsw<r/z!Summary budget computation failedTrA) r\r9rr_MIN_SUMMARY_CHARS_SUMMARY_HEADROOM_FRACTIONr$r^rr_) rr compressorr used_tokensreservedheadroom_tokensbatch_token_budgetper_summary_tokensper_summary_charss r _parent_summary_char_budgetr sF\+?FF  -=tDD.#.. .A2E2E4l,CQGG +U|44  aK:|Q77<1(3{+;+;;c(mmK a  % % 3M!MNN/3q+3F3FF.2%'8999  84 HHHtts=C<A6C<8AC<<&D&%D&resultsc d|D}|sdSt} t|dt}n#tt f$r t}YnwxYwt |t|}d||fD}|sdSt|}|D]}|d} t| |krt| } t| ||dd\} } | |d<d|d <| r| |d <t d |dd | || pd dS)uTrim subagent summaries in-place so the batch can't overflow the parent's context window, spilling full text to disk so nothing is lost. The effective per-summary cap is the MIN of: - the dynamic headroom budget (remaining parent context ÷ batch size), and - the static ``delegation.max_summary_chars`` ceiling (0 = disabled). When a summary exceeds the cap, its full text is written to a file and the in-context summary becomes a head slice plus a pointer to that file. This addresses issue/PR #9126: batch fan-out returned N full summaries verbatim, blowing the parent context and (on rate-limited providers) triggering a compression/429 death spiral. cg|]I}t|tt|dt?|dG|JS)r)r9rr)r:r~s r rz)_apply_summary_budget..Q sdjD116@yAQAQSV6W6W\]^g\h r"Nmax_summary_charsc"g|] }||dk | S)rrF)rycs r rz)_apply_summary_budget..` s"MMMMq1uu!uuur"rrTsummary_truncatedsummary_full_pathu9[subagent-%s] summary trimmed %d → ~%d chars (spill=%s)?none) r(rr)DEFAULT_MAX_SUMMARY_CHARSrrrrPminrrr_) rr summariesr+static_ceilingdynamic_budgetrrentryrrrrs r _apply_summary_budgetr"C sI  ..C3SWW%8:STTUU z "333231s9~~NNNNMnn=MMMJ  j//C   " w<<3   7|| !: S%))L"55" "  J&i%)!"  4)3E% & G IIlC ( (    &       s(A A$#A$c <nopqrstuvwtj}tddvddl} tdt | j} tdd} d} | | } | o | } | %tdr | n2#t$r%}t d|Yd}~nd}~wwxYwtjndgpdgqdgodgsnopqsfd}tj|d }td d}t!|t"r|nd}|rs|( dd lm}|d dpd}n#t$rd}YnwxYw|r||t)|\}}tdd}t!|t*rt-d|dz nd}tdd}t#tddpdpt#tddpd}tdd}t/|t!|t"r|nd|t!|t"r|ndt!tddt"rtddndtjdd|pd|||ddudt0t"t2fddfufd } |vrA vdn2#t$r%}t d|Yd}~nd}~wwxYwddl}|p&dd|jdd wtd!d} dd"lm}m }m!}|w|||w|n2#t$r%}t d#|Yd}~nd}~wwxYwtEr dd$l#m$} | %rLd}! dd%lm}"|"|}!n#t$rYnwxYw| &|!ptO|&unt d'n2#t$r%}t d(|Yd}~nd}~wwxYwu` dd)lm }#|#wud*n2#t$r%}t d+|Yd}~nd}~wwxYwdd,l(m)}$|$uztj}%|r!t tUj+|ng}&tY}'dd-l-m.}(|(dt^taf.})d/ditd0t"ddfvfd1 rrtwfd2}*tcj2}+|)3|+j4|*}, |,5|'3}-n#t$r}.|rtm|nd}/ duoto}0|0std4rd _8n#t$rYnwxYwt!|.trttf}1twtj|z d5}2t<d6|1rd7nd8t{|.j>|2d}3d}4 ?}5t+|5@d9dpd}4n#t$rYnwxYw|1rh|4dkrbtt|'pd:t|2t@d/;}3|3rt<d<|3vr; vd=|1rd>|2d?nt#|.|1rd@ndA|2dBn#t$rYnwxYw|1r+|4dkrdC|'dD}6|3r|6dE|3z }6n#dC|'dF|4dG}6|3r|6dE|3z }6nt#|.}6|1rd@ndAd|6|1rd@ndA|4|2|1r|'nd|1r|2nd|1r|4dkrdHn|1rdIndtdJd|3dK }7|/r|/|7dL<|7dAxxdM|/dNz cc<||7|7cYd}.~.|)CdOPnD|jE|FdQ3|rt|R| K| I | H| n2#t$r%}t dS|Yd}~nd}~wwxYwddl} tdd}8t!|8trt |8| _tdTr tdUd}9|9r5|95jIJdddn #1swxYwYnjIJn9#ttf$r%}t dV|Yd}~nd}~wwxYw tdWrMn*#t$rt dXYnwxYw ddYlNmO}:|:PdOZ};t#tddpd}<|:jQR|:S|<[}=|;|d}?g}@d}At!|>trdd_lVmW}BmX}C|-@d`pd}D|C|D|>\}?}@|?s|DYr|-@dadOsvd}Ad}E Z|B|@wrb}En3#t$r&}Ft<dc|FYd}F~Fnd}F~FwwxYwt!|Etr|E@d`pd}G|GYr|G|-d`< t+|-@dddpdt+|E@dddpdz|-dd<n#ttf$rYnwxYw|E@de}Ht!|Htr6t!|-@detr|-de|Hz|-de<|C|G|>\}?}@|rtm|nd}/|/r8|-@df}It!|It"r |Ir|Idg|/n|/|-df<vrXtvdhrH v\n2#t$r%}t di|Yd}~nd}~wwxYwtwtj|z d5}2|-@d`pd}J|-@djdO}K|-@dadO}0|-@ddd}L|JYdkk}M|0rda}Nn |Jr|Msdj}Nndl}Ng}Oi}P|-@depg}Qt!|Qtr|QD]}Rt!|Rts|R@dmdnkr|R@dopgD]}S|S@dpi}T|T@dqd}U|T@drdst|Ut|Udt}V|O_|V|S@du}W|Wr|V|P|W<|R@dmdvkrt|R@dwd}Xt|X}Yt|X|YrdAndxdy}Z|R@dz}W|Wr|P@|Wnd}[|[|[b|Z|Or|Od{b|Z|0rda}\n|Krdj}\nd|}\td}d}]td~d}^tdd}_|N|J|L|2t!|_t"r|_nd|\|\d|kt!|]t*tfr|]ndt!|^t*tfr|^ndd|OtdJdt!tdd:t*tfr ttdd:pd:nd:d }`tw|`dd|`d<tdd}at!|at"r|ar|ands|`d<|Ndlkr|-@dAd|`dA<t!|>tr"t|?|`d<|Ar|A|`d<|?s|@r|@|`d<|-@df}bt!|bt"r-|bYr|b|`dL<d|bdN}c|Jr|Jd|cn|c|`d< |r|&rtUjd||%|&}d|drtd|dfD}e|erxddF|edd zt|ed krdt|ed z dndzdNz}f|`@dr|`d|fz|`d<n|e|`d<n,#t$rt dd YnwxYwtdd}gtdd}h t tUj+wdd}in#t$rg}iYnwxYw tUjdd|%g}jn#t$ri}jYnwxYwtwfd|jgDdd}kt|-d d}l|Jr |Jddn|`@dAd|N|2|Jr |Jddn|`@dAdt!|]t*tfrt+|]ndt!|^t*tfrt+|^ndt!|ht*tfrt+|hndt!|Lt*tfrt+|Lnd|i|k|ld }m|g+ t|g|md<n#ttf$rYnwxYwvr< vdi|mn2#t$r%}t d|Yd}~nd}~wwxYw||`|`nD|jE|FdQ3|rt|R| K| I | H| n2#t$r%}t dS|Yd}~nd}~wwxYwddl} tdd}8t!|8trt |8| _tdTr tdUd}9|9r5|95jIJdddn #1swxYwYnjIJn9#ttf$r%}t dV|Yd}~nd}~wwxYw tdWrMn*#t$rt dXYnwxYw ddYlNmO}:|:PdOZ};t#tddpd}<|:jQR|:S|<[}=|;|z delegate_task: subagent running z (iteration rrflast_activity_descr) wait_HEARTBEAT_INTERVALr\rr)_HEARTBEAT_STALE_CYCLES_IN_TOOL_HEARTBEAT_STALE_CYCLES_IDLErrr^)touchdesc child_summary child_tool child_iter child_maxchild_activity_ts iter_advanced tool_changedactivity_advanced stale_limit child_desc_heartbeat_stop_last_seen_activity_ts_last_seen_iter_last_seen_tool _stale_countrrrs r _heartbeat_loopz*_run_single_child.._heartbeat_loop s!&&':;;L #L*;TBBE BjBBBD@  % : : < < *..~>> *../?CC )--.>BB $1$5$56H$I$I!!