i B UdZddlZddlZddlZddlZddlZddlmZddlm Z ddZ de ddfdZ ee jjZejde edd Zedd lmZdd lmZeed z  dejvrddlZedz Zereed5Zejepi diZ!dddn #1swxYwYe"e!e#rfd!Z?d"e@de e fd#ZAdd$e de e fd%ZBdd'e@d(e d)e>fd*ZCd+e#d,e@fd-ZDd.e de e fd/ZEd0e e ddfd1ZFd2ede>fd3ZGd4ede efd5ZHd4ede>fd6ZId4ede>fd7ZJdd8ZKd4ed9e>deLe@e effd:ZM dd;e e d9e>dZNd?ZOd@ZPdAZQdBZRdCZSddDZTdEZUgdFZVe@eLe e e feWdG<dHe#de fdIZXdJdJdJdKdLe d=e dde>fdZdZde@e dede e fdZde@e dede de e fdZ dde de e ddfdZ dde@e dede de>de>f dZhdZdZdZde@e dede e fdZde e de>fdZde@e dede>fdZde@e dede>fdZde@e dede de deZf dZde>fdZdZde@e dede>fdZde@e deddfdZdZde@e fdZddde@e de#e e fdzddfdZddZGddZdde>fdZdZdZddZdZde>fdZde@de@fdZdZdZddZd„ZdÄZe;dkr edSdS)u Hermes CLI - Main entry point. Usage: hermes # Interactive chat (default) hermes chat # Interactive chat hermes gateway # Run gateway in foreground hermes gateway start # Start gateway as service hermes gateway stop # Stop gateway service hermes gateway status # Show gateway status hermes gateway install # Install gateway service hermes gateway uninstall # Uninstall gateway service hermes setup # Interactive setup wizard hermes logout # Clear stored authentication hermes status # Show status of all components hermes cron # Manage cron jobs hermes cron list # List cron jobs hermes cron status # Check if cron scheduler is running hermes doctor # Check configuration and dependencies hermes honcho setup # Configure Honcho AI memory integration hermes honcho status # Show Honcho config and connection status hermes honcho sessions # List directory → session name mappings hermes honcho map # Map current directory to a session name hermes honcho peer # Show peer names and dialectic settings hermes honcho peer --user NAME # Set user peer name hermes honcho peer --ai NAME # Set AI peer name hermes honcho peer --reasoning LEVEL # Set dialectic reasoning level hermes honcho mode # Show current memory mode hermes honcho mode [hybrid|honcho|local] # Set memory mode hermes honcho tokens # Show token budget settings hermes honcho tokens --context N # Set session.context() token cap hermes honcho tokens --dialectic N # Set dialectic result char cap hermes honcho identity # Show AI peer identity representation hermes honcho identity # Seed AI peer identity from a file (SOUL.md etc.) hermes honcho migrate # Step-by-step migration guide: OpenClaw native → Hermes + Honcho hermes version Show version hermes update Update to latest version hermes uninstall Uninstall Hermes Agent hermes acp Run as an ACP server for editor integration hermes sessions browse Interactive session picker with search hermes claw migrate --dry-run # Preview migration without changes N)Path)OptionalreturncL|ddtjddS)zzAttach the ``--accept-hooks`` flag. Shared across every agent subparser so the flag works regardless of CLI position.--accept-hooks store_truezuAuto-approve unseen shell hooks without a TTY prompt (equivalent to HERMES_ACCEPT_HOOKS=1 / hooks_auto_accept: true).actiondefaulthelpN) add_argumentargparseSUPPRESS)parsers 1/home/div/.hermes/hermes-agent/hermes_cli/main.py_add_accept_hooks_flagr6s= ! O  command_namectjs5td|dtjtjddSdS)aExit with a clear error if stdin is not a terminal. Interactive TUI commands (hermes tools, hermes setup, hermes model) use curses or input() prompts that spin at 100% CPU when stdin is a pipe. This guard prevents accidental non-interactive invocation. zError: 'hermes z' requires an interactive terminal. It cannot be run through a pipe or non-interactive subprocess. Run it directly in your terminal instead.fileN)sysstdinisattyprintstderrexit)rs r _require_ttyrDsk 9      9l 9 9 9      rctjdd}d}d}t|D]c\}}|dvr%|dzt|kr||dz}d}n6|dr |ddd}d}nd|r ddlm}|d z }|r2| }|r |d kr|}d}n#ttf$rYnwxYw|T dd l m}||} n#tt f$r<} t#d | tj tjdYd} ~ n:d} ~ wt($r*} t#d| dtj Yd} ~ dSd} ~ wwxYw| t*jd<|dkrt|D]\}}|dvr>|dz} tjd| tj| |zdzt_dS|dr>|dz} tjd| tj| dzdzt_dSdSdSdS)zAPre-parse --profile/-p and set HERMES_HOME before module imports.rNr)z --profilez-pz --profile==get_default_hermes_rootactive_profiler )resolve_profile_envError: rz"Warning: profile override failed (z), using default HERMES_HOME)rargv enumeratelen startswithsplithermes_constantsr$exists read_textstripUnicodeDecodeErrorOSErrorhermes_cli.profilesr& ValueErrorFileNotFoundErrorrrr Exceptionosenviron) r) profile_nameconsumeiargr$ active_pathnamer& hermes_homeexcstarts r_apply_profile_overriderCcs 8ABBOPENAI_API_KEYANTHROPIC_TOKENOPENAI_BASE_URLANTHROPIC_API_KEYOPENROUTER_API_KEYapi_keyc3>K|]}tj|VdSN)r8getenv).0vs r z/_has_any_provider_configured..s* 3 3A29Q<< 3 3 3 3 3 3rT#r"z'" logged_inz auth.jsonNactive_providerproviderbase_url)read_claude_code_credentialsis_claude_code_token_valid refreshTokenF)hermes_cli.configrjrErShermes_cli.authrkrlget isinstancedictr1strrovalues auth_typeupdateapi_key_env_varsanyr/r0 splitlinesr, partitionr7itemsjsonloadsagent.anthropic_adapterrr)rjrErSrkrl_DEFAULT_MODELcfg model_cfg _model_name_has_hermes_configroprovider_env_varspconfigenv_filelinekey_val provider_idstatus auth_filerauthactive cfg_provider cfg_base_url cfg_api_keyrrcredss r_has_any_provider_configuredrsLLLLLLLLLL////// 100000#''44N +--C  I)T"" }}Y//52<<>> Is # #oo''  $F)F 211111%++--??   ) )  $ $W%= > > > 3 3!2 3 3 333t|~~H   **,,7799  zz||??3''3d??"nnS11 Qiikk''..99;;"333344     D  $5$;$;$=$=   K I--$_[11Fzz+&& tt          !!K/I   KKK::i113344DXX/00F (00::k** 4    D )T""! j117R>>@@ ! j117R>>@@  }}Y//52<<>>  < ; 4            1022E **511 5:YY~5N5N t    D  5sW?B/G20G22 G?>G?AI I II?A"K$$ K10K14O OOsessionsc  stddS ddl dgd d fd} |dS#t$rYnwxYwtdt D]\}}|dpd }|d pd }|p |p|d }t|d kr |dd dz}t|d}|dd dd}td|dzdd|dd|dd| tdtd} | r| dvrdSt| dz } d| cxkrtkrnn| d Stdtdn@#t$rtdYn%ttf$rtYdSwxYw)aInteractive curses-based session browser with live search filtering. Returns the selected session ID, or None if cancelled. Uses curses (not simple_term_menu) to avoid the ghost-duplication rendering bug in tmux/iTerm when arrow keys are used. No sessions found.Nrc|dpd}|dpd}|dddd}t|d}|ddd }d }td ||z }|r |d|} n|r |d|} n|} | d |d |dd |dd|S)z!Format a session row for display.titlernpreviewsourceN last_activeid-< <10<5 )rr1rhmax) smax_xrrrrsid fixed_cols name_widthr?s r _format_rowz+_session_browse_picker.._format_rowssUU7^^)r0022EuuY''-24466GUU8R((!,F(})=)=>>KD'#2#,C-JR!344J [j[) { {+PZPPPPKPPPvPPP3PP Prc|}||dpdvp||dpdvpT||ddvp*||dpdvS)z?Check if a session matches the search query (case-insensitive).rrnrrr)lowerr)rqueryqs r_matchz&_session_browse_picker.._matchs AaeeGnn*113338y))/R668888dB--///8x.B55777  rc  drdjddjddjddddd}d}dt} | | \}}|d ks|d krS | ddd n#j $rYnwxYw| |dSr:d d}j}r|dz}n5d}j}r|dz} |dd||dz |n#j $rYnwxYwd}t%d||z } ddd| dddddddd} rdnj} |dd| |dz | n#j $rYnwxYw|dz } | dkrd} |s7 d} |dd| |dz jn:#j $rYn-wxYw|t)|krt)|dz }|dkrd}||kr|}n||| zkr|| z dz}t+t-|t/t)||| zD]\}}|dz}||dz krn||}||krdnd}|||dz z}j}||kr3j}r|dz} ||d||dz |#j $rYwxYw|dz }|rPd|dzdt)|d}t)|t)kr|d t)d!z }nd"t)d} ||d||dz rdnjn#j $rYnwxYw| |}|jfvr|r|dz t)|z}n|jfvr|r|dzt)|z}n|jd#d$fvr|r||d%d<dS|d&krrdt}d}d}ndS|jd'dfvr2r/ddrfd(D}nt}d}d}nL|t;d)krsdSd*|cxkrd+kr(nn%t=|z fd,D}d}d})-Nrrr!rnT(zTerminal too smallu Browse sessions — filter: u█uM Browse sessions — ↑↓ navigate Enter select Type to filter Esc quitrrz zTitle / PreviewrrActiverSrcrrIDz No sessions match the filter. → / sessionsz (filtered from )z 0/ rc,g|]}||Srryrr search_texts r zB_session_browse_picker.._curses_browse..%s*'V'V'Vavva?U?U'V'V'V'Vrr ~c,g|]}||Srrrs rrzB_session_browse_picker.._curses_browse../s*NNNavva7M7MNNNNr)curs_set has_colors start_coloruse_default_colors init_pair COLOR_GREEN COLOR_YELLOW COLOR_CYANlistcleargetmaxyxaddstrerrorrefreshgetchA_BOLD color_pairaddnstrrA_DIMr+r*rangeminA_NORMALKEY_UPKEY_DOWN KEY_ENTER KEY_BACKSPACEordchr)stdscrcursor scroll_offsetfilteredmax_yrheader header_attrrr col_headerdim_attr visible_rowsmsgdraw_ir<yrarrowrowattrfooter_yfooterrrrrcurses result_holderrs @r_curses_browsez._session_browse_picker.._curses_browses OOA     "" +""$$$))+++  F$6;;;  F$7<<<  F$5r:::  Ar***FMKH~~HO & %00 u199  a,@AAAA!<NN$$$LLNNNF <NkNNNF"(-K((**<#v'8'8';';; lF"(-K((**<#v'8'8';';; NN1aKHHHH|D1  UZ%788 g#4gzgggghgggV[gggaegg 060A0A0C0CU))!,,,NN1aUQYIIII|D %qy !###$L $!?q!S%!)V\JJJJ!<X..!$X!2zz!" --(. =<#???(.(=(A %.)H }|/KLL&&!!  #QJ >>!E$QK+,;;E#kk!UQY&?&??%;;#)=D%0022= $(9(9!(<(< <!"NN1aeaiFFFF%|!!! D!!19=G&1*GGs8}}GGGF8}}s8}}44"ES]]"E"E"EE"(1*H !=V_...>"(1*H !=V-r2666B+3F+;D+A a(FBYY"&( #'>>!"() V13:::"*&1#2#&6 &6'V'V'V'V'V8'V'V'VHH'+H~~H!"() CHH__[_F3%%%%#%%%%%3s88+KNNNNN8NNNHF$%M_O &sn D%% D21D2G.. G;:G;(A I55 JJ#J:: KKO$$ O10O1A R** R76R7z: Browse sessions (enter number to resume, q to cancel) rrnrr2/...rrrrrz>3. <50rTz Select [1-]: )rquitrz Invalid selection. Enter 1-z or q to cancel.z/ Invalid input. Enter a number or q to cancel.)rrwrapperr7r*rr1r+rhinputrrcr5KeyboardInterruptEOFError)rrr<rrrlabelrsrcridxrrrrs` @@@@r_session_browse_pickerr"bs  "###tI    Q Q Q,   ^ &^ &^ &^ &^ &^ &^ &^ &^ &@ ~&&&Q       HIII(##FF1w%2,,..55##)r0022++AdG u::??#2#J&E$QUU=%9%9:: eeHb!!"1"% D1q5DDDuDDDKDDDsDDEEEE  ;X;;;<<BBDDC #))++)>>>tc((Q,CC''''#h--'''''}T** Q#h--QQQ R R R R E E E C D D D D D!8,    GGG44  s62A AA"A H .runtime sudo_pathprobeprobe2is_tty tty_flags env_flagsvarr cmd_prefixexec_cmds r_exec_in_containerr[vs'Y'G#$45N{+I -Jl7##G  Mg M M M      I  )Z~>  E 1L((  %D'9j$WF  A%%@@@@@ '@@!( @@')i &D&D@@6=@@,/88H+=+=@@!$ b^bbWbbMPXXV^M_M_bbZ     HQKKK Y    F!-vII655jnnS!!  5   dsNNSNN3 4 4 4/8G)T7++wiJ (          : &  '    Ihqk8$$$$$r name_or_idc8 ddlm}|}||}d}|r |d}n||}|r) ||p|}n#t $rYnwxYw||S#t $rYnwxYwdS)aXResolve a session name (title) or ID to a session ID. - If it looks like a session ID (contains underscore + hex), try direct lookup first. - Otherwise, treat it as a title and use resolve_session_by_title (auto-latest). - Falls back to the other method if the first doesn't match. - If the resolved session is a compression root, follow the chain forward to the latest continuation. Users who remember the old root ID (e.g. from an exit summary printed before the bug fix, or from notes) get resumed at the live tip instead of a stale parent with no messages. rr$Nr)r'r% get_sessionresolve_session_by_titleget_compression_tipr7r))r\r%r*session resolved_ids r_resolve_session_by_name_or_idrcs ****** Y[[..,,%)  B!$-KK55jAAK    44[AAP[             4s6A B A$#B $ A1.B 0A11B BB session_idc |ptd}|sdSd} ddlm}|}||}|s ||dSdS||}t |dpd}t |dpd}t |dpd}t |d pd} t |d pd} t |d pd} ||z| z| z| z} n)#t$rY||dSdSwxYw ||n#||wwxYwttd td ||rtd|dttd||rtd|td|td| d|d|d| | zd| d dS)z/Print a shell-visible epilogue after TUI exits.tuirNrr$ message_count input_tokens output_tokenscache_read_tokenscache_write_tokensreasoning_tokenszResume this session with:z hermes --tui --resume z hermes --tui -c ""zSession: zTitle: zMessages: zTokens: z (in z, out z, cache z , reasoning r) r+r'r%r^r)get_session_titlercrr7r) rdtargetr*r%rarrhrirjrkrlrm total_tokenss r_print_tui_exit_summaryrrs  >0>>>F  B****** Y[[..((  & > HHJJJJJ >#$$V,,GKK88=A>> 7;;~66;!<< GKK88=A>>  ,? @ @ EAFF -A!B!B!GaHHw{{+=>>C!DD   ! !      > HHJJJJJ >  > HHJJJ > HHJJJJ  GGG %&&& -V - -... . ,E,,,--- GGG %V % %&&& * ((())) ,] , ,---  Y  Y Y* Y Y2? Y Y"%77 Y YEU Y Y Ys0'EC;EF E>"F=E>>FF2rootc$|dz dz dz dz }|sdS|dz }|sdS|dz dz }|sdS|j|jkS) zYTrue when @hermes/ink is missing or node_modules is behind package-lock.json (post-pull). node_modulesz@hermesink package.jsonTpackage-lock.jsonFz.package-lock.json)is_filestatst_mtime)rsrvlockmarkers r_tui_need_npm_installr~/s  ) +e 3n DC ;;==t % %D <<>>u N "%9 9F >>  t 99;; &++--"8 88rtui_dirctjd}|r:t|}|dz dz rt |s|S|dz dz rt |s|SdS)zTDirectory whose dist/entry.js we should run: HERMES_TUI_DIR first, else repo ui-tui.HERMES_TUI_DIRdistentry.jsN)r8r9rrr/r~)renvps r_find_bundled_tuir=s *..) * *C  II J # + + - - 6KA6N6N H&:%--//8Mg8V8V 4rcT t|rdS|dz dz }|sdS|j}t ddh t j|dD]x\}}} fd|D|dd<|D]\}|drEt j t j |||krdS]ydD];}||z }|r |j|krdS.R<<>t ZZ\\ "F nf- . .D(*(F(F(F  $9<<<<(<<<   B{{?++ 7##BGLL"$=$=>>GG444  t^ 99;; 27799-6644 5rc6 |dz dz }|dz dz }|sdS|j}tddh t j|dD]x\}}} fd|D|dd<|D]\}|d rEtjtj |||krdS]y|d z }|r|j|krdSd S) Npackagesz hermes-inkrz ink-bundle.jsTrurcg|]}|v| Srrrs rrz,_hermes_ink_bundle_stale..krrrrwF) r/rzr{rr8rrrrrN) rink_rootbundlebmrrrrrrs @rrrcs6#l2H   0F ==??t  B nf- . .D(*$(G(G(G  $9<<<<(<<<   B{{?++ 7##BGLL"$=$=>>CC444  N "B yy{{rwwyy)B..t 5rctjdrtjdrdStjdrdSt dz dz dz }|sdStjdp"ttj d z } tj d d d |d gitjd|iddd}n#ttj f$rYdSwxYwtjddtj}g}|jpd}|r9|t|j|t|dz dz tj dz dz g|D]?}t|}|r||vr|d|@tj|tjd<dS)uzMake sure `node` + `npm` are on PATH for the TUI. If either is missing and scripts/lib/node-bootstrap.sh is available, source it and call `ensure_node` (fnm/nvm/proto/brew/bundled cascade). After install, capture the resolved node binary path from the bash subprocess and prepend its directory to os.environ["PATH"] so shutil.which finds the new binaries in this Python process — regardless of which version manager was used (nvm, fnm, proto, brew, or the bundled fallback). Idempotent no-op when node+npm are already discoverable. Set ``HERMES_SKIP_NODE_BOOTSTRAP=1`` to disable auto-install. nodenpmNHERMES_SKIP_NODE_BOOTSTRAPscriptslibznode-bootstrap.shr(z.hermesbash-czsource "z+" >&2 && ensure_node >&2 && command -v nodeTF)rr2r3checkPATHrnbinz.localr)rKrLr8r9r PROJECT_ROOTryrrhomer5r6r3SubprocessErrorr-pathsepstdoutr1appendresolveparentrOis_dirinsertrN)helperr@resultpartsextrasresolvedextrars r_ensure_tui_nodervs6|F U 3 3 z~~233 I % -0C CF >>  *..//O3ty{{Y7N3O3OKN6NNN  ;2::}k::     Z/ 0 JNN62 & & , ,RZ 8 8EF #**,,H7 d8nn,,..5666 MM4 $$v-5ty{{X7MPU7UVWWW JJ <<>> aunn LLA   //BJvs50C&&D?Dtui_devc tdtdtfd}|s}tjd}|r\t |}|dz dz r3t|s$|d}|t|dz dz g|fS|d}t|rtjd std tj |d d d ddgt|tj tj ditjddi}|j dkr~|jpd}d|dd} td| rt| t%jd|rt)|rtj |ddddgt|dd}|j dkr|jpd|jpd} d| dd} td | rt| t%jd|d!z d"z d#z } | rt| d$g|fS|d%g|fSt-|rtj |ddgt|dd}|j dkr|jpd|jpd} d| dd} td&| rt| t%jdt/|} | s#td't%jd|d}|t| dz dz g| fS)(uTTUI: --dev → tsx src; else node dist (HERMES_TUI_DIR or ui-tui, build when stale).rrcL|dkratjd}|r@tj|r!tj|tjr|Stj|}|s&t|dtj d|S)Nr HERMES_NODEu. not found — install Node.js to use the TUI.r) r8r9rrisfileaccessX_OKrKrLrrr)renv_noders r _node_binz!_make_tui_argv.._node_bins &==z~~m44H BGNN844 8RW9U9U |C    SHHH I I I HQKKK rrrrrr HERMES_QUIETuInstalling TUI dependencies…install--silent --no-fund --no-audit--progress=falseTCI1)cwdrrr3rrrn Nznpm install failed.rr6buildz--prefixzpackages/hermes-inkrr2r3z@hermes/ink build failed.ruz.bintsxz src/entry.tsxrBzTUI build failed.z'TUI build did not produce dist/entry.js)rrr8r9rrr/r~rr5r6DEVNULLPIPErMrr1rNrrrrrrr) rrrext_dirrrrrerrrcombinedrrss r_make_tui_argvrs# s s     ?*..!122  ?W AF Z'//11 ?:OPQ:R:R ? y((c!f*z"9::;Q>> )E  CW%%z~~n-- 4 2 3 3 3 )ZlDV WG %?)2:)tS))       ! !=&B--//Cii 0 0 677G ' ( ( ( g HQKKK' #G , , ^eWj2GHLL# F  A%%$m1rH6=3FBHHNNPP))H$7$7$9$9#$$$?@@1222#'NNN &/%7 ::<< 8HHo.7 7W~w&&!!  % !G        ! ! --2Dv}/BDDJJLLHii 3 3 5 5cdd ;<."s/FFq||344FFFFFFrz--max-old-space-size=8192z --expose-gcrHERMES_TUI_RESUME)rr)rrN)rr8r9copyrr setdefaultr executablegetcwdr-rrrNrr5callrrrr) rrrmrrr_tokensr)rcodes r _launch_tuirsX%G *//  C$&JNN #l"3"3%%C !NN?CN333NN<--- .#N(- $%4%- !"+3 '( ggnb))//11G FFgFFF F F42333G##}%%%((7++C5#4  w00ID#tSs;;;  x 1222HTNNNNNs$F FFc| t|ddp"tjddk}t|dd}|rt|ddst |t rPt |}|r||_ntd|d td tj d ne|rdnd }t| }|s|dkrtd }|r||_n-|rdnd}td|dtj d t|dd}|rt |}|r||_ts ttdttdtddl m}m} |s| dtj d  t!d} n#t&t(f$rd} YnwxYw| dvrt+|dSttdtj d  ddlm} | n#t0$rYnwxYw ddlm} | dn#t0$rYnwxYwt|ddrdtjd <t|d!drdtjd"<t|d#drdtjd$<t|d%dr|jtjd&<|rOt9t|ddt|d'dt|d(dt|d)d*dd+lm} |jt|d)d|j t|d,d|j!t|d-d|j"t|d.dt|ddt|d/dt|d0dt|d1dt|d2dt|d#dt|d!dd3}d4|#D} | d6i|dS#tH$r1}td5|tj d Yd}~dSd}~wwxYw)7zRun interactive chat CLI.rfF HERMES_TUIr continue_lastNresumezNo session found matching ''.z5Use 'hermes sessions list' to see available sessions.rrPrgTUICLIz No previous z session found to continue.zLIt looks like Hermes isn't configured yet -- no API keys or providers found.z Run: hermes setupr)is_interactive_stdin#print_noninteractive_setup_guidancez;No interactive TTY detected for the first-run setup prompt.zRun setup now? [Y/n] nrnr yesz4You can run 'hermes setup' at any time to configure.)prefetch_update_check sync_skillsTquietyoloHERMES_YOLO_MODEignore_user_configHERMES_IGNORE_USER_CONFIG ignore_rulesHERMES_IGNORE_RULESrHERMES_SESSION_SOURCErrmr)rrmrmainskillsrimageworktree checkpointspass_session_id max_turns)rmrtoolsetsrverboserrrrrrrrr r ci|] \}}||| Srwr)rykrzs r zcmd_chat..s ? ? ?tq!arr'r)%getattrr8r9rrrrcrrrrr+rhermes_cli.setuprrrr1rrr cmd_setuphermes_cli.bannerrr7tools.skills_syncrrrrPrrmrrrrr5)argsuse_tui continue_valrrlast_idkind resume_valrrreplyrrcli_mainkwargses rcmd_chatr*6sdE5))PRZ^^L-I-IS-PG4$77LGD(D99 lC ( ( 5lCCH & DLDDDEEEMNNN &0UU5F+6:::G >v/u=== % '2uuUFTFFFGGG x..J#1*==  #"DK ( ) )  Z     $%%%         $#%%  / /M    HQKKK 12288::@@BBEE+,   EEE  $ $ $ dOOO F  DEEE   ;;;;;;       111111 $      tVU##-), %&t)511625 ./ t^U++0,/ ()tXt$$:.2k *+  D(D ) )D)U33$..T:t44     %$$$$$D*d33M$$//<w..w--$$//D*e44t]E::"4):EBBT;55ne<<%d,@%HHF$@ ?v||~~ ? ? ?F6  mmm  sN3H H! H!+I<< J J  J J-,J-6R R; &R66R;c(ddlm}||dS)zGateway management commands.r)gateway_commandN)hermes_cli.gatewayr,)r r,s r cmd_gatewayr.*222222ODrc Btdddlm}m}t t dt d|dpd}|st t dt t d t d t d t t d t d t dt  t d}n'#ttf$rt dYdSwxYw|dkr|ddd}t dt t dt dt dt dt dt dt dt dt dt dt dt dn<|dd d }t d!n|}|dkrd"nd#}t d$|t |d%}|r(| d&krt d'n|d%d&t d(|d)pd}|rt d*| t d+} n#ttf$rd,} YnwxYw| d-vr}|dkr"t d.