j= hdZddlZddlZddlZddlZddlZddlZddlZddlm Z ddl m Z m Z ddl mZddlZej eZehdZd3de d ed efd Zd4d ed ed efd Zde d dfdZde ddd dfdZde ee fde ee fd efdZdddde ee fde dededzde d df dZddddde ee fde dedededzd df d Zde ee fd!ede d dfd"Zd5d#ed e d e fd$Z d6d%ed ed efd&Z!d7d%ed e"d e"fd'Z#d3d%ed ed efd(Z$d)Z%d*edzd edzfd+Z&d8d,Z'd-ed efd.Z(d/ed efd0Z)d-ed1ed efd2Z*y)9z*Shared utility functions for hermes-agent.N)Path)AnyUnion)urlparse>1onyestrueFvaluedefaultreturnc||St|tr|St|tr$|jj t vSt|S)zDCoerce bool-ish values using the project's shared truthy string set.) isinstanceboolstrstriplowerTRUTHY_STRINGS)r r s /home/cube/projects/richard/traning coach/.omo/evidence/nutricoach-v150-combined/st_01a0560c-r63-installed-wheel-first-claim-qa/venv/lib/python3.12/site-packages/utils.pyis_truthy_valuersI }% %{{}""$66 ;namecDttj||dS)zBReturn True when an environment variable is set to a truthy value.Fr rosgetenv)rr s renv_var_enabledr!s 299T73U CCrpathz int | Nonec |jr-tj|jjSdS#t$rYywxYw)zBCapture the permission bits of *path* if it exists, else ``None``.N)existsstatS_IMODEst_modeOSError)rs r_preserve_file_moder&&sA48KKMt||DIIK//0KtK s %s failed with %s; falling back to copyrbN)rrrislinkrealpathreplacer%errnoEXDEVEBUSYloggerdebug errorcodegetshutilcopyfilecopystatopenfsyncfilenounlink)r+r, target_str real_pathtmp_strexcfs ratomic_replacerE?s@(VJ02z0J  ,PZI(mG 7I&* )  99U[[%++6 6  K   OO   399 5  +  OOGY /    i&!$'&&    ' )syA00 F$:B FDF D+(F*D++F/ E5;$E( E5(E1 -E54F5 F>FFFF$)indentr'datarG dump_kwargsc *t|}|jjdd|dn t|}t j t |jd|jdd\}} |&ttdrtj||tj|d d 5}tj||f|d d ||jtj|j!dddt#||} | tj$| |yt)t| |y#1swYExYw#t&$rYywxYw#t*$r' tj,|#t&$rYwxYwwxYw)aWrite JSON data to a file atomically. Uses temp file + fsync + os.replace to ensure the target file is never left in a partially-written state. If the process crashes mid-write, the previous version of the file remains intact. Args: path: Target file path (will be created or overwritten). data: JSON-serializable data to write. indent: JSON indentation (default 2). mode: Optional final permission mode. When set, the temp file is created and replaced with this mode, avoiding chmod-after-write TOCTOU exposure for secret-bearing files. **dump_kwargs: Additional keyword args forwarded to json.dump(), such as default=str for non-native types. Tparentsexist_okN._.tmpdirprefixsuffixfchmodwutf-8encodingF)rG ensure_ascii)rparentmkdirr&tempfilemkstemprstemhasattrrrUfdopenjsondumpflushr=r>rEr)r%r* BaseExceptionr?) rrHrGr'rI original_modefdr+rDrAs ratomic_json_writerhosz0 :DKKdT2 ,D2Ed2KM##  499+QLB   H 5 IIb$  YYr3 1Q II "      GGI HHQXXZ 2#8T2   D) tI >%2 1     IIh       sn5AE"5AEE"E1E"E E" EE"EE"" F,FF F F FF)default_flow_style sort_keys extra_contentrirjrkct|}|jjddt|}t j t |jd|jdd\}} tj|dd 5}tj|||| |r|j||jtj|jd d d t!||} t#| |y #1swY"xYw#t$$r' tj&|#t($rYwxYwwxYw) anWrite YAML data to a file atomically. Uses temp file + fsync + os.replace to ensure the target file is never left in a partially-written state. If the process crashes mid-write, the previous version of the file remains intact. Args: path: Target file path (will be created or overwritten). data: YAML-serializable data to write. default_flow_style: YAML flow style (default False). sort_keys: Whether to sort dict keys (default False). extra_content: Optional string to append after the YAML dump (e.g. commented-out sections for user reference). TrKrNrOrPrQrVrWrX)rirjN)rr[r\r&r]r^rr_rrayamlrcwriterdr=r>rEr*rer?r%) rrHrirjrkrfrgr+rDrAs ratomic_yaml_writeros, :DKKdT2'-M##  499+QLB  YYr3 1Q IIdA2DPY Z & GGI HHQXXZ 2#8T2 9m42 1   IIh       sI1D A D ) D DD E D65E6 E?EEEkey_pathcXddlm}ddlm}t |}|j j dd|d}d|_d|_d|_ |jd d d |jr7|jd d 5}|j|xs|}dddn|}t|s||}|}|jd} | ddD]-} |j!| } t| |s |} | || <| }/||| d<t#|} t%j&t)|j d|j*dd\} } t-j.| dd 5}|j1|||j3t-j4|j7dddt9||}t;|| y#1swY5xYw#1swY/xYw#t<$r' t-j>|#t@$rYwxYwwxYw)a_Update one dotted YAML key while preserving comments and readable text. This is intentionally narrower than :func:`atomic_yaml_write`: it is for user-edited config files where comments, ordering, quoting, and Unicode should survive a single setting mutation. Writes still use the same temp file + fsync + atomic replace pattern. r)YAML) CommentedMapTrKrt)typFrF)mappingsequenceoffsetrrWrXNrNrOrPrQrV)! ruamel.yamlrrruamel.yaml.commentsrsrr[r\preserve_quotes allow_unicoderirGr!r<loadrsplitr8r&r]r^rr_rrarcrdr=r>rEr*rer?r%)rrpr rrrsyaml_rtrDconfigcurrentkeyskey next_valuerfrgr+rAs ratomic_roundtrip_yaml_updaters!1 :DKKdT2tnG"G G!