+_Q-? ? )_Q-?? %T1.q1T9I,/Ea/HH "!)L)4E))3OA&)3OA&(44E.q1&'LOO OOOq(OOO"6335  ?k11NNL"$Q".h E @:@@&0@@3<@@@D "/!2!23G!L!LJ!DzDD*4DD7@DDD     d     W"&&':;;L L L L L s*D E;3E;; FF F F%$F%T)rirrget_session_envHERMES_UI_SESSION_IDrrr/ru_parent_session_idr_delegation_idrrunning)r8rrr6r7rrrrrWrOrirjrk entry_dictrcdS ddlm}||d<dS#t$r}td| ddlm}|d||d<n`#t$rSddd ddd d d d |d dddd|d<Yn wxYwYd}~dSYd}~dSd}~wwxYw)z=Inspect + prune the child worktree, reporting into the entry.Nrsubagent_worktreeworktreezworktree finalize failed: %szfinalize raised: rrbranchFTzworktree finalize raised (zg) and the reporting helper was unavailable: 'commits' and 'dirty' are UNKNOWN, not zero/clean. Inspect z before assuming no work.)rrMcommitsdirtyprunedinspection_failedr)rmrKfinalize_subagent_worktreer^rrunproven_worktree_payloadr))rHrKr_sw_worktree_infos r _attach_worktreez+_run_single_child.._attach_worktreeE s  ! F#  / / / / / /"<<^LL z " " "    NN91 = = = ::::::),)F)F"$;$;$;** :&&   +..vr::,002>> "#)-#Q##*--fb99###** :&&& '&&&&& '&&&&& s9' C!C "A0/C0AC  C C  CC!rrz"Progress callback start failed: %sz subagent-rr_current_task_id)get_session_cwdrecord_session_cwdregister_container_aliaszChild cwd seed failed: %srJ)rX)r8z6worktree isolation skipped: non-local terminal backendz#worktree isolation setup failed: %s)rYrzworktree cwd seed failed: %s)build_worktree_context_noteDaemonThreadPoolExecutor) max_workers initializerinitargsrdeltac|rsdS d|dS#t$r&}td|Yd}~dSd}~wwxYw)NrrzChild text relay failed: %sr')rarr(s r _relay_child_textz,_run_single_child.._relay_child_text s  1  ?!!/5AAAAAA ? ? ? :A>>>>>>>>> ?s  AAAc tjd<ddlm}|t t ddpd5cdddS#1swxYwYdS)NrrrCrr user_messager4stream_callback)rcurrent_threadrprDr:r\run_conversation)rDrc_worker_thread_holderr child_task_idr6s r _run_with_thread_capturez3_run_single_child.._run_with_thread_capture s)2)A)C)C !# & H H H H H H((WUL"-M-M-SQS)T)TUU  --!%)$5.                  sA,,A03A0)r2_interrupt_requestedrzSubagent %d %s after %.1fsz timed outzraised r))rrrrrr6u;Subagent %d 0-API-call timeout — diagnostic written to %srzTimed out after rr2r")rrrrzSubagent timed out after us without making any API call — the child never reached its first LLM request (prompt construction, credential resolution, or transport may be stuck).z Diagnostic: zs with ug API call(s) completed — likely stuck on a slow API call, tool call, or unresponsive network request.before_first_llm_callafter_llm_callsrt) rrrr" exit_reason api_callsrrtimed_out_after_seconds timeout_phase _child_rolediagnostic_path missed_steerz2 [steer did not land before the subagent stopped: rF)r,rrVz&Failed to release credential lease: %srYrZz/Could not remove child from active_children: %srrz,Failed to close child agent after delegation) relay_runtime)create) profile_keyrrz4Failed to close child Relay session after delegation_delegate_output_schema)build_retry_messagevalidate_outputfinal_response interruptedrez(Subagent %d schema-retry turn failed: %srrr pending_steerrrz"Progress callback flush failed: %s completedrr0rrrrrrr)rr'r&rrrr!)r(rrrr rsession_completion_tokens)inputoutputsession_estimated_cost_usd) rrrrrrrrq truncatedtokensrru_child_cost_usdrcost_usdsession_cost_status cost_statusz$Subagent did not produce a response. schema_validschema_retries schema_errorsuL[steer did not land — the subagent finished before it could be delivered: z rch|] }|D]}| SrFrF)rypathsps r rz$_run_single_child..h s%OOOuOOAOOOOr"uX [NOTE: subagent modified files the parent previously read — re-read before editing: rz (+z more) stale_pathsz%file_state sibling-write check failedrAsession_reasoning_tokensrc0h|]\}}|k |D]}|SrFrF)rytidrrrks r rz$_run_single_child.. sC   C-''('''''r"iXri) rrrr input_tokens output_tokensreasoning_tokensrr files_read files_written output_tailz'Progress callback completion failed: %srJz] failedz*Progress callback failure relay failed: %srrrr"rrrrur)kr monotonicr\rr_last_resolved_tool_names acquire_leasecurrentrgr%r^rr_rEventThreadr9r:gateway.session_contextrCrtrr$rMrrstartrdrerftools.terminal_toolrXrYrZrIrmrKlocal_backend_activecreate_subagent_worktreertools.subagent_worktreer[r known_readsrRtools.daemon_poolr]_set_subagent_approval_cbr- contextvars copy_contextsubmitrunrrdr rmFuturesTimeoutErrorrrrtyperrr)rrshutdownrnrrrY release_leaserYremoverUnboundLocalErrorrrrWrx get_runtimeSESSION_COORDINATORhas_active_turncurrent_profile_keyunregister_subagentrtools.delegation_output_schemar|r}r`rirrrPrrrrrorB writes_sincerrr}rlogging exception)xrr6rrrirjrk_kwargs child_startr_saved_tool_namesrleased_cred_id leased_entryrcrA_heartbeat_thread_raw_sidrrC _raw_depth _tui_depth _parent_sid_owner_agent_session_idrFrVrr|parent_task_idrXrYrZrK _parent_cwd_gsc_rscr[ wall_startparent_reads_snapshot child_timeoutr]_timeout_executorrl_child_context _child_futurer _timeout_exc_late_pending_steerr is_timeoutdurationrvchild_api_calls_summary_err _error_entrysaved_tool_namesrrxruntimerchild_turn_is_active_output_schema _schema_valid_schema_errors_schema_retriesr|r} _first_text _retry_result _retry_exc _retry_text_retry_messages_existing_pendingrrrr_empty_sentinelrr trace_by_idrrrrrentry_trrr result_metarirq _input_tokens_output_tokens_modelr! _cost_status _missed_steer _miss_notesibling_writes mod_pathsreminder _cost_usd_reasoning_tokens _files_read_files_written_map_files_written _output_tailcomplete_kwargsr<r=r>r?rcr@rjrUr(rksx```` @@@@@@@@@@r _run_single_childrz s).""K '?FF +T+2W-X-X 2D99JN#1133  % S)1133 +?Q0R0R+**<888 S S S LcRRRRRRRR S o''O cOfO"V3LMMMMMMMMMMMM^"(MMM und33H)(C88B88dL7  # (CCCCCC#2?3I2#N#N#VRV   ( ( (#'    (    #';'C11ABB 2O1U$5q99 /9*c/J/JQSJN+++PQ e%:DAA 3R88>B ? ? B7<r::@bAA !