} n!t d/} | r2|d)| d0dt d1| nt |dkr1t d2t d3} n!t d/} | r3|d)| d0dt d4| nt d5tt jd6} | d7z d8z } | d9z } | st d:| dS| d;z s t d<t!jd=}|st d>dS t%j|d?d@dAdBgt)| t$jt$jdCD}n #t$rt dEYdSwxYw|jdkrn|jpd}|r/dF|dGdndH}t dIt |dSt dJnt dKt7dz dLz }|dCdCM|dNz rt dO t dP} n#ttf$rd,} YnwxYw| d-vr=t!j|dCQ|dCdCMt dRn t dSt dTdSt t dU|dkrt dVt dWnt dXt t dYt dUt  t%jdZt)| d[d\t)|gt)| ]n#t$rYnwxYwt |dNz rt d^t |dkrZt d_t d`t dat dbt t dcnht d_t d`t ddt det t dct dft t dgdSt dhdS)izESet up WhatsApp: choose mode, configure, install bridge, pair via QR.whatsappr get_env_valuesave_env_valueu⚕ WhatsApp Setup2================================================== WHATSAPP_MODErnz&How will you use WhatsApp with Hermes?z& 1. Separate bot number (recommended)uF People message the bot's number directly — cleanest experience.zH Requires a second phone number with WhatsApp installed on a device.z 2. Personal number (self-chat)z/ You message yourself to talk to the agent.z3 Quick to set up, but the UX is less intuitive.z Choose [1/2]: z Setup cancelled.Nrbotu ✓ Mode: separate bot numberu ┌─────────────────────────────────────────────────┐u9 │ Getting a second number for the bot: │u9 │ │u9 │ Easiest: Install WhatsApp Business (free app) │u9 │ on your phone with a second number: │u; │ • Dual-SIM: use your 2nd SIM slot │u< │ • Google Voice: free US number (voice.google) │u; │ • Prepaid SIM: $3-10, verify once │u9 │ WhatsApp Business runs alongside your personal │u; │ WhatsApp — no second phone needed. │u └─────────────────────────────────────────────────┘z self-chatu' ✓ Mode: personal number (self-chat)zseparate bot numberzpersonal number (self-chat)u ✓ Mode: WHATSAPP_ENABLEDtrueu✓ WhatsApp is already enabledu✓ WhatsApp enabledWHATSAPP_ALLOWED_USERSu✓ Allowed users: z Update allowed users? [y/N] rr rz< Phone numbers that can message the bot (comma-separated): z( Your phone number (e.g. 15551234567): ru ✓ Updated to: z+ Who should be allowed to message the bot?z4 Phone numbers (comma-separated, or * for anyone): u ✓ Allowed users set: uF ⚠ No allowlist — the agent will respond to ALL incoming messagesrrzwhatsapp-bridgez bridge.jsu ✗ Bridge script not found at ruuM → Installing WhatsApp bridge dependencies (this can take a few minutes)...ru5 ✗ npm not found on PATH — install Node.js firstrrrrT)rrrr3u ✗ Install cancelledrrz (no output)u ✗ npm install failed:u ✓ Dependencies installedu)✓ Bridge dependencies already installedraparentsexist_okz creds.jsonu#✓ Existing WhatsApp session foundz8 Re-pair? This will clear the existing session. [y/N]  ignore_errorsu ✓ Session clearedu' ✓ WhatsApp is configured and paired!z( Start the gateway with: hermes gatewayu──────────────────────────────────────────────────u0📱 Open WhatsApp (or WhatsApp Business) on thez* phone with the BOT's number, then scan:u,📱 Open WhatsApp on your phone, then scan:u0 Settings → Linked Devices → Link a Devicerz --pair-only --session)ru!✓ WhatsApp paired successfully!z Next steps:z) 1. Start the gateway: hermes gatewayz2 2. Send a message to the bot's WhatsApp numberz) 3. The agent will reply automaticallyu; Tip: Agent responses are prefixed with '⚕ Hermes Agent'u) 2. Open WhatsApp → Message Yourselfu. 3. Type a message — the agent will replyz4 so you can tell them apart from your own messages.z1 Or install as a service: hermes gateway installuG⚠ Pairing may not have completed. Run 'hermes whatsapp' to try again.)rrr3r4rrr1rrrreplacer__file__rr=r/rKrLr5r6rrrrMrrNrrEmkdirrmtree)r r3r4 current_modechoicewa_mode mode_labelcurrent current_usersresponsephone project_root bridge_dir bridge_scriptrrrr session_dirs r cmd_whatsapprRs ???????? GGG  (OOO!=117RL .+  6777  6777 VWWW V     0111 ?@@@ CDDD  -..4466FF+,    & ' ' ' FF  S== N?E 2 2 2G 3 4 4 4 GGG p q q q M N N N M N N N M N N N M N N N O P P P P Q Q Q O P P P M N N N M N N N O P P P p q q q q N?K 8 8 8!G ; < < < <%,%5%5 ! !;X  )Z))*** GGGm.//G&7==??f,, /0000)6222 $%%%"M":;;ArM\ 3M33444 ?@@FFHHHH+,   HHH  >>  | + +%R%''HIIOOQQ 47sB9O9OPPP2522333  e   ? @ @ @Fegg EDEEKKMME  \ N3U]]35K5K L L L 5e55 6 6 6 6 Z [ [ [>>))++3A6L ),==J,M    ! ! A-AABBB  ' / / 1 1; ^___l5!!  I J J J F ^ilQdii 0 0 6777MG - . . . 'NNN F ,---- 9:::"##j09>  | + + M+T : : : :   dT  : : : ) * * * * < = = = < = = = F GGG *% @AAA :;;;; <=== GGG <=== * GGG  S'' SEUEU VJ            GGGl"**,,Y 1222  e   / " " " = > > > F G G G = > > > GGG O P P P P / " " " = > > > = > > > B C C C GGG O P P P H I I I  ABBBBB WXXXXXs[6!D D<;D<!!LLL?UU,+U,!Y;;ZZA_ _#"_#c(ddlm}||dS)zInteractive setup wizard.r)run_setup_wizardN)rrT)r rTs rrrs+111111TrcDtdt|dS)uKSelect default model — starts with provider selection, then model picker.rmr N)rselect_provider_and_modelrVs r cmd_modelrXs'4((((((rc p #$%ddlm%m#m}ddlm$m}m}ddlm }|}| d}t|tr| dd}|pd}d }| d}t|tr| d }|ptjd pd } $|} d } | d krC|| | d | } | | j} nd| d} t!d| d| E %d } n8##$r0}| d kr||} t!d| dd } Yd }~nd }~wwxYw| dkr |drd} ddlm}m}t|}| r| | | nd}t!t!d|t!d|t!d|D}dtt(tt(t(fff#$%fd }||}|D]\}}|d}|d}|ddddd }| dd}|rd!|nd}|||d"|d#|fg}d}|D]Q\}}| r3|| kr-|||d$ft3|d%z }:|||fR|d&t| d't4o!t7| d'} | r|d(|d)|d*t9d+|D|,}!|!||!dd-krt!d.d S||!d}"|"d/krt;d S|"dkrt=||n|"d0krt?||n|"d1krtA|||2n|"d3krtC||nx|"d4krtE||n`|"d5krtG||nH|"d6krtI||n0|"d7krtK||n|"dkrtM|n|"'d8s|"|vrJ|| |"}|t!d9d StQ||n|"d:krtS|n|"d;krtU||nq|"dkrt[||n,|"d?krt]||n|"d@vrt_||"||"dAvr%|"'d8stad Sd Sd S)BaCore provider selection + model picking logic. Shared by ``cmd_model`` (``hermes model``) and the setup wizard (``setup_model_provider`` in setup.py). Handles the full flow: provider picker, credential prompting, model selection, and config persistence. r)resolve_provider AuthErrorformat_auth_error)get_compatible_custom_providersrSr3)resolve_provider_fullrmr rnz (not set)Nrrauto providerszUnknown provider 'zb'. Check 'hermes model' for available providers, or run 'hermes doctor' to diagnose config issues.z Warning: z) Falling back to auto provider detection. openrouterrrcustom)CANONICAL_PROVIDERS_PROVIDER_LABELSnonez Current model: z Active provider: c*g|]}|j|jfSr)slugtui_desc)ryrs rrz-select_provider_and_model..s!GGGaafaj)GGGrrcTddlm}i|}dtdtdtdtddf fd }|d }t |t r{|D]x}t |t s||dd d |dd p|d d |dd y|d }t |t r|D]}\}}t |t s||dd p|||dd p|d d |dd ~dtdtdtdtffd }i} |D]]} t | t s| dpd } | dpd } | r| spd| ddz} | dpd }|r |n #$r|} YnwxYw| | | dd | dd | dd | dd ||| || dd d| | <_| S)Nr)read_raw_configr? provider_keyrmrurct|pd}d|vrdSt|pd}t|pd}t|pd}|rS|f|||f||rU|f|||f|dSdS)Nrn${)rr1rr)r?rkrmrutemplateraw_api_key_refss r _record_rawzRselect_provider_and_model.._named_custom_provider_map.._record_rawsE 7=b))//11H8##tzr??((**D|1r2288::L $$**,,E  M ++TZZ\\OXFFF ++TZZ\\5,A8LLL  ++\-?-?-A-A,CXNNN ++!''))518  rcustom_providersrn default_modelr`clt|pd}t|pd}t|pd}||f|f||f|ffD]}|dr|vr |cSdS)Nrnrrr1r)r?rkrmname_lcpkey_lcidentityros r _lookup_refzRselect_provider_and_model.._named_custom_provider_map.._lookup_ref9s$*"oo++--3355G,,"--3355;;==G $$**,,E%  %   6 6 A;68/?#?#?+H55552rrcustom:r-key_envapi_mode)r?rrur{rmr|rk api_key_ref) rrjrrrrrrr1rrB)rrjraw_cfgrpraw_list raw_entry raw_providersraw_keyrxcustom_provider_maprr?rrrkror[r]rZs @r_named_custom_provider_mapz=select_provider_and_model.._named_custom_provider_maps555555.0!/##              2;;122 h % % %   !)T22 MM&"--MM'2..: }}_b99MM)R00  K00 mT * * &3&9&9&;&;  "!)T22 MM&"--8MM'2..: }}_b99MM)R00  c  S S      !44S99  EeT** IIf%%+2244D *--3::<(>   ( (  $ $#"s JJ&%J&r?rhttps://http://r —  (r ← currently activer)rbz$Custom endpoint (enter URL manually)rq) remove-customzRemove a saved custom provider) aux-configzConfigure auxiliary models...)cancelzLeave unchangedcg|]\}}|Srrryrrs rrz-select_provider_and_model..s'''81e'''rr r No change.r ai-gatewaynousrV openai-codex qwen-oauthgoogle-gemini-cli copilot-acpcopilotryzyWarning: the selected saved custom provider is no longer available. It may have been removed from config.yaml. No change.r anthropic kimi-codingstepfunbedrock azure-foundry)geminideepseekxaizaikimi-coding-cnminimax minimax-cnkilocode opencode-zen opencode-goalibaba huggingfacexiaomiarceenvidia ollama-cloud)rbrr)1rrZr[r\rr]rSr3hermes_cli.providersr^rrrr8rxrrhermes_cli.modelsrcrdrrrBrstriprr+rbool_prompt_provider_choice_aux_config_menu_model_flow_openrouter_model_flow_ai_gateway_model_flow_nous_model_flow_openai_codex_model_flow_qwen_oauth_model_flow_google_gemini_cli_model_flow_copilot_acp_model_flow_copilot_model_flow_customr,_model_flow_named_custom_remove_custom_provider_model_flow_anthropic_model_flow_kimi_model_flow_stepfun_model_flow_bedrock_model_flow_azure_foundry_model_flow_api_key_provider_clear_stale_openai_base_url)&r r\rSr3r^config current_modelconfig_providerreffective_providercompatible_custom_providersr active_defwarningrArcrdprovider_labels active_label all_providersr_custom_provider_mapr provider_infor?r short_url saved_model model_hintordered default_idxr_has_saved_custom_list provider_idxselected_providerr[r]rZs& @@@rrWrWsy  ;::::: []]FJJw''M-&&9%)))R88 !0[MO 7##I)T""4#-- 33 K29%@AAKV#B"A&"I"I FV##**  JJ{ # # '   !]FF%7  PgPPP Q Q Q ~ %%f--FF   !V++++C00T'TTTUUUFFFFFF  --0A"B"BGGGGGGGG+,,O:@L?&&vv666fL GGG 0 0 0111 / / /000 GGGHG3FGGGMi#4T#s(^0C+Di#i#i#i#i#i#i#i#X65388::II]V$ ,$$Z44< NNN ! **955  %&&&&& s D**E/&EEcddlm}m}m}|}|di}t |t r<|dpd}nd}|dks|sdS|d}|rB|ddtt|d krd |dd d nd |d dSdS) aQRemove OPENAI_BASE_URL from ~/.hermes/.env if the active provider is not 'custom'. After a provider switch, a leftover OPENAI_BASE_URL causes auxiliary clients (compression, vision, delegation) with provider:auto to route requests to the old custom endpoint instead of the newly selected provider. See issue #5161. r)r3r4rSrmrrnrbNrrrz.Cleared stale OPENAI_BASE_URL from .env (was: z...)r) rr3r4rSrrrr1rrr+)r3r4rSrrr stale_urls rrrs)MLLLLLLLLL +--C$$I)T""MM*--3::<<BBDD88 /00I ("--- 9~~"" RYss^ Q Q Q QN)NNN       r))visionVisionzimage/screenshot analysis) compression Compressionzcontext summarization) web_extractz Web extractzweb page summarization)session_searchzSession searchzpast-conversation recall)approvalApprovalzsmart command approval)mcpMCPzMCP tool reasoning)title_generationzTitle generationzsession titles) skills_hubz Skills hubzskills search/install _AUX_TASKStask_cfgcPt|tsdSt|dpd}t|dpdpd}t|dpd}|rM|ddddd}d |d |rd |ndzS|dkr d|rd |ndzS|r|d |S|S) z;Render the current aux config for display in the task menu.r_rrnrrmrrrzcustom (r · )rrrrr1rBr)rrrrmshorts r_format_aux_currentrsC h % %v8<< ++1r2288::H8<< ++5v66<<>>H&H  W%%+ , , 2 2 4 4EG  R0088BGGNNsSS"%"""&EnUnnn2FF658b99 (''''' Orrnrmrrutaskrruc<ddlm}m}|}|di}t |t si}||d<||i} t | t si} | ||<|| d<|pd| d<|pd| d<|pd| d<||d S) uPersist an auxiliary task's provider/model to config.yaml. Only writes the four routing fields — timeout, download_timeout, and any other task-specific settings are preserved untouched. The main model config (``model.default``/``model.provider``) is never modified. rrS save_config auxiliaryrrnrmrruN)rrSrrrr) rrrmrrurSrrauxrs r_save_aux_choicer%s;::::::: +--C ..b ) )C c4 K NN4 $ $E eT " "D  E*[bE'N BE*}"E)Krcddlm}m}|}|di}t |t si}||d<d}t D]\}}}||i}t |t si}|||<d} |ddvrd|d<d} d D]} || rd || <d} | r|d z }|||S) zDReset every known aux task back to auto/empty. Returns number reset.rrrFr)Nrnr_r_Trrnr)rrSrrrrrr) rSrrrcountr_name_descrchangedfields r_reset_aux_to_autorEs,:::::::: +--C ..b ) )C c4 K E(eUtR((%&& ECI 99Z (: : : &E* G5  Eyy !e    QJEK Lrcddlm} |}t|dtr|dini}t t dt t dt dt dt d t d t t d tDd z}t d tDdz}g}tD]\}}}t||tr||ini} t| } | |d|zdz || } | || f| d| dtd|Dd} | dS|| d} | dkrdS| dkrCt}|rt d|dnt dt ct| s)uTop-level auxiliary-model picker — choose a task to configure. Loops until the user picks "Back" so multiple tasks can be configured without returning to the main provider menu. rrRTru( Auxiliary models — side-task routingz@ Side tasks (vision, compression, web extraction, etc.) defaultu@ to your main chat model. "auto" means "use my main model" —z> Hermes only falls back to a lightweight backend (OpenRouter,z< Nous Portal) if the main model is unavailable. Override az@ task below if you want it pinned to a specific provider/model.c3<K|]\}}}t|VdSrwr+)ryrr?s rr{z#_aux_config_menu..zs.>>ZQas4yy>>>>>>rr!c3<K|]\}}}t|VdSrwr)ryrdescs rr{z#_aux_config_menu..{s.>>ZQ4s4yy>>>>>>rr(r) __reset__zReset all to auto)__back__Backcg|]\}}|Srrrs rrz$_aux_config_menu..s + + +xq%U + + +rrNrrzReset z auxiliary task(s) to auto.z-All auxiliary tasks were already set to auto.)rrSrrrrrrrljustrrr_aux_select_for_task)rSrrname_coldesc_colentriestask_keyr?rrrJrr!rrs rrrcs .-----+"kmm*4SWW[5I5I4*P*PXcggk2&&&VX  8999  PQQQ TUUU NOOO LMMM PQQQ >>:>>>>>B>>:>>>>>B)+$. . . HdD0:3778;L;Ld0S0S[swwx,,,Y[H)(33Gzz(++ZcDj3.>-E-Eh-O-OZQXZZE NNHe, - - - -9:::,---% + +7 + + +Q    ; Fcl1o *   F +  "$$A G=q===>>>>EFFF GGG S!!!W+"rcddlm}ddlm}|}t |dt r|dini}t |t r|ini}t|dpdpd}t|dpd}t|d pd}tfd tD} || } n+#t$r} td | g} Yd } ~ nd } ~ wwxYwg} |dkr|sdnd} | dd| gf| D]}|dd}|dp|}|dd}|dpg}|rd|dnd}||kr|sdnd}| ||||t|f|rdnd}| dd|gf| ddgfttd| dt|tt!d| Dd}|d S| |\}}}|dkrd S|dkr(t#ddddt| d d S|dkrt%|d St'|||d S)!uiPick a provider + model for a single auxiliary task and persist it. Uses ``list_authenticated_providers()`` to only show providers the user has already configured. This avoids re-running OAuth/credential flows inside the aux picker — users set up new providers through the normal ``hermes model`` flow, then route aux tasks to them here. rrR)list_authenticated_providersrrr_rmrnrc30K|]\}}}|k |VdSrwrryrr?rrs rr{z'_aux_select_for_task..-LL,#tQt  LLr)current_providerz*Could not detect authenticated providers: Nu ← current__auto__zauto (recommended)rgr? total_modelsmodelsrz models __custom__zCustom endpoint (direct URL)rrz Configure u — current: cg|]\}}}| Srrrs rrz(_aux_select_for_task..s"D"D"D[Qq5"D"D"Drrrrmrruz: reset to auto.)rrShermes_cli.model_switchr rrrrr1nextrr7rrrrrr_aux_flow_custom_endpoint_aux_flow_provider_model)rrSr rrrrrcurrent_base_url display_namer`rAr  auto_markerrrgr?totalrrr} custom_markerr!_labels` rrrs.-----DDDDDD +--C&01E1Et&L&L T#''+r " " "RTC$.swwt}}d$C$CKswwtR   H8<< 33=v>>DDFFP& W--344::<.rrzNo curated model list for .z;Enter a model slug manually (blank = use provider default):zModel: Nrnrpricingrr: rz (provider default model))rr%rr&rrr7rrrr1rrr) rr"r#rr%r&rr* model_listrselecteds ` rrrs877777::::::LLLL*LLLdSSLG**=99?R n%%J  ;=;;;<<< KLLL  ""((**CC!8,    GGG FF 9"** mW      ,    FTMR "....K >>>>H>>????? IIIIIJJJJJs# A AA!B((C  C cddl}tfdtD}t|dpd}t|dpd}t t d|t dt  |rd |d nd }t|}n&#ttf$rt YdSwxYw|p|}|st d dS |rd |d nd}t|} n&#ttf$rt YdSwxYw| p|} |d} n&#ttf$rt YdSwxYwtd| || | dd dd d} t |d| d| rd| ndzdS)zHPrompt for a direct OpenAI-compatible base_url + optional api_key/model.rNc30K|]\}}}|k |VdSrwrrs rr{z,_aux_flow_custom_endpoint..rrrrnrmz Custom endpoint for zH Provide an OpenAI-compatible base URL (e.g. http://localhost:11434/v1) Base URL [rz Base URL: zNo URL provided. No change.zModel slug (optional) [zModel slug (optional): z0API key (optional, blank = use OPENAI_API_KEY): rbrrrrz : custom (rr) getpassrrrrr1rrrrrrBr) rrr1rrr url_prompturl model_promptrmrurs ` rrrsNNNLLLL*LLLdSSL8<< 339r::@@BB W--344::<E E c^ddlm}m}m}ddlm}m}|d}|stdtdt ddl}|d } n&#ttf$rtYdSwxYw| std dS|d| td tdd l m } m} | d } | dd } || || }|r||ddlm}m}|}|d}t%|t&s |rd|ini}||d<d|d<t(|d<d|d<|||td|ddStddS)z5OpenRouter provider: ensure API key, then pick model.rr%_save_model_choicedeactivate_providerr2rtz!No OpenRouter API key configured.z&Get one at: https://openrouter.ai/keysNz)OpenRouter API key (or Enter to cancel): Cancelled.API key saved.) model_idsr&T force_refreshrar)rrmr rrchat_completionsr|Default model set to: z (via OpenRouter)r)rr%r?r@rr3r4rr1r1rrrrCr&rSrrrrr\)rrr%r?r@r3r4rur1rrCr&openrouter_modelsr*r-rSrrrms rrrbs @???????m011G  1222 6777   NNN//"MNNTTVVCC!8,    GGG FF   ,    F+S111  EEEEEEEE! 555'&|4HHHG&&H8$$$ ?>>>>>>>kmm  %&& !*/7Y&&RE CL(j/j.j C BxBBBCCCCC ls +A99BBc|ddlm}m}m}ddlm}m}|d}|stdtdtdt ddl}|d  } n&#ttf$rtYdSwxYw| std dS|d| td tdd l m } m} | d } | dd } || || }|r||ddlm}m}|}|d}t%|t&s |rd|ini}||d<d|d<t(|d<d|d<|||td|ddStddS)zIVercel AI Gateway provider: ensure API key, then pick model with pricing.rr>r2AI_GATEWAY_API_KEYz(No Vercel AI Gateway API key configured.z^Create API key here: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai-gateway&title=AI+Gatewayz/Add a payment method to get $5 in free credits.Nz)AI Gateway API key (or Enter to cancel): rArB)ai_gateway_model_idsr&TrDrr)rrmr rrrFr|rGz (via Vercel AI Gateway)r)rr%r?r@rr3r4rr1r1rrrrKr&rSrrrrr[)rrr%r?r@r3r4rur1rrKr& models_listr*r-rSrrrms rrrs @???????m011G  8999 nooo ?@@@   NNN//"MNNTTVVCC!8,    GGG FF   ,    F+S111  PPPPPPPP&&T:::K&&|4HHHG&&='H8$$$>>>>>>>>kmm  %&& !*/7Y&&RE CL(j/j.j C IxIIIJJJJJ ls+BB+*B+c ddlm}m}m}m}m}m}m} m} m } ddl m } m } m }m}ddlm}|d}|r|dsQt%dt% t'jt+|dd t+|d d t+|d d t+|d d t-t+|d dt+|dd pdt+|dd t-t+|dd}| || d | pi}||n#t.$rYnwxYwnE#t0$rt%dYd St.$r}t%d|Yd }~d Sd }~wwxYwd Sddlm}m}m}m}|}|st%dd S |d}n#t.$r}t=||o|j}t=||r | |ntA|}|rt%d|t%d t'jd d d d ddd d}| || dn)#t.$r}t%d|Yd }~nd }~wwxYwYd }~d St%d|Yd }~d Sd }~wwxYw|d}|}g} |r|||d\}} |s| st%d d Sd!}! |d}"|"r|"d"d!}!n#t.$rYnwxYw|rE|sCt%d#| r0dd$lm!}#|!p|#"d%}$t%d&|$d'd St%d(tG|d)||||| |!*}%|%rK||%|d+d!}&|d|&|d,}'t=|'tHrtI|'}(nBt=|'t@r+|'%rd-|'%i}(ni}(d|(d.<|%|(d-<|&r-|&%r|&"d%|(d+<n|(&d+d |(|d,<| d/r|d/d!|d0d!||t%d1|%d2||d St%d3d S)4z8Nous Portal provider: ensure logged in, then pick model.r) get_provider_auth_stater%r?_update_config_for_provider resolve_nous_runtime_credentialsr[r\ _login_nousro)r3rSrr4)prompt_enable_tool_gatewayr access_tokenz.Not logged into Nous Portal. Starting login... portal_urlN inference_url client_idscope no_browserFr4.