&G NN1qN3 {{} YYsWY -\\!_6 F. - fl +f%G >># DCRy[[% *l3%J%GCL  GDH'-M##  499+QLB  YYr3 1Q LL # GGI HHQXXZ 2#8T2 9m4=. -22 1   IIh      sU G !G99AG-? G9 G*-G62G99 H)HH) H%"H)$H%%H)textcz tj|S#tjttf$r|cYSwxYw)zParse JSON, returning *default* on any parse error. Replaces the ``try: json.loads(x) except (JSONDecodeError, TypeError)`` pattern duplicated across display.py, anthropic_adapter.py, auxiliary_client.py, and others. )rbloadsJSONDecodeError TypeError ValueError)rr s rsafe_json_loadsr+s7zz$  )Z 8s  ::rctj|dj}|s|S t|S#tt f$r|cYSwxYw)z:Read an environment variable as an integer, with fallback.)rrrintrrrr raws renv_intr;sJ ))C  " " $C 3x  " 5A A ctj|dj}|s|S t|S#tt f$r|cYSwxYw)z7Read an environment variable as a float, with fallback.r)rrrfloatrrrs r env_floatrFsK ))C  " " $C Sz  "rcDttj|d|S)z*Read an environment variable as a boolean.rrr)rr s renv_boolrQs 299S"-w ??r) HTTPS_PROXY HTTP_PROXY ALL_PROXY https_proxy http_proxy all_proxy proxy_urlct|xsdj}|sy|jjdrd|t ddS|S)zNormalize proxy URLs for httpx/aiohttp compatibility. WSL/Clash-style environments often export SOCKS proxies as ``socks://127.0.0.1:PORT``. httpx rejects that alias and expects the explicit ``socks5://`` scheme instead. rNzsocks://z socks5://)rrr startswithlen)r candidates rnormalize_proxy_urlr_sVIO$**,I ##J/9S_%56788 rctD]?}tj|d}t|}|s'||k7s-|tj|<Ay)zARewrite supported proxy env vars to canonical URL forms in-place.rN)_PROXY_ENV_KEYSrrrenviron)rr normalizeds rnormalize_proxy_env_varsrns= #r"(/ *-(BJJsO rbase_urlc|xsdj}|sytd|vr|nd|}|jxsdjj dS)aReturn the lowercased hostname for a base URL, or ``""`` if absent. Use exact-hostname comparisons against known provider hosts (``api.openai.com``, ``api.x.ai``, ``api.anthropic.com``) instead of substring matches on the raw URL. Substring checks treat attacker- or proxy-controlled paths/hosts like ``https://api.openai.com.example/v1`` or ``https://proxy.test/api.openai.com/v1`` as native endpoints, which leads to wrong api_mode / auth routing. rz://z//rN)rrhostnamerrstrip)rrparseds rbase_url_hostnamerzsW >r "C  Uc\cC5z :F OO !r ( ( * 1 1# 66rmodelc^|xsdjj}|syd|vr|jddd}|jdxs]|jdxsJ|jdxs7|jd xs$|jd xs|jd S) uAReturn True for model families that require ``max_completion_tokens``. OpenAI's newer families reject ``max_tokens`` on /v1/chat/completions with HTTP 400 ``unsupported_parameter`` — the caller must send ``max_completion_tokens`` instead. This covers: - ``gpt-4o`` / ``gpt-4o-mini`` / ``gpt-4o-*`` - ``gpt-4.1`` / ``gpt-4.1-*`` - ``gpt-5`` / ``gpt-5.x`` / ``gpt-5-*`` - ``o1`` / ``o1-*`` - ``o3`` / ``o3-*`` - ``o4`` / ``o4-*`` Handles vendor prefixes like ``openai/gpt-5.4`` by stripping to the tail. The URL-based check (``base_url_hostname == "api.openai.com"``) misses third-party OpenAI-compatible endpoints (custom OpenAI gateways, OpenRouter) that front these models and enforce the same parameter constraint, so name-based detection is required as a fallback. rF/r{zgpt-4ozgpt-4.1zgpt-5o1o3o4)rrrsplitr)rms r"model_forces_max_completion_tokensrs( "##%A  ax HHS! R  X  << "  <<   <<   <<    <<  rdomainct|}|sy|xsdjjjd}|sy||k(xs|j d|zS)acReturn True when the base URL's hostname is ``domain`` or a subdomain. Safer counterpart to ``domain in base_url``, which is the substring false-positive class documented on ``base_url_hostname``. Accepts bare hosts, full URLs, and URLs with paths. base_url_host_matches("https://api.moonshot.ai/v1", "moonshot.ai") == True base_url_host_matches("https://moonshot.ai", "moonshot.ai") == True base_url_host_matches("https://evil.com/moonshot.ai/v1", "moonshot.ai") == False base_url_host_matches("https://moonshot.ai.evil/v1", "moonshot.ai") == False FrrN)rrrrendswith)rrrs rbase_url_host_matchesrs_!*H l ! ! # ) ) + 2 23 7F  v  @!2!23rs0  !   8 $563$D#DDTD d| T  $ "-U39--uS$Y7G-C-h B T B B  B * B  B BR % $ 1 T 1 1 1  1 : 1 1h= T == = =F #  s  s33@#@@@ 3: #* )777( c d FACAAAr