(8$??+,6{C,H,HR[[d#&0&E&EONN4"'%$"?"?EEGE7D111"ikk# +B*IT%5#2(<5     B04N'T#s(^'''''''Ru Q!!!  F F!!"2DAAAAA F F F A1EEEEEEEE F $X(XJ(X(XARSUTUSUAV(X(X  /A4HH 9            }oon.M.M N N N % $]N C C C C 9 9 9 LL4a 8 8 8 8 8 8 8 8 9 # $ $" J G333333$99;;"&KOOOOOO&*d>&:&: $%6%O%O#L'>|'L'L$0&P&&NN LLP G G G BAFFFFFFFF G)DNNNNNNDv(>???? DDDLL!?CCCCCCCCD POOOOO99.IIIY[[ >>>>44 25779   ILT{ ?S ?T ? ? ? ? ? ?         %133)00   $  y 3"))-)@@FFs s s BNW(u===SW  #4/Q4J54Q4Q "6u'8WULb=c=c'815E.    $L3F 2UVVJT^-- ;Q??H NN,)V /Vl9K9K9T/V/V    .2OO  5577"%hll3CQ&G&G&L1"M"M     o22"C)%*-*>3$?$?%*8__"7";";C"@"@ # # ##NNU"' !  %%+ *3:x::::!$\!2!2,6CyyG)1 "     !D )"a''CMCCC 'B A A AA,M,,*,,, 'B A A AA<(()'1>))w,6CyyG,$,4>#H==D7A+K88t/9oQR>R>R++.8**&u.>EE#2!L$# /B ^,W%%%.*...%%%  \ * * *       & &E & 2 2 2v   " .  " "1 " - - -  < U ; ; ; ;  !n&@ L((8888 L L L EsKKKKKKKK L "5*FMM & - - K489I4J4JK 1 "' %%'''  =%88' #$ $  $)$:$:%8%8%H%H -(9%;%%MM !NNB"" mT22"/"3"34D"E"E"KK"((**?3>/0.1"JJ{A66;!// 1 1+q A A FQGG/H{++&z2&3&7&7 &C&CO!/488RZ :..>>R.4J-?/-Qz*4CO#^551M>>J S $\5 9 9 9t    & ? ; ; /55):K)$==(;===( ? #  F):H!E!E F F!((**** F F F A1EEEEEEEE F))K7;;**-..4"JJ{E22 jj66 JJ{A.. "--//Y6  "FF  _ !FFF,. 13 ::j))/R h % % ; ; ;!#t,,776??k11!ggl339r 9 9VVJ33$&FF;$;$; $&FF69$=$=*-i..-Fy-Q-Q## #))'222 "t  918K. 9WWV__..5cggi6L6LMMG7@@H(+G -5"?''4##K  GGN33E7<F[__U333$F) k2222#;"2--k:::  +'KK  +%KK*K '>BB  (CQGG..%" ()&#66@VVD&%(88&0 U|%L%LSMMRS'1#u&N&NUNNTU %#5*:DAAE#?EE%Lge%A3GGN3OOO O)! )! ^"%(9":A>>ju&;TBB &|S99 l LL m X  #ZZ1WXXE'N nd + + 8$($7$7E. ! :*9&'  8^ 8)7o& ?33 mS ) ) Wm.A.A.C.C W$1E. !2!.222 @GV';;z;;;JE)  Q ="7 =!+!8"J0E"""= &OO(=(=(?(?OOO!!I!=K"ii "1" 667 $'y>>A#5#5!Ac)nnq&8 @ @ @ @%' ""!!99Y//=/4Y/?(/JE),,3>%&&&+5i#u+N+NUYTU%+''+ + *   .3I.>.> ++z*      K K!!IIIIII K K K FJJJJJJJJ K X   " .  " "1 " - - -  < U ; ; ; ;  !n&@ L((8888 L L L EsKKKKKKKK L "5*FMM & - - K489I4J4JK 1 L (  ! ! !*&***  ! ! ! &&&   " .  " "1 " - - -  < U ; ; ; ;  !n&@ L((8888 L L L EsKKKKKKKK L "5*FMM & - - K489I4J4JK 1 P,+Q>, P96Q>8P99AQ>=A_/> R-R(#A_/(R--A_/3S A_/ S;S61A_/6S;;C A_/ W!l! k-,k(.X0/k(0 X=:k(<X==A=k(;9[54k(5 \?k(\A/k(2)^k( ^)&k((^))B"k( k- lA_//c c4c//c4f)f6 f)f f) f f))g:gg#$h$h/.h/3Bj>>$k%$k%(k--l1A_/l  BA_/2!oA_/ po?:A_/?pA A_/ArA_/r1.A_/0r11CA_/vA_/ w#w>A_/wQ5A_/H>CALK?A_/L&AL)L&A_/L(AL)L)%A_/M)AM9M8A_/M9 ANNA_/NANNA_/N AN#N"A_/N# AN2N/A_/N1AN2N2EA_/S9AT T A_/T AT TA_/TAT T A_/T&AT/T.A_/T/ AUT9AUUA_/UAUUA_/V6AW W AW;WAW6W6AW;Y AZ0Y"AZ Y= AZ0Z AZ Z AZ0ZAZ ZAZ0Z0A[&[A[![!A[&[*$A\\$A\6\5A\6\:BA__$A_,_+A_,_/ An_:AAm>a *Aa8a7Am>a8 Ab'bAb"bAm>b"Ab'b'AAm>c7Anc8AneAee Af e%AffAf gAh?g1Ahh Ah?hAh hAh?hAh h Ah?h?Ai5iAi0i0Ai5i9$Ajj$AkkAkk BAmm$Am;m:Am;m>AnnAnnA Ax oAo&o%Ax o& Apo0App Ax pAppAAx q'As q<Ar#r As r#Ar' r'As r*Ar' r+As s Ax s AtsAs;s6Ax s;AttAx t$At)t(Ax t)$Auu Ax uAuuAx uBAwwAx w$AxxAx xAxxAx c ddl}t5t|j} t di|}||_n #||_wxYw dddn #1swxYwY||_|S)zCBuild a child without leaking its resolved toolset into the parent.rNrF)r_CHILD_CONSTRUCTION_LOCKrrrr$)rrrrrs r $_build_child_preserving_parent_toolsr+ s !FF !FGG F&0000E4EK 1 14EK 1 E E E E 1 FFFFFFFFFFFFFFF (9E$ Ls#A 6A ?AAAc8|tSt|dd}||St5t|dd}|Itj} t |d|n##t $rtcYcdddSwxYwdddn #1swxYwY|S)zBReturn the per-parent lock that serializes lifecycle side effects.N_subagent_finalization_lock)"_PARENT_FINALIZATION_FALLBACK_LOCKr\_PARENT_FINALIZATION_LOCK_GUARDrRLocksetattrr^)rrs r _parent_finalization_lockr 9 s11  E ED  (::|%BDII <?$$D : &CTJJJJ : : :999::::::::  : ::::::::::::::: Ks5'BA B B1B?BBBB task_listchildrencrt|5t||d|D}|rt|ddr|D]} |dd}t |t r+d|cxkrt |krnn||dnd}||}|j||d dpdt|d d #t$rYwxYwt|d d} dd l m } n#t$rd} YnwxYwd } |D]W}| dd} | dd } | r| t| z } n#ttf$rYnwxYw| _ |dd}||}| d| t|ddpdt|d d| |d |dt!|dt |dpddz ,#t$r t"ddYUwxYw| d kr tt|dd pd }|| z|_t|dddvrd|_t|dd d!vrd"|_n,#t$rt"d#dYnwxYwddddS#1swxYwYdS)$z@Apply host-owned summary, memory, hook, and cost contracts once.ci|] \}}}|| SrFrF)ryindex_taskrs r r|z+_finalize_child_results..T s!KKK+>5%%KKKr"_memory_managerNrrrr6rrr)taskrrr[rnrur subagent_stoprVrrrr)rRr^rrar2 child_statustool_call_history duration_msz$subagent_stop hook invocation failedTrArsession_cost_sourcer>NrrrLrr>Nrr estimatedzSubagent cost rollup failed)r r"r\r)r9rrPr on_delegationr^hermes_cli.pluginsr\rRrrrr-rr_rrr)rr r rchild_by_indexr!r task_goalrrRr\children_cost_totalra child_cost child_indexrs r _finalize_child_resultsrK s #< 0 0NKNKg|444KK(KKK  GL2CTJJ    !&<!>&$yyB77=2)0 b)I)I? !D$L,EE  E E E E E E E   KKK " T TE=$77J#4c::J ='5+<+<<'z*    " T#ii b99 &**;77 #&7#*<9KR#P#P#VTV%,UL$%G%G)"'))I"6"6!&8!4!4&F ,//''!