@ ca_bundleinsecure)rTrUrVrWrXr4rZr[Login cancelled or failed.Login failed: )get_curated_nous_model_idsr&check_nous_free_tierpartition_nous_models_by_tierz,No curated models available for Nous Portal.i,)min_key_ttl_secondszSession expired: z&Re-authenticating with Nous Portal... zRe-login failed: zCould not verify credentials: T) free_tierz4No models available for Nous Portal after filtering.rnportal_base_urlz#No free models currently available.)DEFAULT_NOUS_PORTAL_URLrz Upgrade at z to access paid models.zShowing = curated models — use "Enter custom model name" for others.)rr*unavailable_modelsrTrrmr rrrrprGz (via Nous Portal)r)'rrNr%r?rOrPr[r\rQrorr3rSrr4hermes_cli.nous_subscriptionrRrrr Namespacerrr7 SystemExitrr^r&r_r`rrelogin_requiredrrdrr+rr1pop))rrr rNr%r?rOrPr[r\rQror3rSrr4rRstate mock_args _refreshedrAr^r&r_r`rCrreloginr  login_excr*rbrf_nous_portal_url _nous_staterd_urlr-rUcurrent_model_cfgrs) rrrs                       HGGGGG # #F + +E  .11 >???   *"4t<<%dOTBB!$ T::dGT22lE B BCCi66>$!$ T::gdJ>>??   I K #4V#< = = = ([]]0b **:6666        . / / / FF    (3(( ) ) ) FFFFF   +*,,I  <===00VLLL S),,E1E(23 (B(BP$$$C   +c++ , , , ; < < < 7$.#"&"$ ""     I'8'@AAAA 7 7 75)5566666666 7 FFFFF 4s44555-2'&v..G%$&&I%' (E(E w$) ) ) % % / DEEE --f55  F*/@"EE        3444  ? ? ? ? ? ? ?$?(?GGLLD ==== > > > `3y>>```'&#-# H8$$$ *b11 ##FM:::"JJw// ' . . .//II )3 / / 4E4K4K4M4M "$5$;$;$=$=>III & *' )  ,]0022 ,$1$8$8$=$=Ij ! ! MM*d + + +#w =* + + 1 N,b 1 1 1 N+R 0 0 0 F CxCCCDDD""6***** ls*CE-EE EEEEF2 F;FF G J>A$J9.I21J92 J<JJ9JJ9!J99J>#L'' L43L4cddlm}m}m}m}m}m}m}ddlm } |} | dr_tdttdtdtdt td  } n#ttf$rd } YnwxYw| d krtd t t!j} || |d dnE#t$$rtdYdSt&$r} td| Yd} ~ dSd} ~ wwxYw|} | dstddSn| dkrdSntdt t!j} || |d nE#t$$rtdYdSt&$r} td| Yd} ~ dSd} ~ wwxYwd} |}| dr| d}n#t&$rYnwxYw|s7 ddlm}|}| d}n#t&$rYnwxYw| |}|||}|r,|||d |td|ddStddS)z9OpenAI Codex provider: ensure logged in, then pick model.r)get_codex_auth_statusr%r?rO_login_openai_codexroDEFAULT_CODEX_BASE_URL)get_codex_model_idsr}u OpenAI Codex credentials: ✓ 1. Use existing credentials' 2. Reauthenticate (new OAuth login) 3. Cancel Choice [1/2/3]: r2z&Starting a fresh OpenAI Codex login...rT)force_new_loginr\Nr]z Login failed.3z/Not logged into OpenAI Codex. Starting login...ru)!resolve_codex_runtime_credentials)rSrrGz (via OpenAI Codex)r)rrvr%r?rOrwrorxhermes_cli.codex_modelsryrrrr1rrrrhrir7r)rrrvr%r?rOrwrorxryrrGrmrA _codex_token _codex_statusr _codex_creds codex_modelsr-s rrr sO<;;;;; " " $ $F zz+- /000  /000 7888 o  /006688FF!8,   FFF  S== : ; ; ; GGG $.00 ##%n5$(    2333   ,s,,--- +*,,F::k** o&&& s]] F ?@@@   *,,I   +<^+L M M M M    . / / / FF    (3(( ) ) ) FFFFF L --//   [ ) ) 8(,,Y77L        I I I I I I<<>>L'++I66LL    D '&LAAAL&&|=QQQH8$$$##N4JKKK DxDDDEEEEE lsr!B44C  C 1'DE5 E>EE6%GH8 HHH$4I I&%I&,%J JJqwen3-coder-plusz qwen3-codercddlm}m}m}m}m}m}ddlm}|} | dstdtd| d} | rtd| | d r%td | d d Sd } |d } || d| d} n#t$rYnwxYw| stt} |p | r| dnd} || | }|r,|||d|td|dd Stdd S)zAQwen OAuth provider: reuse local Qwen CLI login, then pick model.r)get_qwen_auth_status resolve_qwen_runtime_credentialsr%r?rODEFAULT_QWEN_BASE_URLfetch_api_modelsr}zNot logged into Qwen CLI OAuth.zRun: qwen auth qwen-oauthrzExpected credentials file: rr'NT)refresh_if_expiringrurrrrrGz (via Qwen OAuth)r)rrrr%r?rOrrrrrr7r_DEFAULT_QWEN_PORTAL_MODELS)_configrrrr%r?rOrrrrrrr r-s rrr s322222 ! ! # #F ::k " " /000 )***JJ{++  = ; ;; < < < ::g   3 1FJJw//11 2 2 2F 00TJJJ!!% "2E*4EFF      3122LV Kq 9KG&&vWEEEH8$$$##L2GHHH BxBBBCCCCC ls<$C!! C.-C.cjddlm}m}m}m}m}m}ddlm}ttdtdtdtdt td } n'#ttf$rtd Yd SwxYw| d vrtd d S|} | d sK dd lm} m} | } | d| n*#t&$r}td|Yd }~d Sd }~wwxYw |d}|dd}|rtd|ntdn*#t&$r}td|Yd }~d Sd }~wwxYwt)|jdpg}|p |r|dnd}|||}|r,|||d|td|dd Stdd S)uGoogle Gemini OAuth (PKCE) via Cloud Code Assist — supports free AND paid tiers. Flow: 1. Show upfront warning about Google's ToS stance (per opencode-gemini-auth). 2. If creds missing, run PKCE browser OAuth via agent.google_oauth. 3. Resolve project context (env -> config -> auto-discover -> free tier). 4. Prompt user to pick a model. 5. Save to ~/.hermes/config.yaml. r)!DEFAULT_GEMINI_CLOUDCODE_BASE_URLget_gemini_oauth_auth_status(resolve_gemini_oauth_runtime_credentialsr%r?rO_PROVIDER_MODELSuH⚠ Google considers using the Gemini CLI OAuth client with third-partyz@ software a policy violation. Some users have reported accountzC restrictions. You can use your own API key via 'gemini' providerz" for the lowest-risk experience.z"Continue with OAuth login? [y/N]: rAN>r rr})resolve_project_id_from_envstart_oauth_flowT) force_relogin project_idzOAuth login failed: FrDrrnz Using GCP project: uT No GCP project configured — free tier will be auto-provisioned on first request.z&Failed to resolve Gemini credentials: rzgemini-3-flash-previewrrGz( (via Google Gemini OAuth / Code Assist)r)rrrrr%r?rOrrrrr1rrrragent.google_oauthrrr7r)rrrrrr%r?rOrproceedrrr env_projectrArrrr r-s rrr sO322222 GGG TUUU LMMM OPPP ./// GGG<==CCEEKKMM ' ( ll"" l ) ) + +F ::k " "  X X X X X X X X5577K  4K H H H H H    ... / / / FFFFF  88uMMMYY|R00   6*66 7 7 7 7 f     d?d>}|dkrd }n%#t6$rtd@|dAd }YnwxYw|r|||}|dB}t9|t:s |rdC|ini}||dB<dD|dE<| |dF<| r| |dG<|dHd |||t;||dB<tdI|dJ| dKn{|s| r ||dB}t9|t:s|rdC|ini}dD|dE<| |dF<| r| |dG<|dHd ||dB<tdLt?| | |pd||Md S)NzCustom endpoint: collect URL, API key, and model name. Automatically saves the endpoint to ``custom_providers`` in config.yaml so it appears in the provider menu on subsequent runs. rr?r@)r3rSrrrrnrpz0Custom OpenAI-compatible endpoint configuration:z Current URL: z Current key: NrrzAPI base URL [ze.g. https://api.example.com/v1r API key [optional Cancelled.zNo URL provided. Cancelled.rr Invalid URL: & (must start with http:// or https://)rc3 K|]}|vV dSrwr)ryh _url_lowers rr{z%_model_flow_custom.. s;  Zr) localhost 127.0.0.1z0.0.0.0z:11434z:8080z:5000z/v1z+ Hint: Did you mean to add /v1 at the end?z@ Most local model servers (Ollama, vLLM, llama.cpp) require it.z e.g. z Add /v1? [Y/n]: rrz Updated URL: )probe_api_models used_fallbackresolved_base_urlz)Warning: endpoint verification worked at zL/models, not the exact URL you entered. Saving the working base URL instead.rzVerified endpoint via probed_urlrz model(s) visible)z,Warning: could not verify this endpoint via z. Hermes will still save it.suggested_base_urlz8 If this server expects /v1 in the path, try base URL: z- If /v1 should not be in the base URL, try: rz Detected model: z Use this model? [Y/n]: z&Model name (e.g. gpt-4, llama-3-70b): z Available models: rz Select model [1-z] or type name: z8Context length in tokens [leave blank for auto-detect]: zDisplay name [,r000KzInvalid context length: u — will auto-detect.rmr rbrrrur|rG (via rzFEndpoint saved. Use `/model` in chat or `hermes model` to set a model.)context_lengthr?) rr?r@rr3rSrrrr1r1rrr,rrrrrrrr+r*isdigitrc_auto_provider_namerBr5rrrk_save_custom_provider) rr?r@r3rSr current_url current_keyrr1ru effective_url effective_key _looks_local_add_v1rrS suggested model_namedetected_modelsconfirmr<mpickcontext_length_str default_namerrrrm _caller_modelrs @rrrX s HGGGGGGGIIIIIIIIII- 1228bK- 0117RK <===/ - --...6 4 BQB444555 GGG  R[M,M R R R  %''  // S;N BQB%//J S S S  %''  x ( n K +,,,+ M  # #$; < < SmSSSTTT*{M %%c**0022JRLJ//66  <=== QRRR 6 ,,S11666777 0117799??AAGG!8,   GGG  & & &)0055=M )( 3M33 4 4 4 222222  ]M : :E yy!!Seii0C&D&DS  S>Q8R S S S   12  %$H 8   (  CUYY|%<%< C CEIIh''-2.. C C C     *599\;R;R * * *    99) * * S23I!!%(( SZyZZQiQQRRRJii))/RO   1 $ $ ;q'9;; < < <788>>@@FFHHG***,Q/ "#KLLRRTT  ! !A % % ' ( ( (!/155 ' '1oQoo!oo&&&&KS%9%9KKKegg ||~~ "!s4yy"H"H"H"HC4H4H"H"H"H"H"H,SYY];  "! GHHNNPPJ" F  %''  +=99 ?l???@@FFHHXL x ( nN " " "**333e$$e$$N ""!% " " " W-?WWW X X X!NNN "&X:&&&kmm  %&& !*/7Y&&RE CL$j)j  -,E)  *d### C u++w IzIIIIIJJJJ  "w "   ! ! ! 7++ -.. P:GOY 66RM$, j!$1 j!  5'4M) $*d+++'w VWWWb%  sK=A%C## DD=3H11II$G!W W*)W*2AYY('Y(clddl}|ddddd}|dd|}|dd}d|vsd |vrd |d }n1d |vrd |d }n|}|S)zGenerate a display name from a custom endpoint URL. Returns a human-friendly label like "Local (localhost:11434)" or "RunPod (xyz.runpod.io)". Used as the default when prompting the user for a display name during custom endpoint setup. rNrrnrrz/v1/?$rrzLocal (rrunpodzRunPod ()rerBrsubr-r capitalize)rrcleanr?s rrr sIII   Z , , 4 4Y C C J J3 O OE FF9b% ( (E ;;s  A DdkT11     TZZ\\ ! !!$!!!   Krct|ddpd}|r|St|ddpd}|r=t|ddpdsd|dSt|pdS)zDReturn the value that should be persisted for a custom provider key.r}rnr{rurm})rrr1)rresolved_api_keyr}r{s r%_custom_provider_api_key_config_valuer3 sm'' r::@bAAGGIIK-##Ir228b99??AAG!s=,,Y;;ArBBHHJJ! W    %2 & & , , . ..rcddlm}m}|}|dpg}t |t sg}|D]} t | t r| ddd|dkrxd} |r | d|kr|| d<d } |r=|r;| d i} t | t si} d |i| |<| | d <d } | r||d<||d S|st|}||d } |r|| d<|r|| d<|r |r |d |ii| d <| | ||d<||td|dd S)uSave a custom endpoint to custom_providers in config.yaml. Deduplicates by base_url — if the URL already exists, updates the model name and context_length but doesn't add a duplicate entry. Uses *name* when provided, otherwise auto-generates from the URL. rrrqrrnrFrmTrrN)r?rruu% 💾 Saved to custom providers as "z" (edit in config.yaml)) rrSrrrrrrrrr) rrurmrr?rSrrr`rr models_cfgs rrr@ s#;::::::: +--C*++1rI i & &  eT " " uyyR'@'@'G'G ( ( __S ! !("("G 7++u44!&g  "YYx44 !*d33$!#J%5~$F 5!",h !*3&' C   FF -"8,,x 0 0E#"i g FF #3^"DEh U'CK O$ O O OPPPPPrcddlm}m}ddlm}m}m}m}ddlm }ddl } | di} t| trd| ddkrKt| d d pd } t| d d pd } nd } d } |d pd } ttd tdttdtdtdtdt| rtd| | r| dkrdnd}td|| rtd| dddt t!d| pdd}n'#t$t&f$rtdYdSwxYw|p| d}|std dS|d!std"|d#dSt | d$| r | dddznd%d}n'#t$t&f$rtdYdSwxYw|p| }|std&dSttd'|||}t/|j}|jpd }|r^|dkrdnd}td(||jrtd)|jd*|r td+t7|d,ntd-|jttd.td/td0td1td2 | d3krd4nd5}t!d6|d7p|}n'#t$t&f$rtdYdSwxYw|d4krd3nd}td }|rStd8t9|dd9d:;D]\}}td<|d=d>|t7|d9kr#td?t7|d9z d@t t!dA|p|dd}n'#t$t&f$rtdYdSwxYw|s |p|d}n|rQd:t=|cxkr!t?t7|d9krnn|t=|d:z }nW|}nT t!dB|pdCd}n'#t$t&f$rtdYdSwxYw|p|}|stdDdS| |||}|d ||}| d} t| ts | rdE| ini} | |d<d| d<|| d <|| d <|| dE<|r|| dF<|||t| |d<|dGr |dGd |dHr |dHd |dkrdnd}ttdItdJ|tdK|tdL||rtdM|dNdOntdPtdS)Qu.Azure Foundry provider: configure endpoint, API mode, API key, and model. Azure Foundry supports both OpenAI-style (``/v1/chat/completions``) and Anthropic-style (``/v1/messages``) endpoints. The wizard auto-detects the transport and available models when possible: * URLs ending in ``/anthropic`` → Anthropic Messages API. * Successful ``GET /models`` probe → OpenAI-style + populates a picker with the returned deployment / model IDs. * Anthropic Messages probe fallback when ``/models`` fails. * Manual entry when every probe fails (private endpoints, etc.). Context lengths for the chosen model are resolved via the standard :func:`agent.model_metadata.get_model_context_length` chain (models.dev, provider metadata, hardcoded family fallbacks). rrr3r4rSr) azure_detectNrmrrrrnr|AZURE_FOUNDRY_API_KEYzAzure Foundry Configurationr5z9Azure Foundry can host models with either OpenAI-style orz6Anthropic-style API endpoints. Hermes will probe yourz6endpoint to auto-detect the transport and the deployedzmodels when possible.z Current endpoint: rFz OpenAI-stylezAnthropic-stylez Current API mode: z Current API key: rrzAPI endpoint URL [z5e.g. https://your-resource.openai.azure.com/openai/v1rrrz$No endpoint URL provided. Cancelled.rrrrrequiredzNo API key provided. Cancelled.u;◐ Probing endpoint to auto-detect transport and models...u✓ Detected API transport: z (ru ✓ Found z# deployed model(s) on this endpointu⚠ Auto-detection incomplete: z7Select the API format your Azure Foundry endpoint uses:z. 1. OpenAI-style (POST /v1/chat/completions)z: For: GPT models, Llama, Mistral, and most open modelsz) 2. Anthropic-style (POST /v1/messages)z9 For: Claude models deployed via Anthropic API formatanthropic_messagesr~rzAPI format [1/2] (r8z"Available models on this endpoint:r)rBrz>2rz ... and z' more (type name manually if not shown)z+Pick by number, or type a deployment name [zModel / deployment name [ze.g. gpt-5.4, claude-sonnet-4-6z"No model name provided. Cancelled.r rrrrpu✓ Azure Foundry configured:z Endpoint: z API mode: z Model: z Context length: rz tokenszA Context length: not auto-detected (will fall back at runtime))!rr?r@rr3r4rSr hermes_clirr1rrrrrrr1rrrr,detectrrr|reasonr+r*rrcrlookup_context_length)!rrr?r@r3r4rSrrr1rrcurrent_api_modecurrent_api_key_lblrrrur detectiondiscovered_modelsr|rIdefault_choice mode_choiceeffective_modelr<midrrctx_lenrrms! rrrw s "HGGGGGGGYYYYYYYYYYYY''''''NNN 7B''I)T""y}}Z'@'@O'S'Sy}}Z<<BCCy}}Z<<BCC#m$;<<BO GGG '((( (OOO GGG EFFF BCCC BCCC !""" GGG9 7%577888-!15G!G!G~~M^ +T++,,,? =_RaR%8===>>> GGG q!1!l5l q q q  %''  x ( n1!199#>>M  4555  # #$; < < SmSSSTTT GGG// [V+e33J [ [ [  %''  x ( n.M  /000 GGG GHHH##M=AAI#' (8#9#9&,"HV'/3E'E'E^^K\  9Z99:::   / -)*--- . . .  \ Zs#455ZZZ [ [ [ B 0@BBCCC  GHHH >??? JKKK 9::: IJJJ $48L$L$LSSRUN H^ H H HIIOOQQcUcKK!8,    . ! ! ! FF ,7#+=+=''CU GGGO6 2333 1#2# 6a@@@ & &FAs $q$$$s$$ % % % %  ! !B & & cs#455:ccc d d d  hm>cO`abOchhhegg D"8,    . ! ! ! FF  #+C/@/COO \\^^ #SYY Q Q Q Q#c:K6L6Lb2Q2Q Q Q Q Q Q/D A >OO"OO cM,^=^cccegg J"8,    . ! ! ! FF %5   233300 G N*M::: +--C GGG  E eT " "&+3E""G 'E*%E* E*&E)*")K5kkF7O}&''.("---}%&&-',,,#+/A#A#AGXJ GGG )*** 0 0 0111 - - -... 2 2 2333S 7W77778888 QRRR GGGGGsZ!'G G-,G-:J J21J2-1P QQ,-T T>=T>7'W XXc ddlm}m}|}|dpg}t |t r|st ddSt dg}|D]}t |tr|dd}|d d }|d d d d  d } | |d| d| t|| d ddl m } | d|Dddddddd} | } ddlm} | t n#t"t$t&t(jf$rt-|dD]\}}t d|d|t  t/dt1|d}|rt5|dz nd} n#t6t8t:f$rd} YnwxYwYnwxYw| | t1|krt d dS|| }||d<||t |tr|ddnt|}t d!|d"dS)#z=Let the user remove a saved custom provider from config.yaml.rrrqzNo custom providers configured.NzRemove a custom provider: r?unnamedrrnrrrrrCancel TerminalMenucg|]}d|Srr)ryr<s rrz+_remove_custom_provider..W s ' ' '!X!XX ' ' 'r-> )fg_redbold)rTFzSelect provider to remove: cursor_index menu_cursormenu_cursor_stylemenu_highlight_style cycle_cursor clear_screenr flush_stdinrrrr7rru ✅ Removed "z" from custom providers.)rrSrrrrrrrBrrrsimple_term_menurshowhermes_cli.curses_uir ImportErrorNotImplementedErrorr3r5rr*rr+r1rcr5rrrk)rrSrrr`r;rr?r3rrmenur!rr<r<rremoved removed_names rrr< s^:::::::: +--C*++1rI i & &i /000 '(((G'' eT " " '99VY//D))J++C J33;;IrJJQQRUVVI NNd22i222 3 3 3 3 NN3u:: & & & & NN8111111| ' 'w ' ' '0!,.    iikk444444   ,gz7Q Rgq)) ! !DAq -q--A--   6S\\66677==??C"%/#c((Q,,4CC-x8   CCC  {cS^^++ lmmC  G'CK*4Wd*C*CU FI&&&W @, @ @ @AAAAAs9:AFAI,AH54I5IIIIIc p ddlm}m}ddlm}m}ddlm}|d}|d}|dd} |d d} |d d} |d d|d pd } | s"| r tj | d} t|| } td |td|rtdttd|| |d| pd}|rd}r|vr|}tdt|d ddlm}fd|Ddgz}|||dddddd|d }|}dd!lm}|t||t|krtd"dS||}n#t*t,t.t0jf$r)t5|d#D]&\}}|krd$nd}td%|d&||'td%t|d#zd't t7d(t|d#zd) }|std"YdSt9|d#z }|dks|t|krtd"YdS||}n.#t:t<t>f$rtd*YYdSwxYwYnwxYwr_td+ t7d,d) p}n#t<t>f$rtd*YdSwxYwtd- t7d. }n'#t<t>f$rtd*YdSwxYw|std/dS|||}|d }tA|tBs |rd0|ini}||d <| r2| |d1<|"dd|"d dnd2|d1<||d<| r| |d <|dd}|r||d<n|"dd|||| r|}|d3}tA|tBr|| }tA|tBr||d4<| r. sGIJa;&6&6"Q""""HHHrz Cancelrfg_greenrr TFzSelect model from :rrrArrrrz. Cancelr7rrz%Could not fetch models from endpoint.z Model name [z@Could not fetch models from endpoint. Enter model name manually. Model name: zNo model specified. Cancelled.r rrbr`rru ✅ Model set to: z Provider: rr)%rr?r@rrSrrrrr1r8r9rrindexr+rrrrrrrr3r5rr*rrcr5rrrrrkrr) rrr?r@rSrrr?rr|rur{rkconfig_api_keyrrr menu_itemsrr!rrr<rsuffixrrrmcustom_api_mode providers_cfgprovider_entryrs @rrr| sHGGGGGGG::::::::222222  DZ(H  R00H 2..G 2..G##GR00K!%%n55;BBDDL .w.*.."--:='RRN       # # #$$$, *[**+++ GGG ()))  3!TF B  4;&00 ,,{33K 0s6{{000111+  5 5 5 5 5 5NT J <(!"6%2!"24222   D))++C 8 8 8 8 8 8 KMMM GGG{cS[[00l###JJ0':;UV   !&!,, - -1)*k)9)9r+1+++6++,,,, 0s6{{Q000 1 1 1 GGG =Vq===>>DDFF,'''FF#hhl77cS[[00,'''FF#C[  18<   n%%%   &  5666 >k>>>??EEGGV;JJ!8,    . ! ! ! FF  PQQQ ~..4466JJ!8,    . ! ! ! FF   2 3 3 3 Fz""" +--C GGG  E eT " "&+3E""G .(j *d### )T""""$j$j  .-E) #'' B77O$+j *d###KDkmm ,, mT * * !*..|<N9-83~'9'9)R'H'H'NB#O#O#U#U#W#W807N9-#0K  C    h CCC - - -... -$ - -( - - -.....soBH HB M!!AL0*:L0'L0/M!0&MM!MM! M!6'N OO!O77 PPrc|d}t|trHt|dpdSdS)Nagentreasoning_effortrn)rrrrr1r)r agent_cfgs r_current_reasoning_effortr sc 7##I)T""L9==!344:;;AACCIIKKK 2reffortcr|d}t|tsi}||d<||d<dS)Nrr)rrr)rrrs r_set_reasoning_effortr sD 7##I i & &$ #w$*I !!!rc ttd|DdfdD}|fdD|sdSfdd}d}d krt |}n6|vr|}nd |vr|d }nd } d d lm}fd |D}|d||d||||dddddd}| } d dl m } | | dSt| t |kr|| S| t |krd SdS#tttt jf$rYnwxYwtdt%|dD]#\} } td| d| $t |} td| dzd|td| dzd|t t'd| dzd}|sdSt+|} d| cxkr| krnn || dz S| | dzkrd S| | dzkrdStd| dzn2#t,$rtdYnt.t0f$rYdSwxYw)zOPrompt for a reasoning effort. Returns effort, 'none', or None to keep current.c3K|]X}t|#t|VYdSrwrt)ryrs rr{z5_prompt_reasoning_effort_selection..* sk  ,2VARARATAT KK     % % ' '      r)minimallowmediumhighxhighcg|]}|v| Srr)ryrdedupeds rrz6_prompt_reasoning_effort_selection../ s#III&v7H7Hv7H7H7Hrc3$K|] }|v|V dSrwr)ryrcanonical_orders rr{z5_prompt_reasoning_effort_selection..0 s-QQf63P3P63P3P3P3PQQrNc|kr|dS|S)Nu ← currently in user)rcurrent_efforts rr!z2_prompt_reasoning_effort_selection.._label4 s" ^ # #444 4 rzDisable reasoningzSkip (keep current)rer rrc,g|]}d|Srr)ryrr!s rrz6_prompt_reasoning_effort_selection..H s*???V(v((???rrrrr TFzSelect reasoning effort:rrrrr!r7z] (default: keep current): r9r:)rrfromkeysrOr+r rrrrrrrrrr3r5rr*rr1rcr5rr)effortsr(r disable_label skip_labelrrr;rr!rr<rrrGr!r&r$s ` @@@r"_prompt_reasoning_effort_selectionr.' s   6=     G DOIIIIOIIIG NNQQQQQQQQQQ t (M&J'll 7 " "mmN33 W  mmH--   111111????w???+M++,,,(J(()))| $2!.,    iikk444444 ;4  W  3<  #g,,  6t ,gz7Q R      $%%%w**** 6 (1((v(()))) G A 'q1u ' ' ' '((( $q1u $ $ $ $%%% GGG JAJJJKKQQSSF tf++CC}}}}1}}}}}sQw''a!e||va!e||t +AE++ , , , , + + + ) * * * * *!8,   44 sOA=F(F)F"F%$F%:*J<&)J< J< J<&J<<K+K+*K+c@ ddlm}m}m}m}m}ddlm}m}m } ddl m } m } m } m} m}d}||}||}|dd}|dd}|st#d t#t#d t#d t#d t#d t#dt#t#dt#dt#dt#dt# t%d}n&#t(t*f$rt#YdSwxYw|dkrz ddlm}|}|r*|d|t#dt#nt#ddSn #t0$r}t#d|Yd}~dSd}~wwxYw|dkr ddl}|d}n&#t(t*f$rt#YdSwxYw|st#ddS ddlm}||\}}|st#d|dSn#t6$rYnwxYw|d|t#d t#nt#ddS||}|dd}|dd}nV|d!vrt#d"|dd#d$|d%n%|d&krt#d'nt#d(t#|j}| |}|r d)|Dn | ||}||||*p|} |r-d+|D}!t#d,t;|!d-n5t=j|g}!