$UYY/A%B%B%Ga4$O P P      T T T Cd SSSSS T  $ $ KL*FLLSPS;BDW:W 7<)>GGL 8BL4<)> JJO 8CL4 K K K :T JJJJJ K[NKNKNKNKNKNKNKNKNKNKNKNKNKNKNKNKNKNKs4L,B/C54L,5 D?L,DL,DL, D-*L,,D--6L,$E98L,9F  L, F  L,C I L, &J L, J  L,AK32L,3&LL,LL,,L03L0ct||||}|d|d|i}t|gdt|D|gz|||fg||S)zFRun one child and apply the same host lifecycle used by delegate_task.rr6cg|]}ddiS)r6rrF)ryrs r rz(_run_child_lifecycle.. s111!&"111r")rrJrr)rr6rrrrs r _run_child_lifecycler" sz4 E EF lJ/// D>D 11uZ00111TF: dE "#  Mr"taskscDt|tsdS|}|sdS tj|}n)#tj$r}dd|jdfcYd}~Sd}~wwxYwt|tsddt|j dfS|dfS)Nrq)N7Provide either 'goal' (single task) or 'tasks' (batch).z`tasks must be a JSON array of task objects; received a string that could not be parsed as JSON (z).z3tasks must be a JSON array of task objects; parsed z instead.) r9r:r`rrJSONDecodeErrorrrrr)r#rawrrcs r _recover_tasks_from_json_stringr( s eS ! !z ++--C ONN C      =14 = = =        fd # #  0F||$ 0 0 0   4<sAA, A'!A,'A,z^(todo|task\s*\d+)$z[<[A-Za-z][A-Za-z0-9]*(?:[ _-][A-Za-z0-9]+)+>|\{[A-Za-z][A-Za-z0-9]*(?:[ _-][A-Za-z0-9]+)+\}cLt|dkr dSt|D]\}}t|dd}d|}t |r d|d|dcSt |}|rd|d | d d cSt|tkrd|d |d tdcSdS)aValidate a tasks=[...] batch beyond per-task goal presence. Returns an actionable error string, or None when the batch is valid. Batch-only by design: the single-`goal` form legitimately uses short goals, so these checks must never run on it. Duplicate goals are deliberately NOT rejected: identical-goal fan-outs are a legitimate pattern (best-of-N / ensemble sampling), and blocking them broke real workflows (post-merge audit of #81141). rzBatch mode requires at least 2 tasks. For a single task, use the `goal` parameter instead of `tasks`: delegate_task(goal="...", context="...").r6rrTask z has a placeholder goal (za). Replace it with a specific, self-contained description of what the subagent should accomplish.z. goal contains an unexpanded template marker (rud). Substitute the real value before calling delegate_task — subagents cannot resolve placeholders.z goal is too short (z5). Write a specific, self-contained goal of at least z5 characters so the subagent knows exactly what to do.N)rPrr:r)r`rrr_PLACEHOLDER_GOAL_REmatch_TEMPLATE_MARKER_REsearchgroup_MIN_BATCH_GOAL_LEN)r irr6 normalizedmarkers r _validate_batch_tasksr4 s 9~~ 8  Y''4488FB''((..00XXdjjll002233  % %j 1 1 ...D...    %++D11     LLOO       t99* * *&&&t&&&&&&    + 4r" background output_schemac X ABCDEFGHIJKLMNOP tdS|pd} | tvrt | || S| r| dkrtd|dSt rtdSt |} |t|d nd}t d d } t}| |krtd | d |dSt}| dt}|"||krtd|||} t| }n3#t $r&}tt#|cYd}~Sd}~wwxYwt%Jt'|\}}|rt|S||}t)|t*r|sd}|rNt)|t*r9t-|Jkr#tdt-|dJdS|OnK|r:t)|t"r%|r||| d}|||d<|gOntdSOstdSt/OD]\}}t)|t0s*td|dt3|jdcS| ddstd|dcS|5t)|t*r t7O}|rt|Sd dlm}g}t/OD]o\}}| d}|t-Odkr||}||\}}|rtd|d|cS||pt?j LgMt-OKd ODNd d!l!m"}m#Pm$} |O|| d"| d#$\GIHd d%l%m&}!|!}" d d&l'm(}#|#d'dEn#tR$rdEYnwxYwtUE\DCgFt/OD] \}}$t |$ d(p| }%|t-|kr||nd}&|$ d)}'|&d d*lm+}(|(|'|&}' tYdlid+|d|$dd)|'d,dd"|d"d|d-Kd. d/|d#d0|d1d2|d3d4|d5d6| d7d8| d9d:| d;d<| d=d(|%})n5#t $r(}tt#|cYd}~cSd}~wwxYw|&4 |&|)_-n+#tR$rtd>|YnwxYw|t-IkrI|nd}*|*9| t|)d?d|*|)_.t#|*j/|)_0Grtc|)d@GF||$|)fdAdBdCtddDt0fCDEFGHIJKL MNOPfdEB|r1d dFl%m3}+d dGl4m5}, d dHl'm6}-|-}.n#tR$rdA}.YnwxYwd}/|.s!|"}/|/rt7dI|/dA}.|.sTt7dJB}0t)|0t0rdK|0dL<tqj9|0dMS|,d }1 d d&l'm(}#|#dNd}2|#d'dpEE|2dOkr$t#t dPdpd}3|3r|3}1n#tR$rd}2YnwxYw|1s$t#t dPdpd}3|3r|3}1t dPd}4dQFDAtu dRrxt dSd}5AD]d}6 |5r5|55 j;<|6dddn #1swxYwYn j;<|6U#t $rYawxYwBfdT}7AfdU}8AfdV}9dWOD}:|+|:|d| |d"|1E|/|4|7|8t{G|9X};|; dYdZkrt-|:}<|d`AD}?t}da|?Dr |?|>db<dc|>dd<Hrt+H|>de<df|>dg<tqj9|>dMSt7dh|; didjB}@t)|@t0rdk|@dL<tqj9|@dMStqj9BdMS)ma Spawn one or more child agents to handle delegated tasks, or control already-running ones. Spawn modes (action='spawn' or omitted): - Single: provide goal (+ optional context and role) - Batch: provide tasks array [{goal, context, role}, ...] Control modes (synchronous, never backgrounded): - action='list' -> live children of this conversation's spawn tree - action='steer' -> queue course-correction text into a running child (subagent_id + message) - action='stop' -> interrupt a running child early (subagent_id) The 'role' parameter controls whether a child can further delegate: 'leaf' (default) cannot; 'orchestrator' retains the delegation toolset and can spawn its own workers, bounded by delegation.max_spawn_depth. Per-task role beats the top-level one. Returns JSON with results array, one entry per task. Nz.delegate_task requires a parent agent context.rspawnrz-'. Use spawn (default), list, steer, or stop.zzDelegation spawning is paused. Clear the pause via the TUI (`p` in /agents) or the `delegation.pause` RPC before retrying.Frcrrz&Delegation depth limit reached (depth=z, max_spawn_depth=z). Raise delegation.max_spawn_depth in config.yaml if deeper nesting is required (no hard ceiling, but each level multiplies API cost).r zidelegate_task: ignoring caller-supplied max_iterations=%s; using delegation.max_iterations=%s from configzToo many tasks: z* provided, but max_concurrent_children is z. Either reduce the task count, split into multiple delegate_task calls, or increase delegation.max_concurrent_children in config.yaml.)r6rrr6r%zNo tasks provided.r*z must be an object, got .r6z is missing a 'goal'.)coerce_output_schemar/z output_schema invalid: c.g|]}|dddS)r6NrrFrs r rz!delegate_task..s$555a1V9SbS>555r")create_live_transcriptsupdate_manifest_statuseswrap_progress_callbackrr*)rr*)_current_origin_session_idrBrDrr)append_output_contractrrrrr r rrr%rr/rrSrmax_output_tokensrrrrz*Could not attach output schema to child %drrFThonor_parent_interruptrCrc *dkrA%d\}}}t||d|,$pd#"}-|nd}t,dd}ddlm}|)5}i} %D]N\} } }t j} || jt| | d|,$pd#" } | | | <Od %D}t| }|r|rt,d d d ur|D]}| |}| rf | }n|#t$rC}|ddt|ddt||ddd}Yd}~n4d}~wwxYw|dddddt||ddd}-||dz }ːnddlm}m}||d|\}}|D]} | }nX#t$rK}| | }|ddt|ddt||ddd}Yd}~nd}~wwxYw-||dz }|d}|t'.kr.