|!rt#d.t#d/|!r||!| 0}"n< t%d1}"n#t(t*f$rd}"YnwxYw|"r;||"||*p|"}"|}#t?|#}$| |"||*}%d}&|%r$t#d2|"d3tA|%|$4}&||"|}'|'d5}(tC|(tDs |(rd6|(ini}(|(|'d5<||(d7<||(d8<| |"||*|(d9<|&tG|'|&| |'|t#d:|"d;|j$d%|%r-|&d|&dSdSdSt#d?dS)@zAGitHub Copilot flow using env vars, gh CLI, or OAuth device code.r)ror%r?r@$resolve_api_key_provider_credentials)r4rSr)rfetch_github_model_cataloggithub_model_reasoning_effortscopilot_model_api_modenormalize_copilot_model_idrrurnrz.No GitHub token configured for GitHub Copilot.z Supported token types:uL → OAuth token (gho_*) via `copilot login` or device code flowuI → Fine-grained PAT (github_pat_*) with Copilot Requests permissionu= → GitHub App token (ghu_*) via environment variableuA ✗ Classic PAT (ghp_*) NOT supported by Copilot APIz Options:z1 1. Login with GitHub (OAuth device code flow)z 2. Enter a token manuallyr|z Choice [1-3]: Nr)copilot_device_code_loginCOPILOT_GITHUB_TOKENz Copilot token saved.z Login cancelled or failed.z Login failed: r~z Token (COPILOT_GITHUB_TOKEN): Cancelled.)validate_copilot_token ✗ z Token saved.) GITHUB_TOKENGH_TOKENz GitHub token: ru ... ✓ (rz gh auth tokenu* GitHub token: ✓ (from `gh auth token`)u GitHub token: ✓cdg|]-}|d|dd.Srrnrryitems rrz'_model_flow_copilot.. s5BBB488D>>B$  BBBrcatalogrucg|]}||Srr)rymodel_ids rrz'_model_flow_copilot.. sGGG8hGhGGGr Found  model(s) from GitHub CopilotL ⚠ Could not auto-detect models from GitHub Copilot — showing defaults.? Use "Enter custom model name" if you do not see your model.rr rz supports reasoning controls.)r(rmr rrr|rGrrez"Reasoning disabled for this model.zReasoning effort set to: r)%rror%r?r@r0rr4rSrrrr1r2r3r4rrrr1rrhermes_cli.copilot_authr5r7r1r8rinference_base_urlr+rrr.rrrr?))rrror%r?r@r0r4rSrrr1r2r3r4rrrrurrGr5tokenrAr1new_keyr8validr effective_baserB live_modelsnormalized_current_modelr,r- initial_cfgr(reasoning_effortsselected_effortrrms) rrr s8KJJJJJJJJJK ,G 0 0 = =Eii 2&&G YYx $ $F K >???  ())) Z    YZZZ MNNN QRRR  l ABBB -... o  -..4466FF!8,    GGG FF  S== MMMMMM1133"N#95AAA2333GGGG8999F   .../// s]] !//*LMMSSUU%x0     n%%% JJJJJJ33G<< s.3..)))F     N17 ; ; ; " # # # GGGG . ! ! ! F44[AA))Ir**8R(( 1 1 1 DWRaR[DD6DDD E E E E  & & > ? ? ? ? ' ( ( ( /N((11G  7BBBBBB  g~ 6 6 #"        UGG{GGG  GZGGGHHHH%)+r::  U ^    S T T T** &>    ^,,2244HH!8,   HHH 1 & &      "kmm 2;??::        >x>>> ? ? ?@!.O 8$$$kmm  %&& !*/7Y&&RE CL'j*j22    j  & !# 7 7 7 C FxFFw|FFFGGG  E&((:;;;;;  EC/CCDDDDD  E E E E lsa,!EE10E1;A G G1G,,G1;+H''I  I !(J JJ!P88Q Qcddlm}m}m}m}m}m}m}ddlm } m } ddl m } m } ~d} || }|| }|dp|dpd}|d p|j}t!d t!d t!d t!d |t!d|t! || }n9#t"$r,}t!d|t!dYd}~dSd}~wwxYw|d p|}d} |d}|dd}n#t"$rYnwxYw| |}| |||p|}|r-d|D}t!dt%|dn5t'jdg}|rt!dt!d|r|||}n< t)d}n#t,t.f$rd}YnwxYw|st!ddS| |||p|}||| }|d}t1|t2s |rd|ini}||d<| |d<||d <d |d!<| ||t!d"|d#|jd$dS)%z4GitHub Copilot ACP flow using the local Copilot CLI.r)ror%r?r@$get_external_process_provider_statusr0-resolve_external_process_provider_credentials)r1r4rrresolved_commandcommandrrz? GitHub Copilot ACP delegates Hermes turns to `copilot --acp`.zB Hermes currently starts its own ACP subprocess for each request.zH Hermes uses your selected model as a hint for the Copilot ACP session.z Command: z Backend marker:  ⚠ z[ Set HERMES_COPILOT_ACP_COMMAND or COPILOT_CLI_PATH if Copilot CLI is installed elsewhere.NrnrurAcdg|]-}|d|dd.Sr=r>r?s rrz+_model_flow_copilot_acp..~s5OOOTOdhhtR((OOOrrErFrGrHrr rrmr rrFr|rGrr)rror%r?r@rUr0rVrr1r4rrSrrrJrr7r+rrr1rrrrr?)rrror%r?r@rUr0rVr1r4rSrrrrrWrNrrAcatalog_api_key catalog_credsrBrPr,r-rrms rrr>s;:::::::K ,G 1 1+ > >F %&&L&**Y*?*?L9ZZ ++Iw/IN KLLL NOOO TUUU *( * *+++ /~ / /000 GGG==kJJ  nsnn i     YYz**Infer the current StepFun region from the configured endpoint.rnzapi.stepfun.comchina international)r1r)r normalizeds r_infer_stepfun_regionrps8.b''))//11JJ&&w ?rregionc&ddlm}m}|dkr|n|S)Nr)STEPFUN_STEP_PLAN_CN_BASE_URLSTEPFUN_STEP_PLAN_INTL_BASE_URLrm)rrsrt)rqrsrts r_stepfun_base_url_for_regionru&sG W   &% ,rcddlm}m}m}m}ddlm}m}m}m } ddl m } d} || } | j r | j dnd} | j pd}d}| j D]&}||ptj|d}|rn'|st!d| jd| r dd l}|| d }n&#t(t*f$rt!Yd SwxYw|st!d d S|| ||}t!d t!n1t!d | jd|d ddt!d}|r ||ptj|d}|s`|d}t/|t0r6t3|dpd}t5|p| j}ddt9ddfddt9ddfg}g}|D]>\}}||kr|d||df'|||f?|dt?d|D}|||ddkrt!dd S||d}t9|}|r |||| ||}|r+|}t!dtA|d| jdn/tCj| g}|rt!d | jd!|r|||"}n< tEd#}n#t(t*f$rd }YnwxYw|r|||} | d}!t/|!t0s |!rd$|!ini}!|!| d<| |!d%<||!d<|!#d&d | | |t1|!|d<t!d'|d(| jdd St!dd S))z6StepFun Step Plan flow with region-specific endpoints.rror%r?r@rrrrnr_r`NrarArBrrbrrcrmrrnzInternational (rrmzChina (r)rrcg|]\}}|Srrrs rrz'_model_flow_stepfun..rs)P)P)PHAu%)P)P)PrrrrE model(s) from  APIz$ Could not auto-detect models from u, API — showing Step Plan fallback catalog.rr r rr|rGr)$rror%r?r@rr3r4rSrrrrrfr8rxrr?r1r1rrrrrrrprJrurrrr+rrrk)"rrror%r?r@r3r4rSrrrrr{rgrhrir1rL current_basercurrent_regionregion_choicesordered_regions region_keyr region_idxselected_regionrNrOr,r-rrms" rrr3s ZYYYYYYYYYYY222222K ,G-4-EMg&q))2G+1rLL&$}R((=BIb",=,=   E   6GL666777   !//W*M*M*MNNTTVV%x0     l### N7G , , ,"L " # # # GGG D7<DD<+;DDDEEE LR$}\22Qbi b6Q6Q HJJw'' i & & Hy}}Z88>B??EEGGL*<+U7;UVVN \,H,Y,Y\\\] D8AADDDENO+88 E  ' '  " "1ze3S3S3S&T U U U U  " "J#6 7 7 7 7/000()P)P)P)P)PQQJ_Z8;xGG l%j1!4O1/BBN5|^444""<@@K   KZKKKKKLLLL%)+r::   6w|666    **:]SSS ^,,2244HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL'j*j *d### Cu++w FxFFw|FFFGGGGG ls$.CC'&C'!M<<NNcddlm}m}m}ddlm}m}m}m} ddl m } d|d} |dpd} | rtd | d d d ntd | t dd l } | d  }n&#ttf$rtYd SwxYw|stdd S| d||} tdt| jdg}tdt#|d|r|||}n< t%d }n#ttf$rd }YnwxYw|r|||}|d}t'|t(s |rd|ini}||d<d|d<| |d<|dd |di}t'|t(si}||d<||d<| d| | d| |||td|d|d td | d Std!d S)"uBedrock API Key mode — uses the OpenAI-compatible bedrock-mantle endpoint. For developers who don't have an AWS account but received a Bedrock API Key from their AWS admin. Works like any OpenAI-compatible endpoint. rr>)rSrr3r4rzhttps://bedrock-mantle.z .api.aws/v1AWS_BEARER_TOKEN_BEDROCKrnz Bedrock API Key: N rcz Endpoint: r7 ✓ API key saved.r Showing z curated modelsr Model ID: rmr rbrrr|rqrprr Default model set to: z (via Bedrock API Key, r No change.)rr%r?r@rrSrr3r4rrrr1r1rrrr+rrrrk)rrqrr%r?r@rSrr3r4rmantle_base_urlrhr1rur,r-rrm bedrock_cfgs r_model_flow_bedrock_api_keyrs   322222CCCCO!=!;<<BL& >L"$5>>>???? ._..///   NNNoo&;<<BBDDGG!8,    GGG FF   . ! ! ! F17;;;  $%%% GGG&!%i44J 7s: 7 7 7888**:]SSS ^,,2244HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL$j+j *d###ggi,, +t,, K & H$I '666(/::: C SSS&SSSTTT ._..///// ns$/+BB>=B>!E##E98E9c  ddlm}m}m}ddlm}m}ddlm} ddl m }m } m } m } n=#t$r0tdtdtYdSwxYw|s,td td t| } | rtd | d ntd t| } t!d| d}n&#t$t&f$rtYdSwxYw|p| }tdttdtdtdtdtdt t!d}n&#t$t&f$rtYdSwxYw|dkrt)|||dStd|d| |}|rid}d}g}|D]W}|d t+ fd|Dr&t+ fd|DrB||Xt/}|D]^}|d dr?d d!dvr d d"d"n }||_g}|D]9}|d ds |vr$||:gd#fd$}||%d&|D}td't9|d(t9|d)nE|jd*g}|r!td+t9|d,ntd-dS|r|||.}n< t!d/}n#t$t&f$rd}YnwxYw|r|||}|d0}t=|t>s |rd1|ini}||d0<d*|d2<d3|d4|d5<| d6d|d*i}t=|t>si}||d7<||d*<|||td8|d9|d:dStd;dS)rr)has_aws_credentialsresolve_aws_auth_env_varresolve_bedrock_regiondiscover_bedrock_modelsu. ✗ boto3 is not installed. Install it with:z pip install boto3Nu< ⚠ No AWS credentials detected via environment variables.zE Bedrock will use boto3's default credential chain (IMDS, SSO, etc.)z AWS credentials: u ✓z< AWS credentials: boto3 default chain (instance role / SSO)z AWS Region [r Choose authentication method:z) 1. IAM credential chain (recommended)zB Works with EC2 instance roles, SSO, env vars, aws configurez 2. Bedrock API Keyu< Enter your Bedrock API Key directly — also supportsz5 team scenarios where an admin distributes keysz Choice [1]: r~z Discovering models in r)z stability.z cohere.embedz twelvelabs.z us.stability.zus.cohere.embedzus.twelvelabs.zglobal.cohere.embedzglobal.twelvelabs.) safeguardvoxtralzpalmyra-visionrc3BK|]}|VdSrwr)ryrrs rr{z&_model_flow_bedrock..Ts/@@3>>!$$@@@@@@rc3DK|]}|vVdSrwr)ryrrs rr{z&_model_flow_bedrock..Vs0AA1 #AAAAAAr)zus.global.r(rr) zus.anthropic.claude-sonnet-4-6zus.anthropic.claude-opus-4-6zus.anthropic.claude-haiku-4-5zus.amazon.nova-prozus.amazon.nova-litezus.amazon.nova-microz deepseek.v3zus.meta.llama4-maverickzus.meta.llama4-scoutc|d}tD]!\}}||rd||fcS"|drdd|fSdd|fS)Nrrrrr!)r*r,)rrr<rec _RECOMMENDEDs r _sort_keyz&_model_flow_bedrock.._sort_keyvs~D'C#L11 ' '3>>#&&'q#;&&&'~~i(( #1c{"q#; r)rcg|] }|d S)rrryrs rrz'_model_flow_bedrock..s///!ag///rrEz text model(s) (filtered from z total)rz Using z, curated models (live discovery unavailable)zJ No models found. Check IAM permissions for bedrock:ListFoundationModels.rrrmr rzhttps://bedrock-runtime.z.amazonaws.comrr|rqrz (via AWS Bedrock, rr)!rr%r?r@rrSrrragent.bedrock_adapterrrrrrrrr1rrrrrsetr,r-addsortr+rrrrk)!rrr%r?r@rSrrrrrrauth_varr| region_inputrq auth_choicerO_EXCLUDE_PREFIXES_EXCLUDE_SUBSTRINGSrrprofile_base_idsbaser$rr,r-rrmrrrs! @@rrrs ;:::::::222222               >??? %&&&      LMMM UVVV ''))HN 2H2223333 LMMM GGG,+--NAnAAABBHHJJ x (  +^F +,,, GGG 5666 NOOO "### HIII ABBB GGG,--3355 x ( c#FFMBBB 0V 0 0 0111))&11KI  I  AD'C@@@@.?@@@@@ AAAA-@AAAAA  OOA    55 + +AD'C~~011 +/2c!""g~~syya((++3 $$T***  AD'C>>"455 #AQ:Q:Q NN1                ###//w///  _s: _ _c+FVFV _ _ _    *%))R88   X3z??XXX     \    F**:]SSS ^,,2244HH!8,   HHH 8$$$kmm  %&& !*/7Y&&RE CL%jMvMMMj *d###ggi,, +t,, K & H$I C OOOfOOOPPPPP nsE )6A#"A#$%D D-,D-+!G G0/G0,!PP$#P$c 'ddlm}m}m}m}ddlm}m}m} m } ddl m } m } m '|} | jr | jdnd}| jpd}d}| jD]&}||pt!j|d}|rn'|st%d| jd|r ddl}||d }n&#t,t.f$rt%YdSwxYw|st%d dS||||}t%d t%n1t%d | jd |dddt%dkrS|rP ddlm}n#t4$rd}YnwxYw|3t%d|r ||ndpt!j|pddp| j}|||}|dkrt%t%dt%dt%dt%dt%t%dt%dt%t%dt%t%ddS|dkrt%dnt%dt%d}|r ||pt!j|d}|p| j} t9d|d }n'#t,t.f$rt%d}YnwxYw|r5|r3|d!st%d"n||||}d#krHdd$l m}|p|r ||nd}|||%}|r t%d&t?|d'ntAj!g}g} dd(l"m#}|}n#t4$rYnwxYw|r|rud)|D} tI|}!|D]T}"|"%| vr<|!&|"| '|"%U|!}n|}t%d&t?|d*n|r6t?|dkr#|}t%d+t?|d,n|p|r ||nd}| ||}#|#rKt?|#t?|kr+|#}t%d&t?|d-| jd.n$|}|r t%d+t?|d,d/vrL'fd0|D}'|}tItP)d1|D}|r|||2}$n< t9d3}$n#t,t.f$rd}$YnwxYw|$r‰d/vr '|$}$||$| }%|%!d4}&tU|&tPs |&rd5|&ini}&|&|%d4<|&d6<||&d7<d/vr| |$|&d8<n|&+d8d| |%|t%d9|$d:| jd;dSt%d<dS)=zCGeneric flow for API-key providers (z.ai, MiniMax, OpenCode, etc.).rrwr)ropencode_model_api_modenormalize_opencode_model_idrnr_r`NrarArBrrbrrcr)probe_gemini_tierz Checking Gemini API tier...freeuW❌ This Google API key is on the free tier (<= 250 requests/day for gemini-2.5-flash).z[ Hermes typically makes 3-10 API calls per user turn (tool iterations + auxiliary tasks),zO so the free tier is exhausted after a handful of messages and cannot sustainz an agent session.zX To use Gemini with Hermes, enable billing on your Google Cloud project and regeneratezK the key in a billing-enabled project: https://aistudio.google.com/apikeyzY Alternatives with workable free usage: DeepSeek, OpenRouter (free models), Groq, Nous.z*Not saving Gemini as the default provider.paidu Tier check: paid ✓z3 Tier check: could not verify (proceeding anyway).r0rruM Invalid URL — must start with http:// or https://. Keeping current value.r)fetch_ollama_cloud_models)rurrEz model(s) from Ollama Cloud)list_agentic_modelsc6h|]}|Srrrs r z/_model_flow_api_key_provider..Ts 777a 777rz" model(s) from models.dev registryrreryrz>rrc(g|]}|Srr)ryrrrs rrz0_model_flow_api_key_provider..us4   >A ' ' S 9 9   rc3K|]}||V dSrwr)ryrs rr{z/_model_flow_api_key_provider..ys''I'IS'I'I'I'I'I'I'Irrr rmr rrr|rGrrr),rror%r?r@rr3r4rSrrrrrrrfr8rxrr?r1r1rragent.gemini_native_adapterrr7rJrr,rr+rragent.models_devrrrrrrr*rrk)(rrrror%r?r@r3r4rSrrrrr{rgrhrir1rLr probe_basetierr{rNoverriderapi_key_for_prober,curated mdev_modelsrseenmergedrrOr-rrmrs( ` @rrrs     ,G-4-EMg&q))2G+1rLL&$}R((=BIb",=,=   E   6GL666777   !//W*M*M*MNNTTVV%x0     l### N7G , , ,"L " # # # GGG D7<DD<+;DDDEEE  h< % E E E E E E E % % % $    %  ( 1 2 2 20<D|,,,".9\/R44.-  %$\:>>Dv~~B;2,---:9<BCCCv~~.//// KLLL GGGLR$}\22Qbi b6Q6Q !?W%?N9n999::@@BB x ( &L&""#:;; & _     N< 2 2 2%Nn$$??????(Ww-V]]7-C-C-CTV..%     K IS__III J J J"&{B77   < < < < < <--k::KK    D  !  )77;777k** ,,Awwyy,, a(((+++# ( PS__PPP Q Q Q Q  W** J kS__kkk    !-!*19 g&&&r +*+E?&%L !L0/L0O"" O/.O/5!WW-,W-c ddlm}mmddlm}m dtf fd } ttdtdt|}|r*|rdS|| td dSttd t dd l }| d  }n&#ttf$rtYdSwxYw|r|| tddStddS#t$r7ttdttdttdtdtdtdttdt dd l }| d }n'#ttf$rtYYdSwxYw|r|| tdYdStdYdSwxYw)zNRun the Claude OAuth setup-token flow. Returns True if credentials were saved.r)run_oauth_setup_tokenrr)save_anthropic_oauth_token%use_anthropic_claude_code_credentialsrc }n#t$rd}YnwxYw|rk|s"t|dr>tdddlm}td|ddSd S) Nrsave_fnu% ✓ Claude Code credentials linked.rdisplay_hermes_homez] Hermes will use Claude's credential store directly instead of copying a setup-token into z/.env.TF)r7rrrr.r)r_dhh_fnrrr4rs r._activate_claude_code_credentials_if_availablezQ_run_anthropic_oauth_flow.._activate_claude_code_credentials_if_availables 0022EE   EEE    & &u - - 15eii6O6O1P1P  2 1. I I I I 9 : : : G G G G G G BpwpwpypyBBB   4us  u< Running 'claude setup-token' — follow the prompts below.z9 A browser window will open for you to authorize access.Tru ✓ OAuth credentials saved.z8 If the setup-token was displayed above, paste it here:Nz* Paste setup-token (or Enter to cancel): Fu ✓ Setup-token saved.u) ⚠ Could not detect saved credentials.z/ The 'claude' CLI is required for OAuth login.z To install and authenticate:zE 1. Install Claude Code: npm install -g @anthropic-ai/claude-codez/ 2. Run: claude setup-tokenz. 3. Follow the browser prompts to authorizez) 4. Re-run: hermes modelz8 Or paste an existing setup-token now (sk-ant-oat-...):z$ Setup-token (or Enter to cancel): u2 Cancelled — install Claude Code and try again.)rrrrrrrrrr1r1rrr6) r4rrrrKr1 manual_tokenrrrs ` @@@r_run_anthropic_oauth_flowrsK  D$<  LMMM IJJJ %%''  ==?? t & &un E E E E 2 3 3 34  HIII   NNN"??<egg L"8,    GGG55    & &|^ L L L L , - - -4 9:::u   ?@@@  .///  UVVV ?@@@ >??? 9:::  HIII   NNNOO$JKKQQSSEE!8,    GGG555    & &un E E E E , - - -44 BCCCuu5ssAE:E+E+C0/E0DED!E6EB:J +H.-J .I J I!J 6J J cddlm}m}m}ddlm}m}m}m}ddl m } ddlm } | } d} ddl m } m}m}m}| }|r ||rd} n#t"$rYnwxYwd}| r|| r| sd}t%| r| p| }| }|r| rt'd | d d d n| rt'd t't'dt'dt'dt' t)d}n#t,t.f$rd}YnwxYw|dkrd}n|dkrd S|rt't'dt't'dt'dt'dt' t)d}n&#t,t.f$rt'Yd SwxYw|dkrt1|sd Sn|dkrt't'dt' dd l}|d}n&#t,t.f$rt'Yd SwxYw|st'dd S|||t'dnt'dd St'| jdg}|r|||}n< t)d }n#t,t.f$rd }YnwxYw|r|||}|d!}t7|t8s |rd"|ini}||d!<d|d#<|d$d |||t'd%|d&d St'd'd S)(uRFlow for Anthropic provider — OAuth subscription, API key, or Claude Code creds.rr>)r4rSrsave_anthropic_api_keyr)get_anthropic_keyF)rr_is_oauth_token+_resolve_claude_code_token_from_credentialsTz Anthropic credentials: Nrrcu. Claude Code credentials: ✓ (auto-detected)rzr{r|r}rr~rrz0 1. Claude Pro/Max subscription (OAuth login)z( 2. Anthropic API key (pay-per-token)z> Get an API key at: https://platform.claude.com/settings/keysz API key (sk-ant-...): r7rrrrrz-Model name (e.g., claude-sonnet-4-20250514): rmr rrrGz (via Anthropic)r)rr%r?r@rr4rSrrrrrrrrrrr7rrrr1rrrr1rrrrk)rrr%r?r@r4rSrrrrrh cc_availablerrrrcc_credsexisting_is_stale_oauth has_creds needs_authrGr1rur,r-rrms rrrs  322222211111$$&&LL              0/11  228<< L      $' 55'l'"&l##C,C(CT IJ  D Hl3B3.?HHH I I I I  D B C C C  /000 7888 o  /006688FF!8,   FFF  S==JJ s]] F&  /000  @AAA 8999 o  /006688FF!8,    GGG FF  S==,^<<  s]] GGG R S S S GGG !//*DEEKKMM%x0     n%%% " "7N C C C C ( ) ) ) ) . ! ! ! F GGG&!%k266J**:]SSS LMMSSUUHH!8,   HHH 8$$$ kmm  %&& !*/7Y&&RE CL'j *d### C AxAAABBBBB lsY%A A#"A# !D--EE!G##HH+I??J"!J"!L88M Mc(ddlm}||dS)z(Authenticate Hermes CLI with a provider.r) login_commandN)rr)r rs r cmd_loginrs*------M$rc(ddlm}||dS)zClear provider authentication.r)logout_commandN)rr)r rs r cmd_logoutrs*......N4rc(ddlm}||dS)zManage pooled credentials.r) auth_commandN)hermes_cli.auth_commandsr)r rs rcmd_authrs*555555Lrc(ddlm}||dS)zShow status of all components.r) show_statusN)hermes_cli.statusr)r rs r cmd_statusrs*------Krc(ddlm}||dS)zCron job management.r) cron_commandN)hermes_cli.cronr)r rs rcmd_cronrs*,,,,,,Lrc(ddlm}||dS)z Webhook subscription management.r)webhook_commandN)hermes_cli.webhookr)r rs r cmd_webhookrr/rct|dd}|dvrtdtjdS|dkrdd lm}||Std |tjdS) uSlack integration helpers. Dispatches ``hermes slack ``. Currently supports: manifest — print or write a Slack app manifest with every gateway command registered as a first-class slash. slack_commandN)Nrnzusage: hermes slack subcommands: manifest Generate a Slack app manifest with every gateway command registered as a native slash Run `hermes slack manifest -h` for details.rrmanifestr)slack_manifest_commandzUnknown slack subcommand: )rrrrhermes_cli.slack_clir)r rrs r cmd_slackrs $ . .C j  : q j??????%%d+++ ,s , ,3:>>>> 1rc(ddlm}||dS)z%Shell-hook inspection and management.r) hooks_commandN)hermes_cli.hooksr)r rs r cmd_hooksrs*......M$rc(ddlm}||dS)z%Check configuration and dependencies.r) run_doctorN)hermes_cli.doctorr)r rs r cmd_doctorr*,,,,,,Jtrc(ddlm}||dS)z)Dump setup summary for support/debugging.r)run_dumpN)hermes_cli.dumpr)r rs rcmd_dumprs%(((((( HTNNNNNrc(ddlm}||dS)z!Debug tools (share report, etc.).r) run_debugN)hermes_cli.debugr)r rs r cmd_debugrs%****** IdOOOOOrc(ddlm}||dS)zConfiguration management.r)config_commandN)rr)r rs r cmd_configrs*000000N4rcpt|ddrddlm}||dSddlm}||dS)z,Back up Hermes home directory to a zip file.quickFr)run_quick_backup) run_backupN)rhermes_cli.backupr r )r r r s r cmd_backupr sgtWe$$666666000000 4rc(ddlm}||dS)z(Restore a Hermes backup from a zip file.r) run_importN)r r)r rs r cmd_importrrrc <tdtdtdtdttdtjd ddl}td|jn#t$rtd YnwxYw dd l m }dd l m }|}|r3|dkr-|d krd nd}td|d|d|ddS|dkrtddSdS#t$rYdSwxYw)z Show version.zHermes Agent vrrz Project: zPython: rNz OpenAI SDK: zOpenAI SDK: Not installed)check_for_updatesrecommended_update_commandrcommitcommitszUpdate available: ru behind — run ''z Up to date)rrYrZrrversionr-openairrrrrr7)r rrrbehind commits_words r cmd_versionrs =; = =*: = = =>>> $l $ $%%% -S[&&((+ - -...