|nd|}|dd}|dd}|dkrdnd}*|z }|d|dzd*d |d!|d" }|r: ||n6#t$rt+,d#|YnwxYwt+,d#||r`|dkrZ |d$|d%|dkrd&nd'd(#t$r&}t.d)|Yd}~d}~wwxYw|dddn #1swxYwY-d*+t5-/%,t7t9j+z d,}-D]}|dd-}t=|t>r%d|cxkrt'(kr nn(|nd} | a | |n,#t$rt.d.d /YnwxYw|t''kr '||d0<0&--|d1}!'rtC'|!d2<|!S)3uORun all built children (1 or N), join on them, aggregate results, fire subagent_stop hooks + cost rollup, and return the combined result dict. Used by BOTH the synchronous path and the background runner. In the background case this whole function runs on the daemon executor, so the parent turn isn't blocked — but the batch still JOINS on itself here (all children must finish) before producing ONE consolidated results block. That is the contract: fan-out runs in the background, waits on each other, and returns together. r/rr6Nrhrr\)r^)rr6rrrirjrkci|] \}}}|| SrFrF)ryr1rrs r r|zAdelegate_task.._execute_and_aggregate..js "J"J"J Au1e"J"J"Jr"rmFTr"rtrru9Parent agent interrupted — child did not finish in time)r,FIRST_COMPLETEDr~)r2 return_whenrr*rrrru✓u✗z [rrz (zs)rrz taskrrz remainingzSpinner update_text failed: %sc|dS)NrrF)rs r z?delegate_task.._execute_and_aggregate..s qr")rrrzLive transcript finalize failedrAr)rtotal_duration_secondslive_transcripts)"rrr\rr]rrrrrnrdonerr^r:r)concurrent.futuresr,rFrPrr update_textrr_sortrrrrr9rfinalizer)1rC_i_trrcompleted_count spinner_refr]executorfuturesr1r child_contextfuture_child_by_indexrbfrr!rc_cf_waitrFrLlabeldurricon remainingcompletion_linertotal_duration_idxrcombined_origin_owner_session_record_origin_owner_transport_origin_ui_session_idr  live_deleg_id live_paths live_writers max_childrenn_tasks overall_startrr task_labelsr r=s1 r _execute_and_aggregatez-delegate_task.._execute_and_aggregate2sa a<<$QKMBE&6 !6!>$ 7%AF NN6 " " " " O!,0CTJJK C B B B B B))lCCCu Rx#+ ( (KAq%$/$<$>$>M%__%))#$vY#%1)>)F$(?-I-  F'(GFOO#K"J"J"J"Jgllnn--ZR.&#L2H%PPTXXX ")11A")!*C vvxx" !&,-HHJJEE'0 !& !& !&69293714S56<=7>,;,?,?,D,DFVX\8*8* -& -&EEEEEE !&36.;/3-h12893:(7(;(;C(@(@BRTX4&4& )" )"$NN5111+q0OOTTTTTTTT$,H/%%%MD'#',R,R$*MMOOEE(   ")&/C.1*1+/),S-.45/6$3$7$7$<$<>NPT0"0" % %EEEEEE  u---'1,$L103c+6F6F0F0FK,,MTWMM$ii(:A>>!&8S!9!9(.+(=(=uu5$+o$= -1*Y*YSU*Y*YW*Y*Y*Y*YRU*Y*Y*Y&W[ + 7 7 H H H H#,[[[ 4\CYCYCY Z Z Z Z Z[1?UO?U?UVVV'R9q==R + 7 7$eI$e$e9PQ>>CCWY$e$e$e!"!"!"!"$-RRR & -Mq Q Q Q Q Q Q Q QRsZR7u Ru Ru Ru Ru Ru Ru Ru Ru Ru Ru Ru Ru Ru Ru Rp LL66L 7 7 7 HlKKKt~//-?CC  @ @E99\2..DdC((-.$-J-J-J-J\9J9J-J-J-J-J-JT""  ~SKK&&&& SSSLL!BTLRRRRRS#j//))/9$/?E+,  888&4$ $   <+/ +;+;H' (s.B9N5(D=<N5= F 9FN5F  A*N55H  N5 IAIN5IBN56L  N5 L,)N5+L,,N5 $M1/N51 N!;NN5N!!N55N9<N9&Q<<&R%$R%)dispatch_async_delegation_batch)get_current_session_key)async_delivery_supportedudelegate_task: async delivery unsupported on this session, but a session id is bound (%s) — dispatching in the background and waking the session via self-post when it completes instead of forcing synchronous execution.zkdelegate_task: async delivery unsupported on this session runtime; running the batch synchronously instead.ubackground=true is not available in this session — it cannot receive a detached subagent result after the turn ends (a one-shot runner such as `hermes -z`, a cron job, a Kanban worker, or a stateless HTTP endpoint). The subagent(s) ran SYNCHRONOUSLY and the result is included above.rrHERMES_SESSION_SOURCEtuircg|]\}}}| SrFrF)ryrrs r rz!delegate_task..Ts555y1a555r"rYrZcdS)NFrBrF)rnsr _batch_runnerz$delegate_task.._batch_runneres*)GGG Gr"cD]<} t|d}|st|drd|_-#t$rY9wxYwdS)NzAsync delegation cancelledrmT)r rgrmr^)_cr _child_agentss r _batch_interruptz'delegate_task.._batch_interruptjst#  "8=Y"Z"ZK&7727M+N+N726/ D   s )1 >>cvg}d}D]} |}|d}||dd||df|pt|}}#t$r|dYwxYwt ||fS)NFr(r)rr*)rr)rrBr^ri)rin_toolrxr_toolrys r _batch_progressz&delegate_task.._batch_progressssEG# ' ' '!6688H$LL88ELL$LL)91==!