+  1V/112222 +++ )*****+ 777777@@@@@@""$$  fqjj'-{{88 L 8V88l882244888     q[[ ,     [      s+-B B%$B%)A D 4D DDcFtdddlm}||dS)zUninstall Hermes Agent. uninstallr) run_uninstallN)rhermes_cli.uninstallr)r rs r cmd_uninstallr %s8222222M$rc&d}tj|D]y\}}}d|D|dd<tj|dkr? t j||dz }n#t $rYnwxYw|z|S)a~Remove all __pycache__ directories under *root*. Stale .pyc files can cause ImportError after code updates when Python loads a cached bytecode file that references names that no longer exist (or don't yet exist) in the updated source. Clearing them forces Python to recompile from the .py source on next import. Returns the number of directories removed. rcg|]}|dv| S))venvz.venvru.gitz .worktreesr)ryrs rrz)_clear_bytecode_cache..:s.   OOO OOOrN __pycache__r)r8rrbasenamerKrEr3r)rsrrrrs r_clear_bytecode_cacher'-sG "  1      7  G $ $ 5 5  g&&&1      NN    NsA,, A98A9r@ prompt_textr r4cddl}ddl}ddlm}|}|dz }|dz }|d||t |d} |d } | | | | |tj |z} tj | kr| rp |} |d|d| r| n|S#t t"f$rYnwxYwtjd tj | k|d|dt'd t)|d |d |S)awFile-based IPC prompt for gateway mode. Writes a prompt marker file so the gateway can forward the question to the user, then polls for a response file. Falls back to *default* on timeout. Used by ``hermes update --gateway`` so interactive prompts (stash restore, config migration) are forwarded to the messenger instead of being silently skipped. rNrDz.update_prompt.jsonz.update_responseT) missing_ok)promptr rz.tmp?z (no response after zs, using default: r)ruuidr.rEunlinkruuid4 with_suffix write_textdumpsrBra monotonicr/r0r1r3r5sleeprrc) r)r r4_json_uuidrEr prompt_path response_pathpayloadtmpdeadlineanswers r_gateway_promptr>Is000000 ?  D..K--MD)))%++--  G  ! !& ) )CNN5;;w''(((KK   7*H /  h & &    ! !  &002288::$$$555""d"333!'4vvW4Z(     C /  h & &$'''D))) N#g,, N N' N N NOOO Ns2AE EEfatalweb_dirr@c>|dz sdStjd}|s#|rtdtd| Stdt j|ddg|d }|jd kr1td |rd nd d|rdndz|rtddSt j|ddg|d }|jd kr1td |rd nd d|rdndz|rtddStddS)aMBuild the web UI frontend if npm is available. Args: web_dir: Path to the ``web/`` source directory. fatal: If True, print error guidance and return False on failure instead of a soft warning (used by ``hermes web``). Returns True if the build succeeded or was skipped (no package.json). rwTrz3Web UI frontend not built and npm is not available.zBInstall Node.js, then run: cd web && npm install && npm run buildu→ Building web UI...rrrr2rru✗u⚠z Web UI npm install failedrnz# (hermes web will not be available)z7 Run manually: cd web && npm install && npm run buildFr6rz Web UI build failedu ✓ Web UI built)r/rKrLrr5r6rM)rAr@rr1r2s r _build_web_uirF{s n $ , , . .t ,u  C   X G H H H V W W Wy "### i4'RV W W WB } F%*U F F FErr E G     M K L L Lu eW-74 P P PB } @%*U @ @ @Err E G     M K L L Lu  4rc  ddl}ddl}ddlm}d}d|d}t d |d }t j|d |d}|||t d | |d 5}t j |} | D]} t j t j|| j } | | t jzs| | krtd | j d||dddn #1swxYwYt j|d |} t j| s`t j|D]K} t j|| }t j|r | dkr|} nLhd}d}t j| D]}||vrt j| |}t jt't(|}t j|rIt j|rt-j|t-j||nt-j|||dz }t d|dt-j|dn=#t4$r0}t d|t7jdYd}~nd}~wwxYwt;t(}|rt d|d|dkrdndt dt-jd}|r;it jdt't(dz i}tA|dg| nt6j!d!dg} tEj#|d"gzt(dd#n@#tDj$$r.tEj#t6j!d!d$d%d&gt(d'YnwxYwtA|tKtMt(d(z  dd)l'm(}t d*|d+}|d,rAt d-tS|d,d.d/|d,|*d0rAt d1tS|d0d2d/|d0|*d3r&t d4tS|d3d5|*d6r&t d7tS|d6d8|d,s$|*d0st d9n#t4$rYnwxYwt t d:dS);zUpdate Hermes Agent by downloading a ZIP archive. Used on Windows when git file I/O is broken (antivirus, NTFS filter drivers causing 'Invalid argument' errors on file creation). rN) urlretrieverz@https://github.com/NousResearch/hermes-agent/archive/refs/heads/z.zipu!→ Downloading latest version...zhermes-update-)prefixz hermes-agent-u→ Extracting...rzZip-slip detected: z escapes extraction directory__MACOSX>r#rurGr$ru ✓ Updated z items from ZIPTr?u✗ ZIP update failed:  ✓ Cleared  stale __pycache__ directorr ies#→ Updating Python dependencies...uv VIRTUAL_ENVr#pipr-m --versionrrr2 ensurepip --upgrade --default-piprrwebr→ Syncing bundled skills...rcopied +  new: , updated ↑ updated: user_modified ~  user-modified (kept)cleaned −  removed from manifest ✓ Skills are up to date✓ Update complete!)+tempfilezipfileurllib.requestrHrmkdtempr8rrNZipFilerealpathinfolistfilenamer,sepr5 extractallisdirlistdirrrr/rKrEcopytreecopy2r7rrr'rLr93_install_python_dependencies_with_optional_fallbackrr5r6CalledProcessError_update_node_dependenciesrFrrr+r)r rlrmrHbranchzip_urltmp_dirzip_pathzf tmp_dir_realmember member_path extractedr candidatepreserve update_countr@r dstr)ruv_binuv_envpip_cmdrrs r_update_via_ziprs OOONNN****** FW6WWW  -...5""*:";;7<<)E)E)E)EFF GX&&& !""" __Xs + + #r7++G44L++--   g..rw||GV_/U/UVV #..|bf/DEE#|33$\fo\\\ MM' " " " # # # # # # # # # # # # # # #GLL*B&*B*BCC w}}Y'' Z((  GLL!44 7==++Z )IE<;; Jy))  Dx',,y$//C',,s<00$77Cw}}S!! '7>>#&&'M#&&&S)))) S#&&& A LL :\:::;;;  gT22222  +++,,,   $L11G  aW a aST Z_ a a    /000 \$  F EJBJJ s<&3H/I/IJJ;VUOQWXXXXX >4/  N;-' #       ,    N{KQ         >Y & &>>## # # # ' 4rstash_selectorctdtd|rtd|dStd|ddS)NzS Check `git status` first so you don't accidentally reapply the same change twice.z@ Find the saved entry with: git stash list --format='%gd %H %s'z! Remove it with: git stash drop z Look for commit z7, then drop its selector with: git stash drop stash@{N})r)rrs r_print_stash_cleanup_guidancerlsy ] LMMM  B.BBCCCCC e e e e     r prompt_usercp|rttdtdtdtd| |dd}n2t}|dvr2tdtdtd |d Std t j|d d |gz|dd}t j|gdz|dd}t |j}|jdks|r@td|jr&t|j|j r&t|j |j} | r8td| D]} td| tdtd|t j|gdz|dtdtd|d St|||} | .tdtdt|nt j|d d| gz|dd} | jdkrtd| jr&t| j| j r&t| j tdt|| tdtd dS)!Nu/⚠ Local changes were stashed before updating.zL Restoring them may reapply local customizations onto the updated codebase.z= Review the result afterward if Hermes behaves unexpectedly.z Restore local changes now? [Y/n]r rz Skipped restoring local changes.z.Your changes are still preserved in git stash.z'Restore manually with: git stash apply Fu→ Restoring local changes...rapplyTr)diffz --name-onlyz--diff-filter=UruF✗ Update pulled new code, but restoring local changes hit conflicts.z Conflicted files:u • u8 Your stashed changes are preserved — nothing is lost.z Stash ref: )r--hardHEADrCz"Working tree reset to clean state.z1Restore your changes later with: git stash apply uR⚠ Local changes were restored, but Hermes couldn't find the stash entry to drop.zT The stash was left in place. You can remove it manually after checking the result.dropuP⚠ Local changes were restored, but Hermes couldn't drop the saved stash entry.u?⚠ Local changes were restored on top of the updated codebase.zB Review `git diff` / `git status` if Hermes behaves unexpectedly.) rrr1rr5r6rrrMrrrr) rrrrinput_fnrLrestorer has_conflictsconflicted_filesfrrs r_restore_stashed_changesr{s"  ?@@@ Z    MNNN 0111  x BCHHHHww}},,..H + + + 4 5 5 5 B C C C GIGG H H H5 *+++n7GY//   G~<<<<   H ..0011MQ- VWWW >   ! ! * '.&&(( ) ) ) >   ! ! * '.&&(( ) ) )$?0022  $ ' ( ( (%0022 $ $lqll#### IJJJ )i))***  111 1    2333 M)MMNNNu,Wc9EEN `     b    &i0000~ w7 7     ?a   b   {  "" +dk''))***{  "" +dk''))*** f    *)^ D D D KLLL NOOO 4r>(git@github.com:NousResearch/hermes-agent,git@github.com:NousResearch/hermes-agent.git,https://github.com/NousResearch/hermes-agent0https://github.com/NousResearch/hermes-agent.gitrz.skip_upstream_promptc tj|gdz|dd}|jdkr|jSn#t $rYnwxYwdS)z5Get the URL of the origin remote, or None if not set.)remoteget-urloriginTrrN)r5r6rMrr1r7rrrs r_get_origin_urlrs   555 5       ! !=&&(( ( "      4sAA AA origin_urlc|sdS|d}|dr |dd}tD]?}|d}|dr |dd}||krdS@dS)zDCheck if the origin remote points to a fork (not the official repo).Frr$NT)rrOFFICIAL_REPO_URLS)rroofficialofficial_normalizeds r_is_forkrs u""3''J6""%_ &&ooc22  ' ' / / ;"5crc":  , , ,55 - 4rcv tj|gdz|dd}|jdkS#t$rYdSwxYw)z-Check if an 'upstream' remote already exists.)rrupstreamTrrFr5r6rMr7rs r_has_upstream_remotersg  777 7      A%% uu '* 88c tj|dddtgz|dd}|jdkS#t$rYdSwxYw)zHAdd the official repo as the 'upstream' remote. Returns True on success.rrrTrrF)r5r6OFFICIAL_REPO_URLrMr7rs r_add_upstream_remoter$sj  x 4EF F      A%% uus .1 ??rheadc tj|dd|d|gz|dd}|jdkr&t|jSn#t $rYnwxYwdS)zDCount commits on `head` that are not on `base`. Returns -1 on error.rev-list--countz..Trrr)r5r6rMrcrr1r7)rrrrrs r_count_commits_betweenr2s   z9.?.?.?.?@ @       ! !v}**,,-- - "      2sAA A$#A$cVddlm}|tz S)z2Check if user previously declined to add upstream.rrD)r.rESKIP_UPSTREAM_PROMPT_FILEr/rDs r_should_skip_upstream_promptrBs4000000 O   9 9 A A C CCrc~ ddlm}|tz dS#t$rYdSwxYw)z3Create marker file to skip future upstream prompts.rrDN)r.rErtouchr7rDs r_mark_skip_upstream_promptrIsa 444444   6 6==?????      s *. <<cv tj|gdz|dd}|jdkS#t$rYdSwxYw)znAttempt to push updated main to origin (sync fork). Returns True if push succeeded, False otherwise. )rrrz--force-with-leaseTrrFrrs r_sync_fork_with_upstreamrSsg  FFF F      A%% uurct||}|s trdSttdtdt td}n'#t tf$rtd}YnwxYw|dvrBtdt||rtdd }n0td dStd tdSttd  tj |gd z|d d n%#tj $rtdYdSwxYwt||dd}t||dd}|dks|dkrtddS|dkrPttd|dtdtdtddS|dkrtddSttd|dtd tj |gdz|d n%#tj $rtdYdSwxYwtd td!t||rtd"dStd#td$dS)%a[Check if fork is behind upstream and sync if safe. This implements the fork upstream sync logic: - If upstream remote doesn't exist, ask user if they want to add it - Compare origin/main with upstream/main - If origin/main is strictly behind upstream/main, pull from upstream - Try to sync fork back to origin if possible Nu=ℹ Your fork is not tracking the official Hermes repository.zA This means you may miss updates from NousResearch/hermes-agent.z/Add official repo as 'upstream' remote? [Y/n]: rru→ Adding upstream remote...uF ✓ Added upstream: https://github.com/NousResearch/hermes-agent.gitTu< ✗ Failed to add upstream remote. Skipping upstream sync.zg Skipped. Run 'git remote add upstream https://github.com/NousResearch/hermes-agent.git' to add later.u→ Fetching upstream...)fetchr--quiet)rr2ru7 ✗ Failed to fetch upstream. Skipping upstream sync.z upstream/mainz origin/mainru9 ✗ Could not compare branches. Skipping upstream sync.uℹ Your fork has z commit(s) not on upstream.z2 Skipping upstream sync to preserve your changes.z- If you want to merge upstream changes, run:z git pull upstream mainu& ✓ Fork is up to date with upstreamu → Fork is z commit(s) behind upstreamu→ Pulling from upstream...)pull --ff-onlyrrrZuO ✗ Failed to pull from upstream. You may need to resolve conflicts manually.u ✓ Updated from upstreamu→ Syncing fork...u ✓ Fork synced with upstreamuL ℹ Got updates from upstream but couldn't push to fork (no write access?)zF Your local repo is updated, but your fork on GitHub may be behind.)rrrrr1rrrrrr5r6r{rr)rr has_upstreamrL origin_aheadupstream_aheads r_sync_with_upstream_if_neededrds(55L ! ' ) )  F  MNNN QRRR  GHHNNPPVVXX H+,    GGGHHH  ' ' ' 1 2 2 2#GS11 \ $ TUUU y    ' ( ( ( F GGG $%%%  666 6       ( GHHH *'3WWL+m_Na>A-- IJJJa  L<LLLMMM BCCC =>>> *+++ 6777 GGG C C C CDDD ()))  ??? ?      ( ]       '(((    --X /00000 Z    VWWWWWs63B!B76B7=EE=<E=I<<JJcg}ddlm}|}|||dz }|r@|D]+}|r||,|D]@} |dz }|r|1#t$rY=wxYwdS)uDelete the update-check cache for ALL profiles so no banner reports a stale "commits behind" count after a successful update. The git repo is shared across profiles — when one profile runs ``hermes update``, every profile is now current. rr#profilesz .update_checkN)r.r$rriterdirr/r/r7)homesr$ default_home profiles_rootrr cache_files r_invalidate_update_cachers E888888**,,L LL :-M$"**,, $ $E||~~ $ U### /J  "" $!!###    D  s-B44 CCc4 ddl}tdz d5}||di}dddn #1swxYwYn#t $rgcYSwxYw|di}t |tsgS|dg}g}|D]Y}d|vrSd |vrO|dd d d d d}||vr| |Z|S) u7Return the optional extras referenced by the ``all`` group. Only extras that ``[all]`` actually pulls in are retried individually. Extras outside ``[all]`` (e.g. ``rl``, ``yc-bench``) are intentionally excluded — they have heavy or platform-specific deps that most users never installed. rNzpyproject.tomlrbprojectzoptional-dependenciesall[]r) tomllibropenloadrr7rrr-r)rhandler optional_depsall_refs referencedrefr?s r!_load_installable_optional_extrasrs~-- 3 3D 9 9 >Vll6**..y"==G > > > > > > > > > > > > > > >  KK 7<>>>    "M"$244 ( ( ( N"i}E}}}i%PP        # #E * * * *, ( ( (   ' ' ' ' ' (  \tyyIY?Z?Z \ \     Z -@X@X Z Z       s!"&AA=B??$C&%C&c  tjd}|sdSdtfdtdz ff}td|DsdSt d|D]\}}|dz st j|ddd d d g|d d d }|jdkrt d|Zt d||j pd }|r*t d| ddS)Nrz repo rootrc3JK|]\}}|dz VdS)rwNr/)ryrrs rr{z,_update_node_dependencies..Ns7EEGAt~%--//EEEEEEru$→ Updating Node.js dependencies...rwrrrrrTFrr ✓ u ⚠ npm install failed in rnrr) rKrLrrrr/r5r6rMrr1r)rpathsrrrrs rr|r|Esg ,u  C  l# <(*+ E EEuEEE E E 011144 t~%--//   )ZlDV W       ! ! "5"" # # #  4U44555-%2,,..  4 2**,,R022 3 3 3%44rc6eZdZdZdZdZdZdZdZdZ dS) _UpdateOutputStreamuStream wrapper used during ``hermes update`` to survive terminal loss. Wraps the process's original stdout/stderr so that: * Every write is also mirrored to an append-only log file (``~/.hermes/logs/update.log``) that users can inspect after the terminal disconnects. * Writes to the original stream that fail with ``BrokenPipeError`` / ``OSError`` / ``ValueError`` (closed file) no longer cascade into process exit — the update keeps going, only the on-screen output stops. Combined with ``SIGHUP -> SIG_IGN`` installed by ``_install_hangup_protection``, this makes ``hermes update`` safe to run in a plain SSH session that might disconnect mid-install. c0||_||_d|_dSNF) _original_log_original_broken)selforiginallog_files r__init__z_UpdateOutputStream.__init__ys! %rc|j, |j|n#t$rYnwxYw|jr-t |t t frt|ndS |j|S#tttf$r7d|_t |t t frt|ndcYSwxYw)NrT) rwriter7rrrbytesr+rBrokenPipeErrorr3r5)rdatas rr z_UpdateOutputStream.write~s 9   %%%%       F *4#u > >E3t999A E F>''-- -*5 F F F%)D ! *4#u > >E3t999A E E E  Fs$ 11)BA CCc|j+ |jn#t$rYnwxYw|jrdS |jdS#t t tf$r d|_YdSwxYw)NT)rflushr7rrr r3r5rs rrz_UpdateOutputStream.flushs 9   !!!!        F ) N " " " " "*5 ) ) )$(D ! ! ! ! )s# 00AA:9A:cj|jrdS |jS#t$rYdSwxYwr)rrrr7rs rrz_UpdateOutputStream.isattysM   5 >((** *   55 s $ 22c4|jSrw)rfilenors rrz_UpdateOutputStream.filenos~$$&&&rc,t|j|Srw)rr)rr?s r __getattr__z_UpdateOutputStream.__getattr__st~t,,,rN) __name__ __module__ __qualname____doc__r r rrrrrrrrrgs{"&&& FFF( ) ) )''' -----rr gateway_modectjtjddd}|r|Sddl}t |dr9 ||j|jn#ttf$rYnwxYw ddl m }|dz }| dd |d z }t|d d d }ddl }|d|j dd||d<t#|d|t_t#|d|t_d|d<n#t$$rd|d<YnwxYw|S)u$Protect ``cmd_update`` from SIGHUP and broken terminal pipes. Users commonly run ``hermes update`` in an SSH session or a terminal that may close mid-install. Without protection, ``SIGHUP`` from the terminal kills the Python process during ``pip install`` and leaves the venv half-installed; the documented workaround ("use screen / tmux") shouldn't be required for something as routine as an update. Protections installed: 1. ``SIGHUP`` is set to ``SIG_IGN``. POSIX preserves ``SIG_IGN`` across ``exec()``, so pip and git subprocesses also stop dying on hangup. 2. ``sys.stdout`` / ``sys.stderr`` are wrapped to mirror output to ``~/.hermes/logs/update.log`` and to silently absorb ``BrokenPipeError`` when the terminal vanishes. ``SIGINT`` (Ctrl-C) and ``SIGTERM`` (systemd shutdown) are **intentionally left alone** — those are legitimate cancellation signals the user or OS sent on purpose. In gateway mode (``hermes update --gateway``) the update is already spawned detached from a terminal, so this function is a no-op. Returns a dict that ``cmd_update`` can pass to ``_finalize_update_output`` on exit. Returning a dict rather than a tuple keeps the call site forward-compatible with future additions. NF) prev_stdout prev_stderrr installedrSIGHUPrDlogsTr<z update.logarrJ) bufferingrLz === hermes update started seconds)timespecz === rrrr)rrrsignalhasattrr SIG_IGNr5r3rrErDrrXr r isoformatrr7)rrl_signal_get_hermes_homelogs_dirlog_pathr_dts r_install_hangup_protectionr/s<zz   E w!!  NN7>7? ; ; ; ;G$    D ! JIIIII##%%.td333l*#WEEE H|!!++Y+?? H H H   %j(})=xHH (})=xHH !k !!!!j! Ls$ AA*)A*.CEEEc|sdS|drx |dtjt_n#t$rYnwxYw |dtjt_n#t$rYnwxYw|d}|< ||dS#t$rYdSwxYwdS)zWRestore stdio and close the update.log handle opened by ``_install_hangup_protection``.Nrrrr)rrrr7rrr))rlrs r_finalize_update_outputr1s   yy =#*==CJJ    D  =#*==CJJ    D yy$$H  NN    NN         DD  s5*A AA*B BB*(C C"!C"ctdz }|s#tdtjddg}tjdkrgd}tdt j|dd gztd d }|jd kr|j }d |vsd|vrtdnSd|vsd|vrtdn;td|r*td| d tjdt j|gdztd d d }t|j }|d krtdd S|dkrdnd}td|d|dd dlm}td|dd S)!zIImplement ``hermes update --check``: fetch and report without installing.r$u6✗ Not a git repository — cannot check for updates.rgitwin32r3rwindows.appendAtomically=falseu→ Fetching from origin...rrTrrCould not resolve hostunable to access9✗ Network error — cannot reach the remote repository.Authentication failedcould not read UsernameD✗ Authentication failed — check your git credentials or SSH key.u ✗ Failed to fetch from origin.r)rzHEAD..origin/mainrru✓ Already up to date.rru⚕ Update available: rz behind origin/main.rz Run 'z ' to install.N)rr/rrrplatformr5r6rMrr1rrcrrr)git_dirr fetch_resultr rev_resultrrrs r_cmd_update_checkrAs0V#G >>   FGGG  gG |wAAA '(((>7H%%   L !