$LL);<<&4eGG '''LL&&&&&'<<( (sA9BB'&B'cg|] }|d S)r6rFrs r rz!delegate_task..s///!F)///r")goalsrrrr session_keyorigin_ui_session_idorigin_session_idrRrunner interrupt_fnrKr7 progress_fnr dispatcheduSubagent is running in the background. You and the user can keep working; its full result re-enters the conversation as a new message when it finishes. Do not wait or poll — just continue.u subagents are running in parallel in the background. You and the user can keep working; they wait on each other and their consolidated results re-enter the conversation as a single message once ALL of them finish. Do not wait or poll — just continue.r5r7)rmoderr7rrc0g|]}t|ddS)rNr\)ryrxs r rz!delegate_task..s168ND11r"c3DK|]}t|to|VdSrE)r9r:)ryrs r rz delegate_task..s1;;:a%%+!;;;;;;r" subagent_idszWhile a child runs you can orchestrate it live with this same tool: delegate_task(action='list') to see live children, action='steer' with subagent_id + message to redirect one, action='stop' with subagent_id to end one early. control_hintrKzEach subagent streams a human-readable transcript of its operations to the file listed above (append-only, one per task). Read or `tail -f` these paths at any time to watch a child work while it runs.live_transcripts_hintzZdelegate_task: async pool at capacity (%s); running the whole batch synchronously instead.r"rejectedaThe background delegation pool was at capacity (delegation.max_concurrent_children), so the subagent(s) ran SYNCHRONOUSLY and the result is included above. Raise delegation.max_concurrent_children in config.yaml to allow more concurrent background delegations.rF)?rr`r_CONTROL_ACTIONSrrGr<rr\rYr(r)DEFAULT_MAX_ITERATIONSrr__resolve_delegation_credentialsrr:rEr(r9rrPrrrrr4rr:rrrtools.delegation_live_logr<r=r>tools.async_delegationr?rrCr^rtr@rr{rrrrrBrotools.approvalrprqinforrrgrYrrMany)Qr6rr#r rr5r6rr8rrnormalized_actiontop_rolerr}r+default_max_itereffective_max_itercredsrcrecovered_tasks tasks_error single_taskr1r batch_errorr: task_schemas raw_schemacoerced_schema schema_errr<r>r?_origin_wake_sidrCrr _task_schemarr@r_writerrorprq _async_ok _wake_sid _sync_result _session_key_source_agent_session_idrE_ac_lockrxrvrzr~_goalsdispatchnrr_sids _cap_resultryrnrdrerfr rgrhrirjrkrlrrmr r=sQ ` @@@@@@@@@@@@@@@@r rr sDJKKK  2,,..4466,,,% {G\    .'99 Tv T T T     N   t$$H@J?UU;;;;[`J L"3Q 7 7E$&&I  %U % %( % % %    ..Cww/1GHH !n8H&H&H  = ,   *$/\BB $$$#c((########$011L#B5#I#I O['+&&&" %u UE4((U u:: $ $F3u::FF.:FFF  U*T3''UDJJLLU/3QY&Z&Z  $+8K ( M STTT 0.///Y''@@4$%% III4::3FIII   xx##))++ @>a>>>?? ? ? ? @ Zt44+I66  +k** *DCCCCC35LY'',,4XXo..  #i..A"5"5-:S&J%9%9*%E%E"  OMaMMMMNN N N NN++++N$$MG)nnG559555K /F.E7%))G"4"4uyy?T?T///+M<BAAAAA1133#;;;;;; /0F K K ### "# ))>??:9H)$$<'<'1)v)B(CC+,c,.?.?*?*?|AT y))  # M M M M M M33NLQQN (81vYY'  Gnn 21#7*\#( "3"3#( "3"3"'y!1!1#( "3"3,1995H+I+I+I %*II.A$B$B$B!"&+YYy%9%9%9#$#())F"3"3"3%&$^'EE* ( ( (c#hh'' ' ' ' ' ' ' ' ' (  # N0<-- N N N I1MMMMM N&'\):):%:%:,q//  +A+A7>>,,E (+.gl*;*;E '  < E+] ; ; ;Au &&&&AE|||$|$||||||||||||||||||||Jo;JJJJJJ::::::  H H H H H H0022II   III   !)I ! !  !  @ KKD   2133L,-- FV$:l??? ?..r:::   ? ? ? ? ? ?%o&=rBBG  6;;T?T "%$' lB(O(O(USU$V$V!$5#4L   GGG  1!$GL,$K$K$Qr R R   10 $\<FF55H555 .>*+2/0 :gE::: :   + LL* - -   -,.. k4 ( ( :  z+E:::: :,,..U C C CCs E F(F F FQ11 R?RB-W W7W2*W72W7=X%X-,X-*[;; \  \ A _ _/._/b-b: b-b b- b b-- b:9b:rrc|st|ddSt|ddpd}t|dd}|dkr ddlm}m}||}|dS|t|dd}||dkr |||kr|S||} | | r| Sn3#t $r&} t d || Yd} ~ nd} ~ wwxYwdS|||kr|S dd lm}||} | | r| Sn3#t $r&} t d || Yd} ~ nd} ~ wwxYwdS) aResolve a credential pool for the child agent. Rules: 1. Same provider as the parent -> share the parent's pool so cooldown state and rotation stay synchronized. 2. Different provider -> try to load that provider's own pool. 3. No pool available -> return None and let the child keep the inherited fixed credential behavior. Custom endpoints are a special case: every direct ``delegation.base_url`` runtime collapses to ``provider="custom"``, so bare provider equality would treat two *different* custom endpoints as interchangeable and let the child inherit the parent's pool. Leasing from that pool then overwrites the child's delegated ``base_url`` with the parent's endpoint (issue #7833). We therefore resolve custom runtimes by endpoint identity (the ``custom:`` pool key derived from the base_url) and only share the parent's pool when both resolve to the *same* custom endpoint. rzNr*rr r)get_custom_provider_pool_key load_poolrzDCould not resolve custom credential pool for child endpoint '%s': %s)rz:Could not load credential pool for child provider '%s': %s)r\agent.credential_poolrrhas_credentialsr^rr_) rrrparent_provider parent_poolrr child_key parent_keypoolrcs r ryrys. ?|%7>>>lJ==CO,(:DAAK X%%  U U U U U U U U445GHHI t65 j$77J'#x//*)++""9Y''DD$8$8$:$:     LLV"          t#5#H#H  333333y+,,   4 4 6 6 K     H           4s;B&+B&"B&& C0CC&(D ED;;Er+c t|dpdpd}t|dpdpd}t|dpdpd}t|dpdpd}t|dpdpd}hd}|pd}||v} |rw| su|} d d lm} |} d } | |pd }t |d kr d| vrd} d}n t |dkrd} d}nd| vrd } d}|dvr|}|| || |dS|s |dddddddS d dlm}|||}n)#t$r}td|d|d|d}~wwxYw|dd} | std|d|d}|r/d dl }| |std|d |d!|p|dpd|dtkr|n|d|d| |dt|d"pi|d#|dt|d$pgd% S)&uResolve credentials for subagent delegation. If ``delegation.base_url`` is configured, subagents use that direct OpenAI-compatible endpoint. ``delegation.api_key`` overrides the key; when omitted, ``api_key`` is returned as ``None`` so ``_build_child_agent`` inherits the parent agent's key (``effective_api_key = override_api_key or parent_api_key``). This lets providers that store their key outside ``OPENAI_API_KEY`` (e.g. ``MINIMAX_API_KEY``, ``DASHSCOPE_API_KEY``) work without a duplicate config entry. Otherwise, if ``delegation.provider`` is configured, the full credential bundle (base_url, api_key, api_mode, provider) is resolved via the runtime provider system — the same path used by CLI/gateway startup. This lets subagents run on a completely different provider:model pair. If neither base_url nor provider is configured, returns None values so the child inherits everything from the parent agent. Raises ValueError with a user-friendly message on credential failure. rrNr*rr%r/> google-genaigooglevertexbedrockr)_detect_api_mode_for_urlr r2z chatgpt.comz/backend-api/codexz openai-codexcodex_responseszapi.anthropic.com anthropicanthropic_messageszapi.kimi.com/coding>rr2r)rr*rr%r/)rr*rr%r/rSrA)resolve_runtime_provider) requested target_modelz$Cannot resolve delegation provider 'z': z. Check that the provider is configured (API key set, valid provider name), or set delegation.base_url/delegation.api_key for a direct endpoint. Available providers: openrouter, nous, zai, kimi-coding, minimax.zDelegation provider 'z]' resolved but has no API key. Set the appropriate environment variable or run 'hermes auth'.rz' is pinned to the 'z]' command, which was not found on PATH. Install it or choose a different delegation provider.rSrAr) rr*rr%r/rSrArr)r:r)r`rhermes_cli.runtime_providerrrrr^rrlrm_RUNTIME_PROVIDER_CUSTOMrr)r+rconfigured_modelconfigured_providerconfigured_base_urlconfigured_api_keyconfigured_api_mode_NATIVE_SDK_PROVIDERS_provider_lower_is_native_sdk_providerr%r base_lowerr*r/rrrcpinned_commandrs r rrAs}*3777++1r2288::Bdcggj117R88>>@@HDcggj117R88>>@@HDSWWY//5266<<>>F$cggj117R88>>@@FFHHPDLKK*0b7799??AAO-1FF, #:, % IHHHHH(..00 ++,?@@VDV 1 2 2m C C$ 22%H(HH 2 3 37J J J"H+HH "j 0 0H+H "_ _ _*H& +       &!%!%    HHHHHH**5HWghhh  Q3F Q Q3 Q Q Q    kk)R((G   N$7 N N N   [[++N    }}^,, I(;II"III "AW[[%9%9AT+2;;z+B+BF^+^+^''dkdodopzd{d{KK ++KK ++!'++.A"B"B"HbII$[[)<==;;y))W[[((.B//   s!G55 H?HHc~tjddk}|sP ddlm}|}|dpi}t |t r|Sn#t$rYnwxYw ddlm }|dpi}t |t r|niS#t$ricYSwxYw)aLoad delegation config from the active Hermes config. Prefer the shared persistent loader because it follows the active HERMES_HOME/profile. ``cli.CLI_CONFIG`` is a legacy fallback for entry points that cannot import the shared loader; importing it first can return an old default ``delegation`` block and hide user-set keys such as ``max_concurrent_children``. Uses ``load_config_readonly()``: every consumer of this dict is read-only (``.get()`` lookups), and this runs on each ``get_definitions()`` schema rebuild via ``_get_max_concurrent_children``, so skipping the defensive deepcopy matters. Do NOT mutate the returned dict. ``HERMES_IGNORE_USER_CONFIG=1`` (``hermes chat --ignore-user-config``) is only honored by the legacy ``cli`` loader, not the shared one, so when the flag is set we keep ``cli.CLI_CONFIG`` authoritative to preserve the flag's contract of suppressing user config.yaml settings. HERMES_IGNORE_USER_CONFIGr\r)load_config_readonlyr) CLI_CONFIG) rBenvironr)hermes_cli.configrr9rr^clir) prefer_legacyrfullr+rs r r(r(s&JNN#>??3FM    > > > > > >''))D((<((.BC#t$$       D """"""nn\**0b d++3ss3  s#=A&& A32A375B-- B<;B<c dS)aCompose the delegate_task tool description. Deliberately carries ONLY guidance that exists nowhere else in the schema. Batch/concurrency limits live in the 'tasks' parameter description and the nesting clause lives in the 'role' parameter description (both rebuilt per get_definitions() call with the user's actual delegation.max_concurrent_children / max_spawn_depth), so the top-level text stays static and duplication-free. If you add text here, check it is not already stated in a parameter description. uSpawn subagents in isolated contexts; each gets its own conversation, terminal session, and toolset, and only its final summary returns to you. Provide 'goal' for a single task or 'tasks' for a parallel batch (limits and nesting rules are in the parameter descriptions). Runs in the background: dispatch returns immediately with live transcript paths, and the completed result (one consolidated message for a batch) re-enters the conversation on its own. Do NOT wait or poll; continue other work. LIVE ORCHESTRATION: while children run, this tool also controls them — action='list' (live children + ids), action='steer' (subagent_id + message, redirect without stopping), action='stop' (subagent_id, end early; partial result still returns). Steer when a live transcript shows a child drifting. USE FOR: reasoning-heavy subtasks, work that would flood your context with intermediate data, or independent parallel workstreams. DO NOT USE FOR (use these instead): - Mechanical multi-step work with no reasoning needed -> execute_code - A single tool call -> call the tool directly - Tasks needing user interaction -> subagents cannot ask questions - Durable work that must survive this session -> cronjob or terminal(background=True, notify_on_complete=True); /stop, /new, or