##$**,, #v - -1Cv1M1M M N N N N $ . .2Kv2U2U X Y Y Y Y 4 5 5 5 536,,..q133444  >>>>   J"((** + +F {{ '(((((#)Q;;xxI  RvRR RRRSSS@@@@@@ C2244CCCDDDDDrc ttjdkrdS tjdkrdSn#t$rYdSwxYwt d}|s|sdStj dpd} tj ddd |d tj d d d dddgddd}n#ttj f$rYdSwxYw|jdkrdSd}d}d}dD]}t ||z }|s* |d}n#t"$rYNwxYwt%d|D} | r |dd5} | d|zdz|zdzdddn #1swxYwYn,#t"$r} t-d|d| Yd} ~ d} ~ wwxYwt-d |d}|rt-d!dSdS)"aHEnsure /usr/local/bin is on PATH for RHEL-family root non-login shells. Mirrors the post-symlink probe added to ``scripts/install.sh`` so that existing FHS-layout root installs on RHEL/CentOS/Rocky/Alma 8+ get repaired on ``hermes update`` without requiring a reinstall. The installer's assumption that ``/usr/local/bin`` is on PATH for every standard shell breaks on those distros in non-login interactive shells (su, sudo -s, tmux panes, some web terminals): /etc/bashrc doesn't add /usr/local/bin and /root/.bash_profile doesn't either. Symptom: ``hermes`` prints ``command not found`` even though the symlink lives at /usr/local/bin/hermes. Silent no-op on: non-Linux, non-root, non-FHS installs, and any system where ``bash -i -c 'command -v hermes'`` already resolves. Idempotent. linuxNrz/usr/local/bin/hermesHOMEz/rootrrDzHOME=zTERM=rEdumbrrzcommand -v hermesTrr1z"export PATH="/usr/local/bin:$PATH"uK# Hermes Agent — ensure /usr/local/bin is on PATH (RHEL non-login shells)F)z.bashrcz .bash_profilerB)errorsc3vK|]4}d|vo+d|vo'|d V5dS)z/usr/local/binrr|N)lstripr,)ryrs rr{z)_ensure_fhs_path_guard..sj    $ 2$ 2KKMM,,S111      rr"rJrKru ⚠ Could not update r+u& ✓ Added /usr/local/bin to PATH in z? (reload your shell or run 'source ~/.bashrc' to pick it up))rr=r8geteuidAttributeErrorr is_symlinkr/r9rr5r6r6r7rMryr0r3rrrr r) fhs_linkrrS path_line path_comment wrote_anyrrexistingalready_guardedrr)s r_ensure_fhs_path_guardrRGsJ  |w :<<1   F  +,,H    ):): :>>& ! ! ,WD  D T^^ 5RZ^^FF33 5 5 T4!4 6 dB     z8 9 14I "I1 4jj9${{}}   }}I}66HH    H   !++--          #00 GA|+d2Y>EFFF G G G G G G G G G G G G G G G    6C66166 7 7 7 HHHH  tdt| rd| dndnSd| vsd| vrtdn;td| r*td| dtjd t j|gdztddd} | j } d } | d krZ| d!krd"nd#| d$} td%| d&t!|t}t j|d'd gztdddnt!|t}|duo=|p;tjotj}t j|d(d)| d*gztddd} t'| j }|dkrat)|t+|t|||+| d,vr#t j|d'| gztdddtd-dStd.|d/td0d} t j|d1d2d| gztdd}|j dkrtd3t j|d4d5d6| gztdd}|j dkrxtd7| d8|j r)td|j td9tjd d}|>|s#td:|d;td<n`t+|t|||+nF#|?|s#td:|d;td<wt+|t|||+wwxYwt)t-t}|rtd=|d>|d krd?nd@|r| d krt/|ttdAt1jdB}|r;it4jdCt9tdDz i}t;|dEg|FntjdGdEg} t j|dHgztdd n@#t j$r.t jtjdGdIdJdKgtdLYnwxYwt;|tAtCtdMz ttdN ddl"}ddl#}|$|n#tJ$rYnwxYw ddOl&m'}ttdP|dQ} | dRrAtdStQ| dRdTdU)| dR| *dVrAtdWtQ| dVdXdU)| dV| *dYr&tdZtQ| dYd[| *d\r&td]tQ| d\d^| dRs$| *dVstd_n2#tJ$r%}tV,d`|Yd}~nd}~wwxYw ddal-m.}m/}m0}|``fdb|D}|r^ttdc|D]=} || j1dQ}!|!rtQ|!*dRg}"tQ|!*dVg}#tQ|!*dYg}$g}%|"r|%2dd|"de|#r|%2df|#dg|$r|%2dh|$di|%rdU)|%ndj}&ndk}&td| j3dl|& #tJ$r&}'td| j3dm|'d;Yd}'~'7d}'~'wwxYwn#tJ$rYnwxYw ddnl4m5}(|(})|)rtdo|)dpn#tJ$rYnwxYwttdqddrl6m7}*m8}+m9},m:}-|*ds}.|+}/|,\}0}1|.p|/p|0|1k}2|2rt|.r tdttQ|.du|/r tdvtQ|/dwt|r5twdxdy <}3ntjrtjs!tdztd{dy}3nG t{d| <}3n#t|$rdy}3YnwxYw|3d}vr]t|-| d~}4|4ds|4drttd|r|.rtdn-ttdntdttd tn2#tJ$r%}tV,d|Yd}~nd}~wwxYw|r8tdz }5 |5Adn#t$rYnwxYw ddlCmD}6mE}7mF}8mG}9mH}:mI};ddlJ}< ddtdt8dtdtfd}= ddtdt8dtdtfd}> ddl#mN}?n#tJ$rd}?YnwxYwd}@ ddl6mO}A|A*dpi}B|B*d}@n#tJ$rYnwxYw |@t|@nt|?}Cn&#ttf$rt|?}CYnwxYwt|Cddz}Cg}Dt}E|7r) |8n#tJ$rYnwxYwdddgfddgffD]\}F}G t j|Ggdzddd} | j D]}H|HT}%|%s|%d}I|IUds8|IVd}Jt j|Gd|Jgzddd}K|Kj dkrd}L t j|Gd|Jddgzddd}Mt'|Mjpd pd}Ln$#tt jWtf$rd}LYnwxYwd}N|Ldkr0td|Jdt'|Cd|;|L|C}N|NrY|>|G|Jd}Otd|Odz}P|=|G|J|Pr|D2|Jytd|Jdt j|Gd|Jgzddd}Q|Qj dkr|=|G|Jdr|D2|Jtd|Jdt j|Gd|Jgzddd}R|=|G|Jdr*|D2|Jtd|JdAtd|Jd|Jd|Fdkrdndd|Jftd|Jdl|Qj #tt jWf$rYwxYw|6r ddlCmY}SmZ}Tm[}U|U}V|Vrt jdd|Tgddd}K|Kj dkr| |S|D2|TnS#t j$rA}t|ddpd } td| Yd}~nd}~wwxYwn"#tt jWtf$rYnwxYw|:}W|9|Wd}X|XD]I}Y t5j^|Y|)r,r s rz"_cmd_update_impl..sOFG$D$DrNu⚕ Updating Hermes Agent...Fr$r4Tu+✗ Not a git repository. Please reinstall:zg curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bashr)r3rr6rzwindows.appendAtomicallyfalserVr3r5u⚠ Updating from fork:ru→ Fetching updates...rrrrr7r8r9r:r;r<u(✗ Failed to fetch updates from origin.)rz --abbrev-refrrrrz detached HEADzbranch 'ru ⚠ Currently on u$ — switching to main for update...checkoutrz HEAD..origin/r)rr)rru✓ Already up to date!u → Found z new commit(s)u→ Pulling updates...rruP ⚠ Fast-forward not possible (history diverged), resetting to match remote...rrzorigin/u✗ Failed to reset to origin/r(z@ Try manually: git fetch origin && git reset --hard origin/mainu1 ℹ️ Local changes preserved in stash (ref: rz( Restore manually with: git stash applyrLrMr rNrOrPrQr#rRrSrTrUrWrXrYrZr[u✓ Code updated!rr\rr]r^r_r`rarbrcrdrerfrgrhrirjz$Skills sync during update failed: %s) list_profilesget_active_profile_nameseed_profile_skillsc*g|]}|jk |Srr?)ryrrs rrz$_cmd_update_impl..s%MMMAAFf Honcho: synced z profile(s)u-→ Checking configuration for new options...)get_missing_env_varsget_missing_config_fieldscheck_config_versionmigrate_config) required_onlyu ⚠️ z+ new required setting(s) need configurationu ℹ️ z new config option(s) availablez2Would you like to configure new options now? [Y/n]ruC ℹ Non-interactive session — skipping config migration prompt.zJ Run 'hermes config migrate' later to apply any new config/env options.z-Would you like to configure them now? [Y/n]: r) interactiver env_added config_addedu✓ Configuration updated!u: ℹ API keys require manual entry: hermes config migratez8Skipped. Run 'hermes config migrate' later to configure.u! ✓ Configuration is up to daterkzFHS PATH guard check failed: %sz.update_exit_code0)is_macossupports_systemd_services_ensure_user_systemd_envfind_gateway_pids_get_service_pids_graceful_restart_via_sigusr1$@ scope_cmd_ svc_name_r4rc\tjt|dz} tj|d|gzddd}|jdkrdSn#ttjf$rYnwxYwtj|krdStj d)azPoll ``systemctl is-active`` until the unit reports active. systemd's Stopped -> Started transition after a graceful exit (or a hard restart) is not instantaneous; a one-shot check races that window and falsely reports the unit as down. Poll every 0.5s up to ``timeout`` seconds before giving up. r-T is-activerr1rF) rar4rr5r6rr1r6r7r5)rwrxr4r<_verifys r_wait_for_service_activez2_cmd_update_impl.._wait_for_service_actives!?,,s7C/@/@@ %",.&+y)AA+/dA####>//11X==#'4>-z/HI((H44$uK$$$ %s:A$$A=<A=r c  tj|d|ddgzddd}n#ttjf$r|cYSwxYw|jpd}|r|dkr|Sd }d }|D]`}d D][\}} ||rA |t|d t| | zz }d}n#t$rYnwxYwn\a|r|n|S) aRead the unit's ``RestartUSec`` (RestartSec) in seconds. After a graceful exit-75, systemd waits ``RestartSec`` before respawning the unit. Callers that poll for ``is-active`` must use a timeout >= ``RestartSec`` + transition slack, or they'll give up *during* the cooldown window and wrongly conclude the unit didn't relaunch. rz--property=RestartUSec--valueTrr1rninfinityr}F))msgMbP?)usgư>)rN@)rg?N) r5r6r6r7rr1r-rfloatr+r5) rwrxr _showrawrmatchedpart_suf_mults r_service_restart_secz._cmd_update_impl.._service_restart_secsZ #&N""I4i&(,$ EE*:+DE###"NNN#|)r0022#cZ//"NIIKK " "D( " " e  ==.."% %tLs4yyjL/A)B)BU)J J*.#-%%% $%!E "!(4uuW4s"==-C  CC)%DEFAULT_GATEWAY_RESTART_DRAIN_TIMEOUTrrRrrestart_drain_timeoutg>@rYuser systemctlz--usersystem)z list-unitszhermes-gateway*z--plainz --no-legendz --no-pagerrr1z.servicerzrrrz--property=MainPIDru → z: draining (up to zs)...) drain_timeoutr)r4rYu0 drained but didn't relaunch — forcing restartrestartr0z died after restart, retrying...rz recovered on retryr9zL failed to stay running after restart. Check logs: journalctl --user -u z5 --since '2 min ago' Restart manually: systemctl z--user zrestart u ⚠ Failed to restart )launchd_restartget_launchd_labelget_launchd_plist_path launchctlrru ⚠ Gateway restart failed: ) exclude_pids all_profilesu ✓ Restarted u → Stopped z manual gateway process(es)z( Restart manually: hermes gateway runz; (or: hermes -p gateway run for each profile)z(Gateway restart during update failed: %s)has_legacy_hermes_units_find_legacy_hermes_unitsrqu+⚠ Legacy Hermes gateway unit(s) detected:rz (z scope)z; These pre-rename units (hermes.service) fight the currentz< hermes-gateway.service for the bot token and cause SIGTERMz flap loops. Remove them with:z! hermes gateway migrate-legacyz) (add `sudo` if any are in system scope)z*Legacy unit check during update failed: %sz-Tip: You can now select a provider and model:z7 hermes model # Select provider and modelu⚠ Git update failed: u#→ Falling back to ZIP download...u✗ Update failed: rn)rv)r})errr/rr=rr5r6rrrrMrr1rrrrrrcrrr'rrKrLr8r9rrzrr{r|rF importlibr.reloadr7rrr+rNrloggerdebugr4r_r`rarrr?plugins.memory.honcho.clirfrrgrhrirjr>rrrrRrEr2r3r-rprqrrrsrtrur&rrrrrS TypeErrorr5rrr-r removesuffixr7r6rrrrrkillSIGTERMrProcessLookupErrorPermissionErrorrr)ar r gw_input_fnuse_zip_updater>rris_forkr?rrcurrent_branchr}rauto_stash_refprompt_for_restore commit_countupdate_succeeded pull_result reset_resultrrrrr_hcrr)r_r`raother_profilesrrJr]ramodifiedrrperfsyncedrgrhrirj missing_envmissing_config current_ver latest_verneeds_migrationrLresults_exit_code_pathrprqrrrsrtrur*r|r_DEFAULT_DRAIN _cfg_drainrS _cfg_agent _drain_budgetrestarted_services killed_pidsrW scope_cmdrunitsvc_namer _main_pidr _graceful_ok _restart_sec_post_drain_timeoutrretryrrr plist_path service_pids manual_pidspidsvcrrr?ris_sysrsa @rrWrWs   D D D D   ())) GGGNV#G >>   <7 " "!NN ? @ @ @ y    HQKKK |w7>>#3#3    gG |wAAA!,77Jz""G '((( :    l  '(((!~ w) )     "a ' '!(..00F'6115G65Q5QQRRRvE36,,..q13332FFFF'6115NRX5X5XZABBB97v00221577888 HQKKK ;;; ;     ,,.. V # #"V++ 1111  SSSS T T T;G\RRN N:v.. #      ::$#'  + , , , F 7<777888 &''' - $.6;&AA # K %**f *~w2DF2D2DEE$#'      *a//D6DDDEEE#*0022B@<#6#<#<#>#>@@AAAZHQKKK# )( ]N]]]EFFFF,$&$6!, )( ]N]]]EFFFF,$&$6!, *" !""" ( 55   eeeGWXLLSS^cee     Av'' )'< @ @ @ 3444d##  IN NM3|f7L3M3MNNF ?V     ~tU3G {m+$#'  0   ^T; _U$  @ H H H!###lU*+++  !"""       * * * *   S ! ! ! !    D  D 5 5 5 5 5 5 GGG 1 2 2 2 [t,,,Fh YWS!122WW$))F8DT:U:UWWXXXzz)$$ ]S !233]]tyyPYIZ?[?[]]zz/** RPS!899PPPQQQzz)$$ OMs6)#455MMMNNN(# 5FJJy,A,A 53444 D D D LL? C C C C C C C C D!            -,..FMMMMMMMN ;GHHH';;A;//dCCC 3%(x)<)<%=%=F&)!%% 2*>*>&?&?G'*155"+E+E'F'FH$&E%? % -=-=-=-= > > >&F % -D7-D-D-D E E E'K % -I-I-I-I J J J9>%PTYYu%5%5%5LFF%2F51655V556666$;;;91699B999::::::::;    D   L L L L L L//11F B@V@@@AAA    D   =>>>            +*>>> 2244"6"6"8"8 Z%SS;;S 1 7 GGG ^[!1!1^^^ YW3~#6#6WWWXXX GGG ##LcUWWUWW i&&(( #SZ->->-@-@ #[\\\`#MNNH  ###"HHH#+++).5EUSSS;'87>+B8GGG6777XKXVWWWPQQQQ 5 6 6 6  $%%% ? " $ $ $ $ ? ? ? LL:A > > > > > > > > ?&  -//2EEO **3////     C H                 % $ $ $DH % %  %-0 %;@ % % % % %4DG* 5* 5 * 5-0* 5;@* 5* 5* 5* 5* 5d & & & &!% &J 999999)kmm//88>B '^^,CDD      65?5Kj 1 1 1QVWeQfQf z* 6 6 6 %n 5 5  6 t44t;M!# %%K)(**U ,,.... Dk845 }-)OO$E9K!+%,0!%$& " " "%+M$7$7$9$9$D$D$F$F{"{"D$(JJLLE#() (#( !$D$(==#<#<) ('+'8'8'D'DH$.N )[(,C C/3%)() %%%E %|1133x?? ()*I .(2$-(.(K_K_KaKa$c$c!"!"!"!"s{"x.z/HIxzz  "8!7!9!9J!((** Q *(&2C2C2E2EF+/!%$% !!! !+q00Q / 1 1 1 2 9 9:K:K:M:M N N N N#-#@QQQ*1!Xr*B*B*Hb)O)O)Q)Q %&Ov&O&O P P P P P P P PQ*:+DkRD-,..L++)K#  GC111OOC((((*O<D" [ -44C2S223333X3{+;+;XXXYYYDEEE;''!++Y& k  H H H LLCQ G G G G G G G G H J           )(** C/F/F/H/H CCDDD*C*C*E*E::&D$(.:HHFE888%8889999STTTTUUU78889:::ABBB J J J LLEq I I I I I I I I J  =>>> GHHHHH  ( <7 " " /A// 0 0 0 7 8 8 8 GGG D ! ! ! ! +++ , , , HQKKKKKKKKK " ! ! ! ! ! sJ)AT(:$AT(C)U AAT( AV  CAT(!Y?>AT(?:Z<9AT(;Z<#acprrchatclawcrondumpr!rloginrmsetuptoolsbackuprdoctorhonchoimportlogoutmemoryrrrrVpairingpluginsprofilerwebhookinsightsrr1 dashboardr completion>r-r--resume --continuerrrzr)r+rr,rN)r) _SUBCOMMANDS_SESSION_FLAGSrr<rKrs r_coalesce_session_name_argsrsY$$$LJ<;;N F A c$ii--Q N " " MM% FAECII Q**3//G<// T!W%%%Q CII Q**3//G<// / chhuoo... MM% FA% c$ii--& Mrc ddlm}m}m}m}m}m}m}m}m } m } m } ddl m } t|dd} | |}| }td|td||}|D]}|j|ks |dkr|jr|jr,td |j|jr d |jd nd ztd |jrdndtd|jd|jrtd|jd|jntdS| dkr|}|}|stddStdddddddddddtddd d!d d"d d#|D]y}|j|ks |dkr |jrd$nd%}|j}|jpd&dd'}|jrdnd}|jr|jnd&}|jrd&}t||d(d|dd|dd|ztdS| d)kr|j} |||dkrtd*ntd+|dSdS#t0t2f$r1}td,|t5jd-Yd}~dSd}~wwxYw| d.kra|j}t|d/d0}t|d1d0}t|d2d0} t|d3d}||||||4}td5|d6||s|rDt|d3dp |}|rtd7|d8ntd9|d8|s|r6 dd:lm}||rtd;|d n#t<$rYnwxYw|se||} | r6t?| d!||s||}"|"rz$ Or access via flag: hermes -p z chatzWrapper created: u ⚠ z is not in your PATH.z3 Add to your shell config (~/.bashrc or ~/.zshrc):z( export PATH="$HOME/.local/bin:$PATH"z~/z Next steps:z0 setup Configure API keys and modelz" chat Start chattingz/ gateway start Start the messaging gatewayz Edit z/.env for different API keysz Edit z"/SOUL.md for different personalityu. ⚠ This profile has no API keys yet. Run 'z setup' first,z8 or it will inherit keys from your shell environment.z!/SOUL.md to customize personalitydeleter)rr)get_profile_dirprofile_exists_read_config_model_check_gateway_running _count_skillszError: Profile 'z' does not exist.z Profile: z Path: z Model: z Gateway: z Skills: z .env: rGr/znot configuredz SOUL.md: zSOUL.mdz Alias: aliasremove alias_name)r u✓ Removed alias 'rz No alias 'z' found to remove.z#!/bin/sh exec hermes -p z "$@" u✓ Alias created: u⚠ rename)rename_profilez Profile renamed: rzPath: rexport)export_profilez.tar.gzu✓ Exported 'z' to r)import_profile import_namercu✓ Imported profile 'z' at z Wrapper created: )5r4r_rrrarr`rrrrrr.rrrr? is_defaultrmrgateway_running skill_count alias_pathr:r5r6rrrrr7r+rformatr relative_torrFileExistsErrorrr r r r r/r2rold_namenew_nameroutputrarchive)7r r_rrrarr`rrrrrrr r:dhhrrrr}r?rmgwr r)rrrr profile_dir source_labelrrr] collision wrapper_pathprofile_dir_displayrrr r r r rrrr custom_namerrnew_dirrr result_pathrs7 r cmd_profiler+0s{                          544444 T+T 2 2F ~..00 !!## 1<11222 &&&''' =??  Av%%,)*C*C *C74174412C- ----EVA4E'Tyy9VVBBBBCCC<NLQVLLAFLLMMM   =??((**  & ' ' ' F KIKKKGKKK)KKK'KKLLL N*NN*NN*NN*NNOOO F FAFf$$9)<)<)<  6DW%ss+E/>YBl5AFFE|  VDTDDDDDDBDDDUDD E E E E  5    t $ $ $y  9::::,d,,-----;:-.    -A-- HQKKKKKKKKK  8   gu--D+u55 4U33X  |T::J(.%#"! K @@@;@@ A A A P  PD,55R9P9P9R9RP;L;;;<<<<N|NNNOOO   RRRRRR//55FDTDDDEEE D ,,[99 Hb!9!9::FV<<<====SZZ  O11$77 OOOOIOOPPP`$```LLLLMMMM#8#8#>#>L#O@,@@AAA6688O!"T+;+;+=+="T"T"TUUU! V""MNNN 7&*S1H1H1U1U-V-V&V## 7 7 7&)+&6&6### 7 " # # # MtMMM N N N ?t??? @ @ @ LtLLL M M M X  XS"5SSSTTTW 3WWWXXXXZdZZZQRRRV 3VVVWWW GGGGGO->?    -A-- HQKKKKKKKKK  8   dE5))  N4S ) ) ) ) ) )-.    -A-- HQKKKKKKKKK  6                 ~d##  >   ) 'g'' ( ( (  7   x//dL$77 666666~d##  ?    -A-- HQKKKKKKKKK  8  666666 04 0 0 0 (.v66K ;4;;k;; < < < < <-.    -A-- HQKKKKKKKKK  8  666666 (. 74#E#EK#D C4CCkCC D D D.-d33I @44T:: @> >>??? GGGGGO->?    -A-- HQKKKKKKKKK #  s13I((J*9&J%%J*/BW 2$NW  N$!W #N$$DW <6S32W 3T W TB9W X!&X  X4 YZ&ZZAfg#2&gg#!h))i+:&i&&i+;A7k44l< &l77l<c 0 ddl}ddl}nq#t$rd}tdtdtdt jdtd|t jdYd}~nd}~wwxYwd tj vr-ttd z d st jddd l m }|j p"tj ddk}||j|j|j t%|dd|dS)zStart the web UI server.rNz;Web UI dependencies not installed (need fastapi + uvicorn).zMRe-install the package into this interpreter so metadata updates apply: cd z zP -m pip install -e . If `pip` is missing in this venv, use: uv pip install -e .zImport error: rHERMES_WEB_DISTr[Tr?) start_serverHERMES_DASHBOARD_TUIrr[F)hostport open_browser allow_public embedded_chat)fastapiuvicornrrrrrrr8r9rFhermes_cli.web_serverr.rfrr0r1no_openr)r r5r6r)r.r4s r cmd_dashboardr9\sf      KLLL  J  J J J J J   "q""###    **\E1>>>  HQKKK222222HM /E F F# MML Y Y%T:u55# s A9AA44A9cddlm}m}m}t |dd}|dkrt ||dS|dkrt ||dSt ||dS)zPrint shell completion script.r) generate_bash generate_zsh generate_fishshellrzshfishN)hermes_cli.completionr;r<r=rr)r rr;r<r=r>s rcmd_completionrB|sPPPPPPPPPP D'6 * *E ~~ ll6""##### & mmF##$$$$$ mmF##$$$$$rc 8ddlm}m}t|ddpd}|dkr |dS||t|ddt|d d t|d dt|d dt|d dt|dddS)z!View and filter Hermes log files.r)tail_log list_logslog_namerrNlinesrfollowFlevelrasince component) num_linesrHrIrarJrK)hermes_cli.logsrDrEr)r rDrErFs rcmd_logsrNs33333333tZ11d?d@A}|dBdCdDE|dFdGE|dddHE|dIdJdKE|d*d)d+tjd,&|dgdLd dMN|dOdPddQ |dRdSddT |dddUtjdV|dddddtjdd !|d"d#dtjdW&|d'dtjdX&|dYdd$dZ&|d[td d\d]^|d-dtjd.&|d/dtjd0&|d1dtjd_&|d3dtjd`&|dad db|d5dd$d6&|d7d8dd$d9:|tc|dddedfA}|dgdhE|didjE|dkd dl|dmd dn|doddp |dqtdrdst|dudvE|dwddx |tcdydzl m }|d{d|d}A}|d~}|ddgd|ddE|ddgd|ddE||c|dddA}|d}|ddE}|dOdPddyd&|dBdSdd |ddd t|t||ddE} | ddd | ddd |ddE} | ddd | ddd |ddE} | ddd | ddd |ddE} | ddd | dddd | ddd |ddE} | ddd | ddd | ddd=|ddE}|ddd |ddE|dddA}|dddd|ddddd|tc|dddA}|ddgdâd dĬŦ|dddǬ |dddɬ |dddˬ |dddͬ |t c|dddЬA}|t"c|dddӬA}|dԬ}|ddd׬A}|dddd ddڬۦ|dd dݬ|dd d߬|ddd |t$c|dddA}|dddgd dN|dgdE|didE|dkd d|dmd d|dodd |dqtdrdt|dudE|dwdd |t&c|dddA}|dgdd dN|t(c|ddE}|d}|ddE}|ddE|ddgdd|ddE|ddE|dgdE|didE|dkdE|dmdE|dodd |dqtd  |dwdd |dud E|dd E}|ddd|ddE}|ddE|ddE|ddE}|ddE|ddE}|ddE|ddE}|ddE|ddE}|ddgdd|dkdE|ddE|dmd E|dodd |dqtd! |t*c|dd"d#A} | ddd$ | ddd% | t,c|d&d'd(A}!|!d)}"|"dd*E}#|#ddd+ |"d,dgd-}$|$d.d/E|$d0dd1|$dܐd2E|$d3d4E|$d5td6 |$d7d8d+d9|$d:d;E|$d<d=E|"d>d?E}%|%d@dAE|%dBdCE|%dDdEE|%dܐdFE|%d3dGE|%d5tdH |%d7d8d+dI|%dJdKd+dL|%dMdNd+dO|%dPddQ |%d:dRE|%d<dSE|"dTdUE}&|&d@dVE|"dWdXE}'|'d@dYE|"ddZE}(|(d@d[Et|(|"ddd\gd]})|)d@d^E|"dd_E|"d`daE}*t|*t|!|!t.c|dbdcddA}+|+de},|,dfdgdg}-|-dhdiE|-dDdjdk|-dldjdm|-dސdjdn|-d)djdo|-d3dpdq|-drdjds|-dtdjdu|-dvddw |,ddgdx|,ddgdy}.|.dhdzE|,d{d|E}/|/dhd}E|/d~djd|+t0c|dddA}0|0d}1|1ddgd|1d{dE}2|2ddE|2ddd d|2ddd d|1dddgd}3|3d;dE|1ddE|0t2c|dddA}4|4ddd |4t4c|dddA}5|5ddd |5t6c|dddtjd}6|6d}7|7ddE}8|8dtddt|8dtddt|8ddd |7d\dE}9|9ddgd|6t8c|dddA}:|:dddE|:dBddd |:dddE|:t:c|dddA};|;ddE|;dddd |;t<c|dddìA}<|<dĬ}=|=dŐdƬE|=d>dǬE|=dȐdɬE}>|>dddː|>ddd͐|=dΐdϬE|=dАdѬE|=dҐdӬE|=dԐdլE|<t>c|d֐dאdجA}?|?d٬}@|@ddڬE|@dېdܬE}A|AdݐdެE|AdߐdE|@ddE}B|BdݐdE|BddE|@ddEd}C|?|Cc|d8ddA}D|Dd}E|EddE}F|Fdtddt|Fdtddt|Fdadgdd|EddE}G|GddE|Gdadgd|Gdtddt|EddE}H|HddE|Hddjd|Hddd |Hdddd |EddE}I|IddE|Edd E}J|Jdadgd |Jd dd |EdҐd E}K|Kdhdd|EddE}L|Ldhdd|EddE}M|Mdhdd|EddE}N|NdhdE|EdddA}O|OdhdE|Oddd |Odddd |EddE}P|Pdd E|Pd!d"d"d#gd$|Pd%djd&|Ed'd(E}Q|Qd)}R|Rd*d+E}S|Sd,d-E|Rdd.E}T|Td/d0E|Tddd1 |Ed2d3E}U|Ud4}V|Vdd5E|Vdd6E}W|Wd7d8E|Vdd9E}X|Xdhd:E|Edd;Ed<}Y|D|Yc|d=d>d?A}Z|Zd@}[|[ddAE}\|\ddBE|\ddddC |\ }]|]dDddE |]dFddG |[ddHE}^|^dhdIE|[dddgdJ}_|_dhdKE|[ddgdL|[dMdNE}`|`dhdOE|[dPdQE}a|adhdREdS}b|Z|bc dydTl!m"}c|cD]e}d||ddh|ddU|d#dVdjtIdWjX}e|ddY|efnE#tJ$r8}ftMj'tP)dZ|fYd }f~fnd }f~fwwxYw|d[d\d]A}g|gd^}h|hdd_E|hdd`E|hdadbE|hddcE}i|iddddd |idegdfddgNdh}j|g|jc|didjdkA}k|kdlddm |kdn}l|lddoE}m|mdpdqdr|ldPdsE}n|ndtdudvdwx|ndpdqdy|ldMdzE}o|odtdudvd{x|odpdqdyd|}p|k|pc|d}d~dA}q|qd}r|rddE}s|sdOdPdd t|s|rddE}t|tdhdE|tddE|tddE|tddgd|tdddgd|tddE|tddgd|rddgd}u|udhdE|rddgd|rd{dE}v|vdhdE|rddgd}w|wdhdE|rddE}x|xdhdEt|qd}y|q|yc|dddAd}z|zddE}{|{dadE|{dtddt|zd*dE}|||d,dE||dadE||ddE|zd\dE}}|}ddE|}dddd |zddE}~|~dtddt|~dadE|~dddd |zddE|zddE}|ddE|ddud|zddE}|dadE|dtddtd0tTdtVfdfd„}|c|dÐdĐdŬA}|dtdǐdȬt|dadɬEdʄ}||c|dːd̐dͬA}|dά}|dԐdϐdЬA}|dadѬE|dddҬ |ddӐdgdԐdլN|ddd׬ |ddd٬ |dڐd۬E|dgdݢdސd߬N|dddd |ddgdd}|dadE|ddd |dddd d}||c|ddE}|tXc|dddA}|ddd$d&|ddd$d&|tZc|dddA}|ddd |dddd |t\c|dddA}t|d}||c|ddE}|d}|ddE|ddE}|ddE|d,dE}|ddE|ddd |ddd |ddd |d dd |d\d E}|dd E|ddddd |dŐdE}|ddE|ddE}|ddE|ddd |dܐddvd|ddE}|ddE|ddE|d*dE}|ddE|ddd d|dd E}|d!d"E|dܐd#dvd$|t^c|d%d&E}|d'dd(gd)d*+|fd,c|d-d.d/A}|d0td1d2t|d3d4d5|d6dd7 |dwdd8 |d5dd9 |t`c|d:d;ddd?d@|dAdtddBt|ddCddD |dEdFdG |dHdIdJ |dKdLdM |dNdvdO |tbcdydPl2m3}|}|r8ti|tjj6dd tkj7dtqtjj6dd }dyd l9}tu|dQr&tw|j<=n twt}fdR|D}|rd|_?tjj@} |Atj_@B|}|tj_@ng#t$r>}|tj_@|jDdykrd$|_?B|}Yd }~n$d }~wwxYwd$|_?B|}|jErtY|d ShdS}d)dd`hfddhfddhfdT}|#|jFdU\}}|jF|vs|rt||d |vrtWt|dVd$} dydWlHmI}|n.#tJ$r!t)dXdYYnwxYw dydZl2mK}dyd[lLmM}|||\n.#tJ$r!t)d]dYYnwxYwt|d^d rKdyd_lNmO}tkj7||jPt|ddd t|dd `|jQs|jRrI|jFBd>|_FdaD]&\}}tu||st|||'t|d S|jF;dbD]&\}}tu||st|||'t|d Stu|dcr|T|d SUd S(dz Main entry point for hermes CLI.hermesz:Hermes Agent - AI assistant with tool-calling capabilitiesa Examples: hermes Start interactive chat hermes chat -q "Hello" Single query mode hermes -c Resume the most recent session hermes -c "my project" Resume a session by name (latest in lineage) hermes --resume Resume a specific session by ID hermes setup Run setup wizard hermes logout Clear stored authentication hermes auth add Add a pooled credential hermes auth list List pooled credentials hermes auth remove