process exit discards running subagents. RULES: - Children know nothing of this conversation: pass everything needed via 'context', including any required output language, tone, or style (e.g. "respond in Chinese"). - Child summaries are SELF-REPORTS, not verified facts: a child claiming "uploaded successfully" or "file written" may be wrong. For external side effects (uploads, remote writes, publishing), require a verifiable handle (URL, ID, absolute path) and verify it yourself — fetch the URL, stat the file, read back the content — before telling the user the operation succeeded. - Leaf children (the default) cannot call delegate_task, clarify, memory, send_message, or cronjob; orchestrators regain only delegate_task. - Children inherit the parent model and fallback chain unless pinned globally via delegation.provider / delegation.model in config.yaml. Results are returned as an array, one entry per task.rFrFr"r _build_top_level_descriptionrs% @''r"c\ t}n#t$r t}YnwxYwd|dS)zICompose the 'tasks' parameter description with current concurrency limit.z,Batch mode: tasks to run in parallel (up to z for this user, set via delegation.max_concurrent_children). Each gets its own subagent with isolated context and terminal session. When provided, top-level goal/context/role are ignored.)rEr^rA)rjs r _build_tasks_param_descriptionr0sW8355 8887 8 B| B B Bs %%c t}n#t$r t}YnwxYw t}n#t$rd}YnwxYw|dkr|r d|d|dz d}n|dkr|sd}nd|d }d |S) zHCompose the 'role' parameter description with current spawn-depth limit.Trz2Nesting IS enabled for this user (max_spawn_depth=z7): orchestrator children can themselves delegate up to r/z more level(s) deep.zsNesting is currently disabled (delegation.orchestrator_enabled=false); 'orchestrator' is silently forced to 'leaf'.z.Nesting is OFF for this user (max_spawn_depth=zj); 'orchestrator' is silently forced to 'leaf'. Raise delegation.max_spawn_depth in config.yaml to enable.zRole of the child agent. 'leaf' (default) = focused worker, cannot delegate further. 'orchestrator' = can use delegate_task to spawn its own workers. )rYr^rUr`) max_depthorchestrator_on nesting_notes r _build_role_param_descriptionr>s(**  355 A~~/~ " " "CLq= " " "  a )   CY C C C  F7C F Fs%%8 AAcitd}dtddD|d<t|ddd<t|ddd<t |dS)zReturn per-call schema overrides reflecting current config. Plugged into ToolEntry.dynamic_schema_overrides so every get_definitions() pass rewrites the description fields to the user's actual limits. parametersc4i|]\}}|t|SrF)rrxs r r|z3_build_dynamic_schema_overrides..ns1&&&q!477&&&r" propertiesr#rr)rr)DELEGATE_TASK_SCHEMAr}rrr)overrides_paramss r _build_dynamic_schema_overridesrcs | ,&&3LA,OUUWW&&&\">\=]=]\"7+M: 0), which needs its workers' results within its own turn. The live path is ``run_agent._dispatch_delegate_task``; this lambda mirrors it for the rare case the intercept is bypassed. Direct Python callers of ``delegate_task`` keep the historical synchronous default. rrr)rr is_subagents r _model_background_valuers#,(91==AK?r"r0r1cNt|ts|Sg}d}|D]}t|ts||-d|D}|pt |t |k}|||r|n|S)NFc,i|]\}}|tv||SrF)_MODEL_HIDDEN_TASK_FIELDS)ryrrs r r|z3_strip_model_hidden_task_fields.. s4   U333 333r")r9rrrr}rP)r#stripped_taskschangedrstrippeds r _strip_model_hidden_task_fieldsrs eT " " NG ( ($%%   ! !$ ' ' '   "jjll    7S]]c$ii7h''''$ />>%/r"rc t|d|dt|d|d|dt||d|d|d|d |d |d S) Nr6rr#r rrr6rr8r) r6rr#r rr5r6rr8rr)rr)rr)rrs r rIrI.s} XXf  ##-dhhw.?.?@@xx 011 XXf  *41G1GHHhh//xx!!HH]++##VVN++   r"u🔀)rtoolsetschemahandlercheck_fnrdynamic_schema_overrides)rrE)r/) NNNNNNNNr9rq) NNNNNNNNNNN)rrrrrre getLoggerrrrBrrrxrMrrtypingrrrr urllib.parserr rr agent.interrupt_compatr rrmr rrrutilsrrrrr:r!r%r-rAr@rUrVLockrAr0rB__annotations__r;r1rQr3r>rCrGrMrUrYrdrgrorirtrrrrrrrrrrrrrrr-rr<rErIrLrMrrRrYr`rdrjrnrwr|rrrrrQr-r/r.rhEnumrrrrrrrrrrrrr]rrr rrrrrrr"rrrrrrr rr"r(compile IGNORECASEr+r-r0r4rryrrr(rrrrrrgrfrrrrregisterrFr"r rs$    8 $ $  -,,,,,,,,,,,--------999999 $RRRRRR44444444#8  3 S     C c        "$& ! #IN$$ t'))024T#s(^+,111/14T#s(^+,111hsmc3h8P: T d     (tCH~($(((( CDcN Ct C C C C<@,,,c,S,D,,,,Q#QcQhsmQQQQ0CD8'+ $ ---- -sm -  -  - ----`sm 38_$ tDcN3    03cSQU.966677#cc(%$sCx.%%%%%%PtV tV#tVc]tV tV  tVtVtVtVt 444 cN44 4  $sCx. 4444nSS8$)%%% !y!77c3h7777.A#A$sCx.AAAA,d38n9MI03C #Y" ! *.x--- ""$...44444C4440,(6!3#7&4 //4]*+T"K%)KKK K c]KSM K  K  KK KKKK\Xc]6C49CcCCCC*ST#Y*ST, G "&#$(,0GGGG G G # G}G C=G C=GtCy!G$sCx.)GhGGGGT03030000%hsm%PXY\P]%%%%X(,'+&*'+;?)-*.-1-iii ic]itCy! i C= i  ii }i }ismi }i!)c3h 8i"#i"#3-#i$ S *%i, -iiiiXm mm m  m I,- m mc]mmmm`sSXc]<4" 4"4"(+4" 3 4"4"4"4"n%3%8C=%%%%P4 4S#X#74 $4 4 4 4 t  iQ '+ $iQiQiQiQ iQ sm iQiQiQ #s(^iQiQiQiQX#1)."2"2%4Y_%6%6"*9?,,   y$UK $sCx. !UKDcN#UK5d38nc123UK  UKUKUKUKv     #s(^ &  8Dc3h( )8C= 89B"rz"8"-HH bj7+T$sCx.%9+hsm++++^!,0$(!%.2 !%!\ D\ D 3-\ D c]\ D Dc3h( )\ DSM \ D 3- \ D  \ DDcN+\ D SM\ D#\ Dc]\ D \ D\ D\ D\ DD)-RR  R! RRRRjKKKKKK\$d$$$$X2c2222j     "s""""J0  0 !,!J $)1+ N N$,+B$$ %-%+^$<+h!! %-!N * *##2"(7@ EE##J!0D !A".  !:::I  !%!3Kn n ^crrBBL0///////$d"+J703030000&     ) <'r"