Remove pooled credential by index, id, or label hermes auth reset Clear exhaustion status for a provider hermes model Select default model hermes fallback [list] Show fallback provider chain hermes fallback add Add a fallback provider (same picker as `hermes model`) hermes fallback remove Remove a fallback provider from the chain hermes config View configuration hermes config edit Edit config in $EDITOR hermes config set model gpt-4 Set a config value hermes gateway Run messaging gateway hermes -s hermes-agent-dev,github-auth hermes -w Start in isolated git worktree hermes gateway install Install gateway background service hermes sessions list List past sessions hermes sessions browse Interactive session picker hermes sessions rename ID T Rename/title a session hermes logs View agent.log (last 50 lines) hermes logs -f Follow agent.log in real time hermes logs errors View errors.log hermes logs --since 1h Lines from the last hour hermes debug share Upload debug report for support hermes update Update to latest version For more help on a command: hermes --help )prog descriptionformatter_classepilogrUz-VrzShow version and exit)r r z-zz --oneshotPROMPTNaOne-shot mode: send a single prompt and print ONLY the final response text to stdout. No banner, no spinner, no tool previews, no session_id line. Tools, memory, rules, and AGENTS.md in the CWD are loaded as normal; approvals are auto-bypassed. Intended for scripts / pipes.)metavarr r rTz--modelzModel override for this invocation (e.g. anthropic/claude-sonnet-4.6). Applies to -z/--oneshot and --tui. Also settable via HERMES_INFERENCE_MODEL env var.)r r z --providerzProvider override for this invocation (e.g. openrouter, anthropic). Applies to -z/--oneshot and --tui. Also settable via HERMES_INFERENCE_PROVIDER env var.rrSESSIONz(Resume a previous session by ID or titlerrrr^T SESSION_NAMEz=Resume a session by name, or the most recent if no name given)destnargsconstr rVr z --worktreez-wFz5Run in an isolated git worktree (for parallel agents)r rzAuto-approve any unseen shell hooks declared in config.yaml without a TTY prompt. Equivalent to HERMES_ACCEPT_HOOKS=1 or hooks_auto_accept: true in config.yaml. Use on CI / headless runs that can't prompt.z--skillsz-srzJPreload one or more skills for the session (repeat flag or comma-separate)z--yolozDBypass all dangerous command approval prompts (use at your own risk)z--pass-session-idz3Include the session ID in the agent's system promptz--ignore-user-configzfIgnore ~/.hermes/config.yaml and fall back to built-in defaults (credentials in .env are still loaded)z--ignore-ruleszUSkip auto-injection of AGENTS.md, SOUL.md, .cursorrules, memory, and preloaded skillsz--tuiz1Launch the modern TUI instead of the classic REPLz--devrzInteractively select your inference provider and default modelz --portal-urlz;Portal base URL for Nous login (default: production portal)z--inference-urlzIInference API base URL for Nous login (default: production inference API)z --client-idz;OAuth client id to use for Nous login (default: hermes-cli)z--scopez%OAuth scope to request for Nous loginz --no-browserzBDo not attempt to open the browser automatically during Nous loginz --timeoutrYzManage fallback providers (tried when the primary model fails)zManage the fallback provider chain. Fallback providers are tried in order when the primary model fails with rate-limit, overload, or connection errors. See: https://hermes-agent.nousresearch.com/docs/user-guide/features/fallback-providersfallback_command)rYrlsz.service) and unrelated third-party services are never touched.z --dry-rundry_runz+List what would be removed without doing it)rYr r z-yz--yesrzSkip the confirmation promptzInteractive setup wizardz~Configure Hermes Agent with an interactive wizard. Run a specific section: hermes setup model|tts|terminal|gateway|tools|agentsection)rmttsterminalrVrrz7Run a specific setup section instead of the full wizard)rZr;r r z--non-interactivez,Non-interactive mode (use defaults/env vars)z--resetzReset configuration to defaultsz --reconfigureu(Default on existing installs.) Re-run the full wizard, showing current values as defaults. Kept for backwards compatibility — a bare 'hermes setup' now does this.z--quickzvOn existing installs: only prompt for items that are missing or unset, instead of running the full reconfigure wizard.r1zSet up WhatsApp integrationz'Configure WhatsApp and pair via QR codeslackz5Slack integration helpers (manifest generation, etc.)z%Slack integration helpers for Hermes.rrzvPrint or write a Slack app manifest with every gateway command registered as a native slash (/btw, /stop, /model, ...)u(Generate a Slack app manifest that registers every gateway command in COMMAND_REGISTRY as a first-class Slack slash command (matching Discord and Telegram parity). Paste the output into Slack app config → Features → App Manifest → Edit, then Save. Reinstall the app if Slack prompts for it.z--writerzdWrite manifest to a file instead of stdout. With no PATH writes to $HERMES_HOME/slack-manifest.json.)rZr[r rVr z--namez$Bot display name (default: "Hermes")z --descriptionz/Bot description shown in Slack's app directory.z--slashes-onlyz]Emit only the features.slash_commands array (for merging into an existing manifest manually).rz'Authenticate with an inference providerz2Run OAuth device authorization flow for Hermes CLIrrz-Provider to authenticate with (default: nous)z,Portal base URL (default: production portal)z:Inference API base URL (default: production inference API)z,OAuth client id to use (default: hermes-cli)zOAuth scope to requestz0Do not attempt to open the browser automaticallyz-HTTP request timeout in seconds (default: 15)z/Path to CA bundle PEM file for TLS verificationz'Disable TLS verification (testing only)rz.Clear authentication for an inference providerz3Remove stored credentials and reset provider config)rrspotifyz3Provider to log out from (default: active provider)rz"Manage pooled provider credentials auth_actionzAdd a pooled credentialrz>Provider id (for example: anthropic, openai-codex, openrouter)z--typer)oauthzapi-keyruzCredential type to add)rYr;r z--labelzOptional display labelz --api-keyz+API key value (otherwise prompted securely)zNous portal base URLzNous inference base URLzOAuth client idzOAuth scope overridez*Do not auto-open a browser for OAuth loginz OAuth/network timeout in seconds)r^r z(Disable TLS verification for OAuth loginz Custom CA bundle for OAuth loginzList pooled credentialszOptional provider filter)rZr z1Remove a pooled credential by index, id, or labelz Provider idrpz*Credential index, entry id, or exact labelrz:Clear exhaustion status for all credentials for a providerzShow auth status for a providerz.Log out a provider and clear stored auth statermz)Authenticate Hermes with Spotify via PKCEspotify_action)rrr)rZr;r z7Spotify app client_id (or set HERMES_SPOTIFY_CLIENT_ID)z--redirect-uriz8Allow-listed localhost redirect URI for your Spotify appz!Override requested Spotify scopesz*Callback/token exchange timeout in secondszShow status of all componentsz)Display status of Hermes Agent componentsz'Show all details (redacted for sharing)z!Run deep checks (may take longer)rzCron job managementzManage scheduled tasksrzList scheduled jobszInclude disabled jobsrzCreate a scheduled jobschedulez/Schedule like '30m', 'every 2h', or '0 9 * * *'r,z2Optional self-contained prompt or task instructionz Optional human-friendly job namez --deliverzNDelivery target: origin, local, telegram, discord, signal, or platform:chat_idz--repeatzOptional repeat countz--skillrz.Attach a skill. Repeat to add multiple skills.z--scriptzIPath to a Python script whose stdout is injected into the prompt each runz --workdirzAbsolute path for the job to run from. Injects AGENTS.md / CLAUDE.md / .cursorrules from that directory and uses it as the cwd for terminal/file/code_exec tools. Omit to preserve old behaviour (no project context files).editzEdit an existing scheduled jobjob_idzJob ID to editz --schedulez New schedulez--promptzNew prompt/task instructionz New job namezNew delivery targetzNew repeat countzIReplace the job's skills with this set. Repeat to attach multiple skills.z --add-skill add_skillsz?Append a skill without replacing the existing list. Repeatable.z--remove-skill remove_skillsz-Remove a specific attached skill. Repeatable.z--clear-skillsz'Remove all attached skills from the jobzfPath to a Python script whose stdout is injected into the prompt each run. Pass empty string to clear.zqAbsolute path for the job to run from (injects AGENTS.md etc. and sets terminal cwd). Pass empty string to clear.pausezPause a scheduled jobzJob ID to pauserzResume a paused jobzJob ID to resumez$Run a job on the next scheduler tickzJob ID to triggerrzRemove a scheduled jobzJob ID to removez"Check if cron scheduler is runningtickzRun due jobs once and exitrz$Manage dynamic webhook subscriptionszPCreate, list, and remove webhook subscriptions for event-driven agent activationwebhook_action subscribezCreate a webhook subscriptionr?z*Route name (used in URL: /webhooks/)rnz0Prompt template with {dot.notation} payload refsz--eventsz%Comma-separated event types to acceptzWhat this subscription doesz#Comma-separated skill names to loadlogz4Delivery target: log, telegram, discord, slack, etc.z--deliver-chat-idz*Target chat ID for cross-platform deliveryz--secretz'HMAC secret (auto-generated if omitted)z--deliver-onlyuSkip the agent — deliver the rendered prompt directly as the message. Zero LLM cost. Requires --deliver to be a real target (not 'log').zList all dynamic subscriptionszRemove a subscriptionzSubscription name to removetestz#Send a test POST to a webhook routezSubscription name to testz --payloadz,JSON payload to send (default: test payload)hooksz%Inspect and manage shell-script hookszInspect shell-script hooks declared in ~/.hermes/config.yaml, test them against synthetic payloads, and manage the first-use consent allowlist at ~/.hermes/shell-hooks-allowlist.json. hooks_actionz?List configured hooks with matcher, timeout, and consent statusz against a synthetic payloadeventzAHook event name (e.g. pre_tool_call, pre_llm_call, subagent_stop)z --for-toolfor_toolz^Only fire hooks whose matcher matches this tool name (used for pre_tool_call / post_tool_call))rYr r z--payload-file payload_filezYPath to a JSON file whose contents are merged into the synthetic payload before executionrevokezCRemove a command's allowlist entries (takes effect on next restart)z?The exact command string to revoke (as declared in config.yaml)rzeCheck each configured hook: exec bit, allowlist, mtime drift, JSON validity, and synthetic run timingz$Check configuration and dependenciesz'Diagnose issues with Hermes Agent setupz--fixz#Attempt to fix issues automaticallyrz(Dump setup summary for support/debuggingzyOutput a compact, plain-text summary of your Hermes setup that can be copy-pasted into Discord/GitHub for support contextz --show-keyszOShow redacted API key prefixes (first/last 4 chars) instead of just set/not setru7Debug tools — upload logs and system info for supportzDebug utilities for Hermes Agent. Use 'hermes debug share' to upload a debug report (system info + recent logs) to a paste service and get a shareable URL.aRExamples: hermes debug share Upload debug report and print URL hermes debug share --lines 500 Include more log lines hermes debug share --expire 30 Keep paste for 30 days hermes debug share --local Print report locally (no upload) hermes debug delete Delete a previously uploaded paste )r rRrSrT debug_commandsharez@Upload debug report to a paste service and print a shareable URLz--linesz:Number of log lines to include per log file (default: 200)z--expirez!Paste expiry in days (default: 7)z--localz-Print the report locally instead of uploadingz/Delete a paste uploaded by 'hermes debug share'urls*z?One or more paste URLs to delete (e.g. https://paste.rs/abc123))rZr r rz+Back up Hermes home directory to a zip filezCreate a zip archive of your entire Hermes configuration, skills, sessions, and data (excludes the hermes-agent codebase). Use --quick for a fast snapshot of just critical state files.z-oz--outputzGOutput path for the zip file (default: ~/hermes-backup-.zip)zNQuick snapshot: only critical state files (config, state.db, .env, auth, cron)z/Label for the snapshot (only used with --quick)rz'Restore a Hermes backup from a zip filezExtract a previously created Hermes backup into your Hermes home directory, restoring configuration, skills, sessions, and datarmzPath to the backup zip filez-fz-Overwrite existing files without confirmationrzView and edit configurationz!Manage Hermes Agent configurationrrzShow current configurationzOpen config file in editorrzSet a configuration valuerz1Configuration key (e.g., model, terminal.backend)valuez Value to setrzPrint config file pathzenv-pathzPrint .env file pathrz!Check for missing/outdated configmigratezUpdate config with new optionsrz.Manage DM pairing codes for user authorizationz/Approve or revoke user access via pairing codespairing_actionzShow pending + approved usersapprovezApprove a pairing coder=z2Platform name (telegram, discord, slack, whatsapp)rzPairing code to approvezRevoke user accessz Platform nameuser_idzUser ID to revokez clear-pendingzClear all pending codesc(ddlm}||dS)Nr)pairing_command)hermes_cli.pairingr)r rs r cmd_pairingzmain..cmd_pairingZ!s*666666rz-Search, install, configure, and manage skillszSearch, install, inspect, audit, configure, and manage skills from skills.sh, well-known agent skill endpoints, GitHub, ClawHub, and other registries. skills_actionbrowsez'Browse all available skills (paginated)z--pagerzPage number (default: 1)z--sizerzResults per page (default: 20)r)rrz skills-shz well-knowngithubclawhublobehubzFilter by source (default: all))r r;r searchzSearch skill registriesrz Search query)r r;z--limitrz Max resultszInstall a skill identifierz3Skill identifier (e.g. openai/skills/skill-creator)z --categoryzCategory folder to install intoz$Install despite blocked scan verdictz-Skip confirmation prompt (needed in TUI mode)r?z"Preview a skill without installingzSkill identifierzList installed skills)rhubbuiltinlocalz--enabled-onlyzcHide disabled skills. Use with -p to see exactly which skills will load for that profile.z&Check installed hub skills for updatesz&Specific skill to check (default: all)rzUpdate installed hub skillsz7Specific skill to update (default: all outdated skills)auditzRe-scan installed hub skillsz&Specific skill to audit (default: all)zRemove a hub-installed skillzSkill name to removeuOReset a bundled skill — clears 'user-modified' tracking so updates work againzClear a bundled skill's entry from the sync manifest (~/.hermes/skills/.bundled_manifest) so future 'hermes update' runs stop marking it as user-modified. Pass --restore to also replace the current copy with the bundled version.z+Skill name to reset (e.g. google-workspace)z --restorez.cmd_skills"sx 4$ / /8 ; ;  ) ) ) X X X X X X ! !$ ' ' ' ' ' < < < < < < N4 rru0Manage plugins — install, update, remove, listzDInstall plugins from Git repositories, update, remove, or list them.plugins_actionz-Install a plugin from a Git URL or owner/repozNGit URL or owner/repo shorthand (e.g. anpicasso/hermes-plugin-chrome-profiles)z$Remove existing plugin and reinstallz--enablez?Auto-enable the plugin after install (skip confirmation prompt)z --no-enablez]Install disabled (skip confirmation prompt); enable later with `hermes plugins enable `z+Pull latest changes for an installed pluginzPlugin name to updatezRemove an installed pluginzPlugin directory name to removezList installed pluginsenablezEnable a disabled pluginzPlugin name to enabledisablez$Disable a plugin without removing itzPlugin name to disablec(ddlm}||dS)Nr)plugins_command)hermes_cli.plugins_cmdr)r rs r cmd_pluginszmain..cmd_plugins["s*::::::r)discover_plugin_cli_commandsr rRr)r rRrSsetup_fnzPlugin CLI discovery failed: %srz"Configure external memory providerzSet up and manage external memory provider plugins. Available providers: honcho, openviking, mem0, hindsight, holographic, retaindb, byterover. Only one external provider can be active at a time. Built-in memory (MEMORY.md/USER.md) is always active.memory_commandz0Interactive provider selection and configurationz#Show current memory provider configoffz)Disable external provider (built-in only)z1Erase all built-in memory (MEMORY.md and USER.md)zSkip confirmation promptz--target)rrrz:Which store to reset: 'all' (default), 'memory', or 'user'c t|dd}|dkruddlm}m}|}t |dt si|d<d|dd<||tdtd dS|d krdd lm }m }|d z t|d d}g}|dvr| d|dvr| dfd|D} | std|ddStd| D]=\} } | z } | j } td| d| d| dd>t|ddss td}n'#t"t$f$rtdYdSwxYw|dkrtd dS| D]2\} } | z td!| d| d"3td#td$|ddSdd%lm}||dS)&Nrrrrrrnru% ✓ Memory provider: built-in onlyz Saved to config.yaml r)rErmemoriesrpr)rr)z MEMORY.mdz agent notes)rr)zUSER.mdz user profilecLg|] \}}|z ||f!Srr)ryrrmem_dirs rrz,main..cmd_memory.."sF%aGaK;O;O;Q;QD ru1 Nothing to reset — no memory files found in z /memories/ z: This will permanently erase the following memory files:u ◆ ru) — rz bytesrFz Type 'yes' to confirm: z Cancelled. z Cancelled. u ✓ Deleted rzE Memory reset complete. New sessions will start with a blank slate.z Files were in: )r)rrrSrrrrrr.rErrrzst_sizerr1rrrr/hermes_cli.memory_setupr)r rrSrrrErrpfiles_to_resetrPrrrsizer=rrs @r cmd_memoryzmain..cmd_memory"sTd,d33 %<< B B B B B B B B []]Ffjj22D99 &#%x +-F8 Z ( K    : ; ; ; , - - - - - G^^ M M M M M M M M%o''*4GT8U33FN***%%&BCCC((%%&ABBB)7H lI\I\I^I^lll P Q Q Q# B B4{yy{{*@@@d@@$@@@@AAAA4.. "#@AAGGIIOOQQFF "34,---FFU??*+++F# 5 541$$&&&3q33D3334444 Y    I&9&9&;&;III J J J J J > > > > > > N4 s=3F11 GGrz.Configure which tools are enabled per platformaEnable, disable, or list tools for CLI, Telegram, Discord, etc. Built-in toolsets use plain names (e.g. web, memory). MCP tools use server:tool notation (e.g. github:create_issue). Run 'hermes tools' with no subcommand for the interactive configuration UI.z --summaryz6Print a summary of enabled tools per platform and exit tools_actionz0Show all tools and their enabled/disabled statusz --platformrPzPlatform to show (default: cli)zDisable toolsets or MCP toolsnamesrdNAMEz7Toolset name (e.g. web) or MCP tool in server:tool form)rZrVr z#Platform to apply to (default: cli)zEnable toolsets or MCP toolsz,Toolset name or MCP tool in server:tool formct|dd}|dvrddlm}||dStdddlm}||dS)Nr)rrrr)tools_disable_enable_commandr) tools_command)rhermes_cli.tools_configrrr)r r rrs r cmd_toolszmain..cmd_tools#s~~t44 2 2 2 L L L L L L ( ( . . . . .  ! ! ! = = = = = = M$     rrz2Manage MCP servers and run Hermes as an MCP serverzManage MCP server connections and run Hermes as an MCP server. MCP servers provide additional tools via the Model Context Protocol. Use 'hermes mcp add' to connect to a new server, or 'hermes mcp serve' to expose Hermes conversations over MCP. mcp_actionservezBRun Hermes as an MCP server (expose conversations to other agents)z Enable verbose logging on stderrz+Add an MCP server (discovery-first install)z Server name (used as config key)z--urlzHTTP/SSE endpoint URLz --commandzStdio command (e.g. npx)z--argszArguments for stdio commandz--authrorz Auth method)r;r z--presetzKnown MCP preset namez--envz3Environment variables for stdio servers (KEY=VALUE)zRemove an MCP serverzServer name to removezList configured MCP serverszTest MCP server connectionzServer name to test configurezToggle tool selectionzServer name to configurez5Force re-authentication for an OAuth-based MCP serverzServer name to re-authenticatec(ddlm}||dS)Nr) mcp_command)hermes_cli.mcp_configr)r rs rcmd_mcpzmain..cmd_mcpj#s*555555 Drrz._confirm_prompt#sX ==&&((..00L@ @+,   55 s47A  A c ddl} ddlm}|}n*#t$r}t d|Yd}~dSd}~wwxYw|j}t |dd}|rdndg}|dkr||j||j }|st ddStd |D} | r-t d d d d dd ddd dt dn,t d dd ddd ddd dt d|D]} t| d} | r| ddddn| dddd} | rE| dpddd} | d}t | d d | dd | dd || d}t | dd | dd | ddd |Րn|d kr|j r ||j }|st d!|j d"dS||}|st d!|j d"dS||d#$d%z}|jd&kr!t$j|n(t+|jd'd()5}||dddn #1swxYwYt d*|jn||j+}|jd&kr>|D]9} t$j|| d#$d%z:ngt+|jd'd()5}|D]/} ||| d#$d%z0 dddn #1swxYwYt d,t/|d-|jn|d.kr||j }|st d!|j d"dS|js !d/|d0st d1dS||rt d2|d3nOt d!|j d"n5|d4krv|j}|jr d5|jd6nd}|js#!d7|d8|d9st d1dS|||j:}t d;|d<n|d=kr||j }|st d!|j d"dSd |j} ||| rt d!|d>| nt d!|j d"n#t>$r}t d?|Yd}~nd}~wwxYw|d@krt |dAdBpdB}t |dd}|rdndg}||||}| |st ddStC|}|st d1dSt dC|tEj#dD}|rtIj%|dDdE|gn.tIj%t$j&t$j&dFdGdE|gdS|dHkr|'}|(}t dI|t dJ|dKD]4}|'|+}|dkrt dL|dM|dN5|j)}|*r6tHj+,|dOz } t dP| dQdRn"-| dS)SNrr$z(Error: Could not open session database: rtoolr)rexclude_sourcesr&rc3@K|]}|dVdS)rNr>)ryrs rr{z-main..cmd_sessions..#s,>>QUU7^^>>>>>>rTitlez<32rPreviewz<40z Last Activez<13ruJ──────────────────────────────────────────────────────────────────────────────────────────────────────────────rrz<6u───────────────────────────────────────────────────────────────────────────────────────────────rrrn&0rrrrrz Session 'z ' not found.F) ensure_asciirrzwrJrKzExported 1 session to rgz Exported z sessions to rzDelete session 'z' and all its messages? [y/N] rAzDeleted session 'rrz from 'rz%Delete all ended sessions older than z daysz? [y/N] )older_than_daysrzPruned z session(s).rz' renamed to: r'rr&rzResuming session: rPrrTzhermes_cli.mainrzTotal sessions: zTotal messages: )rPtelegramdiscordr1rlrr+rizDatabase size: z.1fz MB).rr'r%r7rrrlist_sessions_richrr&rrhrrdresolve_session_idexport_sessionr3rrrr r export_allr+rdelete_session older_thanprune_sessionsrNrset_session_titler5r)r"rKrLr8rPr session_countrhdb_pathr/rgetsize print_help)#r r6r%r*r)r _source_excluder has_titlesrrrrrresolved_session_idrrrdays source_msgrr&r_browse_exclude selected_idr>rmsgsr r<rsize_mbrsessions_parsers# r cmd_sessionszmain..cmd_sessions#s_   . . . . . .BB    @Q@@ A A A FFFFF %$$//"044 V  ,,{HDJ-H *+++>>X>>>>>J "QQQyQQQ}QQQ4QQRRRk""""NNNNNNUNNNNNOOOj!!! U U,QUU=-A-ABB "3AEE)R(("--y"--crc2 UUU7^^4ucrc:ED'CUNNNNNN{NNNNNOOOOD'CWSSS;SSSQx[SSScSSTTTT Ux   Q&(&;&;DO&L&L#*CdoCCCDDDF(()<==CdoCCCDDDF{{4e{<3N>>OO,AV22 W<WWrz!Show usage insights and analyticszVAnalyze session history to show token usage, costs, tool patterns, and activity trendsz--daysrz'Number of days to analyze (default: 30)z1Filter by platform (cli, telegram, discord, etc.)cL ddlm}ddlm}|}||}||j|j}t||| dS#t$r}td|Yd}~dSd}~wwxYw)Nrr$)InsightsEngine)rrzError generating insights: ) r'r%agent.insightsrgeneraterrrformat_terminalr)r7)r r%rr*enginereportr)s r cmd_insightszmain..cmd_insightsr$s 5 . . . . . . 5 5 5 5 5 5B#^B''F__$)DK_HHF &((00 1 1 1 HHJJJJJ 5 5 5 333 4 4 4 4 4 4 4 4 4 5sA8A<< B#BB#rzOpenClaw migration toolszHMigrate settings, memories, skills, and API keys from OpenClaw to Hermes claw_actionzMigrate from OpenClaw to Hermesz|Import settings, memories, skills, and API keys from an OpenClaw installation. Always shows a preview before making changes.z1Path to OpenClaw directory (default: ~/.openclaw)u:Preview only — stop after showing what would be migratedz user-datafullz>Migration preset (default: full). 'user-data' excludes secretsz --overwritez2Overwrite existing files (default: skip conflicts)z--migrate-secretsz@Include allowlisted secrets (TELEGRAM_BOT_TOKEN, API keys, etc.)z--workspace-targetz1Absolute path to copy workspace instructions intoz--skill-conflict)r overwriterrz2How to handle skill name conflicts (default: skip)zSkip confirmation promptscleanuprz5Archive leftover OpenClaw directories after migrationzQScan for and archive leftover OpenClaw directories to prevent state fragmentation)rdr rRz1Path to a specific OpenClaw directory to clean upz5Preview what would be archived without making changesc(ddlm}||dS)Nr) claw_command)hermes_cli.clawr)r rs rcmd_clawzmain..cmd_claw$s*000000 TrrzShow version informationz)Update Hermes Agent to the latest versionz;Pull the latest changes from git and reinstall dependenciesz --gatewayzZGateway mode: use file-based IPC for prompts instead of stdin (used internally by /update)z--checkz@Check whether an update is available without installing anythingzUninstall Hermes AgentzJRemove Hermes Agent from your system. Can keep configs/data for reinstall.z=Full uninstall - remove everything including configs and datarz9Run Hermes Agent as an ACP (Agent Client Protocol) serverzOStart Hermes Agent in ACP mode for editor integration (VS Code, Zed, JetBrains)c ddlm}|dS#t$r6tdtdt jdYdSwxYw)z%Launch Hermes Agent as an ACP server.rrzACP dependencies not installed.z+Install them with: pip install -e '.[acp]'rN)acp_adapter.entryrrrrr)r acp_mains rcmd_acpzmain..cmd_acp %st  : : : : : : HJJJJJ    3 4 4 4 ? @ @ @ HQKKKKKK s.tar.gz)zImport a profile from archiver zPath to .tar.gz archiverz-Profile name (default: inferred from archive)rz2Print shell completion script (bash, zsh, or fish)r>r)rr?r@zShell type (default: bash))rZr r;r c$t|Srw)rB)r rs rr\zmain..|%s^D&5Q5QrrzStart the web UI dashboardzQLaunch the Hermes Agent web dashboard for managing config, API keys, and sessionsz--porti#zPort (default 9119)z--hostrzHost (default 127.0.0.1)z --no-openz Don't open browser automaticallyzKAllow binding to non-localhost (DANGEROUS: exposes API keys on the network)zuExpose the in-browser Chat tab (embedded `hermes --tui` via PTY/WebSocket). Alternatively set HERMES_DASHBOARD_TUI=1.r!z View and filter Hermes log filesz;View, tail, and filter agent.log / errors.log / gateway.logaExamples: hermes logs Show last 50 lines of agent.log hermes logs -f Follow agent.log in real time hermes logs errors Show last 50 lines of errors.log hermes logs gateway -n 100 Show last 100 lines of gateway.log hermes logs --level WARNING Only show WARNING and above hermes logs --session abc123 Filter by session ID hermes logs --component tools Only show tool-related lines hermes logs --since 1h Lines from the last hour hermes logs --since 30m -f Follow, starting from 30 min ago hermes logs list List available log files with sizes rFrzPLog to view: agent (default), errors, gateway, or 'list' to show available filesrBz%Number of lines to show (default: 50)z--followz*Follow the log in real time (like tail -f)z--levelLEVELz7Minimum log level to show (DEBUG, INFO, WARNING, ERROR)rArz1Filter lines containing this session ID substringz--sinceTIMEz,Show lines since TIME ago (e.g. 1h, 30m, 2d)z --componentz5Filter by component: gateway, agent, tools, cli, cron)get_container_exec_infor;c3JK|]}|d|vVdS)rzNr)ryr _known_cmdss rr{zmain..&sMc9J9J [r>Nrlrr)rrVr)NN accept_hooks)discover_pluginsz&plugin discovery failed at CLI startup)exc_inforR)register_from_config)rz-shell-hook registration failed at CLI startuponeshot) run_oneshot)rmr)rNrmNrNrNrFrF)rrrrr)rN)rNrr_)VrArgumentParserRawDescriptionHelpFormatterr add_subparsers add_parserrrc set_defaultsr*rrXhermes_cli.fallback_cmdr`rr.rrRrrrrrrrrrrrr rradd_mutually_exclusive_groupplugins.memoryrr __import__r7logging getLoggerrrrrrrYr r+r9rNrrr[rr)rrior'rr;keysrrrStringIO parse_argsrirrrXrhermes_cli.pluginsrrrSagent.shell_hooksrhermes_cli.oneshotrrrrsetattrr_r) subparsers chat_parser model_parserr`fallback_parserfallback_subparsersgateway_parsergateway_subparsers gateway_run gateway_start gateway_stopgateway_restartgateway_statusgateway_installgateway_uninstallgateway_migrate_legacy setup_parserwhatsapp_parser slack_parser slack_subslack_manifest login_parser logout_parser auth_parserauth_subparsersauth_add auth_list auth_remove auth_reset auth_status auth_logout auth_spotify status_parser cron_parsercron_subparsers cron_list cron_create cron_edit cron_pause cron_resumecron_run cron_remove cron_tickwebhook_parserwebhook_subparserswh_subwh_rmwh_test hooks_parserhooks_subparsers_hk_test _hk_revoke doctor_parser dump_parser debug_parser debug_sub share_parser delete_parser backup_parser import_parser config_parserconfig_subparsers config_setpairing_parser pairing_subpairing_approve_parserpairing_revoke_parserr skills_parserskills_subparsers skills_browse skills_searchskills_installskills_inspect skills_list skills_check skills_update skills_auditskills_uninstall skills_resetskills_publishskills_snapshotsnapshot_subparsers snap_export snap_import skills_taptap_subparserstap_addtap_rmrplugins_parserplugins_subparsersplugins_install_install_enable_groupplugins_updateplugins_removeplugins_enableplugins_disablerrcmd_info plugin_parser_exc memory_parser memory_sub _reset_parserr tools_parser tools_sub tools_list_ptools_disable_ptools_enable_pr mcp_parsermcp_sub mcp_serve_p mcp_add_pmcp_rm_p mcp_test_p mcp_cfg_p mcp_login_prsessions_subparsers sessions_listsessions_exportsessions_deletesessions_prunesessions_renamesessions_browserinsights_parserr claw_parserclaw_subparsers claw_migrate claw_cleanuprversion_parser update_parseruninstall_parser acp_parserr profile_parserprofile_subparsers profile_useprofile_createprofile_delete profile_show profile_aliasprofile_renameprofile_exportprofile_importcompletion_parserdashboard_parser logs_parserrr9_processed_argv_io_has_cmd_token _saved_stderrr rA_AGENT_COMMANDS_AGENT_SUBCOMMANDS _sub_attr_sub_set _accept_hooksrrSrrrr rrrrs @@@@rrrsI  $ P <$ )))FV T,5L   ;    "   c   f    7    L      D   &       Y   S    B    u    d    @     K &&I  ! L    ! U ! 2     j    p ! S  ! B  !@  !b  V  @    K (+++ (( 0T)L  J X J 4&M Q   K  R E 9--- 544444 ++ M ` ,  O*88>P8QQ"" K# "" ^#"" 5# "" *#  l 333  ** +P+N (66***'11N2M <  S&00>T0UUL <  =)3314O   <!    O!(228BW2XXNDWXXX  H    < )33Q4O    4  9--- (( 6H)L ( <  K It*Xii-jjL.cC`C`C`jqrrrm2klll.5opppi.QRRRn\Hz{{{kUVVV",,5'(@-KJ"VX,NOOO ]Zc8OPPP  =   Xl  **5+I8*:;;; ???)) :*H ()<===8$$$!,,4*1I-KX,>???x.RSSS **68T*UUI9%%%;'''(+++  ** 3f+N (66 *  E v$ABBB ++:,G &ABBB R&T[111 (( 4 I )L$222GG N   ** K+H  P :t 8 ~t 1",,8T* R-J N  6 9--- )) 3=*M  +PJ/// '' 7J(K  ^ (+++ (( F+!<)L +++AAI'' O(L  I    0   < (( >)M N  9--- )) :H*M  V   ]   iOJ/// )) 6*My/LMMM  <  J/// )) *7*M &44:J4KK  .J KKK  .J KKK#--e:U-VVJ SRG3^DDD  .F GGG  2H III  /R SSS  1Q RRRJ///  ** =E+N !//5E/FFK6(GHHH(3304''M(''5N'OOO'228BV2WW&&z&HHH&&y7J&KKK?1JKKK [111 )) <m*M &44/4JJ%00@1MsA,FsB-M   /   &0001Mw^<<<      ysB]SSS&11)BS1TTNP b'H ,-S   <  '11<2N 3EFFF#..v0Lc H&0041M F %//40Lc H)3384!!&/E!FFF$// ^ A 0LB K   < '1172N 3LMMM8Y*?FW "#L (22=3O*88>O8PP%00:1KX,VWWW%00>1KW+ABBB,-T#--e:P-QQJ..L.AANf+ABBB''4W'XXG &EFFF  & &xn & E EF %9:::   S! ! ! !J///  ** ?Z+N (664O  .F GGG [111 S??????4466 0 0H&11 f%$LL;; *: 6 6 R 2M !HZ  / / / / 0 SSS(##))*KTRRRRRRRRS )) 1 D *  M--3C-DDJH()NOOO%&QRRR)) @*M  '  ))) I <!<!<!|J/// (( = Z )  L E +++@@I'' ?(L . ** ,+O   F !    2!)) +*N ;    2     9---&& A J '  J''\'::G$$ Q%K  /  ;'''"" A#I6(JKKK 7)@AAA ;-GHHH R.K8gx-@}UUU :,CDDD  B !!(TFAW!XXH &'>??? vv4QRRR##F1M#NNJF)>???""hZ.E#I6(BCCC$$ D%KV*JKKK:&&& ))) !++ K>,O *88>O8PP'226@V2WWMJR.D*4485O  B!  2D EEE  6Q RRR)4425O  4J KKK  l1D!)33GBW3XXN  >    1WXXXl1D ""71P"QQQ)4485O  4J KKK  :U VVV)44 Q5O  J!  R.R!eeeeeeN  l 333 !++ 0l,O   sB-V!  L! 5 5 5  l 333 '' '^(K "00m0DDO#-- .8.L L I f% M   A  O #V/// A  l1L #-- Dg .L L D l1L (+++  **9;U*VVN[111 )) 8Q*M  i   O  J/// ",, %`- !! L" !!l1L"!!}!555 && He'J :&&&   )))  ** E+N(66T0UULn3DEEE&11.2M~NCCC<.I  8 (228BT2UUN 1GHHH 1CDDD'2243N5HIII j$-S (2263N 0IJJJ  <  [111 #-- A.""''' ) #""(Q(Q(Q(Q"RRR ",, )g- !!sD/D"!!+,F"!!L/Q"!! Z" !! 8 "!!}!555 '' /Q <  (K& _     4   9   F  @  ;  D (+++:99999,,..N>38ABB<888  1#(122,??O+2*i*H*HSJ  # # % %&&&cee"1N2"   6CJ$$_55D&CJJ 6 6 6&CJx1}}#(J $$_55DDDDDD 6$   11 |D211O"v7%w/ y1 -00|LLIx ''  (!$ 488HDDWT>5AABB   ; ; ; ; ; ;          LL84         5 5 5 5 5 5 > > > > > > ] K K K K K    LL?       tY%% 222222  L$..T:t44       t) t|/C  - -MD'4&& -dG,,, |  - -MD'4&& -dG,,,tV $sqJ A7BLL BML .BMMBMN8?CO8O8 CQP4CP;P;CQS.CTT(CT+T*CT+T/$CUU(CU?U>CU?__main__)rN)rP)F)NFNNrwr)rnN)rnrnNN)rnr()FN)rrr8rKr5rpathlibrtypingrrrrrCrrrrrrCrrEhermes_cli.env_loaderrFr9yaml _yaml_early _cfg_pathr/r_f safe_loadr_early_sec_cfgrr _early_redactrr7hermes_loggingrO_setup_loggingrS_load_config_earlyr.rT _apply_ipv4 _early_cfg_netr(rbrarXrrYrZr[r\r)rrrhrrrr"r+r8r[rcrrr~rrrrtuplerrr*r.rRrrXrWrr__annotations__rrrcrrrrrrrrrrrrrrrrrrrrrrrrr.rrrrprurrrrrrrrrrrrrrrrrrr rrr r'rr>rFrrrrrrrrrrrrrrrrrrrrzr|rr/r1rArRrYrWrr+r9rBrNrrrrrs***X      st$tH~~$+3355 33|$$%%%::::z.-----444444|f45555 bj00""""#O%% 5      i'222 Wb"7+"7";";"Ar!F!FzSU!V!V W W W W W W W W W W W W W W Wz.$// U . 2 23C D D  ,:=#m:L:L:R:R:T:TBJ67    D  >>>>>>N   D   CCCCCCEEEEEE##%%J >>)R ( (Dz$ $((<"8"8  $DD   D 44444444EEEEEEEE  8 $ $;#;;;;$odoooodpTphsmppppf  # (3-    $$Z%tZ%tZ%Z%Z%Z%z%s%x}%%%%P1 1$1111h 9 9 9 9 9 9 t     t4dt&60606060rU9DU94U9E$s)T/4JU9U9U9U9r(," ,,}, , C=,sm ,,,,^PPPfJYJYJYZ))) o'o'o'o'd    X * * * DsC}% &   $3*         @C<3"3"3"3"lD@sD@tD@D@D@D@V .K.K .K.K.K .K  .K.K.K.Kb'WC'W4'WD'W'W'W'WT12$$$$$N8888v6666riiiiXWWWWv ((((VHHHHVCCCL##* / / / /?C4Q4Q4Q4QnB B B B J=B=B=B@U/U/U/r/.....+#+$++++UUUUp||||~nDnDnDnDbllll^CC      nnnnbUUUUpttttnggggTZZZzHHHHV   >       D8///s/%/TW////d38'''4'4'D''''TE"E"E"P+DI+D+Xc]++++\ #Y!.1 c]$59     $,SM        &  ii #Yi ii i  iiii` G3 T#Y T hsm     #4" $s) $ 4     $s) $ 4     DI D  3 SV     DdDDDD   d3idt"oX49oX4oXDoXoXoXoXd849H"&/ / / S /  c3h$ /  / / / / d4444DF-F-F-F-F-F-F-F-RNNTNNNNb,-E-E-E`OQOQOQOQd222:m m m m m `GdGtGGGGTiiiX @ % % % %*W'W'W'tN zDFFFFFs\%;E) 'D E)DE)DA E))E10E15FFFAG00G87G8